[OpenAFS] context menu handler slow in OpenAFS 1.5.8 for Windows

Gurganus, Brant L gurganbl@rose-hulman.edu
Fri, 15 Sep 2006 08:24:22 -0400


This is a multipart message in MIME format.

------=_NextPart_000_0000_01C6D8A0.568EBD80
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit

Here are the results of what I tried. When the account had administrator
privileges, the delay still occurred. When the laptop was disconnected from
the network, the delay did not occur.

This leads me to a new question: What if the system is connected to the
network, but not to the Windows domain?

-----Original Message-----
From: openafs-info-admin@openafs.org [mailto:openafs-info-admin@openafs.org]
On Behalf Of Gurganus, Brant L
Sent: Thursday, September 14, 2006 10:03 PM
To: rfoust@duke.edu
Cc: openafs-info@openafs.org
Subject: RE: [OpenAFS] context menu handler slow in OpenAFS 1.5.8 for
Windows

I am not hugely familiar with Windows networking internals, but you may be
able to get a clue by downloading Microsoft's Debugging Tools for Windows
and setting a symbol path to the Microsoft Symbol Server. Then, during that
delay, attach to the process and see where things are in the stack trace.

One thing I haven't tried yet is using a domain account with administrator
privileges. I recall from the pioctl debugging output some access denies
messages, and those could be contributing.

Another thing to try is using the domain account and not actually be
connected to the domain.

Try those ideas and I'll do the same and see if we can narrow things down a
bit more.

-----Original Message-----
From: Robbie Foust [mailto:rfoust@duke.edu] 
Sent: Thursday, September 14, 2006 8:59 PM
To: Gurganus, Brant L
Cc: openafs-info@openafs.org
Subject: Re: [OpenAFS] context menu handler slow in OpenAFS 1.5.8 for
Windows

If I log in as a local user, the "LSA Principal logon user" and  
"WNetAddConnection2" lines don't show up, and there is no delay -  
though I only tried this once.  If I'm logged in as a domain user,  
the delay happened before the first "WNetAddConnection2" line.  This  
isn't isolated to just this computer - I've heard of other  
departments on campus seeing the delay.  It doesn't seem to break  
things, its just....a short delay. :)  Also, It doesn't seem to  
matter if the domain account has a kerberos name mapping in place or  
not.

I wonder if there is a way to log whatever is happening during that  
pause.

- Robbie


On Sep 14, 2006, at 7:45 PM, Gurganus, Brant L wrote:

> Robbie, does this only occur for Windows domain-joined accounts as  
> it does
> for me? I tried asking the helpdesk at my school if they knew of  
> anything in
> the environment that could cause this, but they dismissed it  
> because I am
> using a setup that they do not support.
>
> -----Original Message-----
> From: Robbie Foust [mailto:rfoust@duke.edu]
> Sent: Thursday, September 14, 2006 5:42 PM
> To: Jeffrey Altman
> Cc: Gurganus, Brant L; openafs-info@openafs.org
> Subject: Re: [OpenAFS] context menu handler slow in OpenAFS 1.5.8 for
> Windows
>
> Hi,
>
> I'm seeing the exact same thing.  Have been for a long time, but
> never had proof it was the AFS client causing the right-click delay.
> I could send screen shots but its the same behavior already posted
> here.  I've confirmed it using the pioctl debugging and fs whereis
> "my documents" command.  I'm using v1.4.1 on a Windows 2003 advanced
> terminal server.
>
> Thanks,
>
> - Robbie
>
>
> On Sep 13, 2006, at 10:23 PM, Jeffrey Altman wrote:
>
>> There is nothing wrong with using drive mappings.
>> My guess is that there is something wrong because the SamCompatible
>> name is not a prefix of the full Domain Name.
>>
>> Lots of sites use domain logins without any delays.  So its something
>> unusual about your environment.
>>
>> Jeffrey Altman
>>
>>
>> Gurganus, Brant L wrote:
>>> Another potential contributing factor is that domain logon scripts
>>> automatically map AFS paths to drive letters, so I am not sure if
>>> I can
>>> prevent those mappings from occurring and see what happens then.
>>>
>>> -----Original Message-----
>>> From: Jeffrey Altman [mailto:jaltman@secure-endpoints.com]
>>> Sent: Wednesday, September 13, 2006 9:56 PM
>>> To: Gurganus, Brant L
>>> Cc: openafs-info@openafs.org
>>> Subject: Re: [OpenAFS] context menu handler slow in OpenAFS 1.5.8  
>>> for
>>> Windows
>>>
>>> What if you login with:
>>>
>>> gurganbl@MS.ROSE-HULMAN.EDU
>>>
>>> Gurganus, Brant L wrote:
>>>> Actually, I was wrong about the delay, I was just trying soon after
>>>> login when those results were still cached. The output is different
>>>> though:
>>>>
>>>> C:\Documents and Settings\gurganbl>fs whereis "My Documents"
>>>> pioctl CreateFile(C:\_._AFS_IOCTL_._) failed: 0x2
>>>>         [The system cannot find the file specified.
>>>> ]
>>>> pioctl Explorer logon user: [MSROSE-HULMAN\gurganbl]
>>>> pioctl CreateFile(C:\_._AFS_IOCTL_._) failed: 0x2
>>>>         [The system cannot find the file specified.
>>>> ]
>>>> pioctl LSA Principal logon user: [gurganbl@MS.ROSE-HULMAN.EDU]
>>>> pioctl WNetAddConnection2(\\afs,gurganbl@MS.ROSE-HULMAN.EDU)  
>>>> failed:
>>>> 0x4C3
>>>> pioctl WNetAddConnection2(\\afs\all,gurganbl@MS.ROSE-HULMAN.EDU)
>>> failed:
>>>> 0x4C3
>>>> pioctl SamCompatible logon user: [MSROSE-HULMAN\gurganbl]
>>>> pioctl CreateFile(C:\_._AFS_IOCTL_._) failed: 0x2
>>>>         [The system cannot find the file specified.
>>>> ]
>>>> fs: Invalid argument; it is possible that My Documents is not in
>>>> AFS.
>>>>
>>>> The delay occurs after the first WNetAddConnection2 call in the  
>>>> case
>>> of
>>>> both login forms.
>>>>
>>>> -----Original Message-----
>>>> From: Jeffrey Altman [mailto:jaltman@secure-endpoints.com]
>>>> Sent: Wednesday, September 13, 2006 9:28 PM
>>>> To: Gurganus, Brant L
>>>> Cc: openafs-info@openafs.org
>>>> Subject: Re: [OpenAFS] context menu handler slow in OpenAFS 1.5.8
>>>> for
>>>> Windows
>>>>
>>>> ok.  What is the pioctl output when using that name form?
>>>>
>>>> Gurganus, Brant L wrote:
>>>>> With that information, if I login with MSROSE-HULMAN\gurganbl
>>>>> instead
>>>> of
>>>>> gurganbl@rose-hulman.edu, I do not experience the delay.
>>>>>
>>>>> -----Original Message-----
>>>>> From: Jeffrey Altman [mailto:jaltman@secure-endpoints.com]
>>>>> Sent: Wednesday, September 13, 2006 8:29 PM
>>>>> To: Gurganus, Brant L
>>>>> Cc: openafs-info@openafs.org
>>>>> Subject: Re: [OpenAFS] context menu handler slow in OpenAFS
>>>>> 1.5.8 for
>>>>> Windows
>>>>>
>>>>> There you go.  Its taking pioctl() many tries before it can
>>>>> find the name form that matches the authentication name used
>>>>> to login the session.  This name is required in order for
>>>>> authentication to the AFS SMB server to succeed since that is
>>>>> the only name that will be accepted over the loopback interface.
>>>>>
>>>>> I don't have a solution for you.  The real fix for this is to
>>>>> stop using an SMB server and instead begin use of a Network
>>>>> Redirector.  Completing this work is a long time off.
>>>>>
>>>>> Jeffrey Altman
>>>>>
>>>>>
>>>>>
>>>>> Gurganus, Brant L wrote:
>>>>>> I turned on the pioctl debugging as you suggested and these
