Ksign: Installing on Windows 3.11 for Workgroups Ksign is a helper application which enables you to authorize ECAT orders over the Web. Before you can place an order through ECAT, you must install Ksign and related files, and then configure your Netscape Navigator browser to launch Ksign automatically, when needed. (Netscape Navigator 2 is the browser currently supported by ECAT; the version for which these instructions are written.) Prior to installing KSign, you should ensure that your system is configured for the correct time zone. This is required by Kerberos. Install Ksign Files The installation program will copy the files into the designated directories as follows: Copy To From the disk krb5.ini c:\windows\krb5.ini libkrb5.dll c:\net\mit\libkrb5.dll ksign.exe c:\net\mit\ksign.exe cns.exe c:\net\mit\cns.exe vs.dll c:\net\mit\vs.dll gssapi.dll c:\net\mit\gssapi.dll Note: If prompted to replace existing versions of any of the above files, select Yes. Then you must configure Netscape Navigator 2 1. Open Netscape. 2. From the Options menu select General Preferences..., then select the Helpers tab. 3. In the Helpers window click on Create New Type. 4. In the pop-up window enter the following: Mime type: text Mime subtype: ksign 5. Click OK. 6. In the Helpers window click to select Launch Application. 7. Click on Browse..., change to the directory c:\net\mit, and select ksign.exe. Click on OK. 8. In the Helpers window click on OK. 9. From the Options menu select Save Options. 10. Before placing an order, exit Netscape. How Ksign Works To authorize an order, Ksign relies on finding a valid Kerberos ticket for your MITnet username and password. Before opening Netscape and preparing an ECAT order, do the following: 1. In the directory c:\net\mit, open cns.exe. 2. In the window labeled Kerberos, enter your MITnet username and password in the appropriate fields. The Realm should be ATHENA.MIT.EDU by default; if it is not, change it. 3. Click on Login. A ticket icon should now be displayed for your username. This Kerberos ticket is valid for 10 hours. You may now open Netscape and place an ECAT order. After completing an order and verifying delivery and account information, you place the order for authorization. Ksign launches automatically. If you are verified, a Ksign window appears showing a summary of your order form. If the summary is correct, click on Sign Order to authorize the purchase. Once authorized, you will receive an order confirmation number; record this number for future reference. If there is a mistake in the summary, click Cancel. You can then correct the problem on the current order form and submit the order again. After placing your ECAT orders, you should cancel your Kerberos ticket. Open the cns.exe Kerberos window and click on Delete.