Re: [OpenAFS] OpenAFS + Windows 7 (x64)
On 22.04.2010 18:49, Jason D. McCormick wrote: > We're trying to deploy new workstations based on Windows 7 using OpenAFS > (1.5.73) and Kerberos for Windows. I was curious how/if people are getting a > working configuration for this setup. We're encountering two major problems > that I was hoping someone on the list had already encountered and could help > out with. > > #1 - \\AFS UNC name doesn't function when making network transitions, notably > when using the Cisco VPN client but it also appears to die at other random > unrepeatable intervals (although this is during testing work). It appears > that while on certain network configurations (e.g. wired physically to the > network) the \\AFS appears to work and is bound to the AFS loopback adapter > (10.254.254.254). However unplugging the network and/or opening the VPN > appear to cause some sort of network state transition that kills off the > mappings. I found a reference to a similar problem > (<http://mailman.mit.edu/pipermail/kerberos/2009-October/015364.html>) where > Jeff said the bug is in Windows. Does anyone know if there's a workaround or > hotfix since then? Looks like thats the bug. Til yet no bugfix nor workaround. For luck my Win7 x86 Laptop has not shown any sign of that bug: sleepmode, hybernate, adding/removing network interfaces does not prohibite the use of OpenAFS via \\AFS\... Other workstations/laptops at our site do have that bug. But I haven´t found the reason why it works on my laptop and not on the others. > If there's an implementation guide for Win7 I'm missing, please point > it out. Thanks. Not that I know of any trick. > -- > Jason McCormick > Unix Team Lead, Systems Group, IT > Software Engineering Institute, Carnegie Mellon Univ. > E: jaso...@sei.cmu.edu MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Why is speed of AFS loopback adapter set to 10 Mb, even if physical interface is Gb capable?
On 24.04.2010 22:39, Rich Sudlow wrote: > You mentioned that your network connections are Gb capable - but are they > set to Gb?? Your speeds are typical of a client with 100 Mb network > connections. Usual auto negotiation does its job quite good. But OpenAFS enables encryption of data transfer on each standard install - which results in drastic performance decreases. E.g. my workstation client (linux) does 10-12 MB/sec with encryption enabled, but >70 MB/sec with encryption disabled. My point is on: disable encryption. Btw, our linux clients does roughly 20-50 MB/sec so far. Still need to test memcache. > Rich > >> >> (In case I forgot to mention something, please don't hesitate to ask). >> >> Thanks in advance! >> >> Kind regards & have a nice weekend, >> >> Holger MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Why is speed of AFS loopback adapter set to 10 Mb, even if physical interface is Gb capable?
On 25.04.2010 16:19, Holger Rauch wrote: > Hi Lars, > > thanks for your reply. > > Lars Schimmer schrieb am Sunday, den 25. April 2010: > >> Usual auto negotiation does its job quite good. >> But OpenAFS enables encryption of data transfer on each standard install >> - which results in drastic performance decreases. > > Thanks for mentioning this and that's exactly what I'm wondering > about. Encryption too is involved when doing SCP transfers (even > stronger encryption, such as Blowfish or AES 256) and I get scp speeds > of 60 to 82 MB/sec when transferring to native ext3 fs. > > So, my question is: Why is there almost no decrease when using SCP > with a strong encryption algorithm (compared to plain DES that AFS > uses) but there is *drastic* decrease in performance with only plain > DES enabled compared to an unencrypted transfer? OpenAFS does not use DES. And those are complete different implementations, as already laid out by simon. Data is far often copied and shuffled around within OpenAFS than with scp/ftp/ssh. And the encryption implementation was not designed to be done perfect over gigabit - it was designed for 1-2 mbit lines. A new implementation of that encryption is currently worked on, guess it will be faster. Oh, btw, a lot of small files will still fail to reach higher speeds, as callbacks are done massive. A network filesystem has some more needs than a local one ;-) >> E.g. my workstation client (linux) does 10-12 MB/sec with encryption >> enabled, but >70 MB/sec with encryption disabled. >> My point is on: disable encryption. >> Btw, our linux clients does roughly 20-50 MB/sec so far. Still need to >> test memcache. > > Any good ideas as to how to test memcache? Get a machine use memcache, deactivate encryption and test the transfer rates? Or get a machine with those nice SSD and set the cache with ~10-30 GB on those fast SSD. Should increase bandwidth, to. I just need to set that client up. Although current rates are quite fine, still got most machines on 100MBit switches and those lines are saturated with OpenAFS. > Thanks in advance & kind regards, > > >Holger > MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Getting started with OpenAFS
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mike Pliskin wrote: > Dear all, > > First, let me state that I am a complete OpenAFS newbie. I’ve just started > playing with it and found some obstacles I failed to resolve myself even > after reading the docs – therefore asking for help here. > > 1. which version to install? I need windows client support so I need 1.5 - > right? But it is not stable.. Or is it? And don't see any pre-built rpms for > it, so compiling from sources? As the protocol is compatible with rather old versions, you can mix client and server versions. BUT as security and bandwidth wise you should use a 1.4.12 or newer server on your *nix machines. For a client use 1.5.74 on windows and 1.4.12 on *nix machines. If you want to test and feel lucky, try the dev builds of 1.5.x on *nix and report bugs/errors/... > 2. tried to compile and it worked but it created a non-"mp" kernel module > while my kernel needs an mp one - how to fix that? > 3. do I really need a new fresh partition to start with or I can re-use an > existing one and just make it available via afs? > Actually #3 is the most important so let me explain. I have a server already > and willing to make a large repository available via afs. Attaching a new > hard drive or even changing partitions is hard for me as the servers is > remote for me and has plenty of data already. So is there any way to make afs > use just a folder somewhere? Any workarounds? You need to spend a partition exclusive for OpenAFS server. OpenAFS does have its onw structure of files in the server-partitions (but it is not influenced by "false" files in those partitions). Which ends up in: you need to copy your files into the OpenAFS space after you have created the server and volumes and the logic fs-tree structure. You COULD share the openAFS fileserver-partitions via NFS or else and save extra data in those partitions (which are left alone by the OpenAFS fileserver) but that includes horrible security issues and is absolute NOT a way to go. More important about a new setup are some limits,IMHO the most important for new users are: - -only 1 ReadWrite copy of a volume - -no more than 64k files in a directory - -replica only on manual/script interaction - -only whole file locking on server - -experimental disconnected-mode But those are all fields which are worked on. > Thanks a lot for the information in advance, > Mike Pliskin MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkvas9UACgkQmWhuE0qbFyOeoQCfU3I895CFV8BpjpbeOCNLLFKJ E9QAn2tbqhiBWX+wf5d6OnxsN4AZ0NsO =v20Z -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Getting started with OpenAFS
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mike Pliskin wrote: > Dear Lars, (please, TOFU) > Thanks a lot for the detailed response, let me see what I can do in terms of > partitions. Generally the task I am trying to solve is the following: > - there is a 100-gigabyte collection of large files (10 mb to 1 gb) No problem, we have >5 TB of data in OpenAFS which includes files of 20GB so far. But for files >4GB you need at least a client version >1.4.0. > - there are several geographically distributed sites with people that need > access Readonly access or read/write access the same data or different directories? Thats a important point as only one read/write copy of a volume/directory can exist in one OpenAFS cell. > - files are organized in folders, and there is a fairly good administrative > separation on who needs which files - i.e. chances of people writing the same > file at once are pretty low You can set ACLs on directories in OpenAFS - fairly simple and works. > - speed is important as well as a way to access any file from anywhere (but > ok to degrade speed if replicas aren't synced yet) Readonly replica could be done via night and clients can access a local readonly replica for faster access (if a local fileserver exists). The client cache could do a difference, to. Needs to be big enough (for bigger files) and persistant over reboots. If a file could be served out of client local cache and not from (slow) server overseas fine. > So the question is - do you think OpenAFS is a right tool for this problem? So far yes. BUT the read/write and readonly point is still open. You could setup one volume per directory and mount that directories after the rules of rw access into the filetree. But if you have e.g. a /afs/test/useraa/files/ firectory for user aa on a fileserver in dk and a user bb in the US needs to write to that directory, it needs to access that fileserver the rw volume is on. If user bb in the us need only to access a readonly copy of that directory, copy that volume/directory to the us fileserver (over night) and the user bb could access it readonly from the us local fileserver. Hope it is made clear now why it needs some think-over with a multi-homing site. But it is absolute possible and could work great. > Thanks, > Mike > MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkva0DYACgkQmWhuE0qbFyMBEACggL2GZC31kpZ5u8BIoNFUep+n iB0Anixf9lxO3b/R+QktJUUH61GW01Kn =6Yr5 -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] WinXP/1.5.74 installation problem
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Atro Tossavainen wrote: > Hi, > > I bumped into a problem today when trying to install 1.5.74 on a > Windows XP machine from the MSI kit. Specifically, the loopback > adapter installation failed, saying > "could not set the ip address and network mask", after which the > entire process rolled back and nothing was installed. > > How do I find out what is causing this and how do I fix it? Try to install the loopback installer manual maybe. > On another note, is there a way to prevent the "Obtain AFS tokens > when logging in to Windows" from being automatically enabled after > an install? Use the MSI package of OpenAFS and do not enable that feature. Else change the registry entry noted in Release Notes of windows client. MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkv84QEACgkQmWhuE0qbFyNg4wCfS9l2h6lmjtLoNSlhxDjNKqP5 zLgAnR3v0kpr+wEbLaVctUbCurtRSD9z =1UKA -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] OpenAFS DB server on a Soekris box?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jaap Winius wrote: > What I would like to do is to make that third server as small as > possible by using a Soekris Engineering net5501 for it: > >http://www.soekris.com/net5501.htm > > This is a very small, low-power unit with a 500 MHz 586 CPU and 512 MB > of RAM. It has room for a single 2.5" hard disk, so I'd like to use a 64 > GB Western Digital SSD. > > Does this third machine look feasible, or would I be asking for trouble? > Would the SSD survive this level of wear* for at least three years? > > Any opinions? As a DB server I guess it would be perfectly fine. I got a Atom330 class computer at home with debian and for a small network it could also handle the OpenAFS fileserver part quite well (not as fast as gigabit, but hey...). About SSD: I guess it would, but til yet no real life experience. SSD in a Win7 PC should survive 3 years, to. But as a sidenote: some rumors are out, a cheap Xeon system with a low powered CPU would use less power in low usage times. The Xeon system will use much more power under load, but will be ready by times faster due to more possible CPU power. In the end, a DB server has not much load and you need to think about price of hardware and long term power costs. > Thanks, > > Jaap > > *) Assuming the usual SSD tweaks: noatime, external logging, > elevator=noop and setting the bios to "Write Back" for the drive. MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkwR4h0ACgkQmWhuE0qbFyM67gCfdUs+g7VI7IPM+5NzBO/DSvqN 6WkAnjfPBJkRtltyHveedatEfXHojmqy =Jw1D -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [ SPAM? ] [OpenAFS] Read-only replication
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jaap Winius wrote: > Hi folks, > > Here's a hypothetical question regarding the replication of AFS volumes: > > In an organization where it is only necessary for an administrator to > either give users read-write access to volumes, or no access at all, > what would be the advantage of creating any read-only replicas, beyond > those for the standard volumes at the root of the AFS namespace? > > This subject is confusing to me, because I've learned that once a client > has encountered a read-write mount point, it becomes biased towards > accessing only read-write replicas beyond it, ignoring any and all > perfectly usable read-only volumes that may be available. > > Of course, read-only replicas with hourly releases can be used as a > safety net, allowing data to be more quickly recovered in the event of a > failure, but if that's viewed as an unnecessary measure, then what other > reasons reasons might there be for replicating any volumes? Simple - Load Balancing. Imagine a cell at three countries hold together by small ISDN lines - a RO copy local to each faculty and the have fast access. > Thanks, > > Jaap MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkwZ1cAACgkQmWhuE0qbFyPG8wCfRSYpuQUi72fsWlAD2QcrPvuh rN8AnRVy3I81Zf2AZHs84QoKnZ2vFYX0 =IffC -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] /vicepa on Linux RAID
