[an error occurred while processing this directive]

<title>Advanced AFS</title>


<h1 align=center>Advanced AFS</h1>
<p align=center>
<A HREF="./"> AFS Intro </A>|
<a href="faq.shtml">F.A.Q.</a> |
<a href="basic.shtml">Basic AFS</a> |
 Advanced AFS |
<a href="kerberos.shtml">Kerberos</a> |
<a href="features.shtml">Features</a> |
<a href="otherinfo.shtml">Other Info</a>
</p>
<!--=====================================================================-->
<hr>
<a name="TOC"><h2>Table of Contents</h2></a>

<ol>
	<li><a href="#Commands">Advance Commands Summary</a>
		<ol>
			<li><a href="#Comm1">fs --- File Commands</a>
			<li><a href="#Comm2">pts --- Group Commands</a>
			<li><a href="#Comm3">vos --- Server Commands</a>
			<li><a href="#Comm4">kas --- Sysadmin Commands</a>
		</ol>
	<li><a href="#Permissions">More Permissions</a>
	<li><a href="#Groups">Groups</a>
		<ol>
			<li><a href="#Group1">Maintaining Groups using the pts command</a>
			<li><a href="#Group2">pts Help, Shortcuts, And Tidbits</a>
		</ol>
	<li><a href="#Layout">File System Layout</a>
		<ol>
 			<li><a href="#Lay1">Paths in AFS</a>
 			<li><a href="#Lay2">/usr/pubsw</a>
 			<li><a href="#Lay3">Program Paths</a>
		</ol>
</ol>

<!--=====================================================================-->
<hr>

<h3><a name="Commands">1. Advance Commands Summary</a></h3>

<p>These are some more advanced commands and their options, followed by some 
	examples on how to use them.
<p>
<ol>
	<li><a name="Comm1"><strong>fs --- File Commands</strong></a>
	    <table>
	      <tr><td>apropos</td>	<td>search by help text <br></td></tr>
	      <tr><td>checkservers</td>	<td>check local cell's servers <br></td></tr>
	      <tr><td>checkvolumes</td>	<td>check volumeID/name mappings <br></td></tr>
	      <tr><td>cleanacl</td>	<td>clean up access control list <br></td></tr>
	      <tr><td>copyacl</td>	<td>copy access control list <br></td></tr>
	      <tr><td>debug</td>	<td>set debugging info <br></td></tr>
	      <tr><td>diskfree</td>	<td>show server disk space usage <br></td></tr>
	      <tr><td>examine</td>			<td>display volume status <br></td></tr>
	      <tr><td>exportafs</td>		<td>enable/disable translators to AFS <br></td></tr>
	      <tr><td>flush</td>			<td>flush file from cache <br></td></tr>
	      <tr><td>flushvolume</td>	<td>flush all data in volume <br></td></tr>
	      <tr><td>getcacheparms</td>	<td>get cache usage info <br></td></tr>
	      <tr><td>getcellstatus</td>	<td>get cell status <br></td></tr>
	      <tr><td>getserverprefs</td><td>get file server ranks <br></td></tr>
	      <tr><td>help</td>				<td>get help on commands <br></td></tr>
	      <tr><td>listacl</td>			<td>list access control list <br></td></tr>
	      <tr><td>listcells</td>		<td>list configured cells <br></td></tr>
	      <tr><td>listquota</td>		<td>list volume quota <br></td></tr>
	      <tr><td>lsmount</td>			<td>list mount point <br></td></tr>
	      <tr><td>messages</td>     <td>control Cache Manager messages <br></td></tr>
	      <tr><td>mkmount</td>	<td>make mount point <br></td></tr>
	      <tr><td>monitor</td>	<td>set cache monitor host address <br></td></tr>
	      <tr><td>newcell</td>	<td>configure new cell <br></td></tr>
	      <tr><td>quota</td>	<td>show volume quota usage <br></td></tr>
	      <tr><td>rmmount</td>	<td>remove mount point <br></td></tr>
	      <tr><td>setacl</td>	<td>set access control list <br></td></tr>
	      <tr><td>setcachesize</td>	<td>set cache size <br></td></tr>
	      <tr><td>setcell</td>	<td>set cell status <br></td></tr>
	      <tr><td>setquota</td>	<td>set volume quota <br></td></tr>
	      <tr><td>setserverprefs</td> <td>set file server ranks <br></td></tr>
	      <tr><td>setvol</td>	<td>set volume status <br></td></tr>
	      <tr><td>sysname</td>	<td>get/set sysname (i.e. @sys) value <br></td></tr>
	      <tr><td>whereis</td>	<td>list file's location <br></td></tr>
	      <tr><td>whichcell</td>	<td>list file's cell <br></td></tr>
	      <tr><td>wscell</td>	<td>list workstation's cell <br></td></tr>
	</table>

