RE: [OpenAFS] Kindle Editions of OpenAFS documentation

[David Boyes]

> so docbook provides an alpha/beta util for going from docbook to epub,
> dbtoepub.  i ran this on an older copy of the .xml of the useruide
> to get an .epub and then converted with mobipocketreader to .prc.
> 
> i copied this over to my kindle and it looks pretty good, fonts looke
> right and the links work like they should.   files are in my public
> afs space.
> 
> /afs/cmf/public/chas/auusg000.epub
> /afs/cmf/public/chas/auusg000.prc

The .epub looks great on my Nook, iPad, and iPhone. Thanks. That's way useful. 

-- db
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Re: [OpenAFS-announce] AFS & Kerberos Best Practices Workshop 2011: June 13 to 17 - Registration Open

[Jeffrey Altman]

On 6/1/2011 7:42 PM, Chaz Chandler wrote:
> Will there be an 'offline' / 'view later' option for those of us unable to 
> tune in to the events in real time?
> -Chaz
> 

We will see what we can do for registrants but I cannot guarantee that
such functionality will be available this year.

Jeffrey Altman



signature.asc
Description: OpenPGP digital signature

[OpenAFS] Re: [OpenAFS-announce] AFS & Kerberos Best Practices Workshop 2011: June 13 to 17 - Registration Open

[Chaz Chandler]

Will there be an 'offline' / 'view later' option for those of us unable to tune 
in to the events in real time?
-Chaz

Jeffrey Altman  wrote:

>The AFS and Kerberos Best Practices Workshop Committee is happy to
>announce that registration for the 2011 AFS and Kerberos Best Practices
>Workshop is now open.  As previously announced, this year's tutorials
>and workshop sessions will be held as an electronic conference which we
>hope will permit a broader range of attendees to participate in a year
>of reduced travel budgets.
>
>This year we have two new tutorial instructors with significantly
>updated course materials.  We welcome Kim Kimball as our new AFS
>instructor and Simon Wilkinson as our new Kerberos instructor.  Kim's
>experience as an AFS trainer dates back to his days with IBM/Transarc
>and Simon has been enabling application protocols to authenticate with
>Kerberos and GSS-API for nearly a decade.  Both have given numerous
>informational and entertaining talks at past workshops.
>
>  http://workshop.openafs.org/afsbpw11/afstut.html
>
>  http://workshop.openafs.org/afsbpw11/kerbtut.html
>
>The price for each is US$100.00.
>
>The workshop sessions will include many of our most popular speakers:
>
>  Russ Allbery
>  Jeffrey Altman
>  Matt Benjamin
>  Derrick Brashear
>  Andrew Deason
>  Asanka Herath
>  Love Hornquist Astrand
>  Henry Hotz
>  Tom Keiser
>  Mike Meffie
>  Simon Wilkinson
>
>and will be hosted by Kim Kimball and Marshall Vale.  Topics include:
>
>  A History of AFS
>  AFS and Kerberos Project Status Reports
>  Obtaining AFS Credentials at login on MacOS X
>  Web Authentication
>  KX509 extensions
>  A practical guide to upgrading AFS from rxkad to rxgk security
>  Performance Benefits of the AFS Extended Callback model
>  Deploying the Demand Attach File Server (DAFS) - [New in OpenAFS 1.6]
>  AFS RX Performance
>  Analyzing AFS Statistics
>  OpenAFS Futures
>
>and our two most popular panels will return:
>
>  Live Troubleshooting
>   - submit real world problems for live analysis
>
>  Stump the Experts
>   - ask anything related to Kerberos or AFS, get an answer
>
>Finally, the workshop would not be complete without the annual site
>reports in which attendees tell each other how Kerberos and AFS have
>been successfully deployed within their organizations.
>
>The price for the three days of workshop sessions is US$60.00.
>
>The AFS and Kerberos Best Practices Workshop is appropriate for anyone
>that is responsible for deploying or curious about real world
>distributed computing environments.
>
>The 2011 AFS and Kerberos Best Practices Workshop is sponsored by Your
>File System, Inc. (http://www.your-file-system.com) and Secure
>Endpoints, Inc. (http://www.secure-endpoints.com).
>
>Please submit site reports and troubleshooting issues to
>workshop-i...@openafs.org.
>
>Jeffrey Altman
>on behalf of the Workshop committee
>
>


Send your photos by email in seconds...
TRY FREE IM TOOLPACK at http://www.imtoolpack.com/default.aspx?rc=if3
Works in all emails, instant messengers, blogs, forums and social networks.
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Kindle Editions of OpenAFS documentation

[Chas Williams (CONTRACTOR)]

after looking at it, the epub looks good.  the conversion to mobi/proc
lost a little bit with the command (fixed font) examples.  it appears
that the line breaks were ignord.

the index doesnt work either.  that might be broken in the original xml
sources though.  the toc does work and that makes me think that there
is a reserved character in the index references/links (like # perhaps)

