AFS Windows Tutorial

Revised: 7/29/2010

**NOTE**
Because of recent bug fixes and improvements to the OpenAFS client, we strongly urge anyone who had previously installed OpenAFS to upgrade to the newest version.  Please read all instructions before upgrading.

Overview

1) Download and install Kerberos for Windows
2) Configure Kerberos
3)  Download and install OpenAFS
4)  Use AFS

Basic Instructions

All Users:

You should always check for and install all Microsoft Windows Updates before installing new software.  Please see Microsoft's instructions if you're unsure of how to update your operating system.

http://support.microsoft.com/kb/311047

Also, some computers now come with “64 bit” versions of Windows.  These systems require specific version of both Kerberos and OpenAFS.  If you’re unsure whether your operating system is a 32 bit or 64 bit version, please see these instructions from Microsoft:

http://windows.microsoft.com/en-US/windows-vista/32-bit-and-64-bit-Windows-frequently-asked-questions


Upgrading AFS from an older version:

If you have had AFS installed and working in the past, you should already have Kerberos for Windows installed, and the appropriate settings configured.  In order to upgrade to the newest version of OpenAFS, you should only need to download and install the newest OpenAFS client from http://openafs.org/windows.html .


Installing AFS for the first time:
 
Download & Install Kerberos:

For 32 bit Windows, download and install this file:
http://web.mit.edu/kerberos/dist/kfw/3.2/kfw-3.2.2/kfw-3-2-2.msi

For 64 bit Windows, download and install these files, in order:
1) http://www.secure-endpoints.com/binaries/mit-kfw-3-2-2/kfw-amd64-3-2-2.msi
2) http://www.secure-endpoints.com/binaries/mit-kfw-3-2-2/kfw-i386-3-2-2.msi

Configure Kerberos:

Click the Start menu
Click Run
Type %SYSTEMROOT%
Click OK

In the window that opens, find the krb5.ini file and open it. 
Under the [libdefaults] section, make sure the “default realm” line looks like this…

default_realm = BERKELEY.EDU

 (Yes, BERKELEY.EDU must be in ALL CAPS).

Under the [domain_realm] section, make sure you have the following 2 lines…

.berkeley.edu = BERKELEY.EDU
berkeley.edu = BERKELEY.EDU

Download OpenAFS:

For 32-bit systems, click:
http://openafs.org/pages/windows.html#1_5_32bit_downloads
…and download the 32-bit MSI installer.

For 64-bit systems, click:
http://openafs.org/pages/windows.html#1_5_64bit_downloads
…and download the 64-bit MSI installer.
**Note, you do _not_ need to install the 32-bit libraries separately, despite what the page may say.

Install OpenAFS:

Run the installer…
1) When asked, choose “typical” installation type.
2) The Default Cell should be set to:  berkeley.edu
3) Disable Integrated logon, unless your computer is on the campus domain
4) Click Next
5) Uncheck “Start AFS Credentials at startup” and all other settings on that page.
6) Click Next again, and continue through the installation.
7) Reboot

Use:

1) After logging in to Windows, click the “Network Identity Manager” icon in the system tray.
It looks like this…
 
2) Click the yellow “Obtain new credentials” button.
3) Enter your CalNet ID as the Username (i.e. jsmith).
4) Make sure the Realm is BERKELEY.EDU (in all caps).
5) Enter your CalNet passphrase and click “Ok”.

You should now be signed in to AFS.

To browse AFS, click the Start menu, click Run, and type \\afs\berkeley.edu and click “Ok”.

And remember, AFS is always connected, but that doesn't mean you're signed in.  If you try to browse through the berkeley.edu folders on AFS but get denied, check the Network Identity Manager icon to make sure you have signed in.

Detailed Instructions

For more detailed instructions with screen shots, download the pdf here


Please send questions and comments to jmacdonald@law.berkeley.edu