€•ÙwŒsphinx.addnodes”Œdocument”“”)”}”(Œ rawsource”Œ”Œchildren”]”(Œ translations”Œ LanguagesNode”“”)”}”(hhh]”(hŒ pending_xref”“”)”}”(hhh]”Œdocutils.nodes”ŒText”“”ŒChinese (Simplified)”…””}”Œparent”hsbaŒ attributes”}”(Œids”]”Œclasses”]”Œnames”]”Œdupnames”]”Œbackrefs”]”Œ refdomain”Œstd”Œreftype”Œdoc”Œ reftarget”Œ#/translations/zh_CN/filesystems/afs”Œmodname”NŒ classname”NŒ refexplicit”ˆuŒtagname”hhh ubh)”}”(hhh]”hŒChinese (Traditional)”…””}”hh2sbah}”(h]”h ]”h"]”h$]”h&]”Œ refdomain”h)Œreftype”h+Œ reftarget”Œ#/translations/zh_TW/filesystems/afs”Œmodname”NŒ classname”NŒ refexplicit”ˆuh1hhh ubh)”}”(hhh]”hŒItalian”…””}”hhFsbah}”(h]”h ]”h"]”h$]”h&]”Œ refdomain”h)Œreftype”h+Œ reftarget”Œ#/translations/it_IT/filesystems/afs”Œmodname”NŒ classname”NŒ refexplicit”ˆuh1hhh ubh)”}”(hhh]”hŒJapanese”…””}”hhZsbah}”(h]”h ]”h"]”h$]”h&]”Œ refdomain”h)Œreftype”h+Œ reftarget”Œ#/translations/ja_JP/filesystems/afs”Œmodname”NŒ classname”NŒ refexplicit”ˆuh1hhh ubh)”}”(hhh]”hŒKorean”…””}”hhnsbah}”(h]”h ]”h"]”h$]”h&]”Œ refdomain”h)Œreftype”h+Œ reftarget”Œ#/translations/ko_KR/filesystems/afs”Œmodname”NŒ classname”NŒ refexplicit”ˆuh1hhh ubh)”}”(hhh]”hŒPortuguese (Brazilian)”…””}”hh‚sbah}”(h]”h ]”h"]”h$]”h&]”Œ refdomain”h)Œreftype”h+Œ reftarget”Œ#/translations/pt_BR/filesystems/afs”Œmodname”NŒ classname”NŒ refexplicit”ˆuh1hhh ubh)”}”(hhh]”hŒSpanish”…””}”hh–sbah}”(h]”h ]”h"]”h$]”h&]”Œ refdomain”h)Œreftype”h+Œ reftarget”Œ#/translations/sp_SP/filesystems/afs”Œmodname”NŒ classname”NŒ refexplicit”ˆuh1hhh ubeh}”(h]”h ]”h"]”h$]”h&]”Œcurrent_language”ŒEnglish”uh1h hhŒ _document”hŒsource”NŒline”NubhŒcomment”“”)”}”(hŒ SPDX-License-Identifier: GPL-2.0”h]”hŒ SPDX-License-Identifier: GPL-2.0”…””}”hh·sbah}”(h]”h ]”h"]”h$]”h&]”Œ xml:space”Œpreserve”uh1hµhhh²hh³Œ=/var/lib/git/docbuild/linux/Documentation/filesystems/afs.rst”h´KubhŒsection”“”)”}”(hhh]”(hŒtitle”“”)”}”(hŒkAFS: AFS FILESYSTEM”h]”hŒkAFS: AFS FILESYSTEM”…””}”(hhÏh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÍhhÊh²hh³hÇh´Kubh¶)”}”(hŒ‹Contents: - Overview. - Usage. - Mountpoints. - Dynamic root. - Proc filesystem. - The cell database. - Security. - The @sys substitution.”h]”hŒ‹Contents: - Overview. - Usage. - Mountpoints. - Dynamic root. - Proc filesystem. - The cell database. - Security. - The @sys substitution.”…””}”hhÝsbah}”(h]”h ]”h"]”h$]”h&]”hÅhÆuh1hµhhÊh²hh³hÇh´KubhÉ)”}”(hhh]”(hÎ)”}”(hŒOverview”h]”hŒOverview”…””}”(hhîh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÍhhëh²hh³hÇh´KubhŒ paragraph”“”)”}”(hŒ´This filesystem provides a fairly simple secure AFS filesystem driver. It is under development and does not yet provide the full feature set. The features it does support include:”h]”hŒ´This filesystem provides a fairly simple secure AFS filesystem driver. It is under development and does not yet provide the full feature set. The features it does support include:”…””}”(hhþh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´Khhëh²hubhŒ block_quote”“”)”}”(hŒ—(*) Security (currently only AFS kaserver and KerberosIV tickets). (*) File reading and writing. (*) Automounting. (*) Local caching (via fscache). ”h]”(hý)”}”(hŒB(*) Security (currently only AFS kaserver and KerberosIV tickets).”h]”hŒB(*) Security (currently only AFS kaserver and KerberosIV tickets).”