The AFSDB DNS resource record is used to specify DCE or AFS DBserver hosts. name {ttl} addr class AFSDB subtype server host name toaster.com. IN AFSDB ...

AFS frequently asked questions This Wiki document is based on afs faq, version 1.113, dated 19:50 Thursday 9th July 1998, by Main.PaulBlackburn mpb@acm.org http:/ ...

the First AFS Machine Additional Server Machines Additional Client Machines Documents linked from the above docs Do not use them directly Main.CraigCook ...

5 About the AFS faq About the AFSFrequentlyAskedQuestions. PreambleFAQ GeneralFAQ UsageFAQ AdminFAQ ResourcesFAQ FurtherReading I started compiling ...

See http://www.cs.rose hulman.edu/docs/afs doc/html/AdminGd/auagd020.htm#HDRWQ580. It may be a little silly creating a bunch of topics that just link to the various ...

As of Windows NT version 5.0, normally known by the name Windows 2000, the domain controller (aka ActiveDirectory) uses KerberosV for authentication. The resulting ...

UNIX AFS Backend Delegated administration of certain volumes. Available at http://www.eyrie.org/~eagle/software/afs backend/ BackupPC4AFS Backup OpenAFS volumes ...

3 AFS administration The Administration Section of the AFSFrequentlyAskedQuestions. PreambleFAQ GeneralFAQ UsageFAQ ResourcesFAQ AboutTheFAQ FurtherReading ...

Over the years, AFS has developed a rich and interesting history. This page is an attempt to document some of that history for posterity. For starters, here is a ...

In 1983, with mainframes in decline, Carnegie Mellon initiated a joint venture with IBM to develop a vast distributed computing environment for their campus. This ...

Arla is a free AFS implementation. The main goal is to make a fully functional client with all capabilities of normal AFS. Other stuff, such as servers and management ...

Arla is an independent, free implementation of AFS by members of the StackenComputerClub at KungligaTekniskaHögskolan. Its home page is http://www.stacken.kth.se ...

Main.JeffreyAltman 16 Jun 2008 The AFS File Server request throughput is limited by its current architecture which dedicates one thread per request for the lifetime ...

An assortment of commands and tools related to AFS authentication sorted by authentication system. KaServer AFS version of Kerberos V4 The klog command (and kpasswd ...

This project has started and is trying to at least initially move all the IBM/Transarc Documentation into latex, and then update it so it actually reflects the OpenAFS ...

Main.MarkEichin 18 Jan 2002 Boxed Penguin is a complete InstantInfrastructure system that allows one to start from an empty PC and bring up a small but scalable infrastructure ...

The sysconfig program is the dynamic kernel loader provided for Digital UNIX systems. For AFS to function correctly, the sysconfig program must run each time the machine ...

Use the following instructions to build AFS modifications into the kernel on an HP UX system. On HP UX systems, you must build AFS modifications into a new static ...

Use the following instructions to build AFS modifications into the kernel on an IRIX system. 1. Copy the kernel initialization file afs.sm to the local /var/sysgen ...

There was a discussion of this idea on OpenAFSDevel. Main.NathanNeulinger outlined a two stage approach. I outlined some ideas for handling the multi client cache ...

Center for Information Technology Integration http://www.citi.umich.edu/ Main.TWikiGuest 19 Jul 2002

Administering an AFS Cell has many aspects. The care and feeding of the users, clients and servers is a traditional component of system administration, but the scale ...

The database used by clients and servers to locate the AFS DBservers in a cell. In modern clients this information is supplemented by information looked up in AFSDB ...

Interested in AFSRoot. Tryin to get a network bootable image who's filesystem exists only in AFS. Director of Undergraduate Labs for Computer Science at Texas Tech ...

Coda is a version of AFS that branched before its development moved to TransarcCorporation. One of its claims to fame is that it supports DisconnectedOperation. ...

Main.StevenJenkins 08 Jun 2007 This is an entry point into the code architecture. As always, the source for your release is the authoritative reference, but this ...

FSYNC sits on top of SYNC. Server: FSYNC fsInit(void) FSYNC sync() FSYNC newconnection(int afd) FSYNC com(int fd) FSYNC com VolOp(int fd ...

Main.StevenJenkins 11 Jun 2007 VInitVolumePackage is the main setup program for the fileserver, salvageserver, and volserver (and some utilities). It initializes ...

A list of errors can be found at GrandCentralOrg. When using KerberosV an error of 19270408 probably means one of: kvno in the KeyFile doesn't match that in the ...

