On Fri, Aug 13, 2021 at 05:38:54PM +0200, Dirk Heinrichs wrote:
>
> Jonathan Billings:
>
> > # Set ccache name
> > export KRB5CCNAME="KEYRING:persistent:$UID"
>
> Am I correct to assume that the "regular" login session also needs to be
>
temd --user
│ └─3754 (sd-pam)
└─dbus.service
└─3837 /usr/bin/dbus-daemon --session --address=systemd: --nofork
--nopidfile --systemd-activation --syslog-only
(Logging in through GDM works too, but the output of 'systemctl --user
status' is really long)
--
Jonathan Bill
t;
> > which calls fput().
>
> which must have been called by a pending work.
>
> > - In response to the fput(), the filesystem opens a file
>
> disk cache
>
> > to update some metadata, calling dentry_open().
>
> dentry_open() in turn will trigger a call to any configured LSM.
> If task_struct.fs is NULL, Kaboom!!!
>
> Jeffrey Altman
>
--
Jonathan Billings (he/his)
College of Engineering - CAEN - Linux Support
questions:
>
> https://www.spinics.net/lists/linux-security-module/msg39081.html
> https://www.spinics.net/lists/linux-security-module/msg39083.html
>
--
Jonathan Billings (he/his)
College of Engineering - CAEN - Linux Support
ce. I honestly feel like it should be OK but I don't want to risk
my job over it.
--
Jonathan Billings (he/his)
College of Engineering - CAEN - Linux Support
with how OpenAFS and the
falcon lsm interact. I wasn't able to trigger it with just command-line
ssh but a graphical login seems to be a reliable trigger. Specifically, it
seems to be in the cache handling when it panics.
Has anyone else experienced this?
--
Jonathan Billings (he/his)
College
nes have to run a patched 1.8.6?
>
Was the AFS cache manager restarted or did you reboot after applying the
updated client?
--
Jonathan Billings
ee
> > >
> > > http://dl.openafs.org/dl/candidate/1.8.6pre2/RELNOTES-1.8.6pre2
> > >
> > >
> > > Please assist us by deploying this prerelease and providing positive or
> > > negative feedback. Bug reports should be filed to
> openafs-b...@openafs.org.
> > > Reports of success should be sent to openafs-info@openafs.org.
> > >
> > > Stephan Wiesand, OpenAFS Release Manager
> > > on behalf of the OpenAFS Release Team
>
> ___
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info
>
--
Jonathan Billings
College of Engineering - CAEN - Unix and Linux Support
ild on
Fedora.
https://gerrit.openafs.org/13391
https://gerrit.openafs.org/13437
https://gerrit.openafs.org/13433
https://gerrit.openafs.org/13434
https://gerrit.openafs.org/13392
There are probably more cleanup patches I didn't grab because I got openafs
working with the above.
--
Jonathan Billings
College of Engineering - CAEN - Unix and Linux Support
ess case.--
>
>
kafs's aklog still uses session keyrings, so it essentially has the same
problem as OpenAFS. If we moved it into the user keyring along with the
KRB5 credential cache, kafs might be ok.
--
Jonathan Billings
College of Engineering - CAEN - Unix and Linux Support
tps://www.privacy-handbuch.de
>
>
> ___
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info
>
--
Jonathan Billings
College of Engineering - CAEN - Unix and Linux Support
ages, they aren’t necessary.
>
> <https://www.phoronix.com/forums/forum/software/general-linux-open-source/988963-afs-file-system-driver-overhauled-for-linux-4-15>
>
--
Jonathan Billings College of Engineering - CAEN - Unix and Linux Support
might cause issues.
--
Jonathan Billings
College of Engineering - CAEN - Unix and Linux Support
milar bug. The mount() syscall fails despite being able to see
the AFS home directory via ls and other tools.
