[30469] in Kerberos
Re: Mac OS X 10.5 automatic ticket creation tips?
daemon@ATHENA.MIT.EDU (Edward Murrell)
Fri Nov 21 14:55:06 2008
Date: Sat, 22 Nov 2008 08:54:22 +1300
From: Edward Murrell <edward@murrell.co.nz>
In-reply-to: <C54C1C7D.1E8FC%kgrindley@ll.mit.edu>
To: kerberos <kerberos@mit.edu>
Message-id: <1227297263.6040.6.camel@fusion>
MIME-version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Hi,
>From my notes for 10.4 for doing this a few years ago (at a company that
I no longer work for, so my memory may be fuzzy and/or out of date) you
need to run through the instructions here;
http://support.apple.com/kb/TA20987?viewlocale=en_US
AND you need modify the pam files in /etc/pam.d/
Hope that helps some. :/
Edward
On Fri, 2008-11-21 at 08:06 -0500, Grindley, Karl wrote:
> Greetings,
>
> I'm struggling with what should be a simple problem. I have a number of Macs and users that are authenticating into a kerberos realm. Authentication within the realm works without issue and Initial ticket creation on login. I'm using Russ Albury's krenew package to keep credentials renewed until the user gets a new ticket. Everything works great until the maximum renewable lifetime has expired, the user must manually kinit to get a new ticket. This is slightly annoying.
>
> However, on linux based systems using PAM, new tickets are requested from the KDC, extending the maximum renewal lifetime every time the user unlocks the console via screen saver. Is there a simple way to do this on the mac (specifically in leopard?) Does anyone have any good suggestions or tips?
>
> Thanks,
> Karl
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
