This discussion is locked
Close
Q: can't login to Final Cut Server with AD group...
-
Oct 22, 2010 6:32 AMby willlandymore,yeah, I went through that and they ran successfully. I can also see it in the computers container within AD, but when I try to login as a AD user from the AD group with admin rights on the Final Cut box, it won't let me.
Do I have to Kerborize the Final Cut server after I performed those other steps? I remember seeing a button for that on the Mac but I haven't done that. Sorry, Mac is pretty new to me in this realm... -
Oct 22, 2010 10:00 AMby willlandymore,now when I run:
./adprincadd.pl -dc <fully qualified hostname of AD server> fcsvr/<fully qualified hostname of FCSVR machine>
I get:
No Kerberos TGT!
You must have kerberos ticket that allows writing to the computer record in AD. Use kinit to get a ticket
but kinit give me: Cannot find KDC for requested realm
How can I correct this so I can get the kerberos ticket and resolve this? -
Jan 13, 2011 11:39 AMby ___cory___,We had a similar issue. Some users were unable to log in on some machines. Sometimes their ability to log in on the same machine changed day-to-day. It was really random. We have a support ticket in with Apple, but we found that checking the "Use Kerberos DES encryption types for this account" in an AD account appears to fix Final Cut Server login problems.
