Re: [OpenAFS] (webserver security) AFS and Apache Virtual Directory

2007-02-19 Thread Simon Wilkinson
On 19 Feb 2007, at 05:18, Christopher D. Clausen wrote: I know this is an old thread, but is there any progress on the above apache mod? And if not, can someone provide more info on the pre-fork implementations mentioned above? (Assuming something exists and its not a code your own

[OpenAFS] Probleme with aklog

2007-02-19 Thread El Barto
Hello, I'm getting troubles to access my afs folders after loggin with pam_openafs_session.so (with using aklog). I'm running Debian Etch with custom kernel 2.6.18 and openafs 1.4.2-4. When I use kinit, I get the correct kerberos and afs tickets and tokens : [EMAIL PROTECTED]:~$ kinit

Re: [OpenAFS] Probleme with aklog

2007-02-19 Thread Jacob Volstrup
Hi, On Mon, February 19, 2007 11:31, El Barto wrote: When I log with ssh, I do not obtain afs tokens but I do obtain kerberos tickets, and if I type aklog I obtain wrong afs tokens and I got a Permission denied on my folders : At our system (Ubuntu) we had to use the modified packages from

Re: [OpenAFS] Probleme with aklog

2007-02-19 Thread El Barto
On Mon, 19 Feb 2007 11:42:37 +0100 (CET) Jacob Volstrup [EMAIL PROTECTED] wrote: Hi, On Mon, February 19, 2007 11:31, El Barto wrote: When I log with ssh, I do not obtain afs tokens but I do obtain kerberos tickets, and if I type aklog I obtain wrong afs tokens and I got a Permission

Re: [OpenAFS] Probleme with aklog

2007-02-19 Thread vladimir konrad
I'm getting troubles to access my afs folders after loggin with pam_openafs_session.so (with using aklog). I'm running Debian Etch with custom kernel 2.6.18 and openafs 1.4.2-4. When I use kinit, I get the correct kerberos and afs tickets and tokens : what happens when you run aklog

Re: [OpenAFS] Probleme with aklog

2007-02-19 Thread El Barto
On Mon, 19 Feb 2007 13:24:30 + vladimir konrad [EMAIL PROTECTED] wrote: I'm getting troubles to access my afs folders after loggin with pam_openafs_session.so (with using aklog). I'm running Debian Etch with custom kernel 2.6.18 and openafs 1.4.2-4. When I use kinit, I get the

Re: [OpenAFS] software for windows start out of OpenAFS Filespace?

2007-02-19 Thread Christopher D. Clausen
Lars Schimmer [EMAIL PROTECTED] wrote: Incoherent ramblings aside, take it from someone who has worked in the trenches. DON'T do it. You are setting yourself up for more pain than gain by trying to screw an application into running from a network (on Windows). With 'nix environments it is

[OpenAFS] perl AFS compile fails

2007-02-19 Thread Dave Botsch
Hi. Trying to get the perl afs stuff to compile against rhel4 running openafs1.4.2 The compile pukes with... gcc -c -I/usr/include -D_REENTRANT -D_GNU_SOURCE -DDEBUGGING -fno-strict-aliasing -pipe -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/include/gdbm -O2 -g -pipe

Re: [OpenAFS] Probleme with aklog

2007-02-19 Thread Franco
On Feb 19, 2007, at 02:55pm, El Barto wrote: [EMAIL PROTECTED] ssh [EMAIL PROTECTED] [EMAIL PROTECTED]'s password: Linux linux-pourri 2.6.18-3-686 #1 SMP Mon Dec 4 16:41:14 UTC 2006 i686 Are you using PAM in sshd's configuration? Post ssh_config and sshd_config files, there might be a

Re: [OpenAFS] Probleme with aklog

2007-02-19 Thread Douglas E. Engert
Your test looks strange, as the same ticket cache (based on on your uid I assume) is being used in both the kinit and the ssh examples and the tickets have the same time. This would indicate the SSH did not gt you a kerberos ticket, of if it did it stored it in some other cache, and did not set

Re: [OpenAFS] software for windows start out of OpenAFS Filespace?

