Single-sign-on from home

only available over IPv6 networks (Telecom DSL, …)

Most of the institute infrastructure works with Kerberos authentication.

In Redhat based systems you need to install the krb5-workstation package (yum/dnf install krb5-workstation).
Add the following configuration parts to the corresponding parts in your /etc/krb5.conf. 

[realms]
  WW8KD.FAU.DE = {
    kdc = idm1.ww8kd.fau.de:88
    master_kdc = idm1.ww8kd.fau.de:88
    admin_server = idm1.ww8kd.fau.de:749
    default_domain = ww8kd.fau.de
    pkinit_anchors = FILE:/etc/pki/ca.crt
  }
 
[domain_realm]
  .ww8kd.fau.de = WW8KD.FAU.DE
  ww8kd.fau.de = WW8KD.FAU.DE
  .ww.uni-erlangen.de = WW8KD.FAU.DE
  ww.uni-erlangen.de = WW8KD.FAU.DE

Now you can get a ticket valid for 24 hours or till next reboot by entering: 

kinit USERNAME@WW8KD.FAU.DE

Firefox

Open the Firefox configuraion page: about:config

Search for network.negotiate-auth.trusted-uris and add .WW8KD.FAU.DE

Log In