ITwiki

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== AFS configuration on self-administrated computers ======

===== Linux =====
==== Debian / Ubuntu and its derivatives ====
<note tip>Under Ubuntu it can be useful to integrate a 'ppa' (private package archive) prior to the installation of OpenAFS. This package contains the most recent version of OpenAFS.
  add-apt-repository -y "ppa:openafs/stable"
  apt-get update && apt-get upgrade
</note>
Type into the terminal window:

  sudo apt-get install heimdal-clients openafs-client openafs-krb5
  
During the installation you'll be prompted to enter the 'Default Realm' of Kerberos. Enter in CAPITALS! please: ''MATH.UNI-HAMBURG.DE''. Furthermore you need to enter the 'Default cell' of AFS. In small letters please enter: ''math.uni-hamburg.de''.


After a reboot of the computer, AFS will start automatically, although it's possible to manually start the AFS service by typing the following into a terminal window:
  sudo service openafs-client start
  
**If secure boot is enabled in BIOS, the Linux kernel can only load modules that are signed. OpenAFS cannot be signed, since it is build on your computer upon install.**

<WRAP center 80% round box>
If you need the AFS only seldom and you **DON'T** want it to be started automatically with the system, you can deactivate it with the following command-line
  sudo sed -i "s/AFS_CLIENT=true/AFS_CLIENT=false/" /etc/openafs/afs.conf.client
To start the AFS at need, you then need a ''force-start'':
  sudo service openafs-client force-start
</WRAP>
<WRAP clear></WRAP>


To access to the AFS, you first need to obtain a Kerberos ticket and an AFS token. Please enter the following commands into a terminal window:

  * ''kinit <identifier>'' (nbsp) e.g. kinit fmnv165 (for Kerberos ticket)
  * ''aklog'' (nbsp) (for AFS token)


If for any reasons the 'Default Realm' and / or 'Default Cell' should be different from those mentioned above, you can use the long versions of the commands. In a terminal window please enter the following:

  * ''kinit <Kennung>@MATH.UNI-HAMBURG.DE'' (nbsp) z.B. kinit fmnv165@MATH.UNI-HAMBURG.DE
  * ''aklog math.uni-hamburg.de''

===== Windows =====
**Please note**: This 'how-to' refers to the 64-bit version of Windows\\ Installation-programs for 32-bit Windows are available at the respective "original address".
  * Download of the most recent [[http://www.math.uni-hamburg.de/afs/win/Heimdal-AMD64-full-7-4-0-40.msi|Heimdal]]\\ (original address: <nowiki>https://www.secure-endpoints.com/heimdal/</nowiki>)
  * Installation of ''Heimdal-AMD64-full-7-4-0-40.msi''\\ Keep the default settings ("Typical")\\ \\ 
  * Download of the most recent [[http://www.math.uni-hamburg.de/afs/win/netidmgr-heimdal-AMD64-rel-2_5_0_106.msi|Network Identity Manager]]: (Network Identity Manager 2.5.0.106 64-bit MSI)\\ (ursprüngliche Adresse: <nowiki>http://www.secure-endpoints.com/netidmgr/v2/</nowiki>)
  * Installation of ''netidmgr-AMD64-rel-2_0_102_907.msi''\\ Custom Settings:
    * Keystore -> "Entire Feature unavailable"\\ \\ 
  * Download of the most recent [[http://www.math.uni-hamburg.de/afs/win/yfs-openafs-en_US-AMD64-1_7_3301.msi|OpenAFS]]\\ (original address: <nowiki>https://www.auristor.com/openafs/client-installer/</nowiki>
  * Installation of ''yfs-openafs-en_US-AMD64-1_7_3301.msi''\\ Custom Settings:
    * Default Cell: "math.uni-hamburg.de"
    * Integrated Login: "Disable"

Now restart the computer.

==== First Login to AFS ====
  * On the right side of the taskbar, there's an icon with a yellow padlock, which is currently overlayed with a red X. Open the Network Identity Manager (NIM) by a click on this icon
  * The NIM has on the left a symbol with a yellow sun "Obtain New Credentials", klick it.
  * Username: UHH-Account (e.g. fmsv030)
  * Realm: MATH.UNI-HAMBURG.DE (must be in capital letters)
  * Press three times ''Next''  (The standards are mostly ok)
  * Enter the Kerberos-Passwort of the Mathematics Department
  * Click ''Finish''


===== Mac OS X =====
<note important>There are two different clients to access the AFS filesystem. The first is the open-source ''OpenAFS-Client'', the other is the closed-source ''Auristor-Client''. The installation of the latter is a little bit different than shown below, but in principle similar. \\ When Updating the Operating System, please remember: You must uninstall the old AuriStor or OpenAFS version with the corresponding version (e.g. uninstall OpenAFS for Yosemite with the same version). After that, choose the corresponding version for your Operating System.</note>

