setgroups() problem w/ arla module loaded

[Harald Barth]

> - I was not able to build the source RPM.  It makes a few iterations, 
> trying to build for all the versions installed on my system:
> 
> 2.6.4-54.5-smp-mts	(has minor mods to work on my employers VPN)
> 2.6.5-7.75-smp		(stock)

2.6.5-7.75 seems to have som problems. http://www.opensound.com/linux-x86.html:

>> SuSE 9.1 Linux 2.6.5-7.75 kernel notes
>>SuSE 2.6.5-7.75 kernel has been shipped with incorrect kernel configurations. Before you install OSS, please follow these steps:
>>
>>    * cd /lib/modules/2.6.5-7.75
>>    * rm build
>>    * ln -s /usr/src/linux-2.6.5-7.75 build 

> eventually falling over in the nnpfs module build with a missing 
> $(LINUX_VERSION_PATCHLEVEL) value.  I believe this is due to crawling down 
> the wrong symlink from /lib/modules/2.6.5-7.75/{build,source}.  Is this a 
> SuSE-ism?  I'm afraid I don't understand what's trying to happen there, 
> but it's broken a number of external module builds (NVidia and VMware ko's 
> to be precise).  Easy fixes, but seems like gratuitous churn nonetheless.

I don't know if /lib/modules/2.6.5-7.75/source is a new SuSE-ism or just plain
broken. 

> Brief aside:  Perhaps I'm just too dense, but I've never had any luck 
> getting the Heimdal tools to authenticate with AFS.  I've been using 
> 'klog' from the OpenAFS RPMs supplied by SuSE. 

Both should work. If you use kerberos tickets you can obtain your ticket
whatever way and then put the token into the kernel with heimdal's afslog.

You got pag and tokens like I have?

suse91:~ # id
uid=0(root) gid=0(root) groups=0(root),268435473
suse91:~ # klist -T
Credentials cache: FILE:/tmp/krb5cc_e9Hq6z
        Principal: haba at STACKEN.KTH.SE

  Issued           Expires          Principal                         
Jun 23 13:01:28  Jun 23 23:01:28  krbtgt/STACKEN.KTH.SE at STACKEN.KTH.SE
Jun 23 13:01:28  Jun 23 23:01:28  afs at STACKEN.KTH.SE                  

Jun 23 13:01:28  Jun 23 23:01:28  Tokens for stacken.kth.se

> - I then applied the syscall patch from the source RPM to 0.36.1 and 
> rebuilt that source tree.  Once installed, all was well again.  With the 
> SMP module I'm able to access both my own cell and my employers.  I'm 
> using dynroot, which seems fine.  

Hm, now I'm not sure what source you ended up with, probably different 
from what I tested ;-)

> Took a while to figure out the AliasDB file (found by grepping the 
> sources).  Would it be possible to adopt the same file naming as OpenAFS?  
> They call this CellAlias, FWIW.

I have no idea as you are the first person I hear of using this feature
in an Arla client.

Harald.