Re: [OpenAFS] Performance issues with Git repositories (or in general with many small files workloads)

2020-12-16 Thread Douglas E Engert
S-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info -- Douglas E. Engert ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] question about authentication with kerberos and Default principal

2018-03-03 Thread Douglas E Engert
7;t have messed up that particular binary. [gsgatlin@localhost bin]$ which kinit /usr/bin/kinit [gsgatlin@localhost bin]$ rpm -qf /usr/bin/kinit krb5-workstation-1.15.2-7.fc27.ppc64 Thanks a lot for any ideas anyone may have.  I feel like I was close to getting everything working. -- Douglas E. Engert ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Re: Authentication without aklog

2014-08-05 Thread Douglas E Engert
On 8/5/2014 10:43 AM, Andrew Deason wrote: On Tue, 05 Aug 2014 09:34:30 -0500 Douglas E Engert wrote: On 8/4/2014 9:35 PM, Andrew Deason wrote: Users of all other kerberized services do not need to "login" to every service they use. If everything is configured properly to use k

Re: [OpenAFS] Re: Authentication without aklog

2014-08-05 Thread Douglas E Engert
On 8/4/2014 9:35 PM, Andrew Deason wrote: On Mon, 04 Aug 2014 15:21:36 -0500 Douglas E Engert wrote: User's have to "login" to other "network file systems" like DropBox, Box, or other Cloud systems. The issue of having to login twice, is a trust issue. Users live

Re: [OpenAFS] Authentication without aklog

2014-08-04 Thread Douglas E Engert
login, i.e. both used Kerberos, and a login to the workstion was a network login. ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info -- Douglas E. Engert ___ Open

Re: [OpenAFS] Re: Authentication without aklog

2014-08-04 Thread Douglas E Engert
t way, but that is not now. I am not aware of any other platform that has something analagous to that (I admit I am rather ignorant of how OS X's API: ccache works, or Windows' MSLSA: or whatever it is). -- Douglas E. Engert ___

Re: [OpenAFS] Re: Authentication without aklog

2014-08-04 Thread Douglas E Engert
is using. Some day it may be that way, but that is not now. I am not aware of any other platform that has something analagous to that (I admit I am rather ignorant of how OS X's API: ccache works, or Windows' MSLSA: or whatever it is). -- Douglas E. Engert _

Re: [OpenAFS] Help installing openafs-1.6.5 on sunx86: bosserver: fatal: libkrb5.so.1

2013-08-06 Thread Douglas E. Engert
ailing list ] mailto:OpenAFS-info@openafs.org";>OpenAFS-info@openafs.org ] https://lists.openafs.org/mailman/listinfo/openafs-info"; target= ] =3D"_blank">https://lists.openafs.org/mailman/listinfo/openafs-info ] ] -- Derrick ] ] ] --089e0111bada74077504e34642b1-- ___

Re: [OpenAFS] Re: OpenAFS 1.7.26 windows and not changed AFS service principle - OK?

2013-07-25 Thread Douglas E. Engert
d implement, and would also introduce delays into normal operation. I don't think it's worth pursuing this route. -Ben ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info -- Dougl

Re: [OpenAFS] Re: [OpenAFS-announce] OpenAFS Security Advisory 2013-0003

2013-07-24 Thread Douglas E. Engert
On 7/24/2013 11:10 AM, Benjamin Kaduk wrote: On Wed, 24 Jul 2013, Douglas E. Engert wrote: Question: Once the 1.6.5 binaries are in place, and the servers start using the rxkad.keytab, will the server still accept existing DES based tokens that use keys and kvno that are only in the KeyFile

[OpenAFS] Re: [OpenAFS-announce] OpenAFS Security Advisory 2013-0003

2013-07-24 Thread Douglas E. Engert
Hutzelman, Tom Yu and Nickolai Zeldovich. ___ OpenAFS-announce mailing list openafs-annou...@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-announce -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, I

Re: [OpenAFS] OpenAFS on ZFS (Was: Salvaging user volumes)

2013-06-17 Thread Douglas E. Engert
@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https

Re: [OpenAFS] replacement for depot?