>>>>>> were the
>>>>>> results. This is a domain-joined limited user account.
>>>>>>
>>>>>>
>>>>>>
>>>>>> 0x4c3 is:
>>>>>>
>>>>>> ERROR_SESSION_CREDENTIAL_CONFLICT
>>>>>> 1219
>>>>>>
>>>>>> 	
>>>>>>
>>>>>> Multiple connections to a server or shared resource by the same
>>> user,
>>>>>> using more than one user name, are not allowed. Disconnect all
>>>>> previous
>>>>>> connections to the server or shared resource and try again.
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> C:\Documents and Settings\gurganbl>fs whereis "My Documents"
>>>>>>
>>>>>> pioctl CreateFile(C:\_._AFS_IOCTL_._) failed: 0x2
>>>>>>
>>>>>>         [The system cannot find the file specified.
>>>>>>
>>>>>> ]
>>>>>>
>>>>>> pioctl Explorer logon user: [gurganbl@rose-hulman.edu]
>>>>>>
>>>>>> pioctl WNetAddConnection2(\\afs,gurganbl@rose-hulman.edu) failed:
>>>>> 0x4C3
>>>>>> pioctl WNetAddConnection2(\\afs\all,gurganbl@rose-hulman.edu)
>>> failed:
>>>>> 0x4C3
>>>>>> pioctl LSA Principal logon user: [gurganbl@MS.ROSE-HULMAN.EDU]
>>>>>>
>>>>>> pioctl WNetAddConnection2(\\afs,gurganbl@MS.ROSE-HULMAN.EDU)
>>>>>> failed:
>>>>> 0x4C3
>>>>>> pioctl WNetAddConnection2(\\afs\all,gurganbl@MS.ROSE-HULMAN.EDU)
>>>>> failed:
>>>>>> 0x4C3
>>>>>>
>>>>>> pioctl SamCompatible logon user: [MSROSE-HULMAN\gurganbl]
>>>>>>
>>>>>> pioctl CreateFile(C:\_._AFS_IOCTL_._) failed: 0x2
>>>>>>
>>>>>>         [The system cannot find the file specified.
>>>>>>
>>>>>> ]
>>>>>>
>>>>>> fs: Invalid argument; it is possible that My Documents is not in
>>> AFS.
>>>>>>
>>>>>>
>>>>>> C:\Documents and Settings\gurganbl>fs whereis "My Documents"
>>>>>>
>>>>>> pioctl CreateFile(C:\_._AFS_IOCTL_._) failed: 0x2
>>>>>>
>>>>>>         [The system cannot find the file specified.
>>>>>>
>>>>>> ]
>>>>>>
>>>>>> pioctl Explorer logon user: [gurganbl@rose-hulman.edu]
>>>>>>
>>>>>> pioctl WNetAddConnection2(\\afs,gurganbl@rose-hulman.edu) failed:
>>>>> 0x4C3
>>>>>> pioctl WNetAddConnection2(\\afs\all,gurganbl@rose-hulman.edu)
>>> failed:
>>>>> 0x4C3
>>>>>> pioctl LSA Principal logon user: [gurganbl@MS.ROSE-HULMAN.EDU]
>>>>>>
>>>>>> pioctl WNetAddConnection2(\\afs,gurganbl@MS.ROSE-HULMAN.EDU)
>>>>>> failed:
>>>>> 0x4C3
>>>>>> pioctl WNetAddConnection2(\\afs\all,gurganbl@MS.ROSE-HULMAN.EDU)
>>>>> failed:
>>>>>> 0x4C3
>>>>>>
>>>>>> pioctl SamCompatible logon user: [MSROSE-HULMAN\gurganbl]
>>>>>>
>>>>>> pioctl CreateFile(C:\_._AFS_IOCTL_._) failed: 0x2
>>>>>>
>>>>>>         [The system cannot find the file specified.
>>>>>>
>>>>>> ]
>>>>>>
>>>>>> fs: Invalid argument; it is possible that My Documents is not in
>>> AFS.
>>>>>>
>>>>>>
>>>>>> -----Original Message-----
>>>>>> From: Jeffrey Altman [mailto:jaltman@secure-endpoints.com]
>>>>>> Sent: Wednesday, September 13, 2006 6:37 PM
>>>>>> To: Gurganus, Brant L
>>>>>> Cc: openafs-info@openafs.org
>>>>>> Subject: Re: [OpenAFS] context menu handler slow in OpenAFS 1.5.8
>>> for
>>>>>> Windows
>>>>>>
>>>>>>
>>>>>>
>>>>>> Turn on pioctl() debugging (as per the debugging section of the
>>>>>>
>>>>>> OpenAFS Release Notes), and then run the "fs whereis" test again.
>>>>>>
>>>>>>
>>>>>>
>>>>>> I suspect you will find the problem is that your systems are
>>>>>> having
>>> a
>>>>>> hard time authenticating to the AFS Client Service.  In which  
>>>>>> case
>>>>>>
>>>>>> all operations to AFS are suffering the same delays
>>>>>>
>>>>>>
>>>>>>
>>>>>> Jeffrey Altman
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> Gurganus, Brant L wrote:
>>>>>>
>>>>>>> The delay characteristics are reproducible using the command you
>>>>>>> mentioned. If it is newly run, there is a delay. If it has
>>>>>>> recently
>>>>> ran
>>>>>>> (probably has results in a cache), then it finishes quickly.
>>>>>>> There appears to be no difference in output of the command when
>>>> there
>>>>> is
>>>>>>> a delay and when there is not a delay:
>>>>>>> C:\DOCUME~1\gurganbl>fs whereis "My Documents"
>>>>>>> fs: Invalid argument; it is possible that My Documents is not in
>>>> AFS.
>>>>>>> C:\DOCUME~1\gurganbl>fs whereis "My Documents"
>>>>>>> fs: Invalid argument; it is possible that My Documents is not in
>>>> AFS.
>>>>> _______________________________________________
>>>>> OpenAFS-info mailing list
>>>>> OpenAFS-info@openafs.org
>>>>> https://lists.openafs.org/mailman/listinfo/openafs-info
>>>> _______________________________________________
>>>> OpenAFS-info mailing list
>>>> OpenAFS-info@openafs.org
>>>> https://lists.openafs.org/mailman/listinfo/openafs-info
>>>
>>> _______________________________________________
>>> OpenAFS-info mailing list
>>> OpenAFS-info@openafs.org
>>> https://lists.openafs.org/mailman/listinfo/openafs-info
>>
>


