 |
 |
|
|
 |
||
|
|
|
|
Creating and Using Your MIT Kerberos IdentityOverviewComputer-based systems often require that each user has a unique username and a secure password to access those systems. Many MIT computer-based systems and services share the same username/password authentication service, Kerberos. This means a user has to keep track of only one username and password -- the user's MIT Kerberos username and password -- for many systems. KerberosMany network-based computer login schemes send your password across the network to the host computer to confirm your identity. Although good systems send the password in an encrypted form (e.g., via SSL), a number of computer systems actually send the password over the network "in the clear" (unencrypted), making your account vulnerable to "packet sniffers" (people illegally monitoring information passing over the network, particularly username/password pairs). Kerberos authentication bypasses both of these methods: when you enter your Kerberos username and password at a login prompt, the password is never actually sent across the network at all. Instead, it is converted into a specially coded format and in that form compared with a special time-stamped code string sent from the Kerberos authentication server. Your password isn't sent anywhere, yet your identity is confirmed. MIT has an open networking environment (for instance, we aren't behind a firewall), therefore, it is especially important to have secure authentication systems. Kerberos is the backbone authentication system for MIT's core computer systems. Establish Your Kerberos IdentityAll MIT community members (students, faculty, staff) are entitled to have an MIT Kerberos identity (primary username/password). To activate this identity you must register. See How to Activate an Athena Account for instructions on registering. When you register, you supply your MIT ID number, your real name, and (if you are a new student) a set of six "magic words". Then you can specify:
The act of registering also creates an account for you on the Athena system (including 1.5 GB of file space). Since establishing a Kerberos identity implies that you will be using networked computer services at MIT, registering for your Kerberos identity requires that you agree to abide by the MITnet Rules of Use. There are usually also additional rules for each of the computer systems or facilities that your Kerberos identity gives you access to (for example, since you are also given an Athena account when you register, you should see the Rules for Athena Facilities). Kerberos Identity UsesYour MIT Kerberos identity gives you access to a variety of systems and facilities on campus and on MITnet, some of which are listed below. These systems and services are primarily for current students, faculty, and staff of the MIT community. If you are a new student who has not yet started your first semester, certain MIT web sites and online systems are considered essential to your matriculation. For more details, see the pages: The First Year at MIT and Housing at MIT.
|
