Re: [OpenAFS] how to view AFS content securely

2005-06-23 Thread Chris Huebsch
On Thu, 23 Jun 2005, [EMAIL PROTECTED] wrote: What is being used to host AFS content securely; i.e. what is being used to require users to authenticate to view content in AFS that respects ACLs? There is a mod_auth_pam for apache. This module can be uses to obtain tokens for the user. When ap

Re: [OpenAFS] identifying AFS traffic ?

2005-06-23 Thread Ken Hornstein
>I'm looking for a way to identify AFS internet traffic flows, if >possible without too much packet analysis (so it can be done realtime >without heavy cpu load.) If anyone can provide pointers to information >or even specific details that can be used to identify AFS packets, it >would be ver

[OpenAFS] identifying AFS traffic ?

2005-06-23 Thread Alan Sinclair
I'm looking for a way to identify AFS internet traffic flows, if possible without too much packet analysis (so it can be done realtime without heavy cpu load.) If anyone can provide pointers to information or even specific details that can be used to identify AFS packets, it would be very hel

[OpenAFS] how to view AFS content securely

2005-06-23 Thread botretta
We are in the process of upgrading our web servers. We have been using the Netscape server and an nsconfig file to authenticate users to view content. One of our webserver admins posed the following question: What is being used to host AFS content securely; i.e. what is being used to require u

Re: [OpenAFS] FSFS Subversion repository on OpenAFS 1.3.84 problems

2005-06-23 Thread Matt Benjamin
Blake, You should be able to host a webdav repository, from a Linux cm using the byte-range lock patch (RT), I believe. Doesn't change the situation wrt multiple clients using file-based access--only whole-file locking in that case. Matt -- Matt Benjamin The Linux Box 206 South Fifth Ave. Su

Re: [OpenAFS] OpenAFS 1.3.84 on Linux 2.4.21-15.0.3 - "dcache hc" panic in afs_HashOutDCache

2005-06-23 Thread Derrick J Brashear
On Thu, 23 Jun 2005, Rainer Toebbicke wrote: I can reproducibly crash a 2.4.21-27 i386 SMP machine running 1.3.84 with just "STABLE14-linux-change-dentry-cleanup-20050619" on top of it. typical traceback: dcache hc<1>Unable to handle kernel paging request at virtual address are you willin

Re: [OpenAFS] LDAP and Krb5 and OpenAFS - problem?

2005-06-23 Thread Russ Allbery
Education Center <[EMAIL PROTECTED]> writes: > - be prepared openAFS kernel module sometimes is not so stable on linux > platform For example: slocate (updatedb) What problems are you seeing with stability related to slocate? -- Russ Allbery ([EMAIL PROTECTED])

RE: [OpenAFS] LDAP and Krb5 and OpenAFS - problem?

2005-06-23 Thread Education Center
We found the following concepts realy usefull during installation, setup and usage - Google It has much information how to setup But I never find the fully complete hwoto We used several ones - afs-uid = ldap-uid It's not a requirment but it's less confusing if unix user names correspponds to

Re: [OpenAFS] LDAP and Krb5 and OpenAFS - problem?

2005-06-23 Thread Matthew J. Smith
Just a random question, prompted by the response below: has anyone done any work on a pts replacement/mod that could use LDAP, or some other data source (perhaps NSS) for user and group information? > Keep the afsuid in sync with the ldap uidNumber. > > Chris -Matt Matthew J. Smith University o

Re: [OpenAFS] Misconfigured Windows client hangs Linux server

2005-06-23 Thread Jeffrey Altman
Rainer Toebbicke wrote: > Jeffrey Altman wrote: > >> What version of the Windows client? >> > > rxdebug: AFS version: OpenAFS1.3.7300 > > cmdebug: error checking locks: RPC interface mismatch (-455) > cmdebug: failed to get cache entry 0 (RPC interface mismatch (-455)) Please upgrade the client

Re: [OpenAFS] LDAP and Krb5 and OpenAFS - problem?

2005-06-23 Thread Christian Pfaffel-Janser
Chris Huebsch <[EMAIL PROTECTED]> writes: > Hi, > > On Thu, 23 Jun 2005, Lars Schimmer wrote: > > > > Are there any errors to expect? E.G. passwords - while user can change there > > passwords on Krb5 the passwords are not changed in ldap - user with 2 > > passwd > > could login. I think I ha

Re: [OpenAFS] LDAP and Krb5 and OpenAFS - problem?

2005-06-23 Thread Chris Huebsch
Hi, On Thu, 23 Jun 2005, Lars Schimmer wrote: Are there any errors to expect? E.G. passwords - while user can change there passwords on Krb5 the passwords are not changed in ldap - user with 2 passwd could login. I think I have to disable passwords via ldap. Don't use LDAP for password-chec

[OpenAFS] LDAP and Krb5 and OpenAFS - problem?

2005-06-23 Thread Lars Schimmer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi! Just a quick question: I want to setup the new system with ldap for users/groups/autofs, krb5 for auth and OpenAFS for most of the filesystem. E.G. in daily work the passwords are in Krb5 and only the path of the homedir is taken from ldap, while

[OpenAFS] OpenAFS 1.3.84 on Linux 2.4.21-15.0.3 - "dcache hc" panic in afs_HashOutDCache

2005-06-23 Thread Rainer Toebbicke
I can reproducibly crash a 2.4.21-27 i386 SMP machine running 1.3.84 with just "STABLE14-linux-change-dentry-cleanup-20050619" on top of it. typical traceback: dcache hc<1>Unable to handle kernel paging request at virtual address printing eip: f8a9dbd0 *pde = Oops: 0002 x

Re: [OpenAFS] Misconfigured Windows client hangs Linux server

2005-06-23 Thread Rainer Toebbicke
Jeffrey Altman wrote: Having a fileserver dump with a similar case on my desk I can confirm that a windows client can indeed "hang" an AFS server (although I don't know if that had anything to do with digital signatures). The scenario: all threads blocked in h_Lock_r on the same host, triggered