Openafs on windows

This means? OpenAFS has no way to safely discard tokens when you log out, given you are using roaming profiles. When using a local profile, the tokens are discarded when you logout. See also the WindowsTroubleshootingGuide on this matter. This lets you use? Thus, there is no longer a need to have a third party Credentials Manager running. This window also shows what version of? OpenAFS you are currently running. A fundamental entity in the Microsoft Windows operating systems is the drive. A drive is identified by one letter and a colon.

Masking a network file system as a drive is called "mapping a drive. Mapping a drive in? OpenAFS requires you to know three things. You will have to know what drive you want to map, what AFS path to map from, and what to call the mapping. The first two should be obivous. You also have the option to automatically reconnect the drive on login. The Description field is not as obvious.

It is an identifier for the mapping, and is called a submount. It is not a free text description. The same restrictions apply to the description as to any name of a Windows share. See the WindowsTroubleshootingGuide for more information on submounts. If you are an administrator, you will want to use this tab eventually. You can check the status of the AFS service, start it if needed and configure global parameters.

You should always start the AFS service when the computer starts up. Otherwise, you will have to start the service manually. This is equivalent to using the "Services" tab of Windows Administration Tools". This applies to all users. The "Always show the AFS Client icon in the taskbar" option sets whether the Credentials Manager should be started on each login or not. It is locked when you have valid tokens, and has a small red cross when you do not.

Clicking it brings the Credentials Manager up. Right-clicking opens a three-item menu. The Credentials Manager will then exit.

The configuration utility can perform most operations of the Credentials Manager, and more. In fact, the Client Configuration is not able to obtain tokens, but everything else can be updated with it. When installed,? No matter what you call it, the functionality is the same. The Cell Name identifies the default authentication cell. The root. Mapping drives and creating submounts work the same way as for the Credentials Manager. Please refer to the section above. Since AFS can mirror both files and volume information on several servers, there must be a way to determine which server to contact.

Normally, you will never need to manually change the preferences of the servers. However, if you are doing load balance testing or if you are stress-testing a server, you may want to set preferences here.

You can also import the rankings from a file. The file is a text file with one line per server. Whitespaces separate the server name from the ranking number. You add a cell and list its associated servers. Most large sites copy the CellServDB directly from the network, to keep it in sync. Finally, the Advanced Tab. This is where you configure the heart of? OpenAFS for Windows.

Most of these settings already have a best-practice value. Be warned that changing these settings can cause? OpenAFS to be slow, or to stop working at all. Change the behavior of the Integrated Logon feature. The login retry interval sets how long in seconds? OpenAFS will try to obtain initial tokens. Fail Logins Silently controls whether you will get a message box telling the reason for the failure. Setting "Fail Logins Silently" to "No" also affects the function of the retry interval.

When the interval has passed, you will be asked whether to start the timer over or not. If you choose to start over, another retry interval will be used to try and obtain the tokens. Knowledge Base Toggle local menu Menus About the team. Knowledge Base Search. Log in. Options Help Chat with a consultant. Include archived documents. This content has been archived , and is no longer maintained by Indiana University. Information here may no longer be accurate, and links may no longer be available or reliable.

An icon for Network Identity Manager will appear in the taskbar notification area, at the lower left corner of the screen. Select "Connect to a Network Drive". In the resulting menu, provide the root path of the enea. If the folder ACL is set so that it is accessible only by the user "carciofo" a token for this user must be available in advance , see Obtaining a Kerberos ticket and an AFS token. The menu suggests also a Drive identification letter, which normally can be used without problems.

To access it, you will need to change the defaults, opening the File Explorer, for example by clicking the folder icon in the Taskbar.