<li><a href="#3.37 afs_krb_get_lrealm() using"> 3.37 afs_krb_get_lrealm() using /usr/afs/etc/krb.conf</a></li>
<li><a href="#3.38 Moving from kaserver to Hei"> 3.38 Moving from kaserver to Heimdal KDC</a></li>
<li><a href="#3.39 Moving from KTH-KRB4 to Hei"> 3.39 Moving from KTH-KRB4 to Heimdal KDC</a></li>
+ <li><a href="#3.40 What are those bos(1) -type"> 3.40 What are those bos(1) -type values simple and cron?</a></li>
+ <li><a href="#3.41 KDC listens on port 88 inst"> 3.41 KDC listens on port 88 instead of 750</a></li>
+ <li><a href="#3.42 afsd gives me "Error -1 in"> 3.42 afsd gives me "Error -1 in basic initialization." on startup</a></li>
+ <li><a href="#3.43 Although I get krb tickets,"> 3.43 Although I get krb tickets, afslog doesn't give me tokens, I see UDP packets to port 4444</a></li>
+ <li><a href="#3.44 I get error message trhough"> 3.44 I get error message trhough syslogd: "afs: Tokens for user of AFS id 0 for cell foo.bar.baz are discarded (rxkad error=19270407)"</a></li>
+ <li><a href="#3.45 I get tickets and tokens, b"> 3.45 I get tickets and tokens, but still get Permission denied.</a></li>
</ul>
</li>
</ul>
You need to distinguish between the filesystem used by the file server to store the actual AFS data (by convention in /vicep?) and the filesystem used by the client cache manager to cache files.
-With the new namei file server you can basically use any filesystem you want. Tne namei file server does not do any fancy stuff behind the scenes but only accesses normal files (their names are a bit strange though).
+Fileserver is started by bosserver. It depends, what ./configure switches were used during compilation from sources. To be always on the safe side, use --enable-namei-fileserver configure flag. That will give you fileserver binary which can act on any /vicep? partition regardless it's filesystem type. With the new namei file server you can basically use any filesystem you want. The namei file server does not do any fancy stuff behind the scenes but only accesses normal files (their names are a bit strange though).
-But you cannot use SGI efs under [[OpenAFS]] at all.
+The opposite to namei fileserver is inode based nameserver. According to openafs-devel email list, it gave on some Solaris box 10% speedup over the namei based server. The namei based fileserver cannot run on every filesystem, as it stores some internal afs-specific data into the filesystem. Typically, /sbin/fsck distributed withthe operating system zaps these data. Inode based fileserver directly operates on the inodes of the underlying file system which therefore has to fully support the inode abstraction scheme. The the Administrators Guide for more details (they differ from system to system).
-It is a different story with the old inode based server. It directly operates on the inodes of the underlying file system which therefore has to fully support the inode abstraction scheme. The the Administrators Guide for more details (they differ from system to system).
-
-On the client side, you always have to use a file system supporting the inode abstraction for the cache (usually /usr/vice/cache) since the cache manager references files by their inode. Fortunately, it does not do such tricky stuff as the inode based server.
+On the client side where you run /usr/afs/etc/afsd as a kernel process, you always have to use a file system supporting the inode abstraction for the cache (usually /usr/vice/cache) since the cache manager references files by their inode. Fortunately, it does not do such tricky stuff as the inode based fileserver.
The following file systems have been reported _not_ to work for the AFS client cache:
- reiserfs
- vxfs (HP-UX)
- advfs (Tru64), it works but gives cachecurruption
-- efs (SGI) - IBM AFS does support efs, but openafs doesn't have a license for that
+- efs (SGI) - IBM AFS does support efs, but openafs doesn't have a license for that.
- Patch committed to cvs around 6/2003 will now enforce this in some cases and generate a warning to the user if the filesystem type is wrong.
Use on afsd command line -chunk 17 or greater. Be carefull, with certain cache sizes afsd crashes on startup (Linux, [[Tru64Unix]] at least).
+ > So I ran the full suite of iozone tests (13), but at a single file size
+ > (128M) and one record size (64K). I set the AFS cache size to 80000K
+ > for both memcache and diskcache.
