AFS 配置（二）

    四个服务终于顺利运行了，原来问题以前遇到过，只不过给忘了而已。
  -/usr/afs/etc/CellServDB中的IP参数需要改为当前使用的IP，然后重启bos就可以得到

[root@jncc etc]# bos status jncc.edu.cn -noauth
Instance kaserver, currently running normally.
Instance buserver, currently running normally.
Instance ptserver, currently running normally.
Instance vlserver, currently running normally.

  好了，继续吧...

7、启动系统的安全机制

[root@jncc bin]# kas -cell jncc.edu -noauth
ka> create afs
initial_password:
Verifying, please re-enter initial_password:
ka> create admin
initial_password:
Verifying, please re-enter initial_password:
ka> examine afs

User data for afs
  key (0) cksum is 3095239578, last cpw: Fri Feb 26 18:22:25 2010
  password will never expire.
  An unlimited number of unsuccessful authentications is permitted.
  entry never expires.  Max ticket lifetime 100.00 hours.
  last mod on Fri Feb 26 18:22:25 2010 by <none>
  permit password reuse
ka>

   整个过程除了在密码输入时如果网络连接故障回导致无响应外，其他运行顺利。
   注意：admin和afs的名称是系统规定，不能自定义。

ka> setfields admin -flags admin
ka> examine admin

User data for admin (ADMIN)
  key (0) cksum is 836923159, last cpw: Fri Feb 26 18:22:40 2010
  password will never expire.
  An unlimited number of unsuccessful authentications is permitted.
  entry never expires.  Max ticket lifetime 25.00 hours.
  last mod on Fri Feb 26 18:27:01 2010 by <none>
  permit password reuse
ka>

   -用bos adduser 将 admin 使用者加入到 /usr/afs/etc/UserList。
[root@jncc bin]# bos adduser jncc.edu.cn admin -cell jncc.edu -noauth
 -# /usr/afs/bin/bos addkey  <server name> -kvno 0 -cell <cell name> -noauth
    input key:
    Retype input key:
    密码为afs设定的密码。
 -# /usr/afs/bin/pts createuser -name admin -cell <cell name> [-id <AFS UID>] -noauth
 -# /usr/afs/bin/pts adduser admin system:administrators -cell <cell name> -noauth
  # /usr/afs/bin/pts membership admin -cell <cell name> -noauth
      Groups admin (id: 1) is a member of:
        system:administrators
    -重启AFS相关服务# /usr/afs/bin/bos restart <server name> -all -cell <cell name> -noauth

    到此一切正常...