[OpenAFS] Tired of sec tools recursively traversing /afs?

2018-06-19 Thread Jeff Blaine
Hello, df --local shows /afs in the listing. Many security tools use 'df --local' to determine local filesystems to traverse recursively. If you're like me, you're tired of security tools traversing the local-but-NOT-LOCAL /afs mountpoint. I've opened a ticket with the Center for Internet Secur

[OpenAFS] same-server partition moves?

2015-12-09 Thread Jeff Blaine
If you had to bulk migrate online volumes across partitions on the same server, would you just stick to 'vos move'? Other options? ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Migrating existing data onto vice partition on the fly

2014-12-30 Thread Jeff Blaine
n run that command again to finalize things. This may or may not be "downtime" for you. -- Jeff Blaine kickflop.net PGP/GnuPG Key ID: 0x0C8EDD02 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Re: System resources requirements and performance tuning for AFS file servers

2014-08-15 Thread Jeff Blaine
OS) or add complexity to our world by using OmniOS or FreeBSD to retain ZFS. -- Jeff Blaine kickflop.net PGP/GnuPG Key ID: 0x0C8EDD02 ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

[OpenAFS] Pre-built packages: build options?

2014-04-09 Thread Jeff Blaine
First, thank you very much for those who donate time and/or resources to provide builds of OpenAFS. How does one determine how these packages were built? What configure args? Are they all done with bare ./configure && make dest ? ___ OpenAFS-info mailing

Re: [OpenAFS] Re: OpenAFS client crashes on RHEL 5.10 and RHEL 6.5

2014-03-29 Thread Jeff Blaine
FYI >From our open RH case for 5.x. Quote is from RH support: "We have requested this regression be repaired in RHEL 5.11 under Bug 1080606, we have also requested that the fix be considered for backport into 5.10.z." ___ OpenAFS-info mai

[OpenAFS] ZFS-on-Linux on production fileservers?

2013-10-04 Thread Jeff Blaine
[ For those running ext3/ext4, a question further down for you as ] [ well! ] We're still a 100% Solaris + ZFS file server shop. We're EOLing our Sun SPARC hardware (with tears in our eyes) this year. Before we spend a significant amount o

[OpenAFS] Volume "type" mapping to certain partitions

2013-01-15 Thread Jeff Blaine
Are people still doing things like mapping user home directory volumes to certain partitions on certain servers, keeping track in a database, etc? What does this buy, assuming all data served from storage comes from like hardware (speed, capacity, etc)? We've kept up this practice and I'm not re

Re: [OpenAFS] Re: OpenAFS wiki organization

2012-11-20 Thread Jeff Blaine
Oh nice. I hadn't seen the changes. Thanks to all involved. On 11/20/2012 2:24 PM, Ken Dreyer wrote: On Thu, Nov 1, 2012 at 7:05 PM, Ken Dreyer wrote: I noticed that wiki.openafs.org has all the pages collected under an "/AFSLore/" sub-directory. My hunch is that is just a legacy thing from wh

Re: [OpenAFS] managing BosConfig in Puppet

2012-11-17 Thread Jeff Blaine
On 11/16/2012 6:23 PM, Russ Allbery wrote: Puppet is primarily a tool for deploying the initial version of the file. Russ, I disagree. Perhaps I misunderstand you, but using puppet like scp is missing the point really. Ken, I recommend establishing templates for a generalized file server and

[OpenAFS] Distro vs. @sys. Round 1: FIGHT!

2012-08-23 Thread Jeff Blaine
RHEL 5 vs. RHEL 6 Both have the same @sys currently. Due to drastic differences in OS libraries present, those (like us), who use @sys in PATH, get bitten. That is, our build of AppX for 'amd64_linux26' that was built on RHEL 5 will not work on RHEL 6, and we need to support both. We had troubl

[OpenAFS] How's 1.6 on Solaris 10 SPARC?

2012-05-31 Thread Jeff Blaine
Are people actively using 1.6 on Solaris 10 SPARC? As client? As file server? As DB server? Anything to note? ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Re: New Keyfile and strange behaviour on clients

2012-05-11 Thread Jeff Blaine
On 5/11/2012 10:03 AM, Andrew Deason wrote: No, it shows tokens for the 'dia.uniroma3.it' cell, but the vice id for the tokens is unknown. I'm clearly not awake yet. Sorry. ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.o

Re: [OpenAFS] New Keyfile and strange behaviour on clients

2012-05-11 Thread Jeff Blaine
- "klist" gives only the krbtgt ticket As it should, unless you've gotten a token. - "tokens" gives this output: Tokens held by the Cache Manager: Tokens for a...@dia.uniroma3.it [Expires May 10 22:50] --End of list-- Shows no tokens. - "aklod" works fine and after this command I hav

[OpenAFS] WARNING: may leave AFS storage and metadata in indeterminate state

2012-04-09 Thread Jeff Blaine
Hi all, Can anyone explain why it is possible for the interruption of a 'vos move' to leave "AFS storage and metadata in indeterminate state"? Dumping from clone 2023894170 on source to volume 2023891400 on destination ...^C SIGINT handler: vos move operation in progress WARNING: may leave AFS

