Direct AFS access is only possible on-campus. If you are accessing the clusters via the passthrough server (wiener), you should not perform any operation described on this page.
To access the EECE@UP AFS filespace from a Windows machine (as just another network drive), two components are required:
MIT Kerberos for Windows: required to obtain a Kerberos ticket.
OpenAFS for Windows: required to access the AFS filespace using the Kerberos ticket.
The following sections will describe how to install and configure these components.
In order to complete this installation, you will need the following:
Windows XP (Windows 2000 or earlier are no longer supported).
A network connection to the campus network.
Rights on your computer to install software and control services (administrative rights).
Client for Microsoft Networks
Ensure that you are logged into your Windows machine with an account that has Administrator rights on the local machine before attempting this procedure.
It's important that older versions of Kerberos be removed before installing the latest version. If you know that an older version of Kerberos is present, try using the 'Add/Remove Programs' dialog in the Control Panel to remove the old version. To do this, follow the path Start→Settings→Control Panel→Add/Remove Programs. Look for program names with 'Kerberos' in them, and click the 'Add/Remove' button to start the uninstall process. You may need to reboot your machine to complete the uninstall process.
NOTE: The following section does not apply if a Novell Client is installed since the Novell Client will perform the necessary time synchronization.
Kerberos is sensitive to time differences between clients and servers. Your
computer needs to have its time set to within 5 minutes of the Kerberos / AFS
servers. NTP is a protocol used to synchronise clocks over the Internet.
Windows XP includes a tool to automatically update the time from an NTP server
every week. To set up the automatic synchronisation, right click on the clock in the System Tray and select “Adjust Date/Time”.
On the Internet Time tab, type “kendy.up.ac.za”. Click on Update Now, and after a few seconds it should say “The time has been successfully synchronised with kendy.up.ac.za” followed by the date and time. If this fails, contact the Unix Program Manager. Otherwise, click OK.
Your computer will now update the time every week at the same time.
Download the EECE Kerberos configuration file krb5.ini and save it to your Windows system directory (typically C:\WINNT or C:\WINDOWS). These settings will automatically be detected by the installation software. Alternatively, you need to manually enter the correct parameters given in the table below:
Download the currently recommended installation file mit-kfw.msi.
Once this file is copied onto your machine, execute it to install the Kerberos program. You will be presented with a welcome screen. Select Next to continue.
You will now be presented with the standard license agreement window. Select the “I accept the terms in the License Agreement” option and click on the Next button.
The next window will allow you to choose the type of installation. Select the standard installation by clicking on the Typical button. The software gets installed under C:\Program Files\Kerberos by default.
Click on the Install button in the next window to confirm the typical installation and to start the installation.
The installation process will now start and continue until completed.
Once completed the installation has completed, you be informed by means of a final window. Click on the Finish button.
Please reboot your machine to activate Kerberos.
After the system has rebooted, log back on to the same account.
Test the system using your Kerberos username / password. You should be able to obtain a Kerberos ticket.
Open the Network Identity Manager by clicking on the “NetIDMgr” icon in your taskbar.
The Network Identity Manager will start and indicate that there is currently no know credentials. Press on the here link to activate your identity.
A window will appear where you can enter your username and password. Please ensure that the realm appears as EE.UP.AC.ZA.
If you have entered your username and password correctly, and Kerberos is functioning correctly, the identity window should now indicate that your Kerberos identify is now active.
If you are upgrading from an older version of OpenAFS, it is essential that you uninstall that version and reboot before you install the OpenAFS upgrade.
Download the currently recommended installation file openafs.msi.
Run the installation file. The installer will extract itself after a few seconds.
The ‘Welcome’ screen will be displayed. Click ‘Next’ to continue.
The next screen displays the software license. Accept the license and click ‘Next’ to continue.
Click on the ‘Custom’ button to begin a custom installation. This is necessary as the default Cell needs to be changed.
The default installation directories and components are sufficient. Click on 'Next' to continue.
The change the default Cell from openafs.org to ee.up.ac.za, and disable Integrated Logon and Lookup cells in DNS. Click on 'Next' to continue.
The default settings on the next page are acceptable. Click on 'Next' to continue.
The next windows show the accept dialog, progress bar and finalization dialog. You can proceed through the sequence.
You must restart your system before you begin using the OpenAFS client software.
Once your machine has restarted, you need to configure the AFS client Cell with information on the Cell servers. This typically only needs to be done for new installations. Start the Control Panel with Start→Settings→Control Panel. The AFS Client Configuration will be near the top.
Select 'AFS Cells' tab and remove the default cells. Add a new cell ee.up.ac.za.
For the cell servers, enter the information as given below.
Select the Advanced tab. Add a drive mapping by selecting the 'Global Drives' button.
It is recommended that the drive to added should look like the following.
It will take a few moments for the drive mapping to be added. Once completed, close all the windows and restart the machine. You should now be able to obtain Kerberos tickets and access your AFS files via the “U:” drive.
After installation, you will probably want to adjust some AFS Client configuration parameters. The default parameters are rather conservative and do not provide adequate performance. If you do not see a padlock icon in the Windows “notification area” (lower right corner of the screen, near the clock), then start the OpenAFS Authentication tool via Start → All Programs → OpenAFS → Client → Authentication. The padlock should now appear in the notification area. Click on it, and the AFS Client window will pop up.
Click Configure AFS Client, which will pop up the AFS Client Configuration window.
Select the Advanced tab. Set the Cache Size value to something between 600,000 and 1,000,000. Set the Chunk Size value to 1024.
Click the Miscelaneous… button, which will pop up the Miscellaneous Configuration window. Increase the Service Threads value to 5.
Dismiss the various AFS Client windows by clicking the OK buttons.
