Re: [OpenAFS] OpenAFS access at login time on MacOS

From: openafs-info-ad...@openafs.org on behalf of Richard Feltstykket Date: Thursday, May 11, 2023 at 6:22 AM To: openafs-info@openafs.org Subject: [OpenAFS] OpenAFS access at login time on MacOS … There is a program in the app store called 'kerberos ticket autorewnewal'. I have installed

Re: [OpenAFS] Kerberos + Windows

The service principal details are fuzzy now – we haven’t touched them in a long time – but we use a krb.conf to specify two authentication realms, neither of which matches the cell name. MIT KDC and Active Directory, with non-overlapping principal names. It works great, and the only issue

Re: [OpenAFS] Question for admins regarding pts membership output

ltman" wrote: On 7/13/2022 6:07 PM, Richard Brittain (richard.britt...@dartmouth.edu) wrote: > I hope that doesn't lead people to expect 'pts membership system:authuser' to show all users. > > Richard I'm curious. Why would it be wrong for users to exp

Re: [OpenAFS] Question for admins regarding pts membership output

Ditto - our deprovisioning scripts use pts membership output, and I expect this is common. Filtering out system:anyuser etc. would be easy, but a flag to omit those and revert to 'old behaviour' would be even better. I do like the improved transparency of listing them though. I hope that

Re: [OpenAFS] vos release stops at 2^64 packets sent.

, 10:41 AM, "Mark Vitale" wrote: > On 27 Jun 2022, at 11:14 PM, Mark Vitale wrote: > > > >> On 27 Jun 2022, at 3:18 PM, Richard Brittain wrote: >> >> I know this is a long shot, but I've got a no-quota volume of

[OpenAFS] vos release stops at 2^64 packets sent.

upgrading to 1.8.x). If 1.8 might change this limit, I can upgrade, but I didn't find any hints in the release notes. Based on how long it ran, my guess is > 5TB was transferred. Is this affected by volser buffer sizes ? Thanks, Richard Richard Brittain, Research Support Servi

Re: [OpenAFS] 14 Jan 2021 08:25:36 GMT Breakage in RX Connection ID calculation

I'm a bit confused about what versions are affected by this bug. I've got mostly 1.8.[56] clients, which I'm upgrading now. My servers are still running 1.6.22 and appear to be fine for vos operations between themselves, and the DB servers have been restarted since this happened (but not the

Re: [OpenAFS] OpenAFS Security Releases 1.8.2, 1.6.23 available

e changes also are expected to cause backup(8)'s interactive mode > > to be limited to only butc connections requiring (or not requiring) > > authentication within a given interactive session, based on the initial > > arguments selected. > >   > > Bug reports should be filed to openafs-b...@openafs.org. > >   > > Benjamin Kaduk > > for the OpenAFS Guardians > >   > > > - Richard Brittain, Research ITC Information, Technology and Consulting, 37 Dewey Field Road, HB6219 Dartmouth College, Hanover NH 03755 richard.britt...@dartmouth.edu 603-646-2085 http://rc.dartmouth.edu/

[OpenAFS] OpenAFS on Mac OSX 10.12 Sierra - Menu tool fix

. Richard -- Richard Brittain, Research Computing Group, IT Services, 37 Dewey Field Road, HB6219 Dartmouth College, Hanover NH 03755 richard.britt...@dartmouth.edu 603-646-2085 ___ OpenAFS-info mailing list OpenAFS-info

Re: [OpenAFS] How old of Linux do you use with OpenAFS?

um supported version of Linux from 2.6.0. Thanks, Ben Richard Brittain, Research Computing Group, IT Services, 37 Dewey Field Road, HB6219 Dartmouth College, Hanover NH 03755 richard.britt...@dartmouth.edu 603-646-2085

[OpenAFS] permission to run 'fs examine'

y the -path argument, and "l" (list) permission on the ACL of each directory that precedes it in the pathname. Richard -- Richard Brittain, Research Computing Group, IT Services, 37 Dewey Field Road, HB6219 Dartmouth College, Hanover NH 03755 rich

