[OpenAFS] building the OpenAFS client with rpmbuild

[Ron Croonenberg]

rmpbuild -ba openafs-1.2.13.spec  builds "everything"

can I "just" build the binary rpms that are needed for the OpenAFS
client 
using rpmbuild ? 

thanks,

Ron

___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

[OpenAFS] JAVA API... in 1.3.87?

[Pucky Loucks]

Hi everyone,

I tried to configure the latest release adding --java_home=/usr/ 
java/...  but I get an error.  Do I need to do something to allow the  
creation of the JAVA_API?



configure: error: --java_home=/usr/java/current: invalid option; use  
--help to show usage



thanks,

Pucky
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] AFS authentication dialog box on Windows

[Jeffrey Altman]

Read the afs-install-notes.txt and registry.txt files.

Jeffrey Altman


Lewis, Dave wrote:
> Hi,
> 
> I'm wondering how to configure the OpenAFS Windows client so that the "Obtain 
> New AFS Tokens" dialog box doesn't pop up every time someone logs in to 
> Windows. I still want the padlock icon to appear in the system tray so that 
> users can click it to obtain tokens if they need to. It's not very high 
> priority of course, but it would be nice to know how.
> 
> (We have some Windows PCs on which the AFS client is used only occasionally. 
> Usually when people log in, they don't want to authenticate to AFS and they 
> click cancel. I'd like to configure it so that they get the "Obtain New AFS 
> Tokens" dialog box only when they click the padlock icon. We have Windows XP 
> Pro running OpenAFS client 1.3.85.)
> 
> Thanks,
> Dave
> ___
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info
begin:vcard
fn:Jeffrey Altman
n:Altman;Jeffrey
org:Secure Endpoints Inc.
adr:;;255 W 94TH ST PHB;NEW YORK;NY;10025;United States
email;internet:[EMAIL PROTECTED]
title:President
tel;work:+1 212 769-9018
x-mozilla-html:TRUE
url:http://www.secure-endpoints.com
version:2.1
end:vcard



smime.p7s
Description: S/MIME Cryptographic Signature

[OpenAFS] AFS authentication dialog box on Windows

[Lewis, Dave]

Hi,

I'm wondering how to configure the OpenAFS Windows client so that the "Obtain 
New AFS Tokens" dialog box doesn't pop up every time someone logs in to 
Windows. I still want the padlock icon to appear in the system tray so that 
users can click it to obtain tokens if they need to. It's not very high 
priority of course, but it would be nice to know how.

(We have some Windows PCs on which the AFS client is used only occasionally. 
Usually when people log in, they don't want to authenticate to AFS and they 
click cancel. I'd like to configure it so that they get the "Obtain New AFS 
Tokens" dialog box only when they click the padlock icon. We have Windows XP 
Pro running OpenAFS client 1.3.85.)

Thanks,
Dave
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] openafs, swsusp2, pf_freeze and refrigerator

[Jeffrey Hutzelman]

On Friday, September 09, 2005 15:02:56 +0100 "Murray, WJ (Bill)" 
<[EMAIL PROTECTED]> wrote:



Should this not be:

# ifdef AFS_LINUX26_ENV
# ifdef CONFIG_PM
# ifdef LINUX_REFRIGERATOR_TAKES_PF_FREEZE
if (current->flags & PF_FREEZE)
refrigerator(PF_FREEZE);
# else
if (current->flags)
refrigerator();
# endif
# endif
# endif


No, definitely not.  The test is correct as written; your change would make 
it do something else entirely.


-- Jeffrey T. Hutzelman (N3NHS) <[EMAIL PROTECTED]>
  Sr. Research Systems Programmer
  School of Computer Science - Research Computing Facility
  Carnegie Mellon University - Pittsburgh, PA

___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Client start issues

[Russ Allbery]

Derek Atkins <[EMAIL PROTECTED]> writes:
> Russ Allbery <[EMAIL PROTECTED]> writes:

>> Note that as of the latest Debian packages, we no longer even bother
>> trying to patch the OpenAFS init script and just ship our own separate
>> init script and afs.conf file, since the divergences are considerable.

