[OpenAFS-win32-devel] OpenAFS for Windows - outstanding projects report and call for testers

Mon, 12 Jul 2004 10:13:39 -0400

This is a cryptographically signed message in MIME format.

--------------ms070708000607000203010404
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

To the OpenAFS for Windows user community:

Since the last status report in mid-June, version 1.3.65 was released on 
June 26.  The overall
feedback has been quite good.  There have been no significant bug 
reports filed against this
release.  Since that time work has continued with in the intention of 
producing a release at
the end of July which can be distributed by organizations getting ready 
for the Fall.  This
was supposed to be the in-famous 1.4 release but it won't be.

The following question was raised "what does the version number mean in 
the context of
OpenAFS?  Current the version number is a source code version number.  
Not a product
release version number.  The Windows products are built out of the 1.3 
branch of the
the OpenAFS CVS.  Unfortunately, the Unix development is not at a point 
where a 1.4
branch is ready to be made.  Since I really do not want to fork a new 
branch for Windows
and because even with this next release I am anticipating a major 
release once a month
for the forseeable future there appears to be no justification for 
splitting the Windows
version numbering away from the source code it is based on.  The next 
version will therefore
be 1.3.70.

There are approximately two weeks left before the next release.  As such 
the list of features
which can go into it are minimal.  The focus is on stability and 
security.  Since the 1.3.65
release the following changes have been made:

    * A new registry value "MaxCPUs" has been added to allow
      administrators to restrict the
      number of CPUs on which the OpenAFS Client Service,
      afsd_service.exe, will execute.
      This is to help avoid some of the known thread safety problems in
      the RX library which
      are frequently triggered on hyperthreaded machines.
    * In afscreds, if you already have a Kerberos ticket for user@REALM
      and wish to obtain
      a second token with it for another cell, simply enter the cell
      name and user@REALM
      for the username without a password to perform the token acquisition.
    * The default RPC mechanism used for pioctl calls is now local RPC
      instead of Named
      Pipes
    * Freelance (dynamic fake root)  mode now supports read-write mount
      points in the fake
      root.afs volume. 
    * Freelance mode will automatically add read-only and read-write
      mount points for the
      default cell if there are no mount points in the fake root.afs
      volume.  No longer will
      the fake root.afs volume be empty.
    * Fixed a bug related to expiring DNS entries which would cause a
      crash if the DNS
      entries expired while the computer was suspended
    * Added support for authenticated SMB connections.  No longer will
      high security mode
      be needed.

These changes are currently available in the daily builds.  I urge any 
organization which is
planning on releasing this next build to its community to start testing 
the daily builds now.
The daily builds are available from:

    /afs/athena.mit.edu/user/j/a/jaltman/Public/OpenAFS/
    \\afs\athena.mit.edu\user\j\a\jaltman\Public\OpenAFS\
    http://web.mit.edu/~jaltman/Public/OpenAFS/

The following items are the ones which are in my opinion required for 
the next release but
have yet to be implemented:

    * migration from .INI files to a pure registry only environment
      including movement
      from %WINDIR%\afsdcell.ini to <Program
      Files>\OpenAFS\Client\CellServDB
    * Support for XP SP2 and 2003 SP1.  This includes automatic
      configuration of the Internet
      Connection Firewall and registry modifications to support SMB
      authentication
    * Per Domain configurations for AFS Integrated Logon
    * Creation of a Windows Security Group for "AFS Administration".  If
      users are not
      a member of this group they cannot modify the configuration of the
      AFS Client
      Service

My remaining list of outstanding projects is as follows:

  1. No longer use AFS Client Service "cell" as the default cell for 
individual users
  2. Re-write afsd_service.exe to perform synchronized thread startup 
and shutdown.  Currently there is no
      synchronization of thread creation which results in timing 
conflicts; and there is no attempt to cleanly
      shutdown the service which causes problems when restarting and 
prevents the implementation of a
      persistent cache
  3. Implement a persistent cache
  4. Prevent panic situation when the root.afs volume is not reachable
  5. Prevent panic situation when the IP address to which the SMB server 
is bound is removed from the
      local machine's network configuration
  6. Identify and fix the problems with running the RX library on 
Hyperthreaded systems
  7. Add support for Named Pipes within the afs filesystem
  8. Re-write afscreds.exe to support:
        1. choosing between Kerberos 5 and Kerberos 4 on a per principal 
basis
        2. providing users with the ability to map multiple cells to a 
single principal
        3. providing change password functionality on a per principal basis
        4. no longer include drive mapping
        5. configuration of afscreds startup options in shortcut
  9. Re-write afs_config.exe to be only "per user" functionality which 
does not require admin privileges
        1. default cell and principal for the user
        2. drive mappings
        3. visibility of afs creds and setting of afs creds startup options
 10. Create new afs_admin.exe tool to be installed in the administrator 
folder (or use MMS) which contains:
        1. afs client service cell name
        2. integrated logon configuration
        3. Gateway configuration
        4. start/stop service
        5. global drive mapping
        6. submount management
        7. file/volume server preferences
        8. afs cells
        9. cache configuration
       10. diagnostics
       11. network configuration
       12. miscellaneous
       13. need to add support for all of the new registry values since 
1.2.8
 11. Identify why 16-bit DOS applications executed out of AFS fail
  12. Add support for configurable Icon file representing AFS folders 
within the Explorer Shell
 13. Documentation Documentation Documentation
 14. Large File support (> 2GB)
 15. Integrate KFW installation into the NSIS installer
 **. Replace the SMB/CIFS Server with an Installable File System

As always I encourage all organizations that wish to contribute to 
OpenAFS for Windows development to
contact me.  Financial contributions as well as in kind assistance are 
seriously appreciated.   There is
much to do and it is only going to be accomplished with the support of 
the organizations which rely on
this software within their organizations.

Jeffrey Altman

--------------ms070708000607000203010404
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms070708000607000203010404--