[Menu Bar]

Connecting To ARSC From Non-ARSC Kerberos Realm

If you received your SecurID Card from a DoD MSRC, then ARSC is not your primary kerberos realm. You must get your kerberos password (what ARSC is calling a "passphrase") and SecurID Card PIN number from your home site.

If you have not yet used Kerberos/SecurID, follow this outline:

If necessary, contact User Support. They should be able to give you your kerberos password (passphrase) and SecurID Card PIN number.
Set your kerberos client up to authenticate from the KDC (kerberos distribution center) at your home site.
You'll also need to add ARSC to your kerberos client's configuration file (Unix/MacOSX krb5.conf file or PC equivalent).

In the [Realms] section add:
```
  ARSC.EDU = {
    kdc = kdc1.arsc.edu
    kdc = kdc2.arsc.edu
    admin_server = kdc1.arsc.edu
    default_domain = arsc.edu
  }
```
In the [domain_realm] section add:
```
  .arsc.edu = ARSC.EDU
```
For Unix and Mac OSX, the configuration file is: /etc/krb5.conf (sometimes this is located elsewhere, depending on the installation preferences)

For Win95/98/NT/XP systems the configuration file is named: krb5.ini and is located in the C:\Program Files\HPCMP\Kerberos Libraries directory
Once you've authenticated on your home site's KDC and thus obtained a kerberos ticket, you should be able to connect to ARSC host.

Be sure to specify your ARSC user name when you make a connection to ARSC. The krlogin command will be:

krlogin -l <your ARSC userid> iceberg.arsc.edu

If you are using a Windows client, first use the ticket manager to obtain a kerberos ticket, then use the kerberos telnet client to connect.
You will not be able to use gate.arsc.edu. Gate is only an option for users whose default realm is ARSC.

More Information

Read the Local Kerberos5/SecureID Client Installation for more information on Kerberos configuration.
Contact User Support if you encounter any problems.

Arctic Region Supercomputing Center
PO Box 756020, Fairbanks, AK 99775 | voice: 907-450-8600 | email: