AFP548 Changing the world one server at a time.

NHD: Kerberos ticket at login problem

Home › Forums › OS X Server and Client Discussion › Questions and Answers › NHD: Kerberos ticket at login problem

Viewing 1 post (of 1 total)
  • Author
    Posts
  • November 29, 2007 at 9:53 am #370645
    littlemonkey
    Participant

    Hi there,

    My issue is rather intriguing.
    I have something like 20 users on using NHD on OD (10.4.10).
    Some user recieve a Kerberos Ticket for krbtgt and afpserver at login but some do not.

    What I see in the ApplePasswordServer.Server.log is that some user ask for a Kerberos ticket automatically some not.
    All computer are bind to to the OD.

    Here is the ApplePasswordServer.Server.log:

    Nov 29 2007 08:42:56    RSAVALIDATE: success.
Nov 29 2007 08:42:56    AUTH2: {0x471bad42122561490000001a0000001a, usernotok} DIGEST-MD5 authentication succeeded.
Nov 29 2007 08:42:56    RSAVALIDATE: success.
Nov 29 2007 08:42:56    AUTH2: {0x471bad42122561490000001a0000001a, usernotok} DIGEST-MD5 authentication succeeded.
Nov 29 2007 08:42:56    QUIT: {0x471bad42122561490000001a0000001a, usernotok} disconnected.

Nov 29 2007 08:43:06    RSAVALIDATE: success.
Nov 29 2007 08:43:06    AUTH2: {0x471bad42122561490000001a0000001a, usernotok} DIGEST-MD5 authentication succeeded.
Nov 29 2007 08:43:06    QUIT: {0x471bad42122561490000001a0000001a, usernotok} disconnected.
Nov 29 2007 08:43:08    QUIT: {0x471bad42122561490000001a0000001a, usernotok} disconnected.

---

Nov 29 2007 09:18:05    RSAVALIDATE: success.
Nov 29 2007 09:18:05    AUTH2: {0x471ba8585e9fac5a0000000d0000000d, userok} DIGEST-MD5 authentication succeeded.
Nov 29 2007 09:18:05    RSAVALIDATE: success.
Nov 29 2007 09:18:05    AUTH2: {0x471ba8585e9fac5a0000000d0000000d, userok} DIGEST-MD5 authentication succeeded.
Nov 29 2007 09:18:05    QUIT: {0x471ba8585e9fac5a0000000d0000000d, userok} disconnected.
[b]Nov 29 2007 09:18:06    KERBEROS-LOGIN-CHECK: user {0x471ba8585e9fac5a0000000d0000000d, userok} is in good standing.
Nov 29 2007 09:18:06    QUIT: {no user} disconnected.
Nov 29 2007 09:18:06    KERBEROS-LOGIN-CHECK: user {0x471ba8585e9fac5a0000000d0000000d, userok} authentication succeeded.
Nov 29 2007 09:18:06    QUIT: {no user} disconnected.[/b]
Nov 29 2007 09:18:10    QUIT: {0x471ba8585e9fac5a0000000d0000000d, userok} disconnected.

    Where can I setup the option that every user ask for a ticket on log in???
    David

  • Author
    Posts
Viewing 1 post (of 1 total)
  • You must be logged in to reply to this topic.