EDV:OpenAFS/Windows: Difference between revisions

From KIP Wiki
⧼kip-jumptonavigation⧽⧼kip-jumptosearch⧽
No edit summary
Line 3: Line 3:
==== Upgrade auf Version 1.7.XX: ====
==== Upgrade auf Version 1.7.XX: ====


Beim Upgrade von Version kleiner / gleich 1.6.xx - den alten Client deinstallieren!
Beim Upgrade von Version kleiner / gleich 1.6.xx - bitte den alten Client deinstallieren!


Ab Version 1.7.X arbeitet der AFS Client für Windows mit einem nativen Filesystem Treiber und nicht mehr wie bisher über die Funktion SMB/Loopbackadapter.
Ab Version 1.7.X arbeitet der AFS Client für Windows mit einem nativen Filesystem Treiber und nicht mehr wie bisher über die Funktion SMB/Loopbackadapter.
Deshalb ist es notwendig bei einem Upgrade des Clients auf Version 1.7.XX, und zwar nach der Deinstallation des Clients, den
Deshalb ist es notwendig bei einem Upgrade des Clients auf Version 1.7.XX, und zwar nach der Deinstallation des Clients, den
[http://www-01.ibm.com/support/docview.wss?uid=swg21240069 Loopbackadapter zu entfernen].
[http://www-01.ibm.com/support/docview.wss?uid=swg21240069 Loopbackadapter zu entfernen].
Dies funktioniert am Besten über:'' Eigenschaften des Loopbackadapters->Karteikarte Treiber->Deinstallieren/Entfernen.''
Dies funktioniert am Besten über:
Eigenschaften des Loopbackadapters > Karteikarte Treiber > Deinstallieren/Entfernen
Dieses Fenster findet man entweder im Gerätemanager oder unter Eigenschaften von Netzwerk.
Dieses Fenster findet man entweder im Gerätemanager, oder unter Eigenschaften von Netzwerk.


==== Installation des AFS Authentication Gui Tool, Installation ohne Kerberos/Heimdal: ====
==== Installation des AFS Authentication Gui Tool, Installation ohne Kerberos/Heimdal: ====


Damit man auch ohne Kerberos oder Heimdal einen Token erzeugen kann, gibt es immer noch die Möglichkeit das AFS Authentication Tool zu installieren.
Damit man auch ohne Kerberos oder Heimdal einen Token erzeugen kann, gibt es immer noch die Möglichkeit das ''AFS Authentication Tool'' zu installieren.
Hierfür ist es notwendig die Installation manuell/custom durchzuführen und die Auswahl der einzelnen Programmteile wie folgt zu treffen:
Hierfür ist es notwendig die Installation manuell/custom durchzuführen, und die Auswahl der einzelnen Programmteile wie folgt zu treffen:


<p style=margin-left:7%>[[image:afs_options.png| AFS Options]]</p>
<p style=margin-left:7%>[[image:afs_options.png| AFS Options]]</p>
Line 33: Line 34:
Remove also the Loopback Adapter if present in the Device Manager.
Remove also the Loopback Adapter if present in the Device Manager.


On Windows7 you have to run this script with Administrator privileges: right click on the file and select "Run as administrator"}}
On Windows7 you need to run this script with Administrator privileges: right click on the file and select "Run as administrator"}}


[http://www-01.ibm.com/support/docview.wss?uid=swg21240069 Uninstalling the Microsoft Windows Loopback Adapter]
[http://www-01.ibm.com/support/docview.wss?uid=swg21240069 Uninstalling the Microsoft Windows Loopback Adapter]
Line 42: Line 43:
==== Download for 32-bit Windows ====
==== Download for 32-bit Windows ====


* [http://dl.openafs.org/dl/openafs/1.7.11/winxp/openafs-en_US-1-7-1100.msi 32-bit MSI installer]
* [http://dl.openafs.org/dl/openafs/1.7.11/winxp/openafs-en_US-1-7-2000.msi 32-bit MSI installer]


==== Downloads for 64-bit Windows ====
==== Downloads for 64-bit Windows ====
Line 48: Line 49:
Both installers must be installed on 64-bit systems
Both installers must be installed on 64-bit systems