2007-02-19 Thread Jeffrey Altman
Christopher D. Clausen wrote: I attempted to put about 1500 utilities into AFS and add that to my PATH. This was painfully slow. However, there have been some improvements since then, so maybe its better now. Not sure if the number of files was the issue or what, but it was so slow that

Re: [OpenAFS] Probleme with aklog

2007-02-19 Thread El Barto
On Mon, 19 Feb 2007 10:14:56 -0600 Douglas E. Engert [EMAIL PROTECTED] wrote: Your test looks strange, as the same ticket cache (based on on your uid I assume) is being used in both the kinit and the ssh examples and the tickets have the same time. This would indicate the SSH did not gt you

[OpenAFS] govenen laptop encryption requiements

2007-02-19 Thread ted creedon
Have openafs users been affected by http://www.whitehouse.gov/omb/memoranda/fy2006/m06-16.pdf ? It's a memo from OMB requiring protection of laptop data.. Tedc

Re: [OpenAFS] Probleme with aklog

2007-02-19 Thread Douglas E. Engert
El Barto wrote: On Mon, 19 Feb 2007 10:14:56 -0600 Douglas E. Engert [EMAIL PROTECTED] wrote: Your test looks strange, as the same ticket cache (based on on your uid I assume) is being used in both the kinit and the ssh examples and the tickets have the same time. This would indicate the

Re: [OpenAFS] govenen laptop encryption requiements

2007-02-19 Thread Gary Buhrmaster
ted creedon wrote: Have openafs users been affected by http://www.whitehouse.gov/omb/memoranda/fy2006/m06-16.pdf ? Anyone who is a Fed (or a Fed contractor) has had to deal with that memo, and address the issues (quite some time ago, actually). Primarily, the point is to insure there is not

Re: [OpenAFS] govenen laptop encryption requiements

2007-02-19 Thread Jeffrey Altman
ted creedon wrote: Have openafs users been affected by http://www.whitehouse.gov/omb/memoranda/fy2006/m06-16.pdf ? It’s a memo from OMB requiring protection of laptop data.. Tedc Windows OpenAFS users should encrypt the directory within which the AFSCache file is created.

Re: [OpenAFS] Probleme with aklog

2007-02-19 Thread Bastian
On Mon, 19 Feb 2007 10:14:56 -0600 Douglas E. Engert [EMAIL PROTECTED] wrote: # Change to no to disable tunnelled clear text passwords #PasswordAuthentication yes # Kerberos options KerberosAuthentication yes #KerberosGetAFSToken yes KerberosOrLocalPasswd yes KerberosTicketCleanup yes #

[OpenAFS] Possible Kernel Memory leak, OpenAFS 1.4.2+, RH3 i686/amd64

2007-02-19 Thread Kevin Hildebrand
Hello, I've been banging my head on this for a while and thought I'd see if anyone else has any clues. Since upgrading to OpenAFS 1.4.2, both our amd64 and i386 RedHat 3 linux platforms have been seeing significant kernel memory leaks. Namely, the size-256 slab grows by approximately 4K

Re: [OpenAFS] Possible Kernel Memory leak, OpenAFS 1.4.2+, RH3 i686/amd64

2007-02-19 Thread Marcus Watts
Kevin Hildebrand [EMAIL PROTECTED] writes: Hello, I've been banging my head on this for a while and thought I'd see if anyone else has any clues. Since upgrading to OpenAFS 1.4.2, both our amd64 and i386 RedHat 3 linux platforms have been seeing significant kernel memory leaks. Namely,

[OpenAFS] fast restart

2007-02-19 Thread Steve Devine
We are looking at using some very large disk stores in the very near future. I am interested in fast restart and have compiled the software to include this option. Questions: Does this mean it will always run under this fast-restart? No changes required in BosConfig or start up scripts ? Also how

Re: [OpenAFS] fast restart

2007-02-19 Thread Christopher D. Clausen
Steve Devine [EMAIL PROTECTED] wrote: We are looking at using some very large disk stores in the very near future. I am interested in fast restart and have compiled the software to include this option. Questions: Does this mean it will always run under this fast-restart? Yes. No changes