Configuring Network Identities to obtain tokens for AFS cells

The OpenAFS Provider maintains a list of AFS cells for each network identity. A list is created the first time AFS tokens are obtained for an identity or when the list of cells is specified in the identity configuration panels. Each AFS cell that is listed has associated with it a token acquisition method and the name of the Kerberos realm from which the AFS service ticket can be obtained.  More details are provided in the Token Aquisition Methods topic.

The following sections detail the process by which AFS cells can be specified when obtaining new credentials or configuring identities.

Once the new credentials dialog successfully completes, the list of cells will be saved with the identity. The next time you obtain new credentials for the identity, the list of cells will be loaded automatically. This list can be edited either by using the new credentials dialog or the identity configuration panels. (See Changing persistent token lists).

To add a cell:

• Specify the name of the cell in the Cell text box.
• Specify the Kerberos realm for the service ticket in the Realm text box. Note that you can select (Automatic) as the realm to allow the OpenAFS provider to select the realm. For most cases, you don't need to specify the realm manually and can simply leave the Realm as (Automatic)
• Specify the token acquisition method in the Method. You can select (Automatic) as the method to allow the OpenAFS provider to select the method automatically. Similar to the automatic realm selection, for most cases the provider will be able to correctly select the token acquisition method. More details about credentials acquisition methods are provided in the Token Acquisition Methods topic.
• Select the Add/Update button to add the cell.

Note that only one token can exist per cell per login session. If a token exists for cell X while logged in as user A, then any attempt to obtain credentials for cell X as user B will result in the loss of the previous token.  Only one identity can posses a token for a given cell at a time.

Therefore, if you try to add a cell to an identity which is already listed in the persistent cell list for another identity or which currently exists under a different identity, you will receive a warning such as the following:

From here, you can decide to keep the cell listed for both identity (although only one of them can be active at any given time), or remove the cell from all the other identity and add it to the current one. Also, you can cancel the add cell request.

To modify a cell

• Select the cell from the list of cells. The cell name, realm and method in the text boxes will be updated to display the information from the cell just selected.
• Make changes to the realm and method fields as appropriate
• Select Add / Update to update the information in the cell list

Note that if you don't click the Add / Update, the cell entry will not be updated.

To delete cells

• Select the cells you want to delete from the cell list. You can select multiple cells by clicking while holding the Ctrl key.
• Select the Delete button.

Cell states

When you add cells or when you view the cell list, you will see an icon next to each cell name. This icon represents the current state of the cell's token. You can double-click on the cell to get details about the state.