Can somebody help with my SSO basic problem?

[topcat]

As Im new to all this, I have a problem that Im sure is very basic.

Our macs are bound to AD and OD. OD is only used to manage OD groups that contain AD users. When I login using an AD username on mac, it logs in fine and mounts the windows home folder as the mac home folder.

This is all great, apart from there seems to be no single sign on. Our internet goes through a proxy, so safari asks for authentication, itunes store asks for authentication and so on.

The xserve is NOT bound to AD, but I have set it as a Windows domain member in Server Admin.

How to I get AD SSO working?

[dom9inic]

Okay, what version of client are you running? Have you checked you are getting a Kerberos Ticket?

[topcat]

I am running 10.4.2 server and client.
I have just signed in on a client using AD and used the Kerberos app in system/library/coreservices. This app has one item in the ticket cache list, which is my AD email address. Bellow are a list of my tickets, there are three of these.
The first two are
krbtgt/[email protected]
krbtgt/[email protected]

and the last one is like:
[email protected]

So, it looks like I am getting tickets from the corect places, but if i load up safari, i am still asked to login.

[Author]

Posts