Re: [OpenAFS] Automatic move of volumes

On 10/24/07, Steven Jenkins <[EMAIL PROTECTED]> wrote: > On 10/24/07, Derrick Brashear <[EMAIL PROTECTED]> wrote: > > > > > > It has _everything_ to do with namespace management. In absence of > > > better tools, people are using vos release to do just that. Note that > > > vos release isn't a ba

Re: [OpenAFS] Server upgrade time; which is the right way?

Mitch Collinsworth wrote: > > On Thu, 25 Oct 2007, Jeffrey Altman wrote: > >> File locking is simulated in the client. The client obtains a full file >> lock from the file server and then doles out byte range locks locally to >> the application. >> >> The change in the file server from 1.2.13 to

Re: [OpenAFS] Password transition to krb5 - your methods?

FWIW re: building afs2k5db with old Kerberos dist... MIT Kerberos 1.2 : Has no krb5-config = no good MIT Kerberos 1.3 : Fails to build: /blah/krb5-1.3/src/include/k5-int.h:1783: error: parse error before "krb5_donot_replay" MIT Kebreros 1.4.4 : Fails (with

Re: [OpenAFS] Server upgrade time; which is the right way?

On Thu, 25 Oct 2007, Jeffrey Altman wrote: File locking is simulated in the client. The client obtains a full file lock from the file server and then doles out byte range locks locally to the application. The change in the file server from 1.2.13 to 1.4.5 will provide you with large file supp

Re: [OpenAFS] Server upgrade time; which is the right way?

Mitch Collinsworth wrote: > Which leads into a different question: Is there any reason not to start > off by upgrading one or more of our fileservers from 1.2.13 to 1.4.4, while > leaving the database servers at 1.2.13 until sometime later? There is no specific requirement that one be done before

Re: [OpenAFS] Server upgrade time; which is the right way?

On Thu, 25 Oct 2007, Harald Barth wrote: If different database server versions would generate pain, I would had to do something about the following a long time ago... $ /usr/openafs/sbin/rxdebug anna 7003 -v Trying 130.237.232.112 (port 7003): AFS version: OpenAFS 1.4.0 built 2005-11-15 $ /

Re: [OpenAFS] Strategy for disaster recover of an AFS fileserver

Lars Schimmer <[EMAIL PROTECTED]> wrote: > Jose Calhariz wrote: >> In recent past I had lost a /vicepa partition with half of the >> volumes of my cell and found that my backup procedure is not fast >> enough for recovering so many volumes and data. I am using amanda >> without afs patch. >> >> Wh

Re: [OpenAFS] Strategy for disaster recover of an AFS fileserver

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jose Calhariz wrote: > In recent past I had lost a /vicepa partition with half of the volumes > of my cell and found that my backup procedure is not fast enough for > recovering so many volumes and data. I am using amanda without afs > patch. > > Wha

[OpenAFS] Strategy for disaster recover of an AFS fileserver

In recent past I had lost a /vicepa partition with half of the volumes of my cell and found that my backup procedure is not fast enough for recovering so many volumes and data. I am using amanda without afs patch. What plans do you have for quick recovering from massive loss of data on an AFS ce

Re: [OpenAFS] Password transition to krb5 - your methods?

Ken Hornstein wrote: > I agree with you that logically afs2k5db should probably live in > MIT Kerberos ... but good luck in fighting THAT windmill :-/ The > reason I suggested fixing afs2k5db up and putting it in OpenAFS was > that it didn't require Hell to freeze over to make it happen :-) Trus

Re: [OpenAFS] Password transition to krb5 - your methods?

>The MIT License is compatible with OpenAFS. Someone could simply copy >the necessary routines out of MIT Kerberos and build a package that >doesn't require MIT Kerberos at all. The problem is that since crypto functions are involved, it would require a good chunk of the MIT library (and the db l

Re: [OpenAFS] Automatic move of volumes

I've got a variety of scripts to do volume moves in interesting ways, here's a summary: grabuser: Run it on an afs server, it moves the users volume 'here'. mvvols: read a list of volumes, move every n-th one as prescribed. Useful for thinning a file server. On Oct 24, 2007, at 12:34 PM, D

Re: [OpenAFS] Password transition to krb5 - your methods?

Brandon S. Allbery KF8NH wrote: > > On Oct 25, 2007, at 12:36 , Ken Hornstein wrote: > >> would be reasonable to ship this program with OpenAFS. But the >> problem here is I don't see who is going to do the work; obviously >> I transitioned our cell years ago, and I have no motivation or time >>

Re: [OpenAFS] Password transition to krb5 - your methods?

Thank you for the usual thorough response, Ken. It's very welcome... and a bit amazing that you can construct a response that thorough and clear in ~20 minutes :) So my best bet, today, is to track down an MIT 1.3.0 release to build afs2k5db against then? Which is the next hurdle: http://web

Re: [OpenAFS] Password transition to krb5 - your methods?

Ken Hornstein wrote: > Why doesn't it have a home? Well, it is unfortunately an odd program. > What afs2k5db needs to do is know about AFS internals (the format of the > kaserver database) _and_ MIT Kerberos internals (the necessary magic to > read a stash file or handle the master key, and output

Re: [OpenAFS] Password transition to krb5 - your methods?

On Oct 25, 2007, at 12:36 , Ken Hornstein wrote: would be reasonable to ship this program with OpenAFS. But the problem here is I don't see who is going to do the work; obviously I transitioned our cell years ago, and I have no motivation or time to do work on fixing up afs2k5db. I think most

Re: [OpenAFS] Password transition to krb5 - your methods?

