Re: [OpenAFS] Re: AFS Perl Modules and Ubuntu

2014-09-11 Thread Russ Allbery
of the very broken AFS.pm distribution. Already did that. AFS::PAG in CPAN. :) So that plus your module should be a complete solution. -- Russ Allbery (ea...@eyrie.org) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS

Re: [OpenAFS] Re: AFS Perl Modules and Ubuntu

2014-09-11 Thread Russ Allbery
Phillip Moore w.phillip.mo...@gmail.com writes: Oh, wow... I had totally forgotten they were separate. I'm getting old... They weren't until I wrote a separate AFS::PAG. :) AFS::Utils provides setpag, but that's from the AFS Perl module. -- Russ Allbery (ea...@eyrie.org

Re: [OpenAFS] Re: AFS Perl Modules and Ubuntu

2014-09-05 Thread Russ Allbery
the software that used them to parse command-line output instead. They should work again once OpenAFS is 100% pthreads, but as long as they require linking LWP code and pthread code together, they're probably not going to work. -- Russ Allbery (ea...@eyrie.org) http://www.eyrie.org/~eagle

Re: [OpenAFS] Accessing data without network

2014-08-17 Thread Russ Allbery
the server. -- Russ Allbery (ea...@eyrie.org) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Re: Authentication without aklog

2014-08-01 Thread Russ Allbery
pam-afs-session exists is to create the PAG. If all one had to do was run aklog during login, one could just use pam_exec; there would be no need for a separate module. The PAG management is the hard part. -- Russ Allbery (ea...@eyrie.org) http://www.eyrie.org/~eagle

Re: [OpenAFS] OpenAFS 1.6.9 and AES tickets

2014-07-31 Thread Russ Allbery
. -- Russ Allbery (ea...@eyrie.org) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Apache2 and openafs

2014-07-08 Thread Russ Allbery
Note that you don't need to mess with pagsh if you tell Apache not to background itself and then use k5start to run it. The page predates that capability in k5start. -- Russ Allbery (ea...@eyrie.org) http://www.eyrie.org/~eagle/ ___ OpenAFS

Re: [OpenAFS] Apache2 and openafs

2014-07-08 Thread Russ Allbery
environment where we just use straight suexec to switch user IDs and each user ID has a token outside of a PAG.) -- Russ Allbery (ea...@eyrie.org) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https

Re: [OpenAFS] Re: OpenAFS kernel module compilation problems

2014-06-29 Thread Russ Allbery
pulled up kernel support patches in the past, for all of the 1.6 versions I've been able to just package the new upstream version except for a few cases with security patches. So the Debian packages should match the upstream kernel support. -- Russ Allbery (ea...@eyrie.org) http

Re: [OpenAFS] OpenAFS kernel module compilation problems

2014-06-28 Thread Russ Allbery
. (Or use testing or unstable.) -- Russ Allbery (ea...@eyrie.org) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Re: additional OpenAFS 1.6.9 binaries available

2014-06-18 Thread Russ Allbery
to maintain the Debian packages this way, so I think this is a good decision and will make things somewhat easier for the people doing the packaging. -- Russ Allbery (ea...@eyrie.org) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list

Re: [OpenAFS] Windows app to recursively apply ACLs - AFSACL

2014-05-09 Thread Russ Allbery
of afs-admin-tools: http://www.eyrie.org/~eagle/software/afs-admin-tools/ That might be worth looking at as an example for some approaches to some of these problems, although of course it doesn't follow Windows semantics. -- Russ Allbery (ea...@eyrie.org) http://www.eyrie.org

[OpenAFS] Re: [OpenAFS-announce] OpenAFS 1.6.7 release available

2014-04-09 Thread Russ Allbery
of the patch. -- Russ Allbery (ea...@eyrie.org) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Pre-built packages: build options?

