10.6 and Kerberos TGTs at Initial Login

Apple posted this KBase article today: Mac OS X v10.6: Generating a Kerberos Ticket Granting Ticket (TGT) during an Active Directory user's initial login http://support.apple.com/kb/HT4100 The following script should perform the steps outlined in the article. If you want to roll it into an InstaDMG payload-free CustomPKG set the variable "etcAuthorizationPath" to "$3/etc/authorization"[code]#!/bin/bash plistBuddyPath=/usr/libexec/PlistBuddy prefPath=:rights:system.login.console:mechanisms: etcAuthorizationPath=/etc/authorization freeArrayIndex=`$plistBuddyPath -c "Print $prefPath" $etcAuthorizationPath \ | grep ":" | wc -l | tr -d ' '` $plistBuddyPath -c "add $prefPath string" $etcAuthorizationPath $plistBuddyPath -c "set $prefPath$freeArrayIndex builtin:krb5store,privileged" \ $etcAuthorizationPath[/code]- Patrick