+
+ Note that memcache size and diskcache size are different things.
+ In the case of memcache, a fixed number of chunks are allocated
+ in memory, such that numChunks * chunkSize = memCacheSize. In
+ the case of disk cache, there are a lot more chunks, because the
+ disk cache assumes not every chunk will be filled (the underlying
+ filesystem handles disk block allocation for us). Thus, when you
+ have small file segments, they use up an entire chunk worth of
+ cache in the memcache case, but only their size worth of cache
+ in the diskcache cache.
+
+ -- kolya
+
### <a name="3.34 Settting up PAM with AFS"></a> 3.34 Settting up PAM with AFS
Solaris
callisto#bin/fs la /afs
Access list for /afs is
Normal rights:
+
system:administrators rlidwka
--------------------------------------------------------------------------------
afs.cell.name@REALM
krbtgt CELL.NAME@REALM
+If you use heimdal (or MIT krb5), do:
+
+echo "REALM" > /usr/afs/etc/krb.conf
+
### <a name="3.38 Moving from kaserver to Hei"></a> 3.38 Moving from kaserver to Heimdal KDC
> While converting all our administration tools, we have discovered that
cause conversion des-cbc-sha1 keys of old krb4 database entries to
des-cbc-md5.
-[http://www.shop263.com/i-4/1.htm 芦荟叶粉] [http://www.shop263.com/i-4/2.htm 芦荟汁] [http://www.shop263.com/i-4/3.htm 旅游观光] [http://www.shop263.com/i-4/4.htm 旅游洁具] [http://www.shop263.com/i-4/5.htm 绿色鲜氧美容] [http://www.shop263.com/i-4/6.htm 氯代异氰脲酸] [http://www.shop263.com/i-4/7.htm 美白养颜] [http://www.shop263.com/i-4/8.htm 美容保健品] [http://www.shop263.com/i-4/9.htm 美容膏] [http://www.shop263.com/i-4/10.htm 美容工] [http://www.shop263.com/i-4/11.htm 美容美体仪器] [http://www.shop263.com/i-4/12.htm 美容胭脂] [http://www.shop263.com/i-4/13.htm 美容仪器] [http://www.shop263.com/i-4/14.htm 美乳霜] [http://www.shop263.com/i-4/15.htm 美颜霜] [http://www.shop263.com/i-4/16.htm 密封胶溶剂] [http://www.shop263.com/i-4/17.htm 绵羊油系列] [http://www.shop263.com/i-4/18.htm 棉短绒] [http://www.shop263.com/i-4/19.htm 棉壳] [http://www.shop263.com/i-4/20.htm 棉籽] [http://www.shop263.com/i-4/21.htm 面膜] [http://www.shop263.com/i-4/22.htm 面膜系列] [http://www.shop263.com/i-4/23.htm 灭蚊片] [http://www.shop263.com/i-4/24.htm 摩丝] [http://www.shop263.com/i-4/25.htm 抹身亮彩膏] [http://www.shop263.com/i-4/26.htm 沐浴露] [http://www.shop263.com/i-4/27.htm 沐浴卫生间] [http://www.shop263.com/i-4/28.htm 沐足按摩] [http://www.shop263.com/i-4/29.htm 凝玉眼啫哩] [http://www.shop263.com/i-4/30.htm 牛磺酸] [http://www.shop263.com/i-4/31.htm 钮扣树脂] [http://www.shop263.com/i-4/32.htm 农业蜡] [http://www.shop263.com/i-4/33.htm 盘香] [http://www.shop263.com/i-4/34.htm 喷雾型彩条] [http://www.shop263.com/i-4/35.htm 喷雾型飞花] [http://www.shop263.com/i-4/36.htm 喷雾型喷雪] [http://www.shop263.com/i-4/37.htm 喷雾型飘雪] [http://www.shop263.com/i-4/38.htm 