1 Openafs News -- history of user Visible changes. 11 July 2001
3 * Changes since OpenAFS 1.1.1
5 ** AFS now supports --prefix and the other directory options of
6 configure. By default AFS builds assuming it will be installed in
7 /usr/local. In order to get traditional AFS directory paths (/usr/afs
8 and /usr/vice/etc) use the --enable-transarc-paths option to
9 configure. More details on the new directory layout are found in README.
11 * Changes since Openafs 1.0
13 ** AFS now builds with configure. The README for building has been
14 updated and includes full details.
16 ** A client system can now have multiple sysname values for @sys.
17 They will be searched in order when looking up files in AFS. The
18 -newsysname argument to fs sysname can be repeated to set multiple
21 ** A new system group is created for new cells (system:ptsviewers
22 with id -203). If this group exists, members of this group can
23 examine and read the entire protection database. They can examine
24 all users and groups and can get the membership of any group.
26 ** A new program, pt_util has been added to the distribution. This
27 program allows users to print the contents of the protection
28 database or to edit the protection database without running a
29 ptserver. It can be used to set up a new cell without ever running
30 in noauth mode. Run pt_util -h for help.
32 ** The fs setcrypt and fs getcrypt commands have been added. These
33 commands allow the system administrator to require that the client
34 encrypt all authenticated traffic between the client workstation
35 and AFS. The encryption used is weak, but is likely better than
36 sending unencrypted traffic in most environments. Some functions,
37 such as looking for a volume may not be encrypted, but data
38 transfer certainly is. By default data is not encrypted. At this
39 time no significant experimentation with server performance has
42 ** By default AFS is compiled with AFS_AFSDB_ENV, enabling the -afsdb
43 option to be given to afsd on startup. If this option is used, then new
44 cells will be looked up using AFSDB records stored in DNS if they
45 are not found in CellServDB. This means that users can create
46 cross-cell mountpoints in directories they control to access cells
47 not in root.afs, and that cells in root.afs need not be in the
50 ** AFS database servers can be marked as read-only clones. Surround
51 the hostname in square brackets on the bos addhost command and the
52 database server will never be elected sync site. This is useful
53 for cells distributed over a wide region.
55 ** The AFS servers now support the -syslog flag. This flag causes
56 them to log to syslog rather than to files. This flag is not
57 supported on NT. For all servers besides the salvager, the flag can
58 also be specified as -syslog=facility, where facility is an integer
59 facility code from syslog.h. A -syslogfacility option is provided for
60 the salvager to accomplish the same goal.
62 ** If the --enable-fast-restart flag is given when configuring AFS,
63 then the salvager supports the -dontsalvage flag which causes it to
64 exit without salvaging any volumes. If this is configured into the
65 third command of a fs process, then the fileserver will start without
66 salvaging. It will fail to attach volumes that need salvaging and they
67 can be salvaged manually. This provides significantly better server
68 startup performance at the cost of administrative complexity.
70 ** If the --enable-bitmap-later flag is given when configuring AFS,
71 then the fileserver creates bitmaps for free vnodes on demand, allowing
74 ** If bosserver finds a BosConfig.new file at startup, it reads this
75 file and renames it to BosConfig. This allows bosserver to be
76 reconfigured at next restart.
78 ** The bosserver can be placed in a restricted mode in
79 which AFS superusers are only granted limited access to the server
80 host. The following functionality is disabled when restricted mode is in
84 bos getlog (except for files with no '/'s in their name)*
90 specific exceptions are made for functionality that "bos salvage"
93 a cron bnode who's name is "salvage-tmp", time is now, and command
94 begins with "/usr/afs/bin/salvager" may be created. This bnode
95 deletes itself when complete, so no special "delete" support is needed.
96 This functionality may be removed in the future if a "Salvage" RPC is
99 The file with the exact path /usr/afs/logs/SalvageLog may be fetched,
100 since that is how bos salvage [...] -showlog is implimented.
102 Restricted mode is enabled using a new bos command (bos setrestricted)
103 or bossever command line switch (bosserver -restricted). Restricted
104 mode can be disabled by a) sending the bosserver process a SIGFPE (which
105 will then allow restricted operations until the next restart or
106 setrestricted command) or b) editing /usr/afs/local/BosConfig
107 (or BosConfig.new), and restarting the bosserver.
109 ** The bos UserList of trusted administrators can now contain
110 cross-realm Kerberos principals.
112 ** udebug now takes --server not --servers.
114 ** Several error messages have been improved to include volume
117 ** Several new ports have been included for UNIX platforms: Darwin
118 (ppc_darwin_12 and ppc_darwin_13), Linux 2.4 (i386_linux24), Linux on
119 the Powerpc (ppc_linux22 and ppc_linux24), Linux on the Sparc
120 (sparc_linux22, sparc64_linux22 and sparc64_linux24) .
122 ** Incomplete FreeBSD and Alpha Linux ports are included. The
123 FreeBSD port has a working server and the Alpha Linux port has a
124 partially working client.
126 ** A native client for Windows 95/98/ME has been added to the distribution.
127 With this program, a gateway machine is no longer required for Windows 9x
128 to access AFS files. One drive letter will be created on your machine by
129 default - Z:. The Z: drive will be the root of the AFS tree, allowing you
130 to browse all sites that have AFS servers available. Additional drive
131 letters can be defined for other AFS directories. A Windows Explorer
132 shell extension is included that allows you to right click on items
133 within an AFS tree to bring up an "AFS" menu item and perform various
134 operations on a file or directory. The most useful item is "Access
135 Control Lists", which allows you to view and edit the permissions of a
136 particular directory. Command line tools are also available in the
137 install directory. These commands include klog, unlog, tokens, kpasswd,
138 symlink, fs and pts. The installable includes a readme file that contains
139 more information on how to use the client program and known issues.
141 ** support for large caches in afsd. Cachefiles are stored in
142 subdirectories. The default is 2048 files per subdirectory, which
143 should work fine in most situations. You can use the new afsd
144 option -files_per_subdir to change this number. Note that the first
145 time you run afsd with this patch, your cachefiles will get moved
146 into subdirectories. If you subsequently run an older version of
147 afsd, you will lose all your cached files.