# <a name="Installing Kerberos AFS"></a> Installing Kerberos & AFS
+<div>
+ <ul>
+ <li><a href="#Installing Kerberos AFS"> Installing Kerberos & AFS</a><ul>
+ <li><a href="#Basics"> Basics</a></li>
+ <li><a href="#OpenAFS"> OpenAFS</a><ul>
+ <li><a href="#Starting the Install"> Starting the Install</a></li>
+ <li><a href="#Create AFS Keys and Administrato"> Create AFS Keys and Administrators</a><ul>
+ <li><a href="#KerberosVMIT"> KerberosVMIT</a></li>
+ <li><a href="#HeimdalKTH"> HeimdalKTH</a></li>
+ <li><a href="#KTH Kerberos4"> KTH Kerberos4</a></li>
+ </ul>
+ </li>
+ <li><a href="#Finishing _OpenAFS installation"> Finishing OpenAFS installation</a></li>
+ </ul>
+ </li>
+ <li><a href="#Setting up Transparent Login"> Setting up Transparent Login</a></li>
+ </ul>
+ </li>
+ </ul>
+</div>
+
AFS includes its own implementation of Kerberos, the KAServer. However, new installs of KAServer are not recommended as it is based on a draft version of the obsolete Kerberos 4 protocol. Even though AFS doesn't support [[KerberosV]] directly, it is highly recommended that you set up a [[KerberosV]] realm for your AFS cell and **not** install the KAServer. See [[KerberosV]] for the many advantages of using the latest Kerberos for your network authentication.
Note that this document is under development. Also, I don't try to explain the [[OpenAFS]] specific parts of the install -- This document describes only the changes that have to be made to create a new [[OpenAFS]] cell with [[KerberosV]] authentication. If you have followed these instructions and are still having problems please email the openafs-info mailing list.
+Derrick wrote nice pages at: <http://www.cs.cmu.edu/afs/andrew.cmu.edu/usr/shadow/www/afs/afs-with-kerberos.html> <http://www.contrib.andrew.cmu.edu/~shadow/afs/afs-with-kerberos.html>
+
+[[DenizKanca]] [posted](https://lists.openafs.org/pipermail/openafs-info/2003-January/007799.html) her notes at [http://www.arayan.com/da/yazi/OpenAFS\_Kerberos\_5.html](http://www.arayan.com/da/yazi/OpenAFS_Kerberos_5.html).
+
+[[JeffreyHutzelman]] posted a good [summary](https://lists.openafs.org/pipermail/openafs-info/2003-July/010159.html) of all these component to [[OpenAFS]]-info on 25-Jul-2003. Be sure to check to follow-ups for some minor clarifications.
+
## <a name="Basics"></a> Basics
To continue, you need a working Kerberos realm. See [[SettingUpAuthentication]] for the implementation options, and refer to the documentation that comes with your particular version of Kerberos to establish your realm. It is easiest if your realm name is the caps version of your cell name, which in turn is the same as your site's domain name. For example if your site's domain is 'greekmythology.com', your Kerberos realm name should be 'GREEKMYTHOLOGY.COM' and your AFS cell name should be 'greekmythology.com'. See [[KerberosTerms]] if you are confused on what a "realm" is.
### <a name="Create AFS Keys and Administrato"></a> Create AFS Keys and Administrators
-First you will need to create a principal "afs" or "afs/cell.name" in your [[KerberosV]] database. The latter is the preferred alternative, especially if you will support more than one [[AFSCell]] with a single [[KerberosRealm]].
+First you will need to create a principal "afs" or "afs/greekmythology.com" in your [[KerberosV]] database. The latter is the preferred alternative, especially if you will support more than one [[AFSCell]] with a single [[KerberosRealm]]. In case you have [[KerberosIV]], create afs or afs.greekmythology.com respectively.
+
+Your [[KerberosV]] realm must support krb524 for aklog to work, typically. In other words, it has to be able to respond to your version 4 requests (as AFS is based on [[KerberosIV]] protocol).
+
+Next we will create an AFS [[KeyFile]] and an administrator principal in the Kerberos database. The procedure for creating an AFS [[KeyFile]] depends on which Kerberos implementation you have chosen to use, but the logic is the same.
+
+Things to remember about AFS [[KeyFile]]: they must contain a key using the des-cbc-crc encryption type and the key must have exactly same kvno as the afs/greekmythology.com@GREEKMYTHOLOGY.COM in the Kerberos database. If cell is same as lowercased GREEKMYTHOLOGY.COM name, you can create <afs@GREEKMYTHOLOGY.COM> instead of afs/cell@GREEKMYTHOLOGY.COM.
-Your [[KerberosV]] realm must support krb524 for aklog to work, typically. [[KerberosVMIT]]:
+#### <a name="KerberosVMIT"></a> [[KerberosVMIT]]
- set up krb524d. You will need to make sure your krb524d server host includes something like this in krb5.conf. Only one of the 2 entries should be needed for a realm, depending on how you did the setup in your [[KerberosV]] database.
}
}
-[[HeimdalKTH]]:
+- use <code>**kadmin get**</code> command and <code>**ktutil copy**</code> similarly as described in section Heimdal to create afs key in a database or use for the last step instead of ktutil <code>**asetkey**</code> as below
+
+- The AFS-Kerberos5 migration kit includes a program <code>**asetkey**</code>
+
+Save the AFS key from kerberos KDC to a file, possibly using kadmin(see KTH [[KerberosIV]] section above), and the use either <code>**asetkey**</code> or use <code>**ktutil**</code> (see [[HeimdalKTH]] section below) to convert the format and save into [[KeyFile]].
