Hi I seeking for help on how to collect more information for a bug report on openafs client 1.8.6.
I manage several openafs clients on 1.6.x and 1.8.x and servers on
1.6.x. One of this clients, this morning, stop serving one very
important file by apache, the apache error was:
message=AH01630: client denied by server configuration: /afs/
ist.utl.pt/users/Y/Z/istXXXYZ/web
istXXXYZ is a username of a user that I need to protect the privacy.
By login into my openafs client reference machine everything was OK.
But login into the apache server machine I found some strange things:
www-data@apache-server:~$ ls -alF /afs/ist.utl.pt/users/Y/X/istXXXYZ/web
ls: cannot access '/afs/ist.utl.pt/users/Y/Z/istXXXYZ/web': No such file or
directory
www-data@apache-server:~$ ls -alF /afs/ist.utl.pt/users/Y/Z/istXXXYZ/
ls: cannot access '/afs/ist.utl.pt/users/Y/Z/istXXXYZ/.mysql_history':
Permission denied
ls: cannot access '/afs/ist.utl.pt/users/Y/Z/istXXXYZ/web': No such file or
directory
ls: cannot access '/afs/ist.utl.pt/users/Y/Z/istXXXYZ/.bash_history':
Permission denied
For some files, OK for others files.
The www-data user had a good openafs token, no reported problems in the last
"kinit -k -t keytab www-data ; aklog"
By looking into dmesg output I see no errors from openafs.
So as root I have done "systemctl restart openafs-client.service" and
as www-data I have done "kinit -k -t keytab www-data ; aklog" and
everything was OK again.
Some more notes:
The file in error is requested very frequently by an HAProxy to check
if the server is alive.
The openafs-client in error runs Debian 10.5, the openafs-client is
1.8.6 is a private backport of the latest openafs in future Debian 11
made by myself.
The Debian changelog of the package is:
openafs (1.8.6-2~dsi10+2) buster; urgency=medium
* According to bugreport #969376 "Openafs cache erros on the logs",
applied to patchs from gerrit.openafs.org:
* Linux: use override_creds when available
* LINUX: Properly revert creds in osi_UFSTruncate
-- Jose M Calhariz <[email protected]> Fri, 04 Sep 2020
13:42:52 +0100
openafs (1.8.6-2~dsi10+1) buster; urgency=medium
* Rebuild for buster.
-- Jose M Calhariz <[email protected]> Fri, 04 Sep 2020
11:34:14 +0100
openafs (1.8.6-2) unstable; urgency=medium
* Pull in upstream patches for -fcommon support (Closes: #966881)
-- Benjamin Kaduk <[email protected]> Sun, 30 Aug 2020 19:39:18 -0700
Some info about openafs client:
OpenAFS client
@(#)OpenAFS 1.8.6-2~dsi10+2-debian 2020-09-04
@(#)OpenAFS 1.8.6-2~dsi10+2-debian 2020-09-04
OpenAFS modules
Trying 127.0.0.1 (port 7001):
AFS version: OpenAFS 1.8.6-2~dsi10+2-debian 2020-09-04 root@apache-server
OpenAFS cache settings
Chunk files: 245760
Stat caches: 15000
Data caches: 10000
Volume caches: 200
Chunk size: 1048576
Cache size: 7864320 kB
Set time: no
Cache type: disk
When this bug happens again, what more information I should collect to
do a proper bug report.
Kind regards
Jose M Calhariz
--
--
Os miseraveis não tem outro remedio a não ser a esperanca
-- William Shakespeare
signature.asc
Description: PGP signature