2012-09-27 Thread Douglas E. Engert
farm. Thanks, Jason ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Re: [OpenAFS] Re: authenticating using AD servers hidden behind firewall

2012-06-08 Thread Douglas E. Engert
need is an implementation of GSS IAKERB https://tools.ietf.org/html/draft-ietf-krb-wg-iakerb-02 as part of Doug Engert's gssklogd. I don't believe there is an open source implementation of it yet. Thar could work, if these was an implementation. Jeffrey Altman -- Douglas E. Engert

Re: [OpenAFS] Re: Multiple Kerberos realm support

2012-05-11 Thread Douglas E. Engert
s actually happening. -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

[OpenAFS] Thunderbird on Windows with OpenAFS 1.7.9

2012-04-12 Thread Douglas E. Engert
fine. 1.7.8 had two strange problems with Thunderbird exiting on its own. Any ideas? -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ OpenAFS-info mailing list OpenAFS-in

Re: [OpenAFS] krb5 trust, rxkad error=19270408... I'm missing something

2012-04-04 Thread Douglas E. Engert
in-windows-rodc-environment.aspx ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 6

Re: [OpenAFS] using git repo on a afs mapped network drive

2012-02-07 Thread Douglas E. Engert
causes a permission problem, where as Unix may let the owner still write or at least rename or link the file. -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ OpenAFS-info mailing

Re: [OpenAFS] Re: OpenAFS 1.6.0 with Microsoft Active Directory 2008 - Questions about DES

2012-01-09 Thread Douglas E. Engert
ows AFS clients. ___________ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Re: OpenAFS 1.6.0 with Microsoft Active Directory 2008 - Questions about DES

2012-01-05 Thread Douglas E. Engert
On 1/5/2012 2:49 PM, Jeff White wrote: On 01/05/2012 02:27 PM, Douglas E. Engert wrote: Another tool that could help is Wireshark to get network traces. It does a very nice job of formatting the Kerberos packets, and can show problems with KDC, principal, enc-type, kvno and cross realm issues

Re: [OpenAFS] Re: OpenAFS 1.6.0 with Microsoft Active Directory 2008 - Questions about DES

2012-01-05 Thread Douglas E. Engert
e DC and start everything over again. ___________ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne,

Re: [OpenAFS] Re: OpenAFS 1.6.0 with Microsoft Active Directory 2008 - Questions about DES

2012-01-05 Thread Douglas E. Engert
way the afs/pitt.edu princ is the only one that has DES enabled. But yeah, if you just want to be able to turn off the "enable DES" checkbox in AD to be able to show someone that you're mostly not running with DES, that's an option. _____________

Re: [OpenAFS] UID conflicts

2011-12-20 Thread Douglas E. Engert
SAGE FROM YOUR SYSTEM. Thank you for your cooperation. ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info -- Douglas E. Engert Argonne National Laboratory 9700 South

Re: [OpenAFS] Windows 7, 1.7.2, 64 bit, sloooow boot up. Anyone else?

2011-11-30 Thread Douglas E. Engert
to obtain AFS tokens for the configured cell using the username and password provided by Windows. This is the username and password that are cached for automatic use. ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mai

Re: [OpenAFS] Active Directory Kerberos ticket allowing to access OpenAFS cell?

2011-11-03 Thread Douglas E. Engert
On 11/3/2011 1:58 AM, Stanislaw Kaminski wrote: 2011/11/2 Douglas E. Engert: On 11/2/2011 11:17 AM, stasheck wrote: Hi, I'm still trying to solve some issues regarding proper integration of ActiveDirectory into our IT environment. One thing I learned, it's impossible to forgo A

Re: [OpenAFS] Active Directory Kerberos ticket allowing to access OpenAFS cell?

2011-11-02 Thread Douglas E. Engert
y links - I don't have a CERN account. I believe that some people here work at CERN, would somebody be so kind and share the documents linked from this one? Many thanks. ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.o

Re: [OpenAFS] Re: Active Directory Kerberos ticket allowing to access OpenAFS cell?