+
+ asetkey add 0 /etc/srvtab.afskey afs.cell@REALM
+
+The \`0' above means kvno (key version number 0). Use ktutils list or similar like <code>**kadmin get**</code> command to see, what kvno has the afs key in Kerberos database. Use exactly same number when running <code>**asetkey**</code>. There's
+#### <a name="HeimdalKTH"></a> [[HeimdalKTH]]
+
+- <http://www.pdc.kth.se/heimdal>
- kdc will service krb524 requests
+- edit /etc/krb5.conf similar to the example below
+
+ [logging]
+ default = FILE:/var/log/krb5libs.log
+ kdc = FILE:/var/log/krb5kdc.log
+ admin_server = FILE:/var/log/kadmind.log
+
+ [ktutil]
+ dns_lookup_realm = false
+ dns_lookup_kdc = false
+
+ [libdefaults]
+ dns_lookup_realm = false
+ dns_lookup_kdc = false
+ ktype_is_etype = true
+ encrypt = yes
+ forward = yes
+ srv_lookup = no
+ srv_try_txt = no
+ srv_try_rfc2052 = no
+ default_realm = GREEKMYTHOLOGY.COM
+ clockskew = 300
+ kdc = 127.0.0.1
+ v4_instance_resolve = true
+ krb4_get_tickets = yes
+ forwardable = true
+ v4_name_convert = {
+ host = {
+ rcmd = host
+ ftp = ftp
+ }
+ plain = {
+ something = something-else
+ }
+ }
+
+ [realms]
+ GSF.DE = {
+ kdc = 127.0.0.1
+ admin_server = 127.0.0.1
+ krb525_server = 127.0.0.1
+ v4_name_convert = {
+ ftp = ftp
+ pop = pop
+ rcmd = host
+ }
+ v4_instance_convert = true
+ default_domain = greekmythology.com
+ }
+
+ [domain_realm]
+ .greekmythology.com = GREEKMYTHOLOGY.COM
+ greekmythology.com = GREEKMYTHOLOGY.COM
+
+ [kadmin]
+ kdc =
+ # you can disable fallback DNS queries, if don't have registered name like kerberos.yourdomain
+ dns_lookup_realm = false
+ dns_lookup_kdc = false
+ default_keys = v4 v5 afs3
+ afs-cell = greekmythology.com
+ v4-realm = GREEKMYTHOLOGY.COM
+
+ [kdc]
+ enable-kerberos4 = true
+ afs-cell =
+ enable-524 = true
+ v4-realm = GREEKMYTHOLOGY.COM
+
+The [[HeimdalKTH]] distribution's <code>**ktutil**</code> can copy directly into an AFS [[KeyFile]] and removes salt from keys
-Next we will create an AFS [[KeyFile]] and an administrator principal in the Kerberos database. The procedure for creating an AFS [[KeyFile]] depends on which Kerberos implementation you have chosen to use.
+ kadmin --admin-server=my_kdc_server
+ kadmin> add --random-key afs/cell
+ kadmin> del_enctype afs/cell@REALM des3-cbc-sha1
+ kadmin> get afs/cell@REALM
+ kadmin> list *
+ kadmin> ext -k /etc/afskeytabfile.krb5
+ kadmin> quit
+ ktutil -k /etc/afskeytabfile.krb5 list
+ ktutil copy FILE:/etc/afskeytabfile.krb5 AFSKEYFILE:/usr/afs/etc/KeyFile
-Things to remember about AFS [[KeyFile]]: they must contain a key using the des-cbc-crc encryption type and the key must have exactly same kvno as the afs/cell@REALM in the Kerberos database. If cell is same as lowercased REALM name, you can create afs@REALM instead of afs/cell@REALM.
+After you have a working [[KeyFile]] installed in the appropriate directory (/usr/afs/etc/KeyFile for transarc-paths, ???? otherwise) and with the appropriate permissions (0600, owner root), we can create administrative users for AFS. This is a two step process as we first create an authentication principal in the Kerberos database then add the admin user in the authorization ("protection") database in the AFS server.
-Someone wrote a nice pages at: <http://www.cs.cmu.edu/afs/andrew.cmu.edu/usr/shadow/www/afs/afs-with-kerberos.html> <http://www.contrib.andrew.cmu.edu/~shadow/afs/afs-with-kerberos.html>
+Create a user ("joe/admin" in this example) using the appropriate kadmin utility with your [[KerberosV]] distribution. Set a secure password, and note that setting Kerberos admin rights for this user does **not** affect his AFS rights. Please note, that "joe/admin@REALM" is [[KerberosV]] notation and that [[KerberosIV]] is using "joe.admin@REALM". As AFS is based on [[KerberosIV]], you should specify "joe.admin@REALM" or just "joe.admin". (I did this mistake recently and for days was hunting for an explanation, why while having valid tickets, valid AFS tokens with proper kvno (key version number as the one in Kerberos KDC) fileserver, ptserver and bosserver complain about my AFS token being invalid. Yes, I had in the /usr/(afs|vice)/etc/UserList file "joe/admin@REALM"). In [[OpenAFS]]-1.2.8, you can possibly enable Kerbero5 syntax for usernames (See [this message](https://lists.openafs.org/pipermail/openafs-devel/2002-December/003632.html) to openafs-devel)
-[[KerberosIV]], like KTH Kerberos4 from <code>**http://www.pdc.kth.se/kth-krb**</code> :
+#### <a name="KTH Kerberos4"></a> KTH Kerberos4
-Create afs principal entry in kerberos database:
+- <http://www.pdc.kth.se/kth-krb> :
-If you have afs key already created using "kadmin add", you had to specify password on interactively. That's quite weak password. Much better is to do <code>**kadmin get**</code>. <code>**kadmin**</code> will try to download the key from KDC, and if it's not present, it will create one, using random key. That's what we want.
