You are here: Home › Resources › Software › File transfer › File transfer with AFS › AFS in Windows

Installing AFS on Windows

By installing Kerberos and AFS you may access files stored in AFS from your Windows computer.

Overview

In order to to access files in AFS you need and AFS client installed on your computer- in this case the OpenAFS Client. A Kerberos software is also required. MIT Kerberos for Windows can be used to authenticate you to the kerberos realm, which in turn will talk to the AFS client, allowing you to access your files.

OpenAFS

  1. Download the newest OpenAFS client for Windows (32-bit or 64-bit depending on your computer's architecture). The naming scheme is openafs-en_US-64bit-1-5-9904.msi (64-bit) or openafs-en_US-1-5-9904.msi (32-bit). The version (1.5.9904.0 = 1-5-9904) will of course change over time.
  2. Run the downloaded installer(s) for OpenAFS for Windows .
  3. Press Next. 
    afs_1.jpg
  4. Agree and press next.
    afs_2.jpg
  5. Select to Complete installation and press next.
    afs_3.jpg
  6. The AFS cell at PDC is called pdc.kth.se (written in lower case). Make sure that you only select the options chosen in the picture below:
    afs_4.jpg
  7. The settings for the AFS Credentials have to be as stated below:
    afs_5.jpg
  8. Press install.
    afs_6.jpg
  9. Wait a little.
    afs_7.jpg
  10. Press Finish and OpenAFS will be installed. Choose I want to reboot manually later when asked!
    afs_8.jpg
  11. At this point you can check if the AFS client has started. Open a folder window and type \\afs as the path, press enter and you should see (among other things):
    afs_9.png

MIT Kerberos

If you do not have a Kerberos software installed on your Windows computer, it is now time to do so.

Follow the instructions at this page, and then return to these instructions to continue your setup of AFS!

Setup

After installing both OpenAFS and MIT Kerberos for windows and rebooting the computer it is now time for using your software to access your files on AFS!

AFS

  1. Make sure that you have Kerberos tickets on your computer.
  2. Start the OpenAFS client by selecting the icon Authentication (find it in Windows Start Menu as shown in the picture). Note the padlock icon that accompanies the OpenAFS client.

    OpenAFS start client

  3. You should now automatically receive AFS tokens from your MIT Kerberos tickets. In the down right corner of you screen this should be confirmed by an icon showing a small yellow padlock (whit NO rec cross on it, which it has if you have no AFS tokens).
    You should never need to state any passwords or in any other way trouble yourself with the OpenAFS program, it should be run by MIT Kerberos!
  4. Now, you should be able to access your home directory and AFS project volumes at PDC. The simplest way of doing this is to again open a folder window. Now, type:
    \\afs\pdc.kth.se\home\y\yourUsername
    where y should be replaced with the first letter in your PDC username and yourUsername should be replaced with your PDC username. Don't forget the double backslashes at the beginning of the line!
    afs_10.png

    But, that was too easy, wasn't it? Some of PDC's users do not have their AFS home directories at PDC. Those who, at any time, have had an account at CSC (or NADA, a school at KTH), still have their AFS home there. The AFS path to your home directory then instead is:
    \\afs\nada.kth.se\home-by-name\y\o\yourUsername
    The folder y is selected by the first letter of your PDC username and the second folder, o, is chosen from the second letter in your username. Finally, yourUsername should be replaced by your CSC/PDC username.

Usage

After installing Kerberos and AFS properly, each time you login at your computer you will be asked by MIT Kerberos to state your PDC password in order to get Kerberos tokens. When you have typed your password in the dialog and clicked ok, you will have both Kerberos tokens and AFS tickets and you will immediately have access to the AFS volumes you have mapped in your explorer windows.

FAQ

  • Installations went all right, but I don't get AFS tokens automatically?
    Take a look at the pictures below and compare the settings with yours.

    AFS tab settings in the Kerberos Network Identitiy Manager Configuration:
    MIT Kerberos AFS settings
    The Kerberos realm for PDC is called NADA.KTH.SE (note the block letters) and the AFS cell for PDC is pdc.kth.se.

    AFS Service running?
    MIT Kerberos AFS client running
    Check that the AFS service is running and not set to be inhibited by Kerberos.
  • Installations went all right, but I can't get AFS tickets?
    Take a look at the pictures below and compare the MIT Kerberos settings for AFS with yours.
    OpenAFS settings:
    OpenAFS client running

Links