OS X V10.7 :: Kerberos Prompt Keeps Popping Up After Installing Lion
Apr 15, 2012
After updating to osx Lion I've been having trouble with a dialog box wanting me to enter my Kerberos user name and password. I have no idea why this happens and what user name / password it is asking for, I just hit cancel and everything else seems to work fine. But the dialog box keeps popping up again and again, it is pretty annoying. Can anyone tell me how to turn it off?
I am having difficulty troubleshooting this error. I have attached a section of the /var/log/opendirectoryd.log file while in debug mode. This is a 10.7.3 Open Directory master with no replicas. I put logging into debug mode to try to get to the root of this problem but I am not finding an answer to this issue. I am getting this same error message with multiple users, but they can all log in and function just fine. We are doing Radius auth to OD from our Cisco ASA for VPN connectivity and that works fine as well.
2012-03-12 11:30:09.119 PDT - Multiple names for non-user record 'wleler' - will be cache miss for others 2012-03-12 11:30:09.119 PDT - Module: SystemCache - Attaching Kerberos id 'wleler@OSXSERVER01.UTIL.PDX.OFFICE' to record 'wleler' 2012-03-12 11:30:09.119 PDT - Setting item 'wleler' with expiration 4061372012-03-12 11:30:09.119 PDT - Adding item 'wleler' with expiration 4061372012-03-12 11:30:09.119 PDT - Module: SystemCache - RBtree add - GlobalGUID - adding entry wleler (0x43E09310) -
Im having all kinds of 'not found' issues with lion server but i think alot of them may stem from not being able to stop kerberos from running on Open Directory.Therefore currently im running two Kerberos realms OD and Active directory.. When I try and stop it in terminal it errors see below...
shutting down kadmind kadmind shut down shutting down kdc
[code]....
then on server admin it shows kereberos for OD as "running".. still so i know it hasn't worked?
I've just upgraded to lion and when I go to prefrences in safari I get a prompt saying 'To open "PluginProcess" you need a java runtime. Would you like to install it now'. My question, Do I need this and what is pluginprocess, I know Apple have dropped java from thier OS, so why would Safari need it?
on setting up an OD master to accept kerberos from a AD domain and I can't get AFP to work.
What I've done:
1. Bind OD Master to AD 2. Destroyed the OD Kerberos realm 3. Ran sudo dsconfigad -enableSSO
When I log into a client that is bond to both AD and OD and try to access a SMB share on the AD side it works. When I try to access a SMB share on the OD master it work. When I try to access a AFP share on the OD Master it fails with the error " The user Authentication Method required by this server can't be found". Now I think this error is because I'm forcing Kerberos authentication, if I change AFP setting to any method authentication I get promoted with the AFP login window, I enter my AD account information and I'm able to mount the share.
I am able to access my Windows 7 machine's shares on my Mac (Lion 10.7.3) through SMB with no problems at all. However, I am unable to access my Mac's shares on my Windows machine.
I have been fighting with this issue for hours and haven't found a solution yet. I've done a bunch of Googling and have found plenty of posts related to my issue, but no solutions. Everyone seems to be at least receiving a login prompt when they try to connect to a Mac OS X Lion Samba share from a Windows 7 machine, but I am not. All I get is "Windows cannot connect to \MAC" after ~15-20 seconds of waiting.
Here's what I've tried:Reconfigured all of my settings on both the Windows and Mac systems, then restarted. Windows: set to 40- and 56-bit encryption for File Sharing, instead of 128-bit.Windows: network discovery and file sharing enabled.Windows: Network Security: LAN Manager Authentication Level to Send NTMLv2 response only” to “Send LM & NTLM – use NTLMv2 session if negotiated as suggested in another post.Windows: verified workgroup as WORKGROUP.Windows: verified Windows Firewall options for File Sharing.Windows: cleared credentials for my Mac's share in the Credential Manager, still no login prompt.Windows: reinserted my Mac's credentials in Credential Manager for the share, same issue. Mac: Enabled File Sharing, enabled SMB, enabled my Mac's account.Mac: verified Firewall settings for File Sharing.Mac: verified workgroup as WORKGROUP in WINS/NETBIOS configuration. For both systems: verified IP configuration as DHCP under the same gateway and subnet mask--they're clearly under the same network.
