Re: [OpenAFS] Why is speed of AFS loopback adapter set to 10 Mb, even if physical interface is Gb capable?

Hi Jeffrey, thanks a lot for your reply. On Sun, 25 Apr 2010, Jeffrey Altman wrote: [...] 1.5.74 is the current release. Yes, but it wasn't at the time I setup up the Windows machine. Unfortunately, the maximum transfer speed on Windows is about 8-10 MB/sec when I copy local files to

Re: [OpenAFS] Why is speed of AFS loopback adapter set to 10 Mb, even if physical interface is Gb capable?

Hi Lars, thanks for your reply. Lars Schimmer schrieb am Sunday, den 25. April 2010: [...] A network filesystem has some more needs than a local one ;-) I'm aware of that, but even when I transfer a large .iso file (~ 600 MB) using scp to a remote host acting an an NFSv4 client and has a

Re: [OpenAFS] Why is speed of AFS loopback adapter set to 10 Mb, even if physical interface is Gb capable?

Hi Simon, thanks for your reply. On Sun, 25 Apr 2010, Simon Wilkinson wrote: [...] Firstly, as I (and others) have mentioned, OpenAFS doesn't use DES, it uses an encryption algorithm called fcrypt, which is a DES derivative. I got the impression that DES was used because one has to use

Re: [OpenAFS] Why is speed of AFS loopback adapter set to 10 Mb, even if physical interface is Gb capable?

Hi Jeffrey, thanks for your reply. On Mon, 26 Apr 2010, Jeffrey Altman wrote: [...] Rx jumbograms have nothing to do with IPv6. OpenAFS has no IPv6 support at present. See -jumbo option on the UNIX CM Sorry, didn't find anything about -jumbo in the afsd man page. So, to which daemon does

Re: [OpenAFS] Why is speed of AFS loopback adapter set to 10 Mb, even if physical interface is Gb capable?

Hi Rich, first of all, thanks a lot for your reply. On Sat, 24 Apr 2010, Rich Sudlow wrote: [...] In our cell we typically see write speeds of 60 - 85 MB sec on gigabit clients (with no client tuning). For Windows or Linux clients, or both? Besides, have you (or anybody else subscribed to

Re: [OpenAFS] Why is speed of AFS loopback adapter set to 10 Mb, even if physical interface is Gb capable?

Hi Lars, thanks for your reply. Lars Schimmer schrieb am Sunday, den 25. April 2010: Usual auto negotiation does its job quite good. But OpenAFS enables encryption of data transfer on each standard install - which results in drastic performance decreases. Thanks for mentioning this and

[OpenAFS] Why is speed of AFS loopback adapter set to 10 Mb, even if physical interface is Gb capable?

Hi everybody, I installed OpenAFS for Windows 1.572 on a Windows 7 Professional (64 bit) system with all system updates applied in conjunction with Kerberos for Windows (KfW) and the Network Identity Manager. I downloaded all packages from Secure Endpoints' web site. The PC is consists of current

[OpenAFS] Possible explanation(s) for obvious performance problems?

Hi, I'm running OpenAFS 1.4.11 (from lenny backports) on a Debian Lenny AMD64 system (QNAP TS 809 Turbo equipped with eightSeagate 7.2k Enterprise HDs, capacity: 1 TB each) which is a central file server (NAS), i. e. that server runs the - bosserver - ptserver - buserver - vlserver - volserver

Re: [OpenAFS] Re: Cron Jobs for Regular Users

, 27 Jan 2010, Andrew Deason wrote: On Wed, 27 Jan 2010 16:27:59 +0100 Holger Rauch holger.ra...@empic.de wrote: - Could it be that the kvno doesn't match? - What's the default kvno for princs that are created interactively from within kadmin using the addprinc command? - In case I

Re: [OpenAFS] Re: Cron Jobs for Regular Users

Hi Thomas, On Wed, 27 Jan 2010, Thomas Kula wrote: [...] It very well could be. If the kvno (which is listed in the klist output) doesn't match kvno in the database (what is displayed with getprinc in kadmin) then you won't be able to authenticate with that keytab. I just did a getprinc

Re: [OpenAFS] Re: Cron Jobs for Regular Users

Hi Russ, thanks a lot for your reply. On Thu, 28 Jan 2010, Russ Allbery wrote: [...] ktadd -norandkey will do this automatically. ktutil doesn't seem like the right tool to use if you're using MIT Kerberos (it's the right tool to use if you're using Heimdal). The problem is that I don't

Re: [OpenAFS] Re: Cron Jobs for Regular Users

Hi Andrew (and all the other list members), ok, first I like to admit that this is actually rather Kerberos- than OpenAFS-related. Sorry for that, but I want to be able to issue cron jobs as an OpenAFS user without having to create both new, dedicated user_name/cron princs and the associated new

Re: [OpenAFS] Localized (non en_US version) of 1.5.68 for Windows available?

