Page History

...

1. Install the Mountain Lion krb5.conffile to /private/etc/krb5.conf
   1. The /private/etc folder is hidden... to get to it from the Finder...
   2. From the "Go" menu choose "Go to Folder"
   3. Type in /private/etc
   4. You can now copy the krb5.conf file over... you will be prompted for administrator credentials
2. Install the Mountain Lion edu.mit.Kerberosfile to /Library/Preferences/edu.mit.Kerberos
   1. You may first have to delete any existing edu.mit.Kerberos file (Finder may not let you overwrite the existing file)
   2. The deletion operation will require typing in an administrative username and password
   3. Copying over the new file will require typing in an administrative username and password
3. Download 1.6.9 for Lion from this link (10.7) OR Download OpenAFS 1.6.9 or greater from the openafs.org website (10.8) OR Download 1.6.9 for Mavericks from this link (10.9)
   1. Installers for Mac are also available courtesy of Your File System, Inc (recommended for 10.9 Mavericks and higher)
4. Run the OpenAFS package installer
   1. Specify cnf.cornell.edu as the cell name and cnf as the cell alias
   2. No reboot is necessary (unless you are running Mavericks, Mac OS 10.9) - AFS will start running when the installer finishes
5. To show the AFS icon on the Desktop...
   1. Finder - Preferences
   2. General tab
   3. Check "Connected Servers"
   Download the gui AFSTokens
6. How to destroy, renew, and obtain new credentials:
   

   1. To destroy AFS credentials, open the Terminal and enter the following two commands

   app for SnowLeopard (afstokens-64bit.zip) from https://forge.cornell.edu/sf/projects/afs_tokens
   1. File Releases tab
   2. The AFSTokens app is no longer maintained, but is still the best way to obtain AFS tokens.
   3. Obtaining tokens works under the latest version of Mac OS X Mavericks. However, deleting tokens crashes the app.

   4. Renewing existing tokens does not work. You must first delete any AFS tokens and Kerberos tickets by running the following two commands from a Terminal prompt commandline:

      Code Block
      unlog kdestroy

   5. Viewing your AFS group membership works under the latest version of OS X Mavericks.

   6. 
      
      

   7. Under OS X Yosemite and later, you will need to use the To renew or obtain new credentials, you must either use the AFSLog gui application or the commandline (Terminal.app) to obtain AFS Tokens.

      1. For AFSLog, double click the application.

         1. The Kerberos Ticket viewer will open

         2. If necessary, add a new identity of username@KERBEROS.REALM

         3. Login to this identity in the Kerberos Ticket Viewer.

         4. Exit the Kerberos Ticket Viewer.

         5. After approximately 5 seconds, the AFSLog application will ask for your attention (bounce) or simply pop up a new window displaying your AFS Tokens.

      2. From the Terminal.app commandline:

         Code Block
         language bash
         kinit username@KERBEROS.REALM aklog

          

         1. You can view your AFS tokens by, from the commandline (Terminal.app) typing in:

            Code Block
            language bash
            tokens

   We are in process of testing the
   1. The built in AFS control panel under System Preferences does not work in the CNF environment. Do not use the AFS Control Panel.
7. To show the AFS icon on your desktop, in Finder Preferences - General, make sure "Connected servers" is checked.

...