	<p>Some fairly useful commands:
	<ul>
		<li>Check which servers are down: <kbd>fs checkservers</kbd>
		<li>Obtaining the Cache Size: <kbd>fs getcacheparms</kbd>
		<li>Flushing Files: <kbd>fs flush</kbd> <em>filename</em>
		<li>Brief Volume Information: <kbd>fs lq</kbd> <em>path</em>
		<li>Find Volume Information: <kbd>fs whereis</kbd> <em>path</em>
	</ul>
	</p>
	
	<li><a name="Comm2"><strong>pts --- Group Commands</strong></a>
	<table>
		<tr><td>adduser</td>		<td>add a user to a group <br></td></tr>
		<tr><td>apropos</td>		<td>search by help text <br></td></tr>
		<tr><td>chown</td>		<td>change ownership of a group <br></td></tr>
		<tr><td>creategroup</td><td>create a new group <br></td></tr>
		<tr><td>createuser</td>	<td>create a new user <br></td></tr>
		<tr><td>delete</td>		<td>delete a user or group from database <br></td></tr>
		<tr><td>examine</td>		<td>examine an entry <br></td></tr>
		<tr><td>help</td>			<td>get help on commands <br></td></tr>
		<tr><td>listmax</td>		<td>list max id <br></td></tr>
		<tr><td>listowned</td>	<td>list groups owned by an entry or zero id gets orphaned groups <br></td></tr>
		<tr><td>membership</td>	<td>list membership of a user or group <br></td></tr>
		<tr><td>removeuser</td>	<td>remove a user from a group <br></td></tr>
		<tr><td>rename</td>		<td>rename user or group <br></td></tr>
		<tr><td>setfields</td>	<td>set fields for an entry <br></td></tr>
		<tr><td>setmax</td>		<td>set max id<br></td></tr>
	</table>
	
	<li><a name="Comm3"><strong>vos --- Server Commands</strong></a>
	<table>
		<tr><td>addsite</td>		<td>add a replication site <br></td></tr>
		<tr><td>apropos</td>		<td>search by help text <br></td></tr>
		<tr><td>backup</td>		<td>make backup of a volume <br></td></tr>
		<tr><td>backupsys</td>	<td>en masse backups <br></td></tr>
		<tr><td>changeaddr</td>	<td>change the IP address of a file server <br></td></tr>
		<tr><td>create</td>		<td>create a new volume <br></td></tr>
		<tr><td>delentry</td>	<td>delete VLDB entry for a volume <br></td></tr>
		<tr><td>dump</td>			<td>dump a volume <br></td></tr>
		<tr><td>examine</td>		<td>everything about the volume <br></td></tr>
		<tr><td>help</td>			<td>get help on commands <br></td></tr>
		<tr><td>listpart</td>	<td>list partitions <br></td></tr>
		<tr><td>listvldb</td>	<td>list volumes in the VLDB <br></td></tr>
		<tr><td>listvol</td>		<td>list volumes on server (bypass VLDB) <br></td></tr>
		<tr><td>lock</td>			<td>lock VLDB entry for a volume <br></td></tr>
		<tr><td>move</td>			<td>move a volume <br></td></tr>
		<tr><td>partinfo</td>	<td>list partition information <br></td></tr>
		<tr><td>release</td>		<td>release a volume <br></td></tr>
		<tr><td>remove</td>		<td>delete a volume <br></td></tr>
		<tr><td>remsite</td>		<td>remove a replication site <br></td></tr>
		<tr><td>rename</td>		<td>rename a volume <br></td></tr>
		<tr><td>restore</td>		<td>restore a volume <br></td></tr>
		<tr><td>status</td>		<td>report on volser status <br></td></tr>
		<tr><td>syncserv</td>	<td>synchronize server with VLDB <br></td></tr>
		<tr><td>syncvldb</td>	<td>synchronize VLDB with server <br></td></tr>
		<tr><td>unlock</td>		<td>release lock on VLDB entry for a volume <br></td></tr>
		<tr><td>unlockvldb</td>	<td>unlock all the locked entries in the VLDB <br></td></tr>
		<tr><td>zap</td>			<td>delete the volume, don't bother with VLDB <br></td></tr>
	</table>
	
