diff --git a/.zuul.yaml b/.zuul.yaml
deleted file mode 100644
index 9503b8d..0000000
--- a/.zuul.yaml
+++ /dev/null
@@ -1,10 +0,0 @@
-- project:
- check:
- jobs:
- - openafs-deb-package-build
- gate:
- jobs:
- - openafs-deb-package-build
- promote:
- jobs:
- - openafs-deb-package-build-promote
diff --git a/debian/CellServDB b/debian/CellServDB
deleted file mode 100644
index a6bd8fc..0000000
--- a/debian/CellServDB
+++ /dev/null
@@ -1,665 +0,0 @@
->grand.central.org #GCO Public CellServDB 14 May 2018
-18.9.48.14 #grand.mit.edu
-128.2.13.219 #grand-old-opry.central.org
->wu-wien.ac.at #University of Economics, Vienna, Austria
-137.208.3.33 #goya.wu-wien.ac.at
-137.208.7.57 #caravaggio.wu-wien.ac.at
-137.208.8.14 #vermeer.wu-wien.ac.at
->hephy.at #hephy-vienna
-193.170.243.10 #afs01.hephy.oeaw.ac.at
-193.170.243.12 #afs02.hephy.oeaw.ac.at
-193.170.243.14 #afs03.hephy.oeaw.ac.at
->cgv.tugraz.at #CGV cell
-129.27.218.30 #phobos.cgv.tugraz.at
-129.27.218.31 #deimos.cgv.tugraz.at
-129.27.218.32 #trinculo.cgv.tugraz.at
->itp.tugraz.at #Institute of Theoretical and Computational Physics, TU Graz, Aus
-129.27.161.7 #faepafs1.tu-graz.ac.at
-129.27.161.15 #faepafs2.tu-graz.ac.at
-129.27.161.114 #faepafs3.tu-graz.ac.at
->sums.math.mcgill.ca #Society of Undergraduate Mathematics Students of McGill Universi
-132.216.24.122 #germain.sums.math.mcgill.ca
-132.216.24.125 #turing.sums.math.mcgill.ca
->ualberta.ca #University of Alberta
-129.128.1.131 #file13.ucs.ualberta.ca
-129.128.98.17 #mystery.ucs.ualberta.ca
-129.128.125.40 #drake.ucs.ualberta.ca
->cern.ch #European Laboratory for Particle Physics, Geneva
-137.138.128.148 #afsdb1.cern.ch
-137.138.246.50 #afsdb3.cern.ch
-137.138.246.51 #afsdb2.cern.ch
->ams.cern.ch #AMS Experiment
-137.138.188.185 #ams.cern.ch
-137.138.199.58 #pcamsf4.cern.ch
->epfl.ch #Swiss Federal Institute of Technology at Lausanne
-128.178.109.111 #kd1.epfl.ch
-128.178.109.112 #kd2.epfl.ch
-128.178.109.113 #kd3.epfl.ch
->ethz.ch #Swiss Federal Inst. of Tech. - Zurich, Switzerland
-82.130.118.32 #afs-db-1.ethz.ch
->psi.ch #Paul Scherrer Institut - Villigen, Switzerland
-129.129.190.140 #afs00.psi.ch
-129.129.190.141 #afs01.psi.ch
-129.129.190.142 #afs02.psi.ch
->extundo.com #Simon Josefsson's cell
-195.42.214.241 #slipsten.extundo.com
->freedaemon.com #Free Daemon Consulting, Oklahoma City, OK, USA
-66.210.104.254 #afs0.freedaemon.com
->membrain.com #membrain.com
-66.93.118.125 #stormy
-130.85.24.11 #weasel
-130.85.24.13 #straykitten
->nilcons.com #nilcons.com
-5.9.14.177 #files.nilcons.com
->sodre.cx #Sodre.cx
-128.8.140.165 #greed.sodre.cx
->ruk.cuni.cz #Charles University Computer Centre, Prague, CR
-195.113.0.36 #asterix.ruk.cuni.cz
-195.113.0.37 #obelix.ruk.cuni.cz
-195.113.0.40 #sal.ruk.cuni.cz
->ics.muni.cz #Masaryk university
-147.228.240.30 #afs-plzen.meta.zcu.cz
-147.251.9.9 #smaug2.ics.muni.cz
-195.113.214.4 #tarkil-xen.cesnet.cz
->zcu.cz #University of West Bohemia, Czech Republic
-147.228.10.18 #sauron.zcu.cz
-147.228.52.10 #oknos.zcu.cz
-147.228.52.17 #nic.zcu.cz
->desy.de #Deutsches Elektronen-Synchrotron
-131.169.2.19 #afsdb2.desy.de
-131.169.2.20 #afsdb3.desy.de
-131.169.244.60 #solar00.desy.de
->naf.desy.de #National Analysis Facility at DESY
-141.34.220.32 #tcsh1-vm1.naf.desy.de
-141.34.230.33 #tcsh2-vm1.naf.desy.de
-141.34.230.34 #tcsh3-vm1.naf.desy.de
->gppc.de #GPP Chemnitz mbH
-213.187.92.33 #gpp1.gppc.de
-213.187.92.34 #paulchen.gppc.de
-213.187.92.35 #lotus.gppc.de
->cms.hu-berlin.de #Humboldt University Berlin
-141.20.1.65 #commodus.cms.hu-berlin.de
-141.20.1.66 #faustinus.cms.hu-berlin.de
-141.20.1.67 #marcellus.cms.hu-berlin.de
->ifh.de #DESY Zeuthen
-141.34.22.10 #romulus.ifh.de
-141.34.22.11 #remus.ifh.de
-141.34.22.29 #hekate.ifh.de
->integra-ev.de #INTEGRA e.V.
-134.155.48.8 #afsdb2.integra-ev.de
-134.155.48.63 #afsdb1.integra-ev.de
->lrz-muenchen.de #Leibniz Computing Centre, Germany
-129.187.10.36 #afs1.lrz-muenchen.de
-129.187.10.56 #afs3.lrz-muenchen.de
-129.187.10.57 #afs2.lrz-muenchen.de
->ipp-garching.mpg.de #Institut fuer Plasmaphysik
-130.183.9.5 #afs-db1.rzg.mpg.de
-130.183.14.14 #afs-db3.bc.rzg.mpg.de
-130.183.100.10 #afs-db2.aug.ipp-garching.mpg.de
->mpe.mpg.de #MPE cell
-130.183.130.7 #irafs1.mpe-garching.mpg.de
-130.183.134.20 #irafs2.mpe-garching.mpg.de
->nicsys.de #NICsys GbR
-213.187.80.3 #attila.nicsys.de
->i1.informatik.rwth-aachen.de #Informatik I, RWTH Aachen
-137.226.244.79 #remus.informatik.rwth-aachen.de
->combi.tfh-wildau.de #Philips Research Lab
-194.95.50.106 #joda13.combi.tfh-wildau.de
->tu-berlin.de #TU Berlin
-130.149.204.10 #afsc-pr-1.tubit.tu-berlin.de
-130.149.204.11 #afsc-pr-2.tubit.tu-berlin.de
-130.149.204.70 #afsc-ba-1.tubit.tu-berlin.de
->tu-bs.de #Technical University of Braunschweig, Germany
-134.169.1.1 #rzafs1.rz.tu-bs.de
-134.169.1.5 #rzafs2.rz.tu-bs.de
-134.169.1.6 #rzafs3.rz.tu-bs.de
->tu-chemnitz.de #Technische Universitaet Chemnitz, Germany
-134.109.2.1 #zuse.hrz.tu-chemnitz.de
-134.109.2.2 #andrew.hrz.tu-chemnitz.de
-134.109.2.15 #phoenix.hrz.tu-chemnitz.de
->e18.ph.tum.de #Experimental Physics, TU Munich, Germany
-129.187.154.165 #dionysos.e18.physik.tu-muenchen.de
-129.187.154.223 #hamlet.e18.physik.tu-muenchen.de
->physik.uni-bonn.de #Institute of Physics, University of Bonn, Germany
-131.220.166.33 #afsdb1.physik.uni-bonn.de
-131.220.166.34 #afsdb2.physik.uni-bonn.de
-131.220.166.35 #afsdb3.physik.uni-bonn.de
->atlass01.physik.uni-bonn.de #Bonn ATLAS
-131.220.165.43 #atlass01.physik.uni-bonn.de
->uni-freiburg.de #Albert-Ludwigs-Universitat Freiburg
-132.230.6.237 #sv8.ruf.uni-freiburg.de
-132.230.6.239 #sv10.ruf.uni-freiburg.de
->physik.uni-freiburg.de #Institute of Physics, University Freiburg, Germany
-132.230.6.234 #afs1.ruf.uni-freiburg.de
-132.230.6.235 #afs2.ruf.uni-freiburg.de
-132.230.77.12 #sherlock.physik.uni-freiburg.de
->math.uni-hamburg.de #Department of Mathematics Uni Hamburg
-134.100.223.3 #afs-core.math.uni-hamburg.de
-134.100.223.6 #afs-core2.math.uni-hamburg.de
-134.100.223.9 #afs-core3.math.uni-hamburg.de
->physnet.uni-hamburg.de #PHYSnet-Rechenzentrum university of hamburg
-134.100.106.44 #afs-core.physnet.uni-hamburg.de
-134.100.106.45 #afs-core2.physnet.uni-hamburg.de
-134.100.106.47 #afs-core3.physnet.uni-hamburg.de
->iqo.uni-hannover.de #Institut fuer Quantenoptik Hannover
-130.75.103.221 #afs1.iqo.uni-hannover.de
-130.75.103.223 #afs2.iqo.uni-hannover.de
->mathi.uni-heidelberg.de #Uni Heidelberg (Mathematisches Institut)
-129.206.26.241 #hactar.mathi.uni-heidelberg.de
->urz.uni-heidelberg.de #Uni Heidelberg (Rechenzentrum)
-129.206.119.10 #afsdb.urz.uni-heidelberg.de
-129.206.119.16 #afsdb1.urz.uni-heidelberg.de
-129.206.119.17 #afsdb2.urz.uni-heidelberg.de
->ziti.uni-heidelberg.de #Institute of Computer Science at the University of Heidelberg
-147.142.42.246 #mp-sun.ziti.uni-heidelberg.de
-147.142.42.252 #mp-pizza.ziti.uni-heidelberg.de
->uni-hohenheim.de #University of Hohenheim
-144.41.2.2 #rs13.serv.uni-hohenheim.de
-144.41.2.3 #rs14.serv.uni-hohenheim.de
-144.41.2.4 #rs15.serv.uni-hohenheim.de
->rz.uni-jena.de #Rechenzentrum University of Jena, Germany
-141.35.2.180 #afs00.rz.uni-jena.de
-141.35.2.181 #afs01.rz.uni-jena.de
-141.35.2.182 #afs02.rz.uni-jena.de
->meteo.uni-koeln.de #Univ. of Cologne - Inst. for Geophysics & Meteorology
-134.95.144.22 #afs1.meteo.uni-koeln.de
-134.95.144.24 #afs2.meteo.uni-koeln.de
->rrz.uni-koeln.de #University of Cologne - Reg Comp Center
-134.95.19.3 #afsdb1.rrz.uni-koeln.de
-134.95.19.4 #afsdb2.rrz.uni-koeln.de
-134.95.19.10 #lyra.rrz.uni-koeln.de
-134.95.67.97 #afs.thp.uni-koeln.de
-134.95.112.8 #ladon.rrz.uni-koeln.de
->urz.uni-magdeburg.de #Otto-von-Guericke-Universitaet, Magdeburg
-141.44.7.6 #lem.urz.uni-magdeburg.de
-141.44.8.14 #bowles.urz.uni-magdeburg.de
-141.44.13.5 #strugazki.urz.uni-magdeburg.de
->physik.uni-mainz.de #institute of physics, university Mainz, Germany
-134.93.130.93 #hardy.physik.uni-mainz.de
->uni-mannheim.de #Uni Mannheim (Rechenzentrum)
-134.155.97.204 #afsdb1.uni-mannheim.de
-134.155.97.205 #afsdb2.uni-mannheim.de
-134.155.97.206 #afsdb3.uni-mannheim.de
->mathematik.uni-stuttgart.de #University of Stuttgart, Math Dept.
-129.69.61.1 #fbm01.mathematik.uni-stuttgart.de
-129.69.61.2 #fbm02.mathematik.uni-stuttgart.de
-129.69.61.3 #fbm03.mathematik.uni-stuttgart.de
->stud.mathematik.uni-stuttgart.de #CIP-Pool of Math. Dept, University of Stuttgart
-129.69.61.28 #omni.mathematik.uni-stuttgart.de
-129.69.116.201 #stud01.mathematik.uni-stuttgart.de
-129.69.116.202 #stud02.mathematik.uni-stuttgart.de
-129.69.116.203 #stud03.mathematik.uni-stuttgart.de
->physik.uni-wuppertal.de #Physics department of Bergische Universitt Wuppertal
-132.195.104.3 #afs1.physik.uni-wuppertal.de
-132.195.104.230 #afs2.physik.uni-wuppertal.de
->s-et.aau.dk #Aalborg Univ., The Student Society, Denmark
-130.225.196.22 #afs.s-et.aau.dk
->ies.auc.dk #Aalborg Univ., Inst. of Electronic Systems, Denmark
-130.225.51.73 #afsdb1.kom.auc.dk
-130.225.51.74 #afsdb2.kom.auc.dk
-130.225.51.85 #afsdb3.kom.auc.dk
->asu.edu #Arizona State University
-129.219.10.69 #authen2.asu.edu
-129.219.10.70 #authen1.asu.edu
-129.219.10.72 #authen3.asu.edu
->hep.caltech.edu #Caltech High Energy Physics
-131.215.116.20 #afs.hep.caltech.edu
->ugcs.caltech.edu #Caltech UGCS lab
-131.215.176.65 #afs-c.ugcs.caltech.edu
-131.215.176.67 #afs-a.ugcs.caltech.edu
-131.215.176.68 #afs-b.ugcs.caltech.edu
->andrew.cmu.edu #Carnegie Mellon University - Computing Services Cell
-128.2.10.2 #afsdb-01.andrew.cmu.edu
-128.2.10.7 #afsdb-02.andrew.cmu.edu
-128.2.10.11 #afsdb-03.andrew.cmu.edu
->mw.andrew.cmu.edu #Carnegie Mellon University - Middleware Test Cell
-128.2.234.24 #null.andrew.cmu.edu
-128.2.234.170 #mw-mgr.andrew.cmu.edu
->club.cc.cmu.edu #Carnegie Mellon University Computer Club
-128.2.204.149 #barium.club.cc.cmu.edu
-128.237.157.11 #sodium.club.cc.cmu.edu
-128.237.157.13 #potassium.club.cc.cmu.edu
->chem.cmu.edu #Carnegie Mellon University - Chemistry Dept.
-128.2.40.134 #afs.chem.cmu.edu
-128.2.40.140 #afs2.chem.cmu.edu
->cs.cmu.edu #Carnegie Mellon University - School of Comp. Sci.
-128.2.172.58 #date.srv.cs.cmu.edu
-128.2.172.60 #fig.srv.cs.cmu.edu
-128.2.200.97 #watermelon.srv.cs.cmu.edu
->ece.cmu.edu #Carnegie Mellon University - Elec. Comp. Eng. Dept.
-128.2.129.7 #porok.ece.cmu.edu
-128.2.129.8 #vicio.ece.cmu.edu
-128.2.129.9 #e-xing.ece.cmu.edu
->scotch.ece.cmu.edu #CMU ECE CALCM research group
-128.2.134.82 #lagavulin.ece.cmu.edu
->qatar.cmu.edu #Carnegie Mellon University - Qatar
-86.36.46.6 #afs1.qatar.cmu.edu
-86.36.46.7 #afs2.qatar.cmu.edu
->sbp.ri.cmu.edu #Carnegie Mellon University - Sensor Based Planning Lab
-128.2.179.12 #nihao.sbp.ri.cmu.edu
-128.2.179.113 #youtheman.sbp.ri.cmu.edu
->cnf.cornell.edu #CNF
-128.253.198.9 #hole.cnf.cornell.edu
-128.253.198.27 #smoke.cnf.cornell.edu
-128.253.198.231 #mist.cnf.cornell.edu
->math.cornell.edu #Cornell Math Dept
-128.84.234.12 #pooh.math.cornell.edu
-128.84.234.16 #bernoulli.math.cornell.edu
-128.84.234.162 #dyno.math.cornell.edu
->msc.cornell.edu #Cornell University Materials Science Center
-128.84.231.242 #miranda.ccmr.cornell.edu
-128.84.241.35 #co.ccmr.cornell.edu
-128.84.249.78 #dax.ccmr.cornell.edu
->dbic.dartmouth.edu #Dartmouth Brain Imaging Center
-129.170.30.143 #dbicafs1.dartmouth.edu
-129.170.30.144 #dbicafs2.dartmouth.edu
-129.170.30.145 #dbicafs3.dartmouth.edu
->northstar.dartmouth.edu #Dartmouth College Research Computing
-129.170.16.22 #halley.dartmouth.edu
-129.170.16.26 #andromeda.dartmouth.edu
-129.170.199.250 #kuiper.dartmouth.edu
->cs.hm.edu #Department Computer Science Munich University Of Applied Science
-129.187.208.31 #afs1.cs.hm.edu
->eecs.harvard.edu #Harvard - EECS
-140.247.60.64 #lefkada.eecs.harvard.edu
-140.247.60.83 #corfu.eecs.harvard.edu
->iastate.edu #Iowa State University
-129.186.1.243 #afsdb-1.iastate.edu
-129.186.6.243 #afsdb-2.iastate.edu
-129.186.142.243 #afsdb-3.iastate.edu
->acm.jhu.edu #Johns Hopkins ACM chapter
-128.220.35.191 #chicago.acm.jhu.edu
-128.220.70.76 #typhon.acm.jhu.edu
->athena.mit.edu #MIT/Athena cell
-18.7.45.11 #leda.mit.edu
-18.9.48.11 #castor.mit.edu
-18.9.48.12 #pollux.mit.edu
->csail.mit.edu #MIT Computer Science & Artificial Intelligence Lab
-128.30.2.13 #titanic.csail.mit.edu
-128.30.2.31 #vasa.csail.mit.edu
-128.30.2.75 #maine.csail.mit.edu
->lns.mit.edu #MIT/LNS Cell
-198.125.160.134 #afs2.lns.mit.edu.
-198.125.160.217 #afsdbserv1.lns.mit.edu.
-198.125.160.218 #afsdbserv2.lns.mit.edu.
->net.mit.edu #MIT/Network Group cell
-18.7.62.60 #willy.mit.edu
-18.9.48.15 #moby.mit.edu
-18.9.48.16 #springer.mit.edu
->sipb.mit.edu #MIT/SIPB cell
-18.4.60.19 #reynelda.mit.edu
-18.4.60.22 #rosebud.mit.edu
-18.4.60.23 #ronald-ann.mit.edu
->msu.edu #Michigan State University Main Cell
-35.9.7.10 #afsdb0.cl.msu.edu
-35.9.7.11 #afsdb1.cl.msu.edu
-35.9.7.12 #afsdb2.cl.msu.edu
->nd.edu #University of Notre Dame
-129.74.223.17 #john.helios.nd.edu
-129.74.223.33 #lizardo.helios.nd.edu
-129.74.223.65 #buckaroo.helios.nd.edu
->crc.nd.edu #University of Notre Dame - Center for Research Computing
-129.74.85.34 #afsdb1.crc.nd.edu
-129.74.85.35 #afsdb2.crc.nd.edu
-129.74.85.36 #afsdb3.crc.nd.edu
->pitt.edu #University of Pittsburgh
-136.142.8.15 #afs09.srv.cis.pitt.edu
-136.142.8.20 #afs10.srv.cis.pitt.edu
-136.142.8.21 #afs11.srv.cis.pitt.edu
->cs.pitt.edu #University of Pittsburgh - Computer Science
-136.142.22.5 #afs01.cs.pitt.edu
-136.142.22.6 #afs02.cs.pitt.edu
-136.142.22.7 #afs03.cs.pitt.edu
->psc.edu #PSC (Pittsburgh Supercomputing Center)
-128.182.59.182 #shaggy.psc.edu
-128.182.66.184 #velma.psc.edu
-128.182.66.185 #daphne.psc.edu
->scoobydoo.psc.edu #PSC Test Cell
-128.182.59.181 #scooby.psc.edu
->cede.psu.edu #Penn State - Center for Engr. Design & Entrepeneurship
-146.186.218.10 #greenly.cede.psu.edu
-146.186.218.60 #b50.cede.psu.edu
-146.186.218.246 #stalin.cede.psu.edu
->rose-hulman.edu #Rose-Hulman Institute of Technology
-137.112.7.11 #afs1.rose-hulman.edu
-137.112.7.12 #afs2.rose-hulman.edu
-137.112.7.13 #afs3.rose-hulman.edu
->cs.rose-hulman.edu #Rose-Hulman CS Department
-137.112.40.10 #galaxy.cs.rose-hulman.edu
->rpi.edu #Rensselaer Polytechnic Institute
-128.113.22.11 #saul.server.rpi.edu
-128.113.22.12 #joab.server.rpi.edu
-128.113.22.13 #korah.server.rpi.edu
-128.113.22.14 #achan.server.rpi.edu
->hep.sc.edu #University of South Carolina, Dept. of Physics
-129.252.78.77 #cpeven.physics.sc.edu
->cs.stanford.edu #Stanford University Computer Science Department
-171.64.64.10 #cs-afs-1.Stanford.EDU
-171.64.64.66 #cs-afs-2.stanford.edu
-171.64.64.69 #cs-afs-3.stanford.edu
->ir.stanford.edu #Stanford University
-171.64.7.222 #afsdb1.stanford.edu
-171.64.7.234 #afsdb2.stanford.edu
-171.64.7.246 #afsdb3.stanford.edu
->slac.stanford.edu #Stanford Linear Accelerator Center
-134.79.18.25 #afsdb1.slac.stanford.edu
-134.79.18.26 #afsdb2.slac.stanford.edu
-134.79.18.27 #afsdb3.slac.stanford.edu
->physics.ucsb.edu #UC Santa Barbara, Physics Dept
-128.111.18.161 #ledzeppelin.physics.ucsb.edu
->cats.ucsc.edu #University of California, Santa Cruz
-128.114.123.8 #afs-prod-front-1.ucsc.edu
-128.114.123.9 #afs-prod-front-2.ucsc.edu
-128.114.123.10 #afs-prod-front-3.ucsc.edu
->ncsa.uiuc.edu #National Center for Supercomputing Applications at Illinois
-141.142.192.66 #nile-vm.ncsa.uiuc.edu
-141.142.192.143 #congo-vm.ncsa.uiuc.edu
-141.142.192.144 #kaskaskia-vm.ncsa.uiuc.edu
->umbc.edu #University of Maryland, Baltimore County
-130.85.24.23 #db2.afs.umbc.edu
-130.85.24.87 #db3.afs.umbc.edu
-130.85.24.101 #db1.afs.umbc.edu
->glue.umd.edu #University of Maryland - Project Glue
-128.8.70.11 #olmec.umd.edu
-128.8.236.4 #egypt.umd.edu
-128.8.236.230 #babylon.umd.edu
->wam.umd.edu #University of Maryland Network WAM Project
-128.8.70.9 #csc-srv.wam.umd.edu
-128.8.236.5 #avw-srv.wam.umd.edu
-128.8.236.231 #ptx-srv.wam.umd.edu
->umich.edu #University of Michigan - Campus
-141.211.1.32 #fear.ifs.umich.edu
-141.211.1.33 #surprise.ifs.umich.edu
-141.211.1.34 #ruthless.ifs.umich.edu
->atlas.umich.edu #ATLAS group cell in physics at University of Michigan
-141.211.43.102 #linat02.grid.umich.edu
-141.211.43.103 #linat03.grid.umich.edu
-141.211.43.104 #linat04.grid.umich.edu
->citi.umich.edu #University of Michigan - Center for Information Technology Integ
-141.212.112.5 #babylon.citi.umich.edu
->isis.unc.edu #Univ. of NC at Chapel Hill - ITS
-152.2.1.5 #db0.isis.unc.edu
-152.2.1.6 #db1.isis.unc.edu
-152.2.1.7 #db2.isis.unc.edu
->eng.utah.edu #University of Utah - Engineering
-155.98.111.9 #lenny.eng.utah.edu
-155.98.111.10 #carl.eng.utah.edu
->cs.uwm.edu #University of Wisconsin--Milwaukee
-129.89.38.124 #solomons.cs.uwm.edu
-129.89.143.71 #filip.cs.uwm.edu
->cs.vassar.edu #Computer Science research network / Vassar College
-143.229.6.73 #afsserv.cs.vassar.edu
->cs.wisc.edu #Univ. of Wisconsin-Madison, Computer Sciences Dept.
-128.105.132.14 #timon.cs.wisc.edu
-128.105.132.15 #pumbaa.cs.wisc.edu
-128.105.132.16 #zazu.cs.wisc.edu
->engr.wisc.edu #University of Wisconsin-Madison, College of Engineering
-144.92.13.14 #larry.cae.wisc.edu
-144.92.13.15 #curly.cae.wisc.edu
-144.92.13.16 #moe.cae.wisc.edu
->hep.wisc.edu #University of Wisconsin -- High Energy Physics
-128.104.28.219 #anise.hep.wisc.edu
-144.92.180.7 #rosemary.hep.wisc.edu
-144.92.180.30 #fennel.hep.wisc.edu
->physics.wisc.edu #Univ. of Wisconsin-Madison, Physics Department
-128.104.160.13 #kendra.physics.wisc.edu
-128.104.160.14 #fray.physics.wisc.edu
-128.104.160.15 #buffy.physics.wisc.edu
->ciemat.es #Ciemat, Madrid, Spain
-192.101.165.10 #afsdb1.ciemat.es
-192.101.165.11 #afsdb2.ciemat.es
->ifca.unican.es #Instituto de Fisica de Cantabria (IFCA), Santander, Spain
-193.144.209.20 #gridwall.ifca.unican.es
->ific.uv.es #Instituto de Fisica Corpuscular, Valencia, Spain
-147.156.163.11 #alpha.ific.uv.es
->alteholz.eu #alteholz.eu
-78.47.192.125 #krb1eu.afs.alteholz.net
->in2p3.fr #IN2P3
-134.158.104.11 #ccafsdb01.in2p3.fr
-134.158.104.12 #ccafsdb02.in2p3.fr
-134.158.104.13 #ccafsdb03.in2p3.fr
->mcc.ac.gb #University of Manchester
-130.88.203.41 #nevis.mc.man.ac.uk
-130.88.203.144 #eryri.mc.man.ac.uk
-130.88.203.145 #scafell.mc.man.ac.uk
->anl.gov #Argonne National Laboratory
-146.137.96.33 #arteus.it.anl.gov
-146.137.162.88 #agamemnon.it.anl.gov
-146.137.194.80 #antenor.it.anl.gov
->rhic.bnl.gov #Relativistic Heavy Ion Collider
-130.199.6.51 #rafs03.rcf.bnl.gov
-130.199.6.52 #rafs02.rcf.bnl.gov
-130.199.6.69 #rafs01.rcf.bnl.gov
->usatlas.bnl.gov #US Atlas Tier 1 Facility at BNL
-130.199.48.32 #aafs01.usatlas.bnl.gov
-130.199.48.33 #aafs02.usatlas.bnl.gov
-130.199.48.34 #aafs03.usatlas.bnl.gov
->jpl.nasa.gov #Jet Propulsion Laboratory
-137.78.160.21 #afsdb08.jpl.nasa.gov
-137.78.160.22 #afsdb09.jpl.nasa.gov
-137.78.160.23 #afsdb10.jpl.nasa.gov
->doe.atomki.hu #Institute of Nuclear Research (MTA ATOMKI), Debrecen, Hungary
-193.6.179.31 #afs.doe.atomki.hu
->bme.hu #Budapest University of Technology and Economics
-152.66.241.6 #afs.iit.bme.hu
->kfki.hu #Wigner Research Centre for Physics - Budapest, Hungary
-148.6.2.109 #afs0.kfki.hu
->rnd.ru.is #Reykjavik University Research and Development Network
-130.208.242.66 #lithium.rnd.ru.is.
-130.208.242.67 #beryllium.rnd.ru.is.
-130.208.242.68 #boron.rnd.ru.is.
