Re: [OpenAFS] Issue with immutable /usr

2014-05-05 Thread Garance A Drosehn
On 4 May 2014, at 19:17, Chas Williams (CONTRACTOR) wrote: > In message <--->,Jon Stanley writes: >> My suggestion would be to put the CellServDB (and other host-specific >> OpenAFS configurations) into /etc. > > Maybe /etc/openafs since AFS have quite a few configuration files? FWIW, note that o

Re: [OpenAFS] OpenAFS and windows/unix versioning

2014-05-07 Thread Garance A Drosehn
> On May 6, 2014 6:05:03 PM Andrew Deason wrote: > >> Summary: What version numbers would you like for Windows and Unix >> releases in the future? Some options are described below. On 7 May 2014, at 10:13, Dave B. wrote: > > One of our main thoughts is that the version numbers should be > indicat

[OpenAFS] Minor question on moving AFS db servers

2014-10-29 Thread Garance A Drosehn
Hi. We have AFS db servers on some ancient hardware, and decided to move them to be virtual machines on much newer hardware. I've moved one of them already, and the final result seems to be fine. There was one minor oddity during the physical-to-virtual move which was a little worrisome, so I th

[OpenAFS] Any preference for RHEL file servers

2015-04-03 Thread Garance A Drosehn
It looks like I'll finally get around to upgrading our AFS fileserver machines. The new ones will be using Redhat enterprise, and I was just wondering if there is any reason to prefer RHEL6 vs RHEL7, as far as openafs itself is concerned. I realize redhat will support RHEL7 for a lot longer than

Re: [OpenAFS] OpenAFS still in development?

2015-06-22 Thread Garance A Drosehn
Hmm. I have multiple macs running (between here in the office and at home), and on average I go something like 40-60 days before I have to reboot. And the most frequent reason for a reboot is that Apple has released an update which forces me to reboot. My Mac at home sees fairly light and si

[OpenAFS] Getting pam configured for RHEL 7

2015-07-28 Thread Garance A Drosehn
On 6 Apr 2015, in the thread "Any preference for RHEL file servers", Brandon Allbery wrote: > On Mon, 2015-04-06 at 14:36 +, Kieffer, Catherine wrote: >> I just downloaded and installed the openafs-1.6.11-1.src.rpm source >> RPM. It didn't put it into /usr/src but into /root/rpmbuild. [

Re: [OpenAFS] unresponsive clients after lowest ip database server went down

2015-09-25 Thread Garance A Drosehn
On 27 Aug 2015, at 16:35, Jonathan Leung-Nilsson wrote: > Hello, > > I have recovered from this situation already, but I was curious to hear if > others have tested or experienced this issue as well: > > If the AFS database server with the lowest IP address goes down or is > offline, but there are

[OpenAFS] Setting affinity for fileservers on afs-clients

2015-10-25 Thread Garance A Drosehn
We have some AFS volumes which hold data for various web servers on campus. These volumes are replicated on multiple file servers, because that's an intelligent thing to do with important data. We also have multiple web servers, because it's also intelligent to split the web-serving load across m

[OpenAFS] Anyone still use the old 'vspace' script?

2015-10-25 Thread Garance A Drosehn
RPI has been running AFS since the 1990's. Somewhere along the line we picked up a script called 'vspace', which is useful for checking how much space is used/available on individual partitions in an AFS cell. The comments include the line: "This shell script was originally written by Bill Somme

Re: [OpenAFS] Setting affinity for fileservers on afs-clients

2015-10-25 Thread Garance A Drosehn
Very excellent. Thanks! -- garance alistair drosehn On 25 Oct 2015, at 21:43, brandon s allbery kf8nh wrote: Take a look at "fs setserverprefs". On October 25, 2015 9:38:32 PM EDT, Garance A Drosehn wrote: Is there some way to encourage this to happen

Re: [OpenAFS] Anyone still use the old 'vspace' script?

2015-10-26 Thread Garance A Drosehn
On 25 Oct 2015, at 22:21, Benjamin Kaduk wrote: > Hi Garance, > > On Sun, 25 Oct 2015, Garance A Drosehn wrote: > >> It happens that this script has been useful for some work I'm doing >> right now, so I've made a number of changes to it. If anyone else is

Re: [OpenAFS] Anyone still use the old 'vspace' script?

