[Freeipa-users] AD integration for ssh with kerberos

hi everyone, I'm having IPA with one-way trust to AD and it all seems to be working okey. What I would like to see is, a ssh which work off kerberos for AD's users logins, and also same for cifs clients to Samba. I'm reading up on OK_AS_DELEGATE but still it's not clear to me whether separate services needs to be created(then configured) for that (as I do not see anything regarding ssh nor cifs after plain trust setup). I'm trying(hoping it's possible) to do it without web/gui. Would you know of a doc/howto showing a process of getting sshd/samba to use kerberos for AD members? many thanks, L.