Organization

e-INFRA Profile
- e-INFRA Account (optional)
  - Reset/Change password
  - Kerberos

e-INFRA Profile

Using e-INFRA profile, you can change various settings such as preferred e-mail contact or introduce another identity, one of them can be the e-INFRA account, see below.

Before accessing a profile, your identity will be verified using identity federation. The following options are available::

eduID.cz and the MU identity provider, if you are student or employee of Masaryk University. The MU identity provider will request you for UČO and the primary password to IS MU.
eduID.cz and identity provider of your institution, if you are not member of Masaryk University
eduGAIN and identity provider of your institution, if are are member of academic institution from abroad
Google or Facebook, if you are SOČ student

e-INFRA Account

e-INFRA account is formed by a pair composed of your login name and password, which verify your identity (authentication). e-INFRA account is an optional identity, which is required for e-Infrastructure services provided by the CESNET organizations, such as computing resources (MetaCentrum) and data storage. This identity is also required for some services in virtual organizations NCBR@MUNI and CEITEC@MUNI. If you do not have this type of account, you will be prompted for its creation if necessary during registration to NCBR@MUNI or CEITEC@MUNI.

Reset/Change password

You can reset/change your password. Use only strong passwords as the e-infra account is similar like "One Ring to rule them all ...". If you suspect your account has been stolen, please contact Perun User Support.

Kerberos

Some services employ protocol Keberos for verification of your identity. When you first log on via e-INFRA account, you obtain a TGT ticket from the META realm, which a system will employ in subsequent verification of your identity without requesting your username and password again. This ticket is valid for limited time (typically 10 hours). The basic administrative commands for management of Kerberos tickets are: kinit (renewal of tickets), klist (summary of tickets) and kdestroy (removal of tickets).

Caution: If the system does not perform the requested operation, first check that you have valid Kerberos tickets (klist) and re-create them if necessary (kinit).

Security Notice

Identity federation, which is used to verify your identity for applications and access to e-INFRA profile, uses SSO (Single Sign-On) realized by Shibboleth. Shibboleth does not currently offer an opt-out, and therefore it is necessary to pay close attention to the computers on which you use this service.

The basic recommendation is to use only computers that do not share a single profile/account by multiple users. If you need to use such a computer, at least use a private browsing mode, or manually close all tabs and then own browser window at the end.