->caspur.it #CASPUR Inter-University Computing Consortium, Rome
-193.204.5.45 #pomodoro.caspur.it
-193.204.5.46 #banana.caspur.it
-193.204.5.50 #maslo.caspur.it
->enea.it #ENEA New Tech. Energy & Environment Agency, Italy
-192.107.54.5 #aixfs.frascati.enea.it
-192.107.54.11 #rs2ced.frascati.enea.it
-192.107.54.12 #43p.frascati.enea.it
->fusione.it #Assoz. FUSIONE/Euratom, ENEA, Frascati-Italy
-192.107.90.2 #fusafs1.frascati.enea.it
-192.107.90.3 #fusafs2.frascati.enea.it
-192.107.90.4 #fusafs3.frascati.enea.it
->icemb.it #ICEMB, Universita' La Sapienza - Rome - Italy
-193.204.6.130 #icembfs.caspur.it
->ictp.it #The Abdus Salam International Centre for Theoretical Physics (IC
-140.105.34.7 #afsdb1.ictp.it
-140.105.34.8 #afsdb2.ictp.it
->infn.it #Istituto Nazionale di Fisica Nucleare (INFN), Italia
-131.154.1.7 #afscnaf.infn.it
-141.108.26.75 #afsrm1.roma1.infn.it
-192.84.134.75 #afsna.na.infn.it
->ba.infn.it #INFN, Sezione di Bari
-193.206.185.235 #baafsserver.ba.infn.it
-193.206.185.236 #debsrv.ba.infn.it
->kloe.infn.it #INFN, KLOE experiment at Laboratori di Frascati
-192.135.25.111 #kloeafs1.lnf.infn.it
-192.135.25.112 #kloeafs2.lnf.infn.it
->le.infn.it #INFN, Sezione di Lecce
-192.84.152.40 #afs01.le.infn.it
-192.84.152.148 #afs02.le.infn.it
->lnf.infn.it #INFN, Laboratori Nazionali di Frascati
-193.206.84.121 #afs1.lnf.infn.it
-193.206.84.122 #afs2.lnf.infn.it
-193.206.84.123 #afs3.lnf.infn.it
->lngs.infn.it #INFN, Laboratori Nazionali del Gran Sasso
-192.84.135.21 #afs1.lngs.infn.it
-192.84.135.133 #afs2.lngs.infn.it
->pi.infn.it #INFN, Sezione di Pisa
-192.84.133.50 #aix1.pi.infn.it
-212.189.152.6 #afs1.pi.infn.it
-212.189.152.7 #afs2.pi.infn.it
->roma3.infn.it #Istituto Nazionale di Fisica Nucleare (INFN), Italia
-193.205.159.17 #afsrm3.roma3.infn.it
->psm.it #Progetto San Marco, Universita' di Roma-1
-151.100.1.65 #atlante.psm.uniroma1.it
->tgrid.it #CASPUR-CILEA-CINECA Grid Cell
-193.204.5.33 #cccgrid.caspur.it
->math.unifi.it #math.unifi.it
-150.217.34.182 #xeno.math.unifi.it
->ing.uniroma1.it #Universita' La Sapienza, Fac. Ingeneria
-151.100.85.253 #alfa.ing.uniroma1.it
->dia.uniroma3.it #University Roma Tre - DIA
-193.204.161.67 #srv.dia.uniroma3.it
-193.204.161.79 #aux.dia.uniroma3.it
-193.204.161.118 #afs.dia.uniroma3.it
->vn.uniroma3.it #University Roma Tre, area Vasca Navale
-193.205.219.59 #alfa2.dia.uniroma3.it
-193.205.219.60 #beta2.dia.uniroma3.it
-193.205.219.61 #gamma2.dia.uniroma3.it
->italia #Italian public AFS cell
-193.204.5.9 #afs.caspur.it
->cmf.nrl.navy.mil #Naval Research Laboratory - Center for Computational Science
-134.207.12.68 #picard.cmf.nrl.navy.mil
-134.207.12.69 #riker.cmf.nrl.navy.mil
-134.207.12.70 #kirk.cmf.nrl.navy.mil
->lcp.nrl.navy.mil #Naval Research Lab - Lab for Computational Physics
-132.250.114.2 #afs1.lcp.nrl.navy.mil
-132.250.114.4 #afs2.lcp.nrl.navy.mil
-132.250.114.6 #afs3.lcp.nrl.navy.mil
->nucleares.unam.mx #Instituto de Ciencias Nucleares, UNAM, Mexico
-132.248.29.50 #nahualli.nucleares.unam.mx
->crossproduct.net #crossproduct.net
-207.114.88.173 #geodesic.crossproduct.net
->epitech.net #EPITECH, France
-163.5.255.41 #afs-db-1.epitech.net
-163.5.255.42 #afs-db-2.epitech.net
->es.net #Energy Sciences Net
-198.128.3.21 #fs1.es.net
-198.128.3.22 #fs2.es.net
-198.128.3.23 #fs3.es.net
->gorlaeus.net #Gorlaeus Laboratories, Leiden University
-132.229.170.27 #fwncisafs1.gorlaeus.net
->laroia.net #Laroia Networks
-66.66.102.254 #supercore.laroia.net
->pallissard.net #pallissard.net
-35.184.35.247 #files.pallissard.net
->sinenomine.net #Sine Nomine Associates
-207.89.43.108 #afsdb3.sinenomine.net
-207.89.43.109 #afsdb4.sinenomine.net
-207.89.43.110 #afsdb5.sinenomine.net
->slackers.net #The Slackers' Network
-199.4.150.159 #alexandria.slackers.net
->tproa.net #The People's Republic of Ames
-204.11.35.83 #service-3.tproa.net
-204.11.35.84 #service-4.tproa.net
-204.11.35.85 #service-5.tproa.net
->interdose.net #Interdose Ltd. & Co. KG, Germany
-80.190.171.42 #bfd9000.tow5.interdose.net
-80.190.171.43 #bfd9001.tow5.interdose.net
->nikhef.nl #The Dutch National Institute for High Energy Physics
-192.16.185.26 #afs1.nikhef.nl
-192.16.185.27 #afs2.nikhef.nl
->acm-csuf.org #California State Univerisity Fullerton ACM
-137.151.29.193 #afs1.acm-csuf.org
->adrake.org #adrake.org
-128.2.98.241 #afs.adrake.org
->bazquux.org #Baz Quux Organization
-66.207.142.196 #baxquux.org
->coed.org #Adam Pennington's Cell
-66.93.61.184 #vice1.coed.org
-128.237.157.35 #vice3.coed.org
->dementia.org #Dementia Unlimited (old)
-128.2.13.209 #dedlock.dementix.org
-128.2.234.204 #vorkana.dementix.org
-128.2.235.26 #meredith.dementix.org
->dementix.org #Dementia Unlimited
-128.2.13.209 #dedlock.dementix.org
-128.2.234.204 #vorkana.dementix.org
-128.2.235.26 #meredith.dementix.org
->idahofuturetruck.org #University of Idaho hybrid vehicle development
-12.18.238.210 #dsle210.fsr.net
->afs.ietfng.org #ietfng.org
-67.62.51.95 #a.afs.ietfng.org
->jeaton.org #jeaton.org (Jeffrey Eaton, jeaton@jeaton.org)
-128.2.234.89 #jeaton-org-01.jeaton.org
-128.2.234.92 #jeaton-org-02.jeaton.org
->mrph.org #Mrph
-66.207.133.1 #sanber.mrph.org
-128.2.99.209 #hernandarias.mrph.org
->mstacm.org #Missouri Science & Technology - ACM
-131.151.249.193 #acm.mst.edu
->nomh.org #nomh.org
-204.29.154.12 #iota.nomh.org
-204.29.154.32 #adversity.xi.nomh.org
->oc7.org #The OC7 Project
-128.2.122.140 #knife.oc7.org
-207.22.77.170 #spoon.oc7.org
->pfriedma.org #pfriedma.org
-72.95.215.18 #vice.pfriedma.org
->riscpkg.org #The RISC OS Packaging Project
-83.104.175.10 #delenn.riscpkg.org
->kth.se #Royal Institute of Technology, Stockholm, Sweden
-130.237.32.145 #sonen.e.kth.se
-130.237.48.7 #anden.e.kth.se
-130.237.48.244 #fadern.e.kth.se
->ict.kth.se #Royal Institute of Technology, Information and Communication tec
-130.237.216.11 #afsdb1.ict.kth.se
-130.237.216.12 #afsdb2.ict.kth.se
-130.237.216.13 #afsdb3.ict.kth.se
->it.kth.se #Royal Institute of Technology, Teleinformatics, Kista
-130.237.216.14 #afsdb1.it.kth.se
-130.237.216.15 #afsdb2.it.kth.se
-130.237.216.16 #afsdb3.it.kth.se
->md.kth.se #Royal Institute of Technology, MMK
-130.237.32.63 #mdafs-1.sys.kth.se
->mech.kth.se #Royal Institute of Technology, MECH
-130.237.233.142 #matterhorn.mech.kth.se
-130.237.233.143 #castor.mech.kth.se
-130.237.233.144 #pollux.mech.kth.se
->nada.kth.se #Royal Institute of Technology, NADA
-130.237.223.12 #afsdb-2.csc.kth.se
-130.237.224.78 #afsdb-3.csc.kth.se
-130.237.227.23 #afsdb-4.csc.kth.se
->pdc.kth.se #Royal Institute of Technology, PDC
-130.237.232.29 #crab.pdc.kth.se
-130.237.232.112 #anna.pdc.kth.se
-130.237.232.114 #hokkigai.pdc.kth.se
->stacken.kth.se #Stacken Computer Club
-130.237.234.3 #milko.stacken.kth.se
-130.237.234.43 #hot.stacken.kth.se
-130.237.234.101 #fishburger.stacken.kth.se
->syd.kth.se #Royal Institute of Technology, KTH-Syd
-130.237.83.23 #afs.haninge.kth.se
->sanchin.se #Sanchin Consulting AB, Sweden
-192.195.148.10 #sesan.sanchin.se
->su.se #Stockholm University
-130.237.162.81 #afsdb1.su.se
-130.237.162.82 #afsdb2.su.se
-130.237.162.230 #afsdb3.su.se
->fysik.su.se #Stockholm University, Physics Department
-130.237.244.134 #srv01.fysik.su.se
-130.237.244.135 #srv02.fysik.su.se
-130.237.244.139 #srv05.fysik.su.se
->f9.ijs.si #F9, Jozef Stefan Institue
-194.249.156.1 #brenta.ijs.si
->p-ng.si #University of Nova Gorica
-193.2.120.2 #solkan.p-ng.si
-193.2.120.9 #sabotin.p-ng.si
->ihep.su #Institute for High-Energy Physics
-194.190.165.201 #fs0001.ihep.su
-194.190.165.202 #fs0002.ihep.su
->motherfsck.tech #motherfsck.tech
->hep-ex.physics.metu.edu.tr #METU Department of Physics, Experimental HEP group, Ankara/Turke
-144.122.31.131 #neutrino.physics.metu.edu.tr
->phy.bris.ac.uk #Bristol University - physics
-137.222.74.18 #zen.phy.bris.ac.uk
->inf.ed.ac.uk #School of Informatics, University of Edinburgh
-129.215.64.16 #afsdb0.inf.ed.ac.uk
-129.215.64.17 #afsdb1.inf.ed.ac.uk
-129.215.64.18 #afsdb2.inf.ed.ac.uk
->phas.gla.ac.uk #Univeristy of Glasgow Physics And Astronomy
-194.36.1.19 #afsdb1.phas.gla.ac.uk
-194.36.1.27 #afsdb3.phas.gla.ac.uk
-194.36.1.33 #afsdb2.phas.gla.ac.uk
->ic.ac.uk #Imperial College London
-155.198.63.148 #icafs2.cc.ic.ac.uk
-155.198.63.149 #icafs1.cc.ic.ac.uk
->hep.man.ac.uk #Manchester HEP
-194.36.2.3 #afs1.hep.man.ac.uk
-194.36.2.4 #afs2.hep.man.ac.uk
-194.36.2.5 #afs3.hep.man.ac.uk
->tlabs.ac.za #iThemba LABS Cell
-196.24.232.1 #afs01.tlabs.ac.za
-196.24.232.2 #afs02.tlabs.ac.za
-196.24.232.3 #afs03.tlabs.ac.za
diff --git a/debian/ConfigUtils.pm b/debian/ConfigUtils.pm
deleted file mode 100644
index 4d35047..0000000
--- a/debian/ConfigUtils.pm
+++ /dev/null
@@ -1,26 +0,0 @@
-# This is -*- perl -*-
-
-package Debian::OpenAFS::ConfigUtils;
-
-use strict;
-use vars qw( @ISA @EXPORT @unwinds);
-@ISA = qw(Exporter);
-require Exporter;
-@EXPORT = qw(@unwinds run unwind);
-
-sub run ($) {
- print join(' ', @_);
- print "\n";
- system (@_) == 0
- or die "Failed: $?\n";
-}
-
-# This subroutine takes a command to run in case of failure. After
-# each succesful step, this routine should be run with a command to
-# undo the successful step.
-
- sub unwind($) {
- push @unwinds, $_[0];
- }
-
-1;
diff --git a/debian/README.Debian b/debian/README.Debian
deleted file mode 100644
index 2f43531..0000000
--- a/debian/README.Debian
+++ /dev/null
@@ -1,170 +0,0 @@
- OpenAFS for Debian
-
-Introduction
-
- For an OpenAFS client system, install openafs-client and a kernel
- module. See README.modules for information on how to build the kernel
- module for your system. Then, read /etc/openafs/afs.conf to understand
- the client configuration options. The openafs-client package will
- attempt to guess at a good cache configuration based on the size of your
- cache, but you may want to tune it further. There are also other
- options configured in that file you may want to consider.
-
- FAM does not work correctly with AFS except for directories that are
- world-readable since it does not run in the user's security context and
- therefore doesn't have the user's AFS tokens. If you are using FAM,
- you'll encounter errors from file managers such as Nautilus that use it
- if you browse restricted AFS directories. Instead of FAM, install
- gamin, which runs in the user's security context and works correctly
- with AFS.
-
- For information on how to set up an OpenAFS server, read README.servers.
- You will want the openafs-fileserver package for a file server and,
- additionally, the openafs-dbserver package for a database server.
-
-Documentation
-
- For the complete OpenAFS manual, install openafs-doc. This is the same
- documentation as found at , and is
- unfortunately outdated in several respects, but it's the best that we
- have at present.
-
- If want to set up a new cell, read README.servers and then look at the
- example session in configuration-transcript.txt.gz in this directory.
- The procedure outlined in these two files is much simpler and more
- secure than the one in the OpenAFS documentation, but the OpenAFS
- documentation provides useful background.
-
-Build Options
-
- The OpenAFS file server has been built with --enable-demand-attach-fs,
- which enables a new method of handling volume attachment. Volumes will
- be attached only when needed, and the file server will persist state to
- disk when shutting down for faster restarts. This file server mode is
- experimental and should not yet be used for production data. Please
- report any bugs you encounter.
-
- The OpenAFS servers have been built with --enable-supergroups, which
- permits nesting of PTS groups. Be aware that the PT database created by
- these packages is not compatible with servers not built with
- --enable-supergroups if nested PTS groups are used. In other words, if
- you need the openafs-dbserver package to interoperate with ptservers
- that aren't built with this option, don't use this capability.
-
- The OpenAFS client and kernel module have been built with
- --enable-disconnected, which enables experimental support for
- disconnected operations. This support is still experimental and known
- to have problems, but should not interfere with normal use of AFS. If
- you want to experiment with it, see fs help discon.
-
-Changes Relative to Stock OpenAFS
-
- Long-time AFS users may be confused by the directory layout. The files
- that normally go in /usr/vice/etc go in /etc/openafs. The cache should
- be mounted on /var/cache/openafs. The server files have been moved
- around even more; see README.servers for the details.
-
- The OpenAFS kernel module is named openafs, not libafs, to better match
- normal Linux kernel module naming standards. The Debian source package
- only builds one kernel module that matches the kernel source tree it is
- built against and does not attempt to build separate SMP and non-SMP
- modules against the same tree. Doing so does not work on all platforms.
- To distinguish between an SMP and a non-SMP kernel module package, use
- --append_to_version; see README.modules for more information.
-
- The AFS up utility is installed as afs-up, since the standard name is
- rather generic.
-
- The libopenafs-dev package only includes static libraries and there are
- no shared library packages. The shared libraries built by AFS are not
- compatible with Debian policy. They do not have a stable ABI or an
- appropriate SONAME.
-
- kaserver is not included. New AFS cells should use Kerberos v5 rather
- than the old K4-based kaserver KDC.
-
-Debugging and Bug Reporting
-
- The current OpenAFS installation process installs fileserver and
- volserver unstripped, since backtraces and other debugging information
- for those binaries are necessary to track down file server problems.
- For the Debian packages, the fileserver and volserver binaries in the
- openafs-fileserver package are stripped, but the debugging information
- is available in the openafs-dbg package, which can be installed
- separately. If it is installed, gdb will find that debugging
- information automatically.
-
- Eventually the openafs-dbg package will contain debugging information
- for all OpenAFS binaries.
-
- When reporting a bug in the OpenAFS client, please include your exact
- kernel version and architecture (reportbug will do this for you). Also,
- if the client caused a kernel oops or BUG, be sure to include the
- complete kernel output, including the lines before the oops. That's
- where the OpenAFS error message, if any, will be.
-
- When reporting a bug in the OpenAFS file server, please include
- backtrace information from a core dump, if any. If the file server is
- deadlocked, you can capture a core dump using the gcore script that
- comes with the gdb package. The file server is threaded, so use the
- command "thread apply all backtrace" in gdb to get a complete backtrace.
- It's also often useful to have the output of rxdebug 7000 at
- the time of the problem and the FileLog from the file server. You can
- increase the logging level of the file server with kill -TSTP (and reset
- it to 0 with kill -HUP).
-
- You can report any bug in OpenAFS against the Debian package with
- reportbug and the OpenAFS package maintainers will forward the bug
- upstream as necessary. If you do want to report a bug directly
- upstream, see http://www.openafs.org/ for bug reporting instructions.
-
-PAM Authentication
-
- Any new OpenAFS cell is strongly encouraged to use Kerberos v5 for
- authentication. If you want PAM to automatically obtain AFS credentials
- and you are using Kerberos v5, you will want to install the libpam-krb5
- and libpam-afs-session packages and then put something like the
- following in /etc/pam.d/common-auth:
-
- auth [success=ok default=1] pam_krb5.so ignore_root
- auth [default=done] pam_afs_session.so
- auth required pam_unix.so nullok_secure try_first_pass
-
- and something like the following in /etc/pam.d/common-session:
-
- session optional pam_krb5.so ignore_root
- session optional pam_afs_session.so
- session required pam_unix.so
-
- You'll probably also want the following in /etc/pam.d/common-account:
-
- account required pam_krb5.so ignore_root
- account required pam_unix.so
-
- There are, of course, many variations depending on what different
- mechanism you want to use and how you want to handle fallbacks.
-
- If you are still using Kerberos v4 and the OpenAFS kaserver (or a KDC
- that understands the same protocol) for authentication, you can instead
- use the libpam-openafs-kaserver package and a configuration like:
-
- auth sufficient pam_afs.so ignore_root
- auth required pam_unix.so nullok_secure try_first_pass
-
- in /etc/pam.d/common-auth and:
-
- session optional pam_afs.so
- session required pam_unix.so
-
- in /etc/pam.d/common-session. Use pam_afs.krb.so instead of pam_afs.so
- if you also want the PAM module to acquire a ticket cache for you. If
- using this configuration with sshd, you may need to disable privilege
- separation to get everything working properly. I've had mixed results
- with that. Obviously, converting to Kerberos v5 authentication is
- strongly preferred.
-
- If you are using the kaserver as your KDC, you may also want to install
- the openafs-kpasswd package to get the administrative utilities for
- managing those Kerberos accounts.
-
- -- Russ Allbery , Tue, 6 Apr 2010 15:04:42 -0700
diff --git a/debian/README.modules b/debian/README.modules
deleted file mode 100644
index b82fcc6..0000000
--- a/debian/README.modules
+++ /dev/null
@@ -1,128 +0,0 @@
- Building Kernel Modules
-
-Introduction
-
- The easiest way to get AFS modules is to install prebuilt modules. For
- example, if you are running kernel 2.6.26-2-686, you might try:
-
- apt-get install openafs-modules-2.6.26-2-686
-
- Pre-built modules are not provided with Debian (building and maintaining
- them in Debian proper poses too many problems), but many organizations
- that use OpenAFS build their own and provide them locally.
-
- If this doesn't work, you will need to build your own modules. There
- are three methods for doing this.
-
- When following any of these methods, be aware that the Debian package
- creates a module named openafs, not libafs as is used by upstream. It
- also prefers not to add the .mp extension for modules built for SMP
- kernels; the indication of whether the module is for an SMP kernel
- should go into the package name via something like --append_to_version,
- not into the file name of the module.
-
-DKMS
-
- DKMS has some caveats, but it's the easiest method of building modules.
- It provides infrastructure that will automatically rebuild kernel
- modules when the source package or the kernel has been upgraded.
-
- To build OpenAFS kernel modules via DKMS, install the linux-headers
- package corresponding to the version of the kernel that you have
- installed and then install the openafs-modules-dkms package. This
- depends on DKMS and will install it as well. The OpenAFS kernel modules
- should then be built automatically and will be installed under
- updates/dkms in the module tree for your kernel.
-
- Please note that DKMS will only build modules for kernels that have the
- Linux headers installed. When you upgrade your kernel, you need to
- install the new linux-headers package at the same time, or you'll end up
- without an OpenAFS module for the new kernel. If you're using the
- tracking packages for the kernel (linux-image-2.6-686 or the like), also
- install the tracking package for the kernel headers
- (linux-headers-2.6-686 in that example).
-
-module-assistant
-
- This method is the best method for manually building kernel modules for
- kernels that come with Debian, since module-assistant knows how to get
- the right header files to build modules for your currently running
- kernel. Generally, all you should have to do is:
-
- apt-get install module-assistant
- module-assistant auto-install openafs
-
- This combines all of the following steps, taking the defaults. If you
- want to do it more step-by-step, first prepare the kernel headers and
- install openafs-modules-source with:
-
- apt-get install module-assistant
- module-assistant prepare openafs-modules
-
- If you want to build modules for a different kernel than your currently
- running one, pass the -l flag to module-assistant. See the man page.
- module-assistant may be able to find the right packages itself or it may
- tell you to install particular packages. Once you've finished with
- that, build the module with:
-
- module-assistant auto-build openafs-modules
-
- You may prefer to pass module-assistant the -t flag to get more
- conventional output. If everything works correctly, the openafs-modules
- deb should be created in /usr/src. You can use dpkg -i to install it.
-
- module-assistant will take care of naming the openafs-modules package
- correctly so that it matches the name of the kernel-image package and
- installs its modules into the correct directory.
-
- If you have ever previously built a module with module-assistant, always
- run:
-
- module-assistant clean openafs
-
- before building a new module. module-assistant doesn't always properly
- clean up after itself, and the mix of files from old and new versions of
- OpenAFS can cause serious problems with the resulting module.
-
-make-kpkg
-
- This method may work better than module-assistant if you're also
- building your own kernel rather than using the pre-packaged Debian one.
-
- Install a kernel source package and untar it in /usr/src. Then, install
- openafs-modules-source.
-
- apt-get install openafs-modules-source
-
- Next, unpack openafs-modules-source:
-
- cd /usr/src
- tar xzf openafs.tar.gz
-
- Now, change into your kernel source tree. You should then create a
- .config file; the easiest way to do this is to run make menuconfig or to
- copy in a kernel configuration from the same version of the kernel.
- Debian kernel packages store a copy of their kernel configuration in
- /boot/config.version_number.
-
- The kernel configuration needs to be identical to the configuration that
- produced the kernel that you're using. Ideally, you would build the
- kernel image you're going to use with make-kpkg kernel_image and install
- that along with the module image, although as long as the configuration
- is identical, you may be able to get away with using a pre-built kernel.
- (A better approach, if you're using pre-built kernels, may be to use
- module-assistant as described above.)
-
- Finally, build the modules:
-
- make-kpkg modules_image
-
- You may need to use the --append_to_version switch to add version
- suffixes like -686 or -smp to match your kernel and install the OpenAFS
- module into a directory like /lib/modules/version-686. Be aware that
- the Debian OpenAFS packages build either a regular module or an SMP
- module, not both, so the generated package will only work with a kernel
- with the same SMP configuration.
-
- An openafs-modules deb should be created in /usr/src. Use dpkg -i to
- install this package.
diff --git a/debian/README.servers b/debian/README.servers
deleted file mode 100644
index 32b36f6..0000000
--- a/debian/README.servers
+++ /dev/null
@@ -1,403 +0,0 @@
- Setting up a Debian OpenAFS Server
-
-Introduction
-
- This document describes how to set up an OpenAFS server using the Debian
- packages. If you are not already familiar with the basic concepts of
- OpenAFS, you should review the documentation at:
-
- http://docs.openafs.org/
-
- particularly the AFS Administrator's Guide. This documentation is
- somewhat out of date (it doesn't talk about how to use a Kerberos v5 KDC
- instead of the AFS kaserver, for example), but it's a good introduction
- to the basic concepts and servers you will need to run.
-
- The Debian OpenAFS packages follow the FHS and therefore use different
- paths than the standard AFS documentation or the paths that experienced
- AFS administrators may be used to. In the first column below are the
- traditional paths, and in the second column, the Debian paths:
-
- /usr/afs/etc /etc/openafs/server
- /usr/afs/local /var/lib/openafs/local
- /usr/afs/db /var/lib/openafs/db
- /usr/afs/logs /var/log/openafs
- /usr/afs/bin /usr/lib/openafs
- /usr/vice/etc /etc/openafs
-
- The AFS kaserver (a Kerberos v4 KDC) is not packaged for Debian. Any
- new OpenAFS installation should use Kerberos v5 for authentication in
- conjunction with either the tools packaged in the openafs-krb5 package
- or the Heimdal KDC. When setting up a new cell, you should therefore
- not set up a kaserver as described in the AFS Administrator's Guide, and
- you will need to follow a slightly different method of setting the cell
- key.
-
-Creating a New Cell
-
- For documentation on adding a server to an existing cell, see below.
-
- These instructions assume that you are using MIT Kerberos and the
- openafs-krb5 package. If you are using Heimdal instead, some of the
- steps will be slightly different (Heimdal can write the AFS KeyFile
- directly, for example, so you don't have to use asetkey). The
- afs-newcell and afs-rootvol scripts are the same, however.
-
- /usr/share/doc/openafs-dbserver/configuration-transcript.txt.gz has a
- transcript of the results of these directions, which you may want to
- follow along with as you do this.
-
- 1. If you do not already have a Kerberos KDC (Key Distribution Center,
- the daemon that handles Kerberos authentication) configured, do so.
- You can run the KDC on the same system as your OpenAFS db server,
- although if you plan on using Kerberos for other things, you may
- eventually want to use separate systems. If you do not have a
- Kerberos realm set up already, you can do so in Debian with:
-
- apt-get install krb5-admin-server
- krb5_newrealm
-
- This will install a KDC and kadmind server (the server that handles
- password changes and account creations) on the local system. Please
- be aware that the security of everything that uses Kerberos for
- authentication, including AFS, depends on the security of the KDC.
-
- The name of your Kerberos realm should, for various reasons, be in
- all uppercase and be a domain name that you control, although
- neither is technically required.
-
- 2. It is traditional (and recommended) in AFS (and for Kerberos) to
- give administrators two separate Kerberos principals, one regular
- principal to use for regular purposes and a separate admin principal
- to use for privileged actions. This is similar to the distinction
- between a regular user and the root user in Unix, except that
- everyone can have their own separate root identity. Kerberos
- recommends username/admin as the admin principal for username, and
- this will work for AFS as well.
-
- If you have not already created such an admin principal for yourself
- in your Kerberos realm, do so now (using kadmin.local on your KDC,
- unless you have a local method that you prefer). Also create a
- regular (non-admin) principal for yourself if you have not already;
- this is the identity that you'll use for regular operations, like
- storing files or reading mail. To do this with kadmin.local, run
- that program and then run the commands:
-
- addprinc username/admin
- addprinc username
-
- at the kadmin prompt. You'll be prompted for passwords for both
- accounts.
-
- If the KDC is not on the same system that the OpenAFS db server will
- be on, you will also need to give your admin principal the rights to
- download the afs keytab in /etc/krb5kdc/kadm5.acl by adding a lines
- like:
-
- username/admin@REALM *
-
- where REALM is your Kerberos realm and username/admin is the admin
- principal that you created. That line gives you full admin access
- to the Kerberos v5 realm. You can be more restrictive if you want;
- see the kadmind man page for the syntax.
-
- 3. Install the OpenAFS db server package on an appropriate system with:
-
- apt-get install openafs-dbserver openafs-krb5
-
- The openafs-krb5 package will be used to create the AFS KeyFile.
-
- As part of this installation, you will need to configure
- openafs-client with the cell you are creating as the local cell name
- and the server on which you're working as the db server. This name
- is technically arbitrary but should, for various reasons, be a valid
- domain name that you control; unlike Kerberos realms, it should be
- in all lowercase. Enter the name of the local system when prompted
- for the names of your OpenAFS db servers. Don't start the client;
- that will happen below. For right now, say that you don't want it
- to start at boot. You can change that later with dpkg-reconfigure
- openafs-client.
-
- If you have already installed openafs-client and configured it for
- some other cell, you do need to configure it to point to your new
- cell for these instructions to work. Stop the AFS client on the
- system with service openafs-client stop and then run:
-
- dpkg-reconfigure openafs-client
-
- pointing it to the new cell you're about to create instead.
- Remember, your cell name should be in lowercase. If you have had to
- do this several times, double-check /etc/openafs/CellServDB when
- you're done and make sure that there is only one entry for your new
- cell at the top of that file and that it lists the correct IP
- address for your new db server.
-
- In order to complete the AFS installation, you will also need a
- working AFS client installed on that system, which means that you
- need to install an OpenAFS kernel module. Please see:
-
- /usr/share/doc/openafs-client/README.modules
-
- for information on how to do that.
-
- 4. Create an AFS principal in Kerberos. This is the AFS service
- principal, used by clients to authenticate to AFS and for AFS
- servers to authenticate to each other. It *must* be a DES key; AFS
- does not support any other encryption type. Run kadmin.local on
- your KDC and then, at the kadmin.local prompt, run:
-
- addprinc -randkey -e des-cbc-crc:v4 afs
-
- If your Kerberos realm name does not match your AFS cell name (if,
- for instance, you have one Kerberos realm with multiple AFS cells),
- use "afs/cell.name" as the name of the principal above instead of
- just "afs", where cell.name is the name of your new AFS cell.
-
- 5. On the db server, download this key into a keytab. If this is the
- same system as the KDC, you can use kadmin.local again. If not, you
- should use kadmin (make sure that krb5-user is installed), and you
- may need to pass -p username/admin to kadmin to tell it what
- principal to authenticate as. Whichever way you get into kadmin,
- run:
-
- ktadd -k /tmp/afs.keytab -e des-cbc-crc:v4 afs
-
- (or afs/cell.name if you used that instead). In the message that
- results, note the kvno number reported, since you'll need it later
- (it will normally be 3).
-
- Don't forget the -e des-cbc-crc:v4 to force the afs key to be DES.
- You can verify this with:
-
- getprinc afs
-
- and checking to be sure that the only key listed is a DES key. If
- there are multiple keys listed, delprinc the afs principal, delete
- the /tmp/afs.keytab file, and then start over with addprinc, making
- sure not to forget the -e option.
-
- 6. Create the AFS KeyFile with:
-
- asetkey add /tmp/afs.keytab afs
-
- (or afs/cell.name if you used that instead). should be
- replaced by the kvno number reported by kadmin. This tells AFS the
- Kerberos key that it should use, making it match the key in the
- Kerberos KDC.
-
- 7. If the name of your Kerberos realm does not match the name of your
- AFS cell, tell AFS what Kerberos realm to use with:
-
- echo REALM > /etc/openafs/server/krb.conf
-
- where REALM is the name of your Kerberos realm. If your AFS cell
- and Kerberos realm have the same name, this is unnecessary.
-
- 8. Create some space to use for AFS volumes. You can set up a separate
- AFS file server on a different system from the Kerberos KDC and AFS
- db server, and for a larger cell you will want to do so, but when
- getting started you can make the db server a file server as well.