2014-04-09 Thread Russ Allbery
to force use of hardening flags since the OpenAFS build system makes it impossible to override compiler flags. -- Russ Allbery (ea...@eyrie.org) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https

Re: [OpenAFS] Linux OpenAFS EncFS?

2014-02-20 Thread Russ Allbery
. -- Russ Allbery (ea...@eyrie.org) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Linux OpenAFS EncFS?

2014-02-20 Thread Russ Allbery
code? This idea has a lot of promise, but wouldn't an even better idea be to fund the project with gold acquired from the greys that you're in contact with? They can bring new resources from outside the solar system, which avoids a closed economic model. -- Russ Allbery (ea...@eyrie.org

Re: [OpenAFS] Linux OpenAFS EncFS?

2014-02-17 Thread Russ Allbery
for each of those three people. That's not out of the realm of possibility. We've collectively spent far more than that on the rxgk specification, although I suspect much of that time was uncompensated or written off as some variety of overhead by a lot of different institutions. -- Russ Allbery (ea

Re: [OpenAFS] Re: module compilation problem against kernel 3.6.12 in release 1.6.5.2

2014-01-15 Thread Russ Allbery
-releases. I'll backport 1.6.6 as soon as it's final and has migrated to testing. -- Russ Allbery (ea...@eyrie.org) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo

Re: [OpenAFS] module compilation problem against kernel 3.6.12 in release 1.6.5.2

2014-01-14 Thread Russ Allbery
or later for 3.6.12. -- Russ Allbery (ea...@eyrie.org) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] OpenAFS with future Linux kernel 3.13

2013-12-11 Thread Russ Allbery
(or pre2 if it's out) for Debian, but I'm not sure yet when I'll get to it. Not that this helps a great deal for stable, since I won't do the backport until 1.6.6 final is out. -- Russ Allbery (ea...@eyrie.org) http://www.eyrie.org/~eagle

Re: [OpenAFS] Re: How to remove a bogus (127.0.1.1) server entry for readonly?

2013-12-10 Thread Russ Allbery
that Linux distributions doing this is utterly brain-dead? No. I always argue vigorously against doing this sort of nonsense in Debian. -- Russ Allbery (ea...@eyrie.org) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info

Re: [OpenAFS] Help migrating to ubuntu from Solaris

2013-11-07 Thread Russ Allbery
Thu Nov 7 14:54:35 2013: Listening on 0.0.0.0:7007 [Is this a problem? 0.0.0.0 ??] That just means all addresses. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https

Re: [OpenAFS] ZFS-on-Linux on production fileservers?

2013-10-06 Thread Russ Allbery
find DKMS painful is the issue of repeatable builds. Same solution there. :) -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo

Re: [OpenAFS] Update squeeze openafs-fileserver to squeeze-backports

2013-10-04 Thread Russ Allbery
. On the other hand, I can't figure out why that read would fail when there's no trailing newline (it doesn't for me with either bash or dash). -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info

Re: [OpenAFS] Re: Update squeeze openafs-fileserver to squeeze-backports

2013-10-04 Thread Russ Allbery
Andrew Deason adea...@sinenomine.net writes: Russ Allbery r...@stanford.edu wrote: Well, the comment indicates that I knew about this problem at some point, but I see no sign of actually doing what the comment says it should be doing. On the other hand, I can't figure out why that read

Re: [OpenAFS] Re: Update squeeze openafs-fileserver to squeeze-backports

2013-10-03 Thread Russ Allbery
/alternatives/klog /etc/alternatives/klog.1.gz might be useful. In particular, if you have an actual binary instead of a symlink installed as /usr/bin/klog, bad things will happen (although I would have expected some sort of error message). -- Russ Allbery (r...@stanford.edu) http

Re: [OpenAFS] Re: Update squeeze openafs-fileserver to squeeze-backports

2013-10-03 Thread Russ Allbery
configuration that was triggering a bug in the postinst. Unfortunately, I'm not sure what. :/ -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org

