Mac OS X v10.6: Generating a Kerberos Ticket Granting Ticket (TGT) during an Active Directory user's initial login

You may force the creation of a Kerberos TGT (Ticket Granting Ticket) at an Active Directory user's initial login by modifying the file authorization found in /etc.

This article has been archived and is no longer updated by Apple.

Follow the steps below to force the creation of the Kerberos TGT on initial login.

  1. Make a backup copy of the authorization file with this Terminal command:
    sudo cp /etc/authorization /etc/authorization.bak
  2. Open the /etc/authorization file in a text editor or plist editing application.
  3. Locate this key:
  4. Under mechanisms, add the string:
  5. Save the file to /etc  

The updated system.login.console section of the file should appear as follows:


Important: Information about products not manufactured by Apple is provided for information purposes only and does not constitute Apple’s recommendation or endorsement. Please contact the vendor for additional information.
Published Date: