macOS Sequoia Kerberos authentication to MIT Kerberos server not working after upgrade

after upgrading to Sequoia Kerberos stopped working. It worked fine before. The error I'm getting when trying it from the Terminal is: "kinit: krb5_get_init_creds: unable to reach any KDC in realm SERVER-1.MSP.GARY-SPRINGFIELD-MO.NET, tried 0 KDCs" I haven't changed any thing on my firewall either.

Mac mini, macOS 15.0

Posted on Sep 16, 2024 8:07 PM

Reply
Question marked as Top-ranking reply

Posted on Oct 31, 2024 8:52 PM

I just set up a Kerberos realm for my personal domain, and found that macOS Sequoia 15.1 on my MacBook Air doesn't seem to have an /etc/krb5.conf file.


You'll need to add one (or add the equivalent to your directory server, if you're bound to one) so Kerberos on your Mac knows about your realm.


I added an /etc/krb5.conf with the necessary information modeled on the one shown by "man krb5.conf" and was able to authenticate just fine after that.

7 replies
Question marked as Top-ranking reply

Oct 31, 2024 8:52 PM in response to ghorchem

I just set up a Kerberos realm for my personal domain, and found that macOS Sequoia 15.1 on my MacBook Air doesn't seem to have an /etc/krb5.conf file.


You'll need to add one (or add the equivalent to your directory server, if you're bound to one) so Kerberos on your Mac knows about your realm.


I added an /etc/krb5.conf with the necessary information modeled on the one shown by "man krb5.conf" and was able to authenticate just fine after that.

Sep 17, 2024 10:58 AM in response to ghorchem

ghorchem wrote:

after upgrading to Sequoia Kerberos stopped working. It worked fine before. The error I'm getting when trying it from the Terminal is: "kinit: krb5_get_init_creds: unable to reach any KDC in realm SERVER-1.MSP.GARY-SPRINGFIELD-MO.NET, tried 0 KDCs" I haven't changed any thing on my firewall either.


Did you try turning off the firewall and compare your results....(?)



to drill down further—


Call Customer Support (800) MY–APPLE (800–692–7753)


or on line https://getsupport.apple.com/


Outside the USA—Contact Apple for support and service by phone

See a list of Apple phone numbers around the world.

Contact Apple for support and service - Apple Support





Sep 17, 2024 11:28 AM in response to ghorchem

Forgive what may be a dumb question on my part, but have you confirmed with MIT that their authentication server is operational and that they haven't made any configuration changes? I only ask because once I spent a long time trying to figure out why a system I was working on wouldn't connect to a server only to find out that the server had been turned off. It would be a strange coincidence to have that happen at the same time you upgraded, but I've seen less likely things happen.


Regards.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

macOS Sequoia Kerberos authentication to MIT Kerberos server not working after upgrade

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.