Re: [OpenAFS] Re: Restoring a RW volume that had replicas

2012-04-03 Thread Jeff Blaine
On 4/3/2012 4:16 PM, Andrew Deason wrote: On Tue, 03 Apr 2012 15:50:53 -0400 Jeff Blaine wrote: There should have been no myvol (or id 12340) in the VLDB when the 'vos rename' ran, from what I understand. But you still had replicas on other sites, right? If you have Yes. '

Re: [OpenAFS] Re: Restoring a RW volume that had replicas

2012-04-03 Thread Jeff Blaine
On 4/3/2012 3:35 PM, Andrew Deason wrote: On Tue, 03 Apr 2012 15:27:37 -0400 Jeff Blaine wrote: You restore the RW myvol to fs2:c as myvol.R just fine. vos rename myvol.R myvol fails with "Already exists" Let's say that, for example: myvol has volume id 12340 myvol.R has

[OpenAFS] Restoring a RW volume that had replicas

2012-04-03 Thread Jeff Blaine
I trip over this every time and end up making a whole lot of work for myself. Any knowledge you'd like to share would be appreciated. Let's say vos listvldb myvol states: RW: fs1 a RO: fs1 a RO: fs2 a RO: fs3 a RO: fs4 a Let's say fs1 dies one minute later and it is decided that it is

[OpenAFS] HA RW vols

2012-04-02 Thread Jeff Blaine
What have people had success with (existing solutions in practice) for making RW volumes "highly available"? ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

[OpenAFS] Combo DB + file servers

2012-03-29 Thread Jeff Blaine
Perhaps someone can jog my memory :) Remind me why it was the right thing to do when I separated all DB server functionality from fileserver functionality 9 years ago? Site A fs1 fs2 fs3 db1 db2 db3 Site B fs4 fs5 db4 Strongly considering folding the DB

Re: [OpenAFS] Can't get tokens since upgrading to 1.7.6 and Heimdal

2012-03-16 Thread Jeff Blaine
This is why we strongly recommend that the afs/cell@REALM form of service tickets be used in all cases. afs/cell can be used with Kerberos referrals and when dns realm hierarchies must be searched. A sanity check on this would be greatly appreciated. I've shot myself in the foot before here (a

Re: [OpenAFS] Can't get tokens since upgrading to 1.7.6 and Heimdal

2012-02-22 Thread Jeff Blaine
The problem isn't "it's not finding afs/sub.my@sub.my.org" The problem is: "it's not looking for a...@sub.my.org" It should do that. OpenAFS Quick Start Guide: ... Begin by creating the following two entires in your site's Kerberos database: ... The entry for AFS server processes, called e

Re: [OpenAFS] insmod failure

2012-02-21 Thread Jeff Blaine
On 2/21/2012 11:41 AM, Simon Wilkinson wrote: On 21 Feb 2012, at 16:25, Jeff Blaine wrote: -bash-3.2# /sbin/insmod /usr/vice/etc/modload/libafs-2.6.18-308.el5.mp.ko insmod: error inserting '/usr/vice/etc/modload/libafs-2.6.18-308.el5.mp.ko': -1 Unknown symbol in module You eith

[OpenAFS] insmod failure

2012-02-21 Thread Jeff Blaine
RHEL 5.8 x86_64 with OpenAFS 1.6.0 built just now: -bash-3.2# /sbin/insmod /usr/vice/etc/modload/libafs-2.6.18-308.el5.mp.ko insmod: error inserting '/usr/vice/etc/modload/libafs-2.6.18-308.el5.mp.ko': -1 Unknown symbol in module -bash-3.2# uname -a Linux rcf-linux-beta.our.org 2.6.18-308.el5

Re: [OpenAFS] No space left on device?

2011-12-29 Thread Jeff Blaine
I suspect the filesystem is configured to reserve 5% space. For large and/or non-root filesystems, this is wasteful. Assuming ext3, you can set the reserved space to 1% tune2fs -m 1 /dev/sdb1 Jeff Blaine ___ OpenAFS-info mailing list Op

Re: [OpenAFS] Server (file) host wedge: WARNING: osi_NetIfPoller: ldi_open_by_name failed: 19

2011-12-25 Thread Jeff Blaine
e and simply fail to update the current interface list. However, the root cause of the problem is outside of OpenAFS. You should contact Oracle for a fix. Jeffrey Altman On 12/24/2011 2:15 PM, Jeff Blaine wrote: I'm pretty sure this is the 2nd time we've seen this now. AFS filese

[OpenAFS] Server (file) host wedge: WARNING: osi_NetIfPoller: ldi_open_by_name failed: 19

2011-12-24 Thread Jeff Blaine
I'm pretty sure this is the 2nd time we've seen this now. AFS fileserver ur.our.org wedged today. Our monitoring shows CPU usage pegged at 100% right when the problem happened (didn't escalate over hours...). SunOS ur.our.org 5.10 Generic_144488-13 sun4u sparc SUNW,Sun-Fire-V240 /:ur # strings

