AFS - Grant Access to your Friends

Last modified: Wed Aug 2 06:58:44 CDT 2006

I received these instructions from CERN/IT.
A very thorough and well-organizes source can be found on the web at the AFS Users Guide.
These are the steps that worked for me:
1. Log on to lxplus.
2. Create a "group" identifier that you will use to specify a list of users who will get access to your areas.
```
   pts createg schmittm:myfriends
```
  (Obviously you should use your own userid instead of "schmittm" and the name "myfriends" can be anything you choose.)
  You should see a message such as
```
group schmittm:myfriends has id -103255
```
3. Add the user ID's to your group, one at a time:
```
pts add velasco schmittm:myfriends
pts add akub19 schmittm:myfriends
pts add dbarge schmittm:myfriends
```
  etc.
4. Set the ACL for a single subdirectory "JUNK" like this:
```
fs sa ~/JUNK/ schmittm:myfriends read
```
  Note: this sets access to that subdirectory only - not any further subdirectories such as ~/JUNK/PAPER/.
  To set access to all subdirectories of ~/JUNK/, do this:
```
cd ~/JUNK/
find . -type d -print -exec fs sa {} schmittm:myfriends read \;
```
  You will be able to see the whole thing happening.
5. If you want to see what access you have granted for a given subdirectory, do this:
```
fs listacl ~/JUNK/
```
  and if you want to remove "myfriends" access, do this:
```
fs setacl ~/JUNK/ -clear schmittm:myfriends read
```