	<p>Some fairly useful commands:
	<ul>
		<li>Listing Volume Attributes: <kbd>vos examine [volume]</kbd>,
			i.e. <kbd>vos examine user.frank</kbd> or even <kbd>vos examine user.
			frank.backup</kbd>
		<li>Listing Partition Info: <kbd>vos partinfo</kbd>
		<li>Volume Info: <kbd>vos examine sun4c_411.pubsw.bin</kbd> <br>
			(after finding the exactly name from <kbd>fs lq /usr/pubsw/bin</kbd>
	</ul>
	</p>
	
	<li><a name="Comm4"><strong>kas --- System Administration Commands</strong></a>
	<table>
		<tr><td>apropos</td>			<td>search by help text <br></td></tr>
		<tr><td>create</td>			<td>create an entry for a user <br></td></tr>
		<tr><td>debuginfo</td>		<td>show debugging info from AuthServer <br></td></tr>
		<tr><td>delete</td>			<td>delete a user <br></td></tr>
		<tr><td>examine</td>			<td>examine the entry for a user <br></td></tr>
		<tr><td>forgetticket</td>	<td>delete ticket for a specific server <br></td></tr>
		<tr><td>getpassword</td>	<td>get a user's password <br></td></tr>
		<tr><td>getrandomkey</td>	<td>get a random key <br></td></tr>
		<tr><td>getticket</td>		<td>get a ticket for a specific server <br></td></tr>
		<tr><td>help</td>				<td>get help on commands <br></td></tr>
		<tr><td>interactive</td>	<td>enter interactive mode <br></td></tr>
		<tr><td>list</td>				<td>list all users in database <br></td></tr>
		<tr><td>listtickets</td>	<td>show all cache manager tickets <br></td></tr>
		<tr><td>noauthentication</td><td>connect to AuthServer w/o using token <br></td></tr>
		<tr><td>quit</td>				<td>exit program <br></td></tr>
		<tr><td>setfields</td>		<td>set various fields in a user's entry <br></td></tr>
		<tr><td>setkey</td>			<td>set a user's key <br></td></tr>
		<tr><td>setpassword</td>	<td>set a user's password <br></td></tr>
		<tr><td>statistics</td>		<td>show statistics for AuthServer <br></td></tr>
		<tr><td>stringtokey</td>	<td>convert a string to a key <br></td></tr>
		<tr><td>unlock</td>			<td>Enable authentication ID after max failed attempts exceeded<br></td></tr>
	</table>
</ol>

<!--=====================================================================-->
<hr>
<h3><a name="Permissions">2. More Permissions</a></h3>

<p>The files contained within your AFS home directory use both
AFS and Unix file permissions.  The only Unix (NFS) permissions which
are still applicable under AFS, however, are the permissions for the
user. Unix permissions on directories are not used.
<dl>
	<dt>value -- permission code 
		<dd>
	<dt>400 -- r (Read) 
		<dd>Allows user with AFS read access (rl) to the 
			directory to read or copy the file. 
	<dt>200 -- w (Write) 
       	<dd>Allows user with AFS write access (wl) to modify or 
        overwrite a file. Does NOT determine whether a user 
        can delete the file, however. AFS delete (d) 
        permission on the directory does that. 
 	<dt>100 -- x (Execute)
		<dd>Allows user with AFS read access (rl) to execute the file 
</dl></p>

<p>For example, to give read and execute permission to a file
named [filename], type either of the following: <br>
<kbd>chmod 500 [filename]<br>
chmod u+rx [filename]</kbd></p>

<p>The first command uses the numeric code (read + execute = 400 + 100 =
500); the second command uses the letter code (user plus read
execute).</p>

<p>For more info on Unix permissions, read the man page for chmod
(type "man chmod") and ls.  The command "ls -l" will display the Unix
permissions for the files.  The command "fs la" will display the AFS
permissions for the files.  They are not the same thing.</p>

<!--=====================================================================-->
<hr>
<h3><a name="Groups">3. Groups</a></h3>

