Moonshot GSS is currently available only on a self-build basis on macOS El Capitan (The Moonshot GSS libraries are compatible with macOS. A client for macOS 10.12 ) or later.We are currently working hard to deliver a complete client package that includes a macOS-native ID Selector with Keychain integration and complete (un-)installation supportand later is available for download. Earlier versions are supported on a self-build basis only.

We do not support macOS as a server OS.

Contents

Key

In the tables below, the following icons have the following meanings:

•  - Moonshot is available for this version of macOS through an installer package and has been tested and verified as working.
• - Moonshot has unofficially been tested on this version of macOS, but an installer package does not exist for it.
•  - Moonshot is not available for this version of macOS, or is known not to work (at least, not without a large amount of custom work).
•  - Moonshot has not been tested on this version of macOS yet. Let us know if you have tried it!

Compatibility

The information in this section is subject to .

Configuration

Setting the default path

The newer versions of macOS use sandboxing. This means that most Unix binaries in /usr/bin will not load external GSSAPI mechanisms other than the approved Apple versions inside the sandbox.

To resolve this, as the super user, copy the binary in question to /usr/local/bin which is outside the designated sandbox, then adjust the /etc/paths file to refer to /usr/local/bin first. That way the non-sandboxed version of the binary will be found and loaded first.

Credential file

macOS support currently uses the .gss_eap_id file in your home directory.

Create a .gss_eap_id file in your user's home directory:

This file shows a sample .gss_eap_id file used with a Camford credential

Download Moonshot for macOS