Re: [OpenAFS] permission to run 'fs examine'

Thanks. I figured it was probably benign. -- Richard Brittain, Research Computing Group, IT Services, 37 Dewey Field Road, HB6219 Dartmouth College, Hanover NH 03755 richard.britt...@dartmouth.edu 603-646-2085This change occurred in 2012. See http

Re: [OpenAFS] Metrics on the cell

they change each day, as a measure of activity, but all I've managed to do is measure the time needed to 'vos release' Richard /sd Steve Devine Michigan State University -- Richard Brittain, Research Computing Group, IT Services, 37 Dewey Field Road, HB6219

Re: [OpenAFS] Re: Openafs kernel problems

they won't change anything for us, but it's always helpful to know what they're going to be doing with it, if they have a specific plan or timeline in mind. -- Richard Brittain, Research Computing Group, IT Services, 37 Dewey Field Road, HB6219 Dartmouth

[OpenAFS] Linux client, AFS homes, getcwd() failures, apparently deleted home directories

-- Richard Brittain, Research Computing Group, Computing Services, 37 Dewey Field Road, HB6219 Dartmouth College, Hanover NH 03755 richard.britt...@dartmouth.edu 6-2085 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org

Re: [OpenAFS] Re: Linux client, AFS homes, getcwd() failures, apparently deleted home directories

On Tue, 25 Jun 2013, Andrew Deason wrote: On Tue, 25 Jun 2013 16:02:00 -0400 (EDT) Richard Brittain richard.britt...@dartmouth.edu wrote: we have a strange problem on a large RHEL6 system with AFS home directories. I'm not even sure if the problem is in the AFS cache manager or the kernel

Re: [OpenAFS] Re: Possible cache corruption with linux client and 1.6.1 fileserver

that will 'fix' the file too - no need to re-read the file from the fileserver. It looks like the problem is between the cache manager and the Linux buffer cache. That is consistent with the V-files in the cache apparently containing the correct data. Richard -- Richard Brittain, Research Computing

[OpenAFS] Re: Possible cache corruption with linux client and 1.6.1 fileserver

On Tue, 13 Nov 2012, Richard Brittain wrote: While testing new client installs, I've got a regular habit of banging hard on my fileservers and checking the md5sum of a bunch of random files. I came across an odd error recently with this scenario: - Client (doesn't seem to matter what

[OpenAFS] Changing freespace value returned to 'df' - Linux

if they have successfully changed this, or are there side-effects which will bite ? Thanks, Richard -- Richard Brittain, Research Computing Group, Computing Services, 37 Dewey Field Road, HB6219 Dartmouth College, Hanover NH 03755 richard.britt

Re: [OpenAFS] Possible bug in Windows AFS client handling older shortcuts

but a limitation of the conversion from relying upon Microsoft's SMB redirector to a dedicated AFS redirector. Jeffrey Altman -- Richard Brittain, Research Computing Group, Computing Services, 37 Dewey Field Road, HB6219 Dartmouth College, Hanover NH 03755

Re: [OpenAFS] Windows reporting out of space

that complains by UNC path. The file server upgrade was worth it anyway - 1.6.1 seems to impose a lighter load on the server OS, even when hit hard with big volume moves. Richard Brittain On Mon, 4 Jun 2012, Jeffrey Altman wrote: There is a known bug in the file server that reports negative

[OpenAFS] Mac 10.7 Finder issue with lookup-only access

there are equivalent ACLs in the CIFS world, and our Windows admins were muttering about the same problem. This might be old news, but I don't see it mentioned anywhere. Richard -- Richard Brittain, Research Computing Group, Computing Services, 37 Dewey Field Road, HB6219

[OpenAFS] Mac Finder large file copies, and 1.6.0 - fixed ?