In message <4de6c351.8020...@qualcomm.com>,"Patty O'Reilly" writes:
>Nice! Works great.
>
>On 6/1/11 3:12 PM, Chas Williams (CONTRACTOR) wrote:
>> In message<87oc2hmo4d@windlord.stanford.edu>,Russ Allbery writes:
>>> I'm not sure about the most recent, but older Kindles absolutely will not
>>> handle ePub.  Also, if the goal is to get it into the Amazon store, I'm
>>> pretty sure it's going to have to be in MOBI format.
>>
>> they saw they dont.  but...
>>
>>> Like I said, though, it doesn't have to be an either/or thing.  Plus, I'll
>>> point out that all the source is right there, available to you, for you to
>>> make ePub format documentation.  Knock yourself out.
>>
>> so docbook provides an alpha/beta util for going from docbook to epub,
>> dbtoepub.  i ran this on an older copy of the .xml of the useruide
>> to get an .epub and then converted with mobipocketreader to .prc.
>>
>> i copied this over to my kindle and it looks pretty good, fonts looke
>> right and the links work like they should.   files are in my public
>> afs space.
>>
>> /afs/cmf/public/chas/auusg000.epub
>> /afs/cmf/public/chas/auusg000.prc
>> ___
>> OpenAFS-info mailing list
>> OpenAFS-info@openafs.org
>> https://lists.openafs.org/mailman/listinfo/openafs-info
>
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Kindle Editions of OpenAFS documentation

[Patty O'Reilly]

Nice! Works great.

On 6/1/11 3:12 PM, Chas Williams (CONTRACTOR) wrote:

In message<87oc2hmo4d@windlord.stanford.edu>,Russ Allbery writes:

I'm not sure about the most recent, but older Kindles absolutely will not
handle ePub.  Also, if the goal is to get it into the Amazon store, I'm
pretty sure it's going to have to be in MOBI format.


they saw they dont.  but...


Like I said, though, it doesn't have to be an either/or thing.  Plus, I'll
point out that all the source is right there, available to you, for you to
make ePub format documentation.  Knock yourself out.


so docbook provides an alpha/beta util for going from docbook to epub,
dbtoepub.  i ran this on an older copy of the .xml of the useruide
to get an .epub and then converted with mobipocketreader to .prc.

i copied this over to my kindle and it looks pretty good, fonts looke
right and the links work like they should.   files are in my public
afs space.

/afs/cmf/public/chas/auusg000.epub
/afs/cmf/public/chas/auusg000.prc
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Kindle Editions of OpenAFS documentation

[Chas Williams (CONTRACTOR)]

In message <87oc2hmo4d@windlord.stanford.edu>,Russ Allbery writes:
>I'm not sure about the most recent, but older Kindles absolutely will not
>handle ePub.  Also, if the goal is to get it into the Amazon store, I'm
>pretty sure it's going to have to be in MOBI format.

they saw they dont.  but...

>Like I said, though, it doesn't have to be an either/or thing.  Plus, I'll
>point out that all the source is right there, available to you, for you to
>make ePub format documentation.  Knock yourself out.

so docbook provides an alpha/beta util for going from docbook to epub,
dbtoepub.  i ran this on an older copy of the .xml of the useruide
to get an .epub and then converted with mobipocketreader to .prc.

i copied this over to my kindle and it looks pretty good, fonts looke
right and the links work like they should.   files are in my public
afs space.

/afs/cmf/public/chas/auusg000.epub
/afs/cmf/public/chas/auusg000.prc
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Re: AFS and freedesktop.org trash

[Derrick Brashear]

find the reference to .directory in afs_lookup
(src/afs/VNOPS/afs_vnop_lookup.c) and read on...

On Wed, Jun 1, 2011 at 2:47 PM, Ken Dreyer  wrote:
> On Wed, Jun 1, 2011 at 11:57 AM,   wrote:
>> If you are using something like
>> nscd, then you can adjust negative ttl's in the nscd.conf file.
>
> I did use nscd for a while. I regularly sign in and out of a VPN on
> this computer, and nscd was caching the negative responses for
> internal-only hostnames when I dropped out of the VPN. When I would
> re-enter, I couldn't connect to my internal servers (by hostname :)
> and after a while DNS caching was more trouble than it was worth.
>
> I am curious about the Mac solution to this.
>
> - Ken
> ___
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info
>



-- 
Derrick
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Re: AFS and freedesktop.org trash

[Ken Dreyer]

On Wed, Jun 1, 2011 at 11:57 AM,   wrote:
> If you are using something like
> nscd, then you can adjust negative ttl's in the nscd.conf file.

I did use nscd for a while. I regularly sign in and out of a VPN on
this computer, and nscd was caching the negative responses for
internal-only hostnames when I dropped out of the VPN. When I would
re-enter, I couldn't connect to my internal servers (by hostname :)
and after a while DNS caching was more trouble than it was worth.

I am curious about the Mac solution to this.

- Ken
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Kindle Editions of OpenAFS documentation

[Derrick Brashear]

> I'm not sure about the most recent, but older Kindles absolutely will not
> handle ePub.  Also, if the goal is to get it into the Amazon store, I'm
> pretty sure it's going to have to be in MOBI format.
>
> Like I said, though, it doesn't have to be an either/or thing.  Plus, I'll
> point out that all the source is right there, available to you, for you to
> make ePub format documentation.  Knock yourself out.

