AFS & eos related:

check the status

 service openafs-client status

start the fs service (sometimes use restart instead of start), use either one of those:

/etc/init.d/afs start
service openafs-client start

to refresh kerberos key

cern-get-keytab

Security bypass:

To drill a hole in the firewall, in order to make felix work

firewall-cmd --zone=public --add-port=48020/tcp ?permanent

Or more thoroughly, close the firewall, use either one of those:

service firewalld stop
systemctl stop firewalld

Disable it, not coming back in the next startup.

systemctl disable firewalld

After that, check to see if firewall is running:

systemctl status firewalld
ps aux | grep firewall

Configuration hanging

In the server that you opened flx gui, with the same account, try to ssh the full name of the server. You have to be added to both servers with "addusercern" command so that Kerberos key can work without asking you password. If anything prevents you logging in automatically, you need to resolve it.

-- RongkunWang - 2019-07-25