This document requires javascript to be enabled.
Check the top or bottom of this window for a security bar, and click 'Allow Blocked Content.'
If there is no security bar visible, please check your web browser security settings.

Is Script Enabled?
Operating System:
OS Version:
Web Browser:
  1. Install MIT Kerberos from http://web.mit.edu/kerberos/dist/ or from your operating system's package manager.
    These instructions were written for version 4.0.1
  2. Reboot, or at least log out/log in. Until you do, browsers won't use the newly installed library.

  3. Create or Edit C:\Documents and Settings\All Users\Application DataProgramData\MIT\Kerberos5\/etc/krb5.iniconf with the following configuration:
    [libdefaults]
     default_realm = SPLITREFLECTION.COM
     forwardable = true

    [realms]
     SPLITREFLECTION.COM = {
      admin_server = locutus.splitreflection.com
      kdc = locutus.splitreflection.com
     }

    [domain_realm]
     .splitreflection.com = SPLITREFLECTION.COM
      splitreflection.com = SPLITREFLECTION.COM

  4. Start MIT Kerberos Ticket Manager from the start menu
    If it does not automatically pop up, click Get Ticket
    Enter your username (@SPLITREFLECTION.COM) and password

  5. From the command prompt, run:
    kinit username
    Enter your password
    If no errors are shown, it was successful

  6. Open Firefox and put about:config in the URL bar.
    Set network.negotiate-auth.trusted-uris = splitreflection.com
    Set network.negotiate-auth.delegation-uris = splitreflection.com
    Set network-auth.use-sspi = False

  7. Launch chrome with the following arguments:
    chrome --auth-server-whitelist="*.splitreflection.com" --auth-negotiate-delegate-whitelist="*.splitreflection.com"
    I could not make this work for me on Linux. As of this writing, Chrome on Windows always uses the SSPI library instead of the MIT GSSAPI library.

  8. You do not have IE on Linux. Internet Explorer seems to only use the SSPI library for Negotiate authentication (instead of the MIT GSSAPI library). I could not find a way to make this work.