皮革化学品] [http://www.shop263.com/i-4/39.htm 皮革蜡] [http://www.shop263.com/i-4/40.htm 偏重亚硫酸钾] [http://www.shop263.com/i-4/41.htm 嘌呤] [http://www.shop263.com/i-4/42.htm 起蜡水] [http://www.shop263.com/i-4/43.htm 气雾剂溶剂油] [http://www.shop263.com/i-4/44.htm 强力修复剂] [http://www.shop263.com/i-4/45.htm 强力油污乳化剂] [http://www.shop263.com/i-4/46.htm 羟丙基甲基纤维素] [http://www.shop263.com/i-4/47.htm 羟丙纤维素] [http://www.shop263.com/i-4/48.htm 羟乙基纤维素聚合物] [http://www.shop263.com/i-4/49.htm 氢溴酸] [http://www.shop263.com/i-4/50.htm 清毒养颜] [http://www.shop263.com/i-4/51.htm 清洁保养剂] [http://www.shop263.com/i-4/52.htm 清洁工具] [http://www.shop263.com/i-4/53.htm 清新美颜面膜] [http://www.shop263.com/i-4/54.htm 清新爽肤水] [http://www.shop263.com/i-4/55.htm 祛斑] [http://www.shop263.com/i-4/56.htm 祛斑面膜] [http://www.shop263.com/i-4/57.htm 去粉刺] [http://www.shop263.com/i-4/58.htm 去角质霜] [http://www.shop263.com/i-4/59.htm 去屑止痒剂] [http://www.shop263.com/i-4/60.htm 日化产品] [http://www.shop263.com/i-4/61.htm 日化蜡] [http://www.shop263.com/i-4/62.htm 日化香精] [http://www.shop263.com/i-4/63.htm 溶剂油] [http://www.shop263.com/i-4/64.htm 柔肤精华玉液] [http://www.shop263.com/i-4/65.htm 乳化剂] [http://www.shop263.com/i-4/66.htm 润唇膏] [http://www.shop263.com/i-4/67.htm 润肤剂] [http://www.shop263.com/i-4/68.htm 润肤霜] [http://www.shop263.com/i-4/69.htm 润滑脂] [http://www.shop263.com/i-4/70.htm 三甲基四氢喹喔啉] [http://www.shop263.com/i-4/71.htm 三聚磷酸二氢铝] [http://www.shop263.com/i-4/72.htm 三聚磷酸铝] [http://www.shop263.com/i-4/73.htm 三聚磷酸钠] [http://www.shop263.com/i-4/74.htm 三氯生] [http://www.shop263.com/i-4/75.htm 三氯生广谱抗菌剂] [http://www.shop263.com/i-4/76.htm 三氯新] [http://www.shop263.com/i-4/77.htm 三氯异氰尿酸] [http://www.shop263.com/i-4/78.htm 杀虫气雾剂] [http://www.shop263.com/i-4/79.htm 杀蚁饵剂] [http://www.shop263.com/i-4/80.htm 杀蟑饵盒] [http://www.shop263.com/i-4/81.htm 沙棘面膜] [http://www.shop263.com/i-4/82.htm 设备专用清洁剂] [http://www.shop263.com/i-4/83.htm 深层调理面膜] [http://www.shop263.com/i-4/84.htm 生发灵] [http://www.shop263.com/i-4/85.htm 生物护理液] [http://www.shop263.com/i-4/86.htm 生物祛斑霜] [http://www.shop263.com/i-4/87.htm 胜德油基杀虫剂] [http://www.shop263.com/i-4/88.htm 湿巾] [http://www.shop263.com/i-4/89.htm 石材养护] [http://www.shop263.com/i-4/90.htm 食用香精] [http://www.shop263.com/i-4/91.htm 收缩水] [http://www.shop263.com/i-4/92.htm 手性氨基酸] [http://www.shop263.com/i-4/93.htm 手性配体] [http://www.shop263.com/i-4/94.htm 树脂] [http://www.shop263.com/i-4/95.htm 双戊二烯树脂] [http://www.shop263.com/i-4/96.htm 爽肤水] [http://www.shop263.com/i-4/97.htm 水产养殖消毒杀菌剂] [http://www.shop263.com/i-4/98.htm 水基气雾杀虫剂] [http://www.shop263.com/i-4/99.htm 水晶按摩膏] [http://www.shop263.com/i-4/100.htm 水晶蜡] [http://www.shop263.com/i-4/101.htm 水泥分散剂] [http://www.shop263.com/i-4/102.htm 水泥缓凝剂] [http://www.shop263.com/i-4/103.htm 