Wild suggestion: whoever wants support for whatever, build a virtual
appliance which can
translate to that format, and we can just plug it into buildbot and
get fresh docs generated at will,
and ship from it as needed. You don't need to host the virtual
appliance. We just need the image
to boot.
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Re: AFS and freedesktop.org trash

[omalleys]

Quoting Andrew Deason :


On Wed, 1 Jun 2011 10:51:42 -0600
Ken Dreyer  wrote:


I was curious if anyone has experience with AFS and the
freedesktop.org "trashcan" spec.

http://www.freedesktop.org/wiki/Specifications/trash-spec

The spec references a "topdir" area where a ".Trash" or a
".Trash-$uid" directory can exist at the top of a filesystem mount.
For AFS, that translates to /afs/.Trash . With -afsdb enabled, this
means doing several DNS lookups for a "Trash" AFS cell.


Don't we do some kind of blacklisting on OS X for things like this? We
could just ignore dynroot requests for .Trash. It's a legit name to have
there, though.

But also, shouldn't negative DNS responses be cached for awhile? I
wouldn't think each of these accesses should entail a long delay.


It depends on how your system is configured. If you are using  
something like nscd, then you can adjust negative ttl's in the  
nscd.conf file. dnsmasq uses the ttl handed out by the dns server in  
the SOA record which bind9 is clarifying that as the minimum ttl.  If  
none is set then it is 0. (There is an option to override this  
behavior.)


dnsmasq also doesn't doesnt cache tcp dns requests at all. (according  
to their faq.)




___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Kindle Editions of OpenAFS documentation

[David Boyes]

> 
> How recent?  I got mine literally a month ago, and I don't see any sign of
> ePub support.  Although maybe it just doesn't advertise; I suppose I
> should actually try it.

6 months or so. They don't advertise it because guess what: you might buy books 
from somewhere else (horrors..)


> 
>> MOBI is restricted in that the only commonly-available reader that can
>> handle it is kindle.  

There are passably good mobi readers for iPod/iPad/iPhone as well. I've seen 
claims for android apps too, but you might as well use the Kindle app for 
android.

___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Kindle Editions of OpenAFS documentation

[Russ Allbery]

David Boyes  writes:

> Yes, the point was for the files to work on all the readers, instead of
> just the Kindle. To do that, you have to use a non-Kindle format, and
> ePub (a superset of PDF) is the most widely accepted. That gets you the
> kindle, Sony reader, Nook, iPad/iPhone, most Symbian devices, Android,
> and Blackberry devices. Most of the desktops and laptops with moderately
> recent PDF readers can also handle ePub.

I'm not sure about the most recent, but older Kindles absolutely will not
handle ePub.  Also, if the goal is to get it into the Amazon store, I'm
pretty sure it's going to have to be in MOBI format.

Like I said, though, it doesn't have to be an either/or thing.  Plus, I'll
point out that all the source is right there, available to you, for you to
make ePub format documentation.  Knock yourself out.

-- 
Russ Allbery (r...@stanford.edu) 
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Kindle Editions of OpenAFS documentation

[Patty O'Reilly]

Go here to see what kindle supports.



On 6/1/11 10:20 AM, Jake Thebault-Spieker wrote:

I can confirm that the Kindle cannot read ePub, but .mobi files work
just fine. the Adobe Editions ePub files tend to be DRM'd, although also
don't require DRM to be used.

If we're talking about kindle-specific options, .mobi is probably best.
If we're looking for an "ereader format" that'll span most things, PDF
or ePub would be better, although ePub does exclude Kindle users.

On Wed, Jun 1, 2011 at 12:16 PM, Russ Allbery mailto:r...@stanford.edu>> wrote:

David Boyes mailto:dbo...@sinenomine.net>>
writes:

 >> Would the community find it useful if I were to create Amazon Kindle
 >> Editions of the OpenAFS Documentation?

 > Adobe ePub versions would be helpful. That way all the common
electronic
 > readers can use them, rather than use a restricted format.

Except for the Kindle, which I don't think can read ePub (IIRC, it needs
MOBI). MOBI is also not a restricted format; it has hooks for DRM, but
you don't have to use them.

--
Russ Allbery (r...@stanford.edu )
>
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org 
https://lists.openafs.org/mailman/listinfo/openafs-info




--
Jacob Thebault-Spieker
Cell: (320) 288-6412
http://summatusmentis.com

___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Kindle Editions of OpenAFS documentation

[David Boyes]

Yes, the point was for the files to work on all the readers, instead of just 
the Kindle. To do that, you have to use a non-Kindle format, and ePub (a 
superset of PDF) is the most widely accepted. That gets you the kindle, Sony 
reader, Nook, iPad/iPhone, most Symbian devices, Android, and Blackberry 
devices. Most of the desktops and laptops with moderately recent PDF readers 
can also handle ePub.

Pure PDF doesn't reformat well for smaller screens or different orientations or 
font sizes. EPub was designed to cope better with all those things. ePub could 
be productively read and used on small phone screens; that's hard to do with 
PDF.



