...
- d/l 1.5.x client installer from http://www.openafs.org
- run the openafs installer
- For the type of install, if not already selected, choose "AFS Client"
- This will select the optional components (if not, select these two): AFS Client and MS Loopback Adapter
- CellServDB Configuration - Choose to Download from web address
- Client Cell Name Configuration
- Cell name is: cnf.cornell.edu
- Check Enable AFS crypt security, Enable AFS Freelance client, and Use DNS to Search for Cell Servers
- AFS Credentials Configuration
- Check Start AFS Credentials at system login
- Check Auto initialize AFS Credentials
- Check Renew drive maps
- Check IP Address change detection
- Check Quiet
- DO NOT REBOOT - Install first!!!
- Install Kerberos for OpenAFS msi package (attached zip file) - no options to choose, just run the installer
- Copy the attached krb5.ini to c:\windows (e:\windows on some computers) overwriting the krb5.ini file that may be already there
- Firewall Configuration - Under Windows XP and Vista, we recommend that you just use the built in Windows firewall. For other firewalls:
- SYMANTEC - If the Symantec Client Firewall is installed, you will need to add a rule allowing all traffic to/from 10.254.254.253
- If, during the Symantec configuration process, you get a popup window about a script error, you have two choices:
- Reinstall Symantec - this MAY fix the problem
- Disable the Symantec firewall and enable the Windows firewall - consult CNF IT staff for help on doing this
- Open Symantec CLient Firewall
- Client Firewall - Configure
- Advanced Tab
- General Button
- Add a rule
- Permit
- Connection to and from other computers
- Only the computers and sites listed below: Add 10.254.254.253
- TCP and UDP and All types of communication
- Don't log anything
- Name the rule AFS Loopback Rule
- Check All Locations
- Finish
- Find the rule in the list of General Rules (it will be at the bottom) and repeatedly click "Move Up" to get the rule to the top of the list
- If, during the Symantec configuration process, you get a popup window about a script error, you have two choices:
- SYMANTEC - If the Symantec Client Firewall is installed, you will need to add a rule allowing all traffic to/from 10.254.254.253
- NOW, REBOOT. After rebooting, your firewall may prompt you to allow the various afs applications access to the network. You should choose to Always Allow these.
- OPTIONAL, set up a drive mapping (must be done AFTER REBOOTING)
- Right click on My Network Places
- Map drive
- To follow the CNF convention, set the drive letter to X
- Set the path to \\afs\cnf.cornell.edu
- Choose to Reconnect the drives
- Done
Mac
1. Download OAFS package (1.4.x) from www.openafs.org
2. Download afsinstall.app.tar.gz from
http://cf.ccmr.cornell.edu/publicdownloads/afs/
3. Run the OAFS package
A. do NOT reboot when done
4. Run the afsinstall.app
A. Cellname: cnf.cornell.edu
B. CellAlias: cnf
C. Accept defaults for CellServDB
D. For the AFS Options
a. change -fakestat to -fakestat-all
5. copy the attached edu.mit.Kerberos file to Mac HD - Library - Preferences
6. Download the gui AFSTokens app (Tiger version) from
https://forge.cornell.edu/sf/projects/afs_tokens
File Releases tab
7. Download the OpenAFS Contextual Menu Plugin from:
http://www.ncsu.edu/mac/pn/index.php?name=UpDownload&req=viewdownloaddetails&lid=10
8. Copy the Contextual Menu Plugin to Mac HD - Library - Contextual Menu Items
9. Reboot
10. Enjoy
...