Departments & Programs

More

How to login to kerberos from Mac OS X 10.3



Last revision January 28, 2009

You need to login to kerberos first with your SUNet ID and password before you can connect from Mac OS X 10.3 to the School of Earth Sciences File Server cluster, sesfs.stanford.edu.

System Requirements

Instructions on this page are only for Mac OS X version 10.3.9. They were last tested in 2009 and are not guaranteed to work! Another page gives instructions for Mac OS X 10.4. Versions earlier than 10.3 are not tested or supported.

Kerberos logins on campus from Mac OS X 10.3 used to be handled by the MacLeland application. Then the kerberos servers were changed and MacLeland was discontinued. It is no longer available for download.

If you have MacLeland version 2.3 already installed on your Mac OS X 10.3 system, you can download and run an updater application to make it work with the new kerberos servers. That option will be described first.

If you can't get MacLeland to work, you can run a command from the built-in Terminal application. That option will be described second.

Login using MacLeland

Since MacLeland is no longer available for download, this method only works if you have version 2.3 of MacLeland already installed on your Mac OS X 10.3 system. First, check your version. Find the MacLeland icon in your menu bar and select the About MacLeland... item, as shown in this screenshot:

If you do not have the MacLeland icon, or the window that appears shows a version other than 2.3, you cannot use this method to login. Skip to the instructions for logging in via Terminal.

Next, download and run the Panther Kerberos 5 Updater from the ITS MacLeland web site. You only need to do this once. If you have already run this updater, skip the updater instructions and continue with MacLeland login.

      This updater downloads as a disk image file named kerberos5_103.dmg, usually to the desktop. After it downloads to your Mac double-click that file to mount the disk image, which will be named Panther Kerberos 5 Updater. Open that virtual disk and double-click the Panther Kerberos 5 Updater installation package file to run the installer. The screenshot below shows these items on a Mac desktop:

      Answer the prompts and provide your local Mac account name and password that has administrative privileges. You will have to restart your Mac when done and then return to this web page. After the restart, you can delete the kerberos5_103.dmg file.

At this point, you have verified that you have the correct version of MacLeland, properly updated to work with the current campus kerberos servers. You are ready to login to kerberos. In the future, you will only repeat the step below.

Find the MacLeland icon in your menu bar and select the Login... item, as shown in this screenshot:

It will open this Authenticate to Kerberos login window:

Make sure the Realm: field says stanford.edu. The Name: field will be pre-filled with your account name from the Mac. Change it if necessary to be your SUNet ID name, and then type your SUNet ID password in the Password: field and click on the OK button.

If you typed your name or password incorrectly, you will get a "Kerberos Login Failed" message. Try again. There is no further response if you login correctly. You can verify your login status using the MacLeland menu.

If you logged into kerberos successfully, return to the instructions for connecting to file shares on sesfs.stanford.edu. If not, try the instructions below for kerberos login using the Terminal application.

Login using Terminal

This method uses the kerberos programs that are built-in to Mac OS X 10.3 and later versions. However, your computer must have the correct kerberos configuration. Download the Stanford kerberos configuration file named krb5.conf, move it to the /etc folder on your hard disk, and then restart your Mac.

Open the Terminal application. It is usually found in the Utilities sub-folder of the Applications folder, as shown in this screenshot:

In the Terminal window that opens, type the command kinit followed by a space and your SUNet ID name with the @stanford.edu suffix, as shown in this screenshot:

You must use your original SUNet ID, not one of your email aliases. Press the Return key to run the command. It will then prompt you for your SUNet ID password, as shown in this screenshot:

Type your SUNet ID password and press the Return key. If you typed your password incorrectly, you will get a "Kerberos Login Failed" message and another prompt to try again. Remember that passwords are case-sensitive. Make sure that the Caps Lock key is not pressed down.

There is no further response if you login correctly. Close the Terminal window when you are done, or if you give up because you can't remember your password!

If you logged into kerberos successfully, return to the instructions for connecting to file shares on sesfs.stanford.edu.

Comments or Questions?