On 2 Mar 2011, at 14:23, Jeff Blaine jbla...@kickflop.net wrote:
On 3/1/2011 9:08 PM, Andrew Deason wrote:
...not exactly :)
After you clone, you do
git checkout openafs-stable-1_4_14
But you typed:
openafs-1.4.14-PATCHED:cairo git branch openafs-stable-1_4_14
git checkout != git
On 2 Mar 2011, at 15:56, Andrew Deason wrote:
http://git.openafs.org/?p=openafs.git;a=commitdiff_plain;h=6b6064ccacc60eb5a1fe45cc69c65fb621e8980c
http://git.openafs.org/?p=openafs.git;a=commitdiff_plain;h=885dfd0e9d0cb6b4e2e32280a9266d1776ea6859
You cannot (easily) get those from git
On 28 Feb 2011, at 18:32, Harald Barth h...@kth.se wrote:
(fragmented packets are actually more efficient in our RX
implementation than having to process more single packets)
Are there actual numbers from this century to validate this
theory? If yes, I would be interrested to see those.
On 18 Feb 2011, at 19:05, Ken Dreyer ktdre...@ktdreyer.com wrote:
On Fri, Feb 18, 2011 at 12:00 PM, omall...@msu.edu wrote:
It maybe better to have it a part of fedora fusion which I believe has the
openafs binaries as well as codecs, flash, etc which don't have the right
license to be in
On 27 Jan 2011, at 16:14, Andrew Deason wrote:
Is there a way to measure how effective the chunksize is on a live
system?
You can look at the cache performance metrics, and see if your miss
ratios seem worse than before you changed it.
Chunksize does affect more than cache performance
On 28 Jan 2011, at 20:24, Gary Gatling wrote:
I am in charge of several afs servers in our college. Right now
there are 5 afs servers running on 5 SPARC based servers. We are
ditching Solaris since it sucks so bad and are going to move to
Linux VM's running inside of VMware.
Firstly, I
On 6 Jan 2011, at 20:21, Russ Allbery r...@stanford.edu wrote:
My recommendation would be to move kpasswd (and kas) into a separate
package that conflicts with krb5-workstation.
That's the approach I'll take when I get round to building the OpenAFS RPMs on
RHEL6. If anyone would like to
On 5 Jan 2011, at 23:36, Jeff Blaine jbla...@kickflop.net wrote:
Any ideas folks? :(
Have you already got 8 keys in that key file? If so, you'll need to delete one
of them before you can add any more.
S.
___
OpenAFS-info mailing list
On 19 Dec 2010, at 13:52, Alexander 'Leo' Bergolth wrote:
On 12/18/2010 03:50 PM, Simon Wilkinson wrote:
On 18 Dec 2010, at 10:20, Alexander 'Leo' Bergolth l...@strike.wu.ac.at
The running userspace process is always wavparseXXX:sink (gstreamer). It
looks like all of the the crashes
On 18 Dec 2010, at 10:20, Alexander 'Leo' Bergolth l...@strike.wu.ac.at
The running userspace process is always wavparseXXX:sink (gstreamer). It
looks like all of the the crashes are triggered by gstreamer trying to
acquire an advisory lock (fcntl SETLK) on a file that resides in my AFS
On 14 Dec 2010, at 16:09, Dale Pontius pont...@btv.ibm.com wrote:
(I'm currently running RHLE6 with a locally patched 1.4.12.1.)
RHEL6 RPM builds will be available just as soon as CentOS 6 ships. Sadly, we
don't have any RHEL licenses for our build farm.
S.
On 14 Dec 2010, at 20:12, Jeffrey Altman wrote:
2. There are client versions in the wild that already make
this call.
There are two sets of clients which can trigger this bug in the wild:
1) Windows - windows clients between 1.5.21 and 1.5.28, approximately a 4 month
window.
2) Arla -
On 14 Dec 2010, at 15:06, Andrej Filipcic wrote:
Any activity in this direction?
There is some activity, yes. We're just working through some details of the
release process, and hopefully we'll get a 2.6.36 compatible 1.4.x release out
shortly.
Cheers,
Simon.