…””}”(hjh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´Khjubhý)”}”(hŒ(*) File reading and writing.”h]”hŒ(*) File reading and writing.”…””}”(hj h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´Khjubhý)”}”(hŒ(*) Automounting.”h]”hŒ(*) Automounting.”…””}”(hj.h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´Khjubhý)”}”(hŒ (*) Local caching (via fscache).”h]”hŒ (*) Local caching (via fscache).”…””}”(hj<h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´K hjubeh}”(h]”h ]”h"]”h$]”h&]”uh1j h³hÇh´Khhëh²hubhý)”}”(hŒ3It does not yet support the following AFS features:”h]”hŒ3It does not yet support the following AFS features:”…””}”(hjPh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´K"hhëh²hubj )”}”(hŒ(*) pioctl() system call. ”h]”hý)”}”(hŒ(*) pioctl() system call.”h]”hŒ(*) pioctl() system call.”…””}”(hjbh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´K$hj^ubah}”(h]”h ]”h"]”h$]”h&]”uh1j h³hÇh´K$hhëh²hubeh}”(h]”Œoverview”ah ]”h"]”Œoverview”ah$]”h&]”uh1hÈhhÊh²hh³hÇh´KubhÉ)”}”(hhh]”(hÎ)”}”(hŒ Compilation”h]”hŒ Compilation”…””}”(hjh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÍhj~h²hh³hÇh´K(ubhý)”}”(hŒQThe filesystem should be enabled by turning on the kernel configuration options::”h]”hŒPThe filesystem should be enabled by turning on the kernel configuration options:”…””}”(hjh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´K*hj~h²hubhŒ literal_block”“”)”}”(hŒ¡CONFIG_AF_RXRPC - The RxRPC protocol transport CONFIG_RXKAD - The RxRPC Kerberos security handler CONFIG_AFS_FS - The AFS filesystem”h]”hŒ¡CONFIG_AF_RXRPC - The RxRPC protocol transport CONFIG_RXKAD - The RxRPC Kerberos security handler CONFIG_AFS_FS - The AFS filesystem”…””}”hjŸsbah}”(h]”h ]”h"]”h$]”h&]”hÅhÆuh1jh³hÇh´K-hj~h²hubhý)”}”(hŒ?Additionally, the following can be turned on to aid debugging::”h]”hŒ>Additionally, the following can be turned on to aid debugging:”…””}”(hj­h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´K1hj~h²hubjž)”}”(hŒ~CONFIG_AF_RXRPC_DEBUG - Permit AF_RXRPC debugging to be enabled CONFIG_AFS_DEBUG - Permit AFS debugging to be enabled”h]”hŒ~CONFIG_AF_RXRPC_DEBUG - Permit AF_RXRPC debugging to be enabled CONFIG_AFS_DEBUG - Permit AFS debugging to be enabled”…””}”hj»sbah}”(h]”h ]”h"]”h$]”h&]”hÅhÆuh1jh³hÇh´K3hj~h²hubhý)”}”(hŒqThey permit the debugging messages to be turned on dynamically by manipulating the masks in the following files::”h]”hŒpThey permit the debugging messages to be turned on dynamically by manipulating the masks in the following files:”…””}”(hjÉh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´K6hj~h²hubjž)”}”(hŒG/sys/module/af_rxrpc/parameters/debug /sys/module/kafs/parameters/debug”h]”hŒG/sys/module/af_rxrpc/parameters/debug /sys/module/kafs/parameters/debug”…””}”hj×sbah}”(h]”h ]”h"]”h$]”h&]”hÅhÆuh1jh³hÇh´K9hj~h²hubeh}”(h]”Œ compilation”ah ]”h"]”Œ compilation”ah$]”h&]”uh1hÈhhÊh²hh³hÇh´K(ubhÉ)”}”(hhh]”(hÎ)”}”(hŒUsage”h]”hŒUsage”…””}”(hjðh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÍhjíh²hh³hÇh´K>ubhý)”}”(hŒ|When inserting the driver modules the root cell must be specified along with a list of volume location server IP addresses::”h]”hŒ{When inserting the driver modules the root cell must be specified along with a list of volume location server IP addresses:”…””}”(hjþh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´K@hjíh²hubjž)”}”(hŒTmodprobe