AFP and Authenticate to Kerberos and local user accounts . . .

OS X server, 10.4.11, OD Master, Kerberos Enabled, AFP Authentication is set to “Any Method”

We have a few workstations (running 10.4.11) whose users are running off local user accounts rather than authenticating to the server and logging into network home folders.

For a few reasons, we want the design workstations setup with local user accounts if at all possible, but we still want to give them access to shared Network Libraries, etc. So, I just setup Directory Access and the client is correctly bound to the server.

Here’s the problem:
When you try to login to the server using AFP, the “Authenticate to Kerberos” window comes up. The user enters in their correct username and password. Then the “Select the volumes to mount” windows comes up. You select the volume, but then it mounts as NO R/W—even though the username and password credentials give the user full access to the share.

If you cancel out of the “Authenticate to Kerberos” and login with the same credentials in the AFP “Connect to Server” dialog window, the same share comes up with the correct privileges.

I’m obviously missing something. Is there anyway we can get Kerberos authentication to work correctly so that they have the correct access privileges to the sharepoints?

This may not even be an option. I am probably missing something, plus I am lacking an understanding of the AFP/Kerberos authentication process.

Thanks!

Tyler