Re: [OpenAFS] 'afs' principal

2007-10-30 Thread Jeff Blaine
The concepts. The mechanics I can follow (and have). I just think it would be great to have a very clear description of what those few steps are all about (for my documentation which I intend to make as clear as possible for everyone and share). Ken Hornstein wrote: Something I've never been

Re: [OpenAFS] 'afs' principal

2007-10-30 Thread Jeff Blaine
The exact clarity of explanation I was looking for. For some reason my ignorance of the keytab format compatibility issue was making things pretty muddled. I was sure something more special was going on. Thanks all. Jeffrey Altman wrote: Jason Edgecombe wrote: Jeff Blaine wrote: Something

[OpenAFS] Mac OS X + aklog integration

2007-10-31 Thread Jeff Blaine
I don't see a native way to run aklog once krb5 creds are acquired. Is that true? Any implementation tips would be great to hear. ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

[OpenAFS] CVS, GSSAPI, and AFS tokens

2007-11-07 Thread Jeff Blaine
How are people handling krb5 auth with CVS and also getting tokens for gserver connections (GSSAPI/krb5)? ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

[OpenAFS] Re: CVS, GSSAPI, and AFS tokens

2007-11-14 Thread Jeff Blaine
PROTECTED]:/afs/my/cvsroot Server: sshd configured for PAM auth + pam_krb5.so (Russ Alberry's) + pam_afs_session.so I've yet to try to figure it all out with ticket forwarding. Jeff Blaine wrote: How are people handling krb5 auth with CVS and also getting tokens for gserver

Re: [OpenAFS] Re: CVS, GSSAPI, and AFS tokens

2007-11-14 Thread Jeff Blaine
Douglas E. Engert wrote: Jeff Blaine wrote: Feeding results back for others -- the following appears to work fine so far. I cleared all creds on the server for user jblaine (krb5 and AFS tokens) and was able to checkout from AFS ACL-protected space lacking system:anyuser privs. Client

[OpenAFS] krb5 inclusion in client build = NO kaserver auth whatsoever?

2007-12-03 Thread Jeff Blaine
I'm trying to deduce the depth of effect from building OpenAFS client tarballs with '--with-krb5-conf=...' During our transition to krb5 auth, I'd like our clients to have an OpenAFS allowing kaserver auth, but I obviously want aklog in place for those willing to test krb5 + aklog. Can anyone

[OpenAFS] PAM problem with 1.4.4 and Linux

2008-01-25 Thread Jeff Blaine
Hi all, if anyone has any ideas about this, please let me know. * OpenAFS 1.4.4 on Red Hat Enterprise Linux Server release 5 * SSHD without privsep * User gets in but has no tokens authrequired pam_env.so authsufficient/lib/security/pam_afs.so.1 ignore_root

Re: [OpenAFS] PAM problem with 1.4.4 and Linux

2008-01-25 Thread Jeff Blaine
by commenting out pam_keyinit.so Having read the man page on pam_keyinit, I don't think we're going to be affected, but... Simon Wilkinson wrote: On 25 Jan 2008, at 16:36, Jeff Blaine wrote: ChallengeResponseAuthentication is set to no Any other ideas? What's in your session stack - do you

Re: [OpenAFS] PAM problem with 1.4.4 and Linux

2008-01-25 Thread Jeff Blaine
ChallengeResponseAuthentication is set to no Any other ideas? Simon Wilkinson wrote: On 25 Jan 2008, at 16:19, Jeff Blaine wrote: Hi all, if anyone has any ideas about this, please let me know. * OpenAFS 1.4.4 on Red Hat Enterprise Linux Server release 5 * SSHD without privsep * User gets

[OpenAFS] On the wording No space left on device

2008-01-29 Thread Jeff Blaine
We had a user complain this week about having no clue what No space left on device meant. Regardless of this particular user's inability to deduce that there was NO SPACE LEFT, I like to take these opportunities to consider improvements. Disk, partition, or volume has insufficient free space

[OpenAFS] Craziness with cache, Input/Output error, Linux

2008-01-31 Thread Jeff Blaine
I'm stumped! Everything below is done with an 'admin' token and 'system:administrators rlidwka' ACLs. # Basic info you need bash-3.2$ uname -a Linux jester 2.4.21-52.ELsmp #1 SMP Tue Sep 25 15:13:04 EDT 2007 i686 i686 i386 GNU/Linux bash-3.2$ strings /usr/vice/etc/afsd | grep OpenAFS @(#)

Re: [OpenAFS] Craziness with cache, Input/Output error, Linux

2008-01-31 Thread Jeff Blaine
36000 free inodes Harald Barth wrote: # The problem's console info via syslog Jan 31 10:32:07 jester last message repeated 3 times Jan 31 10:32:07 jester kernel: *** Cache partition is FULL - Decrease cachesize!!! *** Jan 31 10:32:07 jester kernel: # YOU LIE! bash-3.2$ df -kl /cache

