Page History

...

If you need to build your own OpenAFS RPMs from the OpenAFS git source tree, see this page.

Redhat Enterprise Linux and Fedora

The OpenAFS download directories can function as a YUM repository if you create a yum repo config file pointing to the OpenAFS website. Attached is a sample repo yum repository config for OpenAFS 1.6.5 running on RHEL6 and a sample yum repository config for OpenAFS 1.6.5 running on Fedora. If these do not work, make sure that binaries have been published on the OpenAFS.org web site. If not, CNF may be able to supply you with pre-compiled binary RPMs. best source of RPMs for RHEL and for Fedora are the jsbillings Copr repositories. There are two repositories, and you will need both. First is the main OpenAFS client Copr repository and second is the OpenAFS kernel module repository . You should install both repositories on your system as the main repo depends on the kernel modules in the kmod repo. For the kernel modules, CNF recommends using dkms (and the dkms-openafs RPM) instead of individual kernel version specific modules.

Note that the JSBillings Copr repositories change from the old Transarc paths for OpenAFS binaries, config files, and cache partition locations to Linux Standard Base compatible locations.

You will want to install the following RPMs:

• openafs-compat
• openafs-authlibs
• openafs-server (if running an openafs server)
• openafs-devel (if you want the devel libs)
• openafs
• dkms-openafs (if you want to dynamically build kernel modules ... you will also need the dkms rpm, available from multiple sources)
• openafs-authlibs-devel (again, if you want the devel libs)
• openafs-client (for running the openafs client)
• openafs-docs
• openafs-krb5
• openafs-kernel-source (again, for devel purposes)

...

[libdefaults]
allow_weak_crypto = true
 ticket_lifetime = 30d
 renew_lifetime = 30d
 forwardable = true
 renewable = true

[realms]
 CIT.CORNELL.EDU = {
  kdc = kerberos.cit.cornell.edu:88
  kdc = kerberos2.cit.cornell.edu:88
  admin_server = kerberos.cit.cornell.edu:749
  default_domain = cit.cornell.edu
 }

CNF.CORNELL.EDU = {
        kdc = hole.cnf.cornell.edu:88
        kdc = smoke.cnf.cornell.edu:88
        kdc = mist.cnf.cornell.edu:88
        admin_server = hole.cnf.cornell.edu:749
        default_domain = cnf.cornell.edu
}

CORNELL.EDU = {
  kdc = ad2ad7.cornell.edu
  kdc = ad1ad8.cornell.edu
  default_domain = cornell.edu
 }    

GUEST.CORNELL.EDU = {
    kdc = obsidian1.cit.cornell.edu:88
        kdc = obsidian2.cit.cornell.edu:88
    admin_server = obsidian1.cit.cornell.edu
    default_domain = guest.cornell.edu
}

[domain_realm]
 .cit.cornell.edu = CIT.CORNELL.EDU
 cit.cornell.edu = CIT.CORNELL.EDU
 .mail.cornell.edu = CIT.CORNELL.EDU
 mail.cornell.edu = CIT.CORNELL.EDU
.cnf.cornell.edu = CNF.CORNELL.EDU
 cnf.cornell.edu = CNF.CORNELL.EDU

...

[capaths]
CIT.CORNELL.EDU = {
    CNF.CORNELL.EDU = .
}

GUEST.CORNELL.EDU = {
    CNF.CORNELL.EDU = .
}

CORNELL.EDU = {
    CIT.CORNELL.EDU = .
    CNF.CORNELL.EDU = CIT.CORNELL.EDU
}

Windows

1. If you are upgrading from a 1.5.x or earlier version of OpenAFS, first remove any AFS drive mappings.
2. d/l MIT Kerberos for Windows (32 or 64-bit, depending on your windows os install) 4.0.1 from http://web.mit.edu/kerberos/dist/index.html
   1. Do a Typical install
3. d/l 1.7.x MSI client installer (for Managed installations) from http://www.openafs.org/windows.html 
   1. If installing on 64-bit Windows, you will also need the 32-bit tools package. Install this doing a "Typical" install.
4. Set your computer not to go to sleep unless installing 1.7.x
5. run the openafs installer
   1. Select a Custom install
   2. Accept the defaults for which components to install unless...
      1. If installing 1.7.x, you will need to install the "Authentication" component -- not enabled by default in 1.7.x.
   3. Change the cell name from openafs.org to cnf.cornell.edu
   4. Accept defaults on the rest of the screens
   5. Don't yet reboot (when prompted by the installer)
6. Run the attached .reg files to set OpenAFS registry settings
7. Copy the attached krb5.ini to c:\ProgramData\MIT\Kerberos (on XP, instead use C:\Documents and Settings\All Users\Application Data) overwriting the krb5.ini file that may be already there
   • NOTE: If your organization also uses Kerberos, you will instead want to merge in the CNF krb5.ini with your organization's krb5.ini .
   • Your local tech support or CNF Computing support can help you with this.
8. If you are using a firewall other than the built in Windows firewall, you will need to open incoming UDP port 7001. 

...