rxrpc modprobe kafs rootcell=cambridge.redhat.com:172.16.18.73:172.16.18.91”h]”hŒTmodprobe rxrpc modprobe kafs rootcell=cambridge.redhat.com:172.16.18.73:172.16.18.91”…””}”hj sbah}”(h]”h ]”h"]”h$]”h&]”hÅhÆuh1jh³hÇh´KChjíh²hubhý)”}”(hŒ›The first module is the AF_RXRPC network protocol driver. This provides the RxRPC remote operation protocol and may also be accessed from userspace. See:”h]”hŒ›The first module is the AF_RXRPC network protocol driver. This provides the RxRPC remote operation protocol and may also be accessed from userspace. See:”…””}”(hjh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´KFhjíh²hubj )”}”(hŒ#Documentation/networking/rxrpc.rst ”h]”hý)”}”(hŒ"Documentation/networking/rxrpc.rst”h]”hŒ"Documentation/networking/rxrpc.rst”…””}”(hj,h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´KIhj(ubah}”(h]”h ]”h"]”h$]”h&]”uh1j h³hÇh´KIhjíh²hubhý)”}”(hŒ…The second module is the kerberos RxRPC security driver, and the third module is the actual filesystem driver for the AFS filesystem.”h]”hŒ…The second module is the kerberos RxRPC security driver, and the third module is the actual filesystem driver for the AFS filesystem.”…””}”(hj@h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´KKhjíh²hubhý)”}”(hŒWOnce the module has been loaded, more modules can be added by the following procedure::”h]”hŒVOnce the module has been loaded, more modules can be added by the following procedure:”…””}”(hjNh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´KNhjíh²hubjž)”}”(hŒTecho add grand.central.org 18.9.48.14:128.2.203.61:130.237.48.87 >/proc/fs/afs/cells”h]”hŒTecho add grand.central.org 18.9.48.14:128.2.203.61:130.237.48.87 >/proc/fs/afs/cells”…””}”hj\sbah}”(h]”h ]”h"]”h$]”h&]”hÅhÆuh1jh³hÇh´KQhjíh²hubhý)”}”(hŒWhere the parameters to the "add" command are the name of a cell and a list of volume location servers within that cell, with the latter separated by colons.”h]”hŒ¡Where the parameters to the “add†command are the name of a cell and a list of volume location servers within that cell, with the latter separated by colons.”…””}”(hjjh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´KShjíh²hubhý)”}”(hŒJFilesystems can be mounted anywhere by commands similar to the following::”h]”hŒIFilesystems can be mounted anywhere by commands similar to the following:”…””}”(hjxh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´KVhjíh²hubjž)”}”(hŒ»mount -t afs "%cambridge.redhat.com:root.afs." /afs mount -t afs "#cambridge.redhat.com:root.cell." /afs/cambridge mount -t afs "#root.afs." /afs mount -t afs "#root.cell." /afs/cambridge”h]”hŒ»mount -t afs "%cambridge.redhat.com:root.afs." /afs mount -t afs "#cambridge.redhat.com:root.cell." /afs/cambridge mount -t afs "#root.afs." /afs mount -t afs "#root.cell." /afs/cambridge”…””}”hj†sbah}”(h]”h ]”h"]”h$]”h&]”hÅhÆuh1jh³hÇh´KXhjíh²hubhý)”}”(hŒÚWhere the initial character is either a hash or a percent symbol depending on whether you definitely want a R/W volume (percent) or whether you'd prefer a R/O volume, but are willing to use a R/W volume instead (hash).”h]”hŒÜWhere the initial character is either a hash or a percent symbol depending on whether you definitely want a R/W volume (percent) or whether you’d prefer a R/O volume, but are willing to use a R/W volume instead (hash).”