Go to file
Christof Hanke 2617ef7613 Accepting request 630332 from home:hauky:branches:filesystems
- Fix 32Bit build by adding 
  commit 554176bd236d772d670df9bdd2496facd5a4209a as
  use_timespec64_for_kernel_4.18.patch
- Update to 1.8.1 
- Remove backporting patches for AArch64 build:
  * add_support_fo_arm64_linux26.patch
  * dont_require_AFS_SYSCALL.patch
  * add_AFS_STRINGIZE_macro.patch
  * avoid_double_param_in_arm64_kernel.patch
- adjust building of KMP to new kernels (see boo 1098050)
  add patch add_arch_to_linux_kernel_make.patch for this
- add libtirpc-devel to BuildRequires:
- minor cleanups 
- Update to 1.8.0
- Fix AArch64 build by updating spec and backporting patches:
  * add_support_fo_arm64_linux26.patch
  * dont_require_AFS_SYSCALL.patch
  * add_AFS_STRINGIZE_macro.patch
  * avoid_double_param_in_arm64_kernel.patch
- remove package krb5-mit. It contained binaries for server and client.
  Besides, client and server already had an implicit dependency on krb5.
  Put the binaries to client and server-package respectively.
- Remove openafs-1.8.x.heimdal.patch and everything heimdal-related.
  SUSE does not provide a proper heimdal and it's untested for a long
  time.
- fdupes: use symlinks instead of hardlinks. Do not fdupe
  /etc and /var
- fix dependencies between packages, so that fuse-client
  can be installed.
- cleanup old sys-v sysconfig files and other minor fixes
- fix unit file for fuse-client
- build fuse-client unconditionally.
- do not build KMP on unsupported architectures so that overall
  build succeeds. 
- rename binary backup to afs_backup.
  - rename man pages and prefix "backup" in content
- prefix "scout" by "afs_" in man-page     
- remove unnecessary macro indirection %ARCH
- replace hard-coded paths by macros 
- make whitespace more consistent
- minor syntax and typo fixes
- Replace old $RPM_* vars (most of them) by macros.
- Replace unnecessary macro indirections like %bindir by %_bindir.
- cleanup last cleanup: also remove rc.* files
- cleanup package for Factory:
   - rename package to openafs.
   - remove sys-v init stuff.
   - apply recommendations given in Request 581009
- add compat macro for new _fillupdir macro introduced in Nov 2017
- update to 1.8.0pre5 
- update to 1.8.0pre4
- add patch for ncurses detection 
- update to 1.8.0pre3
- add integrity check of tar-balls 
- do not strip binaries on install
- fix %postun server 
- update to 1.8.0pre2
- use a preamble-file for KMP
- sort/cleanup/beautify spec-file 
- spec-file: 
  + use hardlinks for fdupes to provide correct header files in
             kernel-source
  + minor bugfixes, reorganization 
- rename changes file to openafs18.changes
- rename package to openafs18-* so they don't override 
  stable openafs-1.6 ones
- move ld.so to main package -- was in server-packages 
- enable building of KMP
- make openafs-krb5-mit package dependend on openafs-client package
- add ld.so - config to main package 
- remove pam, is not build on x86_64 and i596 
- first version of 1.8
- remove docs package, put man pages in induvidual packets  
- remove layout-patch, deal with this in spec file directly
- add new ChangeLog 
- update to version 1.6.20 
- add missing RemainAfterExit=true to client-systemd unit. 
- update to version 1.6.19 
- Update README: Change SuSE to SUSE.
- update to version 1.6.18.2 
- update to version 1.6.18.1 
- update to version 1.6.18 
- update to version 1.6.17 
- cleanup
- update to version 1.6.16
- remove fix for configure for new ncurses, now dealt with in 
  shipped package
- start using change.log again
- fix configure test for new ncurses 
- update to version 1.4.12.1 
- converted neededforbuild to BuildRequires
- fixed kernel module to compile
- add openafs.SuidCells and openafs.CellServDB
- cleanup SPEC-file(s)
- finally adopt
	sysconfig.transarcmode.openafs-client
	rc.transarcmode.afs-server
	rc.transarcmode.afs-client
  to transarc mode; and fix a small typo in
	rc.defaultmode.afs-client
- set "%defattr(-,root,root)" for transarcmode-file-lists
- fix lib64 build problem in transarcmode
- introduce transarc-mode and default-mode
- introduce "options"
- build for SLES 9
- with heimdal krb5 support
- enable-largefile-fileserver
- updated to 1.4.0
- fixed dangerous compiler warnings
- don't build as root 
- fixed kernel module to build
- fixed sysconfig file name
- updated to 1.3.85
- used LSB conforming init script names
- Update for linux 2.6.13.
- gcc4 fixes in kernel module
- fixed to compile with gcc4
- fixed memory leaks and 64bit fixes backported from 1.3.79
- updated README.SUSE
- updated to 1.3.78 
- fixed afs.h to be usable from userspace [#50283]
- updated to latest snapshot
- added requres: kernel-nongpl [#45167]
- fixed kernel module oops [#44618]
- use kernel module from openafs 1.3.70 to support kernel 2.6
- updated to 1.2.11
- added note that client for kernel 2.6 is not available
- added pam-devel to neededforbuild 
- Added hack if no MTU came from userspace.
- Removed superflous ppc64 patch part.
- ppc64 port added (status: no longer crashes, talks to the network,
  but not successfully).
- Change headerfiles to make it possible to do a ppc -> ppc64 crosscompile. 
- build with -fPIC on ppc32
- patch from cvs to use AllocLargeSpace for struct osi_file to prevent
  oopses with some kernel configurations
- added option DYNROOT to sysconfig and enabled it by default [#27205]
- added cleanup before module build [#29649]
- fixed possible segfault
- set permissions of /var/lib/openafs to 700
- README.SuSE fixes
- use ghost for /afs, the directory is created by init-script
- fixed README.SuSE
- moved all static libraries to /usr/lib/afs, fixes conflict with libdes
- used default value for THIS_CELL_SERVER_NAME
- removed old patches
- fixed a bug in init script
- updated to final 1.2.10
- updated to 1.2.10-rc4
- do not destroy CellServDB even if REGENERATE_CELL_INFO=yes
- fixed to compile on x86_64
-  use %_lib where it was missing
- fixed conflicts in filelist
- improved init scripts
- added README.SuSE
- fixed init scripts [#27426]
- installed man pages
- add /usr/src/kernel-modules to the file list
- Fix SMP configuration detection.
- rework filelists:
  - package/remove unpackaged files
  - move some files into the server & client subpackages
  - use %defattr
- fix deprecated tail -1 syntax (fixes building the kernel module)
- updated to 1.2.9
- added DATA_ENCRYPTION option to sysconfig
- x86_64: add -lresolv, -fPIC
- fix lib path on all 64 bit platforms
- added sysconfig metadata
- added dirs /afs, /etc/openafs, /var/lib/openafs to filelist
- workaround broken -lresolv detection, lib64 fixes
- fixed multiline strings in kernel module
- updated to 1.2.8
- improved init script
- included errno.h
- fixed multiline strings
- first version of init scripts
- initial draft of a package. Lots of stuff missing, like init
  scripts, or the kerberos 5 migration toolkit.

