We are operating a set of MIT KDC's for authenticating users on a number of Linux-based computers at our site; we recently deployed an Active Directory domain for Windows 7 and Server 2008R2 systems to use with a trust relationship with the MIT KDC's. The kerberos realm and domain name are different (kerberos realm is DOMAIN.SCHOOL.EDU, where AD domain name is AD.DOMAIN.SCHOOL.EDU). User mappings work fine for authenticating users on Windows computers via the MIT KDC.
For a number of reasons, we are considering phasing out the MIT KDC's in favor of using the Active Directory KDC's for all user authentication, Linux and Windows. We would need to transition all the user prinical data from the current MIT KDC's to a domain controller, though.
My question: is this possible? And if so, are there any pointers for doing such a transition?
John