1 User-Visible OpenAFS Changes
7 * Support Linux kernels up to 3.8.
9 * Make the init script cope with the output of ifconfig on recent Fedora.
15 * Fix buffer overflows in fileserver and ptserver.
17 * Abort an rx connection when given an unknown service (Gerrit 7593).
19 * "idle dead" behavior improvements.
21 * Documentation updates.
25 * Fix rare file corruption during background sync (Gerrit 8796).
27 * Fix corrupting clients' metadata cache during certain errors (Gerrit
30 * Avoid saying a volume doesn't exist when accessed as the volume is
31 going offline (Gerrit 7488).
33 * Fix fileservers to properly report >2 TiB partitions.
35 * Fix stale volume info from vos examine on non-DAFS filservers.
37 * Fix possible volume corruption with vos convertROtoRW.
39 * Fix bosserver to preserve all command-line options over restart.
41 * Fix bosserver to properly kill hung processes during shutdown.
43 All UNIX client platforms
45 * Fixes for memcache, especially on Solaris.
47 * Increase the size of the DNS resolver answer buffer to allow sites
48 with a long response list to use SRV and AFSDB records.
50 * Fix a crash when a server appears to run out of addresses (Gerrit
53 * Fix cache corruption when reading from a file another client is
54 simultaneously writing to (Gerrit 7994).
56 * Improve handling of disk cache disk errors.
60 * fix DKMS configuration for DKMS 2.2.
62 * Avoid generating inode number 0 with md5 inodes (Gerrit 7276).
64 * Fix a crash when reading /proc/fs/openafs/unixusers (Gerrit 7914).
66 * Make PAG-less access use the real UID of the calling process
67 instead of the effective UID, when determining what credentials to
70 * Fix possible abuse of fs mkmount.
71 Prior to 1.6.2, users could crash a client by nesting volume mounts.
73 * Fix fileserver memory corruption on RHEL 6
74 Prior to 1.6.2, fileservers on RHEL 6 may crash under heavy load.
76 * Fix client page cache corruption on Linux
77 When multiple clients read and write to a file, the reading client
78 may see first page (4096 bytes) of a file as nulls.
80 * Support Linux kernels up to 3.7.
82 * Support newer glibc versions.
84 * Improve client systemd unit file.
86 * Update Red Hat packaging.
90 * Fix crashes on shutdown.
92 * Prevent unloading the module before shutdown completes.
94 * Security improvement for the OpenAFS preference pane.
98 * Support newer versions of the Sun Studio compiler software.
100 * Support compiling on newer versions of Solaris 11 and Solaris 10.
103 OpenAFS 1.6.0 (2011-08-15)
107 * Substantial Rx updates to correct erroneous behavior.
109 * vos now properly deals with matching sites when servers are
112 * Don't stop Rx keepalives after an ackall is received, avoiding
113 spurious connection timeouts. (128848)
115 * Don't retry Rx calls on channels returning busy errors and improve
116 Rx busy call channel error handling. (128671)
118 * Properly enable Rx connection hard timeouts.
120 * Rx NAT pings are not enabled until peer has answered.
122 * Initialize rx_multi lock before use.
124 * Avoid spurious crashes when initializing in "backup" client.
126 * Revert UUID support in vos.
128 * pt_util fixed to properly create new databases.
130 * MTU discovery now properly shut down on call reset.
132 * Avoid leaking references to hosts during callback break multi-Rx
135 * xstat tools now cope with differing timeval structures between
138 * Numerous fixes to command argument parsing.
140 * Documentation updates.
144 * A file descriptor leak which could result in corrupted files in the
145 fileserver was fixed. An IMMEDIATE upgrade from previous 1.5 release
146 fileservers is recommended.
148 * Fix ptserver supergroups support on 64 bit platforms.
150 * Demand attach salvaging doesn't use freed volume pointers.
152 * Properly hold host lock during host enumeration in fileserver.
154 * Attempt to recovery more quickly from timed out volume release
157 * Auditing now properly byte order swaps IP addresses when printing.
159 * vos split now has improved error handling.
161 * Many changes to again support Windows fileservers.
163 * During volume removal, data removal speed improved.
165 * Improve CPU utilization during volume attaching by DAFS.
167 * In salvager check-only mode, avoid potentially fixing a vnode.
169 * Fix support for large (greater than 2gb) volume special files.
171 * Salvager will not crash if multiple or bad volume link tables are
174 * Avoid erroneous full dump by remembering which sites were out of
175 date at the start of the release.
177 * A deleted volume can now be recreated properly.
179 * Callbacks are again not broken during whole partition salvages.
181 * Positional vectored IO fixed for largefile (>2GB) capable systems.
183 * Fileserver per-client thread usage again properly enforced.
185 * Anonymous dropbox support improved and drawbacks documented.
187 * Demand attach: ensure vnodes are not reallocated while in use due to
188 volume bitmap errors.
190 * Properly support large volume numbers (larger than 2147483647).
192 * Allow salvager to be run manually again when DAFS is being
195 * Avoid leaking references to hosts during callback break multi-Rx
198 * Demand attach: unlink fileserver state file on standalone salvage.
200 * Salvager tries harder to detect linktable issues.
202 * Demand attach: don't attach volumes with special status set.
204 * Avoid crashing on host table exhaustion. Instead, defer clients.
208 * afs_config will not longer set the Tray Icon State in the registry
209 if the checkbox is not present in the dialog. (128591)
211 * AFS Explorer Shell Extension now works from folder backgrounds.
212 Overlays for mount points and symlinks are present in the dll, but
213 are not registered at present by the installers.
215 * Do not use RankServerInterval registry value as the value for
216 PerformanceTuningInterval.
218 * When the data version of a mountpoint or symlink changes, the target
219 string in the cm_scache_t object must be cleared.
221 * "fs checkservers" now includes vldb servers in the output and only
222 lists multi-homed servers once. A multi-homed server that has at
223 least one up interface is no longer considered to be down.
225 * When asynchronously storing dirty data buffers to the file server
226 ensure that (a) the cm_scache_t object and the cm_buf_t object are
227 for the same File ID so that locking and signalling work properly;
228 and (b) if the FID no longer exists on the file server, do not
229 panic, just discard the buffer.
231 * When processing VNOVOL, VMOVED and VOFFLINE errors perform server
232 comparisons by UUID or address and not simply by cm_server_t
233 pointer. Otherwise, server failover may not succeed.
235 * Do not preserve status information for cm_scache_t objects when the
236 issuing server is multi-homed.
238 * Giving up all callbacks when shutting down or suspending the machine
239 is now significantly faster due to the use of an rx_multi
240 implementation. (This functionality is still off by default and
241 must be activated by a registry value.)
243 * Race conditions were possible when updating the state of the
244 cm_volume_t flags and when moving the volumes within the least
247 * Ensure that the lanahelper library does not perform a NCBRESET of
248 each lan adapter when enumerating the current network bindings.
249 Correcting this permits OpenAFS to work on Windows 7 when the
250 network adapter settings change.
252 * Fix creation of mount points and symlinks as \\AFS\xxxx
254 * Icon tray state now conditionally set. (128591)
256 * Properly create new cell mount points in freelance mode.
258 * Avoid recursive offline volume checks.
260 * Fix caching of non-existent volumes. The test to trigger an
261 immediate CM_ERROR_NOSUCHVOLUME in cm_UpdateVolumeLocation() was
264 * Prevent the background daemon from checking the status of
265 non-existent volumes. cm_CheckOfflineVolumes() should skip volume
266 groups with the CM_VOLUMEFLAG_NOEXIST flag set.
268 * The afskfw library should return an error immediately if the
269 krb5_32.dll library cannot be loaded. Affects afslogon.dll and
272 * No longer depend on leashw32.dll in afskfw library.
274 * NPLogonNotify must provide the user password in all calls to
275 KFW_AFS_get_cred(). It cannot count on a credential cache being
276 preserved between calls. Permits tokens to be acquired for all
277 cells listed in the TheseCells registry value for a domain.
279 * Improve the trace logging from NPLogonNotify().
281 * Avoid a race when writing the cm_scache_t mountPointString
282 when acquiring mount point or symlink target data via
283 cm_GetData(). The race could result in bogus target
286 * Permit the use of des-cbc-md5 and des-cbc-md4 enctypes
287 as DES keys in asetkey.exe.
289 * aklog supports dotted Kerberos v5 principal names.
291 * afskfw library always attempts afs/cell@USER-REALM
293 * afskfw library must test return code from krb5_cc_start_seq_get() or
294 will trigger a null pointer exception when using Heimdal.
296 * Lock protected fields must be 32-bit in order to avoid memory
299 * Add support for NTFS symlinks.
301 * Handle file search requests for virtual syscall ioctl file.
303 * Process SyncOps properly to enforce ordered operations.
305 * Avoid recursing during NewServer operations.
307 * Correct lock acquisition order during SMB locking.
309 * Add shutdown message to event log.
311 * Check offline volume status by policy rather than on each daemon
314 * Return error on directory object not found instead of crashing.
316 * Improve error message output.
318 * afslogin.dll can start afsd_service if it's not starting or started.
320 * Optimize away release lock RPCs for deleted files.
322 * Background Daemon will not perform operations on deleted files.
324 * Resort recently used directories to the top of the LRU if the
325 directory is larger than the stat cache.
327 * Resort deleted objects to the bottom of the LRU.
329 * Use interlocked operations for state and queue fields to allow safe
330 bit set and clear on multiprocessor systems.
332 All UNIX client platforms
334 * Servers now marked down when GetCapabilities returns error.
336 * In-use vcache count is now properly tracked.
338 * Check for /afs existance before starting, unless -nomount is
341 * Avoid a potential panic when using /afs/.:mount syntax.
343 * Avoid a panic in memcache mode due to missing CellItems file.
345 * FUSE client support fixed for non-/afs mounts.
347 * Avoid a potential deadlock (which times out) when we need to
348 allocate more callback returns and must flush some already in use.
350 * Deal with libcom_err conflicts with other packages using it
353 * Fall back to afs3-vlserver SRV record values when afs3-ptserver SRV
354 record is not available.
356 * Avoid holding unneeded locks when probing server capabilties.
358 * Do not attempt page flushes for directories.
360 * Rx connection reference counting is enabled.
362 * An Rx connection reference count leak is fixed in bulkstat.
364 * Handle unparsable directory objects.
366 * Handle Kerberos cred cache errors in aklog.
