Jonathon Mah on 2007-05-03 19:10:14
I've been setting up a Mac OS X 10.4 Server installation, and I came across a problem with Kerberos authentication, when trying to connect from 10.4 client. Some clients (not yet reading from the directory) would refuse to authenticate with Kerberos over AFP; it would just fall back to the standard AFP authentication dialog. Opening the Kerberos utility (/System/Library/CoreServices/Kerberos.app) and selecting Edit > Edit Realms… appeared to do nothing (when it usually opens a window). I used Server Admin to force AFP to authenticate via Kerberos only, and the troubled clients simply gave the message: “The user authentication method required by this server can't be found.”

After a lot of messing about, it turned out that without a Kerberos configuration file present (even an empty one), Kerberos would be very uncooperative. So it can all be fixed by simply creating one.

sudo touch /Library/Preferences/edu.mit.Kerberos