[OpenAFS] Re: OpenAFS-info digest, Vol 1 #2839 - 9 msgs
callen6216@aol.com
callen6216@aol.com
Wed, 25 Jan 2006 14:08:28 -0500
----------MailBlocks_8C7EFF9DBFF6AC5_12B4_B1AD_FWM-R10.sysops.aol.com
Content-Type: text/plain; charset="us-ascii"
Hi Chrisotpher,
Thank You for your help. It is not a multihomed system and we are running afs version 1.4.0008. I will download the new version and install it later this evening. Also, this system is in a workgroup. I will try running the fs checks.
Carol Allen
-----Original Message-----
From: openafs-info-request@openafs.org
To: openafs-info@openafs.org
Sent: Wed, 25 Jan 2006 12:01:06 -0500 (EST)
Subject: OpenAFS-info digest, Vol 1 #2839 - 9 msgs
Send OpenAFS-info mailing list submissions to
openafs-info@openafs.org
To subscribe or unsubscribe via the World Wide Web, visit
https://lists.openafs.org/mailman/listinfo/openafs-info
or, via email, send a message with subject or body 'help' to
openafs-info-request@openafs.org
You can reach the person managing the list at
openafs-info-admin@openafs.org
When replying, please edit your Subject line so it is more specific
than "Re: Contents of OpenAFS-info digest..."
Today's Topics:
1. foreign-realm members of system:administrators have weakened
powers? (Adam Megacz)
2. is there any good reason to use capialized names for new realms? (Adam
Megacz)
3. Re: is there any good reason to use capialized names for new realms? (Russ
Allbery)
4. Re: IP-based ACL problem with 1.2.13 fileserver? (does flushcps.c
work?) (Christopher Allen Wing)
5. Bringing back the wiki (Steve Simmons)
6. AFS and Windows 2003 (callen6216@aol.com)
7. Re: AFS and Windows 2003 (Christopher D. Clausen)
--__--__--
Message: 1
To: openafs-info@openafs.org
From: Adam Megacz <megacz@cs.berkeley.edu>
Date: Tue, 24 Jan 2006 20:35:59 -0800
Organization: Myself
Subject: [OpenAFS] foreign-realm members of system:administrators have weakened
powers?
Hrm, I thought that any member of system:administrators could create
pts groups with arbitrary ownership, but it seems that I can't do this
using my "main" principal -- I executed these commands while holding
tokens for megacz@megacz.com in cell research.cs.berkeley.edu:
$ pts membership system:administrators -cell research.cs.berkeley.edu
Members of system:administrators (id: -204) are:
afsadmin
megacz@megacz.com
megacz@eecs.berkeley.edu
$ pts creategroup project.sbp system:administrators -cell research.cs.berkeley.edu
pts: Permission denied ; unable to create group project.sbp with id 0 owned by
'system:administrators'
Are there some powers that are withheld from administrators using a
cross-realm pts id? The command succeeds when authenticated as
afsadmin.
- a
--
PGP/GPG: 5C9F F366 C9CF 2145 E770 B1B8 EFB1 462D A146 C380
--__--__--
Message: 2
To: openafs-info@openafs.org
From: Adam Megacz <megacz@cs.berkeley.edu>
Date: Tue, 24 Jan 2006 20:44:25 -0800
Organization: Myself
Subject: [OpenAFS] is there any good reason to use capialized names for new
realms?
Is there any good reason to use an all-capitalized realm name (ie
FOO.COM) rather than a lowercase *realm* name (foo.com) when setting
up a brand-new realm with no backwards-compatability requirements
other than being able to run [a recent version of] AFS?
I'm still in the short window where I can consider tearing things
apart and putting them back together, but that window is closing, and
case-sensitivity issues have already bitten me a few times. It would
be nice to have my realm and cell use exactly the same lowercase name
(easier to type and remember).
- a
PS, this borders on being a kerberos-only issue, but I'm interested in
the answer principally in the context of AFS, which is why I'm
posting here instead of the Kerberos list
--
PGP/GPG: 5C9F F366 C9CF 2145 E770 B1B8 EFB1 462D A146 C380
--__--__--
Message: 3
From: Russ Allbery <rra@stanford.edu>
To: openafs-info@openafs.org
Organization: The Eyrie
Date: Tue, 24 Jan 2006 21:15:00 -0800
Subject: Re: [OpenAFS] is there any good reason to use capialized names for new
realms?
Adam Megacz <megacz@cs.berkeley.edu> writes:
> Is there any good reason to use an all-capitalized realm name (ie
> FOO.COM) rather than a lowercase *realm* name (foo.com) when setting
> up a brand-new realm with no backwards-compatability requirements
> other than being able to run [a recent version of] AFS?