370 * Fix PAG usage to track by PAG identifier, not group list.
374 * Fix socket termination on shutdown.
376 * Support for 7.2, 7.3, 7.4 and 8.2 included.
378 * References to vcaches are no longer leaked during root or reclaim.
380 * Remove support for "Giant" lock as we no longer need to use it.
382 * Don't sleep with AFS GLOCK.
384 * Properly enable 64 bit long long support.
386 * Restore support for FreeBSD 7 (128612)
388 * Fix locking issues at shutdown and avoid panic at shutdown due to
391 * Support for virtual network stacks.
393 * New RC script, updated packaging.
397 * Properly create new vnodes to avoid crashing in the client.
401 * Support through kernel 2.6.39. Treat Linux 3.0 as Linux 2.6 for
404 * Use rx_Readv in cache bypass to improve performance.
406 * Properly handle 0-length replies during cache bypass operations.
408 * Properly handle non-contiguous readpage cache bypass operations.
410 * Do proper locking when transitioning to or from cache bypass.
412 * Avoid extra runs of vcache freeing routine. (128756)
414 * Perform vcache eviction via a fast path before visiting vcaches
415 where sleep is needed.
417 * setpag() errors are now properly reported.
419 * Avoid attempting to free stat cache entries when we are below
420 user-specified number of entries in use.
422 * Properly track user-specified number of stat cache entries to use as
423 a desired usage target.
425 * Don't read pages beyond EOF in the cache. (128452)
427 * Various corrections and improvements to Red Hat packaging, including
428 modifying the init script to allow deferring for a new binary
429 restart and properly supporting RHEL6.
431 * Fix lockup in 2.6.38 due to erroneous kernel feature configure test.
433 * Improve RPM building tools.
435 * Attempt to properly handle SELinux in packaging.
437 * Init script properly returns status as exit code.
439 * RPM packaging fixes (executable libraries, no postinstall message)
441 * Kill i386 from RPM packaging.
445 * MacOS 10.7 support.
447 * Properly handle setpag errors. PAGs are not supported.
449 * Check for unloaded kernel extensions when decoding AFS panics.
451 * Disable "get tokens at login" in prefs pane if AD authentication
452 plugin is configured.
454 * aklog AuthorizationPlugin now provided.
456 * Preferences Pane behavior fixed for 1.6 series (version detection is
457 used to select default behavior).
459 * A potential kernel panic during bulkstat operations is
462 * 64-bit MacOS kernel performance is greatly improved. (128934)
464 * Properly shut down AFS, closing the Rx socket in the upcall handler
465 to avoid attempting to process data after we can no longer do so.
467 * Rework logic for bulk status operations to avoid a potential hang.
469 * Avoid panic when doing FSEvent synthesis.
471 * Fix bug when using non-dynroot.
473 * Update Kerberos support in PreferencesPane.
477 * Updates for platform support.
481 * Bug fixes for issues introduced previously in 1.5 series.
483 * Support through OpenBSD 4.8.
487 * Switch to ioctl() syscall replacement for Solaris 11 since syscall
490 * Fix support for Solaris pre-10.
492 * Corrected Solaris 11 startup script.
494 * vcache mappings freed on shutdown to avoid panic.
496 * Properly report errors for AFS system call callers.
498 * Don't leave dangling function references if kernel extension fails
501 * Try harder to avoid deadlocks on file-larger-than-cache operations.
503 * Avoid panic on shutdown when mount failed.
506 OpenAFS 1.5.78 (2010-11-04)
510 * Revisions to Rx to fix performance issues.
512 * Make fs getfid behave consistently across all platforms. (128372)
514 * Properly check IDs handed to pts when creating users or groups so
515 useful error messages can be provided. (128343)
517 * Correct byte order handling of port in afsconf_LookupServer for SRV
520 * Force a full dump when releasing to a site which was previously
521 marked "don't use", in case the previous clone was out of date.
525 * Demand salvage of attached volumes now correctly track attachment
528 * Avoid a potential crash due to failure to hold a lock when attaching
533 * Track SMB connections by SID rather than username.
535 * Error write attempts to known-readonly volumes earlier.
537 * Validate directory buffers to avoid potential crashes.
539 * Handle VIO errors from bulkstatus.
541 * Make PMTU discovery configurable and register error handlers for it.
543 All UNIX client platforms
545 * Use larger I/O sizes in memcache to improve performance.
547 * Avoid potential alignment issues doing I/O for pioctl calls.
551 * Avoid panicing if the listener process is not findable.
553 * Avoid deadlock issues while performing lookups.
557 * Handle stale file handle errors for some cache partition types.
559 * Avoid blocking with xvcache lock when attempting to free in-use
562 * Build fixes for older kernels.
564 * Properly configure LWP to use ucontext() on platforms where it
567 * Eliminate spurious errors from AFS system call returns. (126230)
571 * Attempt to honor configured Kerberos defaults in Preferences Pane.
574 OpenAFS 1.5.77 (2010-09-08)
578 * Rx path MTU detection will terminate detection in cases where the
579 minimum required packet size cannot be transferred.
581 * vos dryrun mode now shows effects for syncvldb single volume case.
583 * vos dryrun mode now shows "status after" for syncvldb and syncserv.
587 * RXAFS_GetStatistics64 now returns statistics properly.
591 * Attempt to properly identify the local system SMB connection for
594 * Remap timeout and offline errors to proper NT RPC errors.
596 * Properly fail over to other replicas on bulkstat IO errors.
598 * Properly error delete-mode createfile if a file is set readonly.
600 * Validate directory entry buffers to avoid crashing the service.
602 * Log file modes properly.
604 * Log cell name when logging server information.
606 All UNIX client platforms
608 * cacheout program for discarding callbacks is now built.
610 * bulkstatus kernel locking is corrected to avoid a potential panic.
614 * userspace support update
618 * Updated vnode locking for children returned via lookup().
620 * Avoid file open undercount with needed calls to
621 FakeOpen/FakeClose().
623 * Use vnode_pager_setsize to properly track file size during kernel
626 * Update system call installation.
628 * Fix shutdown of Rx kernel listener to avoid potential dereference
631 * Avoid closing vnodes during vnode recycle.
633 * Fix bogus call to FlushVS for vnode reclaims.
637 * Packaging updated for current configure options and built files.
639 * Cache bypass now holds reference on pages during readpage.
641 * s390x setgroups32 patching update.
645 * DNS resolver is reinitialized on IP address change. (126440)
648 OpenAFS 1.5.76 (2010-08-16)
652 * Updates to build-time configuration.
654 * Fix XDR support in Rx to match header definition.
656 * vos status now shows transaction creation, not action creation.
658 * Rx avoids reporting loopback adapters when listing interfaces.
662 * Demand-Attach Fileserver always built and installed (dafileserver,
663 davolserver, dasalvager).
665 * Return VNOVOL from fileserver when a volume is deleted.
667 * Ignore duplicate tags during volume restore operation.
669 * Update inode array after salvage repairs volume.
671 * Zero a corrupted header in memory during salvage to avoid further
674 * Fix NAMEI backend to allow low-numbered volumes to work properly.
676 * ptserver does not include cell name as part of length check for
679 * Updated error messages for unblessed volumes.
681 * vlserver avoids buffer overflow with regex pattern
683 * Attach-time failures now note failures as the rest of the fileserver
686 * Server argument logging will no longer overflow stack.
688 * Provide fast-restart-like unsafe-nosalvage option for DAFS.
690 * Deal with host hash collisions in the fileserver.
694 * Avoid crashing when interpreting a drive letter as potentially
695 matching a cell name.
697 * Properly handle volume package errors.
699 * Allow page recycling from known-readonly content without ensuring
702 * 32 bit tools installer should not override client configuration.
704 * Ensure root scache item has a valid callback when use is attempted.
706 * Freelance directory changes now properly invalidate and replace the
709 All UNIX client platforms
711 * Support disconnected reconnecting with specified UID for PAGless
714 * Proper disconnected vnode reference tracking.
716 * Update server site blacklisting to not return success if nothing was
719 * Avoid a panic during vcache contention due to CVInit vcache
724 * Update for network stack in 8.1/9.0.
734 * Disable PMTU error packet handling.
738 * Debian packaging updated.
740 * freezer interface updates.
744 * Hold references to disconnected mode written vnodes properly.
748 * Handle NFS translator module references for amd64.
750 * INODE fileserver backend support now exists for amd64.
753 OpenAFS 1.5.75 (2010-07-07)
757 * Prevent rx_rpc_stats global lock from being a bottleneck.
759 * Path MTU discovery is now provided to allow traffic to pass networks
760 with sub-1500 byte MTUs and poor fragment handling.
762 * Further reduce Rx NAT ping transmission when enabled.
764 * Update Kerberos 5-based token handling in rxkad from upstream
767 * Update version numbers emitted during build to reflect what is
768 actually being built.
770 * Add "-human" switch for human-readable units in fs diskfree and
773 * vos provides reasons for locked volumes when known.
775 * Do not count retransmission and ping acks as non-idle for Rx
778 * Rx: provide service-specific data getter and setter routines.
780 * Update build-time Kerberos detection.
782 * Updated userspace AFS client.
784 * Beginning of a modernized test suite.
786 * Additional documentation.
788 * Updated documentation, notably the Administrators Guide.
790 * Substantial code cleanup.
794 * Update handling of vnode allocation failures.
796 * DAFS: allow salvaging volumes not known to the fileserver, to allow
797 cleanup of data not attached to a current volume.
799 * Properly handle volumes slated for destruction.
801 * Handle volumes with many files properly.
803 * Force core file generation in bosserver by overriding default
804 resource limits when possible.
806 * Update vlclient and vldb_check.
808 * Avoid potentially corrupting a volume on creation if files are left
809 from previous failed cleanup.
811 * Note volume changed during salvage as needed.
813 * DAFS: do not assume invalid addresses are in fileserver address hash
816 * Avoid tying up fileserver threads with volumes that are being taken
819 * Do not set inUse on volumes for non-DAFS other than in fileserver.
821 * Break origin's callback on target of rename operation.
823 * Avoid unneeded parent directory link updates during some rename
826 * Do not open /dev/console for writing in the fileserver.
828 * DAFS: avoid spurious restarts when binary restarts are configured.
