Mac OS X v10.6: Generating a Kerberos Ticket Granting Ticket (TGT) during an Active Directory user's initial login
You may force the creation of a Kerberos TGT (Ticket Granting Ticket) at an Active Directory user's initial login by modifying the file authorization found in /etc.
This article has been archived and is no longer updated by Apple.
Follow the steps below to force the creation of the Kerberos TGT on initial login.
Make a backup copy of the authorization file with this Terminal command:
sudo cp /etc/authorization /etc/authorization.bak
Open the /etc/authorization file in a text editor or plist editing application.
Locate this key:
Under mechanisms, add the string:
Save the file to /etc
The updated system.login.console section of the file should appear as follows:
Important: Information about products not manufactured by Apple is provided for information purposes only and does not constitute Apple’s recommendation or endorsement. Please contact the vendor for additional information.