660      iPhone_iPad_Mac_apple

Extending of Kerberos TGT tickets via Touch ID

Hi,

We've recently started using some MacBook Pro's with touch bar in our company. We've joined all of them in our Active Directory domain where we use Kerberos / Single Sign On extensively.

Per company policy everybody is required to have a screensaver enabled with password protection so whenever you login at boot or you unlock your screensaver with a password you get a brand new TGT ticket valid for 10 hours which is great and works very well so far.

Now we were just wondering if it would be possible to get another TGT ticket when unlocking the screensaver via the Touch ID as well - since the user's password should be available in the keychain I guess it should technically be possible?

Because now we have some users who unlock their PC in the morning using the Touch ID but all their Kerberos tickets are expired.

Thanks,
Geert

最後更新：2017-08-25 00:42:28

  上一篇： do apple do student discount as well as free be...

  下一篇： What does this mean?