From mvanderw@nd.edu  Wed Nov  1 18:19:05 2017
From: mvanderw@nd.edu (Matt Vander Werf)
Date: Wed, 1 Nov 2017 13:19:05 -0400
Subject: [OpenAFS] getcwd() error for RHEL 7.4 kernel
In-Reply-To: <C3DFFF3B-0C6C-4BC9-BFEC-B446AC6E5F99@sinenomine.net>
References: <CAE6TTt5iQE0d=3PGTx-+6+U8kM2GrXxTZ4G0LNUtdNHo7PfqOQ@mail.gmail.com>
 <20171020014132.GF96685@kduck.kaduk.org> <574D4F6E-7F51-4A2B-9213-DA051F5099A0@desy.de>
 <CAE6TTt6+AC2pY12i4nAn6Bm6FDq0rajC6cAf+B+3x-A_UkkV-w@mail.gmail.com>
 <1C5CF6A1-3537-4B76-AF5A-BC081400B729@sinenomine.net> <CAE6TTt4NHqToxD8i=f2mn9ohc0WaSPzmK93Oqt5MJyQ-N+rcAg@mail.gmail.com>
 <CAE6TTt4f+8cqJA6DJ12b=qug6C=J280QyjnjkosiEae+2vuMuA@mail.gmail.com>
 <CAE6TTt4iPKhLq-u7u8MwaS1sJhM3UE_VH2xtnxjyn5kv_zJ6Qg@mail.gmail.com>
 <20171027162415.GA96685@kduck.kaduk.org> <CAE6TTt44d8naAQpjD2NpD727VOY3CViGVJhJZRgdG-ucxVy-qg@mail.gmail.com>
 <20171028124235.GG96685@kduck.kaduk.org> <CAE6TTt5dVmy_ZQtW4-OGXd5fJeDhH4tKDcAhusCeNoonyPsX7w@mail.gmail.com>
 <C3DFFF3B-0C6C-4BC9-BFEC-B446AC6E5F99@sinenomine.net>
Message-ID: <CAE6TTt750=VZ7NtaONBuqpKVRo+tmMrYJY8c_oYnFzoT18exrA@mail.gmail.com>

--94eb2c1a087c0327c8055cef1474
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Thanks for the update!

Let us know if there's anything else you need from us. We're happy to test
out any potential fixes, if you'd like more testing done.

Thanks.

--
Matt Vander Werf
HPC System Administrator
University of Notre Dame
Center for Research Computing - Union Station
506 W. South Street
South Bend, IN 46601
Phone: (574) 631-0692

On Mon, Oct 30, 2017 at 11:15 AM, Mark Vitale <mvitale@sinenomine.net>
wrote:

> Matt,
>
> > On Oct 28, 2017, at 9:38 AM, Matt Vander Werf <mvanderw@nd.edu> wrote:
> >
> > Attached is the output from running the command 'lsof /afs' after
> running both 'echo 2 > /proc/sys/vm/drop_caches' and 'fs flushall' on the
> system we're testing with the updated kernel. Is this what you were looki=
ng
> for? Let me know if you were wanting something different at all.
> Thank you for the lsof output, it=E2=80=99s helpful.
>
> >
> > We do still have users actively using AFS on the system in question (wh=
o
> are not having any issues, as far as we know).
> >
> > Did the straces I provided help at all? Or did they not give any useful
> details?
> The straces provided confirmation of the getcwd() ENOENT symptom.
>
> > Let me know if there=E2=80=99s anything else we can try or any other in=
fo we can
> provide.
> I am now able to reproduce the problem at will on my test system, so I
> don=E2=80=99t expect I will need anything more from you for now.  Thank y=
ou for all
> you provided, and we will keep you informed if there is any progress.
>
> Regards,
> =E2=80=94-
> Mark Vitale
> OpenAFS release team
>

--94eb2c1a087c0327c8055cef1474
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><div>Thanks for the update!<br><br></div>Let us know =
if there&#39;s anything else you need from us. We&#39;re happy to test out =
any potential fixes, if you&#39;d like more testing done.<br></div><div><br=
></div>Thanks.<br></div><div class=3D"gmail_extra"><br clear=3D"all"><div><=
div class=3D"gmail_signature" data-smartmail=3D"gmail_signature"><div dir=
=3D"ltr"><div>--<br></div><div>Matt Vander Werf<br>HPC System Administrator=
<br>University of Notre Dame<br>Center for Research Computing - Union Stati=
on<br>506 W. South Street<br>South Bend, IN 46601<br></div>Phone: (574) 631=
-0692</div></div></div>
<br><div class=3D"gmail_quote">On Mon, Oct 30, 2017 at 11:15 AM, Mark Vital=
e <span dir=3D"ltr">&lt;<a href=3D"mailto:mvitale@sinenomine.net" target=3D=
"_blank">mvitale@sinenomine.net</a>&gt;</span> wrote:<br><blockquote class=
=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padd=
ing-left:1ex">Matt,<br>
<span class=3D""><br>
&gt; On Oct 28, 2017, at 9:38 AM, Matt Vander Werf &lt;<a href=3D"mailto:mv=
anderw@nd.edu">mvanderw@nd.edu</a>&gt; wrote:<br>
&gt;<br>
&gt; Attached is the output from running the command &#39;lsof /afs&#39; af=
ter running both &#39;echo 2 &gt; /proc/sys/vm/drop_caches&#39; and &#39;fs=
 flushall&#39; on the system we&#39;re testing with the updated kernel. Is =
this what you were looking for? Let me know if you were wanting something d=
ifferent at all.<br>
</span>Thank you for the lsof output, it=E2=80=99s helpful.<br>
<span class=3D""><br>
&gt;<br>
&gt; We do still have users actively using AFS on the system in question (w=
ho are not having any issues, as far as we know).<br>
&gt;<br>
&gt; Did the straces I provided help at all? Or did they not give any usefu=
l details?<br>
</span>The straces provided confirmation of the getcwd() ENOENT symptom.<br=
>
<span class=3D""><br>
&gt; Let me know if there=E2=80=99s anything else we can try or any other i=
nfo we can provide.<br>
</span>I am now able to reproduce the problem at will on my test system, so=
 I don=E2=80=99t expect I will need anything more from you for now.=C2=A0 T=
hank you for all you provided, and we will keep you informed if there is an=
y progress.<br>
<br>
Regards,<br>
=E2=80=94-<br>
<div class=3D"HOEnZb"><div class=3D"h5">Mark Vitale<br>
OpenAFS release team</div></div></blockquote></div><br></div>

--94eb2c1a087c0327c8055cef1474--

From boyland@uwm.edu  Tue Nov  7 17:03:41 2017
From: boyland@uwm.edu (John Tang Boyland)
Date: Tue, 07 Nov 2017 11:03:41 -0600
Subject: [OpenAFS] Handling stale copy of RW volume on server back up
Message-ID: <7155.1510074221@pabst.cs.uwm.edu>

Dear OpenAFS,
   This is probably a FAQ, but I couldn't find it.
This references the somewhat common situation when a fileserver
goes down.

1. fileserver fails
   -- we try to resuscitate it, but fail, and people need access to data,
2. We use the daily backup to create restore volume on a new server
3. delentry to remove the entry to the "down" fileserver
   (we don't want to either wait for the server to come back up, because
   it's not up, and also don't want the data to go away in case
   we are belatedly able to get the fileserver back up.)
4. vos rename the restore volume to the original volume name
5. continue to work on the down fileserver.
6. A week later, the down fileserver comes back up!

Now the previously down file server has a stale copy
of the RW volume, but it may include changes from between the backup
time and the time the fileserver crashed.  So I don't want to lose it,
but nweither do I want it to be used or backed up in place of the
current copy.

I have NOT syncvldb yet -- I'm afraid of what might happen.

How do I rename the volume on the fileserver to get out of the way of
the replacement volume?  I could ZAP it, but I'd like to preserve the
data.  vos rename works on the VLDB, not on the server.

The only thing I could find is that one could vos dump each of the stale
volumes and then restore as a new volume and then zap the stale volume.

Is that the best?
Please reply to me as well as openafs-info (I get a delayed digest).

Best regards,
John



 

From Fabien Wernli <wernli+afs@in2p3.fr>  Wed Nov 15 15:19:04 2017
From: Fabien Wernli <wernli+afs@in2p3.fr> (Fabien Wernli)
Date: Wed, 15 Nov 2017 16:19:04 +0100
Subject: [OpenAFS] getcwd() error for RHEL 7.4 kernel
In-Reply-To: <CAFc4NQ8OBzFaPcMFPGqB6x25tT9aMAuqmqVK4bF1zTi_rZ8aWw@mail.gmail.com>
References: <CAFc4NQ8OBzFaPcMFPGqB6x25tT9aMAuqmqVK4bF1zTi_rZ8aWw@mail.gmail.com>
Message-ID: <20171115151904.taont23pjviz7phl@ccfawe.in2p3.fr>

Hi,

We're experiencing the exact same issue as nd.edu, namely random getcwd()
error messages especially from users having tcsh as their login shell.

I've been trying to reproduce it using pwd loops in different account's home
directory, without success. It's really very random.

Our config:

## OS:
CentOS 7.4 with kernel 3.10.0-693.2.2.el7.x86_64

## OpenAFS RPMs from Scientific Linux dot org
kmod-openafs-1.6-sl-693-1.6.21-274.sl7.693.x86_64
openafs-1.6-sl-module-tools-1.6.20-256.7.x86_64
openafs-1.6-sl-1.6.20-256.7.x86_64
openafs-1.6-sl-client-1.6.20-256.7.x86_64
openafs-1.6-sl-compat-1.6.20-256.7.x86_64
openafs-1.6-sl-krb5-1.6.20-256.7.x86_64
openafs-1.6-sl-module-tools-1.6.20-256.7.x86_64
pam_afs_session-2.6-5.el7.x86_64

Cheers


From mvanderw@nd.edu  Wed Nov 15 18:02:15 2017
From: mvanderw@nd.edu (Matt Vander Werf)
Date: Wed, 15 Nov 2017 13:02:15 -0500
Subject: [OpenAFS] getcwd() error for RHEL 7.4 kernel
In-Reply-To: <CAE6TTt750=VZ7NtaONBuqpKVRo+tmMrYJY8c_oYnFzoT18exrA@mail.gmail.com>
References: <CAE6TTt5iQE0d=3PGTx-+6+U8kM2GrXxTZ4G0LNUtdNHo7PfqOQ@mail.gmail.com>
 <20171020014132.GF96685@kduck.kaduk.org> <574D4F6E-7F51-4A2B-9213-DA051F5099A0@desy.de>
 <CAE6TTt6+AC2pY12i4nAn6Bm6FDq0rajC6cAf+B+3x-A_UkkV-w@mail.gmail.com>
 <1C5CF6A1-3537-4B76-AF5A-BC081400B729@sinenomine.net> <CAE6TTt4NHqToxD8i=f2mn9ohc0WaSPzmK93Oqt5MJyQ-N+rcAg@mail.gmail.com>
 <CAE6TTt4f+8cqJA6DJ12b=qug6C=J280QyjnjkosiEae+2vuMuA@mail.gmail.com>
 <CAE6TTt4iPKhLq-u7u8MwaS1sJhM3UE_VH2xtnxjyn5kv_zJ6Qg@mail.gmail.com>
 <20171027162415.GA96685@kduck.kaduk.org> <CAE6TTt44d8naAQpjD2NpD727VOY3CViGVJhJZRgdG-ucxVy-qg@mail.gmail.com>
 <20171028124235.GG96685@kduck.kaduk.org> <CAE6TTt5dVmy_ZQtW4-OGXd5fJeDhH4tKDcAhusCeNoonyPsX7w@mail.gmail.com>
 <C3DFFF3B-0C6C-4BC9-BFEC-B446AC6E5F99@sinenomine.net> <CAE6TTt750=VZ7NtaONBuqpKVRo+tmMrYJY8c_oYnFzoT18exrA@mail.gmail.com>
Message-ID: <CAE6TTt49VJDiEzN+Lh68djtF7hyAMNmWPke_aE5mEd13NeYAtw@mail.gmail.com>

--f4030438f0f02e559d055e09509e
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hello,

Are there any updates or progress on a potential fix for this issue?
Anything we can do to help figure things out?

