|
Size: 3489
Comment: Re-wrote page with instructions on how I succesfully configured the OpenAFS on Mac OS X
|
Size: 5300
Comment:
|
| Deletions are marked like this. | Additions are marked like this. |
| Line 1: | Line 1: |
| #pragma section-numbers off This is the chapter of the MemberManual that describes how to install the OpenAFS client on Mac OS X. <<TableOfContents>> |
|
| Line 3: | Line 9: |
| Connecting to HCoop with AFS on Mac OS X requires setting up the OpenAFS client as well as Kerberos for authentication. On a Mac OS X 10.4 machine, the following steps allowed me to connect to my HCoop account over AFS in a few minutes. | Connecting to HCoop with AFS on Mac OS X requires setting up the OpenAFS client as well as Kerberos for authentication. On a Mac OS X 10.4 machine, the following steps have been proven to connect to HCoop with just a few minutes of configuration work. |
| Line 7: | Line 13: |
| Download the latest OpenAFS client (currently 1.4.6) from http://www.openafs.org/macos.html. Install this package and reboot. | Download the latest OpenAFS client (1.4.11 as of 2009-08-28) from http://www.openafs.org/macos.html. Install this package and reboot. |
| Line 31: | Line 37: |
| == Configure Kerberos == | == Install and Configure Kerberos == === For Mac OS X 10.6 (Snow Leopard) === The Kerberos Extras package for previous versions of Mac OS X is no longer maintained for Mac OS 10.6. Instead, Apple has included the "Ticket Viewer" feature within Keychain Access. To configure Kerberos on Snow Leopard, open Applications -> Utilities -> Keychain Access. Under the File menu, select Ticket Viewer. Select "Add Identity." For identity, enter your hcoop username followed by @HCOOP.NET (the all-caps realm is necessary). Then enter your Hcoop password. It will automatically obtain a ticket upon setting up the identity. After ten hours, the ticket expires and you'll need to select Obtain Ticket. Now open a terminal window (Applications -> Utilities -> Terminal) and type "aklog". This should initiate your AFS session. To test, browse to the path /afs/hcoop.net/user/, then follow the directories with letters that begin your HCoop username. You should be able to create and edit files on HCoop. === For Mac OS X 10.5 and below === |
| Line 40: | Line 56: |
| Now open a terminal window (Applications -> Utilities -> Terminal) and type "aklog". This should initiate your AFS session. To test, browse to the path /afs/hcoop.net/users/, then follow the directories with letters that begin your HCoop username. You should be able to create and edit files on HCoop. | Now open a terminal window (Applications -> Utilities -> Terminal) and type "aklog". This should initiate your AFS session. To test, browse to the path /afs/hcoop.net/user/, then follow the directories with letters that begin your HCoop username. You should be able to create and edit files on HCoop. |
| Line 42: | Line 58: |
| == Other tips and tricks == | To refresh your Kerberos tokens and your AFS ticket, the two standard Unix commands can be used from the console: {{{kinit username@HCOOP.NET}}} followed by {{{aklog}}}. To avoid having to type the {{{HCOOP.NET}}} part of the kinit command, set a Kerberos "Default Realm" for your machine. This is done by changing the {{{default_realm}}} line in the file /Library/Preferences/edu.mit.Kerberos to the following: |
| Line 44: | Line 60: |
| Occasionally, you may have to renew your Kerberos ticket manually or re-initiate your AFS connection. This can be done with two quick commands: type "kinit" (followed by your HCoop pass) and then "aklog" and you should see your AFS volume appear if it wasn't previously available. | {{{ default_realm = HCOOP.NET }}} |
| Line 46: | Line 64: |
| = Older instructions and misc resources for configuring the AFS client on Mac OS X = | That's it! You should be able to edit and save files on your HCoop account through AFS. |
| Line 48: | Line 66: |
| Users have tried the following but couldn't get them to work. If the instructions above don't do it for you, maybe something below will. | |
| Line 50: | Line 67: |
| == Other AFS Implementations on Mac OS X (Untested with HCoop) == | = Troubleshooting and Additional Resources = |
| Line 52: | Line 69: |
| === arla for Mac OS X === | == Troubleshooting on Mac OS X == |
| Line 54: | Line 71: |
| ---- Arla is a free AFS implementation. The main goal is to make a fully functional client with all capabilities of AFS as formerly sold by Transarc and today available as OpenAFS. Other stuff, such as servers and management tools are being developed, but currently not considered stable. ---- |
Our wiki page MemberManual/ShellAccess/TroubleshootingKerberos is a great reference for making sure that your Kerberos configuration is correct. In addition, the wiki pages for client configurations on other operating systems (MemberManual/TransferringFiles/OpenAFS) may be of help. Finally, there is always the hcoop-discuss mailing list! |
| Line 59: | Line 73: |
| == Obtain latest arla port == | == Other AFS Client Implementations on OS X == The following clients have not been tested with HCoop software. If you're not looking for a challenge, it's probably best to stay with the instructions above. === Arla for Mac OS X === From the Arla web site: Arla is a free AFS implementation. The main goal is to make a fully functional client with all capabilities of AFS as formerly sold by Transarc and today available as OpenAFS. Other stuff, such as servers and management tools are being developed, but currently not considered stable. '''Obtaining the latest arla port:''' |
| Line 75: | Line 100: |
| Follow the notes above, and it should "just work" without the "Bus error" or "Segmentation fault". | Follow the notes above, and it should "just work". |
| Line 78: | Line 103: |
[[http://www.mac-how.net|Mac-How] |
This is the chapter of the MemberManual that describes how to install the OpenAFS client on Mac OS X.
