Hi Denis,
I saw this morning that a new version (2.7.0.19633) has been released. I haven't seen a changelog yet, but I've noticed that Mac authentication (without using a manually generated Kerberos token) is still broken:
Screenshot 2026-10-22 121415.png

I had to...

Hi Denis,
The problem in our case with the Macs is that our domain isn't accessible to the machines when they log in, only via a VPN that only runs once the session is open.
As a result, password rotation doesn't work, among other things.
We had to deploy MDM on these...

I've made some progress; you need to use the Kerberos name in uppercase: yoann.montouchet@AD.XXX.FR in the kinit command, and use a temporary file to store the token, then export the path to the token: `
kinit -c FILE:/tmp/krb5cc_$(id -u) yoann.montouchet@AD.XXX.FR
export KRB5CCNAME ...`

Hello,
We upgraded to version 2.7.19598 yesterday on our server (enterprise license). The server is running Debian 13 Trixie (also upgraded yesterday; previously we were on Debian 11 and then Debian 12).
Since this upgrade, we've noticed a change in behavior regarding self-service...

Okay, the first command fails on the problematic Mac:
>>> client = pyldap.PyLdapClient(domain_name="ad.xxx.xx")
>>> print(client.bind_sasl_kerberos())
(False, '')

It works on the Windows machine; my AD account appears correctly.

The second command works:
>>> pyldap.cldap_get ...

I just pulled up another Mac that appears correctly in the OU, but we're getting the same message as the Mac that's giving us trouble today. Could it be related to our infrastructure? We're on a Samba-AD server at the AD level, but it's only accessible through a VPN.

EDIT: I tried the same command on a...

That's strange, it seems it can't connect to Active Directory even though it's reachable, and I was able to add an Active Directory user on my end:
Screenshot 2026-03-02 145457 (Small).png

I'm going to try rebooting and starting again

. EDIT: It's the same after rebooting, VPN connected and...

Yes, it still works. I can confirm that the self-service package was the missing element. I don't know why adding it earlier didn't make everything work, but it's fine now.
Removing the package leaves the self-service area empty, and...

I confirm that the server configuration appears to be OK:
----------------------------------------------------------------
Test SSO SELFSERVICE LDAP with ldap_account_service_login
----------------------------------------------------------------
Username: yoann.montouchet
Group test member ...

Hello everyone,

I'm sorry to bother you with what seems like such a trivial problem, but I'm tearing my hair out trying to configure a WAPT agent on macOS 26.3.
The machine is freshly installed, the connection to the domain is OK, and the VPN is set up.
The machine is visible in the WAPT console, but...