> FWIW I was considering this for Red Hat / Fedora RPMs, too..  Not only
> just providing my own scripts (and ignoring the existing ones), but also
> separating out the afs-client from afs-server into different initscripts
> so they can be configured separately using the standard service
> configuration methods instead of a conf.file.

Yeah, Sam did that same split in Debian a while back.

-- 
Russ Allbery ([EMAIL PROTECTED]) 
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

[OpenAFS] redefined / warning: this is the location.........

[Ron Croonenberg]

When I compile OpenAFS I get a lot of warnings like the one I pasted
below. Can I safely ignore them ?  ...or not ?

thanks,

Ron

Building in directory: MODLOAD-2.4.22-1.2199.nptl_ssi_9smp-Default
make[4]: Entering directory
`/usr/src/redhat/BUILD/openafs-1.2.13/src/libafs/MODLOAD-2.4.22-1.2199.nptl_ssi_9smp-Default'
gcc  -O2 -fomit-frame-pointer -fno-strength-reduce -fno-strict-aliasing
-fno-common -pipe -march=pentium -D__KERNEL__  -DCPU=586 -DKERNEL
-D_KERNEL -DMODULE   -I. -I../
-I/usr/src/redhat/BUILD/openafs-1.2.13/src/config -c
../afsint/Kvldbint.cs.c;
In file included from ../linux/prefetch.h:13,
 from ../linux/list.h:6,
 from ../linux/wait.h:14,
 from ../h/fs.h:12,
 from ../afs/afs_osi.h:26,
 from ../afsint/vldbint.h:51,
 from ../afsint/Kvldbint.cs.c:3:
../asm/processor.h:90:1: warning: "cpu_data" redefined
In file included from ../linux/modversions.h:146,
 from ../afs/param.h:47,
 from ../afsint/vldbint.h:9,
 from ../afsint/Kvldbint.cs.c:3:
../linux/modules/i386_ksyms.ver:92:1: warning: this is the location of
the previous definition

___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Re: [OpenAFS-devel] compiling OpenAFS for OpenSSI

[Derrick J Brashear]

On Fri, 9 Sep 2005, Ron Croonenberg wrote:


Well,  I know how to create a symbolic link.

Thing is that when I use rpmbuild, it deletes the source tree so it will
delete the symbolic link I created too.

So what I tried to ask is how I can make a change in the specs file that
creates that link for me in the MODLOAD directories.


You wouldn't, you'd add a patch to the rpm and have the spec apply it.

However, you could create the symlink, go into the rpm build 
directory, and type "make" and see if it builds, rather than relying on 
rpmbuild to do it for you, at least for testing.


Derrick
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Re: [OpenAFS-devel] compiling OpenAFS for OpenSSI

[Ron Croonenberg]

Well,  I know how to create a symbolic link.

Thing is that when I use rpmbuild, it deletes the source tree so it will
delete the symbolic link I created too.

So what I tried to ask is how I can make a change in the specs file that
creates that link for me in the MODLOAD directories.

Ron


>>> Derrick J Brashear <[EMAIL PROTECTED]> 09/09/05 10:19 AM >>>
On Fri, 9 Sep 2005, Ron Croonenberg wrote:

> Hello all,
>
> I am still trying to compile OpenAFS-1.2.13 for OpenSSI (based op RH9)
> I can't really get it figured out but I have the impression that
perhaps
> a wrong include directory is used when compiling libafs ?
> I added the compiler messages at the end of this msg.

> ../linux/modules/i386_ksyms.ver:136:1: warning: this is the location
of
> the previous definition
> In file included from ../linux/capability.h:17,
> from ../linux/binfmts.h:4,
> from ../linux/sched.h:10,
> from ../asm/uaccess.h:8,
> from ../afs/sysincludes.h:65,
> from ../afs/afs_analyze.c:19:
> ../linux/fs.h:27:35: cluster/ssi/cfs/const.h: No such file or
directory

yeah, it might be as simple as creating a link to cluster. seems like
you 
could try it, instead of asking. what's the worst that happens?

