IBM Open Sourcing AFS 96
Erik from IBM wrote to us to confirm that IBM will be a "open sourcing" AFS. What's actually going is that they are forking the code, as not all of the code can be opened for "technical or licensing reason". So, there will be IBM AFS, which they will support, and Open AFS which will be the open code. The license is going to the be the IBM Public License which is an OSI approved license. Overall good news for a very scalable, secure file system.
Re:When is this going to end? (Score:2)
to the underlying lvm system. It lets you
do things like
Re:Lotsa licenses (Score:1)
They've released stuff under it before, including the jikes compiler. Though they have released stuff under the GPL when neccessary (like the Haifa optimizations to gcc).
Personally, I agree with you, I think that BSD, GPL, and LGPL cover at least 95% of all code released under these other random licenses. But, hey, as long as it's free, right?
Re:Lotsa licenses (Score:3)
Here [ibm.com] is a link to the IBM public license.
I guess people keep having to come up with their own licenses all the time, as the GPL isn't GPL'd. :-) Anyways, I doubt that the IBM legal department would be all that happy if people just started releasing code under of the shelf licenses - aside from many concerns they may have about the license, it would make them rather redundant!
At a glance, the licence looks quite GPL-ish to me, ie if you redistribute you must make source available& the license, or an equivalent one, propagates.
cheers,
G
Re:Why? CODA (Score:2)
Absolutely. It was extremely stable in my experience and I haven't really looked too closely at it for a year or so. (It has some other drawbacks that make it less than ideal for my personal use.)
The "worst" thing about Coda is not its maturity or stability, IMHO, it's all "ease-of-use" problems, in that it really isn't very. It took me a couple days just to understand it well enough to try to start getting a primary server up. Trying to set up a replicated secondary server was quite a chore.
As I said before, it's been a while since I've looked at it, so that might have gotten better as well.
-=-=-=-=-
Re:This will be good news, if they do it (Score:1)
you probably don't want AFS (Score:4)
AFS may be acceptable for specific applications (in fact, what it was designed for originally): a large untrusted user population, dedicated system management staff, and smallish files and problems (text file editing, small programming jobs). But for many environments where Linux is used--big software development projects, web servers, scientific computing, home networking--it just doesn't seem like a good fit.
If it's the security you care about, NFSv4 might be for you, although it clearly also has some problems. If you want something AFS-like, Coda might be an option (but I don't know how mature it is yet). MFS and GFS are options for compute clusters. Maybe we can get 9P or Styx up on Linux.
Re:you probably don't want AFS (Score:1)
Um, no, they haven't. I was talking to a guy from the IBM JIT team, and we discussed AFS - it is still used extensively by IBM for their internal network. He wasn't overly impressed with it, but we agreed it does have its uses.
Perhaps someone from IBM can confirm this?
Re:AFS Client availability (Score:1)
And IBM is distro neutral. (Score:2)
"We realize we are the 800 lb. gorilla here, so our manners must be impecable."
And they have been! Amazing, just amazing.
Re:When is this going to end? (Score:1)
Bye
Too little, too late? (Score:4)
As someone who has worked with AFS for the past 8 years, I have to say that I greet this announcement with a somewhat more pessimistic view.
Namely: AFS is now officially dead.
I say "officially" because, IMO, AFS is already dead, and has been for years (ever since Transarc (now IBM Transarc Labs, but I'll refer to them as Transarc for brevity)) came out with DCE/DFS, really).
Oh, there were bouts of heavy maintenance and limited development. These periods were inevitably precipitated by Transarc's AFS customers becoming vocal and complaining. But when the complaints died down, so did Transarc's commitment.
Transarc has never treated AFS like a real product. Their "development" efforts have been limited to ports to new versions of the same operating systems, a few ports to new architectures, bugfixes, and very limited feature additions (mostly backports from DFS).
In fact, this year has seen Transarc's AFS support sink to a new low. From what I've been able to garner, all AFS development is being outsourced to India. Responses from Transarc's AFS hotline support (a support service which customers purchase!) have been inept. There was no Decorum (Transarc's yearly AFS conference) this year, nor even an announcement concerning it. It's been ages since anyone from Transarc has posted on the AFS mailing list.