Contents
OpenAFS for Mac OS X
Connecting to HCoop with AFS on Mac OS X requires setting up the OpenAFS client as well as Kerberos for authentication. On a Mac OS X 10.4 machine, the following steps have been proven to connect to HCoop with just a few minutes of configuration work.
Install and Configure OpenAFS
Download the latest OpenAFS client (1.4.11 as of 2009-08-28) from http://www.openafs.org/macos.html. Install this package and reboot.
The installer will set up the afs configuration files in /var/db/openafs and it will set your machine to start AFS on boot.
After restarting your system edit /var/db/openafs/etc/ThisCell to contain a single line of text:
hcoop.net
The file initially is identical to ThisCell.sample so you don't need to make a backup copy before editing. The same holds true for CellServDB- it's the same as CellServDB.master.
Type the following in a terminal:
sudo /Library/StartupItems/OpenAFS/OpenAFS restart
The command should end with output like:
afsd: All AFS daemons started.
Install and Configure Kerberos
For Mac OS X 10.6 (Snow Leopard)
The Kerberos Extras package for previous versions of Mac OS X is no longer maintained for Mac OS 10.6. Instead, Apple has included the "Ticket Viewer" feature within Keychain Access.
To configure Kerberos on Snow Leopard, open Applications -> Utilities -> Keychain Access. Under the File menu, select Ticket Viewer. Select "Add Identity." For identity, enter your hcoop username followed by @HCOOP.NET (the all-caps realm is necessary). Then enter your Hcoop password. It will automatically obtain a ticket upon setting up the identity. After ten hours, the ticket expires and you'll need to select Obtain Ticket.
Now open a terminal window (Applications -> Utilities -> Terminal) and type "aklog". This should initiate your AFS session. To test, browse to the path /afs/hcoop.net/user/, then follow the directories with letters that begin your HCoop username. You should be able to create and edit files on HCoop.
For Mac OS X 10.5 and below
Install the Kerberos Extras package provided by MIT, available from http://web.mit.edu/macdev/www/osx-kerberos-extras.html.
Once you've installed this package, run the Kerberos configuration application by clicking on Applications -> Utilities -> Kerberos. Once this application loads, click on the "New" button in the toolbar to create a new ticket. Change the Realm to HCOOP.NET (realms generally seem to be entirely capitalized). Type your HCoop username and password when prompted.
You should see a ticket appear in the window which is valid for 10 hours.
Now open a terminal window (Applications -> Utilities -> Terminal) and type "aklog". This should initiate your AFS session. To test, browse to the path /afs/hcoop.net/user/, then follow the directories with letters that begin your HCoop username. You should be able to create and edit files on HCoop.
To refresh your Kerberos tokens and your AFS ticket, the two standard Unix commands can be used from the console: kinit username@HCOOP.NET followed by aklog. To avoid having to type the HCOOP.NET part of the kinit command, set a Kerberos "Default Realm" for your machine. This is done by changing the default_realm line in the file /Library/Preferences/edu.mit.Kerberos to the following:
default_realm = HCOOP.NET
That's it! You should be able to edit and save files on your HCoop account through AFS.
Troubleshooting and Additional Resources
Troubleshooting on Mac OS X
Our wiki page MemberManual/ShellAccess/TroubleshootingKerberos is a great reference for making sure that your Kerberos configuration is correct. In addition, the wiki pages for client configurations on other operating systems (MemberManual/TransferringFiles/OpenAFS) may be of help. Finally, there is always the hcoop-discuss mailing list!
Other AFS Client Implementations on OS X
The following clients have not been tested with HCoop software. If you're not looking for a challenge, it's probably best to stay with the instructions above.
Arla for Mac OS X
From the Arla web site:
- Arla is a free AFS implementation. The main goal is to make a fully functional client with all capabilities of AFS as formerly sold by Transarc and today available as OpenAFS. Other stuff, such as servers and management tools are being developed, but currently not considered stable.
Obtaining the latest arla port:
Get the latest source code file from the project site and build it yourself:
http://www.stacken.kth.se/project/arla/
Alternatively, go to
http://trac.macports.org/projects/macports/browser/trunk/dports/net/arla/Portfile
or
which have the advantage of being easier to install.
Follow the notes above, and it should "just work".
If you do have success, edit this page and let the rest of us know about it.