• QUICK LINKS
  • answers.stanford.edu
  • apple.stanford.edu
  • computing.stanford.edu
  • courses.stanford.edu
  • datarates.stanford.edu
  • dell.stanford.edu
  • departmentphone.stanford.edu
  • email.stanford.edu
  • ess.stanford.edu
  • helpsu.stanford.edu
  • myitserviceshelp.stanford.edu
  • orderithelp.stanford.edu
  • software.stanford.edu
  • studentphone.stanford.edu
  • techtraining.stanford.edu
  • tools.stanford.edu
  • unixcomputing.stanford.edu
  • vpn.stanford.edu
  • web.stanford.edu
  • windows.stanford.edu
• SERVICES
  • IT Services Only
  • All Campus Providers
    → computing.stanford.edu
• GETTING HELP
  • Stanford Answers
  • HelpSU: IT Help Desk
  • Training
• PROJECTS
• ABOUT US
  • What We Do
  • Organization Chart
  • Strategic Plan
  • Jobs
  • Contact info
  • Service & System Metrics
• INTERNAL
• SEARCH

  • Search IT Services:
     

• IT Services
• Kerberos Upgrade Project
• Upgrading to Stanford Desktop Tools

Upgrading to Stanford Desktop Tools from PC-Leland and MacLeland

Background

PC-Leland and MacLeland were developed for Windows and Macintosh users to securely authenticate to University systems using the Kerberos protocol. They were designed to work with both version 4 and version 5 of Kerberos. With MIT announcing the end of life for Kerberos 4, IT Services has been working with different groups on campus to transition various University systems to Kerberos 5. As part of the final stages of this transition, users should now upgrade their computers to replace PC-Leland and MacLeland with Stanford Desktop Tools (SDT), which only support Kerberos 5.

This page will assist Windows and Macintosh users with upgrading to SDT.

Who Should Upgrade?

Almost everyone.

At this point the only people who need to wait before upgrading to SDT are a very small group of users who may be using a departmental email account on a server that only support Kerberos 4.

Windows Instructions

Windows XP users

Anyone using Windows XP can update their software as follows:

1. Download and install Stanford Desktop Tools from the Essential Stanford Software site.
2. Within the SDT window click to install Kerberos for Windows. Running that will update your Kerberos software, removing PC-Leland for you as well as any old PC-AFS software that may be installed.
3. (optional) Users who want to access files in AFS can use SDT to install the latest version of OpenAFS.

Note that as you install SDT you may be warned about needing to upgrade your Sundial calendar software afterward. If so you will want to download and install the Sundial 10.

SDT will also work with Windows Vista. PC-Leland did not, so Vista users should be doing an initial install of SDT rather than an upgrade from PC-Leland.

Earlier Windows Versions

Earlier versions of Windows are no longer supported, so there will not be a version of SDT available. Anyone using an older operating system with PC-Leland can submit a HelpSU request for advice.

Macintosh Instructions

Mac OS X 10.4.x

If you are uncertain about the version of OS X that you have, you can verify it by going to the Apple menu and choosing "About this Mac."

Anyone using Mac OS X 10.4.x can update their software as follows:

1. Download and install Stanford Desktop Tools from the Essential Stanford Software site.
2. In the SDT windows check the Program Status of the Kerberos Configuration Tool. If it is "Up to Date" then MacLeland has been uninstalled and your Kerberos configuration is up to date. If it reads "Install Now" click to run an installer to remove MacLeland and install the latest Kerberos configuration.

If you are already running SDT and still received an email notice about needing to upgrade, you are likely running an older version that included support for Kerberos 4. Running the latest installer should upgrade you to the version that only supports Kerberos 5.

Mac OS X 10.3.x and 10.2.x

Stanford Desktop Tools is not available for earlier versions of OS X.

Those using 10.3 can download and run an updater that will configure MacLeland to only obtain Kerberos 5 tickets. NOTE: This will prevent AFS mounting from working properly.

If you are running 10.3 and are using AFS mounting or if you are using 10.2 or earlier please submit a HelpSU request to discuss available options.