gmane.network.netatalk.user

afpd disconnecting when connected over wifi

Ron Garret — 2013-05-21T00:59:54

Running Debian squeeze, which includes afpd 2.1.2.  It works flawlessly when I'm connected over a wired connection, but if I connect over wifi, the server disconnects as soon as I try to transfer any significant data.

My first instinct of course is to check the log files but I can't find them.  Does netatalk write a log file?  I've looked in the docs and in /etc/netatalk/* and can't find any mention of log files.

Any suggestions on how to proceed would be much appreciated,

Thanks,
rg


------------------------------------------------------------------------------
Try New Relic Now & We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app, & servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may

FW: netatalk 3.x not honoring unix permisions

Deas, Jim — 2013-05-20T17:06:51

-----Original Message-----
From: Deas, Jim
Sent: Monday, May 20, 2013 7:52 AM
To: 'Reindl Harald'
Subject: RE: [Netatalk-admins] netatalk 3.x not honoring unix permisions

Not really a messy structure. Shares are projects with several groups of professionals. All groups need ro to each other but write access only to their particular specialty. This is done using a base group for the share's root directory and 'sub' groups using chmod 2775 to keep everyone honest.

Project- (prj - 750 )
        -- Project mechanical (prj-mech 2775)
        -- Project structure  (prj-strc 2775)
        -- Project software   (prj-soft 2775)
        -- Project master           (prj-mst 3775)

Creating a share for each group in a project would force all users to mount several shares.

JD

-----Original Message-----
From: Reindl Harald [mailto:h.reindl< at >thelounge.net]
Sent: Monday, May 20, 2013 7:44 AM
To: Deas, Jim
Subject: Re: [Netatalk-admins] netatalk 3.x not honoring unix permisions

Am 20.05.2013 16:33, schrieb Deas:

a

Re: netatalk 3.x not honoring unix permisions

Frank Lahm — 2013-05-20T14:38:15

Hi

Am 20.05.2013 um 15:48 schrieb "Deas, Jim" <James.Deas< at >warnerbros.com>:

A bug?

-f

Re: netatalk 3.x not honoring unix permisions

Deas, Jim — 2013-05-20T14:32:19

I should have been more clear. I do not want to force the permission because some supervisors DO make the occasional private folders.
Right now my best guess is the umask needs to be changed to 002 but I did not have to do that in 2.x

JD



-----Original Message-----
From: Reindl Harald [mailto:h.reindl< at >thelounge.net]
Sent: Monday, May 20, 2013 7:20 AM
To: netatalk-admins< at >lists.sourceforge.net
Subject: Re: [Netatalk-admins] netatalk 3.x not honoring unix permisions



Am 20.05.2013 15:48, schrieb Deas:

seems so, they where there in 2.2 and are still there in 3.x

[sharename]
 directory perm = 2775
 file perm      = 0660


------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/a

Re: netatalk 3.x not honoring unix permisions

Reindl Harald — 2013-05-20T14:20:08


Am 20.05.2013 15:48, schrieb Deas:

seems so, they where there in 2.2 and are still there in 3.x

[sharename]
 directory perm = 2775
 file perm      = 0660

------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d_______________________________________________
Netatalk-admins mailing list
Netatalk-admins< at >lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/netatalk-admins

netatalk 3.x not honoring unix permisions

Deas, Jim — 2013-05-20T13:48:09

Guys,
 I have several netatalk 3.x systems now running in test. With the 2.x series I used unix groups to create two layers of rights in each share using
chmod 2775 groupdir1
chmod 3775 groupdir2

This enabled me to keep two subgroups with slightly different management under a single share.

None of the clients have a common LDAP server so I set ACL mapping to none. Can anyone tell me what would have changed from netatalk 2.x? I am seeing a record number of permissions changed from the default 2775 and 3775 to directories with more restrictive mods (750 etc). This makes group sharing impossible with the new 3.x code!
Have I missed an option to enforce Unix permissions?