2011-11-02 Thread Douglas E. Engert
t key version numbers, as the KeyFile only stores the kvno and key. and put both realms in /usr/afs/etc/krb.conf. -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ OpenAFS

Re: [OpenAFS] Fixing old screw-ups, then adding Active Directory Domain

2011-10-05 Thread Douglas E. Engert
On 10/5/2011 3:28 AM, stasheck wrote: 2011/10/4 Douglas E. Engert: On 10/4/2011 8:41 AM, stasheck wrote: Hi to all, I write here in search for some conceptual advice (the actual help will be needed far further down the road). First, a bit of background. My company started work as a

Re: [OpenAFS] Fixing old screw-ups, then adding Active Directory Domain

2011-10-04 Thread Douglas E. Engert
terate my goal: "flat" address and realm space, one (or two) user databases. Could work. One AD domain for Windows and all users for authentication, and AD for windows authorization, and a LDAP for Unix authorization. You would still have the AFS PTS with is user and groups as a seperate

[OpenAFS] OpenAFS and KFW MSI transforms

2011-09-26 Thread Douglas E. Engert
)? -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] problems with de-installing OpenAFS 1.5.x on windows 7

2011-09-23 Thread Douglas E. Engert
me knowledge and time I will check for rootkits and some obvious other errors and later on redo system and better check other workstation ahead of making changes. Jeffrey Altman MfG, Lars Schimmer -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois

Re: [OpenAFS] OpenAFS authenticating against multiple Kerberos servers simultaneously

2011-09-22 Thread Douglas E. Engert
afs-info -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

[OpenAFS] OpenAFS-1.7.1 on Windows 7 32 bit

2011-09-16 Thread Douglas E. Engert
) With 1.7.1 this issue appears to have been fixed. -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org

[OpenAFS] Windows 7 32bit and OpenAFS 1.6.0b and KfW 3.2.2

2011-09-08 Thread Douglas E. Engert
The machines are all new. Using the MSI or EXE produces the same problem. Any ideas on what to look for? -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ OpenAFS-info maili

Re: [OpenAFS] Re: Volume missing

2011-09-02 Thread Douglas E. Engert
.name> partition /vicepc: 0 Total volumes onLine 0 ; Total volumes offLine 0 ; Total busy 0 Total number of volumes on server server1.cell.name <http://server1.cell.name> partition /vicepd: 0 Total volumes onLine 0 ; Total volumes offLine 0 ; Total busy 0 -- Douglas E. Engert A

Re: [OpenAFS] Volume missing

2011-09-01 Thread Douglas E. Engert
"user.w RWrite: 536870948 number of sites -> 1 server server1.cell.name <http://server1.cell.name> partition /vicepa RW Site" What can be this? Thank you very much. -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Il

Re: [OpenAFS] Home not found

2011-08-25 Thread Douglas E. Engert
est with 3 database servers. With 2 servers all you really get is a backup of the database. server0 must still be running for full operations. -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630

Re: [OpenAFS] 1.6.0pre6 on snow leopard - hangers

2011-06-22 Thread Douglas E. Engert
On 6/22/2011 11:55 AM, Jeffrey Altman wrote: On 6/22/2011 12:05 PM, Douglas E. Engert wrote: On 6/22/2011 10:23 AM, Jeffrey Altman wrote: Once all of the patches have been submitted to master we will pull them up to 1.6 and issue a new 1.6.0 pre-release. And a new Windows 1.5.99xx that

Re: [OpenAFS] 1.6.0pre6 on snow leopard - hangers

2011-06-22 Thread Douglas E. Engert
n last Friday at the Best Practices Workshop. Once all of the patches have been submitted to master we will pull them up to 1.6 and issue a new 1.6.0 pre-release. And a new Windows 1.5.99xx that says it is based on 1.6.0pre6? Jeffrey Altman -- Douglas E. Engert Argonne National Laborato

Re: [OpenAFS] Microsoft Security Hot Fix MS11-043 breaks OpenAFS client

2011-06-17 Thread Douglas E. Engert
OpenAFS is not alone: Google Samba kb2536276 show that Samba is having problems with 2536276 Maybe not the same problem, but still a problem. -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Re: [OpenAFS] Re: modload failing, Sol10 SPARC, 1.4.14

2011-06-01 Thread Douglas E. Engert
ris-code@opensolaris.org/msg06486.html -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/

Re: [OpenAFS] modload failing, Sol10 SPARC, 1.4.14

2011-05-31 Thread Douglas E. Engert
f -exec grep _memset {} \; -print Does not show it on mine. -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists

Re: [OpenAFS] aklog.exe tickling unwanted corp. AD servers

2010-12-21 Thread Douglas E. Engert
Note that I do not see anywhere in the packets where a TGS_REQ was made for 'a...@rcf.our.org' ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info -- Douglas E

Re: [OpenAFS] Ubuntu 10.04 Login Issues

2010-12-10 Thread Douglas E. Engert
ng list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ OpenAFS-info mailing list OpenAFS-in

Re: [OpenAFS] End of life for Windows 2000?