Every AFS file server machine must have at least one partition or logical volume dedicated to storing AFS volumes. Each server partition is mounted at a directory ...

Every AFS file server machine must have at least one partition or logical volume dedicated to storing AFS volumes. Each server partition is mounted at a directory ...

Every AFS file server machine must have at least one partition or logical volume dedicated to storing AFS volumes. Each server partition is mounted at a directory ...

Every AFS file server machine must have at least one partition or logical volume dedicated to storing AFS volumes. Each server partition is mounted at a directory ...

Every AFS file server machine must have at least one partition or logical volume dedicated to storing AFS volumes. Each server partition is mounted at a directory ...

Every AFS file server machine must have at least one partition or logical volume dedicated to storing AFS volumes. Each server partition is mounted at a directory ...

In this section, you make modifications to guarantee that the appropriate fsck program runs on AFS server partitions. The fsck program provided with the operating ...

In this section, you make modifications to guarantee that the appropriate fsck program runs on AFS server partitions. The fsck program provided with the operating ...

Configuring the Cache The Cache Manager uses a cache on the local disk or in machine memory to store local copies of files fetched from file server machines. As the ...

By convention, the Cache Manager mounts the AFS filespace on the local /afs directory. In this section you create that directory. The afsd program sets several cache ...

Wait for the message that confirms that Cache Manager initialization is complete. On machines that use a disk cache, it can take a while to initialize the Cache ...

Creating a new AFS cell These are some links (and commentary) to various documents that exist online that describe creating a new AFS cell. The most common problem ...

The /usr/vice/etc/CellServDB file on a client machine's local disk lists the database server machines for each cell that the local Cache Manager can contact. If there ...

I am not the right person to write this page but here is summary from a pretty good note from DerekAtkins in a thread on the OpenAFSInfo mailing list. In order to ...

Main.TWikiGuest 02 Nov 2002

Darwin is the core of Apple's MacOSX product. The mailing list for this port is https://lists.openafs.org/mailman/listinfo/port darwin and archived at http://lists ...

Main.StevenJenkins 10 Mar 2008 The Demand Attach fileserver is a new architecture for the fileserver, volserver, and salvager that brings volumes online as as needed ...

In addition to being endemic to Coda, CITI created a version of AFS which supports disconnecting from the network while letting the client continue to access data ...

Instead of mounting the home cell's root.afs volume at the AFS mount point (typically /afs) a fake root is constructed from information available in the client's CellServDB ...

Setting up EnablePlainTextPassword Setting up EnablePlainTextPassword in the Windows Registry Before you can access AFS via an SMBtoAFS gateway that requires it, you ...

Follow the instructions in this section to incorporate AFS modifications into the AIX secondary authentication system. 1. Issue the ls command to verify that the ...

Enabling AFS Login on Digital UNIX Systems On Digital UNIX systems, the AFS initialization script automatically incorporates the AFS authentication library file into ...

At this point you incorporate AFS into the operating system's Pluggable Authentication Module (PAM) scheme. PAM integrates all authentication mechanisms on the machine ...

The standard IRIX command line login program and the graphical xdm login program both automatically grant an AFS token when AFS is incorporated into the machine's ...

At this point you incorporate AFS into the operating system's Pluggable Authentication Module (PAM) scheme. PAM integrates all authentication mechanisms on the machine ...

At this point you incorporate AFS into the operating system's Pluggable Authentication Module (PAM) scheme. PAM integrates all authentication mechanisms on the machine ...

Example uss Templates This section describes example templates for the basic and full account types (the template for an authentication only account is empty). The ...

Creating a New Cell on Fedora This is a step by step guide to setting up an AFS server on Fedora. I used Fedora 7 with OpenAFS 1.4.4 and the standard MIT KerberosV ...

There is a mailing list for the port at https://lists.openafs.org/mailman/listinfo/port freebsd and archived at https://lists.openafs.org/pipermail/port freebsd/. ...

Freelance AFS Client (a similar feature exists in the Unix clients, known as DynamicRoot) 1 Introduction The current implementation of AFS requires that all AFS clients ...

There are several FAQ web pages for AFS, the first is sort of official but old, dated 9 July 1998. AFSFrequentlyAskedQuestions http://www.angelfire.com/hi/plutonic ...

This is the complete index for all the FAQ documents:

6 Bibliography The Bibliography of the AFSFrequentlyAskedQuestions. PreambleFAQ GeneralFAQ UsageFAQ AdminFAQ ResourcesFAQ AboutTheFAQ If documentation ...