水溶性膜型清洁剂] [http://www.shop263.com/i-4/104.htm 通渠粉] [http://www.shop263.com/i-4/105.htm 维他命系列] [http://www.shop263.com/i-4/106.htm 洁面乳] [http://www.shop263.com/i-4/107.htm 卫洁纯] [http://www.shop263.com/i-4/108.htm 卫洁灵] [http://www.shop263.com/i-4/109.htm 卫生间用品] [http://www.shop263.com/i-4/110.htm 卫生杀虫气雾剂] [http://www.shop263.com/i-4/111.htm 无钴变色硅胶] [http://www.shop263.com/i-4/112.htm 无磷助洗剂] [http://www.shop263.com/i-4/113.htm 无水硫酸钠] [http://www.shop263.com/i-4/114.htm 吸水地垫] [http://www.shop263.com/i-4/115.htm 硒强化营养盐] [http://www.shop263.com/i-4/116.htm 洗发露] [http://www.shop263.com/i-4/117.htm 洗发香波] [http://www.shop263.com/i-4/118.htm 洗锅刷] [http://www.shop263.com/i-4/119.htm 洗护系列] [http://www.shop263.com/i-4/120.htm 洗甲水] [http://www.shop263.com/i-4/121.htm 洗洁精] [http://www.shop263.com/i-4/122.htm 洗面奶] [http://www.shop263.com/i-4/123.htm 洗面乳] [http://www.shop263.com/i-4/124.htm 洗手乳液] [http://www.shop263.com/i-4/125.htm 洗手液] [http://www.shop263.com/i-4/126.htm 洗衣粉] [http://www.shop263.com/i-4/127.htm 洗衣液] [http://www.shop263.com/i-4/128.htm 细孔硅胶] [http://www.shop263.com/i-4/129.htm 鲜花干燥硅胶] [http://www.shop263.com/i-4/130.htm 现代中药] [http://www.shop263.com/i-4/131.htm 香精片] [http://www.shop263.com/i-4/132.htm 香球] [http://www.shop263.com/i-4/133.htm 香水] [http://www.shop263.com/i-4/134.htm 香水配件] [http://www.shop263.com/i-4/135.htm 香水瓶] [http://www.shop263.com/i-4/136.htm 香浴露] [http://www.shop263.com/i-4/137.htm 消毒湿巾] [http://www.shop263.com/i-4/138.htm 锌强化营养盐] [http://www.shop263.com/i-4/139.htm 新鲜蔬菜] [http://www.shop263.com/i-4/140.htm 雅肤深层洁面乳] [http://www.shop263.com/i-4/141.htm 亚硫酸钾] [http://www.shop263.com/i-4/142.htm 烟酮] [http://www.shop263.com/i-4/143.htm 烟用香精] [http://www.shop263.com/i-4/144.htm 烟用香料] [http://www.shop263.com/i-4/145.htm 胭脂眼影] [http://www.shop263.com/i-4/146.htm 眼袋霜] [http://www.shop263.com/i-4/147.htm 眼线液] [http://www.shop263.com/i-4/148.htm 眼影] [http://www.shop263.com/i-4/149.htm 羊胎素] [http://www.shop263.com/i-4/150.htm 液体电蚊香] [http://www.shop263.com/i-4/151.htm 衣吊] [http://www.shop263.com/i-4/152.htm 衣架系列] [http://www.shop263.com/i-4/153.htm 医药中间体] [http://www.shop263.com/i-4/154.htm 仪器清洁剂] [http://www.shop263.com/i-4/155.htm 乙基纤维素] [http://www.shop263.com/i-4/156.htm 异氰尿酸] [http://www.shop263.com/i-4/157.htm 引擎抗磨养护剂] [http://www.shop263.com/i-4/158.htm 引擎磨合养护剂] [http://www.shop263.com/i-4/159.htm 荧光增白剂] [http://www.shop263.com/i-4/160.htm 营养霜] [http://www.shop263.com/i-4/161.htm 营养盐] [http://www.shop263.com/i-4/162.htm 优质美容套刷] [http://www.shop263.com/i-4/163.htm 油墨溶剂] [http://www.shop263.com/i-4/164.htm 油田钻井液] [http://www.shop263.com/i-4/165.htm 游离子牛油果焗油发膜] [http://www.shop263.com/i-4/166.htm 有机磷酸盐] [http://www.shop263.com/i-4/167.htm 右旋龙脑] [http://www.shop263.com/i-4/168.htm 