Skip to main content

You may be using a Web browser that does not support standards for accessibility and user interaction. Find out why you should upgrade your browser for a better experience of this and other standards-based sites...

Dartmouth Home  Search  Index

Dartmouth Home | Search | Index

Dartmouth home page
Computing at Dartmouth
Computing > Support >  Library >  Research > UNIX > Files > AFS >

Installing OpenAFS Client on Mac OS X

OpenAFS.org support AFS clients on Mac OS X 10.3/10.4. As of January 2007, the recommended versions are 1.4.1 for 10.3 and 1.4.4 for 10.4. Earlier releases of Mac OS X can only use the 1.2.x OpenAFS client and are not recommended.

Installing the OpenAFS Package

  1. Download OpenAFS for 10.3 or 10.4. This is a disk image file (.dmg).
  2. If the Disk Image does not automatically mount, double-click to mount it as a volume named OpenAFS.
  3. Double-click the enclosed OpenAFS.pkg package to start the installer. You will be asked for your password (you must be logged in as an administrative user) and to accept the license agreement. Installation will take about a minute, after which the installer will want to reboot. Instead of rebooting, you can quit the installer and tune the client before rebooting.

The Mac OS X installer asks for no user input. The default settings will allow access to the northstar cell, but not the thayer cell, with some limitations (no path shortcuts, for example). The recommended tuning below involves editing simple text files, and will set up the client to automatically track changes to our servers and be easier to use in our environment.

To do a clean uninstall of OpenAFS client, use the uninstall program that comes bundled with the installer for v1.4.2. On a Mac OS X 10.3 system with OpenAFS 1.4.1, we recommend you get OSXPM, a free package management tool for Mac OS X, and use it to remove the OpenAFS package.

Tuning the AFS Client

Configuring the AFS client settings may be performed by downloading and running afssetup. Unpack the .zip file if your browser doesn't do this automatically, then double-click the resulting afssetup.command script to execute it, and enter your password when prompted. This script will update the configuration with the recommended Dartmouth settings and start the AFS client.

You should now have an AFS icon on your desktop. Double-click the icon to browse AFS space. Alternatively, you can start up a Terminal window. AFS space appears under /afs. After a reboot, the AFS client should start automatically.

Alternatively, you can hand edit the configuration files in /var/db/openafs/etc. The afssetup script does the following, as root.

  1. Creates a file called ThisCell that contains the single line northstar.dartmouth.edu.
  2. Creates a file called config/afsd.options that contains the single line -afsdb -stat 2000 -dcache 800 -daemons 3 -volumes 70 -fakestat.
  3. Truncates CellServDB to a zero-length file. Most users do not need it; it can cause problems if it contains invalid data (but the file must exist).

You may also want to edit /var/db/openafs/etc/cacheinfo and change the 30000 to something larger. This is the size, in KB, of the local cache used to store AFS files and reduce the amount of network I/O needed.

The cell server address information, for cells not using DNS, lives in /var/db/openafs/etc/CellServDB. If you need access to other (off-campus) cells in the world-wide AFS community, contact Research Computing for assistance.

You can also manually start and stop the AFS client, as long as no processes have open files in AFS. The commands are:

% sudo /Library/StartupItems/OpenAFS/OpenAFS start
% sudo /Library/StartupItems/OpenaFS/OpenAFS stop

Authenticating to AFS

You now have access to AFS space, but you do not have permission to see your own personal files yet. You can authenticate to AFS by manually running the klog utility in a Terminal window, giving it your AFS username and password when prompted. You will now have full access to your files in AFS through the finder or the command line. However, you may not see your own name as the apparent owner of the files, but this usually does not matter. You now have an AFS token (limited lifetime Kerberos ticket with AFS access privileges).

% klog afsusername

You can change your AFS password with the kpasswd.afs utility. Since Apple supplies a kpasswd program as part of their standard Kerberos tools, the name was changed to kpasswd.afs to avoid conflict.

% kpasswd.afs afsusername

Further Configuration

If you configure the Macintosh after your AFS account is set up, create your local Macintosh account with the same name as your AFS account. That way, your AFS files will have the correct owner. If you are an experienced user and you need to change user names or UIDs on your Macintosh to match those in AFS, click on the link below for instructions.

For more information related to this topic, see:

05/08/08

Last Updated: 5/9/08