 |
AFS is a distributed global file system that operates in the client-server
model. AFS is based on a distributed file system originally developed at the
Information Technology Center at Carnegie-Mellon University. It was called
the "Andrew File System." It can effectively function in large wide area
networks that span the entire globe as well as in small local area networks.
This document will explain how to install and configure AFS with
Kerberos security on your Windows
workstation. It assume you have already
installed Kerberos for Windows (KfW).
- Download the OpenAFS client from:
http://www.openafs.org/windows.html and run the installer
- Make sure that both the AFS Client and MS Lookback
Adapter are checked.
- Make sure you select Use the packaged CellServDB file.
- Enter glue.umd.edu as the AFS cell name.
- Make sure that the options shown below are checked.
Configuring Kerberos + AFS
- Launch the Kerberos for Windows Network Identity Manager
- Click on the here link to obtain new credentials.
- Enter the following information:
- your
Directory ID/password in the Username and Password
fields, and
- enter UMD.EDU in the Realm field (It must
be in uppercase).
- Click on the Options >> button and then the Kerberos 5
tab.
- Make sure that the Can be forwarded to other machines
checkbox is checked.
- Click on the AFS tab.
- Enter glue.umd.edu in the Cell drop-down
menu, then push Add/Update.
- Click on the Kerberos 4 tab.
- Make sure the Obtain Kerberos 4 tickets checkbox is
un-checked.
- Push the Ok button to obtain new credentials. You only need
to do the above steps the first time you use KfW, after that you will
only need to enter your Directory password.
- The image below shows what the Network Identity Manager
looks like after having obtained UMD.EDU Kerberos tickets and AFS
tokens for both WAM and Glue.
|
