Installing
Windows
1. d/l 1.5.x client from openafs.org
4. run the openafs installer (dialogs match 1.5.11 install)
A. For the type of install, if not already selected, choose "AFS Client"
B. This will select the optional components: AFS Client and MS Loopback
Adapter
C. CellServDB Configuration - Download from web address
D. Client Cell Name Configuration
1. Cell name is: cnf.cornell.edu
2. Check Enable AFS crypt security, Enable AFS Freelance client, and Use
DNS to Search for Cell Servers
E. AFS Credentials Configuration
1. Check Start AFS Credentials at system login
2. Check Auto initialize AFS Credentials
3. Check Renew drive maps
4. Check IP Address change detection
5. Check Quiet
F. Install Kerberos for OpenAFS msi package (attached zip file)
5. Edit c:\windows\krb5.ini to include the CNF.CORNELL.EDU realm -- note that
the
CIT.CORNELL.EDU realm should still be the default realm and don't forget the
cross-realm configuration - file won't exist if bear access or kerberos not
installed (see attached krb5.ini)
10. If the Symantec Client Firewall is installed, you will need to add a rule
allowing all traffic to/from 10.254.254.253
A. Open Symantec CLient Firewall
B. Client Firewall - Configure
C. Advanced Tab
D. General Button
E. Add a rule
F. Permit
G. Connection to and from other computers
H. Only the computers and sites listed below: Add 10.254.254.253
I. TCP and UDP and All types of communication
J. Don't log anything
K. Name the rule AFS Loopback Rule
L. Check All Locations
M. Finish
N. FInd the rule in the list of General Rules (it will be at the bottom) and
repeatedly click "Move Up" to get the rule to the top of the list
Mac
1. Download OAFS package (1.4.x) from www.openafs.org
2. Download afsinstall.app.tar.gz from
http://cf.ccmr.cornell.edu/publicdownloads/afs/
3. Run the OAFS package
A. do NOT reboot when done
4. Run the afsinstall.app
A. Cellname: cnf.cornell.edu
B. CellAlias: cnf
C. Accept defaults for CellServDB
D. For the AFS Options
a. change -fakestat to -fakestat-all
5. copy the attached edu.mit.Kerberos file to Mac HD - Library - Preferences
6. Download the gui AFSTokens app (Tiger version) from
https://forge.cornell.edu/sf/projects/afs_tokens
File Releases tab
7. Download the OpenAFS Contextual Menu Plugin from:
http://www.ncsu.edu/mac/pn/index.php?name=UpDownload&req=viewdownloaddetails&lid=10
8. Copy the Contextual Menu Plugin to Mac HD - Library - Contextual Menu Items
9. Reboot
10. Enjoy
Using
Windows
to login to afs, start menu -> All Programs -> OpenAFS -> Authentication (icon
is a lock icon)
this will put a lock icon w. a red X over it in your system tray. You can
double click on this icon to pop up a window where you can obtain afs tokens.
Tokens are what your afs client presents to the afs file server to authenticate
you.
For your username, you will use:
netid@CIT.CORNELL.EDU
having CIT.CORNELL.EDU in all caps is very important.
and use your netid password.
There will be a delay before you get tokens due to a dns problem on
CNF/Cornell's end -- the delay will go away once we get the problem fixed.
To access afs from windows, you can:
start menu -> run
\\afs\cnf.cornell.edu
this will bring up the root of the cnf afs cell. You can map this path to a
drive letter
1. rt click on My Network Places
2. Choose Map Network Drive
3. Drive letter X (to match what we've done elsewhere)
4. Path should be //afs/cnf.cornell.edu