[OpenAFS] OpenAFS Newsletter, Issue 1, May 2009
Jason Edgecombe
jason@rampaginggeek.com
Wed, 13 May 2009 22:01:37 -0400
This is a multi-part message in MIME format.
--------------050709060409050808020104
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
[The HTML version of this text is attached]
OpenAFS Newsletter, Issue 1, May 2009
This is the first issue of what will hopefully be a monthly summary of
the activity that's happening in the OpenAFS community.
As always, volunteers, patches, bug reports, or any other type of help
is greatly appreciated.
Feedback on this newsletter is welcome. The goal is to summarize the
various development efforts and news of OpenAFS for the community.
Please let Jason know what you would like to see out of this newsletter.
Upcoming Events
The Sixth Annual International AFS & Kerberos Best Practices Workshop
will be held at Stanford University on June 1-5, 2009.
Ref: http://workshop.openafs.org/afsbpw09/index.html
Projects
Disconnected AFS support
Project Contacts:
* Simon Wilkinson <sxw@inf.ed.ac.uk>
* Dragos Tatulea <dragos.tatulea@gmail.com>
Support for disconnection operation on Unix has been integrated into the
1.5.x branch. There are no currently known data loss bugs, and further
testing would be greatly appreciated. Currently, files written whilst
disconnected do not persist across restarts, and there is no user
interface to specify which files should be pinned in the cache to ensure
they're available whilst disconnected. Simon Wilkinson and Dragos
Tatulea (respectively) are working to resolve these.
Security Releases
Security Officer:
* Simon Wilkinson <sxw@inf.ed.ac.uk>
OpenAFS 1.4.9, 1.4.10 and 1.5.59 were a security release to resolve two
independent issues in the OpenAFS cache manager for Unix, one of which
is a potential remote root exploit. All Unix platforms, excluding Mac OS
X 10.4 and 10.5 are affected, and upgrading is strongly recommended.
Fedora 11 and Linux 2.6.29 support
Project Contact:
* Simon Wilkinson <sxw@inf.ed.ac.uk>
OpenAFS 1.4.10 does not build on Fedora 11, and crashes in some
situations when running on a 2.6.29 kernel. Fixes will be available
shortly.
Newsletter
Project Contact:
* Jason Edgecombe <jason@rampaginggeek.com>
Derrick Brashear, Jason Edgecombe, Jeff Altman, and Simon Wilkinson
discussed the issue of keeping the community better informed by the web
and a monthly email newsletter. Jason volunteered to write the
newsletter. This document is the result.
Ref:
http://jabber.openafs.org/openafs@conference.openafs.org/2009-05-04.txt
Google Summer of Code 2009
OpenAFS received 4 slots for the 2009 Google Summer of Code.
Go to http://socghop.appspot.com/org/home/google/gsoc2009/openafs for
more information about the GSoC projects.
The student projects are:
OpenAFS server preference based on network conditions
Student Developer: Jake Thebault-Spieker <summatusmentis@gmail.com>
Mentor: Derrick Brashear <shadow@gmail.com>
This is Jake's second year with GSoC for OpenAFS.
Abstract:
The OpenAFS cache manager keeps two lists of which servers host the
files required. Currently, these lists are ordered based on antiquated
network architecture assumptions that no longer apply to current network
architectures. This project seeks to change the way these lists are
ordered by taking into account network conditions that can be estimated
based on the Rx peer statistics gathering functionality built into
OpenAFS.
Ref:
https://lists.openafs.org/pipermail/openafs-devel/2009-April/016590.html
OpenAFS Management Console on Windows
Student Developer: Brant Gurganus <brant@gurganus.name>
Mentor: Jeffrey Altman <jaltman@secure-endpoints.com>
Abstract:
I propose creating a Microsoft Management Console snap-in for Windows.
This will better integrate OpenAFS with existing Windows management
technology and fits in an overall strategy of improved Windows
integration.
Ref:
https://lists.openafs.org/pipermail/openafs-devel/2009-April/016591.html
Implementing OpenAFS features into RedHat's kafs kernel module.
