Tuesday, March 29, 2011

How to check a user's password from the command line using DSCL

Here is the command for checking a user's password via DSCL:

dscl /Active\ Directory/domainname authonly username

(where "domainname" is the name of the AD domain and "username" is the short name of an Active Directory user)

No output indicates that the user's password was verified. 

DHCP Error while importing scope "Option 6"

While importing a DHCP scope from a Windows 2003 to 2008 server I encountered an error:

"Error while importing option "6"."

This is a reference to the scope options in DHCP.  Option 6 is the DNS server, option 15 is DNS Domain Name, etc.

To remedy this particular error delete the offending options form the DHCP's "Server Options" and then attempt the import again.

Export (2003/2008): netsch dhcp server export c:\[filename.txt] all
Import: netsch dhcp server import c:\[filename.txt] all

More details on the error can be found here:

http://mykbit.blogspot.com/2010/03/error-while-importing-option-6-while.htmlhttp://mykbit.blogspot.com/2010/03/error-while-importing-option-6-while.html

Thursday, March 17, 2011

How to force a 10.6 client to generate a Kerberos ticket at login

Refer to this Apple KB article:


You need to add the string:

builtin:krb5store,privileged
 
Under the key:
system.login.console
 
In the /etc/authorization file

Generating a kerberos ticket from the command line in OS X

kinit [user name]

You will be prompted for the user's password