Re: [OpenAFS] OpenAfs

2005-11-23 Thread Steve Devine
shajid (sent by Nabble.com) wrote: hi, I have installed afs on linux FC 4. But I am facing a problem. The problem is that I am not able to see the symbolic links that are present in the /afs directory. Is there something that I am missing in the configurations?? I

Re: [OpenAFS] Log Filtering

2005-11-23 Thread Frank Burkhardt
Hi, On Tue, Nov 22, 2005 at 09:01:41AM -0500, Jeffrey Altman wrote: [snip] The 1.4 series supports the ability to write debug and audit logs from the various servers to named pipes instead of files. You can implement filtering by deploying a process that reads from a named pipe and

[OpenAFS] OpenAFS on shared storage

2005-11-23 Thread Justin Lambert
I am looking at needing to setup a large storage array 2TB and mirror it to a remote location and accessed by 8+ machines.  We are looking at using a SAN for the storage scalability reasons and am trying to figure out file systems and replication.  GFS is designed to be run on shared storage and

Re: [OpenAFS] Re: afs vs nfs

2005-11-23 Thread Dan Pritts
On Tue, Nov 22, 2005 at 08:38:31AM -0500, Joe Buehler wrote: - AFS storage is organized into volumes, attached to one or more mount points under the /afs tree. These volumes can be moved from server to server while they are in use. This is great when you have to take down a machine, or you

Re: [OpenAFS] Re: afs vs nfs

2005-11-23 Thread Robert Banz
Dan Pritts wrote: On Tue, Nov 22, 2005 at 08:38:31AM -0500, Joe Buehler wrote: - AFS storage is organized into volumes, attached to one or more mount points under the /afs tree. These volumes can be moved from server to server while they are in use. This is great when you have to take down a

Re: [OpenAFS] AFS and Apache Virtual Directory

2005-11-23 Thread Ken Hornstein
I mean, it seems to me to be such an obvious thing to do that I don't even know why it would surprise you. What he said. --Ken ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

RE: [OpenAFS] Re: afs vs nfs

2005-11-23 Thread Neulinger, Nathan
This can also be considered a disadvantage. When using AFS, you are forced to manage your storage the AFS way. Files are effectively not stored natively on the filesystem, and cannot be accessed via some other method, and must be backed up via afs-specific methods. It works

[OpenAFS] openafs and Kerberos

2005-11-23 Thread Dr A V Le Blanc
Forgive me asking this question here, though it is related to OpenAFS only indirectly. For a long time we were using patched openssh to transfer AFS authentication between machines. This involved using a local patch, which we maintained up to 3.7.1, and transferred AFS tokens using ssh protocol

Re: [OpenAFS] openafs and Kerberos

2005-11-23 Thread Dirk Heinrichs
Am Mittwoch, 23. November 2005 16:09 schrieb ext Dr A V Le Blanc: (1) It won't allow a user whose home directory is in AFS to authenticate using ssh keys, even if he has Kerberos tickets to transfer. Should work if the ssh key is stored in LDAP. Bye... Dirk -- Dirk

Re: [OpenAFS] Re: afs vs nfs

2005-11-23 Thread Sandesh V Chopdekar
This can also be considered a disadvantage. When using AFS, you are forced to manage your storage the AFS way. Files are effectively not stored natively on the filesystem, and cannot be accessed via some other method, and must be backed up via afs-specific methods. Namei does stores files

Re: [OpenAFS] openafs and Kerberos

2005-11-23 Thread Jim Rees
(1) It won't allow a user whose home directory is in AFS to authenticate using ssh keys, even if he has Kerberos tickets to transfer. You can fix this by setting StrictModes no in your sshd_config. What bothers me is that you can't delegate credentials unless you have used those

Re: [OpenAFS] openafs and Kerberos

2005-11-23 Thread Sergio Gelato
* Dr A V Le Blanc [2005-11-23 15:09:33 +]: The GSSAPI support in the recently released openssh 4.2 appears mostly to do what we need: with proper configuration, an ordinary user can pass Kerberos tickets to a remote machine, where a PAM module gets tokens using aklog. So far as I can see,

Re: [OpenAFS] Re: afs vs nfs

2005-11-23 Thread Derek Atkins
Neulinger, Nathan [EMAIL PROTECTED] writes: Something as simple as having an alternative namei that would look the same down below, but would have the top level directory be the RW volume id corresponding to whatever data is being stored. Um, the top-level directory (well, two top-level dirs)

RE: [OpenAFS] Re: afs vs nfs

2005-11-23 Thread Neulinger, Nathan
Oh... Very cool. Did not realize that at all... -- Nathan Nathan Neulinger EMail: [EMAIL PROTECTED] University of Missouri - Rolla Phone: (573) 341-6679 UMR Information Technology Fax: (573)

Re: [OpenAFS] openafs and Kerberos

2005-11-23 Thread Russ Allbery
A V Le Blanc [EMAIL PROTECTED] writes: When we upgraded from using the kaserver to using Heimdal, we could use the Kerberos support patched into openssh 3.8.1 in the Debian ssh-krb5 package. This package is rather buggy and not actively maintained, but it seemed an adequate interim measure

