Install Kerberos Commander for Mac

Overview

Kerberos is a network authentication protocol designed to provide strong authentication for client/server applications. Stanford services that require Kerberos authentication include Stanford OpenAFS and Stanford Instant Messaging.

Kerberos is already built-in to Mac OS X. Kerberos Commander configures Kerberos for use with the Stanford network.

Install Kerberos Commander

1. Download and run the Kerberos Commander installer.
2. At the Welcome window, click Continue.
   
   
3. Read the information on the screen and then click Continue.
   
   
4. When the license agreement is displayed, read it and click Continue. Then, click Agree to accept the terms of the license agreement and continue with the installation.
   
   
5. If you are prompted to select a destination, click the icon for where you want to install this software and then click Continue.
   
   
6. Click Install to begin the installation.
   
   
7. When prompted, enter your administrator account name and password for the Mac and click Install Software.
   
   
8. Next, enter your SUNet ID and SUNet ID password to log in to Kerberos.
   
9. The Kerberos Commander main window displays. Click Close.
   
   
10. After the installation has completed, click Close to exit the setup wizard.
    
    

Authenticate to Kerberos

There are several ways to authenticate to Kerberos:

• Authenticate using the Kerberos Commander application.
• Authenticate through Stanford Desktop Tools.
• Set your Kerberos Commander preferences to prompt you to log in to Kerberos when you start up your computer.

Each of these methods causes the Kerberos login window to display. Authenticate using your SUNet ID and SUNet ID password.

Authenticate using the Kerberos Commander application

1. Open the Applications folder and navigate to Stanford > Kerberos Commander.app.
2. When the Kerberos Commander main window displays, click Get New Credentials.
3. Enter your SUNet ID and SUNet ID password in the Kerberos login window and click OK.
4. Close the Kerberos Commander main window.

Note: To log out of Kerberos, click Destroy Current Credentials in the Kerberos Commander main window.

Authenticate using Stanford Desktop Tools

If Stanford Desktop Tools is installed, you can also bring up the login prompt by holding the mouse and clicking (or right-clicking or CONTROL + clicking) the Stanford Desktop tools icon and clicking Authenticate to Kerberos.

Launch the Kerberos login window at startup

If you set your Kerberos Commander preferences  to Add Kerberos Authentication to Login Items, the Kerberos login window displays at startup. See the  following instructions for setting preferences.

Set preferences

You can set your Keberos Commander preferences if you wish. Launch Kerberos Commander by navigating to Applications > Stanford > Kerberos Commander. In the Kerberos Commander menu, click Preferences. Then, select your preferences and click Configure.

• Configure Andrew File System (AFS) — if OpenAFS is installed, this associates Kerberos with OpenAFS.
• Configure Secure Shell (SSH) for Kerberos — if you are logged in to Kerberos, you don't have to enter your password to SSH to Stanford machines such as Farmshare. This is checked by default.
• Add Kerberos Authentication to Login Items — launches the Kerberos login window when you start up your computer.