Mount password protected Samba share with Kerberos ticket
We use the dsconfigad tool - to enable single sign-on we need to fire the dsconfigad -enableSSO command, after that there is no need to retype the passwords, Kerberos tickets are being reused. 

To mount a Samba share subfolder automatically, you need to enable "Show connected servers" in the Finder preferences, then use cmdK to connect to the subfolder in Samba share, and create an alias on Desktop or wherever you want, after you can disable showing connected servers on Desktop. Then you can just click on the alias and it will open the shared subfolder.