Regards,

Jim Deas


------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and

unable to compile 3.0.3 with --enable-afs

Fred Drueck — 2013-05-11T18:45:49

Hello Everyone,

I'm unable to compile netatalk-3.0.3 with the configure option:

--enable-afs

One problem in etc/afpd/afs.c is the directives:

#include <netatalk/endian.h>
#include <afs/venus.h>
#include <afs/afsint.h>

#include "globals.h"
#include "directory.h"
#include "volume.h"
#include "misc.h"
#include "unix.h"

I copied the "sys/netatalk/endian.h>" file from netatalk 2.2.4, and
rewrote the paths as below:

#include <netatalk/endian.h>
#include <netinet/in.h>
#include <afs/afsint.h>
#include <afs/venus.h>

#include "atalk/globals.h"
#include "include/atalk/directory.h"
#include "atalk/volume.h"
#include "etc/afpd/misc.h"
#include "include/atalk/unix.h"

It's neccessary to change the order of

#include <afs/afsint.h>
#include <afs/venus.h>

because the return values need to be included before the functions.

But I still get some nasty compiler warnings, and the object file
cannot be linked by ld.  make output follows:

make[1]: Entering directory `/home/mscs/extra/netatalk-copy2/etc/afpd'
   CC

sys_lsetxattr errors

Jaap Winius — 2013-05-09T17:13:45

Hi folks,

Following an otherwise successful upgrade to netatalk 3.0.3, I'm  
getting a lot of errors like this one in my syslog:

    afpd[28693]: sys_lsetxattr("/nfs1/dicom/."): Permission denied

Here, "/nfs1/dicom" is the path that I defined to to an AFP volume. It  
contains nothing but read-only data for the users. I believe this is  
causing the problem, because it prevents afpd from writing Mac  
metadata to these directories.

Is there an option to disable this function, to stop afdp from  
attempting to write this metadata to volumes that are read-only?

Thanks,

Jaap

------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and 
their applications. This 200-page book is written by three acclaimed 
leaders in the field. The early access version is available now. 
Download your free book today! http://p.sf.net/sfu/neotech_d2d_may

Re: World writable NAS

Kai Hendry — 2013-05-09T15:10:09

Thank you Joe. My working configuration is http://ix.io/5yA and of
course I needed `chmod -R 777 /srv`

What I do is, from time to time I commit the photos that are dropped
in there. So if someone manages to accidentally delete everything, my
.git directory should be left standing.

Thanks for your help!

Btw the archive link upon
http://netatalk.sourceforge.net/mailing_lists.php does not work.

------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and 
their applications. This 200-page book is written by three acclaimed 
leaders in the field. The early access version is available now. 
Download your free book today! http://p.sf.net/sfu/neotech_d2d_may

Re: World writable NAS

Joseph Goodstein — 2013-05-09T14:58:13

Assuming you understand the risk, you can make it world writable by putting

uam list = uams_dhx.so uams_dhx2.so uams_guest.so

you need to chmod 777 the directory and any preexisting files as well.

On May 9, 2013, at 7:38 AM, Kai Hendry <kai.hendry< at >gmail.com> wrote:


------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and 
their applications. This 200-page book is written by three acclaimed 
leaders in the field. The early access version is available now. 
Download your free book today! http://p.sf.net/sfu/neotech_d2d_may_______________________________________________
Netatalk-admins mailing list
Netatalk-admins< at >lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/netatalk-admins

Re: World writable NAS

Reindl Harald — 2013-05-09T14:44:42

Am 09.05.2013 16:38, schrieb Kai Hendry:

all fine, but why not at least a very easy dummy login?
IMHO completly unprotected acess is stupid in any context

have fun if you make a mistake in your WLAN-AP sooner
or later and get noticed of it because your data are
deleted by some kid from the street


wrong fs-permissions

man chmod
man chown
man chgrp

"chmod -R", "chown -R" and/or "chgrp -r" may be your friend


this is NOT world-writeable
man chmod

0660 = owner and group write, others no access at all
0770 = owner and group write, others no access at all

------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and 
their applications. This 200-page book is written by three acclaimed 
leaders in the field. The early access version is available now. 
Download your free book today! http://p.sf.net/sfu/neotech_d2d_may_______________________________________________
Netata

World writable NAS

Kai Hendry — 2013-05-09T14:38:15

Hi there,

I'm trying to setup Netatalk for a NAS share for my members using Macs
of family to dump their photos upon.

