Page History

...

Build an OpenAFS kernel module containing a workaround using the following instructions (you may need to install additional devel tools and libraries such as GIT and the Kernel devel libraries on your system):

git clone git://git.openafs.org/openafs.git

cd openafs

git checkout --track -b origin/openafs-stable-1_6_x

git fetch http://gerrit.openafs.org/openafs refs/changes/17/12217/1 && git cherry-pick FETCH_HEAD
git fetch http://gerrit.openafs.org/openafs refs/changes/70/12170/3 && git cherry-pick FETCH_HEAD
git fetch http://gerrit.openafs.org/openafs refs/changes/69/12169/2 && git cherry-pick FETCH_HEAD

sh regen.sh

./configure

make libafs

...

1. NOW, REBOOT. After rebooting, your firewall may prompt you to allow the various afs applications access to the network. You should choose to Always Allow these.
2. OPTIONAL, set up a drive mapping (must be done AFTER REBOOTING)
   1. Right click on My Network Places
   2. Map drive
   3. To follow the CNF convention, set the drive letter to X
   4. Set the path to \\afs\cnf.cornell.edu
   5. Choose to Reconnect the drives
   6. Done

Mac OS X

MacOS

For Macintosh, we recommend the AuristorFS OpenAFS client installers.

1. Download the installer for your version of MacOS from the Auristor OpenAFS Client Installers web page.
   1. If you visit the page on an operating system other than MacOS, you will need to click the link to "view all available installers".
   2. Download the installer requires registering.
2. Install the Mountain Lion krb5.conffile to /private/etc/krb5.conf
   1. The /private/etc folder is hidden... to get to it from the Finder...
   2. From the "Go" menu choose "Go to Folder"
   3. Type in /private/etc
   4. You can now copy the krb5.conf file over... you will be prompted for administrator credentials
3. Install the Mountain Lion edu.mit.Kerberosfile to /Library/Preferences/edu.mit.Kerberos
   1. You may first have to delete any existing edu.mit.Kerberos file (Finder may not let you overwrite the existing file)
   2. The deletion operation will require typing in an administrative username and password
   3. Copying over the new file will require typing in an administrative username and password
4. Download OpenAFS 1.6.16 or newer from the below links:
   
   1. Installers for Mac (the Mac Auristor installers work) are available courtesy of Your File System, Inc (recommended for 10.9 Mavericks and higher)
   2. Additional Signed Installers for Mac are listed on the Third Party Binaries OpenAFS Wiki page
5. Run the OpenAFS package installer
   1. Specify cnf.cornell.edu as the cell name and cnf as the cell alias
   2. If AFS does not appear to be running after installing, reboot your system.
6. To show the AFS icon on the Desktop...
   1. Finder - Preferences
   2. General tab
   3. Check "Connected Servers"

How to destroy, renew, and obtain new credentials:

Make sure you have AFS Tokens before attempting to browse AFS space in the Finder. Otherwise, the Finder will become confused, hang, and not properly display files and folders.

To destroy AFS credentials from the commandline, open the Terminal and enter the following two commands:

 unlog

 kdestroy

To renew or obtain new credentials from the commandline,

1. , you must either use the AFSLog gui application or the commandline (Terminal.app) to obtain AFS Tokens.

2. For AFSLog, double click the application.

   1. The Kerberos Ticket viewer will open

   2. If necessary, add a new identity of username@KERBEROS.REALM

   3. Login to this identity in the Kerberos Ticket Viewer.

   4. Exit the Kerberos Ticket Viewer.

   5. After approximately 5 seconds, the AFSLog application will ask for your attention (bounce) or simply pop up a new window displaying your AFS Tokens.

From the Terminal.app commandline:

Code Block
language bash
kinit username@KERBEROS.REALM aklog




3.  

   You can view your AFS tokens by, from the commandline (Terminal.app) typing in:

   Code Block
   language bash
   tokens

4. The built in AFS control panel under System Preferences does not work in the CNF environment. Do not use the AFS Control Panel.
5. To show the AFS icon on your desktop, in Finder Preferences - General, make sure "Connected servers" is checked.

6. 
   

Make sure you have AFS Tokens before attempting to browse AFS space in the Finder. Otherwise, the Finder will become confused, hang, and not properly display files and foldersTo manage AFS credentials from the GUI, use the Auristor control panel in the System Preferences application.

iOS

A native AFS client, iYFS, for iOS can be purchased from the iOS App Store. If you experience issues with the client, please contact CNF IT support – we will reproduce the problem and then contact the vendor to have the problem resolved.