diff --git a/debian/CellServDB b/debian/CellServDB
new file mode 100644
index 0000000..a6bd8fc
--- /dev/null
+++ b/debian/CellServDB
@@ -0,0 +1,665 @@
+>grand.central.org #GCO Public CellServDB 14 May 2018
+18.9.48.14 #grand.mit.edu
+128.2.13.219 #grand-old-opry.central.org
+>wu-wien.ac.at #University of Economics, Vienna, Austria
+137.208.3.33 #goya.wu-wien.ac.at
+137.208.7.57 #caravaggio.wu-wien.ac.at
+137.208.8.14 #vermeer.wu-wien.ac.at
+>hephy.at #hephy-vienna
+193.170.243.10 #afs01.hephy.oeaw.ac.at
+193.170.243.12 #afs02.hephy.oeaw.ac.at
+193.170.243.14 #afs03.hephy.oeaw.ac.at
+>cgv.tugraz.at #CGV cell
+129.27.218.30 #phobos.cgv.tugraz.at
+129.27.218.31 #deimos.cgv.tugraz.at
+129.27.218.32 #trinculo.cgv.tugraz.at
+>itp.tugraz.at #Institute of Theoretical and Computational Physics, TU Graz, Aus
+129.27.161.7 #faepafs1.tu-graz.ac.at
+129.27.161.15 #faepafs2.tu-graz.ac.at
+129.27.161.114 #faepafs3.tu-graz.ac.at
+>sums.math.mcgill.ca #Society of Undergraduate Mathematics Students of McGill Universi
+132.216.24.122 #germain.sums.math.mcgill.ca
+132.216.24.125 #turing.sums.math.mcgill.ca
+>ualberta.ca #University of Alberta
+129.128.1.131 #file13.ucs.ualberta.ca
+129.128.98.17 #mystery.ucs.ualberta.ca
+129.128.125.40 #drake.ucs.ualberta.ca
+>cern.ch #European Laboratory for Particle Physics, Geneva
+137.138.128.148 #afsdb1.cern.ch
+137.138.246.50 #afsdb3.cern.ch
+137.138.246.51 #afsdb2.cern.ch
+>ams.cern.ch #AMS Experiment
+137.138.188.185 #ams.cern.ch
+137.138.199.58 #pcamsf4.cern.ch
+>epfl.ch #Swiss Federal Institute of Technology at Lausanne
+128.178.109.111 #kd1.epfl.ch
+128.178.109.112 #kd2.epfl.ch
+128.178.109.113 #kd3.epfl.ch
+>ethz.ch #Swiss Federal Inst. of Tech. - Zurich, Switzerland
+82.130.118.32 #afs-db-1.ethz.ch
+>psi.ch #Paul Scherrer Institut - Villigen, Switzerland
+129.129.190.140 #afs00.psi.ch
+129.129.190.141 #afs01.psi.ch
+129.129.190.142 #afs02.psi.ch
+>extundo.com #Simon Josefsson's cell
+195.42.214.241 #slipsten.extundo.com
+>freedaemon.com #Free Daemon Consulting, Oklahoma City, OK, USA
+66.210.104.254 #afs0.freedaemon.com
+>membrain.com #membrain.com
+66.93.118.125 #stormy
+130.85.24.11 #weasel
+130.85.24.13 #straykitten
+>nilcons.com #nilcons.com
+5.9.14.177 #files.nilcons.com
+>sodre.cx #Sodre.cx
+128.8.140.165 #greed.sodre.cx
+>ruk.cuni.cz #Charles University Computer Centre, Prague, CR
+195.113.0.36 #asterix.ruk.cuni.cz
+195.113.0.37 #obelix.ruk.cuni.cz
+195.113.0.40 #sal.ruk.cuni.cz
+>ics.muni.cz #Masaryk university
+147.228.240.30 #afs-plzen.meta.zcu.cz
+147.251.9.9 #smaug2.ics.muni.cz
+195.113.214.4 #tarkil-xen.cesnet.cz
+>zcu.cz #University of West Bohemia, Czech Republic
+147.228.10.18 #sauron.zcu.cz
+147.228.52.10 #oknos.zcu.cz
+147.228.52.17 #nic.zcu.cz
+>desy.de #Deutsches Elektronen-Synchrotron
+131.169.2.19 #afsdb2.desy.de
+131.169.2.20 #afsdb3.desy.de
+131.169.244.60 #solar00.desy.de
+>naf.desy.de #National Analysis Facility at DESY
+141.34.220.32 #tcsh1-vm1.naf.desy.de
+141.34.230.33 #tcsh2-vm1.naf.desy.de
+141.34.230.34 #tcsh3-vm1.naf.desy.de
+>gppc.de #GPP Chemnitz mbH
+213.187.92.33 #gpp1.gppc.de
+213.187.92.34 #paulchen.gppc.de
+213.187.92.35 #lotus.gppc.de
+>cms.hu-berlin.de #Humboldt University Berlin
+141.20.1.65 #commodus.cms.hu-berlin.de
+141.20.1.66 #faustinus.cms.hu-berlin.de
+141.20.1.67 #marcellus.cms.hu-berlin.de
+>ifh.de #DESY Zeuthen
+141.34.22.10 #romulus.ifh.de
+141.34.22.11 #remus.ifh.de
+141.34.22.29 #hekate.ifh.de
+>integra-ev.de #INTEGRA e.V.
+134.155.48.8 #afsdb2.integra-ev.de
+134.155.48.63 #afsdb1.integra-ev.de
+>lrz-muenchen.de #Leibniz Computing Centre, Germany
+129.187.10.36 #afs1.lrz-muenchen.de
+129.187.10.56 #afs3.lrz-muenchen.de
+129.187.10.57 #afs2.lrz-muenchen.de
+>ipp-garching.mpg.de #Institut fuer Plasmaphysik
+130.183.9.5 #afs-db1.rzg.mpg.de
+130.183.14.14 #afs-db3.bc.rzg.mpg.de
+130.183.100.10 #afs-db2.aug.ipp-garching.mpg.de
+>mpe.mpg.de #MPE cell
+130.183.130.7 #irafs1.mpe-garching.mpg.de
+130.183.134.20 #irafs2.mpe-garching.mpg.de
+>nicsys.de #NICsys GbR
+213.187.80.3 #attila.nicsys.de
+>i1.informatik.rwth-aachen.de #Informatik I, RWTH Aachen
+137.226.244.79 #remus.informatik.rwth-aachen.de
+>combi.tfh-wildau.de #Philips Research Lab
+194.95.50.106 #joda13.combi.tfh-wildau.de
+>tu-berlin.de #TU Berlin
+130.149.204.10 #afsc-pr-1.tubit.tu-berlin.de
+130.149.204.11 #afsc-pr-2.tubit.tu-berlin.de
+130.149.204.70 #afsc-ba-1.tubit.tu-berlin.de
+>tu-bs.de #Technical University of Braunschweig, Germany
+134.169.1.1 #rzafs1.rz.tu-bs.de
+134.169.1.5 #rzafs2.rz.tu-bs.de
+134.169.1.6 #rzafs3.rz.tu-bs.de
+>tu-chemnitz.de #Technische Universitaet Chemnitz, Germany
+134.109.2.1 #zuse.hrz.tu-chemnitz.de
+134.109.2.2 #andrew.hrz.tu-chemnitz.de
+134.109.2.15 #phoenix.hrz.tu-chemnitz.de
+>e18.ph.tum.de #Experimental Physics, TU Munich, Germany
+129.187.154.165 #dionysos.e18.physik.tu-muenchen.de
+129.187.154.223 #hamlet.e18.physik.tu-muenchen.de
+>physik.uni-bonn.de #Institute of Physics, University of Bonn, Germany
+131.220.166.33 #afsdb1.physik.uni-bonn.de
+131.220.166.34 #afsdb2.physik.uni-bonn.de
+131.220.166.35 #afsdb3.physik.uni-bonn.de
+>atlass01.physik.uni-bonn.de #Bonn ATLAS
+131.220.165.43 #atlass01.physik.uni-bonn.de
+>uni-freiburg.de #Albert-Ludwigs-Universitat Freiburg
+132.230.6.237 #sv8.ruf.uni-freiburg.de
+132.230.6.239 #sv10.ruf.uni-freiburg.de
+>physik.uni-freiburg.de #Institute of Physics, University Freiburg, Germany
+132.230.6.234 #afs1.ruf.uni-freiburg.de
+132.230.6.235 #afs2.ruf.uni-freiburg.de
+132.230.77.12 #sherlock.physik.uni-freiburg.de
+>math.uni-hamburg.de #Department of Mathematics Uni Hamburg
+134.100.223.3 #afs-core.math.uni-hamburg.de
+134.100.223.6 #afs-core2.math.uni-hamburg.de
+134.100.223.9 #afs-core3.math.uni-hamburg.de
+>physnet.uni-hamburg.de #PHYSnet-Rechenzentrum university of hamburg
+134.100.106.44 #afs-core.physnet.uni-hamburg.de
+134.100.106.45 #afs-core2.physnet.uni-hamburg.de
+134.100.106.47 #afs-core3.physnet.uni-hamburg.de
+>iqo.uni-hannover.de #Institut fuer Quantenoptik Hannover
+130.75.103.221 #afs1.iqo.uni-hannover.de
+130.75.103.223 #afs2.iqo.uni-hannover.de
+>mathi.uni-heidelberg.de #Uni Heidelberg (Mathematisches Institut)
+129.206.26.241 #hactar.mathi.uni-heidelberg.de
+>urz.uni-heidelberg.de #Uni Heidelberg (Rechenzentrum)
+129.206.119.10 #afsdb.urz.uni-heidelberg.de
+129.206.119.16 #afsdb1.urz.uni-heidelberg.de
+129.206.119.17 #afsdb2.urz.uni-heidelberg.de
+>ziti.uni-heidelberg.de #Institute of Computer Science at the University of Heidelberg
+147.142.42.246 #mp-sun.ziti.uni-heidelberg.de
+147.142.42.252 #mp-pizza.ziti.uni-heidelberg.de
+>uni-hohenheim.de #University of Hohenheim
+144.41.2.2 #rs13.serv.uni-hohenheim.de
+144.41.2.3 #rs14.serv.uni-hohenheim.de
+144.41.2.4 #rs15.serv.uni-hohenheim.de
+>rz.uni-jena.de #Rechenzentrum University of Jena, Germany
+141.35.2.180 #afs00.rz.uni-jena.de
+141.35.2.181 #afs01.rz.uni-jena.de
+141.35.2.182 #afs02.rz.uni-jena.de
+>meteo.uni-koeln.de #Univ. of Cologne - Inst. for Geophysics & Meteorology
+134.95.144.22 #afs1.meteo.uni-koeln.de
+134.95.144.24 #afs2.meteo.uni-koeln.de
+>rrz.uni-koeln.de #University of Cologne - Reg Comp Center
+134.95.19.3 #afsdb1.rrz.uni-koeln.de
+134.95.19.4 #afsdb2.rrz.uni-koeln.de
+134.95.19.10 #lyra.rrz.uni-koeln.de
+134.95.67.97 #afs.thp.uni-koeln.de
+134.95.112.8 #ladon.rrz.uni-koeln.de
+>urz.uni-magdeburg.de #Otto-von-Guericke-Universitaet, Magdeburg
+141.44.7.6 #lem.urz.uni-magdeburg.de
+141.44.8.14 #bowles.urz.uni-magdeburg.de
+141.44.13.5 #strugazki.urz.uni-magdeburg.de
+>physik.uni-mainz.de #institute of physics, university Mainz, Germany
+134.93.130.93 #hardy.physik.uni-mainz.de
+>uni-mannheim.de #Uni Mannheim (Rechenzentrum)
+134.155.97.204 #afsdb1.uni-mannheim.de
+134.155.97.205 #afsdb2.uni-mannheim.de
+134.155.97.206 #afsdb3.uni-mannheim.de
+>mathematik.uni-stuttgart.de #University of Stuttgart, Math Dept.
+129.69.61.1 #fbm01.mathematik.uni-stuttgart.de
+129.69.61.2 #fbm02.mathematik.uni-stuttgart.de
+129.69.61.3 #fbm03.mathematik.uni-stuttgart.de
+>stud.mathematik.uni-stuttgart.de #CIP-Pool of Math. Dept, University of Stuttgart
+129.69.61.28 #omni.mathematik.uni-stuttgart.de
+129.69.116.201 #stud01.mathematik.uni-stuttgart.de
+129.69.116.202 #stud02.mathematik.uni-stuttgart.de
+129.69.116.203 #stud03.mathematik.uni-stuttgart.de
+>physik.uni-wuppertal.de #Physics department of Bergische Universitt Wuppertal
+132.195.104.3 #afs1.physik.uni-wuppertal.de
+132.195.104.230 #afs2.physik.uni-wuppertal.de
+>s-et.aau.dk #Aalborg Univ., The Student Society, Denmark
+130.225.196.22 #afs.s-et.aau.dk
+>ies.auc.dk #Aalborg Univ., Inst. of Electronic Systems, Denmark
+130.225.51.73 #afsdb1.kom.auc.dk
+130.225.51.74 #afsdb2.kom.auc.dk
+130.225.51.85 #afsdb3.kom.auc.dk
+>asu.edu #Arizona State University
+129.219.10.69 #authen2.asu.edu
+129.219.10.70 #authen1.asu.edu
+129.219.10.72 #authen3.asu.edu
+>hep.caltech.edu #Caltech High Energy Physics
+131.215.116.20 #afs.hep.caltech.edu
+>ugcs.caltech.edu #Caltech UGCS lab
+131.215.176.65 #afs-c.ugcs.caltech.edu
+131.215.176.67 #afs-a.ugcs.caltech.edu
+131.215.176.68 #afs-b.ugcs.caltech.edu
+>andrew.cmu.edu #Carnegie Mellon University - Computing Services Cell
+128.2.10.2 #afsdb-01.andrew.cmu.edu
+128.2.10.7 #afsdb-02.andrew.cmu.edu
+128.2.10.11 #afsdb-03.andrew.cmu.edu
+>mw.andrew.cmu.edu #Carnegie Mellon University - Middleware Test Cell
+128.2.234.24 #null.andrew.cmu.edu
+128.2.234.170 #mw-mgr.andrew.cmu.edu
+>club.cc.cmu.edu #Carnegie Mellon University Computer Club
+128.2.204.149 #barium.club.cc.cmu.edu
+128.237.157.11 #sodium.club.cc.cmu.edu
+128.237.157.13 #potassium.club.cc.cmu.edu
+>chem.cmu.edu #Carnegie Mellon University - Chemistry Dept.
+128.2.40.134 #afs.chem.cmu.edu
+128.2.40.140 #afs2.chem.cmu.edu
+>cs.cmu.edu #Carnegie Mellon University - School of Comp. Sci.
+128.2.172.58 #date.srv.cs.cmu.edu
+128.2.172.60 #fig.srv.cs.cmu.edu
+128.2.200.97 #watermelon.srv.cs.cmu.edu
+>ece.cmu.edu #Carnegie Mellon University - Elec. Comp. Eng. Dept.
+128.2.129.7 #porok.ece.cmu.edu
+128.2.129.8 #vicio.ece.cmu.edu
+128.2.129.9 #e-xing.ece.cmu.edu
+>scotch.ece.cmu.edu #CMU ECE CALCM research group
+128.2.134.82 #lagavulin.ece.cmu.edu
+>qatar.cmu.edu #Carnegie Mellon University - Qatar
+86.36.46.6 #afs1.qatar.cmu.edu
+86.36.46.7 #afs2.qatar.cmu.edu
+>sbp.ri.cmu.edu #Carnegie Mellon University - Sensor Based Planning Lab
+128.2.179.12 #nihao.sbp.ri.cmu.edu
+128.2.179.113 #youtheman.sbp.ri.cmu.edu
+>cnf.cornell.edu #CNF
+128.253.198.9 #hole.cnf.cornell.edu
+128.253.198.27 #smoke.cnf.cornell.edu
+128.253.198.231 #mist.cnf.cornell.edu
+>math.cornell.edu #Cornell Math Dept
+128.84.234.12 #pooh.math.cornell.edu
+128.84.234.16 #bernoulli.math.cornell.edu
+128.84.234.162 #dyno.math.cornell.edu
+>msc.cornell.edu #Cornell University Materials Science Center
+128.84.231.242 #miranda.ccmr.cornell.edu
+128.84.241.35 #co.ccmr.cornell.edu
+128.84.249.78 #dax.ccmr.cornell.edu
+>dbic.dartmouth.edu #Dartmouth Brain Imaging Center
+129.170.30.143 #dbicafs1.dartmouth.edu
+129.170.30.144 #dbicafs2.dartmouth.edu
+129.170.30.145 #dbicafs3.dartmouth.edu
+>northstar.dartmouth.edu #Dartmouth College Research Computing
+129.170.16.22 #halley.dartmouth.edu
+129.170.16.26 #andromeda.dartmouth.edu
+129.170.199.250 #kuiper.dartmouth.edu
+>cs.hm.edu #Department Computer Science Munich University Of Applied Science
+129.187.208.31 #afs1.cs.hm.edu
+>eecs.harvard.edu #Harvard - EECS
+140.247.60.64 #lefkada.eecs.harvard.edu
+140.247.60.83 #corfu.eecs.harvard.edu
+>iastate.edu #Iowa State University
+129.186.1.243 #afsdb-1.iastate.edu
+129.186.6.243 #afsdb-2.iastate.edu
+129.186.142.243 #afsdb-3.iastate.edu
+>acm.jhu.edu #Johns Hopkins ACM chapter
+128.220.35.191 #chicago.acm.jhu.edu
+128.220.70.76 #typhon.acm.jhu.edu
+>athena.mit.edu #MIT/Athena cell
+18.7.45.11 #leda.mit.edu
+18.9.48.11 #castor.mit.edu
+18.9.48.12 #pollux.mit.edu
+>csail.mit.edu #MIT Computer Science & Artificial Intelligence Lab
+128.30.2.13 #titanic.csail.mit.edu
+128.30.2.31 #vasa.csail.mit.edu
+128.30.2.75 #maine.csail.mit.edu
+>lns.mit.edu #MIT/LNS Cell
+198.125.160.134 #afs2.lns.mit.edu.
+198.125.160.217 #afsdbserv1.lns.mit.edu.
+198.125.160.218 #afsdbserv2.lns.mit.edu.
+>net.mit.edu #MIT/Network Group cell
+18.7.62.60 #willy.mit.edu
+18.9.48.15 #moby.mit.edu
+18.9.48.16 #springer.mit.edu
+>sipb.mit.edu #MIT/SIPB cell
+18.4.60.19 #reynelda.mit.edu
+18.4.60.22 #rosebud.mit.edu
+18.4.60.23 #ronald-ann.mit.edu
+>msu.edu #Michigan State University Main Cell
+35.9.7.10 #afsdb0.cl.msu.edu
+35.9.7.11 #afsdb1.cl.msu.edu
+35.9.7.12 #afsdb2.cl.msu.edu
+>nd.edu #University of Notre Dame
+129.74.223.17 #john.helios.nd.edu
+129.74.223.33 #lizardo.helios.nd.edu
+129.74.223.65 #buckaroo.helios.nd.edu
+>crc.nd.edu #University of Notre Dame - Center for Research Computing
+129.74.85.34 #afsdb1.crc.nd.edu
+129.74.85.35 #afsdb2.crc.nd.edu
+129.74.85.36 #afsdb3.crc.nd.edu
+>pitt.edu #University of Pittsburgh
+136.142.8.15 #afs09.srv.cis.pitt.edu
+136.142.8.20 #afs10.srv.cis.pitt.edu
+136.142.8.21 #afs11.srv.cis.pitt.edu
+>cs.pitt.edu #University of Pittsburgh - Computer Science
+136.142.22.5 #afs01.cs.pitt.edu
+136.142.22.6 #afs02.cs.pitt.edu
+136.142.22.7 #afs03.cs.pitt.edu
+>psc.edu #PSC (Pittsburgh Supercomputing Center)
+128.182.59.182 #shaggy.psc.edu
+128.182.66.184 #velma.psc.edu
+128.182.66.185 #daphne.psc.edu
+>scoobydoo.psc.edu #PSC Test Cell
+128.182.59.181 #scooby.psc.edu
+>cede.psu.edu #Penn State - Center for Engr. Design & Entrepeneurship
+146.186.218.10 #greenly.cede.psu.edu
+146.186.218.60 #b50.cede.psu.edu
+146.186.218.246 #stalin.cede.psu.edu
+>rose-hulman.edu #Rose-Hulman Institute of Technology
+137.112.7.11 #afs1.rose-hulman.edu
+137.112.7.12 #afs2.rose-hulman.edu
+137.112.7.13 #afs3.rose-hulman.edu
+>cs.rose-hulman.edu #Rose-Hulman CS Department
+137.112.40.10 #galaxy.cs.rose-hulman.edu
+>rpi.edu #Rensselaer Polytechnic Institute
+128.113.22.11 #saul.server.rpi.edu
+128.113.22.12 #joab.server.rpi.edu
+128.113.22.13 #korah.server.rpi.edu
+128.113.22.14 #achan.server.rpi.edu
+>hep.sc.edu #University of South Carolina, Dept. of Physics
+129.252.78.77 #cpeven.physics.sc.edu
+>cs.stanford.edu #Stanford University Computer Science Department
+171.64.64.10 #cs-afs-1.Stanford.EDU
+171.64.64.66 #cs-afs-2.stanford.edu
+171.64.64.69 #cs-afs-3.stanford.edu
+>ir.stanford.edu #Stanford University
+171.64.7.222 #afsdb1.stanford.edu
+171.64.7.234 #afsdb2.stanford.edu
+171.64.7.246 #afsdb3.stanford.edu
+>slac.stanford.edu #Stanford Linear Accelerator Center
+134.79.18.25 #afsdb1.slac.stanford.edu
+134.79.18.26 #afsdb2.slac.stanford.edu
+134.79.18.27 #afsdb3.slac.stanford.edu
+>physics.ucsb.edu #UC Santa Barbara, Physics Dept
+128.111.18.161 #ledzeppelin.physics.ucsb.edu
+>cats.ucsc.edu #University of California, Santa Cruz
+128.114.123.8 #afs-prod-front-1.ucsc.edu
+128.114.123.9 #afs-prod-front-2.ucsc.edu
+128.114.123.10 #afs-prod-front-3.ucsc.edu
+>ncsa.uiuc.edu #National Center for Supercomputing Applications at Illinois
+141.142.192.66 #nile-vm.ncsa.uiuc.edu
+141.142.192.143 #congo-vm.ncsa.uiuc.edu
+141.142.192.144 #kaskaskia-vm.ncsa.uiuc.edu
+>umbc.edu #University of Maryland, Baltimore County
+130.85.24.23 #db2.afs.umbc.edu
+130.85.24.87 #db3.afs.umbc.edu
+130.85.24.101 #db1.afs.umbc.edu
+>glue.umd.edu #University of Maryland - Project Glue
+128.8.70.11 #olmec.umd.edu
+128.8.236.4 #egypt.umd.edu
+128.8.236.230 #babylon.umd.edu
+>wam.umd.edu #University of Maryland Network WAM Project
+128.8.70.9 #csc-srv.wam.umd.edu
+128.8.236.5 #avw-srv.wam.umd.edu
+128.8.236.231 #ptx-srv.wam.umd.edu
+>umich.edu #University of Michigan - Campus
+141.211.1.32 #fear.ifs.umich.edu
+141.211.1.33 #surprise.ifs.umich.edu
+141.211.1.34 #ruthless.ifs.umich.edu
+>atlas.umich.edu #ATLAS group cell in physics at University of Michigan
+141.211.43.102 #linat02.grid.umich.edu
+141.211.43.103 #linat03.grid.umich.edu
+141.211.43.104 #linat04.grid.umich.edu
+>citi.umich.edu #University of Michigan - Center for Information Technology Integ
+141.212.112.5 #babylon.citi.umich.edu
+>isis.unc.edu #Univ. of NC at Chapel Hill - ITS
+152.2.1.5 #db0.isis.unc.edu
+152.2.1.6 #db1.isis.unc.edu
+152.2.1.7 #db2.isis.unc.edu
+>eng.utah.edu #University of Utah - Engineering
+155.98.111.9 #lenny.eng.utah.edu
+155.98.111.10 #carl.eng.utah.edu
+>cs.uwm.edu #University of Wisconsin--Milwaukee
+129.89.38.124 #solomons.cs.uwm.edu
+129.89.143.71 #filip.cs.uwm.edu
+>cs.vassar.edu #Computer Science research network / Vassar College
+143.229.6.73 #afsserv.cs.vassar.edu
+>cs.wisc.edu #Univ. of Wisconsin-Madison, Computer Sciences Dept.
+128.105.132.14 #timon.cs.wisc.edu
+128.105.132.15 #pumbaa.cs.wisc.edu
+128.105.132.16 #zazu.cs.wisc.edu
+>engr.wisc.edu #University of Wisconsin-Madison, College of Engineering
+144.92.13.14 #larry.cae.wisc.edu
+144.92.13.15 #curly.cae.wisc.edu
+144.92.13.16 #moe.cae.wisc.edu
+>hep.wisc.edu #University of Wisconsin -- High Energy Physics
+128.104.28.219 #anise.hep.wisc.edu
+144.92.180.7 #rosemary.hep.wisc.edu
+144.92.180.30 #fennel.hep.wisc.edu
+>physics.wisc.edu #Univ. of Wisconsin-Madison, Physics Department
+128.104.160.13 #kendra.physics.wisc.edu
+128.104.160.14 #fray.physics.wisc.edu
+128.104.160.15 #buffy.physics.wisc.edu
+>ciemat.es #Ciemat, Madrid, Spain
+192.101.165.10 #afsdb1.ciemat.es
+192.101.165.11 #afsdb2.ciemat.es
+>ifca.unican.es #Instituto de Fisica de Cantabria (IFCA), Santander, Spain
+193.144.209.20 #gridwall.ifca.unican.es
+>ific.uv.es #Instituto de Fisica Corpuscular, Valencia, Spain
+147.156.163.11 #alpha.ific.uv.es
+>alteholz.eu #alteholz.eu
+78.47.192.125 #krb1eu.afs.alteholz.net
+>in2p3.fr #IN2P3
+134.158.104.11 #ccafsdb01.in2p3.fr
+134.158.104.12 #ccafsdb02.in2p3.fr
+134.158.104.13 #ccafsdb03.in2p3.fr
+>mcc.ac.gb #University of Manchester
+130.88.203.41 #nevis.mc.man.ac.uk
+130.88.203.144 #eryri.mc.man.ac.uk
+130.88.203.145 #scafell.mc.man.ac.uk
+>anl.gov #Argonne National Laboratory
+146.137.96.33 #arteus.it.anl.gov
+146.137.162.88 #agamemnon.it.anl.gov
+146.137.194.80 #antenor.it.anl.gov
+>rhic.bnl.gov #Relativistic Heavy Ion Collider
+130.199.6.51 #rafs03.rcf.bnl.gov
+130.199.6.52 #rafs02.rcf.bnl.gov
+130.199.6.69 #rafs01.rcf.bnl.gov
+>usatlas.bnl.gov #US Atlas Tier 1 Facility at BNL
+130.199.48.32 #aafs01.usatlas.bnl.gov
+130.199.48.33 #aafs02.usatlas.bnl.gov
+130.199.48.34 #aafs03.usatlas.bnl.gov
+>jpl.nasa.gov #Jet Propulsion Laboratory
+137.78.160.21 #afsdb08.jpl.nasa.gov
+137.78.160.22 #afsdb09.jpl.nasa.gov
+137.78.160.23 #afsdb10.jpl.nasa.gov
+>doe.atomki.hu #Institute of Nuclear Research (MTA ATOMKI), Debrecen, Hungary
+193.6.179.31 #afs.doe.atomki.hu
+>bme.hu #Budapest University of Technology and Economics
+152.66.241.6 #afs.iit.bme.hu
+>kfki.hu #Wigner Research Centre for Physics - Budapest, Hungary
+148.6.2.109 #afs0.kfki.hu
+>rnd.ru.is #Reykjavik University Research and Development Network
+130.208.242.66 #lithium.rnd.ru.is.
+130.208.242.67 #beryllium.rnd.ru.is.
+130.208.242.68 #boron.rnd.ru.is.
+>caspur.it #CASPUR Inter-University Computing Consortium, Rome
+193.204.5.45 #pomodoro.caspur.it
+193.204.5.46 #banana.caspur.it
+193.204.5.50 #maslo.caspur.it
+>enea.it #ENEA New Tech. Energy & Environment Agency, Italy
+192.107.54.5 #aixfs.frascati.enea.it
+192.107.54.11 #rs2ced.frascati.enea.it
+192.107.54.12 #43p.frascati.enea.it
+>fusione.it #Assoz. FUSIONE/Euratom, ENEA, Frascati-Italy
+192.107.90.2 #fusafs1.frascati.enea.it
+192.107.90.3 #fusafs2.frascati.enea.it
+192.107.90.4 #fusafs3.frascati.enea.it
+>icemb.it #ICEMB, Universita' La Sapienza - Rome - Italy
+193.204.6.130 #icembfs.caspur.it
+>ictp.it #The Abdus Salam International Centre for Theoretical Physics (IC
+140.105.34.7 #afsdb1.ictp.it
+140.105.34.8 #afsdb2.ictp.it
+>infn.it #Istituto Nazionale di Fisica Nucleare (INFN), Italia
+131.154.1.7 #afscnaf.infn.it
+141.108.26.75 #afsrm1.roma1.infn.it
+192.84.134.75 #afsna.na.infn.it
+>ba.infn.it #INFN, Sezione di Bari
+193.206.185.235 #baafsserver.ba.infn.it
+193.206.185.236 #debsrv.ba.infn.it
+>kloe.infn.it #INFN, KLOE experiment at Laboratori di Frascati
+192.135.25.111 #kloeafs1.lnf.infn.it
+192.135.25.112 #kloeafs2.lnf.infn.it
+>le.infn.it #INFN, Sezione di Lecce
+192.84.152.40 #afs01.le.infn.it
+192.84.152.148 #afs02.le.infn.it
+>lnf.infn.it #INFN, Laboratori Nazionali di Frascati
+193.206.84.121 #afs1.lnf.infn.it
+193.206.84.122 #afs2.lnf.infn.it
+193.206.84.123 #afs3.lnf.infn.it
+>lngs.infn.it #INFN, Laboratori Nazionali del Gran Sasso
+192.84.135.21 #afs1.lngs.infn.it
+192.84.135.133 #afs2.lngs.infn.it
+>pi.infn.it #INFN, Sezione di Pisa
+192.84.133.50 #aix1.pi.infn.it
+212.189.152.6 #afs1.pi.infn.it
+212.189.152.7 #afs2.pi.infn.it
+>roma3.infn.it #Istituto Nazionale di Fisica Nucleare (INFN), Italia
+193.205.159.17 #afsrm3.roma3.infn.it
+>psm.it #Progetto San Marco, Universita' di Roma-1
+151.100.1.65 #atlante.psm.uniroma1.it
+>tgrid.it #CASPUR-CILEA-CINECA Grid Cell
+193.204.5.33 #cccgrid.caspur.it
+>math.unifi.it #math.unifi.it
+150.217.34.182 #xeno.math.unifi.it
+>ing.uniroma1.it #Universita' La Sapienza, Fac. Ingeneria
+151.100.85.253 #alfa.ing.uniroma1.it
+>dia.uniroma3.it #University Roma Tre - DIA
+193.204.161.67 #srv.dia.uniroma3.it
+193.204.161.79 #aux.dia.uniroma3.it
+193.204.161.118 #afs.dia.uniroma3.it
+>vn.uniroma3.it #University Roma Tre, area Vasca Navale
+193.205.219.59 #alfa2.dia.uniroma3.it
+193.205.219.60 #beta2.dia.uniroma3.it
+193.205.219.61 #gamma2.dia.uniroma3.it
+>italia #Italian public AFS cell
+193.204.5.9 #afs.caspur.it
+>cmf.nrl.navy.mil #Naval Research Laboratory - Center for Computational Science
+134.207.12.68 #picard.cmf.nrl.navy.mil
+134.207.12.69 #riker.cmf.nrl.navy.mil
+134.207.12.70 #kirk.cmf.nrl.navy.mil
+>lcp.nrl.navy.mil #Naval Research Lab - Lab for Computational Physics
+132.250.114.2 #afs1.lcp.nrl.navy.mil
+132.250.114.4 #afs2.lcp.nrl.navy.mil
+132.250.114.6 #afs3.lcp.nrl.navy.mil
+>nucleares.unam.mx #Instituto de Ciencias Nucleares, UNAM, Mexico
+132.248.29.50 #nahualli.nucleares.unam.mx
+>crossproduct.net #crossproduct.net
+207.114.88.173 #geodesic.crossproduct.net
+>epitech.net #EPITECH, France
+163.5.255.41 #afs-db-1.epitech.net
+163.5.255.42 #afs-db-2.epitech.net
+>es.net #Energy Sciences Net
+198.128.3.21 #fs1.es.net
+198.128.3.22 #fs2.es.net
+198.128.3.23 #fs3.es.net
+>gorlaeus.net #Gorlaeus Laboratories, Leiden University
+132.229.170.27 #fwncisafs1.gorlaeus.net
+>laroia.net #Laroia Networks
+66.66.102.254 #supercore.laroia.net
+>pallissard.net #pallissard.net
+35.184.35.247 #files.pallissard.net
+>sinenomine.net #Sine Nomine Associates
+207.89.43.108 #afsdb3.sinenomine.net
+207.89.43.109 #afsdb4.sinenomine.net
+207.89.43.110 #afsdb5.sinenomine.net
+>slackers.net #The Slackers' Network
+199.4.150.159 #alexandria.slackers.net
+>tproa.net #The People's Republic of Ames
+204.11.35.83 #service-3.tproa.net
+204.11.35.84 #service-4.tproa.net
+204.11.35.85 #service-5.tproa.net
+>interdose.net #Interdose Ltd. & Co. KG, Germany
+80.190.171.42 #bfd9000.tow5.interdose.net
+80.190.171.43 #bfd9001.tow5.interdose.net
+>nikhef.nl #The Dutch National Institute for High Energy Physics
+192.16.185.26 #afs1.nikhef.nl
+192.16.185.27 #afs2.nikhef.nl
+>acm-csuf.org #California State Univerisity Fullerton ACM
+137.151.29.193 #afs1.acm-csuf.org
+>adrake.org #adrake.org
+128.2.98.241 #afs.adrake.org
+>bazquux.org #Baz Quux Organization
+66.207.142.196 #baxquux.org
+>coed.org #Adam Pennington's Cell
+66.93.61.184 #vice1.coed.org
+128.237.157.35 #vice3.coed.org
+>dementia.org #Dementia Unlimited (old)
+128.2.13.209 #dedlock.dementix.org
+128.2.234.204 #vorkana.dementix.org
+128.2.235.26 #meredith.dementix.org
+>dementix.org #Dementia Unlimited
+128.2.13.209 #dedlock.dementix.org
+128.2.234.204 #vorkana.dementix.org
+128.2.235.26 #meredith.dementix.org
+>idahofuturetruck.org #University of Idaho hybrid vehicle development
+12.18.238.210 #dsle210.fsr.net
+>afs.ietfng.org #ietfng.org
+67.62.51.95 #a.afs.ietfng.org
+>jeaton.org #jeaton.org (Jeffrey Eaton, jeaton@jeaton.org)
+128.2.234.89 #jeaton-org-01.jeaton.org
+128.2.234.92 #jeaton-org-02.jeaton.org
+>mrph.org #Mrph
+66.207.133.1 #sanber.mrph.org
+128.2.99.209 #hernandarias.mrph.org
+>mstacm.org #Missouri Science & Technology - ACM
+131.151.249.193 #acm.mst.edu
+>nomh.org #nomh.org
+204.29.154.12 #iota.nomh.org
+204.29.154.32 #adversity.xi.nomh.org
+>oc7.org #The OC7 Project
+128.2.122.140 #knife.oc7.org
+207.22.77.170 #spoon.oc7.org
+>pfriedma.org #pfriedma.org
+72.95.215.18 #vice.pfriedma.org
+>riscpkg.org #The RISC OS Packaging Project
+83.104.175.10 #delenn.riscpkg.org
+>kth.se #Royal Institute of Technology, Stockholm, Sweden
+130.237.32.145 #sonen.e.kth.se
+130.237.48.7 #anden.e.kth.se
+130.237.48.244 #fadern.e.kth.se
+>ict.kth.se #Royal Institute of Technology, Information and Communication tec
+130.237.216.11 #afsdb1.ict.kth.se
+130.237.216.12 #afsdb2.ict.kth.se
+130.237.216.13 #afsdb3.ict.kth.se
+>it.kth.se #Royal Institute of Technology, Teleinformatics, Kista
+130.237.216.14 #afsdb1.it.kth.se
+130.237.216.15 #afsdb2.it.kth.se
+130.237.216.16 #afsdb3.it.kth.se
+>md.kth.se #Royal Institute of Technology, MMK
+130.237.32.63 #mdafs-1.sys.kth.se
+>mech.kth.se #Royal Institute of Technology, MECH
+130.237.233.142 #matterhorn.mech.kth.se
+130.237.233.143 #castor.mech.kth.se
+130.237.233.144 #pollux.mech.kth.se
+>nada.kth.se #Royal Institute of Technology, NADA
+130.237.223.12 #afsdb-2.csc.kth.se
+130.237.224.78 #afsdb-3.csc.kth.se
+130.237.227.23 #afsdb-4.csc.kth.se
+>pdc.kth.se #Royal Institute of Technology, PDC
+130.237.232.29 #crab.pdc.kth.se
+130.237.232.112 #anna.pdc.kth.se
+130.237.232.114 #hokkigai.pdc.kth.se
+>stacken.kth.se #Stacken Computer Club
+130.237.234.3 #milko.stacken.kth.se
+130.237.234.43 #hot.stacken.kth.se
+130.237.234.101 #fishburger.stacken.kth.se
+>syd.kth.se #Royal Institute of Technology, KTH-Syd
+130.237.83.23 #afs.haninge.kth.se
+>sanchin.se #Sanchin Consulting AB, Sweden
+192.195.148.10 #sesan.sanchin.se
+>su.se #Stockholm University
+130.237.162.81 #afsdb1.su.se
+130.237.162.82 #afsdb2.su.se
+130.237.162.230 #afsdb3.su.se
+>fysik.su.se #Stockholm University, Physics Department
+130.237.244.134 #srv01.fysik.su.se
+130.237.244.135 #srv02.fysik.su.se
+130.237.244.139 #srv05.fysik.su.se
+>f9.ijs.si #F9, Jozef Stefan Institue
+194.249.156.1 #brenta.ijs.si
+>p-ng.si #University of Nova Gorica
+193.2.120.2 #solkan.p-ng.si
+193.2.120.9 #sabotin.p-ng.si
+>ihep.su #Institute for High-Energy Physics
+194.190.165.201 #fs0001.ihep.su
+194.190.165.202 #fs0002.ihep.su
+>motherfsck.tech #motherfsck.tech
+>hep-ex.physics.metu.edu.tr #METU Department of Physics, Experimental HEP group, Ankara/Turke
+144.122.31.131 #neutrino.physics.metu.edu.tr
+>phy.bris.ac.uk #Bristol University - physics
+137.222.74.18 #zen.phy.bris.ac.uk
+>inf.ed.ac.uk #School of Informatics, University of Edinburgh
+129.215.64.16 #afsdb0.inf.ed.ac.uk
+129.215.64.17 #afsdb1.inf.ed.ac.uk
+129.215.64.18 #afsdb2.inf.ed.ac.uk
+>phas.gla.ac.uk #Univeristy of Glasgow Physics And Astronomy
+194.36.1.19 #afsdb1.phas.gla.ac.uk
+194.36.1.27 #afsdb3.phas.gla.ac.uk
+194.36.1.33 #afsdb2.phas.gla.ac.uk
+>ic.ac.uk #Imperial College London
+155.198.63.148 #icafs2.cc.ic.ac.uk
+155.198.63.149 #icafs1.cc.ic.ac.uk
+>hep.man.ac.uk #Manchester HEP
+194.36.2.3 #afs1.hep.man.ac.uk
+194.36.2.4 #afs2.hep.man.ac.uk
+194.36.2.5 #afs3.hep.man.ac.uk
+>tlabs.ac.za #iThemba LABS Cell
+196.24.232.1 #afs01.tlabs.ac.za
+196.24.232.2 #afs02.tlabs.ac.za
+196.24.232.3 #afs03.tlabs.ac.za
diff --git a/debian/ConfigUtils.pm b/debian/ConfigUtils.pm
new file mode 100644
index 0000000..4d35047
--- /dev/null
+++ b/debian/ConfigUtils.pm
@@ -0,0 +1,26 @@
+# This is -*- perl -*-
+
+package Debian::OpenAFS::ConfigUtils;
+
+use strict;
+use vars qw( @ISA @EXPORT @unwinds);
+@ISA = qw(Exporter);
+require Exporter;
+@EXPORT = qw(@unwinds run unwind);
+
+sub run ($) {
+ print join(' ', @_);
+ print "\n";
+ system (@_) == 0
+ or die "Failed: $?\n";
+}
+
+# This subroutine takes a command to run in case of failure. After
+# each succesful step, this routine should be run with a command to
+# undo the successful step.
+
+ sub unwind($) {
+ push @unwinds, $_[0];
+ }
+
+1;
diff --git a/debian/README.Debian b/debian/README.Debian
new file mode 100644
index 0000000..2f43531
--- /dev/null
+++ b/debian/README.Debian
@@ -0,0 +1,170 @@
+ OpenAFS for Debian
+
+Introduction
+
+ For an OpenAFS client system, install openafs-client and a kernel
+ module. See README.modules for information on how to build the kernel
+ module for your system. Then, read /etc/openafs/afs.conf to understand
+ the client configuration options. The openafs-client package will
+ attempt to guess at a good cache configuration based on the size of your
+ cache, but you may want to tune it further. There are also other
+ options configured in that file you may want to consider.
+
+ FAM does not work correctly with AFS except for directories that are
+ world-readable since it does not run in the user's security context and
+ therefore doesn't have the user's AFS tokens. If you are using FAM,
+ you'll encounter errors from file managers such as Nautilus that use it
+ if you browse restricted AFS directories. Instead of FAM, install
+ gamin, which runs in the user's security context and works correctly
+ with AFS.
+
+ For information on how to set up an OpenAFS server, read README.servers.
+ You will want the openafs-fileserver package for a file server and,
+ additionally, the openafs-dbserver package for a database server.
+
+Documentation
+
+ For the complete OpenAFS manual, install openafs-doc. This is the same
+ documentation as found at , and is
+ unfortunately outdated in several respects, but it's the best that we
+ have at present.
+
+ If want to set up a new cell, read README.servers and then look at the
+ example session in configuration-transcript.txt.gz in this directory.
+ The procedure outlined in these two files is much simpler and more
+ secure than the one in the OpenAFS documentation, but the OpenAFS
+ documentation provides useful background.
+
+Build Options
+
+ The OpenAFS file server has been built with --enable-demand-attach-fs,
+ which enables a new method of handling volume attachment. Volumes will
+ be attached only when needed, and the file server will persist state to
+ disk when shutting down for faster restarts. This file server mode is
+ experimental and should not yet be used for production data. Please
+ report any bugs you encounter.
+
+ The OpenAFS servers have been built with --enable-supergroups, which
+ permits nesting of PTS groups. Be aware that the PT database created by
+ these packages is not compatible with servers not built with
+ --enable-supergroups if nested PTS groups are used. In other words, if
+ you need the openafs-dbserver package to interoperate with ptservers
+ that aren't built with this option, don't use this capability.
+
+ The OpenAFS client and kernel module have been built with
+ --enable-disconnected, which enables experimental support for
+ disconnected operations. This support is still experimental and known
+ to have problems, but should not interfere with normal use of AFS. If
+ you want to experiment with it, see fs help discon.
+
+Changes Relative to Stock OpenAFS
+
+ Long-time AFS users may be confused by the directory layout. The files
+ that normally go in /usr/vice/etc go in /etc/openafs. The cache should
+ be mounted on /var/cache/openafs. The server files have been moved
+ around even more; see README.servers for the details.
+
+ The OpenAFS kernel module is named openafs, not libafs, to better match
+ normal Linux kernel module naming standards. The Debian source package
+ only builds one kernel module that matches the kernel source tree it is
+ built against and does not attempt to build separate SMP and non-SMP
+ modules against the same tree. Doing so does not work on all platforms.
+ To distinguish between an SMP and a non-SMP kernel module package, use
+ --append_to_version; see README.modules for more information.
+
+ The AFS up utility is installed as afs-up, since the standard name is
+ rather generic.
+
+ The libopenafs-dev package only includes static libraries and there are
+ no shared library packages. The shared libraries built by AFS are not
+ compatible with Debian policy. They do not have a stable ABI or an
+ appropriate SONAME.
+
+ kaserver is not included. New AFS cells should use Kerberos v5 rather
+ than the old K4-based kaserver KDC.
+
+Debugging and Bug Reporting
+
+ The current OpenAFS installation process installs fileserver and
+ volserver unstripped, since backtraces and other debugging information
+ for those binaries are necessary to track down file server problems.
+ For the Debian packages, the fileserver and volserver binaries in the
+ openafs-fileserver package are stripped, but the debugging information
+ is available in the openafs-dbg package, which can be installed
+ separately. If it is installed, gdb will find that debugging
+ information automatically.
+
+ Eventually the openafs-dbg package will contain debugging information
+ for all OpenAFS binaries.
+
+ When reporting a bug in the OpenAFS client, please include your exact
+ kernel version and architecture (reportbug will do this for you). Also,
+ if the client caused a kernel oops or BUG, be sure to include the
+ complete kernel output, including the lines before the oops. That's
+ where the OpenAFS error message, if any, will be.
+
+ When reporting a bug in the OpenAFS file server, please include
+ backtrace information from a core dump, if any. If the file server is
+ deadlocked, you can capture a core dump using the gcore script that
+ comes with the gdb package. The file server is threaded, so use the
+ command "thread apply all backtrace" in gdb to get a complete backtrace.
+ It's also often useful to have the output of rxdebug 7000 at
+ the time of the problem and the FileLog from the file server. You can
+ increase the logging level of the file server with kill -TSTP (and reset
+ it to 0 with kill -HUP).
+
+ You can report any bug in OpenAFS against the Debian package with
+ reportbug and the OpenAFS package maintainers will forward the bug
+ upstream as necessary. If you do want to report a bug directly
+ upstream, see http://www.openafs.org/ for bug reporting instructions.
+
+PAM Authentication
+
+ Any new OpenAFS cell is strongly encouraged to use Kerberos v5 for
+ authentication. If you want PAM to automatically obtain AFS credentials
+ and you are using Kerberos v5, you will want to install the libpam-krb5
+ and libpam-afs-session packages and then put something like the
+ following in /etc/pam.d/common-auth:
+
+ auth [success=ok default=1] pam_krb5.so ignore_root
+ auth [default=done] pam_afs_session.so
+ auth required pam_unix.so nullok_secure try_first_pass
+
+ and something like the following in /etc/pam.d/common-session:
+
+ session optional pam_krb5.so ignore_root
+ session optional pam_afs_session.so
+ session required pam_unix.so
+
+ You'll probably also want the following in /etc/pam.d/common-account:
+
+ account required pam_krb5.so ignore_root
+ account required pam_unix.so
+
+ There are, of course, many variations depending on what different
+ mechanism you want to use and how you want to handle fallbacks.
+
+ If you are still using Kerberos v4 and the OpenAFS kaserver (or a KDC
+ that understands the same protocol) for authentication, you can instead
+ use the libpam-openafs-kaserver package and a configuration like:
+
+ auth sufficient pam_afs.so ignore_root
+ auth required pam_unix.so nullok_secure try_first_pass
+
+ in /etc/pam.d/common-auth and:
+
+ session optional pam_afs.so
+ session required pam_unix.so
+
+ in /etc/pam.d/common-session. Use pam_afs.krb.so instead of pam_afs.so
+ if you also want the PAM module to acquire a ticket cache for you. If
+ using this configuration with sshd, you may need to disable privilege
+ separation to get everything working properly. I've had mixed results
+ with that. Obviously, converting to Kerberos v5 authentication is
+ strongly preferred.
+
+ If you are using the kaserver as your KDC, you may also want to install
+ the openafs-kpasswd package to get the administrative utilities for
+ managing those Kerberos accounts.
+
+ -- Russ Allbery , Tue, 6 Apr 2010 15:04:42 -0700
diff --git a/debian/README.modules b/debian/README.modules
new file mode 100644
index 0000000..b82fcc6
--- /dev/null
+++ b/debian/README.modules
@@ -0,0 +1,128 @@
+ Building Kernel Modules
+
+Introduction
+
+ The easiest way to get AFS modules is to install prebuilt modules. For
+ example, if you are running kernel 2.6.26-2-686, you might try:
+
+ apt-get install openafs-modules-2.6.26-2-686
+
+ Pre-built modules are not provided with Debian (building and maintaining
+ them in Debian proper poses too many problems), but many organizations
+ that use OpenAFS build their own and provide them locally.
+
+ If this doesn't work, you will need to build your own modules. There
+ are three methods for doing this.
+
+ When following any of these methods, be aware that the Debian package
+ creates a module named openafs, not libafs as is used by upstream. It
+ also prefers not to add the .mp extension for modules built for SMP
+ kernels; the indication of whether the module is for an SMP kernel
+ should go into the package name via something like --append_to_version,
+ not into the file name of the module.
+
+DKMS
+
+ DKMS has some caveats, but it's the easiest method of building modules.
+ It provides infrastructure that will automatically rebuild kernel
+ modules when the source package or the kernel has been upgraded.
+
+ To build OpenAFS kernel modules via DKMS, install the linux-headers
+ package corresponding to the version of the kernel that you have
+ installed and then install the openafs-modules-dkms package. This
+ depends on DKMS and will install it as well. The OpenAFS kernel modules
+ should then be built automatically and will be installed under
+ updates/dkms in the module tree for your kernel.
+
+ Please note that DKMS will only build modules for kernels that have the
+ Linux headers installed. When you upgrade your kernel, you need to
+ install the new linux-headers package at the same time, or you'll end up
+ without an OpenAFS module for the new kernel. If you're using the
+ tracking packages for the kernel (linux-image-2.6-686 or the like), also
+ install the tracking package for the kernel headers
+ (linux-headers-2.6-686 in that example).
+
+module-assistant
+
+ This method is the best method for manually building kernel modules for
+ kernels that come with Debian, since module-assistant knows how to get
+ the right header files to build modules for your currently running
+ kernel. Generally, all you should have to do is:
+
+ apt-get install module-assistant
+ module-assistant auto-install openafs
+
+ This combines all of the following steps, taking the defaults. If you
+ want to do it more step-by-step, first prepare the kernel headers and
+ install openafs-modules-source with:
+
+ apt-get install module-assistant
+ module-assistant prepare openafs-modules
+
+ If you want to build modules for a different kernel than your currently
+ running one, pass the -l flag to module-assistant. See the man page.
+ module-assistant may be able to find the right packages itself or it may
+ tell you to install particular packages. Once you've finished with
+ that, build the module with:
+
+ module-assistant auto-build openafs-modules
+
+ You may prefer to pass module-assistant the -t flag to get more
+ conventional output. If everything works correctly, the openafs-modules
+ deb should be created in /usr/src. You can use dpkg -i to install it.
+
+ module-assistant will take care of naming the openafs-modules package
+ correctly so that it matches the name of the kernel-image package and
+ installs its modules into the correct directory.
+
+ If you have ever previously built a module with module-assistant, always
+ run:
+
+ module-assistant clean openafs
+
+ before building a new module. module-assistant doesn't always properly
+ clean up after itself, and the mix of files from old and new versions of
+ OpenAFS can cause serious problems with the resulting module.
+
+make-kpkg
+
+ This method may work better than module-assistant if you're also
+ building your own kernel rather than using the pre-packaged Debian one.
+
+ Install a kernel source package and untar it in /usr/src. Then, install
+ openafs-modules-source.
+
+ apt-get install openafs-modules-source
+
+ Next, unpack openafs-modules-source:
+
+ cd /usr/src
+ tar xzf openafs.tar.gz
+
+ Now, change into your kernel source tree. You should then create a
+ .config file; the easiest way to do this is to run make menuconfig or to
+ copy in a kernel configuration from the same version of the kernel.
+ Debian kernel packages store a copy of their kernel configuration in
+ /boot/config.version_number.
+
+ The kernel configuration needs to be identical to the configuration that
+ produced the kernel that you're using. Ideally, you would build the
+ kernel image you're going to use with make-kpkg kernel_image and install
+ that along with the module image, although as long as the configuration
+ is identical, you may be able to get away with using a pre-built kernel.
+ (A better approach, if you're using pre-built kernels, may be to use
+ module-assistant as described above.)
+
+ Finally, build the modules:
+
+ make-kpkg modules_image
+
+ You may need to use the --append_to_version switch to add version
+ suffixes like -686 or -smp to match your kernel and install the OpenAFS
+ module into a directory like /lib/modules/version-686. Be aware that
+ the Debian OpenAFS packages build either a regular module or an SMP
+ module, not both, so the generated package will only work with a kernel
+ with the same SMP configuration.
+
+ An openafs-modules deb should be created in /usr/src. Use dpkg -i to
+ install this package.
diff --git a/debian/README.servers b/debian/README.servers
new file mode 100644
index 0000000..32b36f6
--- /dev/null
+++ b/debian/README.servers
@@ -0,0 +1,403 @@
+ Setting up a Debian OpenAFS Server
+
+Introduction
+
+ This document describes how to set up an OpenAFS server using the Debian
+ packages. If you are not already familiar with the basic concepts of
+ OpenAFS, you should review the documentation at:
+
+ http://docs.openafs.org/
+
+ particularly the AFS Administrator's Guide. This documentation is
+ somewhat out of date (it doesn't talk about how to use a Kerberos v5 KDC
+ instead of the AFS kaserver, for example), but it's a good introduction
+ to the basic concepts and servers you will need to run.
+
+ The Debian OpenAFS packages follow the FHS and therefore use different
+ paths than the standard AFS documentation or the paths that experienced
+ AFS administrators may be used to. In the first column below are the
+ traditional paths, and in the second column, the Debian paths:
+
+ /usr/afs/etc /etc/openafs/server
+ /usr/afs/local /var/lib/openafs/local
+ /usr/afs/db /var/lib/openafs/db
+ /usr/afs/logs /var/log/openafs
+ /usr/afs/bin /usr/lib/openafs
+ /usr/vice/etc /etc/openafs
+
+ The AFS kaserver (a Kerberos v4 KDC) is not packaged for Debian. Any
+ new OpenAFS installation should use Kerberos v5 for authentication in
+ conjunction with either the tools packaged in the openafs-krb5 package
+ or the Heimdal KDC. When setting up a new cell, you should therefore
+ not set up a kaserver as described in the AFS Administrator's Guide, and
+ you will need to follow a slightly different method of setting the cell
+ key.
+
+Creating a New Cell
+
+ For documentation on adding a server to an existing cell, see below.
+
+ These instructions assume that you are using MIT Kerberos and the
+ openafs-krb5 package. If you are using Heimdal instead, some of the
+ steps will be slightly different (Heimdal can write the AFS KeyFile
+ directly, for example, so you don't have to use asetkey). The
+ afs-newcell and afs-rootvol scripts are the same, however.
+
+ /usr/share/doc/openafs-dbserver/configuration-transcript.txt.gz has a
+ transcript of the results of these directions, which you may want to
+ follow along with as you do this.
+
+ 1. If you do not already have a Kerberos KDC (Key Distribution Center,
+ the daemon that handles Kerberos authentication) configured, do so.
+ You can run the KDC on the same system as your OpenAFS db server,
+ although if you plan on using Kerberos for other things, you may
+ eventually want to use separate systems. If you do not have a
+ Kerberos realm set up already, you can do so in Debian with:
+
+ apt-get install krb5-admin-server
+ krb5_newrealm
+
+ This will install a KDC and kadmind server (the server that handles
+ password changes and account creations) on the local system. Please
+ be aware that the security of everything that uses Kerberos for
+ authentication, including AFS, depends on the security of the KDC.
+
+ The name of your Kerberos realm should, for various reasons, be in
+ all uppercase and be a domain name that you control, although
+ neither is technically required.
+
+ 2. It is traditional (and recommended) in AFS (and for Kerberos) to
+ give administrators two separate Kerberos principals, one regular
+ principal to use for regular purposes and a separate admin principal
+ to use for privileged actions. This is similar to the distinction
+ between a regular user and the root user in Unix, except that
+ everyone can have their own separate root identity. Kerberos
+ recommends username/admin as the admin principal for username, and
+ this will work for AFS as well.
+
+ If you have not already created such an admin principal for yourself
+ in your Kerberos realm, do so now (using kadmin.local on your KDC,
+ unless you have a local method that you prefer). Also create a
+ regular (non-admin) principal for yourself if you have not already;
+ this is the identity that you'll use for regular operations, like
+ storing files or reading mail. To do this with kadmin.local, run
+ that program and then run the commands:
+
+ addprinc username/admin
+ addprinc username
+
+ at the kadmin prompt. You'll be prompted for passwords for both
+ accounts.
+
+ If the KDC is not on the same system that the OpenAFS db server will
+ be on, you will also need to give your admin principal the rights to
+ download the afs keytab in /etc/krb5kdc/kadm5.acl by adding a lines
+ like:
+
+ username/admin@REALM *
+
+ where REALM is your Kerberos realm and username/admin is the admin
+ principal that you created. That line gives you full admin access
+ to the Kerberos v5 realm. You can be more restrictive if you want;
+ see the kadmind man page for the syntax.
+
+ 3. Install the OpenAFS db server package on an appropriate system with:
+
+ apt-get install openafs-dbserver openafs-krb5
+
+ The openafs-krb5 package will be used to create the AFS KeyFile.
+
+ As part of this installation, you will need to configure
+ openafs-client with the cell you are creating as the local cell name
+ and the server on which you're working as the db server. This name
+ is technically arbitrary but should, for various reasons, be a valid
+ domain name that you control; unlike Kerberos realms, it should be
+ in all lowercase. Enter the name of the local system when prompted
+ for the names of your OpenAFS db servers. Don't start the client;
+ that will happen below. For right now, say that you don't want it
+ to start at boot. You can change that later with dpkg-reconfigure
+ openafs-client.
+
+ If you have already installed openafs-client and configured it for
+ some other cell, you do need to configure it to point to your new
+ cell for these instructions to work. Stop the AFS client on the
+ system with service openafs-client stop and then run:
+
+ dpkg-reconfigure openafs-client
+
+ pointing it to the new cell you're about to create instead.
+ Remember, your cell name should be in lowercase. If you have had to
+ do this several times, double-check /etc/openafs/CellServDB when
+ you're done and make sure that there is only one entry for your new
+ cell at the top of that file and that it lists the correct IP
+ address for your new db server.
+
+ In order to complete the AFS installation, you will also need a
+ working AFS client installed on that system, which means that you
+ need to install an OpenAFS kernel module. Please see:
+
+ /usr/share/doc/openafs-client/README.modules
+
+ for information on how to do that.
+
+ 4. Create an AFS principal in Kerberos. This is the AFS service
+ principal, used by clients to authenticate to AFS and for AFS
+ servers to authenticate to each other. It *must* be a DES key; AFS
+ does not support any other encryption type. Run kadmin.local on
+ your KDC and then, at the kadmin.local prompt, run:
+
+ addprinc -randkey -e des-cbc-crc:v4 afs
+
+ If your Kerberos realm name does not match your AFS cell name (if,
+ for instance, you have one Kerberos realm with multiple AFS cells),
+ use "afs/cell.name" as the name of the principal above instead of
+ just "afs", where cell.name is the name of your new AFS cell.
+
+ 5. On the db server, download this key into a keytab. If this is the
+ same system as the KDC, you can use kadmin.local again. If not, you
+ should use kadmin (make sure that krb5-user is installed), and you
+ may need to pass -p username/admin to kadmin to tell it what
+ principal to authenticate as. Whichever way you get into kadmin,
+ run:
+
+ ktadd -k /tmp/afs.keytab -e des-cbc-crc:v4 afs
+
+ (or afs/cell.name if you used that instead). In the message that
+ results, note the kvno number reported, since you'll need it later
+ (it will normally be 3).
+
+ Don't forget the -e des-cbc-crc:v4 to force the afs key to be DES.
+ You can verify this with:
+
+ getprinc afs
+
+ and checking to be sure that the only key listed is a DES key. If
+ there are multiple keys listed, delprinc the afs principal, delete
+ the /tmp/afs.keytab file, and then start over with addprinc, making
+ sure not to forget the -e option.
+
+ 6. Create the AFS KeyFile with:
+
+ asetkey add /tmp/afs.keytab afs
+
+ (or afs/cell.name if you used that instead). should be
+ replaced by the kvno number reported by kadmin. This tells AFS the
+ Kerberos key that it should use, making it match the key in the
+ Kerberos KDC.
+
+ 7. If the name of your Kerberos realm does not match the name of your
+ AFS cell, tell AFS what Kerberos realm to use with:
+
+ echo REALM > /etc/openafs/server/krb.conf
+
+ where REALM is the name of your Kerberos realm. If your AFS cell
+ and Kerberos realm have the same name, this is unnecessary.
+
+ 8. Create some space to use for AFS volumes. You can set up a separate
+ AFS file server on a different system from the Kerberos KDC and AFS
+ db server, and for a larger cell you will want to do so, but when
+ getting started you can make the db server a file server as well.
+ For a production cell, you will want to create a separate partition
+ devoted to AFS and mount it as /vicepa (and may want to make
+ multiple partitions mounted as /vicepb, /vicepc, etc.), but for
+ testing purposes, you can use the commands below to create a
+ zero-filled file, create a file system in it, and then mount it:
+
+ dd if=/dev/zero of=/var/lib/openafs/vicepa bs=1024k count=32
+ mke2fs /var/lib/openafs/vicepa
+ mkdir /vicepa
+ mount -oloop /var/lib/openafs/vicepa /vicepa
+
+ mke2fs will ask you if you're sure you want to create a file system
+ on a non-block device; say yes.
+
+ 9. Run afs-newcell. This will prompt you to be sure that the above
+ steps have been complete and will ask you for the Kerberos principal
+ to use for AFS administrative access. You should use the
+ username/admin principal discussed above. afs-newcell sets up the
+ initial protection database (which stores users and groups),
+ configures the AFS database and file server daemons, and creates the
+ root volume for AFS clients.
+
+ At the completion of this step, you should see bosserver and several
+ other AFS server processes running, and you should be able to see
+ the status of those processes with:
+
+ bos status localhost -local
+
+ bosserver is a master server that starts and monitors all the
+ individual AFS servers, and bos is the program used to send it
+ commands.
+
+ Now, you should be able to run:
+
+ kinit username/admin@REALM
+ aklog cell.name -k REALM
+
+ where username/admin is the admin principal discussed above, REALM
+ is the name of your Kerberos realm, and cell.name is the name of
+ your AFS cell. This will obtain Kerberos tickets and AFS tokens in
+ your Kerberos realm and new AFS cell. You should be able to see
+ your AFS tokens by running:
+
+ tokens
+
+ Finally, you should be able to see the status of the AFS server
+ processes with:
+
+ bos status
+
+ where is the hostname of the local system, once you've
+ done the above. This tests authenticated bos access as your admin
+ principal (rather than using the local KeyFile to authenticate).
+
+ 10. Run afs-rootvol. This creates the basic AFS volume structure for
+ your new cell, including the top-level volume, the mount point for
+ your cell in the AFS root volume, and the mount points for all known
+ public cells. It will prompt you to be sure that the above steps
+ are complete and then will ask you what file server and partition to
+ create the volume on. If you were following the above instructions,
+ use the local hostname and "a" as the partition (without the
+ quotes), which will use /vicepa.
+
+ After this command completes, you should be able to /bin/ls /afs and
+ see your local cell (and, if you aren't using dynroot, mount points
+ for several other cells). Note that if you're not using fakestat,
+ run /bin/ls rather than just ls to be sure that ls isn't aliased to
+ ls -F, ls --color, or some other option that would stat each file in
+ /afs, since this would require contacting lots of foreign cells and
+ could take a very long time.
+
+ You should now be able to cd to /afs/cell.name where cell.name is
+ the AFS cell name that you used. Currently, there isn't anything in
+ your cell except two volumes, user and service, created by
+ afs-rootvol. To make modifications, cd to /afs/.cell.name (note the
+ leading period) and make changes there. To make those changes show
+ up at /afs/cell.name, run vos release root.cell. For more details
+ on what you can do now, see the AFS Administrator's Reference.
+
+ 11. While this is optional, you probably want to add AFSDB records to
+ DNS for your new AFS cell. These special DNS records let AFS
+ clients find the db servers for your cell without requiring local
+ configuration. To do this, create a DNS record like:
+
+ . 3600 IN AFSDB 1 .
+
+ where | is the name of your AFS cell and is the name
+ of your db server. Note the trailing periods to prevent the DNS
+ server from appending the origin. You can, of course, choose what
+ you prefer for the lifetime. The 1 is not a priority; it's a
+ special indicator saying that this record is for an AFS database
+ server.
+
+ If you have multiple db servers (see below for adding new ones), you
+ should create multiple records of this type, one per db server.
+
+ Congratulations! You now have an AFS cell. If any of the above steps
+ failed, please check the steps carefully and make sure that you've done
+ them all in order. If that doesn't reveal the cause of the problem,
+ please feel free to submit a bug report with reportbug. Include as many
+ details as possible on exactly what you typed and exactly what you saw
+ as a result, particularly any error messages.
+
+Adding Additional Servers
+
+ If you decide one server is not enough, or if you're adding a server to
+ an existing cell, here is roughly what you should do:
+
+ 1. Copy securely (using scp, encrypted Kerberos rcp, or some other
+ secure method) all of /etc/openafs/server to the new server.
+
+ 2. Install the openafs-fileserver package on the new server.
+
+ 3. If the machine is to be a file server, create an fs instance using
+ bos create:
+
+ bos create dafs dafs -cmd /usr/lib/openafs/dafileserver \
+ -cmd /usr/lib/openafs/davolserver \
+ -cmd /usr/lib/openafs/salvageserver \
+ -cmd /usr/lib/openafs/dasalvager -localauth
+
+ For a file server, this is all you have to do. The above uses the
+ default fileserver options, however, which are not particularly
+ well-tuned for modern systems. afs-newcell uses the following
+ parameters from Harald Barth:
+
+ -p 23 -busyat 600 -rxpck 400 -s 1200 -l 1200 -cb 65535
+ -b 240 -vc 1200
+
+ If you want to add any additional fileserver options, enclose
+ /usr/lib/openafs/dafileserver and the following options in double
+ quotes when giving the bos create command.
+
+ This creates a demand-attach fileserver, which is recommended for
+ new installations. You can also create a regular fileserver if you
+ prefer. See the bos_create(8) man page for more information.
+
+ 4. For database servers, also install openafs-dbserver and then use bos
+ addhost to add the new server to /etc/openafs/server/CellServDB:
+
+ bos addhost
+
+ for each db server in your cell (including the new one).
+ Then, restart the ptserver and vlserver instances on each of your
+ existing servers with:
+
+ bos restart ptserver
+ bos restart vlserver
+
+ It's best to wait a few seconds after doing this for each server
+ before doing the next server so that voting finishes and you never
+ lose a quorum.
+
+ Only after ptserver and vlserver have been restarted on each of your
+ existing servers, create ptserver and vlserver instances on the new
+ server:
+
+ bos create ptserver simple /usr/lib/openafs/ptserver \
+ -localauth
+ bos create vlserver simple /usr/lib/openafs/vlserver \
+ -localauth
+
+ The existing servers should then propagate the database to the new
+ server. If you are using buserver, you will need to do the same
+ thing for it as with ptserver and vlserver.
+
+ Note that you do not need to run a file server on a db server if you
+ don't want to (and larger sites probably will not want to), but you
+ always need to have the openafs-fileserver package installed on db
+ servers. It contains the bosserver binary and some of the shared
+ infrastructure.
+
+ 5. If you added a new db server, configure your clients to use it. If
+ you are using AFSDB records in DNS, you can just add a new record
+ (see point 10 in the instructions for creating a new cell).
+ Otherwise, clients will need to have the new server IP address added
+ to their /etc/openafs/CellServDB file (or /usr/vice/etc/CellServDB
+ for non-Debian clients using the standard AFS paths), and the client
+ will have to be restarted before it will know about the new db
+ server.
+
+ The standard rule of thumb is that all of your database servers and file
+ servers should ideally be running the same version of OpenAFS. However,
+ in practice OpenAFS is fairly good at backward compatibility and you can
+ generally mix and match different versions. Be careful, though, to
+ ensure that all of your database servers are built the same when it
+ comes to options like --enable-supergroups (enabled in the Debian
+ packages).
+
+Upgrades
+
+ Currently, during an upgrade of the openafs-fileserver package, all
+ services will be stopped and restarted. If openafs-dbserver is upgraded
+ without upgrading openafs-fileserver, those server binaries will not be
+ stopped and restarted; that restart will have to be done by hand.
+
+ It is possible that future versions of this package will install for
+ example /usr/lib/openafs/fileserver.package instead of
+ /usr/lib/openafs/fileserver and then create links to the actual binaries
+ in postinst. Upgrades would then not replace the old binaries, but
+ instead a script will be provided to roll the links forward to the new
+ versions. The intent is that people could install the new package on
+ all their servers and then quickly move the links before restarting the
+ bosserver. This has not yet been implemented.
diff --git a/debian/README.source b/debian/README.source
new file mode 100644
index 0000000..17280eb
--- /dev/null
+++ b/debian/README.source
@@ -0,0 +1,124 @@
+General Maintenance
+
+ This package is maintained in Git via the Salsa debian project.
+ Salsa is used only for repository access control and not for any of
+ its other features.
+
+ Since we often pull up many upstream fixes from the upstream stable
+ branch due to slow upstream release frequencies, we use Git to handle
+ merging and patch pullups and do not attempt to export the Git
+ repository state as a patch set. This package uses 3.0 (quilt) via
+ the gbp pq subcommands.
+
+ Ideally, any changes that are not strictly Debian packaging changes
+ should be submitted upstream first. Upstream uses Gerrit for patch
+ review, which makes it very easy for anyone who wishes to submit
+ patches for review using Git. See:
+
+ https://wiki.openafs.org/devel/GitDevelopers/
+
+ for information on how to submit patches upstream. Starting from
+ OpenAFS 1.5, we're no longer carrying any substantial Debian-specific
+ changes outside of the debian/* directory, only temporary bug
+ workarounds, and we want to keep it that way.
+
+Importing a New Upstream Release
+
+ We want to be able to use Git to cherry-pick fixes from upstream, but
+ we want to base the Debian packages on the upstream tarball releases.
+ We also need to strip some non-DFSG files from the upstream tarball
+ releases and imported code, and want to drop the WINNT directory to
+ save some space. This means we follow a slightly complicated method
+ for importing a new upstream release.
+
+ Follow the following procedure to import a new upstream release:
+
+ 1. Update the package version in debian/changelog to match the new
+ upstream version. If the new upstream version is a prerelease
+ version, don't forget to add "~" before "pre" so that the versions
+ will sort property.
+
+ 2. Double-check the TAG setting in debian/rules to be sure it's going
+ to retrieve the correct Git tag.
+
+ 3. Run debian/rules get-orig-source. This will generate a tarball
+ from the upstream Git tag using git archive, remove the WINNT
+ directory, and create a file named openafs_.orig.tar.xz in
+ the current directory.
+
+ 4. Ensure that you have the OpenAFS upstream Git repository available
+ as a remote in the Git repository where you're doing the packaging
+ work and it's up to date:
+
+ git remote add openafs git://git.openafs.org/openafs.git
+ git fetch openafs
+
+ This will be required to locate the tag for the new upstream
+ release.
+
+ 5. Determine the release tag corresponding to this tarball. At the
+ time of this writing, upstream uses tags in the form:
+
+ openafs-stable-
+ openafs-devel-
+
+ for stable and development releases respectively. is the
+ version number with periods replaced by underscores. This
+ convention may change, so double-check with git tag.
+
+ 6. Import the upstream source from the tarball with:
+
+ gbp import-orig --upstream-vcs-tag
+
+ where is the tarball created by get-orig-source above and
+ is the corresponding tag from the upstream Git repository.
+
+ 7. Flesh out the changelog entry for the new version with a summary of
+ what changed in that release, and continue as normal with Debian
+ packaging.
+
+Pulling Upstream Changes
+
+ Upstream releases, particularly stable releases, are relatively
+ infrequent, so it's often desirable to pull upstream changes from the
+ stable branch into the Debian package. This should always be done
+ using git cherry-pick -x so that we can use git cherry to see which
+ changes on the stable branch have not been picked up.
+
+ The procedure is therefore:
+
+ 0. Regenerate and switch to the patch-queue branch with
+ git branch -d patch-queue/master && gbp pq import
+
+ 1. Identify the hash of the commit that you want to pull up using git
+ log or other information.
+
+ 2. git cherry-pick -x . If the cherry-pick fails and you have
+ to manually do a merge, follow the instructions to use -c to keep
+ the original commit message as a starting point, but *also*
+ manually add a line like:
+
+ (cherry picked from commit )
+
+ to the changelog entry where is the full hash of the
+ upstream commit. Note that the upstream commits on the stable
+ branch will generally already have a line like this from upstream's
+ cherry-pick. This will be a second line.
+
+ 3. Switch to the master branch and (re)generate patch files:
+ git checkout master && gbp pq export
+
+ 4. Add a changelog entry and commit it along with the added patch files.
+ Use the following convention for changelog entries for cherry-picks:
+
+ * Apply upstream deltas:
+ - []
+ - ...
+
+ where <hash> is the first eight characters of the upstream commit
+ hash and <title> is the first line of the upstream commit message,
+ edited as necessary to keep the length of the changelog lines
+ down.
+
+ -- Russ Allbery <rra@debian.org>, Sun, 20 Oct 2013 08:59:17 -0700
+ -- Benjamin Kaduk <kaduk@mit.edu>, Mon 22 Sep 2014 13:05:40 -0400
diff --git a/debian/TODO b/debian/TODO
new file mode 100644
index 0000000..24318af
--- /dev/null
+++ b/debian/TODO
@@ -0,0 +1,8 @@
+* Get bos restrict working.
+
+* The configuration transcript and the README.servers file would be best
+ read together, but preferrably with some nicer formatting (such as HTML
+ with a style sheet to set off the transcript in a different background
+ color).
+
+* Use pts addu -local instead of pt_util for initial cell setup.
diff --git a/debian/afs-newcell b/debian/afs-newcell
new file mode 100755
index 0000000..87e0586
--- /dev/null
+++ b/debian/afs-newcell
@@ -0,0 +1,289 @@
+#!/usr/bin/perl -w
+# Copyright (C) 2000 by Sam Hartman
+# This file may be copied either under the terms of the GNU GPL or the IBM
+# Public License either version 2 or later of the GPL or version 1.0 or later
+# of the IPL.
+
+use Term::ReadLine;
+use strict;
+use Debian::OpenAFS::ConfigUtils;
+use Getopt::Long;
+use Socket qw(inet_ntoa);
+use vars qw($admin $server $requirements_met $shutdown_needed);
+my $rl = new Term::ReadLine('afs-newcell');
+
+# The default file server options are poor. Until they've been updated, use
+# the following from Harald Barth; it should be an improvement for most
+# people.
+my $fs_options = '-p 23 -busyat 600 -rxpck 400 -s 1200 -l 1200 -cb 65535'
+ . ' -b 240 -vc 1200';
+
+=head1 NAME
+
+afs-newcell - Set up initial database server for AFS cell
+
+=head1 SYNOPSIS
+
+B<afs-newcell> [B<--requirements-met>] [B<--admin> admin_user]
+
+=head1 DESCRIPTION
+
+This script sets up the initial AFS database and configures the first
+database/file server.
+
+The B<--requirements-met> option specifies that the initial requirements have
+been met and that the script can proceed without displaying the initial
+banner or asking for confirmation.
+
+The B<--admin> option specifies the name of the administrative user. This
+user will be given system:administrators and susers permission in the cell.
+
+=head1 AUTHOR
+
+Sam Hartman <hartmans@debian.org>
+
+=cut
+
+# Flush all output immediately.
+$| = 1;
+
+GetOptions ("requirements-met" => \$requirements_met, "admin=s" => \$admin);
+
+unless ($requirements_met) {
+ print <<eoreqs;
+ Prerequisites
+
+In order to set up a new AFS cell, you must meet the following:
+
+1) You need a working Kerberos realm with Kerberos4 support. You
+ should install Heimdal with KTH Kerberos compatibility or MIT
+ Kerberos 5.
+
+2) You need to create the single-DES AFS key and load it into
+ /etc/openafs/server/KeyFile. If your cell's name is the same as
+ your Kerberos realm then create a principal called afs. Otherwise,
+ create a principal called afs/cellname in your realm. The cell
+ name should be all lower case, unlike Kerberos realms which are all
+ upper case. You can use asetkey from the openafs-krb5 package, or
+ if you used AFS3 salt to create the key, the bos addkey command.
+
+3) This machine should have a filesystem mounted on /vicepa. If you
+ do not have a free partition, then create a large file by using dd
+ to extract bytes from /dev/zero. Create a filesystem on this file
+ and mount it using -oloop.
+
+4) You will need an administrative principal created in a Kerberos
+ realm. This principal will be added to susers and
+ system:administrators and thus will be able to run administrative
+ commands. Generally the user is a root or admin instance of some
+ administrative user. For example if jruser is an administrator then
+ it would be reasonable to create jruser/admin (or jruser/root) and
+ specify that as the user to be added in this script.
+
+5) The AFS client must not be running on this workstation. It will be
+ at the end of this script.
+
+eoreqs
+#'# cperl-mode
+
+ $_ = $rl->readline("Do you meet these requirements? [y/n] ");
+ unless (/^y/i ) {
+ print "Run this script again when you meet the requirements\n";
+ exit(1);
+ }
+
+ if ($> != 0) {
+ die "This script should almost always be run as root. Use the\n"
+ . "--requirements-met option to run as non-root.\n";
+ }
+}
+
+# Make sure the AFS client is not already running.
+open(MOUNT, "mount |") or die "Failed to run mount: $!\n";
+while(<MOUNT>) {
+ if (m:^AFS:) {
+ print "The AFS client is currently running on this workstation.\n";
+ print "Please restart this script after running"
+ . " service openafs-client stop\n";
+ exit(1);
+ }
+}
+close MOUNT;
+
+# Make sure there is a keyfile.
+unless ( -f "/etc/openafs/server/KeyFile") {
+ print "You do not have an AFS keyfile. Please create this using\n";
+ print "asetkey from openafs-krb5 or the bos addkey command\n";
+ exit(1);
+}
+
+# Stop the file server.
+print "If the fileserver is not running, this may hang for 30 seconds.\n";
+run("service openafs-fileserver stop");
+
+# Get the local hostname. Use the fully-qualified hostname to be safer.
+$server = `hostname -f`;
+chomp $server;
+my $ip = gethostbyname $server;
+if (inet_ntoa($ip) eq '127.0.0.1') {
+ print "\n";
+ print "Your hostname $server resolves to 127.0.0.1, which AFS cannot\n";
+ print "cope with. Make sure your hostname resolves to a non-loopback\n";
+ print "IP address. (Check /etc/hosts and make sure that your hostname\n";
+ print "isn't listed on the 127.0.0.1 line. If it is, removing it from\n";
+ print "that line will probably solve this problem.)\n";
+ exit(1);
+}
+
+# Determine the admin principal.
+$admin = $rl->readline("What administrative principal should be used? ")
+ unless $admin;
+print "\n";
+die "Please specify an administrative user\n" unless $admin;
+my $afs_admin = $admin;
+$afs_admin =~ s:/:.:g;
+if ($afs_admin =~ /@/) {
+ die "The administrative user must be in the same realm as the cell and\n"
+ . "no realm may be specified.\n";
+}
+
+# Determine the local cell. This should be configured via debconf, from the
+# openafs-client configuration, when openafs-fileserver is installed.
+open(CELL, "/etc/openafs/server/ThisCell")
+ or die "Cannot open /etc/openafs/server/ThisCell: $!\n";
+my $cell = <CELL>;
+chomp $cell;
+
+# Make sure the new cell is configured in the client CellServDB.
