<?xml version="1.0" encoding="utf-8"?><!DOCTYPE article  PUBLIC '-//OASIS//DTD DocBook XML V4.4//EN'  'http://www.docbook.org/xml/4.4/docbookx.dtd'><article><articleinfo><title>MemberManual/TransferringFiles/OpenAFS/Windows</title><revhistory><revision><revnumber>26</revnumber><date>2014-03-31 01:54:16</date><authorinitials>MattCarberry</authorinitials><revremark>Formatting</revremark></revision><revision><revnumber>25</revnumber><date>2014-03-31 01:50:59</date><authorinitials>MattCarberry</authorinitials></revision><revision><revnumber>24</revnumber><date>2014-03-31 01:44:07</date><authorinitials>MattCarberry</authorinitials><revremark>Added Screenshots</revremark></revision><revision><revnumber>23</revnumber><date>2014-03-13 19:26:27</date><authorinitials>99-42-124-84.lightspeed.frokca.sbcglobal.net</authorinitials><revremark>Formatting</revremark></revision><revision><revnumber>22</revnumber><date>2014-03-13 19:19:09</date><authorinitials>99-42-124-84.lightspeed.frokca.sbcglobal.net</authorinitials><revremark>Significantly updated this for Windows 7/OpenAFS 1.7 Still need to add some pictures and post-install config stuff.</revremark></revision><revision><revnumber>21</revnumber><date>2013-01-13 18:19:33</date><authorinitials>ClintonEbadi</authorinitials><revremark>cat / someone needs to update this for windows7</revremark></revision><revision><revnumber>20</revnumber><date>2008-07-07 04:27:54</date><authorinitials>localhost</authorinitials><revremark>converted to 1.6 markup</revremark></revision><revision><revnumber>19</revnumber><date>2007-12-13 08:21:55</date><authorinitials>RyanMikulovsky</authorinitials><revremark>Driver -&gt; Drive</revremark></revision><revision><revnumber>18</revnumber><date>2007-12-13 08:10:13</date><authorinitials>RyanMikulovsky</authorinitials><revremark>may need to re-log using AFS client after service starts.</revremark></revision><revision><revnumber>17</revnumber><date>2007-12-13 08:08:22</date><authorinitials>RyanMikulovsky</authorinitials><revremark>might need to reboot once after install.</revremark></revision><revision><revnumber>16</revnumber><date>2007-11-23 21:00:59</date><authorinitials>RyanMikulovsky</authorinitials><revremark>discuss software firewall a bit more</revremark></revision><revision><revnumber>15</revnumber><date>2007-11-21 15:53:13</date><authorinitials>RyanMikulovsky</authorinitials><revremark>change username format to one that works reliably</revremark></revision><revision><revnumber>14</revnumber><date>2007-11-12 04:30:46</date><authorinitials>MichaelOlson</authorinitials><revremark>Shorten</revremark></revision><revision><revnumber>13</revnumber><date>2007-11-10 05:44:58</date><authorinitials>RyanMikulovsky</authorinitials></revision><revision><revnumber>12</revnumber><date>2007-11-10 05:40:17</date><authorinitials>RyanMikulovsky</authorinitials></revision><revision><revnumber>11</revnumber><date>2007-11-10 05:30:51</date><authorinitials>RyanMikulovsky</authorinitials><revremark>another tshooting tip</revremark></revision><revision><revnumber>10</revnumber><date>2007-11-10 05:21:43</date><authorinitials>RyanMikulovsky</authorinitials></revision><revision><revnumber>9</revnumber><date>2007-11-10 05:20:47</date><authorinitials>RyanMikulovsky</authorinitials></revision><revision><revnumber>8</revnumber><date>2007-11-10 05:18:35</date><authorinitials>RyanMikulovsky</authorinitials><revremark>add basic tshooting step</revremark></revision><revision><revnumber>7</revnumber><date>2007-11-10 05:12:46</date><authorinitials>RyanMikulovsky</authorinitials><revremark>fix section header</revremark></revision><revision><revnumber>6</revnumber><date>2007-11-10 05:12:25</date><authorinitials>RyanMikulovsky</authorinitials><revremark>add troubleshooting section, though it should probably just link to a subpage</revremark></revision><revision><revnumber>5</revnumber><date>2007-11-10 05:09:17</date><authorinitials>RyanMikulovsky</authorinitials><revremark>more info</revremark></revision><revision><revnumber>4</revnumber><date>2007-11-10 05:00:24</date><authorinitials>RyanMikulovsky</authorinitials><revremark>more material plus screenshots</revremark></revision><revision><revnumber>3</revnumber><date>2007-11-10 04:47:15</date><authorinitials>RyanMikulovsky</authorinitials></revision><revision><revnumber>2</revnumber><date>2007-11-10 04:33:04</date><authorinitials>RyanMikulovsky</authorinitials><revremark>add some install details..</revremark></revision><revision><revnumber>1</revnumber><date>2007-11-10 04:13:52</date><authorinitials>RyanMikulovsky</authorinitials><revremark>initial contents</revremark></revision></revhistory></articleinfo><para>This is the chapter of the <ulink url="https://wiki.hcoop.net/MemberManual/TransferringFiles/OpenAFS/Windows/MemberManual#">MemberManual</ulink> that describes how to install the OpenAFS client on Windows. </para><para>Please note that OpenAFS runs a <emphasis role="strong">service</emphasis> so you must have a user account on Windows that allows management of services.  