--
Jonathan Billings
College of Engineering - CAEN - Unix and Linux Support
ntOS 6.10, with a
kernel 2.6.32-754.3.5.el6.x86_64. Also, the latest version of the OpenAFS
1.6.x release is 1.6.22.3.
--
Jonathan Billings
/LinuxKAFSNotes/
3. http://people.redhat.com/~dhowells/keyutils/
4. https://copr.fedorainfracloud.org/coprs/jsbillings/kafs/
--
Jonathan Billings
gt;
> Now:
> aklog -setpagdoes not set a token (and no pag)
> pagsh is missing(can be found in the heimdal package)
> Please check this.
> Best regards
>
> R. Laatsch
>
>
>
>
--
Jonathan Billings
College of Engineering - CAEN - Unix and Linux Support
ported by most distros, and yet breaks in mostly the same way.
--
Jonathan Billings <jsbil...@umich.edu>
College of Engineering - CAEN - Unix and Linux Support
emd/issues/7261#issuecomment-370509405>
>
> --
> Dirk Heinrichs <dirk.heinri...@altum.de> <dirk.heinri...@altum.de>
> GPG Public Key: D01B367761B0F7CE6E6D81AAD5A2E54246986015
> Sichere Internetkommunikation: http://www.retroshare.org
> Privacy Handbuch: https://www.privacy-handbuch.de
>
>
--
Jonathan Billings <jsbil...@umich.edu>
College of Engineering - CAEN - Unix and Linux Support
w. You'll also want the dkms-openafs package in here:
https://cbs.centos.org/koji/packageinfo?packageID=454
Sadly, I don't have the latest kernel to build against there, so won't be a
kmod-openafs that works on RHEL 7.4 yet.
--
Jonathan Billings <jsbil...@umich.edu>
College of Engineering -
people don't read the MOTD
I doubt they'd read warnings like that.
--
Jonathan Billings <jsbil...@umich.edu>
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info
ilable official openafs for Mac OS Yosemite or EI Capitan?
> I can’t find such from https://www.openafs.org/macos.html. Or openafs
> won’t support Mac anymore (that will be sad).
>
> Cheers,
> Rui
>
--
Jonathan Billings <jsbil...@umich.edu>
College of Engineering - CAEN - Unix and Linux Support
client.service: control process
> exited, code=exited status=1
> Nov 4 06:05:47 host1 systemd: Failed to start OpenAFS Client Service.
> Nov 4 06:05:47 host1 systemd: Unit openafs-client.service entered failed
> state.
> Nov 4 06:05:47 host1 systemd: Started Terminate Pl
cases where RPM spec authors have messed up an environment variable
assignment that was used to run things like 'rm -rf $UNDEFINEDVARIABLE/etc'
and similar.
--
Jonathan Billings jsbil...@umich.edu
College of Engineering - CAEN - Unix and Linux Support
-a always,exit -F dir=/afs/cell/ -F perm=x -k afs_bindir
--
Jonathan Billings jsbil...@umich.edu
College of Engineering - CAEN - Unix and Linux Support
://www.cognix-systems.com/developpement-durable.php
--
Jonathan Billings jsbil...@umich.edu
College of Engineering - CAEN - Unix and Linux Support
On Mon, Dec 1, 2014 at 11:37 AM, Anders Magnusson ra...@ltu.se wrote:
chdir(/afs/ltu.se/staff/all/ragge) = -1 EACCES (Permission denied)
SELinux? Do you see any AVC audit entries? Do you have samba_share_nfs=1?
--
Jonathan Billings jsbil...@umich.edu
College of Engineering - CAEN - Unix
spec file uses some variant of `uname
-r` to determine the kernel version and not what is provided by the
kernel-devel package. This has been something on my list of pet peeves
about the current spec file anyway.
--
Jonathan Billings jsbil...@umich.edu
College of Engineering - CAEN - Unix
to the build environment (at least in my simple
attempt), so it has to figure it out itself, which is where it fails to
build due to broken dependencies (since the RHEL6 kernel version isn't
provided by any RHEL7 kernel-devel packages).
