User Guide

About This Guide

Audience and Purpose

Document Organization

How To Use This Document

Related Documents

Typographical Conventions

An Introduction to AFS

AFS Concepts

Client/Server Computing

Distributed File Systems

AFS Filespace and Local Filespace

Cells and Sites

Volumes and Mount Points

Volume Quotas

Using Files in AFS

The Cache Manager

Updating Copies of Cached Files

Multiple Users Modifying Files

AFS Security

Passwords and Mutual Authentication

Access Control Lists

Differences Between UNIX and AFS

File Sharing

File and Directory Protection

Machine Outages

Remote Commands

Differences in the Semantics of Standard UNIX Commands

Using AFS with NFS

Using AFS

Logging in and Authenticating with AFS

Logging In

To Log In Using an AFS-modified Login Utility

To Log In Using a Two-Step Login Procedure

Authenticating with AFS

To Authenticate with AFS

To Display Your Tokens

Example: Authenticating in the Local Cell

Example: Authenticating as a Another User

Example: Authenticating in a Foreign Cell

Limits on Failed Authentication Attempts

To Display Your Failed Authentication Limit and Lockout Time

Exiting an AFS Session

To Discard Tokens

Example: Unauthenticating from a Specific Cell

To Log Out

Accessing the AFS Filespace

AFS Pathnames

Example: Displaying the Contents of Another User's Directory

Accessing Foreign Cells

Changing Your Password

To Display Password Expiration Date and Reuse Policy

To Change Your AFS Password

To Change Your UNIX Password

Displaying Information about AFS

Displaying Volume Quota

To Display Percentage of Quota Used

Example: Displaying Percentage of Quota Used

To Display Quota and Other Information about a Volume

Example: Display Quota and Other Information about a Volume

To Display Quota and Other Information about a Volume and Partition

Example: Displaying Quota and Other Information about a Volume and Partition

Locating Files and Directories

To Display a File or Directory's Location

Example: Displaying Directory Location

Checking the Status of Server Machines

To Check File Server Machine Status

Example: Checking Server Machine Status

Determining Access to Foreign Cells

To Display Foreign Cells

Displaying Server Preference Ranks

To Display Server Preference Ranks

Protecting Your Directories and Files

Access Control Lists

Directory Level Access Control

The AFS ACL Permissions

The Four Directory Permissions

The Three File Permissions

The Eight Auxiliary Permissions

Shorthand Notation for Sets of Permissions

About Normal and Negative Permissions

Setting DFS ACLs

Using the System Groups on ACLs

Enabling Access to Subdirectories

Extending Access to Service Processes

Extending Access to Users from Foreign Cells

Displaying an ACL

To display an ACL

Example: Displaying the ACL on One Directory

Example: Displaying the ACLs on Multiple Directories

Changing an ACL

To Add, Remove, or Edit Normal ACL Permissions

Example: Adding a Single ACL Entry

Example: Setting Several ACL Entries on One Directory

To Add, Remove, or Edit Negative ACL Permissions

Example: Setting an Entry in the Negative Permissions Section

Example: Restoring Access by Removing an Entry from the Negative Permissions Section

Completely Replacing an ACL

To Replace an ACL Completely

Example: Replacing an ACL

Copying ACLs Between Directories

To Copy an ACL Between Directories

Example: Copying an ACL from One Directory to Another

How AFS Uses the UNIX Mode Bits

Example: Disabling Write Access for a File

Using Groups

About Groups

Suggestions for Using Groups Effectively

Group Names

Group-creation Quota

Displaying Group Information

To Display Group Membership

Example: Displaying the Members of a Group

Example: Displaying the Groups to Which a User Belongs

To Display the Groups a User or Group Owns

Example: Displaying the Groups a Group Owns

Example: Displaying the Groups a User Owns

To Display A Group Entry

Example: Listing Information about a Group

Example: Listing Group Information about a User

Creating Groups and Adding Members

To Create a Group

Example: Creating a Group

To Add Members to a Group

Example: Adding Members to a Group

Removing Users from a Group and Deleting a Group

To Remove Members from a Group

Example: Removing Group Members

To Delete a Group

Example: Deleting a Group

To Remove Obsolete ACL Entries

Example: Removing an Obsolete ACL Entry

Changing a Group's Owner or Name

To Change a Group's Owner

Example: Changing a Group's Owner to Another User

Example: Changing a Group's Owner to Itself

Example: Changing a Group's Owner to a Group

To Change a Group's Name

Example: Changing a Group's group_name Suffix

Example: Changing a Group's owner_name Prefix

Protecting Group-Related Information

Interpreting the Privacy Flags

To Set a Group's Privacy Flags

Example: Setting a Group's Privacy Flags

Troubleshooting

Problem: Cannot Access, Copy, or Save File

Problem: Accidentally Removed Your Entry from an ACL

Error Message: "afs: Lost contact with fileserver"

Error Message: "command: Connection timed out"

Error Message: "fs: You don't have the required access rights on 'file'"

Error Message: "afs: failed to store file"

Appendix A. Using the NFS/AFS Translator

Requirements for Using the NFS/AFS Translator

Accessing AFS via the Translator

To Authenticate on a Supported Operating System

To Authenticate on an Unsupported Operating System

Troubleshooting the NFS/AFS Translator

Your NFS Client Machine is Frozen

NFS/AFS Translator Reboots

System Error Messages

Appendix B. AFS Command Syntax and Online Help

AFS Command Syntax

Command Syntax Example

Rules for Using AFS Commands

Spaces and Lines

Abbreviations and Aliases for Operation Codes

Omitting Argument Switches

Shortening Switches and Flags

Shortening Directory References

Commonly Used fs and pts Commands

About the fs Commands

About the pts Commands

Getting Help in AFS

Displaying Command Syntax and Aliases

Displaying Operation Code Descriptions

Appendix C. Glossary

Index

User Guide

Table of Contents