元明粉] [http://www.shop263.com/i-4/169.htm 圆球刷] [http://www.shop263.com/i-4/170.htm 皂基] [http://www.shop263.com/i-4/171.htm 啫喱水] [http://www.shop263.com/i-4/172.htm 增白面膜] [http://www.shop263.com/i-4/173.htm 增稠剂] [http://www.shop263.com/i-4/174.htm 樟脑] [http://www.shop263.com/i-4/175.htm 樟脑丸] [http://www.shop263.com/i-4/176.htm 蟑螂胶饵] [http://www.shop263.com/i-4/177.htm 真珠膏] [http://www.shop263.com/i-4/178.htm 织物柔软剂] [http://www.shop263.com/i-4/179.htm 织物洗涤用品] [http://www.shop263.com/i-4/180.htm 植物莹白祛斑霜] [http://www.shop263.com/i-4/181.htm 植物转基因] [http://www.shop263.com/i-4/182.htm 指甲油] [http://www.shop263.com/i-4/183.htm 珠光剂] [http://www.shop263.com/i-4/184.htm 铸造蜡] [http://www.shop263.com/i-4/185.htm 专业外墙清洗剂] [http://www.shop263.com/i-4/186.htm 专用树脂] [http://www.shop263.com/i-4/187.htm 滋养秀肤面霜] [http://www.shop263.com/i-4/188.htm 紫苏醛] [http://www.shop263.com/i-4/189.htm 紫苏糖] [http://www.shop263.com/i-4/190.htm 紫苏葶] [http://www.shop263.com/i-4/191.htm 紫外吸收剂] [http://www.shop263.com/i-4/192.htm 自动车库门] [http://www.shop263.com/i-4/193.htm 左旋龙脑] [http://www.shop263.com/i-4/194.htm 左旋樟脑] [http://www.shop263.com/i-4/195.htm 透明工艺品树脂] [http://www.shop263.com/i-4/196.htm 褪红营养素] [http://www.shop263.com/i-4/197.htm 脱模用油] [http://www.shop263.com/i-4/198.htm 外墙清洗剂] [http://www.shop263.com/i-4/199.htm 微波炉] [http://www.shop263.com/i-4/200.htm 微波炉用具] [http://www.shop263.com/i-4/201.htm 微晶纤维素] [http://www.shop263.com/i-4/202.htm 微脂囊按摩膏] [http://www.shop263.com/i-4/203.htm 维B细胞活力霜] [http://www.shop263.com/i-4/204.htm 维生素B5] [http://www.shop263.com/i-4/205.htm 维生素及其衍生物] [http://www.shop263.com/i-4/206.htm 通用树脂]
+### <a name="3.40 What are those bos(1) -type"></a> 3.40 What are those bos(1) -type values simple and cron?
+
+Typically, admins do this once they configure new afs server:
+
+ bos create foo ptserver simple /usr/afs/bin/ptserver -cell bar.baz
+ bos create foo vlserver simple /usr/afs/bin/vlserver -cell bar.baz
+ bos create foo fs fs /usr/afs/bin/fileserver /usr/afs/bin/volserver /usr/afs/bin/salvager -cell bar.baz
+
+Type "simple" has one process. type "cron" gets forked at the appropriate time.
+
+### <a name="3.41 KDC listens on port 88 inst"></a> 3.41 KDC listens on port 88 instead of 750
+
+ "Kramer, Matthew" <mattkr@bu.edu> writes:
+
+ > Hello,
+ > Our Kerberos 4 environment listens on only port 750 and doesn't
+ > listen on port 88. For Win2K/XP machines this causes a problem in
+ > C:\openafs-1.2.8\src\kauth\user_nt.c line 144 when the Kerberos port is
+ > queried from the %systemroot%\system32\drivers\etc\services file. Win2K
+ > and XP both return 88 which is correct for Kerberos 5 but in our case
+ > not for Kerberos 4. Why doesn't it instead query for kerberos-iv which
+ > would return the correct value of 750?