- For a production cell, you will want to create a separate partition
- devoted to AFS and mount it as /vicepa (and may want to make
- multiple partitions mounted as /vicepb, /vicepc, etc.), but for
- testing purposes, you can use the commands below to create a
- zero-filled file, create a file system in it, and then mount it:
-
- dd if=/dev/zero of=/var/lib/openafs/vicepa bs=1024k count=32
- mke2fs /var/lib/openafs/vicepa
- mkdir /vicepa
- mount -oloop /var/lib/openafs/vicepa /vicepa
-
- mke2fs will ask you if you're sure you want to create a file system
- on a non-block device; say yes.
-
- 9. Run afs-newcell. This will prompt you to be sure that the above
- steps have been complete and will ask you for the Kerberos principal
- to use for AFS administrative access. You should use the
- username/admin principal discussed above. afs-newcell sets up the
- initial protection database (which stores users and groups),
- configures the AFS database and file server daemons, and creates the
- root volume for AFS clients.
-
- At the completion of this step, you should see bosserver and several
- other AFS server processes running, and you should be able to see
- the status of those processes with:
-
- bos status localhost -local
-
- bosserver is a master server that starts and monitors all the
- individual AFS servers, and bos is the program used to send it
- commands.
-
- Now, you should be able to run:
-
- kinit username/admin@REALM
- aklog cell.name -k REALM
-
- where username/admin is the admin principal discussed above, REALM
- is the name of your Kerberos realm, and cell.name is the name of
- your AFS cell. This will obtain Kerberos tickets and AFS tokens in
- your Kerberos realm and new AFS cell. You should be able to see
- your AFS tokens by running:
-
- tokens
-
- Finally, you should be able to see the status of the AFS server
- processes with:
-
- bos status
-
- where is the hostname of the local system, once you've
- done the above. This tests authenticated bos access as your admin
- principal (rather than using the local KeyFile to authenticate).
-
- 10. Run afs-rootvol. This creates the basic AFS volume structure for
- your new cell, including the top-level volume, the mount point for
- your cell in the AFS root volume, and the mount points for all known
- public cells. It will prompt you to be sure that the above steps
- are complete and then will ask you what file server and partition to
- create the volume on. If you were following the above instructions,
- use the local hostname and "a" as the partition (without the
- quotes), which will use /vicepa.
-
- After this command completes, you should be able to /bin/ls /afs and
- see your local cell (and, if you aren't using dynroot, mount points
- for several other cells). Note that if you're not using fakestat,
- run /bin/ls rather than just ls to be sure that ls isn't aliased to
- ls -F, ls --color, or some other option that would stat each file in
- /afs, since this would require contacting lots of foreign cells and
- could take a very long time.
-
- You should now be able to cd to /afs/cell.name where cell.name is
- the AFS cell name that you used. Currently, there isn't anything in
- your cell except two volumes, user and service, created by
- afs-rootvol. To make modifications, cd to /afs/.cell.name (note the
- leading period) and make changes there. To make those changes show
- up at /afs/cell.name, run vos release root.cell. For more details
- on what you can do now, see the AFS Administrator's Reference.
-
- 11. While this is optional, you probably want to add AFSDB records to
- DNS for your new AFS cell. These special DNS records let AFS
- clients find the db servers for your cell without requiring local
- configuration. To do this, create a DNS record like:
-
- . 3600 IN AFSDB 1 .
-
- where is the name of your AFS cell and is the name
- of your db server. Note the trailing periods to prevent the DNS
- server from appending the origin. You can, of course, choose what
- you prefer for the lifetime. The 1 is not a priority; it's a
- special indicator saying that this record is for an AFS database
- server.
-
- If you have multiple db servers (see below for adding new ones), you
- should create multiple records of this type, one per db server.
-
- Congratulations! You now have an AFS cell. If any of the above steps
- failed, please check the steps carefully and make sure that you've done
- them all in order. If that doesn't reveal the cause of the problem,
- please feel free to submit a bug report with reportbug. Include as many
- details as possible on exactly what you typed and exactly what you saw
- as a result, particularly any error messages.
-
-Adding Additional Servers
-
- If you decide one server is not enough, or if you're adding a server to
- an existing cell, here is roughly what you should do:
-
- 1. Copy securely (using scp, encrypted Kerberos rcp, or some other
- secure method) all of /etc/openafs/server to the new server.
-
- 2. Install the openafs-fileserver package on the new server.
-
- 3. If the machine is to be a file server, create an fs instance using
- bos create:
-
- bos create dafs dafs -cmd /usr/lib/openafs/dafileserver \
- -cmd /usr/lib/openafs/davolserver \
- -cmd /usr/lib/openafs/salvageserver \
- -cmd /usr/lib/openafs/dasalvager -localauth
-
- For a file server, this is all you have to do. The above uses the
- default fileserver options, however, which are not particularly
- well-tuned for modern systems. afs-newcell uses the following
- parameters from Harald Barth:
-
- -p 23 -busyat 600 -rxpck 400 -s 1200 -l 1200 -cb 65535
- -b 240 -vc 1200
-
- If you want to add any additional fileserver options, enclose
- /usr/lib/openafs/dafileserver and the following options in double
- quotes when giving the bos create command.
-
- This creates a demand-attach fileserver, which is recommended for
- new installations. You can also create a regular fileserver if you
- prefer. See the bos_create(8) man page for more information.
-
- 4. For database servers, also install openafs-dbserver and then use bos
- addhost to add the new server to /etc/openafs/server/CellServDB:
-
- bos addhost
-
- for each db server in your cell (including the new one).
- Then, restart the ptserver and vlserver instances on each of your
- existing servers with:
-
- bos restart ptserver
- bos restart vlserver
-
- It's best to wait a few seconds after doing this for each server
- before doing the next server so that voting finishes and you never
- lose a quorum.
-
- Only after ptserver and vlserver have been restarted on each of your
- existing servers, create ptserver and vlserver instances on the new
- server:
-
- bos create ptserver simple /usr/lib/openafs/ptserver \
- -localauth
- bos create vlserver simple /usr/lib/openafs/vlserver \
- -localauth
-
- The existing servers should then propagate the database to the new
- server. If you are using buserver, you will need to do the same
- thing for it as with ptserver and vlserver.
-
- Note that you do not need to run a file server on a db server if you
- don't want to (and larger sites probably will not want to), but you
- always need to have the openafs-fileserver package installed on db
- servers. It contains the bosserver binary and some of the shared
- infrastructure.
-
- 5. If you added a new db server, configure your clients to use it. If
- you are using AFSDB records in DNS, you can just add a new record
- (see point 10 in the instructions for creating a new cell).
- Otherwise, clients will need to have the new server IP address added
- to their /etc/openafs/CellServDB file (or /usr/vice/etc/CellServDB
- for non-Debian clients using the standard AFS paths), and the client
- will have to be restarted before it will know about the new db
- server.
-
- The standard rule of thumb is that all of your database servers and file
- servers should ideally be running the same version of OpenAFS. However,
- in practice OpenAFS is fairly good at backward compatibility and you can
- generally mix and match different versions. Be careful, though, to
- ensure that all of your database servers are built the same when it
- comes to options like --enable-supergroups (enabled in the Debian
- packages).
-
-Upgrades
-
- Currently, during an upgrade of the openafs-fileserver package, all
- services will be stopped and restarted. If openafs-dbserver is upgraded
- without upgrading openafs-fileserver, those server binaries will not be
- stopped and restarted; that restart will have to be done by hand.
-
- It is possible that future versions of this package will install for
- example /usr/lib/openafs/fileserver.package instead of
- /usr/lib/openafs/fileserver and then create links to the actual binaries
- in postinst. Upgrades would then not replace the old binaries, but
- instead a script will be provided to roll the links forward to the new
- versions. The intent is that people could install the new package on
- all their servers and then quickly move the links before restarting the
- bosserver. This has not yet been implemented.
diff --git a/debian/README.source b/debian/README.source
deleted file mode 100644
index 17280eb..0000000
--- a/debian/README.source
+++ /dev/null
@@ -1,124 +0,0 @@
-General Maintenance
-
- This package is maintained in Git via the Salsa debian project.
- Salsa is used only for repository access control and not for any of
- its other features.
-
- Since we often pull up many upstream fixes from the upstream stable
- branch due to slow upstream release frequencies, we use Git to handle
- merging and patch pullups and do not attempt to export the Git
- repository state as a patch set. This package uses 3.0 (quilt) via
- the gbp pq subcommands.
-
- Ideally, any changes that are not strictly Debian packaging changes
- should be submitted upstream first. Upstream uses Gerrit for patch
- review, which makes it very easy for anyone who wishes to submit
- patches for review using Git. See:
-
- https://wiki.openafs.org/devel/GitDevelopers/
-
- for information on how to submit patches upstream. Starting from
- OpenAFS 1.5, we're no longer carrying any substantial Debian-specific
- changes outside of the debian/* directory, only temporary bug
- workarounds, and we want to keep it that way.
-
-Importing a New Upstream Release
-
- We want to be able to use Git to cherry-pick fixes from upstream, but
- we want to base the Debian packages on the upstream tarball releases.
- We also need to strip some non-DFSG files from the upstream tarball
- releases and imported code, and want to drop the WINNT directory to
- save some space. This means we follow a slightly complicated method
- for importing a new upstream release.
-
- Follow the following procedure to import a new upstream release:
-
- 1. Update the package version in debian/changelog to match the new
- upstream version. If the new upstream version is a prerelease
- version, don't forget to add "~" before "pre" so that the versions
- will sort property.
-
- 2. Double-check the TAG setting in debian/rules to be sure it's going
- to retrieve the correct Git tag.
-
- 3. Run debian/rules get-orig-source. This will generate a tarball
- from the upstream Git tag using git archive, remove the WINNT
- directory, and create a file named openafs_.orig.tar.xz in
- the current directory.
-
- 4. Ensure that you have the OpenAFS upstream Git repository available
- as a remote in the Git repository where you're doing the packaging
- work and it's up to date:
-
- git remote add openafs git://git.openafs.org/openafs.git
- git fetch openafs
-
- This will be required to locate the tag for the new upstream
- release.
-
- 5. Determine the release tag corresponding to this tarball. At the
- time of this writing, upstream uses tags in the form:
-
- openafs-stable-
- openafs-devel-
-
- for stable and development releases respectively. is the
- version number with periods replaced by underscores. This
- convention may change, so double-check with git tag.
-
- 6. Import the upstream source from the tarball with:
-
- gbp import-orig --upstream-vcs-tag
-
- where is the tarball created by get-orig-source above and
- is the corresponding tag from the upstream Git repository.
-
- 7. Flesh out the changelog entry for the new version with a summary of
- what changed in that release, and continue as normal with Debian
- packaging.
-
-Pulling Upstream Changes
-
- Upstream releases, particularly stable releases, are relatively
- infrequent, so it's often desirable to pull upstream changes from the
- stable branch into the Debian package. This should always be done
- using git cherry-pick -x so that we can use git cherry to see which
- changes on the stable branch have not been picked up.
-
- The procedure is therefore:
-
- 0. Regenerate and switch to the patch-queue branch with
- git branch -d patch-queue/master && gbp pq import
-
- 1. Identify the hash of the commit that you want to pull up using git
- log or other information.
-
- 2. git cherry-pick -x . If the cherry-pick fails and you have
- to manually do a merge, follow the instructions to use -c to keep
- the original commit message as a starting point, but *also*
- manually add a line like:
-
- (cherry picked from commit )
-
- to the changelog entry where is the full hash of the
- upstream commit. Note that the upstream commits on the stable
- branch will generally already have a line like this from upstream's
- cherry-pick. This will be a second line.
-
- 3. Switch to the master branch and (re)generate patch files:
- git checkout master && gbp pq export
-
- 4. Add a changelog entry and commit it along with the added patch files.
- Use the following convention for changelog entries for cherry-picks:
-
- * Apply upstream deltas:
- - []
- - ...
-
- where is the first eight characters of the upstream commit
- hash and is the first line of the upstream commit message,
- edited as necessary to keep the length of the changelog lines
- down.
-
- -- Russ Allbery , Sun, 20 Oct 2013 08:59:17 -0700
- -- Benjamin Kaduk , Mon 22 Sep 2014 13:05:40 -0400
diff --git a/debian/TODO b/debian/TODO
deleted file mode 100644
index 24318af..0000000
--- a/debian/TODO
+++ /dev/null
@@ -1,8 +0,0 @@
-* Get bos restrict working.
-
-* The configuration transcript and the README.servers file would be best
- read together, but preferrably with some nicer formatting (such as HTML
- with a style sheet to set off the transcript in a different background
- color).
-
-* Use pts addu -local instead of pt_util for initial cell setup.
diff --git a/debian/afs-newcell b/debian/afs-newcell
deleted file mode 100755
index 87e0586..0000000
--- a/debian/afs-newcell
+++ /dev/null
@@ -1,289 +0,0 @@
-#!/usr/bin/perl -w
-# Copyright (C) 2000 by Sam Hartman
-# This file may be copied either under the terms of the GNU GPL or the IBM
-# Public License either version 2 or later of the GPL or version 1.0 or later
-# of the IPL.
-
-use Term::ReadLine;
-use strict;
-use Debian::OpenAFS::ConfigUtils;
-use Getopt::Long;
-use Socket qw(inet_ntoa);
-use vars qw($admin $server $requirements_met $shutdown_needed);
-my $rl = new Term::ReadLine('afs-newcell');
-
-# The default file server options are poor. Until they've been updated, use
-# the following from Harald Barth; it should be an improvement for most
-# people.
-my $fs_options = '-p 23 -busyat 600 -rxpck 400 -s 1200 -l 1200 -cb 65535'
- . ' -b 240 -vc 1200';
-
-=head1 NAME
-
-afs-newcell - Set up initial database server for AFS cell
-
-=head1 SYNOPSIS
-
-B [B<--requirements-met>] [B<--admin> admin_user]
-
-=head1 DESCRIPTION
-
-This script sets up the initial AFS database and configures the first
-database/file server.
-
-The B<--requirements-met> option specifies that the initial requirements have
-been met and that the script can proceed without displaying the initial
-banner or asking for confirmation.
-
-The B<--admin> option specifies the name of the administrative user. This
-user will be given system:administrators and susers permission in the cell.
-
-=head1 AUTHOR
-
-Sam Hartman
-
-=cut
-
-# Flush all output immediately.
-$| = 1;
-
-GetOptions ("requirements-met" => \$requirements_met, "admin=s" => \$admin);
-
-unless ($requirements_met) {
- print <readline("Do you meet these requirements? [y/n] ");
- unless (/^y/i ) {
- print "Run this script again when you meet the requirements\n";
- exit(1);
- }
-
- if ($> != 0) {
- die "This script should almost always be run as root. Use the\n"
- . "--requirements-met option to run as non-root.\n";
- }
-}
-
-# Make sure the AFS client is not already running.
-open(MOUNT, "mount |") or die "Failed to run mount: $!\n";
-while() {
- if (m:^AFS:) {
- print "The AFS client is currently running on this workstation.\n";
- print "Please restart this script after running"
- . " service openafs-client stop\n";
- exit(1);
- }
-}
-close MOUNT;
-
-# Make sure there is a keyfile.
-unless ( -f "/etc/openafs/server/KeyFile") {
- print "You do not have an AFS keyfile. Please create this using\n";
- print "asetkey from openafs-krb5 or the bos addkey command\n";
- exit(1);
-}
-
-# Stop the file server.
-print "If the fileserver is not running, this may hang for 30 seconds.\n";
-run("service openafs-fileserver stop");
-
-# Get the local hostname. Use the fully-qualified hostname to be safer.
-$server = `hostname -f`;
-chomp $server;
-my $ip = gethostbyname $server;
-if (inet_ntoa($ip) eq '127.0.0.1') {
- print "\n";
- print "Your hostname $server resolves to 127.0.0.1, which AFS cannot\n";
- print "cope with. Make sure your hostname resolves to a non-loopback\n";
- print "IP address. (Check /etc/hosts and make sure that your hostname\n";
- print "isn't listed on the 127.0.0.1 line. If it is, removing it from\n";
- print "that line will probably solve this problem.)\n";
- exit(1);
-}
-
-# Determine the admin principal.
-$admin = $rl->readline("What administrative principal should be used? ")
- unless $admin;
-print "\n";
-die "Please specify an administrative user\n" unless $admin;
-my $afs_admin = $admin;
-$afs_admin =~ s:/:.:g;
-if ($afs_admin =~ /@/) {
- die "The administrative user must be in the same realm as the cell and\n"
- . "no realm may be specified.\n";
-}
-
-# Determine the local cell. This should be configured via debconf, from the
-# openafs-client configuration, when openafs-fileserver is installed.
-open(CELL, "/etc/openafs/server/ThisCell")
- or die "Cannot open /etc/openafs/server/ThisCell: $!\n";
-my $cell = ;
-chomp $cell;
-
-# Make sure the new cell is configured in the client CellServDB.
-open(CELLSERVDB, "/etc/openafs/CellServDB")
- or die "Cannot open /etc/openafs/CellServDB: $!\n";
-my $found = 0;
-while () {
- next unless /^>\Q$cell\E\s/;
- while () {
- last if /^>/;
- my ($dbserver) = split ' ';
- if ($dbserver eq inet_ntoa($ip)) {
- $found = 1;
- last;
- }
- }
- last;
-}
-unless ($found) {
- print "\n";
- print "The new cell $cell is not configured in /etc/openafs/CellServDB\n";
- print "Add configuration like:\n\n";
- print ">$cell\n";
- print inet_ntoa($ip), "\t\t\t#$server\n\n";
- print "to that file before continuing.\n";
- exit(1);
-}
-
-# Write out a new CellServDB for the local cell containing only this server.
-if (-f "/etc/openafs/server/CellServDB") {
- print "/etc/openafs/server/CellServDB already exists, renaming to .old\n";
- rename("/etc/openafs/server/CellServDB",
- "/etc/openafs/server/CellServDB.old")
- or die "Cannot rename /etc/openafs/server/CellServDB: $!\n";
-}
-open(CELLSERVDB, "> /etc/openafs/server/CellServDB")
- or die "Cannot create /etc/openafs/server/CellServDB: $!\n";
-print CELLSERVDB ">$cell\n";
-print CELLSERVDB inet_ntoa($ip), "\t\t\t#$server\n";
-close CELLSERVDB or die "Cannot write to /etc/openafs/server/CellServDB: $!\n";
-
-# Now, we should be able to start bos and add the admin user.
-run("service openafs-fileserver start");
-$shutdown_needed = 1;
-run("bos adduser $server $afs_admin -localauth");
-unwind("bos removeuser $server $afs_admin -localauth");
-
-# Create the initial protection database using pt_util. This is safer than
-# the standard mechanism of starting the cell in noauth mode until the first
-# user has been created.
-if (-f "/var/lib/openafs/db/prdb.DB0") {
- warn "ERROR: Protection database already exists; cell already partially\n";
- warn "ERROR: created. If you do not want the current database, remove\n";
- warn "ERROR: all files in /var/lib/openafs/db and then run this program\n";
- warn "ERROR: again.\n";
- exit(1);
-}
-print "\nCreating initial protection database. This will print some errors\n";
-print "about an id already existing and a bad ubik magic. These errors can\n";
-print "be safely ignored.\n\n";
-open(PRDB, "| pt_util -p /var/lib/openafs/db/prdb.DB0 -w")
- or die "Unable to start pt_util: $!\n";
-print PRDB "$afs_admin 128/20 1 -204 -204\n";
-print PRDB "system:administrators 130/20 -204 -204 -204\n";
-print PRDB " $afs_admin 1\n";
-close PRDB;
-unwind("rm /var/lib/openafs/db/prdb*");
-print "\n";
-
-# We should now be able to start ptserver and vlserver.
-run("bos create $server ptserver simple /usr/lib/openafs/ptserver -localauth");
-unwind("bos delete $server ptserver -localauth");
-run("bos create $server vlserver simple /usr/lib/openafs/vlserver -localauth");
-unwind("bos delete $server vlserver -localauth");
-
-# Create a file server as well.
-run("bos create $server dafs dafs"
- . " -cmd '/usr/lib/openafs/dafileserver $fs_options'"
- . " -cmd /usr/lib/openafs/davolserver"
- . " -cmd /usr/lib/openafs/salvageserver"
- . " -cmd /usr/lib/openafs/dasalvager -localauth");
-unwind("bos delete $server dafs -localauth");
-
-# Make sure that there is no scheduled general restart time; it's not needed.
-run("bos setrestart $server -time never -general -localauth");
-
-# Pause for a while for ubik to catch up.
-print "Waiting for database elections: ";
-sleep(30);
-print "done.\n";
-
-# Past this point we want to control when bos shutdown happens.
-$shutdown_needed = 0;
-unwind("bos shutdown $server -localauth -wait");
-run("vos create $server a root.afs -localauth");
-unwind("vos remove $server a root.afs -localauth");
-
-# We should now be able to bring up the client (it may need root.afs to exist
-# if not using dynroot). We override whatever default cell was configured for
-# the client, just in case it was pointing to some other cell.
-open(THIS, "> /etc/openafs/ThisCell")
- or die "ERROR: Cannot create /etc/openafs/ThisCell: $!\n";
-print THIS "$cell\n";
-close THIS or die "ERROR: Cannot write to /etc/openafs/ThisCell: $!\n";
-run("service openafs-client force-start");
-
-# Verify that AFS has managed to start.
-my $afs_running = 0;
-open(MOUNT, "mount |") or die "ERROR: Failed to run mount: $!\n";
-while() {
- if (m:^AFS:) {
- $afs_running = 1;
- }
-}
-unless ($afs_running) {
- print "ERROR: The AFS client failed to start.\n";
- print "ERROR: Please fix whatever problem kept it from running.\n";
- exit(1);
-}
-print "\n";
-print "Now, get tokens as $admin in the $cell cell.\n";
-print "Then, run afs-rootvol.\n";
-
-# Success, so clear the unwind commands.
-@unwinds = ();
-
-# If we fail before all the instances are created, we need to back out of
-# everything we did as much as possible.
-END {
- if ($shutdown_needed || @unwinds) {
- print "\nCell setup failed, ABORTING\n";
- }
- system("bos shutdown $server -localauth -wait") if $shutdown_needed;
- run(pop @unwinds) while @unwinds;
-}
diff --git a/debian/afs-rootvol b/debian/afs-rootvol
deleted file mode 100755
index 9a8da2f..0000000
--- a/debian/afs-rootvol
+++ /dev/null
@@ -1,194 +0,0 @@
-#!/usr/bin/perl -w
-# Copyright (C) 2000 by Sam Hartman
-# This file may be copied either under the terms of the GNU GPL or the IBM
-# Public License either version 2 or later of the GPL or version 1.0 or later
-# of the IPL.
-
-use strict;
-use Debian::OpenAFS::ConfigUtils;
-use Term::ReadLine;
-use Getopt::Long;
-use vars qw($rl $server $part $requirements_met);
-
-=head1 NAME
-
-afs-rootvol - Generate and populate root volumes for new AFS cells.
-
-=head1 SYNOPSIS
-
-B [B<--requirements-met>] [B<--server> I]
-[B<--partition> I]
-
-=head1 DESCRIPTION
-
-This script sets up an AFS cell's root volumes. It assumes that you already
-have a fileserver and database servers. The fileserver should have an empty
-root.afs. This script creates root.cell, user, and service and populates
-root.afs.
-
-=head1 AUTHOR
-
-Sam Hartman
-
-=cut
-#'# cperl-mode
-
-# This subroutine creates a volume, mounts it and then sets the access
-# to allow read by anyuser. The volume is scheduled for deletion in
-# case of error.
-sub mkvol($$) {
- my ($vol, $mnt) = @_;
- run("vos create $server $part $vol -localauth");
- unwind("vos remove $server $part $vol -localauth");
- run("fs mkm $mnt $vol ");
- run("fs sa $mnt system:anyuser rl");
-}
-
-# Main script. Flush all output immediately.
-$| = 1;
-$rl = new Term::ReadLine('AFS');
-GetOptions ("requirements-met" => \$requirements_met,
- "server=s" => \$server,
- "partition=s" => \$part);
-unless ($requirements_met) {
- print <readline("Do you meet these conditions? (y/n) ");
- unless (/^y/i ) {
- print "Please restart the script when you meet these conditions.\n";
- exit(1);
- }
- if ($> != 0) {
- die "This script should almost always be run as root. Use the\n"
- . "--requirements-met option to run as non-root.\n";
- }
-}
-
-# Get configuration information we need.
-open(CELL, "/etc/openafs/server/ThisCell")
- or die "Unable to find out what cell this machine serves: $!\n";
-my $cell = ;
-close CELL;
-chomp $cell;
-
-unless ($server) {
- print <readline("What AFS Server should volumes be placed on? ");
- die "Please select a server.\n" unless $server;
-}
-unless ($part) {
- $part = $rl->readline("What partition? [a] ");
- $part = "a" unless $part;
-}
-print "\n";
-
-# Make sure the user has tokens. Forgetting to do this is a common error.
-my $status = system("tokens | grep Expires > /dev/null");
-if ($status != 0) {
- die "You appear to not have AFS tokens. Obtain tokens (with aklog,\n"
- . "for example) and then run this script again.\n";
-}
-
-# Figure out where root.afs is. There are two possibilities: either we aren't
-# running with dynroot, and root.afs is therefore accessible as /afs, or we
-# are running with dynroot, in which case we have to create root.cell first
-# and then mount root.afs under it.
-#
-# Always create root.cell first; we may need it if running with dynroot, and
-# it doesn't hurt to do it now regardless.
-my $rootmnt = "/afs";
-run("vos create $server $part root.cell -localauth");
-unwind("vos remove $server $part root.cell -localauth");
-my $dynroot = (-d "$rootmnt/$cell/.");
-if ($dynroot) {
- run("fs mkm /afs/$cell/.root.afs root.afs -rw");
- unwind("fs rmm /afs/$cell/.root.afs");
- $rootmnt = "/afs/$cell/.root.afs";
-}
-run("fs sa $rootmnt system:anyuser rl");
-
-# Scan CellServDB and create the cell mount points for every cell found there.
-# Force these commands to succeed, since it's possible to end up with
-# duplicate entries in CellServDB (and the second fs mkm will fail).
-open(CELLSERVDB, "/etc/openafs/CellServDB")
- or die "Unable to open /etc/openafs/CellServDB: $!\n";
-while () {
- chomp;
- if (/^>\s*([a-z0-9_\-.]+)/) {
- run("fs mkm $rootmnt/$1 root.cell -cell $1 -fast || true");
- unwind("fs rmm $rootmnt/$1 || true");
- }
-}
-
-# Now, create the read/write mount points for root.cell and root.afs and set
-# root.cell system:anyuser read.
-run("fs sa /afs/$cell system:anyuser rl");
-run("fs mkm $rootmnt/.$cell root.cell -cell $cell -rw");
-unwind("fs rmm $rootmnt/.$cell");
-run("fs mkm $rootmnt/.root.afs root.afs -rw");
-unwind("fs rmm $rootmnt/.root.afs");
-
-# Create the user and service mount point volumes to fit the semi-standard AFS
-# cell layout.
-mkvol("user", "/afs/$cell/user");
-mkvol("service", "/afs/$cell/service");
-
-# Strip the domain off of the cell name and create the short symlinks.
-$cell =~ /^([^.]+)/;
-my $cellpart = $1;
-if ($cellpart && $cellpart ne $cell) {
- run("ln -s $cell $rootmnt/$cellpart");
- unwind("rm $rootmnt/$cellpart");
- run("ln -s .$cell $rootmnt/.$cellpart");
- unwind("rm $rootmnt/.$cellpart");
-}
-if ($dynroot) {
- run("fs rmm /afs/$cell/.root.afs");
- unwind("fs mkm /afs/$cell/.root.afs root.afs -rw");
-}
-
-# Now, replicate the infrastructure volumes.
-run("vos addsite $server $part root.afs -localauth");
-run("vos addsite $server $part root.cell -localauth");
-run("vos release root.afs -localauth");
-run("vos release root.cell -localauth");
-unwind("vos remove $server $part root.cell.readonly -localauth");
-unwind("vos remove $server $part root.afs.readonly -localauth");
-
-# Success, so clear the unwind commands.
-@unwinds = ();
-
-# If we fail before all the instances are created, we need to back out of
-# everything we did as much as possible.
-END {
- if (@unwinds) {
- print "\nRoot volume setup failed, ABORTING\n";
- }
- run(pop @unwinds) while @unwinds;
-}
diff --git a/debian/afs.conf b/debian/afs.conf
deleted file mode 100644
index 701d50f..0000000
--- a/debian/afs.conf
+++ /dev/null
@@ -1,116 +0,0 @@
-# -*- sh -*-
-# Copyright 2000, International Business Machines Corporation and others.
-# All Rights Reserved.
-#
-# This software has been released under the terms of the IBM Public
-# License. For details, see the LICENSE file in the top-level source
-# directory or online at http://www.openafs.org/dl/license10.html
-
-# Configuration information for AFS client.
-
-# The following options are maintained by debconf. To change them, run
-# dpkg-reconfigure openafs-client.
-#
-# AFS_CLIENT Whether to start the AFS client at boot
-# AFS_AFSDB Whether to use AFSDB DNS records to find VLDB servers
-# AFS_CRYPT Whether to enable fcrypt encryption
-# AFS_DYNROOT Whether to use a dynamic /afs directory
-# AFS_FAKESTAT Whether to fake stat data for mount points
-
-test -f /etc/openafs/afs.conf.client && . /etc/openafs/afs.conf.client
-
-# Set to "-verbose" for a lot of debugging information from afsd. Only useful
-# for debugging as it prints a LOT of information.
-VERBOSE=
-
-# AFS client configuration options.
-#
-# Here is a (mostly) complete list of flags that afsd accepts and that are
-# useful here:
-#
-# -blocks The number of blocks available in the workstation cache.
-# -files The target number of files in the workstation cache (Default:
-# 1000).
-# -rootvol The name of the root volume to use.
-# -stat The number of stat cache entries.
-# -hosts List of servers to check for volume location info FOR THE
-# HOME CELL.
-# -memcache Use an in-memory cache rather than disk.
-# -cachedir The base directory for the workstation cache.
-# -mountdir The directory on which the AFS is to be mounted.
-# -confdir The configuration directory.
-# -nosettime Don't keep checking the time to avoid drift (default).