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Youssef Eldakar wrote: > Should OpenAFS have problems with a /vicepa that exists on a Linux RAID > (e.g. /dev/md0) device? I am trying to set up an OpenAFS server on > Ubuntu 10.04 (openafs-fileserver/openafs-dbserver 1.4.12+dfs), but when > I get to making the root volume (afs-rootvol), the machine crashes, and > I am thinking if this has to do with /vicepa being on a Linux RAID-5 > device. Ran OpenAFS filservers with >10 /vicepX from RAID5 devices >4 years with no problem. On debian it was. Try to check if the raid5 is fine and access rights are fine, to. > Thank you for any information. > > Youssef Eldakar > Bibliotheca Alexandrina MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkwhr9sACgkQmWhuE0qbFyPS2ACgi3udQW5c0uM9Hxu+ACP3Vsns ccUAnRqbg2mHNCNqI0bdWLUkJoM706om =JUFX -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] service restart windows client
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi! I got some strange problems with new workstations setup. Hardware is Intel Core i7 quadcore and a Intel SSD - wuite a fast setup. Windows 7 enterprise 64bit edition and OpenAFS 1.5.74 64bit and 32bit tools. Kerberos for windows NetID Manager for 32 and 64 bit installed, to. After a reboot OpenAFS service do run but NetIDMgr shows a broken OpenAFS icon. If I try to access the \\AFS\... it does not work, unreachable with long timeout. But if I restart the OpenAFS service the icon got "unbroken" with a red cross showing me "no token, buut working". Obtaining a token and accessing OpenAFS filespace under \\AFS\ does work now. Did I hit some strange timeout problems with faster boot via SSD or is there any other problem known showing this effect? MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkwxzcwACgkQmWhuE0qbFyOIlgCdHcFo1xUdguRXzPaSMN32EcaW pIIAoI4mxDcujjaCMrKsh3yr8uE8Eppw =cBA1 -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Windows: aklog: ktc 7 (11862791) while obtaining tokens
On 30.07.2010 17:55, Richard Brittain wrote: > On Wed, 23 Jun 2010, Jeff Blaine wrote: > >> * There is a bug in Windows that will prevent >> access to \\AFS after an IP address has >> been removed or assigned after boot. When >> the bug is triggered, all attempts to connect >> to \\AFS will result in a "Bad Network Name" >> error. Please reproduce this issue locally >> and submit bug reports to Microsoft. .. below >> """ > > For what it's worth, we now have two examples of "Windows 7 Enterprise" > (32-bit) systems which seem to have no problem at all accessing AFS > after an address change (typically 2 minutes needed to re-establish > access after a change). We also have one example of "Windows 7 > Professional" which clearly follows the pattern described above. We got 2 Win 7 Enterprise laptops, one does work, another does not. Both are 32 bit. But in general: the working windows 7 systems are very very low in count in our lab. > Richard MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Windows: aklog: ktc 7 (11862791) while obtaining tokens
On 30.07.2010 23:48, Lars Schimmer wrote: > On 30.07.2010 17:55, Richard Brittain wrote: >> On Wed, 23 Jun 2010, Jeff Blaine wrote: >> >>> * There is a bug in Windows that will prevent >>> access to \\AFS after an IP address has >>> been removed or assigned after boot. When >>> the bug is triggered, all attempts to connect >>> to \\AFS will result in a "Bad Network Name" >>> error. Please reproduce this issue locally >>> and submit bug reports to Microsoft. .. below >>> """ >> >> For what it's worth, we now have two examples of "Windows 7 Enterprise" >> (32-bit) systems which seem to have no problem at all accessing AFS >> after an address change (typically 2 minutes needed to re-establish >> access after a change). We also have one example of "Windows 7 >> Professional" which clearly follows the pattern described above. > > We got 2 Win 7 Enterprise laptops, one does work, another does not. Both > are 32 bit. > > But in general: the working windows 7 systems are very very low in count > in our lab. Sorry, let me rephrase it: the windows 7 systems not affected by this bug are very low in numbers. Over all OpenAFS works quite fine on Windows7, even better with roaming profiles in OpenAFS than WinXP. One very sad downside: UAE and the "run as admin" function. E.g. if I try to install some software from OpenAFS space (logged in as usual user), it asks for admin credentials and afterwards the process with windows admin credentials has no more access to OpenAFS. Solution: copy file to users desktop, install from that location, delete from desktop. Sometimes security is a pain ;-) MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Overview? Linux filesystem choices
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2010-09-29 21:12, chas williams - CONTRACTOR wrote: > On Wed, 29 Sep 2010 12:35:23 -0400 > Steve Simmons wrote: > >> Yep, we're pretty much a 100% ext3 shop. We keep a close eye on other >> things, and zfs has been looking more and more interesting. But given >> the uncertain state of its future (see elsewhere in this thread) our >> caution level has gone up quite a bit. For the really long term I >> also keep an eye on btrfs, but some of it's features aren't as big a >> win for AFS as they are for 'regular' users. Ext4 looks interesting >> just for the fsck speed improvements (just freaking amazing). Extents >> may also be useful, but I strongly suspect other issues bottleneck >> AFS performance before the filesystem speed does. Then again, better >> speed never hurts. > > we use solaris ufs on our current fileservers, but xfs practically > everywhere else. this is mostly due to our irix heritage but xfs has > some benefits that ext3 does not have (like extents). xfs is certainly > quite a bit more mature than ext3 in my opinion. ext4 is an attempt to > get some of these xfs features into ext3. > > as far as bugs with xfs -- not too many. we have done some really bad > things to the xfs filesystems as well (like power failures several > times in one week). Just want to ask - XFS repair or XFS check. Last time I tried it on linux I got a out of memory error (with 24GB memory available). AFAIK it does need a really large memory to check big partitions with lots of files in it. Not that we need it much, but in case of error it is important. So far I got best recovery on broken partitions with ext3 fs, not with reiser neither XFS. MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkykNdwACgkQmWhuE0qbFyN73wCfZniB8RsbvOMlZD8+oR6hhzkX pQgAniT5WKbyNdcIqPRliCHrPficbb28 =GYrq -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] Setting up a new Win 2008r2 AD as krb5 server for OpenAFS
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi! Due to some problems while migrating from 2003 to 2008 I need to redo my complete AD. Biggest problem beside the work to setup all users is: creating new afs credential and set it up in the OpenAFS Fileservers. Is there any guide/step-by-step available now? I once did it and did not documented it well :-( So far I know: 1. create user afs in AD, user cannot change pass, passwd never expires 2. setspn afs afs/cgv.tugraz.at 3. ktpass -out NAME.out.txt -princ a...@cgv.tugraz.at \ -crypto DES-CBC-CRC +rndPass -DesOnly /ptype KRB5_NT_SRV_HST 4. on fileservers: asetkey add 3 NAME.out.txt afs/cgv.tugraz.at 5. restart fileservers. But as ktpass does not set the kvno in AD, how do I get the kvno? And do I miss a point? MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkzGsgEACgkQmWhuE0qbFyN8ZACfZs152v1XWXlTT0OCaAjnC6Fl FEUAn1AyscOcjpT/7GlS9uAeQyM22Fw+ =9at0 -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Setting up a new Win 2008r2 AD as krb5 server for OpenAFS
On 26.10.2010 14:51, Jeffrey Altman wrote: > On 10/26/2010 6:48 AM, Lars Schimmer wrote: >> Hi! >> >> Due to some problems while migrating from 2003 to 2008 I need to redo my >> complete AD. >> Biggest problem beside the work to setup all users is: >> creating new afs credential and set it up in the OpenAFS Fileservers. >> >> Is there any guide/step-by-step available now? >> I once did it and did not documented it well :-( > > Unless someone like yourself wrote one and placed it in the wiki or > updated the admin guide, the answer would be 'no'. Looks like we are one out of 10 running this setup worldwide. I try to document my steps well and put it up later on. >> So far I know: > > 0. Enable support for single DES in AD > >> 1. create user afs in AD, user cannot change pass, passwd never expires >> 2. setspn afs afs/cgv.tugraz.at >> 3. ktpass -out NAME.out.txt -princ a...@cgv.tugraz.at \ >>-crypto DES-CBC-CRC +rndPass -DesOnly /ptype KRB5_NT_SRV_HST > > Use MIT kvno tool to request a service ticket for > afs/cgv.tugraz...@cgv.tugraz.at. That will report the kvno. > Or you can examine the user account object in AD. > >> 4. on fileservers: asetkey add 3 NAME.out.txt afs/cgv.tugraz.at > > replace "add 3" with "add " > >> 5. restart fileservers. > > restart not required. touch the server CellServDB file. > Thank you. Those were the information I needed. Will try and report back. MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] asetkey: unknown RPC error (-1765328203) while extracting AFS service key
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi! Trying to setup new AD 2008R2 now. And I get this error: asetkey: unknown RPC error (-1765328203) while extracting AFS service key I did so far on Windows 2008R2 64bit: - -create your afs user in AD (username afs, user cannot change password, password never expires) - -click properties of afs user: under account tab, select "use Kerberos DES encryption types for this account" - - setspn -U -A afs/cgv.tugraz.at afs- add afs/cgv.tugraz.at to afs - -ktpass -princ afs/cgv.tugraz...@cgv.tugraz.at -mapuser a...@cgv.tugraz.at -mapOp add -out C:\afs-keytab +rndPass -crypto ALL -ptype KRB5_NT_PRINCIPAL +DumpSalt +SetUpn asetkey add 1 /tmp/afs-keytab afs/cgv.tugraz.at asetkey: unknown RPC error (-1765328203) while extracting AFS service key Any idea? MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkzL+0EACgkQmWhuE0qbFyO6kwCfSqSAMcCRlHLMFlcviN7TBCEk W6AAoIfVnin0TAVSC7MwMvdL0HJqi9oq =W9qR -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] asetkey: unknown RPC error (-1765328203) while extracting AFS service key
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2010-10-30 13:11, Simon Wilkinson wrote: > > On 30 Oct 2010, at 12:02, Lars Schimmer wrote: >> >> asetkey add 1 /tmp/afs-keytab afs/cgv.tugraz.at >> asetkey: unknown RPC error (-1765328203) while extracting AFS service key > > I think that error (181 in the Kerberos 5 error table) is kt entry not found. > What does klist -k say about the contents of /tmp/afs-keytab? klist -k /tmp/afskey.out.txt Keytab name: FILE:/tmp/afskey.out.txt KVNO Principal - - -- 1 a...@cgv.tugraz.at So far it looks like existant. > S. > MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkzMAMgACgkQmWhuE0qbFyPURACfXLyhp3psTBS/eFXUcc5DspjF 3eMAnjURN93afPzUzYZR6cENAUjFvbTx =aGFT -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] asetkey: unknown RPC error (-1765328203) while extracting AFS service key
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2010-10-30 13:02, Lars Schimmer wrote: > Hi! > > Trying to setup new AD 2008R2 now. Trying a bit more with options and looks like: ktpass -out C:\afskey.out.txt -princ afs/cgv.tugraz...@cgv.tugraz.at - -mapuser a...@cgv.tugraz.at -mapOp add -crypto DES-CBC-CRC +rndPass - -DesOnly /ptype KRB5_NT_PRINCIPAL +dumpsalt did the trick, testing currently. At least I get tickets and tokens with this setup. Fileservers keeps on restarting. MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkzMCBkACgkQmWhuE0qbFyOsEwCdGppuqetsZHlz7NIa8Cmund2m bA0AoJC0rMumJv3uoh8+P1xD9Hst4NE/ =5kq1 -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Re: asetkey: unknown RPC error (-1765328203) while extracting AFS service key
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2010-11-01 01:47, Andrew Deason wrote: > On Sat, 30 Oct 2010 13:26:00 +0200 > Lars Schimmer wrote: > > a...@cgv.tugraz.at != afs/cgv.tugraz...@cgv.tugraz.at Isn´t a...@realm no more supported? I was under impression it is still valid. But I did it with afs/c...@realm now and it works. With a bit time I will polish my notices and post a HowTo, it works fine and fast. Only the raoaming profiles are a pity - new domain, new profiles. Old ones are not accepted :-( MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkzOjD8ACgkQmWhuE0qbFyPRSgCfZpK+u/t+RM/u2BuY02vc7Wmg M+sAnR53rfNK53gsTg7cIAmkzp0BVslJ =+0vZ -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] LDAP against Win 2008R2 AD, who does it?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi! While setting up OpenAFS with LDAP and Win2008R2 AD we hit into a problem. Is here anyone running a AD and doing LDAP against the AD? Thank you. MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkzZUjsACgkQmWhuE0qbFyMs9wCdF32DERRh3jSMPQgWjDa1sIM+ 4AgAn2alIU2H1nomZqHo+cTo0ee4GBdS =uGkZ -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Windows client options
On 19.12.2010 16:09, Jaap Winius wrote: > Hi folks, > > So far, I've been able to get Linux clients to work perfectly with my > MIT Kerberos V / OpenLDAP / OpenAFS servers. No need to create any local > accounts: anyone with a network account can login to any workstation and > none of their personal files are stored locally. > > I hope I'm wrong, but the same doesn't seem to be possible with Windows > clients. I've been experimenting with a WinXP (SP3) Pro test machine > running Kerberos for Windows 3.2.2 and OpenAFS for Windows 1.5.7800. It > seems to work fine, as I can authenticate and access all of my files on > the network. However, I still have to start by logging in to a local > Windows account. > > Is it possible to configure a Windows XP client for single-sign-on, so > that locally no pre-existing account or knowledge of any users is > required? If so, can it also be set up so that the user's home > directories are stored in OpenAFS? Sure it is. Just enter the path to the profile like \\AFS\cgv.tugraz.at\home\user\winprofile and enable "pbtain tokens at login" for the workstation. Be sure for AD server can access the path to the user profile (l ACL should be enough). This will set the profile path to a AFS path and all data will be read and saved into AFS space for the user. But it does not work like linux homes. 1. A local profile will be written to disk every time a user log in 2. the profile will be copied from server to client on login 3. while logged in, files will be written to local disc 4. on logout, files will be synced from local disc into AFS space >From our point of view it works better with windows 7 than with windows XP, but it depends on lots of facts. It is wise to limit the size of the profile via AD. > Thanks, > > Jaap MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Win7 SP1 issue