We are running into more and more users encountering the issue on systems
we have updated, forcing us to have to downgrade the kernel on them yet as
well (including the system we were able to reproduce it on and test with
before). Is there any other information we might provide before we do that?

Thank you.

--
Matt Vander Werf
HPC System Administrator
University of Notre Dame
Center for Research Computing - Union Station
506 W. South Street
South Bend, IN 46601
Phone: (574) 631-0692

On Wed, Nov 1, 2017 at 1:19 PM, Matt Vander Werf <mvanderw@nd.edu> wrote:

> Thanks for the update!
>
> Let us know if there's anything else you need from us. We're happy to tes=
t
> out any potential fixes, if you'd like more testing done.
>
> Thanks.
>
> --
> Matt Vander Werf
> HPC System Administrator
> University of Notre Dame
> Center for Research Computing - Union Station
> 506 W. South Street
> South Bend, IN 46601
> Phone: (574) 631-0692
>
> On Mon, Oct 30, 2017 at 11:15 AM, Mark Vitale <mvitale@sinenomine.net>
> wrote:
>
>> Matt,
>>
>> > On Oct 28, 2017, at 9:38 AM, Matt Vander Werf <mvanderw@nd.edu> wrote:
>> >
>> > Attached is the output from running the command 'lsof /afs' after
>> running both 'echo 2 > /proc/sys/vm/drop_caches' and 'fs flushall' on th=
e
>> system we're testing with the updated kernel. Is this what you were look=
ing
>> for? Let me know if you were wanting something different at all.
>> Thank you for the lsof output, it=E2=80=99s helpful.
>>
>> >
>> > We do still have users actively using AFS on the system in question
>> (who are not having any issues, as far as we know).
>> >
>> > Did the straces I provided help at all? Or did they not give any usefu=
l
>> details?
>> The straces provided confirmation of the getcwd() ENOENT symptom.
>>
>> > Let me know if there=E2=80=99s anything else we can try or any other i=
nfo we
>> can provide.
>> I am now able to reproduce the problem at will on my test system, so I
>> don=E2=80=99t expect I will need anything more from you for now.  Thank =
you for all
>> you provided, and we will keep you informed if there is any progress.
>>
>> Regards,
>> =E2=80=94-
>> Mark Vitale
>> OpenAFS release team
>>
>
>

--f4030438f0f02e559d055e09509e
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><div>Hello,<br><br></div>Are there any updates or pro=
gress on a potential fix for this issue? Anything we can do to help figure =
things out?<br></div><div><br></div><div>We are running into more and more =
users encountering the issue on systems we have updated, forcing us to have=
 to downgrade the kernel on them yet as well (including the system we were =
able to reproduce it on and test with before). Is there any other informati=
on we might provide before we do that?<br></div><div><br></div>Thank you.<b=
r><div><div class=3D"gmail_extra"><br clear=3D"all"><div><div class=3D"m_-1=
79848824641958541gmail_signature" data-smartmail=3D"gmail_signature"><div d=
ir=3D"ltr"><div>--<br></div><div>Matt Vander Werf<br>HPC System Administrat=
or<br>University of Notre Dame<br>Center for Research Computing - Union Sta=
tion<br>506 W. South Street<br>South Bend, IN 46601<br></div>Phone: <a href=
=3D"tel:(574)%20631-0692" value=3D"+15746310692" target=3D"_blank">(574) 63=
1-0692</a></div></div></div>
<br><div class=3D"gmail_quote">On Wed, Nov 1, 2017 at 1:19 PM, Matt Vander =
Werf <span dir=3D"ltr">&lt;<a href=3D"mailto:mvanderw@nd.edu" target=3D"_bl=
ank">mvanderw@nd.edu</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_qu=
ote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex=
"><div dir=3D"ltr"><div><div>Thanks for the update!<br><br></div>Let us kno=
w if there&#39;s anything else you need from us. We&#39;re happy to test ou=
t any potential fixes, if you&#39;d like more testing done.<br></div><div><=
br></div>Thanks.<br></div><div class=3D"gmail_extra"><span><br clear=3D"all=
"><div><div class=3D"m_-179848824641958541m_-5787757725593875639gmail_signa=
ture" data-smartmail=3D"gmail_signature"><div dir=3D"ltr"><div>--<br></div>=
<div>Matt Vander Werf<br>HPC System Administrator<br>University of Notre Da=
me<br>Center for Research Computing - Union Station<br>506 W. South Street<=
br>South Bend, IN 46601<br></div>Phone: <a href=3D"tel:(574)%20631-0692" va=
lue=3D"+15746310692" target=3D"_blank">(574) 631-0692</a></div></div></div>
<br></span><div><div class=3D"m_-179848824641958541h5"><div class=3D"gmail_=
quote">On Mon, Oct 30, 2017 at 11:15 AM, Mark Vitale <span dir=3D"ltr">&lt;=
<a href=3D"mailto:mvitale@sinenomine.net" target=3D"_blank">mvitale@sinenom=
ine.net</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D=
"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Matt,<br>
<span><br>
&gt; On Oct 28, 2017, at 9:38 AM, Matt Vander Werf &lt;<a href=3D"mailto:mv=
anderw@nd.edu" target=3D"_blank">mvanderw@nd.edu</a>&gt; wrote:<br>
&gt;<br>
&gt; Attached is the output from running the command &#39;lsof /afs&#39; af=
ter running both &#39;echo 2 &gt; /proc/sys/vm/drop_caches&#39; and &#39;fs=
 flushall&#39; on the system we&#39;re testing with the updated kernel. Is =
this what you were looking for? Let me know if you were wanting something d=
ifferent at all.<br>
</span>Thank you for the lsof output, it=E2=80=99s helpful.<br>
<span><br>
&gt;<br>
&gt; We do still have users actively using AFS on the system in question (w=
ho are not having any issues, as far as we know).<br>
&gt;<br>
&gt; Did the straces I provided help at all? Or did they not give any usefu=
l details?<br>
</span>The straces provided confirmation of the getcwd() ENOENT symptom.<br=
>
<span><br>
&gt; Let me know if there=E2=80=99s anything else we can try or any other i=
nfo we can provide.<br>
</span>I am now able to reproduce the problem at will on my test system, so=
 I don=E2=80=99t expect I will need anything more from you for now.=C2=A0 T=
hank you for all you provided, and we will keep you informed if there is an=
y progress.<br>
<br>
Regards,<br>
=E2=80=94-<br>
<div class=3D"m_-179848824641958541m_-5787757725593875639HOEnZb"><div class=
=3D"m_-179848824641958541m_-5787757725593875639h5">Mark Vitale<br>
OpenAFS release team</div></div></blockquote></div><br></div></div></div>
</blockquote></div><br></div></div></div>

--f4030438f0f02e559d055e09509e--

From jwedgeco@uncc.edu  Wed Nov 15 18:22:41 2017
From: jwedgeco@uncc.edu (Jason Edgecombe)
Date: Wed, 15 Nov 2017 13:22:41 -0500
Subject: [OpenAFS] getcwd() error for RHEL 7.4 kernel
In-Reply-To: <CAE6TTt49VJDiEzN+Lh68djtF7hyAMNmWPke_aE5mEd13NeYAtw@mail.gmail.com>
References: <CAE6TTt5iQE0d=3PGTx-+6+U8kM2GrXxTZ4G0LNUtdNHo7PfqOQ@mail.gmail.com>
 <20171020014132.GF96685@kduck.kaduk.org> <574D4F6E-7F51-4A2B-9213-DA051F5099A0@desy.de>
 <CAE6TTt6+AC2pY12i4nAn6Bm6FDq0rajC6cAf+B+3x-A_UkkV-w@mail.gmail.com>
 <1C5CF6A1-3537-4B76-AF5A-BC081400B729@sinenomine.net> <CAE6TTt4NHqToxD8i=f2mn9ohc0WaSPzmK93Oqt5MJyQ-N+rcAg@mail.gmail.com>
 <CAE6TTt4f+8cqJA6DJ12b=qug6C=J280QyjnjkosiEae+2vuMuA@mail.gmail.com>
 <CAE6TTt4iPKhLq-u7u8MwaS1sJhM3UE_VH2xtnxjyn5kv_zJ6Qg@mail.gmail.com>
 <20171027162415.GA96685@kduck.kaduk.org> <CAE6TTt44d8naAQpjD2NpD727VOY3CViGVJhJZRgdG-ucxVy-qg@mail.gmail.com>
 <20171028124235.GG96685@kduck.kaduk.org> <CAE6TTt5dVmy_ZQtW4-OGXd5fJeDhH4tKDcAhusCeNoonyPsX7w@mail.gmail.com>
 <C3DFFF3B-0C6C-4BC9-BFEC-B446AC6E5F99@sinenomine.net> <CAE6TTt750=VZ7NtaONBuqpKVRo+tmMrYJY8c_oYnFzoT18exrA@mail.gmail.com>
 <CAE6TTt49VJDiEzN+Lh68djtF7hyAMNmWPke_aE5mEd13NeYAtw@mail.gmail.com>
Message-ID: <CAAR6MGDbM0kN6q++wsV3KmbqidVP8oxJAEDwcf58BKfoibVMtA@mail.gmail.com>

--f403043ec1f434f13f055e09993a
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

=E2=80=8BI'm seeing this on some CentOS 7.4 systems that don't have AFS ins=
talled
at all. It tends to happen in SMB network folders.=E2=80=8B

---------------------------------------------------------------------------
Jason Edgecombe | Linux Administrator
UNC Charlotte | The William States Lee College of Engineering
9201 University City Blvd. | Charlotte, NC 28223-0001
Phone: 704-687-1943
jwedgeco@uncc.edu | http://engr.uncc.edu |  Facebook
---------------------------------------------------------------------------
If you are not the intended recipient of this transmission or a person
responsible for delivering it to the intended recipient, any disclosure,
copying, distribution, or other use of any of the information in this
transmission is strictly prohibited. If you have received this transmission
in error, please notify me immediately by reply e-mail or by telephone at
704-687-1943.  Thank you.