+You can create afs key using "kadmin add", you had to specify password on interactively. That's quite weak password. Much better is to do <code>**kadmin get**</code>. <code>**kadmin**</code> will try to download the key from KDC, and if it's not present, it will create one, using random key. That's what we want.
ksrvutil(1) does similar and doesn't require from you to have kadmind(1) running on your machine. The "get" command does same: downloads or (in our case) creates new afs principal using random password. The next example expects that joe.admin is you and you know the proper password to get full access to you kerberos database:
- mv /etc/srvtab /etc/srvtab.orig
- /usr/athena/sbin/ksrvutil -p joe.admin get
- Name [rcmd]: afs
- Instance [hostname]: greekmythology.com
- Realm [GREEKMYTHOLOGY.COM]: GREEKMYTHOLOGY.COM
- Is this correct? (y,n) [y]
- Add more keys? (y,n) [n]
- Password for joe.admin@GREEKMYTHOLOGY.COM
- # list keys in /etc/srvtab, look for the AFS key and it's kvno
- ksrvutil list
- mv /etc/srvtab /etc/srvtab.afskey
- mv /etc/srvtab.orig /etc/srvtab
+ mv /etc/srvtab /etc/srvtab.orig
+ /usr/athena/sbin/ksrvutil -p joe.admin get
+ Name [rcmd]: afs
+ Instance [hostname]: greekmythology.com
+ Realm [GREEKMYTHOLOGY.COM]: GREEKMYTHOLOGY.COM
+ Is this correct? (y,n) [y]
+ Add more keys? (y,n) [n]
+ Password for joe.admin@GREEKMYTHOLOGY.COM
+ # list keys in /etc/srvtab, look for the AFS key and it's kvno
+ ksrvutil list
+ mv /etc/srvtab /etc/srvtab.afskey
+ mv /etc/srvtab.orig /etc/srvtab
If you want to make the above more complicated, you will need <code>**/usr/athena/sbin/ext\_srvtab**</code> utility to extract already existing key from Kerberos KDC and save it into /etc/srvtab. It will ask you for your master kerberos password (but if you installed kerberos in the "proper" way, you've used random password which you don't know at all), so better use <code>**ksrvutil**</code> as described above and forget <code>**ext\_srvtab**</code>.
You can test if you have same keys in kerberos and AFS like this:
- kauth username
- tokens
+ kauth username
+ tokens
If you have some tokens now, then it works and you can now shutdown kaserver. Users, which you have created under kaserver are stored in /usr/afs/db/kaserver.\*, but you can just forget them. Create these users again in Kerberos. With [[KerberosIV]] from KTH they get stored under /var/kerberos, when using Heimdal under /var/heimdal/.
-[[KerberosVMIT]]:
-
-- The AFS-Kerberos5 migration kit includes a program <code>**asetkey**</code>
-
-Save the AFS key from kerberos KDC to a file, possibly using kadmin(see KTH [[KerberosIV]] section above), and the use either <code>**asetkey**</code> or use ==ktutil==(see [[HeimdalKTH]] section below) to convert the format and save into [[KeyFile]].
-
- asetkey add 0 /etc/srvtab.afskey afs.cell@REALM
-
-The \`0' above means kvno (key version number 0). Use ktutils list or similar like <code>**kadmin get**</code> command to see, what kvno has the afs key in Kerberos database. Use exactly same number when running <code>**asetkey**</code>. There's
-
-[[HeimdalKTH]]:
-
-- The [[HeimdalKTH]] distribution's <code>**ktutil**</code> can copy directly into an AFS [[KeyFile]]
-
- kadmin --admin-server=my_kdc_server
- kadmin> add --random-key afs/cell
- kadmin> del_enctype afs/cell@REALM des3-cbc-sha1
- kadmin> get afs/cell@REALM
- kadmin> list *
- kadmin> ext -k /etc/afskeytabfile.krb5
- kadmin> quit
- ktutil -k /etc/afskeytabfile.krb5 list
- ktutil copy FILE:/etc/afskeytabfile.krb5 AFSKEYFILE:/usr/afs/etc/KeyFile
-
-After you have a working [[KeyFile]] installed in the appropriate directory (/usr/afs/etc/KeyFile for transarc-paths, ???? otherwise) and with the appropriate permissions (0600, owner root), we can create administrative users for AFS. This is a two step process as we first create an authentication principal in the Kerberos database then add the admin user in the authorization ("protection") database in the AFS server.
-
-Create a user ("joe/admin" in this example) using the appropriate kadmin utility with your [[KerberosV]] distribution. Set a secure password, and note that setting Kerberos admin rights for this user does **not** affect his AFS rights. Please note, that "joe/admin@REALM" is [[KerberosV]] notation and that [[KerberosIV]] is using "joe.admin@REALM". As AFS is based on [[KerberosIV]], you should specify "joe.admin@REALM" or just "joe.admin". (I did this mistake recently and for days was hunting for an explanation, why while having valid tickets, valid AFS tokens with proper kvno (key version number as the one in Kerberos KDC) fileserver, ptserver and bosserver complain about my AFS token being invalid. Yes, I had in the /usr/(afs|vice)/etc/UserList file "joe/admin@REALM"). In [[OpenAFS]]-1.2.8, you can possibly enable Kerbero5 syntax for usernames (See [this message](https://lists.openafs.org/pipermail/openafs-devel/2002-December/003632.html) to openafs-devel)
+### <a name="Finishing _OpenAFS installation"></a> Finishing [[OpenAFS]] installation
-Now we will use the <code>**pts**</code> command in [[OpenAFS]] to add this joe.admin user to the AFS administrators group named system:administrators. The username could be just "joe" or "admin", but it's a good habit to have .admin appended to it (it is called instance):
+Now we will use the <code>**pts**</code> command in [[OpenAFS]] to add this joe.admin user to the AFS administrators group named system:administrators. The username could be just "joe" or "admin", but it's a good habit to have .admin appended to it (it is called instance). Please note the notation "joe.admin", not "joe/admin" as would be typical in Kerberos5 style:
- pts createuser -name joe.admin -cell greekmythology.com -noauth
- pts adduser joe.admin system:administrators -cell -noauth
+ pts createuser -name joe.admin -cell greekmythology.com -noauth
+ pts adduser joe.admin system:administrators -cell -noauth
where greekmythology.com is the name of your local cell. After your complete this step, you can continue on to...
