[OpenAFS] MS ISA-Server
Jeffrey Altman
jaltman@columbia.edu
Wed, 31 Mar 2004 01:29:14 -0500
This is a cryptographically signed message in MIME format.
--------------ms020103010406090006080205
Content-Type: multipart/alternative;
boundary="------------000403030601070603080104"
This is a multi-part message in MIME format.
--------------000403030601070603080104
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Please try using the 1.3.62 client which was announced last week.
http://www.openafs.org/release/openafs-1.3.62.html
If you do not subscribe to openafs-announce@openafs.org. Please do so.
https://lists.openafs.org/mailman/listinfo/openafs-announce
Ulf Ziemann wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hello,
>
> I have a network with 2 OpenAFS server version 1.2.11.
> This net was connected with a second network over IpSec-VPN.
>
> In the other net are a Linux and a Windows client. No problems at all.
>
> Now cames 2 MS ISA server.
> They tunnel the traffic thru the the IpSec-VPN.
> Normal traffic passes the 2 tunnels (IMAP/SMTP, Windows shares, FTP,...)
>
> Only AFS is the problem.
>
> I can get an token. But I can't see something under /afs .
> The process is blocked for a long time.
> No messages in /var/log/messages.
>
> It seems, the MTU are to large for the packets.
> I set the MTU on the servers and on the linux client to 1000 and
> restarted the afs server.
> Ping with to large size now don't work.
>
> Now the "ls /afs" returns immediately, but with an empty answer.
>
> Network Monitor on the ISA says, the AFS-Server would always send with
> an MTU from 14XX bytes with fragment=false and so it remove the
> packet....
>
> How can I change the MTU for the afs? Are any other hints available?
>
> Ulf Ziemann
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.4 (MingW32)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iD8DBQFAamOp8cc/MGdmyloRAvMKAJ9SmlIeylw30P/mjjjOtlyFRaOTUwCglN/n
> 3HPO8pQxXH+1pSu2G+9jdao=
> =DrMq
> -----END PGP SIGNATURE-----
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info
--------------000403030601070603080104
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
<font face="Bitstream Cyberbit">Please try using the 1.3.62 client
which was announced last week.<br>
<br>
<a class="moz-txt-link-freetext" href="http://www.openafs.org/release/openafs-1.3.62.html">http://www.openafs.org/release/openafs-1.3.62.html</a><br>
<br>
If you do not subscribe to <a class="moz-txt-link-abbreviated" href="mailto:openafs-announce@openafs.org">openafs-announce@openafs.org</a>. Please do so.<br>
<br>
<a class="moz-txt-link-freetext" href="https://lists.openafs.org/mailman/listinfo/openafs-announce">https://lists.openafs.org/mailman/listinfo/openafs-announce</a><br>
<br>
Ulf Ziemann wrote:</font>
<blockquote cite="mid406A63B1.2000601@prodesigncad.de" type="cite"><font
face="Bitstream Cyberbit">-----BEGIN PGP SIGNED MESSAGE-----
<br>
Hash: SHA1
<br>
<br>
Hello,
<br>
<br>
I have a network with 2 OpenAFS server version 1.2.11.
<br>
This net was connected with a second network over IpSec-VPN.
<br>
<br>
In the other net are a Linux and a Windows client. No problems at all.
<br>
<br>
Now cames 2 MS ISA server.
<br>
They tunnel the traffic thru the the IpSec-VPN.
<br>
Normal traffic passes the 2 tunnels (IMAP/SMTP, Windows shares,
FTP,...)
<br>
<br>
Only AFS is the problem.
<br>
<br>
I can get an token. But I can't see something under /afs .
<br>
The process is blocked for a long time.
<br>
No messages in /var/log/messages.
<br>
<br>
It seems, the MTU are to large for the packets.
<br>
I set the MTU on the servers and on the linux client to 1000 and
<br>
restarted the afs server.
<br>
Ping with to large size now don't work.
<br>
<br>
Now the "ls /afs" returns immediately, but with an empty answer.
<br>
<br>
Network Monitor on the ISA says, the AFS-Server would always send with
<br>
an MTU from 14XX bytes with fragment=false and so it remove the
packet....
<br>
<br>
How can I change the MTU for the afs? Are any other hints available?
<br>
<br>
Ulf Ziemann
<br>
<br>
-----BEGIN PGP SIGNATURE-----
<br>
Version: GnuPG v1.2.4 (MingW32)
<br>
Comment: Using GnuPG with Mozilla - <a class="moz-txt-link-freetext" href="http://enigmail.mozdev.org">http://enigmail.mozdev.org</a>
<br>
<br>
iD8DBQFAamOp8cc/MGdmyloRAvMKAJ9SmlIeylw30P/mjjjOtlyFRaOTUwCglN/n
<br>
3HPO8pQxXH+1pSu2G+9jdao=
<br>
=DrMq
<br>
-----END PGP SIGNATURE-----
<br>
_______________________________________________
<br>
OpenAFS-info mailing list
<br>
<a class="moz-txt-link-abbreviated" href="mailto:OpenAFS-info@openafs.org">OpenAFS-info@openafs.org</a>
<br>
<a class="moz-txt-link-freetext" href="https://lists.openafs.org/mailman/listinfo/openafs-info">https://lists.openafs.org/mailman/listinfo/openafs-info</a>
<br>
</font>
</blockquote>
</body>
</html>
--------------000403030601070603080104--
--------------ms020103010406090006080205
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature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--------------ms020103010406090006080205--