[OpenAFS] AFS + Kerberos

2005-01-19 Thread Maurizio Santini
Does anyone know how to circumnavigate this kind of egg/chicken problem? I'm trying to make the kvno for a testuser match the entry in /etc/krb5.keytab and the KeyFile but every time I do so using ktadd I have to change the password for the user. As a consequence the kvno gets increased by one

Re: [OpenAFS] 2005-01-17 snapshot: good so far on Fedora Core 2.6.10 kernels

2005-01-19 Thread Wes Chow
Just so I know what to test, is it anticipated that this fixes all previous kernel oops reported before as well as all disk cache issues, including cache consistency problems? One platform-neutral cache consistency issue probably still exists (the common one cured by fs flushv) and Chas

Re: [OpenAFS] 2005-01-17 snapshot: good so far on Fedora Core 2.6.10 kernels

2005-01-19 Thread Derrick J Brashear
On Wed, 19 Jan 2005, Wes Chow wrote: Are these 1.3.x specific issues, or do they exist under 1.2.13 as well? We occasionally see cache consistency problems with 1.2.13, however nothing is really reproducable. I would have guessed 1.3.x, but I can't prove that.

Re: [OpenAFS] AFS + Kerberos

2005-01-19 Thread Maurizio Santini
So If my problem is key mismatch how do I solve it? I mean what do I need to do for the kvno number match the other entries? Thanks, Maurizio On Wed, 2005-01-19 at 10:08, sophana wrote: If you want that ktadd duplicates a key into a keytab without scrambling it, it is not possible. This

Re: [OpenAFS] AFS + Kerberos

2005-01-19 Thread Maurizio Santini
I finally managed to get it work. I applied the instructions found at https://lists.openafs.org/pipermail/openafs-devel/2001-November/007220.html and didn't get the security object was passed a bad ticket error anymore. I would still get 'Permission denied when trying to create a file but that

Re: [OpenAFS] where to put NetRestrict?

2005-01-19 Thread Sergio Gelato
* Hagbard Celine [2005-01-17 13:51:48 +0100]: I thought too that /var/lib/openafs was the right guess, but seems that the Horst suggestion to strace fileserver was wise. In fact, from the strace: open(/etc/openafs/server-local/NetRestrict, O_RDONLY) = -1 ENOENT (No such fil e or

Re: [OpenAFS] network timeouts

2005-01-19 Thread Markus Pfeiffer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Stefaan wrote: | Hi, | | I'm running OpenAFS over a vpn (using vtun), and I've done my very | best to tune the vpn's efficiency, but... Even though the vpn | stays up, during a large file upload I still get Jan 16 02:29:35 | [kernel] afs: Lost contact

Re: [OpenAFS] where to put NetRestrict?

2005-01-19 Thread Derrick J Brashear
On Mon, 17 Jan 2005, Sergio Gelato wrote: Due to Debian's excessive reluctance to update the stable distribution with new versions of packages, vanilla 3.0r4 still has version 1.2.3 of openafs-fileserver (unchanged since 2002-08-03, and I think there have been security updates since then -- not to

Re: [OpenAFS] AFS + Kerberos

2005-01-19 Thread Derrick J Brashear
On Tue, 18 Jan 2005, Maurizio Santini wrote: Does anyone know how to circumnavigate this kind of egg/chicken problem? I'm trying to make the kvno for a testuser match the entry in /etc/krb5.keytab and the KeyFile but every time I do so using ktadd I have to change the password for the user. As a