…””}”(hj”h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´K]hjíh²hubhý)”}”(hŒzThe name of the volume can be suffixes with ".backup" or ".readonly" to specify connection to only volumes of those types.”h]”hŒ‚The name of the volume can be suffixes with “.backup†or “.readonly†to specify connection to only volumes of those types.”…””}”(hj¢h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´Kahjíh²hubhý)”}”(hŒ‘The name of the cell is optional, and if not given during a mount, then the named volume will be looked up in the cell specified during modprobe.”h]”hŒ‘The name of the cell is optional, and if not given during a mount, then the named volume will be looked up in the cell specified during modprobe.”…””}”(hj°h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´Kdhjíh²hubhý)”}”(hŒ@Additional cells can be added through /proc (see later section).”h]”hŒ@Additional cells can be added through /proc (see later section).”…””}”(hj¾h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´Kghjíh²hubeh}”(h]”Œusage”ah ]”h"]”Œusage”ah$]”h&]”uh1hÈhhÊh²hh³hÇh´K>ubhÉ)”}”(hhh]”(hÎ)”}”(hŒ Mountpoints”h]”hŒ Mountpoints”…””}”(hj×h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÍhjÔh²hh³hÇh´Kkubhý)”}”(hX‡AFS has a concept of mountpoints. In AFS terms, these are specially formatted symbolic links (of the same form as the "device name" passed to mount). kAFS presents these to the user as directories that have a follow-link capability (i.e.: symbolic link semantics). If anyone attempts to access them, they will automatically cause the target volume to be mounted (if possible) on that site.”h]”hX‹AFS has a concept of mountpoints. In AFS terms, these are specially formatted symbolic links (of the same form as the “device name†passed to mount). kAFS presents these to the user as directories that have a follow-link capability (i.e.: symbolic link semantics). If anyone attempts to access them, they will automatically cause the target volume to be mounted (if possible) on that site.”…””}”(hjåh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´KmhjÔh²hubhý)”}”(hŒÆAutomatically mounted filesystems will be automatically unmounted approximately twenty minutes after they were last used. Alternatively they can be unmounted directly with the umount() system call.”h]”hŒÆAutomatically mounted filesystems will be automatically unmounted approximately twenty minutes after they were last used. Alternatively they can be unmounted directly with the umount() system call.”…””}”(hjóh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´KshjÔh²hubhý)”}”(hŒÉManually unmounting an AFS volume will cause any idle submounts upon it to be culled first. If all are culled, then the requested volume will also be unmounted, otherwise error EBUSY will be returned.”h]”hŒÉManually unmounting an AFS volume will cause any idle submounts upon it to be culled first. If all are culled, then the requested volume will also be unmounted, otherwise error EBUSY will be returned.”