830 * Avoid spurious and unneeded calls to sync(), which can slow down the
835 * Revised SMB QuerySecurityInfo to address issues caused by MS10-020
836 (http://support.microsoft.com/kb/980232)
838 * Prevent use of the AFSCache file contents if mapped to a new
841 * Make fs newcell include behavior compatible with the non-Windows
844 * Provide a registry option (FreelanceImportCellServDB) to pre-create
845 mount points in the AFS root for all cells in CellServDB.
847 * Fix a memory leak in the cm_FreeServerList() routine.
849 * Reduce privilege when reading registry CellServDB.
851 * Add support for RPC Pipe Service NetWkstaGetInfo levels needed for
854 * Prevent overflow when computing quota percentage in Explorer Shell.
857 * Generate meaningful errors for ACL operations on freelance AFS root.
859 * Fix error handling on InlineBulkStatus RPCs.
861 * Show configuration pages for all types of MSI installations.
863 * Improve freemount AFS root directory handling and operations.
865 * Properly validate GetVolumeStatus pioctl responses.
867 * Commit file length changes and dirty buffers when flushing a file.
869 All UNIX client platforms
871 * Update version of files for disk cache.
873 * Do not call afs_FlushVCBs with xvcache lock held, to improve
876 * Add mariner log messages for creating and removing files.
878 * Don't hold xvcache lock while creating symlinks, to improve
881 * Provide -dynroot-sparse mode to not show all cells in CellServDB in
884 * Avoid a potential crash in aklog in linked cell handling.
886 * Log MTU-caused packet retransmission.
888 * Prevent crashes caused be fs checkservers while cache is being set
891 * fs getserverprefs now has a buffer large enough for the default
894 * Report server address when logging warnings.
896 * Avoid panic in GetCapabilities when cell is not known.
898 * Lock process name and id for advisory lock warnings when possible.
900 * Handle need for allocating additional Rx packets.
902 * Properly handle errors from InlineBulkStatus operations.
904 * Fix errors returned from fcntl() on readonly files locked for write.
906 * Flush pending changes to the server on LOCK_EX unlock.
908 * Reflect length changes as a result of callbacks even when file is
911 * Avoid hanging due to error exit when attempting to store a large
912 file to a non-largefile fileserver.
914 * Recover from afs_GetVolSlot errors.
918 * Bugfixes for kernel VFS and network routines.
922 * Provide makesname().
926 * Avoid syscall probes when keyrings are present, by default. (125215)
928 * Remove "Big Kernel Lock" from VFS operations.
930 * Use filehandles for all Linux 2.6 versions to avoid need for matched
933 * Updated RPM packaging.
935 * Fix dkms configuration provided with RPMs.
937 * Hold reference on pages during background I/O for cache bypass.
939 * Fix cache bypass handling of non-largefile fileservers.
941 * Protect truncate_inode_pages mappings with mutex or semaphore as
944 * Fix pagevec use in cache bypass. (127505)
950 * Improve launchd configuration.
952 * Avoid hanging on recursive cache file lock acquisition when user
953 notification is enabled.
955 * Fix and re-enable bulkstat mode.
963 * Precluding unmount while AFS is busy.
965 * Avoid deadlocking when releasing the VFS object.
967 * Stop network interface poller in kernel on AFS shutdown.
969 * Avoid issues with lookups on empty directory names. (127356)
972 OpenAFS 1.5.74 (2010-04-22)
976 * Add "vos setaddrs" command.
978 * Rx library lock contention avoidance between rx_NewCall and
981 * Rx library races due to inconsistent use of rx_connection
982 conn_data_lock to protect the flags field.
984 * Rx library inconsistent use of RX_CALL_TQ_WAIT which could result in
987 * Rx library must signal transmit queue waiters when flushing.
989 * afsmonitor shows busy counts now.
991 * afsmonitor displays xstat callback statistics.
993 * Provide expandgroups for pts mem on a supergroups server.
995 * Provide supergroup option to liste nested groups during pts mem.
999 * Avoid volume lock contention during DAFS startup.
1003 * Avoid a race when updating cell vldb server lists that can result in
1006 * Avoid a deadlock when managing CM_SCACHESYNC_STOREDATA state
1007 operations for directory objects.
1009 * Add new Windows Application Event log messages for VBUSY,
1010 VRESTARTING, ALL_BUSY, ALL_OFFLINE, and ALL_DOWN.
1012 * Reduce lock contention by waiting for cm_buf_t I/O operations.
1014 * Split the cm_buf_t flags field to separate the flags that are
1015 protected by the cm_buf_t mutex from those protected by the
1018 * In cm_UpdateVolumeLocation, avoid searching for a ".readonly" volume
1019 on a numeric volume name.
1021 * File buffer allocations whose offsets are beyond server EOF should
1022 be locally allocated and zero filled. The file server should not be
1023 issued a FetchData rpc which is guaranteed to fail.
1025 * Enable integrated logon to work with Windows 7/2008 when user logons
1026 are performed with a non-Domain Kerberos principal.
1028 * Add Protection Error messages to aklog output.
1030 All UNIX client platforms
1032 * Provide a FUSE-interfacing userspace afs client.
1034 * Updates to libuafs userspace cache manager.
1036 * Probe servers using GetCapabilities instead of GetTime, thus
1037 requiring fewer RPCs.
1039 * Fix DNS SRV record handling for cell lookup.
1043 * Fix sleep/wakeup routines.
1045 * Update for 8.0 release.
1049 * Handle high memory addresses correctly.
1053 * Make 32 bit AFS syscalls work again.
1055 * Work around finder "Duplicate" failure (caused by setting modes on
1058 * Disable bulkstat again (will be re-enabled at or before .75).
1060 * Provide symlink type hints during readdir.
1063 OpenAFS 1.5.73 (2010-03-24)
1067 * NAT keepalive support at Rx level.
1069 * Corrected SRV record support for cell name canonicalization.
1071 All server platforms
1073 * Fix volume callback notification to not notify unaffected clients.
1076 * Allow root directory recreation by salvager. (94658)
1078 * Numerous DAFS fixes.
1080 * Improvements to callback table overflow handling. (126451)
1082 * bosserver now shuts down cleanly on SIGTERM.
1086 * Prevent the Explorer Shell extension from crashing if symlink
1087 creation failed. (126406)
1089 * A Rx level NAT ping has been implemented. A registry value enables.
1091 * Adds krb5 error message translation to aklog, afscreds,
1092 afslogon.dll, the network identity manager afs provider and
1095 * Default mode bit settings for file and directory creation are now
1096 provided, and can be configured.
1098 * An SMB request trace facility is provided and can be enabled for
1101 All UNIX client platforms
1103 * Rx idle deadtime does not stop file writes.
1105 * Disconnected AFS no longer has a race condition during remove ops.
1107 * Fakestat avoids a condition which could cause it to block on network
1110 * Several fixes to handle interruptions in vos operations. (33360,
1113 * Allow more sysnames in a sysname list.
1115 * Attempt to enforce timeouts on AFSDB lookups.
1119 * Clean up properly on mount failure.
1121 * Add entry to /etc/vfs to allow umount to work.
1125 * Several issues to deal with older kernels.
1127 * Avoid leaking the global lock in the /proc cellservdb code.
1129 * Keyring destruction now cleans up all tokens.
1131 * Keyring quotas are not enforced against root.
1135 * Some FSEvents hinting for authentication events now done. (23781)
1137 * Update uninstaller. (125634)
1139 * Rewrite afssettings and fstab code to avoid licensing issue with
1142 * Growl client for user monitoring of AFS events included.
1144 * Properly support insert-only dropboxes.
1146 * Add bulkstat support.
1148 * Include support for moving in Finder across mount points.
1150 * Preferences Pane includes support for Kerberos 5 ticket renewal.
1153 OpenAFS 1.5.72 (2010-02-15)
1157 * Provide internationalization support in com_err.
1159 * Fix array length checking to avoid crashes when checking for a
1160 volume type based on name in vos.
1162 All server platforms
1164 * Provide backward compatible "-f" flag to salvager for force mode.
1168 * Restore use of DNS AFSDB and SRV records by kaserver clients.
1170 All UNIX client platforms
1172 * Fix client cache file truncation to not lose chunks when truncating
1175 * Ensure a cache writeback hook is installed in the client (bug from
1178 * Avoid spurious free memory warnings during clean shutdown.
1180 * Fakestat mode avoids AFSDB lookups.
1182 * "fs storebehind" now correctly reports errors on readonly volumes.
1184 * Additional documentation for "fs getcacheparms"
1186 * Forced new uuid generation with "fs uuid -generate" now works
1187 enforced permission correctly.
1191 * Add optimized Rx event handler in kernel.
1193 * Installer now allows installing an older version.
1195 * Panic decoder can now deal with MacOS 10.5 again.
1197 * MacOS ._ files are now correctly not looked up as cellnames.
1201 * To deal with SELinux file labeling, try cache accesses with current
1202 credentials in event of failure.
1204 * Rx XDR encoding bug on i386 Linux is fixed (bug introduced in
1209 * Code compilation fixes.
1213 * Update for OpenBSD 4.6.
1216 OpenAFS 1.5.69 (2010-01-19)
1220 * Configuration of BOSserver no longer defaults to weekly restarts
1223 * Provide BOS restricted mode by default.
1225 * Add support for "vos endtrans" command.
1227 * Default to providing full output from vos listvol.
1229 * Correct additional-address tracking in the fileserver.
1231 * Improve Rx performance by not unnecessarily dropping and reacquiring
1232 call locks in read and write processes.
1234 * Avoid crashes when monitoring volserver transactions across
1235 potential transaction garbage collection.
1237 * Numerous warning fixes.
1239 All server platforms
1241 * Avoid saving fileserver state in demand attach fileserver when
1244 * Demand attach fileserver allows other callers to schedule salvages.
1246 * Demand attach "bos salvage" now works correctly with restricted
1251 * Numerous changes to the client-internal btree directory handling to
1254 * fs examine reports owner and group ids as signed values (PTS groups
1257 * Preclude corruption due to races writing to smb buffers.
1259 * Allow MTU settings in registry to be used.
1261 * Apply MTU to both send and receive sizes.
1263 All UNIX client platforms
1265 * Avoid double-freeing Rx call structure if reading a response from
1266 the file server results in a short read.
1268 * Handle negative lengths in FetchStatus results correctly.
1270 * Properly clean up allocated memory at shutdown.
1272 * Default to AFSDB compiled into the cache manager.
1274 * Avoid inadvertant disclosure of stat() information to clients not so
1277 * Correct a bug with AFSDB lookups introduced with SRV record support.