Re: [OpenAFS] Craziness with cache, Input/Output error, Linux

2008-04-18 Thread Jeff Blaine
It's 2 more months. Just wondering if anything came of this. We have users bitten by this bug every week on Linux boxes and have to explain it away. Jeff Blaine wrote: Any word on the testing outcome? Testing scheduled for that (and potential impact, if any) later today

Re: [OpenAFS] Craziness with cache, Input/Output error, Linux

2008-04-21 Thread Jeff Blaine
/cache ext3defaults1 2 ~:maverick ~:maverick grep ext2 /etc/fstab ~:maverick Jeff Blaine wrote: It's 2 more months. Just wondering if anything came of this. We have users bitten by this bug every week on Linux boxes and have to explain it away. Jeff

Re: [OpenAFS] Craziness with cache, Input/Output error, Linux

2008-04-21 Thread Jeff Blaine
for the specific issue having been fixed (or attempted). Jeffrey Altman wrote: If you wish the test something, please test 1.4.7-pre3 http://www.openafs.org/release/openafs-1.4.7pre3.html Jeff Blaine wrote: Derrick et al, ~:maverick uname -a Linux maverick 2.4.21-53.ELsmp #1 SMP Wed Nov 14 03:46:35 EST

Re: [OpenAFS] Craziness with cache, Input/Output error, Linux

2008-04-21 Thread Jeff Blaine
We currently run with a cache set at boot time at 75% of the partition size, and this has reduced the frequency of the problem to close enough to zero for us. At previous higher values (85% ??) we still saw this on an infrequent but regular basis (across 100s of hosts). Every one of our

[OpenAFS] Stacking pam_securid with pam_afs for SSH?

2008-06-05 Thread Jeff Blaine
Has anyone ever successfully stacked pam_afs after pam_securid (from RSA Inc) for OpenSSH connections? I can never get a token, even with privelege separation off. ___ OpenAFS-info mailing list OpenAFS-info@openafs.org

Re: [OpenAFS] Stacking pam_securid with pam_afs for SSH?

2008-06-08 Thread Jeff Blaine
Has anyone ever successfully stacked pam_afs after pam_securid (from RSA Inc) for OpenSSH connections? I can never get a token, even with privelege separation off. Does pam_securid get you a Kerberos ticket? No, it doesn't. This is a kaserver setup still. pam_afs.so is solely responsible

[OpenAFS] Solaris 10 crashing - BAD TRAP ... NULL pointer dereference

2008-06-13 Thread Jeff Blaine
We're having this exact same problem that was never replied to publicly in 2006: http://www.openafs.org/pipermail/openafs-devel/2006-July/014073.html OpenAFS 1.4.7 (and older revs too) with libafs64.o under Solaris 10 (old version and also fully patched modern version).

[OpenAFS] Re: Solaris 10 crashing - BAD TRAP ... NULL pointer dereference

2008-06-16 Thread Jeff Blaine
: # cp -p modload/libafs64.nonfs.o /kernel/fs/sparcv9/afs END QUOTE Jeff Blaine wrote: No, the NFS translator is not in use. I was under the impression that the 'nonfs' module is only to be used when the host in question is NOT acting as an NFS server. This host is acting as an NFS server

[OpenAFS] AFS fsck problems - strange

2008-06-23 Thread Jeff Blaine
We recently re-imaged a fileserver (Solaris 9). For every slice of our old /vicep data, we are getting the following error at boot time. Here's one example: # /usr/lib/fs/afs/fsck -o b=512272 /dev/dsk/c3t6006016012341600D86B14C 7E294DA11d0s0 Open AFS (R) openafs 1.4.6 fsck Alternate

[OpenAFS] detached RO vol, can't salvage, can't zap

2008-06-24 Thread Jeff Blaine
Okay, I'll bite: Now what? ADMIN% bos salvage fs1 c -volume 2023867266 -showlog Starting salvage. bos: waiting for salvage to complete. bos: waiting for salvage to complete. bos: waiting for salvage to complete. bos: waiting for salvage to complete. bos: waiting for salvage to complete. bos:

[OpenAFS] inode to namei process

2008-07-01 Thread Jeff Blaine
Is there a good way to dump and restore active RW volumes? We'd like to make each RW volume briefly unavailable during the process: block, dump, restore, unblock ___ OpenAFS-info mailing list OpenAFS-info@openafs.org

Re: [OpenAFS] inode to namei process

2008-07-01 Thread Jeff Blaine
Simon Wilkinson wrote: On 1 Jul 2008, at 18:20, Jeff Blaine wrote: Is there a good way to dump and restore active RW volumes? We'd like to make each RW volume briefly unavailable during the process: block, dump, restore, unblock Assuming from your subject that you're trying to migrate from

