I've installed Kerberos on the Debian machine that hosts an internal application, to be able to use it to authenticate users against our AD.
This works.
However, Kerberos seems to feel responsible for managing the linux user accounts on that machine as well and tells the admin to enter the "Current Kerberos Password" when he tries to change a users password.
Since I don't need nor want the linux users to be managed by Kerberos, is there a way to configure Kerberos that way, that it only acts when asked by Apache?
I realise there are some settings in /etc/pam.d/
but I'm unsure what changes would be save.