Derrick
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

[OpenAFS] Re: [OpenAFS-devel] compiling OpenAFS for OpenSSI

[Derrick J Brashear]

On Fri, 9 Sep 2005, Ron Croonenberg wrote:


Hello all,

I am still trying to compile OpenAFS-1.2.13 for OpenSSI (based op RH9)
I can't really get it figured out but I have the impression that perhaps
a wrong include directory is used when compiling libafs ?
I added the compiler messages at the end of this msg.



../linux/modules/i386_ksyms.ver:136:1: warning: this is the location of
the previous definition
In file included from ../linux/capability.h:17,
from ../linux/binfmts.h:4,
from ../linux/sched.h:10,
from ../asm/uaccess.h:8,
from ../afs/sysincludes.h:65,
from ../afs/afs_analyze.c:19:
../linux/fs.h:27:35: cluster/ssi/cfs/const.h: No such file or directory


yeah, it might be as simple as creating a link to cluster. seems like you 
could try it, instead of asking. what's the worst that happens?


Derrick
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] openafs, swsusp2, pf_freeze and refrigerator

[Derrick J Brashear]

On Fri, 9 Sep 2005, Murray, WJ (Bill) wrote:


  Hi Derrick,
   Same problem as a previous poster - I am not signed into the
announce list, silly me. But when nothing appears under 'unstable'
on the WWW page it doesn't encourage me to look further.

 I tried it, and something still seems to be wrong.
I still get an error that PF_FREEZE is not defined.


That's fixed in CVS as of yesterday, but not in an rc yet. Sorry.


#ifdef AFS_LINUX26_ENV
#ifdef CONFIG_PM
#ifdef LINUX_REFRIGERATOR_TAKES_PF_FREEZE
if (current->flags & PF_FREEZE)
refrigerator(PF_FREEZE);


not necessarily.
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] openafs, swsusp2, pf_freeze and refrigerator

[Murray, WJ (Bill)]

   Hi Derrick,
Same problem as a previous poster - I am not signed into the
announce list, silly me. But when nothing appears under 'unstable' 
on the WWW page it doesn't encourage me to look further.
   
  I tried it, and something still seems to be wrong.
I still get an error that PF_FREEZE is not defined.

#ifdef AFS_LINUX26_ENV
#ifdef CONFIG_PM
if (current->flags & PF_FREEZE)
#ifdef LINUX_REFRIGERATOR_TAKES_PF_FREEZE
refrigerator(PF_FREEZE);
#else
refrigerator();
#endif
#endif
#endif

   I am not sure where config_pm is defined, but it must be defined in
my case, (FC4, swsusp2). LINUX_REFRIGERATOR_TAKES_PF_FREEZE is false.

Should this not be:

#ifdef AFS_LINUX26_ENV
#ifdef CONFIG_PM
#ifdef LINUX_REFRIGERATOR_TAKES_PF_FREEZE
if (current->flags & PF_FREEZE)
refrigerator(PF_FREEZE);
#else
if (current->flags)
refrigerator();
#endif
#endif
#endif


 Bill
   


On Fri, 2005-09-09 at 09:11 -0400, Derrick J Brashear wrote:
> On Fri, 9 Sep 2005, Murray, WJ (Bill) wrote:
> 
> >  Hello list (esp. Derrick!)
> > I am just trying to compile openafs 1.3.87 with swsusp2 2.1.9.9
> > on Fedora 4, and have hit the problems of refrigerator takes no
> > argument, and  PF_FREEZE went away which you refer to.
> > There appears to be a dirty hack to make it compile  - remove
> > PF_FREEZE - but is there a better solution (e.g. 1.4 RC1)?
> 
> 
> Why you'd not want to try the release candidate is beyond me.
> 
> rc3 (the current one) should fix it.
> 
> Derrick
> 
> ___
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] multi-homed issue

[Frank Burkhardt]

Hi,

On Thu, Sep 08, 2005 at 12:45:09PM -0700, Pucky Loucks wrote:
> Hi everyone, is there a way to make a fileserver start and chose the  
> ipaddress that it binds too.

No.

>  i.e. I have 3 ips and I only want to use 1.