2015-10-26 Thread Garance A Drosehn
On 26 Oct 2015, at 13:45, Jeffrey Altman wrote: On 10/26/2015 1:37 PM, Garance A Drosehn wrote: [vspace] The script I have is a combination of bourne-shell and awk code (which is geared for ancient versions of awk). It includes a number of RPI-specific changes, most of which we haven&#

[OpenAFS] Odd error on 'vos move'

2015-12-07 Thread Garance A Drosehn
Hi. I've been busy moving our AFS volumes from ancient file servers to up-to-date file servers. So far this has been going along well, but last week I ran into an odd error moving one 10.79 GiB file. My main question is: Could a problem like this be caused by my AFS token expiring in the middl

Re: [OpenAFS] Odd error on 'vos move'

2015-12-09 Thread Garance A Drosehn
On 7 Dec 2015, at 15:52, Brandon Allbery wrote: That looks like pretty much textbook token expiration in mid-volume copy, yes. You will need to "vos unlock" the original volume and possibly "vos endtrans" on the server (warning, this ends *all* active transactions! Might be better to wait 10-1

Re: [OpenAFS] Odd error on 'vos move'

2015-12-09 Thread Garance A Drosehn
On 7 Dec 2015, at 15:51, Benjamin Kaduk wrote: > On Mon, 7 Dec 2015, Garance A Drosehn wrote: > >> Hi. >> >> I've been busy moving our AFS volumes from ancient file servers to >> up-to-date file servers. So far this has been going along well, >> but las

Re: [OpenAFS] Release of MacOS 10 client

2016-01-26 Thread Garance A Drosehn
On 22 Jan 2016, at 13:51, E. Margarete Ziemer wrote: From: Margarete Ziemer Date: Wednesday, January 20, 2016 at 12:16 PM Subject: Release of MacOS 10 client SNA is happy to release our MacOS 10 AFS Client to OpenAFS.org. Specifically, the donation entails: 1) changes to packaging, 2) binari

Re: [OpenAFS] Release of MacOS 10 client

2016-02-01 Thread Garance A Drosehn
On 26 Jan 2016, at 17:12, Garance A Drosehn wrote: On 22 Jan 2016, at 13:51, E. Margarete Ziemer wrote: From: Margarete Ziemer Date: Wednesday, January 20, 2016 at 12:16 PM Subject: Release of MacOS 10 client SNA is happy to release our MacOS 10 AFS Client to OpenAFS.org. Specifically, the

[OpenAFS] Remove all trace of an AFS backup volume

2016-02-13 Thread Garance A Drosehn
Here's a simple-minded question that I am wondering about. Say I create a brand new AFS volume. At the 'vos examine' level, it might look like this: # vos examine test.abcd.efgh test.abcd.efgh 537664400 RW 2 K On-line some.server.some.edu /vicepa RWrite 53766

Re: [OpenAFS] Remove all trace of an AFS backup volume

2016-02-14 Thread Garance A Drosehn
On 14 Feb 2016, at 11:42, Jeffrey Altman wrote: > On 2/13/2016 10:05 PM, Garance A Drosehn wrote: >> The only thing I'm wondering about is whether I can get the "Backup" >> VID field set back to "0", and get the "Backup" date back to "Neve

Re: [OpenAFS] /afs is empty

2016-10-07 Thread Garance A Drosehn
On 7 Oct 2016, at 9:48, Andreas Ladanyi wrote: > Hi, > > my problem on one afs client is that /afs is empty. > > Ubuntu 12.04: 3.2.0-109-generic, OpenAFS 1.6.18.3-1 from PPA > > openafs-client restart doesnt help. > > ps ax | grep afsd: > > 1232 pts/0S+ 0:00 grep afsd > 27942 ?Ss

[OpenAFS] LDAP searches for AFS-services via ancient names

2017-02-01 Thread Garance A Drosehn
Just a trivial observation we noticed here at RPI. This is just for your amusement. There is nothing important about it. This past weekend we (RPI) had some odd problem pop up. The problem itself has no connection to OpenAFS, but while investigating that problem the guy who runs our LDAP server

[OpenAFS] Security Advisory 2016-003 and 'bos salvage' questions

2017-02-15 Thread Garance A Drosehn
I had an odd situation pop up when upgrading to OpenAFS 1.6.20.1. The description of the security advisory at http://www.openafs.org/pages/security/OPENAFS-SA-2016-003.txt says: > We further recommend that administrators salvage all volumes with > the -salvagedirs option, in order to remove exi

