Cosign SPNEGO

Informatics has added SPNEGO support to web servers which use the Cosign service. This means that Informatics users using compatible browsers - currently Firefox and Chrome on all platforms and Safari on MacOS to a limited degree (†) - can authenticate to such web services using their existing Kerberos credentials, and without being prompted for their username and password.

Kerberos for macOS

macOS comes with kerberos already installed.

There are two ways to authenticate to your DICE account using Kerberos on the Mac - using the command-line Terminal utility, or using the graphical Ticket Viewer. This document describes both.

AFS for Debian / Ubuntu

This page describes steps to get connectivity with DICE AFS on a non-DICE Debian (or derivative, e.g. Ubuntu) system.

Super-quick Summary

This should work for most Debian >=13 and Ubuntu >=22.04 machines. It was last tested with Ubuntu 22.04.

Run the following commands in a terminal. You might be prompted for some of the following:

Kerberos for Windows

Please note that, instead of following the instructions below, we now STRONGLY RECOMMEND that you use the version of Kerberos which comes as part of the Auristor OpenAFS client and follow the procedure detailed in AFS for Windows to obtain Kerberos credentials and (optionally) AFS tokens.

This document describes how to install and configure Kerberos for Windows. This procedure was last tested on Windows 10 (64-bit), but should be applicable to newer versions of Windows.