AFS, OpenAFS and WebAFS

Why don't I get AFS tokens when using a Kerberos-aware ssh?

For security reasons, a Kerberos-aware ssh client doesn't forward your Kerberos tickets to the remote system. This means that while the remote system knows who you are, you don't have any tickets there to authenticate to other services, including AFS.

The solution is to enable ticket forwarding (ssh calls this delegation) for only those hosts that you trust.

I'm using AFS. I've been logged on for two days. Why can't I read my files anymore?

When you log in, you receive a 'token', or authentication to your files. To determine if you have a token, type tokens at the system prompt. You will see the token, if any, that you have and when it expires.

Tokens have a 25 hour lifetime on our system, renewable up to 7 days.

I added my friends to the ACL of my AFS directory but can't they access it.

There are several possibilities. A user needs "list" permission on all the ancestors to a directory to access a directory.

EXAMPLE: You want to give a friend access to directory ~/private/project. Using the fs listacl command (or fs la for short), you find the following:

How do I get AFS space for my group?

Fill out the AFS Space Sponsor Form.

Remember, however, that Group disk space is available only to certain kinds of Stanford groups and departments, and only under certain conditions.

I'm using AFS. Why doesn't autologout accept my password anymore?

tcsh6.05 has AFS support to enable this feature. It also supports the tcsh variable "afsuser" if your local username is different than your afs username.

How do I add more than 20 entries to an ACL?

An ACL can only hold 20 entries. Those entries, however, may be groups. You can, for instance, create a group with 30 members. By adding that group to an ACL, you can thus add 30 users with only one entry in the ACL for a given directory.

I'm using AFS. How do I add a user at another school to my ACL?

You can't name him or her explicitly. Your best bet is to put the files that your friend needs access into a publicly available directory.

What is AFS?

AFS is a file-sharing system comparable to NFS, Apple File Protocol, NetBIOS, or Netware Core Protocol. It allows client work stations to access files from a remote file server. If you are familiar with standard UNIX file systems or NFS, the main differences are the new file permissions and authentication system.

How can I get more disk space for my coursework?

Certain types of academic coursework require extra disk space. Course instructors determine if an increase in disk quote is warranted. If you are granted a quota increase, your quota will drop to its previous level when you finish the course.

What is OpenAFS and where can I get it?

OpenAFS client software for both Windows (XP/Vista/Windows 7) and Mac OS X is free to current faculty, staff, and students. This software lets you mount any AFS space that you can access on your desktop. You can then directly access and edit files stored in AFS instead of copying the file to a local drive, editing it, and then copying it back to the server.

What is WebAFS?

WebAFS is a web-based interface to AFS. It allows you to access your files in AFS space anywhere from a computer with a web browser and an Internet connection.

To log in to AFS, go to Your AFS home directory displays.

Where can I find information about AFS?

Go to the AFS at Stanford website at (short for Andrew File System) is an online disk storage system employed by universities, research institutions, and similar groups around the world for organizing and maintaining computer data.

How do I check and set permissions in AFS?

Access Control Lists (ACLs) determine who's allowed to see, change, or move your AFS files. The permissions you set with ACLs don't work on the files themselves: they work on the folders that hold the files. The Setting Permissions page provides links to step-by-step instructions for setting ACLs.

How can I get more quota in AFS?

Current quota allowances are as follows:

I tried to use Secure FX (or Secure CRT) but the connection timed out. What do I do?

You can only access a Secure AFS account through WebAFS (or through your favorite AFS client, such as OpenAFS, if you are connected to Stanford VPN).