Encountered on : Ventura 13.5 and above
We need to make sure that the client machine is Joined to the Domain via the GUI method using the instruction in the following link from Apple.
https://support.apple.com/guide/directory-utility/configure-domain-access-diru11f4f748/mac
Encountered on : BIG SUR 11.4
Behavior: MAC Clients are not able to connect to the Domain Using LDAP only.
We need to make sure that the client machine has the krb5.conf file locally along with the krb5.key.
Below is an example of the server default file of the krb5.conf file.
Please note that this is an example and that your information would need to be entered in for the default realm instead of EXACQ.COM.
This file can be placed in the /etc/krb5.conf.
NOTE:
This file would need to be on both linux and Mac units.
Below are a few links to assist with configuration of the krb5.conf file for Mac OS.
http://web.mit.edu/macdev/KfM/Common/Documentation/preferences-osx.html
http://web.mit.edu/kerberos/krb5-1.12/doc/admin/conf_files/krb5_conf.html
https://stackoverflow.com/questions/52409808/macos-sierra-kerberos