OBS-URL: https://build.opensuse.org/request/show/630332
OBS-URL: https://build.opensuse.org/package/show/filesystems/openafs?expand=0&rev=22
2018-08-18 23:32:20 +00:00
.gitattributes Accepting request 586757 from home:hauky 2018-03-14 17:57:49 +00:00
.gitignore Accepting request 586757 from home:hauky 2018-03-14 17:57:49 +00:00
add_arch_to_linux_kernel_make.patch Accepting request 619443 from home:hauky:branches:filesystems 2018-06-27 19:41:18 +00:00
ChangeLog Accepting request 630053 from home:hauky:branches:filesystems 2018-08-18 08:24:54 +00:00
kernel-source.build-modules.sh Accepting request 586757 from home:hauky 2018-03-14 17:57:49 +00:00
ld.conf.openafs Accepting request 586757 from home:hauky 2018-03-14 17:57:49 +00:00
logrotate.openafs-server Accepting request 586757 from home:hauky 2018-03-14 17:57:49 +00:00
openafs-1.8.1-doc.tar.bz2 Accepting request 630053 from home:hauky:branches:filesystems 2018-08-18 08:24:54 +00:00
openafs-1.8.1-doc.tar.bz2.md5 Accepting request 630053 from home:hauky:branches:filesystems 2018-08-18 08:24:54 +00:00
openafs-1.8.1-doc.tar.bz2.sha256 Accepting request 630053 from home:hauky:branches:filesystems 2018-08-18 08:24:54 +00:00
openafs-1.8.1-src.tar.bz2 Accepting request 630053 from home:hauky:branches:filesystems 2018-08-18 08:24:54 +00:00
openafs-1.8.1-src.tar.bz2.md5 Accepting request 630053 from home:hauky:branches:filesystems 2018-08-18 08:24:54 +00:00
openafs-1.8.1-src.tar.bz2.sha256 Accepting request 630053 from home:hauky:branches:filesystems 2018-08-18 08:24:54 +00:00
openafs-1.8.x.ncurses6.patch Accepting request 586757 from home:hauky 2018-03-14 17:57:49 +00:00
openafs-client.service Accepting request 594123 from home:hauky:branches:filesystems 2018-04-07 07:37:28 +00:00
openafs-fuse-client.service Accepting request 594123 from home:hauky:branches:filesystems 2018-04-07 07:37:28 +00:00
openafs-server.service Accepting request 586757 from home:hauky 2018-03-14 17:57:49 +00:00
openafs.cacheinfo Accepting request 586757 from home:hauky 2018-03-14 17:57:49 +00:00
openafs.CellAlias Accepting request 586757 from home:hauky 2018-03-14 17:57:49 +00:00
openafs.changes Accepting request 630332 from home:hauky:branches:filesystems 2018-08-18 23:32:20 +00:00
openafs.spec Accepting request 630053 from home:hauky:branches:filesystems 2018-08-18 08:24:54 +00:00
openafs.SuidCells Accepting request 586757 from home:hauky 2018-03-14 17:57:49 +00:00
openafs.ThisCell Accepting request 586757 from home:hauky 2018-03-14 17:57:49 +00:00
preamble Accepting request 619531 from home:hauky:branches:filesystems 2018-06-28 09:17:29 +00:00
README.SUSE.openafs Accepting request 586757 from home:hauky 2018-03-14 17:57:49 +00:00
RELNOTES-1.8.1 Accepting request 630053 from home:hauky:branches:filesystems 2018-08-18 08:24:54 +00:00
sysconfig.openafs-client-systemd Accepting request 586757 from home:hauky 2018-03-14 17:57:49 +00:00
sysconfig.openafs-fuse-client Accepting request 586757 from home:hauky 2018-03-14 17:57:49 +00:00
sysconfig.openafs-fuse-client-systemd Accepting request 586757 from home:hauky 2018-03-14 17:57:49 +00:00
sysconfig.openafs-server-systemd Accepting request 586757 from home:hauky 2018-03-14 17:57:49 +00:00
use_timespec64_for_kernel_4.18.patch Accepting request 630053 from home:hauky:branches:filesystems 2018-08-18 08:24:54 +00:00

