[OpenAFS] running vos from "another" machine
Ron Croonenberg
ronc@depauw.edu
Thu, 25 Aug 2005 12:50:44 -0500
Hi Kim,
I noticed that the -localauth had something to do with it.
Sooo...what I did is simply execute the vos commands without the
-localauth. And that seemed to work.
Maybe I am missing something, it surprised me. I didn't klog or anything
and was able to "dump" a volume.
Ron
>>> "Dexter 'Kim' Kimball" <dhk@ccre.com> 08/25/05 11:09 AM >>>
Ron,
"vos" per se doesn't require the /usr/afs/etc directory
OTOH "vos" with "-localauth" _does_ require the up-to-date
/usr/afs/etc/KeyFile
"-localauth" essentially means "I'm root on this here machine that has a
KeyFile so create some AFS admin credentials for me."
Without the KeyFile "vos ... -localauth" simply can't create the
token/ticket you require.
If you sftp /usr/afs/etc/KeyFile from one of your AFS servers to the
client-only box from which you're running vos you'll be up and running
with
"vos .... -localauth"
When you change keys remember to update the KeyFile on your admin
client.
Putting the KeyFile on a client isn't a good idea unless the machine in
question is secure/limited access, which yours is.
Kim
-----Original Message-----
From: openafs-info-admin@openafs.org
[mailto:openafs-info-admin@openafs.org] On Behalf Of Ron
Croonenberg
Sent: Wednesday, August 24, 2005 4:07 PM
To: dhk@ccre.com
Cc: openafs-info@openafs.org
Subject: RE: [OpenAFS] running vos from "another" machine
Hi,
I have installed/setup :
openafs-1.2.13-rhel3.0.1
openafs-client-1.2.13-rhel3.0.1
openafs-kernel-1.2.13-rhel3.0.1
now if I try to do a vos dump like :
vos dump -id homestaff.cowboy.backup -f
/data/afs-dump/homestaff.cowboy.backup -localauth
then:
vsu_ClientInit: Could not process files in configuration directory
(/usr/afs/etc).
could not initialize VLDB library (code=4294967295)
And when I look in /usr/afs, then /usr/afs/etc isn't there.
So I assume in order to use vos it needs to be there.
What needs to be
in it ? the same thing/stuff as in the
fileserver/dbserver /usr/afs/etc
?
>....., so be sure to have a local account or a local
password for your
>AFS account.
I have a local account on that machine.
> You'll have to klog after you log in.
right.. and that seems to work just fine.
>I'm sure we could come up with something more complicated :)
;-) looking forward to it...
oh and btw, in case you're wondering why I want this.. I
want to dump
the volumes on a "backup server" that no one has access to.
(other stuff is dumped/archived on that machine too)
thanks,
Ron
_______________________________________________
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info
_______________________________________________
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info