+open(CELLSERVDB, "/etc/openafs/CellServDB")
+ or die "Cannot open /etc/openafs/CellServDB: $!\n";
+my $found = 0;
+while (<CELLSERVDB>) {
+ next unless /^>\Q$cell\E\s/;
+ while (<CELLSERVDB>) {
+ last if /^>/;
+ my ($dbserver) = split ' ';
+ if ($dbserver eq inet_ntoa($ip)) {
+ $found = 1;
+ last;
+ }
+ }
+ last;
+}
+unless ($found) {
+ print "\n";
+ print "The new cell $cell is not configured in /etc/openafs/CellServDB\n";
+ print "Add configuration like:\n\n";
+ print ">$cell\n";
+ print inet_ntoa($ip), "\t\t\t#$server\n\n";
+ print "to that file before continuing.\n";
+ exit(1);
+}
+
+# Write out a new CellServDB for the local cell containing only this server.
+if (-f "/etc/openafs/server/CellServDB") {
+ print "/etc/openafs/server/CellServDB already exists, renaming to .old\n";
+ rename("/etc/openafs/server/CellServDB",
+ "/etc/openafs/server/CellServDB.old")
+ or die "Cannot rename /etc/openafs/server/CellServDB: $!\n";
+}
+open(CELLSERVDB, "> /etc/openafs/server/CellServDB")
+ or die "Cannot create /etc/openafs/server/CellServDB: $!\n";
+print CELLSERVDB ">$cell\n";
+print CELLSERVDB inet_ntoa($ip), "\t\t\t#$server\n";
+close CELLSERVDB or die "Cannot write to /etc/openafs/server/CellServDB: $!\n";
+
+# Now, we should be able to start bos and add the admin user.
+run("service openafs-fileserver start");
+$shutdown_needed = 1;
+run("bos adduser $server $afs_admin -localauth");
+unwind("bos removeuser $server $afs_admin -localauth");
+
+# Create the initial protection database using pt_util. This is safer than
+# the standard mechanism of starting the cell in noauth mode until the first
+# user has been created.
+if (-f "/var/lib/openafs/db/prdb.DB0") {
+ warn "ERROR: Protection database already exists; cell already partially\n";
+ warn "ERROR: created. If you do not want the current database, remove\n";
+ warn "ERROR: all files in /var/lib/openafs/db and then run this program\n";
+ warn "ERROR: again.\n";
+ exit(1);
+}
+print "\nCreating initial protection database. This will print some errors\n";
+print "about an id already existing and a bad ubik magic. These errors can\n";
+print "be safely ignored.\n\n";
+open(PRDB, "| pt_util -p /var/lib/openafs/db/prdb.DB0 -w")
+ or die "Unable to start pt_util: $!\n";
+print PRDB "$afs_admin 128/20 1 -204 -204\n";
+print PRDB "system:administrators 130/20 -204 -204 -204\n";
+print PRDB " $afs_admin 1\n";
+close PRDB;
+unwind("rm /var/lib/openafs/db/prdb*");
+print "\n";
+
+# We should now be able to start ptserver and vlserver.
+run("bos create $server ptserver simple /usr/lib/openafs/ptserver -localauth");
+unwind("bos delete $server ptserver -localauth");
+run("bos create $server vlserver simple /usr/lib/openafs/vlserver -localauth");
+unwind("bos delete $server vlserver -localauth");
+
+# Create a file server as well.
+run("bos create $server dafs dafs"
+ . " -cmd '/usr/lib/openafs/dafileserver $fs_options'"
+ . " -cmd /usr/lib/openafs/davolserver"
+ . " -cmd /usr/lib/openafs/salvageserver"
+ . " -cmd /usr/lib/openafs/dasalvager -localauth");
+unwind("bos delete $server dafs -localauth");
+
+# Make sure that there is no scheduled general restart time; it's not needed.
+run("bos setrestart $server -time never -general -localauth");
+
+# Pause for a while for ubik to catch up.
+print "Waiting for database elections: ";
+sleep(30);
+print "done.\n";
+
+# Past this point we want to control when bos shutdown happens.
+$shutdown_needed = 0;
+unwind("bos shutdown $server -localauth -wait");
+run("vos create $server a root.afs -localauth");
+unwind("vos remove $server a root.afs -localauth");
+
+# We should now be able to bring up the client (it may need root.afs to exist
+# if not using dynroot). We override whatever default cell was configured for
+# the client, just in case it was pointing to some other cell.
+open(THIS, "> /etc/openafs/ThisCell")
+ or die "ERROR: Cannot create /etc/openafs/ThisCell: $!\n";
+print THIS "$cell\n";
+close THIS or die "ERROR: Cannot write to /etc/openafs/ThisCell: $!\n";
+run("service openafs-client force-start");
+
+# Verify that AFS has managed to start.
+my $afs_running = 0;
+open(MOUNT, "mount |") or die "ERROR: Failed to run mount: $!\n";
+while(<MOUNT>) {
+ if (m:^AFS:) {
+ $afs_running = 1;
+ }
+}
+unless ($afs_running) {
+ print "ERROR: The AFS client failed to start.\n";
+ print "ERROR: Please fix whatever problem kept it from running.\n";
+ exit(1);
+}
+print "\n";
+print "Now, get tokens as $admin in the $cell cell.\n";
+print "Then, run afs-rootvol.\n";
+
+# Success, so clear the unwind commands.
+@unwinds = ();
+
+# If we fail before all the instances are created, we need to back out of
+# everything we did as much as possible.
+END {
+ if ($shutdown_needed || @unwinds) {
+ print "\nCell setup failed, ABORTING\n";
+ }
+ system("bos shutdown $server -localauth -wait") if $shutdown_needed;
+ run(pop @unwinds) while @unwinds;
+}
diff --git a/debian/afs-rootvol b/debian/afs-rootvol
new file mode 100755
index 0000000..9a8da2f
--- /dev/null
+++ b/debian/afs-rootvol
@@ -0,0 +1,194 @@
+#!/usr/bin/perl -w
+# Copyright (C) 2000 by Sam Hartman
+# This file may be copied either under the terms of the GNU GPL or the IBM
+# Public License either version 2 or later of the GPL or version 1.0 or later
+# of the IPL.
+
+use strict;
+use Debian::OpenAFS::ConfigUtils;
+use Term::ReadLine;
+use Getopt::Long;
+use vars qw($rl $server $part $requirements_met);
+
+=head1 NAME
+
+afs-rootvol - Generate and populate root volumes for new AFS cells.
+
+=head1 SYNOPSIS
+
+B<afs-rootvol> [B<--requirements-met>] [B<--server> I<server-name>]
+[B<--partition> I<partition-letter>]
+
+=head1 DESCRIPTION
+
+This script sets up an AFS cell's root volumes. It assumes that you already
+have a fileserver and database servers. The fileserver should have an empty
+root.afs. This script creates root.cell, user, and service and populates
+root.afs.
+
+=head1 AUTHOR
+
+Sam Hartman <hartmans@debian.org>
+
+=cut
+#'# cperl-mode
+
+# This subroutine creates a volume, mounts it and then sets the access
+# to allow read by anyuser. The volume is scheduled for deletion in
+# case of error.
+sub mkvol($$) {
+ my ($vol, $mnt) = @_;
+ run("vos create $server $part $vol -localauth");
+ unwind("vos remove $server $part $vol -localauth");
+ run("fs mkm $mnt $vol ");
+ run("fs sa $mnt system:anyuser rl");
+}
+
+# Main script. Flush all output immediately.
+$| = 1;
+$rl = new Term::ReadLine('AFS');
+GetOptions ("requirements-met" => \$requirements_met,
+ "server=s" => \$server,
+ "partition=s" => \$part);
+unless ($requirements_met) {
+ print <<eotext;
+ Prerequisites
+
+In order to set up the root.afs volume, you must meet the following
+pre-conditions:
+
+1) The cell must be configured, running a database server with a
+ volume location and protection server. The afs-newcell script will
+ set up these services.
+
+2) You must be logged into the cell with tokens in for a user in
+ system:administrators and with a principal that is in the UserList
+ file of the servers in the cell.
+
+3) You need a fileserver in the cell with partitions mounted and a
+ root.afs volume created. Presumably, it has no volumes on it,
+ although the script will work so long as nothing besides root.afs
+ exists. The afs-newcell script will set up the file server.
+
+4) The AFS client must be running pointed at the new cell.
+eotext
+
+ $_ = $rl->readline("Do you meet these conditions? (y/n) ");
+ unless (/^y/i ) {
+ print "Please restart the script when you meet these conditions.\n";
+ exit(1);
+ }
+ if ($> != 0) {
+ die "This script should almost always be run as root. Use the\n"
+ . "--requirements-met option to run as non-root.\n";
+ }
+}
+
+# Get configuration information we need.
+open(CELL, "/etc/openafs/server/ThisCell")
+ or die "Unable to find out what cell this machine serves: $!\n";
+my $cell = <CELL>;
+close CELL;
+chomp $cell;
+
+unless ($server) {
+ print <<eotext;
+
+You will need to select a server (hostname) and AFS partition on which to
+create the root volumes.
+
+eotext
+
+ $server = $rl->readline("What AFS Server should volumes be placed on? ");
+ die "Please select a server.\n" unless $server;
+}
+unless ($part) {
+ $part = $rl->readline("What partition? [a] ");
+ $part = "a" unless $part;
+}
+print "\n";
+
+# Make sure the user has tokens. Forgetting to do this is a common error.
+my $status = system("tokens | grep Expires > /dev/null");
+if ($status != 0) {
+ die "You appear to not have AFS tokens. Obtain tokens (with aklog,\n"
+ . "for example) and then run this script again.\n";
+}
+
+# Figure out where root.afs is. There are two possibilities: either we aren't
+# running with dynroot, and root.afs is therefore accessible as /afs, or we
+# are running with dynroot, in which case we have to create root.cell first
+# and then mount root.afs under it.
+#
+# Always create root.cell first; we may need it if running with dynroot, and
+# it doesn't hurt to do it now regardless.
+my $rootmnt = "/afs";
+run("vos create $server $part root.cell -localauth");
+unwind("vos remove $server $part root.cell -localauth");
+my $dynroot = (-d "$rootmnt/$cell/.");
+if ($dynroot) {
+ run("fs mkm /afs/$cell/.root.afs root.afs -rw");
+ unwind("fs rmm /afs/$cell/.root.afs");
+ $rootmnt = "/afs/$cell/.root.afs";
+}
+run("fs sa $rootmnt system:anyuser rl");
+
+# Scan CellServDB and create the cell mount points for every cell found there.
+# Force these commands to succeed, since it's possible to end up with
+# duplicate entries in CellServDB (and the second fs mkm will fail).
+open(CELLSERVDB, "/etc/openafs/CellServDB")
+ or die "Unable to open /etc/openafs/CellServDB: $!\n";
+while (<CELLSERVDB>) {
+ chomp;
+ if (/^>\s*([a-z0-9_\-.]+)/) {
+ run("fs mkm $rootmnt/$1 root.cell -cell $1 -fast || true");
+ unwind("fs rmm $rootmnt/$1 || true");
+ }
+}
+
+# Now, create the read/write mount points for root.cell and root.afs and set
+# root.cell system:anyuser read.
+run("fs sa /afs/$cell system:anyuser rl");
+run("fs mkm $rootmnt/.$cell root.cell -cell $cell -rw");
+unwind("fs rmm $rootmnt/.$cell");
+run("fs mkm $rootmnt/.root.afs root.afs -rw");
+unwind("fs rmm $rootmnt/.root.afs");
+
+# Create the user and service mount point volumes to fit the semi-standard AFS
+# cell layout.
+mkvol("user", "/afs/$cell/user");
+mkvol("service", "/afs/$cell/service");
+
+# Strip the domain off of the cell name and create the short symlinks.
+$cell =~ /^([^.]+)/;
+my $cellpart = $1;
+if ($cellpart && $cellpart ne $cell) {
+ run("ln -s $cell $rootmnt/$cellpart");
+ unwind("rm $rootmnt/$cellpart");
+ run("ln -s .$cell $rootmnt/.$cellpart");
+ unwind("rm $rootmnt/.$cellpart");
+}
+if ($dynroot) {
+ run("fs rmm /afs/$cell/.root.afs");
+ unwind("fs mkm /afs/$cell/.root.afs root.afs -rw");
+}
+
+# Now, replicate the infrastructure volumes.
+run("vos addsite $server $part root.afs -localauth");
+run("vos addsite $server $part root.cell -localauth");
+run("vos release root.afs -localauth");
+run("vos release root.cell -localauth");
+unwind("vos remove $server $part root.cell.readonly -localauth");
+unwind("vos remove $server $part root.afs.readonly -localauth");
+
+# Success, so clear the unwind commands.
+@unwinds = ();
+
+# If we fail before all the instances are created, we need to back out of
+# everything we did as much as possible.
+END {
+ if (@unwinds) {
+ print "\nRoot volume setup failed, ABORTING\n";
+ }
+ run(pop @unwinds) while @unwinds;
+}
diff --git a/debian/afs.conf b/debian/afs.conf
new file mode 100644
index 0000000..701d50f
--- /dev/null
+++ b/debian/afs.conf
@@ -0,0 +1,116 @@
+# -*- sh -*-
+# Copyright 2000, International Business Machines Corporation and others.
+# All Rights Reserved.
+#
+# This software has been released under the terms of the IBM Public
+# License. For details, see the LICENSE file in the top-level source
+# directory or online at http://www.openafs.org/dl/license10.html
+
+# Configuration information for AFS client.
+
+# The following options are maintained by debconf. To change them, run
+# dpkg-reconfigure openafs-client.
+#
+# AFS_CLIENT Whether to start the AFS client at boot
+# AFS_AFSDB Whether to use AFSDB DNS records to find VLDB servers
+# AFS_CRYPT Whether to enable fcrypt encryption
+# AFS_DYNROOT Whether to use a dynamic /afs directory
+# AFS_FAKESTAT Whether to fake stat data for mount points
+
+test -f /etc/openafs/afs.conf.client && . /etc/openafs/afs.conf.client
+
+# Set to "-verbose" for a lot of debugging information from afsd. Only useful
+# for debugging as it prints a LOT of information.
+VERBOSE=
+
+# AFS client configuration options.
+#
+# Here is a (mostly) complete list of flags that afsd accepts and that are
+# useful here:
+#
+# -blocks The number of blocks available in the workstation cache.
+# -files The target number of files in the workstation cache (Default:
+# 1000).
+# -rootvol The name of the root volume to use.
+# -stat The number of stat cache entries.
+# -hosts List of servers to check for volume location info FOR THE
+# HOME CELL.
+# -memcache Use an in-memory cache rather than disk.
+# -cachedir The base directory for the workstation cache.
+# -mountdir The directory on which the AFS is to be mounted.
+# -confdir The configuration directory.
+# -nosettime Don't keep checking the time to avoid drift (default).
+# -settime Keep checking the time to avoid drift.
+# -verbose Be chatty.
+# -debug Print out additional debugging info.
+# -daemons The number of background daemons to start (Default: 2).
+# -rmtsys Also fires up an afs remote sys call (e.g. pioctl, setpag)
+# support daemon
+# -chunksize 2^n is the chunksize to be used (Default: use a kernel
+# module default).
+# -dcache The number of data cache entries.
+# -prealloc Number of preallocated "small" memory blocks
+# -waitclose Make close calls always synchronous (slows them down, though)
+# -files_per_subdir Number of files per cache subdir (Default: 2048).
+#
+# Using the memory cache is not recommended. It's less stable than the disk
+# cache and doesn't improve performance as much as it might sound.
+#
+# The default behavior is to let afsd automatically choose an apporpriate set
+# of flags. This should produce reasonable behavior for most working sets
+# provided that one is using a modern AFS client (1.4.2 or later).
+#
+# You can override that default behavior by setting OPTIONS to a specific set
+# of flags.
+OPTIONS=AUTOMATIC
+
+# The default value for the client sysname (as returned by fs sysname) is
+# determined during the kernel module build and is taken from the architecture
+# and the major Linux kernel version. Accesses to directories named "@sys" in
+# AFS will be internally redirected to a directory by this name by the AFS
+# client, allowing a single path to resolve to different directories depending
+# on the client architecture.
+#
+# If you would like to override the client sysname, uncomment this line and
+# set the variable to a space-separated list of sysnames. The AFS client will
+# attempt to resolve @sys to each directory name in the order given.
+#AFS_SYSNAME=""
+
+# If you want to prefer particular servers for replicated volumes, you can
+# configure that by defining an afs_server_prefs function here and then
+# uncommenting the setting of AFS_POST_INIT below. For more information, see
+# fs help setserverprefs and fs getserverprefs (for the current values).
+
+#afs_server_prefs() {
+# fs setserverprefs <host> <rank>
+#}
+
+# If you want to always run some command after starting OpenAFS, you can put
+# it here. Note that you cannot run multiple commands, even combined with &&
+# or ; or similar shell meta-characters. If you want to run multiple
+# commands, define a shell function instead and put the name of the shell
+# function here.
+AFS_POST_INIT=
+
+# Uncomment this line if you defined an afs_server_prefs function. (If you
+# have other commands that you also want to run, you'll have to put them in
+# that function, as you can only run one function.)
+#AFS_POST_INIT=afs_server_prefs
+
+# If you want to always run some command before shutting down OpenAFS, you can
+# put it here. The same caveat applies about multiple commands.
+AFS_PRE_SHUTDOWN=
+
+# If you are having problems with AFS shutting down cleanly or the system not
+# rebooting because the partition the AFS cache was on could not be unmounted,
+# try installing lsof and uncommenting this. This will cause all processes
+# with open AFS files to be killed before unmounting AFS if the runlevel being
+# switched to is 0 or 6.
+#
+# Warning: This means service openafs-client stop will kill all processes
+# with files open in AFS rather than returning an error saying the file system
+# is busy. This is probably what you want when the whole system is shutting
+# down, but often *not* what you want when just stopping and restarting the
+# client. The code doesn't run unless the runlevel is 0 or 6, but still, be
+# sure that this is what you want before enabling it.
+#AFS_PRE_SHUTDOWN=kill_all_afs
diff --git a/debian/changelog b/debian/changelog
new file mode 100644
index 0000000..2b592b4
--- /dev/null
+++ b/debian/changelog
@@ -0,0 +1,3557 @@
+openafs (1.8.8.1-2~ppa1~jammy) jammy; urgency=medium
+
+ * Build for OpenDev PPA.
+
+ -- Ian Wienand <iwienand@redhat.com> Wed, 04 May 2022 20:29:00 +0000
+
+openafs (1.8.8.1-2) unstable; urgency=medium
+
+ * Skip unit test that fails on the buildds by virtue of using a
+ hardcoded port number.
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Sat, 12 Mar 2022 21:00:27 -0800
+
+openafs (1.8.8.1-1) unstable; urgency=high
+
+ * New upstream release:
+ - Support linux kernel 5.16 (Closes: #1005404)
+ - Treat the Rx SACK table as bits, not bytes, in preparation for
+ subsequent changes to expand the maximum window size.
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Sun, 20 Feb 2022 20:15:56 -0800
+
+openafs (1.8.8-3) unstable; urgency=medium
+
+ * Import upstream FTBFS fix for Linux 5.15
+
+ -- Paolo Pisati <paolo.pisati@canonical.com> Tue, 23 Nov 2021 15:39:23 +0000
+
+openafs (1.8.8-2) unstable; urgency=medium
+
+ * Import upstream patch to improve support for linux 5.14 (avoiding
+ a runtime error when the set_page_dirty operation is requested)
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Tue, 12 Oct 2021 22:10:08 -0700
+
+openafs (1.8.8-1) unstable; urgency=medium
+
+ * New upstream release:
+ - Support linux kernel 5.14 (Closes: #995134)
+ PowerPC may be affected by a new ABI restriction.
+ - Fix key handling for keys with parity bits (e.g., triple-DES)
+ (Closes: #987690)
+ - Use proper credentials for I/O to cache to avoid unneeded blockage
+ by security mechanisms like AppArmor
+ - Improvements in certain Rx call edge cases
+ - Attempt to recover from certain errors instead of panicking clients
+ - Additional changes noted in upstream changelog
+ * Update debian/copyright for new file added upstream
+ * Update to policy 4.6.0 (no changes needed)
+ * Specify Build-Depends-Package in symbols files
+ * Update to watch file version=4
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Sun, 26 Sep 2021 22:34:07 -0700
+
+openafs (1.8.6-5) unstable; urgency=emergency
+
+ * Pull in upstream patches to fix outgoing connections after
+ unix epoch time 0x60000000 (Closes: #980115, #980116)
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Thu, 14 Jan 2021 11:48:18 -0800
+
+openafs (1.8.6-4) unstable; urgency=medium
+
+ * Bump Standards-Version to 4.5.0 (no changes needed)
+ * Pull in upstream patches for linux kernel 5.9 support
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Sun, 25 Oct 2020 11:28:45 -0700
+
+openafs (1.8.6-3) unstable; urgency=medium
+
+ * Pull in upstream patches for linux kernel 5.8 support (Closes: #970258)
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Sat, 19 Sep 2020 15:39:18 -0700
+
+openafs (1.8.6-2) unstable; urgency=medium
+
+ * Pull in upstream patches for -fcommon support (Closes: #966881)
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Sun, 30 Aug 2020 19:39:18 -0700
+
+openafs (1.8.6-1) unstable; urgency=medium
+
+ * New upstream release:
+ - Support linux kernel 5.7 (thanks Paolo Pisati for an early backport)
+ (Closes: #964027)
+ - other changes noted in the 1.8.6~pre1-1 entry
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Tue, 30 Jun 2020 21:32:42 -0700
+
+openafs (1.8.6~pre1-3) unstable; urgency=medium
+
+ * Temporarily disable a test that fails on armhf buildd but not porterbox
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Tue, 24 Mar 2020 17:30:45 -0700
+
+openafs (1.8.6~pre1-2) unstable; urgency=medium
+
+ * Pull in upstream patch to not resolve IP addresses to names in the
+ vos tests (Closes: #953729)
+ * Only use dh_missing --fail-missing for binary packages, to match
+ the behavior used by the debhelper-compat-9 packaging prior to
+ 1.8.6~pre1-1 (Closes: #953709)
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Sat, 21 Mar 2020 18:58:47 -0700
+
+openafs (1.8.6~pre1-1) unstable; urgency=medium
+
+ * New upstream prerelease (Closes: #953709):
+ - Code cleanup prompted by gcc9 errors
+ - Update "vos zap -force" to clean up empty directories
+ - Relax implementation-specific XDR array length limits for prdb types,
+ which were being hit in practice at some large sites
+ - Tighten up fileservers' -readonly mode, and add an option to allow
+ members of system:administrators to be able to write to readonly servers
+ - Support linux kernels up to version 5.6rc2
+ - Additional sundry changes; see upstream NEWS
+ * Pull in additional patches from upstream:
+ - Support linux kernel 5.6 release
+ - Recognize ppc64le in configure's OS-detection logic
+ - Skip vos tests if vlserver port is already bound (Closes: #953729)
+ * Fix typo preventing ppc64el support from working (Closes: #946520)
+ * Update Italian debconf translation; thanks Beatrice Torracca
+ (Closes: #952799)
+ * Update to debhelper-compat 12
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Sat, 21 Mar 2020 14:10:06 -0700
+
+openafs (1.8.5-1) unstable; urgency=high
+
+ * New upstream security release (Closes: #943587):
+ - Fix OPENAFS-SA-2019-001, OPENAFS-SA-2019-002: information leakage from
+ uninitialized RPC output variables
+ - Fix OPENAFS-SA-2019-003: database server DoS (NULL dereference)
+ * Configure --without-ctf-tools to allow kernel module builds when ctfutils
+ are installed. (Closes: #935771)
+ * Enable support for ppc64le. (Closes: #941658)
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Sun, 27 Oct 2019 15:13:27 -0700
+
+openafs (1.8.4~pre1-1) unstable; urgency=medium
+
+ [ Ondřej Nový ]
+ * d/control: Removing redundant Priority field in binary package
+ * d/changelog: Remove trailing whitespaces
+
+ [ Anders Kaseorg ]
+ * New upstream release 1.8.3:
+ - Miscellaneous improvements to error handling and server efficiency
+ (see NEWS).
+ - Support Linux 5.0.
+ * Update CellServDB from grand.central.org (2018-05-14).
+ * Remove custom compression settings for Debian tarball and binary
+ packages.
+
+ [ Benjamin Kaduk ]
+ * New upstream prerelease 1.8.4pre1:
+ - Further work to avoid spurious ENOENTs from filesystem access.
+ - Fix the behavior of ptserver -restricted to match the documentation.
+ - Autoconf updates and modernization. (Closes: #934758)
+ - Additional miscellaneous improvements (see NEWS).
+ * openafs-fileserver now depends on openafs-krb5 for akeyconvert in the
+ maintainer script. (Closes: #934236)
+ * Debconf translation update:
+ - Danish, thanks Joe Hansen. (Closes: #923111)
+ * Backport upstream patch to require opt-in for weak crypto in aklog
+ and klog.krb5. (Closes: #931819)
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Sat, 17 Aug 2019 06:54:44 -0700
+
+openafs (1.8.2-1) unstable; urgency=high
+
+ * New upstream release 1.8.1.1:
+ - Support Linux 4.18.
+ * New upstream security release 1.8.2 (Closes: #908616):
+ - Fix OPENAFS-SA-2018-001: unauthenticated volume operations via butc
+ (CVE-2018-16947).
+ - Fix OPENAFS-SA-2018-002: information leakage in RPC output variables
+ (CVE-2018-16948).
+ - Fix OPENAFS-SA-2018-003: denial of service due to excess resource
+ consumption (CVE-2018-16949).
+
+ -- Anders Kaseorg <andersk@mit.edu> Tue, 11 Sep 2018 22:53:43 -0700
+
+openafs (1.8.1-1) unstable; urgency=medium
+
+ * New upstream release. In addition to changes in pre2:
+ - Fix issue where `vldb_check -fix` would corrupt databases with multiple
+ MH blocks
+ - Improved error handling when the cache partition is inaccessible
+ - Improved error handling when page allocation fails
+ * Supply sysname generation for arm64 to get further in the build.
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Sun, 29 Jul 2018 10:35:12 -0500
+
+openafs (1.8.1~pre2-1) unstable; urgency=medium
+
+ * New upstream prerelease:
+ - Add support for arm64
+ - Improve usability of the shared libraries and public API
+ - Fix volume callbacks so clients see updates after volume releases
+ - Fix Rx connection refcount error that could lead to server crashes
+ - Fix panic when cahe bypass is enabled
+ - Use valid serial number for Rx aborts if possible (and 0 otherwise)
+ - Return valid InlineBulkStatus responses in error cases
+ - The fileserver rejects invalid partition names when attaching partitions
+ - Improve cache manager behavior when unable to open cache files (e.g.,
+ if the cache partition is remounted readonly)
+ - Improve some error messages
+ * Update Dutch debconf translation; thanks Frans Spiesschaert.
+ (Closes: #895459)
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Sun, 01 Jul 2018 18:42:26 -0500
+
+openafs (1.8.0-1) unstable; urgency=low
+
+ * New upstream release. Changes since pre5:
+ - Fix issues with -Wpointer-sign
+ - Edits to the afsd manpage regarding the -volume-ttl feature
+ * Update debian/README.source to reflect the move from Alioth to Salsa
+ * Update German debconf translation; thanks Pfannenstein Erik.
+ (Closes: #887663)
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Thu, 05 Apr 2018 21:16:37 -0500
+
+openafs (1.8.0~pre5-1) unstable; urgency=low
+
+ [ Russ Allbery ]
+ * Remove myself from Uploaders.
+
+ [ Benjamin Kaduk ]
+ * New upstream release candidate:
+ - Update CellServDB from grand.central.org (2017-03-14)
+ - Avoid rare deadlock condition when recreating a deleted file/directory
+ on old Linux kernels
+ - Clean up ubik DISK_ RPC behavior with respect to sending updates to
+ sites that would reject the update
+ - Remove includes of <rpc/types.h>, for compatibility with glibc 2.26
+ - Do not include RXGEN_OPCODE when throttling clients that generate too
+ many abort replies
+ * Update Vcs- entries in control to reflect the move from alioth to salsa
+ * Correct 1.8.0~pre4-1 changelog entry to reflect that it closed one more
+ Mayhem-reported bug. (Closes: #716446)
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Mon, 19 Feb 2018 10:51:08 -0600
+
+openafs (1.8.0~pre4-1) unstable; urgency=low
+
+ [ Benjamin Kaduk ]
+ * New upstream major release (prerelease):
+ - Servers no longer use rxkad.keytab for long-term keys, which are
+ now stored in KeyFileExt. Administrators must use akeyconvert
+ or similar tooling to populate the KeyFileExt after updating the
+ krb5 keys in rxkad.keytab. In most cases, `akeyconvert` with no
+ arguments will suffice; that command is run automatically in the
+ package's postinstall script.
+ - kaserver, klog.afs, pam-openafs-kaserver, and other kauth-related
+ tools are removed.
+ - Server log handling has changed. Logs are not truncated at
+ startup by default, and are re-opened on SIGUSR1, to be compatible
+ with external log rotation tools.
+ - Client time management support (afsd -settime and afsd -nosettime)
+ has been removed.
+ - Linux versions prior to 2.6 are no longer supported by the client.
+ - Desupport 32-bit s390/s390x
+ - Most binaries now use pthreads instead of LWP green threads.
+ - The fileserver ihandle fsync thread is removed.
+ - Support Linux up to 4.14
+ - Provide vldb cache timeout option for clients
+ - Eliminate potential 100ms delay after rx receive window changes
+ - Modify volume update date after salvager makes changes
+ - Improve ubik safety for relabels and writes shortly after an election
+ - Preserve volume stats during reclone and restore operations
+ - Improve command-line parsing for various utilities.
+ (Closes: #715623, #715787, #716144, #716234, #716444, #716446)
+ - Fix for OPENAFS-SA-2017-001. (Closes: #883602)
+ - Many other generic improvements throughout the tree; consult the
+ upstream changelog for details.
+ * Add versioned build-depends for renamed symbols in heimdal-multidev.
+ (Closes: #848664)
+ * Bump Standards-Version to 4.1.3 (no changes needed).
+ * Update Dutch debconf translation; thanks Frans Spiesschaert.
+ (Closes: #874280)
+
+ [ Anders Kaseorg ]
+ * Use dh_auto_configure.
+ * Correct some paths in the openafs-doc packaging
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Wed, 03 Jan 2018 22:14:49 -0600
+
+openafs (1.6.22-3) unstable; urgency=medium
+
+ * Pull in upstream patch to avoid OOPS on linux 4.14 kernels.
+ (Closes: #884420)
+ * Pull in pending upstream patch to include stdint.h where needed.
+ This should allow Ubuntu to return to syncing openafs from Debian.
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Thu, 14 Dec 2017 21:08:16 -0600
+
+openafs (1.6.22-2) unstable; urgency=medium
+
+ * Update Russian debconf translation; thanks Lev Lamberov.
+ (Closes: #883916)
+ * Pull in upstream patches to build with kernel 4.14. (Closes: #884276)
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Wed, 13 Dec 2017 19:15:58 -0600
+
+openafs (1.6.22-1) unstable; urgency=high
+
+ * New upstream security release:
+ - Fix for OPENAFS-SA-2017-001. (Closes: #883602)
+ - Improved support for recent Linux versions
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Tue, 05 Dec 2017 10:28:15 -0600
+
+openafs (1.6.21-3) unstable; urgency=medium
+
+ * Build documentation with FORCE_SOURCE_DATE=1, without which pdfTeX
+ refuses to behave fully reproducibly.
+ * debian/patches:
+ - Linux-Include-linux-uaccess.h-rather-than-asm-uacces.patch: Fix
+ build failure on s390x with Linux kernel 4.12. (LP: #1711835)
+
+ -- Anders Kaseorg <andersk@mit.edu> Wed, 30 Aug 2017 23:42:03 -0400
+
+openafs (1.6.21-2) unstable; urgency=medium
+
+ * debian/patches:
+ - AFS_component_version_number.c-Respect-SOURCE_DATE_E.patch: Use UTC
+ for better reproducibility.
+ - 0003-Add-dummy-exit-command-for-afsd-to-do-nothing.patch: Fix
+ rebasing mistake so -exit works correctly.
+ - Linux-4.13-use-designated-initializers-where-require.patch: Support
+ Linux kernel 4.13. (LP: #1706433)
+ * Update Portuguese debconf translation; thanks Rui Branco.
+ (Closes: #871559)
+ * Update French debconf translation; thanks Alban Vidal.
+ (Closes: #872026)
+ * Update CellServDB from grand.central.org (2017-03-14).
+
+ -- Anders Kaseorg <andersk@mit.edu> Tue, 22 Aug 2017 19:47:50 -0400
+
+openafs (1.6.21-1) unstable; urgency=medium
+
+ * New upstream release (1.6.21):
+ - Include support for Linx versions through 4.12. (Closes: #859155)
+ - Improve support for Linux kernels with backported patches.
+ (Closes: #855366)
+ - Improve bosserver startup behavior with unexpected arguments or
+ configuration symlinks.
+ - Re-enable vcache cleanup improvement from 1.6.18, with bugs fixed.
+ - Provide the afsd -inumcalc option; this behavior was previously
+ only configurable via sysctl.
+ - The salvager updates volume "last update" times when modifying volumes.
+ - Demand-attach fileserver improvements for reducing log spew and preventing
+ thread exhaustion during CPS recalculation.
+ - Avoid a potential 100ms transmit delay in RX when the peer's receive
+ window advances.
+ * Switch openafs-fileserver.service to Type=simple and pass -nofork to
+ bosserver. (Closes: #865962)
+ * Update for policy version 4.0.0, honor nodoc in DEB_BUILD_OPTIONS
+ * Use service(8) instead of /etc/init.d/* directly in documentation and
+ helper scripts
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Mon, 10 Jul 2017 15:27:56 -0500
+
+openafs (1.6.20-2) unstable; urgency=medium
+
+ * Build-Depend debhelper (>= 9.20160114) for dh_strip
+ --dbgsym-migration.
+ * debian/patches:
+ - LINUX-split-dentry-eviction-from-osi_TryEvictVCache.patch,
+ Reformat-src-afs-LINUX-osi_vcache.c.patch,
+ LINUX-do-not-use-d_invalidate-to-evict-dentries.patch,
+ afs-shake-harder-in-shake-loose-vcaches.patch: Avoid system hangs on
+ busy machines due to vcache deallocation failures.
+ - Linux-4.9-deal-with-demise-of-GROUP_AT.patch,
+ Linux-4.9-inode_operation-rename-now-takes-flags.patch,
+ Linux-4.9-inode_change_ok-becomes-setattr_prepare.patch: Support
+ Linux kernel 4.9. (Closes: #847011)
+ - AFS_component_version_number.c-Respect-SOURCE_DATE_E.patch:
+ Respect SOURCE_DATE_EPOCH in cml_version_number to improve build
+ reproducibility.
+ * openafs-modules-source: Generate /usr/src/openafs.tar.bz2
+ reproducibly.
+
+ -- Anders Kaseorg <andersk@mit.edu> Sun, 04 Dec 2016 17:49:15 -0500
+
+openafs (1.6.20-1) unstable; urgency=high
+
+ * New upstream release (1.6.19):
+ - Fix issue that could result in using out-of-date database versions
+ in rare cases
+ - Don't commit more data to a file than was actually copied during writes,
+ which could happen on architectures with a page size greater than 4K
+ * New upstream security release (1.6.20):
+ - Fix information leakage (file/directory names) from reused directory
+ buffers
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Wed, 30 Nov 2016 16:52:29 -0500
+
+openafs (1.6.18.3-3) unstable; urgency=medium
+
+ * Drop openafs-dbg in favor of automatically generated dbgsym packages.
+ * Mark openafs-doc Multi-Arch: foreign.
+ * debian/patches/tests-util-ktime-t.c-Specify-EST-offset-in-TZ.patch:
+ Fix FTBFS with tzdata uninstalled. (Closes: #839481)
+ * Depend lsb-base (>= 3.0-6) in openafs-client and openafs-fileserver
+ for /lib/lsb/init-functions.
+
+ -- Anders Kaseorg <andersk@mit.edu> Wed, 12 Oct 2016 18:04:12 -0400
+
+openafs (1.6.18.3-2) unstable; urgency=medium
+
+ * Drop hardening-wrapper in favor of passing flags via CC.
+ (Closes: #836642)
+ * Clean doxyen-generated documentation with dh_doxygen.
+
+ -- Anders Kaseorg <andersk@mit.edu> Sun, 11 Sep 2016 17:15:39 -0400
+
+openafs (1.6.18.3-1) unstable; urgency=medium
+
+ * New upstream release 1.6.18.3:
+ - Support Linux kernel 4.7.
+
+ -- Anders Kaseorg <andersk@mit.edu> Thu, 04 Aug 2016 15:44:22 -0400
+
+openafs (1.6.18.2-1) unstable; urgency=medium
+
+ * New upstream release 1.6.18.2:
+ - Support Linux kernel 4.6.
+ - Revert the vcache cleanup improvement of 1.6.18, which exposed
+ another previously latent issue that wrongly invalidated the current
+ working directroy on some kernels.
+ * Update CellServDB to the 2016-01-01 release.
+
+ -- Anders Kaseorg <andersk@mit.edu> Mon, 25 Jul 2016 19:12:12 -0400
+
+openafs (1.6.18.1-1) unstable; urgency=medium
+
+ * New upstream release 1.6.18.1:
+ - Support Linux kernel 4.5.
+ - Check return value from bdi_init.
+ * Import upstream Gerrit patch to allow building with Linux kernel 4.6.
+ (Closes: #826922)
+
+ -- Anders Kaseorg <andersk@mit.edu> Sun, 26 Jun 2016 20:16:54 -0400
+
+openafs (1.6.18-1) unstable; urgency=high
+
+ * New upstream release 1.6.18:
+ - Support for Linux 4.4 kernels.
+ - Improve dynamic vcache cleanup behavior, reducing memory usage and
+ avoiding a long hang when many vcaches are in use
+ - Deprecate afsd -settime.
+ - Failure to release a volume now reports an error back to the client.
+ - Check for invalid IP addresses in the CellServDB.
+ - Fix dafileserver crash experience with large volumes.
+ - Close race between "umount /afs" and "afsd -shutdown".
+ - Prefer -dryrun arguments to -noexecute.
+ - Limit ChangeAddr RPCs to removal, to avoid database corruption.
+ - Improve behavior relating to large (~2GB fetches from the fileserver).
+ * Import patches from upstream gerrit to improve support for
+ Linux 4.5 kernels. (Closes: #821782)
+ * Depend on sysint.target instead of basic.target in openafs-client.service,
+ to eliminate dependency cycles with other services that depend on
+ remote-fs.target. (Closes: #794451)
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Sun, 15 May 2016 22:19:38 -0400
+
+openafs (1.6.17-2) unstable; urgency=high
+
+ * debian/rules: Fix FTBFS when built with dpkg-buildpackage -A.
+ (Closes: #806088)
+
+ -- Anders Kaseorg <andersk@mit.edu> Thu, 17 Mar 2016 04:48:16 -0400
+
+openafs (1.6.17-1) unstable; urgency=high
+
+ * New upstream release 1.6.16.
+ - Fix bosserver crashes related to fixed-sized buffers.
+ - Fix potential denial of service issue in pioctl logic
+ (CVE-2015-8312).
+ - Provide a new vos remaddrs subcommand for removing server entries.
+ - Allow pioctls to work with read-only /proc (e.g. Docker containers).
+ * New upstream security release 1.6.17.
+ - Prevent users in foreign Kerberos realms from creating groups as if
+ they were administrators (CVE-2016-2860).
+ - Fix an information leak of uninitialized memory over the network.
+ - Fix a crash when the AFS root volume is not found.
+ * debian/patches/Linux-4.4-key_payload-has-no-member-value.patch,
+ debian/patches/Linux-4.4-Use-locks_lock_file_wait.patch,
+ debian/patches/Linux-4.4-Do-not-use-splice.patch:
+ Add upstream patches for current Linux kernel support. (Closes: #815521)
+
+ -- Anders Kaseorg <andersk@mit.edu> Thu, 17 Mar 2016 00:55:42 -0400
+
+openafs (1.6.15-1) unstable; urgency=high
+
+ * New upstream security release.
+ - Fix data leakage in rx ACK packets, OPENAFS-SA-2015-007,
+ CVE-2015-7762, CVE-2015-7763.
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Wed, 28 Oct 2015 15:56:38 -0400
+
+openafs (1.6.14-1) unstable; urgency=medium
+
+ * New upstream release.
+ - Restore support for using regexes for volume names to backup,
+ accidentally disabled as part of the fix for OPENAFS-SA-2015-006
+ * Update Swedish translation, thanks Martin Bagge and Anders Jonsson.
+ (Closes: #781678)
+ * Note that the protocol document rfc5864.txt is dual licensed.
+ (Closes: #754735)
+ * Supply copyright notice for systemd helper scripts. (Closes: #779170)
+ * Import upstream patches to support the 4.2 Linux kernel.
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Mon, 17 Aug 2015 15:01:01 -0400
+
+openafs (1.6.13-1) unstable; urgency=high
+
+ * New upstream security release.
+ - OPENAFS-SA-2015-001 CVE-2015-3282: vos leaks stack data onto the wire
+ in the clear when creating vldb entries
+ - OPENAFS-SA-2015-002 CVE-2015-3283: bos commands can be spoofed,
+ including some which alter server state
+ - OPENAFS-SA-2015-003 CVE-2015-3284: pioctls leak kernel memory contents
+ - OPENAFS-SA-2015-004 CVE-2015-3285: kernel pioctl support for OSD
+ command passing can trigger a panic
+ - OPENAFS-SA02015-005 CVE-2015-3286 is Solaris-specific and did not
+ affect Debian
+ - OPENAFS-SA-2015-006 CV-2015-3287: buffer overflow in vlserver
+ * Also includes changes from the upstream 1.6.12 release:
+ - Avoid database corruption if a database server is shut down and
+ brought up again quickly with an altered database
+ - Fix a potential buffer overflow in aklog
+ - Support for Linux kernels up to 4.1
+ - Avoid spurious EIO errors when writing large chunks of data to
+ mmapped files
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Thu, 30 Jul 2015 17:42:43 -0400
+
+openafs (1.6.11.1-1) unstable; urgency=medium
+
+ * New upstream release.
+ - Support for Linux kernels up to 4.0.
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Fri, 15 May 2015 11:02:14 -0400
+
+openafs (1.6.11~pre2-1) experimental; urgency=low
+
+ * New upstream pre-release.
+ - Avoid using a stale data version in certain cases when writing
+ files larger than the AFS cache, which manifested as file corruption.
+ - Fix a refcount leak that could lead to panics.
+ - Support newer linux versions, up through 3.19.
+ - Fix some leaks and crashes in error cases.
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Fri, 20 Feb 2015 15:50:49 -0500
+
+openafs (1.6.11~pre1-1) experimental; urgency=low
+
+ * New upstream pre-release.
+ - Linux kernels up to 3.17 are now supported.
+ - Fix more incorrect behavior in our revalidation of dcache entries. Bugs
+ in this area can cause stale path lookups in certain situations, as well
+ as cause getcwd() to fail spuriously.
+ - Allow aklog to succeed in creating native K5 tokens even when K5-to-K4
+ principal conversion fails.
+
+ -- Andrew Deason <adeason@sinenomine.net> Sun, 07 Dec 2014 23:43:21 -0600
+
+openafs (1.6.10-4) unstable; urgency=medium
+
+ * Update Spanish translation, thanks Javier Fernandez-Sanguino Pena.
+ (Closes: #773565)
+ * Import many patches from upstream:
+ - Support newer linux versions, up through 3.19. (Closes: #771298)
+ - Avoid some spurious getcwd() failures.
+ - Improve configure test for key_type.match (which caused buggy
+ behavior in certain versions of RHEL).
+ - Fix a refcount leak that would manifest as an unrelated OOPS.
+ - Avoid using a stale data version in certain cases when writing
+ files larger than the AFS cache, which manifested as file corruption.
+ This leaves us roughly equivalent to the forthcoming 1.6.11pre2
+ release candidate.
+ * Update CellServDB to the 2015-01-19 release.
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Wed, 04 Feb 2015 13:35:48 -0500
+
+openafs (1.6.10-3) unstable; urgency=medium
+
+ * Make openafs-client Before=umount.target for improved shutdown
+ behavior. (Affects: #760063)
+ * Mark openafs-client.service as RemainAfterExit=true. (Closes: #770815)
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Wed, 26 Nov 2014 13:00:27 -0500
+
+openafs (1.6.10-2) unstable; urgency=medium
+
+ * Some shell quoting and similar cleanups in openafs-client-precheck
+ from Anders Kaseorg.
+ * Make the openafs-client unit silently succeed when it is already
+ running, to match the behavior of the sysV script. (Closes: #767056)
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Tue, 28 Oct 2014 18:52:47 -0400
+
+openafs (1.6.10-1) unstable; urgency=medium
+
+ * New upstream release.
+ - fix segfault with aklog -path.
+ * The 1.6.10~pre1-1 changelog entry contains a full summary of changes
+ in the upstream release.
+ * Add a systemd unit file for openafs-client. (Closes: #760063)
+ - The variables AFS_PRE_SHUTDOWN and AFS_POST_INIT from
+ /etc/openafs.afs.conf are no longer honored. They should be
+ converted to the systemd format and placed in
+ /etc/systemd/system/openafs-client.service.d/ ; automatic conversion
+ is not possible. In particular, the kill_all_afs functionality is
+ not available.
+ - The LIBAFS, MODULEDIR, and DKMSDIR settings from
+ /etc/openafs/afs.conf are not used by the unit file.
+ - The extra shutdown handling for when the NFS translator is used
+ was not converted to the systemd format; the necessary feature
+ was removed from the Linux kernel in 2008.
+ - Support for cold shutdowns is removed. They generally resulted
+ only in strange failures later on.
+ * Add a systemd unit file for openafs-fileserver.
+ * Use heap-allocated buffers of sufficient length for realpath() in
+ userok.c. (Closes: #757378)
+ * Update Dutch translation. (Closes: #765083)
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Wed, 22 Oct 2014 13:10:59 -0400
+
+openafs (1.6.10~pre1-1) experimental; urgency=low
+
+ [ Benjamin Kaduk ]
+ * New upstream pre-release.
+ - Linux kernels up to 3.16 are now supported.
+ - The amount of free space and reported for /afs is now 2 TiB, up
+ from the previous reported value of around 9 GiB.
+ - Fix 'pts removeuser' behavior in the ptserver for some supergroups
+ over a certain membership size.
+ - Fix logging behavior when rotating logs via the "copy and truncate"
+ approach.
+ - Add new log messages in the volserver log and the vlserver audit log.
+ - Reduce the amount of kernel stack space used in the client.
+ - Improve error handling for a wide variety of cases for various tools.
+ - Improve periodic hanging in the client when a large number of PAGs
+ and files are in use.
+ - Fix 'afs-up' to handle large ACLs correctly.
+ - Fix a crash in 'aklog' when retrying ticket acquisition.
+ - Fix a crash in xstat_fs_test and scout when their local port is
+ already in use.
+ - Fix an error in the client lock handling that prevented checking
+ for the existence of write locks on readonly volumes.
+ - Fix an error in the client that could cause cache inconsistencies
+ if another client removed a directory entry, and recreated a
+ different entry with the same name.
+ - Avoid ignoring build failures during the client kernel module build
+ process, hopefully leading to better error messages in some cases
+ when building the kernel module.
+ - Fix various possible problems when building with parallel make.
+
+ [ Andrew Deason ]
+ * Include the new volscan tool in openafs-fileserver.
+
+ [ Russ Allbery ]
+ * Retroactively add the CVE for OPENAFS-SA-2014-002 to the changelog for
+ 1.6.9-1. It was assigned after the release was uploaded.
+ * Add Benjamin Kaduk as Maintainer and move myself to Uploaders.
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Tue, 19 Aug 2014 18:53:34 -0400
+
+openafs (1.6.9-2) unstable; urgency=medium
+
+ [ Russ Allbery ]
+ * Retroactively add the CVE for OPENAFS-SA-2014-002 to the changelog for
+ 1.6.9-1. It was assigned after the release was uploaded.
+ * Add Benjamin Kaduk as Maintainer and move myself to Uploaders.
+
+ [ Benjamin Kaduk ]
+ * Apply upstream deltas to fix the build with the linux kernel 3.16
+ (Closes: #762248):
+ - [ea0c9d8c] Linux 3.16: Switch to iter_file_splice_write
+ - [02a07404] Linux 3.16: Convert to new write_iter/read_iter ops
+ * Update README.source for the gbp pq patch-management procedure.
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Mon, 22 Sep 2014 13:17:12 -0400
+
+openafs (1.6.9-1) unstable; urgency=high
+
+ * New upstream release.
+ - OPENAFS-SA-2014-002: Fix use of uninitialized memory in the host
+ object in the fileserver. (CVE-2014-4044)
+
+ -- Russ Allbery <rra@debian.org> Thu, 12 Jun 2014 12:39:25 -0700
+
+openafs (1.6.8-1) unstable; urgency=medium
+
+ * New upstream release.
+ - Change the default fileserver sync behavior from delayed to
+ onclose so that explicit syncing only happens when a volume is
+ detached.
+ - Add -offline-timeout and -offline-shutdown-timeout options to the
+ fileserver, allowing interrupting of clients accessing volumes that
+ the fileserver is trying to take off-line.
+ - Fix RX bug that could hide errors during packet reception.
+ - Fix vos size -dump display for large volumes.
+ - Give up callbacks when the client is shut down. This can cause
+ crashes in old fileservers (prior to 1.4.6).
+ - Restore vos e alias for vos examine.
+ - Throttle byte-range lock warnings per file, and include the FID of
+ the file that the client is trying to lock.
+ - Avoid a possible panic during shutdown while tracing.
+ - Fix a bug that could cause getcwd to fail to find parent
+ directories.
+ - Avoid a delay when accessing uncached data in AFS in a confined
+ context under SELinux.
+ - Documentation, diagnostics, and error message improvements.
+ * Add Lintian override for the copy of RFC 5864, which has been
+ dual-licensed by the author.
+
+ -- Russ Allbery <rra@debian.org> Sat, 24 May 2014 17:55:20 -0700
+
+openafs (1.6.7-1) unstable; urgency=high
+
+ * New upstream security release.
+ - OPENAFS-SA-2014-001: Fix potential buffer overflow in the
+ fileserver. (CVE-2014-0159)
+ - Fix a potential DoS attack against Rx servers by avoiding suspending
+ the listener thread when delaying connection abort messages.
+
+ -- Russ Allbery <rra@debian.org> Wed, 09 Apr 2014 10:33:38 -0700
+
+openafs (1.6.6-1) unstable; urgency=low
+
+ * New upstream release.
+ - Remove server-side NAT pings since there's no evidence they help.
+ * Fix linking of /usr/share/doc directories for libpam-openafs-kaserver,
+ openafs-fuse, and openafs-kpasswd. This was broken in previous
+ releases by a miswritten debian/rules override. Thanks to Andreas
+ Beckmann for finding the problem and solution. (Closes: #736305)
+ * Accept AFS_DYNROOT=true as an alias for Yes in afs.conf.client,
+ matching behavior of releases prior to 1.6.2.1-1. (Closes: #729353)
+
+ -- Russ Allbery <rra@debian.org> Thu, 23 Jan 2014 20:43:05 -0800
+
+openafs (1.6.6~pre2-1) unstable; urgency=low
+
+ * New upstream pre-release.
+ - Linux kernels up to 3.12 are now supported, including kernels with
+ user namespace support enabled (which affects Debian's 3.12-1 kernel
+ and newer).
+ - Fixed core dumps into AFS with current kernels.
+ - When starting the client fails, backing device information created
+ in sysfs is now properly cleared.
+ - The AFS mountpoint specified in the cacheinfo file must now be an
+ absolute path.
+ - Stop tracking file locks on read-only volumes. Write locks always
+ fail and read locks always succeed.
+ - New fs flushall command to discard all cached data.
+ - Fixed a bug that could cause the client to incorrectly believe its
+ cache was up to date.
+ - New -rxmaxfrags switch to afsd to limit the number of UDP fragments
+ sent or received per RX packet.
+ - Fixed afsd threads entering an infinite loop.
+ - The file server now ignores any vice partitions with a NeverAttach
+ flag file present in the root directory.
+ - Enabled server-side NAT pings to refresh NAT timeouts.
+ - Forcing file server CPS recalculation (for IP ACLs) is now
+ restricted to administrators.
+ - vos examine of a volume in a transaction is now shown as busy again
+ rather than off-line.
+ - Multiple bug fixes to the salvager.
+ - Fixed a bug that could cause state information to be discarded when
+ restarting a large or busy file server.
+ - Fixed a vlserver bug during file server address registration.
+ - volserver supports a new -preserve-vol-stats option, which preserves
+ access statistics across volume restore and reclone operations.
+ - Releasing a volume after adding a new RO site no longer touches the
+ existing RO sites if the volume has not changed since the last
+ release.
+ - Fixed undefined ptserver behavior with too many allocated PTS ids.
+ - Avoid redefining assert in public header files.
+ - Documentation, diagnostics, and error message improvements.
+
+ -- Russ Allbery <rra@debian.org> Sat, 28 Dec 2013 11:38:19 -0800
+
+openafs (1.6.5.2-1) unstable; urgency=medium
+
+ * New upstream release.
+ - Fix support for tmpfs as the cache filesystem.
+ - Support kernels with backported changes affecting getname/putname.
+ * Exit successfully in the openafs-client init script if /sbin/afsd
+ doesn't exist, indicating that openafs-client is not installed.
+ * Load /lib/lsdb/init-functions in the openafs-client init script as the
+ first step towards upstart or systemd support.
+ * Update standards version to 3.9.5 (no changes required).
+
+ -- Russ Allbery <rra@debian.org> Sun, 22 Dec 2013 13:40:10 -0800
+
+openafs (1.6.5.1-1) unstable; urgency=low
+
+ * New upstream release.
+ - Support for Linux 3.11 and 3.12 (up to 3.12-rc3).
+ - Fixed core dumps into AFS with some Linux kernels.
+ * Cherry-pick additional upstream fixes.
+ - [7242e25a] Fix library ordering when building aklog.
+ - [514fc63d] Fix budb crash when the -servers command-line option
+ is given. (Closes: #718253)
+ * Ignore errors when reading ThisCell in the openafs-client config
+ script. If the file doesn't end in a newline, read will still succeed
+ and set the variable, but will exit with a non-zero status. This
+ would abort configuration of the package without a useful error
+ message.
+ * Drop Recommends of libjs-jquery in openafs-doc. We're no longer
+ replacing the embedded jQuery, pending a better fix in the Doxygen
+ packaging.
+ * Optimize the get-orig-source target. Thanks, Anders Kaseorg.
+ * Translation updates:
+ - German, thanks Erik Pfannenstein. (Closes: #719154)
+
+ -- Russ Allbery <rra@debian.org> Sun, 20 Oct 2013 09:26:37 -0700
+
+openafs (1.6.5-1) unstable; urgency=high
+
+ * New upstream release.
+ - OPENAFS-SA-2013-003: New support for non-DES enctypes in the
+ long-lived AFS key. This requires deploying rxkad.keytab files on
+ each server containing all of the encryption types for the cell AFS
+ key. Once this is deployed on servers, DES will only be used for
+ the session key. Once deployed on all clients, a stronger security
+ mechanism will be used that allows the DES keys to be removed from
+ the AFS principal in the Kerberos KDC (but still uses DES for some
+ session encryption purposes). (CVE-2013-4134)
+ - OPENAFS-SA-2013-004: Properly support the -encrypt option in vos,
+ including with -localauth. (CVE-2013-4135)
+ * Move the documentation and kernel module build dependencies to
+ Build-Depends-Indep and only do those parts of the build if building
+ architecture-independent packages.
+ * Drop the sequence numbers from the openafs-client init script
+ registration. Debian now always uses dependency-based boot ordering.
+ * Translation updates:
+ - Japanese, thanks victory. (Closes: #714223)
+
+ -- Russ Allbery <rra@debian.org> Wed, 24 Jul 2013 14:32:22 -0700
+
+openafs (1.6.4-1) unstable; urgency=low
+
+ * New upstream release.
+
+ -- Russ Allbery <rra@debian.org> Tue, 18 Jun 2013 11:10:45 -0700
+
+openafs (1.6.3-1) unstable; urgency=low
+
+ * New upstream release.
+ - Support for Linux 3.9 and 3.10. (Closes: #711920)
+ - Multiple fixes for use after free, use of uninitialized memory,
+ and similar C memory management bugs found via code analysis.
+ - Obey jumbo/nojumbo settings for Ubik (database) servers.
+ - General improvements in diagnostic and log messages.
+ - Avoid incorrectly sending small amounts of data over the wire
+ unencrypted in some situations and report the correct error message
+ in this case.
+ - Avoid generating duplicate IDs for readonly and backup volumes.
+ - Return quota and free space information without an access check.
+ - Improve client bookkeeping in the file server, fixing several
+ potential corruption and segfault issues.
+ - Avoid known cases of silent data corruption in background syncs in
+ the file server.
+ - Run-time configuration support for fileserver synchronization.
+ - Fix transient network error interference with establishing a ubik
+ quorum.
+ - Do not discard the persistent client disk cache on restart.
+ - Fix bugs that made it impossible to unmount a disk cache file system
+ after it had been used by the client.
+ * Give openafs-dbserver its own documentation directory rather than
+ linking it to openafs-client, allowing relaxation of the versioned
+ dependency on openafs-client to Recommends. (However, openafs-client
+ will still have to be installed for the openafs-fileserver init
+ script, which uses the bos binary, so will still be pulled in by
+ dependencies.)
+ * Cleanup of the openafs-client postinst script.
+ - Perform all work unconditionally to handle various rare error
+ recovery cases properly.
+ - Only force creation of CellServDB on initial installation or if
+ AFSDB/SRV records are not being used.
+ * Remove openafs-fileserver postinst support for upgrades from ancient
+ versions (1.4.4.dfsg1-4 and 1.4.11+dfsg-3).
+ * General coding style cleanup of maintainer scripts.
+
+ -- Russ Allbery <rra@debian.org> Mon, 17 Jun 2013 14:53:41 -0700
+
+openafs (1.6.2.1-2) unstable; urgency=low
+
+ * Upload to unstable.
+ * Translation updates:
+ - Brazilian Portuguese, thanks Albino B Neto. (Closes: #706627)
+
+ -- Russ Allbery <rra@debian.org> Thu, 09 May 2013 09:00:57 -0700
+
+openafs (1.6.2.1-1) experimental; urgency=low
+
+ * New upstream release.
+ - Support for Linux 3.8.
+ * Support configuring -dynroot-sparse via debconf. The AFS_DYNROOT
+ option in /etc/openafs/afs.conf.client is now tri-valued instead of a
+ boolean, and the boolean values will be mapped to the corresponding
+ options on upgrade. Based on work by Jakob Haufe. (Closes: #644564)
+ * Translation updates:
+ - Czech, thanks Martin Šín. (Closes: #705013)
+ - Russian, thanks Yuri Kozlov. (Closes: #705159)
+ - French, thanks Christian Perrier. (Closes: #705296)
+ - Portuguese, thanks Miguel Figueiredo. (Closes: #705307)
+ - Danish, thanks Joe Hansen. (Closes: #705660)
+ - Italian, thanks Beatrice Torracca. (Closes: #705864)
+
+ -- Russ Allbery <rra@debian.org> Sun, 21 Apr 2013 20:51:57 -0700
+
+openafs (1.6.2-1) experimental; urgency=low
+
+ * New upstream release.
+ - OPENAFS-SA-2013-001: Fix fileserver buffer overflow when parsing
+ client-supplied ACL entries and protect against client parsing of
+ bad ACL entries. (CVE-2013-1794)
+ - OPENAFS-SA-2013-002: Fix ptserver buffer overflow via integer
+ overflow in the IdToName RPC. (CVE-2013-1795)
+ - Fix aklog warning about allow_weak_crypto.
+ * Update CellServDB to the 2013-01-28 version.
+ * Fix DKMS builds of the OpenAFS kernel module for amd64 kernels on the
+ i386 architecture by parsing the kernel version for the architecture
+ and kernel class and using that to tell the OpenAFS build system what
+ sysname to use. Patch from Thorsten Alteholz.
+ * Avoid re-running setup after build when building modules from the
+ openafs-modules-source package with module-assistant. This will
+ hopefully avoid an issue where, following an upgrade of
+ openafs-modules-source, module-assistant cannot build new module
+ packages without an intervening module-assistant clean. Patch from
+ Thorsten Alteholz. (Closes: #660622)
+ * Make another attempt at suppressing the wildcard action for building
+ debian/rules to fix problems building module packages using
+ make-kpkg. Patch from Thorsten Alteholz. (Closes: #639475)
+
+ -- Russ Allbery <rra@debian.org> Mon, 04 Mar 2013 13:54:30 -0800
+
+openafs (1.6.2~pre3-1) experimental; urgency=low
+
+ * New upstream prerelease.
+ - Avoid unnecessary panic in kernel module when freeing vcaches.
+ - Add additional objects to the *_pic libraries in support of the AFS
+ Perl bindings.
+ * Remove unnecessary change to the upstream Debian packaging files to
+ support armhf. These files aren't used during a package build, so no
+ need to carry a Debian patch.
+
+ -- Russ Allbery <rra@debian.org> Mon, 21 Jan 2013 11:17:36 -0800
+
+openafs (1.6.2~pre2-2) experimental; urgency=low
+
+ * Restore include of <sys/param.h> in userspace builds of rx/rx_packet.h
+ to get a definition of MIN and MAX on, at least, powerpc. Thanks,
+ Andrew Deason.
+
+ -- Russ Allbery <rra@debian.org> Thu, 03 Jan 2013 12:06:41 -0800
+
+openafs (1.6.2~pre2-1) experimental; urgency=low
+
+ * New upstream prerelease.
+ - Support Linux kernels up to 3.7. (Closes: #685973)
+ - Fix fileservers to properly report >2 TiB partitions.
+ - Fix stale volume info from vos examine on non-DAFS filservers.
+ - Fix possible volume corruption with vos convertROtoRW.
+ - Fix bosserver to preserve all command-line options over restart.
+ - Fix bosserver to properly kill hung processes during shutdown.
+ - Fixes for memcache, especially on Solaris.
+ - Increase the size of the DNS resolver answer buffer to allow sites
+ with a long response list to use SRV and AFSDB records.
+ - Fix possible abuse of fs mkmount. In previous versions, users could
+ crash a client by nesting volume mounts.
+ - Fix client page cache corruption on Linux. When multiple clients
+ read and write to a file, the reading client may see first couple
+ bytes of a file as nulls.
+ - Support newer glibc versions.
+ * Build-Depend on hardening-wrapper and enable it to work around the
+ current upstream munging of CFLAGS and LDFLAGS. (Closes: #659663)
+ * Fix server installation instructions in README.servers, which used the
+ early demand-attach syntax before separate demand-attach binaries were
+ built. Thanks, Björn Torkelsson. (Closes: #693311)
+ * Remove the symlink from the openafs-fileserver doc directory to the
+ openafs-client doc directory. We used to install this symlink and
+ share doc directories, but this stopped in 1.4.12+dfsg-1. However,
+ dpkg doesn't remove symlinks to a directory, so systems that had
+ upgraded from the older package were overwriting openafs-client doc
+ files with the openafs-fileserver versions. Thanks, Andreas
+ Beckmann. (Closes: #694063)
+ * Switch to xz compression for the upstream tarball, Debian tarball, and
+ binary packages.
+ * Remove debian/import-upstream and change README.source to document
+ using git-import-orig with --upstream-vcs-tag instead.
+ * Move single-debian-patch to local-options and patch-header to
+ local-patch-header so that they only apply to the packages I build and
+ NMUs get regular version-numbered patches.
+ * Update Vcs-* URLs for the new anonscm.debian.org URL layout.
+ * Update standards version to 3.9.4 (no changes required).
+
+ -- Russ Allbery <rra@debian.org> Thu, 03 Jan 2013 10:07:39 -0800
+
+openafs (1.6.1-2) unstable; urgency=low
+
+ * Translation updates:
+ - Fix German translation encoding. Thanks, Christian PERRIER.
+ (Closes: #678736)
+ - Italian, thanks Beatrice Torracca. (Closes: #671640)
+
+ -- Russ Allbery <rra@debian.org> Tue, 21 Aug 2012 17:11:58 -0700
+
+openafs (1.6.1-1) unstable; urgency=low
+
+ * New upstream release.
+ - Do not ignore all InlineBulkStatus errors in file server.
+ - Support for Linux 3.3 and 3.4.
+ - Fix incorrect kernel error handling in afs_notify_change.
+ - Fix locking around RXS_PreparePacket.
+
+ -- Russ Allbery <rra@debian.org> Wed, 28 Mar 2012 17:25:05 -0700
+
+openafs (1.6.1~pre4-1) unstable; urgency=low
+
+ * New upstream prerelease.
+ - Always retry busy rx calls and retriable actions.
+ - Do not abort the salvager on large volume IDs.
+ - Ensure one NAT ping connection per srvAddr.
+ - Improvements to the file server address tracking.
+ - Improve locking in the host table in the file server.
+ - Avoid discrepancy between lastBusy and PEER_BUSY.
+ - Allow a null host for callback breaks.
+ - Fix probing for noop_fsync in the Linux kernel.
+ - Fix handling of expired locks in the file server.
+ - Reset blacklisted servers on a hard-mount retry.
+ * Update debhelper compatibility level to V9.
+ * Update standards version to 3.9.3 (no changes required).
+
+ -- Russ Allbery <rra@debian.org> Thu, 08 Mar 2012 18:24:53 -0800
+
+openafs (1.6.1~pre2-1) unstable; urgency=low
+
+ * New upstream prerelease.
+ - Disable server-side Rx keepalive during disk I/O.
+ - Avoid timing out on non-kernel busy Rx channels.
+ - Add separate client connection pool for replicated volumes.
+ - Remove SYNC client disable behavior on some error patterns.
+ - Correctly test for the end of the Rx call queue.
+ - Fix cleanup of special inodes on the server.
+ - Provide a public Rx function for toggling keepalive.
+ - Fix connection management in the client checkserver loop.
+ - Discard cached state in the client when unsure of validity.
+ - Fix thread safety of free inode management with demand-attach.
+ - Fix xstat handling of time values on 64-bit platforms.
+ - Increase the idledead time.
+ - Fix return status of fsync on a directory.
+ * Fix afs-newcell's creation of the file server process to pass
+ -localauth. This was broken when demand-attach support was
+ added. Thanks, Florian Hatat. (Closes: #652973)
+ * Fix afs-newcell's unwind of file server process creation. Thanks,
+ Davor. (Closes: #655136)
+ * Description typo, thanks Jonas Smedegaard. (Closes: #657933)
+ * Translation updates:
+ - Danish, thanks Joe Hansen. (Closes: #654933)
+
+ -- Russ Allbery <rra@debian.org> Wed, 08 Feb 2012 14:30:07 -0800
+
+openafs (1.6.1~pre1-1) unstable; urgency=low
+
+ * New upstream prerelease.
+ - Install new afsio utility.
+ - Fixes performance issues in both the client and the server.
+ - Rate-limit waiting for volume messages in kernel logs.
+ - Avoid a possible memory allocation issue in ticket data management.
+ - Disable MTU discovery.
+ - Reduce the quantity of NAT pings sent by the client.
+ - Various fixes for demand-attach file servers.
+ - Fix volume lock violations.
+ - Report the bosserver -rxbind address in a file.
+ - Revert process group changes on keyring failure.
+ - Various fixes for the salvager.
+
+ -- Russ Allbery <rra@debian.org> Tue, 20 Dec 2011 13:51:57 -0800
+
+openafs (1.6.0-3) unstable; urgency=low
+
+ * Apply upstream deltas to fix file corruption issue in file server:
+ - [c73b6644] viced: disable accelerated copyonwrite
+ - [4e05bc3b] remove CopyOnWrite2 and unused vars
+
+ -- Russ Allbery <rra@debian.org> Wed, 07 Dec 2011 18:47:48 -0800
+
+openafs (1.6.0-2) unstable; urgency=low
+
+ * Apply upstream deltas for Linux 3.1 and 3.2 (Closes: #649765):
+ - [f129142] Linux: 3.1: update RCU path walking detection in
+ permission i_op (Closes: #649996)
+ - [7f55b45] Linux: d_delete now takes a const argument
+ - [737a280] Linux: 3.2: Use set_nlink to update i_nlink
+ - [364fad6] Linux: 3.1: adapt to fsync changes
+ - [032736b] Linux: make sure backing_dev_info is zeroed
+ * Add support for armhf. Patch from Konstantinos Margaritis.
+ (Closes: #645395)
+
+ -- Russ Allbery <rra@debian.org> Mon, 28 Nov 2011 17:53:45 -0800
+
+openafs (1.6.0-1) unstable; urgency=low
+
+ * New upstream stable release.
+ - Rx NAT pings are not enabled until peer has answered
+ - Numerous fixes to command argument parsing
+ - Avoid crashing on host table exhaustion and defer clients instead
+ - Rx connection reference counting is enabled
+ - An Rx connection reference count leak is fixed in bulkstat
+ - Handle unparsable directory objects
+ - Handle Kerberos credential cache errors in aklog
+ * Generate stub header files that include the actual system header when
+ building libuafs instead of symlinking h to the appropriate directory.
+ Fixes build failures now that Debian has switched to multiarch and
+ moved some of the system headers. (Closes: #639063, LP #831287)
+ * Fix another Doxygen call to generate a configuration file, and remove
+ the generated configuration files after Doxygen runs.
+ * Update CellServDB to the 2011-08-14 release.
+
+ -- Russ Allbery <rra@debian.org> Thu, 01 Sep 2011 18:43:02 -0700
+
+openafs (1.6.0~pre7-2) unstable; urgency=low
+
+ * Force use of dblatex to build the manual, even if docbook2pdf is
+ available, since the latter dies with errors about TeX capacity.
+ (Closes: #635306)
+ * Fix generation of protocol documentation from Doxygen headers.
+ Doxygen cannot be called directly on header files and needs a
+ configuration file to be generated first. Thanks, Anders Kaseorg.
+ * Add another dummy rule for ./debian/rules to the kernel module rules
+ file to fix another variation of make-kpkg breakage.
+
+ -- Russ Allbery <rra@debian.org> Sun, 24 Jul 2011 16:45:28 -0700
+
+openafs (1.6.0~pre7-1) unstable; urgency=low
+
+ * New upstream prerelease.
+ - Substantial Rx updates to correct erroneous behavior
+ - Salvager tries harder to detect linktable issues
+ - Additional documentation
+ - xstat tools now cope with differing timeval structures between
+ endpoints
+ - Don't attach volumes with special status set in demand attach
+ - Treat Linux 3.0 as Linux 2.6 for sysname purposes
+ * Update README.source for a few changes in procedures and source
+ package format.
+ * Reapply the removal of the Doxygen-generated copy of jquery, since
+ this apparently wasn't as fixed as had been advertised. However, make
+ it conditional on the existence of the jquery.js script, so we should
+ hopefully only fix this where necessary.
+
+ -- Russ Allbery <rra@debian.org> Wed, 20 Jul 2011 13:04:07 -0700
+
+openafs (1.6.0~pre6-2) unstable; urgency=medium
+
+ * Urgency set to medium since 1.6.0~pre6-1 has been in unstable for some
+ time, blocked only by the armel build problem, and 1.6.0~pre4-1 in
+ testing has serious bugs.
+ * Revert the removal of Doxygen's jquery copy. This has now been fixed
+ in the Doxygen package.
+ * Disable optimization on armel to work around #630746.
+
+ -- Russ Allbery <rra@debian.org> Wed, 13 Jul 2011 14:05:26 -0700
+
+openafs (1.6.0~pre6-1) unstable; urgency=low
+
+ * New upstream prerelease.
+ - Don't do unnecessary page invalidation with directories.
+ - Flush vcaches in afs_shutdown for better callback givebacks.
+ - Fix the vnode type for dynroot FIDs.
+ - Fix volinfo -filenames.
+ - Fall back to afs3-vlserver for SRV records for afs3-prserver.
+ - Fix a client locking issue on ICBS that could deadlock.
+ - Fix callback state handling with demand-attach when salvaged.
+ - Fix reference leak in GetCapabilities.
+ - Document DNS SRV record usage in afsd man page.
+ * Add a dummy debian/rules rule in the kernel module rules file to fix
+ builds with make-kpkg. (Closes: #622260)
+ * Remove and symlink the copies of jquery generated by Doxygen and add a
+ Recommends on libjs-jquery for openafs-doc.
+
+ -- Russ Allbery <rra@debian.org> Thu, 16 Jun 2011 09:07:30 -0700
+
+openafs (1.6.0~pre5-2) unstable; urgency=low
+
+ * Apply upstream patch from http://gerrit.openafs.org/#change,4656 for
+ correct reading of files larger than the chunk size.
+ * Use dpkg-buildflags to get the default values of CFLAGS, CPPFLAGS, and
+ LDFLAGS. Upstream does not entirely honor these yet, but we're
+ getting closer.
+ * Update to standards version 3.9.2 (no changes required).
+
+ -- Russ Allbery <rra@debian.org> Sun, 15 May 2011 00:29:14 -0700
+
+openafs (1.6.0~pre5-1) unstable; urgency=low
+
+ * New upstream prerelease.
+ - Avoid downward vcache pressure when entries are free.
+ - Avoid client to fileserver deadlock during callback giveup.
+ - Improve calculation of when to flush vcaches.
+ - Don't read pages beyond the cache EOF.
+ - Improve file server reference counting, locking, and logging.
+ - Rename the OpenAFS com_err library to avoid conflicts.
+ - Restrict the number of CBRs allocated at once.
+ - Permit importing of -md5 and -md4 keys with asetkey.
+ - Fix token return in aklog with 524 conversion.
+ * Apply upstream patch from http://gerrit.openafs.org/#change,4654 to
+ fix a configure problem detecting Linux kernel properties, leading to
+ a lockup on 2.6.38 kernels.
+ * Update import-upstream and README.source for moving 1.6 from the
+ experimental and upstream-1.5 branches to the master and upstream
+ branches.
+ * Change to Debian source format 3.0 (quilt). Force a single Debian
+ patch for simplicity since the packaging is maintained in Git using
+ branches, and include a patch header explaining why.
+
+ -- Russ Allbery <rra@debian.org> Sat, 14 May 2011 11:52:40 -0700
+
+openafs (1.6.0~pre4-1) unstable; urgency=low
+
+ * Upload to unstable.
+ * New upstream prerelease.
+ - Fix file descriptor leak in the file server that could result in
+ corrupted files.
+ - Properly support large volume numbers.
+ - Document current client setuid behavior. (Closes: #612608)
+ - Allow salvager to be run manually with demand-attach servers.
+ - Properly report setpag() errors.
+ * Apply upstream deltas:
+ - [1e322b88] Linux: 2.6.39: deal with BKL removal
+ - [a8aa6f42] Linux: 2.6.39: replace path_lookup with kern_path
+ * Declare optional dependencies in the openafs-client init script on
+ openafs-fileserver so that, if the same host is running both a
+ fileserver and a client, the fileserver starts before and stops after
+ the client.
+
+ -- Russ Allbery <rra@debian.org> Thu, 31 Mar 2011 15:00:04 -0700
+
+openafs (1.6.0~pre3-1) experimental; urgency=low
+
+ * New upstream prerelease.
+ - Revert UUID support in vos.
+ - pt_util fixed to properly create new database.
+ - MTU discovery now properly shut down on call reset.
+ - FUSE client support fixed for non-/afs mounts.
+ - A deleted volume can now be recreated properly.
+ - Callbacks are again not broken during whole partition salvages.
+ - Positional vectored IO fixed.
+ - Fileserver per-client thread usage again properly enforced.
+ - Anonymous dropbox support improved and drawbacks documented.
+ - Ensure vnodes are not reallocated while in use for demand-attach.
+ - Perform vcache eviction via a fast path before visiting vcaches
+ where sleep is needed.
+ * Apply upstream deltas:
+ - [17b48f99] Add missing semicolon (Closes: #618496)
+ - [ee2811b0] viced: Allow checkout of VOL_STATE_DELETED volumes
+
+ -- Russ Allbery <rra@debian.org> Tue, 22 Mar 2011 05:07:22 -0700
+
+openafs (1.6.0~pre2-1) experimental; urgency=low
+
+ * New upstream prerelease.
+ - Avoid spurious Rx connection timeouts.
+ - Do not retry Rx calls on channels returning busy errors.
+ - Fix double-free error in the vos command-line utility.
+ - Properly enable Rx connection hard timeouts.
+ - Fix lock initialization in Rx.
+ - Check for /afs existence before starting unless -nomount given.
+ - Fix panic when using /afs/.:mount syntax.
+ - Avoid a panic in memcache mode due to missing CellItems file.
+ - Attempt to recover more quickly from timed-out volume releases.
+ - Improve speed of volume removal.
+ - Improve CPU utilization during demand-attach volume attachment.
+ - Fix various error handling problems.
+ - Linux 2.6.38 support.
+ - Improve correctness and performance in cache bypass mode.
+ - Avoid extra runs of the vcache freeing routine.
+ * In README.modules, document the need to install the Linux headers
+ package in the DKMS instructions and the need for module-assistant
+ clean openafs in the module-assitant instructions. (Closes: #606235)
+
+ -- Russ Allbery <rra@debian.org> Thu, 03 Mar 2011 17:49:27 -0800
+
+openafs (1.6.0~pre1-1) experimental; urgency=low
+
+ * New upstream prerelease.
+ - Rx performance improvements.
+ - Correct byte order handling of port in SRV record lookups.
+ - More robust vos release to sites previously marked "don't use."
+ - vos properly matches sites with multihomed servers.
+ - Fix ptserver supergroups support on 64-bit platforms.
+ - Bug fixes for demand-attach salvaging.
+ - Avoid potential crash when attaching a volume fails.
+ - Properly hold the host lock during host enumeration in fileserver.
+ - Use larger I/O sizes in memcache to improve performance.
+ - Avoid potential alignment issues in pioctl calls.
+ - Servers now marked down when GetCapabilities returns an error.
+ - Avoid blocking xvcache lock when freeing in-use vcaches.
+ - In-use vcache count now properly tracked.
+ - Properly configure LWP to use ucontext on appropriate platforms.
+ - Eliminate spurious AFS system call errors.
+ - Linux 2.6.37 support.
+ * Apply upstream deltas:
+ - [4a3e5291] Update NEWS for 1.5.78 and 1.6.0pre1
+ * In the openafs-client init script, don't attempt to stop or restart
+ the AFS client if module loading is disabled. Stopping afsd without
+ unloading the module would leave the system in an inconsistent state.
+ * Add $named to Should-Start in the openafs-client init script since the
+ client may do DNS lookups for the VLDB and file servers during startup
+ in some situations. (Closes: #586226)
+ * Drop --enable-reduced-depends for right now. aklog doesn't deal with
+ it correctly.
+ * Now that upstream has renamed compile_et to afs_compile_et, include it
+ in libopenafs-dev.
+ * Update CellServDB to the 2010-12-13 version.
+
+ -- Russ Allbery <rra@debian.org> Wed, 29 Dec 2010 12:27:59 -0800
+
+openafs (1.5.77-2) experimental; urgency=low
+
+ * Apply upstream deltas:
+ - [ca2a7363] libuafs: Don't #define user (fixes armel build)
+ - [f7f366d0] Link dafssync-debug(8) to fssync-debug(8)
+ - [a2cf6b8d] Fix POD errors in fileserver and dasalvager
+ - [e36b4e00] Update bos create man page for new demand-attach
+ * Add backslashes to the DKMS command, which will be required once DKMS
+ uses proper shell quoting.
+ * In openafs-modules-source, use /lib/modules/`uname -r`/build as the
+ default path to the kernel headers rather than /usr/src/linux.
+ Current kernel header packages will create an appropriate symlink
+ there. This default is only used when neither module-assistant nor
+ kernel-package are used.