-### <a name="Finishing _OpenAFS installation"></a> Finishing [[OpenAFS]] installation
-
-First, activate the new AFS [[KeyFile]] by executing:
+Activate the new AFS [[KeyFile]] by executing:
- bos restart <machine name> -all -cell <cell name> -noauth
+ bos restart <machine name> -all -cell <cell name> -noauth
After this restart, try using kinit to get Kerberos tickets for admin then (if necessary) use aklog to get an AFS token or use afslog if afsd client cache is already running. Basically ensure that the AFS [[KeyFile]] is valid:
- /usr/heimdal/sbin/ktutil copy AFSKEYFILE:/usr/afs/etc/KeyFile FILE:/etc/afskeytabfile.krb5
- /usr/heimdal/bin/kinit -k -t /etc/afskeytabfile.krb5 afs/greekmythology.com
- # you should be able to autenticate against KDC using the /etc/afskeytabfile.krb5
- # where is saved your afs key in keytab form recognizable by Kerberos5
- /usr/heimdal/klist
- # you should see you have afs/greekmythology.com ticket having some expiration time etc.
+ /usr/heimdal/sbin/ktutil copy AFSKEYFILE:/usr/afs/etc/KeyFile FILE:/etc/afskeytabfile.krb5
+ /usr/heimdal/bin/kinit -k -t /etc/afskeytabfile.krb5 afs/greekmythology.com
+ # you should be able to autenticate against KDC using the /etc/afskeytabfile.krb5
+ # where is saved your afs key in keytab form recognizable by Kerberos5
+ /usr/heimdal/klist
+ # you should see you have afs/greekmythology.com ticket having some expiration time etc.
Proceed to the [Starting File Server](http://www.openafs.org/pages/doc/QuickStartUnix/auqbg005.htm#HDRWQ60) section of the [[OpenAFS]] documentation. The rest of the documentation can be completed without any changes. (What about replacing NTP with something recent, though...? See FAQ [[3.22|Main/AdminFAQ#NTP]] and [[[NTP|Main/FurtherReading#NTP]]])
## <a name="Setting up Transparent Login"></a> Setting up Transparent Login
-In its current state, you have to manually log into your AFS cell through kinit and possibly aklog (explain aklog..., debugging using "tokens" etc). There are several methods to enable transparent login to both local resources (the machine itself) and AFS through a single password. See [[KerberosV]] and [[SettingUpAuthentication]] for some information.
+In its current state, you have to manually log into your AFS cell through kinit and possibly aklog (explain aklog..., debugging using "tokens" etc). There are several methods to enable transparent login to both local resources (the machine itself) and AFS through a single password. See [[KerberosV]] and [[SettingUpAuthentication]] for some information. The best option if you are using pam is probably the [pam\_krb5 project on sourceforge](http://sourceforge.net/projects/pam-krb5/).
+
+-- [[JasonGarman]] - 05 Feb 2002 -- [[DerrickBrashear]] - 26 Nov 2002 [http://www.shop263.com/i-1/1901.htm 甲基苯骈三氮唑] [http://www.shop263.com/i-1/1902.htm 甲基苯三唑] [http://www.shop263.com/i-1/1903.htm 甲基丙磺酸] [http://www.shop263.com/i-1/1904.htm 甲基丙烯磺酸钠] [http://www.shop263.com/i-1/1905.htm 甲基丙烯酸] [http://www.shop263.com/i-1/1906.htm 甲基丙烯酸甲酯] [http://www.shop263.com/i-1/1907.htm 甲基丙烯酰氯] [http://www.shop263.com/i-1/1908.htm 甲基丙酰氯] [http://www.shop263.com/i-1/1909.htm 甲基二氯硅烷] [http://www.shop263.com/i-1/1910.htm 甲基二乙醇胺] [http://www.shop263.com/i-1/1911.htm 甲基胍盐酸盐] [http://www.shop263.com/i-1/1912.htm 甲基磺酸] [http://www.shop263.com/i-1/1913.htm 甲基磺酸酐] [http://www.shop263.com/i-1/1914.htm 甲基磺酸铅] [http://www.shop263.com/i-1/1915.htm 甲基磺酸锡] [http://www.shop263.com/i-1/1916.htm 甲基磺酰胺] [http://www.shop263.com/i-1/1917.htm 