Tag Archives: unix

Instructions to install MIT Kerberos for Windows 3.2.2 and OpenAFS for Windows

64-bit

Download

Unzip this package to a temporary directory and run Deploy-Application.exe . Accept all prompts.

Run Network ID Manager “as administrator” (right-click on shortcut and select “run as administrator”).

In the General Options section, check the “Obtain New Credentials at Start” checkbox.

In the Options – Identity – User Identity section, select the default realm GRAND.CENTRAL.CMU.EDU, click DELETE and then click APPLY.

Set the desired cell and realm. For example, for access to ECE AFS enter the following (case sensitive).

cell: ece.cmu.edu

realm: ECE.CMU.EDU

Click Add/Update and then click Apply. Click OK.

32-bit

Install in this order.

MIT Kerberos for Windows 3.2.2 32-bit

OpenAFS 32-bit

Network ID Manager 2.0.102.907 32-bit

Additional files

%windir%\krb5.ini

hkcu-mit.reg (can be imported or merged)

Notes

Kerberos Realm and AFS Cell pairing

Each realm into which you login will have an identity in Kerberos

for Windows NetID Manager.   Each identity has a kerberos

realm and AFS cell pairing. Kerberos realms should be in All Caps.

AFS cells are case-insensitive. For example,

kerberos realm: ECE.CMU.EDU

afs cell: ece.cmu.edu

Microsoft Windows Options for Network Identity Manager

For GOECE Windows Domain Member computers:

The Kerberos v5 Configuration options within the Network Identity

Manager Configuration options should be set to Import:Never with

regard to importation of Microsoft Windows Domain Kerberos

credentials.

The Kerberos v5 Credential Caches within the Kerberos v5

Configuration options should be set to not Include Windows LSA cache

(MSLSA:).