2010-11-22 Thread Douglas E. Engert
organization would be significantly impacted by removing support for Windows 2000, please let us know. My personal opinion is that it is time to declare Windows 2000 unsupported. No problem here. Jeffrey Altman -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue

Re: [OpenAFS] Setting up a new Win 2008r2 AD as krb5 server for OpenAFS

2010-10-26 Thread Douglas E. Engert
b/832572 MfG, Lars Schimmer ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 _

Re: [OpenAFS] Openafs Client with pam krb5 and ldap

2010-10-04 Thread Douglas E. Engert
FS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Openafs Client with pam krb5 and ldap

2010-10-01 Thread Douglas E. Engert
;claudio' (clau...@mediaservice-test.pri) Oct 1 16:48:03 linux-7w13 sshd[4099]: error: PAM: Authentication failure for claudio from 192.168.87.131 I don't understand...why first succeeds, and then fail? What is wrong? Any hint is welcome.. Cheers, Claudio. -- Douglas E.

Re: [OpenAFS] Overview? Linux filesystem choices

2010-10-01 Thread Douglas E. Engert
his, as they would read old data, with an old checksum. Keep this in mind if checksums are added to AFS. Harald. ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info -- Douglas E. Engert

Re: [OpenAFS] asetkey complains about keylength.

2010-09-01 Thread Douglas E. Engert
On 9/1/2010 3:36 AM, Mans Nilsson wrote: Subject: Re: [OpenAFS] asetkey complains about keylength. Date: Tue, Aug 31, 2010 at 04:58:22PM -0500 Quoting Douglas E. Engert (deeng...@anl.gov): On 8/31/2010 3:59 PM, Mans Nilsson wrote: Hi, I'm setting up a new cell on Solaris, using

Re: [OpenAFS] asetkey complains about keylength.

2010-08-31 Thread Douglas E. Engert
ittle info? What is necessary to supply? asetkey and aklog were built after manually adding -I/usr/heimdal/include and -lkrb5 to compilation invocations, since the usual tricks did not work. Did you get the Heimdal libkrb5.so? There is also one in /usr/lib -- Douglas E. Engert Argonne Nat

[OpenAFS] Keyrings and PAG number in the group list

2010-08-24 Thread Douglas E. Engert
On systems with keyring support, is there any way to tell AFS to NOT put the PAG number into the groups? -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ OpenAFS-info mailing

Re: [OpenAFS] the mac quandry with 2 realms

2010-07-15 Thread Douglas E. Engert
cifs and afs more peacefully coexist on osX. -- David Bear College of Public Programs at ASU 602-494-0424 -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ OpenAFS-info

Re: [OpenAFS] win7 hangs during login at "welcome" - afs related?

2010-06-10 Thread Douglas E. Engert
penAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] AFS version of du

2010-04-30 Thread Douglas E. Engert
penafs 1.4.11) didn't follow. It would be _really_ nice if tools didn't follow mount points to other cells, if nothing else! Richard -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 __

Re: [OpenAFS] deadlock in OpenAFS 1.4.11 (Solaris 5.10)

2010-04-09 Thread Douglas E. Engert
nough to fix this. (Political capital and all; I hope people understand.) I haven't tried to reproduce this bug (and wouldn't want to on the computer server!): it only seems to happen on these main compute servers -- never on my little research machines... :-( Any h

Re: [OpenAFS] Unusually Long Load times

2010-03-17 Thread Douglas E. Engert
_ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info -- Douglas E. Engert

Re: [OpenAFS] Windows AD Kerberos - "bad ticket" error

2010-02-26 Thread Douglas E. Engert
allb...@kf8nh.com <mailto:allb...@kf8nh.com> system administrator [openafs,heimdal,too many hats] allb...@ece.cmu.edu <mailto:allb...@ece.cmu.edu> electrical and computer engineering, carnegie mellon universityKF8NH -- Douglas E. Engert Argonne Na