Re: [OpenAFS] openafs and Kerberos

2005-11-23 Thread Russ Allbery
Jim Rees [EMAIL PROTECTED] writes: What bothers me is that you can't delegate credentials unless you have used those credentials for login. The OpenSSH folks consider this to be a security requirement, although I don't really understand why. -- Russ Allbery ([EMAIL PROTECTED])

[OpenAFS] amd64 FreeBSD-6.0

2005-11-23 Thread ph rhole oper
Im using afs-sysname amd64_fbsd53 but im running FreeBSD-6.0-RELEASE. Will it work? -- http://www.fastmail.fm - IMAP accessible web-mail ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] amd64 FreeBSD-6.0

2005-11-23 Thread Jim Rees
Im using afs-sysname amd64_fbsd53 but im running FreeBSD-6.0-RELEASE. Will it work? I don't think so, but you are welcome to try. I suggest you write a param file for amd64_fbsd60 and use that instead. Let me know if it works. ___ OpenAFS-info

Re: [OpenAFS] amd64 FreeBSD-6.0

2005-11-23 Thread ph rhole oper
On Wed, 23 Nov 2005 14:57:49 -0500, Jim Rees [EMAIL PROTECTED] said: Im using afs-sysname amd64_fbsd53 but im running FreeBSD-6.0-RELEASE. Will it work? I don't think so, but you are welcome to try. I suggest you write a param file for amd64_fbsd60 and use that instead. Let me know

Re: [OpenAFS] amd64 FreeBSD-6.0

2005-11-23 Thread Jim Rees
At the very least you should change the SYS_NAME and add AFS_FBSD60_ENV to src/config/param.amd64_fbsd_53.h. And I would suggest adding the configure flags from the README. Why did you add -fPIC to the CFLAGS? I doubt very much that any linux binaries will work, because the afs syscalls are not

Re: [OpenAFS] AFS and Apache Virtual Directory

2005-11-23 Thread Suman Kansakar
Thank you all for your suggestions. After fiddling around with it a little bit and checking for all the suggested fixes, I realize that my problem is more of my Apache 2.0 installation problem than AFS authentication at this point. I do have the FollowSymLinks option set on my configuration,

Re: [OpenAFS] (webserver security) AFS and Apache Virtual Directory

2005-11-23 Thread Tim Spriggs
On Tue, 22 Nov 2005, zeroguy wrote: On Tue, 22 Nov 2005 18:56:27 -0500 Jim Rees [EMAIL PROTECTED] wrote: Those of you who are running apache authenticated to afs, I'm just curious... why? And the permission model in AFS gets around that annoying problem of needing the web server to

Re: [OpenAFS] (webserver security) AFS and Apache Virtual Directory

2005-11-23 Thread Russ Allbery
Tim Spriggs [EMAIL PROTECTED] writes: Of course, this doesn't completely solve the problem, right? As long as the webserver can see it and other people can run stuff as the webserver (like a quick perl/cgi script) Right, that's why you don't allow the second one, or if you do, you run those

[OpenAFS] Having some issues managing remotely.

2005-11-23 Thread Pucky Loucks
Hello all, I've got a Development and a production cell and I'm having issues with how I've configured it. (I'm sure I've missed something) here is how they are both setup. each network has 3 subnets external (live on internet) internal (a private ip range) management (another private ip

Re: [OpenAFS] Re: afs vs nfs

2005-11-23 Thread lamont
On Wed, 23 Nov 2005, Dan Pritts wrote: This can also be considered a disadvantage. When using AFS, you are forced to manage your storage the AFS way. Files are effectively not stored natively on the filesystem, and cannot be accessed via some other method, and must be backed up via

Re: [OpenAFS] Re: afs vs nfs

2005-11-23 Thread lamont
On Tue, 22 Nov 2005, Horst Birthelmer wrote: On Nov 22, 2005, at 8:52 PM, [EMAIL PROTECTED] wrote: On Tue, 22 Nov 2005 [EMAIL PROTECTED] wrote: I don't know why the AFS community continues to support this convention which breaks location independence. *shrug*. Okay, support was a bad

Re: [OpenAFS] Re: afs vs nfs

2005-11-23 Thread Jeffrey Altman
[EMAIL PROTECTED] wrote: Consider if you have: /afs/newyork.cell/home/horst And then you get sent to the bangalore office for an extended period of time and now your home cell is /afs/bangalore.cell. There are ways to deal with this, but if you go down this path long enough to its

Re: [OpenAFS] Re: afs vs nfs

2005-11-23 Thread Chaskiel M Grundman
--On Wednesday, November 23, 2005 05:04:35 PM -0800 [EMAIL PROTECTED] wrote: but if you go down this path long enough to its logical end you wind up not liking the /afs/cell convention very much... What are the alternatives? Who gets to decide what content gets what globally unique path?