At IU, how do I install and configure OpenAFS on my Unix workstation for use with the RFS?
OpenAFS is a distributed file system that runs on most major computing platforms. In order to use it at Indiana University, you must also install a Kerberos 5 client, since IU uses the most secure authentication encryption available.
You will need root access to the computer, and you will most likely need to reboot it.
Installing Kerberos 5
To get the Kerberos 5 client, visit Kerberos: The Network
Authentication Protocol. Click current release. If you
use Unix (Solaris, AIX, Linux, etc.),
download the source code, unpack, compile, and install.
Research File System (RFS) at IU uses the
ADS.IU.EDU Kerberos realm. You can use the sample
krb5.conf file.
Installing OpenAFS
Once you have Kerberos installed, you can install OpenAFS. The latest OpenAFS release is available at the OpenAFS web site.
If you use Unix, download, compile, and install OpenAFS from the OpenAFS downloads page. Note that you will need at least OpenAFS 1.4.0-rc4 to use RFS. You will also want to be very sure that the aklog application compiles along with this. To force this, include the following when running configure:
./configure --with-krb5-conf=/usr/bin/krb5-config
Make sure you set this to the actual location of
krb5-config, as it may vary depending on where you
installed Kerberos applications earlier.
Each type of Unix needs to have a kernel module installed to be able
to use OpenAFS. These are available as binary packages in
tar.gz files at the OpenAFS web
site. You can read the documentation on how these are installed on
Unix systems at Quick
Beginnings. The documentation for installing each type of
supported OS is found in the appropriate section.
Once this is installed, you'll need to edit the following files:
-
/usr/vice/etc/CellServDBshould contain: -------------- >iu.edu #Cell name 129.79.43.68 #rfs1.uits.indiana.edu 134.68.142.53 #rfs3.iu.edu 134.68.142.51 #rfs2.iu.edu -------------- -
/usr/vice/etc/ThisCellshould contain: -------------- iu.edu --------------
After configuration and installation, reboot your computer to activate the kernel module and connect to the AFS server.
How to authenticate
To authenticate (with your IU Network ID username in place
of username):
Your home directory will be in a directory path like this:
/afs/iu.edu/home/u/s/username
If your username were spaceghost, for example, you would
find your files residing in
/afs/iu.edu/home/s/p/spaceghost .
If you need assistance with this process, email Research Storage.
Note: You will need to make a VPN connection to the Indiana University network if you wish to access your RFS account when you are away from the IU campus. You can disconnect from VPN once you have obtained your AFS token.
Last modified on September 09, 2009.
