Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Install the Mountain Lion krb5.conffile to /private/etc/krb5.conf
    1. The /private/etc folder is hidden... to get to it from the Finder...
    2. From the "Go" menu choose "Go to Folder"
    3. Type in /private/etc
    4. You can now copy the krb5.conf file over... you will be prompted for administrator credentials
  2. Install the Mountain Lion edu.mit.Kerberosfile to /Library/Preferences/edu.mit.Kerberos
    1. You may first have to delete any existing edu.mit.Kerberos file (Finder may not let you overwrite the existing file)
    2. The deletion operation will require typing in an administrative username and password
    3. Copying over the new file will require typing in an administrative username and password
  3. Download 1.6.9 for Lion from this link (10.7) OR Download OpenAFS 1.6.9 or greater from the openafs.org website (10.8) OR Download 1.6.9 for Mavericks from this link (10.9)
    1. Installers for Mac are also available courtesy of Your File System, Inc (recommended for 10.9 Mavericks and higher)
    2. Additional Signed Installers for Mac are listed on the Third Party Binaries OpenAFS Wiki page
  4. Run the OpenAFS package installer
    1. Specify cnf.cornell.edu as the cell name and cnf as the cell alias
    2. No reboot is necessary (unless you are running Mavericks, Mac OS 10.9) - AFS will start running when the installer finishes
  5. To show the AFS icon on the Desktop...
    1. Finder - Preferences
    2. General tab
    3. Check "Connected Servers"
  6. How to destroy, renew, and obtain new credentials:
    1. To destroy AFS credentials, open the Terminal and enter the following two commands:

      Code Block
       unlog
      
       kdestroy
      



    2. To renew or obtain new credentials, you must either use the AFSLog gui application or the commandline (Terminal.app) to obtain AFS Tokens.

      1. For AFSLog, double click the application.

        1. The Kerberos Ticket viewer will open

        2. If necessary, add a new identity of username@KERBEROS.REALM

        3. Login to this identity in the Kerberos Ticket Viewer.

        4. Exit the Kerberos Ticket Viewer.

        5. After approximately 5 seconds, the AFSLog application will ask for your attention (bounce) or simply pop up a new window displaying your AFS Tokens.

      2. From the Terminal.app commandline:

        Code Block
        languagebash
        kinit username@KERBEROS.REALM
        
        aklog

         

        1. You can view your AFS tokens by, from the commandline (Terminal.app) typing in:

          Code Block
          languagebash
          tokens
    3. The built in AFS control panel under System Preferences does not work in the CNF environment. Do not use the AFS Control Panel.
  7. To show the AFS icon on your desktop, in Finder Preferences - General, make sure "Connected servers" is checked.

...