Import Debian changes 1.8.5-1

openafs (1.8.5-1) unstable; urgency=high

  * New upstream security release (Closes: #943587):
    - Fix OPENAFS-SA-2019-001, OPENAFS-SA-2019-002: information leakage from
      uninitialized RPC output variables
    - Fix OPENAFS-SA-2019-003: database server DoS (NULL dereference)
  * Configure --without-ctf-tools to allow kernel module builds when ctfutils
    are installed. (Closes: #935771)
  * Enable support for ppc64le. (Closes: #941658)

openafs (1.8.4~pre1-1) unstable; urgency=medium

  [ Ondřej Nový ]
  * d/control: Removing redundant Priority field in binary package
  * d/changelog: Remove trailing whitespaces

  [ Anders Kaseorg ]
  * New upstream release 1.8.3:
    - Miscellaneous improvements to error handling and server efficiency
      (see NEWS).
    - Support Linux 5.0.
  * Update CellServDB from grand.central.org (2018-05-14).
  * Remove custom compression settings for Debian tarball and binary
    packages.

  [ Benjamin Kaduk ]
  * New upstream prerelease 1.8.4pre1:
    - Further work to avoid spurious ENOENTs from filesystem access.
    - Fix the behavior of ptserver -restricted to match the documentation.
    - Autoconf updates and modernization. (Closes: #934758)
    - Additional miscellaneous improvements (see NEWS).
  * openafs-fileserver now depends on openafs-krb5 for akeyconvert in the
    maintainer script. (Closes: #934236)
  * Debconf translation update:
    - Danish, thanks Joe Hansen.  (Closes: #923111)
  * Backport upstream patch to require opt-in for weak crypto in aklog
    and klog.krb5. (Closes: #931819)

openafs (1.8.2-1) unstable; urgency=high

  * New upstream release 1.8.1.1:
    - Support Linux 4.18.
  * New upstream security release 1.8.2 (Closes: #908616):
    - Fix OPENAFS-SA-2018-001: unauthenticated volume operations via butc
      (CVE-2018-16947).
    - Fix OPENAFS-SA-2018-002: information leakage in RPC output variables
      (CVE-2018-16948).
    - Fix OPENAFS-SA-2018-003: denial of service due to excess resource
      consumption (CVE-2018-16949).

openafs (1.8.1-1) unstable; urgency=medium

  * New upstream release.  In addition to changes in pre2:
    - Fix issue where `vldb_check -fix` would corrupt databases with multiple
      MH blocks
    - Improved error handling when the cache partition is inaccessible
    - Improved error handling when page allocation fails
  * Supply sysname generation for arm64 to get further in the build.

openafs (1.8.1~pre2-1) unstable; urgency=medium

  * New upstream prerelease:
    - Add support for arm64
    - Improve usability of the shared libraries and public API
    - Fix volume callbacks so clients see updates after volume releases
    - Fix Rx connection refcount error that could lead to server crashes
    - Fix panic when cahe bypass is enabled
    - Use valid serial number for Rx aborts if possible (and 0 otherwise)
    - Return valid InlineBulkStatus responses in error cases
    - The fileserver rejects invalid partition names when attaching partitions
    - Improve cache manager behavior when unable to open cache files (e.g.,
      if the cache partition is remounted readonly)
    - Improve some error messages
  * Update Dutch debconf translation; thanks Frans Spiesschaert.
    (Closes: #895459)

openafs (1.8.0-1) unstable; urgency=low

  * New upstream release.  Changes since pre5:
    - Fix issues with -Wpointer-sign
    - Edits to the afsd manpage regarding the -volume-ttl feature
  * Update debian/README.source to reflect the move from Alioth to Salsa
  * Update German debconf translation; thanks Pfannenstein Erik.
    (Closes: #887663)

openafs (1.8.0~pre5-1) unstable; urgency=low

  [ Russ Allbery ]
  * Remove myself from Uploaders.

  [ Benjamin Kaduk ]
  * New upstream release candidate:
    - Update CellServDB from grand.central.org (2017-03-14)
    - Avoid rare deadlock condition when recreating a deleted file/directory
      on old Linux kernels
    - Clean up ubik DISK_ RPC behavior with respect to sending updates to
      sites that would reject the update
    - Remove includes of <rpc/types.h>, for compatibility with glibc 2.26
    - Do not include RXGEN_OPCODE when throttling clients that generate too
      many abort replies
  * Update Vcs- entries in control to reflect the move from alioth to salsa
  * Correct 1.8.0~pre4-1 changelog entry to reflect that it closed one more
    Mayhem-reported bug.  (Closes: #716446)

openafs (1.8.0~pre4-1) unstable; urgency=low

  [ Benjamin Kaduk ]
  * New upstream major release (prerelease):
    - Servers no longer use rxkad.keytab for long-term keys, which are
      now stored in KeyFileExt.  Administrators must use akeyconvert
      or similar tooling to populate the KeyFileExt after updating the
      krb5 keys in rxkad.keytab.  In most cases, `akeyconvert` with no
      arguments will suffice; that command is run automatically in the
      package's postinstall script.
    - kaserver, klog.afs, pam-openafs-kaserver, and other kauth-related
      tools are removed.
    - Server log handling has changed.  Logs are not truncated at
      startup by default, and are re-opened on SIGUSR1, to be compatible
      with external log rotation tools.
    - Client time management support (afsd -settime and afsd -nosettime)
      has been removed.
    - Linux versions prior to 2.6 are no longer supported by the client.
    - Desupport 32-bit s390/s390x
    - Most binaries now use pthreads instead of LWP green threads.
    - The fileserver ihandle fsync thread is removed.
    - Support Linux up to 4.14
    - Provide vldb cache timeout option for clients
    - Eliminate potential 100ms delay after rx receive window changes
    - Modify volume update date after salvager makes changes
    - Improve ubik safety for relabels and writes shortly after an election
    - Preserve volume stats during reclone and restore operations
    - Improve command-line parsing for various utilities.
      (Closes: #715623, #715787, #716144, #716234, #716444, #716446)
    - Fix for OPENAFS-SA-2017-001. (Closes: #883602)
    - Many other generic improvements throughout the tree; consult the
      upstream changelog for details.
  * Add versioned build-depends for renamed symbols in heimdal-multidev.
    (Closes: #848664)
  * Bump Standards-Version to 4.1.3 (no changes needed).
  * Update Dutch debconf translation; thanks Frans Spiesschaert.
    (Closes: #874280)

  [ Anders Kaseorg ]
  * Use dh_auto_configure.
  * Correct some paths in the openafs-doc packaging

openafs (1.6.22-3) unstable; urgency=medium

  * Pull in upstream patch to avoid OOPS on linux 4.14 kernels.
    (Closes: #884420)
  * Pull in pending upstream patch to include stdint.h where needed.
    This should allow Ubuntu to return to syncing openafs from Debian.

openafs (1.6.22-2) unstable; urgency=medium

  * Update Russian debconf translation; thanks Lev Lamberov.
    (Closes: #883916)
  * Pull in upstream patches to build with kernel 4.14. (Closes: #884276)

openafs (1.6.22-1) unstable; urgency=high

  * New upstream security release:
    - Fix for OPENAFS-SA-2017-001. (Closes: #883602)
    - Improved support for recent Linux versions

openafs (1.6.21-3) unstable; urgency=medium

  * Build documentation with FORCE_SOURCE_DATE=1, without which pdfTeX
    refuses to behave fully reproducibly.
  * debian/patches:
    - Linux-Include-linux-uaccess.h-rather-than-asm-uacces.patch: Fix
    build failure on s390x with Linux kernel 4.12.  (LP: #1711835)

openafs (1.6.21-2) unstable; urgency=medium

  * debian/patches:
    - AFS_component_version_number.c-Respect-SOURCE_DATE_E.patch: Use UTC
      for better reproducibility.
    - 0003-Add-dummy-exit-command-for-afsd-to-do-nothing.patch: Fix
      rebasing mistake so -exit works correctly.
    - Linux-4.13-use-designated-initializers-where-require.patch: Support
      Linux kernel 4.13.  (LP: #1706433)
  * Update Portuguese debconf translation; thanks Rui Branco.
    (Closes: #871559)
  * Update French debconf translation; thanks Alban Vidal.
    (Closes: #872026)
  * Update CellServDB from grand.central.org (2017-03-14).

openafs (1.6.21-1) unstable; urgency=medium

  * New upstream release (1.6.21):
    - Include support for Linx versions through 4.12.  (Closes: #859155)
    - Improve support for Linux kernels with backported patches.
      (Closes: #855366)
    - Improve bosserver startup behavior with unexpected arguments or
      configuration symlinks.
    - Re-enable vcache cleanup improvement from 1.6.18, with bugs fixed.
    - Provide the afsd -inumcalc option; this behavior was previously
      only configurable via sysctl.
    - The salvager updates volume "last update" times when modifying volumes.
    - Demand-attach fileserver improvements for reducing log spew and preventing
      thread exhaustion during CPS recalculation.
    - Avoid a potential 100ms transmit delay in RX when the peer's receive
      window advances.
  * Switch openafs-fileserver.service to Type=simple and pass -nofork to
    bosserver.  (Closes: #865962)
  * Update for policy version 4.0.0, honor nodoc in DEB_BUILD_OPTIONS
  * Use service(8) instead of /etc/init.d/* directly in documentation and
    helper scripts

openafs (1.6.20-2) unstable; urgency=medium

  * Build-Depend debhelper (>= 9.20160114) for dh_strip
    --dbgsym-migration.
  * debian/patches:
    - LINUX-split-dentry-eviction-from-osi_TryEvictVCache.patch,
      Reformat-src-afs-LINUX-osi_vcache.c.patch,
      LINUX-do-not-use-d_invalidate-to-evict-dentries.patch,
      afs-shake-harder-in-shake-loose-vcaches.patch: Avoid system hangs on
      busy machines due to vcache deallocation failures.
    - Linux-4.9-deal-with-demise-of-GROUP_AT.patch,
      Linux-4.9-inode_operation-rename-now-takes-flags.patch,
      Linux-4.9-inode_change_ok-becomes-setattr_prepare.patch: Support
      Linux kernel 4.9.  (Closes: #847011)
    - AFS_component_version_number.c-Respect-SOURCE_DATE_E.patch:
      Respect SOURCE_DATE_EPOCH in cml_version_number to improve build
      reproducibility.
  * openafs-modules-source: Generate /usr/src/openafs.tar.bz2
    reproducibly.

openafs (1.6.20-1) unstable; urgency=high

  * New upstream release (1.6.19):
    - Fix issue that could result in using out-of-date database versions
      in rare cases
    - Don't commit more data to a file than was actually copied during writes,
      which could happen on architectures with a page size greater than 4K
  * New upstream security release (1.6.20):
    - Fix information leakage (file/directory names) from reused directory
      buffers

openafs (1.6.18.3-3) unstable; urgency=medium

  * Drop openafs-dbg in favor of automatically generated dbgsym packages.
  * Mark openafs-doc Multi-Arch: foreign.
  * debian/patches/tests-util-ktime-t.c-Specify-EST-offset-in-TZ.patch:
    Fix FTBFS with tzdata uninstalled.  (Closes: #839481)
  * Depend lsb-base (>= 3.0-6) in openafs-client and openafs-fileserver
    for /lib/lsb/init-functions.

openafs (1.6.18.3-2) unstable; urgency=medium

  * Drop hardening-wrapper in favor of passing flags via CC.
    (Closes: #836642)
  * Clean doxyen-generated documentation with dh_doxygen.

openafs (1.6.18.3-1) unstable; urgency=medium

  * New upstream release 1.6.18.3:
    - Support Linux kernel 4.7.

openafs (1.6.18.2-1) unstable; urgency=medium

  * New upstream release 1.6.18.2:
    - Support Linux kernel 4.6.
    - Revert the vcache cleanup improvement of 1.6.18, which exposed
      another previously latent issue that wrongly invalidated the current
      working directroy on some kernels.
  * Update CellServDB to the 2016-01-01 release.

openafs (1.6.18.1-1) unstable; urgency=medium

  * New upstream release 1.6.18.1:
    - Support Linux kernel 4.5.
    - Check return value from bdi_init.
  * Import upstream Gerrit patch to allow building with Linux kernel 4.6.
    (Closes: #826922)

openafs (1.6.18-1) unstable; urgency=high

  * New upstream release 1.6.18:
    - Support for Linux 4.4 kernels.
    - Improve dynamic vcache cleanup behavior, reducing memory usage and
      avoiding a long hang when many vcaches are in use
    - Deprecate afsd -settime.
    - Failure to release a volume now reports an error back to the client.
    - Check for invalid IP addresses in the CellServDB.
    - Fix dafileserver crash experience with large volumes.
    - Close race between "umount /afs" and "afsd -shutdown".
    - Prefer -dryrun arguments to -noexecute.
    - Limit ChangeAddr RPCs to removal, to avoid database corruption.
    - Improve behavior relating to large (~2GB fetches from the fileserver).
  * Import patches from upstream gerrit to improve support for
    Linux 4.5 kernels.  (Closes: #821782)
  * Depend on sysint.target instead of basic.target in openafs-client.service,
    to eliminate dependency cycles with other services that depend on
    remote-fs.target.  (Closes: #794451)

openafs (1.6.17-2) unstable; urgency=high

  * debian/rules: Fix FTBFS when built with dpkg-buildpackage -A.
    (Closes: #806088)

openafs (1.6.17-1) unstable; urgency=high

  * New upstream release 1.6.16.
    - Fix bosserver crashes related to fixed-sized buffers.
    - Fix potential denial of service issue in pioctl logic
      (CVE-2015-8312).
    - Provide a new vos remaddrs subcommand for removing server entries.
    - Allow pioctls to work with read-only /proc (e.g. Docker containers).
  * New upstream security release 1.6.17.
    - Prevent users in foreign Kerberos realms from creating groups as if
      they were administrators (CVE-2016-2860).
    - Fix an information leak of uninitialized memory over the network.
    - Fix a crash when the AFS root volume is not found.
  * debian/patches/Linux-4.4-key_payload-has-no-member-value.patch,
    debian/patches/Linux-4.4-Use-locks_lock_file_wait.patch,
    debian/patches/Linux-4.4-Do-not-use-splice.patch:
    Add upstream patches for current Linux kernel support.  (Closes: #815521)

openafs (1.6.15-1) unstable; urgency=high

  * New upstream security release.
    - Fix data leakage in rx ACK packets, OPENAFS-SA-2015-007,
      CVE-2015-7762, CVE-2015-7763.

openafs (1.6.14-1) unstable; urgency=medium

  * New upstream release.
    - Restore support for using regexes for volume names to backup,
      accidentally disabled as part of the fix for OPENAFS-SA-2015-006
  * Update Swedish translation, thanks Martin Bagge and Anders Jonsson.
    (Closes: #781678)
  * Note that the protocol document rfc5864.txt is dual licensed.
    (Closes: #754735)
  * Supply copyright notice for systemd helper scripts. (Closes: #779170)
  * Import upstream patches to support the 4.2 Linux kernel.

openafs (1.6.13-1) unstable; urgency=high

  * New upstream security release.
    - OPENAFS-SA-2015-001 CVE-2015-3282: vos leaks stack data onto the wire
      in the clear when creating vldb entries
    - OPENAFS-SA-2015-002 CVE-2015-3283: bos commands can be spoofed,
      including some which alter server state
    - OPENAFS-SA-2015-003 CVE-2015-3284: pioctls leak kernel memory contents
    - OPENAFS-SA-2015-004 CVE-2015-3285: kernel pioctl support for OSD
      command passing can trigger a panic
    - OPENAFS-SA02015-005 CVE-2015-3286 is Solaris-specific and did not
      affect Debian
    - OPENAFS-SA-2015-006 CV-2015-3287: buffer overflow in vlserver
  * Also includes changes from the upstream 1.6.12 release:
    - Avoid database corruption if a database server is shut down and
      brought up again quickly with an altered database
    - Fix a potential buffer overflow in aklog
    - Support for Linux kernels up to 4.1
    - Avoid spurious EIO errors when writing large chunks of data to
      mmapped files

openafs (1.6.11.1-1) unstable; urgency=medium

  * New upstream release.
    - Support for Linux kernels up to 4.0.

openafs (1.6.11~pre2-1) experimental; urgency=low

  * New upstream pre-release.
    - Avoid using a stale data version in certain cases when writing
      files larger than the AFS cache, which manifested as file corruption.
    - Fix a refcount leak that could lead to panics.
    - Support newer linux versions, up through 3.19.
    - Fix some leaks and crashes in error cases.

openafs (1.6.11~pre1-1) experimental; urgency=low

  * New upstream pre-release.
    - Linux kernels up to 3.17 are now supported.
    - Fix more incorrect behavior in our revalidation of dcache entries. Bugs
      in this area can cause stale path lookups in certain situations, as well
      as cause getcwd() to fail spuriously.
    - Allow aklog to succeed in creating native K5 tokens even when K5-to-K4
      principal conversion fails.

openafs (1.6.10-4) unstable; urgency=medium

  * Update Spanish translation, thanks Javier Fernandez-Sanguino Pena.
    (Closes: #773565)
  * Import many patches from upstream:
    - Support newer linux versions, up through 3.19. (Closes: #771298)
    - Avoid some spurious getcwd() failures.
    - Improve configure test for key_type.match (which caused buggy
      behavior in certain versions of RHEL).
    - Fix a refcount leak that would manifest as an unrelated OOPS.
    - Avoid using a stale data version in certain cases when writing
      files larger than the AFS cache, which manifested as file corruption.
    This leaves us roughly equivalent to the forthcoming 1.6.11pre2
    release candidate.
  * Update CellServDB to the 2015-01-19 release.

openafs (1.6.10-3) unstable; urgency=medium

  * Make openafs-client Before=umount.target for improved shutdown
    behavior. (Affects: #760063)
  * Mark openafs-client.service as RemainAfterExit=true. (Closes: #770815)

openafs (1.6.10-2) unstable; urgency=medium

  * Some shell quoting and similar cleanups in openafs-client-precheck
    from Anders Kaseorg.
  * Make the openafs-client unit silently succeed when it is already
    running, to match the behavior of the sysV script. (Closes: #767056)

openafs (1.6.10-1) unstable; urgency=medium

  * New upstream release.
    - fix segfault with aklog -path.
  * The 1.6.10~pre1-1 changelog entry contains a full summary of changes
    in the upstream release.
  * Add a systemd unit file for openafs-client. (Closes: #760063)
    - The variables AFS_PRE_SHUTDOWN and AFS_POST_INIT from
      /etc/openafs.afs.conf are no longer honored.  They should be
      converted to the systemd format and placed in
      /etc/systemd/system/openafs-client.service.d/ ; automatic conversion
      is not possible.  In particular, the kill_all_afs functionality is
      not available.
    - The LIBAFS, MODULEDIR, and DKMSDIR settings from
      /etc/openafs/afs.conf are not used by the unit file.
    - The extra shutdown handling for when the NFS translator is used
      was not converted to the systemd format; the necessary feature
      was removed from the Linux kernel in 2008.
    - Support for cold shutdowns is removed.  They generally resulted
      only in strange failures later on.
  * Add a systemd unit file for openafs-fileserver.
  * Use heap-allocated buffers of sufficient length for realpath() in
    userok.c. (Closes: #757378)
  * Update Dutch translation. (Closes: #765083)

openafs (1.6.10~pre1-1) experimental; urgency=low

  [ Benjamin Kaduk ]
  * New upstream pre-release.
    - Linux kernels up to 3.16 are now supported.
    - The amount of free space and reported for /afs is now 2 TiB, up
      from the previous reported value of around 9 GiB.
    - Fix 'pts removeuser' behavior in the ptserver for some supergroups
      over a certain membership size.
    - Fix logging behavior when rotating logs via the "copy and truncate"
      approach.
    - Add new log messages in the volserver log and the vlserver audit log.
    - Reduce the amount of kernel stack space used in the client.
    - Improve error handling for a wide variety of cases for various tools.
    - Improve periodic hanging in the client when a large number of PAGs
      and files are in use.
    - Fix 'afs-up' to handle large ACLs correctly.
    - Fix a crash in 'aklog' when retrying ticket acquisition.
    - Fix a crash in xstat_fs_test and scout when their local port is
      already in use.
    - Fix an error in the client lock handling that prevented checking
      for the existence of write locks on readonly volumes.
    - Fix an error in the client that could cause cache inconsistencies
      if another client removed a directory entry, and recreated a
      different entry with the same name.
    - Avoid ignoring build failures during the client kernel module build
      process, hopefully leading to better error messages in some cases
      when building the kernel module.
    - Fix various possible problems when building with parallel make.

  [ Andrew Deason ]
  * Include the new volscan tool in openafs-fileserver.

  [ Russ Allbery ]
  * Retroactively add the CVE for OPENAFS-SA-2014-002 to the changelog for
    1.6.9-1.  It was assigned after the release was uploaded.
  * Add Benjamin Kaduk as Maintainer and move myself to Uploaders.

openafs (1.6.9-2) unstable; urgency=medium

  [ Russ Allbery ]
  * Retroactively add the CVE for OPENAFS-SA-2014-002 to the changelog for
    1.6.9-1.  It was assigned after the release was uploaded.
  * Add Benjamin Kaduk as Maintainer and move myself to Uploaders.

  [ Benjamin Kaduk ]
  * Apply upstream deltas to fix the build with the linux kernel 3.16
    (Closes: #762248):
    - [ea0c9d8c] Linux 3.16: Switch to iter_file_splice_write
    - [02a07404] Linux 3.16: Convert to new write_iter/read_iter ops
  * Update README.source for the gbp pq patch-management procedure.

openafs (1.6.9-1) unstable; urgency=high

  * New upstream release.
    - OPENAFS-SA-2014-002: Fix use of uninitialized memory in the host
      object in the fileserver.  (CVE-2014-4044)

openafs (1.6.8-1) unstable; urgency=medium

  * New upstream release.
    - Change the default fileserver sync behavior from delayed to
      onclose so that explicit syncing only happens when a volume is
      detached.
    - Add -offline-timeout and -offline-shutdown-timeout options to the
      fileserver, allowing interrupting of clients accessing volumes that
      the fileserver is trying to take off-line.
    - Fix RX bug that could hide errors during packet reception.
    - Fix vos size -dump display for large volumes.
    - Give up callbacks when the client is shut down.  This can cause
      crashes in old fileservers (prior to 1.4.6).
    - Restore vos e alias for vos examine.
    - Throttle byte-range lock warnings per file, and include the FID of
      the file that the client is trying to lock.
    - Avoid a possible panic during shutdown while tracing.
    - Fix a bug that could cause getcwd to fail to find parent
      directories.
    - Avoid a delay when accessing uncached data in AFS in a confined
      context under SELinux.
    - Documentation, diagnostics, and error message improvements.
  * Add Lintian override for the copy of RFC 5864, which has been
    dual-licensed by the author.

openafs (1.6.7-1) unstable; urgency=high

  * New upstream security release.
    - OPENAFS-SA-2014-001: Fix potential buffer overflow in the
      fileserver.  (CVE-2014-0159)
    - Fix a potential DoS attack against Rx servers by avoiding suspending
      the listener thread when delaying connection abort messages.

openafs (1.6.6-1) unstable; urgency=low

  * New upstream release.
    - Remove server-side NAT pings since there's no evidence they help.
  * Fix linking of /usr/share/doc directories for libpam-openafs-kaserver,
    openafs-fuse, and openafs-kpasswd.  This was broken in previous
    releases by a miswritten debian/rules override.  Thanks to Andreas
    Beckmann for finding the problem and solution.  (Closes: #736305)
  * Accept AFS_DYNROOT=true as an alias for Yes in afs.conf.client,
    matching behavior of releases prior to 1.6.2.1-1.  (Closes: #729353)

openafs (1.6.6~pre2-1) unstable; urgency=low

  * New upstream pre-release.
    - Linux kernels up to 3.12 are now supported, including kernels with
      user namespace support enabled (which affects Debian's 3.12-1 kernel
      and newer).
    - Fixed core dumps into AFS with current kernels.
    - When starting the client fails, backing device information created
      in sysfs is now properly cleared.
    - The AFS mountpoint specified in the cacheinfo file must now be an
      absolute path.
    - Stop tracking file locks on read-only volumes.  Write locks always
      fail and read locks always succeed.
    - New fs flushall command to discard all cached data.
    - Fixed a bug that could cause the client to incorrectly believe its
      cache was up to date.
    - New -rxmaxfrags switch to afsd to limit the number of UDP fragments
      sent or received per RX packet.
    - Fixed afsd threads entering an infinite loop.
    - The file server now ignores any vice partitions with a NeverAttach
      flag file present in the root directory.
    - Enabled server-side NAT pings to refresh NAT timeouts.
    - Forcing file server CPS recalculation (for IP ACLs) is now
      restricted to administrators.
    - vos examine of a volume in a transaction is now shown as busy again
      rather than off-line.
    - Multiple bug fixes to the salvager.
    - Fixed a bug that could cause state information to be discarded when
      restarting a large or busy file server.
    - Fixed a vlserver bug during file server address registration.
    - volserver supports a new -preserve-vol-stats option, which preserves
      access statistics across volume restore and reclone operations.
    - Releasing a volume after adding a new RO site no longer touches the
      existing RO sites if the volume has not changed since the last
      release.
    - Fixed undefined ptserver behavior with too many allocated PTS ids.
    - Avoid redefining assert in public header files.
    - Documentation, diagnostics, and error message improvements.

openafs (1.6.5.2-1) unstable; urgency=medium

  * New upstream release.
    - Fix support for tmpfs as the cache filesystem.
    - Support kernels with backported changes affecting getname/putname.
  * Exit successfully in the openafs-client init script if /sbin/afsd
    doesn't exist, indicating that openafs-client is not installed.
  * Load /lib/lsdb/init-functions in the openafs-client init script as the
    first step towards upstart or systemd support.
  * Update standards version to 3.9.5 (no changes required).

openafs (1.6.5.1-1) unstable; urgency=low

  * New upstream release.
    - Support for Linux 3.11 and 3.12 (up to 3.12-rc3).
    - Fixed core dumps into AFS with some Linux kernels.
  * Cherry-pick additional upstream fixes.
    - [7242e25a] Fix library ordering when building aklog.
    - [514fc63d] Fix budb crash when the -servers command-line option
      is given.  (Closes: #718253)
  * Ignore errors when reading ThisCell in the openafs-client config
    script.  If the file doesn't end in a newline, read will still succeed
    and set the variable, but will exit with a non-zero status.  This
    would abort configuration of the package without a useful error
    message.
  * Drop Recommends of libjs-jquery in openafs-doc.  We're no longer
    replacing the embedded jQuery, pending a better fix in the Doxygen
    packaging.
  * Optimize the get-orig-source target.  Thanks, Anders Kaseorg.
  * Translation updates:
    - German, thanks Erik Pfannenstein.  (Closes: #719154)

openafs (1.6.5-1) unstable; urgency=high

  * New upstream release.
    - OPENAFS-SA-2013-003: New support for non-DES enctypes in the
      long-lived AFS key.  This requires deploying rxkad.keytab files on
      each server containing all of the encryption types for the cell AFS
      key.  Once this is deployed on servers, DES will only be used for
      the session key.  Once deployed on all clients, a stronger security
      mechanism will be used that allows the DES keys to be removed from
      the AFS principal in the Kerberos KDC (but still uses DES for some
      session encryption purposes).  (CVE-2013-4134)
    - OPENAFS-SA-2013-004: Properly support the -encrypt option in vos,
      including with -localauth.  (CVE-2013-4135)
  * Move the documentation and kernel module build dependencies to
    Build-Depends-Indep and only do those parts of the build if building
    architecture-independent packages.
  * Drop the sequence numbers from the openafs-client init script
    registration.  Debian now always uses dependency-based boot ordering.
  * Translation updates:
    - Japanese, thanks victory.  (Closes: #714223)

openafs (1.6.4-1) unstable; urgency=low

  * New upstream release.

openafs (1.6.3-1) unstable; urgency=low

  * New upstream release.
    - Support for Linux 3.9 and 3.10.  (Closes: #711920)
    - Multiple fixes for use after free, use of uninitialized memory,
      and similar C memory management bugs found via code analysis.
    - Obey jumbo/nojumbo settings for Ubik (database) servers.
    - General improvements in diagnostic and log messages.
    - Avoid incorrectly sending small amounts of data over the wire
      unencrypted in some situations and report the correct error message
      in this case.
    - Avoid generating duplicate IDs for readonly and backup volumes.
    - Return quota and free space information without an access check.
    - Improve client bookkeeping in the file server, fixing several
      potential corruption and segfault issues.
    - Avoid known cases of silent data corruption in background syncs in
      the file server.
    - Run-time configuration support for fileserver synchronization.
    - Fix transient network error interference with establishing a ubik
      quorum.
    - Do not discard the persistent client disk cache on restart.
    - Fix bugs that made it impossible to unmount a disk cache file system
      after it had been used by the client.
  * Give openafs-dbserver its own documentation directory rather than
    linking it to openafs-client, allowing relaxation of the versioned
    dependency on openafs-client to Recommends.  (However, openafs-client
    will still have to be installed for the openafs-fileserver init
    script, which uses the bos binary, so will still be pulled in by
    dependencies.)
  * Cleanup of the openafs-client postinst script.
    - Perform all work unconditionally to handle various rare error
      recovery cases properly.
    - Only force creation of CellServDB on initial installation or if
      AFSDB/SRV records are not being used.
  * Remove openafs-fileserver postinst support for upgrades from ancient
    versions (1.4.4.dfsg1-4 and 1.4.11+dfsg-3).
  * General coding style cleanup of maintainer scripts.

openafs (1.6.2.1-2) unstable; urgency=low

  * Upload to unstable.
  * Translation updates:
    - Brazilian Portuguese, thanks Albino B Neto.  (Closes: #706627)

openafs (1.6.2.1-1) experimental; urgency=low

  * New upstream release.
    - Support for Linux 3.8.
  * Support configuring -dynroot-sparse via debconf.  The AFS_DYNROOT
    option in /etc/openafs/afs.conf.client is now tri-valued instead of a
    boolean, and the boolean values will be mapped to the corresponding
    options on upgrade.  Based on work by Jakob Haufe.  (Closes: #644564)
  * Translation updates:
    - Czech, thanks Martin Šín.  (Closes: #705013)
    - Russian, thanks Yuri Kozlov.  (Closes: #705159)
    - French, thanks Christian Perrier.  (Closes: #705296)
    - Portuguese, thanks Miguel Figueiredo.  (Closes: #705307)
    - Danish, thanks Joe Hansen.  (Closes: #705660)
    - Italian, thanks Beatrice Torracca.  (Closes: #705864)

openafs (1.6.2-1) experimental; urgency=low

  * New upstream release.
    - OPENAFS-SA-2013-001: Fix fileserver buffer overflow when parsing
      client-supplied ACL entries and protect against client parsing of
      bad ACL entries.  (CVE-2013-1794)
    - OPENAFS-SA-2013-002: Fix ptserver buffer overflow via integer
      overflow in the IdToName RPC.  (CVE-2013-1795)
    - Fix aklog warning about allow_weak_crypto.
  * Update CellServDB to the 2013-01-28 version.
  * Fix DKMS builds of the OpenAFS kernel module for amd64 kernels on the
    i386 architecture by parsing the kernel version for the architecture
    and kernel class and using that to tell the OpenAFS build system what
    sysname to use.  Patch from Thorsten Alteholz.
  * Avoid re-running setup after build when building modules from the
    openafs-modules-source package with module-assistant.  This will
    hopefully avoid an issue where, following an upgrade of
    openafs-modules-source, module-assistant cannot build new module
    packages without an intervening module-assistant clean.  Patch from
    Thorsten Alteholz.  (Closes: #660622)
  * Make another attempt at suppressing the wildcard action for building
    debian/rules to fix problems building module packages using
    make-kpkg.  Patch from Thorsten Alteholz.  (Closes: #639475)

openafs (1.6.2~pre3-1) experimental; urgency=low

  * New upstream prerelease.
    - Avoid unnecessary panic in kernel module when freeing vcaches.
    - Add additional objects to the *_pic libraries in support of the AFS
      Perl bindings.
  * Remove unnecessary change to the upstream Debian packaging files to
    support armhf.  These files aren't used during a package build, so no
    need to carry a Debian patch.

openafs (1.6.2~pre2-2) experimental; urgency=low

  * Restore include of <sys/param.h> in userspace builds of rx/rx_packet.h
    to get a definition of MIN and MAX on, at least, powerpc.  Thanks,
    Andrew Deason.

openafs (1.6.2~pre2-1) experimental; urgency=low

  * New upstream prerelease.
    - Support Linux kernels up to 3.7.  (Closes: #685973)
    - Fix fileservers to properly report >2 TiB partitions.
    - Fix stale volume info from vos examine on non-DAFS filservers.
    - Fix possible volume corruption with vos convertROtoRW.
    - Fix bosserver to preserve all command-line options over restart.
    - Fix bosserver to properly kill hung processes during shutdown.
    - Fixes for memcache, especially on Solaris.
    - Increase the size of the DNS resolver answer buffer to allow sites
      with a long response list to use SRV and AFSDB records.
    - Fix possible abuse of fs mkmount.  In previous versions, users could
      crash a client by nesting volume mounts.
    - Fix client page cache corruption on Linux.  When multiple clients
      read and write to a file, the reading client may see first couple
      bytes of a file as nulls.
    - Support newer glibc versions.
  * Build-Depend on hardening-wrapper and enable it to work around the
    current upstream munging of CFLAGS and LDFLAGS.  (Closes: #659663)
  * Fix server installation instructions in README.servers, which used the
    early demand-attach syntax before separate demand-attach binaries were
    built.  Thanks, Björn Torkelsson.  (Closes: #693311)
  * Remove the symlink from the openafs-fileserver doc directory to the
    openafs-client doc directory.  We used to install this symlink and
    share doc directories, but this stopped in 1.4.12+dfsg-1.  However,
    dpkg doesn't remove symlinks to a directory, so systems that had
    upgraded from the older package were overwriting openafs-client doc
    files with the openafs-fileserver versions.  Thanks, Andreas
    Beckmann.  (Closes: #694063)
  * Switch to xz compression for the upstream tarball, Debian tarball, and
    binary packages.
  * Remove debian/import-upstream and change README.source to document
    using git-import-orig with --upstream-vcs-tag instead.
  * Move single-debian-patch to local-options and patch-header to
    local-patch-header so that they only apply to the packages I build and
    NMUs get regular version-numbered patches.
  * Update Vcs-* URLs for the new anonscm.debian.org URL layout.
  * Update standards version to 3.9.4 (no changes required).

openafs (1.6.1-2) unstable; urgency=low

  * Translation updates:
    - Fix German translation encoding.  Thanks, Christian PERRIER.
      (Closes: #678736)
    - Italian, thanks Beatrice Torracca.  (Closes: #671640)

openafs (1.6.1-1) unstable; urgency=low

  * New upstream release.
    - Do not ignore all InlineBulkStatus errors in file server.
    - Support for Linux 3.3 and 3.4.
    - Fix incorrect kernel error handling in afs_notify_change.
    - Fix locking around RXS_PreparePacket.

openafs (1.6.1~pre4-1) unstable; urgency=low

  * New upstream prerelease.
    - Always retry busy rx calls and retriable actions.
    - Do not abort the salvager on large volume IDs.
    - Ensure one NAT ping connection per srvAddr.
    - Improvements to the file server address tracking.
    - Improve locking in the host table in the file server.
    - Avoid discrepancy between lastBusy and PEER_BUSY.
    - Allow a null host for callback breaks.
    - Fix probing for noop_fsync in the Linux kernel.
    - Fix handling of expired locks in the file server.
    - Reset blacklisted servers on a hard-mount retry.
  * Update debhelper compatibility level to V9.
  * Update standards version to 3.9.3 (no changes required).

openafs (1.6.1~pre2-1) unstable; urgency=low

  * New upstream prerelease.
    - Disable server-side Rx keepalive during disk I/O.
    - Avoid timing out on non-kernel busy Rx channels.
    - Add separate client connection pool for replicated volumes.
    - Remove SYNC client disable behavior on some error patterns.
    - Correctly test for the end of the Rx call queue.
    - Fix cleanup of special inodes on the server.
    - Provide a public Rx function for toggling keepalive.
    - Fix connection management in the client checkserver loop.
    - Discard cached state in the client when unsure of validity.
    - Fix thread safety of free inode management with demand-attach.
    - Fix xstat handling of time values on 64-bit platforms.
    - Increase the idledead time.
    - Fix return status of fsync on a directory.
  * Fix afs-newcell's creation of the file server process to pass
    -localauth.  This was broken when demand-attach support was
    added.  Thanks, Florian Hatat.  (Closes: #652973)
  * Fix afs-newcell's unwind of file server process creation.  Thanks,
    Davor.  (Closes: #655136)
  * Description typo, thanks Jonas Smedegaard.  (Closes: #657933)
  * Translation updates:
    - Danish, thanks Joe Hansen.  (Closes: #654933)

openafs (1.6.1~pre1-1) unstable; urgency=low

  * New upstream prerelease.
    - Install new afsio utility.
    - Fixes performance issues in both the client and the server.
    - Rate-limit waiting for volume messages in kernel logs.
    - Avoid a possible memory allocation issue in ticket data management.
    - Disable MTU discovery.
    - Reduce the quantity of NAT pings sent by the client.
    - Various fixes for demand-attach file servers.
    - Fix volume lock violations.
    - Report the bosserver -rxbind address in a file.
    - Revert process group changes on keyring failure.
    - Various fixes for the salvager.

openafs (1.6.0-3) unstable; urgency=low

  * Apply upstream deltas to fix file corruption issue in file server:
    - [c73b6644] viced: disable accelerated copyonwrite
    - [4e05bc3b] remove CopyOnWrite2 and unused vars

openafs (1.6.0-2) unstable; urgency=low

  * Apply upstream deltas for Linux 3.1 and 3.2 (Closes: #649765):
    - [f129142] Linux: 3.1: update RCU path walking detection in
      permission i_op (Closes: #649996)
    - [7f55b45] Linux: d_delete now takes a const argument
    - [737a280] Linux: 3.2: Use set_nlink to update i_nlink
    - [364fad6] Linux: 3.1: adapt to fsync changes
    - [032736b] Linux: make sure backing_dev_info is zeroed
  * Add support for armhf.  Patch from Konstantinos Margaritis.
    (Closes: #645395)

openafs (1.6.0-1) unstable; urgency=low

  * New upstream stable release.
    - Rx NAT pings are not enabled until peer has answered
    - Numerous fixes to command argument parsing
    - Avoid crashing on host table exhaustion and defer clients instead
    - Rx connection reference counting is enabled
    - An Rx connection reference count leak is fixed in bulkstat
    - Handle unparsable directory objects
    - Handle Kerberos credential cache errors in aklog
  * Generate stub header files that include the actual system header when
    building libuafs instead of symlinking h to the appropriate directory.
    Fixes build failures now that Debian has switched to multiarch and
    moved some of the system headers.  (Closes: #639063, LP #831287)
  * Fix another Doxygen call to generate a configuration file, and remove
    the generated configuration files after Doxygen runs.
  * Update CellServDB to the 2011-08-14 release.

openafs (1.6.0~pre7-2) unstable; urgency=low

  * Force use of dblatex to build the manual, even if docbook2pdf is
    available, since the latter dies with errors about TeX capacity.
    (Closes: #635306)
  * Fix generation of protocol documentation from Doxygen headers.
    Doxygen cannot be called directly on header files and needs a
    configuration file to be generated first.  Thanks, Anders Kaseorg.
  * Add another dummy rule for ./debian/rules to the kernel module rules
    file to fix another variation of make-kpkg breakage.

openafs (1.6.0~pre7-1) unstable; urgency=low

  * New upstream prerelease.
    - Substantial Rx updates to correct erroneous behavior
    - Salvager tries harder to detect linktable issues
    - Additional documentation
    - xstat tools now cope with differing timeval structures between
      endpoints
    - Don't attach volumes with special status set in demand attach
    - Treat Linux 3.0 as Linux 2.6 for sysname purposes
  * Update README.source for a few changes in procedures and source
    package format.
  * Reapply the removal of the Doxygen-generated copy of jquery, since
    this apparently wasn't as fixed as had been advertised.  However, make
    it conditional on the existence of the jquery.js script, so we should
    hopefully only fix this where necessary.

openafs (1.6.0~pre6-2) unstable; urgency=medium

  * Urgency set to medium since 1.6.0~pre6-1 has been in unstable for some
    time, blocked only by the armel build problem, and 1.6.0~pre4-1 in
    testing has serious bugs.
  * Revert the removal of Doxygen's jquery copy.  This has now been fixed
    in the Doxygen package.
  * Disable optimization on armel to work around #630746.

openafs (1.6.0~pre6-1) unstable; urgency=low

  * New upstream prerelease.
    - Don't do unnecessary page invalidation with directories.
    - Flush vcaches in afs_shutdown for better callback givebacks.
    - Fix the vnode type for dynroot FIDs.
    - Fix volinfo -filenames.
    - Fall back to afs3-vlserver for SRV records for afs3-prserver.
    - Fix a client locking issue on ICBS that could deadlock.
    - Fix callback state handling with demand-attach when salvaged.
    - Fix reference leak in GetCapabilities.
    - Document DNS SRV record usage in afsd man page.
  * Add a dummy debian/rules rule in the kernel module rules file to fix
    builds with make-kpkg.  (Closes: #622260)
  * Remove and symlink the copies of jquery generated by Doxygen and add a
    Recommends on libjs-jquery for openafs-doc.

openafs (1.6.0~pre5-2) unstable; urgency=low

  * Apply upstream patch from http://gerrit.openafs.org/#change,4656 for
    correct reading of files larger than the chunk size.
  * Use dpkg-buildflags to get the default values of CFLAGS, CPPFLAGS, and
    LDFLAGS.  Upstream does not entirely honor these yet, but we're
    getting closer.
  * Update to standards version 3.9.2 (no changes required).

openafs (1.6.0~pre5-1) unstable; urgency=low

  * New upstream prerelease.
    - Avoid downward vcache pressure when entries are free.
    - Avoid client to fileserver deadlock during callback giveup.
    - Improve calculation of when to flush vcaches.
    - Don't read pages beyond the cache EOF.
    - Improve file server reference counting, locking, and logging.
    - Rename the OpenAFS com_err library to avoid conflicts.
    - Restrict the number of CBRs allocated at once.
    - Permit importing of -md5 and -md4 keys with asetkey.
    - Fix token return in aklog with 524 conversion.
  * Apply upstream patch from http://gerrit.openafs.org/#change,4654 to
    fix a configure problem detecting Linux kernel properties, leading to
    a lockup on 2.6.38 kernels.
  * Update import-upstream and README.source for moving 1.6 from the
    experimental and upstream-1.5 branches to the master and upstream
    branches.
  * Change to Debian source format 3.0 (quilt).  Force a single Debian
    patch for simplicity since the packaging is maintained in Git using
    branches, and include a patch header explaining why.

openafs (1.6.0~pre4-1) unstable; urgency=low

  * Upload to unstable.
  * New upstream prerelease.
    - Fix file descriptor leak in the file server that could result in
      corrupted files.
    - Properly support large volume numbers.
    - Document current client setuid behavior.  (Closes: #612608)
    - Allow salvager to be run manually with demand-attach servers.
    - Properly report setpag() errors.
  * Apply upstream deltas:
    - [1e322b88] Linux: 2.6.39: deal with BKL removal
    - [a8aa6f42] Linux: 2.6.39: replace path_lookup with kern_path
  * Declare optional dependencies in the openafs-client init script on
    openafs-fileserver so that, if the same host is running both a
    fileserver and a client, the fileserver starts before and stops after
    the client.

openafs (1.6.0~pre3-1) experimental; urgency=low

  * New upstream prerelease.
    - Revert UUID support in vos.
    - pt_util fixed to properly create new database.
    - MTU discovery now properly shut down on call reset.
    - FUSE client support fixed for non-/afs mounts.
    - A deleted volume can now be recreated properly.
    - Callbacks are again not broken during whole partition salvages.
    - Positional vectored IO fixed.
    - Fileserver per-client thread usage again properly enforced.
    - Anonymous dropbox support improved and drawbacks documented.
    - Ensure vnodes are not reallocated while in use for demand-attach.
    - Perform vcache eviction via a fast path before visiting vcaches
      where sleep is needed.
  * Apply upstream deltas:
    - [17b48f99] Add missing semicolon (Closes: #618496)
    - [ee2811b0] viced: Allow checkout of VOL_STATE_DELETED volumes

openafs (1.6.0~pre2-1) experimental; urgency=low

  * New upstream prerelease.
    - Avoid spurious Rx connection timeouts.
    - Do not retry Rx calls on channels returning busy errors.
    - Fix double-free error in the vos command-line utility.
    - Properly enable Rx connection hard timeouts.
    - Fix lock initialization in Rx.
    - Check for /afs existence before starting unless -nomount given.
    - Fix panic when using /afs/.:mount syntax.
    - Avoid a panic in memcache mode due to missing CellItems file.
    - Attempt to recover more quickly from timed-out volume releases.
    - Improve speed of volume removal.
    - Improve CPU utilization during demand-attach volume attachment.
    - Fix various error handling problems.
    - Linux 2.6.38 support.
    - Improve correctness and performance in cache bypass mode.
    - Avoid extra runs of the vcache freeing routine.
  * In README.modules, document the need to install the Linux headers
    package in the DKMS instructions and the need for module-assistant
    clean openafs in the module-assitant instructions.  (Closes: #606235)

openafs (1.6.0~pre1-1) experimental; urgency=low

  * New upstream prerelease.
    - Rx performance improvements.
    - Correct byte order handling of port in SRV record lookups.
    - More robust vos release to sites previously marked "don't use."
    - vos properly matches sites with multihomed servers.
    - Fix ptserver supergroups support on 64-bit platforms.
    - Bug fixes for demand-attach salvaging.
    - Avoid potential crash when attaching a volume fails.
    - Properly hold the host lock during host enumeration in fileserver.
    - Use larger I/O sizes in memcache to improve performance.
    - Avoid potential alignment issues in pioctl calls.
    - Servers now marked down when GetCapabilities returns an error.
    - Avoid blocking xvcache lock when freeing in-use vcaches.
    - In-use vcache count now properly tracked.
    - Properly configure LWP to use ucontext on appropriate platforms.
    - Eliminate spurious AFS system call errors.
    - Linux 2.6.37 support.
  * Apply upstream deltas:
    - [4a3e5291] Update NEWS for 1.5.78 and 1.6.0pre1
  * In the openafs-client init script, don't attempt to stop or restart
    the AFS client if module loading is disabled.  Stopping afsd without
    unloading the module would leave the system in an inconsistent state.
  * Add $named to Should-Start in the openafs-client init script since the
    client may do DNS lookups for the VLDB and file servers during startup
    in some situations.  (Closes: #586226)
  * Drop --enable-reduced-depends for right now.  aklog doesn't deal with
    it correctly.
  * Now that upstream has renamed compile_et to afs_compile_et, include it
    in libopenafs-dev.
  * Update CellServDB to the 2010-12-13 version.