+ >
+ > Y:\src\kauth>diff user_nt.c.orig user_nt.c
+ > 144c144
+ > < sp = getservbyname("kerberos", "udp");
+ > ---
+ > > sp = getservbyname("kerberos-iv", "udp");
+ >
+ A quick work around could be to use Loves requestforwarder found at
+
+ ftp://ftp.stacken.kth.se/pub/projects/krb-forward/krb-forward-0.1.tar.gz
+
+ /JockeF
+
+### <a name="3.42 afsd gives me "Error -1 in"></a><a name="3.42 afsd gives me "Error -1 in "></a> 3.42 afsd gives me "Error -1 in basic initialization." on startup
+
+When starting afsd, I get the following:
+
+ # /usr/vice/etc/afsd -nosettime -debug
+ afsd: My home cell is 'foo.bar.baz'
+ ParseCacheInfoFile: Opening cache info file '/usr/vice/etc/cacheinfo'...
+ ParseCacheInfoFile: Cache info file successfully parsed:
+ cacheMountDir: '/afs'
+ cacheBaseDir: '/usr/vice/cache'
+ cacheBlocks: 50000
+ afsd: 5000 inode_for_V entries at 0x8075078, 20000 bytes
+ SScall(137, 28, 17)=-1 afsd: Forking rx listener daemon.
+ afsd: Forking rx callback listener.
+ afsd: Forking rxevent daemon.
+ SScall(137, 28, 48)=-1 SScall(137, 28, 0)=-1 SScall(137, 28, 36)=-1 afsd: Error -1 in basic initialization.
+
+Solution: make sure you have kernel module loaded.
+
+### <a name="3.43 Although I get krb tickets,"></a> 3.43 Although I get krb tickets, afslog doesn't give me tokens, I see UDP packets to port 4444
+
+Using tcpdump I see the following traffic. What runs on the port 4444?
+
+ 15:16:54.815194 IP foo.bar.baz.32772 > foo.bar.baz.4444: UDP, length: 269
+ 15:16:54.815199 IP foo.bar.baz > foo.bar.baz: icmp 305: foo.bar.baz udp port 4444 unreachable
+
+This is the 5->4 ticket conversion service on UDP port 4444. Assuming your afs servers know how to deal with krb5 tickets (since openafs-1.2.10? and 1.3.6x?) include the following in /etc/krb5.conf:
+
+ [appdefaults]
+ libkafs = {
+ afs-use-524 = local
+ }
+
+### <a name="3.44 I get error message trhough"></a> 3.44 I get error message trhough syslogd: "afs: Tokens for user of AFS id 0 for cell foo.bar.baz are discarded (rxkad error=19270407)"
+
+Answer:
+
+ grep 19270407 /usr/afsws/include/rx/*
+ /usr/afsws/include/rx/rxkad.h:#define RXKADBADTICKET (19270407L)
+
+### <a name="3.45 I get tickets and tokens, b"></a> 3.45 I get tickets and tokens, but still get Permission denied.
+
+Answer: /usr/afs/etc/UserList accepts only krb4 syntax. Use `joe.admin` instead of `joe/admin`. See `https://lists.openafs.org/pipermail/openafs-devel/2002-December/008673.html` and the rest of the thread.
+
+[http://www.etoo.cn/zhaigao 窄告] [http://www.etoo.cn/sports 健身器材] [http://www.etoo.cn/stadium 场馆设备] [http://www.etoo.cn/21win-win 拓展训练] [http://www.paite.net 尖锐湿疣] [http://www.paite.net/1 尖锐湿疣] [http://www.wjmgy.com 脉管炎] [http://www.wjmgy.com/1 脉管炎] [http://www.wjmgy.com/hospitaljs.htm 脉管炎] [http://www.wjmgy.com/zhuankejs.htm 脉管炎] [http://www.wjmgy.com/zhuzhiys.htm 脉管炎] [http://www.wjmgy.com/conact.htm 脉管炎]
git://git.openafs.org / openafs-wiki.git / blobdiff