AFS

If you install AFS on your local machine, you can access and edit the Fermilab file system without logging into a Fermilab computer. You also do not need to use Kerberos (although you can, if you wish).

Installing AFS
Using AFS
Known Bugs

Known Bugs

On MacOSX you may get a kernel panic if you use the mv command to move a file from the AFS filesystem to the local filesystem. Moving the other way is fine, and copying (cp) in either direction is also fine.

Installing AFS

Download and run the appropriate installation package found here OpenAFS.

MacOSX
Type the following to create the 'ThisCell' file.

sudo sh -c 'echo fnal.gov > /var/db/openafs/etc/ThisCell'

Reboot. You will now see an 'afs' disk icon on your Desktop.
If you reboot without being connected to the network, AFS will not start.
To start it manually (after you are on the net) type:
sudo /Library/StartupItems/OpenAFS/OpenAFS
If you get an error that AFS can't open /Network/afs, then edit the file /var/db/openafs/etc/cacheinfo. Change '/Network/afs' to just '/afs' and restart afs manually.

Using AFS

Once installed, you will have read-only access to the Fermilab file system.

The MIPP web pages are here:
/afs/fnal.gov/files/expwww/ppd/physical_experiments/e907/html

Your home directory is here:
/afs/fnal.gov/files/home/room?/user_name
where ? is 1, 2, or 3.

To have write access you need to authenticate EITHER with AFS or Kerberos.

For AFS, type klog and enter your AFS password.
Your AFS password is the same as the old unix password that you used for Fermilab before they forced you to get Kerberos.
If your username at Fermilab is not the same as your local username, then instead type klog your_fnl_user_name.
For Kerberos type kinit and enter your Kerberos password.
On MacOSX, you could also run the Kerberos application (open /System/Library/CoreServices/Kerberos.app). This does the same thing as kinit.
If your username at Fermilab is not the same as your local username, then instead type kinit your_fnl_user_name.

If you decide to use AFS authentication (instead of Kerberos), to change your AFS password do ONE of the following:

Execute the AFS version of kpasswd on your local machine.
For MacOSX you can just type kpasswd. Note that this should execute /Library/OpenAFS/Tools/bin/kpasswd
Log in to fnalu.fnal.gov and type /usr/afsws/bin/kpasswd.
Do not use the default kpasswd because that changes your kerberos password.

Both methods above are equivalent. Note if you are using multiple sites, then fnal.gov may not be your default. You can always explicitly give the AFS domain, e.g., klog dmw@fnal.gov.

Also note that the unix user (uid) and group (gid) id's of the remote AFS file system do not necessarily match those defined on your local system, so when you do a directory listing you will see numbers instead of user and group names. The authentication process (AFS or Kerberos) identifies you to the AFS system and let's you edit files in the AFS space.

The unix command id will display your uid and gid on the local machine.

Doug Wright, October 29, 2003