Jeeves

Jeeves is a telnet-based, privilege-delegation service that enables users to perform for themselves many common administrative tasks — including changing AFS quota, changing mail forwarding, and creating Kerberos principals. Invoke Jeeves through a secure telnet connection to the dedicated server, "jeeves.srv.cs.cmu.edu," and use its menu-based interface.

On this page:

• General information:
  • How to connect to Jeeves
  • How to navigate the Jeeves menus
• AFS-related functions
  • AFS volume operations, including changing your quota and moving your volume
  • AFS account operations
  • AFS allocation class operations
  • Managing misc collections
    • Managing your volume quotas
    • Releasing a replicated volume
• Kerberos oriented functions
  • Creating new Kerberos instances
  • Changing Kerberos passwords
  • Other Kerberos commands
• Electronic mail functions
  • Managing your master mail forwarding address
• World Wide Web functions
  • Managing your http://www.cs.cmu.edu/~link
• CorporateTime calendar-server functions
  • Managing your CorporateTime account

Connecting to Jeeves

From a Windows machine

1. Go to "Start" > "Programs" > "PuTTY"
2. Launch a "PuTTY" SSH client
3. In the "Session" (default) window, in the "Host Name" field, enter "linux.gp.cs.cmu.edu" or the name of a Facilitized Unix/Linux machine on which you have an account ^{Note 1}
4. Proceed as described in the "from Unix" section below.

From a Macintosh

1. Open "Terminal.app" and use "SSH" to access, for example, "linux.gp.cs.cmu.edu"
2. When you connect and get the prompt, enter "kinit <your_userID>" and then your Kerberos password, when requested
3. At the next prompt, enter "telnet -xa jeeves"
4. Once you connect, the Jeeves server will build your environment and display an action menu

From a Unix machine

% telnet jeeves.srv.cs.cmu.edu
Trying 128.2.201.69...
Connected to SERVICEBERRY.SRV.cs.cmu.edu.
Escape character is '^]'.
[ Kerberos V4 accepts you ]
[ Kerberos V4 challenge successful ]

Solaris (serviceberry.srv.cs.cmu.edu) (pts/2)

Automatic login: jvsmenu

Welcome to Jeeves, ...

Navigating the Jeeves menus

1. Perform AFS related operation (afs)
2. Perform kerberos related operation (kerberos)
3. Perform electronic mail related operation (mail)
4. Perform WWW related operation (www)
5. Perform CorporateTime calendar server related operation (corptime)
6. Disconnect from Jeeves (quit)

Choose option by number or parenthesized keyword.

Enter selection:

Enter selection: ker

1. Create a Kerberos principal
   Syntax: create <new principal> <new principal's password>
   Example: create bovik.mail
2. Create/re-key a Kerberos principal with a random key
   Syntax: key <principal>
   Example: key rcmd.deneb.fac.cs.cmu.edu
3. Examine a Kerberos principal
   Syntax: examine <principal>
4. Change your Kerberos password
   Syntax: password <principal name> <old password> <new password>
   Example: password bovik <current password for bovik> <new password for bovik>
   Example: password bovik.ftp <current password for bovik> <new password for bovik.ftp>
5. Return to the main menu (back)
6. Disconnect from Jeeves (quit)

• the item number at left
• the full command using the indicated syntax
• the command abbreviated. The interface will prompt for any omitted arguments, and you can select the offered default value by hitting RETURN

AFS-related functions

AFS volume operations

Volume owner:

You "own" a volume if you have admin ("a") rights on the root directory (the default for most volumes). Misc volumes for a given collection are also considered to be owned by anyone in the sys:admin.misc-collection-name AFS group for the collection.

Allocation class administrator:

Allocation administrators are set when the class is created. They can manipulate volumes in the class directly. An allocation class might include, for example, all user volumes, all misc volumes or all volumes in a project.

Changing your AFS volume quota

• "display" — Display your AFS quota
• "quota" — Change an AFS quota up to a limit of 1GB. If unallocated quota is available on the AFS server housing your user volume, an increase will be granted immediately. If space is not available on this server but is on some other AFS server with user volumes, you may direct your user volume to be moved there; your quota increase request will then be honored.

