Kerberos tickets and AFS tokens on macOS
Many users have access to files and directories in AFS. To be able to take advantage of this, one must authenticate oneself in Kerberos and AFS. This document describes how to manually obtain kerbero tickets and AFS tokens to be able to read and write in AFS.
To connect to your AFS home directory from home, you need to be able to authenticate yourself with Kerberos tickets, have an AFS client installed and also valid AFS tokens. How to install and set up is described elsewhere on this site.
To get Kerberos tickets
The first step is to get kerbero tickets. The easiest way is via Terminal.app.
It is located in /Applications/Utilities/Terminal.app.
Then write
kinit yourusernameatkth@KTH.SE
You can then see your kerbero tickets and their lifespan by writing
klist
To end the validity of the tickets, write
kdestroy
To obtain AFS tokens
Finally, when you have kerbero tickets, you also need to be able to get valid AFS tickets, so-called "tokens", in order to be able to read and write your files that are in AFS. Open the Terminal program again and type
aklog
to obtain valid tokens.
You may need to enter the entire path - /usr/bin/aklog
To kill tokens, you can "unlog" in a Terminal window.
Make sure you have valid tickets
To check that you have valid kerbero tickets and tokens, do the following commands in Terminal:
"klist" to see the life of your kerbero tickets.
"tokens" to see the equivalent for AFS tokens.