Dear OpenAFS,
This is probably a FAQ, but I couldn't find it.
This references the somewhat common situation when a fileserver
goes down.
1. fileserver fails
-- we try to resuscitate it, but fail, and people need access to data,
2. We use the daily backup to create restore volume on a new
end) until the semester break. Meanwhile, I'll just try
to stop using AFS on this machine.
Best regards,
John
] * John Tang Boyland [2015-11-05 20:57:10 -0600]:
] >We're trying to update our "precise" ubuntu systems with
] > openafs-1.6.15. [...]
] >
] >I tried to build from
Dear OpenAFS,
We're trying to update our "precise" ubuntu systems with
openafs-1.6.15. The standard distributions don't have recent
Openafs (esp. 1.6.15) and the launchpad PPA apparently doesn't
work with this old kernel (something about C library, I think).
(It works for "trusty" but not
] On Sun, 15 Feb 2015, John T Boyland wrote:
]
] Dear OpenAFS community,
]
] I upgraded my Ubuntu Trusty system yesterday from 3.13.0-44 to
]
] 3.13.0-46 and openafs didn't get upgraded as well. Trying to build
] the module by module-assistant auto-build openafs-modules
] got the
I'm using Openafs 1.6.5 on Ubuntu 13.04. Due to an interrupted release
and a fileserver that was not yet NetRestrict'ed from using 127.0.1.1
as one of its IPs, the Volume database is left with a bogus entry:
$ vos examine common.usr.local
common.usr.local 536873999 RW 5477
Andrew Deason adea...@sinenomine.net wrote:
] On Mon, 09 Dec 2013 07:37:54 -0600
] John Tang Boyland boyl...@pabst.cs.uwm.edu wrote:
]
] $ vos listaddrs
] peter.cae.uwm.edu
] solomons.cs.uwm.edu
] jeremiah.cs.uwm.edu
]
] Could you 'vos listaddrs -noresolve -printuuid' ?
$ vos listaddrs
Russ Allbery writes:
] John Tang Boyland boyl...@pabst.cs.uwm.edu writes:
]
] /etc/openafs/server$ ls -l
] total 24
] -rw-r--r-- 1 root daemon 99 Apr 6 2006 CellServDB
] -rw--- 1 root daemon 100 Aug 5 2005 KeyFile
] -rw-r--r-- 1 root root22 Nov 7 15:09 krb.conf
] -rw-r--r-- 1
Dear OpenAFS community,
After many years of using Solaris machines, we are transitioning to Linux.
I have used SC Linux and Debian, and now we are using Ubuntu.
Always before, I copied the contents of /usr/afs/etc
to the new machine and started the bosserver and went on from there,
but this
] Andrew Deason adea...@sinenomine.net wrote:
]
] On Tue, 06 Aug 2013 12:17:08 -0500
] John Tang Boyland boyl...@pabst.cs.uwm.edu wrote:
]
] ld.so.1: bos: fatal: relocation error: file
/opt/openafs-1.6.5/root.server/usr/afs/bin/bos: symbol
krb5_free_keytab_entry_contents: referenced symbol
Dear OpenAFS,
I'm trying to upgrade our servers to openafs 1.6.5. One sunx86 is currently
running 1.4.12. I downloaded the binary for openafs 1.6.5 and tried
to use it but it gives the error:
# /etc/init.d/afs start
Entry for afs already exists in /etc/name_to_sysnum
Loading NFS server kernel
] --089e0111bada74077504e34642b1
] Content-Type: text/plain; charset=ISO-8859-1
]
] solaris 9 or 10?
]
] for 10, 120012-14 should include libkrb5.so.1
]
]
] On Tue, Aug 6, 2013 at 5:57 AM, John Tang Boyland
] boyl...@pabst.cs.uwm.eduwrote:
]
] Dear OpenAFS,
]I'm trying to upgrade our servers
wrote:
]
] solaris 9 or 10?