[OpenAFS] Solaris 10, OpenAFS, and Firefox 3.0.3

2008-11-12 Thread Jeff Blaine
I'm throwing this out there because I'm getting close to the end of my ideas on this problem machine. Just in case someone has experienced something similar or has any ideas. * OpenAFS 1.4.7 * SunOS 5.10 Generic_127127-11 sun4u sparc SUNW,A70 * Firefox 3.0.3 for Solaris 10 (Contributed by Sun)

Re: [OpenAFS] Solaris 10, OpenAFS, and Firefox 3.0.3

2008-11-13 Thread Jeff Blaine
Harald Barth wrote: 4. Local disk-based cache like all of our other hosts. 60MB. That is very little (for 2008). My first guess is that firefox is trashing the cache, either megabyte or number of files wise. Use cmdebug and tcpdump/wireshark to have a look at that. I would agree with you

[OpenAFS] Ubuntu 8.10 and OpenAFS 1.4.8 not playing nicely

2008-12-23 Thread Jeff Blaine
A few things, but mainly of our importance, the first item. This is a from-source build of OpenAFS 1.4.8 on an Ubuntu 8.10 box (i686). Linux oolong 2.6.27-9-generic #1 SMP Thu Nov 20 21:57:00 UTC 2008 i686 GNU/Linux ./configure --enable-transarc-paths --disable-afsdb All default AFS config

[OpenAFS] IP-address-based ACLs not working for a specific host

2009-01-09 Thread Jeff Blaine
We use IP-address-based ACLs on one of our Solaris 9 clients with no problems. This Linux box we're trying to set up the same way is having none of it. The admin work: ADMIN% pts creategroup silkhosts group silkhosts has id -1594 ADMIN% pts adduser X.Y.11.70 silkhosts ADMIN% pts adduser

Re: [OpenAFS] IP-address-based ACLs not working for a specific host

2009-01-09 Thread Jeff Blaine
Solution: Wait 3 hours. ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

[OpenAFS] Windows client problems - some questions

2009-04-03 Thread Jeff Blaine
I've been trying to get OpenAFS 1.5.58 (and older versions with no success) working under Windows XP for about 8 hours now. Before I try to explain what I've tried, let me just ask some questions: * What is Freelance ? * If I'm using VPN software to connect to work where the AFS cell is, I

Re: [OpenAFS] Windows client problems - some questions

2009-04-06 Thread Jeff Blaine
Here's some more info: * Windows XP with OpenAFS 1.5.58 * All default install options except 'Use DNS to find servers' * rxdebug 7003 to all servers works fine * Firewall off * I am in AFS Client Administrators * NETBIOS over TCP/IP is on afsd.log is empty afsd_init.log contains: 4/6/2009

Re: [OpenAFS] Windows client problems - some questions

2009-04-06 Thread Jeff Blaine
. VPN-ing into work gets another address which is neither 192.x nor 10.x I can see RX data between the servers and the VPN interface when I try \\afs\our.org (obviously very little, however) Jeff Blaine wrote: Here's some more info: * Windows XP with OpenAFS 1.5.58 * All default install options

Re: [OpenAFS] Windows client problems - some questions

2009-04-06 Thread Jeff Blaine
Looks like the Cisco VPN client. I can see the openafs.org cell with the VPN shut down. Bleh. Jeffrey Altman wrote: Jeff Blaine wrote: Jeffrey Altman wrote: The list of IP addresses on the machine is unstable. The netbios name registration is being lost because the IP address it was bound

Re: [OpenAFS] Windows client problems - some questions

2009-04-15 Thread Jeff Blaine
ms user 0x1 (null) pid 0xc54 mid 0xab80 tid 0x1 (null) path? (null) afid (0.0.0.0) Jeff Blaine wrote: Looks like the Cisco VPN client. I can see the openafs.org cell with the VPN shut down. Bleh. Jeffrey Altman wrote: Jeff Blaine wrote: Jeffrey Altman wrote: The list of IP addresses

[OpenAFS] Linux kernel modules for many different kernel revs

2009-04-28 Thread Jeff Blaine
How are people handling the management of installing (and maintaining) OpenAFS on a wide range of Linux boxes (all RHEL but many with different minor kernel revs)? Compared to Solaris, it's a nightmare for us. I haven't looked yet, but is there a --kernel-module-only configure option? That

Re: [OpenAFS] Linux kernel modules for many different kernel revs

2009-04-28 Thread Jeff Blaine
past the basic/standard method. Simon Wilkinson wrote: On 28 Apr 2009, at 17:49, Jeff Blaine wrote: How are people handling the management of installing (and maintaining) OpenAFS on a wide range of Linux boxes (all RHEL but many with different minor kernel revs)? We use rpm. Whilst we have

Re: [OpenAFS] OpenAFS, Cisco VPN and MAC OS and mtu

2009-05-28 Thread Jeff Blaine
FWIW, this appears to be the same problem I reported in April, but for Windows. https://lists.openafs.org/pipermail/openafs-info/2009-April/031127.html We are still working with our networking+VPN folks to try to determine if it's the same thing or not, as well as how to fix it.