------=_NextPart_000_0000_01C6D8A0.568EBD80
Content-Type: application/x-pkcs7-signature;
	name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
	filename="smime.p7s"

MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIII3jCCAmYw
ggHPoAMCAQICEAWkEuO4+dok/usxugud7CMwDQYJKoZIhvcNAQEFBQAwYjELMAkGA1UEBhMCWkEx
JTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQ
ZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMB4XDTA2MDkxNDA3NTI1NloXDTA3MDkxNDA3NTI1
NlowSjEfMB0GA1UEAxMWVGhhd3RlIEZyZWVtYWlsIE1lbWJlcjEnMCUGCSqGSIb3DQEJARYYZ3Vy
Z2FuYmxAcm9zZS1odWxtYW4uZWR1MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDaBNOkCCNH
PXEbjCGRc6ClFkbPJpOOL8NRjgHHk523OEeav4zQSTpEPxL5MJ/5Uc+OsVBOg/0aGaFKQuTe5CiI
bNQL2n2fcXNABfJb8x+4/0JHNYHhKFT7mAsfv2vMPfEbjcucWjdZQDWuKvv9/r+oyrV1VRoll/2+
Y8Q7R0lLTwIDAQABozUwMzAjBgNVHREEHDAagRhndXJnYW5ibEByb3NlLWh1bG1hbi5lZHUwDAYD
VR0TAQH/BAIwADANBgkqhkiG9w0BAQUFAAOBgQA7SYXNj2JTiS4yAYJZ+0/osDG6WPfSe3Sncb40
recPLAocuHufoTYk1bLKKFDKhNn/yIrWevDShlegMJn4WEo3a6rjoijYBNQ6sXi1BQ1WgAoYY8rR
+9QmhZoFJPz+OhKAL077B6j+CczRUejqbeA/gJ8n2DIhuNMCRbUjEpDLyzCCAy0wggKWoAMCAQIC
AQAwDQYJKoZIhvcNAQEEBQAwgdExCzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0ZXJuIENhcGUx
EjAQBgNVBAcTCUNhcGUgVG93bjEaMBgGA1UEChMRVGhhd3RlIENvbnN1bHRpbmcxKDAmBgNVBAsT
H0NlcnRpZmljYXRpb24gU2VydmljZXMgRGl2aXNpb24xJDAiBgNVBAMTG1RoYXd0ZSBQZXJzb25h
bCBGcmVlbWFpbCBDQTErMCkGCSqGSIb3DQEJARYccGVyc29uYWwtZnJlZW1haWxAdGhhd3RlLmNv
bTAeFw05NjAxMDEwMDAwMDBaFw0yMDEyMzEyMzU5NTlaMIHRMQswCQYDVQQGEwJaQTEVMBMGA1UE
CBMMV2VzdGVybiBDYXBlMRIwEAYDVQQHEwlDYXBlIFRvd24xGjAYBgNVBAoTEVRoYXd0ZSBDb25z
dWx0aW5nMSgwJgYDVQQLEx9DZXJ0aWZpY2F0aW9uIFNlcnZpY2VzIERpdmlzaW9uMSQwIgYDVQQD
ExtUaGF3dGUgUGVyc29uYWwgRnJlZW1haWwgQ0ExKzApBgkqhkiG9w0BCQEWHHBlcnNvbmFsLWZy
ZWVtYWlsQHRoYXd0ZS5jb20wgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBANRp19SwlGRbcelH
2AxRtupykbCEXn0tDY97Et+FJXUodDpCLGMnn5V7S+9+GYcdhuqj3bnOlmQawhRuRKx85o/oTQ9x
H0A4pgCjh3j2+ZSGXq3qwF5269kUo11uenwMpUtVfwYZKX+emibVars4JAhqmMex2qOYkf152+Va
xBy5AgMBAAGjEzARMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEEBQADgYEAx+ySfk749Zal
Z2IqpPBNEWDQb41gWGGsJrtSNVwIzzD7qEqWih9iQiOMFw/0umScF6xHKd+dmF7SbGBxXKKs3Hnj
524ARx+1DSjoAp3kmv0T9KbZfLH43F8jJgmRgHPQFBveQ6mDJfLmnC8Vyv6mq4oHdYsM3VGEa+T4