+ * In the openafs-client init script, stop looking for openafs.o; Debian
+ hasn't supported 2.4 kernels for quite some time. Remove all the $MP
+ handling since we force a module name of openafs.ko using
+ --with-linux-kernel-packaging.
+
+ -- Russ Allbery <rra@debian.org> Fri, 24 Sep 2010 21:37:03 -0700
+
+openafs (1.5.77-1) experimental; urgency=low
+
+ * Apply upstream deltas:
+ - [7594331c] Add NEWS entries for OpenAFS 1.5.77 and 1.5.76
+ * New upstream testing release.
+ - Demand-attach servers are now always built and installed under
+ separate names (dafileserver, davolserver, dasalvager). This means
+ that the default names are no longer demand-attach, which means that
+ upgrades from previous experimental versions will fail (but upgrades
+ from non-experimental versions will be much cleaner).
+ - Linux 2.6.36 support and improved freezer interface support.
+ - More robust path MTU detection.
+ - Return VNOVOL from fileserver when a volume is deleted.
+ - Improve handling of some corruption in the salvager.
+ - Relax too-strict checks in ptserver on foreign names.
+ - Better reporting of failures during volume attach.
+ - Better fileserver handling of host hash collisions.
+ - Fix statistics reporting in RXAFS_GetStatistics64.
+ - Improved disconnected mode reference tracking.
+ - Avoid a kernel panic during vcache contention.
+ - Fix potential kernel panic during bulkstatus.
+ - Better vos dry-run mode for syncvldb and syncserv.
+ - Fix s390x kernel build support.
+ * Update afs-newcell and README.servers to recommend using the
+ demand-attach fileserver binaries and dafs bos type.
+ * Force disabling of Linux syscall probing in kernel module builds.
+ * Remove obsolete --enable-demand-attach-fs and --enable-disconnected
+ configure flags. These are now unconditional upstream.
+ * The openafs-fileserver init script now depends on $named since
+ apparently the volserver requires DNS during startup. Thanks, Jaap
+ Winius. (Closes: #589783)
+ * Use dpkg --print-architecture, not --print-installation-architecture,
+ in the openafs-fileserver config script. The latter is deprecated.
+ Thanks, Peter Palfrader. (Closes: #594488)
+ * Add a dependency on libc6-dev to openafs-modules-dkms. dkms doesn't
+ depend on it because most kernel modules don't need it, but openafs
+ builds userspace helper programs. Thanks, Peter Palfrader.
+ * Fix the sample CellServDB entry printed by afs-newcell if the cell
+ isn't found in /etc/openafs/CellServDB to include the correct server
+ syntax. Thanks, Peter Palfrader.
+ * Run the DKMS build commands in a subshell to work around a DKMS bug
+ that caused the module build logs to be discarded. (LP: #593509)
+ * Add a status command to the openafs-fileserver init script.
+ * Update to debhelper compatibility level V8.
+ - Rewrite debian/rules to use dh and overrides.
+ - Use dh_installdocs --link-doc to handle linked doc directories.
+ - Rewrite debian/module/rules to use dh and overrides.
+ - Bump -source package dependency and compat to debhelper 8.
+ * Add ${perl:Depends} to openafs-modules-dkms and perl to the
+ dependencies of openafs-modules-source, since Perl is used as part of
+ the module build system now.
+ * Remove bison and flex dependencies for the module build packages. We
+ now ship the results of rxgen, so don't need all the tools required to
+ build the full source tree.
+ * Update standards version to 3.9.1 (no changes required).
+
+ -- Russ Allbery <rra@debian.org> Tue, 21 Sep 2010 17:59:42 -0700
+
+openafs (1.5.75-2) experimental; urgency=low
+
+ * Apply upstream deltas:
+ - [57d727da] Link libafsauthent with -lresolv if required
+ - [c3fc948e] Check for crypt in external library
+ - [a1351d48] Fix ktime test on 64-bit systems
+ * Use --after instead of --remaining in binary-indep to avoid running
+ dh_auto_install and doing the installation process again.
+
+ -- Russ Allbery <rra@debian.org> Wed, 14 Jul 2010 12:05:12 -0700
+
+openafs (1.5.75-1) experimental; urgency=low
+
+ * New upstream testing release.
+ - Path MTU discovery for networks with bad fragmentation.
+ - New -human flag for human-readable units in some fs commands.
+ - Provide reasons for locked volumes in vos when known.
+ - Improvements to Rx ping and NAT handling.
+ - Improvements to the userspace AFS client.
+ - Substantial updates to the Administrator's Guide.
+ - Various bug fixes and improvements to the file server.
+ - Force core file generation in bosserver.
+ - Improve vlclient and vldb_check.
+ - Avoid volume corruption on creation if files were left over from a
+ previous failed cleanup.
+ - Do not tie up fileserver threads with volumes being taken offline.
+ - Break origin's callback on the target of a rename operation.
+ - Do not open /dev/console in the fileserver. (Closes: #582111)
+ - Avoid unneeded sync() calls in the fileserver.
+ - Update client disk cache version.
+ - Parallelization improvements in lock management in the client.
+ - New -dynroot-sparse mode for afsd to not show all cells in the
+ CellServDB until that cell is needed.
+ - Fix aklog crash with linked cell handling.
+ - Fix fs getserverprefs -vlservers with default CellServDB list.
+ - Report server address when logging warnings.
+ - Avoid panic in GetCapabilities with an unknown cell.
+ - Report process name and ID for advisory lock warnings when
+ possible.
+ - Flush pending changes to server when releasing file locks.
+ - Various other client bug fixes on error handling and callbacks.
+ - Disable syscall probes when keyrings are supported.
+ - Use filehandles for all Linux 2.6 versions to avoid
+ incompatibilities with mismatched afsds.
+ - Update Linux kernel support for 2.6.35.
+ - The stripped source tree generated for kernel module builds is now
+ truly architecture-independent and can build on i386 for amd64
+ kernels (for example). (Closes: #518270)
+ - Fix build problems on alpha.
+ * Apply upstream deltas:
+ - [bbce0515] Add NEWS entries for 1.5.75
+ - [c790e7d0] Remove a few erroneous NEWS entries for 1.5.75
+ - [9e2aba99] Fix ktime test for errors
+ - [5cc6293c] Provide man pages for more fssync-debug commands
+ * Set the OpenAFS build version to the Debian package version with
+ -debian appended so that the Debian package versions can be
+ distinguished from unmodified upstream versions.
+ * Build shared library packages for libafsauthent and libafsrpc.
+ Upstream is now more careful about the ABI. (Closes: #433054)
+ * Explicitly link libafsauthent with -lresolv -lcrypt. This is a
+ temporary fix for Linux that will be replaced by a better upstream fix
+ in the next release.
+ * openafs-modules-source and openafs-modules-dkms are now architecture:
+ all. The generated kernel source is now architecture-independent.
+ * openafs-modules-source and openafs-modules-dkms now recommend an
+ appropriate version of openafs-client.
+ * Update kernel module packaging scripts:
+ - Remove selection of linux-image vs. kernel-image for kernel names.
+ - Use Breaks instead of Conflicts.
+ - Update standards version to 3.9.0.
+ * Tighten the dependencies on openafs-client in packages that symlink
+ their /usr/share/doc directories to openafs-client's to meet the
+ Policy requirements for changelog files.
+ * Remove the lpia architecture. This was an experiment in Ubuntu that
+ has apparently been dropped.
+ * Add preliminary support for powerpcspe, mapping that architecture to
+ ppc_linux26. The kernel build won't work unless uname -m on that
+ architecture returns ppc.
+ * Minor update to README.Debian for openafs-doc: the old IBM release
+ notes are no longer included.
+ * Remove conflicts/replaces/provides for openafs-ptutil, which was
+ ancient (removed in 2001).
+ * Install an upstream changelog file now that upstream provides one.
+ * Add a workaround in the clean target to allow the same packaging files
+ to be used by upstream, which removes changelog during distclean
+ because it's Autoconf-generated. This workaround will not trigger
+ during a normal Debian package build.
+ * Update standards version to 3.9.0.
+ - Use Breaks instead of Conflicts where appropriate.
+
+ -- Russ Allbery <rra@debian.org> Tue, 13 Jul 2010 14:46:10 -0700
+
+openafs (1.5.74.1-1) experimental; urgency=low
+
+ * New upstream testing release.
+ - Correctly recognize cache version differences in upgrades from 1.4
+ and invalidate the old cache.
+ - Resolve symlinks in fs rmmount.
+ - Include PID in byte-range lock warning.
+ * Preserve the AFS mount point and cache directories set in
+ /etc/openafs/cacheinfo if the file already exists rather than
+ overwriting them with the defaults. Thanks, Liam Healy.
+ (Closes: #580077)
+ * In the openafs-client init script, don't assume that AFS is mounted on
+ /afs when unmounting it or killing processes with AFS files open.
+ Instead, parse /etc/mtab to find the AFS mount point.
+ * Move the experimental afsd.fuse AFS FUSE client into openafs-fuse to
+ avoid adding a FUSE dependency in openafs-client. Document its
+ current limitations in the package description.
+
+ -- Russ Allbery <rra@debian.org> Tue, 04 May 2010 21:49:52 -0700
+
+openafs (1.5.74-2) experimental; urgency=low
+
+ * Apply upstream deltas:
+ - [e6f6c349] Fixes and clarifications to vos setaddrs man page
+ - [d80382ef] Remove special-case call for KAM_SetPassword on s390
+ * Fix ucontext detection on ppc_linux26, hopefully fixing build failures
+ on the Debian powerpc architecture.
+ * Install afsd.fuse and a man page link for it if the FUSE client build
+ is enabled.
+ * Add build dependency on libfuse-dev and pass --enable-fuse-client to
+ configure so that the new FUSE afsd is built. Install afsd.fuse into
+ the openafs-client package for the time being; it will move to some
+ other package before being uploaded to unstable so that openafs-client
+ doesn't keep a dependency on libfuse. There is, as yet, no
+ documentation or init script support for the FUSE implementation.
+
+ -- Russ Allbery <rra@debian.org> Tue, 20 Apr 2010 18:12:06 -0700
+
+openafs (1.5.74-1) experimental; urgency=low
+
+ * New upstream testing release.
+ - New vos setaddrs command.
+ - Significant improvements to libuafs (user-space AFS client).
+ - Initial FUSE implementation for afsd.
+ - pts mem -supergroup and -expandgroups options.
+ - Rx lock acquisition and thread safety fixes.
+ - Fileserver capabilities support for the UNIX client.
+ - Various afsmonitor improvements.
+
+ -- Russ Allbery <rra@debian.org> Mon, 19 Apr 2010 14:27:10 -0700
+
+openafs (1.5.73.3-1) experimental; urgency=low
+
+ * New upstream testing release.
+ - New demand-attach file server support for greatly improved file
+ server restart times.
+ - Support for split readonly/read-write client caches.
+ - Better client handling of file server meltdowns.
+ - Experimental read-only client disconnected mode.
+ - NFS translator clients now work properly on Linux.
+ - Client cache readahead.
+ - Network performance improvements.
+ - New libkopenafs library providing a kernel PAG manipulation
+ interface (a subset of the API provided by Heimdal's libkafs).
+ - Fix builds on sparc64. (LP: #181661)
+ * Apply upstream deltas:
+ - [7d395f17] Improve demand-attach fileserver bos documentation
+ - [a763edc3] Make src/rx/rx.c not executable
+ - [8d41bc24] Reallocate memory in aklog for the AFS ID string
+ - [be449999] Fix typo in bos_create manpage
+ - [fdb9429e] Linux: kmap() not page_address()
+ * Build OpenAFS with demand-attach enabled for the file server, bos
+ restricted mode enabled for bosserver, and disconnected mode enabled
+ for the client. Except for demand-attach, these options don't change
+ the default behavior, just make new capabilities available.
+ * The openafs-modules package now provides openafs-modules3 and
+ conflicts on pre-1.5.61 openafs-client packages since the interface
+ between afsd and the module has changed. openafs-client now conflicts
+ with openafs-modules2 and recommends openafs-modules3.
+ * Change the default permissions of /etc/openafs/server to 0755 to match
+ upstream defaults, but do not change permissions on upgrade. The only
+ file in that directory that needs to be protected is KeyFile, which
+ should be mode 0600 anyway. Drop the patch to bosserver to allow more
+ restrictive permissions. bosserver will complain about directory
+ permissions after upgrade until the directory is manually changed.
+ * Upstream now installs afszcm.cat and finds it in /usr/share/openafs/C,
+ so use the version installed via make install and install it in the
+ same location.
+ * Upstream builds specific files with -fno-strict-aliasing where needed,
+ so we no longer need to build the whole source with that flag.
+ * Upstream no longer includes files covered by the Apple Public Source
+ License, so we no longer have to repackage the upstream source to
+ remove those files. Drop Debian patches to the build system that were
+ compensating for the removal of those files.
+ * Switch to generating upstream tarballs from the upstream Git tag
+ rather than from tarball releases. There's no reason to include all
+ the generated files when we're going to regenerate them anyway, and
+ this saves effort combining the doc and src tarballs.
+
+ -- Russ Allbery <rra@debian.org> Thu, 08 Apr 2010 13:20:50 -0700
+
+openafs (1.4.12+dfsg-3) unstable; urgency=low
+
+ * Apply upstream deltas:
+ - [135e196b] Create missing root directory when ORPH_ATTACH
+ - [190ef2cb] volmonitor keep vtrans lock
+ - [812dcc2c] Increase the maximum number of sysnames
+ - [a123d4ab] Print rxdebug statistics as unsigned values
+ * If the user configures openafs-client to use AFSDB records for VLDB
+ server location, don't prompt the user for VLDB servers for the local
+ cell even if they're not present in CellServDB and don't try to add an
+ entry for the local cell to CellServDB. (Closes: #575299)
+
+ -- Russ Allbery <rra@debian.org> Fri, 26 Mar 2010 16:05:30 -0700
+
+openafs (1.4.12+dfsg-2) unstable; urgency=low
+
+ * Apply upstream deltas:
+ - [4ca7b6fc] Remove lih_r
+ - [f3899ac3] Allow GetSomeSpace_r to select an optimal host
+ - [94a43966] h_TossStuff_r: check held-ness after lock
+ - [b78eeb0c] h_TossStuff_r: make sure host does not go away
+ - [0583af32] volmonitor copy link before calling free
+ - [eb799d07] Move non-executable stack assembly code to end of file
+ * Build with -fno-strict-aliasing. The upstream development branch has
+ a better fix that selectively enables this for specific files with
+ known problems, but be conservative for the stable release.
+
+ -- Russ Allbery <rra@debian.org> Mon, 22 Mar 2010 15:53:48 -0700
+
+openafs (1.4.12+dfsg-1) unstable; urgency=low
+
+ * New upstream release.
+ - Enable weak encryption types in aklog and klog.krb5.
+ - Build support for Linux 2.6.33.
+ - Improvements to host tracking safety in the file server.
+ - Fall back to current kernel credentials if we can't use stored ones.
+ - Fix truncation handling in some large file situations.
+ - Further fixes to mmap handling.
+ - Avoid double-free in some FetchData64 error situations.
+ - Stop warning about system call hooks when keyrings are in use.
+ - Flush vcaches when a mount fails to avoid inconsistent data.
+ - New dump tag and length standard for vos dump.
+ - Fix stack executability for programs containing assembly code.
+ - Various salvager robustness fixes.
+ * Use dh_dkms from the DKMS package to handle creation of the maintainer
+ scripts for openafs-modules-dkms rather than rolling our own.
+ (LP: #497149)
+ * Update init script to require $remote_fs be started first and stopped
+ after OpenAFS. This won't be the case in the long run, but for now
+ some important boot-time options need /usr/bin/fs to set them.
+ * List $syslog in Should-Start for the openafs-client init script, since
+ otherwise if loading the module causes a kernel panic, it won't be
+ logged to disk.
+ * Update CellServDB to the 2010-02-28 version.
+ * Add README.source explaining maintenance procedures and a
+ debian/import-upstream script to do a Git-aware merge of a new
+ upstream release that will allow us to cherry-pick upstream patches
+ and do proper merges.
+ * Stop linking the openafs-fileserver doc directory to openafs-client so
+ that we can provide a separate NEWS.Debian.
+ * Update standards version to 3.8.4 (no changes required).
+
+ -- Russ Allbery <rra@debian.org> Mon, 08 Mar 2010 16:32:49 -0800
+
+openafs (1.4.11+dfsg-6) unstable; urgency=low
+
+ * Apply upstream deltas:
+ - [c12ec354] Fix write_begin configure test for recent RHEL kernels
+ - [b7198421] Fix memory allocation warnings at shutdown
+ - [7183c113] Do not check *aoutSize in PGetPAG
+ - [c0323c49] cm: address race condition in afs_QueueVCB
+ - [ad6dabdc] Clean up console message
+ - [c9f7fe37] Make ktc_curpag also detect ONEGROUP PAG gids
+ - [2f87c43e] volser transaction object race conditions
+ - [2d6c0390] Add array bounds checking in h_Enumerate
+ - [70f6a328] Check for (hostFlags & HOSTDELETED) after h_Lock_r
+ - [c7a59397] Avoid IHandle leak when failing to attach volume
+ * Remove incorrect return call in shutdown_icl() introduced by b7198421.
+ * Do not attempt to build the kernel module with DKMS if the appropriate
+ Linux headers aren't installed. Based on code from the common DKMS
+ postinst script (which we'll just use once it's reliably available).
+ Thanks, Anders Kaseorg. (LP: #487535)
+ * Fix configure flags used for enabling or disabling LWP and kernel
+ debugging flags and always pass --disable-strip-binaries.
+ * Fix the openafs-dbg dependencies and package description to reflect
+ its inclusion of debugging symbols for all server binaries in
+ openafs-fileserver and openafs-dbserver, but not the legacy PAM
+ modules.
+ * In anticipation of a change in dpkg-source's defaults, force source
+ package format 1.0. The package is maintained using Git and
+ generating a proper quilt series is complex and relatively pointless
+ work, so the additional complexity of the 3.0 format is currently not
+ that useful.
+ * Change section of openafs-modules-dkms to kernel to match override.
+
+ -- Russ Allbery <rra@debian.org> Mon, 30 Nov 2009 16:54:08 -0800
+
+openafs (1.4.11+dfsg-5) unstable; urgency=low
+
+ * Apply upstream deltas:
+ - [7833e472] Make afsd.pod reflect reality
+ - [c9974c7a] Avoid prematurely destroying callback_rxcon
+ - [9b37972e] Linux: 2.6.32 - Adapt to writeback changes
+ - [abdf72bc] Linux: Avoid deadlock in readdir - release GLOCK for
+ filldir
+ - [bdb4f98a] Protect rx_call iovq from simultaneous attempts to empty
+ it
+ - [c08609ae] Avoid using released hosts
+ - [a410b7fd] Linux - Fix disk cache access for selinux/AppArmor
+ constrained processes (LP: #415766)
+ - [49094ccf] Add automatic sysname detection for ARM Linux
+ - [525b594a] Make ktc_curpag generally available (LP: #446521)
+ * In the postinst of openafs-modules-dkms, if the openafs module is
+ already added in DKMS, try to remove it first before adding it. This
+ should more correctly handle the case of a user installing this
+ package without the correct kernel headers, having it fail in
+ postinst, and then installing the correct headers and having dpkg
+ attempt to configure the package again. Thanks, Philipp Kaluza.
+ (Closes: #553542)
+
+ -- Russ Allbery <rra@debian.org> Tue, 03 Nov 2009 20:57:21 -0800
+
+openafs (1.4.11+dfsg-4) unstable; urgency=low
+
+ * When changing the name of the source package built by
+ openafs-modules-source, we need to change the package name in the
+ changelog as well or dpkg-gencontrol explodes. Thanks, Aaron M.
+ Ucko. (Closes: #549140)
+
+ -- Russ Allbery <rra@debian.org> Wed, 30 Sep 2009 18:04:44 -0700
+
+openafs (1.4.11+dfsg-3) unstable; urgency=low
+
+ * Apply upstream deltas:
+ - openafs-stable-1_4_x/fileserver-no-negative-fetchdata-20090926:
+ never return a negative data length from client reads past the end
+ of a file.
+ - openafs-stable-1_4_x/fileserver-gethost-r-cleanup-fixes-20090925:
+ fix memory leak and possible double-free in error handling cases in
+ fileserver.
+ - openafs-stable-1_4_x/fileserver-retry-registeraddrs-20090810: retry
+ VL_RegisterAddrs in the file server on failure.
+ - openafs-stable-1_4_x/kernel-init-vrequest-structure-20090914:
+ properly initialize vrequest structure in the kernel.
+ * Change the permissions of /var/lib/openafs/local to 0700 to match
+ upstream defaults. This directory contains the fssync.sock file used
+ for coordination between the fileserver and the volserver, and
+ commands sent to that socket are not authenticated. Linux protects
+ the socket from unprivileged writes by default, but other operating
+ systems do not. Upstream therefore wants this directory to be 0700
+ and bosserver will complain by default if it's not. Changing the
+ permissions let us drop a patch to bosserver.
+ * Fix the second module control file for the standards version, section,
+ and maintainer update.
+ * Change the source package name of the stripped package generated by
+ openafs-modules-source so that, should someone build a Debian source
+ package from it, it won't have the same name as the main openafs
+ source package.
+
+ -- Russ Allbery <rra@debian.org> Tue, 29 Sep 2009 15:34:58 -0700
+
+openafs (1.4.11+dfsg-2) unstable; urgency=low
+
+ * Add armv5tel to debian/sysname, mapping it to arm_linux26. Patch from
+ Daniel Bayer. Also make the similar change for the module source
+ package. (Closes: #542315)
+ * Also install restorevol in the openafs-client package.
+ * Swap maintainer and uploaders in the packaging files for the module
+ source package, matching the main package.
+ * Update standards version to 3.8.3.
+ - Change section of packages generated by openafs-modules-source to
+ kernel.
+ - Add Homepage to packages generated by openafs-modules-source.
+
+ -- Russ Allbery <rra@debian.org> Fri, 21 Aug 2009 19:20:03 -0700
+
+openafs (1.4.11+dfsg-1) unstable; urgency=low
+
+ * New upstream release.
+
+ -- Russ Allbery <rra@debian.org> Fri, 10 Jul 2009 13:57:55 -0700
+
+openafs (1.4.11~pre3+dfsg-1) unstable; urgency=low
+
+ * New upstream release candidate.
+ - Further fixes for rcu_read_lock dependencies in some kernels.
+ - Clean up return values of Linux vnode operations.
+ - Call inode's setattr operation correctly.
+ * Ignore failures to remove an existing DKMS tree in the prerm of the
+ openafs-modules-dkms package. In the possible cases where the tree
+ may not be present to be removed, failing package removal doesn't
+ make sense. (Further addresses LP #368471.)
+ * Don't install man pages for fs command variants that are only
+ available on Windows.
+ * Bring src/config/linux-version closer to upstream since upstream now
+ handles unversioned source directories. There is one remaining change
+ required to search for UTS_RELEASE in the correct header path.
+ * Update CellServDB to 2009-06-29 version.
+ * Translation updates:
+ - Russian, thanks Yuri Kozlov. (Closes: #534807)
+
+ -- Russ Allbery <rra@debian.org> Sat, 04 Jul 2009 15:20:06 -0700
+
+openafs (1.4.11~pre1+dfsg1-1) unstable; urgency=low
+
+ * New upstream release candidate.
+ - New getpag pioctl to discover a PAG from userspace portably.
+ - Allow disabling of syscall probing in the kernel module.
+ - New -maxmtu override switch in afsd to accommodate some VPNs.
+ - pts client encryption support.
+ - Further fixes to address/UUID tracking in the file server.
+ - New DocBook-based manuals replacing the old HTML manuals.
+ - New Doxygen-based protocol reference replacing the old PDF files.
+ - Man pages for remaining AFS subcommands.
+ * Update standards version to 3.8.2 (no changes required).
+
+ -- Russ Allbery <rra@debian.org> Wed, 17 Jun 2009 13:32:31 -0700
+
+openafs (1.4.10+dfsg1-2) unstable; urgency=low
+
+ * Apply upstream CVS deltas:
+ - STABLE14-dprintf-rename-20090427: rename AFS's dprintf to avoid
+ conflicts with one in the kernel.
+ - STABLE14-linux26-defer-cred-changing-20090511: defer changing groups
+ when the real and effective credentials of a process differ to avoid
+ running afoul of checks in newer Linux kernels that cause oops.
+ (Closes: #528785)
+ - STABLE14-linux-mmap-antirecursion-fix-20090512 and
+ STABLE14-linux-mmap-antirecursion-avoid-spurious-eio-20090526:
+ improvements in flag setting and locking around recursive mmap
+ protection.
+ - STABLE14-memcache-write-on-laststore-20090512: write back dirty
+ pages on last store with memcache to avoid losing changes.
+ - STABLE14-background-fsync-consistency-issues-20090522: file
+ descriptor handling fixes for the file server.
+ - STABLE14-man-page-vos-dump-flags-20090526: document the -clone and
+ -omitdirs flags to vos dump. (Closes: #502571)
+ * Provide an openafs-modules-dkms package that uses DKMS to dynamically
+ build kernel modules for the local kernel and document this option in
+ README.modules. This is an alternative to installing
+ openafs-modules-source and building kernel modules for each new kernel
+ with module-assistant or make-kpkg. (Closes: #168852, #525131)
+ (LP: #52786, #368471, #369875)
+ * Have openafs-client recommend at least the current source version of
+ openafs-modules-source or openafs-modules-dkms instead of any old
+ version. While the API probably hasn't changed, it's best practice to
+ keep a relatively close match between the userspace andn the kernel
+ module version. (LP: #369875)
+ * Dynamically determine the Debian and upstream versions for dkms.conf
+ and get-orig-source from debian/changelog. Thanks, Anders Kaseorg.
+ (LP: #364426)
+ * Build-depend on cpio (used for generating openafs-modules-source).
+
+ -- Russ Allbery <rra@debian.org> Tue, 26 May 2009 21:18:54 -0700
+
+openafs (1.4.10+dfsg1-1) unstable; urgency=high
+
+ * New upstream release.
+ - OPENAFS-SA-2009-001: Avoid a potential kernel memory overrun if more
+ items than requested are returned from an InlineBulk or BulkStatus
+ message. (CVE-2009-1251)
+ - OPENAFS-SA-2009-002: Avoid converting negative errors into invalid
+ kernel memory pointers. (CVE-2009-1250)
+ - Preliminary support for 2.6.30 kernels.
+ - Dynamic vcache allocation support to deal with inotify vcache
+ pinning.
+ - Do appropriate locking for CellServDB in /proc.
+ - Use +dfsg instead of .dfsg for saner version sorting.
+ * Debian's 2.6.29 packages no longer include symlinks from the
+ architecture-specific header tree to the common header tree and
+ instead overlay both header trees using kbuild. Change the Autoconf
+ probes to always use kbuild and generate stub headers in the paths
+ that OpenAFS expects that include the linux headers. Patch from Aaron
+ M. Ucko. (Closes: #521745)
+ * Build PIC versions of libafsauthent and libafsrpc and install them in
+ libopenafs-dev for use when AFS code should be embedded into shared
+ libraries. Patch from Garrett Wollman.
+ * Update CellServDB to 2008-11-07 version. (Closes: #522451)
+ * Update debian/watch for +dfsg naming instead of .dfsg.
+ * Update standards version to 3.8.1 (no changes required).
+ * Translation updates:
+ - Japanese, thanks Hideki Yamane. (Closes: #521518)
+
+ -- Russ Allbery <rra@debian.org> Mon, 06 Apr 2009 15:49:34 -0700
+
+openafs (1.4.8.dfsg1-3) unstable; urgency=low
+
+ * Apply upstream CVS deltas:
+ - STABLE14-cbr-free-what-you-alloc-20090325: dequeue items in the same
+ way they were allocated.
+ - STABLE14-shutdown-vcache-avoid-null-deref-20090324: avoid oops on
+ shutdown. (LP: #333197)
+ - STABLE14-uphys-invalidate-returns-void-20081130: fix apparent Ubik
+ synchronization errors due to incorrect use of a void return value.
+ * Update package sections for the new archive organization.
+
+ -- Russ Allbery <rra@debian.org> Fri, 27 Mar 2009 08:08:49 -0700
+
+openafs (1.4.8.dfsg1-2) unstable; urgency=low
+
+ * Make openafs-modules-source architecture-specific (arch: any instead
+ of arch: all). The new method for generating the kernel source tree
+ only generates correct build machinery for the architecture on which
+ it was built, making the package architecture-specific. The generated
+ tree is so much smaller that this still only uses about 1MB of archive
+ space more than the old method and makes each openafs-modules-source
+ package much smaller. This is a workaround until we can fix
+ libafs_tree to include enough build machinery to handle all Linux
+ architectures from one source tree. (Closes: #516023)
+ * Explicitly remove *-stamp files in the clean target of the module
+ build until the module build is upgraded to debhelper 7.
+
+ -- Russ Allbery <rra@debian.org> Wed, 18 Feb 2009 13:48:17 -0800
+
+openafs (1.4.8.dfsg1-1) unstable; urgency=low
+
+ * New upstream release. (Closes: #511535)
+ - Support 2.6.28 kernels. (LP: #303112)
+ - Check at compile time that the kernel has keyring support rather
+ than building non-functional modules. (Closes: #500850)
+ - Include vos clone man page. (LP: #324449)
+ * Apply upstream CVS deltas:
+ - STABLE14-libuafs-updates-20081229: prerequisite for other deltas.
+ - STABLE14-linux-truncate-race-20090109: avoid race condition during
+ truncation.
+ - STABLE14-linux-i-size-20090112: further fix for truncation race.
+ - STABLE14-linux-truncate-cleanup-20090113: further truncation fix.
+ - STABLE14-osi-probe-check-result-cope-with-enoent-20090115: fix for
+ syscall probing.
+ - STABLE14-linux-2629-20090115: support for 2.6.29 kernels.
+ (Closes: #513680)
+ - STABLE14-rx-idledead-only-ignore-keepalives-20081222: rx bug fix to
+ not ignore other ping packets.
+ - STABLE14-rx-rdwr-writeproc-race-20081228: fix rx race condition that
+ could result in reuse of freed memory.
+ - STABLE14-rx-do-not-race-current-packet-20090105: fix rx race
+ condition.
+ * Use make libafs_tree to generate the tree for the kernel module
+ compile rather than copying the entire source tree.
+ * Compress the source in openafs-modules-source with bzip2 instead of
+ gzip to reduce the package size.
+ * Make dynroot the default for new installations. It works much better
+ with systems that don't bring up their network until late in the boot
+ process, such as wireless laptops. (LP: #249240, #318605)
+ * Mention libpam-afs-session instead of libpam-openafs-session in the
+ description of libpam-openafs-kaserver, and mention libpam-krb5 by
+ name. Thanks, Philipp Kaluza. (Closes: #501308)
+ * Suggest module-assistant auto-install in README.modules and be clearer
+ that building one's own kernel is not required. Thanks, Anders
+ Kaseorg and Lutz Goehring for suggestions. (LP: #295897)
+ * Allow time-daemon to satisfy the openafs-fileserver recommends in
+ addition to ntp, allowing for openntpd. (Closes: #508258)
+ * General improvements to debconf configuration handling.
+ - Do not abort the config script if we have no default realm and
+ dnsdomainname fails. (LP: #274886, #318132)
+ - Do not abort postinst if we can't resolve any host name for the
+ cell. Just continue in that case, omitting any configuration for
+ the local cell. (LP: #322054)
+ - Correctly set the default for AFS_CRYPT from the existing config.
+ - The cache size is high, not critical, since we have a default.
+ - Don't create the client ThisCell if no local cell was specified.
+ - Improve the leading comment in afs.conf.client. Users can edit it,
+ but any changes other than the setting values will be lost.
+ - Remove the openafs-fileserver/bosconfig_moved template, which would
+ only be shown on upgrades from pre-1.2.0 versions.
+ - Standardize coding style and always quote strings.
+ * Update to debhelper compatibility level V7.
+ - Use dh where possible in debian/rules.
+ - Use dh_lintian to install Lintian overrides.
+ - Eliminate the configure target and do all the work in build.
+ - Do more in the install target and less in binary, matching the
+ default command stacks in dh.
+ - Use a debian/clean configuration file to let dh clean do more of the
+ work rather than using rm commands in debian/rules.
+ * Abort the config script rather than exiting successfully if the
+ debconf shell module is not available. The config script should never
+ be run in the absence of debconf, so if this fails, something deeper
+ is wrong and we shouldn't blindly continue.
+ * Add ${misc:Depends} to all dependencies.
+ * Add explanations for the Lintian overrides.
+ * Use set -e instead of #!/bin/sh -e in maintainer scripts.
+ * Remove server documentation from openafs-modules-source.
+ * Translation updates:
+ - Spanish, thanks Francisco Javier Cuadrado. (Closes: #514452)
+
+ -- Russ Allbery <rra@debian.org> Mon, 06 Oct 2008 11:10:14 -0700
+
+openafs (1.4.7.dfsg1-6) unstable; urgency=low
+
+ * Apply upstream patch to free /proc entries in the correct order.
+ Thanks, Marc Dionne. (Closes: #493914)
+ * Apply upstream deltas to support 2.6.27 kernels and to stop using
+ COMMON_KERN_CFLAGS for all 2.6 kernels uniformly, which fixes
+ problems on amd64 with newer kernels. Thanks, Björn Torkelsson.
+ (LP: #267504)
+ * Translation updates:
+ - Swedish, thanks Martin Bagge. (Closes: #493120)
+
+ -- Russ Allbery <rra@debian.org> Mon, 22 Sep 2008 19:07:02 -0700
+
+openafs (1.4.7.dfsg1-5) unstable; urgency=low
+
+ * Drop support for hppa. We only have a param file for a 2.4 kernel,
+ we were building with UCONTEXT which is stubbed out in glibc for hppa,
+ and builds without UCONTEXT fail. The binaries we were building
+ before didn't work and no one reported a bug, indicating no one was
+ attempting to use OpenAFS on hppa.
+ * When building the kernel module, use the setting of the ARCH
+ environment or make variable, if present, in preference to uname -m to
+ allow cross-compiles. Thanks, Jose Calhariz. (Closes: #492232)
+ * Add Jason Edgecomb's copyright and license for man pages to
+ debian/copyright.
+
+ -- Russ Allbery <rra@debian.org> Thu, 24 Jul 2008 10:14:42 -0700
+
+openafs (1.4.7.dfsg1-4) unstable; urgency=low
+
+ * Undo the move of up.pod to afs-up.pod in debian/rules clean rather
+ than just deleting the file and causing the second build to fail.
+ Thanks, Dominic Hargreaves. (Closes: #490752)
+ * Don't use UCONTEXT on hppa; its glibc doesn't provide those
+ functions. It's possible that OpenAFS isn't working properly on hppa
+ these days, but as yet there have been no reports.
+ * Suggest openafs-krb5 in openafs-client and mention it in the long
+ description.
+
+ -- Russ Allbery <rra@debian.org> Sun, 13 Jul 2008 19:03:58 -0700
+
+openafs (1.4.7.dfsg1-3) unstable; urgency=low
+
+ * Apply upstream delta for Linux 2.6.26 support.
+ * Enable support for arm and armel, added upstream in 1.4.7.
+ * Enable support for lpia by making it synonymous with i386. This means
+ that lpia systems will get a sysname of i386_linux26, which isn't
+ ideal but should at least work.
+ * When clearing the restart time while installing a new cell, pass
+ -localauth to avoid an authentication failure. Thanks, Davor Ocelic.
+ (Closes: #488152)
+ * If the openafs module isn't listed in modules.dep, exit with a zero
+ status from the init script even if modprobe fails. Otherwise, if a
+ module package and openafs-client are installed at the same time and
+ openafs-client is set up before the module package, the init script
+ can find the module, fail the modprobe (because the dependency map
+ hasn't yet been updated), and fail the whole installation. Exiting
+ with a zero status still doesn't get OpenAFS started, but at least it
+ doesn't leave the system in a partly installed state. Thanks to Durk
+ Strooisma for the analysis. (Closes: #486816)
+ * Don't include debug symbols for /sbin, /usr/bin, and /usr/sbin
+ binaries or PAM modules in openafs-dbg, just the servers in
+ /usr/lib/openafs, since those are the most likely cases where
+ backtraces are important and a 10MB debug symbol package seems like
+ overkill.
+ * Stop using quilt to manage patches and pre-apply them to the source
+ package now that the package is maintained with Git.
+ * Add Vcs-Git and Vcs-Browser control fields.
+ * Reflect current responsibilities more accurately by listing myself as
+ maintainer and Sam as uploader.
+ * Update standards version to 3.8.0 (no changes required).
+ * Drop unused postinst-uses-db-input override; Lintian has been fixed.
+ * Translation updates:
+ - Galician, thanks Jacobo Tarrio. (Closes: #481675)
+
+ -- Russ Allbery <rra@debian.org> Sat, 28 Jun 2008 12:35:43 -0700
+
+openafs (1.4.7.dfsg1-2) unstable; urgency=high
+
+ * Bumping urgency for the conflict fix, which fixes a latent RC bug, and
+ for the news entry for openafs-dbserver.
+ * Add a missing conflict on older versions of openafs-client to
+ openafs-krb5 to ensure that the klog transition to alternatives is
+ smooth.
+ * When configuring a new cell, clear the general restart time.
+ * Add a NEWS file for openafs-dbserver warning of the serious Ubik bug
+ fixed in the previous release and suggesting restarting database
+ servers one at a time.
+ * Update to 2008-04-23 CellServDB.
+
+ -- Russ Allbery <rra@debian.org> Fri, 09 May 2008 10:45:06 -0700
+
+openafs (1.4.7.dfsg1-1) unstable; urgency=low
+
+ * New upstream release.
+ - Work around GPLing of RCU locks. (Closes: #476628)
+ * Include a Kerberos v5 klog, klog.krb5, in openafs-krb5.
+ * klog is now managed via alternatives. openafs-client provides
+ klog.afs and openafs-krb5 provides klog.krb5. If both packages are
+ installed, klog.krb5 is the default.
+ * Don't remove and reinstall the pagsh alternative on every upgrade.
+ * Add many new upstream man pages for fs, vos, and pts sub-commands and
+ the CellAlias config file.
+ * Add read_tape to openafs-dbserver.
+ * Add bos_util and a UserList man page to openafs-fileserver.
+ * Run dh_install with --fail-missing to catch new upstream additions.
+
+ -- Russ Allbery <rra@debian.org> Thu, 01 May 2008 08:13:56 -0700
+
+openafs (1.4.7~pre3.dfsg1-1) unstable; urgency=low
+
+ * New upstream release candidate:
+ - Better support for 2.6.25 kernels.
+ - Fixes for flushing in the cache manager.
+
+ -- Russ Allbery <rra@debian.org> Thu, 10 Apr 2008 20:54:36 -0700
+
+openafs (1.4.7~pre1.dfsg1-1) unstable; urgency=low
+
+ * New upstream release candidate:
+ - Initial support for 2.6.25 kernels.
+ - Better 2.6.24 kernel support. (Closes: #463962)
+ - Better cleanup on module unload. (Closes: #417917)
+ - Potential deadlock fixed in the fileserver.
+ - Better fileserver host tracking.
+ - Ubik fixes preventing database truncation on unreliable links.
+ * Add upstream delta to fix oops on startup with pre-2.6.25 kernels.
+ * Install the up man page as afs-up, matching our renaming, and update
+ its text accordingly. (Closes: #459635)
+ * Move openafs-client later in the shutdown sequence on new
+ installations so that it stops after autofs and add an X-Stop-After
+ LSB header to achieve the same more reliably with dependency-based
+ boots. (Closes: #472545)
+ * Update doc-base control file sections for the new categorization.
+ * debian/rules and debian/module/rules improvements:
+ - Remove all modified generated files on debian/rules clean.
+ - Depend on $(QUILT_STAMPFN) instead of patch.
+ - Use touch $@ to create stamp files.
+ - Use a stamp file for the module's install target.
+ * Uncomment and fix the watch rules for pre-releases and always scan for
+ both regular releases and prereleases.
+
+ -- Russ Allbery <rra@debian.org> Wed, 26 Mar 2008 19:21:24 -0700
+
+openafs (1.4.6.dfsg1-3) unstable; urgency=low
+
+ * Fix FTBFS caused by a change in dh_strip behavior. It no longer
+ creates empty files for already stripped binaries, so we should no
+ longer remove them. Thanks, Lucas Nussbaum. (Closes: #464274)
+ * Include debugging symbols for libpam-openafs-kaserver in openafs-dbg.
+ * Do not stop daemons in run-level S. This isn't a real run-level and
+ hence there's no reason to create the links.
+
+ -- Russ Allbery <rra@debian.org> Wed, 06 Feb 2008 11:24:19 -0800
+
+openafs (1.4.6.dfsg1-2) unstable; urgency=low
+
+ * Apply additional upstream patches to the 2.6.24 support to fix
+ builds with older kernels. Thanks to Felix Koop for the testing.
+ (Closes: #458331)
+ * Remove old /etc/openafs/server-local files from older versions when
+ purging openafs-fileserver.
+ * Minor reformatting of openafs-client's postrm.
+ * Remove databases on purge of openafs-dbserver.
+ * Remove log files when purging openafs-fileserver or openafs-dbserver
+ per Policy 10.8.
+
+ -- Russ Allbery <rra@debian.org> Sun, 30 Dec 2007 15:08:04 -0800
+
+openafs (1.4.6.dfsg1-1) unstable; urgency=low
+
+ * New upstream release.
+ - Fixes multiple serious problems with the file server.
+ * Apply upstream patch for Linux 2.6.24 support. Thanks to Anders
+ Kaseorg for researching the necessary deltas. (Closes: #456258)
+ * Apply upstream patch to allocate vnodes from the malloc pool rather
+ than off the stack, fixing file server problems on SPARC. Thanks to
+ Barney Sowood for tracking down the patch. (Closes: #448380)
+ * Apply upstream patch from the 1.5 series to allow multiple realms to
+ be listed in the server krb.conf and hence treated as local.
+ * Build bosserver with --enable-bos-new-config. On startup, if
+ BosConfig.new exists, it will be renamed to BosConfig before the
+ configuration is read. (Closes: #453398)
+ * Add a comment to /etc/openafs/afs.conf.client that the file is managed
+ by debconf. (Closes: #447183)
+ * Add more debugging and bug reporting instructions to README.Debian.
+ * Mention in README.Debian that the server is built with supergroups
+ enabled and with the multiple local realm patch. (Closes: #453399)
+ * Support reconfigure in postinst.
+ * Recode debian/copyright to UTF-8.
+ * Update to standards version 3.7.3 (no changes required).
+
+ -- Russ Allbery <rra@debian.org> Mon, 17 Dec 2007 20:19:13 -0800
+
+openafs (1.4.5.dfsg1-1) unstable; urgency=low
+
+ * New upstream release.
+ - Even with a new enough Linux kernel to support keyrings, we still
+ may have found the system call table and need to clean it up when
+ unloading the module. (Closes: #448793)
+ * Use uname -m rather than dpkg --print-architecture to determine the
+ sysname for kernel module builds. Otherwise, builds with a different
+ kernel architecture than userspace (amd64 kernels with i386 userspace,
+ for example) don't work. Thanks, Anders Kaseorg. (Closes: #448452)
+ * Fix signing the generated the changes file on a kernel module build.
+ The module build file reorganization required an additional change to
+ genchanges. Thanks, Anders Kaseorg. (Closes: #448449)
+ * Expose prototypes for the ktc_* functions. (Closes: #449432)
+ * Fix man pages for subcommands to use an underscore in the NAME section
+ instead of a space so that they'll be indexed properly by the current
+ groff and man-db.
+ * Update CellServDB to 2007-10-25 GCO release.
+ * Add Homepage to the package control fields.
+
+ -- Russ Allbery <rra@debian.org> Sun, 11 Nov 2007 15:54:59 -0800
+
+openafs (1.4.5~pre2.dfsg1-1) unstable; urgency=low
+
+ * New upstream release candidate.
+ - Fix errors when compiled with gcc 4.2. (Closes: #443937)
+ - Add a frightening hack to work around the lack of getcontext and
+ savecontext for 32-bit SPARc. (Closes: #415952, #446837)
+ - Add support for Linux 2.6.23.
+ - Multiple bug fixes for client tracking in the file server.
+ - Prevent one client from consuming all file server threads.
+ * Remove the workaround added for 2.6.20 and 2.6.21 kernels with
+ CONFIG_PARAVIRT enabled. The mistaken GPL-labelling of core
+ interfaces was fixed in 2.6.22, which has now migrated to testing.
+ * Scan /var/log/openafs for core files with a PID appended when a server
+ run by bosserver exits with a signal. bosserver was unable to
+ correctly handle core files for multithreaded servers since it
+ expected a filename of core and Linux always appends a PID to core
+ dumps by multithreaded processes.
+ * Fix make kdist in openafs-modules-source, inadvertently broken by a
+ missing genchanges script.
+ * Stop creating /var/lib/openafs/cores. Nothing actually uses it.
+
+ -- Russ Allbery <rra@debian.org> Tue, 16 Oct 2007 17:01:33 -0700
+
+openafs (1.4.4.dfsg1-7) unstable; urgency=low
+
+ * Switch to quilt for managing patches to the upstream source.
+ * Stop installing the Administrator's Reference. All of the useful
+ information in here has been converted to man pages.
+ * Use the upstream man page for pt_util, which lets us remove the
+ docbook-to-man build dependency.
+ * Update to the latest CellServDB from grand.central.org.
+ * Trim additional unuseful debug information from openafs-dbg.
+ * Restructure the source for the module package. The build files for
+ the module build are now in debian/module in the source package and
+ there is a completely separate rules file. This way, the module build
+ rules don't have to depend on quilt and the structure is clearer.
+ * Fix debhelper dependencies for the module build.
+ * Update module standards version to 3.7.2 (no changes required).
+
+ -- Russ Allbery <rra@debian.org> Mon, 20 Aug 2007 17:54:00 -0700
+
+openafs (1.4.4.dfsg1-6) unstable; urgency=low
+
+ * Apply upstream patch for the OpenAFS file server to treat clients that
+ have an all-zero UUID as if they don't have UUID support, working
+ around bugs in various client versions that can cause multiple hosts
+ to use all-zero UUIDs and conflict with each other.
+ * Use dpkg --print-architecture to determine the AFS sysname for both
+ regular builds (avoiding --print-installation-architecture, which is
+ deprecated) and kernel builds (avoiding arch, which is temporarily not
+ in unstable and which wouldn't do the right thing for cross-compiles).
+ Thanks, Chris Hanson. (Closes: #435765)
+ * Add hppa as a recognized architecture for kernel module builds,
+ although OpenAFS currently only supports 2.4 kernels on HPPA so this
+ isn't that useful.
+
+ -- Russ Allbery <rra@debian.org> Thu, 02 Aug 2007 19:54:00 -0700
+
+openafs (1.4.4.dfsg1-5) unstable; urgency=low
+
+ * Apply upstream patch from Jeffrey Hutzelman to fix syscall probing on
+ AMD64 with Linux 2.6.22 kernels. (Closes: #430179)
+ * Add a union to des_ks_struct and reorder includes to get the correct
+ alignment for DES code on SPARC. Thanks, Chaskiel Grundman. Partly
+ addresses #415952.
+ * Fix a typo in debian/kern-sysname that caused openafs-modules-source
+ to still assume all ia64 systems used Linux 2.4. Thanks, Jakob
+ Haufe. (Closes: #432344)
+ * Use LSB logging functions for openafs-fileserver and support passing
+ arguments to bosserver in /etc/default/openafs-fileserver by setting
+ DAEMON_ARGS.
+ * Clean up more completely after a purge of openafs-fileserver. Remove
+ the files created by the server in /var/lib/openafs/local, remove
+ KeyFile and CellServDB.old from /etc/openafs/server, and remove
+ BosConfig from /etc/openafs.
+
+ -- Russ Allbery <rra@debian.org> Tue, 17 Jul 2007 09:25:03 -0700
+
+openafs (1.4.4.dfsg1-4) unstable; urgency=low
+
+ * Apply upstream patch from Jeffrey Hutzelman to fix kernel module
+ builds on ppc64. (Closes: #427555)
+ * Apply upstream patches for Linux 2.6.22 support. (Closes: #428401)
+ * Apply upstream patch to fix the AFS /proc structure under Linux
+ 2.6.22.1 and later.
+ * Move /etc/openafs/server-local to /var/lib/openafs/local. Most of the
+ files here are automatically generated and hence not configuration
+ files, and the file server has to write to this directory to start (so
+ having it in /etc breaks read-only / file systems). Thanks, Alexei
+ Sheplyakov. (Closes: #405697)
+ * Move upserver and upclient to /usr/lib/openafs (from /usr/sbin) to
+ match upstream's layout and for consistency with the other servers run
+ via bosserver.
+ * Use --name instead of --exec in the openafs-fileserver init script and
+ drop the --pidfile option (bosserver doesn't create a PID file) so
+ that we don't start a second bosserver on upgrades.
+ * Go back to using krb5-config. The dependency problem has now been
+ fixed on all platforms in the krb5 package and this is the preferred
+ upstream method.
+
+ -- Russ Allbery <rra@debian.org> Thu, 21 Jun 2007 03:02:32 -0700
+
+openafs (1.4.4.dfsg1-3) unstable; urgency=low
+
+ * Always generate a UUID on client startup even if for some reason we
+ don't think we have any network interfaces. Otherwise, the client
+ will use an all-zeroes UUID, which will collide with every other
+ client with the same problem.
+ * When afsd is started with -rmtsys, it starts another process that afsd
+ -shutdown doesn't kill. Update the init script to kill this process
+ on stop. (Closes: #405982)
+ * Don't use krb5-config to get a library list. It runs the risk of
+ encoding unnecessary library dependencies. Instead, hard-code the
+ flags and libraries we actually need. (Closes: #424448)
+ * When loading a module using the upstream naming convention, don't
+ append the .mp to the module name for modprobe. (Closes: #420597)
+
+ -- Russ Allbery <rra@debian.org> Wed, 16 May 2007 18:16:12 -0700
+
+openafs (1.4.4.dfsg1-2) unstable; urgency=low
+
+ * Debian kernels as of 2.6.20 enable CONFIG_PARAVIRT, which redefines
+ several core kernel calls as redirects through a paravirt.ops table
+ that's marked GPL-only. This breaks all non-GPL modules that used
+ those (previously generally exported) calls even indirectly. Apply a
+ hack to switch from spin_lock_irq to spin_lock_irqsave to avoid the
+ paravirt redirection so that the module will build.
+ * Enable ucontext for all Linux builds with glibc 2.4 or later, not just
+ with i386 and amd64, and (following an upstream patch) always use
+ ucontext on ia64. Newer versions of glibc change internal structures
+ in ways that cause the old LWP code to have stack overflows.
+ (Closes: #419903)
+ * Apply upstream patch to crashes on contention in afs_xuser when a
+ process in a PAG exits. Thanks, Chaskiel Grundman.
+ * When determining the AFS sysname for kernel module builds, add
+ explicit cases for 2.6 kernels for all architectures that support them
+ (everything except non-64-bit sparc_linux). Fixes build problems with
+ ia64 and probably other architectures. Thanks to Ippokratis Pandis
+ for the debugging help. (Closes: #411818)
+ * Prefer alpha_linux_26 to alpha_linux_24 for the non-kernel build on
+ Alpha, now that the source supports it.
+ * Add support for the s390x architecture. Upstream supports it and
+ there's no reason not to.
+ * Fix the watch file to remove .dfsg\d+ when comparing versions.
+
+ -- Russ Allbery <rra@debian.org> Thu, 19 Apr 2007 13:26:33 -0700
+
+openafs (1.4.4.dfsg1-1) unstable; urgency=low
+
+ * Repackage upstream source to remove two additional files covered under
+ the APSL. (Closes: #416685)
+ * Build-depend on Automake since we run aclocal during the build. Not
+ having aclocal caused local patches to osconf.m4 to not be effective,
+ leading to the wrong compiler flags for shared libraries. Thanks to
+ Frank Lichtenheld for the report. (Closes: #416398, #416497, #418966)
+
+ -- Russ Allbery <rra@debian.org> Thu, 12 Apr 2007 21:19:00 -0700
+
+openafs (1.4.4-1) experimental; urgency=low
+
+ * New upstream release. (Closes: #415699)
+ - Support newer Linux kernels. (Closes: #409797, #410120)
+ - Add aklog fallbacks for null realms to support the referral
+ capability in MIT Kerberos 1.6 and later. (Closes: #410314)
+ * Apply patch from Thomas Sesselmann to support setting options to pass
+ to bosserver in /etc/default/openafs-fileserver. (Closes: #409357)
+ * Remove the rx_Init calls in the PAM module. The internal counters
+ that had to be initialized that way have been removed.
+ * Now that we're running regen.sh as part of the build process, only
+ patch the Autoconf source files and not the generated output to make
+ the diff easier to audit.
+
+ -- Russ Allbery <rra@debian.org> Mon, 26 Mar 2007 18:56:55 -0700
+
+openafs (1.4.2-6) unstable; urgency=medium
+
+ * SECURITY: Apply upstream patch to disable setuid status on all cells
+ by default. Prior versions of AFS defaulted to honoring setuid bits
+ in the local cell, but since unauthenticated file access in AFS is
+ unencrypted, an attacker could forge packets from an AFS file server
+ to synthesize a setuid binary in AFS.
+ * Apply upstream fix to use a single high-numbered group for the PAG on
+ 2.6 kernels and sort the group properly. Fixes AFS-caused group
+ ordering problems that could lead the kernel to ignore some group
+ membership for users. (Closes: #414911)
+ * Apply upstream fix for segfaults in pts rename. (Closes: #409184)
+ * Apply upstream fix to show reasonable free space numbers for AFS in
+ df. Without this fix, some programs which use df to check free space
+ may think that directories in AFS are full and prevent the user from
+ attempting to write files. (Closes: #415294)
+ * Translation updates:
+ - Dutch, thanks cobaco. (Closes: #413701)
+ - Portuguese, thanks Miguel Figueiredo. (Closes: #414800)
+
+ -- Russ Allbery <rra@debian.org> Wed, 14 Mar 2007 18:37:12 -0700
+
+openafs (1.4.2-5) unstable; urgency=low
+
+ * Translation updates:
+ - Chinese, thanks Chun Tian (binghe). (Closes: #406063)
+
+ -- Russ Allbery <rra@debian.org> Sun, 28 Jan 2007 13:43:16 -0800
+
+openafs (1.4.2-4) unstable; urgency=low
+
+ * Update documentation to note that enabling v4 support or running
+ krb524d is no longer required for aklog to work.
+ * Translation updates:
+ - German, thanks Henrik Kroeger. (Closes: #400800)
+
+ -- Russ Allbery <rra@debian.org> Sun, 17 Dec 2006 17:09:41 -0800
+
+openafs (1.4.2-3) unstable; urgency=low
+
+ * No longer pass explicit cache tuning options to afsd and instead let
+ OpenAFS automatically choose tuning based on the cache size.
+ * Accept trailing whitespace in ThisCell.
+ * Fix path canonicalization on the server, enabling bos getlog with a
+ simple log name to work properly against a Debian bosserver.
+ * Change the documentation of afsd -shutdown to be less dire and more
+ accurate. Thanks, Daniel J. Priem. (Closes: #394990)
+ * Document (at least partially) AFS's mapping of Kerberos v5 principal
+ names to Kerberos v4 format in the aklog man page. Thanks, Daniel
+ J. Priem. (Closes: #394832)
+ * Document that aklog -setpag may not always work.
+
+ -- Russ Allbery <rra@debian.org> Mon, 20 Nov 2006 17:29:46 -0800
+
+openafs (1.4.2-2) unstable; urgency=low
+
+ * Upstream fix to prevent butc segfaulting.
+
+ -- Sam Hartman <hartmans@debian.org> Sat, 21 Oct 2006 20:57:09 -0400
+
+openafs (1.4.2-1) unstable; urgency=medium
+
+ * New upstream release, fixes amd64 kernel issues
+ * Update CellServDB
+
+ -- Sam Hartman <hartmans@debian.org> Fri, 20 Oct 2006 06:44:45 -0400
+
+openafs (1.4.2~fc4-3) unstable; urgency=low
+
+ * Apply patch from Chaskiel Grundman to fix kernel panics when loading
+ the kernel module into AMD64 2.6.18 kernels. (Closes: #390653)
+ * Apply upstream patch to fix klog segfaults. (Closes: #390940)
+ * The UTS_RELEASE string is no longer found in linux/version.h in
+ 2.6.18, so fall back on looking in config/kernel.release. Thanks to
+ Marcus Watts for the patch.
+
+ -- Russ Allbery <rra@debian.org> Thu, 5 Oct 2006 13:02:50 -0700
+
+openafs (1.4.2~fc4-2) unstable; urgency=low
+
+ * Apply additional upstream patch for AMD64 2.6.18 kernel module build
+ issues. (Closes: #389729)
+
+ -- Russ Allbery <rra@debian.org> Sat, 30 Sep 2006 00:34:33 -0700
+
+openafs (1.4.2~fc4-1) unstable; urgency=low
+
+ * New upstream release candidate.
+ - Builds with 2.6.18 on AMD64. (Closes: #389729)
+ * Build an openafs-dbg package with debugging information for the
+ OpenAFS fileserver and volserver.
+ * Add LSB comments to the openafs-client and openafs-fileserver init
+ scripts.
+ * Update to debhelper compatibility level V5.
+
+ -- Russ Allbery <rra@debian.org> Wed, 27 Sep 2006 11:06:48 -0700
+
+openafs (1.4.2~fc2-1) unstable; urgency=low
+
+ * New upstream release candidate.
+ - Supports new Linux kernel versions. (Closes: #383028)
+ * Translation updates:
+ - German, thanks Henrik Kroeger. (Closes: #384803)
+
+ -- Russ Allbery <rra@debian.org> Sun, 3 Sep 2006 12:42:59 -0700
+
+openafs (1.4.1-4) unstable; urgency=low
+
+ * Apply upstream fix from Derek Atkins for compilation with kernel
+ versions prior to 2.6.10. (Closes: #376576)
+
+ -- Russ Allbery <rra@debian.org> Sun, 9 Jul 2006 12:35:44 -0700
+
+openafs (1.4.1-3) unstable; urgency=low
+
+ * Include all of AFS's local XDR implementation in the build for
+ shlibafsrpc, fixing problems with undefined symbols in the PAM module
+ on AMD64.
+ * When creating a new file server in afs-newcell, use a set of tuning
+ flags from Harald Barth rather than relying on the defaults. This
+ doesn't help with general bos create; long term, the defaults need to
+ be fixed. (Closes: #364100)
+ * Add a note in README.servers about fileserver tuning options.
+ * Update debconf templates to follow the best practice recommendations
+ from the Developer's Reference.
+ * Regenerate the man pages on build since the pre-generated ones were
+ done with a very old version of pod2man.
+ * Update standards version to 3.7.2 (no changes required).
+ * Use a better method of optionally running make distclean.
+ * Add build-arch and build-indep targets, just in case.
+ * Translation updates:
+ - Czech, thanks Martin Šín.
+ - Portuguese (Brazil), thanks André Luís Lopes.
+ - French, thanks Christian Perrier.
+ - Vietnamese, thanks Clytie Siddall.
+
+ -- Russ Allbery <rra@debian.org> Sun, 18 Jun 2006 11:22:11 -0700
+
+openafs (1.4.1-2) unstable; urgency=low
+
+ * Exit successfully in the openafs-client init script if no module is
+ installed, since otherwise openafs-client will fail to install until
+ one builds a module. This restores previous accidental behavior due
+ to a bug in debhelper. (Closes: #362695)
+ * libopenafs-dev must conflict with liblwp-dev since they both provide
+ liblwp.a. Thanks, Justin Pryzby. (Closes: #362842)
+ * openafs-client recommends lsof, since the init script uses it for
+ cleaner shutdown.
+
+ -- Russ Allbery <rra@debian.org> Sat, 15 Apr 2006 15:47:04 -0700
+
+openafs (1.4.1-1) unstable; urgency=low
+
+ * New upstream release.
+ - Supports Linux 2.6.16. (Closes: #358203)
+ - Suspend should work with newer kernels. (Closes: #341588)
+ - Safer cache size calculation. (Closes: #360176)
+ - Upstream now includes man pages, so remove our backport.
+ * Subsume openafs-krb5 into this source package.
+ - Acknowledge NMU. (Closes: #304933)
+ - Update to the OpenAFS aklog and asetkey. (Closes: #196094)
+ - Backport asetkey from upstream CVS.
+ - Include ka-forwarder from the old migration toolkit.
+ - Add man pages for asetkey and ka-forwarder.
+ * Subsume openafs-doc into this source package.
+ * Since 2.6 is the supported kernel for etch, build the userspace with
+ a sysname of *_linux26 where supported. This only affects the sys
+ command. (Using livesys instead is better.) (Closes: #358118)
+ * Always pass the system type into Autoconf, following autotools-dev
+ best practices.
+ * Add an explicit copyright statement to debian/copyright.
+
+ -- Russ Allbery <rra@debian.org> Fri, 14 Apr 2006 15:04:45 -0700
+
+openafs (1.4.0-4) unstable; urgency=low
+
+ * Hopefully fix sparc64 kernel support. Thanks, Troy Benjegerdes.
+ (Closes: #219429)
+ * Document the need to restart ptserver and vlserver on the existing
+ database servers when adding a new one. Thanks, Niklas Edmundsson.
+ (Closes: #349659)
+ * Include xstat_cm_test and xstat_fs_test in openafs-client, as they're
+ quite useful for debugging.
+
+ -- Russ Allbery <rra@debian.org> Tue, 14 Mar 2006 21:07:07 -0800
+
+openafs (1.4.0-3) unstable; urgency=low
+
+ * Apply upstream patch from Chas Williams to be more careful about what
+ dentry is used in renames, avoiding a kernel fault when renaming
+ dentries accessed through multiple paths (such as RO and RW).
+ * Apply patch to allow the module to build with the Ubuntu kernel.
+ Thanks, Björn Torkelsson. (Closes: #342607)
+ * Stop unconditionally forcing the compiler to cc or gcc in configure,
+ allowing, among other things, building the kernel module with a
+ compiler other than the default system compiler. (Closes: #338306)
+ * Call kernel-version correctly from prep-modules, which fixes build
+ issues with manually-built kernels. (Closes: #344851)
+ * Backport man pages from upstream CVS. (Closes: #79763)
+ * Include afsmonitor and livesys in openafs-client.
+ * Include volinfo in openafs-fileserver.
+ * Document FAM's lack of support for AFS's security model and recommend
+ gamin instead. (Closes: #343246)
+ * Add a hint to README.Debian on what to do about the cache partition if
+ running ReiserFS or XFS without a spare partition.
+ * Use make install into debian/tmp rather than make dest. make dest is
+ mostly for Transarc compatibility and make install looks more like a
+ typical package and makes it easier to evaluate differences in FHS
+ location between upstream and Debian. As a side effect, there's no
+ need to mess with the @sys link. (Closes: #165909)
+ * Install more files with dh_install rather than install commands in
+ debian/rules so that *.install shows a more complete picture of what
+ goes into each package.
+ * Don't ignore make distclean errors.
+
+ -- Russ Allbery <rra@debian.org> Tue, 27 Dec 2005 15:34:16 -0800
+
+openafs (1.4.0-2) unstable; urgency=low
+
+ * Install more of the standard OpenAFS utilities. (Closes: #138851)
+ - openafs-dbserver: Install prdb_check and vldb_check.
+ - openafs-fileserver: Install voldump.
+ - openafs-client: Install fstrace, scout, and up (as afs-up).
+ - Modify fstrace to load its catalog from /usr/share/openafs.
+ * Do not install kpwvalid. The default version does little useful and
+ the kpwvalid binary must be in AFS for it to take effect.
+ * Overhaul the way kernel modules are built.
+ - Recommend linux-image rather than kernel-image for newer kernels.
+ - Always recommend the kernel package; since it's only a recommends,
+ there's no need to special-case the hand-built kernel case.
+ - Be less fragile about how the kernel version is used in prep-modules
+ to support other ways kernel modules are built. (Closes: #341836)
+ - Add Build-Depends and Uploaders to the openafs-modules-source
+ control file.
+ - Remove unused parts of prep-modules and heavily comment it.
+ * openafs-client should only recommend the AFS kernel module. Many of
+ the client programs will work in unauthenticated mode without it, and
+ openafs-fileserver depends on it (but doesn't require the kernel
+ module). (Closes: #342095)
+ * openafs-modules-source no longer has to depend on as many libraries.
+ * Suggest the same PAM settings for pam_krb5 that libpam-krb5 does.
+ * Update uploader address.
+
+ -- Russ Allbery <rra@debian.org> Tue, 6 Dec 2005 23:34:18 -0800
+
+openafs (1.4.0-1) unstable; urgency=low
+
+ * New upstream version.
+ - Builds correctly with 2.6.13 kernels and software suspend.
+ - Builds correctly with 2.6.12-10. (Closes: #337883)
+ * Install afsd in /sbin rather than /usr/sbin. While putting /usr in
+ AFS isn't as common as it once was, no reason to make it harder than
+ it needs to be.
+ * Update CellServDB to the 2005-10-15 grand.central.org version.
+ * Install NEWS as an upstream changelog.
+ * Add a watch file.
+ * Remove the unused and uninstalled make-links script.
+
+ -- Russ Allbery <rra@stanford.edu> Sun, 6 Nov 2005 21:37:40 -0800
+
+openafs (1.4rc4-1) unstable; urgency=low
+
+ * New upstream version.
+ - Correctly handle root.afs becoming replicated after the client
+ starts. This should resolve the problems with AFS eventually
+ failing on the first system using a new cell. (Closes: #88906)
+ * When kill_all_afs is enabled in /etc/openafs/afs.conf, only kill AFS
+ processes if the runlevel is 0 or 6. You really only want this when
+ the system is shutting down. (Closes: #325347)
+ * Remove the init script check of the cache file system and instead
+ improve the check in afsd. The init script check used stat, which is
+ in /usr/bin and therefore not fair game for init scripts.
+ * Set PATH in the init script, just in case.
+ * libpam-openafs-kaserver must depend on openafs-client, not just
+ recommend it, since acquiring tokens requires that the client be
+ running.
+ * Expand README.Debian and include information about PAM configuration.
+ * Link libpam-openafs-kaserver's doc directory to openafs-client.
+ * Make the short descriptions shorter.
+ * Translation updates.
+ - Portuguese (Brazil), thanks André Luís Lopes.
+
+ -- Russ Allbery <rra@stanford.edu> Wed, 21 Sep 2005 13:36:34 -0700
+
+openafs (1.4rc1-1) unstable; urgency=low
+
+ * New upstream version.
+ * Install pam_afs.krb.so on hppa. I believe the new PAM module build
+ process fixes the issue that was being worked around before.
+ * Improve the documentation and scripts for setting up new servers or a
+ new cell. afs-rootvol can now be run from a client configured to use
+ dynroot. afs-newcell generates the server CellServDB directly to work
+ around oddities with bos addhost. There are many other, more minor
+ improvements as well. Thanks to Faheem Mitha and Sergio Gelato for
+ analysis and patches. (Closes: #322638)
+ * Update the configuration transcript to reflect the current packages,
+ messages, and instructions. Thanks, Faheem Mitha.
+ * Fill in the server CellServDB with information about the local cell,
+ if available in the client CellServDB, rather than always initializing
+ it to contain just the name of the cell.
+ * Detect AFS caches on non-ext2/ext3 file systems and abort AFS client
+ initialization. (Closes: #249315)
+ * Provide a way of setting sysname in afs.conf. (Closes: #324694)
+ * Don't create the unused /etc/openafs/AFSLog file. (Closes: #120097)
+ * Redo how library object files are found for the PAM module build to
+ avoid assuming C locale character set behavior. (Closes: #323582)
+ * Remove the openafs-client warning against dynroot for the first system
+ in a cell now that afs-rootvol can cope. Provide some basic
+ documentation of the CellAlias syntax in that message until we have a
+ real man page.
+ * Suggest openafs-doc.
+ * Update standards version to 3.6.2 for the kernel module packages (no
+ changes required).
+ * Translation updates.
+ - Czech, thanks Martin Sin.
+ - Vietnamese, thanks Clytie Siddall.
+ - French, thanks Christian Perrier.
+
+ -- Russ Allbery <rra@stanford.edu> Fri, 26 Aug 2005 01:30:21 -0700
+
+openafs (1.3.87-1) unstable; urgency=low
+
+ * New upstream version.
+ - Fixes build problems with 2.6.12.3 and later. (Closes: #320099)
+ * Add support for ppc64, thanks Andreas Jochens. (Closes: #322020)
+ * Improve the openafs-client init script.
+ - Update the default client options based on the cache tuning synopsis
+ by Jeffrey Hutzelman, including setting a larger chunksize for all
+ default option sets. (Closes: #303944)
+ - Choose the client options based on the cache size by default.
+ - Move the code to build the options string to the init script from
+ afs.conf so that afs.conf is pure configuration.
+ - Add an AFS_PRE_SHUTDOWN hook called before shutting down the client.
+ - Provide a shutdown hook, disabled by default, that kills all
+ processes with files open in /afs. Enabling this ensures a more
+ reliable clean shutdown and umounting of the cache partition, but
+ may not always be what the admin wants.
+ - Improve the readability of the output on start.
+ - Significantly improve the comments in afs.conf.
+ - Remove the code to set -nosettime as it's now the default.
+ * Move the openafs-client init script and afs.conf file we use into the
+ debian directory rather than patching the upstream version. We've
+ diverged so much that there's no point in continuing to merge changes.
+ * Diagnose unsupported architectures earlier and with a clearer error.
+ * Suppress error messages from a missing kernel version header since
+ they occur normally when doing the regular package build and are just
+ confusing. Instead, print an error in kern-sysname and abort if the
+ kernel version could not be determined.
+ * Rework how PAM modules are handled.
+ - Build against the pthread-aware libraries. (Closes: #297804)
+ - Use the shared library objects instead of building separate PIC
+ objects, eliminating the need for many Makefile modifications.
+ - Include pam_afs.krb.so as well. (Closes: #165972)
+ * Don't include the empty /usr/src/modules directory in
+ openafs-modules-source, only the tarball, to match how other kernel
+ module source packages behave. (Closes: #244685)
+ * Update config.guess and config.sub.
+ * Translation updates.
+ - French, thanks Christian Perrier. (Closes: #318807)
+ - Vietnamese, thanks Clytie Siddall. (Closes: #319705)
+ - Czech, thanks Martin Sin. (Closes: #319940)
+
+ -- Russ Allbery <rra@stanford.edu> Sun, 14 Aug 2005 14:41:48 -0700
+
+openafs (1.3.82-2) unstable; urgency=low
+
+ * Output error messages from heredocs in the init script with cat rather
+ than echo. Thanks, Reid Barton. (Closes: #311729)
+ * Make bosserver less picky about permissions and remove the attempt to
+ set /etc/openafs/server-local not-world-readable since dh_fixperms was
+ overridding it anyway. (Closes: #312921)
+ * Fix some spacing and capitalization errors in the debconf templates.
+ Thanks, Clytie Siddall. (Closes: #316597)
+ * Initial Czech translation, thanks Martin Sin. (Closes: #310699)
+ * New Vietnamese translation, thanks Clytie Siddall. (Closes: #316598)
+ * Update standards version to 3.6.2 (no changes required).
+
+ -- Russ Allbery <rra@stanford.edu> Mon, 11 Jul 2005 17:34:13 -0700
+
+openafs (1.3.82-1) unstable; urgency=medium
+
+ * New upstream version. (Closes: #307699)
+ - Proper locking for preempt kernels. This bug manifested as an
+ inability to shut down AFS cleanly. (Closes: #308399, #304040)
+ - Correctly handle the inotify semaphore. (Closes: #303495)
+ * Repackage upstream to remove MacOS-specific files covered by the APSL.
+ Remove the WINNT directory to save space since we have to repackage
+ anyway. Provide a get-orig-source target to do the repackaging.
+ * libpam-openafs-kaserver: Fix compilation so that the PAM module isn't
+ missing symbols and therefore unusable. (Closes: #308844)
+ * Apply patch from Chas Williams to fix stale cache data from deleted
+ files, a bug introduced in 1.3.82.
+ * In all cases, only build the module appropriate to the kernel we're
+ building against. Building an SMP module against a non-SMP kernel
+ fails due to missing defines. (Closes: #225907)
+ * README.modules: Add documentation for module-assistant and recommend
+ it when using Debian kernels. Mention divergences from upstream in
+ module naming. (Closes: #253168) Emphasize that the kernel source
+ tree used for make-kpkg must be identically configured to the kernel
+ the module will be used with.
+ * Update copyright with more complete information from upstream
+ src/LICENSE.
+ * Simplify clean target. Upstream make distclean is now better.
+
+ -- Russ Allbery <rra@stanford.edu> Tue, 10 May 2005 21:09:55 -0700
+
+openafs (1.3.81-5) unstable; urgency=low
+
+ * Handle modules named either with or without the .mp extension on SMP
+ hosts. (Closes: #305389, #307280, #307797)
+ * README.Debian: Document that the client cache partition must be ext2
+ or ext3 and that XFS and ReiserFS will not work. upserver and
+ upclient are now provided. Provide some information about why
+ kaserver is not provided. (Closes: #249315)
+ * Overhaul the module build rules.
+ - Use debhelper to build the module binary package.
+ - Let debhelper handle the module postinst and prerm control scripts.
+ - Properly support modules_config and modules_clean.
+ - Break the build process into configure, build, install, and binary
+ rules, paralleling the regular build rules and making it easier to
+ maintain the make-kpkg build targets.
+ - Include the kernel version in the long description.
+ - Update standards version of module packages to 3.6.1.
+ - Include the copyright and basic documentation in the module binary
+ package. Otherwise, policy requires an exact versioned dependency
+ on the package containing the copyright file.
+ * Update standards version to 3.6.1.
+ - Install Debian::OpenAFS::ConfigUtils in /usr/share, not /usr/lib.
+ - Always enable debugging symbols and disable optimization if noopt is
+ set in DEB_BUILD_OPTIONS. (Alas, this doesn't entirely work; the
+ upstream makefiles don't always honor the configure options.)
+ - /etc/init.d/openafs-fileserver restart starts bosserver if it's not
+ already running.
+ * Update debhelper compatibility level to V4.
+ - Remove all *.conffiles control files. They're no longer needed.
+ - Use misc:Depends to get debconf dependencies.
+ - Use dh_install rather than the movefiles script.
+ * openafs-dbserver doesn't need to depend on debconf.
+ * Use dh_perl to get the correct Perl dependency for openafs-dbserver.
+ * Remove unnecessary build dependencies.
+ * Depend on comerr-dev rather than e2fslibs-dev.
+ * Remove unnecessary preinst for openafs-fileserver.
+ * Clean up and reformat package build rules.
+ * Update lintian overrides.
+
+ -- Russ Allbery <rra@stanford.edu> Sat, 7 May 2005 20:57:12 -0700
+
+openafs (1.3.81-4) unstable; urgency=low
+
+ * make-kpkg doesn't run fakeroot for us but instead expects the module
+ rules file to use $(ROOT_CMD) appropriately. (Closes: #237861)
+ * Put the compiled modules into KPKG_DEST_DIR if set. This appears to
+ be preferred over DEB_DEST by the make-kpkg documentation. Thanks,
+ Jonas Smedegaard. (Closes: #206403)
+ * Add a check to afs-newcell to ensure the local hostname doesn't
+ resolve to 127.0.0.1. (Closes: #163751)
+ * Exclude .svn directories from the modules source tarball.
+ * Fix genchanges for module builds to not fail when trying to remove a
+ nonexistent file.
+ * New French translations from Christian Perrier, Closes: #305780
+
+ -- Russ Allbery <rra@stanford.edu> Sun, 17 Apr 2005 00:00:27 -0700
+
+openafs (1.3.81-3) unstable; urgency=low
+
+ * Patch from kcr to fix osconf.m4 so that sparc defines afs_pthread_env
+ and thus builds.
+
+ -- Sam Hartman <hartmans@debian.org> Wed, 6 Apr 2005 19:54:24 -0400
+
+openafs (1.3.81-2) unstable; urgency=low
+
+ * Oops, update debian/sysname because hppa is hppa not parisc-*-linux-*
+ since we now use dpkg --print-installation-architecture
+
+ -- Sam Hartman <hartmans@debian.org> Wed, 6 Apr 2005 11:10:14 -0400
+
+openafs (1.3.81-1) unstable; urgency=low
+
+ * New Upstream version
+ * Use Linux 2.4 as the claimed userspace OS for alpha; hopefully this
+ resolves the largefile issue and allows us to build again, Closes: #271923
+
+ -- Sam Hartman <hartmans@debian.org> Wed, 6 Apr 2005 08:08:29 -0400
+
+openafs (1.3.80-1) UNRELEASED; urgency=low
+
+ * New upstream version, Closes: #297781
+ * I think this works on sparc better and definitely works on 2.6.10, Closes: #283488
+ * Make thiscell a high debconf value, Closes: #302939
+ * New upstream version (1.3.79)
+ - Works with 2.6.10, Closes: #296835
+ * Use amd64 not x86_64 for sysname script, Closes: #296855
+ * Patches from kcr
+ - Loosen dependencies for client and modules
+ - Enable debugging
+ - Some callbacks later stuff and fix short bitfield
+ - Fix permissions on /etc/openafs/server-local, Closes: #271460
+
+ * Versions 1.3.79 an newer work on amd64, Closes: #262382
+
+ -- Sam Hartman <hartmans@debian.org> Mon, 4 Apr 2005 00:32:42 -0400
+
+openafs (1.3.77-1) unstable; urgency=low
+
+ * New upstream version
+ * Target for unstable not experimental
+ * New CellServDB
+ * OpenAFS seems not to have a changelog available, so stop shipping it.
+ * Build openafs.ko not libafs.ko so the right name appears in lsmod
+
+ -- Sam Hartman <hartmans@debian.org> Sat, 8 Jan 2005 20:02:23 -0500
+
+openafs (1.3.74-1) experimental; urgency=low
+
+ * New upstream version
+
+ -- Sam Hartman <hartmans@mit.edu> Mon, 15 Nov 2004 16:58:02 -0500
+
+openafs (1.3.73-1) experimental; urgency=low
+
+ * New upstream version
+ - Works with 2.6.8 and 2.6.9, Closes: #277521
+ * Remove call to dh_suidregister
+ * Update sysname to prefer 2.4 on more arches for largefile issues
+ * Patch from pnelson@ANDREW.CMU.EDU to add x86_64 support to sysname scripts
+ * debian/sysname: Use installation architecture
+
+ -- Sam Hartman <hartmans@debian.org> Wed, 27 Oct 2004 20:42:12 -0400
+
+openafs (1.3.71-1) experimental; urgency=low
+
+ * New upstream version
+
+ -- Sam Hartman <hartmans@mit.edu> Tue, 31 Aug 2004 09:45:59 -0400
+
+openafs (1.3.70-1) experimental; urgency=low
+
+ * New upstream version
+ * debian/kern-sysname: 2.6* not 2.6
+ * Enable supergroups and largefile-fileserver
+
+ -- Sam Hartman <hartmans@debian.org> Sun, 15 Aug 2004 18:56:48 -0400
+
+openafs (1.3.65-1) experimental; urgency=low
+
+ * New upstream Version, Closes: #256580
+
+ -- Sam Hartman <hartmans@debian.org> Mon, 28 Jun 2004 19:40:30 -0400
+
+openafs (1.3.64-2) experimental; urgency=low
+
+ * Allow loading of a .ko file not just .o
+
+ -- Sam Hartman <hartmans@debian.org> Mon, 31 May 2004 13:46:05 -0400
+
+openafs (1.3.64-1) experimental; urgency=low
+
+ * New upstream version
+ * Add 2.6 to kern-sysname for i386
+ * Apply patch from
+ /afs/cs.cmu.edu/user/jhutz/junk/openafs-patches/openafs-build-on-linux26 which correctly generates 2.6 modules, Closes: #234284
+ * use make only_libafs not dest_only_libafs
+ - AS a result, build times are much faster, Closes: #144781
+ * Correct module build scripts to install module package from new location
+ * Fix afslocaldir to be /etc/openafs/server-local, Closes: #237154
+
+ -- Sam Hartman <hartmans@debian.org> Sun, 30 May 2004 18:12:54 -0400
+
+openafs (1.2.12-1) unstable; urgency=medium
+
+ * New upstream version
+ * Medium urgency because this version fixes a significant server crash
+ bug. Windows clients, particularly greater than version 1.3.70 tend
+ to crash openafs servers.