Creating and moving your AFS volume

• "move" — Move owned volume to a new default location. The quota reserve indicates that the location should have at least that amount of free space left after the move when selecting a location.
• "mvto" — Moves volume to a specific server and partition. Usable only by allocation class administrators.
• "create" — Create a new volume with the indicated quota and owner. Users can only create volumes that would belong to them and may only specify a default owner. Allocation administrators can create any volume that would belong in their class. For example, a P.sample allocation administrator could create p.sample.foo. Allocation administrators may set any owner. "Owner" means the ID that can change the ACLs for the volume, even if that ID is not on the ACL.
• "cron" — Create a new volume on a specific partition. Works like "create". Allocation administrators only.

AFS account operations

• "create" — Create an AFS account for a name, and the associated volume if it is a user volume. Use this if, for example, you did not receive an AFS account when your Kerberos account was created. You can only create an account that would belong to you.
• "define" — Define the account number without creating an AFS volume. Use it to create an AFS account for a principal (for example, joe.root) so that it can be added to an AFS ACL. You can only create an account that belongs to the identity under which you connect to Jeeves.

AFS allocation class operations

• "locate" — List the location of all partitions belonging to the named allocation class. Usable only by administrators for the allocation class.
• "examine" — Examine the status of a class, including:
  • The maximum quota a user may set for the class
  • The maximum quota an administrator may set
  • The list of partitions currently holding volumes of this class
• "quota" — Change the maximum quota that a user may set for a volume in this class. Available only to an allocation administrator.

Enter selection: ex P.sample

P.sample (Proj: Sample)
  Volume quota owner maximum: none, class maximum: none
  Total allocation: 2782839 (1200000,1582839, 0)
  Parent quota: 2000000, left: 417161, name: P
  Quota allocation by partition:
   180000 BAYBERRY.SRV.CS.CMU.EDU    /vicepb  [P]  *
80000 KUMQUAT.SRV.CS.CMU.EDU     /vicepi  [P]  *
   800000 LIME.SRV.CS.CMU.EDU        /vicepg  [P.sample]  *
   400000 LIME.SRV.CS.CMU.EDU        /vicepi  [P.sample]  *
  1272839 LIME.SRV.CS.CMU.EDU        /vicepd  [P]  *
50000 OLIVE.SRV.CS.CMU.EDU       /vicepc  [P]

"Total allocation"

Reports a number that is the sum of the three numbers that follow it. The first number is the sum of volume quotas on partitions in the class. The second is the sum of volume quotas on partitions in the parent class. The third is the sum of quotas for volumes which are on a random partition in neither the allocation class or its parent.

"Parent quota"

Reflects how much of the total quota volumes in the class are permitted to consume in parent partitions

The amount of space remaining to be allocated in this category.

Managing misc collections

Managing your misc volume quotas

• "change" — Alter the quota of a misc collection volume, up to a limit of 1GB per misc collection volume. For administrators only. Note: Jeeves cannot move a replicated volume when there is insufficient room to increase the quota.

Releasing a replicated volume

• "release" — Release a replicated volume. For administrators only. This operation updates the read-only replicas of the volume to match the contents of its read-write volume. Note however, that even after a read-only replica is updated, the AFS cache manager on individual workstations may take up to two hours to notice the new replica. A user on a workstation may issue the fs checkvolumes command there in order to force the cache manager to notice sooner if needed.

Creating an AFS volume for a new platform

• "create" — Create a new volume with the indicated quota and owner. For misc collection maintainers. Users can only create volumes that would belong to them and may only specify a default owner.