Re: [OpenAFS] Happy Holidays -- Another year in the life of OpenAFS

2011-12-23 Thread Jeff Blaine
[ Cue discussion devolving from documentation into ] [ document processing tools/formats after 2 posts. ] Ad... ACTION! ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] RHEL6 allow_weak_crypto in client krb5.conf

2011-11-22 Thread Jeff Blaine
In later versions of OpenAFS we work round this by having aklog use a krb5 function to enable weak crypto for that specific context, but I guess you aren't using that version of OpenAFS yet. We're using 1.4.14.1 ___ OpenAFS-info mailing list OpenAFS-

[OpenAFS] RHEL6 allow_weak_crypto in client krb5.conf

2011-11-22 Thread Jeff Blaine
I'm a little confused. I just had to turn on allow_weak_crypto in a RHEL6 kerberos client's /etc/krb5.conf to be able to aklog. My understanding was that this setting was only needed on the KDCs, which until now, has been working fine since we upgraded our KDCs to 1.9. Is that just because our

[OpenAFS] VL server prefs

2011-11-08 Thread Jeff Blaine
"The Cache Manager sets default VL Server preference ranks as it initializes, randomly assigning a rank from the range 10,000 to 10,126 to each of the machines listed in the local /usr/vice/etc/CellServDB file." Does anyone have info about what happens after the initial VL server preference is se

Re: [OpenAFS] Re: 1.4.x quorum election process?

2011-10-26 Thread Jeff Blaine
We're kind of screwed unless there's a way around it, and really would not like to have to apply a local patch with every rollout. So, is the lowest IP in this setup just really unreliable? I'm not aware of many situations in which this limitation is a show-stopper. It's a single DB server acr

Re: [OpenAFS] 1.4.x quorum election process?

2011-10-26 Thread Jeff Blaine
Have you considered making the "lowest" server a clone? Clones are like other database servers, except that they can never be elected as a sync site. The (default) election winner then would be the next closest. YES! Thank you! I knew there was something added related to this topic. CLONES

Re: [OpenAFS] 1.4.x quorum election process?

2011-10-26 Thread Jeff Blaine
Think about what you would need to do if you were running with this patch locally. Every sysadmin that upgrades these servers must remember that the patch is in place (or how the servers were built/configured) and not forget. If you leave tomorrow, is the next sysadmin going to be burned by this

Re: [OpenAFS] 1.4.x quorum election process?

2011-10-26 Thread Jeff Blaine
There are two sources of documentation that I know about: A long-ago paper by Mike Kazar, and the source code (which actually has reasonable comments). I actually have a copy of the paper if you care. The key source code you want is ${OPENAFS}/src/ubik/vote.c. And in my reading other than the su

[OpenAFS] 1.4.x quorum election process?

2011-10-26 Thread Jeff Blaine
Can anyone point me at the docs where quorum election, IP address numbering as it pertains to election, etc... lives? I can't find what I am looking for on openafs.org I seem to recall that the "highest IP is sync site" (if I have that right) nonsense was addressed, but again, cannot find the mod

Re: [OpenAFS] Re: Kernel panic RHEL 5

2011-10-17 Thread Jeff Blaine
On 10/15/2011 2:08 PM, Andrew Deason wrote: Thanks for the reply, Andrew. Rebooting to single user, the insmod works fine and shows: So, I assume the insmod always works fine, but it panics as soon as afsd is started? Yes, that's what I'd assume as well. What I can see of the panic on the

Re: [OpenAFS] Kernel panic RHEL 5

2011-10-15 Thread Jeff Blaine
Is it possible that ext4 is not allowed for my cache partition? On 10/15/2011 12:47 AM, Jeff Blaine wrote: This has to be something really dumb on my part, but I can't make sense of it. RHEL 5.7 x86_64 2.6.18-274.3.1.el5 SMP on a brand new box. I've tried both of the following,

[OpenAFS] Kernel panic RHEL 5

2011-10-14 Thread Jeff Blaine
This has to be something really dumb on my part, but I can't make sense of it. RHEL 5.7 x86_64 2.6.18-274.3.1.el5 SMP on a brand new box. I've tried both of the following, separately, with the same result: 1. OpenAFS 1.4.14 binaries built from source 20 days ago, copied verbatim from a worki

[OpenAFS] Clear offlinemsg?

2011-10-13 Thread Jeff Blaine
How does one clear a volume's "offlinemsg" as set by 'fs setvol /afs/blah -offlinemsg' ? ~ : ADMIN# fs setvol /afs/rcf/user/jblaine -offlinemsg "" ~ : ADMIN# fs examine /afs/rcf/user/jblaine File /afs/rcf/user/jblaine (536887760.1.1) contained in volume 536887760 Volume status for vid = 536887760

Re: [OpenAFS] Monitoring performance of fileservers using cacti or munin

2011-10-13 Thread Jeff Blaine
I am missing something from the manual pages or openafs documentation? Aside from scout, afsmonitor and xstat_*_test ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Windows file locking do not work on IFS client.