openafs (1.5.77-2) experimental; urgency=low

  * Apply upstream deltas:
    - [ca2a7363] libuafs: Don't #define user (fixes armel build)
    - [f7f366d0] Link dafssync-debug(8) to fssync-debug(8)
    - [a2cf6b8d] Fix POD errors in fileserver and dasalvager
    - [e36b4e00] Update bos create man page for new demand-attach
  * Add backslashes to the DKMS command, which will be required once DKMS
    uses proper shell quoting.
  * In openafs-modules-source, use /lib/modules/`uname -r`/build as the
    default path to the kernel headers rather than /usr/src/linux.
    Current kernel header packages will create an appropriate symlink
    there.  This default is only used when neither module-assistant nor
    kernel-package are used.
  * In the openafs-client init script, stop looking for openafs.o; Debian
    hasn't supported 2.4 kernels for quite some time.  Remove all the $MP
    handling since we force a module name of openafs.ko using
    --with-linux-kernel-packaging.

openafs (1.5.77-1) experimental; urgency=low

  * Apply upstream deltas:
    - [7594331c] Add NEWS entries for OpenAFS 1.5.77 and 1.5.76
  * New upstream testing release.
    - Demand-attach servers are now always built and installed under
      separate names (dafileserver, davolserver, dasalvager).  This means
      that the default names are no longer demand-attach, which means that
      upgrades from previous experimental versions will fail (but upgrades
      from non-experimental versions will be much cleaner).
    - Linux 2.6.36 support and improved freezer interface support.
    - More robust path MTU detection.
    - Return VNOVOL from fileserver when a volume is deleted.
    - Improve handling of some corruption in the salvager.
    - Relax too-strict checks in ptserver on foreign names.
    - Better reporting of failures during volume attach.
    - Better fileserver handling of host hash collisions.
    - Fix statistics reporting in RXAFS_GetStatistics64.
    - Improved disconnected mode reference tracking.
    - Avoid a kernel panic during vcache contention.
    - Fix potential kernel panic during bulkstatus.
    - Better vos dry-run mode for syncvldb and syncserv.
    - Fix s390x kernel build support.
  * Update afs-newcell and README.servers to recommend using the
    demand-attach fileserver binaries and dafs bos type.
  * Force disabling of Linux syscall probing in kernel module builds.
  * Remove obsolete --enable-demand-attach-fs and --enable-disconnected
    configure flags.  These are now unconditional upstream.
  * The openafs-fileserver init script now depends on $named since
    apparently the volserver requires DNS during startup.  Thanks, Jaap
    Winius.  (Closes: #589783)
  * Use dpkg --print-architecture, not --print-installation-architecture,
    in the openafs-fileserver config script.  The latter is deprecated.
    Thanks, Peter Palfrader.  (Closes: #594488)
  * Add a dependency on libc6-dev to openafs-modules-dkms.  dkms doesn't
    depend on it because most kernel modules don't need it, but openafs
    builds userspace helper programs.  Thanks, Peter Palfrader.
  * Fix the sample CellServDB entry printed by afs-newcell if the cell
    isn't found in /etc/openafs/CellServDB to include the correct server
    syntax.  Thanks, Peter Palfrader.
  * Run the DKMS build commands in a subshell to work around a DKMS bug
    that caused the module build logs to be discarded.  (LP: #593509)
  * Add a status command to the openafs-fileserver init script.
  * Update to debhelper compatibility level V8.
    - Rewrite debian/rules to use dh and overrides.
    - Use dh_installdocs --link-doc to handle linked doc directories.
    - Rewrite debian/module/rules to use dh and overrides.
    - Bump -source package dependency and compat to debhelper 8.
  * Add ${perl:Depends} to openafs-modules-dkms and perl to the
    dependencies of openafs-modules-source, since Perl is used as part of
    the module build system now.
  * Remove bison and flex dependencies for the module build packages.  We
    now ship the results of rxgen, so don't need all the tools required to
    build the full source tree.
  * Update standards version to 3.9.1 (no changes required).

openafs (1.5.75-2) experimental; urgency=low

  * Apply upstream deltas:
    - [57d727da] Link libafsauthent with -lresolv if required
    - [c3fc948e] Check for crypt in external library
    - [a1351d48] Fix ktime test on 64-bit systems
  * Use --after instead of --remaining in binary-indep to avoid running
    dh_auto_install and doing the installation process again.

openafs (1.5.75-1) experimental; urgency=low

  * New upstream testing release.
    - Path MTU discovery for networks with bad fragmentation.
    - New -human flag for human-readable units in some fs commands.
    - Provide reasons for locked volumes in vos when known.
    - Improvements to Rx ping and NAT handling.
    - Improvements to the userspace AFS client.
    - Substantial updates to the Administrator's Guide.
    - Various bug fixes and improvements to the file server.
    - Force core file generation in bosserver.
    - Improve vlclient and vldb_check.
    - Avoid volume corruption on creation if files were left over from a
      previous failed cleanup.
    - Do not tie up fileserver threads with volumes being taken offline.
    - Break origin's callback on the target of a rename operation.
    - Do not open /dev/console in the fileserver.  (Closes: #582111)
    - Avoid unneeded sync() calls in the fileserver.
    - Update client disk cache version.
    - Parallelization improvements in lock management in the client.
    - New -dynroot-sparse mode for afsd to not show all cells in the
      CellServDB until that cell is needed.
    - Fix aklog crash with linked cell handling.
    - Fix fs getserverprefs -vlservers with default CellServDB list.
    - Report server address when logging warnings.
    - Avoid panic in GetCapabilities with an unknown cell.
    - Report process name and ID for advisory lock warnings when
      possible.
    - Flush pending changes to server when releasing file locks.
    - Various other client bug fixes on error handling and callbacks.
    - Disable syscall probes when keyrings are supported.
    - Use filehandles for all Linux 2.6 versions to avoid
      incompatibilities with mismatched afsds.
    - Update Linux kernel support for 2.6.35.
    - The stripped source tree generated for kernel module builds is now
      truly architecture-independent and can build on i386 for amd64
      kernels (for example).  (Closes: #518270)
    - Fix build problems on alpha.
  * Apply upstream deltas:
    - [bbce0515] Add NEWS entries for 1.5.75
    - [c790e7d0] Remove a few erroneous NEWS entries for 1.5.75
    - [9e2aba99] Fix ktime test for errors
    - [5cc6293c] Provide man pages for more fssync-debug commands
  * Set the OpenAFS build version to the Debian package version with
    -debian appended so that the Debian package versions can be
    distinguished from unmodified upstream versions.
  * Build shared library packages for libafsauthent and libafsrpc.
    Upstream is now more careful about the ABI.  (Closes: #433054)
  * Explicitly link libafsauthent with -lresolv -lcrypt.  This is a
    temporary fix for Linux that will be replaced by a better upstream fix
    in the next release.
  * openafs-modules-source and openafs-modules-dkms are now architecture:
    all.  The generated kernel source is now architecture-independent.
  * openafs-modules-source and openafs-modules-dkms now recommend an
    appropriate version of openafs-client.
  * Update kernel module packaging scripts:
    - Remove selection of linux-image vs. kernel-image for kernel names.
    - Use Breaks instead of Conflicts.
    - Update standards version to 3.9.0.
  * Tighten the dependencies on openafs-client in packages that symlink
    their /usr/share/doc directories to openafs-client's to meet the
    Policy requirements for changelog files.
  * Remove the lpia architecture.  This was an experiment in Ubuntu that
    has apparently been dropped.
  * Add preliminary support for powerpcspe, mapping that architecture to
    ppc_linux26.  The kernel build won't work unless uname -m on that
    architecture returns ppc.
  * Minor update to README.Debian for openafs-doc: the old IBM release
    notes are no longer included.
  * Remove conflicts/replaces/provides for openafs-ptutil, which was
    ancient (removed in 2001).
  * Install an upstream changelog file now that upstream provides one.
  * Add a workaround in the clean target to allow the same packaging files
    to be used by upstream, which removes changelog during distclean
    because it's Autoconf-generated.  This workaround will not trigger
    during a normal Debian package build.
  * Update standards version to 3.9.0.
    - Use Breaks instead of Conflicts where appropriate.

openafs (1.5.74.1-1) experimental; urgency=low

  * New upstream testing release.
    - Correctly recognize cache version differences in upgrades from 1.4
      and invalidate the old cache.
    - Resolve symlinks in fs rmmount.
    - Include PID in byte-range lock warning.
  * Preserve the AFS mount point and cache directories set in
    /etc/openafs/cacheinfo if the file already exists rather than
    overwriting them with the defaults.  Thanks, Liam Healy.
    (Closes: #580077)
  * In the openafs-client init script, don't assume that AFS is mounted on
    /afs when unmounting it or killing processes with AFS files open.
    Instead, parse /etc/mtab to find the AFS mount point.
  * Move the experimental afsd.fuse AFS FUSE client into openafs-fuse to
    avoid adding a FUSE dependency in openafs-client.  Document its
    current limitations in the package description.

openafs (1.5.74-2) experimental; urgency=low

  * Apply upstream deltas:
    - [e6f6c349] Fixes and clarifications to vos setaddrs man page
    - [d80382ef] Remove special-case call for KAM_SetPassword on s390
  * Fix ucontext detection on ppc_linux26, hopefully fixing build failures
    on the Debian powerpc architecture.
  * Install afsd.fuse and a man page link for it if the FUSE client build
    is enabled.
  * Add build dependency on libfuse-dev and pass --enable-fuse-client to
    configure so that the new FUSE afsd is built.  Install afsd.fuse into
    the openafs-client package for the time being; it will move to some
    other package before being uploaded to unstable so that openafs-client
    doesn't keep a dependency on libfuse.  There is, as yet, no
    documentation or init script support for the FUSE implementation.

openafs (1.5.74-1) experimental; urgency=low

  * New upstream testing release.
    - New vos setaddrs command.
    - Significant improvements to libuafs (user-space AFS client).
    - Initial FUSE implementation for afsd.
    - pts mem -supergroup and -expandgroups options.
    - Rx lock acquisition and thread safety fixes.
    - Fileserver capabilities support for the UNIX client.
    - Various afsmonitor improvements.

openafs (1.5.73.3-1) experimental; urgency=low

  * New upstream testing release.
    - New demand-attach file server support for greatly improved file
      server restart times.
    - Support for split readonly/read-write client caches.
    - Better client handling of file server meltdowns.
    - Experimental read-only client disconnected mode.
    - NFS translator clients now work properly on Linux.
    - Client cache readahead.
    - Network performance improvements.
    - New libkopenafs library providing a kernel PAG manipulation
      interface (a subset of the API provided by Heimdal's libkafs).
    - Fix builds on sparc64.  (LP: #181661)
  * Apply upstream deltas:
    - [7d395f17] Improve demand-attach fileserver bos documentation
    - [a763edc3] Make src/rx/rx.c not executable
    - [8d41bc24] Reallocate memory in aklog for the AFS ID string
    - [be449999] Fix typo in bos_create manpage
    - [fdb9429e] Linux: kmap() not page_address()
  * Build OpenAFS with demand-attach enabled for the file server, bos
    restricted mode enabled for bosserver, and disconnected mode enabled
    for the client.  Except for demand-attach, these options don't change
    the default behavior, just make new capabilities available.
  * The openafs-modules package now provides openafs-modules3 and
    conflicts on pre-1.5.61 openafs-client packages since the interface
    between afsd and the module has changed.  openafs-client now conflicts
    with openafs-modules2 and recommends openafs-modules3.
  * Change the default permissions of /etc/openafs/server to 0755 to match
    upstream defaults, but do not change permissions on upgrade.  The only
    file in that directory that needs to be protected is KeyFile, which
    should be mode 0600 anyway.  Drop the patch to bosserver to allow more
    restrictive permissions.  bosserver will complain about directory
    permissions after upgrade until the directory is manually changed.
  * Upstream now installs afszcm.cat and finds it in /usr/share/openafs/C,
    so use the version installed via make install and install it in the
    same location.
  * Upstream builds specific files with -fno-strict-aliasing where needed,
    so we no longer need to build the whole source with that flag.
  * Upstream no longer includes files covered by the Apple Public Source
    License, so we no longer have to repackage the upstream source to
    remove those files.  Drop Debian patches to the build system that were
    compensating for the removal of those files.
  * Switch to generating upstream tarballs from the upstream Git tag
    rather than from tarball releases.  There's no reason to include all
    the generated files when we're going to regenerate them anyway, and
    this saves effort combining the doc and src tarballs.

openafs (1.4.12+dfsg-3) unstable; urgency=low

  * Apply upstream deltas:
    - [135e196b] Create missing root directory when ORPH_ATTACH
    - [190ef2cb] volmonitor keep vtrans lock
    - [812dcc2c] Increase the maximum number of sysnames
    - [a123d4ab] Print rxdebug statistics as unsigned values
  * If the user configures openafs-client to use AFSDB records for VLDB
    server location, don't prompt the user for VLDB servers for the local
    cell even if they're not present in CellServDB and don't try to add an
    entry for the local cell to CellServDB.  (Closes: #575299)

openafs (1.4.12+dfsg-2) unstable; urgency=low

  * Apply upstream deltas:
    - [4ca7b6fc] Remove lih_r
    - [f3899ac3] Allow GetSomeSpace_r to select an optimal host
    - [94a43966] h_TossStuff_r: check held-ness after lock
    - [b78eeb0c] h_TossStuff_r: make sure host does not go away
    - [0583af32] volmonitor copy link before calling free
    - [eb799d07] Move non-executable stack assembly code to end of file
  * Build with -fno-strict-aliasing.  The upstream development branch has
    a better fix that selectively enables this for specific files with
    known problems, but be conservative for the stable release.

openafs (1.4.12+dfsg-1) unstable; urgency=low

  * New upstream release.
    - Enable weak encryption types in aklog and klog.krb5.
    - Build support for Linux 2.6.33.
    - Improvements to host tracking safety in the file server.
    - Fall back to current kernel credentials if we can't use stored ones.
    - Fix truncation handling in some large file situations.
    - Further fixes to mmap handling.
    - Avoid double-free in some FetchData64 error situations.
    - Stop warning about system call hooks when keyrings are in use.
    - Flush vcaches when a mount fails to avoid inconsistent data.
    - New dump tag and length standard for vos dump.
    - Fix stack executability for programs containing assembly code.
    - Various salvager robustness fixes.
  * Use dh_dkms from the DKMS package to handle creation of the maintainer
    scripts for openafs-modules-dkms rather than rolling our own.
    (LP: #497149)
  * Update init script to require $remote_fs be started first and stopped
    after OpenAFS.  This won't be the case in the long run, but for now
    some important boot-time options need /usr/bin/fs to set them.
  * List $syslog in Should-Start for the openafs-client init script, since
    otherwise if loading the module causes a kernel panic, it won't be
    logged to disk.
  * Update CellServDB to the 2010-02-28 version.
  * Add README.source explaining maintenance procedures and a
    debian/import-upstream script to do a Git-aware merge of a new
    upstream release that will allow us to cherry-pick upstream patches
    and do proper merges.
  * Stop linking the openafs-fileserver doc directory to openafs-client so
    that we can provide a separate NEWS.Debian.
  * Update standards version to 3.8.4 (no changes required).

openafs (1.4.11+dfsg-6) unstable; urgency=low

  * Apply upstream deltas:
    - [c12ec354] Fix write_begin configure test for recent RHEL kernels
    - [b7198421] Fix memory allocation warnings at shutdown
    - [7183c113] Do not check *aoutSize in PGetPAG
    - [c0323c49] cm: address race condition in afs_QueueVCB
    - [ad6dabdc] Clean up console message
    - [c9f7fe37] Make ktc_curpag also detect ONEGROUP PAG gids
    - [2f87c43e] volser transaction object race conditions
    - [2d6c0390] Add array bounds checking in h_Enumerate
    - [70f6a328] Check for (hostFlags & HOSTDELETED) after h_Lock_r
    - [c7a59397] Avoid IHandle leak when failing to attach volume
  * Remove incorrect return call in shutdown_icl() introduced by b7198421.
  * Do not attempt to build the kernel module with DKMS if the appropriate
    Linux headers aren't installed.  Based on code from the common DKMS
    postinst script (which we'll just use once it's reliably available).
    Thanks, Anders Kaseorg.  (LP: #487535)
  * Fix configure flags used for enabling or disabling LWP and kernel
    debugging flags and always pass --disable-strip-binaries.
  * Fix the openafs-dbg dependencies and package description to reflect
    its inclusion of debugging symbols for all server binaries in
    openafs-fileserver and openafs-dbserver, but not the legacy PAM
    modules.
  * In anticipation of a change in dpkg-source's defaults, force source
    package format 1.0.  The package is maintained using Git and
    generating a proper quilt series is complex and relatively pointless
    work, so the additional complexity of the 3.0 format is currently not
    that useful.
  * Change section of openafs-modules-dkms to kernel to match override.

openafs (1.4.11+dfsg-5) unstable; urgency=low

  * Apply upstream deltas:
    - [7833e472] Make afsd.pod reflect reality
    - [c9974c7a] Avoid prematurely destroying callback_rxcon
    - [9b37972e] Linux: 2.6.32 - Adapt to writeback changes
    - [abdf72bc] Linux: Avoid deadlock in readdir - release GLOCK for
      filldir
    - [bdb4f98a] Protect rx_call iovq from simultaneous attempts to empty
      it
    - [c08609ae] Avoid using released hosts
    - [a410b7fd] Linux - Fix disk cache access for selinux/AppArmor
      constrained processes (LP: #415766)
    - [49094ccf] Add automatic sysname detection for ARM Linux
    - [525b594a] Make ktc_curpag generally available (LP: #446521)
  * In the postinst of openafs-modules-dkms, if the openafs module is
    already added in DKMS, try to remove it first before adding it.  This
    should more correctly handle the case of a user installing this
    package without the correct kernel headers, having it fail in
    postinst, and then installing the correct headers and having dpkg
    attempt to configure the package again.  Thanks, Philipp Kaluza.
    (Closes: #553542)

openafs (1.4.11+dfsg-4) unstable; urgency=low

  * When changing the name of the source package built by
    openafs-modules-source, we need to change the package name in the
    changelog as well or dpkg-gencontrol explodes.  Thanks, Aaron M.
    Ucko.  (Closes: #549140)

openafs (1.4.11+dfsg-3) unstable; urgency=low

  * Apply upstream deltas:
    - openafs-stable-1_4_x/fileserver-no-negative-fetchdata-20090926:
      never return a negative data length from client reads past the end
      of a file.
    - openafs-stable-1_4_x/fileserver-gethost-r-cleanup-fixes-20090925:
      fix memory leak and possible double-free in error handling cases in
      fileserver.
    - openafs-stable-1_4_x/fileserver-retry-registeraddrs-20090810: retry
      VL_RegisterAddrs in the file server on failure.
    - openafs-stable-1_4_x/kernel-init-vrequest-structure-20090914:
      properly initialize vrequest structure in the kernel.
  * Change the permissions of /var/lib/openafs/local to 0700 to match
    upstream defaults.  This directory contains the fssync.sock file used
    for coordination between the fileserver and the volserver, and
    commands sent to that socket are not authenticated.  Linux protects
    the socket from unprivileged writes by default, but other operating
    systems do not.  Upstream therefore wants this directory to be 0700
    and bosserver will complain by default if it's not.  Changing the
    permissions let us drop a patch to bosserver.
  * Fix the second module control file for the standards version, section,
    and maintainer update.
  * Change the source package name of the stripped package generated by
    openafs-modules-source so that, should someone build a Debian source
    package from it, it won't have the same name as the main openafs
    source package.

openafs (1.4.11+dfsg-2) unstable; urgency=low

  * Add armv5tel to debian/sysname, mapping it to arm_linux26.  Patch from
    Daniel Bayer.  Also make the similar change for the module source
    package.  (Closes: #542315)
  * Also install restorevol in the openafs-client package.
  * Swap maintainer and uploaders in the packaging files for the module
    source package, matching the main package.
  * Update standards version to 3.8.3.
    - Change section of packages generated by openafs-modules-source to
      kernel.
    - Add Homepage to packages generated by openafs-modules-source.

openafs (1.4.11+dfsg-1) unstable; urgency=low

  * New upstream release.

openafs (1.4.11~pre3+dfsg-1) unstable; urgency=low

  * New upstream release candidate.
    - Further fixes for rcu_read_lock dependencies in some kernels.
    - Clean up return values of Linux vnode operations.
    - Call inode's setattr operation correctly.
  * Ignore failures to remove an existing DKMS tree in the prerm of the
    openafs-modules-dkms package.  In the possible cases where the tree
    may not be present to be removed, failing package removal doesn't
    make sense.  (Further addresses LP #368471.)
  * Don't install man pages for fs command variants that are only
    available on Windows.
  * Bring src/config/linux-version closer to upstream since upstream now
    handles unversioned source directories.  There is one remaining change
    required to search for UTS_RELEASE in the correct header path.
  * Update CellServDB to 2009-06-29 version.
  * Translation updates:
    - Russian, thanks Yuri Kozlov.  (Closes: #534807)

openafs (1.4.11~pre1+dfsg1-1) unstable; urgency=low

  * New upstream release candidate.
    - New getpag pioctl to discover a PAG from userspace portably.
    - Allow disabling of syscall probing in the kernel module.
    - New -maxmtu override switch in afsd to accommodate some VPNs.
    - pts client encryption support.
    - Further fixes to address/UUID tracking in the file server.
    - New DocBook-based manuals replacing the old HTML manuals.
    - New Doxygen-based protocol reference replacing the old PDF files.
    - Man pages for remaining AFS subcommands.
  * Update standards version to 3.8.2 (no changes required).

openafs (1.4.10+dfsg1-2) unstable; urgency=low

  * Apply upstream CVS deltas:
    - STABLE14-dprintf-rename-20090427: rename AFS's dprintf to avoid
      conflicts with one in the kernel.
    - STABLE14-linux26-defer-cred-changing-20090511: defer changing groups
      when the real and effective credentials of a process differ to avoid
      running afoul of checks in newer Linux kernels that cause oops.
      (Closes: #528785)
    - STABLE14-linux-mmap-antirecursion-fix-20090512 and
      STABLE14-linux-mmap-antirecursion-avoid-spurious-eio-20090526:
      improvements in flag setting and locking around recursive mmap
      protection.
    - STABLE14-memcache-write-on-laststore-20090512: write back dirty
      pages on last store with memcache to avoid losing changes.
    - STABLE14-background-fsync-consistency-issues-20090522: file
      descriptor handling fixes for the file server.
    - STABLE14-man-page-vos-dump-flags-20090526: document the -clone and
      -omitdirs flags to vos dump.  (Closes: #502571)
  * Provide an openafs-modules-dkms package that uses DKMS to dynamically
    build kernel modules for the local kernel and document this option in
    README.modules.  This is an alternative to installing
    openafs-modules-source and building kernel modules for each new kernel
    with module-assistant or make-kpkg.  (Closes: #168852, #525131)
    (LP: #52786, #368471, #369875)
  * Have openafs-client recommend at least the current source version of
    openafs-modules-source or openafs-modules-dkms instead of any old
    version.  While the API probably hasn't changed, it's best practice to
    keep a relatively close match between the userspace andn the kernel
    module version.  (LP: #369875)
  * Dynamically determine the Debian and upstream versions for dkms.conf
    and get-orig-source from debian/changelog.  Thanks, Anders Kaseorg.
    (LP: #364426)
  * Build-depend on cpio (used for generating openafs-modules-source).

openafs (1.4.10+dfsg1-1) unstable; urgency=high

  * New upstream release.
    - OPENAFS-SA-2009-001: Avoid a potential kernel memory overrun if more
      items than requested are returned from an InlineBulk or BulkStatus
      message.  (CVE-2009-1251)
    - OPENAFS-SA-2009-002: Avoid converting negative errors into invalid
      kernel memory pointers.  (CVE-2009-1250)
    - Preliminary support for 2.6.30 kernels.
    - Dynamic vcache allocation support to deal with inotify vcache
      pinning.
    - Do appropriate locking for CellServDB in /proc.
    - Use +dfsg instead of .dfsg for saner version sorting.
  * Debian's 2.6.29 packages no longer include symlinks from the
    architecture-specific header tree to the common header tree and
    instead overlay both header trees using kbuild.  Change the Autoconf
    probes to always use kbuild and generate stub headers in the paths
    that OpenAFS expects that include the linux headers.  Patch from Aaron
    M. Ucko.  (Closes: #521745)
  * Build PIC versions of libafsauthent and libafsrpc and install them in
    libopenafs-dev for use when AFS code should be embedded into shared
    libraries.  Patch from Garrett Wollman.
  * Update CellServDB to 2008-11-07 version.  (Closes: #522451)
  * Update debian/watch for +dfsg naming instead of .dfsg.
  * Update standards version to 3.8.1 (no changes required).
  * Translation updates:
    - Japanese, thanks Hideki Yamane.  (Closes: #521518)

openafs (1.4.8.dfsg1-3) unstable; urgency=low

  * Apply upstream CVS deltas:
    - STABLE14-cbr-free-what-you-alloc-20090325: dequeue items in the same
      way they were allocated.
    - STABLE14-shutdown-vcache-avoid-null-deref-20090324: avoid oops on
      shutdown.  (LP: #333197)
    - STABLE14-uphys-invalidate-returns-void-20081130: fix apparent Ubik
      synchronization errors due to incorrect use of a void return value.
  * Update package sections for the new archive organization.

openafs (1.4.8.dfsg1-2) unstable; urgency=low

  * Make openafs-modules-source architecture-specific (arch: any instead
    of arch: all).  The new method for generating the kernel source tree
    only generates correct build machinery for the architecture on which
    it was built, making the package architecture-specific.  The generated
    tree is so much smaller that this still only uses about 1MB of archive
    space more than the old method and makes each openafs-modules-source
    package much smaller.  This is a workaround until we can fix
    libafs_tree to include enough build machinery to handle all Linux
    architectures from one source tree.  (Closes: #516023)
  * Explicitly remove *-stamp files in the clean target of the module
    build until the module build is upgraded to debhelper 7.

openafs (1.4.8.dfsg1-1) unstable; urgency=low

  * New upstream release.  (Closes: #511535)
    - Support 2.6.28 kernels.  (LP: #303112)
    - Check at compile time that the kernel has keyring support rather
      than building non-functional modules.  (Closes: #500850)
    - Include vos clone man page.  (LP: #324449)
  * Apply upstream CVS deltas:
    - STABLE14-libuafs-updates-20081229: prerequisite for other deltas.
    - STABLE14-linux-truncate-race-20090109: avoid race condition during
      truncation.
    - STABLE14-linux-i-size-20090112: further fix for truncation race.
    - STABLE14-linux-truncate-cleanup-20090113: further truncation fix.
    - STABLE14-osi-probe-check-result-cope-with-enoent-20090115: fix for
      syscall probing.
    - STABLE14-linux-2629-20090115: support for 2.6.29 kernels.
      (Closes: #513680)
    - STABLE14-rx-idledead-only-ignore-keepalives-20081222: rx bug fix to
      not ignore other ping packets.
    - STABLE14-rx-rdwr-writeproc-race-20081228: fix rx race condition that
      could result in reuse of freed memory.
    - STABLE14-rx-do-not-race-current-packet-20090105: fix rx race
      condition.
  * Use make libafs_tree to generate the tree for the kernel module
    compile rather than copying the entire source tree.
  * Compress the source in openafs-modules-source with bzip2 instead of
    gzip to reduce the package size.
  * Make dynroot the default for new installations.  It works much better
    with systems that don't bring up their network until late in the boot
    process, such as wireless laptops.  (LP: #249240, #318605)
  * Mention libpam-afs-session instead of libpam-openafs-session in the
    description of libpam-openafs-kaserver, and mention libpam-krb5 by
    name.  Thanks, Philipp Kaluza.  (Closes: #501308)
  * Suggest module-assistant auto-install in README.modules and be clearer
    that building one's own kernel is not required.  Thanks, Anders
    Kaseorg and Lutz Goehring for suggestions.  (LP: #295897)
  * Allow time-daemon to satisfy the openafs-fileserver recommends in
    addition to ntp, allowing for openntpd.  (Closes: #508258)
  * General improvements to debconf configuration handling.
    - Do not abort the config script if we have no default realm and
      dnsdomainname fails.  (LP: #274886, #318132)
    - Do not abort postinst if we can't resolve any host name for the
      cell.  Just continue in that case, omitting any configuration for
      the local cell.  (LP: #322054)
    - Correctly set the default for AFS_CRYPT from the existing config.
    - The cache size is high, not critical, since we have a default.
    - Don't create the client ThisCell if no local cell was specified.
    - Improve the leading comment in afs.conf.client.  Users can edit it,
      but any changes other than the setting values will be lost.
    - Remove the openafs-fileserver/bosconfig_moved template, which would
      only be shown on upgrades from pre-1.2.0 versions.
    - Standardize coding style and always quote strings.
  * Update to debhelper compatibility level V7.
    - Use dh where possible in debian/rules.
    - Use dh_lintian to install Lintian overrides.
    - Eliminate the configure target and do all the work in build.
    - Do more in the install target and less in binary, matching the
      default command stacks in dh.
    - Use a debian/clean configuration file to let dh clean do more of the
      work rather than using rm commands in debian/rules.
  * Abort the config script rather than exiting successfully if the
    debconf shell module is not available.  The config script should never
    be run in the absence of debconf, so if this fails, something deeper
    is wrong and we shouldn't blindly continue.
  * Add ${misc:Depends} to all dependencies.
  * Add explanations for the Lintian overrides.
  * Use set -e instead of #!/bin/sh -e in maintainer scripts.
  * Remove server documentation from openafs-modules-source.
  * Translation updates:
    - Spanish, thanks Francisco Javier Cuadrado.  (Closes: #514452)

openafs (1.4.7.dfsg1-6) unstable; urgency=low

  * Apply upstream patch to free /proc entries in the correct order.
    Thanks, Marc Dionne.  (Closes: #493914)
  * Apply upstream deltas to support 2.6.27 kernels and to stop using
    COMMON_KERN_CFLAGS for all 2.6 kernels uniformly, which fixes
    problems on amd64 with newer kernels.  Thanks, Björn Torkelsson.
    (LP: #267504)
  * Translation updates:
    - Swedish, thanks Martin Bagge.  (Closes: #493120)

openafs (1.4.7.dfsg1-5) unstable; urgency=low

  * Drop support for hppa.  We only have a param file for a 2.4 kernel,
    we were building with UCONTEXT which is stubbed out in glibc for hppa,
    and builds without UCONTEXT fail.  The binaries we were building
    before didn't work and no one reported a bug, indicating no one was
    attempting to use OpenAFS on hppa.
  * When building the kernel module, use the setting of the ARCH
    environment or make variable, if present, in preference to uname -m to
    allow cross-compiles.  Thanks, Jose Calhariz.  (Closes: #492232)
  * Add Jason Edgecomb's copyright and license for man pages to
    debian/copyright.

openafs (1.4.7.dfsg1-4) unstable; urgency=low

  * Undo the move of up.pod to afs-up.pod in debian/rules clean rather
    than just deleting the file and causing the second build to fail.
    Thanks, Dominic Hargreaves.  (Closes: #490752)
  * Don't use UCONTEXT on hppa; its glibc doesn't provide those
    functions.  It's possible that OpenAFS isn't working properly on hppa
    these days, but as yet there have been no reports.
  * Suggest openafs-krb5 in openafs-client and mention it in the long
    description.

openafs (1.4.7.dfsg1-3) unstable; urgency=low

  * Apply upstream delta for Linux 2.6.26 support.
  * Enable support for arm and armel, added upstream in 1.4.7.
  * Enable support for lpia by making it synonymous with i386.  This means
    that lpia systems will get a sysname of i386_linux26, which isn't
    ideal but should at least work.
  * When clearing the restart time while installing a new cell, pass
    -localauth to avoid an authentication failure.  Thanks, Davor Ocelic.
    (Closes: #488152)
  * If the openafs module isn't listed in modules.dep, exit with a zero
    status from the init script even if modprobe fails.  Otherwise, if a
    module package and openafs-client are installed at the same time and
    openafs-client is set up before the module package, the init script
    can find the module, fail the modprobe (because the dependency map
    hasn't yet been updated), and fail the whole installation.  Exiting
    with a zero status still doesn't get OpenAFS started, but at least it
    doesn't leave the system in a partly installed state.  Thanks to Durk
    Strooisma for the analysis.  (Closes: #486816)
  * Don't include debug symbols for /sbin, /usr/bin, and /usr/sbin
    binaries or PAM modules in openafs-dbg, just the servers in
    /usr/lib/openafs, since those are the most likely cases where
    backtraces are important and a 10MB debug symbol package seems like
    overkill.
  * Stop using quilt to manage patches and pre-apply them to the source
    package now that the package is maintained with Git.
  * Add Vcs-Git and Vcs-Browser control fields.
  * Reflect current responsibilities more accurately by listing myself as
    maintainer and Sam as uploader.
  * Update standards version to 3.8.0 (no changes required).
  * Drop unused postinst-uses-db-input override; Lintian has been fixed.
  * Translation updates:
    - Galician, thanks Jacobo Tarrio.  (Closes: #481675)

openafs (1.4.7.dfsg1-2) unstable; urgency=high

  * Bumping urgency for the conflict fix, which fixes a latent RC bug, and
    for the news entry for openafs-dbserver.
  * Add a missing conflict on older versions of openafs-client to
    openafs-krb5 to ensure that the klog transition to alternatives is
    smooth.
  * When configuring a new cell, clear the general restart time.
  * Add a NEWS file for openafs-dbserver warning of the serious Ubik bug
    fixed in the previous release and suggesting restarting database
    servers one at a time.
  * Update to 2008-04-23 CellServDB.

openafs (1.4.7.dfsg1-1) unstable; urgency=low

  * New upstream release.
    - Work around GPLing of RCU locks.  (Closes: #476628)
  * Include a Kerberos v5 klog, klog.krb5, in openafs-krb5.
  * klog is now managed via alternatives.  openafs-client provides
    klog.afs and openafs-krb5 provides klog.krb5.  If both packages are
    installed, klog.krb5 is the default.
  * Don't remove and reinstall the pagsh alternative on every upgrade.
  * Add many new upstream man pages for fs, vos, and pts sub-commands and
    the CellAlias config file.
  * Add read_tape to openafs-dbserver.
  * Add bos_util and a UserList man page to openafs-fileserver.
  * Run dh_install with --fail-missing to catch new upstream additions.

openafs (1.4.7~pre3.dfsg1-1) unstable; urgency=low

  * New upstream release candidate:
    - Better support for 2.6.25 kernels.
    - Fixes for flushing in the cache manager.

openafs (1.4.7~pre1.dfsg1-1) unstable; urgency=low

  * New upstream release candidate:
    - Initial support for 2.6.25 kernels.
    - Better 2.6.24 kernel support.  (Closes: #463962)
    - Better cleanup on module unload.  (Closes: #417917)
    - Potential deadlock fixed in the fileserver.
    - Better fileserver host tracking.
    - Ubik fixes preventing database truncation on unreliable links.
  * Add upstream delta to fix oops on startup with pre-2.6.25 kernels.
  * Install the up man page as afs-up, matching our renaming, and update
    its text accordingly.  (Closes: #459635)
  * Move openafs-client later in the shutdown sequence on new
    installations so that it stops after autofs and add an X-Stop-After
    LSB header to achieve the same more reliably with dependency-based
    boots.  (Closes: #472545)
  * Update doc-base control file sections for the new categorization.
  * debian/rules and debian/module/rules improvements:
    - Remove all modified generated files on debian/rules clean.
    - Depend on $(QUILT_STAMPFN) instead of patch.
    - Use touch $@ to create stamp files.
    - Use a stamp file for the module's install target.
  * Uncomment and fix the watch rules for pre-releases and always scan for
    both regular releases and prereleases.

openafs (1.4.6.dfsg1-3) unstable; urgency=low

  * Fix FTBFS caused by a change in dh_strip behavior.  It no longer
    creates empty files for already stripped binaries, so we should no
    longer remove them.  Thanks, Lucas Nussbaum.  (Closes: #464274)
  * Include debugging symbols for libpam-openafs-kaserver in openafs-dbg.
  * Do not stop daemons in run-level S.  This isn't a real run-level and
    hence there's no reason to create the links.

openafs (1.4.6.dfsg1-2) unstable; urgency=low

  * Apply additional upstream patches to the 2.6.24 support to fix
    builds with older kernels.  Thanks to Felix Koop for the testing.
    (Closes: #458331)
  * Remove old /etc/openafs/server-local files from older versions when
    purging openafs-fileserver.
  * Minor reformatting of openafs-client's postrm.
  * Remove databases on purge of openafs-dbserver.
  * Remove log files when purging openafs-fileserver or openafs-dbserver
    per Policy 10.8.

openafs (1.4.6.dfsg1-1) unstable; urgency=low

  * New upstream release.
    - Fixes multiple serious problems with the file server.
  * Apply upstream patch for Linux 2.6.24 support.  Thanks to Anders
    Kaseorg for researching the necessary deltas.  (Closes: #456258)
  * Apply upstream patch to allocate vnodes from the malloc pool rather
    than off the stack, fixing file server problems on SPARC.  Thanks to
    Barney Sowood for tracking down the patch.  (Closes: #448380)
  * Apply upstream patch from the 1.5 series to allow multiple realms to
    be listed in the server krb.conf and hence treated as local.
  * Build bosserver with --enable-bos-new-config.  On startup, if
    BosConfig.new exists, it will be renamed to BosConfig before the
    configuration is read.  (Closes: #453398)
  * Add a comment to /etc/openafs/afs.conf.client that the file is managed
    by debconf.  (Closes: #447183)
  * Add more debugging and bug reporting instructions to README.Debian.
  * Mention in README.Debian that the server is built with supergroups
    enabled and with the multiple local realm patch.  (Closes: #453399)
  * Support reconfigure in postinst.
  * Recode debian/copyright to UTF-8.
  * Update to standards version 3.7.3 (no changes required).

openafs (1.4.5.dfsg1-1) unstable; urgency=low

  * New upstream release.
    - Even with a new enough Linux kernel to support keyrings, we still
      may have found the system call table and need to clean it up when
      unloading the module.  (Closes: #448793)
  * Use uname -m rather than dpkg --print-architecture to determine the
    sysname for kernel module builds.  Otherwise, builds with a different
    kernel architecture than userspace (amd64 kernels with i386 userspace,
    for example) don't work.  Thanks, Anders Kaseorg.  (Closes: #448452)
  * Fix signing the generated the changes file on a kernel module build.
    The module build file reorganization required an additional change to
    genchanges.  Thanks, Anders Kaseorg.  (Closes: #448449)
  * Expose prototypes for the ktc_* functions.  (Closes: #449432)
  * Fix man pages for subcommands to use an underscore in the NAME section
    instead of a space so that they'll be indexed properly by the current
    groff and man-db.
  * Update CellServDB to 2007-10-25 GCO release.
  * Add Homepage to the package control fields.

openafs (1.4.5~pre2.dfsg1-1) unstable; urgency=low

  * New upstream release candidate.
    - Fix errors when compiled with gcc 4.2.  (Closes: #443937)
    - Add a frightening hack to work around the lack of getcontext and
      savecontext for 32-bit SPARc.  (Closes: #415952, #446837)
    - Add support for Linux 2.6.23.
    - Multiple bug fixes for client tracking in the file server.
    - Prevent one client from consuming all file server threads.
  * Remove the workaround added for 2.6.20 and 2.6.21 kernels with
    CONFIG_PARAVIRT enabled.  The mistaken GPL-labelling of core
    interfaces was fixed in 2.6.22, which has now migrated to testing.
  * Scan /var/log/openafs for core files with a PID appended when a server
    run by bosserver exits with a signal.  bosserver was unable to
    correctly handle core files for multithreaded servers since it
    expected a filename of core and Linux always appends a PID to core
    dumps by multithreaded processes.
  * Fix make kdist in openafs-modules-source, inadvertently broken by a
    missing genchanges script.
  * Stop creating /var/lib/openafs/cores.  Nothing actually uses it.

openafs (1.4.4.dfsg1-7) unstable; urgency=low

  * Switch to quilt for managing patches to the upstream source.
  * Stop installing the Administrator's Reference.  All of the useful
    information in here has been converted to man pages.
  * Use the upstream man page for pt_util, which lets us remove the
    docbook-to-man build dependency.
  * Update to the latest CellServDB from grand.central.org.
  * Trim additional unuseful debug information from openafs-dbg.
  * Restructure the source for the module package.  The build files for
    the module build are now in debian/module in the source package and
    there is a completely separate rules file.  This way, the module build
    rules don't have to depend on quilt and the structure is clearer.
  * Fix debhelper dependencies for the module build.
  * Update module standards version to 3.7.2 (no changes required).

openafs (1.4.4.dfsg1-6) unstable; urgency=low

  * Apply upstream patch for the OpenAFS file server to treat clients that
    have an all-zero UUID as if they don't have UUID support, working
    around bugs in various client versions that can cause multiple hosts
    to use all-zero UUIDs and conflict with each other.
  * Use dpkg --print-architecture to determine the AFS sysname for both
    regular builds (avoiding --print-installation-architecture, which is
    deprecated) and kernel builds (avoiding arch, which is temporarily not
    in unstable and which wouldn't do the right thing for cross-compiles).
    Thanks, Chris Hanson.  (Closes: #435765)
  * Add hppa as a recognized architecture for kernel module builds,
    although OpenAFS currently only supports 2.4 kernels on HPPA so this
    isn't that useful.

openafs (1.4.4.dfsg1-5) unstable; urgency=low

  * Apply upstream patch from Jeffrey Hutzelman to fix syscall probing on
    AMD64 with Linux 2.6.22 kernels.  (Closes: #430179)
  * Add a union to des_ks_struct and reorder includes to get the correct
    alignment for DES code on SPARC.  Thanks, Chaskiel Grundman.  Partly
    addresses #415952.
  * Fix a typo in debian/kern-sysname that caused openafs-modules-source
    to still assume all ia64 systems used Linux 2.4.  Thanks, Jakob
    Haufe.  (Closes: #432344)
  * Use LSB logging functions for openafs-fileserver and support passing
    arguments to bosserver in /etc/default/openafs-fileserver by setting
    DAEMON_ARGS.
  * Clean up more completely after a purge of openafs-fileserver.  Remove
    the files created by the server in /var/lib/openafs/local, remove
    KeyFile and CellServDB.old from /etc/openafs/server, and remove
    BosConfig from /etc/openafs.

openafs (1.4.4.dfsg1-4) unstable; urgency=low

  * Apply upstream patch from Jeffrey Hutzelman to fix kernel module
    builds on ppc64.  (Closes: #427555)
  * Apply upstream patches for Linux 2.6.22 support.  (Closes: #428401)
  * Apply upstream patch to fix the AFS /proc structure under Linux
    2.6.22.1 and later.
  * Move /etc/openafs/server-local to /var/lib/openafs/local.  Most of the
    files here are automatically generated and hence not configuration
    files, and the file server has to write to this directory to start (so
    having it in /etc breaks read-only / file systems).  Thanks, Alexei
    Sheplyakov.  (Closes: #405697)
  * Move upserver and upclient to /usr/lib/openafs (from /usr/sbin) to
    match upstream's layout and for consistency with the other servers run
    via bosserver.
  * Use --name instead of --exec in the openafs-fileserver init script and
    drop the --pidfile option (bosserver doesn't create a PID file) so
    that we don't start a second bosserver on upgrades.
  * Go back to using krb5-config.  The dependency problem has now been
    fixed on all platforms in the krb5 package and this is the preferred
    upstream method.

