Active directory Kerberos OSX problems

Posted by Temotodochi on Super User See other posts from Super User or by Temotodochi
Published on 2012-08-31T14:56:55Z Indexed on 2012/08/31 15:42 UTC
Read the original article Hit count: 382

Filed under:

Windows

|

osx

|

active-directory

|

bind

|

kerberos

I'll try to keep this short, but informative.

I'm currently unable to bind OSX lion (10.7.4) machines to our AD. OSX kerberos (heimdal) is unable to locate the KDC service.

However i can bind linux & windows machines to the AD without any problems in the same network

AD controls the domain DNS and all the relevant _kerberos._tcp.x.domain.com and _kpasswd SRV DNS records are there and resolve fine when tried from OSX machines. Defined ports are open for service and manually accessible from OSX.

When i try kinit in the OSX, i can get the first auth through (wrong passwords fail instantly), but when supplied with correct password, kinit fails after some waiting with "unable to reach KDC".

All machines run NTP and have correct time.
During testing, network is not firewalled between the machines
Linux and windows machines have no problems whatsoever
I have tried with and without /etc/krb5.conf - OSX by default does not need it
- in the krb5.conf i used a working config from one of our linux machines.
dsconfigad fails with simple "connection failed to the directory server"

I'm a bit baffled with this. OSX is like the KDC is nowhere to be found and at the same time my test machines with windows 7 and some linux (centos 6 & debian 6) machines have no problems whatsoever. Same network, same configurations.

I'm missing some vital piece of configuration somewhere, and i can't find out what it is.

© Super User or respective owner

Related posts about Windows

Server 2012 DFS New Member Issue

as seen on Server Fault - Search for 'Server Fault'
I am trying to add a new member to our DFS topology. We have 3 DCs (VMs - VMware) running Windows server 2012, two servers are located in or Primary site and the third at our DR site. Currently the two servers at our primary site are currently replicating DFS (full mesh) and are working fine. I have… >>> More
error in IIS7 but not on IIS6

as seen on Server Fault - Search for 'Server Fault'
I have a website that is we are now deploying to windows 2008 servers that has worked in the past on IIS6 without a problem. It is using .net 2 framework. Most of the website works. Just when we create a screen report over a certain size on the server we get this error. Event code: 3005 Event… >>> More
error in IIS7 but not on IIS6

as seen on Server Fault - Search for 'Server Fault'
I have a website that is we are now deploying to windows 2008 servers that has worked in the past on IIS6 without a problem. It is using .net 2 framework. Most of the website works. Just when we create a screen report over a certain size on the server we get this error. Event code: 3005 Event… >>> More
Microsoft Management Console stops working when I add snap-in to it

as seen on Super User - Search for 'Super User'
I have Windows 7 Ultimate OS. I'm opening mmc.exe as administrator and trying add Certificates or any other snap-in, then while loading that snap-in MMC breaks and displays following message and after that it closes automatically once I click on close button on that message. What could be the problem… >>> More
Handling keyboard and mouse input (Win API)

as seen on Game Development - Search for 'Game Development'
There is a number of ways to catch mouse or keyboard under Windows. So I tried some of them, but every of them has some advantages and drawbacks. I want to ask you: Which method do use? I've tried these: WM_KEYDOWN/WM_KEYUP - Main disadvantage is that, I can't distinguish between left and right-handed… >>> More

Related posts about osx

OSX/Wine - Associating file extension (.php) with a Windows program on OSX

as seen on Super User - Search for 'Super User'
Greetings, I am running PSPad (a Windows programming editor) on OSX/Snow Leopard using Wine 1.1.35 I want to associate various file extensions (.php, .js, .html) with PSPad.exe OSX Finder does not allow this association -- I can only associate file types with $.app items in Applications. How do… >>> More
osx web service spawns icon in taskbar - osx - while drawing image

as seen on Stack Overflow - Search for 'Stack Overflow'
I have a web endpoint that displays an image of a string... When the following code is run (in tomcat) it spawns a java icon in the taskbar on OSX. Not sure if it is a problem, or whats going on. Looking for some sort of explination @RequestMapping("/text/{text}") public void textImage(HttpServletResponse… >>> More
Cannot disable spotlight indexing on volume

as seen on Super User - Search for 'Super User'
I have a FAT32 partition on my HDD. When using OSX, it is mounted to /Volumes/MEDIA. After a recent upgrade to Mavericks, spotlight is having trouble indexing it, eating up almost all of my system resources, and I cannot get the indexing to stop: [jay-mba-osx ~]% sudo mdutil -v -a -i off /: Indexing… >>> More
OSX - User home directories shared via NFS

as seen on Super User - Search for 'Super User'
Hi, I've run into some problems with how I've got user home directories set up on our system here. Our server is an XServe, using Open Directory to manage the user accounts. The majority of our workstations are OSX, but there are a few running Linux (Centos 5.3), and, as time goes on, we expect… >>> More
Can't connect to local IP address on OSX

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm trying to connect to a webserver that's running on my mac OSX 1.6. I'm able to connect to it locally using http://127.0.0.1:8888/myapp but when I attempt to connect to it using my machine's local IP address (http://192.168.1.15:8888/myapp IP shown below) from the same machine (or another on the… >>> More