OK, create a user for cifs, e.g. cifsuser and use ktutil to stick his key into /etc/cifs.keytab
Make sure that /etc/requestkey.conf has this line:
create cifs.spnego * * /usr/sbin/cifs.upcall -d /etc/cifs.keytab %k
(notice, there's no -c which tells mount to look for a key beginning with cifs/)
the -d /etc/cifs.keytab bit is if you applied the patch to cifs-utils which Jeff Layton sent me. I asked if we could have a switch to choose another keytab other than /etc/krb5.keytab. And he just dd it:) If not, stick cifsuser in /etc/krb5.conf and miss off the -d /etc/cifs.keytab
