How to authenticate users against a Windoze AD server with krb5?

--===============1553300905==
Content-Transfer-Encoding: 7bit
Content-Type: multipart/signed; boundary="nextPart1587479.4UUjOIUjA8";
protocol="application/pgp-signature"; micalg=pgp-sha1

--nextPart1587479.4UUjOIUjA8
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

Hi list,

I'm trying to authenticate users against a Windows AD server using the=20
krb5 module... but due to missing documentation on how to do this, I'm=20
stuck.

When I try to get a Kerberos ticket using kinit on the radius machine,=20
it works. But when I try to use the krb5 module, it always gives me a=20
Reject...

Is there anywhere a detailed howto available? Google didn't help me=20
much... :(

Cheers
Arne

=2D-=20
Arne G=C3=B6tje (=E9=AB=98=E7=9B=9B=E8=8F=AF) <arne@linux.org.tw>
PGP/GnuPG key: 1024D/685D1E8C
=46ingerprint: 2056 F6B7 DEA8 B478 311F 1C34 6E9F D06E 685D 1E8C
Key available at wwwkeys.pgp.net. Encrypted e-mail preferred.


--nextPart1587479.4UUjOIUjA8
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQBCnB04bp/QbmhdHowRAkKuAKDVU4gUSw11UmFaCvy7FEi3YbjbmwCg/w8F
nJkJSJykQecquh5M3DWOwEE=
=LnpL
-----END PGP SIGNATURE-----

--nextPart1587479.4UUjOIUjA8--

--===============1553300905==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
--===============1553300905==--