+ * Cause openafs-kpasswd to conflict with kerberos4kth-clients, Closes:
+ #277844
+ * Conflict between libopenafs-dev and arla-dev, Closes: #274788
+
+ -- Sam Hartman <hartmans@debian.org> Fri, 22 Oct 2004 16:21:29 -0400
+
+openafs (1.2.11-3) unstable; urgency=high
+
+ * Now that libopenafs-dev contains binaries, it should have shared
+ library dependencies, Closes: #267509
+ * New fr.po from Christian Perrier, Closes: #237098
+
+ -- Sam Hartman <hartmans@debian.org> Tue, 24 Aug 2004 12:10:02 -0400
+
+openafs (1.2.11-2) unstable; urgency=low
+
+ * Install rxgen
+ * Install upserver and upclient
+ * Mark as version 1.2.11, Closes: #255883
+
+ -- Sam Hartman <hartmans@debian.org> Thu, 12 Aug 2004 14:27:39 -0400
+
+openafs (1.2.11-1) unstable; urgency=high
+
+ * Versions prior to 1.2.10 stopped working with multiple servers in a
+ cell because of a ubik bug prompting the 1.2.11 release.
+ * Fix afs startup script not to start afsd if already running; really
+ fixed in 1.2.10-3, but not documented, Closes: #219702
+
+ -- Sam Hartman <hartmans@debian.org> Sat, 10 Jan 2004 16:37:33 -0500
+
+openafs (1.2.10-3) unstable; urgency=low
+
+ * Fix Openafs not to include kernel headers from /usr/include,
+ Closes: #220600
+ * Fix typo in openafs templates, Closes: #215714
+ * New French translations, Closes: #216158
+ * Build-depend on e2fslibs-dev to get appropriate headers
+
+ -- Sam Hartman <hartmans@debian.org> Thu, 20 Nov 2003 16:02:45 -0500
+
+openafs (1.2.10-2) unstable; urgency=low
+
+ * New Brazilian Portuguese (pt_BR) translations, Closes: #208035
+ * Don't conflict with ircd, Closes: #204865
+ * Fix wording of question about using dynroot, Closes: #209332
+ * New French debconf translations, sorry about the delay in including these, Closes: #203608
+ * Avoid yes/no construction in openafs-client templates, Closes: #198476
+ * Fix libpam-openafs-kaserver to include the symbols it needs, patch
+ from Daniel Joseph Barnhart Clark , Closes: #194818
+
+ -- Sam Hartman <hartmans@debian.org> Mon, 13 Oct 2003 00:38:42 -0400
+
+openafs (1.2.10-1) unstable; urgency=low
+
+ * New upstream version
+ * net/*.h included properly by kernel module, Closes: #204642
+ * Don't build libafsrpc or libafsauthent, as we can't exactly use them
+ because they contain non-pic code, Closes: #203456
+ * I think I finally build the PAM module on hppa, Closes: #179679
+ * Decnet includes should work now because of the change of the net
+ symlink, Closes: #204486
+ * Escape $ in debian/rules, Closes: #204185
+
+ -- Sam Hartman <hartmans@debian.org> Sun, 24 Aug 2003 18:03:21 -0400
+
+openafs (1.2.9-3) unstable; urgency=low
+
+ * Add support for kernel headers, thanks to Patrick Sodre,
+ Closes: #173137
+ * Add patch to support the Debian 2.4.21 Kernel sources, thanks to amu,
+ Closes: #198774
+ * Add chronyd to list of programs we assume set the clock, thanks RISKO
+ Gergely, Closes: #201725
+ * Fix template formatting (extra leading spaces), Closes: #198477
+ * New French translations, thanks Christian Perrier, Closes: #198719
+ * Fix PAM problem on hppa, Closes: #179679
+ * Don't translate defaults: Closes: #198384
+ * Fix movefiles error handling and errors exposed by this change. The
+ contents of libopenafs-dev were somewhat wrong because of this.
+ * Make /usr/src/modules root.src 775, Closes: #201733
+
+ -- Sam Hartman <hartmans@debian.org> Sat, 26 Jul 2003 18:03:31 -0400
+
+openafs (1.2.9-2) unstable; urgency=low
+
+ * Fix to not build PAM krb since we don't install it and it breaks alpha, Closes: #189548
+ * Don't install pagsh man page symlink since we no longer link to
+ undocumented, Closes: #189860
+
+ -- Sam Hartman <hartmans@debian.org> Mon, 21 Apr 2003 21:05:51 -0400
+
+openafs (1.2.9-1) unstable; urgency=low
+
+ * Literal newline fixes, Closes: #175627
+ * Require new kernel modules per upstream change.
+ * New upstream version
+ * Fix section of libopenafs-dev to libdevel
+ * openafs-client stop should shut down afsd if it is running even if afs
+ not mounted, Closes: #188000
+ * Fix to build on alpha again; PAM patch was broken
+ * Report i386_linux24 not linux22 on i386, Closes: #187789
+ * Convert to po-debconf, patch from Andre Luis Lopes, CLoses: #187901
+ * Fix from Lamont to build on hppa, Closes: #179679
+
+ -- Sam Hartman <hartmans@debian.org> Sun, 13 Apr 2003 17:21:54 -0400
+
+openafs (1.2.8-4) unstable; urgency=low
+
+ * Fix from Eduard Bloch to compile on kernels with variable numbers of
+ CPUs; he is not sure it actually works yet though, Closes: #178505
+ * Patch that might possibly fix the fails to build on recent unstable;
+ definitely fixes a bug in include path handling, but I am not sure it
+ is a correct patch since I cannot reproduce the problem, Closes: #178154
+
+ -- Sam Hartman <hartmans@debian.org> Sun, 2 Feb 2003 14:08:14 -0500
+
+openafs (1.2.8-3) unstable; urgency=medium
+
+ * Patch from Eduard Bloch <blade@debian.org> to build the PAM module for
+ kaserver users; the main thing this patch does in create a bunch of
+ PIC object files so it is a policy-conformant shared library, Closes:
+ #174668
+ * Do not include -I/usr/include and especially -I/usr/include/sys in the
+ PAM Makefile so gcc 3.2 works; already fixed upstream, Closes: #176538
+
+ -- Sam Hartman <hartmans@debian.org> Sun, 19 Jan 2003 17:44:53 -0500
+
+openafs (1.2.8-2) unstable; urgency=low
+
+ * Convert v5 principal names to v4 style names in rxkad 2b. Especially
+ important for rcmd vs host
+ * Fix debian/rules clean to remove generated files, Closes: #174625
+ * Fix AFS not to declare errno, Closes: #174059
+
+ -- Sam Hartman <hartmans@debian.org> Fri, 3 Jan 2003 15:28:30 -0500
+
+openafs (1.2.8-1) unstable; urgency=low
+
+ * New upstream version
+
+ -- Sam Hartman <hartmans@debian.org> Tue, 10 Dec 2002 23:43:46 -0500
+
+openafs (1.2.7-3) unstable; urgency=low
+
+ * Apparently OpenAFS and ircd conflict on a UDP port, so you can't use
+ both at once, Closes: #150242
+ * Patch from seph to add -nosettime when ntp is installed, Closes: #155123
+ * Fix bosserver shutdown on restart after upgrade, Closes :#155586
+ * Install translate_et, Closes: #138672
+ * Allow byacc instead of bison
+
+ -- Sam Hartman <hartmans@debian.org> Tue, 3 Dec 2002 22:30:44 -0500
+
+openafs (1.2.7-2) unstable; urgency=low
+
+ * Fix uss to build with bison 1.50 and 1.75 so we can throw away the
+ resulting binaries, Closes: #164366
+ * Evaluate all limited range of comparison warnings; a warning in
+ rxkad_client.c remains but is harmless, other warnings pointed to
+ potential problems that were fixed, Closes: #162754
+ * Fix s390 modules to actually build, Closes: #162772
+
+ -- Sam Hartman <hartmans@debian.org> Sun, 20 Oct 2002 15:20:19 -0400
+
+openafs (1.2.7-1) unstable; urgency=low
+
+ * Fix typo in templates, Closes: #150356
+
+ * New upstream version
+
+ -- Sam Hartman <hartmans@debian.org> Thu, 26 Sep 2002 16:11:25 -0400
+
+openafs (1.2.6-1) unstable; urgency=low
+
+
+ * New upstream version
+ * Update CellServDB, Closes: #154893
+ * Add debconf support for fakestat
+ * Patch from Sergio Gelato to avoid use of host, Closes: #144264
+ * Install sys because it was requested
+ * Fix version string, Closes: #153136
+ -- Sam Hartman <hartmans@debian.org> Fri, 2 Aug 2002 17:33:11 -0400
+
+openafs (1.2.5-1) unstable; urgency=low
+
+ * New upstream version.
+
+ -- Sam Hartman <hartmans@debian.org> Mon, 10 Jun 2002 08:09:05 -0400
+
+openafs (1.2.4-1) unstable; urgency=low
+
+ * New upstream version
+ * Now builds for ia64, closes: #142287
+ * Now works again with 2.2 kernels, thanks to upstream fix, closes: #140187
+ * openafs-modules-source depends on kernel-package, Closes: #137169
+ * Fix typo in readme.modules, Closes: #148155
+
+ -- Sam Hartman <hartmans@debian.org> Sun, 2 Jun 2002 17:54:42 -0400
+
+openafs (1.2.3final2-5) unstable; urgency=medium
+
+ * Fix subarch handling, closes: #139662
+ * Update module control files to use net not non-us
+
+ -- Sam Hartman <hartmans@debian.org> Thu, 18 Apr 2002 13:13:16 -0400
+
+openafs (1.2.3final2-4) unstable; urgency=low
+
+ * Move from non-us to main.
+ * Fix ultrasparc 2.4 build to actually work.
+
+ -- Sam Hartman <hartmans@debian.org> Sat, 16 Mar 2002 15:33:33 -0500
+
+openafs (1.2.3final2-3) unstable; urgency=medium
+
+ * Oops, install backup
+
+ -- Sam Hartman <hartmans@debian.org> Thu, 7 Mar 2002 08:12:34 -0500
+
+openafs (1.2.3final2-2) unstable; urgency=low
+
+ * Add dynroot support to debconf; currently no support for creating
+ CellAliases automatically
+ * Don't call depmod since we call update-modules, closes: #132851
+ * Add hppa to debian/sysname, process.c patch from Lamont, closes: #134173
+
+ -- Sam Hartman <hartmans@debian.org> Mon, 25 Feb 2002 15:45:32 -0500
+
+openafs (1.2.3final2-1) unstable; urgency=low
+
+ * Upstream released a new version that they call 1.2.3 after things were
+ tagged in the Debian repository.
+
+ -- Sam Hartman <hartmans@debian.org> Wed, 30 Jan 2002 16:59:04 -0500
+
+openafs (1.2.3final-1) unstable; urgency=low
+
+ * New upstream release
+ * Add support for fs setcrypt in debconf; by default traffic is encrypted.
+
+ -- Sam Hartman <hartmans@debian.org> Wed, 30 Jan 2002 10:46:46 -0500
+
+openafs (1.2.3candidate3-1) unstable; urgency=low
+
+ * New upstream release candidate
+ * Use different version number format; people who installed rc1 will
+ need to upgrade manually. Sorry, but rc1 was never uploaded to Debian.
+ * Support sparc_linux24
+
+ -- Sam Hartman <hartmans@debian.org> Sun, 27 Jan 2002 19:57:04 -0500
+
+openafs (1.2.3.candidate1-1) unstable; urgency=low
+
+ * New upstream release candidate
+ * Add ia64 as a potential architecture
+
+ -- Sam Hartman <hartmans@debian.org> Tue, 22 Jan 2002 19:00:51 -0500
+
+openafs (1.2.2-3) unstable; urgency=low
+
+ * Support s390, closes: #123540
+ * Support update-alternatives for pagsh, closes: #122144
+ * Note that alpha port doesn't work for fileservers, closes: #127387
+ * Implement subarch, closes: #126192
+
+ -- Sam Hartman <hartmans@debian.org> Mon, 7 Jan 2002 05:26:03 -0500
+
+openafs (1.2.2-2) unstable; urgency=low
+
+ * Don't declare lseek in auth/ktc.c; sent upstream
+ * Allow /etc/openafs/server to be mode 700 and /var/lib/openafs to be
+ 755, closes: #120072
+ * Don't try to shut down during afs-newcell until we've done enough
+ that works, closes: #119452
+ * Fix message output on server failed to start, closes: #119461
+ * Fix openafs to deal if /etc/openafs/server/ThisCell has a newline,
+ closes: #118086
+
+ -- Sam Hartman <hartmans@debian.org> Sun, 25 Nov 2001 20:03:01 -0500
+
+openafs (1.2.2-1) unstable; urgency=low
+
+ * New upstream release.
+ * We now require openafs-modules1 and conflict with openafs-modules.
+ Our modules packages now provide openafs-modules1. This is because
+ upstream made a forward and backward incompatible change in the modules
+ interface.
+ * Include buserver in openafs-dbserver, butc and fms in openafs-client.c
+ butc and fms may move, but they are there for now, closes: #114313
+
+ -- Sam Hartman <hartmans@debian.org> Sun, 14 Oct 2001 15:07:10 -0400
+
+openafs (1.2.1-1) unstable; urgency=low
+
+ * New upstream version.
+ * Document that you may need to append a version for newer kernels,
+ closes: #112246
+
+ -- Sam Hartman <hartmans@debian.org> Thu, 20 Sep 2001 03:10:54 -0400
+
+openafs (1.2.0-3) unstable; urgency=high
+
+ * High until we get this into testing.
+ * Fix dependency on ncurses, closes: #112244
+ * Fix typo in German template added in last version, closes: #112289
+
+ -- Sam Hartman <hartmans@debian.org> Fri, 14 Sep 2001 23:40:25 -0400
+
+openafs (1.2.0-2) unstable; urgency=high
+
+ * Fix PPC makefile so that it finds install; this time actually
+ submitted upstream.
+ * Have openafs-modules-source depend on libpam0g-dev because upstream
+ seems to need it. Bug opened upstream asking if this is really necessary.
+ * Include German template, closes: #110087
+
+ -- Sam Hartman <hartmans@debian.org> Thu, 13 Sep 2001 16:58:53 -0400
+
+openafs (1.2.0-1) unstable; urgency=high
+
+ * Fix typo in README.servers; thanks to mdz@debian.org, closes: #109199
+ * Upstream patch for configure-style path handling accepted, closes: #88897
+ * New upstream version.
+ * Update upstream changelog
+
+ -- Sam Hartman <hartmans@debian.org> Tue, 11 Sep 2001 16:21:35 -0400
+
+openafs (1.1.1-3) unstable; urgency=low
+
+ * Oops, that last upstream patch for rx debug and version didn't work on
+ Linux. Since some Debian users may run Linux, let's try again.
+
+ -- Sam Hartman <hartmans@debian.org> Sat, 21 Jul 2001 12:48:00 -0400
+
+openafs (1.1.1-2) unstable; urgency=medium
+
+ * Swallow before vomiting, for it is the Debconf way, closes: #106030
+ * Fix setting of INSTALL macro on powerpc, closes: #106019
+ * Support AFSDB in debconf. By default now (assuming you take the new
+ /etc/openafs/afs.conf), AFS will look up cells it doesn't know
+ about in DNS.
+ * Include upstream patch to prevent potential DOS with two RX servers
+ looping rxdebug and version amongst each other.
+ * Install rxdebug (oops)
+ * Fix lintian overrides to get Lintian to stop complaining about
+ non-problems.
+
+ -- Sam Hartman <hartmans@debian.org> Sat, 21 Jul 2001 08:53:10 -0400
+
+openafs (1.1.1-1) unstable; urgency=low
+
+ * New upstream release to fix readlink sometimes giving permission
+ denied when it shouldn't.
+ * Bring back the upstream changelog, now with change descriptions
+ * Patch to give better error messages when copyonwrite fails in the
+ fileserver (contributed upstream)
+ * New CellServDB
+
+ -- Sam Hartman <hartmans@debian.org> Fri, 20 Jul 2001 08:12:24 -0400
+
+openafs (1.1.0-1) unstable; urgency=low
+
+ * New Upstream release.
+ * Warn if not running as root for afs-newcell|rootvol, closes: #103532
+ * Work around upstream make clean target not working correctly.
+ -- Sam Hartman <hartmans@debian.org> Mon, 16 Jul 2001 06:13:41 -0400
+
+openafs (1.0.90.20010710.snapshot-1) experimental; urgency=low
+
+ * New upstream snapshot
+ * Fix module package to not have build cruft
+ * Use --disable-kernel-module option except for module sources
+ * Attempt to build modules correctly, although still not in right place
+ * Pretend we build for alpha. This is mostly not a fiction, although I
+ don't really know that much more than the kernel module and afsd
+ work. The pointer cast warnings are frightening.
+
+ -- Sam Hartman <hartmans@debian.org> Wed, 11 Jul 2001 11:41:22 -0400
+
+openafs (1.0.90.20010704.snapshot-1) experimental; urgency=low
+
+ * New upstream snapshot. Support AFSDB records and many other
+ features. Not at all stable yet. This is packaged so I and others
+ can try it out.
+
+ -- Sam Hartman <hartmans@debian.org> Thu, 5 Jul 2001 04:04:20 -0400
+
+openafs (1.0.4-3) unstable; urgency=medium
+
+ * Fix patch introduced in -2 to be consistent with what is sent upstream.
+ * openafs-modules-source depends on debhelper
+
+ -- Sam Hartman <hartmans@debian.org> Wed, 4 Jul 2001 03:52:37 -0400
+
+openafs (1.0.4-2) unstable; urgency=low
+
+ * Fix modversions and athlon memcpy mmx bug, closes: #91925
+ * Fix openafs-client to fail rather than starting a useless afsd if we don't have any db servers
+ * If AFS client fails to start for afs-newcell, then complain, closes: #98303
+ * New CellServDB
+ * Fix module builds on non-i386, closes: #100939
+
+ -- Sam Hartman <hartmans@debian.org> Sun, 17 Jun 2001 01:22:37 -0400
+
+openafs (1.0.4-1) unstable; urgency=low
+
+ * New upstream version, closes: #92776
+ * Allow openafs-client to depend on openafs-modules-source not just
+ openafs-modules. This allows us to be installable on testing even
+ without binary modules which may become a necessity given the current
+ kernel image mess.
+ * implement target for modules_clean, closes: #95049
+
+ -- Sam Hartman <hartmans@debian.org> Tue, 24 Apr 2001 14:56:57 -0400
+
+openafs (1.0.3-2) unstable; urgency=low
+
+ * Fix direntry type to be DT_UNKNOWN not DT_DIR on Linux (contributed upstream)
+ * Return ENOTEMPTY not ENOTDIR for rmdir of non-empty directory, closes: #82589
+ * Include build instructions in modules, closes: #92032
+ * Don't grep a file for a potentially null string, closes: #89967
+
+ -- Sam Hartman <hartmans@debian.org> Thu, 29 Mar 2001 22:09:29 -0500
+
+openafs (1.0.3-1) unstable; urgency=low
+
+ * New upstream version
+ * Allow host to be used instead of dnsutils, closes: #87915
+ * Document kernel module build.
+ * Include upstream changelog
+
+ -- Sam Hartman <hartmans@debian.org> Thu, 8 Mar 2001 14:35:57 -0500
+
+openafs (1.0.2-3) unstable; urgency=low
+
+ * Apply patch from Stefan Kluth <skluth@mppmu.mpg.de> for ppc_linux22
+ * Back out architecture change from last version; no good way to
+ actually solve that problem apparently.
+
+
+ -- Sam Hartman <hartmans@debian.org> Sat, 17 Feb 2001 23:45:06 -0500
+
+openafs (1.0.2-2) unstable; urgency=low
+
+ * Provide openafs-ptutil in hope that apt will deal better with upgrade,
+ closes: #84303
+ * Make thiscell default to dnsdomainname so things don't break quite as
+ bad if you don't enter it, closes: #81149
+ * Include source architecture line, Closes: #84530
+ * Rebuild with new debhelper to fix dh_installinit not shutting down on
+ removal (Thanks Joey) (now requires debhelper 2.2.20)
+ * Move CellServDB to /usr/share/openafs so we comply with policy 3.5
+
+ -- Sam Hartman <hartmans@debian.org> Mon, 5 Feb 2001 13:23:51 -0500
+
+openafs (1.0.2-1) unstable; urgency=low
+
+ * Add support for ppc and sparc, closes: #80835
+ * Update maintainer address for modules.
+ * Support for 2.4.0 final (and not just prereleases as before), closes: #82751
+ * New upstream version.
+ * Conflict with openafs-ptutil since it is now included
+ * Fix message in RC script, closes: #82489
+ * Attempt to avoid using pinstall in kernel module build
+
+ -- Sam Hartman <hartmans@debian.org> Fri, 19 Jan 2001 22:38:32 -0500
+
+openafs (1.0.1-3) unstable; urgency=low
+
+ * Add support for Linux Kernel 2.4.x.
+ * Note that administration scripts are released under the GPL.
+
+ -- Sam Hartman <hartmans@debian.org> Mon, 18 Dec 2000 19:06:00 -0500
+
+
+openafs (1.0.1-2) unstable; urgency=medium
+
+ * New maintainer address.
+ * Depend on debhelper 2.1.16 for /usr/share/doc symlinks.
+ * Only run init script once; confusion with DH_OPTIONS
+ * Fix bosserver to look in /usr/openafs/lib so it restarts correctly every Sunday.
+ * Upload to Debian (Gloses: BUG#69336)
+ * Do not generate .map file for module; depmod complains.
+
+ -- Sam Hartman <hartmans@debian.org> Wed, 6 Dec 2000 11:21:53 -0500
+
+openafs (1.0.1-1) unstable; urgency=low
+
+ * New upstream version
+ * Fix typo in openafs-client templates.
+ * Clarify that afs-newcell sets up for afs-rootvol
+
+ -- Sam Hartman <hartmans@mit.edu> Sun, 3 Dec 2000 02:04:50 -0500
+
+openafs (1.0.snap20001106-10) unstable; urgency=low
+
+ * Release (Closes: BUG#69336)
+ * Fix typo and afs-rootvol and test from CLI
+
+ -- Sam Hartman <hartmans@mit.edu> Sat, 2 Dec 2000 00:44:37 -0500
+
+openafs (1.0.snap20001106-9) unstable; urgency=medium
+
+ * Fix openafs-fileserver restart to do a bos restart
+ * Document that AFS key must be single-DES.
+ * afs-rootvol: use the -fast option so we do not hang forever on bad cells or firewalls.
+ * Fix priority on openafs-client rc script to run after server starts.
+
+ -- Sam Hartman <hartmans@mit.edu> Wed, 29 Nov 2000 20:43:59 -0500
+
+openafs (1.0.snap20001106-8) unstable; urgency=low
+
+ * Modules no longer depend on the tlient; client depends on modules.
+ This works better for AFS, even though it is not the way packages like
+ alsa-base work.
+ * Fix several typos in configuration scripts.
+ * Clarify that it starts the client just after debconf.
+
+ -- Sam Hartman <hartmans@mit.edu> Wed, 29 Nov 2000 13:10:43 -0500
+
+openafs (1.0.snap20001106-7) unstable; urgency=low
+
+ * Add command line options to afs-newcell
+ * Fix control.module for real this time.
+ * Add kpasswd and kas to the openafs-kpasswd package.
+ * Add manpage for afs-newcell and many undocumented links.
+ * Remove PAM module from libopenafs-dev.
+ * Instal udebug, pagsh, cmdebug.
+ * Remove execute bit from some includes in /usr/include.
+
+ -- Sam Hartman <hartmans@mit.edu> Mon, 27 Nov 2000 03:02:57 -0500
+
+openafs (1.0.snap20001106-6) unstable; urgency=medium
+
+ * Add config option to disable client on boot
+ * Create rc.d links
+ * Make CellServDB handled by postinst not a conffile. Sadly AFSDB
+ records will be a while in the future.
+ * New script: afs-newcell to configure a dbserver
+ * Use the native Debian install instead of afs install while building;
+ works under fakeroot. Important for modules package.
+ * Fix purge to delete configuration files
+
+ -- Sam Hartman <hartmans@mit.edu> Sat, 25 Nov 2000 01:09:55 -0500
+
+openafs (1.0.snap20001106-5) unstable; urgency=low
+
+ * Make change so kdump builds on potato
+
+ -- Sam Hartman <hartmans@mit.edu> Sun, 19 Nov 2000 19:27:01 -0500
+
+openafs (1.0.snap20001106-4) unstable; urgency=low
+
+ * Fix so dpkg-buildpackage works. Oops.
+
+ -- Sam Hartman <hartmans@mit.edu> Sun, 19 Nov 2000 02:18:05 -0500
+
+openafs (1.0.snap20001106-3) unstable; urgency=low
+
+ * Increase stacksize for server processes so they don't dump core.
+ * New script: afs-rootvol--creates the root.afs and root.cell. Works
+ fairly well except that it is overly verbose and that it has my test
+ cell hardcoded. This script will evolve into part of a new cell
+ config tool.
+
+
+ --
+ * Support removing module for smP
+ * Prune build directories out of modules sources--oops
+ * Fix bogus depends for module sources--note that it really does want
+ bison and flex at least for now.
+
+ -- Sam Hartman <hartmans@mit.edu> Thu, 16 Nov 2000 01:39:48 -0500
+
+openafs (1.0.snap20001106-2) unstable; urgency=low
+
+ * Fix directories for servers to be FHS-reasonable
+ * Fix init.d script to actually work for stop this time--tested and works
+ * Add server packages; fairly useless right now but at least we
+ ship the binaries
+ * Check to make sure home cell exists and warn user if not
+ * Fix purge for openafs-client
+
+ -- Sam Hartman <hartmans@mit.edu> Fri, 10 Nov 2000 23:35:30 -0500
+
+openafs (1.0.snap20001106-1) unstable; urgency=low
+
+ * New Upstream version
+ * Fix init.d script to properly remove openafs.o
+
+ -- Sam Hartman <hartmans@mit.edu> Tue, 7 Nov 2000 13:55:47 -0500
+
+openafs (1.0.snap20001104-1) unstable; urgency=low
+
+ * New upstream snapshot
+ * Fix path to afsd in /etc/init.d/openafs-client
+ * Build openafs module packages
+
+ -- Sam Hartman <hartmans@mit.edu> Mon, 6 Nov 2000 09:39:11 -0500
+
+openafs (1.0.snap20001103-1) unstable; urgency=low
+
+ * Initial Release.
+
+ -- unknown <hartmans@snorklewacker.mit.edu> Fri, 3 Nov 2000 23:41:41 -0500
diff --git a/debian/clean b/debian/clean
new file mode 100644
index 0000000..ac1bb43
--- /dev/null
+++ b/debian/clean
@@ -0,0 +1,12 @@
+.version
+aclocal.m4
+configure
+configure-libafs
+doc/man-pages/man1/*.1
+doc/man-pages/man5/*.5
+doc/man-pages/man8/*.8
+doc/xml/*/Makefile
+doc/xml/*/version.xml
+src/config/Makefile.version-CML
+src/kauth/ka-forwarder
+src/packaging/RedHat/openafs.spec
diff --git a/debian/configuration-transcript.txt b/debian/configuration-transcript.txt
new file mode 100644
index 0000000..1acaeb6
--- /dev/null
+++ b/debian/configuration-transcript.txt
@@ -0,0 +1,561 @@
+This is a transcript of a user following the instructions in
+README.servers. It is best read side-by-side with that documentation
+while you are setting up your cell.
+
+This transcript includes creation of a loopback mount on /vicepa using
+file full of zeros. This is useful to know how to do because it allows
+you to test an AFS server without repartitioning. However, for production
+cells, you should repartition and create a /vicepa partition.
+
+Thanks to Faheem Mitha for the transcript.
+
+##########################################################################
+
+riverside:/home/faheem# apt-get install krb5-admin-server
+...
+The following extra packages will be installed:
+ krb5-config krb5-kdc krb5-user
+The following NEW packages will be installed:
+ krb5-admin-server krb5-config krb5-kdc krb5-user
+0 upgraded, 4 newly installed, 0 to remove and 0 not upgraded.
+Need to get 348kB of archives.
+After unpacking 889kB of additional disk space will be used.
+Do you want to continue? [Y/n]
+...
+Configuring krb5-config
+-----------------------
+
+ When users attempt to use Kerberos and specify a principal or user
+ name without specifying what administrative Kerberos realm that
+ principal belongs to, the system appends the default realm.
+ Normally default realm is the upper case version of the local DNS
+ domain.
+
+What is the default Kerberos version 5 realm? DULCI.BIOSTAT.DUKE.EDU
+
+
+Configuring krb5-kdc
+--------------------
+
+By default, Kerberos4 requests are allowed from principals that do not
+require preauthentication. This allows Kerberos4 services to exist
+while requiring most users to use Kerberos5 clients to get their
+initial tickets. These tickets can then be converted to Kerberos4
+tickets. Alternatively, the mode can be set to full, allowing
+Kerberos4 to get initial tickets even when preauthentication would
+normally be required, or to disable, which will disable all Kerberos4
+support.
+
+ 1. disable 2. full 3. nopreauth 4. none
+
+Kerberos4 compatibility mode to use: 3
+
+Configuring krb5-admin-server
+-----------------------------
+
+Setting up a Kerberos Realm
+
+This package contains the administrative tools necessary to run on the
+Kerberos master server. However, installing this package does not
+automatically set up a Kerberos realm. Doing so requires entering
+passwords and as such is not well-suited for package installation. To
+create the realm, run the krb5_newrealm command. You may also wish to
+read /usr/share/doc/krb5-kdc/README.KDC and the administration guide
+found in the krb5-doc package.
+
+Don't forget to set up DNS information so your clients can find your
+KDC and admin servers. Doing so is documented in the administration
+guide.
+
+Selecting previously deselected package krb5-config.
+(Reading database ... 81199 files and directories currently installed.)
+Unpacking krb5-config (from .../krb5-config_1.6_all.deb) ...
+Selecting previously deselected package krb5-user.
+Unpacking krb5-user (from .../krb5-user_1.3.6-2sarge2_i386.deb) ...
+Selecting previously deselected package krb5-kdc.
+Unpacking krb5-kdc (from .../krb5-kdc_1.3.6-2sarge2_i386.deb) ...
+Selecting previously deselected package krb5-admin-server.
+Unpacking krb5-admin-server (from .../krb5-admin-server_1.3.6-2sarge2_i386.deb) ...
+Setting up krb5-config (1.6) ...
+Configuring krb5-config
+-----------------------
+
+Enter the hostnames of Kerberos servers in the DULCI.BIOSTAT.DUKE.EDU Kerberos realm separated by spaces.
+
+What are the Kerberos servers for your realm? riverside.dulci.biostat.duke.edu
+
+Enter the hostname of the administrative (password changing) server
+for the DULCI.BIOSTAT.DUKE.EDU Kerberos realm.
+
+What is the administrative server for your Kerberos realm? riverside.dulci.biostat.duke.edu
+Setting up krb5-user (1.3.6-2sarge2) ...
+Setting up krb5-kdc (1.3.6-2sarge2) ...
+Setting up krb5-admin-server (1.3.6-2sarge2) ...
+Starting Kerberos Administration Servers: kadmind: No such file or directory while initializing, aborting
+kadmind.
+
+riverside:/home/faheem# krb5_newrealm
+This script should be run on the master KDC/admin server to initialize
+a Kerberos realm. It will ask you to type in a master key password.
+This password will be used to generate a key that is stored in
+/etc/krb5kdc/stash. You should try to remember this password, but it
+is much more important that it be a strong password than that it be
+remembered. However, if you lose the password and /etc/krb5kdc/stash,
+you cannot decrypt your Kerberos database.
+Loading random data
+Initializing database '/var/lib/krb5kdc/principal' for realm 'DULCI.BIOSTAT.DUKE.EDU',
+master key name 'K/M@DULCI.BIOSTAT.DUKE.EDU'
+You will be prompted for the database Master Password.
+It is important that you NOT FORGET this password.
+Enter KDC database master key:
+Re-enter KDC database master key to verify:
+Starting Kerberos KDC: krb5kdc krb524d.
+Starting Kerberos Administration Servers: kadmind.
+
+Now that your realm is set up you may wish to create an administrative
+principal using the addprinc subcommand of the kadmin.local program.
+Then, this principal can be added to /etc/krb5kdc/kadm5.acl so that
+you can use the kadmin program on other computers. Kerberos admin
+principals usually belong to a single user and end in /admin. For
+example, if jruser is a Kerberos administrator, then in addition to
+the normal jruser principal, a jruser/admin principal should be
+created.
+
+Don't forget to set up DNS information so your clients can find your
+KDC and admin servers. Doing so is documented in the administration
+guide.
+riverside:/home/faheem# kadmin.local
+Authenticating as principal root/admin@DULCI.BIOSTAT.DUKE.EDU with password.
+kadmin.local: addprinc faheem/admin
+WARNING: no policy specified for faheem/admin@DULCI.BIOSTAT.DUKE.EDU; defaulting to no policy
+Enter password for principal "faheem/admin@DULCI.BIOSTAT.DUKE.EDU":
+Re-enter password for principal "faheem/admin@DULCI.BIOSTAT.DUKE.EDU":
+Principal "faheem/admin@DULCI.BIOSTAT.DUKE.EDU" created.
+kadmin.local: addprinc faheem
+WARNING: no policy specified for faheem@DULCI.BIOSTAT.DUKE.EDU; defaulting to no policy
+Enter password for principal "faheem@DULCI.BIOSTAT.DUKE.EDU":
+Re-enter password for principal "faheem@DULCI.BIOSTAT.DUKE.EDU":
+Principal "faheem@DULCI.BIOSTAT.DUKE.EDU" created.
+kadmin.local: exit
+riverside:/home/faheem# apt-get install openafs-dbserver openafs-krb5
+...
+The following extra packages will be installed:
+ openafs-client openafs-fileserver
+The following NEW packages will be installed:
+ openafs-client openafs-dbserver openafs-fileserver openafs-krb5
+0 upgraded, 4 newly installed, 0 to remove and 0 not upgraded.
+Need to get 2927kB of archives.
+After unpacking 6898kB of additional disk space will be used.
+Do you want to continue? [Y/n]
+...
+Configuring openafs-client
+--------------------------
+
+AFS filespace is organized into cells or administrative domains. Each
+workstation belongs to one cell. Usually the cell is the DNS domain
+name of the site.
+
+What AFS cell does this workstation belong to? dulci.biostat.duke.edu
+
+AFS uses an area of the disk to cache remote files for faster access.
+This cache will be mounted on /var/cache/openafs. It is important
+that the cache not overfill the partition it is located on. Often,
+people find it useful to dedicate a partition to their AFS cache.
+
+How large is your AFS cache (kB)? 50000
+
+/afs generally contains an entry for each cell that a client can talk
+to. Traditionally, these entries were generated by servers in the
+client's home cell. However, OpenAFS clients can generate the
+contents of /afs dynamically based on the contents of
+/etc/openafs/CellServDB and DNS.
+
+If you generate /afs dynamically, you may need to create
+/etc/openafs/CellAlias to include aliases for common cells. DO NOT
+SELECT THIS OPTION IF THIS MACHINE IS THE FIRST DATABASE SERVER IN A
+NEW CELL .
+
+Dynamically generate the contents of /afs? no
+
+Selecting previously deselected package openafs-client.
+(Reading database ... 81267 files and directories currently installed.)
+Unpacking openafs-client (from .../openafs-client_1.3.81-3sarge1_i386.deb) ...
+Selecting previously deselected package openafs-fileserver.
+Unpacking openafs-fileserver (from .../openafs-fileserver_1.3.81-3sarge1_i386.deb) ...
+Selecting previously deselected package openafs-dbserver.
+Unpacking openafs-dbserver (from .../openafs-dbserver_1.3.81-3sarge1_i386.deb) ...
+Selecting previously deselected package openafs-krb5.
+Unpacking openafs-krb5 (from .../openafs-krb5_1.3-10.1_i386.deb) ...
+Setting up openafs-client (1.3.81-3sarge1) ...
+Configuring openafs-client
+--------------------------
+
+AFS uses the file /etc/openafs/CellServDB to hold the list of servers
+that should be contacted to find parts of a cell. The cell you claim
+this workstation belongs to is not in that file. Enter the host names
+of the database servers separated by spaces. IMPORTANT: If you are
+creating a new cell and this machine is to be a database server in
+that cell, only enter this machine's name; add the other servers later
+after they are functioning. Also, do not enable the AFS client to
+start at boot on this server until the cell is configured. When you
+are ready you can edit /etc/openafs/afs.conf.client to enable the
+client.
+
+What hosts are DB servers for your home cell? riverside.dulci.biostat.duke.edu
+
+Should the Openafs filesystem be started and mounted at boot?
+Normally, most users who install the openafs-client package expect to
+run it at boot. However, if you are planning on setting up a new cell
+or are on a laptop, you may not want it started at boot time. If you
+choose not to start AFS at boot , run service openafs-client
+force-start to start the client when you wish to run it.
+
+Run Openafs client now and at boot? no
+Setting up openafs-fileserver (1.3.81-3sarge1) ...
+Starting AFS Server: bosserver.
+
+Setting up openafs-dbserver (1.3.81-3sarge1) ...
+Setting up openafs-krb5 (1.3-10.1) ...
+riverside:/home/faheem# kadmin.local
+Authenticating as principal root/admin@DULCI.BIOSTAT.DUKE.EDU with password.
+kadmin.local: addprinc -randkey -e des-cbc-crc:v4 afs
+WARNING: no policy specified for afs@DULCI.BIOSTAT.DUKE.EDU; defaulting to no policy
+Principal "afs@DULCI.BIOSTAT.DUKE.EDU" created.
+kadmin.local: ktadd -k /tmp/afs.keytab -e des-cbc-crc:v4 afs
+Entry for principal afs with kvno 3, encryption type DES cbc mode with CRC-32 added to keytab WRFILE:/tmp/afs.keytab.
+kadmin.local: getprinc afs
+Principal: afs@DULCI.BIOSTAT.DUKE.EDU
+Expiration date: [never]
+Last password change: Wed Aug 24 03:09:42 EDT 2005
+Password expiration date: [none]
+Maximum ticket life: 0 days 10:00:00
+Maximum renewable life: 7 days 00:00:00
+Last modified: Wed Aug 24 03:09:42 EDT 2005 (root/admin@DULCI.BIOSTAT.DUKE.EDU)
+Last successful authentication: [never]
+Last failed authentication: [never]
+Failed password attempts: 0
+Number of keys: 1
+Key: vno 3, DES cbc mode with CRC-32, no salt
+Attributes:
+Policy: [none]
+kadmin.local: exit
+riverside:/home/faheem# asetkey add <kvno> /tmp/afs.keytab afs
+riverside:/home/faheem# dd if=/dev/zero of=/var/lib/openafs/vicepa bs=1024k count=32
+32+0 records in
+32+0 records out
+33554432 bytes transferred in 0.093776 seconds (357814258 bytes/sec)
+riverside:/home/faheem# mke2fs /var/lib/openafs/vicepa
+mke2fs 1.37 (21-Mar-2005)
+/var/lib/openafs/vicepa is not a block special device.
+Proceed anyway? (y,n) y
+Filesystem label=
+OS type: Linux
+Block size=1024 (log=0)
+Fragment size=1024 (log=0)
+8192 inodes, 32768 blocks
+1638 blocks (5.00%) reserved for the super user
+First data block=1
+4 block groups
+8192 blocks per group, 8192 fragments per group
+2048 inodes per group
+Superblock backups stored on blocks:
+ 8193, 24577
+
+Writing inode tables: done
+Writing superblocks and filesystem accounting information: done
+
+This filesystem will be automatically checked every 20 mounts or
+180 days, whichever comes first. Use tune2fs -c or -i to override.
+riverside:/home/faheem# mkdir /vicepa
+riverside:/home/faheem# mount -oloop /var/lib/openafs/vicepa /vicepa
+riverside:/home/faheem# afs-newcell
+ Prerequisites
+
+In order to set up a new AFS cell, you must meet the following:
+
+1) You need a working Kerberos realm with Kerberos4 support. You
+ should install Heimdal with Kth-kerberos compatibility or MIT
+ Kerberos5.
+
+2) You need to create the single-DES AFS key and load it into
+ /etc/openafs/server/KeyFile. If your cell's name is the same as
+ your Kerberos realm then create a principal called afs. Otherwise,
+ create a principal called afs/cellname in your realm. The cell
+ name should be all lower case, unlike Kerberos realms which are all
+ upper case. You can use asetkey from the openafs-krb5 package, or
+ if you used AFS3 salt to create the key, the bos addkey command.
+
+3) This machine should have a filesystem mounted on /vicepa. If you
+ do not have a free partition, then create a large file by using dd
+ to extract bytes from /dev/zero. Create a filesystem on this file
+ and mount it using -oloop.
+
+4) You will need an administrative principal created in a Kerberos
+ realm. This principal will be added to susers and
+ system:administrators and thus will be able to run administrative
+ commands. Generally the user is a root or admin instance of some
+ administrative user. For example if jruser is an administrator then
+ it would be reasonable to create jruser/root (or jruser/admin) and
+ specify that as the user to be added in this script.
+
+5) The AFS client must not be running on this workstation. It will be
+ at the end of this script.
+
+Do you meet these requirements? [y/n] y
+If the fileserver is not running, this may hang for 30 seconds.
+service openafs-fileserver stop
+Stopping AFS Server: bos: could not find entry (can't find cell '<default>' in cell database)
+bosserver.
+What administrative principal should be used? faheem/admin
+
+/etc/openafs/server/CellServDB already exists, renaming to .old
+service openafs-fileserver start
+Starting AFS Server: bosserver.
+bos adduser riverside.dulci.biostat.duke.edu faheem.admin -localauth
+pt_util: /var/lib/openafs/db/prdb.DB0: Bad UBIK_MAGIC. Is 0 should be 354545
+Ubik Version is: 2.0
+Error while creating system:administrators: Entry for id already exists
+pt_util: Ubik Version number changed during execution.
+Old Version = 2.0, new version = 33554432.0
+bos create riverside.dulci.biostat.duke.edu ptserver simple /usr/lib/openafs/ptserver -localauth
+bos create riverside.dulci.biostat.duke.edu vlserver simple /usr/lib/openafs/vlserver -localauth
+bos create riverside.dulci.biostat.duke.edu fs fs -cmd /usr/lib/openafs/fileserver -cmd /usr/lib/openafs/volserver -cmd /usr/lib/openafs/salvager -localauth
+Waiting for database elections: done.
+vos create riverside.dulci.biostat.duke.edu a root.afs -localauth
+Volume 536870912 created on partition /vicepa of riverside.dulci.biostat.duke.edu
+service openafs-client force-start
+Starting AFS services: afsd: All AFS daemons started.
+ afsd.
+
+Now, get tokens as faheem/admin in the dulci.biostat.duke.edu cell.
+Then, run afs-rootvol.
+riverside:/home/faheem# bos status localhost -local
+Instance ptserver, currently running normally.
+Instance vlserver, currently running normally.
+Instance fs, currently running normally.
+ Auxiliary status is: file server running.
+riverside:/home/faheem# kinit faheem/admin@DULCI.BIOSTAT.DUKE.EDU
+Password for faheem/admin@DULCI.BIOSTAT.DUKE.EDU:
+riverside:/home/faheem# aklog dulci.biostat.duke.edu -k DULCI.BIOSTAT.DUKE.EDU
+riverside:/home/faheem# tokens
+
+Tokens held by the Cache Manager:
+
+User's (AFS ID 1) tokens for afs@dulci.biostat.duke.edu [Expires Aug 24 13:22]
+ --End of list--
+riverside:/home/faheem# boss status riverside
+Instance ptserver, currently running normally.
+Instance vlserver, currently running normally.
+Instance fs, currently running normally.
+ Auxiliary status is: file server running.
+riverside:/home/faheem# afs-rootvol
+ Prerequisites
+
+In order to set up the root.afs volume, you must meet the following
+pre-conditions:
+
+1) The cell must be configured, running a database server with a
+ volume location and protection server. The afs-newcell script will
+ set up these services.
+
+2) You must be logged into the cell with tokens in for a user in
+ system:administrators and with a principal that is in the UserList
+ file of the servers in the cell.
+
+3) You need a fileserver in the cell with partitions mounted and a
+ root.afs volume created. Presumably, it has no volumes on it,
+ although the script will work so long as nothing besides root.afs
+ exists. The afs-newcell script will set up the file server.
+
+4) The AFS client must be running pointed at the new cell.
+Do you meet these conditions? (y/n) y
+
+You will need to select a server (hostname) and AFS partition on which to
+create the root volumes.
+
+What AFS Server should volumes be placed on? riverside.dulci.biostat.duke.edu
+What partition? [a]
+vos create riverside.dulci.biostat.duke.edu a root.cell -localauth
+Volume 536870915 created on partition /vicepa of riverside.dulci.biostat.duke.edu
+fs sa /afs system:anyuser rl
+fs mkm /afs/dulci.biostat.duke.edu root.cell -cell dulci.biostat.duke.edu -fast || true
+fs mkm /afs/grand.central.org root.cell -cell grand.central.org -fast || true
+fs mkm /afs/wu-wien.ac.at root.cell -cell wu-wien.ac.at -fast || true
+fs mkm /afs/hephy.at root.cell -cell hephy.at -fast || true
+fs mkm /afs/itp.tugraz.at root.cell -cell itp.tugraz.at -fast || true
+fs mkm /afs/cern.ch root.cell -cell cern.ch -fast || true
+fs mkm /afs/ams.cern.ch root.cell -cell ams.cern.ch -fast || true
+fs mkm /afs/ethz.ch root.cell -cell ethz.ch -fast || true
+fs mkm /afs/psi.ch root.cell -cell psi.ch -fast || true
+fs mkm /afs/extundo.com root.cell -cell extundo.com -fast || true
+fs mkm /afs/mekinok.com root.cell -cell mekinok.com -fast || true
+fs mkm /afs/membrain.com root.cell -cell membrain.com -fast || true
+fs mkm /afs/midnightlinux.com root.cell -cell midnightlinux.com -fast || true
+fs mkm /afs/setfilepointer.com root.cell -cell setfilepointer.com -fast || true
+fs mkm /afs/sodre.cx root.cell -cell sodre.cx -fast || true
+fs mkm /afs/desy.de root.cell -cell desy.de -fast || true
+fs mkm /afs/gppc.de root.cell -cell gppc.de -fast || true
+fs mkm /afs/ifh.de root.cell -cell ifh.de -fast || true
+fs mkm /afs/lrz-muenchen.de root.cell -cell lrz-muenchen.de -fast || true
+fs mkm /afs/ipp-garching.mpg.de root.cell -cell ipp-garching.mpg.de -fast || true
+fs mkm /afs/mpe.mpg.de root.cell -cell mpe.mpg.de -fast || true
+fs mkm /afs/i1.informatik.rwth-aachen.de root.cell -cell i1.informatik.rwth-aachen.de -fast || true
+fs mkm /afs/tu-bs.de root.cell -cell tu-bs.de -fast || true
+fs mkm /afs/tu-chemnitz.de root.cell -cell tu-chemnitz.de -fast || true
+fs mkm /afs/e18.ph.tum.de root.cell -cell e18.ph.tum.de -fast || true
+fs mkm /afs/uni-bonn.de root.cell -cell uni-bonn.de -fast || true
+fs mkm /afs/atlass01.physik.uni-bonn.de root.cell -cell atlass01.physik.uni-bonn.de -fast || true
+fs mkm /afs/uni-freiburg.de root.cell -cell uni-freiburg.de -fast || true
+fs mkm /afs/physik.uni-freiburg.de root.cell -cell physik.uni-freiburg.de -fast || true
+fs mkm /afs/urz.uni-heidelberg.de root.cell -cell urz.uni-heidelberg.de -fast || true
+fs mkm /afs/uni-hohenheim.de root.cell -cell uni-hohenheim.de -fast || true
+fs mkm /afs/rz.uni-jena.de root.cell -cell rz.uni-jena.de -fast || true
+fs mkm /afs/meteo.uni-koeln.de root.cell -cell meteo.uni-koeln.de -fast || true
+fs mkm /afs/rrz.uni-koeln.de root.cell -cell rrz.uni-koeln.de -fast || true
+fs mkm /afs/physik.uni-mainz.de root.cell -cell physik.uni-mainz.de -fast || true
+fs mkm /afs/uni-mannheim.de root.cell -cell uni-mannheim.de -fast || true
+fs mkm /afs/physik.uni-wuppertal.de root.cell -cell physik.uni-wuppertal.de -fast || true
+fs mkm /afs/s-et.aau.dk root.cell -cell s-et.aau.dk -fast || true
+fs mkm /afs/ies.auc.dk root.cell -cell ies.auc.dk -fast || true
+fs mkm /afs/asu.edu root.cell -cell asu.edu -fast || true
+fs mkm /afs/hep.caltech.edu root.cell -cell hep.caltech.edu -fast || true
+fs mkm /afs/clarkson.edu root.cell -cell clarkson.edu -fast || true
+fs mkm /afs/andrew.cmu.edu root.cell -cell andrew.cmu.edu -fast || true
+fs mkm /afs/club.cc.cmu.edu root.cell -cell club.cc.cmu.edu -fast || true
+fs mkm /afs/chem.cmu.edu root.cell -cell chem.cmu.edu -fast || true
+fs mkm /afs/cs.cmu.edu root.cell -cell cs.cmu.edu -fast || true
+fs mkm /afs/ece.cmu.edu root.cell -cell ece.cmu.edu -fast || true
+fs mkm /afs/scotch.ece.cmu.edu root.cell -cell scotch.ece.cmu.edu -fast || true
+fs mkm /afs/qatar.cmu.edu root.cell -cell qatar.cmu.edu -fast || true
+fs mkm /afs/sbp.ri.cmu.edu root.cell -cell sbp.ri.cmu.edu -fast || true
+fs mkm /afs/msc.cornell.edu root.cell -cell msc.cornell.edu -fast || true
+fs mkm /afs/dbic.dartmouth.edu root.cell -cell dbic.dartmouth.edu -fast || true
+fs mkm /afs/northstar.dartmouth.edu root.cell -cell northstar.dartmouth.edu -fast || true
+fs mkm /afs/eecs.harvard.edu root.cell -cell eecs.harvard.edu -fast || true
+fs mkm /afs/iastate.edu root.cell -cell iastate.edu -fast || true
+fs mkm /afs/athena.mit.edu root.cell -cell athena.mit.edu -fast || true
+fs mkm /afs/dev.mit.edu root.cell -cell dev.mit.edu -fast || true
+fs mkm /afs/net.mit.edu root.cell -cell net.mit.edu -fast || true
+fs mkm /afs/sipb.mit.edu root.cell -cell sipb.mit.edu -fast || true
+fs mkm /afs/msu.edu root.cell -cell msu.edu -fast || true
+fs mkm /afs/nd.edu root.cell -cell nd.edu -fast || true
+fs mkm /afs/pitt.edu root.cell -cell pitt.edu -fast || true
+fs mkm /afs/cs.pitt.edu root.cell -cell cs.pitt.edu -fast || true
+fs mkm /afs/psc.edu root.cell -cell psc.edu -fast || true
+fs mkm /afs/scoobydoo.psc.edu root.cell -cell scoobydoo.psc.edu -fast || true
+fs mkm /afs/cede.psu.edu root.cell -cell cede.psu.edu -fast || true
+fs mkm /afs/rose-hulman.edu root.cell -cell rose-hulman.edu -fast || true
+fs mkm /afs/cs.rose-hulman.edu root.cell -cell cs.rose-hulman.edu -fast || true
+fs mkm /afs/rpi.edu root.cell -cell rpi.edu -fast || true
+fs mkm /afs/hep.sc.edu root.cell -cell hep.sc.edu -fast || true
+fs mkm /afs/cs.stanford.edu root.cell -cell cs.stanford.edu -fast || true
+fs mkm /afs/ir.stanford.edu root.cell -cell ir.stanford.edu -fast || true
+fs mkm /afs/slac.stanford.edu root.cell -cell slac.stanford.edu -fast || true
+fs mkm /afs/cats.ucsc.edu root.cell -cell cats.ucsc.edu -fast || true
+fs mkm /afs/acm.uiuc.edu root.cell -cell acm.uiuc.edu -fast || true
+fs mkm /afs/ncsa.uiuc.edu root.cell -cell ncsa.uiuc.edu -fast || true
+fs mkm /afs/umbc.edu root.cell -cell umbc.edu -fast || true
+fs mkm /afs/glue.umd.edu root.cell -cell glue.umd.edu -fast || true
+fs mkm /afs/wam.umd.edu root.cell -cell wam.umd.edu -fast || true
+fs mkm /afs/umich.edu root.cell -cell umich.edu -fast || true
+fs mkm /afs/atlas.umich.edu root.cell -cell atlas.umich.edu -fast || true
+fs mkm /afs/citi.umich.edu root.cell -cell citi.umich.edu -fast || true
+fs mkm /afs/lsa.umich.edu root.cell -cell lsa.umich.edu -fast || true
+fs mkm /afs/math.lsa.umich.edu root.cell -cell math.lsa.umich.edu -fast || true
+fs mkm /afs/umr.edu root.cell -cell umr.edu -fast || true
+fs mkm /afs/physics.unc.edu root.cell -cell physics.unc.edu -fast || true
+fs mkm /afs/uncc.edu root.cell -cell uncc.edu -fast || true
+fs mkm /afs/eng.utah.edu root.cell -cell eng.utah.edu -fast || true
+fs mkm /afs/cs.uwm.edu root.cell -cell cs.uwm.edu -fast || true
+fs mkm /afs/cs.wisc.edu root.cell -cell cs.wisc.edu -fast || true
+fs mkm /afs/engr.wisc.edu root.cell -cell engr.wisc.edu -fast || true
+fs mkm /afs/hep.wisc.edu root.cell -cell hep.wisc.edu -fast || true
+fs mkm /afs/physics.wisc.edu root.cell -cell physics.wisc.edu -fast || true
+fs mkm /afs/ifca.unican.es root.cell -cell ifca.unican.es -fast || true
+fs mkm /afs/ific.uv.es root.cell -cell ific.uv.es -fast || true
+fs mkm /afs/biocenter.helsinki.fi root.cell -cell biocenter.helsinki.fi -fast || true
+fs mkm /afs/dapnia.saclay.cea.fr root.cell -cell dapnia.saclay.cea.fr -fast || true
+fs mkm /afs/in2p3.fr root.cell -cell in2p3.fr -fast || true
+fs mkm /afs/anl.gov root.cell -cell anl.gov -fast || true
+fs mkm /afs/rhic.bnl.gov root.cell -cell rhic.bnl.gov -fast || true
+fs mkm /afs/usatlas.bnl.gov root.cell -cell usatlas.bnl.gov -fast || true
+fs mkm /afs/fnal.gov root.cell -cell fnal.gov -fast || true
+fs mkm /afs/ic-afs.arc.nasa.gov root.cell -cell ic-afs.arc.nasa.gov -fast || true
+fs mkm /afs/jpl.nasa.gov root.cell -cell jpl.nasa.gov -fast || true
+fs mkm /afs/nersc.gov root.cell -cell nersc.gov -fast || true
+fs mkm /afs/bme.hu root.cell -cell bme.hu -fast || true
+fs mkm /afs/caspur.it root.cell -cell caspur.it -fast || true
+fs mkm /afs/fusione.it root.cell -cell fusione.it -fast || true
+fs mkm /afs/icemb.it root.cell -cell icemb.it -fast || true
+fs mkm /afs/infn.it root.cell -cell infn.it -fast || true
+fs mkm /afs/kloe.infn.it root.cell -cell kloe.infn.it -fast || true
+fs mkm /afs/le.infn.it root.cell -cell le.infn.it -fast || true
+fs mkm /afs/lnf.infn.it root.cell -cell lnf.infn.it -fast || true
+fs mkm /afs/lngs.infn.it root.cell -cell lngs.infn.it -fast || true
+fs mkm /afs/pi.infn.it root.cell -cell pi.infn.it -fast || true
+fs mkm /afs/psm.it root.cell -cell psm.it -fast || true
+fs mkm /afs/tgrid.it root.cell -cell tgrid.it -fast || true
+fs mkm /afs/ictp.trieste.it root.cell -cell ictp.trieste.it -fast || true
+fs mkm /afs/ing.uniroma1.it root.cell -cell ing.uniroma1.it -fast || true
+fs mkm /afs/vn.uniroma3.it root.cell -cell vn.uniroma3.it -fast || true
+fs mkm /afs/italia root.cell -cell italia -fast || true
+fs mkm /afs/cmf.nrl.navy.mil root.cell -cell cmf.nrl.navy.mil -fast || true
+fs mkm /afs/lcp.nrl.navy.mil root.cell -cell lcp.nrl.navy.mil -fast || true
+fs mkm /afs/es.net root.cell -cell es.net -fast || true
+fs mkm /afs/laroia.net root.cell -cell laroia.net -fast || true
+fs mkm /afs/sinenomine.net root.cell -cell sinenomine.net -fast || true
+fs mkm /afs/slackers.net root.cell -cell slackers.net -fast || true
+fs mkm /afs/nikhef.nl root.cell -cell nikhef.nl -fast || true
+fs mkm /afs/1ts.org root.cell -cell 1ts.org -fast || true
+fs mkm /afs/bazquux.org root.cell -cell bazquux.org -fast || true
+fs mkm /afs/coed.org root.cell -cell coed.org -fast || true
+fs mkm /afs/dementia.org root.cell -cell dementia.org -fast || true
+fs mkm /afs/firelion.org root.cell -cell firelion.org -fast || true
+fs mkm /afs/hackish.org root.cell -cell hackish.org -fast || true
+fs mkm /afs/idahofuturetruck.org root.cell -cell idahofuturetruck.org -fast || true
+fs mkm /afs/nimlabs.org root.cell -cell nimlabs.org -fast || true
+fs mkm /afs/nomh.org root.cell -cell nomh.org -fast || true
+fs mkm /afs/oc7.org root.cell -cell oc7.org -fast || true
+fs mkm /afs/openafs.org root.cell -cell openafs.org -fast || true
+fs mkm /afs/e.kth.se root.cell -cell e.kth.se -fast || true
+fs mkm /afs/hallf.kth.se root.cell -cell hallf.kth.se -fast || true
+fs mkm /afs/isk.kth.se root.cell -cell isk.kth.se -fast || true
+fs mkm /afs/it.kth.se root.cell -cell it.kth.se -fast || true
+fs mkm /afs/md.kth.se root.cell -cell md.kth.se -fast || true
+fs mkm /afs/mech.kth.se root.cell -cell mech.kth.se -fast || true
+fs mkm /afs/nada.kth.se root.cell -cell nada.kth.se -fast || true
+fs mkm /afs/pdc.kth.se root.cell -cell pdc.kth.se -fast || true
+fs mkm /afs/stacken.kth.se root.cell -cell stacken.kth.se -fast || true
+fs mkm /afs/syd.kth.se root.cell -cell syd.kth.se -fast || true
+fs mkm /afs/physto.se root.cell -cell physto.se -fast || true
+fs mkm /afs/sanchin.se root.cell -cell sanchin.se -fast || true
+fs mkm /afs/su.se root.cell -cell su.se -fast || true
+fs mkm /afs/f9.ijs.si root.cell -cell f9.ijs.si -fast || true
+fs mkm /afs/p-ng.si root.cell -cell p-ng.si -fast || true
+fs mkm /afs/phy.bris.ac.uk root.cell -cell phy.bris.ac.uk -fast || true
+fs mkm /afs/hep.man.ac.uk root.cell -cell hep.man.ac.uk -fast || true
+fs mkm /afs/rl.ac.uk root.cell -cell rl.ac.uk -fast || true
+fs sa /afs/dulci.biostat.duke.edu system:anyuser rl
+fs mkm /afs/.dulci.biostat.duke.edu root.cell -cell dulci.biostat.duke.edu -rw
+fs mkm /afs/.root.afs root.afs -rw
+vos create riverside.dulci.biostat.duke.edu a user -localauth
+Volume 536870918 created on partition /vicepa of riverside.dulci.biostat.duke.edu
+fs mkm /afs/dulci.biostat.duke.edu/user user
+fs sa /afs/dulci.biostat.duke.edu/user system:anyuser rl
+vos create riverside.dulci.biostat.duke.edu a service -localauth
+Volume 536870921 created on partition /vicepa of riverside.dulci.biostat.duke.edu
+fs mkm /afs/dulci.biostat.duke.edu/service service
+fs sa /afs/dulci.biostat.duke.edu/service system:anyuser rl
+ln -s dulci.biostat.duke.edu /afs/dulci
+ln -s .dulci.biostat.duke.edu /afs/.dulci
+vos addsite riverside.dulci.biostat.duke.edu a root.afs -localauth
+Added replication site riverside.dulci.biostat.duke.edu /vicepa for volume root.afs
+vos addsite riverside.dulci.biostat.duke.edu a root.cell -localauth
+Added replication site riverside.dulci.biostat.duke.edu /vicepa for volume root.cell
+vos release root.afs -localauth
+Released volume root.afs successfully
+vos release root.cell -localauth
+Released volume root.cell successfully
+riverside:/home/faheem# cd /afs/dulci.biostat.duke.edu/
+riverside:/afs/dulci.biostat.duke.edu# ls
+service user
diff --git a/debian/control b/debian/control
new file mode 100644
index 0000000..9c8077a
--- /dev/null
+++ b/debian/control
@@ -0,0 +1,186 @@
+Source: openafs
+Section: net
+Priority: optional
+Maintainer: Benjamin Kaduk <kaduk@mit.edu>
+Uploaders: Sam Hartman <hartmans@debian.org>, Anders Kaseorg <andersk@mit.edu>
+Build-Depends: debhelper, debhelper-compat (= 12), autoconf, automake, bison,
+ comerr-dev, cpio, flex, libfuse-dev, libkrb5-dev, libncurses5-dev,
+ libpam0g-dev, libxml2-utils, perl, pkg-config,
+ libtool, heimdal-multidev (>= 1.7~git20150920)
+Build-Depends-Indep: dblatex, dkms (>= 2.1.1.1), docbook-xsl, doxygen (>= 1.8.4-1~),
+ xsltproc
+Standards-Version: 4.6.0
+Homepage: http://www.openafs.org/
+Vcs-Git: https://salsa.debian.org/debian/openafs.git
+Vcs-Browser: https://salsa.debian.org/debian/openafs
+
+Package: openafs-client
+Architecture: alpha amd64 arm arm64 armel armhf i386 ia64 powerpc powerpcspe ppc64 ppc64el s390 s390x sparc
+Depends: ${shlibs:Depends}, ${misc:Depends}, lsb-base (>= 3.0-6)
+Pre-Depends: ${misc:Pre-Depends}
+Recommends: lsof, openafs-modules-dkms (>= ${source:Version})
+ | openafs-modules-source (>= ${source:Version})
+ | openafs-modules3
+Suggests: openafs-doc, openafs-krb5
+Conflicts: arla
+Breaks: openafs-modules1, openafs-modules2
+Description: AFS distributed filesystem client support
+ AFS is a distributed filesystem allowing cross-platform sharing of
+ files among multiple computers. Facilities are provided for access
+ control, authentication, backup and administrative management.
+ .
+ This package provides basic client support to mount and manipulate
+ AFS. If your site uses Kerberos v5 authentication for AFS, you will also
+ want to install openafs-krb5.
+
+Package: openafs-fuse
+Architecture: alpha amd64 arm arm64 armel armhf i386 ia64 powerpc ppc64 ppc64el s390 s390x sparc
+Depends: ${shlibs:Depends}, ${misc:Depends},
+ openafs-client (= ${binary:Version})
+Description: AFS distributed file system experimental FUSE client
+ AFS is a distributed filesystem allowing cross-platform sharing of
+ files among multiple computers. Facilities are provided for access
+ control, authentication, backup and administrative management.
+ .
+ This package provides an experimental FUSE implementation of the AFS
+ client as afsd.fuse. This currently only provides read-only access to
+ AFS, doesn't work with all of the normal AFS client programs, and must be
+ started manually, but may be of interest in situations where read-only
+ access is sufficient and the kernel module cannot be built.
+
+Package: openafs-fileserver
+Architecture: alpha amd64 arm arm64 armel armhf i386 ia64 powerpc powerpcspe ppc64 ppc64el s390 s390x sparc
+Depends: ${shlibs:Depends}, ${misc:Depends}, lsb-base (>= 3.0-6), openafs-client,
+ openafs-krb5 (>= 1.8.0~pre1-1)
+Pre-Depends: ${misc:Pre-Depends}
+Recommends: ntp | time-daemon
+Suggests: openafs-doc
+Description: AFS distributed filesystem file server
+ AFS is a distributed filesystem allowing cross-platform sharing of
+ files among multiple computers. Facilities are provided for access
+ control, authentication, backup and administrative management.
+ .
+ This package provides the AFS fileserver binaries. It should be
+ installed on any machine that will export files into AFS.
+
+Package: openafs-dbserver
+Architecture: alpha amd64 arm arm64 armel armhf i386 ia64 powerpc powerpcspe ppc64 ppc64el s390 s390x sparc
+Depends: ${shlibs:Depends}, ${perl:Depends}, ${misc:Depends},
+ openafs-fileserver
+Recommends: openafs-client
+Suggests: openafs-doc
+Description: AFS distributed filesystem database server
+ AFS is a distributed filesystem allowing cross-platform sharing of
+ files among multiple computers. Facilities are provided for access
+ control, authentication, backup and administrative management.
+ .
+ This package provides AFS database server binaries. It should be
+ installed on the servers that will act as volume location and
+ protection servers.
+
+Package: openafs-doc
+Section: doc
+Architecture: all
+Multi-Arch: foreign
+Depends: ${misc:Depends}
+Description: AFS distributed filesystem documentation
+ AFS is a distributed filesystem allowing cross-platform sharing of files
+ among multiple computers. Facilities are provided for access control,
+ authentication, backup and administrative management.
+ .
+ This package contains the OpenAFS user's and reference manuals, some
+ protocol documentation, and other OpenAFS documentation.
+
+Package: openafs-krb5
+Architecture: alpha amd64 arm arm64 armel armhf i386 ia64 powerpc powerpcspe ppc64 ppc64el s390 s390x sparc
+Depends: ${shlibs:Depends}, ${misc:Depends}
+Breaks: openafs-client (<< 1.4.7.dfsg1-1)
+Description: AFS distributed filesystem Kerberos 5 integration
+ AFS is a distributed filesystem allowing cross-platform sharing of files
+ among multiple computers. Facilities are provided for access control,
+ authentication, backup and administrative management.
+ .
+ This package provides aklog, a utility for authenticating to AFS using
+ Kerberos 5. It also provides asetkey, a utility to set AFS server keys
+ from a Kerberos keytab, and ka-forwarder, a utility to forward kaserver
+ requests to a KDC using fakeka.
+
+Package: libkopenafs2
+Section: libs
+Architecture: alpha amd64 arm arm64 armel armhf i386 ia64 powerpc ppc64 ppc64el s390 s390x sparc
+Depends: ${shlibs:Depends}, ${misc:Depends}
+Description: AFS distributed file system runtime library (PAGs)
+ AFS is a distributed filesystem allowing cross-platform sharing of
+ files among multiple computers. Facilities are provided for access
+ control, authentication, backup and administrative management.
+ .
+ This package provides the shared library implementing an interface to
+ manipulating AFS process authentication groups (PAGs). It provides the
+ a subset of the interface provided by the Heimdal libkafs library.
+
+Package: libafsauthent2
+Section: libs
+Architecture: alpha amd64 arm arm64 armel armhf i386 ia64 powerpc ppc64 ppc64el s390 s390x sparc
+Depends: ${shlibs:Depends}, ${misc:Depends}
+Description: AFS distributed file system runtime library (authentication)
+ AFS is a distributed filesystem allowing cross-platform sharing of
+ files among multiple computers. Facilities are provided for access
+ control, authentication, backup and administrative management.
+ .
+ This package provides the shared library implementing AFS client
+ authentication and token management.
+
+Package: libafsrpc2
+Section: libs
+Architecture: alpha amd64 arm arm64 armel armhf i386 ia64 powerpc ppc64 ppc64el s390 s390x sparc
+Depends: ${shlibs:Depends}, ${misc:Depends}
+Description: AFS distributed file system runtime library (RPC layer)
+ AFS is a distributed filesystem allowing cross-platform sharing of
+ files among multiple computers. Facilities are provided for access
+ control, authentication, backup and administrative management.
+ .
+ This package provides the shared library implementing the Rx protocol and
+ other AFS RPC functionality.
+
+Package: libopenafs-dev
+Section: libdevel
+Architecture: alpha amd64 arm arm64 armel armhf i386 ia64 powerpc powerpcspe ppc64 ppc64el s390 s390x sparc
+Depends: ${shlibs:Depends}, ${misc:Depends},
+ libafsauthent2 (= ${binary:Version}), libafsrpc2 (= ${binary:Version}),
+ libkopenafs2 (= ${binary:Version}),
+Suggests: openafs-doc
+Conflicts: arla-dev, liblwp-dev
+Description: AFS distributed filesystem development libraries
+ AFS is a distributed filesystem allowing cross-platform sharing of
+ files among multiple computers. Facilities are provided for access
+ control, authentication, backup and administrative management.
+ .
+ This package provides static development libraries and headers
+ needed to compile AFS applications.
+
+Package: openafs-modules-source
+Section: kernel
+Architecture: all
+Depends: ${misc:Depends}, debhelper (>= 8),
+ module-assistant | kernel-package, perl
+Recommends: openafs-client (>= ${source:Version})
+Description: AFS distributed filesystem kernel module source
+ AFS is a distributed filesystem allowing cross-platform sharing of
+ files among multiple computers. Facilities are provided for access
+ control, authentication, backup and administrative management.
+ .
+ This package provides the source to the AFS kernel module in a form
+ suitable for use by module-assistant or kernel-package.
+
+Package: openafs-modules-dkms
+Section: kernel
+Architecture: all
+Depends: ${misc:Depends}, ${perl:Depends}, dkms, libc6-dev
+Recommends: openafs-client (>= ${source:Version})
+Description: AFS distributed filesystem kernel module DKMS source
+ AFS is a distributed filesystem allowing cross-platform sharing of
+ files among multiple computers. Facilities are provided for access
+ control, authentication, backup and administrative management.
+ .
+ This package contains the source for the AFS kernel module, packaged with
+ appropriate configuration for DKMS to build new modules dynamically.
diff --git a/debian/copyright b/debian/copyright
new file mode 100644
index 0000000..4902312
--- /dev/null
+++ b/debian/copyright
@@ -0,0 +1,516 @@
+This package was debianized by Sam Hartman <hartmans@debian.org> on
+Fri, 3 Nov 2000 23:41:41 -0500.
+
+It was downloaded via Git from:
+
+ git://git.openafs.org/openafs.git
+
+Upstream Maintainers:
+
+ openafs-gatekeepers@openafs.org
+
+The upstream source is generated from a Git tag for the corresponding
+upstream release, but with the WINNT directory removed to reduces the size
+of the upstream tarball by about 8MB.
+
+The source package contains the OpenAFS documentation as distributed by
+the OpenAFS project, some of which does not include the original source.
+These documents were originally created using TeX internally by Transarc,
+the original authors of AFS. By the time that AFS was released as free
+software by IBM after acquiring Transarc, the original source could no
+longer be found. It has apparently been lost over the years.
+
+Although these HTML and PDF files would not normally be considered source,
+they're all that's available until they can be rewritten and updated in
+some better format. They have been released under the IBM Public License
+Version 1.0 (included below), the same license as the rest of OpenAFS.
+
+Normally, this documentation could not be included in Debian without being
+accompanied by the original TeX source and build tools under DFSG#2, but
+under the circumstances, these files essentially are the source, as
+they're all that anyone has.
+
+These documents are being replaced by revised versions in DocBook and
+Doxygen, with suitable source, and once that process is complete, the old
+sourceless HTML and PDF documents will be removed. The documentation
+installed in the openafs-doc package already includes only material built
+from the new maintainable source.
+
+Copyright:
+
+ Copyright 2000, International Business Machines Corporation and others.
+ All Rights Reserved.
+
+ IBM Public License Version 1.0
+
+ THE ACCOMPANYING PROGRAM IS PROVIDED UNDER THE TERMS OF THIS IBM
+ PUBLIC LICENSE ("AGREEMENT"). ANY USE, REPRODUCTION OR DISTRIBUTION OF
+ THE PROGRAM CONSTITUTES RECIPIENT'S ACCEPTANCE OF THIS AGREEMENT.
+
+ 1. DEFINITIONS
+
+ "Contribution" means:
+ a) in the case of International Business Machines Corporation ("IBM"),
+ the Original Program, and
+
+ b) in the case of each Contributor,
+
+ i) changes to the Program, and
+
+ ii) additions to the Program;
+
+ where such changes and/or additions to the Program originate from and
+ are distributed by that particular Contributor. A Contribution
+ 'originates' from a Contributor if it was added to the Program by
+ such Contributor itself or anyone acting on such Contributor's
+ behalf. Contributions do not include additions to the Program
+ which: (i) are separate modules of software distributed in
+ conjunction with the Program under their own license agreement,
+ and (ii) are not derivative works of the Program.
+
+ "Contributor" means IBM and any other entity that distributes the
+ Program.
+
+ "Licensed Patents " mean patent claims licensable by a Contributor
+ which are necessarily infringed by the use or sale of its Contribution
+ alone or when combined with the Program.
+
+ "Original Program" means the original version of the software
+ accompanying this Agreement as released by IBM, including source code,
+ object code and documentation, if any.
+
+ "Program" means the Original Program and Contributions.
+
+ "Recipient" means anyone who receives the Program under this
+ Agreement, including all Contributors.
+
+ 2. GRANT OF RIGHTS
+ a) Subject to the terms of this Agreement, each Contributor hereby
+ grants Recipient a non-exclusive, worldwide, royalty-free
+ copyright license to reproduce, prepare derivative works of,
+ publicly display, publicly perform, distribute and sublicense the
+ Contribution of such Contributor, if any, and such derivative
+ works, in source code and object code form.
+
+ b) Subject to the terms of this Agreement, each Contributor hereby
+ grants Recipient a non-exclusive, worldwide, royalty-free patent
+ license under Licensed Patents to make, use, sell, offer to sell,
+ import and otherwise transfer the Contribution of such
+ Contributor, if any, in source code and object code form. This
+ patent license shall apply to the combination of the Contribution
+ and the Program if, at the time the Contribution is added by the
+ Contributor, such addition of the Contribution causes such
+ combination to be covered by the Licensed Patents. The patent
+ license shall not apply to any other combinations which include
+ the Contribution. No hardware per se is licensed hereunder.
+
+ c) Recipient understands that although each Contributor grants the
+ licenses to its Contributions set forth herein, no assurances are
+ provided by any Contributor that the Program does not infringe the
+ patent or other intellectual property rights of any other entity.
+ Each Contributor disclaims any liability to Recipient for claims
+ brought by any other entity based on infringement of intellectual
+ property rights or otherwise. As a condition to exercising the
+ rights and licenses granted hereunder, each Recipient hereby
+ assumes sole responsibility to secure any other intellectual
+ property rights needed, if any. For example, if a third party
+ patent license is required to allow Recipient to distribute the
+ Program, it is Recipient's responsibility to acquire that license
+ before distributing the Program.
+
+ d) Each Contributor represents that to its knowledge it has sufficient
+ copyright rights in its Contribution, if any, to grant the
+ copyright license set forth in this Agreement.
+
+ 3. REQUIREMENTS
+
+ A Contributor may choose to distribute the Program in object code form
+ under its own license agreement, provided that:
+ a) it complies with the terms and conditions of this Agreement; and
+
+ b) its license agreement:
+
+ i) effectively disclaims on behalf of all Contributors all warranties
+ and conditions, express and implied, including warranties or
+ conditions of title and non-infringement, and implied warranties
+ or conditions of merchantability and fitness for a particular
+ purpose;
+
+ ii) effectively excludes on behalf of all Contributors all liability
+ for damages, including direct, indirect, special, incidental and
+ consequential damages, such as lost profits;
+
+ iii) states that any provisions which differ from this Agreement are
+ offered by that Contributor alone and not by any other party; and
+
+ iv) states that source code for the Program is available from such
+ Contributor, and informs licensees how to obtain it in a
+ reasonable manner on or through a medium customarily used for
+ software exchange.
+
+ When the Program is made available in source code form:
+ a) it must be made available under this Agreement; and
+
+ b) a copy of this Agreement must be included with each copy of the
+ Program.
+
+ Each Contributor must include the following in a conspicuous location
+ in the Program:
+
+ Copyright © {date here}, International Business Machines Corporation
+ and others. All Rights Reserved.
+
+ In addition, each Contributor must identify itself as the originator
+ of its Contribution, if any, in a manner that reasonably allows
+ subsequent Recipients to identify the originator of the Contribution.
+
+ 4. COMMERCIAL DISTRIBUTION
+
+ Commercial distributors of software may accept certain
+ responsibilities with respect to end users, business partners and the
+ like. While this license is intended to facilitate the commercial use
+ of the Program, the Contributor who includes the Program in a
+ commercial product offering should do so in a manner which does not
+ create potential liability for other Contributors. Therefore, if a
+ Contributor includes the Program in a commercial product offering,
+ such Contributor ("Commercial Contributor") hereby agrees to defend
+ and indemnify every other Contributor ("Indemnified Contributor")
+ against any losses, damages and costs (collectively "Losses") arising
+ from claims, lawsuits and other legal actions brought by a third party
+ against the Indemnified Contributor to the extent caused by the acts
+ or omissions of such Commercial Contributor in connection with its
+ distribution of the Program in a commercial product offering. The
+ obligations in this section do not apply to any claims or Losses
+ relating to any actual or alleged intellectual property infringement.
+ In order to qualify, an Indemnified Contributor must: a) promptly
+ notify the Commercial Contributor in writing of such claim, and b)
+ allow the Commercial Contributor to control, and cooperate with the
+ Commercial Contributor in, the defense and any related settlement
+ negotiations. The Indemnified Contributor may participate in any such
+ claim at its own expense.
+
+ For example, a Contributor might include the Program in a commercial
+ product offering, Product X. That Contributor is then a Commercial
+ Contributor. If that Commercial Contributor then makes performance
+ claims, or offers warranties related to Product X, those performance
+ claims and warranties are such Commercial Contributor's responsibility
+ alone. Under this section, the Commercial Contributor would have to
+ defend claims against the other Contributors related to those
+ performance claims and warranties, and if a court requires any other
+ Contributor to pay any damages as a result, the Commercial Contributor
+ must pay those damages.
+
+ 5. NO WARRANTY
+
+ EXCEPT AS EXPRESSLY SET FORTH IN THIS AGREEMENT, THE PROGRAM IS
+ PROVIDED ON AN "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ KIND, EITHER EXPRESS OR IMPLIED INCLUDING, WITHOUT LIMITATION, ANY
+ WARRANTIES OR CONDITIONS OF TITLE, NON-INFRINGEMENT, MERCHANTABILITY
+ OR FITNESS FOR A PARTICULAR PURPOSE. Each Recipient is solely
+ responsible for determining the appropriateness of using and
+ distributing the Program and assumes all risks associated with its
+ exercise of rights under this Agreement, including but not limited to
+ the risks and costs of program errors, compliance with applicable
+ laws, damage to or loss of data, programs or equipment, and
+ unavailability or interruption of operations.
+
+ 6. DISCLAIMER OF LIABILITY
+
+ EXCEPT AS EXPRESSLY SET FORTH IN THIS AGREEMENT, NEITHER RECIPIENT NOR
+ ANY CONTRIBUTORS SHALL HAVE ANY LIABILITY FOR ANY DIRECT, INDIRECT,
+ INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING
+ WITHOUT LIMITATION LOST PROFITS), HOWEVER CAUSED AND ON ANY THEORY OF
+ LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
+ NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OR
+ DISTRIBUTION OF THE PROGRAM OR THE EXERCISE OF ANY RIGHTS GRANTED
+ HEREUNDER, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
+
+ 7. GENERAL
+
+ If any provision of this Agreement is invalid or unenforceable under
+ applicable law, it shall not affect the validity or enforceability of
+ the remainder of the terms of this Agreement, and without further
+ action by the parties hereto, such provision shall be reformed to the
+ minimum extent necessary to make such provision valid and enforceable.
