Kerberos and 2 factor authentication

We need to use pkinit on BigSur in order to enable 2 factor authentication.

Expected:

kinit --anonymous

klist -l

Name Cache name Expires

* WELLKNOWN/ANONYMOUS@WELLKNOWN:ANONYMOUS API:D7D2F1EE-8680-417F-9F5F-6FD159CE29B9 Aug 13 13:20:02 2021

kinit --fast-armor-cache="API:D7D2F1EE-8680-417F-9F5F-6FD159CE29B9" user

but on BigSur:

kinit --anonymous

kinit: krb5_get_init_creds_opt_set_pkinit: PKINIT: No anchor given

Can you help me?

Thanks

MacBook Pro 15″, OS X 10.11

Posted on Dec 29, 2021 10:56 PM

Similar questions

How do I disable the constant reminders to enable two factor authentication MacBook Pro 13' mid 2012 running Sierra, long ago, I started getting notifications to enable two factor authentication and in error clicked "upgrade" and started the process. I bailed out once I realized this. To be clear, I fully understand the benefits of two-factor auth. I'm a network engineer, but it's just not something I'm ever going to use. My question is literally every time I use this computer, I get an annoying pop up to either finish setting up or enable two-factor auth. How do I stop this? Also if there is any way to set my Apple ID so that I am not constantly baited into setting two-factor auth up whenever I sign in on any device, the would be helpful too. Thanks in advance for any help.
1973 3
I wish to turn off 2 factor authentication Please help - I am so tired of 2 factor authentication. It takes ages getting through all the security when I simply want to look at my photos etc in iCloud. I have to write down the six figure security code which is a pain and time wasting. I am on Catalina, and saw something recently that it is now impossible to turn it off! Is this correct? I am asked every time if I wish to "trust this browser", I answer yes , and yet every time I have to still go this performance. Any idea anyone, please?
417 2
How do I Disable 2-Factor Notifications I accidentally clicked enable 2-factor authenication on my mac when I updated the OS. Fortunately, Apple knew people would decide to decline this mind numbing and probably useless level of added security. I know from hard experience acquired years ago at a corporate site and at a secure government site that this authentication method was to complicated for practical use. Consequently, I declined 2-factor authentication when I received the offer to do so and received this reply: Two-factor authentication for your Apple ID (mylogin@provider.com) has been turned off and your previous security settings have been restored. Unfortunately, my mac still wants to complete 2-factor authentication. How do I kill this notification bug so it stops asking me to complete the change over? I don't want to use this unnecessary and overly complicated security feature.
463 3

There are no replies.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Kerberos and 2 factor authentication

Welcome to Apple Support Community

A forum where Apple customers help each other with their products. Get started with your Apple Account.

Learn more Sign up