Kris Van Hees (Sine Nomine Associates)

Commercial Support for OpenAFS

With the planned or progressing migration towards OpenAFS in many organisations, commercial support for OpenAFS becomes an important concern. While the OpenAFS community provides any expertise you'd dream of, it isn't the same as a more formalised support option that provides you with contractual guarantees, and accountability.
This session will provide you with information about existing commercial support for OpenAFS. With commercial support available, migration to OpenAFS becomes a much more attractive option, especially in contrast with migrating to a different technology.

Kris Van Hees (Sine Nomine Associates)

AFS Client Performance Testing

This topic will discuss upcoming AFS client performance testing. It will focus on the reasons behind the planned testing, and what goals are to be accomplished by it. Common trouble areas will be discussed and participation from the audience is highly encouraged to find out more about the most common AFS client performance problems that people see in production settings.
The ultimate goal of the proposed testing is to define recommendations to the AFS client to improve its performance.

Kevin M. Hill (Fermi National Accelerator Laboratory)

AFS Backups with TiBS

Experiences with using TiBS backup software from Teradactyl (http://www.teradactyl.com) at Fermilab.

Alf Wachsmann (SLAC)

The AFS Perl Module

The AFS Perl module sits on top of AFS' API and is not a wrapper around the AFS command suites. As such, its performance is much better than any wrapper can be. I will present the different features of the module with some emphasize on the newly added VOS and VLDB methods.

Russ Allbery (Stanford)

Sitewide Software Installation with AFS

Techniques and challenges in maintaining a sitewide Unix shared software installation using AFS.

Rodney Deyer (Univ. of N. Carolina at Charlotte)

AFS on Windows

Microsoft's SMB/CIFS networking solution dominates the world of Windows IT file serving. For many applications in small monocultural environments SMB/CIFS will suffice, however in heterogeneous large scale enterprises it shows inherent weaknesses. The Andrew File System (AFS) however, designed from the core to scale to world wide enterprise sizes is the network file system solution that can dramatically lower costs while increasing the efficiency and strength of a Windows IT infrastructure. This presentation describes the OpenAFS Windows client software, its features, and associated "best practices" used to access an existing AFS infrastructure.

Michael Polek (Pictage, Inc.)

Diskless Booting using AFS

AFS is a viable alternative to NFS as an underlying network protocol for booting diskless Linux machines. AFS affords greater reliability through the redundant readonly volumes and the client cache.

Xueshan Feng (Stanford)

AFS Backup using Tivoli TSM Software

Stanford's AFS backup implmentation using Tivoli's TSM backup software.

Henry Hotz (JPL)

JPL's kaserver to Kerberos 5 Upgrade

As this presentation is given JPL will be in the middle of upgrading from the traditional AFS kaserver to the Heimdal Kerberos 5 KDC. The process is basically very simple, but there are a host of details to be handled in order to minimize service interruptions. We have a good set of requirements, which shows that neither Heimdal, nor MIT provide all the capabilities we will need. We also have a comprehensive list of all the details that have to be taken care of including: converting administration scripts from kas to kadmin, operational procedures that need to be available, Firewall exceptions and database replication.

Pierrick Micout (DAPNIA)

Migration from IBM AFS to OpenAFS

We have migrated our cell from IBM AFS on AIX machine to OpenAFS on Linux PCs. I shall try to explain why and how and what I have discovered in doing this.

Ann Adams (Ford Motor Company)

Analysis of AFS usage in a Large Corporate Environment.

There is an interest in AFS due to a requirement for a more secure File system. The current implementation of NFSv3 is lacking in security features. Sun did development on a Secure NFSv3 for their Kerberos load (SEAM)to fill these security gaps. But secure NFSv3 is not usable in a large scale corporate environment because other vendors did not follow Sun's lead. NFSv4 with its Kerberos interoperability has the potential to be the file system of the future, but estimates range from one to five years as applicable for a production environment. AFS is ready to be incorporated today.
General Outline:

  1. Features of AFS.
  2. Comparison to NFSv3, Secure NFSv3, Solaris Beta NFSv4
  3. Potential Integration into a corporate environment. Problems, issues, sizing, administration, speed, etc..
  4. Conversion from NFSv3 into AFS.

DJ Byrne (JPL)

Access Control Applications Built on AFS

  • "The ITAR Problem"
  • Clearance and Document Review
  • Tools to make doing the right thing easier than the wrong thing
  • WebSecure - web server respecting AFS ACLs
  • PTS groups synced to an LDAP directory
  • system:anyuser isn't
  • PTS group jpl.networks for IP-based authentication
    Why would anyone think that's a good idea?
  • "public" means "public," not just my company!

Bo Tretta (JPL)

AFS Server Performance Comparisons

1/2 dozen or so hardware platforms compared methodology thus far. Future Directions with thoughts for the beefed-up suite