Logging In Using the NMAS Client

1. In the Novell Client^TM login screen, go to the NMAS tab and select the Kerberos method.

2. Specify the following:

   • eDirectory^TM username (not the Kerberos principal name) in the User Name field.
   • (Optional) Kerberos password (not the eDirectory password) in the Password field.

     NOTE:   Do not specify the Kerberos password in this field if you want to specify the ticket options (as mentioned in step 5).

   • Tree
   • Context
   • Server

3. Click OK.

4. (Conditional) If you have more than one principal identity, all principal names are displayed. Select the principal that you want to log in with.

5. (Conditional) Specify the password if you haven't already specified the password in Step 2.

   The user principal, eDirectory service principal, and the realm names are displayed.

   Click Options to specify the ticket options:

   • Encryption Type: Select the supported encryption type for the principal.

   • Lifetime: You can select maximum lifetime of the ticket, based on weeks, days, hours, and minutes. The minimum request for the lifetime of ticket should be more than 5 minutes. The default lifetime of the ticket is 8 hours.

   • Renewal: You can select the maximum renewal time of the ticket, based on weeks, days, hours, and minutes.

   • Proxiable: You can request a Proxiable ticket by selecting this check box.

   • Forwardable: You can request a Forwardable ticket by selecting this check box.

   • Cache Tickets: For this release, only File Cache is supported. By default, the cache is destroyed immediately after the login. Select this option to store the tickets in the Novell file cache and to use the novl2mit utility to populate the MIT cache. This utility destroys the Novell cache after populating the MIT cache.

     IMPORTANT:   If you do not run the novl2mit utility, you must manually delete the cache file before logging out.