* [http://dl.openafs.org/dl/openafs/1.7.11/winxp/openafs-en_US-64bit-1-7-1100.msi 64-bit MSI installer]
* [http://dl.openafs.org/dl/openafs/1.7.11/winxp/openafs-en_US-64bit-1-7-2000.msi 64-bit MSI installer]


* [http://dl.openafs.org/dl/openafs/1.7.11/winxp/openafs-32bit-tools-en_US-1-7-1100.msi 32-bit tools MSI installer]
* [http://dl.openafs.org/dl/openafs/1.7.11/winxp/openafs-32bit-tools-en_US-1-7-2000.msi 32-bit tools MSI installer]




=== Kerberos (MIT) ===
=== >> Kerberos (MIT) ===
KFW 3.2.2 includes Network Identity Manager 1.3.1
KFW 3.2.2 includes Network Identity Manager 1.3.1


Line 69: Line 70:
* [http://www.secure-endpoints.com/binaries/mit-kfw-3-2-2/kfw-amd64-3-2-2.msi MIT Kerberos for Windows 64 Bit]
* [http://www.secure-endpoints.com/binaries/mit-kfw-3-2-2/kfw-amd64-3-2-2.msi MIT Kerberos for Windows 64 Bit]


=== Kerberos (Heimdal) ===
=== >> Kerberos (Heimdal) ===
For further information and latest releases see: [http://www.h5l.org Heimdal Kerberos 5]
For further information and latest releases see: [http://www.h5l.org Heimdal Kerberos 5]


Line 82: Line 83:
For Heimdal Kerberos you need to install the Network Identity Manager
For Heimdal Kerberos you need to install the Network Identity Manager


=== Network Identity Manager ===
=== >> Network Identity Manager ===
Network Identity Manager version 2.0 will be its own distribution that upgrades the Network Identity Manager components installed by KFW (MIT-Kerberos).
Network Identity Manager version 2.0 will be its own distribution that upgrades the Network Identity Manager components installed by KFW (MIT-Kerberos).


Line 105: Line 106:
<br style="clear:both;" />
<br style="clear:both;" />
[[Image:kip_afs_mit3.PNG|right]]
[[Image:kip_afs_mit3.PNG|right]]
If you select the
If you select the option
* Download from web path:
* Download from web path:

then the web path for the config file is:
then the web path for the config file is:


http://printer.kip.uni-heidelberg.de/afsconfig/krb5.conf
<nowiki> http://printer.kip.uni-heidelberg.de/afsconfig/krb5.conf </nowiki>
<br style="clear:both;" />
<br style="clear:both;" />
[[Image:kip_afs_mit4.PNG|right]]
[[Image:kip_afs_mit4.PNG|right]]
Line 139: Line 139:
The folder can be any (accessible) path starting with '''\\afs'''
The folder can be any (accessible) path starting with '''\\afs'''


=== Examples ===
Examles (''the shortcut \\afs\kip is also possible''):
('' the shortcut \\afs\kip is also possible'' ):


* for the top level view: '''\\afs\kip.uni-heidelberg.de'''
* for the top level view: '''\\afs\kip.uni-heidelberg.de'''
Line 149: Line 150:
You can map multiple folders to different drive letters, in order to organize a quick and convenient file access.
You can map multiple folders to different drive letters, in order to organize a quick and convenient file access.


It is also possible to access the data temporary (on the fly) without dedicated drive-mapping,


It is also possible to access the data temporary (on the fly) without dedicated drive-mapping by typing
by typing \\afs\kip\.... location in the explorer address bar.
\\afs\kip\<your location>
in the explorer address bar.


<br style="clear:both;" />
<br style="clear:both;" />

Revision as of 15:10, 20 November 2012

Generelle Installationsanweisungen und Anmerkungen:

Upgrade auf Version 1.7.XX:

Beim Upgrade von Version kleiner / gleich 1.6.xx - bitte den alten Client deinstallieren!

