Mount Mac SMB shares from Linux via Kerberos without weakening security

A developer discovered that Linux clients fail to mount Mac SMB shares because macOS lacks an NT hash for local accounts, while Apple devices use Kerberos. The common fix—enabling Windows File Sharing—stores passwords less securely. The clean solution is to authenticate via Kerberos to the Mac's Local KDC, which works despite claims that non-Apple clients cannot obtain tickets.