On Wed, Nov 15, 2017 at 1:02 PM, Matt Vander Werf <mvanderw@nd.edu> wrote:

> Hello,
>
> Are there any updates or progress on a potential fix for this issue?
> Anything we can do to help figure things out?
>
> We are running into more and more users encountering the issue on systems
> we have updated, forcing us to have to downgrade the kernel on them yet a=
s
> well (including the system we were able to reproduce it on and test with
> before). Is there any other information we might provide before we do tha=
t?
>
> Thank you.
>
> --
> Matt Vander Werf
> HPC System Administrator
> University of Notre Dame
> Center for Research Computing - Union Station
> 506 W. South Street
> <https://maps.google.com/?q=3D506+W.+South+Street+South+Bend,+IN+46601&en=
try=3Dgmail&source=3Dg>
> South Bend, IN 46601
> <https://maps.google.com/?q=3D506+W.+South+Street+South+Bend,+IN+46601&en=
try=3Dgmail&source=3Dg>
> Phone: (574) 631-0692
>
> On Wed, Nov 1, 2017 at 1:19 PM, Matt Vander Werf <mvanderw@nd.edu> wrote:
>
>> Thanks for the update!
>>
>> Let us know if there's anything else you need from us. We're happy to
>> test out any potential fixes, if you'd like more testing done.
>>
>> Thanks.
>>
>> --
>> Matt Vander Werf
>> HPC System Administrator
>> University of Notre Dame
>> Center for Research Computing - Union Station
>> 506 W. South Street
>> <https://maps.google.com/?q=3D506+W.+South+Street+South+Bend,+IN+46601&e=
ntry=3Dgmail&source=3Dg>
>> South Bend, IN 46601
>> <https://maps.google.com/?q=3D506+W.+South+Street+South+Bend,+IN+46601&e=
ntry=3Dgmail&source=3Dg>
>> Phone: (574) 631-0692
>>
>> On Mon, Oct 30, 2017 at 11:15 AM, Mark Vitale <mvitale@sinenomine.net>
>> wrote:
>>
>>> Matt,
>>>
>>> > On Oct 28, 2017, at 9:38 AM, Matt Vander Werf <mvanderw@nd.edu> wrote=
:
>>> >
>>> > Attached is the output from running the command 'lsof /afs' after
>>> running both 'echo 2 > /proc/sys/vm/drop_caches' and 'fs flushall' on t=
he
>>> system we're testing with the updated kernel. Is this what you were loo=
king
>>> for? Let me know if you were wanting something different at all.
>>> Thank you for the lsof output, it=E2=80=99s helpful.
>>>
>>> >
>>> > We do still have users actively using AFS on the system in question
>>> (who are not having any issues, as far as we know).
>>> >
>>> > Did the straces I provided help at all? Or did they not give any
>>> useful details?
>>> The straces provided confirmation of the getcwd() ENOENT symptom.
>>>
>>> > Let me know if there=E2=80=99s anything else we can try or any other =
info we
>>> can provide.
>>> I am now able to reproduce the problem at will on my test system, so I
>>> don=E2=80=99t expect I will need anything more from you for now.  Thank=
 you for all
>>> you provided, and we will keep you informed if there is any progress.
>>>
>>> Regards,
>>> =E2=80=94-
>>> Mark Vitale
>>> OpenAFS release team
>>>
>>
>>
>

--f403043ec1f434f13f055e09993a
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-family:arial,he=
lvetica,sans-serif">=E2=80=8BI&#39;m seeing this on some CentOS 7.4 systems=
 that don&#39;t have AFS installed at all. It tends to happen in SMB networ=
k folders.=E2=80=8B</div></div><div class=3D"gmail_extra"><br clear=3D"all"=
><div><div class=3D"gmail_signature" data-smartmail=3D"gmail_signature"><di=
v dir=3D"ltr">-------------------------------------------------------------=
--------------<br>
Jason Edgecombe | Linux Administrator<br>
UNC Charlotte | The William States Lee College of Engineering<br>
9201 University City Blvd. | Charlotte, NC 28223-0001<br>
Phone: <a href=3D"tel:704-687-1943" value=3D"+17046871943" target=3D"_blank=
"><span>704</span>-<span>687</span>-<span>1943</span></a><br>
<a href=3D"mailto:jwedgeco@uncc.edu" target=3D"_blank">jwedgeco@uncc.edu</a=
> | <a href=3D"http://engr.uncc.edu" target=3D"_blank">http://engr.uncc.edu=
</a> | =C2=A0Facebook<br>
---------------------------------------------------------------------------=
<br>
If you are not the intended recipient of this transmission or a person=20
responsible for delivering it to the intended recipient, any disclosure,
 copying, distribution, or other use of any of the information in this=20
transmission is strictly prohibited. If you have received this=20
transmission in error, please notify me immediately by reply e-mail or=20
by telephone at<br>
<a href=3D"tel:704-687-1943" value=3D"+17046871943" target=3D"_blank"><span=
>704</span>-<span>687</span>-<span>1943</span></a>.=C2=A0 Thank you.</div><=
/div></div>
<br><div class=3D"gmail_quote">On Wed, Nov 15, 2017 at 1:02 PM, Matt Vander=
 Werf <span dir=3D"ltr">&lt;<a href=3D"mailto:mvanderw@nd.edu" target=3D"_b=
lank">mvanderw@nd.edu</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_q=
uote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1e=
x"><div dir=3D"ltr"><div><div>Hello,<br><br></div>Are there any updates or =
progress on a potential fix for this issue? Anything we can do to help figu=
re things out?<br></div><div><br></div><div>We are running into more and mo=
re users encountering the issue on systems we have updated, forcing us to h=
ave to downgrade the kernel on them yet as well (including the system we we=
re able to reproduce it on and test with before). Is there any other inform=
ation we might provide before we do that?<br></div><div><br></div>Thank you=
.<br><div><div class=3D"gmail_extra"><span class=3D""><br clear=3D"all"><di=
v><div class=3D"m_-925149083075608360m_-179848824641958541gmail_signature" =
data-smartmail=3D"gmail_signature"><div dir=3D"ltr"><div>--<br></div><div>M=
att Vander Werf<br>HPC System Administrator<br>University of Notre Dame<br>=
Center for Research Computing - Union Station<br><a href=3D"https://maps.go=
ogle.com/?q=3D506+W.+South+Street+South+Bend,+IN+46601&amp;entry=3Dgmail&am=
p;source=3Dg">506 W. South Street</a><br><a href=3D"https://maps.google.com=
/?q=3D506+W.+South+Street+South+Bend,+IN+46601&amp;entry=3Dgmail&amp;source=
=3Dg">South Bend, IN 46601</a><br></div>Phone: <a href=3D"tel:(574)%20631-0=
692" value=3D"+15746310692" target=3D"_blank">(574) 631-0692</a></div></div=
></div>
<br></span><div><div class=3D"h5"><div class=3D"gmail_quote">On Wed, Nov 1,=
 2017 at 1:19 PM, Matt Vander Werf <span dir=3D"ltr">&lt;<a href=3D"mailto:=
mvanderw@nd.edu" target=3D"_blank">mvanderw@nd.edu</a>&gt;</span> wrote:<br=
><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1=
px #ccc solid;padding-left:1ex"><div dir=3D"ltr"><div><div>Thanks for the u=
pdate!<br><br></div>Let us know if there&#39;s anything else you need from =
us. We&#39;re happy to test out any potential fixes, if you&#39;d like more=
 testing done.<br></div><div><br></div>Thanks.<br></div><div class=3D"gmail=
_extra"><span><br clear=3D"all"><div><div class=3D"m_-925149083075608360m_-=
179848824641958541m_-5787757725593875639gmail_signature" data-smartmail=3D"=
gmail_signature"><div dir=3D"ltr"><div>--<br></div><div>Matt Vander Werf<br=
>HPC System Administrator<br>University of Notre Dame<br>Center for Researc=
h Computing - Union Station<br><a href=3D"https://maps.google.com/?q=3D506+=
W.+South+Street+South+Bend,+IN+46601&amp;entry=3Dgmail&amp;source=3Dg">506 =
W. South Street</a><br><a href=3D"https://maps.google.com/?q=3D506+W.+South=
+Street+South+Bend,+IN+46601&amp;entry=3Dgmail&amp;source=3Dg">South Bend, =
IN 46601</a><br></div>Phone: <a href=3D"tel:(574)%20631-0692" value=3D"+157=
46310692" target=3D"_blank">(574) 631-0692</a></div></div></div>
<br></span><div><div class=3D"m_-925149083075608360m_-179848824641958541h5"=
><div class=3D"gmail_quote">On Mon, Oct 30, 2017 at 11:15 AM, Mark Vitale <=
span dir=3D"ltr">&lt;<a href=3D"mailto:mvitale@sinenomine.net" target=3D"_b=
lank">mvitale@sinenomine.net</a>&gt;</span> wrote:<br><blockquote class=3D"=
gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-=
left:1ex">Matt,<br>
<span><br>
&gt; On Oct 28, 2017, at 9:38 AM, Matt Vander Werf &lt;<a href=3D"mailto:mv=
anderw@nd.edu" target=3D"_blank">mvanderw@nd.edu</a>&gt; wrote:<br>
&gt;<br>
&gt; Attached is the output from running the command &#39;lsof /afs&#39; af=
ter running both &#39;echo 2 &gt; /proc/sys/vm/drop_caches&#39; and &#39;fs=
 flushall&#39; on the system we&#39;re testing with the updated kernel. Is =
this what you were looking for? Let me know if you were wanting something d=
ifferent at all.<br>
</span>Thank you for the lsof output, it=E2=80=99s helpful.<br>
<span><br>
&gt;<br>
&gt; We do still have users actively using AFS on the system in question (w=
ho are not having any issues, as far as we know).<br>
&gt;<br>
&gt; Did the straces I provided help at all? Or did they not give any usefu=
l details?<br>
</span>The straces provided confirmation of the getcwd() ENOENT symptom.<br=
>
<span><br>
&gt; Let me know if there=E2=80=99s anything else we can try or any other i=
nfo we can provide.<br>
</span>I am now able to reproduce the problem at will on my test system, so=
 I don=E2=80=99t expect I will need anything more from you for now.=C2=A0 T=
hank you for all you provided, and we will keep you informed if there is an=
y progress.<br>
<br>
Regards,<br>
=E2=80=94-<br>
<div class=3D"m_-925149083075608360m_-179848824641958541m_-5787757725593875=
639HOEnZb"><div class=3D"m_-925149083075608360m_-179848824641958541m_-57877=
57725593875639h5">Mark Vitale<br>
OpenAFS release team</div></div></blockquote></div><br></div></div></div>
</blockquote></div><br></div></div></div></div></div>
</blockquote></div><br></div>

--f403043ec1f434f13f055e09993a--

From kaduk@mit.edu  Thu Nov 16 06:06:11 2017
From: kaduk@mit.edu (Benjamin Kaduk)
Date: Thu, 16 Nov 2017 00:06:11 -0600
Subject: [OpenAFS] getcwd() error for RHEL 7.4 kernel
In-Reply-To: <CAE6TTt49VJDiEzN+Lh68djtF7hyAMNmWPke_aE5mEd13NeYAtw@mail.gmail.com>
References: <CAE6TTt4NHqToxD8i=f2mn9ohc0WaSPzmK93Oqt5MJyQ-N+rcAg@mail.gmail.com>
 <CAE6TTt4f+8cqJA6DJ12b=qug6C=J280QyjnjkosiEae+2vuMuA@mail.gmail.com>
 <CAE6TTt4iPKhLq-u7u8MwaS1sJhM3UE_VH2xtnxjyn5kv_zJ6Qg@mail.gmail.com>
 <20171027162415.GA96685@kduck.kaduk.org>
 <CAE6TTt44d8naAQpjD2NpD727VOY3CViGVJhJZRgdG-ucxVy-qg@mail.gmail.com>
 <20171028124235.GG96685@kduck.kaduk.org>
 <CAE6TTt5dVmy_ZQtW4-OGXd5fJeDhH4tKDcAhusCeNoonyPsX7w@mail.gmail.com>
 <C3DFFF3B-0C6C-4BC9-BFEC-B446AC6E5F99@sinenomine.net>
 <CAE6TTt750=VZ7NtaONBuqpKVRo+tmMrYJY8c_oYnFzoT18exrA@mail.gmail.com>
 <CAE6TTt49VJDiEzN+Lh68djtF7hyAMNmWPke_aE5mEd13NeYAtw@mail.gmail.com>
Message-ID: <20171116060610.GK82825@kduck.kaduk.org>

On Wed, Nov 15, 2017 at 01:02:15PM -0500, Matt Vander Werf wrote:
> Hello,
> 
> Are there any updates or progress on a potential fix for this issue?
> Anything we can do to help figure things out?

