Request Additional Kerberos Items

General Information

Your Name:  

Your Fermilab ID:

Your Office Phone:

Your Email: 

Kerberos Principal:

Your Supervisor/Spokesperson's Name:
Your Supervisor/Spokesperson's Email: 

Check Item(s) Needed

At Fermilab we have a realm for UNIX machines called FNAL.GOV, and one for Windows machines called FERMI.WIN.FNAL.GOV.

Items Pertaining to UNIX Machines in the FNAL.GOV Realm

CRYPTOCard
If you need to make network connections to UNIX machines in the FNAL.GOV realm from off-site standard-security (nonKerberized) machines and/or from X terminals, you'll need a CRYPTOCard.

Host and FTP Principals
Provide the fully-qualified host name of the computer (e.g., myhost.fnal.gov or myhost.myuniv.edu):

These principals are necessary for Kerberizing a UNIX/Linux desktop such that it will allow incoming Kerberos connections (including portal mode connections). See Do you Need to Allow Incoming Kerberos Connections?.

You must be registered as an administrator for the computer in order to receive a host and FTP principal for it. To register, go to System Administrator Registration.

Kerberos Principal Instance for root Access 
You may not need this item even if you need root access! Read Root Instance of Kerberos Principal for information. 

Items Pertaining to Approved Windows Machines in the FERMI.WIN FNAL.GOV Realm

Special Principal Instances: 

username-test
Test account. Please provide reason for request below: 

username-admin
Used for limited management of an Organizational Unit (OU); requires approval by your OU manager. Please provide email address of OU manager:  

username-mgr
Used for full management of an OU; requires approval by Division/Section/Experiment. Please provide email address of Division Head or equivalent:
 

username-admin-da
Used for management of the FERMI domain; requires approval by FCSC (currently Joe Klemencic) and CSI Dept Head (currently Jack Schmidt).

Submit Form

Prior to submission, you may include any additional information below.