Re: [OpenAFS] Openafs broken on Ubuntu Hardy ?

2008-10-27 Thread Madhusudan Singh
Hello, Apologies for the long delay. I forgot about this issue as I got busy. I upgraded from -19 to -21 this morning, built and installed openafs-modules-2.6.24-21-generic_1.4.6.dfsg1-2+2.6.24-21.42_i386.deb using m-a as usual, and it still works. Ok. :$ cd

Re: [OpenAFS] Openafs broken on Ubuntu Hardy ?

2008-10-14 Thread Madhusudan Singh
On Tue, Oct 14, 2008 at 12:12 PM, Jeffrey Altman [EMAIL PROTECTED] wrote: Madhusudan Singh wrote: :$ cd /afs/YYY.edu/users/X/Y/Z/XYZABC bash: cd: /afs/YYY.edu/users/X/Y/Z/XYZABC: Permission denied This look like the user you authenticate as, simply doesn't have

[OpenAFS] Openafs broken on Ubuntu Hardy ?

2008-10-13 Thread Madhusudan Singh
Hello, I am running the latest versions of openafs-modules-source, openafs-client and openafs-krb5 on an up to date installation of Ubuntu Hardy. I used modules-assistant to compile the kernel module against my kernel : $ uname -r 2.6.24-21-generic $ sudo apt-cache policy openafs-client

[OpenAFS] LiveCD for openafs disaster recovery scenarios ?

2006-11-06 Thread Madhusudan Singh
Hello At least one (and possibly two) hard disks on the machine (has RAID 5 - rebuild did not help too much) that runs our openafs cell failed today. This is a Debian machine. Partition /usr is down and attempts to mount it fail with bad superblock messages. As a result, all network

[OpenAFS] Questions regarding a vos move

2006-10-04 Thread Madhusudan Singh
Hello, To balance the load across partitions on our group AFS cell, I am thinking of moving some user volumes from /vicepa to /vicepb. I have a user.xyz.backup volume inside each user.xyz mounted at OldFiles. Will it be properly moved if I were to just move user.xyz ? Second, the syntax for

[OpenAFS] Question about disk usage

2006-08-21 Thread Madhusudan Singh
Hello I administer an openafs cell for our research group and have two ~170G partitions assigned for storing user volumes (/vicepa and /vicepb). I was wondering if AFS distributes the volumes over these two partitions or just fills them up sequentially. The usage on our server machine shows

Re: [OpenAFS] Best Practices Seminar 2006

2006-06-06 Thread Madhusudan Singh
Its better to just park somewhere on North Campus, and get Northwood or Bursley-Baits down there. On Tue June 6 2006 4:51 pm, Jim Rees wrote: It's at the Michigan Union: http://www.google.com/maps?f=qhl=enq=530+S.+State+St.+Ann+Arbor,+MIom=1 I don't drive there myself and I don't recommend

[OpenAFS] Practical strategies for a backup in a (very) small cell

2006-01-10 Thread Madhusudan Singh
Hi With extensive help from Russ and others on this list, I setup our afs cell on a debian server many months ago, and it has been working out for us really well. I have defined backup volumes for every user and bos executes a backup process every 24 hours at an unearthly hour. However, the

[OpenAFS] Users having problems getting into their home directories

2005-12-15 Thread Madhusudan Singh
Hi I deployed an openafs server on Debian Linux about 4 months ago. It has a backup process defined under AFS that creates backups at 0100 hrs. It has been up ever since. However, starting this morning, users can no longer get into their volumes. I have rebooted and restarted openafs-client

Re: [OpenAFS] Users having problems getting into their home directories

2005-12-15 Thread Madhusudan Singh
On Thu December 15 2005 16:23, Russ Allbery wrote: Madhusudan Singh [EMAIL PROTECTED] writes: I deployed an openafs server on Debian Linux about 4 months ago. It has a backup process defined under AFS that creates backups at 0100 hrs. It has been up ever since. However, starting

[OpenAFS] WWW access to OpenAFS ?

2005-10-19 Thread Madhusudan Singh
Hi I was wondering if it is possible to set up authenticated access over SSL to user volumes for a cell ? I would, for security reasons, run the webserver on another machine (not in the cell). Thanks. ___ OpenAFS-info mailing list

Re: [OpenAFS] Compatibility of openafs with suspend2 ?

