This is an old revision of the document!
Table of Contents
AFS configuration on self-administrated computers
Linux
Debian / Ubuntu and its derivatives
add-apt-repository -y "ppa:openafs/stable" apt-get update && apt-get upgrade
Type into the terminal window:
sudo apt-get install heimdal-clients openafs-client openafs-krb5
During the installation you'll be prompted to enter the 'Default Realm' of Kerberos. Enter in CAPITALS! please: MATH.UNI-HAMBURG.DE
. Furthermore you need to enter the 'Default cell' of AFS. In small letters please enter: math.uni-hamburg.de
.
After a reboot of the computer, AFS will start automatically, although it's possible to manually start the AFS service by typing the following into a terminal window:
sudo service openafs-client start
If you need the AFS only seldom and you DON'T want it to be started automatically with the system, you can deactivate it with the following command-line
sudo sed -i "s/AFS_CLIENT=true/AFS_CLIENT=false/" /etc/openafs/afs.conf.client
To start the AFS at need, you then need a force-start
:
sudo service openafs-client force-start
To access to the AFS, you first need to obtain a Kerberos ticket and an AFS token. Please enter the following commands into a terminal window:
kinit <identifier>
e.g. kinit fmnv165 (for Kerberos ticket)aklog
(for AFS token)
If for any reasons the 'Default Realm' and / or 'Default Cell' should be different from those mentioned above, you can use the long versions of the commands. In a terminal window please enter the following:
kinit <Kennung>@MATH.UNI-HAMBURG.DE
z.B. kinit fmnv165@MATH.UNI-HAMBURG.DEaklog math.uni-hamburg.de
Windows
Please note: This 'how-to' refers to the 64-bit version of Windows
Installation-programs for 32-bit Windows are available at the respective “original address”.
EITHER
(recommended)- Download of the most recent MIT Kerberos (Kerberos for Windows Release 4.1)
(original address: http://web.mit.edu/kerberos/dist/) - Installation of
kfw-4.1-amd64.msi
Keep the default settings (“Typical”)
At the end select “No - restart later”
OR
- Download of the most recent Heimdal
(original address: https://www.secure-endpoints.com/heimdal/) - Installation of
Heimdal-AMD64-full-1-6-2-0.msi
Keep the default settings (“Typical”)
- Download of the most recent Network Identity Manager: (Network Identity Manager 2.0.102.907 64-bit MSI)
(ursprüngliche Adresse: http://www.secure-endpoints.com/netidmgr/v2/) - Installation of
netidmgr-AMD64-rel-2_0_102_907.msi
Custom Settings:- Keystore → “Entire Feature unavailable”
- Download of the most recent OpenAFS
(original address: https://www.auristor.com/openafs/client-installer/ - Installation of
yfs-openafs-en_US-AMD64-1_7_3301.msi
Custom Settings:- Default Cell: “math.uni-hamburg.de”
- Integrated Login: “Disable”
Now restart the computer.
First Login to AFS
- On the right side of the taskbar, there's an icon with a yellow padlock, which is currently overlayed with a red X. Open the Network Identity Manager (NIM) by a click on this icon
- The NIM has on the left a symbol with a yellow sun “Obtain New Credentials”, klick it.
- Username: UHH-Account (e.g. fmsv030)
- Realm: MATH.UNI-HAMBURG.DE (must be in capital letters)
- Press three times
Next
(The standards are mostly ok) - Enter the Kerberos-Passwort of the Mathematics Department
- Click
Finish
Mac OS X
OpenAFS-Client
, the other is the closed-source Auristor-Client
. The installation of the latter is a little bit different than shown below, but in principle similar
- Download of the most recent AFS version corresponding to the Mac OS X version:
- for 10.8: OpenAFS-1.6.5-Mountain Lion.dmg
- for 10.9: OpenAFS-1.6.15-Mavericks.dmg
- Alternative Download (Newer Version, CLOSED Source! Only rudimentary tested):
- for 10.9: AuriStor-client-0.102-Mavericks.dmg
- for 10.10: AuriStor-client-0.102-Yosemite.dmg
- for 10.11: AuriStor-client-0.102-ElCapitan.dmg
- Open the .dmg file and install the contained .pkg file
Please enter during installation (Cell): math.uni-hamburg.de
- Save the file krb5.conf into the home directory (WITHOUT the .txt extension, Safari might ask for this)
- As Root user copy this file (in a terminal window) to /etc/krb5.conf
sudo cp ~/krb5.conf /etc/krb5.conf
- Click onto the “Apple”-symbol at upper left corner → System Settings → Other → OpenAFS
- AFS Menu
- Backgrounder (responsible for monitoring the AFS-Tokens)
- use aklog
- get credential at login time (if desired)
- To see a link to the AFS on the Desktop, you have to open the settings of the Finder in the section “Show these items on the desktop” and set a checkmark near “Connected Servers”
e.g. for your private Department-Website:
sftp <kennung>@unix4.math.uni-hamburg.de
connect with the Servercd public_html
change into the correct directoryls -al
list directoryget index.html
fetch the fileEdit the file index.html e.g. in TextWrangler - you can leave the Terminal with the sftp open
put index.html
Upload the modified filebye
end SFTP