--
Jonathan Billings jsbil...@umich.edu
College of Engineering - CAEN
is my home 'umich.edu' cell)
This doesn't fix anything related to the afsdb/dynroot lookup that's
causing the problem, but it does stop git from misbehaving.
--
Jonathan Billings jsbil...@umich.edu
College of Engineering - CAEN - Unix and Linux Support
to downstream
projects
rather than creating FHS compliant packages ourselves. This would mean that
we'd no longer provide any binaries for RHEL7+ and Fedora 21+.
Do we want to continue development of the RPM spec file in the OpenAFS git
tree? Split off a RHEL7/Fedora version?
--
Jonathan
/openafs-info
--
Jonathan Billings jsbil...@umich.edu
College of Engineering - CAEN - Unix and Linux Support
a unified init script in
the OpenAFS git repository, is there a source for it?
--
Jonathan Billings jsbil...@umich.edu
College of Engineering - CAEN - Unix and Linux Support
signed, so you'll have to run yum with --nogpgcheck.
--
Jonathan Billings jsbil...@umich.edu
College of Engineering - CAEN - Unix and Linux Support
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs
repository file to do that? if so, where would be be and what is it
called ?
http://www.openafs.org/dl/openafs/1.6.1/rhel5/x86_64/ is a yum
repository for the RHEL5 packages of OpenAFS 1.6.1. It even has the
correct kmods for your kernel.
--
Jonathan Billings jsbil...@umich.edu
College of Engineering
src/tfs/src/aklog$
I can tell you right now that I'd probably patch the source to remove
this in our environment. It would break so much stuff, and just
further prove to my management that AFS is on its way out, since now I
have to maintain local patches.
--
Jonathan Billings jsbil
in workflow.
--
Jonathan Billings jsbil...@umich.edu
College of Engineering - CAEN - Unix and Linux Support
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info
fine with my mock
setup.
If you're using the epel-5-* mock configs, it doesn't matter if you're
using CentOS or RHEL, because mock uses the kernel-devel from CentOS.
--
Jonathan Billings jsbil...@umich.edu
College of Engineering - CAEN - Unix and Linux Support
there might be a problem with the version
of mock or yum in RHEL6 which is causing these problems for epel-5
systems. I'm trying to build from a SRPM built from git and I'm
getting even stranger problems where it isn't even finding perl-devel
(!).
--
Jonathan Billings jsbil...@umich.edu
College
On Fri, Apr 6, 2012 at 2:31 PM, Jonathan Billings jsbil...@umich.edu wrote:
This normally works, which is why I'm confused. I know I built the
1.6.0 RPMs in mock when it came out, so something has changed in my
environment.
Actually, never mind, I'm building 1.4.14.1 for RHEL5 so
puzzled by this for a whole week.
I believe that 1.6.0 is the latest release available for Linux,
although you can also give 1.6.1pre4 a try as well. 1.7.x is for MS
Windows only.
--
Jonathan Billings jsbil...@umich.edu
College of Engineering - CAEN - Unix and Linux Support
this problem, I wouldn't expect to see a clean startup with 1.6.0 on Fedora
16 even with a working client (I'm running a 1.6.1 prerelease right now,
which includes the fix I mentioned above).
--
Jonathan Billings jsbil...@umich.edu
College of Engineering - CAEN - Unix and Linux Support
-principals.
For more documentation:
http://docs.openafs.org/Reference/8/ptserver.html
--
Jonathan Billings jsbil...@umich.edu
College of Engineering - CAEN - Unix and Linux Support
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https
of
Read-only replicas though, just enough to handle the many lab
computers we have. (it'd be impossible for us to have a RO for EACH
lab system anyway.)
--
Jonathan Billings jsbil...@umich.edu
College of Engineering - CAEN - Unix and Linux Support
44 matches
Mail list logo
