secure than the one in the OpenAFS documentation, but the OpenAFS
documentation provides useful background.
+Build Options
+
+ The OpenAFS servers have been built with --enable-supergroups, which
+ permits nesting of PTS groups. Be aware that the PT database created by
+ these packages is not compatible with servers not built with
+ --enable-supergroups if nested PTS groups are used. In other words, if
+ you need the openafs-dbserver package to interoperate with ptservers
+ that aren't built with this option, don't use this capability.
+
+ bosserver is built with --enable-bos-new-config. If
+ /etc/openafs/BosConfig.new exists when bosserver starts, it will be
+ renamed to /etc/openafs/BosConfig before the configuration file is
+ read. This allows queuing of changes to the configuration that will
+ take effect at the next restart.
+
Changes Relative to Stock OpenAFS
Long-time AFS users may be confused by the directory layout. The files
To distinguish between an SMP and a non-SMP kernel module package, use
--append_to_version; see README.modules for more information.
- The OpenAFS servers have been built with --enable-supergroups, which
- permits nesting of PTS groups. Be aware that the PT database created by
- these packages is not compatible with servers not built with
- --enable-supergroups if nested PTS groups are used. In other words, if
- you need the openafs-dbserver package to interoperate with ptservers
- that aren't built with this option, don't use this capability.
-
The OpenAFS servers have been patched to support listing up to four
realms in /etc/openafs/server/krb.conf. Any realms listed in that file
(all on one line, space-separated) will be treated as local for
the openafs-kpasswd package to get the administrative utilities for
managing those Kerberos accounts.
- -- Russ Allbery <rra@debian.org>, Mon, 17 Dec 2007 18:22:35 -0800
+ -- Russ Allbery <rra@debian.org>, Mon, 17 Dec 2007 18:29:42 -0800
Barney Sowood for tracking down the patch. (Closes: #448380)
* Apply upstream patch from the 1.5 series to allow multiple realms to
be listed in the server krb.conf and hence treated as local.
+ * Build bosserver with --enable-bos-new-config. On startup, if
+ BosConfig.new exists, it will be renamed to BosConfig before the
+ configuration is read. (Closes: #453398)
* Add more debugging and bug reporting instructions to README.Debian.
* Mention in README.Debian that the server is built with supergroups
enabled and with the multiple local realm patch. (Closes: #453399)
* Update to standards version 3.7.3 (no changes required).
- -- Russ Allbery <rra@debian.org> Mon, 17 Dec 2007 18:23:26 -0800
+ -- Russ Allbery <rra@debian.org> Mon, 17 Dec 2007 18:28:35 -0800
openafs (1.4.5.dfsg1-1) unstable; urgency=low
--with-afs-sysname=$(SYS_NAME) --disable-kernel-module \
--prefix=/usr --mandir=\$${prefix}/share/man \
--sysconfdir=/etc --libexecdir=/usr/lib \
- --localstatedir=/var/lib --enable-supergroups \
- --enable-largefile-fileserver --enable-debug --enable-lwp-debug \
- --with-krb5-conf=/usr/bin/krb5-config \
+ --localstatedir=/var/lib --with-krb5-conf=/usr/bin/krb5-config \
+ --enable-supergroups --enable-largefile-fileserver \
+ --enable-bos-new-config \
+ --enable-debug --enable-lwp-debug \
$(DEBIAN_OPT_FLAGS) $(SYSTEM)
chmod a+x src/libafs/make_kbuild_makefile.pl
touch configure-stamp