Auto-Setup Emails Fail with kGotAuthenticationFailure

Question

If I set up my people with a shortname of "first.last", the auto-setup email fails to work when they click the setup button with "kGotAuthenticationFailure."
I do the dot in the shortname to facilitate more organized email addresses. I could do this by adding an alias, but I've found this confuses users as some services (like the wiki) only accept the true shortname.
I would really like for the auto-setup emails to work. Any suggestions for a fix?

Answer 1

Are the client Macs all created from a central image? If so, yes, it's a Kerberos key failure. The local KDCs need to be flushed from the image or from each Mac before you do your bind. Also good idea to discard the system keychain while you're at it.
Here's a simple sh script to do it.
#!/bin/sh
\# Delete System Keychain
rm -rf /Library/Keychains/System.keychain
\# Delete the local KDC database
rm -rf /var/db/krb5kdc
\# Regenerate the local KDC
/usr/libexec/configureLocalKDC
Message was edited by: thesunnyape
Message was edited by: thesunnyape