Questions tagged [kerberos]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
8
votes
1answer
10k views

kinit: krb5_get_init_creds: unable to reach any KDC in realm LOCAL

How I am supposed to configure Kerberos on OS X 10.8 ? I heard that this should work by default, just by calling kinit once. Still, I am on the corporate network (not joined any domain) and run kinit....
4
votes
1answer
930 views

SMB and AFP work for guest and Administrator but not other users

I'm having a problem getting file sharing to work between my MBPr and Mac Mini, here's a history of what I've tried: I have a MacBook Pro (Retina, 15-inch, Late 2013) running El Cap 10.11.1 (15B42) ...
1
vote
2answers
592 views

Windows authentication to sql server

I need to connect to sql server using Windows authentication on a mac. I want to use kinit but I have problem with generate DC name. On windows I ran command: nltest /dsgetdc:xx.xx.com And output ...
5
votes
3answers
3k views

macOS Sierra broke SSH Kerberos authentication

I have used Kerberos GSSAPI authentication together with SSH to connect from my Mac to work servers. However, ever since the macOS Sierra upgrade, I'm forced to enter passwords again. My ~/.ssh/...
0
votes
1answer
223 views

Mount password protected Samba share with Kerberos ticket

My iMac is connected to the Active Directory server, with no additional GID and UID setup, I can login to the OS X using AD user credentials, but I also need to mount the Desktops and probably other ...
1
vote
0answers
97 views

How do I configure Google Chrome to auto-reload refreshed kerberos tickets?

Current behaviour of Chrome om MacOS is that you have to restart the entire browser if your kerberos ticket expired and was renewed. It seems that Chrome is using the kerberos ticket that was ...
0
votes
1answer
435 views

Kerberos password

First of all, I have no idea how Kerberos ended up in my Mac. I have tried to reset its password but I don't even know what is the ID to use. So, please how do I reset Kerberos password when I have ...
0
votes
1answer
1k views

How to implement SSO on Mac and IPAD [closed]

We have a web application that uses SSO to authenticate users. On Windows everything works well. Now the question is how to make it work on OSX and IPAD? Is this possible in principle. I don't have ...
0
votes
2answers
2k views

com.apple.quicklook.satellite problem with CoreData on Networked Home Directories

I have a fully controllable test network set up to work this issue I've had each time I set up my SOHO network. The network now consists of a 2010 MacMini server, using RAID0, running 10.9.4 and ...
2
votes
0answers
1k views

How to disable Kerberos authentication attempts from my client?

Every time I try to connect to a simple file share set up on Mac client - started with Mavericks, is still an issue with Yosemite (not server version), I get a long delay. There are lots of references ...
3
votes
1answer
5k views

Disable Kerberos / Single Sign-on

We have a Mac mini running OS X 10.7 Server which has a number of shared folders/drives using AFP. We have a user account called fcp setup as sharing only which coworkers use to access the shared ...
0
votes
2answers
4k views

Why is my OSX client having so much trouble connecting to our SMB server?

I've already asked this question on ServerFault, but I'm beginning to think that this might be an issue more with my OSX client machine than our SMB server. I'm using 10.9, but this problem happened ...
0
votes
1answer
3k views

Is it possible to enable kerberos on OS X 10.9 without joining the Active Directory domain?

I would like to be able to take advantage of Kerberos without having to join my machine to the domain. Why? Because this is a personal machine and we are not allowed to join them the corporate domain ...
2
votes
0answers
265 views

Kerberos ticket not sent to server

I encountered a bug in Safari, where an internal website that has NTLM Negotiate enabled keeps reloading. Confirming with Wireshark, I see a continuous loop of Safari trying to request the page, and ...
1
vote
1answer
2k views

Can't login to Lync for Mac 2011

I am unable to login to my corporate Lync 2010 server. I'm up to date with Microsoft updates to Mac Office 2011. I've tried automatic and manual configuration. I've tried with and without Kerberos ...
0
votes
0answers
400 views

Spammed Log Message involving pam_sm_authenticate and Kerberos

Every minute this is logged in my system.log: Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Got user: andrew Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Got ...
0
votes
0answers
237 views

10.7 join 802.1x network via KDC instead of .cert?

So my 10.6.8 users have to sign in to our 802.1x network with their AD creds, using previously defined local profiles using PEAP. (I tried Login Window profiles, so that laptops would get online ...