甲基磺酰氯] [http://www.shop263.com/i-1/1918.htm 甲基硫菌灵] [http://www.shop263.com/i-1/1919.htm 甲基氯硅烷单体] [http://www.shop263.com/i-1/1920.htm 甲基咪唑] [http://www.shop263.com/i-1/1921.htm 甲基萘] [http://www.shop263.com/i-1/1922.htm 甲基羟基硅油] [http://www.shop263.com/i-1/1923.htm 甲基巯基噻二唑] [http://www.shop263.com/i-1/1924.htm 甲基巯基四氮唑] [http://www.shop263.com/i-1/1925.htm 甲基三甲氧基硅烷] [http://www.shop263.com/i-1/1926.htm 甲基三氯硅烷] [http://www.shop263.com/i-1/1927.htm 甲基三乙基氯化铵] [http://www.shop263.com/i-1/1928.htm 甲基三乙氧基硅烷] [http://www.shop263.com/i-1/1929.htm 甲基纤维素] [http://www.shop263.com/i-1/1930.htm 甲基异丙基酮] [http://www.shop263.com/i-1/1931.htm 甲基异丁基酮] [http://www.shop263.com/i-1/1932.htm 甲基异丁基酮甲酮] [http://www.shop263.com/i-1/1933.htm 甲壳胺] [http://www.shop263.com/i-1/1934.htm 甲壳素] [http://www.shop263.com/i-1/1935.htm 甲壳质] [http://www.shop263.com/i-1/1936.htm 甲硫醚] [http://www.shop263.com/i-1/1937.htm 甲脒亚磺酸] [http://www.shop263.com/i-1/1938.htm 甲氰菊酯乳油] [http://www.shop263.com/i-1/1939.htm 甲醛] [http://www.shop263.com/i-1/1940.htm 甲酸] [http://www.shop263.com/i-1/1941.htm 甲酸铵] [http://www.shop263.com/i-1/1942.htm 甲酸甲酯] [http://www.shop263.com/i-1/1943.htm 甲酸钾] [http://www.shop263.com/i-1/1944.htm 甲酸钠] [http://www.shop263.com/i-1/1945.htm 甲烷] [http://www.shop263.com/i-1/1946.htm 甲烷磺酸] [http://www.shop263.com/i-1/1947.htm 甲酰胺] [http://www.shop263.com/i-1/1948.htm 甲氧基苯甲酸] [http://www.shop263.com/i-1/1949.htm 甲氧基丙胺] [http://www.shop263.com/i-1/1950.htm 甲乙酮] [http://www.shop263.com/i-1/1951.htm 间氨基苯酚] [http://www.shop263.com/i-1/1952.htm 间氨基苯磺酸] [http://www.shop263.com/i-1/1953.htm 间氨基苯甲腈] [http://www.shop263.com/i-1/1954.htm 间氨基苯甲酸] [http://www.shop263.com/i-1/1955.htm 间氨基三氟甲苯] [http://www.shop263.com/i-1/1956.htm 间胺基乙酰苯胺盐酸盐] [http://www.shop263.com/i-1/1957.htm 间苯二胺] [http://www.shop263.com/i-1/1958.htm 间苯二甲酸] [http://www.shop263.com/i-1/1959.htm 间苯三酚] [http://www.shop263.com/i-1/1960.htm 间苯氧基苯甲醛] [http://www.shop263.com/i-1/1961.htm 间苯氧基甲苯] [http://www.shop263.com/i-1/1962.htm 间二硝基苯] [http://www.shop263.com/i-1/1963.htm 间氟] [http://www.shop263.com/i-1/1964.htm 间氟氯苄] [http://www.shop263.com/i-1/1965.htm 间甲酚] [http://www.shop263.com/i-1/1966.htm 间甲基苯甲醚] [http://www.shop263.com/i-1/1967.htm 间氯苯胺] [http://www.shop263.com/i-1/1968.htm 间氯苯甲酰氯] [http://www.shop263.com/i-1/1969.htm 间氯苄醇] [http://www.shop263.com/i-1/1970.htm 间氯甲苯] [http://www.shop263.com/i-1/1971.htm 间氯氯苄] [http://www.shop263.com/i-1/1972.htm 间羟基] [http://www.shop263.com/i-1/1973.htm 间羟基二苯胺] [http://www.shop263.com/i-1/1974.htm 间三氟甲基氯苄] [http://www.shop263.com/i-1/1975.htm 间位酯] [http://www.shop263.com/i-1/1976.htm 间硝基苯甲腈] [http://www.shop263.com/i-1/1977.htm 间硝基苯甲醛] [http://www.shop263.com/i-1/1978.htm 间硝基苯甲酸钠] [http://www.shop263.com/i-1/1979.htm 间硝基苯甲酰氯] [http://www.shop263.com/i-1/1970.htm 间硝基苄腈] [http://www.shop263.com/i-1/1981.htm 间硝基氯苯] [http://www.shop263.com/i-1/1982.htm 间硝基氯化苯] [http://www.shop263.com/i-1/1983.htm 间硝基三氟甲苯] [http://www.shop263.com/i-1/1984.htm 间溴三氟甲基苯] [http://www.shop263.com/i-1/1985.htm 减压渣油] [http://www.shop263.com/i-1/1986.htm 碱性高效脱脂剂] [http://www.shop263.com/i-1/1987.htm 建筑涂料] [http://www.shop263.com/i-1/1988.htm 降解塑料] [http://www.shop263.com/i-1/1989.htm 降凝干加剂] [http://www.shop263.com/i-1/1990.htm 交联剂] [http://www.shop263.com/i-1/1991.htm 胶辊胶] [http://www.shop263.com/i-1/1992.htm 焦化苯] [http://www.shop263.com/i-1/1993.htm 焦化苯酚] [http://www.shop263.com/i-1/1994.htm 焦化二甲苯] [http://www.shop263.com/i-1/1995.htm 焦化甲苯] [http://www.shop263.com/i-1/1996.htm 