X-Git-Url: http://git.openafs.org/?p=openafs.git;a=blobdiff_plain;f=NEWS;h=35422f8cc9d2a4b412ce99ffc0f95dc954aafbc5;hp=e90d49c07ffd992d6d065bec273d4934f1a538ba;hb=f378dcf785967374309523a02ea06d6d1a3ff148;hpb=77b1a76e47948422c7797de2ac27f3a121aa8806 diff --git a/NEWS b/NEWS index e90d49c..35422f8 100644 --- a/NEWS +++ b/NEWS @@ -1,198 +1,2686 @@ -OpenAFS News -- history of user-visible changes. July 22, 2002. + User-Visible OpenAFS Changes -* Changes incorporated in OpenAFS 1.3 +OpenAFS 1.6.0 (in progress) -** When fakestat is enabled on MacOSX, the Finder can be used to browse - a fully-populated /afs directory. However, this precludes reliable - use of entire volumes as MacOS bundles (i.e. containing a Contents - directory in the root of the volume). + All platforms -** Mountpoint directory information can be faked by the cache manager, - making operations such as stat'ing all cells under /afs much faster. - This is enabled by passing -fakestat to afsd, but might not be stable - on all platforms. + * vos now properly deals with matching sites when servers are + multihomed. -* Changes incorporated in OpenAFS 1.2.5 + * Don't stop Rx keepalives after an ackall is received, avoiding + spurious connection timeouts. (128848) -** A remote denial of service attack in the AIX and IRIX clients has - been fixed. Users of those platforms are strongly encouraged to - upgrade. + * Don't retry Rx calls on channels returning busy errors. (128671) -** Fixed race conditions in fileserver that could result in crash. + * Properly enable Rx connection hard timeouts. -* Changes incorporated in OpenAFS 1.2.4 + * Initialize rx_multi lock before use. -** Server logfiles now more consistant about format in which hosts are - referred to. + * Avoid spurious crashes when initializing in "backup" client. -** vfsck on Solaris will now allow force runs (using -y flag) even if old - inodes exist. + All server platforms -* Changes incorporated in OpenAFS 1.2.3 + * Fix ptserver supergroups support on 64 bit platforms. -** Cell aliases for dynroot can be specified in the CellAlias file in - /usr/vice/etc or /usr/local/etc/openafs, in format "realname alias", - one per line. They can also be managed at runtime with "fs newalias" - and "fs listaliases". + * Demand attach salvaging doesn't use freed volume pointers. -* Changes incorporated in OpenAFS 1.2.2 + * Properly hold host lock during host enumeration in fileserver. -** Solaris 9 and Linux PA-RISC are now supported + * Attempt to recovery more quickly from timed out volume release + transactions. -** fileserver will not erroneously delay legitimate errors for 3 seconds - after 10 errors are returned (e.g. stat() on a directory you can't read) + * Auditing now properly byte order swaps IP addresses when printing. -** Rx MTU calculation now works for Irix, Solaris and Linux + * vos split now has improved error handling. -** If afsd is started with the -dynroot flag, /afs will be locally - generated from the CellServDB. AFSDB cells will be mounted - automatically upon access. + * Many changes to again support Windows fileservers. -** The namei fileserver allows vice "partitions" to be directories instead - of partitions and will attach and display accordingly. Creating the file - "AlwaysAttach" in the /vicepX directory is used as the trigger to attach it. + * During volume removal, data removal speed improved. -** TSM support for butc no longer requires editing a Makefile, simply - specify the --enable-tivoli-tsm configure option. + * Improve CPU utilization during volume attaching by DAFS. -** Linux builds no longer require source changes every time the kernel - inode structure changes; the OpenAFS sources will now configure - itself to the actual inode structure as defined in the kernel - sources. + * In salvager check-only mode, avoid potentially fixing a vnode. -* Changes incorporated in OpenAFS 1.2.1 - -** vfsck on Digital UNIX and Solaris will now refuse to fsck mounted - mounted partitions. - -* Changes incorporated in OpenAFS 1.2.0 - -** AFS now supports --prefix and the other directory options of - configure. By default AFS builds assuming it will be installed in - /usr/local. In order to get traditional AFS directory paths (/usr/afs - and /usr/vice/etc) use the --enable-transarc-paths option to - configure. More details on the new directory layout are found in README. - -* Changes incorporated in OpenAFS 1.1.1a - -** Windows 95/98/ME/NT/2000 - Consistent versioning - Installation, AFS Control Center, Client dialog boxes and properties - pages for executables display a consistent OpenAFS version number. - Installation detects previous installation and prompts the user for upgrade - options. - -** Windows 95/98/ME/NT/2000 - Installation features - During installation the user can select the source of the CellservDB file, - AFS home cell, and drive mappings. During installation a drive path - mapping can include a variable that will be substituted with the current - UserName that is logged in. - -** Windows 2000/NT - Integrated logon - The Integrated Logon feature works now. - -** Windows 95/98/ME - Logon script features - The Windows 95/98/ME client now offers a command-line option for starting up - the AFS client without authenication. It is now possilbe to start the AFS - client first and obtain tokens, and map drives all through Windows scripts. - This helps using Windows 95/98/ME client in Kerberos 5 environment. - -** Windows 2000/NT - LANA numbers - AFS client now scans the LANA numbers to establish the correct NETBIOS - connection. NetBEUI is no longer needed. The user no longer needs to find - the correct LANA number. - -** Windows 2000/NT - OpenAFS naming consistancy - Further progress has been made to remove references to "Transarc AFS" - and replace with "OpenAFS". - - - -* Changes since OpenAFS 1.0 - -** AFS now builds with configure. The README for building has been - updated and includes full details. - -** A client system can now have multiple sysname values for @sys. - They will be searched in order when looking up files in AFS. The - -newsysname argument to fs sysname can be repeated to set multiple - sysnames. - -** A new system group is created for new cells (system:ptsviewers - with id -203). If this group exists, members of this group can - examine and read the entire protection database. They can examine - all users and groups and can get the membership of any group. - -** A new program, pt_util has been added to the distribution. This - program allows users to print the contents of the protection - database or to edit the protection database without running a - ptserver. It can be used to set up a new cell without ever running - in noauth mode. Run pt_util -h for help. - -** The fs setcrypt and fs getcrypt commands have been added. These - commands allow the system administrator to require that the client - encrypt all authenticated traffic between the client workstation - and AFS. The encryption used is