Kerberos-related functions

Creating new Kerberos instances

• "create" — Create new Kerberos instances in the form username.component. Multiple Kerberos instances allow different passwords for different situations. You can create the following instances:
  • ".mail" — Mail programs (especially on the Mac and PC) which do not support Kerberos authentication often use a protocol called POP3 to contact the remote server containing the incoming mail box. SCS POP3 servers use a ".mail" Kerberos instance for user verification. Thus your Kerberos password (which proves who you are for most other network services) need not be sent over the network in the clear in the fashion required by the POP3 protocol.
    Your .mail instance password must be different from your main, .root, and .misc passwords.
  • ".maildelivery" — Create this instance to be able to file mail directly into AFS directories.
  • ".root" — The common versions of the login and su programs available on all supported Unix/Linux platforms use this instance for verification when you try to log in as or become the Unix super-user. Your full user.root@CS.CMU.EDU instance must also appear in the "/.klogin.local" file on any machine where you are authorized to wield super-user privileges. Jeeves cannot update this file. It must be updated manually while already running with super-user privileges.
  • ".remote" — This password is used with the SCS VPN remote secure-access software
  • ".ftp" — Our FTP servers support connecting as user.ftp instead of user if you do not wish to expose your kerberos password while FTPing. On most Facilitized SCS Unix/Linux hosts, use of the .ftp instance instead of the kerberos password is required. Unlike using a local password, authentication to AFS is possible with this instance, which can be added to your AFS acls.
    Your .ftp instance password must be different from your main, .root, and .misc passwords.

Changing Kerberos passwords

• "password" — Change your Kerberos password. Follow the instructions for entering the principal name (your login ID) and the old and new passwords. You can change your .mail and .ftp instances while connected as your .main instance.

Other Kerberos-related functions

• "key" — Create an rcmd service key for a host. Needed to enable incoming Kerberos authenticated connections on a machine. Currently usable only by administrators. Supply it as input to the /usr/local/bin/ksrvhost program.
• "examine" — Examine the attributes of a Kerberos principal. You can only examine the attributes for your own principal.

Electronic mail functions

Note: With the introduction of the Corvid email system, this functionality is now duplicated on the Corvid attribute management page. You may prefer to use that form-based interface to the Jeeves command-line one.

Managing your master mail forwarding address

• "display" — Find a current mail forwarding address. Facilitized SCS Unix/Linux hosts run the MMDF mail system which provides a master mail forwarding address and ensures that mail sent to you on any machine will also be forwarded to a common mail box. This address is stored in a database known as the White Pages, which the mail system consults when delivering mail to any local address.
• "change" — Change your master mail forwarding address. This change will not become active in the White Pages until it is next regenerated. A complete regeneration cycle usually takes about 4 hours, though it could take twice this long for your address to change (if you make the change while a regeneration cycle is already in progress). During this time the pending mail forwarding address you just set through Jeeves will be different from your active mail forwarding address. You can always determine your currently active address (and monitor the progress of your address change) by running the program "/usr/local/bin/lookup."

If you make an error

Because of the long regeneration cycle, there is a builtin ten-minute delay before changes are allowed to trigger a new cycle. If you are alert, you can therefore correct errors before they appear in the White Pages. To avoid an erroneous White Pages address, be sure to double check when changing your mail forwarding address.

World Wide Web functions

Managing your http://www.cs.cmu.edu/~link

• "change" — Create or alter a symbolic link in /afs/cs.cmu.edu/Web/People
• "delete" — Delete link
• "examine" — Find out more about the link.

Since /afs/cs.cmu.edu/Web/People resides in a replicated AFS volume, changes to your link will not become active immediately on the SCS HTTP servers. Jeeves will initiate a replicate request for this volume soon (but not necessarily immediately) after making the change. Your change should become active within at most 2-3 hours.

CorporateTime calendar-server functions

From the main Jeeves menu, select . The calender menu offers two options:

• "create" — Create an account for yourself on the calendar server.
  1. The server will request a userid for the new account and offer your own as default. You needn't enter anything here; just hit RETURN
  2. At the next prompt, enter a new password and RETURN. For security reasons, this password must differ from both your Kerberos and Windows passwords. Your input will not echo, so if you make a mistake or simply wish to quit without proceeding, enter ^C RETURN
  3. The server will then ask you to confirm the password. Enter the same password, then RETURN. Please be patient while it creates your CorporateTime account. It will tell you when it's finished.
• "password" — Change your calendar-server password

Related documentation

Kerberos

Kerberos in SCS.

Passwords and encryption

Why we have various Kerberos instance passwords and alternatives.

Using FTP in SCS

How to use your ftp Kerberos instance

AFS

How to use AFS in SCS.