From d352ca1df447c489b46f45edfbf633ca39d56fd4 Mon Sep 17 00:00:00 2001 From: Jason Edgecombe Date: Sun, 30 Aug 2009 17:54:16 -0400 Subject: [PATCH] Updated Chapter 2, Section 3.2 of the Admin Guide Removed the reference to the Authentication Server and added a reference to the Kerberos Server and Kerberos 5 authentication for foreign clients. Replaced AFS Product Support with the AFS registrar as the maintainer of the public CellServDB file. A link was added to grand.central.org for getting the latest copy of the file and submitting changes for the local site. Reviewed-on: http://gerrit.openafs.org/379 Reviewed-by: Derrick Brashear Tested-by: Derrick Brashear --- doc/xml/AdminGuide/auagd007.xml | 27 +++++++++++++++++---------- 1 file changed, 17 insertions(+), 10 deletions(-) diff --git a/doc/xml/AdminGuide/auagd007.xml b/doc/xml/AdminGuide/auagd007.xml index 01d011df2..f3c4590fd 100644 --- a/doc/xml/AdminGuide/auagd007.xml +++ b/doc/xml/AdminGuide/auagd007.xml @@ -829,8 +829,8 @@ user receives an AFS token when You make your cell visible to others by advertising your cell name and database server machines. Just like client machines in the local cell, the Cache Manager on machines in foreign cells use the information to reach your cell's Volume - Location (VL) Servers when they need volume and file location information. Similarly, client-side authentication programs - running in foreign cells use the information to contact your cell's authentication service. + Location (VL) Servers when they need volume and file location information. For authenticated access, foreign clients + must be configured with the necessary Kerberos v5 domain-to-realm mappings and Key Distribution Center location information for both the local and remote Kerberos v5 realms. There are two places you can make this information available: @@ -840,19 +840,26 @@ user receives an AFS token when - CellServDB file maintained by AFS Product Support + CellServDB file maintained by the AFS Registrar as global update source - In the global CellServDB file maintained by the AFS Product Support group. This - file lists the name and database server machines of every cell that has agreed to make this information available to - other cells. + In the + global CellServDB file + maintained by the AFS Registrar. This file lists the name and + database server machines of every cell that has agreed to make + this information available to other cells. This file is + available + at http://grand.central.org/csdb.html - To add or change your cell's listing in this file, have the official support contact at your site call or write to - AFS Product Support. Changes to the file are frequent enough that AFS Product Support does not announce each one. It is - a good policy to check the file for changes on a regular schedule. + To add or change your cell's listing in this file, + follow the instructions at + http://grand.central.org/csdb.html. + It is a good policy to check the file for changes on a + regular schedule. An updated copy of this file is included + with new releases of OpenAFS. files @@ -879,7 +886,7 @@ user receives an AFS token when linkend="HDRWQ406">Maintaining Knowledge of Database Server Machines. Once you have advertised your database server machines, it can be difficult to make your cell invisible again. You can - remove the CellServDB.local file and ask AFS Product Support to remove your entry from the + remove the CellServDB.local file and ask the AFS Registrar to remove your entry from the global CellServDB file, but other cells probably have an entry for your cell in their local CellServDB files already. To make those entries invalid, you must change the names or IP addresses of your database server machines. -- 2.39.5