This topic was on the agenda for our release-team meeting yesterday.
If I remmber correctly, multiple developers have gotten fairly
reliable ways to reproduce the issue locally.
It also seems that as a workaround, reverting
https://gerrit.openafs.org/#/c/12451/ is likely to reduce the
likelihood of triggering events.

> We are running into more and more users encountering the issue on systems
> we have updated, forcing us to have to downgrade the kernel on them yet as
> well (including the system we were able to reproduce it on and test with
> before). Is there any other information we might provide before we do that?

Given the assumption that developers are reproducing the same
situation that you are, hopefully there is not a need for additional
information from the production sites.

Thanks,

Ben

From stephan.wiesand@desy.de  Thu Nov 16 17:26:22 2017
From: stephan.wiesand@desy.de (Stephan Wiesand)
Date: Thu, 16 Nov 2017 18:26:22 +0100
Subject: [OpenAFS] getcwd() error for RHEL 7.4 kernel
In-Reply-To: <20171116060610.GK82825@kduck.kaduk.org>
References: <CAE6TTt4NHqToxD8i=f2mn9ohc0WaSPzmK93Oqt5MJyQ-N+rcAg@mail.gmail.com> <CAE6TTt4f+8cqJA6DJ12b=qug6C=J280QyjnjkosiEae+2vuMuA@mail.gmail.com> <CAE6TTt4iPKhLq-u7u8MwaS1sJhM3UE_VH2xtnxjyn5kv_zJ6Qg@mail.gmail.com> <20171027162415.GA96685@kduck.kaduk.org> <CAE6TTt44d8naAQpjD2NpD727VOY3CViGVJhJZRgdG-ucxVy-qg@mail.gmail.com> <20171028124235.GG96685@kduck.kaduk.org> <CAE6TTt5dVmy_ZQtW4-OGXd5fJeDhH4tKDcAhusCeNoonyPsX7w@mail.gmail.com> <C3DFFF3B-0C6C-4BC9-BFEC-B446AC6E5F99@sinenomine.net> <CAE6TTt750=VZ7NtaONBuqpKVRo+tmMrYJY8c_oYnFzoT18exrA@mail.gmail.com> <CAE6TTt49VJDiEzN+Lh68djtF7hyAMNmWPke_aE5mEd13NeYAtw@mail.gmail.com> <20171116060610.GK82825@kduck.kaduk.org>
Message-ID: <89D3F54E-E261-4D9B-9581-8D84136226D4@desy.de>

On Nov 16, 2017, at 07:06 , Benjamin Kaduk wrote:

> On Wed, Nov 15, 2017 at 01:02:15PM -0500, Matt Vander Werf wrote:
>> Hello,
>>=20
>> Are there any updates or progress on a potential fix for this issue?
>> Anything we can do to help figure things out?
>=20
> This topic was on the agenda for our release-team meeting yesterday.

Well, it has been for the last couple of weeks.

> If I remmber correctly, multiple developers have gotten fairly
> reliable ways to reproduce the issue locally.
> It also seems that as a workaround, reverting
> https://gerrit.openafs.org/#/c/12451/ is likely to reduce the
> likelihood of triggering events.

Yes, but there's at least one known client configuration (small stat =
cache, -disable-dynamic-vcaches) for which reverting that change =
actually makes things worse.

I ran a number of tests again today. I was unable to trigger any issue =
with the EL7.3 kernel, neither with OpenAFS 1.6.20 nor 1.6.21.1 nor =
1.6.21.1 with the change in question reverted. I was able to trigger the =
getcwd issue or the other one (a git clone into AFS space failing right =
away) with the EL7.4 kernel, depending on circumstances. We do have a =
problem with the 7.4 kernel, with or without that change.

The following could be complete nonsense, so please correct me: The best =
bet for sites getting desperate is probably to increase the minimum stat =
cache size beyond typical actual use on the client.

- Stephan

>> We are running into more and more users encountering the issue on =
systems
>> we have updated, forcing us to have to downgrade the kernel on them =
yet as
>> well (including the system we were able to reproduce it on and test =
with
>> before). Is there any other information we might provide before we do =
that?
>=20
> Given the assumption that developers are reproducing the same
> situation that you are, hopefully there is not a need for additional
> information from the production sites.
>=20
> Thanks,
>=20
> Ben


From cwseys@physics.wisc.edu  Fri Nov 17 18:22:14 2017
From: cwseys@physics.wisc.edu (Chad William Seys)
Date: Fri, 17 Nov 2017 12:22:14 -0600
Subject: [OpenAFS] Re: OpenAFS-info digest, Vol 1 #6856 - 1 msg
In-Reply-To: <20171117170101.3B248D0@grand.central.org>
References: <20171117170101.3B248D0@grand.central.org>
Message-ID: <17db8738-9ed7-71a0-3782-fd0f4d2d427a@physics.wisc.edu>

Is it time for git bisect?  (Not sure how easy that is with redhat kernel.)

Chad.

From kaduk@mit.edu  Fri Nov 17 18:34:22 2017
From: kaduk@mit.edu (Benjamin Kaduk)
Date: Fri, 17 Nov 2017 12:34:22 -0600
Subject: [OpenAFS] Re: OpenAFS-info digest, Vol 1 #6856 - 1 msg
In-Reply-To: <17db8738-9ed7-71a0-3782-fd0f4d2d427a@physics.wisc.edu>
References: <20171117170101.3B248D0@grand.central.org>
 <17db8738-9ed7-71a0-3782-fd0f4d2d427a@physics.wisc.edu>
Message-ID: <20171117183422.GO82825@kduck.kaduk.org>

On Fri, Nov 17, 2017 at 12:22:14PM -0600, Chad William Seys wrote:
> Is it time for git bisect?  (Not sure how easy that is with redhat kernel.)

Red Hat is now only delivering monolithic kernel patches, so
bisection in the strict sense is impossible.

-aben

From drosih@rpi.edu  Fri Nov 17 22:35:25 2017
From: drosih@rpi.edu (Garance A Drosehn)
Date: Fri, 17 Nov 2017 17:35:25 -0500
Subject: [OpenAFS] getcwd() error for RHEL 7.4 kernel
In-Reply-To: <20171018232122.GD96685@kduck.kaduk.org>
References: <CAFc4NQ8OBzFaPcMFPGqB6x25tT9aMAuqmqVK4bF1zTi_rZ8aWw@mail.gmail.com>
 <20171018232122.GD96685@kduck.kaduk.org>
Message-ID: <B2C5FF37-1D23-40AC-83C5-E1AA20A89F47@rpi.edu>

On 18 Oct 2017, at 19:21, Benjamin Kaduk wrote:

> On Tue, Oct 17, 2017 at 11:55:27AM -0400, Jacob Bonek wrote:
>>
>> This is a major issue that has caused us to have to stay at the 
>> latest
>> pre-RHEL 7.4 kernel for a long time now while this issue has existed.
>> This may be related to previous issues with getcwd() but something in
>> the RHEL 7.4 kernel seems to have made it much worse.

>> Has anyone else experienced this issue with RHEL 7.4? Is there 
>> anything
>> that we can do to narrow down what is causing this?
>
> I think we've seen another report or two, but it's always been hard to
> reproduce.  That said, with the specifics you've offered about the
> kernel version that introduced the issue, we've got a couple folks
> trying to reproduce in a controlled environment.

I'm seeing this (a little), but haven't had time to look into it.  But
here's some thoughts/observations:

I have three RHEL systems, all currently running:

kernel.x86_64             3.10.0-693.el7

They're all running the exact same build of OpenAFS, because I built
it on a different system, created RPM's, and installed the exact same
RPM's on all three systems.

kmod-openafs.x86_64       1.6.21-1.3.10.0_693.el7
openafs.x86_64            1.6.21-1.el7
openafs-client.x86_64     1.6.21-1.el7
openafs-docs.x86_64       1.6.21-1.el7
openafs-krb5.x86_64       1.6.21-1.el7

These are three remote-access machines for RPI users, so the intent is
that they should be exactly the same.  I'm sure there are some minor
changes, but at least for the kernel and openafs modules they are
definitely the same.

On one of them, if I log in to my userid and 'sudo bash', I get a lot
of messages like:

shell-init: error retrieving current directory: \
             getcwd: cannot access parent directories: No such file or 
directory
job-working-directory: error retrieving current directory: \
             getcwd: cannot access parent directories: No such file or 
directory

I've only seen this if the active working directory is my home 
directory.
It won't happen if I 'cd' into some sub-directory under my home 
directory
before I do the 'sudo bash'.

This seems to always happen on one of the three machines.  It never 
happens
on a second machine, and it *sometimes* happens on the third machine.  
By
"sometimes", I mean that some days it never happens, but other days it 
seems
to happen all the time.  I have not seen the problem right at login, but 
only
if I do a 'sudo bash' while in my home directory at any time after I 
logged in.

Once I have done the 'sudo bash', I can then 'cd' into the home 
directory
of my original userid and there are no error messages.

These machines are used by maybe 100 different people.  I have not heard 
of
anyone who has seen these error messages when they login, but we do have
some users who never report errors as long as they can get their work 
done.
And of course, I'm the only one who would be doing 'sudo' commands on 
these
machines.

I wonder if it has to do with the home directory being an AFS mount 
point
(as opposed to a standard directory somewhere inside an AFS volume), but 
I
have not had the time to do any tests of that idea.

The fact that I don't see the same behavior on all three machines makes 
me
wonder if it has to do with how much the other users have been doing.  
Maybe
they've used up more of the local AFS cache on some machines than 
others.
I haven't had the chance to reboot any of these machines for a few 
months
now, but I hope to do that over the long thanksgiving weekend.  Given 
the
errors seen at some other sites, I probably won't upgrade the kernel or
version of OpenAFS until the semester break.