2011-09-28 Thread Jeff Blaine
This would be a bug. Please file bugs to openafs-info@openafs.org. Or ideally openafs-b...@openafs.org ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Re: Solaris 10 SPARC hang on shutdown

2011-09-26 Thread Jeff Blaine
FWIW, not that anyone expected it to change really, but this problem persists with the new Solaris 10 08/11 release and latest Recommended patchset. On 2/28/2011 5:50 PM, Andrew Deason wrote: On Mon, 28 Feb 2011 16:31:49 -0600 Andrew Deason wrote: On Mon, 28 Feb 2011 22:18:22 + Derrick Br

Re: [OpenAFS] OpenAFS-1.7.1 on Windows 7 32 bit

2011-09-24 Thread Jeff Blaine
:33 PM, Jeff Blaine wrote: Thank you for all of the effort getting this released. You're welcome although after 1606 days of development the best thanks would be a month not looking at the code again. :-) Steps forward for me, but I'm not having as much luck as everyone else yet. Im

Re: [OpenAFS] OpenAFS-1.7.1 on Windows 7 32 bit

2011-09-16 Thread Jeff Blaine
Thank you for all of the effort getting this released. Steps forward for me, but I'm not having as much luck as everyone else yet. Important to note, probably, is that the private beta IFS release worked fine for me last I tried 2 months ago or so. Quick grunts as to where to start debugging ar

Re: [OpenAFS] Re: 1.4.14 with 2.6.18-274.3.1.el5?

2011-09-14 Thread Jeff Blaine
On 9/13/2011 11:48 PM, Andrew Deason wrote: On Tue, 13 Sep 2011 21:07:04 -0400 Jeff Blaine wrote: -bash-3.2# time /afs/rcf/user/jblaine/afs-exercise.sh find: WARNING: Hard link count is wrong for .: this may be a bug in your filesystem driver. Automatically turning on find's -noleaf o

[OpenAFS] 1.4.14 with 2.6.18-274.3.1.el5?

2011-09-13 Thread Jeff Blaine
Any ideas here? Known problem? What would you like to have for debugging info? OpenAFS 1.4.14 Linux 2.6.18-274.3.1.el5 Reboot with no AFS Remove entire cache directory contents Start AFS First test run, then immediate problem on 2nd test run of same code: -bash-3.2# time /afs/rcf/user/jblain

Re: [OpenAFS] Re: Performance issues

2011-08-24 Thread Jeff Blaine
For read/write data, if the cache is too small, the cache manager is required to flush data to the file server sooner than it would prefer. Since many files used today are in the GB range, it is not unusual to have caches sizes of 10GB to 20GB. The local disk is cheap; network bandwidth is not.

Re: [OpenAFS] screen loses tokens - Solaris 10

2011-08-15 Thread Jeff Blaine
On 8/15/2011 6:13 PM, Russ Allbery wrote: Jeff Blaine writes: Thanks Russ (and Kevin!). Both hosts are using that option. Identical /etc/pam.conf and /etc/krb5.conf files on both the working and failing hosts. login session optional pam_krb5RA.so minimum_uid=92 retain_after_close

Re: [OpenAFS] screen loses tokens - Solaris 10

2011-08-15 Thread Jeff Blaine
On 8/15/2011 3:34 PM, Russ Allbery wrote: Jeff Blaine writes: How might I go about debugging this? This happens on a host with Generic_142900-03 but not on a host with Generic_144488-17 (nor ever on this latter host at any patch rev -- I have been using/resuming screen on it for years). 1

[OpenAFS] screen loses tokens - Solaris 10

2011-08-15 Thread Jeff Blaine
How might I go about debugging this? This happens on a host with Generic_142900-03 but not on a host with Generic_144488-17 (nor ever on this latter host at any patch rev -- I have been using/resuming screen on it for years). 1. Connect to host with PuTTY 2. Confirm krb5 creds and tokens gotten

[OpenAFS] ETA for 1.4.15?

2011-08-11 Thread Jeff Blaine
Do we have an ETA for 1.4.15 by any chance? Last I heard it was March/April 2011. Looking to have an official/bundled fix for the Solaris 10 hang at shutdown thing. Anything I can do to help the cause? ___ OpenAFS-info mailing list OpenAFS-info@openaf

Re: [OpenAFS] patch : AFS-Monitor (Perl)

2011-07-07 Thread Jeff Blaine
On 7/6/2011 8:26 PM, Steven Jenkins wrote: I talked with Alf, and I'll be taking over ownership of the module. If there are other patches, feel free to let me know. Excellent. Thanks for stepping up! ___ OpenAFS-info mailing list OpenAFS-info@openafs

[OpenAFS] Incredibly simple ways to contribute

2011-06-17 Thread Jeff Blaine
All, please consider reviewing this new list of items which (currently) require zero code knowledge, zero programming, zero protocol knowledge, etc. http://openafs-wiki.stanford.edu/AFSLore/afslore/tinysimpletasks/ If everyone can muster 5 minutes a week or only even 10 minutes per month, it wou

