AFS
From FarmShare
FarmShare no longer uses AFS for users' home directories, but AFS is still accessible on rice
systems (and on rice
systems only). A link to users’ AFS home directories, ~/afs-home
, is provided as a convenience, but locations in AFS should not be used as working directories for batch jobs.
Authentication
Access to AFS requires valid Kerberos credentials and an AFS token. You can examine your current authentication status using the klist
and tokens
commands, and re-authenticate when necessary using the kinit
and aklog
commands. If you have trouble accessing files in AFS, try re-authenticating.
kinit && aklog
Tokens expire after 25 hours (the maximum Kerberos ticket lifetime in the stanford.edu
realm). You can renew your Kerberos credentials without having to re-authenticate if you do so before they expire, and then run aklog
to get a new token. Kerberos tickets are renewable daily, for up to 7 days.
kinit -R && aklog
Advanced Connection Options includes instructions for making sure you have an AFS token at login when using GSSAPI for authentication. See the man
pages for the klist
, tokens
, kinit
, and aklog
commands, as well as the Kerberos and AFS service documentation, for more information.
Quota and Backup
The default, per-user quota for AFS home directories is 5 GB, but you may have additional quota due to your enrollment in certain courses, and you can request additional quota (up to 20 GB total) with faculty sponsorship. You can use the fs
command to examine your quota and usage.
fs listquota ~/afs-home
AFS is backed up every night, and backups are kept for 30 days. The most recent snapshot of your AFS home directory is available in the .backup
subdirectory, and you can request recovery from older backups by submitting a HelpSU ticket.