Re: [OpenAFS] Re: Update squeeze openafs-fileserver to squeeze-backports

2013-10-03 Thread Russ Allbery
(ask Russ or some other list, or file a bug with debconf). set -x doesn't follow shell scripts through debconf because debconf does some black magic to reinvoke the script. It's one of the things that makes debugging postinst scripts so interesting. -- Russ Allbery (r...@stanford.edu

Re: [OpenAFS] Re: Update squeeze openafs-fileserver to squeeze-backports

2013-10-03 Thread Russ Allbery
I bet the -x output ends up still happening, but going off into some other file descriptor where it gets ignored. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https

Re: [OpenAFS] Re: Update squeeze openafs-fileserver to squeeze-backports

2013-10-03 Thread Russ Allbery
shell script that uses debconf (in other words, this is not specific to OpenAFS and has been an issue for a long time), so there's something that debconf is doing that prevents it from working, but I don't know exactly what. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle

Re: [OpenAFS] Re: Moving Magic Trio to another domain

2013-09-24 Thread Russ Allbery
directly, if you put it in /usr/afs/etc/rxkad.keytab, or whatever the equivalent is on Ubuntu. /etc/openafs/server/rxkad.keytab -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info

Re: [OpenAFS] Re: Naming of backup and up commands

2013-09-23 Thread Russ Allbery
Andrew Deason adea...@sinenomine.net writes: Russ Allbery r...@stanford.edu wrote: What would people think if I submitted a patch to OpenAFS to rename up to afs-up and backup to afs-backup? Would that break a bunch of critical software? It would be really nice to fix AFS's camping

Re: [OpenAFS] Naming of backup and up commands

2013-09-23 Thread Russ Allbery
Brandon Allbery ballb...@sinenomine.net writes: On 9/22/13 20:51, Russ Allbery r...@stanford.edu wrote: Failing that, I'm probably going to split butc, backup, and fms into a separate package to make it easier for other packages to conflict with it due to the poorly-chosen command name

Re: [OpenAFS release-team] Re: [OpenAFS] Re: Naming of backup and up commands

2013-09-23 Thread Russ Allbery
have now gone away, actually. See also klog.afs and klog.krb5. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

[OpenAFS] Naming of backup and up commands

2013-09-22 Thread Russ Allbery
probably going to split butc, backup, and fms into a separate package to make it easier for other packages to conflict with it due to the poorly-chosen command name instead of conflicting with all of openafs-client. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle

Re: [OpenAFS] Re: Moving Magic Trio to another domain

2013-09-22 Thread Russ Allbery
find any documentation of exactly how to do it. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Re: afs/cell transition procedure

2013-09-12 Thread Russ Allbery
as a system that you can run a server on. (I think people have gotten it to work, but it isn't exactly recommended.) -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https

Re: [OpenAFS] Re: fileserver process eat CPU

2013-09-10 Thread Russ Allbery
but not for the file servers. I fixed it for the VLDB servers in 1.6.3-1. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Re: fileserver process eat CPU

2013-09-10 Thread Russ Allbery
+dfsg-4+squeeze2)? If you are, I would strongly recommend upgrading to the version from squeeze-backports, which in our experience is better in basically every respect. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle

Re: [OpenAFS] Re: git.openafs.org RSS/Atom feeds broken?

2013-09-04 Thread Russ Allbery
will cause problems with a lot of aggregators, since pubdate is what's used to decide whether an entry is new and should be aggregated. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info

Re: [OpenAFS] building swig based interfaces

2013-09-01 Thread Russ Allbery
quality of the end result below where it could be, and it will be impossible to achieve the best quality without mostly throwing things out and starting again from scratch without SWIG. It may still be the expedient approach, but it's an inherent limitation. -- Russ Allbery (r...@stanford.edu

Re: [OpenAFS] building swig based interfaces

2013-09-01 Thread Russ Allbery
you won't get from SWIG except in some simple cases. But it's only satisfying if someone actually does that. :) SWIG tends to be a lot faster to get started with. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS

Re: [OpenAFS] How can I create new pag for a process whose euid doesn't equal to ruid under keyring setttings?