]
] for 10, 120012-14 should include libkrb5.so.1
]
]
] On Tue, Aug 6, 2013 at 5:57 AM, John Tang Boyland
] boyl...@pabst.cs.uwm.eduwrote:
]
] Dear OpenAFS,
] I'm trying to upgrade our servers to openafs 1.6.5. One sunx86 is
] currently
] running
] On Fri, 17 May 2013 16:03:57 -0500
] John Tang Boyland boyl...@pabst.cs.uwm.edu wrote:
]
] $ rxdebug localhost -port 7001 -version
] Trying 127.0.0.1 (port 7001):
] AFS version: OpenAFS 1.6.0-1-debian built 2013-03-21
]
] Could you try this with 1.6.1 or newer, or 1.4.14.1 or older
I've had occasional problems where I get a very quick connection timed out
when trying to write files. Here's the symptoms:
$ tar xvf /tmp/cs854.mail.tar 21 | more
./
./1
./.mh_sequences
./2
./3
./4
./5
...
./295
tar: ./295: Cannot close: Connection timed out
./296
tar: ./296: Cannot open: File
Dear OpenAFS community,
Suddenly today, I was unable to aklog on my MacOSX SnowLeopard:
$ klist
Ticket cache: FILE:/tmp/krb5cc_503
Default principal: boyl...@cs.uwm.edu
Valid starting ExpiresService principal
10/13/12 14:49:05 10/14/12 14:49:05 krbtgt/cs.uwm@cs.uwm.edu
This is a followup with more information and hope for a solution.
I wrote in March about a student who had this error while
running aklog -d (although ultimately successful)
pr_SNameToId Error server or network not responding
but also was able to access /afs/openafs.org but not
Dear OpenAFS community,
This semester I have had a number of students who have problems
to do with kinit. Sometimes, even after installing KfW,
they have the following interaction:
kinit x...@cs.uwm.edu
Password for x...@cs.uwm.edu:
Exception: krb_error 0 Cannot locate
Dear OpenAFS community,
I have a new crop of students attempting to get OpenAFS working on
their computers. OpenAFS 1.7 is working better than OpenAFS 1.6
digression
except that the
need to edit krb5.conf to add allow_weak_crypto = true is annoying.
Students (1) can't find the file
On Fri, 07 Sep 2012 12:47:18 EDT, jalt...@your-file-system.com wrote:
] On 9/7/2012 11:11 AM, John Tang Boyland wrote:
] Dear OpenAFS community,
] I have a new crop of students attempting to get OpenAFS working on
] their computers. OpenAFS 1.7 is working better than OpenAFS 1.6=20
I'm trying to get OpenAFS 1.6.1 running on a new (additional)
Linux server. I've got the keyfiles etc copied over and can start
the bosserver, but it ignores all bos commands sent remotely.
I'm guessing that is because BosLog says:
Listening on 127.0.0.1:7007
I tried adding the real
Michael Meffie mmef...@sinenomine.net wrote:
] On Thu, 30 Aug 2012 09:43:51 -0500
] John Tang Boyland boyl...@pabst.cs.uwm.edu wrote:
]
] I'm trying to get OpenAFS 1.6.1 running on a new (additional)
] Linux server. I've got the keyfiles etc copied over and can start
] the bosserver
Michael Meffie mmef...@sinenomine.net wrote:
] On Thu, 30 Aug 2012 13:45:47 -0500
] John Tang Boyland boyl...@pabst.cs.uwm.edu wrote:
] ] What does netstat say about which interfaces are bound to port 7007
] ] for udp?
]
] Sorry, I don't know how to use netstat:
]
] # netstat | grep 7007
Our institution uses Shibboleth for off campus authentication,
since it keeps the AD (and thus kerberos) servers hidden behind
a firewall. Does anyone know how to have OpenAFS use Shibboleth
for authentication?
John
___
OpenAFS-info mailing list
We have configured our AFS servers to authenticate either using
our institution AD servers or using our own MIT kerberos realm.
We've been trying to get out of producing principals for students
in our own realm and instead use the institution AD servers.
Unfortunately, for security reasons, the AD
On Mon, 04 Jun 2012 at 13:07:36 MDT, Ken Dreyer wrote:
] On Mon, Jun 4, 2012 at 12:51 PM, John Tang Boyland
] boyl...@pabst.cs.uwm.edu wrote:
] We have configured our AFS servers to authenticate either using
] our institution AD servers or using our own MIT kerberos realm.
