[OpenAFS] OpenAFS still in development?
Jeffrey Altman
jaltman@your-file-system.com
Sat, 20 Jun 2015 11:38:57 -0400
This is a cryptographically signed message in MIME format.
--------------ms000803080308010300020606
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Michael,
First a correction. I am a developer who has contributed work to
OpenAFS(R) that I have written and funded work that has been contributed
by others. I continue to serve as a Gatekeeper for the OpenAFS project.
However, I would not describe myself as "the OpenAFS main developer"; I
am one among a dwindling number of active contributors.
I am going to rephrase your questions as follows so I can answer them:
1. Is the OpenAFS project dead?
2. Why is Secure Endpoints(R) no longer distributing
OpenAFS for Windows?
3. Why is Your File System(TM) distributing digitally signed
installers for Microsoft Windows and OSX from its web site?
4. Is AuriStor(TM) a replacement for OpenAFS?
5. Has development of OpenAFS for Windows stopped?
1. Is the OpenAFS project dead?
OpenAFS is an open source project that is supported by the community.
Over the course of the last two years there has been a significant
decrease in the rate of contributions but OpenAFS is still under
development.
https://www.openhub.net/p/openafs/commits/summary
The second OpenAFS 1.6.12 pre-release candidate was released on 3 June
and the release team is very eager to receive feedback from the community=
=2E
http://lists.openafs.org/pipermail/openafs-announce/2015/000484.html
The next major stable series of OpenAFS, 1.8.x, continues to be
developed. Code contributors and reviewers are welcome and activity can
be observed at
http://gerrit.openafs.org/
The next AFS and Kerberos Best Practices Workshop will be held in
Pittsburgh PA USA the week of 17 August
http://workshop.openafs.org/afsbpw15/
All are encouraged to attend. Especially those with families who are
looking for some place to take a vacation.
http://workshop.openafs.org/afsbpw15/family.php
2. Why is Secure Endpoints, Inc. no longer distributing OpenAFS for Windo=
ws?
Secure Endpoints, Inc. exited the OpenAFS support business at the end of
2014. Secure Endpoints, Inc. continues to sell commercial support for
Heimdal Kerberos. Secure Endpoints is no longer listed as a support
provider on the OpenAFS web site
https://www.openafs.org/support.html
3. Why is Your File System, Inc. distributing digitally signed
installers for Microsoft Windows and OSX from its web site?
OpenAFS.org does not distribute an OSX Yosemite installer and the latest
Mavericks installer is 1.6.6. For Windows the latest installation
package is 1.7.31. It is also worth pointing out that OpenAFS.org is
not distributing RHEL7 rpms but continues to do so for RHEL5 and RHEL6.
At the European AFS and Kerberos Conference at CERN the Gatekeepers
discussed the growing difficulties associated with providing packaging
for OSX and Windows given the increasingly stringent requirements from
OS vendors for digital signatures and more modern "store friendly"
packaging formats. These requirements hit OpenAFS particularly hard
because of the kernel modules (Windows drivers and OSX extensions).
Kernel modules have access to everything on the system and OS vendors
restrict who has the ability to sign them and what commitments vendors
have to agree to in order to maintain that capability. There will be a
talk at the upcoming Pittsburgh Workshop exclusively on this topic.
In late March and April of this year I wrote to this mailing list about
the requirements that have been put in place by Microsoft for the
forthcoming Windows 10 and Server 2016 releases. To summarize, the
requirements are:
. 90 days after Windows 10 RTM all kernel drivers will have to be
signed by Microsoft and not the software vendor. These signatures
will use SHA-2 hashes that are incompatible with most older
Windows platforms.
. Microsoft will only sign drivers that are developed using VS2015
(VC19) tool chain. OpenAFS currently builds with VS2005 (VC14).
. Each release must pass agreed to certification tests. There is
no standard set of certification tests for file systems. Each
vendor must negotiate with Microsoft for an applicable set of
tests.
. For Server 2016 all configuration and command line operation must
be performed using PowerShell Cmdlets or WMI. This is required
because by default Server 2016 will be headless and for the Nano
option there will not even be a command prompt. As a result
aklog.exe, bos.exe, cmdebug.exe, fs.exe, pts.exe, rxdebug.exe,
symlink.exe, tokens.exe, udebug.exe, unlog.exe, vos.exe, etc
must be replaced.
Apple through its OSX developer program has long encouraged vendors to
sign all binaries and command scripts. Starting with Mavericks, Apple
mandated the use of a new packaging format that could also be digitally
signed. An unsigned DMG package forces users to jump through hoops to
install the product. With the release of Yosemite, Apple now requires
that all kernel extensions be signed with an Apple issued certificate
that is exclusively used for kernel extensions. Unsigned kernel
extensions can only be loaded if the OS kernel signature checks are
disabled using a boot argument. Disabling signature checks is not
advised. For the OSX El Capitan release the OS will be locked down even
further.
Your File System, Inc. has all of the necessary contracts in place with
Apple and Microsoft to sign binaries, kernel modules and installation
packages. YFSI has also developed all of the necessary packaging for
its AuriStor File System product line. As a service to its Commercial
Support Customers and the broader end user community YFSI distributes
OpenAFS using its AuriStor packaging and YFSI digital signatures.