  * Download of the most recent AFS version corresponding to your macOS version (<wrap em> Open Source </wrap>)\\ (Provided by [[https://download.sinenomine.net/openafs/bins/|Sine Nomina Associates]]):
    * for 11.0: [[http://www.math.uni-hamburg.de/afs/osx/OpenAFS-1.8.8.1-osxsna3-BigSur-Universal.dmg|OpenAFS-1.8.8.1-osxsna3-BigSur-Universal.dmg]]
    * for 12.0: [[http://www.math.uni-hamburg.de/afs/osx/OpOpenAFS-1.8.13-osxsna3-Monterey-Universal.dmg|OpenAFS-1.8.13-osxsna3-Monterey-Universal.dmg]]
    * for 13.0: [[http://www.math.uni-hamburg.de/afs/osx/OpenAFS-1.8.13-osxsna3-Ventura-Universal.dmg|OpenAFS-1.8.13-osxsna3-Ventura-Universal.dmg]]
    * for 14.0: [[http://www.math.uni-hamburg.de/afs/osx/OpenAFS-1.8.13-osxsna3-Sonoma-Universal.dmg|OpenAFS-1.8.13-osxsna3-Sonoma-Universal.dmg]]
  * Alternative Download (<wrap em> CLOSED Source</wrap> )\\ (Provided by [[https://www.auristor.com/filesystem/client-installer/|AuriStor Inc.]]):
    * for 11.x: [[http://www.math.uni-hamburg.de/afs/osx/AuriStor-client-2021.05-61-BigSur.dmg|AuriStor-client-2021.05-61-BigSur.dmg]]
    * for 12.x: [[http://www.math.uni-hamburg.de/afs/osx/AuriStor-client-2021.05-61-Monterey.dmg|AuriStor-client-2021.05-61-Monterey.dmg]]
    * for 13.x: [[http://www.math.uni-hamburg.de/afs/osx/Auristor-client-2021.05-61-Ventura.dmg|Auristor-client-2021.05-61-Ventura.dmg]]
    * for 14.x: [[http://www.math.uni-hamburg.de/afs/osx/Auristor-client-2021.05-61-Sonoma.dmg|Auristor-client-2021.05-61-Sonoma.dmg]]
    * for 15.x: [[http://www.math.uni-hamburg.de/afs/osx/Auristor-client-2021.05-61-Sequoia.dmg|Auristor-client-2021.05-61-Sequoia.dmg]]
  * Open the .dmg file and install the contained .pkg file\\ Please enter during installation (Cell): math.uni-hamburg.de\\ \\ 
  * Save the file [[http://www.math.uni-hamburg.de/afs/krb5.conf|krb5.conf]] into the home directory (WITHOUT the .txt extension, Safari might ask for this)
  * As Root user copy this file (in a terminal window) to /etc/krb5.conf\\ ''sudo cp ~/krb5.conf /etc/krb5.conf''\\ (in case Safari saved the file with ".txt" extension after all and in the "Downloads"-folder instead of the home-directory:)\\ ''sudo cp ~/Downloads/krb5.conf.txt /etc/krb5.conf''

  * Click onto the "Apple"-symbol at upper left corner -> System Settings -> Other -> OpenAFS
  * In the OpenAFS window, below the "Tokens" - tab set the following checkmarks (see graphic):\\ <WRAP 180px left> {{de:user:afs:osx-openafs.png?150}} </WRAP>

  * AFS Menu
  * Backgrounder (responsible for monitoring the AFS-Tokens)
  * use aklog
  * get credential at login time (if desired)
<WRAP clear></WRAP>
  * -> When the installation is finished, a symbol in form of a small lock appears in the menu-bar at the upper right corner (see graphic). By clicking on it you can login to the AFS ('Get New Token') or watch the status of the AFS (red X: not connected to the AFS) \\ {{de:user:afs:screen_shot_2013-07-29_at_16.23.17.png?150}}
  * To see a link to the AFS on the Desktop, you have to open the settings of the Finder in the section "Show these items on the desktop" and set a checkmark near "Connected Servers"

<note>Access to files in the AFS is also for example via sftp on the command-line possible:\\
e.g. for your private Department-Website:\\
''sftp <kennung>@login1.math.uni-hamburg.de'' connect with the Server\\
''cd public_html'' change into the correct directory\\
''ls -al'' list directory\\
''get index.html'' fetch the file\\
Edit the file index.html e.g. in TextWrangler - you can leave the Terminal with the sftp open\\
''put index.html'' Upload the modified file\\
''bye'' end SFTP</note>