-- 
Garance Alistair Drosehn                =     drosih@rpi.edu
Senior Systems Programmer               or   gad@FreeBSD.org
Rensselaer Polytechnic Institute;             Troy, NY;  USA

From mvitale@sinenomine.net  Sun Nov 19 20:41:00 2017
From: mvitale@sinenomine.net (Mark Vitale)
Date: Sun, 19 Nov 2017 20:41:00 +0000
Subject: [OpenAFS] getcwd() error for RHEL 7.4 kernel
In-Reply-To: <89D3F54E-E261-4D9B-9581-8D84136226D4@desy.de>
References: <CAE6TTt4NHqToxD8i=f2mn9ohc0WaSPzmK93Oqt5MJyQ-N+rcAg@mail.gmail.com>
 <CAE6TTt4f+8cqJA6DJ12b=qug6C=J280QyjnjkosiEae+2vuMuA@mail.gmail.com>
 <CAE6TTt4iPKhLq-u7u8MwaS1sJhM3UE_VH2xtnxjyn5kv_zJ6Qg@mail.gmail.com>
 <20171027162415.GA96685@kduck.kaduk.org>
 <CAE6TTt44d8naAQpjD2NpD727VOY3CViGVJhJZRgdG-ucxVy-qg@mail.gmail.com>
 <20171028124235.GG96685@kduck.kaduk.org>
 <CAE6TTt5dVmy_ZQtW4-OGXd5fJeDhH4tKDcAhusCeNoonyPsX7w@mail.gmail.com>
 <C3DFFF3B-0C6C-4BC9-BFEC-B446AC6E5F99@sinenomine.net>
 <CAE6TTt750=VZ7NtaONBuqpKVRo+tmMrYJY8c_oYnFzoT18exrA@mail.gmail.com>
 <CAE6TTt49VJDiEzN+Lh68djtF7hyAMNmWPke_aE5mEd13NeYAtw@mail.gmail.com>
 <20171116060610.GK82825@kduck.kaduk.org>
 <89D3F54E-E261-4D9B-9581-8D84136226D4@desy.de>
Message-ID: <5ACDCF62-22A5-4C98-9463-2491CF078927@sinenomine.net>

DQo+IE9uIE5vdiAxNiwgMjAxNywgYXQgMTI6MjYgUE0sIFN0ZXBoYW4gV2llc2FuZCA8c3RlcGhh
bi53aWVzYW5kQGRlc3kuZGU+IHdyb3RlOg0KPiANCj4gDQo+IE9uIE5vdiAxNiwgMjAxNywgYXQg
MDc6MDYgLCBCZW5qYW1pbiBLYWR1ayB3cm90ZToNCj4gDQo+PiBPbiBXZWQsIE5vdiAxNSwgMjAx
NyBhdCAwMTowMjoxNVBNIC0wNTAwLCBNYXR0IFZhbmRlciBXZXJmIHdyb3RlOg0KPj4+IEhlbGxv
LA0KPj4+IA0KPj4+IEFyZSB0aGVyZSBhbnkgdXBkYXRlcyBvciBwcm9ncmVzcyBvbiBhIHBvdGVu
dGlhbCBmaXggZm9yIHRoaXMgaXNzdWU/DQo+Pj4gQW55dGhpbmcgd2UgY2FuIGRvIHRvIGhlbHAg
ZmlndXJlIHRoaW5ncyBvdXQ/DQo+PiANCj4+IFRoaXMgdG9waWMgd2FzIG9uIHRoZSBhZ2VuZGEg
Zm9yIG91ciByZWxlYXNlLXRlYW0gbWVldGluZyB5ZXN0ZXJkYXkuDQo+IA0KPiBXZWxsLCBpdCBo
YXMgYmVlbiBmb3IgdGhlIGxhc3QgY291cGxlIG9mIHdlZWtzLg0KPiANCj4+IElmIEkgcmVtbWJl
ciBjb3JyZWN0bHksIG11bHRpcGxlIGRldmVsb3BlcnMgaGF2ZSBnb3R0ZW4gZmFpcmx5DQo+PiBy
ZWxpYWJsZSB3YXlzIHRvIHJlcHJvZHVjZSB0aGUgaXNzdWUgbG9jYWxseS4NCj4+IEl0IGFsc28g
c2VlbXMgdGhhdCBhcyBhIHdvcmthcm91bmQsIHJldmVydGluZw0KPj4gaHR0cHM6Ly9nZXJyaXQu
b3BlbmFmcy5vcmcvIy9jLzEyNDUxLyBpcyBsaWtlbHkgdG8gcmVkdWNlIHRoZQ0KPj4gbGlrZWxp
aG9vZCBvZiB0cmlnZ2VyaW5nIGV2ZW50cy4NCj4gDQo+IFllcywgYnV0IHRoZXJl4oCZcyBhdCBs
ZWFzdCBvbmUga25vd24gY2xpZW50IGNvbmZpZ3VyYXRpb24gKHNtYWxsIHN0YXQgY2FjaGUsIC1k
aXNhYmxlLWR5bmFtaWMtdmNhY2hlcykgZm9yIHdoaWNoIHJldmVydGluZyB0aGF0IGNoYW5nZSBh
Y3R1YWxseSBtYWtlcyB0aGluZ3Mgd29yc2UuDQoNClRoZSByb290IGNhdXNlIGlzIHRoYXQgdGhl
IHNlbWFudGljcyBvZiBMaW51eCBkX2ludmFsaWRhdGUoKSBjaGFuZ2VkIGJldHdlZW4NCjMuMTAu
MC01MTQgKFJIL0NlbnRPUyA3LjMpIGFuZCAzLjEwLjAtNjkzIChSSC9DZW50T1MgNy40KS4gIA0K
VGhlIGZvcm1lciB3b3VsZCByZXR1cm4gLUVCVVNZIGlmIHlvdSBhdHRlbXB0ZWQgdG8gaW52YWxp
ZGF0ZSB0aGUNCmN1cnJlbnQgd29ya2luZyBkaXJlY3RvcnkuICBUaGUgbGF0dGVyIHdpbGwgaW52
YWxpZGF0ZSAodW5oYXNoKQ0KdGhlIGN1cnJlbnQgd29ya2luZyBkaXJlY3RvcnnigJlzIGRlbnRy
eSB3aXRob3V0IGEgc2Vjb25kIHRob3VnaHQuDQpPcGVuQUZTIGNvZGUgaW4gYWZzX1NoYWtlTG9v
c2VWQ2FjaGVzKCkgY3VycmVudGx5IHJlbGllcyBvbiB0aGUgZm9ybWVyIGJlaGF2aW9yDQp0byBw
cmV2ZW50IHRoZSBnZXRjd2QoKSBFTk9FTlQgcHJvYmxlbS4NCg0KSSBhbSB3b3JraW5nIG9uIGEg
cGF0Y2ggYW5kIHdpbGwgc3VibWl0IGl0IHRvIGdlcnJpdCB3aGVuIGl0IHBhc3NlcyBteSB0ZXN0
cy4NCg0KVGhhbmsgeW91IHRvIGV2ZXJ5b25lIHdobyBzaGFyZWQgZGVidWdnaW5nIGFuZCB0ZXN0
IHJlc3VsdHMuDQpJIHdpbGwgcG9zdCBoZXJlIGFnYWluIHdoZW4gdGhlIHBhdGNoIGlzIGF2YWls
YWJsZSBpbiBnZXJyaXQsIHNvIHRoYXQgYW55b25lDQp3aG8gd2lzaGVzIG1heSB0ZXN0IGl0IGlu
IHRoZWlyIHNldHVwLg0KDQpSZWdhcmRzLA0K4oCUDQpNYXJrIFZpdGFsZQ0KU2luZSBOb21pbmUg
QXNzb2NpYXRlcw0KDQo=

From kaduk@mit.edu  Sun Nov 19 22:09:20 2017
From: kaduk@mit.edu (Benjamin Kaduk)
Date: Sun, 19 Nov 2017 16:09:20 -0600
Subject: [OpenAFS] getcwd() error for RHEL 7.4 kernel
In-Reply-To: <B2C5FF37-1D23-40AC-83C5-E1AA20A89F47@rpi.edu>
References: <CAFc4NQ8OBzFaPcMFPGqB6x25tT9aMAuqmqVK4bF1zTi_rZ8aWw@mail.gmail.com>
 <20171018232122.GD96685@kduck.kaduk.org>
 <B2C5FF37-1D23-40AC-83C5-E1AA20A89F47@rpi.edu>
Message-ID: <20171119220919.GQ82825@kduck.kaduk.org>

On Fri, Nov 17, 2017 at 05:35:25PM -0500, Garance A Drosehn wrote:
> 
> I wonder if it has to do with the home directory being an AFS mount 
> point
> (as opposed to a standard directory somewhere inside an AFS volume), but 
> I
> have not had the time to do any tests of that idea.
> 
> The fact that I don't see the same behavior on all three machines makes 
> me
> wonder if it has to do with how much the other users have been doing.  
> Maybe
> they've used up more of the local AFS cache on some machines than 
> others.

It certainly seems plausible, given the observations I've seen about
the size of the -stat argument to afsd relative to actual usage.

-Ben

From jason@rampaginggeek.com  Sun Nov 26 14:40:42 2017
From: jason@rampaginggeek.com (Jason Edgecombe)
Date: Sun, 26 Nov 2017 09:40:42 -0500
Subject: [OpenAFS] Phasing out as buildbot admin
Message-ID: <f85d0d6e-2f9e-c424-6120-c3adaca2a857@rampaginggeek.com>

Hi everyone,

I want to let everyone  know that I'm phasing out as the buildbot admin. 
I haven't been doing much with it lately, and I'd rather hand it off to 
someone else that is more involved. Please direct all of your buildbot 
communication to Benjamin Kaduk <kaduk@mit.edu> and Michael Meffie 
<mmeffie@sinenomine.net>. I'll still be around, but I'll mostly be 
lurking. It's been a pleasure to work with everyone, and I wish everyone 
the best.

Sincerely,

Jason


From derek@ihtfp.com  Sun Nov 26 15:04:53 2017
From: derek@ihtfp.com (Derek Atkins)
Date: Sun, 26 Nov 2017 10:04:53 -0500
Subject: [OpenAFS] Phasing out as buildbot admin
In-Reply-To: <f85d0d6e-2f9e-c424-6120-c3adaca2a857@rampaginggeek.com>
References: <f85d0d6e-2f9e-c424-6120-c3adaca2a857@rampaginggeek.com>
Message-ID: <22c8b41436a9947fd917a75501ea7f20.squirrel@mail2.ihtfp.org>

Thank you for all your service!
-derek

On Sun, November 26, 2017 9:40 am, Jason Edgecombe wrote:
> Hi everyone,
>
> I want to let everyone  know that I'm phasing out as the buildbot admin.
> I haven't been doing much with it lately, and I'd rather hand it off to
> someone else that is more involved. Please direct all of your buildbot
> communication to Benjamin Kaduk <kaduk@mit.edu> and Michael Meffie
> <mmeffie@sinenomine.net>. I'll still be around, but I'll mostly be
> lurking. It's been a pleasure to work with everyone, and I wish everyone
> the best.
>
> Sincerely,
>
> Jason
>
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info
>


-- 
       Derek Atkins                 617-623-3745
       derek@ihtfp.com             www.ihtfp.com
       Computer and Internet Security Consultant


-- 
       Derek Atkins                 617-623-3745
       derek@ihtfp.com             www.ihtfp.com
       Computer and Internet Security Consultant


From botsch@cnf.cornell.edu  Sun Nov 26 17:44:24 2017
From: botsch@cnf.cornell.edu (Dave Botsch)
Date: Sun, 26 Nov 2017 12:44:24 -0500
Subject: [OpenAFS] Re: [OpenAFS-devel] Phasing out as buildbot admin
In-Reply-To: <f85d0d6e-2f9e-c424-6120-c3adaca2a857@rampaginggeek.com>
References: <f85d0d6e-2f9e-c424-6120-c3adaca2a857@rampaginggeek.com>
Message-ID: <20171126174424.GX15420@cnf.cornell.edu>

Jason,

On behalf of the Foundation Board and of myself, thanks for all the time
and work you've put in keeping the Buildbot system going. This effort
has been invaluable to keeping the OpenAFS effort moving forward.

Again, thank you!

