Alan DeKok wrote:
DEFAULT Auth-Type := Kerberos Fall-Through = 1
An earlier message in this thread said "Auth-Type = Kerberos". What you have above is different.
An here in lies the problem. I just went back and tested this. I had been working with Walt Reynolds on the issue and we had shared some files and after that things started working with a Mac client but not with my Win XP client (one of the Xsupplicants we had installed had hosed the system so I couldn't tell when things had gotten better). According to the man 5 users page: Auth-Type = Kerberos is allowed for a server configuration variable such as Auth-Type, where as Auth-Type := Kerberos (note the Colon before the equal sign) is a check item and replaces in the configuration items any attribute of the same name. Having the colon there or not there made a very big difference in how it behaved. I really appreciate every one that took the time to help figure this out. We actually had it working before I saw Alans message but it's nice to know exactly what that tiny piece did. Thanks, LB