Re: [OpenAFS] OpenAFS, Cisco VPN and MAC OS and mtu

2009-05-28 Thread Jeff Blaine
In order to enable OpenAFS to operate across releases of the Cisco IPSec VPN client prior than 5.0 We're not running sub 5.0 Cisco VPN software, but I'll give it a shot. Jeffrey Altman wrote: Jeff Blaine wrote: FWIW, this appears to be the same problem I reported in April, but for Windows

Re: [OpenAFS] OpenAFS, Cisco VPN and MAC OS and mtu

2009-05-28 Thread Jeff Blaine
Jeff Blaine wrote: FWIW, this appears to be the same problem I reported in April, but for Windows. https://lists.openafs.org/pipermail/openafs-info/2009-April/031127.html We are still working with our networking+VPN folks to try to determine if it's the same thing or not, as well as how to fix

[OpenAFS] Quick assist - admin principal (krb5 KDC)

2009-06-01 Thread Jeff Blaine
We're still using kaserver for now, but I noticed the other day that I did not know the password for our krb5 'admin' principal, so eventually this needs to be fixed. We use admin/admin for KDC administration, which doesn't work for privileged AFS ops. The current entry is as such, questions

[OpenAFS] Workshop slides for only those who paid?

2009-06-12 Thread Jeff Blaine
Are these not going to be released to the community? Currently the only one I tried is password protected. ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

[OpenAFS] Re: Debugging AFS sluggishness on MacOS 10.5.7?

2009-06-25 Thread Jeff Blaine
Copying the same file from an NFS server on the same subnet as the AFS server is comparable on my Mac and on a supported Linux machine, as is scp'ing the file from a supported Linux machine. Is NFS using TCP in your environment? If it is, you haven't ruled out network yet. Derrick, did

[OpenAFS] ZFS + /vicep* sanity check

2009-07-14 Thread Jeff Blaine
I'm probably missing something super obvious with this thought, but... Is there any good reason to bother with multiple zfs 'filesystems' since they'll never be fsck'd? Why not a single /vicepa that is the whole pool? ___ OpenAFS-info mailing list

Re: [OpenAFS] ZFS + /vicep* sanity check

2009-07-14 Thread Jeff Blaine
Ferguson, Alistair wrote: the partition lock. Hm? ali - Original Message - From: openafs-info-ad...@openafs.org openafs-info-ad...@openafs.org To: openafs-info@openafs.org openafs-info@openafs.org Sent: Tue Jul 14 22:32:25 2009 Subject: [OpenAFS] ZFS + /vicep* sanity check I'm

[OpenAFS] Proper info for /sbin/mountall under Solaris 10?

2009-07-15 Thread Jeff Blaine
The docs are circa 2000 in this regard, so I am looking for new information. The 1st mod (add a case option) still applies well. The 2nd mod does not as the mountall script code there has changed drasticly. Any info? ___ OpenAFS-info mailing list

[OpenAFS] Scripted? Whole partition moves

2009-08-06 Thread Jeff Blaine
How are people handling whole partition moves in order to clear out a JBOD fileserver for OS upgrade? ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Invalid cross-device link

2009-08-20 Thread Jeff Blaine
It was determined out of list that the particular error I'm seeing in this case is because I was adding a RO volume on the same server but different partition as the RW volume. While I know it's terrible practice, it did work in previous versions and I was using it for testing purposes.

[OpenAFS] Please install afsd with check server daemon.

2009-09-11 Thread Jeff Blaine
I switched a box from disk cache to memcache tonight and got this message upon reboot. Please install afsd with check server daemon. I've never seen this message before. What does it mean? ___ OpenAFS-info mailing list OpenAFS-info@openafs.org

[OpenAFS] Another bout of Windows failure

2009-09-16 Thread Jeff Blaine
Windows XP OpenAFS 1.5.63 with RxMaxMTU = 1244 Cisco VPN Cannot get to \\afs\our.cell.com Tried with all default OpenAFS install checkboxes Long delay, loud noise, error Tried with all default OpenAFS install checkboxes cleared Long delay, empty explorer window with location

Re: [OpenAFS] Another bout of Windows failure

2009-09-18 Thread Jeff Blaine
This ended up being a matter of RxMaxMTU being incorrectly set under: HKLM\SYSTEM\ControlSet004\Services\TransarcAFSDaemon\Parameters instead of the proper place: HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters Lesson learned: When someone tells you (previous

[OpenAFS] ZFS rootdisk note

2009-09-25 Thread Jeff Blaine
In case someone else runs into it... Previously on test servers, I would simply mkdir /vicepa and use it for a few volumes. This (silently) will not work on a box with a ZFS rootdisk. logs # vos create 192.168.1.240 /vicepa root.afs -cell foo -noauth vos : partition /vicepa does not exist on

