[OpenAFS] Re: chown()

2007-03-22 Thread Adam Megacz
Ryan Underwood <[EMAIL PROTECTED]> writes: > Wouldn't it make sense for a user with 'admin' ACL to be able to > chown() files, as long as the target ID is his own userid? Even better: let any user who can write to the file change its owner. Unless I'm mistaken, if: 1. your clients are all set

[OpenAFS] Re: unix owner/group of files in AFS

2007-03-22 Thread Adam Megacz
>>> 3. any additional meaning given to the unix owner/group of a file >>>- For example, the PTS identity which is numerically equal to >>> the owner userid of the root directory of a volume has >>> implicit "a" rights on the volume. Can this behavior be disabled at the

Re: [OpenAFS] aklog -setpag doesn't get a token

2007-03-22 Thread FB
Hi, On Thu, Mar 22, 2007 at 07:16:15PM +, Simon Wilkinson wrote: > > On 22 Mar 2007, at 19:05, Jeffrey Altman wrote: > > > > >Obviously that would be a bug and someone should submit either a bug > >report or a patch. > > Reported as #57154. Thank you. Frank ___

Re: [OpenAFS] aklog -setpag doesn't get a token

2007-03-22 Thread Simon Wilkinson
On 22 Mar 2007, at 19:05, Jeffrey Altman wrote: Obviously that would be a bug and someone should submit either a bug report or a patch. Reported as #57154. Simon. ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mai

Re: [OpenAFS] aklog -setpag doesn't get a token

2007-03-22 Thread Ken Hornstein
>One thing that lead me astray for a while is that aklog does nothing if >your token hasn't changed, even if it is called with the -setpag option. I've always felt that behavior was dumb (it wasn't in the original aklog I committed, it appeared somewhere along the way in OpenAFS). As far as I can

Re: [OpenAFS] aklog -setpag doesn't get a token

2007-03-22 Thread Jeffrey Altman
Simon Wilkinson wrote: > I can reproduce this - it does look as if aklog -setpag is managing to > put the parent into a new PAG, but then failing to put the credentials > correctly into that PAG. One thing that lead me astray for a while is > that aklog does nothing if your token hasn't changed, ev

Re: [OpenAFS] aklog -setpag doesn't get a token

2007-03-22 Thread Simon Wilkinson
On 22 Mar 2007, at 18:40, Douglas E. Engert wrote: aklog has a -d option. It is very helpful. Not, unfortunately, in this case. I can reproduce this - it does look as if aklog -setpag is managing to put the parent into a new PAG, but then failing to put the credentials correctly into th

Re: [OpenAFS] Problems setting up an initial AFS cell...

2007-03-22 Thread Marcus Watts
Joseph Galbraith <[EMAIL PROTECTED]> writes: > I'm trying to set up an initial cell, using a Fedora Core 5 install > on a VM (this is a fresh install; the only thing I've done is pull > the new tzdata via yum, no other updates.) ... Here is a set of directions using kerberos 5: /afs/umich.

Re: [OpenAFS] aklog -setpag doesn't get a token

2007-03-22 Thread Douglas E. Engert
aklog has a -d option. It is very helpful. FB wrote: Hi, On Thu, Mar 22, 2007 at 02:04:23PM +0100, Sergio Gelato wrote: * FB [2007-03-22 12:13:51 +0100]: Yes - but... 'aklog -setpag' actually creates a PAG. It just doesn't get a token. This set of commands works and creates a PAG with a t

Re: [OpenAFS] Problems setting up an initial AFS cell...

2007-03-22 Thread Thomas Kula
On Thu, Mar 22, 2007 at 12:25:44PM -0600, Joseph Galbraith wrote: > > Ahh... thanks. > > I've been trying to follow the quick start guide. > > Any hints as to what I should be doing instead? The > quick start just keeps referring me to contacting > IBM support if I don't want to use kaserver.

Re: [OpenAFS] Problems setting up an initial AFS cell...

2007-03-22 Thread Joseph Galbraith
david l goodrich wrote: > ... >> # /usr/bin/bos create vmfc5i.ut.vandyke.com kaserver simple >> /usr/afs/bin/kaserver -cell ut.vandyke.com -noauth > ... >> I know I've probably just done something stupid, but >> does anyone have any idea what I need to do to get this >> to work? > > for starters,

Re: [OpenAFS] Problems setting up an initial AFS cell...

