Quick reference guide Linux

Previous Contents Index Next 

5. The AFS file system and Kerberos 5

This section assumes that AFS and Kerberos 5 (Heimdal) is installed on the Computer. Some AFS features can be used as an authenticated user only. Such a user has a valid AFS token, which can be derived from a valid Kerberos ticket. Most authentication methods can generate both an AFS token and a Kerberos ticket, while for AFS alone only the token is required. Tokens and tickets have a limited lifetime.

fs subcommand [arguments] P
Suite of commands to list, set and delete AFS ACL's.
fs help [subcommand] get help [on subcommand]
fs listacl [dir_or_file] list ACL's
fs setacl dir ACL[s] set ACL[s] for dir
fs setacl -dir dir[s] -acl ACL[s] set ACL[s] for dir[s]
fs copyacl source_dir dest_dir[s] copy ACL from source_dir

where each ACL consists of a user or protection group name followed by a space and letters representing access control rights as follows:
r read l lookup i insert a administer
w write k lock d delete

The shorthand forms write (rlidwk), read (rl), all (rlidwka) and none (remove entry) can be used to describe access rights.
The suite can also be used to obtain other file server information.
fs listquota [dir_or_file] list file quota for AFS volume
fs whereis file list file server housing file
 
kdestroy [cell_name] P
Destroy the AFS tokens and Kerberos tickets.  
kinit P
Obtain a new Kerberos 5 ticket and an AFS token.  
klist P
List all Kerberos tickets and its lifetimes. Lisats AFS tokens as well.  
klog P
Obtain a new AFS token.  
pts subcommand [arguments] P
Suite of commands to list, create, modify and delete AFS protection groups.
pts help [subcommand] get help [on subcommand]
pts membership group list members of a group
pts membership user list groups a user belongs to
pts listowned group_or_user list groups owned by group_or_user
pts examine group list group information
pts creategroup user:group create group owned by user
pts adduser user group add user to group
pts removeuser user group remove user from group
pts delete group delete group
pts rename group newgroup change name of group
 
tklife N
Warn the user if tokens or tickets expire within an hour or are already expired.  
tokens P
Display AFS tokens and their lifetimes.  
unlog [cell_name] P
Destroy the AFS tokens.  

Previous Contents Index Next