Re: [OpenAFS] Re: Solaris 10 deadlock issue

2011-06-14 Thread Jeff Blaine
Solaris 10 SPARC Failure: Latest recommended and security patches as of 1 hour ago OpenAFS 1.4.11 Failure: Latest recommended and security patches as of 1 hour ago OpenAFS 1.4.14 On 6/14/2011 7:47 PM, Derrick Brashear wrote: That's one kernel context. I'd like to see what the afsds are doing

Re: [OpenAFS] Solaris 10 deadlock issue

2011-06-14 Thread Jeff Blaine
Sweet. I can reproduce this, BTW. Exact same appearance as the problems I reported in the last month. I'll patch this test box to latest recommended and try it again with that too. On 6/14/2011 5:56 PM, Aaron Knister wrote: Good afternoon! I'm writing to report a deadlock issue I'm seeing on

Re: [OpenAFS] Re: Debugging opportunity (time-sensitive)

2011-06-07 Thread Jeff Blaine
I was unable to get a shell this time, but tonight we experienced what I believe to be the same exact thing (total /afs wedge for all processes) on a different Solaris 10 SPARC host with 272 day uptime. [ for the record ] On 5/18/2011 3:59 PM, Jeff Blaine wrote: On 5/18/2011 3:03 PM, Andrew

Re: [OpenAFS] IBM published a guide to configuring Kerberos v5 authentication for OpenAFS

2011-06-01 Thread Jeff Blaine
* The server config uses the old -noauth way to bootstrap Of course. That's the documented way from Quick Beginnings. That's how I just did it in a new testbed cell, too. Where was the "new" way documented when it was developed? ___ OpenAFS-info mai

Re: [OpenAFS] Help: aklog cannot work properly

2011-06-01 Thread Jeff Blaine
On 6/1/2011 1:03 AM, Lee Eric wrote: Hi, It seems aklog cannot work well in my server. [root@server ~]# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: admin@HERDINGCAT.INTERNAL Valid starting ExpiresService principal 06/01/11 00:55:12 06/02/11 00:55:10 krbtgt/HERDI

Re: [OpenAFS] Re: modload failing, Sol10 SPARC, 1.4.14

2011-06-01 Thread Jeff Blaine
On 5/31/2011 6:40 PM, Andrew Deason wrote: On Tue, 31 May 2011 18:10:53 -0400 Jeff Blaine wrote: I then rebooted and got the same result upon trying modload again. I edited: src/cf/osconf.m4 src/libuafs/MakefileProto.SOLARIS.in src/libafs/MakefileProto.SOLARIS.in Well, you need to re

Re: [OpenAFS] Re: modload failing, Sol10 SPARC, 1.4.14

2011-05-31 Thread Jeff Blaine
FWIW, I can't get any workaround to work. Iterative setting of -O to -O2 where I could find it across various builds got me finally to here where I gave up: bash-3.00# /usr/sbin/modload sun4x_510/dest/root.client/usr/vice/etc/modload/libafs64.o can't load module: Out of memory or no room in sy

Re: [OpenAFS] Re: modload failing, Sol10 SPARC, 1.4.14

2011-05-31 Thread Jeff Blaine
Also, Jeff, if you want a quick workaround, you can change -O to -O2 or just leave out the -O option. I think changing the value of KERN_OPTMZ in src/cf/osconf.m4 should be enough... That didn't do it for me. Trying now with -O2 in MakefileProto.SOLARIS.in instead of -O

[OpenAFS] patch : AFS-Monitor (Perl)

2011-05-31 Thread Jeff Blaine
In case Alf never gets to integrating this patch and releasing 0.3.3, here is what is needed to get AFS-Monitor to *build* with modern OpenAFS. I have not tested anything other than building yet, and I am not a Perl extension author of any sort. Original is here: http://www.cpan.org/authors

Re: [OpenAFS] modload failing, Sol10 SPARC, 1.4.14

2011-05-31 Thread Jeff Blaine
Could _memset be defined in one of the Sun header files on Jeff's computer? cd /usr/include find . -type f -exec grep _memset {} \; -print Does not show it on mine. # cd /usr/include/ # find . -type f | xargs grep -l _memset ./mlib_sys_proto.h ./libpng10/png.h ./libpng10/pngconf.h ./libpng12/pn

Re: [OpenAFS] modload failing, Sol10 SPARC, 1.4.14

2011-05-31 Thread Jeff Blaine
Maybe this is something? /usr/lib/abi/appcert/* # grep memset etc.alt etc.scoped etc.alt:ALT_USAGE:inadvertant_static_linking:static linking inadevertantly brings in private symbols:*:__getcontext|__sigaction|__threaded|_bufsync|_cerror|_dgettext|_doprnt|_doscan|_ecvt|_fcvt|_findbuf|_findiop|_

Re: [OpenAFS] Re: modload failing, Sol10 SPARC, 1.4.14

2011-05-28 Thread Jeff Blaine
On 5/27/2011 4:36 PM, Andrew Deason wrote: On Fri, 27 May 2011 16:21:44 -0400 Jeff Blaine wrote: cc: Warning: Option xmodel=kernel is not available on SPARC Solaris platform, ignored Oh, duh. Try -xbuiltin=%none instead of -xmodel=kernel Nope, same old. bash-3.00# grep xbuiltin src