On 23.02.2011 13:47, Mike B. Kerber wrote: > Hello all! > In any case be warned before installing SP1 for win7 if you rely on > openafs! If there is somebody with 32bit Win7 and got openafs working > under win7sp1, please report. Currently ~10 Win7 workstations with OpenAFS 1.5.78 and 1.6pre2 running fine after update to SP1. 32bit and 64bit workstations. > best regards > > mag. michael kerber MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] Strange error message: rx failed to send packet: rx_sendmsg: Invalid argument
Hi! I tried to create a new volume and did: vos create phobos a tgengel vos addsite phobos a tgengel vos addsite... (for 3 more sites) I did not vos release tgengel. Now I see the name of the volume is bad and wanted to rename: vos rename tgengel user.tgengel rx failed to send packet: rx_sendmsg: Invalid argument rx failed to send packet: rx_sendmsg: Invalid argument rx failed to send packet: rx_sendmsg: Invalid argument rx failed to send packet: rx_sendmsg: Invalid argument And a: vos exa user.tgengel rx failed to send packet: rx_sendmsg: Invalid argument rx failed to send packet: rx_sendmsg: Invalid argument rx failed to send packet: rx_sendmsg: Invalid argument Uhh. Error on my side? Client is 1.6.0~pre1-1 on debian 64bit. Servers are 1.4.11+dfsg-2 and 1.4.12.1+dfsg-4 on debian. MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Strange error message: rx failed to send packet: rx_sendmsg: Invalid argument
On 2011-02-28 09:35, Derrick Brashear wrote: is the host multihomed perchance? in any case it's a EINVAL being passed back on the socket. There is no multihomed server involved. does the command complete? i assume so, and they are spurious errors from (well, via) the kernel. it's not your fault in any case. It did not complete in time and now state is somewhat broken. Vos exa user.tgengel shows that error again. The server shows the old volume still in place: vos listvol phobos a |grep tgenge tgengel 1702197158 RW 2 K On-line But: vos exa tgengel VLDB: no such entry So it is the state in between :-/ MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Strange error message: rx failed to send packet: rx_sendmsg: Invalid argument
On 2011-02-28 10:29, Lars Schimmer wrote: On 2011-02-28 09:35, Derrick Brashear wrote: is the host multihomed perchance? in any case it's a EINVAL being passed back on the socket. There is no multihomed server involved. Sorry for doubled mail. Now I digged deeper and found: One Fileserver was multihomed :-( Set it up yesterday as a replacement for a old machine and I forgot to setup the NetRestrict file (iSCSI network address should be banned). Thank you. MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Strange error message: rx failed to send packet: rx_sendmsg: Invalid argument
On 2011-02-28 11:30, Derrick Brashear wrote: Multi homed is fine; I just wondered if the client was. Since the kernel makes the routing decision, if it makes it wrong occasionally strange errors are generated and make their way up the stack Oh, the client. Yeah, client is multihomed on localhost, 129.27.218.0 and on 172.26.27.0. But default is the 129.27.218.0 and all OpenAFS fileservers are on that network, to. So no reason to choose the 172.26.27.0 network at all. (over all, clients are always multihomed, or? With localhost a 2nd network is available in nearly 99,9% of clients). Derrick MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Strange error message: rx failed to send packet: rx_sendmsg: Invalid argument
On 2011-02-28 09:35, Derrick Brashear wrote: is the host multihomed perchance? in any case it's a EINVAL being passed back on the socket. does the command complete? i assume so, and they are spurious errors from (well, via) the kernel. it's not your fault in any case. Some more information. Did not think about that issue and wanted to rename another volume. Same error, at the end: rx failed to send packet: rx_sendmsg: Invalid argument Could not start transaction on the rw volume 1702193389 Possible communication failure Error in vos rename command. Possible communication failure And afterwards: vos exa 1702193389 rx failed to send packet: rx_sendmsg: Invalid argument rx failed to send packet: rx_sendmsg: Invalid argument Could not fetch the information about volume 1702193389 from the server Possible communication failure Error in vos examine command. Possible communication failure Dump only information from VLDB user.aschiefe RWrite: 1702193389ROnly: 1702193390Backup: 1702193391 number of sites -> 4 server 0.0.0.3 partition /vicepc RW Site server 0.0.0.2 partition /vicepa RO Site server 0.0.0.5 partition /vicepb RO Site server 0.0.0.3 partition /vicepc RO Site That does look strange. A vos exa of existing volumes does show usual, correct values. MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] Guide on howto built from source for debian?
Hi! For some better testing of gerrit patches I want to get into building OpenAFS from source. Any one has a guide/link on howto do it "easy" from source on debian (stable/unstable) amd64? Someone mentioned a build script from Russ Albery, any mor info on that? Thank you. MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] vos zap problem
Hi! After the vos rename actions resolved I got some problems with vos zap: zap delete the volume, don't bother with VLDB schimmer@tetris ~ % vos zap deimos a user.abcd VLDB: no such entry I think vos should not bother with VLDB? Why does it show the VLDB error? And how do I delete that bogus entry on my partition? 1.6.pre1 still on debian. MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] vos zap problem
On 2011-03-14 13:50, Michael Meffie wrote: Hi Lars, Vos zap wants a volume id. Try the numeric id, from the vol listvol output. Poor stupid me. Thank you. MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] strange upload with win 1.6.pre3
Hi! I just recognize some strange behaviour: server is openafs 1.4.12.1+dfsg-4 on debian. Start options: parm /usr/lib/openafs/fileserver -L -udpsize 131071 -sendsize 131071 -rxpck 700 -p 128 -b 600 -nojumbo -cb 150 Client is OpenAFS 1.6pre3 on windows7 64bit. no encryption, SSD drive. Fetching a 5GB file from the fileserver is in the 50-60 MB/sec area. No problem. Writing the same file back into a subdir of the directory it was fetched from is in the 5 MB/sec area. Thats not fine. Some simple stats fetched with top and task manager showing me CPUs are mostly idle and the storage of fileserver while writing, to. I guess writing speed should be higher, or? Any tips on howto improve checks for problems with this upload speed? From a linux64bit 1.6.pre3 (debian) I can push another 5 GB file within the 20MB/sec area into the same directory/fileserver (usual SATA drive for OpenAFS cache). MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] AFS client -> Windows server w/AD & KDC -> Linux AFS servers
On 26.05.2011 12:31, Mickey Lane wrote: > Hi, > > I want an AFS client (Windows or Linux) to get kerberos credentials from a > Windows Server and use them to access AFS servers on a Linux machine. The > Linux machine does not have a KDC. > > Although I haven't personally tried it, I'm under the impression this works > without too many AD configuration issues with Server 2003. > I'm also under the impression it works with Server 2008 R2 once DES is > enabled. > > I currently have 2008 Standard (not R2) configured to provide tickets and > I've moved the keytab to the Linux machine, etc. The process *appears* to > work but the credentials are invalid. Kvno numbers are correct. I think the > problem is improper encryption types. > > I'm aware of a Microsoft update to 64-bit Server 2008 that is related to > password corruption in this process. > > My question: Has anyone ever made this work on Server 2008 Standard (not R2)? I know it works on Win 20008 Standard, but I do run 2008R2 for AD services including krb5 auth for users on linux clients. My selfnotes are here to be read: http://129.27.218.77/afs/howto.afs.ad.2008.txt > Thank you, > Mickey. MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] AFS share not writable
On 2011-06-28 13:11, Michael Richter wrote: Hi List, I have a problem on one computer. It's a Windows 7 Professional x64 and we're using integrated login. I tried this with OpenAFS 1.5.78 and 1.5.99.6. The user can login normaly. The Windows profile is loaded from AFS and his AFS home drive is mounted on Z:. How is it mounted? Do use "map network drive" and not the OpenAFS function. The problem is, the user has readonly access. If we try to create a file/dir or save a existing file it doesn't work. If we try to create a file/dir in Z:\ nothing happens (even no error message). If we try the same in a subdir we get the error message "Too many files opened for sharing". Something is bad. Is it a RW volume? I can disconnect this drive and reconnect via "net use" or Windows Explorer but we can still not write on it. But I can reconnect it using AFS control panel (Global Drives). This way I get normal access to the afs share. The user has normal access rights and more than 200 MB left and it works using AFS control panel. But this way he would need to click everytime through the dialogs to reconnect the drive. Do not use Global Drives mounting, it is buggy and does not work. Does someone know where the problem is? On every other machine we don't have this problem. Thanks Michael Richter MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] Windows 32bit .msi 1.5.9907 shows as 1.5.9906
Hello! I just installed the 1.5.9907 (1.6.pre7) for windows 32bit MSI package on my windows 7 SP1 32bit laptop. But in Network ID Manager Plugin View it appears as 1.5.9906 (instead of expected 1.5.9907). My fault, fault in packaging,..? thank you. MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Win7 64-bit not getting tokens on login
On 16.08.2011 04:01, Wayne Greene wrote: I recently started using the Windows (WAIK) rather than Symantec Ghost imaging method to create images to apply to our systems. It works well except that I can no longer gain AFS tokens on login on the Windows 64-bit domain machines. I'm using MIT Kerberos 3.22 with the NetID Manager included, and the latest 64-bit 1.5.9906 package with the 32-bit tools installed. We can gain tokens by using the "Obtain new Credentials" choice from the "Credential" menu choice. This lack of credentials on login doesn't occur with the 32-bit image. Is anyone else out there seeing this and does anybody know if there a fix for it or more clues to lead to a fix? More details can be provided as necessary. Thanks. What does the Windows logs tell you on the error? And the waitin gperiod after booting up is taken, or? Wayne Greene Computer Services UNC Computer Science MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] OpenAFS inconsistent behavior - Windows 7 32 bit
On 2011-08-24 14:55, Dvorkin, Asya wrote: Hi Jeffrey, Thank you. I will look into Release Notes. Has anyone gotten OpenAFS working on Windows 7 32 bit? If so, using which versions of MIT Kerberos and OpenAFS? I do run OpoenAFS on windows 7 32bit for some years now on my laptop. I guess from 1.5.7x on up to latest 1.6.0 pre7 and the MIT kerberos network ID manager 1.3.1.0. So far I could login and obtain tokens on login (if the win 7 bug does not hit me). Thank you! Asya MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] Gratulation for the 1.6.0 release
Hello! Gratulations for the 1.6.0 release and a big thank you for the OpenAFS team, whoever helped to make this happen! MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] OpenAFS - SMB gateway
Hi! Due to the outstanding Windows 7 bug annoying us very deeply, we search for a solution to this problem. One could be the OpenAFS-smb gateway. AFAIK it is only available for one system, correct? Does it still work on with OpenAFS 1.6.0 ? Any more hints/tips about it? Thank you. MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] OpenAFS for Windows IFS Status
On 06.09.2011 19:03, David Bear wrote: YIPPY -- we need to have party on Sept 15 -- or close to it. This is GREAT news. I guess that will be a nice time in Hamburg :-) -- David Bear College of Public Programs at ASU 602-496-0424 MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] OpenAFS-1.7.1 on Windows 7 32 bit
On 16.09.2011 18:24, Douglas E. Engert wrote: So far OpenAFS-1.7.1 gets around 2 issues we have been seeing with previous versions. OpenAFS client can recover from hibernation... On W7 32 bit were the user does not have any admin rights even with 1.6.0b they were not able to use AFS. (The circumvention was to give the user admin rights) With 1.7.1 this issue appears to have been fixed. My users on Win 7 32bit were not admin and could get tokens/tickets/data from OpenAFS cells with previous 1.5.x and 1.6.x versions of OpenAFS. The IFS client does get rid of smb protocol and shows some other nice side effects. My experiences here were great over the last 2 weeks, just a few small problems still appear: running software installations out of OpenAFS is often not possible with IFS (if it needs a change in user authorization). MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] Upgrade OpenAFS 1.4.12 to 1.6 fileservers, ok?
Hello As one of the admins bedie us told me, there needs something special to be taken care of while updating 1.4.12 Debian OpenAFS fileserver to 1.6, I just want to ask here. On webpage and in release note I did not seen anything about to take of, neither do I remember. But did I miss something? Can I just upgrade one of my three server for a test and let it run with 2 1.4.x fileservers? Thank you. MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Upgrade OpenAFS 1.4.12 to 1.6 fileservers, ok?