... but it's possible to register only given adresses in the VLDB:

 http://www.openafs.org/pages/doc/AdminReference/auarf025.htm

Addresses that are not registered will not be used by AFS-clients.

Regards,

Frank
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

[OpenAFS] compiling OpenAFS for OpenSSI

[Ron Croonenberg]

Hello all,

I am still trying to compile OpenAFS-1.2.13 for OpenSSI (based op RH9)
I can't really get it figured out but I have the impression that perhaps
a wrong include directory is used when compiling libafs ?
I added the compiler messages at the end of this msg.

At some point there seem to be a bunch of things that are "redifined"
and later on "it" complains about a headerfile not being there.

I don't think it's as simple as creating a link in the MODLOAD-
directory to that cluster include directory..  is it ?

In case it is "that simple"  how can I change the "openafs-1.2.13.spec"
file so that it creates that link ?

thanks,

Ron


Building in directory: MODLOAD-2.4.22-1.2199.nptl_ssi_9smp-i386-SP
make[4]: Entering directory
`/usr/src/redhat/BUILD/openafs-1.2.13/src/libafs/MODLOAD-2.4.22-1.2199.nptl_ssi_9smp-i386-SP'
gcc   -O2 -fomit-frame-pointer -fno-strength-reduce -fno-strict-aliasing
-fno-common -pipe -march=pentium -D__KERNEL__  -DCPU=586 -DKERNEL
-D_KERNEL -DMODULE -DREDHAT_FIX  -I. -I../
-I/usr/src/redhat/BUILD/openafs-1.2.13/src/config -c
../afs/afs_atomlist.c;
gcc   -O2 -fomit-frame-pointer -fno-strength-reduce -fno-strict-aliasing
-fno-common -pipe -march=pentium -D__KERNEL__  -DCPU=586 -DKERNEL
-D_KERNEL -DMODULE -DREDHAT_FIX  -I. -I../
-I/usr/src/redhat/BUILD/openafs-1.2.13/src/config -c ../afs/afs_lhash.c;
gcc   -O2 -fomit-frame-pointer -fno-strength-reduce -fno-strict-aliasing
-fno-common -pipe -march=pentium -D__KERNEL__  -DCPU=586 -DKERNEL
-D_KERNEL -DMODULE -DREDHAT_FIX  -I. -I../
-I/usr/src/redhat/BUILD/openafs-1.2.13/src/config -c
../afs/afs_analyze.c;
In file included from ../linux/prefetch.h:13,
 from ../linux/list.h:6,
 from ../linux/wait.h:14,
 from ../afs/sysincludes.h:51,
 from ../afs/afs_analyze.c:19:
../asm/processor.h:90:1: warning: "cpu_data" redefined
In file included from ../linux/modversions.h:146,
 from ../afs/param.h:47,
 from ../afs/afs_analyze.c:14:
../linux/modules/i386_ksyms.ver:92:1: warning: this is the location of
the previous definition
In file included from ../linux/wait.h:16,
 from ../afs/sysincludes.h:51,
 from ../afs/afs_analyze.c:19:
../linux/spinlock.h:65:1: warning: "atomic_dec_and_lock" redefined
In file included from ../linux/modversions.h:146,
 from ../afs/param.h:47,
 from ../afs/afs_analyze.c:14:
../linux/modules/i386_ksyms.ver:136:1: warning: this is the location of
the previous definition
In file included from ../linux/capability.h:17,
 from ../linux/binfmts.h:4,
 from ../linux/sched.h:10,
 from ../asm/uaccess.h:8,
 from ../afs/sysincludes.h:65,
 from ../afs/afs_analyze.c:19:
../linux/fs.h:27:35: cluster/ssi/cfs/const.h: No such file or directory
In file included from ../linux/ext3_fs_sb.h:20,
 from ../linux/fs.h:771,
 from ../linux/capability.h:17,
 from ../linux/binfmts.h:4,
 from ../linux/sched.h:10,
 from ../asm/uaccess.h:8,
 from ../afs/sysincludes.h:65,
 from ../afs/afs_analyze.c:19:
../linux/timer.h:30:1: warning: "del_timer_sync" redefined
In file included from ../linux/modversions.h:193,
 from ../afs/param.h:47,
 from ../afs/afs_analyze.c:14:
../linux/modules/ksyms.ver:626:1: warning: this is the location of the
previous definition
In file included from ../linux/sched.h:24,
 from ../asm/uaccess.h:8,
 from ../afs/sysincludes.h:65,
 from ../afs/afs_analyze.c:19:
../linux/smp.h:101:1: warning: "smp_num_cpus" redefined
In file included from ../linux/modversions.h:146,
 from ../afs/param.h:47,
 from ../afs/afs_analyze.c:14:
../linux/modules/i386_ksyms.ver:96:1: warning: this is the location of
the previous definition
In file included from ../linux/sched.h:24,
 from ../asm/uaccess.h:8,
 from ../afs/sysincludes.h:65,
 from ../afs/afs_analyze.c:19:
../linux/smp.h:109:1: warning: "smp_call_function" redefined
In file included from ../linux/modversions.h:146,
 from ../afs/param.h:47,
 from ../afs/afs_analyze.c:14:
../linux/modules/i386_ksyms.ver:116:1: warning: this is the location of
the previous definition
In file included from ../linux/sched.h:24,
 from ../asm/uaccess.h:8,
 from ../afs/sysincludes.h:65,
 from ../afs/afs_analyze.c:19:
../linux/smp.h:110:1: warning: "cpu_online_map" redefined
In file included from ../linux/modversions.h:146,
 from ../afs/param.h:47,
 from ../afs/afs_analyze.c:14:
../linux/modules/i386_ksyms.ver:100:1: warning: this is the location of
the previous definition
In file included from ../asm/uaccess