-# -settime Keep checking the time to avoid drift.
-# -verbose Be chatty.
-# -debug Print out additional debugging info.
-# -daemons The number of background daemons to start (Default: 2).
-# -rmtsys Also fires up an afs remote sys call (e.g. pioctl, setpag)
-# support daemon
-# -chunksize 2^n is the chunksize to be used (Default: use a kernel
-# module default).
-# -dcache The number of data cache entries.
-# -prealloc Number of preallocated "small" memory blocks
-# -waitclose Make close calls always synchronous (slows them down, though)
-# -files_per_subdir Number of files per cache subdir (Default: 2048).
-#
-# Using the memory cache is not recommended. It's less stable than the disk
-# cache and doesn't improve performance as much as it might sound.
-#
-# The default behavior is to let afsd automatically choose an apporpriate set
-# of flags. This should produce reasonable behavior for most working sets
-# provided that one is using a modern AFS client (1.4.2 or later).
-#
-# You can override that default behavior by setting OPTIONS to a specific set
-# of flags.
-OPTIONS=AUTOMATIC
-
-# The default value for the client sysname (as returned by fs sysname) is
-# determined during the kernel module build and is taken from the architecture
-# and the major Linux kernel version. Accesses to directories named "@sys" in
-# AFS will be internally redirected to a directory by this name by the AFS
-# client, allowing a single path to resolve to different directories depending
-# on the client architecture.
-#
-# If you would like to override the client sysname, uncomment this line and
-# set the variable to a space-separated list of sysnames. The AFS client will
-# attempt to resolve @sys to each directory name in the order given.
-#AFS_SYSNAME=""
-
-# If you want to prefer particular servers for replicated volumes, you can
-# configure that by defining an afs_server_prefs function here and then
-# uncommenting the setting of AFS_POST_INIT below. For more information, see
-# fs help setserverprefs and fs getserverprefs (for the current values).
-
-#afs_server_prefs() {
-# fs setserverprefs
-#}
-
-# If you want to always run some command after starting OpenAFS, you can put
-# it here. Note that you cannot run multiple commands, even combined with &&
-# or ; or similar shell meta-characters. If you want to run multiple
-# commands, define a shell function instead and put the name of the shell
-# function here.
-AFS_POST_INIT=
-
-# Uncomment this line if you defined an afs_server_prefs function. (If you
-# have other commands that you also want to run, you'll have to put them in
-# that function, as you can only run one function.)
-#AFS_POST_INIT=afs_server_prefs
-
-# If you want to always run some command before shutting down OpenAFS, you can
-# put it here. The same caveat applies about multiple commands.
-AFS_PRE_SHUTDOWN=
-
-# If you are having problems with AFS shutting down cleanly or the system not
-# rebooting because the partition the AFS cache was on could not be unmounted,
-# try installing lsof and uncommenting this. This will cause all processes
-# with open AFS files to be killed before unmounting AFS if the runlevel being
-# switched to is 0 or 6.
-#
-# Warning: This means service openafs-client stop will kill all processes
-# with files open in AFS rather than returning an error saying the file system
-# is busy. This is probably what you want when the whole system is shutting
-# down, but often *not* what you want when just stopping and restarting the
-# client. The code doesn't run unless the runlevel is 0 or 6, but still, be
-# sure that this is what you want before enabling it.
-#AFS_PRE_SHUTDOWN=kill_all_afs
diff --git a/debian/changelog b/debian/changelog
deleted file mode 100644
index 4428993..0000000
--- a/debian/changelog
+++ /dev/null
@@ -1,3557 +0,0 @@
-openafs (1.8.8.1-2~ppa0~jammy) jammy; urgency=medium
-
- * Build for OpenDev PPA.
-
- -- Ian Wienand Wed, 04 May 2022 20:29:00 +0000
-
-openafs (1.8.8.1-2) unstable; urgency=medium
-
- * Skip unit test that fails on the buildds by virtue of using a
- hardcoded port number.
-
- -- Benjamin Kaduk Sat, 12 Mar 2022 21:00:27 -0800
-
-openafs (1.8.8.1-1) unstable; urgency=high
-
- * New upstream release:
- - Support linux kernel 5.16 (Closes: #1005404)
- - Treat the Rx SACK table as bits, not bytes, in preparation for
- subsequent changes to expand the maximum window size.
-
- -- Benjamin Kaduk Sun, 20 Feb 2022 20:15:56 -0800
-
-openafs (1.8.8-3) unstable; urgency=medium
-
- * Import upstream FTBFS fix for Linux 5.15
-
- -- Paolo Pisati Tue, 23 Nov 2021 15:39:23 +0000
-
-openafs (1.8.8-2) unstable; urgency=medium
-
- * Import upstream patch to improve support for linux 5.14 (avoiding
- a runtime error when the set_page_dirty operation is requested)
-
- -- Benjamin Kaduk Tue, 12 Oct 2021 22:10:08 -0700
-
-openafs (1.8.8-1) unstable; urgency=medium
-
- * New upstream release:
- - Support linux kernel 5.14 (Closes: #995134)
- PowerPC may be affected by a new ABI restriction.
- - Fix key handling for keys with parity bits (e.g., triple-DES)
- (Closes: #987690)
- - Use proper credentials for I/O to cache to avoid unneeded blockage
- by security mechanisms like AppArmor
- - Improvements in certain Rx call edge cases
- - Attempt to recover from certain errors instead of panicking clients
- - Additional changes noted in upstream changelog
- * Update debian/copyright for new file added upstream
- * Update to policy 4.6.0 (no changes needed)
- * Specify Build-Depends-Package in symbols files
- * Update to watch file version=4
-
- -- Benjamin Kaduk Sun, 26 Sep 2021 22:34:07 -0700
-
-openafs (1.8.6-5) unstable; urgency=emergency
-
- * Pull in upstream patches to fix outgoing connections after
- unix epoch time 0x60000000 (Closes: #980115, #980116)
-
- -- Benjamin Kaduk Thu, 14 Jan 2021 11:48:18 -0800
-
-openafs (1.8.6-4) unstable; urgency=medium
-
- * Bump Standards-Version to 4.5.0 (no changes needed)
- * Pull in upstream patches for linux kernel 5.9 support
-
- -- Benjamin Kaduk Sun, 25 Oct 2020 11:28:45 -0700
-
-openafs (1.8.6-3) unstable; urgency=medium
-
- * Pull in upstream patches for linux kernel 5.8 support (Closes: #970258)
-
- -- Benjamin Kaduk Sat, 19 Sep 2020 15:39:18 -0700
-
-openafs (1.8.6-2) unstable; urgency=medium
-
- * Pull in upstream patches for -fcommon support (Closes: #966881)
-
- -- Benjamin Kaduk Sun, 30 Aug 2020 19:39:18 -0700
-
-openafs (1.8.6-1) unstable; urgency=medium
-
- * New upstream release:
- - Support linux kernel 5.7 (thanks Paolo Pisati for an early backport)
- (Closes: #964027)
- - other changes noted in the 1.8.6~pre1-1 entry
-
- -- Benjamin Kaduk Tue, 30 Jun 2020 21:32:42 -0700
-
-openafs (1.8.6~pre1-3) unstable; urgency=medium
-
- * Temporarily disable a test that fails on armhf buildd but not porterbox
-
- -- Benjamin Kaduk Tue, 24 Mar 2020 17:30:45 -0700
-
-openafs (1.8.6~pre1-2) unstable; urgency=medium
-
- * Pull in upstream patch to not resolve IP addresses to names in the
- vos tests (Closes: #953729)
- * Only use dh_missing --fail-missing for binary packages, to match
- the behavior used by the debhelper-compat-9 packaging prior to
- 1.8.6~pre1-1 (Closes: #953709)
-
- -- Benjamin Kaduk Sat, 21 Mar 2020 18:58:47 -0700
-
-openafs (1.8.6~pre1-1) unstable; urgency=medium
-
- * New upstream prerelease (Closes: #953709):
- - Code cleanup prompted by gcc9 errors
- - Update "vos zap -force" to clean up empty directories
- - Relax implementation-specific XDR array length limits for prdb types,
- which were being hit in practice at some large sites
- - Tighten up fileservers' -readonly mode, and add an option to allow
- members of system:administrators to be able to write to readonly servers
- - Support linux kernels up to version 5.6rc2
- - Additional sundry changes; see upstream NEWS
- * Pull in additional patches from upstream:
- - Support linux kernel 5.6 release
- - Recognize ppc64le in configure's OS-detection logic
- - Skip vos tests if vlserver port is already bound (Closes: #953729)
- * Fix typo preventing ppc64el support from working (Closes: #946520)
- * Update Italian debconf translation; thanks Beatrice Torracca
- (Closes: #952799)
- * Update to debhelper-compat 12
-
- -- Benjamin Kaduk Sat, 21 Mar 2020 14:10:06 -0700
-
-openafs (1.8.5-1) unstable; urgency=high
-
- * New upstream security release (Closes: #943587):
- - Fix OPENAFS-SA-2019-001, OPENAFS-SA-2019-002: information leakage from
- uninitialized RPC output variables
- - Fix OPENAFS-SA-2019-003: database server DoS (NULL dereference)
- * Configure --without-ctf-tools to allow kernel module builds when ctfutils
- are installed. (Closes: #935771)
- * Enable support for ppc64le. (Closes: #941658)
-
- -- Benjamin Kaduk Sun, 27 Oct 2019 15:13:27 -0700
-
-openafs (1.8.4~pre1-1) unstable; urgency=medium
-
- [ Ondřej Nový ]
- * d/control: Removing redundant Priority field in binary package
- * d/changelog: Remove trailing whitespaces
-
- [ Anders Kaseorg ]
- * New upstream release 1.8.3:
- - Miscellaneous improvements to error handling and server efficiency
- (see NEWS).
- - Support Linux 5.0.
- * Update CellServDB from grand.central.org (2018-05-14).
- * Remove custom compression settings for Debian tarball and binary
- packages.
-
- [ Benjamin Kaduk ]
- * New upstream prerelease 1.8.4pre1:
- - Further work to avoid spurious ENOENTs from filesystem access.
- - Fix the behavior of ptserver -restricted to match the documentation.
- - Autoconf updates and modernization. (Closes: #934758)
- - Additional miscellaneous improvements (see NEWS).
- * openafs-fileserver now depends on openafs-krb5 for akeyconvert in the
- maintainer script. (Closes: #934236)
- * Debconf translation update:
- - Danish, thanks Joe Hansen. (Closes: #923111)
- * Backport upstream patch to require opt-in for weak crypto in aklog
- and klog.krb5. (Closes: #931819)
-
- -- Benjamin Kaduk Sat, 17 Aug 2019 06:54:44 -0700
-
-openafs (1.8.2-1) unstable; urgency=high
-
- * New upstream release 1.8.1.1:
- - Support Linux 4.18.
- * New upstream security release 1.8.2 (Closes: #908616):
- - Fix OPENAFS-SA-2018-001: unauthenticated volume operations via butc
- (CVE-2018-16947).
- - Fix OPENAFS-SA-2018-002: information leakage in RPC output variables
- (CVE-2018-16948).
- - Fix OPENAFS-SA-2018-003: denial of service due to excess resource
- consumption (CVE-2018-16949).
-
- -- Anders Kaseorg Tue, 11 Sep 2018 22:53:43 -0700
-
-openafs (1.8.1-1) unstable; urgency=medium
-
- * New upstream release. In addition to changes in pre2:
- - Fix issue where `vldb_check -fix` would corrupt databases with multiple
- MH blocks
- - Improved error handling when the cache partition is inaccessible
- - Improved error handling when page allocation fails
- * Supply sysname generation for arm64 to get further in the build.
-
- -- Benjamin Kaduk Sun, 29 Jul 2018 10:35:12 -0500
-
-openafs (1.8.1~pre2-1) unstable; urgency=medium
-
- * New upstream prerelease:
- - Add support for arm64
- - Improve usability of the shared libraries and public API
- - Fix volume callbacks so clients see updates after volume releases
- - Fix Rx connection refcount error that could lead to server crashes
- - Fix panic when cahe bypass is enabled
- - Use valid serial number for Rx aborts if possible (and 0 otherwise)
- - Return valid InlineBulkStatus responses in error cases
- - The fileserver rejects invalid partition names when attaching partitions
- - Improve cache manager behavior when unable to open cache files (e.g.,
- if the cache partition is remounted readonly)
- - Improve some error messages
- * Update Dutch debconf translation; thanks Frans Spiesschaert.
- (Closes: #895459)
-
- -- Benjamin Kaduk Sun, 01 Jul 2018 18:42:26 -0500
-
-openafs (1.8.0-1) unstable; urgency=low
-
- * New upstream release. Changes since pre5:
- - Fix issues with -Wpointer-sign
- - Edits to the afsd manpage regarding the -volume-ttl feature
- * Update debian/README.source to reflect the move from Alioth to Salsa
- * Update German debconf translation; thanks Pfannenstein Erik.
- (Closes: #887663)
-
- -- Benjamin Kaduk Thu, 05 Apr 2018 21:16:37 -0500
-
-openafs (1.8.0~pre5-1) unstable; urgency=low
-
- [ Russ Allbery ]
- * Remove myself from Uploaders.
-
- [ Benjamin Kaduk ]
- * New upstream release candidate:
- - Update CellServDB from grand.central.org (2017-03-14)
- - Avoid rare deadlock condition when recreating a deleted file/directory
- on old Linux kernels
- - Clean up ubik DISK_ RPC behavior with respect to sending updates to
- sites that would reject the update
- - Remove includes of , for compatibility with glibc 2.26
- - Do not include RXGEN_OPCODE when throttling clients that generate too
- many abort replies
- * Update Vcs- entries in control to reflect the move from alioth to salsa
- * Correct 1.8.0~pre4-1 changelog entry to reflect that it closed one more
- Mayhem-reported bug. (Closes: #716446)
-
- -- Benjamin Kaduk Mon, 19 Feb 2018 10:51:08 -0600
-
-openafs (1.8.0~pre4-1) unstable; urgency=low
-
- [ Benjamin Kaduk ]
- * New upstream major release (prerelease):
- - Servers no longer use rxkad.keytab for long-term keys, which are
- now stored in KeyFileExt. Administrators must use akeyconvert
- or similar tooling to populate the KeyFileExt after updating the
- krb5 keys in rxkad.keytab. In most cases, `akeyconvert` with no
- arguments will suffice; that command is run automatically in the
- package's postinstall script.
- - kaserver, klog.afs, pam-openafs-kaserver, and other kauth-related
- tools are removed.
- - Server log handling has changed. Logs are not truncated at
- startup by default, and are re-opened on SIGUSR1, to be compatible
- with external log rotation tools.
- - Client time management support (afsd -settime and afsd -nosettime)
- has been removed.
- - Linux versions prior to 2.6 are no longer supported by the client.
- - Desupport 32-bit s390/s390x
- - Most binaries now use pthreads instead of LWP green threads.
- - The fileserver ihandle fsync thread is removed.
- - Support Linux up to 4.14
- - Provide vldb cache timeout option for clients
- - Eliminate potential 100ms delay after rx receive window changes
- - Modify volume update date after salvager makes changes
- - Improve ubik safety for relabels and writes shortly after an election
- - Preserve volume stats during reclone and restore operations
- - Improve command-line parsing for various utilities.
- (Closes: #715623, #715787, #716144, #716234, #716444, #716446)
- - Fix for OPENAFS-SA-2017-001. (Closes: #883602)
- - Many other generic improvements throughout the tree; consult the
- upstream changelog for details.
- * Add versioned build-depends for renamed symbols in heimdal-multidev.
- (Closes: #848664)
- * Bump Standards-Version to 4.1.3 (no changes needed).
- * Update Dutch debconf translation; thanks Frans Spiesschaert.
- (Closes: #874280)
-
- [ Anders Kaseorg ]
- * Use dh_auto_configure.
- * Correct some paths in the openafs-doc packaging
-
- -- Benjamin Kaduk Wed, 03 Jan 2018 22:14:49 -0600
-
-openafs (1.6.22-3) unstable; urgency=medium
-
- * Pull in upstream patch to avoid OOPS on linux 4.14 kernels.
- (Closes: #884420)
- * Pull in pending upstream patch to include stdint.h where needed.
- This should allow Ubuntu to return to syncing openafs from Debian.
-
- -- Benjamin Kaduk Thu, 14 Dec 2017 21:08:16 -0600
-
-openafs (1.6.22-2) unstable; urgency=medium
-
- * Update Russian debconf translation; thanks Lev Lamberov.
- (Closes: #883916)
- * Pull in upstream patches to build with kernel 4.14. (Closes: #884276)
-
- -- Benjamin Kaduk Wed, 13 Dec 2017 19:15:58 -0600
-
-openafs (1.6.22-1) unstable; urgency=high
-
- * New upstream security release:
- - Fix for OPENAFS-SA-2017-001. (Closes: #883602)
- - Improved support for recent Linux versions
-
- -- Benjamin Kaduk Tue, 05 Dec 2017 10:28:15 -0600
-
-openafs (1.6.21-3) unstable; urgency=medium
-
- * Build documentation with FORCE_SOURCE_DATE=1, without which pdfTeX
- refuses to behave fully reproducibly.
- * debian/patches:
- - Linux-Include-linux-uaccess.h-rather-than-asm-uacces.patch: Fix
- build failure on s390x with Linux kernel 4.12. (LP: #1711835)
-
- -- Anders Kaseorg Wed, 30 Aug 2017 23:42:03 -0400
-
-openafs (1.6.21-2) unstable; urgency=medium
-
- * debian/patches:
- - AFS_component_version_number.c-Respect-SOURCE_DATE_E.patch: Use UTC
- for better reproducibility.
- - 0003-Add-dummy-exit-command-for-afsd-to-do-nothing.patch: Fix
- rebasing mistake so -exit works correctly.
- - Linux-4.13-use-designated-initializers-where-require.patch: Support
- Linux kernel 4.13. (LP: #1706433)
- * Update Portuguese debconf translation; thanks Rui Branco.
- (Closes: #871559)
- * Update French debconf translation; thanks Alban Vidal.
- (Closes: #872026)
- * Update CellServDB from grand.central.org (2017-03-14).
-
- -- Anders Kaseorg Tue, 22 Aug 2017 19:47:50 -0400
-
-openafs (1.6.21-1) unstable; urgency=medium
-
- * New upstream release (1.6.21):
- - Include support for Linx versions through 4.12. (Closes: #859155)
- - Improve support for Linux kernels with backported patches.
- (Closes: #855366)
- - Improve bosserver startup behavior with unexpected arguments or
- configuration symlinks.
- - Re-enable vcache cleanup improvement from 1.6.18, with bugs fixed.
- - Provide the afsd -inumcalc option; this behavior was previously
- only configurable via sysctl.
- - The salvager updates volume "last update" times when modifying volumes.
- - Demand-attach fileserver improvements for reducing log spew and preventing
- thread exhaustion during CPS recalculation.
- - Avoid a potential 100ms transmit delay in RX when the peer's receive
- window advances.
- * Switch openafs-fileserver.service to Type=simple and pass -nofork to
- bosserver. (Closes: #865962)
- * Update for policy version 4.0.0, honor nodoc in DEB_BUILD_OPTIONS
- * Use service(8) instead of /etc/init.d/* directly in documentation and
- helper scripts
-
- -- Benjamin Kaduk Mon, 10 Jul 2017 15:27:56 -0500
-
-openafs (1.6.20-2) unstable; urgency=medium
-
- * Build-Depend debhelper (>= 9.20160114) for dh_strip
- --dbgsym-migration.
- * debian/patches:
- - LINUX-split-dentry-eviction-from-osi_TryEvictVCache.patch,
- Reformat-src-afs-LINUX-osi_vcache.c.patch,
- LINUX-do-not-use-d_invalidate-to-evict-dentries.patch,
- afs-shake-harder-in-shake-loose-vcaches.patch: Avoid system hangs on
- busy machines due to vcache deallocation failures.
- - Linux-4.9-deal-with-demise-of-GROUP_AT.patch,
- Linux-4.9-inode_operation-rename-now-takes-flags.patch,
- Linux-4.9-inode_change_ok-becomes-setattr_prepare.patch: Support
- Linux kernel 4.9. (Closes: #847011)
- - AFS_component_version_number.c-Respect-SOURCE_DATE_E.patch:
- Respect SOURCE_DATE_EPOCH in cml_version_number to improve build
- reproducibility.
- * openafs-modules-source: Generate /usr/src/openafs.tar.bz2
- reproducibly.
-
- -- Anders Kaseorg Sun, 04 Dec 2016 17:49:15 -0500
-
-openafs (1.6.20-1) unstable; urgency=high
-
- * New upstream release (1.6.19):
- - Fix issue that could result in using out-of-date database versions
- in rare cases
- - Don't commit more data to a file than was actually copied during writes,
- which could happen on architectures with a page size greater than 4K
- * New upstream security release (1.6.20):
- - Fix information leakage (file/directory names) from reused directory
- buffers
-
- -- Benjamin Kaduk Wed, 30 Nov 2016 16:52:29 -0500
-
-openafs (1.6.18.3-3) unstable; urgency=medium
-
- * Drop openafs-dbg in favor of automatically generated dbgsym packages.
- * Mark openafs-doc Multi-Arch: foreign.
- * debian/patches/tests-util-ktime-t.c-Specify-EST-offset-in-TZ.patch:
- Fix FTBFS with tzdata uninstalled. (Closes: #839481)
- * Depend lsb-base (>= 3.0-6) in openafs-client and openafs-fileserver
- for /lib/lsb/init-functions.
-
- -- Anders Kaseorg Wed, 12 Oct 2016 18:04:12 -0400
-
-openafs (1.6.18.3-2) unstable; urgency=medium
-
- * Drop hardening-wrapper in favor of passing flags via CC.
- (Closes: #836642)
- * Clean doxyen-generated documentation with dh_doxygen.
-
- -- Anders Kaseorg Sun, 11 Sep 2016 17:15:39 -0400
-
-openafs (1.6.18.3-1) unstable; urgency=medium
-
- * New upstream release 1.6.18.3:
- - Support Linux kernel 4.7.
-
- -- Anders Kaseorg Thu, 04 Aug 2016 15:44:22 -0400
-
-openafs (1.6.18.2-1) unstable; urgency=medium
-
- * New upstream release 1.6.18.2:
- - Support Linux kernel 4.6.
- - Revert the vcache cleanup improvement of 1.6.18, which exposed
- another previously latent issue that wrongly invalidated the current
- working directroy on some kernels.
- * Update CellServDB to the 2016-01-01 release.
-
- -- Anders Kaseorg Mon, 25 Jul 2016 19:12:12 -0400
-
-openafs (1.6.18.1-1) unstable; urgency=medium
-
- * New upstream release 1.6.18.1:
- - Support Linux kernel 4.5.
- - Check return value from bdi_init.
- * Import upstream Gerrit patch to allow building with Linux kernel 4.6.
- (Closes: #826922)
-
- -- Anders Kaseorg Sun, 26 Jun 2016 20:16:54 -0400
-
-openafs (1.6.18-1) unstable; urgency=high
-
- * New upstream release 1.6.18:
- - Support for Linux 4.4 kernels.
- - Improve dynamic vcache cleanup behavior, reducing memory usage and
- avoiding a long hang when many vcaches are in use
- - Deprecate afsd -settime.
- - Failure to release a volume now reports an error back to the client.
- - Check for invalid IP addresses in the CellServDB.
- - Fix dafileserver crash experience with large volumes.
- - Close race between "umount /afs" and "afsd -shutdown".
- - Prefer -dryrun arguments to -noexecute.
- - Limit ChangeAddr RPCs to removal, to avoid database corruption.
- - Improve behavior relating to large (~2GB fetches from the fileserver).
- * Import patches from upstream gerrit to improve support for
- Linux 4.5 kernels. (Closes: #821782)
- * Depend on sysint.target instead of basic.target in openafs-client.service,
- to eliminate dependency cycles with other services that depend on
- remote-fs.target. (Closes: #794451)
-
- -- Benjamin Kaduk Sun, 15 May 2016 22:19:38 -0400
-
-openafs (1.6.17-2) unstable; urgency=high
-
- * debian/rules: Fix FTBFS when built with dpkg-buildpackage -A.
- (Closes: #806088)
-
- -- Anders Kaseorg Thu, 17 Mar 2016 04:48:16 -0400
-
-openafs (1.6.17-1) unstable; urgency=high
-
- * New upstream release 1.6.16.
- - Fix bosserver crashes related to fixed-sized buffers.
- - Fix potential denial of service issue in pioctl logic
- (CVE-2015-8312).
- - Provide a new vos remaddrs subcommand for removing server entries.
- - Allow pioctls to work with read-only /proc (e.g. Docker containers).
- * New upstream security release 1.6.17.
- - Prevent users in foreign Kerberos realms from creating groups as if
- they were administrators (CVE-2016-2860).
- - Fix an information leak of uninitialized memory over the network.
- - Fix a crash when the AFS root volume is not found.
- * debian/patches/Linux-4.4-key_payload-has-no-member-value.patch,
- debian/patches/Linux-4.4-Use-locks_lock_file_wait.patch,
- debian/patches/Linux-4.4-Do-not-use-splice.patch:
- Add upstream patches for current Linux kernel support. (Closes: #815521)
-
- -- Anders Kaseorg Thu, 17 Mar 2016 00:55:42 -0400
-
-openafs (1.6.15-1) unstable; urgency=high
-
- * New upstream security release.
- - Fix data leakage in rx ACK packets, OPENAFS-SA-2015-007,
- CVE-2015-7762, CVE-2015-7763.
-
- -- Benjamin Kaduk Wed, 28 Oct 2015 15:56:38 -0400
-
-openafs (1.6.14-1) unstable; urgency=medium
-
- * New upstream release.
- - Restore support for using regexes for volume names to backup,
- accidentally disabled as part of the fix for OPENAFS-SA-2015-006
- * Update Swedish translation, thanks Martin Bagge and Anders Jonsson.
- (Closes: #781678)
- * Note that the protocol document rfc5864.txt is dual licensed.
- (Closes: #754735)
- * Supply copyright notice for systemd helper scripts. (Closes: #779170)
- * Import upstream patches to support the 4.2 Linux kernel.
-
- -- Benjamin Kaduk Mon, 17 Aug 2015 15:01:01 -0400
-
-openafs (1.6.13-1) unstable; urgency=high
-
- * New upstream security release.
- - OPENAFS-SA-2015-001 CVE-2015-3282: vos leaks stack data onto the wire
- in the clear when creating vldb entries
- - OPENAFS-SA-2015-002 CVE-2015-3283: bos commands can be spoofed,
- including some which alter server state
- - OPENAFS-SA-2015-003 CVE-2015-3284: pioctls leak kernel memory contents
- - OPENAFS-SA-2015-004 CVE-2015-3285: kernel pioctl support for OSD
- command passing can trigger a panic
- - OPENAFS-SA02015-005 CVE-2015-3286 is Solaris-specific and did not
- affect Debian
- - OPENAFS-SA-2015-006 CV-2015-3287: buffer overflow in vlserver
- * Also includes changes from the upstream 1.6.12 release:
- - Avoid database corruption if a database server is shut down and
- brought up again quickly with an altered database
- - Fix a potential buffer overflow in aklog
- - Support for Linux kernels up to 4.1
- - Avoid spurious EIO errors when writing large chunks of data to
- mmapped files
-
- -- Benjamin Kaduk Thu, 30 Jul 2015 17:42:43 -0400
-
-openafs (1.6.11.1-1) unstable; urgency=medium
-
- * New upstream release.
- - Support for Linux kernels up to 4.0.
-
- -- Benjamin Kaduk Fri, 15 May 2015 11:02:14 -0400
-
-openafs (1.6.11~pre2-1) experimental; urgency=low
-
- * New upstream pre-release.
- - Avoid using a stale data version in certain cases when writing
- files larger than the AFS cache, which manifested as file corruption.
- - Fix a refcount leak that could lead to panics.
- - Support newer linux versions, up through 3.19.
- - Fix some leaks and crashes in error cases.
-
- -- Benjamin Kaduk Fri, 20 Feb 2015 15:50:49 -0500
-
-openafs (1.6.11~pre1-1) experimental; urgency=low
-
- * New upstream pre-release.
- - Linux kernels up to 3.17 are now supported.
- - Fix more incorrect behavior in our revalidation of dcache entries. Bugs
- in this area can cause stale path lookups in certain situations, as well
- as cause getcwd() to fail spuriously.
- - Allow aklog to succeed in creating native K5 tokens even when K5-to-K4
- principal conversion fails.
-
- -- Andrew Deason Sun, 07 Dec 2014 23:43:21 -0600
-
-openafs (1.6.10-4) unstable; urgency=medium
-
- * Update Spanish translation, thanks Javier Fernandez-Sanguino Pena.
- (Closes: #773565)
- * Import many patches from upstream:
- - Support newer linux versions, up through 3.19. (Closes: #771298)
- - Avoid some spurious getcwd() failures.
- - Improve configure test for key_type.match (which caused buggy
- behavior in certain versions of RHEL).
- - Fix a refcount leak that would manifest as an unrelated OOPS.
- - Avoid using a stale data version in certain cases when writing
- files larger than the AFS cache, which manifested as file corruption.
- This leaves us roughly equivalent to the forthcoming 1.6.11pre2
- release candidate.
- * Update CellServDB to the 2015-01-19 release.
-
- -- Benjamin Kaduk Wed, 04 Feb 2015 13:35:48 -0500
-
-openafs (1.6.10-3) unstable; urgency=medium
-
- * Make openafs-client Before=umount.target for improved shutdown
- behavior. (Affects: #760063)
- * Mark openafs-client.service as RemainAfterExit=true. (Closes: #770815)
-
- -- Benjamin Kaduk Wed, 26 Nov 2014 13:00:27 -0500
-
-openafs (1.6.10-2) unstable; urgency=medium
-
- * Some shell quoting and similar cleanups in openafs-client-precheck
- from Anders Kaseorg.
- * Make the openafs-client unit silently succeed when it is already
- running, to match the behavior of the sysV script. (Closes: #767056)
-
- -- Benjamin Kaduk Tue, 28 Oct 2014 18:52:47 -0400
-
-openafs (1.6.10-1) unstable; urgency=medium
-
- * New upstream release.
- - fix segfault with aklog -path.
- * The 1.6.10~pre1-1 changelog entry contains a full summary of changes
- in the upstream release.
