* Fix a typo in debian/kern-sysname that caused openafs-modules-source
to still assume all ia64 systems used Linux 2.4. Thanks, Jakob
Haufe. (Closes: #432344)
Russ Allbery [Wed, 27 Jun 2007 14:33:29 +0000 (14:33 +0000)]
* Clean up more completely after a purge of openafs-fileserver. Remove
the files created by the server in /var/lib/openafs/local, remove
KeyFile and CellServDB.old from /etc/openafs/server, and remove
BosConfig from /etc/openafs.
Russ Allbery [Thu, 21 Jun 2007 14:15:59 +0000 (14:15 +0000)]
* Use LSB logging functions for openafs-fileserver and support passing
arguments to bosserver in /etc/default/openafs-fileserver by setting
DAEMON_ARGS.
Russ Allbery [Thu, 21 Jun 2007 09:34:55 +0000 (09:34 +0000)]
Also drop --pidfile from the openafs-fileserver init script, since this
option is for when the daemon writes out its own PID file and bosserver
doesn't do that.
Russ Allbery [Thu, 21 Jun 2007 09:31:35 +0000 (09:31 +0000)]
Also drop --pidfile from the openafs-fileserver init script, since this
option is for when the daemon writes out its own PID file and bosserver
doesn't do that.
Russ Allbery [Tue, 19 Jun 2007 11:02:27 +0000 (11:02 +0000)]
* Move upserver and upclient to /usr/lib/openafs (from /usr/sbin) to
match upstream's layout and for consistency with the other servers run
via bosserver.
Russ Allbery [Tue, 19 Jun 2007 10:59:08 +0000 (10:59 +0000)]
* Move /etc/openafs/server-local to /var/lib/openafs/local. Most of the
files here are automatically generated and hence not configuration
files, and the file server has to write to this directory to start (so
having it in /etc breaks read-only / file systems). Thanks, Alexei
Sheplyakov. (Closes: #405697)
Russ Allbery [Tue, 12 Jun 2007 18:41:41 +0000 (18:41 +0000)]
* Apply upstream patches for Linux 2.6.22 support. (Closes: #428401)
* Apply upstream patch to fix the AFS /proc structure under Linux
2.6.22.1 and later.
Russ Allbery [Sun, 20 May 2007 04:59:04 +0000 (04:59 +0000)]
* Go back to using krb5-config. The dependency problem has now been
fixed on all platforms in the krb5 package and this is the preferred
upstream method.
Russ Allbery [Thu, 17 May 2007 23:23:23 +0000 (23:23 +0000)]
Upstream fixed the problem that was causing these files to be generated
in the distribution tarball a while back and we've just been carrying
them via merges. Drop them completely.
Russ Allbery [Thu, 17 May 2007 01:14:14 +0000 (01:14 +0000)]
* When afsd is started with -rmtsys, it starts another process that afsd
-shutdown doesn't kill. Update the init script to kill this process
on stop. (Closes: #405982)
Russ Allbery [Wed, 16 May 2007 23:55:36 +0000 (23:55 +0000)]
* Always generate a UUID on client startup even if for some reason we
don't think we have any network interfaces. Otherwise, the client
will use an all-zeroes UUID, which will collide with every other
client with the same problem.
Russ Allbery [Wed, 16 May 2007 23:53:15 +0000 (23:53 +0000)]
* Don't use krb5-config to get a library list. It runs the risk of
encoding unnecessary library dependencies. Instead, hard-code the
flags and libraries we actually need. (Closes: #424448)
* Debian kernels as of 2.6.20 enable CONFIG_PARAVIRT, which redefines
several core kernel calls as redirects through a paravirt.ops table
that's marked GPL-only. This breaks all non-GPL modules that used
those (previously generally exported) calls even indirectly. Apply a
hack to switch from spin_lock_irq to spin_lock_irqsave to avoid the
paravirt redirection so that the module will build.
* Enable ucontext for all Linux builds with glibc 2.4 or later, not just
with i386 and amd64. Newer versions of glibc change internal
structures in ways that cause the old LWP code to have stack
overflows. (Closes: #419903)
* When determining the AFS sysname for kernel module builds, add
explicit cases for 2.6 kernels for all architectures that support them
(everything except non-64-bit sparc_linux). Fixes build problems with
ia64 and probably other architectures. Thanks to Ippokratis Pandis
for the debugging help. (Closes: #411818)
The missing aclocal looks like it also caused the failures on SPARC,
since it meant we missed the change that forced SPARC to use the right
thread flags.
