Macintosh AFS instructions
Download current AFS client from https://www.openafs.org/macos.html . Choose the most recent client which was created for the Macintosh OS X release installed on your computer
Double-click the dmg file to open it.
If upgrading, first uninstall the old AFS by running the supplied uninstaller (icon bottom right of window).
Next run the installer. The package is not signed by a recognized developer, so double-clicking it will not open it. Instead, hold down control and click (i.e. right-click) and choose Open from the menu. Choose the default installation actions.
Cell alias: physics
Go to System Preferences and find the OpenAFS preferences pane.
Be sure "AFS Menu", "Backgrounder", and "Use aklog" are all checked.
"Get krb5 credential at login" should be unchecked.
"Start AFS at boot" strongly suggested to uncheck because some installers and antivirus programs try to scan the AFS directory tree. This causes the Mac to become unresponsive. To start AFS, click the lock symbol in title bar (though it may not appear until after reboot)and choose "Startup AFS". To stop AFS again, select the lock symbol again and "Shutdown AFS"
Obtain AFS token
- Click the lock symbol in the title bar. (It may not appear until after reboot.) Get new token. You will see "Please enter your Kerberos user name and password."
- Name: yourafsusername@PHYSICS.WISC.EDU
- Password: yourafspassword
Note: Enter yourafsusername@PHYSICS.WISC.EDU not firstname.lastname@example.org
Swtich to Finder. Then choose Go -> Computer . AFS will appear as a drive. Choose AFS -> physics.wisc.edu to view the physics.wisc.edu directories. (Make it a favorite to avoid searching through the list in the future!)
Notes and tweaks
Note: to fully log off of AFS, open a terminal window and run
kdestroy;unlog . Using "Release token" from the lock symbol is no longer enough b/c one can often simply "Get New Token" again. This is because AFS gets a token using a kerberos ticket, which exists until the
kdestroy command is run.
Note: Only yourafsusername and not yourafsusername@PHYSICS.WISC.EDU is needed if your computer is plugged into most wired network connections in the physics building.
Note: For token lifetimes of longer than 10 hours, you need to create a file named
/Library/Preferences/edu.mit.Kerberos with the contents
ticket_lifetime = 30d
If anything is not working for you, please send an email to email@example.com