weak, but is likely better than - sending unencrypted traffic in most environments. Some functions, - such as looking for a volume may not be encrypted, but data - transfer certainly is. By default data is not encrypted. At this - time no significant experimentation with server performance has - been conducted. - -** By default AFS is compiled with AFS_AFSDB_ENV, enabling the -afsdb - option to be given to afsd on startup. If this option is used, then new - cells will be looked up using AFSDB records stored in DNS if they - are not found in CellServDB. This means that users can create - cross-cell mountpoints in directories they control to access cells - not in root.afs, and that cells in root.afs need not be in the - client's CellServDB. - -** AFS database servers can be marked as read-only clones. Surround - the hostname in square brackets on the bos addhost command and the - database server will never be elected sync site. This is useful - for cells distributed over a wide region. - -** The AFS servers now support the -syslog flag. This flag causes - them to log to syslog rather than to files. This flag is not - supported on NT. For all servers besides the salvager, the flag can - also be specified as -syslog=facility, where facility is an integer - facility code from syslog.h. A -syslogfacility option is provided for - the salvager to accomplish the same goal. - -** If the --enable-fast-restart flag is given when configuring AFS, - then the salvager supports the -dontsalvage flag which causes it to - exit without salvaging any volumes. If this is configured into the - third command of a fs process, then the fileserver will start without - salvaging. It will fail to attach volumes that need salvaging and they - can be salvaged manually. This provides significantly better server - startup performance at the cost of administrative complexity. - -** If the --enable-bitmap-later flag is given when configuring AFS, - then the fileserver creates bitmaps for free vnodes on demand, allowing - faster starts. - -** If bosserver finds a BosConfig.new file at startup, it reads this - file and renames it to BosConfig. This allows bosserver to be - reconfigured at next restart. - -** The bosserver can be placed in a restricted mode in - which AFS superusers are only granted limited access to the server - host. The following functionality is disabled when restricted mode is in - use: - - bos exec - bos getlog (except for files with no '/'s in their name)* - bos create * - bos delete - bos install - bos uninstall - - specific exceptions are made for functionality that "bos salvage" - uses: - - a cron bnode who's name is "salvage-tmp", time is now, and command - begins with "/usr/afs/bin/salvager" may be created. This bnode - deletes itself when complete, so no special "delete" support is needed. - This functionality may be removed in the future if a "Salvage" RPC is + * Fix support for large (greater than 2gb) volume special files. + + * Salvager will not crash if multiple or bad volume link tables are + encountered. + + * Avoid erroneous full dump by remembering which sites were out of + date at the start of the release. + + Microsoft Windows: + + * afs_config will not longer set the Tray Icon State in the registry + if the checkbox is not present in the dialog. (128591) + + * AFS Explorer Shell Extension now works from folder backgrounds. + Overlays for mount points and symlinks are present in the dll, but + are not registered at present by the installers. + + * Do not use RankServerInterval registry value as the value for + PerformanceTuningInterval. + + * When the data version of a mountpoint or symlink changes, the target + string in the cm_scache_t object must be cleared. + + * "fs checkservers" now includes vldb servers in the output and only + lists multi-homed servers once. A multi-homed server that has at + least one up interface is no longer considered to be down. + + * When asynchronously storing dirty data buffers to the file server + ensure that (a) the cm_scache_t object and the cm_buf_t object are + for the same File ID so that locking and signalling work properly; + and (b) if the FID no longer exists on the file server, do not + panic, just discard the buffer. + + * When processing VNOVOL, VMOVED and VOFFLINE errors perform server + comparisons by UUID or address and not simply by cm_server_t + pointer. Otherwise, server failover may not succeed. + + * Do not preserve status information for cm_scache_t objects when the + issuing server is multi-homed. + + * Giving up all callbacks when shutting down or suspending the machine + is now significantly faster due to the use of an rx_multi + implementation. (This functionality is still off by default and + must be activated by a registry value.) + + * Race conditions were possible when updating the state of the + cm_volume_t flags and when moving the volumes within the least + recently used list. + + * Ensure that the lanahelper library does not perform a NCBRESET of + each lan adapter when enumerating the current network bindings. + Correcting this permits OpenAFS to work on Windows 7 when the + network adapter settings change. + + * Fix creation of mount points and symlinks as \\AFS\xxxx + + All UNIX client platforms + + * Servers now marked down when GetCapabilities returns error. + + * In-use vcache count is now properly tracked. + + * Check for /afs existance before starting, unless -nomount is + specified. + + * Avoid a potential panic when using /afs/.:mount syntax. + + * Avoid a panic in memcache mode due to missing CellItems file. + + FreeBSD + + * Fix socket termination on shutdown. + + * Support for 7.2, 7.3, 7.4 and 8.2 included. + + * References to vcaches are no longer leaked during root or reclaim. + + * Remove support for "Giant" lock as we no longer need to use it. + + * Don't sleep with AFS GLOCK. + + * Properly enable 64 bit long long support. + + * Restore support for FreeBSD 7 (128612) + + * Fix locking issues at shutdown. + + Linux + + * Support through kernel 2.6.38. + + * Red Hat init script allows deferring for a new binary restart. + + * Red Hat packaging now properly supports RHEL6. + + * Use rx_Readv in cache bypass to improve performance. + + * Properly handle 0-length replies during cache bypass operations. + + * Properly handle non-contiguous readpage cache bypass operations. + + * Do proper locking when transitioning to or from cache bypass. + + * Avoid extra runs of vcache freeing routine. (128756) + + MacOS + + * Properly handle setpag errors. PAGs are not supported. + + * Check for unloaded kernel extensions when decoding AFS panics. + + * Disable "get tokens at login" in prefs pane if AD authentication + plugin is configured. + + OpenBSD + + * Bug fixes for issues introduced previously in 1.5 series. + + * Support through OpenBSD 4.8. + + Solaris + + * Switch to ioctl() syscall replacement for Solaris 11 since syscall + 65 is not safe. + + * Fix support for Solaris