On 2011-09-20 18:32, Derrick Brashear wrote: On Tue, Sep 20, 2011 at 10:07 AM, Lars Schimmer wrote: Hello As one of the admins bedie us told me, there needs something special to be taken care of while updating 1.4.12 Debian OpenAFS fileserver to 1.6, I just want to ask here. uh. fileserver? can't think of anything. dbservers need to be all at once, and if you create nested groups in pts, you can't downgrade easily. but fileservers? fire at will. enjoy. Thank you. Silly me, to late at work, did missed the DBservers. So DB servers need to upgrade all at once, do they migrate any DB? (or whats the reason?). MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Windows client network behaviour
On 2011-09-21 13:09, Anders Magnusson wrote: In the hunt for oddities regarding the new IFS Windows client I have observed a problem causing bad performance, and hopefully someone has some idea about what is going on. Environment: Server: OpenAFS 1.4.12.1, CentOS 5.3 Client: Windows 7, OpenAFS 1.7.1 Any hints anyone? I think this smells as traffic shaping due to the quite exact transmit rate but since the QoS module is uninstalled and the behaviour is seen on the windows network interface I have no clue where it may be. Not really a idea or anything, but: - encryption enabled or disabled on client? - local cache on client on slow harddrive? Our current setup does show 20-40 MB/sec with OpenAFS 1.7.1 on 64bit system, depending on the server. A side note: Going via a SMB-AFS gateway on the same network gives significantly better performance. -- Ragge MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Windows client network behaviour
On 21.09.2011 16:42, Anders Magnusson wrote: > On 09/21/2011 02:56 PM, Lars Schimmer wrote: >> On 2011-09-21 13:09, Anders Magnusson wrote: >>> >>> In the hunt for oddities regarding the new IFS Windows client I have >>> observed a problem causing bad performance, and hopefully someone has >>> some idea about what is going on. >>> >>> Environment: >>> Server: OpenAFS 1.4.12.1, CentOS 5.3 >>> Client: Windows 7, OpenAFS 1.7.1 >> >>> Any hints anyone? I think this smells as traffic shaping due to the >>> quite exact transmit rate but >>> since the QoS module is uninstalled and the behaviour is seen on the >>> windows network interface >>> I have no clue where it may be. >> >> >> Not really a idea or anything, but: >> - encryption enabled or disabled on client? > Disabled. > >> - local cache on client on slow harddrive? > No, state-of-the-art HP workstation. Note that this is more-or-less the > behaviour Just to note: ALL HP machines I had to work with had real bad issues with performance and were really slow while there was some load on disk I/O. I get away from HP machines as far as I could. But maybe thats personal experience. (e.g. the workstation for our office copied files with 10 MB/sec from one HD to another while I was surfing the net) >> Our current setup does show 20-40 MB/sec with OpenAFS 1.7.1 on 64bit >> system, depending on the server. > Yes, and that is what we expect also, therefore I am investigating this. > -- Ragge MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] problems with de-installing OpenAFS 1.5.x on windows 7
Hello I experienced some heavy problems with deinstalling the 64bit package of OpenAFS 1.5.x on our windows 7 workstations. While/after deinstalling the 64bit package (MSI) of OpenAFS 3 (out of 6 I tried) workstations did no more accept any admin user as administrator, the service to start the services did not start and furtheron I can onl reinstall complete system to get it working again as I do not obtain any right to administrate the system or start any servive => I cannot deinstall/install any software, I cannot remove it from the domain, I can just logon/logoff and copy data to/from harddrive). Has anyone experienced and similar? (the workstations were setup in last/this year, are in a domain, upgrading OpenAFS did worked well on them, I was login as a local administrator while deinstalling the OpenAFS 64 MSI package,...). Somehow it looks like the registry is destroyed in a very bad manner. And this has happen on 3 workstations yet (out of 6 I tried to deinstall OpenAFS 1.5.x for installing 1.7). MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] problems with de-installing OpenAFS 1.5.x on windows 7
On 23.09.2011 14:46, Jeffrey Altman wrote: > On 9/23/2011 3:00 AM, Lars Schimmer wrote: >> Hello >> >> I experienced some heavy problems with deinstalling the 64bit package of >> OpenAFS 1.5.x on our windows 7 workstations. >> >> While/after deinstalling the 64bit package (MSI) of OpenAFS 3 (out of 6 >> I tried) workstations did no more accept any admin user as >> administrator, the service to start the services did not start and >> furtheron I can onl reinstall complete system to get it working again as >> I do not obtain any right to administrate the system or start any >> servive => I cannot deinstall/install any software, I cannot remove it >> from the domain, I can just logon/logoff and copy data to/from harddrive). >> >> Has anyone experienced and similar? >> >> (the workstations were setup in last/this year, are in a domain, >> upgrading OpenAFS did worked well on them, I was login as a local >> administrator while deinstalling the OpenAFS 64 MSI package,...). >> >> Somehow it looks like the registry is destroyed in a very bad manner. >> And this has happen on 3 workstations yet (out of 6 I tried to deinstall >> OpenAFS 1.5.x for installing 1.7). >> >> >> MfG, >> Lars Schimmer > > Lars: > > While your situation sounds horrible I have a hard time believing it is > the result of OpenAFS itself being uninstalled. If that were the case I > would run into the problem on a consistent basis as I switch between > release series. OpenAFS does not add itself as a dependency for other > services. I am sure OpenAFS is not the root cause for this situation. But as it happend 3 time at OpenAFS deinstallation it somehow is involved. But I do not know in which way. > My guess is that one of two things are true: > > a. the local administrator account has somehow obtained a dependency on > the \\AFS name space perhaps with an auto-run or other and as a result > will not start because after OpenAFS is removed there is no method of > accessing the dependency. It had Z: and Y: mounted to \\AFS\cgv.tugraz.at, but system profile is located on local harddrive. No dependancy on Z:\ and Y:\ is known to me. On other workstations with same setup nothing bad happend while deinstallation with Z:\ and Y:\ still being mapped. > b. your machines have a rootkit or other damage and the removal of > OpenAFS is triggering bad behavior. Rootkit could be, as machines are in a room for work with students. Need to check. The latter seems to be the case, though I do not know the real reason (some software installed, not have had problems yet). > The 1.5 series does not have any kernel component and is not capable of > altering the role of administrative bits. > I would start by examining the registry for dependencies on \\AFS. For > example, are there any system drive mappings to \\AFS that would be > persisted? Any service application paths that refer to \\AFS or a > mapped drive letter? Etc. Would love to, but I cannot as easy yet. I can login as a admin account, but all action requiering rights as admin, I/system cannot perform. On control panel it writes: "the dependancy service or group failed to start", on login the error "C:\Windows\system32\config\systemprofile\desktop refers to a location that is unavailable" appears and I cannot go into it, as I got no admin rights. I cannot view system messages/logs, to. And even booted in safe mode the same errors do appear. But as I do miss some knowledge and time I will check for rootkits and some obvious other errors and later on redo system and better check other workstation ahead of making changes. > Jeffrey Altman > MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] problems with de-installing OpenAFS 1.5.x on windows 7 - Reason found
On 2011-09-23 09:00, Lars Schimmer wrote: Hello I experienced some heavy problems with deinstalling the 64bit package of OpenAFS 1.5.x on our windows 7 workstations. Now I found the reason (I am 99% sure). Once we started with Windows 7 and OpenAFS and user profiles in OpenAFS space, we had problems with users not able to wait until OpenAFS loaded to login. So we managed to write a small registry patch to change the startup orders of some services. And AFAIK all these workstations which had that patch applied, died horrible on deinstall the OpenAFS package. All workstations which works well after deinstall OpenAFS did not have had this patch installed. (reason found, solution would be: revert patch ahead of deinstall or reinstall Windows) MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Re: mixing AFS versions for db servers?
On 22.10.2011 20:30, Andrew Deason wrote: On Sat, 22 Oct 2011 01:06:53 + Coy Hile wrote: Out of curiousity (as I'm sure I'll come across it soonn enough after I rebuild my cell), if all dbservers must run the same version, what is the supported process for updating dbservers? Certainly if you did "yum upgrade list-of-openafs-packages" on all three and rebooted them simultaneously, you'd have an outage -- however short it may be. Only the mayor number must be same, 1.2 only with 1.2, 1.4 only with 1.4, 1.6 only with 1.6,... Whatever revision behind this - usual does not care. But yes, it does implify a short outtake. For me it was a nice sunday with bad weather outside, I got a new server, set it up ahead, shut down my 3 DB servers and started up the new one. Afterwards I updated the other 2 remaining and started them. Took over all <30 min if well prepared. A mayor Upgrade like this is usual needed only every few years, the 1.4.x cyclus was quite some years. For luck you do not ave to upgrade the DB servers with fileservers - you can wait some time, e.g. use maintanance window around Xmas time^^ MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] Re: [OpenAFS-announce] OpenAFS 1.7.2 released for Microsoft Windows
On 2011-11-20 23:20, Jeffrey Altman wrote: OpenAFS 1.7.2 is the second in a new series of OpenAFS clients for the Microsoft Windows platform that is implemented as a native file system. In brief, the benefits of the 1.7.2 release are: Sorry, but not found on openafs.org. Jeffrey Altman for the OpenAFS Gatekeepers MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] openafs - samba
On 29.11.2011 17:01, Mike Legg wrote: Hi, I am currently testing OpenAFS on Debian 1.14.12 and would like some advice on how to expose OpenAFS via Samba for Windows clients. Is there an OpenAFS/Samba guide to help with this? Is Samba used by many installations for this purpose or is the advise to use the Windows 1.7 client, if so, why? You want to use OpenAFS 1.7.2 for Windows native. Really. Native client is far better integrated into system, has higher speed and no hassle for the gateway samba-afs. Kind regards Mike Legg IT Support MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] false fileserver in vldb, howto remove?
Hi! I am stuck on a small problem. While I redid one of my fileserver, it started with a wrong IP and registered its volumes on the wrong IP. Now I tryed to get rid of this IP. I did: vos delentry -server 172.24.25.81 (wrong IP) Afterwards all my vldb entries were gone. So I needed to: vos syncvldb fileserver(1-4) vos syncserv fileserver(1-4) and the vos listvldb show all volumes fine and no sign of 172.24.25.81. But a vos listaddr still shows that IP. And a vos changeaddr 172.24.25.81 -remove shows me: Could not remove server 172.24.25.81 from the VLDB VLDB: volume Id exists in the vldb and a fs getserv trinculo.cgv.tugraz.at 20005 172.24.25.81 40001 afsgraz.igd.fraunhofer.de 40009 phobos.cgv.tugraz.at 20005 deimos.cgv.tugraz.at 20010 Hmm. 3 Fileservers 1.6 debian, one 1.4.12, 3 DB servers on 1.6 debian. (the three fileservers with a 172.24.25.x network do have a /etc/openafs/NetRestrict file which includes: 172.24.25.255 And the Filelog does show, the fileserver does run on 129.27.218.x on all 3 fileservers in question. So the wrong IP is just still in DB, somehow. How to remove it safe, secure and forever? MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Re: false fileserver in vldb, howto remove? - Fixed
On 2011-12-07 18:44, Andrew Deason wrote: On Wed, 07 Dec 2011 14:32:24 +0100 Lars Schimmer wrote: I am stuck on a small problem. While I redid one of my fileserver, it started with a wrong IP and registered its volumes on the wrong IP. Now I tryed to get rid of this IP. I did: vos delentry -server 172.24.25.81 (wrong IP) Afterwards all my vldb entries were gone. So I needed to: vos syncvldb fileserver(1-4) vos syncserv fileserver(1-4) You don't need to do this. If you just restart a fileserver with the correct IP information, the addresses will be updated in the vldb. (the three fileservers with a 172.24.25.x network do have a /etc/openafs/NetRestrict file which includes: 172.24.25.255 For debian, I believe this should be /var/lib/openafs/local/NetRestrict, not /etc/openafs/NetRestrict. all right, that was the issue. Kinda dumb error. MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] win AD and OpenAFS
On 09.12.2011 18:35, Jeffrey Altman wrote: Any advice on a useful link for setting up the linux or solaris server Kerberos to allow for this authentication? If the only thing you are using the Kerberos realm for is OpenAFS, why not just use Active Directory by itself? Not really clean, but my way to use WinServer 2008 AD and OpenAFS http://129.27.218.230/afs/howto.afs.ad.2008.txt MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] BosConfig file and empty line
Hi! Just had the case of a emtpy line in BosConfig and BOS did not start as of it. I had: bnode fs fs 1 parm /usr/lib/openafs/fileserver -L -udpsize 131071 -sendsize 131071 -rxpck 700 -p 128 -b 600 -nojumbo -cb 150 parm /usr/lib/openafs/volserver -nojumbo -udpsize 131071 parm /usr/lib/openafs/salvager end The empty line ahead of salvager was a problem. Good to know those make problems, but is it really needed to be as strict as it is now? MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] OpenAFS 1.7.x on windows and IBM Tivoli Fastback Continuus Data Protection
Hi! Just one question: does someone use IBM Tivoli Continous Data Protection Software and save that backup onto OpenAFS 1.7.x \\AFS\... ? Thank you. MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] Added to wiki: HowTo Win2008R2 AD as KDC for OpenAFS
Hello Finally I found some time and added a rough, short and a bit unclear section about using the Win 2008R2 AD server as a KDC for your OpenAFS cell: http://wiki.openafs.org/AFSLore/win2008r2adaskdc/ Please have a look over it and correct it (if needed) and extend it. Thank you. MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] OpenAFS guide - usecase in wiki?