On Jun 2, 2011, at 0:12, "Patty O'Reilly"  wrote:

> The newer Kindles allow many more file types then the old ones. PDF is 
> fine as long as it isn't drm protected.
> 
>> 
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Kindle Editions of OpenAFS documentation

[Jeffrey Altman]

On 6/1/2011 1:22 PM, Lee Damon wrote:
 Would the community find it useful if I were to create Amazon Kindle
 Editions of the OpenAFS Documentation?
>>
>>> Adobe ePub versions would be helpful. That way all the common electronic
>>> readers can use them, rather than use a restricted format.
>>
>> Except for the Kindle, which I don't think can read ePub (IIRC, it needs
>> MOBI).  MOBI is also not a restricted format; it has hooks for DRM, but
>> you don't have to use them.
> 
> Recent kindles can read PDF and ePub.  MOBI is restricted in that the
> only commonly-available reader that can handle it is kindle.  Why limit
> your audience like that?  ePub is common, un-restricted, and open. PDF
> is even more so (though less flexible in re-flow and other formatting -
> if that matters to you).
> 
> nomad

We already have PDF and Windows HtmlHelp (CHM) formatted titles.

Publishing as a Amazon Kindle book has two big benefits:

 1. It is native to the reader and has a better end-user experience
that PDF.

 2. It is advertised on Amazon and as such helps to enhance the
viability of OpenAFS as a product.

Jeffrey Altman



signature.asc
Description: OpenPGP digital signature

[OpenAFS] Re: AFS and freedesktop.org trash

[Andrew Deason]

On Wed, 01 Jun 2011 13:19:45 -0400
Jeffrey Altman  wrote:

> There is another related issue here.  The behavior that is actually
> desirable is for a .Trash to be created at the root of each AFS
> volume.

Has it been discussed before the possibility of making volume actual
mounts (as in, visible mounts to the OS)? istr that's what kafs was
trying to do, and it would make some things like this work more
correctly.

-- 
Andrew Deason
adea...@sinenomine.net

___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Kindle Editions of OpenAFS documentation

[Russ Allbery]

Lee Damon  writes:

> Recent kindles can read PDF and ePub.

How recent?  I got mine literally a month ago, and I don't see any sign of
ePub support.  Although maybe it just doesn't advertise; I suppose I
should actually try it.

I know it supports PDF, but PDF is kind of useless for portable devices.

> MOBI is restricted in that the only commonly-available reader that can
> handle it is kindle.  Why limit your audience like that?  ePub is
> common, un-restricted, and open. PDF is even more so (though less
> flexible in re-flow and other formatting - if that matters to you).

It doesn't need to be an either/or decision.  Once you have either ePub or
MOBI, I believe there are existing tools, like Calibre, to convert, even
if the publication chain can't generate either from the start.

-- 
Russ Allbery (r...@stanford.edu) 
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Kindle Editions of OpenAFS documentation

[Lee Damon]

>>> Would the community find it useful if I were to create Amazon Kindle
>>> Editions of the OpenAFS Documentation?
> 
>> Adobe ePub versions would be helpful. That way all the common electronic
>> readers can use them, rather than use a restricted format.
> 
> Except for the Kindle, which I don't think can read ePub (IIRC, it needs
> MOBI).  MOBI is also not a restricted format; it has hooks for DRM, but
> you don't have to use them.

Recent kindles can read PDF and ePub.  MOBI is restricted in that the
only commonly-available reader that can handle it is kindle.  Why limit
your audience like that?  ePub is common, un-restricted, and open. PDF
is even more so (though less flexible in re-flow and other formatting -
if that matters to you).

nomad
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Kindle Editions of OpenAFS documentation

[Jake Thebault-Spieker]

I can confirm that the Kindle cannot read ePub, but .mobi files work just
fine. the Adobe Editions ePub files tend to be DRM'd, although also don't
require DRM to be used.

If we're talking about kindle-specific options, .mobi is probably best. If
we're looking for an "ereader format" that'll span most things, PDF or ePub
would be better, although ePub does exclude Kindle users.

On Wed, Jun 1, 2011 at 12:16 PM, Russ Allbery  wrote:

> David Boyes  writes:
>
> >> Would the community find it useful if I were to create Amazon Kindle
> >> Editions of the OpenAFS Documentation?
>
> > Adobe ePub versions would be helpful. That way all the common electronic
> > readers can use them, rather than use a restricted format.
>
> Except for the Kindle, which I don't think can read ePub (IIRC, it needs
> MOBI).  MOBI is also not a restricted format; it has hooks for DRM, but
> you don't have to use them.
>
> --
> Russ Allbery (r...@stanford.edu) 
> ___
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info
>



-- 
Jacob Thebault-Spieker
Cell: (320) 288-6412
http://summatusmentis.com

Re: [OpenAFS] Re: AFS and freedesktop.org trash

[Jeffrey Altman]

On 6/1/2011 1:12 PM, Andrew Deason wrote:
>> Using Xfce on Fedora 15, browsing AFS is pretty slow because Thunar
>> does these DNS lookups almost any time I change directories. I wrote a
>> patch for Gnome to skip top-level trash detection on AFS, although I
>> imagine KDE would have similar problems.
>>
>> https://bugzilla.gnome.org/show_bug.cgi?id=651641
> 
> I don't see why this needs to be checked for so often. It seems like
> that could be annoying for other network filesystems as well, though
> it's worse here with afsdb and dynroot.
> 

There is another related issue here.  The behavior that is actually
desirable is for a .Trash to be created at the root of each AFS volume.
 Putting .Trash under /afs even without dynroot and -afsdb will do the
wrong thing.