Re: [OpenAFS] openafs, swsusp2, pf_freeze and refrigerator

[Derrick J Brashear]

On Fri, 9 Sep 2005, Murray, WJ (Bill) wrote:


 Hello list (esp. Derrick!)
I am just trying to compile openafs 1.3.87 with swsusp2 2.1.9.9
on Fedora 4, and have hit the problems of refrigerator takes no
argument, and  PF_FREEZE went away which you refer to.
There appears to be a dirty hack to make it compile  - remove
PF_FREEZE - but is there a better solution (e.g. 1.4 RC1)?



Why you'd not want to try the release candidate is beyond me.

rc3 (the current one) should fix it.

Derrick

___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] debian, login, pam.d, home on afs and aklog

[Dirk Heinrichs]

Am Freitag, 9. September 2005 13:16 schrieb ext Sergio Gelato:

> Haven't tried recent Red Hat pam_krb5 (2.x) yet.

That's the one that I use on Gentoo, works fine.

> > Anyone knows a easy way for users to get tokens on login?

Try latest pam_krb5 from RH/Fedora. The pre 2.x versions can't get tokens 
from krb5 tickets.

Bye...

Dirk
-- 
Dirk Heinrichs  | Tel:  +49 (0)162 234 3408
Configuration Manager   | Fax:  +49 (0)211 47068 111
Capgemini Deutschland   | Mail: [EMAIL PROTECTED]
Hambornerstraße 55  | Web:  http://www.capgemini.com
D-40472 Düsseldorf  | ICQ#: 110037733
GPG Public Key C2E467BB | Keyserver: www.keyserver.net


pgpPjUPactTzb.pgp
Description: PGP signature

Re: [OpenAFS] OpenAFS for Fedora Core 4

[Derek Atkins]

Hi,.

Manfred Lau <[EMAIL PROTECTED]> writes:

> Is OpenAFS not available for Fedora Core 4? I tried to
> install the version for FC1 and Redhat 9, and they
> did not work.  Any way to get it to work on FC4?
>
> Thanks.

There are no RPMS yet.  I'm hoping to get to them sometime "soon".
I'm still trying to merge all the RPM Specfile suggestions from
everyone over the past couple years and decide how I want the 1.4 RPMS
to behave.  For example, the guys at UMich separated out the authlibs
into their own package, but I'm not sure whether it needs to be its
own package  I'm still debating.

I'm also debating which RH/FC platforms to support.  Even though I use
FC3 on my desktop I'm seriously thinking that I only want to support
FC4 and EL4, due to the way they use the kernel-devel packages.
Anything earlier than that would be a pain to have pre-built kernel
modules.