These installers, 1.6.11 for OSX and 1.7.3202 for Windows are available f=
rom
https://www.your-file-system.com/openafs/client-download
and not from OpenAFS.org for two reasons:
. The digital signatures include the your-file-system.com URL which
matches the https://www.your-file-system.com/ TLS certificate.
As a result the OS can mark the download as trusted providing
that is permitted by local security policy.
. By obtaining the downloads from https://www.your-file-system.com/
it is clear which legal entity is responsible for the distribution.
The AuriStor packaging for Windows bundles the 32-bit and 64-bit
components into one MSI and includes a private Heimdal assembly and
command line tool suite.
4. Is AuriStor a replacement for OpenAFS?
AuriStor is designed to be a general purpose, platform independent,
secure, distributed file system that can be successfully deployed
internally, across the Internet, and within public cloud services.
AuriStor is an IBM AFS(R) and OpenAFS compatible file system that
permits organizations to preserve the /afs file namespace while
migrating to a faster, more scalable, highly secure cross-platform file
system.
https://www.your-file-system.com/openafs/migrate-to-auristor
But, AuriStor is not free and OpenAFS satisfies the needs of
organizations that desire a free solution and do not require:
. the level of security and privacy provided by AuriStor
. IPv6 and Microsoft Direct Access support
. the ability to deploy dozens of DB servers within a cell
. file servers that scale to the full capabilities of the hardware
(all cores, multiple 10gbit NICs, etc)
. larger name spaces (volumes, vnodes, protection ids, quotas, etc)
. OS Vendor certification
- Microsoft certification for Windows 10 and Server 2016
- Red Hat Enterprise Linux
. and more
To be very clear, AuriStor uses its own protocols and does not use
proprietary extensions to the AFS3 protocol suites. OpenAFS can and
will continue to add functionality over time. The choices the OpenAFS
community makes are likely to be different from those that YFSI makes
for AuriStor.
5. Has development of OpenAFS for Windows stopped?
Development of OpenAFS on Windows has not stopped but it has slowed
considerably. From 2007 to 2012 there was significant activity as a
result of the conversion from the SMB Gateway implementation (<=3D 1.6.x)=
to a native Windows IFS Redirector driver (>=3D 1.7.x). The AFS
Redirector is stable across all of the Windows operating system releases.=
YFSI continues to bring OpenAFS to the Microsoft IFS Plug Fests for
testing. It has been many years since a significant issue was uncovered
in the AFS Redirector. Although the AFS Redirector has uncovered many
bugs in drivers from other vendors.
Overall there has not been much to do that has been requested and funded
by support customers. You can view the handful of changes that I'm
working on at the moment at:
http://gerrit.openafs.org/#q,status:open+project:openafs+branch:master+to=
pic:windows-updates,n,z
It is true that the AuriStor client is receiving much more attention.
The AuriStor protocols support enhanced functionality that can take
advantage of further integration with Windows including but not limited
to IPv6, Direct Access, UNC Hardening, Server-to-Server Copy, Cache
Bypass and on-demand token acquisition.
That being said I do not see a viable path at the moment to an OpenAFS
release for Windows 10 and Server 2016. There is simply too much work
that must be completed to obtain certification. The AuriStor Windows
client will be certified and it is compatible with IBM AFS and OpenAFS
servers. One possibility is that YFSI will permit the AuriStor
redirector to be packaged with the OpenAFS userland components. This
would permit an OpenAFS package to be deployed on Windows 10 but not
Server 2016. Whether there is demand for such an option from YFSI's
commercial support customers is yet to be seen.
I hope this response answers your questions.
Jeffrey Altman
On 6/19/2015 6:58 AM, Richter, Michael wrote:
> Hi,
>=20
> =20
>=20
> I noticed that there were no new releases of OpenAFS for Windows since =
a
> long time. So I started some research and found a info on
> https://www.secure-endpoints.com telling
>=20
> =E2=80=9E2014-10-04: OpenAFS for Windows Release 1.7.32 is now availab=
le.=E2=80=9C
>=20
> and
>=20
> =E2=80=9E2015-02-25: OpenAFS client installers are now =
available
> from Your File System Inc.=E2=80=9C
>=20
> =20
>=20
> On yfs I=E2=80=99ve found installers called
> =E2=80=9Eyfs-openafs-en_US-AMD64-1_7_3202.msi=E2=80=9C for example. Is =
it a special
> version or what is going on?
>=20
> =20
>=20
> I know that the OpenAFS main developer, J. Altman, is behind
> SecureEndpoints and Your-File-System.com. So I=E2=80=99m wondering =E2=80=
=93 maybe I
> missed some announcement or so. Is OpenAFS development gone down for
> Auristor?
>=20
> =20
>=20
> Mit freundlichen Gr=C3=BC=C3=9Fen
>=20
> Michael Richter
>=20
> =20
>=20
> --=20
>=20
> Michael Richter
>=20
> =20
>=20
> Technische Universit=C3=A4t Berlin
>=20
> Universit=C3=A4tsbibliothek
>=20
> IT-Service
>=20
> =20
>=20
> Fasanenstra=C3=9Fe 88, 10623 Berlin
>=20
> Telefon: +49 (0)30 314-76310
>=20
> m.richter@tu-berlin.de
>=20
> =20
>=20
> www.ub.tu-berlin.de
>=20
> =20
>=20
--------------ms000803080308010300020606
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature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=
--------------ms000803080308010300020606--