FS_NUKENFSCREDS(1)

💅 FS_NUKENFSCREDS(1) — the AFS Command Reference glow-up

okay bestie so this is fs_nukenfscreds, straight outta the AFS Command Reference, and it's literally the "yeet that host's creds into the sun" command 🗑️✨

---

🌸 NAME 🌸

fs_nukenfscreds — discard NFS translator tokens. that's it, that's the whole vibe. bye-bye tokens 🫶

---

🎀 SYNOPSIS 🎀

fs nukenfscreds -addr <host>
    [-help]

fs nu -a <host>
    [-h]

---

✨ DESCRIPTION ✨

okay so picture this: you're using the NFS translator, right? and it's totally possible for clients to hand over AFS tokens that the translator will then use for NFS-originating accesses coming from one specific host and uid. that's just how it works bestie 💖

so fs nukenfscreds, when you run it on the translator host, will destroy all tokens for all uids for one specific NFS client host. like, every single one. not a drill 🔥

and the way that it works — after this command runs successfully, all accesses for all users from that host will be unauthenticated until they go and provide AFS tokens again. no tokens, no service, periodt 😌

now here's the scenario where this is actually iconic. say you've got an NFS client machine hitting a translator, and then the machine gets decommissioned, and a brand new machine gets brought up with the same IP. if there are credentials associated with certain uids from that host, it's possible that accesses from the new host will just… use the same credentials from the old host? even if they haven't authenticated?? 😭 lowkey cursed ngl

with the fs_nukenfscreds command, you can destroy all credentials associated with the machine when it's decommissioned, ensuring that that situation cannot occur. vibes secured 👑

---

💅 OPTIONS 💅

• -addr <host> — specifies which host to invalidate tokens for. give it either a resolvable host name or an IP address, your call 💁♀️
• -help — prints the online help for this command. and heads up: all other valid options are ignored when you do this. it's giving "help mode only" 🙈

---

🌈 OUTPUT 🌈

if the specified tokens were destroyed successfully? no output is generated. silent. stealthy. iconic. 🤫✨

---

🦋 EXAMPLES 🦋

here's the moment: destroying credentials from all PAGs for the NFS translator client host 198.51.100.20 🎯

% fs nukenfscreds -addr 198.51.100.20

clean. simple. ate 💅

---

👑 PRIVILEGE REQUIRED 👑

the issuer must be logged in as the local superuser root. no root, no nuke. sorry bestie, that's the rule 🚫

---

🔥 SEE ALSO 🔥

fs_exportafs(1), klog(1), knfs(1) — go read these next, iykyk 💜

---

📜 COPYRIGHT 📜

Copyright 2013 Sine Nomine Associates

This documentation is covered by the BSD License as written in the doc/LICENSE file. This man page was written by Andrew Deason for OpenAFS.

---

and that's a wrap, babe 🫶 this page came to you from OpenAFS, dated 2026-07-27, and yes it's literally titled FS_NUKENFSCREDS(1) — go forth and nuke some creds responsibly, mwah 💖✨🎀