Student Developer: Wang Lei <wang840925@gmail.com>
Mentor: David Howells
Abstract:
My project is to implement some OpenAFS features into the Linux kafs
kernel module. The first feature is DNS AFSDB Support which may be
implemented by sharing the mechanism used by CIFS as my mentor's design
at present. The second is implement more functions of the pioctl
system-call on the work of the student of GSoC last year. And the other
two are to implement some OpenAFS fs commonds that were not implemented
in kafs and Keyring compatibility which can work well with both OpenAFS
client and kafs. I have began to read the documatations of pioctl/ioctl
of the OpenAFS, and I will start my work with the implement of this
system call. There are a lot of pioctls to implement and I think that
can help me to understand OpenAFS well.
Ref:
https://lists.openafs.org/pipermail/openafs-devel/2009-April/016595.html
Adding Searching and Indexing Searching Features
Student Developer: Reeni Kaushik <kaushik1@illinois.edu>
Mentor: Dave Botsch
Abstract:
My interest lies in the area of File Systems and I am especially
interested in working on the project "AFS as a Data Driven File System".
Ref:
https://lists.openafs.org/pipermail/openafs-devel/2009-April/016596.html
Kerberos v5 and multiple encryption types
Project Contacts:
* Matt Benjamin <matt@linuxbox.com>
* Marcus Watts <mwd@umich.edu>
We are finalizing work to bring the rxk5 change set to parity with
openafs-devel-1_5_x, at which time we will pull the rxk5-devel and
probably rxk5 branch tags forward. (This may take place in the next day
or so, in fact, thanks to a bunch of merge work by Marcus over the
weekend.) Our intention is to have rxk5 ready to merge with 1.5 in the
near future. In addition, we are working on a draft description of
'rxk5ng', a superset of rxk5 addressing authorization of currently
unsecured call channels (anonymous file accesses, callbacks), cache
poisoning, and departmental servers. --Matt
(Ed: This was received on May 10)
*BSD Support
Project Contacts:
* Matt Benjamin <matt@linuxbox.com>
The OpenBSD port has been updated to support OpenBSD 4.4 and 4.5. I have
added a userland port (no client) to DragonflyBSD, supporting releases
2.2 and 2.3. Updates for client support of recent versions of FreeBSD
8.0 current and NetBSD 4.x and 5.x are in progress. --Matt
Extended Callback Information
Project Contacts:
* Matt Benjamin <matt@linuxbox.com>
I am preparing a public release of the full extended callback
information draft implementation, including a reduced version of Tom
Keiser's libosi work. (The xcb mechanism makes the callback interface
extensible, and provides atop this new notifications including range
invalidation on files and metadata change notifications.) This will be
ready for review some time before the afsbpw. --Matt
Rx OSD integration
Project Contacts:
* Hartmut Reuter <reuter@rzg.mpg.de>
* Felix Frank <Felix.Frank@Desy.de>
* Christof Hanke <hanke@rzg.mpg.de>
Felix Frank is working on integrating the Rx OSD changes back into the
mainline OpenAFS code.
Ref:
https://lists.openafs.org/pipermail/openafs-devel/2009-May/016625.html
Better Documentation
Project Contacts:
* Russ Allbery <rra@stanford.edu>
* Jason Edgecombe <jason@rampaginggeek.com>
Marcus Watts updated the pts_interactive.pod, pts_sleep.pod,
pts_source.pod, and NoAuth.pod man pages in the rxk5 branch on May 3.
Jason clarified fake address support in netinfo.pod on April 27. Jason
has started working on the Admin Quickstart guide. The man pages still
need work, but Jason is tired of seeing new users set up OpenAFS with
the deprecated kaserver. Appendix A of the Unix Quickstart Guide has
been rewritten to show the use of configure and make to compile OpenAFS
from source.
