Map a Volume on Mac OS X to AFS
These instructions are for mapping a Volume on Mac OS 10.5 to AFS.
The instructions for 10.4 Tiger may be slightly different.
Step 1: Download AFSCommander, a graphical utility
to configure AFS. Once downloaded, click on the file to install it.
Once installed, it will be located in ‘System Preferences’.
The links can be found on the Download page.
Step 2: Download and install the OpenAFS
package for Leopard. This will install all the necessary files
to use AFS on your mac.
Once it is finished installing do NOT restart!
Instead, force quit the installer from the Apple menu by selecting
‘Force Quit’ while holding down the Shift key.
Step 3: Download the ‘edu.mit.Kerberos’ configuration file. Save it in
/Library/Preferences/. Make sure the file name remains
‘edu.mit.Kerberos’. If you see a .txt on the end, remove it.
You should be asked whether you want to replace the existing file
with this new one, select yes.
(Thanks to Michael “Mad Dog” McNally and Dr. Flynn for providing
Step 4: Open the Terminal
(Applications/Utilities/Terminal.app) and type in the following
line exactly as it appears without the quotes. This is used to
prevent .DS_store files from being created on network drives as
they can cause problems for AFS.
‘defaults write com.apple.desktopservices DSDontWriteNetworkStores
Step 5: Now restart your computer.
Step 6: Open up System Preferences and click on
the ‘OpenAFS’ preference pane.
Select ‘CellServDB’ Editor from the middle bar, then type in nd.edu
into the search box, as shown below.
Check the two boxes next to ‘nd.edu’ as shown above. Then remove
‘nd.edu’ from the search box and uncheck the box next to
‘grand.central.org’. The only boxes checked should be the two next
Then click on ‘Save Cell Configuration’
Next, select the ‘Parameter’ button and enter the values as shown
below. When you are finished, make sure to click ‘Save
Next, select the ‘Tokens’ button and check the boxes circled in red
Step 7: Restart your computer again.
Step 8: Once rebooted, you should see a padlock on
the right side of your top menubar as shown below. Click on it and
select ‘Get Token’. When asked for credentials, type in your netid
At this point, you should have kerberos authentication as well as
AFS tokens. To verify that you do, you can go back into the OpenAFS
preference pane in System Preferences and you should see something
similar to below. The text inside the circle indicates that you
have AFS tokens.
Note 1: AFS is now mapped to /afs, however
if you try to access /afs from the Finder, it will most
likely freeze. This is because the Finder is not able to
correctly handle the afs directories. There are two solutions to
get around this problem. The first is to use the Terminal to access
AFS. If you are unfamiliar with the Terminal, or would rather use
the Finder, you will need to create a symbolic link to your AFS
userspace. If you choose to do this, which is recommended, follow
the following step.
Step 9: To create a symbolic link to your AFS
userspace, open the Terminal.
At this point you will need to determine:
a) Your full AFS directory path (ex. /afs/nd.edu/user##/netid,
where ## are two digits and netid is your own netid.
If you do not know your full directory path, you can find it using
b) The path of the location where you would like to place the link
to your AFS userspace.
Examples: /Users/johndoe/Desktop/filename (for your desktop) where
filename is a name for your link.
Once determined, you will need to type in the following into the
ln -s /afs/nd.edu/user##/netid/
where /afs/nd.edu/user##/netid/ is your full AFS directory
and /Users/johndoe/Desktop/filename is the location where
you would like your link, where johndoe is your computer username
(NOTE: This may not be the same as your netid) and filename is an
arbitrary name for your link.
Example: ln -s /afs/nd.edu/user23/engcomp/
would create a link called ‘AFS-engcomp’ on the Desktop.
Note 2: Remember to use the link just created to
access your AFS space.
Note 3: It is highly recommended for several
reasons that your computer username and netid be the same.