[OpenAFS] rumored inclusion in OS X.5?

Georg Troska georg.troska@uni-dortmund.de
Thu, 8 May 2008 19:13:08 +0200


--Apple-Mail-2-31354931
Content-Type: text/plain;
	charset=US-ASCII;
	format=flowed;
	delsp=yes
Content-Transfer-Encoding: 7bit

Well,
from my point of view AFS on Mac is possible, I use it daily.  
Unfortunately Accessing to you AFS-Homedir does not work currently on  
Mac OS 10.5. On 10.4 it does. That means, if you have your homedir and  
useraccount locally on your iMac you can have access of AFS-data but  
loggin in as LDAP-User with kerberos-ticket and AFS-Token and AFS- 
Homedir is not possible at the moment.

If you want to get only access to AFS do following:

get Kerberos Extra:
http://web.mit.edu/macdev/KfM/Common/Documentation/osx-kerberos-extras.html

get OpenAFS client of Mac OS:
http://openafs.org/macos.html

edit  /Library/Preferences/edu.mit.Kerberos

---
[libdefaults]
         login_logout_notification = afslog
         default_realm = $YOUR_KERBEROS_REALM$
         dns_fallback = no

[realms]
         $YOUR_KERBEROS_REALM$ = {
                 kdc =$URL_OF_KERBEROS_SERVER$
         }


[domain_realm]
         $YOUR_DOMAIN$ = $YOUR_KERBEROS_REALM$
---

be sure that $YOUR_KERBEROS_REALM$ is written in capital letters, and  
$YOUR_DOMAIN$ in lower case letters

write your standard AFS-Cell to

  /var/db/openafs/etc/ThisCell

as use lower case letters

and add the AFS-Server you'd like to access to in

  /var/db/openafs/etc/CellServDB
---
[...]
 >cern.ch                                #European Laboratory for  
Particle Physic
137.138.128.148                              # afsdb1.cern.ch
137.138.246.50                               # afsdb3.cern.ch
137.138.246.51                               # afsdb2.cern.ch
[...]
---

Write something after # these are no comments!

use kinit to get our kerberos-ticket

and aklog to get our AFS-token - after you have gotten your ticket

Georg



Am 25.04.2008 um 02:24 schrieb David Bear:

> okay -- I just bought an iMac .. it has an openafs on it (or what  
> looks like it).. I didn't put it there. I have no clue how to get it  
> configured.
>
> On Thu, Apr 24, 2008 at 5:06 PM, Jason Edgecombe <jason@rampaginggeek.com 
> > wrote:
> David Bear wrote:
> I heard that openafs is now (or will be) included in Mac OS X.5?
>
> Is this just a rumor -- or is it close to true? And if it is close  
> to true,
> does anyone have any details about things like additional cool new  
> gui tools
> for managing pts groups and acls???
>
>
> Mac OS X 10.5 (Leopard) has been out for months and it does NOT  
> include AFS. That said Mac OS X includes kerberos since 10.3 or  
> earlier.
>
> Jason
>
>
>
> -- 
> David Bear
> College of Public Programs at ASU
> 602-464-0424

Georg Troska
Experimentelle Physik IV
TU Dortmund
+49 231 755 3501


--Apple-Mail-2-31354931
Content-Type: text/html;
	charset=US-ASCII
Content-Transfer-Encoding: quoted-printable