1281 * Install kernel panic processing tool in /Library/OpenAFS/Tools.
1283 * Include debugging symbols for kernel extension in additional package.
1285 * Support "Application Firewall" users.
1287 * Avoid ._cellname AFSDB lookups.
1289 * Compile preferences pane as a universal binary.
1293 * Use splice to speed up storing files.
1295 * When using memcache, avoid duplicating work in readpages.
1297 * Use dget_parent to safely find an inode's parent.
1299 * Disable access time updates in our superblock.
1301 * Avoid crashing doing writeback if no credentials were stashed at
1304 * Simplify keyring support.
1306 * Properly clean up vcache in event of failed mount.
1310 * Update for current FreeBSD 8.
1314 * Abstractly manipulate groups as now required.
1316 * Abstractly access time instead of using lbolt directly.
1319 OpenAFS 1.5.68 (2009-12-08)
1323 * aklog now attempts to convert non-AFS errors to human-readable
1326 * Make stack not executable when compiling assembler source with GCC.
1328 * Numerous source warning cleanups and code reorganization.
1330 All server platforms
1332 * Compute midnight for volume statistics calculation from local time.
1334 * Salvager now orphans duplicate special inodes when running to allow
1335 recovery in event of a problem, instead of simply ignoring the
1338 * Support to ensure a server panic attempt leaves a core and thus
1339 restarts in a timely manner, rather than potentially hanging. Use
1340 panic to attempt cleanup before leaving a core when possible.
1342 * Volume sync data reported during bulkstatus is now set correctly.
1344 * Provide better tuning for fileserver file descriptor caching.
1346 * Allow more than 128 threads in fileserver by modifying host
1347 structure in-use tracking.
1349 * Avoid crashes getting volume server status during transaction
1352 * Improved logging of offline volume conditions.
1354 * Correct volume statistics when cloning a volume.
1356 * Avoid referencing host structures in the fileserver which are marked
1359 * Demand attach fileserver corrections to avoid coring during an
1362 * host array bounds checking corrections to avoid buffer overflow.
1364 * Handle special inodes correctly when promoting an inode fileserver
1365 readonly volume to read-write.
1369 * Set the DOS Readonly attribute on a file/directory whenever the unix
1370 mode combined with the mask 0200 is true. Previously there was a
1371 discrepency between the mask used for testing for readonly behavior
1372 and that used for setting the attribute.
1374 * Disable AFSVolSync based .readonly "whole-volume callback" support
1375 because the all file servers prior to 1.5.67 (and perhaps 1.4.12) do
1376 not properly assign a value to the AFSVolSync structure in bulk
1377 status RPC responses.
1379 * Improve the error output from aklog to output the value from krb5
1380 error_message() if the afs_com_err output indicates an unknown
1383 * Convert VBUSY and VRESTARTING to CM_ERROR_ALLBUSY and do not permit
1384 them to be exposed to the smb redirector.
1386 * Convert STATUS_TIMEOUT responses to STATUS_IO_TIMEOUT to avoid
1387 confusion within the smb redirector.
1389 * Fix the byte order assigned to port numbers associated with AFSDB
1390 record lookups. They must be network byte order not host byte
1393 * Add dynamic server ranking based on RPC round trip time
1396 All UNIX client platforms
1398 * Additional shutdown-time memory leaks removed.
1400 * Improved logging of resource contention.
1402 * Provide dumping for Rx debug packet tracking support in source.
1404 * Update afscp test client to build, and provide an unlock client.
1406 * Client buffers for directory parsing can now be allocated beyond the
1407 fixed set formerly provided.
1409 * Work around race condition when manipulating read-only volume
1412 * Bugfixes to get PAG value pioctl.
1414 * Bugfixes to SRV record support.
1418 * Path MTU tracking code cleanup.
1420 * Avoid an oops due to racing with vcache recycling thread.
1422 * Changes to keyring PAG handling: for sufficiently new kernels, use
1423 only keyring-based PAGs, and disable group PAGs entirely.
1425 * Updates to the kernel page cache interface: writing pages will now
1426 not spuriously leak page locks, and will avoid requiring duplicate
1429 * Credential references are now tracked using native atomic counters.
1431 * Kernel mutex/semaphore lock ordering fix to avoid deadlocks.
1433 * Manipulate disk cache with credentials used to initialize it, to
1434 avoid security issues.
1438 * Fix fstrace message catalog location.
1440 * Fix kernel fstrace logging.
1443 OpenAFS 1.5.66 (2009-10-25)
1447 * Avoid calling exit() in library code.
1449 * Add rx window size and peer timeout tuning APIs.
1451 * Correct rx peer timeout handling to disallow 0ms timeouts.
1453 * Correct calculation of rx RTT by disregarding retransmitted packets.
1455 * vos manpages updated to reflect changes in recent versions.
1457 * GNU-style long options (e.g. --cell) are now supported in all
1460 * fs listacl can now print a command to recreate the current ACL.
1462 All server platforms
1464 * Fix a race on transaction objects in the volserver which can cause a
1467 * Avoid destroying and setting to NULL the callback connection when it
1468 could still be being used.
1470 * Correct unlink handling in salvager.
1472 * Improve error messages due to I/O errors in the volserver.
1474 * Correct an issue which caused converted RO to RW volumes on namei
1475 fileservers to not come online immediately.
1479 * Official support for Windows 7 and Server 2008 R2.
1481 * Prevent a file server bug (FetchData returning an invalid length
1482 instead of zero) from causing an "unexpected network error" when
1485 * Promote DNS SRV records as superior to DNS AFSDB records. Support
1486 arbitrary port numbers for vldb servers.
1488 * Add AFSVolSync based .readonly "whole-volume callback" support.
1489 With this functionality, multiple objects from a .readonly volume
1490 can have their status validated by issuing a single
1491 RXAFS_FetchStatus RPC.
1493 * Remove drive mapping functionality and service start/stop from
1496 * Remove drive mapping functionality from afs_config.exe.
1498 * Use {HKLM,HKCU}\SOFTWARE\OpenAFS\Client DWORD "ShowMountTab" to
1499 restore access to drive mapping functionality in afscreds.exe and
1502 * Adjust SMB error return codes to avoid returning STATUS_TIMEOUT
1503 which results in the SMB redirector disconnecting.
1505 * Network Identity Manager OpenAFS Provider now provides its own "AFS
1506 lock" notification icon to report the status of "have tokens, have
1507 no tokens, service not started, service started but inaccessible".
1508 Hovering over the icon lists the cells for which tokens exist (if
1509 any) and the OpenAFS version number. Double-clicking executes the
1510 Network Identity Manager default action.
1512 * Prevent pioctl calls from retrying indefinitely when a sharing
1513 violation error occurs.
1515 All UNIX client platforms
1517 * Correct a condition which could discard the error from initializing
1520 * Avoid using invalid references to afs_Conn connection structures,
1521 and thus potentially producing invalid data when a retry is needed.
1523 * SRV records are now supported for discovering AFS servers.
1527 * Correct writepage behavior.
1529 * Fix error code handling in the writepage code.
1531 * Avoid leaking page locks, which could potentially hang a machine.
1535 * Preferences Pane improvements.
1539 * Avoiding attempting to handle critical signals in servers, so that
1540 core file handling works correctly.
1543 OpenAFS 1.5.65 (2009-10-06)
1547 * Code compilation warning fixes, to enable better finding and
1550 * Provide configure-time switch to enable code warning compilation.
1552 All server platforms
1554 * Demand-attach fileserver now makes volume LRU list operations
1555 exclusive operations to avoid races during adding to the list.
1557 * Fileservers now avoid potential "negative length" fetches.
1559 * A leak in host tracking objects in the fileserver has been fixed.
1561 * Salvager now unlinks all files by full path, to deal with the change
1562 to not chdir for core file tracking.
1564 * Salvager avoids asserting if the volume header is unreadable.
1566 * Demand-attach fileserver puts back volume references from fssync
1571 * Improved service response to suspend and shutdown event
1574 * Avoid a bug in the file server that can result in an invalid length
1575 being returned as part of a fetch data response if the client
1576 attempts to read beyond the length of the file.
1578 * Do not publish a default stream object for directories and mount
1579 point objects. This was impacting the ability of some Windows XP
1580 systems to save roaming profiles.
1582 All UNIX client platforms
1584 * A bug which could cause erroneous handling of lengths on data reads
1587 * A bug where erroneous length returns from the fileserver could
1588 result in a false error has been fixed.
1592 * Background page copies are now supported for enhanced disk cache
1595 * Blocking readahead is supported in readpages() to reduce overhead.
1597 * Use readpage() instead of read() to access cache data to avail disk
1598 cache users of the kernel backing cache for improved performance.
1600 * Minimize credential handling for improved performance.
1604 * Preferences Pane cleanup.
1608 * Provide a fs_pathconf method with sensible defaults.
1610 * Provide a _PC_FILESIZEBITS method to fix some NFS translator
1614 OpenAFS 1.5.64 (2009-09-22)
1616 All server platforms
1618 * The demand attach fileserver now puts back volume references gotten
1619 via the fssync interface.
1621 * The demand attach fileserver had a structure reference error, which
1622 has been correected.
1626 * Restores Windows 2000 compatibility.
1628 * Fixes a data consistency error between the output of NetWkstaGetInfo
1629 and NetServerGetInfo RPCs, specify the Lan workstation group name
1630 "AFS", and report server name as "AFS" instead of "\\AFS" when the
1631 caller asks for "\\AFS".
1633 * Enables executables to be run from \\AFS on Windows 7. Returns
1634 "Name not found" instead of "File not found" when a directory or
1635 file name cannot be found. This avoids loader errors when system
1636 dlls cannot be located in the executable directory.
1638 * Prevents cache manager from marking the file server "down" when the
1639 data returned in response to either RXAFS_FetchData64 or
1640 RXAFS_StoreData64 is invalid.
1642 * Adds pioctl data validation to the AFS Explorer Shell extension.
1644 All UNIX client platforms
1646 * A bug which could cause a kernel panic in 1.5.63 has been corrected.
1647 This would manifest as a GetDCache panic or oops.
1651 * aklog -setpag works again with recent kernels when keyring is in
1656 * When Fast User Switch is in use, AFS login is now handled correctly
1657 by the integration tool included with the preferences pane.
1659 * Several packaging bugs have been corrected.