<ol>
	<li><a name="Group1"><strong>Maintaining Groups -- Using The pts Command</strong></a>
	
	<p>One neat thing about AFS is that you can create your own
	groups and grant permissions for individual AFS usernames.  To be in a 
	group or individually listed in an ACL, a person needs to have a
	kerberos password.</p>
	
	<p>The command pts and its suite of subcommands allows you to
	create your own groups.  Suppose your accountname was "accountname".
	Here is a list of common pts commands:</p>
		
	<p>Creates a private group named accountname:groupname <br>
		<kbd>pts creategroup accountname:groupname</kbd></p>

	<p>Adds a user to the group accountname:groupname (you must own the group) <br>
		<kbd>pts adduser [username] accountname:groupname</kbd></p>
		
	<p>Remove user from the group accountname:groupname <br>
		<kbd>pts removeuser [username] accountname:groupname</kbd></p>
		
	<p>Delete the group accountname:groupname from existence <br>
		<kbd>pts delete accountname:groupname</kbd></p>
	
	<p>For a given directory, you can add a group to the acl. For example: <br>
	<kbd>fs sa project accountname:project read</kbd></p>
	
	<li><a name="Group2"><strong>pts Help, Shortcuts, And Tidbits</strong></a>
	
	<p>As expected, the pts commands have help options and
	abbreviations.  See the man page for pts.  You can also type:<br>
	<table>
		<tr><td>pts help</td>				<td>lists pts commands <br></td></tr>
		<tr><td>pts [subcommand] -help</td>
			<td>lists syntax for pts subcommand <br></td></tr>
	</table>
	</p>
	
	<p>Other useful pts commands are:<br>
	<table>
		<tr><td>pts membership [groupname]</td>
			<td>lists members of the group [groupname]<br></td></tr>
		<tr><td>pts listowned [username]</td>
			<td>lists groups owned by the user [username]<br></td></tr>
	</table>
	</p>
</ol>

<!--=====================================================================-->
<hr>
<h3><a name="Layout">4. File System Layout</a></h3>

<ol>
	<li><a name="Lay1"><strong>Paths in AFS</strong></a>
	<p><ul>
			<li>/afs - base of AFS file system
			<li>/afs/ir.stanford.edu (/afs/ir) - base of our cell
			<li><a href="#Lay2">/afs/ir/pubsw</a> - campus software packages
			<li>/afs/ir/systems - OS mount points
			<li>/afs/ir/class - academic file space
			<li>/afs/ir/group - organization file space
			<li>/afs/ir/users - personal account space
			<li>/afs/ir/src - campus source tree
		</ul></p>
	
	<li><a name="Lay2"><strong>/usr/pubsw</strong></a> <br>
	<kbd>$ cardinal1:~ &gt; ls /usr/pubsw</kbd>
	
	<table>
		<tr><td><kbd>X@</kbd></td><td><kbd>apps/</kbd></td>
			<td><kbd>etc/</kbd></td><td><kbd>include/</kbd></td>
			<td><kbd>man@</kbd></td><td><kbd>share@<br></kbd></td></tr>
		<tr><td><kbd>X11R5/</kbd></td><td><kbd>bin/</kbd></td>
			<td><kbd>examples@</kbd></td><td><kbd>info@</kbd></td>
			<td><kbd>package/</kbd></td><td><kbd>src@<br></kbd></td></tr>
		<tr><td><kbd>X11R6/</kbd></td><td><kbd>doc@</kbd></td>
			<td><kbd>help/</kbd></td><td><kbd>lib/</kbd></td>
			<td><kbd>sbin/</kbd></td><td><br></td></tr>
	</table>

