Service Level Definition: Kerberos Authentication

This page contains the service level definition (SLD) for Kerberos.

Documentation

http://web.mit.edu/kerberos/www/

Description

Kerberos is an authentication service that was originally developed at the Massachusetts Institute of Technology and is now used extensively around the world. Kerberos uses the NetID and NetID Password to validate a person's identity and permit access to services such as Bluestem, VPN, UIUC Dialup, UIUCnet Wireless, Active Directory, Software Webstore, and Walkup Computing. Kerberos is also used to change your NetID password, which you can do through the NetID Password Change form or by visiting the CITES Help Desk.

Who can use this service

  • Everyone at the Urbana-Champaign campus can use their NetID and NetID password to enter Kerberos-authenticated online applications (although individuals may not be authorized to actually use a particular application).
  • Individual departments can choose to implement Kerberos authentication on their web servers and for applications that they develop. For more information on how to do this, see the related Bluestem webpage.

When the service is available for use

Supported Service Hours:
Twenty-four hours a day, excluding the maintenance hours listed below

Maintenance Hours*:
5:30 A.M. to 7:30 A.M. Monday through Friday
5:30 A.M. to 10:00 A.M. Saturday
5:30 A.M. to 12:00 P.M. Sunday

*During maintenance hours you might not be able to change your NetID password, but the authentication capabilities that allow you to enter an application will not be affected.

What you must have in order to use the service

Individuals who are trying to enter a Bluestem-authenticated service must have a NetID and NetID password.

Where to go for help

CITES Help Desk (see homepage for hours and additional information)

  • phone: (217) 244-7000, (800) 531-2531
  • email: consult@illinois.edu
  • walk-in: 1211 Digital Computer Lab, 1304 W. Springfield Ave., Urbana, IL 61801

Dependencies on other services

  • Network Infrastructure
  • Illinois Directory (also known as the Electronic Directory or UIUC PH Server). The Illinois Directory is not a prerequisite for Kerberos authentication to function, but many services that use the authentication component also use the Illinois Directory for authorization.

Cost

A subsidy provided by the Provost on behalf of the campus allows CITES to offer this service at no charge.

How to request changes to this service

CITES Help Desk (see homepage for hours and additional information)

  • phone: (217) 244-7000, (800) 531-2531
  • email: consult@illinois.edu
  • walk-in: 1211 Digital Computer Lab, 1304 W. Springfield Ave., Urbana, IL 61801

How to find out about changes to this service

Major changes will be announced on the CITES Status webpage.

Date created

August 29, 2003

Date of last review

August 29, 2003

able -->