>IMO, it should be distributed with it and referenced >in a new README.kaserver (which also should include >the elders EOL statement regarding kaserver). > >It doesn't have to be referenced by the build process. > >I wouldn't surprise me to find that nobody agrees with >me again. Sigh. Jeff, I go

Re: [OpenAFS] Password transition to krb5 - your methods?

Derrick Brashear wrote: > i disagree about distribution. i do think we should have a page with > instructions and resources we provide a reference to. > > On 10/25/07, *Jeff Blaine* < [EMAIL PROTECTED] > > wrote: > > IMO, it should be distributed with it and referenc

Re: [OpenAFS] Password transition to krb5 - your methods?

i disagree about distribution. i do think we should have a page with instructions and resources we provide a reference to. On 10/25/07, Jeff Blaine <[EMAIL PROTECTED]> wrote: > > IMO, it should be distributed with it and referenced > in a new README.kaserver (which also should include > the elders

Re: [OpenAFS] Password transition to krb5 - your methods?

Jeffrey Altman wrote: > afs2k5db is not part of openafs 1.4.5. Building it requires access to > private MIT krb5 headers. We would distribute it if we could build it > using the public headers but we can't. I will also point out that you should build it against MIT Kerberos 1.2, 1.3, or 1.4. D

Re: [OpenAFS] Password transition to krb5 - your methods?

Jeff Blaine wrote: > Steve Devine wrote: >> Jeff Blaine wrote: >>> I realize there's not a conversion process to get AFS krb4 >>> principal passwords into krb5-land. >>> >>> What approaches have you all taken in order to make the >>> kaserver -> krb5 KDC transition as painless as possible >>> to us

Re: [OpenAFS] Password transition to krb5 - your methods?

IMO, it should be distributed with it and referenced in a new README.kaserver (which also should include the elders EOL statement regarding kaserver). It doesn't have to be referenced by the build process. I wouldn't surprise me to find that nobody agrees with me again. Jeffrey Altman wrote: D

Re: [OpenAFS] Password transition to krb5 - your methods?

Derrick Brashear wrote: > > > On 10/25/07, *Jeff Blaine* <[EMAIL PROTECTED] > > wrote: > > You had me wondering. > > The only reference to afs2k5db I could find in source was > > src/packaging/RedHat/openafs.spec.in > > Which then leads me to: >

Re: [OpenAFS] Password transition to krb5 - your methods?

On 10/25/07, Jeff Blaine <[EMAIL PROTECTED]> wrote: > > You had me wondering. > > The only reference to afs2k5db I could find in source was > > src/packaging/RedHat/openafs.spec.in > > Which then leads me to: > > Are the RedHat builds getting preferential treatment with > regard to this? Is t

Re: [OpenAFS] Password transition to krb5 - your methods?

Jeff Blaine <[EMAIL PROTECTED]> wrote: > You had me wondering. > > The only reference to afs2k5db I could find in source was > > src/packaging/RedHat/openafs.spec.in > > Which then leads me to: > > Are the RedHat builds getting preferential treatment with > regard to this? Is there a reason?

Re: [OpenAFS] Password transition to krb5 - your methods?

You had me wondering. The only reference to afs2k5db I could find in source was src/packaging/RedHat/openafs.spec.in Which then leads me to: Are the RedHat builds getting preferential treatment with regard to this? Is there a reason? What's up? Steve Devine wrote: Steve Devine wrote:

Re: [OpenAFS] Password transition to krb5 - your methods?

Steve Devine wrote: Jeff Blaine wrote: Steve Devine wrote: Jeff Blaine wrote: I realize there's not a conversion process to get AFS krb4 principal passwords into krb5-land. What approaches have you all taken in order to make the kaserver -> krb5 KDC transition as painless as possible to users

Re: [OpenAFS] Password transition to krb5 - your methods?

Jeff Blaine wrote: >> From my notes : >> *** >> afs2k5db /usr/afs/db/kaserver.DB0 >all.out >> then edit the all.out file: >> Remove line for AuthServer , krbtgt, and afs >> Be sure and leave in first line ( kdb5_util load_dump version 4) >> Then load em all in. >>

Re: [OpenAFS] Password transition to krb5 - your methods?

Jeff Blaine wrote: Steve Devine wrote: Jeff Blaine wrote: I realize there's not a conversion process to get AFS krb4 principal passwords into krb5-land. What approaches have you all taken in order to make the kaserver -> krb5 KDC transition as painless as possible to users? Thanks for any ins

Re: [OpenAFS] Password transition to krb5 - your methods?

Steve Devine wrote: Jeff Blaine wrote: I realize there's not a conversion process to get AFS krb4 principal passwords into krb5-land. What approaches have you all taken in order to make the kaserver -> krb5 KDC transition as painless as possible to users? Thanks for any insight/tips. This is

Re: [OpenAFS] file timestamp difference

Hi, I applied this patch to version 1.4.4. Recompiled the sources and changed the kernel module to the new one. It seems ok! At the client the time is shown with nanoseconds set to zero. Is it right, that I have to update all clients? Regards, Lars Lars Richter schrieb: > Hi, > > I test this

Re: [OpenAFS] Server upgrade time; which is the right way?

> There seems to be a conflict of opinions here on whether a rolling > upgrade like this is either a) a non-issue, people do it all the time; > or b) a huge mistake that will inflict serious pain and sleepless > nights because everyone knows we should be taking everything down at > once for a majo