I'm using http://pkgbuild.com/git/aur-mirror.git/tree/netatalk/PKGBUILD
and I can't work out how to make /srv/ "world writable" without login.
I.e. everyone in my LAN.

May 09 16:09:13.777071 afpd[9026] {ad_flush.c:293} (E:Default):
sys_lsetxattr("/srv/."): Permission denied
May 09 16:09:17.804457 afpd[9026] {ad_flush.c:293} (E:Default):
sys_lsetxattr("/srv/."): Permission denied
May 09 16:09:19.693729 afpd[9026] {ad_flush.c:293} (E:Default):
sys_lsetxattr("/srv/."): Permission denied
May 09 16:09:56.818136 afpd[9026] {ad_flush.c:293} (E:Default):
sys_lsetxattr("/srv/."): Permission denied

My /etc/afp.conf looks like:

[Global]
log level = default:warn
log file = /var/log/afpd.log

[nas]
path = /srv
acls = false
file perm = 0660
directory perm = 0770

Could someone please point out to a good example? Many thanks!


p.s. Once in /srv I plan to maintain images with git, as I've
documented he

Re: Kerberos authentication problems

Jaap Winius — 2013-05-09T00:16:27

Quoting Jaap Winius <jwinius< at >umrk.nl>:


The upgrade to Debian wheezy and netatalk 2.2.2-1 did not fix this  
problem for me. The solution was to use netatalk 3.0.3 instead.

Cheers,

Jaap

------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and 
their applications. This 200-page book is written by three acclaimed 
leaders in the field. The early access version is available now. 
Download your free book today! http://p.sf.net/sfu/neotech_d2d_may

Re: Trying to get Netatalk to recognize previous "._" resources from SMB and NFS

Roy Waldspurger — 2013-05-08T00:54:21

Thanks, Ralph, for the suggestion.

I'm in the process of trying to "dot_clean" all of the files.  It
successfuly moves the "_." metadata into the Solaris extended attributes,
but fails after some point due to permission issues.  I'm guessing,
possibly some ACLs -- I'm just not sure.  So I'm cleaning off the ACLs
which I'm not as of yet really using.

We'll see.

Re: Trying to get Netatalk to recognize previous"._" resources from SMB and NFS

Ralph Böhme — 2013-05-07T13:57:50

Am 07.05.2013 um 15:52 schrieb Roy Waldspurger <roy< at >frameandfocus.com>:


you could try with dot_clean from a Mac.

-r

Trying to get Netatalk to recognize previous "._" resources from SMB and NFS

Roy Waldspurger — 2013-05-07T13:52:52

HI,

I've recently installed netatalk using the Napp-IT appliance for OmniOS
(Solaris).

I would like to migrate a drive of data previously encoded by macs (10.8.x)
running Samba and NFS for use with netatalk, but retain the previous
resource information stored in the "._" files -- e.g. file colors, etc.

I'm having difficulty despite trying several afp.conf config options to get
the netatalk volume to recognize the previous resource fork info, and
vice-versa.  I thought this should work, but perhaps I'm mistaken.

I'm running netatalk version 3.0.3, and my Napp-IT appliance shows the
following compilation options:

afpd has been compiled with support for these features:
AFP versions: 2.2 3.0 3.1 3.2 3.3
CNID backends: dbd last tdb
Zeroconf support: mDNSResponder
TCP wrappers support: Yes
Quota support: Yes
Admin group support: Yes
Valid shell checks: Yes
cracklib support: No
EA support: ad | sys
ACL support: Yes
LDAP support: Yes
D-Bus support: No
DTrace probes: Yes

The resource fork information seemed to

Re: Post-mortem on corrupted Time Machinesparsebundle?

