Abstracts
Kris Van Hees (Sine Nomine Associates)
Commercial Support for OpenAFS
With the planned or progressing migration towards OpenAFS in many
organisations, commercial support for OpenAFS becomes an important concern.
While the OpenAFS community provides any expertise you'd dream of, it isn't
the same as a more formalised support option that provides you with
contractual guarantees, and accountability.
This session will provide you with information about existing commercial
support for OpenAFS. With commercial support available, migration to OpenAFS
becomes a much more attractive option, especially in contrast with migrating
to a different technology.
Kris Van Hees (Sine Nomine Associates)
AFS Client Performance Testing
This topic will discuss upcoming AFS client performance testing. It will
focus on the reasons behind the planned testing, and what goals are to be
accomplished by it. Common trouble areas will be discussed and participation
from the audience is highly encouraged to find out more about the most common
AFS client performance problems that people see in production settings.
The ultimate goal of the proposed testing is to define recommendations to the
AFS client to improve its performance.
Kevin M. Hill (Fermi National Accelerator Laboratory)
AFS Backups with TiBS
Experiences with using TiBS backup software from Teradactyl (http://www.teradactyl.com) at Fermilab.
Alf Wachsmann (SLAC)
The AFS Perl Module
The AFS Perl module sits on top of AFS' API and is not a wrapper around the AFS command suites. As such, its performance is much better than any wrapper can be. I will present the different features of the module with some emphasize on the newly added VOS and VLDB methods.
Russ Allbery (Stanford)
Sitewide Software Installation with AFS
Techniques and challenges in maintaining a sitewide Unix shared software installation using AFS.
Rodney Deyer (Univ. of N. Carolina at Charlotte)
AFS on Windows
Microsoft's SMB/CIFS networking solution dominates the world of Windows IT file serving. For many applications in small monocultural environments SMB/CIFS will suffice, however in heterogeneous large scale enterprises it shows inherent weaknesses. The Andrew File System (AFS) however, designed from the core to scale to world wide enterprise sizes is the network file system solution that can dramatically lower costs while increasing the efficiency and strength of a Windows IT infrastructure. This presentation describes the OpenAFS Windows client software, its features, and associated "best practices" used to access an existing AFS infrastructure.
Michael Polek (Pictage, Inc.)
Diskless Booting using AFS
AFS is a viable alternative to NFS as an underlying network protocol for booting diskless Linux machines. AFS affords greater reliability through the redundant readonly volumes and the client cache.
Xueshan Feng (Stanford)
AFS Backup using Tivoli TSM Software
Stanford's AFS backup implmentation using Tivoli's TSM backup software.
Henry Hotz (JPL)
JPL's kaserver to Kerberos 5 Upgrade
As this presentation is given JPL will be in the middle of upgrading from the traditional AFS kaserver to the Heimdal Kerberos 5 KDC. The process is basically very simple, but there are a host of details to be handled in order to minimize service interruptions. We have a good set of requirements, which shows that neither Heimdal, nor MIT provide all the capabilities we will need. We also have a comprehensive list of all the details that have to be taken care of including: converting administration scripts from kas to kadmin, operational procedures that need to be available, Firewall exceptions and database replication.
Pierrick Micout (DAPNIA)
Migration from IBM AFS to OpenAFS
We have migrated our cell from IBM AFS on AIX machine to OpenAFS on Linux PCs. I shall try to explain why and how and what I have discovered in doing this.
Ann Adams (Ford Motor Company)
Analysis of AFS usage in a Large Corporate Environment.
There is an interest in AFS due to a requirement for a more secure File
system. The current implementation of NFSv3 is lacking in security features.
Sun did development on a Secure NFSv3 for their Kerberos load (SEAM)to fill
these security gaps. But secure NFSv3 is not usable in a large scale
corporate environment because other vendors did not follow Sun's lead. NFSv4
with its Kerberos interoperability has the potential to be the file system
of the future, but estimates range from one to five years as applicable for
a production environment. AFS is ready to be incorporated today.
General Outline:
- Features of AFS.
- Comparison to NFSv3, Secure NFSv3, Solaris Beta NFSv4
- Potential Integration into a corporate environment. Problems, issues, sizing, administration, speed, etc..
- Conversion from NFSv3 into AFS.
DJ Byrne (JPL)
Access Control Applications Built on AFS
- "The ITAR Problem"
- Clearance and Document Review
- Tools to make doing the right thing easier than the wrong thing
- WebSecure - web server respecting AFS ACLs
- PTS groups synced to an LDAP directory
- system:anyuser isn't
- PTS group jpl.networks for IP-based authentication
Why would anyone think that's a good idea? - "public" means "public," not just my company!
Bo Tretta (JPL)
AFS Server Performance Comparisons
1/2 dozen or so hardware platforms compared methodology thus far. Future Directions with thoughts for the beefed-up suite