[OpenAFS] OpenAFS + Linux +XP

Jeffrey Altman jaltman@columbia.edu
Fri, 23 Jan 2004 03:02:46 -0500 

This is a cryptographically signed message in MIME format.

--------------ms090209010908020703000102
Content-Type: multipart/alternative;
 boundary="------------030806040005090108020600"

This is a multi-part message in MIME format.
--------------030806040005090108020600
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit

Use the MS Loopback Adapter

Eggert, Richard W, II (Rich), GVSOL wrote:

> Okay, so how does one fix it?
>  
> Rich
>
>     -----Original Message-----
>     *From:* Jeffrey Altman [mailto:jaltman@columbia.edu]
>     *Sent:* Thursday, January 22, 2004 2:23 PM
>     *To:* Eggert, Richard W, II (Rich), GVSOL
>     *Cc:* openafs-info@openafs.org
>     *Subject:* Re: [OpenAFS] OpenAFS + Linux +XP
>
>     In this scenario, if you are not using the MS Loopback Adapter
>     then the OpenAFS client service is going to crash as soon as it
>     detects the network has failed.  If this happens while Integrated
>     Logon is being executed and attempting to SetToken bad bad bad
>     things could easily be seen happening.
>
>     Jeffrey Altman
>
>
>     Eggert, Richard W, II (Rich), GVSOL wrote:
>
>>If I recall correctly, I ran into the blue screens most often on my
>>laptop (which runs XP PRo).  If I left it idle while holding AFS tokens,
>>the laptop would go back into standby mode, which would wipe out any
>>network connections.  When trying to start back up, it seemed to want to
>>log back in, something would go wrong (probably due to the wireless
>>network interface not coming back up right away), and I'd get a blue
>>screen of death.
>>
>>My memory is a bit foggy, but this is how I remember it happening.
>>
>>Rich 
>>
>>-----Original Message-----
>>From: ted creedon [mailto:tcreedon@easystreet.com]
>>Sent: Thursday, January 22, 2004 1:36 PM
>>To: openafs-info@openafs.org
>>Subject: RE: [OpenAFS] OpenAFS + Linux +XP
>>
>>
>>Yes but he did compile it himself which often corrects whatever..
>>
>>Rodney's work provides a painless way to preserve user information on a
>>redundant file system. It also solves the SSO problem on mixed systems.
>>
>>As stated before, when BOTH AD servers crash (multiple power outages)
>>you're
>>in trouble.
>>
>>tedc
>>
>>-----Original Message-----
>>From: openafs-info-admin@openafs.org
>>[mailto:openafs-info-admin@openafs.org]
>>On Behalf Of Rodney M Dyer
>>Sent: Thursday, January 22, 2004 10:20 AM
>>To: openafs-info@openafs.org
>>Subject: Re: [OpenAFS] OpenAFS + Linux +XP
>>
>>At 01:00 PM 1/22/2004, Jeffrey Altman wrote:
>>
>>>Rodney uses a modified version of the integrated login which performs
>>>
>>the 
>>
>>>kinit and aklogsteps in an external process instead of relying on the
>>>
>>k4 
>>
>>>support built into OpenAFS.  More than likely he is bypassing the cause
>>>
>>of 
>>
>>>the blue screen.
>>>
>>
>>You are correct.  We do use a minimally altered version of the AFS logon
>>
>>authenticator "afslogon.dll" that we compile 
>>ourselves.  See...http://www.coe.uncc.edu/~rmdyer/afslogonshell.htm
>>
>>The "altered" part is simply a single line of code addition for exec'ing
>>a 
>>shell.  But, we've only been using this method since we moved to 
>>OpenAFS...since of course, I didn't have the source for Transarc's
>>version 
>>and other reasons.
>>
>>But laughing, I would be surprised if anything I do "prevents" a blue 
>>screen for us!  The normal "unmodified" AFS logon authenticator has
>>never 
>>failed on me.  I may be wrong, my memory is poor these days.  The code
>>in 
>>the OpenAFS authenticator DLL is pretty generic, I doubt there's
>>anything 
>>there that would cause a blue screen as none of it runs in the kernel.
>>
>>Rodney
>>
>>
>>
>>_______________________________________________
>>OpenAFS-info mailing list
>>OpenAFS-info@openafs.org
>>https://lists.openafs.org/mailman/listinfo/openafs-info
>>
>>_______________________________________________
>>OpenAFS-info mailing list
>>OpenAFS-info@openafs.org
>>https://lists.openafs.org/mailman/listinfo/openafs-info
>>_______________________________________________
>>OpenAFS-info mailing list
>>OpenAFS-info@openafs.org
>>https://lists.openafs.org/mailman/listinfo/openafs-info
>>

