Macintosh AFS instructions

AFS installation

Download current AFS client from https://www.openafs.org/macos.html .  Choose the most recent client which was created for the Macintosh OS X release installed on your computer

Double-click the dmg file to open it.
If upgrading, first uninstall the old AFS by running the supplied uninstaller (icon bottom right of window).
Next run the installer.  The package is not signed by a recognized developer, so double-clicking it will not open it.  Instead, hold down control and click (i.e. right-click) and choose Open from the menu.  Choose the default installation actions.
Cell: physics.wisc.edu
Cell alias: physics

AFS Configuration

Go to System Preferences and find the OpenAFS preferences pane.
Be sure "AFS Menu", "Backgrounder", and "Use aklog" are all checked. 
"Get krb5 credential at login" should be unchecked.
"Start AFS at boot" strongly suggested to uncheck because some installers and antivirus programs try to scan the AFS directory tree. This causes the Mac to become unresponsive. To start AFS, click the lock symbol in title bar (though it may not appear until after reboot)and choose "Startup AFS".  To stop AFS again, select the lock symbol again and "Shutdown AFS"

Obtain AFS token
  1. Click the lock symbol in the title bar.  (It may not appear until after reboot.) Get new token. You will see "Please enter your Kerberos user name and password."
  2. Name: yourafsusername@PHYSICS.WISC.EDU
  3. Password: yourafspassword

Note: Enter yourafsusername@PHYSICS.WISC.EDU not yourafsusername@physics.wisc.edu

Accessing AFS

Swtich to Finder. Then choose Go -> Computer . AFS will appear as a drive.  Choose AFS -> physics.wisc.edu to view the physics.wisc.edu directories.  (Make it a favorite to avoid searching through the list in the future!)

Notes and tweaks

Note: to fully log off of AFS, open a terminal window and run kdestroy;unlog . Using "Release token" from the lock symbol is no longer enough b/c one can often simply "Get New Token" again.  This is because AFS gets a token using a kerberos ticket, which exists until the kdestroy command is run.

Note: Only yourafsusername and not yourafsusername@PHYSICS.WISC.EDU is needed if your computer is plugged into most wired network connections in the physics building.

Note: For token lifetimes of longer than 10 hours, you need to create a file named /Library/Preferences/edu.mit.Kerberos with the contents

[libdefaults]
        ticket_lifetime = 30d

Note: Sometimes AFS can be really slow in Macintosh Finder, but fast in Terminal (i.e. ls /afs/physics.wisc.edu/home).
This seems to be due to something Finder is doing that ls in the Terminal is not.
An alternative GUI file browser can be faster than Finder.  E.g. Macintosh Explorer

If anything is not working for you, please send an email to help@physics.wisc.edu

©2013 Board of Regents of the University of Wisconsin System