So, why is Transarc (now IBM Transarc labs) open-sourcing AFS? For one simple reason: AFS is IBM's red-headed stepchild, and they don't know what else to do with it.
If you read the announcement at http://www.transarc.com/News/pre ss/opensource.html [transarc.com], you'll note this entry in the FAQ:
Good software grows or dies. AFS died a long time ago. I, personally, think this is tragic, because AFS had great potential. But Transarc never made a long-term commitment to anything other than keeping it on life support. Perhaps it can be resuscitated back to health, but I can't help but wonder if the Open Source community's effort would be better spent towards other distributed filesystems efforts, such as CODA [cmu.edu] (which I admittedly haven't investigated, but plan to).
Re:you probably don't want AFS (Score:1)
Yes, as if the Linux crowd didn't already have
that problem for a long time (except Alpha folks)
so I can't imagine why the slashdot community
would see _this_ issue as a big one. I mean,
clean up your own act first...
Re:you probably don't want AFS (Score:3)
> directories only, access is determined only by the containing directory,
Think about hard links: that's why it works this way.
> if multiple clients modify the same file, updates are lost
That's not entirely true but I agree it's stupid. Anyway, it doesn't matter, if you don't use file locking you should expect corruption anyway.
> you can't have any special files in an AFS file system
I hope you don't expect your users to be able to create
> AFS uses its own authentication
Yes, it's called Kerberos... ever heard of it?
> it doesn't work well for big files
It works reasonably well with big files, unlike Coda which unfortunately doesn't work at all with them. Anyway for huge amounts of data you shouldn't be creating massive files anyway, look into databases or steaming software.
> it always requires extra work to get it to work with daemons
You mean you want root on a given machine to have "root" in your whole enterprise?
> and it has severe problems for scientific compute clusters
What, rsh doesn't work? Just patch it and it works fine. Otherwise what's the problem?
> IBM has long ago moved onto DFS
No they haven't
> (unrelated to Microsoft DFS)
Thank god. But I'm glad Microsoft has finally invented the automounter.
> which fixes many of the problems of AFS (but is itself big, even more complex than AFS, and hard
> to administer).
And nobody uses it...
> Many places are trying to get rid of AFS because it's just too much of a hassle to run it
There really is no better alternative, though.
> (and converting back to a UNIX file system isn't easy because AFS encourages permissions and ACLs
> to mushroom unnecessarily).
You mean it encourages security?
> AFS may be acceptable for specific applications (in fact, what it was designed for originally): a
> large untrusted user population, dedicated system management staff, and smallish files and
> problems (text file editing, small programming jobs).
It lets you solve problems on a big scale. I hope the open source release will make it even better and more available for everyone to use.
> But for many environments where Linux is used--big software development projects, web
> servers, scientific computing, home networking--it just doesn't seem like a good fit.
Big software development is one of the first things AFS was used for. It's only recently, ironically, that local disks+Linux have outperformed network file systems so much.
AFS makes sense on web servers for replicating site data and allowing many people to "upload" without the insecurity of FTP.
And I don't see why anyone wouldn't want to use AFS at home. Again, I hope the open source release will allow as many people to have real security in network filesystems as possible.
> If it's the security you care about, NFSv4 might be for you
Whenever that will be available...
> If you want something AFS-like, Coda might be an option (but I don't know how mature it is yet)
Coda is nice but not packaged well enough for everyone to start using it. It also chokes on big files much worse than AFS, unfortunately.
> MFS and GFS are options for compute clusters.
They're nice for high bandwidth to big files. But they give you no security... do you really want a root exploit on one machine in a cluster to destroy all data in the entire site?
Re:Silverwear (Score:1)
you'd still not get everything, like the efs/xfs
that's needed to run a AFS server on Irix. My
guess is that those parts are what keeps them
from releasing everything. What you _did_ get
if you had a source license was enough to make
yourself a server and clients.
Re:At this rate... (Score:1)
Re-Releasing as GPL. (Score:1)
from IBM's licence page. [ibm.com]:
2. GRANT OF RIGHTS
Is there anything in the licence that prevents me to simply re-licence the code as GPL [gnu.org]
--
Why pay for drugs when you can get Linux for free ?
IPL & Linux (Score:3)
Incidentally: for those of you claiming that AFS is obsoleted by Coda, think again. There's no way I could get my employer (one of the biggest Internet providers out there) to buy into Coda at this stage of development. AFS on the other hand they would /definitely/ go for. The biggest problem has been that IBM doesn't really push it, so it's hard to get executive attention for it. If it's oss, I don't need executive attention -- I just do it.
--
Try killing a free software... (Score:1)
Then you would have to hount ALL the copies of the source-code on the earth and burry them in the dirth... And a few months later someone would dig it out again. I do not claim that AFS will re-emerge as a next big thing now, but if there is freely available code, someone will hack on it.
Since there seams to be a base of users ready to actually PAY for maintainance, it is very likely that some programmers may even end-up beeing payed to work on AFS in the future... It does not look so dead to me...
Link to announcement (Score:3)
Re:This will be good news, if they do it (Score:2)
-Erik (from IBM)
Re:When is this going to end? (Score:1)
Re:Once again...oh, puh-leeze (Score:1)
Re:Lotsa licenses (Score:1)
Re:AFS isnt dead (Score:1)
[casey@pisces:~]$ uname -a
/dev/hd4 16384 7152 57% 1110 28% /
/dev/hd2 1712128 27072 99% 23282 11% /usr
/dev/hd9var 8192 4848 41% 206 21% /var
/dev/hd3 24576 23080 7% 59 2% /tmp
/dev/hd1 245760 73720 71% 4310 15% /home
/dev/lv00 32768 29328 11% 2519 62% /usr/vice/cache
/dev/vardce 24576 17752 28% 68 2% /var/dce
/dev/dfscache 204800 38904 82% 5139 20% /var/dce/adm/dfs/cache /... /afs
AIX pisces 3 4 002046657000
[casey@pisces:~]$ df
Filesystem 512-blocks Free %Used Iused %Iused Mounted on
DFS 18000000 18000000 0% 0 0%
AFS 144000000 144000000 0% 0 0%
[casey@pisces:~]$
my comments are mine alone and do not represent IBM's
Re:Glancing at the FAQ (Score:1)
This [angelfire.com] takes you straight to the answer to my question!
Re:Why? CODA (Score:1)
--
Re: Lotsa licenses -- TMTOWTDI (Score:1)
AFS is rough to configure, on purpose I think.
Re: (Score:2)
Re:At this rate... (Score:1)
jeb.
IBM + OpenSource = $$$IBM$$$ (Score:1)
Not only is this great PR for IBM, but this also means that IBM has just scored another brownie point with the Free Software community, and will still probably sell more licenced copies of AFS then they did before. In the end, IBM wins a lot every time opens software.
Honestly, I don't disapprove of this, its a good buisness model, and I hope more companies follow suit. Its a win-win situation for all involved parties.
Re:They don't fully get it. (Score:1)
--
Why this has so much potential for good. (Score:4)
Now, it's not a perfect product, but it is way cooler than vanilla NFSv2 or NFSv3, especially on the server-side management side of things. It doesn't do disconnected operation (which CODA strives to do), byte-range locking, strict UNIX file semantics (data most recently written == data viewiable by all file handles to that file), or Kerberos 5, but it is a far simpler system to get running than DCE, which does address some of those issues.
One would hope to see the following things from this open sourcing:
If the MacOS X client happens, then there will be a secure, scaleable enterprise filesystem for the three major computer platforms -- Wintel, UNIX, and Mac, and it'll even be freely available! I don't believe that there are any products available today that offer secure, robust support for all three platforms (and no, I don't consider protocol translators, such as Samba or CAP, which require you to set up the clients to use cleartext passwords over the wire to authenticate (not to downplay in any way the role of either technology -- it's not their fault that you've got to set up the clients in that fashon to interoperate with AFS as it is now), or using NFSv2 or v3 on the UNIX end to talk to something like Novell 5 (which, AFAIK, doesn't talk at all to Macs anymore)).
This will give us one protocol on the wire, multiple server-side implementations (interoperable in the same cell!), multiple client-side implementations, WAN scalability, and secure authentication. A good day for the world!
Re:Why? CODA (Score:1)
Re:you probably don't want AFS (Score:1)
Couple this with having the content in a read-only replicated volume, then go ahead and update many files, get your new site look-and-feel redone, then once your happy with it, release the read/write volume for replication, and pow -- one atomic transaction to all of the mirroring servers on the WAN!
Mabye this is why AFS is a major component of IBM's Websphere platform. All of this, currently working like a champ, and it'll be free and open source!
Re:you probably don't want AFS (Score:1)
I agree that AFS isn't meant for clustering, but it works well from a security standpoint, especially with Kerberos.
--
Re:Just a note... (Score:1)
Re:Lotsa licenses (Score:1)
Re:Why? CODA (Score:1)
At UKUUG this year, Owen LeBlanc [ukuug.org], a Coda expert if there ever was one, said "if you have a small number of users and a relatively small amount of data, then Coda may be just what you need". I also seem to recall him saying he thought AFS is pretty darn nice. He'd be the one to know.
--
Re:Once again... (Score:1)
When you're at a company where you have to use AFS and have to run an old Linux kernel to get AFS support, you'll realize that this is a good thing.
Hmm, you guys should have bought the source license then. (I realize the added cost, but it's worthwhile.) I've been building AFS for every version of the Linux kernel(offical and not) that we run.
IBM Public License vs. GPL (Score:3)
Any contributions become IBM's property (Copyright IBM, All Rights Reserved)
You can charge $ for the program (although you must provide source) unlike the GPL (cannot charge for the actual code, only related services)
I know the main reason IBM doesn't like the GPL is the 'Viral Effect' where code that uses GPL'd code must be GPL'd itself (unless it dynamically links?), but it kinda (?) looks like the IBM Public License has the same problem...?
Re:And IBM is distro neutral. (Score:1)
Re:you probably don't want AFS (Score:1)
Hmmm... Don't know if I'll do that. I've got some steaming *hardware* which I iron my shirts with though!
Thimo
--
Re:Once again... (Score:1)
Email me.
Don't trust anyone over 90000.
Re:AFS Client availability (Score:1)
I know that Windows 9x's LFN support allows such filenames (I've got one such file on my system right now), though their 8.3 components look slightly ugly.
-- Sig (120 chars) --
Your friendly neighborhood mIRC scripter.
Re:AFS Client availability (Score:2)
Couple that with Explorer's insistence on determining a filename by the extension, and hiding the extension by default. That way, a file like ".signature" appears as "" (blank) unless you change your settings.
So yes, you're right in that NTFS will let you create such a file, but the UI will effectively discourage you from doing so.
Where is the story? (Score:1)
Where's the beef?
Lotsa licenses (Score:4)
Opening up the code for anything (even if MS did it) is a good deal, I'm just wondering about everyone wanting to write their own license. Until I followed this link I wasn't even aware that there was an IBM Open Source License. Why is it that the BSD license or the GPL wouldn't work? Even under those they could have kept the some parts of the code closed....or am I wrong somewhere?
AFS (Score:1)
Excellent (Score:3)
Re:Conspiracy, anyone? (Score:1)
Re:GPL allows you to charge for software (Score:2)
I thought this too, at first, until my company lawyer pointed out term/condition 2a in the GPL
"You must cause any work that you distribute or publish...[that contains GPL'ed code]...to be licensed as a whole at no charge to all third parties..."
You can charge for associated services, such as a transferral charge, warranty, etc. But you can't charge for the code itself.
At least, that's what my company's lawyers have concluded, according to what they told me. I work for IBM.
This will be good news, if they do it (Score:5)
But when Linux incorporates this, it will be a lot easier to cluster servers, and share files. And maybe we can kiss of NFS forever.
Re:This will be good news, if they do it (Score:1)
AFS vs. NFS (Score:1)
I've messed with AFS more than i have NFS (as a student manager at college), so I kinda know what it can do. And i've setup and used NFS.
Could somebody explain the differences (advantages/disadvantages) between AFS and NFS?
Is there anything better in AFS from which NFS could benefit - or vice-versa?
Justin
They don't fully get it. (Score:2)
Re:This will be good news, if they do it (Score:1)
When will AFS code be available to open source?
The AFS source code will be made available next month (Sept 2000) in the IBM DeveloperWorks Open
Source Zone (stay tuned to: http://oss.software.ibm.com/developerworks/openso
Re:Lotsa licenses (Score:1)
Yay! (Score:1)
Re:Once again... (Score:1)
Sure. It's called successful PR. How much do you think a marketing campaign costs? Millions donated to reach geeks all over is as effective as any TV ad you could ever produce, and much less expensive.
You mean to say, 'Them opening up this file system may be useful to some people, especially since it does not affect IBM other than by generating good PR.'
Should I then also fail to mention that they are both monolithic giants whose sole purpose is to make money? That IBM coined the term 'FUD' to describe their past activities? Or that IBM succeeded where MS didn't, in resisting the attack of the DoJ for monopolistic practices?
Re:Excellent (Score:2)
I suppose since there are still parts that can't be opened in the "real" AFS, the arla guys might be able to contribute in those areas of the code. Who's to say that the arla developers didn't have some ideas that were better than the original implementation anyway, ala SAMBA?
Re:Once again... (Score:2)
Finally, a modicum of intelligence; thank you. I never said IBM is not helping out the Open Source community; I'm saying they're doing it for reasons that are as selfish and as profit-oriented as MS. They just orient it towards techies by playing on their Open Source sensibilities, and obviously it's working well.
What they're *not* releasing (Score:1)
Re:AFS vs. NFS (Score:1)
AFS: Allows user-controllable access control lists
NFS:
Scalability:
AFS: Thousands of volumes, users, and clients? Ok!
NFS: *choke*
AFS is great in that it works, and is really the only mature, well-tested large-scale file system out there. It is horrible in that IBM has killed development on it since it bought Transarc. It usually takes 6-12 months these days between when a new Solaris release is out and when Transarc ports the AFS client to it.
Maybe they figured that if they open source it, they can move those two contract programmers they have doing the ports elsewhere, and just have random AFS sysadmins do the work for them.
GPL allows you to charge for software (Score:1)
With the GPL you may charge for the program. After you give them the program though you have to offer to give them the source for no charge besides the cost of materials, shiping and handling.
From the GPL:
"You may charge a fee for the physical act of transferring a copy, and you may at your option offer warranty protection in exchange for a fee."
" b) Accompany it with a written offer, valid for at least three years, to give any third party, for a charge no more than your cost of physically performing source distribution, a complete machine-readable copy of the corresponding source code, to be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange;"
The right to sell software is a very important one. This is what made the old version of mySQL non-free (now mySQL is GPL).
Re:AFS Client availability (Score:2)
Re:Once again... (Score:1)
As for the difference between IBM and M$, IBM (at least now) makes money leagally. With M$ it's questionable (and if the current ruling stands, then they *are* making money illegally).
So the bottom line is, just because they do it only for money doesn't mean that it's not good for the people receiving it.
Re:Once again... (Score:2)
Re:AFS Client availability (Score:1)
Re:you probably don't want AFS (Score:2)
My point was not that IBM has somehow discontinued AFS (clearly they haven't), my point was that IBM themselves has recognized the technical problems that AFS has and tried to address many of them with DFS.
As one of the architects designing DFS in IBM (Score:4)
Once again AFS open source can only be a good thing - it will propagate a great technology into large sites where they would shied away from it previously.
Re:GPL allows you to charge for software (Score:1)
In section 1 it says:
"You may charge a fee for the physical act of transferring a copy, and you may at your option offer warranty protection in exchange for a fee."
This means that I can charge an arbitrary amount of money for the GPL program I downloaded.
Section 2b (not 2a) that you are refering to says:
"b) You must cause any work that you distribute or publish, that in whole or in part contains or is derived from the Program or any part thereof, to be licensed as a whole at no charge to all third parties under the terms of this License."
The key word is "licensed." 2b does not describe the act of selling someone a program. It describes the charge for lisencing the program. It is simply another way of saying that the program MUST be GPL. You can sell the program but you MUST license the program under the GPL at no cost.
A theoretical situation where this might occur is if I say, "This program is released under the NPL license if you want the program released under the GPL send me $5." If I had included GPL code in the program that would be illegal.
