Macintosh Kerberos

Kerberos Initial Setup

• Kerberos Extras need to be updated for Panther (and probably Jaguar) installs or upgrades.
  http://web.mit.edu/macdev/www/osx-kerberos-extras.html
• Remove any edu.mit.Kerberos file which the previous step (Kerberos Extras) installed.
  Check /etc and /Library/Preferences and also check your own account's Library/Preferences area.
  That would be /Users/yourname/Library/Preferences
• Copy these files to your drive, and drag them into your HOME directory. (Use control-click to get a "Download linked files as..." option.)
  Get a copy of smb.conf.txt and krb5.conf.txt
• Now, copy into /etc and rename at the same time, so as to drop the .txt extension. (Requires priv to do this).
  Here's how to copy these files using the terminal (Applications->Utilities->Terminal):
  • sudo -s
  • give password
  • rm /Library/Preferences/edu.mit.Kerberos
  • rm /etc/edu.mit.Kerberos
  • cp smb.conf.txt /etc/smb.conf
  • cp krb5.conf.txt /etc/krb5.conf

Getting a Kerberos ticket

• Find the Kerberos GUI in /System/Library/CoreServices or in /Applications/Utilities (the Kerberos Extra package puts an alias there). Double click to start it.
• CLick & hold the icon in the dock, and choose "keep in dock" (or make an alias of it somewhere). You'll need to use it once each day.
• First usage only: do EDIT, EDIT FAVORITE REALMS. Make sure the realm FNAL.GOV is added to the left hand box, from the choices on the right. If you don't see FNAL.GOV anywhere, talk to somebody. You've got problems!
  Click DONE to put away this EDIT window.
• Click GET TICKETS.
• Enter your Kerberos username.
• The realm should be FNAL.GOV
• Enter your Kerberos password.
• Click OK.

Security, Privacy, Legal