headers
Henry B. Hotz | 1 May 2003 01:33
Picon
Picon
Favicon

Re: ptserver Access Routines?

At 11:45 PM +0200 4/30/03, Harald Barth wrote:
>Nice, friendly, short functions.

That's a relative statement.  It could be worse.

For getpwnam() looks like I need to do pts_name_to_id () followed by 
examine_id()?

For getgrouplist() I'll need to PR_ListElements() and decode those list types?

OK, I'll concede that there are some nice routines in there and I can 
make some sense of them even without many comments.  It's better than 
the native Kerberos 5 routines, I think, and MIT has a manual.

Now, how many of those libraries do I need. . .
--

-- 
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz <at> jpl.nasa.gov, or hbhotz <at> oxy.edu
Permalink | Reply | 0 comments |
headers
Joe Izen | 7 May 2003 02:20
Favicon

Installation help for OS X 10.2 and arla-0.35.11

I've installed the 0.35.111 binary for OS 10.2
and run the ArlaConfig and modified /usr/arla/etc/ThisCell to point 
to slac.stanford.edu

tried following the advice in a previous thread about what to do 
next.  Looks like I needed the Kerberos extras so I installed them, 
but I'm not sure of what to do with the Kerberos configuration file.

Advice would be greatly appreciated.  Thanks!  -Joe
Permalink | Reply | 2 comments |
headers
Thomas Jordan | 7 May 2003 16:24
Favicon

Re: Installation help for OS X 10.2 and arla-0.35.11

Hi Joe,

The edu.mit.kerberos file is in /LIbrary/Preferences/ and should 
contain references to local resources for kerberos at SLAC. Mine looks 
like:

*******
[Dix:/etc] jordant% more /Library/Preferences/edu.mit.kerberos
[libdefaults]
         default_realm = FNAL.GOV
         ticket_lifetime =1560
         checksum_type = 1
         ccache_type = 2
         default_tkt_enctypes = des-cbc-crc
         default_tgs_enctypes = des-cbc-crc

[realms]
         FNAL.GOV = {
                 kdc = krb-fnal-1.fnal.gov:88
                 kdc = krb-fnal-2.fnal.gov:88
                 kdc = krb-fnal-3.fnal.gov:88
                 kdc = krb-fnal-4.fnal.gov:88
                 kdc = krb-fnal-5.fnal.gov:88
                 admin_server = krb-fnal-admin.fnal.gov
                 default_domain = fnal.gov
                 auth_to_local = RULE:[1:$1 <at> $0](.* <at> FNAL\.GOV)s/ <at> .*//
                 auth_to_local = DEFAULT
         }
         PILOT.FNAL.GOV = {
                 kdc = krb-pilot-1.fnal.gov:88
(Continue reading)

Permalink | Reply | 1 comment |
headers
Henry B. Hotz | 8 May 2003 00:12
Picon
Picon
Favicon

Re: Installation help for OS X 10.2 and arla-0.35.11

At 9:24 AM -0500 5/7/03, Thomas Jordan wrote:
>SLAC people may be used to a file called krb.conf. If they can help 
>you find that file for SLAC, then rename it on your OSX machine to 
>/Library/Preferences/edu.mit.kerberos.

Hmmm.  Actually you want krb5.conf.  krb.conf has a completely 
different format and is for Kerberos 4, not Kerberos 5.

Most likely you can take the specific realm information out of the 
example just posted and replace it with the information in your 
CellServDB file and get it to work.  A good test if you get it right 
is you can kinit with your AFS account and klist will show tickets.
--

-- 
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz <at> jpl.nasa.gov, or hbhotz <at> oxy.edu
Permalink | Reply | 0 comments |
headers
Karl Kleinpaste | 19 May 2003 19:43
X-Face

linux 2.4.20 won't load 0.35.12's xfs.o

Compiling 0.35.12 works fine on my rh73 system with RH's kernel
2.4.20-13.7 freshly installed.

But startarla can't insmod:
/usr/arla/bin/xfs.o: unresolved symbol sys_call_table
/usr/arla/bin/xfs.o: unresolved symbol get_empty_inode

What I find odd is that sys_call_table is even in /boot/System.map,
though it has changed from `D' to `d' since 2.4.18.  get_empty_inode
has disappeared since 2.4.18.

I tried backing out to an old arla, 0.35.6, and had the same problem.

Anyone know what happened to these symbols?  Is RH's (probably
modified) 2.4.20 a bad idea?
Permalink | Reply | 2 comments |
headers
Harald Barth | 19 May 2003 20:11
Picon
Picon
Favicon

Re: linux 2.4.20 won't load 0.35.12's xfs.o


> But startarla can't insmod:
> /usr/arla/bin/xfs.o: unresolved symbol sys_call_table
> /usr/arla/bin/xfs.o: unresolved symbol get_empty_inode

The kernel you are using hasn't sys_call_table exported.

There are three solutions to that problem:

      1. Use a version of OpenAFS or Arla that finds the
      sys_call_table anyway. If you want to run Arla, you
      must run one of the snapshots as there is no official
      0.36 release yet. I am happy with the 0.36 snapshot,
      others seem to be less. In Arla the code to find the
      syscall anyway is in nnpfs/linux/nnpfs_syscalls-lossage.c

      2. Use a kernel.org 2.4 kernel which has sys_call_table
         exported.

      3. Patch the export back into the RH kernel and build it
      yourself.

The discussion if sys_call_table should be exported or not is a
completely different one. See for example the OpenAFS and Linux
kernel mail list archives.

Harald.
Permalink | Reply | 0 comments |
headers
Brian Sammon | 19 May 2003 20:54
Picon
Favicon

Re: linux 2.4.20 won't load 0.35.12's xfs.o

> Compiling 0.35.12 works fine on my rh73 system with RH's kernel
> 2.4.20-13.7 freshly installed.
> 
> But startarla can't insmod:
> /usr/arla/bin/xfs.o: unresolved symbol sys_call_table
> /usr/arla/bin/xfs.o: unresolved symbol get_empty_inode

I can confirm that arla 0.35.12 works fine on a vanilla 2.4.20 from 
kernel.org (on debian 3.0, if that matters)
Permalink | Reply | 0 comments |

Gmane