Re: [OpenAFS] ZFS rootdisk note

2009-09-25 Thread Jeff Blaine
Jason Edgecombe wrote: Jeff Blaine wrote: In case someone else runs into it... Previously on test servers, I would simply mkdir /vicepa and use it for a few volumes. This (silently) will not work on a box with a ZFS rootdisk. logs # vos create 192.168.1.240 /vicepa root.afs -cell foo -noauth

[OpenAFS] 1.5.66 = 2 system tray icons

2009-10-28 Thread Jeff Blaine
I uninstalled OpenAFS, kept configuration I rebooted I installed 1.5.66 with default options except 'use dns to find servers' and added debugging symbols I have 2 AFS icons in my system tray now. One opens up KFW Network ID Manager One opens up the AFS manager Is this expected behavior?

[OpenAFS] Cache / callback failure?

2010-01-21 Thread Jeff Blaine
I've seen this several times lately -- enough to submit here. I released 'root.lang' and immediately switched focus to where I tried a 'make install' then had to force volume checking to get it to work properly. All commands were run on the same host running Solaris 10 SPARC with OpenAFS 1.4.11

Re: [OpenAFS] Cache / callback failure?

2010-01-22 Thread Jeff Blaine
On 1/21/2010 4:41 PM, Derrick Brashear wrote: tcpdump? logs? anything to indicate whether the callback breaks were: 1) sent but dropped by the client 2) improperly processed by the client 3) failed to be sent (and hopefully logged why) by the fileserver? is the client one that changes IP

[OpenAFS] Linux kernel modules - symlinks instead of rebuilds?

2010-01-26 Thread Jeff Blaine
How awful a practice is it to use symlinks to kernel modules when a matching libafs is not found for the *exact* kernel? That is, for instance: libafs-2.6.18-128.1.6.el5.mp.ko - libafs-2.6.18-92.el5.mp.ko libafs-2.6.18-164.11.1.el5.mp.ko - libafs-2.6.18-92.el5.mp.ko libafs-2.6.18-92.el5.mp.ko

[OpenAFS] Sysname info without OpenAFS built yet?

2010-03-04 Thread Jeff Blaine
Just trying to avoid duplicated effort. Does anyone have a script that uses native OS tools to spit out a solid guess at the sysname for the box? I need this for an automated build + install script so that I know what directory 'make dest' has built into. If nobody has written one, I will.

[OpenAFS] Known bug? Other problem? Built module not named what is wanted

2010-03-08 Thread Jeff Blaine
Fresh 'make dest' build on this box in /tmp Note the discrepancy below between: libafs-2.6.18-164.11.1.el5.mp.ko (wanted module) libafs-2.6.18-164.el5.mp.ko(built module) -bash-3.2# cd /tmp/openafs-1.4.11/amd64_linux26/dest/root.client/usr/vice/etc/ -bash-3.2# ls afs.conf afsd*

Re: [OpenAFS] Known bug? Other problem? Built module not named what is wanted

2010-03-08 Thread Jeff Blaine
Hmm. Looks like I was bitten by a box that had its kernel upgraded but hadn't been rebooted yet. It builds the right module now. Thanks guys On 3/8/2010 3:20 PM, Derrick Brashear wrote: On Mon, Mar 8, 2010 at 3:13 PM, Jeff Blainejbla...@kickflop.net wrote: Fresh 'make dest' build on this

Re: [OpenAFS] OpenAFS for Windows 1.5.72, Windows 7, VPN session killing

2010-03-13 Thread Jeff Blaine
On 3/12/2010 11:01 PM, Jeffrey Altman wrote: On 3/12/2010 10:44 PM, Jeff Blaine wrote: As soon as I try to authenticate to AFS with the 1.5.72 Windows client running on a Windows 7 box, my Cisco VPN session dies. I have to assume the 2 loopback adapters (VPN and AFS) are stomping on each other

Re: [OpenAFS] OpenAFS for Windows 1.5.72, Windows 7, VPN session killing

2010-03-13 Thread Jeff Blaine
On 3/13/2010 9:19 AM, Jeffrey Altman wrote: I've been using the VPN software on this box with no problems for 2 weeks now. And the rest of us have been running OpenAFS and KFW for many years and have done so in conjunction with Cisco VPN software on XP and Vista. As have I. So why is the

Re: [OpenAFS] OpenAFS for Windows 1.5.72, Windows 7, VPN session killing

2010-03-13 Thread Jeff Blaine
[ Composed over the course of the day ] Its the assumption that something must be wrong with KFW, OpenAFS or NetIdMgr and not with the Cisco software. I wrote might be (in several different open-ended ways), and you read must be. I can't fix that, Jeffrey. I'm sorry I don't know

