How to Manage a SEAS Activity Account

When an activity account is created, the main contact and/or specified users are designated as the administrators of the account. Administrators have permission to use the SEAS account management website to change the password, configure email, configure Google@SEAS, set the MySQL password and manage other resources for the account.

Change Account Passwords

It is sometimes necessary to grant someone access to an activity account without giving them administrative privileges. In that case, change the account password, securely share it with the desired party, and reset it when the person no longer needs access to the account.

To change the login, MySQL or Google@SEAS passwords for the account:

  1. Visit the SEAS account management website.
  2. Log in with your own PennKey.
  3. Click on Manage Activity Account on the menu on the left.
  4. Enter the username of the activity account you want to manage.
  5. You are now logged in as that user and should be able to change the passwords for it using the options in the lefthand menu.
  6. When finished, use the Logout menu option and click on the Change back button to return to your own account.

Remote Login

If you are an administrator for an activity account, your PennName has been added to the account's Kerberos authorization file (.k5login). This allows you to access the account without a password, using kerberized client software.

For example, here is one way to access the command line of the activity account via, using SSH:

  1. SSH to your account on (replace username with your account name):
  2. Type kinit and enter your PennKey password (optional if you used your PennKey credentials to log into eniac)
  3. Type klist to view your Kerberos ticket granting ticket and expiration (optional).
  4. You can now SSH to any account you manage without needing a password (replace username with the activity account name):

If your personal machine has Kerberos support, you can directly access the activity account from any network once you have obtained a Kerberos ticket granting ticket (for example, by typing kinit username@UPENN.EDU in a terminal).

Note: MacOS users may need to add the following line to ~/.ssh/config:

GSSAPIAuthentication yes

Note: If the instructions on this page do not work for you, it probably means you have not been designated an administrator and added to the account's .k5login file. Please send an email to cets@seas with your request to be added and CC the contact for the account or your supervisor.

© Computing and Educational Technology Services | Report a Problem | 215.898.4707