Using AFS version 1.4.1
forWindows XP/2000/2003

To begin using AFS, read the instructions below. If you need assistance, contact the OIT Service Desk.

Logging on to AFS

AFS uses "tokens" to authenticate you and log you on to the system. These tokens expire every 10 hours, causing you to be disconnected from AFS.

  1. In the system tray, click the AFS Client icon.

  1. In the AFS Client dialog box, click the Tokens tab.
  2. Click Obtain New Tokens.
  3. In the Obtain New AFS Tokens dialog box, in the User Name box, type your NetID and in the Password box, type your password.

    NOTE: To receive a warning before the tokens expire, leave the Show a warning before these tokens expire check box selected.

  4. Click OK. The drives you mapped when you configured the client are established and reflected under My Computer.

If you receive an error message (The AFS Client was unable to obtain tokens as username in cell acpub.duke.edu. Error: 37), your computer's clock is more than five minutes off from the AFS server's clock. Follow the instructions below to determine the server's time, then change your computer's time.

To determine the time on the server

  1. Using an SSH client, log on to godzilla.acpub.duke.edu.
  2. At the prompt, type date and press ENTER. The current date and time will be displayed.

Return to top

Accessing files and directories

You can access the files and directories on AFS just as you would on your local computer. To access a file, do one of the following:

  • From the desktop, select My Computer and navigate to the desired drive, folder or file.
  • Open Windows Explorer and navigate to the desired drive, folder or file.
  • Open the desired application and select File > Open.

Because your computer communicates over the network to access files on AFS (unlike files stored on your local system), some functions may take longer to perform.

NOTE: If you haven't logged on or if your tokens have expired, you may not have access to files in your AFS home directory. Follow the directions above to log on.

Return to top

Managing permissions

By default, the files on your AFS directories are only available to you. However, you may assign various access permissions to other users. You control permissions via Access Control Lists (ACLs). An ACL is a list of users (or groups of users) to whom you grant specific privileges.

The available permissions are:

  • r (read) - permission to read the contents of files in the directory
  • l (lookup) - permission to read the names of files in the directory
  • i (insert) - permission to create new files and subdirectories
  • d (delete) - permission to delete files from the directory
  • w (write) - permisison to write to files in the directory
  • k (lock) - permission to lock fiels in the directory (required in order to execute programs from the directory on Windows computers)
  • a (administer) - permission to change the ACL on a directory (usually granted only to the owner of the directory)

Viewing permissions

  1. Right-click the desired folder.
  2. From the context menu, select AFS > Access Control Lists. The Set AFS ACL dialog box appears. Review the four main parts of the dialog box:

Windows AFS ACL screenshot

  1. Directory: Displays the selected directory.
  2. Normal Permissions: Permissions that you grant to a specific user or group.
  3. Negative Permissions: Permissions that you withhold from a specific user or group.
  4. Permissions: Available permissions you may grant or withhold.

Review the following command buttons:

  • Add: add users or groups.
  • Remove: remove users or groups.
  • Clean: clean out entries that do not match existing users or groups.
  • Copy: copy the ACL permissions from one AFS directory to another.

Changing permissions

  1. In the Normal Permissions or Negative Permissions box, select the desired user or group.
  2. Under Permissions, click to select or clear the desired permissions.
  3. Click OK.

Adding a new user and setting permissions

  1. In the Set AFS ACL window, click Add.
  2. In the Add window, in the Name box, type the user's NetID.
  3. Click to select or clear the desired permissions.
  4. Do one of the following:
  • To grant permissions, under Entry Type, select Normal Entry.
  • To prohibit permissions, under Entry Type, select Negative Entry.
  1. Click OK.

Return to top

Logging off AFS

Log off AFS before you log off of your computer.

  1. In the system tray, click the AFS Client icon.

  2. In the AFS Client dialog box, click the Tokens tab.
  3. Click Discard These Tokens.

Return to top