Re: [OpenAFS] OpenAFS for Windows 1.5.72, Windows 7, VPN session killing

2010-03-14 Thread Jeff Blaine
On 3/14/2010 2:22 PM, Jeffrey Altman wrote: On 3/14/2010 12:14 PM, Jeff Blaine wrote: the MIT klist.exe tells you. Yes, but it won't say anything useful when one has no creds because the VPN session is dying before that :) I meant, how do I determine what it *would* try to use? Funny

Re: [OpenAFS] Modifying the output of vos commands to include server UUIDs

2010-04-13 Thread Jeff Blaine
IMO, unless a for parsing output format is available (never likely), the existing line-per-site format should be kept and not altered just for a new command-line option's output. This isn't a book we're reading for a half hour. It's vos output. Let the lines pass 80 cols. You can have the

[OpenAFS] Windows : CellServDB from website at install-time?

2010-04-27 Thread Jeff Blaine
Is this gone forever? Am I just missing it? 1.5.66 had it 1.5.74 doesn't This allowed us a) a simple way for users to configure the cell information without visiting the control panel at all b) a simple way to trash the provided CellServDB cells in the same action (we

Re: [OpenAFS] Windows : CellServDB from website at install-time?

2010-04-27 Thread Jeff Blaine
and make one. As it is, this small step proved good enough for the time-being for the ~10 Windows+OpenAFS users we deal with. Jeffrey Altman On 4/27/2010 3:09 PM, Jeff Blaine wrote: Is this gone forever? Am I just missing it? 1.5.66 had it 1.5.74 doesn't This allowed us a) a simple way

Re: [OpenAFS] delegate vos release command?

2010-05-17 Thread Jeff Blaine
On 5/17/2010 8:13 AM, Derrick Brashear wrote: At CMU we used emt Well, adm specifically, called from emt ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

[OpenAFS] 'amd64_linux26' is being replaced by '@sys'

2010-05-24 Thread Jeff Blaine
We're confused here. RHELv5 amd64_linux26 + OpenAFS 1.4.6 % pwd /afs/rcf/apps/Matlab/amd64_linux26/current/bin % /bin/pwd /afs/rcf.our.org/apps/Matlab/@sys/R2009b/bin % This does not happen on the following other hosts we've tested: RHELv5 amd64_linux26 with OpenAFS 1.4.7 RHELv5

Re: [OpenAFS] 'amd64_linux26' is being replaced by '@sys'

2010-05-24 Thread Jeff Blaine
Oh to be so lucky. Matlab barfs all over '@sys' refs. I'll tell our users they may get lucky :) On 5/24/2010 12:12 PM, Derrick Brashear wrote: On Mon, May 24, 2010 at 12:01 PM, Jeff Blainejbla...@kickflop.net wrote: We're confused here. RHELv5 amd64_linux26 + OpenAFS 1.4.6 % pwd

Re: [OpenAFS] 'amd64_linux26' is being replaced by '@sys'

2010-05-24 Thread Jeff Blaine
Hmm. Very odd. % mv amd64_linux26 amd64_linux26_realdir % ln -s ./amd64_linux26_realdir ./amd64_linux26 % vos release root.apps [ examined /afs/rcf/apps to be sure the new structure appears ] % export MATLAB=/afs/rcf/apps/Matlab/amd64_linux26/R2009b % sh -x $MATLAB/bin/matlab ... +

Re: [OpenAFS] 'amd64_linux26' is being replaced by '@sys'

2010-05-24 Thread Jeff Blaine
Correction below: On 5/24/2010 1:15 PM, Jeff Blaine wrote: Hmm. Very odd. % mv amd64_linux26 amd64_linux26_realdir % ln -s ./amd64_linux26_realdir ./amd64_linux26 % vos release root.apps [ examined /afs/rcf/apps to be sure the new structure appears ] % export MATLAB=/afs/rcf/apps/Matlab

Re: [OpenAFS] 'amd64_linux26' is being replaced by '@sys'

2010-05-25 Thread Jeff Blaine
We've had similar issues with all other platforms + Matlab. On 5/25/2010 2:01 AM, Atro Tossavainen wrote: That's correct. You cannot run current versions of Matlab out of @sys directories directly. You have to make sure that it's symlinked to a directory that doesn't have @sys in the path.