CVS statistics
Month Lines Added Lines Removed Net Lines Changed
====HEAD====
2009/01 + 1289 - 1128 161
2009/02 + 2274 - 2152 122
2009/03 + 4276 - 4466 -190
2009/04 + 394 - 361 33
====openafs-devel-1_5_x====
2009/01 + 5794 - 7476 -1682
2009/02 + 133623 - 128267 5356
2009/03 + 8252 - 7838 414
2009/04 + 1145 - 777 368
====openafs-stable-1_4_x====
2009/01 + 389 - 251 138
2009/02 + 869 - 612 257
2009/03 + 1503 - 710 793
2009/04 + 544 - 436 108
====openafs-windows-kdfs-ifs-branch====
2009/01 + 247 - 177 70
2009/02 + 1959 - 1135 824
2009/03 + 316 - 74 242
====rxk5-devel-1_5_x====
none in 2009 until May 2009
--------------050709060409050808020104
Content-Type: text/html; charset=UTF-8;
name="newsletter.html"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
filename="newsletter.html"
<?xml version="1.0" ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>openafs-newsletter-2009-05.txt</title>
<meta http-equiv="content-type" content="text/html; charset=utf-8" />
<link rev="made" href="mailto:root@localhost" />
</head>
<body style="background-color: white">
<!-- INDEX BEGIN -->
<div name="index">
<p><a name="__index__"></a></p>
<ul>
<li><a href="#openafs_newsletter__issue_1__may_2009">OpenAFS Newsletter, Issue 1, May 2009</a></li>
<ul>
<li><a href="#upcoming_events">Upcoming Events</a></li>
<li><a href="#projects">Projects</a></li>
<ul>
<li><a href="#disconnected_afs_support">Disconnected AFS support</a></li>
<li><a href="#security_releases">Security Releases</a></li>
<li><a href="#fedora_11_and_linux_2_6_29_support">Fedora 11 and Linux 2.6.29 support</a></li>
<li><a href="#newsletter">Newsletter</a></li>
<li><a href="#google_summer_of_code_2009">Google Summer of Code 2009</a></li>
<ul>
<li><a href="#openafs_server_preference_based_on_network_conditions">OpenAFS server preference based on network conditions</a></li>
<li><a href="#openafs_management_console_on_windows">OpenAFS Management Console on Windows</a></li>
<li><a href="#implementing_openafs_features_into_redhat_s_kafs_kernel_module_">Implementing OpenAFS features into RedHat's kafs kernel module.</a></li>
<li><a href="#adding_searching_and_indexing_searching_features">Adding Searching and Indexing Searching Features</a></li>
</ul>
<li><a href="#kerberos_v5_and_multiple_encryption_types">Kerberos v5 and multiple encryption types</a></li>
<li><a href="#_bsd_support">*BSD Support</a></li>
<li><a href="#extended_callback_information">Extended Callback Information</a></li>
<li><a href="#rx_osd_integration">Rx OSD integration</a></li>
<li><a href="#better_documentation">Better Documentation</a></li>
</ul>
<li><a href="#cvs_statistics">CVS statistics</a></li>
</ul>
</ul>
<hr name="index" />
</div>
<!-- INDEX END -->
<p>
</p>
<h1><a name="openafs_newsletter__issue_1__may_2009">OpenAFS Newsletter, Issue 1, May 2009</a></h1>
<p>This is the first issue of what will hopefully be a monthly summary of the
activity that's happening in the OpenAFS community.</p>
<p>As always, volunteers, patches, bug reports, or any other type of help is
greatly appreciated.</p>
<p>Feedback on this newsletter is welcome. The goal is to summarize the
various development efforts and news of OpenAFS for the community. Please
let Jason know what you would like to see out of this newsletter.</p>
<p>
</p>
<h2><a name="upcoming_events">Upcoming Events</a></h2>
<p>The Sixth Annual International AFS & Kerberos Best Practices Workshop will
be held at Stanford University on June 1-5, 2009.</p>
<p>Ref: <a href="http://workshop.openafs.org/afsbpw09/index.html">http://workshop.openafs.org/afsbpw09/index.html</a></p>