Since downloading the new OS Lion10, my screen display continues to change resolution (+4x) without any prompt, changing to a new app is the only way to go to the original resolution… Is there a setting that needs to be changed to stop this from happening
I go into System Preferences->Dektop & Screen Saver. As the program "loads" availabe image sources and such I get a pop-up requesting a password to my secure disk image. Yes, I have a secure disk image in my home directory. Yes, the secure disk image is currently "locked" (Not mounted in finder).
I click cancel (a few times, probably 2 maybe 3 times) and things continue along fine. I select a photo source that I want for a screen save and exit peferences. I then go an start the screen saver (I'm using Hot-Corners). I get the message "Looking for pictures....." for , well...basically forever...
Sure enough I touch the mouse to leave my screen saver and there is the pop-up again. Asking for me to unlock my secure disk image.
I thought this might be related to Spotlight. I tried reading several threads and have gone as far as taking my entire hard-drive/volume and putting it into the "Privacy" tab under spotlight.
how I might get it so the "Desktop & Screen Saver" stop prompting me to unlock my secure disk image? (WITHOUT having to make sure the disk image is unlocked before I sleep my screen or open the screen saver utlity) As always, I am only speculating that this is Spotlight related so that could be a red-herring....
When a user logs in, or tries to, it brings up Kerberos Agent and asks for a password. Anything you enter results in taking you back to the login screen? How do I disable this - all macs are running off of a Panther Server for login options.
I'm trying to get my leopard client to access sharepoints on my leopard server using kerberos authentication established at login. I'll list what I have done already bellow: - OD set up with a username (short and long) and password that is the same as that being used on the client laptop. - Client laptop is bound to the OD - modified /etc/authorization: <string>builtin:authenticate,privileged</string> to <string>builtin:krb5authnoverify,privileged</string>
When I log in it accepts my password and allows me into the laptop. The OD logs show that authentication to the server took place (I believe) (username and domain intentionally masked): Code: Feb 09 13:39:05 server.xxxx.priv krb5kdc[512](info): AS_REQ (7 etypes {18 17 16 23 1 3 2}) 10.0.1.121: NEEDED_PREAUTH: user@SERVER.xxxx.PRIV for krbtgt/SERVER.xxxx.PRIV@SERVER.xxxx.PRIV, Additional pre-authentication required Feb 09 13:39:05 server.xxxx.priv krb5kdc[512](info): AS_REQ (7 etypes {18 17 16 23 1 3 2}) 10.0.1.121: NEEDED_PREAUTH: user@SERVER.xxxx.PRIV for krbtgt/SERVER.xxxx.PRIV@SERVER.xxxx.PRIV, Additional pre-authentication required Feb 09 13:39:05 server.xxxx.priv krb5kdc[512](debug): handling authdata Feb 09 13:39:05 server.xxxx.priv krb5kdc[512](debug): handling authdata Feb 09 13:39:05 server.xxxx.priv krb5kdc[512](debug): .. .. ok Feb 09 13:39:05 server.xxxx.priv krb5kdc[512](debug): .. .. ok Feb 09 13:39:05 server.xxxx.priv krb5kdc[512](info): AS_REQ (7 etypes {18 17 16 23 1 3 2}) 10.0.1.121: ISSUE: authtime 1202564345, etypes {rep=16 tkt=16 ses=16}, user@SERVER.xxxx.PRIV for krbtgt/SERVER.xxxx.PRIV@SERVER.xxxx.PRIV Feb 09 13:39:05 server.xxxx.priv krb5kdc[512](info): AS_REQ (7 etypes {18 17 16 23 1 3 2}) 10.0.1.121: ISSUE: authtime 1202564345, etypes {rep=16 tkt=16 ses=16}, user@SERVER.xxxx.PRIV for krbtgt/SERVER.xxxx.PRIV@SERVER.xxxx.PRIV When I try to connect to an AFP sharepoint it again asks my to authenticate. If I authenticate once then I can access any other sharepoints with no problems, however, I'd like to be able to use the kerberos ticket I believe I have from the system login to do this AFP authentication.
