NAME¶

aklog-kafs - AFS Kerberos authentication tool

SYNOPSIS¶

aklog-kafs [-dhkV] [<cell> [<realm>]]

DESCRIPTION¶

This program is used to get an authentication ticket from Kerberos that can be used by the in-kernel AFS filesystem (kAFS) to perform authenticated and encrypted accesses to the an AFS cell. Without this only unencrypted anonymous accesses can be made.

Before calling this, the "kinit" program or similar should be invoked to authenticate with the appropriate Kerberos server.

ARGUMENTS¶

<cell>

This is the name of the cell with which the ticket is intended to be used. If not given, the name of the default cell will be read from "/proc/net/afs/rootcell" and used instead.

The root cell can be set in the "/etc/kafs/client" configuration file by setting the "thiscell" in the "[defaults]" section. If the value of thiscell is changed in the configuration file than "kafs-preload" needs to be run to refresh the value in the "/proc/net/afs/rootcell" file.

<realm>

This is the name of the Kerberos realm from which the ticket will be obtained.

OPTIONS¶

"-h"

Display help text and exit.

"-d"

Display processing messages. Specifying "-d" more than once increases the verbosity of the messages.

"-k"

Manually specify keyring to add AFS key into. Otherwise, a session keyring will be used first if found before automatically switching to the uid-session keyring.

Valid values are:

         session
         uid-session
    

"-V"

Show version and exit.

EXAMPLE¶

      # aklog-kafs -d
      Default cell from /proc/net/afs/rootcell: ca-zephyr.org
      Realm: CA-ZEPHYR.ORG
      CELL ca-zephyr.org
      PRINC afs/ca-zephyr.org@CA-ZEPHYR.ORG
      successfully added key: 44095043 to session keyring

SEE ALSO¶

kinit(1), keyctl (1), kafs-preload (8), kafs-client.conf(5)

COPYRIGHT¶

Copyright (C) 2018 Red Hat, Inc. All Rights Reserved.

Written by David Howells <dhowells@redhat.com>

This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.