Re: [OpenAFS] Windows AD Kerberos - "bad ticket" error

2010-02-26 Thread Douglas E. Engert
mp/krb5cc_0 afs/mycell.edu afs/mycell@mycell.edu: kvno = 2 [09:57 r...@afs1 ~]# asetkey list kvno2: key is: All done. Let me know if there is any other information I can supply that would be helpful. -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Ar

[OpenAFS] Re: [OpenAFS-announce] OpenAFS 1.4.12 release candidate 4 available

2010-02-26 Thread Douglas E. Engert
penafs.org . Derrick Brashear for the OpenAFS Gatekeepers ___ OpenAFS-announce mailing list openafs-annou...@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-announce -- Douglas E. Engert Argonne National Laboratory 9700 South C

Re: [OpenAFS] Question

2009-12-11 Thread Douglas E. Engert
DCE/DFS-AFS Support, Hitachi -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 #!/bin/bash # get klog stats for selected users # # option $1 old get last weeks AuthLog.old # # LOG=/tmp/get.klog.stats.log TMP=/tmp/get.klog.st

Re: [OpenAFS] pam_afs_session.so is unable to find Kerberos ticket cache file

2009-12-10 Thread Douglas E. Engert
sion: exit (success) === Now, the obvious question is: How can I tell sshd or pam_krb5.so about the ticket cache file? Thanks in advance for any help! Kind regards, Holger -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenu

Re: [OpenAFS] OpenAFS crash on Solaris 10

2009-10-27 Thread Douglas E. Engert
cache including ZFS.) Anyone has a similar problem? Where could I find more information to post? Thanks in advance. [ ]`s Beto -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Re: [OpenAFS] Need help: Tokens stop working

2009-10-08 Thread Douglas E. Engert
Are clocks in sync? (5 minutes of the AFS servers) Are you using PAGs? (id -a should have the PAG number as a large group number between 1090519040 and 1107296255) Does same use login more then once a the same time? Do you use pam_afs_session? --Daniel -- Douglas E. Engert Argonne Na

Re: [OpenAFS] ADS communications issue?

2009-09-11 Thread Douglas E. Engert
t before we try it again. If they're correct, and flipping that switch doesn't generate a new key, why does it break aklog? Would a server restart be necessary? Would I need a new keytab generated to update the KeyFile with asetkey? Thanks, Chris -- Douglas E. Engert Argon

Re: [OpenAFS] ADS communications issue?

2009-09-09 Thread Douglas E. Engert
Jeffrey Altman wrote: Douglas E. Engert wrote: If its the large ticket problem, there is a way to tell AD that the service ticket for AFS does not need a PAC, thus reducing the size from maybe 12k to less then 500 bytes. See: http://support.microsoft.com/kb/305144 And this which adds the

Re: [OpenAFS] ADS communications issue?

2009-09-08 Thread Douglas E. Engert
s service account in AD. Chris -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Issue with 1.4.11 pagsh.krb ioctl for curpag returning -1 E2BIG

2009-08-03 Thread Douglas E. Engert
pagsh.krb is not returning the correct username in KRB5CCNAME. I'm not sure I understand. pagsh.krb doesn't know anything at all about Kerberos v5 and hence about KRB5CCNAME so far as I know. ___ OpenAFS-info mailing list OpenAFS-info@ope

Re: [OpenAFS] ADS and MIT Kerberos transition auth continued

2009-07-17 Thread Douglas E. Engert
-e -t -K -k afstest-md5.keytab and verify that the key matches what asetkey has. -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ OpenAFS-info mailing list OpenAFS-info@openaf

Re: [OpenAFS] ADS and MIT Kerberos transition auth continued

2009-07-16 Thread Douglas E. Engert
Eric Chris Garrison wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Douglas E. Engert wrote: And after you reset the desonly bit in AD, did you use ktpass with -pass somepassword -out keytabfile or did you use the -rndPass option? The ADS admin says "We always use the rndPass o

Re: [OpenAFS] ADS and MIT Kerberos transition auth continued

2009-07-16 Thread Douglas E. Engert
ps://lists.openafs.org/mailman/listinfo/openafs-info -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] ADS and MIT Kerberos transition auth continued

2009-07-09 Thread Douglas E. Engert
nigmail.mozdev.org iD8DBQFKVfSLG2WsK8XoJWURAkgCAJ9DnJH4qORTrcxVOiAcsoRE6x3cfgCcCnCq L8P+s07RQgt6qvU6+Bhes7o= =/Cv/ -END PGP SIGNATURE- ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info -- Douglas E. Engert

