<= /div>

If you have any questions, please mail eakc2014-organizers@cern.ch.

Arne for = the EAKC2014 local organisers

Hi,

I want to an= nounce a little app that I made at work that allows to apply OpenAFS ACLs r= ecursively on Windows. Because the current way to apply acls on Windows is = a bit difficult for normal users.

Its basically a front = end for "fs listacl" and "fs setacl". Its made in .NET = C# and its Open Source.=C2=A0

It is available on := =C2=A0 htt= ps://github.com/falsovsky/ACLAFS=C2=A0- also includes a setup.exe on &q= uot;releases".

I also tried to add it= to=C2=A0http://wiki.openafs.org/AddOnsToolsAndUtilities/=C2=A0but = the wiki is broken, cannot be edited.

Hope it helps anyone, = because its being really usefull here at the University where I work.

Warm regards,

Pedro de Oliveira

--089e013d0f8af9e34d04f8f52cc2-- From openafs-info@openafs.org Thu May 15 22:27:05 2014 From: openafs-info@openafs.org (Ken Dreyer) Date: Thu, 15 May 2014 15:27:05 -0600 Subject: [OpenAFS-announce] OpenAFS 1.4 now end-of-life Message-ID: --14dae93d93d469739304f976f5e3 Content-Type: text/plain; charset=UTF-8 Greetings. This is an announcement about the end of life for the OpenAFS 1.4 series. OpenAFS 1.6.0 was released in September 2011, and since that time, the OpenAFS community has focused on pushing the 1.6 series forward. The OpenAFSproject now considers 1.6 superior in terms of stability and reliability for every AFS user and administrator. As announced last August, there will be no new tarball releases or security patches available for 1.4, effective immediately. We encourage all sites to upgrade to the OpenAFS 1.6 series. - the OpenAFS gatekeepers --14dae93d93d469739304f976f5e3 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Greetings.

This is an announcement about the end of life for the OpenAFS = 1.4 series.

OpenAFS 1.6.0 was released in September 2011, and since that t= ime, the OpenAFS community has focused on pushing the 1.6 seri= es forward. The OpenAFS project now considers 1.6 superior in = terms of stability and reliability for every AFS user and admi= nistrator.

As announced last August, there will be no new tarball releases or secu= rity patches available for 1.4, effective immediately.

We encourage all sites to upgrade to the OpenAFS 1.6 serie= s.

- the OpenAFS gatekeepers

--14dae93d93d469739304f976f5e3-- From openafs-info@openafs.org Wed May 21 15:10:08 2014 From: openafs-info@openafs.org (Stephan Wiesand) Date: Wed, 21 May 2014 16:10:08 +0200 Subject: [OpenAFS-announce] OpenAFS 1.6.8 release available Message-ID: <6163B4C8-F04E-4CF4-B6CB-4108344BC4FF@desy.de> Subject: OpenAFS 1.6.8 release available The OpenAFS Release Team is pleased to announce the availability of OpenAFS version 1.6.8 for UNIX/Linux. Source files and available binaries can be accessed via the web at: http://www.openafs.org/dl/openafs/1.6.8/ or via AFS at: /afs/grand.central.org/software/openafs/1.6.8/ \\afs\grand.central.org\software\openafs\1.6.8\ OpenAFS 1.6.8 is the next in the current series of stable releases of OpenAFS for all platforms except Microsoft Windows. Important changes include: * The default fileserver sync behavior changes from "delayed" to "onclose". This means that explicit syncing only happens when a volume is detached. This was the recommended option in previous stable releases, and it's believed to improve data integrity. * When a client is shut down, it will give up its callbacks. The Windows client has been doing this since 2007. Note that older fileservers (1.3.50 to 1.4.5 and 1.5.0 to 1.5.27) had a bug in the implementation of the relevant RPC that could cause crashes or other undefined behavior when this happens. * Improved documentation, diagnostics and error messages * Dozens of bug fixes and other improvements of both client and server Bug reports should be filed to openafs-bugs@openafs.org . There are two known issues that were discovered during 1.6.8 prerelase testing but turned out not to be regressions introduced in this release. These are planned to be addressed in 1.6.9: * Linux client cache consistency issues affecting the root directories of volumes where fakestat is in effect. * Crashes in libkrb5 of UNIX (not Linux) servers built against Heimdal. Thanks are due as usual to our dedicated team of binary builders (Andrew Deason, Ben Kaduk, Christof Hanke, and Stephen Quinney), without whom the broad range of released binaries would not be possible. Stephan Wiesand, 1.6 Branch Release Manager for the OpenAFS Release Team From openafs-info@openafs.org Thu Jun 12 18:44:53 2014 From: openafs-info@openafs.org (Stephan Wiesand) Date: Thu, 12 Jun 2014 19:44:53 +0200 Subject: [OpenAFS-announce] OpenAFS 1.6.9 release available Message-ID: <5DECEF3A-BFAE-4545-B0B6-3E9018059997@desy.de> The OpenAFS Release Team is pleased to announce the availability of OpenAFS version 1.6.9. Source files can be accessed via the web at: http://www.openafs.org/dl/openafs/1.6.9/ or via AFS at: /afs/grand.central.org/software/openafs/1.6.9/ \\afs\grand.central.org\software\openafs\1.6.9\ OpenAFS 1.6.9 is the next in the current series of stable releases of OpenAFS for all platforms except Microsoft Windows. The only change since the 1.6.8 release is: * Fix for OpenAFS-SA-2014-002 Bug reports should be filed to openafs-bugs@openafs.org . No binaries are available at the time of release, but they will be uploaded and accessible through the web link given above as they are built. Stephan Wiesand, 1.6 Branch Release Manager for the OpenAFS Release Team From openafs-info@openafs.org Thu Jun 12 18:44:34 2014 From: openafs-info@openafs.org (Stephan Wiesand) Date: Thu, 12 Jun 2014 19:44:34 +0200 Subject: [OpenAFS-announce] OpenAFS Security Advisory 2014-002 Message-ID: <25A16AD9-683A-49B3-AC3B-78F516D2C216@desy.de> Topic: Use of uninitialized memory in OpenAFS fileserver Issued: 12-June-2014 Last Update: 12-June-2014 Affected: OpenAFS file servers running version 1.6.8 An attacker with the ability to connect to an OpenAFS fileserver over the network can trigger the use of uninitialized memory and, potentially, execution of arbitrary code with the privileges of the fileserver process. Clients are not affected. SUMMARY ======= The 1.6.8 release of the OpenAFS fileserver and dafileserver processes introduced a security vulnerability in the host package due to the use of uninitialized memory allocations from the process heap. IMPACT ====== New client connections to the fileserver can result in unexpected termination of the service. As a side-effect of service termination callback state information and data not yet flushed to disk can be lost. An attacker with the ability to connect to an OpenAFS fileserver over the network can trigger the use of uninitialized memory and, potentially, execution of arbitrary code with the privileges of the fileserver process. AFFECTED SOFTWARE ================= The fileserver and dafileserver executables in release 1.6.8 of OpenAFS only. Clients and database server processes are unaffected. FIXES ===== The OpenAFS project recommends that administrators of fileservers upgrade to OpenAFS version 1.6.9 or newer. For those sites unable, or unwilling, to upgrade a patch which resolves this issue is available directly from: http://www.openafs.org/security/openafs-sa-2014-002.patch The latest stable OpenAFS release is always available from http://www.openafs.org/release/latest.html This announcement and code patches related to it may be found on the OpenAFS security advisory page at: http://www.openafs.org/security/ The main OpenAFS web page is at: http://www.openafs.org/ ACKNOWLEDGEMENTS ================ This issue was reported by Andrew Deason. From openafs-info@openafs.org Mon Aug 18 21:02:18 2014 From: openafs-info@openafs.org (Stephan Wiesand) Date: Mon, 18 Aug 2014 22:02:18 +0200 Subject: [OpenAFS-announce] First OpenAFS 1.6.10 release candidate available In-Reply-To: <5596EF71-4573-4B1E-A19A-A9F49079147B@desy.de> References: <20140815171336.49f5bb7cd459900f81a6189c@sinenomine.net> <5596EF71-4573-4B1E-A19A-A9F49079147B@desy.de> Message-ID: <4B76E032-A5A0-4F5D-B3F5-8BAD2D54B7FD@desy.de> The OpenAFS 1.6 Release Team announces that the first 1.6.10 release = candidate 1.6.10pre1 has been tagged in the OpenAFS source repository, available = at: git://git.openafs.org/openafs.git as tag: openafs-stable-1_6_10pre1 . Source files and available binaries can be accessed via the web at: http://dl.openafs.org/dl/candidate/1.6.10pre1/ or via AFS at: UNIX: /afs/grand.central.org/software/openafs/candidate/1.6.10pre1/ UNC: \\afs\grand.central.org\software\openafs\candidate\1.6.10pre1\ Binaries are available for Fedora 19/20 and RHEL 5/6 thanks to Stephen = Quinney. For other platforms, they will be uploaded as they become available. Besides many other fixes and enhancements, this release candidate = includes the following changes: * volscan(8), a swiss army knife utility for gathering information = about volume content efficiently on the fileserver hosting it, was added. * The client now reports just under 2 TiB free space in /afs. = Previously, it reported 9 GiB on most platforms, which could cause problems with software checking for sufficient free space before attempting to = write files larger than that. * Client support for Linux kernels up to at least 3.16 * Support for FreeBSD 9.3 and 10.1 For the full list of user visible changes foreseen for 1.6.10, please = see http://dl.openafs.org/dl/candidate/1.6.10pre1/RELNOTES-1.6.10pre1 There is a known issue with out-of-tree builds. This is being worked on = in http://gerrit.openafs.org/11392 and the final solution will be included in the 1.6.10 release. Please assist us by deploying this prerelease and providing positive or negative feedback. Bug reports should be filed to = openafs-bugs@openafs.org . Reports of success should be sent to openafs-info@openafs.org . 1.6 releases are no longer targeting MS Windows. Stephan Wiesand, 1.6 Branch Release Manager for the OpenAFS Release Team From openafs-info@openafs.org Fri Sep 5 16:55:12 2014 From: openafs-info@openafs.org (Roman Mitz) Date: Fri, 5 Sep 2014 11:55:12 -0400 Subject: [OpenAFS-announce] Foundation and Elders Updates Message-ID: --001a11c33b7c8f03880502537e1b Content-Type: text/plain; charset=UTF-8 Two items: 1) Status of Elders 2) Call for Volunteers for Foundation Directors With regards to the status of the Elders organization, the remaining Elders have agreed that it is superfluous with the Foundation and additionally has been inactive for quite some time. The Elders organization is therefore dissolved. We wish to thank all the latest and previous Elders for whatever time they were able to give over the years, and of course their valuable advice. Secondly, the existing directors of the OpenAFS Foundation are putting out a call to the OpenAFS community for volunteers who wish to join the board. With the non-profit documentation having been filed with the IRS, now is an appropriate time to seek to extend the board. The most important qualifications we are looking for are the available time for participation, passion and interest in moving forward. We're also looking for people who would be able to improve our communications with the community. Volunteers should express their interest by sending a paragraph or two about their interest and qualifications to foundation@openafs.org. This call for volunteers ends Sept 26. Once candidates are discussed by the board they will be put forward to the community for confirmation by general acclimation. Thank you! Roman Mitz Director, OpenAFS Foundation --001a11c33b7c8f03880502537e1b Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Two items:

1) = Status of Elders

2) Call for Volunteers for Foundation Directors

With regards to the status of the Elde= rs organization, the remaining Elders have agreed that it is superfluous wi= th the Foundation and additionally has been inactive for quite some time. = =C2=A0The Elders organization is therefore dissolved. =C2=A0We wish to than= k all the latest and previous Elders for whatever time they were able to gi= ve over the years, and of course their valuable advice.

Secondly, the existing directors of = the OpenAFS Foundation are putting out a call to the OpenAFS community for = volunteers who wish to join the board. =C2=A0With the non-profit documentat= ion having been filed with the IRS, now is an appropriate time to seek to e= xtend the board. =C2=A0

The most important qualifications we are looking for are the availab= le time for participation, passion and interest in moving forward. =C2=A0We= 're also looking for people who would be able to improve our communicat= ions with the community.

Volunteers should express their interest by sending a paragraph or = two about their interest and qualifications to=C2=A0foundation@openafs.org. =C2=A0This= call for volunteers ends Sept 26. =C2=A0Once candidates are discussed by t= he board they will be put forward to the community for confirmation by gene= ral acclimation.

= Thank you!

Roman = Mitz

Direct= or, OpenAFS Foundation

--001a11c33b7c8f03880502537e1b-- From openafs-info@openafs.org Fri Oct 24 17:05:53 2014 From: openafs-info@openafs.org (Stephan Wiesand) Date: Fri, 24 Oct 2014 18:05:53 +0200 Subject: [OpenAFS-announce] OpenAFS 1.6.10 release available Message-ID: <251CCBEE-2623-4309-B554-E874AA0663BD@desy.de> The OpenAFS Release Team is pleased to announce the availability of OpenAFS version 1.6.10 for UNIX/Linux. Source files and available binaries can be accessed via the web at: http://www.openafs.org/dl/openafs/1.6.10/ or via AFS at: /afs/grand.central.org/software/openafs/1.6.10/ \\afs\grand.central.org\software\openafs\1.6.10\ OpenAFS 1.6.10 is the next in the current series of stable releases of OpenAFS for all platforms except Microsoft Windows. Besides many other fixes and enhancements, important changes include: * volscan(8), a swiss army knife utility for gathering information = about volume content efficiently on the fileserver hosting it, was added. * The client now reports just under 2 TiB free space in /afs. = Previously, it reported 9 GiB on most platforms, which could cause problems with software checking for sufficient free space before attempting to = write files larger than that. * Client support for Linux kernels up to 3.16 (but not 3.17) * Support for FreeBSD 9.3 and 10.1 For the full list of user visible changes in 1.6.10, please see http://dl.openafs.org/dl/1.6.10/RELNOTES-1.6.10 Bug reports should be filed to openafs-bugs@openafs.org . Note: There is a known issue affecting Linux clients, causing spurious ENOENT errors on fakestat mounts, often showing up as getcwd() failures. This problem had been fixed in the 1.6.8 release, but seems to be back = in 1.6.10 due to a change fixing another issue. Please find the details in the later comments in the bug report, which can be accessed at = http://grand.central.org/rt/Ticket/Display.html?id=3D131780&user=3Dguest&p= ass=3Dguest Thanks are due as usual to our dedicated team of binary builders (Andrew Deason, Ben Kaduk, Christof Hanke and Stephen Quinney), without whom the broad range of released binaries would not be possible. Stephan Wiesand, 1.6 Branch Release Manager for the OpenAFS Release Team From openafs-info@openafs.org Mon Oct 27 14:22:28 2014 From: openafs-info@openafs.org (Norbert Gruener) Date: Mon, 27 Oct 2014 14:22:28 +0100 Subject: [OpenAFS-announce] ANNOUNCE: AFS Perl API 2.6.4 released In-Reply-To: <20121025110030.GE21768@ncf-28.MPA-Garching.MPG.DE> References: <20121025110030.GE21768@ncf-28.MPA-Garching.MPG.DE> Message-ID: <20141027132228.GA2575@ncf-28.MPA-Garching.MPG.DE> AFS Perl API Version 2.6.4 I am pleased to announce the AFS Perl API 2.6.4 release The AFS module bundle is a dynamically loadable extension to Perl. It gives the AFS user and administrator access to many of the AFS programming APIs, allowing you to make these calls directly from Perl, rather then processing the output of a command. The AFS module bundle is a thin layer above the low-level AFS APIs. This release compiles with OpenAFS system libraries version 1.4.X on 32-bit and on 64-bit platforms. Where To Get It The version 2.6.4 is now available at http://www.MPA-Garching.MPG.de/~nog/perl/AFS-2.6.4.tar.gz http://www.cpan.org/authors/id/N/NO/NOG/AFS-2.6.4.tar.gz This release should work on all UNIX/Linux platforms which have AFS API interfaces and the appropriate C compilation environment. MD5SUM f718d2a5935d65e70a686996b4e1efc3 AFS-2.6.4.tar.gz User Visible Changes in this Release - compiles with OpenAFS system libraries version 1.4.X on 32-bit and on 64-bit platforms - fixed AFS::VOS method "restore" - fixed AFS::BOS method "listhosts" For more information about the current state of the AFS Perl API, check my "AFS Perl API Kwiki" site at: http://www.mpa-garching.mpg.de/kwiki/nog/afsperl/ Share and Enjoy! Norbert From openafs-info@openafs.org Wed Oct 29 21:22:11 2014 From: openafs-info@openafs.org (Ken Dreyer) Date: Wed, 29 Oct 2014 14:22:11 -0600 Subject: [OpenAFS-announce] resignation as gatekeeper Message-ID: Hi all, I've accepted a new job at Red Hat working with the Ceph engineering team, and I'll be leaving USGS on October 31. Since most of my work on AFS was related to my job at USGS, I'm stepping down as a gatekeeper on the project. (This isn't a request from my new employer - it's just that my wife and I had a new baby this summer, and I can't commit the time that I once could when I was on staff at USGS.) In my spare time I had done some preliminary work on redesigning the openafs.org website, and that work-in-progress effort is here: https://gitorious.org/ktdreyer/openafs-web , specifically the "ktdreyer-redesign" branch. homepage2.jpg was the mockup from which I was working. I'd also been maintaining the openafs package in RPM Fusion, which I've orphaned.[1] This effectively means that the packages will be retired and pulled from the repository. If there's someone else who wants to maintain openafs in RPM Fusion, please get in touch as soon as possible. If I don't hear from anyone, I plan to formally retire the package in early November. In terms of my other AFS-related Fedora/EPEL packages, such as pam_afs_session and kstart, I'm keeping them in the distro for now because they require such little ongoing work. I'm not sure how long I'll keep them, and from what I understand Russ has given up upstream maintenance, but they'll be around for now. (I think Simon Wilkinson is officially on the co-maintainer ACL for kstart and remctl at least.) I'll stay a co-maintainer for ikiwiki and its Perl dependencies as well, since MIT is presently using those for wiki.openafs.org, and once the packages are in the distro they involve relatively little maintenance. It has been great working with the OpenAFS community and I really enjoyed getting to meet those of you who said hello at conferences. I wish you all the best with continuing AFS development. - Ken [1] https://lists.rpmfusion.org/pipermail/rpmfusion-users/2014-October/000450.html From openafs-info@openafs.org Fri Nov 14 20:58:52 2014 From: openafs-info@openafs.org (Roman Mitz) Date: Fri, 14 Nov 2014 15:58:52 -0500 Subject: [OpenAFS-announce] OpenAFS Foundation Board Member Changes Message-ID: --089e011766e57186900507d7e5f2 Content-Type: text/plain; charset=UTF-8 I am pleased to announce two new board members at this time: Dave Botsch and David Boldt. On behalf of the other board members I welcome them and their future efforts on behalf of OpenAFS and the Foundation. Bios follow below. I am also announcing my own intent to resign, effective Dec 31, 2014. Since 2010 I have been involved with the Elders and subsequently the Foundation, and at this time I would like to make way for other leadership and spend time on other pursuits. Thanks to all who have given me a great deal of guidance and help over the time I have been involved. Roman Mitz --- Dave Botsch is with the Cornell NanoScale Science and Technology Facility. At the CNF, Dave manages technology solutions (including OpenAFS) for the problems and workflows of both users and staff. Also as part of his job, he also works to foster collaboration among the wider Cornell IT community. Dave has a Bachelors in Computer Science from Cornell University in Ithaca, New York. Dave has been a member of the OpenAFS community for some time, with his involvement in the OpenAFS newsletter, previous iterations of the OpenAFS wiki, and, writing the OpenAFS Tokens gui application for Linux and for Macintosh. Dave is looking forward to continuing to work with the OpenAFS community. --- David Boldt of the US Geological Survey (USGS) has been using AFS since 2001 as part of a project to provide resilient web service which could survive the loss of any single data center. A requirement was precipitated by a hurricane-induced data center outage in Florida, which made USGS flood information unavailable just when and where it was most needed. The USGS AFS implementation replicates web content across data centers in Menlo Park California, Sioux Falls South Dakota and Reston Virginia using a system of programs which look for changes to AFS volumes and automatically "vos release" on a 15 minute interval as required. David is a self-described technical generalist, starting as a hydrogeologist and doing a bit of system administration, programming, system architecture, project management, documentation, software training, web site production and customer support over the years. He hopes to be able to contribute back to the OpenAFS community with any and all of the skills he acquired on this career path. --089e011766e57186900507d7e5f2 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

I am pleased to announce two new board members at this tim= e: Dave Botsch and David Boldt.=C2=A0 On behalf of the other board members = I welcome them and their future efforts on behalf of OpenAFS and the Founda= tion.=C2=A0 Bios follow below.

