AD Kerberos Tickets Not Working

[thinkopen]

I’ve configured two Macs to connect to AD using the plugin, one running 10.4.11, the other 10.5.4; they can both authenticate to AD fine, and are issued Kerberos tickets. So far so good, when the 10.4.11 client connects to a SMB share on our AD (Win2K3) Server they are not prompted for login information and the share is mounted, however the 10.5.4 client is prompted for authentication credentials which leads me to believe that Kerberos is working fine on 10.4.11 and has an issue in 10.5.4, my question is has anyone seen something similar to this? If so, how did you resolve it? If not, where should I start looking for debug information?

Thanks

[thinkopen]

Yes it’s in the same domain and yes I’ve tried both the FQDN and the hostname, same result; the 10.4 client passes its KErberos ticket to the Domain Controller and isn’t prompted for credentials whereas the 10.5.4 client is.

[thinkopen]

Also, see this thread for more information regarding my Kerberos setup…

http://discussions.apple.com/thread.jspa?threadID=1649446&tstart=0

[thinkopen]

On my 10.4 client the format is:

[email protected]

[thinkopen]

Anybody able to help me figure this out?

[maximumjack]

I’ve had the same issue. I filed a bug report (5812444) with Apple back in March, and for a week or so had some dialog with them, but since then I’ve heard nothing. The bug is still listed as a duplicate (5897650).
If anyone has found a way to resolve this I’d love to know!

paul

[Author]

Posts