AFS configuration on self-administrated computers

add-apt-repository -y "ppa:openafs/stable"
apt-get update && apt-get upgrade

Type into the terminal window:

sudo apt-get install heimdal-clients openafs-client openafs-krb5

During the installation you'll be prompted to enter the 'Default Realm' of Kerberos. Enter in CAPITALS! please: MATH.UNI-HAMBURG.DE. Furthermore you need to enter the 'Default cell' of AFS. In small letters please enter: math.uni-hamburg.de.

After a reboot of the computer, AFS will start automatically, although it's possible to manually start the AFS service by typing the following into a terminal window:

sudo service openafs-client start

If secure boot is enabled in BIOS, the Linux kernel can only load modules that are signed. OpenAFS cannot be signed, since it is build on your computer upon install.

sudo sed -i "s/AFS_CLIENT=true/AFS_CLIENT=false/" /etc/openafs/afs.conf.client

sudo service openafs-client force-start

To access to the AFS, you first need to obtain a Kerberos ticket and an AFS token. Please enter the following commands into a terminal window:

• kinit <identifier>     e.g. kinit fmnv165 (for Kerberos ticket)
• aklog     (for AFS token)

If for any reasons the 'Default Realm' and / or 'Default Cell' should be different from those mentioned above, you can use the long versions of the commands. In a terminal window please enter the following:

• kinit <Kennung>@MATH.UNI-HAMBURG.DE     z.B. kinit fmnv165@MATH.UNI-HAMBURG.DE
• aklog math.uni-hamburg.de

Please note: This 'how-to' refers to the 64-bit version of Windows
Installation-programs for 32-bit Windows are available at the respective “original address”.

• Download of the most recent Heimdal
  (original address: https://www.secure-endpoints.com/heimdal/)
• Installation of Heimdal-AMD64-full-7-4-0-40.msi
  Keep the default settings (“Typical”)
  
  
• Download of the most recent Network Identity Manager: (Network Identity Manager 2.5.0.106 64-bit MSI)
  (ursprüngliche Adresse: http://www.secure-endpoints.com/netidmgr/v2/)
• Installation of netidmgr-AMD64-rel-2_0_102_907.msi
  Custom Settings:
  • Keystore → “Entire Feature unavailable”
    
    
• Download of the most recent OpenAFS
  (original address: https://www.auristor.com/openafs/client-installer/
• Installation of yfs-openafs-en_US-AMD64-1_7_3301.msi
  Custom Settings:
  • Default Cell: “math.uni-hamburg.de”
  • Integrated Login: “Disable”

Now restart the computer.

• On the right side of the taskbar, there's an icon with a yellow padlock,​ which is currently overlayed with a red X. Open the Network Identity Manager (NIM) by a click on this icon
• The NIM has on the left a symbol with a yellow sun “​Obtain New Credentials”,​ klick it.
• Username: UHH-Account (e.g. fmsv030)
• Realm: MATH.UNI-HAMBURG.DE (must be in capital letters)
• Press three times ​Next ​ (The standards are mostly ok)
• Enter the Kerberos-Passwort of the Mathematics Department
• Click Finish

• Download of the most recent AFS version corresponding to your macOS version ( Open Source )
  (Provided by Sine Nomina Associates):
  • for 10.15: OpenAFS-1.8.8.1-osxsna3-Catalina.dmg
  • for 11.0: OpenAFS-1.8.8.1-osxsna3-BigSur-Universal.dmg
  • for 12.0: OpenAFS-1.8.8.1-osxsna3-Monterey-Universal.dmg
• Alternative Download ( CLOSED Source )
  (Provided by AuriStor Inc.):
  • for 10.15: AuriStor-client-2021.05-37-Catalina.dmg
  • for 11.x: AuriStor-client-2021.05-37-BigSur.dmg
  • for 12.x: AuriStor-client-2021.05-37-Monterey.dmg
  • for 13.x: Auristor-client-2021.05-37-Ventura.dmg
  • for 14.x: Auristor-client-2021.05-37-Sonoma.dmg
• Open the .dmg file and install the contained .pkg file
  Please enter during installation (Cell): math.uni-hamburg.de
  
  
• Save the file krb5.conf into the home directory (WITHOUT the .txt extension, Safari might ask for this)
• As Root user copy this file (in a terminal window) to /etc/krb5.conf
  sudo cp ~/krb5.conf /etc/krb5.conf
  (in case Safari saved the file with “.txt” extension after all and in the “Downloads”-folder instead of the home-directory:)
  ​sudo cp ~/​Downloads/​krb5.conf.txt ​/​etc/​krb5.conf​

• Click onto the “Apple”-symbol at upper left corner → System Settings → Other → OpenAFS
• In the OpenAFS window, below the “Tokens” - tab set the following checkmarks (see graphic):
  

  

• AFS Menu
• Backgrounder (responsible for monitoring the AFS-Tokens)
• use aklog
• get credential at login time (if desired)

• → When the installation is finished, a symbol in form of a small lock appears in the menu-bar at the upper right corner (see graphic). By clicking on it you can login to the AFS ('Get New Token') or watch the status of the AFS (red X: not connected to the AFS)
  
• To see a link to the AFS on the Desktop, you have to open the settings of the Finder in the section “Show these items on the desktop” and set a checkmark near “Connected Servers”