]
] Our situation
Jeffrey Altman wrote:
] On 3/27/2012 5:30 PM, John Tang Boyland wrote:
] I have a student here at UWM who can run NIM and/or aklog and
] get tokens (albeit VERY SLOWLY) but cannot access \\afs\cs.uwm.edu
] (although they CAN access \\afs\openafs.org). When they
] try to access \\afs
I have a student here at UWM who can run NIM and/or aklog and
get tokens (albeit VERY SLOWLY) but cannot access \\afs\cs.uwm.edu
(although they CAN access \\afs\openafs.org). When they
try to access \\afs\cs.uwm.edu, Windows gives the error:
\\AFS\cs.uwm.edu is not accessible. You might
] About every few hours or so, AFS freezes on a write:
] the attempt to write blocks for about 30 seconds or so.
...
As suspected, there is no problem with the number of threads; the rxdebug
command shows 0 threads used out of 11 while a freeze is happening.
Some people suggested I blacklist
] About every few hours or so, AFS freezes on a write:
] the attempt to write blocks for about 30 seconds or so.
...
As suspected, there is no problem with the number of threads; the rxdebug
command shows 0 threads used out of 11 while a freeze is happening.
Some people suggested I blacklist
About every few hours or so, AFS freezes on a write:
the attempt to write blocks for about 30 seconds or so.
The file server log has entries like:
Tue Dec 20 21:56:41 2011 FindClient: stillborn client 87649a0(1355d694); conn
87c0e18 (host 75.9.160.AAA:7001) had client 875b1a0(1355d694)
Tue Dec
Dear OpenAFS community,
OK. I understand that Heimdal doesn't want to make
allow_weak_crypto = true be the default. And that due to
the work of dedicated volunteers, later versions of OpenAFS 1.7.X
won't require it, but for now since this will affect EVERYONE
who installs the recommended
As a followup to my last post, I attach a proposed change
the Kerberos section of the Windows installation web page:
Kerberos (MIT or Heimdal)
OpenAFS for Windows depends on
a third party Kerberos 5 implementation for network authentication. There
are two supported options:
MIT
Kerberos for
As readers to this list know; I teach a class with 40-50 students every
semester which uses AFS and I have 30+ people trying to install OpenAFS
on their laptops. This exposes many usability problems with the
installation process. I'm pleased with the quality of the software once
it starts
I have found out more information on the Permission Denied problems.
It's nothing to do with AD as far as I know, but rather a set of
understandable but strange interactions with the cache manager.
Conclusion. No problem, just be careful.
Details:
(1) If I add a new key to the (1.4.12)
Jeffrey Altman wrote:
] On 1/17/2012 10:09 PM, John Tang Boyland wrote:
] But if I try to go to a directory which has an ACL of demojb rl,
] it says permission denied. There are no errors in FileLog.
] If I restart the fileserver, then
] after the volumes are reattached, the token works: I
Dear OpenAFS community,
I was able to get my AFS fileservers to work with authentication through
Active
Directory with help from
http://wiki.openafs.org/AFSLore/WindowsK5AfsServicePrincipal/
and also your help (in particular, Jeffrey Altman), but I've noticed some
strangeness.
After aklog
Jeffry Altman writes:
] I assume that you are not regenerating a keytab and installing the new
] key with asetkey. If that assumption is true, then there is something
] wrong because the key known to the file server will never expire unless
] you generate a afs/cs.uwm@adtest.uwm.edu key.
Dear OpenAFS community,
I've been maintaining my own cell (cs.uwm.edu) including a MIT KDC
for realm CS.UWM.EDU. The campus is now providing AD kerberos through a
realm I'll call UWM.EDU. I'd like to use this to authenticate the
majority of users (students in classes) while keeping (for now)
I was able to compile openafs-1.6.0 for Scientific Linux 6 and copy
the server binaries into /usr/afs/bin/.
Now the salvager was able to clean up the corrupted
backup volume. I hand't mentioned in my previous email,
but presumably a related problem prevented vos dump from working
(a zombie backup
Dear OpenAFS,
I've noticed another serious problem with openafs-1.6.0rc2 on
Scientific Linux 6. I have a reprieve of a couple of hours this afternoon and
will try to build an RPM by scratch for openafs-server using directions
kind people have sent in the past, so if this is a known bug, I
[I sent this email to openafs-bugs two weeks ago and got no response.
Perhaps it was the wrong place to send this info.]
(Originally sent September 15th):
If OpenAFS 1.6.0 (downloaded today off web page) is installed
on one of my student's MacOSX 10.7: Lion, then AFS works fine until the
I've had a problem with the new DA file server. It lost an entire directory
and the file server crashed. The symptom that something was going bad was
% touch 176
touch: cannot create 176: File too large
pabst.cs 297 % fs lq .
