[OpenAFS-port-darwin] Re: modifications for /etc/authorization for OS X 10.4

[Patrick M McNeal]

> So I filed this as a bug to apple in their radar but found out how  
> to make it work before the eng. answered.
> Basically it follows the same pattern as everything else in /etc/ 
> authorization.  Be very careful and make a backup of authorization  
> as spelling is very important and if you mess up you will crash the  
> window server to tty mode and have to boot single user and fix it.
> Replace the authinteral string in the mechanisms array in the  
> system.console.login key as TIL 107154 says but use the string
>
> builtin:krb5authnoverify,privileged
>
> It was the ,privileged that kept throwing me until i realized  
> everything around this key was treated the same way (ie two string  
> separated by comma and the second seemed to be the same string).

Even if you get this working, I wouldn't use it with the login  
window.  As MIT has pointed out, there are some issues still being  
addressed.  Since MIT wrote most of the code, I'm willing to take  
their advice on this issue.