Hi Chrisotpher,
Thank You for your help. It is not a multihomed system and we are running afs version 1.4.0008. I will download the new version and install it later this evening. Also, this system is in a workgroup. I will try running the fs checks.
Carol Allen
-----Original Message-----
From: [EMAIL PROTECTED]
To: [email protected]
Sent: Wed, 25 Jan 2006 12:01:06 -0500 (EST)
Subject: OpenAFS-info digest, Vol 1 #2839 - 9 msgs
Send OpenAFS-info mailing list submissions to
[email protected]
To subscribe or unsubscribe via the World Wide Web, visit
https://lists.openafs.org/mailman/listinfo/openafs-info
or, via email, send a message with subject or body 'help' to
[EMAIL PROTECTED]
You can reach the person managing the list at
[EMAIL PROTECTED]
When replying, please edit your Subject line so it is more specific
than "Re: Contents of OpenAFS-info digest..."
Today's Topics:
1. foreign-realm members of system:administrators have weakened
powers? (Adam Megacz)
2. is there any good reason to use capialized names for new realms? (Adam
Megacz)
3. Re: is there any good reason to use capialized names for new realms? (Russ
Allbery)
4. Re: IP-based ACL problem with 1.2.13 fileserver? (does flushcps.c
work?) (Christopher Allen Wing)
5. Bringing back the wiki (Steve Simmons)
6. AFS and Windows 2003 ([EMAIL PROTECTED])
7. Re: AFS and Windows 2003 (Christopher D. Clausen)
--__--__--
Message: 1
To: [email protected]
From: Adam Megacz <[EMAIL PROTECTED]>
Date: Tue, 24 Jan 2006 20:35:59 -0800
Organization: Myself
Subject: [OpenAFS] foreign-realm members of system:administrators have weakened
powers?
Hrm, I thought that any member of system:administrators could create
pts groups with arbitrary ownership, but it seems that I can't do this
using my "main" principal -- I executed these commands while holding
tokens for [EMAIL PROTECTED] in cell research.cs.berkeley.edu:
$ pts membership system:administrators -cell research.cs.berkeley.edu
Members of system:administrators (id: -204) are:
afsadmin
[EMAIL PROTECTED]
[EMAIL PROTECTED]
$ pts creategroup project.sbp system:administrators -cell research.cs.berkeley.edu
pts: Permission denied ; unable to create group project.sbp with id 0 owned by
'system:administrators'
Are there some powers that are withheld from administrators using a
cross-realm pts id? The command succeeds when authenticated as
afsadmin.
- a
--
PGP/GPG: 5C9F F366 C9CF 2145 E770 B1B8 EFB1 462D A146 C380
--__--__--
Message: 2
To: [email protected]
From: Adam Megacz <[EMAIL PROTECTED]>
Date: Tue, 24 Jan 2006 20:44:25 -0800
Organization: Myself
Subject: [OpenAFS] is there any good reason to use capialized names for new
realms?
Is there any good reason to use an all-capitalized realm name (ie
FOO.COM) rather than a lowercase *realm* name (foo.com) when setting
up a brand-new realm with no backwards-compatability requirements
other than being able to run [a recent version of] AFS?
I'm still in the short window where I can consider tearing things
apart and putting them back together, but that window is closing, and
case-sensitivity issues have already bitten me a few times. It would
be nice to have my realm and cell use exactly the same lowercase name
(easier to type and remember).
- a
PS, this borders on being a kerberos-only issue, but I'm interested in
the answer principally in the context of AFS, which is why I'm
posting here instead of the Kerberos list
--
PGP/GPG: 5C9F F366 C9CF 2145 E770 B1B8 EFB1 462D A146 C380
--__--__--
Message: 3
From: Russ Allbery <[EMAIL PROTECTED]>
To: [email protected]
Organization: The Eyrie
Date: Tue, 24 Jan 2006 21:15:00 -0800
Subject: Re: [OpenAFS] is there any good reason to use capialized names for new
realms?
Adam Megacz <[EMAIL PROTECTED]> writes:
> Is there any good reason to use an all-capitalized realm name (ie
> FOO.COM) rather than a lowercase *realm* name (foo.com) when setting
> up a brand-new realm with no backwards-compatability requirements
> other than being able to run [a recent version of] AFS?
Yes, there's a lot of software out there that assumes all realm names are
in uppercase. It's possible to use lowercase realms (stanford.edu is a
lowercase realm), but learn from our mistake and don't do it. It's not
worth it.
