Russ Allbery [Thu, 6 Oct 2005 23:01:24 +0000 (23:01 +0000)]
* Install afsd in /sbin rather than /usr/sbin. While putting /usr in
AFS isn't as common as it once was, no reason to make it harder than
it needs to be.
* libpam-openafs-kaserver must depend on openafs-client, not just
recommend it, since acquiring tokens requires that the client be
running.
* Expand README.Debian and include information about PAM configuration.
* Link libpam-openafs-kaserver's doc directory to openafs-client.
* Remove the init script check of the cache file system and instead
improve the check in afsd. The init script check used stat, which is
in /usr/bin and therefore not fair game for init scripts.
* When kill_all_afs is enabled in /etc/openafs/afs.conf, only kill AFS
processes if the runlevel is 0 or 6. You really only want this when
the system is shutting down. (Closes: #325347)
Russ Allbery [Fri, 26 Aug 2005 05:19:41 +0000 (05:19 +0000)]
Clean up error handling and reporting a little bit more. Add a warning
before creating the pt database, saying to expect a few harmless errors.
Add an unwind for deleting the root.afs volume, in case starting the
client fails.
Russ Allbery [Wed, 24 Aug 2005 20:44:41 +0000 (20:44 +0000)]
Pass -wait to bos shutdown to make sure all of the processes have exited
before moving on. Otherwise, a file server that's slow to shut down
causes the bos delete call to fail.
Russ Allbery [Tue, 23 Aug 2005 06:19:31 +0000 (06:19 +0000)]
* Fill in the server CellServDB with information about the local cell,
if available in the client CellServDB, rather than always initializing
it to contain just the name of the cell.
Also reformat openafs-fileserver.postinst to make it a bit easier to
read.
Russ Allbery [Thu, 18 Aug 2005 20:10:48 +0000 (20:10 +0000)]
* Remove the openafs-client warning against dynroot for the first system
in a cell now that afs-rootvol can cope. Provide some basic
documentation of the CellAlias syntax in that message until we have a
real man page.
Russ Allbery [Thu, 18 Aug 2005 19:12:03 +0000 (19:12 +0000)]
Cope with duplicate entries in /etc/openafs/CellServDB. This shouldn't
happen in practice, but if it does for some reason, it's easy to avoid
making it a problem.
Russ Allbery [Thu, 18 Aug 2005 17:36:20 +0000 (17:36 +0000)]
* Improve the documentation and scripts for setting up new servers or a
new cell. afs-rootvol can now be run from a client configured to use
dynroot. afs-newcell generates the server CellServDB directly to work
around oddities with bos addhost. Thanks to Fahemm Mitha and Sergio
Gelato for analysis and patches. (Closes: #322638)
Russ Allbery [Sun, 14 Aug 2005 04:15:05 +0000 (04:15 +0000)]
Redo all of the patch sets and move them into a subdirectory. Add
explanations of the status of the various patches relative to upstream.
Add the new PAM patch.
Russ Allbery [Fri, 12 Aug 2005 04:00:29 +0000 (04:00 +0000)]
Remove the old PAM patches and the makefile logic to build the PIC
objects. Also remove some other now-unnecessary divergences from
upstream to reduce the size of the diff.
Russ Allbery [Thu, 11 Aug 2005 17:40:23 +0000 (17:40 +0000)]
Point readers at the comments in /etc/openafs/afs.conf as well. Update
the status of the man page work. Make slight updates to the wording and
capitalization in a few other places.
Russ Allbery [Thu, 11 Aug 2005 17:34:35 +0000 (17:34 +0000)]
- Add an AFS_PRE_SHUTDOWN hook called before shutting down the client.
- Provide a shutdown hook, disabled by default, that kills all
processes with files open in /afs. Enabling this ensures a more
reliable clean shutdown and umounting of the cache partition, but
may not always be what the admin wants.
This duplicates the functionality in the upstream init script (where it
calls /usr/vice/etc/killafs if present), but in a more general way and
with better documentation.
Russ Allbery [Thu, 11 Aug 2005 07:58:44 +0000 (07:58 +0000)]
* Rework how PAM modules are handled.
- Build against the pthread-aware libraries. (Closes: #297804)
- Use the shared library objects instead of building separate PIC
objects, eliminating the need for many Makefile modifications.
- Include pam_afs.krb.so as well. (Closes: #165972)
This is still a work in progress, but I want to get it into the repository
as a checkpoint since everything seems to work. Remaining to be done is
the cleanup of the old Makefile rules to build the pic directory, which
should no longer be needed.
Tested with unstable ssh-krb5 and login so far, with no problems.
Russ Allbery [Thu, 11 Aug 2005 01:35:25 +0000 (01:35 +0000)]
* Don't include the empty /usr/src/modules directory in
openafs-modules-source, only the tarball, to match how other kernel
module source packages behave. (Closes: #244685)
Russ Allbery [Thu, 11 Aug 2005 01:12:16 +0000 (01:12 +0000)]
- Update the default client options based on the cache tuning synopsis
by Jeffrey Hutzelman, including setting a larger chunksize for all
default option sets. (Closes: #303944)
Russ Allbery [Thu, 11 Aug 2005 00:29:20 +0000 (00:29 +0000)]
* Improve the openafs-client init script.
- Choose the client options based on the cache size by default.
- Move the code to build the options string to the init script from
afs.conf so that afs.conf is pure configuration.
- Improve the readability of the output on start.
- Significantly improve the comments in afs.conf.
- Remove the code to set -nosettime as it's now the default.
* Move the openafs-client init script and afs.conf file we use into the
debian directory rather than patching the upstream version. We've
diverged so much that there's no point in continuing to merge changes.
Russ Allbery [Wed, 10 Aug 2005 21:48:42 +0000 (21:48 +0000)]
* Diagnose unsupported architectures earlier and with a clearer error.
* Suppress error messages from a missing kernel version header since
they occur normally when doing the regular package build and are just
confusing. Instead, print an error in kern-sysname and abort if the
kernel version could not be determined.
* Make bosserver less picky about permissions and remove the attempt to
set /etc/openafs/server-local not-world-readable since dh_fixperms was
overridding it anyway. (Closes: #312921)
Russ Allbery [Thu, 12 May 2005 06:03:05 +0000 (06:03 +0000)]
* Repackage upstream to remove MacOS-specific files covered by the APSL.
Remove the WINNT directory to save space since we have to repackage
anyway. Provide a get-orig-source target to do the repackaging.
* Update copyright with more complete information from upstream
src/LICENSE.