## AKLOG Command

(from UNIX man page)

    User Commands                                            AKLOG(1)

    NAME
         aklog - Obtain tokens for authentication to AFS

    SYNOPSIS
         aklog [ -d ] [ -force ] [ -hosts ] [ -zsubs ] [ -noprdb ]  [
         [ -cell | -c ] cell [ -k kerberos-realm ] ] [ [ -path | -p ]
         pathname ]

    DESCRIPTION
         The aklog program is used  to  authenticate  to  a  cell  or
         directory  in  AFS,  the Andrew Filesystem, by obtaining AFS
         tokens. Ordinarily, aklog is not used directly but called by
         attach(1).

         If aklog is invoked with no command line arguments, it  will
         obtain  tokens for the workstation's local cell.  It is pos-
         sible to invoke aklog with arbitrarily many cells and  path-
         names  specified  on  the  command  line. aklog knows how to
         expand cell name abbreviations, so short forms of cell names
         can be use used.  In addition, aklog understands the follow-
         ing command line options:

         -cell | -c cell
             This flag is not ordinarily necessary  since  aklog  can
             usually  figure  out when an argument is a cell.  It can
             be used to introduce a cell name that  would  ordinarily
             be  mistaken for a path name if this should be required.
             If this flag is omitted, an argument will be treated  as
             a cell name if it contains no slashes (/) and is neither
             "." nor ".." .

         -k kerberos-realm
             This flag is valid only when immediately  following  the
             name  of a cell.  It is used to tell aklog what kerberos
             realm should be used while authenticating to the preced-
             ing  cell.  This argument is unnecessary except when the
             workstation is  not  properly  configured.   Ordinarily,
             aklog can determine this information on its own.

         -path | -p pathname
             Like the -cell flag, this flag is  usually  unnecessary.
             When  it  appears,  the  next  command  line argument is
             always treated as a path name.  Ordinarily, an  argument
             is  treated as a path name if it is "." or ".." or if it
             contains a slash (/).

         -hosts
             Prints all the server addresses which may act as a  sin-
             gle  point  of failure in accessing the specified direc-
             tory path.  Each element of the path is examined, and as
             new  volumes  are traversed, if they are not replicated,
             the server's IP address containing the  volume  will  be
             displayed.   Attach(1)  invokes  aklog with this option.
             The output is of the form

             host: IP address

         -zsubs
             Causes the printing of the zephyr subscription  informa-
             tion  that  a  person  using  a given path or cell would
             want. Attach(1) invokes aklog  with  this  option.   The
             output is of the form

             zsub: instance

             where instance is the instance of a class filsrv  zephyr
             subscription.

         -noprdb
             Ordinarily, aklog looks up the AFS ID  corresponding  to
             the name of the person invoking the command.  Specifying
             this flag turns off this  functionality.   This  may  be
             desirable  if the protection database is unavailable for
             some reason and tokens are desired anyway.

         -d  Turns on printing of debugging information.  This option
             is not intended for general users.

         -force
             Forces aklog to obtain  new  tokens  even  if  the  user
             already appears to have tokens identical to the new ones
             they would get.  This option is most often required when
             the user has recently been added to an AFS group.

    EXIT CODES
         The exit status of aklog will be one of the following:

         0    Success -- No error occurred.

         1    Usage -- Bad command syntax;  accompanied  by  a  usage
              message.

         2    Something failed -- More than one cell or pathname  was
              given  on  the  command  line  and at least one failure
              occurred.  A more specific  error  status  is  returned
              when only one directive is given.

         3    AFS -- Unable to get AFS configuration or unable to get
              information about a specific cell.

         4    Kerberos -- Unable to get tickets for authentication.

         5    Token -- Unable to get tokens.

         6    Bad pathname -- The path given was not a  directory  or
              lstat(2) failed on some component of the pathname.

         7    Miscellaneous -- An  internal  failure  occurred.   For
              example, aklog returns this if it runs out of memory.

    EXAMPLES
         To get tokens for the local cell:
         % aklog

         To get tokens for the athena.mit.edu cell:
         % aklog athena.mit.edu
         or
         % aklog athena

         To       get       tokens       adequate       to       read
         /afs/athena.mit.edu/user/p/potato:
         % aklog /afs/athena.mit.edu/user/p/potato

         To get tokens for a test cell that is  in  a  test  Kerberos
         realm:
         % aklog testcell.mit.edu -k TESTREALM.MIT.EDU

    SEE ALSO
         attach(1), tokens(1), unlog(1)