On Wed, 2014-08-06 at 15:32 +0200, Markus Koeberl wrote: > What exactly may be the problem with -afsdb. Are my SRV records wrong > or is there a problem with my name server? > > I am happy for any hints because removing the -afsdb option is > complicated...
I'm seeing this problem locally in a somewhat different form. It's not exactly a problem with either. It's an interaction between -afsdb and -dynroot: -dynroot causes AFS to treat /afs/.git as a request for a read-write root.afs volume in a cell named git, and then it does DNS searches. The more domains you have in your DNS search path, or the harder a local caching nameserver tries to resolve names (I have seen some try normal forwarding, fail, and switch to directly searching from the root), the longer it takes for this to time out. I'm not sure how to mitigate this, though. Even if you could add a "dummy" AFSDB or SRV record to intercept this lookup, last night I tripped over a similar issue when rebooting my Mac: http://lpaste.net/108884 (partial trace, it took several minutes to give up on querying for both AFSDB and SRV records for many names it shouldn't have been trying to look up IMO --- wtf is Finder doing?!) Given my normal usage on this machine, I may well just knock down -dynroot. -- brandon s allbery kf8nh sine nomine associates [email protected] [email protected] unix openafs kerberos infrastructure xmonad http://sinenomine.net
