I had this issue with a drive mapping app i create not mapping drives at initial login for AD accounts (this app will be discussed in another post shortly).
The Apple KB with the same title as this post advises how to fix, but if you wish to script it do the following:
WARNING: TEST, TEST, TEST THIS. ADDING AN EXTRA CHARACTER CAN LEAD TO YOUR MAC BEING STUCK IN A LOGIN LOOP. THE BELOW SHOULD BE ENTERED ON 2 LINES
3 thoughts on “How To: Script Generating a Kerberos Ticket Granting Ticket (TGT) during an Active Directory user’s initial login”
Ben, is this necessary in 10.7 as well? I thought this modification was limited to 10.6 or below (?).
Applies to 10.6 only.
As a side note, 10.7 has a different flavour of Kerberos. Instead of MIT Kerberos, it’s Heimendal (not sure of spelling sorry).