Re: [OpenAFS] Re: modload failing, Sol10 SPARC, 1.4.14

2011-05-27 Thread Jeff Blaine
On 5/27/2011 4:13 PM, Andrew Deason wrote: On Fri, 27 May 2011 15:58:51 -0400 Jeff Blaine wrote: No change. Same error. Did you save a log of the build? Can I see the commands for, say, osi_vfsops.c? (there will be a few instances of it) /opt/SUNWspro/bin/cc -I. -I.. -I../nfs -I/var/tmp

Re: [OpenAFS] Re: modload failing, Sol10 SPARC, 1.4.14

2011-05-27 Thread Jeff Blaine
On 5/27/2011 3:11 PM, Andrew Deason wrote: On Fri, 27 May 2011 14:41:20 -0400 Jeff Blaine wrote: May 27 14:23:25 rcf-afs-test.our.org unix: [ID 819705 kern.notice] /kernel/fs/sparcv9/afs: undefined symbol May 27 14:23:25 rcf-afs-test.our.org unix: [ID 826211 kern.notice] '_memset'

Re: [OpenAFS] Re: modload failing, Sol10 SPARC, 1.4.14

2011-05-27 Thread Jeff Blaine
On 5/27/2011 3:11 PM, Andrew Deason wrote: On Fri, 27 May 2011 14:41:20 -0400 Jeff Blaine wrote: May 27 14:23:25 rcf-afs-test.our.org unix: [ID 819705 kern.notice] /kernel/fs/sparcv9/afs: undefined symbol May 27 14:23:25 rcf-afs-test.our.org unix: [ID 826211 kern.notice] '_memset'

Re: [OpenAFS] Re: modload failing, Sol10 SPARC, 1.4.14

2011-05-27 Thread Jeff Blaine
On 5/27/2011 2:35 PM, Andrew Deason wrote: On Fri, 27 May 2011 14:27:03 -0400 Jeff Blaine wrote: bash-3.00# /usr/sbin/modload /kernel/misc/sparcv9/nfssrv bash-3.00# /usr/sbin/modload /kernel/fs/sparcv9/afs can't load module: Invalid argument dmesg | tail May 27 14:23:25 rc

[OpenAFS] modload failing, Sol10 SPARC, 1.4.14

2011-05-27 Thread Jeff Blaine
/afs /kernel/fs/sparcv9/afs: ELF 64-bit MSB relocatable SPARCV9 Version 1 bash-3.00# ls -ld /kernel/fs/sparcv9/afs -rwxr-xr-x 1 root root 1970568 May 27 14:02 /kernel/fs/sparcv9/afs bash-3.00# -- Jeff Blaine | G06A/ATCC/RCF ___ OpenAFS-inf

Re: [OpenAFS] KDC has no support for encryption type

2011-05-27 Thread Jeff Blaine
On 5/27/2011 1:55 PM, Brandon Allbery wrote: On Fri, May 27, 2011 at 13:01, Jeff Blaine wrote: Ah, I had allow_weak_crypto = yes Then that's not the problem (yes, true, 1, etc. should all work). If that's not it then there may be something else; kvno is an MIT thing and I'

Re: [OpenAFS] KDC has no support for encryption type

2011-05-27 Thread Jeff Blaine
Ah, I had allow_weak_crypto = yes On 5/27/2011 12:23 PM, Brandon Allbery wrote: On Fri, May 27, 2011 at 12:13, Jeff Blaine wrote: Okay, what did I do wrong? MIT Kerberos 1.9.1 and OpenAFS 1.4.14 Recent Kerberos (both MIT and heimdal) disables DES by default; recent OpenAFS knows how to

[OpenAFS] KDC has no support for encryption type

2011-05-27 Thread Jeff Blaine
Last modified: Fri May 27 11:57:19 EDT 2011 (admin/ad...@rcf-afs-test.our.org) Last successful authentication: [never] Last failed authentication: [never] Failed password attempts: 0 Number of keys: 1 Key: vno 2, des-cbc-crc, no salt MKey: vno 1 Attributes: Policy: [none] kadmin.local: -- Jeff

Re: [OpenAFS] Re: Debugging opportunity (time-sensitive)

2011-05-18 Thread Jeff Blaine
On 5/18/2011 3:03 PM, Andrew Deason wrote: On Wed, 18 May 2011 13:51:06 -0400 Jeff Blaine wrote: 0-> afs_osi_Sleep 0 | afs_osi_Sleep:entry event 705ac1bc = 1023, 1, 1, 1, 0, 0, 0, 2062683024, 2062683824, 0, 2062684288 This is looking a little weird,

Re: [OpenAFS] Re: Debugging opportunity (time-sensitive)

2011-05-18 Thread Jeff Blaine
On 5/18/2011 1:25 PM, Andrew Deason wrote: On Wed, 18 May 2011 11:42:45 -0400 Jeff Blaine wrote: 0 -> afs_GetDCache 0-> afs_MemGetDSlot 0 -> Afs_Lock_ReleaseR 0-> afs_osi_Wakeup 0 -> afs_getevent 0

Re: [OpenAFS] Re: Debugging opportunity (time-sensitive)

