<div dir="ltr">Has anyone been able to get the <a href="https://ist.mit.edu/sapr3/sapgui/740/mac">latest SAPgui</a> to work on a Mac OS X 10.11 machine that is bound to the WIN domain? We're using the WIN domain for authentication and authorization, but it appears the SAPgui doesn't work with kerberos tickets from the <a href="http://WIN.MIT.EDU">WIN.MIT.EDU</a> realm.<div><br></div><div>Installing <a href="http://ist.mit.edu/kerberos/extras/mac">Kerberos Extras for Mac</a> works if I destroy my <a href="http://WIN.MIT.EDU">WIN.MIT.EDU</a> tickets and then obtain a TGT for the <a href="http://ATHENA.MIT.EDU">ATHENA.MIT.EDU</a> realm, but then I'm unable to access DFS or other <a href="http://WIN.MIT.EDU">WIN.MIT.EDU</a> resources.</div><div><br></div><div>For what it's worth, here is my /Library/Preferences/edu.mit.Kerberos:</div>
<div><br></div><div><div>[libdefaults]</div><div> default_realm = <a href="http://ATHENA.MIT.EDU">ATHENA.MIT.EDU</a></div><div> forwardable = TRUE</div><div> proxiable = TRUE</div><div> noaddresses = TRUE</div><div> allow_weak_crypto = TRUE</div><div><br></div><div>[realms]</div><div> <a href="http://ATHENA.MIT.EDU">ATHENA.MIT.EDU</a> = {</div><div> kdc = kerberos.mit.edu.:88</div><div> kdc = kerberos-1.mit.edu.:88</div><div> kdc = kerberos-2.mit.edu.:88</div><div> admin_server = <a href="http://kerberos.mit.edu">kerberos.mit.edu</a>.</div><div> default_domain = <a href="http://mit.edu">mit.edu</a></div><div> }</div><div><br></div><div>[domain_realm]</div><div> .<a href="http://mit.edu">mit.edu</a> = <a href="http://ATHENA.MIT.EDU">ATHENA.MIT.EDU</a></div><div> <a href="http://mit.edu">mit.edu</a> = <a href="http://ATHENA.MIT.EDU">ATHENA.MIT.EDU</a></div><div><br></div><div>[v4 realms]</div><div> <a href="http://ATHENA.MIT.EDU">ATHENA.MIT.EDU</a> = {</div><div> kdc = <a href="http://kerberos.mit.edu">kerberos.mit.edu</a>.</div><div> kdc = <a href="http://kerberos-1.mit.edu">kerberos-1.mit.edu</a>.</div><div> kdc = <a href="http://kerberos-2.mit.edu">kerberos-2.mit.edu</a>.</div><div> admin_server = <a href="http://kerberos.mit.edu">kerberos.mit.edu</a>.</div><div> default_domain = <a href="http://mit.edu">mit.edu</a></div><div> string_to_key_type = mit_string_to_key</div><div> }</div><div><br></div><div>[v4 domain_realm]</div><div> .<a href="http://mit.edu">mit.edu</a> = <a href="http://ATHENA.MIT.EDU">ATHENA.MIT.EDU</a></div><div> <a href="http://mit.edu">mit.edu</a> = <a href="http://ATHENA.MIT.EDU">ATHENA.MIT.EDU</a></div><div><br></div><div><div>Thanks,</div><div><br></div><div>—Patrick</div><div><br clear="all"><div><div class="gmail_signature"><div dir="ltr"><div><br></div><div>IT Manager | <span style="border-collapse:collapse"><a href="http://povertyactionlab.org/" target="_blank">J-PAL</a> | <a href="http://mit.edu" target="_blank">MIT</a><a></a> </span>| +1 617-324-2721 | <a href="mailto:mcneal@mit.edu" target="_blank">mcneal@mit.edu</a><br></div></div></div></div>
</div></div></div></div>