How to Configure Kerberos

For help or if you have questions or problems, please contact the Solution Center, 192 Parks Library, or call IT Services at 294–4000.

Table of Contents

About Kerberos
Configuring Kerberos For Iowa State

About Kerberos

Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography. A free implementation of this protocol is available from the Massachusetts Institute of Technology.

Configuring Kerberos For Iowa State

IT Services has put together a Kerberos Configuration installer that will install the Kerberos preference file that has been configured for Kerberos 5 for use at Iowa State.

You can download this Kerberos Configuration installer from–0510.dmg (594 KB download).

To configure Kerberos 5 for use at Iowa State, double-click on the KerberosConfig–0510.dmg file if it did mount, then double-click on the KerberosConfig5.pkg installer package.

The Kerberos Preference File

The Kerberos preference file is located at /Library/Preferences/ and contains this information:

ticket_lifetime = 36000
default_realm = IASTATE.EDU
allow_weak_crypto = TRUE
noaddresses = TRUE
forwardable = TRUE

    kdc =
    kdc =
    admin_server =
    default_domain =

[domain_realm] = IASTATE.EDU = IASTATE.EDU

Last Updated July 19, 2016