[OpenAFS] Re: Losing tokens
Sat, 04 Sep 2010 09:43:29 -0400
On 9/4/2010 2:42 AM, Simon Wilkinson wrote:
> On 3 Sep 2010, at 21:56, Derrick Brashear <email@example.com> wrote:
>> run 'groups' before and after?
With tokens and after tokens have been lost report this:
air blogint id: cannot find name for group ID 1098911902
> I'm away at the moment, so I'll be brief. When I investigated this my
> observations were that the user still had their original PAG group, and
> still had PAG related keyring entries. None of the token destruction
> code paths that log were being used. My plan was to instrument the
> remaining sites that mark a token for destruction (in particular the
> keyring destructor) and try to get it to fail again.
> Sadly, we only seem to see this problem on heavily used hosts, and even
> then only after they've been running for a while.