\label{Auth_Options}

There are four different authentication modes. Depending on your domain 
configuration and role, not all of them may be available:

\begin{enumerate}

\item Kerberos authenticated: this mode should be used if your domain has
a central Kerberos-based authentication system. Your system should have been 
configured to fill in the correct Kerberos domain and version.
\item Internally authenticated: LON-CAPA takes care of authenticating the 
password internally - in this case, you need to specify the initial password.
\item Filesystem authenticated: the underlying operating system takes care
of authenticating the user - {\it only use if you know what you are doing.}
\item Local authentication - typically used when LON-CAPA is coupled with
another system, for example a portal, etc. - 
{\it only use if you know what you are doing.}

\end{enumerate}

Only Domain Coordinators can later change passwords and authentication 
mechanisms, so these should be carefully chosen.