116 reputation
1318
bio website
location
age
visits member for 3 years, 6 months
seen Jan 20 at 8:42

Jan
8
comment How can OS X perform “VPN Single Sign On”?
I really don't see how Kerberos answers this question, at all.
Jan
8
comment How can OS X perform “VPN Single Sign On”?
Unless I'm very much mistaken, this solution requires the user first to login successfully on the remote machine and then a VPN connection will be established? However, the whole "raison-d'être" behind single sign on was to handle scenarios where the user does not have valid credentials on the remote machine, but can instead authenticate against the corporate directory server—but only after a VPN connection is established. So I don't see how any solution that only initiates the connection after login has been authenticated can possible suffice.
Jan
8
comment How can OS X perform “VPN Single Sign On”?
I'm sorry, but this answer is terrible. Per the question title, I want to achieve SINGLE SIGN ON. Having to manually sign in to VPN is the antithesis of what I'm after. Irrespective, this solution requires the user to have an account on the computer into which they are signing in, which again is not the scenario here.
Jan
2
comment How can OS X perform “VPN Single Sign On”?
My current thinking is that I probably need a PAM module to start the VPN connection, before any attempt is made to authenticate the user in Open Directory. I would imagine such a module already exists... but where?
Jan
1
revised How can OS X perform “VPN Single Sign On”?
Simplified question with reference to Windows solution
Jan
1
comment How can OS X perform “VPN Single Sign On”?
@klanomath: Open Directory. Does that make a difference?
Dec
30
awarded  Tumbleweed
Dec
30
comment Cannot download app from family sharing (app already downloaded)
Oh, sorry. I overlooked the ios-appstore tag.
Dec
30
comment Cannot download app from family sharing (app already downloaded)
Are these two accounts on the same machine?
Dec
30
answered Who is able to access iMessage on Apple's servers?
Dec
30
answered Adding “local” to the DNS Search Domains has no effect
Dec
23
asked How can OS X perform “VPN Single Sign On”?
Dec
18
comment How can one start a process and monitor its syslog messages?
I think this rather misses the point of my question. I'm trying to avoid (a) writing these messages to the filesystem; and (b) making anything more than an ephemeral change to syslog's configuration. Use of tail in this fashion necessitates both.
Dec
18
asked How can one start a process and monitor its syslog messages?
Dec
11
comment ARD hangs on launch
@pknz: Yes—no difference.
Dec
11
comment ARD hangs on launch
@pknz: I'm already aware of that article (indeed, I linked to it from my question!). Are you suggesting it should solve my problem? Have I overlooked something? Please elaborate.
Dec
11
asked ARD hangs on launch
Nov
26
awarded  Popular Question
Nov
21
comment How to associate a route with an interface?
Thanks; I solved it with staticroute - great find!
Nov
21
accepted How to associate a route with an interface?