…””}”(hjh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´KwhjÔh²hubhý)”}”(hŒsThis can be used by the administrator to attempt to unmount the whole AFS tree mounted on /afs in one go by doing::”h]”hŒrThis can be used by the administrator to attempt to unmount the whole AFS tree mounted on /afs in one go by doing:”…””}”(hjh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´K{hjÔh²hubjž)”}”(hŒ umount /afs”h]”hŒ umount /afs”…””}”hjsbah}”(h]”h ]”h"]”h$]”h&]”hÅhÆuh1jh³hÇh´K~hjÔh²hubeh}”(h]”Œ mountpoints”ah ]”h"]”Œ mountpoints”ah$]”h&]”uh1hÈhhÊh²hh³hÇh´KkubhÉ)”}”(hhh]”(hÎ)”}”(hŒ Dynamic Root”h]”hŒ Dynamic Root”…””}”(hj6h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÍhj3h²hh³hÇh´K‚ubhý)”}”(hŒ•A mount option is available to create a serverless mount that is only usable for dynamic lookup. Creating such a mount can be done by, for example::”h]”hŒ”A mount option is available to create a serverless mount that is only usable for dynamic lookup. Creating such a mount can be done by, for example:”…””}”(hjDh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´K„hj3h²hubjž)”}”(hŒmount -t afs none /afs -o dyn”h]”hŒmount -t afs none /afs -o dyn”…””}”hjRsbah}”(h]”h ]”h"]”h$]”h&]”hÅhÆuh1jh³hÇh´K‡hj3h²hubhý)”}”(hŒÍThis creates a mount that just has an empty directory at the root. Attempting to look up a name in this directory will cause a mountpoint to be created that looks up a cell of the same name, for example::”h]”hŒÌThis creates a mount that just has an empty directory at the root. Attempting to look up a name in this directory will cause a mountpoint to be created that looks up a cell of the same name, for example:”…””}”(hj`h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´K‰hj3h²hubjž)”}”(hŒls /afs/grand.central.org/”h]”hŒls /afs/grand.central.org/”…””}”hjnsbah}”(h]”h ]”h"]”h$]”h&]”hÅhÆuh1jh³hÇh´Khj3h²hubeh}”(h]”Œ dynamic-root”ah ]”h"]”Œ dynamic root”ah$]”h&]”uh1hÈhhÊh²hh³hÇh´K‚ubhÉ)”}”(hhh]”(hÎ)”}”(hŒProc Filesystem”h]”hŒProc Filesystem”…””}”(hj‡h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÍhj„h²hh³hÇh´K‘ubhý)”}”(hŒDThe AFS module creates a "/proc/fs/afs/" directory and populates it:”h]”hŒHThe AFS module creates a “/proc/fs/afs/†directory and populates it:”…””}”(hj•h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´K“hj„h²hubj )”}”(hXê(*) A "cells" file that lists cells currently known to the afs module and their usage counts:: [root@andromeda ~]# cat /proc/fs/afs/cells USE NAME 3 cambridge.redhat.com (*) A directory per cell that contains files that list volume location servers, volumes, and active servers known within that cell:: [root@andromeda ~]# cat /proc/fs/afs/cambridge.redhat.com/servers USE ADDR STATE 4 172.16.18.91 0 [root@andromeda ~]# cat /proc/fs/afs/cambridge.redhat.com/vlservers ADDRESS 172.16.18.91 [root@andromeda ~]# cat /proc/fs/afs/cambridge.redhat.com/volumes USE STT VLID[0] VLID[1] VLID[2] NAME 1 Val 20000000 20000001 20000002 root.afs ”h]”hŒdefinition_list”“”)”}”(hhh]”(hŒdefinition_list_item”“”)”}”(hŒ³(*) A "cells" file that lists cells currently known to the afs module and their usage counts:: [root@andromeda ~]# cat /proc/fs/afs/cells USE NAME 3 cambridge.redhat.com ”h]”(hŒterm”“”)”}”(hŒI(*) A "cells" file that lists cells currently known to the afs module and”h]”hŒM(*) A “cells†file that lists cells currently known to the afs module and”…””}”(hj´h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1j²h³hÇh´Kšhj®ubhŒ definition”“”)”}”(hhh]”(hý)”}”(hŒtheir usage counts::”h]”hŒtheir usage counts:”…””}”(hjÇh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´K–hjÄubjž)”}”(hŒL[root@andromeda ~]# cat /proc/fs/afs/cells