pre-10. + + +OpenAFS 1.5.78 (2010-11-04) + + All platforms + + * Revisions to Rx to fix performance issues. + + * Make fs getfid behave consistently across all platforms. (128372) + + * Properly check IDs handed to pts when creating users or groups so + useful error messages can be provided. (128343) + + * Correct byte order handling of port in afsconf_LookupServer for SRV + records. + + * Force a full dump when releasing to a site which was previously + marked "don't use", in case the previous clone was out of date. + + All server platforms + + * Demand salvage of attached volumes now correctly track attachment + state. + + * Avoid a potential crash due to failure to hold a lock when attaching + a volume fails. + + Microsoft Windows + + * Track SMB connections by SID rather than username. + + * Error write attempts to known-readonly volumes earlier. + + * Validate directory buffers to avoid potential crashes. + + * Handle VIO errors from bulkstatus. + + * Make PMTU discovery configurable and register error handlers for it. + + All UNIX client platforms + + * Use larger I/O sizes in memcache to improve performance. + + * Avoid potential alignment issues doing I/O for pioctl calls. + + FreeBSD + + * Avoid panicing if the listener process is not findable. + + * Avoid deadlock issues while performing lookups. + + Linux + + * Handle stale file handle errors for some cache partition types. + + * Avoid blocking with xvcache lock when attempting to free in-use + vcaches. + + * Build fixes for older kernels. + + * Properly configure LWP to use ucontext() on platforms where it + should. + + * Eliminate spurious errors from AFS system call returns. (126230) + + MacOS + + * Attempt to honor configured Kerberos defaults in Preferences Pane. + + +OpenAFS 1.5.77 (2010-09-08) + + All platforms + + * Rx path MTU detection will terminate detection in cases where the + minimum required packet size cannot be transferred. + + * vos dryrun mode now shows effects for syncvldb single volume case. + + * vos dryrun mode now shows "status after" for syncvldb and syncserv. + + All server platforms + + * RXAFS_GetStatistics64 now returns statistics properly. + + Microsoft Windows + + * Attempt to properly identify the local system SMB connection for + token tracking. + + * Remap timeout and offline errors to proper NT RPC errors. + + * Properly fail over to other replicas on bulkstat IO errors. + + * Properly error delete-mode createfile if a file is set readonly. + + * Validate directory entry buffers to avoid crashing the service. + + * Log file modes properly. + + * Log cell name when logging server information. + + All UNIX client platforms + + * cacheout program for discarding callbacks is now built. + + * bulkstatus kernel locking is corrected to avoid a potential panic. + + Dragonfly BSD + + * userspace support update + + FreeBSD + + * Updated vnode locking for children returned via lookup(). + + * Avoid file open undercount with needed calls to + FakeOpen/FakeClose(). + + * Use vnode_pager_setsize to properly track file size during kernel + IO. + + * Update system call installation. + + * Fix shutdown of Rx kernel listener to avoid potential dereference + after it's gone. + + * Avoid closing vnodes during vnode recycle. + + * Fix bogus call to FlushVS for vnode reclaims. + + Linux + + * Packaging updated for current configure options and built files. + + * Cache bypass now holds reference on pages during readpage. + + * s390x setgroups32 patching update. + + MacOS + + * DNS resolver is reinitialized on IP address change. (126440) + + +OpenAFS 1.5.76 (2010-08-16) + + All platforms + + * Updates to build-time configuration. + + * Fix XDR support in Rx to match header definition. + + * vos status now shows transaction creation, not action creation. + + * Rx avoids reporting loopback adapters when listing interfaces. + + All server platforms + + * Demand-Attach Fileserver always built and installed (dafileserver, + davolserver, dasalvager). + + * Return VNOVOL from fileserver when a volume is deleted. + + * Ignore duplicate tags during volume restore operation. + + * Update inode array after salvage repairs volume. + + * Zero a corrupted header in memory during salvage to avoid further + corruption. + + * Fix NAMEI backend to allow low-numbered volumes to work properly. + + * ptserver does not include cell name as part of length check for + names. + + * Updated error messages for unblessed volumes. + + * vlserver avoids buffer overflow with regex pattern + + * Attach-time failures now note failures as the rest of the fileserver + would. + + * Server argument logging will no longer overflow stack. + + * Provide fast-restart-like unsafe-nosalvage option for DAFS. + + * Deal with host hash collisions in the fileserver. + + Microsoft Windows + + * Avoid crashing when interpreting a drive letter as potentially + matching a cell name. + + * Properly handle volume package errors. + + * Allow page recycling from known-readonly content without ensuring + they are not dirty. + + * 32 bit tools installer should not override client configuration. + + * Ensure root scache item has a valid callback when use is attempted. + + * Freelance directory changes now properly invalidate and replace the + old root object. + + All UNIX client platforms + + * Support disconnected reconnecting with specified UID for PAGless + platforms. + + * Proper disconnected vnode reference tracking. + + * Update server site blacklisting to not return success if nothing was + blacklisted. + + * Avoid a panic during vcache contention due to CVInit vcache + racing. (127645) + + FreeBSD + + * Update for network stack in 8.1/9.0. + + HP-UX + + * Bug fixes. + + Linux + + * 2.6.36 support + + * Disable PMTU error packet handling. + + * flock() fixes. + + * Debian packaging updated. + + * freezer interface updates. + + MacOS + + * Hold references to disconnected mode written vnodes properly. + + Solaris + + * Handle NFS translator module references for amd64. + + * INODE fileserver backend support now exists for amd64. + + +OpenAFS 1.5.75 (2010-07-07) + + All platforms + + * Prevent rx_rpc_stats global lock from being a bottleneck. + + * Path MTU discovery is now provided to allow traffic to pass networks + with sub-1500 byte MTUs and poor fragment handling. + + * Further reduce Rx NAT ping transmission when enabled. + + * Update Kerberos 5-based token handling in rxkad from upstream + Heimdal. (127554) + + * Update version numbers emitted during build to reflect what is + actually being built. + + * Add "-human" switch for human-readable units in fs diskfree and + listquota. (124529) + + * vos provides reasons for locked volumes when known. + + * Do not count retransmission and ping acks as non-idle for Rx + connections. + + * Rx: provide service-specific data getter and setter routines. + + * Update build-time Kerberos detection. + + * Updated userspace AFS client. + + * Beginning of a modernized test suite. + + * Additional