2007-03-22 Thread david l goodrich
... > # /usr/bin/bos create vmfc5i.ut.vandyke.com kaserver simple > /usr/afs/bin/kaserver -cell ut.vandyke.com -noauth ... > I know I've probably just done something stupid, but > does anyone have any idea what I need to do to get this > to work? for starters, don't use kaserver. --david > > Th

[OpenAFS] Problems setting up an initial AFS cell...

2007-03-22 Thread Joseph Galbraith
I'm trying to set up an initial cell, using a Fedora Core 5 install on a VM (this is a fresh install; the only thing I've done is pull the new tzdata via yum, no other updates.) Here's what I'm doing: # rpm --install openafs-1.4.2-fc5.1.i386.rpm openafs-server-1.4.2-fc5.1.i386.rpm openafs-kernel-

[OpenAFS] chown()

2007-03-22 Thread Ryan Underwood
Currently, chown() on AFS is limited to the system:administrators group. Wouldn't it make sense for a user with 'admin' ACL to be able to chown() files, as long as the target ID is his own userid? That way, automated daemons that use chown() in AFS don't have to be in system:administrators, thus

Re: [OpenAFS] Compiling openafs 1.4.2 on RHEL5

2007-03-22 Thread Enrico M. V. Fasanelli
Marsh, Alexander wrote: Hello, I am attempting to compile openafs 1.4.2 on RHEL 5 as a client machine. The configure stage worked: ./configure --with-afs-sysname=i386_linux26 --enable-transarc-paths --enable-redhat-buildsys --with-krb5-conf=/usr/kerberos/bin/krb5-config --with-linux-kernel-he

Re: [OpenAFS] Compiling openafs 1.4.2 on RHEL5

2007-03-22 Thread Simon Wilkinson
Are you sure that your kernel headers match your running kernel? I've not used RHEL in anger, but if it's anything like Fedora, you want to install the kernel-devel RPM which matches the kernel you are using, and build against that Cheers, Simon. __

[OpenAFS] Compiling openafs 1.4.2 on RHEL5

2007-03-22 Thread Marsh, Alexander
Hello, I am attempting to compile openafs 1.4.2 on RHEL 5 as a client machine. The configure stage worked: ./configure --with-afs-sysname=i386_linux26 --enable-transarc-paths --enable-redhat-buildsys --with-krb5-conf=/usr/kerberos/bin/krb5-config --with-linux-kernel-headers=/usr/src/kernels/2.6.1

Re: [OpenAFS] About OpenAfs

2007-03-22 Thread Dirk Heinrichs
Am Donnerstag, 22. März 2007 schrieb colderthanice: > I am new in this group and new about Openafs. I want to ask somethings > about system.I think we use openafs system as a network mapping drive. > Beside this. > 1- Can we install openafs server to winxp? See thread from two hours ago. > 2- I

[OpenAFS] About OpenAfs

2007-03-22 Thread colderthanice
Dear members, I am new in this group and new about Openafs. I want to ask somethings about system.I think we use openafs system as a network mapping drive. Beside this. 1- Can we install openafs server to winxp? 2- Is it hard to manage settings? 3- Is it working as if apache or not? 4- What are t

Re: [OpenAFS] aklog -setpag doesn't get a token

2007-03-22 Thread FB
Hi, On Thu, Mar 22, 2007 at 02:04:23PM +0100, Sergio Gelato wrote: > * FB [2007-03-22 12:13:51 +0100]: > > Yes - but... 'aklog -setpag' actually creates a PAG. It just doesn't get a > > token. > > This set of commands works and creates a PAG with a token in it: > > > > $ kinit > > $ aklog -set

Re: [OpenAFS] Help in Setting up Openafs

2007-03-22 Thread Jeffrey Altman
Posting the same question five times in 40 minutes to the mailing list will not produce a faster reply. Melvin Wong wrote: > Hi, > > I am trying to setup openafs on my RHEL 4 but I find the documentation > not as updated as I hope it to be and it becomes extremely difficult to > troubleshoot when

Re: [OpenAFS] Help in Setting up Openafs

2007-03-22 Thread Derrick J Brashear
On Thu, 22 Mar 2007, Dirk Heinrichs wrote: Am Donnerstag, 22. März 2007 schrieb Melvin Wong: a. Is it possible to join a Windows afs server to a linux afs cell? AFAIK, there is no such thing as a Windows AFS server. Or has this changed recently? There is, we just discourage people fro

