ncsa

User Information Home
Compute Resources
Software
Data
Security
Allocations
Consulting
Training
Advanced Support for TeraGrid Applications

Macintosh Kerberos 5 Client

Downloading and Installing the Macintosh Kerberos 5 Client

1. Download the Macintosh Kerberos 5 Client from our server (restrictions apply).
   If you do not meet the required qualifications, then you need to use the SSH client software.

2. Once you have downloaded the Kerberos 5 client, you can expand it by double clicking on the icon or by using software such as the free StuffIt Expander 6.0 for Macintosh .

3. You should have a Folder on called "NCSA Kerberos for Mac Dist", inside there is a self-mounting disk image called "Kerberos for Macintosh 3.5.smi". Double-click on the self-mounting image and another disk will appear on your desktop called "Kerberos for Macintosh 3.5"

4. Open this disk and follow the instructions contained in the "KfM 3.5 Read Me" Document. You can ignore the section on Preferences since we will be using NCSA's preference file. This will install the base MIT kerberos software. After this you will need to continue with NCSA's modifications.

5. Back in the "NCSA Kerebors for Mac Dist" folder you will see folder called "NCSA KerbPrefs Install Last" inside there is another folder. Copy the contents, a file called "Kerberos Preferences," into your System Folder's Preference folder. Replace any existing file with the same name.

6. At this point you should reboot your Macintosh so that the kerberos system will recognize the new preferences.

7. The "Better Telnet" folder contains a version of Telnet that works with this distribution of Kerberos so copy that to your Applications folder on your Hard Drive.

8. The "Fetch - Mac FTP Clien" file is a web page location for a kerberos ftp client. It works with Kerberos ftp servers and now with the latest release NCSA mass storage systems.

9. Open the 'Date & Time' control panel and make certain the date, time, time zone, and daylight savings time flag are all set correctly. If you are using MacOS 8.5 or later please check "Use a Network Time Server" You will be unable to authenticate with the NCSA Kerberos server if your clock is more than 5 minutes off.

Using the Macintosh Kerberos 5 Client

The Kerberos Preferences that you copied into your Preferences folder is preconfigured for use at NCSA. If need be, you can use the Kerberos Control Panel to set up any realms and realm mappings that you need.

Launch BetterTelnet (ppc):

• Select 'Open Connection' from the 'File' menu
• enter a hostname
• select Authentication (you can also select Encryption if needed)
• select 'OK'

If you have not authenticated to Kerberos, you will be prompted for your password by the Kerberos Control Panel. After entering your password, you should then be connected to the desired host. Other than the Kerberos Control Panel, you should not be prompted for your login and password.

Once configured, use of the Kerberos plug-in for Eudora is transparent except for some slight differences in the messages displayed while your mail is being checked and the necessity of entering your Kerberos password about once a day.

---

Back to NCSA Kerberos Information

Questions or comments about this page may be sent to kerberos@ncsa.uiuc.edu