Re:you probably don't want AFS (Score:3)
For serious wide area, distributed authoring, no distributed file system, no matter how good, is going to be adequate by itself. Distributed authoring requires workflow support, version and revision control, support for disconnected operation, and other features. For that, something like WebDAV or CVS are more appropriate choices.
Don't get me wrong: AFS isn't all bad. Some of its core ideas are really great. But some of its practical aspects (e.g., differences in semantics from UNIX, simplistic caching strategy) make it a pain and rather inefficient in many real world settings. There are some areas where people can live with those limitations (e.g., university computer labs), but I think for most environments, NFS and SMB, despite their many warts, are still more practical systems.
Re:Lotsa licenses (Score:1)
Re:Once again... (Score:2)
Why? CODA (Score:2)
Coda is reaching a point of stability and availablity that it's nearly ready for widespread production deployment.
It appears that IBM has sensed the death of AFS coming and is now trying to buy some time.
I suggest we all just ignore this AFS announcement and stay focused on coda.
Silverwear (Score:1)
'What's actually going is that they are forking the code, as not all of the code can be opened for "technical or licensing reason". '
I guess if you can't knife it or spoon it... then just FORK IT.
Re:Why? CODA (Score:1)
I've been wanting to set up a centralized, non NFS based file system for my lab for years, and CODA has been "almost there" for a while.
Is anyone seriously using CODA in small production deployments yet? I'd love to know, 'cause I'd love to use it....
Just a note... (Score:2)
Porting AFS as well might slow JFS still further, until both teams are tripping over each other.
(If anyone from IBM is reading this, the problem is a read lock error on linux-2.2.12/fs/jfs/utils/extendfs)
I would -love- it if IBM saw fit to put JFS and AFS on Sourceforge or some similar development site. Open Source projects should not simply be Open, they should be =SEEN= to be Open. A problem I suspect many a project has faltered over. It would also allow developers to concentrate on the development and not on maintaining servers as well (unless they wanted to, which is different from feeling like they need to!)
Re:AFS vs. NFS (Score:2)
Re: Lotsa licenses -- TMTOWTDI (Score:3)
I'm just wondering about everyone wanting to write their own license.
{sigh}
When Larry Wall notes 'There's More Than One Way To Do It', we cheer and write folk songs. When IBM says that the GPL isn't right for what they want to do, we get a bad feeling in the pit of our collective our stomach. Why?
Not everything needs to be GPL. Not everything should be GPL. Let's not make the license the issue. Let's talk about what a great product AFS is and how much a pain in the buttocks it is to configure it correctly.
InitZero
Re:Why? CODA (Score:2)
Re:Ha you lame troll (Score:1)
May be the best they can do, and they do a lot... (Score:2)
The wonderful ferroconcrete world we live in has more lawyers than rats. There are patents underlying the most obvious software designs (yes, a simple lawsuit showing prior art will defeat three quarters of them, but I for one won't spend my life savings on them, and companies with pockets that are deep enough prefer not to invalidate competitors patents for fear of getting blasted themselves).
Patent issues aside, there's the legal debate about licenses. If we (the Open Source developers) cannot put our legal squabbles aside (my license is more free than yours -- no, mine is), how would anyone expect to put big business to put theirs aside? Beside ego, they've got shareholders to take into account.
I've been mighty impressed with IBM's venture into the Open Source arena. I think they've taken the boldest steps of all. It's not just half-baked Java stuff (with tremendous investments behind them) or stuff without direct revenue potential (like jfs, which they couldn't sell as long as competitors think their mouse trap is better). If you search for "IBM Visual Data Explorer" on www.ibm.com, you'll get a price list with a rather hefty price tag (and if you dig deeper, you'll find an impressive array of Fortune 500 companies and research institutes that paid those prices and got their moneys worth). If you look at opendx.org [opendx.org], you'll see the same software, free. The stuff is awesome!
Whatever their motivation, I rate IBM highly for its commitment to Open Source. It's a rather stunning move, given their revenue streams and the fact that they spearheaded the move from free to paid-for software eons ago.
Re:you probably don't want AFS (Score:1)
_joshua_
Conspiracy, anyone? (Score:1)
Re:Why? CODA (Score:1)
The _real_ reason why they forked it (Score:2)
if you can't knife it or spoon it... then just FORK IT.
