Can Kerberos be setup in a *nix environment such that authentication happens against an LDAP store other than AD but still trust the AD domain? Use case is that we have AD in use, there's no Kerberos for *nix, we don't want to register *nix hosts and services in AD but allow sign on for users authenticated by AD into hosts and services local to *nix. There is a separate LDAP store where all of the users registered in AD are also registered in addition to a number of users not in AD, the passwords are synchronized but we don't want to touch the AD infrastructure.
Thanks.