search for: openaf

...]# yum update Loaded plugins: fastestmirror, priorities Loading mirror speeds from cached hostfile * base: centos.mirror.nac.net * extras: mirror.batblue.com * updates: mirror.atlanticmetro.net Setting up Update Process Resolving Dependencies --> Running transaction check ---> Package kmod-openafs.i686 0:1.4.12-1.1.2.6.18_194.26.1.el5 set to be installed --> Processing Dependency: kernel-i686 = 2.6.18-194.26.1.el5 for package: kmod-openafs --> Finished Dependency Resolution kmod-openafs-1.4.12-1.1.2.6.18_194.26.1.el5.i686 from openafs has depsolving problems --> Missing Dependenc...

...H with AFS support to enable password-less login in a linux cluster. We are getting the error mentioned at the bottom of this mail. Also, included the information of other packages and the options used with configure. Please help us to sort out this issue. Server is running on RedHat Linux v7.3 OpenAFS Information Downloaded from http://www.openafs.org/release/latest.html [root at blueray openssh-3.6.1p1]# rpm -qa |grep openafs openafs-devel-1.2.9-rh7.3.1 openafs-krb5-1.2.9-rh7.3.1 openafs-client-1.2.9-rh7.3.1 openafs-kpasswd-1.2.9-rh7.3.1 openafs-1.2.9-rh7.3.1 openafs-server-1.2.9-rh7.3.1 ope...

We start to use centos 5 for our workstation at our site (University Innsbruck) and we use openafs to hold the home directories. There would be a big advantage to have the openafs kernel module (and the additional rpms) in the centos extras (or addons) repository with an automatic compile for the available kernels. If you need any help to do this i would be happy to participate in any way. Che...

Would OpenSSH be willing to accept a modification similar to the one below to replace the kafs modification to get an AFS PAG and token? The nice features of this are that it can be compiled in even if OpenAFS is not available. At runtime if the dynamic library is present, it can be loaded and called. A dynamic lib is used so the setpag is in the same process. It has been reported that the kafs code does not work with delegated gssapi credentials in OpenSSH-3.8. I have not had this problem as I used...

From: Johnny Hughes <mailing-lists at hughesjr.com> > Nope ... I can't build that with GNU gcc and against GNU glibc and > release it ... sorry, no OpenAFS :( ??? Actually, you _can_. You just can't link it into the GPL kernel program. [ I'm not posting this to cross you. But someone correct me if I'm wrong. ] There is nothing in the GPL that prevents a GPL compiler from producing non-GPL code. And LGPL can be statically linked again...

I'm trying to build the --with-fake-kaserver option in 3.0.4 on RHEL 3.0. I'm using the srpms provided on the samba.org site (http://us3.samba.org/samba/ftp/bin-pkgs/RedHat/SRPMS/samba-3.0.4 -1.src.rpm). My OpenAFS version is 1.2.11, rpms (openafs-1.2.11 and openafs-devel-1.2.11) provided from openafs.org. It compiles fine if I omit the --with-fake-kaserver configure option. When it is added, this is the result: Compiling smbd/files.c In file included from /usr/kerberos/include/profile.h:149,...

.....> 22-Jul-2008 08:03 6k aiksaurus-gtk-1.2.1-..> 22-Jul-2008 08:03 39k aiksaurus-gtk-devel-..> 22-Jul-2008 07:59 5k cairo-1.6.4-1.i386.rpm 17-Jul-2008 07:23 554k cairo-debuginfo-1.6...> 22-Jul-2008 07:59 904k cairo-devel-1.6.4-1...> 22-Jul-2008 08:02 168k dkms-openafs-1.4.7-1..> 22-Jul-2008 08:00 958k dvipdfm-0.13.2d-30Ce..> 22-Jul-2008 08:00 135k dvipng-1.9-30Centos5..> 22-Jul-2008 08:00 103k emacs-22.2-4Centos5...> 22-Jul-2008 08:01 2.0M emacs-auctex-11.85-8..> 22-Jul-2008 08:09 500k emacs-auctex-doc-11...> 22-Jul-2008 08:09...

...ution issues with Java, correct? It's a Sun problem (a typical thorn for Red Hat in general), not a Red Hat one. > part of cluster suite for another, included. > Lessee, > https://www.scientificlinux.org/distributions/30x/features/ is the reference. > GFS, Eclipse, Cluster Suite, OpenAFS, ksh93, a set of 'tweak' RPMs (my > favorite being the serial console tweak RPM). Red Hat is pushing to get GFS in the stock kernel. They bought out Sistina for a reason, to keep it GPL. These things don't happen overnight. ;-> GFS was introduced as an add-on, and probably wil...

