User Information Home
Compute Resources
Software
Data
Security
Allocations
Consulting
Training
Strategic Applications Program

Installing Kerberos for Windows

These directions are for installing Kerberos for Windows (KfW) and OpenAFS for Windows XP. Send email to kerberos@ncsa.uiuc.edu if you encounter any problems.

Read first

Please take note that the new release of KfW from MIT does not come with kerberized telnet or ftp clients so if you need access to NCSA's Mass Storage System (MSS) you will want to continue using the old windows kerberos software.

Additionally, if you use Eudora with Kerberos for your email client you will wat to switch to using SPOP instead of KPOP.

If you have the old Kerberos Credentials Manager and/or AFS installed, please remove them before installing the new applications.

Installing Kerberos for Windows

1. Start by downloading the NCSA kerberos configuration file: krb5.ini   (Keep track of where you save this file.)
2. Download and run the KfW installer from MIT:
   kfw-3.0.exe
3. Continue through the installation until you get to the screen shown below. Check the Select a directory option and browse for the directory where you saved krb5.ini from Step 1.
   
   
   
4. Uncheck the Autostart option. If you don't uncheck this option everything will work, but you'll see errors if you connect to a network that requires aauthentication (like NCSA Wireless).
   
   
   

Installing OpenAFS

1. Download OpenAFS
   OpenAFS for Windows
   
2. Continue through the installation until you get to the screen below. Use the packaged CellServDB file.
   
   
   
3. Enter ncsa.uiuc.edu as your AFS Cell name.
   
   
   
4. Uncheck "Start AFS Credentials at system login"
   
   
   

Using KfW and OpenAFS

1. Start the Kerberos Network Identity Manager.
   Start -> All Programs -> Kerberos for Windows -> Network Identity Manager
   
   
   
2. Start the OpenAFS client and enter your username and password. Start -> All Programs -> OpenAFS -> client -> Authentication
   
   
   
3. Back in the Network Identity Manager you can force a refresh to make sure you have your initial Kerberos and AFS tickets.
   
   
   
4. Click the yellow lock icon (OpenAFS) in the system tray to bring up it's settings window.
   
   
   
5. Go to the "Drive Letters" tab.
   
   
   
6. After clicking "Add", enter the AFS path and drive letter you wish to mount it as.
   
   
   
7. Now you should see your new mount point in the "Drive Letters" tab.
   
   
   
8. To access the new drive, simply go to "My Computer" and find the new drive.
   
   
   

Back to NCSA Kerberos Information

Questions or comments about this page may be sent to kerberos@ncsa.uiuc.edu