2013-09-01 Thread Russ Allbery
in the parent process using the k_setpag() function provided by libkafs or libkopenafs. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman

Re: [OpenAFS] Where is krb_afslog_uid?

2013-09-01 Thread Russ Allbery
about as well. It does mean a fork, and you have to be careful about your Kerberos ticket cache to make sure aklog can read it, but it lets aklog do all of its magic (including rxkad-kdf support, which Heimdal doesn't have yet). -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org

Re: [OpenAFS] Re: Investigating 'calls waiting' from rxdebug

2013-08-16 Thread Russ Allbery
into any lags at all, even while the calls-waiting counter was very high. If the above is correct, there was probably one specific volume that was causing contention; the others, as long as callbacks could be broken, would move easily. -- Russ Allbery (r...@stanford.edu) http

Re: [OpenAFS] Re: Investigating 'calls waiting' from rxdebug

2013-08-16 Thread Russ Allbery
only increased the number of threads from absurdly inadequate to merely ridiculously underpowered. -L in 1.6 uses a far more reasonably-sized thread pool. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing

Re: [OpenAFS] Re: Heimdal KDC bug mentioned in rekeying document

2013-08-08 Thread Russ Allbery
. If not, is has been fixed somewhere in the chain kadmin-kadmind-ipropd-master-ipropd-slave. Oh, okay. Thanks for the information; I'll watch out for that. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info

Re: [OpenAFS] Re: Heimdal KDC bug mentioned in rekeying document

2013-08-07 Thread Russ Allbery
+dfsg1-3, and having no trouble. Or maybe it's another patch in the Heimdal 1.5 branch that's at fault? -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https

Re: [OpenAFS] Re: Heimdal KDC bug mentioned in rekeying document

2013-08-06 Thread Russ Allbery
of this is my work; it's from KTH and from Jeffrey and Nico. You need basically all of this, I think. I tried to leave off some stuff that didn't seem relevant to a site with allow-weak-crypto = true, and it still didn't work. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle

[OpenAFS] mod_waklog and rxkad-kdf

2013-08-06 Thread Russ Allbery
to Jeffrey Altman for the core code change of this patch. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ diff --git a/Makefile.am b/Makefile.am index 932b17b..9a91c86 100644 --- a/Makefile.am +++ b/Makefile.am @@ -3,8 +3,7 @@ all: mod_waklog.so APXS = @APXS@ INCLUDES

Re: [OpenAFS] mod_waklog and rxkad-kdf

2013-08-06 Thread Russ Allbery
Dave Botsch bot...@cnf.cornell.edu writes: doesn't know to request only DES session keys for AFS service tickets And if we turn off DES support completely? Yes, indeed. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle

Re: [OpenAFS] mod_waklog and rxkad-kdf

2013-08-06 Thread Russ Allbery
Dave B bot...@cnf.cornell.edu writes: would you please clarify what yes, indeed means? Oh, sorry. Yes, you have to use rxkad-kdf and hence need this patch if you want to turn off DES support entirely in your Kerberos KDC. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org

Re: [OpenAFS] Re: scan client version

2013-08-01 Thread Russ Allbery
you can throw the global allow-weak-crypto switch on your KDC. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Heimdal KDC bug mentioned in rekeying document

2013-07-26 Thread Russ Allbery
/* principal, doesn't that result in using a DES long-term key, thus making the update mostly pointless? -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org

Re: [OpenAFS] Re: Heimdal KDC bug mentioned in rekeying document

2013-07-26 Thread Russ Allbery
Andrew Deason adea...@sinenomine.net writes: Russ Allbery r...@stanford.edu wrote: svc-use-strongest-session-key looks like it still tries to find something in the common subset of supported keys between the client and server, and legacy aklog sends only des-cbc-crc as its supported keys. So

Re: [OpenAFS] Re: Heimdal KDC bug mentioned in rekeying document

2013-07-25 Thread Russ Allbery
service principal does not have that enctype? That's correct. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] How can I get PAG number of a certain process programmically?