1662 OpenAFS 1.5.63 (2009-09-11)
1666 * The restorevol command is now documented and installed as a user
1669 * The uss command now properly translates vldb entries to its expected
1670 format when handling them in all cases.
1672 * Documentation now refers to Kerberos instead of kaserver.
1674 All server platforms
1676 * bosserver now handles BosConfig.new when restarting, allowing
1677 configuration to be replaced at restart time rather than with bos
1678 delete and bos create. Documentation is updated to reflect this.
1680 * The demand attach fileservice not longer potentially hangs trying to
1681 terminate demand-salvages which have already exited.
1683 * The demand attach fileservice has been modified to avoid spurious
1684 'SYNC_putRes: write failed' warnings when some protocol messages
1685 cannot be acknowledged due to the sender terminating the connection.
1687 * In the event of failure to contact the vlserver or ptserver, the
1688 fileserver will not exit and trigger a forced salvage. It will
1689 continue to try in the background to contact the needed services.
1691 * The salvager can now repair certain cases of a damamged vnode index.
1693 * The accessDate metadata for a volume is now updated correctly.
1697 * CRITICAL: Some applications for example those based on Cygwin were
1698 unable to access data stored in the AFS name space. Explorer Shell
1699 also experienced inconsistent behavior. This is fixed.
1701 * CRITICAL: Multiple AFS pioctl requests issued nearly simultaneously
1702 by applications could result in pioctl responses being received by
1703 the wrong requester. This in turn could result in application
1704 crashes. symlink.exe, fs.exe, afslogon.dll, afscreds.exe, and the
1705 netidmgr afscred.dll plugin were all affected.
1707 * Some XP machines running 1.5.62 had trouble saving roaming profile
1708 data. This is fixed.
1710 * Integrated Logon (afslogon.dll) did not function with domain
1711 specific configurations.
1713 * Ensure that access denied and over quota errors experienced while
1714 storing data to the file server do not result in on-going retry
1717 All UNIX client platforms
1719 * Except on Solaris and AIX, the compiler may now be overriden at
1720 configure time by setting the CC environment variable.
1722 * afsd now properly deals with large cache partitions.
1726 * Build shared libafsauthent and libafsrpc.
1730 * Kernel module DKMS support now installs an unstripped module to
1731 allow debugging information to be collected.
1735 * Preferences pane properly updates token information.
1739 * klog will now properly handle passwords of 8 or fewer characters
1740 with an AFS string to key on hosts able to run 64 bit binaries.
1742 * A panic at AFS shutdown due to "NO PCB" on a udp_lock has been
1745 * The panic decoder script included in the source now properly handles
1746 32 and 64 bit panics.
1750 * Avoid defining AFS_KERBEROS_ENV globally as it creates a circular
1753 * Build shared libafsauthent and libafsrpc.
1757 * Build shared libafsauthent and libafsrpc.
1760 OpenAFS 1.5.62 (2009-08-28)
1764 * Numerous invisible changes to improve code maintainability,
1765 portability and enhanceability.
1769 * CRITICAL: Fixes two errors that can result in data loss when storing
1770 data to the file server.
1771 1. Failure to Store Portions of Unaligned Writes
1772 2. Failure to Store Data to File Servers Lacking Large File Support
1773 Read the announcement for more details:
1774 http://www.openafs.org/pipermail/openafs-announce/2009/000305.html
1776 * CRITICAL: The cache manager daemon thread could terminate when the
1777 machine enters suspend mode. This daemon thread performs the
1778 background check of down servers, offline volumes, callback
1781 * CRITICAL: Integrated Logon (afslogon.dll) was terminating
1782 unexpectedly. Error checking has been improved and NULL pointer
1783 dereferences after Lsa API calls fail have been eliminated.
1785 * For the first time, the OpenAFS SMB Server supports the DCE RPC
1786 services SRVSVC and WKSSVC. Browsing \\AFS with the Explorer Shell
1787 or NET VIEW will now be faster and provide additional functionality.
1788 No longer will cell names longer than 12 characters be truncated.
1790 * Improvements to DFS Referral request processing have been
1793 * Unnecessary DNS lookups of share names are avoided improving
1796 All UNIX client platforms
1798 * Non-Kerberos PAM modules work correctly again.
1802 * MacOS 10.6 (Snowleopard) is now supported, both 32 and 64 bit mode.
1804 * Updates to the AFSCommander preferences pane.
1806 * Installer now permits cell names with dashes.
1809 OpenAFS 1.5.61 (2009-08-06)
1813 * Correct another race condition in the Rx library that could result
1814 in an unexpected panic while freeing the Rx call iovq.
1816 * rx packet resend and data packets sent counts were incorrect.
1818 * fs setquota, fs setcachesize, vos setfields, and vos create now
1819 accept human readable orders of magnitude. (K, M, G)
1821 * fs listquota fixed to permit large quota sizes to be displayed.
1823 * Correct documentation of bosserver permissions requirements.
1825 * Modify vlserver to avoid potentially corrupting the database through
1828 * Generalized support for fast Rx timeout due to network
1831 All server platforms
1833 * Allow audit logs to be sent via sys5 IPC message queues instead of
1838 * If a file server becomes inaccessible while the cache manager has
1839 dirty buffers to write, the afsd_service buf_IncrSync thread can
1840 attempt to use 100% of the cpu.
1842 * Fix "fs newcell" which was broken in 1.5.60.
1844 * Do not attempt to synchronize dirty buffers if the associated volume
1845 is known to be unavailable.
1847 * Modify behavior of a Freelance mountpoint target that does not
1848 specify a cell. Instead of assuming the target volume is in the
1849 Freelance.Local cell, use the workstation "Cell" specified in the
1850 registry. A mountpoint target of "#root.cell." will now mean the
1851 root.cell volume in the workstation cell for the current session.
1852 If the workstation cell changes from "athena.mit.edu" to
1853 "andrew.cmu.edu", the referenced volume will also change without
1854 requiring that the mount point targets be altered.
1856 * Add cm_FindServerByUuid(). Re-implement RXAFS_InitCallBackState3()
1857 to permit the server Uuid to be used to lookup the server object and
1858 from that determine the cell. This permits callbacks that are
1859 received from alternate addresses to be processed with a known
1860 server object. Previously a request from an unknown server would
1861 clear all callbacks from all cells.
1863 * Fix a bug that prevented optimal performance when using a non-zero
1864 value for 'daemonCheckVolCBInterval'. As a reminder, when
1865 "daemonCheckVolCBInterval" is set to a non-zero value, all .readonly
1866 volume callbacks are automatically renewed 90 minutes before their
1869 * Fix automatic ranking of vldb servers whose values are obtained from
1870 the CellServDB file.
1872 * Add failover for RX CALL TIMEOUT errors when the volume is readonly
1873 or the call is to a vldb server.
1875 * Add registry based cell search functionality to NetIdMgr,
1876 afs_config.exe, and klog.exe.
1878 * afsconf_GetCellInfo() has been modified to perform gethostbyname()
1879 lookups on the host names in the CellServDB instead of using the
1880 specified IP addresses. This provides aklog, pts, vos, etc. the
1881 same CellServDB behavior that the Windows Cache Manager uses.
1883 * When updating the stat cache entry callback of a .readonly object
1884 from the volume group object, update the file server reference to
1885 ensure it matches the most update to date callback.
1887 * Add proper support for processing callbacks from multi-homed file
1888 servers. Instead of comparing servers by cm_server_t pointer,
1889 compare them by UUID when the UUID is known.
1891 * During a shutdown short circuit the offline volume check daemon
1894 * Return the error code of RXAFS_FetchData / RXAFS_StoreData in
1895 preference to an error code reported by rx_EndCall.
1897 * Add "PerFileAccessCheck" registry value to permit testing against
1898 experimental file servers that include per-file acl support. This
1899 value is intentionally undocumented. It is not to be used by
1900 production environment deployments.
1902 * Fix a bug introduced in 1.5.60 that prevents the afs netidmgr
1903 provider from obtaining tokens when referrals are in play.
1905 * Add "fs chown" and "fs chgrp" commands to permit the owner and group
1906 of objects stored in AFS to be set from Windows.
1908 * Avoid performing background daemon operations when the machine is
1909 going into suspend mode.
1911 * Perform offline volume checks in most recently used order.
1913 * Prevent crash when a data version for a cache object goes backwards.
1915 * Multi-thread safe library versions are now being generated and used.
1916 mtafsubik.lib, mtafsutil.lib, mtafsvldb.lib, mtafsvol.lib.
1918 * Microsoft SMB Redirector (mrxsmb.sys) support for
1919 ExtendedSessTimeout values are now available on XP through Windows
1920 7. Add functionality to autodetect if such support is present on
1921 the machine. If so, configure it if necessary and dynamically
1922 adjust the AFS Rx timeout values accordingly.
1924 All UNIX client platforms
1926 * Fix out-of-tree source builds.
1930 * GUI installer now asks for local cell information.
1932 * AFS Commander preferences pane is now installed by default.
1936 * Avoid kernel panics due to null pointer dereferences in the network
1937 interface poller kernel thread.
1940 OpenAFS 1.5.60 (2009-05-31)
1944 * Retry volserver transaction creation on failure.
1946 * Allow building HTML and PDF documentation from included XML copies
1947 of User Guide, Admin Guide and Quick Start Guide for Unix.
1949 * Documentation updates and additional documentation.
1951 * Add -encrypt support to pts client.
1953 * Convert MR-AFS fs commands to OSD commands.
1955 All server platforms
1957 * Updated background sync process in fileserver to avoid a race which
1958 could result in a volume being taken offline.
1962 * On April 9th Microsoft released a Hot Fix for Windows Server 2003
1963 SP2 that corrects a deadlock in the smb redirector and also adds new
1964 functionality that permits the AFS SMB server to be given a longer
1965 timeout than is normally the case. New functionality has been added
1966 to configure these additional LanmanWorkstation\Parameter values.
1967 (This functionality has been backported to XP SP3 and is scheduled
1968 to be released on June 5th.)
1970 * Fix RT#124787, a race condition between "fs flush <dir>", "fs
1971 flushvolume", or "fs flushall" and on-going directory operations
1972 that can result in afsd_service.exe crashing.