On 17.12.2011 17:36, Jason Edgecombe wrote: > It may help to give a better example. I work at a university, and each > of the students in our college (a sub-unit of the university) has a home > directory in AFS. All user files are stored there, and we do not sync. > All backups are handled using the AFS backup software, to back up to > tape. Most files are stored in the home directly and are accessed > directly out of AFS.The AFS cache makes accessing the files very quick. > > Our users access their files from Windows and Linux using native OpenAFS > clients. This allows our users to sit down at any of our 1000+ > workstations and access their files. Hi sorry to interrupt, but this gave me the idea of writing up OUR usecase over her into the OpenAFS wiki. Hope thats fine for the community, maybe other will follow. (at the OpenAFS meetings in germany/europe it was always very nice to know how others did setup OpenAFS and use it). MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] OpenAFS 1.6.0-3/1.6.1pre on debian - salvager problems
Hi I updated my servers to Russ package 1.6.0-3 and 1.6.1-pre on debian. Now I had a look into my logs and I found: 12/30/2011 11:01:43 STARTING AFS SALVAGER 2.4 (/usr/lib/openafs/salvager /vicepc 1702193053) 12/30/2011 11:01:44 SYNC_ask: protocol mismatch on circuit 'FSSYNC'; make sure fileserver, volserver, salvageserver and salvager are same version 12/30/2011 11:01:44 FSYNC_askfs: fatal FSSYNC protocol error; volume management functionality disabled until next fileserver restart But my -filserver and -dbserver packages are the same version. Is this a general problem or does Russ have a problem with packaging? (it happens on ALL servers with 1.6.0-3 and 1.6.1~pre1-1). Thank you. MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] OpenAFS 1.6.0-3/1.6.1pre on debian - salvager problems - fixed in pre1, sorry
On 2011-12-30 13:39, Lars Schimmer wrote: Now I had a look into my logs and I found: 12/30/2011 11:01:43 STARTING AFS SALVAGER 2.4 (/usr/lib/openafs/salvager /vicepc 1702193053) 12/30/2011 11:01:44 SYNC_ask: protocol mismatch on circuit 'FSSYNC'; make sure fileserver, volserver, salvageserver and salvager are same version 12/30/2011 11:01:44 FSYNC_askfs: fatal FSSYNC protocol error; volume management functionality disabled until next fileserver restart (it happens on ALL servers with 1.6.0-3 and 1.6.1~pre1-1). Ok, I mixed a bit. Sorry. Looks like it is fixed in the pre1 package. Thank you. MfG, Lars Schimmer MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Windows clients / roaming profiles and OpenAFS
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2012-01-18 16:55, Coy Hile wrote: > I'm finally getting aorund to getting my cell set back up (mostly > for playing around), and I have something new in the mix that I > didn't have last time: Windows clients. What is considered best > practice for dealing with Windows profiles and OpenAFS? I see the > following possibilities: > > (1) Make all the profiles local, users have to copy things to AFS > by hand (2) Make profiles local (or roaming using MSFT > infrastructure) and redirect folders such as My Documents/Music/etc > to \\AFS UNC path (3) Store the roaming profile data in AFS > directly. > > What's the Right Way(tm) to do it? Depends on the setup. We had lots of issues with Folder Redirection, we do complete roaming profiles now. With OpenAFS 1.7.4 Backsides: large profiles takes long time to load on first time and long time to logout on first time (a lot of files). Profile Space is always to small (e.g. Thunderbird mail...). Software sometimes do think profile spoace is scratch /tmp space and creating a 20GB scratch file in it - FUN! But in 99% it does work fine so far. MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk8W+AwACgkQmWhuE0qbFyOSkwCfbFhdkWKBBukfUeUTK9EFN/r8 4dwAn3AoMw4VGW14CPj+tS4fqHaWzFcu =bwI9 -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] OpenAFS talks & workshop at Chemnitz Linux Tag 2012
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi! Together with the SPSC from TU Graz and Mr. Feiler from University Hohenheim me from CGV TU Graz have applied for a talking track at the Chemnitzer Linux Tag 2012. Those talks were accepted beside a workshop of howto install OpenAFS. http://chemnitzer.linux-tage.de/2012/vortraege/plan http://chemnitzer.linux-tage.de/2012/vortraege/workshops MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk8fwAEACgkQmWhuE0qbFyPF3QCfWXWRvXoz4UgAS20SYEB9XfEt hOQAnA8LV6ihAX0axvWH0yKVnQ5rIFLU =Y2HT -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] OpenAFS 1.7.4 Windows and settings discrepancy
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi! I had a small difference in settings of OpenAFS today (beside file corruptions): If I choose on windows 7 enterprise x64 OpenAFS 1.7.4 the "AFS client configuration" from system control panel and enter a size of 498000 kb for cache size in the Advanced tab (and chunk size 1024, 3 entries Status cache) it shows 606000 kb in explorer. Why does explorer shows 100MB more? (Do I miss something?) MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk8hK8EACgkQmWhuE0qbFyOxawCfUX5FT6yQYAQFvjuXbRZBGzbi JloAmQExuG7QxmFSx0yUMCaBpQXq/l+B =oazZ -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] files does not show the same content
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi! Our users do experience some problems with files content in our cell. Mostly on Windows x64 1.7.4 clients the content of the file is not the same as on other machines. e.g. a text file edited on one windows machine with a 1.5.x client, safe to ouire filespace, go to 1.7.4 client, open explorer to the folder and see: file has new file date, but content of file is not the same as on the 1.5.x client. The new (edited) content is shown on the 1.5.x client machine and on linux machines, and on some 1.7.4 machines. IMHO it only is for files edited by clients on windows prior to 1.7.0 (but I cannot tell 100% for sure, as my users do not remeber everything). Our setup: 3 OpenAFS DB/Fileserver Debian with OpenAFS 1.6.1pre1 clients on linux mostly 1.6.1pre1 windows on workstations 1.7.4 windows on some labs PCs 1.5.x (windows XP) Mostly all in one full routeable subnet, but some 1.5.x clients in private Subnet with Cisco Router NAT. But Linux clients (who can read the changed content correct) on the full routeable subnet as the windows 1.7.4 clients. Any idea on howto debug/find the problem? (in mid term the 1.5.x clients will be 1.7.4 and Windows 7). MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk8hLY8ACgkQmWhuE0qbFyMa9ACeI2HV6m/U98fWQiAUTL2mU0oR iEkAn2SkgJoXFrv+yajHjLYVYhp6v2Z0 =bCIw -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Heimdal & OpenAFS 1.7.4: Difficult user experience
Hi! First: We did make a wiki page with all the needed software (links), screenshots, values to enter, path,... for our users. In case they want the software, we give them th elink to the wiki page and 99% of users could do it as we has written it down. But we do use OpenAFS 1.7.4 and still MIT KfW. Not yet needed to change over to Heimdal. Oh, and we provide our own krb5.conf file in our wiki for users to copy into the path (windows admins do know how to work with UAC). (1) Is it really true that OpenAFS tells people to download software that doesn't work without manually fiddling with configuration files? Or did I do something wrong with the install? No install can suite all users needs. In our case we cannot provide DNS entries for OpenAFS and so default install does not work for us. On providing installers you must find the most useable configuration. (2) Instead, could we have the Heimdal installer default "allow_weak_crypto = true" ? Why should it? It should always prefer the more secure system. (3) If we're stuck with (1) and can't do (2), would anyone like me to write up the installation sequence required on the Wiki? And maybe the download page could point to it so poor lusers could find it? And maybe for MacOSX too, with also requires a manual fiddling with /etc/krb5.conf after installation. (4) Is there a plan to finally wean AFS servers off des-cbc-crc ? Already in work, but needs some more work as it needs some protocol changes and a new standard for it. Thanks, John MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] any reason why 1.7.7 is not on webpage?
Hi! Is there any good reason why OpenAFS for Windows 1.7.07 is not yet public on webpage? Thank you. MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] Feature wish: remove partition while fileserver keeps on running
Hi! Maybe I missed a point or two, but I wish I could remove and unmount a /vicepX partition while fileserver keeps on running. The last weeks I needed to redo our iSCSI storages and that implies a lot of mount/unmount/redo partitions of our OpenAFS fileservers. Each time I need to add/remove a partition, the safe way was to stop the OpenAFS fileserver, mount/umount the partition and restart the fileserver. As I do not want to be the night owl, I did it in usual work shift - which did annoy our users as service was broken a few minutes. Is there any way to do this a better way? (IMHO DAFS is only for volumes, not partitions, or?) Thank you. MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Re: Best way to debug "Lost contact with file server"
On 29.02.2012 01:56, Benjamin Kaduk wrote: On Mon, 27 Feb 2012, Andrew Deason wrote: On Fri, 24 Feb 2012 02:51:48 -0800 Ken Elkabany wrote: Off-email question: If a volume has N read replicas, how do clients choose which one to use? By default, it's effectively random. Technically the client also takes into account the ip addresses of the client and server to try and estimate how "close" it is to each fileserver, but it does so using antiquated classful addressing techniques and usually isn't very useful. Er, I would have thought that this would cause a group of clients deployed near each other to all prefer the same replica, which is not really "random". That is, though from the point of view of a single client the choice may be random, from the point of view of managing server load it is not. Is that incorrect? IMHO on the windows client there is a serverprefs based on RTT. And that is planned to go into linux client, to. -Ben MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] Problem login/token windows 1.7.6
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello! Did anyone already experienced the following: - From yesterday to now (without any known interaction on the system) the windows 7 x64 system tells the user "afsauthent.dll is missing" and it could not obtain token and could not load user profile. Reboot, same problem. Login as admin, remove OpenAFS 1.7.6 x64 and x32 libs, reboot. Install OpenAFS 1.7.6 again (64bit and 32bit libs). Reboot. Try to login as user. It hangs at welcome screen for a loong time (did break it after 20 min with CTRL-ALT-DEL). After I hit th ctrl-alt-del the desktop of the local user did appear, but it does not have a token. Usual it has a token. Now I use the NIM and I get a token. => OpenAFS could no more fetch a token at login => user cannot use roaming profiles anymore on that machine. Retry to remove and reinstall OpenAFS did not change anything. Oh yeah, the password of the local user is the same as the OpenAFS password - on all other Windows 7 machine with the same config the local user obtains tokens on login. It did worked on that machine until the "afsauthent.dll missing" error did appear. Btw, that error is gone now after reinstall. Any idea? MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk9PSkwACgkQmWhuE0qbFyM0DgCeM/+NvwoblxdJIJ1tOR2AZqsE ZokAn0F1ZFS1Son1CYa6CXx1Las4u1eo =/qKS -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Problem login/token windows 1.7.6 - details
On 01.03.2012 11:07, Lars Schimmer wrote:
Oh yeah, the password of the local user is the same as the OpenAFS
password - on all other Windows 7 machine with the same config the
local user obtains tokens on login.
It did worked on that machine until the "afsauthent.dll missing" error
did appear. Btw, that error is gone now after reinstall.
Any idea?
The doamin user login write this into the syslog:
Level Date and Time Source Event IDTask Category
Error 01.03.2012 11:30:54 Microsoft-Windows-User Profiles Service
1521 None "Windows cannot locate the server copy of your roaming profile
and is attempting to log you on with your local profile. Changes to the
profile will not be copied to the server when you log off. This error
may be caused by network problems or insufficient security rights.
DETAIL - Access is denied.
"
Error 01.03.2012 11:26:04 Application Hang 1002 (101) "The program
afs_config.exe version 1.7.600.0 stopped interacting with Windows and
was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel.
Process ID: 12c
Start Time: 01ccf7958ab5dcde
Termination Time: 0
Application Path: C:\Program Files\OpenAFS\Common\afs_config.exe
Report Id: eb3db2ef-6388-11e1-a57a-00221545f67b
"
Error 01.03.2012 11:25:33 Microsoft-Windows-DistributedCOM 10016 None
"The application-specific permission settings do not grant Local Launch
permission for the COM Server application with CLSID
{24FF4FDC-1D9F-4195-8C79-0DA39248FF48}
and APPID
{B292921D-AF50-400C-9B75-0C57A7F29BA1}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost
(Using LRPC). This security permission can be modified using the
Component Services administrative tool."
Error 01.03.2012 11:25:33 Microsoft-Windows-DistributedCOM 10016 None
"The application-specific permission settings do not grant Local Launch
permission for the COM Server application with CLSID
{24FF4FDC-1D9F-4195-8C79-0DA39248FF48}
and APPID
{B292921D-AF50-400C-9B75-0C57A7F29BA1}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost
(Using LRPC). This security permission can be modified using the
Component Services administrative tool."
Error 01.03.2012 11:23:49 SideBySide 80 None "Activation context
generation failed for ""C:\Program Files (x86)\Adobe\Acrobat
9.0\Designer 8.2\FormDesigner.exe"".Error in manifest or policy file
"""" on line . A component version required by the application conflicts
with another component version already active. Conflicting components
are:. Component 1:
C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2:
C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest."
Error 01.03.2012 11:23:49 SideBySide 80 None "Activation context
generation failed for ""C:\Program Files (x86)\Adobe\Acrobat
9.0\Designer 8.2\FormDesigner.exe"".Error in manifest or policy file
"""" on line . A component version required by the application conflicts
with another component version already active. Conflicting components
are:. Component 1:
C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2:
C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest."
