Hi Christian,
thanks for your reply. I understand that I can still use kerberos or X.509 in case I have no Windows AD. In your statement what you actually meant is "You can use Kerberos if the MacOS systems are NOT part of a Windows domain..." is that so?
thanks
m./