Linux Authentication by Active Directory without joining to domain

I have a Win 2008 AD based network. I want to setup a few boxes with dual boot Win/Linux. How can I achieve to authenticate the users with existing AD in Linux?

All solutions - I have found yet - join the linux boxes to the domain. I think, this is a problem in case of dual boot and the same netbios name of the client. Are there possibilities without joining to domain?

The home dir should be on a nfs4 server (linux), so I need kerberos.

Which solutions are possible, which are most stable?

Thanks for any advice!

Sepp Hofbauer


You can make local accounts in Linux for the users but authenticate from kerberos. When users login to Linux they will get a kerberos ticket from AD. No need to join the domain.