Sadly, in both cases this will require a reboot.

In general, this should be pretty quick / painless as there a packages available for all AFS-related utilities.

# Install afs tools
sudo apt-get install openafs-client openafs-krb5
# <reboot>
# Install the kerberos configuration for the umich realm [attached to this page]
sudo cp DOWNLOADS/krb5.conf /etc/krb5.conf

Next make sure that you have your default cell set up correctly. The contents of “ThisCell” should be one line as follows:

$ cat /etc/openafs/ThisCell
umich.edu

You'll need to reboot at this point.

Linux krb5.conf

You will need to get fresh tokens every 24 hours, or every fresh boot.

# Get a kerberos ticket (uniqname is optional if your local machine login name != uniqname)
kinit [uniqname]
# Get an AFS token
aklog
# OPT: Verify everything is working (output something like: User's (AFS ID 251306) tokens for afs@umich.edu [Expires Nov 28 23:40])
tokens
# AFS is now available and mounted at /afs
# Visit your home directory:
cd /afs/umich.edu/user/u/n/uniqname/

The preferred AFS Kerberos client is Heimdal, available here: https://www.secure-endpoints.com/heimdal/

Click “Next” through all the options screens and install, the defaults are fine.

Download the attached file and replace the existing C:\ProgramData\Kerberos\krb5.conf with it.

Windows krb5.conf

Available here: http://openafs.org/pages/windows.html#1_7_64bit_downloads

Note: 64-bit systems must install TWO packages at this link, 32-bit systems only need the one

• Choose “Custom”

  In addition to the defaults, turn on:
  "Loopback adapter"
  "Authentication for AFS"
  "Client Configuration Tool"

  <Next>

• Set default cell to “umich.edu”,

  Disable "Integrated Logon"
  Enable the remaining 3 options

  <Next>

• Configure AFS Credentials

  This should be a screen of checkboxes; leave them all checked except the
  last option (Show credentials window on startup), this should be the default

  <Next>

• Install. You will need to reboot after this step.

  <Reboot>

You will need to get fresh tokens every 24 hours, or every fresh boot. To do this you will have to open a command prompt (Start –> Run –> “cmd”)

# Get a kerberos ticket (uniqname is optional if your local machine login name != uniqname)
kinit [uniqname]
# Get an AFS token
aklog
# Verify everything is working (output something like: User's (AFS ID 251306) tokens for afs@umich.edu [Expires Nov 28 23:40])
tokens

You can now browse AFS like a regular file system. Open explorer and in the address bar at the top type

\\AFS

to visit the root of AFS, or try the following to visit your home directory:

\\AFS\umich.edu\user\u\n\uniqname\