[OpenAFS] AFS via SSH tunnel

[Jakob Haufe]

--Sig_/8zJILMw/Jt_/X_M49jD7=lf
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable

On Sun, 29 Jun 2025 20:25:40 -0400
Ernesto Alfonso <erjoalgo@gmail.com> wrote:

> At first I tried to VPN into my home network to have access to the AFS
> server as a local host, but I'm having trouble setting this up right now
> for reasons not related to AFS--some openvpn server issue where I'm able =
to
> establish the VPN connection but unable to see any other hosts except the
> VPN server itself.

This sounds like a routing problem. Have you checked the routes on both the
client and the AFS server?

>     ssh -N myhome.com -L 88:afsserver:88 -L 7000:afsserver:7000 -L
> 7001:afsserver:7001 -L 7002:afsserver:7002 -L 7003:afsserver:7003 -L
> 7004:afsserver:7004 -L 7005:afsserver:7005 -L 7006:afsserver:7006 -L
> 7007:afsserver:7007

While Kerberos works over both TCP and UDP, current AFS only works over UDP.
SSH can only forward TCP ports, so this unfortunately can't work.

VPN is the right and probably only way to go, so you will have to make that
work.

Cheers,
sur5r

--=20
ceterum censeo microsoftem esse delendam.

--Sig_/8zJILMw/Jt_/X_M49jD7=lf
Content-Type: application/pgp-signature
Content-Description: OpenPGP digital signature

-----BEGIN PGP SIGNATURE-----
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=aQXf
-----END PGP SIGNATURE-----

--Sig_/8zJILMw/Jt_/X_M49jD7=lf--