Is a separate Kerberos server required?

Question

NFS

I want to set up an NFS server (v4) on Ubuntu Server. What is the right way to make sure that only some domain users can access the NFS server?
Many manuals say that you need to deploy a separate Kerberos server to authorize clients. But if there is a domain controller (Windows Server) in the network, is it really impossible to get by with just this controller?
Ubuntu Server I entered into the domain. When I entered the domain, it was necessary to install Kerberos and generate a ticket using kinit. Therefore, there is a second question - is it necessary that the NFS server be in the domain?
If not necessary, then what if Samba is installed on Ubuntu Server? For her, it is important that the server is in the domain.
*UPDATE: Found an article, where everything is signed point by point.