[OpenAFS] Windows: aklog: ktc 7 (11862791) while obtaining tokens

2010-06-23 Thread Jeff Blaine
* OpenAFS 1.5.74 * MIT Kerberos for Windows 3.2.2 * rxdebug.exe to fileservers works fine * udebug to db servers works fine * AFS Control Panel says service IS running * AFS Control Panel says service is not running when viewing the Preferences tab: Note: These controls are disabled because

Re: [OpenAFS] Windows: aklog: ktc 7 (11862791) while obtaining tokens

2010-06-23 Thread Jeff Blaine
anything in the release notes other than the UAC Run As Administrator info. Is this what you're referring to? What should I Run As Administrator? Jeffrey Altman On 6/23/2010 11:51 AM, Jeff Blaine wrote: * OpenAFS 1.5.74 * MIT Kerberos for Windows 3.2.2 * rxdebug.exe to fileservers works fine

Re: [OpenAFS] Windows: aklog: ktc 7 (11862791) while obtaining tokens

2010-06-23 Thread Jeff Blaine
\\AFS. I'm still trying to get a token. On 6/23/2010 2:12 PM, Jeffrey Altman wrote: On 6/23/2010 12:32 PM, Jeff Blaine wrote: On 6/23/2010 12:06 PM, Jeffrey Altman wrote: Which operating system version? If the service is running but it cannot be reached, it is probably an Microsoft SMB

Re: [OpenAFS] Windows: aklog: ktc 7 (11862791) while obtaining tokens

2010-06-23 Thread Jeff Blaine
Ahhh. Thanks. On 6/23/2010 3:05 PM, Jeffrey Altman wrote: \\AFS is required to obtain tokens. No \\AFS, no tokens. On 6/23/2010 2:30 PM, Jeff Blaine wrote: * If a *beta* AFS plug-in for Network Identity Manager ... no * The AFS plug

Re: [OpenAFS] format vos/fs/pts output

2010-06-28 Thread Jeff Blaine
On 6/28/2010 7:51 PM, Jonathan Nilsson wrote: Hello, I'd like to write (bash) scripts that can parse the output of the AFS command suite, and I was wondering if there are any output format flags for the fs/pts/vos commands? The only one I've discovered is vos examine volume -format which

[OpenAFS] -hr option to fileserver, IP address-based ACL delay

2010-08-23 Thread Jeff Blaine
We'd like IP address-based ACLs to go live sooner than they do by default. -hr number of hours between refreshing the host cps Specifies how often the File Server refreshes its knowledge of the machines that belong to protection groups (refreshes the host CPSs for machines). The File

[OpenAFS] Losing tokens

2010-09-02 Thread Jeff Blaine
We have users here and there reporting that they are mysteriously losing their tokens sometimes (quite rare). We've worked with them to the point where they are able to produce terminal session captures that show initial tokens from login that then disappear eventually (before expiration time).

Re: [OpenAFS] Losing tokens

2010-09-03 Thread Jeff Blaine
On 9/2/2010 1:32 PM, Derrick Brashear wrote: On Thu, Sep 2, 2010 at 10:10 AM, Jeff Blainejbla...@kickflop.net wrote: We have users here and there reporting that they are mysteriously losing their tokens sometimes (quite rare). We've worked with them to the point where they are able to produce

Re: [OpenAFS] Re: Losing tokens

2010-09-03 Thread Jeff Blaine
On 9/3/2010 2:02 PM, Andrew Deason wrote: On Fri, 03 Sep 2010 13:52:06 -0400 Jeff Blainejbla...@kickflop.net wrote: [theu...@ourhost theproject]$ kinit Password for theu...@rcf.our.org: [theu...@ourhost theproject]$ aklog [theu...@ourhost theproject]$ tokens

Re: [OpenAFS] Re: Losing tokens

2010-09-04 Thread Jeff Blaine
On 9/4/2010 2:42 AM, Simon Wilkinson wrote: On 3 Sep 2010, at 21:56, Derrick Brashear sha...@dementia.org wrote: run 'groups' before and after? With tokens and after tokens have been lost report this: air blogint id: cannot find name for group ID 1098911902 1098911902 I'm away at

Re: [OpenAFS] Re: Losing tokens

2010-09-07 Thread Jeff Blaine
Jeff, is your usage low enough that logging all token invalidations/destruction (and maybe acquisition) would be okay? Want to run a debugging patch? Sure, if it's something I can run just on the client side. ___ OpenAFS-info mailing list

Re: [OpenAFS] Re: Losing tokens

2010-09-09 Thread Jeff Blaine
Mystery solved. The user was using GNU screen, starting the process, detaching from screen, and terminating his original SSH session to the host (which, with our PAM config, destroys creds). I've pointed him at our build of krenew. ___ OpenAFS-info

Re: [OpenAFS] Re: aklog: ktc 7 error using OpenAFS for windows

2010-09-14 Thread Jeff Blaine
See: http://www.mail-archive.com/openafs-info@openafs.org/msg32311.html ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

[OpenAFS] Overview? Linux filesystem choices

2010-09-28 Thread Jeff Blaine
We're considering ditching our Sun boxes with vice partitions on ZFS :( What's the tried-and-true production-quality Linux equivalent? Anything? Last I read, nothing. Barring an equivalent, what Linux setup... a) seems most stable b) is fsck-less Even quick grunt responses are

