MacLeland 1.4 ReadMe                                     - February 2001


*** Contents *** 
Introduction 
New Features of Version 1.4 
Requirements
Installation Instructions
Help, Other Documentation, etc.

*** Introduction ***

MacLeland, a control panel for your Mac developed by Stanford's ITSS
Distributed Computing Group, brings Kerberos authentication and
encryption to the Macintosh desktop for the SUNet community. This
means, for example, that Telnet sessions to host computers such as
Elaine can be encrypted, or that your password, which you entered in
Eudora to retrieve your mail from the Popserver, will not get
transmitted unencrypted across the network. This type of security is
critical for many network services available to the Stanford community.

MacLeland also provides access from the Mac desktop to StanfordŐs AFS
file system, meaning you can work with your AFS files like any other
Mac files on your desktop. You also have access to the AFS files of
other community members, as well as to other public files.

This ReadMe file describes how to install MacLeland. For pointers to
more information about MacLeland, see "Help, Other Documentation, etc."
at the end of this document.


*** New Features of Version 1.4 ***

1. MacLeland now includes an "email proxy", which allows you to use a
non-kerberized email program (such as Netscape Communicator or
Microsoft Entourage) to handle your Leland email without sending your
SUNet password to Leland in clear-text over SUNet or the Internet.
Instead, MacLeland's email proxy intercepts your request to connect to
the Leland email server from the email program and handles the login
credentials through the normal kerberized MacLeland login.

This is a vital feature because effective in Spring 2001, Leland email
servers, for security reasons, will accept only kerberized logins.
Eudora, the supported email program at Stanford, already provides
kerberized logins to the Leland servers (if it is enabled correctly).
This new MacLeland email proxy gives Mac users the choice of using
other email programs besides Eudora while still being compliant with
the kerberized login requirement of the Leland servers.

See the help for MacLeland in the MacLeland menu for assistance with
setting up Eudora or "other email programs" with the new proxy. It is
neither trivial nor intuitive to set this procedure up, though once it
is set up, it works simply and easily.

2. MacLeland 1.4 fixes two minor problems with the MacLeland Agent
program, one of which caused long pauses in some network connections,
and the other which fixes MacLeland's behavior with port scanners.

3. Reminder: starting with MacLeland 1.3.2, MacLeland's help became
web-browser based. When invoked (from the MacLeland menu), it will
automatically start Netscape Communicator (if it's not already running)
and open a browser window with the help document. More information
about how this works, as well as instructions for using Microsoft's
Internet Explorer instead, appear in step 7 of the Installation
Instructions below.


*** Requirements ***

To run MacLeland, your Macintosh needs the following:

- 1500K of storage space on your hard disk for the normal, recommended
installation (You can discard some of the files after the installation
if necessary.)

- version 7.5.3 or later of the Mac OS (the System program)

- Open Transport installed (part of OS 7.5.3 and after). MacLeland no
longer works with MacTCP. Open Transport is available as an add-on for
System 7.1 and later, requiring 5 Mb of RAM and a 68030, 68040, or
PowerPC processor. OT 1.1.2 can be downloaded from:
ftp://ftp.info.apple.com/Apple_Support_Area/Apple_Software_Updates/
English-North_American/Macintosh/Networking-Communications/
Open_Transport/OT_1.1.2-Net_Install.sea.hqx

- a connection to SUNet, through an Ethernet card installed in your
Macintosh or by modem via PPP (Remote Access) or MacSLIP.

In addition, you will need a SUNet ID to login to MacLeland. For
information, see the Web page "http://sunetid.stanford.edu".

Additionally, you will need the MacLeland program. MacLeland is part of
the MacStanford collection of Macintosh programs for the Stanford
community. There are several ways to get a copy of MacLeland, along
with the other programs that are part of MacStanford, such as
MacSamson, Qualcomm's Eudora Pro and Netscape Communicator.

The easiest way is to download the software from the World Wide Web
using a web browser program like Netscape Communicator or Microsoft
Internet Explorer. Look for instructions on the MacStanford home page,
"http://macstanford.stanford.edu". Other ways to get the software are
discussed there as well.



*** Installation Instructions ***

Please follow all the instructions. In particular, be sure to restart
your Macintosh (step 5) at the end of this procedure. If you have
already run the Installer program (step 2), proceed with step 3.

1.	Determine whether you are already running MacLeland by looking for
MacLeland in the Control Panels folder of your System Folder. (Control
panels are usually accessible through the Control Panels menu item in
the Apple menu.) If the MacLeland control panel is there, then you
should choose the "upgrade" installation in the next step. If it is
not, then choose one of the "new" installations.

Choose the new installation that is appropriate for your situation.
MacLeland establishes some default "lock" settings based on your
choice. (MacLeland can lock your Macintosh making it impossible for you
to connect to campus security servers (or do anything else), and
MacLeland can only be unlocked if it can confirm with those servers
that your password is valid. If your Mac becomes locked and you are not
connected to SUNet, your only choice is to reboot, sometimes not a
popular choice if you were in the midst of other work.)

