Troubleshooting Kerberos

1. Check Date & Time are accurate and not ASKEW

2. Check that your user is actually using Apple’s “/usr/bin/kinit” (with “which kinit”) and not some kinit from some third-party application environment. Some report non-Apple kinit(s) as part of their issues
which kinit

3. If you are using macOS Catalina, you may not see a shortcut to Ticket Viewer. To open it press Command and the spacebar, type “ticket viewer,” and hit Enter.

4. Check Directory Utility for AD Binding?
odutil show nodenames
dsconfigad -show | awk '/Active Directory Domain/{print $NF}'


Enterprise Connect

Leave a Comment

Your email address will not be published. Required fields are marked *

Scroll to Top
Share via
Copy link