Sadly, in both cases this will require a reboot.
In general, this should be pretty quick / painless as there a packages available for all AFS-related utilities.
# Install afs tools sudo apt-get install openafs-client openafs-krb5 # <reboot> # Install the kerberos configuration for the umich realm [attached to this page] sudo cp DOWNLOADS/krb5.conf /etc/krb5.conf
Next make sure that you have your default cell set up correctly. The contents of “ThisCell” should be one line as follows:
$ cat /etc/openafs/ThisCell umich.edu
You'll need to reboot at this point.
You will need to get fresh tokens every 24 hours, or every fresh boot.
# Get a kerberos ticket (uniqname is optional if your local machine login name != uniqname) kinit [uniqname] # Get an AFS token aklog # OPT: Verify everything is working (output something like: User's (AFS ID 251306) tokens for email@example.com [Expires Nov 28 23:40]) tokens # AFS is now available and mounted at /afs # Visit your home directory: cd /afs/umich.edu/user/u/n/uniqname/
The preferred AFS Kerberos client is Heimdal, available here: https://www.secure-endpoints.com/heimdal/
Click “Next” through all the options screens and install, the defaults are fine.
Download the attached file and replace the existing C:\ProgramData\Kerberos\krb5.conf with it.
Available here: http://openafs.org/pages/windows.html#1_7_64bit_downloads
Note: 64-bit systems must install TWO packages at this link, 32-bit systems only need the one
In addition to the defaults, turn on: "Loopback adapter" "Authentication for AFS" "Client Configuration Tool"
Disable "Integrated Logon" Enable the remaining 3 options
This should be a screen of checkboxes; leave them all checked except the last option (Show credentials window on startup), this should be the default
You will need to get fresh tokens every 24 hours, or every fresh boot. To do this you will have to open a command prompt (Start –> Run –> “cmd”)
# Get a kerberos ticket (uniqname is optional if your local machine login name != uniqname) kinit [uniqname] # Get an AFS token aklog # Verify everything is working (output something like: User's (AFS ID 251306) tokens for firstname.lastname@example.org [Expires Nov 28 23:40]) tokens
You can now browse AFS like a regular file system. Open explorer and in the address bar at the top type
to visit the root of AFS, or try the following to visit your home directory: