Custom Query (196 matches)


Show under each result:

Results (64 - 66 of 196)

Ticket Resolution Summary Owner Reporter
#33 fixed Add information on Kerberos logins to scripts to FAQ andersk

(Imported from #548433.)


Hm, this'd be useful in general: "Go look at Scripts faq #N; s/", etc.

Here's some sample text for people to play with, if anyone's interested. Intended to replace the last paragraph of FAQ #41. I used really informal markup; feel free to be un-lazy and make it better / consistent with whatever conventions you have.

If you're trying to log into from home and you don't
have an SSH client on your computer, you can log into from <>, and log
into scripts from there.

You can also log in directly from most personal computers, with the
correct software installed. To connect to from a
Windows computer, install MIT SecureCRT and Kerberos For Win from <

Then, open MIT SecureCRT (from the Start menu). Click the "Quick
Connect" button in the toolbar of the Sessions dialog box that appears
(the second button from the left). Fill out the dialog that appears,
as follows:

Protocol: SSH2
Port: 22
Firewall: None
Username: /Athena Username/

If you are connecting to a group locker, replace /Athena Username/
with the name of the locker.

In the "Authentication" selectbox, scroll down and click on "GSSAPI"
to highlight it. Make sure that the checkbox beside it is checked.
Then, use the black arrows to the right of the box to move "GSSAPI" to
the top of the list of Authentication methods.

Then, click "Connect" to connect to You may be
prompted for your MIT username and password; if so, enter them.

To connect to from a Mac, download and install the MIT
Kerberos Extras from <>. Then,
open "Terminal" (in /Applications/Utilities/), and type:

kinit /Athena Username/
ssh -k /Athena Username/

If you're connecting to a group locker, replace /Athena Username/ with
the name of the locker you want to connect to.

The "-k" flag to ssh doesn't exist for older MacOS X versions. For
these versions and with Apple's default ssh configuration, it is safe
to not use this flag. If you have customized your ssh configuration,
make sure you have "GSSAPIAuthentication yes" and
"GSSAPIDelegateCredentials no" set for

To connect from a Linux (or other UNIX) computer, install ssh and
Kerberos, and set up Kerberos to use the ATHENA.MIT.EDU realm. Many
Linux distributions provide packages that can do this for you. Then,
run the two Mac command-line commands listed above.
#34 wontfix long delays with ssh -X andersk

(Imported from #492117.)


Something else seems to have changed in the ssh configuration. Now when I ssh from an Athena workstation (which auto-xforwards) I get a really long delay followed by an xauth timeout.


Hmm. I disabled X11Forwarding on the primary server for now. This reduced but did not eliminate the delay (i.e. there's still a huge difference between ssh and ssh -o ForwardX11=no), so I'm not entirely sure what's going on. I don't see the delay from my machine or mega-man.

#37 wontfix tomcat support? andersk

(Imported from #547795.)


Also, can one upload JSP files onto


We do not run a Tomcat installation the same way we run an Apache httpd installation on scripts; Tomcat does not allow us to do security isolation between users in the same manner, so we cannot set up a multiuser installation. There is an Apache-httpd module (mod_proxy_ajp) that appears to allow running JSP scripts, but we are not yet sure whether this properly and securely isolates user accounts. We will try to take a look at this sometime soon and determine whether this method is a practical solution; other users have expressed some interest in running JSP pages on scripts.

Note: See TracQuery for help on using queries.