+
+ If Recipient institutes patent litigation against a Contributor with
+ respect to a patent applicable to software (including a cross-claim or
+ counterclaim in a lawsuit), then any patent licenses granted by that
+ Contributor to such Recipient under this Agreement shall terminate as
+ of the date such litigation is filed. In addition, If Recipient
+ institutes patent litigation against any entity (including a
+ cross-claim or counterclaim in a lawsuit) alleging that the Program
+ itself (excluding combinations of the Program with other software or
+ hardware) infringes such Recipient's patent(s), then such Recipient's
+ rights granted under Section 2(b) shall terminate as of the date such
+ litigation is filed.
+
+ All Recipient's rights under this Agreement shall terminate if it
+ fails to comply with any of the material terms or conditions of this
+ Agreement and does not cure such failure in a reasonable period of
+ time after becoming aware of such noncompliance. If all Recipient's
+ rights under this Agreement terminate, Recipient agrees to cease use
+ and distribution of the Program as soon as reasonably practicable.
+ However, Recipient's obligations under this Agreement and any licenses
+ granted by Recipient relating to the Program shall continue and
+ survive.
+
+ IBM may publish new versions (including revisions) of this Agreement
+ from time to time. Each new version of the Agreement will be given a
+ distinguishing version number. The Program (including Contributions)
+ may always be distributed subject to the version of the Agreement
+ under which it was received. In addition, after a new version of the
+ Agreement is published, Contributor may elect to distribute the
+ Program (including its Contributions) under the new version. No one
+ other than IBM has the right to modify this Agreement. Except as
+ expressly stated in Sections 2(a) and 2(b) above, Recipient receives
+ no rights or licenses to the intellectual property of any Contributor
+ under this Agreement, whether expressly, by implication, estoppel or
+ otherwise. All rights in the Program not expressly granted under this
+ Agreement are reserved.
+
+ This Agreement is governed by the laws of the State of New York and
+ the intellectual property laws of the United States of America. No
+ party to this Agreement will bring a legal action under this Agreement
+ more than one year after the cause of action arose. Each party waives
+ its rights to a jury trial in any resulting litigation.
+
+Kerberos 5 ticket support in rxkad is subject to the following copyright:
+/*
+ * Copyright (c) 1995, 1996, 1997, 2002 Kungliga Tekniska Högskolan
+ * (Royal Institute of Technology, Stockholm, Sweden).
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright
+ * notice, this list of conditions and the following disclaimer.
+ *
+ * 2. Redistributions in binary form must reproduce the above copyright
+ * notice, this list of conditions and the following disclaimer in the
+ * documentation and/or other materials provided with the distribution.
+ *
+ * 3. Neither the name of the Institute nor the names of its contributors
+ * may be used to endorse or promote products derived from this software
+ * without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ */
+
+Some code in rxkad/ticket5.c is subject to the following copyright:
+/*
+ * Copyright 1992, 2002 by the Massachusetts Institute of Technology.
+ * All Rights Reserved.
+ *
+ * Export of this software from the United States of America may
+ * require a specific license from the United States Government.
+ * It is the responsibility of any person or organization contemplating
+ * export to obtain such a license before exporting.
+ *
+ * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
+ * distribute this software and its documentation for any purpose and
+ * without fee is hereby granted, provided that the above copyright
+ * notice appear in all copies and that both that copyright notice and
+ * this permission notice appear in supporting documentation, and that
+ * the name of M.I.T. not be used in advertising or publicity pertaining
+ * to distribution of the software without specific, written prior
+ * permission. Furthermore if you modify this software you must label
+ * your software as modified software and not distribute it in such a
+ * fashion that it might be confused with the original M.I.T. software.
+ * M.I.T. makes no representations about the suitability of
+ * this software for any purpose. It is provided "as is" without express
+ * or implied warranty.
+ */
+
+Some portions of Rx are subject to the following license:
+/*
+ * Sun RPC is a product of Sun Microsystems, Inc. and is provided for
+ * unrestricted use provided that this legend is included on all tape
+ * media and as a part of the software program in whole or part. Users
+ * may copy or modify Sun RPC without charge, but are not authorized
+ * to license or distribute it to anyone else except as part of a product or
+ * program developed by the user or with the express written consent of
+ * Sun Microsystems, Inc.
+ *
+ * SUN RPC IS PROVIDED AS IS WITH NO WARRANTIES OF ANY KIND INCLUDING THE
+ * WARRANTIES OF DESIGN, MERCHANTIBILITY AND FITNESS FOR A PARTICULAR
+ * PURPOSE, OR ARISING FROM A COURSE OF DEALING, USAGE OR TRADE PRACTICE.
+ *
+ * Sun RPC is provided with no support and without any obligation on the
+ * part of Sun Microsystems, Inc. to assist in its use, correction,
+ * modification or enhancement.
+ *
+ * SUN MICROSYSTEMS, INC. SHALL HAVE NO LIABILITY WITH RESPECT TO THE
+ * INFRINGEMENT OF COPYRIGHTS, TRADE SECRETS OR ANY PATENTS BY SUN RPC
+ * OR ANY PART THEREOF.
+ *
+ * In no event will Sun Microsystems, Inc. be liable for any lost revenue
+ * or profits or other special, indirect and consequential damages, even if
+ * Sun has been advised of the possibility of such damages.
+ *
+ * Sun Microsystems, Inc.
+ * 2550 Garcia Avenue
+ * Mountain View, California 94043
+ */
+
+ka-forwarder was taken from the AFS/Kerberos 5 Migration Kit, to which it
+was donated by Jeffrey T. Hutzelman. It is covered under the following
+license:
+/*
+ * Copyright (c) 1993 Carnegie Mellon University
+ * All Rights Reserved.
+ *
+ * Permission to use, copy, modify and distribute this software and its
+ * documentation is hereby granted, provided that both the copyright
+ * notice and this permission notice appear in all copies of the
+ * software, derivative works or modified versions, and any portions
+ * thereof, and that both notices appear in supporting documentation.
+ *
+ * CARNEGIE MELLON ALLOWS FREE USE OF THIS SOFTWARE IN ITS "AS IS"
+ * CONDITION. CARNEGIE MELLON DISCLAIMS ANY LIABILITY OF ANY KIND FOR
+ * ANY DAMAGES WHATSOEVER RESULTING FROM THE USE OF THIS SOFTWARE.
+ *
+ * Carnegie Mellon requests users of this software to return to
+ *
+ * Software Distribution Coordinator or Software_Distribution@CS.CMU.EDU
+ * School of Computer Science
+ * Carnegie Mellon University
+ * Pittsburgh PA 15213-3890
+ *
+ * any improvements or extensions that they make and grant Carnegie Mellon
+ * the rights to redistribute these changes.
+ */
+
+src/afs/LINUX/osi_flush.s included code under IBM Public License with
+permission of the author, Paul MacKerras.
+
+Personal contributions made by Jason Edgecombe
+<jason@rampaginggeek.com> that refer to the "BSD license" are subject
+to the following license:
+
+ All rights reserved.
+
+ Redistribution and use in source and binary forms, with or without
+ modification, are permitted provided that the following conditions are
+ met:
+
+ * Redistributions of source code must retain the above
+ copyright notice, this list of conditions and the following
+ disclaimer.
+
+ * Redistributions in binary form must reproduce the above
+ copyright notice, this list of conditions and the following
+ disclaimer in the documentation and/or other materials
+ provided with the distribution.
+
+ * Neither the name of OpenAFS nor the names of its
+ contributors may be used to endorse or promote products
+ derived from this software without specific prior written
+ permission.
+
+ THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
+ IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
+ TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
+ PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+ OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+ SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+ LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+ DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+ THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+ (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+ OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+doc/protocol/rfc5864.txt is dual-licensed under the following two licenses:
+ Copyright 2009, 2010 Russ Allbery <rra@stanford.edu>
+ Copyright 2010 IETF Trust
+
+ Permission to use, copy, modify, and distribute this document for any
+ purpose and without fee is hereby granted, provided that the above
+ copyright notice appear in all copies and that both that copyright
+ notice and this permission notice appear in supporting documentation,
+ and that the name of its authors not be used in advertising or
+ publicity pertaining to distribution of this document without specific,
+ written prior permission. Its authors make no representations about
+ the suitability of this document for any purpose. It is provided "as
+ is" without express or implied warranty.
+
+ THIS DOCUMENT IS PROVIDED "AS IS" AND WITHOUT ANY EXPRESS OR IMPLIED
+ WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
+ MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
+and
+ Copyright (c) 2010 IETF Trust and the persons identified as the
+ document authors. All rights reserved.
+
+ This document is subject to BCP 78 and the IETF Trust's Legal
+ Provisions Relating to IETF Documents
+ (http://trustee.ietf.org/license-info) in effect on the date of
+ publication of this document. Please review these documents
+ carefully, as they describe your rights and restrictions with respect
+ to this document. Code Components extracted from this document must
+ include Simplified BSD License text as described in Section 4.e of
+ the Trust Legal Provisions and are provided without warranty as
+ described in the Simplified BSD License.
+
+Some portions contributed by Benjamin Kaduk have the following license:
+ Copyright (C) 2015 by Benjamin Kaduk
+ All rights reserved.
+
+ Redistribution and use in source and binary forms, with or without
+ modification, are permitted provided that the following conditions
+ are met:
+
+ * Redistributions of source code must retain the above copyright
+ notice, this list of conditions and the following disclaimer.
+
+ * Redistributions in binary form must reproduce the above copyright
+ notice, this list of conditions and the following disclaimer in
+ the documentation and/or other materials provided with the
+ distribution.
+
+ THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ OF THE POSSIBILITY OF SUCH DAMAGE.
+
+tests/common/misc.c is subject to the following license:
+ Copyright (c) 2019 Sine Nomine Associates. All rights reserved.
+
+ Redistribution and use in source and binary forms, with or without
+ modification, are permitted provided that the following conditions
+ are met:
+ 1. Redistributions of source code must retain the above copyright
+ notice, this list of conditions and the following disclaimer.
+ 2. Redistributions in binary form must reproduce the above copyright
+ notice, this list of conditions and the following disclaimer in the
+ documentation and/or other materials provided with the distribution.
+
+ THIS SOFTWARE IS PROVIDED BY THE AUTHOR `AS IS'' AND ANY EXPRESS OR
+ IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
+ OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
+ IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
+ INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
+ NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+ DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+ THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+ (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
+ THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
diff --git a/debian/libafsauthent2.install b/debian/libafsauthent2.install
new file mode 100644
index 0000000..3c12ceb
--- /dev/null
+++ b/debian/libafsauthent2.install
@@ -0,0 +1 @@
+debian/tmp/usr/lib/libafsauthent.so.*
diff --git a/debian/libafsauthent2.symbols b/debian/libafsauthent2.symbols
new file mode 100644
index 0000000..6c8ca87
--- /dev/null
+++ b/debian/libafsauthent2.symbols
@@ -0,0 +1,158 @@
+libafsauthent.so.2 libafsauthent2 #MINVER#
+* Build-Depends-Package: libopenafs-dev
+ afs_getDirPath@Base 1.8.1~pre2
+ afs_get_pag_from_groups@Base 1.8.0~pre1
+ afsconf_AddIdentity@Base 1.8.1~pre2
+ afsconf_AddKey@Base 1.8.0~pre1
+ afsconf_AddTypedKey@Base 1.8.1~pre2
+ afsconf_AddUser@Base 1.8.0~pre1
+ afsconf_BuildServerSecurityObjects@Base 1.8.1~pre2
+ afsconf_CellAliasApply@Base 1.8.1~pre2
+ afsconf_CellApply@Base 1.8.0~pre1
+ afsconf_CheckAuth@Base 1.8.0~pre1
+ afsconf_CheckRestrictedQuery@Base 1.8.0~pre1
+ afsconf_ClientAuth@Base 1.8.0~pre1
+ afsconf_ClientAuthSecure@Base 1.8.0~pre1
+ afsconf_ClientAuthToken@Base 1.8.1~pre2
+ afsconf_Close@Base 1.8.0~pre1
+ afsconf_DeleteIdentity@Base 1.8.1~pre2
+ afsconf_DeleteKey@Base 1.8.0~pre1
+ afsconf_DeleteKeyBySubType@Base 1.8.1~pre2
+ afsconf_DeleteKeyByType@Base 1.8.1~pre2
+ afsconf_DeleteUser@Base 1.8.0~pre1
+ afsconf_FindIANAName@Base 1.8.1~pre2
+ afsconf_FindService@Base 1.8.1~pre2
+ afsconf_GetAfsdbInfo@Base 1.8.1~pre2
+ afsconf_GetAllKeys@Base 1.8.1~pre2
+ afsconf_GetCellInfo@Base 1.8.0~pre1
+ afsconf_GetExtendedCellInfo@Base 1.8.1~pre2
+ afsconf_GetKey@Base 1.8.0~pre1
+ afsconf_GetKeyByTypes@Base 1.8.1~pre2
+ afsconf_GetKeys@Base 1.8.0~pre1
+ afsconf_GetKeysByType@Base 1.8.1~pre2
+ afsconf_GetLatestKey@Base 1.8.0~pre1
+ afsconf_GetLatestKeyByTypes@Base 1.8.1~pre2
+ afsconf_GetLatestKeysByType@Base 1.8.1~pre2
+ afsconf_GetLocalCell@Base 1.8.0~pre1
+ afsconf_GetNoAuthFlag@Base 1.8.0~pre1
+ afsconf_GetNthIdentity@Base 1.8.1~pre2
+ afsconf_GetNthUser@Base 1.8.0~pre1
+ afsconf_IsLocalRealmMatch@Base 1.8.1~pre2
+ afsconf_IsSuperIdentity@Base 1.8.1~pre2
+ afsconf_Open@Base 1.8.0~pre1
+ afsconf_ParseNetFiles@Base 1.8.1~pre2
+ afsconf_ParseNetRestrictFile@Base 1.8.1~pre2
+ afsconf_PickClientSecObj@Base 1.8.1~pre2
+ afsconf_PutTypedKeyList@Base 1.8.1~pre2
+ afsconf_ServerAuth@Base 1.8.0~pre1
+ afsconf_SetCellInfo@Base 1.8.0~pre1
+ afsconf_SetExtendedCellInfo@Base 1.8.1~pre2
+ afsconf_SetLocalRealm@Base 1.8.1~pre2
+ afsconf_SetNoAuthFlag@Base 1.8.0~pre1
+ afsconf_SetSecurityFlags@Base 1.8.0~pre1
+ afsconf_SuperIdentity@Base 1.8.1~pre2
+ afsconf_SuperUser@Base 1.8.0~pre1
+ afsconf_UpToDate@Base 1.8.1~pre2
+ afsconf_typedKey_free@Base 1.8.1~pre2
+ afsconf_typedKey_get@Base 1.8.1~pre2
+ afsconf_typedKey_new@Base 1.8.1~pre2
+ afsconf_typedKey_put@Base 1.8.1~pre2
+ afsconf_typedKey_values@Base 1.8.1~pre2
+ initialize_ACFG_error_table@Base 1.8.1~pre2
+ initialize_KA_error_table@Base 1.8.1~pre2
+ initialize_KTC_error_table@Base 1.8.1~pre2
+ initialize_PT_error_table@Base 1.8.1~pre2
+ initialize_U_error_table@Base 1.8.1~pre2
+ initialize_VL_error_table@Base 1.8.1~pre2
+ initialize_VOLS_error_table@Base 1.8.1~pre2
+ ka_AuthServerConn@Base 1.8.0~pre1
+ ka_AuthSpecificServersConn@Base 1.8.0~pre1
+ ka_Authenticate@Base 1.8.0~pre1
+ ka_CellConfig@Base 1.8.0~pre1
+ ka_CellToRealm@Base 1.8.0~pre1
+ ka_ChangePassword@Base 1.8.0~pre1
+ ka_ExpandCell@Base 1.8.0~pre1
+ ka_ExplicitCell@Base 1.8.0~pre1
+ ka_GetAdminToken@Base 1.8.0~pre1
+ ka_GetAuthToken@Base 1.8.0~pre1
+ ka_GetSecurity@Base 1.8.0~pre1
+ ka_GetServerToken@Base 1.8.0~pre1
+ ka_GetServers@Base 1.8.0~pre1
+ ka_GetToken@Base 1.8.0~pre1
+ ka_Init@Base 1.8.0~pre1
+ ka_KeyCheckSum@Base 1.8.0~pre1
+ ka_LocalCell@Base 1.8.0~pre1
+ ka_ParseLoginName@Base 1.8.0~pre1
+ ka_ReadPassword@Base 1.8.0~pre1
+ ka_SingleServerConn@Base 1.8.0~pre1
+ ka_StringToKey@Base 1.8.0~pre1
+ ka_UserAuthenticateGeneral@Base 1.8.0~pre1
+ ka_VerifyUserToken@Base 1.8.0~pre1
+ ktc_ForgetAllTokens@Base 1.8.0~pre1
+ ktc_ForgetToken@Base 1.8.0~pre1
+ ktc_GetToken@Base 1.8.0~pre1
+ ktc_GetTokenEx@Base 1.8.1~pre2
+ ktc_ListTokens@Base 1.8.0~pre1
+ ktc_ListTokensEx@Base 1.8.1~pre2
+ ktc_OldPioctl@Base 1.8.0~pre1
+ ktc_SetToken@Base 1.8.0~pre1
+ ktc_SetTokenEx@Base 1.8.1~pre2
+ ktc_curpag@Base 1.8.0~pre1
+ pioctl@Base 1.8.0~pre1
+ pr_End@Base 1.8.0~pre1
+ pr_GetCPS@Base 1.8.0~pre1
+ pr_GetHostCPS@Base 1.8.0~pre1
+ pr_IdToName@Base 1.8.0~pre1
+ pr_Initialize@Base 1.8.0~pre1
+ pr_ListMembers@Base 1.8.0~pre1
+ pr_NameToId@Base 1.8.0~pre1
+ pr_SNameToId@Base 1.8.0~pre1
+ setpag@Base 1.8.0~pre1
+ string_PR_IDToName@Base 1.8.0~pre1
+ token_FreeSet@Base 1.8.1~pre2
+ token_SetsEquivalent@Base 1.8.1~pre2
+ token_addToken@Base 1.8.1~pre2
+ token_buildTokenJar@Base 1.8.1~pre2
+ token_extractRxkad@Base 1.8.1~pre2
+ token_findByType@Base 1.8.1~pre2
+ token_freeToken@Base 1.8.1~pre2
+ token_freeTokenContents@Base 1.8.1~pre2
+ token_replaceToken@Base 1.8.1~pre2
+ token_setPag@Base 1.8.1~pre2
+ token_setRxkadViceId@Base 1.8.1~pre2
+ ubik_Call@Base 1.8.0~pre1
+ ubik_CallIter@Base 1.8.0~pre1
+ ubik_Call_New@Base 1.8.0~pre1
+ ubik_ClientDestroy@Base 1.8.0~pre1
+ ubik_ClientInit@Base 1.8.0~pre1
+ ubik_PR_AddToGroup@Base 1.8.1~pre2
+ ubik_PR_ChangeEntry@Base 1.8.1~pre2
+ ubik_PR_Delete@Base 1.8.1~pre2
+ ubik_PR_DumpEntry@Base 1.8.1~pre2
+ ubik_PR_GetCPS2@Base 1.8.1~pre2
+ ubik_PR_GetCPS@Base 1.8.1~pre2
+ ubik_PR_GetHostCPS@Base 1.8.1~pre2
+ ubik_PR_IDToName@Base 1.8.1~pre2
+ ubik_PR_INewEntry@Base 1.8.1~pre2
+ ubik_PR_IsAMemberOf@Base 1.8.1~pre2
+ ubik_PR_ListElements@Base 1.8.1~pre2
+ ubik_PR_ListEntries@Base 1.8.1~pre2
+ ubik_PR_ListEntry@Base 1.8.1~pre2
+ ubik_PR_ListMax@Base 1.8.1~pre2
+ ubik_PR_ListOwned@Base 1.8.1~pre2
+ ubik_PR_ListSuperGroups@Base 1.8.1~pre2
+ ubik_PR_NameToID@Base 1.8.1~pre2
+ ubik_PR_NewEntry@Base 1.8.1~pre2
+ ubik_PR_RemoveFromGroup@Base 1.8.1~pre2
+ ubik_PR_SetFieldsEntry@Base 1.8.1~pre2
+ ubik_PR_SetMax@Base 1.8.1~pre2
+ ubik_PR_UpdateEntry@Base 1.8.1~pre2
+ ubik_PR_WhereIsIt@Base 1.8.1~pre2
+ ubik_ParseClientList@Base 1.8.0~pre1
+ ugen_ClientInit@Base 1.8.1~pre2
+ ugen_ClientInitCell@Base 1.8.1~pre2
+ ugen_ClientInitFlags@Base 1.8.1~pre2
+ ugen_ClientInitServer@Base 1.8.1~pre2
+ xdr_idlist@Base 1.8.1~pre2
+ xdr_namelist@Base 1.8.1~pre2
+ xdr_prlist@Base 1.8.1~pre2
diff --git a/debian/libafsrpc2.install b/debian/libafsrpc2.install
new file mode 100644
index 0000000..80c3b95
--- /dev/null
+++ b/debian/libafsrpc2.install
@@ -0,0 +1 @@
+debian/tmp/usr/lib/libafsrpc.so.*
diff --git a/debian/libafsrpc2.symbols b/debian/libafsrpc2.symbols
new file mode 100644
index 0000000..be5f48e
--- /dev/null
+++ b/debian/libafsrpc2.symbols
@@ -0,0 +1,192 @@
+libafsrpc.so.2 libafsrpc2 #MINVER#
+* Build-Depends-Package: libopenafs-dev
+ FT_GetTimeOfDay@Base 1.8.0~pre1
+ RXSTATS_ClearPeerRPCStats@Base 1.8.0~pre1
+ RXSTATS_ClearProcessRPCStats@Base 1.8.0~pre1
+ RXSTATS_DisablePeerRPCStats@Base 1.8.0~pre1
+ RXSTATS_DisableProcessRPCStats@Base 1.8.0~pre1
+ RXSTATS_EnablePeerRPCStats@Base 1.8.0~pre1
+ RXSTATS_EnableProcessRPCStats@Base 1.8.0~pre1
+ RXSTATS_ExecuteRequest@Base 1.8.0~pre1
+ RXSTATS_QueryPeerRPCStats@Base 1.8.0~pre1
+ RXSTATS_QueryProcessRPCStats@Base 1.8.0~pre1
+ RXSTATS_QueryRPCStatsVersion@Base 1.8.0~pre1
+ RXSTATS_RetrievePeerRPCStats@Base 1.8.0~pre1
+ RXSTATS_RetrieveProcessRPCStats@Base 1.8.0~pre1
+ TM_GetTimeOfDay@Base 1.8.0~pre1
+ afs_add_to_error_table@Base 1.8.0~pre1
+ afs_com_err@Base 1.8.0~pre1
+ afs_error_message@Base 1.8.0~pre1
+ afs_error_table_name@Base 1.8.0~pre1
+ afs_xdr_alloc@Base 1.8.0~pre1
+ afs_xdr_array@Base 1.8.0~pre1
+ afs_xdr_bytes@Base 1.8.0~pre1
+ afs_xdr_char@Base 1.8.0~pre1
+ afs_xdr_enum@Base 1.8.0~pre1
+ afs_xdr_free@Base 1.8.0~pre1
+ afs_xdr_int@Base 1.8.0~pre1
+ afs_xdr_opaque@Base 1.8.0~pre1
+ afs_xdr_pointer@Base 1.8.0~pre1
+ afs_xdr_short@Base 1.8.0~pre1
+ afs_xdr_string@Base 1.8.0~pre1
+ afs_xdr_u_char@Base 1.8.0~pre1
+ afs_xdr_vector@Base 1.8.0~pre1
+ afs_xdrmem_create@Base 1.8.0~pre1
+ hton_syserr_conv@Base 1.8.0~pre1
+ initialize_RXK_error_table@Base 1.8.0~pre1
+ ktohl@Base 1.8.0~pre1
+ life_to_time@Base 1.8.0~pre1
+ multi_Finalize@Base 1.8.0~pre1
+ multi_Finalize_Ignore@Base 1.8.0~pre1
+ multi_Init@Base 1.8.0~pre1
+ multi_Select@Base 1.8.0~pre1
+ opr_AssertionFailed@Base 1.8.1~pre2
+ osi_AssertFailU@Base 1.8.0~pre1
+ osi_Panic@Base 1.8.0~pre1
+ rx_ConnError@Base 1.8.0~pre1
+ rx_ConnectionOf@Base 1.8.0~pre1
+ rx_DestroyConnection@Base 1.8.0~pre1
+ rx_EndCall@Base 1.8.0~pre1
+ rx_Error@Base 1.8.1~pre2
+ rx_Finalize@Base 1.8.0~pre1
+ rx_FlushWrite@Base 1.8.0~pre1
+ rx_FreeRPCStats@Base 1.8.0~pre1
+ rx_FreeStatistics@Base 1.8.1~pre2
+ rx_GetCachedConnection@Base 1.8.0~pre1
+ rx_GetCall@Base 1.8.0~pre1
+ rx_GetCallAbortCode@Base 1.8.1~pre2
+ rx_GetCallStatus@Base 1.8.6~pre1
+ rx_GetConnectionEpoch@Base 1.8.0~pre1
+ rx_GetConnectionId@Base 1.8.0~pre1
+ rx_GetIFInfo@Base 1.8.0~pre1
+ rx_GetLocalPeers@Base 1.8.0~pre1
+ rx_GetMaxReceiveWindow@Base 1.8.0~pre1
+ rx_GetMaxSendWindow@Base 1.8.0~pre1
+ rx_GetMinPeerTimeout@Base 1.8.0~pre1
+ rx_GetNetworkError@Base 1.8.0~pre1
+ rx_GetRemoteStatus@Base 1.8.1~pre2
+ rx_GetSecurityData@Base 1.8.0~pre1
+ rx_GetSecurityHeaderSize@Base 1.8.0~pre1
+ rx_GetServerConnections@Base 1.8.0~pre1
+ rx_GetServerDebug@Base 1.8.0~pre1
+ rx_GetServerPeers@Base 1.8.0~pre1
+ rx_GetServerStats@Base 1.8.0~pre1
+ rx_GetServerVersion@Base 1.8.0~pre1
+ rx_GetServiceSpecific@Base 1.8.1~pre2
+ rx_GetSpecific@Base 1.8.0~pre1
+ rx_GetStatistics@Base 1.8.1~pre2
+ rx_HostOf@Base 1.8.0~pre1
+ rx_IncrementTimeAndCount@Base 1.8.0~pre1
+ rx_Init@Base 1.8.0~pre1
+ rx_InitHost@Base 1.8.0~pre1
+ rx_InterruptCall@Base 1.8.0~pre1
+ rx_KeyCreate@Base 1.8.0~pre1
+ rx_MyMaxSendSize@Base 1.8.0~pre1
+ rx_NewCall@Base 1.8.0~pre1
+ rx_NewConnection@Base 1.8.0~pre1
+ rx_NewService@Base 1.8.0~pre1
+ rx_PeerOf@Base 1.8.0~pre1
+ rx_PortOf@Base 1.8.0~pre1
+ rx_PrintPeerStats@Base 1.8.0~pre1
+ rx_PrintStats@Base 1.8.0~pre1
+ rx_PrintTheseStats@Base 1.8.0~pre1
+ rx_ReadProc@Base 1.8.0~pre1
+ rx_RecordCallStatistics@Base 1.8.0~pre1
+ rx_ReleaseCachedConnection@Base 1.8.0~pre1
+ rx_ReleaseRPCStats@Base 1.8.1~pre2
+ rx_RetrievePeerRPCStats@Base 1.8.0~pre1
+ rx_RetrieveProcessRPCStats@Base 1.8.0~pre1
+ rx_SecurityClassOf@Base 1.8.0~pre1
+ rx_SecurityObjectOf@Base 1.8.0~pre1
+ rx_ServerProc@Base 1.8.0~pre1
+ rx_ServiceIdOf@Base 1.8.0~pre1
+ rx_ServiceOf@Base 1.8.0~pre1
+ rx_SetCallAbortCode@Base 1.8.1~pre2
+ rx_SetConnDeadTime@Base 1.8.0~pre1
+ rx_SetConnHardDeadTime@Base 1.8.0~pre1
+ rx_SetConnIdleDeadTime@Base 1.8.0~pre1
+ rx_SetConnSecondsUntilNatPing@Base 1.8.1~pre2
+ rx_SetLocalStatus@Base 1.8.1~pre2
+ rx_SetMaxMTU@Base 1.8.1~pre2
+ rx_SetMaxReceiveWindow@Base 1.8.0~pre1
+ rx_SetMaxSendWindow@Base 1.8.0~pre1
+ rx_SetMinPeerTimeout@Base 1.8.0~pre1
+ rx_SetNoJumbo@Base 1.8.0~pre1
+ rx_SetSecurityData@Base 1.8.0~pre1
+ rx_SetSecurityHeaderSize@Base 1.8.0~pre1
+ rx_SetSecurityMaxTrailerSize@Base 1.8.0~pre1
+ rx_SetServiceSpecific@Base 1.8.1~pre2
+ rx_SetSpecific@Base 1.8.0~pre1
+ rx_SlowReadPacket@Base 1.8.0~pre1
+ rx_SlowWritePacket@Base 1.8.0~pre1
+ rx_StartServer@Base 1.8.0~pre1
+ rx_StatsOnOff@Base 1.8.1~pre2
+ rx_UdpBufSize@Base 1.8.0~pre1
+ rx_WriteProc@Base 1.8.0~pre1
+ rx_connDeadTime@Base 1.8.0~pre1
+ rx_debugFile@Base 1.8.0~pre1
+ rx_disablePeerRPCStats@Base 1.8.0~pre1
+ rx_disableProcessRPCStats@Base 1.8.0~pre1
+ rx_enablePeerRPCStats@Base 1.8.0~pre1
+ rx_enableProcessRPCStats@Base 1.8.0~pre1
+ rx_enable_stats@Base 1.8.0~pre1
+ rx_extraPackets@Base 1.8.0~pre1
+ rx_extraQuota@Base 1.8.0~pre1
+ rx_getAllAddr@Base 1.8.0~pre1
+ rx_getAllAddrMaskMtu@Base 1.8.0~pre1
+ rx_identity_copy@Base 1.8.0~pre1
+ rx_identity_copyContents@Base 1.8.0~pre1
+ rx_identity_free@Base 1.8.0~pre1
+ rx_identity_freeContents@Base 1.8.0~pre1
+ rx_identity_match@Base 1.8.0~pre1
+ rx_identity_new@Base 1.8.0~pre1
+ rx_identity_populate@Base 1.8.0~pre1
+ rx_maxReceiveSize@Base 1.8.0~pre1
+ rx_nWaiting@Base 1.8.0~pre1
+ rx_opaque_alloc@Base 1.8.0~pre1
+ rx_opaque_copy@Base 1.8.0~pre1
+ rx_opaque_free@Base 1.8.0~pre1
+ rx_opaque_freeContents@Base 1.8.0~pre1
+ rx_opaque_new@Base 1.8.0~pre1
+ rx_opaque_populate@Base 1.8.0~pre1
+ rx_opaque_zeroFree@Base 1.8.0~pre1
+ rx_opaque_zeroFreeContents@Base 1.8.0~pre1
+ rx_queryPeerRPCStats@Base 1.8.0~pre1
+ rx_queryProcessRPCStats@Base 1.8.0~pre1
+ rx_socket@Base 1.8.0~pre1
+ rx_thread_id_key@Base 1.8.0~pre1
+ rx_tranquil@Base 1.8.0~pre1
+ rxevent_Init@Base 1.8.0~pre1
+ rxevent_Post@Base 1.8.0~pre1
+ rxevent_debugFile@Base 1.8.0~pre1
+ rxi_Alloc@Base 1.8.0~pre1
+ rxi_AllocDataBuf@Base 1.8.0~pre1
+ rxi_Free@Base 1.8.0~pre1
+ rxi_GetCallNumberVector@Base 1.8.0~pre1
+ rxi_RoundUpPacket@Base 1.8.0~pre1
+ rxi_SetCallNumberVector@Base 1.8.0~pre1
+ rxkad_GetServerInfo@Base 1.8.0~pre1
+ rxkad_NewClientSecurityObject@Base 1.8.0~pre1
+ rxkad_NewKrb5ServerSecurityObject@Base 1.8.0~pre1
+ rxkad_NewServerSecurityObject@Base 1.8.0~pre1
+ rxkad_global_stats@Base 1.8.0~pre1
+ rxkad_global_stats_lock@Base 1.8.0~pre1
+ rxkad_stats_key@Base 1.8.0~pre1
+ rxnull_NewClientSecurityObject@Base 1.8.0~pre1
+ rxnull_NewServerSecurityObject@Base 1.8.0~pre1
+ rxs_Release@Base 1.8.0~pre1
+ time_to_life@Base 1.8.0~pre1
+ tkt_CheckTimes@Base 1.8.0~pre1
+ tkt_DecodeTicket@Base 1.8.0~pre1
+ tkt_DeriveDesKey@Base 1.8.0~pre1
+ tkt_MakeTicket5@Base 1.8.0~pre1
+ tkt_MakeTicket@Base 1.8.0~pre1
+ xdr_Capabilities@Base 1.8.1~pre2
+ xdr_afsUUID@Base 1.8.0~pre1
+ xdr_afs_int32@Base 1.8.0~pre1
+ xdr_afs_int64@Base 1.8.0~pre1
+ xdr_afs_uint32@Base 1.8.0~pre1
+ xdr_afs_uint64@Base 1.8.0~pre1
+ xdr_rpcStats@Base 1.8.1~pre2
+ xdrlen_create@Base 1.8.0~pre1
+ xdrrx_create@Base 1.8.0~pre1
diff --git a/debian/libkopenafs2.install b/debian/libkopenafs2.install
new file mode 100644
index 0000000..10cebe0
--- /dev/null
+++ b/debian/libkopenafs2.install
@@ -0,0 +1 @@
+debian/tmp/usr/lib/libkopenafs.so.*
diff --git a/debian/libkopenafs2.symbols b/debian/libkopenafs2.symbols
new file mode 100644
index 0000000..192181f
--- /dev/null
+++ b/debian/libkopenafs2.symbols
@@ -0,0 +1,7 @@
+libkopenafs.so.2 libkopenafs2 #MINVER#
+* Build-Depends-Package: libopenafs-dev
+ k_hasafs@Base 1.8.0~pre1
+ k_haspag@Base 1.8.0~pre1
+ k_pioctl@Base 1.8.0~pre1
+ k_setpag@Base 1.8.0~pre1
+ k_unlog@Base 1.8.0~pre1
diff --git a/debian/libopenafs-dev.dirs b/debian/libopenafs-dev.dirs
new file mode 100644
index 0000000..6845771
--- /dev/null
+++ b/debian/libopenafs-dev.dirs
@@ -0,0 +1 @@
+usr/lib
diff --git a/debian/libopenafs-dev.install b/debian/libopenafs-dev.install
new file mode 100644
index 0000000..01cbc95
--- /dev/null
+++ b/debian/libopenafs-dev.install
@@ -0,0 +1,11 @@
+debian/tmp/usr/bin/afs_compile_et usr/bin
+debian/tmp/usr/bin/rxgen usr/bin
+
+debian/tmp/usr/include usr
+
+debian/tmp/usr/lib/*.a usr/lib
+debian/tmp/usr/lib/*.so usr/lib
+debian/tmp/usr/lib/afs usr/lib
+
+debian/tmp/usr/share/man/man1/afs_compile_et.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/rxgen.1 usr/share/man/man1
diff --git a/debian/module/compat b/debian/module/compat
new file mode 100644
index 0000000..45a4fb7
--- /dev/null
+++ b/debian/module/compat
@@ -0,0 +1 @@
+8
diff --git a/debian/module/control b/debian/module/control
new file mode 100644
index 0000000..65708c4
--- /dev/null
+++ b/debian/module/control
@@ -0,0 +1,8 @@
+Source: openafs-modules
+Section: kernel
+Priority: optional
+Maintainer: Russ Allbery <rra@debian.org>
+Uploaders: Sam Hartman <hartmans@debian.org>
+Build-Depends: debhelper (>= 8)
+Standards-Version: 3.9.1
+Homepage: http://www.openafs.org/
diff --git a/debian/module/control.in b/debian/module/control.in
new file mode 100644
index 0000000..13355cd
--- /dev/null
+++ b/debian/module/control.in
@@ -0,0 +1,20 @@
+Source: openafs-modules
+Section: kernel
+Priority: optional
+Maintainer: Russ Allbery <rra@debian.org>
+Uploaders: Sam Hartman <hartmans@debian.org>
+Build-Depends: debhelper (>= 8)
+Standards-Version: 3.9.1
+
+Package: openafs-modules-=KVERS
+Breaks: openafs-client (<< 1.5.61)
+Provides: openafs-modules3
+Architecture: any
+Recommends: linux-image-=KVERS
+Description: AFS distributed filesystem kernel module
+ AFS is a distributed filesystem allowing cross-platform sharing of
+ files among multiple computers. Facilities are provided for access
+ control, authentication, backup and administrative management.
+ .
+ This package provides the compiled AFS kernel module for kernel
+ version =KVERS.
diff --git a/debian/module/genchanges b/debian/module/genchanges
new file mode 100644
index 0000000..5aa47cc
--- /dev/null
+++ b/debian/module/genchanges
@@ -0,0 +1,19 @@
+#!/bin/sh
+# genchanges.sh - generate a changes file for a deb file generated via
+# the make-kpkg utility
+
+# KSRC, KVERS, KMAINT, and KEMAIL are expected to be passed through the
+# environment.
+
+set -e
+umask 022
+
+MODVERS=`cat debian/VERSION | sed s/:/\+/`
+ARCH=`dpkg --print-architecture`
+
+mprefix=`grep Package: debian/control.in | cut -d' ' -f 2 | cut -d= -f 1`
+chfile="$KSRC/../$mprefix${KVERS}${INT_SUBARCH}_${MODVERS}_${ARCH}.changes"
+
+dpkg-genchanges -b ${KMAINT:+-m"$KMAINT <$KEMAIL>"} -u"$KSRC/.." \
+ -cdebian/control > "$chfile"
+#debsign "$chfile"
diff --git a/debian/module/kernel-version b/debian/module/kernel-version
new file mode 100755
index 0000000..a1985a2
--- /dev/null
+++ b/debian/module/kernel-version
@@ -0,0 +1,24 @@
+#!/usr/bin/perl
+#
+# Extract the kernel version from the kernel version header file. Takes the
+# kernel source path as its only argument. If the version header couldn't be
+# found, print nothing and exit quietly.
+
+my $ksrc = shift;
+unless ($ksrc && open (VERSION, "$ksrc/include/linux/version.h")) {
+ exit 0;
+}
+my $found;
+my $line = <VERSION>;
+if ($line =~ /"(.+)"/) {
+ print "$1\n";
+ $found = 1;
+}
+exit 0 if $found;
+unless (open (VERSION, "$ksrc/include/config/kernel.release")) {
+ exit 0;
+}
+if ($line = <VERSION>) {
+ print "$line";
+}
+exit 0;
diff --git a/debian/module/prep-modules b/debian/module/prep-modules
new file mode 100755
index 0000000..91846ea
--- /dev/null
+++ b/debian/module/prep-modules
@@ -0,0 +1,93 @@
+#! /bin/sh
+#
+# Prepares to build kernel modules. This script figures out and munges
+# version strings. The goal is:
+#
+# * Set the package name to openafs-modules-$(KVERS) where $(KVERS) is the
+# major kernel revision plus the debian subrevision and whatever
+# architecture string is appropriate if building against the stock Debian
+# kernels. $(KVERS) should be identical to the version component contained
+# in the Debian kernel package names (in other words, the ABI version, not
+# the package version)..
+#
+# * Make the package recommend linux-image-$(KVERS) as appropriate for the
+# kernel version that we're building against. Use recommend rather than
+# depends since the user may have built their own kernel outside of the
+# Debian package infrastructure.
+#
+# * Save the version number of the binary package in debian/VERSION for later
+# use by dh_gencontrol. This will be the version number of the source
+# package followed by a + and the version number of the kernel package that
+# we're building against. If the kernel package version contains an epoch,
+# try to hack our way into doing the right thing by using that epoch number
+# as our own. This isn't quite the right thing, but seems reasonably good.
+#
+# This script generates debian/control from debian/control.module using sed.
+# Unfortunately, substvars cannot be used since the name of the package is
+# modified and substvars happens too late. It also outputs debian/VERSION,
+# containing the version of the binary package.
+
+set -e
+
+if [ "$#" -ne 1 ]; then
+ echo "Usage: $0 <kernel-source-location>" >&2
+ exit 1
+fi
+
+# We can get the kernel version from one of three places. If KVERS and KDREV
+# are both already set in the environment (which will be the case when invoked
+# by make-kpkg or module-assistant), use them. Otherwise, if we have a kernel
+# source directory that contains debian/changelog (generated by make-kpkg),
+# parse that file to find the version information. Finally, if neither works,
+# extract the kernel version from the kernel headers, append INT_SUBARCH to
+# that version if it's available, and assume a kernel package revision of -0
+# if none is provided.
+#
+# Set the variables $afs_kvers, which will hold the revision of the kernel,
+# and $afs_kdrev, which will hold the version of the kernel package that we're
+# building against.
+
+changelog="$1/debian/changelog"
+if [ -n "$KVERS" ] && [ -n "$KDREV" ]; then
+ afs_kvers="${KVERS}${INT_SUBARCH}"
+ afs_kdrev="${KDREV}"
+elif [ ! -f "$changelog" ] ; then
+ if [ -n "$KVERS" ] ; then
+ afs_kvers="$KVERS"
+ else
+ afs_kvers=`perl debian/kernel-version "$1"`
+ fi
+ if [ -z "$KDREV" ] ; then
+ afs_kdrev="${afs_kvers}-0"
+ else
+ afs_kvers="${afs_kvers}${INT_SUBARCH}"
+ afs_kdrev="${KDREV}"
+ fi
+else
+ if [ -n "$KVERS" ] ; then
+ afs_kvers="$KVERS"
+ else
+ afs_kvers=`head -1 "$changelog" \
+ | sed -e 's/.*source-\([^ ]*\) (\([^)]*\)).*/\1/'`
+ fi
+ afs_kdrev=`head -1 "$changelog" \
+ | sed -e 's/.*source-\([^ ]*\) (\([^)]*\)).*/\2/'`
+fi
+
+# Generate the control file from the template.
+
+sed -e "s/=KVERS/${afs_kvers}/g" debian/control.in > debian/control
+
+# Now, calcuate the binary package version. Extract the epoch from the kernel
+# package revision and add it to the beginning of the binary package version
+# if present. Then, concatenate the source version, '+', and the kernel
+# package revision without the epoch.
+
+afs_version=`head -1 debian/changelog | sed -e 's/.*(\([^)]*\)).*/\1/'`
+afs_epoch=`echo ${afs_kdrev} | sed -n -e 's/^\([0-9]*\):.*/\1/p'`
+afs_version="${afs_version}+`echo ${afs_kdrev} | sed -e 's/^[0-9]*://'`"
+if [ -n "$afs_epoch" ] ; then
+ afs_version="${afs_epoch}:${afs_version}"
+fi
+
+echo "$afs_version" > debian/VERSION
diff --git a/debian/module/rules b/debian/module/rules
new file mode 100755
index 0000000..1053788
--- /dev/null
+++ b/debian/module/rules
@@ -0,0 +1,111 @@
+#!/usr/bin/make -f
+
+# Determine whether we're building with optimization. This doesn't really
+# work at the moment due to upstream problems.
+ifneq (,$(findstring noopt,$(DEB_BUILD_OPTIONS)))
+ DEBIAN_OPT_FLAGS = --disable-optimize --disable-optimize-lwp
+ DEBIAN_KERN_FLAGS = --disable-optimize-kernel
+else
+ DEBIAN_OPT_FLAGS =
+ DEBIAN_KERN_FLAGS =
+endif
+
+# Find kernel build information.
+ifndef KSRC
+ KSRC := /lib/modules/$(shell uname -r)/build
+endif
+ifndef KPKG_DEST_DIR
+ KPKG_DEST_DIR = ..
+endif
+KVERS := $(shell perl debian/kernel-version $(KSRC))
+export KSRC
+export KVERS
+export KPKG_DEST_DIR
+
+SYS_NAME := $(shell KSRC="$(KSRC)" KVERS="$(KVERS)" ARCH="$(ARCH)" \
+ sh debian/sysname)
+
+package = openafs
+modulepkg := openafs-modules-$(KVERS)${INT_SUBARCH}
+moduledir := debian/$(modulepkg)/lib/modules/$(KVERS)/fs
+
+# After building the package, m-a calls debian/rules with the target
+# echo-debfile. Without this dummy rule, this would trigger the setup
+# target (by way of the wildcard rule for dh), which re-creates the setup
+# flag file that we removed during make clean.
+#
+# Then, if module-assistant unpacks a new version of the source, the setup
+# file already exists so the setup rule isn't run again. But the
+# debian/control file is the template from the new source, which doesn't
+# contain any buildable packages.
+#
+# Add a dummy target for echo-debfile to ensure that setup isn't run again
+# after clean. If there are further changes to module-assistant, causing it
+# to run other targets after clean, more similar dummy rules may need to be
+# added.
+echo-debfile:
+ @true
+
+# make-kpkg tries to rebuild debian/rules first, so add a dummy target to
+# avoid our dh wildcard rule and a fatal error.
+debian/rules ./debian/rules:
+ @true
+
+# This setup must be done before running any other target if it hasn't
+# already been done.
+setup:
+ @if test x"$(SYS_NAME)" = x"UNKNOWN" ; then exit 1 ; fi
+ @if test x"$(KVERS)" = x ; then \
+ echo 'No version in $(KSRC)/include/linux/version.h' >&2 ; \
+ exit 1 ; \
+ fi
+ sh debian/prep-modules $(KSRC)
+ touch $@
+
+%: setup
+ dh $@
+
+override_dh_auto_configure:
+ sh configure --prefix=$(CURDIR)/debian/tmp \
+ --with-afs-sysname=$(SYS_NAME) \
+ --disable-linux-syscall-probing \
+ --with-linux-kernel-headers=$(KSRC) \
+ --with-linux-kernel-packaging \
+ --enable-debug --enable-debug-lwp --enable-debug-kernel \
+ $(DEBIAN_OPT_FLAGS) $(DEBIAN_KERN_FLAGS)
+
+override_dh_auto_install:
+ cd src/libafs && make install DESTDIR=$(CURDIR)/debian/tmp
+ install -d -g root -o root -m 755 $(moduledir)
+ install -g root -o root -m 644 \
+ debian/tmp/lib/modules/*/extra/openafs/*o $(moduledir)/
+
+override_dh_clean:
+ rm -rf src/libafs/MODLOAD-* *-stamp
+ dh_clean Makefile config.log config.status setup src/libafs/Makefile \
+ src/libafs/Makefile.common src/libafs/asm src/libafs/asm-generic \
+ src/libafs/h src/libafs/linux src/libafs/net src/libafs/netinet \
+ src/libafs/rpc src/libafs/sys
+
+override_dh_gencontrol:
+ dh_gencontrol -- -v`cat debian/VERSION`
+
+override_dh_builddeb:
+ dh_builddeb --destdir="$(KPKG_DEST_DIR)"
+
+kdist_configure: override_dh_auto_configure
+
+kdist_image:
+ $(ROOT_CMD) $(MAKE) $(MFLAGS) -f debian/rules binary-arch
+ $(ROOT_CMD) $(MAKE) $(MFLAGS) -f debian/rules clean
+
+kdist:
+ $(ROOT_CMD) $(MAKE) $(MFLAGS) -f debian/rules binary-arch
+ KSRC="$(KSRC)" KMAINT="$(KMAINT)" KEMAIL="$(KEMAIL)" \
+ sh -v debian/genchanges
+ $(ROOT_CMD) $(MAKE) $(MFLAGS) -f debian/rules clean
+
+kdist_clean:
+ $(ROOT_CMD) $(MAKE) $(MFLAGS) -f debian/rules clean
+
+.PHONY: kdist kdist_clean kdist_configure kdist_image
diff --git a/debian/module/sysname b/debian/module/sysname
new file mode 100755
index 0000000..52df370
--- /dev/null
+++ b/debian/module/sysname
@@ -0,0 +1,47 @@
+#!/bin/sh
+
+case ${ARCH:-`uname -m`} in
+alpha)
+ echo alpha_linux_26
+ ;;
+arm|armel|armhf|armv5tel)
+ echo arm_linux26
+ ;;
+arm64)
+ echo arm64_linux26
+ ;;
+i[3456]86)
+ echo i386_linux26
+ ;;
+ia64)
+ echo ia64_linux26
+ ;;
+ppc)
+ echo ppc_linux26
+ ;;
+ppc64)
+ echo ppc64_linux26
+ ;;
+ppc64le)
+ echo ppc64le_linux26
+ ;;
+s390)
+ echo s390_linux26
+ ;;
+s390x)
+ echo s390x_linux26
+ ;;
+sparc)
+ echo sparc_linux24
+ ;;
+sparc64)
+ echo sparc64_linux26
+ ;;
+x86_64)
+ echo amd64_linux26
+ ;;
+*)
+ echo "ERROR: unsupported architecture" >&2
+ echo UNKNOWN
+ exit 1
+esac
diff --git a/debian/openafs-client-postcheck b/debian/openafs-client-postcheck
new file mode 100755
index 0000000..5101ee0
--- /dev/null
+++ b/debian/openafs-client-postcheck
@@ -0,0 +1,39 @@
+#! /bin/sh
+# Copyright (C) 2014 by Benjamin Kaduk
+# All rights reserved.
+#
+# Redistribution and use in source and binary forms, with or without
+# modification, are permitted provided that the following conditions
+# are met:
+#
+# * Redistributions of source code must retain the above copyright
+# notice, this list of conditions and the following disclaimer.
+#
+# * Redistributions in binary form must reproduce the above copyright
+# notice, this list of conditions and the following disclaimer in
+# the documentation and/or other materials provided with the
+# distribution.
+#
+# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+# FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+# COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+# INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+# (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+# SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+# STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+# ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+# OF THE POSSIBILITY OF SUCH DAMAGE.
+PATH=/bin:/usr/bin:/sbin:/usr/sbin
+
+# Always unload a module if it's loaded.
+if /sbin/lsmod | grep -Fq openafs; then
+ KMOD=openafs
+else
+ KMOD=--version
+fi
+cat > /var/cache/openafs-client/openafs-client.shutdown.env <<EOF
+KMOD=${KMOD}
+EOF
diff --git a/debian/openafs-client-precheck b/debian/openafs-client-precheck
new file mode 100755
index 0000000..5175d15
--- /dev/null
+++ b/debian/openafs-client-precheck
@@ -0,0 +1,124 @@
+#! /bin/sh
+# Copyright (C) 2014 by Benjamin Kaduk
+# All rights reserved.
+#
+# Redistribution and use in source and binary forms, with or without
+# modification, are permitted provided that the following conditions
+# are met:
+#
+# * Redistributions of source code must retain the above copyright
+# notice, this list of conditions and the following disclaimer.
+#
+# * Redistributions in binary form must reproduce the above copyright
+# notice, this list of conditions and the following disclaimer in
+# the documentation and/or other materials provided with the
+# distribution.
+#
+# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+# FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+# COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+# INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+# (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+# SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+# STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+# ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+# OF THE POSSIBILITY OF SUCH DAMAGE.
+PATH=/bin:/usr/bin:/sbin:/usr/sbin
+
+# Gather up options and post startup script name, if present
+if [ -f /etc/openafs/afs.conf ]; then
+ . /etc/openafs/afs.conf
+fi
+
+CACHEINFO=${CACHEINFO:-/etc/openafs/cacheinfo}
+MODULEROOT=${MODULEROOT:-/lib/modules/`uname -r`}
+
+do_nothing_env() {
+ cat > /var/cache/openafs-client/openafs-client.env <<EOF
+AFSD_ARGS=-help
+AFS_SETCRYPT=-help
+AFS_SYSNAME=-help
+KMOD=--version
+EOF
+}
+
+# Exit if the package is not installed.
+[ -x /sbin/afsd ] || exit 1
+
+# Do some other checks for prerequisites
+if ! [ -f "${CACHEINFO}" ]; then
+ echo "required cacheinfo file does not exist" >&2
+ exit 1
+fi
+if ! [ -d "$(awk -F : '{print $1}' < "${CACHEINFO}")" ]; then
+ echo "AFS mountpoint is not a directory or does not exist" >&2
+ exit 1
+fi
+if pidof /sbin/afsd || pidof /usr/sbin/afsd; then
+ echo "afsd is already running, continuing" >&2
+ do_nothing_env
+ exit 0
+fi
+
+# Ensure that the kernel module is loaded.
+if ! /sbin/lsmod | grep -Fq openafs; then
+ modprobe openafs
+ status=$?
+
+ if [ $status -ne 0 ] ; then
+ echo "Failed to load openafs.ko. Does it need to be built?" >&2
+ # We cannot fail hard on a missing module, though, as that will
+ # cause our unit to be put in a disabled state.
+ if grep -q openafs "$MODULEROOT/modules.dep"; then
+ exit $status
+ else
+ do_nothing_env
+ exit 0
+ fi
+ fi
+fi
+
+# Determine which afsd options to use. /etc/openafs/afs.conf contains the
+# settings that are checked here.
+if [ -z "$OPTIONS" ] || [ "$OPTIONS" = "AUTOMATIC" ] ; then
+ AFSD_OPTIONS="$VERBOSE"
+else
+ AFSD_OPTIONS="$OPTIONS $VERBOSE"
+fi
+
+# These variables are from /etc/openafs/afs.conf.client and are managed
+# automatically by debconf.
+case "$AFS_AFSDB" in
+[Yy][Ee][Ss]|[Tt][Rr][Uu][Ee])
+ AFSD_OPTIONS="$AFSD_OPTIONS -afsdb"
+esac
+case "$AFS_DYNROOT" in
+[Yy][Ee][Ss]|[Tt][Rr][Uu][Ee])
+ AFSD_OPTIONS="$AFSD_OPTIONS -dynroot"
+ ;;
+[Ss][Pp][Aa][Rr][Ss][Ee])
+ AFSD_OPTIONS="$AFSD_OPTIONS -dynroot-sparse"
+esac
+case "$AFS_FAKESTAT" in
+[Yy][Ee][Ss]|[Tt][Rr][Uu][Ee])
+ AFSD_OPTIONS="$AFSD_OPTIONS -fakestat"
+esac
+
+case "$AFS_CRYPT" in
+[Yy][Ee][Ss]|[Tt][Rr][Uu][Ee])
+ AFS_SETCRYPT=on
+ ;;
+*)
+ AFS_SETCRYPT=off
+esac
+
+# Generate an EnvironmentFile for use by systemd.
+cat > /var/cache/openafs-client/openafs-client.env <<EOF
+AFSD_ARGS=${AFSD_OPTIONS}
+AFS_SETCRYPT=${AFS_SETCRYPT}
+AFS_SYSNAME=${AFS_SYSNAME}
+KMOD=openafs
+EOF
diff --git a/debian/openafs-client.NEWS b/debian/openafs-client.NEWS
new file mode 100644
index 0000000..bd2af3c
--- /dev/null
+++ b/debian/openafs-client.NEWS
@@ -0,0 +1,59 @@
+openafs (1.8.0~pre4-1) unstable; urgency=low
+
+ - Client time management support (afsd -settime and afsd -nosettime)
+ has been removed.
+ - Linux versions prior to 2.6 are no longer supported by the client.
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Tue, 13 Dec 2016 01:49:46 -0500
+
+openafs (1.5.73.3-1) experimental; urgency=low
+
+ This version of the OpenAFS client is built with experimental
+ disconnected support. This support should not change the normal
+ operation of the client unless it is used. If you wish to use it,
+ please be aware that it is an experimental feature, may not work
+ correctly, and may lose data. Disconnected mode is configured through
+ the fs discon command, which is not yet documented.
+
+ The communication protocol between afsd (in openafs-client) and the
+ OpenAFS kernel module has changed in 1.5. You must upgrade your kernel
+ module to a 1.5.x kernel module when using this or newer versions of
+ openafs-client, or OpenAFS will not start correctly.
+
+ -- Russ Allbery <rra@debian.org> Tue, 06 Apr 2010 14:51:38 -0700
+
+openafs (1.4.10+dfsg1-1) unstable; urgency=high
+
+ This release of OpenAFS contains security fixes in the kernel module.
+ Be sure to also upgrade openafs-modules-source, build a new kernel
+ module for your system following the instructions in
+ /usr/share/doc/openafs-client/README.modules.gz, and then either stop
+ and restart openafs-client or reboot the system to reload the kernel
+ module.
+
+ -- Russ Allbery <rra@debian.org> Mon, 06 Apr 2009 15:51:14 -0700
+
+openafs (1.4.2-6) unstable; urgency=medium
+
+ As of this release of the OpenAFS kernel module, all cells, including
+ the local cell, have setuid support turned off by default due to the
+ possibility of an attacker forging AFS fileserver responses to create a
+ fake setuid binary. Prior releases enabled setuid support for the local
+ cell. Those binaries will now run with normal permissions by default.
+
+ This security fix will only take effect once you've installed a kernel
+ module from openafs-modules-source 1.4.2-6 or later. Doing so is highly
+ recommended. In the meantime, you can disable setuid support by
+ running:
+
+ fs setcell -cell <localcell> -nosuid
+
+ as root (where <localcell> is your local cell, the one listed in
+ /etc/openafs/ThisCell).
+
+ If you are certain there is no security risk of an attacker forging AFS
+ fileserver responses, you can enable setuid status selectively using the
+ fs setcell command.
+
+ -- Russ Allbery <rra@debian.org> Sun, 11 Mar 2007 22:28:07 -0700
+
diff --git a/debian/openafs-client.config b/debian/openafs-client.config
new file mode 100755
index 0000000..1000d14
--- /dev/null
+++ b/debian/openafs-client.config
@@ -0,0 +1,63 @@
+#!/bin/sh
+
+set -e
+
+. /usr/share/debconf/confmodule
+db_version 2.0
+
+# Configure the client cell. Default to the current ThisCell file and,
+# failing that, the lowercased local domain name, if available. Ignore errors
+# on read, since it may fail if there's no newline in the file.
+if [ -r /etc/openafs/ThisCell ] ; then
+ read cell < /etc/openafs/ThisCell || true
+ db_set openafs-client/thiscell "$cell"
+fi
+db_get openafs-client/thiscell || true
+if [ "x$RET" = "x" ] ; then
+ domain=`dnsdomainname 2>/dev/null || true`
+ if [ -n "$domain" ] ; then
+ db_set openafs-client/thiscell `echo "$domain" | tr 'A-Z' 'a-z'`
+ fi
+fi
+db_input high openafs-client/thiscell || true
+
+# Configure the cache size. Default to the current value in the cacheinfo
+# configuration file.
+if [ -r /etc/openafs/cacheinfo ] ; then
+ IFS=: read mountpoint cachedir cachesize < /etc/openafs/cacheinfo
+ db_set openafs-client/cachesize "$cachesize"
+fi
+db_input high openafs-client/cachesize || true
+db_go
+
+# Configure the AFS client parameters set in /etc/openafs/afs.conf, taking
+# defaults from the current file.
+test -f /etc/openafs/afs.conf && . /etc/openafs/afs.conf
+if [ "x$AFS_CLIENT" != "x" ] ; then
+ db_set openafs-client/run-client "$AFS_CLIENT"
+fi
+db_input low openafs-client/run-client || true
+if [ "x$AFS_AFSDB" != "x" ] ; then
+ db_set openafs-client/afsdb "$AFS_AFSDB"
+fi
+if [ "x$AFS_CRYPT" != "x" ] ; then
+ db_set openafs-client/crypt "$AFS_CRYPT"
+fi
+if [ "x$AFS_DYNROOT" != "x" ] ; then
+ if [ "x$AFS_DYNROOT" = 'xtrue' ] ; then
+ AFS_DYNROOT=Yes
+ elif [ "x$AFS_DYNROOT" = 'xfalse' ] ; then
+ AFS_DYNROOT=No
+ fi
+ db_set openafs-client/dynroot "$AFS_DYNROOT"
+fi
+if [ "x$AFS_FAKESTAT" != "x" ] ; then
+ db_set openafs-client/fakestat "$AFS_FAKESTAT"
+fi
+db_beginblock
+db_input low openafs-client/afsdb || true
+db_input low openafs-client/crypt || true
+db_input medium openafs-client/dynroot || true
+db_input low openafs-client/fakestat || true
+db_endblock
+db_go
diff --git a/debian/openafs-client.dirs b/debian/openafs-client.dirs
new file mode 100644
index 0000000..eae2111
--- /dev/null
+++ b/debian/openafs-client.dirs
@@ -0,0 +1,5 @@
+var/cache/openafs
+var/cache/openafs-client
+etc/openafs
+etc/init.d
+usr/share/openafs
diff --git a/debian/openafs-client.docs b/debian/openafs-client.docs
new file mode 100644
index 0000000..3d959f9
--- /dev/null
+++ b/debian/openafs-client.docs
@@ -0,0 +1,4 @@
+README
+debian/README.servers
+debian/configuration-transcript.txt
+debian/README.modules
diff --git a/debian/openafs-client.init b/debian/openafs-client.init
new file mode 100755
index 0000000..431cda5
--- /dev/null
+++ b/debian/openafs-client.init
@@ -0,0 +1,264 @@
+#! /bin/sh
+### BEGIN INIT INFO
+# Provides: openafs-client
+# Required-Start: $remote_fs $network $time
+# Required-Stop: $remote_fs $network
+# Should-Start: $syslog $named openafs-fileserver
+# Should-Stop: openafs-fileserver
+# X-Stop-After: autofs
+# Default-Start: 2 3 4 5
+# Default-Stop: 0 1 6
+# Short-Description: OpenAFS client
+# Description: Starts or stops the OpenAFS client, loading the
+# OpenAFS kernel module as necessary.
+### END INIT INFO
+#
+# Modified by Sam Hartman <hartmans@mit.edu> for Debian
+# Copyright 2000, International Business Machines Corporation and others.
+# All Rights Reserved.
+#
+# This software has been released under the terms of the IBM Public
+# License. For details, see the LICENSE file in the top-level source
+# directory or online at http://www.openafs.org/dl/license10.html
+
+# This init script bears little resemblence to the regular upstream init
+# script at this point and is therefore maintained as a Debian-specific file.
+# The upstream init script assumes Red Hat paths and uses insmod to load the
+# module directly rather than using modprobe.
+
+PATH=/bin:/usr/bin:/sbin:/usr/sbin
+
+CACHEINFO=${CACHEINFO:-/etc/openafs/cacheinfo}
+MODULEROOT=${MODULEROOT:-/lib/modules/`uname -r`}
+MODULEDIR=${MODULEDIR:-$MODULEROOT/fs}
+DKMSDIR=${DKMSDIR:-$MODULEROOT/updates/dkms}
+
+# Exit if the package is not installed.
+[ -x /sbin/afsd ] || exit 0
+
+# Define LSB log_* functions and get other support infrastructure.
+. /lib/lsb/init-functions
+
+exec 3>/dev/null
+exec </dev/null
+
+# Gather up options and post startup script name, if present
+if [ -f /etc/openafs/afs.conf ]; then
+ . /etc/openafs/afs.conf
+fi
+
+# Return 1 if the argument is "true".
+is_on() {
+ if [ x"$1" = x"true" ] ; then
+ return 0
+ else
+ return 1
+ fi
+}
+
+# Determine if kernel module loading is disabled. If it's not, don't attempt
+# to stop or restart AFS, since we'll end up in a bad inconsistent state.
+is_loading_disabled() {
+ disabled=`cat /proc/sys/kernel/modules_disabled 2>/dev/null`
+ if [ "$disabled" = 1 ] ; then
+ return 0
+ else
+ return 1
+ fi
+}
+
+# Load the AFS client module if it's not already loaded. Set $MODULEDIR and
+# $LIBAFS to override the default location and module name. Also check before
+# loading whether the module is listed in the module dependencies so that we
+# can exit with a 0 status in that case.
+load_client() {
+ if [ -z "$LIBAFS" ] ; then
+ LIBAFS=openafs.ko
+ fi
+ if [ ! -f "$MODULEDIR/$LIBAFS" -a ! -f "$DKMSDIR/$LIBAFS" ] ; then
+ echo ""
+ cat <<EOF >&2
+AFS module $MODULEDIR/$LIBAFS does not exist.
+Not starting AFS. Please consider building kernel modules using
+instructions in /usr/share/doc/openafs-client/README.modules
+EOF
+ # We must exit successfully here or openafs-client will fail on
+ # installation unless a module is installed.
+ exit 0
+ fi
+ sawdep=0
+ if grep -q openafs "$MODULEROOT/modules.dep" ; then
+ sawdep=1
+ fi
+ LOADED=`/sbin/lsmod | fgrep openafs`
+ if [ -z "$LOADED" ] ; then
+ modprobe openafs
+ status=$?
+ if [ $status = 0 ] ; then
+ echo -n " openafs"
+ fi
+
+ # We must exit successfully here if the openafs module just isn't
+ # listed in the dependency information for modprobe, which can happen
+ # if openafs-client and the module package are installed at the same
+ # time and the module hasn't been set up yet.
+ if [ $sawdep = 0 ] ; then
+ return 0
+ else
+ return $status
+ fi
+ fi
+ return 0
+}
+
+# Determine which afsd options to use. /etc/openafs/afs.conf contains the
+# settings that are checked here.
+choose_afsd_options() {
+ if [ -z "$OPTIONS" ] || [ "$OPTIONS" = "AUTOMATIC" ] ; then
+ AFSD_OPTIONS="$VERBOSE"
+ else
+ AFSD_OPTIONS="$OPTIONS $VERBOSE"
+ fi
+
+ # These variables are from /etc/openafs/afs.conf.client and are managed
+ # automatically by debconf.
+ if is_on $AFS_AFSDB ; then
+ AFSD_OPTIONS="$AFSD_OPTIONS -afsdb"
+ fi
+ if [ "$AFS_DYNROOT" = 'Yes' ] || [ "$AFS_DYNROOT" = 'true' ] ; then
+ AFSD_OPTIONS="$AFSD_OPTIONS -dynroot"
+ elif [ "$AFS_DYNROOT" = 'Sparse' ] ; then
+ AFSD_OPTIONS="$AFSD_OPTIONS -dynroot-sparse"
+ fi
+ if is_on $AFS_FAKESTAT ; then
+ AFSD_OPTIONS="$AFSD_OPTIONS -fakestat"
+ fi
+}
+
+# Start afsd. Be careful not to start it if another one is already running,
+# as that has a bad tendency to hang the system. Earlier versions of the
+# openafs-client package put afsd in /usr/sbin.
+start_client() {
+ if pidof /sbin/afsd >/dev/null || pidof /usr/sbin/afsd >/dev/null ; then
+ echo "."
+ else
+ choose_afsd_options
+ echo " afsd."
+ start-stop-daemon --start --quiet --exec /sbin/afsd -- $AFSD_OPTIONS
+ fi
+
+ # From /etc/openafs/afs.conf.client, whether to enable fcrypt encryption.
+ if is_on $AFS_CRYPT ; then
+ fs setcrypt on
+ fi
+
+ # From /etc/openafs/afs.conf, set a sysname list if one was configured.
+ if [ -n "$AFS_SYSNAME" ] ; then
+ fs sysname $AFS_SYSNAME
+ fi
+}
+
+# Kill all processes that are accessing AFS. Not enabled by default, and
+# normally called via kill_all_afs.
+kill_afs() {
+ signal=$1
+ mount=`grep ^'AFS ' /etc/mtab | awk '{ print $2 }'`
+ if [ -n "$mount" ] ; then
+ pids=`/usr/bin/lsof -Fp $mount | sed 's/p//'`
+ if [ -n "$pids" ] ; then
+ kill -$signal $pids > /dev/null 2>&1
+ sleep 1
+ fi
+ fi
+}
+
+# Repeatedly call kill_afs for a series of signals to give AFS-using processes
+# a hope of shutting down cleanly if the system is shutting down. Not enabled
+# by default. Enable this in /etc/openafs/afs.conf.
+#
+# Warns and does nothing if lsof is not installed.
+kill_all_afs() {
+ runlevel=`runlevel | sed 's/^. //'`
+ if [ "$runlevel" -eq 0 ] || [ "$runlevel" -eq 6 ] ; then
+ if [ -x /usr/bin/lsof ] ; then
+ echo -n "Killing processes with AFS files open: "
+ kill_afs HUP
+ kill_afs TERM
+ kill_afs ABRT
+ kill_afs KILL
+ echo "done."
+ else
+ echo '/usr/bin/lsof not found, not killing processes' >&2
+ fi
+ fi
+}
+
+
+case "$1" in
+start)
+ if is_on $AFS_CLIENT && test -x /sbin/afsd ; then
+ echo -n "Starting AFS services:"
+ if load_client ; then
+ start_client
+ $AFS_POST_INIT
+ else
+ echo ""
+ echo "Failed to load AFS kernel module, not starting AFS" >&2
+ exit 1
+ fi
+ fi
+ ;;
+
+force-start)
+ if test -x /sbin/afsd ; then
+ echo -n "Starting AFS services:"
+ if load_client ; then
+ start_client
+ $AFS_POST_INIT
+ else
+ echo ""
+ echo "Failed to load AFS kernel module, not starting AFS" >&2
+ exit 1
+ fi
+ fi
+ ;;
+
+stop|force-stop)
+ if is_loading_disabled ; then
+ echo "Module loading disabled, cannot stop AFS" >&2
+ exit 1
+ fi
+ $AFS_PRE_SHUTDOWN
+ echo -n "Stopping AFS services:"
+ if grep -q '^AFS ' /etc/mtab ; then
+ umount `grep ^'AFS ' /etc/mtab | awk '{ print $2 }'`
+ echo -n " afsd"
+ fi
+ if pidof /usr/sbin/afsd >/dev/null || pidof /sbin/afsd >/dev/null ; then
+ afsd -shutdown
+ fi
+
+ # If running with the -rmtsys option, afsd doesn't kill the rmtsys helper
+ # on afsd -shutdown. Run start-stop-daemon to make sure that everything
+ # is dead.
+ start-stop-daemon --stop --quiet --name afsd
+
+ LIBAFS=`/sbin/lsmod | awk 'BEGIN { FS = " " } /openafs/ { print $1 }'`
+ if [ -n "$LIBAFS" ] ; then
+ /sbin/rmmod $LIBAFS
+ echo -n " openafs"
+ fi
+ echo "."
+ ;;
+
+restart|force-reload)
+ "$0" stop
+ "$0" start
+ ;;
+
+*)
+ echo Usage: \
+ 'openafs-client {start|force-start|stop|restart|force-reload}' >&2
+ exit 1
+
+esac
diff --git a/debian/openafs-client.install b/debian/openafs-client.install
new file mode 100644
index 0000000..9818904
--- /dev/null
+++ b/debian/openafs-client.install
@@ -0,0 +1,265 @@
+debian/afs.conf etc/openafs
+
+debian/tmp/usr/bin/afsio usr/bin
+debian/tmp/usr/bin/afsmonitor usr/bin
+debian/tmp/usr/bin/bos usr/bin
+debian/tmp/usr/bin/cmdebug usr/bin
+debian/tmp/usr/bin/fs usr/bin
+debian/tmp/usr/bin/livesys usr/bin
+debian/tmp/usr/bin/pagsh usr/bin
+debian/tmp/usr/bin/pts usr/bin
+debian/tmp/usr/bin/restorevol usr/bin
+debian/tmp/usr/bin/scout usr/bin
+debian/tmp/usr/bin/sys usr/bin
+debian/tmp/usr/bin/tokens usr/bin
+debian/tmp/usr/bin/translate_et usr/bin
+debian/tmp/usr/bin/udebug usr/bin
+debian/tmp/usr/bin/unlog usr/bin
+debian/tmp/usr/bin/up usr/bin
+debian/tmp/usr/bin/xstat_cm_test usr/bin
+debian/tmp/usr/bin/xstat_fs_test usr/bin
+
+debian/tmp/usr/sbin/rxdebug usr/bin
+debian/tmp/usr/sbin/vos usr/bin
+
+debian/tmp/usr/sbin/backup usr/sbin
+debian/tmp/usr/sbin/butc usr/sbin
+debian/tmp/usr/sbin/fms usr/sbin
+debian/tmp/usr/sbin/fstrace usr/sbin
+debian/tmp/usr/sbin/rmtsysd usr/sbin
+
+debian/tmp/usr/sbin/afsd sbin
+
+debian/openafs-client-precheck usr/share/openafs
+debian/openafs-client-postcheck usr/share/openafs
+debian/CellServDB usr/share/openafs
+debian/tmp/usr/share/openafs/C/afszcm.cat usr/share/openafs/C
+
+debian/tmp/usr/share/man/man1/afs.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/afs-up.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/afsmonitor.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/cmdebug.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_apropos.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_bypassthreshold.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_checkservers.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_checkvolumes.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_cleanacl.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_copyacl.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_discon.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_diskfree.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_examine.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_exportafs.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_flush.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_flushall.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_flushmount.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_flushvolume.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_getcalleraccess.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_getcacheparms.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_getcellstatus.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_getfid.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_getclientaddrs.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_getcrypt.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_getserverprefs.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_getverify.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_help.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_listacl.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_listaliases.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_listcells.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_listquota.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_lsmount.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_messages.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_mkmount.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_monitor.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_newalias.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_newcell.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_nukenfscreds.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_precache.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_quota.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_rmmount.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_rxstatpeer.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_rxstatproc.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_setacl.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_setcachesize.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_setcbaddr.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_setcell.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_setclientaddrs.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_setcrypt.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_setquota.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_setserverprefs.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_setverify.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_setvol.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_storebehind.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_sysname.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_uuid.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_whereis.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_whichcell.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/fs_wscell.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/livesys.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/pagsh.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/pts.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/pts_adduser.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/pts_apropos.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/pts_chown.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/pts_creategroup.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/pts_createuser.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/pts_delete.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/pts_examine.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/pts_help.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/pts_interactive.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/pts_listentries.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/pts_listmax.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/pts_listowned.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/pts_membership.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/pts_quit.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/pts_removeuser.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/pts_rename.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/pts_setfields.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/pts_setmax.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/pts_sleep.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/pts_source.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/restorevol.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/rxdebug.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/scout.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/sys.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/tokens.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/translate_et.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/udebug.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/unlog.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_addsite.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_apropos.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_backup.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_backupsys.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_changeaddr.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_changeloc.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_clone.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_convertROtoRW.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_copy.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_create.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_delentry.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_dump.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_endtrans.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_examine.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_help.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_listaddrs.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_listpart.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_listvldb.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_listvol.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_lock.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_offline.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_online.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_move.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_partinfo.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_release.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_remaddrs.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_remove.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_remsite.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_rename.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_restore.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_setfields.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_shadow.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_size.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_setaddrs.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_status.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_syncserv.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_syncvldb.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_unlock.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_unlockvldb.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/vos_zap.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/xstat_cm_test.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/xstat_fs_test.1 usr/share/man/man1
+
+debian/tmp/usr/share/man/man5/CellAlias.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/CellServDB.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/NetInfo.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/NetRestrict.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/ThisCell.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/afs.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/afs_cache.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/afsmonitor.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/afszcm.cat.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/butc.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/butc_logs.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/cacheinfo.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/tapeconfig.5 usr/share/man/man5
+
+debian/tmp/usr/share/man/man8/afsd.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_adddump.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_addhost.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_addvolentry.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_addvolset.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_apropos.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_dbverify.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_deldump.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_deletedump.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_delhost.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_delvolentry.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_delvolset.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_diskrestore.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_dump.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_dumpinfo.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_help.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_interactive.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_jobs.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_kill.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_labeltape.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_listdumps.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_listhosts.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_listvolsets.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_quit.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_readlabel.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_restoredb.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_savedb.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_scantape.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_setexp.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_status.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_volinfo.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_volrestore.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/backup_volsetrestore.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_addhost.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_addkey.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_adduser.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_apropos.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_create.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_delete.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_exec.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_getdate.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_getlog.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_getrestart.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_getrestricted.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_help.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_install.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_listhosts.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_listkeys.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_listusers.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_prune.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_removehost.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_removekey.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_removeuser.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_restart.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_salvage.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_setauth.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_setcellname.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_setrestart.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_setrestricted.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_shutdown.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_start.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_startup.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_status.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_stop.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bos_uninstall.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/butc.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fms.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fstrace.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fstrace_apropos.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fstrace_clear.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fstrace_dump.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fstrace_help.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fstrace_lslog.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fstrace_lsset.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fstrace_setlog.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fstrace_setset.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/rmtsysd.8 usr/share/man/man8
diff --git a/debian/openafs-client.lintian-overrides b/debian/openafs-client.lintian-overrides
new file mode 100644
index 0000000..8986848
--- /dev/null
+++ b/debian/openafs-client.lintian-overrides
@@ -0,0 +1,10 @@
+# The AFS client cache should not be world-readable, since it may contain
+# files only readable by some of the local users based on their tokens.
+openafs-client: non-standard-dir-perm var/cache/openafs/ 0700 != 0755
+
+# These are virtual packages, and breaks is more correct than Conflicts
+# since upgrading to something that provides openafs-modules3 will fix
+# the problem but the packages can be co-installed from a file system
+# perspective.
+openafs-client: breaks-without-version openafs-modules1
+openafs-client: breaks-without-version openafs-modules2
diff --git a/debian/openafs-client.postinst b/debian/openafs-client.postinst
new file mode 100755
index 0000000..4025371
--- /dev/null
+++ b/debian/openafs-client.postinst
@@ -0,0 +1,105 @@
+#! /bin/sh
+
+set -e
+
+# Load debconf.
+. /usr/share/debconf/confmodule
+db_version 2.0
+
+# Create the standard AFS mount point if it doesn't exist.
+test -d /afs || mkdir /afs
+
+# Configure alternatives for pagsh and klog.
+update-alternatives --install /usr/bin/pagsh pagsh \
+ /usr/bin/pagsh.openafs 100 \
+ --slave /usr/share/man/man1/pagsh.1.gz pagsh.1.gz \
+ /usr/share/man/man1/pagsh.openafs.1.gz
+
+# Set the local cell. If ThisCell already exists, the config script will have
+# set the debconf database parameter accordingly.
+db_get openafs-client/thiscell
+THISCELL="$RET"
+if [ -n "$THISCELL" ] ; then
+ echo "$THISCELL" > /etc/openafs/ThisCell
+fi
+
+# On initial installation, or when afsdb is not configured, ensure that we
+# have a CellServDB file.
+db_get openafs-client/afsdb
+afsdb="$RET"
+if [ "$afsdb" = 'false' ] || { [ "$1" = 'configure' ] && [ -z "$2" ] ; } ; then
+ if [ ! -f /etc/openafs/CellServDB ] ; then
+ cp /usr/share/openafs/CellServDB /etc/openafs
+ fi
+fi
+
+# If ThisCell is not in CellServDB and the user is not using afsdb, we want to
+# prompt the user for the VLDB servers. Unfortunately, we can't do this in
+# config because we need the CellServDB file, which is part of the package.