They couldn't "spoon it" because... (everybody say it with me) <matrix>there is no spoon.</matrix>
adopt a NORMAL bird
<O
( \
XGNOME vs. KDE: the game! [8m.com]
Mozilla (Score:2)
Releasing only part of the codebase as free software is what Netscape had to do to get the first Mozilla releases out the door. If you remember, half of Netscape 4 was proprietary licensed crap, which is part of why it took Mozilla so long to get a working Internet client out the door.
GO MOJIRA!
<O
( \
XGNOME vs. KDE: the game! [8m.com]
Re:you probably don't want AFS (Score:3)
Specifically, you need to stash a password away such that the daemon can authenticate and periodically reauthenticate so that it does not lose the rights that it has.
AFS does allow you to have ACL's based on IP address. As such, if you are running a daemon on a machine than only system administrators have access to, it may not be a big deal to allow everyone on that machine to write to a directory. Other machines, though, may have read-only or no access to the directory.
NFS 4 will have the same problem, as a requirement for it is that Kerberos V is supported as an authentication mechanism. If you don't give world write to a file/directory, then you cannot write to it without a kerberos V ticket.
Re:you probably don't want AFS (Score:3)
The fact is that people do deal with gigabyte files over networked file systems (video editing, scientific datasets, server logs, etc.), they do run UNIX installations that don't use AFS Kerberos as their authentication method, they do need to create named pipes and UNIX domain sockets on networked partitions, and they do expect that UNIX access semantics are preserved when using remote files. AFS fails to deliver on all of those. The AFS designers simply thumbed at UNIX semantics and didn't give a damn.
NFS does deliver on all those points. For small and mid-size installations, NFS management is pretty simple, and NFS security is getting better and less of a problem with switched Ethernets anyway.
The suggestion that AFS is good for content distribution to web server farms also strikes me as silly. Installing AFS to achieve synchronization between web servers is like driving a truck to pick up a carton of milk. rsync and similar tools are much simpler to deploy and much more flexible.
People can get excited about whatever they want, and if AFS makes you happy, great! I have used AFS for many years, and my recommendation is that people should look at its incompatiblities and quirks very carefully. I think for most UNIX environments, it is not a very good choice.
But what this announcement may mean is that, after years of neglect, maybe people will roll up their sleeves and fix those rather serious problems that AFS has. Then, it could potentially become a good distributed file system. Until then, it is a solution that, in its own way, is as flawed as NFS, and quite a bit more work to manage.
At this rate... (Score:2)
On the other hand, if somebody will get round to Kenobi-izing Linux (OB1 is SGI's B1 set of patches, which need porting), then AFS + OB1 could make Linux THE platform of choice for secure installations.
Finally, if the Linux kernel is audited, we could see Open Source =genuinely= dominate the world, as it'll be the only widely-usable OS that is secure and stable.
(For BSD purists, I accept that OpenBSD is one very secure system, and TrustedBSD & SecureBSD are extremely promising ideas. However, general users have enough trouble handling real life. Why else print directions on a packet of toothpicks??? They are certainly not going to contend with all of the challanges the BSD installers have to offer, never mind the subtle but significant change in mindset. BSD, for now, is mainly a server OS, which means that it isn't "widely-usable". Usable, sure. Secure, certainly. Stable, without a shadow of doubt, but not widely-used.)
Re:Once again... (Score:3)
Re:Once again... (Score:3)
Them opening up this file system can be useful to everyone, despite the fact that this may not affect IBM one way or another.
But to mention IBM and Micros~1 in the same sentence is almost criminal.
Glancing at the FAQ (Score:1)
AFS has server based drive mappings instead of client based drive mappings like NFS does.
AFS has kerberos for better security.
There's more at the AFS Faq. [angelfire.com]
Re:AFS vs. NFS (Score:1)
Re:Once again... (Score:1)
Seriously though. AFS is everything NFS fails to be. Load balancing, client side caching, easy client config, and security. AFAIK It has been a marketplace failure. They should have at least made the client free years ago. Certainly, IBM won't likely notice the lost revenue.