afslog(1) [redhat man page]

AFSLOG(1)						    BSD General Commands Manual 						 AFSLOG(1)

NAME

     afslog -- obtains AFS tokens for specified cells

SYNOPSIS

     afslog [-d] [-c cell] [-k realm] [-p path] [-unlog] [-createuser] [args]

DESCRIPTION

     The afslog command obtains AFS tokens, args are either a name of a cell or a pathnames of a file in the cell to get tokens for. If an argu-
     ment is .	or .. or contains a slash it is assumed to be a pathname. Otherwise it is assumed to be a name of a cell or a prefix thereof.

     The -c and -p flags can be used to resolve ambiguities.

     afslog might fail to guess the Kerberos realm to get tickets for (for instance if the volume location servers of the cell does not reside in
     the kerberos realm that holds the AFS service key, and the correct realm isn't the same as the cell name or the local realm (I didn't say
     this was a common problem)). Anyway, the -k can be used to give a hint. It should not be used unless there is a problem, since all tickets
     will be taken from the specified realm and this is not (usually) what you want.

     -createuser means that afslog should try to run pts to create a remote user principal in another cell.  -d can be used for debugging.

     If the -unlog flag is given any tokens are removed and all other arguments are ignored.

SEE ALSO

     kauth(1), krbafs(3)

BUGS

     It should be able to handle the MIT Athena aklog flags -hosts, -zsubs, and -noprdb, but does not.

KTH-KRB 							  April 27, 1996							   KTH-KRB

afs5log(8)						   System Administrator's Manual						afs5log(8)

NAME

       afs5log - AFS token initializer

SYNOPSIS

       afs5log [ [-v] [-5] [-k] [-p path] [cell[=principal] ] ] [...]

DESCRIPTION

       The  afs5log  command uses Kerberos to obtain AFS tokens for the named cells.  If no cell is named, tokens are obtained for the local cell.
       If the principal name of the afs service for the cell is known, the cell name may also be given in the form cell=principal_name.   Attempts
       are made to obtain Kerberos IV credentials first, and if that fails, afs5log will create Kerberos 5 (2b-style) tokens.

ARGUMENTS

       -v     Turns on verbose mode.  afs5log will print debugging messages while it does its work.  Use more than once to get more detail.

       -p path
	      Determine which cell the specified path resides in, and obtain tokens for that cell.

       -s strategy
	      Overrides the default token-setting strategy ("2b") with the named strategy.  Recognized strategy names include:
	       rxk5  rxk5 (requires OpenAFS 1.6 or later)
	       2b    rxkad "2b" (requires OpenAFS 1.2.8 or later)

       -5     Skip attempts to use Kerberos IV and just use 2b-style tokens, which are only supported by OpenAFS 1.2.8 and later.

       -k     Skip attempts to use Kerberos IV and use rxk5-style tokens, which are only supported by OpenAFS 1.6 and later.

       -n     Assume  that, if a cell name and a realm name differ only by case, that the name of the AFS service's principal name doesn't include
	      an instance.

SEE ALSO

       pam_krb5(5) krb5.conf(5)

BUGS

       Probably, but let's hope not.  If you find any, please file them in the bug database at http://bugzilla.redhat.com/ against the	"pam_krb5"
       component.

AUTHOR

       Nalin Dahyabhai <nalin@redhat.com>

Red Hat Linux							    2007/12/18								afs5log(8)