2. Double-click on the MacLeland 1.4 Installer, and follow the
directions there. Please read all instructions and information. You
will need to choose between a new installation and an upgrade
installation, as noted above in step 1.

The installer will place items into folders inside your System Folder
as follows:

- in Control Panels folder: MacLeland, MacLeland Proxy Settings and
(for a new installation) Network Time - in Extensions folder:
kClientLeland and MacLeland Proxy - in Startup Items folder: MacLeland
Agent alias - in System Folder: MacLeland folder

3. If this is a new installation of MacLeland, open the Network Time
control panel and configure it. This control panel helps keep the right
time on your Macintosh, getting the correct time from a time server and
then setting your Mac's clock, taking the time zone and Daylight Saving
Time (if appropriate) into account. The basic settings we recommend
are:

Time server: time.stanford.edu Accuracy: 2 seconds Time zone: Pacific
Standard/Daylight Time (if you are not in our time zone, choose the
zone you are in) Set the time: choose either: At every startup  (choose
only if you are always connected to the network); or Every __ hours (24
hours is a good setting) Wait for MacTCP: Turn this on if you are not
always connected to SUNet or the Internet

MacLeland is configured (by default) to set the clock regularly. The
purpose of Network Time, as part of the MacLeland installation, is to
handle the changes to and from Daylight Saving Time.

If you are connected to the network, click on the Set Time button to
have Network Time set the clock. (If you aren't connected, come back to
this control panel and click the Set Time button after establishing a
connection but before invoking MacLeland or a program that would invoke
MacLeland, like Eudora Pro.)

For more information about the Network Time control panel, see the
Network Time ReadMe (SU) file, which you can find, along with other
Network Time documents, in the MacStanford software collection.

If you are using OS 8.5 or later, you can discard Network Time and
simply configure the Date & Time control panel to use the appropriate
server settings as outlined above. You are free to continue using
Network Time if you want, however.

4. If you use MacSamson, this is a good time to copy the latest version
(4.09 as of February 2001) to your Mac. It too is in the MacStanford
collection. If you plan to use MacLeland and MacSamson together, e.g.,
to login to kerberized host computers such as the Leland hosts
(Elaines, Cardinal, Amys), be sure you have version 4.07 (or later) of
MacSamson. Please read and follow the installation instructions in the
MacSamson ReadMe file before you continue.

5. Restart your Macintosh.

6. On the right hand side of the menu bar, you will see MacLeland's
menu bar icon: a graphic depicting Hoover Tower and a building in the
Quad. If you click on that icon, you will see the MacLeland command
menu. That indicates the MacLeland installation was successful.

7. MacLeland's help documentation, invoked with the Help command on the
MacLeland menu, is set up as a Netscape Communicator document; when you
select the command, MacLeland will open Netscape Communicator (the
official browser of MacStanford), and open a browser window for the
MacLeland Help document, which is located in the MacLeland folder.

If you use Microsoft's Internet Explorer (IE) instead of Netscape
Communicator, you can have MacLeland open its help with IE instead of
Communicator. To do so, open the MacLeland Help folder, which is inside
the MacLeland folder inside the System Folder. There you'll find an IE
document called MacLeland Help. Move that file into the MacLeland
folder, replacing the Communicator file called MacLeland Help. Now,
whenever the Help command is invoked, the IE version of the MacLeland
Help folder will be opened inside of IE.

Netscape Communicator and Internet Explorer are the only two browsers
being supported with this release. A future version of MacLeland may
have a more generic solution that can work with other browsers. If you
use another browser, in the meantime, you can try to convert the
Communicator or IE version of the MacLeland Help file to a file of the
appropriate document type for your browser, e.g., using ResEdit. The
file is basically a text file of HTML. Note that you cannot change the
name of the file (from MacLeland Help) nor move it out of the MacLeland
folder; if you do, the Help command will not work.

8. To set up the email proxy so that you can use a Macintosh email
program other than Eudora to read your Leland email, see the
instructions in the online help (look for the Help command in the
dropdown MacLeland menu on the menu bar) for "MacLeland... and other
email programs".  Please follow the directions carefully - it is easy
to configure this feature incorrectly.

*** Help, Other Documentation, etc. ***

The Help command is available in the MacLeland menu.

More assistance, including updates and the latest news, is available on
the World Wide Web at this address:

http://macleland.stanford.edu/

In particular, the Web page has detailed information about "MacLeland,
NNTP News Server and non-Stanford IP Addresses".

You may also find help by posting questions and looking for answers on
the su.computers.macleland bulletin board. For personal assistance,
contact your Local Network Administrator, Expert Partner or the cluster
consultants. To report problems, please use the HelpSU web page:
http://helpsu.stanford.edu