You are here

kerberos

Cosign SPNEGO

Informatics has added SPNEGO support to web servers which use the Cosign service. This means that Informatics users using compatible browsers - currently Firefox and Chrome on all platforms and Safari on MacOS to a limited degree (†) - can authenticate to such web services using their existing Kerberos credentials, and without being prompted for their username and password.

Kerberos for macOS

macOS comes with kerberos already installed.

There are two ways to authenticate to your DICE account using Kerberos on the Mac - using the command-line Terminal utility, or using the graphical Ticket Viewer. This document describes both.

Kerberos for Ubuntu

This document describes how to install and configure Kerberos for Ubuntu.

AFS for Debian / Ubuntu

This page describes steps to get connectivity with DICE AFS on a non-DICE Debian (or derivative, e.g. Ubuntu) system.

Super-quick Summary

This should work for most Debian >=10 and Ubuntu >=18.04 machines.

Run the following commands in a terminal. You might be prompted for some of the following:

Connecting from outside the University - an overview

An important aim of the Informatics computing infrastructure is that you should be able to easily and securely access your data, and make use of computing resources, from outside of the School's internal network. To do this, however, you will need to have certain software packages installed on your home computer. Although there are pages on this site telling you how to install such software, they don't necessarily explain what each piece of software does, why you might need each, and how they interact. This page tries to fill that gap.

Kerberos for Windows

Please note that, instead of following the instructions below, we now STRONGLY RECOMMEND that you use the version of Kerberos which comes as part of the Auristor OpenAFS client and follow the procedure detailed in AFS for Windows to obtain Kerberos credentials and (optionally) AFS tokens.

Why do we need Kerberos?

Note: This is an historical document, dating from the original design of the DICE infrastructure. It's retained here both for interest, and for the sake of the historical record.

Why do we need kerberos ?

Remote working

This page helps you to use School computers from home.

Before you start - data security

For essential security measures, and to learn what you must do before handling personal or sensitive data, see this page before going any further:

Subscribe to kerberos

System Status

Home dirs (AFS)
Network
Mail
Other services
University services
Scheduled downtime

Choose a topic