openafs (1.4.4.dfsg1-3) unstable; urgency=low

  * Always generate a UUID on client startup even if for some reason we
    don't think we have any network interfaces.  Otherwise, the client
    will use an all-zeroes UUID, which will collide with every other
    client with the same problem.
  * When afsd is started with -rmtsys, it starts another process that afsd
    -shutdown doesn't kill.  Update the init script to kill this process
    on stop.  (Closes: #405982)
  * Don't use krb5-config to get a library list.  It runs the risk of
    encoding unnecessary library dependencies.  Instead, hard-code the
    flags and libraries we actually need.  (Closes: #424448)
  * When loading a module using the upstream naming convention, don't
    append the .mp to the module name for modprobe.  (Closes: #420597)

openafs (1.4.4.dfsg1-2) unstable; urgency=low

  * Debian kernels as of 2.6.20 enable CONFIG_PARAVIRT, which redefines
    several core kernel calls as redirects through a paravirt.ops table
    that's marked GPL-only.  This breaks all non-GPL modules that used
    those (previously generally exported) calls even indirectly.  Apply a
    hack to switch from spin_lock_irq to spin_lock_irqsave to avoid the
    paravirt redirection so that the module will build.
  * Enable ucontext for all Linux builds with glibc 2.4 or later, not just
    with i386 and amd64, and (following an upstream patch) always use
    ucontext on ia64.  Newer versions of glibc change internal structures
    in ways that cause the old LWP code to have stack overflows.
    (Closes: #419903)
  * Apply upstream patch to crashes on contention in afs_xuser when a
    process in a PAG exits.  Thanks, Chaskiel Grundman.
  * When determining the AFS sysname for kernel module builds, add
    explicit cases for 2.6 kernels for all architectures that support them
    (everything except non-64-bit sparc_linux).  Fixes build problems with
    ia64 and probably other architectures.  Thanks to Ippokratis Pandis
    for the debugging help.  (Closes: #411818)
  * Prefer alpha_linux_26 to alpha_linux_24 for the non-kernel build on
    Alpha, now that the source supports it.
  * Add support for the s390x architecture.  Upstream supports it and
    there's no reason not to.
  * Fix the watch file to remove .dfsg\d+ when comparing versions.

openafs (1.4.4.dfsg1-1) unstable; urgency=low

  * Repackage upstream source to remove two additional files covered under
    the APSL.  (Closes: #416685)
  * Build-depend on Automake since we run aclocal during the build.  Not
    having aclocal caused local patches to osconf.m4 to not be effective,
    leading to the wrong compiler flags for shared libraries.  Thanks to
    Frank Lichtenheld for the report.  (Closes: #416398, #416497, #418966)

openafs (1.4.4-1) experimental; urgency=low

  * New upstream release.  (Closes: #415699)
    - Support newer Linux kernels.  (Closes: #409797, #410120)
    - Add aklog fallbacks for null realms to support the referral
      capability in MIT Kerberos 1.6 and later.  (Closes: #410314)
  * Apply patch from Thomas Sesselmann to support setting options to pass
    to bosserver in /etc/default/openafs-fileserver.  (Closes: #409357)
  * Remove the rx_Init calls in the PAM module.  The internal counters
    that had to be initialized that way have been removed.
  * Now that we're running regen.sh as part of the build process, only
    patch the Autoconf source files and not the generated output to make
    the diff easier to audit.

openafs (1.4.2-6) unstable; urgency=medium

  * SECURITY: Apply upstream patch to disable setuid status on all cells
    by default.  Prior versions of AFS defaulted to honoring setuid bits
    in the local cell, but since unauthenticated file access in AFS is
    unencrypted, an attacker could forge packets from an AFS file server
    to synthesize a setuid binary in AFS.
  * Apply upstream fix to use a single high-numbered group for the PAG on
    2.6 kernels and sort the group properly.  Fixes AFS-caused group
    ordering problems that could lead the kernel to ignore some group
    membership for users.  (Closes: #414911)
  * Apply upstream fix for segfaults in pts rename.  (Closes: #409184)
  * Apply upstream fix to show reasonable free space numbers for AFS in
    df.  Without this fix, some programs which use df to check free space
    may think that directories in AFS are full and prevent the user from
    attempting to write files.  (Closes: #415294)
  * Translation updates:
    - Dutch, thanks cobaco.  (Closes: #413701)
    - Portuguese, thanks Miguel Figueiredo.  (Closes: #414800)

openafs (1.4.2-5) unstable; urgency=low

  * Translation updates:
    - Chinese, thanks Chun Tian (binghe).  (Closes: #406063)

openafs (1.4.2-4) unstable; urgency=low

  * Update documentation to note that enabling v4 support or running
    krb524d is no longer required for aklog to work.
  * Translation updates:
    - German, thanks Henrik Kroeger.  (Closes: #400800)

openafs (1.4.2-3) unstable; urgency=low

  * No longer pass explicit cache tuning options to afsd and instead let
    OpenAFS automatically choose tuning based on the cache size.
  * Accept trailing whitespace in ThisCell.
  * Fix path canonicalization on the server, enabling bos getlog with a
    simple log name to work properly against a Debian bosserver.
  * Change the documentation of afsd -shutdown to be less dire and more
    accurate.  Thanks, Daniel J. Priem.  (Closes: #394990)
  * Document (at least partially) AFS's mapping of Kerberos v5 principal
    names to Kerberos v4 format in the aklog man page.  Thanks, Daniel
    J. Priem.  (Closes: #394832)
  * Document that aklog -setpag may not always work.

openafs (1.4.2-2) unstable; urgency=low

  * Upstream fix to prevent butc segfaulting.

openafs (1.4.2-1) unstable; urgency=medium

  * New upstream release, fixes amd64 kernel issues
  * Update CellServDB

openafs (1.4.2~fc4-3) unstable; urgency=low

  * Apply patch from Chaskiel Grundman to fix kernel panics when loading
    the kernel module into AMD64 2.6.18 kernels.  (Closes: #390653)
  * Apply upstream patch to fix klog segfaults.  (Closes: #390940)
  * The UTS_RELEASE string is no longer found in linux/version.h in
    2.6.18, so fall back on looking in config/kernel.release.  Thanks to
    Marcus Watts for the patch.

openafs (1.4.2~fc4-2) unstable; urgency=low

  * Apply additional upstream patch for AMD64 2.6.18 kernel module build
    issues.  (Closes: #389729)

openafs (1.4.2~fc4-1) unstable; urgency=low

  * New upstream release candidate.
    - Builds with 2.6.18 on AMD64.  (Closes: #389729)
  * Build an openafs-dbg package with debugging information for the
    OpenAFS fileserver and volserver.
  * Add LSB comments to the openafs-client and openafs-fileserver init
    scripts.
  * Update to debhelper compatibility level V5.

openafs (1.4.2~fc2-1) unstable; urgency=low

  * New upstream release candidate.
    - Supports new Linux kernel versions.  (Closes: #383028)
  * Translation updates:
    - German, thanks Henrik Kroeger.  (Closes: #384803)

openafs (1.4.1-4) unstable; urgency=low

  * Apply upstream fix from Derek Atkins for compilation with kernel
    versions prior to 2.6.10.  (Closes: #376576)

openafs (1.4.1-3) unstable; urgency=low

  * Include all of AFS's local XDR implementation in the build for
    shlibafsrpc, fixing problems with undefined symbols in the PAM module
    on AMD64.
  * When creating a new file server in afs-newcell, use a set of tuning
    flags from Harald Barth rather than relying on the defaults.  This
    doesn't help with general bos create; long term, the defaults need to
    be fixed.  (Closes: #364100)
  * Add a note in README.servers about fileserver tuning options.
  * Update debconf templates to follow the best practice recommendations
    from the Developer's Reference.
  * Regenerate the man pages on build since the pre-generated ones were
    done with a very old version of pod2man.
  * Update standards version to 3.7.2 (no changes required).
  * Use a better method of optionally running make distclean.
  * Add build-arch and build-indep targets, just in case.
  * Translation updates:
    - Czech, thanks Martin Šín.
    - Portuguese (Brazil), thanks André Luís Lopes.
    - French, thanks Christian Perrier.
    - Vietnamese, thanks Clytie Siddall.

openafs (1.4.1-2) unstable; urgency=low

  * Exit successfully in the openafs-client init script if no module is
    installed, since otherwise openafs-client will fail to install until
    one builds a module.  This restores previous accidental behavior due
    to a bug in debhelper.  (Closes: #362695)
  * libopenafs-dev must conflict with liblwp-dev since they both provide
    liblwp.a.  Thanks, Justin Pryzby.  (Closes: #362842)
  * openafs-client recommends lsof, since the init script uses it for
    cleaner shutdown.

openafs (1.4.1-1) unstable; urgency=low

  * New upstream release.
    - Supports Linux 2.6.16.  (Closes: #358203)
    - Suspend should work with newer kernels.  (Closes: #341588)
    - Safer cache size calculation.  (Closes: #360176)
    - Upstream now includes man pages, so remove our backport.
  * Subsume openafs-krb5 into this source package.
    - Acknowledge NMU.  (Closes: #304933)
    - Update to the OpenAFS aklog and asetkey.  (Closes: #196094)
    - Backport asetkey from upstream CVS.
    - Include ka-forwarder from the old migration toolkit.
    - Add man pages for asetkey and ka-forwarder.
  * Subsume openafs-doc into this source package.
  * Since 2.6 is the supported kernel for etch, build the userspace with
    a sysname of *_linux26 where supported.  This only affects the sys
    command.  (Using livesys instead is better.)  (Closes: #358118)
  * Always pass the system type into Autoconf, following autotools-dev
    best practices.
  * Add an explicit copyright statement to debian/copyright.

openafs (1.4.0-4) unstable; urgency=low

  * Hopefully fix sparc64 kernel support.  Thanks, Troy Benjegerdes.
    (Closes: #219429)
  * Document the need to restart ptserver and vlserver on the existing
    database servers when adding a new one.  Thanks, Niklas Edmundsson.
    (Closes: #349659)
  * Include xstat_cm_test and xstat_fs_test in openafs-client, as they're
    quite useful for debugging.

openafs (1.4.0-3) unstable; urgency=low

  * Apply upstream patch from Chas Williams to be more careful about what
    dentry is used in renames, avoiding a kernel fault when renaming
    dentries accessed through multiple paths (such as RO and RW).
  * Apply patch to allow the module to build with the Ubuntu kernel.
    Thanks, Björn Torkelsson.  (Closes: #342607)
  * Stop unconditionally forcing the compiler to cc or gcc in configure,
    allowing, among other things, building the kernel module with a
    compiler other than the default system compiler.  (Closes: #338306)
  * Call kernel-version correctly from prep-modules, which fixes build
    issues with manually-built kernels.  (Closes: #344851)
  * Backport man pages from upstream CVS.  (Closes: #79763)
  * Include afsmonitor and livesys in openafs-client.
  * Include volinfo in openafs-fileserver.
  * Document FAM's lack of support for AFS's security model and recommend
    gamin instead.  (Closes: #343246)
  * Add a hint to README.Debian on what to do about the cache partition if
    running ReiserFS or XFS without a spare partition.
  * Use make install into debian/tmp rather than make dest.  make dest is
    mostly for Transarc compatibility and make install looks more like a
    typical package and makes it easier to evaluate differences in FHS
    location between upstream and Debian.  As a side effect, there's no
    need to mess with the @sys link.  (Closes: #165909)
  * Install more files with dh_install rather than install commands in
    debian/rules so that *.install shows a more complete picture of what
    goes into each package.
  * Don't ignore make distclean errors.

openafs (1.4.0-2) unstable; urgency=low

  * Install more of the standard OpenAFS utilities.  (Closes: #138851)
    - openafs-dbserver: Install prdb_check and vldb_check.
    - openafs-fileserver: Install voldump.
    - openafs-client: Install fstrace, scout, and up (as afs-up).
    - Modify fstrace to load its catalog from /usr/share/openafs.
  * Do not install kpwvalid.  The default version does little useful and
    the kpwvalid binary must be in AFS for it to take effect.
  * Overhaul the way kernel modules are built.
    - Recommend linux-image rather than kernel-image for newer kernels.
    - Always recommend the kernel package; since it's only a recommends,
      there's no need to special-case the hand-built kernel case.
    - Be less fragile about how the kernel version is used in prep-modules
      to support other ways kernel modules are built.  (Closes: #341836)
    - Add Build-Depends and Uploaders to the openafs-modules-source
      control file.
    - Remove unused parts of prep-modules and heavily comment it.
  * openafs-client should only recommend the AFS kernel module.  Many of
    the client programs will work in unauthenticated mode without it, and
    openafs-fileserver depends on it (but doesn't require the kernel
    module).  (Closes: #342095)
  * openafs-modules-source no longer has to depend on as many libraries.
  * Suggest the same PAM settings for pam_krb5 that libpam-krb5 does.
  * Update uploader address.

openafs (1.4.0-1) unstable; urgency=low

  * New upstream version.
    - Builds correctly with 2.6.13 kernels and software suspend.
    - Builds correctly with 2.6.12-10.  (Closes: #337883)
  * Install afsd in /sbin rather than /usr/sbin.  While putting /usr in
    AFS isn't as common as it once was, no reason to make it harder than
    it needs to be.
  * Update CellServDB to the 2005-10-15 grand.central.org version.
  * Install NEWS as an upstream changelog.
  * Add a watch file.
  * Remove the unused and uninstalled make-links script.

openafs (1.4rc4-1) unstable; urgency=low

  * New upstream version.
    - Correctly handle root.afs becoming replicated after the client
      starts.  This should resolve the problems with AFS eventually
      failing on the first system using a new cell.  (Closes: #88906)
  * When kill_all_afs is enabled in /etc/openafs/afs.conf, only kill AFS
    processes if the runlevel is 0 or 6.  You really only want this when
    the system is shutting down.  (Closes: #325347)
  * Remove the init script check of the cache file system and instead
    improve the check in afsd.  The init script check used stat, which is
    in /usr/bin and therefore not fair game for init scripts.
  * Set PATH in the init script, just in case.
  * libpam-openafs-kaserver must depend on openafs-client, not just
    recommend it, since acquiring tokens requires that the client be
    running.
  * Expand README.Debian and include information about PAM configuration.
  * Link libpam-openafs-kaserver's doc directory to openafs-client.
  * Make the short descriptions shorter.
  * Translation updates.
    - Portuguese (Brazil), thanks André Luís Lopes.

openafs (1.4rc1-1) unstable; urgency=low

  * New upstream version.
  * Install pam_afs.krb.so on hppa.  I believe the new PAM module build
    process fixes the issue that was being worked around before.
  * Improve the documentation and scripts for setting up new servers or a
    new cell.  afs-rootvol can now be run from a client configured to use
    dynroot.  afs-newcell generates the server CellServDB directly to work
    around oddities with bos addhost.  There are many other, more minor
    improvements as well.  Thanks to Faheem Mitha and Sergio Gelato for
    analysis and patches.  (Closes: #322638)
  * Update the configuration transcript to reflect the current packages,
    messages, and instructions.  Thanks, Faheem Mitha.
  * Fill in the server CellServDB with information about the local cell,
    if available in the client CellServDB, rather than always initializing
    it to contain just the name of the cell.
  * Detect AFS caches on non-ext2/ext3 file systems and abort AFS client
    initialization.  (Closes: #249315)
  * Provide a way of setting sysname in afs.conf.  (Closes: #324694)
  * Don't create the unused /etc/openafs/AFSLog file.  (Closes: #120097)
  * Redo how library object files are found for the PAM module build to
    avoid assuming C locale character set behavior.  (Closes: #323582)
  * Remove the openafs-client warning against dynroot for the first system
    in a cell now that afs-rootvol can cope.  Provide some basic
    documentation of the CellAlias syntax in that message until we have a
    real man page.
  * Suggest openafs-doc.
  * Update standards version to 3.6.2 for the kernel module packages (no
    changes required).
  * Translation updates.
    - Czech, thanks Martin Sin.
    - Vietnamese, thanks Clytie Siddall.
    - French, thanks Christian Perrier.

openafs (1.3.87-1) unstable; urgency=low

  * New upstream version.
    - Fixes build problems with 2.6.12.3 and later.  (Closes: #320099)
  * Add support for ppc64, thanks Andreas Jochens.  (Closes: #322020)
  * Improve the openafs-client init script.
    - Update the default client options based on the cache tuning synopsis
      by Jeffrey Hutzelman, including setting a larger chunksize for all
      default option sets.  (Closes: #303944)
    - Choose the client options based on the cache size by default.
    - Move the code to build the options string to the init script from
      afs.conf so that afs.conf is pure configuration.
    - Add an AFS_PRE_SHUTDOWN hook called before shutting down the client.
    - Provide a shutdown hook, disabled by default, that kills all
      processes with files open in /afs.  Enabling this ensures a more
      reliable clean shutdown and umounting of the cache partition, but
      may not always be what the admin wants.
    - Improve the readability of the output on start.
    - Significantly improve the comments in afs.conf.
    - Remove the code to set -nosettime as it's now the default.
  * Move the openafs-client init script and afs.conf file we use into the
    debian directory rather than patching the upstream version.  We've
    diverged so much that there's no point in continuing to merge changes.
  * Diagnose unsupported architectures earlier and with a clearer error.
  * Suppress error messages from a missing kernel version header since
    they occur normally when doing the regular package build and are just
    confusing.  Instead, print an error in kern-sysname and abort if the
    kernel version could not be determined.
  * Rework how PAM modules are handled.
    - Build against the pthread-aware libraries.  (Closes: #297804)
    - Use the shared library objects instead of building separate PIC
      objects, eliminating the need for many Makefile modifications.
    - Include pam_afs.krb.so as well.  (Closes: #165972)
  * Don't include the empty /usr/src/modules directory in
    openafs-modules-source, only the tarball, to match how other kernel
    module source packages behave.  (Closes: #244685)
  * Update config.guess and config.sub.
  * Translation updates.
    - French, thanks Christian Perrier.  (Closes: #318807)
    - Vietnamese, thanks Clytie Siddall.  (Closes: #319705)
    - Czech, thanks Martin Sin.  (Closes: #319940)

openafs (1.3.82-2) unstable; urgency=low

  * Output error messages from heredocs in the init script with cat rather
    than echo.  Thanks, Reid Barton.  (Closes: #311729)
  * Make bosserver less picky about permissions and remove the attempt to
    set /etc/openafs/server-local not-world-readable since dh_fixperms was
    overridding it anyway.  (Closes: #312921)
  * Fix some spacing and capitalization errors in the debconf templates.
    Thanks, Clytie Siddall.  (Closes: #316597)
  * Initial Czech translation, thanks Martin Sin.  (Closes: #310699)
  * New Vietnamese translation, thanks Clytie Siddall.  (Closes: #316598)
  * Update standards version to 3.6.2 (no changes required).

openafs (1.3.82-1) unstable; urgency=medium

  * New upstream version.  (Closes: #307699)
    - Proper locking for preempt kernels.  This bug manifested as an
      inability to shut down AFS cleanly.  (Closes: #308399, #304040)
    - Correctly handle the inotify semaphore.  (Closes: #303495)
  * Repackage upstream to remove MacOS-specific files covered by the APSL.
    Remove the WINNT directory to save space since we have to repackage
    anyway.  Provide a get-orig-source target to do the repackaging.
  * libpam-openafs-kaserver: Fix compilation so that the PAM module isn't
    missing symbols and therefore unusable.  (Closes: #308844)
  * Apply patch from Chas Williams to fix stale cache data from deleted
    files, a bug introduced in 1.3.82.
  * In all cases, only build the module appropriate to the kernel we're
    building against.  Building an SMP module against a non-SMP kernel
    fails due to missing defines.  (Closes: #225907)
  * README.modules: Add documentation for module-assistant and recommend
    it when using Debian kernels.  Mention divergences from upstream in
    module naming.  (Closes: #253168)  Emphasize that the kernel source
    tree used for make-kpkg must be identically configured to the kernel
    the module will be used with.
  * Update copyright with more complete information from upstream
    src/LICENSE.
  * Simplify clean target.  Upstream make distclean is now better.

openafs (1.3.81-5) unstable; urgency=low

  * Handle modules named either with or without the .mp extension on SMP
    hosts.  (Closes: #305389, #307280, #307797)
  * README.Debian: Document that the client cache partition must be ext2
    or ext3 and that XFS and ReiserFS will not work.  upserver and
    upclient are now provided.  Provide some information about why
    kaserver is not provided.  (Closes: #249315)
  * Overhaul the module build rules.
    - Use debhelper to build the module binary package.
    - Let debhelper handle the module postinst and prerm control scripts.
    - Properly support modules_config and modules_clean.
    - Break the build process into configure, build, install, and binary
      rules, paralleling the regular build rules and making it easier to
      maintain the make-kpkg build targets.
    - Include the kernel version in the long description.
    - Update standards version of module packages to 3.6.1.
    - Include the copyright and basic documentation in the module binary
      package.  Otherwise, policy requires an exact versioned dependency
      on the package containing the copyright file.
  * Update standards version to 3.6.1.
    - Install Debian::OpenAFS::ConfigUtils in /usr/share, not /usr/lib.
    - Always enable debugging symbols and disable optimization if noopt is
      set in DEB_BUILD_OPTIONS.  (Alas, this doesn't entirely work; the
      upstream makefiles don't always honor the configure options.)
    - /etc/init.d/openafs-fileserver restart starts bosserver if it's not
      already running.
  * Update debhelper compatibility level to V4.
    - Remove all *.conffiles control files.  They're no longer needed.
    - Use misc:Depends to get debconf dependencies.
    - Use dh_install rather than the movefiles script.
  * openafs-dbserver doesn't need to depend on debconf.
  * Use dh_perl to get the correct Perl dependency for openafs-dbserver.
  * Remove unnecessary build dependencies.
  * Depend on comerr-dev rather than e2fslibs-dev.
  * Remove unnecessary preinst for openafs-fileserver.
  * Clean up and reformat package build rules.
  * Update lintian overrides.

openafs (1.3.81-4) unstable; urgency=low

  * make-kpkg doesn't run fakeroot for us but instead expects the module
    rules file to use $(ROOT_CMD) appropriately.  (Closes: #237861)
  * Put the compiled modules into KPKG_DEST_DIR if set.  This appears to
    be preferred over DEB_DEST by the make-kpkg documentation.  Thanks,
    Jonas Smedegaard.  (Closes: #206403)
  * Add a check to afs-newcell to ensure the local hostname doesn't
    resolve to 127.0.0.1.  (Closes: #163751)
  * Exclude .svn directories from the modules source tarball.
  * Fix genchanges for module builds to not fail when trying to remove a
    nonexistent file.
    * New French translations from Christian Perrier, Closes: #305780

openafs (1.3.81-3) unstable; urgency=low

  * Patch from kcr to fix osconf.m4 so that sparc defines afs_pthread_env
    and thus builds.

openafs (1.3.81-2) unstable; urgency=low

  * Oops, update debian/sysname because hppa is hppa not parisc-*-linux-*
    since we now use dpkg --print-installation-architecture

openafs (1.3.81-1) unstable; urgency=low

  * New Upstream version
  * Use Linux 2.4 as the claimed userspace OS for alpha; hopefully this
    resolves the  largefile issue and allows us to build again, Closes: #271923

openafs (1.3.80-1) UNRELEASED; urgency=low

  *  New upstream version, Closes: #297781
  * I think this works on sparc better and definitely works on 2.6.10, Closes: #283488
  * Make thiscell a high debconf value, Closes: #302939
  * New upstream version (1.3.79)
        - Works with 2.6.10, Closes: #296835
  * Use amd64 not x86_64 for sysname script, Closes: #296855
  * Patches from kcr
      - Loosen dependencies for client and modules
      - Enable debugging
      - Some callbacks later stuff and fix short bitfield
      - Fix permissions on /etc/openafs/server-local, Closes: #271460

  * Versions 1.3.79 an newer work on amd64, Closes: #262382

openafs (1.3.77-1) unstable; urgency=low

  * New upstream version
  * Target for unstable not experimental
  * New CellServDB
  * OpenAFS seems not to have a changelog available, so stop shipping it.
  * Build openafs.ko not libafs.ko so the right name appears in lsmod

openafs (1.3.74-1) experimental; urgency=low

  * New upstream version

openafs (1.3.73-1) experimental; urgency=low

  * New upstream version
    -  Works with 2.6.8 and 2.6.9, Closes: #277521
  * Remove call to dh_suidregister
  * Update sysname to prefer 2.4 on more arches for largefile issues
  * Patch from pnelson@ANDREW.CMU.EDU to add x86_64 support to sysname scripts
  * debian/sysname: Use installation architecture

openafs (1.3.71-1) experimental; urgency=low

  * New upstream version

openafs (1.3.70-1) experimental; urgency=low

  * New upstream version
  * debian/kern-sysname: 2.6* not 2.6
  * Enable supergroups and largefile-fileserver

openafs (1.3.65-1) experimental; urgency=low

  * New upstream Version, Closes: #256580

openafs (1.3.64-2) experimental; urgency=low

  * Allow loading of a .ko file not just .o

openafs (1.3.64-1) experimental; urgency=low

  * New upstream version
  * Add 2.6 to kern-sysname for i386
  * Apply patch from
    /afs/cs.cmu.edu/user/jhutz/junk/openafs-patches/openafs-build-on-linux26  which correctly generates 2.6 modules, Closes: #234284
  * use make only_libafs not dest_only_libafs
    - AS a result, build times are much faster, Closes: #144781
  * Correct module build scripts to install module package from new location
  * Fix afslocaldir to be /etc/openafs/server-local, Closes: #237154

openafs (1.2.12-1) unstable; urgency=medium

  * New upstream version
  * Medium urgency because this version fixes a significant server crash
    bug.  Windows clients, particularly greater than version 1.3.70 tend
    to crash openafs servers.
  * Cause openafs-kpasswd to conflict  with kerberos4kth-clients, Closes:
    #277844
  * Conflict between libopenafs-dev and arla-dev, Closes: #274788

openafs (1.2.11-3) unstable; urgency=high

  * Now that libopenafs-dev contains binaries, it should have shared
    library dependencies, Closes: #267509
  * New fr.po from Christian Perrier, Closes: #237098

openafs (1.2.11-2) unstable; urgency=low

  * Install rxgen
  * Install upserver and upclient
  * Mark as version 1.2.11, Closes: #255883

openafs (1.2.11-1) unstable; urgency=high

  * Versions prior to 1.2.10 stopped working with multiple servers in a
    cell because of a ubik bug prompting the 1.2.11 release.
  * Fix afs startup script not to start afsd if already running; really
    fixed in 1.2.10-3, but not documented, Closes: #219702

openafs (1.2.10-3) unstable; urgency=low

  * Fix Openafs not to include kernel headers from /usr/include,
  Closes: #220600
  * Fix typo in openafs templates, Closes: #215714
  * New French translations, Closes: #216158
  * Build-depend on e2fslibs-dev to get appropriate headers

openafs (1.2.10-2) unstable; urgency=low

  * New Brazilian Portuguese (pt_BR) translations, Closes: #208035
  * Don't conflict with ircd, Closes: #204865
  * Fix wording of question about using dynroot, Closes: #209332
  * New French debconf translations, sorry about the delay in including these, Closes: #203608
  * Avoid yes/no construction in openafs-client templates, Closes: #198476
  * Fix libpam-openafs-kaserver to include the symbols it needs, patch
    from Daniel Joseph Barnhart Clark , Closes: #194818

openafs (1.2.10-1) unstable; urgency=low

  * New upstream version
  * net/*.h included properly by kernel module, Closes: #204642
  * Don't build libafsrpc or libafsauthent, as we can't exactly use them
    because they contain non-pic code, Closes: #203456
  * I think I finally build the PAM module on hppa, Closes: #179679
  * Decnet includes should work now because of the change of the net
    symlink, Closes: #204486
  * Escape $ in debian/rules, Closes: #204185

openafs (1.2.9-3) unstable; urgency=low

  * Add support for kernel headers, thanks to Patrick Sodre,
    Closes: #173137
  * Add patch to support the Debian 2.4.21 Kernel sources, thanks to amu,
    Closes: #198774
  * Add chronyd to list of programs we assume set the clock, thanks RISKO
    Gergely, Closes: #201725
  * Fix template formatting (extra leading spaces), Closes: #198477
  * New French translations, thanks Christian Perrier, Closes: #198719
  * Fix PAM problem on hppa, Closes: #179679
  * Don't translate defaults: Closes: #198384
  * Fix movefiles error handling and errors exposed by this change.  The
    contents of libopenafs-dev  were somewhat wrong because of this.
  * Make /usr/src/modules root.src 775, Closes: #201733

openafs (1.2.9-2) unstable; urgency=low

  * Fix   to not build PAM krb since we don't install it and it breaks alpha, Closes: #189548
  * Don't install pagsh man page symlink since we no longer link to
    undocumented, Closes: #189860

openafs (1.2.9-1) unstable; urgency=low

  * Literal newline fixes, Closes: #175627
  * Require new kernel modules per upstream change.
  * New upstream version
  * Fix section of libopenafs-dev to libdevel
  * openafs-client stop should shut down afsd if it is running even if afs
    not mounted, Closes: #188000
      * Fix to build on alpha again; PAM patch was broken
  * Report i386_linux24 not linux22 on i386, Closes: #187789
  * Convert to po-debconf, patch from Andre Luis Lopes, CLoses: #187901
  * Fix from Lamont to build on hppa, Closes: #179679

openafs (1.2.8-4) unstable; urgency=low

  * Fix from Eduard Bloch to compile on kernels with variable numbers of
    CPUs; he is not sure it actually works yet though, Closes: #178505
  * Patch that might possibly fix the fails to build on recent unstable;
    definitely fixes a bug in include path handling, but I am not sure it
    is a correct patch since I cannot reproduce the problem, Closes: #178154

openafs (1.2.8-3) unstable; urgency=medium

  * Patch from Eduard Bloch <blade@debian.org> to build the PAM module for
    kaserver users; the main thing this patch does in create a bunch of
    PIC object files so it is a policy-conformant shared library, Closes:
    #174668
  * Do not include -I/usr/include and especially -I/usr/include/sys in the
    PAM Makefile so gcc 3.2 works; already fixed upstream, Closes: #176538

openafs (1.2.8-2) unstable; urgency=low

  * Convert v5 principal names to v4 style names in rxkad 2b.  Especially
    important for rcmd vs host
  * Fix debian/rules clean to remove  generated files, Closes: #174625
  * Fix AFS not to declare errno, Closes: #174059

openafs (1.2.8-1) unstable; urgency=low

  * New upstream version

openafs (1.2.7-3) unstable; urgency=low

  * Apparently OpenAFS and  ircd conflict on a UDP port, so you can't use
    both at once, Closes: #150242
  * Patch from seph to add -nosettime when ntp is installed, Closes: #155123
  * Fix bosserver  shutdown on restart after upgrade, Closes :#155586
  * Install translate_et, Closes: #138672
  * Allow byacc instead of bison

openafs (1.2.7-2) unstable; urgency=low

  * Fix uss to build with bison 1.50 and 1.75 so we can throw away the
    resulting binaries, Closes: #164366
  * Evaluate all limited range of comparison warnings; a warning in
    rxkad_client.c remains but is harmless, other warnings pointed to
    potential problems that were fixed, Closes: #162754
  * Fix s390 modules to actually build, Closes: #162772

openafs (1.2.7-1) unstable; urgency=low

  * Fix typo in templates, Closes: #150356

  * New upstream version

openafs (1.2.6-1) unstable; urgency=low

  * New upstream version
  * Update CellServDB, Closes: #154893
  * Add debconf support for fakestat
  * Patch from Sergio Gelato to avoid use of host, Closes: #144264
  * Install sys because it was requested
  * Fix version string, Closes: #153136

openafs (1.2.5-1) unstable; urgency=low

  * New upstream version.

openafs (1.2.4-1) unstable; urgency=low

  * New upstream version
  * Now builds for ia64, closes: #142287
  * Now works again with 2.2 kernels, thanks to upstream fix, closes: #140187
  * openafs-modules-source depends on kernel-package, Closes: #137169
  * Fix typo in readme.modules, Closes: #148155

openafs (1.2.3final2-5) unstable; urgency=medium

  * Fix subarch handling, closes: #139662
  * Update module control files to use  net not non-us

openafs (1.2.3final2-4) unstable; urgency=low

  * Move from non-us to main.
  * Fix ultrasparc 2.4 build to actually work.

openafs (1.2.3final2-3) unstable; urgency=medium

  * Oops, install backup

openafs (1.2.3final2-2) unstable; urgency=low

  * Add dynroot support to debconf; currently no support for creating
    CellAliases  automatically
  * Don't call depmod since we call update-modules, closes: #132851
  * Add hppa to debian/sysname, process.c patch from Lamont, closes: #134173

openafs (1.2.3final2-1) unstable; urgency=low

  * Upstream released a new version that they call 1.2.3 after things were
    tagged  in the Debian repository.

openafs (1.2.3final-1) unstable; urgency=low

  * New upstream release
  * Add support for fs setcrypt in debconf; by default traffic is encrypted.

openafs (1.2.3candidate3-1) unstable; urgency=low

  *  New  upstream release candidate
  * Use different version number format; people who installed rc1 will
    need to upgrade manually.  Sorry, but rc1 was never uploaded to Debian.
  * Support sparc_linux24

openafs (1.2.3.candidate1-1) unstable; urgency=low

  *  New upstream release candidate
  * Add ia64 as a potential architecture

openafs (1.2.2-3) unstable; urgency=low

  * Support s390, closes: #123540
  * Support update-alternatives for pagsh, closes: #122144
  * Note that alpha port doesn't work for fileservers, closes: #127387
  * Implement subarch, closes: #126192

openafs (1.2.2-2) unstable; urgency=low

  * Don't declare lseek in auth/ktc.c; sent upstream
  * Allow /etc/openafs/server to be mode 700 and /var/lib/openafs to be
    755, closes: #120072
  *  Don't try to shut down during afs-newcell until we've done enough
    that works, closes: #119452
  * Fix message  output on server failed to start, closes: #119461
  * Fix openafs to deal if /etc/openafs/server/ThisCell has a newline,
    closes: #118086

openafs (1.2.2-1) unstable; urgency=low

  * New upstream release.
  * We now require openafs-modules1 and conflict with openafs-modules.
  Our modules packages now provide openafs-modules1.  This is because
  upstream made a forward and backward incompatible change in the modules
  interface.
   * Include buserver in openafs-dbserver, butc and fms in openafs-client.c
    butc and fms may move, but they are there for now, closes: #114313

openafs (1.2.1-1) unstable; urgency=low

  * New upstream version.
  * Document that you may need to append a version for newer kernels,
    closes: #112246

openafs (1.2.0-3) unstable; urgency=high

  * High until we get this into testing.
  * Fix dependency on ncurses, closes: #112244
  * Fix typo in German template added in last version, closes: #112289

openafs (1.2.0-2) unstable; urgency=high

  * Fix PPC makefile so that it finds install; this time actually
    submitted upstream.
  * Have openafs-modules-source depend on libpam0g-dev because upstream
    seems to need it.  Bug opened upstream asking if this is really necessary.
  * Include German template, closes: #110087

openafs (1.2.0-1) unstable; urgency=high

  * Fix typo in  README.servers; thanks to mdz@debian.org, closes: #109199
  * Upstream patch for configure-style path handling accepted, closes: #88897
  * New upstream version.
  * Update upstream changelog

openafs (1.1.1-3) unstable; urgency=low

  * Oops, that last upstream patch for rx debug and version didn't work on
    Linux.  Since some Debian users may run Linux, let's try again.

openafs (1.1.1-2) unstable; urgency=medium

  * Swallow before vomiting, for it is the Debconf way, closes: #106030
  * Fix setting of INSTALL macro on powerpc, closes: #106019
  * Support AFSDB in debconf.  By default now (assuming you take the new
    /etc/openafs/afs.conf), AFS will look up cells  it doesn't know
    about in DNS.
  * Include upstream patch to prevent potential DOS with two RX servers
    looping rxdebug and version amongst each other.
  * Install rxdebug (oops)
  * Fix lintian overrides to get Lintian to stop complaining about
    non-problems.

openafs (1.1.1-1) unstable; urgency=low

  * New upstream release to fix readlink sometimes giving permission
    denied when it shouldn't.
  * Bring back the upstream changelog, now with change descriptions
  * Patch to give better error messages when  copyonwrite fails in the
    fileserver (contributed upstream)
  * New CellServDB

openafs (1.1.0-1) unstable; urgency=low

  * New Upstream release.
  * Warn if not running as root for afs-newcell|rootvol, closes: #103532
  * Work around upstream make clean target not working correctly.

openafs (1.0.90.20010710.snapshot-1) experimental; urgency=low

  *  New upstream snapshot
  * Fix module package to not have build cruft
  * Use --disable-kernel-module option except for module sources
  * Attempt to build modules correctly, although still not in right place
  * Pretend we build for alpha. This is mostly not a fiction, although I
    don't really know that much more than the kernel module and afsd
    work.  The pointer cast warnings are frightening.

openafs (1.0.90.20010704.snapshot-1) experimental; urgency=low

  * New upstream snapshot.  Support AFSDB records and many other
    features.  Not at all stable yet.  This is packaged so I and others
    can try it out.

openafs (1.0.4-3) unstable; urgency=medium

  * Fix patch introduced in -2 to be consistent with what is sent upstream.
  * openafs-modules-source depends on debhelper

openafs (1.0.4-2) unstable; urgency=low

  * Fix modversions and athlon memcpy mmx bug, closes: #91925
  * Fix openafs-client to fail rather than starting a useless afsd if we don't have any db servers
  * If AFS client fails to start for afs-newcell, then complain, closes: #98303
  * New CellServDB
  * Fix module builds on non-i386, closes: #100939

openafs (1.0.4-1) unstable; urgency=low

  * New upstream version, closes: #92776
  * Allow openafs-client to depend on openafs-modules-source not just
    openafs-modules.  This allows us to be installable on testing even
    without binary modules which may become a necessity given the current
    kernel image mess.
  *  implement target for modules_clean, closes: #95049

openafs (1.0.3-2) unstable; urgency=low

  * Fix  direntry type to be DT_UNKNOWN not DT_DIR on Linux (contributed upstream)
  * Return ENOTEMPTY not ENOTDIR for rmdir of non-empty directory, closes: #82589
  * Include build instructions in modules, closes: #92032
  * Don't grep a file for a potentially null string, closes: #89967

openafs (1.0.3-1) unstable; urgency=low

  * New upstream version
  * Allow host to be used instead of dnsutils, closes: #87915
  * Document kernel module build.
  * Include upstream changelog

openafs (1.0.2-3) unstable; urgency=low

  * Apply patch from  Stefan Kluth  <skluth@mppmu.mpg.de> for ppc_linux22
  * Back out architecture change from last version; no good way to
    actually solve that problem apparently.

openafs (1.0.2-2) unstable; urgency=low

  * Provide openafs-ptutil in hope that apt will deal better with upgrade,
    closes: #84303
  * Make thiscell default to dnsdomainname so things don't break quite as
    bad if you don't enter it, closes: #81149
  * Include source architecture line, Closes: #84530
  * Rebuild with new debhelper to fix dh_installinit not shutting down on
    removal (Thanks Joey) (now requires debhelper 2.2.20)
  * Move CellServDB to /usr/share/openafs  so we comply with policy 3.5

openafs (1.0.2-1) unstable; urgency=low

  * Add support for ppc and sparc, closes: #80835
  * Update maintainer address for modules.
  * Support for 2.4.0 final (and not just prereleases as before), closes: #82751
  * New upstream version.
  * Conflict with openafs-ptutil since it is now included
  * Fix message in RC script, closes: #82489
  * Attempt to avoid using pinstall  in kernel module build

openafs (1.0.1-3) unstable; urgency=low

  * Add support for Linux Kernel 2.4.x.
  * Note that administration scripts are released under the GPL.

openafs (1.0.1-2) unstable; urgency=medium

  * New maintainer address.
  * Depend on debhelper 2.1.16 for /usr/share/doc symlinks.
  * Only run init script once; confusion with DH_OPTIONS
  * Fix bosserver to look in /usr/openafs/lib so it restarts correctly every Sunday.
  * Upload to Debian (Gloses: BUG#69336)
  * Do not generate .map file for module; depmod complains.

openafs (1.0.1-1) unstable; urgency=low

  * New upstream version
  * Fix typo in openafs-client templates.
  * Clarify that afs-newcell sets up for afs-rootvol

openafs (1.0.snap20001106-10) unstable; urgency=low

  * Release (Closes: BUG#69336)
  * Fix typo and afs-rootvol and test from CLI

openafs (1.0.snap20001106-9) unstable; urgency=medium

  * Fix openafs-fileserver restart to do a bos restart
  * Document that AFS key must be single-DES.
  * afs-rootvol: use the -fast option so we do not hang forever on bad cells or firewalls.
  * Fix priority on openafs-client rc script to run after server starts.

openafs (1.0.snap20001106-8) unstable; urgency=low

  * Modules no longer depend on the tlient; client depends on modules.
    This works better for AFS, even though it is not the way packages like
    alsa-base work.
  * Fix several typos in configuration scripts.
  * Clarify that it starts the client just after debconf.

openafs (1.0.snap20001106-7) unstable; urgency=low

  * Add command line options to afs-newcell
  * Fix control.module for real this time.
  * Add kpasswd and kas to the openafs-kpasswd package.
  * Add manpage for afs-newcell and many undocumented links.
  * Remove PAM module from libopenafs-dev.
  * Instal udebug, pagsh, cmdebug.
  * Remove execute bit from some includes in /usr/include.

openafs (1.0.snap20001106-6) unstable; urgency=medium

  * Add config option to disable  client on boot
  * Create rc.d links
  * Make CellServDB handled by postinst not a conffile.  Sadly AFSDB
    records will be a while in the future.
  * New script: afs-newcell to configure a dbserver
  * Use the native Debian install instead of afs install while building;
    works  under fakeroot.  Important for modules package.
  * Fix purge to delete configuration files

openafs (1.0.snap20001106-5) unstable; urgency=low

  * Make change so kdump builds on potato

openafs (1.0.snap20001106-4) unstable; urgency=low

  * Fix so dpkg-buildpackage works.  Oops.

openafs (1.0.snap20001106-3) unstable; urgency=low

  * Increase stacksize for server processes so they don't dump core.
  * New script: afs-rootvol--creates the root.afs and root.cell.  Works
    fairly well except that it is overly verbose and that it has my test
    cell hardcoded.  This script will evolve into part of a new cell
    config tool.