I am also announcing my own intent to= resign, effective Dec 31, 2014.=C2=A0 Since 2010 I have been involved with= the Elders and subsequently the Foundation, and at this time I would like = to make way for other leadership and spend time on other pursuits.=C2=A0 Th= anks to all who have given me a great deal of guidance and help over the ti= me I have been involved.

Roman Mitz
---

Dave Botsch is wit= h the Cornell NanoScale Science and Technology Facility. At the CNF, Dave m= anages technology solutions (including OpenAFS) for the problems and workfl= ows of both users and staff. Also as part of his job, he also works to fost= er collaboration among the wider Cornell IT community.

Dave has a Ba= chelors in Computer Science from Cornell University in Ithaca, New York.
Dave has been a member of the OpenAFS community for some time, with hi= s involvement in the OpenAFS newsletter, previous iterations of the OpenAFS= wiki, and, writing the OpenAFS Tokens gui
application for Linux and for= Macintosh. Dave is looking forward to continuing to work with the OpenAFS = community.

---

David Boldt of the US Geological Survey (USGS)= has been using AFS since 2001 as part of a project to provide resilient we= b service which could survive the loss of any single data center. A require= ment was precipitated by a hurricane-induced data center outage in Florida,= which made USGS flood information unavailable just when and where it was m= ost needed. The USGS AFS implementation replicates web content across data = centers in Menlo Park California, Sioux Falls South Dakota and Reston Virgi= nia using a system of programs which look for changes to AFS volumes and au= tomatically "vos release" on a 15 minute interval as required.
David is a self-described technical generalist, starting as a hydrogeo= logist and doing a bit of system administration, programming, system archit= ecture, project management, documentation, software training, web site prod= uction and customer support over the years. He hopes to be able to contribu= te back to the OpenAFS community with any and all of the skills he acquired= on this career path.

--089e011766e57186900507d7e5f2-- From openafs-info@openafs.org Mon Dec 1 10:03:39 2014 From: openafs-info@openafs.org (Stephan Wiesand) Date: Mon, 1 Dec 2014 11:03:39 +0100 Subject: [OpenAFS-announce] First OpenAFS 1.6.11 release candidate available Message-ID: <4DED6879-2E15-4466-9EE2-90F316387011@desy.de> The OpenAFS 1.6 Release Team announces that the first 1.6.11 release = candidate 1.6.11pre1 has been tagged in the OpenAFS source repository, available = at: git://git.openafs.org/openafs.git as tag: openafs-stable-1_6_11pre1 . Source files and available binaries can be accessed via the web at: http://dl.openafs.org/dl/candidate/1.6.11pre1/ or via AFS at: UNIX: /afs/grand.central.org/software/openafs/candidate/1.6.11pre1/ UNC: \\afs\grand.central.org\software\openafs\candidate\1.6.11pre1\ Additional binaries will be uploaded as they become available. This release's scope is limited to relatively few client side fixes and enhancements: * Support for recent Linux kernels, 3.17 and - likely - 3.18 * A fix for the return of spurious "getcwd: cannot access parent = directories" problems on Linux clients in the last release due to a related bug = fix * Support for OS X 10.10 "Yosemite" * A fix allowing aklog to succeed creating native K5 tokens even when = mapping the K5 principal to a K4 one fails For the full list of user visible changes foreseen for 1.6.11, please = see http://dl.openafs.org/dl/candidate/1.6.11pre1/RELNOTES-1.6.11pre1 Please assist us by deploying this prerelease and providing positive or negative feedback. Bug reports should be filed to = openafs-bugs@openafs.org . Reports of success should be sent to openafs-info@openafs.org . Thanks are due to Andrew Deason for providing the Solaris binaries. 1.6 releases are no longer targeting MS Windows. Stephan Wiesand, 1.6 Branch Release Manager for the OpenAFS Release Team