SAP at Duke

Using Kerberos to log into Mac OS X

• Basic login procedure
• Managing Kerberos tickets
• Destroying Kerberos tickets
• Changing your password and viewing Kerberos tickets
• Acquiring a Kerberos ticket before starting SAP

Basic login procedure 

The following outlines the basic procedure for logging in to SAP. This is usually all you will need for SAP use.

1. Double-click the SAP icon on your desktop.
   
   
   
   
2. The SAPGUI for Java window will appear. Select the connection you wish to use, then click Connect.
   
   
   
   
3. If you are using any connection other than The Playground and do not have a Kerberos ticket, you will be prompted for your NetID and password.
   
   
   
   
4. Upon successful authentication, you will be presented with the main SAP window. You then may move in and out of SAP for 10 hours without being prompted to log in.

Managing Kerberos tickets

You may use the Kerberos application to manage your Kerberos tickets. You can view your tickets, destroy them (log out) and change your password. Double-click the Kerberos alias on the desktop to start the Kerberos application.

(If you do not have a Kerberos desktop icon, you may double-click the application in /System/Library/CoreServices/Kerberos).

Destroying Kerberos tickets (logging out)

Once you close SAP, you still will have a Kerberos ticket. If the ticket has not expired, it will allow you to start SAP without using your NetID and password again.

If you are going to leave your computer, we recommend that you destroy your tickets for security. To destroy a ticket, open Kerberos, then click Destroy Tickets.

Changing your password and viewing Kerberos tickets

To change your password or view your Kerberos tickets, first open Kerberos.

You can view your tickets in the lower section. They will be labeled with your-netid@ACPUB.DUKE.EDU. To the right, you can see the time remaining before your tickets expire. (Note that there is no green ticket picture as you may have seen on a PC.)

To change your password, click the Change Password... button. Enter your old password and your new password in the fields provided, then click OK.

IMPORTANT: Your NetID is also used for other services. Examples include ACES web and your ACPUB account/email. You will also need to use your newly-chosen password for other NetID services.

Acquiring a Kerberos ticket before starting SAP

If you prefer, you may acquire a Kerberos ticket before starting SAP. This is similar to how you log in using Windows or the older Macintosh Kerberos clients.

Open Kerberos, then click Get Tickets.

You will be prompted for your NetID and password. Once you have logged in successfully, double-click the SAP icon on your desktop and start SAP as outlined above.