This page will have gatekeeping policy/information. Commit any patches to the head with a delta name that describes what they are Using ~shadow/pullup 15 (for openafs ...

1 General The General Section of the AFSFrequentlyAskedQuestions. PreambleFAQ UsageFAQ AdminFAQ ResourcesFAQ AboutTheFAQ FurtherReading 1.01 What ...

This is a rough outline. There are basically three options with several variants KaServer the standard option to comes with IBMAFS, implements KerberosIV with ...

Where to get AFS Package HTTP/FTP AFS IBM/AFS Discontinued. OpenAFS http://www.openafs.org/release/latest.html /afs/openafs.org/software ...

When OpenAFS was released, 3 files with HP copyrighted code could not be released. 2, the Rx kernel support, were reimplemented by Derrick Brashear from previously ...

http://www.pdc.kth.se/heimdal/ Main.TedAnderson 23 Jan 2002

These are notes on how to build OpenAFS from source code. Note that OpenAFS pre built binaries are available on the OpenAFS site and are available as prebuilt packages ...

After original development at CMU, TransarcCorporation and then IBM offered AFS as a commercial product. The web site for IBM AFS is http://www.transarc.ibm.com/Product ...

IP Address Based AFS Access Control for Fun and Profit You may have heard that the Andrew File System AFS allows IP address based entries for directory ACLs. ...

Reboot the machine and log in again as the local superuser root. # cd / # shutdown r now login: root Password: root password Run the AFS initialization ...

Run the AFS initialization script. # /sbin/init.d/afs start Cache Manager Initialization Automatically Start AFS on System Boot Now that you have confirmed ...

Run the AFS initialization script. # /sbin/init.d/afs start Cache Manager Initialization Automatically Start AFS on System Boot Now that you have confirmed ...

If you have configured the machine to use the ml dynamic loader program, reboot the machine and log in again as the local superuser root. # cd / # shutdown ...

Reboot the machine and log in again as the local superuser root. # cd / # shutdown r now login: root Password: root password Run the AFS initialization ...

Reboot the machine and log in again as the local superuser root. # cd / # shutdown i6 g0 y login: root Password: root password Run the AFS initialization ...

How to Install the OpenAFS Client This documentation provides instructions for installing the OpenAFS client only. Documentation for installing a server belongs elsewhere ...

Installing Additional Client Machines This chapter describes how to install AFS client machines after you have installed the first AFS machine. Some parts of the installation ...

Installing Additional Server Machines Instructions for the following procedures appear in the indicated section of this chapter. Installing an Additional File Server ...

Installing the First AFS Machine This chapter describes how to install the first AFS machine in your cell, configuring it as both a file server machine and a client ...

Main.MarkEichin 18 Jan 2002 See the BoxedPenguin main page for a detailed description of the Instant Infrastructure "vision".

As Main.CharlesClancy says in this thread: First, kill all your NIS passwords (no doubt with a nod to Shakespeare) Main.TedAnderson 07 Feb 2002

In large AFS environments, local tools are usually written to manage AFS more effectly. Today these tools are usually written in scripts. These scripts typically ...

See KungligaTekniskaHögskolan. Main.TedAnderson 21 Jan 2002

The KaServer is an implementation of KerberosIV that comes with AFS (OpenAFS still includes the kaserver, but it's suggested you instead install a KerberosV implementation ...

Installing Kerberos AFS AFS includes its own implementation of Kerberos, the KAServer. However, new installs of KAServer are not recommended as it is based on a ...

Someone should fill this in better. More information about Kerberos at http://www.mit.edu/kerberos . Kerberos v4 is supported natively by the AFS kaserver; The clients ...

Glossary Main.TWikiGuest 30 Dec 2003

Kerberos is a network authentication system which is available for Unix, Windows, Macintosh, and I'm sure lots of other platforms. How does this relate to OpenAFS ...

http://web.mit.edu/kerberos/www/ Main.JasonGarman 30 Jan 2002

A binary file containing fixed length records consisting of a KeyVersionNumber (kvno) and a 56 bit DES key. Main.DerrickBrashear 26 Nov 2002

Monatonically increasing (in most cases) key version identifier which is incremented each time a principal changes keys (typically involving a change password operation ...

Main.JimmyEngelbrecht 06 May 2004 The OpenAFS client for windows expects the DB servers to respond to kerberosrequests( ), which is not the case if you run for ex ...

I have spoken to LoveHörnquistÅstrand , who knows, and he indicates that 'Kungl' is an abbreviated form. According to Love, the full form is preferable in this ...

