CVS arla and kerberos 4

[Martin Gasbichler]

Harald Barth <haba at pdc.kth.se> writes:

> Hi.
>
>> I built arla from CVS to get it running on FreeBSD 5.2 RC1. After
>> fixing some minor issues I got the client running. 
>
> Gotta patch?

The only change to the code I did is

Index: nnpfs/bsd/nnpfs_vfsops-bsd.c
===================================================================
RCS file: /afs/stacken.kth.se/src/SourceRepository/arla/nnpfs/bsd/nnpfs_vfsops-bsd.c,v
retrieving revision 1.72
diff -u -r1.72 nnpfs_vfsops-bsd.c
--- nnpfs/bsd/nnpfs_vfsops-bsd.c	19 Dec 2002 10:30:17 -0000	1.72
+++ nnpfs/bsd/nnpfs_vfsops-bsd.c	8 Jan 2004 16:34:26 -0000
@@ -487,7 +487,7 @@
 	    goto out;
     }
 
-    error = VOP_OPEN(vp, flags, cred, proc);
+    error = VOP_OPEN(vp, flags, cred, proc,-1);
     if (error)
 	goto out;

I derived the -1 from other occurrences of VOP_OPEN in the kernel
sources but don't know what the new argument is for.

In addition, I had to provide CFLAGS=-DHAVE_OPENSSL to configure. All
the executables in appl/ needed "-lkafs ../../rxkad/.libs/librxkad.a"
to link properly and I had to invoke "make" manually in rxkad/. I also
added

#define DECRYPT DES_DECRYPT
#define ENCRYPT DES_ENCRYPT

to rxkad/rxkad_locl.h.

>> However, I don't
>> have the slightest idea how to get a token because our cell uses the
>> Transarc AFS servers 
>
> So you mean your site runs the kaservers. These are available from
> Transarc and from OpenAFS. But if you do not run kerberos (which I
> _do_ recommend and can describe in detail why somewhere else) you run
> kaservers.
>
>> but the former klog seems to be gone and none of
>> the hints from the manual seem to work (aklog, kalog, afslog). Am I
>> missing something?
>
> In the arla distribution, the kalog program is the one that should
> work with kaservers.

Okay, that was my first guess. However this program does not compile: 

kalog.o: In function `main':
/afs/wsi/pu/src/gasbichl/arla/appl/kalog/kalog.c:121: undefined reference to `ka_authenticate'

The only reference to this function I could find is in file
appl/lib/ka-procs.c where is is surrounded by "#if 0". This led me to
the conclusion that kalog is not supported at the moment.

> However, since the Unix time went over 2^31 this weekend, probably
> none of your AFS database servers (kaserver, ptserver, vlserver,
> buserver?) work correctly because they are not able to reach quorum
> any more. You might be lucky and still have a database syncsite, but
> that is only luck. So tell your sysadms to upgrade the database
> servers to OpenAFS 1.2.11 ASAP (guess what I am doing right now in
> another window). See in output below:

They are working on an upgrade to OpenAFS right now ;-)

--
Martin