Jeffrey Altman



signature.asc
Description: OpenPGP digital signature

Re: [OpenAFS] IBM published a guide to configuring Kerberos v5 authentication for OpenAFS

[Russ Allbery]

Coy Hile  writes:

> Isn't using Transarc paths the most appropriate way to ensure that
> things live in the same place in a heterogeneous environment?

These days, a heterogeneous environment means Windows and Mac OS X as
well, and they're not going to use the Transarc paths.

All the Linuxes have standardized on FHS, but if one really wants to have
the same paths across multiple UNIX versions, I'd use /usr/local (the
default installation locations for make install).  But as Derrick says,
I'm not sure it really matters any more.

-- 
Russ Allbery (r...@stanford.edu) 
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Kindle Editions of OpenAFS documentation

[Russ Allbery]

David Boyes  writes:

>> Would the community find it useful if I were to create Amazon Kindle
>> Editions of the OpenAFS Documentation?

> Adobe ePub versions would be helpful. That way all the common electronic
> readers can use them, rather than use a restricted format.

Except for the Kindle, which I don't think can read ePub (IIRC, it needs
MOBI).  MOBI is also not a restricted format; it has hooks for DRM, but
you don't have to use them.

-- 
Russ Allbery (r...@stanford.edu) 
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

[OpenAFS] Re: AFS and freedesktop.org trash

[Andrew Deason]

On Wed, 1 Jun 2011 10:51:42 -0600
Ken Dreyer  wrote:

> I was curious if anyone has experience with AFS and the
> freedesktop.org "trashcan" spec.
> 
> http://www.freedesktop.org/wiki/Specifications/trash-spec
> 
> The spec references a "topdir" area where a ".Trash" or a
> ".Trash-$uid" directory can exist at the top of a filesystem mount.
> For AFS, that translates to /afs/.Trash . With -afsdb enabled, this
> means doing several DNS lookups for a "Trash" AFS cell.

Don't we do some kind of blacklisting on OS X for things like this? We
could just ignore dynroot requests for .Trash. It's a legit name to have
there, though.

But also, shouldn't negative DNS responses be cached for awhile? I
wouldn't think each of these accesses should entail a long delay.

> Using Xfce on Fedora 15, browsing AFS is pretty slow because Thunar
> does these DNS lookups almost any time I change directories. I wrote a
> patch for Gnome to skip top-level trash detection on AFS, although I
> imagine KDE would have similar problems.
> 
> https://bugzilla.gnome.org/show_bug.cgi?id=651641

I don't see why this needs to be checked for so often. It seems like
that could be annoying for other network filesystems as well, though
it's worse here with afsdb and dynroot.

-- 
Andrew Deason
adea...@sinenomine.net

___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Kindle Editions of OpenAFS documentation

[Patty O'Reilly]

The newer Kindles allow many more file types then the old ones. PDF is 
fine as long as it isn't drm protected.


On 6/1/11 7:31 AM, David Boyes wrote:



Would the community find it useful if I were to create Amazon Kindle
Editions of the OpenAFS Documentation?


Adobe ePub versions would be helpful. That way all the common electronic 
readers can use them, rather than use a restricted format.
:��

___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

[OpenAFS] AFS and freedesktop.org trash

[Ken Dreyer]

I was curious if anyone has experience with AFS and the
freedesktop.org "trashcan" spec.

http://www.freedesktop.org/wiki/Specifications/trash-spec

The spec references a "topdir" area where a ".Trash" or a
".Trash-$uid" directory can exist at the top of a filesystem mount.
For AFS, that translates to /afs/.Trash . With -afsdb enabled, this
means doing several DNS lookups for a "Trash" AFS cell.

Using Xfce on Fedora 15, browsing AFS is pretty slow because Thunar
does these DNS lookups almost any time I change directories. I wrote a
patch for Gnome to skip top-level trash detection on AFS, although I
imagine KDE would have similar problems.

https://bugzilla.gnome.org/show_bug.cgi?id=651641
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

[OpenAFS] AFS & Kerberos Best Practices Workshop 2011: June 13 to 17 - Registration Open

[Jeffrey Altman]

The AFS and Kerberos Best Practices Workshop Committee is happy to
announce that registration for the 2011 AFS and Kerberos Best Practices
Workshop is now open.  As previously announced, this year's tutorials
and workshop sessions will be held as an electronic conference which we
hope will permit a broader range of attendees to participate in a year
of reduced travel budgets.

This year we have two new tutorial instructors with significantly
updated course materials.  We welcome Kim Kimball as our new AFS
instructor and Simon Wilkinson as our new Kerberos instructor.  Kim's
experience as an AFS trainer dates back to his days with IBM/Transarc
and Simon has been enabling application protocols to authenticate with
Kerberos and GSS-API for nearly a decade.  Both have given numerous
informational and entertaining talks at past workshops.

  http://workshop.openafs.org/afsbpw11/afstut.html

  http://workshop.openafs.org/afsbpw11/kerbtut.html

The price for each is US$100.00.