<p>
</p>
<h2><a name="projects">Projects</a></h2>
<p>
</p>
<h3><a name="disconnected_afs_support">Disconnected AFS support</a></h3>
<p>Project Contacts:</p>
<ul>
<li>
<p>Simon Wilkinson <<a href="mailto:sxw@inf.ed.ac.uk">sxw@inf.ed.ac.uk</a>></p>
</li>
<li>
<p>Dragos Tatulea <<a href="mailto:dragos.tatulea@gmail.com">dragos.tatulea@gmail.com</a>></p>
</li>
</ul>
<p>Support for disconnection operation on Unix has been integrated into the
1.5.x branch. There are no currently known data loss bugs, and further
testing would be greatly appreciated. Currently, files written whilst
disconnected do not persist across restarts, and there is no user
interface to specify which files should be pinned in the cache to ensure
they're available whilst disconnected. Simon Wilkinson and Dragos Tatulea
(respectively) are working to resolve these.</p>
<p>
</p>
<h3><a name="security_releases">Security Releases</a></h3>
<p>Security Officer:</p>
<ul>
<li>
<p>Simon Wilkinson <<a href="mailto:sxw@inf.ed.ac.uk">sxw@inf.ed.ac.uk</a>></p>
</li>
</ul>
<p>OpenAFS 1.4.9, 1.4.10 and 1.5.59 were a security release to resolve two
independent issues in the OpenAFS cache manager for Unix, one of which is
a potential remote root exploit. All Unix platforms, excluding Mac OS X
10.4 and 10.5 are affected, and upgrading is strongly recommended.</p>
<p>
</p>
<h3><a name="fedora_11_and_linux_2_6_29_support">Fedora 11 and Linux 2.6.29 support</a></h3>
<p>Project Contact:</p>
<ul>
<li>
<p>Simon Wilkinson <<a href="mailto:sxw@inf.ed.ac.uk">sxw@inf.ed.ac.uk</a>></p>
</li>
</ul>
<p>OpenAFS 1.4.10 does not build on Fedora 11, and crashes in some situations
when running on a 2.6.29 kernel. Fixes will be available shortly.</p>
<p>
</p>
<h3><a name="newsletter">Newsletter</a></h3>
<p>Project Contact:</p>
<ul>
<li>
<p>Jason Edgecombe <<a href="mailto:jason@rampaginggeek.com">jason@rampaginggeek.com</a>></p>
</li>
</ul>
<p>Derrick Brashear, Jason Edgecombe, Jeff Altman, and Simon Wilkinson
discussed the issue of keeping the community better informed by the web
and a monthly email newsletter. Jason volunteered to write the
newsletter. This document is the result.</p>
<p>Ref: <a href="http://jabber.openafs.org/openafs@conference.openafs.org/2009-05-04.txt">http://jabber.openafs.org/openafs@conference.openafs.org/2009-05-04.txt</a></p>
<p>
</p>
<h3><a name="google_summer_of_code_2009">Google Summer of Code 2009</a></h3>
<p>OpenAFS received 4 slots for the 2009 Google Summer of Code.</p>
<p>Go to <a href="http://socghop.appspot.com/org/home/google/gsoc2009/openafs">http://socghop.appspot.com/org/home/google/gsoc2009/openafs</a> for more
information about the GSoC projects.</p>
<p>The student projects are:</p>
<p>
</p>
<h4><a name="openafs_server_preference_based_on_network_conditions">OpenAFS server preference based on network conditions</a></h4>
<p>Student Developer: Jake Thebault-Spieker <<a href="mailto:summatusmentis@gmail.com">summatusmentis@gmail.com</a>></p>
<p>Mentor: Derrick Brashear <<a href="mailto:shadow@gmail.com">shadow@gmail.com</a>></p>
<p>This is Jake's second year with GSoC for OpenAFS.</p>
<p>Abstract:</p>
<p>The OpenAFS cache manager keeps two lists of which servers host the files
required. Currently, these lists are ordered based on antiquated network
architecture assumptions that no longer apply to current network
architectures. This project seeks to change the way these lists are
ordered by taking into account network conditions that can be estimated