--
Russ Allbery ([EMAIL PROTECTED]) <http://www.eyrie.org/~eagle/>
--__--__--
Message: 4
Date: Wed, 25 Jan 2006 07:47:28 -0500 (EST)
From: Christopher Allen Wing <[EMAIL PROTECTED]>
To: [email protected]
Subject: [OpenAFS] Re: IP-based ACL problem with 1.2.13 fileserver? (does
flushcps.c
work?)
I should also add that I tried using the 'flushcps' program from:
/afs/cs.cmu.edu/misc/afstools
without any luck. This program does not seem to have any effect (both on
the file servers which are showing a problem, and on those which are not).
Is this program expected to work against 1.2.13 fileservers?
Thanks,
Chris Wing
[EMAIL PROTECTED]
--__--__--
Message: 5
To: OpenAFS Info List <[email protected]>
From: Steve Simmons <[EMAIL PROTECTED]>
Date: Wed, 25 Jan 2006 09:30:58 -0500
Subject: [OpenAFS] Bringing back the wiki
Has anyone looked at bringing back the wiki at another location? No
offense whatsoever intended to Jeff, but he's clearly got a lot on
his plate and this is the kind of thing that others can do. I've gotten
some interest from my management tree in doing it here (Univ of
Michigan),
and have managed to scarf up a copy of the old wiki from
/afs/grand.central.org/archive/twiki. If there's no objection from Jeff
et. al, I'll looking into getting a stamp of approval and see what we
can
do here or through some public venue.
Steve
--__--__--
Message: 6
Date: Wed, 25 Jan 2006 09:49:18 -0500
From: [EMAIL PROTECTED]
To: [email protected]
Subject: [OpenAFS] AFS and Windows 2003
----------MailBlocks_8C7EFD5A770AC9D_120C_A816_MBLK-M35.sysops.aol.com
Content-Type: text/plain; charset="us-ascii"
Hello Everyone!
I a Windows 2003 IIS60 web server with the content stored on an AFS directory.
Whenever there is a problem withe AFS server, which is a sun server, I have to
reboot my Windows 2003 server. Has anyone experienced this and can tell me how
I might be able to correct the problem. I have spoken to the Administrator of
the AFS server and they say there is no problem but it continues to happen more
and more.
I would appreciate any help that I might be able to get.
Thank You in Advance
Carol Allen
----------MailBlocks_8C7EFD5A770AC9D_120C_A816_MBLK-M35.sysops.aol.com
Content-Type: text/html; charset="us-ascii"
<HTML><BODY><DIV style='font-family: "Verdana"; font-size: 10pt;'><DIV>Hello
Everyone!</DIV>
<DIV> </DIV>
<DIV>I a Windows 2003 IIS60 web server with the content stored on an AFS
directory. Whenever there is a problem withe AFS server, which is a sun server,
I have to reboot my Windows 2003 server. Has anyone experienced this and can
tell me how I might be able to correct the problem. I have spoken to the
Administrator of the AFS server and they say there is no problem but it
continues to happen more and more.</DIV>
<DIV> </DIV>
<DIV>I would appreciate any help that I might be able to get.</DIV>
<DIV> </DIV>
<DIV>Thank You in Advance</DIV>
<DIV> </DIV>
<DIV>Carol Allen</DIV></DIV></BODY></HTML>
----------MailBlocks_8C7EFD5A770AC9D_120C_A816_MBLK-M35.sysops.aol.com--
--__--__--
Message: 7
From: "Christopher D. Clausen" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>, <[email protected]>
Date: Wed, 25 Jan 2006 09:02:52 -0600
Subject: Re: [OpenAFS] AFS and Windows 2003
[EMAIL PROTECTED] wrote:
> Hello Everyone!
>
> I a Windows 2003 IIS60 web server with the content stored on an AFS
> directory. Whenever there is a problem withe AFS server, which is a
> sun server, I have to reboot my Windows 2003 server. Has anyone
> experienced this and can tell me how I might be able to correct the
> problem. I have spoken to the Administrator of the AFS server and
> they say there is no problem but it continues to happen more and
> more.
>
> I would appreciate any help that I might be able to get.
What version of the client are you running? I strongly suggest that you
try the 1.4.1-rc5 binaries which were just released today.
Can you ask the server admin to see if there are any entries (identified
via IP address) in the AFS logs on the server?
Is this Windows 2003 server by change multi-homed (more than one
physical NIC in the machine)? Joined to Active Directory? Are you
using the AFS loopback adapter?
I don't run IIS, but I have had the occational fileserver meltdown cause
issues on my Terminal Servers. Usually running fs checks and fs checkv
fix these problems and force fail-over to other fileservers.
<<CDC
--
Christopher D. Clausen
[EMAIL PROTECTED] SysAdmin
--__--__--
_______________________________________________
OpenAFS-info mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-info
End of OpenAFS-info Digest