MfG,
Lars Schimmer
--
-
TU Graz, Institut für ComputerGraphik & WissensVisualisierung
Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at
Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Problem login/token windows 1.7.6
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2012-03-01 14:08, Jeffrey Altman wrote: > Afsauthent.dll is stored in \program Files\openafs\common. > Something on the machine must have modified the PATH environment > variable or removed one of the afsauthent.dll dependencies which > prevented it from loading. Right. Path was empty. At least seagull is a knwon problem for this. Thank you. > Sent from my iPad MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk9PiTEACgkQmWhuE0qbFyOgVACgi3saukNfgPaXg57+5Y4W/+de MWUAnA9sJM0GrruS6+qXVoHWQUG90sBg =QmXV -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] Chemnitz Linux Tag 2012: OpenAFS talks and workshop
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi! Just want to inform you: There will be a OpenAFS track at the "Chemnitz Linux Tag 2012" with some general talks about OpenAFS and a workshop "howto setup a OpenAFS cell". More information: http://chemnitzer.linux-tage.de/2012/ MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk9SBJUACgkQmWhuE0qbFyPfbwCfXws0xdJ2ejC12PMITwXLcRr5 hnYAn0nv7ja0ros0G+irMYz1oYtUJ9ls =3bsf -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] new files sometimes do not appear
On 05.03.2012 21:21, Christopher Pax wrote: Hello open afs group. I recently updated my client from 1.7.4 to 1.7.6, and im having a issue seeing a file when it created. I know the file is there, because other people can see it. In fact I can see the file using my linux box (ubuntu). So, I know the permissions are good. after touching a new file (touch test.txt) from my linux box, I checked back on my windows mount and both the test file and the real file appear. at this point, any new file that gets copied over will automatically show in the folder list on windows. if I go down one directory in windows, copy a file over in linux, then go back into the directory in windows the file does not show. If I touch a file in that directory, the folder view in windows would refresh with the files. I hope I explained this well; its a bit of an difficult issue to search for. computer: windows 7 64 bit client version: 1.7.600 Using flush volume or flush directory from the AFS contect menu does help. MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] WAN speed
On 21.03.2012 18:09, jukka.tuomi...@finndesign.fi wrote: > > Hi, > > All communication must be encrypted. Ok, so you have enabled the fs crypt function in OpenAFS? That feature is about to change with new RX standard, but current crypt function is: 1. very insecure 2. very very slow 3. very very CPU hungry Over all: do not use it, more likely try to use VPN. > Any suggestions how to go about trying to pinpoint the main cause of the > slow WAN speed? I’ve tried to google solutions to this for quite a while > without luck. Also, is there an easy and reliable method to test the > effect of each change (a script hopefully)? Depends on the values you did not wrote? For me the slowness in WAN is about latency. But in 100Mbit network cell servers and 100mbit client in WAN/Internet, I get >2 MB/sec from my servers. > Some base information about the test environment: > > - Ubuntu 10.4 based server & clients (hopefully virtualized during testing) > - The latest stable OpenAFS from the ppa repository (1.6.0) > - Internet connection: 100Mb in, 5Mb out (according to speedtest.net) > - Anything else needed? Server configuration? Hardware? Client settings, cache in client, cache size? > Any help is greatly appreciated, > br, jukka MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] WAN speed
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2012-03-22 00:53, jukka.tuomi...@finndesign.fi wrote: > Forgot one thing: > > ... >> For me the slowness in WAN is about latency. > ... > > I've tried to address this with faster DNS, installing BIND etc, > but with no notable improvement. Is this especially critical with > OpenAFS, or possibly when transferring a high number of small files > (like Firefox writing things to HD?). For each file OpenAFS has to do at least one lookup on the fileserver (across the local file cache on client). The more little files you use, the more stats are in network queue, the longer it takes. My 2 MB/sec was with files >2 GB which do still fit in local cache. With very much small files the speed goes down to 100 kb/sec and less. > Any idea how to improve this? At some point the system wasn't > working outside LAN compaining DNS-related issues. Still, I'm not > confident these settings are optimal. My OpenAFS filkeserver options are: parm /usr/lib/openafs/fileserver -L -udpsize 131071 -sendsize 131071 - -rxpck 700 -p 128 -b 600 -nojumbo -cb 150 parm /usr/lib/openafs/volserver -nojumbo -udpsize 131071 > br, jukka > MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk9q19gACgkQmWhuE0qbFyMMSwCdHdVnaGmmdZyJZQJddIUXaaYm GqQAn2kxxX+UN4RUtJWZSOlW/SRCoNWd =FanT -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Installation of OpenAFS on Ubuntu 11.10
On 27.03.2012 18:57, Xianwei Zhang wrote: > Hello, > > I am doing a project to optimize the backup of OpenAFS. Now I am > installing the server on my ubuntu 11.10. I got stuck on creating root.afs > volume. > I install from the source code of version 1.7.1 on ubuntu 11.10 and > attached is the step-by-step record of my install operations. Could you > plz have a read of that to verify that the operations are complete and > correct. I have been puzzled by this for a whole week. Why compile from source? Why 1.7.1? Why ka server? Why install all by hand? There are quite perfect packages of 1.6.1pre4 in debian available which will work in ubuntu, to. 1.7.1 is just 1.6.x which includes the windows native drive, not suitable for linux. Stick with 1.6.1pre4 for a best server set. Do use krb5 server and not kaserver (which is krb4 and no more used with OpenAFS 1.6.0 and higher). But if you just setup another server, your krb5 setup is already setup. For a short, useable installation of a OpenAFS fileserver and a new cell, we just made a (german) HowTo setup a OpenAFS cell and a workshop in chemnitz. That PDF is here: http://chemnitzer.linux-tage.de/2012/vortraege/folien/1018_OpenAFS.pdf With that howto (made step by step on debian) you have a running cell. If you want to train, the image of the debian system on which that PDF is applied is linked under: http://tetris.cgv.tugraz.at/clt2012/CLT12.de.tar.bz2 But maybe I did miss a important point of your side? > Thank you in advance. > > Regards, MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] HowTo setup OpenAFS cell PDF, german
Hi! The workshop at the Chemnitz Linux Tag 2012 is done and today I changed some parts in the script of that workshop. It is now available, I just link here the Chemnitz Linux Tag pages, and it is still in german. But if you follow the commands, you should be able to setup a new cell on your own. That PDF is here: http://chemnitzer.linux-tage.de/2012/vortraege/folien/1018_OpenAFS.pdf The virtual server image on which that workshop is done is here: http://tetris.cgv.tugraz.at/clt2012/CLT12.de.tar.bz2 Maybe someone has time to translate that PDF to english? I can provide a .tex file and recreate the PDF afterwards in english. MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Installation of OpenAFS on Ubuntu 11.10
On 28.03.2012 18:43, Xianwei Zhang wrote: > Thanks for your timely reply. I am a newbie on OpenAFS. > > My project is on OpenAFS and I will modify the code, so I install from > source. If so, please use trunk from the OpenAFS repository. In that case you could easily get gerrit and interweb into your code. 1.7.1 is really not meant to built on linux and work fine. the 1.7.x line is meant for windows, not linux. 1.9 will be linux again. But currently I do not see much reason to change the OpenAFS code for a backup project. Maybe your needed changes are already in trunk or on aproject already done for OpenAFS but hangs in "staging area". > When I compiled 1.6.X, some bugs are there and I found one solutions said > that 1.6 version has an inherent bug on Ubuntu, so I tried 1.7.1. check the source packages for ubuntu 1.6.1pre4 - they built fine on debian and ubuntu so far. And if still problems do arise, choose trunk. > The installation is just for writing codes later and I don't need to care > much about the security, kaserver is simpler to test. If thats the case, please use a stable, working installation with potential for future use. Which will be a working 1.6.1pre4 or trunk. And kerberos 5 and no more kaserver. On windows kaserver is already striped out of the 1.7.x releases, on linux it is already depracted in 1.6.x (but still available, more or less unsupported), it will be striped out in 1.8.x and above. Esp. if you setup a new cell, even just for a test, do use krb5. It will make your life easier with future progress of your project with OpenAFS. Same reason is to use the ubuntu/debian setup for path and start/stop scripts. It will make your life (and the ones of guys helping you) much easier and happier. I do use the debian packages for >7 years now and I am quite happy with them. MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Combo DB + file servers
On 29.03.2012 21:05, Brandon Allbery wrote: > On Thu, Mar 29, 2012 at 14:59, Jeff Blaine <mailto:jbla...@kickflop.net>> wrote: > > Perhaps someone can jog my memory :) > > Remind me why it was the right thing to do when I separated > all DB server functionality from fileserver functionality > 9 years ago? > > > That used to be recommended because you might need to be able to move > fileservers around easily, but dbservers (in particular the lowest > numbered server) are harder to move around. SRV records help somewhat > with the dbserver issue, but you still need to use care with respect to > that lowest numbered dbserver to avoid losing the sync site. We do run 3 fs/db servers for 6 years now, changed IPs ones and restart them once in a while. I never cared about lowest IP or sync site, and cell still works fine, never had problems with syncing DBs at all. So far: combine them, no problem at all. > -- > brandon s allbery > allber...@gmail.com <mailto:allber...@gmail.com> > wandering unix systems administrator (available) (412) 475-9364 vm/sms > MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Restoring a RW volume that had replicas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2012-04-03 21:27, Jeff Blaine wrote: > I trip over this every time and end up making a whole lot of work > for myself. Any knowledge you'd like to share would be > appreciated. > > Let's say vos listvldb myvol states: > > RW: fs1 a RO: fs1 a RO: fs2 a RO: fs3 a RO: fs4 a > > Let's say fs1 dies one minute later and it is decided that it is > not going to be replaced. It was purely a fileserver. > > Let's say I then snag a complete vos listvldb snapshot to a file > so we know what was on fs1 (we will assume the VLDB reflects > reality). > > You restore the RW myvol to fs2:c as myvol.R just fine. > > vos rename myvol.R myvol fails with "Already exists" > > Anyone want to take it from there? Does a vos convertrotorw does help maybe? Or is a vos restore from a .backup needed? MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk98AcUACgkQmWhuE0qbFyNX8QCcCRCYB+29lPbvxINk4xMk+Lk5 +84AnjsYu76DNlSglFbcQxI3NVGmVgzO =0r34 -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Fileserver machine freezes for 4 seconds every 12 seconds
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2012-04-04 05:19, Ken Elkabany wrote: > We're noticing an odd behavior while SSH-ed into the file servers. > Every 12 seconds, the fileserver and volserver hit 100% CPU usage, > and our SSH terminals freeze for about 4 seconds. While we often > have 200+ clients actively using our two fileservers, this occurs > even when we have only about 40. > > Client version: 1.6.0pre1 Server version: 1.4.14 > > Server logs are empty. > > This was discovered when attempting to track down slow downs in > some of the clients. We are not sure if it is related. > > If the fileservers are restarted, the issue goes away for about > some time, but then returns after 30 minutes to an hour. What's the > best way to diagnose this issue? I've been using xstat and > afsmonitor, but they aren't very revealing in this situation. Sure it is the fileserver process and no other process like waiting I/O load or other stuff? > Ken MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk98AhQACgkQmWhuE0qbFyP0XQCeIvblfwF3WYZEuohDwdHOptYf iycAnjwBaR6vdkVeBEcEbIPYkc35Xg2x =ynlR -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] OpenAFS 1.7.8 windows: no error on quota full on copy action
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi! Maybe I do miss a point, but if I try to copy files in a directory with not enough quota, copy action just stops silently and no error is shown? And worse: explorer does show the file is copied with full size... E.g. I have a directory with 5 MB quota. A OpenAFS 1.7.8 client on windows 7 32bit with a 100MB OpenAFS cache. If I try to copy the 100 MB file into that 5 MB Quota directory via drag&drop in explorer, the copy window opens and shows progress with 6-10 MB/sec up to 90% (size of cache, more or less). Now it hangs some time. After some kind of timeout the copy windows vanishes and the target explorer window does show the 100MB file with the expected size of 100 MB as complete copied into target. No error was shown. If I check with another client, OpenAFS did only copy untill quota is full, the 100MB file is cut down to 5 MB. I do not think thats the expected behavior, or? At least it looks dangerous, as users think the file is copied for 100% and delete the source and do see after some time, files are not copied 100% into OpenAFS While if quota is already full, the start of a new copy into directory with full quota is not started, shows a correct error. MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk99VJUACgkQmWhuE0qbFyNFKQCghw043Gl5WVK4EBU0dSPY2SkH eqYAn3xje4G6jcleLVjFT522YSiUWRJn =6vev -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] OpenAFS 1.7.8 windows: no error on quota full on copy action