Yes, there's a lot of software out there that assumes all realm names are
in uppercase. It's possible to use lowercase realms (stanford.edu is a
lowercase realm), but learn from our mistake and don't do it. It's not
worth it.
--
Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>
--__--__--
Message: 4
Date: Wed, 25 Jan 2006 07:47:28 -0500 (EST)
From: Christopher Allen Wing <wingc@engin.umich.edu>
To: openafs-info@openafs.org
Subject: [OpenAFS] Re: IP-based ACL problem with 1.2.13 fileserver? (does
flushcps.c
work?)
I should also add that I tried using the 'flushcps' program from:
/afs/cs.cmu.edu/misc/afstools
without any luck. This program does not seem to have any effect (both on
the file servers which are showing a problem, and on those which are not).
Is this program expected to work against 1.2.13 fileservers?
Thanks,
Chris Wing
wingc@engin.umich.edu
--__--__--
Message: 5
To: OpenAFS Info List <openafs-info@openafs.org>
From: Steve Simmons <scs@umich.edu>
Date: Wed, 25 Jan 2006 09:30:58 -0500
Subject: [OpenAFS] Bringing back the wiki
Has anyone looked at bringing back the wiki at another location? No
offense whatsoever intended to Jeff, but he's clearly got a lot on
his plate and this is the kind of thing that others can do. I've gotten
some interest from my management tree in doing it here (Univ of
Michigan),
and have managed to scarf up a copy of the old wiki from
/afs/grand.central.org/archive/twiki. If there's no objection from Jeff
et. al, I'll looking into getting a stamp of approval and see what we
can
do here or through some public venue.
Steve
--__--__--
Message: 6
Date: Wed, 25 Jan 2006 09:49:18 -0500
From: callen6216@aol.com
To: openafs-info@openafs.org
Subject: [OpenAFS] AFS and Windows 2003
----------MailBlocks_8C7EFD5A770AC9D_120C_A816_MBLK-M35.sysops.aol.com
Content-Type: text/plain; charset="us-ascii"
Hello Everyone!
I a Windows 2003 IIS60 web server with the content stored on an AFS directory.
Whenever there is a problem withe AFS server, which is a sun server, I have to
reboot my Windows 2003 server. Has anyone experienced this and can tell me how
I might be able to correct the problem. I have spoken to the Administrator of
the AFS server and they say there is no problem but it continues to happen more
and more.
I would appreciate any help that I might be able to get.
Thank You in Advance
Carol Allen
----------MailBlocks_8C7EFD5A770AC9D_120C_A816_MBLK-M35.sysops.aol.com
Content-Type: text/html; charset="us-ascii"
<HTML><BODY><DIV style='font-family: "Verdana"; font-size: 10pt;'><DIV>Hello
Everyone!</DIV>
<DIV> </DIV>
<DIV>I a Windows 2003 IIS60 web server with the content stored on an AFS
directory. Whenever there is a problem withe AFS server, which is a sun server,
I have to reboot my Windows 2003 server. Has anyone experienced this and can
tell me how I might be able to correct the problem. I have spoken to the
Administrator of the AFS server and they say there is no problem but it
continues to happen more and more.</DIV>
<DIV> </DIV>
<DIV>I would appreciate any help that I might be able to get.</DIV>
<DIV> </DIV>
<DIV>Thank You in Advance</DIV>
<DIV> </DIV>
<DIV>Carol Allen</DIV></DIV></BODY></HTML>
----------MailBlocks_8C7EFD5A770AC9D_120C_A816_MBLK-M35.sysops.aol.com--
--__--__--
Message: 7
From: "Christopher D. Clausen" <cclausen@acm.org>
To: <callen6216@aol.com>, <openafs-info@openafs.org>
Date: Wed, 25 Jan 2006 09:02:52 -0600
Subject: Re: [OpenAFS] AFS and Windows 2003
callen6216@aol.com wrote:
> Hello Everyone!
>
> I a Windows 2003 IIS60 web server with the content stored on an AFS
> directory. Whenever there is a problem withe AFS server, which is a
> sun server, I have to reboot my Windows 2003 server. Has anyone
> experienced this and can tell me how I might be able to correct the
> problem. I have spoken to the Administrator of the AFS server and
> they say there is no problem but it continues to happen more and
> more.
>
> I would appreciate any help that I might be able to get.
What version of the client are you running? I strongly suggest that you
try the 1.4.1-rc5 binaries which were just released today.
Can you ask the server admin to see if there are any entries (identified
via IP address) in the AFS logs on the server?
