===== Single-sign-on from home =====

** only available over IPv6 networks (Telecom DSL, ...) **

Most of the institute infrastructure works with Kerberos authentication. 

In Redhat based systems you need to install the krb5-workstation package (**''yum/dnf install krb5-workstation''**).\\
Add the following configuration parts to the corresponding parts in your **''/etc/krb5.conf''**.
<code ini>
[realms]
  WW8KD.FAU.DE = {
    kdc = idm1.ww8kd.fau.de:88
    master_kdc = idm1.ww8kd.fau.de:88
    admin_server = idm1.ww8kd.fau.de:749
    default_domain = ww8kd.fau.de
    pkinit_anchors = FILE:/etc/pki/ca.crt
  }

[domain_realm]
  .ww8kd.fau.de = WW8KD.FAU.DE
  ww8kd.fau.de = WW8KD.FAU.DE
  .ww.uni-erlangen.de = WW8KD.FAU.DE
  ww.uni-erlangen.de = WW8KD.FAU.DE
</code>

Now you can get a ticket valid for 24 hours or till next reboot by entering:
<code bash>
kinit USERNAME@WW8KD.FAU.DE
</code>

=== Firefox ===

Open the Firefox configuraion page: **''about:config''**

Search for **''network.negotiate-auth.trusted-uris''** and add ''.WW8KD.FAU.DE''