  --
  * Support removing module for smP
  * Prune build directories out of modules sources--oops
  * Fix bogus depends for module sources--note that it really does want
    bison and flex at least for now.

openafs (1.0.snap20001106-2) unstable; urgency=low

  * Fix directories for servers to be FHS-reasonable
  * Fix init.d script to actually work for stop this time--tested and works
  * Add server packages; fairly useless right now but at least we
      ship the binaries
  * Check to make sure home cell exists and warn user if not
  * Fix purge for openafs-client

openafs (1.0.snap20001106-1) unstable; urgency=low

  * New Upstream version
  * Fix init.d script to properly remove openafs.o

openafs (1.0.snap20001104-1) unstable; urgency=low

  * New upstream snapshot
  * Fix path to afsd in /etc/init.d/openafs-client
  * Build openafs module packages

openafs (1.0.snap20001103-1) unstable; urgency=low

  * Initial Release.

diff --git a/debian/CellServDB b/debian/CellServDB
new file mode 100644 (file)
index 0000000..a6bd8fc
--- /dev/null
+++ b/debian/CellServDB
@@ -0,0 +1,665 @@
+>grand.central.org      #GCO Public CellServDB 14 May 2018
+18.9.48.14                      #grand.mit.edu
+128.2.13.219                    #grand-old-opry.central.org
+>wu-wien.ac.at          #University of Economics, Vienna, Austria
+137.208.3.33                    #goya.wu-wien.ac.at
+137.208.7.57                    #caravaggio.wu-wien.ac.at
+137.208.8.14                    #vermeer.wu-wien.ac.at
+>hephy.at               #hephy-vienna
+193.170.243.10                  #afs01.hephy.oeaw.ac.at
+193.170.243.12                  #afs02.hephy.oeaw.ac.at
+193.170.243.14                  #afs03.hephy.oeaw.ac.at
+>cgv.tugraz.at          #CGV cell
+129.27.218.30                   #phobos.cgv.tugraz.at
+129.27.218.31                   #deimos.cgv.tugraz.at
+129.27.218.32                   #trinculo.cgv.tugraz.at
+>itp.tugraz.at          #Institute of Theoretical and Computational Physics, TU Graz, Aus
+129.27.161.7                    #faepafs1.tu-graz.ac.at
+129.27.161.15                   #faepafs2.tu-graz.ac.at
+129.27.161.114                  #faepafs3.tu-graz.ac.at
+>sums.math.mcgill.ca    #Society of Undergraduate Mathematics Students of McGill Universi
+132.216.24.122                  #germain.sums.math.mcgill.ca
+132.216.24.125                  #turing.sums.math.mcgill.ca
+>ualberta.ca            #University of Alberta
+129.128.1.131                   #file13.ucs.ualberta.ca
+129.128.98.17                   #mystery.ucs.ualberta.ca
+129.128.125.40                  #drake.ucs.ualberta.ca
+>cern.ch                #European Laboratory for Particle Physics, Geneva
+137.138.128.148                 #afsdb1.cern.ch
+137.138.246.50                  #afsdb3.cern.ch
+137.138.246.51                  #afsdb2.cern.ch
+>ams.cern.ch            #AMS Experiment
+137.138.188.185                 #ams.cern.ch
+137.138.199.58                  #pcamsf4.cern.ch
+>epfl.ch                #Swiss Federal Institute of Technology at Lausanne
+128.178.109.111                 #kd1.epfl.ch
+128.178.109.112                 #kd2.epfl.ch
+128.178.109.113                 #kd3.epfl.ch
+>ethz.ch                #Swiss Federal Inst. of Tech. - Zurich, Switzerland
+82.130.118.32                   #afs-db-1.ethz.ch
+>psi.ch                 #Paul Scherrer Institut - Villigen, Switzerland
+129.129.190.140                 #afs00.psi.ch
+129.129.190.141                 #afs01.psi.ch
+129.129.190.142                 #afs02.psi.ch
+>extundo.com            #Simon Josefsson's cell
+195.42.214.241                  #slipsten.extundo.com
+>freedaemon.com         #Free Daemon Consulting, Oklahoma City, OK, USA
+66.210.104.254                  #afs0.freedaemon.com
+>membrain.com           #membrain.com
+66.93.118.125                   #stormy
+130.85.24.11                    #weasel
+130.85.24.13                    #straykitten
+>nilcons.com            #nilcons.com
+5.9.14.177                      #files.nilcons.com
+>sodre.cx               #Sodre.cx
+128.8.140.165                   #greed.sodre.cx
+>ruk.cuni.cz            #Charles University Computer Centre, Prague, CR
+195.113.0.36                    #asterix.ruk.cuni.cz
+195.113.0.37                    #obelix.ruk.cuni.cz
+195.113.0.40                    #sal.ruk.cuni.cz
+>ics.muni.cz            #Masaryk university
+147.228.240.30                  #afs-plzen.meta.zcu.cz
+147.251.9.9                     #smaug2.ics.muni.cz
+195.113.214.4                   #tarkil-xen.cesnet.cz
+>zcu.cz                 #University of West Bohemia, Czech Republic
+147.228.10.18                   #sauron.zcu.cz
+147.228.52.10                   #oknos.zcu.cz
+147.228.52.17                   #nic.zcu.cz
+>desy.de                #Deutsches Elektronen-Synchrotron
+131.169.2.19                    #afsdb2.desy.de
+131.169.2.20                    #afsdb3.desy.de
+131.169.244.60                  #solar00.desy.de
+>naf.desy.de            #National Analysis Facility at DESY
+141.34.220.32                   #tcsh1-vm1.naf.desy.de
+141.34.230.33                   #tcsh2-vm1.naf.desy.de
+141.34.230.34                   #tcsh3-vm1.naf.desy.de
+>gppc.de                #GPP Chemnitz mbH
+213.187.92.33                   #gpp1.gppc.de
+213.187.92.34                   #paulchen.gppc.de
+213.187.92.35                   #lotus.gppc.de
+>cms.hu-berlin.de       #Humboldt University Berlin
+141.20.1.65                     #commodus.cms.hu-berlin.de
+141.20.1.66                     #faustinus.cms.hu-berlin.de
+141.20.1.67                     #marcellus.cms.hu-berlin.de
+>ifh.de                 #DESY Zeuthen
+141.34.22.10                    #romulus.ifh.de
+141.34.22.11                    #remus.ifh.de
+141.34.22.29                    #hekate.ifh.de
+>integra-ev.de          #INTEGRA e.V.
+134.155.48.8                    #afsdb2.integra-ev.de
+134.155.48.63                   #afsdb1.integra-ev.de
+>lrz-muenchen.de        #Leibniz Computing Centre, Germany
+129.187.10.36                   #afs1.lrz-muenchen.de
+129.187.10.56                   #afs3.lrz-muenchen.de
+129.187.10.57                   #afs2.lrz-muenchen.de
+>ipp-garching.mpg.de    #Institut fuer Plasmaphysik
+130.183.9.5                     #afs-db1.rzg.mpg.de
+130.183.14.14                   #afs-db3.bc.rzg.mpg.de
+130.183.100.10                  #afs-db2.aug.ipp-garching.mpg.de
+>mpe.mpg.de             #MPE cell
+130.183.130.7                   #irafs1.mpe-garching.mpg.de
+130.183.134.20                  #irafs2.mpe-garching.mpg.de
+>nicsys.de              #NICsys GbR
+213.187.80.3                    #attila.nicsys.de
+>i1.informatik.rwth-aachen.de #Informatik I, RWTH Aachen
+137.226.244.79                  #remus.informatik.rwth-aachen.de
+>combi.tfh-wildau.de    #Philips Research Lab
+194.95.50.106                   #joda13.combi.tfh-wildau.de
+>tu-berlin.de           #TU Berlin
+130.149.204.10                  #afsc-pr-1.tubit.tu-berlin.de
+130.149.204.11                  #afsc-pr-2.tubit.tu-berlin.de
+130.149.204.70                  #afsc-ba-1.tubit.tu-berlin.de
+>tu-bs.de               #Technical University of Braunschweig, Germany
+134.169.1.1                     #rzafs1.rz.tu-bs.de
+134.169.1.5                     #rzafs2.rz.tu-bs.de
+134.169.1.6                     #rzafs3.rz.tu-bs.de
+>tu-chemnitz.de         #Technische Universitaet Chemnitz, Germany
+134.109.2.1                     #zuse.hrz.tu-chemnitz.de
+134.109.2.2                     #andrew.hrz.tu-chemnitz.de
+134.109.2.15                    #phoenix.hrz.tu-chemnitz.de
+>e18.ph.tum.de          #Experimental Physics, TU Munich, Germany
+129.187.154.165                 #dionysos.e18.physik.tu-muenchen.de
+129.187.154.223                 #hamlet.e18.physik.tu-muenchen.de
+>physik.uni-bonn.de     #Institute of Physics, University of Bonn, Germany
+131.220.166.33                  #afsdb1.physik.uni-bonn.de
+131.220.166.34                  #afsdb2.physik.uni-bonn.de
+131.220.166.35                  #afsdb3.physik.uni-bonn.de
+>atlass01.physik.uni-bonn.de #Bonn ATLAS
+131.220.165.43                  #atlass01.physik.uni-bonn.de
+>uni-freiburg.de        #Albert-Ludwigs-Universitat Freiburg
+132.230.6.237                   #sv8.ruf.uni-freiburg.de
+132.230.6.239                   #sv10.ruf.uni-freiburg.de
+>physik.uni-freiburg.de #Institute of Physics, University Freiburg, Germany
+132.230.6.234                   #afs1.ruf.uni-freiburg.de
+132.230.6.235                   #afs2.ruf.uni-freiburg.de
+132.230.77.12                   #sherlock.physik.uni-freiburg.de
+>math.uni-hamburg.de    #Department of Mathematics Uni Hamburg
+134.100.223.3                   #afs-core.math.uni-hamburg.de
+134.100.223.6                   #afs-core2.math.uni-hamburg.de
+134.100.223.9                   #afs-core3.math.uni-hamburg.de
+>physnet.uni-hamburg.de #PHYSnet-Rechenzentrum university of hamburg
+134.100.106.44                  #afs-core.physnet.uni-hamburg.de
+134.100.106.45                  #afs-core2.physnet.uni-hamburg.de
+134.100.106.47                  #afs-core3.physnet.uni-hamburg.de
+>iqo.uni-hannover.de    #Institut fuer Quantenoptik Hannover
+130.75.103.221                  #afs1.iqo.uni-hannover.de
+130.75.103.223                  #afs2.iqo.uni-hannover.de
+>mathi.uni-heidelberg.de #Uni Heidelberg (Mathematisches Institut)
+129.206.26.241                  #hactar.mathi.uni-heidelberg.de
+>urz.uni-heidelberg.de  #Uni Heidelberg (Rechenzentrum)
+129.206.119.10                  #afsdb.urz.uni-heidelberg.de
+129.206.119.16                  #afsdb1.urz.uni-heidelberg.de
+129.206.119.17                  #afsdb2.urz.uni-heidelberg.de
+>ziti.uni-heidelberg.de #Institute of Computer Science at the University of Heidelberg
+147.142.42.246                  #mp-sun.ziti.uni-heidelberg.de
+147.142.42.252                  #mp-pizza.ziti.uni-heidelberg.de
+>uni-hohenheim.de       #University of Hohenheim
+144.41.2.2                      #rs13.serv.uni-hohenheim.de
+144.41.2.3                      #rs14.serv.uni-hohenheim.de
+144.41.2.4                      #rs15.serv.uni-hohenheim.de
+>rz.uni-jena.de         #Rechenzentrum University of Jena, Germany
+141.35.2.180                    #afs00.rz.uni-jena.de
+141.35.2.181                    #afs01.rz.uni-jena.de
+141.35.2.182                    #afs02.rz.uni-jena.de
+>meteo.uni-koeln.de     #Univ. of Cologne - Inst. for Geophysics & Meteorology
+134.95.144.22                   #afs1.meteo.uni-koeln.de
+134.95.144.24                   #afs2.meteo.uni-koeln.de
+>rrz.uni-koeln.de       #University of Cologne - Reg Comp Center
+134.95.19.3                     #afsdb1.rrz.uni-koeln.de
+134.95.19.4                     #afsdb2.rrz.uni-koeln.de
+134.95.19.10                    #lyra.rrz.uni-koeln.de
+134.95.67.97                    #afs.thp.uni-koeln.de
+134.95.112.8                    #ladon.rrz.uni-koeln.de
+>urz.uni-magdeburg.de   #Otto-von-Guericke-Universitaet, Magdeburg
+141.44.7.6                      #lem.urz.uni-magdeburg.de
+141.44.8.14                     #bowles.urz.uni-magdeburg.de
+141.44.13.5                     #strugazki.urz.uni-magdeburg.de
+>physik.uni-mainz.de    #institute of physics, university Mainz, Germany
+134.93.130.93                   #hardy.physik.uni-mainz.de
+>uni-mannheim.de        #Uni Mannheim (Rechenzentrum)
+134.155.97.204                  #afsdb1.uni-mannheim.de
+134.155.97.205                  #afsdb2.uni-mannheim.de
+134.155.97.206                  #afsdb3.uni-mannheim.de
+>mathematik.uni-stuttgart.de #University of Stuttgart, Math Dept.
+129.69.61.1                     #fbm01.mathematik.uni-stuttgart.de
+129.69.61.2                     #fbm02.mathematik.uni-stuttgart.de
+129.69.61.3                     #fbm03.mathematik.uni-stuttgart.de
+>stud.mathematik.uni-stuttgart.de #CIP-Pool of Math. Dept, University of Stuttgart
+129.69.61.28                    #omni.mathematik.uni-stuttgart.de
+129.69.116.201                  #stud01.mathematik.uni-stuttgart.de
+129.69.116.202                  #stud02.mathematik.uni-stuttgart.de
+129.69.116.203                  #stud03.mathematik.uni-stuttgart.de
+>physik.uni-wuppertal.de #Physics department of Bergische Universität Wuppertal
+132.195.104.3                   #afs1.physik.uni-wuppertal.de
+132.195.104.230                 #afs2.physik.uni-wuppertal.de
+>s-et.aau.dk            #Aalborg Univ., The Student Society, Denmark
+130.225.196.22                  #afs.s-et.aau.dk
+>ies.auc.dk             #Aalborg Univ., Inst. of Electronic Systems, Denmark
+130.225.51.73                   #afsdb1.kom.auc.dk
+130.225.51.74                   #afsdb2.kom.auc.dk
+130.225.51.85                   #afsdb3.kom.auc.dk
+>asu.edu                #Arizona State University
+129.219.10.69                   #authen2.asu.edu
+129.219.10.70                   #authen1.asu.edu
+129.219.10.72                   #authen3.asu.edu
+>hep.caltech.edu        #Caltech High Energy Physics
+131.215.116.20                  #afs.hep.caltech.edu
+>ugcs.caltech.edu       #Caltech UGCS lab
+131.215.176.65                  #afs-c.ugcs.caltech.edu
+131.215.176.67                  #afs-a.ugcs.caltech.edu
+131.215.176.68                  #afs-b.ugcs.caltech.edu
+>andrew.cmu.edu         #Carnegie Mellon University - Computing Services Cell
+128.2.10.2                      #afsdb-01.andrew.cmu.edu
+128.2.10.7                      #afsdb-02.andrew.cmu.edu
+128.2.10.11                     #afsdb-03.andrew.cmu.edu
+>mw.andrew.cmu.edu      #Carnegie Mellon University - Middleware Test Cell
+128.2.234.24                    #null.andrew.cmu.edu
+128.2.234.170                   #mw-mgr.andrew.cmu.edu
+>club.cc.cmu.edu        #Carnegie Mellon University Computer Club
+128.2.204.149                   #barium.club.cc.cmu.edu
+128.237.157.11                  #sodium.club.cc.cmu.edu
+128.237.157.13                  #potassium.club.cc.cmu.edu
+>chem.cmu.edu           #Carnegie Mellon University - Chemistry Dept.
+128.2.40.134                    #afs.chem.cmu.edu
+128.2.40.140                    #afs2.chem.cmu.edu
+>cs.cmu.edu             #Carnegie Mellon University - School of Comp. Sci.
+128.2.172.58                    #date.srv.cs.cmu.edu
+128.2.172.60                    #fig.srv.cs.cmu.edu
+128.2.200.97                    #watermelon.srv.cs.cmu.edu
+>ece.cmu.edu            #Carnegie Mellon University - Elec. Comp. Eng. Dept.
+128.2.129.7                     #porok.ece.cmu.edu
+128.2.129.8                     #vicio.ece.cmu.edu
+128.2.129.9                     #e-xing.ece.cmu.edu
+>scotch.ece.cmu.edu     #CMU ECE CALCM research group
+128.2.134.82                    #lagavulin.ece.cmu.edu
+>qatar.cmu.edu          #Carnegie Mellon University - Qatar
+86.36.46.6                      #afs1.qatar.cmu.edu
+86.36.46.7                      #afs2.qatar.cmu.edu
+>sbp.ri.cmu.edu         #Carnegie Mellon University - Sensor Based Planning Lab
+128.2.179.12                    #nihao.sbp.ri.cmu.edu
+128.2.179.113                   #youtheman.sbp.ri.cmu.edu
+>cnf.cornell.edu        #CNF
+128.253.198.9                   #hole.cnf.cornell.edu
+128.253.198.27                  #smoke.cnf.cornell.edu
+128.253.198.231                 #mist.cnf.cornell.edu
+>math.cornell.edu       #Cornell Math Dept
+128.84.234.12                   #pooh.math.cornell.edu
+128.84.234.16                   #bernoulli.math.cornell.edu
+128.84.234.162                  #dyno.math.cornell.edu
+>msc.cornell.edu        #Cornell University Materials Science Center
+128.84.231.242                  #miranda.ccmr.cornell.edu
+128.84.241.35                   #co.ccmr.cornell.edu
+128.84.249.78                   #dax.ccmr.cornell.edu
+>dbic.dartmouth.edu     #Dartmouth Brain Imaging Center
+129.170.30.143                  #dbicafs1.dartmouth.edu
+129.170.30.144                  #dbicafs2.dartmouth.edu
+129.170.30.145                  #dbicafs3.dartmouth.edu
+>northstar.dartmouth.edu #Dartmouth College Research Computing
+129.170.16.22                   #halley.dartmouth.edu
+129.170.16.26                   #andromeda.dartmouth.edu
+129.170.199.250                 #kuiper.dartmouth.edu
+>cs.hm.edu              #Department Computer Science Munich University Of Applied Science
+129.187.208.31                  #afs1.cs.hm.edu
+>eecs.harvard.edu       #Harvard - EECS
+140.247.60.64                   #lefkada.eecs.harvard.edu
+140.247.60.83                   #corfu.eecs.harvard.edu
+>iastate.edu            #Iowa State University
+129.186.1.243                   #afsdb-1.iastate.edu
+129.186.6.243                   #afsdb-2.iastate.edu
+129.186.142.243                 #afsdb-3.iastate.edu
+>acm.jhu.edu            #Johns Hopkins ACM chapter
+128.220.35.191                  #chicago.acm.jhu.edu
+128.220.70.76                   #typhon.acm.jhu.edu
+>athena.mit.edu         #MIT/Athena cell
+18.7.45.11                      #leda.mit.edu
+18.9.48.11                      #castor.mit.edu
+18.9.48.12                      #pollux.mit.edu
+>csail.mit.edu          #MIT Computer Science & Artificial Intelligence Lab
+128.30.2.13                     #titanic.csail.mit.edu
+128.30.2.31                     #vasa.csail.mit.edu
+128.30.2.75                     #maine.csail.mit.edu
+>lns.mit.edu            #MIT/LNS Cell
+198.125.160.134                 #afs2.lns.mit.edu.
+198.125.160.217                 #afsdbserv1.lns.mit.edu.
+198.125.160.218                 #afsdbserv2.lns.mit.edu.
+>net.mit.edu            #MIT/Network Group cell
+18.7.62.60                      #willy.mit.edu
+18.9.48.15                      #moby.mit.edu
+18.9.48.16                      #springer.mit.edu
+>sipb.mit.edu           #MIT/SIPB cell
+18.4.60.19                      #reynelda.mit.edu
+18.4.60.22                      #rosebud.mit.edu
+18.4.60.23                      #ronald-ann.mit.edu
+>msu.edu                #Michigan State University Main Cell
+35.9.7.10                       #afsdb0.cl.msu.edu
+35.9.7.11                       #afsdb1.cl.msu.edu
+35.9.7.12                       #afsdb2.cl.msu.edu
+>nd.edu                 #University of Notre Dame
+129.74.223.17                   #john.helios.nd.edu
+129.74.223.33                   #lizardo.helios.nd.edu
+129.74.223.65                   #buckaroo.helios.nd.edu
+>crc.nd.edu             #University of Notre Dame - Center for Research Computing
+129.74.85.34                    #afsdb1.crc.nd.edu
+129.74.85.35                    #afsdb2.crc.nd.edu
+129.74.85.36                    #afsdb3.crc.nd.edu
+>pitt.edu               #University of Pittsburgh
+136.142.8.15                    #afs09.srv.cis.pitt.edu
+136.142.8.20                    #afs10.srv.cis.pitt.edu
+136.142.8.21                    #afs11.srv.cis.pitt.edu
+>cs.pitt.edu            #University of Pittsburgh - Computer Science
+136.142.22.5                    #afs01.cs.pitt.edu
+136.142.22.6                    #afs02.cs.pitt.edu
+136.142.22.7                    #afs03.cs.pitt.edu
+>psc.edu                #PSC (Pittsburgh Supercomputing Center)
+128.182.59.182                  #shaggy.psc.edu
+128.182.66.184                  #velma.psc.edu
+128.182.66.185                  #daphne.psc.edu
+>scoobydoo.psc.edu      #PSC Test Cell
+128.182.59.181                  #scooby.psc.edu
+>cede.psu.edu           #Penn State - Center for Engr. Design & Entrepeneurship
+146.186.218.10                  #greenly.cede.psu.edu
+146.186.218.60                  #b50.cede.psu.edu
+146.186.218.246                 #stalin.cede.psu.edu
+>rose-hulman.edu        #Rose-Hulman Institute of Technology
+137.112.7.11                    #afs1.rose-hulman.edu
+137.112.7.12                    #afs2.rose-hulman.edu
+137.112.7.13                    #afs3.rose-hulman.edu
+>cs.rose-hulman.edu     #Rose-Hulman CS Department
+137.112.40.10                   #galaxy.cs.rose-hulman.edu
+>rpi.edu                #Rensselaer Polytechnic Institute
+128.113.22.11                   #saul.server.rpi.edu
+128.113.22.12                   #joab.server.rpi.edu
+128.113.22.13                   #korah.server.rpi.edu
+128.113.22.14                   #achan.server.rpi.edu
+>hep.sc.edu             #University of South Carolina, Dept. of Physics
+129.252.78.77                   #cpeven.physics.sc.edu
+>cs.stanford.edu        #Stanford University Computer Science Department
+171.64.64.10                    #cs-afs-1.Stanford.EDU
+171.64.64.66                    #cs-afs-2.stanford.edu
+171.64.64.69                    #cs-afs-3.stanford.edu
+>ir.stanford.edu        #Stanford University
+171.64.7.222                    #afsdb1.stanford.edu
+171.64.7.234                    #afsdb2.stanford.edu
+171.64.7.246                    #afsdb3.stanford.edu
+>slac.stanford.edu      #Stanford Linear Accelerator Center
+134.79.18.25                    #afsdb1.slac.stanford.edu
+134.79.18.26                    #afsdb2.slac.stanford.edu
+134.79.18.27                    #afsdb3.slac.stanford.edu
+>physics.ucsb.edu       #UC Santa Barbara, Physics Dept
+128.111.18.161                  #ledzeppelin.physics.ucsb.edu
+>cats.ucsc.edu          #University of California, Santa Cruz
+128.114.123.8                   #afs-prod-front-1.ucsc.edu
+128.114.123.9                   #afs-prod-front-2.ucsc.edu
+128.114.123.10                  #afs-prod-front-3.ucsc.edu
+>ncsa.uiuc.edu          #National Center for Supercomputing Applications at Illinois
+141.142.192.66                  #nile-vm.ncsa.uiuc.edu
+141.142.192.143                 #congo-vm.ncsa.uiuc.edu
+141.142.192.144                 #kaskaskia-vm.ncsa.uiuc.edu
+>umbc.edu               #University of Maryland, Baltimore County
+130.85.24.23                    #db2.afs.umbc.edu
+130.85.24.87                    #db3.afs.umbc.edu
+130.85.24.101                   #db1.afs.umbc.edu
+>glue.umd.edu           #University of Maryland - Project Glue
+128.8.70.11                     #olmec.umd.edu
+128.8.236.4                     #egypt.umd.edu
+128.8.236.230                   #babylon.umd.edu
+>wam.umd.edu            #University of Maryland Network WAM Project
+128.8.70.9                      #csc-srv.wam.umd.edu
+128.8.236.5                     #avw-srv.wam.umd.edu
+128.8.236.231                   #ptx-srv.wam.umd.edu
+>umich.edu              #University of Michigan - Campus
+141.211.1.32                    #fear.ifs.umich.edu
+141.211.1.33                    #surprise.ifs.umich.edu
+141.211.1.34                    #ruthless.ifs.umich.edu
+>atlas.umich.edu        #ATLAS group cell in physics at University of Michigan
+141.211.43.102                  #linat02.grid.umich.edu
+141.211.43.103                  #linat03.grid.umich.edu
+141.211.43.104                  #linat04.grid.umich.edu
+>citi.umich.edu         #University of Michigan - Center for Information Technology Integ
+141.212.112.5                   #babylon.citi.umich.edu
+>isis.unc.edu           #Univ. of NC at Chapel Hill - ITS
+152.2.1.5                       #db0.isis.unc.edu
+152.2.1.6                       #db1.isis.unc.edu
+152.2.1.7                       #db2.isis.unc.edu
+>eng.utah.edu           #University of Utah - Engineering
+155.98.111.9                    #lenny.eng.utah.edu
+155.98.111.10                   #carl.eng.utah.edu
+>cs.uwm.edu             #University of Wisconsin--Milwaukee
+129.89.38.124                   #solomons.cs.uwm.edu
+129.89.143.71                   #filip.cs.uwm.edu
+>cs.vassar.edu          #Computer Science research network / Vassar College
+143.229.6.73                    #afsserv.cs.vassar.edu
+>cs.wisc.edu            #Univ. of Wisconsin-Madison, Computer Sciences Dept.
+128.105.132.14                  #timon.cs.wisc.edu
+128.105.132.15                  #pumbaa.cs.wisc.edu
+128.105.132.16                  #zazu.cs.wisc.edu
+>engr.wisc.edu          #University of Wisconsin-Madison, College of Engineering
+144.92.13.14                    #larry.cae.wisc.edu
+144.92.13.15                    #curly.cae.wisc.edu
+144.92.13.16                    #moe.cae.wisc.edu
+>hep.wisc.edu           #University of Wisconsin -- High Energy Physics
+128.104.28.219                  #anise.hep.wisc.edu
+144.92.180.7                    #rosemary.hep.wisc.edu
+144.92.180.30                   #fennel.hep.wisc.edu
+>physics.wisc.edu       #Univ. of Wisconsin-Madison, Physics Department
+128.104.160.13                  #kendra.physics.wisc.edu
+128.104.160.14                  #fray.physics.wisc.edu
+128.104.160.15                  #buffy.physics.wisc.edu
+>ciemat.es              #Ciemat, Madrid, Spain
+192.101.165.10                  #afsdb1.ciemat.es
+192.101.165.11                  #afsdb2.ciemat.es
+>ifca.unican.es         #Instituto de Fisica de Cantabria (IFCA), Santander, Spain
+193.144.209.20                  #gridwall.ifca.unican.es
+>ific.uv.es             #Instituto de Fisica Corpuscular, Valencia, Spain
+147.156.163.11                  #alpha.ific.uv.es
+>alteholz.eu            #alteholz.eu
+78.47.192.125                   #krb1eu.afs.alteholz.net
+>in2p3.fr               #IN2P3
+134.158.104.11                  #ccafsdb01.in2p3.fr
+134.158.104.12                  #ccafsdb02.in2p3.fr
+134.158.104.13                  #ccafsdb03.in2p3.fr
+>mcc.ac.gb              #University of Manchester
+130.88.203.41                   #nevis.mc.man.ac.uk
+130.88.203.144                  #eryri.mc.man.ac.uk
+130.88.203.145                  #scafell.mc.man.ac.uk
+>anl.gov                #Argonne National Laboratory
+146.137.96.33                   #arteus.it.anl.gov
+146.137.162.88                  #agamemnon.it.anl.gov
+146.137.194.80                  #antenor.it.anl.gov
+>rhic.bnl.gov           #Relativistic Heavy Ion Collider
+130.199.6.51                    #rafs03.rcf.bnl.gov
+130.199.6.52                    #rafs02.rcf.bnl.gov
+130.199.6.69                    #rafs01.rcf.bnl.gov
+>usatlas.bnl.gov        #US Atlas Tier 1 Facility at BNL
+130.199.48.32                   #aafs01.usatlas.bnl.gov
+130.199.48.33                   #aafs02.usatlas.bnl.gov
+130.199.48.34                   #aafs03.usatlas.bnl.gov
+>jpl.nasa.gov           #Jet Propulsion Laboratory
+137.78.160.21                   #afsdb08.jpl.nasa.gov
+137.78.160.22                   #afsdb09.jpl.nasa.gov
+137.78.160.23                   #afsdb10.jpl.nasa.gov
+>doe.atomki.hu          #Institute of Nuclear Research (MTA ATOMKI), Debrecen, Hungary
+193.6.179.31                    #afs.doe.atomki.hu
+>bme.hu                 #Budapest University of Technology and Economics
+152.66.241.6                    #afs.iit.bme.hu
+>kfki.hu                #Wigner Research Centre for Physics - Budapest, Hungary
+148.6.2.109                     #afs0.kfki.hu
+>rnd.ru.is              #Reykjavik University Research and Development Network
+130.208.242.66                  #lithium.rnd.ru.is.
+130.208.242.67                  #beryllium.rnd.ru.is.
+130.208.242.68                  #boron.rnd.ru.is.
+>caspur.it              #CASPUR Inter-University Computing Consortium, Rome
+193.204.5.45                    #pomodoro.caspur.it
+193.204.5.46                    #banana.caspur.it
+193.204.5.50                    #maslo.caspur.it
+>enea.it                #ENEA New Tech. Energy & Environment Agency, Italy
+192.107.54.5                    #aixfs.frascati.enea.it
+192.107.54.11                   #rs2ced.frascati.enea.it
+192.107.54.12                   #43p.frascati.enea.it
+>fusione.it             #Assoz. FUSIONE/Euratom, ENEA, Frascati-Italy
+192.107.90.2                    #fusafs1.frascati.enea.it
+192.107.90.3                    #fusafs2.frascati.enea.it
+192.107.90.4                    #fusafs3.frascati.enea.it
+>icemb.it               #ICEMB, Universita' La Sapienza - Rome - Italy
+193.204.6.130                   #icembfs.caspur.it
+>ictp.it                #The Abdus Salam International Centre for Theoretical Physics (IC
+140.105.34.7                    #afsdb1.ictp.it
+140.105.34.8                    #afsdb2.ictp.it
+>infn.it                #Istituto Nazionale di Fisica Nucleare (INFN), Italia
+131.154.1.7                     #afscnaf.infn.it
+141.108.26.75                   #afsrm1.roma1.infn.it
+192.84.134.75                   #afsna.na.infn.it
+>ba.infn.it             #INFN, Sezione di Bari
+193.206.185.235                 #baafsserver.ba.infn.it
+193.206.185.236                 #debsrv.ba.infn.it
+>kloe.infn.it           #INFN, KLOE experiment at Laboratori di Frascati
+192.135.25.111                  #kloeafs1.lnf.infn.it
+192.135.25.112                  #kloeafs2.lnf.infn.it
+>le.infn.it             #INFN, Sezione di Lecce
+192.84.152.40                   #afs01.le.infn.it
+192.84.152.148                  #afs02.le.infn.it
+>lnf.infn.it            #INFN, Laboratori Nazionali di Frascati
+193.206.84.121                  #afs1.lnf.infn.it
+193.206.84.122                  #afs2.lnf.infn.it
+193.206.84.123                  #afs3.lnf.infn.it
+>lngs.infn.it           #INFN, Laboratori Nazionali del Gran Sasso
+192.84.135.21                   #afs1.lngs.infn.it
+192.84.135.133                  #afs2.lngs.infn.it
+>pi.infn.it             #INFN, Sezione di Pisa
+192.84.133.50                   #aix1.pi.infn.it
+212.189.152.6                   #afs1.pi.infn.it
+212.189.152.7                   #afs2.pi.infn.it
+>roma3.infn.it          #Istituto Nazionale di Fisica Nucleare (INFN), Italia
+193.205.159.17                  #afsrm3.roma3.infn.it
+>psm.it                 #Progetto San Marco, Universita' di Roma-1
+151.100.1.65                    #atlante.psm.uniroma1.it
+>tgrid.it               #CASPUR-CILEA-CINECA Grid Cell
+193.204.5.33                    #cccgrid.caspur.it
+>math.unifi.it          #math.unifi.it
+150.217.34.182                  #xeno.math.unifi.it
+>ing.uniroma1.it        #Universita' La Sapienza, Fac. Ingeneria
+151.100.85.253                  #alfa.ing.uniroma1.it
+>dia.uniroma3.it        #University Roma Tre - DIA
+193.204.161.67                  #srv.dia.uniroma3.it
+193.204.161.79                  #aux.dia.uniroma3.it
+193.204.161.118                 #afs.dia.uniroma3.it
+>vn.uniroma3.it         #University Roma Tre, area Vasca Navale
+193.205.219.59                  #alfa2.dia.uniroma3.it
+193.205.219.60                  #beta2.dia.uniroma3.it
+193.205.219.61                  #gamma2.dia.uniroma3.it
+>italia                 #Italian public AFS cell
+193.204.5.9                     #afs.caspur.it
+>cmf.nrl.navy.mil       #Naval Research Laboratory - Center for Computational Science
+134.207.12.68                   #picard.cmf.nrl.navy.mil
+134.207.12.69                   #riker.cmf.nrl.navy.mil
+134.207.12.70                   #kirk.cmf.nrl.navy.mil
+>lcp.nrl.navy.mil       #Naval Research Lab - Lab for Computational Physics
+132.250.114.2                   #afs1.lcp.nrl.navy.mil
+132.250.114.4                   #afs2.lcp.nrl.navy.mil
+132.250.114.6                   #afs3.lcp.nrl.navy.mil
+>nucleares.unam.mx      #Instituto de Ciencias Nucleares, UNAM, Mexico
+132.248.29.50                   #nahualli.nucleares.unam.mx
+>crossproduct.net       #crossproduct.net
+207.114.88.173                  #geodesic.crossproduct.net
+>epitech.net            #EPITECH, France
+163.5.255.41                    #afs-db-1.epitech.net
+163.5.255.42                    #afs-db-2.epitech.net
+>es.net                 #Energy Sciences Net
+198.128.3.21                    #fs1.es.net
+198.128.3.22                    #fs2.es.net
+198.128.3.23                    #fs3.es.net
+>gorlaeus.net           #Gorlaeus Laboratories, Leiden University
+132.229.170.27                  #fwncisafs1.gorlaeus.net
+>laroia.net             #Laroia Networks
+66.66.102.254                   #supercore.laroia.net
+>pallissard.net         #pallissard.net
+35.184.35.247                   #files.pallissard.net
+>sinenomine.net         #Sine Nomine Associates
+207.89.43.108                   #afsdb3.sinenomine.net
+207.89.43.109                   #afsdb4.sinenomine.net
+207.89.43.110                   #afsdb5.sinenomine.net
+>slackers.net           #The Slackers' Network
+199.4.150.159                   #alexandria.slackers.net
+>tproa.net              #The People's Republic of Ames
+204.11.35.83                    #service-3.tproa.net
+204.11.35.84                    #service-4.tproa.net
+204.11.35.85                    #service-5.tproa.net
+>interdose.net          #Interdose Ltd. & Co. KG, Germany
+80.190.171.42                   #bfd9000.tow5.interdose.net
+80.190.171.43                   #bfd9001.tow5.interdose.net
+>nikhef.nl              #The Dutch National Institute for High Energy Physics
+192.16.185.26                   #afs1.nikhef.nl
+192.16.185.27                   #afs2.nikhef.nl
+>acm-csuf.org           #California State Univerisity Fullerton ACM
+137.151.29.193                  #afs1.acm-csuf.org
+>adrake.org             #adrake.org
+128.2.98.241                    #afs.adrake.org
+>bazquux.org            #Baz Quux Organization
+66.207.142.196                  #baxquux.org
+>coed.org               #Adam Pennington's Cell
+66.93.61.184                    #vice1.coed.org
+128.237.157.35                  #vice3.coed.org
+>dementia.org           #Dementia Unlimited (old)
+128.2.13.209                    #dedlock.dementix.org
+128.2.234.204                   #vorkana.dementix.org
+128.2.235.26                    #meredith.dementix.org
+>dementix.org           #Dementia Unlimited
+128.2.13.209                    #dedlock.dementix.org
+128.2.234.204                   #vorkana.dementix.org
+128.2.235.26                    #meredith.dementix.org
+>idahofuturetruck.org   #University of Idaho hybrid vehicle development
+12.18.238.210                   #dsle210.fsr.net
+>afs.ietfng.org         #ietfng.org
+67.62.51.95                     #a.afs.ietfng.org
+>jeaton.org             #jeaton.org (Jeffrey Eaton, jeaton@jeaton.org)
+128.2.234.89                    #jeaton-org-01.jeaton.org
+128.2.234.92                    #jeaton-org-02.jeaton.org
+>mrph.org               #Mrph
+66.207.133.1                    #sanber.mrph.org
+128.2.99.209                    #hernandarias.mrph.org
+>mstacm.org             #Missouri Science & Technology - ACM
+131.151.249.193                 #acm.mst.edu
+>nomh.org               #nomh.org
+204.29.154.12                   #iota.nomh.org
+204.29.154.32                   #adversity.xi.nomh.org
+>oc7.org                #The OC7 Project
+128.2.122.140                   #knife.oc7.org
+207.22.77.170                   #spoon.oc7.org
+>pfriedma.org           #pfriedma.org
+72.95.215.18                    #vice.pfriedma.org
+>riscpkg.org            #The RISC OS Packaging Project
+83.104.175.10                   #delenn.riscpkg.org
+>kth.se                 #Royal Institute of Technology, Stockholm, Sweden
+130.237.32.145                  #sonen.e.kth.se
+130.237.48.7                    #anden.e.kth.se
+130.237.48.244                  #fadern.e.kth.se
+>ict.kth.se             #Royal Institute of Technology, Information and Communication tec
+130.237.216.11                  #afsdb1.ict.kth.se
+130.237.216.12                  #afsdb2.ict.kth.se
+130.237.216.13                  #afsdb3.ict.kth.se
+>it.kth.se              #Royal Institute of Technology, Teleinformatics, Kista
+130.237.216.14                  #afsdb1.it.kth.se
+130.237.216.15                  #afsdb2.it.kth.se
+130.237.216.16                  #afsdb3.it.kth.se
+>md.kth.se              #Royal Institute of Technology, MMK
+130.237.32.63                   #mdafs-1.sys.kth.se
+>mech.kth.se            #Royal Institute of Technology, MECH
+130.237.233.142                 #matterhorn.mech.kth.se
+130.237.233.143                 #castor.mech.kth.se
+130.237.233.144                 #pollux.mech.kth.se
+>nada.kth.se            #Royal Institute of Technology, NADA
+130.237.223.12                  #afsdb-2.csc.kth.se
+130.237.224.78                  #afsdb-3.csc.kth.se
+130.237.227.23                  #afsdb-4.csc.kth.se
+>pdc.kth.se             #Royal Institute of Technology, PDC
+130.237.232.29                  #crab.pdc.kth.se
+130.237.232.112                 #anna.pdc.kth.se
+130.237.232.114                 #hokkigai.pdc.kth.se
+>stacken.kth.se         #Stacken Computer Club
+130.237.234.3                   #milko.stacken.kth.se
+130.237.234.43                  #hot.stacken.kth.se
+130.237.234.101                 #fishburger.stacken.kth.se
+>syd.kth.se             #Royal Institute of Technology, KTH-Syd
+130.237.83.23                   #afs.haninge.kth.se
+>sanchin.se             #Sanchin Consulting AB, Sweden
+192.195.148.10                  #sesan.sanchin.se
+>su.se                  #Stockholm University
+130.237.162.81                  #afsdb1.su.se
+130.237.162.82                  #afsdb2.su.se
+130.237.162.230                 #afsdb3.su.se
+>fysik.su.se            #Stockholm University, Physics Department
+130.237.244.134                 #srv01.fysik.su.se
+130.237.244.135                 #srv02.fysik.su.se
+130.237.244.139                 #srv05.fysik.su.se
+>f9.ijs.si              #F9, Jozef Stefan Institue
+194.249.156.1                   #brenta.ijs.si
+>p-ng.si                #University of Nova Gorica
+193.2.120.2                     #solkan.p-ng.si
+193.2.120.9                     #sabotin.p-ng.si
+>ihep.su                #Institute for High-Energy Physics
+194.190.165.201                 #fs0001.ihep.su
+194.190.165.202                 #fs0002.ihep.su
+>motherfsck.tech        #motherfsck.tech
+>hep-ex.physics.metu.edu.tr #METU Department of Physics, Experimental HEP group, Ankara/Turke
+144.122.31.131                  #neutrino.physics.metu.edu.tr
+>phy.bris.ac.uk         #Bristol University - physics
+137.222.74.18                   #zen.phy.bris.ac.uk
+>inf.ed.ac.uk           #School of Informatics, University of Edinburgh
+129.215.64.16                   #afsdb0.inf.ed.ac.uk
+129.215.64.17                   #afsdb1.inf.ed.ac.uk
+129.215.64.18                   #afsdb2.inf.ed.ac.uk
+>phas.gla.ac.uk         #Univeristy of Glasgow Physics And Astronomy
+194.36.1.19                     #afsdb1.phas.gla.ac.uk
+194.36.1.27                     #afsdb3.phas.gla.ac.uk
+194.36.1.33                     #afsdb2.phas.gla.ac.uk
+>ic.ac.uk               #Imperial College London
+155.198.63.148                  #icafs2.cc.ic.ac.uk
+155.198.63.149                  #icafs1.cc.ic.ac.uk
+>hep.man.ac.uk          #Manchester HEP
+194.36.2.3                      #afs1.hep.man.ac.uk
+194.36.2.4                      #afs2.hep.man.ac.uk
+194.36.2.5                      #afs3.hep.man.ac.uk
+>tlabs.ac.za            #iThemba LABS Cell
+196.24.232.1                    #afs01.tlabs.ac.za
+196.24.232.2                    #afs02.tlabs.ac.za
+196.24.232.3                    #afs03.tlabs.ac.za

diff --git a/debian/ConfigUtils.pm b/debian/ConfigUtils.pm
new file mode 100644 (file)
index 0000000..4d35047
--- /dev/null
+++ b/debian/ConfigUtils.pm
@@ -0,0 +1,26 @@
+# This is -*- perl -*-
+
+package Debian::OpenAFS::ConfigUtils;
+
+use strict;
+use vars qw( @ISA @EXPORT @unwinds);
+@ISA = qw(Exporter);
+require Exporter;
+@EXPORT = qw(@unwinds run unwind);
+
+sub run ($) {
+  print join(' ', @_);
+  print "\n";
+  system (@_)  == 0
+    or die "Failed: $?\n";
+}
+
+# This subroutine takes a command to run in case of failure.  After
+# each succesful step, this routine should be run with a command to
+# undo the successful step.
+
+        sub unwind($) {
+          push @unwinds, $_[0];
+        }
+
+1;

diff --git a/debian/README.Debian b/debian/README.Debian
new file mode 100644 (file)
index 0000000..2f43531
--- /dev/null
+++ b/debian/README.Debian
@@ -0,0 +1,170 @@
+                            OpenAFS for Debian
+
+Introduction
+
+  For an OpenAFS client system, install openafs-client and a kernel
+  module.  See README.modules for information on how to build the kernel
+  module for your system.  Then, read /etc/openafs/afs.conf to understand
+  the client configuration options.  The openafs-client package will
+  attempt to guess at a good cache configuration based on the size of your
+  cache, but you may want to tune it further.  There are also other
+  options configured in that file you may want to consider.
+
+  FAM does not work correctly with AFS except for directories that are
+  world-readable since it does not run in the user's security context and
+  therefore doesn't have the user's AFS tokens.  If you are using FAM,
+  you'll encounter errors from file managers such as Nautilus that use it
+  if you browse restricted AFS directories.  Instead of FAM, install
+  gamin, which runs in the user's security context and works correctly
+  with AFS.
+
+  For information on how to set up an OpenAFS server, read README.servers.
+  You will want the openafs-fileserver package for a file server and,
+  additionally, the openafs-dbserver package for a database server.
+
+Documentation
+
+  For the complete OpenAFS manual, install openafs-doc.  This is the same
+  documentation as found at <http://www.openafs.org/>, and is
+  unfortunately outdated in several respects, but it's the best that we
+  have at present.
+
+  If want to set up a new cell, read README.servers and then look at the
+  example session in configuration-transcript.txt.gz in this directory.
+  The procedure outlined in these two files is much simpler and more
+  secure than the one in the OpenAFS documentation, but the OpenAFS
+  documentation provides useful background.
+
+Build Options
+
+  The OpenAFS file server has been built with --enable-demand-attach-fs,
+  which enables a new method of handling volume attachment.  Volumes will
+  be attached only when needed, and the file server will persist state to
+  disk when shutting down for faster restarts.  This file server mode is
+  experimental and should not yet be used for production data.  Please
+  report any bugs you encounter.
+
+  The OpenAFS servers have been built with --enable-supergroups, which
+  permits nesting of PTS groups.  Be aware that the PT database created by
+  these packages is not compatible with servers not built with
+  --enable-supergroups if nested PTS groups are used.  In other words, if
+  you need the openafs-dbserver package to interoperate with ptservers
+  that aren't built with this option, don't use this capability.
+
+  The OpenAFS client and kernel module have been built with
+  --enable-disconnected, which enables experimental support for
+  disconnected operations.  This support is still experimental and known
+  to have problems, but should not interfere with normal use of AFS.  If
+  you want to experiment with it, see fs help discon.
+
+Changes Relative to Stock OpenAFS
+
+  Long-time AFS users may be confused by the directory layout.  The files
+  that normally go in /usr/vice/etc go in /etc/openafs.  The cache should
+  be mounted on /var/cache/openafs.  The server files have been moved
+  around even more; see README.servers for the details.
+
+  The OpenAFS kernel module is named openafs, not libafs, to better match
+  normal Linux kernel module naming standards.  The Debian source package
+  only builds one kernel module that matches the kernel source tree it is
+  built against and does not attempt to build separate SMP and non-SMP
+  modules against the same tree.  Doing so does not work on all platforms.
+  To distinguish between an SMP and a non-SMP kernel module package, use
+  --append_to_version; see README.modules for more information.
+
+  The AFS up utility is installed as afs-up, since the standard name is
+  rather generic.
+
+  The libopenafs-dev package only includes static libraries and there are
+  no shared library packages.  The shared libraries built by AFS are not
+  compatible with Debian policy.  They do not have a stable ABI or an
+  appropriate SONAME.
+
+  kaserver is not included.  New AFS cells should use Kerberos v5 rather
+  than the old K4-based kaserver KDC.
+
+Debugging and Bug Reporting
+
+  The current OpenAFS installation process installs fileserver and
+  volserver unstripped, since backtraces and other debugging information
+  for those binaries are necessary to track down file server problems.
+  For the Debian packages, the fileserver and volserver binaries in the
+  openafs-fileserver package are stripped, but the debugging information
+  is available in the openafs-dbg package, which can be installed
+  separately.  If it is installed, gdb will find that debugging
+  information automatically.
+
+  Eventually the openafs-dbg package will contain debugging information
+  for all OpenAFS binaries.
+
+  When reporting a bug in the OpenAFS client, please include your exact
+  kernel version and architecture (reportbug will do this for you).  Also,
+  if the client caused a kernel oops or BUG, be sure to include the
+  complete kernel output, including the lines before the oops.  That's
+  where the OpenAFS error message, if any, will be.
+
+  When reporting a bug in the OpenAFS file server, please include
+  backtrace information from a core dump, if any.  If the file server is
+  deadlocked, you can capture a core dump using the gcore script that
+  comes with the gdb package.  The file server is threaded, so use the
+  command "thread apply all backtrace" in gdb to get a complete backtrace.
+  It's also often useful to have the output of rxdebug <server> 7000 at
+  the time of the problem and the FileLog from the file server.  You can
+  increase the logging level of the file server with kill -TSTP (and reset
+  it to 0 with kill -HUP).
+
+  You can report any bug in OpenAFS against the Debian package with
+  reportbug and the OpenAFS package maintainers will forward the bug
+  upstream as necessary.  If you do want to report a bug directly
+  upstream, see http://www.openafs.org/ for bug reporting instructions.
+
+PAM Authentication
+
+  Any new OpenAFS cell is strongly encouraged to use Kerberos v5 for
+  authentication.  If you want PAM to automatically obtain AFS credentials
+  and you are using Kerberos v5, you will want to install the libpam-krb5
+  and libpam-afs-session packages and then put something like the
+  following in /etc/pam.d/common-auth:
+
+      auth    [success=ok default=1]  pam_krb5.so ignore_root
+      auth    [default=done]          pam_afs_session.so
+      auth    required                pam_unix.so nullok_secure try_first_pass
+
+  and something like the following in /etc/pam.d/common-session:
+
+      session optional        pam_krb5.so ignore_root
+      session optional        pam_afs_session.so
+      session required        pam_unix.so
+
+  You'll probably also want the following in /etc/pam.d/common-account:
+
+      account required        pam_krb5.so ignore_root
+      account required        pam_unix.so
+
+  There are, of course, many variations depending on what different
+  mechanism you want to use and how you want to handle fallbacks.
+
+  If you are still using Kerberos v4 and the OpenAFS kaserver (or a KDC
+  that understands the same protocol) for authentication, you can instead
+  use the libpam-openafs-kaserver package and a configuration like:
+
+      auth    sufficient      pam_afs.so ignore_root
+      auth    required        pam_unix.so nullok_secure try_first_pass
+
+  in /etc/pam.d/common-auth and:
+
+      session optional        pam_afs.so
+      session required        pam_unix.so
+
+  in /etc/pam.d/common-session.  Use pam_afs.krb.so instead of pam_afs.so
+  if you also want the PAM module to acquire a ticket cache for you.  If
+  using this configuration with sshd, you may need to disable privilege
+  separation to get everything working properly.  I've had mixed results
+  with that.  Obviously, converting to Kerberos v5 authentication is
+  strongly preferred.
+
+  If you are using the kaserver as your KDC, you may also want to install
+  the openafs-kpasswd package to get the administrative utilities for
+  managing those Kerberos accounts.
+
+ -- Russ Allbery <rra@debian.org>, Tue,  6 Apr 2010 15:04:42 -0700

diff --git a/debian/README.modules b/debian/README.modules
new file mode 100644 (file)
index 0000000..b82fcc6
--- /dev/null
+++ b/debian/README.modules
@@ -0,0 +1,128 @@
+                         Building Kernel Modules
+
+Introduction
+
+  The easiest way to get AFS modules is to install prebuilt modules.  For
+  example, if you are running kernel 2.6.26-2-686, you might try:
+
+      apt-get install openafs-modules-2.6.26-2-686
+
+  Pre-built modules are not provided with Debian (building and maintaining
+  them in Debian proper poses too many problems), but many organizations
+  that use OpenAFS build their own and provide them locally.
+
+  If this doesn't work, you will need to build your own modules.  There
+  are three methods for doing this.
+
+  When following any of these methods, be aware that the Debian package
+  creates a module named openafs, not libafs as is used by upstream.  It
+  also prefers not to add the .mp extension for modules built for SMP
+  kernels; the indication of whether the module is for an SMP kernel
+  should go into the package name via something like --append_to_version,
+  not into the file name of the module.
+
+DKMS
+
+  DKMS has some caveats, but it's the easiest method of building modules.
+  It provides infrastructure that will automatically rebuild kernel
+  modules when the source package or the kernel has been upgraded.
+
+  To build OpenAFS kernel modules via DKMS, install the linux-headers
+  package corresponding to the version of the kernel that you have
+  installed and then install the openafs-modules-dkms package.  This
+  depends on DKMS and will install it as well.  The OpenAFS kernel modules
+  should then be built automatically and will be installed under
+  updates/dkms in the module tree for your kernel.
+
+  Please note that DKMS will only build modules for kernels that have the
+  Linux headers installed.  When you upgrade your kernel, you need to
+  install the new linux-headers package at the same time, or you'll end up
+  without an OpenAFS module for the new kernel.  If you're using the
+  tracking packages for the kernel (linux-image-2.6-686 or the like), also
+  install the tracking package for the kernel headers
+  (linux-headers-2.6-686 in that example).
+
+module-assistant
+
+  This method is the best method for manually building kernel modules for
+  kernels that come with Debian, since module-assistant knows how to get
+  the right header files to build modules for your currently running
+  kernel.  Generally, all you should have to do is:
+
+      apt-get install module-assistant
+      module-assistant auto-install openafs
+
+  This combines all of the following steps, taking the defaults.  If you
+  want to do it more step-by-step, first prepare the kernel headers and
+  install openafs-modules-source with:
+
+      apt-get install module-assistant
+      module-assistant prepare openafs-modules
+
+  If you want to build modules for a different kernel than your currently
+  running one, pass the -l flag to module-assistant.  See the man page.
+  module-assistant may be able to find the right packages itself or it may
+  tell you to install particular packages.  Once you've finished with
+  that, build the module with:
+
+      module-assistant auto-build openafs-modules
+
+  You may prefer to pass module-assistant the -t flag to get more
+  conventional output.  If everything works correctly, the openafs-modules
+  deb should be created in /usr/src.  You can use dpkg -i to install it.
+
+  module-assistant will take care of naming the openafs-modules package
+  correctly so that it matches the name of the kernel-image package and
+  installs its modules into the correct directory.
+
+  If you have ever previously built a module with module-assistant, always
+  run:
+
+      module-assistant clean openafs
+
+  before building a new module.  module-assistant doesn't always properly
+  clean up after itself, and the mix of files from old and new versions of
+  OpenAFS can cause serious problems with the resulting module.
+
+make-kpkg
+
+  This method may work better than module-assistant if you're also
+  building your own kernel rather than using the pre-packaged Debian one.
+
+  Install a kernel source package and untar it in /usr/src.  Then, install
+  openafs-modules-source.
+
+      apt-get install openafs-modules-source
+
+  Next, unpack openafs-modules-source:
+
+      cd /usr/src
+      tar xzf openafs.tar.gz
+
+  Now, change into your kernel source tree.  You should then create a
+  .config file; the easiest way to do this is to run make menuconfig or to
+  copy in a kernel configuration from the same version of the kernel.
+  Debian kernel packages store a copy of their kernel configuration in
+  /boot/config.version_number.
+
+  The kernel configuration needs to be identical to the configuration that
+  produced the kernel that you're using.  Ideally, you would build the
+  kernel image you're going to use with make-kpkg kernel_image and install
+  that along with the module image, although as long as the configuration
+  is identical, you may be able to get away with using a pre-built kernel.
+  (A better approach, if you're using pre-built kernels, may be to use
+  module-assistant as described above.)
+
+  Finally, build the modules:
+
+      make-kpkg modules_image
+
+  You may need to use the --append_to_version switch to add version
+  suffixes like -686 or -smp to match your kernel and install the OpenAFS
+  module into a directory like /lib/modules/version-686.  Be aware that
+  the Debian OpenAFS packages build either a regular module or an SMP
+  module, not both, so the generated package will only work with a kernel
+  with the same SMP configuration.
+
+  An openafs-modules deb should be created in /usr/src.  Use dpkg -i to
+  install this package.

diff --git a/debian/README.servers b/debian/README.servers
new file mode 100644 (file)
index 0000000..32b36f6
--- /dev/null
+++ b/debian/README.servers
@@ -0,0 +1,403 @@
+                    Setting up a Debian OpenAFS Server
+
+Introduction
+
+  This document describes how to set up an OpenAFS server using the Debian
+  packages.  If you are not already familiar with the basic concepts of
+  OpenAFS, you should review the documentation at:
+
+      http://docs.openafs.org/
+
+  particularly the AFS Administrator's Guide.  This documentation is
+  somewhat out of date (it doesn't talk about how to use a Kerberos v5 KDC
+  instead of the AFS kaserver, for example), but it's a good introduction
+  to the basic concepts and servers you will need to run.
+
+  The Debian OpenAFS packages follow the FHS and therefore use different
+  paths than the standard AFS documentation or the paths that experienced
+  AFS administrators may be used to.  In the first column below are the
+  traditional paths, and in the second column, the Debian paths:
+
+      /usr/afs/etc        /etc/openafs/server
+      /usr/afs/local      /var/lib/openafs/local
+      /usr/afs/db         /var/lib/openafs/db
+      /usr/afs/logs       /var/log/openafs
+      /usr/afs/bin        /usr/lib/openafs
+      /usr/vice/etc       /etc/openafs
+
+  The AFS kaserver (a Kerberos v4 KDC) is not packaged for Debian.  Any
+  new OpenAFS installation should use Kerberos v5 for authentication in
+  conjunction with either the tools packaged in the openafs-krb5 package
+  or the Heimdal KDC.  When setting up a new cell, you should therefore
+  not set up a kaserver as described in the AFS Administrator's Guide, and
+  you will need to follow a slightly different method of setting the cell
+  key.
+
+Creating a New Cell
+
+  For documentation on adding a server to an existing cell, see below.
+
+  These instructions assume that you are using MIT Kerberos and the
+  openafs-krb5 package.  If you are using Heimdal instead, some of the
+  steps will be slightly different (Heimdal can write the AFS KeyFile
+  directly, for example, so you don't have to use asetkey).  The
+  afs-newcell and afs-rootvol scripts are the same, however.
+
+  /usr/share/doc/openafs-dbserver/configuration-transcript.txt.gz has a
+  transcript of the results of these directions, which you may want to
+  follow along with as you do this.
+
+  1.  If you do not already have a Kerberos KDC (Key Distribution Center,
+      the daemon that handles Kerberos authentication) configured, do so.
+      You can run the KDC on the same system as your OpenAFS db server,
+      although if you plan on using Kerberos for other things, you may
+      eventually want to use separate systems.  If you do not have a
+      Kerberos realm set up already, you can do so in Debian with:
+
+          apt-get install krb5-admin-server
+          krb5_newrealm
+
+      This will install a KDC and kadmind server (the server that handles
+      password changes and account creations) on the local system.  Please
+      be aware that the security of everything that uses Kerberos for
+      authentication, including AFS, depends on the security of the KDC.
+
+      The name of your Kerberos realm should, for various reasons, be in
+      all uppercase and be a domain name that you control, although
+      neither is technically required.
+
+  2.  It is traditional (and recommended) in AFS (and for Kerberos) to
+      give administrators two separate Kerberos principals, one regular
+      principal to use for regular purposes and a separate admin principal
+      to use for privileged actions.  This is similar to the distinction
+      between a regular user and the root user in Unix, except that
+      everyone can have their own separate root identity.  Kerberos
+      recommends username/admin as the admin principal for username, and
+      this will work for AFS as well.
+
+      If you have not already created such an admin principal for yourself
+      in your Kerberos realm, do so now (using kadmin.local on your KDC,
+      unless you have a local method that you prefer).  Also create a
+      regular (non-admin) principal for yourself if you have not already;
+      this is the identity that you'll use for regular operations, like
+      storing files or reading mail.  To do this with kadmin.local, run
+      that program and then run the commands:
+
+          addprinc username/admin
+          addprinc username
+
+      at the kadmin prompt.  You'll be prompted for passwords for both
+      accounts.
+
+      If the KDC is not on the same system that the OpenAFS db server will
+      be on, you will also need to give your admin principal the rights to
+      download the afs keytab in /etc/krb5kdc/kadm5.acl by adding a lines
+      like:
+
+          username/admin@REALM    *
+
+      where REALM is your Kerberos realm and username/admin is the admin
+      principal that you created.  That line gives you full admin access
+      to the Kerberos v5 realm.  You can be more restrictive if you want;
+      see the kadmind man page for the syntax.
+
+  3.  Install the OpenAFS db server package on an appropriate system with:
+
+          apt-get install openafs-dbserver openafs-krb5
+
+      The openafs-krb5 package will be used to create the AFS KeyFile.
+
+      As part of this installation, you will need to configure
+      openafs-client with the cell you are creating as the local cell name
+      and the server on which you're working as the db server.  This name
+      is technically arbitrary but should, for various reasons, be a valid
+      domain name that you control; unlike Kerberos realms, it should be
+      in all lowercase.  Enter the name of the local system when prompted
+      for the names of your OpenAFS db servers.  Don't start the client;
+      that will happen below.  For right now, say that you don't want it
+      to start at boot.  You can change that later with dpkg-reconfigure
+      openafs-client.
+
+      If you have already installed openafs-client and configured it for
+      some other cell, you do need to configure it to point to your new
+      cell for these instructions to work.  Stop the AFS client on the
+      system with service openafs-client stop and then run:
+
+           dpkg-reconfigure openafs-client
+
+      pointing it to the new cell you're about to create instead.
+      Remember, your cell name should be in lowercase.  If you have had to
+      do this several times, double-check /etc/openafs/CellServDB when
+      you're done and make sure that there is only one entry for your new
+      cell at the top of that file and that it lists the correct IP
+      address for your new db server.
+
+      In order to complete the AFS installation, you will also need a
+      working AFS client installed on that system, which means that you
+      need to install an OpenAFS kernel module.  Please see:
+
+          /usr/share/doc/openafs-client/README.modules
+
+      for information on how to do that.
+
+  4.  Create an AFS principal in Kerberos.  This is the AFS service
+      principal, used by clients to authenticate to AFS and for AFS
+      servers to authenticate to each other.  It *must* be a DES key; AFS
+      does not support any other encryption type.  Run kadmin.local on
+      your KDC and then, at the kadmin.local prompt, run:
+
+          addprinc -randkey -e des-cbc-crc:v4 afs
+
+      If your Kerberos realm name does not match your AFS cell name (if,
+      for instance, you have one Kerberos realm with multiple AFS cells),
+      use "afs/cell.name" as the name of the principal above instead of
+      just "afs", where cell.name is the name of your new AFS cell.
+
+  5.  On the db server, download this key into a keytab.  If this is the
+      same system as the KDC, you can use kadmin.local again.  If not, you
+      should use kadmin (make sure that krb5-user is installed), and you
+      may need to pass -p username/admin to kadmin to tell it what
+      principal to authenticate as.  Whichever way you get into kadmin,
+      run:
+
+          ktadd -k /tmp/afs.keytab -e des-cbc-crc:v4 afs
+
+      (or afs/cell.name if you used that instead).  In the message that
+      results, note the kvno number reported, since you'll need it later
+      (it will normally be 3).
+
+      Don't forget the -e des-cbc-crc:v4 to force the afs key to be DES.
+      You can verify this with:
+
+          getprinc afs
+
+      and checking to be sure that the only key listed is a DES key.  If
+      there are multiple keys listed, delprinc the afs principal, delete
+      the /tmp/afs.keytab file, and then start over with addprinc, making
+      sure not to forget the -e option.
+
+  6.  Create the AFS KeyFile with:
+
+          asetkey add <kvno> /tmp/afs.keytab afs
+
+      (or afs/cell.name if you used that instead).  <kvno> should be
+      replaced by the kvno number reported by kadmin.  This tells AFS the
+      Kerberos key that it should use, making it match the key in the
+      Kerberos KDC.
+
+  7.  If the name of your Kerberos realm does not match the name of your
+      AFS cell, tell AFS what Kerberos realm to use with:
+
+          echo REALM > /etc/openafs/server/krb.conf
+
+      where REALM is the name of your Kerberos realm.  If your AFS cell
+      and Kerberos realm have the same name, this is unnecessary.
+
+  8.  Create some space to use for AFS volumes.  You can set up a separate
+      AFS file server on a different system from the Kerberos KDC and AFS
+      db server, and for a larger cell you will want to do so, but when
+      getting started you can make the db server a file server as well.
+      For a production cell, you will want to create a separate partition
+      devoted to AFS and mount it as /vicepa (and may want to make
+      multiple partitions mounted as /vicepb, /vicepc, etc.), but for
+      testing purposes, you can use the commands below to create a
+      zero-filled file, create a file system in it, and then mount it:
+
+          dd if=/dev/zero of=/var/lib/openafs/vicepa bs=1024k count=32
+          mke2fs /var/lib/openafs/vicepa
+          mkdir /vicepa
+          mount -oloop /var/lib/openafs/vicepa /vicepa
+
+      mke2fs will ask you if you're sure you want to create a file system
+      on a non-block device; say yes.
+
+  9.  Run afs-newcell.  This will prompt you to be sure that the above
+      steps have been complete and will ask you for the Kerberos principal
+      to use for AFS administrative access.  You should use the
+      username/admin principal discussed above.  afs-newcell sets up the
+      initial protection database (which stores users and groups),
+      configures the AFS database and file server daemons, and creates the
+      root volume for AFS clients.
+
+      At the completion of this step, you should see bosserver and several
+      other AFS server processes running, and you should be able to see
+      the status of those processes with:
+
+          bos status localhost -local
+
+      bosserver is a master server that starts and monitors all the
+      individual AFS servers, and bos is the program used to send it
+      commands.
+
+      Now, you should be able to run:
+
+          kinit username/admin@REALM
+          aklog cell.name -k REALM
+
+      where username/admin is the admin principal discussed above, REALM
+      is the name of your Kerberos realm, and cell.name is the name of
+      your AFS cell.  This will obtain Kerberos tickets and AFS tokens in
+      your Kerberos realm and new AFS cell.  You should be able to see
+      your AFS tokens by running:
+
+          tokens
+
+      Finally, you should be able to see the status of the AFS server
+      processes with:
+
+          bos status <hostname>
+
+      where <hostname> is the hostname of the local system, once you've
+      done the above.  This tests authenticated bos access as your admin
+      principal (rather than using the local KeyFile to authenticate).
+
+  10. Run afs-rootvol.  This creates the basic AFS volume structure for
+      your new cell, including the top-level volume, the mount point for
+      your cell in the AFS root volume, and the mount points for all known
+      public cells.  It will prompt you to be sure that the above steps
+      are complete and then will ask you what file server and partition to
+      create the volume on.  If you were following the above instructions,
+      use the local hostname and "a" as the partition (without the
+      quotes), which will use /vicepa.
+
+      After this command completes, you should be able to /bin/ls /afs and
+      see your local cell (and, if you aren't using dynroot, mount points
+      for several other cells).  Note that if you're not using fakestat,
+      run /bin/ls rather than just ls to be sure that ls isn't aliased to
+      ls -F, ls --color, or some other option that would stat each file in
+      /afs, since this would require contacting lots of foreign cells and
+      could take a very long time.
+
+      You should now be able to cd to /afs/cell.name where cell.name is
+      the AFS cell name that you used.  Currently, there isn't anything in
+      your cell except two volumes, user and service, created by
+      afs-rootvol.  To make modifications, cd to /afs/.cell.name (note the
+      leading period) and make changes there.  To make those changes show
+      up at /afs/cell.name, run vos release root.cell.  For more details
+      on what you can do now, see the AFS Administrator's Reference.
+
+  11. While this is optional, you probably want to add AFSDB records to
+      DNS for your new AFS cell.  These special DNS records let AFS
+      clients find the db servers for your cell without requiring local
+      configuration.  To do this, create a DNS record like:
+
+          <cell>.        3600    IN      AFSDB   1 <server>.
+
+      where <cell> is the name of your AFS cell and <server> is the name
+      of your db server.  Note the trailing periods to prevent the DNS
+      server from appending the origin.  You can, of course, choose what
+      you prefer for the lifetime.  The 1 is not a priority; it's a
+      special indicator saying that this record is for an AFS database
+      server.
+
+      If you have multiple db servers (see below for adding new ones), you
+      should create multiple records of this type, one per db server.
+
+  Congratulations!  You now have an AFS cell.  If any of the above steps
+  failed, please check the steps carefully and make sure that you've done
+  them all in order.  If that doesn't reveal the cause of the problem,
+  please feel free to submit a bug report with reportbug.  Include as many
+  details as possible on exactly what you typed and exactly what you saw
+  as a result, particularly any error messages.
+
+Adding Additional Servers
+
+  If you decide one server is not enough, or if you're adding a server to
+  an existing cell, here is roughly what you should do:
+
+  1.  Copy securely (using scp, encrypted Kerberos rcp, or some other
+      secure method) all of /etc/openafs/server to the new server.
+
+  2.  Install the openafs-fileserver package on the new server.
+
+  3.  If the machine is to be a file server, create an fs instance using
+      bos create:
+
+          bos create <host> dafs dafs -cmd /usr/lib/openafs/dafileserver \
+              -cmd /usr/lib/openafs/davolserver \
+              -cmd /usr/lib/openafs/salvageserver \
+              -cmd /usr/lib/openafs/dasalvager -localauth
+
+      For a file server, this is all you have to do.  The above uses the
+      default fileserver options, however, which are not particularly
+      well-tuned for modern systems.  afs-newcell uses the following
+      parameters from Harald Barth:
+
+          -p 23 -busyat 600 -rxpck 400 -s 1200 -l 1200 -cb 65535
+          -b 240 -vc 1200
+
+      If you want to add any additional fileserver options, enclose
+      /usr/lib/openafs/dafileserver and the following options in double
+      quotes when giving the bos create command.
+
+      This creates a demand-attach fileserver, which is recommended for
+      new installations.  You can also create a regular fileserver if you
+      prefer.  See the bos_create(8) man page for more information.
+
+  4.  For database servers, also install openafs-dbserver and then use bos
+      addhost to add the new server to /etc/openafs/server/CellServDB:
+
+          bos addhost <server> <new-server>
+
+      for each db server <server> in your cell (including the new one).
+      Then, restart the ptserver and vlserver instances on each of your
+      existing servers with:
+
+          bos restart <server> ptserver
+          bos restart <server> vlserver
+
+      It's best to wait a few seconds after doing this for each server
+      before doing the next server so that voting finishes and you never
+      lose a quorum.
+
+      Only after ptserver and vlserver have been restarted on each of your
+      existing servers, create ptserver and vlserver instances on the new
+      server:
+
+          bos create <host> ptserver simple /usr/lib/openafs/ptserver \
+              -localauth
+          bos create <host> vlserver simple /usr/lib/openafs/vlserver \
+              -localauth
+
+      The existing servers should then propagate the database to the new
+      server.  If you are using buserver, you will need to do the same
+      thing for it as with ptserver and vlserver.
+
+      Note that you do not need to run a file server on a db server if you
+      don't want to (and larger sites probably will not want to), but you
+      always need to have the openafs-fileserver package installed on db
+      servers.  It contains the bosserver binary and some of the shared
+      infrastructure.
+
+  5.  If you added a new db server, configure your clients to use it.  If
+      you are using AFSDB records in DNS, you can just add a new record
+      (see point 10 in the instructions for creating a new cell).
+      Otherwise, clients will need to have the new server IP address added
+      to their /etc/openafs/CellServDB file (or /usr/vice/etc/CellServDB
+      for non-Debian clients using the standard AFS paths), and the client
+      will have to be restarted before it will know about the new db
+      server.
+
+  The standard rule of thumb is that all of your database servers and file
+  servers should ideally be running the same version of OpenAFS.  However,
+  in practice OpenAFS is fairly good at backward compatibility and you can
+  generally mix and match different versions.  Be careful, though, to
+  ensure that all of your database servers are built the same when it
+  comes to options like --enable-supergroups (enabled in the Debian
+  packages).
+
+Upgrades
+
+  Currently, during an upgrade of the openafs-fileserver package, all
+  services will be stopped and restarted.  If openafs-dbserver is upgraded
+  without upgrading openafs-fileserver, those server binaries will not be
+  stopped and restarted; that restart will have to be done by hand.
+
+  It is possible that future versions of this package will install for
+  example /usr/lib/openafs/fileserver.package instead of
+  /usr/lib/openafs/fileserver and then create links to the actual binaries
+  in postinst.  Upgrades would then not replace the old binaries, but
+  instead a script will be provided to roll the links forward to the new
+  versions.  The intent is that people could install the new package on
+  all their servers and then quickly move the links before restarting the
+  bosserver.  This has not yet been implemented.

diff --git a/debian/README.source b/debian/README.source
new file mode 100644 (file)
index 0000000..17280eb
--- /dev/null
+++ b/debian/README.source
@@ -0,0 +1,124 @@
+General Maintenance
+
+    This package is maintained in Git via the Salsa debian project.
+    Salsa is used only for repository access control and not for any of
+    its other features.
+
+    Since we often pull up many upstream fixes from the upstream stable
+    branch due to slow upstream release frequencies, we use Git to handle
+    merging and patch pullups and do not attempt to export the Git
+    repository state as a patch set.  This package uses 3.0 (quilt) via
+    the gbp pq subcommands.
+
+    Ideally, any changes that are not strictly Debian packaging changes
+    should be submitted upstream first.  Upstream uses Gerrit for patch
+    review, which makes it very easy for anyone who wishes to submit
+    patches for review using Git.  See:
+
+        https://wiki.openafs.org/devel/GitDevelopers/
+
+    for information on how to submit patches upstream.  Starting from
+    OpenAFS 1.5, we're no longer carrying any substantial Debian-specific
+    changes outside of the debian/* directory, only temporary bug
+    workarounds, and we want to keep it that way.
+
+Importing a New Upstream Release
+
+    We want to be able to use Git to cherry-pick fixes from upstream, but
+    we want to base the Debian packages on the upstream tarball releases.
+    We also need to strip some non-DFSG files from the upstream tarball
+    releases and imported code, and want to drop the WINNT directory to
+    save some space.  This means we follow a slightly complicated method
+    for importing a new upstream release.
+
+    Follow the following procedure to import a new upstream release:
+
+    1. Update the package version in debian/changelog to match the new
+       upstream version.  If the new upstream version is a prerelease
+       version, don't forget to add "~" before "pre" so that the versions
+       will sort property.
+
+    2. Double-check the TAG setting in debian/rules to be sure it's going
+       to retrieve the correct Git tag.
+
+    3. Run debian/rules get-orig-source.  This will generate a tarball
+       from the upstream Git tag using git archive, remove the WINNT
+       directory, and create a file named openafs_<version>.orig.tar.xz in
+       the current directory.
+
+    4. Ensure that you have the OpenAFS upstream Git repository available
+       as a remote in the Git repository where you're doing the packaging
+       work and it's up to date:
+
+           git remote add openafs git://git.openafs.org/openafs.git
+           git fetch openafs
+
+       This will be required to locate the tag for the new upstream
+       release.
+
+    5. Determine the release tag corresponding to this tarball.  At the
+       time of this writing, upstream uses tags in the form:
+
+           openafs-stable-<version>
+           openafs-devel-<version>
+
+       for stable and development releases respectively.  <version> is the
+       version number with periods replaced by underscores.  This
+       convention may change, so double-check with git tag.
+
+    6. Import the upstream source from the tarball with:
+
+           gbp import-orig --upstream-vcs-tag <tag> <tarball>
+
+       where <tarball> is the tarball created by get-orig-source above and
+       <tag> is the corresponding tag from the upstream Git repository.
+
+    7. Flesh out the changelog entry for the new version with a summary of
+       what changed in that release, and continue as normal with Debian
+       packaging.
+
+Pulling Upstream Changes
+
+    Upstream releases, particularly stable releases, are relatively
+    infrequent, so it's often desirable to pull upstream changes from the
+    stable branch into the Debian package.  This should always be done
+    using git cherry-pick -x so that we can use git cherry to see which
+    changes on the stable branch have not been picked up.
+
+    The procedure is therefore:
+
+    0. Regenerate and switch to the patch-queue branch with
+       git branch -d patch-queue/master && gbp pq import
+
+    1. Identify the hash of the commit that you want to pull up using git
+       log or other information.
+
+    2. git cherry-pick -x <hash>.  If the cherry-pick fails and you have
+       to manually do a merge, follow the instructions to use -c to keep
+       the original commit message as a starting point, but *also*
+       manually add a line like:
+
+           (cherry picked from commit <hash>)
+
+       to the changelog entry where <hash> is the full hash of the
+       upstream commit.  Note that the upstream commits on the stable
+       branch will generally already have a line like this from upstream's
+       cherry-pick.  This will be a second line.
+
+    3. Switch to the master branch and (re)generate patch files:
+       git checkout master && gbp pq export
+
+    4. Add a changelog entry and commit it along with the added patch files.
+       Use the following convention for changelog entries for cherry-picks:
+
+           * Apply upstream deltas:
+             - [<hash>] <title>
+             - ...
+
+       where <hash> is the first eight characters of the upstream commit
+       hash and <title> is the first line of the upstream commit message,
+       edited as necessary to keep the length of the changelog lines
+       down.
+
+ -- Russ Allbery <rra@debian.org>, Sun, 20 Oct 2013 08:59:17 -0700
+ -- Benjamin Kaduk <kaduk@mit.edu>, Mon 22 Sep 2014 13:05:40 -0400

diff --git a/debian/TODO b/debian/TODO
new file mode 100644 (file)
index 0000000..24318af
--- /dev/null
+++ b/debian/TODO
@@ -0,0 +1,8 @@
+* Get bos restrict working.
+
+* The configuration transcript and the README.servers file would be best
+  read together, but preferrably with some nicer formatting (such as HTML
+  with a style sheet to set off the transcript in a different background
+  color).
+
+* Use pts addu -local instead of pt_util for initial cell setup.

diff --git a/debian/afs-newcell b/debian/afs-newcell
new file mode 100755 (executable)
index 0000000..87e0586
--- /dev/null
+++ b/debian/afs-newcell
@@ -0,0 +1,289 @@
+#!/usr/bin/perl -w
+# Copyright (C) 2000 by Sam Hartman
+# This file may be copied either under the terms of the GNU GPL or the IBM
+# Public License either version 2 or later of the GPL or version 1.0 or later
+# of the IPL.
+
+use Term::ReadLine;
+use strict;
+use Debian::OpenAFS::ConfigUtils;
+use Getopt::Long;
+use Socket qw(inet_ntoa);
+use vars qw($admin $server $requirements_met $shutdown_needed);
+my $rl = new Term::ReadLine('afs-newcell');
+
+# The default file server options are poor.  Until they've been updated, use
+# the following from Harald Barth; it should be an improvement for most
+# people.
+my $fs_options = '-p 23 -busyat 600 -rxpck 400 -s 1200 -l 1200 -cb 65535'
+    . ' -b 240 -vc 1200';
+
+=head1  NAME
+
+afs-newcell - Set up initial database server for AFS cell
+
+=head1 SYNOPSIS
+
+B<afs-newcell> [B<--requirements-met>] [B<--admin> admin_user]
+
+=head1 DESCRIPTION
+
+This script sets up the initial AFS database and configures the first
+database/file server.
+
+The B<--requirements-met> option specifies that the initial requirements have
+been met and that the script can proceed without displaying the initial
+banner or asking for confirmation.
+
+The B<--admin> option specifies the name of the administrative user.  This
+user will be given system:administrators and susers permission in the cell.
+
+=head1 AUTHOR
+
+Sam Hartman <hartmans@debian.org>
+
+=cut
+
+# Flush all output immediately.
+$| = 1;
+
+GetOptions ("requirements-met" => \$requirements_met, "admin=s" => \$admin);
+
+unless ($requirements_met) {
+    print <<eoreqs;
+                            Prerequisites
+
+In order to set up a new AFS cell, you must meet the following:
+
+1) You need a working Kerberos realm with Kerberos4 support.  You
+   should install Heimdal with KTH Kerberos compatibility or MIT
+   Kerberos 5.
+
+2) You need to create the single-DES AFS key and load it into
+   /etc/openafs/server/KeyFile.  If your cell's name is the same as
+   your Kerberos realm then create a principal called afs.  Otherwise,
+   create a principal called afs/cellname in your realm.  The cell
+   name should be all lower case, unlike Kerberos realms which are all
+   upper case.  You can use asetkey from the openafs-krb5 package, or
+   if you used AFS3 salt to create the key, the bos addkey command.
+
+3) This machine should have a filesystem mounted on /vicepa.  If you
+   do not have a free partition, then create a large file by using dd
+   to extract bytes from /dev/zero.  Create a filesystem on this file
+   and mount it using -oloop.
+
+4) You will need an administrative principal created in a Kerberos
+   realm.  This principal will be added to susers and
+   system:administrators and thus will be able to run administrative
+   commands.  Generally the user is a root or admin instance of some
+   administrative user.  For example if jruser is an administrator then
+   it would be reasonable to create jruser/admin (or jruser/root) and
+   specify that as the user to be added in this script.
+
+5) The AFS client must not be running on this workstation.  It will be
+   at the end of this script.
+
+eoreqs
+#'# cperl-mode
+
+    $_ = $rl->readline("Do you meet these requirements? [y/n] ");
+    unless (/^y/i ) {
+        print "Run this script again when you meet the requirements\n";
+        exit(1);
+    }
+
+    if ($> != 0) {
+        die "This script should almost always be run as root.  Use the\n"
+            . "--requirements-met option to run as non-root.\n";
+    }
+}
+
+# Make sure the AFS client is not already running.
+open(MOUNT, "mount |") or die "Failed to run mount: $!\n";
+while(<MOUNT>) {
+    if (m:^AFS:) {
+        print "The AFS client is currently running on this workstation.\n";
+        print "Please restart this script after running"
+            . " service openafs-client stop\n";
+        exit(1);
+    }
+}
+close MOUNT;
+
+# Make sure there is a keyfile.
+unless ( -f "/etc/openafs/server/KeyFile") {
+    print "You do not have an AFS keyfile.  Please create this using\n";
+    print "asetkey from openafs-krb5 or the bos addkey command\n";
+    exit(1);
+}
+
+# Stop the file server.
+print "If the fileserver is not running, this may hang for 30 seconds.\n";
+run("service openafs-fileserver stop");
+
+# Get the local hostname.  Use the fully-qualified hostname to be safer.
+$server = `hostname -f`;
+chomp $server;
+my $ip = gethostbyname $server;
+if (inet_ntoa($ip) eq '127.0.0.1') {
+    print "\n";
+    print "Your hostname $server resolves to 127.0.0.1, which AFS cannot\n";
+    print "cope with.  Make sure your hostname resolves to a non-loopback\n";
+    print "IP address.  (Check /etc/hosts and make sure that your hostname\n";
+    print "isn't listed on the 127.0.0.1 line.  If it is, removing it from\n";
+    print "that line will probably solve this problem.)\n";
+    exit(1);
+}
+
+# Determine the admin principal.
+$admin = $rl->readline("What administrative principal should be used? ")
+    unless $admin;
+print "\n";
+die "Please specify an administrative user\n" unless $admin;
+my $afs_admin = $admin;
+$afs_admin =~ s:/:.:g;
+if ($afs_admin =~ /@/) {
+    die "The administrative user must be in the same realm as the cell and\n"
+        . "no realm may be specified.\n";
+}
+
+# Determine the local cell.  This should be configured via debconf, from the
+# openafs-client configuration, when openafs-fileserver is installed.
+open(CELL, "/etc/openafs/server/ThisCell")
+    or die "Cannot open /etc/openafs/server/ThisCell: $!\n";
+my $cell = <CELL>;
+chomp $cell;
+
+# Make sure the new cell is configured in the client CellServDB.
+open(CELLSERVDB, "/etc/openafs/CellServDB")
+    or die "Cannot open /etc/openafs/CellServDB: $!\n";
+my $found = 0;
+while (<CELLSERVDB>) {
+    next unless /^>\Q$cell\E\s/;
+    while (<CELLSERVDB>) {
+        last if /^>/;
+        my ($dbserver) = split ' ';
+        if ($dbserver eq inet_ntoa($ip)) {
+            $found = 1;
+            last;
+        }
+    }
+    last;
+}
+unless ($found) {
+    print "\n";
+    print "The new cell $cell is not configured in /etc/openafs/CellServDB\n";
+    print "Add configuration like:\n\n";
+    print ">$cell\n";
+    print inet_ntoa($ip), "\t\t\t#$server\n\n";
+    print "to that file before continuing.\n";
+    exit(1);
+}
+
+# Write out a new CellServDB for the local cell containing only this server.
+if (-f "/etc/openafs/server/CellServDB") {
+    print "/etc/openafs/server/CellServDB already exists, renaming to .old\n";
+    rename("/etc/openafs/server/CellServDB",
+           "/etc/openafs/server/CellServDB.old")
+        or die "Cannot rename /etc/openafs/server/CellServDB: $!\n";
+}
+open(CELLSERVDB, "> /etc/openafs/server/CellServDB")
+    or die "Cannot create /etc/openafs/server/CellServDB: $!\n";
+print CELLSERVDB ">$cell\n";
+print CELLSERVDB inet_ntoa($ip), "\t\t\t#$server\n";
+close CELLSERVDB or die "Cannot write to /etc/openafs/server/CellServDB: $!\n";
+
+# Now, we should be able to start bos and add the admin user.
+run("service openafs-fileserver start");
+$shutdown_needed = 1;
+run("bos adduser $server $afs_admin -localauth");
+unwind("bos removeuser $server $afs_admin -localauth");
+
+# Create the initial protection database using pt_util.  This is safer than
+# the standard mechanism of starting the cell in noauth mode until the first
+# user has been created.
+if (-f "/var/lib/openafs/db/prdb.DB0") {
+    warn "ERROR: Protection database already exists; cell already partially\n";
+    warn "ERROR: created.   If you do not want the current database, remove\n";
+    warn "ERROR: all files in /var/lib/openafs/db and then run this program\n";
+    warn "ERROR: again.\n";
+    exit(1);
+}
+print "\nCreating initial protection database.  This will print some errors\n";
+print "about an id already existing and a bad ubik magic.  These errors can\n";
+print "be safely ignored.\n\n";
+open(PRDB, "| pt_util -p /var/lib/openafs/db/prdb.DB0 -w")
+    or die "Unable to start pt_util: $!\n";
+print PRDB "$afs_admin 128/20 1 -204 -204\n";
+print PRDB "system:administrators 130/20 -204 -204 -204\n";
+print PRDB " $afs_admin 1\n";
+close PRDB;
+unwind("rm /var/lib/openafs/db/prdb*");
+print "\n";
+
+# We should now be able to start ptserver and vlserver.
+run("bos create $server ptserver simple /usr/lib/openafs/ptserver -localauth");
+unwind("bos delete $server ptserver -localauth");
+run("bos create $server vlserver simple /usr/lib/openafs/vlserver -localauth");
+unwind("bos delete $server vlserver -localauth");
+
+# Create a file server as well.
+run("bos create $server dafs dafs"
+    . " -cmd '/usr/lib/openafs/dafileserver $fs_options'"
+    . " -cmd /usr/lib/openafs/davolserver"
+    . " -cmd /usr/lib/openafs/salvageserver"
+    . " -cmd /usr/lib/openafs/dasalvager -localauth");
+unwind("bos delete $server dafs -localauth");
+
+# Make sure that there is no scheduled general restart time; it's not needed.
+run("bos setrestart $server -time never -general -localauth");
+
+# Pause for a while for ubik to catch up.
+print "Waiting for database elections: ";
+sleep(30);
+print "done.\n";
+
+# Past this point we want to control when bos shutdown happens.
+$shutdown_needed = 0;
+unwind("bos shutdown $server -localauth -wait");
+run("vos create $server a root.afs -localauth");
+unwind("vos remove $server a root.afs -localauth");
+
+# We should now be able to bring up the client (it may need root.afs to exist
+# if not using dynroot).  We override whatever default cell was configured for
+# the client, just in case it was pointing to some other cell.
+open(THIS, "> /etc/openafs/ThisCell")
+    or die "ERROR: Cannot create /etc/openafs/ThisCell: $!\n";
+print THIS "$cell\n";
+close THIS or die "ERROR: Cannot write to /etc/openafs/ThisCell: $!\n";
+run("service openafs-client force-start");
+
+# Verify that AFS has managed to start.
+my $afs_running = 0;
+open(MOUNT, "mount |") or die "ERROR: Failed to run mount: $!\n";
+while(<MOUNT>) {
+    if (m:^AFS:) {
+        $afs_running = 1;
+    }
+}
+unless ($afs_running) {
+    print "ERROR: The AFS client failed to start.\n";
+    print "ERROR: Please fix whatever problem kept it from running.\n";
+    exit(1);
+}
+print "\n";
+print "Now, get tokens as $admin in the $cell cell.\n";
+print "Then, run afs-rootvol.\n";
+
+# Success, so clear the unwind commands.
+@unwinds = ();
+
+# If we fail before all the instances are created, we need to back out of
+# everything we did as much as possible.
+END {
+    if ($shutdown_needed || @unwinds) {
+        print "\nCell setup failed, ABORTING\n";
+    }
+    system("bos shutdown $server -localauth -wait") if $shutdown_needed;
+    run(pop @unwinds) while @unwinds;
+}

diff --git a/debian/afs-rootvol b/debian/afs-rootvol
new file mode 100755 (executable)
index 0000000..9a8da2f
--- /dev/null
+++ b/debian/afs-rootvol
@@ -0,0 +1,194 @@
+#!/usr/bin/perl -w
+# Copyright (C) 2000 by Sam Hartman
+# This file may be copied either under the terms of the GNU GPL or the IBM
+# Public License either version 2 or later of the GPL or version 1.0 or later
+# of the IPL.
+
+use strict;
+use Debian::OpenAFS::ConfigUtils;
+use Term::ReadLine;
+use Getopt::Long;
+use vars qw($rl $server $part $requirements_met);
+
+=head1 NAME
+
+afs-rootvol - Generate and populate root volumes for new AFS cells.
+
+=head1 SYNOPSIS
+
+B<afs-rootvol> [B<--requirements-met>] [B<--server> I<server-name>]
+[B<--partition> I<partition-letter>]
+
+=head1 DESCRIPTION
+
+This script sets up an AFS cell's root volumes.  It assumes that you already
+have a fileserver and database servers.  The fileserver should have an empty
+root.afs.  This script creates root.cell, user, and service and populates
+root.afs.
+
+=head1 AUTHOR
+
+Sam Hartman <hartmans@debian.org>
+
+=cut
+#'# cperl-mode
+
+# This subroutine creates a volume, mounts it and then sets the access
+# to allow read by anyuser.  The volume is scheduled for deletion in
+# case of error.
+sub mkvol($$) {
+    my ($vol, $mnt) = @_;
+    run("vos create $server $part $vol -localauth");
+    unwind("vos remove $server $part $vol -localauth");
+    run("fs mkm $mnt $vol ");
+    run("fs sa $mnt system:anyuser rl");
+}
+
+# Main script.  Flush all output immediately.
+$| = 1;
+$rl = new Term::ReadLine('AFS');
+GetOptions ("requirements-met" => \$requirements_met,
+            "server=s" => \$server,
+            "partition=s" => \$part);
+unless ($requirements_met) {
+    print <<eotext;
+                            Prerequisites
+
+In order to set up the root.afs volume, you must meet the following
+pre-conditions:
+
+1) The cell must be configured, running a database server with a
+   volume location and protection server.  The afs-newcell script will
+   set up these services.
+
+2) You must be logged into the cell with tokens in for a user in
+   system:administrators and with a principal that is in the UserList
+   file of the servers in the cell.
+
+3) You need a fileserver in the cell with partitions mounted and a
+   root.afs volume created.  Presumably, it has no volumes on it,
+   although the script will work so long as nothing besides root.afs
+   exists.  The afs-newcell script will set up the file server.
+
+4) The AFS client must be running pointed at the new cell.
+eotext
+
+    $_ = $rl->readline("Do you meet these conditions? (y/n) ");
+    unless (/^y/i ) {
+        print "Please restart the script when you meet these conditions.\n";
+        exit(1);
+    }
+    if ($> != 0) {
+        die "This script should almost always be run as root.  Use the\n"
+            . "--requirements-met option to run as non-root.\n";
+    }
+}
+
+# Get configuration information we need.
+open(CELL, "/etc/openafs/server/ThisCell")
+    or die "Unable to find out what cell this machine serves: $!\n";
+my $cell = <CELL>;
+close CELL;
+chomp $cell;
+
+unless ($server) {
+    print <<eotext;
+
+You will need to select a server (hostname) and AFS partition on which to
+create the root volumes.
+
+eotext
+
+    $server = $rl->readline("What AFS Server should volumes be placed on? ");
+    die "Please select a server.\n" unless $server;
+}
+unless ($part) {
+    $part = $rl->readline("What partition? [a] ");
+    $part = "a" unless $part;
+}
+print "\n";
+
+# Make sure the user has tokens.  Forgetting to do this is a common error.
+my $status = system("tokens | grep Expires > /dev/null");
+if ($status != 0) {
+    die "You appear to not have AFS tokens.  Obtain tokens (with aklog,\n"
+        . "for example) and then run this script again.\n";
+}
+
+# Figure out where root.afs is.  There are two possibilities: either we aren't
+# running with dynroot, and root.afs is therefore accessible as /afs, or we
+# are running with dynroot, in which case we have to create root.cell first
+# and then mount root.afs under it.
+#
+# Always create root.cell first; we may need it if running with dynroot, and
+# it doesn't hurt to do it now regardless.
+my $rootmnt = "/afs";
+run("vos create $server $part root.cell -localauth");
+unwind("vos remove $server $part root.cell -localauth");
+my $dynroot = (-d "$rootmnt/$cell/.");
+if ($dynroot) {
+    run("fs mkm /afs/$cell/.root.afs root.afs -rw");
+    unwind("fs rmm /afs/$cell/.root.afs");
+    $rootmnt = "/afs/$cell/.root.afs";
+}
+run("fs sa $rootmnt system:anyuser rl");
+
+# Scan CellServDB and create the cell mount points for every cell found there.
+# Force these commands to succeed, since it's possible to end up with
+# duplicate entries in CellServDB (and the second fs mkm will fail).
+open(CELLSERVDB, "/etc/openafs/CellServDB")
+    or die "Unable to open /etc/openafs/CellServDB: $!\n";
+while (<CELLSERVDB>) {
+    chomp;
+    if (/^>\s*([a-z0-9_\-.]+)/) {
+        run("fs mkm $rootmnt/$1 root.cell -cell $1 -fast || true");
+        unwind("fs rmm $rootmnt/$1 || true");
+    }
+}
+
+# Now, create the read/write mount points for root.cell and root.afs and set
+# root.cell system:anyuser read.
+run("fs sa /afs/$cell system:anyuser rl");
+run("fs mkm $rootmnt/.$cell root.cell -cell $cell -rw");
+unwind("fs rmm $rootmnt/.$cell");
+run("fs mkm $rootmnt/.root.afs root.afs -rw");
+unwind("fs rmm $rootmnt/.root.afs");
+
+# Create the user and service mount point volumes to fit the semi-standard AFS
+# cell layout.
+mkvol("user", "/afs/$cell/user");
+mkvol("service", "/afs/$cell/service");
+
+# Strip the domain off of the cell name and create the short symlinks.
+$cell =~ /^([^.]+)/;
+my $cellpart = $1;
+if ($cellpart && $cellpart ne $cell) {
+    run("ln -s $cell $rootmnt/$cellpart");
+    unwind("rm $rootmnt/$cellpart");
+    run("ln -s .$cell $rootmnt/.$cellpart");
+    unwind("rm $rootmnt/.$cellpart");
+}
+if ($dynroot) {
+    run("fs rmm /afs/$cell/.root.afs");
+    unwind("fs mkm /afs/$cell/.root.afs root.afs -rw");
+}
+
+# Now, replicate the infrastructure volumes.
+run("vos addsite $server $part root.afs -localauth");
+run("vos addsite $server $part root.cell -localauth");
+run("vos release root.afs -localauth");
+run("vos release root.cell -localauth");
+unwind("vos remove $server $part root.cell.readonly -localauth");
+unwind("vos remove $server $part root.afs.readonly -localauth");
+
+# Success, so clear the unwind commands.
+@unwinds = ();
+
+# If we fail before all the instances are created, we need to back out of
+# everything we did as much as possible.
+END {
+    if (@unwinds) {
+        print "\nRoot volume setup failed, ABORTING\n";
+    }
+    run(pop @unwinds) while @unwinds;
+}