--------------030806040005090108020600
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
  <title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
<font face="Bitstream Cyberbit">Use the MS Loopback Adapter <br>
<br>
Eggert, Richard W, II (Rich), GVSOL wrote:<br>
</font>
<blockquote
 cite="mid02AAAA5D0BF6DF40A6A9B07BE3124B1004CF56D0@OCCLUST02EVS1.ugd.att.com"
 type="cite">
  <meta http-equiv="Content-Type" content="text/html; ">
  <title></title>
  <meta content="MSHTML 6.00.2719.2200" name="GENERATOR">
  <div><font face="Bitstream Cyberbit" color="#0000ff"><span
 class="409392919-22012004">Okay, so how does one fix it?</span></font></div>
  <div><font face="Bitstream Cyberbit" color="#0000ff"><span
 class="409392919-22012004"></span></font><font
 face="Bitstream Cyberbit">&nbsp;</font></div>
  <div><font face="Bitstream Cyberbit" color="#0000ff"><span
 class="409392919-22012004">Rich</span></font></div>
  <blockquote dir="ltr" style="margin-right: 0px;">
    <div class="OutlookMessageHeader" dir="ltr" align="left"><font
 face="Bitstream Cyberbit">-----Original Message-----<br>
    <b>From:</b> Jeffrey Altman [<a class="moz-txt-link-freetext" href="mailto:jaltman@columbia.edu">mailto:jaltman@columbia.edu</a>]<br>
    <b>Sent:</b> Thursday, January 22, 2004 2:23 PM<br>
    <b>To:</b> Eggert, Richard W, II (Rich), GVSOL<br>
    <b>Cc:</b> <a class="moz-txt-link-abbreviated" href="mailto:openafs-info@openafs.org">openafs-info@openafs.org</a><br>
    <b>Subject:</b> Re: [OpenAFS] OpenAFS + Linux +XP<br>
    <br>
    </font></div>
    <font face="Bitstream Cyberbit">In this scenario, if you are not
using the MS Loopback Adapter<br>
then the OpenAFS client service is going to crash as soon as it<br>
detects the network has failed.&nbsp; If this happens while Integrated<br>
Logon is being executed and attempting to SetToken bad bad bad<br>
things could easily be seen happening.<br>
    <br>
Jeffrey Altman<br>
    <br>
    <br>
Eggert, Richard W, II (Rich), GVSOL wrote:<br>
    </font>
    <blockquote
 cite="mid02AAAA5D0BF6DF40A6A9B07BE3124B1004CF56CF@OCCLUST02EVS1.ugd.att.com"
 type="cite">
      <pre wrap=""><font face="Bitstream Cyberbit">If I recall correctly, I ran into the blue screens most often on my
laptop (which runs XP PRo).  If I left it idle while holding AFS tokens,
the laptop would go back into standby mode, which would wipe out any
network connections.  When trying to start back up, it seemed to want to
log back in, something would go wrong (probably due to the wireless
network interface not coming back up right away), and I'd get a blue
screen of death.

My memory is a bit foggy, but this is how I remember it happening.

Rich 

-----Original Message-----
From: ted creedon [<a class="moz-txt-link-freetext"
 href="mailto:tcreedon@easystreet.com">mailto:tcreedon@easystreet.com</a>]
Sent: Thursday, January 22, 2004 1:36 PM
To: <a class="moz-txt-link-abbreviated"
 href="mailto:openafs-info@openafs.org">openafs-info@openafs.org</a>
Subject: RE: [OpenAFS] OpenAFS + Linux +XP


Yes but he did compile it himself which often corrects whatever..