Timothy Normand Miller — 2013-05-04T12:59:32

The network router between the Mac and the Linux server is an Airport
Extreme Base Station.  So if it's the router, then it's still Apple's
fault.  :)


On Fri, May 3, 2013 at 8:46 PM, NoFlash - Grzegorz Zdanowski <
grzegorz< at >noflash.pl> wrote:

Re: Post-mortem on corrupted Time Machinesparsebundle?

NoFlash - Grzegorz Zdanowski — 2013-05-04T00:46:16

So much also depends on router. For now I have PCI-Ex card in AFP server
which works as an router and I've got zero corruptions since december.

---
Greg


2013/5/3 Joseph Goodstein <joegoodstein< at >gmail.com>

------------------------------------------------------------------------------
Get 100% visibility into Java/.NET code with AppDynamics Lite
It's a free troubleshooting tool designed for production
Get down to code-level detail for bottlenecks, with <2% overhead.
Download for free and get started troubleshooting in minutes.
http://p.sf.net/sfu/appdyn_d2d_ap2_______________________________________________
Netatalk-admins mailing list
Netatalk-admins< at >lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/netatalk-admins

Re: Post-mortem on corrupted Time Machinesparsebundle?

Joseph Goodstein — 2013-05-03T21:47:02

http://developer.apple.com/library/mac/#documentation/networking/conceptual/afp/AFPVersionDifferences/AFPVersionDifferences.html

AFP Replay Cache was available in Leopard forward. Leopard had AFP version 3.2+

Snow Leopard introduced AFP 3.3, which mandated support for AFP replay cache.

AFP 3.3 was introduced in Netatalk 2.2: http://netatalk.sourceforge.net/2.2/ReleaseNotes2.2.0.html

In Netatalk 2.2 you used options:tm in AppleVolumes.*
http://netatalk.sourceforge.net/2.2/htmldocs/AppleVolumes.default.5.html


On May 3, 2013, at 11:43 AM, Timothy Normand Miller <theosib< at >gmail.com> wrote:


------------------------------------------------------------------------------
Get 100% visibility into Java/.NET code with AppDynamics Lite
It's a free troubleshooting tool designed for production
Get down to code-level detail for bottlenecks, with <2% overhead.
Download for free and get started troubleshooting in minutes.
http://p.sf.net/sfu/appdyn_d2d_ap2_______________________________________________
Netatalk-admins

Re: Post-mortem on corrupted Time Machinesparsebundle?

Timothy Normand Miller — 2013-05-03T18:43:41

I mean, Lion (or was it Snow Leopard?) added features to AFP that were
required in order to support Time Machine.  Leopard didn't have that
requirement and worked with Netatalk 2.x.  Later MacOS required the newer
AFP protocol, thereby requiring Netatalk 3.x (and that time machine option
to be enabled, of course).


On Fri, May 3, 2013 at 2:37 PM, Joseph Goodstein <joegoodstein< at >gmail.com>wrote:

Re: Post-mortem on corrupted Time Machinesparsebundle?

Timothy Normand Miller — 2013-05-03T18:40:54

Yes, thank you.  I forgot about that.  The first time the sparsebundle got
corrupted, I had actually found that very web page and applied those steps.
 Fsck complained about some very specific things being damaged beyond
repair.  I assumed that the same problem occurred this time, but that's not
the case.  By following the advice on that web page, I was able to
successfully repair the sparsebundle.  (Or at least, the fsck has completed
successfully; I haven't completed all the steps just yet.)


On Thu, May 2, 2013 at 5:31 AM, Joseph Goodstein <joegoodstein< at >gmail.com>wrote: