Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

 You can both destroy your existing tokens and obtain new tokens using the above
Windows and Linux applications.

When obtaining new tokens, if using a Cornell netid provisioned at CNF before February 23, 2025, your username must be
formatted as:
        netid@CIT.CORNELL.EDU (@CIT.CORNELL.EDU must be all caps).

  • We are in the process of migrating these netids to CORNELL.EDU ... if CIT.CORNELL.EDU no longer works, please try CORNELL.EDU

If using a Cornell GuestID (gid-xxxx), your username must be formatted as:
        guestid@CORNELL.EDU (@CORNELL.EDU must be all caps).

If using a Cornell NetID provisioned at CNF on or after February 23, 2025Cornell NetID, your username must be formatted as:
        @netid@CORNELL.EDU (@CORNELL.EDU must be all caps).

Windows AFS Gui Login Error

We have seen some problems when attempting to obtain AFS Tokens using the Windows AFS client GUI. To work around this, you can use the Windows Powershell to get AFS Tokens:

  1. Open a Powershell prompt
  2. Type in the following:
    Code Block
    languagepowershell
    PS> cd "C:\Program Files\MIT\Kerberos\bin"
    PS> .\kinit <netid_or_guestid>@CORNELL.EDU
    (make sure to capitalize "CORNELL.EDU" )
    You will be prompted for your netid or guestid password. The cursor will not move while you type in your password. Hit return when done.
  3. Now type in the following:
    Code Block
    languagepowershell
    PS> cd "c:\Program Files\OpenAFS\Client\Program"
    PS> .\aklog -d
    you will see some debug output showing that you have successfully obtained AFS tokens.
  4. The AFS GUI will now show your tokens.

 Access Control Lists

 An Access Control List (ACL) is the AFS mechanism which let you access
directories and files. This access mechanism works as follows:

...