2005-10-02 Thread Madhusudan Singh
On Sunday 02 October 2005 3:21 am, Russ Allbery wrote: Derrick J Brashear [EMAIL PROTECTED] writes: On Sun, 2 Oct 2005, Madhusudan Singh wrote: /usr/src/modules/openafs/src/libafs/MODLOAD-2.6.13.1-rj-SP/osi_sleep.c: In function 'osi_TimedSleep': /usr/src/modules/openafs/src/libafs/MODLOAD

Re: [OpenAFS] Compatibility of openafs with suspend2 ?

2005-10-01 Thread Madhusudan Singh
On Tuesday 27 September 2005 6:33 pm, Jeffrey Hutzelman wrote: On Tuesday, September 27, 2005 05:53:44 PM -0400 Madhusudan Singh [EMAIL PROTECTED] wrote: Hi Over the past 2-3 days, I have tried to add software suspend (using patch from www.suspend2.net) functionality into the kernel

[OpenAFS] Compatibility of openafs with suspend2 ?

2005-09-27 Thread Madhusudan Singh
Hi Over the past 2-3 days, I have tried to add software suspend (using patch from www.suspend2.net) functionality into the kernel (tried 2.6.12 and 2.6.13 - openafs modules compile and install correctly with 2.6.12.5 without this patch) and each time, the compilation of openafs has failed. I

Re: [OpenAFS] Still having problems with PF_FREEZE: Fedora Core 4 w/ Matthias Hensler's SWSUSP2 kernel

2005-09-26 Thread Madhusudan Singh
On Monday 26 September 2005 4:50 am, Murray, WJ (Bill) wrote: Hi, Still complains about PF_FREEZE. I attach the log file. Cheers, James Dunlop Hi James, Yes, I think the function 'todo' is a give away - I am guessing this is not trivial to fix. But you can make

[OpenAFS] Problem compiling debian modules on 2.6.13

2005-09-25 Thread Madhusudan Singh
Hi I am trying to compile openafs modules (among others) on a Debian machine. I get errors : CC [M] /usr/src/modules/openafs/src/libafs/MODLOAD-2.6.13-rj-SP/osi_sleep.o /usr/src/modules/openafs/src/libafs/MODLOAD-2.6.13-rj-SP/osi_sleep.c: In function `afs_osi_SleepSig':

[OpenAFS] Client start issues

2005-09-08 Thread Madhusudan Singh
Hi On my Debian client, /etc/openafs/afs.conf.client reads as : AFS_CLIENT=true AFS_AFSDB=false AFS_CRYPT=true AFS_DYNROOT=true AFS_FAKESTAT=true The following URL is relevant to this email : http://www.eos.ncsu.edu/remoteaccess/linuxopenafs.html#Debian (the end of the section). However, I

[OpenAFS] Configuring an openafs client in a realm A, cell B situation

2005-09-07 Thread Madhusudan Singh
Hi I recently deployed an AFS cell on a Debian server for my research group. Many thanks to people who helped me (a lot) along the way. Most of the users (mainly windows folks) are very happy with the setup. I had also configured a client on the server machine and it works perfectly. Now, I

Re: [OpenAFS] Configuring an openafs client in a realm A, cell B situation

2005-09-07 Thread Madhusudan Singh
On Wednesday 07 September 2005 3:33 pm, Russ Allbery wrote: Madhusudan Singh [EMAIL PROTECTED] writes: When I kinit myname, the authentication hangs. I have not modified authentication mechanisms under /etc/pam.d, but I am under the impression that stuff does not need to be touched

Re: [OpenAFS] AFS, Kerberos, NSS, etc. on Debian

2005-08-30 Thread Madhusudan Singh
What are the ports needed for file server to be able to respond to clients ? Our file server is up and working, users are able to login over ssh with their kerberos credentials, but openafs clients seem to be unable to connect. On Friday 26 August 2005 8:15 pm, Russ Allbery wrote: I think