How do stop the applications from popping up on my screen every time I turn on my Mac? It's been happening ever since a upgraded from Leopard to Lion. Or it has to do with Evernote.
Brand new MBP 15, 10.7.2, just got today. Migrated old MBP 13 which was 10.6.8. Now at random, a message asking for permission for incoming connections pops up at random for about 1/2 second. It's so fast I can't click on the allow or deny button. I shot video of the screen so I could actually see a frame. It says to fix it in Firewall, but I don't see anything about postgres listed there. But I don't even know what the heck postgres is. How do I stop this.
I have a 2010 mini that shipped with Snow Leopard. I hooked up to my TV with display set at 1080p and had no problems for a year and a half. I just installed Lion, though, and a few times now, when the computer wakes up from sleep, it has changed to a lower resolution. I can go back into System Preferences and change it back, but I don't think I should have to. This is a Mac, after all.
this seems pretty basic, but I can't seem to find a way to turn off the password prompt in Mac OSX.
I have an account for my parents, and they don't need a password, but if they try and install software etc - it comes up with the Password Prompt window. Obviously, you don't enter anything into the password field and just continue on, but seeing how there is no password in the first place, why does it still ask for one?
I've been a Mac user for a few years, but have never came across this - I always use a password
I just installed Boot Camp on my 15' MBP. I'm not all too thrilled that the MBP will boot up the default OS so I'm wondering if there any option/preference that will allow me to select which OS to boot every time I start up my computer? On my windows PC I had XP and 7 installed and I had the option to select which one to boot whenever I started up my laptop. Is there anything like this for a Mac? I checked the Boot Camp control panel and I didn't see any settings in there for this.
After re-installing Lion, my login accounts disappeared.I can only see the Guest account.However, when I boot with Windows, I can see the directories of my accounts.Currently, I can't login Mac OS.
Info: MacBook Pro (13-inch Early 2011), Mac OS X (10.7)
Until recently, Terminal 2.1.1 under Mac OS X 10.6.3 worked just fine for me. But now it has just stopped loading the prompt. I can open new Terminal windows but they are blank. I have tried logging out and in to my user account but this has not fixed it. I have made minor changes to my .bash_profile (see below) but all long before this problem began. I have not changed the directory structure so it should be able to CD to Dropbox/Drominay. I have not changed any preferences in Terminal other than those related to colour etc. In particular, it's still set to load the default login shell at startup.
I have enabled the prompt for a password when waking from screensaver and this works fine as long as I respond to the password prompt quickly. However, if I don't respond fairly quickly then the password prompt disappears leaving a black screen with just the mouse pointer visible. No matter what I type I can't bring the password prompt back up and therefore can't gain access. The only way I can do this is to press the power button and wait for 5 minutes or so before bringing it back out of sleep and typing my password more quickly.
The machine is a new iMac 2.4G 24" if that makes any difference. All latest updates applied.
My wife has a G4 iBook 1.33 GHz power pc, 1.5 GB DDR SDRAM, L2 cache 133 mHz, with Mac OSX - leopard - several times a day the following prompt appears - "You need to restart your computer. Hold down the power button for several seconds or press the restart button".
I do not know if this is in the write section, but oh well.
I pressed "option" to switch between drives but it came up that I needed to put in a password. I know the password anyways. Here is what I am getting at, is there any way when I boot my computer it can ask me for the password before getting to the desktop?
I'd like to know how to stop Mac from prompting me with the 'Enter an administrator account and password' dialog, I'd just like to install things, I do have a 'Managed' account (with Parental controls), but how do I stop that? is there a setting?
That little prompt you get when you go through the apple menu at the top left and hit shut down. It gives you 60 seconds, etc... I want to know how to initiate that from the terminal. I keep apcupsd running on my mac mini server, and if the power goes out, i want it to tell my machines to shut down. I already have a growl message setup letting me know when the power goes out (forwarded to my iphone over prowl, etc etc). I can ssh into the systems via bash scripting and issue the command, that's np. I just have no idea wtf the command is to throw that prompt.
