|
CSE Home |
About Us |
Search |
Contact Info |
|
Jump right to:
CSE users may have accounts on a variety of hosts and domains. You may have differing credentials on different types of machines. This document briefly explains what sets of credentials there are and where they apply. CSENetIDYour "CSENetID" account is based upon a facility called "kerberos." When you type your login name and password to a Unix prompt and successfully log in, you have use what we call your "kerberos credentials," your "kerberos password," or your "CSENetID account. Kerberos is characterized by its use of a set of authentication servers that validate your login. Each such server has the same data. That means that wherever you are when you login to a CSE machine that uses kerberos, your password is the same. Another key feature of kerberos is that your password never crosses a network channel in plain text. That means that it is not possible for somebody reading packets off our network to "sniff" your password using any known technique. CSE uses a "web login" technology called "CSEcookie" to control access to mildly-sensitive web resources. This technology also uses the credentials associated with your CSENetID acount to authenticate you to the web service. You can change your CSENetID password using the CSEResearch and CSEPCLabOn the Microsoft Windows side, authentication is performed quite similarly to how it happens on with Kerberos: your credentials are validated by a set of authentication servers, each of which are operating with the same data. Under ordinary circumstances, your password never crosses a network wire in plain text, so the authentication is secured from network sniffing. There are two authentication domains in the CSE Windows world: CSEResearch, for research machines, and CSEPCLab, for instructional machines. It is possible that you have accounts in both, either, or neither of these domains. Your username is the same on all domains in which you have accounts (including the Unix-side kerberos), but your password may differ- both between the Windows domains, and from your kerberos password. Besides being used for authenticating to Windows CSEResearch hosts, your CSEResearch Windows credentials are also used to authenticate to Samba. Samba is the technology that we use to allow access to Unix file systems from Windows hosts, and underlies the NT DFS service when it is used to access Unix files. Live@EduMicrosoft Live@Edu® is
a suite of "cloud services" offering Exchange®-based
email and calendaring (called "Outlook Live") and a variety of online
collaboration tools, including the SkyDrive®
cloud-based file storage service. Every member of the CSE community
has, or will have, a Live@Edu account. Your username
is To establish or change your Live@Edu password, use a web browser to visit this tool. You will need your CSENetID password to prove your identity. Google Apps Education EditionGoogle Apps Education Edition (GAEE) is a suite of "cloud services" offering Gmail email and calendaring and a variety of online collaboration tools, including word processing, spreadsheets, web site creation, etc. Every member of the CSE community has a GAEE account. Web-based services in GAEE use a "single sign-on" facility based upon CSEcookie. That allows you to use your CSENetId credentials to authenticate to those services. If you've already authenticated to a CSEcookie site in your current session (and within ten hours), you will not need to reauthenticate. For non-web services, such as IMAP or POP3 access to email using a
"thick client" such as Thunderbird, you will use your Google-held account.
Your username is To establish or change the password for your GAEE account, use a web browser to visit this tool. You will need your CSENetID password to prove your identity. |
||||||||||||||||
|
Department of Computer Science & Engineering University of Washington Box 352350 Seattle, WA 98195-2350 (206) 543-1695 voice, (206) 543-2969 FAX [comments to webmaster@cs.washington.edu] | |