afs5log(8) [centos man page]

afs5log(8)						   System Administrator's Manual						afs5log(8)

NAME

       afs5log - AFS token initializer

SYNOPSIS

       afs5log [ [-v] [-5] [-k] [-p path] [cell[=principal] ] ] [...]

DESCRIPTION

       The  afs5log  command uses Kerberos to obtain AFS tokens for the named cells.  If no cell is named, tokens are obtained for the local cell.
       If the principal name of the afs service for the cell is known, the cell name may also be given in the form cell=principal_name.   Attempts
       are made to obtain Kerberos IV credentials first, and if that fails, afs5log will create Kerberos 5 (2b-style) tokens.

ARGUMENTS

       -v     Turns on verbose mode.  afs5log will print debugging messages while it does its work.  Use more than once to get more detail.

       -p path
	      Determine which cell the specified path resides in, and obtain tokens for that cell.

       -s strategy
	      Overrides the default token-setting strategy ("2b") with the named strategy.  Recognized strategy names include:
	       rxk5  rxk5 (requires OpenAFS 1.6 or later)
	       2b    rxkad "2b" (requires OpenAFS 1.2.8 or later)

       -5     Skip attempts to use Kerberos IV and just use 2b-style tokens, which are only supported by OpenAFS 1.2.8 and later.

       -k     Skip attempts to use Kerberos IV and use rxk5-style tokens, which are only supported by OpenAFS 1.6 and later.

       -n     Assume  that, if a cell name and a realm name differ only by case, that the name of the AFS service's principal name doesn't include
	      an instance.

SEE ALSO

       pam_krb5(5) krb5.conf(5)

BUGS

       Probably, but let's hope not.  If you find any, please file them in the bug database at http://bugzilla.redhat.com/ against the	"pam_krb5"
       component.

AUTHOR

       Nalin Dahyabhai <nalin@redhat.com>

Red Hat Linux							    2007/12/18								afs5log(8)

UNLOG(1)						       AFS Command Reference							  UNLOG(1)

NAME

       unlog - Discards all of the issuer's tokens

SYNOPSIS

       unlog [-cell <cell name>+] [-help]

       unlog [-c <cell name>+] [-h]

DESCRIPTION

       The unlog command by default discards all tokens that the issuer currently holds. To discard tokens for certain cells only, name them with
       the -cell argument.

       Since a token pertains to one client machine only, destroying tokens on one machine has no effect on tokens on another machine.

CAUTIONS

       Specifying one or more cell names can cause a brief authentication outage during which the issuer has no valid tokens in any cell. This is
       because the command actually discards all tokens and then restores the ones for cells not named by the -cell argument. The outage can
       sometimes interrupt the operation of jobs that require authentication.

OPTIONS

       -cell <cell name>+
	   Specifies each cell for to discard the token. If this argument is omitted, the Cache Manager discards all tokens. Provide the fully
	   qualified domain name, or a shortened form, in which case successful resolution depends on the availability of a name resolution
	   service (such as the Domain Name Service or a local host table) at the time the command is issued.

       -help
	   Prints the online help for this command. All other valid options are ignored.

EXAMPLES

       The following command discards all tokens.

	  % unlog

       The following command discards only the tokens for the "abc.com" and "stateu.edu" cells.

	  % unlog -cell abc.com stateu

PRIVILEGE REQUIRED

       None

SEE ALSO

       klog(1), tokens(1)

COPYRIGHT

       IBM Corporation 2000. <http://www.ibm.com/> All Rights Reserved.

       This documentation is covered by the IBM Public License Version 1.0.  It was converted from HTML to POD by software written by Chas
       Williams and Russ Allbery, based on work by Alf Wachsmann and Elizabeth Cassell.

OpenAFS 							    2012-03-26								  UNLOG(1)