Project

General

Profile

Using Yosemite with Kerberos

These two pages are useful in dealing with Yosemite and Kerberos:

Before trying to use kerberos from your Yosemite laptop, you must do two things: change your kerberos password (with kpasswd) and be sure the /etc/krb5.conf file is up-to-date. You can get the new krb5.conf file from https://security.fnal.gov/without-afs-Lion-krb5.conf.

cluck, woof, and oink have been updated. The following command was issues, as root, on cluck to do the update. The others were done the same way, replacing cluck with woof and oink.

# kadmin -kt /etc/krb5.keytab -q "ktadd host/cluck.fnal.gov@FNAL.GOV"

For certificates, you can use the get-cert package at http://computing.fnal.gov/authentication/kca/get-cert-Lion.tar.gz.