OpenAFS - Revision history

Pew at 22:54, 3 January 2019

2019-01-03T22:54:58Z

imported>Pew at 03:53, 3 January 2018

2018-01-03T03:53:37Z

imported>Mjh: Categorization

2013-02-03T06:34:44Z

Categorization

imported>Mutantmonkey at 20:39, 2 September 2012

2012-09-02T20:39:23Z

imported>Matthazinski: Added user instructions for Debian

2012-07-08T23:19:57Z

Added user instructions for Debian

New page

OpenAFS is an open-source implementation of the [[w:Andrew File System|Andrew File System]].

== OpenAFS Client Installation on Debian ==
# Install the prerequisite packages
#* krb5-user
#* krb5-clients
#* openafs-krb5
#* openafs-client
#* module-assistant
#* openafs-modules-dkms
# Set the cell name (this should be a FQDN, such as ece.vt.edu)
# Set the Kerberos realm (generally the same as the cell name, but in all caps, e.g. ECE.VT.EDU)
# Set the Kerberos authentication and admin servers (e.g. auth.ece.vt.edu for the ECE deparment)
# Obtain the CellServDB files necessary for your cell. If it is a "public cell", its servers should be published in the CellServDB that openafs-client downloads. If not, you'll need to obtain the database server information from your cell's administrator and append it to /etc/openafs/CellServDB
# Run the module assistant to compile openafs modules for your kernel
#* <code>sudo m-a prepare</code>
#* <code>sudo m-a auto-install openafs</code>
#* <code>sudo modprobe openafs</code>
# Restart the client by issuing <code>sudo /etc/init.d/openafs-client restart</code>
# Assuming you chose to use the <code>-dynroot</code> flag during installation (that is the default), all cells should be accessible in <code>/afs</code>

== Client Authentication Instructions ==
OpenAFS relies on Kerberos for authentication in order to access non-public shares. Follow this procedure to obtain Kerberos tokens for AFS:
# Authenticate to your Kerberos server by issuing <code>kinit username@YOUR.KERBEROS.REALM.COM</code>
# (optional) View your Kerberos tokens with <code>klist</code>
# Login to AFS with <code>aklog</code>
# (optional) View your AFS tokens with <code>tokens</code>

In order to view permissions on a directory, you can issue the <code>fa la ''/afs/path/to/directory''</code>. All users are part of the <code>system:anyuser</code> group, and all users who have authenticated with your Kerberos server are part of the <code>system:authuser</code> group.

@@ Line 1: / Line 1: @@
 OpenAFS is an open-source implementation of the [[w:Andrew File System|Andrew File System]].
@@ Line 33: / Line 31: @@
 [[Category:Software]]
 [[Category:Howtos]]

@@ Line 1: / Line 1: @@
 OpenAFS is an open-source implementation of the [[w:Andrew File System|Andrew File System]].
@@ Line 32: / Line 34: @@
 [[Category:Howtos]]
 [[Category:Roadmap]]

← Older revision		Revision as of 06:34, 3 February 2013
Line 28:		Line 28:

	In order to view permissions on a directory, you can issue the <code>fs la ''/afs/path/to/directory''</code>. All users are part of the <code>system:anyuser</code> group, and all users who have authenticated with your Kerberos server are part of the <code>system:authuser</code> group.		In order to view permissions on a directory, you can issue the <code>fs la ''/afs/path/to/directory''</code>. All users are part of the <code>system:anyuser</code> group, and all users who have authenticated with your Kerberos server are part of the <code>system:authuser</code> group.
		+
		+	[[Category:Software]]
		+	[[Category:Howtos]]
		+	[[Category:Roadmap]]

← Older revision		Revision as of 20:39, 2 September 2012
Line 27:		Line 27:
	# (optional) View your AFS tokens with <code>tokens</code>		# (optional) View your AFS tokens with <code>tokens</code>

−	In order to view permissions on a directory, you can issue the <code>fa la ''/afs/path/to/directory''</code>. All users are part of the <code>system:anyuser</code> group, and all users who have authenticated with your Kerberos server are part of the <code>system:authuser</code> group.	+	In order to view permissions on a directory, you can issue the <code>fs la ''/afs/path/to/directory''</code>. All users are part of the <code>system:anyuser</code> group, and all users who have authenticated with your Kerberos server are part of the <code>system:authuser</code> group.