• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
Re: [Fed-Talk] Pkinit working on Snow Leopard but need forwardable TGT
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Fed-Talk] Pkinit working on Snow Leopard but need forwardable TGT


  • Subject: Re: [Fed-Talk] Pkinit working on Snow Leopard but need forwardable TGT
  • From: Joel Rennich <email@hidden>
  • Date: Wed, 19 Jan 2011 15:41:19 -0600

On Jan 19, 2011, at 7:24 AM, Glenn Machin wrote:

> Using the information on the attached guide I am able to login to my MacBook Pro with a Gemalto USB .NET smartcard and I authenticate to ActiveDirectory using PKINIT.   The problem is the TGT is not forwardable even though the /Library/Preferences/edu.mit.Kerberos config file calls for a forwardable TGT. (see attached screenshot)
>
> What config file or plist tells pkinit to get a forwardable TGT?

The documentation that you referenced was a work in progress.

For a variety of reasons, including the ones that Mr. Disiena has referenced, we highly recommend against using this for any purpose.

At this time if you need a PKINIT solution, we'd suggest that you look towards third party solutions.

Thanks,

Joel Rennich

Consulting Engineering Manager
US Commercial and Government Sales
Apple _______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:

This email sent to email@hidden

References: 
 >[Fed-Talk] Pkinit working on Snow Leopard but need forwardable TGT (From: "Glenn Machin" <email@hidden>)

  • Prev by Date: Re: [Fed-Talk] Pkinit working on Snow Leopard but need forwardable TGT
  • Next by Date: Re: [SmartcardServices-Users] [Fed-Talk] Re: Require smart card login
  • Previous by thread: Re: [Fed-Talk] Pkinit working on Snow Leopard but need forwardable TGT
  • Next by thread: Re: [SmartcardServices-Users] [Fed-Talk] Re: Require smart card login
  • Index(es):
    • Date
    • Thread