tools and other file copying programs worked correctly. However, I can't find a mention of this in the ChangeLog, so I'm wondering if it is safe to declare this 'fixed' and recommend our users upgrade to 1.6.0 now. Thanks, Richard -- Richard Brittain, Research Computing Group

Re: [OpenAFS] Re: Volume rename with active volumes

possible. A more safe way to do this would be to allow you to add a volume name alias in the vldb or something, so you could add the new name, update mountpoints, and remove the old name. We don't provide a way to do that. Thanks! Richard -- Richard Brittain, Research Computing Group

[OpenAFS] Volume rename with active volumes

. - repeatedly open/append/close a file. I assume this pushed it out to the fileserver. This also worked without error. Given this, is it safe to rename active volumes ?. I can't figure out how the active clients get this right. Thanks, Richard -- Richard Brittain, Research Computing Group

Re: [OpenAFS] Overview? Linux filesystem choices

for several months in non-AFS production boxes and were very happy with the performance - measurably faster than ext3 for large file i/o. I'm a bit surprised nobody else has admitted to using ext4 for their /vicep*, but at least nobody has reported problems with it either. Richard -- Richard

[OpenAFS] Volume won't release - needs salvaging.

(not sure if that was needed), and eventually my clients are happy and the data are visible again - vos addsite and release, and I'm back where I should be, 4 hours later. Richard -- Richard Brittain, Research Computing Group, Kiewit Computing Services, 6224 Baker/Berry

Re: [OpenAFS] Windows: aklog: ktc 7 (11862791) while obtaining tokens

show stopper, since they boot with no network, and transition to a real address only after login and wireless authentication, and the loopback adaptor comes 'pre-hosed' to the login session. Richard -- Richard Brittain, Research Computing Group, Kiewit Computing Services

Re: [OpenAFS] user home directory replication

stuff is mixed up. I'm still trying to figure out how to make more copies available using shadow and clone volumes, but for a single replicate, the mature RO replicate and 'vos release' works great. Richard -- Richard Brittain, Research Computing Group, Kiewit Computing

Re: [OpenAFS] Windows: aklog: ktc 7 (11862791) while obtaining tokens

is triggered, all attempts to connect to \\AFS will result in a Bad Network Name error. Please reproduce this issue locally and submit bug reports to Microsoft. .. below -- Richard Brittain, Research Computing Group, Kiewit Computing Services, 6224 Baker

Re: [OpenAFS] AFS version of du

find might include GNU code - it has a lot of similar options beyond traditional Unix find. A quick test showed Solaris behaving itself today but OSX still giving the same errors. Richard -- Richard Brittain, Research Computing Group, Kiewit Computing Services, 6224 Baker

Re: [OpenAFS] AFS version of du

and starting searching the other cell, but I noticed that my other test system (RHEL4/openafs 1.4.11) didn't follow. It would be _really_ nice if tools didn't follow mount points to other cells, if nothing else! Richard -- Richard Brittain, Research Computing Group, Kiewit

Re: [OpenAFS] AFS version of du

On Fri, 30 Apr 2010, Russ Allbery wrote: Richard Brittain richard.britt...@dartmouth.edu writes: Yesterday I was running 'find' and 'fs lsmount' across our cell to explicitly look for volume mountpoints, and got some very strange errors. On directories which exist and I had full access

[OpenAFS] Specify size reported by 'df' ?

value when some tool wants to start dumping 10GB into AFS and decides to check first. Richard -- Richard Brittain, Research Computing Group, Kiewit Computing Services, 6224 Baker/Berry Library Dartmouth College, Hanover NH 03755 richard.britt...@dartmouth.edu

Re: [OpenAFS] significant delay for afs user to login as root via su

-related commands) Richard -- Richard Brittain, Research Computing Group, Kiewit Computing Services, 6224 Baker/Berry Library Dartmouth College, Hanover NH 03755 richard.britt...@dartmouth.edu 6-2085 ___ OpenAFS-info

