Windows AFS setup

OpenAFS 1.7 on WinXP,  Win7, and Win8
Install Kerberos

First, download and install Kerberos for Windows here.  Choose the "Typical" installation button. If "Close Running Processes" appears with AFS Credentials Manager listed, open Task Manager and end process afscreds.exe .
Next, start Network Identity Manager from the Start Menu.  When started, it appears as an icon , a shadow of a person, in the system tray (by the clock).  Click on the system tray icon to maximize the window. Select View->All Identities. 

  1. If your AFS username appears, select your identity. Then go to Options->Identities and select your identity in the left column. Skip to step 3.
  2. If your AFS username does not appear select Options->Identities, (General Tab) Add new Identity... . Type in your AFS username and PHYSICS.WISC.EDU (not physics.wisc.edu) for the realm. Click OK. Select your identity in the left column
  3. On General Tab, check Always show in credentials list. On AFS Tab, should list physics.wisc.edu: Add/Update, then Keep. Click Apply. Then disable Kerberos v4 by selecting "Plug-ins" in the left column, "Krb4Cred" in the central list, then Disable near bottom, Yes, OK.
  4. Exit Identity Manager: File-> Exit.
  5. Start Identity Manager:  Find it in your Start menu, click on it.  Then find it again in the system tray.
  6. If your identity still does not appear continue to install AFS.  After finishing the AFS install contact help@physics.wisc.edu
  7. If you've already installed AFS, skip to Obtain AFS Token below.
Install AFS

Download current AFS 1.7x from http://openafs.org/windows.html
Two downloads for 64-bit... a 64-bit MSI installer and a 32-bit MSI tools installer
http://openafs.org/pages/windows.html#1_7_64bit_downloads

One download for 32-bit
http://openafs.org/pages/windows.html#1_7_32bit_downloads

## AFS Install and Config
After running the installer, choose "Custom"
Be sure "Authentication for AFS" will be installed.
Be sure "Client configuration tool" will be installed. (Control Panel applet)

Choose New Settings.
 default cell: physics.wisc.edu
 Integrated login        disabled
 afs crypt security      enabled
 freelance mode          enabled
 lookup cells in DNS     enabled

 "Start AFS Credentials at Startup" : do not check. (If checked will open an AFS credentials prompt upon login. This is redundant with Network Identity Manager.)
All the rest should be checked except "Show credentials window on startup".

There is a Control Panel applet that can be used to change default cell after installation.

Map useful folders to drive letters.  Do not use OpenAFS context menus which claim to map a folder to a drive letter. Instead use Window's standard tool: Instructions here
 

Obtain AFS token
  1. Open the Network Identity Manager window again.
  2. Right-click on your identity name "Obtain New Credentials". Enter password and click OK.
    Verify that you are able to access AFS.

Now that Network Identity Manager is set up it should start when the computer starts.  You can then logon by following the previous two steps.
If this is not working for you, please send an email to help@physics.wisc.edu
 

Accessing AFS folders

Open a Windows Explorer window.
In the address bar place this text:
\\afs\physics.wisc.edu\
and push "Enter".

©2013 Board of Regents of the University of Wisconsin System