On Sun, Nov 26, 2017 at 09:40:42AM -0500, Jason Edgecombe wrote:
> Hi everyone,
>=20
> I want to let everyone=A0 know that I'm phasing out as the buildbot
> admin. I haven't been doing much with it lately, and I'd rather hand
> it off to someone else that is more involved. Please direct all of
> your buildbot communication to Benjamin Kaduk <kaduk@mit.edu> and
> Michael Meffie <mmeffie@sinenomine.net>. I'll still be around, but
> I'll mostly be lurking. It's been a pleasure to work with everyone,
> and I wish everyone the best.
>=20
> Sincerely,
>=20
> Jason
>=20
> _______________________________________________
> OpenAFS-devel mailing list
> OpenAFS-devel@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-devel

--=20
********************************
David William Botsch
Programmer/Analyst
@CNFComputing
botsch@cnf.cornell.edu
********************************

From giovanni.bracco@enea.it  Mon Nov 27 20:05:30 2017
From: giovanni.bracco@enea.it (Giovanni Bracco)
Date: Mon, 27 Nov 2017 21:05:30 +0100
Subject: [OpenAFS] windows server 2012 64 bit and integrated authentication with AFS
 token?
Message-ID: <b0b21be9-ae19-b7f7-927b-c912355ab769@enea.it>

hello!
we are trying to install and configure OpenAFS client on a Windows 
Server machine (vers. 2012 R2 build 9600 x86_64).

We have installed Kerberos MIT client (vers. 3.22) and we are able to 
obtain kerberos tickets for a principal from both the IdentityManager 
GUI and the Window command line interface, using kinit.

In the next step, we have installed AFS client and the Kerberos 
IdentityManager detects it, but their integration does not work, as the 
afs token can not be obtained.

We have tried with both OpenAFS client (vers. 1.7.3100) and AuriStor 
OpenAFS client (vers. 1.7.3300).

Nevertheless, if we operate in the command line, we can obtain kerberos 
tickets and tokens without problems (using kinit and aklog).

Any suggestion to  make the integration and the GUI work properly?

Giovanni

-- 
Giovanni Bracco
DTE-ICT-HPC
ENEA
Via E. Fermi 45
I-00044 Frascati (Roma) Italy
phone +39-06-9400-5597  mobile +39-3351992144
FAX   +39-06-9400-5735
E-mail  giovanni.bracco@enea.it
WWW http://www.afs.enea.it/bracco

From botsch@cnf.cornell.edu  Tue Nov 28 04:48:06 2017
From: botsch@cnf.cornell.edu (Dave Botsch)
Date: Mon, 27 Nov 2017 23:48:06 -0500
Subject: [OpenAFS] windows server 2012 64 bit and integrated authentication with AFS token?
In-Reply-To: <b0b21be9-ae19-b7f7-927b-c912355ab769@enea.it>
References: <b0b21be9-ae19-b7f7-927b-c912355ab769@enea.it>
Message-ID: <16000f41b70.27ea.7e7218444f75578ebec1b7dbb1486319@cnf.cornell.edu>

Does the integrated login pop up a fail error msg? If so, what?

Thanks.


On November 27, 2017 15:05:54 Giovanni Bracco <giovanni.bracco@enea.it> w=
rote:

> hello!
> we are trying to install and configure OpenAFS client on a Windows
> Server machine (vers. 2012 R2 build 9600 x86_64).
>
> We have installed Kerberos MIT client (vers. 3.22) and we are able to
> obtain kerberos tickets for a principal from both the IdentityManager
> GUI and the Window command line interface, using kinit.
>
> In the next step, we have installed AFS client and the Kerberos
> IdentityManager detects it, but their integration does not work, as the
> afs token can not be obtained.
>
> We have tried with both OpenAFS client (vers. 1.7.3100) and AuriStor
> OpenAFS client (vers. 1.7.3300).
>
> Nevertheless, if we operate in the command line, we can obtain kerberos
> tickets and tokens without problems (using kinit and aklog).
>
> Any suggestion to  make the integration and the GUI work properly?
>
> Giovanni
>
> --
> Giovanni Bracco
> DTE-ICT-HPC
> ENEA
> Via E. Fermi 45
> I-00044 Frascati (Roma) Italy
> phone +39-06-9400-5597  mobile +39-3351992144
> FAX   +39-06-9400-5735
> E-mail  giovanni.bracco@enea.it
> WWW http://www.afs.enea.it/bracco
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info



From botsch@cnf.cornell.edu  Tue Nov 28 19:28:03 2017
From: botsch@cnf.cornell.edu (Dave Botsch)
Date: Tue, 28 Nov 2017 14:28:03 -0500
Subject: [OpenAFS] windows server 2012 64 bit and integrated
 authentication with AFS token?
In-Reply-To: <d59e2c02-fa00-0560-9596-98968192f447@enea.it>
References: <b0b21be9-ae19-b7f7-927b-c912355ab769@enea.it>
 <16000f41b70.27ea.7e7218444f75578ebec1b7dbb1486319@cnf.cornell.edu>
 <d59e2c02-fa00-0560-9596-98968192f447@enea.it>
Message-ID: <20171128192803.GS15420@cnf.cornell.edu>

Hi.

What's the full message that is displayed (screenshot) ?

That sometimes gives an error code or message that tells you what went
wrong after the end result error.=20

For the Windows client, you can also turn on additional debugging for
the OpenAFS service to log what it does as it goes through trying to get
credentials at login.

Thanks.

On Tue, Nov 28, 2017 at 11:43:20AM +0100, Giovanni Ponti wrote:
> Dear Dave,
>=20
> thanks for your reply.
>=20
> The prompted popup message has the title "Failed to get credential
> for ..." with the message "Credential could not be obtained for cell
> ...". However, after closing the popup message, I can see that I
> have obtained the ticket in the Network Identity Manager windows.
>=20
> Thanks again,
> Giovanni
>=20
> On 28/11/2017 05:48, Dave Botsch wrote:
> >Does the integrated login pop up a fail error msg? If so, what?
> >
> >Thanks.
> >
> >
> >On November 27, 2017 15:05:54 Giovanni Bracco
> ><giovanni.bracco@enea.it> wrote:
> >
> >>hello!
> >>we are trying to install and configure OpenAFS client on a Windows
> >>Server machine (vers. 2012 R2 build 9600 x86_64).
> >>
> >>We have installed Kerberos MIT client (vers. 3.22) and we are able to
> >>obtain kerberos tickets for a principal from both the IdentityManager
> >>GUI and the Window command line interface, using kinit.
> >>
> >>In the next step, we have installed AFS client and the Kerberos
> >>IdentityManager detects it, but their integration does not work, as t=
he
> >>afs token can not be obtained.
> >>
> >>We have tried with both OpenAFS client (vers. 1.7.3100) and AuriStor
> >>OpenAFS client (vers. 1.7.3300).
> >>
> >>Nevertheless, if we operate in the command line, we can obtain kerber=
os
> >>tickets and tokens without problems (using kinit and aklog).
> >>
> >>Any suggestion to=A0 make the integration and the GUI work properly?
> >>
> >>Giovanni
> >>
> >>--=20
> >>Giovanni Bracco
> >>DTE-ICT-HPC
> >>ENEA
> >>Via E. Fermi 45
> >>I-00044 Frascati (Roma) Italy
> >>phone +39-06-9400-5597=A0 mobile +39-3351992144
> >>FAX=A0=A0 +39-06-9400-5735
> >>E-mail=A0 giovanni.bracco@enea.it
> >>WWW http://www.afs.enea.it/bracco
> >>_______________________________________________
> >>OpenAFS-info mailing list
> >>OpenAFS-info@openafs.org
> >>https://lists.openafs.org/mailman/listinfo/openafs-info
> >
> >
>=20
> --=20
> Ing. Giovanni Ponti, PhD
> DTE-ICT-HPC
> ENEA - C.R. Portici
> P.le E. Fermi, 1 (Loc. Granatello)
> 80055 Portici (NA), Italy
> phone : (+39) 081-7723564 | int.: [89] 2564
> fax   : (+39) 081-7723344
> email : giovanni.ponti@enea.it
> web   : http://www.afs.enea.it/gponti

--=20
********************************
David William Botsch
Programmer/Analyst
@CNFComputing
botsch@cnf.cornell.edu
********************************

From karl.behler@ipp.mpg.de  Tue Nov 28 21:03:15 2017
From: karl.behler@ipp.mpg.de (Karl Behler (IPP))
Date: Tue, 28 Nov 2017 22:03:15 +0100
Subject: [OpenAFS] Phasing out as buildbot admin
In-Reply-To: <f85d0d6e-2f9e-c424-6120-c3adaca2a857@rampaginggeek.com>
References: <f85d0d6e-2f9e-c424-6120-c3adaca2a857@rampaginggeek.com>
Message-ID: <270d6206-9d6a-3608-1d79-d2c847be266d@ipp.mpg.de>

Hi Jason,

I'm more or less a silent listener on this list (but an active AFS user).
I appreciate your past commitment (and the ongoing of your fellow and
successor "activists") very much.
Hope you will have a good time beeing free now.

All the best,
Karl

Am 26.11.2017 um 15:40 schrieb Jason Edgecombe:
> Hi everyone,
>
> I want to let everyone  know that I'm phasing out as the buildbot
> admin. I haven't been doing much with it lately, and I'd rather hand
> it off to someone else that is more involved. Please direct all of
> your buildbot communication to Benjamin Kaduk <kaduk@mit.edu> and
> Michael Meffie <mmeffie@sinenomine.net>. I'll still be around, but
> I'll mostly be lurking. It's been a pleasure to work with everyone,
> and I wish everyone the best.
>
> Sincerely,
>
> Jason
>
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info

-- 
Dr. Karl Behler, E1 CODAC
MPI f. Plasmaphysik
Boltzmannstr. 2
85748 Garching
+49 89 3299-1351


From botsch@cnf.cornell.edu  Wed Nov 29 15:53:21 2017
From: botsch@cnf.cornell.edu (Dave Botsch)
Date: Wed, 29 Nov 2017 10:53:21 -0500
Subject: [OpenAFS] windows server 2012 64 bit and integrated
 authentication with AFS token?
In-Reply-To: <7bc20de5-6471-c0d7-5919-e6e9505cf30e@enea.it>
References: <b0b21be9-ae19-b7f7-927b-c912355ab769@enea.it>
 <16000f41b70.27ea.7e7218444f75578ebec1b7dbb1486319@cnf.cornell.edu>
 <d59e2c02-fa00-0560-9596-98968192f447@enea.it>
 <20171128192803.GS15420@cnf.cornell.edu>
 <7bc20de5-6471-c0d7-5919-e6e9505cf30e@enea.it>
Message-ID: <20171129155321.GW15420@cnf.cornell.edu>

That's the integrated login message that pops up?

What version of KfW did you say you have installed?

Thanks.