Volume Name Quota Used %Used Partition
I ask my students to doanload KfW from secure endpoints.
But for some reason the HTML page:
http://www.secure-endpoints.com/index.html#kfw
is VERY slow to load. Just to VIEW the page can take 10-15 minutes,
and that's before one even tries to download the various
software bundles on the
Yet another problem found while trying to get OpenAFS to work on a 64
bit Windows 7. Using my unrecommended way of installing Openafs (first
32 bit and then 64 on top) we got the student's computer working with
OpenAFS. When their tokens expired, OpenAFS stopped working, even
getting new tokens
I'm embarrassed to say that after two years of trying to get students to
successfully install OpenAFS on Windows, I find that one of the
diagnostics I was using is irrelevant. When a student installed OpenAFS
but didn't get things to work, since I don't know Windows at all,
I would try to wander
The student has fixed the problem by cleaning everything out and reinstalling.
They're not sure why the problem went away but guess it may have been because
QUOTE
the OpenAFS service was dependent on some component
name PNP_TDI which was dependent on a service RFCOMM Protocol TDI.
As I looked
I have a new crop of students trying to install OpenAFS on Windows.
I have a student who is able to get Tickets and AFS tokens with NIM:
aklog -d -c cs.uwm.edu
says that there are identical tokens already and doesn't do anything.
(aklog -d tries to get tickets from openafs.org, but that's
I accidentally moved a backed-up volume from partition a to b.
I moved it back, but now the backup volume is misbehaving.
(The process is REPEATABLE!)
I can't seem to remove all traces of it, but neither can I use it.
I can get root access on the (Linux) file server and start hacking files
Andrew Deason wrote:
] On Mon, 29 Aug 2011 14:18:14 -0500
] John Tang Boyland boyl...@pabst.cs.uwm.edu wrote:
]
] NB: FileLog says:
] Mon Aug 29 13:57:10 2011 FSYNC_com_VolOff: failed to get heavyweight
reference to volume 536875958 (state=20, flags=0x18)
]
] 20 is VOL_STATE_DELETED
Derrick Brashear wrote:
] On Tue, Jun 21, 2011 at 4:20 PM, John Tang Boyland
] boyl...@pabst.cs.uwm.edu wrote:
] Today after not using OpenAFS for a few weeks (after at least one restart
] when I increased RAM from 2GB to 3GB),
] I noticed that OpenAFS wasn't working: /afs was empty. fs checks
Today after not using OpenAFS for a few weeks (after at least one restart
when I increased RAM from 2GB to 3GB),
I noticed that OpenAFS wasn't working: /afs was empty. fs checks
didn't report any problems. kinit/aklog worked just fine.
I tried restarting OpenAFS manually using:
$ sudo
] In article 12659.1308687...@pabst.cs.uwm.edu,
] John Tang Boyland boyl...@pabst.cs.uwm.edu wrote:
]
] Is there any way to tell where it's stuck? It faster to cc me
] in a reply since I get openafs-info in digest form.
]
] You can pull up the installer log (Window Installer Log), choose
Jeffrey Altman wrote:
] On 6/21/2011 4:20 PM, John Tang Boyland wrote:
] So that sounds like somehow the configuration got trashed, so
]
] The previous installation didn't work properly. Perhaps a kernel deadloc=
] k?
]
] I downloaded 1.6.0pre6 and started installing it.
] It has been
Jeffrey Altman jalt...@secure-endpoints.com wrote:
] On 4/28/2011 1:20 PM, John Tang Boyland wrote:
] Here is the problem I alluded to earlier:
] I have a student who bought a new laptop with Windows Version 6.1.7600 and
] installed NIM and OpenAFS 1.5.9904 and things ALMOST work
Here is the problem I alluded to earlier:
I have a student who bought a new laptop with Windows Version 6.1.7600 and
installed NIM and OpenAFS 1.5.9904 and things ALMOST work.
They can get tokens and can go to \\afs\openafs.org
and \\afs\cs.wisc.edu but not \\afs\cs.uwm.edu
When they try, they
Dear OpenAFS:
A student just got a new computer running Windows 7 (64 bit)
and has tried to install Openafs:
OpenAFS 64 bit | openafs-en_US-64bit-1-5-9904.msi
Kerberos 64 bit | kfw-amd64-3-2-2.msi
Everything seems to go fine but it's not possible to get tokens:
Output from aklog -d
quote
A student of mine was able to install and run OpenAFS on his Fedora (64 bit)
machine, and can get tokens, but /afs is empty. (df doesn't should /afs
either). The filesystem used by / (inherited by /usr/vice/cache) is ext4.