Re: [OpenAFS] AFS, Kerberos, NSS, etc. on Debian

2005-08-30 Thread Madhusudan Singh
7007/udp I also gave a presentation on this at the AFS workshop a couple of years ago, the slides are at: http://www.sebby.org/afs/ Brian On Tue, Aug 30, 2005 at 05:19:55PM -0400, Madhusudan Singh wrote: What are the ports needed for file server to be able to respond to clients ? Our

[OpenAFS] Re: [Slightly OT] changing UID of a user to 1

2005-08-29 Thread Madhusudan Singh
On Sunday 28 August 2005 3:39 pm, Russ Allbery wrote: Madhusudan Singh [EMAIL PROTECTED] writes: That m_singh is a member of system:administrators makes no difference to how you would change the AFS UID. The answer is, you can't (at least so far as I know; I welcome correction from

[OpenAFS] Re: [Slightly OT] changing UID of a user to 1

2005-08-29 Thread Madhusudan Singh
Thanks for your prompt reply. '/afs/omega.domain.edu/user/m_singh/OldFiles' is a mount point for volume '#user.m_singh.backup' What was the exact command that you ran that resulted in this message? That looks like the output of fs lsmount, not an error. Indeed it was an lsmount in my

[Slightly OT] changing UID of a user to 1 (was Re: [OpenAFS] Debian - openafs -noauth problems)

2005-08-28 Thread Madhusudan Singh
In addition, how does one change the AFS UID of a member of system:administrators ? (Such as m_singh above) ? That m_singh is a member of system:administrators makes no difference to how you would change the AFS UID. The answer is, you can't (at least so far as I know; I welcome

[OpenAFS] Re: [Slightly OT] changing UID of a user to 1

2005-08-28 Thread Madhusudan Singh
On Sunday 28 August 2005 3:39 pm, Russ Allbery wrote: Well, that seems to leave only one option. Change the Unix ID of the user in question to 1. How do I : Change the UID of the user daemon to something else (say 11), change all the ownerships on all the files owned by it on the

[OpenAFS] Re: [Slightly OT] changing UID of a user to 1

2005-08-28 Thread Madhusudan Singh
On Sunday 28 August 2005 4:28 pm, Russ Allbery wrote: Second unrelated question : I have another partition on this server machine (named /vicepb) available for the AFS cell. How do I make it available to user.* volumes ? Restart the file server. It should automatically pick up any

[OpenAFS] Temporary loss of access ?

2005-08-28 Thread Madhusudan Singh
I am working with a new cell, and found that the cell became inaccessible suddenly (ran a bunch of long scp processes that copy files from a remote server) : cd: /afs/omega.domain.edu/user/: Not a directory From df -h : /dev/sda10169G 7.6G 161G 5% /vicepa /dev/sda11

Re: [OpenAFS] AFS, Kerberos, NSS, etc. on Debian (was: Debian - openafs -noauth problems)

2005-08-26 Thread Madhusudan Singh
Thanks for the response and the suggestions. One question here : My setup : Realm A User set b \in B (cell omega - uses A for authentication) User set c \in C (a foreign cell that also uses A for authentication) b is a (very small) proper subset of c. I would like (this is

Re: [OpenAFS] Debian - openafs -noauth problems

2005-08-25 Thread Madhusudan Singh
Allbery wrote: Madhusudan Singh [EMAIL PROTECTED] writes: Thanks for all the help. Ran afs-newcell, got tokens as the admin, and ran afs-rootvol and the whole process seems to have concluded successfully. Thanks for the very helpful scripts. I will be studying the logs to see how this process

Re: [OpenAFS] Debian - openafs -noauth problems

2005-08-24 Thread Madhusudan Singh
Thanks for your exhaustive response. I ran the afs-newcell script : What administrative principal should be used? /admin echo \omega.domain.edu /etc/openafs/server/CellServDB /etc/init.d/openafs-fileserver start Starting AFS Server: bosserver. bos addhost omega omega -localauth ||true bos:

Re: [OpenAFS] Debian - openafs -noauth problems

2005-08-24 Thread Madhusudan Singh
On Wednesday 24 August 2005 12:19 pm, Derek Atkins wrote: Where do you set ThisCell? -derek omega:/etc/openafs# pwd /etc/openafs omega:/etc/openafs# cat ThisCell omega.domain.edu omega:/etc/openafs# cat server/ThisCell omega.domain.edu ___