documentation. + + * Updated documentation, notably the Administrators Guide. + + * Substantial code cleanup. + + All server platforms + + * Update handling of vnode allocation failures. + + * DAFS: allow salvaging volumes not known to the fileserver, to allow + cleanup of data not attached to a current volume. + + * Properly handle volumes slated for destruction. + + * Handle volumes with many files properly. + + * Force core file generation in bosserver by overriding default + resource limits when possible. + + * Update vlclient and vldb_check. + + * Avoid potentially corrupting a volume on creation if files are left + from previous failed cleanup. + + * Note volume changed during salvage as needed. + + * DAFS: do not assume invalid addresses are in fileserver address hash + table. + + * Avoid tying up fileserver threads with volumes that are being taken + offline. + + * Do not set inUse on volumes for non-DAFS other than in fileserver. + + * Break origin's callback on target of rename operation. + + * Avoid unneeded parent directory link updates during some rename + operations. + + * Do not open /dev/console for writing in the fileserver. + + * DAFS: avoid spurious restarts when binary restarts are configured. + + * Avoid spurious and unneeded calls to sync(), which can slow down the + fileserver. + + Microsoft Windows + + * Revised SMB QuerySecurityInfo to address issues caused by MS10-020 + (http://support.microsoft.com/kb/980232) + + * Prevent use of the AFSCache file contents if mapped to a new + address. + + * Make fs newcell include behavior compatible with the non-Windows + version. + + * Provide a registry option (FreelanceImportCellServDB) to pre-create + mount points in the AFS root for all cells in CellServDB. + + * Fix a memory leak in the cm_FreeServerList() routine. + + * Reduce privilege when reading registry CellServDB. + + * Add support for RPC Pipe Service NetWkstaGetInfo levels needed for + Windows 7. + + * Prevent overflow when computing quota percentage in Explorer Shell. + (126846) + + * Generate meaningful errors for ACL operations on freelance AFS root. + + * Fix error handling on InlineBulkStatus RPCs. + + * Show configuration pages for all types of MSI installations. + + * Improve freemount AFS root directory handling and operations. + + * Properly validate GetVolumeStatus pioctl responses. + + * Commit file length changes and dirty buffers when flushing a file. + + All UNIX client platforms + + * Update version of files for disk cache. + + * Do not call afs_FlushVCBs with xvcache lock held, to improve + parallelization. + + * Add mariner log messages for creating and removing files. + + * Don't hold xvcache lock while creating symlinks, to improve + parallelization. + + * Provide -dynroot-sparse mode to not show all cells in CellServDB in + dynroot mode. + + * Avoid a potential crash in aklog in linked cell handling. + + * Log MTU-caused packet retransmission. + + * Prevent crashes caused be fs checkservers while cache is being set + up. + + * fs getserverprefs now has a buffer large enough for the default + CellServDB. + + * Report server address when logging warnings. + + * Avoid panic in GetCapabilities when cell is not known. + + * Lock process name and id for advisory lock warnings when possible. + + * Handle need for allocating additional Rx packets. + + * Properly handle errors from InlineBulkStatus operations. + + * Fix errors returned from fcntl() on readonly files locked for write. + + * Flush pending changes to the server on LOCK_EX unlock. + + * Reflect length changes as a result of callbacks even when file is + open for write. + + * Avoid hanging due to error exit when attempting to store a large + file to a non-largefile fileserver. + + * Recover from afs_GetVolSlot errors. + + FreeBSD + + * Bugfixes for kernel VFS and network routines. + + IRIX + + * Provide makesname(). + + Linux + + * Avoid syscall probes when keyrings are present, by default. (125215) + + * Remove "Big Kernel Lock" from VFS operations. + + * Use filehandles for all Linux 2.6 versions to avoid need for matched + afsd. (127530) + + * Updated RPM packaging. + + * Fix dkms configuration provided with RPMs. + + * Hold reference on pages during background I/O for cache bypass. + + * Fix cache bypass handling of non-largefile fileservers. + + * Protect truncate_inode_pages mappings with mutex or semaphore as + needed. + + * Fix pagevec use in cache bypass. (127505) + + * Updates for 2.6.35 + + MacOS + + * Improve launchd configuration. + + * Avoid hanging on recursive cache file lock acquisition when user + notification is enabled. + + * Fix and re-enable bulkstat mode. + + OpenBSD + + * Build updates. + + Solaris + + * Precluding unmount while AFS is busy. + + * Avoid deadlocking when releasing the VFS object. + + * Stop network interface poller in kernel on AFS shutdown. + + * Avoid issues with lookups on empty directory names. (127356) + + +OpenAFS 1.5.74 (2010-04-22) + + All platforms + + * Add "vos setaddrs" command. + + * Rx library lock contention avoidance between rx_NewCall and + rx_EndCall. + + * Rx library races due to inconsistent use of rx_connection + conn_data_lock to protect the flags field. + + * Rx library inconsistent use of RX_CALL_TQ_WAIT which could result in + deadlocks. + + * Rx library must signal transmit queue waiters when flushing. + + * afsmonitor shows busy counts now. + + * afsmonitor displays xstat callback statistics. + + * Provide expandgroups for pts mem on a supergroups server. + + * Provide supergroup option to liste nested groups during pts mem. + + All server platforms + + * Avoid volume lock contention during DAFS startup. + + Microsoft Windows + + * Avoid a race when updating cell vldb server lists that can result in + a crash. + + * Avoid a deadlock when managing CM_SCACHESYNC_STOREDATA state + operations for directory objects. + + * Add new Windows Application Event log messages for VBUSY, + VRESTARTING, ALL_BUSY, ALL_OFFLINE, and ALL_DOWN. + + * Reduce lock contention by waiting for cm_buf_t I/O operations. + + * Split the cm_buf_t flags field to separate the flags that are + protected by the cm_buf_t mutex from those protected by the + buf_globalLock. + + * In cm_UpdateVolumeLocation, avoid searching for a ".readonly" volume + on a numeric volume name. + + * File buffer allocations whose offsets are beyond server EOF should + be locally allocated and zero filled. The file server should not be + issued a FetchData rpc which is guaranteed to fail. + + * Enable integrated logon to work with Windows 7/2008 when user logons + are performed with a non-Domain Kerberos principal. + + * Add Protection Error messages to aklog output. + + All UNIX client platforms + + * Provide a FUSE-interfacing userspace afs client. + + * Updates to libuafs userspace cache manager. + + * Probe servers using GetCapabilities instead of GetTime, thus + requiring fewer RPCs. + + * Fix DNS SRV record handling for cell