AFP548

LKDC question

Hi, today I had to rush out a couple of new laptops for deployment, and as I hadn't finished creating my production Leopard image I just restored a (mostly) setup laptop to the new laptops using Disk Utility. Now everything seemed to be fine, until I tried to bind the new laptops to my OD server (running 10.4.11). The first laptop was fine, and I was able to add it to one of my management groups, but when I went to bind the second laptop I was told that it was already bound to the server! It turns out that when doing authenticated binding with a Leopard client there are 3 entries made in the computer lists on the server: 1) laptopA$ 2) laptopA.local$ 3) LKDC:SHA1.xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx$ and when I had done the cloning the local KDC had also been cloned and the LKDC:SHA value was the same. So what I am wondering is how to easily recreate/rebuild the LKDC on a client machine so that it has a unique LKDC:SHA1.... value. I'm sure it's something that I should be able to do with kadmin.local, but I'm in need of some guidance. thanks in advance paul
Exit mobile version