Re: [OpenAFS] ADS and MIT Kerberos transition auth continued

2009-07-08 Thread Douglas E. Engert
penAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ OpenAFS-info mailing list Ope

Re: [OpenAFS] Network becomes terribly slow when cache manager flushes updates over xDSL

2009-07-08 Thread Douglas E. Engert
penafs.org/mailman/listinfo/openafs-info -- Sean O'Malley, Information Technologist Michigan State University - ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mai

Re: [OpenAFS] Network becomes terribly slow when cache manager flushes updates over xDSL

2009-07-08 Thread Douglas E. Engert
MTU ping will sho as not fragmenting. (I think it is actually 48 as the ping may be showing 8 bytes less because of the UDP header.) Harald. ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-in

Re: [OpenAFS] Network becomes terribly slow when cache manager flushes updates over xDSL

2009-07-07 Thread Douglas E. Engert
or your help. Frédéric Grelot. ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___

[OpenAFS] Re: [OpenAFS-announce] OpenAFS 1.4.11 release candidate 1 available

2009-06-11 Thread Douglas E. Engert
the OpenAFS Gatekeepers ___ OpenAFS-announce mailing list openafs-annou...@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-announce -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439

Re: [OpenAFS] kopenafs.h and libkopenafs question on status

2009-06-05 Thread Douglas E. Engert
before k_hasafs which might be a beter choice. And hard linking In lilbsys.a but if the prefered interface is k_hasafs() and k_setpag() should I switch. Thanks Mike -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Re: [OpenAFS] Resilience

2009-06-02 Thread Douglas E. Engert
? We could use "vos convertROtoRW"; how would that affect the process ? Jonathan Wheeler e-Science Centre Rutherford Appleton Laboratory -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 __

Re: [OpenAFS] Problem with klog

2009-05-29 Thread Douglas E. Engert
ncipals in both the kaserver and the K5 realm. But the passwords are not synced. As users convert to K5 the kaserver entries can be deleted. As you discovered via googling, it's recommended that you use an external Kerberos infrastructure rather than klog + kaserver. -- Douglas E. En

Re: [OpenAFS] OpenAFS, Cisco VPN and MAC OS and mtu

2009-05-28 Thread Douglas E. Engert
fo mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ OpenAFS-info mailing list Op

Re: [OpenAFS] OpenAFS, Cisco VPN and MAC OS and mtu

2009-05-27 Thread Douglas E. Engert
e, for the same reason. It has worked, and we don't have to fiddle with each client. The negotiation between AFS client and fileserver for MTU size is "fileserver wins." Kim Kimball Douglas E. Engert wrote: We are having problems with Mac OS 10.4 and 10.5 using Cisco VPN AFS

Re: [OpenAFS] OpenAFS, Cisco VPN and MAC OS and mtu

2009-05-27 Thread Douglas E. Engert
final touches on it today. Kim Kimball Douglas E. Engert wrote: We are having problems with Mac OS 10.4 and 10.5 using Cisco VPN AFS can become unusable. Mac 10.4 is running OpenAFS 1.4.8 for sure. I think the Mac 10.5 is running OpenAFS 1.5.59. Using rxdebug and looking at the natMTU para

[OpenAFS] OpenAFS, Cisco VPN and MAC OS and mtu

2009-05-15 Thread Douglas E. Engert
getting the existingMTU from the OS in util/netutils.c The AFS client on Windows has the RxMaxMTU (1244 appears to be the best setting). Is there any equivelent option for the MAC? Any thoughts on this? -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois

Re: [OpenAFS] solaris 10 versions supporting inode fileservers

2009-05-14 Thread Douglas E. Engert
ers and have not seen a single off-line message in 36 hours. -- David Boldt -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5

Re: [OpenAFS] OpenAFS 1.4.10 has ZFS patch?

2009-05-05 Thread Douglas E. Engert
Dan Pritts wrote: On Tue, May 05, 2009 at 10:22:49AM -0500, Douglas E. Engert wrote: Dan Pritts wrote: does this mean that the disk cache is now totally filesystem-independent? Yes. ZFS, and tmp in swap for example. sorry, i should have been more specific - is the cache now filesystem

Re: [OpenAFS] solaris 10 versions supporting inode fileservers

2009-05-05 Thread Douglas E. Engert
-info -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] OpenAFS 1.4.10 has ZFS patch?