lookup. + + FreeBSD + + * Fix sleep/wakeup routines. + + * Update for 8.0 release. + + Linux + + * Handle high memory addresses correctly. + + MacOS + + * Make 32 bit AFS syscalls work again. + + * Work around finder "Duplicate" failure (caused by setting modes on + symlinks). + + * Disable bulkstat again (will be re-enabled at or before .75). + + * Provide symlink type hints during readdir. + + +OpenAFS 1.5.73 (2010-03-24) + + All platforms + + * NAT keepalive support at Rx level. + + * Corrected SRV record support for cell name canonicalization. + + All server platforms + + * Fix volume callback notification to not notify unaffected clients. + (126497) + + * Allow root directory recreation by salvager. (94658) + + * Numerous DAFS fixes. + + * Improvements to callback table overflow handling. (126451) + + * bosserver now shuts down cleanly on SIGTERM. + + Microsoft Windows + + * Prevent the Explorer Shell extension from crashing if symlink + creation failed. (126406) + + * A Rx level NAT ping has been implemented. A registry value enables. + + * Adds krb5 error message translation to aklog, afscreds, + afslogon.dll, the network identity manager afs provider and + translate_et. + + * Default mode bit settings for file and directory creation are now + provided, and can be configured. + + * An SMB request trace facility is provided and can be enabled for + debugging. + + All UNIX client platforms + + * Rx idle deadtime does not stop file writes. + + * Disconnected AFS no longer has a race condition during remove ops. + + * Fakestat avoids a condition which could cause it to block on network + activity. + + * Several fixes to handle interruptions in vos operations. (33360, + 125535) + + * Allow more sysnames in a sysname list. + + * Attempt to enforce timeouts on AFSDB lookups. + + AIX + + * Clean up properly on mount failure. + + * Add entry to /etc/vfs to allow umount to work. + + Linux + + * Several issues to deal with older kernels. + + * Avoid leaking the global lock in the /proc cellservdb code. + + * Keyring destruction now cleans up all tokens. + + * Keyring quotas are not enforced against root. + + MacOS + + * Some FSEvents hinting for authentication events now done. (23781) + + * Update uninstaller. (125634) + + * Rewrite afssettings and fstab code to avoid licensing issue with + APSL. + + * Growl client for user monitoring of AFS events included. + + * Properly support insert-only dropboxes. + + * Add bulkstat support. + + * Include support for moving in Finder across mount points. + + * Preferences Pane includes support for Kerberos 5 ticket renewal. + + +OpenAFS 1.5.72 (2010-02-15) + + All platforms + + * Provide internationalization support in com_err. + + * Fix array length checking to avoid crashes when checking for a + volume type based on name in vos. + + All server platforms + + * Provide backward compatible "-f" flag to salvager for force mode. + + Microsoft Windows + + * Restore use of DNS AFSDB and SRV records by kaserver clients. + + All UNIX client platforms + + * Fix client cache file truncation to not lose chunks when truncating + a large file. + + * Ensure a cache writeback hook is installed in the client (bug from + 1.5.71). + + * Avoid spurious free memory warnings during clean shutdown. + + * Fakestat mode avoids AFSDB lookups. + + * "fs storebehind" now correctly reports errors on readonly volumes. + + * Additional documentation for "fs getcacheparms" + + * Forced new uuid generation with "fs uuid -generate" now works + enforced permission correctly. + + MacOS + + * Add optimized Rx event handler in kernel. + + * Installer now allows installing an older version. + + * Panic decoder can now deal with MacOS 10.5 again. + + * MacOS ._ files are now correctly not looked up as cellnames. + + Linux + + * To deal with SELinux file labeling, try cache accesses with current + credentials in event of failure. + + * Rx XDR encoding bug on i386 Linux is fixed (bug introduced in + 1.5.71). + + IRIX + + * Code compilation fixes. + + OpenBSD + + * Update for OpenBSD 4.6. + + +OpenAFS 1.5.69 (2010-01-19) + + All platforms + + * Configuration of BOSserver no longer defaults to weekly restarts + enabled. + + * Provide BOS restricted mode by default. + + * Add support for "vos endtrans" command. + + * Default to providing full output from vos listvol. + + * Correct additional-address tracking in the fileserver. + + * Improve Rx performance by not unnecessarily dropping and reacquiring + call locks in read and write processes. + + * Avoid crashes when monitoring volserver transactions across + potential transaction garbage collection. + + * Numerous warning fixes. + + All server platforms + + * Avoid saving fileserver state in demand attach fileserver when + panicing. + + * Demand attach fileserver allows other callers to schedule salvages. + + * Demand attach "bos salvage" now works correctly with restricted + mode. + + Microsoft Windows: + + * Numerous changes to the client-internal btree directory handling to + prevent errors. + + * fs examine reports owner and group ids as signed values (PTS groups + are negative). + + * Preclude corruption due to races writing to smb buffers. + + * Allow MTU settings in registry to be used. + + * Apply MTU to both send and receive sizes. + + All UNIX client platforms + + * Avoid double-freeing Rx call structure if reading a response from + the file server results in a short read. + + * Handle negative lengths in FetchStatus results correctly. + + * Properly clean up allocated memory at shutdown. + + * Default to AFSDB compiled into the cache manager. + + * Avoid inadvertant disclosure of stat() information to clients not so + entitled. + + * Correct a bug with AFSDB lookups introduced with SRV record support. + + MacOS + + * Install kernel panic processing tool in /Library/OpenAFS/Tools. + + * Include debugging symbols for kernel extension in additional package. + + * Support "Application Firewall" users. + + * Avoid ._cellname AFSDB lookups. + + * Compile preferences pane as a universal binary. + + Linux + + * Use splice to speed up storing files. + + * When using memcache, avoid duplicating work in readpages. + + * Use dget_parent to safely find an inode's parent. + + * Disable access time updates in our superblock. + + * Avoid crashing doing writeback if no credentials were stashed at + file open. + + * Simplify keyring support. + + * Properly clean up vcache in event of failed mount. + + FreeBSD + + * Update for current FreeBSD 8. + + Solaris + + * Abstractly manipulate groups as now required. + + * Abstractly access time instead of using lbolt directly. + + +OpenAFS 1.5.68 (2009-12-08) + + All platforms + + * aklog now attempts to convert non-AFS errors to human-readable + strings. + + * Make stack not executable when compiling assembler source with GCC. + + * Numerous source warning cleanups and code reorganization. + + All server platforms + + * Compute midnight for volume statistics calculation from