Here is described installation of openafs server and client on SUSE linux.

This text is based on AFS Quick Start Guide. The differences are:
  - paths are adapted to SUSE installation
  - uses Kerberos 5 authentization

Complete OpenAFS documentation is at http://openafs.org

SERVER SETUP
============

# choose an AFS cell name and a Kerberos realm name, the simplest setup is:
# - AFS cell name equal to DNS domain name
# - Kerberos realm name equal to uppercase AFS cell name 

# create a partition for AFS filesystem and mount it under /vicepa

# start bosserver
/usr/sbin/bosserver -noauth &

# setup basic cell information
bos setcellname your.afs.server your.cell.name -noauth 

# setup database servers processes
bos create your.afs.server ptserver simple /usr/lib/openafs/ptserver -cell your.cell.name -noauth
bos create your.afs.server buserver simple /usr/lib/openafs/buserver -cell your.cell.name -noauth
bos create your.afs.server vlserver simple /usr/lib/openafs/vlserver -cell your.cell.name -noauth

# If you want to use the old afs authentization (not recommended):
# bos addkey your.afs.server -kvno 0 -cell your.cell.name -noauth

# Authentication against heimdal krb5 server

# Here you can set up kerberos realm if you dont have any, 
# see documentation in package krb5-doc

# restart kdc
rckrb5kdc restart
rckrb524d restart

# create afs principal in kerberos database
kadmin.local
  add_principal afs@YOUR.KERBEROS.REALM     # create afs key, use random password
  ktremove -k /etc/krb5.keytab afs all      # delete old afs key if any
  
  # export the afs key to external keytab
  # note the key version number (kvno), you will need it later for asetkey
  ktadd -e des-cbc-crc:v4 afs@YOUR.KERBEROS.REALM 
  
  add_principal admin@YOUR.KERBEROS.REALM   # create admin principal
  
  quit # end kadmin.local
  
rm /etc/openafs/server/KeyFile # delete the old afs key file if any

# convert the afs key from /etc/krb5.keytab to /etc/openafs/server/KeyFile
# use <kvno> displayed by ktadd
asetkey add <kvno> /etc/krb5.keytab afs

# give admin the permissions to control bosserver
bos adduser your.afs.server admin -cell your.cell.name -noauth

# add admin to group system:administrators
pts createuser -name admin -id <user id> -cell your.cell.name -noauth
pts adduser admin system:administrators -cell your.cell.name -noauth

# restart bos server
bos restart your.afs.server -all -cell your.cell.name -noauth

# create fileserver processes
bos create your.afs.server fs fs /usr/lib/openafs/fileserver /usr/lib/openafs/volserver /usr/lib/openafs/salvager -cell your.cell.name -noauth

# create root volume
vos create your.afs.server /vicepa root.afs -cell your.cell.name -noauth

# restart bosserver with security enabled
rcopenafs-fileserver restart


CLIENT SETUP
============

IMPORTANT: Unfortunately, openafs client for linux kernel 2.6 has not reached 
stable state yet. There may be problems.

edit /etc/sysconfig/openafs-client, set at least
  REGENERATE_CELL_INFO="yes"
  THIS_CELL="your.cell.name"
  THIS_CELL_SERVER="your.afs.server"

  If you are configuring first afs server and the volume root.cell does not
  exist yet, you have to set also DYNROOT=no. After finishing the server 
  installaton it is better to change DYNROOT back to 'yes' as the client
  behaves better on startup with network outage.

# start afs client
rcopenafs-client start

# login as admin
kinit admin
aklog -d # convert Kerberos 5 ticket to AFS token

To enable transparent login via pam, install package pam_krb5
and add 'call_modules=krb5afs' to /etc/security/pam_unix2.conf
For details look at pam_krb5afs(5), pam_krb5afs(8) and pam_unix2(8) manpages.

Now you have working afs server and client. You can continue with chapter
"Configuring the Top Levels of the AFS Filespace" of AFS Quick Start Guide.