NAME

       aklog-kafs - AFS Kerberos authentication tool

SYNOPSIS

       aklog-kafs [-dhkV] [<cell> [<realm>]]

DESCRIPTION

       This program is used to get an authentication ticket from Kerberos that can be used by the in-kernel AFS
       filesystem (kAFS) to perform authenticated and encrypted accesses to the an AFS cell.  Without this only
       unencrypted anonymous accesses can be made.

       Before calling this, the "kinit" program or similar should be invoked to authenticate with the
       appropriate Kerberos server.

ARGUMENTS

       <cell>
           This is the name of the cell with which the ticket is intended to be used.  If not given, the name of
           the default cell will be read from "/proc/net/afs/rootcell" and used instead.

           The  root  cell  can be set in the "/etc/kafs/client" configuration file by setting the "thiscell" in
           the "[defaults]" section.  If the value of  thiscell  is  changed  in  the  configuration  file  than
           "kafs-preload" needs to be run to refresh the value in the "/proc/net/afs/rootcell" file.

       <realm>
           This is the name of the Kerberos realm from which the ticket will be obtained.

OPTIONS

       "-h"
           Display help text and exit.

       "-d"
           Display processing messages.  Specifying "-d" more than once increases the verbosity of the messages.

       "-k"
           Manually  specify  keyring  to  add AFS key into.  Otherwise, a session keyring will be used first if
           found before automatically switching to the uid-session keyring.

           Valid values are:

                    session
                    uid-session

       "-V"
           Show version and exit.

EXAMPLE

             # aklog-kafs -d
             Default cell from /proc/net/afs/rootcell: ca-zephyr.org
             Realm: CA-ZEPHYR.ORG
             CELL ca-zephyr.org
             PRINC afs/ca-zephyr.org@CA-ZEPHYR.ORG
             successfully added key: 44095043 to session keyring

SEE ALSO

       kinit(1), keyctl (1), kafs-preload (8), kafs-client.conf(5)

COPYRIGHT

       Copyright (C) 2018 Red Hat, Inc. All Rights Reserved.

       Written by David Howells <dhowells@redhat.com>

       This program is free software; you can redistribute it and/or modify  it  under  the  terms  of  the  GNU
       General  Public License as published by the Free Software Foundation; either version 2 of the License, or
       (at your option) any later version.

0.5-4build1                                        2024-04-22                                      AKLOG-KAFS(1)