1974 * Release Notes, User and Administrator guides are now shipped as
1975 indexed Windows HtmlHelp Files. (.chm). Shortcuts are provided from
1978 * A method of specifying Client CellServDB information within the
1979 registry has been added that can be used to either override the
1980 CellServDB file or force the use of DNS lookups for a given cell.
1981 See the release notes for details.
1983 * The pioctl interface now properly handles drive letter substitution
1984 to UNC paths. (SUBST <d:> <\\afs\cell\path>)
1986 * The BackConnectionHostNames registry value configuration was broken
1987 when dynamic re-establishment of Netbios Name registrations was
1988 added. This release restores the functionality.
1990 * All hidden vos.exe commands are now revealed.
1992 * Attempts to store the same dirty file chunk from multiple threads
1995 * The IsPathInAfs test in Explorer Shell Extension and fs.exe now
1996 permits broken symlinks to be treated as being in AFS.
1998 * vos.exe commands that output 64-bit integer values once again do so.
1999 This was broken in 1.5.59.
2001 * Cygwin Import Libraries are provided in the SDK for all OpenAFS
2002 DLLs. This permits building cygwin applications against OpenAFS
2005 * NSIS installer does a much better job of cleaning up files left over
2006 from previous installs.
2008 * libafsconf.dll moved from Client\Program to Common directory as is
2009 is now used by all modules for CellServDB processing.
2011 All UNIX client platforms
2013 * Write back changes on last store for memcache to avoid discarding
2016 * Abstract disk cache support to allow for path, fh, inode based
2017 caches with no need for messy ifdef structures each time a new type
2022 * Support as a userland port.
2026 * Corrected structure definition for userspace cache manager to allow
2031 * Corrected client locking support.
2033 * Updated patch to stop deadlocking in the kernel during mmap.
2035 * Avoid oops when setting up groups for PAGs to match keyrings.
2037 * Use Linux fh-based cache in cases where possible by default.
2041 * Corrected structure definition for userspace cache manager to allow
2046 * Support for OpenBSD 4.5.
2050 * Corrected support for server-side vos split interface.
2053 OpenAFS 1.5.59 (2009-04-06)
2057 * Increased service priority class to "High" to match the priority of
2058 system components that are dependent upon the a timely response.
2060 * SMB error responses avoid returning errors that could confuse the
2061 Microsoft SMB redirector into disconnecting the connection to \\AFS.
2063 All UNIX client platforms (except MacOS X 10.4 and 10.5)
2065 * OpenAFS 1.5.59 contains fixes for the client issues addressed by the
2066 security advisories OPENAFS-SA-2009-001 and OPENAFS-SA-2009-002.
2070 * Support for prerelease Linux 2.6.30 kernels.
2073 OpenAFS 1.5.58 (2009-03-30)
2077 * Code cleanup and prototyping.
2079 * Avoid unnecessary blocking in Rx periodic cleanup code.
2081 All server platforms
2083 * Fileserver CopyOnWrite routine optimized for performance.
2085 * Make fileserver callback dumps 64 bit safe.
2087 * Fix byte order issues with fileserver host hashing.
2089 * Fix buffer size issues with butc.
2091 * Fix several Ubik recovery issues.
2093 * Avoid leaking file references in the fileserver.
2095 * Fix a race in DAFS while closing vnodes, and another offlining
2098 * volserver interfaces for volume splitting client.
2102 * [RT 124293] A race condition exists which can result in a crash.
2104 * [RT 124276] If the vldb is out of sync with the contents of the file
2105 servers, afsd_service will retry too many times when a file server
2106 reports a volume as not being present. Now if the list reported by
2107 the vldb is the same as the previously seen list, then the retry is
2110 * [RT 124276] Read-only volume failover was broken in 1.5.53 whenever
2111 accessing a volume results in VNOVOL or VMOVED.
2113 * [RT 124276] Prior to 1.3.70 the volume server reference list was not
2114 reference counted and would be prematurely freed while in use. When
2115 reference counting was added in 1.3.70 a bug was introduced that
2116 could result in service reference list corruption.
2118 * Add Windows Application Event Log warning messages for "Client SMB
2119 MPX value too large" and "Client SMB Buffer Size too small".
2121 * Renaming of files across directory boundaries would result in an
2122 invalid handle error when attempting to access the files after the
2125 * Fix the handling of Tran2 Set Path Info RPCs. Do not fail when a
2126 smb file descriptor cannot be found. The whole point of using a
2127 Path Info function is because an smb file descriptor wasn't
2130 * More edge cases in which dynamic addition of Freelance root.afs
2131 entries would get the wrong FID or where the root.afs directory
2132 would not be refreshed.
2134 * Buffer overflow could occur if the workstation cell name was longer
2135 than 64 characters. Crashes could occur in afscreds.exe,
2136 afslogon.dll, and afsd_service.exe.
2138 * VNOSERVICE and VOFFLINE errors were leaking and were exposed to the
2141 * Log file server uuid values as part of the cm_server object when
2142 available. Dump the cm_server object list in response to "fs
2145 * Optimize the performance of resetting access control lists when
2146 tokens are set or removed.
2148 * Remove symlink recursion tests and increase max symlink count to 64
2151 * Windows specific Rx performance improvements.
2153 * Support for Network Identity Manager 2.0
2155 All UNIX client platforms
2157 * Avoid issues with freeing resources at shutdown.
2159 * Numerous fixes to disconnected AFS.
2161 * Disconnected AFS fixes for replaying changes without double-freeing.
2163 * Attempt to use krb524 principal conversion in aklog if available.
2167 * Kerberos configuration at build time corrected.
2171 * Default to dynamic allocation of AFS kernel cache entries to allow
2172 growth for inotify()-pinned entries. (beagle, famd, etc)
2174 * Change client truncation routines to avoid locking issues.
2176 * IA64 port clients fixed on Linux 2.6.
2178 * RPMs now install fstrace message catalog.
2180 * Support through kernel 2.6.29 tested.
2182 * Fix locking issues on CellServDB file in /proc.
2186 * Support OpenBSD 4.4
2189 OpenAFS 1.5.57 (2009-01-23)
2193 * Conditional compilation of rxdebug support is now possible.
2195 * Documentation updates.
2197 * Further race connditions in Rx have been corrected.
2199 All server platforms
2201 * Salvager no longer attempts to recreate headers in the wrong
2204 * Volumes are properly marked in use on creation and subsequently on
2205 examination with vos.
2209 * Undo the "UAC manifest fix" applied to afs_config.exe.
2211 * Ensure that Freelance allocation of vnodes follow the AFS convention
2212 of odd vnodes are directories and everything else is an even vnode.
2214 * Add Freelance logic to mount point and symlink evaluation functions.
2216 * Enhance smb_ParseASCIIBlock() so that it can handle all of the
2217 STRING formats defined by the CIFS Technical Report 1.0.
2219 * Validate the output of smb_ParseASCIIBlock() in all callers. Return
2220 CM_ERROR_BADSMB if the STRING field cannot be parsed.
2221 CM_ERROR_BADSMB will cause the contents of the packet to be logged.
2223 * If multiple SMB Raw Write operations were taking place at the same
2224 time, there could be data corruption because unique event objects
2225 were not generated for each Netbios receive operation.
2227 All UNIX client platforms
2229 * Userspace AFS library can now deal with large files when supported
2232 * Numerous updates to disconnected AFS support, including changes to
2233 allow reconnection to work in more circumstances.
2237 * FreeBSD unstrategy code has been updated.
2241 * A race during file truncation has been corrected.
2243 * System call probing routines have been updated.
2245 * 2.6.29 is now supported.
2249 * 10.3 support has been corrected.
2253 * Initial OpenBSD 4.4 support.
2257 * Updates to allow compiling on newer OpenSolaris are now included.
2260 OpenAFS 1.5.56 (2008-12-30)
2264 * libuafs (userspace cache manager) updated to correct several errors.
2266 * Additional rx debugging support is available as a conditional
2269 * A race condition in Rx leading to a panic has been corrected.
2271 * Rx idle time tracking has been corrected.
2273 * ubik clone server support has been corrected.
2275 All server platforms
2277 * Salvager no longer leaves cores in vice partitions.
2279 * The vol-dump tool now supports dumps larger than 2gb where possible.
2281 * Operations on multiple files now report all FIDs in the audit log.
2283 * butc XBSA support now works correctly on amd64.
2287 * The NetIDMgr AFS Provider automated configuration logic was broken
2288 by the introduction of Kerberos referrals. If the realm of the
2289 identity cannot be determined, the workstation cell is now assumed
2290 to belong to the newly created identity.
2292 * Avoid a reference count under flow during rename operations.
2294 * Avoid a crash caused by treating an arbitrary length directory
2295 search mask as an 8.3 mask.
2297 * Prevent rename operations if a case insensitive match for the target
2298 name already exists and does not refer to the object being renamed.
2300 * Increase the maximum number of background daemons to 64.
2302 * Fix the UAC manifest applied to afs_config.exe
2304 All UNIX client platforms
2306 * Updates to disconnected AFS support.
2310 * FreeBSD 7.1 is now supported.
2312 * amd64 FreeBSD is now supported.
2316 * Generic fh (exportfs API) cache type is now available.
2318 * Avoid some oopses due to backing_dev_info inode fields not being
2321 * 2.6.28 is now supported.
2325 * 10.3 support has been corrected.
2329 * Large partition support has been corrected.
2331 * Filesystem-agnostic cache is now available on Solaris 10 and 11.
2334 OpenAFS 1.5.55 (2009-11-10)
2338 * Salvager avoids leaving core files in vice partitions.
2340 * NFS translator fixes.
2342 * Unresponsive server handling fixes.
2344 * A volserver race which could result in duplicate transactions is
2349 * Fixes a panic caused by corruption of the SMB virtual circuit list.
2352 * Fixes a panic caused by receipt of a UTF-16 string that cannot be
2355 * Implements a more aggressive recovery algorithm for Netbios errors
2356 that result in loss of communication to the AFS SMB server.
2358 * Improve pioctl response time when testing whether or not a PATH is
2361 * Adds support for linked cells.
2363 * Increases the length of the cell and realm names that can be input
2364 into the Network Identity Manage AFS provider configuration dialog.
2366 All UNIX client platforms
2368 * Disconnected AFS avoids infinite recursion during rmdir.
2372 * Support for 2.6.28 (not complete for NFS translator modules).
2374 * Support for using exportfs API for filesystem-agnostic cache.
2376 * Disable backing store readahead.
2378 * Avoid deadlocks when writing back mmapped files larger than the
2381 * Avoid Oops when doing PAG garbage collection.
2384 OpenAFS 1.5.54 (2008-10-08)
2388 * Updates for new Tivoli X/Open API finding.
