So I feel we have a decent process for users on Linux (Ubuntu/CentOS) to access NFS shares, however there is rumbling of people wanting to use their Mac and Windows boxes to access the data shares.

The tricky part of this is we won't be able to enroll the Windows or Mac systems into FreeIPA.

So is there a "simple" way to allow users on Mac and Windows that can't be enrolled into the FreeIPA domain to access kerberized NFS shares? I think this is going to be difficult in general to windows and might have to swap to SMB?

For example, is there a way to download a SMB+Kerberos clients, grab the keys from IPA and allow users to manually authenticate with kinit and be able to access the NFS or a SMB share?