[Macpartners] Mac OS X 10.4 "Tiger" Update

[Helen Rose]

Note: I trimmed the CC: line. Jerry, please be careful when  
responding to announcements, and refrain from CC:ing hundreds.

On Jun 22, 2005, at 22:01, Gerald D Burke wrote:


> hi al,
>
> will is&t have a verions of 10.3 available for those new macs
> that come with tiger? how will departments get this version?
>
>

For machines that ship with Tiger, you should not downgrade your  
machine to 10.3. For all of the issues Al mentioned in his email,  
there are workarounds for most of them. For example, administrative  
users who need access to the SAPgui can use Citrix while waiting for  
Apple and/or SAP to release a fix.


> all use sap, and need ceritificates for stellar, and of course
> kerberos.
>

Kerberos is completely usable. The only known Kerberos issue is if  
you have implemented Kerberos tickets on login, which involves making  
modifications to the /etc/authorization file. If you have never  
edited this file, you (and your users) are not affected.

Even if you had implemented Kerberos tickets on login (which I had),  
the user is simply prompted for their Kerberos password again when  
they log in to their first Kerberos-enabled application (e.g.  
TechTime). The tickets will remain active for as long as the Kerberos  
application allows (typically 10 hours, although if you keep the  
application open, they will auto-renew).

For those not In The Know, there was a feature in Panther, aka MacOS  
10.3, which allowed users to obtain Kerberos tickets at login time,  
provided modifications were made to the aforementioned /etc/ 
authorization file. Once the user set their Keychain password to be  
the same as their Kerberos password, they did not have to type any  
more passwords for the remainder of the login session for any  
Kerberos-enabled applications. This feature is currently "broken" in  
Tiger, aka MacOS 10.4. MIT (who provides the Kerberos code to Apple)  
and Apple are working on a fix.

I don't know why you mentioned certificates, as there have been no  
issues at all with certificates in Tiger.


> i have one already installed and not having a problem with
> a kerberos version i downloaded fron the software distribution
> link, user in citrix for sap and some other mit apps.
>

What kind of "problem"? More detailed information would be helpful. I  
have three users (that's end users, not myself or anyone in my group)  
on Tiger, and apart from small glitches, including SAPgui and VPN,  
they have had satisfactory transitions, and are able to complete  
their work as usual.

--Helen
(Tiger Release Team)