diff --git a/debian/afs.conf b/debian/afs.conf
new file mode 100644 (file)
index 0000000..701d50f
--- /dev/null
+++ b/debian/afs.conf
@@ -0,0 +1,116 @@
+# -*- sh -*-
+# Copyright 2000, International Business Machines Corporation and others.
+# All Rights Reserved.
+# 
+# This software has been released under the terms of the IBM Public
+# License.  For details, see the LICENSE file in the top-level source
+# directory or online at http://www.openafs.org/dl/license10.html
+
+# Configuration information for AFS client.
+
+# The following options are maintained by debconf.  To change them, run
+# dpkg-reconfigure openafs-client.
+#
+#   AFS_CLIENT          Whether to start the AFS client at boot
+#   AFS_AFSDB           Whether to use AFSDB DNS records to find VLDB servers
+#   AFS_CRYPT           Whether to enable fcrypt encryption
+#   AFS_DYNROOT         Whether to use a dynamic /afs directory
+#   AFS_FAKESTAT        Whether to fake stat data for mount points
+
+test -f /etc/openafs/afs.conf.client && . /etc/openafs/afs.conf.client
+
+# Set to "-verbose" for a lot of debugging information from afsd.  Only useful
+# for debugging as it prints a LOT of information.
+VERBOSE=
+
+# AFS client configuration options.
+#
+# Here is a (mostly) complete list of flags that afsd accepts and that are
+# useful here:
+#
+#   -blocks     The number of blocks available in the workstation cache.
+#   -files      The target number of files in the workstation cache (Default:
+#               1000).
+#   -rootvol    The name of the root volume to use.
+#   -stat       The number of stat cache entries.
+#   -hosts      List of servers to check for volume location info FOR THE
+#               HOME CELL.
+#   -memcache   Use an in-memory cache rather than disk.
+#   -cachedir   The base directory for the workstation cache.
+#   -mountdir   The directory on which the AFS is to be mounted.
+#   -confdir    The configuration directory.
+#   -nosettime  Don't keep checking the time to avoid drift (default).
+#   -settime    Keep checking the time to avoid drift.
+#   -verbose    Be chatty.
+#   -debug      Print out additional debugging info.
+#   -daemons    The number of background daemons to start (Default: 2).
+#   -rmtsys     Also fires up an afs remote sys call (e.g. pioctl, setpag)
+#               support daemon 
+#   -chunksize  2^n is the chunksize to be used (Default: use a kernel
+#               module default).
+#   -dcache     The number of data cache entries.
+#   -prealloc   Number of preallocated "small" memory blocks
+#   -waitclose  Make close calls always synchronous (slows them down, though)
+#   -files_per_subdir   Number of files per cache subdir (Default: 2048).
+#
+# Using the memory cache is not recommended.  It's less stable than the disk
+# cache and doesn't improve performance as much as it might sound.
+#
+# The default behavior is to let afsd automatically choose an apporpriate set
+# of flags.  This should produce reasonable behavior for most working sets
+# provided that one is using a modern AFS client (1.4.2 or later).
+#
+# You can override that default behavior by setting OPTIONS to a specific set
+# of flags.
+OPTIONS=AUTOMATIC
+
+# The default value for the client sysname (as returned by fs sysname) is
+# determined during the kernel module build and is taken from the architecture
+# and the major Linux kernel version.  Accesses to directories named "@sys" in
+# AFS will be internally redirected to a directory by this name by the AFS
+# client, allowing a single path to resolve to different directories depending
+# on the client architecture.
+#
+# If you would like to override the client sysname, uncomment this line and
+# set the variable to a space-separated list of sysnames.  The AFS client will
+# attempt to resolve @sys to each directory name in the order given.
+#AFS_SYSNAME=""
+
+# If you want to prefer particular servers for replicated volumes, you can
+# configure that by defining an afs_server_prefs function here and then
+# uncommenting the setting of AFS_POST_INIT below.  For more information, see
+# fs help setserverprefs and fs getserverprefs (for the current values).
+
+#afs_server_prefs() {
+#    fs setserverprefs <host> <rank>
+#}
+
+# If you want to always run some command after starting OpenAFS, you can put
+# it here.  Note that you cannot run multiple commands, even combined with &&
+# or ; or similar shell meta-characters.  If you want to run multiple
+# commands, define a shell function instead and put the name of the shell
+# function here.
+AFS_POST_INIT=
+
+# Uncomment this line if you defined an afs_server_prefs function.  (If you
+# have other commands that you also want to run, you'll have to put them in
+# that function, as you can only run one function.)
+#AFS_POST_INIT=afs_server_prefs
+
+# If you want to always run some command before shutting down OpenAFS, you can
+# put it here.  The same caveat applies about multiple commands.
+AFS_PRE_SHUTDOWN=
+
+# If you are having problems with AFS shutting down cleanly or the system not
+# rebooting because the partition the AFS cache was on could not be unmounted,
+# try installing lsof and uncommenting this.  This will cause all processes
+# with open AFS files to be killed before unmounting AFS if the runlevel being
+# switched to is 0 or 6.
+#
+# Warning: This means service openafs-client stop will kill all processes
+# with files open in AFS rather than returning an error saying the file system
+# is busy.  This is probably what you want when the whole system is shutting
+# down, but often *not* what you want when just stopping and restarting the
+# client.  The code doesn't run unless the runlevel is 0 or 6, but still, be
+# sure that this is what you want before enabling it.
+#AFS_PRE_SHUTDOWN=kill_all_afs