Is that the problem?
John Boyland
I wrote:
] Since the start of the semester, OpenAFS seems to occasionally hang
] for a few seconds (5? 10?) when trying to do things like write files.
] I finally had it happen while running a script that was doing fs calls,
] and got the message:
] fs:'path-to-directory-in-afs': server not
Since the start of the semester, OpenAFS seems to occasionally hang
for a few seconds (5? 10?) when trying to do things like write files.
I finally had it happen while running a script that was doing fs calls,
and got the message:
fs:'path-to-directory-in-afs': server not responding promptly
The
I have a student who is trying to get Kerberos/OpenAFS working on
Windows 7 (64 bit). But not even NIM works, it says that
validity of identity couldn't be determined
When they run kinit in a command.com window they get the same error
with one (I am typing this from memory) about not
jalt...@secure-endpoints.com wrote:
] On 2/2/2011 12:39 PM, John Tang Boyland wrote:
] I have a student who is trying to get Kerberos/OpenAFS working on
] Windows 7 (64 bit). But not even NIM works, it says that
] validity of identity couldn't be determined
] When they run kinit
A student here got the following error when using the 64 bit MSI
installer for OpenAFS:
Installer Information:
An error occurred during the installation of assembly
'Microsoft.VC80.MFC,type=win32,version=8.0.50727.4053,
publicKeyToken=1fc8b3b9a1e18e3b,processorArchitecture=amd64.
Please refer to
Another semester and more Windows 7 problems. These are all problems
that happen even after a reboot. Today's flavor:
Network Identity Manager can get kerberos tickets but not AFS tickets.
There's a long pause and then it says it couldn't get tickets.
On the Network and Sharing Center Control
Does anyone know of a sudo like command for AFS admin commands?
admindo vos release pkg.foo
It would be nice, but not essential to have the token stick around
for 5 minutes in case you need to do another admindo soon afterwards.
Regards,
John
Anders Magnusson ra...@ltu.se wrote:
] John Tang Boyland wrote:
] Does anyone know of a sudo like command for AFS admin commands?
] admindo vos release pkg.foo
] It would be nice, but not essential to have the token stick around
] for 5 minutes in case you need to do another admindo soon
OK. The problem is solved. Apparently, the student's computer
had MS Loopback Adapter on it, but it was disabled. Once they
selected it from the Network Adapters area and right-clicked
to get a menu and selected Enable, OpenAFS started working.
John Boyland
Even more information on the student with the Windows 7 (64 bit) machine:
Recap:
NIM can't get AFS credentials.
aklog -d indicates that it fails at the very end with ktc 7 error.
NIM indicates that AFS Service is Running.
NET VIEW \\AFS hangs for a LONG time and then prints:
System error 53 has
More information on our problem with WIndows 7 (64 bit) OpenAFS 1.5.77
I have several students who have successfully installed OpenAFS
on Windows 7 and have it working at least for while,
although some said that in order to avoid VERY VERY LONG (*) waits on login,
they had to un-install and then
I have a student who is unable to get AFS tokens using NIM.
(It does get kerberos tickets).
So I tested using the aklog in a command window:
This is using openafs version is 1.5.77 (64 bit)
on a brand-new Windows 7 (64 bit) computer.
We installed 64 bit KfW (from Secure Endpoints)
Here's what
Mickey Lane wrote:
] says John Tang Boyland
] =20
] I have a student who is unable to get AFS tokens using NIM.
] (It does get kerberos tickets).
] =20
] So I tested using the aklog in a command window:
] =20
] This is using openafs version is 1.5.77 (64 bit)
] on a brand-new Windows 7 (64
Jeffrey Altman wrote:
] On 9/14/2010 6:24 PM, John Tang Boyland wrote:
] I have a student who is unable to get AFS tokens using NIM.
] (It does get kerberos tickets).
] =20
] So I tested using the aklog in a command window:
] =20
] This is using openafs version is 1.5.77 (64 bit)
] on a brand
Update:
After a week, I got up early enough to reboot the compute
server when few people were on it. As part of this process
I noticed that it had been set up with a memcache; I changed
this back to a disk cache.