The workshop sessions will include many of our most popular speakers:

  Russ Allbery
  Jeffrey Altman
  Matt Benjamin
  Derrick Brashear
  Andrew Deason
  Asanka Herath
  Love Hornquist Astrand
  Henry Hotz
  Tom Keiser
  Mike Meffie
  Simon Wilkinson

and will be hosted by Kim Kimball and Marshall Vale.  Topics include:

  A History of AFS
  AFS and Kerberos Project Status Reports
  Obtaining AFS Credentials at login on MacOS X
  Web Authentication
  KX509 extensions
  A practical guide to upgrading AFS from rxkad to rxgk security
  Performance Benefits of the AFS Extended Callback model
  Deploying the Demand Attach File Server (DAFS) - [New in OpenAFS 1.6]
  AFS RX Performance
  Analyzing AFS Statistics
  OpenAFS Futures

and our two most popular panels will return:

  Live Troubleshooting
   - submit real world problems for live analysis

  Stump the Experts
   - ask anything related to Kerberos or AFS, get an answer

Finally, the workshop would not be complete without the annual site
reports in which attendees tell each other how Kerberos and AFS have
been successfully deployed within their organizations.

The price for the three days of workshop sessions is US$60.00.

The AFS and Kerberos Best Practices Workshop is appropriate for anyone
that is responsible for deploying or curious about real world
distributed computing environments.

The 2011 AFS and Kerberos Best Practices Workshop is sponsored by Your
File System, Inc. (http://www.your-file-system.com) and Secure
Endpoints, Inc. (http://www.secure-endpoints.com).

Please submit site reports and troubleshooting issues to
workshop-i...@openafs.org.

Jeffrey Altman
on behalf of the Workshop committee




signature.asc
Description: OpenPGP digital signature

Re: [OpenAFS] IBM published a guide to configuring Kerberos v5 authentication for OpenAFS

[Derrick Brashear]

On Wed, Jun 1, 2011 at 12:04 PM, Coy Hile  wrote:
> On Wed, Jun 1, 2011 at 11:50 AM, Harald Barth  wrote:
>>> http://www.ibm.com/developerworks/opensource/library/os-openafs-kerberos5/index.html
>>
>> Some observations:
>>
>> * No OpenAFS RPMs used
>> * Old transarc style location used
>
> Isn't using Transarc paths the most appropriate way to ensure that
> things live in the same place in a heterogeneous environment?

it is, but i don't really see that as a requirement. most shells these
days support paths, and most OSes ship default shell profiles you can
edit or otherwise extend.

or so i've heard. my sunos 4 machine doesn't seem to have such.

-- 
Derrick
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] IBM published a guide to configuring Kerberos v5 authentication for OpenAFS

[Derrick Brashear]

On Wed, Jun 1, 2011 at 11:59 AM, Jeff Blaine  wrote:
>> * The server config uses the old -noauth way to bootstrap
>
> Of course. That's the documented way from Quick Beginnings.

if you're not using kaserver it can be avoided. extrude a database
with pt_util and just
start your cell by authenticating as the admin you just made.

> That's how I just did it in a new testbed cell, too.
>
> Where was the "new" way documented when it was developed?

beats me. i didn't develop it. MIT did. in the 1990s.

-- 
Derrick
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] IBM published a guide to configuring Kerberos v5 authentication for OpenAFS

[Coy Hile]

On Wed, Jun 1, 2011 at 11:50 AM, Harald Barth  wrote:
>> http://www.ibm.com/developerworks/opensource/library/os-openafs-kerberos5/index.html
>
> Some observations:
>
> * No OpenAFS RPMs used
> * Old transarc style location used

Isn't using Transarc paths the most appropriate way to ensure that
things live in the same place in a heterogeneous environment?

-Coy
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] IBM published a guide to configuring Kerberos v5 authentication for OpenAFS

[Jeff Blaine]

* The server config uses the old -noauth way to bootstrap


Of course. That's the documented way from Quick Beginnings.

That's how I just did it in a new testbed cell, too.

Where was the "new" way documented when it was developed?

___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] IBM published a guide to configuring Kerberos v5 authentication for OpenAFS

[Harald Barth]

> http://www.ibm.com/developerworks/opensource/library/os-openafs-kerberos5/index.html

Some observations:

* No OpenAFS RPMs used
* Old transarc style location used
* The server config uses the old -noauth way to bootstrap
* The client will "need some attention" at the next kernel upgrade

Harald.
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Re: modload failing, Sol10 SPARC, 1.4.14

[chas williams - CONTRACTOR]

On Wed, 1 Jun 2011 09:50:58 -0500
Andrew Deason  wrote:

> On Wed, 1 Jun 2011 07:32:32 -0400
> chas williams - CONTRACTOR  wrote:
> 
> > the studio compilers, if i recall correctly, prefer -xO2.  -O2 just
> > gets passed to the linker (or something like that).
> 
> At least according to the manpage, -O2 is equivalent to -xO2.

only for Studio12 apparently so i wouldnt make a habit of using -O2 on
solaris.
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

[OpenAFS] IBM published a guide to configuring Kerberos v5 authentication for OpenAFS

[Jeffrey Altman]

OpenAFS 1.4.14
MIT Kerberos ???
Red Hat EL6

http://www.ibm.com/developerworks/opensource/library/os-openafs-kerberos5/index.html





signature.asc
Description: OpenPGP digital signature

[OpenAFS] Re: Help: Cannot execute pts createuser

[Andrew Deason]

On Wed, 1 Jun 2011 10:28:11 +0800
Lee Eric  wrote:

> Thanks Marcus, your way solved the problem. And shall I use -localauth
> for the following installation procedure? Andrew, yes, I followed a
> guide from the OpenAFS official website,
> http://docs.openafs.org/QuickStartUnix/index.html. And it says I shall
> use -noauth in installation procedure.
> 
> Any ideas?