Hi Jeffrey, thanks again for your quick reply. On Thu, 14 Jan 2010, Jeffrey Altman wrote: [...] The OpenAFS SMB Server registers the name AFS using NetBIOS. LHMOSTS publishes a mapping of AFS to the static IP address of the loopback adapter. Ok, but what if I just want to install an

Re: [OpenAFS] Localized (non en_US version) of 1.5.68 for Windows available?

Hi Jeffrey, first of all, thanks a lot for your reply. On Tue, 12 Jan 2010, Jeffrey Altman wrote: [...] You can contact Microsoft support to identify where the localized versions of the hot fixes can be obtained. Yes, I'm aware of that, but that wasn't really my point. My point was whether

Re: [OpenAFS] Localized (non en_US version) of 1.5.68 for Windows available?

Hi Jeffrey, first of all, thanks for your quick reply. On Thu, 14 Jan 2010, Jeffrey Altman wrote: [...] Those hotfixes listed as CRITICAL! are very strongly recommended. The content of those hot fixes are built into Vista SP2, 2008 SP2, and Win7. Failure to install the hot fixes can

Re: [OpenAFS] Localized (non en_US version) of 1.5.68 for Windows available?

Hi Jeffrey, thanks again for your quick reply. On Thu, 14 Jan 2010, Jeffrey Altman wrote: [...] You can manually install the Microsoft Loopback Adapter with Add Hardware Control Panel and configure it to match: [...] [x] Enable NetBIOS over TCP/IP [x] Enable LMHOSTS lookup That's

[OpenAFS] Localized (non en_US version) of 1.5.68 for Windows available?

Hi, I downloaded version 1.5.68 for Win and tried to install it on a Win XP Professional SP3 system (32bit). The install of the required KfW 3.2.2 went smoothly and I can also use it for passwordless SSH logins via a PuTTY with GSSAPI support. However, as soon as I checked the three recommended

[OpenAFS] Cron Jobs for Regular Users

Hi, I came accross these two links http://www.mail-archive.com/openafs-info@openafs.org/msg11446.html http://www.faqs.org/faqs/kerberos-faq/general/section-61.html According to that mail, I would need to setup both an additional Kerberos principal and PTS entry for each regular user that wants

Re: [OpenAFS] Current OpenAFS Backup Recommendations

Hi Dan! Thanks a lot for your reply. On Mon, 28 Dec 2009, Dan Pritts wrote: [...] It is disk-based, no tape support at all. You could use a standard tape backup program to back up backuppc4afs's backup store. You may see mention elsewhere that using tape to backup a backuppc data store

[OpenAFS] Why only UDP for RX?

Hi, I've come accross http://www.opensubscriber.com/message/openafs-info@openafs.org/3232709.html and would like to know why UDP instead of TCP has been chosen as the transport protocol? Thanks in advance for any info kind regards, Holger signature.asc Description: Digital

Re: [OpenAFS] Re: Current OpenAFS Backup Recommendations

https://lists.openafs.org/mailman/listinfo/openafs-info -- = Holger Rauch Entwicklung Anwendungs-Software Systemadministration UNIX Tel.: +49 / 9131 / 877 - 141 Fax: +49 / 9131 / 877 - 266 Email: holger.ra...@empic.de

Re: [OpenAFS] Re: Current OpenAFS Backup Recommendations

Hi Adam, thanks for the AFS locations. Which entry do I have to add to my CellServDB file in order to be able to create the mount point for the call megacz.com? Thanks again for sharing this info! Kind regards, Holger On Mon, 21 Dec 2009, Adam Megacz wrote: Holger Rauch holger.ra

[OpenAFS] On-Access Virus Scanning

Hi, what solutions would you recommend for on-access virus scanning on an OpenAFS host acting as a central file server (offering access to home and other AFS volumes to OpenAFS clients running mostly Windows XP)? I know that e.g. the Dazuko kernel module can scan normal ext3 filesystems and is