We'll see.

-derek
-- 
   Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
   Member, MIT Student Information Processing Board  (SIPB)
   URL: http://web.mit.edu/warlord/PP-ASEL-IA N1NWH
   [EMAIL PROTECTED]PGP key available
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] debian, login, pam.d, home on afs and aklog

[Frank Burkhardt]

Hi,

On Fri, Sep 09, 2005 at 12:16:12PM +0200, Lars Schimmer wrote:

[snip]

> So: where is the magic knob on debian to execute aklog for every login?

There's a pam-plugin for debian which does the job (package
libpam-openafs-session). You need a pam configuration file like this for any
service that should get a token:

 auth required pam_krb5.so
 auth required pam_openafs_session.so

Have a look at http://fbo.no-ip.org/m/common-auth-afs for a more complex
example.

> And: has anyone ticket forwarding running on debian sarge and has a
> small guide for it?

I do. Knowing that you're a german speaker, I would suggest you to read
"Anhang A - SSH-Login-Varianten" of the InstantAFS-admin-guide which can
be downloaded here:

 https://wiki.cbs.mpg.de/twiki/pub/Openafs/DokuMentation/admin-guide.pdf

There are packages available for sarge. Look here for further information:

 https://wiki.cbs.mpg.de/cgi-bin/twiki//view/Openafs/DebianPakete

Regards,

Frank
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Client start issues

[Derek Atkins]

Russ Allbery <[EMAIL PROTECTED]> writes:

> Note that as of the latest Debian packages, we no longer even bother
> trying to patch the OpenAFS init script and just ship our own separate
> init script and afs.conf file, since the divergences are considerable.

FWIW I was considering this for Red Hat / Fedora RPMs, too..  Not only
just providing my own scripts (and ignoring the existing ones), but
also separating out the afs-client from afs-server into different
initscripts so they can be configured separately using the standard
service configuration methods instead of a conf.file.

-derek
-- 
   Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
   Member, MIT Student Information Processing Board  (SIPB)
   URL: http://web.mit.edu/warlord/PP-ASEL-IA N1NWH
   [EMAIL PROTECTED]PGP key available
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] debian, login, pam.d, home on afs and aklog

[Sergio Gelato]

* Lars Schimmer [2005-09-09 12:16:12 +0200]:
> I configured OpenAFS 1.4.0rc1 to obtain tickets via krb5 on login and
> users get tickets on login, but aklog isn't run, so they only got
> tickets, no tokens.

The Official Debian Way involves package libpam-openafs-session.
Use it as a session and/or auth module (the latter for situations
in which the session part of the stack is not run, e.g. reauthentication
by a screen saver).

Alternatively, one can use pam_krb5afs from some of the pam_krb5
implementations out there. I still use Sourceforge pam_krb5 (1.3), with
a patch to make it build with sarge's Heimdal library. Haven't tried
recent Red Hat pam_krb5 (2.x) yet.

> Anyone knows a easy way for users to get tokens on login?

Yes, use the right PAM modules. Details have been posted on this list
a few days ago, by Russ Allbery I believe.

> And: has anyone ticket forwarding running on debian sarge and has a
> small guide for it?

Straying off-topic here: this is purely a Kerberos, not an AFS question.

I do. It's mostly a matter of requesting forwardable TGTs. The easy way
is to specify
[libdefaults]
forwardable = true
in /etc/krb5.conf. You can have more fine-grained control via the
[appdefaults] section if you wish. Then of course you need to configure
your GSS applications (ssh-krb5 etc.) to actually delegate the credentials.

(I'm running a slightly patched version of sarge's ssh-krb5. See #918
and #922 in the OpenSSH bug tracker.)
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] OpenAFS for Fedora Core 4

[Chris Crowther]

Murray, WJ (Bill) wrote:

> There are also rpms for RHEL 4 from
> http://www-personal.engin.umich.edu/~wingc/openafs/dist/1.3.87/RPMS/i386/

I used the spec file from
http://www.linux.ncsu.edu/projects/openafs-rpms/ and the latest snapshot
tar balls to build a set of RPMs.