+havecell=
+if [ -n "$THISCELL" ] ; then
+ if grep -qF "$THISCELL" /etc/openafs/CellServDB 2>/dev/null ; then
+ havecell=true
+ fi
+fi
+if [ "$afsdb" = 'false' ] && [ -z "$havecell" ] ; then
+ db_input critical openafs-client/cell-info || true
+ db_input high openafs-client/run-client || true
+ db_go
+ db_get openafs-client/cell-info
+ if [ "x$RET" != "x" ] ; then
+ echo ">$THISCELL" > /etc/openafs/CellServDB.new
+ perl -MSocket -e 'foreach (@ARGV) {' \
+ -e '@a=gethostbyname($_) and ' \
+ -e 'printf("%s\t\t# %s\n",inet_ntoa($a[4]),$a[0]) }' $RET \
+ >>/etc/openafs/CellServDB.new
+ if [ `wc -l </etc/openafs/CellServDB.new` -eq 1 ] ; then
+ echo 'None of the hostnames resolved to an address' 2>&1
+ db_reset openafs-client/cell-info || true
+ rm /etc/openafs/CellServDB.new
+ else
+ cat /etc/openafs/CellServDB.new /etc/openafs/CellServDB \
+ > /etc/openafs/CellServDB.tmp
+ mv /etc/openafs/CellServDB.tmp /etc/openafs/CellServDB
+ rm /etc/openafs/CellServDB.new
+ fi
+ fi
+fi
+
+# Our config script will have already taken care of extracting the cache size
+# from the cacheinfo file and using it as the default for the debconf prompt,
+# but the mount point and cache directory have no debconf prompts. For those,
+# we need to get the default from the file.
+mountpoint=/afs
+cachedir=/var/cache/openafs
+if [ -r /etc/openafs/cacheinfo ] ; then
+ IFS=: read mountpoint cachedir cachesize < /etc/openafs/cacheinfo
+fi
+db_get openafs-client/cachesize
+echo "${mountpoint}:${cachedir}:${RET}" > /etc/openafs/cacheinfo
+
+# Create the /etc/openafs/afs.conf.client configuration file, which stores
+# most of the debconf results.
+echo <<'EOF' > /etc/openafs/afs.conf.client
+# This file is managed by debconf. You may change the parameters set below,
+# but any additional lines or comments will be lost when the package is
+# upgraded or reconfigured. Local modifications other than setting the
+# following parameters should be made in /etc/openafs/afs.conf instead.
+
+EOF
+db_get openafs-client/run-client
+echo AFS_CLIENT="$RET" > /etc/openafs/afs.conf.client
+echo AFS_AFSDB="$afsdb" >> /etc/openafs/afs.conf.client
+db_get openafs-client/crypt
+echo AFS_CRYPT="$RET" >> /etc/openafs/afs.conf.client
+db_get openafs-client/dynroot
+echo AFS_DYNROOT="$RET" >> /etc/openafs/afs.conf.client
+db_get openafs-client/fakestat
+echo AFS_FAKESTAT="$RET" >> /etc/openafs/afs.conf.client
+
+# Prepopulate the systemd EnvironmentFile
+/usr/share/openafs/openafs-client-precheck
+
+#DEBHELPER#
+
+exit 0
diff --git a/debian/openafs-client.postrm b/debian/openafs-client.postrm
new file mode 100755
index 0000000..cc9e64f
--- /dev/null
+++ b/debian/openafs-client.postrm
@@ -0,0 +1,16 @@
+#! /bin/sh
+
+set -e
+
+# Remove configuration files and the /afs mount point that are created by the
+# normal postinst action.
+if [ "$1" = 'purge' ] ; then
+ rmdir /afs 2>/dev/null || true
+ for file in cacheinfo CellServDB ThisCell afs.conf.client ; do
+ rm -f "/etc/openafs/$file"
+ done
+ rm -f /var/cache/openafs-client/openafs-client.env
+ rm -f /var/cache/openafs-client/openafs-client.shutdown.env
+fi
+
+#DEBHELPER#
diff --git a/debian/openafs-client.preinst b/debian/openafs-client.preinst
new file mode 100755
index 0000000..b7e1f04
--- /dev/null
+++ b/debian/openafs-client.preinst
@@ -0,0 +1,11 @@
+#!/bin/sh
+
+set -e
+
+if [ "$1" = upgrade ] && dpkg --compare-versions "$2" lt "1.8.0~"; then
+ update-alternatives --remove klog /usr/bin/klog.afs
+fi
+
+#DEBHELPER#
+
+exit 0
diff --git a/debian/openafs-client.prerm b/debian/openafs-client.prerm
new file mode 100755
index 0000000..fb8b2d8
--- /dev/null
+++ b/debian/openafs-client.prerm
@@ -0,0 +1,11 @@
+#!/bin/sh
+
+set -e
+
+if [ "$1" = remove ] || [ "$1" = deconfigure ] ; then
+ update-alternatives --remove pagsh /usr/bin/pagsh.openafs
+fi
+
+#DEBHELPER#
+
+exit 0
diff --git a/debian/openafs-client.service b/debian/openafs-client.service
new file mode 100755
index 0000000..2b203fd
--- /dev/null
+++ b/debian/openafs-client.service
@@ -0,0 +1,26 @@
+[Unit]
+Description=OpenAFS client
+Wants=network-online.target
+After=network.target network-online.target local-fs.target sysinit.target
+Before=remote-fs.target umount.target
+DefaultDependencies=no
+
+[Service]
+Type=forking
+RemainAfterExit=true
+ExecStartPre=/usr/share/openafs/openafs-client-precheck
+ExecStart=/sbin/afsd $AFSD_ARGS
+ExecStartPost=/usr/bin/fs setcrypt $AFS_SETCRYPT
+ExecStartPost=/usr/bin/fs sysname $AFS_SYSNAME
+ExecStop=/bin/grep -qv ^1$ /proc/sys/kernel/modules_disabled
+ExecStop=/usr/share/openafs/openafs-client-postcheck
+ExecStop=/bin/umount -a -t afs
+ExecStop=/bin/umount -af -t afs
+ExecStopPost=/sbin/rmmod $KMOD
+EnvironmentFile=/var/cache/openafs-client/openafs-client.env
+EnvironmentFile=-/var/cache/openafs-client/openafs-client.shutdown.env
+KillMode=none
+GuessMainPID=no
+
+[Install]
+WantedBy=multi-user.target remote-fs.target
diff --git a/debian/openafs-client.templates b/debian/openafs-client.templates
new file mode 100644
index 0000000..6df69f6
--- /dev/null
+++ b/debian/openafs-client.templates
@@ -0,0 +1,92 @@
+Template: openafs-client/cell-info
+Type: string
+_Description: DB server host names for your home cell:
+ AFS uses the file /etc/openafs/CellServDB to hold the list of servers that
+ should be contacted to find parts of a cell. The cell you claim this
+ workstation belongs to is not in that file. Enter the host names of the
+ database servers separated by spaces. IMPORTANT: If you are creating a new
+ cell and this machine is to be a database server in that cell, only enter
+ this machine's name; add the other servers later after they are
+ functioning. Also, do not enable the AFS client to start at boot on this
+ server until the cell is configured. When you are ready you can edit
+ /etc/openafs/afs.conf.client to enable the client.
+
+Template: openafs-client/thiscell
+Type: string
+_Description: AFS cell this workstation belongs to:
+ AFS filespace is organized into cells or administrative domains.
+ Each workstation belongs to one cell. Usually the cell is the DNS
+ domain name of the site.
+
+Template: openafs-client/cachesize
+Type: string
+Default: 50000
+_Description: Size of AFS cache in kB:
+ AFS uses an area of the disk to cache remote files for faster
+ access. This cache will be mounted on /var/cache/openafs. It is
+ important that the cache not overfill the partition it is located
+ on. Often, people find it useful to dedicate a partition to their
+ AFS cache.
+
+Template: openafs-client/run-client
+Type: boolean
+Default: true
+_Description: Run Openafs client now and at boot?
+ Normally, most users who install the openafs-client package expect AFS to
+ be mounted automatically at boot. However, if you are planning on
+ setting up a new cell or are on a laptop, you may not want it started at
+ boot time. If you choose not to start AFS at boot, run
+ service openafs-client force-start to start the client when you wish
+ to run it.
+
+Template: openafs-client/afsdb
+Type: boolean
+Default: true
+_Description: Look up AFS cells in DNS?
+ In order to contact an AFS cell, you need the IP addresses of the cell's
+ database servers. Normally, this information is read from
+ /etc/openafs/CellServDB. However, if Openafs cannot find a cell in that
+ file, it can use DNS to look for AFSDB records that contain the
+ information.
+
+Template: openafs-client/crypt
+Type: boolean
+Default: true
+_Description: Encrypt authenticated traffic with AFS fileserver?
+ AFS provides a weak form of encryption that can optionally be used between
+ a client and the fileservers. While this encryption is weaker than DES
+ and thus is not sufficient for highly confidential data, it does provide
+ some confidentiality and is likely to make the job of a casual attacker
+ significantly more difficult.
+
+Template: openafs-client/dynroot
+Type: select
+__Choices: Yes, Sparse, No
+Default: Yes
+_Description: Dynamically generate the contents of /afs?
+ /afs generally contains an entry for each cell that a client can talk to.
+ Traditionally, these entries were generated by servers in the client's
+ home cell. However, OpenAFS clients can generate the contents of /afs
+ dynamically based on the contents of /etc/openafs/CellServDB and DNS.
+ .
+ If you generate /afs dynamically, you may need to create
+ /etc/openafs/CellAlias to include aliases for common cells. (The syntax
+ of this file is one line per alias, with the cell name, a space, and then
+ the alias for that cell.)
+ .
+ The Sparse option is the same as Yes except that, rather than populating
+ /afs from /etc/openafs/CellServDB immediately, cells other than the local
+ cell will not appear until they are accessed. Cell aliases as set in the
+ CellAlias file are shown as normal, although they may appear to be
+ dangling links until traversed.
+
+Template: openafs-client/fakestat
+Type: boolean
+Default: true
+_Description: Use fakestat to avoid hangs when listing /afs?
+ Because AFS is a global file space, operations on the /afs directory can
+ generate significant network traffic. If some AFS cells are unavailable
+ then looking at /afs using ls or a graphical file browser may hang your
+ machine for minutes. AFS has an option to simulate answers to these
+ operations locally to avoid these hangs. You want this option under most
+ circumstances.
diff --git a/debian/openafs-dbserver.NEWS b/debian/openafs-dbserver.NEWS
new file mode 100644
index 0000000..a8b5f96
--- /dev/null
+++ b/debian/openafs-dbserver.NEWS
@@ -0,0 +1,20 @@
+openafs-dbserver (1.4.7.dfsg1-1) unstable; urgency=low
+
+ If you are upgrading from one of the 1.4.7 pre-releases, be aware that
+ there was a serious bug in those versions that could cause Ubik database
+ entries to be lost if all database servers were restarted at the same
+ time. You should restart each database server in turn, one at a time,
+ to pick up the new 1.4.7 binaries before the next nightly restart.
+
+ Only 1.4.7 pre-releases were affected by this problem. If you are
+ upgrading from an older version, you should not have to take special
+ precautions.
+
+ You may also want to turn off any general restart for your servers with:
+
+ bos setrestart -server <server> -time never -general
+
+ This was an old defense against memory leaks and is no longer needed.
+
+ -- Russ Allbery <rra@debian.org> Fri, 09 May 2008 10:24:48 -0700
+
diff --git a/debian/openafs-dbserver.dirs b/debian/openafs-dbserver.dirs
new file mode 100644
index 0000000..8d53566
--- /dev/null
+++ b/debian/openafs-dbserver.dirs
@@ -0,0 +1,4 @@
+usr/share/doc
+var/lib/openafs/db
+usr/share/man/man8
+usr/sbin
diff --git a/debian/openafs-dbserver.install b/debian/openafs-dbserver.install
new file mode 100644
index 0000000..9c15c99
--- /dev/null
+++ b/debian/openafs-dbserver.install
@@ -0,0 +1,28 @@
+debian/tmp/usr/sbin/prdb_check usr/sbin
+debian/tmp/usr/sbin/pt_util usr/sbin
+debian/tmp/usr/sbin/read_tape usr/sbin
+debian/tmp/usr/sbin/vldb_check usr/sbin
+
+debian/afs-rootvol usr/sbin
+debian/afs-newcell usr/sbin
+
+debian/tmp/usr/lib/openafs/buserver usr/lib/openafs
+debian/tmp/usr/lib/openafs/ptserver usr/lib/openafs
+debian/tmp/usr/lib/openafs/vlserver usr/lib/openafs
+
+debian/ConfigUtils.pm usr/share/perl5/Debian/OpenAFS
+
+debian/tmp/usr/share/man/man5/BackupLog.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/VLLog.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/PtLog.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/bdb.DB0.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/prdb.DB0.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/vldb.DB0.5 usr/share/man/man5
+
+debian/tmp/usr/share/man/man8/buserver.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/prdb_check.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/pt_util.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/ptserver.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/read_tape.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/vldb_check.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/vlserver.8 usr/share/man/man8
diff --git a/debian/openafs-dbserver.lintian-overrides b/debian/openafs-dbserver.lintian-overrides
new file mode 100644
index 0000000..cf65ecb
--- /dev/null
+++ b/debian/openafs-dbserver.lintian-overrides
@@ -0,0 +1,3 @@
+# The database directory should be kept locked down to prevent reading
+# database information that may not be accessible without authentication.
+openafs-dbserver: non-standard-dir-perm var/lib/openafs/db/ 0700 != 0755
diff --git a/debian/openafs-dbserver.postrm b/debian/openafs-dbserver.postrm
new file mode 100755
index 0000000..2c225dd
--- /dev/null
+++ b/debian/openafs-dbserver.postrm
@@ -0,0 +1,17 @@
+#! /bin/sh
+
+set -e
+
+# Purges the database and log files created by the package. We assume that
+# it's safe to do this for database files since they're normally transferred
+# via Ubik to other hosts.
+if [ "$1" = 'purge' ] ; then
+ for file in prdb.DB0 prdb.DBSYS1 vldb.DB0 vldb.DBSYS1 ; do
+ rm -f "/var/lib/openafs/db/$file"
+ done
+ for file in PtLog PtLog.old VLLog VLLog.old ; do
+ rm -f "/var/log/openafs/$file"
+ done
+fi
+
+#DEBHELPER#
diff --git a/debian/openafs-dbserver.preinst b/debian/openafs-dbserver.preinst
new file mode 100755
index 0000000..135b7be
--- /dev/null
+++ b/debian/openafs-dbserver.preinst
@@ -0,0 +1,14 @@
+#!/bin/sh
+
+set -e
+
+# In version 1.6.3-1, we switched from symlinking the doc directory to
+# openafs-client to having our own doc directory so that we could weaken the
+# versioned dependency. dpkg doesn't remove symlinks on upgrade, so we need
+# to remove the symlink in preinst to avoid overwriting the old files.
+#
+# This cleanup can be removed after the jessie release.
+test ! -L /usr/share/doc/openafs-dbserver \
+ || rm /usr/share/doc/openafs-dbserver
+
+#DEBHELPER#
diff --git a/debian/openafs-doc.README.Debian b/debian/openafs-doc.README.Debian
new file mode 100644
index 0000000..01d3e15
--- /dev/null
+++ b/debian/openafs-doc.README.Debian
@@ -0,0 +1,21 @@
+OpenAFS Documentation for Debian
+--------------------------------
+
+Included in this package are the original Transarc AFS manuals with small
+modifications. This is the best available comprehensive documentation for
+OpenAFS, but please be aware that this documentation has not been updated
+to reflect the changes made to OpenAFS since the original public release.
+Work on this is ongoing upstream, and newer documentation will be packaged
+as soon as it is available.
+
+All of the manuals are included because, even including significant
+portions that are not relevant to Debian, because they all do contain some
+valuable information. Debian users should ignore the installation
+information and much of the Quick Start Guide in favor of the
+documentation that comes with the Debian OpenAFS packages.
+
+The AFS protocol information included here is dated and may not be
+accurate in all details, but is the best protocol information currently
+available.
+
+ -- Russ Allbery <rra@debian.org>, Mon, 14 Jun 2010 18:18:35 -0700
diff --git a/debian/openafs-doc.doc-base.openafs-admin b/debian/openafs-doc.doc-base.openafs-admin
new file mode 100644
index 0000000..8f33c78
--- /dev/null
+++ b/debian/openafs-doc.doc-base.openafs-admin
@@ -0,0 +1,14 @@
+Document: openafs-admin
+Title: AFS Administrator's Guide
+Author: IBM
+Abstract: Describes concepts and procedures for an AFS cell administrator.
+ This is a somewhat outdated guide to configuring and administering an AFS
+ cell and an introduction to AFS for those considering running it.
+Section: File Management
+
+Format: HTML
+Index: /usr/share/doc/openafs-doc/html/AdminGuide/index.html
+Files: /usr/share/doc/openafs-doc/html/AdminGuide/*
+
+Format: PDF
+Files: /usr/share/doc/openafs-doc/auagd000.pdf.gz
diff --git a/debian/openafs-doc.doc-base.openafs-quick b/debian/openafs-doc.doc-base.openafs-quick
new file mode 100644
index 0000000..1d29ba6
--- /dev/null
+++ b/debian/openafs-doc.doc-base.openafs-quick
@@ -0,0 +1,14 @@
+Document: openafs-quick
+Title: AFS Quick Start Guide for UNIX
+Author: IBM
+Abstract: Initial setup and configuration documentation for AFS on Unix
+ platforms. Debian users can ignore most of the installation information,
+ but the configuration information is still useful.
+Section: File Management
+
+Format: HTML
+Index: /usr/share/doc/openafs-doc/html/QuickStartUnix/index.html
+Files: /usr/share/doc/openafs-doc/html/QuickStartUnix/*
+
+Format: PDF
+Files: /usr/share/doc/openafs-doc/auqbg000.pdf.gz
diff --git a/debian/openafs-doc.doc-base.openafs-user b/debian/openafs-doc.doc-base.openafs-user
new file mode 100644
index 0000000..2e5f5e7
--- /dev/null
+++ b/debian/openafs-doc.doc-base.openafs-user
@@ -0,0 +1,13 @@
+Document: openafs-user
+Title: AFS User's Guide
+Author: IBM
+Abstract: Introduction and documentation of AFS for the end-user. This is
+ the best document for people who will be using but not administering AFS.
+Section: File Management
+
+Format: HTML
+Index: /usr/share/doc/openafs-doc/html/UserGuide/index.html
+Files: /usr/share/doc/openafs-doc/html/UserGuide/*
+
+Format: PDF
+Files: /usr/share/doc/openafs-doc/auusg000.pdf.gz
diff --git a/debian/openafs-doc.docs b/debian/openafs-doc.docs
new file mode 100644
index 0000000..311b84f
--- /dev/null
+++ b/debian/openafs-doc.docs
@@ -0,0 +1,3 @@
+doc/txt/dafs-overview.txt
+doc/txt/fssync.txt
+doc/txt/ka2heim.txt
diff --git a/debian/openafs-doc.examples b/debian/openafs-doc.examples
new file mode 100644
index 0000000..38f1f74
--- /dev/null
+++ b/debian/openafs-doc.examples
@@ -0,0 +1 @@
+doc/txt/examples/CellAlias
diff --git a/debian/openafs-fileserver.NEWS b/debian/openafs-fileserver.NEWS
new file mode 100644
index 0000000..5cf08a6
--- /dev/null
+++ b/debian/openafs-fileserver.NEWS
@@ -0,0 +1,127 @@
+openafs (1.8.0~pre4-1) unstable; urgency=low
+
+ * Servers no longer use rxkad.keytab for long-term keys, which are
+ now stored in KeyFileExt. Administrators must use akeyconvert
+ or similar tooling to populate the KeyFileExt. In most cases,
+ `akeyconvert` with no arguments will suffice, and krb5 keys
+ can still be managed (and periodically updated) in the rxkad.keytab.
+ `akeyconvert` is run automatically in the post-install script.
+ * Server log handling has changed. Logs are not truncated at
+ startup by default, and are re-opened on SIGUSR1, to be compatible
+ with external log rotation tools.
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Tue, 13 Dec 2016 01:49:46 -0500
+
+openafs (1.6.5-1) unstable; urgency=high
+
+ The DES keys used by all previous versions of OpenAFS are not
+ sufficiently strong to be secure. As of this release, all OpenAFS
+ servers support using stronger long-term keys than DES. All sites are
+ strongly encouraged to rekey their AFS cells after deploying the new
+ version of the AFS server software on all AFS file server and AFS
+ database server machines.
+
+ To do so, generate a new set of keys for the afs/<cell> principal for
+ your site and store those keys in /etc/openafs/server/rxkad.keytab on
+ all file server and database server machines and then restart the server
+ processes to upgrade the strength of server-to-server connections.
+ After all existing AFS tokens have expired, you can then move the
+ KeyFile aside, which will invalidate all old, existing DES tokens.
+
+ If you are using Heimdal as your Kerberos KDC, you need to ensure that
+ the afs/<cell> key includes a des-cbc-crc enctype (to allow for session
+ keys), but you should remove all DES keys from the keytab before
+ deploying it as rxkad.keytab.
+
+ These are only abbreviated instructions and don't include some relevant
+ details. If possible, please study and follow the more comprehensive
+ instructions available at:
+
+ http://www.openafs.org/pages/security/install-rxkad-k5-1.6.txt
+ http://www.openafs.org/pages/security/how-to-rekey.txt
+
+ linked from <http://www.openafs.org/security/>.
+
+ -- Russ Allbery <rra@debian.org> Wed, 24 Jul 2013 12:08:46 -0700
+
+openafs (1.5.77-1) experimental; urgency=low
+
+ This version of the OpenAFS file server includes a version built with
+ demand-attach, but as binaries with a different name.
+
+ Demand-attach completely changes how the file server shuts down and
+ starts up. Instead of detaching all volumes on shutdown and reattaching
+ them on startup, the file server saves state to disk and restores state
+ when starting, enabling it to start far faster. Volumes are only
+ attached when used and are detached again if they go unused for an
+ extended period. Volumes can also be salvaged on demand.
+
+ Demand-attach is recommended for new deployments and for evaluation in
+ current production deployments, but requires a change to your bos
+ configuration to use. If you want to switch your file server to
+ demand-attach, run:
+
+ bos status localhost -instance fs -long
+
+ and take note of the flags that you're using with the fileserver and
+ volserver. Then, run:
+
+ bos stop localhost fs -localauth
+ bos delete localhost fs -localauth
+ bos create localhost dafs dafs \
+ "/usr/lib/openafs/dafileserver <fileserver-flags>" \
+ "/usr/lib/openafs/davolserver <volserver-flags>" \
+ /usr/lib/openafs/salvageserver /usr/lib/openafs/dasalvager
+
+ to create the correct new BosConfig entry for demand-attach AFS.
+
+ If you were running an earlier version of the experimental
+ openafs-filserver package, the way that demand-attach was handled has
+ changed and you have to change your bos configuration to use the new
+ demand-attach binary names. Run:
+
+ bos stop localhost dafs -localauth
+ bos delete localhost dafs -localauth
+
+ and then run the bos create command above. This only applies to users
+ of the previous experimental packages, not to upgrades from unstable.
+
+ -- Russ Allbery <rra@debian.org> Tue, 21 Sep 2010 14:08:04 -0700
+
+openafs (1.5.73.3-1) experimental; urgency=low
+
+ As of this release, the default permissions for /etc/openafs/server are
+ now 0755, matching upstream. The only file in that directory that needs
+ to be kept secure is KeyFile, which is created with 0600 permissions.
+ The directory permissions won't be changed on upgrade, so bosserver will
+ complain now that it is no longer patched to permit restrictive
+ permissions. Once you're certain the per-file permissions of all files
+ in that directory are safe, chmod 755 /etc/openafs/server to make
+ bosserver happy.
+
+ -- Russ Allbery <rra@debian.org> Tue, 06 Apr 2010 14:51:52 -0700
+
+openafs (1.4.4.dfsg1-4) unstable; urgency=low
+
+ The files previously located in /etc/openafs/server-local have been
+ moved to /var/lib/openafs/local. The OpenAFS fileserver and bosserver
+ write files to this directory on startup which are not configuration
+ files and therefore, per the File Hierarchy Standard, should not be in
+ /etc. Any sysid, sysid.old, NetInfo, and NetRestrict files in
+ /etc/openafs/server-local have been copied to /var/lib/openafs/local.
+
+ upserver and upclient have moved to /usr/lib/openafs (from /usr/sbin) to
+ match the other programs intended to be run by the bosserver and to
+ match upstream's layout. If you're running upserver or upclient from
+ bosserver, BosConfig has been updated with the new path, but the
+ services have not been restarted.
+
+ At your convenience, you should restart your servers with:
+
+ bos restart -all -bosserver
+
+ so that the running servers will look at the new locations. After doing
+ so, you may remove /etc/openafs/server-local if you wish.
+
+ -- Russ Allbery <rra@debian.org> Tue, 19 Jun 2007 03:51:58 -0700
+
diff --git a/debian/openafs-fileserver.config b/debian/openafs-fileserver.config
new file mode 100755
index 0000000..59ede70
--- /dev/null
+++ b/debian/openafs-fileserver.config
@@ -0,0 +1,27 @@
+#!/bin/sh
+
+set -e
+
+. /usr/share/debconf/confmodule
+db_version 2.0
+
+# Warn anyone who's trying to run the file server on alpha.
+arch=`dpkg --print-architecture`
+if [ "$arch" = "alpha" ] ; then
+ db_input high openafs-fileserver/alpha-broken || true
+fi
+
+# Configure the local cell. Ignore errors on read since it may fail if
+# there's no newline in the file. Default to the server ThisCell file and, if
+# that fails, the configured client cell.
+if [ -r /etc/openafs/server/ThisCell ] ; then
+ read cell < /etc/openafs/server/ThisCell || true
+ db_set openafs-fileserver/thiscell "$cell"
+fi
+db_get openafs-fileserver/thiscell || true
+if [ "x$RET" = "x" ] ; then
+ db_get openafs-client/thiscell || true
+ db_set openafs-fileserver/thiscell "$RET"
+fi
+db_input low openafs-fileserver/thiscell || true
+db_go
diff --git a/debian/openafs-fileserver.dirs b/debian/openafs-fileserver.dirs
new file mode 100644
index 0000000..e49f64f
--- /dev/null
+++ b/debian/openafs-fileserver.dirs
@@ -0,0 +1,4 @@
+usr/share/doc
+var/log/openafs
+etc/openafs/server
+var/lib/openafs/local
diff --git a/debian/openafs-fileserver.init b/debian/openafs-fileserver.init
new file mode 100755
index 0000000..ea1b41f
--- /dev/null
+++ b/debian/openafs-fileserver.init
@@ -0,0 +1,139 @@
+#! /bin/sh
+### BEGIN INIT INFO
+# Provides: openafs-fileserver
+# Required-Start: $remote_fs $network $time $named
+# Required-Stop: $remote_fs $network
+# Default-Start: 2 3 4 5
+# Default-Stop: 0 1 6
+# Short-Description: OpenAFS file and database server manager
+# Description: Starts, stops, or restarts the OpenAFS bosserver,
+# which is the process that starts and manages the
+# OpenAFS file server or database servers depending on
+# its configuration.
+### END INIT INFO
+
+# Author: Sam Hartman <hartmans@mit.edu>
+# Author: Russ Allbery <rra@debian.org>
+#
+# Based on the /etc/init.d/skeleton template as found in initscripts version
+# 2.86.ds1-15.
+
+PATH=/sbin:/bin:/usr/sbin:/usr/bin
+DESC="OpenAFS BOS server"
+NAME=bosserver
+DAEMON=/usr/sbin/bosserver
+DAEMON_ARGS=""
+SCRIPTNAME=/etc/init.d/openafs-fileserver
+
+# Exit if the package is not installed and we were not given the status option.
+if [ ! -x "$DAEMON" ] && [ "status" != "$1" ] ; then
+ exit 0
+fi
+
+# Read configuration if it is present.
+[ -r /etc/default/openafs-fileserver ] && . /etc/default/openafs-fileserver
+
+# Get the setting of VERBOSE and other rcS variables.
+[ -f /etc/default/rcS ] && . /etc/default/rcS
+
+# Define LSB log functions (requires lsb-base >= 3.0-6).
+. /lib/lsb/init-functions
+
+# Make sure we don't leave file descriptors open.
+exec 3>/dev/null
+exec </dev/null
+
+# Return
+# 0 if daemon has been started
+# 1 if daemon was already running
+# 2 if daemon could not be started
+do_start()
+{
+ start-stop-daemon --start --quiet --startas $DAEMON --name $NAME --test \
+ > /dev/null || return 1
+ start-stop-daemon --start --quiet --startas $DAEMON --name $NAME \
+ -- $DAEMON_ARGS || return 2
+}
+
+# Return
+# 0 if daemon has been stopped
+# 1 if daemon was already stopped
+# 2 if daemon could not be stopped
+# other if a failure occurred
+do_stop()
+{
+ start-stop-daemon --stop --quiet --retry=TERM/30/KILL/5 --name $NAME
+}
+
+case "$1" in
+ start)
+ [ "$VERBOSE" != no ] && log_daemon_msg "Starting $DESC" "$NAME"
+ do_start
+ case "$?" in
+ 0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;;
+ 2) [ "$VERBOSE" != no ] && log_end_msg 1 ;;
+ esac
+ ;;
+
+ stop)
+ [ "$VERBOSE" != no ] && log_action_msg "Stopping OpenAFS services"
+ bos shutdown localhost -wait -localauth
+ [ "$VERBOSE" != no ] && log_daemon_msg "Stopping $DESC" "$NAME"
+ do_stop
+ case "$?" in
+ 0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;;
+ 2) [ "$VERBOSE" != no ] && log_end_msg 1 ;;
+ esac
+ ;;
+
+ restart|force-reload)
+ [ "$VERBOSE" != no ] && log_daemon_msg "Restarting $DESC" "$NAME"
+ start-stop-daemon --start --quiet --startas $DAEMON --name $NAME --test \
+ > /dev/null
+ case "$?" in
+ 0)
+ do_start
+ case "$?" in
+ 0) [ "$VERBOSE" != no ] && log_end_msg 0 ;;
+ *) [ "$VERBOSE" != no ] && log_end_msg 1 ;;
+ esac
+ ;;
+ 1)
+ bos restart localhost -all -bosserver -localauth
+ case "$?" in
+ 0) [ "$VERBOSE" != no ] && log_end_msg 0 ;;
+ *) [ "$VERBOSE" != no ] && log_end_msg 1 ;;
+ esac
+ ;;
+ *)
+ log_end_msg 1
+ ;;
+ esac
+ ;;
+
+ status)
+ start-stop-daemon --start --quiet --startas $DAEMON --name $NAME --test \
+ > /dev/null
+ case "$?" in
+ 0)
+ echo "$NAME is not running"
+ exit 3
+ ;;
+ 1)
+ echo "$NAME is running"
+ exit 0
+ ;;
+ *)
+ log_warning_msg "Cannot determine if $NAME is running"
+ exit 4
+ ;;
+ esac
+ ;;
+
+ *)
+ echo "Usage: $SCRIPTNAME {start|stop|restart|force-reload|status}" >&2
+ exit 3
+ ;;
+esac
+
+exit 0
diff --git a/debian/openafs-fileserver.install b/debian/openafs-fileserver.install
new file mode 100644
index 0000000..9c08fff
--- /dev/null
+++ b/debian/openafs-fileserver.install
@@ -0,0 +1,94 @@
+debian/tmp/usr/sbin/bos_util usr/sbin
+debian/tmp/usr/sbin/bosserver usr/sbin
+debian/tmp/usr/sbin/dafssync-debug usr/sbin
+debian/tmp/usr/sbin/fssync-debug usr/sbin
+debian/tmp/usr/sbin/salvsync-debug usr/sbin
+debian/tmp/usr/sbin/state_analyzer usr/sbin
+debian/tmp/usr/sbin/voldump usr/sbin
+debian/tmp/usr/sbin/volinfo usr/sbin
+debian/tmp/usr/sbin/volscan usr/sbin
+
+debian/tmp/usr/lib/openafs/dafileserver usr/lib/openafs
+debian/tmp/usr/lib/openafs/dasalvager usr/lib/openafs
+debian/tmp/usr/lib/openafs/davolserver usr/lib/openafs
+debian/tmp/usr/lib/openafs/fileserver usr/lib/openafs
+debian/tmp/usr/lib/openafs/salvager usr/lib/openafs
+debian/tmp/usr/lib/openafs/salvageserver usr/lib/openafs
+debian/tmp/usr/lib/openafs/upclient usr/lib/openafs
+debian/tmp/usr/lib/openafs/upserver usr/lib/openafs
+debian/tmp/usr/lib/openafs/volserver usr/lib/openafs
+
+debian/tmp/usr/share/man/man5/BosConfig.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/BosLog.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/FORCESALVAGE.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/FileLog.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/KeyFile.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/KeyFileExt.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/NoAuth.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/SALVAGE.fs.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/SalvageLog.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/UserList.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/VolserLog.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/afs_volume_header.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/krb.conf.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/krb.excl.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/salvage.lock.5 usr/share/man/man5
+debian/tmp/usr/share/man/man5/sysid.5 usr/share/man/man5
+
+debian/tmp/usr/share/man/man8/bos_util.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/bosserver.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/dafileserver.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/dafssync-debug.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/dafssync-debug_attach.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/dafssync-debug_callback.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/dafssync-debug_detach.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/dafssync-debug_error.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/dafssync-debug_header.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/dafssync-debug_leaveoff.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/dafssync-debug_list.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/dafssync-debug_mode.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/dafssync-debug_move.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/dafssync-debug_offline.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/dafssync-debug_online.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/dafssync-debug_query.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/dafssync-debug_stats.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/dafssync-debug_vgcadd.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/dafssync-debug_vgcdel.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/dafssync-debug_vgcquery.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/dafssync-debug_vgcscan.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/dafssync-debug_vgcscanall.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/dafssync-debug_vnode.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/dafssync-debug_volop.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/dasalvager.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/davolserver.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fileserver.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fssync-debug.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fssync-debug_attach.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fssync-debug_callback.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fssync-debug_detach.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fssync-debug_error.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fssync-debug_header.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fssync-debug_leaveoff.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fssync-debug_list.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fssync-debug_mode.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fssync-debug_move.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fssync-debug_offline.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fssync-debug_online.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fssync-debug_query.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fssync-debug_stats.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fssync-debug_vgcadd.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fssync-debug_vgcdel.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fssync-debug_vgcquery.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fssync-debug_vgcscan.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fssync-debug_vgcscanall.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fssync-debug_vnode.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/fssync-debug_volop.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/salvager.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/salvageserver.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/state_analyzer.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/upclient.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/upserver.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/voldump.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/volinfo.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/volscan.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/volserver.8 usr/share/man/man8
diff --git a/debian/openafs-fileserver.lintian-overrides b/debian/openafs-fileserver.lintian-overrides
new file mode 100644
index 0000000..66c4ae7
--- /dev/null
+++ b/debian/openafs-fileserver.lintian-overrides
@@ -0,0 +1,5 @@
+# /var/lib/openafs/local contains the fssync.sock file used to coordinate
+# volume actions between the fileserver and the volserver so upstream
+# wants it to be locked down. Probably doesn't matter on Linux, but if we
+# diverge, we either have to patch bosserver or it complains.
+openafs-fileserver: non-standard-dir-perm var/lib/openafs/local/ 0700 != 0755
diff --git a/debian/openafs-fileserver.postinst b/debian/openafs-fileserver.postinst
new file mode 100755
index 0000000..cf3724d
--- /dev/null
+++ b/debian/openafs-fileserver.postinst
@@ -0,0 +1,29 @@
+#!/bin/sh
+
+set -e
+
+. /usr/share/debconf/confmodule
+db_version 2.0
+
+# Configure the local cell for the file server.
+db_get openafs-fileserver/thiscell
+echo $RET >/etc/openafs/server/ThisCell
+
+# If there is no local server CellServDB, construct it from the client
+# CellServDB by looking for the local cell. If that fails, create a minimal
+# CellServDB for the server with no information.
+if [ ! -f /etc/openafs/server/CellServDB ] ; then
+ sed -n "/^>$RET/,/^>/p" /etc/openafs/CellServDB | sed '$d' \
+ >/etc/openafs/server/CellServDB
+ if [ ! -s /etc/openafs/server/CellServDB ] ; then
+ echo ">$RET" >/etc/openafs/server/CellServDB
+ fi
+fi
+
+if [ -r /etc/openafs/server/rxkad.keytab ] ; then
+ akeyconvert
+fi
+
+#DEBHELPER#
+
+exit 0
diff --git a/debian/openafs-fileserver.postrm b/debian/openafs-fileserver.postrm
new file mode 100755
index 0000000..4d20ea9
--- /dev/null
+++ b/debian/openafs-fileserver.postrm
@@ -0,0 +1,27 @@
+#!/bin/sh
+
+set -e
+
+# Purge various extra configuration files and data files created by the
+# package. Whether to purge KeyFile is a bit iffy since the user created it
+# with asetkey or with bos addkey, but it always exists for any running server
+# and we shouldn't be losing any critical data.
+#
+# We intentionally don't remove NetInfo and NetRestrict in
+# /var/lib/openafs/local since those are created separately by the user and
+# may contain information not stored elsewhere.
+if [ "$1" = 'purge' ] ; then
+ for file in CellServDB CellServDB.old KeyFile ThisCell UserList ; do
+ rm -f "/etc/openafs/server/$file"
+ done
+ for file in SALVAGE.fs fssync.sock salvage.lock sysid sysid.old ; do
+ rm -f "/var/lib/openafs/local/$file"
+ done
+ rm -f /etc/openafs/BosConfig
+ for file in BosLog FileLog SalvageLog VolserLog ; do
+ rm -f "/var/log/openafs/$file"
+ rm -f "/var/log/openafs/$file.old"
+ done
+fi
+
+#DEBHELPER#
diff --git a/debian/openafs-fileserver.preinst b/debian/openafs-fileserver.preinst
new file mode 100755
index 0000000..92666b9
--- /dev/null
+++ b/debian/openafs-fileserver.preinst
@@ -0,0 +1,15 @@
+#!/bin/sh
+
+set -e
+
+# lenny versions of openafs-fileserver symlinked the doc directory to
+# openafs-client. This was changed in 1.4.12+dfsg-1, but the symlink was
+# never removed, and dpkg won't remove symlinks to a directory. Belatedly
+# clean up so that we don't overwrite doc files in openafs-client.
+#
+# This cleanup was added in 1.6.2~pre2-1 and can be removed after the jessie
+# release.
+test ! -L /usr/share/doc/openafs-fileserver \
+ || rm /usr/share/doc/openafs-fileserver
+
+#DEBHELPER#
diff --git a/debian/openafs-fileserver.service b/debian/openafs-fileserver.service
new file mode 100755
index 0000000..aba59a3
--- /dev/null
+++ b/debian/openafs-fileserver.service
@@ -0,0 +1,13 @@
+[Unit]
+Description=OpenAFS file and database server manager
+Wants=network-online.target
+After=network.target network-online.target local-fs.target
+
+[Service]
+Type=simple
+EnvironmentFile=-/etc/default/openafs-fileserver
+ExecStart=/usr/sbin/bosserver -nofork $DAEMON_ARGS
+ExecStop=/usr/bin/bos shutdown localhost -wait -localauth
+
+[Install]
+WantedBy=multi-user.target
diff --git a/debian/openafs-fileserver.templates b/debian/openafs-fileserver.templates
new file mode 100644
index 0000000..0764eb7
--- /dev/null
+++ b/debian/openafs-fileserver.templates
@@ -0,0 +1,14 @@
+Template: openafs-fileserver/thiscell
+Type: string
+_Description: Cell this server serves files for:
+ AFS fileservers belong to a cell. They have the key for that cell's
+ Kerberos service and serve volumes into that cell. Normally, this cell is
+ the same cell as the workstation's client belongs to.
+
+Template: openafs-fileserver/alpha-broken
+Type: note
+_Description: OpenAFS file server probably does not work!
+ You are running the OpenAFS file server package on an alpha. This
+ probably doesn't work; the DES code is flaky on the alpha, along with the
+ threaded file server. Likely, the fileserver will simply fail to start,
+ but if it does load, data corruption may result. You have been warned.
diff --git a/debian/openafs-fuse.dirs b/debian/openafs-fuse.dirs
new file mode 100644
index 0000000..7276ecd
--- /dev/null
+++ b/debian/openafs-fuse.dirs
@@ -0,0 +1 @@
+usr/share/doc
diff --git a/debian/openafs-fuse.install b/debian/openafs-fuse.install
new file mode 100644
index 0000000..d000088
--- /dev/null
+++ b/debian/openafs-fuse.install
@@ -0,0 +1,3 @@
+debian/tmp/usr/sbin/afsd.fuse usr/sbin
+
+debian/tmp/usr/share/man/man3/AFS::ukernel.3 usr/share/man/man3
diff --git a/debian/openafs-fuse.links b/debian/openafs-fuse.links
new file mode 100644
index 0000000..60cf7ab
--- /dev/null
+++ b/debian/openafs-fuse.links
@@ -0,0 +1 @@
+/usr/share/man/man8/afsd.8.gz usr/share/man/man8/afsd.fuse.8.gz
diff --git a/debian/openafs-krb5.NEWS b/debian/openafs-krb5.NEWS
new file mode 100644
index 0000000..cdbb745
--- /dev/null
+++ b/debian/openafs-krb5.NEWS
@@ -0,0 +1,14 @@
+openafs-krb5 (1.4.7.dfsg1-1) unstable; urgency=low
+
+ This package now includes a Kerberos v5 version of klog, klog.krb5,
+ which authenticates via Kerberos v5 to obtain tokens. When this package
+ is installed, that version of klog becomes the default. This is correct
+ for any site that uses Kerberos v5 for AFS authentication
+
+ klog is managed by alternatives. If your site still uses the AFS
+ kaserver or otherwise requires use of the old AFS protocol to obtain
+ tokens with klog, run update-alternatives --config /usr/bin/klog and
+ select klog.afs as the default instead of klog.krb5.
+
+ -- Russ Allbery <rra@debian.org> Thu, 01 May 2008 16:44:12 -0700
+
diff --git a/debian/openafs-krb5.install b/debian/openafs-krb5.install
new file mode 100644
index 0000000..8c659e7
--- /dev/null
+++ b/debian/openafs-krb5.install
@@ -0,0 +1,11 @@
+debian/tmp/usr/bin/aklog usr/bin
+debian/tmp/usr/bin/klog.krb5 usr/bin
+
+debian/tmp/usr/bin/asetkey usr/sbin
+debian/tmp/usr/bin/akeyconvert usr/sbin
+
+debian/tmp/usr/share/man/man1/aklog.1 usr/share/man/man1
+debian/tmp/usr/share/man/man1/klog.krb5.1 usr/share/man/man1
+
+debian/tmp/usr/share/man/man8/asetkey.8 usr/share/man/man8
+debian/tmp/usr/share/man/man8/akeyconvert.8 usr/share/man/man8
diff --git a/debian/openafs-krb5.postinst b/debian/openafs-krb5.postinst
new file mode 100755
index 0000000..32808c5
--- /dev/null
+++ b/debian/openafs-krb5.postinst
@@ -0,0 +1,12 @@
+#!/bin/sh
+
+set -e
+
+update-alternatives --install /usr/bin/klog klog \
+ /usr/bin/klog.krb5 20 \
+ --slave /usr/share/man/man1/klog.1.gz klog.1.gz \
+ /usr/share/man/man1/klog.krb5.1.gz
+
+#DEBHELPER#
+
+exit 0
diff --git a/debian/openafs-krb5.prerm b/debian/openafs-krb5.prerm
new file mode 100755
index 0000000..2a5b32c
--- /dev/null
+++ b/debian/openafs-krb5.prerm
@@ -0,0 +1,11 @@
+#!/bin/sh
+
+set -e
+
+if [ "$1" = remove ] || [ "$1" = deconfigure ] ; then
+ update-alternatives --remove klog /usr/bin/klog.krb5
+fi
+
+#DEBHELPER#
+
+exit 0
diff --git a/debian/openafs-modules-dkms.dkms b/debian/openafs-modules-dkms.dkms
new file mode 100644
index 0000000..81b2a46
--- /dev/null
+++ b/debian/openafs-modules-dkms.dkms
@@ -0,0 +1,47 @@
+# DKMS configuration for the OpenAFS kernel module. -*- sh -*-
+
+# For i386 and amd64, extract the architecture from the kernel version string.
+# The version string will look like 3.2.0-4-686-pae or 3.2.0-4-amd64. This
+# allows building amd64 kernel modules on the i386 architecture. Further
+# cases like this can be added later if other architectures have similar
+# issues.
+ARCH=`echo "$kernelver" | cut -d- -f 3`
+case "$ARCH" in
+ amd64) AFS_SYSNAME="amd64_linuxXX" ;;
+ 486 | 686) AFS_SYSNAME="i386_linuxXX" ;;
+ *) AFS_SYSNAME="UNKNOWN" ;;
+esac
+
+# The kernel version should be part of the SYSNAME. We really only support
+# 2.6 and later, but be complete.
+case "$kernelver" in
+ 2.2.*) AFS_SYSKVERS=22 ;;
+ 2.4.*) AFS_SYSKVERS=24 ;;
+ 2.6.* | 3.*) AFS_SYSKVERS=26 ;;
+ *) AFS_SYSKVERS=26 ;;
+esac
+AFS_SYSNAME=`echo "$AFS_SYSNAME" | sed "s/XX\$/$AFS_SYSKVERS/"`
+
+# The version is replaced at build time by dh_dkms invoked in debian/rules.
+PACKAGE_NAME="openafs"
+PACKAGE_VERSION="#MODULE_VERSION#"
+
+# General DKMS settings.
+BUILT_MODULE_NAME[0]="$PACKAGE_NAME"
+DEST_MODULE_LOCATION[0]="/updates/dkms/"
+AUTOINSTALL=yes
+
+# Tell configure the sysname if we were able to determine it.
+if [ "${AFS_SYSNAME}" = 'UNKNOWN' ] ; then
+ CONFIGURE_SYSNAME=
+else
+ CONFIGURE_SYSNAME="--with-afs-sysname=${AFS_SYSNAME}"
+fi
+
+# Set the build and clean rules.
+MAKE[0]="(./configure --disable-linux-syscall-probing ${CONFIGURE_SYSNAME} \
+ --with-linux-kernel-packaging \
+ --with-linux-kernel-headers=${kernel_source_dir} \
+ && make \
+ && mv src/libafs/MODLOAD-*/openafs.ko .)"
+CLEAN="rm -f openafs.ko && make clean"
diff --git a/debian/openafs-modules-dkms.docs b/debian/openafs-modules-dkms.docs
new file mode 100644
index 0000000..e845566
--- /dev/null
+++ b/debian/openafs-modules-dkms.docs
@@ -0,0 +1 @@
+README
diff --git a/debian/openafs-modules-source.docs b/debian/openafs-modules-source.docs
new file mode 100644
index 0000000..6cbdf7c
--- /dev/null
+++ b/debian/openafs-modules-source.docs
@@ -0,0 +1,2 @@
+README
+debian/README.modules
diff --git a/debian/patches/0003-Catch-up-to-roken-s-rename-of-base64-symbols.patch b/debian/patches/0003-Catch-up-to-roken-s-rename-of-base64-symbols.patch
new file mode 100644
index 0000000..52b912d
--- /dev/null
+++ b/debian/patches/0003-Catch-up-to-roken-s-rename-of-base64-symbols.patch
@@ -0,0 +1,35 @@
+From: Benjamin Kaduk <kaduk@mit.edu>
+Date: Sun, 11 Dec 2016 18:06:03 -0500
+Subject: Catch up to roken's rename of base64 symbols
+
+Upstream roken (i.e., heimdal) renamed their base64 encode/decode
+routines to have a rk_ prefix in 2014, but upstream OpenAFS hasn't
+pulled in an update to their bundled heimdal files since then.
+So, upstream is still using the old name, whereas we are trying
+to link against a more modern libroken, and must use the new names.
+---
+ src/auth/userok.c | 4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/src/auth/userok.c b/src/auth/userok.c
+index 8a7d4a4..b54d106 100644
+--- a/src/auth/userok.c
++++ b/src/auth/userok.c
+@@ -470,7 +470,7 @@ ParseLine(char *buffer, struct rx_identity *user)
+ if (decodedName == NULL)
+ return ENOMEM;
+
+- len = base64_decode(ename, decodedName);
++ len = rk_base64_decode(ename, decodedName);
+ if (len<0) {
+ free(decodedName);
+ return EINVAL;
+@@ -571,7 +571,7 @@ afsconf_AddIdentity(struct afsconf_dir *adir, struct rx_identity *user)
+ if (user->kind == RX_ID_KRB4) {
+ fprintf(tf, "%s\n", user->displayName);
+ } else {
+- base64_encode(user->exportedName.val, user->exportedName.len,
++ rk_base64_encode(user->exportedName.val, user->exportedName.len,
+ &ename);
+ fprintf(tf, " %d %s %s\n", user->kind, ename, user->displayName);
+ free(ename);
diff --git a/debian/patches/0004-Disable-rx-perf-test.patch b/debian/patches/0004-Disable-rx-perf-test.patch
new file mode 100644
index 0000000..fe25605
--- /dev/null
+++ b/debian/patches/0004-Disable-rx-perf-test.patch
@@ -0,0 +1,25 @@
+From: Benjamin Kaduk <kaduk@mit.edu>
+Date: Sat, 12 Mar 2022 20:57:11 -0800
+Subject: Disable rx/perf test
+
+It hardcodes a port number on which to run the testing service,
+which may conflict with some buildd services and result in failing
+autotests.
+
+Change-Id: I608c6a1a876e6a1e7309bc621b6ed60e1b63b97a
+---
+ tests/TESTS | 1 -
+ 1 file changed, 1 deletion(-)
+
+diff --git a/tests/TESTS b/tests/TESTS
+index 07277e1..90fe0ff 100644
+--- a/tests/TESTS
++++ b/tests/TESTS
+@@ -16,7 +16,6 @@ opr/uuid
+ ptserver/pt_util
+ ptserver/pts-man
+ rx/event
+-rx/perf
+ volser/vos-man
+ bucoord/backup-man
+ kauth/kas-man
diff --git a/debian/patches/0007-Temporarily-disable-flaky-test.patch b/debian/patches/0007-Temporarily-disable-flaky-test.patch
new file mode 100644
index 0000000..49b4deb
--- /dev/null
+++ b/debian/patches/0007-Temporarily-disable-flaky-test.patch
@@ -0,0 +1,26 @@
+From: Benjamin Kaduk <kaduk@mit.edu>
+Date: Tue, 24 Mar 2020 15:33:59 -0700
+Subject: Temporarily disable flaky test
+
+The volser test consistently fails on the armhf buildd but succeeds
+on the porterbox. The nature of the test in question suggests that
+the issue in the test triggers only on a machine with a specific
+network configuration using specific addresses in 10.0.0.0/8, which
+should help track down the issue causing the test to fail on the buildd.
+
+Change-Id: Ie6403deb3eea62d3ab01ac45be502ae2fd94080a
+---
+ tests/TESTS | 1 -
+ 1 file changed, 1 deletion(-)
+
+diff --git a/tests/TESTS b/tests/TESTS
+index e59014e..07277e1 100644
+--- a/tests/TESTS
++++ b/tests/TESTS
+@@ -18,6 +18,5 @@ ptserver/pts-man
+ rx/event
+ rx/perf
+ volser/vos-man
+-volser/vos
+ bucoord/backup-man
+ kauth/kas-man
diff --git a/debian/patches/series b/debian/patches/series
new file mode 100644
index 0000000..1bf4129
--- /dev/null
+++ b/debian/patches/series
@@ -0,0 +1,3 @@
+0003-Catch-up-to-roken-s-rename-of-base64-symbols.patch
+0007-Temporarily-disable-flaky-test.patch
+0004-Disable-rx-perf-test.patch
diff --git a/debian/po/POTFILES.in b/debian/po/POTFILES.in
new file mode 100644
index 0000000..0ec8635
--- /dev/null
+++ b/debian/po/POTFILES.in
@@ -0,0 +1,2 @@
+[type: gettext/rfc822deb] openafs-client.templates
+[type: gettext/rfc822deb] openafs-fileserver.templates
diff --git a/debian/po/cs.po b/debian/po/cs.po
new file mode 100644
index 0000000..9c08b40
--- /dev/null
+++ b/debian/po/cs.po
@@ -0,0 +1,296 @@
+#
+# Translators, if you are not familiar with the PO format, gettext
+# documentation is worth reading, especially sections dedicated to
+# this format, e.g. by running:
+# info -n '(gettext)PO Files'
+# info -n '(gettext)Header Entry'
+#
+# Some information specific to po-debconf are available at
+# /usr/share/doc/po-debconf/README-trans
+# or http://www.debian.org/intl/l10n/po-debconf/README-trans
+#
+# Developers do not need to manually edit POT or PO files.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: openafs 1.4.1-3\n"
+"Report-Msgid-Bugs-To: openafs@packages.debian.org\n"
+"POT-Creation-Date: 2017-07-10 15:27-0500\n"
+"PO-Revision-Date: 2013-04-08 21:08+0200\n"
+"Last-Translator: Martin Sin <martin.sin@zshk.cz>\n"
+"Language-Team: Czech <debian-l10n-czech@lists.debian.org>\n"
+"Language: cs\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=utf-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid "DB server host names for your home cell:"
+msgstr "Jména počítačů s DB serverem vaší domovské buňky:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid ""
+"AFS uses the file /etc/openafs/CellServDB to hold the list of servers that "
+"should be contacted to find parts of a cell. The cell you claim this "
+"workstation belongs to is not in that file. Enter the host names of the "
+"database servers separated by spaces. IMPORTANT: If you are creating a new "
+"cell and this machine is to be a database server in that cell, only enter "
+"this machine's name; add the other servers later after they are functioning. "
+"Also, do not enable the AFS client to start at boot on this server until the "
+"cell is configured. When you are ready you can edit /etc/openafs/afs.conf."
+"client to enable the client."
+msgstr ""
+"AFS používá k uchovávání seznamu serverů, které mají být kontaktovány při "
+"hledání částí buňky, soubor /etc/openafs/CellServDB. Buňka, do které tato "
+"stanice patří, není ve zmíněném souboru uvedena. Zadejte mezerami oddělená "
+"jména databázových serverů. DŮLEŽITÉ: pokud vytváříte novou buňku a tento "
+"počítač bude databázovým serverem této buňky, pak stačí pouze zadat jméno "
+"počítače; ostatní servery přidejte později až po jejich zprovoznění. Dokud "
+"nebude buňka nastavena, tak na tomto serveru nepovolujte spuštění AFS "
+"klienta při startu serveru. Až budete připraveni, můžete klienta povolit "
+"úpravou souboru /etc/openafs/afs.conf.client."
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid "AFS cell this workstation belongs to:"
+msgstr "Buňka AFS, ke které náleží tento počítač:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid ""
+"AFS filespace is organized into cells or administrative domains. Each "
+"workstation belongs to one cell. Usually the cell is the DNS domain name of "
+"the site."
+msgstr ""
+"Souborový prostor systému AFS je uspořádán do buněk nebo administrativních "
+"domén. Každá stanice patří jedné buňce. Obvykle je buňkou doménové jméno "
+"skupiny."
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid "Size of AFS cache in kB:"
+msgstr "Velikost cache AFS v kB:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid ""
+"AFS uses an area of the disk to cache remote files for faster access. This "
+"cache will be mounted on /var/cache/openafs. It is important that the cache "
+"not overfill the partition it is located on. Often, people find it useful "
+"to dedicate a partition to their AFS cache."
+msgstr ""
+"AFS používá určitý prostor na disku pro cachování vzdálených souborů, aby k "
+"nim měl rychlejší přístup. Tato cache bude připojena do /var/cache/openafs. "
+"Je důležité, aby cache nepřeplnila oblast na které je umístěna. Často je "
+"užitečné umístit cache AFS do své vlastní diskové oblasti."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+msgid "Run Openafs client now and at boot?"
+msgstr "Spustit klienta Openafs nyní a při zavádění počítače?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+#, fuzzy
+#| msgid ""
+#| "Normally, most users who install the openafs-client package expect AFS to "
+#| "be mounted automatically at boot. However, if you are planning on "
+#| "setting up a new cell or are on a laptop, you may not want it started at "
+#| "boot time. If you choose not to start AFS at boot, run /etc/init.d/"
+#| "openafs-client force-start to start the client when you wish to run it."
+msgid ""
+"Normally, most users who install the openafs-client package expect AFS to be "
+"mounted automatically at boot. However, if you are planning on setting up a "
+"new cell or are on a laptop, you may not want it started at boot time. If "
+"you choose not to start AFS at boot, run service openafs-client force-start "
+"to start the client when you wish to run it."
+msgstr ""
+"Běžně většina uživatelů balíčku openafs-client očekává, že bude AFS "
+"připojeno automaticky při startu počítače. Samozřejmě, pokud plánujete "
+"nastavení nové buňky, nebo používáte laptop, pak byste zřejmě AFS při startu "
+"spouštět nechtěli. Zvolíte-li možnost nespouštět AFS při startu počítače, "
+"můžete klienta spustit ručně příkazem /etc/init.d/openafs-client force-start."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid "Look up AFS cells in DNS?"
+msgstr "Hledat buňky AFS v DNS?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid ""
+"In order to contact an AFS cell, you need the IP addresses of the cell's "
+"database servers. Normally, this information is read from /etc/openafs/"
+"CellServDB. However, if Openafs cannot find a cell in that file, it can use "
+"DNS to look for AFSDB records that contain the information."
+msgstr ""
+"Pro kontaktování buňky AFS potřebujete znát IP adresu databázového serveru "
+"buňky. Obvykle lze tuto informaci přečíst ze souboru /etc/openafs/"
+"CellServDB. Nicméně pokud Openafs nemůže najít buňku v tomto souboru, může "
+"použít DNS pro vyhledání AFSDB záznamů, které obsahují požadované informace."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid "Encrypt authenticated traffic with AFS fileserver?"
+msgstr "Šifrovat autentizovaný provoz se souborovým serverem AFS?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid ""
+"AFS provides a weak form of encryption that can optionally be used between a "
+"client and the fileservers. While this encryption is weaker than DES and "
+"thus is not sufficient for highly confidential data, it does provide some "
+"confidentiality and is likely to make the job of a casual attacker "
+"significantly more difficult."
+msgstr ""
+"AFS poskytuje slabou formu šifrování, která může být nepovinně použita mezi "
+"klientem a souborovým serverem. Přestože je toto šifrování slabší než DES a "
+"tedy není dostatečné pro velmi důvěrná data, poskytuje určitou formu utajení "
+"a určitě tak ztíží práci náhodnému útočníkovi."
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Yes"
+msgstr "Ano"
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Sparse"
+msgstr "Zřídka"
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "No"
+msgstr "Ne"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid "Dynamically generate the contents of /afs?"
+msgstr "Vygenerovat obsah /afs dynamicky?"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"/afs generally contains an entry for each cell that a client can talk to. "
+"Traditionally, these entries were generated by servers in the client's home "
+"cell. However, OpenAFS clients can generate the contents of /afs "
+"dynamically based on the contents of /etc/openafs/CellServDB and DNS."
+msgstr ""
+"/afs obvykle obsahuje záznam pro každou buňku, se kterou může klient "
+"hovořit. Tradičně jsou tyto záznamy vytvářeny servery v mateřské buňce "
+"klienta. Klienti OpenAFS však mohou generovat obsah adresáře /afs dynamicky "
+"na základě souboru /etc/openafs/CellServDB a systému DNS."
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"If you generate /afs dynamically, you may need to create /etc/openafs/"
+"CellAlias to include aliases for common cells. (The syntax of this file is "
+"one line per alias, with the cell name, a space, and then the alias for that "
+"cell.)"
+msgstr ""
+"Pokud vytváříte /afs dynamicky, možná budete muset vytvořit /etc/openafs/"
+"CellAlias pro začlenění aliasů běžných buněk. (Syntaxe tohoto souboru je "
+"jeden řádek na alias, který se skládá ze jména buňky, mezery a pak následuje "
+"alias pro tuto buňku.)"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"The Sparse option is the same as Yes except that, rather than populating /"
+"afs from /etc/openafs/CellServDB immediately, cells other than the local "
+"cell will not appear until they are accessed. Cell aliases as set in the "
+"CellAlias file are shown as normal, although they may appear to be dangling "
+"links until traversed."
+msgstr ""
+"Volba Zřídka je v podstatě stejná jako Ano s tím rozdílem, že nedojde k "
+"okamžitému naplnění / afs z /etc/openafs/CellServDB, vzdálené buňky se "
+"přitom nezobrazí až do okamžiku, kdy k nim bude přistupováno. Aliasy buněk, "
+"se zobrazí jak je uvedeno v souboru CellAllias, i když může vypadat, že na "
+"svůj překlad teprve čekají."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid "Use fakestat to avoid hangs when listing /afs?"
+msgstr "Použít fakestat pro obejití zatuhnutí při výpisu /afs?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid ""
+"Because AFS is a global file space, operations on the /afs directory can "
+"generate significant network traffic. If some AFS cells are unavailable "
+"then looking at /afs using ls or a graphical file browser may hang your "
+"machine for minutes. AFS has an option to simulate answers to these "
+"operations locally to avoid these hangs. You want this option under most "
+"circumstances."
+msgstr ""
+"Protože je AFS globální souborový prostor, mohou operace na adresáři /afs "
+"výrazně zvýšit provoz na síti. Pokud jsou některé buňky AFS nedosažitelné, "
+"pak může prohlížení /afs pomocí příkazu ls nebo grafického prohlížeče "
+"způsobit zatuhnutí počítače na dobu několika minut. AFS má volbu, která "
+"simuluje odpovědi pro tyto operace a tak se snaží vyhnout popsaným výpadkům. "
+"Tuto volbu budete chtít použít ve většině případů."
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid "Cell this server serves files for:"
+msgstr "Buňka, které bude tento server poskytovat soubory:"
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid ""
+"AFS fileservers belong to a cell. They have the key for that cell's "
+"Kerberos service and serve volumes into that cell. Normally, this cell is "
+"the same cell as the workstation's client belongs to."
+msgstr ""
+"Souborové servery AFS náleží buňce. Servery mají klíč ke službě Kerberos "
+"dané buňky a v rámci buňky nabízejí souborové svazky. Tato buňka je obvykle "
+"shodná s buňkou, ke které patří klient na pracovní stanici."
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid "OpenAFS file server probably does not work!"
+msgstr "Souborový server OpenAFS pravděpodobně nepracuje!"
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid ""
+"You are running the OpenAFS file server package on an alpha. This probably "
+"doesn't work; the DES code is flaky on the alpha, along with the threaded "
+"file server. Likely, the fileserver will simply fail to start, but if it "
+"does load, data corruption may result. You have been warned."
+msgstr ""
+"Souborový server OpenAFS běží na Aplha systému, což pravděpodobně nebude "
+"fungovat; DES kód se ve spojení s vlákny na souborovém serveru chová "
+"podivně. Souborový server nejpravděpodobněji vůbec nespustí nespustí, ale "
+"pokud naběhne, může dojít ke ztrátě dat. Byli jste varováni."
+
+#~ msgid "How large is your AFS cache (kB)?"
+#~ msgstr "Jak velká je vaše cache AFS (v kB)?"
diff --git a/debian/po/da.po b/debian/po/da.po
new file mode 100644
index 0000000..de4abbc
--- /dev/null
+++ b/debian/po/da.po
@@ -0,0 +1,282 @@
+# Danish translation openafs.
+# Copyright (C) 2019 openafs & nedenstående oversættere.
+# This file is distributed under the same license as the openafs package.
+# Joe Hansen <joedalton2@yahoo.dk>, 2012, 2013, 2019.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: openafs\n"
+"Report-Msgid-Bugs-To: openafs@packages.debian.org\n"
+"POT-Creation-Date: 2017-07-10 15:27-0500\n"
+"PO-Revision-Date: 2019-02-24 05:26+0100\n"
+"Last-Translator: Joe Hansen <joedalton2@yahoo.dk>\n"
+"Language-Team: Danish <debian-l10n-danish@lists.debian.org>\n"
+"Language: da\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid "DB server host names for your home cell:"
+msgstr "DB-serverværtsnavn for din hjemmecelle:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid ""
+"AFS uses the file /etc/openafs/CellServDB to hold the list of servers that "
+"should be contacted to find parts of a cell. The cell you claim this "
+"workstation belongs to is not in that file. Enter the host names of the "
+"database servers separated by spaces. IMPORTANT: If you are creating a new "
+"cell and this machine is to be a database server in that cell, only enter "
+"this machine's name; add the other servers later after they are functioning. "
+"Also, do not enable the AFS client to start at boot on this server until the "
+"cell is configured. When you are ready you can edit /etc/openafs/afs.conf."
+"client to enable the client."
+msgstr ""
+"AFS bruger filen /etc/openafs/CellServDB, der indeholder listen over "
+"servere, som skal kontaktes for at finde dele af en celle. Cellen, du hævder "
+"at denne arbejdsstation tilhører, er ikke i denne fil. Indtast værtsnavnene "
+"for databaseserverne adskilt af mellemrum. VIGTIGT: Hvis du opretter en ny "
+"celle og denne maskine skal være databaseserveren i den celle, så indtast "
+"kun den maskines navn; tilføj de andre servere senere når de er oppe og "
+"køre. Husk også ikke at aktivere AFS-klienten til igangsættelse ved opstart "
+"på denne server før cellen er konfigureret. Når du er klar, kan du redigere /"
+"etc/openafs/afs.conf.client for at aktivere klienten."
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid "AFS cell this workstation belongs to:"
+msgstr "AFS-celle denne arbejdsstation tilhører:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid ""
+"AFS filespace is organized into cells or administrative domains. Each "
+"workstation belongs to one cell. Usually the cell is the DNS domain name of "
+"the site."
+msgstr ""
+"AFS-filrum er organiseret i celler eller administrative domæner. Hver "
+"arbejdsstation tilhører en celle. Normalt er cellen DNS-domænenavnet for "
+"siden."
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid "Size of AFS cache in kB:"
+msgstr "Størrelse på AFS-mellemlager i kB:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid ""
+"AFS uses an area of the disk to cache remote files for faster access. This "
+"cache will be mounted on /var/cache/openafs. It is important that the cache "
+"not overfill the partition it is located on. Often, people find it useful "
+"to dedicate a partition to their AFS cache."
+msgstr ""
+"AFS bruger et område af disken til at mellemlagre eksterne filer for "
+"hurtigere adgang. Dette mellemlager vil blive monteret på /var/cache/"
+"openafs. Det er vigtigt at mellemlageret ikke overfylder partitionen, som "
+"den er placeret på. Ofte finder andre det brugbart at dedikere en partition "
+"til deres AFS-mellemlager."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+msgid "Run Openafs client now and at boot?"
+msgstr "Kør Openafs-klient nu og ved opstart?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+msgid ""
+"Normally, most users who install the openafs-client package expect AFS to be "
+"mounted automatically at boot. However, if you are planning on setting up a "
+"new cell or are on a laptop, you may not want it started at boot time. If "
+"you choose not to start AFS at boot, run service openafs-client force-start "
+"to start the client when you wish to run it."
+msgstr ""
+"Normalt forventer de fleste brugere som installerer pakken openafs-client at "
+"AFS monteres automatisk ved opstart. Men hvis du planlægger at opsætte en ny "
+"celle eller er på en bærbar, så vil du måske ikke have at den igangsættes "
+"ved opstartstidspunktet. Hvis du vælger ikke at igangsætte AFS ved opstart "
+"så kør service openafs-client force-start for at starte klienten, når "
+"du ønsker at køre den."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid "Look up AFS cells in DNS?"
+msgstr "Slå AFS-celler op i DNS?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid ""
+"In order to contact an AFS cell, you need the IP addresses of the cell's "
+"database servers. Normally, this information is read from /etc/openafs/"
+"CellServDB. However, if Openafs cannot find a cell in that file, it can use "
+"DNS to look for AFSDB records that contain the information."
+msgstr ""
+"For at kontakte en AFS-celle skal du bruge IP-adressen for cellens "
+"databaseservere. Normalt læses denne information fra /etc/openafs/"
+"CellServDB. Hvis Openafs ikke kan finde en celle i den fil, så kan "
+"programmet dog bruge DNS til at slå AFSDB-poster op, som indeholder "
+"informationen."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid "Encrypt authenticated traffic with AFS fileserver?"
+msgstr "Krypter godkendt trafik med AFS-filserver?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid ""
+"AFS provides a weak form of encryption that can optionally be used between a "
+"client and the fileservers. While this encryption is weaker than DES and "
+"thus is not sufficient for highly confidential data, it does provide some "
+"confidentiality and is likely to make the job of a casual attacker "
+"significantly more difficult."
+msgstr ""
+"AFS tilbyder en svag form for kryptering, som valgfrit kan bruges mellem en "
+"klient og filserverne. Selv om krypteringen er svagere end DES og derfor "
+"ikke er tilstrækkelig for meget fortrolige data, så giver det dog en mindre "
+"form for fortrolighed og det vil sandsynligvis gøre jobbet for en vilkårlig "
+"angriber markant sværere."
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Yes"
+msgstr "Ja"
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Sparse"
+msgstr "Tynd (sparse)"
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "No"
+msgstr "Nej"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid "Dynamically generate the contents of /afs?"
+msgstr "Dynamisk oprette indholdet for /afs?"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"/afs generally contains an entry for each cell that a client can talk to. "
+"Traditionally, these entries were generated by servers in the client's home "
+"cell. However, OpenAFS clients can generate the contents of /afs "
+"dynamically based on the contents of /etc/openafs/CellServDB and DNS."
+msgstr ""
+"/afs indeholder normalt et punkt for hver celle, som en klient kan snakke "
+"med. Traditionelt blev disse punkter oprettet af servere i klientens "
+"hjemmecelle. OpenAFS-klienter kan dog oprette indholdet af /afs dynamisk "
+"baseret på indholdet af /etc/openafs/CellServDB og DNS."
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"If you generate /afs dynamically, you may need to create /etc/openafs/"
+"CellAlias to include aliases for common cells. (The syntax of this file is "
+"one line per alias, with the cell name, a space, and then the alias for that "
+"cell.)"
+msgstr ""
+"Hvis du opretter /afs dynamisk så skal du måske oprette /etc/openafs/"
+"CellAlias for at inkludere aliasser for gængse celler (syntaksen for denne "
+"fil er en linje per alias, med cellenavn, et mellemrum, og så aliasset for "
+"den celle)."
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"The Sparse option is the same as Yes except that, rather than populating /"
+"afs from /etc/openafs/CellServDB immediately, cells other than the local "
+"cell will not appear until they are accessed. Cell aliases as set in the "
+"CellAlias file are shown as normal, although they may appear to be dangling "
+"links until traversed."
+msgstr ""
+"Tilvalget tynd (sparse) er det samme som Ja, fremfor at befolke /afs fra /"
+"etc/openafs/CellServDB øjeblikkeligt, vil celler udover den lokale celle "
+"ikke komme frem før de tilgås. Cellealiasser som sat i CellAlias-filen vises "
+"som normalt, selvom de kan fremgå som hængende henvisninger indtil "
+"gennemgået."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid "Use fakestat to avoid hangs when listing /afs?"
+msgstr "Brug fakestat til at undgå lange svartider (hangs) når der vises /afs?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid ""
+"Because AFS is a global file space, operations on the /afs directory can "
+"generate significant network traffic. If some AFS cells are unavailable "
+"then looking at /afs using ls or a graphical file browser may hang your "
+"machine for minutes. AFS has an option to simulate answers to these "
+"operations locally to avoid these hangs. You want this option under most "
+"circumstances."
+msgstr ""
+"Da AFS er et globalt filrum, kan handlinger på /afs-mappen skabe betydelig "
+"netværkstrafik. Hvis nogle AFS-celler er utilgængelige når der kigges på /"
+"afs med brug af ls eller en grafisk filbrowser måske optager din maskine i "
+"minutter ad gangen, så har AFS en indstilling der kan simulere svaret på "
+"disse handlinger lokalt for at undgå disse lange svartider. Du vil som "
+"oftest gerne have denne indstilling."
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid "Cell this server serves files for:"
+msgstr "Celle som denne server betjener filer for:"
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid ""
+"AFS fileservers belong to a cell. They have the key for that cell's "
+"Kerberos service and serve volumes into that cell. Normally, this cell is "
+"the same cell as the workstation's client belongs to."
+msgstr ""
+"AFS-filservere tilhører en celle. De har nøglen for den celles "
+"Kerberostjeneste og betjener arkiver i den celle. Normalt er denne celle den "
+"samme celle som arbejdsstationens klient hører til."
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid "OpenAFS file server probably does not work!"
+msgstr "OpenAFS-filserver virker sandsynligvis ikke!"
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid ""
+"You are running the OpenAFS file server package on an alpha. This probably "
+"doesn't work; the DES code is flaky on the alpha, along with the threaded "
+"file server. Likely, the fileserver will simply fail to start, but if it "
+"does load, data corruption may result. You have been warned."
+msgstr ""
+"Du kører OpenAFS-filserverpakken på en alfa. Dette virker sandsynligvis "
+"ikke; DES-koden er utroværdig i alfa, sammen med den tråede filserver. Højst "
+"sandsynligt vil filserveren slet ikke starte op, men hvis den kommer op, kan "
+"ødelæggelse af data blive resultatet. Du er advaret."
diff --git a/debian/po/de.po b/debian/po/de.po
new file mode 100644
index 0000000..5e7cb6d
--- /dev/null
+++ b/debian/po/de.po
@@ -0,0 +1,316 @@
+# Translators, if you are not familiar with the PO format, gettext
+# documentation is worth reading, especially sections dedicated to
+# this format, e.g. by running:
+# info -n '(gettext)PO Files'
+# info -n '(gettext)Header Entry'
+# Some information specific to po-debconf are available at
+# /usr/share/doc/po-debconf/README-trans
+# or http://www.debian.org/intl/l10n/po-debconf/README-trans
+# Developers do not need to manually edit POT or PO files.
+# Erik Pfannenstein <debianignatz@gmx.de>, 2013, 2018.
+msgid ""
+msgstr ""
+"Project-Id-Version: openafs 1.4.2-3\n"
+"Report-Msgid-Bugs-To: openafs@packages.debian.org\n"
+"POT-Creation-Date: 2017-07-10 15:27-0500\n"
+"PO-Revision-Date: 2018-01-15 23:15+0200\n"
+"Last-Translator: Erik Pfannenstein <debianignatz@gmx.de>\n"
+"Language-Team: debian-l10n-german@lists.debian.org\n"
+"Language: de\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+"X-Generator: Virtaal 0.7.1\n"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid "DB server host names for your home cell:"
+msgstr "Rechnernamen der Datenbank-Server für Ihre Heimatzelle:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid ""
+"AFS uses the file /etc/openafs/CellServDB to hold the list of servers that "
+"should be contacted to find parts of a cell. The cell you claim this "
+"workstation belongs to is not in that file. Enter the host names of the "
+"database servers separated by spaces. IMPORTANT: If you are creating a new "
+"cell and this machine is to be a database server in that cell, only enter "
+"this machine's name; add the other servers later after they are functioning. "
+"Also, do not enable the AFS client to start at boot on this server until the "
+"cell is configured. When you are ready you can edit /etc/openafs/afs.conf."
+"client to enable the client."
+msgstr ""
+"AFS benutzt die Datei /etc/openafs/CellServDB für eine Liste von Servern, "
+"die angesprochen werden sollen, um Teile einer Zelle zu finden. Die Zelle, "
+"zu der dieser Rechner angeblich gehören soll, ist nicht in dieser Datei. "
+"Geben Sie daher bitte die Rechnernamen der Datenbankserver ein, getrennt "
+"durch Leerzeichen. WICHTIG: Falls Sie eine neue Zelle erstellen und dieser "
+"Computer ein Datenbankserver der Zelle sein soll, geben Sie nur den "
+"Rechnernamen dieses Computers ein und fügen Sie andere Server erst später "
+"hinzu, wenn sie einsatzbereit sind. Außerdem sollten Sie den AFS-Client auf "
+"diesem Server nicht beim Systemboot starten lassen, bevor diese Zelle "
+"konfiguriert ist. Sobald Sie soweit sind, können Sie /etc/openafs/"
+"afs.conf.client bearbeiten, um den AFS-Client zu aktivieren."
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid "AFS cell this workstation belongs to:"
+msgstr "AFS-Zelle, zu der dieser Rechner gehört:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid ""
+"AFS filespace is organized into cells or administrative domains. Each "
+"workstation belongs to one cell. Usually the cell is the DNS domain name of "
+"the site."
+msgstr ""
+"Der AFS-Dateiraum ist in Zellen bzw. administrativen Domains organisiert. "
+"Jeder Rechner gehört zu einer Zelle. Normalerweise ist eine Zelle gleich dem "
+"DNS-Domain-Namen."
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid "Size of AFS cache in kB:"
+msgstr "Größe des AFS-Cache in kB:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid ""
+"AFS uses an area of the disk to cache remote files for faster access. This "
+"cache will be mounted on /var/cache/openafs. It is important that the cache "
+"not overfill the partition it is located on. Often, people find it useful "
+"to dedicate a partition to their AFS cache."
+msgstr ""
+"AFS benutzt einen Bereich der Festplatte, um Netzwerk-Dateien zum "
+"schnelleren Zugriff zwischenzuspeichern. Dieser Cache wird unter /var/cache/"
+"openafs eingehängt werden. Es ist wichtig, dass der Cache nicht die "
+"Partition überfüllt, auf dem er sich befindet. Viele Leute finden es "
+"praktisch, eine extra Partition für ihren AFS-Cache zu haben."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+msgid "Run Openafs client now and at boot?"
+msgstr "Soll der Openafs-Client jetzt und beim Systemboot gestartet werden?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+msgid ""
+"Normally, most users who install the openafs-client package expect AFS to be "
+"mounted automatically at boot. However, if you are planning on setting up a "
+"new cell or are on a laptop, you may not want it started at boot time. If "
+"you choose not to start AFS at boot, run service openafs-client force-start "
+"to start the client when you wish to run it."
+msgstr ""
+"Normalerweise erwarten Benutzer, die das openafs-client-Paket installieren, "
+"dass das AFS-Verzeichnis automatisch beim Systemboot eingehängt wird. Falls "
+"Sie jedoch eine neue Zelle einrichten wollen oder den Client auf einem "
+"Laptop installieren, möchten Sie ihn vielleicht nicht schon beim Booten "
+"mitstarten. In diesem Fall rufen Sie »service openafs-client force-start« "
+"auf, wenn Sie den Client verwenden wollen."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid "Look up AFS cells in DNS?"
+msgstr "Sollen AFS-Zellen im DNS nachgeschlagen werden?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid ""
+"In order to contact an AFS cell, you need the IP addresses of the cell's "
+"database servers. Normally, this information is read from /etc/openafs/"
+"CellServDB. However, if Openafs cannot find a cell in that file, it can use "
+"DNS to look for AFSDB records that contain the information."
+msgstr ""
+"Um eine AFS-Zelle zu kontaktieren, brauchen Sie die IP-Adressen der "
+"Datenbank-Server der Zellen. Normalerweise werden diese Informationen aus "
+"der Datei /etc/openafs/CellServDB gelesen. Falls Openafs aber keine Zelle in "
+"dieser Datei finden kann, kann auch DNS benutzt werden, um nach AFSDB-"
+"Einträgen zu suchen, die diese Information enthalten."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid "Encrypt authenticated traffic with AFS fileserver?"
+msgstr ""
+"Soll authentifizierter Verkehr mit AFS-Dateiservern verschlüsselt werden?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid ""
+"AFS provides a weak form of encryption that can optionally be used between a "
+"client and the fileservers. While this encryption is weaker than DES and "
+"thus is not sufficient for highly confidential data, it does provide some "
+"confidentiality and is likely to make the job of a casual attacker "
+"significantly more difficult."
+msgstr ""
+"AFS bietet eine schwache Form der Verschlüsselung, die optional zwischen "
+"Client und Dateiserver benutzt werden kann. Obwohl diese Verschlüsselung "
+"schwächer als DES und daher nicht ausreichend für sehr vertrauliche Daten "
+"ist, macht sie einem Gelegenheitsangreifer die Arbeit dennoch deutlich "
+"schwerer."
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Yes"
+msgstr "Ja"
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Sparse"
+msgstr "Spärlich"
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "No"
+msgstr "Nein"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid "Dynamically generate the contents of /afs?"
+msgstr "Soll der Inhalt von /afs dynamisch generiert werden?"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"/afs generally contains an entry for each cell that a client can talk to. "
+"Traditionally, these entries were generated by servers in the client's home "
+"cell. However, OpenAFS clients can generate the contents of /afs "
+"dynamically based on the contents of /etc/openafs/CellServDB and DNS."