	<kbd>$ ls /usr/pubsw/package</kbd>
	<table>
		<tr><td><kbd>00README</kbd></td><td><kbd>File/</kbd></td>
			<td><kbd>Licensed/</kbd></td><td><kbd>NOTES/</kbd></td>
			<td><kbd>Shells/</kbd></td><td><kbd>Web/</kbd><br></td></tr>
		<tr><td><kbd>Development/</kbd></td><td><kbd>Fonts/</kbd></td>
			<td><kbd>Local/</kbd></td><td><kbd>Network/</kbd></td>
			<td><kbd>Site/</kbd></td><td><kbd>X/</kbd><br></td></tr>
		<tr><td><kbd>Dicts/</kbd></td><td><kbd>Games/</kbd></td>
			<td><kbd>Mail/</kbd></td><td><kbd>News/</kbd></td>
			<td><kbd>Sound/</kbd></td><td><kbd>local@</kbd><br></td></tr>
		<tr><td><kbd>Doc/</kbd></td><td><kbd>Graphics/</kbd></td>
			<td><kbd>Math/</kbd></td><td><kbd>OLD/</kbd></td>
			<td><kbd>System/</kbd></td><td><kbd>nosupport@</kbd><br></td></tr>
		<tr><td><kbd>Editors/</kbd></td><td><kbd>Leland/</kbd></td>
			<td><kbd>Misc/</kbd></td><td><kbd>Security/</kbd></td>
			<td><kbd>Text/</kbd></td><td><kbd>unfiled/</kbd><br></td></tr>
	</table>
	</p>
	
	<li><a name="Lay3"><strong>Interesting Program Paths</strong></a>
	<ul>
		<li>/usr/local/bin - host or cluster specific programs
		<li>/usr/pubsw/bin - campus software
		<li>/usr/pubsw/X/bin - campus X software (currently X11R6)
		<li>/usr/newsw/bin - newest campus software
		<li>/usr/newsw/X/bin - newest campus X software
		<li>/usr/ucb - BSD-style vendor programs (/usr/bsd on IRIX)
		<li>/usr/bin - standard vendor programs
		<li>/usr/pubsw/sbin - campus administrative commands
		<li>/usr/afsws/bin, /usr/afsws/etc - AFS commands
		<li>/usr/lang - local compiler tools (/opt/SUNWspro/bin on Solaris)
		<li>/usr/etc - administrative commands
		<li>/usr/ccs/bin - software tools (Solaris)
		<li>/usr/class/ee/bin - EE maintained software
		<li>~consult/bin - public consulting tools
		<li>~/bin - your own programs
		<li>/afs/ir/systems/@sys/pubsw/bin - read-only volumes
		<li>/afs/ir/systems/@sys/pubsw/X/bin
		<li>/afs/ir/systems/@sys/newsw/bin
		<li>/afs/ir/systems/@sys/newsw/X/bin <br>
			- amys - alpha_osf21, alpha_osf32 <br>
			- apollos - hp700_ux90 <br>
			- adelberts - pmax_ul43a <br>
			- rss - rs_aix32 <br>
			- raptors.junior - sgi_52, sgi_53 <br>
			- elaines, voyagers - sun4m_412, sun4c_411 <br>
			- solaris, tree - sun4c_54, sun4m_54 <br>
			- linux - i386_linux1 <br>
		<li>/afs/.ir/systems/@sys/pubsw/bin - read-write volumes
		<li>/afs/.ir/systems/@sys/pubsw/X/bin
		<li>/afs/.ir/systems/@sys/newsw/bin
		<li>/afs/.ir/systems/@sys/newsw/X/bin
	</ul>
</ol>
	
<!--=====================================================================-->
<hr>

<a href= "./"><img align=middle src="/icons/back.gif" alt="Back"></a>
To AFS Main Page

<!------------------------------------------------------------------------->

<!--=====================================================================-->
<hr>

<a href= "http://consult.stanford.edu/"><img align=middle
src="includes/images/stanford/DCC_back.gif" alt="DCC Home |"></a>

<a href="http://www.stanford.edu/group/itss-customer/"> <img
align=middle src="includes/images/stanford/CA_icon.gif" alt=" Customer
Assistance Home |"></a>

<a href= "http://www.stanford.edu/dept/itss/"> <img align=middle
src="includes/images/stanford/ITSS_icon.gif" alt=" ITSS Home |"></a>


<a href= "http://www.stanford.edu/"> <img align=middle
src="includes/images/stanford/logo.stanf.www.gif" alt=" Stanford Home"></a>


<!--=====================================================================-->
<hr>

<address>
Contact <a
href="http://helpsu.stanford.edu">HelpSU.Stanford.EDU</a> if
 you have questions about the Leland system.<br>

<!--------- Mail <a href ="mailto:web-support@consult.stanford.edu">
<!--------- web-support@consult.stanford.edu</a>
<!--------- if you have comments on our pages.<br>
</address>
<!--------- This Page Last Modified:  --------!>
<!--------- 
<!--------- 14 Nov 1997
<br>

</BODY>
</HTML>