Is this Windows 2003 server by change multi-homed (more than one
physical NIC in the machine)? Joined to Active Directory? Are you
using the AFS loopback adapter?
I don't run IIS, but I have had the occational fileserver meltdown cause
issues on my Terminal Servers. Usually running fs checks and fs checkv
fix these problems and force fail-over to other fileservers.
<<CDC
--
Christopher D. Clausen
ACM@UIUC SysAdmin
--__--__--
_______________________________________________
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info
End of OpenAFS-info Digest
----------MailBlocks_8C7EFF9DBFF6AC5_12B4_B1AD_FWM-R10.sysops.aol.com
Content-Type: text/html; charset="us-ascii"
<HTML><BODY><DIV style='font-family: "Verdana"; font-size: 10pt;'><DIV>
<DIV>Hi Chrisotpher,</DIV>
<DIV> </DIV>
<DIV>Thank You for your help. It is not a multihomed system and we are running afs version 1.4.0008. I will download the new version and install it later this evening. Also, this system is in a workgroup. I will try running the fs checks.</DIV>
<DIV> </DIV>
<DIV>Carol Allen </DIV> <BR>-----Original Message-----<BR>From: openafs-info-request@openafs.org<BR>To: openafs-info@openafs.org<BR>Sent: Wed, 25 Jan 2006 12:01:06 -0500 (EST)<BR>Subject: OpenAFS-info digest, Vol 1 #2839 - 9 msgs<BR><BR>
<STYLE>
.AOLPlainTextBody {
margin: 0px;
font-family: Tahoma, Verdana, Arial, Sans-Serif;
font-size: 12px;
color: #000;
background-color: #fff;
}
.AOLPlainTextBody pre {
font-size: 9pt;
}
.AOLInlineAttachment {
margin: 10px;
}
.AOLAttachmentHeader {
border-bottom: 2px solid #E9EAEB;
background: #F9F9F9;
}
.AOLAttachmentHeader .Title {
font: 11px Tahoma;
font-weight: bold;
color: #666666;
background: #E9EAEB;
padding: 3px 0px 1px 10px;
}
.AOLAttachmentHeader .FieldLabel {
font: 11px Tahoma;
font-weight: bold;
color: #666666;
padding: 1px 10px 1px 9px;
}
.AOLAttachmentHeader .FieldValue {
font: 11px Tahoma;
color: #333333;
}
</STYLE>
<DIV class=AOLPlainTextBody id=AOLMsgPart_0_89f607ca-e930-4d9a-b481-177c401dda36><PRE><TT>Send OpenAFS-info mailing list submissions to
<A href="mailto:openafs-info%40openafs.org">openafs-info@openafs.org</A>
To subscribe or unsubscribe via the World Wide Web, visit
<A href="https://lists.openafs.org/mailman/listinfo/openafs-info" target=_blank>https://lists.openafs.org/mailman/listinfo/openafs-info</A>
or, via email, send a message with subject or body 'help' to
<A href="mailto:openafs-info-request%40openafs.org">openafs-info-request@openafs.org</A>
You can reach the person managing the list at
<A href="mailto:openafs-info-admin%40openafs.org">openafs-info-admin@openafs.org</A>
When replying, please edit your Subject line so it is more specific
than "Re: Contents of OpenAFS-info digest..."
Today's Topics:
1. foreign-realm members of system:administrators have weakened
powers? (Adam Megacz)
2. is there any good reason to use capialized names for new realms? (Adam
Megacz)
3. Re: is there any good reason to use capialized names for new realms? (Russ
Allbery)
4. Re: IP-based ACL problem with 1.2.13 fileserver? (does flushcps.c
work?) (Christopher Allen Wing)
5. Bringing back the wiki (Steve Simmons)
6. AFS and Windows 2003 (<A href="mailto:callen6216%40aol.com">callen6216@aol.com</A>)
7. Re: AFS and Windows 2003 (Christopher D. Clausen)
--__--__--
Message: 1
To: <A href="mailto:openafs-info%40openafs.org">openafs-info@openafs.org</A>
From: Adam Megacz <<A href="mailto:megacz%40cs.berkeley.edu">megacz@cs.berkeley.edu</A>>
Date: Tue, 24 Jan 2006 20:35:59 -0800
Organization: Myself
Subject: [OpenAFS] foreign-realm members of system:administrators have weakened
powers?