+msgstr ""
+"/afs enthält in der Regel einen Eintrag für jede Zelle, mit der der Client "
+"interagieren kann. Traditionell werden diese Einträge von Servern in der "
+"Heimatzelle des Clients erstellt. Allerdings können OpenAFS-Clients den "
+"Inhalt von /afs auch dynamisch anhand der Informationen von /etc/openafs/"
+"CellServDB und DNS zusammentragen."
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"If you generate /afs dynamically, you may need to create /etc/openafs/"
+"CellAlias to include aliases for common cells. (The syntax of this file is "
+"one line per alias, with the cell name, a space, and then the alias for that "
+"cell.)"
+msgstr ""
+"Wenn Sie /afs dynamisch erstellen lassen, werden Sie vielleicht die Datei "
+"/etc/openafs/CellAlias erstellen und Aliasse für gebräuchliche Zellen "
+"eintragen müssen (die Syntax für diese Datei ist: eine Zeile pro Alias, mit "
+"Zellenname – Leerzeichen – Alias)."
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"The Sparse option is the same as Yes except that, rather than populating /"
+"afs from /etc/openafs/CellServDB immediately, cells other than the local "
+"cell will not appear until they are accessed. Cell aliases as set in the "
+"CellAlias file are shown as normal, although they may appear to be dangling "
+"links until traversed."
+msgstr ""
+"Die Option »Spärlich« ist dasselbe wie »Ja«, allerdings wird /afs nicht "
+"sofort aus der /etc/openafs/CellServDB bestückt, sondern nicht-lokale Zellen "
+"werden erst angezeigt, nachdem auf sie zugegriffen wurde. Zell-Aliasse aus "
+"der Datei CellAlias werden wie üblich angezeigt, können aber auch als "
+"defekte Links erscheinen, bis sie durchlaufen worden sind."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid "Use fakestat to avoid hangs when listing /afs?"
+msgstr ""
+"Soll fakestat benutzt werden, um eine Verzögerung beim Auflisten von /afs zu "
+"vermeiden?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid ""
+"Because AFS is a global file space, operations on the /afs directory can "
+"generate significant network traffic. If some AFS cells are unavailable "
+"then looking at /afs using ls or a graphical file browser may hang your "
+"machine for minutes. AFS has an option to simulate answers to these "
+"operations locally to avoid these hangs. You want this option under most "
+"circumstances."
+msgstr ""
+"Da AFS ein globaler Dateiraum ist, können Aktionen im /afs-Verzeichnis "
+"starken Netzwerkverkehr verursachen. Wenn einige AFS-Zellen nicht erreichbar "
+"sind, kann das Betrachten von /afs (mit ls oder einem Dateibrowser) zu "
+"minutenlangem Aufhängen führen. AFS kann aber Antworten auf solche "
+"Operationen simulieren, um ein Aufhängen zu vermeiden. Die meisten Leute "
+"wollen das."
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid "Cell this server serves files for:"
+msgstr "Zelle, für die dieser Server Dateien ausliefert:"
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid ""
+"AFS fileservers belong to a cell. They have the key for that cell's "
+"Kerberos service and serve volumes into that cell. Normally, this cell is "
+"the same cell as the workstation's client belongs to."
+msgstr ""
+"AFS-Dateiserver gehören zu einer Zelle. Die Server haben den Schlüssel für "
+"den Kerberos-Dienst der Zelle und stellen Speicherplatz für die Zelle "
+"bereit. Normalerweise ist die Zelle identisch mit der des Clients."
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid "OpenAFS file server probably does not work!"
+msgstr "Der OpenAFS-Dateiserver wird wahrscheinlich nicht funktionieren!"
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid ""
+"You are running the OpenAFS file server package on an alpha. This probably "
+"doesn't work; the DES code is flaky on the alpha, along with the threaded "
+"file server. Likely, the fileserver will simply fail to start, but if it "
+"does load, data corruption may result. You have been warned."
+msgstr ""
+"Sie benutzen den OpenAFS-Dateiserver auf einer Alpha-Maschine. Das "
+"funktioniert wahrscheinlich nicht; der DES-Code und dazu der Dateiserver im "
+"Thread-Modus sind unter Alpha fehlerhaft. Wahrscheinlich wird der "
+"Dateiserver einfach nicht starten, aber wenn er gestartet wird, könnte "
+"Datenverlust die Folge sein. Sie wurden gewarnt."
+
+#~ msgid "Upgrading will move files to new locations; continue?"
+#~ msgstr "Upgraden wird Dateien an neue Orte verschieben; Fortfahren?"
+
+#~ msgid ""
+#~ "Between Openafs 1.1 and Openafs 1.2, several files moved. In particular, "
+#~ "files in /etc/openafs/server-local have been distributed to other "
+#~ "locations. The BosConfig file is now located in /etc/openafs and the "
+#~ "other files are located in /var/lib/openafs. If you continue with this "
+#~ "upgrade, these files will be moved. You should use the bos restart "
+#~ "command to reload your servers. Any configuration changes made before "
+#~ "you do so will be lost."
+#~ msgstr ""
+#~ "Zwischen Openafs 1.1 und Openafs 1.2, wurden einige Dateien verschoben. "
+#~ "Besonders Dateien in /etc/openafs/server-local sind betroffen. Die "
+#~ "BosConfig-Datei ist nun unter /etc/openafs zu finden und alle anderen "
+#~ "Dateien sind unter /var/lib/openafs. Wenn Sie mit dem Upgrade fortfahren, "
+#~ "werden diese Dateien verschoben. Sie sollten den bos restart Befehl "
+#~ "verwenden, um Ihre Server neuzustarten. Jede Konfigurationsänderung, die "
+#~ "Sie davor machen, wird verloren gehen."
diff --git a/debian/po/es.po b/debian/po/es.po
new file mode 100644
index 0000000..2609e6d
--- /dev/null
+++ b/debian/po/es.po
@@ -0,0 +1,326 @@
+# openafs po-debconf translation to Spanish
+# Copyright (C) 2007, 2009 Software in the Public Interest
+# This file is distributed under the same license as the openafs package.
+#
+# Changes:
+# - Initial translation
+# Javier Ruano Ruano <adrakoa@es.gnu.org>, 2007
+#
+# - Updates
+# Francisco Javier Cuadrado <fcocuadrado@gmail.com>, 2009
+# Javier Fernández-Sanguino Peña <jfs@debian.org>, 2014
+#
+# Traductores, si no conocen el formato PO, merece la pena leer la
+# documentación de gettext, especialmente las secciones dedicadas a este
+# formato, por ejemplo ejecutando:
+# info -n '(gettext)PO Files'
+# info -n '(gettext)Header Entry'
+#
+# Equipo de traducción al español, por favor lean antes de traducir
+# los siguientes documentos:
+#
+# - El proyecto de traducción de Debian al español
+# http://www.debian.org/intl/spanish/
+# especialmente las notas y normas de traducción en
+# http://www.debian.org/intl/spanish/notas
+#
+# - La guía de traducción de po's de debconf:
+# /usr/share/doc/po-debconf/README-trans
+# o http://www.debian.org/intl/l10n/po-debconf/README-trans
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: openafs 1.4.7.dfsg1-6\n"
+"Report-Msgid-Bugs-To: openafs@packages.debian.org\n"
+"POT-Creation-Date: 2017-07-10 15:27-0500\n"
+"PO-Revision-Date: 2014-12-05 19:05+0100\n"
+"Last-Translator: Javier Fernández-Sanguino Peña <jfs@debian.org>\n"
+"Language-Team: Debian l10n Spanish <debian-l10n-spanish@lists.debian.org>\n"
+"Language: es\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-POFile-SpellExtra: kB openafs force DNS CellAlias Kerberos fakestat\n"
+"X-POFile-SpellExtra: alpha Openafs start init client ls conf AFSDB var\n"
+"X-POFile-SpellExtra: home AFS CellServDB OpenAFS afs\n"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid "DB server host names for your home cell:"
+msgstr ""
+"Escriba para la celda de «home» los nombres de los servidores de la base de "
+"datos:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid ""
+"AFS uses the file /etc/openafs/CellServDB to hold the list of servers that "
+"should be contacted to find parts of a cell. The cell you claim this "
+"workstation belongs to is not in that file. Enter the host names of the "
+"database servers separated by spaces. IMPORTANT: If you are creating a new "
+"cell and this machine is to be a database server in that cell, only enter "
+"this machine's name; add the other servers later after they are functioning. "
+"Also, do not enable the AFS client to start at boot on this server until the "
+"cell is configured. When you are ready you can edit /etc/openafs/afs.conf."
+"client to enable the client."
+msgstr ""
+"AFS utiliza el archivo «/etc/openafs/CellServDB» para mantener una lista de "
+"los servidores a los que se consultará para encontrar la distintas partes de "
+"una celda. La celda que solicita esta estación de trabajo no está incluida "
+"en ese archivo. Introduzca los nombres de los servidores de la base de datos "
+"separados por espacios. IMPORTANTE: Si está creando una nueva celda y esta "
+"máquina es uno de los servidores de la base de datos en esa celda, "
+"introduzca sólo el nombre de esta máquina; añada los demás servidores más "
+"tarde cuando estén en funcionamiento. Además, no habilite en el arranque el "
+"cliente AFS de ese servidor hasta que configure la celda. Cuando esté "
+"preparado, edite el archivo «/etc/openafs/afs.conf.client»."
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid "AFS cell this workstation belongs to:"
+msgstr "La celda AFS de esta máquina pertenece a:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid ""
+"AFS filespace is organized into cells or administrative domains. Each "
+"workstation belongs to one cell. Usually the cell is the DNS domain name of "
+"the site."
+msgstr ""
+"El espacio de los archivos AFS se organizará en celdas o dominios "
+"administrativos. Cada máquina pertenece a una celda. Generalmente la celda "
+"es el servidor de nombres de dominio del sitio."
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid "Size of AFS cache in kB:"
+msgstr "Tamaño de la caché de AFS en kB:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid ""
+"AFS uses an area of the disk to cache remote files for faster access. This "
+"cache will be mounted on /var/cache/openafs. It is important that the cache "
+"not overfill the partition it is located on. Often, people find it useful "
+"to dedicate a partition to their AFS cache."
+msgstr ""
+"Para mejorar la velocidad de acceso, AFS utiliza un espacio del disco para "
+"la caché de archivos remotos. Esta caché se montará en «/var/cache/openafs». "
+"Es importante que la caché no ocupe más que la partición en la que se ubica. "
+"Frecuentemente, la gente encuentra útil dedicar una partición a la caché de "
+"AFS."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+msgid "Run Openafs client now and at boot?"
+msgstr "¿Desea ejecutar ahora el cliente OpenAFS y en el arranque?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+#, fuzzy
+#| msgid ""
+#| "Normally, most users who install the openafs-client package expect AFS to "
+#| "be mounted automatically at boot. However, if you are planning on "
+#| "setting up a new cell or are on a laptop, you may not want it started at "
+#| "boot time. If you choose not to start AFS at boot, run /etc/init.d/"
+#| "openafs-client force-start to start the client when you wish to run it."
+msgid ""
+"Normally, most users who install the openafs-client package expect AFS to be "
+"mounted automatically at boot. However, if you are planning on setting up a "
+"new cell or are on a laptop, you may not want it started at boot time. If "
+"you choose not to start AFS at boot, run service openafs-client force-start "
+"to start the client when you wish to run it."
+msgstr ""
+"Normalmente, la mayoría de los usuarios que instalan el paquete «openafs-"
+"client» esperan que se monte automáticamente en el arranque. Sin embargo, si "
+"tiene pensado configurar una nueva celda o utiliza un portátil, puede que "
+"quiera iniciarlo en el arranque. Si elige no iniciar AFS en el arranque, "
+"ejecute «/etc/init.d/openafs-client force-start» para iniciar el cliente "
+"cuando lo desee."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid "Look up AFS cells in DNS?"
+msgstr "¿Desea buscar las celdas AFS en el DNS?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid ""
+"In order to contact an AFS cell, you need the IP addresses of the cell's "
+"database servers. Normally, this information is read from /etc/openafs/"
+"CellServDB. However, if Openafs cannot find a cell in that file, it can use "
+"DNS to look for AFSDB records that contain the information."
+msgstr ""
+"Para conectar a una celda de AFS, necesita la dirección IP de la celda de "
+"los servidores de la base de datos. Normalmente, esta información se "
+"encuentra en el archivo «/etc/openafs/CellServDB». Sin embargo, si OpenAFS "
+"no encuentra una celda en ese archivo, puede usar el DNS para buscar las "
+"copias de los registros de AFSDB que contengan la información."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid "Encrypt authenticated traffic with AFS fileserver?"
+msgstr ""
+"¿Desea cifrar el tráfico de autenticación con el servidor de archivos AFS? "
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid ""
+"AFS provides a weak form of encryption that can optionally be used between a "
+"client and the fileservers. While this encryption is weaker than DES and "
+"thus is not sufficient for highly confidential data, it does provide some "
+"confidentiality and is likely to make the job of a casual attacker "
+"significantly more difficult."
+msgstr ""
+"AFS proporciona un mecanismo de cifrado endeble que se puede utilizar "
+"opcionalmente entre el cliente y los servidores de archivos. Aunque este "
+"cifrado es más débil que DES y por ello no es suficiente para la mayor "
+"confidencialidad de los datos, éste ofrece confidencialidad y hace que para "
+"un atacante esporádico el trabajo sea sensiblemente más difícil."
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Yes"
+msgstr "Sí"
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Sparse"
+msgstr "Dispersos"
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "No"
+msgstr "No"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid "Dynamically generate the contents of /afs?"
+msgstr "¿Desea crear dinámicamente los contenidos de «/afs»?"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"/afs generally contains an entry for each cell that a client can talk to. "
+"Traditionally, these entries were generated by servers in the client's home "
+"cell. However, OpenAFS clients can generate the contents of /afs "
+"dynamically based on the contents of /etc/openafs/CellServDB and DNS."
+msgstr ""
+"Normalmente «/afs» incluye una entrada por cada celda que un cliente "
+"solicita. Tradicionalmente, estas entradas las generan los servidores en la "
+"celda del «home» del cliente. Sin embargo, los clientes de OpenAFS pueden "
+"generar los contenidos de «/afs» dinámicamente basándose en la información "
+"del archivo «/etc/openafs/CellServDB» y del DNS."
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"If you generate /afs dynamically, you may need to create /etc/openafs/"
+"CellAlias to include aliases for common cells. (The syntax of this file is "
+"one line per alias, with the cell name, a space, and then the alias for that "
+"cell.)"
+msgstr ""
+"Si genera dinámicamente «/afs», necesitará crear el archivo «/etc/openafs/"
+"CellAlias» para incluir los seudónimos («alias») de las celdas comunes. (La "
+"estructura del archivo es un seudónimo por línea, con el nombre de la celda, "
+"un espacio, y después el seudónimo para esa celda)."
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"The Sparse option is the same as Yes except that, rather than populating /"
+"afs from /etc/openafs/CellServDB immediately, cells other than the local "
+"cell will not appear until they are accessed. Cell aliases as set in the "
+"CellAlias file are shown as normal, although they may appear to be dangling "
+"links until traversed."
+msgstr ""
+"La opción «Dispersos» es la misma que «Sí» salvo que, en lugar de poblar «/"
+"afs» inmediatamente con los datos de «/etc/openafs/CellServDB», las celdas "
+"que no sean la local no se aparecerán hasta que se accedan. Los apodos de "
+"las celdas definidos en el fichero «CellAlias» se muestran de forma normal, "
+"pero pueden aparecer como enlaces incompletos hasta que se recorran. "
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid "Use fakestat to avoid hangs when listing /afs?"
+msgstr ""
+"¿Desea utilizar «fakestat» para evitar que se bloquee al listar «/afs»?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid ""
+"Because AFS is a global file space, operations on the /afs directory can "
+"generate significant network traffic. If some AFS cells are unavailable "
+"then looking at /afs using ls or a graphical file browser may hang your "
+"machine for minutes. AFS has an option to simulate answers to these "
+"operations locally to avoid these hangs. You want this option under most "
+"circumstances."
+msgstr ""
+"Debido a que AFS es un espacio global de archivos, las operaciones en el "
+"directorio «/afs» pueden generar un tráfico de red significativo. Si algunas "
+"de las celdas de AFS no están disponibles, al mirar «/afs» usando «ls» o un "
+"navegador de archivos gráfico podría bloquear varios minutos la máquina. AFS "
+"tiene una opción que simula localmente las respuesta a esas operaciones "
+"evitando así estas paradas. Debería seleccionar esta opción en la mayoría de "
+"los casos."
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid "Cell this server serves files for:"
+msgstr "Celda para los archivos de este servidor:"
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid ""
+"AFS fileservers belong to a cell. They have the key for that cell's "
+"Kerberos service and serve volumes into that cell. Normally, this cell is "
+"the same cell as the workstation's client belongs to."
+msgstr ""
+"Los servidores de archivos de AFS forman parte de una celda. Poseen una "
+"clave para la celda del servicio Kerberos y proporciona la capacidad de las "
+"celdas. Normalmente, esta celda es la misma que la celda a la que la máquina "
+"cliente pertenece."
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid "OpenAFS file server probably does not work!"
+msgstr "¡Es probable que el servidor de archivos OpenAFS no funcione!"
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid ""
+"You are running the OpenAFS file server package on an alpha. This probably "
+"doesn't work; the DES code is flaky on the alpha, along with the threaded "
+"file server. Likely, the fileserver will simply fail to start, but if it "
+"does load, data corruption may result. You have been warned."
+msgstr ""
+"Está ejecutando el paquete OpenAFS como servidor de archivos sobre la "
+"arquitectura alpha. Es probable que no funcione, el código DES es muy "
+"inestable cuando se ejecuta sobre alpha, así como los hilos del servidor de "
+"archivos. Lo más probable es que el servidor de archivos simplemente falle "
+"al iniciarlo, pero si carga, puede corromper los datos. Ha sido advertido."
diff --git a/debian/po/fr.po b/debian/po/fr.po
new file mode 100644
index 0000000..5c1ddac
--- /dev/null
+++ b/debian/po/fr.po
@@ -0,0 +1,316 @@
+# Translation of openafs debconf templates to French
+# Copyright (C) 2006, 2013, 2017 Debian French l10n team <debian-l10n-french@lists.debian.org>
+# This file is distributed under the same license as the openafs package.
+#
+# translation of fr.po to French
+#
+# Translators, if you are not familiar with the PO format, gettext
+# documentation is worth reading, especially sections dedicated to
+# this format, e.g. by running:
+# info -n '(gettext)PO Files'
+# info -n '(gettext)Header Entry'
+#
+# Some information specific to po-debconf are available at
+# /usr/share/doc/po-debconf/README-trans
+# or http://www.debian.org/intl/l10n/po-debconf/README-trans
+#
+# Developers do not need to manually edit POT or PO files.
+#
+# Translators:
+# Christian Perrier <bubulle@debian.org>, 2006, 2013.
+# Alban Vidal <alban.vidal@zordhak.fr>, 2017.
+msgid ""
+msgstr ""
+"Project-Id-Version: openafs 1.6.21-1\n"
+"Report-Msgid-Bugs-To: openafs@packages.debian.org\n"
+"POT-Creation-Date: 2017-07-10 15:27-0500\n"
+"PO-Revision-Date: 2017-08-04 10:36+0100\n"
+"Last-Translator: Alban Vidal <alban.vidal@zordhak.fr>\n"
+"Language-Team: French <debian-l10n-french@lists.debian.org>\n"
+"Language: fr\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: Lokalize 2.0\n"
+"Plural-Forms: nplurals=2; plural=(n > 1);\n"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid "DB server host names for your home cell:"
+msgstr ""
+"Hôtes serveurs de bases de données pour votre cellule locale (« home "
+"cell ») :"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid ""
+"AFS uses the file /etc/openafs/CellServDB to hold the list of servers that "
+"should be contacted to find parts of a cell. The cell you claim this "
+"workstation belongs to is not in that file. Enter the host names of the "
+"database servers separated by spaces. IMPORTANT: If you are creating a new "
+"cell and this machine is to be a database server in that cell, only enter "
+"this machine's name; add the other servers later after they are functioning. "
+"Also, do not enable the AFS client to start at boot on this server until the "
+"cell is configured. When you are ready you can edit /etc/openafs/afs.conf."
+"client to enable the client."
+msgstr ""
+"AFS utilise le fichier /etc/openafs/CellServDB pour conserver la liste des "
+"serveurs à contacter pour trouver les constituants d'une cellule. La cellule "
+"dont ce poste de travail est censé faire partie n'est pas indiquée dans ce "
+"fichier. Veuillez indiquer les noms des serveurs de bases de données, "
+"séparés par des espaces. IMPORTANT : si vous créez une nouvelle cellule et "
+"que cette machine doit être un serveur de bases de données dans cette "
+"cellule, veuillez seulement indiquer le nom de cette machine. N'ajoutez les "
+"autres serveurs que plus tard, lorsqu'ils seront opérationnels. Enfin, "
+"n'activez pas le client AFS au démarrage tant que cette cellule n'est pas "
+"configurée. Quand vous serez prêt, vous pourrez modifier /etc/openafs/afs."
+"conf.client pour mettre en service le client."
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid "AFS cell this workstation belongs to:"
+msgstr "Cellule AFS dont ce poste de travail fait partie :"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid ""
+"AFS filespace is organized into cells or administrative domains. Each "
+"workstation belongs to one cell. Usually the cell is the DNS domain name of "
+"the site."
+msgstr ""
+"L'espace des fichiers AFS est organisé en cellules ou domaines "
+"administratifs. Chaque poste de travail appartient à une cellule. "
+"Habituellement, la cellule est le nom de domaine du site."
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid "Size of AFS cache in kB:"
+msgstr "Taille du cache d'AFS (ko) :"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid ""
+"AFS uses an area of the disk to cache remote files for faster access. This "
+"cache will be mounted on /var/cache/openafs. It is important that the cache "
+"not overfill the partition it is located on. Often, people find it useful "
+"to dedicate a partition to their AFS cache."
+msgstr ""
+"AFS utilise une partie du disque pour mettre en cache des fichiers distants "
+"et accélérer les accès. Ce cache sera monté sur /var/cache/openafs. Il est "
+"important que le cache ne remplisse pas la partition sur laquelle il est "
+"situé. De nombreux utilisateurs choisissent de dédier une partition au cache "
+"d'AFS."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+msgid "Run Openafs client now and at boot?"
+msgstr "Faut-il lancer le client AFS maintenant, puis à chaque démarrage ?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+#| msgid ""
+#| "Normally, most users who install the openafs-client package expect AFS to "
+#| "be mounted automatically at boot. However, if you are planning on "
+#| "setting up a new cell or are on a laptop, you may not want it started at "
+#| "boot time. If you choose not to start AFS at boot, run /etc/init.d/"
+#| "openafs-client force-start to start the client when you wish to run it."
+msgid ""
+"Normally, most users who install the openafs-client package expect AFS to be "
+"mounted automatically at boot. However, if you are planning on setting up a "
+"new cell or are on a laptop, you may not want it started at boot time. If "
+"you choose not to start AFS at boot, run service openafs-client force-start "
+"to start the client when you wish to run it."
+msgstr ""
+"La majorité des utilisateurs qui installent le paquet openafs-client "
+"s'attendent à ce qu'il soit lancé au démarrage. Cependant, si vous prévoyez "
+"de mettre en service une nouvelle cellule ou si vous utilisez un ordinateur "
+"portable, vous ne souhaitez peut-être pas le lancer au démarrage. Si vous "
+"préférez ne pas le lancer au démarrage, utilisez la commande « service "
+"openafs-client force-start » pour le lancer quand vous en aurez besoin."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid "Look up AFS cells in DNS?"
+msgstr "Faut-il chercher les cellules AFS dans le DNS ?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid ""
+"In order to contact an AFS cell, you need the IP addresses of the cell's "
+"database servers. Normally, this information is read from /etc/openafs/"
+"CellServDB. However, if Openafs cannot find a cell in that file, it can use "
+"DNS to look for AFSDB records that contain the information."
+msgstr ""
+"Afin de contacter une cellule AFS, vous avez besoin des adresses IP de ses "
+"serveurs de bases de données. Cette information est normalement extraite de /"
+"etc/openafs/CellServDB. Cependant, si OpenAFS ne peut pas trouver de cellule "
+"dans ce fichier, il peut utiliser le DNS pour rechercher des enregistrements "
+"AFSDB qui fourniront cette information."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid "Encrypt authenticated traffic with AFS fileserver?"
+msgstr ""
+"Faut-il chiffrer le trafic authentifié avec le serveur de fichiers AFS ?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid ""
+"AFS provides a weak form of encryption that can optionally be used between a "
+"client and the fileservers. While this encryption is weaker than DES and "
+"thus is not sufficient for highly confidential data, it does provide some "
+"confidentiality and is likely to make the job of a casual attacker "
+"significantly more difficult."
+msgstr ""
+"AFS offre un mode de chiffrement faible qu'il est possible d'utiliser entre "
+"un client et les serveurs de fichiers. Bien que ce chiffrement soit plus "
+"faible que DES, et donc insuffisant pour des données hautement "
+"confidentielles, il fournit une certaine forme de confidentialité et peut "
+"rendre une attaque non préparée nettement plus difficile."
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Yes"
+msgstr "Oui"
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Sparse"
+msgstr "À la demande"
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "No"
+msgstr "Non"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid "Dynamically generate the contents of /afs?"
+msgstr "Faut-il gérer le contenu de /afs dynamiquement ?"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"/afs generally contains an entry for each cell that a client can talk to. "
+"Traditionally, these entries were generated by servers in the client's home "
+"cell. However, OpenAFS clients can generate the contents of /afs "
+"dynamically based on the contents of /etc/openafs/CellServDB and DNS."
+msgstr ""
+"Le répertoire /afs contient généralement une entrée par cellule accessible à "
+"un client donné. Traditionnellement, ces entrées ont été créées par les "
+"serveurs dans la cellule locale de chaque client. Cependant, OpenAFS peut "
+"gérer dynamiquement le contenu de /afs en se servant de /etc/openafs/"
+"CellServDB et du DNS."
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"If you generate /afs dynamically, you may need to create /etc/openafs/"
+"CellAlias to include aliases for common cells. (The syntax of this file is "
+"one line per alias, with the cell name, a space, and then the alias for that "
+"cell.)"
+msgstr ""
+"Si vous créez /afs de manière dynamique, vous aurez peut-être à créer /etc/"
+"openafs/CellAlias pour inclure les alias des cellules communes. Ce fichier "
+"comporte une ligne par alias, avec le nom de la cellule, une espace et "
+"l'alias utilisé pour la cellule."
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"The Sparse option is the same as Yes except that, rather than populating /"
+"afs from /etc/openafs/CellServDB immediately, cells other than the local "
+"cell will not appear until they are accessed. Cell aliases as set in the "
+"CellAlias file are shown as normal, although they may appear to be dangling "
+"links until traversed."
+msgstr ""
+"L'option « À la demande » est analogue à « Oui » si ce n'est que /afs n'est "
+"pas immédiatement peuplé à partir de /etc/openafs/CellServDB : les cellules "
+"autres que la cellule locale n'apparaîtront pas tant qu'il n'est pas "
+"nécessaire d'y accéder. Les alias de cellules définis dans le fichier "
+"CellAlias apparaîtront comme normaux, bien qu'ils puissent temporairement "
+"apparaître comme des liens sans cible."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid "Use fakestat to avoid hangs when listing /afs?"
+msgstr ""
+"Faut-il utiliser fakestat pour éviter les erreurs à l'affichage du contenu de /afs ?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid ""
+"Because AFS is a global file space, operations on the /afs directory can "
+"generate significant network traffic. If some AFS cells are unavailable "
+"then looking at /afs using ls or a graphical file browser may hang your "
+"machine for minutes. AFS has an option to simulate answers to these "
+"operations locally to avoid these hangs. You want this option under most "
+"circumstances."
+msgstr ""
+"Comme AFS est un espace global de fichiers, les opérations sur /afs peuvent "
+"générer un trafic réseau non négligeable. Si certaines cellules sont "
+"indisponibles, l'affichage de /afs avec ls ou avec un gestionnaire de "
+"fichiers graphique peut arrêter la machine pour quelques minutes. AFS "
+"comporte une option permettant de simuler les réponses à ces requêtes pour "
+"éviter ces plantages. Cette option est utile dans la plupart des cas."
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid "Cell this server serves files for:"
+msgstr "Cellule pour laquelle ce serveur est un serveur de fichiers :"
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid ""
+"AFS fileservers belong to a cell. They have the key for that cell's "
+"Kerberos service and serve volumes into that cell. Normally, this cell is "
+"the same cell as the workstation's client belongs to."
+msgstr ""
+"Les serveurs de fichiers AFS appartiennent à une cellule. Ils possèdent la "
+"clé pour le service Kerberos de cette cellule et y mettent à disposition des "
+"volumes. Normalement, cette cellule est la même que celle à laquelle "
+"appartient le client."
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid "OpenAFS file server probably does not work!"
+msgstr "Serveur de fichiers OpenAFS probablement défaillant"
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid ""
+"You are running the OpenAFS file server package on an alpha. This probably "
+"doesn't work; the DES code is flaky on the alpha, along with the threaded "
+"file server. Likely, the fileserver will simply fail to start, but if it "
+"does load, data corruption may result. You have been warned."
+msgstr ""
+"Vous utilisez le paquet du serveur de fichier OpenAFS sur une plateforme "
+"alpha. Cela ne fonctionne probablement pas ; le code DES est défectueux sur "
+"ces plateformes de même que le serveur de fichiers à processus légers. Il "
+"est probable que le serveur refusera tout simplement de démarrer. Cependant, "
+"s'il démarre quand même, des corruptions de données peuvent avoir lieu."
diff --git a/debian/po/gl.po b/debian/po/gl.po
new file mode 100644
index 0000000..d41afd6
--- /dev/null
+++ b/debian/po/gl.po
@@ -0,0 +1,284 @@
+# Galician translation of openafs's debconf templates
+# This file is distributed under the same license as the openafs package.
+# Jacobo Tarrio <jtarrio@debian.org>, 2008.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: openafs\n"
+"Report-Msgid-Bugs-To: openafs@packages.debian.org\n"
+"POT-Creation-Date: 2017-07-10 15:27-0500\n"
+"PO-Revision-Date: 2009-02-13 09:23-0800\n"
+"Last-Translator: Jacobo Tarrio <jtarrio@debian.org>\n"
+"Language-Team: Galician <proxecto@trasno.net>\n"
+"Language: gl\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid "DB server host names for your home cell:"
+msgstr "Nomes dos servidores de bases de datos para a cela inicial:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid ""
+"AFS uses the file /etc/openafs/CellServDB to hold the list of servers that "
+"should be contacted to find parts of a cell. The cell you claim this "
+"workstation belongs to is not in that file. Enter the host names of the "
+"database servers separated by spaces. IMPORTANT: If you are creating a new "
+"cell and this machine is to be a database server in that cell, only enter "
+"this machine's name; add the other servers later after they are functioning. "
+"Also, do not enable the AFS client to start at boot on this server until the "
+"cell is configured. When you are ready you can edit /etc/openafs/afs.conf."
+"client to enable the client."
+msgstr ""
+"AFS emprega o ficheiro /etc/openafs/CellServDB para manter a lista de "
+"servidores cos que se hai que comunicar para atopar partes dunha cela. A "
+"cela á que di que esta estación de traballo pertence non figura nese "
+"ficheiro. Introduza os nomes dos servidores de bases de datos, separados por "
+"espazos. IMPORTANTE: Se está a crear unha nova cela e esta máquina ha ser un "
+"servidor de bases de datos desa cela, introduza só o nome desta máquina; "
+"engada os nomes dos outros servidores despois, cando xa estean a funcionar. "
+"Ademáis, non permita que o cliente AFS arrinque no inicio do ordenador ata "
+"que a cela estea configurada. Cando estea preparado pode editar o ficheiro /"
+"etc/openafs/afs.conf.client para activar o cliente."
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid "AFS cell this workstation belongs to:"
+msgstr "Cela AFS á que pertence esta estación de traballo:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid ""
+"AFS filespace is organized into cells or administrative domains. Each "
+"workstation belongs to one cell. Usually the cell is the DNS domain name of "
+"the site."
+msgstr ""
+"O espazo de ficheiros AFS está organizado en celas ou dominios "
+"administrativos. Cada estación de traballo pertence a unha cela. Normalmente "
+"a cela está no nome de dominio DNS do sitio."
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid "Size of AFS cache in kB:"
+msgstr "Tamaño da caché AFS en kB:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid ""
+"AFS uses an area of the disk to cache remote files for faster access. This "
+"cache will be mounted on /var/cache/openafs. It is important that the cache "
+"not overfill the partition it is located on. Often, people find it useful "
+"to dedicate a partition to their AFS cache."
+msgstr ""
+"AFS emprega unha área do disco para facer unha caché dos ficheiros remotos "
+"para un acceso máis rápido. Esta caché hase montar en /var/cache/openafs. É "
+"importante que a caché non se faga máis grande que a partición na que está "
+"situada. A miúdo é útil adicar unha partición á caché AFS."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+msgid "Run Openafs client now and at boot?"
+msgstr "¿Executar o cliente Openafs agora e no inicio?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+#, fuzzy
+#| msgid ""
+#| "Normally, most users who install the openafs-client package expect AFS to "
+#| "be mounted automatically at boot. However, if you are planning on "
+#| "setting up a new cell or are on a laptop, you may not want it started at "
+#| "boot time. If you choose not to start AFS at boot, run /etc/init.d/"
+#| "openafs-client force-start to start the client when you wish to run it."
+msgid ""
+"Normally, most users who install the openafs-client package expect AFS to be "
+"mounted automatically at boot. However, if you are planning on setting up a "
+"new cell or are on a laptop, you may not want it started at boot time. If "
+"you choose not to start AFS at boot, run service openafs-client force-start "
+"to start the client when you wish to run it."
+msgstr ""
+"Normalmente, a maioría dos usuarios que instalan o paquete openafs-client "
+"esperan que AFS se monte automaticamente ao arrincar o sistema. "
+"Nembargantes, se pretende configurar unha nova cela ou emprega un ordenador "
+"portátil, pode que non queira inicialo co sistema. Se prefire non iniciar "
+"AFS co sistema, execute /etc/init.d/openafs-client force-start para iniciar "
+"o cliente cando o queira executar."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid "Look up AFS cells in DNS?"
+msgstr "¿Buscar as celas AFS en DNS?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid ""
+"In order to contact an AFS cell, you need the IP addresses of the cell's "
+"database servers. Normally, this information is read from /etc/openafs/"
+"CellServDB. However, if Openafs cannot find a cell in that file, it can use "
+"DNS to look for AFSDB records that contain the information."
+msgstr ""
+"Para se comunicar cunha cela AFS, precisa dos enderezos IP dos servidores de "
+"base de datos da cela. Normalmente, esta información lese de /etc/openafs/"
+"CellServDB. Nembargantes, se Openafs non pode atopar unha cela nese "
+"ficheiro, pode empregar DNS para buscar rexistros AFSDB que conteñan a "
+"información."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid "Encrypt authenticated traffic with AFS fileserver?"
+msgstr "¿Cifrar o tráfico autenticado co servidor de ficheiros AFS?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid ""
+"AFS provides a weak form of encryption that can optionally be used between a "
+"client and the fileservers. While this encryption is weaker than DES and "
+"thus is not sufficient for highly confidential data, it does provide some "
+"confidentiality and is likely to make the job of a casual attacker "
+"significantly more difficult."
+msgstr ""
+"AFS fornece unha forma feble de cifrado que se pode empregar, opcionalmente, "
+"entre un cliente e os servidores de ficheiros. Aínda que este cifrado é máis "
+"feble que DES, e polo tanto non é dabondo para datos altamente "
+"confidenciais, si que fornece algunha confidencialidade e seguramente faga o "
+"traballo dun potencial atacante significativamente máis complicado."
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Yes"
+msgstr ""
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Sparse"
+msgstr ""
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "No"
+msgstr ""
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid "Dynamically generate the contents of /afs?"
+msgstr "¿Xerar o contido de /afs dinamicamente?"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"/afs generally contains an entry for each cell that a client can talk to. "
+"Traditionally, these entries were generated by servers in the client's home "
+"cell. However, OpenAFS clients can generate the contents of /afs "
+"dynamically based on the contents of /etc/openafs/CellServDB and DNS."
+msgstr ""
+"/afs adoita conter unha entrada por cada cela coa que un cliente se pode "
+"comunicar. Tradicionalmente, esas entradas xerábanas os servidores da cela "
+"inicial do cliente. Nembargantes, os clientes OpenAFS poden xerar o contido "
+"de /afs dinamicamente baseándose no contido de /etc/openafs/CellServDB e DNS."
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"If you generate /afs dynamically, you may need to create /etc/openafs/"
+"CellAlias to include aliases for common cells. (The syntax of this file is "
+"one line per alias, with the cell name, a space, and then the alias for that "
+"cell.)"
+msgstr ""
+"Se xera /afs dinamicamente, pode ter que crear /etc/openafs/CellAlias para "
+"incluír os alias dalgunhas celas habituais. (A sintaxe deste ficheiro é unha "
+"liña por alias, co nome da cela, un espazo, e despois o alias desa cela)."
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"The Sparse option is the same as Yes except that, rather than populating /"
+"afs from /etc/openafs/CellServDB immediately, cells other than the local "
+"cell will not appear until they are accessed. Cell aliases as set in the "
+"CellAlias file are shown as normal, although they may appear to be dangling "
+"links until traversed."
+msgstr ""
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid "Use fakestat to avoid hangs when listing /afs?"
+msgstr "¿Empregar fakestat para evitar esperas ao ver o listado de /afs?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid ""
+"Because AFS is a global file space, operations on the /afs directory can "
+"generate significant network traffic. If some AFS cells are unavailable "
+"then looking at /afs using ls or a graphical file browser may hang your "
+"machine for minutes. AFS has an option to simulate answers to these "
+"operations locally to avoid these hangs. You want this option under most "
+"circumstances."
+msgstr ""
+"Como AFS é un espazo de ficheiros global, as operacións no directorio /afs "
+"poden xerar unha cantidade significativa de tráfico na rede. Se algunhas "
+"celas AFS non están dispoñibles, ver o contido de /afs empregando ls ou un "
+"navegador gráfico de ficheiros pode facer que a máquina se deteña durante "
+"varios minutos. AFS ten unha opción para simular respostas a esas operacións "
+"de xeito local para evitar esas esperas. Na maioría dos casos emprégase esta "
+"opción."
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid "Cell this server serves files for:"
+msgstr "Cela para a que este servidor serve ficheiros:"
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid ""
+"AFS fileservers belong to a cell. They have the key for that cell's "
+"Kerberos service and serve volumes into that cell. Normally, this cell is "
+"the same cell as the workstation's client belongs to."
+msgstr ""
+"Os servidores de ficheiros AFS pertencen a celas. Teñen a clave do servizo "
+"Kerberos desa cela e serven volumes na cela. Normalmente, esta cela é a "
+"mesma cela á que pertence o cliente da estación de traballo."
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid "OpenAFS file server probably does not work!"
+msgstr "O servidor de ficheiros OpenAFS probablemente non funcione"
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid ""
+"You are running the OpenAFS file server package on an alpha. This probably "
+"doesn't work; the DES code is flaky on the alpha, along with the threaded "
+"file server. Likely, the fileserver will simply fail to start, but if it "
+"does load, data corruption may result. You have been warned."
+msgstr ""
+"Está a executar o paquete servidor de ficheiros OpenAFS nun Alpha. "
+"Probablemente isto non funcione; o código DES ten fallos no Alpha, igual que "
+"o servidor de ficheiros con fíos. O máis probable é que o servidor de "
+"ficheiros non se inicie, pero se se inicia, pódese causar corrupción de "
+"datos."
diff --git a/debian/po/it.po b/debian/po/it.po
new file mode 100644
index 0000000..8058977
--- /dev/null
+++ b/debian/po/it.po
@@ -0,0 +1,290 @@
+# Italian translation of openafs debconf messages
+# Copyright (C) 2012 openafs package copyright holder
+# This file is distributed under the same license as the openafs package.
+# Beatrice Torracca <beatricet@libero.it>, 2012, 2013, 2020.
+msgid ""
+msgstr ""
+"Project-Id-Version: openafs\n"
+"Report-Msgid-Bugs-To: openafs@packages.debian.org\n"
+"POT-Creation-Date: 2017-07-10 15:27-0500\n"
+"PO-Revision-Date: 2020-02-29 14:16+0100\n"
+"Last-Translator: Beatrice Torracca <beatricet@libero.it>\n"
+"Language-Team: Italian <debian-l10n-italian@lists.debian.org>\n"
+"Language: it\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+"X-Generator: Poedit 2.2.4\n"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid "DB server host names for your home cell:"
+msgstr "Nomi host dei server DB per la propria cella:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid ""
+"AFS uses the file /etc/openafs/CellServDB to hold the list of servers that "
+"should be contacted to find parts of a cell. The cell you claim this "
+"workstation belongs to is not in that file. Enter the host names of the "
+"database servers separated by spaces. IMPORTANT: If you are creating a new "
+"cell and this machine is to be a database server in that cell, only enter "
+"this machine's name; add the other servers later after they are functioning. "
+"Also, do not enable the AFS client to start at boot on this server until the "
+"cell is configured. When you are ready you can edit /etc/openafs/afs.conf."
+"client to enable the client."
+msgstr ""
+"AFS usa il file /etc/openafs/CellServDB per memorizzare l'elenco dei server "
+"che devono essere contattati per trovare le parti di una cella. Si è "
+"indicato che questa macchina appartiene ad una cella che però non è in tale "
+"file. Inserire i nomi host dei server di database separati da spazi. "
+"IMPORTANTE: se si sta creando una nuova cella e questa macchina deve essere "
+"un server di database per tale cella, inserire solamente il nome di questa "
+"macchina; aggiungere gli altri server successivamente quando saranno in "
+"funzione. Inoltre non abilitare l'esecuzione del client AFS all'avvio su "
+"questo server fino a che la cella non è configurata. Quando si è pronti, si "
+"può modificare /etc/openafs/afs.conf.client per abilitare il client."
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid "AFS cell this workstation belongs to:"
+msgstr "Cella AFS a cui appartiene questa macchina:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid ""
+"AFS filespace is organized into cells or administrative domains. Each "
+"workstation belongs to one cell. Usually the cell is the DNS domain name of "
+"the site."
+msgstr ""
+"Lo spazio dei file AFS è organizzato in celle o domini amministrativi. Ogni "
+"macchina appartiene ad una cella. Solitamente la cella è il nome di dominio "
+"DNS del sito."
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid "Size of AFS cache in kB:"
+msgstr "Dimensione della cache AFS in kB:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid ""
+"AFS uses an area of the disk to cache remote files for faster access. This "
+"cache will be mounted on /var/cache/openafs. It is important that the cache "
+"not overfill the partition it is located on. Often, people find it useful "
+"to dedicate a partition to their AFS cache."
+msgstr ""
+"AFS usa un'area del disco per mantenere una cache dei file remoti per un "
+"accesso più veloce. Questa cache viene montata in /var/cache/openafs. È "
+"importante che la cache non riempia troppo la partizione in cui è contenuta. "
+"Spesso viene considerato utile dedicare una partizione alla cache AFS."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+msgid "Run Openafs client now and at boot?"
+msgstr "Eseguire il client Openafs ora e all'avvio?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+msgid ""
+"Normally, most users who install the openafs-client package expect AFS to be "
+"mounted automatically at boot. However, if you are planning on setting up a "
+"new cell or are on a laptop, you may not want it started at boot time. If "
+"you choose not to start AFS at boot, run service openafs-client force-start "
+"to start the client when you wish to run it."
+msgstr ""
+"Normalmente, la maggior parte degli utenti che installa il pacchetto openafs-"
+"client si aspetta che AFS venga automaticamente montato all'avvio. Tuttavia, "
+"se si ha intenzione di impostare una nuova cella o se si usa un portatile, "
+"si potrebbe non volerlo eseguire all'avvio. Se si sceglie di non eseguire "
+"AFS all'avvio, eseguire \"service openafs-client force-start\" per avviare "
+"il client al momento desiderato."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid "Look up AFS cells in DNS?"
+msgstr "Cercare le celle AFS in DNS?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid ""
+"In order to contact an AFS cell, you need the IP addresses of the cell's "
+"database servers. Normally, this information is read from /etc/openafs/"
+"CellServDB. However, if Openafs cannot find a cell in that file, it can use "
+"DNS to look for AFSDB records that contain the information."
+msgstr ""
+"Per poter contattare una cella AFS, sono necessari gli indirizzi IP dei "
+"server di database della cella. Normalmente queste informazioni vengono "
+"lette da /etc/openafs/CellServDB. Tuttavia, se Openafs non può trovare una "
+"cella in tale file, può usare il DNS per cercare record AFSDB che contengano "
+"quelle informazioni."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid "Encrypt authenticated traffic with AFS fileserver?"
+msgstr "Cifrare il traffico autenticato con il server di file AFS?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid ""
+"AFS provides a weak form of encryption that can optionally be used between a "
+"client and the fileservers. While this encryption is weaker than DES and "
+"thus is not sufficient for highly confidential data, it does provide some "
+"confidentiality and is likely to make the job of a casual attacker "
+"significantly more difficult."
+msgstr ""
+"AFS fornisce una forma debole di cifratura che può essere usata in modo "
+"opzionale tra un client e i server di file. Sebbene questa cifratura sia più "
+"debole di DES e perciò non sufficiente per dati altamente confidenziali, "
+"fornisce un certo grado di riservatezza ed è probabile che renda il lavoro "
+"significativamente più difficile a chi tenti un attacco non mirato."
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Yes"
+msgstr "Sì"
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Sparse"
+msgstr "Sparse"
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "No"
+msgstr "No"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid "Dynamically generate the contents of /afs?"
+msgstr "Generare dinamicamente il contenuto di /afs?"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"/afs generally contains an entry for each cell that a client can talk to. "
+"Traditionally, these entries were generated by servers in the client's home "
+"cell. However, OpenAFS clients can generate the contents of /afs "
+"dynamically based on the contents of /etc/openafs/CellServDB and DNS."
+msgstr ""
+"/afs contiene generalmente una voce per ciascuna cella con cui un client può "
+"comunicare. Tradizionalmente queste voci erano generate dai server nella "
+"cella a cui appartiene il client. Tuttavia, i client OpenAFS possono "
+"generare il contenuto di /afs dinamicamente in base al contenuto di /etc/"
+"openafs/CellServDB e DNS."
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"If you generate /afs dynamically, you may need to create /etc/openafs/"
+"CellAlias to include aliases for common cells. (The syntax of this file is "
+"one line per alias, with the cell name, a space, and then the alias for that "
+"cell.)"
+msgstr ""
+"Se /afs viene generato dinamicamente, può essere necessario creare /etc/"
+"openafs/CellAlias per includere alias per le celle comuni. (La sintassi per "
+"questo file è una riga per ogni alias, con il nome della cella, uno spazio e "
+"poi l'alias di quella cella.)"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"The Sparse option is the same as Yes except that, rather than populating /"
+"afs from /etc/openafs/CellServDB immediately, cells other than the local "
+"cell will not appear until they are accessed. Cell aliases as set in the "
+"CellAlias file are shown as normal, although they may appear to be dangling "
+"links until traversed."
+msgstr ""
+"L'opzione Sparse è uguale a Sì tranne per il fatto che, invece di popolare "
+"immediatamente /afs da /etc/openafs/CellServDB, le celle diverse da quella "
+"locale non appariranno fino a che non si accederà ad esse. Gli alias per le "
+"celle, così come impostati nel file CellAlias, sono mostrati normalmente "
+"anche se potrebbero sembrare collegamenti interrotti fino a che non vengono "
+"esplorati."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid "Use fakestat to avoid hangs when listing /afs?"
+msgstr ""
+"Usare fakestat per evitare blocchi quando viene elencato il contenuto di /"
+"afs?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid ""
+"Because AFS is a global file space, operations on the /afs directory can "
+"generate significant network traffic. If some AFS cells are unavailable "
+"then looking at /afs using ls or a graphical file browser may hang your "
+"machine for minutes. AFS has an option to simulate answers to these "
+"operations locally to avoid these hangs. You want this option under most "
+"circumstances."
+msgstr ""
+"Dato che AFS è uno spazio dei file globale, le operazioni nella directory /"
+"afs possono generare un traffico di rete considerevole. Se alcune celle AFS "
+"sono non raggiungibili allora, quando si guarda il contenuto di /afs con ls "
+"o con un navigatore di file grafico, la macchina può bloccarsi per alcuni "
+"minuti. AFS ha un'opzione per simulare in locale le risposte a queste "
+"operazioni per evitare questi blocchi. Nella maggior parte delle situazioni "
+"è consigliato abilitare questa opzione."
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid "Cell this server serves files for:"
+msgstr "Cella per la quale questo server serve i file:"
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid ""
+"AFS fileservers belong to a cell. They have the key for that cell's "
+"Kerberos service and serve volumes into that cell. Normally, this cell is "
+"the same cell as the workstation's client belongs to."
+msgstr ""
+"I server di file AFS appartengono ad una cella. Hanno la chiave per il "
+"servizio Kerberos di tale cella e servono i volumi in quella cella. "
+"Normalmente, questa cella è la stessa cella a cui appartiene il client della "
+"macchina."
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid "OpenAFS file server probably does not work!"
+msgstr "Il server di file OpenAFS probabilmente non funziona!"
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid ""
+"You are running the OpenAFS file server package on an alpha. This probably "
+"doesn't work; the DES code is flaky on the alpha, along with the threaded "
+"file server. Likely, the fileserver will simply fail to start, but if it "
+"does load, data corruption may result. You have been warned."
+msgstr ""
+"Si sta eseguendo il pacchetto del server di file OpenAFS su una macchina "
+"alpha. Ciò probabilmente non funziona; il codice DES è carente in alpha, "
+"così come il server di file con thread. Probabilmente il server di file "
+"semplicemente non riuscirà ad avviarsi, ma se viene caricato può causare la "
+"corruzione di dati. Ritenersi avvertiti."
diff --git a/debian/po/ja.po b/debian/po/ja.po
new file mode 100644
index 0000000..4327215
--- /dev/null
+++ b/debian/po/ja.po
@@ -0,0 +1,286 @@
+# Copyright (C) 2008-2009 Russ Allbery <rra@debian.org>
+# This file is distributed under the same license as openafs package.
+# Hideki Yamane (Debian-JP) <henrich@debian.or.jp>, 2009.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: openafs 1.6\n"
+"Report-Msgid-Bugs-To: openafs@packages.debian.org\n"
+"POT-Creation-Date: 2017-07-10 15:27-0500\n"
+"PO-Revision-Date: 2013-04-09 03:17+0900\n"
+"Last-Translator: Hideki Yamane (Debian-JP) <henrich@debian.or.jp>\n"
+"Language-Team: Japanese <debian-japanese@lists.debian.org>\n"
+"Language: ja\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid "DB server host names for your home cell:"
+msgstr "ホームセルの DB サーバホスト名:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid ""
+"AFS uses the file /etc/openafs/CellServDB to hold the list of servers that "
+"should be contacted to find parts of a cell. The cell you claim this "
+"workstation belongs to is not in that file. Enter the host names of the "
+"database servers separated by spaces. IMPORTANT: If you are creating a new "
+"cell and this machine is to be a database server in that cell, only enter "
+"this machine's name; add the other servers later after they are functioning. "
+"Also, do not enable the AFS client to start at boot on this server until the "
+"cell is configured. When you are ready you can edit /etc/openafs/afs.conf."
+"client to enable the client."
+msgstr ""
+"AFS はセルの各パートを検索するのに使用する確認先サーバのリストを保持するの"
+"に /etc/openafs/CellServDB ファイルを使います。あなたがこのワークステーション"
+"が属していると指定しているセルは、このファイル上にありません。データベース"
+"サーバのホスト名を空白で区切って入力してください。「重要」：新しいセルを作っ"
+"て、このマシンがそのセルでのデータベースサーバになった場合、このマシンの名前"
+"のみを入力してください。他のサーバが動作するようになった後で、そのサーバを追"
+"加してください。そして、セルが設定されるまで、このサーバでは AFS クライアント"
+"を起動時に開始しないようにしてください。設定が完了して準備が整ったら /etc/"
+"openafs/afs.conf.client を編集してクライアントを有効にしてください。"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid "AFS cell this workstation belongs to:"
+msgstr "このワークステーションが所属する AFS セル:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid ""
+"AFS filespace is organized into cells or administrative domains. Each "
+"workstation belongs to one cell. Usually the cell is the DNS domain name of "
+"the site."
+msgstr ""
+"AFS ファイル空間はセルや管理ドメインから成ります。各ワークステーションは一つ"
+"のセルに属します。通常セルはサイトの DNS ドメイン名です。"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid "Size of AFS cache in kB:"
+msgstr "AFS キャッシュサイズ (kB):"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid ""
+"AFS uses an area of the disk to cache remote files for faster access. This "
+"cache will be mounted on /var/cache/openafs. It is important that the cache "
+"not overfill the partition it is located on. Often, people find it useful "
+"to dedicate a partition to their AFS cache."
+msgstr ""
+"AFS はより速いアクセスを行うために、ディスクの一部をリモートファイルのキャッ"
+"シュとして使います。このキャッシュは /var/cache/openafs にマウントされます。"
+"重要なのはキャッシュが置かれたパーティションを過度に圧迫しない事です。多くの"
+"場合、AFS キャッシュを専用のパーティションに割り当てるのが適していることで"
+"しょう。"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+msgid "Run Openafs client now and at boot?"
+msgstr "Openafs クライアントを今すぐ、そして起動時に実行しますか?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+#, fuzzy
+#| msgid ""
+#| "Normally, most users who install the openafs-client package expect AFS to "
+#| "be mounted automatically at boot. However, if you are planning on "
+#| "setting up a new cell or are on a laptop, you may not want it started at "
+#| "boot time. If you choose not to start AFS at boot, run /etc/init.d/"
+#| "openafs-client force-start to start the client when you wish to run it."
+msgid ""
+"Normally, most users who install the openafs-client package expect AFS to be "
+"mounted automatically at boot. However, if you are planning on setting up a "
+"new cell or are on a laptop, you may not want it started at boot time. If "
+"you choose not to start AFS at boot, run service openafs-client force-start "
+"to start the client when you wish to run it."
+msgstr ""
+"通常、openafs-client パッケージをインストールしたユーザの大半は起動時に自動的"
+"に AFS をマウントすることを期待しています。しかし、新しいセルを設定しようとし"
+"ている、あるいはノート PC で作業している場合は起動時に開始したくないかもしれ"
+"ません。起動時に AFS を開始しないのを選んだ場合は、実行したくなったときに /"
+"etc/init.d/openafs-client force-start を実行してクライアントを開始してくださ"
+"い。"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid "Look up AFS cells in DNS?"
+msgstr "AFS セルの検索を DNS で行いますか?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid ""
+"In order to contact an AFS cell, you need the IP addresses of the cell's "
+"database servers. Normally, this information is read from /etc/openafs/"
+"CellServDB. However, if Openafs cannot find a cell in that file, it can use "
+"DNS to look for AFSDB records that contain the information."
+msgstr ""
+"AFS セルに接続するためには、セルのデータベースサーバ群の IP アドレスが必要で"
+"す。通常、この情報は /etc/openafs/CellServDB で参照できます。しかし、Openafs "
+"がそのファイル中でセルを見つけられなかった場合、DNS を使ってその情報を含む "
+"AFSDB レコードを検索することができます。"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid "Encrypt authenticated traffic with AFS fileserver?"
+msgstr "AFS ファイルサーバへの認証トラフィックを暗号化しますか?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid ""
+"AFS provides a weak form of encryption that can optionally be used between a "
+"client and the fileservers. While this encryption is weaker than DES and "
+"thus is not sufficient for highly confidential data, it does provide some "
+"confidentiality and is likely to make the job of a casual attacker "
+"significantly more difficult."
+msgstr ""
+"AFS はクライアントとファイルサーバ間で使うこともできる弱い暗号化形式を提供し"
+"ています。この暗号化は DES よりも弱く、そのため非常に重要なデータを取り扱うに"
+"は不十分ですが、ある程度の隠匿性は提供しており、技術力の低い攻撃者の作業をか"
+"なり難しくするでしょう。"
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Yes"
+msgstr "はい"
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Sparse"
+msgstr "Sparse"
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "No"
+msgstr "いいえ"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid "Dynamically generate the contents of /afs?"
+msgstr "/afs の内容を動的に生成しますか?"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"/afs generally contains an entry for each cell that a client can talk to. "
+"Traditionally, these entries were generated by servers in the client's home "
+"cell. However, OpenAFS clients can generate the contents of /afs "
+"dynamically based on the contents of /etc/openafs/CellServDB and DNS."
+msgstr ""
+"/afs は通常クライアントが通信できる各セルのエントリを含んでいます。慣例上、こ"
+"れらのエントリはクライアントのホームセル内にサーバによって生成されています。"
+"しかし、OpenAFS クライアントは /afs の内容を /etc/openafs/CellServDB の内容"
+"と DNS を元にして動的に生成することができます。"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"If you generate /afs dynamically, you may need to create /etc/openafs/"
+"CellAlias to include aliases for common cells. (The syntax of this file is "
+"one line per alias, with the cell name, a space, and then the alias for that "
+"cell.)"
+msgstr ""
+"/afs を動的に生成する場合、共通のセルのエイリアスを含むために /etc/openafs/"
+"CellAlias を作成する必要があります (このファイルのシンタックスはエイリアスご"
+"とに 1 行で、セルの名前・空白・そしてセルのエイリアス、となります)。"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"The Sparse option is the same as Yes except that, rather than populating /"
+"afs from /etc/openafs/CellServDB immediately, cells other than the local "
+"cell will not appear until they are accessed. Cell aliases as set in the "
+"CellAlias file are shown as normal, although they may appear to be dangling "
+"links until traversed."
+msgstr ""
+"「Sparse」の選択肢は「はい」と同様ですが、直ちに /etc/openafs/CellServDB か"
+"ら /afs を生成するのに対し、こちらの場合はローカルセル以外のセルはアクセスす"
+"るまで現れません。このセルは走査されるまでぶら下がったリンクのように表示され"
+"ますが、CellAlias ファイル中で設定されたセルの別名は普通に表示されます。"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid "Use fakestat to avoid hangs when listing /afs?"
+msgstr ""
+"/afs をリストアップする際にハングアップを避けるため、fakestat を使いますか?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid ""
+"Because AFS is a global file space, operations on the /afs directory can "
+"generate significant network traffic. If some AFS cells are unavailable "
+"then looking at /afs using ls or a graphical file browser may hang your "
+"machine for minutes. AFS has an option to simulate answers to these "
+"operations locally to avoid these hangs. You want this option under most "
+"circumstances."
+msgstr ""
+"AFS は巨大なファイル空間であるため、/afs ディレクトリでの操作は膨大なネット"
+"ワークトラフィックを生成することがあります。もし、いくつかの AFS セルが利用で"
+"きなくなり、その際に /afs で ls やグラフィカルなファイルブラウザを実行して参"
+"照すると、数分間はマシンがハングアップするでしょう。AFS はこのようなハング"
+"アップを避けるため、これらの操作に対してローカルで答えをシミュレートするオプ"
+"ションがあります。多くの場合、このオプションを有効にしておいた方が良いでしょ"
+"う。"
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid "Cell this server serves files for:"
+msgstr "このサーバがファイルを提供するセル:"
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid ""
+"AFS fileservers belong to a cell. They have the key for that cell's "
+"Kerberos service and serve volumes into that cell. Normally, this cell is "
+"the same cell as the workstation's client belongs to."
+msgstr ""
+"AFS のファイルサーバ群は一つのセルに属しています。このファイルサーバ群は、セ"
+"ルの Kerberos サービスについての鍵を持っており、ボリュームをこれらのセルに提"
+"供します。通常、このセルはワークステーションのクライアントが属しているのと同"
+"じセルです。"
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid "OpenAFS file server probably does not work!"
+msgstr "OpenAFS ファイルサーバは恐らく動作しません!"
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid ""
+"You are running the OpenAFS file server package on an alpha. This probably "
+"doesn't work; the DES code is flaky on the alpha, along with the threaded "
+"file server. Likely, the fileserver will simply fail to start, but if it "
+"does load, data corruption may result. You have been warned."
+msgstr ""
+"OpenAFS ファイルサーバを alpha アーキテクチャ上で動作させています。これは恐ら"
+"く動作しません。DES コードは alpha 上で、加えてスレッドで動作するファイルサー"
+"バでは怪しげなものです。最もありえるのはファイルサーバは起動せず、もし動作し"
+"たとしてもデータの損傷が起こるであろうということです。警告しました。"
diff --git a/debian/po/nl.po b/debian/po/nl.po
new file mode 100644
index 0000000..4ebf472
--- /dev/null
+++ b/debian/po/nl.po
@@ -0,0 +1,305 @@
+# Dutch translation of openafs debconf templates.
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the openafs package.
+# Frans Spiesschaert <Frans.Spiesschaert@yucom.be>, 2014, 2018.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: openafs_1.6.21-3\n"
+"Report-Msgid-Bugs-To: openafs@packages.debian.org\n"
+"POT-Creation-Date: 2017-07-10 15:27-0500\n"
+"PO-Revision-Date: 2018-03-29 20:49+0200\n"
+"Last-Translator: Frans Spiesschaert <Frans.Spiesschaert@yucom.be>\n"
+"Language-Team: Debian Dutch l10n Team <debian-l10n-dutch@lists.debian.org>\n"
+"Language: nl\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Poedit-Language: nl\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+"X-Generator: Gtranslator 2.91.7\n"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid "DB server host names for your home cell:"
+msgstr "Computernamen van de DB-servers voor de cel waartoe u behoort:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid ""
+"AFS uses the file /etc/openafs/CellServDB to hold the list of servers that "
+"should be contacted to find parts of a cell. The cell you claim this "
+"workstation belongs to is not in that file. Enter the host names of the "
+"database servers separated by spaces. IMPORTANT: If you are creating a new "
+"cell and this machine is to be a database server in that cell, only enter "
+"this machine's name; add the other servers later after they are functioning. "
+"Also, do not enable the AFS client to start at boot on this server until the "
+"cell is configured. When you are ready you can edit /etc/openafs/afs.conf."
+"client to enable the client."
+msgstr ""
+"AFS houdt in het bestand '/etc/openafs/CellServDB een lijst bij van servers "
+"die gecontacteerd moeten worden bij het zoeken naar delen van een cel. De "
+"cel waartoe dit werkstation volgens wat u aangaf behoort, is niet terug te "
+"vinden in dit bestand. Gelieve dus de computernamen van de databaseservers "
+"op te geven, gescheiden met spaties. OPGELET: als u bezig bent een nieuwe "
+"cel op te zetten en deze machine als databaseserver voor deze cel zal "
+"fungeren dient u hier enkel de naam van deze machine in te geven; u kunt "
+"verdere servers dan later toevoegen eens alles functioneert. Zorg er ook "
+"voor dat u het opstarten van de AFS-client tijdens het opstarten van de "
+"machine niet activeert voordat de cel geconfigureerd is. Zodra u daarmee "
+"klaar bent kunt u /etc/openafs/afs.conf.client aanpassen om het automatisch "
+"opstarten van de client tijdens de machinestart te activeren."
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid "AFS cell this workstation belongs to:"
+msgstr "Tot welke AFS-cel behoort dit werkstation?"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid ""
+"AFS filespace is organized into cells or administrative domains. Each "
+"workstation belongs to one cell. Usually the cell is the DNS domain name of "
+"the site."
+msgstr ""
+"Een AFS-bestandsruimte is georganiseerd in cellen of administratieve "
+"domeinen. Elk werkstation behoort tot 1 cel. Gewoonlijk is deze cel de DNS-"
+"domeinnaam van de site."
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid "Size of AFS cache in kB:"
+msgstr "Grootte van de AFS-cache in kB:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid ""
+"AFS uses an area of the disk to cache remote files for faster access. This "
+"cache will be mounted on /var/cache/openafs. It is important that the cache "
+"not overfill the partition it is located on. Often, people find it useful "
+"to dedicate a partition to their AFS cache."
+msgstr ""
+"AFS gebruikt ruimte op de schijf als cache, zodat toegang tot bestanden op "
+"andere systemen sneller werkt. Deze cache wordt aangekoppeld in /var/cache/"
+"openafs. Het is belangrijk dat de cache niet groter wordt dan de partitie "
+"waarop deze zich bevindt. Vaak is het handig om een partititie te hebben met "
+"enkel de AFS-cache."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+msgid "Run Openafs client now and at boot?"
+msgstr "Wilt u de Openafs-client nu en tijdens het opstarten draaien?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+#| msgid ""
+#| "Normally, most users who install the openafs-client package expect AFS to "
+#| "be mounted automatically at boot. However, if you are planning on "
+#| "setting up a new cell or are on a laptop, you may not want it started at "
+#| "boot time. If you choose not to start AFS at boot, run /etc/init.d/"
+#| "openafs-client force-start to start the client when you wish to run it."
+msgid ""
+"Normally, most users who install the openafs-client package expect AFS to be "
+"mounted automatically at boot. However, if you are planning on setting up a "
+"new cell or are on a laptop, you may not want it started at boot time. If "
+"you choose not to start AFS at boot, run service openafs-client force-start "
+"to start the client when you wish to run it."
+msgstr ""
+"De meeste gebruikers die het pakket 'openafs-client' installeren verwachten "
+"gewoonlijk dat AFS automatisch aangekoppeld wordt tijdens het opstarten. Als "
+"u echter van plan bent een nieuwe cel op te zetten, of als u een laptop "
+"gebruikt, wilt u het wellicht niet starten bij het opstarten. Indien u er "
+"voor opteert AFS niet te starten bij het opstarten van de computer, moet u "
+"het commando 'service openafs-client force-start' gebruiken om het "
+"cliëntprogramma te starten wanneer u het wenst uit te voeren."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid "Look up AFS cells in DNS?"
+msgstr "AFS-cellen opzoeken in DNS?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid ""
+"In order to contact an AFS cell, you need the IP addresses of the cell's "
+"database servers. Normally, this information is read from /etc/openafs/"
+"CellServDB. However, if Openafs cannot find a cell in that file, it can use "
+"DNS to look for AFSDB records that contain the information."
+msgstr ""
+"Om een AFS-cel te contacteren dient u het IP-adres van de databaseserver "
+"voor die cel te hebben. Normaal is deze informatie beschikbaar in /etc/"
+"openafs/CellServDB. Openafs biedt de mogelijkheid om de AFSDB-records op te "
+"zoeken via DNS wanneer dit bestand niet aanwezig is."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid "Encrypt authenticated traffic with AFS fileserver?"
+msgstr ""
+"Wilt u dat geauthenticeerd verkeer met de AFS-bestandsserver versleuteld "
+"word?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid ""
+"AFS provides a weak form of encryption that can optionally be used between a "
+"client and the fileservers. While this encryption is weaker than DES and "
+"thus is not sufficient for highly confidential data, it does provide some "
+"confidentiality and is likely to make the job of a casual attacker "
+"significantly more difficult."
+msgstr ""
+"AFS biedt een zwakke encryptievorm aan die optioneel kan gebruikt worden bij "
+"de communicatie tussen de client en bestandsservers. Hoewel deze encryptie "
+"zwakker is dan DES, en dus niet voldoende is voor zeer vertrouwelijke data, "
+"biedt het enige vertrouwelijkheid en plaatst een nonchalante aanvaller voor "
+"significante moeilijkheden. "
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Yes"
+msgstr "Ja"
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Sparse"
+msgstr "Gespreid"
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "No"
+msgstr "Nee"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid "Dynamically generate the contents of /afs?"
+msgstr "Wilt u de inhoud van /afs dynamisch genereren?"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"/afs generally contains an entry for each cell that a client can talk to. "
+"Traditionally, these entries were generated by servers in the client's home "
+"cell. However, OpenAFS clients can generate the contents of /afs "
+"dynamically based on the contents of /etc/openafs/CellServDB and DNS."
+msgstr ""
+"/afs bevat een ingang voor elke cel waarmee een client kan communiceren. "
+"Traditioneel worden deze ingangen aangemaakt door de servers van de cel "
+"waartoe de client behoort. OpenAFS-clients zijn echter in staat om de inhoud "
+"van /afs dynamisch te genereren, uitgaande van de data in /etc/openafs/"
+"CellServDB en DNS."
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"If you generate /afs dynamically, you may need to create /etc/openafs/"
+"CellAlias to include aliases for common cells. (The syntax of this file is "
+"one line per alias, with the cell name, a space, and then the alias for that "
+"cell.)"
+msgstr ""
+"Als u ervoor kiest om /afs dynamisch te genereren kan het noodzakelijk zijn "
+"om /etc/openafs/CellAlias aan te maken met daarin de aliases voor "
+"veelgebruikte cellen. (De syntax van dit bestand is 1 regel per alias, "
+"waarbij elke regel bestaat uit de naam van een cel gevolgd door een spatie "
+"en de alias voor die cel.)"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"The Sparse option is the same as Yes except that, rather than populating /"
+"afs from /etc/openafs/CellServDB immediately, cells other than the local "
+"cell will not appear until they are accessed. Cell aliases as set in the "
+"CellAlias file are shown as normal, although they may appear to be dangling "
+"links until traversed."
+msgstr ""
+"De optie 'Gespreid' is hetzelfde als 'Ja', met dit verschil dat /afs niet "
+"onmiddellijk ingevuld wordt met gegevens uit /etc/openafs/CellServDB, maar "
+"dat cellen, op uitzondering van de lokale cel, slechts toegevoegd worden op "
+"het ogenblik dat er contact mee gemaakt wordt. De aliassen van cellen, zoals "
+"die vermeld staan in het bestand CellAlias blijven zichtbaar zoals "
+"gewoonlijk, maar kunnen er als een loze symbolische koppeling uitzien tot u "
+"de cel gebruikt heeft."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid "Use fakestat to avoid hangs when listing /afs?"
+msgstr ""
+"Wilt u fakestat gebruiken om te voorkomen dat het programma bij het "
+"weergeven van de inhoud van /afs zou vastlopen?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid ""
+"Because AFS is a global file space, operations on the /afs directory can "
+"generate significant network traffic. If some AFS cells are unavailable "
+"then looking at /afs using ls or a graphical file browser may hang your "
+"machine for minutes. AFS has an option to simulate answers to these "
+"operations locally to avoid these hangs. You want this option under most "
+"circumstances."
+msgstr ""
+"Omdat AFS een globale bestandsruimte is, kunnen bewerkingen op de '/afs'-map "
+"flink wat netwerkverkeer veroorzaken. Wanneer sommige AFS-cellen "
+"onbeschikbaar zijn, kan het weergeven van de inhoud van /afs met het "
+"commando 'ls' of via een grafische bestandsbrowser er toe leiden dat uw "
+"machine gedurende minuten vastloopt. AFS heeft een optie die de antwoorden "
+"voor deze operaties lokaal kan simuleren en zo het vastlopen vermijdt. In de "
+"meeste omstandigheden doet u er het beste aan deze optie te activeren."
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid "Cell this server serves files for:"
+msgstr "Cellen waarvoor deze server bestanden aanbiedt:"
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid ""
+"AFS fileservers belong to a cell. They have the key for that cell's "
+"Kerberos service and serve volumes into that cell. Normally, this cell is "
+"the same cell as the workstation's client belongs to."
+msgstr ""
+"AFS-bestandsservers maken deel uit van een cel. Ze beschikken over de "
+"sleutel voor de Kerberos-dienst van die cel, en bedienen die cel met "
+"schijven. Die cel is normaliter dezelfde als die waartoe de client op het "
+"werkstation behoort."
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid "OpenAFS file server probably does not work!"
+msgstr "De OpenAFS bestandsserver werkt waarschijnlijk niet!"
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid ""
+"You are running the OpenAFS file server package on an alpha. This probably "
+"doesn't work; the DES code is flaky on the alpha, along with the threaded "
+"file server. Likely, the fileserver will simply fail to start, but if it "
+"does load, data corruption may result. You have been warned."
+msgstr ""
+"U draait het OpenAFS bestandsserver pakket op een alpha. Dit werkt "
+"waarschijnlijk niet; de DES-code is onbetrouwbaar op alpha, evenals de "
+"'threaded' bestandsserver. Naar alle waarschijnlijkheid zal de "
+"bestandsserver niet eens opstarten, maar als hij toch start kan "
+"gegevensbeschadiging het gevolg zijn. U bent gewaarschuwd. "
diff --git a/debian/po/pt.po b/debian/po/pt.po
new file mode 100644
index 0000000..8b15742
--- /dev/null
+++ b/debian/po/pt.po
@@ -0,0 +1,297 @@
+# Portuguese translation for openafs debconf messages
+# Copyright (C) 2007 Miguel Figueiredo
+# This file is distributed under the same license as the openafs package.
+#
+# Miguel Figueiredo <elmig@debianpt.org>, 2007, 2013.
+# Rui Branco <ruipb@debianpt.org>, 2017.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: openafs 1.4.2-5\n"
+"Report-Msgid-Bugs-To: openafs@packages.debian.org\n"
+"POT-Creation-Date: 2017-07-10 15:27-0500\n"
+"PO-Revision-Date: 2017-08-09 09:47+0100\n"
+"Last-Translator: Rui Branco <ruipb@debianpt.org>\n"
+"Language-Team: Portuguese <traduz@debianpt.org>\n"
+"Language: pt\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+"X-Generator: Gtranslator 2.91.7\n"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid "DB server host names for your home cell:"
+msgstr "Nomes de máquinas dos servidores de bases de dados para a sua célula:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid ""
+"AFS uses the file /etc/openafs/CellServDB to hold the list of servers that "
+"should be contacted to find parts of a cell. The cell you claim this "
+"workstation belongs to is not in that file. Enter the host names of the "
+"database servers separated by spaces. IMPORTANT: If you are creating a new "
+"cell and this machine is to be a database server in that cell, only enter "
+"this machine's name; add the other servers later after they are functioning. "
+"Also, do not enable the AFS client to start at boot on this server until the "
+"cell is configured. When you are ready you can edit /etc/openafs/afs.conf."
+"client to enable the client."
+msgstr ""
+"O AFS utiliza o ficheiro /etc/openafs/CellServDB para guardar a lista de "
+"servidores que devem ser contactados para encontrar partes de uma célula. A "
+"célula que você diz a que esta estação de trabalho pertence não está nesse "
+"ficheiro. Introduza os nomes das máquinas dos servidores de bases de dados "
+"separados por espaços. IMPORTANTE: Se está a criar uma nova célula e esta "
+"máquina é uma máquina que irá servir a base de dados nessa célula, apenas "
+"introduza o nome desta máquina; acrescente depois os outros servidores "
+"depois de estes estarem a funcionar. Além disso, não habilite o client AFS "
+"para iniciar no arranque neste servidor até que a célula esteja "
+"configurada. Quando você estiver pronto pode editar /etc/openafs/afs.conf."
+"client para habilitar o cliente."
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid "AFS cell this workstation belongs to:"
+msgstr "Célula AFS a que esta estação de trabalho pertence:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid ""
+"AFS filespace is organized into cells or administrative domains. Each "
+"workstation belongs to one cell. Usually the cell is the DNS domain name of "
+"the site."
+msgstr ""
+"O espaço de ficheiros do AFS é organizado em células ou domínios "
+"administrativos. Cada estação de trabalho pertence a uma célula. "
+"Normalmente a célula é o nome de domínio DNS do site."
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid "Size of AFS cache in kB:"
+msgstr "Tamanho da cache AFS em kB:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid ""
+"AFS uses an area of the disk to cache remote files for faster access. This "
+"cache will be mounted on /var/cache/openafs. It is important that the cache "
+"not overfill the partition it is located on. Often, people find it useful "
+"to dedicate a partition to their AFS cache."
+msgstr ""
+"O AFS utiliza uma área do disco para fazer cache de ficheiros remotos para "
+"um acesso mais rápido. Esta cache irá ser montada em /var/cache/openafs. É "
+"importante que a cache não encha a partição em que está localizada. Muitas "
+"vezes, algumas pessoas acham útil dedicar uma partição para a sua cache AFS."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+msgid "Run Openafs client now and at boot?"
+msgstr "Correr o cliente Openafs agora e no arranque?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+#| msgid ""
+#| "Normally, most users who install the openafs-client package expect AFS to "
+#| "be mounted automatically at boot. However, if you are planning on "
+#| "setting up a new cell or are on a laptop, you may not want it started at "
+#| "boot time. If you choose not to start AFS at boot, run /etc/init.d/"
+#| "openafs-client force-start to start the client when you wish to run it."
+msgid ""
+"Normally, most users who install the openafs-client package expect AFS to be "
+"mounted automatically at boot. However, if you are planning on setting up a "
+"new cell or are on a laptop, you may not want it started at boot time. If "
+"you choose not to start AFS at boot, run service openafs-client force-start "
+"to start the client when you wish to run it."
+msgstr ""
+"Normalmente, a maioria dos utilizadores que instalam o pacote openafs-client "
+"esperam que o AFS seja montado automaticamente no arranque. No entanto, se "
+"você está a planear instalar uma nova célula ou está num portátil pode não "
+"querer que seja iniciado no arranque. Se escolher não iniciar o AFS no "
+"arranque, corra o serviço openafs-client force-start para iniciar o cliente "
+"quando quiser que este corra."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid "Look up AFS cells in DNS?"
+msgstr "Procurar por células AFS no DNS?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid ""
+"In order to contact an AFS cell, you need the IP addresses of the cell's "
+"database servers. Normally, this information is read from /etc/openafs/"
+"CellServDB. However, if Openafs cannot find a cell in that file, it can use "
+"DNS to look for AFSDB records that contain the information."
+msgstr ""
+"De modo a contactar uma célula AFS, você precisa dos endereços IP dos "
+"servidores de bases de dados das células. Normalmente, esta informação é "
+"lida a partir de /etc/openafs/CellServDB. No entanto, se o Openafs não "
+"conseguir encontrar a célula nesse ficheiro, pode utilizar o DNS para "
+"procurar por registos AFSDB que contenham esta informação."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid "Encrypt authenticated traffic with AFS fileserver?"
+msgstr "Encriptar tráfico autenticado com o servidor de ficheiros AFS?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid ""
+"AFS provides a weak form of encryption that can optionally be used between a "
+"client and the fileservers. While this encryption is weaker than DES and "
+"thus is not sufficient for highly confidential data, it does provide some "
+"confidentiality and is likely to make the job of a casual attacker "
+"significantly more difficult."
+msgstr ""
+"O AFS disponibiliza uma forma fraca de encriptação que pode ser utilizada "
+"opcionalmente entre um cliente e os servidores de ficheiros. Enquanto que "
+"esta encriptação é mais fraca que a DES e por isso não suficiente para dados "
+"altamente confidenciais, esta disponibiliza alguma confidencialidade e é "
+"provável que torne o trabalho de um casual atacante significativamente mais "
+"difícil."
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Yes"
+msgstr "Sim"
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Sparse"
+msgstr "Disperso"
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "No"
+msgstr "Não"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid "Dynamically generate the contents of /afs?"
+msgstr "Gerar dinamicamente o conteúdo de /afs?"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"/afs generally contains an entry for each cell that a client can talk to. "
+"Traditionally, these entries were generated by servers in the client's home "
+"cell. However, OpenAFS clients can generate the contents of /afs "
+"dynamically based on the contents of /etc/openafs/CellServDB and DNS."
+msgstr ""
+"O /afs geralmente contém uma entrada para cada célula para a qual cada "
+"cliente pode falar. Tradicionalmente, estas entradas foram geradas por "
+"servidores na célula do cliente. No entanto, os clientes OpenAFS podem "
+"gerar o conteúdo dinamicamente de /afs baseado no conteúdo de /etc/openafs/"
+"CellServDB e do DNS."
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"If you generate /afs dynamically, you may need to create /etc/openafs/"
+"CellAlias to include aliases for common cells. (The syntax of this file is "
+"one line per alias, with the cell name, a space, and then the alias for that "
+"cell.)"
