1*7f2fe78bSCy Schubert<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN"> 2*7f2fe78bSCy Schubert<HTML> 3*7f2fe78bSCy Schubert<HEAD> 4*7f2fe78bSCy Schubert<meta name="GENERATOR" content="Microsoft® HTML Help Workshop 4.1"> 5*7f2fe78bSCy Schubert<link rel="stylesheet" type="text/css" href="Leash.css" /> 6*7f2fe78bSCy Schubert<Title>Principals</Title> 7*7f2fe78bSCy Schubert</HEAD> 8*7f2fe78bSCy Schubert<BODY> 9*7f2fe78bSCy Schubert<H1> <a name="top">About Principals </a></H1> 10*7f2fe78bSCy Schubert<p> 11*7f2fe78bSCy SchubertYour principal is your Kerberos identity. It is your user name plus the Kerberos <a href="JavaScript:popup.TextPopup(popupRealm, popfont, 9,9,-1,-1)">realm</a> (or Windows domain) you are part of. For example, if your user name is <span class="typed">jdoe</span> and you are part of the <span class="typed">SALES.WIDGET.COM</span> realm, your principal is <span class="typed">jdoe@SALES.WIDGET.COM.</span> 12*7f2fe78bSCy Schubert</p> 13*7f2fe78bSCy Schubert<table> 14*7f2fe78bSCy Schubert<tr> 15*7f2fe78bSCy Schubert<th id="th2">Learn about...</th> 16*7f2fe78bSCy Schubert<td> 17*7f2fe78bSCy Schubert<ul id="helpul"> 18*7f2fe78bSCy Schubert<li><a href=#single-principal> Using a single principal </a></li> 19*7f2fe78bSCy Schubert<li><a href=#manage-multiple> Multiple principals</a></li> 20*7f2fe78bSCy Schubert<li><a href=#default-principal> Default principal</a></li> 21*7f2fe78bSCy Schubert</td> 22*7f2fe78bSCy Schubert</tr> 23*7f2fe78bSCy Schubert</table> 24*7f2fe78bSCy Schubert<H2><a name="single-principal">Using a Single Principal</a></H2> 25*7f2fe78bSCy Schubert<p> 26*7f2fe78bSCy SchubertIf like many users you just have one Kerberos identity, you will have just one principal. 27*7f2fe78bSCy Schubert</p><p> 28*7f2fe78bSCy SchubertIn most installations, MIT Kerberos knows your realm, so when you start to enter your principal in the Get Ticket window it will auto-complete the realm for you. If you select the "Remember this principal" checkbox, the next time you get tickets Kerberos will auto-complete your principal as soon as you start to type. </p> 29*7f2fe78bSCy Schubert<p> 30*7f2fe78bSCy SchubertThe main window shows your principal, along with information about tickets issued to it. <br> 31*7f2fe78bSCy Schubert <a href="HTML/View_Tickets.htm"> How to: View Tickets </a> 32*7f2fe78bSCy Schubert</p> 33*7f2fe78bSCy Schubert<p> 34*7f2fe78bSCy Schubert<a href=#top>Back to top</a></p> 35*7f2fe78bSCy Schubert 36*7f2fe78bSCy Schubert<H2><a name="manage-multiple">Multiple principals</a></H2> 37*7f2fe78bSCy Schubert<p> 38*7f2fe78bSCy SchubertSome users have multiple principals. For example, administrators often have one principal with standard access and an administrative principal with administrative access. Also, some Kerberos installations require multiple principals to access multiple realms. 39*7f2fe78bSCy Schubert<br> 40*7f2fe78bSCy Schubert <a href="HTML/Manage_Multiple_Principals.htm">How to: Manage Multiple Principals</a> <br> <a href="HTML/Make_Default.htm">How to: Make Default Principal</a> 41*7f2fe78bSCy Schubert</p> 42*7f2fe78bSCy Schubert<p> 43*7f2fe78bSCy Schubert<a href=#top>Back to top</a></p> 44*7f2fe78bSCy Schubert 45*7f2fe78bSCy Schubert<H2> <a name="default-principal">Default Principal</a></H2> 46*7f2fe78bSCy Schubert<p> 47*7f2fe78bSCy SchubertYour default principal appears in bold font in the main window. If you have a single principal, that principal is always the default. But if you have multiple principals you will need to change the default principal depending on what service or host you need to access. </p> 48*7f2fe78bSCy Schubert<p> 49*7f2fe78bSCy SchubertWhen you try to use a Kerberized application, the application attempts to authenticate you by requesting your credentials from Kerberos. Some applications do this by asking for a specific principal's credentials, but others ask generically. 50*7f2fe78bSCy Schubert<p> 51*7f2fe78bSCy SchubertWhen applications make a generic request, Kerberos does not know which of your principals is being authenticated and checks the default principal for tickets. If the default principal is not the correct one, the application will usually simply fail to work with no warning or notice. 52*7f2fe78bSCy Schubert</p> 53*7f2fe78bSCy Schubert<p> 54*7f2fe78bSCy SchubertTo set your default principal, select a principal in the main window and then click the Make Default button.<br> 55*7f2fe78bSCy Schubert <a href="HTML/Make_Default.htm">How to: Make Default Principal </a> 56*7f2fe78bSCy Schubert</p> 57*7f2fe78bSCy Schubert<p> 58*7f2fe78bSCy Schubert<a href=#top>Back to top</a></p> 59*7f2fe78bSCy Schubert<SCRIPT Language=JavaScript> 60*7f2fe78bSCy Schubertpopfont="Arial,.725," 61*7f2fe78bSCy SchubertpopupRealm="The Kerberos realm is the group of network resources that you gain access to when you log on with a Kerberos username and password. Often it is named after the DNS domain it corrosponds to. In Windows, realms are called 'domains.' " 62*7f2fe78bSCy SchubertpopupKeyboardShortcut="To use a keyboard shortcut, hold down the [Ctrl] key on your computer keyboard and press the appropriate letter. " 63*7f2fe78bSCy Schubert</SCRIPT> 64*7f2fe78bSCy Schubert 65*7f2fe78bSCy Schubert<OBJECT id=popup type="application/x-oleobject" 66*7f2fe78bSCy Schubertclassid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11"> 67*7f2fe78bSCy Schubert</OBJECT> 68*7f2fe78bSCy Schubert</BODY> 69*7f2fe78bSCy Schubert</HTML> 70