...d by a separate process, which can be forked and execd by the sshd and passed the environment which may have a KREB5CCNAME pointing at the Kerberos ticket cache Other parameters such as the home directory could also be passed. This would then allow simple code in OpenSSH that does not depend on OpenAFS, Hiemdal or MIT code to fork/exec the process that does all the work. This would be called by the process that would eventially become the user's shell process and is run as the user. OpenSSH could be built on systems that may or may not have AFS installed and run on a system with or witho...

...lume using current version of Samba. The issue is how to get Samba pass correct kerberos ticket on opening the AFS volume. Having Samba to have root access over AFS is not an option as we need the AFS permission to still apply. Upon searching, the most recent info I can get is this thread from OpenAFS list which does not end with fully working configuration: https://lists.openafs.org/pipermail/openafs-info/2014-August/thread.html#40892 Thanks! -- ____ ____ ____ ____ (stephan paul) Arif Sahari Wibowo /___ /___/ /___/ /___ http://www.arifsaha.com/ ____/ / / / ____/

Okay I don't think what I want to do is possible but here goes. I want to deploy a samba domain for my windows clients, but I want samba to use AFS on the back end. But AFS requires kerberos to get tickets and tokens. So is there anyway to make this work. I personally don't care if samba accepts kerberos tickets from the client or not, but a ticket and AFS token will need to be

...d assume it is pretty safe. So, going backwards, I've searched for a feature that would allow one to run a process **before** `rsync` attempts any `chroot`, `chdir`, `setuid`, etc. Unfortunately `pre-xfer exec` executes after all of those... My particular use-case was exposing via `rsync` an OpenAFS volume which requires (AFS) authentication. Without going to in-depth, OpenAFS introduces (in the kernel) a PAG (`Process Authentication Group`) context, which allows the same user (or multiple users) to use various credentials. Therefore each new `rsync` process will start with a new PAG, and b...

Hi. I'm trying to find a solution for our windows clients. I will explain my situation. We have kerberos 5 (mit) kdc, openafs without kaserver (authentication using kerberos), openldap, everything on debian stable servers. What do our unix/linux clients do? They authenticate over kerberos (pam), gain tickets and consequently gain the afs token (krb5afs or openafs_session), call ldap and find their home under /afs/ce...

Hi. I'm trying to find a solution for our windows clients. I will explain my situation. We have kerberos 5 (mit) kdc, openafs without kaserver (authentication using kerberos), openldap, everything on debian stable servers. What do our unix/linux clients do? They authenticate over kerberos (pam), gain tickets and consequently gain the afs token (krb5afs or openafs_session), call ldap and find their home under /afs/ce...

Greetings, I'm working on the infrastructure of a medium size client/server environment using an Active Directory running on Windows Server 2003 for central authentication of users on linux clients. Additionally OpenAFS is running using Kerberos authentication through Active Directory as well. Now I want to grant users remote access to their AFS data by logging in into a central OpenSSH server running on linux. As authentication at the Active Directory works well when logging in locally on the linux clients usi...

Howdy list, Sorry if this is a frequently discussed topic, or an off-topic question, but I couldn't find much info about my question by performing quick searches in the archives, and my question is pretty tightly related to security... Background: =========== I have a number of FreeBSD machines. Most are 4.x, but a few are 5.x (mainly the testing/devel machines). I also have a single Red

...r/local/ssl users could log into their machines via OpenSSH, and through PAM, an AFS token would be generated. After upgrading OpenSSH, tokens are no longer generated, and users must run klog to authenticate to AFS. Please contact me if you need more information. This issue has been discussed at OpenAFS as well: https://lists.openafs.org/pipermail/openafs-info/2003-September/010738.html Thanks for your time and consideration, Ian ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.

Hello all, After setting up a Solaris 10 machine with ZFS as the new NFS server, I''m stumped by some serious performance problems. Here are the (admittedly long) details (also noted at http://www.netmeister.org/blog/): The machine in question is a dual-amd64 box with 2GB RAM and two broadcom gigabit NICs. The OS is Solaris 10 6/06 and the filesystem consists of a single zpool stripe

Redudancy and recovering from a mailstore failure is one of the concerns I am trying to address where I work. Any plans to have Dovecot store emails in a database? NAS/SAN devices which do automatic replication to a second device are extremely expensive. I also don't see any distributed filesystem which is mature and available for the OS we use (FreeBSD). I recall at one point, many

Hi all. I'm using a CentOS 6.8 VM to do volunteer builds for an open source project. I want to build Pale Moon with a gtk2 library older than 2.24, to allow people with older linuxes to run it. Short summary, if built against version gtk2-2.24 and/or higher, the binary will use a function that does not exist in gtk2-2.23 and lower. Net result is that the program dies with an