2013-07-23 Thread Russ Allbery
; } printf(PAG number is: %lu\n, (unsigned long) pag); return 0; } -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo

Re: [OpenAFS] Re: How can I get PAG number of a certain process programmically?

2013-07-23 Thread Russ Allbery
Andrew Deason adea...@sinenomine.net writes: Link this with -lafsauthent -lafsrpc, I believe. Yeah, sorry. Or use the k_pioctl function from kopenafs.h, and link with -lkopenafs. Yes, that also works, although you still need some of the same headers to get the VIOC_* definition. -- Russ

Re: [OpenAFS] Openafs 1.6.4 Release

2013-07-02 Thread Russ Allbery
packages based on it to Debian, for example). -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Windows 8.1, SkyDrive and Roaming Profiles

2013-07-01 Thread Russ Allbery
server would also have to be able to store the reparse point. Think of it as akin to a UNIX device file. So this means new data structures available inside AFS volumes, which has rather wide-ranging implementation effects. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle

Re: [OpenAFS] getting (re)started on debian

2013-05-24 Thread Russ Allbery
. Most of the remaining reasons are fairly obscure and are related to our desire to customize the KDC code rather than run a stock KDC.) -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS

Re: [OpenAFS] Strange token issues

2013-04-29 Thread Russ Allbery
of kernel keyrings, and that will prevent credentials from being stored. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Strange token issues

2013-04-29 Thread Russ Allbery
even with a substantial increase, assuming this is the issue? We haven't had any problem after setting it to 5000. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https

Re: [OpenAFS] Moving Authen Servers to different IP addresses

2013-04-22 Thread Russ Allbery
the startup behavior is correct (anything you do with fs newcell will vanish on reboot). We did this a long time ago using strategy one. It took a while, but it wasn't too bad. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle

Re: [OpenAFS] Moving Authen Servers to different IP addresses

2013-04-22 Thread Russ Allbery
; if you have working network, you're unlikely to notice. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Moving Authen Servers to different IP addresses

2013-04-22 Thread Russ Allbery
to AFS (volume releases, moves, PTS group changes, etc.). If so should the network IP address ranges for my other new DB servers be higher than the current Ubik master? I would recommend it if you can. It will make the migration smoother. -- Russ Allbery (r...@stanford.edu) http

Re: [OpenAFS] Upgrading

2013-04-04 Thread Russ Allbery
-headers-486 if you're just using the tracking kernel package). Just do that before the first upgrade and DKMS will build new kernel modules for you. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing

Re: [OpenAFS] Failed to create inode: errno = 22

2013-04-01 Thread Russ Allbery
with names that are longer than 15 octets. Each additional block provides an additional length of 32 octets for the name of the entry. Note that if file names use an encoding like UTF-8, a single character may be encoded into multiple octets. -- Russ Allbery (r...@stanford.edu

Re: [OpenAFS] Failed to create inode: errno = 22

2013-04-01 Thread Russ Allbery
of inodes in the file system on the AFS file server? -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Re: 1.6.2 compilation notes, Sol10

2013-03-28 Thread Russ Allbery
if we care for any of the code that's in OpenAFS. The MIT manual probing does check for -lpthreads and -lpthread because MIT needed that in some cases, but I don't know if just linking and not using -pthread is sufficient on all platforms. -- Russ Allbery (r...@stanford.edu) http

Re: [OpenAFS] Re: 1.6.2 compilation notes, Sol10

2013-03-28 Thread Russ Allbery
. This would be robust against future changes to krb5-config. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Re: 1.6.2 compilation notes, Sol10

