UNLOG(1)
π UNLOG β bestie, it's time to log OUT
okay so, welcome to unlog(1) from the AFS Command Reference β¨ this is the little command that says "bye tokens, we're done here" β let's get into it π«Ά
πΈ NAME
unlog β discards all of the issuer's tokens π
β¨ SYNOPSIS
unlog [-cell <cell name>+] [-help]
unlog [-c <cell name>+] [-h]
π¦ DESCRIPTION
So here's the vibe: by default, unlog throws away every single token the issuer is currently holding. All of them. Gone. Bye π
But if you only want to nuke tokens for certain cells and leave the rest alone? Just name those cells with the -cell argument. That's it, that's the whole thing πββοΈ
And here's a lil fact that matters: a token belongs to one client machine only. So destroying tokens on one machine has no effect on tokens sitting on another machine. They don't share, they don't gossip, nothing π§
β οΈ CAUTIONS β read this one, fr fr
Specifying one or more cell names can cause a brief authentication outage during which the issuer has no valid tokens in any cell. Not dramatic for no reason β here's why it happens: the command actually discards all tokens first and then restores the ones for cells you didn't name with -cell. So there's a tiny window where you're token-less everywhere π
And that outage can sometimes interrupt the operation of jobs that require authentication. So likeβ¦ maybe don't run this mid-important-job, bestie π
π OPTIONS
-cell <cell name>+β specifies each cell for to discard the token π If you leave this argument out entirely, the Cache Manager discards all tokens. You can give the fully qualified domain name, or a shortened form β but heads up: if you go short, whether it resolves successfully depends on whether a name resolution service is available at the time the command is issued (think Domain Name Service, or a local host table) β¨-helpβ prints the online help for this command π All other valid options are ignored. It's help mode, nothing else gets a say.
π EXAMPLES
This one discards all the tokens. Every last one, no survivors:
% unlog
And this one discards only the tokens for the "prod.example.com" and "testcell.example.org" cells β everything else stays safe and sound π«Ά
% unlog -cell prod.example.com testcell
π PRIVILEGE REQUIRED
None π you don't need any special powers for this one, main character energy comes free
π SEE ALSO
π COPYRIGHT
IBM Corporation 2000. <http://www.ibm.com/> All Rights Reserved.
This documentation is covered by the IBM Public License Version 1.0. It was converted from HTML to POD by software written by Chas Williams and Russ Allbery, based on work by Alf Wachsmann and Elizabeth Cassell.
and that's the whole page, bestie π
this was OpenAFS, dated 2026-07-27, filed under UNLOG(1) β now go forth and discard those tokens responsibly π¦β
π¦ where this page comes from
- ubuntu stonking: openafs-client 1.8.16.1-1
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms