On September 8, 2003, made the transition to Kerberos 5 based AFS. As of this date, AFS authentication occurs with the Kerberos 5 password, there is no separate AFS password database. In addition, starting on this date, only your Kerberos 5 password can be used to authenticate to the RCF Ssh Gateways (rssh.rhic.bnl.gov). You CANNOT use your NIS/Unix password.

In the very near future, in addition to replacing your your AFS password, the Kerberos 5 password will replace your legacy NIS/UNIX password. At this time, all services that require authentication except IMAP mail from rcf.rhic.bnl.gov, SWAT/SMB passwords and IMAP mail from the deprecated rcf2.rhic.bnl.gov IMAP server, accept Kerberos 5 passwords.

Single Sign On benefits

When the full Single Sign On system has been implemented and the legacy password databases have been retired, you will only need to remember one password and type that password once at the Ssh Gateways to access most of the resources at the RCF (including AFS and access to the Linux Farm).

Note that Windows based AFS users will need to obtain Kerberos 5/AFS authentication software from the RCF in order to continue to access non-world readable AFS resources in the RHIC.BNL.GOV AFS cell.