See KungligaTekniskaHögskolan . Main.JeffreyHutzelman 18 Jan 2002 Main.TedAnderson 21 Jan 2002 I have spoken to LoveHörnquistÅstrand , who knows, and he ...

Popular abbreviation and domain name: KTH at http://www.kth.se/. Groups: StackenComputerClub aka StackenKTH at http://www.stacken.kth.se/. Projects: Krb4KTH, HeimdalKTH ...

Modify AFS clients and servers to support files bigger than 231 1 bytes. Here is the way Main.JeffreyHutzelman described the project: Add a whole new set of fileserver ...

Main.JeremyStribling 28 Jun 2002 Linux OpenAFS Installation Tools In the OpenAFS source tree, in the src/tools/install dircetory, there are scripts that can configure ...

The AIX kernel extension facility is the dynamic kernel loader provided by IBM Corporation. AIX does not support incorporation of AFS modifications during a kernel ...

In this section you incorporate AFS into the IRIX kernel, choosing one of two methods: Dynamic loading using the ml program distributed by Silicon Graphics, Incorporated ...

The insmod program is the dynamic kernel loader for Linux. Linux does not support incorporation of AFS modifications during a kernel build. For AFS to function correctly ...

The modload program is the dynamic kernel loader provided by Sun Microsystems for Solaris systems. Solaris does not support incorporation of AFS modifications during ...

Mac OS X Main.TWikiGuest 26 Jun 2003 See the DarwinPort page for relevant information. Main.DaveBotsch 14 Nov 2003

Porting OpenAFS to the Nokia N Series Internet Tablet (N800/N810) running the Maemo platform Developer: Main.DerrickBrashear Tester: Main.JasonEdgecombe Notes: We ...

Pending and Desired OpenAFS Projects Pending Projects The following are items known to be in progress, and, where available, a point of contact. WindowsIFS Implement ...

Main.StevenJenkins 01 Aug 2007 This is a place holder for notes on the redesign of the openafs.org website. In particular, the new site must be designed to be accessible ...

Russ Allbery The next step would be to determine the set of questions that we believe should be answered by each class of visitor. Here's a first cut at that ...

Progress of the new Windows documentation Ideas WindowsAdministratorsInstallationGuide Where to download the package. Walk through of the installation steps. Optional ...

OpenAFS is the open source version of AFS. Its project home page is at http://www.openafs.org. Other AFS implementations: Coda, and https://lists.openafs.org ...

The home of OpenAFS development, the OpenAFSCVS tree can be browsed at: http://www.openafs.org/frameset/cgi bin/cvsweb.cgi/openafs/ or can be accessed at :pserver ...

The OpenAFS project has several mailing lists, one of which is OpenAFS devel is for technical discussion of OpenAFS development work and is archived at http://lists ...

The OpenAFS project has several mailing lists, one of which is OpenAFS info is for general discussion of OpenAFS and is archived at http://lists.openafs.org/pipermail ...

PSetACL $ Group : V $ Function : VIOCSETAL (1) Set access control list $ Arguments : the ACL being set $ Outcome : Changed ACL, via direct writing ...

OpenBSD As of release 3.6, is included in the default install of OpenBSD, but is only sufficient for client use. See http://www.undeadly.org/cgi?action article ...

There's more recent thinking on this topic but FurtherReading#Everhart90 is a start. Main.TedAnderson 14 Feb 2002

See ProcessAuthenticationGroup. Main.TedAnderson 07 Feb 2002

Main.JimmyEngelbrecht 01 Nov 2002 PAM (Pluggable Authentication Modules) There is a nice krb5 pam module that gets you krb4 tickets, krb5 tickets and AFS tokens. http ...

This topic is a place to collect information on AFS performance measurements and tools. Tools Andrew Benchmark This old and venerable suite has been used many times ...

0 Preamble The Preamble of the AFSFrequentlyAskedQuestions. GeneralFAQ UsageFAQ AdminFAQ ResourcesFAQ AboutTheFAQ FurtherReading 0.01 Purpose and ...

Some words from Main.RussAllbery on process authentication groups ( PAG s) with edits: A PAG holds the authentication information (i.e. tokens or basically AFS service ...

ComErrErrors RPCCallNumbers RxServices RxKadAuthenticatorTypes to deal with a cryptographic weakness in Kerberos 4 involving cross cell authentication a new ...

Where can you use ReiserFS? There seems to be much confusion amongst new OpenAFS administrators about when and where they can use ReiserFS. This document attempts ...