焦磷酸钠] [http://www.shop263.com/i-1/1997.htm 焦磷酸铜] [http://www.shop263.com/i-1/1998.htm 焦性没食子酸] [http://www.shop263.com/i-1/1999.htm 焦亚硫酸钠] [http://www.shop263.com/i-1/2000.htm 焦油] [http://www.shop263.com/i-1/2001.htm 酵母浸膏] [http://www.shop263.com/i-1/2002.htm 结晶醋酸钠] [http://www.shop263.com/i-1/2003.htm 结晶玫瑰] [http://www.shop263.com/i-1/2004.htm 介酸] [http://www.shop263.com/i-1/2005.htm 芥酸酰胺] [http://www.shop263.com/i-1/2006.htm 芥酰胺] [http://www.shop263.com/i-1/2007.htm 金不换] [http://www.shop263.com/i-1/2008.htm 金蔥革] [http://www.shop263.com/i-1/2009.htm 金刚烷] [http://www.shop263.com/i-1/2010.htm 金刚烷醇] [http://www.shop263.com/i-1/2011.htm 金刚烷甲基酮] [http://www.shop263.com/i-1/2012.htm 金刚烷甲酸] [http://www.shop263.com/i-1/2013.htm 金属铬] [http://www.shop263.com/i-1/2014.htm 金属减活剂] [http://www.shop263.com/i-1/2015.htm 进行单宁酸] [http://www.shop263.com/i-1/2016.htm 浸灰助剂] [http://www.shop263.com/i-1/2017.htm 晶醋酸钠] [http://www.shop263.com/i-1/2018.htm 晶体丙烯酰胺] [http://www.shop263.com/i-1/2019.htm 晶体氯乙酸] [http://www.shop263.com/i-1/2020.htm 晶体型高纯的试剂级蛋白胨] [http://www.shop263.com/i-1/2021.htm 睛纶高速纺毛型油剂] [http://www.shop263.com/i-1/2022.htm 精氨酸] [http://www.shop263.com/i-1/2023.htm 精胺] [http://www.shop263.com/i-1/2024.htm 精苯] [http://www.shop263.com/i-1/2025.htm 精碘] [http://www.shop263.com/i-1/2026.htm 精蒽] [http://www.shop263.com/i-1/2027.htm 精甲醇] [http://www.shop263.com/i-1/2028.htm 精练剂] [http://www.shop263.com/i-1/2029.htm 豆油酸] [http://www.shop263.com/i-1/2030.htm 精馏豆油酸] [http://www.shop263.com/i-1/2031.htm 精细油] [http://www.shop263.com/i-1/2032.htm 精制环烷酸] [http://www.shop263.com/i-1/2033.htm 净水灵] [http://www.shop263.com/i-1/2034.htm 酒石酸] [http://www.shop263.com/i-1/2035.htm 菊酸甲酯] [http://www.shop263.com/i-1/2036.htm 菊糖] [http://www.shop263.com/i-1/2037.htm 剧毒化工] [http://www.shop263.com/i-1/2038.htm 聚氨酯] [http://www.shop263.com/i-1/2039.htm 聚氨酯护套] [http://www.shop263.com/i-1/2040.htm 聚氨酯胶粘剂] [http://www.shop263.com/i-1/2041.htm 聚氨酯硬泡聚醚] [http://www.shop263.com/i-1/2042.htm 聚丙酸] [http://www.shop263.com/i-1/2043.htm 聚丙烯粉料] [http://www.shop263.com/i-1/2044.htm 聚丙烯酸] [http://www.shop263.com/i-1/2045.htm 聚丙烯酸钠] [http://www.shop263.com/i-1/2046.htm 聚丙烯酰胺] [http://www.shop263.com/i-1/2047.htm 聚醋酸乙烯乳液] [http://www.shop263.com/i-1/2048.htm 聚醋酸乙烯酯乳液] [http://www.shop263.com/i-1/2049.htm 聚合醇] [http://www.shop263.com/i-1/2050.htm 聚合硫酸铁] [http://www.shop263.com/i-1/2051.htm 聚合氯化铝] [http://www.shop263.com/i-1/2052.htm 聚合氯化铝铁] [http://www.shop263.com/i-1/2053.htm 聚合松香] [http://www.shop263.com/i-1/2054.htm 聚合物多元醇] [http://www.shop263.com/i-1/2055.htm 聚合物降] [http://www.shop263.com/i-1/2056.htm 聚磷酸铵] [http://www.shop263.com/i-1/2057.htm 聚氯乙烯热稳定剂] [http://www.shop263.com/i-1/2058.htm 聚氯乙烯树脂] [http://www.shop263.com/i-1/2059.htm 聚醚多元醇] [http://www.shop263.com/i-1/2060.htm 聚醚消沫剂] [http://www.shop263.com/i-1/2061.htm 聚乳酸] [http://www.shop263.com/i-1/2062.htm 聚四氟乙烯] [http://www.shop263.com/i-1/2063.htm 聚酰胺树脂] [http://www.shop263.com/i-1/2064.htm 聚溴化苯乙烯] [http://www.shop263.com/i-1/2065.htm 聚氧化乙烯] [http://www.shop263.com/i-1/2066.htm 聚氧乙烯] [http://www.shop263.com/i-1/2067.htm 聚乙二醇] [http://www.shop263.com/i-1/2068.htm 聚乙烯吡咯烷酮] [http://www.shop263.com/i-1/2069.htm 聚乙烯醇] [http://www.shop263.com/i-1/2070.htm 聚乙烯管材] [http://www.shop263.com/i-1/2071.htm 聚已内酯多元醇] [http://www.shop263.com/i-1/2072.htm 聚异丁烯] [http://www.shop263.com/i-1/2073.htm 聚酯树脂] [http://www.shop263.com/i-1/2074.htm 绝缘漆] [http://www.shop263.com/i-1/2075.htm 均苯四甲酸] [http://www.shop263.com/i-1/2076.htm 均苯四甲酸二酐] [http://www.shop263.com/i-1/2077.htm 