- * Add a systemd unit file for openafs-client. (Closes: #760063)
- - The variables AFS_PRE_SHUTDOWN and AFS_POST_INIT from
- /etc/openafs.afs.conf are no longer honored. They should be
- converted to the systemd format and placed in
- /etc/systemd/system/openafs-client.service.d/ ; automatic conversion
- is not possible. In particular, the kill_all_afs functionality is
- not available.
- - The LIBAFS, MODULEDIR, and DKMSDIR settings from
- /etc/openafs/afs.conf are not used by the unit file.
- - The extra shutdown handling for when the NFS translator is used
- was not converted to the systemd format; the necessary feature
- was removed from the Linux kernel in 2008.
- - Support for cold shutdowns is removed. They generally resulted
- only in strange failures later on.
- * Add a systemd unit file for openafs-fileserver.
- * Use heap-allocated buffers of sufficient length for realpath() in
- userok.c. (Closes: #757378)
- * Update Dutch translation. (Closes: #765083)
-
- -- Benjamin Kaduk Wed, 22 Oct 2014 13:10:59 -0400
-
-openafs (1.6.10~pre1-1) experimental; urgency=low
-
- [ Benjamin Kaduk ]
- * New upstream pre-release.
- - Linux kernels up to 3.16 are now supported.
- - The amount of free space and reported for /afs is now 2 TiB, up
- from the previous reported value of around 9 GiB.
- - Fix 'pts removeuser' behavior in the ptserver for some supergroups
- over a certain membership size.
- - Fix logging behavior when rotating logs via the "copy and truncate"
- approach.
- - Add new log messages in the volserver log and the vlserver audit log.
- - Reduce the amount of kernel stack space used in the client.
- - Improve error handling for a wide variety of cases for various tools.
- - Improve periodic hanging in the client when a large number of PAGs
- and files are in use.
- - Fix 'afs-up' to handle large ACLs correctly.
- - Fix a crash in 'aklog' when retrying ticket acquisition.
- - Fix a crash in xstat_fs_test and scout when their local port is
- already in use.
- - Fix an error in the client lock handling that prevented checking
- for the existence of write locks on readonly volumes.
- - Fix an error in the client that could cause cache inconsistencies
- if another client removed a directory entry, and recreated a
- different entry with the same name.
- - Avoid ignoring build failures during the client kernel module build
- process, hopefully leading to better error messages in some cases
- when building the kernel module.
- - Fix various possible problems when building with parallel make.
-
- [ Andrew Deason ]
- * Include the new volscan tool in openafs-fileserver.
-
- [ Russ Allbery ]
- * Retroactively add the CVE for OPENAFS-SA-2014-002 to the changelog for
- 1.6.9-1. It was assigned after the release was uploaded.
- * Add Benjamin Kaduk as Maintainer and move myself to Uploaders.
-
- -- Benjamin Kaduk Tue, 19 Aug 2014 18:53:34 -0400
-
-openafs (1.6.9-2) unstable; urgency=medium
-
- [ Russ Allbery ]
- * Retroactively add the CVE for OPENAFS-SA-2014-002 to the changelog for
- 1.6.9-1. It was assigned after the release was uploaded.
- * Add Benjamin Kaduk as Maintainer and move myself to Uploaders.
-
- [ Benjamin Kaduk ]
- * Apply upstream deltas to fix the build with the linux kernel 3.16
- (Closes: #762248):
- - [ea0c9d8c] Linux 3.16: Switch to iter_file_splice_write
- - [02a07404] Linux 3.16: Convert to new write_iter/read_iter ops
- * Update README.source for the gbp pq patch-management procedure.
-
- -- Benjamin Kaduk Mon, 22 Sep 2014 13:17:12 -0400
-
-openafs (1.6.9-1) unstable; urgency=high
-
- * New upstream release.
- - OPENAFS-SA-2014-002: Fix use of uninitialized memory in the host
- object in the fileserver. (CVE-2014-4044)
-
- -- Russ Allbery Thu, 12 Jun 2014 12:39:25 -0700
-
-openafs (1.6.8-1) unstable; urgency=medium
-
- * New upstream release.
- - Change the default fileserver sync behavior from delayed to
- onclose so that explicit syncing only happens when a volume is
- detached.
- - Add -offline-timeout and -offline-shutdown-timeout options to the
- fileserver, allowing interrupting of clients accessing volumes that
- the fileserver is trying to take off-line.
- - Fix RX bug that could hide errors during packet reception.
- - Fix vos size -dump display for large volumes.
- - Give up callbacks when the client is shut down. This can cause
- crashes in old fileservers (prior to 1.4.6).
- - Restore vos e alias for vos examine.
- - Throttle byte-range lock warnings per file, and include the FID of
- the file that the client is trying to lock.
- - Avoid a possible panic during shutdown while tracing.
- - Fix a bug that could cause getcwd to fail to find parent
- directories.
- - Avoid a delay when accessing uncached data in AFS in a confined
- context under SELinux.
- - Documentation, diagnostics, and error message improvements.
- * Add Lintian override for the copy of RFC 5864, which has been
- dual-licensed by the author.
-
- -- Russ Allbery Sat, 24 May 2014 17:55:20 -0700
-
-openafs (1.6.7-1) unstable; urgency=high
-
- * New upstream security release.
- - OPENAFS-SA-2014-001: Fix potential buffer overflow in the
- fileserver. (CVE-2014-0159)
- - Fix a potential DoS attack against Rx servers by avoiding suspending
- the listener thread when delaying connection abort messages.
-
- -- Russ Allbery Wed, 09 Apr 2014 10:33:38 -0700
-
-openafs (1.6.6-1) unstable; urgency=low
-
- * New upstream release.
- - Remove server-side NAT pings since there's no evidence they help.
- * Fix linking of /usr/share/doc directories for libpam-openafs-kaserver,
- openafs-fuse, and openafs-kpasswd. This was broken in previous
- releases by a miswritten debian/rules override. Thanks to Andreas
- Beckmann for finding the problem and solution. (Closes: #736305)
- * Accept AFS_DYNROOT=true as an alias for Yes in afs.conf.client,
- matching behavior of releases prior to 1.6.2.1-1. (Closes: #729353)
-
- -- Russ Allbery Thu, 23 Jan 2014 20:43:05 -0800
-
-openafs (1.6.6~pre2-1) unstable; urgency=low
-
- * New upstream pre-release.
- - Linux kernels up to 3.12 are now supported, including kernels with
- user namespace support enabled (which affects Debian's 3.12-1 kernel
- and newer).
- - Fixed core dumps into AFS with current kernels.
- - When starting the client fails, backing device information created
- in sysfs is now properly cleared.
- - The AFS mountpoint specified in the cacheinfo file must now be an
- absolute path.
- - Stop tracking file locks on read-only volumes. Write locks always
- fail and read locks always succeed.
- - New fs flushall command to discard all cached data.
- - Fixed a bug that could cause the client to incorrectly believe its
- cache was up to date.
- - New -rxmaxfrags switch to afsd to limit the number of UDP fragments
- sent or received per RX packet.
- - Fixed afsd threads entering an infinite loop.
- - The file server now ignores any vice partitions with a NeverAttach
- flag file present in the root directory.
- - Enabled server-side NAT pings to refresh NAT timeouts.
- - Forcing file server CPS recalculation (for IP ACLs) is now
- restricted to administrators.
- - vos examine of a volume in a transaction is now shown as busy again
- rather than off-line.
- - Multiple bug fixes to the salvager.
- - Fixed a bug that could cause state information to be discarded when
- restarting a large or busy file server.
- - Fixed a vlserver bug during file server address registration.
- - volserver supports a new -preserve-vol-stats option, which preserves
- access statistics across volume restore and reclone operations.
- - Releasing a volume after adding a new RO site no longer touches the
- existing RO sites if the volume has not changed since the last
- release.
- - Fixed undefined ptserver behavior with too many allocated PTS ids.
- - Avoid redefining assert in public header files.
- - Documentation, diagnostics, and error message improvements.
-
- -- Russ Allbery Sat, 28 Dec 2013 11:38:19 -0800
-
-openafs (1.6.5.2-1) unstable; urgency=medium
-
- * New upstream release.
- - Fix support for tmpfs as the cache filesystem.
- - Support kernels with backported changes affecting getname/putname.
- * Exit successfully in the openafs-client init script if /sbin/afsd
- doesn't exist, indicating that openafs-client is not installed.
- * Load /lib/lsdb/init-functions in the openafs-client init script as the
- first step towards upstart or systemd support.
- * Update standards version to 3.9.5 (no changes required).
-
- -- Russ Allbery Sun, 22 Dec 2013 13:40:10 -0800
-
-openafs (1.6.5.1-1) unstable; urgency=low
-
- * New upstream release.
- - Support for Linux 3.11 and 3.12 (up to 3.12-rc3).
- - Fixed core dumps into AFS with some Linux kernels.
- * Cherry-pick additional upstream fixes.
- - [7242e25a] Fix library ordering when building aklog.
- - [514fc63d] Fix budb crash when the -servers command-line option
- is given. (Closes: #718253)
- * Ignore errors when reading ThisCell in the openafs-client config
- script. If the file doesn't end in a newline, read will still succeed
- and set the variable, but will exit with a non-zero status. This
- would abort configuration of the package without a useful error
- message.
- * Drop Recommends of libjs-jquery in openafs-doc. We're no longer
- replacing the embedded jQuery, pending a better fix in the Doxygen
- packaging.
- * Optimize the get-orig-source target. Thanks, Anders Kaseorg.
- * Translation updates:
- - German, thanks Erik Pfannenstein. (Closes: #719154)
-
- -- Russ Allbery Sun, 20 Oct 2013 09:26:37 -0700
-
-openafs (1.6.5-1) unstable; urgency=high
-
- * New upstream release.
- - OPENAFS-SA-2013-003: New support for non-DES enctypes in the
- long-lived AFS key. This requires deploying rxkad.keytab files on
- each server containing all of the encryption types for the cell AFS
- key. Once this is deployed on servers, DES will only be used for
- the session key. Once deployed on all clients, a stronger security
- mechanism will be used that allows the DES keys to be removed from
- the AFS principal in the Kerberos KDC (but still uses DES for some
- session encryption purposes). (CVE-2013-4134)
- - OPENAFS-SA-2013-004: Properly support the -encrypt option in vos,
- including with -localauth. (CVE-2013-4135)
- * Move the documentation and kernel module build dependencies to
- Build-Depends-Indep and only do those parts of the build if building
- architecture-independent packages.
- * Drop the sequence numbers from the openafs-client init script
- registration. Debian now always uses dependency-based boot ordering.
- * Translation updates:
- - Japanese, thanks victory. (Closes: #714223)
-
- -- Russ Allbery Wed, 24 Jul 2013 14:32:22 -0700
-
-openafs (1.6.4-1) unstable; urgency=low
-
- * New upstream release.
-
- -- Russ Allbery Tue, 18 Jun 2013 11:10:45 -0700
-
-openafs (1.6.3-1) unstable; urgency=low
-
- * New upstream release.
- - Support for Linux 3.9 and 3.10. (Closes: #711920)
- - Multiple fixes for use after free, use of uninitialized memory,
- and similar C memory management bugs found via code analysis.
- - Obey jumbo/nojumbo settings for Ubik (database) servers.
- - General improvements in diagnostic and log messages.
- - Avoid incorrectly sending small amounts of data over the wire
- unencrypted in some situations and report the correct error message
- in this case.
- - Avoid generating duplicate IDs for readonly and backup volumes.
- - Return quota and free space information without an access check.
- - Improve client bookkeeping in the file server, fixing several
- potential corruption and segfault issues.
- - Avoid known cases of silent data corruption in background syncs in
- the file server.
- - Run-time configuration support for fileserver synchronization.
- - Fix transient network error interference with establishing a ubik
- quorum.
- - Do not discard the persistent client disk cache on restart.
- - Fix bugs that made it impossible to unmount a disk cache file system
- after it had been used by the client.
- * Give openafs-dbserver its own documentation directory rather than
- linking it to openafs-client, allowing relaxation of the versioned
- dependency on openafs-client to Recommends. (However, openafs-client
- will still have to be installed for the openafs-fileserver init
- script, which uses the bos binary, so will still be pulled in by
- dependencies.)
- * Cleanup of the openafs-client postinst script.
- - Perform all work unconditionally to handle various rare error
- recovery cases properly.
- - Only force creation of CellServDB on initial installation or if
- AFSDB/SRV records are not being used.
- * Remove openafs-fileserver postinst support for upgrades from ancient
- versions (1.4.4.dfsg1-4 and 1.4.11+dfsg-3).
- * General coding style cleanup of maintainer scripts.
-
- -- Russ Allbery Mon, 17 Jun 2013 14:53:41 -0700
-
-openafs (1.6.2.1-2) unstable; urgency=low
-
- * Upload to unstable.
- * Translation updates:
- - Brazilian Portuguese, thanks Albino B Neto. (Closes: #706627)
-
- -- Russ Allbery Thu, 09 May 2013 09:00:57 -0700
-
-openafs (1.6.2.1-1) experimental; urgency=low
-
- * New upstream release.
- - Support for Linux 3.8.
- * Support configuring -dynroot-sparse via debconf. The AFS_DYNROOT
- option in /etc/openafs/afs.conf.client is now tri-valued instead of a
- boolean, and the boolean values will be mapped to the corresponding
- options on upgrade. Based on work by Jakob Haufe. (Closes: #644564)
- * Translation updates:
- - Czech, thanks Martin Šín. (Closes: #705013)
- - Russian, thanks Yuri Kozlov. (Closes: #705159)
- - French, thanks Christian Perrier. (Closes: #705296)
- - Portuguese, thanks Miguel Figueiredo. (Closes: #705307)
- - Danish, thanks Joe Hansen. (Closes: #705660)
- - Italian, thanks Beatrice Torracca. (Closes: #705864)
-
- -- Russ Allbery Sun, 21 Apr 2013 20:51:57 -0700
-
-openafs (1.6.2-1) experimental; urgency=low
-
- * New upstream release.
- - OPENAFS-SA-2013-001: Fix fileserver buffer overflow when parsing
- client-supplied ACL entries and protect against client parsing of
- bad ACL entries. (CVE-2013-1794)
- - OPENAFS-SA-2013-002: Fix ptserver buffer overflow via integer
- overflow in the IdToName RPC. (CVE-2013-1795)
- - Fix aklog warning about allow_weak_crypto.
- * Update CellServDB to the 2013-01-28 version.
- * Fix DKMS builds of the OpenAFS kernel module for amd64 kernels on the
- i386 architecture by parsing the kernel version for the architecture
- and kernel class and using that to tell the OpenAFS build system what
- sysname to use. Patch from Thorsten Alteholz.
- * Avoid re-running setup after build when building modules from the
- openafs-modules-source package with module-assistant. This will
- hopefully avoid an issue where, following an upgrade of
- openafs-modules-source, module-assistant cannot build new module
- packages without an intervening module-assistant clean. Patch from
- Thorsten Alteholz. (Closes: #660622)
- * Make another attempt at suppressing the wildcard action for building
- debian/rules to fix problems building module packages using
- make-kpkg. Patch from Thorsten Alteholz. (Closes: #639475)
-
- -- Russ Allbery Mon, 04 Mar 2013 13:54:30 -0800
-
-openafs (1.6.2~pre3-1) experimental; urgency=low
-
- * New upstream prerelease.
- - Avoid unnecessary panic in kernel module when freeing vcaches.
- - Add additional objects to the *_pic libraries in support of the AFS
- Perl bindings.
- * Remove unnecessary change to the upstream Debian packaging files to
- support armhf. These files aren't used during a package build, so no
- need to carry a Debian patch.
-
- -- Russ Allbery Mon, 21 Jan 2013 11:17:36 -0800
-
-openafs (1.6.2~pre2-2) experimental; urgency=low
-
- * Restore include of in userspace builds of rx/rx_packet.h
- to get a definition of MIN and MAX on, at least, powerpc. Thanks,
- Andrew Deason.
-
- -- Russ Allbery Thu, 03 Jan 2013 12:06:41 -0800
-
-openafs (1.6.2~pre2-1) experimental; urgency=low
-
- * New upstream prerelease.
- - Support Linux kernels up to 3.7. (Closes: #685973)
- - Fix fileservers to properly report >2 TiB partitions.
- - Fix stale volume info from vos examine on non-DAFS filservers.
- - Fix possible volume corruption with vos convertROtoRW.
- - Fix bosserver to preserve all command-line options over restart.
- - Fix bosserver to properly kill hung processes during shutdown.
- - Fixes for memcache, especially on Solaris.
- - Increase the size of the DNS resolver answer buffer to allow sites
- with a long response list to use SRV and AFSDB records.
- - Fix possible abuse of fs mkmount. In previous versions, users could
- crash a client by nesting volume mounts.
- - Fix client page cache corruption on Linux. When multiple clients
- read and write to a file, the reading client may see first couple
- bytes of a file as nulls.
- - Support newer glibc versions.
- * Build-Depend on hardening-wrapper and enable it to work around the
- current upstream munging of CFLAGS and LDFLAGS. (Closes: #659663)
- * Fix server installation instructions in README.servers, which used the
- early demand-attach syntax before separate demand-attach binaries were
- built. Thanks, Björn Torkelsson. (Closes: #693311)
- * Remove the symlink from the openafs-fileserver doc directory to the
- openafs-client doc directory. We used to install this symlink and
- share doc directories, but this stopped in 1.4.12+dfsg-1. However,
- dpkg doesn't remove symlinks to a directory, so systems that had
- upgraded from the older package were overwriting openafs-client doc
- files with the openafs-fileserver versions. Thanks, Andreas
- Beckmann. (Closes: #694063)
- * Switch to xz compression for the upstream tarball, Debian tarball, and
- binary packages.
- * Remove debian/import-upstream and change README.source to document
- using git-import-orig with --upstream-vcs-tag instead.
- * Move single-debian-patch to local-options and patch-header to
- local-patch-header so that they only apply to the packages I build and
- NMUs get regular version-numbered patches.
- * Update Vcs-* URLs for the new anonscm.debian.org URL layout.
- * Update standards version to 3.9.4 (no changes required).
-
- -- Russ Allbery Thu, 03 Jan 2013 10:07:39 -0800
-
-openafs (1.6.1-2) unstable; urgency=low
-
- * Translation updates:
- - Fix German translation encoding. Thanks, Christian PERRIER.
- (Closes: #678736)
- - Italian, thanks Beatrice Torracca. (Closes: #671640)
-
- -- Russ Allbery Tue, 21 Aug 2012 17:11:58 -0700
-
-openafs (1.6.1-1) unstable; urgency=low
-
- * New upstream release.
- - Do not ignore all InlineBulkStatus errors in file server.
- - Support for Linux 3.3 and 3.4.
- - Fix incorrect kernel error handling in afs_notify_change.
- - Fix locking around RXS_PreparePacket.
-
- -- Russ Allbery Wed, 28 Mar 2012 17:25:05 -0700
-
-openafs (1.6.1~pre4-1) unstable; urgency=low
-
- * New upstream prerelease.
- - Always retry busy rx calls and retriable actions.
- - Do not abort the salvager on large volume IDs.
- - Ensure one NAT ping connection per srvAddr.
- - Improvements to the file server address tracking.
- - Improve locking in the host table in the file server.
- - Avoid discrepancy between lastBusy and PEER_BUSY.
- - Allow a null host for callback breaks.
- - Fix probing for noop_fsync in the Linux kernel.
- - Fix handling of expired locks in the file server.
- - Reset blacklisted servers on a hard-mount retry.
- * Update debhelper compatibility level to V9.
- * Update standards version to 3.9.3 (no changes required).
-
- -- Russ Allbery Thu, 08 Mar 2012 18:24:53 -0800
-
-openafs (1.6.1~pre2-1) unstable; urgency=low
-
- * New upstream prerelease.
- - Disable server-side Rx keepalive during disk I/O.
- - Avoid timing out on non-kernel busy Rx channels.
- - Add separate client connection pool for replicated volumes.
- - Remove SYNC client disable behavior on some error patterns.
- - Correctly test for the end of the Rx call queue.
- - Fix cleanup of special inodes on the server.
- - Provide a public Rx function for toggling keepalive.
- - Fix connection management in the client checkserver loop.
- - Discard cached state in the client when unsure of validity.
- - Fix thread safety of free inode management with demand-attach.
- - Fix xstat handling of time values on 64-bit platforms.
- - Increase the idledead time.
- - Fix return status of fsync on a directory.
- * Fix afs-newcell's creation of the file server process to pass
- -localauth. This was broken when demand-attach support was
- added. Thanks, Florian Hatat. (Closes: #652973)
- * Fix afs-newcell's unwind of file server process creation. Thanks,
- Davor. (Closes: #655136)
- * Description typo, thanks Jonas Smedegaard. (Closes: #657933)
- * Translation updates:
- - Danish, thanks Joe Hansen. (Closes: #654933)
-
- -- Russ Allbery Wed, 08 Feb 2012 14:30:07 -0800
-
-openafs (1.6.1~pre1-1) unstable; urgency=low
-
- * New upstream prerelease.
- - Install new afsio utility.
- - Fixes performance issues in both the client and the server.
- - Rate-limit waiting for volume messages in kernel logs.
- - Avoid a possible memory allocation issue in ticket data management.
- - Disable MTU discovery.
- - Reduce the quantity of NAT pings sent by the client.
- - Various fixes for demand-attach file servers.
- - Fix volume lock violations.
- - Report the bosserver -rxbind address in a file.
- - Revert process group changes on keyring failure.
- - Various fixes for the salvager.
-
- -- Russ Allbery Tue, 20 Dec 2011 13:51:57 -0800
-
-openafs (1.6.0-3) unstable; urgency=low
-
- * Apply upstream deltas to fix file corruption issue in file server:
- - [c73b6644] viced: disable accelerated copyonwrite
- - [4e05bc3b] remove CopyOnWrite2 and unused vars
-
- -- Russ Allbery Wed, 07 Dec 2011 18:47:48 -0800
-
-openafs (1.6.0-2) unstable; urgency=low
-
- * Apply upstream deltas for Linux 3.1 and 3.2 (Closes: #649765):
- - [f129142] Linux: 3.1: update RCU path walking detection in
- permission i_op (Closes: #649996)
- - [7f55b45] Linux: d_delete now takes a const argument
- - [737a280] Linux: 3.2: Use set_nlink to update i_nlink
- - [364fad6] Linux: 3.1: adapt to fsync changes
- - [032736b] Linux: make sure backing_dev_info is zeroed
- * Add support for armhf. Patch from Konstantinos Margaritis.
- (Closes: #645395)
-
- -- Russ Allbery Mon, 28 Nov 2011 17:53:45 -0800
-
-openafs (1.6.0-1) unstable; urgency=low
-
- * New upstream stable release.
- - Rx NAT pings are not enabled until peer has answered
- - Numerous fixes to command argument parsing
- - Avoid crashing on host table exhaustion and defer clients instead
- - Rx connection reference counting is enabled
- - An Rx connection reference count leak is fixed in bulkstat
- - Handle unparsable directory objects
- - Handle Kerberos credential cache errors in aklog
- * Generate stub header files that include the actual system header when
- building libuafs instead of symlinking h to the appropriate directory.
- Fixes build failures now that Debian has switched to multiarch and
- moved some of the system headers. (Closes: #639063, LP #831287)
- * Fix another Doxygen call to generate a configuration file, and remove
- the generated configuration files after Doxygen runs.
- * Update CellServDB to the 2011-08-14 release.
-
- -- Russ Allbery Thu, 01 Sep 2011 18:43:02 -0700
-
-openafs (1.6.0~pre7-2) unstable; urgency=low
-
- * Force use of dblatex to build the manual, even if docbook2pdf is
- available, since the latter dies with errors about TeX capacity.
- (Closes: #635306)
- * Fix generation of protocol documentation from Doxygen headers.
- Doxygen cannot be called directly on header files and needs a
- configuration file to be generated first. Thanks, Anders Kaseorg.
- * Add another dummy rule for ./debian/rules to the kernel module rules
- file to fix another variation of make-kpkg breakage.
-
- -- Russ Allbery Sun, 24 Jul 2011 16:45:28 -0700
-
-openafs (1.6.0~pre7-1) unstable; urgency=low
-
- * New upstream prerelease.
- - Substantial Rx updates to correct erroneous behavior
- - Salvager tries harder to detect linktable issues
- - Additional documentation
- - xstat tools now cope with differing timeval structures between
- endpoints
- - Don't attach volumes with special status set in demand attach
- - Treat Linux 3.0 as Linux 2.6 for sysname purposes
- * Update README.source for a few changes in procedures and source
- package format.
- * Reapply the removal of the Doxygen-generated copy of jquery, since
- this apparently wasn't as fixed as had been advertised. However, make
- it conditional on the existence of the jquery.js script, so we should
- hopefully only fix this where necessary.
-
- -- Russ Allbery Wed, 20 Jul 2011 13:04:07 -0700
-
-openafs (1.6.0~pre6-2) unstable; urgency=medium
-
- * Urgency set to medium since 1.6.0~pre6-1 has been in unstable for some
- time, blocked only by the armel build problem, and 1.6.0~pre4-1 in
- testing has serious bugs.
- * Revert the removal of Doxygen's jquery copy. This has now been fixed
- in the Doxygen package.
- * Disable optimization on armel to work around #630746.
-
- -- Russ Allbery Wed, 13 Jul 2011 14:05:26 -0700
-
-openafs (1.6.0~pre6-1) unstable; urgency=low
-
- * New upstream prerelease.
- - Don't do unnecessary page invalidation with directories.
- - Flush vcaches in afs_shutdown for better callback givebacks.
- - Fix the vnode type for dynroot FIDs.
- - Fix volinfo -filenames.
- - Fall back to afs3-vlserver for SRV records for afs3-prserver.
- - Fix a client locking issue on ICBS that could deadlock.
- - Fix callback state handling with demand-attach when salvaged.
- - Fix reference leak in GetCapabilities.
- - Document DNS SRV record usage in afsd man page.
- * Add a dummy debian/rules rule in the kernel module rules file to fix
- builds with make-kpkg. (Closes: #622260)
- * Remove and symlink the copies of jquery generated by Doxygen and add a
- Recommends on libjs-jquery for openafs-doc.
-
- -- Russ Allbery Thu, 16 Jun 2011 09:07:30 -0700
-
-openafs (1.6.0~pre5-2) unstable; urgency=low
-
- * Apply upstream patch from http://gerrit.openafs.org/#change,4656 for
- correct reading of files larger than the chunk size.
- * Use dpkg-buildflags to get the default values of CFLAGS, CPPFLAGS, and
- LDFLAGS. Upstream does not entirely honor these yet, but we're
- getting closer.
- * Update to standards version 3.9.2 (no changes required).
-
- -- Russ Allbery Sun, 15 May 2011 00:29:14 -0700
-
-openafs (1.6.0~pre5-1) unstable; urgency=low
-
- * New upstream prerelease.
- - Avoid downward vcache pressure when entries are free.
- - Avoid client to fileserver deadlock during callback giveup.
- - Improve calculation of when to flush vcaches.
- - Don't read pages beyond the cache EOF.
- - Improve file server reference counting, locking, and logging.
- - Rename the OpenAFS com_err library to avoid conflicts.
- - Restrict the number of CBRs allocated at once.
- - Permit importing of -md5 and -md4 keys with asetkey.
- - Fix token return in aklog with 524 conversion.
- * Apply upstream patch from http://gerrit.openafs.org/#change,4654 to
- fix a configure problem detecting Linux kernel properties, leading to
- a lockup on 2.6.38 kernels.
- * Update import-upstream and README.source for moving 1.6 from the
- experimental and upstream-1.5 branches to the master and upstream
- branches.
- * Change to Debian source format 3.0 (quilt). Force a single Debian
- patch for simplicity since the packaging is maintained in Git using
- branches, and include a patch header explaining why.
-
- -- Russ Allbery Sat, 14 May 2011 11:52:40 -0700
-
-openafs (1.6.0~pre4-1) unstable; urgency=low
-
- * Upload to unstable.
- * New upstream prerelease.
- - Fix file descriptor leak in the file server that could result in
- corrupted files.
- - Properly support large volume numbers.
- - Document current client setuid behavior. (Closes: #612608)
- - Allow salvager to be run manually with demand-attach servers.
- - Properly report setpag() errors.
- * Apply upstream deltas:
- - [1e322b88] Linux: 2.6.39: deal with BKL removal
- - [a8aa6f42] Linux: 2.6.39: replace path_lookup with kern_path
- * Declare optional dependencies in the openafs-client init script on
- openafs-fileserver so that, if the same host is running both a
- fileserver and a client, the fileserver starts before and stops after
- the client.
-
- -- Russ Allbery Thu, 31 Mar 2011 15:00:04 -0700
-
-openafs (1.6.0~pre3-1) experimental; urgency=low
-
- * New upstream prerelease.
- - Revert UUID support in vos.
- - pt_util fixed to properly create new database.
- - MTU discovery now properly shut down on call reset.
- - FUSE client support fixed for non-/afs mounts.
- - A deleted volume can now be recreated properly.
- - Callbacks are again not broken during whole partition salvages.
- - Positional vectored IO fixed.
- - Fileserver per-client thread usage again properly enforced.
- - Anonymous dropbox support improved and drawbacks documented.
- - Ensure vnodes are not reallocated while in use for demand-attach.
- - Perform vcache eviction via a fast path before visiting vcaches
- where sleep is needed.
- * Apply upstream deltas:
- - [17b48f99] Add missing semicolon (Closes: #618496)
- - [ee2811b0] viced: Allow checkout of VOL_STATE_DELETED volumes
-
- -- Russ Allbery Tue, 22 Mar 2011 05:07:22 -0700
-
-openafs (1.6.0~pre2-1) experimental; urgency=low
-
- * New upstream prerelease.
- - Avoid spurious Rx connection timeouts.
- - Do not retry Rx calls on channels returning busy errors.
- - Fix double-free error in the vos command-line utility.
- - Properly enable Rx connection hard timeouts.
- - Fix lock initialization in Rx.
- - Check for /afs existence before starting unless -nomount given.
- - Fix panic when using /afs/.:mount syntax.
- - Avoid a panic in memcache mode due to missing CellItems file.
- - Attempt to recover more quickly from timed-out volume releases.
- - Improve speed of volume removal.
- - Improve CPU utilization during demand-attach volume attachment.
- - Fix various error handling problems.
- - Linux 2.6.38 support.