2390 * A double-free is corrected in Rx.
2392 All server platforms
2394 * Ubik cleans up file descriptor cache correctly when doing recovery.
2396 * Enhanced vldb error checker included.
2400 * Prevent a crash that could occur when multiple file / directory
2401 change notifications are processed simultaneously.
2405 * AFS claims more free space so Finder will attempt file copies.
2409 * Avoid spurious ENOENT when calling gwtcwd() on a volume root.
2411 * Avoid spurious ENOTDIR during fakestat.
2414 OpenAFS 1.5.53 (2008-09-26)
2418 * rx avoids many packet leaks.
2420 * rx jumbogram disabling now works (and is the default).
2422 All server platforms
2424 * Demand Attach fileserver tries to avoid issues tracking offline
2429 * Many potential deadlock conditions due to out of order lock
2430 acquisitions have been corrected.
2432 * A race condition resulting in an undercount on the cm_scache_t
2433 reference counts has been corrected.
2435 * An empty string when sent as an ioctl path is now properly
2436 interpreted as meaning the current directory. This affects "fs
2437 lsm", "symlink list", etc.
2439 * Fix smb string parsing differences where the smb protocol
2440 documentation does not match the actual Windows implementation.
2442 * Random access denied errors fixed.
2444 * A file server lock synchronization issue was corrected in SMB
2445 NTCreateX and NTTranCreate operations. This bug prevented properly
2446 operation when loading roaming profiles.
2448 * Fix a heap overwrite error during server probe operations if a new
2449 server is added while a probe operation is in progress.
2451 * Fix an LSA memory leak that was the result of an LSA error.
2453 * Do not leak cm_cell_t objects if the VLDB server lookup fails.
2455 * Only initialize rx mutex/lock objects once.
2457 * Do not nul terminate the AFS volume name when reported to Windows.
2459 * Improve VNOVOL error handling. Prevent updated vl information from
2460 being destroyed immediately after it was acquired. This bug
2461 prevented proper fail over when volumes are moved or removed from a
2464 * Remove volume id from the server volume list in response to VMOVED
2467 * "fs flushXXX" commands now destroy locally built B+ directory trees.
2469 * Prevent mixture of locally modified directory pages and file server
2472 * Fail over to alternate vl servers if a ubik error is returned.
2474 All UNIX client platforms
2476 * Disconnected AFS now supports read-write mode.
2478 * volserver now builds correctly.
2482 * AIX 6 is now supported.
2486 * FreeBSD 7 is now supported.
2490 * cache bypass is now supported.
2492 * 2.6.x kmod compilation now uses kernel compile options always.
2494 * Support through 2.6.27.
2498 * Show more space free so Finder doesn't get confused.
2502 * Default to namei rather than inode.
2505 OpenAFS 1.5.52 (2008-08-18)
2509 * Initialize volume updateDate at volume creation.
2511 * Avoid potential corruption of directories during salvage.
2513 * Check for out of memory condition during allocation of additional Rx
2518 * Restore support for Windows 2000 (broken in 1.5.50).
2520 * Perform additional validation on volume names in mount points during
2521 creation and evaluation.
2523 * Fix several deadlocks, races, and reference count issues.
2525 * Further optimize SMB Directory Search processing and minimize the
2526 number of InlineBulkStatus RPCs sent to the file server.
2528 * Enable "bos restricted" operations.
2530 * Fix the create of submounts used by the AFSCreds and afs_config
2533 * Fix a short name truncation bug. (1.5.50)
2535 * Fix the error code reported when attempting to delete a file on a
2536 readonly volume or one that is marked with the readonly DOS
2539 * Fix a heap corruption error when reading the CellServDB file
2542 * Add the "RxUdpBufSize" registry value. The new default is 256KB.
2544 * Do not include trailing NULs in the directory search output.
2547 * Pre-allocate 64 Rx Packet buffers per thread in order to improve
2550 * For debugging: add smb lock requests and stat cache lock allocations
2551 to the output from "fs memdump".
2555 * Workaround broken sigwait() to allow fileserver to shut down
2556 correctly pre NetBSD 5.0.
2560 * Default to namei fileserver; Allow inode fileserver at configure
2565 * Try harder to avoid kernel panics for malformed requests.
2568 OpenAFS 1.5.51 (2008-07-29)
2572 * salvager tries harder to arrange for clients to get VBUSY while
2573 salvaging single volumes.
2575 * salvager avoids certain corruption when salvaging directories.
2577 * Rx connection clones disabled.
2581 * The 32-bit EXE 1.5.50 installer failed to properly install the C
2582 Runtime library. When used as an upgrade OpenAFS would continue to
2583 work but when used as a new installation, OpenAFS binaries would
2586 * Fixes the "fs" and "symlink" commands to properly parse Unicode path
2587 prefixes during the pioctl remote procedure call. This bug would
2588 result in file not found errors for files and directories that
2589 clearly exist. (Bug introduced in 1.5.50)
2591 * Large File support is disabled. (Bug introduced in 1.5.50)
2593 * Removes the possibility of a deadlock during volume location update
2594 operation if all of the reported file servers are unreachable at the
2597 * Ensures that reference counts are properly incremented/decremented
2598 on Rx connection objects used for volume location RPCs.
2600 * Over Quota errors during cm_FSync() calls would lead to an infinite
2601 loop as the error was never propagated to the caller.
2603 All UNIX client platforms
2605 * Bugfixes to disconnected AFS support in the cache manager.
2608 OpenAFS 1.5.50 (2008-07-16)
2612 * volserver puts recloned volumes back online before returning the
2613 volume to the fileserver, avoiding spurious VNOVOL errors.
2615 * Updated TSM X/Open API support available.
2617 * Demand Attach fileserver will not crash due to accesses during
2620 * Substantial documentation updates.
2622 * Demand Attach fileserver state tracking and analyzer tool
2625 * UAFS userspace cachemanager updates.
2627 * Corrected support for anti-meltdown protection in the client.
2631 * UNICODE Character Set Support.
2633 * Pioctl interfaces to the cache manager have been refactored to
2634 provide layering between the SMB specific code and the general
2635 purpose ioctl operation.
2637 * Garbage collect dead SMB virtual circuits as soon as they are no
2638 longer being referenced. This avoids problems with outstanding
2639 locks not being dropped when the virtual circuit becomes invalid.
2641 * Remove the IBM Administration Reference documentation and replace it
2642 with the OpenAFS Command Reference Manual.
2644 * Avoid calling rx_SetDeadTime and rx_SetHardDeadTime functions each
2645 time a connection is about to be used. Do not hold a lock on the rx
2646 connection object while it is being selected. This avoids a race
2647 between threads attempting to set the timeout values and removes a
2648 bottleneck that was hampering performance.
2650 * Ensure that the smb directory attribute is set for all directory
2653 * Replace the VC Runtime EXE installer with the MSI installer in the
2654 NSIS installer scripts.
2658 * Support for updates to OpenSolaris.
2662 * Correct dentry revalidation for cross-directory renames.
2664 * Updated rpm packaging materials for 1.5 release series and 2.4
2667 * Corrected syscall table probing.
2669 * NFS translator updates for current kernels.
2672 OpenAFS 1.5.39 (2008-06-24)
2676 * Updates for Demand Attach fileserver.
2680 * Fix two memory leaks.
2682 * Fix one missing lock.
2684 * Handle access denied errors when writing dirty buffers.
2686 * Fix two errors that would cause the *experimental* AFS Servers
2690 OpenAFS 1.5.38 (2008-05-24)
2694 * Add read-only disconnected support.
2697 OpenAFS 1.5.37 (2008-05-21)
2701 * Includes a number of optimizations for testing.
2704 OpenAFS 1.5.36 (2008-05-09)
2708 * Rx optimizations now attempt to deal with high latency WANs.
2710 * Client will not wait infinitely for a server which is not providing
2711 data. Additional servers will be polled without marking the server
2712 which is not providing data down.
2714 * vos move will not erroneously unlock locked vldb entries on failure.
2716 All server platforms
2718 * Fileserver avoids a potential infinite loop when a client
2719 relinquishes an address.
2721 * Fileserver large setting now configures more threads.
2723 * Fileserver properly registers uuids of new clients.
2725 * Ubik servers do not improperly hide updates from clients.
2727 * Fileservers reserve enough file descriptors such that each thread
2728 can cache one to avoid spurious errors.
2732 * Fix a cm_buf_t reference count leak when attempts to write dirty
2733 buffers to the file server from within cm_IncrSyncer() fail.
2735 * Prevent udebug from crashing.
2737 * Another VNOVNODE issue fixed. When writing a dirty buffer to the
2738 file server, if VNOVNODE is received, mark all buffers as invalid
2739 without further attempts to contact the file server.
2742 =======> Changes back to 1.3 have not yet been incorporated here <=======
2747 * -nosettime is now the default for afsd. Use "-settime" to get the
2750 * OpenBSD is now supported.
2752 * Mountpoint directory information is now only faked for cross-cell
2753 mountpoints when using the -fakestat flag (e.g. for the directories
2754 under /afs, but not for most other volumes mounted inside the cell).
2755 The -fakestat-all switch can be used to fake information for all
2758 * When fakestat is enabled on MacOSX, the Finder can be used to browse
2759 a fully-populated /afs directory. However, this precludes reliable
2760 use of entire volumes as MacOS bundles (i.e. containing a Contents
2761 directory in the root of the volume).
2763 * Mountpoint directory information can be faked by the cache manager,
2764 making operations such as stat'ing all cells under /afs much faster.
2765 This is enabled by passing -fakestat to afsd, but might not be stable
2771 * The kaserver now defaults to not allowing interrealm authentication,
2772 due to security vulnerabilities in the krb4 protocol. The new
2773 "-crossrealm" flag to the kaserver is provided to reenable interrealm
2774 authentication if desired.
2776 * RedHat Linux 9.0 is now supported.
2778 * Solaris 9 12/02 is now supported. Solaris 7 and 8 x86 should now
2781 * On Linux machines using 2.2 series kernels, 2.2.19 or higher is now
2784 * An OpenAFS 1.2.9 afsd will not work with kernel modules built from
2785 an earlier OpenAFS release. In general, using a mismatched afsd and
2786 kernel modules set is unsupported; it is not recommended that you use
2787 such a configuration on a regular basis.
2792 * Mountpoint directory information is now only faked for cross-cell
2793 mountpoits when using the -fakestat flag (e.g. for the directories
2794 under /afs, but not for most other volumes mounted inside the cell).