I just need to build an openafs-session PAM module as well at some
point; though since my FC4 setup is just a kick about, running under
VMWare, I've not considered it a priority.

> Bill

-- 
Chris Crowther
J&M Crowther Ltd.

___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] debian, login, pam.d, home on afs and aklog

[Chris Huebsch]

Hi,

On Fri, 9 Sep 2005, Lars Schimmer wrote:


Anyone knows a easy way for users to get tokens on login?


Try libpam-openafs-session.


Chris
--
Chris Huebschwww.huebsch-gemacht.de | TU Chemmnitz, Informatik, RNVS
GPG-Encrypted mail welcome! ID:7F2B4DBA |   Str. d. Nationen 62, B204
 Chemnitzer Linux-Tage 2006, 4.-5.Maerz |   D-09107 Chemnitz
http://chemnitzer.linux-tage.de/|  +49 371 531-1377, Fax -1803
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

[OpenAFS] openafs, swsusp2, pf_freeze and refrigerator

[Murray, WJ (Bill)]

  Hello list (esp. Derrick!)
 I am just trying to compile openafs 1.3.87 with swsusp2 2.1.9.9
on Fedora 4, and have hit the problems of refrigerator takes no
argument, and  PF_FREEZE went away which you refer to.
 There appears to be a dirty hack to make it compile  - remove
PF_FREEZE - but is there a better solution (e.g. 1.4 RC1)?
   Thanks,
Bll
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] debian, login, pam.d, home on afs and aklog

[Christof Hanke]

Lars Schimmer wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> Hi!
>
> Just a quick question:
> I configured OpenAFS 1.4.0rc1 to obtain tickets via krb5 on login and
> users get tickets on login, but aklog isn't run, so they only got
> tickets, no tokens.
> Anyone knows a easy way for users to get tokens on login?

> I mean, if I setup a bash script on login, is the aklog before changing
> to home dir access? And what with users not using a bash?
>
> So: where is the magic knob on debian to execute aklog for every login?
I don't know much about debian but the following post from Douglas 
Engert might help :

https://lists.openafs.org/pipermail/openafs-info/2005-May/017905.html

Basically, use pam.

Christof
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

[OpenAFS] debian, login, pam.d, home on afs and aklog

[Lars Schimmer]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi!

Just a quick question:
I configured OpenAFS 1.4.0rc1 to obtain tickets via krb5 on login and
users get tickets on login, but aklog isn't run, so they only got
tickets, no tokens.
Anyone knows a easy way for users to get tokens on login?
I mean, if I setup a bash script on login, is the aklog before changing
to home dir access? And what with users not using a bash?

So: where is the magic knob on debian to execute aklog for every login?
And: has anyone ticket forwarding running on debian sarge and has a
small guide for it?

Cya & Thx
Lars
- --
- -
TU Graz, Institut für ComputerGraphik & WissensVisualisierung
Tel.: +43 316 873-5405   E-Mail: [EMAIL PROTECTED]
PGP-Key-ID: 0xB87A0E03
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDIWDrVguzrLh6DgMRAq4DAKC7MhaqdskWLUL+FiU9KkEUgHbq2ACfSLzX
iu4rEOTKoAl+2d4yEVk14Wo=
=Ljyn
-END PGP SIGNATURE-
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] OpenAFS for Fedora Core 4

[Murray, WJ (Bill)]

  Hi Manfred,
 The src from 1.3.87 works as a client just fine for me.
There are also rpms for RHEL 4 from
http://www-personal.engin.umich.edu/~wingc/openafs/dist/1.3.87/RPMS/i386/

  would these work for FC4?

Bill

On Thu, 2005-09-08 at 23:13 -0700, Manfred Lau wrote:
> Is OpenAFS not available for Fedora Core 4? I tried to
> install the version for FC1 and Redhat 9, and they
> did not work.  Any way to get it to work on FC4?
> 
> Thanks.
> 
> 
> 
>   
>   
> __
> Click here to donate to the Hurricane Katrina relief effort.
> http://store.yahoo.com/redcross-donate3/
> ___
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info