2009-05-05 Thread Douglas E. Engert
s.org https://lists.openafs.org/mailman/listinfo/openafs-info -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openaf

Re: [OpenAFS] OpenAFS install on Solaris 10

2009-04-30 Thread Douglas E. Engert
Syed*** Unix Systems Administrator, Administrative Services, Stanford University 3145 Porter Drive, #215, Bear Creek Building Palo Alto, CA 94305 Phone: 650-736-7647 Cell: 408-480-8841 Email: muks...@stanford.edu <mailto:muks...@stanford.edu> -- Douglas E. Engert Argonne

Re: [OpenAFS] Solaris 10 - OpenAFS can't mount

2009-04-06 Thread Douglas E. Engert
to FSType afs mount: Operation not applicable to FSType afs -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://list

Re: [OpenAFS] OpenAFS, Dreamweaver and VPN

2009-03-26 Thread Douglas E. Engert
anne salemme wrote: did you check http://support.apple.com/kb/HT2532 Thanks will give that a try. anne Douglas E. Engert wrote: With OpenAFS-1.4.8 on Mac OS 10.5.6 how can I set the max mtu to be less then 1292? Jeffrey Altman wrote: Douglas E. Engert wrote: We are having some

Re: [OpenAFS] OpenAFS, Dreamweaver and VPN

2009-03-26 Thread Douglas E. Engert
With OpenAFS-1.4.8 on Mac OS 10.5.6 how can I set the max mtu to be less then 1292? Jeffrey Altman wrote: Douglas E. Engert wrote: We are having some issues using Dreamweaver (Adobe web design tool) with its data stored in AFS when used from off site via Cisco VPN. We are seeing this in a Mac

[OpenAFS] Re: [OpenAFS-announce] OpenAFS 1.4.9 release candidate 1 available

2009-03-25 Thread Douglas E. Engert
___ OpenAFS-announce mailing list openafs-annou...@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-announce -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Re: [OpenAFS] OpenAFS, Dreamweaver and VPN

2009-03-25 Thread Douglas E. Engert
Jeffrey Altman wrote: Douglas E. Engert wrote: We are having some issues using Dreamweaver (Adobe web design tool) with its data stored in AFS when used from off site via Cisco VPN. We are seeing this in a Mac client but have seen similar issues on Windows too. The machines work fine when

[OpenAFS] OpenAFS, Dreamweaver and VPN

2009-03-25 Thread Douglas E. Engert
some time out issue with Dreamweaver if the network is slow, or AFS is slow in retrieving data over a slower then normal network. Has anyone seen any issues with Dreamweaver and AFS? -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252

[OpenAFS] Re: [OpenAFS-announce] OpenAFS 1.4.9 release candidate 1 available

2009-03-24 Thread Douglas E. Engert
mailing list openafs-annou...@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-announce -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ OpenAFS-info mailing list

Re: [OpenAFS] OpenAFS 1.4.7.dfsg1-6 on Ubuntu Intrepid

2009-02-24 Thread Douglas E. Engert
Yep, using -dynroot got it working Thanks guys. Russ Allbery wrote: "Douglas E. Engert" writes: OpenAFS Version: 1.4.7.dfsg1-6 will run on Ubuntu Intrepid if started manually. But if stated by init out of rc2.d, afsd returns with: afsd: Mounting the AFS root on '/afs&#x

[OpenAFS] OpenAFS 1.4.7.dfsg1-6 on Ubuntu Intrepid

2009-02-24 Thread Douglas E. Engert
t then it works from init. This moves it after the S28NetworkManager Anyone have any ideas why afsd could not mount the root on /afs? Does it need something the Network Manager did? The kernel is 2.6.27-11-generic -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Ar

Re: [OpenAFS] AFS to NFS translator in Linux

2009-02-10 Thread Douglas E. Engert
client. we now SCP the bootstrap info. You submitted bugs, right? No, It did seam like it was high on anyone's list to fix. Is it? -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439

Re: [OpenAFS] Solaris 10u6: ZFS cache?

2008-12-12 Thread Douglas E. Engert
It is simple enough you could apply by hand. done bash-3.00# -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ OpenAFS-info mailing list OpenAFS-info@opena

  1   2   3   4   >