Chemistry Lab University of Washington Department of Computer Science & Engineering
 CSE Accounts
  CSE Home  About Us    Search    Contact Info 

Related Topics
 Computer Use Policies
 Kerberos ProjectCSE only
 NT Integration
 CSENetID Web Authentication
 

Links marked w/CSE only are to CSE internal resources.

   

CSE users may have accounts on a variety of hosts and domains. You may have differing credentials on different types of machines. This document briefly explains what sets of credentials there are and where they apply.

CSENetID

Your "CSENetID" account is based upon a facility called "kerberos." When you type your login name and password to a Unix prompt and successfully log in, you have use what we call your "kerberos credentials," your "kerberos password," or your "CSENetID account.

Kerberos is characterized by its use of a set of authentication servers that validate your login. Each such server has the same data. That means that wherever you are when you login to a CSE machine that uses kerberos, your password is the same. Another key feature of kerberos is that your password never crosses a network channel in plain text. That means that it is not possible for somebody reading packets off our network to "sniff" your password using any known technique.

CSE uses a "web login" technology called "CSEcookie" to control access to mildly-sensitive web resources. This technology also uses the credentials associated with your CSENetID acount to authenticate you to the web service.

You can change your CSENetID password using the kpasswd command at a Unix prompt, or with a web browser here. Of course, you'll need to know your existing password to do it.

CSEResearch and CSEPCLab

On the Microsoft Windows side, authentication is performed quite similarly to how it happens on with Kerberos: your credentials are validated by a set of authentication servers, each of which are operating with the same data. Under ordinary circumstances, your password never crosses a network wire in plain text, so the authentication is secured from network sniffing.

There are two authentication domains in the CSE Windows world: CSEResearch, for research machines, and CSEPCLab, for instructional machines. It is possible that you have accounts in both, either, or neither of these domains. Your username is the same on all domains in which you have accounts (including the Unix-side kerberos), but your password may differ- both between the Windows domains, and from your kerberos password.

Besides being used for authenticating to Windows CSEResearch hosts, your CSEResearch Windows credentials are also used to authenticate to Samba. Samba is the technology that we use to allow access to Unix file systems from Windows hosts, and underlies the NT DFS service when it is used to access Unix files.

Live@Edu

Microsoft Live@Edu® is a suite of "cloud services" offering Exchange®-based email and calendaring (called "Outlook Live") and a variety of online collaboration tools, including the SkyDrive® cloud-based file storage service. Every member of the CSE community has, or will have, a Live@Edu account. Your username is <user>@cs.washington.edu (where <user> is the same username you use with your CSENetId and Windows domain accounts) and your password is whatever you set it to. Best practice is for that password to be different from your other passwords.

To establish or change your Live@Edu password, use a web browser to visit this tool. You will need your CSENetID password to prove your identity.

Google Apps Education Edition

Google Apps Education Edition (GAEE) is a suite of "cloud services" offering Gmail email and calendaring and a variety of online collaboration tools, including word processing, spreadsheets, web site creation, etc. Every member of the CSE community has a GAEE account.

Web-based services in GAEE use a "single sign-on" facility based upon CSEcookie. That allows you to use your CSENetId credentials to authenticate to those services. If you've already authenticated to a CSEcookie site in your current session (and within ten hours), you will not need to reauthenticate.

For non-web services, such as IMAP or POP3 access to email using a "thick client" such as Thunderbird, you will use your Google-held account. Your username is <user>@cs.washington.edu (where <user> is the same username you use with your CSENetId and Windows domain accounts) and your password is whatever you set it to. Best practice is for that password to be different from your other passwords.

To establish or change the password for your GAEE account, use a web browser to visit this tool. You will need your CSENetID password to prove your identity.


CSE logo Department of Computer Science & Engineering
University of Washington
Box 352350
Seattle, WA  98195-2350
(206) 543-1695 voice, (206) 543-2969 FAX
[comments to webmaster@cs.washington.edu]