[OpenAFS] Re: Security Advisory 2016-003 and 'bos salvage' questions

2017-02-16 Thread Garance A Drosehn
On 15 Feb 2017, at 13:48, Garance A Drosehn wrote: > I had an odd situation pop up when upgrading to OpenAFS 1.6.20.1. > On my most-recent server, my script which does step #4 moved 26 > volumes, and then hit this error on the 27th one: > >>Failed to move data for th

[OpenAFS] Re: Security Advisory 2016-003 and 'bos salvage' questions

2017-02-17 Thread Garance A Drosehn
On 15 Feb 2017, at 13:48, Garance A Drosehn wrote: > I had an odd situation pop up when upgrading to OpenAFS 1.6.20.1. > On my most-recent server, my script which does step #4 moved 26 > volumes, and then hit this error on the 27th one: > >>Failed to move data for th

[OpenAFS] Is the OpenAFS-info mailing list still working?

2017-02-19 Thread Garance A Drosehn
Hi. On the last few messages I've sent to openafs-info@, the mailing list does not send me a copy of the email that I sent. Looking back at older emails, the mailing list did always send me a copy. I do see that my messages show up at: https://lists.openafs.org/pipermail/openafs-info/2017-Febr

[OpenAFS] Weirdness after 'vos move's - core files?

2017-02-19 Thread Garance A Drosehn
I'm not sure this mailing list is still working, but if it is, here is some more info on some weird issues I'm seeing on one of our file servers after upgrading to openafs 1.6.20-1. Note that I upgraded three other file servers to openafs 1.6.20-1 without any trouble. To recap, I first moved the

Re: [OpenAFS] Is the OpenAFS-info mailing list still working?

2017-02-19 Thread Garance A Drosehn
On 19 Feb 2017, at 11:33, Jeffrey Altman wrote: > On 2/19/2017 11:19 AM, Garance A Drosehn wrote: >> Hi. On the last few messages I've sent to openafs-info@, the mailing >> list does not send me a copy of the email that I sent. Looking back >> at older emails, the ma

Re: [OpenAFS] Weirdness after 'vos move's - core files?

2017-02-20 Thread Garance A Drosehn
On 20 Feb 2017, at 0:25, Benjamin Kaduk wrote: On Sun, Feb 19, 2017 at 11:49:40AM -0500, Garance A Drosehn wrote: Is there something I could do with those core files which would help to figure out what the problem is with this file server? I also have plenty of log files, if those would

Re: [OpenAFS] Weirdness after 'vos move's - core files?

2017-02-20 Thread Garance A Drosehn
On 20 Feb 2017, at 0:25, Benjamin Kaduk wrote: On Sun, Feb 19, 2017, Garance A Drosehn wrote: Is there something I could do with those core files which would help to figure out what the problem is with this file server? I also have plenty of log files, if those would provide some clues

Re: [OpenAFS] Weirdness after 'vos move's - core files?

2017-02-20 Thread Garance A Drosehn
On 20 Feb 2017, at 16:07, Garance A Drosehn wrote: > On 20 Feb 2017, at 0:25, Benjamin Kaduk wrote: > >> [...] if I was in this situation, I would be looking at >> hardware diagnostics on this machine (memtest86, SMART output, >> bonnie++, etc.). I do not believe that o

Re: [OpenAFS] vos dumps to S3 via S3 Storage Gateway?

2017-03-01 Thread Garance A Drosehn
On 1 Mar 2017, at 11:55, Mark Vitale wrote: >> On Mar 1, 2017, Dave Botsch wrote: >> >> How would one go about building OpenAFS as such? Any >> documentation someplace? >> > > To enable butc to use the TSM XBSA APIs, specify: > > configure —enable-tivoli-tsm > > Sorry, I have no other details or

Re: [OpenAFS] Weirdness after 'vos move's - Epilogue

2017-03-05 Thread Garance A Drosehn
On 20 Feb 2017, at 16:07, Garance A Drosehn wrote: > On 20 Feb 2017, at 0:25, Benjamin Kaduk wrote: > >> [...] if I was in this situation, I would be looking at >> hardware diagnostics on this machine (memtest86, SMART >> output, bonnie++, etc.). I do not believe that o