Re: [OpenAFS] Current OpenAFS Backup Recommendations

reside? (Though I admit that this approach would make it probably impossible to restore individual files). Thanks for any info! Kind regards, Holger On Thu, 17 Dec 2009, Simon Wilkinson wrote: On 17 Dec 2009, at 19:41, Holger Rauch wrote: a) aware of OpenAFS b) can handle autoloaders

Re: [OpenAFS] Current OpenAFS Backup Recommendations

Hi Harald, thanks for your feedback (also to everyone else who's responded so far). On Fri, 18 Dec 2009, Harald Barth wrote: [...] The only commercial product I know of is from teradactyl and that fell for our needs because of prize and tape library support (I don't know if they can share

[OpenAFS] Current OpenAFS Backup Recommendations

Hi, I've got a HP StorageWorks auto loader with LTO3 tape drives connected to a HP ProLiant server running Debian Lenny with OpenAFS 1.4.11 (obtained via backports.org). What open source commercial backup solutions are a) aware of OpenAFS b) can handle autoloaders well ? I should perhaps

[OpenAFS] fs exportafs translator for NFSv4 available?

Hi to everybody, is it possible to reexport OpenAFS volumes as NFSv4 volumes by using the translator(s) offered by the fs exportafs command? If not, is there an alternative approach in order to achieve this? Thanks in advance for any info! Kind regards, Holger signature.asc

[OpenAFS] pam_afs_session.so is unable to find Kerberos ticket cache file

Hi to everybody, The problem I got is that interactive kinit/aklog combos work perfectly, but when I try to log in remotely via ssh, the passwordless login itself works, but a cd to my home dir doesn't occur because pam_afs_session.so is either not considered or doesn't call aklog. The exact

[OpenAFS] Re: pam_afs_session.so is unable to find Kerberos ticket cache file

doesn't need to do anything. === So, the question is: can pam_afs_session.so (or aklog invoked by pam_afs_session.so) use the ticket cache of sshd and how? Thanks in advance kind regards, Holger On Thu, 10 Dec 2009, Holger Rauch wrote: Hi to everybody, The problem I got

[OpenAFS] Re: pam_afs_session.so is unable to find Kerberos ticket cache file

]: (pam_afs_session): pam_sm_open_session: exit (success) === Anything suspicious in there? Thanks again kind regards, Holger On Thu, 10 Dec 2009, Holger Rauch wrote: Rehi, replying to my own mail since I came accross this link: http://www.mail-archive.com/kerbe...@mit.edu

Re: [OpenAFS] pam_afs_session.so is unable to find Kerberos ticket cache file

to work. Holger Rauch wrote: Hi to everybody, The problem I got is that interactive kinit/aklog combos work perfectly, but when I try to log in remotely via ssh, the passwordless login itself works, but a cd to my home dir doesn't occur because pam_afs_session.so is either not considered

Re: [OpenAFS] pam_afs_session.so is unable to find Kerberos ticket cache file

Hi Russ, thanks a lot for mentioning this. Putting forwardable = true in [libdefaults] just works like a charm :-) Kind regards, Holger On Thu, 10 Dec 2009, Russ Allbery wrote: Holger Rauch holger.ra...@empic.de writes: thanks for pointing this out. Indeed, that was the problem

Re: [OpenAFS] Re: LDAP backend for PTS?

Hi Andrew, thanks for your reply. On Tue, 17 Nov 2009, Andrew Deason wrote: [...] Do you mean a way of storing ptserver data in an LDAP backend? Or a way to query ptserver information via LDAP queries? Both, actually. [...] When I wanted something like this, I just set up something to

Re: [OpenAFS] Re: LDAP backend for PTS?

Hi Marcus, thanks a lot for your reply? On Tue, 17 Nov 2009, Marcus Watts wrote: [...] prdb is NOT berkeley db. Ok, I was wrong with this one. Sorry. Why do you care how many berkeley DB's you have? Because I want to store all user/group/authentication related data in a centralized way

[OpenAFS] LDAP backend for PTS?

Hi to everybody, I already have an OpenLDAP server 2.4.x set up on a Debian Lenny system and would like to all user, group, authentication (MIT Kerberos related) info in one Berkeley DB. When using the pts commands without any additional backend, a second Berkeley DB is created and maintained.