On 6 Dec 2010, at 04:28, Andrew Deason adea...@sinenomine.net wrote:
Features that are backwards-incompatible, and cause nontrivial downtime
to revert, I'd hope we'd wait at least a release.
We could easily structure this change in a way that preserved backwards
compatibility.
And keep in
On 6 Dec 2010, at 15:34, Andrew Deason adea...@sinenomine.net wrote:
On Mon, 6 Dec 2010 11:07:15 +
Simon Wilkinson s...@inf.ed.ac.uk wrote:
On 6 Dec 2010, at 04:28, Andrew Deason adea...@sinenomine.net wrote:
Features that are backwards-incompatible, and cause nontrivial
downtime
On 5 Dec 2010, at 02:55, Derrick Brashear sha...@dementia.org wrote:
We tell you that you can, and how, to disable this
Perhaps we should ship with it disabled by default?
S.
___
OpenAFS-info mailing list
OpenAFS-info@openafs.org
On 5 Dec 2010, at 21:37, Andrew Deason adea...@sinenomine.net wrote:
On Sun, 05 Dec 2010 10:05:20 -0500
Chas Williams (CONTRACTOR) c...@cmf.nrl.navy.mil wrote:
Perhaps we should ship with it disabled by default?
probably. especially since this is one of those lesser known features.
On 3 Dec 2010, at 03:33, Jeffrey Altman jalt...@secure-endpoints.com wrote:
Since 1.6 is disabling weekly restarts by default, this problem
should be addressed before its release.
Maybe 1.6 should make logging to syslog the default?
S.
___
On 3 Dec 2010, at 18:36, Karen Eldredge karen.eldre...@infoprint.com wrote:
I don't think the translator code gets built by default, and your
error suggests it's not compiled in. Try removing or commenting out
the line that defines AFS_NONFSTRANS in src/config/param.linux26.h and
especially if it also caused the servers to re-read the
not-yet-having-achieved-existance of the config files.
A which back, I imported the Heimdal ini parser into libafsutil, with exactly
this goal in mind. The next part of the puzzle is to add a function to libcmd
which will populate the
AFSLore Wiki was probably started with that idea but, frankly, it
looks broken and inspires little confidence. There is also problem of
repetition, with so many places to store relevant information, we risk
them falling out of sync with each other.
We recently switched from TWiki to ikiwiki
Yep, this is what's happening in the trace Achim provided, too.
Every 4k
we write the chunk. I'm not sure how that's possible unless
something is
closing the file a lot, or the cache is full of stuff we can't kick
out.
Actually, it's entirely possible. Here's how it all goes wrong...
On 23 Nov 2010, at 11:02, Hartmut Reuter reu...@rzg.mpg.de wrote:
The problem here ist that afs_DoPartialWrite is called with each write.
Normally it gets out without doing anything, but if the percentage of dirty
chunks is to high it triggers a background store.
On master, at last
On 23 Nov 2010, at 14:15, Andrew Deason adea...@sinenomine.net wrote:
On Tue, 23 Nov 2010 11:23:03 +
Simon Wilkinson s...@inf.ed.ac.uk wrote:
We need a better solution to cache eviction. The problem is that,
until very recently, we didn't have the means for one process to
successfully
On 22 Nov 2010, at 23:06, Achim Gsell wrote:
3.) But if I first open 8 files and - after this is done - start writing to
these files sequentially, the problem occurs. The difference to 1.) and 2.)
is, that I have these 8 open files while the test is running. This simulates
the putc-test
On 22 Nov 2010, at 23:56, Achim Gsell wrote:
Sounds reasonable. But I have the same problem with a 9GB disk-
cache, a 1GB disk-cache, 1GB mem-cache and a 256kB mem-cache: I can
write 6 GB pretty fast then performance drops to 3MB/s ...
How much memory does your test machine have?
S.
On 5 Nov 2010, at 07:44, Andrej Filipcic wrote:
the current openafs 1.4.12.1 does not compile the libafs module with kernel
2.6.36, although it does with the latest stable branch. What is the schedule
for the next stable release?
If you can identify the changes that are necessary for
On 30 Oct 2010, at 12:02, Lars Schimmer wrote:
asetkey add 1 /tmp/afs-keytab afs/cgv.tugraz.at
asetkey: unknown RPC error (-1765328203) while extracting AFS service key
I think that error (181 in the Kerberos 5 error table) is kt entry not found.
What does klist -k say about the contents of
On 27 Oct 2010, at 18:33, Andrew Deason wrote:
I haven't done this in OpenSuSE before, but I think the tools are
similar as in RHEL. If you have crashtool and the debuginfo package for
your running kernel installed, you should be able to just run 'crash'
and then 'dis
Lock afsdb_client_loc status: (none_waiting, write_locked(pid:2766 at:685))
This means that we're in the middle of a call out to the user-space DNS helper.
Are you relying on the DNS for information about your cell location? Since you
changed the IP address of your machine, can you still
On 8 Oct 2010, at 17:24, Andrew Deason wrote:
On Fri, 08 Oct 2010 23:03:11 +0200
Matthias Braun matthias.br...@kit.edu wrote:
The first few rmdirs are fast after that it takes around a second or
so per rmdir... This does only happen for non-empty directories. Is
there a conceptual problem
On 1 Oct 2010, at 14:17, a...@setfilepointer.com wrote:
Of course, there are lots of other wish-list things for OpenAFS, like my
favorite, file encryption in the cache manager (so the files are already
encrypted when they arrive at the fileserver.)
We had a Summer of Code project
On 2 Oct 2010, at 20:04, Russ Allbery wrote:
Chas Williams (CONTRACTOR) c...@cmf.nrl.navy.mil writes:
i suspect openafs should be prefixing its build vars with AFS_
(or OPENAFS_) so that users can overload the 'standard' variabales.
i believe this needs revisited anyway since i am not sure
On 1 Oct 2010, at 16:52, Jonathan S Billings wrote:
When installed, along with the dkms package
(http://download.fedora.redhat.com/pub/epel/5/x86_64/repoview/dkms.html) and
the GCC compiler, it will automatically compile and install a new openafs.ko
every time you install a new kernel.
It
On 1 Oct 2010, at 18:07, David Boyes wrote:
Yeah, sorry. :/ We're not using Autoconf properly in a lot of ways.
We're closer than we were, but the configure and build machinery still
needs a lot of cleanup.
I need to do some work in this area as well. Is there a set of requirements,
or
Do you have SE Linux enabled?
If so restoreconn /afs should solve your problem.
This is a known fault in the RPMs. We should ship /afs in the RPM
rather than creating it in a post install script. Patches welcome.
S.
--
The University of Edinburgh is a charitable body, registered in
On 28 Sep 2010, at 20:05, Phillip Moore wrote:
I've had no problems until I'm supposed to set the AFS server encryption key,
but the instructions say:
•# asetkey add kvno /etc/afs.keytab afs/cell name
and there's no asetkey to be found. I've installed the following RPMs
On 20 Sep 2010, at 18:20, Rick Cochran wrote:
I copy a file from a Ubuntu 10 machine with openafs-client 1.4.12+dfsg-3 and
read it from a Scientific Linux 2.6.18-128.7.1.el5 machine with
openafs-client-1.4.12-el5.1.1. The checksum is wrong on the reading end, and
it changes to a
On 20 Sep 2010, at 20:34, Rick Cochran wrote:
On 09/20/2010 01:45 PM, Simon Wilkinson wrote:
On 20 Sep 2010, at 18:20, Rick Cochran wrote:
I copy a file from a Ubuntu 10 machine with openafs-client 1.4.12+dfsg-3
and read it from a Scientific Linux 2.6.18-128.7.1.el5 machine
On 9 Sep 2010, at 23:44, Shane Warner wrote:
Maybe using -memcache would give you a nice performance increase.
With 1.5.x, the performance difference between disk cache and memcache is
significantly smaller, particularly in use cases which see a large percentage
of cache hits (such as this
On 3 Sep 2010, at 21:56, Derrick Brashear sha...@dementia.org wrote:
run 'groups' before and after?
I'm away at the moment, so I'll be brief. When I investigated this my
observations were that the user still had their original PAG group,
and still had PAG related keyring entries. None of
On 3 Sep 2010, at 04:24, Olin Shivers olin.afs.
7...@shivers.mail0.org wrote:
Has anyone else had any luck with disconnected mode?
I'm aware of a number of people who are successfully using
disconnected mode. Whilst it is not without some rough edges, it is
certainly stable enough for
On 24 Aug 2010, at 17:36, Douglas E. Engert wrote:
On systems with keyring support, is there any way to tell AFS to NOT
put the PAG number into the groups?
No, and on 1.4.x systems, that number is still required.
On 1.5.x we solely use the PAG details, but the group number is still
On 24 Aug 2010, at 17:45, Andrew Deason wrote:
There's the --disable-linux-syscall-probing configure flag, though iirc
the purpose of that in 1.4 was to get around build errors.
Other options include: run a kernel where we can't patch the syscall
table, or run a late-1.5 / 1.6 client.
On 20 Aug 2010, at 15:05, Gémes Géza wrote:
We currently have a small cell (2 db and file-servers
(1.4.7.dfsg1-6+lenny1), ~50 volumes). But plan to move the user home
dirs to afs resulting in 1000 volumes. Being afraid of the fs based
startup times we decided to move to a 1.5 based dafs
On 11 Aug 2010, at 10:17, TIARA System Man wrote:
i have one directory which contents 67,434 files in ext3 directory. i
can't copy all files into an afs directory. do you have any suggestion
of this issue? what is the maximum number of files per directory?
man fileserver says:
The
On 15 Jul 2010, at 03:16, Todd Lewis wrote:
On 07/14/2010 01:43 PM, Jonathan Nilsson wrote:
I would like to replicate home directories (and other AFS volumes that
are primarily accessed read/write) for the purpose of faster disaster
recovery in certain common cases, such as local hardware
On 14 Jul 2010, at 19:04, Thomas Kula wrote:
My only concern with this thing would be having users that are
crafty enough to know that they can mount some other volume
in their home directory, but who haven't picked up on that
since they've mounted it under a forced r/w path they will
On 7 Jul 2010, at 19:07, Jaap Winius wrote:
Yes, I saw that on the road map. So, then all we have to do is wait a few
years, after which disk-based backups on AFS volumes will become possible,
correct?
Marc Dionne, who's been doing the per-file ACL work, presented at this years
Workshop
On 20 Jun 2010, at 12:37, Derrick Brashear wrote:
I assume since the commit messages are part of the sha1, we can't do
back and rewrite the world we have.
Indeed. But, gerrit will actually only know about changes with a fixes footer
that are committed after that patch is applied, so it's
On 20 Jun 2010, at 22:25, Adam Megacz wrote:
Is there a reason why tmpfs isn't supported (1.5.74)?
Because your kernel module and afsd aren't built with the USE_FH option, which
enables support for filesystems which have complex file descriptors. We turn on
USE_FH when the kernel doesn't
On 17 Jun 2010, at 16:29, Andrew Deason wrote:
If you're only using volumes for home directories, or things like group
collaboration space, then RO volumes are not very useful to you.
Actually, that's definitely not true in my experience. See below.
As you mentioned, they can also 'kinda' be
On 17 Jun 2010, at 19:45, Christopher D. Clausen wrote:
Its fine to not have it enabled by default, but I can't see why one would
remove the functionality from the source tree.
Because every different configuration option you have doubles the complexity of
testing the code. What actually
On 17 Jun 2010, at 21:29, Russ Allbery wrote:
Steven Jenkins steven.jenk...@gmail.com writes:
I thought that enabling DAFS to be on by default was the major feature
of 1.6.
Shipping DAFS and declaring it supported is the major feature of 1.6.
Making it the default is another question
On 17 Jun 2010, at 21:40, Russ Allbery wrote:
There is that. I intend to ship with DAFS enabled for Debian, but the
Debian packages have always taken a fairly aggressive approach to enabling
features. (They have had supergroups enabled for quite some time, for
example, and also enable
On 12 Jun 2010, at 21:46, Adam Megacz wrote:
This is using openafs_1.5.74.1-1.dsc (Debian). I can probably kludge my
way around it, but I figured in the run-up to 1.6 y'all would like to
know about it.
I've pushed a fix for this to gerrit - http://gerrit.openafs.org/2127
What's slightly
On 13 Jun 2010, at 01:00, Marc Dionne wrote:
Looking at that section of code I don't see the link with the NFS
translator. I think it will get compiled if keyring support is not
enabled in the kernel.
That's true, sorry. I'd got confused with different bits of code.
However, this is now
On 10 Jun 2010, at 22:52, Derrick Brashear wrote:
Does anyone know when the yum repository for Fodera 13 would come
out? It
looks like RPM fusion has openafs rpms available already. But I
think I read
somewhere before that they are not directly from openafs.org.
Indeed, the RPM Fusion
On 20 May 2010, at 22:36, Rick Cochran wrote:
I'm having trouble understanding the following.
Does 'fs checkvolumes' solve the problem?
If so, my suspicion is that there's a caching problem somewhere, where the
client is caching the ID of the backup volume, and not invalidating that cache
On 19 May 2010, at 13:29, Mark Huijgen wrote:
Would it be safe to apply this NAT ping functionality to the 1.4.x
series also?
Define safe.
The problem here is that this is very definitely new functionality. Different
people have different views on how stable the 1.4.x tree should be. Some
On 2 May 2010, at 08:35, Dirk Heinrichs wrote:
But AFAIK the .volume path is only relevant if RO replicas exist for a
given RW volume, right? If there aren't any ROs for an RW, the path is also
/afs/cellname/volume, isn't it?
Yes. That's right. The other critical thing is that all of the
On 26 Apr 2010, at 19:39, Adam Megacz wrote:
Jeffrey Altman jalt...@secure-endpoints.com writes:
When a whole file lock is write-held, all of the dirty data in the cache
must be written back to the file server before the lock is released.
This is currently not being done and as a result,
On 26 Apr 2010, at 04:18, Brandon S. Allbery KF8NH wrote:
If I understand Simon correctly, clients are also not getting file
updates while the file is opened O_RDWR. That would still seem to be a
problem even if we flush on unlock.
Flushing will update the server, which will break
On 25 Apr 2010, at 15:19, Holger Rauch wrote:
So, my question is: Why is there almost no decrease when using SCP
with a strong encryption algorithm (compared to plain DES that AFS
uses) but there is *drastic* decrease in performance with only plain
DES enabled compared to an unencrypted
On 24 Apr 2010, at 19:04, Carson Gaspar wrote:
They have already committed to fix it, FYI. Or they had as of a month or 2
ago.
Currently, my knowledge is based on Red Hat's response to bugzilla bug #585286,
which states: I will be proposing that patch for inclusion in RHEL6 although
it's
On 24 Apr 2010, at 19:00, Holger Rauch wrote:
(Both dd commands were run directly on the file server host in order
to rule out possible network latency problems as a cause for the bad
performance).
So, it's very important to realise that this is a terrible comparison. Whilst
both
On 22 Apr 2010, at 08:42, Hans-Werner Paulsen wrote:
I do not know the exact semantics of the AFS filesystem, and
therefore I
do not know that it is a bug. Is it really a bug?
Running the following program on machine A
fd = open(xxx,O_RDONLY);
while (1) {
ret = fstat(fd,buf);
On 21 Apr 2010, at 14:26, Hans-Werner Paulsen wrote:
On Wed, Apr 21, 2010 at 08:46:54AM -0400, Derrick Brashear wrote:
if you have a valid callback, the file better be up to date. uh
Hm, I do not understand. I have the following code on one client:
(1) fd = open(afs-file,O_RDWR)
(2)
On 15 Apr 2010, at 16:20, Booker Bense wrote:
YAML might be a reasonable compromise if there's only the tuit's
to get one new option.
I suspect that there aren't the tuits for any new options. If those expressing
a desire for csv, xml, yaml, etc. want any of them, I'm sure patches would be
On 13 Apr 2010, at 15:02, Todd Lewis wrote:
Clearly the multi-line form is easier for humans to read, and the
related-data-on-one-line form is far simpler for scripts to parse. By far.
In both cases.
I don't think we should be catering for people parsing command output (beyond
recognising
Private addresses for purposes other than AFS.
I believe I am using NetRestrict to avoid the servers from picking up
these:
We had this problem with our DB servers here. It would appear that you also
need to specify -rxbind, to stop the servers from sending packets from
interfaces that are
On 8 Apr 2010, at 12:22, Todd Lewis wrote:
In a word, no. If your multiple clients were on the same host, then
that
host could enforce the locking sqlite attempts, but from multiple
hosts
you lose.
This is actually only true on Linux. On other operating systems,
OpenAFS doesn't enforce
On 7 Apr 2010, at 19:28, Russ Allbery wrote:
I agree with your general impression
that up until now we've not really been there on Linux, but we seem
to be
stabilizing.
Those of us actively developing on Linux have been running the 1.5
series for ages. The fact that other people are
A year or two back I was having some odd cache issues with the stable
client. I hacked the init script (This is Gentoo, by the way.) to
clear
the cache each time right before starting the client.
And, of course, you reported these problems, and we fixed them in a
later release?
I'll
On 25 Mar 2010, at 15:36, John W. Sopko Jr. wrote:
Does anyone have a clue why the tokens command sometimes shows the
(AFS ID ) and sometimes it does not as shown below? The
problem is intermittent.
The systems are rhel5, openafs 1.4.11, using redhats pam_krb5afs.
This occurs when
On 24 Mar 2010, at 15:14, Andrew Deason wrote:
That's... interesting. Would you be willing to share a core
Absolutely not meant as a personal comment, but it's important to remember
fileserver cores may contain your cell-wide key, and you definitely don't want
to share them publicly without
On 17 Mar 2010, at 12:03, John W. Sopko Jr. wrote:
I am using the default medium file server arguments. I have recently
rebooted our file and db servers.
Not that I think this is your problem, but medium is almost certainly
too small for today's hardware.
We've seen problems like this
On 17 Mar 2010, at 13:44, emat...@yahoo.com wrote:
Hello- apparently the source entry in the openafs.repo is not set
up correctly. I get this error when trying to download a source
file using yum:
Enabling openafs-source repository
On 17 Mar 2010, at 20:24, emat...@yahoo.com wrote:
I have noticed a significant delay (30 seconds or more) for a user
logged in through an AFS account to open the root account via the
command su. This delay does not happen for a local account. I'm
not sure where to start looking for this
On 17 Mar 2010, at 21:52, emat...@yahoo.com wrote:
Since pam_afs_session.so is not listed, I'd guess you are right, and that is
not the source of the delay.
system-auth is listed, which means that it uses the contents of the system auth
stack that you have already posted. So, I suspect you
On 15 Mar 2010, at 13:35, emat...@yahoo.com wrote:
I'm getting many, but I mean, many call traces with openafs on my Fedora 12
x86_64 system running recent kernels. I've included one below. Is this a
real kernel crash, and if so, is there a fix for this? Or is it harmless?
This is the
On 15 Mar 2010, at 14:08, emat...@yahoo.com wrote:
As a follow up to your response- will this problem go away for kernel
version 2.6.33? If so, perhaps I can upgrade to that version.
It will, yes.
As an alternative- can I fix this by downgrading the kernel to some lesser
version (say
On 8 Mar 2010, at 07:21, Robert Sturrock wrote:
.. and what I want to move to instead is:
hermes1 (VM) - RHEL5, OpenAFS 1.4.10
hermes2 (VM) - RHEL5, OpenAFS 1.4.10
hermes3 (VM) - RHEL5, OpenAFS 1.4.10
ie. replace physical machine telos with a VM.
Just a quick sanity check here - I
Quoting Jeff Blaine jbla...@kickflop.net:
Fresh 'make dest' build on this box in /tmp
Did you run configure after upgrading your kernel? Configure sets what
kernel version is being built, not make.
S.S.
--
The University of Edinburgh is a charitable body, registered in
Scotland, with
On 5 Mar 2010, at 19:37, eric.hagb...@morganstanley.com wrote:
On Fri, 5 Mar 2010, Simon Wilkinson wrote:
However, if this was happening correctly, Eric should be seeing his
system load peak and trough. Performance will be good every 10
minutes, and then slowly deteriorate until the next
On 5 Mar 2010, at 01:20, eric.hagb...@morganstanley.com wrote:
I've found that if you run a program to generate tokens and pags
frequently (about once per second), that fairly soon, the cpu system
time on the machine will begin to swallow performance, though it
takes a little while to
knfs still exists. I have no idea if it works, but it's there. And it
doesn't imply a hacked NFS client, from how I'm reading that section.