On Wed, Nov 29, 2017 at 04:39:33PM +0100, Giovanni Ponti wrote:
> Dear Dave,
>=20
> the message I've reported is the full one. I simply avoid to report
> my nickname and the cell name. However, you can find the screenshot
> in attached.
>=20
> Regards,
> Giovanni
>=20
> On 28/11/2017 20:28, Dave Botsch wrote:
> >Hi.
> >
> >What's the full message that is displayed (screenshot) ?
> >
> >That sometimes gives an error code or message that tells you what went
> >wrong after the end result error.
> >
> >For the Windows client, you can also turn on additional debugging for
> >the OpenAFS service to log what it does as it goes through trying to g=
et
> >credentials at login.
> >
> >Thanks.
> >
> >On Tue, Nov 28, 2017 at 11:43:20AM +0100, Giovanni Ponti wrote:
> >>Dear Dave,
> >>
> >>thanks for your reply.
> >>
> >>The prompted popup message has the title "Failed to get credential
> >>for ..." with the message "Credential could not be obtained for cell
> >>...". However, after closing the popup message, I can see that I
> >>have obtained the ticket in the Network Identity Manager windows.
> >>
> >>Thanks again,
> >>Giovanni
> >>
> >>On 28/11/2017 05:48, Dave Botsch wrote:
> >>>Does the integrated login pop up a fail error msg? If so, what?
> >>>
> >>>Thanks.
> >>>
> >>>
> >>>On November 27, 2017 15:05:54 Giovanni Bracco
> >>><giovanni.bracco@enea.it> wrote:
> >>>
> >>>>hello!
> >>>>we are trying to install and configure OpenAFS client on a Windows
> >>>>Server machine (vers. 2012 R2 build 9600 x86_64).
> >>>>
> >>>>We have installed Kerberos MIT client (vers. 3.22) and we are able =
to
> >>>>obtain kerberos tickets for a principal from both the IdentityManag=
er
> >>>>GUI and the Window command line interface, using kinit.
> >>>>
> >>>>In the next step, we have installed AFS client and the Kerberos
> >>>>IdentityManager detects it, but their integration does not work, as=
 the
> >>>>afs token can not be obtained.
> >>>>
> >>>>We have tried with both OpenAFS client (vers. 1.7.3100) and AuriSto=
r
> >>>>OpenAFS client (vers. 1.7.3300).
> >>>>
> >>>>Nevertheless, if we operate in the command line, we can obtain kerb=
eros
> >>>>tickets and tokens without problems (using kinit and aklog).
> >>>>
> >>>>Any suggestion to=A0 make the integration and the GUI work properly=
?
> >>>>
> >>>>Giovanni
> >>>>
> >>>>--=20
> >>>>Giovanni Bracco
> >>>>DTE-ICT-HPC
> >>>>ENEA
> >>>>Via E. Fermi 45
> >>>>I-00044 Frascati (Roma) Italy
> >>>>phone +39-06-9400-5597=A0 mobile +39-3351992144
> >>>>FAX=A0=A0 +39-06-9400-5735
> >>>>E-mail=A0 giovanni.bracco@enea.it
> >>>>WWW http://www.afs.enea.it/bracco
> >>>>_______________________________________________
> >>>>OpenAFS-info mailing list
> >>>>OpenAFS-info@openafs.org
> >>>>https://lists.openafs.org/mailman/listinfo/openafs-info
> >>>
> >>>
> >>
> >>--=20
> >>Ing. Giovanni Ponti, PhD
> >>DTE-ICT-HPC
> >>ENEA - C.R. Portici
> >>P.le E. Fermi, 1 (Loc. Granatello)
> >>80055 Portici (NA), Italy
> >>phone : (+39) 081-7723564 | int.: [89] 2564
> >>fax   : (+39) 081-7723344
> >>email : giovanni.ponti@enea.it
> >>web   : http://www.afs.enea.it/gponti
> >
>=20
> --=20
> Ing. Giovanni Ponti, PhD
> DTE-ICT-HPC
> ENEA - C.R. Portici
> P.le E. Fermi, 1 (Loc. Granatello)
> 80055 Portici (NA), Italy
> phone : (+39) 081-7723564 | int.: [89] 2564
> fax   : (+39) 081-7723344
> email : giovanni.ponti@enea.it
> web   : http://www.afs.enea.it/gponti



--=20
********************************
David William Botsch
Programmer/Analyst
@CNFComputing
botsch@cnf.cornell.edu
********************************

From andreas.ladanyi@kit.edu  Wed Nov 29 16:02:35 2017
From: andreas.ladanyi@kit.edu (Andreas Ladanyi)
Date: Wed, 29 Nov 2017 17:02:35 +0100
Subject: [OpenAFS] Windows 10 Pro and OpenAFS Client
Message-ID: <978819f6-a58b-6fd9-6bc2-9cf9ccfa0b86@kit.edu>

Hi,

what is your experience with Windows 10 Pro and the latest package
OpenAFS for Windows ?

Is there any special what i have to consider at OpenAFS for Windows
setup and at daily operating on the client ?


Regards,

Andreas


From l.schimmer@cgv.tugraz.at  Thu Nov 30 08:19:32 2017
From: l.schimmer@cgv.tugraz.at (Lars Schimmer)
Date: Thu, 30 Nov 2017 09:19:32 +0100
Subject: [OpenAFS] Windows 10 Pro and OpenAFS Client
In-Reply-To: <978819f6-a58b-6fd9-6bc2-9cf9ccfa0b86@kit.edu>
References: <978819f6-a58b-6fd9-6bc2-9cf9ccfa0b86@kit.edu>
Message-ID: <460bdbd2-0b89-b8de-4fe4-2aa8f6a737f4@cgv.tugraz.at>

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--eDQpflCpjL8sw2WjrkPkCArMqdmgDH2Lh
Content-Type: multipart/mixed; boundary="9GTAaVp3iv8dr5I1wDSO5el9s26oKLnCd";
 protected-headers="v1"
From: Lars Schimmer <l.schimmer@cgv.tugraz.at>
To: openafs-info@openafs.org
Message-ID: <460bdbd2-0b89-b8de-4fe4-2aa8f6a737f4@cgv.tugraz.at>
Subject: Re: [OpenAFS] Windows 10 Pro and OpenAFS Client
References: <978819f6-a58b-6fd9-6bc2-9cf9ccfa0b86@kit.edu>
In-Reply-To: <978819f6-a58b-6fd9-6bc2-9cf9ccfa0b86@kit.edu>

--9GTAaVp3iv8dr5I1wDSO5el9s26oKLnCd
Content-Type: text/plain; charset=utf-8
Content-Language: de-AT
Content-Transfer-Encoding: quoted-printable

On 2017-11-29 17:02, Andreas Ladanyi wrote:
> Hi,
>=20
> what is your experience with Windows 10 Pro and the latest package
> OpenAFS for Windows ?
>=20
> Is there any special what i have to consider at OpenAFS for Windows
> setup and at daily operating on the client ?

Worked fine over here for years now. Depending on your setup of the cell
you do/do not need integrated login and some other special options. In
general you just need to enter your cell name and it works quite well.

But take care, depending on the setup of your windows (secure boot,etc.)
OpenAFS will no more work on windows after 31.12.2017, as the kernel
module has no more a valid signature (in the def. of MS).

> Regards,
>=20
> Andreas
>=20
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info
>=20


MfG,
Lars Schimmer
--=20
-------------------------------------------------------------
TU Graz, Institut f=C3=BCr ComputerGraphik & WissensVisualisierung
Tel: +43 316 873-5405       E-Mail: l.schimmer@cgv.tugraz.at
Fax: +43 316 873-5402       PGP-Key-ID: 0x4A9B1723




--9GTAaVp3iv8dr5I1wDSO5el9s26oKLnCd--

--eDQpflCpjL8sw2WjrkPkCArMqdmgDH2Lh
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----

iF0EARECAB0WIQR0wxkJRmamY9krY7GZaG4TSpsXIwUCWh+/FAAKCRCZaG4TSpsX
I2PSAJ9jzM3u/7MMpQvOTtRDNoJR/3UJeACdH8U/5V43lwzxWHXoGI88nIqv+V4=
=sg2i
-----END PGP SIGNATURE-----

--eDQpflCpjL8sw2WjrkPkCArMqdmgDH2Lh--

From andreas.ladanyi@kit.edu  Thu Nov 30 10:10:28 2017
From: andreas.ladanyi@kit.edu (Andreas Ladanyi)
Date: Thu, 30 Nov 2017 11:10:28 +0100
Subject: [OpenAFS] Windows 10 Pro and OpenAFS Client
In-Reply-To: <460bdbd2-0b89-b8de-4fe4-2aa8f6a737f4@cgv.tugraz.at>
References: <978819f6-a58b-6fd9-6bc2-9cf9ccfa0b86@kit.edu>
 <460bdbd2-0b89-b8de-4fe4-2aa8f6a737f4@cgv.tugraz.at>
Message-ID: <c2f83ada-e7ab-29ea-69f3-d8c9c8874301@kit.edu>

Hi Lars,
> On 2017-11-29 17:02, Andreas Ladanyi wrote:
>> Hi,
>>
>> what is your experience with Windows 10 Pro and the latest package
>> OpenAFS for Windows ?
>>
>> Is there any special what i have to consider at OpenAFS for Windows
>> setup and at daily operating on the client ?
> Worked fine over here for years now. Depending on your setup of the cell
> you do/do not need integrated login and some other special options. In
> general you just need to enter your cell name and it works quite well.
>
> But take care, depending on the setup of your windows (secure boot,etc.)
> OpenAFS will no more work on windows after 31.12.2017, as the kernel
> module has no more a valid signature (in the def. of MS).

Ok, so do i have to setup a new Windows 10 on the new system with legacy
Boot and turn off driver verification in future setups ?

cheers and thanks,
Andreas



>
>> Regards,
>>
>> Andreas
>>
>> _______________________________________________
>> OpenAFS-info mailing list
>> OpenAFS-info@openafs.org
>> https://lists.openafs.org/mailman/listinfo/openafs-info
>>
>
> MfG,
> Lars Schimmer


From giovanni.ponti@enea.it  Tue Nov 28 10:43:20 2017
From: giovanni.ponti@enea.it (Giovanni Ponti)
Date: Tue, 28 Nov 2017 11:43:20 +0100
Subject: [OpenAFS] windows server 2012 64 bit and integrated
 authentication with AFS token?
In-Reply-To: <16000f41b70.27ea.7e7218444f75578ebec1b7dbb1486319@cnf.cornell.edu>
References: <b0b21be9-ae19-b7f7-927b-c912355ab769@enea.it>
 <16000f41b70.27ea.7e7218444f75578ebec1b7dbb1486319@cnf.cornell.edu>
Message-ID: <d59e2c02-fa00-0560-9596-98968192f447@enea.it>

Dear Dave,

thanks for your reply.

The prompted popup message has the title "Failed to get credential for 
..." with the message "Credential could not be obtained for cell ...". 
However, after closing the popup message, I can see that I have obtained 
the ticket in the Network Identity Manager windows.

Thanks again,
Giovanni

On 28/11/2017 05:48, Dave Botsch wrote:
> Does the integrated login pop up a fail error msg? If so, what?
> 
> Thanks.
> 
> 
> On November 27, 2017 15:05:54 Giovanni Bracco <giovanni.bracco@enea.it> 
> wrote:
> 
>> hello!
>> we are trying to install and configure OpenAFS client on a Windows
>> Server machine (vers. 2012 R2 build 9600 x86_64).
>>
>> We have installed Kerberos MIT client (vers. 3.22) and we are able to
>> obtain kerberos tickets for a principal from both the IdentityManager
>> GUI and the Window command line interface, using kinit.
>>
>> In the next step, we have installed AFS client and the Kerberos
>> IdentityManager detects it, but their integration does not work, as the
>> afs token can not be obtained.
>>
>> We have tried with both OpenAFS client (vers. 1.7.3100) and AuriStor
>> OpenAFS client (vers. 1.7.3300).
>>
>> Nevertheless, if we operate in the command line, we can obtain kerberos
>> tickets and tokens without problems (using kinit and aklog).
>>
>> Any suggestion to  make the integration and the GUI work properly?
>>
>> Giovanni
>>
>> -- 
>> Giovanni Bracco
>> DTE-ICT-HPC
>> ENEA
>> Via E. Fermi 45
>> I-00044 Frascati (Roma) Italy
>> phone +39-06-9400-5597  mobile +39-3351992144
>> FAX   +39-06-9400-5735
>> E-mail  giovanni.bracco@enea.it
>> WWW http://www.afs.enea.it/bracco
>> _______________________________________________
>> OpenAFS-info mailing list
>> OpenAFS-info@openafs.org
>> https://lists.openafs.org/mailman/listinfo/openafs-info
> 
> 

-- 
Ing. Giovanni Ponti, PhD
DTE-ICT-HPC
ENEA - C.R. Portici
P.le E. Fermi, 1 (Loc. Granatello)
80055 Portici (NA), Italy
phone : (+39) 081-7723564 | int.: [89] 2564
fax   : (+39) 081-7723344
email : giovanni.ponti@enea.it
web   : http://www.afs.enea.it/gponti

From giovanni.ponti@enea.it  Wed Nov 29 15:39:33 2017
From: giovanni.ponti@enea.it (Giovanni Ponti)
Date: Wed, 29 Nov 2017 16:39:33 +0100
Subject: [OpenAFS] windows server 2012 64 bit and integrated
 authentication with AFS token?
In-Reply-To: <20171128192803.GS15420@cnf.cornell.edu>
References: <b0b21be9-ae19-b7f7-927b-c912355ab769@enea.it>
 <16000f41b70.27ea.7e7218444f75578ebec1b7dbb1486319@cnf.cornell.edu>
 <d59e2c02-fa00-0560-9596-98968192f447@enea.it>
 <20171128192803.GS15420@cnf.cornell.edu>
Message-ID: <7bc20de5-6471-c0d7-5919-e6e9505cf30e@enea.it>

This is a multi-part message in MIME format.
--------------EF51F34782A22A6BBABD0212
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit

Dear Dave,

the message I've reported is the full one. I simply avoid to report my 
nickname and the cell name. However, you can find the screenshot in 
attached.