Re: [OpenAFS] Overview? Linux filesystem choices

2010-09-28 Thread Jeff Blaine
to the recently ownership, development and licensing changes. Jeff Blaine can correct me but I suspect the reasons for the switch are not technical. Precisely. ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo

Re: [OpenAFS] Quick Start Kerberos problem: can acquire tokens, but they don't work

2010-09-30 Thread Jeff Blaine
Maybe this (kind of old info, but who knows) ? http://www.openafs.org/pipermail/openafs-info/2004-September/014929.html On 9/30/2010 7:56 AM, Phillip Moore wrote: pts: Permission denied ___ OpenAFS-info mailing list OpenAFS-info@openafs.org

Re: [OpenAFS] Overview? Linux filesystem choices

2010-09-30 Thread Jeff Blaine
On 9/30/2010 4:04 PM, Robert Milkowski wrote: On 29/09/2010 01:22, Jeff Blaine wrote: On 9/28/2010 6:05 PM, Jeffrey Altman wrote: On 9/28/2010 5:53 PM, Patricia O'Reilly wrote: I'm curious, what types of problems have you encountered with ZFS? We are actually considering using ZFS on some

Re: [OpenAFS] Overview? Linux filesystem choices

2010-09-30 Thread Jeff Blaine
On 9/30/2010 4:32 PM, Robert Milkowski wrote: Why not to consider Solaris on x86 then? Be it HP, Dell, Oracle, ...? For non-Oracle HW the support is 1000$ per socket iirc. Because this is radically different than what we had established as Sun customers over many years. We're well off-topic

[OpenAFS] Scripted new cell stand-up?

2010-10-04 Thread Jeff Blaine
Does anyone have a script that encapsulates some/all of standing up a new cell? Surely one of the dev/test guys, no? If so, can we have it on the understood basis that it is completely unsupported? ___ OpenAFS-info mailing list

[OpenAFS] Thanks OpenAFS

2010-11-18 Thread Jeff Blaine
Probably odd, but... I just wanted to thank all of the people who work on OpenAFS, whether they're core developers, people who answer questions on the list, tweak documentation, submit bug reports, or anything else that contributes. So, ah, thanks! Jeff Blaine

[OpenAFS] Monitoring OpenAFS with Zenoss?

2010-11-29 Thread Jeff Blaine
Anyone doing this in any sort of depth (not just pinging the server box)? ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Proposed changes for server log rotation

2010-12-02 Thread Jeff Blaine
On 12/2/2010 8:06 PM, Russ Allbery wrote: I think you should just deprecate all logging methods other than syslog, at least on UNIX. There's a perfectly useable system service that handles all this already. I don't think it's a useful use of our development resources to do a halfway

[OpenAFS] Serving AFS to Windows boxes w/o OpenAFS client (Samba)?

2010-12-13 Thread Jeff Blaine
This Windows 7 thing has us looking for alternate temporary solutions, as 7 is the only OS being pushed to new corporate PCs and our OpenAFS from Windows usage is niche enough to not warrant concern from corporate IT. So, every few weeks we get another user opening a support ticket with us about

[OpenAFS] aklog.exe tickling unwanted corp. AD servers

2010-12-20 Thread Jeff Blaine
Windows 7 64-bit (yeah, I know...) OpenAFS 1.5.78 64-bit KfW 3.2.2 with latest released Secure Endpoints NIM I can't figure out why aklog.exe -d -c rcf.our.org -k RCF.OUR.ORG Authenticating to cell rcf.our.org. Getting v5 tickets: afs/rcf.our@rcf.our.org Getting v5 tickets:

Re: [OpenAFS] aklog.exe tickling unwanted corp. AD servers

2010-12-21 Thread Jeff Blaine
/2010 3:26 PM, Jeff Blaine wrote: Windows 7 64-bit (yeah, I know...) OpenAFS 1.5.78 64-bit KfW 3.2.2 with latest released Secure Endpoints NIM I can't figure out why aklog.exe -d -c rcf.our.org -k RCF.OUR.ORG Authenticating to cell rcf.our.org. Getting v5 tickets: afs/rcf.our

Re: [OpenAFS] Re: Package Management in AFS

2010-12-21 Thread Jeff Blaine
work). We continue to use it, but I really don't support it unless you find a show-stopping code bug (not a philosophical difference bug) But I figured it's worth mentioning: http://vect.sourceforge.net/ Jeff Blaine ___ OpenAFS-info mailing list

Re: [OpenAFS] aklog.exe tickling unwanted corp. AD servers

2010-12-21 Thread Jeff Blaine
for the cell rcf.our.org. They're all of the form hostN.our.org and have IP addresses dating back 15 years. They all resolve properly via corporate DNS (I tested just now to make sure). On 12/21/2010 12:16 PM, Jeff Blaine wrote: On 12/21/2010 9:38 AM, Jeffrey Altman wrote: What is the default cell

<    1   2   3   4   >