local time. + + * Salvager now orphans duplicate special inodes when running to allow + recovery in event of a problem, instead of simply ignoring the + issue. + + * Support to ensure a server panic attempt leaves a core and thus + restarts in a timely manner, rather than potentially hanging. Use + panic to attempt cleanup before leaving a core when possible. + + * Volume sync data reported during bulkstatus is now set correctly. + + * Provide better tuning for fileserver file descriptor caching. + + * Allow more than 128 threads in fileserver by modifying host + structure in-use tracking. + + * Avoid crashes getting volume server status during transaction + cleanup. + + * Improved logging of offline volume conditions. + + * Correct volume statistics when cloning a volume. + + * Avoid referencing host structures in the fileserver which are marked + for deletion. + + * Demand attach fileserver corrections to avoid coring during an + aborted startup. + + * host array bounds checking corrections to avoid buffer overflow. + + * Handle special inodes correctly when promoting an inode fileserver + readonly volume to read-write. + + Microsoft Windows + + * Set the DOS Readonly attribute on a file/directory whenever the unix + mode combined with the mask 0200 is true. Previously there was a + discrepency between the mask used for testing for readonly behavior + and that used for setting the attribute. + + * Disable AFSVolSync based .readonly "whole-volume callback" support + because the all file servers prior to 1.5.67 (and perhaps 1.4.12) do + not properly assign a value to the AFSVolSync structure in bulk + status RPC responses. + + * Improve the error output from aklog to output the value from krb5 + error_message() if the afs_com_err output indicates an unknown + value. + + * Convert VBUSY and VRESTARTING to CM_ERROR_ALLBUSY and do not permit + them to be exposed to the smb redirector. + + * Convert STATUS_TIMEOUT responses to STATUS_IO_TIMEOUT to avoid + confusion within the smb redirector. + + * Fix the byte order assigned to port numbers associated with AFSDB + record lookups. They must be network byte order not host byte + order. + + * Add dynamic server ranking based on RPC round trip time + measurements. + + All UNIX client platforms + + * Additional shutdown-time memory leaks removed. + + * Improved logging of resource contention. + + * Provide dumping for Rx debug packet tracking support in source. + + * Update afscp test client to build, and provide an unlock client. + + * Client buffers for directory parsing can now be allocated beyond the + fixed set formerly provided. + + * Work around race condition when manipulating read-only volume + callbacks. + + * Bugfixes to get PAG value pioctl. + + * Bugfixes to SRV record support. + + Linux + + * Path MTU tracking code cleanup. + + * Avoid an oops due to racing with vcache recycling thread. + + * Changes to keyring PAG handling: for sufficiently new kernels, use + only keyring-based PAGs, and disable group PAGs entirely. + + * Updates to the kernel page cache interface: writing pages will now + not spuriously leak page locks, and will avoid requiring duplicate + work. + + * Credential references are now tracked using native atomic counters. + + * Kernel mutex/semaphore lock ordering fix to avoid deadlocks. + + * Manipulate disk cache with credentials used to initialize it, to + avoid security issues. + + MacOS + + * Fix fstrace message catalog location. + + * Fix kernel fstrace logging. + + +OpenAFS 1.5.66 (2009-10-25) + + All platforms + + * Avoid calling exit() in library code. + + * Add rx window size and peer timeout tuning APIs. + + * Correct rx peer timeout handling to disallow 0ms timeouts. + + * Correct calculation of rx RTT by disregarding retransmitted packets. + + * vos manpages updated to reflect changes in recent versions. + + * GNU-style long options (e.g. --cell) are now supported in all + commands. + + * fs listacl can now print a command to recreate the current ACL. + + All server platforms + + * Fix a race on transaction objects in the volserver which can cause a + crash. + + * Avoid destroying and setting to NULL the callback connection when it + could still be being used. + + * Correct unlink handling in salvager. + + * Improve error messages due to I/O errors in the volserver. + + * Correct an issue which caused converted RO to RW volumes on namei + fileservers to not come online immediately. + + Microsoft Windows + + * Official support for Windows 7 and Server 2008 R2. + + * Prevent a file server bug (FetchData returning an invalid length + instead of zero) from causing an "unexpected network error" when + writing to files. + + * Promote DNS SRV records as superior to DNS AFSDB records. Support + arbitrary port numbers for vldb servers. + + * Add AFSVolSync based .readonly "whole-volume callback" support. + With this functionality, multiple objects from a .readonly volume + can have their status validated by issuing a single + RXAFS_FetchStatus RPC. + + * Remove drive mapping functionality and service start/stop from + afscreds.exe. + + * Remove drive mapping functionality from afs_config.exe. + + * Use {HKLM,HKCU}\SOFTWARE\OpenAFS\Client DWORD "ShowMountTab" to + restore access to drive mapping functionality in afscreds.exe and + afs_config.exe. + + * Adjust SMB error return codes to avoid returning STATUS_TIMEOUT + which results in the SMB redirector disconnecting. + + * Network Identity Manager OpenAFS Provider now provides its own "AFS + lock" notification icon to report the status of "have tokens, have + no tokens, service not started, service started but inaccessible". + Hovering over the icon lists the cells for which tokens exist (if + any) and the OpenAFS version number. Double-clicking executes the + Network Identity Manager default action. + + * Prevent pioctl calls from retrying indefinitely when a sharing + violation error occurs. + + All UNIX client platforms + + * Correct a condition which could discard the error from initializing + a fetch request. + + * Avoid using invalid references to afs_Conn connection structures, + and thus potentially producing invalid data when a retry is needed. + + * SRV records are now supported for discovering AFS servers. + + Linux + + * Correct writepage behavior. + + * Fix error code handling in the writepage code. + + * Avoid leaking page locks, which could potentially hang a machine. + + MacOS X + + * Preferences Pane improvements. + + HP-UX + + * Avoiding attempting to handle critical signals in servers, so that + core file handling works correctly. + + +OpenAFS 1.5.65 (2009-10-06) + + All platforms + + * Code compilation warning fixes, to enable better finding and + tracking bugs. + + * Provide configure-time switch to enable code warning compilation. + + All server platforms + + * Demand-attach fileserver now makes volume LRU list operations + exclusive operations to avoid races during adding to the list. + + * Fileservers