Re: [OpenAFS] Windows 2003 afs service keys info

2007-01-25 Thread John W. Sopko Jr.
Marc Dionne wrote: John W. Sopko Jr. wrote: Without more information I would only be speculating on how Microsoft intends one to use the setspn command. Having multiple service principles attached to a single account name is confusing. Nothing to do with AFS, but setspn is useful even in a

[OpenAFS] fs setacl and permissions

2007-01-25 Thread Juha Jäykkä
Hi! All the documentation I've encountered insists that the directory owner has implicit a permission to the directory. I know this no longer applies (as of 1.4.something, where something = 2, since 2 is what we use). While this probably should be reflected in the documentations, it makes me

Re: [OpenAFS] fs setacl and permissions

2007-01-25 Thread Christof Hanke
Juha Jäykkä wrote: Hi! as a member of system:adminstrators, do mkdir /afs/cell/dir mkdir /afs/cell/dir/dir2 fs setacl /afs/cell/dir user all as user, do fs setacl /afs/cell/dir/dir2 anyone anything to get fs: You don't have the required access rights on ... This is the expected

Re: [OpenAFS] fs setacl and permissions

2007-01-25 Thread Juha Jäykkä
as a member of system:adminstrators, do mkdir /afs/cell/dir mkdir /afs/cell/dir/dir2 fs setacl /afs/cell/dir user all as user, do fs setacl /afs/cell/dir/dir2 anyone anything to get fs: You don't have the required access rights on ... This is the expected behaviour,

Re: [OpenAFS] fs setacl and permissions

2007-01-25 Thread Christof Hanke
Juha Jäykkä schrieb: as a member of system:adminstrators, do mkdir /afs/cell/dir mkdir /afs/cell/dir/dir2 fs setacl /afs/cell/dir user all as user, do fs setacl /afs/cell/dir/dir2 anyone anything to get fs: You don't have the required access rights on ... This is the expected behaviour,

Re: [OpenAFS] fs setacl and permissions

2007-01-25 Thread Russ Allbery
Juha Jäykkä [EMAIL PROTECTED] writes: Perhaps the way to go is groups, although this situation would dictate groups with only a single member, but at least memberships can be given and taken easily without admin interference. All other situations, groups are easier anyway since there are

[OpenAFS] 'pts' core dumps, Solaris 5.9, OAFS 1.4.2

2007-01-25 Thread Kim Kimball
Has anyone else seen this behavior: bash-2.05$ pts mem kim:foobar Members of kim:foobar (id: -152687) are: bash-2.05$ pts rename kim:foobar kim:boofar Segmentation Fault (core dumped) bash-2.05$ bash-2.05$ pts chown kim:foobar kkadmin Segmentation Fault (core dumped) bash-2.05$ Kim

Re: [OpenAFS] 'pts' core dumps, Solaris 5.9, OAFS 1.4.2

2007-01-25 Thread Kevin Hildebrand
Yes, I submitted a patch for this a while back, it's in the CVS head - look for changes to src/ptserver/ptuser.c. Kevin Hildebrand University of Maryland, College Park On Thu, 25 Jan 2007, Kim Kimball wrote: Has anyone else seen this behavior: bash-2.05$ pts mem kim:foobar Members of

Re: [OpenAFS] 'pts' core dumps, Solaris 5.9, OAFS 1.4.2

2007-01-25 Thread Jeff Blaine
* pts chown and rename crashes have been fixed. https://lists.openafs.org/pipermail/openafs-announce/2007/000180.html Kim Kimball wrote: Has anyone else seen this behavior: bash-2.05$ pts mem kim:foobar Members of kim:foobar (id: -152687) are: bash-2.05$ pts rename kim:foobar kim:boofar

Re: [OpenAFS] 'pts' core dumps, Solaris 5.9, OAFS 1.4.2

2007-01-25 Thread Jeff Blaine
An afterthought... This truly does concern me. How does a production/stable release make it out with pts commands coredumping? Is there a testing framework in place? Maybe it just doesn't go this deep? :( ___ OpenAFS-info mailing list

[OpenAFS] ssh and GSSAPI doesn't work

2007-01-25 Thread Massimiliano Masi
Hi all, I would like to use GSSAPIAuthentication with ssh-krb5 package on debian. The ssh server does the work, but, my problem is that I cannot get neither the kerberos tgt neither the afs token when I login: [EMAIL PROTECTED] ~ $ klist Ticket cache: FILE:/tmp/krb5cc_1112_19O8Ft Default

Re: [OpenAFS] Symantec Support for AFS Backups

2007-01-25 Thread Anne . Salemme
we got a note from symantec as well...we use afs and netbackup for general backups here (the northstar afs cell is just a small part of the stuff that gets backed up) and we have our homegrown scripts to get the data ready for netbackup. if we hear anything interesting from symantec,

[OpenAFS] Re: Is OpenAFS the right solution for this?

2007-01-25 Thread Joe Buehler
Oh one more thing to add, we are going to turn the current 16 drive raid into two replicated 8 drive raids using DRBD to replicate between the new fileserver' and a live spare. Not sure if that will make a difference. I am thinking that part should work fine regardless of which of the 3

Re: [OpenAFS] Is OpenAFS the right solution for this?

2007-01-25 Thread Dave COTTLE
Christopher D. Clausen wrote: Brandon Lamb [EMAIL PROTECTED] wrote: Now what I am trying to figure out, is should I use openafs or gfs to replace NFS? GFS was sounding cool as I read that using iscsi to connect the partition on the raid at a block level could be 10 times faster than NFS. But

Re: [OpenAFS] 'pts' core dumps, Solaris 5.9, OAFS 1.4.2

2007-01-25 Thread Jeffrey Altman
Jeff Blaine wrote: An afterthought... This truly does concern me. How does a production/stable release make it out with pts commands coredumping? Is there a testing framework in place? Maybe it just doesn't go this deep? :( We do not have a test framework that can test every command.

Re: [OpenAFS] ssh and GSSAPI doesn't work

2007-01-25 Thread Simon Wilkinson
On 18 Jan 2007, at 21:29, Massimiliano Masi wrote: Hi all, I would like to use GSSAPIAuthentication with ssh-krb5 package on debian. Firstly, you need to have credential delegation enabled. You need GSSAPIDelegateCredentials yes in the client configuration file, or the client command

Re: [OpenAFS] ssh and GSSAPI doesn't work

2007-01-25 Thread Douglas E. Engert
Massimiliano Masi wrote: Hi all, I would like to use GSSAPIAuthentication with ssh-krb5 package on debian. You need too delegate as well. So the client needs GSSAPIDelegateCredentials yes The ssh server does the work, but, my problem is that I cannot get neither the kerberos tgt