This is the traditional method for managing Kerberos credentials, because Kerberos pre-dates most modern graphical operating systems. This document describes the basic Kerberos-related tasks on both of those tools.

Using the included, but hard to find, Ticket Viewer.app.īoth methods can be used for the basic tasks of authentication to Kerberos.

The traditional method of working from the command line in Terminal.app.

There are two methods for working with Kerberos authentication on macOS: Learn more about Kerberos on macOS and Kerberos at Stanford. It's a somewhat non-standard file name that has been a part of macOS since the beginning. Kerberos is configured for Stanford in a file that is user-installed in /Library/Preferences/. To change your Kerberos password go to Account Manager.

The command to change your Kerberos password, /usr/bin/kpasswd, is included in the Apple Kerberos system but is not used at Stanford.

The command to delete current TGTs: /usr/bin/kdestroy.

The command to display currently held TGTs: /usr/bin/klist.

This is also referred to as “acquiring a TGT or ticket-granting ticket.'

The command to authenticate to the Kerberos system: /usr/bin/kinit.

The files for working with Kerberos are located in the folder /usr/bin. It has evolved along with macOS over time.Īt Stanford your SUNetID is your Kerberos identity. The Kerberos subsystem has been included in macOS since its initial launch in March 2001.

Network tool for mac os