2795 The -fakestat-all switch can be used to fake information for all
2798 * HPUX 11.0 is now supported.
2800 * It is now possible for AFS to use Kerberos 5 directly, via rxkad 2b.
2801 See the OpenAFS 1.2.8 Release Notes for more information on using this
2804 * An NFS translator kernel module is now included and compiled by
2805 default for Solaris only.
2810 * MacOS X 10.2 is now supported. FreeBSD 4.3 and later support is
2811 included in this release, but is still under active development and
2812 should only be used by those doing active development on the OpenAFS
2815 * When fakestat is enabled on MacOSX, the Finder can be used to browse a
2816 fully-populated /afs directory. However, this precludes reliable use
2817 of entire volumes as MacOS bundles (i.e. containing a Contents
2818 directory in the root of the volume).
2820 * The fileserver will now use Rx pings to determine if clients are
2821 reachable prior to allocating resources to them, to prevent asymmetric
2822 clients from consuming all fileserver resources.
2827 * Mountpoint directory information can be faked by the cache manager,
2828 making operations such as stat'ing all cells under /afs much faster.
2829 This is enabled by passing -fakestat to afsd.
2831 * Solaris 9 FCS and Solaris 7 and 8 x86 are now supported.
2836 * A remote denial of service attack in the AIX and IRIX clients has been
2837 fixed. Users of those platforms are strongly encouraged to upgrade.
2839 * Fixed race conditions in fileserver that could result in crash.
2844 * Server logfiles now more consistant about format in which hosts are
2847 * vfsck on Solaris will now allow force runs (using -y flag) even if old
2853 * Cell aliases for dynroot can be specified in the CellAlias file in
2854 /usr/vice/etc or /usr/local/etc/openafs, in format "realname alias",
2855 one per line. They can also be managed at runtime with "fs newalias"
2856 and "fs listaliases".
2861 * Solaris 9 and Linux PA-RISC are now supported.
2863 * fileserver will not erroneously delay legitimate errors for 3 seconds
2864 after 10 errors are returned (e.g. stat() on a directory you can't
2867 * Rx MTU calculation now works for Irix, Solaris and Linux
2869 * If afsd is started with the -dynroot flag, /afs will be locally
2870 generated from the CellServDB. AFSDB cells will be mounted
2871 automatically upon access.
2873 * The namei fileserver allows vice "partitions" to be directories
2874 instead of partitions and will attach and display accordingly.
2875 Creating the file "AlwaysAttach" in the /vicepX directory is used as
2876 the trigger to attach it.
2878 * TSM support for butc no longer requires editing a Makefile, simply
2879 specify the --enable-tivoli-tsm configure option.
2881 * Linux builds no longer require source changes every time the kernel
2882 inode structure changes; the OpenAFS sources will now configure itself
2883 to the actual inode structure as defined in the kernel sources.
2888 * vfsck on Digital UNIX and Solaris will now refuse to fsck mounted
2894 * AFS now supports --prefix and the other directory options of
2895 configure. By default AFS builds assuming it will be installed in
2896 /usr/local. In order to get traditional AFS directory paths (/usr/afs
2897 and /usr/vice/etc) use the --enable-transarc-paths option to
2898 configure. More details on the new directory layout are found in
2904 * Windows 95/98/ME/NT/2000 - Consistent versioning: Installation, AFS
2905 Control Center, Client dialog boxes and properties pages for
2906 executables display a consistent OpenAFS version number. Installation
2907 detects previous installation and prompts the user for upgrade
2910 * Windows 95/98/ME/NT/2000 - Installation features: During installation
2911 the user can select the source of the CellservDB file, AFS home cell,
2912 and drive mappings. During installation a drive path mapping can
2913 include a variable that will be substituted with the current UserName
2916 * Windows 2000/NT - Integrated logon: The Integrated Logon feature
2919 * Windows 95/98/ME - Logon script features: The Windows 95/98/ME client
2920 now offers a command-line option for starting up the AFS client
2921 without authenication. It is now possilbe to start the AFS client
2922 first and obtain tokens, and map drives all through Windows scripts.
2923 This helps using Windows 95/98/ME client in Kerberos 5 environment.
2925 * Windows 2000/NT - LANA numbers: AFS client now scans the LANA numbers
2926 to establish the correct NETBIOS connection. NetBEUI is no longer
2927 needed. The user no longer needs to find the correct LANA number.
2929 * Windows 2000/NT - OpenAFS naming consistancy: Further progress has
2930 been made to remove references to "Transarc AFS" and replace with
2936 * AFS now builds with configure. The README for building has been
2937 updated and includes full details.
2939 * A client system can now have multiple sysname values for @sys. They
2940 will be searched in order when looking up files in AFS. The
2941 -newsysname argument to fs sysname can be repeated to set multiple
2944 * A new system group is created for new cells (system:ptsviewers with id
2945 -203). If this group exists, members of this group can examine and
2946 read the entire protection database. They can examine all users and
2947 groups and can get the membership of any group.
2949 * A new program, pt_util has been added to the distribution. This
2950 program allows users to print the contents of the protection database
2951 or to edit the protection database without running a ptserver. It can
2952 be used to set up a new cell without ever running in noauth mode. Run
2953 pt_util -h for help.
2955 * The fs setcrypt and fs getcrypt commands have been added. These
2956 commands allow the system administrator to require that the client
2957 encrypt all authenticated traffic between the client workstation and
2958 AFS. The encryption used is weak, but is likely better than sending
2959 unencrypted traffic in most environments. Some functions, such as
2960 looking for a volume may not be encrypted, but data transfer certainly
2961 is. By default data is not encrypted. At this time no significant
2962 experimentation with server performance has been conducted.
2964 * By default AFS is compiled with AFS_AFSDB_ENV, enabling the -afsdb
2965 option to be given to afsd on startup. If this option is used, then
2966 new cells will be looked up using AFSDB records stored in DNS if they
2967 are not found in CellServDB. This means that users can create
2968 cross-cell mountpoints in directories they control to access cells not
2969 in root.afs, and that cells in root.afs need not be in the client's
2972 * AFS database servers can be marked as read-only clones. Surround the
2973 hostname in square brackets on the bos addhost command and the
2974 database server will never be elected sync site. This is useful for
2975 cells distributed over a wide region.
2977 * The AFS servers now support the -syslog flag. This flag causes them
2978 to log to syslog rather than to files. This flag is not supported on
2979 NT. For all servers besides the salvager, the flag can also be
2980 specified as -syslog=facility, where facility is an integer facility
2981 code from syslog.h. A -syslogfacility option is provided for the
2982 salvager to accomplish the same goal.
2984 * If the --enable-fast-restart flag is given when configuring AFS, then
2985 the salvager supports the -dontsalvage flag which causes it to exit
2986 without salvaging any volumes. If this is configured into the third
2987 command of a fs process, then the fileserver will start without
2988 salvaging. It will fail to attach volumes that need salvaging and
2989 they can be salvaged manually. This provides significantly better
2990 server startup performance at the cost of administrative complexity.
2992 * If the --enable-bitmap-later flag is given when configuring AFS, then
2993 the fileserver creates bitmaps for free vnodes on demand, allowing
2996 * If bosserver finds a BosConfig.new file at startup, it reads this file
2997 and renames it to BosConfig. This allows bosserver to be reconfigured
3000 * The bosserver can be placed in a restricted mode in which AFS
3001 superusers are only granted limited access to the server host. The
3002 following functionality is disabled when restricted mode is in use:
3005 bos getlog (except for files with no '/'s in their name)*
3011 specific exceptions are made for functionality that "bos salvage"
3014 A cron bnode who's name is "salvage-tmp", time is now, and command
3015 begins with "/usr/afs/bin/salvager" may be created. This bnode deletes
3016 itself when complete, so no special "delete" support is needed. This
3017 functionality may be removed in the future if a "Salvage" RPC is
3020 The file with the exact path /usr/afs/logs/SalvageLog may be fetched,
3021 since that is how bos salvage [...] -showlog is implimented.
3023 Restricted mode is enabled using a new bos command (bos setrestricted)
3024 or bossever command line switch (bosserver -restricted). Restricted
3025 mode can be disabled by a) sending the bosserver process a SIGFPE
3026 (which will then allow restricted operations until the next restart or
3027 setrestricted command) or b) editing /usr/afs/local/BosConfig (or
3028 BosConfig.new), and restarting the bosserver.
3030 * The bos UserList of trusted administrators can now contain cross-realm
3031 Kerberos principals.
3033 * udebug now takes --server not --servers.
3035 * Several error messages have been improved to include volume numbers.
3037 * Several new ports have been included for UNIX platforms: Darwin
3038 (ppc_darwin_12 and ppc_darwin_13), Linux 2.4 (i386_linux24), Linux on
3039 the Powerpc (ppc_linux22 and ppc_linux24), Linux on the Sparc
3040 (sparc_linux22, sparc64_linux22 and sparc64_linux24).
3042 * Incomplete FreeBSD and Alpha Linux ports are included. The FreeBSD
3043 port has a working server and the Alpha Linux port has a partially
3046 * A native client for Windows 95/98/ME has been added to the
3047 distribution. With this program, a gateway machine is no longer
3048 required for Windows 9x to access AFS files. One drive letter will be
3049 created on your machine by default - Z:. The Z: drive will be the
3050 root of the AFS tree, allowing you to browse all sites that have AFS
3051 servers available. Additional drive letters can be defined for other
3052 AFS directories. A Windows Explorer shell extension is included that
3053 allows you to right click on items within an AFS tree to bring up an
3054 "AFS" menu item and perform various operations on a file or directory.
3055 The most useful item is "Access Control Lists", which allows you to
3056 view and edit the permissions of a particular directory. Command line
3057 tools are also available in the install directory. These commands
3058 include klog, unlog, tokens, kpasswd, symlink, fs and pts. The
3059 installable includes a readme file that contains more information on
3060 how to use the client program and known issues.
3062 * Support for large caches in afsd. Cachefiles are stored in
3063 subdirectories. The default is 2048 files per subdirectory, which
3064 should work fine in most situations. You can use the new afsd option
3065 -files_per_subdir to change this number. Note that the first time you
3066 run afsd with this patch, your cachefiles will get moved into
3067 subdirectories. If you subsequently run an older version of afsd, you
3068 will lose all your cached files.
git://git.openafs.org / openafs.git / blob