In this section, you make modifications to guarantee that the appropriate fsck program runs on AFS server partitions. The fsck program provided with the operating ...

In this section, you make modifications to guarantee that the appropriate fsck program runs on AFS server partitions. The fsck program provided with the operating ...

4 Getting more information The Administration Section of the AFSFrequentlyAskedQuestions. PreambleFAQ GeneralFAQ UsageFAQ AdminFAQ AboutTheFAQ FurtherReading ...

Using Samba as an AFS gateway Recently I've been researching methods of using Samba as an AFS gateway. Below are my findings so far. Please feel free to add/correct ...

SSH Key Authentication and AFS Token Passing The first part of this document describes a way to set up your ~/.ssh/ directory so that you only need a token on ...

Main.TWikiGuest 22 Nov 2002

http://www.stacken.kth.se/ Main.DerrickBrashear 24 Jan 2002

The function that maps a password to an encryption key is called StringToKey. The AFS standard one uses the realm name as a salt. The MIT standard is different from ...

AFS into the AIX Kernel AFS Login on AIX Systems AFS into the Digital UNIX Kernel AFS Login on Digital UNIX Systems AFS into the HP UX Kernel AFS Login ...

NAMEI vs. inode based file server There are two different flavours of the AFS file server (the fs process): One uses inodes to store AFS data (volumes, files, metadata ...

Platform OpenAFS Arla Description alpha dux40 yes yes Alpha Digital UNIX 4.0 alpha dux50 yes yes yes Alpha Tru64 UNIX ...

The ITC group at Carnegie Mellon spun off Transarc to commercialize AFS starting in June 1989. Main.TWikiGuest 28 Jan 2002

Main.TWikiGuest 13 Dec 2002 ??

Some papers on Ubik written by Main.MikeKazar. Quorum Completion, Mike Kazar. Ubik A Library for Managing Ubiquitous Data. M. L. Kazar, "Ubik: Replicated ...

2 Using AFS The Usage Section of the AFSFrequentlyAskedQuestions. PreambleFAQ GeneralFAQ AdminFAQ ResourcesFAQ AboutTheFAQ FurtherReading 2.01 ...

I know of at least one web to AFS service, there are probably others. By appending any publicly readable (system:anyuser rl) /afs pathname to this URL you can access ...

Welcome to the home of TWiki.AFSLore. This is a web based collaboration area for collecting, maintaining, and distributing information about the AFS distributed filesystem ...

Web Web Home Changes Index Search Webs

is a subscription service to be automatically notified by email when topics change in the TWiki.AFSLore web. This is a convenient service, so you do not have to ...

TWiki.AFSLore Web Preferences The following settings are web preferences of the TWiki.AFSLore web. These preferences overwrite the site level preferences in ...

TWiki's AFSLore web /view/AFSLore

See also the verbose WebIndex.

AFS is a distributed network filesystem originially developed as part of the AndrewProject at CarnegieMellonUniversity in the mid 1980's. It provides a number of ...

This page is for information about individuals and companies who are willing to provide AFS support and/or consulting services. If you or your company are interested ...

It is clear that Wiki vandalizers or spammers have been targetting AFSLore. There has been some discussion on the OpenAFSInfo mailing list: wiki docs contain spam ...

Main.JeffreyAltman 14 Jun 2008 This page provides a partial list of the work that must be done to update the AFS Servers on the Microsoft Windows platform. NetRestrict ...

VERSION 1.8 OF THIS PAGE HAS BEEN CONVERTED TO DOCBOOK. CONSIDER IT READ ONLY! / TommieGannert If you want to read it as HTMLHelp, download it here. Configuration ...

End User Quick Start Guide Introduction This guide is a (hopefully) straightforward manual for setting up OpenAFS for Windows 1.3.70. It was written with the not ...

Here are the instructions I used for creating a working afs/cell.name service principal on Windows 2003 SP2 Active Directory Kerberos 5 server. These instructions ...

This topic describes the "why" and "how" of making the Windows OpenAFS client use the Microsoft Loopback Adapter. Why use the Loopback adapter? The AFS Client (both ...

There is a very good sounding discussion of storing roaming profiles in AFS on the OpenAFSInfo mailing list: https://lists.openafs.org/pipermail/openafs info/2003 ...

Troubleshooting Guide for OpenAFS for Windows Bugs Are my tokens destroyed when I logout? Hard to tell. If your profile is local (not on the network, roaming) there ...

With regard to linking libraries: You can either link agaist lwp or pthreads. You do NOT want to do both. Pthreads looks to be easier in terms of keeping track of ...