咔唑] [http://www.shop263.com/i-1/2078.htm 卡车手动变速箱油复合剂] [http://www.shop263.com/i-1/2079.htm 卡马西平溴化物] [http://www.shop263.com/i-1/2080.htm 开油水] [http://www.shop263.com/i-1/2081.htm 糠醇] [http://www.shop263.com/i-1/2082.htm 糠氯酸] [http://www.shop263.com/i-1/2083.htm 糠醛] [http://www.shop263.com/i-1/2084.htm 糠酸] [http://www.shop263.com/i-1/2085.htm 抗磨损纸] [http://www.shop263.com/i-1/2086.htm 抗燃液压润滑油] [http://www.shop263.com/i-1/2087.htm 抗蚀刻油墨] [http://www.shop263.com/i-1/2088.htm 抗铜剂] [http://www.shop263.com/i-1/2089.htm 四氯邻苯二甲酸酐] [http://www.shop263.com/i-1/2090.htm 四氯邻苯二甲酰亚胺] [http://www.shop263.com/i-1/2091.htm 抗厌氧菌药奥硝唑] [http://www.shop263.com/i-1/2092.htm 抗氧剂] [http://www.shop263.com/i-1/2093.htm 颗粒活性白土] [http://www.shop263.com/i-1/2094.htm 颗粒剂] [http://www.shop263.com/i-1/2095.htm 壳聚糖] [http://www.shop263.com/i-1/2096.htm 可溶性淀粉] [http://www.shop263.com/i-1/2097.htm 克拉霉素] [http://www.shop263.com/i-1/2098.htm 克利西丁] [http://www.shop263.com/i-1/2099.htm 克霉唑] [http://www.shop263.com/i-1/2100.htm 空气压缩机油] [http://www.shop263.com/i-1/2101.htm 口服葡萄糖] [http://www.shop263.com/i-1/2102.htm 苦参素注射液] [http://www.shop263.com/i-1/2103.htm 苦精] [http://www.shop263.com/i-1/2104.htm 快干水] [http://www.shop263.com/i-1/2105.htm 硫酸盐镀锌光亮] [http://www.shop263.com/i-1/2106.htm 喹啉酸] [http://www.shop263.com/i-1/2107.htm 喹啉衍生物] [http://www.shop263.com/i-1/2108.htm 喹哪能啶酸] [http://www.shop263.com/i-1/2109.htm 拉挤树脂] [http://www.shop263.com/i-1/2110.htm 兰尼铜催化剂] [http://www.shop263.com/i-1/2111.htm 酪朊] [http://www.shop263.com/i-1/2112.htm 雷公藤提取物] [http://www.shop263.com/i-1/2113.htm 蕾絲革] [http://www.shop263.com/i-1/2114.htm 冷冻机油] [http://www.shop263.com/i-1/2115.htm 离子膜] [http://www.shop263.com/i-1/2116.htm 立德粉] [http://www.shop263.com/i-1/2117.htm 沥青] [http://www.shop263.com/i-1/2118.htm 粒状碳酸锶] [http://www.shop263.com/i-1/2119.htm 联苯] [http://www.shop263.com/i-1/2120.htm 联苯苄唑] [http://www.shop263.com/i-1/2121.htm 联苯二氯苄] [http://www.shop263.com/i-1/2122.htm 联苯二氯苄酯化物] [http://www.shop263.com/i-1/2123.htm 联苯酚] [http://www.shop263.com/i-1/2124.htm 炼油催化剂] [http://www.shop263.com/i-1/2125.htm 链条油] [http://www.shop263.com/i-1/2126.htm 两性离子聚合物] [http://www.shop263.com/i-1/2127.htm 亮丽膜高级面蜡] [http://www.shop263.com/i-1/2128.htm 亮丽膜家具护理喷蜡] [http://www.shop263.com/i-1/2129.htm 亮丽膜水性免擦地板蜡] [http://www.shop263.com/i-1/2130.htm 裂纹漆] [http://www.shop263.com/i-1/2131.htm 邻氨基苯甲醇] [http://www.shop263.com/i-1/2132.htm 邻氨基苯甲醚] [http://www.shop263.com/i-1/2133.htm 邻氨基苯甲酸] [http://www.shop263.com/i-1/2134.htm 邻氨基苯甲酰胺] [http://www.shop263.com/i-1/2135.htm 邻氨基酚] [http://www.shop263.com/i-1/2136.htm 邻氨基三氟甲苯] [http://www.shop263.com/i-1/2137.htm 邻苯二胺] [http://www.shop263.com/i-1/2138.htm 邻苯二甲醚] [http://www.shop263.com/i-1/2139.htm 邻苯二甲酸酯类增塑剂] [http://www.shop263.com/i-1/2140.htm 顺丁橡胶] [http://www.shop263.com/i-1/2141.htm 顺酐] [http://www.shop263.com/i-1/2142.htm 司帕沙星环合酯] [http://www.shop263.com/i-1/2143.htm 四苯基溴化磷] [http://www.shop263.com/i-1/2144.htm 四苯硼钠] [http://www.shop263.com/i-1/2145.htm 四冲程摩托车机油] [http://www.shop263.com/i-1/2146.htm 四丁基溴化铵] [http://www.shop263.com/i-1/2147.htm 四氟化锆] [http://www.shop263.com/i-1/2148.htm 四氟硼酸锂] [http://www.shop263.com/i-1/2149.htm 四甲基苯胺] [http://www.shop263.com/i-1/2150.htm 四甲基氯化铵] [http://www.shop263.com/i-1/2151.htm 四甲基哌啶醇] [http://www.shop263.com/i-1/2152.htm 四甲基哌啶酮] [http://www.shop263.com/i-1/2153.htm 四甲氧基硅烷] [http://www.shop263.com/i-1/2154.htm 四硫化合物] [http://www.shop263.com/i-1/2155.htm 四氯苯] [http://www.shop263.com/i-1/2156.htm 四氯苯酐] [http://www.shop263.com/i-1/2157.htm 四氯苯醌] [http://www.shop263.com/i-1/2158.htm 四氯化锡] [http://www.shop263.com/i-1/2159.htm 四氯邻苯二甲酸]