USE NAME 3 cambridge.redhat.com”h]”hŒL[root@andromeda ~]# cat /proc/fs/afs/cells USE NAME 3 cambridge.redhat.com”…””}”hjÕsbah}”(h]”h ]”h"]”h$]”h&]”hÅhÆuh1jh³hÇh´K˜hjÄubeh}”(h]”h ]”h"]”h$]”h&]”uh1jÂhj®ubeh}”(h]”h ]”h"]”h$]”h&]”uh1j¬h³hÇh´Kšhj©ubj­)”}”(hXþ(*) A directory per cell that contains files that list volume location servers, volumes, and active servers known within that cell:: [root@andromeda ~]# cat /proc/fs/afs/cambridge.redhat.com/servers USE ADDR STATE 4 172.16.18.91 0 [root@andromeda ~]# cat /proc/fs/afs/cambridge.redhat.com/vlservers ADDRESS 172.16.18.91 [root@andromeda ~]# cat /proc/fs/afs/cambridge.redhat.com/volumes USE STT VLID[0] VLID[1] VLID[2] NAME 1 Val 20000000 20000001 20000002 root.afs ”h]”(j³)”}”(hŒF(*) A directory per cell that contains files that list volume location”h]”hŒF(*) A directory per cell that contains files that list volume location”…””}”(hjóh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1j²h³hÇh´K¨hjïubjÃ)”}”(hhh]”(hý)”}”(hŒ=servers, volumes, and active servers known within that cell::”h]”hŒ/proc/fs/afs/cells echo add grand.central.org 18.9.48.14:128.2.203.61:130.237.48.87 >/proc/fs/afs/cells”h]”hŒ–echo add CELLNAME VLADDR[:VLADDR][:VLADDR]... >/proc/fs/afs/cells echo add grand.central.org 18.9.48.14:128.2.203.61:130.237.48.87 >/proc/fs/afs/cells”…””}”hjmsbah}”(h]”h ]”h"]”h$]”h&]”hÅhÆuh1jh³hÇh´Kµhj@h²hubhý)”}”(hŒ=No other cell database operations are available at this time.”h]”hŒ=No other cell database operations are available at this time.”…””}”(hj{h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´K¸hj@h²hubeh}”(h]”Œthe-cell-database”ah ]”h"]”Œthe cell database”ah$]”h&]”uh1hÈhhÊh²hh³hÇh´K«ubhÉ)”}”(hhh]”(hÎ)”}”(hŒSecurity”h]”hŒSecurity”…””}”(hj”h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÍhj‘h²hh³hÇh´K¼ubhý)”}”(hŒzSecure operations are initiated by acquiring a key using the klog program. A very primitive klog program is available at:”h]”hŒzSecure operations are initiated by acquiring a key using the klog program. A very primitive klog program is available at:”…””}”(hj¢h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´K¾hj‘h²hubj )”}”(hŒ1https://people.redhat.com/~dhowells/rxrpc/klog.c ”h]”hý)”}”(hŒ0https://people.redhat.com/~dhowells/rxrpc/klog.c”h]”hŒ reference”“”)”}”(hj¶h]”hŒ0https://people.redhat.com/~dhowells/rxrpc/klog.c”…””}”(hjºh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”Œrefuri”j¶uh1j¸hj´ubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´KÁhj°ubah}”(h]”h ]”h"]”h$]”h&]”uh1j h³hÇh´KÁhj‘h²hubhý)”}”(hŒThis should be compiled by::”h]”hŒThis should be compiled by:”…””}”(hjÔh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´KÃhj‘h²hubjž)”}”(hŒ5make klog LDLIBS="-lcrypto -lcrypt -lkrb4 -lkeyutils"”h]”hŒ5make klog LDLIBS="-lcrypto -lcrypt -lkrb4 -lkeyutils"”…””}”hjâsbah}”(h]”h ]”h"]”h$]”h&]”hÅhÆuh1jh³hÇh´KÅhj‘h²hubhý)”}”(hŒAnd then run as::”h]”hŒAnd then run as:”…””}”(hjðh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´KÇhj‘h²hubjž)”}”(hŒ./klog”h]”hŒ./klog”…””}”hjþsbah}”(h]”h ]”h"]”h$]”h&]”hÅhÆuh1jh³hÇh´KÉhj‘h²hubhý)”}”(hŒ·Assuming it's successful, this adds a key of type RxRPC, named for the service and cell, e.g.: "afs@". This can be viewed with the keyctl program or by cat'ing /proc/keys::”h]”hŒ¾Assuming it’s successful, this adds a key of type