Password overviewAt SCS, as outlined below, you may have passwords for several different uses. Note that, for security reasons, you should keep your SCS Kerberos password unique. If you forget yours, see our page on getting a password reset
On this page:
- Your "SCS Kerberos" username and password
- Your SCS Windows domain username and password
- Local Unix passwords on specific Unix hosts
When to use it: Use your SCS Kerberos username and password when:
- Logging on to a Linux computer running an SCS supported computing environment, including linux.gp.cs.cmu.edu
- Obtaining Kerberos tickets using kinit
- When logging in to MRM
How to change it: You can either use the Instance Manager Tool or run the kpasswd command on a Linux computer running an SCS supported computing environment to change your main Kerberos password.account application. (Newer accounts may just use your Andrew password for some of these same tasks.)
When to use it:
- When logging in to Windows computers in the SCS Windows domain
- When authenticating for printing to SCS printers (Macs and non-SCS Windows machines)
- When connecting to pc_dist or mac_dist on monolith.scs.ad.cs.cmu.edu (this may may be used to authenticate to SCS printers)
How to change the password: You can either use the Instance Manager Tool at https://webiso.cs.cmu.edu/instance or once logged into a Windows host using the current password, enter: CTRL-ALT-DELETE [simultaneous key-chord] to bring up a dialogue box with the "Change Password..." button.
How to get one: On a Linux host running an SCS supported computing environment to initially set a local password, you must be logged in as root. You can then run the command:
to create a local password for the User indicated. Once a local password has been established for a User then that User can change their local password simply by running the passwd command.
To remove a local password the /etc/passwd and /etc/shadow files must be edited by hand. You will need local root access to do this. If you need assisitance with such an operation send email to email@example.com. Once this is done you will then need to use your SCS Kerberos password to login.
When to use it: Some Unix applications, for example, xlock and some graphical display managers, don't understand Kerberos and expect a local password. A local password also allows one to login to hosts that are off the network and thus can't talk to the Kerberos servers.
How to change your local Unix password: See "How to get one" in this section.