Re: [OpenAFS] Help in Setting up Openafs

2007-03-22 Thread Dirk Heinrichs
Am Donnerstag, 22. März 2007 schrieb Melvin Wong: > a.Is it possible to join a Windows afs server to a linux afs cell? AFAIK, there is no such thing as a Windows AFS server. Or has this changed recently? > b.How do I mount the afs user directory to the home directory such that > the use

Re: [OpenAFS] unix owner/group of files in AFS

2007-03-22 Thread Derrick J Brashear
On Tue, 20 Mar 2007, Juha [UTF-8] Jäykkä wrote: 3. any additional meaning given to the unix owner/group of a file - For example, the PTS identity which is numerically equal to the owner userid of the root directory of a volume has implicit "a" rights on the volume. I

Re: [OpenAFS] unix owner/group of files in AFS

2007-03-22 Thread Juha Jäykkä
> 3. any additional meaning given to the unix owner/group of a file >- For example, the PTS identity which is numerically equal to > the owner userid of the root directory of a volume has > implicit "a" rights on the volume. Is this really true? If it were, it would sol

[OpenAFS] Help in Setting up Openafs

2007-03-22 Thread Melvin Wong
Hi, I am trying to setup openafs on my RHEL 4 but I find the documentation not as updated as I hope it to be and it becomes extremely difficult to troubleshoot when I encounter a problem. Does anyone know where to find a recent guide? Also I have a few questions and hopes someone can help me:

[OpenAFS] Help in Setting up Openafs

2007-03-22 Thread Melvin Wong
Hi, I am trying to setup openafs on my RHEL 4 but I find the documentation not as updated as I hope it to be and it becomes extremely difficult to troubleshoot when I encounter a problem. Does anyone know where to find a recent guide? Also I have a few questions and hopes someone can help me: a.

[OpenAFS] Help in Setting up Openafs

2007-03-22 Thread Melvin Wong
Hi, I am trying to setup openafs on my RHEL 4 but I find the documentation not as updated as I hope it to be and it becomes extremely difficult to troubleshoot when I encounter a problem. Does anyone know where to find a recent guide? Also I have a few questions and hopes someone can help me: a.

[OpenAFS] Help in Setting up Openafs

2007-03-22 Thread Melvin Wong
Hi, I am trying to setup openafs on my RHEL 4 but I find the documentation not as updated as I hope it to be and it becomes extremely difficult to troubleshoot when I encounter a problem. Does anyone know where to find a recent guide? Also I have a few questions and hopes someone can help me: a.

[OpenAFS] Help in Setting up Openafs

2007-03-22 Thread Melvin Wong
Hi, I am trying to setup openafs on my RHEL 4 but I find the documentation not as updated as I hope it to be and it becomes extremely difficult to troubleshoot when I encounter a problem. Does anyone know where to find a recent guide? Also I have a few questions and hopes someone can help me: a.

Re: [OpenAFS] aklog -setpag doesn't get a token

2007-03-22 Thread FB
On Thu, Mar 22, 2007 at 08:42:42AM +, Simon Wilkinson wrote: > > On 22 Mar 2007, at 08:26, FB wrote: > > > > >Unfortunately, 'aklog -setpag' still doesn't get a token. It's from > >openafs-1.4.2 (debian package openafs-krb5_1.4.2-5 by Sam Hartman) executed > >on a vanilla kernel 2.6.19. > >

Re: [OpenAFS] aklog -setpag doesn't get a token

2007-03-22 Thread Simon Wilkinson
On 22 Mar 2007, at 08:26, FB wrote: Unfortunately, 'aklog -setpag' still doesn't get a token. It's from openafs-1.4.2 (debian package openafs-krb5_1.4.2-5 by Sam Hartman) executed on a vanilla kernel 2.6.19. aklog -setpag relies on being able to set the PAG of the parent process (otherw

Re: [OpenAFS] aklog -setpag doesn't get a token

2007-03-22 Thread FB
Hi, On Thu, Mar 22, 2007 at 09:04:25AM +0100, FB wrote: > Hi, > > I've got a strange problem here. For some time now, 'aklog -setpag' (which > is automatically executed by some pam module and openssh) doesn't get a Correction: The pam-module (debian package 'libpam-openafs-session') was too old

[OpenAFS] aklog -setpag doesn't get a token

2007-03-22 Thread FB
Hi, I've got a strange problem here. For some time now, 'aklog -setpag' (which is automatically executed by some pam module and openssh) doesn't get a token. However, it correctly creates a new PAG and executing 'aklog' after 'aklog -setpag' emulates the default behaviour. Does anyone have an ide