That guide also says to start the database server processes with the
-noauth flag. If you don't do that, you'll get the error you saw.

But the way Marcus describes is a newer and better way to achieve the
same thing, so if you got that working, then great.

-- 
Andrew Deason
adea...@sinenomine.net

___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

[OpenAFS] Re: modload failing, Sol10 SPARC, 1.4.14

[Andrew Deason]

On Wed, 1 Jun 2011 07:32:32 -0400
chas williams - CONTRACTOR  wrote:

> the studio compilers, if i recall correctly, prefer -xO2.  -O2 just
> gets passed to the linker (or something like that).

At least according to the manpage, -O2 is equivalent to -xO2.

-- 
Andrew Deason
adea...@sinenomine.net

___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Re: modload failing, Sol10 SPARC, 1.4.14

[Douglas E. Engert]

On 6/1/2011 8:20 AM, Derrick Brashear wrote:

On Wed, Jun 1, 2011 at 1:25 AM, Andrew Deason  wrote:

On Tue, 31 May 2011 18:44:24 -0400
Derrick Brashear  wrote:


or, for now, just replace that with
memset(dirHeader->hashTable, 0, NHASHENT*(unsigned short));

and move along?


Yeah but, I'd like to get a better solution for when this happens again.
Prohibiting loops like that would be a bizarre requirement :)


well, i assume oracle will fix their bug, eventually...


This note from almost 2 years ago Feb 2009 describes a similar problem:

http://www.mail-archive.com/opensolaris-code@opensolaris.org/msg06486.html






--

 Douglas E. Engert  
 Argonne National Laboratory
 9700 South Cass Avenue
 Argonne, Illinois  60439
 (630) 252-5444
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

RE: [OpenAFS] Kindle Editions of OpenAFS documentation

[David Boyes]

> Would the community find it useful if I were to create Amazon Kindle
> Editions of the OpenAFS Documentation?

Adobe ePub versions would be helpful. That way all the common electronic 
readers can use them, rather than use a restricted format. 
:��T���&j)b�   b�өzpJ)ߢ�^��좸!��l��b��(���~�+Y���b�ا~�~ȧ~

[OpenAFS] Re: modload failing, Sol10 SPARC, 1.4.14

[jblaine]

Re: -O2 vs. -x02, etc.

cc -flags
...
-OUse default optimization level (-xO3)
-O Same as -xO

Same difference ultimately, it seems, but I appreciate the help.

___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Help: aklog cannot work properly

[Lee Eric]

Thanks mates. I have fixed those problem properly.

Regards,

Eric

On Wed, Jun 1, 2011 at 9:00 PM, Jeffrey Altman
 wrote:
> On 6/1/2011 1:03 AM, Lee Eric wrote:
>> Hi,
>>
>> It seems aklog cannot work well in my server.
>>
>>
>> [root@server ~]# klist
>> Ticket cache: FILE:/tmp/krb5cc_0
>> Default principal: admin@HERDINGCAT.INTERNAL
>>
>> Valid starting     Expires            Service principal
>> 06/01/11 00:55:12  06/02/11 00:55:10
>> krbtgt/HERDINGCAT.INTERNAL@HERDINGCAT.INTERNAL
>>       renew until 06/01/11 00:55:12
>> [root@server ~]# aklog -d -c herdingcat.internal
>> Authenticating to cell herdingcat.internal (server 
>> server.herdingcat.internal).
>> Trying to authenticate to user's realm HERDINGCAT.INTERNAL.
>> Getting tickets: afs/herdingcat.internal@HERDINGCAT.INTERNAL
>> Kerberos error code returned by get_cred : -1765328370
>
> -1765328370 = KDC has no support for encryption type
>
> In other words, your KDC has support for DES-CBC-CRC turned off.
> Re-enable support for DES encryption types and you will get further.
>
> Jeffrey Altman
>
>
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Re: modload failing, Sol10 SPARC, 1.4.14

[Derrick Brashear]

On Wed, Jun 1, 2011 at 1:25 AM, Andrew Deason  wrote:
> On Tue, 31 May 2011 18:44:24 -0400
> Derrick Brashear  wrote:
>
>> or, for now, just replace that with
>> memset(dirHeader->hashTable, 0, NHASHENT*(unsigned short));
>>
>> and move along?
>
> Yeah but, I'd like to get a better solution for when this happens again.
> Prohibiting loops like that would be a bizarre requirement :)

well, i assume oracle will fix their bug, eventually...