--- [[JasonGarman]] - 05 Feb 2002 -- [[DerrickBrashear]] - 26 Nov 2002
+[http://www.haishun.net 门禁] [http://www.haishun.net 监控] [http://www.genset-sh.com 发电机] [http://www.haishun.net/p\_mjds.htm 门禁] [http://www.haishun.net/p\_mjds\_dmmj.htm 门禁] [http://www.haishun.net/p\_mjds\_lwmj.htm 门禁] [http://www.haishun.net/p\_mjds\_yjs.htm 门禁] [http://www.haishun.net/cctv.htm 监控] [http://www.haishun.net/p\_cctv\_jk.htm 监控] [http://www.haishun.net/p\_cctv\_jk\_sxj.htm 监控] [http://www.haishun.net/p\_cctv\_jk\_xsq.htm 监控] [http://www.haishun.net/p\_cctv\_jk\_yplxj.htm 监控] [http://www.haishun.net/p\_cctv\_jk\_yt.htm 监控] [http://www.haishun.net/p\_cctv\_jk\_zj.htm 监控] [http://www.7766888.com 虚拟主机] [http://www.7766888.com/introcom.htm asp虚拟主机] [http://www.7766888.com/introcn.htm php虚拟主机] [http://www.7766888.com/u\_puji.htm unix虚拟主机] [http://www.7766888.com/mysql.htm windows虚拟主机] [http://www.7766888.com/u\_jingji.htm 纯空间虚拟主机] [http://www.7766888.com/u\_biaozhun.htm 虚拟主机] [http://www.7766888.com/u\_zhiqiang.htm 虚拟主机] [http://www.7766888.com/w\_jingji.htm 虚拟主机] [http://www.7766888.com/w\_biaozhun.htm 虚拟主机] [http://www.asp169.com/marketingsoft1.htm 空压机] [http://www.asp169.com/marketingsoft2.htm 压缩机] [http://www.asp169.com/zhaoguan.htm 消毒剂] [http://www.asp169.com/crm.htm 化妆品] [http://www.asp169.com/marketingsoft3.htm 战略咨询] [http://www.asp169.com/marketingsoft4.htm 武夷山] [http://www.asp169.com/marketingsoft5.htm 数据恢复] [http://haishun11.51.net 虚拟主机] [http://decorate.51.net 装修] [http://decorate.51.net 团购] [http://www.xsjby.cn 化工泵] [http://www.asp169.com/zhaoguan2.htm 二氧化氯] [http://www.fm360.net 网址大全] [http://www.fm360.net/page/001.html 网址大全] [http://www.fm360.net/page/game.htm 网址大全] [http://www.fm360.net/page/software.htm 网址大全] [http://www.fm360.net/page/jinshi.htm 网址大全] [http://www.fm360.net/page/music.htm 网址大全] [http://www.fm360.net/page/053.html 网址大全] [http://www.fm360.net/page/flash.htm 网址大全] [http://www.fm360.net/page/newsweek.htm 网址大全] [http://www.fm360.net/page/club.htm 网址大全] [http://www.fm360.net/page/stock.htm 网址大全] [http://www.fm360.net/page/love.htm 网址大全] [http://www.fm360.net/page/netcard.htm 网址大全] [http://www.fm360.net/page/025.html 网址大全] [http://www.fm360.net/page/hardware.htm 网址大全] [http://www.fm360.net/page/sport.htm 网址大全] [http://www.fm360.net/page/shouji.htm 网址大全] [http://www.fm360.net/page/ym.htm 网址大全] [http://www.fm360.net/page/ylbj.htm 网址大全] [http://www.fm360.net/page/car.htm 网址大全] [http://www.jifamark.com 线号机] [http://www.jifamark.com/xhj.htm 线号机] [http://www.jifamark.com 打号机] [http://www.funasia.cn 装修] [http://www.funasia.cn 团购] [http://www.funasia.cn/pinpai.asp 装修] [http://www.funasia.cn/client/gb\_list.asp 装修] [http://www.funasia.cn/design/index.asp 装修] [http://www.funasia.cn/funasiaHome/index.asp 装修] [http://www.funasia.cn/jiancai.asp 装修] [http://www.funasia.cn/shishang.asp 装修] [http://www.funasia.cn/mall/AboutOur.htm 团购] [http://www.genset-sh.com/cai.asp 发电机] [http://www.genset-sh.com/tancu.asp 发电机] [http://www.genset-sh.com/xi3.asp 发电机] [http://www.genset-sh.com/lan.asp 发电机] [http://www.genset-sh.com/leng.asp 发电机] [http://www.genset-sh.com/jiyou.asp 发电机] [http://www.genset-sh.com/ranyou.asp 发电机] [http://www.genset-sh.com/kuongqi.asp 发电机] [http://www.genset-sh.com/ssss.asp 发电机] [http://www.zj-df.com 减速机] [http://www.xhhj.com.cn 离心机] [http://www.hdfix.com.cn 数据恢复]
git://git.openafs.org / openafs-wiki.git / blobdiff