Re: [OpenAFS] Sinvle vice partition VS multi vice partitions

2017-03-24 Thread Garance A Drosehn
On 23 Mar 2017, at 10:31, ProbaNet SRLS wrote: > Hello! > We're creating a new openafs fileserver (it's a VM), using an iSCSI > target as storage device. Do you think it's better to use a single 1TB > LUN for a single /vicepa or maybe to create 4 LUNs (250 GB each) in the > iSCSI target in ord

Re: [OpenAFS] Security Advisory 2016-003 and 'bos salvage' questions

2017-04-04 Thread Garance A Drosehn
On 4 Apr 2017, at 9:45, Harald Barth wrote: > Is there any reason why the -salvagedir requires -all? > We run dafs. > > To minimize downtime I'd like to use this per volume or if that is not > possible at least per partition so I don't need to shut down the > complete fileserver for this. Ok, I ca

[OpenAFS] Re: [OpenAFS-announce] OpenAFS release 1.6.21 available

2017-08-11 Thread Garance A Drosehn
On 6 Jul 2017, at 10:05, Stephan Wiesand wrote: > The OpenAFS Release Team is pleased to announce the availability of > OpenAFS version 1.6.21 for UNIX/Linux. Source files can be accessed > via the web at: > > http://www.openafs.org/dl/openafs/1.6.21/ I suspect the answer to the following quest

Re: [OpenAFS] [OpenAFS-announce] OpenAFS release 1.6.21 available

2017-08-11 Thread Garance A Drosehn
On 11 Aug 2017, at 15:04, Jan Iven wrote: > On 11/08/17 20:41, Garance A Drosehn wrote: >> On 6 Jul 2017, at 10:05, Stephan Wiesand wrote: >> >>> I pick up the file openafs-1.6.21-1.src.rpm >> >> and then go to install that on RHEL7. And it says: >> >

Re: [OpenAFS] OpenAFS release 1.6.21 available

2017-08-11 Thread Garance A Drosehn
On 11 Aug 2017, at 15:47, Jan Iven wrote: > On 11/08/17 21:39, Garance A Drosehn wrote: >> >> Ah, thanks! I had guessed that it might be his PGP key that I >> needed, but the only keyserver that my GPG Keychain application >> searches is hkp://keys.gnupg.net ,

Re: [OpenAFS] getcwd() error for RHEL 7.4 kernel

2017-11-17 Thread Garance A Drosehn
On 18 Oct 2017, at 19:21, Benjamin Kaduk wrote: On Tue, Oct 17, 2017 at 11:55:27AM -0400, Jacob Bonek wrote: This is a major issue that has caused us to have to stay at the latest pre-RHEL 7.4 kernel for a long time now while this issue has existed. This may be related to previous issues wit

Re: [OpenAFS] Is member of a machine group honored as system:authuser?

2018-01-24 Thread Garance A Drosehn
On 24 Jan 2018, at 14:31, Ximeng Guan wrote: I would expect that a local user on 10.12.8.31, even without an AFS token, would be able to "cd" into the top directory of the cell. But in reality that does not happen. An unauthenticated user is denied of access. When I explicitly put "machinegr

Re: [OpenAFS] Is member of a machine group honored as system:authuser?

2018-01-26 Thread Garance A Drosehn
On 25 Jan 2018, at 17:50, Ximeng Guan wrote: The actual scenario is that there are daemon service binaries in that installation path which we would like each machine of the group to launch by its local root, every time the machine is rebooted (through SysVinit script or systemd). You may thin

Re: [OpenAFS] Linux: systemctl --user vs. AFS

2018-03-09 Thread Garance A Drosehn
On 9 Mar 2018, at 11:06, Dirk Heinrichs wrote: > Am 08.03.2018 um 18:54 schrieb Jeffrey Altman: >> Switching to the user keyring is unreasonable. The impact of such >> a change is that all user sessions on a system share the same tokens >> and an effective uid change permits access to those same

Re: [OpenAFS] mass moving volumes from server to server ?

2018-05-03 Thread Garance A Drosehn
On 1 May 2018, at 15:23, Gary Gatling wrote: > I was wondering if any users or developers have a solution for > moving all the volumes from one server to another? > > We have a perl program that was written 11 years ago to do that. > But it has problems... > > It's mixed in with this other perl co