diff --git a/debian/changelog b/debian/changelog
new file mode 100644 (file)
index 0000000..3af1ac0
--- /dev/null
+++ b/debian/changelog
@@ -0,0 +1,3430 @@
+openafs (1.8.5-1) unstable; urgency=high
+
+  * New upstream security release (Closes: #943587):
+    - Fix OPENAFS-SA-2019-001, OPENAFS-SA-2019-002: information leakage from
+      uninitialized RPC output variables
+    - Fix OPENAFS-SA-2019-003: database server DoS (NULL dereference)
+  * Configure --without-ctf-tools to allow kernel module builds when ctfutils
+    are installed. (Closes: #935771)
+  * Enable support for ppc64le. (Closes: #941658)
+
+ -- Benjamin Kaduk <kaduk@mit.edu>  Sun, 27 Oct 2019 15:13:27 -0700
+
+openafs (1.8.4~pre1-1) unstable; urgency=medium
+
+  [ Ondřej Nový ]
+  * d/control: Removing redundant Priority field in binary package
+  * d/changelog: Remove trailing whitespaces
+
+  [ Anders Kaseorg ]
+  * New upstream release 1.8.3:
+    - Miscellaneous improvements to error handling and server efficiency
+      (see NEWS).
+    - Support Linux 5.0.
+  * Update CellServDB from grand.central.org (2018-05-14).
+  * Remove custom compression settings for Debian tarball and binary
+    packages.
+
+  [ Benjamin Kaduk ]
+  * New upstream prerelease 1.8.4pre1:
+    - Further work to avoid spurious ENOENTs from filesystem access.
+    - Fix the behavior of ptserver -restricted to match the documentation.
+    - Autoconf updates and modernization. (Closes: #934758)
+    - Additional miscellaneous improvements (see NEWS).
+  * openafs-fileserver now depends on openafs-krb5 for akeyconvert in the
+    maintainer script. (Closes: #934236)
+  * Debconf translation update:
+    - Danish, thanks Joe Hansen.  (Closes: #923111)
+  * Backport upstream patch to require opt-in for weak crypto in aklog
+    and klog.krb5. (Closes: #931819)
+
+ -- Benjamin Kaduk <kaduk@mit.edu>  Sat, 17 Aug 2019 06:54:44 -0700
+
+openafs (1.8.2-1) unstable; urgency=high
+
+  * New upstream release 1.8.1.1:
+    - Support Linux 4.18.
+  * New upstream security release 1.8.2 (Closes: #908616):
+    - Fix OPENAFS-SA-2018-001: unauthenticated volume operations via butc
+      (CVE-2018-16947).
+    - Fix OPENAFS-SA-2018-002: information leakage in RPC output variables
+      (CVE-2018-16948).
+    - Fix OPENAFS-SA-2018-003: denial of service due to excess resource
+      consumption (CVE-2018-16949).
+
+ -- Anders Kaseorg <andersk@mit.edu>  Tue, 11 Sep 2018 22:53:43 -0700
+
+openafs (1.8.1-1) unstable; urgency=medium
+
+  * New upstream release.  In addition to changes in pre2:
+    - Fix issue where `vldb_check -fix` would corrupt databases with multiple
+      MH blocks
+    - Improved error handling when the cache partition is inaccessible
+    - Improved error handling when page allocation fails
+  * Supply sysname generation for arm64 to get further in the build.
+
+ -- Benjamin Kaduk <kaduk@mit.edu>  Sun, 29 Jul 2018 10:35:12 -0500
+
+openafs (1.8.1~pre2-1) unstable; urgency=medium
+
+  * New upstream prerelease:
+    - Add support for arm64
+    - Improve usability of the shared libraries and public API
+    - Fix volume callbacks so clients see updates after volume releases
+    - Fix Rx connection refcount error that could lead to server crashes
+    - Fix panic when cahe bypass is enabled
+    - Use valid serial number for Rx aborts if possible (and 0 otherwise)
+    - Return valid InlineBulkStatus responses in error cases
+    - The fileserver rejects invalid partition names when attaching partitions
+    - Improve cache manager behavior when unable to open cache files (e.g.,
+      if the cache partition is remounted readonly)
+    - Improve some error messages
+  * Update Dutch debconf translation; thanks Frans Spiesschaert.
+    (Closes: #895459)
+
+ -- Benjamin Kaduk <kaduk@mit.edu>  Sun, 01 Jul 2018 18:42:26 -0500
+
+openafs (1.8.0-1) unstable; urgency=low
+
+  * New upstream release.  Changes since pre5:
+    - Fix issues with -Wpointer-sign
+    - Edits to the afsd manpage regarding the -volume-ttl feature
+  * Update debian/README.source to reflect the move from Alioth to Salsa
+  * Update German debconf translation; thanks Pfannenstein Erik.
+    (Closes: #887663)
+
+ -- Benjamin Kaduk <kaduk@mit.edu>  Thu, 05 Apr 2018 21:16:37 -0500
+
+openafs (1.8.0~pre5-1) unstable; urgency=low
+
+  [ Russ Allbery ]
+  * Remove myself from Uploaders.
+
+  [ Benjamin Kaduk ]
+  * New upstream release candidate:
+    - Update CellServDB from grand.central.org (2017-03-14)
+    - Avoid rare deadlock condition when recreating a deleted file/directory
+      on old Linux kernels
+    - Clean up ubik DISK_ RPC behavior with respect to sending updates to
+      sites that would reject the update
+    - Remove includes of <rpc/types.h>, for compatibility with glibc 2.26
+    - Do not include RXGEN_OPCODE when throttling clients that generate too
+      many abort replies
+  * Update Vcs- entries in control to reflect the move from alioth to salsa
+  * Correct 1.8.0~pre4-1 changelog entry to reflect that it closed one more
+    Mayhem-reported bug.  (Closes: #716446)
+
+ -- Benjamin Kaduk <kaduk@mit.edu>  Mon, 19 Feb 2018 10:51:08 -0600
+
+openafs (1.8.0~pre4-1) unstable; urgency=low
+
+  [ Benjamin Kaduk ]
+  * New upstream major release (prerelease):
+    - Servers no longer use rxkad.keytab for long-term keys, which are
+      now stored in KeyFileExt.  Administrators must use akeyconvert
+      or similar tooling to populate the KeyFileExt after updating the
+      krb5 keys in rxkad.keytab.  In most cases, `akeyconvert` with no
+      arguments will suffice; that command is run automatically in the
+      package's postinstall script.
+    - kaserver, klog.afs, pam-openafs-kaserver, and other kauth-related
+      tools are removed.
+    - Server log handling has changed.  Logs are not truncated at
+      startup by default, and are re-opened on SIGUSR1, to be compatible
+      with external log rotation tools.
+    - Client time management support (afsd -settime and afsd -nosettime)
+      has been removed.
+    - Linux versions prior to 2.6 are no longer supported by the client.
+    - Desupport 32-bit s390/s390x
+    - Most binaries now use pthreads instead of LWP green threads.
+    - The fileserver ihandle fsync thread is removed.
+    - Support Linux up to 4.14
+    - Provide vldb cache timeout option for clients
+    - Eliminate potential 100ms delay after rx receive window changes
+    - Modify volume update date after salvager makes changes
+    - Improve ubik safety for relabels and writes shortly after an election
+    - Preserve volume stats during reclone and restore operations
+    - Improve command-line parsing for various utilities.
+      (Closes: #715623, #715787, #716144, #716234, #716444, #716446)
+    - Fix for OPENAFS-SA-2017-001. (Closes: #883602)
+    - Many other generic improvements throughout the tree; consult the
+      upstream changelog for details.
+  * Add versioned build-depends for renamed symbols in heimdal-multidev.
+    (Closes: #848664)
+  * Bump Standards-Version to 4.1.3 (no changes needed).
+  * Update Dutch debconf translation; thanks Frans Spiesschaert.
+    (Closes: #874280)
+
+  [ Anders Kaseorg ]
+  * Use dh_auto_configure.
+  * Correct some paths in the openafs-doc packaging
+
+ -- Benjamin Kaduk <kaduk@mit.edu>  Wed, 03 Jan 2018 22:14:49 -0600
+
+openafs (1.6.22-3) unstable; urgency=medium
+
+  * Pull in upstream patch to avoid OOPS on linux 4.14 kernels.
+    (Closes: #884420)
+  * Pull in pending upstream patch to include stdint.h where needed.
+    This should allow Ubuntu to return to syncing openafs from Debian.
+
+ -- Benjamin Kaduk <kaduk@mit.edu>  Thu, 14 Dec 2017 21:08:16 -0600
+
+openafs (1.6.22-2) unstable; urgency=medium
+
+  * Update Russian debconf translation; thanks Lev Lamberov.
+    (Closes: #883916)
+  * Pull in upstream patches to build with kernel 4.14. (Closes: #884276)
+
+ -- Benjamin Kaduk <kaduk@mit.edu>  Wed, 13 Dec 2017 19:15:58 -0600
+
+openafs (1.6.22-1) unstable; urgency=high
+
+  * New upstream security release:
+    - Fix for OPENAFS-SA-2017-001. (Closes: #883602)
+    - Improved support for recent Linux versions
+
+ -- Benjamin Kaduk <kaduk@mit.edu>  Tue, 05 Dec 2017 10:28:15 -0600
+
+openafs (1.6.21-3) unstable; urgency=medium
+
+  * Build documentation with FORCE_SOURCE_DATE=1, without which pdfTeX
+    refuses to behave fully reproducibly.
+  * debian/patches:
+    - Linux-Include-linux-uaccess.h-rather-than-asm-uacces.patch: Fix
+    build failure on s390x with Linux kernel 4.12.  (LP: #1711835)
+
+ -- Anders Kaseorg <andersk@mit.edu>  Wed, 30 Aug 2017 23:42:03 -0400
+
+openafs (1.6.21-2) unstable; urgency=medium
+
+  * debian/patches:
+    - AFS_component_version_number.c-Respect-SOURCE_DATE_E.patch: Use UTC
+      for better reproducibility.
+    - 0003-Add-dummy-exit-command-for-afsd-to-do-nothing.patch: Fix
+      rebasing mistake so -exit works correctly.
+    - Linux-4.13-use-designated-initializers-where-require.patch: Support
+      Linux kernel 4.13.  (LP: #1706433)
+  * Update Portuguese debconf translation; thanks Rui Branco.
+    (Closes: #871559)
+  * Update French debconf translation; thanks Alban Vidal.
+    (Closes: #872026)
+  * Update CellServDB from grand.central.org (2017-03-14).
+
+ -- Anders Kaseorg <andersk@mit.edu>  Tue, 22 Aug 2017 19:47:50 -0400
+
+openafs (1.6.21-1) unstable; urgency=medium
+
+  * New upstream release (1.6.21):
+    - Include support for Linx versions through 4.12.  (Closes: #859155)
+    - Improve support for Linux kernels with backported patches.
+      (Closes: #855366)
+    - Improve bosserver startup behavior with unexpected arguments or
+      configuration symlinks.
+    - Re-enable vcache cleanup improvement from 1.6.18, with bugs fixed.
+    - Provide the afsd -inumcalc option; this behavior was previously
+      only configurable via sysctl.
+    - The salvager updates volume "last update" times when modifying volumes.
+    - Demand-attach fileserver improvements for reducing log spew and preventing
+      thread exhaustion during CPS recalculation.
+    - Avoid a potential 100ms transmit delay in RX when the peer's receive
+      window advances.
+  * Switch openafs-fileserver.service to Type=simple and pass -nofork to
+    bosserver.  (Closes: #865962)
+  * Update for policy version 4.0.0, honor nodoc in DEB_BUILD_OPTIONS
+  * Use service(8) instead of /etc/init.d/* directly in documentation and
+    helper scripts
+
+ -- Benjamin Kaduk <kaduk@mit.edu>  Mon, 10 Jul 2017 15:27:56 -0500
+
+openafs (1.6.20-2) unstable; urgency=medium
+
+  * Build-Depend debhelper (>= 9.20160114) for dh_strip
+    --dbgsym-migration.
+  * debian/patches:
+    - LINUX-split-dentry-eviction-from-osi_TryEvictVCache.patch,
+      Reformat-src-afs-LINUX-osi_vcache.c.patch,
+      LINUX-do-not-use-d_invalidate-to-evict-dentries.patch,
+      afs-shake-harder-in-shake-loose-vcaches.patch: Avoid system hangs on
+      busy machines due to vcache deallocation failures.
+    - Linux-4.9-deal-with-demise-of-GROUP_AT.patch,
+      Linux-4.9-inode_operation-rename-now-takes-flags.patch,
+      Linux-4.9-inode_change_ok-becomes-setattr_prepare.patch: Support
+      Linux kernel 4.9.  (Closes: #847011)
+    - AFS_component_version_number.c-Respect-SOURCE_DATE_E.patch:
+      Respect SOURCE_DATE_EPOCH in cml_version_number to improve build
+      reproducibility.
+  * openafs-modules-source: Generate /usr/src/openafs.tar.bz2
+    reproducibly.
+
+ -- Anders Kaseorg <andersk@mit.edu>  Sun, 04 Dec 2016 17:49:15 -0500
+
+openafs (1.6.20-1) unstable; urgency=high
+
+  * New upstream release (1.6.19):
+    - Fix issue that could result in using out-of-date database versions
+      in rare cases
+    - Don't commit more data to a file than was actually copied during writes,
+      which could happen on architectures with a page size greater than 4K
+  * New upstream security release (1.6.20):
+    - Fix information leakage (file/directory names) from reused directory
+      buffers
+
+ -- Benjamin Kaduk <kaduk@mit.edu>  Wed, 30 Nov 2016 16:52:29 -0500
+
+openafs (1.6.18.3-3) unstable; urgency=medium
+
+  * Drop openafs-dbg in favor of automatically generated dbgsym packages.
+  * Mark openafs-doc Multi-Arch: foreign.
+  * debian/patches/tests-util-ktime-t.c-Specify-EST-offset-in-TZ.patch:
+    Fix FTBFS with tzdata uninstalled.  (Closes: #839481)
+  * Depend lsb-base (>= 3.0-6) in openafs-client and openafs-fileserver
+    for /lib/lsb/init-functions.
+
+ -- Anders Kaseorg <andersk@mit.edu>  Wed, 12 Oct 2016 18:04:12 -0400
+
+openafs (1.6.18.3-2) unstable; urgency=medium
+
+  * Drop hardening-wrapper in favor of passing flags via CC.
+    (Closes: #836642)
+  * Clean doxyen-generated documentation with dh_doxygen.
+
+ -- Anders Kaseorg <andersk@mit.edu>  Sun, 11 Sep 2016 17:15:39 -0400
+
+openafs (1.6.18.3-1) unstable; urgency=medium
+
+  * New upstream release 1.6.18.3:
+    - Support Linux kernel 4.7.
+
+ -- Anders Kaseorg <andersk@mit.edu>  Thu, 04 Aug 2016 15:44:22 -0400
+
+openafs (1.6.18.2-1) unstable; urgency=medium
+
+  * New upstream release 1.6.18.2:
+    - Support Linux kernel 4.6.
+    - Revert the vcache cleanup improvement of 1.6.18, which exposed
+      another previously latent issue that wrongly invalidated the current
+      working directroy on some kernels.
+  * Update CellServDB to the 2016-01-01 release.
+
+ -- Anders Kaseorg <andersk@mit.edu>  Mon, 25 Jul 2016 19:12:12 -0400
+
+openafs (1.6.18.1-1) unstable; urgency=medium
+
+  * New upstream release 1.6.18.1:
+    - Support Linux kernel 4.5.
+    - Check return value from bdi_init.
+  * Import upstream Gerrit patch to allow building with Linux kernel 4.6.
+    (Closes: #826922)
+
+ -- Anders Kaseorg <andersk@mit.edu>  Sun, 26 Jun 2016 20:16:54 -0400
+
+openafs (1.6.18-1) unstable; urgency=high
+
+  * New upstream release 1.6.18:
+    - Support for Linux 4.4 kernels.
+    - Improve dynamic vcache cleanup behavior, reducing memory usage and
+      avoiding a long hang when many vcaches are in use
+    - Deprecate afsd -settime.
+    - Failure to release a volume now reports an error back to the client.
+    - Check for invalid IP addresses in the CellServDB.
+    - Fix dafileserver crash experience with large volumes.
+    - Close race between "umount /afs" and "afsd -shutdown".
+    - Prefer -dryrun arguments to -noexecute.
+    - Limit ChangeAddr RPCs to removal, to avoid database corruption.
+    - Improve behavior relating to large (~2GB fetches from the fileserver).
+  * Import patches from upstream gerrit to improve support for
+    Linux 4.5 kernels.  (Closes: #821782)
+  * Depend on sysint.target instead of basic.target in openafs-client.service,
+    to eliminate dependency cycles with other services that depend on
+    remote-fs.target.  (Closes: #794451)
+
+ -- Benjamin Kaduk <kaduk@mit.edu>  Sun, 15 May 2016 22:19:38 -0400
+
+openafs (1.6.17-2) unstable; urgency=high
+
+  * debian/rules: Fix FTBFS when built with dpkg-buildpackage -A.
+    (Closes: #806088)
+
+ -- Anders Kaseorg <andersk@mit.edu>  Thu, 17 Mar 2016 04:48:16 -0400
+
+openafs (1.6.17-1) unstable; urgency=high
+
+  * New upstream release 1.6.16.
+    - Fix bosserver crashes related to fixed-sized buffers.
+    - Fix potential denial of service issue in pioctl logic
+      (CVE-2015-8312).
+    - Provide a new vos remaddrs subcommand for removing server entries.
+    - Allow pioctls to work with read-only /proc (e.g. Docker containers).
+  * New upstream security release 1.6.17.
+    - Prevent users in foreign Kerberos realms from creating groups as if
+      they were administrators (CVE-2016-2860).
+    - Fix an information leak of uninitialized memory over the network.
+    - Fix a crash when the AFS root volume is not found.
+  * debian/patches/Linux-4.4-key_payload-has-no-member-value.patch,
+    debian/patches/Linux-4.4-Use-locks_lock_file_wait.patch,
+    debian/patches/Linux-4.4-Do-not-use-splice.patch:
+    Add upstream patches for current Linux kernel support.  (Closes: #815521)
+
+ -- Anders Kaseorg <andersk@mit.edu>  Thu, 17 Mar 2016 00:55:42 -0400
+
+openafs (1.6.15-1) unstable; urgency=high
+
+  * New upstream security release.
+    - Fix data leakage in rx ACK packets, OPENAFS-SA-2015-007,
+      CVE-2015-7762, CVE-2015-7763.
+
+ -- Benjamin Kaduk <kaduk@mit.edu>  Wed, 28 Oct 2015 15:56:38 -0400
+
+openafs (1.6.14-1) unstable; urgency=medium
+
+  * New upstream release.
+    - Restore support for using regexes for volume names to backup,
+      accidentally disabled as part of the fix for OPENAFS-SA-2015-006
+  * Update Swedish translation, thanks Martin Bagge and Anders Jonsson.
+    (Closes: #781678)
+  * Note that the protocol document rfc5864.txt is dual licensed.
+    (Closes: #754735)
+  * Supply copyright notice for systemd helper scripts. (Closes: #779170)
+  * Import upstream patches to support the 4.2 Linux kernel.
+
+ -- Benjamin Kaduk <kaduk@mit.edu>  Mon, 17 Aug 2015 15:01:01 -0400
+
+openafs (1.6.13-1) unstable; urgency=high
+
+  * New upstream security release.
+    - OPENAFS-SA-2015-001 CVE-2015-3282: vos leaks stack data onto the wire
+      in the clear when creating vldb entries
+    - OPENAFS-SA-2015-002 CVE-2015-3283: bos commands can be spoofed,
+      including some which alter server state
+    - OPENAFS-SA-2015-003 CVE-2015-3284: pioctls leak kernel memory contents
+    - OPENAFS-SA-2015-004 CVE-2015-3285: kernel pioctl support for OSD
+      command passing can trigger a panic
+    - OPENAFS-SA02015-005 CVE-2015-3286 is Solaris-specific and did not
+      affect Debian
+    - OPENAFS-SA-2015-006 CV-2015-3287: buffer overflow in vlserver
+  * Also includes changes from the upstream 1.6.12 release:
+    - Avoid database corruption if a database server is shut down and
+      brought up again quickly with an altered database
+    - Fix a potential buffer overflow in aklog
+    - Support for Linux kernels up to 4.1
+    - Avoid spurious EIO errors when writing large chunks of data to
+      mmapped files
+
+ -- Benjamin Kaduk <kaduk@mit.edu>  Thu, 30 Jul 2015 17:42:43 -0400
+
+openafs (1.6.11.1-1) unstable; urgency=medium
+
+  * New upstream release.
+    - Support for Linux kernels up to 4.0.
+
+ -- Benjamin Kaduk <kaduk@mit.edu>  Fri, 15 May 2015 11:02:14 -0400
+
+openafs (1.6.11~pre2-1) experimental; urgency=low
+
+  * New upstream pre-release.
+    - Avoid using a stale data version in certain cases when writing
+      files larger than the AFS cache, which manifested as file corruption.
+    - Fix a refcount leak that could lead to panics.
+    - Support newer linux versions, up through 3.19.
+    - Fix some leaks and crashes in error cases.
+
+ -- Benjamin Kaduk <kaduk@mit.edu>  Fri, 20 Feb 2015 15:50:49 -0500
+
+openafs (1.6.11~pre1-1) experimental; urgency=low
+
+  * New upstream pre-release.
+    - Linux kernels up to 3.17 are now supported.
+    - Fix more incorrect behavior in our revalidation of dcache entries. Bugs
+      in this area can cause stale path lookups in certain situations, as well
+      as cause getcwd() to fail spuriously.
+    - Allow aklog to succeed in creating native K5 tokens even when K5-to-K4
+      principal conversion fails.
+
+ -- Andrew Deason <adeason@sinenomine.net>  Sun, 07 Dec 2014 23:43:21 -0600
+
+openafs (1.6.10-4) unstable; urgency=medium
+
+  * Update Spanish translation, thanks Javier Fernandez-Sanguino Pena.
+    (Closes: #773565)
+  * Import many patches from upstream:
+    - Support newer linux versions, up through 3.19. (Closes: #771298)
+    - Avoid some spurious getcwd() failures.
+    - Improve configure test for key_type.match (which caused buggy
+      behavior in certain versions of RHEL).
+    - Fix a refcount leak that would manifest as an unrelated OOPS.
+    - Avoid using a stale data version in certain cases when writing
+      files larger than the AFS cache, which manifested as file corruption.
+    This leaves us roughly equivalent to the forthcoming 1.6.11pre2
+    release candidate.
+  * Update CellServDB to the 2015-01-19 release.
+
+ -- Benjamin Kaduk <kaduk@mit.edu>  Wed, 04 Feb 2015 13:35:48 -0500
+
+openafs (1.6.10-3) unstable; urgency=medium
+
+  * Make openafs-client Before=umount.target for improved shutdown
+    behavior. (Affects: #760063)
+  * Mark openafs-client.service as RemainAfterExit=true. (Closes: #770815)
+
+ -- Benjamin Kaduk <kaduk@mit.edu>  Wed, 26 Nov 2014 13:00:27 -0500
+
+openafs (1.6.10-2) unstable; urgency=medium
+
+  * Some shell quoting and similar cleanups in openafs-client-precheck
+    from Anders Kaseorg.
+  * Make the openafs-client unit silently succeed when it is already
+    running, to match the behavior of the sysV script. (Closes: #767056)
+
+ -- Benjamin Kaduk <kaduk@mit.edu>  Tue, 28 Oct 2014 18:52:47 -0400
+
+openafs (1.6.10-1) unstable; urgency=medium
+
+  * New upstream release.
+    - fix segfault with aklog -path.
+  * The 1.6.10~pre1-1 changelog entry contains a full summary of changes
+    in the upstream release.
+  * Add a systemd unit file for openafs-client. (Closes: #760063)
+    - The variables AFS_PRE_SHUTDOWN and AFS_POST_INIT from
+      /etc/openafs.afs.conf are no longer honored.  They should be
+      converted to the systemd format and placed in
+      /etc/systemd/system/openafs-client.service.d/ ; automatic conversion
+      is not possible.  In particular, the kill_all_afs functionality is
+      not available.
+    - The LIBAFS, MODULEDIR, and DKMSDIR settings from
+      /etc/openafs/afs.conf are not used by the unit file.
+    - The extra shutdown handling for when the NFS translator is used
+      was not converted to the systemd format; the necessary feature
+      was removed from the Linux kernel in 2008.
+    - Support for cold shutdowns is removed.  They generally resulted
+      only in strange failures later on.
+  * Add a systemd unit file for openafs-fileserver.
+  * Use heap-allocated buffers of sufficient length for realpath() in
+    userok.c. (Closes: #757378)
+  * Update Dutch translation. (Closes: #765083)
+
+ -- Benjamin Kaduk <kaduk@mit.edu>  Wed, 22 Oct 2014 13:10:59 -0400
+
+openafs (1.6.10~pre1-1) experimental; urgency=low
+
+  [ Benjamin Kaduk ]
+  * New upstream pre-release.
+    - Linux kernels up to 3.16 are now supported.
+    - The amount of free space and reported for /afs is now 2 TiB, up
+      from the previous reported value of around 9 GiB.
+    - Fix 'pts removeuser' behavior in the ptserver for some supergroups
+      over a certain membership size.
+    - Fix logging behavior when rotating logs via the "copy and truncate"
+      approach.
+    - Add new log messages in the volserver log and the vlserver audit log.
+    - Reduce the amount of kernel stack space used in the client.
+    - Improve error handling for a wide variety of cases for various tools.
+    - Improve periodic hanging in the client when a large number of PAGs
+      and files are in use.
+    - Fix 'afs-up' to handle large ACLs correctly.
+    - Fix a crash in 'aklog' when retrying ticket acquisition.
+    - Fix a crash in xstat_fs_test and scout when their local port is
+      already in use.
+    - Fix an error in the client lock handling that prevented checking
+      for the existence of write locks on readonly volumes.
+    - Fix an error in the client that could cause cache inconsistencies
+      if another client removed a directory entry, and recreated a
+      different entry with the same name.
+    - Avoid ignoring build failures during the client kernel module build
+      process, hopefully leading to better error messages in some cases
+      when building the kernel module.
+    - Fix various possible problems when building with parallel make.
+
+  [ Andrew Deason ]
+  * Include the new volscan tool in openafs-fileserver.
+
+  [ Russ Allbery ]
+  * Retroactively add the CVE for OPENAFS-SA-2014-002 to the changelog for
+    1.6.9-1.  It was assigned after the release was uploaded.
+  * Add Benjamin Kaduk as Maintainer and move myself to Uploaders.
+
+ -- Benjamin Kaduk <kaduk@mit.edu>  Tue, 19 Aug 2014 18:53:34 -0400
+
+openafs (1.6.9-2) unstable; urgency=medium
+
+  [ Russ Allbery ]
+  * Retroactively add the CVE for OPENAFS-SA-2014-002 to the changelog for
+    1.6.9-1.  It was assigned after the release was uploaded.
+  * Add Benjamin Kaduk as Maintainer and move myself to Uploaders.
+
+  [ Benjamin Kaduk ]
+  * Apply upstream deltas to fix the build with the linux kernel 3.16
+    (Closes: #762248):
+    - [ea0c9d8c] Linux 3.16: Switch to iter_file_splice_write
+    - [02a07404] Linux 3.16: Convert to new write_iter/read_iter ops
+  * Update README.source for the gbp pq patch-management procedure.
+
+ -- Benjamin Kaduk <kaduk@mit.edu>  Mon, 22 Sep 2014 13:17:12 -0400
+
+openafs (1.6.9-1) unstable; urgency=high
+
+  * New upstream release.
+    - OPENAFS-SA-2014-002: Fix use of uninitialized memory in the host
+      object in the fileserver.  (CVE-2014-4044)
+
+ -- Russ Allbery <rra@debian.org>  Thu, 12 Jun 2014 12:39:25 -0700
+
+openafs (1.6.8-1) unstable; urgency=medium
+
+  * New upstream release.
+    - Change the default fileserver sync behavior from delayed to
+      onclose so that explicit syncing only happens when a volume is
+      detached.
+    - Add -offline-timeout and -offline-shutdown-timeout options to the
+      fileserver, allowing interrupting of clients accessing volumes that
+      the fileserver is trying to take off-line.
+    - Fix RX bug that could hide errors during packet reception.
+    - Fix vos size -dump display for large volumes.
+    - Give up callbacks when the client is shut down.  This can cause
+      crashes in old fileservers (prior to 1.4.6).
+    - Restore vos e alias for vos examine.
+    - Throttle byte-range lock warnings per file, and include the FID of
+      the file that the client is trying to lock.
+    - Avoid a possible panic during shutdown while tracing.
+    - Fix a bug that could cause getcwd to fail to find parent
+      directories.
+    - Avoid a delay when accessing uncached data in AFS in a confined
+      context under SELinux.
+    - Documentation, diagnostics, and error message improvements.
+  * Add Lintian override for the copy of RFC 5864, which has been
+    dual-licensed by the author.
+
+ -- Russ Allbery <rra@debian.org>  Sat, 24 May 2014 17:55:20 -0700
+
+openafs (1.6.7-1) unstable; urgency=high
+
+  * New upstream security release.
+    - OPENAFS-SA-2014-001: Fix potential buffer overflow in the
+      fileserver.  (CVE-2014-0159)
+    - Fix a potential DoS attack against Rx servers by avoiding suspending
+      the listener thread when delaying connection abort messages.
+
+ -- Russ Allbery <rra@debian.org>  Wed, 09 Apr 2014 10:33:38 -0700
+
+openafs (1.6.6-1) unstable; urgency=low
+
+  * New upstream release.
+    - Remove server-side NAT pings since there's no evidence they help.
+  * Fix linking of /usr/share/doc directories for libpam-openafs-kaserver,
+    openafs-fuse, and openafs-kpasswd.  This was broken in previous
+    releases by a miswritten debian/rules override.  Thanks to Andreas
+    Beckmann for finding the problem and solution.  (Closes: #736305)
+  * Accept AFS_DYNROOT=true as an alias for Yes in afs.conf.client,
+    matching behavior of releases prior to 1.6.2.1-1.  (Closes: #729353)
+
+ -- Russ Allbery <rra@debian.org>  Thu, 23 Jan 2014 20:43:05 -0800
+
+openafs (1.6.6~pre2-1) unstable; urgency=low
+
+  * New upstream pre-release.
+    - Linux kernels up to 3.12 are now supported, including kernels with
+      user namespace support enabled (which affects Debian's 3.12-1 kernel
+      and newer).
+    - Fixed core dumps into AFS with current kernels.
+    - When starting the client fails, backing device information created
+      in sysfs is now properly cleared.
+    - The AFS mountpoint specified in the cacheinfo file must now be an
+      absolute path.
+    - Stop tracking file locks on read-only volumes.  Write locks always
+      fail and read locks always succeed.
+    - New fs flushall command to discard all cached data.
+    - Fixed a bug that could cause the client to incorrectly believe its
+      cache was up to date.
+    - New -rxmaxfrags switch to afsd to limit the number of UDP fragments
+      sent or received per RX packet.
+    - Fixed afsd threads entering an infinite loop.
+    - The file server now ignores any vice partitions with a NeverAttach
+      flag file present in the root directory.
+    - Enabled server-side NAT pings to refresh NAT timeouts.
+    - Forcing file server CPS recalculation (for IP ACLs) is now
+      restricted to administrators.
+    - vos examine of a volume in a transaction is now shown as busy again
+      rather than off-line.
+    - Multiple bug fixes to the salvager.
+    - Fixed a bug that could cause state information to be discarded when
+      restarting a large or busy file server.
+    - Fixed a vlserver bug during file server address registration.
+    - volserver supports a new -preserve-vol-stats option, which preserves
+      access statistics across volume restore and reclone operations.
+    - Releasing a volume after adding a new RO site no longer touches the
+      existing RO sites if the volume has not changed since the last
+      release.
+    - Fixed undefined ptserver behavior with too many allocated PTS ids.
+    - Avoid redefining assert in public header files.
+    - Documentation, diagnostics, and error message improvements.
+
+ -- Russ Allbery <rra@debian.org>  Sat, 28 Dec 2013 11:38:19 -0800
+
+openafs (1.6.5.2-1) unstable; urgency=medium
+
+  * New upstream release.
+    - Fix support for tmpfs as the cache filesystem.
+    - Support kernels with backported changes affecting getname/putname.
+  * Exit successfully in the openafs-client init script if /sbin/afsd
+    doesn't exist, indicating that openafs-client is not installed.
+  * Load /lib/lsdb/init-functions in the openafs-client init script as the
+    first step towards upstart or systemd support.
+  * Update standards version to 3.9.5 (no changes required).
+
+ -- Russ Allbery <rra@debian.org>  Sun, 22 Dec 2013 13:40:10 -0800
+
+openafs (1.6.5.1-1) unstable; urgency=low
+
+  * New upstream release.
+    - Support for Linux 3.11 and 3.12 (up to 3.12-rc3).
+    - Fixed core dumps into AFS with some Linux kernels.
+  * Cherry-pick additional upstream fixes.
+    - [7242e25a] Fix library ordering when building aklog.
+    - [514fc63d] Fix budb crash when the -servers command-line option
+      is given.  (Closes: #718253)
+  * Ignore errors when reading ThisCell in the openafs-client config
+    script.  If the file doesn't end in a newline, read will still succeed
+    and set the variable, but will exit with a non-zero status.  This
+    would abort configuration of the package without a useful error
+    message.
+  * Drop Recommends of libjs-jquery in openafs-doc.  We're no longer
+    replacing the embedded jQuery, pending a better fix in the Doxygen
+    packaging.
+  * Optimize the get-orig-source target.  Thanks, Anders Kaseorg.
+  * Translation updates:
+    - German, thanks Erik Pfannenstein.  (Closes: #719154)
+
+ -- Russ Allbery <rra@debian.org>  Sun, 20 Oct 2013 09:26:37 -0700
+
+openafs (1.6.5-1) unstable; urgency=high
+
+  * New upstream release.
+    - OPENAFS-SA-2013-003: New support for non-DES enctypes in the
+      long-lived AFS key.  This requires deploying rxkad.keytab files on
+      each server containing all of the encryption types for the cell AFS
+      key.  Once this is deployed on servers, DES will only be used for
+      the session key.  Once deployed on all clients, a stronger security
+      mechanism will be used that allows the DES keys to be removed from
+      the AFS principal in the Kerberos KDC (but still uses DES for some
+      session encryption purposes).  (CVE-2013-4134)
+    - OPENAFS-SA-2013-004: Properly support the -encrypt option in vos,
+      including with -localauth.  (CVE-2013-4135)
+  * Move the documentation and kernel module build dependencies to
+    Build-Depends-Indep and only do those parts of the build if building
+    architecture-independent packages.
+  * Drop the sequence numbers from the openafs-client init script
+    registration.  Debian now always uses dependency-based boot ordering.
+  * Translation updates:
+    - Japanese, thanks victory.  (Closes: #714223)
+
+ -- Russ Allbery <rra@debian.org>  Wed, 24 Jul 2013 14:32:22 -0700
+
+openafs (1.6.4-1) unstable; urgency=low
+
+  * New upstream release.
+
+ -- Russ Allbery <rra@debian.org>  Tue, 18 Jun 2013 11:10:45 -0700
+
+openafs (1.6.3-1) unstable; urgency=low
+
+  * New upstream release.
+    - Support for Linux 3.9 and 3.10.  (Closes: #711920)
+    - Multiple fixes for use after free, use of uninitialized memory,
+      and similar C memory management bugs found via code analysis.
+    - Obey jumbo/nojumbo settings for Ubik (database) servers.
+    - General improvements in diagnostic and log messages.
+    - Avoid incorrectly sending small amounts of data over the wire
+      unencrypted in some situations and report the correct error message
+      in this case.
+    - Avoid generating duplicate IDs for readonly and backup volumes.
+    - Return quota and free space information without an access check.
+    - Improve client bookkeeping in the file server, fixing several
+      potential corruption and segfault issues.
+    - Avoid known cases of silent data corruption in background syncs in
+      the file server.
+    - Run-time configuration support for fileserver synchronization.
+    - Fix transient network error interference with establishing a ubik
+      quorum.
+    - Do not discard the persistent client disk cache on restart.
+    - Fix bugs that made it impossible to unmount a disk cache file system
+      after it had been used by the client.
+  * Give openafs-dbserver its own documentation directory rather than
+    linking it to openafs-client, allowing relaxation of the versioned
+    dependency on openafs-client to Recommends.  (However, openafs-client
+    will still have to be installed for the openafs-fileserver init
+    script, which uses the bos binary, so will still be pulled in by
+    dependencies.)
+  * Cleanup of the openafs-client postinst script.
+    - Perform all work unconditionally to handle various rare error
+      recovery cases properly.
+    - Only force creation of CellServDB on initial installation or if
+      AFSDB/SRV records are not being used.
+  * Remove openafs-fileserver postinst support for upgrades from ancient
+    versions (1.4.4.dfsg1-4 and 1.4.11+dfsg-3).
+  * General coding style cleanup of maintainer scripts.
+
+ -- Russ Allbery <rra@debian.org>  Mon, 17 Jun 2013 14:53:41 -0700
+
+openafs (1.6.2.1-2) unstable; urgency=low
+
+  * Upload to unstable.
+  * Translation updates:
+    - Brazilian Portuguese, thanks Albino B Neto.  (Closes: #706627)
+
+ -- Russ Allbery <rra@debian.org>  Thu, 09 May 2013 09:00:57 -0700
+
+openafs (1.6.2.1-1) experimental; urgency=low
+
+  * New upstream release.
+    - Support for Linux 3.8.
+  * Support configuring -dynroot-sparse via debconf.  The AFS_DYNROOT
+    option in /etc/openafs/afs.conf.client is now tri-valued instead of a
+    boolean, and the boolean values will be mapped to the corresponding
+    options on upgrade.  Based on work by Jakob Haufe.  (Closes: #644564)
+  * Translation updates:
+    - Czech, thanks Martin Šín.  (Closes: #705013)
+    - Russian, thanks Yuri Kozlov.  (Closes: #705159)
+    - French, thanks Christian Perrier.  (Closes: #705296)
+    - Portuguese, thanks Miguel Figueiredo.  (Closes: #705307)
+    - Danish, thanks Joe Hansen.  (Closes: #705660)
+    - Italian, thanks Beatrice Torracca.  (Closes: #705864)
+
+ -- Russ Allbery <rra@debian.org>  Sun, 21 Apr 2013 20:51:57 -0700
+
+openafs (1.6.2-1) experimental; urgency=low
+
+  * New upstream release.
+    - OPENAFS-SA-2013-001: Fix fileserver buffer overflow when parsing
+      client-supplied ACL entries and protect against client parsing of
+      bad ACL entries.  (CVE-2013-1794)
+    - OPENAFS-SA-2013-002: Fix ptserver buffer overflow via integer
+      overflow in the IdToName RPC.  (CVE-2013-1795)
+    - Fix aklog warning about allow_weak_crypto.
+  * Update CellServDB to the 2013-01-28 version.
+  * Fix DKMS builds of the OpenAFS kernel module for amd64 kernels on the
+    i386 architecture by parsing the kernel version for the architecture
+    and kernel class and using that to tell the OpenAFS build system what
+    sysname to use.  Patch from Thorsten Alteholz.
+  * Avoid re-running setup after build when building modules from the
+    openafs-modules-source package with module-assistant.  This will
+    hopefully avoid an issue where, following an upgrade of
+    openafs-modules-source, module-assistant cannot build new module
+    packages without an intervening module-assistant clean.  Patch from
+    Thorsten Alteholz.  (Closes: #660622)
+  * Make another attempt at suppressing the wildcard action for building
+    debian/rules to fix problems building module packages using
+    make-kpkg.  Patch from Thorsten Alteholz.  (Closes: #639475)
+
+ -- Russ Allbery <rra@debian.org>  Mon, 04 Mar 2013 13:54:30 -0800
+
+openafs (1.6.2~pre3-1) experimental; urgency=low
+
+  * New upstream prerelease.
+    - Avoid unnecessary panic in kernel module when freeing vcaches.
+    - Add additional objects to the *_pic libraries in support of the AFS
+      Perl bindings.
+  * Remove unnecessary change to the upstream Debian packaging files to
+    support armhf.  These files aren't used during a package build, so no
+    need to carry a Debian patch.
+
+ -- Russ Allbery <rra@debian.org>  Mon, 21 Jan 2013 11:17:36 -0800
+
+openafs (1.6.2~pre2-2) experimental; urgency=low
+
+  * Restore include of <sys/param.h> in userspace builds of rx/rx_packet.h
+    to get a definition of MIN and MAX on, at least, powerpc.  Thanks,
+    Andrew Deason.
+
+ -- Russ Allbery <rra@debian.org>  Thu, 03 Jan 2013 12:06:41 -0800
+
+openafs (1.6.2~pre2-1) experimental; urgency=low
+
+  * New upstream prerelease.
+    - Support Linux kernels up to 3.7.  (Closes: #685973)
+    - Fix fileservers to properly report >2 TiB partitions.
+    - Fix stale volume info from vos examine on non-DAFS filservers.
+    - Fix possible volume corruption with vos convertROtoRW.
+    - Fix bosserver to preserve all command-line options over restart.
+    - Fix bosserver to properly kill hung processes during shutdown.
+    - Fixes for memcache, especially on Solaris.
+    - Increase the size of the DNS resolver answer buffer to allow sites
+      with a long response list to use SRV and AFSDB records.
+    - Fix possible abuse of fs mkmount.  In previous versions, users could
+      crash a client by nesting volume mounts.
+    - Fix client page cache corruption on Linux.  When multiple clients
+      read and write to a file, the reading client may see first couple
+      bytes of a file as nulls.
+    - Support newer glibc versions.
+  * Build-Depend on hardening-wrapper and enable it to work around the
+    current upstream munging of CFLAGS and LDFLAGS.  (Closes: #659663)
+  * Fix server installation instructions in README.servers, which used the
+    early demand-attach syntax before separate demand-attach binaries were
+    built.  Thanks, Björn Torkelsson.  (Closes: #693311)
+  * Remove the symlink from the openafs-fileserver doc directory to the
+    openafs-client doc directory.  We used to install this symlink and
+    share doc directories, but this stopped in 1.4.12+dfsg-1.  However,
+    dpkg doesn't remove symlinks to a directory, so systems that had
+    upgraded from the older package were overwriting openafs-client doc
+    files with the openafs-fileserver versions.  Thanks, Andreas
+    Beckmann.  (Closes: #694063)
+  * Switch to xz compression for the upstream tarball, Debian tarball, and
+    binary packages.
+  * Remove debian/import-upstream and change README.source to document
+    using git-import-orig with --upstream-vcs-tag instead.
+  * Move single-debian-patch to local-options and patch-header to
+    local-patch-header so that they only apply to the packages I build and
+    NMUs get regular version-numbered patches.
+  * Update Vcs-* URLs for the new anonscm.debian.org URL layout.
+  * Update standards version to 3.9.4 (no changes required).
+
+ -- Russ Allbery <rra@debian.org>  Thu, 03 Jan 2013 10:07:39 -0800
+
+openafs (1.6.1-2) unstable; urgency=low
+
+  * Translation updates:
+    - Fix German translation encoding.  Thanks, Christian PERRIER.
+      (Closes: #678736)
+    - Italian, thanks Beatrice Torracca.  (Closes: #671640)
+
+ -- Russ Allbery <rra@debian.org>  Tue, 21 Aug 2012 17:11:58 -0700
+
+openafs (1.6.1-1) unstable; urgency=low
+
+  * New upstream release.
+    - Do not ignore all InlineBulkStatus errors in file server.
+    - Support for Linux 3.3 and 3.4.
+    - Fix incorrect kernel error handling in afs_notify_change.
+    - Fix locking around RXS_PreparePacket.
+
+ -- Russ Allbery <rra@debian.org>  Wed, 28 Mar 2012 17:25:05 -0700
+
+openafs (1.6.1~pre4-1) unstable; urgency=low
+
+  * New upstream prerelease.
+    - Always retry busy rx calls and retriable actions.
+    - Do not abort the salvager on large volume IDs.
+    - Ensure one NAT ping connection per srvAddr.
+    - Improvements to the file server address tracking.
+    - Improve locking in the host table in the file server.
+    - Avoid discrepancy between lastBusy and PEER_BUSY.
+    - Allow a null host for callback breaks.
+    - Fix probing for noop_fsync in the Linux kernel.
+    - Fix handling of expired locks in the file server.
+    - Reset blacklisted servers on a hard-mount retry.
+  * Update debhelper compatibility level to V9.
+  * Update standards version to 3.9.3 (no changes required).
+
+ -- Russ Allbery <rra@debian.org>  Thu, 08 Mar 2012 18:24:53 -0800
+
+openafs (1.6.1~pre2-1) unstable; urgency=low
+
+  * New upstream prerelease.
+    - Disable server-side Rx keepalive during disk I/O.
+    - Avoid timing out on non-kernel busy Rx channels.
+    - Add separate client connection pool for replicated volumes.
+    - Remove SYNC client disable behavior on some error patterns.
+    - Correctly test for the end of the Rx call queue.
+    - Fix cleanup of special inodes on the server.
+    - Provide a public Rx function for toggling keepalive.
+    - Fix connection management in the client checkserver loop.
+    - Discard cached state in the client when unsure of validity.
+    - Fix thread safety of free inode management with demand-attach.
+    - Fix xstat handling of time values on 64-bit platforms.
+    - Increase the idledead time.
+    - Fix return status of fsync on a directory.
+  * Fix afs-newcell's creation of the file server process to pass
+    -localauth.  This was broken when demand-attach support was
+    added.  Thanks, Florian Hatat.  (Closes: #652973)
+  * Fix afs-newcell's unwind of file server process creation.  Thanks,
+    Davor.  (Closes: #655136)
+  * Description typo, thanks Jonas Smedegaard.  (Closes: #657933)
+  * Translation updates:
+    - Danish, thanks Joe Hansen.  (Closes: #654933)
+
+ -- Russ Allbery <rra@debian.org>  Wed, 08 Feb 2012 14:30:07 -0800
+
+openafs (1.6.1~pre1-1) unstable; urgency=low
+
+  * New upstream prerelease.
+    - Install new afsio utility.
+    - Fixes performance issues in both the client and the server.
+    - Rate-limit waiting for volume messages in kernel logs.
+    - Avoid a possible memory allocation issue in ticket data management.
+    - Disable MTU discovery.
+    - Reduce the quantity of NAT pings sent by the client.
+    - Various fixes for demand-attach file servers.
+    - Fix volume lock violations.
+    - Report the bosserver -rxbind address in a file.
+    - Revert process group changes on keyring failure.
+    - Various fixes for the salvager.
+
+ -- Russ Allbery <rra@debian.org>  Tue, 20 Dec 2011 13:51:57 -0800
+
+openafs (1.6.0-3) unstable; urgency=low
+
+  * Apply upstream deltas to fix file corruption issue in file server:
+    - [c73b6644] viced: disable accelerated copyonwrite
+    - [4e05bc3b] remove CopyOnWrite2 and unused vars
+
+ -- Russ Allbery <rra@debian.org>  Wed, 07 Dec 2011 18:47:48 -0800
+
+openafs (1.6.0-2) unstable; urgency=low
+
+  * Apply upstream deltas for Linux 3.1 and 3.2 (Closes: #649765):
+    - [f129142] Linux: 3.1: update RCU path walking detection in
+      permission i_op (Closes: #649996)
+    - [7f55b45] Linux: d_delete now takes a const argument
+    - [737a280] Linux: 3.2: Use set_nlink to update i_nlink
+    - [364fad6] Linux: 3.1: adapt to fsync changes
+    - [032736b] Linux: make sure backing_dev_info is zeroed
+  * Add support for armhf.  Patch from Konstantinos Margaritis.
+    (Closes: #645395)
+
+ -- Russ Allbery <rra@debian.org>  Mon, 28 Nov 2011 17:53:45 -0800
+
+openafs (1.6.0-1) unstable; urgency=low
+
+  * New upstream stable release.
+    - Rx NAT pings are not enabled until peer has answered
+    - Numerous fixes to command argument parsing
+    - Avoid crashing on host table exhaustion and defer clients instead
+    - Rx connection reference counting is enabled
+    - An Rx connection reference count leak is fixed in bulkstat
+    - Handle unparsable directory objects
+    - Handle Kerberos credential cache errors in aklog
+  * Generate stub header files that include the actual system header when
+    building libuafs instead of symlinking h to the appropriate directory.
+    Fixes build failures now that Debian has switched to multiarch and
+    moved some of the system headers.  (Closes: #639063, LP #831287)
+  * Fix another Doxygen call to generate a configuration file, and remove
+    the generated configuration files after Doxygen runs.
+  * Update CellServDB to the 2011-08-14 release.
+
+ -- Russ Allbery <rra@debian.org>  Thu, 01 Sep 2011 18:43:02 -0700
+
+openafs (1.6.0~pre7-2) unstable; urgency=low
+
+  * Force use of dblatex to build the manual, even if docbook2pdf is
+    available, since the latter dies with errors about TeX capacity.
+    (Closes: #635306)
+  * Fix generation of protocol documentation from Doxygen headers.
+    Doxygen cannot be called directly on header files and needs a
+    configuration file to be generated first.  Thanks, Anders Kaseorg.
+  * Add another dummy rule for ./debian/rules to the kernel module rules
+    file to fix another variation of make-kpkg breakage.
+
+ -- Russ Allbery <rra@debian.org>  Sun, 24 Jul 2011 16:45:28 -0700
+
+openafs (1.6.0~pre7-1) unstable; urgency=low
+
+  * New upstream prerelease.
+    - Substantial Rx updates to correct erroneous behavior
+    - Salvager tries harder to detect linktable issues
+    - Additional documentation
+    - xstat tools now cope with differing timeval structures between
+      endpoints
+    - Don't attach volumes with special status set in demand attach
+    - Treat Linux 3.0 as Linux 2.6 for sysname purposes
+  * Update README.source for a few changes in procedures and source
+    package format.
+  * Reapply the removal of the Doxygen-generated copy of jquery, since
+    this apparently wasn't as fixed as had been advertised.  However, make
+    it conditional on the existence of the jquery.js script, so we should
+    hopefully only fix this where necessary.
+
+ -- Russ Allbery <rra@debian.org>  Wed, 20 Jul 2011 13:04:07 -0700
+
+openafs (1.6.0~pre6-2) unstable; urgency=medium
+
+  * Urgency set to medium since 1.6.0~pre6-1 has been in unstable for some
+    time, blocked only by the armel build problem, and 1.6.0~pre4-1 in
+    testing has serious bugs.
+  * Revert the removal of Doxygen's jquery copy.  This has now been fixed
+    in the Doxygen package.
+  * Disable optimization on armel to work around #630746.
+
+ -- Russ Allbery <rra@debian.org>  Wed, 13 Jul 2011 14:05:26 -0700
+
+openafs (1.6.0~pre6-1) unstable; urgency=low
+
+  * New upstream prerelease.
+    - Don't do unnecessary page invalidation with directories.
+    - Flush vcaches in afs_shutdown for better callback givebacks.
+    - Fix the vnode type for dynroot FIDs.
+    - Fix volinfo -filenames.
+    - Fall back to afs3-vlserver for SRV records for afs3-prserver.
+    - Fix a client locking issue on ICBS that could deadlock.
+    - Fix callback state handling with demand-attach when salvaged.
+    - Fix reference leak in GetCapabilities.
+    - Document DNS SRV record usage in afsd man page.
+  * Add a dummy debian/rules rule in the kernel module rules file to fix
+    builds with make-kpkg.  (Closes: #622260)
+  * Remove and symlink the copies of jquery generated by Doxygen and add a
+    Recommends on libjs-jquery for openafs-doc.
+
+ -- Russ Allbery <rra@debian.org>  Thu, 16 Jun 2011 09:07:30 -0700
+
+openafs (1.6.0~pre5-2) unstable; urgency=low
+
+  * Apply upstream patch from http://gerrit.openafs.org/#change,4656 for
+    correct reading of files larger than the chunk size.
+  * Use dpkg-buildflags to get the default values of CFLAGS, CPPFLAGS, and
+    LDFLAGS.  Upstream does not entirely honor these yet, but we're
+    getting closer.
+  * Update to standards version 3.9.2 (no changes required).
+
+ -- Russ Allbery <rra@debian.org>  Sun, 15 May 2011 00:29:14 -0700
+
+openafs (1.6.0~pre5-1) unstable; urgency=low
+
+  * New upstream prerelease.
+    - Avoid downward vcache pressure when entries are free.
+    - Avoid client to fileserver deadlock during callback giveup.
+    - Improve calculation of when to flush vcaches.
+    - Don't read pages beyond the cache EOF.
+    - Improve file server reference counting, locking, and logging.
+    - Rename the OpenAFS com_err library to avoid conflicts.
+    - Restrict the number of CBRs allocated at once.
+    - Permit importing of -md5 and -md4 keys with asetkey.
+    - Fix token return in aklog with 524 conversion.
+  * Apply upstream patch from http://gerrit.openafs.org/#change,4654 to
+    fix a configure problem detecting Linux kernel properties, leading to
+    a lockup on 2.6.38 kernels.
+  * Update import-upstream and README.source for moving 1.6 from the
+    experimental and upstream-1.5 branches to the master and upstream
+    branches.
+  * Change to Debian source format 3.0 (quilt).  Force a single Debian
+    patch for simplicity since the packaging is maintained in Git using
+    branches, and include a patch header explaining why.
+
+ -- Russ Allbery <rra@debian.org>  Sat, 14 May 2011 11:52:40 -0700
+
+openafs (1.6.0~pre4-1) unstable; urgency=low
+
+  * Upload to unstable.
+  * New upstream prerelease.
+    - Fix file descriptor leak in the file server that could result in
+      corrupted files.
+    - Properly support large volume numbers.
+    - Document current client setuid behavior.  (Closes: #612608)
+    - Allow salvager to be run manually with demand-attach servers.
+    - Properly report setpag() errors.
+  * Apply upstream deltas:
+    - [1e322b88] Linux: 2.6.39: deal with BKL removal
+    - [a8aa6f42] Linux: 2.6.39: replace path_lookup with kern_path
+  * Declare optional dependencies in the openafs-client init script on
+    openafs-fileserver so that, if the same host is running both a
+    fileserver and a client, the fileserver starts before and stops after
+    the client.
+
+ -- Russ Allbery <rra@debian.org>  Thu, 31 Mar 2011 15:00:04 -0700
+
+openafs (1.6.0~pre3-1) experimental; urgency=low
+
+  * New upstream prerelease.
+    - Revert UUID support in vos.
+    - pt_util fixed to properly create new database.
+    - MTU discovery now properly shut down on call reset.
+    - FUSE client support fixed for non-/afs mounts.
+    - A deleted volume can now be recreated properly.
+    - Callbacks are again not broken during whole partition salvages.
+    - Positional vectored IO fixed.
+    - Fileserver per-client thread usage again properly enforced.
+    - Anonymous dropbox support improved and drawbacks documented.
+    - Ensure vnodes are not reallocated while in use for demand-attach.
+    - Perform vcache eviction via a fast path before visiting vcaches
+      where sleep is needed.
+  * Apply upstream deltas:
+    - [17b48f99] Add missing semicolon (Closes: #618496)
+    - [ee2811b0] viced: Allow checkout of VOL_STATE_DELETED volumes
+
+ -- Russ Allbery <rra@debian.org>  Tue, 22 Mar 2011 05:07:22 -0700
+
+openafs (1.6.0~pre2-1) experimental; urgency=low
+
+  * New upstream prerelease.
+    - Avoid spurious Rx connection timeouts.
+    - Do not retry Rx calls on channels returning busy errors.
+    - Fix double-free error in the vos command-line utility.
+    - Properly enable Rx connection hard timeouts.
+    - Fix lock initialization in Rx.
+    - Check for /afs existence before starting unless -nomount given.
+    - Fix panic when using /afs/.:mount syntax.
+    - Avoid a panic in memcache mode due to missing CellItems file.
+    - Attempt to recover more quickly from timed-out volume releases.
+    - Improve speed of volume removal.
+    - Improve CPU utilization during demand-attach volume attachment.
+    - Fix various error handling problems.
+    - Linux 2.6.38 support.
+    - Improve correctness and performance in cache bypass mode.
+    - Avoid extra runs of the vcache freeing routine.
+  * In README.modules, document the need to install the Linux headers
+    package in the DKMS instructions and the need for module-assistant
+    clean openafs in the module-assitant instructions.  (Closes: #606235)
+
+ -- Russ Allbery <rra@debian.org>  Thu, 03 Mar 2011 17:49:27 -0800
+
+openafs (1.6.0~pre1-1) experimental; urgency=low
+
+  * New upstream prerelease.
+    - Rx performance improvements.
+    - Correct byte order handling of port in SRV record lookups.
+    - More robust vos release to sites previously marked "don't use."
+    - vos properly matches sites with multihomed servers.
+    - Fix ptserver supergroups support on 64-bit platforms.
+    - Bug fixes for demand-attach salvaging.
+    - Avoid potential crash when attaching a volume fails.
+    - Properly hold the host lock during host enumeration in fileserver.
+    - Use larger I/O sizes in memcache to improve performance.
+    - Avoid potential alignment issues in pioctl calls.
+    - Servers now marked down when GetCapabilities returns an error.
+    - Avoid blocking xvcache lock when freeing in-use vcaches.
+    - In-use vcache count now properly tracked.
+    - Properly configure LWP to use ucontext on appropriate platforms.
+    - Eliminate spurious AFS system call errors.
+    - Linux 2.6.37 support.
+  * Apply upstream deltas:
+    - [4a3e5291] Update NEWS for 1.5.78 and 1.6.0pre1
+  * In the openafs-client init script, don't attempt to stop or restart
+    the AFS client if module loading is disabled.  Stopping afsd without
+    unloading the module would leave the system in an inconsistent state.
+  * Add $named to Should-Start in the openafs-client init script since the
+    client may do DNS lookups for the VLDB and file servers during startup
+    in some situations.  (Closes: #586226)
+  * Drop --enable-reduced-depends for right now.  aklog doesn't deal with
+    it correctly.
+  * Now that upstream has renamed compile_et to afs_compile_et, include it
+    in libopenafs-dev.
+  * Update CellServDB to the 2010-12-13 version.
+
+ -- Russ Allbery <rra@debian.org>  Wed, 29 Dec 2010 12:27:59 -0800
+
+openafs (1.5.77-2) experimental; urgency=low
+
+  * Apply upstream deltas:
+    - [ca2a7363] libuafs: Don't #define user (fixes armel build)
+    - [f7f366d0] Link dafssync-debug(8) to fssync-debug(8)
+    - [a2cf6b8d] Fix POD errors in fileserver and dasalvager
+    - [e36b4e00] Update bos create man page for new demand-attach
+  * Add backslashes to the DKMS command, which will be required once DKMS
+    uses proper shell quoting.
+  * In openafs-modules-source, use /lib/modules/`uname -r`/build as the
+    default path to the kernel headers rather than /usr/src/linux.
+    Current kernel header packages will create an appropriate symlink
+    there.  This default is only used when neither module-assistant nor
+    kernel-package are used.
+  * In the openafs-client init script, stop looking for openafs.o; Debian
+    hasn't supported 2.4 kernels for quite some time.  Remove all the $MP
+    handling since we force a module name of openafs.ko using
+    --with-linux-kernel-packaging.
+
+ -- Russ Allbery <rra@debian.org>  Fri, 24 Sep 2010 21:37:03 -0700
+
+openafs (1.5.77-1) experimental; urgency=low
+
+  * Apply upstream deltas:
+    - [7594331c] Add NEWS entries for OpenAFS 1.5.77 and 1.5.76
+  * New upstream testing release.
+    - Demand-attach servers are now always built and installed under
+      separate names (dafileserver, davolserver, dasalvager).  This means
+      that the default names are no longer demand-attach, which means that
+      upgrades from previous experimental versions will fail (but upgrades
+      from non-experimental versions will be much cleaner).
+    - Linux 2.6.36 support and improved freezer interface support.
+    - More robust path MTU detection.
+    - Return VNOVOL from fileserver when a volume is deleted.
+    - Improve handling of some corruption in the salvager.
+    - Relax too-strict checks in ptserver on foreign names.
+    - Better reporting of failures during volume attach.
+    - Better fileserver handling of host hash collisions.
+    - Fix statistics reporting in RXAFS_GetStatistics64.
+    - Improved disconnected mode reference tracking.
+    - Avoid a kernel panic during vcache contention.
+    - Fix potential kernel panic during bulkstatus.
+    - Better vos dry-run mode for syncvldb and syncserv.
+    - Fix s390x kernel build support.
+  * Update afs-newcell and README.servers to recommend using the
+    demand-attach fileserver binaries and dafs bos type.
+  * Force disabling of Linux syscall probing in kernel module builds.
+  * Remove obsolete --enable-demand-attach-fs and --enable-disconnected
+    configure flags.  These are now unconditional upstream.
+  * The openafs-fileserver init script now depends on $named since
+    apparently the volserver requires DNS during startup.  Thanks, Jaap
+    Winius.  (Closes: #589783)
+  * Use dpkg --print-architecture, not --print-installation-architecture,
+    in the openafs-fileserver config script.  The latter is deprecated.
+    Thanks, Peter Palfrader.  (Closes: #594488)
+  * Add a dependency on libc6-dev to openafs-modules-dkms.  dkms doesn't
+    depend on it because most kernel modules don't need it, but openafs
+    builds userspace helper programs.  Thanks, Peter Palfrader.
+  * Fix the sample CellServDB entry printed by afs-newcell if the cell
+    isn't found in /etc/openafs/CellServDB to include the correct server
+    syntax.  Thanks, Peter Palfrader.
+  * Run the DKMS build commands in a subshell to work around a DKMS bug
+    that caused the module build logs to be discarded.  (LP: #593509)
+  * Add a status command to the openafs-fileserver init script.
+  * Update to debhelper compatibility level V8.
+    - Rewrite debian/rules to use dh and overrides.
+    - Use dh_installdocs --link-doc to handle linked doc directories.
+    - Rewrite debian/module/rules to use dh and overrides.
+    - Bump -source package dependency and compat to debhelper 8.
+  * Add ${perl:Depends} to openafs-modules-dkms and perl to the
+    dependencies of openafs-modules-source, since Perl is used as part of
+    the module build system now.
+  * Remove bison and flex dependencies for the module build packages.  We
+    now ship the results of rxgen, so don't need all the tools required to
+    build the full source tree.
+  * Update standards version to 3.9.1 (no changes required).
+
+ -- Russ Allbery <rra@debian.org>  Tue, 21 Sep 2010 17:59:42 -0700
+
+openafs (1.5.75-2) experimental; urgency=low
+
+  * Apply upstream deltas:
+    - [57d727da] Link libafsauthent with -lresolv if required
+    - [c3fc948e] Check for crypt in external library
+    - [a1351d48] Fix ktime test on 64-bit systems
+  * Use --after instead of --remaining in binary-indep to avoid running
+    dh_auto_install and doing the installation process again.
+
+ -- Russ Allbery <rra@debian.org>  Wed, 14 Jul 2010 12:05:12 -0700
+
+openafs (1.5.75-1) experimental; urgency=low
+
+  * New upstream testing release.
+    - Path MTU discovery for networks with bad fragmentation.
+    - New -human flag for human-readable units in some fs commands.
+    - Provide reasons for locked volumes in vos when known.
+    - Improvements to Rx ping and NAT handling.
+    - Improvements to the userspace AFS client.
+    - Substantial updates to the Administrator's Guide.
+    - Various bug fixes and improvements to the file server.
+    - Force core file generation in bosserver.
+    - Improve vlclient and vldb_check.
+    - Avoid volume corruption on creation if files were left over from a
+      previous failed cleanup.
+    - Do not tie up fileserver threads with volumes being taken offline.
+    - Break origin's callback on the target of a rename operation.
+    - Do not open /dev/console in the fileserver.  (Closes: #582111)
+    - Avoid unneeded sync() calls in the fileserver.
+    - Update client disk cache version.
+    - Parallelization improvements in lock management in the client.
+    - New -dynroot-sparse mode for afsd to not show all cells in the
+      CellServDB until that cell is needed.
+    - Fix aklog crash with linked cell handling.
+    - Fix fs getserverprefs -vlservers with default CellServDB list.
+    - Report server address when logging warnings.
+    - Avoid panic in GetCapabilities with an unknown cell.
+    - Report process name and ID for advisory lock warnings when
+      possible.
+    - Flush pending changes to server when releasing file locks.
+    - Various other client bug fixes on error handling and callbacks.
+    - Disable syscall probes when keyrings are supported.
+    - Use filehandles for all Linux 2.6 versions to avoid
+      incompatibilities with mismatched afsds.
+    - Update Linux kernel support for 2.6.35.
+    - The stripped source tree generated for kernel module builds is now
+      truly architecture-independent and can build on i386 for amd64
