[24567] in Kerberos
Re: question
daemon@ATHENA.MIT.EDU (Alexandra Ellwood)
Wed Aug 31 15:24:15 2005
In-Reply-To: <12E81F39195C00468C4DE42509951D3805714801@castor.richmond.edu>
Mime-Version: 1.0 (Apple Message framework v734)
Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed
Message-Id: <41F9EA7A-3E55-4567-8DAF-78D4648F153F@mit.edu>
Content-Transfer-Encoding: 7bit
From: Alexandra Ellwood <lxs@mit.edu>
Date: Wed, 31 Aug 2005 15:23:03 -0400
To: "Monaco, Jake" <jake.monaco@richmond.edu>
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
On Aug 31, 2005, at 1:28 PM, Monaco, Jake wrote:
> Hello,
>
> My name is Jake Monaco and I'm the Music Technology Specialist at
> the University of Richmond. We just recently upgraded to Mac OS X
> 10.4. When one student connects to his or her file share, the name
> and password are sticking even when the file share is trashed. We
> are prompted with the Kerberos Key Chain pass initially. I have
> tried trashing all preferences involving Kerberos but that does not
> work. I would like to get rid of Kerberos in its entirety on our
> lab computers. It is much easier for our set up for the students
> to use the "Connect to server" prompt.
If you are using Mac OS X Server for your file server (AFP), you
should use the Server Admin application to change your Authentication
setting to "Standard" (not "Any Method" or "Kerberos") for the AFP
service. This setting is in the "Access" tab under the Settings for
the AFP service.
If you do not want to use Kerberos at all, make sure you do not have
a "/Library/Preferences/edu.mit.Kerberos" file or a "/etc/krb5.conf"
file on your client machines. This will prevent the Authenticate to
Kerberos dialog from automatically appearing in response to
applications negotiate Kerberos. Note that some applications may
still programmatically generate the dialog even if you have no
Kerberos configuration (hence my recommendation to turn off Kerberos
support in your AFP server).
Hope this helps,
--lxs
Alexandra Ellwood <lxs@mit.edu>
MIT Kerberos Development Team
<http://mit.edu/lxs/www>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos