Re: [OpenAFS] Questions regarding AFS ticket lifetime

2012-04-20 Thread Lars Schimmer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2012-04-20 07:52, Anders Nordin wrote: Ok, Bear with me because I might not have formulated the questions correctly, I'm mostly a Windows admin and not entirely up to speed on the AFS/Kerberos lingo. Environment: Windows 7 x64

Re: [OpenAFS] Questions regarding AFS ticket lifetime

2012-04-20 Thread Arne Wiebalck
On Apr 20, 2012, at 9:35 AM, Lars Schimmer wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2012-04-20 07:52, Anders Nordin wrote: Ok, Bear with me because I might not have formulated the questions correctly, I'm mostly a Windows admin and not entirely up to speed on the

Re: [OpenAFS] Questions regarding AFS ticket lifetime

2012-04-20 Thread Anders Magnusson
On 04/20/2012 09:35 AM, Lars Schimmer wrote: From memory, during our Windows XP days (different OS, different OpenAFS, different Network Identity Manager, different MIT Kerberos for Windows), just locking and unlocking the computer refreshed the AFS ticket. How has this changed for Windows 7

Re: [OpenAFS] Questions regarding AFS ticket lifetime

2012-04-20 Thread Lars Schimmer
On 20.04.2012 12:53, Anders Magnusson wrote: On 04/20/2012 09:35 AM, Lars Schimmer wrote: From memory, during our Windows XP days (different OS, different OpenAFS, different Network Identity Manager, different MIT Kerberos for Windows), just locking and unlocking the computer refreshed the

Re: [OpenAFS] Questions regarding AFS ticket lifetime (fwd)

2012-04-20 Thread Stephen Joyce
On Fri, 20 Apr 2012, Lars Schimmer wrote: The problem is: 1) Automatic renewal of the tgt by NiM do not work on Windows 7. It did on XP. 2) Letting NiM fetch a new tgt when the user unlocks the screen do not work. It did on XP. Windows 7 is not Windows XP, MS changed a lot based on security

Re: [OpenAFS] Questions regarding AFS ticket lifetime

2012-04-20 Thread Anders Magnusson
On 04/20/2012 01:30 PM, Lars Schimmer wrote: On 20.04.2012 12:53, Anders Magnusson wrote: On 04/20/2012 09:35 AM, Lars Schimmer wrote: From memory, during our Windows XP days (different OS, different OpenAFS, different Network Identity Manager, different MIT Kerberos for Windows), just

Re: [OpenAFS] Questions regarding AFS ticket lifetime

2012-04-20 Thread Jeffrey Altman
Anders: If you configure the default credential cache to be MSLSA: then the LSA credentials will be used. The functionality (an explorer shell logon hook) that was used to copy credentials at logon no longer exists on Vista and later versions of the operating system. Since the functionality

Re: [OpenAFS] Questions regarding AFS ticket lifetime (fwd)

2012-04-20 Thread Jeffrey Altman
On Friday, April 20, 2012 8:33:09 AM, Stephen Joyce wrote: On Fri, 20 Apr 2012, Lars Schimmer wrote: The problem is: 1) Automatic renewal of the tgt by NiM do not work on Windows 7. It did on XP. 2) Letting NiM fetch a new tgt when the user unlocks the screen do not work. It did on XP.

Re: [OpenAFS] Questions regarding AFS ticket lifetime

2012-04-20 Thread Anders Magnusson
Thanks Jeffrey, now lot of things became clearer :-) But to solve this incident; since automatic renew in NiM do not work but kinit -R aklog does work for the API cache, we are planning to add this to the Task Scheduler. Do you see any problem with doing it like this? -- Ragge On 04/20/2012

Re: [OpenAFS] Questions regarding AFS ticket lifetime

2012-04-20 Thread Jeffrey Altman
Automatic renewal in NIM is used at many sites so I think you need to figure out what tickets you have and what cache is being used. kinit -R does exactly the same thing that NIM does. Of course, I don't know why the configuration is set to renew when there is 1 minute left. You want to renew

[OpenAFS] Questions regarding AFS ticket lifetime

2012-04-19 Thread Anders Nordin
Ok,   Bear with me because I might not have formulated the questions correctly, I'm mostly a Windows admin and not entirely up to speed on the AFS/Kerberos lingo.   Environment:   Windows 7 x64 Enterprise OpenAFS 1.7.1000 (64-bit) Network Identity Manager 2.0.1.903 MIT Kerberos for Windows

Re: [OpenAFS] Questions about afs and osx

2007-02-08 Thread Christopher D. Clausen
Jonathan Dobbie [EMAIL PROTECTED] wrote: Here is what I currently have: ~200 desktop workstations running OSX 10.4 with home directories mounted via AFP. Hundreds of apple laptops. 4 G5 Xserves and a G4 Xserve (all running server 10.4) Two of the G5s are AFP servers for home directories, one

[OpenAFS] Questions about afs and osx

2007-02-05 Thread Jonathan Dobbie
Greetings all, I work at a smallish Art school, and we are going to (hopefully) sit down this summer to confront our long term storage needs. AFS is looking like one of the best options, but I'm realizing how ignorant I am I'm hoping that you can illuminate me. I'm only going to talk

RE: [OpenAFS] Questions about AFS usage

2003-02-25 Thread Daniel Swärd
On Tue, 2003-02-25 at 18:03, Joseph H Vilas wrote: Ruby [EMAIL PROTECTED] mentioned: Maybe you refer to the limited token life time? That can be fixed by [...] ip based ACLs. I got tired of figuring this out and explaining it, so I wrote:

Re: [OpenAFS] Questions about AFS usage

2003-02-25 Thread Jim Rees
Could this be used to to let the users in my cell use ssh-keys against a cvs-server? I've been trying to get key-authentication working, but I've failed miserably... ;) I think what you really want is afs token passing. The OpenBSD version of OpenSSH can do this. I'm not sure about the

Re: [OpenAFS] questions on AFS

2001-12-05 Thread Russ Allbery
Srinivas, Mohan [EMAIL PROTECTED] writes: 2) I came to know that AFS is not supporting byte level locking? Many application make use of Byte level locking? Why has AFS has not implmented it, Because it's hard. :) although large univercities use it? As a representative of sorts of a

Re: [OpenAFS] questions on AFS

2001-12-05 Thread Dirk Heinrichs
On Wed, 5 Dec 2001, Srinivas, Mohan wrote: Hi everybody, can any one explain these questions? 1) Does AFS supports file level migration? If not what is the reason? Just curious, what is file level migration? Bye... Dirk -- Dirk Heinrichs | Tel: +49 (0)241 413 260

[OpenAFS] questions on AFS

2001-12-04 Thread Srinivas, Mohan
Hi everybody, can any one explain these questions? 1) Does AFS supports file level migration? If not what is the reason? 2) I came to know that AFS is not supporting byte level locking? Many application make use of Byte level locking? Why has AFS has not implmented it, although large