now avoid potential "negative length" fetches. + + * A leak in host tracking objects in the fileserver has been fixed. + + * Salvager now unlinks all files by full path, to deal with the change + to not chdir for core file tracking. + + * Salvager avoids asserting if the volume header is unreadable. + + * Demand-attach fileserver puts back volume references from fssync + handlers when done. + + Microsoft Windows + + * Improved service response to suspend and shutdown event + notifications. + + * Avoid a bug in the file server that can result in an invalid length + being returned as part of a fetch data response if the client + attempts to read beyond the length of the file. + + * Do not publish a default stream object for directories and mount + point objects. This was impacting the ability of some Windows XP + systems to save roaming profiles. + + All UNIX client platforms + + * A bug which could cause erroneous handling of lengths on data reads + has been fixed. + + * A bug where erroneous length returns from the fileserver could + result in a false error has been fixed. + + Linux + + * Background page copies are now supported for enhanced disk cache + read performance. + + * Blocking readahead is supported in readpages() to reduce overhead. + + * Use readpage() instead of read() to access cache data to avail disk + cache users of the kernel backing cache for improved performance. + + * Minimize credential handling for improved performance. + + MacOS X + + * Preferences Pane cleanup. + + Solaris + + * Provide a fs_pathconf method with sensible defaults. + + * Provide a _PC_FILESIZEBITS method to fix some NFS translator + consumers. + + +OpenAFS 1.5.64 (2009-09-22) + + All server platforms + + * The demand attach fileserver now puts back volume references gotten + via the fssync interface. + + * The demand attach fileserver had a structure reference error, which + has been correected. + + Microsoft Windows + + * Restores Windows 2000 compatibility. + + * Fixes a data consistency error between the output of NetWkstaGetInfo + and NetServerGetInfo RPCs, specify the Lan workstation group name + "AFS", and report server name as "AFS" instead of "\\AFS" when the + caller asks for "\\AFS". + + * Enables executables to be run from \\AFS on Windows 7. Returns + "Name not found" instead of "File not found" when a directory or + file name cannot be found. This avoids loader errors when system + dlls cannot be located in the executable directory. + + * Prevents cache manager from marking the file server "down" when the + data returned in response to either RXAFS_FetchData64 or + RXAFS_StoreData64 is invalid. + + * Adds pioctl data validation to the AFS Explorer Shell extension. + + All UNIX client platforms + + * A bug which could cause a kernel panic in 1.5.63 has been corrected. + This would manifest as a GetDCache panic or oops. + + Linux + + * aklog -setpag works again with recent kernels when keyring is in + use. + + MacOS + + * When Fast User Switch is in use, AFS login is now handled correctly + by the integration tool included with the preferences pane. + + * Several packaging bugs have been corrected. + + +OpenAFS 1.5.63 (2009-09-11) + + All platforms + + * The restorevol command is now documented and installed as a user + command. + + * The uss command now properly translates vldb entries to its expected + format when handling them in all cases. + + * Documentation now refers to Kerberos instead of kaserver. + + All server platforms + + * bosserver now handles BosConfig.new when restarting, allowing + configuration to be replaced at restart time rather than with bos + delete and bos create. Documentation is updated to reflect this. + + * The demand attach fileservice not longer potentially hangs trying to + terminate demand-salvages which have already exited. + + * The demand attach fileservice has been modified to avoid spurious + 'SYNC_putRes: write failed' warnings when some protocol messages + cannot be acknowledged due to the sender terminating the connection. + + * In the event of failure to contact the vlserver or ptserver, the + fileserver will not exit and trigger a forced salvage. It will + continue to try in the background to contact the needed services. + + * The salvager can now repair certain cases of a damamged vnode index. + + * The accessDate metadata for a volume is now updated correctly. + + Microsoft Windows + + * CRITICAL: Some applications for example those based on Cygwin were + unable to access data stored in the AFS name space. Explorer Shell + also experienced inconsistent behavior. This is fixed. + + * CRITICAL: Multiple AFS pioctl requests issued nearly simultaneously + by applications could result in pioctl responses being received by + the wrong requester. This in turn could result in application + crashes. symlink.exe, fs.exe, afslogon.dll, afscreds.exe, and the + netidmgr afscred.dll plugin were all affected. + + * Some XP machines running 1.5.62 had trouble saving roaming profile + data. This is fixed. + + * Integrated Logon (afslogon.dll) did not function with domain + specific configurations. + + * Ensure that access denied and over quota errors experienced while + storing data to the file server do not result in on-going retry + attempts. + + All UNIX client platforms + + * Except on Solaris and AIX, the compiler may now be overriden at + configure time by setting the CC environment variable. + + * afsd now properly deals with large cache partitions. + + FreeBSD + + * Build shared libafsauthent and libafsrpc. + + Linux + + * Kernel module DKMS support now installs an unstripped module to + allow debugging information to be collected. + + MacOS + + * Preferences pane properly updates token information. + + MacOS 10.6 + + * klog will now properly handle passwords of 8 or fewer characters + with an AFS string to key on hosts able to run 64 bit binaries. + + * A panic at AFS shutdown due to "NO PCB" on a udp_lock has been + addressed. + + * The panic decoder script included in the source now properly handles + 32 and 64 bit panics. + + NetBSD + + * Avoid defining AFS_KERBEROS_ENV globally as it creates a circular + dependency. + + * Build shared libafsauthent and libafsrpc. + + OpenBSD + + * Build shared libafsauthent and libafsrpc. + + +OpenAFS 1.5.62 (2009-08-28) + + All platforms + + * Numerous invisible changes to improve code maintainability, + portability and enhanceability. + + Microsoft Windows + + * CRITICAL: Fixes two errors that can result in data loss when storing + data to the file server. + 1. Failure to Store Portions of Unaligned Writes + 2. Failure to Store Data to File Servers Lacking Large File Support + Read the announcement for more details: + http://www.openafs.org/pipermail/openafs-announce/2009/000305.html + + * CRITICAL: The cache manager daemon thread could terminate when the + machine enters suspend mode. This daemon thread performs the + background check of down servers, offline volumes, callback + expirations, etc. + + * CRITICAL: Integrated Logon (afslogon.dll) was terminating + unexpectedly. Error checking has been improved and NULL pointer + dereferences after Lsa API calls fail have been eliminated. + + * For the first time, the OpenAFS SMB Server supports the DCE RPC + services SRVSVC and WKSSVC. Browsing \\AFS with the Explorer Shell + or NET VIEW will now be faster and provide additional functionality. + No longer will cell names longer than 12 characters be truncated. + + * Improvements to DFS Referral request processing have been + implemented. + + * Unnecessary DNS lookups of share names are avoided improving + performance. + + All UNIX client platforms + + * Non-Kerberos PAM modules work correctly again. + + MacOS X + + * MacOS 10.6 (Snowleopard) is now supported, both 32 and 64 bit mode. + + * Updates to the AFSCommander preferences pane. + + * Installer now permits cell names with dashes. + + +OpenAFS 1.5.61 (2009-08-06) + + All platforms + + * Correct another race condition in the Rx library that could result + in an unexpected panic while freeing the Rx call iovq. + + * rx packet resend and data packets sent counts were incorrect. + + * fs setquota, fs setcachesize, vos setfields, and vos create now + accept human readable orders of magnitude. (K, M, G) + + * fs listquota fixed to permit large quota sizes to be displayed. + + * Correct documentation of bosserver permissions requirements. + + * Modify vlserver to avoid potentially corrupting the database through + volume id reuse. + + * Generalized support for fast Rx timeout due to network + down/unreachable. + + All server platforms + + * Allow audit logs to be sent via sys5 IPC message queues instead of + logged directly. + + Microsoft Windows + + * If a file server becomes inaccessible while the cache manager has + dirty buffers to write, the afsd_service buf_IncrSync thread can + attempt to use 100% of the cpu. + + * Fix "fs newcell" which was broken in 1.5.60. + + * Do not attempt to synchronize dirty buffers if the associated volume + is known to be unavailable. + + * Modify behavior of a Freelance mountpoint target that does not + specify a cell. Instead of assuming the target volume is in the + Freelance.Local cell, use the workstation "Cell" specified in the + registry. A mountpoint target of "#root.cell." will now mean the + root.cell volume in the workstation cell for the current session. + If the workstation cell changes from "athena.mit.edu" to + "andrew.cmu.edu", the referenced volume will also change without + requiring that the mount point targets be altered. + + * Add cm_FindServerByUuid(). Re-implement RXAFS_InitCallBackState3() + to permit the server Uuid to be used to lookup the server object and + from that determine the cell. This permits callbacks that are + received from alternate addresses to be processed with a known + server object. Previously a request from an unknown server would + clear all callbacks from all cells. + + * Fix a bug that prevented optimal performance when using a non-zero + value for 'daemonCheckVolCBInterval'. As a reminder, when + "daemonCheckVolCBInterval" is set to a non-zero value, all .readonly + volume callbacks are automatically renewed 90 minutes before their + expiration. + + * Fix automatic ranking of vldb servers whose values are obtained from + the CellServDB file. + + * Add failover for RX CALL TIMEOUT errors when the volume is readonly + or the call is to a vldb server. + + * Add registry based cell search functionality to NetIdMgr, + afs_config.exe, and klog.exe. + + * afsconf_GetCellInfo() has been modified to perform gethostbyname() + lookups on the host names in the CellServDB instead of using the + specified IP addresses. This provides aklog, pts, vos, etc. the + same CellServDB behavior that the Windows Cache Manager uses. + + * When updating the stat cache entry callback of a .readonly object + from the volume group object, update the file server reference to + ensure it matches the most update to date callback. + + * Add proper support for processing callbacks from multi-homed file + servers. Instead of comparing servers by cm_server_t pointer, + compare them by UUID when the UUID is known. + + * During a shutdown short circuit the offline volume check daemon + functionality. + + * Return the error code of RXAFS_FetchData / RXAFS_StoreData in + preference to an error code reported by rx_EndCall. + + * Add "PerFileAccessCheck" registry value to permit testing against + experimental file servers that include per-file acl support. This + value is intentionally undocumented. It is not to be used by + production environment deployments. + + * Fix a bug introduced in 1.5.60 that prevents the afs netidmgr + provider from obtaining tokens when referrals are in play. + + * Add "fs chown" and "fs chgrp" commands to permit the owner and group + of objects stored in AFS to be set from Windows. + + * Avoid performing background daemon operations when the machine is + going into suspend mode. + + * Perform offline volume checks in most recently used order. + + * Prevent crash when a data version for a cache object goes backwards. + + * Multi-thread safe library versions are now being generated and used. + mtafsubik.lib, mtafsutil.lib, mtafsvldb.lib, mtafsvol.lib. + + * Microsoft SMB Redirector (mrxsmb.sys) support for + ExtendedSessTimeout values are now available on XP through Windows + 7. Add functionality to autodetect if such support is present on + the machine. If so, configure it if necessary and dynamically + adjust the AFS Rx timeout values accordingly. + + All UNIX client platforms + + * Fix out-of-tree source builds. + + MacOS + + * GUI installer now asks for local cell information. + + * AFS Commander preferences pane is now installed by default. + + Solaris + + * Avoid kernel panics due to null pointer dereferences in the network + interface poller kernel thread. + + +OpenAFS 1.5.60 (2009-05-31) + + All platforms + + * Retry volserver transaction creation on failure. + + * Allow building HTML and PDF documentation from included XML copies + of User Guide, Admin Guide and Quick Start Guide for Unix. + + * Documentation updates and additional documentation. + + * Add -encrypt support to pts client. + + * Convert MR-AFS fs commands to OSD commands. + + All server platforms + + * Updated background sync process in fileserver to avoid a race which + could result in a volume being taken offline. + + Microsoft Windows + + * On April 9th Microsoft released a Hot Fix for Windows Server 2003 + SP2 that corrects a deadlock in the smb redirector and also adds new + functionality that permits the AFS SMB server to be given a longer + timeout than is normally the case. New functionality has been added + to configure these additional LanmanWorkstation\Parameter values. + (This functionality has been backported to XP SP3 and is scheduled + to be released on June 5th.) + + * Fix RT#124787, a race condition between "fs flush