AFS & eos related:

check the status

 service openafs-client status

start the fs service (sometimes use restart instead of start), use either one of those:

/etc/init.d/afs start
service openafs-client start

to refresh kerberos key

cern-get-keytab

Security bypass:

To drill a hole in the firewall, in order to make felix work

firewall-cmd --zone=public --add-port=48020/tcp ?permanent

Or more thoroughly, close the firewall, use either one of those:

service firewalld stop
systemctl stop firewalld

Disable it, not coming back in the next startup.

systemctl disable firewalld

After that, check to see if firewall is running:

systemctl status firewalld
ps aux | grep firewall

Configuration hanging

In the server that you opened flx gui, with the same account, try to ssh the full name of the server. You have to be added to both servers with "addusercern" command so that Kerberos key can work without asking you password. If anything prevents you logging in automatically, you need to resolve it.

-- RongkunWang - 2019-07-25

Edit | Attach | Watch | Print version | History: r3 < r2 < r1 | Backlinks | Raw View | WYSIWYG | More topic actions
Topic revision: r3 - 2020-08-06 - RongkunWang
 
    • Cern Search Icon Cern Search
    • TWiki Search Icon TWiki Search
    • Google Search Icon Google Search

    Sandbox All webs login

This site is powered by the TWiki collaboration platform Powered by PerlCopyright & 2008-2020 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
or Ideas, requests, problems regarding TWiki? use Discourse or Send feedback