Mac OS X v10.6: Generating a Kerberos Ticket Granting Ticket (TGT) during an Active Directory user's initial login

You may force the creation of a Kerberos TGT (Ticket Granting Ticket) at an Active Directory user's initial login by modifying the file authorization found in /etc.

This article has been archived and is no longer updated by Apple.

Follow the steps below to force the creation of the Kerberos TGT on initial login.

  1. Make a backup copy of the authorization file with this Terminal command:
    sudo cp /etc/authorization /etc/authorization.bak
     
  2. Open the /etc/authorization file in a text editor or plist editing application.
  3. Locate this key:
    <key>system.login.console</key> 
    
     
  4. Under mechanisms, add the string:
    <string>builtin:krb5store,privileged</string>
     
  5. Save the file to /etc  
     

The updated system.login.console section of the file should appear as follows:
 

 

Important: Information about products not manufactured by Apple is provided for information purposes only and does not constitute Apple’s recommendation or endorsement. Please contact the vendor for additional information.
Published Date: