Skip to content Skip to site navigation Skip to service navigation

Install Kerberos Commander for Mac


Kerberos is a network authentication protocol designed to provide strong authentication for client/server applications. Stanford services that require Kerberos authentication include Stanford OpenAFS.

Kerberos is already built-in to Mac OS X. Kerberos Commander configures Kerberos for use with the Stanford network.

Install Kerberos Commander

  1. Download and run the Kerberos Commander installer.
  2. At the Welcome window, click Continue.

    introduction to Kerberos Commander installer
  3. Read the information on the screen and then click Continue.

    Kerberos Commander release notes
  4. When the license agreement is displayed, read it and click Continue. Then, click Agree to accept the terms of the license agreement and continue with the installation.

    license agreement
  5. Select your hard drive as the location where you want to install Kerberos Commander and then click Continue.

    select drive where you want to install Kerberos Commander
  6. Click Install to begin the installation.

    start the installation
  7. When prompted, enter your administrator account name and password for the Mac and click Install Software.

    computer administrator login prompt
  8. After the installation has completed, click Close to exit the setup wizard.

    installation completed

Authenticate to Kerberos

Be sure to log in to Kerberos before launching an application that requires Kerberos authentication (i.e.,  OpenAFS). Your Kerberos authentication is in effect for 25 hours.

There are several ways to authenticate to Kerberos:

  • Authenticate using the Kerberos Commander application.
  • Authenticate through Stanford Desktop Tools.
  • Set your Kerberos Commander preferences to prompt you to log in to Kerberos when you start up your computer.

Each of these methods causes the Kerberos login window to display. Authenticate using your SUNet ID and SUNet ID password.

log in to Kerberos

Authenticate using the Kerberos Commander application

  1. Open your Applications folder and navigate to Stanford > Kerberos
  2. When the Kerberos Commander main window displays, click Get New Credentials.
  3. Enter your SUNet ID and SUNet ID password in the Kerberos login window and click OK.
  4. Close the Kerberos Commander main window.

    Kerberos Commander main window

Note: To log out of Kerberos, click Destroy Current Credentials in the Kerberos Commander main window.

Authenticate using Stanford Desktop Tools

If Stanford Desktop Tools is installed, you can also bring up the login prompt by holding the mouse and clicking (or right-clicking or CONTROL + clicking) the Stanford Desktop tools icon Stanford Desktop Tools icon and clicking Authenticate to Kerberos.

authenticate to Kerberos

Launch the Kerberos login window at startup

If you set your Kerberos Commander preferences  to Add Kerberos Authentication to Login Items, the Kerberos login window displays at startup. See the  following instructions for setting preferences.

Last modified October 20, 2017