blog/shl@INTERDOSE

Please advise your help desk staff to be on the lookout for a sudden
increase in complaints about OpenAFS for Windows not working.

The symptoms are that \\AFS is inaccessible and an examination of the
%windir%\temp\afsd_init.log file indicates a memory mapping failure when
attempting to load the AFSCache file. This problem is likely to affect
any user of OpenAFS for Windows on 32-bit Windows with iTunes installed
that set their cache size to be larger than 500mb.

The problem:

Apple updated the Bonjour distribution as part of the most recent iTunes
update. Included in the distribution is a file called mdnsNSP.dll which
is inserted into the process memory space of every application on the
system that makes use of the WinSock APIs. This DLL permits Bonjour
discovery services to be used as a DNS replacement automatically. Apple
set an image base of (16080000 to 160A4FFF) which is smack in the middle
of the 32-bit process data range instead of using a value around
60000000 as recommended by Microsoft.

The work around:

The Microsoft SDK provides a tool called rebase.exe which is used by
developers to modify the base address of a DLL. The following
operations can be used to move mdnsNSP.dll to the correct location in
memory.

1. cd to c:\program files\bonjour
2. rename mdnsNSP.dll to mdnsNSP.dll.inuse
3. copy mdnsNSP.dll.inuse to mdnsNSP.dll
4. rebase -d -b 0x60000000 mdnsNSP.dll

The next time the OpenAFS for Windows service is started the dll will be
loaded into the correct range in memory.

Unfortunately, it is likely that the next iTunes update will break this
again. End users are also unlikely to have access to the rebase.exe
command.

The command “dumpbin /headers mdnsNSP.dll” can be used to determine the
image base.

The affected version of mdnsNSP.dll is 1.0.6.2.

[Quelle: Jeff via openafs-info]

Sebastian AFS, Apple, Windows

I am pleased to announce that version 1.00 of mod_waklog is now available to download.

mod_waklog is an Apache module that provides aklog-like semantics for the web. mod_waklog will acquire (and store in the kernel) an AFS credential when a connection is opened, use the credential for the duration of the connection, and will remove the credential when the connection is closed.

This release adds support for Apache2, a shared token cache, per-<Location> principals, and many other improvements.

Please note that the names of some of the configuration directives have changed in this release. See the README for the new names.

[Quelle: Adam via openafs-annouce]

Unter mod_waklog muß man sich das Backend hinter Filedrawers vorstellen, also die Schnittstelle zwischen dem Apache und dem Kerberos-Realm.

mod_waklog is developed in C. mod_waklog acquires AFS credentials of the logged in user and allows Apache to run as that user.

[Quelle: modwaklog.org]

Sebastian AFS, Kerberos

1.5.60 is the recommended production-ready release of OpenAFS for
Microsoft Windows users. It supports all Microsoft Windows operating
systems from Windows 2000 through Windows Vista SP1 and Windows Server
2008 including both 32-bit and 64-bit architectures. The 1.5.60
release continues the recent efforts at optimizing the performance of
the Windows client and improving its scalability.

For UNIX, Linux, and MacOS X the recommended production-ready release of
OpenAFS is 1.4.10. The 1.5.60 Windows client is fully compatible with
all AFS server versions.

[Quelle: Jeff via openafs-annouce]

Sebastian AFS

Jakob hat sich die Mühe gemacht und gescriptet:

I’m wondering for quite some time now, why there is no simple method the check whether the sum of the volume quotas exceeds the available disk space for each paritition on an AFS fileserver.

Und das Ergebnis (zu finden in seinem Blog) funktioniert prima.
Danke Jakob.

Sebastian AFS, Shells & Scripting

Dear colleagues,

we wish to announce the call for participation to the European AFS
meeting 2009, which will take place in Rome, Italy, from September 28 to
30 – details can be found at http://www.dia.uniroma3.it/~afscon09/.

This workshop is to give some overview of AFS technology, provide
information about selected recent developments, and your are invited to
present short site reports with your experience.

The Arla and Heimdal communities are explicitly encouraged to
contribute; registration to the event is by fax with an Adobe form which
can be downloaded, questions should be directed to this mail address.

The Meeting Organizers

[Quelle: Wolfgang via u.A. openafs-annouce]

Sebastian AFS, Veranstaltungen

1.5.58 is the recommended production-ready release of OpenAFS for
Microsoft Windows users. It supports all Microsoft Windows operating
systems from Windows 2000 through Windows Vista SP1 and Windows Server
2008 including both 32-bit and 64-bit architectures. The 1.5.58
release continues the recent efforts at optimizing the performance of
the Windows client and improving its scalability.

[Quelle: Jeffrey via openafs-annouce]

Sebastian AFS

The OpenAFS Gatekeepers announce the availability of the second release candidate for OpenAFS version 1.4.9.

[...]

A large number of bugfixes, including in Rx timeouts and ubik recovery, are included, as are support for dynamic vcache allocation on Linux,
new Linux kernel versions, multiple local Kerberos realms, FreeBSD clients, and Solaris caches on tmpfs and ZFS for Solaris 10 and later.

[Quelle: Derrick via openafs-annouce]

Sebastian AFS, ZFS