-- 
Derrick
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Help: aklog cannot work properly

[Jeffrey Altman]

On 6/1/2011 1:03 AM, Lee Eric wrote:
> Hi,
> 
> It seems aklog cannot work well in my server.
> 
> 
> [root@server ~]# klist
> Ticket cache: FILE:/tmp/krb5cc_0
> Default principal: admin@HERDINGCAT.INTERNAL
> 
> Valid starting ExpiresService principal
> 06/01/11 00:55:12  06/02/11 00:55:10
> krbtgt/HERDINGCAT.INTERNAL@HERDINGCAT.INTERNAL
>   renew until 06/01/11 00:55:12
> [root@server ~]# aklog -d -c herdingcat.internal
> Authenticating to cell herdingcat.internal (server 
> server.herdingcat.internal).
> Trying to authenticate to user's realm HERDINGCAT.INTERNAL.
> Getting tickets: afs/herdingcat.internal@HERDINGCAT.INTERNAL
> Kerberos error code returned by get_cred : -1765328370

-1765328370 = KDC has no support for encryption type

In other words, your KDC has support for DES-CBC-CRC turned off.
Re-enable support for DES encryption types and you will get further.

Jeffrey Altman



signature.asc
Description: OpenPGP digital signature

Re: [OpenAFS] Help: aklog cannot work properly

[Jeff Blaine]

On 6/1/2011 1:03 AM, Lee Eric wrote:

Hi,

It seems aklog cannot work well in my server.


[root@server ~]# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: admin@HERDINGCAT.INTERNAL

Valid starting ExpiresService principal
06/01/11 00:55:12  06/02/11 00:55:10
krbtgt/HERDINGCAT.INTERNAL@HERDINGCAT.INTERNAL
renew until 06/01/11 00:55:12
[root@server ~]# aklog -d -c herdingcat.internal
Authenticating to cell herdingcat.internal (server server.herdingcat.internal).
Trying to authenticate to user's realm HERDINGCAT.INTERNAL.
Getting tickets: afs/herdingcat.internal@HERDINGCAT.INTERNAL


Does this principal exist?  ^^^


Kerberos error code returned by get_cred : -1765328370
aklog: Couldn't get herdingcat.internal AFS tickets:
aklog: unknown RPC error (-1765328370) while getting AFS tickets
[root@server ~]# ls /afs
ls: cannot access /afs/herdingcat.internal: No such device
herdingcat.internal
[root@server ~]# fs wscell
This workstation belongs to cell 'openafs.org'
[root@server ~]#

And I noticed that the client belongs to openafs.org, how this could be?


What does your 'ThisCell' file say?
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Re: modload failing, Sol10 SPARC, 1.4.14

[Jeff Blaine]

On 5/31/2011 6:40 PM, Andrew Deason wrote:

On Tue, 31 May 2011 18:10:53 -0400
Jeff Blaine  wrote:


I then rebooted and got the same result upon trying modload
again.

I edited:

src/cf/osconf.m4
src/libuafs/MakefileProto.SOLARIS.in
src/libafs/MakefileProto.SOLARIS.in


Well, you need to re-configure each time (or modify the Makefiles


I am doing a make distclean, configure, and make dest for
every build as part of this thread.


directly). If you look at the command run for afs_dynroot.c you'll see
what we're actually running. If there's a -O2 in there and you're still
getting the error, then something is wrong.


-O2 is there


I'll look at running through the whole build process later tonight to
see what specifically you need to do, if not that.


Thanks
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Re: modload failing, Sol10 SPARC, 1.4.14

[chas williams - CONTRACTOR]

On Wed, 1 Jun 2011 00:25:00 -0500
Andrew Deason  wrote:

> On Tue, 31 May 2011 18:44:24 -0400
> Derrick Brashear  wrote:
> 
> > or, for now, just replace that with
> > memset(dirHeader->hashTable, 0, NHASHENT*(unsigned short));
> > 
> > and move along?
> 
> Yeah but, I'd like to get a better solution for when this happens again.
> Prohibiting loops like that would be a bizarre requirement :)

loops like that should not be written.  memset() can do a better job of
zero'ing memory than iterating each member.
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] OpenAFS running on CentOS vs. Scientific Linux

[Simon Wilkinson]

On 31 May 2011, at 20:01, "Dvorkin, Asya"  wrote:

> Currently, we are running our cell on CentOS, but looking into possibly 
> moving towards Scientific Linux.
> 
> Would love to hear your opinions and recommendations.

Being binary rebuilds of the same upstream source distribution, there are a lot 
of similarities between CentOS and SL. In the past, Cent OS were slightly 
quicker off the mark with new releases, and had fewer of the 64bit build 
dependency problems than SL. Recently, though, SL managed to get version 6 out 
of the door much faster than Cent OS, and their builds seem pretty solid.

One thing I would warn about, however, is that SL ship their own openafs RPMs. 
These are significantly different from the RPMs shipped by openafs.org, having 
their own pathnames, configuration files and startup scripts. At some point we 
would really like to reconverge, but nobody has had the time to write the 
compatibility goo that is required. In the meantime, you should bear in mind 
that some of the documentation you read on the web may not apply to the SL RPMs.

S.
> 
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Re: modload failing, Sol10 SPARC, 1.4.14

[chas williams - CONTRACTOR]

On Tue, 31 May 2011 13:13:34 -0500
Andrew Deason  wrote:

> Also, Jeff, if you want a quick workaround, you can change -O to -O2 or
> just leave out the -O option. I think changing the value of KERN_OPTMZ
> in src/cf/osconf.m4 should be enough...

the studio compilers, if i recall correctly, prefer -xO2.  -O2 just gets
passed to the linker (or something like that).
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info