For example, the <emphasis role="strong">powerusers</emphasis> group on Windows XP has such privileges but the default limited users account does not. </para><section><title>Software to Download</title><para>You will need to download the latest versions of the following software: </para><orderedlist numeration="arabic"><listitem><para>Heimdal Kerberos 1.6.x.x - <ulink url="https://www.secure-endpoints.com/heimdal/#download"/>. - According to the OpenAFS guide, MIT Kerberos has stability issues on Windows 7/8. </para></listitem><listitem><para>Network Identity Manager 2.0 - <ulink url="https://www.secure-endpoints.com/netidmgr/v2/index.html"/> </para></listitem><listitem><para>OpenAFS Client 1.7.x - <ulink url="http://www.openafs.org/pages/windows.html">download page</ulink>. </para></listitem></orderedlist></section><section><title>Installation</title><section><title>Kerberos</title><orderedlist numeration="arabic"><listitem><para>First, install Kerberos. All defaults are appropriate. </para><para> <inlinemediaobject><imageobject><imagedata fileref="https://wiki.hcoop.net/MemberManual/TransferringFiles/OpenAFS/Windows?action=AttachFile&amp;do=get&amp;target=heimdal-1.png"/></imageobject><textobject><phrase>heimdal-1.png</phrase></textobject></inlinemediaobject> </para></listitem><listitem><para>Then, modify your krb5.conf (in <code>%SystemDrive%\ProgramData\Kerberos</code>) and add <code>allow_weak_crypto = true</code> under <code>[libdefaults]</code>. </para><para><inlinemediaobject><imageobject><imagedata fileref="https://wiki.hcoop.net/MemberManual/TransferringFiles/OpenAFS/Windows?action=AttachFile&amp;do=get&amp;target=heimdal-2-new.png"/></imageobject><textobject><phrase>heimdal-2-new.png</phrase></textobject></inlinemediaobject> </para></listitem></orderedlist></section><section><title>Network Identity Manager</title><para>A Typical installation is appropriate. OpenAFS will install a plugin to this that will assist you in managing your AFS tokens. </para></section><section><title>OpenAFS</title><para>Install OpenAFS and input the following when the appropriate dialog prompts: </para><orderedlist numeration="arabic"><listitem><para><emphasis role="strong">Choose Setup Type</emphasis> -- select <emphasis>IFS Based Client</emphasis>. </para><para> <inlinemediaobject><imageobject><imagedata fileref="https://wiki.hcoop.net/MemberManual/TransferringFiles/OpenAFS/Windows?action=AttachFile&amp;do=get&amp;target=openafs-1.png"/></imageobject><textobject><phrase>openafs-1.png</phrase></textobject></inlinemediaobject> </para></listitem><listitem><para><emphasis role="strong">Configure AFS Client</emphasis> -- For &quot;Default Cell&quot; use <code>hcoop.net</code>.  The rest of the defaults are sound. </para><para> <inlinemediaobject><imageobject><imagedata fileref="https://wiki.hcoop.net/MemberManual/TransferringFiles/OpenAFS/Windows?action=AttachFile&amp;do=get&amp;target=openafs-2.png"/></imageobject><textobject><phrase>openafs-2.png</phrase></textobject></inlinemediaobject> </para></listitem><listitem><para>Proceed with the installation and reboot. </para></listitem></orderedlist></section></section><section><title>Hints and Tips</title><para>If you are using Explorer to view your AFS share, your right-click on file or folder context menu will have a new entry called <emphasis>AFS</emphasis>.  Within this sub-menu, you will find tools that allow changing of Access Control Lists (permissions), creating new mount points, and more.  With this context menu, it is possible that you won't have to ever use the command-line to manage your share!   </para></section><section><title>Troubleshooting</title><section><title>AFS Worked, But Now it Doesn't</title><para>Sometimes when a computer goes to sleep and then resumes, the AFS service will not work.  This may also be the case in other situations. </para><para>That said, the first step to solving AFS problems is to stop and start the AFS service using the AFS Client. </para><orderedlist numeration="arabic"><listitem><para>Click on the lock icon in the system-tray. </para></listitem><listitem><para>Click on the AFS Client <emphasis>Advanced Tab</emphasis>. </para></listitem><listitem><para>Click on <emphasis>Stop Service</emphasis> and wait a few moments. </para></listitem><listitem><para>Click <emphasis>Start Service</emphasis>. </para></listitem><listitem><para>If necessary, re-log in using AFS Client. </para></listitem></orderedlist><para>You should now be ready to use your AFS shares.  Again, please note that you must have appropriate privileges to stop and start services.   </para></section><section><title>AFS Never Worked!</title><para>Please check your software and hardware firewall configurations.  To be sure that your software firewall is not blocking the client, stop and restart the service.  Your software firewall may then catch it and prompt.  Although the service may start at boot, when you log-in, the software firewall may block it by default.  Finally, ensure the following UDP ports are open: 7000-7007. </para><para>You may want to uninstall and reinstall OpenAFS and retry these installation directions.  Check the Network Identity Manager to be sure the realm is HCOOP.NET (yes, it must be ALL CAPS). In general, HCoop support cannot troubleshoot your system troubles, so please do not submit a Bugzilla ticket unless you're sure our servers are misbehaving.  However, members in our <ulink url="https://wiki.hcoop.net/MemberManual/TransferringFiles/OpenAFS/Windows/IrcChannel#">IrcChannel</ulink> will likely be happy to assist, though you may need to be patient while waiting for someone to respond. </para><!--rule (<hr>) is not applicable to DocBook--><para> <ulink url="https://wiki.hcoop.net/MemberManual/TransferringFiles/OpenAFS/Windows/CategoryMemberManual#">CategoryMemberManual</ulink> <ulink url="https://wiki.hcoop.net/MemberManual/TransferringFiles/OpenAFS/Windows/CategoryNeedsWork#">CategoryNeedsWork</ulink> </para></section></section></article>