2011-05-18 Thread Jeff Blaine
MemGetDSlot 0 -> Afs_Lock_ReleaseR 0-> afs_osi_Wakeup 0 -> afs_getevent 0 <- afs_getevent 0<- afs_osi_Wakeup 0 <- Afs_Lock_ReleaseR 0<- afs_MemGetDSlot 0-> afs_osi_Sleep 0

Re: [OpenAFS] Re: Debugging opportunity (time-sensitive)

2011-05-18 Thread Jeff Blaine
On 5/18/2011 11:03 AM, Andrew Deason wrote: On Wed, 18 May 2011 10:36:20 -0400 Jeff Blaine wrote: We have a Solaris 10 SPARC client running 1.4.11 which has hangs any process accessing our cell. Before we announce downtime (sadly, this is a server that is now hosed), if anyone has any

[OpenAFS] Debugging opportunity (time-sensitive)

2011-05-18 Thread Jeff Blaine
[ not subscribing to -dev to post just this ] We have a Solaris 10 SPARC client running 1.4.11 which has hangs any process accessing our cell. Before we announce downtime (sadly, this is a server that is now hosed), if anyone has any interest in figuring out what went wrong toward possibly killi

[OpenAFS] vldb_check

2011-05-17 Thread Jeff Blaine
Okay, what does all of this *mean*? :) syncsite# vldb_check vldb.DB0 Header's maximum volume id is 2023892829 and largest id found in VLDB is 2023892825 Name Hash 225: Bad entry at 318748: Not a valid vlentry Name Hash 524: Bad entry at 237940: Not a valid vlentry Name Hash 532: Bad entry at 18

Re: [OpenAFS] Future of 1.4 release series with regards to new Linux kernels

2011-04-15 Thread Jeff Blaine
As you know, the release of OpenAFS 1.6.0 is imminent. Currently we expect to release OpenAFS 1.4.14.1 with support for Linux kernels through 2.6.38. Going forward, it appears that substantial changes would be needed to support kernels 2.6.39 onwards. To that end, it's our expectation that for the

Re: [OpenAFS] When to publish security advisories?

2011-04-15 Thread Jeff Blaine
My proposal, going forwards, is to not produce security advisories or releases for these local denial of service attacks. Local issues that can result in privilege escalation, or denial of service attacks that can be performed by those outside a sites infrastructure would still result in advisorie

[OpenAFS] SNMP?

2011-03-17 Thread Jeff Blaine
Is there anything queryable in OpenAFS via SNMP? I can only find ancient mailing list comments about it (1998) when searching openafs.org ... and a sad note about Kevin McBride's passing in 2008 when searching Google :( And "No matches found" via http://git.openafs.org/?p=openafs.git&a=search&h

[OpenAFS] Validity testing reads, writes, etc.

2011-03-03 Thread Jeff Blaine
Who has a client-side test suite of sorts to perform common client-side operations and confirm expected outcomes? We could really use something to exercise I/O (not really concerned about performance, but integrity), perform volume creations, volume fills, whatever. __

Re: [OpenAFS] Re: 1.4.14+patches = panic

2011-03-02 Thread Jeff Blaine
On 3/2/2011 10:56 AM, Andrew Deason wrote: On Wed, 02 Mar 2011 10:49:42 -0500 Jeff Blaine wrote: FWIW, that sequence fails as follows: [...] openafs-1.4.14-PATCHED:cairo> git cherry-pick 885dfd0e9d0cb6b4e2e32280a9266d1776ea6859 fatal: Could not find 885dfd0e9d0cb6b4e2e32280a9266d1776ea6

Re: [OpenAFS] Re: 1.4.14+patches = panic

2011-03-02 Thread Jeff Blaine
On 3/2/2011 10:41 AM, Andrew Deason wrote: On Wed, 02 Mar 2011 09:44:42 -0500 Jeff Blaine wrote: And Andrew said: What you want to do is do the above steps, and then apply two patches that I forgot to mention that aren't in 1.4.x yet: "The above steps" be

Re: [OpenAFS] Re: 1.4.14+patches = panic

2011-03-02 Thread Jeff Blaine
On 3/2/2011 9:38 AM, Simon Wilkinson wrote: On 2 Mar 2011, at 14:23, Jeff Blaine wrote: On 3/1/2011 9:08 PM, Andrew Deason wrote: ...not exactly :) After you clone, you do git checkout openafs-stable-1_4_14 But you typed: openafs-1.4.14-PATCHED:cairo> git branch openafs-stable-1_4

Re: [OpenAFS] Re: 1.4.14+patches = panic

2011-03-02 Thread Jeff Blaine
On 3/1/2011 9:08 PM, Andrew Deason wrote: On Tue, 01 Mar 2011 19:30:06 -0500 Jeff Blaine wrote: I'm a TOTAL git newbie, so for the sake of full disclosure, here is how I did the patching: git clone http://git.openafs.org/git/openafs.git git branch openafs-stable-1

