|
Size: 2313
Comment: format Kerberos instructions so that it's uniform with other instructions
|
← Revision 26 as of 2019-01-07 13:36:57 ⇥
Size: 1352
Comment:
|
| Deletions are marked like this. | Additions are marked like this. |
| Line 1: | Line 1: |
| ## page was renamed from MemberManual/TransferringFiles/OpenAFS/DebianClient | |
| Line 5: | Line 6: |
| [[TableOfContents]] | These instructions have been tested on Debian wheezy. |
| Line 7: | Line 8: |
| <<TableOfContents>> | |
| Line 8: | Line 10: |
| = OpenAFS Client Installation = | == OpenAFS Client Installation == |
| Line 10: | Line 12: |
| {{{ sudo aptitude install openafs-client }}} Answer the configuration questions as follows: |
To install the OpenAFS client and related programs, run `apt-get install openafs-client openafs-krb5 krb5-user` as root. Answer the configuration questions as follows: |
| Line 17: | Line 15: |
| * The default value for "Size of AFS cache in kB" is okay. You can increase the cache size if you want. * Dynamically generate the contents of /afs? Yes * DB server host names for your home cell: `deleuze.hcoop.net` * Run Openafs client now and at boot? Yes |
* Default Kerberos version 5 realm: `HCOOP.NET` |
| Line 22: | Line 17: |
| = Kernel Module Installation = | You can accept the default values for other questions. If you're not prompted for these values, run `dpkg-reconfigure -phigh openafs-client krb5-user`. |
| Line 24: | Line 19: |
| OpenAFS requires a kernel module, and Debian does not provide third-party kernel modules as binary packages. Module-assistant can download, compile, and install kernel modules for you. Install that, then install the OpenAFS module: | You may also need to run `service openafs-client restart` |
| Line 26: | Line 21: |
| {{{ sudo aptitude install module-assistant sudo module-assistant prepare sudo module-assistant install openafs-modules }}} |
== Using AFS == |
| Line 32: | Line 23: |
| OpenAFS's cache is located at /var/cache/openafs, and it must be on an ext2 or ext3 filesystem. If /var/cache is not on an ext2 or ext3 filesystem, you'll need to mount an ext2 or ext3 filesystem at /var/cache/openafs. OpenAFS cache does not work well, if at all, on ReiserFS systems. | To gain access to your HCoop AFS share, run `kinit user@HCOOP.NET && aklog hcoop.net` on your local system. |
| Line 34: | Line 25: |
| Restart OpenAFS: {{{ sudo /etc/init.d/openafs-client restart }}} Now you should be able to see files in /afs/hcoop.net, but you won't have any AFS tokens. So let's install some Kerberos packages. = Kerberos Installation = {{{ sudo aptitude install openafs-krb5 krb5-user }}} * Default Kerberos version 5 realm: `HCOOP.NET` * Kerberos servers for your realm: `deleuze.hcoop.net` * Administrative server for your Kerberos realm: `deleuze.hcoop.net` = Using AFS = Typically, to gain access to your HCoop AFS share, do the following on your local system: {{{ kinit user@HCOOP.NET aklog -c hcoop.net }}} Be sure that the `openafs` module is loaded or there will be errors. The tickets gained will last up to 10 hours but can be renewed with `krenew` for up to 8 days. Here's a common use: |
The tickets gained will last up to 10 hours, but can be renewed with `krenew` for up to 8 days. The `krenew` command is provided by the `kstart` package. The following command w: |
| Line 65: | Line 32: |
---- CategoryMemberManual |
This is the chapter of the MemberManual that describes how to install and configure OpenAFS Client on Debian based systems. These instructions were adapted from HCoop user bpt's instructions.
These instructions have been tested on Debian wheezy.
Contents
OpenAFS Client Installation
To install the OpenAFS client and related programs, run apt-get install openafs-client openafs-krb5 krb5-user as root. Answer the configuration questions as follows:
AFS cell this workstation belongs to: hcoop.net
Default Kerberos version 5 realm: HCOOP.NET
You can accept the default values for other questions. If you're not prompted for these values, run dpkg-reconfigure -phigh openafs-client krb5-user.
You may also need to run service openafs-client restart
Using AFS
To gain access to your HCoop AFS share, run kinit user@HCOOP.NET && aklog hcoop.net on your local system.
The tickets gained will last up to 10 hours, but can be renewed with krenew for up to 8 days. The krenew command is provided by the kstart package. The following command w:
krenew -K 30 -t
See the krenew man page to learn what these options are doing.