Mounting a Mac's SMB share from Linux without gutting the Mac's security

Short summary

Linux SMB clients fail to mount macOS shares because macOS accounts lack an NT hash unless Windows File Sharing is explicitly enabled, which weakens password security. The correct fix is to authenticate via Kerberos against the Mac's built-in Local KDC (LKDC), exactly as Apple clients like the iPhone already do. The post provides a full walkthrough including realm discovery, krb5 config, kinit, an SPN workaround, a self-discovering helper script, and a keytab-based automount setup.

• •Linux fails macOS SMB auth because no NT hash exists unless you weaken security by enabling Windows File Sharing
• •Kerberos to the Mac's LKDC works from Linux and avoids storing weaker credentials
• •Includes helper script for interactive use and keytab setup for automount

Generated with AI, which can make mistakes.