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2012-04-05 13:15, Jeffrey Altman wrote: > At the moment the AFS Redirector does not implement the Windows > Volume Quota Service interface. Therefore, Windows has no > knowledge of per user quotas. > > The behavior you are seeing is due to the fact that Windows is > copying the entire file into the Windows page cache and it is only > being sent to \\AFS when the file is closed. At that point the AFS > redirector does report the over quota error but the application > ignores it. In this respect the Windows client is now more like > the UNIX client. > > Adding support for the Volume Quota Service interface is a feature > that I would like to see implemented. However, doing so is > non-trivial. It requires mapping AFS PTS IDs to Windows SIDs for > users that may access the file system after the quota information > was reported to the system. Thanks But until that is implemented, the result is to have always "unreachable" quotas on volumes for users not to loose data on copy actions? Do I see it right? But: isn´t there any simple, quick hack workaround possible for simple explorer copy action to tell: file did not arrive 100% at server? > Jeffrey Altman MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk99kW8ACgkQmWhuE0qbFyNuPQCeMxihNEgEeNf45OLfJg0Xn4FF qoIAn0+2RtGHGryzyw/at/mCnb/yisH+ =+UJe -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] OpenAFS 1.7.8 Windows 7 User Profiles
On 06.04.2012 19:45, Gémes Géza wrote: > Hi, > If I manually copy (as testuser) the Default User.v2 profile to > \\afs\cellname\user\home\path\.Wprofile\Roaming.V2 it gets ignored with > the same error message in the eventlog. > > Please advise how to debug this. Could the user after logon access the profile path in OpenAFS? Could the AD Server (samba 4) access that path without having tokens? Is the roaming profile in windows clients "new" or "old"? (e.g. remove the roaming profile from within system settings - profile tab) Is the Samba 4 really production ready as a AD server for windows 7? Sorry to be less helpful, but the first three problems were our biggest problem with that issue. For us: win 2008r2 AD & krb5 server with all users, win 7 64 clients, users roaming profiles in OpenAFS. Win XP profiles in \\AFS\.cgv.tugraz.at\home\username\winprofile\ Win 7 Profiles in \\AFS\.cgv.tugraz.at\home\username\winprofile.V2\ Both are volumes with seperate Quota, same ACLs. Those path are set in AD as windows profile path. Our AD server has IP ACL rl for the whole path and write ACL for the winprofile(.V2) folders. Clients do have obtain tokens on login enables and that does work quite well. For Win XP we needed to disable security checking for the profiles, IMHO we disabled this on the AD for Windows 7. > Cheers > > Geza https://lists.openafs.org/mailman/listinfo/openafs-info MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] 1.6.1 on debian with 3.2.0 and dkms error
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi! On a strange setup machine (mixed stable/unstable/testing) I got a problem with building dksm openafs 1.6.1 : /var/lib/dkms/openafs/1.6.1/build/src/libafs/MODLOAD-3.2.0-2-amd64-SP/afs_vnop_flock.c:842:7: error: dereferencing pointer to incomplete type /var/lib/dkms/openafs/1.6.1/build/src/libafs/MODLOAD-3.2.0-2-amd64-SP/afs_vnop_flock.c:843:7: error: dereferencing pointer to incomplete type /var/lib/dkms/openafs/1.6.1/build/src/libafs/MODLOAD-3.2.0-2-amd64-SP/afs_vnop_flock.c:664:22: warning: unused variable 'flock' [-Wunused-variable] /var/lib/dkms/openafs/1.6.1/build/src/libafs/MODLOAD-3.2.0-2-amd64-SP/afs_vnop_flock.c: At top level: /var/lib/dkms/openafs/1.6.1/build/src/libafs/MODLOAD-3.2.0-2-amd64-SP/afs_vnop_flock.c:32:12: warning: 'HandleGetLock' used but never defined [enabled by default] /var/lib/dkms/openafs/1.6.1/build/src/libafs/MODLOAD-3.2.0-2-amd64-SP/afs_vnop_flock.c:660:1: warning: 'HandleGetLock' defined but not used [-Wunused-function] make[6]: *** [/var/lib/dkms/openafs/1.6.1/build/src/libafs/MODLOAD-3.2.0-2-amd64-SP/afs_vnop_flock.o] Error 1 make[5]: *** [_module_/var/lib/dkms/openafs/1.6.1/build/src/libafs/MODLOAD-3.2.0-2-amd64-SP] Error 2 make[4]: *** [sub-make] Error 2 make[3]: *** [all] Error 2 make[3]: Leaving directory `/usr/src/linux-headers-3.2.0-2-amd64' make[2]: *** [openafs.ko] Error 2 any hints/tips for me? Is it only my machine or a general fault? MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+BjcYACgkQmWhuE0qbFyPTgwCfTUDqUHOvUaM0hkfDtos63uWw kzsAnRySQkoRC7UoXXuig5D0QKwxc0xf =kmud -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Request for Assistance with OpenAFS
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2012-04-11 13:01, James Bricknell wrote: > Hopefully this is a quick and stupid question. > > > > I have Mac clients on the network who have data in deep folder > structures with long filename paths, well in excess of the Windows > 256(255) character limit, and they need to copy their data across > onto a Windows 2008 R2 Server, which obviously fails when the > length of the filename goes over this limit. > > > > If I install Open AFS on this Windows server, will this allow the > clients to successfully copy the data to a share on an NTFS > formatted volume on the Windows box? Also, if version 1.7 is > implemented as a native Windows file system, would I need to format > a disk or partition on the Windows box as an AFS volume for the Mac > users to be able to copy their long filename structures without > issue, and would this data be able to be browsed locally on the > Windows server following copying it across? Sorry, OpenAFS does not work that way. And the Windows Server of OpenAFS is not really able to run currently, as untested and not supported. OpenAFS does NOT share existant filestructures of a existant server to other clients (thats what SMB/MS filesharing does). OpenAFS needs dedicated servers with dedicated data partitions which save OpenAFS data in a own format on disk. My suggestion for you: do shorten the filepath. Maybe with symlinks or junction points. MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+FckEACgkQmWhuE0qbFyN8nACaA4YOFqdssVZ9QvvKq4qpdCY4 RVAAn3Dm1FHtpOOMBCGPhmVhagUhDO6d =0had -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Questions regarding AFS ticket lifetime
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2012-04-20 07:52, Anders Nordin wrote: > Ok, > > Bear with me because I might not have formulated the questions > correctly, I'm mostly a Windows admin and not entirely up to speed > on the AFS/Kerberos lingo. > > Environment: > > Windows 7 x64 Enterprise OpenAFS 1.7.1000 (64-bit) Network Identity > Manager 2.0.1.903 MIT Kerberos for Windows (64-bit) 3.2.2 > > 1) > > Why do you need to renew the credentials manually? From what I > understand Network Identity Manager should handle this (until the > end of the renewable lifetime ofcourse). Please see the two > attached images. > > http://staff.www.ltu.se/~kex/renew1.jpg > http://staff.www.ltu.se/~kex/renew2.jpg > > 2) > > From memory, during our Windows XP days (different OS, different > OpenAFS, different Network Identity Manager, different MIT Kerberos > for Windows), just locking and unlocking the computer refreshed the > AFS ticket. > > How has this changed for Windows 7 and our current setup, as this > no longer seems to be working? Remember the 2 different credential caches of windows - one of system at login and one for NetworkID Manager. On Login you get a ticket/token with the Windows Builtin credential cache which CANNOT be accessed by Network ID Manager. Only after you obtained a token manual in NetworkID manager it renews the token automatic and you can set the token lifetime with Network ID manager. On logon you can set ticket lifetime in AD controller. > MVH > > Anders Nordin IT-Service MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+REcsACgkQmWhuE0qbFyPSTwCaAn7A/pLfvD/6pgUzVWdQbfhQ dwIAnjo15Pa24Pc3G44pepVjj+qK3k3M =q4Eb -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Questions regarding AFS ticket lifetime
On 20.04.2012 12:53, Anders Magnusson wrote: > On 04/20/2012 09:35 AM, Lars Schimmer wrote: >>> From memory, during our Windows XP days (different OS, different >>> OpenAFS, different Network Identity Manager, different MIT Kerberos >>> for Windows), just locking and unlocking the computer refreshed the >>> AFS ticket. >>> >>> How has this changed for Windows 7 and our current setup, as this >>> no longer seems to be working? >> Remember the 2 different credential caches of windows - one of system >> at login and one for NetworkID Manager. >> >> On Login you get a ticket/token with the Windows Builtin credential >> cache which CANNOT be accessed by Network ID Manager. >> Only after you obtained a token manual in NetworkID manager it renews >> the token automatic and you can set the token lifetime with Network ID >> manager. > The problem is: > 1) Automatic renewal of the tgt by NiM do not work on Windows 7. It did > on XP. > 2) Letting NiM fetch a new tgt when the user unlocks the screen do not > work. It did on XP. Windows 7 is not Windows XP, MS changed a lot based on security and user management. Read the OpenAFS release notes about obtaining tokens on login: http://www.openafs.org/dl/openafs/1.7.10/winxp/ReleaseNotes/html/ch03s06.html "Integrated Logon will not transfer Kerberos v5 tickets into the user's logon session credential cache. This is no longer possible on Vista and Windows 7." > It gives a bad user experience to tell them that they need to fetch > stuff manually, > since they did not need to do so on XP but now on Windows 7. Therefore > we need to > find out what is wrong since this was not a problem before (with XP). It is a security precaution situation made by MS. Go and ask MS to change it. > -- Ragge > MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Re: [OpenAFS-announce] OpenAFS 1.7.11 released for Microsoft Windows
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2012-04-23 15:32, Hugh Caldwell wrote: > The links aren't working and there is no 1.7.11 directory here > http://dl.openafs.org/dl/openafs/ For me they do work. Maybe the vos release of the webpage take a moment longer than usual. Try again now. > Hugh Caldwell Astor & Sanders EWeb Systems Administrator United > States Geological Survey 703-648-6812 (Office) 703-598-3472 > (Cellular) hcaldw...@usgs.gov Room 2C123B > MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+VYqkACgkQmWhuE0qbFyNXmACbBI+30H+EBj7A8NvuKxWmBYMU DH8AnipWeu/ncWoztOTPBDYW/CLNGq0K =0zfM -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Question about the Windows AFS Client
On 23.04.2012 16:04, Stefan Michael Guenther wrote: > Hi, > > when trying to setup a connection to the OpenAFS server with the windows > client v. 1.7.0.8000, I get the error message > > The AFS Client was unable to obtain tokens as stefan in cell in-put.de > Error: 56 (Authentication Server was unavailable) > > I found some postings from feb 2002, that this client only works with > KaServer but not with K5+aklog > http://lists.openafs.org/pipermail/openafs-info/2002-June/004932.html > > Is this still true? > > /var/log/krb5kdc.log contains messages like > > krb5kdc: Invalid message type - while dispatching (udp) No, it ONLY works with krb5, NO more kaserver. Please use 1.7.11 - from today. And do use network ID manager alongside with it. > Thanks, > > Stefan MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Home directory unavalable at certain times.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2012-04-19 14:05, Fredrik Engström wrote: > Hi, > > > > When users log in at 11 they get access denied when they try to > open the home directory. If you log in twenty minutes later you > will not have this issue and if you log in before eleven you will > also not notice anything. > The logs mention that a certain volume is unavailable prior to this > issue: > ?Server 77.238.35.9 reported volume 536870955 in cell su.se as > offline? If it is ALWAYS at 11, check the servers for restarts in BOS scripts, for bos salvage, vos dump or any other scripts which could set RW volumes offline for a short time. > We have seen this only on the computers where our students access > them, but that?s not too surprising considering they log in and > out extensively during the day and as such have a higher > probability to be subject to the error. I?ve seen other clients > where this happens at a different time, but it is also only once a > day and also always preceded by the volume in cell su.se as > offline. The machines run Windows 7 SP1 and have OpenAFS 1.7.400 > installed. On the serverside we have 1.4. This error was discovered > roughly two weeks ago, but we can?t find anything we tampered with > that relates to this at that time. 1.7.4 is old and really buggy if you use windows profiles in OpenAFS space. Please do use 1.7.11. It REALLY does help a lot for our Win 7 users. > Any ideas? > > > > Mvh > > Fredrik Engström > > Avdelningen för IT och media MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+amBQACgkQmWhuE0qbFyOJUwCfZnAfc8U45YR1U2YhIHG0MxoA +eMAn3fSJFmhDaU7QY10hgM2T16E4Lbx =1nLi -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] best way to debug windows 1.7.11 cache/rx/NAT problems?