Rodney's work provides a painless way to preserve user information on a
redundant file system. It also solves the SSO problem on mixed systems.

As stated before, when BOTH AD servers crash (multiple power outages)
you're
in trouble.

tedc

-----Original Message-----
From: <a class="moz-txt-link-abbreviated"
 href="mailto:openafs-info-admin@openafs.org">openafs-info-admin@openafs.org</a>
[<a class="moz-txt-link-freetext"
 href="mailto:openafs-info-admin@openafs.org">mailto:openafs-info-admin@openafs.org</a>]
On Behalf Of Rodney M Dyer
Sent: Thursday, January 22, 2004 10:20 AM
To: <a class="moz-txt-link-abbreviated"
 href="mailto:openafs-info@openafs.org">openafs-info@openafs.org</a>
Subject: Re: [OpenAFS] OpenAFS + Linux +XP

At 01:00 PM 1/22/2004, Jeffrey Altman wrote:
</font></pre>
      <blockquote type="cite">
        <pre wrap=""><font face="Bitstream Cyberbit">Rodney uses a modified version of the integrated login which performs
</font></pre>
      </blockquote>
      <pre wrap=""><!----><font face="Bitstream Cyberbit">the 
</font></pre>
      <blockquote type="cite">
        <pre wrap=""><font face="Bitstream Cyberbit">kinit and aklogsteps in an external process instead of relying on the
</font></pre>
      </blockquote>
      <pre wrap=""><!----><font face="Bitstream Cyberbit">k4 
</font></pre>
      <blockquote type="cite">
        <pre wrap=""><font face="Bitstream Cyberbit">support built into OpenAFS.  More than likely he is bypassing the cause
</font></pre>
      </blockquote>
      <pre wrap=""><!----><font face="Bitstream Cyberbit">of 
</font></pre>
      <blockquote type="cite">
        <pre wrap=""><font face="Bitstream Cyberbit">the blue screen.
</font></pre>
      </blockquote>
      <pre wrap=""><!----><font face="Bitstream Cyberbit">
You are correct.  We do use a minimally altered version of the AFS logon

authenticator "afslogon.dll" that we compile 
ourselves.  See...http://www.coe.uncc.edu/~rmdyer/afslogonshell.htm

The "altered" part is simply a single line of code addition for exec'ing
a 
shell.  But, we've only been using this method since we moved to 
OpenAFS...since of course, I didn't have the source for Transarc's
version 
and other reasons.

But laughing, I would be surprised if anything I do "prevents" a blue 
screen for us!  The normal "unmodified" AFS logon authenticator has
never 
failed on me.  I may be wrong, my memory is poor these days.  The code
in 
the OpenAFS authenticator DLL is pretty generic, I doubt there's
anything 
there that would cause a blue screen as none of it runs in the kernel.

Rodney



_______________________________________________
OpenAFS-info mailing list
<a class="moz-txt-link-abbreviated"
 href="mailto:OpenAFS-info@openafs.org">OpenAFS-info@openafs.org</a>
<a class="moz-txt-link-freetext"
 href="https://lists.openafs.org/mailman/listinfo/openafs-info">https://lists.openafs.org/mailman/listinfo/openafs-info</a>

_______________________________________________
OpenAFS-info mailing list
<a class="moz-txt-link-abbreviated"
 href="mailto:OpenAFS-info@openafs.org">OpenAFS-info@openafs.org</a>
<a class="moz-txt-link-freetext"
 href="https://lists.openafs.org/mailman/listinfo/openafs-info">https://lists.openafs.org/mailman/listinfo/openafs-info</a>
_______________________________________________
OpenAFS-info mailing list
<a class="moz-txt-link-abbreviated"
 href="mailto:OpenAFS-info@openafs.org">OpenAFS-info@openafs.org</a>
<a class="moz-txt-link-freetext"
 href="https://lists.openafs.org/mailman/listinfo/openafs-info">https://lists.openafs.org/mailman/listinfo/openafs-info</a>
</font></pre>
    </blockquote>
  </blockquote>
</blockquote>
</body>
</html>

--------------030806040005090108020600--

--------------ms090209010908020703000102
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms090209010908020703000102--