[7226] in Release_7.7_team
on "pagbug" and dialup upgrades
daemon@ATHENA.MIT.EDU (Benjamin Kaduk)
Thu Jan 13 12:33:29 2011
Date: Thu, 13 Jan 2011 12:33:21 -0500 (EST)
From: Benjamin Kaduk <kaduk@MIT.EDU>
To: release-team@MIT.EDU
cc: jdreed@MIT.EDU
Message-ID: <alpine.GSO.1.10.1101131128150.640@multics.mit.edu>
MIME-Version: 1.0
Content-Type: MULTIPART/MIXED; BOUNDARY="-559023410-418606460-1294939557=:640"
Content-ID: <alpine.GSO.1.10.1101131232010.640@multics.mit.edu>
This message is in MIME format. The first part should be readable text,
while the remaining parts are likely unreadable without MIME-aware tools.
---559023410-418606460-1294939557=:640
Content-Type: TEXT/PLAIN; FORMAT=flowed; CHARSET=US-ASCII
Content-ID: <alpine.GSO.1.10.1101131226371.640@multics.mit.edu>
Hi all,
Jon asked me to send mail after some zephyr discussion on class consult
last week.
I think I missed some of the previous discussion of pagbug, but my
understanding is that it is thought to be due to the relationship between
PAGs and kernel keyrings in recent linuxes. In particular, in many
OpenAFS versions, PAGs can be allocated using keyrings that count towards
root's quota of keyrings. When that quota is full (the silliness of root
having a quota notwithstanding), then PAG creation fails, silently if I
remember correctly. This results in the situation where a user doesn't
have a PAG on login; that and the concurrent lack of tokens causes issues
in the Athena environment.
The presumed fix is to cause keyrings allocated for PAGs to not count
towards (root's) quota, but there are actually two commits in OpenAFS
master that reference keyrings and quota (and a third to actually
propagate the error when keyring creation fails):
c4537f0442 Don't count root session keyrings against quota
a3812f211a Linux: don't count pag keys against root's keyring quotas
0caf14224a Linux Keyrings: don't ignore error code from session keyring creation
However, of these three commits, only two have actually gotten
cherry-picked back to the 1.4.x branch
a27015099a Linux: don't count pag keys against root's keyring quotas
0bec77e1f9 Linux Keyrings: don't ignore error code from session keyring creation
More tellingly, *neither* is in the most recent release tag from the 1.4.x
branch (1.4.14), so all three patches are missing from the released
version if I am reading the repository correctly.
I am given to understand that Mark Manley had put some patches of this
nature on the jaunty dialups, but these may or may not have been
transferred to the new lucid dialups. I think that checking is worth
doing, as (to my not-really-a-linux-kernel-person eyes) it seems that we
want all three of these keyring patches on the dialups.
As one final note, I mention that the 1.6.0pre1 release candidate has all
three keyring patches, with tarballs available at
http://www.openafs.org/release/openafs-1.6.0pre1.html
-Ben
---559023410-418606460-1294939557=:640
Content-Type: TEXT/PLAIN; CHARSET=US-ASCII; NAME=root-session.patch
Content-Transfer-Encoding: BASE64
Content-ID: <alpine.GSO.1.10.1101131225570.640@multics.mit.edu>
Content-Description:
Content-Disposition: ATTACHMENT; FILENAME=root-session.patch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---559023410-418606460-1294939557=:640
Content-Type: TEXT/PLAIN; CHARSET=US-ASCII; NAME=pag-keys.patch
Content-Transfer-Encoding: BASE64
Content-ID: <alpine.GSO.1.10.1101131225571.640@multics.mit.edu>
Content-Description:
Content-Disposition: ATTACHMENT; FILENAME=pag-keys.patch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---559023410-418606460-1294939557=:640
Content-Type: TEXT/PLAIN; CHARSET=US-ASCII; NAME=keyring-error.patch
Content-Transfer-Encoding: BASE64
Content-ID: <alpine.GSO.1.10.1101131225572.640@multics.mit.edu>
Content-Description:
Content-Disposition: ATTACHMENT; FILENAME=keyring-error.patch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---559023410-418606460-1294939557=:640--
