OpenAFS Administration Guide i OpenAFS Administration Guide OpenAFS Administration Guide ii Copyright © 2000 IBM Corporation. All Rights Reserved OpenAFS Administration Guide iii COLLABORATORS TITLE : OpenAFS Administration Guide ACTION NAME DATE SIGNATURE WRITTEN BY February 13, 2016 REVISION HISTORY NUMBER DATE DESCRIPTION NAME BP--1.6.x-4781- gc0876-dirty 3.6 April 2000 First IBM Edition, Document Number GC09-4563-00 OpenAFS Administration Guide iv Contents I Concepts and Configuration Issues1 1 An Overview of OpenAFS Administration2 1.1 A Broad Overview of AFS . .2 1.1.1 AFS: A Distributed File System . .2 1.1.2 Servers and Clients . .2 1.1.3 Cells . .2 1.1.4 Transparent Access and the Uniform Namespace . .3 1.1.5 Volumes . .3 1.1.6 Efficiency Boosters: Replication and Caching . .3 1.1.7 Security: Mutual Authentication and Access Control Lists . .3 1.2 More Detailed Discussions of Some Basic Concepts . .4 1.2.1 Networks . .4 1.2.2 Distributed File Systems . .4 1.2.3 Servers and Clients . .4 1.2.4 Cells . .5 1.2.5 The Uniform Namespace and Transparent Access . .5 1.2.6 Volumes . .5 1.2.7 Mount Points . .6 1.2.8 Replication . .6 1.2.9 Caching and Callbacks . .6 1.3 AFS Server Processes and the Cache Manager . .7 1.3.1 The File Server . .8 1.3.2 The Basic OverSeer Server . .8 1.3.3 The Protection Server . .9 1.3.4 The Volume Server . .9 1.3.5 The Volume Location (VL) Server . .9 1.3.6 The Salvager . 10 1.3.7 The Update Server . 10 OpenAFS Administration Guide v 1.3.8 The Backup Server . 10 1.3.9 The Cache Manager . 10 1.3.10 The Kerberos KDC . 11 1.3.11 The Network Time Protocol Daemon . 11 2 Issues in Cell Configuration and Administration 12 2.1 Differences between AFS and UNIX: A Summary . 12 2.1.1 Differences in File and Directory Protection . 12 2.1.2 Differences in Authentication . 13 2.1.3 Differences in the Semantics of Standard UNIX Commands . 13 2.1.4 The AFS version of the fsck Command and inode-based fileservers . 13 2.1.5 Creating Hard Links . 14 2.1.6 AFS Implements Save on Close . 14 2.1.7 Setuid Programs . 14 2.2 Choosing a Cell Name . 15 2.2.1 How to Set the Cell Name . 15 2.2.2 Why Choosing the Appropriate Cell Name is Important . 16 2.3 Participating in the AFS Global Namespace . 16 2.3.1 What the Global Namespace Looks Like . 16 2.3.2 Making Your Cell Visible to Others . 17 2.3.3 Making Other Cells Visible in Your Cell . 17 2.3.4 Granting and Denying Foreign Users Access to Your Cell . 18 2.4 Configuring Your AFS Filespace . 18 2.4.1 The Top /afs Level . 18 2.4.2 The Second (Cellname) Level . 19 2.4.3 The Third Level . 19 2.5 Creating Volumes to Simplify Administration . 20 2.5.1 Assigning Volume Names . 20 2.5.2 Grouping Related Volumes on a Partition . 21 2.5.3 When to Replicate Volumes . 21 2.5.4 The Default Quota and ACL on a New Volume . 22 2.6 Configuring Server Machines . 22 2.6.1 Replicating the OpenAFS Administrative Databases . 23 2.6.2 AFS Files on the Local Disk . 24 2.6.3 Configuring Partitions to Store AFS Data . 24 2.6.4 Monitoring, Rebooting and Automatic Process Restarts . 24 2.7 Configuring Client Machines . 24 2.7.1 Configuring the Local Disk . 25 2.7.2 Enabling Access to Foreign Cells . 25 OpenAFS Administration Guide vi 2.7.3 Using the @sys Variable in Pathnames . 25 2.7.4 Setting Server Preferences . 26 2.8 Configuring AFS User Accounts . 26 2.8.1 Choosing Usernames and Naming Other Account Components . 27 2.8.2 Grouping Home Directories . 28 2.8.3 Making a Backup Version of User Volumes Available . 29 2.8.4 Creating Standard Files in New AFS Accounts . 29 2.9 Using AFS Protection Groups . 30 2.9.1 The Three System Groups . 30 2.9.2 The Two Types of User-Defined Groups . 30 2.10 Login and Authentication in AFS . 31 2.10.1 Identifying AFS Tokens by PAG . 31 2.10.2 Using an AFS-modified login Utility . 32 2.10.3 Using Two-Step Login and Authentication . ..