Kerberos can be managed interactively using kadmin.loca or kadmin (which edits the default realm by default): sudo kadmin.local To see a list of principals: listprincs To remove principals: delprinc user@YOUR.KERBEROS.DOMAIN To add a principal into that database: addprinc user@YOUR.KERBEROS.DOMAIN
-
-
Mac OS X: Troubleshooting Kerberos
First make sure your time is within the acceptable skew. Then, your first set of tools is kinit, kdestroy, kpasswd. Or just use the Kerberos.app in /System/Library/CoreServices. Next is kadmin and kadmin.local. More on those later.