For security reasons, a Kerberos-aware ssh client doesn't forward your Kerberos tickets to the remote system. This means that while the remote system knows who you are, you don't have any tickets there to authenticate to other services, including AFS.
The solution is to enable ticket forwarding (ssh calls this delegation) for only those hosts that you trust.
AFS is a file-sharing system comparable to NFS, Apple File Protocol, NetBIOS, or Netware Core Protocol. It allows client work stations to access files from a remote file server. If you are familiar with standard UNIX file systems or NFS, the main differences are the new file permissions and authentication system.
When you log in, you receive a 'token', or authentication to your files. To determine if you have a token, type tokens at the system prompt. You will see the token, if any, that you have and when it expires.
Tokens have a 25 hour lifetime on our system, renewable up to 7 days.
There are several possibilities. A user needs "list" permission on all the ancestors to a directory to access a directory.
EXAMPLE: You want to give a friend access to directory ~/private/project. Using the fs listacl command (or fs la for short), you find the following:
Fill out the AFS Space Sponsor Form.
Remember, however, that Group disk space is available only to certain kinds of Stanford groups and departments, and only under certain conditions.
tcsh6.05 has AFS support to enable this feature. It also supports the tcsh variable "afsuser" if your local username is different than your afs username.
An ACL can only hold 20 entries. Those entries, however, may be groups. You can, for instance, create a group with 30 members. By adding that group to an ACL, you can thus add 30 users with only one entry in the ACL for a given directory.
You can't name him or her explicitly. Your best bet is to put the files that your friend needs access into a publicly available directory.
Certain types of academic coursework require extra disk space. Course instructors determine if an increase in disk quote is warranted. If you are granted a quota increase, your quota will drop to its previous level when you finish the course.
OpenAFS client software for both Windows (XP/Vista/Windows 7) and Mac OS X is free to current faculty, staff, and students. This software lets you mount any AFS space that you can access on your desktop. You can then directly access and edit files stored in AFS instead of copying the file to a local drive, editing it, and then copying it back to the server.
Go to the AFS at Stanford website at http://www.stanford.edu/services/afs/.AFS (short for Andrew File System) is an online disk storage system employed by universities, research institutions, and similar groups around the world for organizing and maintaining computer data.
WebAFS is a web-based interface to AFS. It allows you to access your files in AFS space anywhere from a computer with a web browser and an Internet connection.
To log in to AFS, go to https://afs.stanford.edu. Your AFS home directory displays.
Access Control Lists (ACLs) determine who's allowed to see, change, or move your AFS files. The permissions you set with ACLs don't work on the files themselves: they work on the folders that hold the files. The Setting Permissions page provides links to step-by-step instructions for setting ACLs.
Current quota allowances are as follows: