OpenAFS MAC 10.2 System Requirements and Installation

Transcription

1 Information Technology, Arizona State University OpenAFS MAC 10.2 System Requirements and Installation COMMUNICATIONS 8/2004 This document assists in setting up a process for logging into Mac OS 10.2 with Kerberos credentials, for generating a Kerberos 5 ticket, for converting that ticket into an AFS token with a locally build utility called ak5log (raw source available from ftp://achilles.ctd.anl.gov/pub/kerberos.v5), and for accessing personal AFS space in a Finder (GUI) window with a locally developed utility called myasu-afs. This setup is now possible with the use of a single ASUAFSKerb-ak sit package. This document further describes the use of the ASUAFSKerb-ak sit package that is how to use its locally developed installers called ASUinstallerA, ASUinstallerB to install/upgrade and configure the OpenAFS client, to configure the Kerberos client, to install and configure ak5log, to create and configure your ASURITE account on the Mac and to install myasu-afs. A summary of the process is as follows: Using a non-asurite administrative account, download ASUAFSKerb-ak sit. The package in turn consists of a sub-package called OpenAFS.pkg, applications called ASUinstallerA, ASUinstallerB and myasu-afs and other support files. Then execute ASUinstallerA which assists with the installation of the OpenAFS client, configures the OpenAFS client, configures the Kerberos client, installs and configures ak5log, installs myasu-afs on the desktop of your Mac's ASURITE account and finally reboots the Mac. Using the same non-asurite administrative account execute ASUinstallerB which creates an ASURITE account on the Mac or updates an existing one to a uid that matches the one currently assigned to your AFS account. The installer also verifies the ASURITE id both with AFS and with the Mac, obtains your uid from AFS, encrypts password, and sets up account and file attributes and ownership. Furthermore, it installs myasu-afs on the desktop of your local ASURITE account and finally reboots the Mac. This step is not required of users with an ASURITE account on the Mac that was configured in the past for use with the OpenAFS client. Using the Mac ASURITE account, go to its desktop and double-click on myasu-afs and access your personal AFS space in a Finder window. A more detailed guidance now follows to assist with the installation process. 1. Install the latest Mac OS 10.2 update

2 The version of Mac OS required is or higher. Verify the version number from the Apple pull-down menu by selecting About This Mac. If you are using a version older than then upgrade by downloading the latest update from the Apple's Download site. However, if you already have the latest version then skip this step. Note: if your non-asurite administrative account already exists on this Mac then you must skip the next step and go directly to step Create an administrative account that does NOT have the same name as your ASURITE id To create such an account on the Mac, go to the Apple pull-menu and select System Preferences. Now select Accounts (under System).

3 While in the Accounts window and with the Users tab selected, select the button for [Click the lock to make changes] then enter the password for the account and select [OK] to continue. Now select the button for [New User...]. While in the new Accounts window, enter information into fields such as Name, New Password and Verify. Then check the box for [Allow user to administer this computer] and select the button for [OK].

4 Finally select the button for [Click the lock to prevent further changes] and then close the Accounts window. 3. Log into non-asurite Administrative account and Download package Log into the above administrative account and download the package called ASUAFSKerb-ak sit from: The package may automatically uncompress with StuffIt Expander or you may need to double-click on the package to manually uncompress. As a result a folder called ASUAFSKerb-ak will be created. Now open the ASUAFSKerb-ak folder. Files such as ASUinstallerA, ASUinstallerB, myasu-afs and OpenAFS.pkg are displayed.

5 4. Execute ASUinstallerA, install/configure OpenAFS, Kerberos, ak5log and then reboot Open the ASUAFSKerb-ak folder and double-click on ASUinstallerA. Select [OK] to continue. Enter your ASURITE user id and select [OK]. To verify that the correct ASURITE id was entered, select [YES].

6 The application will verify locally with the NetInfo database if your ASURITE id exists. Then a window titled Authentication Required will appear. Enter the password for the current account you are logged in with and a set of files needed for OpenAFS, Kerberos and ak5log will be installed. Furthermore, an application called myasu-afs will also be installed on the desktop of the ASURITE account if the existence of the ASURITE account on the Mac can be verified. Subsequentially, a window titled Authenticate will appear. Again enter the password for the current administrative account and then select [OK]. The OpenAFS Installer window will now appear.

7 Through a series of button selections you will be permitted to either install or upgrade your AFS client. On completion, a window will display a message that The software was successfully installed.

8 Select the [Close] button to close the OpenAFS installer. Finally a dialog box similar to the following will be displayed. You are asked to save your work and reboot. Select [OK] to continue. Note: if your ASURITE account already exists on this Mac and you have successfully used it in the past to access your AFS space then you must skip the next step and go directly to step 6.

9 5. Again log into non-asurite administrative account, execute ASUinstallerB and create or update ASURITE account on Mac After the Mac reboots, you will see an AFS icon on the Desktop. Again go to the ASUAFSKerb-ak folder and now double-click on the application ASUinstallerB. Select [OK] to continue. Enter your ASURITE user id and select [OK]. To verify that the correct ASURITE id was entered, select [YES]. The application will verify with AFS if your ASURITE id exists. Your system id (uid) will be obtained and then displayed. Furthermore, it will verify locally with the NetInfo database if your ASURITE id exists and a message similar to the following will be displayed.

10 Select [OK] to continue. Option A if ASURITE user account doesn't exist on the Mac If the ASURITE user account doesn't exist on the Mac then you will be given the opportunity to create one with a message similar to the following. Select [YES] to continue. It will ask for your ASURITE password, encrypt it and then save it into the NetInfo database. Enter a password and select [OK]. The password will be echoed back for verification. Select [YES] and the encrypted password will be displayed and you will be given the option to assign administrative privileges to the ASURITE account. If you favor such privileges then select [YES]. A window titled Authentication Required will appear. Enter the password for the Mac non-asurite administrative (current) account and then select [OK]. The application then proceeds with the account creation process including setting up the ASURITE account, changing file ownership and group id, creating a home directory and all the necessary subdirectories and files. Furthermore, an application called myasu-afs will also be installed on the desktop of the ASURITE account. Option B if ASURITE user account does exist on the Mac

11 However, if the ASURITE user account already exists on the Mac then in that case you will be given the opportunity to update only its system id (uid) and change its file ownership. This process is required for access to your personal AFS space. Select [YES] to continue. Finally a dialog box similar to the following will be displayed. You are asked to save your work and reboot. Select [OK] to continue. 6. Log into ASURITE account, execute myasu-afs and access AFS space After logging in with your ASURITE id and password on the Mac, a Kerberos 5 ticket is immediately generated and you will have access to AFS but not to your personal AFS space. However, with an AFS token you should also have access to your AFS space. To convert the Kerberos 5 ticket to an AFS token, double-click on the application called myasu-afs that can be found on the Desktop.

12 The application myasu-afs in addition to converting the Kerberos 5 ticket to an AFS token also opens up a Finder window to your AFS space. The folder will have your ASURITE id as its title-name and will look similar to the following. Note: In some cases depending on network traffic, your AFS folder may take a few minutes to appear. Please be patient! Notes: 1. Please print a copy of this document and use it during installation. 2. During installation, you will be prompted for your Mac administrative account password. This is because the install processes requires administrative privileges for making any changes to your account. 3. After successfully accessing your AFS space, you may delete the ASUAFSKerbak folder from your non-asurite administrative account. However, do not delete the myasu-afs application from the desktop of your ASURITE account. 4. After the installation is complete only the instructions in step 6 are needed in the future to access to your AFS space.

13