Re: [OpenAFS] pre-fetch cache

2005-07-18 Thread Jeffrey Altman
Brian May wrote: > On Mon, Jul 18, 2005 at 11:17:07PM -0400, Matthew Miller wrote: > >>>I have considered this might be possible by setting up a cron job, >>>perhaps with the help of reauth, that has read-only access to the >>>required files. This cron job could do something like "cat file > >>>/d

Re: [OpenAFS] Documentation - again

2005-07-18 Thread Jeffrey Altman
Michael: The documentation project is being run by Esther <[EMAIL PROTECTED]>. There is a mailing list dedicated to the effort. You can subscribe and view the archives at: https://lists.openafs.org/mailman/listinfo/openafs-doc There is a cvs tree with the IBM sources. Currently the fo

Re: [OpenAFS] pre-fetch cache

2005-07-18 Thread Matthew Miller
On Tue, Jul 19, 2005 at 01:04:43PM +1000, Brian May wrote: > Is it possible/feasible to prefetch files for the AFS client cache, e.g. > during the night when network load is low, so they don't have to be > downloaded[1] on demand during the day? Sure. > I have considered this might be possible by

[OpenAFS] pre-fetch cache

2005-07-18 Thread Brian May
Hello, Is it possible/feasible to prefetch files for the AFS client cache, e.g. during the night when network load is low, so they don't have to be downloaded[1] on demand during the day? Unfortunately read-only volumes won't help; the volume needs to be read/write. I have considered this might

Re: [OpenAFS] 1.3.85 Still Crashing w/ Fedora 3 (Linux 2.6.11)

2005-07-18 Thread Jeffrey Altman
Jason McCormick wrote: >>i dont know how vmware works with the linux kernel. do you run a >>special version of the linux kernel? > > > VMware has its own kernel modules that you compile for each kernel. > Basically they provide hooks into system-level operations like networking, > etc. I've u

Re: [OpenAFS] 1.3.85 Still Crashing w/ Fedora 3 (Linux 2.6.11)

2005-07-18 Thread Jason McCormick
--On Monday, July 18, 2005 10:17:32 PM -0400 [EMAIL PROTECTED] wrote: > In message <[EMAIL PROTECTED]>,Jason McCormick > writes: before the kernel blows up. It prints the first hex address of > what looks >> like a memory location and then dies hard. Looks like: >> >> [] > > its useful is you

[OpenAFS] Documentation - again

2005-07-18 Thread Michael Norwick
Well, No word yet on what if anything needs to be done for AFS documentation. I am willing to give DocBook a whirl if it is deemed needed or acceptable by the group. I am trying to trash FC4 test 3 on a server right now but I could begin as soon as I get this thing back up under Debian stable

[OpenAFS] removing IP addresses

2005-07-18 Thread Brian May
Hello, How do I remove IP addresses from the output of "vos listaddrs"? I setup my server when I was still learning AFS, and wasn't aware of the NetInfo file at the time. I have tried: * Changing NetInfo and restarting, but it doesn't help. * vos changeaddr $addr -remove -localauth -verbose

Re: [OpenAFS] 1.3.85 Still Crashing w/ Fedora 3 (Linux 2.6.11)

2005-07-18 Thread chas
In message <[EMAIL PROTECTED]>,Jason McCormick writes: before the kernel blows up. It prints the first hex address of what looks >like a memory location and then dies hard. Looks like: > >[] its useful is you managed to grab a symbol table before the crash. after you load afs, save the output fro

Re: [OpenAFS] trouble with pam_krb5

2005-07-18 Thread Christopher Allen Wing
On Mon, 18 Jul 2005, Russ Allbery wrote: ChallengeResponseAuthentication no in /etc/ssh/sshd_config and see if that fixes your problem? This breaks password expiration, or any other PAM dialogs that require anything more complex than a simple password prompt. Yes, but I'm guessing

Re: [OpenAFS] 1.3.85 Still Crashing w/ Fedora 3 (Linux 2.6.11)

2005-07-18 Thread Jason McCormick
--On Wednesday, July 13, 2005 11:56:51 AM -0400 Derrick J Brashear <[EMAIL PROTECTED]> wrote: >> have a box hooked up to a serial port console with a logger to try catch >> another. > > Thank you. Unfortunately the oops is not helpful because it doesn't have time to print before the kernel b

Re: [OpenAFS] trouble with pam_krb5

2005-07-18 Thread Russ Allbery
Christopher Allen Wing <[EMAIL PROTECTED]> writes: > Ensure that you have: > ChallengeResponseAuthentication no > in /etc/ssh/sshd_config and see if that fixes your problem? This breaks password expiration, or any other PAM dialogs that require anything more complex than a simple password

Re: [OpenAFS] trouble with pam_krb5

2005-07-18 Thread Christopher Allen Wing
Ha. My theory about 'improper UID' was incorrect, but I did find the underlying cause. When 'keyboard-interactive' mode is in use, OpenSSH forks off a separate process to do PAM authentication. This process then dies, and thus the credentials cache (which is stored in memory) goes away. Whe

Re: [OpenAFS] OpenAFS compiled for OpenSSI

2005-07-18 Thread Ron Croonenberg
Hi Dan, I think that install the "other" rpms and then copy the modules to the right place idea. What modules and binaries need to be moved ? (and also, do I need to change any config files or anything else ?) >It's not clear what you needed to change to get this to work with >openssi.was it jus

Re: [OpenAFS] trouble with pam_krb5

2005-07-18 Thread Christopher Allen Wing
Kurt: Sorry, I was wrong about the PID being different pointing to a problem. I had misread our log files here, thinking that on our systems, the pid didn't change between auth and session phase. Actually, it looks like the problem is 'keyboard-interactive' authentication in sshd. This seem

Re: [OpenAFS] trouble with pam_krb5

2005-07-18 Thread Christopher Allen Wing
See also: http://bugzilla.mindrot.org/show_bug.cgi?id=688 This is apparently a known issue (ChallengeResponseAuthentication does not work properly with PAM). It's in the FAQ: http://www.openssh.com/faq.html#3.15 -Chris ___ OpenAF

Re: [OpenAFS] trouble with pam_krb5

2005-07-18 Thread Russ Allbery
Christopher Allen Wing <[EMAIL PROTECTED]> writes: > There are some #ifdefs in the openssh source which control whether > pthreads are used to call PAM, or a separate process. When pthreads are > used, a new thread is created, PAM calls are made in this thread, and > then the thread terminates. Ho

Re: [OpenAFS] OpenAFS compiled for OpenSSI

2005-07-18 Thread Dan Pritts
> > I installed the openafs-1.2.13-rh9.0.1.src.rpm and that's the stuff we > managed to compile. > > Now, since I am a rookie at doing this, what do I need to do to create > those rpm's so that I can install the OpenAFS client "stuff" ? It's not clear what you needed to change to get this to w

Re: [OpenAFS] trouble with pam_krb5

2005-07-18 Thread Kurt Seiffert
We are running the package 'openssh-server-3.9p1-8.RHEL4.4'.  My man pages for sshd_config indicates that UsePAM is off by default. I turned off the pubkey, because I had been using a pub/priv key, but that seemed to cause ssh to skip completely the kerberos authentication. I'm using this on i386.