2013-03-28 Thread Russ Allbery
assume from your other email you want this in OpenAFS and not rra-c-util. No, regardless of the underlying issue, the current manual library probing for Heimdal libraries in rra-c-util is broken, and I'm happy to fix that in rra-c-util by probing for the additional libraries. -- Russ Allbery (r

Re: [OpenAFS] Re: 1.6.2 compilation notes, Sol10

2013-03-28 Thread Russ Allbery
on their system? (As some places seem to recommend.) Debian has a general practice of not installing *.la files because of issues like this. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info

Re: [OpenAFS] Re: KDE 4.8 - files 9 GB - problem

2013-03-27 Thread Russ Allbery
and gatekeepers. But I'm happy to pull up anything that's merged onto the stable branch that fixes a bug someone cares about, even if it's not in a stable release yet. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info

Re: [OpenAFS] Run file server without client?

2013-03-26 Thread Russ Allbery
if we have to. It's hard to introduce dependencies when you go through a proper packaging process, and nearly impossible when you use package checking tools to double-check. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle

Re: [OpenAFS] Run file server without client?

2013-03-26 Thread Russ Allbery
. It makes me think that the unified startup script should finally be split into a client and server script. Debian has ~always had separate client and server init scripts. I certainly recommend that. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle

Re: [OpenAFS] Run file server without client?

2013-03-25 Thread Russ Allbery
dependencies on AFS (for all services) by just being careful. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Re: 1.6.2 compilation notes, Sol10

2013-03-16 Thread Russ Allbery
appears to ignore KRB5_CPPFLAGS. It's set by the configure probes, but, as near as I can tell, the rest of the make infrastructure then just discards it and never uses it. I'm not sure if that's all of your problem, but it definitely isn't going to help. -- Russ Allbery (r...@stanford.edu

Re: [OpenAFS] Re: 1.6.2 compilation notes, Sol10

2013-03-16 Thread Russ Allbery
Russ Allbery r...@stanford.edu writes: Måns Nilsson mansa...@besserwisser.org writes: Didn't get it right, anyway: ./configure --disable-kernel-module \ --prefix=/opt/openafs \ --exec-prefix=/opt/openafs-162 \ PATH_KRB5_CONFIG=/usr/heimdal/bin/krb5-config \ CC=/opt

Re: [OpenAFS] Re: 1.6.2 compilation notes, Sol10

2013-03-16 Thread Russ Allbery
Russ Allbery r...@stanford.edu writes: The basic problem that you're having is that you aren't getting -lasn1 and -lhcrypto (at least). During the configure run, do you see a line that says checking for --deps support in krb5-config? Heimdal's krb5-config only outputs the full set

Re: [OpenAFS] Strange caching failures

2013-02-28 Thread Russ Allbery
A block for a few seconds? -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Volume type mapping to certain partitions

2013-01-15 Thread Russ Allbery
, capacity, etc)? Nothing. We do this because that's *not* the case; we put some volume types on slower servers with crappy storage. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info

Re: [OpenAFS] Supergroups enabled by default in openafs 1.6.1 rpm packages?

2012-12-20 Thread Russ Allbery
Michael Meffie mmef...@sinenomine.net writes: Staffan Hämälä s...@ltu.se wrote: On 2012-12-14 19:02, Russ Allbery wrote: don't think the code quality is high enough in stable to be comfortable with it, but once it's been enabled, turning it off again is a bad idea. Ok. So, what if you used

Re: [OpenAFS] Supergroups enabled by default in openafs 1.6.1 rpm packages?