+msgstr ""
+"Se gerar dinamicamente /afs, você pode precisar de criar /etc/openafs/"
+"CellAlias para incluir 'aliases' para células usuais. (A sintaxe para este "
+"ficheiro é uma linha por alias, com o nome da célula, um espaço, e depois o "
+"alias para essa célula.)"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"The Sparse option is the same as Yes except that, rather than populating /"
+"afs from /etc/openafs/CellServDB immediately, cells other than the local "
+"cell will not appear until they are accessed. Cell aliases as set in the "
+"CellAlias file are shown as normal, although they may appear to be dangling "
+"links until traversed."
+msgstr ""
+"A opção Disperso é o mesmo que a Sim, excepto que em vez de preencher "
+"imediatamente /afs a partir de /etc/openafs/CellServDB, as células que não a "
+"célula local, não aparecerão até serem acedidas. Os aliases para as células "
+"definidas no ficheiro CellAlias são mostradas como normalmente, embora "
+"possam parecer ser links pendentes até serem atravessados."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid "Use fakestat to avoid hangs when listing /afs?"
+msgstr "Utilizar o fakestat para evitar bloqueios ao listar /afs?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid ""
+"Because AFS is a global file space, operations on the /afs directory can "
+"generate significant network traffic. If some AFS cells are unavailable "
+"then looking at /afs using ls or a graphical file browser may hang your "
+"machine for minutes. AFS has an option to simulate answers to these "
+"operations locally to avoid these hangs. You want this option under most "
+"circumstances."
+msgstr ""
+"Devido ao AFS ser um espaço de ficheiros global, as operações no directório /"
+"afs podem gerar tráfego de rede significativo. Se algumas células AFS não "
+"estiverem disponíveis então olhar para /afs utilizando o ls ou um explorador "
+"de ficheiros gráfico pode bloquear a sua máquina por minutos. O AFS tem uma "
+"opção para simular localmente respostas a essas operações para evitar esses "
+"bloqueios. Você irá querer esta opção na maioria das circunstâncias."
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid "Cell this server serves files for:"
+msgstr "Célula para a qual este servidor serve ficheiros:"
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid ""
+"AFS fileservers belong to a cell. They have the key for that cell's "
+"Kerberos service and serve volumes into that cell. Normally, this cell is "
+"the same cell as the workstation's client belongs to."
+msgstr ""
+"Os servidores de ficheiros AFS pertencem a uma célula. Estes têm a chave "
+"para o serviço Kerberos dessa célula e volumes a servir nessa célula. "
+"Normalmente, esta célula é a mesma célula a que pertence o cliente da "
+"estação de trabalho."
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid "OpenAFS file server probably does not work!"
+msgstr "O servidor de ficheiros AFS provavelmente não funciona!"
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid ""
+"You are running the OpenAFS file server package on an alpha. This probably "
+"doesn't work; the DES code is flaky on the alpha, along with the threaded "
+"file server. Likely, the fileserver will simply fail to start, but if it "
+"does load, data corruption may result. You have been warned."
+msgstr ""
+"Você está a correr o pacote do servidor de ficheiros OpenAFS num alpha. "
+"Isto provavelmente não funciona; o código DES tem problemas em alpha, além "
+"do servidor de ficheiros com 'threads'. Provavelmente, o servidor de "
+"ficheiros irá simplesmente falhar o arranque, mas se carregar, pode resultar "
+"em corrupção de dados. Você foi avisado."
diff --git a/debian/po/pt_BR.po b/debian/po/pt_BR.po
new file mode 100644
index 0000000..c8786f7
--- /dev/null
+++ b/debian/po/pt_BR.po
@@ -0,0 +1,306 @@
+# Brazilian Portuguese translation of openafs.
+# Copyright (C) 2013 THE openafs'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the postfix package.
+# André Luís Lopes <andrelop@debian.org>, -2009.
+# Albino B Neto (binoanb) <binoanb@gmail.com>, 2013.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: openafs 1.6.2.1-1\n"
+"Report-Msgid-Bugs-To: openafs@packages.debian.org\n"
+"POT-Creation-Date: 2017-07-10 15:27-0500\n"
+"PO-Revision-Date: 2013-04-08 16:14-0300\n"
+"Last-Translator: Albino B Neto (binoanb) <binoanb@gmail.com>\n"
+"Language-Team: Brazilian Portuguese <debian-l10n-portuguese@lists.debian."
+"org>\n"
+"Language: pt_BR\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n > 1);\n"
+"X-Generator: Lokalize 1.4\n"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid "DB server host names for your home cell:"
+msgstr "Nomes de host do servidor DB para sua célula home:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid ""
+"AFS uses the file /etc/openafs/CellServDB to hold the list of servers that "
+"should be contacted to find parts of a cell. The cell you claim this "
+"workstation belongs to is not in that file. Enter the host names of the "
+"database servers separated by spaces. IMPORTANT: If you are creating a new "
+"cell and this machine is to be a database server in that cell, only enter "
+"this machine's name; add the other servers later after they are functioning. "
+"Also, do not enable the AFS client to start at boot on this server until the "
+"cell is configured. When you are ready you can edit /etc/openafs/afs.conf."
+"client to enable the client."
+msgstr ""
+"O AFS usa o arquivo /etc/openafs/CellServDB para armazenar a lista de "
+"servidores que deverão ser contatados para se encontrar partes de uma "
+"célula. A célula da qual você afirma que esta estação de trabalho pertence "
+"não está nesse arquivo. Informe os nomes de host dos servidores de base de "
+"dados separados por espaços. IMPORTANTE: Caso você esteja criando uma nova "
+"célula e esta máquina seja um servidor de base de dados nessa célula, apenas "
+"informe o nome desta máquina. Adicione os outros servidores posteriormente "
+"depois que os mesmos estejam funcionando. Além disso, não habilite o cliente "
+"AFS para iniciar durante a inicialização desse servidor até que a célula "
+"esteja configurada. Quando você estiver pronto, você poder editar o arquivo /"
+"etc/openafs/afs.conf.client para habilitar o cliente."
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid "AFS cell this workstation belongs to:"
+msgstr "Célula AFS à qual esta estação de trabalho pertence:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid ""
+"AFS filespace is organized into cells or administrative domains. Each "
+"workstation belongs to one cell. Usually the cell is the DNS domain name of "
+"the site."
+msgstr ""
+"O espaço de arquivo AFS é organizado em células ou domínios administrativos. "
+"Cada estação de trabalho pertence a uma célula. Normalmente a célula é o "
+"nome de domínio DNS do site."
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid "Size of AFS cache in kB:"
+msgstr "Tamanho do cache AFS em kB:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid ""
+"AFS uses an area of the disk to cache remote files for faster access. This "
+"cache will be mounted on /var/cache/openafs. It is important that the cache "
+"not overfill the partition it is located on. Often, people find it useful "
+"to dedicate a partition to their AFS cache."
+msgstr ""
+"O AFS usa uma área do disco para fazer cache de arquivos remotos para acesso "
+"mais rápido. Esse cache será montando em /var/cache/openafs. É importante "
+"que o cache não ocupe toda a partição na qual está localizado. Geralmente, "
+"as pessoas acham útil dedicar uma partição para seus caches AFS."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+msgid "Run Openafs client now and at boot?"
+msgstr "Executar o cliente OpenAFS agora e durante a inicialização?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+#, fuzzy
+#| msgid ""
+#| "Normally, most users who install the openafs-client package expect AFS to "
+#| "be mounted automatically at boot. However, if you are planning on "
+#| "setting up a new cell or are on a laptop, you may not want it started at "
+#| "boot time. If you choose not to start AFS at boot, run /etc/init.d/"
+#| "openafs-client force-start to start the client when you wish to run it."
+msgid ""
+"Normally, most users who install the openafs-client package expect AFS to be "
+"mounted automatically at boot. However, if you are planning on setting up a "
+"new cell or are on a laptop, you may not want it started at boot time. If "
+"you choose not to start AFS at boot, run service openafs-client force-start "
+"to start the client when you wish to run it."
+msgstr ""
+"Normalmente, a maioria dos usuários que instalam o pacote openafs-client "
+"esperam que o AFS seja montado automaticamente durante a inicialização. "
+"Porém, caso você esteja planejando configurar uma nova célula ou esteja em "
+"um laptop, você pode não desejar que ele seja iniciado automaticamente no "
+"momento da inicialização. Caso você opte por não iniciar o AFS durante a "
+"inicialização, execute /etc/init.d/openafs-client force-start para iniciar o "
+"cliente quando desejar executá-lo."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid "Look up AFS cells in DNS?"
+msgstr "Procurar células AFS no DNS?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid ""
+"In order to contact an AFS cell, you need the IP addresses of the cell's "
+"database servers. Normally, this information is read from /etc/openafs/"
+"CellServDB. However, if Openafs cannot find a cell in that file, it can use "
+"DNS to look for AFSDB records that contain the information."
+msgstr ""
+"Para poder contatar uma célula AFS, você precisa dos endereços IP dos "
+"servidores de base de dados da célula. Normalmente, essa informação é lida "
+"do /etc/openafs/CellServDB. Porém, caso o OpenAFS não possa encontrar uma "
+"célula nesse arquivo, ele pode usar o DNS para procurar por registros AFSDB "
+"que contenham a informação."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid "Encrypt authenticated traffic with AFS fileserver?"
+msgstr "Encriptar o tráfego autenticado com o servidor de arquivos AFS?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid ""
+"AFS provides a weak form of encryption that can optionally be used between a "
+"client and the fileservers. While this encryption is weaker than DES and "
+"thus is not sufficient for highly confidential data, it does provide some "
+"confidentiality and is likely to make the job of a casual attacker "
+"significantly more difficult."
+msgstr ""
+"O AFS fornece uma forma fraca de encriptação que pode ser opcionalmente "
+"usada entre o cliente e os servidor de arquivos. Embora essa encriptação "
+"seja mais fraca do que DES e, portanto, não seja suficiente para dados "
+"altamente confidenciais, ela fornece alguma confidencialidade e "
+"provavelmente torna o trabalho de um atacante casual mais difícil."
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Yes"
+msgstr "Sim"
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Sparse"
+msgstr "Sparse"
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "No"
+msgstr "Não"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid "Dynamically generate the contents of /afs?"
+msgstr "Gerar dinamicamente o conteúdo do /afs?"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"/afs generally contains an entry for each cell that a client can talk to. "
+"Traditionally, these entries were generated by servers in the client's home "
+"cell. However, OpenAFS clients can generate the contents of /afs "
+"dynamically based on the contents of /etc/openafs/CellServDB and DNS."
+msgstr ""
+"O /afs geralmente contém uma entrada para cada célula com a qual o cliente "
+"pode conversar. Tradicionalmente, essas entradas eram geradas por servidores "
+"na célula home do cliente. Porém, clientes OpenAFS podem gerar o conteúdo "
+"do /afs dinamicamente baseando-se no conteúdo do /etc/openafs/CellServDB e "
+"do DNS."
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"If you generate /afs dynamically, you may need to create /etc/openafs/"
+"CellAlias to include aliases for common cells. (The syntax of this file is "
+"one line per alias, with the cell name, a space, and then the alias for that "
+"cell.)"
+msgstr ""
+"Caso você gere o /afs dinamicamente, você pode precisar criar o /etc/openafs/"
+"CellAlias para incluir apelidos (\"aliases\") para células comuns. (A "
+"sintaxe desse arquivo é uma linha por apelido, com o nome da célula, um "
+"espaço e então o apelido para essa célula.)"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"The Sparse option is the same as Yes except that, rather than populating /"
+"afs from /etc/openafs/CellServDB immediately, cells other than the local "
+"cell will not appear until they are accessed. Cell aliases as set in the "
+"CellAlias file are shown as normal, although they may appear to be dangling "
+"links until traversed."
+msgstr ""
+"A opção Sparse é o mesmo que Sim, exceto que, ao invés de preencher o /asf a "
+"partir do /etc/openafs/Cellservdb imediatamente, outras células além da "
+"local não aparecerão até que sejam acessadas. Apelidos (\"aliases\") de "
+"células como definidos no arquivo CellAlias são mostrados normalmente, "
+"embora possam parecer links pendentes e até atravessados."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid "Use fakestat to avoid hangs when listing /afs?"
+msgstr "Usar \"fakestat\" para evitar travamentos durante a listagem do /afs?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid ""
+"Because AFS is a global file space, operations on the /afs directory can "
+"generate significant network traffic. If some AFS cells are unavailable "
+"then looking at /afs using ls or a graphical file browser may hang your "
+"machine for minutes. AFS has an option to simulate answers to these "
+"operations locally to avoid these hangs. You want this option under most "
+"circumstances."
+msgstr ""
+"Devido ao AFS ser um espaço de arquivos global, operações no diretório /afs "
+"podem gerar um tráfego de rede significativo. Caso algumas células AFS não "
+"estejam disponíveis, então pesquisar o /afs usando o comando \"ls\" ou um "
+"gerenciador de arquivos gráfico pode travar sua máquina por alguns minutos. "
+"O AFS possui uma opção para simular respostas para essas operações "
+"localmente para evitar esses travamentos. Você desejará usar essa opção na "
+"maioria dos casos."
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid "Cell this server serves files for:"
+msgstr "Célula para a qual este servidor serve arquivos:"
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid ""
+"AFS fileservers belong to a cell. They have the key for that cell's "
+"Kerberos service and serve volumes into that cell. Normally, this cell is "
+"the same cell as the workstation's client belongs to."
+msgstr ""
+"Servidores de arquivo AFS pertencem à uma célula. Eles possuem a chave para "
+"cada serviço Kerberos da célula e servem volumes dentro dessa célula. "
+"Normalmente, essa célula é a mesma célula da qual a estação de trabalho faz "
+"parte."
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid "OpenAFS file server probably does not work!"
+msgstr "Servidor de arquivos OpenAFS provavelmente não funciona!"
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid ""
+"You are running the OpenAFS file server package on an alpha. This probably "
+"doesn't work; the DES code is flaky on the alpha, along with the threaded "
+"file server. Likely, the fileserver will simply fail to start, but if it "
+"does load, data corruption may result. You have been warned."
+msgstr ""
+"Você está executando o pacote do servidor de arquivos OpenAFS em uma máquina "
+"Alpha. Isso provavelmente não funciona. O código DES, em conjunto com o "
+"servidor de arquivos com suporte a threads, é problemático em máquinas "
+"Alpha. Provavelmente, o servidor de arquivos simplesmente falhará ao "
+"iniciar, mas se ele iniciar, pode resultar em corrupção de dados. Você foi "
+"avisado."
+
+#~ msgid "How large is your AFS cache (kB)?"
+#~ msgstr "Qual o tamanho de seu cache AFS (KB) ?"
+
+#~ msgid "50000"
+#~ msgstr "50000"
diff --git a/debian/po/ru.po b/debian/po/ru.po
new file mode 100644
index 0000000..889a93e
--- /dev/null
+++ b/debian/po/ru.po
@@ -0,0 +1,290 @@
+# translation of ru.po to Russian
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the openafs package.
+#
+# Yuri Kozlov <yuray@komyakino.ru>, 2009, 2013.
+# Lev Lamberov <dogsleg@debian.org>, 2017.
+msgid ""
+msgstr ""
+"Project-Id-Version: openafs 1.6.2.1-1\n"
+"Report-Msgid-Bugs-To: openafs@packages.debian.org\n"
+"POT-Creation-Date: 2017-07-10 15:27-0500\n"
+"PO-Revision-Date: 2017-12-09 15:23+0500\n"
+"Last-Translator: Lev Lamberov <dogsleg@debian.org>\n"
+"Language-Team: Russian <debian-l10n-russian@lists.debian.org>\n"
+"Language: ru\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: Poedit 2.0.4\n"
+"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n"
+"%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid "DB server host names for your home cell:"
+msgstr "Имена машин-серверов БД домашней ячейки:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid ""
+"AFS uses the file /etc/openafs/CellServDB to hold the list of servers that "
+"should be contacted to find parts of a cell. The cell you claim this "
+"workstation belongs to is not in that file. Enter the host names of the "
+"database servers separated by spaces. IMPORTANT: If you are creating a new "
+"cell and this machine is to be a database server in that cell, only enter "
+"this machine's name; add the other servers later after they are functioning. "
+"Also, do not enable the AFS client to start at boot on this server until the "
+"cell is configured. When you are ready you can edit /etc/openafs/afs.conf."
+"client to enable the client."
+msgstr ""
+"AFS использует файл /etc/openafs/CellServDB для хранения списка серверов, с "
+"которыми нужно соединяться при поиске частей ячейки. Ячейка, которой "
+"принадлежит данная рабочая станция, указывается не в этом файле. Вводите "
+"имена узлов серверов базы данных через пробел. ВАЖНО: если вы создаёте новую "
+"ячейку и эта машина является базой данных этой ячейки, то введите здесь "
+"только имя данной машины; добавляйте другие серверы по мере ввода их в "
+"работу. Также, выключите запуск клиента AFS при загрузке машины пока не "
+"будет произведена настройка ячейки. Когда всё будет готово, включите клиент, "
+"отредактировав файл /etc/openafs/afs.conf.client."
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid "AFS cell this workstation belongs to:"
+msgstr "Ячейка AFS, которой принадлежит данная рабочая станция:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid ""
+"AFS filespace is organized into cells or administrative domains. Each "
+"workstation belongs to one cell. Usually the cell is the DNS domain name of "
+"the site."
+msgstr ""
+"Всё файловое пространство AFS сгруппировано в ячейки или административные "
+"домены. Каждая рабочая станция принадлежит определённой ячейке. Обычно, "
+"ячейка характеризуется доменным именем DNS данной машины."
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid "Size of AFS cache in kB:"
+msgstr "Размер кэша AFS в килобайтах:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid ""
+"AFS uses an area of the disk to cache remote files for faster access. This "
+"cache will be mounted on /var/cache/openafs. It is important that the cache "
+"not overfill the partition it is located on. Often, people find it useful "
+"to dedicate a partition to their AFS cache."
+msgstr ""
+"AFS использует часть диска для кэширования удалённых файлов с целью "
+"ускорения доступа. Этот кэш будет смонтирован в каталог /var/cache/openafs. "
+"Очень важно, чтобы кэш не переполнил раздел, на котором он расположен. Часто "
+"пользователи создают отдельный раздел для кэша AFS."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+msgid "Run Openafs client now and at boot?"
+msgstr "Запустить клиент Openafs сейчас и запускать при загрузке системы?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+msgid ""
+"Normally, most users who install the openafs-client package expect AFS to be "
+"mounted automatically at boot. However, if you are planning on setting up a "
+"new cell or are on a laptop, you may not want it started at boot time. If "
+"you choose not to start AFS at boot, run service openafs-client force-start "
+"to start the client when you wish to run it."
+msgstr ""
+"Обычно, большинство пользователей, устанавливающих пакет openafs-client, "
+"ожидают, что AFS будет монтироваться автоматически при загрузке системы. "
+"Однако, если вы планируете настройку новой ячейки или работаете на ноутбуке, "
+"то вам это может не подойти. Если вы выберите не запускать AFS при загрузке "
+"системы, то по желанию соответствующую службу можно запустить командой "
+"openafs-client force-start."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid "Look up AFS cells in DNS?"
+msgstr "Искать ячейки AFS в DNS?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid ""
+"In order to contact an AFS cell, you need the IP addresses of the cell's "
+"database servers. Normally, this information is read from /etc/openafs/"
+"CellServDB. However, if Openafs cannot find a cell in that file, it can use "
+"DNS to look for AFSDB records that contain the information."
+msgstr ""
+"Для подключения к ячейке AFS вам нужны IP-адреса серверов базы данных "
+"ячейки. Обычно, эта информация берётся из файла /etc/openafs/CellServDB. "
+"Однако, если Openafs не может найти ячейку в этом файле, то она может "
+"выполнить поиск записи AFSDB в DNS, в которых тоже содержится данная "
+"информация."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid "Encrypt authenticated traffic with AFS fileserver?"
+msgstr "Шифровать аутентифицированный трафик с файловым сервером AFS?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid ""
+"AFS provides a weak form of encryption that can optionally be used between a "
+"client and the fileservers. While this encryption is weaker than DES and "
+"thus is not sufficient for highly confidential data, it does provide some "
+"confidentiality and is likely to make the job of a casual attacker "
+"significantly more difficult."
+msgstr ""
+"AFS предоставляет нестойкое подобие шифрования, которое можно включить для "
+"обмена данными между клиентом и файловыми серверами. Хотя это шифрование "
+"слабее DES и недостаточно для очень конфиденциальных данных, оно всё же "
+"обеспечивает некоторую защиту, которая значительно осложнит работу "
+"неискушённому злоумышленнику."
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Yes"
+msgstr "Да"
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Sparse"
+msgstr "Частично"
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "No"
+msgstr "Нет"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid "Dynamically generate the contents of /afs?"
+msgstr "Создавать содержимое /afs динамически?"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"/afs generally contains an entry for each cell that a client can talk to. "
+"Traditionally, these entries were generated by servers in the client's home "
+"cell. However, OpenAFS clients can generate the contents of /afs "
+"dynamically based on the contents of /etc/openafs/CellServDB and DNS."
+msgstr ""
+"В основном в /afs содержатся элементы для каждой ячейки, с которыми "
+"взаимодействует клиент. Обычно, эти элементы создаются серверами клиентской "
+"домашней ячейки. Однако, клиенты OpenAFS могут создавать содержимое /afs "
+"динамически на основе содержимого /etc/openafs/CellServDB и DNS."
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"If you generate /afs dynamically, you may need to create /etc/openafs/"
+"CellAlias to include aliases for common cells. (The syntax of this file is "
+"one line per alias, with the cell name, a space, and then the alias for that "
+"cell.)"
+msgstr ""
+"Если вы разрешите создавать /afs динамически, то вам может потребоваться "
+"создать файл /etc/openafs/CellAlias с псевдонимами часто используемых ячеек. "
+"(В файле указываются псевдонимы по одному на строку в формате: имя ячейки, "
+"пробел, псевдоним ячейки.)"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"The Sparse option is the same as Yes except that, rather than populating /"
+"afs from /etc/openafs/CellServDB immediately, cells other than the local "
+"cell will not appear until they are accessed. Cell aliases as set in the "
+"CellAlias file are shown as normal, although they may appear to be dangling "
+"links until traversed."
+msgstr ""
+"Значение «Частично» означает то же, что и «Да», за исключением того, что "
+"заполнение /afs из /etc/openafs/CellServDB выполняется сразу, все ячейки "
+"кроме локальной не появятся до тех пор, пока к ним не будет выполнено "
+"обращение. Псевдонимы ячеек задаются в файле CellAlias как обычно, хотя они "
+"могут вести себя как подвисшие ссылки (dangling links) пока не будет "
+"выполнен обход."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid "Use fakestat to avoid hangs when listing /afs?"
+msgstr ""
+"Использовать fakestat, чтобы избежать зависаний при просмотре списка "
+"содержимого /afs?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid ""
+"Because AFS is a global file space, operations on the /afs directory can "
+"generate significant network traffic. If some AFS cells are unavailable "
+"then looking at /afs using ls or a graphical file browser may hang your "
+"machine for minutes. AFS has an option to simulate answers to these "
+"operations locally to avoid these hangs. You want this option under most "
+"circumstances."
+msgstr ""
+"Так как AFS представляет собой глобальное файловое пространство, операции с "
+"каталогом /afs могут создавать значительный сетевой трафик. Если некоторые "
+"ячейки AFS недоступны, то просмотр /afs с помощью команды ls или "
+"графического файлового обозревателя может приостановить работу машины на "
+"несколько минут. В AFS есть возможность симулировать ответы для таких "
+"операций, чтобы предотвратить зависания. В большинстве случаев лучше "
+"воспользоваться данной возможностью."
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid "Cell this server serves files for:"
+msgstr "Ячейка, для которой работает этот сервер:"
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid ""
+"AFS fileservers belong to a cell. They have the key for that cell's "
+"Kerberos service and serve volumes into that cell. Normally, this cell is "
+"the same cell as the workstation's client belongs to."
+msgstr ""
+"Файловые серверы AFS принадлежат ячейке. У них есть ключ для службы Kerberos "
+"их ячейки, и они обслуживают тома этой ячейки. Обычно, эта ячейка совпадает "
+"с ячейкой, которой принадлежит клиент рабочей станции."
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid "OpenAFS file server probably does not work!"
+msgstr "Вероятно, файловый сервер OpenAFS не работает!"
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid ""
+"You are running the OpenAFS file server package on an alpha. This probably "
+"doesn't work; the DES code is flaky on the alpha, along with the threaded "
+"file server. Likely, the fileserver will simply fail to start, but if it "
+"does load, data corruption may result. You have been warned."
+msgstr ""
+"Вы работаете с пакетом файлового сервера OpenAFS на архитектуре alpha. "
+"Скорее всего, он не работает; код DES часто отказывает на alpha, тоже "
+"случается и с потоковым файловым сервером. Вероятно, файловый сервер просто "
+"не запустится, но если это даже произойдёт, то в результате это может "
+"повредить данные. Это было предупреждение."
diff --git a/debian/po/sv.po b/debian/po/sv.po
new file mode 100644
index 0000000..b36f21a
--- /dev/null
+++ b/debian/po/sv.po
@@ -0,0 +1,287 @@
+# Swedish OpenAFS debconf
+# Copyright (C) 2015 Martin Bagge.
+# This file is distributed under the same license as the OpenAFS package.
+# Martin Bagge <brother@bsnet.se>, 2008, 2015.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: openafs\n"
+"Report-Msgid-Bugs-To: openafs@packages.debian.org\n"
+"POT-Creation-Date: 2017-07-10 15:27-0500\n"
+"PO-Revision-Date: 2015-04-01 18:30+0100\n"
+"Last-Translator: Martin Bagge / brother <brother@bsnet.se>\n"
+"Language-Team: Swedish <debian-l10n-swedish@lists.debian.org>\n"
+"Language: sv\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: Poedit 1.7.3\n"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid "DB server host names for your home cell:"
+msgstr "Värdnamn för DB-server för din hemmacell:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid ""
+"AFS uses the file /etc/openafs/CellServDB to hold the list of servers that "
+"should be contacted to find parts of a cell. The cell you claim this "
+"workstation belongs to is not in that file. Enter the host names of the "
+"database servers separated by spaces. IMPORTANT: If you are creating a new "
+"cell and this machine is to be a database server in that cell, only enter "
+"this machine's name; add the other servers later after they are functioning. "
+"Also, do not enable the AFS client to start at boot on this server until the "
+"cell is configured. When you are ready you can edit /etc/openafs/afs.conf."
+"client to enable the client."
+msgstr ""
+"AFS använder filer /etc/openafs/CellServDB för att hålla reda på listan av "
+"servrar som ska kontaktas för att hitta delar till en cell. Cellen du påstår "
+"att den här arbetsstationen tillhör finns inte i den filen. Ange värdnamnet "
+"på databasservrar, skilj med mellanslag. VIKTIGT: Om du håller på att skapa "
+"en ny cell och denna maskinen ska agera databas för den cellen anger du bara "
+"namnet på denna maskinen här. Lägg till de övriga servrarna när de är redo. "
+"Du ska heller inte ange att AFS-klienten ska starta vid systemets uppstart "
+"förrän cellen är helt konfigurerad. Redigera /etc/openafs/afs.conf.client "
+"för att aktivera klienten."
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid "AFS cell this workstation belongs to:"
+msgstr "AFS-cell som denna arbetsstation tillhör:"
+
+# altså. det här med "the domain namne of the site" är helt menlöst att översätta.... /brother 31/7-08
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid ""
+"AFS filespace is organized into cells or administrative domains. Each "
+"workstation belongs to one cell. Usually the cell is the DNS domain name of "
+"the site."
+msgstr ""
+"Filsystemet i AFS är organiserat i celler eller administrativa domäner. "
+"Varje arbetsstation tillhör en cell, cellnamnet är vanligen samma som "
+"domännamnet."
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid "Size of AFS cache in kB:"
+msgstr "Storlek på AFS-cache i kB:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid ""
+"AFS uses an area of the disk to cache remote files for faster access. This "
+"cache will be mounted on /var/cache/openafs. It is important that the cache "
+"not overfill the partition it is located on. Often, people find it useful "
+"to dedicate a partition to their AFS cache."
+msgstr ""
+"AFS använder en del av disken för att mellanlagrar fjärrfiler för snabbare "
+"tillgång. Denna mellanlagring kommer att monteras som /var/cache/openafs. "
+"Det är viktigt att mellanlagringen inte tar större plats än partitionen som "
+"den huserar på. Det är vanligt att ha en dedikerad partition för AFS "
+"mellanlagring."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+msgid "Run Openafs client now and at boot?"
+msgstr "Starta Openafsklienten nu och vid varje uppstart?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+#, fuzzy
+#| msgid ""
+#| "Normally, most users who install the openafs-client package expect AFS to "
+#| "be mounted automatically at boot. However, if you are planning on "
+#| "setting up a new cell or are on a laptop, you may not want it started at "
+#| "boot time. If you choose not to start AFS at boot, run /etc/init.d/"
+#| "openafs-client force-start to start the client when you wish to run it."
+msgid ""
+"Normally, most users who install the openafs-client package expect AFS to be "
+"mounted automatically at boot. However, if you are planning on setting up a "
+"new cell or are on a laptop, you may not want it started at boot time. If "
+"you choose not to start AFS at boot, run service openafs-client force-start "
+"to start the client when you wish to run it."
+msgstr ""
+"Vanligen monteras AFS automatiskt vid uppstart men om du håller på att sätta "
+"upp en ny cell eller arbetar med en bärbar dator kan det vara en idé att "
+"inte starta klienten automatiskt. Om du inte väljer att starta AFS vid "
+"uppstart ska du köra /etc/init.d/openafs-client force-start för att starta "
+"klienten när du vill ha tillgång till den."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid "Look up AFS cells in DNS?"
+msgstr "Slå upp AFS-celler i DNS?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid ""
+"In order to contact an AFS cell, you need the IP addresses of the cell's "
+"database servers. Normally, this information is read from /etc/openafs/"
+"CellServDB. However, if Openafs cannot find a cell in that file, it can use "
+"DNS to look for AFSDB records that contain the information."
+msgstr ""
+"För att kontakta en AFS-cell så behöver du IP-adresser till cellens "
+"databasservrar. Vanligen kan dessa läsas från /etc/openafs/CellServDB men om "
+"cellen inte finns där kan DNS användas för att slå upp AFSDB-poster med "
+"korrekt information."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid "Encrypt authenticated traffic with AFS fileserver?"
+msgstr "Kryptera autentiseringstrafiken till AFS-filservern?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid ""
+"AFS provides a weak form of encryption that can optionally be used between a "
+"client and the fileservers. While this encryption is weaker than DES and "
+"thus is not sufficient for highly confidential data, it does provide some "
+"confidentiality and is likely to make the job of a casual attacker "
+"significantly more difficult."
+msgstr ""
+"AFS tillhandahåller en svag typ av kryptering som kan användas mellan "
+"klienten och filservrarna. Även om denna kryptering är svagare än DES och "
+"därmed inte särskilt lämplig för känslig information så kan den förhindra "
+"enklare attacker och försvåra vissa steg för en utomstående."
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Yes"
+msgstr "Ja"
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Sparse"
+msgstr "Gles"
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "No"
+msgstr "Nej"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid "Dynamically generate the contents of /afs?"
+msgstr "Skapa innehåll i /afs dynamiskt?"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"/afs generally contains an entry for each cell that a client can talk to. "
+"Traditionally, these entries were generated by servers in the client's home "
+"cell. However, OpenAFS clients can generate the contents of /afs "
+"dynamically based on the contents of /etc/openafs/CellServDB and DNS."
+msgstr ""
+"/afs innehåller generellt sett en post för varje cell som klienten kan prata "
+"med. Dessa poster skapades tidigare av servrar i klientens hemmacell. Numera "
+"kan OpenAFS-klienter skapa innehållet i /afs dynamiskt med stöd av "
+"innehållet i /etc/openafs/CellServDB eller DNS."
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"If you generate /afs dynamically, you may need to create /etc/openafs/"
+"CellAlias to include aliases for common cells. (The syntax of this file is "
+"one line per alias, with the cell name, a space, and then the alias for that "
+"cell.)"
+msgstr ""
+"Om /afs skapas dynamiskt så kan du behöva skapa /etc/openafs/CellAlias för "
+"de vanligare cellerna. (Direktivet skrivs med ett alias per rad. Cellnamnet, "
+"ett mellanslag och alias för den cellen)"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"The Sparse option is the same as Yes except that, rather than populating /"
+"afs from /etc/openafs/CellServDB immediately, cells other than the local "
+"cell will not appear until they are accessed. Cell aliases as set in the "
+"CellAlias file are shown as normal, although they may appear to be dangling "
+"links until traversed."
+msgstr ""
+"Alternativet Gles är samma sak som Ja förutom att celler som inte är lokala "
+"inte kommer att dyka upp innan de efterfrågas, till skillnad från att "
+"populera cellerna i /afs från etc/openafs/CellServDB direkt. Cell-alias som "
+"anges in filen CellAlias visas som vanligt även om de kan visa sig peka på "
+"tomhet."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid "Use fakestat to avoid hangs when listing /afs?"
+msgstr "Ska fakestat användas för att undvika problem när /afs listas?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid ""
+"Because AFS is a global file space, operations on the /afs directory can "
+"generate significant network traffic. If some AFS cells are unavailable "
+"then looking at /afs using ls or a graphical file browser may hang your "
+"machine for minutes. AFS has an option to simulate answers to these "
+"operations locally to avoid these hangs. You want this option under most "
+"circumstances."
+msgstr ""
+"Då AFS är ett globalt filutrymme kan operationer på /afs skapa ganska mycket "
+"nätverkstrafik. Om några AFS-celler är onåbara så kan ls och grafiska "
+"filhanterare låsa maskinen i flera minuter om en eller flera celler är "
+"onåbara. AFS kan ställas in att simulera svar från de onåbara cellerna för "
+"att undvika låsningar. Det är mycket sällsynt att inte aktivera detta "
+"alternativ."
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid "Cell this server serves files for:"
+msgstr "Namn på cellen som denna server tillhandahåller filer för:"
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid ""
+"AFS fileservers belong to a cell. They have the key for that cell's "
+"Kerberos service and serve volumes into that cell. Normally, this cell is "
+"the same cell as the workstation's client belongs to."
+msgstr ""
+"AFS-filservrar tillhör en cell. De har en nyckel till cellens Kerberostjänst "
+"och tillhandahåller volymer i den cellen. Vanligen är denna cell samma cell "
+"som arbetsstationens klient tillhör."
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid "OpenAFS file server probably does not work!"
+msgstr "Filservern OpenAFS fungerar troligen inte!"
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid ""
+"You are running the OpenAFS file server package on an alpha. This probably "
+"doesn't work; the DES code is flaky on the alpha, along with the threaded "
+"file server. Likely, the fileserver will simply fail to start, but if it "
+"does load, data corruption may result. You have been warned."
+msgstr ""
+"Du kör OpenAFS filservern på en Alpha. Det kommer förmodligen inte att "
+"fungera då DES-koden i kombination med den trådade filservern är instabil. "
+"Förmodligen kommer filservern helt enkelt att vägra starta, om den laddar så "
+"kan data skadas. Nu har du fått varningen, det är ditt beslut."
diff --git a/debian/po/templates.pot b/debian/po/templates.pot
new file mode 100644
index 0000000..a87fcfb
--- /dev/null
+++ b/debian/po/templates.pot
@@ -0,0 +1,224 @@
+# SOME DESCRIPTIVE TITLE.
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the openafs package.
+# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
+#
+#, fuzzy
+msgid ""
+msgstr ""
+"Project-Id-Version: openafs\n"
+"Report-Msgid-Bugs-To: openafs@packages.debian.org\n"
+"POT-Creation-Date: 2017-07-10 15:27-0500\n"
+"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
+"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=CHARSET\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid "DB server host names for your home cell:"
+msgstr ""
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid ""
+"AFS uses the file /etc/openafs/CellServDB to hold the list of servers that "
+"should be contacted to find parts of a cell. The cell you claim this "
+"workstation belongs to is not in that file. Enter the host names of the "
+"database servers separated by spaces. IMPORTANT: If you are creating a new "
+"cell and this machine is to be a database server in that cell, only enter "
+"this machine's name; add the other servers later after they are functioning. "
+"Also, do not enable the AFS client to start at boot on this server until the "
+"cell is configured. When you are ready you can edit /etc/openafs/afs.conf."
+"client to enable the client."
+msgstr ""
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid "AFS cell this workstation belongs to:"
+msgstr ""
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid ""
+"AFS filespace is organized into cells or administrative domains. Each "
+"workstation belongs to one cell. Usually the cell is the DNS domain name of "
+"the site."
+msgstr ""
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid "Size of AFS cache in kB:"
+msgstr ""
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid ""
+"AFS uses an area of the disk to cache remote files for faster access. This "
+"cache will be mounted on /var/cache/openafs. It is important that the cache "
+"not overfill the partition it is located on. Often, people find it useful "
+"to dedicate a partition to their AFS cache."
+msgstr ""
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+msgid "Run Openafs client now and at boot?"
+msgstr ""
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+msgid ""
+"Normally, most users who install the openafs-client package expect AFS to be "
+"mounted automatically at boot. However, if you are planning on setting up a "
+"new cell or are on a laptop, you may not want it started at boot time. If "
+"you choose not to start AFS at boot, run service openafs-client force-start "
+"to start the client when you wish to run it."
+msgstr ""
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid "Look up AFS cells in DNS?"
+msgstr ""
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid ""
+"In order to contact an AFS cell, you need the IP addresses of the cell's "
+"database servers. Normally, this information is read from /etc/openafs/"
+"CellServDB. However, if Openafs cannot find a cell in that file, it can use "
+"DNS to look for AFSDB records that contain the information."
+msgstr ""
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid "Encrypt authenticated traffic with AFS fileserver?"
+msgstr ""
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid ""
+"AFS provides a weak form of encryption that can optionally be used between a "
+"client and the fileservers. While this encryption is weaker than DES and "
+"thus is not sufficient for highly confidential data, it does provide some "
+"confidentiality and is likely to make the job of a casual attacker "
+"significantly more difficult."
+msgstr ""
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Yes"
+msgstr ""
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Sparse"
+msgstr ""
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "No"
+msgstr ""
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid "Dynamically generate the contents of /afs?"
+msgstr ""
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"/afs generally contains an entry for each cell that a client can talk to. "
+"Traditionally, these entries were generated by servers in the client's home "
+"cell. However, OpenAFS clients can generate the contents of /afs "
+"dynamically based on the contents of /etc/openafs/CellServDB and DNS."
+msgstr ""
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"If you generate /afs dynamically, you may need to create /etc/openafs/"
+"CellAlias to include aliases for common cells. (The syntax of this file is "
+"one line per alias, with the cell name, a space, and then the alias for that "
+"cell.)"
+msgstr ""
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"The Sparse option is the same as Yes except that, rather than populating /"
+"afs from /etc/openafs/CellServDB immediately, cells other than the local "
+"cell will not appear until they are accessed. Cell aliases as set in the "
+"CellAlias file are shown as normal, although they may appear to be dangling "
+"links until traversed."
+msgstr ""
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid "Use fakestat to avoid hangs when listing /afs?"
+msgstr ""
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid ""
+"Because AFS is a global file space, operations on the /afs directory can "
+"generate significant network traffic. If some AFS cells are unavailable "
+"then looking at /afs using ls or a graphical file browser may hang your "
+"machine for minutes. AFS has an option to simulate answers to these "
+"operations locally to avoid these hangs. You want this option under most "
+"circumstances."
+msgstr ""
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid "Cell this server serves files for:"
+msgstr ""
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid ""
+"AFS fileservers belong to a cell. They have the key for that cell's "
+"Kerberos service and serve volumes into that cell. Normally, this cell is "
+"the same cell as the workstation's client belongs to."
+msgstr ""
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid "OpenAFS file server probably does not work!"
+msgstr ""
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid ""
+"You are running the OpenAFS file server package on an alpha. This probably "
+"doesn't work; the DES code is flaky on the alpha, along with the threaded "
+"file server. Likely, the fileserver will simply fail to start, but if it "
+"does load, data corruption may result. You have been warned."
+msgstr ""
diff --git a/debian/po/vi.po b/debian/po/vi.po
new file mode 100644
index 0000000..f778ddb
--- /dev/null
+++ b/debian/po/vi.po
@@ -0,0 +1,290 @@
+# Vietnamese translation for ApenAFS.
+# Copyright © 2006 Free Software Foundation, Inc.
+# Clytie Siddall <clytie@riverland.net.au>, 2005-2006.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: openafs 1.4.1-3\n"
+"Report-Msgid-Bugs-To: openafs@packages.debian.org\n"
+"POT-Creation-Date: 2017-07-10 15:27-0500\n"
+"PO-Revision-Date: 2009-02-13 09:25-0800\n"
+"Last-Translator: Clytie Siddall <clytie@riverland.net.au>\n"
+"Language-Team: Vietnamese <gnomevi-list@lists.sourceforge.net>\n"
+"Language: vi\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=utf-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=1; plural=0\n"
+"X-Generator: LocFactoryEditor 1.6a7\n"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid "DB server host names for your home cell:"
+msgstr "Các tên máy chạy trình phục vụ cơ sở dữ liệu cho ô chính của bạn:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid ""
+"AFS uses the file /etc/openafs/CellServDB to hold the list of servers that "
+"should be contacted to find parts of a cell. The cell you claim this "
+"workstation belongs to is not in that file. Enter the host names of the "
+"database servers separated by spaces. IMPORTANT: If you are creating a new "
+"cell and this machine is to be a database server in that cell, only enter "
+"this machine's name; add the other servers later after they are functioning. "
+"Also, do not enable the AFS client to start at boot on this server until the "
+"cell is configured. When you are ready you can edit /etc/openafs/afs.conf."
+"client to enable the client."
+msgstr ""
+"AFS dùng tập tin « /etc/openafs/CellServDB » để chứa danh sách các máy phục "
+"vụ nên được liên hệ để tìm phần ô. Bạn đã tuyên bố máy trạm này thuộc một ô "
+"không phải trong tập tin ấy. Hãy nhập tên máy của những máy phục vụ cơ sở dữ "
+"liệu, định giới bằng dấu cách. QUAN TRỌNG: nếu bạn đang tạo một ô mới, và "
+"máy này sẽ là một máy phục vụ cơ sở dữ liệu trong ô ấy, thì bạn hãy nhập chỉ "
+"tên máy này thôi. Hãy thêm những máy phục vụ khác lần sau, sau khi chúng "
+"hoạt động. Hơn nữa, có thể hiệu lực trình khách AFS khởi chạy khi khởi động "
+"máy, chỉ sau khi cấu hình ô ấy. Khi bạn sẵn sàng thì có thể hiệu chỉnh tập "
+"tin « /etc/openafs/afs.conf.client » để hiệu lực trình khách ấy."
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid "AFS cell this workstation belongs to:"
+msgstr "Ô AFS chứa máy trăm này:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid ""
+"AFS filespace is organized into cells or administrative domains. Each "
+"workstation belongs to one cell. Usually the cell is the DNS domain name of "
+"the site."
+msgstr ""
+"Khoảng cách tập tin loại AFS được tổ chức ra nhiều ô hay miền quản lý. Mỗi "
+"máy trạm thuộc một ô riêng lẻ. Thường ô ấy là tên miền DNS của nơi Mạng ấy."
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid "Size of AFS cache in kB:"
+msgstr "Kích cỡ của bộ nhớ tạm AFS theo kB:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid ""
+"AFS uses an area of the disk to cache remote files for faster access. This "
+"cache will be mounted on /var/cache/openafs. It is important that the cache "
+"not overfill the partition it is located on. Often, people find it useful "
+"to dedicate a partition to their AFS cache."
+msgstr ""
+"AFS dùng một vùng trên đĩa để lưu tạm tập tin từ xa, mà cho phép truy cập "
+"nhanh hơn. Bộ nhớ tạm này sẽ được gắn vào « /var/cache/openafs ». Quan trọng "
+"là bộ nhớ tạm ấy không vượt quá phân vùng ở. Thường có ích khi dùng một phân "
+"vùng chỉ cho bộ nhớ tạm AFS thôi."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+msgid "Run Openafs client now and at boot?"
+msgstr "Chạy trình khách Openafs ngay bây giờ và cũng khi khởi động máy không?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+#, fuzzy
+#| msgid ""
+#| "Normally, most users who install the openafs-client package expect AFS to "
+#| "be mounted automatically at boot. However, if you are planning on "
+#| "setting up a new cell or are on a laptop, you may not want it started at "
+#| "boot time. If you choose not to start AFS at boot, run /etc/init.d/"
+#| "openafs-client force-start to start the client when you wish to run it."
+msgid ""
+"Normally, most users who install the openafs-client package expect AFS to be "
+"mounted automatically at boot. However, if you are planning on setting up a "
+"new cell or are on a laptop, you may not want it started at boot time. If "
+"you choose not to start AFS at boot, run service openafs-client force-start "
+"to start the client when you wish to run it."
+msgstr ""
+"Bình thường, phần lớn người dùng cài đặt gói ứng dụng khách « openafs-client "
+"» ngờ AFS được gắn kết tự động khi khởi động. Tuy nhiên, nếu bạn định thiết "
+"lập một ô mới, hoặc sử dụng máy tính xách tay, bạn có thể không muốn nó được "
+"khởi chạy vào lúc khởi động. Nếu bạn chọn không khởi chạy AFS vào lúc khởi "
+"động, hãy chạy lệnh ép buộc khởi chạy « /etc/init.d/openafs-client force-"
+"start » để khởi chạy ứng dụng khách khi bạn muốn khởi chạy nó."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid "Look up AFS cells in DNS?"
+msgstr "Tra cứu ô AFS trong DNS không?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid ""
+"In order to contact an AFS cell, you need the IP addresses of the cell's "
+"database servers. Normally, this information is read from /etc/openafs/"
+"CellServDB. However, if Openafs cannot find a cell in that file, it can use "
+"DNS to look for AFSDB records that contain the information."
+msgstr ""
+"Để liên hệ một ô AFS, bạn cần có địa chỉ IP của mọi máy phục vụ cơ sở dữ "
+"liệu của nó. Bình thường, thông tin này được đọc từ tập tin « /etc/openafs/"
+"CellServDB ». Tuy nhiên, nếu trình Openafs không tìm thấy một ô nào đó trong "
+"tập tin ấy thì nó có thể dùng DNS (hệ thống tên miền) để tìm mục ghi AFSDB "
+"chứa thông tin ấy."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid "Encrypt authenticated traffic with AFS fileserver?"
+msgstr ""
+"Mật mã hóa các dữ liệu xác thực truyền với trình phục vụ tập tin AFS không?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid ""
+"AFS provides a weak form of encryption that can optionally be used between a "
+"client and the fileservers. While this encryption is weaker than DES and "
+"thus is not sufficient for highly confidential data, it does provide some "
+"confidentiality and is likely to make the job of a casual attacker "
+"significantly more difficult."
+msgstr ""
+"AFS cung cấp một cách mật mã yếu mà tùy chọn có thể được dùng giữa một trình "
+"khách nào đó và những trình phục vụ tập tin khác. Dù cách mặt mã này yếu hơn "
+"DES, vì vậy không đủ cho dữ liệu quan trọng, nó có cung cấp một mức độ riêng "
+"tư, thì sẽ làm cho người tấn công gặp khó khăn một phần."
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Yes"
+msgstr ""
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Sparse"
+msgstr ""
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "No"
+msgstr ""
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid "Dynamically generate the contents of /afs?"
+msgstr "Tạo ra nội dung « /afs » một cách động không?"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"/afs generally contains an entry for each cell that a client can talk to. "
+"Traditionally, these entries were generated by servers in the client's home "
+"cell. However, OpenAFS clients can generate the contents of /afs "
+"dynamically based on the contents of /etc/openafs/CellServDB and DNS."
+msgstr ""
+"Thư mục « /afs » thường chứa một mục ghi cho mỗi ô mà trình khách có thể "
+"liên hệ. Trước này, trình phục vụ trong ô chính của trình khác đã tạo ra mục "
+"ghi này. Tuy nhiên, trình khách loại OpenAFS có thể tạo ra nội dung « /afs » "
+"một cách động, đựa vào nội dung « /etc/openafs/CellServDB » và vào DNS."
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"If you generate /afs dynamically, you may need to create /etc/openafs/"
+"CellAlias to include aliases for common cells. (The syntax of this file is "
+"one line per alias, with the cell name, a space, and then the alias for that "
+"cell.)"
+msgstr ""
+"Nếu bạn chọn tạo ra « /afs » một cách động, có lẽ bạn sẽ cần phải tạo « etc/"
+"openafs/CellAlias » (bí danh ô) để gồm bí danh cho các ô chung. (Cú pháp của "
+"tập tin này là một dòng cho mỗi bí danh, mà chứa tên ô, rồi một dấu cách, "
+"rồi bí danh cho ô đó.)"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"The Sparse option is the same as Yes except that, rather than populating /"
+"afs from /etc/openafs/CellServDB immediately, cells other than the local "
+"cell will not appear until they are accessed. Cell aliases as set in the "
+"CellAlias file are shown as normal, although they may appear to be dangling "
+"links until traversed."
+msgstr ""
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid "Use fakestat to avoid hangs when listing /afs?"
+msgstr ""
+"Dùng « fakestat » (thống kê giả) để tránh hệ thống treo cứng khi liệt kê « /"
+"afs » không?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid ""
+"Because AFS is a global file space, operations on the /afs directory can "
+"generate significant network traffic. If some AFS cells are unavailable "
+"then looking at /afs using ls or a graphical file browser may hang your "
+"machine for minutes. AFS has an option to simulate answers to these "
+"operations locally to avoid these hangs. You want this option under most "
+"circumstances."
+msgstr ""
+"Vì AFS là một khoảng cách toàn cục, thao tác trên thư mục « /afs » có thể "
+"tạo ra nhiều tải cho mạng. Nếu một số ô AFS không sẵn sàng thì việc xem « /"
+"afs » dùng lệnh « ls » (liệt kê) hoặc dùng một trình đồ họa duyệt tập tin "
+"thì có thể treo cứng máy bạn trong vòng nhiều phút. AFS tùy chọn có thể mô "
+"phỏng trả lời cho thao tác loại này một cách địa phương, để tránh treo cứng "
+"hệ thống như thế. Đệ nghi bạn sử dụng tùy chọn này: nó cần thiết trong phần "
+"lớn trường hợp."
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid "Cell this server serves files for:"
+msgstr "Ô cho đó trình phục vụ tập tin:"
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid ""
+"AFS fileservers belong to a cell. They have the key for that cell's "
+"Kerberos service and serve volumes into that cell. Normally, this cell is "
+"the same cell as the workstation's client belongs to."
+msgstr ""
+"Mọi trình phục vụ tập tin AFS thuộc một ô nào đó. Trình ấy có khóa của dịch "
+"vụ Kerberos của ô này, và phục vụ khối đĩa vào ô này. Bình thường, ô này là "
+"cùng một ô với ô sở hữu trình khách của máy trạm này."
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid "OpenAFS file server probably does not work!"
+msgstr "Rất có thể là trình phục vụ tập tin OpenAFS không hoạt động."
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid ""
+"You are running the OpenAFS file server package on an alpha. This probably "
+"doesn't work; the DES code is flaky on the alpha, along with the threaded "
+"file server. Likely, the fileserver will simply fail to start, but if it "
+"does load, data corruption may result. You have been warned."
+msgstr ""
+"Bạn có chạy gói tin trình phục vụ tập tin OpenAFS trên một anfa. Rất có thể "
+"là nó không hoạt động vì mã DES bị lỗi trên anfa, cũng với trình phục vụ tập "
+"tin theo mạch. Rất có thể là trình phục vụ tập tin sẽ không khởi chạy, nhưng "
+"mà nếu nó có phải khởi chạy thì dữ liệu có thể bị hỏng. Bạn đã nhận một cảnh "
+"báo rồi."
+
+#~ msgid "How large is your AFS cache (kB)?"
+#~ msgstr "Bạn có bộ nhớ tạm AFS lớn bao nhiêu (theo kB)?"
diff --git a/debian/po/zh_CN.po b/debian/po/zh_CN.po
new file mode 100644
index 0000000..de0b88e
--- /dev/null
+++ b/debian/po/zh_CN.po
@@ -0,0 +1,266 @@
+# Simplified Chinese translation of openafs debconf messages.
+# Copyright (C) 2007 Chun Tian
+# This file is distributed under the same license as the openafs package.
+# Chun Tian <binghe.lisp@gmail.com>, 2007.
+#
+#, fuzzy
+msgid ""
+msgstr ""
+"Project-Id-Version: openafs 1.4.2-4\n"
+"Report-Msgid-Bugs-To: openafs@packages.debian.org\n"
+"POT-Creation-Date: 2017-07-10 15:27-0500\n"
+"PO-Revision-Date: 2009-02-13 09:25-0800\n"
+"Last-Translator: Chun Tian (binghe) <binghe.lisp@gmail.com>\n"
+"Language-Team: Chinese (simplified) <i18n-zh@googlegroups.com>\n"
+"Language: zh_CN\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid "DB server host names for your home cell:"
+msgstr "您起始单元的数据库服务器主机名："
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:1001
+msgid ""
+"AFS uses the file /etc/openafs/CellServDB to hold the list of servers that "
+"should be contacted to find parts of a cell. The cell you claim this "
+"workstation belongs to is not in that file. Enter the host names of the "
+"database servers separated by spaces. IMPORTANT: If you are creating a new "
+"cell and this machine is to be a database server in that cell, only enter "
+"this machine's name; add the other servers later after they are functioning. "
+"Also, do not enable the AFS client to start at boot on this server until the "
+"cell is configured. When you are ready you can edit /etc/openafs/afs.conf."
+"client to enable the client."
+msgstr ""
+"AFS 使用 /etc/openafs/CellServDB 文件来存放那些在寻找一个单元 (cell) 各部分服"
+"务器用来联系的服务器列表. 当前工作站您声称其所在的单元并不在这个文件里. 请以"
+"空格分隔输入该单元数据库服务器的主机名. 重要提示: 如果您正在创建一个新单元并"
+"且该机将做为此单元的数据库服务器, 那么只输入这台机器的主机名即可; 其他服务器"
+"当他们可用时再加入进来. 并且, 直到该单元配置完成之前不要令 AFS 客户端在这台服"
+"务器引导时启动. 当您一切就绪以后可以编辑 /etc/openafs/afs.conf 来打开客户端."
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid "AFS cell this workstation belongs to:"
+msgstr "这台工作站所属的 AFS 单元:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:2001
+msgid ""
+"AFS filespace is organized into cells or administrative domains. Each "
+"workstation belongs to one cell. Usually the cell is the DNS domain name of "
+"the site."
+msgstr ""
+"AFS 文件空间按单元和管理域来组织. 每一台工作站属于一个单元. 单元名是通常是该"
+"站点的 DNS 域名."
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid "Size of AFS cache in kB:"
+msgstr "以 kB 计的 AFS 缓存大小:"
+
+#. Type: string
+#. Description
+#: ../openafs-client.templates:3001
+msgid ""
+"AFS uses an area of the disk to cache remote files for faster access. This "
+"cache will be mounted on /var/cache/openafs. It is important that the cache "
+"not overfill the partition it is located on. Often, people find it useful "
+"to dedicate a partition to their AFS cache."
+msgstr ""
+"AFS 使用磁盘的一块区域来缓存远程文件来加速访问. 缓存将被挂载到 /var/cache/"
+"openafs. 很重要的一点是不能让该缓存把它所在的分区填满. 通常, 人们发现用独立的"
+"分区做 AFS 缓存很有用."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+msgid "Run Openafs client now and at boot?"
+msgstr "现在就启动 OpenAFS 客户端并且开机启动吗?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:4001
+#, fuzzy
+#| msgid ""
+#| "Normally, most users who install the openafs-client package expect AFS to "
+#| "be mounted automatically at boot. However, if you are planning on "
+#| "setting up a new cell or are on a laptop, you may not want it started at "
+#| "boot time. If you choose not to start AFS at boot, run /etc/init.d/"
+#| "openafs-client force-start to start the client when you wish to run it."
+msgid ""
+"Normally, most users who install the openafs-client package expect AFS to be "
+"mounted automatically at boot. However, if you are planning on setting up a "
+"new cell or are on a laptop, you may not want it started at boot time. If "
+"you choose not to start AFS at boot, run service openafs-client force-start "
+"to start the client when you wish to run it."
+msgstr ""
+"通常, 多数安装了 openafs-client 包的用户期望 AFS 在开机后自动挂载. 尽管如此, "
+"如果您正在计划设置一个新单元或者在笔记本电脑上, 您可能不希望它开机自动启动. "
+"如果您选择了开机不启动 AFS, 可以在您需要它启动的时候运行 /etc/init.d/openafs-"
+"client force-start"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid "Look up AFS cells in DNS?"
+msgstr "要通过 DNS 查询 AFS 单元吗?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:5001
+msgid ""
+"In order to contact an AFS cell, you need the IP addresses of the cell's "
+"database servers. Normally, this information is read from /etc/openafs/"
+"CellServDB. However, if Openafs cannot find a cell in that file, it can use "
+"DNS to look for AFSDB records that contain the information."
+msgstr ""
+"为了联系一个 AFS 单元, 您需要该单元的数据库服务器 IP 地址. 正常情况下, 这一信"
+"息从 /etc/openafs/CellServDB 读取. 尽管如此, 如果 OpenAFS 无法在这个文件里找"
+"到一个单元, 它可以用 DNS 查询包含这一信息的 AFSDB 记录."
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid "Encrypt authenticated traffic with AFS fileserver?"
+msgstr "要加密和 AFS 文件服务器之间的认证通信吗?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:6001
+msgid ""
+"AFS provides a weak form of encryption that can optionally be used between a "
+"client and the fileservers. While this encryption is weaker than DES and "
+"thus is not sufficient for highly confidential data, it does provide some "
+"confidentiality and is likely to make the job of a casual attacker "
+"significantly more difficult."
+msgstr ""
+"AFS 提供一种可选的弱加密形式用在客户端和文件服务器之间. 虽然这种加密比 DES 还"
+"弱一些, 从而不能适用于那些高度机密数据, 但它确实提供了一定的保密性, 可以令那"
+"些偶然的攻击明显地变得困难."
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Yes"
+msgstr ""
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "Sparse"
+msgstr ""
+
+#. Type: select
+#. Choices
+#: ../openafs-client.templates:7001
+msgid "No"
+msgstr ""
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid "Dynamically generate the contents of /afs?"
+msgstr "动态生成 /afs 的内容吗?"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"/afs generally contains an entry for each cell that a client can talk to. "
+"Traditionally, these entries were generated by servers in the client's home "
+"cell. However, OpenAFS clients can generate the contents of /afs "
+"dynamically based on the contents of /etc/openafs/CellServDB and DNS."
+msgstr ""
+"/afs 里通常含有客户端能访问到的每一个单元的入口. 这些入口传统上是由客户端所在"
+"单元的服务器生成. 尽管如此, OpenAFS 客户端也可以根据 /etc/openafs/"
+"CellServDB 和 DNS 的内容来动态生成 /afs 的内容."
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"If you generate /afs dynamically, you may need to create /etc/openafs/"
+"CellAlias to include aliases for common cells. (The syntax of this file is "
+"one line per alias, with the cell name, a space, and then the alias for that "
+"cell.)"
+msgstr ""
+"如果您动态生成 /afs, 您可能需要创建 /etc/openafs/CellAlias 来包含通用单元的别"
+"名. (这个文件的语法是每个别名一行, 由单元名, 一个空格, 和该单元的别名组成.)"
+
+#. Type: select
+#. Description
+#: ../openafs-client.templates:7002
+msgid ""
+"The Sparse option is the same as Yes except that, rather than populating /"
+"afs from /etc/openafs/CellServDB immediately, cells other than the local "
+"cell will not appear until they are accessed. Cell aliases as set in the "
+"CellAlias file are shown as normal, although they may appear to be dangling "
+"links until traversed."
+msgstr ""
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid "Use fakestat to avoid hangs when listing /afs?"
+msgstr "使用 fskestat 来避免对 /afs 列目录时挂起吗?"
+
+#. Type: boolean
+#. Description
+#: ../openafs-client.templates:8001
+msgid ""
+"Because AFS is a global file space, operations on the /afs directory can "
+"generate significant network traffic. If some AFS cells are unavailable "
+"then looking at /afs using ls or a graphical file browser may hang your "
+"machine for minutes. AFS has an option to simulate answers to these "
+"operations locally to avoid these hangs. You want this option under most "
+"circumstances."
+msgstr ""
+"因为 AFS 是一个公共文件空间, 所以对 /afs 目录的操作能产生明显的网络流量. 如"
+"果某些 AFS 单元无法访问, 那么当使用 ls 或者图形界面文件浏览器列 /afs 目录时可"
+"能会令您的主机挂起几分钟. AFS 有一个选项可以将这些操作模拟成本机操作从而避免"
+"这类挂起. 大多数情况下您都需要这一选项."
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid "Cell this server serves files for:"
+msgstr "这台文件服务器所在的单元:"
+
+#. Type: string
+#. Description
+#: ../openafs-fileserver.templates:1001
+msgid ""
+"AFS fileservers belong to a cell. They have the key for that cell's "
+"Kerberos service and serve volumes into that cell. Normally, this cell is "
+"the same cell as the workstation's client belongs to."
+msgstr ""
+"AFS 文件服务器属于一个单元. 它们有该单元的 Kerberos 服务密钥并且为该单元提供"
+"卷服务. 正常情况下, 这个单元跟工作站上的客户端属于的那个单元是同一个."
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid "OpenAFS file server probably does not work!"
+msgstr "OpenAFS 文件服务器可能不会工作!"
+
+#. Type: note
+#. Description
+#: ../openafs-fileserver.templates:2001
+msgid ""
+"You are running the OpenAFS file server package on an alpha. This probably "
+"doesn't work; the DES code is flaky on the alpha, along with the threaded "
+"file server. Likely, the fileserver will simply fail to start, but if it "
+"does load, data corruption may result. You have been warned."
+msgstr ""
+"您正在一台 alpha 机上运行 OpenAFS 文件服务器包. 这可能不会工作; alpha 下的随"
+"线程文件服务器带的 DES 代码很奇怪. 文件服务器很可能简单地直接启动失败, 但如果"
+"它确实起来了, 数据错乱也有可能发生. 您将被警告这点."
diff --git a/debian/rules b/debian/rules
new file mode 100755
index 0000000..76140b3
--- /dev/null
+++ b/debian/rules
@@ -0,0 +1,259 @@
+#!/usr/bin/make -f
+
+include /usr/share/dpkg/pkg-info.mk
+
+DEB_HOST_MULTIARCH ?= $(shell dpkg-architecture -qDEB_HOST_MULTIARCH)
+DEB_HOST_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE)
+
+# Determine whether we're building with optimization. This doesn't really
+# work at the moment due to upstream problems.
+ifneq (,$(findstring noopt,$(DEB_BUILD_OPTIONS)))
+ DEBIAN_OPT_FLAGS = --disable-optimize --disable-optimize-lwp
+ DEBIAN_KERN_FLAGS = --disable-optimize-kernel
+else ifneq (,$(findstring arm-linux-gnueabi,$(DEB_HOST_GNU_TYPE)))
+ DEBIAN_OPT_FLAGS = --disable-optimize --disable-optimize-lwp
+ DEBIAN_KERN_FLAGS = --disable-optimize-kernel
+else
+ DEBIAN_OPT_FLAGS =
+ DEBIAN_KERN_FLAGS =
+endif
+
+# Skip lengthy parts of the doc build when requested
+ifneq (,$(findstring nodoc,$(DEB_BUILD_OPTIONS)))
+ DOCMAKE=echo --
+ DOXYCMD=
+ GENDOCS=
+else
+ # pdfTeX refuses to fully obey SOURCE_DATE_EPOCH without
+ # FORCE_SOURCE_DATE=1.
+ DOCMAKE=FORCE_SOURCE_DATE=1 make
+ DOXYCMD=dh_doxygen -popenafs-doc
+ GENDOCS=AdminGuide QuickStartUnix UserGuide
+endif
+
+SYS_NAME := $(shell sh debian/sysname)
+
+package = openafs
+srcpkg = openafs-modules-source
+dkmspkg = openafs-modules-dkms
+DOCS = $(CURDIR)/debian/openafs-doc/usr/share/doc/openafs-doc
+
+# The path to the XSLT used to generate HTML from the DocBook source files.
+# This path is specific to different Linux distributions, so we have to pass
+# it into configure.
+HTML_XSL = /usr/share/xml/docbook/stylesheet/nwalsh/html/chunk.xsl
+
+# The /usr/share/doc directory for these packages should be a symlink to
+# /usr/share/doc/openafs-client. Any package on this list must depend on
+# openafs-client. This variable is used as options to dh_installdocs with
+# the --link-doc option.
+DOC_PACKAGES := -popenafs-fuse
+
+# These are files that we know we don't want to install. List them so that we
+# can use dh_missing --fail-missing and catch anything new that shows up.
+IGNORE = -XAuthLog -Xaklog_dynamic_auth.8 -Xcopyauth -Xdlog -Xdpass \
+ -Xfms.log -Xfs_chgrp.1 -Xfs_chown.1 -Xfs_cscpolicy.1 \
+ -Xfs_memdump.1 -Xfs_minidump.1 -Xfs_trace.1 \
+ -Xkadb_check -Xkaserver -Xkdb -Xkdump -Xkpwvalid -Xpagsh.krb \
+ -Xsymlink -Xtokens.krb -Xuss -Xvldb_convert -Xvsys \
+ -Xxfs_size_check
+
+# Installed via other means since we have to rename them.
+IGNORE += -Xafsd.fuse.8
+
+# These variables are used by get-orig-source, to construct dkms.conf, and
+# to set the build version. You will need to change TAG to package stable
+# releases instead of experimental releases.
+DEBVERS = $(shell echo '$(DEB_VERSION)' | cut -d- -f1)
+VERSION = $(shell echo '$(DEBVERS)' | sed -e 's/[+-].*//' -e 's/~//g')
+TAG = $(shell echo 'openafs-stable-$(VERSION)' | sed 's/\./_/g')
+REPO := git://git.openafs.org/openafs.git
+
+# Upstream does tarball releases for major releases, but not for point
+# relesaes, and the tarball releases are split into src and doc and contain
+# the WINNT directory. Dropping WINNT, which is not used on Debian, saves a
+# substantial amount of space in the source package, and there's no reason
+# to include the files generated by regen.sh when we're going to run it
+# again ourselves anyway.
+#
+# This rule therefore generates an upstream tarball from the upstream Git
+# tag, rather than the tarball release, without the generated files that are
+# not in Git and without the WINNT directory. It assumes that git-core is
+# installed and there's network connectivity to the upstream repository.
+get-orig-source:
+ git archive --remote='$(REPO)' --prefix='openafs_$(DEBVERS).orig/' \
+ --format=tar '$(TAG)' \
+ | tar --delete 'openafs_$(DEBVERS).orig/src/WINNT' \
+ | xz > 'openafs_$(DEBVERS).orig.tar.xz'
+
+# Use dh for most actions, with overrides below.
+# openafs provides regen.sh that supersedes autoreconf.
+%:
+ dh $@ --without-autoreconf
+
+# Handle the renaming of the up man page to afs-up here since the man pages
+# are generated from POD source by regen.sh.
+override_dh_auto_configure:
+ @if test x"$(SYS_NAME)" = x"UNKNOWN" ; then exit 1 ; fi
+ echo '$(DEB_VERSION)'-debian > .version
+ mv doc/man-pages/pod1/up.pod doc/man-pages/pod1/afs-up.pod
+ rm -f doc/man-pages/man1/up.1
+ sh regen.sh
+ afslogsdir=/var/log/openafs afslocaldir=/var/lib/openafs/local \
+ dh_auto_configure -- \
+ --with-afs-sysname=$(SYS_NAME) --disable-kernel-module \
+ --libdir=\$${prefix}/lib --libexecdir=\$${prefix}/lib \
+ --localstatedir=/var/lib --enable-supergroups \
+ --enable-fuse-client --enable-debug --enable-debug-lwp \
+ --with-docbook2pdf=dblatex --with-xslt-processor=xsltproc \
+ --with-html-xsl=$(HTML_XSL) \
+ --with-krb5-include=/usr/include/mit-krb5 \
+ --with-krb5-lib=/usr/lib/$(DEB_HOST_MULTIARCH)/mit-krb5 \
+ --with-roken-include=/usr/include/heimdal \
+ --with-roken-lib=/usr/lib/$(DEB_HOST_MULTIARCH)/heimdal \
+ --with-hcrypto-include=/usr/include/heimdal \
+ --with-hcrypto-lib=/usr/lib/$(DEB_HOST_MULTIARCH)/heimdal \
+ --without-ctf-tools \
+ $(DEBIAN_OPT_FLAGS)
+
+# Also build a libafs_tree and build the XML documentation if building
+# architecture-independent packages.
+override_dh_auto_build-indep:
+ dh_auto_build
+ $(MAKE) libafs_tree
+ set -e; for d in $(GENDOCS); do \
+ $(DOCMAKE) -C doc/xml/$$d all ; \
+ done
+
+# The manipulation of debian/changelog here is unnecessary with a regular
+# Debian build. It is provided solely so that upstream can share the Debian
+# packaging files, working around problems caused by upstream's distclean
+# removing packaging/Debian/changelog because it's Autoconf-generated.
+override_dh_auto_clean:
+ [ ! -f doc/man-pages/pod1/afs-up.pod ] \
+ || mv doc/man-pages/pod1/afs-up.pod doc/man-pages/pod1/up.pod
+ set -e; for d in $(GENDOCS); do \
+ [ ! -f doc/xml/$$d/Makefile ] || $(DOCMAKE) -C doc/xml/$$d clean ; \
+ done
+ [ ! -f debian/changelog.in ] \
+ || cp debian/changelog debian/changelog.save
+ dh_auto_clean -- maintainer-clean
+ [ -f debian/changelog ] || mv debian/changelog.save debian/changelog
+
+# We have to use a non-standard install target and then do some fiddling
+# with the results.
+override_dh_auto_install:
+ mkdir -p $(CURDIR)/debian/tmp
+ $(MAKE) install_nolibafs DESTDIR=$(CURDIR)/debian/tmp
+ rm -f debian/tmp/usr/bin/klog.krb
+ rm -f debian/tmp/usr/share/man/man1/klog.krb.1
+ rm -f debian/tmp/usr/share/man/man8/kas*.8
+ rm -f debian/tmp/usr/share/man/man1/kkpasswd.1
+
+# Override dh_install for architecture-dependent builds to move some files
+# around, do some manual installation of things like PAM modules, and ensure
+# that scripts we install are executable
+override_dh_install-arch:
+ chmod +x debian/afs-rootvol debian/afs-newcell
+ dh_install $(IGNORE)
+
+ mv debian/openafs-client/usr/bin/pagsh \
+ debian/openafs-client/usr/bin/pagsh.openafs
+ mv debian/openafs-client/usr/share/man/man1/pagsh.1 \
+ debian/openafs-client/usr/share/man/man1/pagsh.openafs.1
+ mv debian/openafs-client/usr/bin/up \
+ debian/openafs-client/usr/bin/afs-up
+
+ install -d debian/openafs-dbserver/usr/share/man/man8
+ ( cd debian && pod2man --section 8 --center "Debian GNU/Linux" \
+ afs-rootvol ) \
+ >debian/openafs-dbserver/usr/share/man/man8/afs-rootvol.8
+ ( cd debian && pod2man --section 8 --center "Debian GNU/Linux" \
+ afs-newcell ) \
+ >debian/openafs-dbserver/usr/share/man/man8/afs-newcell.8
+
+# Override dh_install for architecture-independent builds to handle
+# installation of all the extra documentation that upstream doesn't install
+# by default and install the source required for the kernel source package
+# and the DKMS package.
+override_dh_install-indep:
+ mkdir -p $(DOCS)/html
+ -cp doc/xml/*.gif doc/xml/*.html $(DOCS)/html/
+ set -e; for d in $(GENDOCS); do \
+ mkdir $(DOCS)/html/$$d ; \
+ cp doc/xml/$$d/*.html $(DOCS)/html/$$d/ ; \
+ cp doc/xml/$$d/*.pdf $(DOCS)/ ; \
+ done
+ -cp doc/xml/AdminGuide/*.png $(DOCS)/html/AdminGuide/
+ mkdir $(DOCS)/html/arch-overview
+ cp doc/txt/arch-overview.h $(DOCS)/html/arch-overview
+ cd $(DOCS)/html/arch-overview && doxygen -g && doxygen \
+ && rm Doxyfile *.h && mv html/* . && rm -r latex html
+ set -e; for h in doc/protocol/*.h ; do \
+ mkdir $(DOCS)/html/`basename $$h .h` ; \
+ cp $$h $(DOCS)/html/`basename $$h .h` ; \
+ cd $(DOCS)/html/`basename $$h .h` && doxygen -g && doxygen \
+ && rm Doxyfile *.h && mv html/* . && rm -r latex html \
+ && cd $(CURDIR) ; \
+ done
+ $(DOXYCMD)
+
+ install -d debian/$(srcpkg)/usr/src/modules/$(package)
+ cd libafs_tree && find . -print \
+ | cpio -admp $(CURDIR)/debian/$(srcpkg)/usr/src/modules/$(package)
+ cp .version debian/$(srcpkg)/usr/src/modules/$(package)/
+ mkdir -p debian/$(srcpkg)/usr/src/modules/$(package)/debian
+ cp debian/copyright debian/module/* \
+ debian/$(srcpkg)/usr/src/modules/$(package)/debian/
+ sed 's/^openafs /openafs-modules /' debian/changelog \
+ > debian/$(srcpkg)/usr/src/modules/$(package)/debian/changelog
+ chmod 755 debian/$(srcpkg)/usr/src/modules/$(package)/debian/rules
+ chown -R root.src debian/$(srcpkg)
+ find debian/$(srcpkg) -type d | xargs chmod 755
+ find debian/$(srcpkg) -type f -perm -100 | xargs chmod 755
+ find debian/$(srcpkg) -type f -not -perm -100 | xargs chmod 644
+ chmod 775 debian/$(srcpkg)/usr/src/modules
+ cd debian/$(srcpkg)/usr/src && find modules -print0 | LC_ALL=C sort -z | tar --no-recursion --null -T - $(if $(SOURCE_DATE_EPOCH),--mtime=@$(SOURCE_DATE_EPOCH)) -cf $(package).tar
+ bzip2 debian/$(srcpkg)/usr/src/$(package).tar
+ chmod 644 debian/$(srcpkg)/usr/src/$(package).tar.bz2
+ install -d debian/$(dkmspkg)/usr/src
+ mv debian/$(srcpkg)/usr/src/modules/$(package) \
+ debian/$(dkmspkg)/usr/src/openafs-$(VERSION)
+ rm -rf debian/$(dkmspkg)/usr/src/openafs-$(VERSION)/debian
+ rmdir debian/$(srcpkg)/usr/src/modules
+ dh_dkms -V $(VERSION)
+
+ install -d debian/$(srcpkg)/usr/share/doc/$(srcpkg)
+ install -m 644 debian/openafs-client.NEWS \
+ debian/$(srcpkg)/usr/share/doc/$(srcpkg)/NEWS.Debian
+
+# We don't want to stop the init scripts on upgrade.
+override_dh_installinit:
+ dh_installinit -popenafs-client -r
+ dh_installinit -popenafs-fileserver -r
+
+override_dh_installsystemd:
+ dh_installsystemd -r
+
+# Symlink /usr/share/doc for some packages.
+override_dh_installdocs:
+ dh_installdocs $(DOC_PACKAGES) --link-doc=openafs-client
+ dh_installdocs --remaining-packages
+
+# Install the upstream NEWS file as the upstream changelog.
+override_dh_installchangelogs:
+ dh_installchangelogs NEWS
+
+# We want --fail-missing behavior, but --list-missing is the default
+override_dh_missing-arch:
+ dh_missing --fail-missing $(IGNORE)
+
+# Override some of our permissions.
+override_dh_fixperms-arch:
+ dh_fixperms
+ chmod 700 debian/openafs-client/var/cache/openafs
+ chmod 700 debian/openafs-dbserver/var/lib/openafs/db
+ chmod 700 debian/openafs-fileserver/var/lib/openafs/local
+
+override_dh_strip:
+ dh_strip --dbgsym-migration='openafs-dbg (<< 1.6.18.3-3~)'
diff --git a/debian/source/format b/debian/source/format
new file mode 100644
index 0000000..163aaf8
--- /dev/null
+++ b/debian/source/format
@@ -0,0 +1 @@
+3.0 (quilt)
diff --git a/debian/sysname b/debian/sysname
new file mode 100755
index 0000000..c8f69ef
--- /dev/null
+++ b/debian/sysname
@@ -0,0 +1,49 @@
+#!/bin/sh
+# Maps Debian architectures to AFS sysnames for building the clients and
+# libraries. This doesn't worry about the kernel version; kern-sysname
+# does that when building the kernel module.
+#
+# Not all architectures are listed, only those that OpenAFS supports.
+
+case `dpkg --print-architecture` in
+alpha)
+ echo alpha_linux_26
+ ;;
+arm|armel|armhf|armv5tel)
+ echo arm_linux26
+ ;;
+arm64)
+ echo arm64_linux26
+ ;;
+amd64)
+ echo amd64_linux26
+ ;;
+i[3456]86)
+ echo i386_linux26
+ ;;
+ia64)
+ echo ia64_linux26
+ ;;
+powerpc|powerpcspe)
+ echo ppc_linux26
+ ;;
+ppc64)
+ echo ppc64_linux26
+ ;;
+ppc64el)
+ echo ppc64le_linux26
+ ;;
+s390)
+ echo s390_linux26
+ ;;
+s390x)
+ echo s390x_linux26
+ ;;
+sparc|sparc64)
+ echo sparc_linux26
+ ;;
+*)
+ echo "ERROR: unsupported architecture" >&2
+ echo UNKNOWN
+ exit 1
+esac
diff --git a/debian/watch b/debian/watch
new file mode 100644
index 0000000..144edfa
--- /dev/null
+++ b/debian/watch
@@ -0,0 +1,15 @@
+# Note that the following watch file does not find development releases,
+# only general releases and release candidates. If we package development
+# releases, a rule should be added to find them as well.
+
+version=4
+
+# Without the /pages in the URL, one gets the frameset page.
+opts=dversionmangle=s/[\.+]dfsg\d+$// \
+ https://www.openafs.org/pages/release/latest.html \
+ .*/openafs-([^-]+)-src\.tar\.gz
+
+# Release candidates are stashed in another secret place and we change the
+# version number for proper sorting of versions in Debian.
+opts="uversionmangle=s/-rc/~rc/;s/pre/~pre/,dversionmangle=s/[\.+]dfsg\d+$//" \
+ http://dl.openafs.org/dl/openafs/candidate/ ([^/]+-?(?:rc|pre)\d+)/
diff --git a/make-orig.sh b/make-orig.sh
new file mode 100755
index 0000000..80c9a19
--- /dev/null
+++ b/make-orig.sh
@@ -0,0 +1,24 @@
+#!/bin/bash
+
+# Build stamp Thu 12 May 2022 09:38:41 AEST
+
+# NOTE(ianw) : If you are (re)building a version that is already
+# in Ubuntu, you have to use the ubuntu orig file that is already
+# present in the primary archive (if you try to recreate it, gzip
+# timestamps etc will be wrong). If you are building a version
+# that isn't in Ubuntu, then we can build directly from upstream
+# sources. If bumping the vesion here, look in the script below
+# to switch between downloading or creating.
+
+VERSION=1.8.8.1
+
+echo "${VERSION}" > version
+
+wget https://launchpad.net/ubuntu/+archive/primary/+sourcefiles/openafs/${VERSION}-1/openafs_${VERSION}.orig.tar.xz
+
+# wget https://www.openafs.org/dl/openafs/${VERSION}/openafs-${VERSION}-src.tar.bz2
+# wget https://www.openafs.org/dl/openafs/${VERSION}/openafs-${VERSION}-doc.tar.bz2
+# tar xf openafs-${VERSION}-src.tar.bz2
+# tar xf openafs-${VERSION}-doc.tar.bz2
+# mv openafs-${VERSION} openafs_${VERSION}.orig
+# tar cfJ openafs_${VERSION}.orig.tar.xz openafs_${VERSION}.orig
| |