Moonshot GSS is currently available only on a self-build basis on macOS El Capitan (The Moonshot GSS libraries are compatible with macOS. A client for macOS 10.12 ) or later.We are currently working hard to deliver a complete client package that includes a macOS-native ID Selector with Keychain integration and complete (un-)installation supportand later is available for download. Earlier versions are supported on a self-build basis only.
We do not support macOS as a server OS.
Contents
Table of Contents
...
Numberedheadings
Key
In the tables below, the following icons have the following meanings:
- Moonshot is available for this version of macOS through an installer package and has been tested and verified as working.
- Moonshot has unofficially been tested on this version of macOS, but an installer package does not exist for it.
- Moonshot is not available for this version of macOS, or is known not to work (at least, not without a large amount of custom work).
- Moonshot has not been tested on this version of macOS yet. Let us know if you have tried it!
Compatibility
The information in this section is subject to .
Version
Supported?
Notes
macOS
10.14 MojaveWe intend to fully support macOS 10.13 in mid- to late 2018.
11 Big Sur
Download from our repository. Self-build instructions are .
macOS 10.
13 High SierraWe intend to fully support macOS 10.13 in mid- to late 2018
15 Catalina
Download from our repository. Self-build instructions are .
macOS 10.
12 SierraWe intend to fully support macOS 10.12 in mid- to late 2018.
14 Mojave
Download from our repository. Self-build instructions are .
Mac OS X 10.11 El Capitan
We have tested the basic mechanism on Mac OS X 10.10, but we do not support this version of OS X or earlier.
Configuration
Setting the default path
The newer versions of macOS use sandboxing. This means that most Unix binaries in /usr/bin will not load external GSSAPI mechanisms other than the approved Apple versions inside the sandbox.
To resolve this, as the super user, copy the binary in question to /usr/local/bin which is outside the designated sandbox, then adjust the /etc/paths file to refer to /usr/local/bin first. That way the non-sandboxed version of the binary will be found and loaded first.
Credential file
macOS support currently uses the .gss_eap_id file in your home directory.
Create a .gss_eap_id file in your user's home directory:
text1trueSample Camford .gss_eap_id
This file shows a sample .gss_eap_id file used with a Camford credential