Description
When I try to connect to Universal Type Server with Universal Type Client 6.1.1 for Mac OS, I get “Your server credentials are no longer valid”. It happens when I use a directory user account but not a local UTS user account such as the default administrator account.
Solution
Universal Type Client 6.1.1 does not properly handle some Kerberos tickets when attempting to log in. This occurs even if the server is not set up for single sign-on using Kerberos.
There are two workarounds: clearing the Kerberos tickets before trying to log in allows users to connect, or reverting to Universal Type Client 6.1.0.
Downgrade to Universal Type Client 6.1.0
You can download the installer for UTC 6.1.0 from http://bin.extensis.com/UTC-6-1-0-M.zip.
To do a complete uninstall of UTC 6.1.1 before installing 6.1.0, see Uninstalling Universal Type Client on Mac OS X.
Clear the Kerberos tickets before trying to log in
There are two ways to clear the Kerberos ticket cache in Mac OS. Once you have connected to UTS, the problem does not occur and Kerberos tickets can be requested normally.
Clearing the Kerberos ticket cache from the Terminal application
- Open the Terminal application
- Enter “kdestroy -a” and press Enter
To verify that the Kerberos ticket cache is empty, enter “klist” and press Enter. You should see “No credentials cache file found”.
Clearing the Kerberos ticket cache from Keychain Access
- Go to \Applications\Utilities\ and open the Keychain Access application
- In the Keychain Access menu, select Ticket Viewer
- Select the Kerberos ticket and click Remove Identity