* Build-depend on Automake since we run aclocal during the build. Not
having aclocal caused local patches to osconf.m4 to not be effective,
leading to the wrong compiler flags for shared libraries. Thanks to
Frank Lichtenheld for the report. (Closes: #416398)
Russ Allbery [Tue, 27 Mar 2007 01:54:30 +0000 (01:54 +0000)]
* Remove the rx_Init calls in the PAM module. The internal counters
that had to be initialized that way have been removed.
* Now that we're running regen.sh as part of the build process, only
patch the Autoconf source files and not the generated output to make
the diff easier to audit.
Russ Allbery [Tue, 27 Mar 2007 01:14:32 +0000 (01:14 +0000)]
* New upstream release. (Closes: #415699)
- Support newer Linux kernels. (Closes: #409797, #410120)
- Add aklog fallbacks for null realms to support the referral
capability in MIT Kerberos 1.6 and later. (Closes: #410314)
Russ Allbery [Mon, 19 Mar 2007 21:06:14 +0000 (21:06 +0000)]
* SECURITY: Apply upstream patch to disable setuid status on all cells
by default. Prior versions of AFS defaulted to honoring setuid bits
in the local cell, but since unauthenticated file access in AFS is
unencrypted, an attacker could forge packets from an AFS file server
to synthesize a setuid binary in AFS.
Russ Allbery [Sun, 18 Mar 2007 02:03:08 +0000 (02:03 +0000)]
* Apply upstream fix to show reasonable free space numbers for AFS in
df. Without this fix, some programs which use df to check free space
may think that directories in AFS are full and prevent the user from
attempting to write files. (Closes: #415294)
Russ Allbery [Thu, 15 Mar 2007 01:34:20 +0000 (01:34 +0000)]
* Apply upstream fix to use a single high-numbered group for the PAG on
2.6 kernels and sort the group properly. Fixes AFS-caused group
ordering problems that could lead the kernel to ignore some group
membership for users. (Closes: #414911)
Russ Allbery [Mon, 6 Nov 2006 04:23:33 +0000 (04:23 +0000)]
* Document (at least partially) AFS's mapping of Kerberos v5 principal
names to Kerberos v4 format in the aklog man page. Thanks, Daniel
J. Priem. (Closes: #394832)
* Document that aklog -setpag may not always work.
Russ Allbery [Wed, 4 Oct 2006 18:52:39 +0000 (18:52 +0000)]
* The UTS_RELEASE string is no longer found in linux/version.h in
2.6.18, so fall back on looking in config/kernel.release. Thanks to
Marcus Watts for the patch.
OpenAFS strips everything except for the fileserver and volserver, so
for right now only provide debugging information for those two binaries.
Document the new debugging support in README.Debian.
Russ Allbery [Thu, 15 Jun 2006 14:21:48 +0000 (14:21 +0000)]
r2165@windlord: eagle | 2006-06-07 12:56:09 -0700
* Use a better method of optionally running make distclean.
* Add build-arch and build-indep targets, just in case.
Russ Allbery [Thu, 15 Jun 2006 14:21:36 +0000 (14:21 +0000)]
r2164@windlord: eagle | 2006-06-07 12:52:30 -0700
* Regenerate the man pages on build since the pre-generated ones were
done with a very old version of pod2man.
Russ Allbery [Thu, 15 Jun 2006 14:21:13 +0000 (14:21 +0000)]
r2162@windlord: eagle | 2006-06-07 12:09:03 -0700
* Update debconf templates to follow the best practice recommendations
from the Developer's Reference.
Russ Allbery [Thu, 15 Jun 2006 14:20:59 +0000 (14:20 +0000)]
r2161@windlord: eagle | 2006-06-07 12:01:55 -0700
* When creating a new file server in afs-newcell, use a set of tuning
flags from Harald Barth rather than relying on the defaults. This
doesn't help with general bos create; long term, the defaults need to
be fixed.
* Add a note in README.servers about fileserver tuning options.
Russ Allbery [Thu, 15 Jun 2006 14:20:34 +0000 (14:20 +0000)]
r2159@windlord: eagle | 2006-06-07 11:27:08 -0700
* Include all of AFS's local XDR implementation in the build for
shlibafsrpc, fixing problems with undefined symbols in the PAM module
on AMD64.
* Exit successfully in the openafs-client init script if no module is
installed, since otherwise openafs-client will fail to install until
one builds a module. This restores previous accidental behavior due
to a bug in debhelper. (Closes: #362695)
Russ Allbery [Wed, 29 Mar 2006 20:56:10 +0000 (20:56 +0000)]
* Since 2.6 is the supported kernel for etch, build the userspace with
a sysname of *_linux26 where supported. This only affects the sys
command. (Using livesys instead is better.) (Closes: #358118)