2012-12-14 Thread Russ Allbery
enabled, turning it off again is a bad idea. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] security of virtual web servers on afs

2012-12-12 Thread Russ Allbery
probably need to fiddle with it to get it to work elsewhere. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Graphical file managers get stuck

2012-12-11 Thread Russ Allbery
issue, I think, but only relevant to database servers which need to know about each other. Client CellServDB will always be useful in situations where you don't want AFS to be unavailable when the DNS servers are broken. An example would be if you use AFS to distribute DNS zone files -- Russ

Re: [OpenAFS] managing BosConfig in Puppet

2012-11-17 Thread Russ Allbery
Jeff Blaine jbla...@kickflop.net writes: On 11/16/2012 6:23 PM, Russ Allbery wrote: Puppet is primarily a tool for deploying the initial version of the file. I disagree. Perhaps I misunderstand you, but using puppet like scp is missing the point really. I meant only in the context of how we

Re: [OpenAFS] managing BosConfig in Puppet

2012-11-16 Thread Russ Allbery
for me here. We just overwrite the current BosConfig file on the system and then manually restart bos (outside of Puppet) to make the changes effective. That works for us, since we rarely (if ever) change BosConfig. Puppet is primarily a tool for deploying the initial version of the file. -- Russ

Re: [OpenAFS] managing BosConfig in Puppet

2012-11-16 Thread Russ Allbery
resource to avoid any accidental changes to current production servers? Hm, yeah, probably, although we don't. :) -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https

Re: [OpenAFS] OpenAFS wiki organization

2012-11-01 Thread Russ Allbery
. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] OpenAFS wiki organization

2012-11-01 Thread Russ Allbery
things are moved). -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Problems in openafs paradise.

2012-10-17 Thread Russ Allbery
John Tobin jto...@po-box.esu.edu writes: I assume it would be easiest to use Russ Allbery¹s ³pam-afs-server2.5 code, so I downloaded that config¹d it, ran make, check, and make install. The documentation is about debian, and Red Hat, any hints on SUSE? I assume you mean pam-afs-session

Re: [OpenAFS] Re: Failure to build OpenAFS 1.6.1a

2012-10-09 Thread Russ Allbery
actually impossible to specify exactly the libraries you want. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Re: Failure to build OpenAFS 1.6.1a

2012-10-09 Thread Russ Allbery
in place for GSS-API header detection for jhutz in remctl that may be relevant to Kerberos libraries as well and may address this issue. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS

Re: [OpenAFS] Re: Failure to build OpenAFS 1.6.1a

2012-10-09 Thread Russ Allbery
kerberos but need to link in something which influences the linker arguments. (or possibly the cflags but i think we're already sufficiently careful about that anywhere where it's likely to happen) Ah, yes, this is the problem I was talking about with -L and -l ordering. -- Russ Allbery (r

Re: [OpenAFS] Re: Failure to build OpenAFS 1.6.1a

2012-10-09 Thread Russ Allbery
Derrick Brashear sha...@gmail.com writes: On Tue, Oct 9, 2012 at 4:25 PM, Russ Allbery r...@stanford.edu wrote: Derrick Brashear sha...@gmail.com writes: If you install macports, pkg-config is on your path, and configure finds fuse there, and heimdal is installed in macports, but krb5-config

Re: [OpenAFS] is YFS a derived work -- raise funds for legal opinion

2012-10-02 Thread Russ Allbery
something with OpenAFS should seek their own legal counsel about the exact ramifications of the license, but there's nothing here that's particularly interesting or unusual from an open source license perspective. It's a fairly mainstream license with fairly mainstream implications. -- Russ

Re: [OpenAFS] Funding the formation of an OpenAFS Foundation

2012-10-01 Thread Russ Allbery
. And I also apologize for letting my previous messages get too personal and for not separating person from writing very well. -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info

Re: [OpenAFS] the future

2012-10-01 Thread Russ Allbery
the general public *does* have a say.) -- Russ Allbery (r...@stanford.edu) http://www.eyrie.org/~eagle/ ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Funding the formation of an OpenAFS Foundation

2012-09-28 Thread Russ Allbery
different. But it's far from clear to me that this is the case. Most of the problems that people want to solve by breaking backward compatibility probably shouldn't be solved that way for reasons entirely separate from IBM's concerns. -- Russ Allbery (r...@stanford.edu) http

  1   2   3   4   5   6   7   8   9   10   >