- - Improve correctness and performance in cache bypass mode.
- - Avoid extra runs of the vcache freeing routine.
- * In README.modules, document the need to install the Linux headers
- package in the DKMS instructions and the need for module-assistant
- clean openafs in the module-assitant instructions. (Closes: #606235)
-
- -- Russ Allbery Thu, 03 Mar 2011 17:49:27 -0800
-
-openafs (1.6.0~pre1-1) experimental; urgency=low
-
- * New upstream prerelease.
- - Rx performance improvements.
- - Correct byte order handling of port in SRV record lookups.
- - More robust vos release to sites previously marked "don't use."
- - vos properly matches sites with multihomed servers.
- - Fix ptserver supergroups support on 64-bit platforms.
- - Bug fixes for demand-attach salvaging.
- - Avoid potential crash when attaching a volume fails.
- - Properly hold the host lock during host enumeration in fileserver.
- - Use larger I/O sizes in memcache to improve performance.
- - Avoid potential alignment issues in pioctl calls.
- - Servers now marked down when GetCapabilities returns an error.
- - Avoid blocking xvcache lock when freeing in-use vcaches.
- - In-use vcache count now properly tracked.
- - Properly configure LWP to use ucontext on appropriate platforms.
- - Eliminate spurious AFS system call errors.
- - Linux 2.6.37 support.
- * Apply upstream deltas:
- - [4a3e5291] Update NEWS for 1.5.78 and 1.6.0pre1
- * In the openafs-client init script, don't attempt to stop or restart
- the AFS client if module loading is disabled. Stopping afsd without
- unloading the module would leave the system in an inconsistent state.
- * Add $named to Should-Start in the openafs-client init script since the
- client may do DNS lookups for the VLDB and file servers during startup
- in some situations. (Closes: #586226)
- * Drop --enable-reduced-depends for right now. aklog doesn't deal with
- it correctly.
- * Now that upstream has renamed compile_et to afs_compile_et, include it
- in libopenafs-dev.
- * Update CellServDB to the 2010-12-13 version.
-
- -- Russ Allbery Wed, 29 Dec 2010 12:27:59 -0800
-
-openafs (1.5.77-2) experimental; urgency=low
-
- * Apply upstream deltas:
- - [ca2a7363] libuafs: Don't #define user (fixes armel build)
- - [f7f366d0] Link dafssync-debug(8) to fssync-debug(8)
- - [a2cf6b8d] Fix POD errors in fileserver and dasalvager
- - [e36b4e00] Update bos create man page for new demand-attach
- * Add backslashes to the DKMS command, which will be required once DKMS
- uses proper shell quoting.
- * In openafs-modules-source, use /lib/modules/`uname -r`/build as the
- default path to the kernel headers rather than /usr/src/linux.
- Current kernel header packages will create an appropriate symlink
- there. This default is only used when neither module-assistant nor
- kernel-package are used.
- * In the openafs-client init script, stop looking for openafs.o; Debian
- hasn't supported 2.4 kernels for quite some time. Remove all the $MP
- handling since we force a module name of openafs.ko using
- --with-linux-kernel-packaging.
-
- -- Russ Allbery Fri, 24 Sep 2010 21:37:03 -0700
-
-openafs (1.5.77-1) experimental; urgency=low
-
- * Apply upstream deltas:
- - [7594331c] Add NEWS entries for OpenAFS 1.5.77 and 1.5.76
- * New upstream testing release.
- - Demand-attach servers are now always built and installed under
- separate names (dafileserver, davolserver, dasalvager). This means
- that the default names are no longer demand-attach, which means that
- upgrades from previous experimental versions will fail (but upgrades
- from non-experimental versions will be much cleaner).
- - Linux 2.6.36 support and improved freezer interface support.
- - More robust path MTU detection.
- - Return VNOVOL from fileserver when a volume is deleted.
- - Improve handling of some corruption in the salvager.
- - Relax too-strict checks in ptserver on foreign names.
- - Better reporting of failures during volume attach.
- - Better fileserver handling of host hash collisions.
- - Fix statistics reporting in RXAFS_GetStatistics64.
- - Improved disconnected mode reference tracking.
- - Avoid a kernel panic during vcache contention.
- - Fix potential kernel panic during bulkstatus.
- - Better vos dry-run mode for syncvldb and syncserv.
- - Fix s390x kernel build support.
- * Update afs-newcell and README.servers to recommend using the
- demand-attach fileserver binaries and dafs bos type.
- * Force disabling of Linux syscall probing in kernel module builds.
- * Remove obsolete --enable-demand-attach-fs and --enable-disconnected
- configure flags. These are now unconditional upstream.
- * The openafs-fileserver init script now depends on $named since
- apparently the volserver requires DNS during startup. Thanks, Jaap
- Winius. (Closes: #589783)
- * Use dpkg --print-architecture, not --print-installation-architecture,
- in the openafs-fileserver config script. The latter is deprecated.
- Thanks, Peter Palfrader. (Closes: #594488)
- * Add a dependency on libc6-dev to openafs-modules-dkms. dkms doesn't
- depend on it because most kernel modules don't need it, but openafs
- builds userspace helper programs. Thanks, Peter Palfrader.
- * Fix the sample CellServDB entry printed by afs-newcell if the cell
- isn't found in /etc/openafs/CellServDB to include the correct server
- syntax. Thanks, Peter Palfrader.
- * Run the DKMS build commands in a subshell to work around a DKMS bug
- that caused the module build logs to be discarded. (LP: #593509)
- * Add a status command to the openafs-fileserver init script.
- * Update to debhelper compatibility level V8.
- - Rewrite debian/rules to use dh and overrides.
- - Use dh_installdocs --link-doc to handle linked doc directories.
- - Rewrite debian/module/rules to use dh and overrides.
- - Bump -source package dependency and compat to debhelper 8.
- * Add ${perl:Depends} to openafs-modules-dkms and perl to the
- dependencies of openafs-modules-source, since Perl is used as part of
- the module build system now.
- * Remove bison and flex dependencies for the module build packages. We
- now ship the results of rxgen, so don't need all the tools required to
- build the full source tree.
- * Update standards version to 3.9.1 (no changes required).
-
- -- Russ Allbery Tue, 21 Sep 2010 17:59:42 -0700
-
-openafs (1.5.75-2) experimental; urgency=low
-
- * Apply upstream deltas:
- - [57d727da] Link libafsauthent with -lresolv if required
- - [c3fc948e] Check for crypt in external library
- - [a1351d48] Fix ktime test on 64-bit systems
- * Use --after instead of --remaining in binary-indep to avoid running
- dh_auto_install and doing the installation process again.
-
- -- Russ Allbery Wed, 14 Jul 2010 12:05:12 -0700
-
-openafs (1.5.75-1) experimental; urgency=low
-
- * New upstream testing release.
- - Path MTU discovery for networks with bad fragmentation.
- - New -human flag for human-readable units in some fs commands.
- - Provide reasons for locked volumes in vos when known.
- - Improvements to Rx ping and NAT handling.
- - Improvements to the userspace AFS client.
- - Substantial updates to the Administrator's Guide.
- - Various bug fixes and improvements to the file server.
- - Force core file generation in bosserver.
- - Improve vlclient and vldb_check.
- - Avoid volume corruption on creation if files were left over from a
- previous failed cleanup.
- - Do not tie up fileserver threads with volumes being taken offline.
- - Break origin's callback on the target of a rename operation.
- - Do not open /dev/console in the fileserver. (Closes: #582111)
- - Avoid unneeded sync() calls in the fileserver.
- - Update client disk cache version.
- - Parallelization improvements in lock management in the client.
- - New -dynroot-sparse mode for afsd to not show all cells in the
- CellServDB until that cell is needed.
- - Fix aklog crash with linked cell handling.
- - Fix fs getserverprefs -vlservers with default CellServDB list.
- - Report server address when logging warnings.
- - Avoid panic in GetCapabilities with an unknown cell.
- - Report process name and ID for advisory lock warnings when
- possible.
- - Flush pending changes to server when releasing file locks.
- - Various other client bug fixes on error handling and callbacks.
- - Disable syscall probes when keyrings are supported.
- - Use filehandles for all Linux 2.6 versions to avoid
- incompatibilities with mismatched afsds.
- - Update Linux kernel support for 2.6.35.
- - The stripped source tree generated for kernel module builds is now
- truly architecture-independent and can build on i386 for amd64
- kernels (for example). (Closes: #518270)
- - Fix build problems on alpha.
- * Apply upstream deltas:
- - [bbce0515] Add NEWS entries for 1.5.75
- - [c790e7d0] Remove a few erroneous NEWS entries for 1.5.75
- - [9e2aba99] Fix ktime test for errors
- - [5cc6293c] Provide man pages for more fssync-debug commands
- * Set the OpenAFS build version to the Debian package version with
- -debian appended so that the Debian package versions can be
- distinguished from unmodified upstream versions.
- * Build shared library packages for libafsauthent and libafsrpc.
- Upstream is now more careful about the ABI. (Closes: #433054)
- * Explicitly link libafsauthent with -lresolv -lcrypt. This is a
- temporary fix for Linux that will be replaced by a better upstream fix
- in the next release.
- * openafs-modules-source and openafs-modules-dkms are now architecture:
- all. The generated kernel source is now architecture-independent.
- * openafs-modules-source and openafs-modules-dkms now recommend an
- appropriate version of openafs-client.
- * Update kernel module packaging scripts:
- - Remove selection of linux-image vs. kernel-image for kernel names.
- - Use Breaks instead of Conflicts.
- - Update standards version to 3.9.0.
- * Tighten the dependencies on openafs-client in packages that symlink
- their /usr/share/doc directories to openafs-client's to meet the
- Policy requirements for changelog files.
- * Remove the lpia architecture. This was an experiment in Ubuntu that
- has apparently been dropped.
- * Add preliminary support for powerpcspe, mapping that architecture to
- ppc_linux26. The kernel build won't work unless uname -m on that
- architecture returns ppc.
- * Minor update to README.Debian for openafs-doc: the old IBM release
- notes are no longer included.
- * Remove conflicts/replaces/provides for openafs-ptutil, which was
- ancient (removed in 2001).
- * Install an upstream changelog file now that upstream provides one.
- * Add a workaround in the clean target to allow the same packaging files
- to be used by upstream, which removes changelog during distclean
- because it's Autoconf-generated. This workaround will not trigger
- during a normal Debian package build.
- * Update standards version to 3.9.0.
- - Use Breaks instead of Conflicts where appropriate.
-
- -- Russ Allbery Tue, 13 Jul 2010 14:46:10 -0700
-
-openafs (1.5.74.1-1) experimental; urgency=low
-
- * New upstream testing release.
- - Correctly recognize cache version differences in upgrades from 1.4
- and invalidate the old cache.
- - Resolve symlinks in fs rmmount.
- - Include PID in byte-range lock warning.
- * Preserve the AFS mount point and cache directories set in
- /etc/openafs/cacheinfo if the file already exists rather than
- overwriting them with the defaults. Thanks, Liam Healy.
- (Closes: #580077)
- * In the openafs-client init script, don't assume that AFS is mounted on
- /afs when unmounting it or killing processes with AFS files open.
- Instead, parse /etc/mtab to find the AFS mount point.
- * Move the experimental afsd.fuse AFS FUSE client into openafs-fuse to
- avoid adding a FUSE dependency in openafs-client. Document its
- current limitations in the package description.
-
- -- Russ Allbery Tue, 04 May 2010 21:49:52 -0700
-
-openafs (1.5.74-2) experimental; urgency=low
-
- * Apply upstream deltas:
- - [e6f6c349] Fixes and clarifications to vos setaddrs man page
- - [d80382ef] Remove special-case call for KAM_SetPassword on s390
- * Fix ucontext detection on ppc_linux26, hopefully fixing build failures
- on the Debian powerpc architecture.
- * Install afsd.fuse and a man page link for it if the FUSE client build
- is enabled.
- * Add build dependency on libfuse-dev and pass --enable-fuse-client to
- configure so that the new FUSE afsd is built. Install afsd.fuse into
- the openafs-client package for the time being; it will move to some
- other package before being uploaded to unstable so that openafs-client
- doesn't keep a dependency on libfuse. There is, as yet, no
- documentation or init script support for the FUSE implementation.
-
- -- Russ Allbery Tue, 20 Apr 2010 18:12:06 -0700
-
-openafs (1.5.74-1) experimental; urgency=low
-
- * New upstream testing release.
- - New vos setaddrs command.
- - Significant improvements to libuafs (user-space AFS client).
- - Initial FUSE implementation for afsd.
- - pts mem -supergroup and -expandgroups options.
- - Rx lock acquisition and thread safety fixes.
- - Fileserver capabilities support for the UNIX client.
- - Various afsmonitor improvements.
-
- -- Russ Allbery Mon, 19 Apr 2010 14:27:10 -0700
-
-openafs (1.5.73.3-1) experimental; urgency=low
-
- * New upstream testing release.
- - New demand-attach file server support for greatly improved file
- server restart times.
- - Support for split readonly/read-write client caches.
- - Better client handling of file server meltdowns.
- - Experimental read-only client disconnected mode.
- - NFS translator clients now work properly on Linux.
- - Client cache readahead.
- - Network performance improvements.
- - New libkopenafs library providing a kernel PAG manipulation
- interface (a subset of the API provided by Heimdal's libkafs).
- - Fix builds on sparc64. (LP: #181661)
- * Apply upstream deltas:
- - [7d395f17] Improve demand-attach fileserver bos documentation
- - [a763edc3] Make src/rx/rx.c not executable
- - [8d41bc24] Reallocate memory in aklog for the AFS ID string
- - [be449999] Fix typo in bos_create manpage
- - [fdb9429e] Linux: kmap() not page_address()
- * Build OpenAFS with demand-attach enabled for the file server, bos
- restricted mode enabled for bosserver, and disconnected mode enabled
- for the client. Except for demand-attach, these options don't change
- the default behavior, just make new capabilities available.
- * The openafs-modules package now provides openafs-modules3 and
- conflicts on pre-1.5.61 openafs-client packages since the interface
- between afsd and the module has changed. openafs-client now conflicts
- with openafs-modules2 and recommends openafs-modules3.
- * Change the default permissions of /etc/openafs/server to 0755 to match
- upstream defaults, but do not change permissions on upgrade. The only
- file in that directory that needs to be protected is KeyFile, which
- should be mode 0600 anyway. Drop the patch to bosserver to allow more
- restrictive permissions. bosserver will complain about directory
- permissions after upgrade until the directory is manually changed.
- * Upstream now installs afszcm.cat and finds it in /usr/share/openafs/C,
- so use the version installed via make install and install it in the
- same location.
- * Upstream builds specific files with -fno-strict-aliasing where needed,
- so we no longer need to build the whole source with that flag.
- * Upstream no longer includes files covered by the Apple Public Source
- License, so we no longer have to repackage the upstream source to
- remove those files. Drop Debian patches to the build system that were
- compensating for the removal of those files.
- * Switch to generating upstream tarballs from the upstream Git tag
- rather than from tarball releases. There's no reason to include all
- the generated files when we're going to regenerate them anyway, and
- this saves effort combining the doc and src tarballs.
-
- -- Russ Allbery Thu, 08 Apr 2010 13:20:50 -0700
-
-openafs (1.4.12+dfsg-3) unstable; urgency=low
-
- * Apply upstream deltas:
- - [135e196b] Create missing root directory when ORPH_ATTACH
- - [190ef2cb] volmonitor keep vtrans lock
- - [812dcc2c] Increase the maximum number of sysnames
- - [a123d4ab] Print rxdebug statistics as unsigned values
- * If the user configures openafs-client to use AFSDB records for VLDB
- server location, don't prompt the user for VLDB servers for the local
- cell even if they're not present in CellServDB and don't try to add an
- entry for the local cell to CellServDB. (Closes: #575299)
-
- -- Russ Allbery Fri, 26 Mar 2010 16:05:30 -0700
-
-openafs (1.4.12+dfsg-2) unstable; urgency=low
-
- * Apply upstream deltas:
- - [4ca7b6fc] Remove lih_r
- - [f3899ac3] Allow GetSomeSpace_r to select an optimal host
- - [94a43966] h_TossStuff_r: check held-ness after lock
- - [b78eeb0c] h_TossStuff_r: make sure host does not go away
- - [0583af32] volmonitor copy link before calling free
- - [eb799d07] Move non-executable stack assembly code to end of file
- * Build with -fno-strict-aliasing. The upstream development branch has
- a better fix that selectively enables this for specific files with
- known problems, but be conservative for the stable release.
-
- -- Russ Allbery Mon, 22 Mar 2010 15:53:48 -0700
-
-openafs (1.4.12+dfsg-1) unstable; urgency=low
-
- * New upstream release.
- - Enable weak encryption types in aklog and klog.krb5.
- - Build support for Linux 2.6.33.
- - Improvements to host tracking safety in the file server.
- - Fall back to current kernel credentials if we can't use stored ones.
- - Fix truncation handling in some large file situations.
- - Further fixes to mmap handling.
- - Avoid double-free in some FetchData64 error situations.
- - Stop warning about system call hooks when keyrings are in use.
- - Flush vcaches when a mount fails to avoid inconsistent data.
- - New dump tag and length standard for vos dump.
- - Fix stack executability for programs containing assembly code.
- - Various salvager robustness fixes.
- * Use dh_dkms from the DKMS package to handle creation of the maintainer
- scripts for openafs-modules-dkms rather than rolling our own.
- (LP: #497149)
- * Update init script to require $remote_fs be started first and stopped
- after OpenAFS. This won't be the case in the long run, but for now
- some important boot-time options need /usr/bin/fs to set them.
- * List $syslog in Should-Start for the openafs-client init script, since
- otherwise if loading the module causes a kernel panic, it won't be
- logged to disk.
- * Update CellServDB to the 2010-02-28 version.
- * Add README.source explaining maintenance procedures and a
- debian/import-upstream script to do a Git-aware merge of a new
- upstream release that will allow us to cherry-pick upstream patches
- and do proper merges.
- * Stop linking the openafs-fileserver doc directory to openafs-client so
- that we can provide a separate NEWS.Debian.
- * Update standards version to 3.8.4 (no changes required).
-
- -- Russ Allbery Mon, 08 Mar 2010 16:32:49 -0800
-
-openafs (1.4.11+dfsg-6) unstable; urgency=low
-
- * Apply upstream deltas:
- - [c12ec354] Fix write_begin configure test for recent RHEL kernels
- - [b7198421] Fix memory allocation warnings at shutdown
- - [7183c113] Do not check *aoutSize in PGetPAG
- - [c0323c49] cm: address race condition in afs_QueueVCB
- - [ad6dabdc] Clean up console message
- - [c9f7fe37] Make ktc_curpag also detect ONEGROUP PAG gids
- - [2f87c43e] volser transaction object race conditions
- - [2d6c0390] Add array bounds checking in h_Enumerate
- - [70f6a328] Check for (hostFlags & HOSTDELETED) after h_Lock_r
- - [c7a59397] Avoid IHandle leak when failing to attach volume
- * Remove incorrect return call in shutdown_icl() introduced by b7198421.
- * Do not attempt to build the kernel module with DKMS if the appropriate
- Linux headers aren't installed. Based on code from the common DKMS
- postinst script (which we'll just use once it's reliably available).
- Thanks, Anders Kaseorg. (LP: #487535)
- * Fix configure flags used for enabling or disabling LWP and kernel
- debugging flags and always pass --disable-strip-binaries.
- * Fix the openafs-dbg dependencies and package description to reflect
- its inclusion of debugging symbols for all server binaries in
- openafs-fileserver and openafs-dbserver, but not the legacy PAM
- modules.
- * In anticipation of a change in dpkg-source's defaults, force source
- package format 1.0. The package is maintained using Git and
- generating a proper quilt series is complex and relatively pointless
- work, so the additional complexity of the 3.0 format is currently not
- that useful.
- * Change section of openafs-modules-dkms to kernel to match override.
-
- -- Russ Allbery Mon, 30 Nov 2009 16:54:08 -0800
-
-openafs (1.4.11+dfsg-5) unstable; urgency=low
-
- * Apply upstream deltas:
- - [7833e472] Make afsd.pod reflect reality
- - [c9974c7a] Avoid prematurely destroying callback_rxcon
- - [9b37972e] Linux: 2.6.32 - Adapt to writeback changes
- - [abdf72bc] Linux: Avoid deadlock in readdir - release GLOCK for
- filldir
- - [bdb4f98a] Protect rx_call iovq from simultaneous attempts to empty
- it
- - [c08609ae] Avoid using released hosts
- - [a410b7fd] Linux - Fix disk cache access for selinux/AppArmor
- constrained processes (LP: #415766)
- - [49094ccf] Add automatic sysname detection for ARM Linux
- - [525b594a] Make ktc_curpag generally available (LP: #446521)
- * In the postinst of openafs-modules-dkms, if the openafs module is
- already added in DKMS, try to remove it first before adding it. This
- should more correctly handle the case of a user installing this
- package without the correct kernel headers, having it fail in
- postinst, and then installing the correct headers and having dpkg
- attempt to configure the package again. Thanks, Philipp Kaluza.
- (Closes: #553542)
-
- -- Russ Allbery Tue, 03 Nov 2009 20:57:21 -0800
-
-openafs (1.4.11+dfsg-4) unstable; urgency=low
-
- * When changing the name of the source package built by
- openafs-modules-source, we need to change the package name in the
- changelog as well or dpkg-gencontrol explodes. Thanks, Aaron M.
- Ucko. (Closes: #549140)
-
- -- Russ Allbery Wed, 30 Sep 2009 18:04:44 -0700
-
-openafs (1.4.11+dfsg-3) unstable; urgency=low
-
- * Apply upstream deltas:
- - openafs-stable-1_4_x/fileserver-no-negative-fetchdata-20090926:
- never return a negative data length from client reads past the end
- of a file.
- - openafs-stable-1_4_x/fileserver-gethost-r-cleanup-fixes-20090925:
- fix memory leak and possible double-free in error handling cases in
- fileserver.
- - openafs-stable-1_4_x/fileserver-retry-registeraddrs-20090810: retry
- VL_RegisterAddrs in the file server on failure.
- - openafs-stable-1_4_x/kernel-init-vrequest-structure-20090914:
- properly initialize vrequest structure in the kernel.
- * Change the permissions of /var/lib/openafs/local to 0700 to match
- upstream defaults. This directory contains the fssync.sock file used
- for coordination between the fileserver and the volserver, and
- commands sent to that socket are not authenticated. Linux protects
- the socket from unprivileged writes by default, but other operating
- systems do not. Upstream therefore wants this directory to be 0700
- and bosserver will complain by default if it's not. Changing the
- permissions let us drop a patch to bosserver.
- * Fix the second module control file for the standards version, section,
- and maintainer update.
- * Change the source package name of the stripped package generated by
- openafs-modules-source so that, should someone build a Debian source
- package from it, it won't have the same name as the main openafs
- source package.
-
- -- Russ Allbery Tue, 29 Sep 2009 15:34:58 -0700
-
-openafs (1.4.11+dfsg-2) unstable; urgency=low
-
- * Add armv5tel to debian/sysname, mapping it to arm_linux26. Patch from
- Daniel Bayer. Also make the similar change for the module source
- package. (Closes: #542315)
- * Also install restorevol in the openafs-client package.
- * Swap maintainer and uploaders in the packaging files for the module
- source package, matching the main package.
- * Update standards version to 3.8.3.
- - Change section of packages generated by openafs-modules-source to
- kernel.
- - Add Homepage to packages generated by openafs-modules-source.
-
- -- Russ Allbery Fri, 21 Aug 2009 19:20:03 -0700
-
-openafs (1.4.11+dfsg-1) unstable; urgency=low
-
- * New upstream release.
-
- -- Russ Allbery Fri, 10 Jul 2009 13:57:55 -0700
-
-openafs (1.4.11~pre3+dfsg-1) unstable; urgency=low
-
- * New upstream release candidate.
- - Further fixes for rcu_read_lock dependencies in some kernels.
- - Clean up return values of Linux vnode operations.
- - Call inode's setattr operation correctly.
- * Ignore failures to remove an existing DKMS tree in the prerm of the
- openafs-modules-dkms package. In the possible cases where the tree
- may not be present to be removed, failing package removal doesn't
- make sense. (Further addresses LP #368471.)
- * Don't install man pages for fs command variants that are only
- available on Windows.
- * Bring src/config/linux-version closer to upstream since upstream now
- handles unversioned source directories. There is one remaining change
- required to search for UTS_RELEASE in the correct header path.
- * Update CellServDB to 2009-06-29 version.
- * Translation updates:
- - Russian, thanks Yuri Kozlov. (Closes: #534807)
-
- -- Russ Allbery Sat, 04 Jul 2009 15:20:06 -0700
-
-openafs (1.4.11~pre1+dfsg1-1) unstable; urgency=low
-
- * New upstream release candidate.
- - New getpag pioctl to discover a PAG from userspace portably.
- - Allow disabling of syscall probing in the kernel module.
- - New -maxmtu override switch in afsd to accommodate some VPNs.
- - pts client encryption support.
- - Further fixes to address/UUID tracking in the file server.
- - New DocBook-based manuals replacing the old HTML manuals.
- - New Doxygen-based protocol reference replacing the old PDF files.
- - Man pages for remaining AFS subcommands.
- * Update standards version to 3.8.2 (no changes required).
-
- -- Russ Allbery Wed, 17 Jun 2009 13:32:31 -0700
-
-openafs (1.4.10+dfsg1-2) unstable; urgency=low
-
- * Apply upstream CVS deltas:
- - STABLE14-dprintf-rename-20090427: rename AFS's dprintf to avoid
- conflicts with one in the kernel.
- - STABLE14-linux26-defer-cred-changing-20090511: defer changing groups
- when the real and effective credentials of a process differ to avoid
- running afoul of checks in newer Linux kernels that cause oops.
- (Closes: #528785)
- - STABLE14-linux-mmap-antirecursion-fix-20090512 and
- STABLE14-linux-mmap-antirecursion-avoid-spurious-eio-20090526:
- improvements in flag setting and locking around recursive mmap
- protection.
- - STABLE14-memcache-write-on-laststore-20090512: write back dirty
- pages on last store with memcache to avoid losing changes.
- - STABLE14-background-fsync-consistency-issues-20090522: file
- descriptor handling fixes for the file server.
- - STABLE14-man-page-vos-dump-flags-20090526: document the -clone and
- -omitdirs flags to vos dump. (Closes: #502571)
- * Provide an openafs-modules-dkms package that uses DKMS to dynamically
- build kernel modules for the local kernel and document this option in
- README.modules. This is an alternative to installing
- openafs-modules-source and building kernel modules for each new kernel
- with module-assistant or make-kpkg. (Closes: #168852, #525131)
- (LP: #52786, #368471, #369875)
- * Have openafs-client recommend at least the current source version of
- openafs-modules-source or openafs-modules-dkms instead of any old
- version. While the API probably hasn't changed, it's best practice to
- keep a relatively close match between the userspace andn the kernel
- module version. (LP: #369875)
- * Dynamically determine the Debian and upstream versions for dkms.conf
- and get-orig-source from debian/changelog. Thanks, Anders Kaseorg.
- (LP: #364426)
- * Build-depend on cpio (used for generating openafs-modules-source).
-
- -- Russ Allbery Tue, 26 May 2009 21:18:54 -0700
-
-openafs (1.4.10+dfsg1-1) unstable; urgency=high
-
- * New upstream release.
- - OPENAFS-SA-2009-001: Avoid a potential kernel memory overrun if more
- items than requested are returned from an InlineBulk or BulkStatus
- message. (CVE-2009-1251)
- - OPENAFS-SA-2009-002: Avoid converting negative errors into invalid
- kernel memory pointers. (CVE-2009-1250)
- - Preliminary support for 2.6.30 kernels.
- - Dynamic vcache allocation support to deal with inotify vcache
- pinning.
- - Do appropriate locking for CellServDB in /proc.
- - Use +dfsg instead of .dfsg for saner version sorting.
- * Debian's 2.6.29 packages no longer include symlinks from the
- architecture-specific header tree to the common header tree and
- instead overlay both header trees using kbuild. Change the Autoconf
- probes to always use kbuild and generate stub headers in the paths
- that OpenAFS expects that include the linux headers. Patch from Aaron
- M. Ucko. (Closes: #521745)
- * Build PIC versions of libafsauthent and libafsrpc and install them in
- libopenafs-dev for use when AFS code should be embedded into shared
- libraries. Patch from Garrett Wollman.
- * Update CellServDB to 2008-11-07 version. (Closes: #522451)
- * Update debian/watch for +dfsg naming instead of .dfsg.
- * Update standards version to 3.8.1 (no changes required).
- * Translation updates:
- - Japanese, thanks Hideki Yamane. (Closes: #521518)
-
- -- Russ Allbery Mon, 06 Apr 2009 15:49:34 -0700
-
-openafs (1.4.8.dfsg1-3) unstable; urgency=low
-
- * Apply upstream CVS deltas:
- - STABLE14-cbr-free-what-you-alloc-20090325: dequeue items in the same
- way they were allocated.
- - STABLE14-shutdown-vcache-avoid-null-deref-20090324: avoid oops on
- shutdown. (LP: #333197)
- - STABLE14-uphys-invalidate-returns-void-20081130: fix apparent Ubik
- synchronization errors due to incorrect use of a void return value.
- * Update package sections for the new archive organization.
-
- -- Russ Allbery Fri, 27 Mar 2009 08:08:49 -0700
-
-openafs (1.4.8.dfsg1-2) unstable; urgency=low
-
- * Make openafs-modules-source architecture-specific (arch: any instead
- of arch: all). The new method for generating the kernel source tree
- only generates correct build machinery for the architecture on which
- it was built, making the package architecture-specific. The generated
- tree is so much smaller that this still only uses about 1MB of archive
- space more than the old method and makes each openafs-modules-source
- package much smaller. This is a workaround until we can fix
- libafs_tree to include enough build machinery to handle all Linux
- architectures from one source tree. (Closes: #516023)
- * Explicitly remove *-stamp files in the clean target of the module
- build until the module build is upgraded to debhelper 7.
-
- -- Russ Allbery Wed, 18 Feb 2009 13:48:17 -0800
-
-openafs (1.4.8.dfsg1-1) unstable; urgency=low
-
- * New upstream release. (Closes: #511535)
- - Support 2.6.28 kernels. (LP: #303112)
- - Check at compile time that the kernel has keyring support rather
- than building non-functional modules. (Closes: #500850)
- - Include vos clone man page. (LP: #324449)
- * Apply upstream CVS deltas:
- - STABLE14-libuafs-updates-20081229: prerequisite for other deltas.