0c53ooEwggM/MIICqKADAgECAgENMA0GCSqGSIb3DQEBBQUAMIHRMQswCQYDVQQGEwJaQTEVMBMG
A1UECBMMV2VzdGVybiBDYXBlMRIwEAYDVQQHEwlDYXBlIFRvd24xGjAYBgNVBAoTEVRoYXd0ZSBD
b25zdWx0aW5nMSgwJgYDVQQLEx9DZXJ0aWZpY2F0aW9uIFNlcnZpY2VzIERpdmlzaW9uMSQwIgYD
VQQDExtUaGF3dGUgUGVyc29uYWwgRnJlZW1haWwgQ0ExKzApBgkqhkiG9w0BCQEWHHBlcnNvbmFs
LWZyZWVtYWlsQHRoYXd0ZS5jb20wHhcNMDMwNzE3MDAwMDAwWhcNMTMwNzE2MjM1OTU5WjBiMQsw
CQYDVQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UE
AxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3VpbmcgQ0EwgZ8wDQYJKoZIhvcNAQEBBQAD
gY0AMIGJAoGBAMSmPFVzVftOucqZWh5owHUEcJ3f6f+jHuy9zfVb8hp2vX8MOmHyv1HOAdTlUAow
1wJjWiyJFXCO3cnwK4Vaqj9xVsuvPAsH5/EfkTYkKhPPK9Xzgnc9A74r/rsYPge/QIACZNenpruf
ZdHFKlSFD0gEf6e20TxhBEAeZBlyYLf7AgMBAAGjgZQwgZEwEgYDVR0TAQH/BAgwBgEB/wIBADBD
BgNVHR8EPDA6MDigNqA0hjJodHRwOi8vY3JsLnRoYXd0ZS5jb20vVGhhd3RlUGVyc29uYWxGcmVl
bWFpbENBLmNybDALBgNVHQ8EBAMCAQYwKQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVByaXZhdGVM
YWJlbDItMTM4MA0GCSqGSIb3DQEBBQUAA4GBAEiM0VCD6gsuzA2jZqxnD3+vrL7CF6FDlpSdf0wh
uPg2H6otnzYvwPQcUCCTcDz9reFhYsPZOhl+hLGZGwDFGguCdJ4lUJRix9sncVcljd2pnDmOjCBP
ZV+V2vf3h9bGCE6u9uo05RAaWzVNd+NWIXiC3CEZNd4ksdMdRv9dX2VPMYIC+DCCAvQCAQEwdjBi
MQswCQYDVQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoG
A1UEAxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3VpbmcgQ0ECEAWkEuO4+dok/usxugud
7CMwCQYFKw4DAhoFAKCCAdgwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUx
DxcNMDYwOTE1MTIyNDE4WjAjBgkqhkiG9w0BCQQxFgQUqUfxOkCU8axpi0DW8RKbiKXAvPQwZwYJ
KoZIhvcNAQkPMVowWDAKBggqhkiG9w0DBzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcNAwICAUAw
BwYFKw4DAgcwDQYIKoZIhvcNAwICASgwBwYFKw4DAhowCgYIKoZIhvcNAgUwgYUGCSsGAQQBgjcQ
BDF4MHYwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0
ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBAhAFpBLjuPna
JP7rMboLnewjMIGHBgsqhkiG9w0BCRACCzF4oHYwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRo
YXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVl
bWFpbCBJc3N1aW5nIENBAhAFpBLjuPnaJP7rMboLnewjMA0GCSqGSIb3DQEBAQUABIGAQzjQEYC6
syxq+iJVOpoMBcgh2W7vAGmCCDlJBVuIvYv3EzwR+HwhvE4L5MbzSEdK9ZgHSEL2m23nTEXmMivA
DdHz+sVhEoYWdRLekmJSAgTFRyVQBwn12KI+NXMLmsSFHJi5yw2mJUISS2gJHMOdDxdKTbZC1qhh
XxDVYHxQndwAAAAAAAA=

------=_NextPart_000_0000_01C6D8A0.568EBD80--