AFS Overview

AFS (Andrew File system www.openafs.org) is a mature distributed file system supported by clients for Unix (Linux), OS X, and Windows. AFS supports multi-domain authentication using kerberos, file access controlled by access control lists, and provides a uniform name-space. This combination of features makes it possible to support protected distribution of CD-ROM iso images using infrastructure already provided by many universities.

In this prototype system, the ISO images forming the FDLP collection are publicly available and require no authentication, while other images with copyright restrictions may only be accessed by users with indiana.edu kerberos accounts.

Requirements

In order to access the AFS supported files it is necessary to install both kerberos Kerberos and AFS clients AFS Client. To access the public files, it is not necessary to actually login or otherwise authenticate.

Installing Kerberos 5

To get the Kerberos 5 client, please visit http://web.mit.edu/kerberos/www/

OS X comes with Kerberos installed.

Installing OpenAFS

Once you have Kerberos installed, you can install OpenAFS. The latest OpenAFS release is available at http://openafs.org/release/latest.html

You will need to add the iu.edu cell to your configuration. This cell is supported by the following servers.

129.79.4.68 #rfs1.uits.indiana.edu

134.68.142.53 #rfs3.iu.edu

134.68.142.51 #rfs2.iu.edu

After configuration and installation, you'll need to reboot your computer to activate the kernel module and connect to the AFS server.

How to authenticate

Authentication is only necessary to access the protected images and is only possible for users with indiana.edu kerberos accounts.

To authenticate on linux or OS X machines:

kinit username@IU.EDU

aklog -c IU.EDU -k IU.edu

Additional Help

Indiana University users may find the following pages helpful: IU Knowledge Base