The reason why I think this is a deadlock issue is that the
processes make no
Andrew Deason adea...@sinenomine.net writes
] John Tang Boyland boyl...@pabst.cs.uwm.edu wrote:
]
] [mdb]
]
] Thanks for those. I'm not sure myself what's going on, but perhaps some
] discussion will help...
]
] You appear to be running out of cache files, though, by the way. If you
] increase
[BTW: I get openafs-info messages digested.]
Andrew Deason wrote:
] On Fri, 9 Apr 2010 14:48:34 -0400
] Derrick Brashear sha...@gmail.com wrote:
]
] What about the kernel stack trace for the proc(s) from mdb? Or do you
] know where we're hanging?
]
] nope. i figured fstrace would make it
We get an occasional deadlock happening on Solaris 5.10 using
OpenAFS 1.4.11. After the problem starts, any attempt to use AFS
on the machine freezes: For example:
% truss -f touch /afs/not-here
15694: execve(/usr/bin/touch, 0x08047E20, 0x08047E2C) argc = 2
15694:
] cmdebug or it didn't happen.
]
] On Fri, Apr 9, 2010 at 12:08 PM, John Tang Boyland
] boyl...@pabst.cs.uwm.edu wrote:
] We get an occasional deadlock happening on Solaris 5.10 using
] OpenAFS 1.4.11. After the problem starts, any attempt to use AFS
] on the machine freezes: For example:
I
] What happens if you have exported LANG=C into your environment.
...
19813: lwp_private(0, 1, 0xFEF82000) = 0x01C3
19813: setustack(0xFEF82060)
19813: sysi86(SI86FPSTART, 0xFEF75A58, 0x133F, 0x1F80) = 0x0001
19813: brk(0x08062758)
Derrick Brashear writes:
] [...]
] John Boyland writes:
] ...
] ** Cache entry @ 0xa26da3f0 for 1.536875155.530.1418 [cs.uwm.edu]
] locks: (reader_waiting, write_locked(pid:17732 at:250), 2 waiters)
] 26532 bytes DV 197 refcnt 3
] callback expires
John Sopko wrote:
] We are having intermittent file creation delays. For example if you make
] a directory or vim a file and close the file, it takes 15 seconds or so
] to create the file. The problems seems to be getting worse. The problem
] goes away and then come back, I have seen this problem
] There may be patches in 1.4.7-pre2 that might help.
I tried it, but got no better results:
@(#) OpenAFS 1.4.7pre2 built 2008-04-03
04/03/2008 08:22:21 STARTING AFS SALVAGER 2.4 (/usr/afs/bin/salvager -f)
04/03/2008 08:22:21 Starting salvage of file system partition /vicepa
04/03/2008
OK I compiled the salvager with debugging and without optimization.
filip# /opt/SUNWspro/bin/dbx salvager.debug
For information about new features see `help changes'
To remove this message, put `dbxenv suppress_startup_message 7.5' in your .dbxrc
Reading salvager.debug
Reading ld.so.1
Reading
] (dbx) up
] Current function is DistilVnodeEssence
] 3175 assert(class == vLarge);
] (dbx) list 3170,3180
] 3170 vep-type = vnode-type;
] 3171 vep-author = vnode-author;
] 3172 vep-owner = vnode-owner;
] 3173
I mentioned a few weeks ago about an OpenAFS 1.4.6 Solaris 10 x86 inode
fileserver that refused to attach any volumes and for which the salavager
just coredumps (without leaving any core files?) Repeated salvaging does
nothing except remove a few more vnodes. On the other hand, umounting and
] SalvageLog starts:
] @(#) OpenAFS 1.4.6 built 2007-12-17
] 04/01/2008 17:15:21 STARTING AFS SALVAGER 2.4 (/usr/afs/bin/salvager -f)
] 04/01/2008 17:15:21 Starting salvage of file system partition /vicepa
] 04/01/2008 17:15:21 SALVAGING FILE SYSTEM PARTITION /vicepa
(device=c1t1d0s6)
]
] Do you have logging turned on in this partition? (It should be off.)
