Questions tagged [kerberos]
The kerberos tag has no usage guidance.
23
questions
0
votes
0
answers
92
views
How do I restart Kerberos
What OS process can I kill or force quit to terminate Kerberos? It's gotten into some bad state where choosing Sign in only brings up an empty white box (missing the normal prompts inside).
I use ...
- 125
1
vote
1
answer
240
views
samba.org install on Monterey serving files with Active Directory binding
My basic requirement is to use a macOS Monterey machine as a server (without running macOS Server, which is deprecated) to host SMB shares while using Active Directory as my network accounts source (...
- 11
0
votes
0
answers
2k
views
Kerberos and macOS: kinit unable to reach any KDC in realm AD.DOMAIN.COM, tried 10 KDCs
In our organization, we have 25 Active Directory Domain Controllers.
For our big sites, we have 2 DC per site.
We have about 50 MacBooks, with the rest being Windows laptops that doesn't have the same ...
- 1
0
votes
0
answers
2k
views
Error when creating Kerberos ticket: "unable to reach any KDC"
Do you know why I have this message when I use kinit?
kinit: krb5_get_init_creds: unable to reach any KDC in realm LOCAL, tried 0 KDCs
Thanks.
- 1
0
votes
0
answers
85
views
Cannot change admin account password on company-provided laptop
I have a macbook pro running macOS Big Sur 11.1 that was given to me by my former employer. They allowed me to keep the laptop after I left the company. When I try changing my password, I get this ...
0
votes
1
answer
202
views
How to kerberize services on Mac bound to Kerberos KDC on Linux?
I'm trying to kerberize services on an iMac that is bound to an external Kerberos KDC on a Linux computer.
I assume that I have to use sso_util and do it like this:
sso_util configure -v 7 -r ...
- 1
1
vote
2
answers
1k
views
Windows authentication to sql server
I need to connect to sql server using Windows authentication on a mac.
I want to use kinit but I have problem with generate DC name.
On windows I ran command:
nltest /dsgetdc:xx.xx.com
And output ...
- 111
0
votes
1
answer
1k
views
Mount password protected Samba share with Kerberos ticket
My iMac is connected to the Active Directory server, with no additional GID and UID setup, I can login to the OS X using AD user credentials, but I also need to mount the Desktops and probably other ...
- 113
1
vote
0
answers
240
views
How do I configure Google Chrome to auto-reload refreshed kerberos tickets?
Current behaviour of Chrome om MacOS is that you have to restart the entire browser if your kerberos ticket expired and was renewed.
It seems that Chrome is using the kerberos ticket that was ...
- 29.5k
5
votes
3
answers
5k
views
macOS Sierra broke SSH Kerberos authentication
I have used Kerberos GSSAPI authentication together with SSH to connect from my Mac to work servers. However, ever since the macOS Sierra upgrade, I'm forced to enter passwords again.
My ~/.ssh/...
- 151
0
votes
1
answer
791
views
Kerberos password
First of all, I have no idea how Kerberos ended up in my Mac. I have tried to reset its password but I don't even know what is the ID to use. So, please how do I reset Kerberos password when I have ...
- 39
0
votes
1
answer
2k
views
How to implement SSO on Mac and IPAD [closed]
We have a web application that uses SSO to authenticate users. On Windows everything works well. Now the question is how to make it work on OSX and IPAD? Is this possible in principle. I don't have ...
- 3
6
votes
2
answers
2k
views
SMB and AFP work for guest and Administrator but not other users
I'm having a problem getting file sharing to work between my MBPr and Mac Mini, here's a history of what I've tried:
I have a MacBook Pro (Retina, 15-inch, Late 2013) running El Cap 10.11.1 (15B42) ...
- 189
2
votes
0
answers
2k
views
How to disable Kerberos authentication attempts from my client?
Every time I try to connect to a simple file share set up on Mac client - started with Mavericks, is still an issue with Yosemite (not server version), I get a long delay. There are lots of references ...
- 76
0
votes
2
answers
2k
views
com.apple.quicklook.satellite problem with CoreData on Networked Home Directories
I have a fully controllable test network set up to work this issue I've had each time I set up my SOHO network. The network now consists of a 2010 MacMini server, using RAID0, running 10.9.4 and ...
- 636
0
votes
2
answers
5k
views
Why is my OSX client having so much trouble connecting to our SMB server?
I've already asked this question on ServerFault, but I'm beginning to think that this might be an issue more with my OSX client machine than our SMB server.
I'm using 10.9, but this problem happened ...
- 121
2
votes
0
answers
360
views
Kerberos ticket not sent to server
I encountered a bug in Safari, where an internal website that has NTLM Negotiate enabled keeps reloading.
Confirming with Wireshark, I see a continuous loop of Safari trying to request the page, and ...
- 121
0
votes
0
answers
450
views
Spammed Log Message involving pam_sm_authenticate and Kerberos
Every minute this is logged in my system.log:
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Got user: andrew
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Got ...
- 101
9
votes
1
answer
30k
views
kinit: krb5_get_init_creds: unable to reach any KDC in realm LOCAL
How I am supposed to configure Kerberos on OS X 10.8 ? I heard that this should work by default, just by calling kinit once.
Still, I am on the corporate network (not joined any domain) and run kinit....
- 29.5k
0
votes
1
answer
4k
views
Is it possible to enable kerberos on OS X 10.9 without joining the Active Directory domain?
I would like to be able to take advantage of Kerberos without having to join my machine to the domain.
Why? Because this is a personal machine and we are not allowed to join them the corporate domain ...
- 29.5k
1
vote
1
answer
2k
views
Can't login to Lync for Mac 2011
I am unable to login to my corporate Lync 2010 server. I'm up to date with Microsoft updates to Mac Office 2011. I've tried automatic and manual configuration. I've tried with and without Kerberos ...
- 1,347
4
votes
1
answer
7k
views
Disable Kerberos / Single Sign-on
We have a Mac mini running OS X 10.7 Server which has a number of shared folders/drives using AFP. We have a user account called fcp setup as sharing only which coworkers use to access the shared ...
- 1,730
0
votes
0
answers
255
views
10.7 join 802.1x network via KDC instead of .cert?
So my 10.6.8 users have to sign in to our 802.1x network with their AD creds, using previously defined local profiles using PEAP. (I tried Login Window profiles, so that laptops would get online ...
- 5,556