Re: [OpenAFS] Debian - openafs -noauth problems

2005-08-24 Thread Madhusudan Singh
On Wednesday 24 August 2005 3:33 pm, Russ Allbery wrote: Madhusudan Singh [EMAIL PROTECTED] writes: Thanks for your exhaustive response. I ran the afs-newcell script : What administrative principal should be used? /admin echo \omega.domain.edu /etc/openafs/server/CellServDB /etc

Re: [OpenAFS] Debian - openafs -noauth problems

2005-08-24 Thread Madhusudan Singh
Thanks for all the help. Ran afs-newcell, got tokens as the admin, and ran afs-rootvol and the whole process seems to have concluded successfully. Thanks for the very helpful scripts. I will be studying the logs to see how this process differed from my prior attempt. Your excellent README then

Re: [OpenAFS] Debian - openafs -noauth problems

2005-08-23 Thread Madhusudan Singh
principal be for afs-newcell (the second one I listed ?). Thanks. On Monday 22 August 2005 8:16 pm, Russ Allbery wrote: Madhusudan Singh [EMAIL PROTECTED] writes: Upon getting credentials as user (kinit ; aklog ) , I noticed that : omega:/etc/openafs/server# klist

Re: [OpenAFS] Debian - openafs -noauth problems

2005-08-22 Thread Madhusudan Singh
Hi Thanks for the instructions. I ran dpkg-reconfigure openafs-client, entered the cell name in lower case and answered most of the questions. cat /etc/openafs/server/CellServDB now has OMEGA.DOMAIN.EDU No IP addresses at all. Is this to be expected

Re: [OpenAFS] Debian - openafs -noauth problems

2005-08-22 Thread Madhusudan Singh
On Monday 22 August 2005 1:18 pm, Russ Allbery wrote: Madhusudan Singh [EMAIL PROTECTED] writes: Thanks for the instructions. I ran dpkg-reconfigure openafs-client, entered the cell name in lower case and answered most of the questions. cat /etc/openafs/server/CellServDB

Re: [OpenAFS] Debian - openafs -noauth problems

2005-08-20 Thread Madhusudan Singh
Hi The only reason was that I was under the impression that reiserfs does not work with openafs. Can the cache be located on a reiserfs partition as well ? Thanks, MS On Saturday 20 August 2005 7:15 am, Derek Atkins wrote: Madhusudan Singh [EMAIL PROTECTED] writes: /dev

Re: [OpenAFS] Debian - openafs -noauth problems

2005-08-19 Thread Madhusudan Singh
Hi Thanks for your response. On Friday 19 August 2005 4:10 pm, Russ Allbery wrote: Madhusudan Singh [EMAIL PROTECTED] writes: omega:~# tokens Tokens held by the Cache Manager: User's (AFS ID 2) tokens for [EMAIL PROTECTED] [Expires Aug 13 01:18] --End of list

Re: [OpenAFS] Debian - openafs -noauth problems

2005-08-19 Thread Madhusudan Singh
Thanks for your response. On Friday 19 August 2005 10:02 pm, Russ Allbery wrote: Madhusudan Singh [EMAIL PROTECTED] writes: omega:~# pts exam 2 libprot: a pioctl failed Could not get afs tokens, running unauthenticated. Name: , id: 2, owner: system:administrators, creator

Re: [OpenAFS] Debian - openafs -noauth problems

2005-08-15 Thread Madhusudan Singh
Hi Thanks for your response. On Saturday 13 August 2005 7:41 am, Sergio Gelato wrote: * Madhusudan Singh [2005-08-12 15:34:14 -0400]: Tokens held by the Cache Manager: User's (AFS ID 2) tokens for [EMAIL PROTECTED] [Expires Aug 13 01:18] --End of list-- omega:~# fs setacl /afs

Re: [OpenAFS] Debian - openafs -noauth problems

2005-08-15 Thread Madhusudan Singh
Hi Thanks for your patience. On Monday 15 August 2005 12:44 pm, Sergio Gelato wrote: * Madhusudan Singh [2005-08-15 11:26:16 -0400]: On Saturday 13 August 2005 7:41 am, Sergio Gelato wrote: * Madhusudan Singh [2005-08-12 15:34:14 -0400]: Tokens held by the Cache Manager