- - STABLE14-linux-truncate-race-20090109: avoid race condition during
- truncation.
- - STABLE14-linux-i-size-20090112: further fix for truncation race.
- - STABLE14-linux-truncate-cleanup-20090113: further truncation fix.
- - STABLE14-osi-probe-check-result-cope-with-enoent-20090115: fix for
- syscall probing.
- - STABLE14-linux-2629-20090115: support for 2.6.29 kernels.
- (Closes: #513680)
- - STABLE14-rx-idledead-only-ignore-keepalives-20081222: rx bug fix to
- not ignore other ping packets.
- - STABLE14-rx-rdwr-writeproc-race-20081228: fix rx race condition that
- could result in reuse of freed memory.
- - STABLE14-rx-do-not-race-current-packet-20090105: fix rx race
- condition.
- * Use make libafs_tree to generate the tree for the kernel module
- compile rather than copying the entire source tree.
- * Compress the source in openafs-modules-source with bzip2 instead of
- gzip to reduce the package size.
- * Make dynroot the default for new installations. It works much better
- with systems that don't bring up their network until late in the boot
- process, such as wireless laptops. (LP: #249240, #318605)
- * Mention libpam-afs-session instead of libpam-openafs-session in the
- description of libpam-openafs-kaserver, and mention libpam-krb5 by
- name. Thanks, Philipp Kaluza. (Closes: #501308)
- * Suggest module-assistant auto-install in README.modules and be clearer
- that building one's own kernel is not required. Thanks, Anders
- Kaseorg and Lutz Goehring for suggestions. (LP: #295897)
- * Allow time-daemon to satisfy the openafs-fileserver recommends in
- addition to ntp, allowing for openntpd. (Closes: #508258)
- * General improvements to debconf configuration handling.
- - Do not abort the config script if we have no default realm and
- dnsdomainname fails. (LP: #274886, #318132)
- - Do not abort postinst if we can't resolve any host name for the
- cell. Just continue in that case, omitting any configuration for
- the local cell. (LP: #322054)
- - Correctly set the default for AFS_CRYPT from the existing config.
- - The cache size is high, not critical, since we have a default.
- - Don't create the client ThisCell if no local cell was specified.
- - Improve the leading comment in afs.conf.client. Users can edit it,
- but any changes other than the setting values will be lost.
- - Remove the openafs-fileserver/bosconfig_moved template, which would
- only be shown on upgrades from pre-1.2.0 versions.
- - Standardize coding style and always quote strings.
- * Update to debhelper compatibility level V7.
- - Use dh where possible in debian/rules.
- - Use dh_lintian to install Lintian overrides.
- - Eliminate the configure target and do all the work in build.
- - Do more in the install target and less in binary, matching the
- default command stacks in dh.
- - Use a debian/clean configuration file to let dh clean do more of the
- work rather than using rm commands in debian/rules.
- * Abort the config script rather than exiting successfully if the
- debconf shell module is not available. The config script should never
- be run in the absence of debconf, so if this fails, something deeper
- is wrong and we shouldn't blindly continue.
- * Add ${misc:Depends} to all dependencies.
- * Add explanations for the Lintian overrides.
- * Use set -e instead of #!/bin/sh -e in maintainer scripts.
- * Remove server documentation from openafs-modules-source.
- * Translation updates:
- - Spanish, thanks Francisco Javier Cuadrado. (Closes: #514452)
-
- -- Russ Allbery Mon, 06 Oct 2008 11:10:14 -0700
-
-openafs (1.4.7.dfsg1-6) unstable; urgency=low
-
- * Apply upstream patch to free /proc entries in the correct order.
- Thanks, Marc Dionne. (Closes: #493914)
- * Apply upstream deltas to support 2.6.27 kernels and to stop using
- COMMON_KERN_CFLAGS for all 2.6 kernels uniformly, which fixes
- problems on amd64 with newer kernels. Thanks, Björn Torkelsson.
- (LP: #267504)
- * Translation updates:
- - Swedish, thanks Martin Bagge. (Closes: #493120)
-
- -- Russ Allbery Mon, 22 Sep 2008 19:07:02 -0700
-
-openafs (1.4.7.dfsg1-5) unstable; urgency=low
-
- * Drop support for hppa. We only have a param file for a 2.4 kernel,
- we were building with UCONTEXT which is stubbed out in glibc for hppa,
- and builds without UCONTEXT fail. The binaries we were building
- before didn't work and no one reported a bug, indicating no one was
- attempting to use OpenAFS on hppa.
- * When building the kernel module, use the setting of the ARCH
- environment or make variable, if present, in preference to uname -m to
- allow cross-compiles. Thanks, Jose Calhariz. (Closes: #492232)
- * Add Jason Edgecomb's copyright and license for man pages to
- debian/copyright.
-
- -- Russ Allbery Thu, 24 Jul 2008 10:14:42 -0700
-
-openafs (1.4.7.dfsg1-4) unstable; urgency=low
-
- * Undo the move of up.pod to afs-up.pod in debian/rules clean rather
- than just deleting the file and causing the second build to fail.
- Thanks, Dominic Hargreaves. (Closes: #490752)
- * Don't use UCONTEXT on hppa; its glibc doesn't provide those
- functions. It's possible that OpenAFS isn't working properly on hppa
- these days, but as yet there have been no reports.
- * Suggest openafs-krb5 in openafs-client and mention it in the long
- description.
-
- -- Russ Allbery Sun, 13 Jul 2008 19:03:58 -0700
-
-openafs (1.4.7.dfsg1-3) unstable; urgency=low
-
- * Apply upstream delta for Linux 2.6.26 support.
- * Enable support for arm and armel, added upstream in 1.4.7.
- * Enable support for lpia by making it synonymous with i386. This means
- that lpia systems will get a sysname of i386_linux26, which isn't
- ideal but should at least work.
- * When clearing the restart time while installing a new cell, pass
- -localauth to avoid an authentication failure. Thanks, Davor Ocelic.
- (Closes: #488152)
- * If the openafs module isn't listed in modules.dep, exit with a zero
- status from the init script even if modprobe fails. Otherwise, if a
- module package and openafs-client are installed at the same time and
- openafs-client is set up before the module package, the init script
- can find the module, fail the modprobe (because the dependency map
- hasn't yet been updated), and fail the whole installation. Exiting
- with a zero status still doesn't get OpenAFS started, but at least it
- doesn't leave the system in a partly installed state. Thanks to Durk
- Strooisma for the analysis. (Closes: #486816)
- * Don't include debug symbols for /sbin, /usr/bin, and /usr/sbin
- binaries or PAM modules in openafs-dbg, just the servers in
- /usr/lib/openafs, since those are the most likely cases where
- backtraces are important and a 10MB debug symbol package seems like
- overkill.
- * Stop using quilt to manage patches and pre-apply them to the source
- package now that the package is maintained with Git.
- * Add Vcs-Git and Vcs-Browser control fields.
- * Reflect current responsibilities more accurately by listing myself as
- maintainer and Sam as uploader.
- * Update standards version to 3.8.0 (no changes required).
- * Drop unused postinst-uses-db-input override; Lintian has been fixed.
- * Translation updates:
- - Galician, thanks Jacobo Tarrio. (Closes: #481675)
-
- -- Russ Allbery Sat, 28 Jun 2008 12:35:43 -0700
-
-openafs (1.4.7.dfsg1-2) unstable; urgency=high
-
- * Bumping urgency for the conflict fix, which fixes a latent RC bug, and
- for the news entry for openafs-dbserver.
- * Add a missing conflict on older versions of openafs-client to
- openafs-krb5 to ensure that the klog transition to alternatives is
- smooth.
- * When configuring a new cell, clear the general restart time.
- * Add a NEWS file for openafs-dbserver warning of the serious Ubik bug
- fixed in the previous release and suggesting restarting database
- servers one at a time.
- * Update to 2008-04-23 CellServDB.
-
- -- Russ Allbery Fri, 09 May 2008 10:45:06 -0700
-
-openafs (1.4.7.dfsg1-1) unstable; urgency=low
-
- * New upstream release.
- - Work around GPLing of RCU locks. (Closes: #476628)
- * Include a Kerberos v5 klog, klog.krb5, in openafs-krb5.
- * klog is now managed via alternatives. openafs-client provides
- klog.afs and openafs-krb5 provides klog.krb5. If both packages are
- installed, klog.krb5 is the default.
- * Don't remove and reinstall the pagsh alternative on every upgrade.
- * Add many new upstream man pages for fs, vos, and pts sub-commands and
- the CellAlias config file.
- * Add read_tape to openafs-dbserver.
- * Add bos_util and a UserList man page to openafs-fileserver.
- * Run dh_install with --fail-missing to catch new upstream additions.
-
- -- Russ Allbery Thu, 01 May 2008 08:13:56 -0700
-
-openafs (1.4.7~pre3.dfsg1-1) unstable; urgency=low
-
- * New upstream release candidate:
- - Better support for 2.6.25 kernels.
- - Fixes for flushing in the cache manager.
-
- -- Russ Allbery Thu, 10 Apr 2008 20:54:36 -0700
-
-openafs (1.4.7~pre1.dfsg1-1) unstable; urgency=low
-
- * New upstream release candidate:
- - Initial support for 2.6.25 kernels.
- - Better 2.6.24 kernel support. (Closes: #463962)
- - Better cleanup on module unload. (Closes: #417917)
- - Potential deadlock fixed in the fileserver.
- - Better fileserver host tracking.
- - Ubik fixes preventing database truncation on unreliable links.
- * Add upstream delta to fix oops on startup with pre-2.6.25 kernels.
- * Install the up man page as afs-up, matching our renaming, and update
- its text accordingly. (Closes: #459635)
- * Move openafs-client later in the shutdown sequence on new
- installations so that it stops after autofs and add an X-Stop-After
- LSB header to achieve the same more reliably with dependency-based
- boots. (Closes: #472545)
- * Update doc-base control file sections for the new categorization.
- * debian/rules and debian/module/rules improvements:
- - Remove all modified generated files on debian/rules clean.
- - Depend on $(QUILT_STAMPFN) instead of patch.
- - Use touch $@ to create stamp files.
- - Use a stamp file for the module's install target.
- * Uncomment and fix the watch rules for pre-releases and always scan for
- both regular releases and prereleases.
-
- -- Russ Allbery Wed, 26 Mar 2008 19:21:24 -0700
-
-openafs (1.4.6.dfsg1-3) unstable; urgency=low
-
- * Fix FTBFS caused by a change in dh_strip behavior. It no longer
- creates empty files for already stripped binaries, so we should no
- longer remove them. Thanks, Lucas Nussbaum. (Closes: #464274)
- * Include debugging symbols for libpam-openafs-kaserver in openafs-dbg.
- * Do not stop daemons in run-level S. This isn't a real run-level and
- hence there's no reason to create the links.
-
- -- Russ Allbery Wed, 06 Feb 2008 11:24:19 -0800
-
-openafs (1.4.6.dfsg1-2) unstable; urgency=low
-
- * Apply additional upstream patches to the 2.6.24 support to fix
- builds with older kernels. Thanks to Felix Koop for the testing.
- (Closes: #458331)
- * Remove old /etc/openafs/server-local files from older versions when
- purging openafs-fileserver.
- * Minor reformatting of openafs-client's postrm.
- * Remove databases on purge of openafs-dbserver.
- * Remove log files when purging openafs-fileserver or openafs-dbserver
- per Policy 10.8.
-
- -- Russ Allbery Sun, 30 Dec 2007 15:08:04 -0800
-
-openafs (1.4.6.dfsg1-1) unstable; urgency=low
-
- * New upstream release.
- - Fixes multiple serious problems with the file server.
- * Apply upstream patch for Linux 2.6.24 support. Thanks to Anders
- Kaseorg for researching the necessary deltas. (Closes: #456258)
- * Apply upstream patch to allocate vnodes from the malloc pool rather
- than off the stack, fixing file server problems on SPARC. Thanks to
- Barney Sowood for tracking down the patch. (Closes: #448380)
- * Apply upstream patch from the 1.5 series to allow multiple realms to
- be listed in the server krb.conf and hence treated as local.
- * Build bosserver with --enable-bos-new-config. On startup, if
- BosConfig.new exists, it will be renamed to BosConfig before the
- configuration is read. (Closes: #453398)
- * Add a comment to /etc/openafs/afs.conf.client that the file is managed
- by debconf. (Closes: #447183)
- * Add more debugging and bug reporting instructions to README.Debian.
- * Mention in README.Debian that the server is built with supergroups
- enabled and with the multiple local realm patch. (Closes: #453399)
- * Support reconfigure in postinst.
- * Recode debian/copyright to UTF-8.
- * Update to standards version 3.7.3 (no changes required).
-
- -- Russ Allbery Mon, 17 Dec 2007 20:19:13 -0800
-
-openafs (1.4.5.dfsg1-1) unstable; urgency=low
-
- * New upstream release.
- - Even with a new enough Linux kernel to support keyrings, we still
- may have found the system call table and need to clean it up when
- unloading the module. (Closes: #448793)
- * Use uname -m rather than dpkg --print-architecture to determine the
- sysname for kernel module builds. Otherwise, builds with a different
- kernel architecture than userspace (amd64 kernels with i386 userspace,
- for example) don't work. Thanks, Anders Kaseorg. (Closes: #448452)
- * Fix signing the generated the changes file on a kernel module build.
- The module build file reorganization required an additional change to
- genchanges. Thanks, Anders Kaseorg. (Closes: #448449)
- * Expose prototypes for the ktc_* functions. (Closes: #449432)
- * Fix man pages for subcommands to use an underscore in the NAME section
- instead of a space so that they'll be indexed properly by the current
- groff and man-db.
- * Update CellServDB to 2007-10-25 GCO release.
- * Add Homepage to the package control fields.
-
- -- Russ Allbery Sun, 11 Nov 2007 15:54:59 -0800
-
-openafs (1.4.5~pre2.dfsg1-1) unstable; urgency=low
-
- * New upstream release candidate.
- - Fix errors when compiled with gcc 4.2. (Closes: #443937)
- - Add a frightening hack to work around the lack of getcontext and
- savecontext for 32-bit SPARc. (Closes: #415952, #446837)
- - Add support for Linux 2.6.23.
- - Multiple bug fixes for client tracking in the file server.
- - Prevent one client from consuming all file server threads.
- * Remove the workaround added for 2.6.20 and 2.6.21 kernels with
- CONFIG_PARAVIRT enabled. The mistaken GPL-labelling of core
- interfaces was fixed in 2.6.22, which has now migrated to testing.
- * Scan /var/log/openafs for core files with a PID appended when a server
- run by bosserver exits with a signal. bosserver was unable to
- correctly handle core files for multithreaded servers since it
- expected a filename of core and Linux always appends a PID to core
- dumps by multithreaded processes.
- * Fix make kdist in openafs-modules-source, inadvertently broken by a
- missing genchanges script.
- * Stop creating /var/lib/openafs/cores. Nothing actually uses it.
-
- -- Russ Allbery Tue, 16 Oct 2007 17:01:33 -0700
-
-openafs (1.4.4.dfsg1-7) unstable; urgency=low
-
- * Switch to quilt for managing patches to the upstream source.
- * Stop installing the Administrator's Reference. All of the useful
- information in here has been converted to man pages.
- * Use the upstream man page for pt_util, which lets us remove the
- docbook-to-man build dependency.
- * Update to the latest CellServDB from grand.central.org.
- * Trim additional unuseful debug information from openafs-dbg.
- * Restructure the source for the module package. The build files for
- the module build are now in debian/module in the source package and
- there is a completely separate rules file. This way, the module build
- rules don't have to depend on quilt and the structure is clearer.
- * Fix debhelper dependencies for the module build.
- * Update module standards version to 3.7.2 (no changes required).
-
- -- Russ Allbery Mon, 20 Aug 2007 17:54:00 -0700
-
-openafs (1.4.4.dfsg1-6) unstable; urgency=low
-
- * Apply upstream patch for the OpenAFS file server to treat clients that
- have an all-zero UUID as if they don't have UUID support, working
- around bugs in various client versions that can cause multiple hosts
- to use all-zero UUIDs and conflict with each other.
- * Use dpkg --print-architecture to determine the AFS sysname for both
- regular builds (avoiding --print-installation-architecture, which is
- deprecated) and kernel builds (avoiding arch, which is temporarily not
- in unstable and which wouldn't do the right thing for cross-compiles).
- Thanks, Chris Hanson. (Closes: #435765)
- * Add hppa as a recognized architecture for kernel module builds,
- although OpenAFS currently only supports 2.4 kernels on HPPA so this
- isn't that useful.
-
- -- Russ Allbery Thu, 02 Aug 2007 19:54:00 -0700
-
-openafs (1.4.4.dfsg1-5) unstable; urgency=low
-
- * Apply upstream patch from Jeffrey Hutzelman to fix syscall probing on
- AMD64 with Linux 2.6.22 kernels. (Closes: #430179)
- * Add a union to des_ks_struct and reorder includes to get the correct
- alignment for DES code on SPARC. Thanks, Chaskiel Grundman. Partly
- addresses #415952.
- * Fix a typo in debian/kern-sysname that caused openafs-modules-source
- to still assume all ia64 systems used Linux 2.4. Thanks, Jakob
- Haufe. (Closes: #432344)
- * Use LSB logging functions for openafs-fileserver and support passing
- arguments to bosserver in /etc/default/openafs-fileserver by setting
- DAEMON_ARGS.
- * Clean up more completely after a purge of openafs-fileserver. Remove
- the files created by the server in /var/lib/openafs/local, remove
- KeyFile and CellServDB.old from /etc/openafs/server, and remove
- BosConfig from /etc/openafs.
-
- -- Russ Allbery Tue, 17 Jul 2007 09:25:03 -0700
-
-openafs (1.4.4.dfsg1-4) unstable; urgency=low
-
- * Apply upstream patch from Jeffrey Hutzelman to fix kernel module
- builds on ppc64. (Closes: #427555)
- * Apply upstream patches for Linux 2.6.22 support. (Closes: #428401)
- * Apply upstream patch to fix the AFS /proc structure under Linux
- 2.6.22.1 and later.
- * Move /etc/openafs/server-local to /var/lib/openafs/local. Most of the
- files here are automatically generated and hence not configuration
- files, and the file server has to write to this directory to start (so
- having it in /etc breaks read-only / file systems). Thanks, Alexei
- Sheplyakov. (Closes: #405697)
- * Move upserver and upclient to /usr/lib/openafs (from /usr/sbin) to
- match upstream's layout and for consistency with the other servers run
- via bosserver.
- * Use --name instead of --exec in the openafs-fileserver init script and
- drop the --pidfile option (bosserver doesn't create a PID file) so
- that we don't start a second bosserver on upgrades.
- * Go back to using krb5-config. The dependency problem has now been
- fixed on all platforms in the krb5 package and this is the preferred
- upstream method.
-
- -- Russ Allbery Thu, 21 Jun 2007 03:02:32 -0700
-
-openafs (1.4.4.dfsg1-3) unstable; urgency=low
-
- * Always generate a UUID on client startup even if for some reason we
- don't think we have any network interfaces. Otherwise, the client
- will use an all-zeroes UUID, which will collide with every other
- client with the same problem.
- * When afsd is started with -rmtsys, it starts another process that afsd
- -shutdown doesn't kill. Update the init script to kill this process
- on stop. (Closes: #405982)
- * Don't use krb5-config to get a library list. It runs the risk of
- encoding unnecessary library dependencies. Instead, hard-code the
- flags and libraries we actually need. (Closes: #424448)
- * When loading a module using the upstream naming convention, don't
- append the .mp to the module name for modprobe. (Closes: #420597)
-
- -- Russ Allbery Wed, 16 May 2007 18:16:12 -0700
-
-openafs (1.4.4.dfsg1-2) unstable; urgency=low
-
- * Debian kernels as of 2.6.20 enable CONFIG_PARAVIRT, which redefines
- several core kernel calls as redirects through a paravirt.ops table
- that's marked GPL-only. This breaks all non-GPL modules that used
- those (previously generally exported) calls even indirectly. Apply a
- hack to switch from spin_lock_irq to spin_lock_irqsave to avoid the
- paravirt redirection so that the module will build.
- * Enable ucontext for all Linux builds with glibc 2.4 or later, not just
- with i386 and amd64, and (following an upstream patch) always use
- ucontext on ia64. Newer versions of glibc change internal structures
- in ways that cause the old LWP code to have stack overflows.
- (Closes: #419903)
- * Apply upstream patch to crashes on contention in afs_xuser when a
- process in a PAG exits. Thanks, Chaskiel Grundman.
- * When determining the AFS sysname for kernel module builds, add
- explicit cases for 2.6 kernels for all architectures that support them
- (everything except non-64-bit sparc_linux). Fixes build problems with
- ia64 and probably other architectures. Thanks to Ippokratis Pandis
- for the debugging help. (Closes: #411818)
- * Prefer alpha_linux_26 to alpha_linux_24 for the non-kernel build on
- Alpha, now that the source supports it.
- * Add support for the s390x architecture. Upstream supports it and
- there's no reason not to.
- * Fix the watch file to remove .dfsg\d+ when comparing versions.
-
- -- Russ Allbery Thu, 19 Apr 2007 13:26:33 -0700
-
-openafs (1.4.4.dfsg1-1) unstable; urgency=low
-
- * Repackage upstream source to remove two additional files covered under
- the APSL. (Closes: #416685)
- * Build-depend on Automake since we run aclocal during the build. Not
- having aclocal caused local patches to osconf.m4 to not be effective,
- leading to the wrong compiler flags for shared libraries. Thanks to
- Frank Lichtenheld for the report. (Closes: #416398, #416497, #418966)
-
- -- Russ Allbery Thu, 12 Apr 2007 21:19:00 -0700
-
-openafs (1.4.4-1) experimental; urgency=low
-
- * New upstream release. (Closes: #415699)
- - Support newer Linux kernels. (Closes: #409797, #410120)
- - Add aklog fallbacks for null realms to support the referral
- capability in MIT Kerberos 1.6 and later. (Closes: #410314)
- * Apply patch from Thomas Sesselmann to support setting options to pass
- to bosserver in /etc/default/openafs-fileserver. (Closes: #409357)
- * Remove the rx_Init calls in the PAM module. The internal counters
- that had to be initialized that way have been removed.
- * Now that we're running regen.sh as part of the build process, only
- patch the Autoconf source files and not the generated output to make
- the diff easier to audit.
-
- -- Russ Allbery Mon, 26 Mar 2007 18:56:55 -0700
-
-openafs (1.4.2-6) unstable; urgency=medium
-
- * SECURITY: Apply upstream patch to disable setuid status on all cells
- by default. Prior versions of AFS defaulted to honoring setuid bits
- in the local cell, but since unauthenticated file access in AFS is
- unencrypted, an attacker could forge packets from an AFS file server
- to synthesize a setuid binary in AFS.
- * Apply upstream fix to use a single high-numbered group for the PAG on
- 2.6 kernels and sort the group properly. Fixes AFS-caused group
- ordering problems that could lead the kernel to ignore some group
- membership for users. (Closes: #414911)
- * Apply upstream fix for segfaults in pts rename. (Closes: #409184)
- * Apply upstream fix to show reasonable free space numbers for AFS in
- df. Without this fix, some programs which use df to check free space
- may think that directories in AFS are full and prevent the user from
- attempting to write files. (Closes: #415294)
- * Translation updates:
- - Dutch, thanks cobaco. (Closes: #413701)
- - Portuguese, thanks Miguel Figueiredo. (Closes: #414800)
-
- -- Russ Allbery Wed, 14 Mar 2007 18:37:12 -0700
-
-openafs (1.4.2-5) unstable; urgency=low
-
- * Translation updates:
- - Chinese, thanks Chun Tian (binghe). (Closes: #406063)
-
- -- Russ Allbery Sun, 28 Jan 2007 13:43:16 -0800
-
-openafs (1.4.2-4) unstable; urgency=low
-
- * Update documentation to note that enabling v4 support or running
- krb524d is no longer required for aklog to work.
- * Translation updates:
- - German, thanks Henrik Kroeger. (Closes: #400800)
-
- -- Russ Allbery Sun, 17 Dec 2006 17:09:41 -0800
-
-openafs (1.4.2-3) unstable; urgency=low
-
- * No longer pass explicit cache tuning options to afsd and instead let
- OpenAFS automatically choose tuning based on the cache size.
- * Accept trailing whitespace in ThisCell.
- * Fix path canonicalization on the server, enabling bos getlog with a
- simple log name to work properly against a Debian bosserver.
- * Change the documentation of afsd -shutdown to be less dire and more
- accurate. Thanks, Daniel J. Priem. (Closes: #394990)
- * Document (at least partially) AFS's mapping of Kerberos v5 principal
- names to Kerberos v4 format in the aklog man page. Thanks, Daniel
- J. Priem. (Closes: #394832)
- * Document that aklog -setpag may not always work.
-
- -- Russ Allbery Mon, 20 Nov 2006 17:29:46 -0800
-
-openafs (1.4.2-2) unstable; urgency=low
-
- * Upstream fix to prevent butc segfaulting.
-
- -- Sam Hartman Sat, 21 Oct 2006 20:57:09 -0400
-
-openafs (1.4.2-1) unstable; urgency=medium
-
- * New upstream release, fixes amd64 kernel issues
- * Update CellServDB
-
- -- Sam Hartman Fri, 20 Oct 2006 06:44:45 -0400
-
-openafs (1.4.2~fc4-3) unstable; urgency=low
-
- * Apply patch from Chaskiel Grundman to fix kernel panics when loading
- the kernel module into AMD64 2.6.18 kernels. (Closes: #390653)
- * Apply upstream patch to fix klog segfaults. (Closes: #390940)
- * The UTS_RELEASE string is no longer found in linux/version.h in
- 2.6.18, so fall back on looking in config/kernel.release. Thanks to
- Marcus Watts for the patch.
-
- -- Russ Allbery Thu, 5 Oct 2006 13:02:50 -0700
-
-openafs (1.4.2~fc4-2) unstable; urgency=low
-
- * Apply additional upstream patch for AMD64 2.6.18 kernel module build
- issues. (Closes: #389729)
-
- -- Russ Allbery Sat, 30 Sep 2006 00:34:33 -0700
-
-openafs (1.4.2~fc4-1) unstable; urgency=low
-
- * New upstream release candidate.
- - Builds with 2.6.18 on AMD64. (Closes: #389729)
- * Build an openafs-dbg package with debugging information for the
- OpenAFS fileserver and volserver.
- * Add LSB comments to the openafs-client and openafs-fileserver init
- scripts.
- * Update to debhelper compatibility level V5.
-
- -- Russ Allbery Wed, 27 Sep 2006 11:06:48 -0700
-
-openafs (1.4.2~fc2-1) unstable; urgency=low
-
- * New upstream release candidate.
- - Supports new Linux kernel versions. (Closes: #383028)
- * Translation updates:
- - German, thanks Henrik Kroeger. (Closes: #384803)
-
- -- Russ Allbery Sun, 3 Sep 2006 12:42:59 -0700
-
-openafs (1.4.1-4) unstable; urgency=low
-
- * Apply upstream fix from Derek Atkins for compilation with kernel
- versions prior to 2.6.10. (Closes: #376576)
-
- -- Russ Allbery Sun, 9 Jul 2006 12:35:44 -0700
-
-openafs (1.4.1-3) unstable; urgency=low
-
- * Include all of AFS's local XDR implementation in the build for
- shlibafsrpc, fixing problems with undefined symbols in the PAM module
- on AMD64.
- * When creating a new file server in afs-newcell, use a set of tuning
- flags from Harald Barth rather than relying on the defaults. This
- doesn't help with general bos create; long term, the defaults need to
- be fixed. (Closes: #364100)
- * Add a note in README.servers about fileserver tuning options.
- * Update debconf templates to follow the best practice recommendations
- from the Developer's Reference.
- * Regenerate the man pages on build since the pre-generated ones were
- done with a very old version of pod2man.
- * Update standards version to 3.7.2 (no changes required).
- * Use a better method of optionally running make distclean.
- * Add build-arch and build-indep targets, just in case.
- * Translation updates:
- - Czech, thanks Martin Šín.
- - Portuguese (Brazil), thanks André Luís Lopes.
- - French, thanks Christian Perrier.
- - Vietnamese, thanks Clytie Siddall.
-
- -- Russ Allbery Sun, 18 Jun 2006 11:22:11 -0700
-
-openafs (1.4.1-2) unstable; urgency=low
-
- * Exit successfully in the openafs-client init script if no module is
- installed, since otherwise openafs-client will fail to install until
- one builds a module. This restores previous accidental behavior due
- to a bug in debhelper. (Closes: #362695)
- * libopenafs-dev must conflict with liblwp-dev since they both provide
- liblwp.a. Thanks, Justin Pryzby. (Closes: #362842)
- * openafs-client recommends lsof, since the init script uses it for
- cleaner shutdown.
-
- -- Russ Allbery Sat, 15 Apr 2006 15:47:04 -0700
-
-openafs (1.4.1-1) unstable; urgency=low
-
- * New upstream release.
- - Supports Linux 2.6.16. (Closes: #358203)
- - Suspend should work with newer kernels. (Closes: #341588)
- - Safer cache size calculation. (Closes: #360176)
- - Upstream now includes man pages, so remove our backport.
- * Subsume openafs-krb5 into this source package.
- - Acknowledge NMU. (Closes: #304933)
- - Update to the OpenAFS aklog and asetkey. (Closes: #196094)
- - Backport asetkey from upstream CVS.
- - Include ka-forwarder from the old migration toolkit.
- - Add man pages for asetkey and ka-forwarder.
- * Subsume openafs-doc into this source package.
- * Since 2.6 is the supported kernel for etch, build the userspace with
- a sysname of *_linux26 where supported. This only affects the sys
- command. (Using livesys instead is better.) (Closes: #358118)
- * Always pass the system type into Autoconf, following autotools-dev
- best practices.
- * Add an explicit copyright statement to debian/copyright.
-
- -- Russ Allbery Fri, 14 Apr 2006 15:04:45 -0700
-
-openafs (1.4.0-4) unstable; urgency=low
-
- * Hopefully fix sparc64 kernel support. Thanks, Troy Benjegerdes.
