is your mac using dhcp/dns services from A/D? I ask to ensure that your mac's FQDN is the same as your A/D's FQDN. Your ticket maybe for ad-domain.domain.com but your mac may be trying to connect to ad-domain or domain.com. You can run a hostname from the command line to check the local mac's FQDN.
________________________________ From: Jeremy Anderson [mailto:[email protected]] Sent: Wednesday, February 18, 2009 11:07 AM To: NT System Admin Issues Subject: RE: OS X connecting to domain fileshare Just verified as well using Kerberos.app that I have a valid ticket that will expire in 9:58. Still being prompted for a user/pass when trying to connect to a share. ________________________________ From: Anders Blomgren [mailto:[email protected]] Sent: Wednesday, February 18, 2009 1:45 AM To: NT System Admin Issues Subject: Re: OS X connecting to domain fileshare To get SSO will depend on kerberos in this case. Start /System/Library/CoreServices/Kerberos.app and see if you have a TGT. If you don't try to manually acquire one with that tool. Otherwise your kerberos config file isn't properly setup, something that's been done automatically since 10.4 by directory services when you bind to an AD domain. -Anders On 2/18/09, Jeremy Anderson <[email protected]> wrote: I have an OS X 10.5.6 and it is successfully had been bound to the domain. The account shows up and I can log in using any domain user and password. However; when I try to "mount" or browse a share (I press the apple key + k) and I type in SMB://server/fileshare it prompts me for a user name and password. I can type in my user name and password and successfully access the shared resource. I want to just be able to browse / mount shares with out having to enter the user name and password, Am I missing somthing here? Itsn't that the point of single sign on? I have NOT extended my schema, is that why? TIA Jeremy ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
