Re: OpenAFS and VPN

Check to make sure the OpenAFS kernel module is loaded and the afsd
process is running.  You can check the kernel log (dmesg) to see if
OpenAFS has started. =20

Next I would check to see if there are any firewall rules that are
blocking the OpenAFS ports (udp 7001).

--=20
Cheyenne Wills
[email protected]



On Fri, 6 Jun 2025 12:36:26 +0200
Martin Podworny <[email protected]> wrote:
> Hi,
>=20
> we have been running an AFS-Cell on Debian for years without any
> problems.
>=20
> Now we had to upgrade the Debian-Cellserver from Debian 9 (Stretch)
> via Debian 10 (Buster) and Debian 11 (Bullseye) to Debian 12
> (Bookworm). We only use standardized packages from the Debian
> repositories.
>=20
> The problem we have now is that clients that are connected from the
> University's VPN can obtain a Kerberos ticket, but they cannot fetch
> data from cells fileserver. While the cell works flawlessly for all
> other clients.
>=20
> This behavior starts with Debian 11 which installs OpenAFS 1.8.6-5
> and kernel 5.10.237-1. On Debian 10 with OpenAFS 1.8.2 and 4.19.249-2
> everything still works, even for VPN-Clients.
>=20
> Do you have any idea how to explain or eliminate this behavior? Are
> there any correlations with kernel parameter or settings for file-
> and dbserver?
>=20
> If it is useful, i can attach some debug data from cells fileserver.
>=20
> Thank you,
>=20
> Martin
> --
> University and City Library of Cologne
> IT-Department
> Universit=C3=A4tsstr. 33 :: D-50931 K=C3=B6ln
> Tel.: +49 221 470-2593 :: Fax: +49 221 470-5166
> [email protected] :: www.ub.uni-koeln.de
> _______________________________________________
> OpenAFS-info mailing list
> [email protected]
> https://lists.openafs.org/mailman/listinfo/openafs-info