<html><body style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; =
-webkit-line-break: after-white-space; ">Well,<div>from my point of view =
AFS on Mac is possible, I use it daily. Unfortunately Accessing to you =
AFS-Homedir does not work currently on Mac OS 10.5. On 10.4 it does. =
That means, if you have your homedir and useraccount locally on your =
iMac you can have access of AFS-data but loggin in as LDAP-User with =
kerberos-ticket and AFS-Token and AFS-Homedir is not possible at the =
moment.</div><div><br></div><div>If you want to get only access to AFS =
do following:</div><div><br></div><div>get Kerberos =
Extra:</div><div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
12px/normal Helvetica; "><a =
href=3D"http://web.mit.edu/macdev/KfM/Common/Documentation/osx-kerberos-ex=
tras.html">http://web.mit.edu/macdev/KfM/Common/Documentation/osx-kerberos=
-extras.html</a></div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
12px/normal Helvetica; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 12px/normal Helvetica; ">get OpenAFS client of Mac =
OS:</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
12px/normal Helvetica; "><div style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
12px/normal Helvetica; "><a =
href=3D"http://openafs.org/macos.html">http://openafs.org/macos.html</a></=
div><div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: =
0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; =
"><br></div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
12px/normal Helvetica; =
">edit&nbsp;&nbsp;/Library/Preferences/edu.mit.Kerberos</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 12px/normal Helvetica; =
"><br></div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
12px/normal Helvetica; ">---</div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 12px/normal Helvetica; ">[libdefaults]</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 12px/normal Helvetica; =
">&nbsp; &nbsp; &nbsp; &nbsp; login_logout_notification =3D =
afslog</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
12px/normal Helvetica; ">&nbsp; &nbsp; &nbsp; &nbsp; default_realm =3D =
$YOUR_KERBEROS_REALM$</div><div style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
12px/normal Helvetica; ">&nbsp; &nbsp; &nbsp; &nbsp; dns_fallback =3D =
no</div><div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: =
0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; =
min-height: 14px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 12px/normal Helvetica; ">[realms]</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 12px/normal Helvetica; =
">&nbsp;&nbsp; &nbsp; &nbsp; &nbsp;$YOUR_KERBEROS_REALM$&nbsp;=3D =
{</div><div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: =
0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; =
">&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; kdc =
=3D$URL_OF_KERBEROS_SERVER$</div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 12px/normal Helvetica; ">&nbsp; &nbsp; &nbsp; &nbsp; =
}</div><div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: =
0px; margin-left: 0px; font: normal normal normal 12px/normal Helvetica; =
">&nbsp;&nbsp;&nbsp;</div><div style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
12px/normal Helvetica; min-height: 14px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 12px/normal Helvetica; =
">[domain_realm]</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
12px/normal Helvetica; ">&nbsp;&nbsp; &nbsp; &nbsp; =
&nbsp;$YOUR_DOMAIN$&nbsp;=3D $YOUR_KERBEROS_REALM$</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 12px/normal Helvetica; =
">---</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
12px/normal Helvetica; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 12px/normal Helvetica; ">be sure =
that&nbsp;$YOUR_KERBEROS_REALM$ is written in capital letters, and =
$YOUR_DOMAIN$ in lower case letters</div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 12px/normal Helvetica; "><br></div><div style=3D"margin-top:=
 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 12px/normal Helvetica; ">write your standard =
AFS-Cell to</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
12px/normal Helvetica; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 12px/normal Helvetica; "><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 12px/normal Helvetica; =
">&nbsp;/var/db/openafs/etc/ThisCell</div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 12px/normal Helvetica; "><br></div><div style=3D"margin-top:=
 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 12px/normal Helvetica; ">as use lower case =
letters</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
12px/normal Helvetica; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 12px/normal Helvetica; ">and add the AFS-Server you'd like =
to access to in</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
12px/normal Helvetica; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 12px/normal Helvetica; "><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 12px/normal Helvetica; =
">&nbsp;/var/db/openafs/etc/CellServDB</div><div style=3D"margin-top: =
0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 12px/normal Helvetica; min-height: 14px; =
">---</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
12px/normal Helvetica; min-height: 14px; ">[...]</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 12px/normal Helvetica; =
">>cern.ch&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; #European Laboratory =
for Particle Physic</div><div style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
12px/normal Helvetica; ">137.138.128.148&nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; # afsdb1.cern.ch</div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 12px/normal Helvetica; ">137.138.246.50 &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp; # afsdb3.cern.ch</div><div style=3D"margin-top: =
0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 12px/normal Helvetica; ">137.138.246.51 &nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp; # =
afsdb2.cern.ch</div><div>[...]</div><div>---</div><div><br></div><div>Writ=
e something after # these are no comments!</div><div><br></div><div>use =
kinit to get our kerberos-ticket</div><div><br></div><div>and aklog to =
get our AFS-token - after you have gotten your =
ticket</div><div><br></div><div>Georg</div><div><br></div><div><br></div><=
/div></div></div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
12px/normal Helvetica; "><br></div><div><div>Am 25.04.2008 um 02:24 =
schrieb David Bear:</div><br =
class=3D"Apple-interchange-newline"><blockquote type=3D"cite">okay -- I =
just bought an iMac .. it has an openafs on it (or what looks like it).. =
I didn't put it there. I have no clue how to get it =
configured.<br><br><div class=3D"gmail_quote">On Thu, Apr 24, 2008 at =
5:06 PM, Jason Edgecombe &lt;<a =
href=3D"mailto:jason@rampaginggeek.com">jason@rampaginggeek.com</a>> =
wrote:<br> <blockquote class=3D"gmail_quote" style=3D"border-left: 1px =
solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: =
1ex;"><div class=3D"Ih2E3d">David Bear wrote:<br> <blockquote =
class=3D"gmail_quote" style=3D"border-left: 1px solid rgb(204, 204, =
204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> I heard that =
openafs is now (or will be) included in Mac OS X.5?<br> <br> Is this =
just a rumor -- or is it close to true? And if it is close to true,<br> =
does anyone have any details about things like additional cool new gui =
tools<br> for managing pts groups and acls???<br> <br> &nbsp;<br> =
</blockquote></div> Mac OS X 10.5 (Leopard) has been out for months and =
it does NOT include AFS. That said Mac OS X includes kerberos since 10.3 =
or earlier.<br><font color=3D"#888888"> <br> Jason<br> =
</font></blockquote></div><br><br clear=3D"all"><br>-- <br>David =
Bear<br>College of Public Programs at =
ASU<br>602-464-0424</blockquote></div><br><div> <span =
class=3D"Apple-style-span" style=3D"border-collapse: separate; color: =
rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: =
normal; font-variant: normal; font-weight: normal; letter-spacing: =
normal; line-height: normal; orphans: 2; text-align: auto; text-indent: =
0px; text-transform: none; white-space: normal; widows: 2; word-spacing: =
0px; -webkit-border-horizontal-spacing: 0px; =
-webkit-border-vertical-spacing: 0px; =
-webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0; "><div style=3D"word-wrap: =
break-word; -webkit-nbsp-mode: space; -webkit-line-break: =
after-white-space; "><div><div>Georg Troska</div><div>Experimentelle =
Physik IV</div><div>TU Dortmund</div><div>+49 231 755 =
3501</div></div></div></span> </div><br></div></body></html>=

--Apple-Mail-2-31354931--