☰
Navigation :

Accounts and Authentication

Access to just about everything TIG has to offer is granted via your CSAIL Kerberos account.

Getting an Account

You can obtain a CSAIL Kerberos account, and optionally a CSAIL email account, by filling out the application form below.

Request an account here

Once you have applied for an account and your supervisor approves the request, you gain access to several new resources:

Will my CSAIL account go away when I leave?

When your affiliation with CSAIL ends, your CSAIL Kerberos account, AFS home directory, email delivery, and access to CSAIL systems will be affected.

For full details on what happens to your accounts, data, and email, including how to prepare before you leave, please see our departure checklist

CSAIL account expiration

CSAIL accounts for certain classes of users—students, visitors, affiliates, guests, alumni, and certain temporary employees—automatically expire at the end of every fiscal year (specifically, at midnight UTC on July 1, which is 8 PM on June 30 local time here in Cambridge).

Users who have changed PIs should notify help@csail.mit.edu of the name of the new PI and the name of the new research group so that their account can be updated. Notifications to PIs and supervisors are sent out annually at the beginning of June (usually the first business day). Users whose accounts are not renewed receive a notification email on or around July 1. Users’ accounts must be renewed or reactivated by their PI, supervisor, or CSAIL Human Resources. TIG CANNOT RENEW USER ACCOUNTS. Users may send individual reminders to their PI or supervisor to renew or reactivate their account, which can be done at inquir.csail.mit.edu/users/INSERT CAPITALIZED USERNAME (Some users have unusual expiration dates set by their supervisors and will not receive any notifications.)

CSAIL supervisors must approve the continuation of student accounts at the end of each Institute fiscal year. They may choose, at their discretion, to renew each student's account for a term or to allow it to expire. (Supervisors will receive mail a few weeks before the deadline with a list of users and a link to the appropriate WebINQUIR function.)

If your account is allowed to expire, you will lose access on July 1 following your last term. (Mail forwarding will continue indefinitely, as will Web service for files in your ~/public_html directory and Web forwarding from http://csail.mit.edu/.)

How do I change my Kerberos Password?

If you already know your password:

If you have forgotten your CSAIL Kerberos Password:

CSAIL Kerberos Account Password Requirements

Treat your Kerberos password like your Passport

Your Kerberos principal is your digital identity at CSAIL. You establish your identity using a username and password. However, you should think of your Kerberos principal like a passport. If someone gains access to it, they can very effectively pretend to be you, causing much destruction and pain for you if they desire. A CSAIL Kerberos principal unlocks access to a very large amount of network bandwidth and computation power, enough to cripple a small country if used maliciously. You are responsible for your Kerberos principal, so treat it well.

Some common mistakes people make with their CSAIL accounts include using the same password they use for low- or no-security applications like Gmail accounts, Dropbox, Facebook, or any other web-based free services. Such passwords are often gleaned and used to access login accounts, so you should choose totally different passwords for these two distinct types of applications.