Provider Information: Kerberos for Macintosh (OS X)

Important note: this document is designed for Local Support Providers (LSPs). The user-level Kerberos for Macintosh document is here and includes general availability, configuration, documentation, and support information. This page was last modified on Monday, 02-Jul-2012 15:19:13 EDT.

MIT's Kerberos for Macintosh is the recommended Kerberos ticket manager for OS X (versions 10.4.11 and above) and is included in the current default installations of University supported versions of the OS X.

A Kerberos for Macintosh preferences installer (available below) has been configured to include the profile for the University's Key Distribution Center (KDC). This profile is NAT/firewall capable.

The default version of this installer (included on the current version of the PennConnect DVD-ROM and on the Kerberos for Macintosh Supported Products Page) attempts to detect for the use of Microsoft's Active Directory. This is done because installing the Penn Kerberos profile in an Active Directory environment will cause a loss of network connectivity.

In some cases, the default version of this installer will have a "false positive"—in other words, it will believe that the Macintosh is in an Active Directory environment when it is not. In this case, Information Systems & Computing (ISC) suggests using Custom Install within this installer.

OS X Lion Compatibility

Kerberos for Macintosh and the Kerberos for Macintosh preferences installer both function correctly in OS X Lion.

Download

• Download Kerberos for Macintosh 5.3.2