[OpenAFS] Losing tokens
Jeff Blaine
jblaine@kickflop.net
Fri, 03 Sep 2010 13:52:06 -0400
On 9/2/2010 1:32 PM, Derrick Brashear wrote:
> On Thu, Sep 2, 2010 at 10:10 AM, Jeff Blaine<jblaine@kickflop.net> wrote:
>> We have users here and there reporting that they are mysteriously
>> losing their tokens sometimes (quite rare). We've worked with
>> them to the point where they are able to produce terminal
>> session captures that show initial tokens from login that then
>> disappear eventually (before expiration time).
>>
>> So far we've only been able to associate the problem with
>> OpenAFS 1.4.11 for RHELv5.
>
> kernel version? is sys call table being hooked? (the boot log will tell you)
>
> i bet not, and that you really want 1.4.12.1
Thanks for the suggestion (Stephen Q as well).
1.4.12.1 is now installed and user shows the same problem happening
dmesg shows the following:
libafs: module license 'http://www.openafs.org/dl/license10.html'
taints kernel.
Found system call table at 0xc06224e0 (pattern scan)
Using keyrings, rather than hooking system calls
Basic system info:
Linux ourhost 2.6.18-194.11.3.el5 #1 SMP Mon Aug 23 15:49:21
EDT 2010 i686 i686 i386 GNU/Linux
# strings /usr/vice/etc/afsd /usr/vice/etc/modload/libafs-\
2.6.18-194.11.3.el5.mp.ko | grep OpenAFS
@(#) OpenAFS 1.4.12.1 built 2010-09-02
@(#) OpenAFS 1.4.12.1 built 2010-09-02
#
The user's latest session shows:
[theuser@ourhost theproject]$ kinit
Password for theuser@RCF.OUR.ORG:
[theuser@ourhost theproject]$ aklog
[theuser@ourhost theproject]$ tokens
Tokens held by the Cache Manager:
User's (AFS ID 3113) tokens for afs@rcf.our.org [Expires Sep
10 09:58]
--End of list--
[theuser@ourhost theproject]$ ./eval.sh
[theuser@ourhost theproject]$ ls
ls: .: Permission denied
[theuser@ourhost theproject]$ tokens
Tokens held by the Cache Manager:
--End of list--
[theuser@ourhost theproject]$
FWIW, eval.sh contains:
#!/usr/bin/env bash
BINDIR=/afs/rcf/project/stuff/dev/theuser/foo/bin/
CP=${BINDIR}postgresql-8.4-701.jdbc3.jar:${BINDIR}FooStuff-20100902.jar
java -Xmx800M -cp ${CP} org.our.itc.summarize.Evaluate > results.csv