Re: [OpenAFS] Windows client and firewall/antivirus/MTU conflict - possibility of file corruption

by not preserving checksum data. Solution: Teefer2 corrected to preserve checksum data. -- Richard Brittain, Research Computing Group, Kiewit Computing Services, 6224 Baker/Berry Library Dartmouth College, Hanover NH 03755 richard.britt...@dartmouth.edu 6-2085

[OpenAFS] Windows client and firewall/antivirus/MTU conflict - possibility of file corruption

\CurrentControlSet\Services\TransarcAFSDaemon\Parameters\RxMaxMTU (default value is 0) The MTU on the real network interface is the relevent one (not the loopback adapter) Richard -- Richard Brittain, Research Computing Group, Kiewit Computing Services, 6224 Baker/Berry Library

Re: [OpenAFS] Re: Swap RW and RO volumes ?

On Wed, 16 Dec 2009, Andrew Deason wrote: On Wed, Dec 16, 2009 at 3:19 PM, Richard Brittain richard.britt...@dartmouth.edu wrote: We have some large data volumes not backed up in any way other than a daily replicate to a different server.  The users normally access the volume via an explicit

[OpenAFS] Swap RW and RO volumes ?

be frozen for a short period only from the users point of view, and I'd have a server I could reboot without moving a lot of data around. Has anyone thought about this ? Richard -- Richard Brittain, Research Computing Group, Kiewit Computing Services, 6224 Baker/Berry Library

Re: [OpenAFS] Re: [OpenAFS-announce] Support for MacOS 10.6 Snowleopard now available

and it worked correctly for my local cell root.afs, and also the kernel panics went away. The AFS Commander Preference pane also seemed to have some problems. I never got the toolbar menu to appear, but invoking it from System Preferences worked. Richard -- Richard Brittain, Kiewit Computing

[OpenAFS] Estimate of size to be transferred in 'vos release' ?

be very large and take hours to run, and knowing before starting would make for better planning. We are using the replicates as disaster recovery backups. Thanks, Richard -- Richard Brittain, Kiewit Computing Services, 6224 Baker/Berry Library Dartmouth College, Hanover NH

Re: [OpenAFS] Problem building 1.4.7 client on RHEL4 SMP system

in the 'openafs' RPM description which explain the kvariants option, but I hadn't installed that yet because I was trying to build first and then install all the parts of 1.4.7 at once. Richard On Fri, 9 May 2008, Simon Wilkinson wrote: On 9 May 2008, at 01:51, Richard Brittain wrote: Hi, I tried

[OpenAFS] Problem building 1.4.7 client on RHEL4 SMP system

to the compilation steps. The client was previously at 1.4.5. I seem to remember having a brief attempt to build 1.4.6 and had trouble with the the spec file in that too. Any help greatly appreciated Richard -- Richard Brittain, Kiewit Computing Services, 6224 Baker/Berry Library

[OpenAFS] Mac OSX Finder drag-and-drop failures

with some relatively recent OSX system update, but I've got no older system images to test on. They are all 10.4.latest Anyone else seen similar behaviour ? Richard Brittain -- Richard Brittain, Kiewit Computing Services, 6224 Baker/Berry Library Dartmouth College, Hanover

[OpenAFS] RHEL5, pam_afs, sshd; no token

:55 newpolaris -- richard: LOGIN ON tty1 BY richard -- Richard Brittain, Kiewit Computing Services, 6224 Baker/Berry Library Dartmouth College, Hanover NH 03755 Email: [EMAIL PROTECTED] ___ OpenAFS-info mailing list OpenAFS-info

[OpenAFS] AFS startup script and wireless laptops (OS-X)

to unload. I don't know enough OS-X or afsd internals to speculate on how to improve this situation though. Richard -- Richard Brittain, Kiewit Computing Services, 6224 Baker/Berry Library Dartmouth College, Hanover NH 03755 Email: [EMAIL PROTECTED