How to login to kerberos from Mac OS X 10.3



Last revision January 28, 2009

You need to login to kerberos first with your SUNet ID and password before you can connect from Mac OS X 10.3 to the School of Earth Sciences File Server cluster, sesfs.stanford.edu.

System Requirements

Instructions on this page are only for Mac OS X version 10.3.9. They were last tested in 2009 and are not guaranteed to work! Another page gives instructions for Mac OS X 10.4. Versions earlier than 10.3 are not tested or supported.

Kerberos logins on campus from Mac OS X 10.3 used to be handled by the MacLeland application. Then the kerberos servers were changed and MacLeland was discontinued. It is no longer available for download.

If you have MacLeland version 2.3 already installed on your Mac OS X 10.3 system, you can download and run an updater application to make it work with the new kerberos servers. That option will be described first.

If you can't get MacLeland to work, you can run a command from the built-in Terminal application. That option will be described second.

Login using MacLeland

Since MacLeland is no longer available for download, this method only works if you have version 2.3 of MacLeland already installed on your Mac OS X 10.3 system. First, check your version. Find the MacLeland icon in your menu bar and select the About MacLeland... item, as shown in this screenshot:

If you do not have the MacLeland icon, or the window that appears shows a version other than 2.3, you cannot use this method to login. Skip to the instructions for logging in via Terminal.

Next, download and run the Panther Kerberos 5 Updater from the ITS MacLeland web site. You only need to do this once. If you have already run this updater, skip the updater instructions and continue with MacLeland login.

At this point, you have verified that you have the correct version of MacLeland, properly updated to work with the current campus kerberos servers. You are ready to login to kerberos. In the future, you will only repeat the step below.

Find the MacLeland icon in your menu bar and select the Login... item, as shown in this screenshot:

It will open this Authenticate to Kerberos login window:

Make sure the Realm: field says stanford.edu. The Name: field will be pre-filled with your account name from the Mac. Change it if necessary to be your SUNet ID name, and then type your SUNet ID password in the Password: field and click on the OK button.

If you typed your name or password incorrectly, you will get a "Kerberos Login Failed" message. Try again. There is no further response if you login correctly. You can verify your login status using the MacLeland menu.

If you logged into kerberos successfully, return to the instructions for connecting to file shares on sesfs.stanford.edu. If not, try the instructions below for kerberos login using the Terminal application.

Login using Terminal

This method uses the kerberos programs that are built-in to Mac OS X 10.3 and later versions. However, your computer must have the correct kerberos configuration. Download the Stanford kerberos configuration file named krb5.conf, move it to the /etc folder on your hard disk, and then restart your Mac.

If you logged into kerberos successfully, return to the instructions for connecting to file shares on sesfs.stanford.edu.