Difference: MacOSXKerb (1 vs. 2)

Revision 2
26 May 2006 - Main.TomRockwell
Line: 1 to 1
Line: 8 to 8

The OSX Kerberos client stores tickets in memory instead of on disk and has the feature of being able to maintain multiple cached tickets. Additionally, there is a handy GUI available.
The ssh on OS X 10.3+ works with Kerberos tickets.




Like any other Kerberos client, you need to setup the a configuration file for the realms you want to get tickets for. Attached is an example that works for FNAL.GOV, heplinux.pa.msu.edu and HEP.PA.MSU.EDU realms. This file needs to be named edu.mit.Kerberos and placed in /Library/Preferences. Download the config file, open a terminal in the directory and then issue the command:

sudo cp edu.mit.Kerberos /Library/Preferences
sudo chown root:admin /Library/Preferences/edu.mit.Kerberos


OS X includes a nice GUI for ticket management etc. It is named Kerberos.app and is in /System/Library/CoreServices. I suggest putting this on your Dock for quick access...

Since the MAC can have multiple tickets cached at once, the GUI has a pull down for selecting the active ticket. There is also a command line util named kswitch which sets the active ticket.

Integrate with X11

Apple's X11 package includes a simple customizable Applications menu for launching programs. We can create menu items that launch an X11 window that opens an ssh session to a given node. With Kerberos we won't even have to give out password (if we have a valid ticket).

Here is an example (see the linked screen shot as well):

Menu Name Command
cap kswitch -p rockwell@HEP.PA.MSU.EDU; xterm -e ssh -Y cap
  -- TomRockwell - 25 May 2006
META FILEATTACHMENT attr="" comment="Kerberos config file a.k.a. krb5.conf" date="1148607793" name="edu.mit.Kerberos" path="edu.mit.Kerberos" size="902" user="TomRockwell" version="1.1"
META FILEATTACHMENT attr="" comment="What the GUI looks like..." date="1148607851" name="kerberos-gui.png" path="kerberos-gui.png" size="52765" user="TomRockwell" version="1.1"
META FILEATTACHMENT attr="" comment="X11 Applications Menu Customization" date="1148609391" name="x11-custom-apps-menu.png" path="x11-custom-apps-menu.png" size="120854" user="TomRockwell" version="1.1"
This site is powered by FoswikiCopyright © by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding Foswiki? Send feedback