It's run on the NFS server, and associates NFS client accesses from
UID
X to be associated with AFS tokens Y.
There's a version for Solaris, which was
On 5 Mar 2010, at 18:34, eric.hagb...@morganstanley.com wrote:
This took a little longer to set up than I'd hoped, as 1.5.72
doesn't work under RHEL4 (the platform on which I was doing most of
my tests), due to the lack of zero_user_segments and page_offset in
the compiled kernel module.
High number of calls to afs_ComputePAGStats, resulting in system
time being consumed unreasonably, due to it and corresponding
text.lock.spinlock system calls.
I can't see a call to afs_ComputePAGStats in afs_user.c - are you
just
commenting out the body of the function, or is there a
On 5 Mar 2010, at 18:57, Andrew Deason wrote:
We call afs_pag_destroy when the key goes away, but that only
invalidates the credentials; it doesn't remove it from the appropriate
afs_users chain. So, correct me if I'm wrong, but I think until we
afs_GCUserData, afs_users lists can grow very
On 5 Mar 2010, at 19:12, Andrew Deason wrote:
Okay, but how about signalling something else to do the cleanup, then?
Say, afs_Daemon (if it has nothing better to do) could unlink the
marked
unixuser(s) for us. It could just check a list of unixusers to
unlink or
something on each iteration,
I've volunteered to take a poke at this and I'm using these
guidelines.
1. Replace references to klog, with the kinit and aklog pair of
commands.
2. Delete all references to AFS enabled remote commands and replace
with references to equivalent OpenSSH commands where appropriate.
3.
On 3 Mar 2010, at 18:12, Andrew Deason wrote:
On Wed, 3 Mar 2010 09:31:26 -0800 (PST)
Booker Bense bbe...@slac.stanford.edu wrote:
1. Replace references to klog, with the kinit and aklog pair of
commands.
klog.krb5 may be worth mentioning, as it avoids having a
possibly-undesirable ticket
On 3 Mar 2010, at 18:28, Russ Allbery wrote:
Simon Wilkinson s...@inf.ed.ac.uk writes:
It might be, but I think documenting multiple ways of doing things is
likely to be confusing to a novice user. We should pick one mechanism
and stick to it, and aklog is probably the best one to choose
On 3 Mar 2010, at 18:31, Chaz Chandler wrote:
Sounds pretty good for linux-type systems. On IRIX, pam is broken and
most of the login stuff in the docs is still current. I suspect that
sections of the docs that deal with the less-popular unix variants are
still largely applicable.
We're
On 3 Mar 2010, at 18:46, Russ Allbery wrote:
In practice, at least 95% of our users are going to be using Kerberos.
Making the common case go more smoothly is a good idea, and that
includes
at least documenting things like how you make aklog use a different
ticket
cache and possibly some
On 3 Mar 2010, at 19:13, Russ Allbery wrote:
Er, many OpenAFS users do not have simple control over their Kerberos
configuration without duplicating it and setting environment
variables.
And for debugging purposes, it's obnoxious to have to make a
separate copy
of krb5.conf and mess around
On 2 Mar 2010, at 10:01, Ken Elkabany wrote:
Is this expected behavior? I don't recall this being a problem when
all our servers were on openafs 1.4.9. Is there a way to force the
synchronization?
This sounds like your clients are missing callback notifications. Is
there anything funky
At one time, the OpenAFS users guide ( http://doc.openafs.org/UserGuide/index.html
) was a great place for new users of AFS to get started. It lays out
the principles of AFS clearly, and guides users around many of the
pitfalls they might encounter.
However, it has rotted badly. It's stuck
On 3 Mar 2010, at 00:28, Jason Edgecombe wrote:
Hi,
Since MIT released their kerberos 1.8 software today and it disables
single DES by default, what steps should we take to educate new
users about this? Any suggested specfiic documentation changes?
We should push people towards 1.4.12,
101 - 200 of 410 matches
Mail list logo