Re: [OpenAFS] Debian - openafs -noauth problems

2005-08-15 Thread Madhusudan Singh
Hi On Monday 15 August 2005 2:26 pm, Sergio Gelato wrote: * Madhusudan Singh [2005-08-15 13:26:45 -0400]: My /etc/openafs/server/KeyFile was generated using asetkey from the supplied keytab. How do I check what is going on there ? asetkey list, or use Heimdal's ktutil (package heimdal

Re: [OpenAFS] Debian - openafs -noauth problems

2005-08-15 Thread Madhusudan Singh
On Monday 15 August 2005 4:57 pm, Jeffrey Altman wrote: Madhusudan Singh wrote: I do get a key (kinit) and a token (aklog). (Checked with klist and tokens). Shouldn't that pretty much settle this ? The question is: can the key that is known to the AFS server be used to decrypt

Re: [OpenAFS] Debian - openafs -noauth problems

2005-08-15 Thread Madhusudan Singh
One more thing - I did not create/start kaserver as I intend to use MIT Kerberos v5 exclusively. Could that be a factor ? ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] Debian - openafs -noauth problems

2005-08-12 Thread Madhusudan Singh
Hi On Wednesday 10 August 2005 1:53 pm, Sergio Gelato wrote: * Frank Burkhardt [2005-08-10 10:51:38 +0200]: On Tue, Aug 09, 2005 at 10:01:01PM -0400, Madhusudan Singh wrote: I was wondering if I could ask a few questions regarding AFS setup on Debian. I am trying to follow

Re: [OpenAFS] Debian - openafs -noauth problems

2005-08-12 Thread Madhusudan Singh
Hi Thanks for your response. That's OK, but by follow I didn't necessarily mean run. One can also read the script as documentation and type in the commands by hand. Point taken. One aspect that I found to be insufficiently documented is the need to write your realm name in

Re: [OpenAFS] Debian - openafs -noauth problems

2005-08-12 Thread Madhusudan Singh
Further developments. I decided to bypass the firewall issues for the moment, drop the firewall, and go on to filesystem setup. As I write this, I am logged in as root, and have the kerberos tickets and aklog tokens of user zzz, who is the admin for the AFS server. And omega:~# pgrep -fl afsd

[OpenAFS] Debian - openafs -noauth problems

2005-08-09 Thread Madhusudan Singh
Hi I was wondering if I could ask a few questions regarding AFS setup on Debian. I am trying to follow the instructions http://www.gentoo.org/doc/en/openafs.xml?style=printable in a Cell A, Realm B type setup. # bos setcellname omega.domain.edu omega.domain.edu -noauth bos: failed to

[OpenAFS] One realm and two cells

2005-08-02 Thread Madhusudan Singh
Hi The setup I am trying to put together has a Kerberos realm A, two openafs cells B and C. I administer C, but have no control over A and B. The set of users of A and B (equal) is a superset of users in C. I have received a keytab file that contains the AFS service (using

Re: [OpenAFS] Unresolved symbols with Debian openafs module compilation

2005-07-29 Thread Madhusudan Singh
On Friday 29 July 2005 10:05 am, Sergio Gelato wrote: * John Koyle [2005-07-28 16:10:59 -0600]: Madhusudan Singh [EMAIL PROTECTED] writes: I am trying to compile openafs on Debian Sarge (kernel 2.4.27-1-386) using instructions at : Actually, just use module-assistant (apt-get install

[OpenAFS] Unresolved symbols with Debian openafs module compilation

2005-07-28 Thread Madhusudan Singh
Hi I am trying to compile openafs on Debian Sarge (kernel 2.4.27-1-386) using instructions at : http://www.eos.ncsu.edu/remoteaccess/linuxopenafs.html#Debian (with -append_to_version = -1-386) I get a bunch of unresolved symbols. omega:/usr/src/kernel-source-2.4.27# modprobe openafs