Hrm, I thought that any member of system:administrators could create
pts groups with arbitrary ownership, but it seems that I can't do this
using my "main" principal -- I executed these commands while holding
tokens for <A href="mailto:megacz%40megacz.com">megacz@megacz.com</A> in cell research.cs.berkeley.edu:
$ pts membership system:administrators -cell research.cs.berkeley.edu
Members of system:administrators (id: -204) are:
afsadmin
<A href="mailto:megacz%40megacz.com">megacz@megacz.com</A>
<A href="mailto:megacz%40eecs.berkeley.edu">megacz@eecs.berkeley.edu</A>
$ pts creategroup project.sbp system:administrators -cell research.cs.berkeley.edu
pts: Permission denied ; unable to create group project.sbp with id 0 owned by
'system:administrators'
Are there some powers that are withheld from administrators using a
cross-realm pts id? The command succeeds when authenticated as
afsadmin.
- a
--
PGP/GPG: 5C9F F366 C9CF 2145 E770 B1B8 EFB1 462D A146 C380
--__--__--
Message: 2
To: <A href="mailto:openafs-info%40openafs.org">openafs-info@openafs.org</A>
From: Adam Megacz <<A href="mailto:megacz%40cs.berkeley.edu">megacz@cs.berkeley.edu</A>>
Date: Tue, 24 Jan 2006 20:44:25 -0800
Organization: Myself
Subject: [OpenAFS] is there any good reason to use capialized names for new
realms?
Is there any good reason to use an all-capitalized realm name (ie
FOO.COM) rather than a lowercase *realm* name (foo.com) when setting
up a brand-new realm with no backwards-compatability requirements
other than being able to run [a recent version of] AFS?
I'm still in the short window where I can consider tearing things
apart and putting them back together, but that window is closing, and
case-sensitivity issues have already bitten me a few times. It would
be nice to have my realm and cell use exactly the same lowercase name
(easier to type and remember).
- a
PS, this borders on being a kerberos-only issue, but I'm interested in
the answer principally in the context of AFS, which is why I'm
posting here instead of the Kerberos list
--
PGP/GPG: 5C9F F366 C9CF 2145 E770 B1B8 EFB1 462D A146 C380
--__--__--
Message: 3
From: Russ Allbery <<A href="mailto:rra%40stanford.edu">rra@stanford.edu</A>>
To: <A href="mailto:openafs-info%40openafs.org">openafs-info@openafs.org</A>
Organization: The Eyrie
Date: Tue, 24 Jan 2006 21:15:00 -0800
Subject: Re: [OpenAFS] is there any good reason to use capialized names for new
realms?
Adam Megacz <<A href="mailto:megacz%40cs.berkeley.edu">megacz@cs.berkeley.edu</A>> writes:
> Is there any good reason to use an all-capitalized realm name (ie
> FOO.COM) rather than a lowercase *realm* name (foo.com) when setting
> up a brand-new realm with no backwards-compatability requirements
> other than being able to run [a recent version of] AFS?
Yes, there's a lot of software out there that assumes all realm names are
in uppercase. It's possible to use lowercase realms (stanford.edu is a
lowercase realm), but learn from our mistake and don't do it. It's not
worth it.
--
Russ Allbery (<A href="mailto:rra%40stanford.edu">rra@stanford.edu</A>) <<A href="http://www.eyrie.org/~eagle/" target=_blank>http://www.eyrie.org/~eagle/</A>>
--__--__--
Message: 4
Date: Wed, 25 Jan 2006 07:47:28 -0500 (EST)
From: Christopher Allen Wing <<A href="mailto:wingc%40engin.umich.edu">wingc@engin.umich.edu</A>>
To: <A href="mailto:openafs-info%40openafs.org">openafs-info@openafs.org</A>
Subject: [OpenAFS] Re: IP-based ACL problem with 1.2.13 fileserver? (does
flushcps.c
work?)
I should also add that I tried using the 'flushcps' program from:
/afs/cs.cmu.edu/misc/afstools
without any luck. This program does not seem to have any effect (both on
the file servers which are showing a problem, and on those which are not).
Is this program expected to work against 1.2.13 fileservers?
Thanks,
Chris Wing
<A href="mailto:wingc%40engin.umich.edu">wingc@engin.umich.edu</A>
--__--__--
Message: 5
To: OpenAFS Info List <<A href="mailto:openafs-info%40openafs.org">openafs-info@openafs.org</A>>
From: Steve Simmons <<A href="mailto:scs%40umich.edu">scs@umich.edu</A>>
Date: Wed, 25 Jan 2006 09:30:58 -0500
Subject: [OpenAFS] Bringing back the wiki
Has anyone looked at bringing back the wiki at another location? No
offense whatsoever intended to Jeff, but he's clearly got a lot on
his plate and this is the kind of thing that others can do. I've gotten
some interest from my management tree in doing it here (Univ of
Michigan),
and have managed to scarf up a copy of the old wiki from
/afs/grand.central.org/archive/twiki. If there's no objection from Jeff
et. al, I'll looking into getting a stamp of approval and see what we
can
do here or through some public venue.
