We’re using Leopard Server bound into our AD for our mail. I’ve setup Mail.app for our clients to use GSSAPI via MCX. Fairly regularly the users are presented with an authentication box that rejects their password. I’ve checked and they do get a kerberos ticket for IMAP. Kerberos is working fine for all other services. Looking on the server there’s an error about being unable to validate the machine account. I think it may have to do with client machines waking from sleep. Strangely running dscacheutil -flushcache on the server seems to correct the issue, for a while anyway. So I thought about setting up a script which ran that command every so often but looking in the man pages for dscacheutil it says you should only use flushcache in extreme cases. Does anybody know of another fix for this issue? Will running flushcache periodically cause any issues? Any help is greatly appreciated.
.
.
Comments are closed