Kerberos For Windows

Kerberos For Windows

Kerberos provides authentication to CSAIL services including CSAIL OIDC, SSH, AFS, SAPGui, and others.

Recommended: Windows 4.x

Windows 4.x is the current recommended version for most CSAIL users.

For download and installation instructions, visit:

• MIT Kerberos for Windows (MIT Touchstone authentication required)

Alternative: Windows 3.2.x (AFS Integration Only)

Kerberos for Windows 3.2.x is only recommended if you need AFS integration. The 3.2.x version includes an AFS plugin that automatically obtains AFS tokens, which Windows 4.x does not provide.

Installation (3.2.x only)

• Download 64-bit installer
• Download 32-bit installer

Before installing:

• Uninstall any previous Kerberos for Windows versions
• On 64-bit Windows, install 64-bit version first, then 32-bit on top (after verifying 64-bit works)
• Run the .msi installer and follow the setup wizard

Usage (3.2.x)

1. Launch Network Identity Manager: Start → Programs → Kerberos for Windows → Network Identity Manager
2. Click Obtain New Credentials
3. Enter your CSAIL username and select CSAIL.MIT.EDU as your domain
4. Enter your password

Troubleshooting

“Clock skew too great” error

This error occurs when your computer’s clock differs significantly from network time servers (even by a few minutes).

Solution: Synchronize your system time:

1. Close all applications using Kerberos tickets
2. Use Network Identity Manager to sync time to time.mit.edu
3. Obtain new Kerberos credentials

Need help? Contact TIG or IS&T for additional support.