[OpenAFS] Losing tokens

[Jeff Blaine]

On 9/2/2010 1:32 PM, Derrick Brashear wrote:
> On Thu, Sep 2, 2010 at 10:10 AM, Jeff Blaine<jblaine@kickflop.net>  wrote:
>> We have users here and there reporting that they are mysteriously
>> losing their tokens sometimes (quite rare).  We've worked with
>> them to the point where they are able to produce terminal
>> session captures that show initial tokens from login that then
>> disappear eventually (before expiration time).
>>
>> So far we've only been able to associate the problem with
>> OpenAFS 1.4.11 for RHELv5.
>
> kernel version? is sys call table being hooked? (the boot log will tell you)
>
> i bet not, and that you really want 1.4.12.1

Thanks for the suggestion (Stephen Q as well).

1.4.12.1 is now installed and user shows the same problem happening

dmesg shows the following:

     libafs: module license 'http://www.openafs.org/dl/license10.html'
     taints kernel.
     Found system call table at 0xc06224e0 (pattern scan)
     Using keyrings, rather than hooking system calls

Basic system info:

     Linux ourhost 2.6.18-194.11.3.el5 #1 SMP Mon Aug 23 15:49:21
     EDT 2010 i686 i686 i386 GNU/Linux
     # strings /usr/vice/etc/afsd /usr/vice/etc/modload/libafs-\
     2.6.18-194.11.3.el5.mp.ko | grep OpenAFS
     @(#) OpenAFS 1.4.12.1 built  2010-09-02
     @(#) OpenAFS 1.4.12.1 built  2010-09-02
     #

The user's latest session shows:

     [theuser@ourhost theproject]$ kinit
     Password for theuser@RCF.OUR.ORG:
     [theuser@ourhost theproject]$ aklog
     [theuser@ourhost theproject]$ tokens

     Tokens held by the Cache Manager:

     User's (AFS ID 3113) tokens for afs@rcf.our.org [Expires Sep
     10 09:58]
        --End of list--
     [theuser@ourhost theproject]$ ./eval.sh
     [theuser@ourhost theproject]$ ls
     ls: .: Permission denied
     [theuser@ourhost theproject]$ tokens

     Tokens held by the Cache Manager:

        --End of list--
     [theuser@ourhost theproject]$

FWIW, eval.sh contains:

     #!/usr/bin/env bash

     BINDIR=/afs/rcf/project/stuff/dev/theuser/foo/bin/

     CP=${BINDIR}postgresql-8.4-701.jdbc3.jar:${BINDIR}FooStuff-20100902.jar
     java -Xmx800M -cp ${CP}  org.our.itc.summarize.Evaluate > results.csv