Ab Version 1.7.X arbeitet der AFS Client für Windows mit einem nativen Filesystem Treiber und nicht mehr wie bisher über die Funktion SMB/Loopbackadapter. Deshalb ist es notwendig bei einem Upgrade des Clients auf Version 1.7.XX, und zwar nach der Deinstallation des Clients, den Loopbackadapter zu entfernen. Dies funktioniert am Besten über:

Eigenschaften des Loopbackadapters > Karteikarte Treiber > Deinstallieren/Entfernen 

Dieses Fenster findet man entweder im Gerätemanager, oder unter Eigenschaften von Netzwerk.

Installation des AFS Authentication Gui Tool, Installation ohne Kerberos/Heimdal:

Damit man auch ohne Kerberos oder Heimdal einen Token erzeugen kann, gibt es immer noch die Möglichkeit das AFS Authentication Tool zu installieren. Hierfür ist es notwendig die Installation manuell/custom durchzuführen, und die Auswahl der einzelnen Programmteile wie folgt zu treffen:

AFS Options


Client-Software

OpenAFS for Windows depends on a third party Kerberos 5 implementation for network authentication.

There are two supported options: MIT Kerberos for Windows and Heimdal Kerberos. For Windows7 64 Bit use Heimdal Kerberos on all other Systems the MIT Kerberos works well.

To access the AFS-Server you need to download and install the appropriate OpenAFS and Kerberos Software (sometimes tricky),

or use this KIP-AFS_Windows Installation Script, which automatically download, install and configure all needed software for you (recommended).

IMPORTANT: Use only for a fresh installation, or uninstall the old Client-Software completely first!

Remove also the Loopback Adapter if present in the Device Manager.

On Windows7 you need to run this script with Administrator privileges: right click on the file and select "Run as administrator"

Uninstalling the Microsoft Windows Loopback Adapter

OpenAFS

For the latest releases visit the Homepage OpenAFS for Windows

Download for 32-bit Windows

Downloads for 64-bit Windows

Both installers must be installed on 64-bit systems


>> Kerberos (MIT)

KFW 3.2.2 includes Network Identity Manager 1.3.1

For further information and latest releases see: MIT Kerberos for Windows (KFW)

Download for 32-bit Windows

Download for 64-bit Windows

On 64-bit Windows install both the 32-bit and 64-bit MSI packages

>> Kerberos (Heimdal)

For further information and latest releases see: Heimdal Kerberos 5

Download for 32-bit Windows

Download for 64-bit Windows

For Heimdal Kerberos you need to install the Network Identity Manager

>> Network Identity Manager

Network Identity Manager version 2.0 will be its own distribution that upgrades the Network Identity Manager components installed by KFW (MIT-Kerberos).

For further information and documentation see: Network Identity Manager Homepage

Achtung.svgThis Download is only needed if you like to update the MIT-Kerberos from 1.3.x to 2.0.x or like to use the Heimdal-Kerberos

Download for 32-bit Windows

Download for 64-bit Windows

Installation


Example installation with MIT Kerberos for Windows

Kip afs mit.PNG


Kip afs mit2.PNG


Kip afs mit3.PNG

If you select the option

  • Download from web path:

then the web path for the config file is:

http://printer.kip.uni-heidelberg.de/afsconfig/krb5.conf

Kip afs mit4.PNG


Kip afs1.PNG


Kip afs2.PNG


Client-Connection

Kip afs login.PNG

After installing the AFS-Software you need to:

If the authentication was successful, you are able to access your data by

mapping a network drive:

  • Click: Start > Computer > Map network drive (in the tool-bar)
  • In the "Map Network Drive window" choose an available drive letter from the drop-down list and type the name of the folder to map.

The folder can be any (accessible) path starting with \\afs

Examples

( the shortcut \\afs\kip is also possible ):

  • for the top level view: \\afs\kip.uni-heidelberg.de
  • for your Home directory: \\afs\kip.uni-heidelberg.de\user\<USERNAME>

Click the "Reconnect at logon" checkbox if this network drive should be mapped permanently.

You can map multiple folders to different drive letters, in order to organize a quick and convenient file access.


It is also possible to access the data temporary (on the fly) without dedicated drive-mapping by typing

\\afs\kip\<your location>

in the explorer address bar.