Hi! We have apployed 1.7.11 on óur Windows 7 x64 system. Now we still do have problems of clients not seeing the recent state of files. E.g. User change a file on machine 1, check it 10 sec later on machine 2, he does not see the changes made on machine 1. Machine 1 is on the same subnet of servers, full routeable, Machine 2 is on a private subnet with a Cisco style NAT in between. Now I do see a lot of possibilities to debug the problem, but which way will find the best solution? E.G. could be the NAT issue, or cache problems or callbacks? Thank you all so far. Lars Schimmer
Re: [OpenAFS] best way to debug windows 1.7.11 cache/rx/NAT problems - SOLVED
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2012-05-08 20:01, Arthur Prokosch wrote: > On Sat, May 05, 2012 at 09:21:53PM +0200, Lars Schimmer wrote: >> Hi! > Could you confirm that symptoms no longer occur with 1.7.12? Yes, short after my mail jeffrey got to me with a test version of 1.7.1104 and problem resolved. Same with 1.7.12. > Thanks! -arthur prokosch. MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+qG0IACgkQmWhuE0qbFyPccwCcDPnJSlg8WRmVn1937rnxOvs0 ZYYAnR6zkln7x47ZZ54iHAy68b/4ej+H =oweB -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: AW: [OpenAFS] Re: Problems with ACLS
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2012-05-09 12:47, Stefan Michael Guenther wrote: > Hello, > >> - Turn the fileserver debug log level all the way up. To do this, >> give the 'fileserver' (or 'dafileserver') process a TSTP signal 4 >> times, then look in FileLog after you get the 'permission denied' >> error. Give it a HUP signal to turn the debug level back down to >> 0. >> > after this /usr/afs/log/FileLog tells me [0] Set Debug on > Level = 125 > > Then it logs every "cd" and "ls" I do on the client side, but when > I enter "touch test" nothing happens in FileLog. > > Therefore I started the afsd daemon on the client with "-verbose" > and found this in /var/log/messages: > > May 9 12:30:36 DELUH01-LSV001 kernel: afs: Tokens for user of AFS > id 1010 for cell in-put.de are discarded (rxkad error=19270407, > server 192.168.224.113) > > No tokens, no rights? A quick search found: http://wiki.openafs.org/AFSLore/AdminFAQ/#3.44 I get error message trhough > Thanks, > > Stefan > > ___ OpenAFS-info > mailing list OpenAFS-info@openafs.org > https://lists.openafs.org/mailman/listinfo/openafs-info MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+qWCYACgkQmWhuE0qbFyOGsgCeMyszf4D6Gr6eoj4uV/kxSmeE rGEAn1fBslpd8qss0MnpVoLtKa8kYDi7 =mhqk -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] OpenAFS 1.7.13 and Roaming Profiles
On 18.05.2012 10:31, Florian Rittmeier wrote: > Hello, > > I just wanted to know, if anyone else beside us experiences problems > with Windows roaming profiles since the upgrade from 1.7.11 to 1.7.12. > Starting from 1.7.12 the windows service for roaming profiles does not > finish synchronization on shutdown. It just shows "Waiting for user > profile service" for infinite time after the user initiates the > shutdown. Same with 1.7.13. > We are running Windows 7 SP1 64-bit. Antivirus is Sophos Endpoint > Security and Control 10.0. On our setup with OpenAFS 1.7.12 only one workstation is yet known to have that problem. But it uses kaspersky, the other 20 did not report any problem yet. Only entry in win event viewer is "profile service took to long to logout". But I assume mostly skype of being a pain in the ass with user profiles. Need to test 1.7.13. > Regards, > Florian MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] linux client behind NAT/Firewall: unable to resolve name to ID
Hi! I just tried to get a OpenAFS client on my home linux system. I use a debian system with OpenAFS 1.6.1 and I opened ports 7001-7007 and 88 UDP for incoming connections. I can obtain tickets and tokens from our cell. But: Authenticating to cell cgv.tugraz.at (server phobos.cgv.tugraz.at). Trying to authenticate to user's realm CGV.TUGRAZ.AT. Getting tickets: afs/cgv.tugraz...@cgv.tugraz.at <mailto:afs/cgv.tugraz...@cgv.tugraz.at> Using Kerberos V5 ticket natively About to resolve name lschimmer to id in cell cgv.tugraz.at. Error -1 Set username to lschimmer Setting tokens. lschimmer @ cgv.tugraz.at tokens Tokens held by the Cache Manager: Tokens for a...@cgv.tugraz.at <mailto:a...@cgv.tugraz.at> [Expires May 20 20:06] --End of list-- So it cannot resolve my name to a ID. But on a second machine (windows) behind te same firewall/NAT I could get a ID for the name. Which port did I miss? Thank you. Lars Schimmer ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Re: linux client behind NAT/Firewall: unable to resolve name to ID
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2012-05-21 16:26, Andrew Deason wrote: > On Sun, 20 May 2012 00:14:31 +0200 (CEST) Lars Schimmer > wrote: > >> Hi! >> >> I just tried to get a OpenAFS client on my home linux system. I >> use a debian system with OpenAFS 1.6.1 and I opened ports >> 7001-7007 and 88 UDP for incoming connections. > > Not 7000? (for fileserver access) ... missed. >> About to resolve name lschimmer to id in cell cgv.tugraz.at. >> Error -1 Set username to lschimmer Setting tokens. lschimmer @ >> cgv.tugraz.at > [...] >> So it cannot resolve my name to a ID. >> >> But on a second machine (windows) behind te same firewall/NAT I >> could get a ID for the name. >> >> Which port did I miss? > > It should be port 7002, but you said you already allowed that. Can > you 'pts ex lschimmer' ? If you look at a wire dump of udp traffic, > it should be pretty easy to see what's not getting through. You > should see some packets being periodically sent, with nothing > coming in the reverse direction. And for the above example, I'd > expect the client to be trying to contact port 7002 on one of the > dbservers. The client in question can not rxdebug server 7002. So no PTS access, but it can access OpenAFS directory as if token is set correctly. Other PC in network can reach PTS. And if I shutdown firewall on client, I can reach PTS. Looks like I did block one bit to much. But as long as I can live on without PTS it is fine for me. It is a machine with some network load... MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+7lckACgkQmWhuE0qbFyO6PwCfeA2MtjiU9L0jaXQcEd1Qt91W CysAn1MCfx0KspzrB+fWXNt6yiZAc2Ks =lV0C -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Windows client install options
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2012-05-23 10:41, Christian wrote: > All, > > we have a bunch of machines with old versions of the windows client > left over in ill-defined states (old CellServDBs, old krb5.ini, old > registry keys, Loopback adapter installed,...). We currently do not > have anything like an Active Directory or other centralized > deployment solution. > > It would be great if we had a batch file on a CD or on the network > or something like that, and with one double-click it would wipe out > all previous configuration items, remove the loopback adapter, > re-install kerberos and openafs, set the cell name and copy the > krb5.ini, and possibly enable integrated logon. Does anybody have > something like this available or something close which could be > modified? Sorry, nothing really helpful, but we just did a "remove OpenAFS 1.6.x" and a "install Openafs 1.7.x" on our machines and it did worked. Even with loopback device still in place and network ID manager not updated. CellServDB is updated with new OpenAFS version. For the autmated installation of OpenAFS 1.7.x with personal changes you need to have "transforms" for the .msi pacakge. You can write your own or make a contract with your-filesystem.com. > Thanks, > > Christian MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+8soYACgkQmWhuE0qbFyOvlgCfQAvmJxbmJiL2pgsIzctuyEKs Nd0An1qLVo9k0Jx4SkQx/Wlu+WxmvuxP =d7tZ -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
[OpenAFS] Directories not reachable direct after creation - linux 1.6.1
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi! I got a more or less peristant problem on my debian linux system with OpenAFS 1.6.1 64bit: 127 schimmer@tetris /afs/.cgv.tugraz.at/archive/templates % mkdir TUGraz.Formulare mkdir: kann Verzeichnis ?TUGraz.Formulare? nicht anlegen: Kein passendes Gerät gefunden 1 schimmer@tetris /afs/.cgv.tugraz.at/archive/templates % ls cgv-coorperate-design/ cgv_logo/ FhG/ slides/ TUG_Logo/ Visitenkarten.tex* schimmer@tetris /afs/.cgv.tugraz.at/archive/templates % fs exa . File . (536871524.1.1) contained in volume 536871524 Volume status for vid = 536871524 named archive.templates Current disk quota is 1024000 Current blocks used are 376072 The partition has 337817914 blocks available out of 1003206068 schimmer@tetris /afs/.cgv.tugraz.at/archive/templates % vos exa archive.templates archive.templates 536871524 RW 376070 K On-line deimos.cgv.tugraz.at /vicepr RWrite 536871524 ROnly 536871525 Backup 536871526 MaxQuota1024000 K CreationMon Oct 10 16:38:37 2005 CopyWed May 30 16:45:33 2012 Backup Mon Jul 16 22:00:10 2012 Last Access Tue Jul 17 13:37:58 2012 Last Update Mon Jul 9 09:11:44 2012 206 accesses in the past day (i.e., vnode references) RWrite: 536871524 ROnly: 536871525 Backup: 536871526 number of sites -> 5 server deimos.cgv.tugraz.at partition /vicepr RW Site server afsgraz.igd.fraunhofer.de partition /vicepa RO Site server deimos.cgv.tugraz.at partition /vicepr RO Site server trinculo.cgv.tugraz.at partition /vicepar RO Site server phobos.cgv.tugraz.at partition /vicepar RO Site schimmer@tetris /afs/.cgv.tugraz.at/archive/templates % ls cgv-coorperate-design/ cgv_logo/ FhG/ slides/ TUG_Logo/ Visitenkarten.tex* schimmer@tetris /afs/.cgv.tugraz.at/archive/templates % fs getserverprefs trinculo.cgv.tugraz.at 20013 afsgraz.igd.fraunhofer.de 40011 phobos.cgv.tugraz.at 20014 deimos.cgv.tugraz.at 20009 But on a different workstation: larissa /afs/.cgv.tugraz.at/archive/templates # ls cgv-coorperate-design/ cgv_logo/ FhG/ slides/ TUG_Logo/ TUGraz.Formulare/ Visitenkarten.tex* So my OpenAFS does create a directory, but it cannot read it afterwards. Same did happen with fs mkmount: schimmer@tetris /afs/.cgv.tugraz.at/home % fs mkmount eg user.eg fs:'eg': No such device On the other workstation: larissa /afs/.cgv.tugraz.at/home/eg # ls bhampe/ That happend >2 hour ago and I still cannot reach that directory on my workstation tetris. But on any other I can. I work as admin and have the RW volume I do work in. Any idea? apt-cache policy openafs-client openafs-client: Installiert: 1.6.1-1 MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAlAFUc0ACgkQmWhuE0qbFyPINACfc3aYCJ5hpT6micjZ8EXxfJm3 OhAAoIUoqIM+MBiIsIrtAnRqyyxhdO6z =HT8L -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Transferring data from old server to new server
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2012-07-26 13:22, Youssef Eldakar wrote: > 1.4.12+dfsg-3+ubuntu0.1. I am planning to replace this OpenAFS > server with another one on another machine running Ubuntu 12.04, > which comes with OpenAFS version 1.6.1-1. What's the simplest way > to transfer the data over to the new server? Would just rsyncing > /vicepa work? Do you really want to replace the hardware? If not, just upgrading is a solution (at least for the fileserver, the DB server(s) do have some special limitations). If you really want to have new hardware and new fileserver, is it possible to run both the same time and vos move the volume from old server to the new one? > Thank you for advising. MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAlARMigACgkQmWhuE0qbFyNQyQCcDLOUZA8g5/HTTaZJ+spXb5kB e+sAn198qp+ok5MxI/X2FJ0PR5b60pSB =a1vh -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
Re: [OpenAFS] Re: Directories not reachable direct after creation - linux 1.6.1
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2012-07-26 21:30, Andrew Deason wrote: > On Tue, 17 Jul 2012 13:51:41 +0200 Lars Schimmer > wrote: > >> I got a more or less peristant problem on my debian linux system >> with OpenAFS 1.6.1 64bit: >> >> 127 schimmer@tetris /afs/.cgv.tugraz.at/archive/templates % >> mkdir TUGraz.Formulare >> >> mkdir: kann Verzeichnis ?TUGraz.Formulare? nicht anlegen: Kein >> passendes Gerät gefunden > > I assume 'No such device' is a suitable English translation for > this, yes? Does this take a while (at least a few seconds) to > execute? Correct and correct. > I also assume that the specified name did not already exist (as a > dir, or file, or mountpoint, or anything). Correct. All new. >> Any idea? > > If there were any messages in the client syslog or the server > FileLog at around the same time, that information would be > helpful. Ok, will see on new event... Does happen from time to time. > 1.6.1 should contain the client behavior where we invalidate cache > information for a timed-out write op, so it's probably not just > that (although it's not perfect). If you can get this to happen > while 'fstrace' tracing is on, that should say exactly what was > going on at the time. (Something like: fstrace clear cm ; fstrace > setlog cmfx -buffers 100 ; fstrace sets cm -active ; mkdir whatever > & echo $! ; wait ; fstrace dump cm > /tmp/fstrace.log ; fstrace > sets cm -inactive) Note that that traces all client activity, so if > you've got other AFS-interacting stuff running on the box that you > don't want to be public information, don't upload that somewhere > public. > > And it doesn't really "solve" the problem, but if you see a client > in that state, you may be able to get it out with a 'fs flush .' in > the problematic directory (or 'fs flushv' to just flush everyting > in the vol). 'fs checks' and 'fs checkv' can also be tried, though > it doesn't seem like that would be the problem here. I will see at next event. MfG, Lars Schimmer - -- - - TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAlASWMcACgkQmWhuE0qbFyOdyQCeNUOIg7YUbYSJVneWKKgGtjp6 MG0AnjvcD6Z/wbEERLrLX1L81XyQIsYR =g6k4 -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