Re: [OpenAFS] Unresolved symbols with Debian openafs module compilation

2005-07-28 Thread Madhusudan Singh
On Thursday 28 July 2005 6:52 pm, Russ Allbery wrote: John Koyle [EMAIL PROTECTED] writes: Actually, just use module-assistant (apt-get install module-assistant). I just installed Sarge this morning and module assistant had me up and running quickly. Yeah, the documentation now recommends

[OpenAFS] PAM issues

2005-07-10 Thread Madhusudan Singh
Hi I am trying to install an openafs server (well, trying to configure it) as a MIT kerberos 5 client (authentication in a realm other than the cell name) on a Slackware 10.1 machine running kernel 2.4.29. Well, Slack does not include PAM, so I installed it after installing openafs

[OpenAFS] How much disk space to allocate for binaries ?

2005-07-08 Thread Madhusudan Singh
Hi Thanks to Derrick's help, I have been able to set up most of the server so far. Now, I am trying to decide the question of setting up space for AFS binaries for clients (currently I have only one client - the server machine itself, but there would be additions later). Does this space have

[OpenAFS] Issues with pts ?

2005-07-07 Thread Madhusudan Singh
Hi I am trying to set up an openafs server / kerberos application server client with Slackware Linux (kernel 2.4.29). I was following the instructions at : http://grand.central.org/twiki/bin/view/AFSLore/InstallingtheFirstAFSMachine and ran up against the following problem : [EMAIL

Re: [OpenAFS] Issues with pts ?

2005-07-07 Thread Madhusudan Singh
On Thursday 07 July 2005 3:28 pm, Derrick J Brashear wrote: On Thu, 7 Jul 2005, Madhusudan Singh wrote: Hi I am trying to set up an openafs server / kerberos application server client with Slackware Linux (kernel 2.4.29). I was following the instructions at : http

Re: [OpenAFS] Issues with pts ?

2005-07-07 Thread Madhusudan Singh
Thanks for your response. [EMAIL PROTECTED]:/usr/vice/etc# fs setacl /afs system:authuser rl fs:'/afs': Connection timed out [EMAIL PROTECTED]:/usr/vice/etc# ls /afs omega.mit.edu/ I assume you are using dynroot. If you are, well, you can't set the acl on a fake directory. It

[OpenAFS] [Possibly OT] Implementing a KDC for OpenAFS

2005-05-21 Thread Madhusudan Singh
Hi This query might be slightly off-topic, but it is related sufficiently to OpenAFS for me to at least try getting some answers here.  I am going through the MIT Kerberos 5 Installation Guide, and have a few questions for the KDC I intend to implement for our group's OpenAFS server(s) : 1.

[OpenAFS] Current documentation ?

2005-05-02 Thread Madhusudan Singh
Hi I was wondering if anyone here could point me to current documentation for OpenAFS server. The documentation on the website is prehistoric (almost :) ) - July 2001. Thanks. ___ OpenAFS-info mailing list OpenAFS-info@openafs.org

Re: [OpenAFS] Deploying OpenAFS on a working server ?

2005-04-29 Thread Madhusudan Singh
Thanks for your long and useful response. Madhusudan Singh wrote: Part of what had weakened my arguments earlier was a realization that openafs had, for a period of time (which I assume has ended), become incompatible with linux kernels 2.6.x. Someone will surely correct me, but I think

[OpenAFS] Deploying OpenAFS on a working server ?

2005-04-28 Thread Madhusudan Singh
Hello folks, I have been an intermittent member of this list. I have a question. Skipping over the turn of events that led to the current state of a server that I am responsible for, I wish to describe the latter and wish to receive some advice regarding implementing an OpenAFS server. The

Re: [OpenAFS] Serious problem upon rebuild

2002-09-22 Thread Madhusudan Singh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Derrick J Brashear wrote: | On Sat, 21 Sep 2002, Madhusudan Singh wrote: | | |What happens if you try loading AFS by hand? | | |I just tried starting it by hand (/etc/rc.d/init.d/afs start) and it |froze the whole system. Had to do a hard

[OpenAFS] Authenticating to two different cells at once ?

2002-05-31 Thread Madhusudan Singh
for umich.edu solve the problem ? Thanks, Madhusudan Singh. ___ OpenAFS-info mailing list [EMAIL PROTECTED] https://lists.openafs.org/mailman/listinfo/openafs-info