Troubleshooting Kerberos

1. Check Date & Time are accurate and not ASKEW
sntp pool.ntp.org

2. Check that your user is actually using Apple’s “/usr/bin/kinit” (with “which kinit”) and not some kinit from some third-party application environment. Some report non-Apple kinit(s) as part of their issues
which kinit

3. If you are using macOS Catalina, you may not see a shortcut to Ticket Viewer. To open it press Command and the spacebar, type “ticket viewer,” and hit Enter.

4. Check Directory Utility for AD Binding?
odutil show nodenames
dsconfigad -show | awk '/Active Directory Domain/{print $NF}'

5.

Links:
https://ist.mit.edu/macos/1015

https://discussions.apple.com/thread/1507640

https://discussions.apple.com/thread/252187490
Enterprise Connect

Comments

No comments yet. Why don’t you start the discussion?

Leave a Reply

Your email address will not be published. Required fields are marked *