[Macpartners] Using SAPgui on WIN domain bound Macs?

[Patrick McNeal]

Has anyone been able to get the latest SAPgui
<https://ist.mit.edu/sapr3/sapgui/740/mac> to work on a Mac OS X 10.11
machine that is bound to the WIN domain? We're using the WIN domain for
authentication and authorization, but it appears the SAPgui doesn't work
with kerberos tickets from the WIN.MIT.EDU realm.

Installing Kerberos Extras for Mac <http://ist.mit.edu/kerberos/extras/mac>
works if I destroy my WIN.MIT.EDU tickets and then obtain a TGT for the
ATHENA.MIT.EDU realm, but then I'm unable to access DFS or other WIN.MIT.EDU
resources.

For what it's worth, here is my /Library/Preferences/edu.mit.Kerberos:

[libdefaults]
        default_realm = ATHENA.MIT.EDU
        forwardable = TRUE
        proxiable = TRUE
        noaddresses = TRUE
        allow_weak_crypto = TRUE

[realms]
        ATHENA.MIT.EDU = {
                kdc = kerberos.mit.edu.:88
                kdc = kerberos-1.mit.edu.:88
                kdc = kerberos-2.mit.edu.:88
                admin_server = kerberos.mit.edu.
                default_domain = mit.edu
        }

[domain_realm]
        .mit.edu = ATHENA.MIT.EDU
        mit.edu = ATHENA.MIT.EDU

[v4 realms]
        ATHENA.MIT.EDU = {
                kdc = kerberos.mit.edu.
                kdc = kerberos-1.mit.edu.
                kdc = kerberos-2.mit.edu.
                admin_server = kerberos.mit.edu.
                default_domain = mit.edu
                string_to_key_type = mit_string_to_key
        }

[v4 domain_realm]
        .mit.edu = ATHENA.MIT.EDU
        mit.edu = ATHENA.MIT.EDU

Thanks,

—Patrick


IT Manager | J-PAL <http://povertyactionlab.org/> | MIT <http://mit.edu> |
+1 617-324-2721 | mcneal at mit.edu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.mit.edu/pipermail/macpartners/attachments/20151119/621c83c6/attachment.html