based on the Rx peer statistics gathering functionality built into
OpenAFS.</p>
<p>Ref: <a href="https://lists.openafs.org/pipermail/openafs-devel/2009-April/016590.html">https://lists.openafs.org/pipermail/openafs-devel/2009-April/016590.html</a></p>
<p>
</p>
<h4><a name="openafs_management_console_on_windows">OpenAFS Management Console on Windows</a></h4>
<p>Student Developer: Brant Gurganus <<a href="mailto:brant@gurganus.name">brant@gurganus.name</a>></p>
<p>Mentor: Jeffrey Altman <<a href="mailto:jaltman@secure-endpoints.com">jaltman@secure-endpoints.com</a>></p>
<p>Abstract:</p>
<p>I propose creating a Microsoft Management Console snap-in for
Windows. This will better integrate OpenAFS with existing Windows
management technology and fits in an overall strategy of improved Windows
integration.</p>
<p>Ref: <a href="https://lists.openafs.org/pipermail/openafs-devel/2009-April/016591.html">https://lists.openafs.org/pipermail/openafs-devel/2009-April/016591.html</a></p>
<p>
</p>
<h4><a name="implementing_openafs_features_into_redhat_s_kafs_kernel_module_">Implementing OpenAFS features into RedHat's kafs kernel module.</a></h4>
<p>Student Developer: Wang Lei <<a href="mailto:wang840925@gmail.com">wang840925@gmail.com</a>></p>
<p>Mentor: David Howells</p>
<p>Abstract:</p>
<p>My project is to implement some OpenAFS features into the Linux kafs
kernel module. The first feature is DNS AFSDB Support which may be
implemented by sharing the mechanism used by CIFS as my mentor's design at
present. The second is implement more functions of the pioctl system-call
on the work of the student of GSoC last year. And the other two are to
implement some OpenAFS fs commonds that were not implemented in kafs and
Keyring compatibility which can work well with both OpenAFS client and
kafs. I have began to read the documatations of pioctl/ioctl of the
OpenAFS, and I will start my work with the implement of this system
call. There are a lot of pioctls to implement and I think that can help me
to understand OpenAFS well.</p>
<p>Ref: <a href="https://lists.openafs.org/pipermail/openafs-devel/2009-April/016595.html">https://lists.openafs.org/pipermail/openafs-devel/2009-April/016595.html</a></p>
<p>
</p>
<h4><a name="adding_searching_and_indexing_searching_features">Adding Searching and Indexing Searching Features</a></h4>
<p>Student Developer: Reeni Kaushik <<a href="mailto:kaushik1@illinois.edu">kaushik1@illinois.edu</a>></p>
<p>Mentor: Dave Botsch</p>
<p>Abstract:</p>
<p>My interest lies in the area of File Systems and I am especially
interested in working on the project "AFS as a Data Driven File System".</p>
<p>Ref: <a href="https://lists.openafs.org/pipermail/openafs-devel/2009-April/016596.html">https://lists.openafs.org/pipermail/openafs-devel/2009-April/016596.html</a></p>
<p>
</p>
<h3><a name="kerberos_v5_and_multiple_encryption_types">Kerberos v5 and multiple encryption types</a></h3>
<p>Project Contacts:</p>
<ul>
<li>
<p>Matt Benjamin <<a href="mailto:matt@linuxbox.com">matt@linuxbox.com</a>></p>
</li>
<li>
<p>Marcus Watts <<a href="mailto:mwd@umich.edu">mwd@umich.edu</a>></p>
</li>
</ul>
<p>We are finalizing work to bring the rxk5 change set to parity with
openafs-devel-1_5_x, at which time we will pull the rxk5-devel and
probably rxk5 branch tags forward. (This may take place in the next day
or so, in fact, thanks to a bunch of merge work by Marcus over the
weekend.) Our intention is to have rxk5 ready to merge with 1.5 in the
near future. In addition, we are working on a draft description of