RxRPC, named for the service and cell, e.g.: “afs@â€. This can be viewed with the keyctl program or by cat’ing /proc/keys:”…””}”(hj h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´KËhj‘h²hubjž)”}”(hŒÝ[root@andromeda ~]# keyctl show Session Keyring -3 --alswrv 0 0 keyring: _ses.3268 2 --alswrv 0 0 \_ keyring: _uid.0 111416553 --als--v 0 0 \_ rxrpc: afs@CAMBRIDGE.REDHAT.COM”h]”hŒÝ[root@andromeda ~]# keyctl show Session Keyring -3 --alswrv 0 0 keyring: _ses.3268 2 --alswrv 0 0 \_ keyring: _uid.0 111416553 --als--v 0 0 \_ rxrpc: afs@CAMBRIDGE.REDHAT.COM”…””}”hjsbah}”(h]”h ]”h"]”h$]”h&]”hÅhÆuh1jh³hÇh´KÏhj‘h²hubhý)”}”(hŒcCurrently the username, realm, password and proposed ticket lifetime are compiled into the program.”h]”hŒcCurrently the username, realm, password and proposed ticket lifetime are compiled into the program.”…””}”(hj(h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´KÕhj‘h²hubhý)”}”(hŒ©It is not required to acquire a key before using AFS facilities, but if one is not acquired then all operations will be governed by the anonymous user parts of the ACLs.”h]”hŒ©It is not required to acquire a key before using AFS facilities, but if one is not acquired then all operations will be governed by the anonymous user parts of the ACLs.”…””}”(hj6h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´KØhj‘h²hubhý)”}”(hŒŽIf a key is acquired, then all AFS operations, including mounts and automounts, made by a possessor of that key will be secured with that key.”h]”hŒŽIf a key is acquired, then all AFS operations, including mounts and automounts, made by a possessor of that key will be secured with that key.”…””}”(hjDh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´KÜhj‘h²hubhý)”}”(hŒðIf a file is opened with a particular key and then the file descriptor is passed to a process that doesn't have that key (perhaps over an AF_UNIX socket), then the operations on the file will be made with key that was used to open the file.”h]”hŒòIf a file is opened with a particular key and then the file descriptor is passed to a process that doesn’t have that key (perhaps over an AF_UNIX socket), then the operations on the file will be made with key that was used to open the file.”…””}”(hjRh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´Kßhj‘h²hubeh}”(h]”Œsecurity”ah ]”h"]”Œsecurity”ah$]”h&]”uh1hÈhhÊh²hh³hÇh´K¼ubhÉ)”}”(hhh]”(hÎ)”}”(hŒThe @sys Substitution”h]”hŒThe @sys Substitution”…””}”(hjkh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÍhjhh²hh³hÇh´Kæubhý)”}”(hŒ‡The list of up to 16 @sys substitutions for the current network namespace can be configured by writing a list to /proc/fs/afs/sysname::”h]”hŒ†The list of up to 16 @sys substitutions for the current network namespace can be configured by writing a list to /proc/fs/afs/sysname:”…””}”(hjyh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´Kèhjhh²hubjž)”}”(hŒA[root@andromeda ~]# echo foo amd64_linux_26 >/proc/fs/afs/sysname”h]”hŒA[root@andromeda ~]# echo foo amd64_linux_26 >/proc/fs/afs/sysname”…””}”hj‡sbah}”(h]”h ]”h"]”h$]”h&]”hÅhÆuh1jh³hÇh´Këhjhh²hubhý)”}”(hŒ.or cleared entirely by writing an empty list::”h]”hŒ-or cleared entirely by writing an empty list:”…””}”(hj•h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´Kíhjhh²hubjž)”}”(hŒ.[root@andromeda ~]# echo >/proc/fs/afs/sysname”h]”hŒ.