Hi Stephan, Thanks for the info. I'm new to OpenAFS ... so if I only run AFS client, I can see all the files shared by AFS servers around the world and asscess then just as they are my local files ? And if I create my own AFS cell, the whole world can see me too ? That's COOL ... no more FTP server is required. Does my understand is correct ? Thanks KC > > Running an AFS client is perfectly reasonable (these days) even if you > don't have your own AFS cell. If nothing else, browsing /afs/openafs.org, > or /afs/athena.mit.edu, or, say, /afs/hepix.org is fun, isn't it? > > In the default "dynroot" mode of the client, it doesn't matter much which > cell you pick. You may even invent your own one (I'm running client that > thinks it's part of the "st.home" cell right now). It starts making a > difference when you try to obtain a token. For example, with klog. Your > client will then try to talk to the kaserver of whatever it thinks is your > home cell. Notice things like pam_krb5 (if you told authconfig to use > kerberos authentication) may do this behind your back. Other than that, > it merely affects what "fs wscell" will return. Which is, as I just > noticed, a segfault at least if the cell is not recorded in the > CellServDB and there are no AFSDB DNS records for it :-( > > NB the "AFS for Windows" folks translate "dynroot" into "freelance". > > Anyway: although it probably wouldn't do much harm, and it's impossible to > keep anyone on the internet from configuring their AFS clients to think > they're part of whatever AFS cell, most cells probably won't appreciate > it unless you do have some business with them. > > Stephan >