I have a network domain running OpenLDAP, MIT Kerberos and Bind9. Now I want to enable some MS Windows hosts access to a NAS, in such a way that user credentials stay in my LDAP and Kerberos infrastructure. The obvious answer to this seems to be Samba, but after several weeks of struggling with integration work (I'm running this network at home for self-training purposes mainly, so I can't devote more than a couple of hours per day), it seems way too complicated to integrate Samba with my environment.
At this point, the only integration option that seems valid is setting up Samba in AD mode (which comes with its own LDAP and DNS, but should integrate with MIT Kerberos), and then work out the integration of my LDAP and DNS information with Samba via synchronization scripts. I regard this option as very error prone and resource consuming.
I believe that my network setup is pretty standard, so, which is the usual way to achieve file sharing with MS Windows hosts in this scenario? I feel that I'm missing something in the big picture. Maybe Samba is not the appropriate solution?