[root@andromeda ~]# echo >/proc/fs/afs/sysname”…””}”hj£sbah}”(h]”h ]”h"]”h$]”h&]”hÅhÆuh1jh³hÇh´Kïhjhh²hubhý)”}”(hŒDThe current list for current network namespace can be retrieved by::”h]”hŒCThe current list for current network namespace can be retrieved by:”…””}”(hj±h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´Kñhjhh²hubjž)”}”(hŒ?[root@andromeda ~]# cat /proc/fs/afs/sysname foo amd64_linux_26”h]”hŒ?[root@andromeda ~]# cat /proc/fs/afs/sysname foo amd64_linux_26”…””}”hj¿sbah}”(h]”h ]”h"]”h$]”h&]”hÅhÆuh1jh³hÇh´Kóhjhh²hubhý)”}”(hŒYWhen @sys is being substituted for, each element of the list is tried in the order given.”h]”hŒYWhen @sys is being substituted for, each element of the list is tried in the order given.”…””}”(hjÍh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´K÷hjhh²hubhý)”}”(hŒ{By default, the list will contain one item that conforms to the pattern "_linux_26", amd64 being the name for x86_64.”h]”hŒBy default, the list will contain one item that conforms to the pattern “_linux_26â€, amd64 being the name for x86_64.”…””}”(hjÛh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hüh³hÇh´Kúhjhh²hubeh}”(h]”Œthe-sys-substitution”ah ]”h"]”Œthe @sys substitution”ah$]”h&]”uh1hÈhhÊh²hh³hÇh´Kæubeh}”(h]”Œkafs-afs-filesystem”ah ]”h"]”Œkafs: afs filesystem”ah$]”h&]”uh1hÈhhh²hh³hÇh´Kubeh}”(h]”h ]”h"]”h$]”h&]”Œsource”hÇuh1hŒcurrent_source”NŒ current_line”NŒsettings”Œdocutils.frontend”ŒValues”“”)”}”(hÍNŒ generator”NŒ datestamp”NŒ source_link”NŒ source_url”NŒ toc_backlinks”Œentry”Œfootnote_backlinks”KŒ sectnum_xform”KŒstrip_comments”NŒstrip_elements_with_classes”NŒ strip_classes”NŒ report_level”KŒ halt_level”KŒexit_status_level”KŒdebug”NŒwarning_stream”NŒ traceback”ˆŒinput_encoding”Œ utf-8-sig”Œinput_encoding_error_handler”Œstrict”Œoutput_encoding”Œutf-8”Œoutput_encoding_error_handler”jŒerror_encoding”Œutf-8”Œerror_encoding_error_handler”Œbackslashreplace”Œ language_code”Œen”Œrecord_dependencies”NŒconfig”NŒ id_prefix”hŒauto_id_prefix”Œid”Œ dump_settings”NŒdump_internals”NŒdump_transforms”NŒdump_pseudo_xml”NŒexpose_internals”NŒstrict_visitor”NŒ_disable_config”NŒ_source”hÇŒ _destination”NŒ _config_files”]”Œ7/var/lib/git/docbuild/linux/Documentation/docutils.conf”aŒfile_insertion_enabled”ˆŒ raw_enabled”KŒline_length_limit”M'Œpep_references”NŒ pep_base_url”Œhttps://peps.python.org/”Œpep_file_url_template”Œpep-%04d”Œrfc_references”NŒ rfc_base_url”Œ&https://datatracker.ietf.org/doc/html/”Œ tab_width”KŒtrim_footnote_reference_space”‰Œsyntax_highlight”Œlong”Œ smart_quotes”ˆŒsmartquotes_locales”]”Œcharacter_level_inline_markup”‰Œdoctitle_xform”‰Œ docinfo_xform”KŒsectsubtitle_xform”‰Œ image_loading”Œlink”Œembed_stylesheet”‰Œcloak_email_addresses”ˆŒsection_self_link”‰Œenv”NubŒreporter”NŒindirect_targets”]”Œsubstitution_defs”}”Œsubstitution_names”}”Œrefnames”}”Œrefids”}”Œnameids”}”(jöjój{jxjêjçjÑjÎj0j-jj~j=j:jŽj‹jejbjîjëuŒ nametypes”}”(jö‰j{‰jê‰jщj0‰j‰j=‰jŽ‰je‰jî‰uh}”(jóhÊjxhëjçj~jÎjíj-jÔj~j3j:j„j‹j@jbj‘jëjhuŒ footnote_refs”}”Œ citation_refs”}”Œ autofootnotes”]”Œautofootnote_refs”]”Œsymbol_footnotes”]”Œsymbol_footnote_refs”]”Œ footnotes”]”Œ citations”]”Œautofootnote_start”KŒsymbol_footnote_start”KŒ id_counter”Œ collections”ŒCounter”“”}”…”R”Œparse_messages”]”Œtransform_messages”]”Œ transformer”NŒ include_log”]”Œ decoration”Nh²hub.