MIT Kerberos for Windows 4.0.x - Managing Kerberos Tickets

On this page:

Overview

You will need to get Tickets (called Kerberos credentials in previous versions of KfW) before you can use applications requiring Kerberos authentication. The MIT installation of KfW 4.0.x is pre-configured with ATHENA.MIT.EDU as the default Kerberos realm.

• When you start or restart your Windows system, the KfW Initialize Ticket window should open by default and you can get Kerberos credentials at that time, so they are ready and waiting when you go to a Kerberized application.

• If you open a Kerberized application and do not have credentials, the Initialize Ticket window should open automatically (although it may be hidden behind the application window).
• To initiate getting credentials, follow the steps below.

Obtain New Kerberos Credentials

1. Right-click on the MIT Kerberos (called "Leash" or "Network Identity Manager" in previous KfW versions) icon in the Notifications tray at the bottom-right of the Windows Taskbar. Or, go to Start > All Programs > Kerberos for Windows > MIT Kerberos Ticket Manager.
2. Click the icon "Get Ticket".
   Result: The Initialize Ticket window should appear.
   
   
3. Enter your Kerberos User Name and @ (for example "kerberosname@") The realm "ATHENA.MIT.EDU" will automatically populate.
   
   
   
4. Enter your Kerberos password and click OK.
   Result: A ticket is acquired, the Initialize Ticket window closes. The KfW Icon in the Notifications Tray is now green.
   

Note: Default settings include a ticket lifetime of 10 hours, tickets can be renewed, and have a renewable lifetime of 6 days and 21 hours. For more detail please see our Advanced Settings Page

Manage Credentials

1. To manage your Kerberos credentials, right-click on the MIT Kerberos for Windows icon in the Notifications tray and select Open MIT Kerberos window.
   
   Result: The KfW window appears. The time remaining on credentials is shown to the right of the Kerberos username.
   
   
2. Select the credentials you wish to destroy and click the Destroy credentials icon.
   
   Result: A confirmation dialoge box appears.
   
   
3. Click Yes to confirm you wish to destroy the credentials.
   
   
   
   Result: The Ticket no longer appears in the MIT Kerberos Window.
   
   
   Note: If there are no tickets, the MIT Kerberos icon in the Notification Center will be gray
   

Related Links