Steve
--__--__--
Message: 6
Date: Wed, 25 Jan 2006 09:49:18 -0500
From: <A href="mailto:callen6216%40aol.com">callen6216@aol.com</A>
To: <A href="mailto:openafs-info%40openafs.org">openafs-info@openafs.org</A>
Subject: [OpenAFS] AFS and Windows 2003
----------MailBlocks_8C7EFD5A770AC9D_120C_A816_MBLK-M35.sysops.aol.com
Content-Type: text/plain; charset="us-ascii"
Hello Everyone!
I a Windows 2003 IIS60 web server with the content stored on an AFS directory.
Whenever there is a problem withe AFS server, which is a sun server, I have to
reboot my Windows 2003 server. Has anyone experienced this and can tell me how
I might be able to correct the problem. I have spoken to the Administrator of
the AFS server and they say there is no problem but it continues to happen more
and more.
I would appreciate any help that I might be able to get.
Thank You in Advance
Carol Allen
----------MailBlocks_8C7EFD5A770AC9D_120C_A816_MBLK-M35.sysops.aol.com
Content-Type: text/html; charset="us-ascii"
<HTML><BODY><DIV style='font-family: "Verdana"; font-size: 10pt;'><DIV>Hello
Everyone!</DIV>
<DIV> </DIV>
<DIV>I a Windows 2003 IIS60 web server with the content stored on an AFS
directory. Whenever there is a problem withe AFS server, which is a sun server,
I have to reboot my Windows 2003 server. Has anyone experienced this and can
tell me how I might be able to correct the problem. I have spoken to the
Administrator of the AFS server and they say there is no problem but it
continues to happen more and more.</DIV>
<DIV> </DIV>
<DIV>I would appreciate any help that I might be able to get.</DIV>
<DIV> </DIV>
<DIV>Thank You in Advance</DIV>
<DIV> </DIV>
<DIV>Carol Allen</DIV></DIV></BODY></HTML>
----------MailBlocks_8C7EFD5A770AC9D_120C_A816_MBLK-M35.sysops.aol.com--
--__--__--
Message: 7
From: "Christopher D. Clausen" <<A href="mailto:cclausen%40acm.org">cclausen@acm.org</A>>
To: <<A href="mailto:callen6216%40aol.com">callen6216@aol.com</A>>, <<A href="mailto:openafs-info%40openafs.org">openafs-info@openafs.org</A>>
Date: Wed, 25 Jan 2006 09:02:52 -0600
Subject: Re: [OpenAFS] AFS and Windows 2003
<A href="mailto:callen6216%40aol.com">callen6216@aol.com</A> wrote:
> Hello Everyone!
>
> I a Windows 2003 IIS60 web server with the content stored on an AFS
> directory. Whenever there is a problem withe AFS server, which is a
> sun server, I have to reboot my Windows 2003 server. Has anyone
> experienced this and can tell me how I might be able to correct the
> problem. I have spoken to the Administrator of the AFS server and
> they say there is no problem but it continues to happen more and
> more.
>
> I would appreciate any help that I might be able to get.
What version of the client are you running? I strongly suggest that you
try the 1.4.1-rc5 binaries which were just released today.
Can you ask the server admin to see if there are any entries (identified
via IP address) in the AFS logs on the server?
Is this Windows 2003 server by change multi-homed (more than one
physical NIC in the machine)? Joined to Active Directory? Are you
using the AFS loopback adapter?
I don't run IIS, but I have had the occational fileserver meltdown cause
issues on my Terminal Servers. Usually running fs checks and fs checkv
fix these problems and force fail-over to other fileservers.
<<CDC
--
Christopher D. Clausen
ACM@UIUC SysAdmin
--__--__--
_______________________________________________
OpenAFS-info mailing list
<A href="mailto:OpenAFS-info%40openafs.org">OpenAFS-info@openafs.org</A>
<A href="https://lists.openafs.org/mailman/listinfo/openafs-info" target=_blank>https://lists.openafs.org/mailman/listinfo/openafs-info</A>
End of OpenAFS-info Digest
</TT></PRE></DIV><!-- end of AOLMsgPart_0_89f607ca-e930-4d9a-b481-177c401dda36 --></DIV></DIV></BODY></HTML>
----------MailBlocks_8C7EFF9DBFF6AC5_12B4_B1AD_FWM-R10.sysops.aol.com--