☰
Navigation :

OpenAFS on macOS

Prerequisites

Obtaining

You can obtain OpenAFS client installer from the AuriStorFS download web page:

Installation

On Apple Silicon Macs, the AuriStor client will require you enable macOS system extension. This involves additional steps below.

  1. Double click on the downloaded file. It will open the installer.

  2. Click on the Auristor-Lite.pkg icon then click on Continue and provide the machine credentials to allow installation.

  3. Click though until you have to provide the AFS cell configuration details.

  4. Provide the following information in the input fields.

     Name of local cell: csail.mit.edu
 Alias for local cell: csail

  5. Here you will need to enable the macOS system extension for AuriStor.

    1. Shut down your system.
    2. Press and hold the Touch ID or power button to launch Startup Security Utility.
    3. In Startup Security Utility, enable kernel extensions from the Security Policy button.
    4. Reboot

  6. Navigate to System Preferences > Privacy & Security

  7. Under the Security section towards the bottom of the window, allow the AuriStor kernel extension to load by clicking on Allow

  8. Reboot the machine

Settings

  1. Go to system preferences and click the icon to open the AuriStorFS System Preferences dialog

  2. If prompted to create the “~/Library/LaunchAgents” directory, click “Create” to continue.

  3. Click the lock at lower left to make changes. For most configurations we recommend the following settings:

     "AuriStor Menu": checked
 "Backgrounder": checked
 "Use aklog": checked

Logging into AFS (aka Obtaining AFS tokens)

Without authenticating, you may be able to read AFS directory listings, but will not be able to read or write where you expect to. To access files, either:

  1. Use the AFS menu:
    1. Click the AuriStor icon on your menu bar
    2. If “Startup AFS” is visible, click it, then click the AuriStor icon again (Login with your CSAIL Kerberos username in lowercase and @CSAIL.MIT.EDU all in uppercase).
    3. Click “Get New Token”. If prompted, enter your CSAIL kerberos username and password. – or:
  2. From the command line (eg, Terminal.app):
    1. kinit
    2. aklog

Credentials obtained using either approach will expire after 12 hours. (If you’ve turned it on, the AuriStor Menu icon will show a red X when this happens.) Repeat the above instructions (A or B) to regain access.

Accessing AFS from Finder

(It may take a long time to load if this is the first time you are accessing the folder and if you are on the wireless network)

Creating An Alias

Uninstalling AuriStor OpenAFS