Mailing Lists: Apple Mailing Lists
Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

CLI AFP Kerb=Yes, Finder AFP Kerb=No

Per the mount_afp man page you can insert a token into the afp_url parameter to manually specify Kerberos authentication like so:

mount_afp "afp://;AUTH=Client%20Krb%20v2@myserver/myVolume" /Volumes/ myVolume

This works great - I get a service ticket for afpserver/email@hidden (FQDN of course), AFP mounts, and I'm able to use the share authenticated as myself via Kerberos without manually authenticating.

However, when navigating via an Alias in the Finder, the Dock, the Sidebar, or Command-K (to afp://myserver - FQDN here, too) I get prompted for my password.

So, Kerberized AFP seems works fine (technically, at least), but Finder doesn't like it. The client in this scenario is a 10.5.2 client machine connecting to a 10.3.9 (I know, I know - it's on it's way out) Kerberized AFP service with a 10.5 OD in the mix. THis did work with 10.4 clients. Any ideas?

Thanks,
- Jesse

P.S. Please reply-all if you will as I don't always immediately review the list digest. Thank you.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macos-x-server mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/macos-x-server/email@hidden

This email sent to email@hidden


Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.