Regards,
Giovanni

On 28/11/2017 20:28, Dave Botsch wrote:
> Hi.
> 
> What's the full message that is displayed (screenshot) ?
> 
> That sometimes gives an error code or message that tells you what went
> wrong after the end result error.
> 
> For the Windows client, you can also turn on additional debugging for
> the OpenAFS service to log what it does as it goes through trying to get
> credentials at login.
> 
> Thanks.
> 
> On Tue, Nov 28, 2017 at 11:43:20AM +0100, Giovanni Ponti wrote:
>> Dear Dave,
>>
>> thanks for your reply.
>>
>> The prompted popup message has the title "Failed to get credential
>> for ..." with the message "Credential could not be obtained for cell
>> ...". However, after closing the popup message, I can see that I
>> have obtained the ticket in the Network Identity Manager windows.
>>
>> Thanks again,
>> Giovanni
>>
>> On 28/11/2017 05:48, Dave Botsch wrote:
>>> Does the integrated login pop up a fail error msg? If so, what?
>>>
>>> Thanks.
>>>
>>>
>>> On November 27, 2017 15:05:54 Giovanni Bracco
>>> <giovanni.bracco@enea.it> wrote:
>>>
>>>> hello!
>>>> we are trying to install and configure OpenAFS client on a Windows
>>>> Server machine (vers. 2012 R2 build 9600 x86_64).
>>>>
>>>> We have installed Kerberos MIT client (vers. 3.22) and we are able to
>>>> obtain kerberos tickets for a principal from both the IdentityManager
>>>> GUI and the Window command line interface, using kinit.
>>>>
>>>> In the next step, we have installed AFS client and the Kerberos
>>>> IdentityManager detects it, but their integration does not work, as the
>>>> afs token can not be obtained.
>>>>
>>>> We have tried with both OpenAFS client (vers. 1.7.3100) and AuriStor
>>>> OpenAFS client (vers. 1.7.3300).
>>>>
>>>> Nevertheless, if we operate in the command line, we can obtain kerberos
>>>> tickets and tokens without problems (using kinit and aklog).
>>>>
>>>> Any suggestion to  make the integration and the GUI work properly?
>>>>
>>>> Giovanni
>>>>
>>>> -- 
>>>> Giovanni Bracco
>>>> DTE-ICT-HPC
>>>> ENEA
>>>> Via E. Fermi 45
>>>> I-00044 Frascati (Roma) Italy
>>>> phone +39-06-9400-5597  mobile +39-3351992144
>>>> FAX   +39-06-9400-5735
>>>> E-mail  giovanni.bracco@enea.it
>>>> WWW http://www.afs.enea.it/bracco
>>>> _______________________________________________
>>>> OpenAFS-info mailing list
>>>> OpenAFS-info@openafs.org
>>>> https://lists.openafs.org/mailman/listinfo/openafs-info
>>>
>>>
>>
>> -- 
>> Ing. Giovanni Ponti, PhD
>> DTE-ICT-HPC
>> ENEA - C.R. Portici
>> P.le E. Fermi, 1 (Loc. Granatello)
>> 80055 Portici (NA), Italy
>> phone : (+39) 081-7723564 | int.: [89] 2564
>> fax   : (+39) 081-7723344
>> email : giovanni.ponti@enea.it
>> web   : http://www.afs.enea.it/gponti
> 

-- 
Ing. Giovanni Ponti, PhD
DTE-ICT-HPC
ENEA - C.R. Portici
P.le E. Fermi, 1 (Loc. Granatello)
80055 Portici (NA), Italy
phone : (+39) 081-7723564 | int.: [89] 2564
fax   : (+39) 081-7723344
email : giovanni.ponti@enea.it
web   : http://www.afs.enea.it/gponti

--------------EF51F34782A22A6BBABD0212
Content-Type: image/png;
 name="Screenshot from 2017-11-29 16-34-35.png"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
 filename="Screenshot from 2017-11-29 16-34-35.png"
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--------------EF51F34782A22A6BBABD0212--

From giovanni.ponti@enea.it  Wed Nov 29 15:58:58 2017
From: giovanni.ponti@enea.it (Giovanni Ponti)
Date: Wed, 29 Nov 2017 16:58:58 +0100
Subject: [OpenAFS] windows server 2012 64 bit and integrated
 authentication with AFS token?
In-Reply-To: <20171129155321.GW15420@cnf.cornell.edu>
References: <b0b21be9-ae19-b7f7-927b-c912355ab769@enea.it>
 <16000f41b70.27ea.7e7218444f75578ebec1b7dbb1486319@cnf.cornell.edu>
 <d59e2c02-fa00-0560-9596-98968192f447@enea.it>
 <20171128192803.GS15420@cnf.cornell.edu>
 <7bc20de5-6471-c0d7-5919-e6e9505cf30e@enea.it>
 <20171129155321.GW15420@cnf.cornell.edu>
Message-ID: <0841ae32-7ec5-6078-617d-e6eb37dc0f8d@enea.it>

Yes!
The version is the 3.22 from MIT.
I've also tried with the newest one (i.e., the 4.1), but with this I 
cannot obtain tickets!

Thanks,
Giovanni

On 29/11/2017 16:53, Dave Botsch wrote:
> That's the integrated login message that pops up?
> 
> What version of KfW did you say you have installed?
> 
> Thanks.
> 
> On Wed, Nov 29, 2017 at 04:39:33PM +0100, Giovanni Ponti wrote:
>> Dear Dave,
>>
>> the message I've reported is the full one. I simply avoid to report
>> my nickname and the cell name. However, you can find the screenshot
>> in attached.
>>
>> Regards,
>> Giovanni
>>
>> On 28/11/2017 20:28, Dave Botsch wrote:
>>> Hi.
>>>
>>> What's the full message that is displayed (screenshot) ?
>>>
>>> That sometimes gives an error code or message that tells you what went
>>> wrong after the end result error.
>>>
>>> For the Windows client, you can also turn on additional debugging for
>>> the OpenAFS service to log what it does as it goes through trying to get
>>> credentials at login.
>>>
>>> Thanks.
>>>
>>> On Tue, Nov 28, 2017 at 11:43:20AM +0100, Giovanni Ponti wrote:
>>>> Dear Dave,
>>>>
>>>> thanks for your reply.
>>>>
>>>> The prompted popup message has the title "Failed to get credential
>>>> for ..." with the message "Credential could not be obtained for cell
>>>> ...". However, after closing the popup message, I can see that I
>>>> have obtained the ticket in the Network Identity Manager windows.
>>>>
>>>> Thanks again,
>>>> Giovanni
>>>>
>>>> On 28/11/2017 05:48, Dave Botsch wrote:
>>>>> Does the integrated login pop up a fail error msg? If so, what?
>>>>>
>>>>> Thanks.
>>>>>
>>>>>
>>>>> On November 27, 2017 15:05:54 Giovanni Bracco
>>>>> <giovanni.bracco@enea.it> wrote:
>>>>>
>>>>>> hello!
>>>>>> we are trying to install and configure OpenAFS client on a Windows
>>>>>> Server machine (vers. 2012 R2 build 9600 x86_64).
>>>>>>
>>>>>> We have installed Kerberos MIT client (vers. 3.22) and we are able to
>>>>>> obtain kerberos tickets for a principal from both the IdentityManager
>>>>>> GUI and the Window command line interface, using kinit.
>>>>>>
>>>>>> In the next step, we have installed AFS client and the Kerberos
>>>>>> IdentityManager detects it, but their integration does not work, as the
>>>>>> afs token can not be obtained.
>>>>>>
>>>>>> We have tried with both OpenAFS client (vers. 1.7.3100) and AuriStor
>>>>>> OpenAFS client (vers. 1.7.3300).
>>>>>>
>>>>>> Nevertheless, if we operate in the command line, we can obtain kerberos
>>>>>> tickets and tokens without problems (using kinit and aklog).
>>>>>>
>>>>>> Any suggestion to  make the integration and the GUI work properly?
>>>>>>
>>>>>> Giovanni
>>>>>>
>>>>>> -- 
>>>>>> Giovanni Bracco
>>>>>> DTE-ICT-HPC
>>>>>> ENEA
>>>>>> Via E. Fermi 45
>>>>>> I-00044 Frascati (Roma) Italy
>>>>>> phone +39-06-9400-5597  mobile +39-3351992144
>>>>>> FAX   +39-06-9400-5735
>>>>>> E-mail  giovanni.bracco@enea.it
>>>>>> WWW http://www.afs.enea.it/bracco
>>>>>> _______________________________________________
>>>>>> OpenAFS-info mailing list
>>>>>> OpenAFS-info@openafs.org
>>>>>> https://lists.openafs.org/mailman/listinfo/openafs-info
>>>>>
>>>>>
>>>>
>>>> -- 
>>>> Ing. Giovanni Ponti, PhD
>>>> DTE-ICT-HPC
>>>> ENEA - C.R. Portici
>>>> P.le E. Fermi, 1 (Loc. Granatello)
>>>> 80055 Portici (NA), Italy
>>>> phone : (+39) 081-7723564 | int.: [89] 2564
>>>> fax   : (+39) 081-7723344
>>>> email : giovanni.ponti@enea.it
>>>> web   : http://www.afs.enea.it/gponti
>>>
>>
>> -- 
>> Ing. Giovanni Ponti, PhD
>> DTE-ICT-HPC
>> ENEA - C.R. Portici
>> P.le E. Fermi, 1 (Loc. Granatello)
>> 80055 Portici (NA), Italy
>> phone : (+39) 081-7723564 | int.: [89] 2564
>> fax   : (+39) 081-7723344
>> email : giovanni.ponti@enea.it
>> web   : http://www.afs.enea.it/gponti
> 
> 
> 

-- 
Ing. Giovanni Ponti, PhD
DTE-ICT-HPC
ENEA - C.R. Portici
P.le E. Fermi, 1 (Loc. Granatello)
80055 Portici (NA), Italy
phone : (+39) 081-7723564 | int.: [89] 2564
fax   : (+39) 081-7723344
email : giovanni.ponti@enea.it
web   : http://www.afs.enea.it/gponti