How To: Script Generating a Kerberos Ticket Granting Ticket (TGT) during an Active Directory user’s initial login

Standard

I had this issue with a drive mapping app i create not mapping drives at initial login for AD accounts (this app will be discussed in another post shortly).

The Apple KB with the same title as this post advises how to fix, but if you wish to script it do the following:

WARNING: TEST, TEST, TEST THIS. ADDING AN EXTRA CHARACTER CAN LEAD TO YOUR MAC BEING STUCK IN A LOGIN LOOP. THE BELOW SHOULD BE ENTERED ON 2 LINES

3 thoughts on “How To: Script Generating a Kerberos Ticket Granting Ticket (TGT) during an Active Directory user’s initial login”

  1. Pingback: How To: Map Drives & Printers Based On AD Group Membership On OSX | macmule
  2. Clif

    Ben, is this necessary in 10.7 as well? I thought this modification was limited to 10.6 or below (?).

    • Ben Toms

      Hi Clif.

      Applies to 10.6 only.

      As a side note, 10.7 has a different flavour of Kerberos. Instead of MIT Kerberos, it’s Heimendal (not sure of spelling sorry).

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.