Skip to content Skip to site navigation Skip to service navigation

Install Kerberos Commander for Mac

This software is no longer in active development. Although it may still be used, it is no longer broadly supported.


Kerberos is a network authentication protocol designed to provide strong authentication for client/server applications. Stanford services that require Kerberos authentication include Stanford OpenAFS.

Kerberos is already built-in to Mac OS X. Kerberos Commander configures Kerberos for use with the Stanford network.

Install Kerberos Commander

  1. Download and run the Kerberos Commander installer.
  2. At the Welcome window, click Continue.

    introduction to Kerberos Commander installer
  3. Read the information on the screen and then click Continue.

    Kerberos Commander release notes
  4. When the license agreement is displayed, read it and click Continue. Then, click Agree to accept the terms of the license agreement and continue with the installation.

    accept the license agreement
  5. Select your hard drive as the location where you want to install Kerberos Commander and then click Continue.

    select your hard drive as the destination for the installation
  6. Click Install to begin the installation.

    click Install to perform a standard installation
  7. When prompted, enter your administrator account name and password for the Mac and click Install Software.

    enter your administrator password so you can install software
  8. After the installation has completed, click Close to exit the setup wizard.

    screen inidicating that the installation was successful

Authenticate to Kerberos

Be sure to log in to Kerberos before launching an application that requires Kerberos authentication (i.e.,  OpenAFS). Your Kerberos authentication is in effect for 25 hours.

There are a couple of ways to authenticate to Kerberos:

  • Authenticate using the Kerberos Commander application.
  • Authenticate through Stanford Desktop Tools.

Each of these methods causes the Kerberos login window to display. Authenticate using your SUNet ID and SUNet ID password.

log in to Kerberos

Authenticate using the Kerberos Commander application

  1. Open your Applications folder and navigate to Stanford > Kerberos
  2. When the Kerberos Commander main window displays, click Get New Credentials.
  3. Enter your SUNet ID and SUNet ID password in the Kerberos login window and click OK.
  4. Close the Kerberos Commander main window.

    Kerberos Commander main window

Note: To log out of Kerberos, click Destroy Current Credentials in the Kerberos Commander main window.

Authenticate using Stanford Desktop Tools

If Stanford Desktop Tools is installed, you can also bring up the login prompt by holding the mouse and clicking (or right-clicking or CONTROL + clicking) the Stanford Desktop tools icon Stanford Desktop Tools icon and clicking Authenticate to Kerberos.

authenticate to Kerberos

Last modified July 1, 2019