Yes, we've known about the problems with logging:
/etc/vfstab has:
/dev/dsk/c1t0d0s5 /dev/rdsk/c1t0d0s5 /usr/vice ufs 2
yes nologging
/dev/dsk/c1t1d0s6 /dev/rdsk/c1t1d0s6 /vicepa afs 3
As people on the list may know, I am in the process of recovering from
complete fileserver failure (lesson: don't use inode servers with Solaris
10 x86). In what follows, filip is an inode Solaris 10 x86
fileserver that cannot attach any of its volumes. eastside is a namei
Solaris 10 fileserver
We just had routine maintenance done to our servers
(Solaris 10 on intel). They are running 1.4.6, but when
one of the servers came back up it couldn't attach any volumes.
This is an inode server.
The shutdown seemed to go fine (see end of FileLog.old at end of
message), but when it came back
Well, I needed access to the files, so I went ahead with salvage,
but my worried were well-founded. I got bad results,
and none of the volumes were salavaged (see log at end of message).
I guess we'll have to go to backups.
John
% bos salvage jeremiah -partition a -showlog
bos: shutting down
] Russ Allbery wrote:
] John Tang Boyland [EMAIL PROTECTED] writes:
]
] ] It looks like you're not running pam_krb5 in the session stack. pam_krb5
] ] should be listed in the session stack before pam_afs_session, and that
] ] will probably fix the problem.
]
] (BTW: This is Sun-provided
Douglas E. Engert wrote:
] What shows up in /var/adm/messages if the /etc/pam.conf has:
]
] dtlogin auth requisite pam_authtok_get.so.1 debug
] dtlogin auth required pam_dhkeys.so.1 debug
] dtlogin auth required pam_unix_cred.so.1 debug
] dtlogin auth optional
I'm using pam_afs_session (v1.4) on Solaris 10 (x86 Generic_120012-14)
and have an interesting problem: the screen login system starts the
session before it does the authentication. I have the Sun-provided
pam_krb5 in the pam stack for auth, but it gets called AFTER
pam_afs_session has tried to
] John Tang Boyland [EMAIL PROTECTED] writes:
]
] I'm using pam_afs_session (v1.4) on Solaris 10 (x86 Generic_120012-14)
] and have an interesting problem: the screen login system starts the
] session before it does the authentication. I have the Sun-provided
] pam_krb5 in the pam stack
] * John Tang Boyland [2007-12-20 08:50:32 -0600]:
] Can someone describe the steps necessary to effect this change? We
] migrated our cell to kerberos V two years ago but still use the
] [EMAIL PROTECTED] shorthand. I would expect that the change involves some
] add_principal and ktadd
Jeffrey Altman wrote:
] Simon Wilkinson wrote:
] So, in the
] interests of fixing this quickly, we're just going to add the
] afs/inf.ed.ac.uk principal, and get on with our lives.
]
] It's unclear to me what the 'correct' solution to actually fix aklog is.
]
] It is my opinion that the
Sorry for the delay: I hadn't convinced myself yet this email was necessary.
But, for the record: using 'aklog.exe' showed that the system
was attempting to get tickets from the wrong realm.
The student re-installed OpenAFS again a few more times and
things started working.
John
I would expect that the simplest model for disconnected AFS
is to simply serve what's in the cache readonly. That would already
be a huge step up from what we have now and while it would serve
old files that have since been changed, by preventing writes, it
avoids most of the inconsistency
Thanks all for the help and pointers.
Unfortunately, none of the pieces of advice helped my student.
He reinstalled OpenAFS 1.5.21 and KfW 3.2.0 and got the same
behavior: if he tries to get AFS tokens: NIM waits about a minute
and says failed to retrieve credentials even though it has
no problem
I have been strongly recommending my students install OpenAFS
on their home computers, but none has been able to get OpenAFS
to work on Windows Vista. Apparently the latest version of
Kerberos For Windows 3.2.1 doesn't include the AFS functionality,
(the AFS tabs don't appear etc)
but 3.2.0 locks
I just realized I got more information from the student:
] I got Kerberos to validate me, but it only lists the
] Kerberos 4 and 5 identity, it does not have an afs
] identity justs lists the afs as blank. When i try to
] start the afs service it says may not have permission
] to perform this
(Since I get openafs-info in digest form, a direct cc is appreciated.)
We are expanding our small AFS cell at UWM. We have new SPARC
blades running Solaris 10 and the inode fileserver. But we've
found it impossible to create or release volumes to the new machine.
(The new machine is called
1 - 100 of 113 matches
Mail list logo