'rxk5ng', a superset of rxk5 addressing authorization of currently
unsecured call channels (anonymous file accesses, callbacks), cache
poisoning, and departmental servers. --Matt</p>
<p>(Ed: This was received on May 10)</p>
<p>
</p>
<h3><a name="_bsd_support">*BSD Support</a></h3>
<p>Project Contacts:</p>
<ul>
<li>
<p>Matt Benjamin <<a href="mailto:matt@linuxbox.com">matt@linuxbox.com</a>></p>
</li>
</ul>
<p>The OpenBSD port has been updated to support OpenBSD 4.4 and 4.5. I
have added a userland port (no client) to DragonflyBSD, supporting
releases 2.2 and 2.3. Updates for client support of recent versions
of FreeBSD 8.0 current and NetBSD 4.x and 5.x are in progress. --Matt</p>
<p>
</p>
<h3><a name="extended_callback_information">Extended Callback Information</a></h3>
<p>Project Contacts:</p>
<ul>
<li>
<p>Matt Benjamin <<a href="mailto:matt@linuxbox.com">matt@linuxbox.com</a>></p>
</li>
</ul>
<p>I am preparing a public release of the full extended callback
information draft implementation, including a reduced version of Tom
Keiser's libosi work. (The xcb mechanism makes the callback interface
extensible, and provides atop this new notifications including range
invalidation on files and metadata change notifications.) This will
be ready for review some time before the afsbpw. --Matt</p>
<p>
</p>
<h3><a name="rx_osd_integration">Rx OSD integration</a></h3>
<p>Project Contacts:</p>
<ul>
<li>
<p>Hartmut Reuter <<a href="mailto:reuter@rzg.mpg.de">reuter@rzg.mpg.de</a>></p>
</li>
<li>
<p>Felix Frank <<a href="mailto:Felix.Frank@Desy.de">Felix.Frank@Desy.de</a>></p>
</li>
<li>
<p>Christof Hanke <<a href="mailto:hanke@rzg.mpg.de">hanke@rzg.mpg.de</a>></p>
</li>
</ul>
<p>Felix Frank is working on integrating the Rx OSD changes back into the mainline
OpenAFS code.</p>
<p>Ref: <a href="https://lists.openafs.org/pipermail/openafs-devel/2009-May/016625.html">https://lists.openafs.org/pipermail/openafs-devel/2009-May/016625.html</a></p>
<p>
</p>
<h3><a name="better_documentation">Better Documentation</a></h3>
<p>Project Contacts:</p>
<ul>
<li>
<p>Russ Allbery <<a href="mailto:rra@stanford.edu">rra@stanford.edu</a>></p>
</li>
<li>
<p>Jason Edgecombe <<a href="mailto:jason@rampaginggeek.com">jason@rampaginggeek.com</a>></p>
</li>
</ul>
<p>Marcus Watts updated the pts_interactive.pod, pts_sleep.pod,
pts_source.pod, and NoAuth.pod man pages in the rxk5 branch on May 3.
Jason clarified fake address support in netinfo.pod on April 27. Jason has
started working on the Admin Quickstart guide. The man pages still need
work, but Jason is tired of seeing new users set up OpenAFS with the
deprecated kaserver. Appendix A of the Unix Quickstart Guide has been
rewritten to show the use of configure and make to compile OpenAFS from
source.</p>
<p>
</p>
<h2><a name="cvs_statistics">CVS statistics</a></h2>
<pre>
Month Lines Added Lines Removed Net Lines Changed
====HEAD====
2009/01 + 1289 - 1128 161
2009/02 + 2274 - 2152 122
2009/03 + 4276 - 4466 -190
2009/04 + 394 - 361 33</pre>
<pre>
====openafs-devel-1_5_x====
2009/01 + 5794 - 7476 -1682
2009/02 + 133623 - 128267 5356
2009/03 + 8252 - 7838 414
2009/04 + 1145 - 777 368</pre>
<pre>
====openafs-stable-1_4_x====
2009/01 + 389 - 251 138
2009/02 + 869 - 612 257
2009/03 + 1503 - 710 793
2009/04 + 544 - 436 108</pre>
<pre>
====openafs-windows-kdfs-ifs-branch====
2009/01 + 247 - 177 70
2009/02 + 1959 - 1135 824
2009/03 + 316 - 74 242</pre>
<pre>
====rxk5-devel-1_5_x====
none in 2009 until May 2009</pre>
</body>
</html>
--------------050709060409050808020104--