[OpenAFS] 1.4.14+patches = panic

2011-03-01 Thread Jeff Blaine
1.4.14 with the Solaris 10 (SPARC) patches Andrew Deason mentioned the other day for the shutdown problem. I saw this yesterday and just thought maybe I was doing something odd. Since it happened again today, twice, I am reporting it. I'm a TOTAL git newbie, so for the sake of full disclosure,

Re: [OpenAFS] Re: Solaris 10 SPARC hang on shutdown

2011-02-28 Thread Jeff Blaine
On 2/28/2011 3:18 PM, Andrew Deason wrote: On Mon, 28 Feb 2011 12:10:54 -0800 Patricia O'Reilly wrote: Even with the patch the wait is about an hour with the init script. To be clear, you mean it takes that long for all of the scripts to run, right? The OpenAFS script itself doesn't take an

Re: [OpenAFS] Re: Solaris 10 SPARC hang on shutdown

2011-02-28 Thread Jeff Blaine
On 2/28/2011 1:31 PM, Andrew Deason wrote: On Mon, 28 Feb 2011 13:13:24 -0500 Jeff Blaine wrote: Has anyone experienced hangs at OS shutdown with OpenAFS 1.4.11 and higher on Solaris 10 SPARC and recent recommended patch clusters (recent = the last 2 months)? Yes. Oracle in update 9 has

Re: [OpenAFS] Solaris 10 SPARC hang on shutdown

2011-02-28 Thread Jeff Blaine
Sorry: Both are AFS clients and not AFS servers Production server hang was 1.4.11 with 10_Recommended cluster from ~2 months ago. Test box hang is 1.4.14 (same exact hang) with 10_Recommended cluster from 3 days ago. On 2/28/2011 1:13 PM, Jeff Blaine wrote: Has anyone experienced hangs at OS

[OpenAFS] Solaris 10 SPARC hang on shutdown

2011-02-28 Thread Jeff Blaine
Has anyone experienced hangs at OS shutdown with OpenAFS 1.4.11 and higher on Solaris 10 SPARC and recent recommended patch clusters (recent = the last 2 months)? We experienced this while upgrading (9 to 10) a production server last week and just moved past it for now to get the box back up. I

Re: [OpenAFS] 3900+ warnings during build for Solaris 10 SPARC

2011-02-26 Thread Jeff Blaine
On 2/25/2011 8:58 PM, Russ Allbery wrote: Jeff Blaine writes: I've noticed both with Solaris Studio 12 and with Sun Studio 11 that the build is loaded with warnings. 1800+ implicit function declaration warnings Is there no concern about these? Unimportant? Is this in 1.4 o

[OpenAFS] 3900+ warnings during build for Solaris 10 SPARC

2011-02-25 Thread Jeff Blaine
I've noticed both with Solaris Studio 12 and with Sun Studio 11 that the build is loaded with warnings. 1800+ implicit function declaration warnings Is there no concern about these? Unimportant? [ As an aside, My successful Solaris Studio 12 build ] [ of 1.4.14 throws a _memset undefined refer

Re: [OpenAFS] Re: aklog build failure, 1.4.14, Solaris 10, Solaris Studio cc

2011-02-25 Thread Jeff Blaine
Weird. I did a make distclean and tried again and it was all fine. I must have started something before that build and didn't clean up. Builds fine, sorry for the noise. On 2/25/2011 2:30 PM, Andrew Deason wrote: On Fri, 25 Feb 2011 14:20:41 -0500 Jeff Blaine wrote: I swear

[OpenAFS] aklog build failure, 1.4.14, Solaris 10, Solaris Studio cc

2011-02-25 Thread Jeff Blaine
I swear I hit something like this a few years ago (2008), but cannot for the life of me find any info on the problem or solution. Solaris Studio 12.2 Solaris 10 SPARC OpenAFS 1.4.14 MIT Kerberos 1.6.3 in /usr/rcf-krb5 make dest ... /opt/SUNWspro/bin/cc -I/usr/rcf-krb5/include -DALLOW_REGISTER

Re: [OpenAFS] Re: Listing all volume mount points

2011-02-24 Thread Jeff Blaine
On 2/24/2011 7:24 PM, Andrew Deason wrote: On Thu, 24 Feb 2011 17:09:33 -0700 Thomas Smith wrote: fs listq provides the information that I need, but I have been unable to determine a way to script this without knowing every mount point beforehand. If you just want to see the usage vs quota,

[OpenAFS] Revival: Recommended way to start up OpenAFS on Solaris 10?

2011-02-21 Thread Jeff Blaine
Best I can tell, the thread ended with this message from David Boyes @ SNA: http://www.openafs.org/pipermail/openafs-info/2010-January/032816.html Anything? Anyone? Did we get anywhere? Just looking to snarf someone's SMF stuff that works. ___ OpenA

Re: [OpenAFS] KfW on Windows 7 / 64 bit

2011-02-02 Thread Jeff Blaine
Have you confirmed that the krb5.ini is correct? On 2/2/2011 12:39 PM, John Tang Boyland wrote: I have a student who is trying to get Kerberos/OpenAFS working on Windows 7 (64 bit). But not even NIM works, it says that validity of identity couldn't be determined When they run kinit in a

  1   2   3   4   >