Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!

10.6: Kerberos Utility is missing in action Apps
Not sure if this is a hint or a warning, but if you use the old Kerberos utility in Leopard and prior to get/set tickets manually, you're seemingly out of luck in Snow Leopard. Apple just removed the utility completely -- even on an upgrade, it's just deleted.

If you have 10.5 still available, though, the Leopard Kerberos utility works just fine on Snow Leopard. I really don't know why Apple leaves ancient Bluetooth firmware updaters cluttering my Utilities folder until the end of time, but removes a perfectly usable app, even if it has a small audience.

[robg adds: According to an associate at Macworld, the Kerberos utility has been renamed Ticket Viewer, and can be found in /System » Library » CoreServices. I haven't used either app, so I'm not sure if they're identical or not.]
    •    
  • Currently 1.78 / 5
  You rated: 1 / 5 (9 votes cast)
 
[25,378 views]  

10.6: Kerberos Utility is missing in action | 8 comments | Create New Account
Click here to return to the '10.6: Kerberos Utility is missing in action' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
10.6: Kerberos Utility is missing in action
Authored by: elfinabout on Aug 28, '09 08:13:07AM

Confirmed - "Ticket Viewer" is identical to "Kerberos".



[ Reply to This | # ]
10.6: Kerberos Utility is missing in action
Authored by: dreness on Aug 28, '09 07:04:18PM

They are not identical, although they are intended to serve a similar purpose. Ticket Viewer does not have all the features of Kerberos. For example, with Ticket Viewer, you cannot view or destroy service tickets as you can with Kerberos. To accomplish the tasks that Kerberos can do but Ticket Viewer cannot do, you can either use Kerberos in Snow Leopard, or use the kerberos command line tools such as klist, kdestroy, and kinit.



[ Reply to This | # ]
10.6: Kerberos Utility is missing in action
Authored by: quinntaylor on Aug 28, '09 08:24:22AM
Rob's source is correct, Ticket Viewer.app serves the same purpose as the old Kerberos.app. (I signed in with Kerberos SSO and the ticket appears in the window.) However, I looked on both 10.4 and 10.5, and the Kerberos app is also in /System/Library/CoreServices/. On Snow Leopard, the replacement app (which has been redesigned and is version 1.0, build 8) has the same icon as the old one. The window has been significantly redesigned and looks to be easier to use. However, it currently doesn't show individual service tickets, only the master TGT (with the user principal, not the service principal). Of course, the klist command in Terminal still displays everything in gory detail.

[ Reply to This | # ]
10.6: Kerberos Utility is missing in action
Authored by: slyborg on Aug 28, '09 09:32:22AM

Yeah, Rob sent me a reply on Ticket Viewer; "easier to use" is of course relative, if you mean "shows less information", then yes, the new one is definitely easier.



[ Reply to This | # ]
10.6: Kerberos Utility is missing in action
Authored by: wallsbk on Aug 28, '09 12:54:27PM
Note that Ticket Viewer is accessible from the Keychain Access menu in Keychain Access. As Kerberos Ticket Viewer was under Leopard. And as Keychain First Aid is in both.

[ Reply to This | # ]
10.6: Kerberos Utility is missing in action
Authored by: jaydisc on Aug 29, '09 02:36:30AM

Yeah, this is a real backward step.

* We've lost the ability to see what service tickets we have
* We lost the GUI Realm Editor



[ Reply to This | # ]
10.6: Kerberos Utility is missing in action
Authored by: vdanen on Aug 31, '09 08:41:25AM

This doesn't impress me at all. The Ticket Viewer is essentially useless. I was hoping for a better tool in 10.6. Maybe a menubar app that would indicate whether or not you held a valid TGT so you could easily enter your kerb password, or an auto-refresh when entering your system password (either via login or unlocking the screen from screensaver/sleep).

This is massive step backwards. The old tool was "ok" but this one is next to useless. Do we know if the same plist changes work to get the initial ticket on login still works? I've not tried, but my previous changes in 10.5 to enable it seem to be reverted.



[ Reply to This | # ]
10.6: Kerberos Utility is missing in action
Authored by: bernerus on Aug 31, '09 01:53:54PM

Not only we can't see the service tickets. We also lost the ability to set ant ticket options, or modify lifetime etc. :-((



[ Reply to This | # ]