- (Closes: #219429)
- * Document the need to restart ptserver and vlserver on the existing
- database servers when adding a new one. Thanks, Niklas Edmundsson.
- (Closes: #349659)
- * Include xstat_cm_test and xstat_fs_test in openafs-client, as they're
- quite useful for debugging.
-
- -- Russ Allbery Tue, 14 Mar 2006 21:07:07 -0800
-
-openafs (1.4.0-3) unstable; urgency=low
-
- * Apply upstream patch from Chas Williams to be more careful about what
- dentry is used in renames, avoiding a kernel fault when renaming
- dentries accessed through multiple paths (such as RO and RW).
- * Apply patch to allow the module to build with the Ubuntu kernel.
- Thanks, Björn Torkelsson. (Closes: #342607)
- * Stop unconditionally forcing the compiler to cc or gcc in configure,
- allowing, among other things, building the kernel module with a
- compiler other than the default system compiler. (Closes: #338306)
- * Call kernel-version correctly from prep-modules, which fixes build
- issues with manually-built kernels. (Closes: #344851)
- * Backport man pages from upstream CVS. (Closes: #79763)
- * Include afsmonitor and livesys in openafs-client.
- * Include volinfo in openafs-fileserver.
- * Document FAM's lack of support for AFS's security model and recommend
- gamin instead. (Closes: #343246)
- * Add a hint to README.Debian on what to do about the cache partition if
- running ReiserFS or XFS without a spare partition.
- * Use make install into debian/tmp rather than make dest. make dest is
- mostly for Transarc compatibility and make install looks more like a
- typical package and makes it easier to evaluate differences in FHS
- location between upstream and Debian. As a side effect, there's no
- need to mess with the @sys link. (Closes: #165909)
- * Install more files with dh_install rather than install commands in
- debian/rules so that *.install shows a more complete picture of what
- goes into each package.
- * Don't ignore make distclean errors.
-
- -- Russ Allbery Tue, 27 Dec 2005 15:34:16 -0800
-
-openafs (1.4.0-2) unstable; urgency=low
-
- * Install more of the standard OpenAFS utilities. (Closes: #138851)
- - openafs-dbserver: Install prdb_check and vldb_check.
- - openafs-fileserver: Install voldump.
- - openafs-client: Install fstrace, scout, and up (as afs-up).
- - Modify fstrace to load its catalog from /usr/share/openafs.
- * Do not install kpwvalid. The default version does little useful and
- the kpwvalid binary must be in AFS for it to take effect.
- * Overhaul the way kernel modules are built.
- - Recommend linux-image rather than kernel-image for newer kernels.
- - Always recommend the kernel package; since it's only a recommends,
- there's no need to special-case the hand-built kernel case.
- - Be less fragile about how the kernel version is used in prep-modules
- to support other ways kernel modules are built. (Closes: #341836)
- - Add Build-Depends and Uploaders to the openafs-modules-source
- control file.
- - Remove unused parts of prep-modules and heavily comment it.
- * openafs-client should only recommend the AFS kernel module. Many of
- the client programs will work in unauthenticated mode without it, and
- openafs-fileserver depends on it (but doesn't require the kernel
- module). (Closes: #342095)
- * openafs-modules-source no longer has to depend on as many libraries.
- * Suggest the same PAM settings for pam_krb5 that libpam-krb5 does.
- * Update uploader address.
-
- -- Russ Allbery Tue, 6 Dec 2005 23:34:18 -0800
-
-openafs (1.4.0-1) unstable; urgency=low
-
- * New upstream version.
- - Builds correctly with 2.6.13 kernels and software suspend.
- - Builds correctly with 2.6.12-10. (Closes: #337883)
- * Install afsd in /sbin rather than /usr/sbin. While putting /usr in
- AFS isn't as common as it once was, no reason to make it harder than
- it needs to be.
- * Update CellServDB to the 2005-10-15 grand.central.org version.
- * Install NEWS as an upstream changelog.
- * Add a watch file.
- * Remove the unused and uninstalled make-links script.
-
- -- Russ Allbery Sun, 6 Nov 2005 21:37:40 -0800
-
-openafs (1.4rc4-1) unstable; urgency=low
-
- * New upstream version.
- - Correctly handle root.afs becoming replicated after the client
- starts. This should resolve the problems with AFS eventually
- failing on the first system using a new cell. (Closes: #88906)
- * When kill_all_afs is enabled in /etc/openafs/afs.conf, only kill AFS
- processes if the runlevel is 0 or 6. You really only want this when
- the system is shutting down. (Closes: #325347)
- * Remove the init script check of the cache file system and instead
- improve the check in afsd. The init script check used stat, which is
- in /usr/bin and therefore not fair game for init scripts.
- * Set PATH in the init script, just in case.
- * libpam-openafs-kaserver must depend on openafs-client, not just
- recommend it, since acquiring tokens requires that the client be
- running.
- * Expand README.Debian and include information about PAM configuration.
- * Link libpam-openafs-kaserver's doc directory to openafs-client.
- * Make the short descriptions shorter.
- * Translation updates.
- - Portuguese (Brazil), thanks André Luís Lopes.
-
- -- Russ Allbery Wed, 21 Sep 2005 13:36:34 -0700
-
-openafs (1.4rc1-1) unstable; urgency=low
-
- * New upstream version.
- * Install pam_afs.krb.so on hppa. I believe the new PAM module build
- process fixes the issue that was being worked around before.
- * Improve the documentation and scripts for setting up new servers or a
- new cell. afs-rootvol can now be run from a client configured to use
- dynroot. afs-newcell generates the server CellServDB directly to work
- around oddities with bos addhost. There are many other, more minor
- improvements as well. Thanks to Faheem Mitha and Sergio Gelato for
- analysis and patches. (Closes: #322638)
- * Update the configuration transcript to reflect the current packages,
- messages, and instructions. Thanks, Faheem Mitha.
- * Fill in the server CellServDB with information about the local cell,
- if available in the client CellServDB, rather than always initializing
- it to contain just the name of the cell.
- * Detect AFS caches on non-ext2/ext3 file systems and abort AFS client
- initialization. (Closes: #249315)
- * Provide a way of setting sysname in afs.conf. (Closes: #324694)
- * Don't create the unused /etc/openafs/AFSLog file. (Closes: #120097)
- * Redo how library object files are found for the PAM module build to
- avoid assuming C locale character set behavior. (Closes: #323582)
- * Remove the openafs-client warning against dynroot for the first system
- in a cell now that afs-rootvol can cope. Provide some basic
- documentation of the CellAlias syntax in that message until we have a
- real man page.
- * Suggest openafs-doc.
- * Update standards version to 3.6.2 for the kernel module packages (no
- changes required).
- * Translation updates.
- - Czech, thanks Martin Sin.
- - Vietnamese, thanks Clytie Siddall.
- - French, thanks Christian Perrier.
-
- -- Russ Allbery Fri, 26 Aug 2005 01:30:21 -0700
-
-openafs (1.3.87-1) unstable; urgency=low
-
- * New upstream version.
- - Fixes build problems with 2.6.12.3 and later. (Closes: #320099)
- * Add support for ppc64, thanks Andreas Jochens. (Closes: #322020)
- * Improve the openafs-client init script.
- - Update the default client options based on the cache tuning synopsis
- by Jeffrey Hutzelman, including setting a larger chunksize for all
- default option sets. (Closes: #303944)
- - Choose the client options based on the cache size by default.
- - Move the code to build the options string to the init script from
- afs.conf so that afs.conf is pure configuration.
- - Add an AFS_PRE_SHUTDOWN hook called before shutting down the client.
- - Provide a shutdown hook, disabled by default, that kills all
- processes with files open in /afs. Enabling this ensures a more
- reliable clean shutdown and umounting of the cache partition, but
- may not always be what the admin wants.
- - Improve the readability of the output on start.
- - Significantly improve the comments in afs.conf.
- - Remove the code to set -nosettime as it's now the default.
- * Move the openafs-client init script and afs.conf file we use into the
- debian directory rather than patching the upstream version. We've
- diverged so much that there's no point in continuing to merge changes.
- * Diagnose unsupported architectures earlier and with a clearer error.
- * Suppress error messages from a missing kernel version header since
- they occur normally when doing the regular package build and are just
- confusing. Instead, print an error in kern-sysname and abort if the
- kernel version could not be determined.
- * Rework how PAM modules are handled.
- - Build against the pthread-aware libraries. (Closes: #297804)
- - Use the shared library objects instead of building separate PIC
- objects, eliminating the need for many Makefile modifications.
- - Include pam_afs.krb.so as well. (Closes: #165972)
- * Don't include the empty /usr/src/modules directory in
- openafs-modules-source, only the tarball, to match how other kernel
- module source packages behave. (Closes: #244685)
- * Update config.guess and config.sub.
- * Translation updates.
- - French, thanks Christian Perrier. (Closes: #318807)
- - Vietnamese, thanks Clytie Siddall. (Closes: #319705)
- - Czech, thanks Martin Sin. (Closes: #319940)
-
- -- Russ Allbery Sun, 14 Aug 2005 14:41:48 -0700
-
-openafs (1.3.82-2) unstable; urgency=low
-
- * Output error messages from heredocs in the init script with cat rather
- than echo. Thanks, Reid Barton. (Closes: #311729)
- * Make bosserver less picky about permissions and remove the attempt to
- set /etc/openafs/server-local not-world-readable since dh_fixperms was
- overridding it anyway. (Closes: #312921)
- * Fix some spacing and capitalization errors in the debconf templates.
- Thanks, Clytie Siddall. (Closes: #316597)
- * Initial Czech translation, thanks Martin Sin. (Closes: #310699)
- * New Vietnamese translation, thanks Clytie Siddall. (Closes: #316598)
- * Update standards version to 3.6.2 (no changes required).
-
- -- Russ Allbery Mon, 11 Jul 2005 17:34:13 -0700
-
-openafs (1.3.82-1) unstable; urgency=medium
-
- * New upstream version. (Closes: #307699)
- - Proper locking for preempt kernels. This bug manifested as an
- inability to shut down AFS cleanly. (Closes: #308399, #304040)
- - Correctly handle the inotify semaphore. (Closes: #303495)
- * Repackage upstream to remove MacOS-specific files covered by the APSL.
- Remove the WINNT directory to save space since we have to repackage
- anyway. Provide a get-orig-source target to do the repackaging.
- * libpam-openafs-kaserver: Fix compilation so that the PAM module isn't
- missing symbols and therefore unusable. (Closes: #308844)
- * Apply patch from Chas Williams to fix stale cache data from deleted
- files, a bug introduced in 1.3.82.
- * In all cases, only build the module appropriate to the kernel we're
- building against. Building an SMP module against a non-SMP kernel
- fails due to missing defines. (Closes: #225907)
- * README.modules: Add documentation for module-assistant and recommend
- it when using Debian kernels. Mention divergences from upstream in
- module naming. (Closes: #253168) Emphasize that the kernel source
- tree used for make-kpkg must be identically configured to the kernel
- the module will be used with.
- * Update copyright with more complete information from upstream
- src/LICENSE.
- * Simplify clean target. Upstream make distclean is now better.
-
- -- Russ Allbery Tue, 10 May 2005 21:09:55 -0700
-
-openafs (1.3.81-5) unstable; urgency=low
-
- * Handle modules named either with or without the .mp extension on SMP
- hosts. (Closes: #305389, #307280, #307797)
- * README.Debian: Document that the client cache partition must be ext2
- or ext3 and that XFS and ReiserFS will not work. upserver and
- upclient are now provided. Provide some information about why
- kaserver is not provided. (Closes: #249315)
- * Overhaul the module build rules.
- - Use debhelper to build the module binary package.
- - Let debhelper handle the module postinst and prerm control scripts.
- - Properly support modules_config and modules_clean.
- - Break the build process into configure, build, install, and binary
- rules, paralleling the regular build rules and making it easier to
- maintain the make-kpkg build targets.
- - Include the kernel version in the long description.
- - Update standards version of module packages to 3.6.1.
- - Include the copyright and basic documentation in the module binary
- package. Otherwise, policy requires an exact versioned dependency
- on the package containing the copyright file.
- * Update standards version to 3.6.1.
- - Install Debian::OpenAFS::ConfigUtils in /usr/share, not /usr/lib.
- - Always enable debugging symbols and disable optimization if noopt is
- set in DEB_BUILD_OPTIONS. (Alas, this doesn't entirely work; the
- upstream makefiles don't always honor the configure options.)
- - /etc/init.d/openafs-fileserver restart starts bosserver if it's not
- already running.
- * Update debhelper compatibility level to V4.
- - Remove all *.conffiles control files. They're no longer needed.
- - Use misc:Depends to get debconf dependencies.
- - Use dh_install rather than the movefiles script.
- * openafs-dbserver doesn't need to depend on debconf.
- * Use dh_perl to get the correct Perl dependency for openafs-dbserver.
- * Remove unnecessary build dependencies.
- * Depend on comerr-dev rather than e2fslibs-dev.
- * Remove unnecessary preinst for openafs-fileserver.
- * Clean up and reformat package build rules.
- * Update lintian overrides.
-
- -- Russ Allbery Sat, 7 May 2005 20:57:12 -0700
-
-openafs (1.3.81-4) unstable; urgency=low
-
- * make-kpkg doesn't run fakeroot for us but instead expects the module
- rules file to use $(ROOT_CMD) appropriately. (Closes: #237861)
- * Put the compiled modules into KPKG_DEST_DIR if set. This appears to
- be preferred over DEB_DEST by the make-kpkg documentation. Thanks,
- Jonas Smedegaard. (Closes: #206403)
- * Add a check to afs-newcell to ensure the local hostname doesn't
- resolve to 127.0.0.1. (Closes: #163751)
- * Exclude .svn directories from the modules source tarball.
- * Fix genchanges for module builds to not fail when trying to remove a
- nonexistent file.
- * New French translations from Christian Perrier, Closes: #305780
-
- -- Russ Allbery Sun, 17 Apr 2005 00:00:27 -0700
-
-openafs (1.3.81-3) unstable; urgency=low
-
- * Patch from kcr to fix osconf.m4 so that sparc defines afs_pthread_env
- and thus builds.
-
- -- Sam Hartman Wed, 6 Apr 2005 19:54:24 -0400
-
-openafs (1.3.81-2) unstable; urgency=low
-
- * Oops, update debian/sysname because hppa is hppa not parisc-*-linux-*
- since we now use dpkg --print-installation-architecture
-
- -- Sam Hartman Wed, 6 Apr 2005 11:10:14 -0400
-
-openafs (1.3.81-1) unstable; urgency=low
-
- * New Upstream version
- * Use Linux 2.4 as the claimed userspace OS for alpha; hopefully this
- resolves the largefile issue and allows us to build again, Closes: #271923
-
- -- Sam Hartman Wed, 6 Apr 2005 08:08:29 -0400
-
-openafs (1.3.80-1) UNRELEASED; urgency=low
-
- * New upstream version, Closes: #297781
- * I think this works on sparc better and definitely works on 2.6.10, Closes: #283488
- * Make thiscell a high debconf value, Closes: #302939
- * New upstream version (1.3.79)
- - Works with 2.6.10, Closes: #296835
- * Use amd64 not x86_64 for sysname script, Closes: #296855
- * Patches from kcr
- - Loosen dependencies for client and modules
- - Enable debugging
- - Some callbacks later stuff and fix short bitfield
- - Fix permissions on /etc/openafs/server-local, Closes: #271460
-
- * Versions 1.3.79 an newer work on amd64, Closes: #262382
-
- -- Sam Hartman Mon, 4 Apr 2005 00:32:42 -0400
-
-openafs (1.3.77-1) unstable; urgency=low
-
- * New upstream version
- * Target for unstable not experimental
- * New CellServDB
- * OpenAFS seems not to have a changelog available, so stop shipping it.
- * Build openafs.ko not libafs.ko so the right name appears in lsmod
-
- -- Sam Hartman Sat, 8 Jan 2005 20:02:23 -0500
-
-openafs (1.3.74-1) experimental; urgency=low
-
- * New upstream version
-
- -- Sam Hartman Mon, 15 Nov 2004 16:58:02 -0500
-
-openafs (1.3.73-1) experimental; urgency=low
-
- * New upstream version
- - Works with 2.6.8 and 2.6.9, Closes: #277521
- * Remove call to dh_suidregister
- * Update sysname to prefer 2.4 on more arches for largefile issues
- * Patch from pnelson@ANDREW.CMU.EDU to add x86_64 support to sysname scripts
- * debian/sysname: Use installation architecture
-
- -- Sam Hartman Wed, 27 Oct 2004 20:42:12 -0400
-
-openafs (1.3.71-1) experimental; urgency=low
-
- * New upstream version
-
- -- Sam Hartman Tue, 31 Aug 2004 09:45:59 -0400
-
-openafs (1.3.70-1) experimental; urgency=low
-
- * New upstream version
- * debian/kern-sysname: 2.6* not 2.6
- * Enable supergroups and largefile-fileserver
-
- -- Sam Hartman Sun, 15 Aug 2004 18:56:48 -0400
-
-openafs (1.3.65-1) experimental; urgency=low
-
- * New upstream Version, Closes: #256580
-
- -- Sam Hartman Mon, 28 Jun 2004 19:40:30 -0400
-
-openafs (1.3.64-2) experimental; urgency=low
-
- * Allow loading of a .ko file not just .o
-
- -- Sam Hartman Mon, 31 May 2004 13:46:05 -0400
-
-openafs (1.3.64-1) experimental; urgency=low
-
- * New upstream version
- * Add 2.6 to kern-sysname for i386
- * Apply patch from
- /afs/cs.cmu.edu/user/jhutz/junk/openafs-patches/openafs-build-on-linux26 which correctly generates 2.6 modules, Closes: #234284
- * use make only_libafs not dest_only_libafs
- - AS a result, build times are much faster, Closes: #144781
- * Correct module build scripts to install module package from new location
- * Fix afslocaldir to be /etc/openafs/server-local, Closes: #237154
-
- -- Sam Hartman Sun, 30 May 2004 18:12:54 -0400
-
-openafs (1.2.12-1) unstable; urgency=medium
-
- * New upstream version
- * Medium urgency because this version fixes a significant server crash
- bug. Windows clients, particularly greater than version 1.3.70 tend
- to crash openafs servers.
- * Cause openafs-kpasswd to conflict with kerberos4kth-clients, Closes:
- #277844
- * Conflict between libopenafs-dev and arla-dev, Closes: #274788
-
- -- Sam Hartman Fri, 22 Oct 2004 16:21:29 -0400
-
-openafs (1.2.11-3) unstable; urgency=high
-
- * Now that libopenafs-dev contains binaries, it should have shared
- library dependencies, Closes: #267509
- * New fr.po from Christian Perrier, Closes: #237098
-
- -- Sam Hartman Tue, 24 Aug 2004 12:10:02 -0400
-
-openafs (1.2.11-2) unstable; urgency=low
-
- * Install rxgen
- * Install upserver and upclient
- * Mark as version 1.2.11, Closes: #255883
-
- -- Sam Hartman Thu, 12 Aug 2004 14:27:39 -0400
-
-openafs (1.2.11-1) unstable; urgency=high
-
- * Versions prior to 1.2.10 stopped working with multiple servers in a
- cell because of a ubik bug prompting the 1.2.11 release.
- * Fix afs startup script not to start afsd if already running; really
- fixed in 1.2.10-3, but not documented, Closes: #219702
-
- -- Sam Hartman Sat, 10 Jan 2004 16:37:33 -0500
-
-openafs (1.2.10-3) unstable; urgency=low
-
- * Fix Openafs not to include kernel headers from /usr/include,
- Closes: #220600
- * Fix typo in openafs templates, Closes: #215714
- * New French translations, Closes: #216158
- * Build-depend on e2fslibs-dev to get appropriate headers
-
- -- Sam Hartman Thu, 20 Nov 2003 16:02:45 -0500
-
-openafs (1.2.10-2) unstable; urgency=low
-
- * New Brazilian Portuguese (pt_BR) translations, Closes: #208035
- * Don't conflict with ircd, Closes: #204865
- * Fix wording of question about using dynroot, Closes: #209332
- * New French debconf translations, sorry about the delay in including these, Closes: #203608
- * Avoid yes/no construction in openafs-client templates, Closes: #198476
- * Fix libpam-openafs-kaserver to include the symbols it needs, patch
- from Daniel Joseph Barnhart Clark , Closes: #194818
-
- -- Sam Hartman Mon, 13 Oct 2003 00:38:42 -0400
-
-openafs (1.2.10-1) unstable; urgency=low
-
- * New upstream version
- * net/*.h included properly by kernel module, Closes: #204642
- * Don't build libafsrpc or libafsauthent, as we can't exactly use them
- because they contain non-pic code, Closes: #203456
- * I think I finally build the PAM module on hppa, Closes: #179679
- * Decnet includes should work now because of the change of the net
- symlink, Closes: #204486
- * Escape $ in debian/rules, Closes: #204185
-
- -- Sam Hartman Sun, 24 Aug 2003 18:03:21 -0400
-
-openafs (1.2.9-3) unstable; urgency=low
-
- * Add support for kernel headers, thanks to Patrick Sodre,
- Closes: #173137
- * Add patch to support the Debian 2.4.21 Kernel sources, thanks to amu,
- Closes: #198774
- * Add chronyd to list of programs we assume set the clock, thanks RISKO
- Gergely, Closes: #201725
- * Fix template formatting (extra leading spaces), Closes: #198477
- * New French translations, thanks Christian Perrier, Closes: #198719
- * Fix PAM problem on hppa, Closes: #179679
- * Don't translate defaults: Closes: #198384
- * Fix movefiles error handling and errors exposed by this change. The
- contents of libopenafs-dev were somewhat wrong because of this.
- * Make /usr/src/modules root.src 775, Closes: #201733
-
- -- Sam Hartman Sat, 26 Jul 2003 18:03:31 -0400
-
-openafs (1.2.9-2) unstable; urgency=low
-
- * Fix to not build PAM krb since we don't install it and it breaks alpha, Closes: #189548
- * Don't install pagsh man page symlink since we no longer link to
- undocumented, Closes: #189860
-
- -- Sam Hartman Mon, 21 Apr 2003 21:05:51 -0400
-
-openafs (1.2.9-1) unstable; urgency=low
-
- * Literal newline fixes, Closes: #175627
- * Require new kernel modules per upstream change.
- * New upstream version
- * Fix section of libopenafs-dev to libdevel
- * openafs-client stop should shut down afsd if it is running even if afs
- not mounted, Closes: #188000
- * Fix to build on alpha again; PAM patch was broken
- * Report i386_linux24 not linux22 on i386, Closes: #187789
- * Convert to po-debconf, patch from Andre Luis Lopes, CLoses: #187901
- * Fix from Lamont to build on hppa, Closes: #179679
-
- -- Sam Hartman Sun, 13 Apr 2003 17:21:54 -0400
-
-openafs (1.2.8-4) unstable; urgency=low
-
- * Fix from Eduard Bloch to compile on kernels with variable numbers of
- CPUs; he is not sure it actually works yet though, Closes: #178505
- * Patch that might possibly fix the fails to build on recent unstable;
- definitely fixes a bug in include path handling, but I am not sure it
- is a correct patch since I cannot reproduce the problem, Closes: #178154
-
- -- Sam Hartman Sun, 2 Feb 2003 14:08:14 -0500
-
-openafs (1.2.8-3) unstable; urgency=medium
-
- * Patch from Eduard Bloch to build the PAM module for
- kaserver users; the main thing this patch does in create a bunch of
- PIC object files so it is a policy-conformant shared library, Closes:
- #174668
- * Do not include -I/usr/include and especially -I/usr/include/sys in the
- PAM Makefile so gcc 3.2 works; already fixed upstream, Closes: #176538
-
- -- Sam Hartman Sun, 19 Jan 2003 17:44:53 -0500
-
-openafs (1.2.8-2) unstable; urgency=low
-
- * Convert v5 principal names to v4 style names in rxkad 2b. Especially
- important for rcmd vs host
- * Fix debian/rules clean to remove generated files, Closes: #174625
- * Fix AFS not to declare errno, Closes: #174059
-
- -- Sam Hartman Fri, 3 Jan 2003 15:28:30 -0500
-
-openafs (1.2.8-1) unstable; urgency=low
-
- * New upstream version
-
- -- Sam Hartman Tue, 10 Dec 2002 23:43:46 -0500
-
-openafs (1.2.7-3) unstable; urgency=low
-
- * Apparently OpenAFS and ircd conflict on a UDP port, so you can't use
- both at once, Closes: #150242
- * Patch from seph to add -nosettime when ntp is installed, Closes: #155123
- * Fix bosserver shutdown on restart after upgrade, Closes :#155586
- * Install translate_et, Closes: #138672
- * Allow byacc instead of bison
-
- -- Sam Hartman Tue, 3 Dec 2002 22:30:44 -0500
-
-openafs (1.2.7-2) unstable; urgency=low
-
- * Fix uss to build with bison 1.50 and 1.75 so we can throw away the
- resulting binaries, Closes: #164366
- * Evaluate all limited range of comparison warnings; a warning in
- rxkad_client.c remains but is harmless, other warnings pointed to
- potential problems that were fixed, Closes: #162754
- * Fix s390 modules to actually build, Closes: #162772
-
- -- Sam Hartman Sun, 20 Oct 2002 15:20:19 -0400
-
-openafs (1.2.7-1) unstable; urgency=low
-
- * Fix typo in templates, Closes: #150356
-
- * New upstream version
-
- -- Sam Hartman Thu, 26 Sep 2002 16:11:25 -0400
-
-openafs (1.2.6-1) unstable; urgency=low
-
-
- * New upstream version
- * Update CellServDB, Closes: #154893
- * Add debconf support for fakestat
- * Patch from Sergio Gelato to avoid use of host, Closes: #144264
- * Install sys because it was requested
- * Fix version string, Closes: #153136
- -- Sam Hartman Fri, 2 Aug 2002 17:33:11 -0400
-
-openafs (1.2.5-1) unstable; urgency=low
-
- * New upstream version.
-
- -- Sam Hartman Mon, 10 Jun 2002 08:09:05 -0400
-
-openafs (1.2.4-1) unstable; urgency=low
-
- * New upstream version
- * Now builds for ia64, closes: #142287
- * Now works again with 2.2 kernels, thanks to upstream fix, closes: #140187
- * openafs-modules-source depends on kernel-package, Closes: #137169
- * Fix typo in readme.modules, Closes: #148155
-
- -- Sam Hartman Sun, 2 Jun 2002 17:54:42 -0400
-
-openafs (1.2.3final2-5) unstable; urgency=medium
-
- * Fix subarch handling, closes: #139662
- * Update module control files to use net not non-us
-
- -- Sam Hartman Thu, 18 Apr 2002 13:13:16 -0400
-
-openafs (1.2.3final2-4) unstable; urgency=low
-
- * Move from non-us to main.
- * Fix ultrasparc 2.4 build to actually work.
-
- -- Sam Hartman Sat, 16 Mar 2002 15:33:33 -0500
-
-openafs (1.2.3final2-3) unstable; urgency=medium
-
- * Oops, install backup
-
- -- Sam Hartman Thu, 7 Mar 2002 08:12:34 -0500
-
-openafs (1.2.3final2-2) unstable; urgency=low
-
- * Add dynroot support to debconf; currently no support for creating
- CellAliases automatically
- * Don't call depmod since we call update-modules, closes: #132851
- * Add hppa to debian/sysname, process.c patch from Lamont, closes: #134173
-
- -- Sam Hartman Mon, 25 Feb 2002 15:45:32 -0500
-
-openafs (1.2.3final2-1) unstable; urgency=low
-
- * Upstream released a new version that they call 1.2.3 after things were
- tagged in the Debian repository.
-
- -- Sam Hartman Wed, 30 Jan 2002 16:59:04 -0500
-
-openafs (1.2.3final-1) unstable; urgency=low
-
- * New upstream release
- * Add support for fs setcrypt in debconf; by default traffic is encrypted.
-
- -- Sam Hartman Wed, 30 Jan 2002 10:46:46 -0500
-
-openafs (1.2.3candidate3-1) unstable; urgency=low
-
- * New upstream release candidate
- * Use different version number format; people who installed rc1 will
- need to upgrade manually. Sorry, but rc1 was never uploaded to Debian.
- * Support sparc_linux24
-
- -- Sam Hartman Sun, 27 Jan 2002 19:57:04 -0500
-
-openafs (1.2.3.candidate1-1) unstable; urgency=low
-
- * New upstream release candidate
- * Add ia64 as a potential architecture
-
- -- Sam Hartman Tue, 22 Jan 2002 19:00:51 -0500
-
-openafs (1.2.2-3) unstable; urgency=low
-
- * Support s390, closes: #123540
- * Support update-alternatives for pagsh, closes: #122144
- * Note that alpha port doesn't work for fileservers, closes: #127387
- * Implement subarch, closes: #126192
-
- -- Sam Hartman Mon, 7 Jan 2002 05:26:03 -0500
-
-openafs (1.2.2-2) unstable; urgency=low
-
- * Don't declare lseek in auth/ktc.c; sent upstream
- * Allow /etc/openafs/server to be mode 700 and /var/lib/openafs to be
- 755, closes: #120072
- * Don't try to shut down during afs-newcell until we've done enough
- that works, closes: #119452
- * Fix message output on server failed to start, closes: #119461
- * Fix openafs to deal if /etc/openafs/server/ThisCell has a newline,
- closes: #118086
-
- -- Sam Hartman Sun, 25 Nov 2001 20:03:01 -0500
-
-openafs (1.2.2-1) unstable; urgency=low
-
- * New upstream release.
- * We now require openafs-modules1 and conflict with openafs-modules.
- Our modules packages now provide openafs-modules1. This is because
- upstream made a forward and backward incompatible change in the modules
- interface.
- * Include buserver in openafs-dbserver, butc and fms in openafs-client.c
- butc and fms may move, but they are there for now, closes: #114313
-
- -- Sam Hartman Sun, 14 Oct 2001 15:07:10 -0400
-
-openafs (1.2.1-1) unstable; urgency=low
-
- * New upstream version.
- * Document that you may need to append a version for newer kernels,
- closes: #112246
-
- -- Sam Hartman Thu, 20 Sep 2001 03:10:54 -0400
-
-openafs (1.2.0-3) unstable; urgency=high
-
- * High until we get this into testing.
- * Fix dependency on ncurses, closes: #112244
- * Fix typo in German template added in last version, closes: #112289
-
- -- Sam Hartman | | | |