Apple posted this KBase article today:

Mac OS X v10.6: Generating a Kerberos Ticket Granting Ticket (TGT) during an Active Directory user’s initial login
http://support.apple.com/kb/HT4100

The following script should perform the steps outlined in the article. If you want to roll it into an InstaDMG payload-free CustomPKG set the variable “etcAuthorizationPath” to “$3/etc/authorization”[code]#!/bin/bash

plistBuddyPath=/usr/libexec/PlistBuddy
prefPath=:rights:system.login.console:mechanisms:
etcAuthorizationPath=/etc/authorization

freeArrayIndex=`$plistBuddyPath -c “Print $prefPath” $etcAuthorizationPath \
| grep “:” | wc -l | tr -d ‘ ‘`
$plistBuddyPath -c “add $prefPath string” $etcAuthorizationPath
$plistBuddyPath -c “set $prefPath$freeArrayIndex builtin:krb5store,privileged” \
$etcAuthorizationPath[/code]- Patrick