+      kernels (for example).  (Closes: #518270)
+    - Fix build problems on alpha.
+  * Apply upstream deltas:
+    - [bbce0515] Add NEWS entries for 1.5.75
+    - [c790e7d0] Remove a few erroneous NEWS entries for 1.5.75
+    - [9e2aba99] Fix ktime test for errors
+    - [5cc6293c] Provide man pages for more fssync-debug commands
+  * Set the OpenAFS build version to the Debian package version with
+    -debian appended so that the Debian package versions can be
+    distinguished from unmodified upstream versions.
+  * Build shared library packages for libafsauthent and libafsrpc.
+    Upstream is now more careful about the ABI.  (Closes: #433054)
+  * Explicitly link libafsauthent with -lresolv -lcrypt.  This is a
+    temporary fix for Linux that will be replaced by a better upstream fix
+    in the next release.
+  * openafs-modules-source and openafs-modules-dkms are now architecture:
+    all.  The generated kernel source is now architecture-independent.
+  * openafs-modules-source and openafs-modules-dkms now recommend an
+    appropriate version of openafs-client.
+  * Update kernel module packaging scripts:
+    - Remove selection of linux-image vs. kernel-image for kernel names.
+    - Use Breaks instead of Conflicts.
+    - Update standards version to 3.9.0.
+  * Tighten the dependencies on openafs-client in packages that symlink
+    their /usr/share/doc directories to openafs-client's to meet the
+    Policy requirements for changelog files.
+  * Remove the lpia architecture.  This was an experiment in Ubuntu that
+    has apparently been dropped.
+  * Add preliminary support for powerpcspe, mapping that architecture to
+    ppc_linux26.  The kernel build won't work unless uname -m on that
+    architecture returns ppc.
+  * Minor update to README.Debian for openafs-doc: the old IBM release
+    notes are no longer included.
+  * Remove conflicts/replaces/provides for openafs-ptutil, which was
+    ancient (removed in 2001).
+  * Install an upstream changelog file now that upstream provides one.
+  * Add a workaround in the clean target to allow the same packaging files
+    to be used by upstream, which removes changelog during distclean
+    because it's Autoconf-generated.  This workaround will not trigger
+    during a normal Debian package build.
+  * Update standards version to 3.9.0.
+    - Use Breaks instead of Conflicts where appropriate.
+
+ -- Russ Allbery <rra@debian.org>  Tue, 13 Jul 2010 14:46:10 -0700
+
+openafs (1.5.74.1-1) experimental; urgency=low
+
+  * New upstream testing release.
+    - Correctly recognize cache version differences in upgrades from 1.4
+      and invalidate the old cache.
+    - Resolve symlinks in fs rmmount.
+    - Include PID in byte-range lock warning.
+  * Preserve the AFS mount point and cache directories set in
+    /etc/openafs/cacheinfo if the file already exists rather than
+    overwriting them with the defaults.  Thanks, Liam Healy.
+    (Closes: #580077)
+  * In the openafs-client init script, don't assume that AFS is mounted on
+    /afs when unmounting it or killing processes with AFS files open.
+    Instead, parse /etc/mtab to find the AFS mount point.
+  * Move the experimental afsd.fuse AFS FUSE client into openafs-fuse to
+    avoid adding a FUSE dependency in openafs-client.  Document its
+    current limitations in the package description.
+
+ -- Russ Allbery <rra@debian.org>  Tue, 04 May 2010 21:49:52 -0700
+
+openafs (1.5.74-2) experimental; urgency=low
+
+  * Apply upstream deltas:
+    - [e6f6c349] Fixes and clarifications to vos setaddrs man page
+    - [d80382ef] Remove special-case call for KAM_SetPassword on s390
+  * Fix ucontext detection on ppc_linux26, hopefully fixing build failures
+    on the Debian powerpc architecture.
+  * Install afsd.fuse and a man page link for it if the FUSE client build
+    is enabled.
+  * Add build dependency on libfuse-dev and pass --enable-fuse-client to
+    configure so that the new FUSE afsd is built.  Install afsd.fuse into
+    the openafs-client package for the time being; it will move to some
+    other package before being uploaded to unstable so that openafs-client
+    doesn't keep a dependency on libfuse.  There is, as yet, no
+    documentation or init script support for the FUSE implementation.
+
+ -- Russ Allbery <rra@debian.org>  Tue, 20 Apr 2010 18:12:06 -0700
+
+openafs (1.5.74-1) experimental; urgency=low
+
+  * New upstream testing release.
+    - New vos setaddrs command.
+    - Significant improvements to libuafs (user-space AFS client).
+    - Initial FUSE implementation for afsd.
+    - pts mem -supergroup and -expandgroups options.
+    - Rx lock acquisition and thread safety fixes.
+    - Fileserver capabilities support for the UNIX client.
+    - Various afsmonitor improvements.
+
+ -- Russ Allbery <rra@debian.org>  Mon, 19 Apr 2010 14:27:10 -0700
+
+openafs (1.5.73.3-1) experimental; urgency=low
+
+  * New upstream testing release.
+    - New demand-attach file server support for greatly improved file
+      server restart times.
+    - Support for split readonly/read-write client caches.
+    - Better client handling of file server meltdowns.
+    - Experimental read-only client disconnected mode.
+    - NFS translator clients now work properly on Linux.
+    - Client cache readahead.
+    - Network performance improvements.
+    - New libkopenafs library providing a kernel PAG manipulation
+      interface (a subset of the API provided by Heimdal's libkafs).
+    - Fix builds on sparc64.  (LP: #181661)
+  * Apply upstream deltas:
+    - [7d395f17] Improve demand-attach fileserver bos documentation
+    - [a763edc3] Make src/rx/rx.c not executable
+    - [8d41bc24] Reallocate memory in aklog for the AFS ID string
+    - [be449999] Fix typo in bos_create manpage
+    - [fdb9429e] Linux: kmap() not page_address()
+  * Build OpenAFS with demand-attach enabled for the file server, bos
+    restricted mode enabled for bosserver, and disconnected mode enabled
+    for the client.  Except for demand-attach, these options don't change
+    the default behavior, just make new capabilities available.
+  * The openafs-modules package now provides openafs-modules3 and
+    conflicts on pre-1.5.61 openafs-client packages since the interface
+    between afsd and the module has changed.  openafs-client now conflicts
+    with openafs-modules2 and recommends openafs-modules3.
+  * Change the default permissions of /etc/openafs/server to 0755 to match
+    upstream defaults, but do not change permissions on upgrade.  The only
+    file in that directory that needs to be protected is KeyFile, which
+    should be mode 0600 anyway.  Drop the patch to bosserver to allow more
+    restrictive permissions.  bosserver will complain about directory
+    permissions after upgrade until the directory is manually changed.
+  * Upstream now installs afszcm.cat and finds it in /usr/share/openafs/C,
+    so use the version installed via make install and install it in the
+    same location.
+  * Upstream builds specific files with -fno-strict-aliasing where needed,
+    so we no longer need to build the whole source with that flag.
+  * Upstream no longer includes files covered by the Apple Public Source
+    License, so we no longer have to repackage the upstream source to
+    remove those files.  Drop Debian patches to the build system that were
+    compensating for the removal of those files.
+  * Switch to generating upstream tarballs from the upstream Git tag
+    rather than from tarball releases.  There's no reason to include all
+    the generated files when we're going to regenerate them anyway, and
+    this saves effort combining the doc and src tarballs.
+
+ -- Russ Allbery <rra@debian.org>  Thu, 08 Apr 2010 13:20:50 -0700
+
+openafs (1.4.12+dfsg-3) unstable; urgency=low
+
+  * Apply upstream deltas:
+    - [135e196b] Create missing root directory when ORPH_ATTACH
+    - [190ef2cb] volmonitor keep vtrans lock
+    - [812dcc2c] Increase the maximum number of sysnames
+    - [a123d4ab] Print rxdebug statistics as unsigned values
+  * If the user configures openafs-client to use AFSDB records for VLDB
+    server location, don't prompt the user for VLDB servers for the local
+    cell even if they're not present in CellServDB and don't try to add an
+    entry for the local cell to CellServDB.  (Closes: #575299)
+
+ -- Russ Allbery <rra@debian.org>  Fri, 26 Mar 2010 16:05:30 -0700
+
+openafs (1.4.12+dfsg-2) unstable; urgency=low
+
+  * Apply upstream deltas:
+    - [4ca7b6fc] Remove lih_r
+    - [f3899ac3] Allow GetSomeSpace_r to select an optimal host
+    - [94a43966] h_TossStuff_r: check held-ness after lock
+    - [b78eeb0c] h_TossStuff_r: make sure host does not go away
+    - [0583af32] volmonitor copy link before calling free
+    - [eb799d07] Move non-executable stack assembly code to end of file
+  * Build with -fno-strict-aliasing.  The upstream development branch has
+    a better fix that selectively enables this for specific files with
+    known problems, but be conservative for the stable release.
+
+ -- Russ Allbery <rra@debian.org>  Mon, 22 Mar 2010 15:53:48 -0700
+
+openafs (1.4.12+dfsg-1) unstable; urgency=low
+
+  * New upstream release.
+    - Enable weak encryption types in aklog and klog.krb5.
+    - Build support for Linux 2.6.33.
+    - Improvements to host tracking safety in the file server.
+    - Fall back to current kernel credentials if we can't use stored ones.
+    - Fix truncation handling in some large file situations.
+    - Further fixes to mmap handling.
+    - Avoid double-free in some FetchData64 error situations.
+    - Stop warning about system call hooks when keyrings are in use.
+    - Flush vcaches when a mount fails to avoid inconsistent data.
+    - New dump tag and length standard for vos dump.
+    - Fix stack executability for programs containing assembly code.
+    - Various salvager robustness fixes.
+  * Use dh_dkms from the DKMS package to handle creation of the maintainer
+    scripts for openafs-modules-dkms rather than rolling our own.
+    (LP: #497149)
+  * Update init script to require $remote_fs be started first and stopped
+    after OpenAFS.  This won't be the case in the long run, but for now
+    some important boot-time options need /usr/bin/fs to set them.
+  * List $syslog in Should-Start for the openafs-client init script, since
+    otherwise if loading the module causes a kernel panic, it won't be
+    logged to disk.
+  * Update CellServDB to the 2010-02-28 version.
+  * Add README.source explaining maintenance procedures and a
+    debian/import-upstream script to do a Git-aware merge of a new
+    upstream release that will allow us to cherry-pick upstream patches
+    and do proper merges.
+  * Stop linking the openafs-fileserver doc directory to openafs-client so
+    that we can provide a separate NEWS.Debian.
+  * Update standards version to 3.8.4 (no changes required).
+
+ -- Russ Allbery <rra@debian.org>  Mon, 08 Mar 2010 16:32:49 -0800
+
+openafs (1.4.11+dfsg-6) unstable; urgency=low
+
+  * Apply upstream deltas:
+    - [c12ec354] Fix write_begin configure test for recent RHEL kernels
+    - [b7198421] Fix memory allocation warnings at shutdown
+    - [7183c113] Do not check *aoutSize in PGetPAG
+    - [c0323c49] cm: address race condition in afs_QueueVCB
+    - [ad6dabdc] Clean up console message
+    - [c9f7fe37] Make ktc_curpag also detect ONEGROUP PAG gids
+    - [2f87c43e] volser transaction object race conditions
+    - [2d6c0390] Add array bounds checking in h_Enumerate
+    - [70f6a328] Check for (hostFlags & HOSTDELETED) after h_Lock_r
+    - [c7a59397] Avoid IHandle leak when failing to attach volume
+  * Remove incorrect return call in shutdown_icl() introduced by b7198421.
+  * Do not attempt to build the kernel module with DKMS if the appropriate
+    Linux headers aren't installed.  Based on code from the common DKMS
+    postinst script (which we'll just use once it's reliably available).
+    Thanks, Anders Kaseorg.  (LP: #487535)
+  * Fix configure flags used for enabling or disabling LWP and kernel
+    debugging flags and always pass --disable-strip-binaries.
+  * Fix the openafs-dbg dependencies and package description to reflect
+    its inclusion of debugging symbols for all server binaries in
+    openafs-fileserver and openafs-dbserver, but not the legacy PAM
+    modules.
+  * In anticipation of a change in dpkg-source's defaults, force source
+    package format 1.0.  The package is maintained using Git and
+    generating a proper quilt series is complex and relatively pointless
+    work, so the additional complexity of the 3.0 format is currently not
+    that useful.
+  * Change section of openafs-modules-dkms to kernel to match override.
+
+ -- Russ Allbery <rra@debian.org>  Mon, 30 Nov 2009 16:54:08 -0800
+
+openafs (1.4.11+dfsg-5) unstable; urgency=low
+
+  * Apply upstream deltas:
+    - [7833e472] Make afsd.pod reflect reality
+    - [c9974c7a] Avoid prematurely destroying callback_rxcon
+    - [9b37972e] Linux: 2.6.32 - Adapt to writeback changes
+    - [abdf72bc] Linux: Avoid deadlock in readdir - release GLOCK for
+      filldir
+    - [bdb4f98a] Protect rx_call iovq from simultaneous attempts to empty
+      it
+    - [c08609ae] Avoid using released hosts
+    - [a410b7fd] Linux - Fix disk cache access for selinux/AppArmor
+      constrained processes (LP: #415766)
+    - [49094ccf] Add automatic sysname detection for ARM Linux
+    - [525b594a] Make ktc_curpag generally available (LP: #446521)
+  * In the postinst of openafs-modules-dkms, if the openafs module is
+    already added in DKMS, try to remove it first before adding it.  This
+    should more correctly handle the case of a user installing this
+    package without the correct kernel headers, having it fail in
+    postinst, and then installing the correct headers and having dpkg
+    attempt to configure the package again.  Thanks, Philipp Kaluza.
+    (Closes: #553542)
+
+ -- Russ Allbery <rra@debian.org>  Tue, 03 Nov 2009 20:57:21 -0800
+
+openafs (1.4.11+dfsg-4) unstable; urgency=low
+
+  * When changing the name of the source package built by
+    openafs-modules-source, we need to change the package name in the
+    changelog as well or dpkg-gencontrol explodes.  Thanks, Aaron M.
+    Ucko.  (Closes: #549140)
+
+ -- Russ Allbery <rra@debian.org>  Wed, 30 Sep 2009 18:04:44 -0700
+
+openafs (1.4.11+dfsg-3) unstable; urgency=low
+
+  * Apply upstream deltas:
+    - openafs-stable-1_4_x/fileserver-no-negative-fetchdata-20090926:
+      never return a negative data length from client reads past the end
+      of a file.
+    - openafs-stable-1_4_x/fileserver-gethost-r-cleanup-fixes-20090925:
+      fix memory leak and possible double-free in error handling cases in
+      fileserver.
+    - openafs-stable-1_4_x/fileserver-retry-registeraddrs-20090810: retry
+      VL_RegisterAddrs in the file server on failure.
+    - openafs-stable-1_4_x/kernel-init-vrequest-structure-20090914:
+      properly initialize vrequest structure in the kernel.
+  * Change the permissions of /var/lib/openafs/local to 0700 to match
+    upstream defaults.  This directory contains the fssync.sock file used
+    for coordination between the fileserver and the volserver, and
+    commands sent to that socket are not authenticated.  Linux protects
+    the socket from unprivileged writes by default, but other operating
+    systems do not.  Upstream therefore wants this directory to be 0700
+    and bosserver will complain by default if it's not.  Changing the
+    permissions let us drop a patch to bosserver.
+  * Fix the second module control file for the standards version, section,
+    and maintainer update.
+  * Change the source package name of the stripped package generated by
+    openafs-modules-source so that, should someone build a Debian source
+    package from it, it won't have the same name as the main openafs
+    source package.
+
+ -- Russ Allbery <rra@debian.org>  Tue, 29 Sep 2009 15:34:58 -0700
+
+openafs (1.4.11+dfsg-2) unstable; urgency=low
+
+  * Add armv5tel to debian/sysname, mapping it to arm_linux26.  Patch from
+    Daniel Bayer.  Also make the similar change for the module source
+    package.  (Closes: #542315)
+  * Also install restorevol in the openafs-client package.
+  * Swap maintainer and uploaders in the packaging files for the module
+    source package, matching the main package.
+  * Update standards version to 3.8.3.
+    - Change section of packages generated by openafs-modules-source to
+      kernel.
+    - Add Homepage to packages generated by openafs-modules-source.
+
+ -- Russ Allbery <rra@debian.org>  Fri, 21 Aug 2009 19:20:03 -0700
+
+openafs (1.4.11+dfsg-1) unstable; urgency=low
+
+  * New upstream release.
+
+ -- Russ Allbery <rra@debian.org>  Fri, 10 Jul 2009 13:57:55 -0700
+
+openafs (1.4.11~pre3+dfsg-1) unstable; urgency=low
+
+  * New upstream release candidate.
+    - Further fixes for rcu_read_lock dependencies in some kernels.
+    - Clean up return values of Linux vnode operations.
+    - Call inode's setattr operation correctly.
+  * Ignore failures to remove an existing DKMS tree in the prerm of the
+    openafs-modules-dkms package.  In the possible cases where the tree
+    may not be present to be removed, failing package removal doesn't
+    make sense.  (Further addresses LP #368471.)
+  * Don't install man pages for fs command variants that are only
+    available on Windows.
+  * Bring src/config/linux-version closer to upstream since upstream now
+    handles unversioned source directories.  There is one remaining change
+    required to search for UTS_RELEASE in the correct header path.
+  * Update CellServDB to 2009-06-29 version.
+  * Translation updates:
+    - Russian, thanks Yuri Kozlov.  (Closes: #534807)
+
+ -- Russ Allbery <rra@debian.org>  Sat, 04 Jul 2009 15:20:06 -0700
+
+openafs (1.4.11~pre1+dfsg1-1) unstable; urgency=low
+
+  * New upstream release candidate.
+    - New getpag pioctl to discover a PAG from userspace portably.
+    - Allow disabling of syscall probing in the kernel module.
+    - New -maxmtu override switch in afsd to accommodate some VPNs.
+    - pts client encryption support.
+    - Further fixes to address/UUID tracking in the file server.
+    - New DocBook-based manuals replacing the old HTML manuals.
+    - New Doxygen-based protocol reference replacing the old PDF files.
+    - Man pages for remaining AFS subcommands.
+  * Update standards version to 3.8.2 (no changes required).
+
+ -- Russ Allbery <rra@debian.org>  Wed, 17 Jun 2009 13:32:31 -0700
+
+openafs (1.4.10+dfsg1-2) unstable; urgency=low
+
+  * Apply upstream CVS deltas:
+    - STABLE14-dprintf-rename-20090427: rename AFS's dprintf to avoid
+      conflicts with one in the kernel.
+    - STABLE14-linux26-defer-cred-changing-20090511: defer changing groups
+      when the real and effective credentials of a process differ to avoid
+      running afoul of checks in newer Linux kernels that cause oops.
+      (Closes: #528785)
+    - STABLE14-linux-mmap-antirecursion-fix-20090512 and
+      STABLE14-linux-mmap-antirecursion-avoid-spurious-eio-20090526:
+      improvements in flag setting and locking around recursive mmap
+      protection.
+    - STABLE14-memcache-write-on-laststore-20090512: write back dirty
+      pages on last store with memcache to avoid losing changes.
+    - STABLE14-background-fsync-consistency-issues-20090522: file
+      descriptor handling fixes for the file server.
+    - STABLE14-man-page-vos-dump-flags-20090526: document the -clone and
+      -omitdirs flags to vos dump.  (Closes: #502571)
+  * Provide an openafs-modules-dkms package that uses DKMS to dynamically
+    build kernel modules for the local kernel and document this option in
+    README.modules.  This is an alternative to installing
+    openafs-modules-source and building kernel modules for each new kernel
+    with module-assistant or make-kpkg.  (Closes: #168852, #525131)
+    (LP: #52786, #368471, #369875)
+  * Have openafs-client recommend at least the current source version of
+    openafs-modules-source or openafs-modules-dkms instead of any old
+    version.  While the API probably hasn't changed, it's best practice to
+    keep a relatively close match between the userspace andn the kernel
+    module version.  (LP: #369875)
+  * Dynamically determine the Debian and upstream versions for dkms.conf
+    and get-orig-source from debian/changelog.  Thanks, Anders Kaseorg.
+    (LP: #364426)
+  * Build-depend on cpio (used for generating openafs-modules-source).
+
+ -- Russ Allbery <rra@debian.org>  Tue, 26 May 2009 21:18:54 -0700
+
+openafs (1.4.10+dfsg1-1) unstable; urgency=high
+
+  * New upstream release.
+    - OPENAFS-SA-2009-001: Avoid a potential kernel memory overrun if more
+      items than requested are returned from an InlineBulk or BulkStatus
+      message.  (CVE-2009-1251)
+    - OPENAFS-SA-2009-002: Avoid converting negative errors into invalid
+      kernel memory pointers.  (CVE-2009-1250)
+    - Preliminary support for 2.6.30 kernels.
+    - Dynamic vcache allocation support to deal with inotify vcache
+      pinning.
+    - Do appropriate locking for CellServDB in /proc.
+    - Use +dfsg instead of .dfsg for saner version sorting.
+  * Debian's 2.6.29 packages no longer include symlinks from the
+    architecture-specific header tree to the common header tree and
+    instead overlay both header trees using kbuild.  Change the Autoconf
+    probes to always use kbuild and generate stub headers in the paths
+    that OpenAFS expects that include the linux headers.  Patch from Aaron
+    M. Ucko.  (Closes: #521745)
+  * Build PIC versions of libafsauthent and libafsrpc and install them in
+    libopenafs-dev for use when AFS code should be embedded into shared
+    libraries.  Patch from Garrett Wollman.
+  * Update CellServDB to 2008-11-07 version.  (Closes: #522451)
+  * Update debian/watch for +dfsg naming instead of .dfsg.
+  * Update standards version to 3.8.1 (no changes required).
+  * Translation updates:
+    - Japanese, thanks Hideki Yamane.  (Closes: #521518)
+
+ -- Russ Allbery <rra@debian.org>  Mon, 06 Apr 2009 15:49:34 -0700
+
+openafs (1.4.8.dfsg1-3) unstable; urgency=low
+
+  * Apply upstream CVS deltas:
+    - STABLE14-cbr-free-what-you-alloc-20090325: dequeue items in the same
+      way they were allocated.
+    - STABLE14-shutdown-vcache-avoid-null-deref-20090324: avoid oops on
+      shutdown.  (LP: #333197)
+    - STABLE14-uphys-invalidate-returns-void-20081130: fix apparent Ubik
+      synchronization errors due to incorrect use of a void return value.
+  * Update package sections for the new archive organization.
+
+ -- Russ Allbery <rra@debian.org>  Fri, 27 Mar 2009 08:08:49 -0700
+
+openafs (1.4.8.dfsg1-2) unstable; urgency=low
+
+  * Make openafs-modules-source architecture-specific (arch: any instead
+    of arch: all).  The new method for generating the kernel source tree
+    only generates correct build machinery for the architecture on which
+    it was built, making the package architecture-specific.  The generated
+    tree is so much smaller that this still only uses about 1MB of archive
+    space more than the old method and makes each openafs-modules-source
+    package much smaller.  This is a workaround until we can fix
+    libafs_tree to include enough build machinery to handle all Linux
+    architectures from one source tree.  (Closes: #516023)
+  * Explicitly remove *-stamp files in the clean target of the module
+    build until the module build is upgraded to debhelper 7.
+
+ -- Russ Allbery <rra@debian.org>  Wed, 18 Feb 2009 13:48:17 -0800
+
+openafs (1.4.8.dfsg1-1) unstable; urgency=low
+
+  * New upstream release.  (Closes: #511535)
+    - Support 2.6.28 kernels.  (LP: #303112)
+    - Check at compile time that the kernel has keyring support rather
+      than building non-functional modules.  (Closes: #500850)
+    - Include vos clone man page.  (LP: #324449)
+  * Apply upstream CVS deltas:
+    - STABLE14-libuafs-updates-20081229: prerequisite for other deltas.
+    - STABLE14-linux-truncate-race-20090109: avoid race condition during
+      truncation.
+    - STABLE14-linux-i-size-20090112: further fix for truncation race.
+    - STABLE14-linux-truncate-cleanup-20090113: further truncation fix.
+    - STABLE14-osi-probe-check-result-cope-with-enoent-20090115: fix for
+      syscall probing.
+    - STABLE14-linux-2629-20090115: support for 2.6.29 kernels.
+      (Closes: #513680)
+    - STABLE14-rx-idledead-only-ignore-keepalives-20081222: rx bug fix to
+      not ignore other ping packets.
+    - STABLE14-rx-rdwr-writeproc-race-20081228: fix rx race condition that
+      could result in reuse of freed memory.
+    - STABLE14-rx-do-not-race-current-packet-20090105: fix rx race
+      condition.
+  * Use make libafs_tree to generate the tree for the kernel module
+    compile rather than copying the entire source tree.
+  * Compress the source in openafs-modules-source with bzip2 instead of
+    gzip to reduce the package size.
+  * Make dynroot the default for new installations.  It works much better
+    with systems that don't bring up their network until late in the boot
+    process, such as wireless laptops.  (LP: #249240, #318605)
+  * Mention libpam-afs-session instead of libpam-openafs-session in the
+    description of libpam-openafs-kaserver, and mention libpam-krb5 by
+    name.  Thanks, Philipp Kaluza.  (Closes: #501308)
+  * Suggest module-assistant auto-install in README.modules and be clearer
+    that building one's own kernel is not required.  Thanks, Anders
+    Kaseorg and Lutz Goehring for suggestions.  (LP: #295897)
+  * Allow time-daemon to satisfy the openafs-fileserver recommends in
+    addition to ntp, allowing for openntpd.  (Closes: #508258)
+  * General improvements to debconf configuration handling.
+    - Do not abort the config script if we have no default realm and
+      dnsdomainname fails.  (LP: #274886, #318132)
+    - Do not abort postinst if we can't resolve any host name for the
+      cell.  Just continue in that case, omitting any configuration for
+      the local cell.  (LP: #322054)
+    - Correctly set the default for AFS_CRYPT from the existing config.
+    - The cache size is high, not critical, since we have a default.
+    - Don't create the client ThisCell if no local cell was specified.
+    - Improve the leading comment in afs.conf.client.  Users can edit it,
+      but any changes other than the setting values will be lost.
+    - Remove the openafs-fileserver/bosconfig_moved template, which would
+      only be shown on upgrades from pre-1.2.0 versions.
+    - Standardize coding style and always quote strings.
+  * Update to debhelper compatibility level V7.
+    - Use dh where possible in debian/rules.
+    - Use dh_lintian to install Lintian overrides.
+    - Eliminate the configure target and do all the work in build.
+    - Do more in the install target and less in binary, matching the
+      default command stacks in dh.
+    - Use a debian/clean configuration file to let dh clean do more of the
+      work rather than using rm commands in debian/rules.
+  * Abort the config script rather than exiting successfully if the
+    debconf shell module is not available.  The config script should never
+    be run in the absence of debconf, so if this fails, something deeper
+    is wrong and we shouldn't blindly continue.
+  * Add ${misc:Depends} to all dependencies.
+  * Add explanations for the Lintian overrides.
+  * Use set -e instead of #!/bin/sh -e in maintainer scripts.
+  * Remove server documentation from openafs-modules-source.
+  * Translation updates:
+    - Spanish, thanks Francisco Javier Cuadrado.  (Closes: #514452)
+
+ -- Russ Allbery <rra@debian.org>  Mon, 06 Oct 2008 11:10:14 -0700
+
+openafs (1.4.7.dfsg1-6) unstable; urgency=low
+
+  * Apply upstream patch to free /proc entries in the correct order.
+    Thanks, Marc Dionne.  (Closes: #493914)
+  * Apply upstream deltas to support 2.6.27 kernels and to stop using
+    COMMON_KERN_CFLAGS for all 2.6 kernels uniformly, which fixes
+    problems on amd64 with newer kernels.  Thanks, Björn Torkelsson.
+    (LP: #267504)
+  * Translation updates:
+    - Swedish, thanks Martin Bagge.  (Closes: #493120)
+
+ -- Russ Allbery <rra@debian.org>  Mon, 22 Sep 2008 19:07:02 -0700
+
+openafs (1.4.7.dfsg1-5) unstable; urgency=low
+
+  * Drop support for hppa.  We only have a param file for a 2.4 kernel,
+    we were building with UCONTEXT which is stubbed out in glibc for hppa,
+    and builds without UCONTEXT fail.  The binaries we were building
+    before didn't work and no one reported a bug, indicating no one was
+    attempting to use OpenAFS on hppa.
+  * When building the kernel module, use the setting of the ARCH
+    environment or make variable, if present, in preference to uname -m to
+    allow cross-compiles.  Thanks, Jose Calhariz.  (Closes: #492232)
+  * Add Jason Edgecomb's copyright and license for man pages to
+    debian/copyright.
+
+ -- Russ Allbery <rra@debian.org>  Thu, 24 Jul 2008 10:14:42 -0700
+
+openafs (1.4.7.dfsg1-4) unstable; urgency=low
+
+  * Undo the move of up.pod to afs-up.pod in debian/rules clean rather
+    than just deleting the file and causing the second build to fail.
+    Thanks, Dominic Hargreaves.  (Closes: #490752)
+  * Don't use UCONTEXT on hppa; its glibc doesn't provide those
+    functions.  It's possible that OpenAFS isn't working properly on hppa
+    these days, but as yet there have been no reports.
+  * Suggest openafs-krb5 in openafs-client and mention it in the long
+    description.
+
+ -- Russ Allbery <rra@debian.org>  Sun, 13 Jul 2008 19:03:58 -0700
+
+openafs (1.4.7.dfsg1-3) unstable; urgency=low
+
+  * Apply upstream delta for Linux 2.6.26 support.
+  * Enable support for arm and armel, added upstream in 1.4.7.
+  * Enable support for lpia by making it synonymous with i386.  This means
+    that lpia systems will get a sysname of i386_linux26, which isn't
+    ideal but should at least work.
+  * When clearing the restart time while installing a new cell, pass
+    -localauth to avoid an authentication failure.  Thanks, Davor Ocelic.
+    (Closes: #488152)
+  * If the openafs module isn't listed in modules.dep, exit with a zero
+    status from the init script even if modprobe fails.  Otherwise, if a
+    module package and openafs-client are installed at the same time and
+    openafs-client is set up before the module package, the init script
+    can find the module, fail the modprobe (because the dependency map
+    hasn't yet been updated), and fail the whole installation.  Exiting
+    with a zero status still doesn't get OpenAFS started, but at least it
+    doesn't leave the system in a partly installed state.  Thanks to Durk
+    Strooisma for the analysis.  (Closes: #486816)
+  * Don't include debug symbols for /sbin, /usr/bin, and /usr/sbin
+    binaries or PAM modules in openafs-dbg, just the servers in
+    /usr/lib/openafs, since those are the most likely cases where
+    backtraces are important and a 10MB debug symbol package seems like
+    overkill.
+  * Stop using quilt to manage patches and pre-apply them to the source
+    package now that the package is maintained with Git.
+  * Add Vcs-Git and Vcs-Browser control fields.
+  * Reflect current responsibilities more accurately by listing myself as
+    maintainer and Sam as uploader.
+  * Update standards version to 3.8.0 (no changes required).
+  * Drop unused postinst-uses-db-input override; Lintian has been fixed.
+  * Translation updates:
+    - Galician, thanks Jacobo Tarrio.  (Closes: #481675)
+
+ -- Russ Allbery <rra@debian.org>  Sat, 28 Jun 2008 12:35:43 -0700
+
+openafs (1.4.7.dfsg1-2) unstable; urgency=high
+
+  * Bumping urgency for the conflict fix, which fixes a latent RC bug, and
+    for the news entry for openafs-dbserver.
+  * Add a missing conflict on older versions of openafs-client to
+    openafs-krb5 to ensure that the klog transition to alternatives is
+    smooth.
+  * When configuring a new cell, clear the general restart time.
+  * Add a NEWS file for openafs-dbserver warning of the serious Ubik bug
+    fixed in the previous release and suggesting restarting database
+    servers one at a time.
+  * Update to 2008-04-23 CellServDB.
+
+ -- Russ Allbery <rra@debian.org>  Fri, 09 May 2008 10:45:06 -0700
+
+openafs (1.4.7.dfsg1-1) unstable; urgency=low
+
+  * New upstream release.
+    - Work around GPLing of RCU locks.  (Closes: #476628)
+  * Include a Kerberos v5 klog, klog.krb5, in openafs-krb5.
+  * klog is now managed via alternatives.  openafs-client provides
+    klog.afs and openafs-krb5 provides klog.krb5.  If both packages are
+    installed, klog.krb5 is the default.
+  * Don't remove and reinstall the pagsh alternative on every upgrade.
+  * Add many new upstream man pages for fs, vos, and pts sub-commands and
+    the CellAlias config file.
+  * Add read_tape to openafs-dbserver.
+  * Add bos_util and a UserList man page to openafs-fileserver.
+  * Run dh_install with --fail-missing to catch new upstream additions.
+
+ -- Russ Allbery <rra@debian.org>  Thu, 01 May 2008 08:13:56 -0700
+
+openafs (1.4.7~pre3.dfsg1-1) unstable; urgency=low
+
+  * New upstream release candidate:
+    - Better support for 2.6.25 kernels.
+    - Fixes for flushing in the cache manager.
+
+ -- Russ Allbery <rra@debian.org>  Thu, 10 Apr 2008 20:54:36 -0700
+
+openafs (1.4.7~pre1.dfsg1-1) unstable; urgency=low
+
+  * New upstream release candidate:
+    - Initial support for 2.6.25 kernels.
+    - Better 2.6.24 kernel support.  (Closes: #463962)
+    - Better cleanup on module unload.  (Closes: #417917)
+    - Potential deadlock fixed in the fileserver.
+    - Better fileserver host tracking.
+    - Ubik fixes preventing database truncation on unreliable links.
+  * Add upstream delta to fix oops on startup with pre-2.6.25 kernels.
+  * Install the up man page as afs-up, matching our renaming, and update
+    its text accordingly.  (Closes: #459635)
+  * Move openafs-client later in the shutdown sequence on new
+    installations so that it stops after autofs and add an X-Stop-After
+    LSB header to achieve the same more reliably with dependency-based
+    boots.  (Closes: #472545)
+  * Update doc-base control file sections for the new categorization.
+  * debian/rules and debian/module/rules improvements:
+    - Remove all modified generated files on debian/rules clean.
+    - Depend on $(QUILT_STAMPFN) instead of patch.
+    - Use touch $@ to create stamp files.
+    - Use a stamp file for the module's install target.
+  * Uncomment and fix the watch rules for pre-releases and always scan for
+    both regular releases and prereleases.
+
+ -- Russ Allbery <rra@debian.org>  Wed, 26 Mar 2008 19:21:24 -0700
+
+openafs (1.4.6.dfsg1-3) unstable; urgency=low
+
+  * Fix FTBFS caused by a change in dh_strip behavior.  It no longer
+    creates empty files for already stripped binaries, so we should no
+    longer remove them.  Thanks, Lucas Nussbaum.  (Closes: #464274)
+  * Include debugging symbols for libpam-openafs-kaserver in openafs-dbg.
+  * Do not stop daemons in run-level S.  This isn't a real run-level and
+    hence there's no reason to create the links.
+
+ -- Russ Allbery <rra@debian.org>  Wed, 06 Feb 2008 11:24:19 -0800
+
+openafs (1.4.6.dfsg1-2) unstable; urgency=low
+
+  * Apply additional upstream patches to the 2.6.24 support to fix
+    builds with older kernels.  Thanks to Felix Koop for the testing.
+    (Closes: #458331)
+  * Remove old /etc/openafs/server-local files from older versions when
+    purging openafs-fileserver.
+  * Minor reformatting of openafs-client's postrm.
+  * Remove databases on purge of openafs-dbserver.
+  * Remove log files when purging openafs-fileserver or openafs-dbserver
+    per Policy 10.8.
+
+ -- Russ Allbery <rra@debian.org>  Sun, 30 Dec 2007 15:08:04 -0800
+
+openafs (1.4.6.dfsg1-1) unstable; urgency=low
+
+  * New upstream release.
+    - Fixes multiple serious problems with the file server.
+  * Apply upstream patch for Linux 2.6.24 support.  Thanks to Anders
+    Kaseorg for researching the necessary deltas.  (Closes: #456258)
+  * Apply upstream patch to allocate vnodes from the malloc pool rather
+    than off the stack, fixing file server problems on SPARC.  Thanks to
+    Barney Sowood for tracking down the patch.  (Closes: #448380)
+  * Apply upstream patch from the 1.5 series to allow multiple realms to
+    be listed in the server krb.conf and hence treated as local.
+  * Build bosserver with --enable-bos-new-config.  On startup, if
+    BosConfig.new exists, it will be renamed to BosConfig before the
+    configuration is read.  (Closes: #453398)
+  * Add a comment to /etc/openafs/afs.conf.client that the file is managed
+    by debconf.  (Closes: #447183)
+  * Add more debugging and bug reporting instructions to README.Debian.
+  * Mention in README.Debian that the server is built with supergroups
+    enabled and with the multiple local realm patch.  (Closes: #453399)
+  * Support reconfigure in postinst.
+  * Recode debian/copyright to UTF-8.
+  * Update to standards version 3.7.3 (no changes required).
+
+ -- Russ Allbery <rra@debian.org>  Mon, 17 Dec 2007 20:19:13 -0800
+
+openafs (1.4.5.dfsg1-1) unstable; urgency=low
+
+  * New upstream release.
+    - Even with a new enough Linux kernel to support keyrings, we still
+      may have found the system call table and need to clean it up when
+      unloading the module.  (Closes: #448793)
+  * Use uname -m rather than dpkg --print-architecture to determine the
+    sysname for kernel module builds.  Otherwise, builds with a different
+    kernel architecture than userspace (amd64 kernels with i386 userspace,
+    for example) don't work.  Thanks, Anders Kaseorg.  (Closes: #448452)
+  * Fix signing the generated the changes file on a kernel module build.
+    The module build file reorganization required an additional change to
+    genchanges.  Thanks, Anders Kaseorg.  (Closes: #448449)
+  * Expose prototypes for the ktc_* functions.  (Closes: #449432)
+  * Fix man pages for subcommands to use an underscore in the NAME section
+    instead of a space so that they'll be indexed properly by the current
+    groff and man-db.
+  * Update CellServDB to 2007-10-25 GCO release.
+  * Add Homepage to the package control fields.
+
+ -- Russ Allbery <rra@debian.org>  Sun, 11 Nov 2007 15:54:59 -0800
+
+openafs (1.4.5~pre2.dfsg1-1) unstable; urgency=low
+
+  * New upstream release candidate.
+    - Fix errors when compiled with gcc 4.2.  (Closes: #443937)
+    - Add a frightening hack to work around the lack of getcontext and
+      savecontext for 32-bit SPARc.  (Closes: #415952, #446837)
+    - Add support for Linux 2.6.23.
+    - Multiple bug fixes for client tracking in the file server.
+    - Prevent one client from consuming all file server threads.
+  * Remove the workaround added for 2.6.20 and 2.6.21 kernels with
+    CONFIG_PARAVIRT enabled.  The mistaken GPL-labelling of core
+    interfaces was fixed in 2.6.22, which has now migrated to testing.
+  * Scan /var/log/openafs for core files with a PID appended when a server
+    run by bosserver exits with a signal.  bosserver was unable to
+    correctly handle core files for multithreaded servers since it
+    expected a filename of core and Linux always appends a PID to core
+    dumps by multithreaded processes.
+  * Fix make kdist in openafs-modules-source, inadvertently broken by a
+    missing genchanges script.
+  * Stop creating /var/lib/openafs/cores.  Nothing actually uses it.
+
+ -- Russ Allbery <rra@debian.org>  Tue, 16 Oct 2007 17:01:33 -0700
+
+openafs (1.4.4.dfsg1-7) unstable; urgency=low
+
+  * Switch to quilt for managing patches to the upstream source.
+  * Stop installing the Administrator's Reference.  All of the useful
+    information in here has been converted to man pages.
+  * Use the upstream man page for pt_util, which lets us remove the
+    docbook-to-man build dependency.
+  * Update to the latest CellServDB from grand.central.org.
+  * Trim additional unuseful debug information from openafs-dbg.
+  * Restructure the source for the module package.  The build files for
+    the module build are now in debian/module in the source package and
+    there is a completely separate rules file.  This way, the module build
+    rules don't have to depend on quilt and the structure is clearer.
+  * Fix debhelper dependencies for the module build.
+  * Update module standards version to 3.7.2 (no changes required).
+
+ -- Russ Allbery <rra@debian.org>  Mon, 20 Aug 2007 17:54:00 -0700
+
+openafs (1.4.4.dfsg1-6) unstable; urgency=low
+
+  * Apply upstream patch for the OpenAFS file server to treat clients that
+    have an all-zero UUID as if they don't have UUID support, working
+    around bugs in various client versions that can cause multiple hosts
+    to use all-zero UUIDs and conflict with each other.
+  * Use dpkg --print-architecture to determine the AFS sysname for both
+    regular builds (avoiding --print-installation-architecture, which is
+    deprecated) and kernel builds (avoiding arch, which is temporarily not
+    in unstable and which wouldn't do the right thing for cross-compiles).
+    Thanks, Chris Hanson.  (Closes: #435765)
+  * Add hppa as a recognized architecture for kernel module builds,
+    although OpenAFS currently only supports 2.4 kernels on HPPA so this
+    isn't that useful.
+
+ -- Russ Allbery <rra@debian.org>  Thu, 02 Aug 2007 19:54:00 -0700
+
+openafs (1.4.4.dfsg1-5) unstable; urgency=low
+
+  * Apply upstream patch from Jeffrey Hutzelman to fix syscall probing on
+    AMD64 with Linux 2.6.22 kernels.  (Closes: #430179)
+  * Add a union to des_ks_struct and reorder includes to get the correct
+    alignment for DES code on SPARC.  Thanks, Chaskiel Grundman.  Partly
+    addresses #415952.
+  * Fix a typo in debian/kern-sysname that caused openafs-modules-source
+    to still assume all ia64 systems used Linux 2.4.  Thanks, Jakob
+    Haufe.  (Closes: #432344)
+  * Use LSB logging functions for openafs-fileserver and support passing
+    arguments to bosserver in /etc/default/openafs-fileserver by setting
+    DAEMON_ARGS.
+  * Clean up more completely after a purge of openafs-fileserver.  Remove
+    the files created by the server in /var/lib/openafs/local, remove
+    KeyFile and CellServDB.old from /etc/openafs/server, and remove
+    BosConfig from /etc/openafs.
+
+ -- Russ Allbery <rra@debian.org>  Tue, 17 Jul 2007 09:25:03 -0700
+
+openafs (1.4.4.dfsg1-4) unstable; urgency=low
+
+  * Apply upstream patch from Jeffrey Hutzelman to fix kernel module
+    builds on ppc64.  (Closes: #427555)
+  * Apply upstream patches for Linux 2.6.22 support.  (Closes: #428401)
+  * Apply upstream patch to fix the AFS /proc structure under Linux
+    2.6.22.1 and later.
+  * Move /etc/openafs/server-local to /var/lib/openafs/local.  Most of the
+    files here are automatically generated and hence not configuration
+    files, and the file server has to write to this directory to start (so
+    having it in /etc breaks read-only / file systems).  Thanks, Alexei
+    Sheplyakov.  (Closes: #405697)
+  * Move upserver and upclient to /usr/lib/openafs (from /usr/sbin) to
+    match upstream's layout and for consistency with the other servers run
+    via bosserver.
+  * Use --name instead of --exec in the openafs-fileserver init script and
+    drop the --pidfile option (bosserver doesn't create a PID file) so
+    that we don't start a second bosserver on upgrades.
+  * Go back to using krb5-config.  The dependency problem has now been
+    fixed on all platforms in the krb5 package and this is the preferred
+    upstream method.
+
+ -- Russ Allbery <rra@debian.org>  Thu, 21 Jun 2007 03:02:32 -0700
+
+openafs (1.4.4.dfsg1-3) unstable; urgency=low
+
+  * Always generate a UUID on client startup even if for some reason we
+    don't think we have any network interfaces.  Otherwise, the client
+    will use an all-zeroes UUID, which will collide with every other
+    client with the same problem.
+  * When afsd is started with -rmtsys, it starts another process that afsd
+    -shutdown doesn't kill.  Update the init script to kill this process
+    on stop.  (Closes: #405982)
+  * Don't use krb5-config to get a library list.  It runs the risk of
+    encoding unnecessary library dependencies.  Instead, hard-code the
+    flags and libraries we actually need.  (Closes: #424448)
+  * When loading a module using the upstream naming convention, don't
+    append the .mp to the module name for modprobe.  (Closes: #420597)
+
+ -- Russ Allbery <rra@debian.org>  Wed, 16 May 2007 18:16:12 -0700
+
+openafs (1.4.4.dfsg1-2) unstable; urgency=low
+
+  * Debian kernels as of 2.6.20 enable CONFIG_PARAVIRT, which redefines
+    several core kernel calls as redirects through a paravirt.ops table
+    that's marked GPL-only.  This breaks all non-GPL modules that used
+    those (previously generally exported) calls even indirectly.  Apply a
+    hack to switch from spin_lock_irq to spin_lock_irqsave to avoid the
+    paravirt redirection so that the module will build.
+  * Enable ucontext for all Linux builds with glibc 2.4 or later, not just
+    with i386 and amd64, and (following an upstream patch) always use
+    ucontext on ia64.  Newer versions of glibc change internal structures
+    in ways that cause the old LWP code to have stack overflows.
+    (Closes: #419903)
+  * Apply upstream patch to crashes on contention in afs_xuser when a
+    process in a PAG exits.  Thanks, Chaskiel Grundman.
+  * When determining the AFS sysname for kernel module builds, add
+    explicit cases for 2.6 kernels for all architectures that support them
+    (everything except non-64-bit sparc_linux).  Fixes build problems with
+    ia64 and probably other architectures.  Thanks to Ippokratis Pandis
+    for the debugging help.  (Closes: #411818)
+  * Prefer alpha_linux_26 to alpha_linux_24 for the non-kernel build on
+    Alpha, now that the source supports it.
+  * Add support for the s390x architecture.  Upstream supports it and
+    there's no reason not to.
+  * Fix the watch file to remove .dfsg\d+ when comparing versions.
+
+ -- Russ Allbery <rra@debian.org>  Thu, 19 Apr 2007 13:26:33 -0700
+
+openafs (1.4.4.dfsg1-1) unstable; urgency=low
+
+  * Repackage upstream source to remove two additional files covered under
+    the APSL.  (Closes: #416685)
+  * Build-depend on Automake since we run aclocal during the build.  Not
+    having aclocal caused local patches to osconf.m4 to not be effective,
+    leading to the wrong compiler flags for shared libraries.  Thanks to
+    Frank Lichtenheld for the report.  (Closes: #416398, #416497, #418966)
+
+ -- Russ Allbery <rra@debian.org>  Thu, 12 Apr 2007 21:19:00 -0700
+
+openafs (1.4.4-1) experimental; urgency=low
+
+  * New upstream release.  (Closes: #415699)
+    - Support newer Linux kernels.  (Closes: #409797, #410120)
+    - Add aklog fallbacks for null realms to support the referral
+      capability in MIT Kerberos 1.6 and later.  (Closes: #410314)
+  * Apply patch from Thomas Sesselmann to support setting options to pass
+    to bosserver in /etc/default/openafs-fileserver.  (Closes: #409357)
+  * Remove the rx_Init calls in the PAM module.  The internal counters
+    that had to be initialized that way have been removed.
+  * Now that we're running regen.sh as part of the build process, only
+    patch the Autoconf source files and not the generated output to make
+    the diff easier to audit.
+
+ -- Russ Allbery <rra@debian.org>  Mon, 26 Mar 2007 18:56:55 -0700
+
+openafs (1.4.2-6) unstable; urgency=medium
+
+  * SECURITY: Apply upstream patch to disable setuid status on all cells
+    by default.  Prior versions of AFS defaulted to honoring setuid bits
+    in the local cell, but since unauthenticated file access in AFS is
+    unencrypted, an attacker could forge packets from an AFS file server
+    to synthesize a setuid binary in AFS.
+  * Apply upstream fix to use a single high-numbered group for the PAG on
+    2.6 kernels and sort the group properly.  Fixes AFS-caused group
+    ordering problems that could lead the kernel to ignore some group
+    membership for users.  (Closes: #414911)
+  * Apply upstream fix for segfaults in pts rename.  (Closes: #409184)
+  * Apply upstream fix to show reasonable free space numbers for AFS in
+    df.  Without this fix, some programs which use df to check free space
+    may think that directories in AFS are full and prevent the user from
+    attempting to write files.  (Closes: #415294)
+  * Translation updates:
+    - Dutch, thanks cobaco.  (Closes: #413701)
+    - Portuguese, thanks Miguel Figueiredo.  (Closes: #414800)
+
+ -- Russ Allbery <rra@debian.org>  Wed, 14 Mar 2007 18:37:12 -0700
+
+openafs (1.4.2-5) unstable; urgency=low
+
+  * Translation updates:
+    - Chinese, thanks Chun Tian (binghe).  (Closes: #406063)
+
+ -- Russ Allbery <rra@debian.org>  Sun, 28 Jan 2007 13:43:16 -0800
+
+openafs (1.4.2-4) unstable; urgency=low
+
+  * Update documentation to note that enabling v4 support or running
+    krb524d is no longer required for aklog to work.
+  * Translation updates:
+    - German, thanks Henrik Kroeger.  (Closes: #400800)
+
+ -- Russ Allbery <rra@debian.org>  Sun, 17 Dec 2006 17:09:41 -0800
+
+openafs (1.4.2-3) unstable; urgency=low
+
+  * No longer pass explicit cache tuning options to afsd and instead let
+    OpenAFS automatically choose tuning based on the cache size.
+  * Accept trailing whitespace in ThisCell.
+  * Fix path canonicalization on the server, enabling bos getlog with a
+    simple log name to work properly against a Debian bosserver.
+  * Change the documentation of afsd -shutdown to be less dire and more
+    accurate.  Thanks, Daniel J. Priem.  (Closes: #394990)
+  * Document (at least partially) AFS's mapping of Kerberos v5 principal
+    names to Kerberos v4 format in the aklog man page.  Thanks, Daniel
+    J. Priem.  (Closes: #394832)
+  * Document that aklog -setpag may not always work.
+
+ -- Russ Allbery <rra@debian.org>  Mon, 20 Nov 2006 17:29:46 -0800
+
+openafs (1.4.2-2) unstable; urgency=low
+
+  * Upstream fix to prevent butc segfaulting.
+
+ -- Sam Hartman <hartmans@debian.org>  Sat, 21 Oct 2006 20:57:09 -0400
+
+openafs (1.4.2-1) unstable; urgency=medium
+
+  * New upstream release, fixes amd64 kernel issues
+  * Update CellServDB
+
+ -- Sam Hartman <hartmans@debian.org>  Fri, 20 Oct 2006 06:44:45 -0400
+
+openafs (1.4.2~fc4-3) unstable; urgency=low
+
+  * Apply patch from Chaskiel Grundman to fix kernel panics when loading
+    the kernel module into AMD64 2.6.18 kernels.  (Closes: #390653)
+  * Apply upstream patch to fix klog segfaults.  (Closes: #390940)
+  * The UTS_RELEASE string is no longer found in linux/version.h in
+    2.6.18, so fall back on looking in config/kernel.release.  Thanks to
+    Marcus Watts for the patch.
+
+ -- Russ Allbery <rra@debian.org>  Thu,  5 Oct 2006 13:02:50 -0700
+
+openafs (1.4.2~fc4-2) unstable; urgency=low
+
+  * Apply additional upstream patch for AMD64 2.6.18 kernel module build
+    issues.  (Closes: #389729)
+
+ -- Russ Allbery <rra@debian.org>  Sat, 30 Sep 2006 00:34:33 -0700
+
+openafs (1.4.2~fc4-1) unstable; urgency=low
+
+  * New upstream release candidate.
+    - Builds with 2.6.18 on AMD64.  (Closes: #389729)
+  * Build an openafs-dbg package with debugging information for the
+    OpenAFS fileserver and volserver.
+  * Add LSB comments to the openafs-client and openafs-fileserver init
+    scripts.
+  * Update to debhelper compatibility level V5.
+
+ -- Russ Allbery <rra@debian.org>  Wed, 27 Sep 2006 11:06:48 -0700
+
+openafs (1.4.2~fc2-1) unstable; urgency=low
+
+  * New upstream release candidate.
+    - Supports new Linux kernel versions.  (Closes: #383028)
+  * Translation updates:
+    - German, thanks Henrik Kroeger.  (Closes: #384803)
+
+ -- Russ Allbery <rra@debian.org>  Sun,  3 Sep 2006 12:42:59 -0700
+
+openafs (1.4.1-4) unstable; urgency=low
+
+  * Apply upstream fix from Derek Atkins for compilation with kernel
+    versions prior to 2.6.10.  (Closes: #376576)
+
+ -- Russ Allbery <rra@debian.org>  Sun,  9 Jul 2006 12:35:44 -0700
+
+openafs (1.4.1-3) unstable; urgency=low
+
+  * Include all of AFS's local XDR implementation in the build for
+    shlibafsrpc, fixing problems with undefined symbols in the PAM module
+    on AMD64.
+  * When creating a new file server in afs-newcell, use a set of tuning
+    flags from Harald Barth rather than relying on the defaults.  This
+    doesn't help with general bos create; long term, the defaults need to
+    be fixed.  (Closes: #364100)
+  * Add a note in README.servers about fileserver tuning options.
+  * Update debconf templates to follow the best practice recommendations
+    from the Developer's Reference.
+  * Regenerate the man pages on build since the pre-generated ones were
+    done with a very old version of pod2man.
+  * Update standards version to 3.7.2 (no changes required).
+  * Use a better method of optionally running make distclean.
+  * Add build-arch and build-indep targets, just in case.
+  * Translation updates:
+    - Czech, thanks Martin Šín.
+    - Portuguese (Brazil), thanks André Luís Lopes.
+    - French, thanks Christian Perrier.
+    - Vietnamese, thanks Clytie Siddall.
+
+ -- Russ Allbery <rra@debian.org>  Sun, 18 Jun 2006 11:22:11 -0700
+
+openafs (1.4.1-2) unstable; urgency=low
+
+  * Exit successfully in the openafs-client init script if no module is
+    installed, since otherwise openafs-client will fail to install until
+    one builds a module.  This restores previous accidental behavior due
+    to a bug in debhelper.  (Closes: #362695)
+  * libopenafs-dev must conflict with liblwp-dev since they both provide
+    liblwp.a.  Thanks, Justin Pryzby.  (Closes: #362842)
+  * openafs-client recommends lsof, since the init script uses it for
+    cleaner shutdown.
+
+ -- Russ Allbery <rra@debian.org>  Sat, 15 Apr 2006 15:47:04 -0700
+
+openafs (1.4.1-1) unstable; urgency=low
+
+  * New upstream release.
+    - Supports Linux 2.6.16.  (Closes: #358203)
+    - Suspend should work with newer kernels.  (Closes: #341588)
+    - Safer cache size calculation.  (Closes: #360176)
+    - Upstream now includes man pages, so remove our backport.
+  * Subsume openafs-krb5 into this source package.
+    - Acknowledge NMU.  (Closes: #304933)
+    - Update to the OpenAFS aklog and asetkey.  (Closes: #196094)
+    - Backport asetkey from upstream CVS.
+    - Include ka-forwarder from the old migration toolkit.
+    - Add man pages for asetkey and ka-forwarder.
+  * Subsume openafs-doc into this source package.
+  * Since 2.6 is the supported kernel for etch, build the userspace with
+    a sysname of *_linux26 where supported.  This only affects the sys
+    command.  (Using livesys instead is better.)  (Closes: #358118)
+  * Always pass the system type into Autoconf, following autotools-dev
+    best practices.
+  * Add an explicit copyright statement to debian/copyright.
+
+ -- Russ Allbery <rra@debian.org>  Fri, 14 Apr 2006 15:04:45 -0700
+
+openafs (1.4.0-4) unstable; urgency=low
+
+  * Hopefully fix sparc64 kernel support.  Thanks, Troy Benjegerdes.
+    (Closes: #219429)
+  * Document the need to restart ptserver and vlserver on the existing
+    database servers when adding a new one.  Thanks, Niklas Edmundsson.
+    (Closes: #349659)
+  * Include xstat_cm_test and xstat_fs_test in openafs-client, as they're
+    quite useful for debugging.
+
+ -- Russ Allbery <rra@debian.org>  Tue, 14 Mar 2006 21:07:07 -0800
+
+openafs (1.4.0-3) unstable; urgency=low
+
+  * Apply upstream patch from Chas Williams to be more careful about what
+    dentry is used in renames, avoiding a kernel fault when renaming
+    dentries accessed through multiple paths (such as RO and RW).
+  * Apply patch to allow the module to build with the Ubuntu kernel.
+    Thanks, Björn Torkelsson.  (Closes: #342607)
+  * Stop unconditionally forcing the compiler to cc or gcc in configure,
+    allowing, among other things, building the kernel module with a
+    compiler other than the default system compiler.  (Closes: #338306)
+  * Call kernel-version correctly from prep-modules, which fixes build
+    issues with manually-built kernels.  (Closes: #344851)
+  * Backport man pages from upstream CVS.  (Closes: #79763)
+  * Include afsmonitor and livesys in openafs-client.
+  * Include volinfo in openafs-fileserver.
+  * Document FAM's lack of support for AFS's security model and recommend
+    gamin instead.  (Closes: #343246)
+  * Add a hint to README.Debian on what to do about the cache partition if
+    running ReiserFS or XFS without a spare partition.
+  * Use make install into debian/tmp rather than make dest.  make dest is
+    mostly for Transarc compatibility and make install looks more like a
+    typical package and makes it easier to evaluate differences in FHS
+    location between upstream and Debian.  As a side effect, there's no
+    need to mess with the @sys link.  (Closes: #165909)
+  * Install more files with dh_install rather than install commands in
+    debian/rules so that *.install shows a more complete picture of what
+    goes into each package.
+  * Don't ignore make distclean errors.
+
+ -- Russ Allbery <rra@debian.org>  Tue, 27 Dec 2005 15:34:16 -0800
+
+openafs (1.4.0-2) unstable; urgency=low
+
+  * Install more of the standard OpenAFS utilities.  (Closes: #138851)
+    - openafs-dbserver: Install prdb_check and vldb_check.
+    - openafs-fileserver: Install voldump.
+    - openafs-client: Install fstrace, scout, and up (as afs-up).
+    - Modify fstrace to load its catalog from /usr/share/openafs.
+  * Do not install kpwvalid.  The default version does little useful and
+    the kpwvalid binary must be in AFS for it to take effect.
+  * Overhaul the way kernel modules are built.
+    - Recommend linux-image rather than kernel-image for newer kernels.
+    - Always recommend the kernel package; since it's only a recommends,
+      there's no need to special-case the hand-built kernel case.
+    - Be less fragile about how the kernel version is used in prep-modules
+      to support other ways kernel modules are built.  (Closes: #341836)
+    - Add Build-Depends and Uploaders to the openafs-modules-source
+      control file.
+    - Remove unused parts of prep-modules and heavily comment it.
+  * openafs-client should only recommend the AFS kernel module.  Many of
+    the client programs will work in unauthenticated mode without it, and
+    openafs-fileserver depends on it (but doesn't require the kernel
+    module).  (Closes: #342095)
+  * openafs-modules-source no longer has to depend on as many libraries.
+  * Suggest the same PAM settings for pam_krb5 that libpam-krb5 does.
+  * Update uploader address.
+
+ -- Russ Allbery <rra@debian.org>  Tue,  6 Dec 2005 23:34:18 -0800
+
+openafs (1.4.0-1) unstable; urgency=low
+
+  * New upstream version.
+    - Builds correctly with 2.6.13 kernels and software suspend.
+    - Builds correctly with 2.6.12-10.  (Closes: #337883)
+  * Install afsd in /sbin rather than /usr/sbin.  While putting /usr in
+    AFS isn't as common as it once was, no reason to make it harder than
+    it needs to be.
+  * Update CellServDB to the 2005-10-15 grand.central.org version.
+  * Install NEWS as an upstream changelog.
+  * Add a watch file.
+  * Remove the unused and uninstalled make-links script.
+
+ -- Russ Allbery <rra@stanford.edu>  Sun,  6 Nov 2005 21:37:40 -0800
+
+openafs (1.4rc4-1) unstable; urgency=low
+
+  * New upstream version.
+    - Correctly handle root.afs becoming replicated after the client
+      starts.  This should resolve the problems with AFS eventually
+      failing on the first system using a new cell.  (Closes: #88906)
+  * When kill_all_afs is enabled in /etc/openafs/afs.conf, only kill AFS
+    processes if the runlevel is 0 or 6.  You really only want this when
+    the system is shutting down.  (Closes: #325347)
+  * Remove the init script check of the cache file system and instead
+    improve the check in afsd.  The init script check used stat, which is
+    in /usr/bin and therefore not fair game for init scripts.
+  * Set PATH in the init script, just in case.
+  * libpam-openafs-kaserver must depend on openafs-client, not just
+    recommend it, since acquiring tokens requires that the client be
+    running.
+  * Expand README.Debian and include information about PAM configuration.
+  * Link libpam-openafs-kaserver's doc directory to openafs-client.
+  * Make the short descriptions shorter.
+  * Translation updates.
+    - Portuguese (Brazil), thanks André Luís Lopes.
+
+ -- Russ Allbery <rra@stanford.edu>  Wed, 21 Sep 2005 13:36:34 -0700
+
+openafs (1.4rc1-1) unstable; urgency=low
+
+  * New upstream version.
+  * Install pam_afs.krb.so on hppa.  I believe the new PAM module build
+    process fixes the issue that was being worked around before.
+  * Improve the documentation and scripts for setting up new servers or a
+    new cell.  afs-rootvol can now be run from a client configured to use
+    dynroot.  afs-newcell generates the server CellServDB directly to work
+    around oddities with bos addhost.  There are many other, more minor
+    improvements as well.  Thanks to Faheem Mitha and Sergio Gelato for
+    analysis and patches.  (Closes: #322638)
+  * Update the configuration transcript to reflect the current packages,
+    messages, and instructions.  Thanks, Faheem Mitha.
+  * Fill in the server CellServDB with information about the local cell,
+    if available in the client CellServDB, rather than always initializing
+    it to contain just the name of the cell.
+  * Detect AFS caches on non-ext2/ext3 file systems and abort AFS client
+    initialization.  (Closes: #249315)
+  * Provide a way of setting sysname in afs.conf.  (Closes: #324694)
+  * Don't create the unused /etc/openafs/AFSLog file.  (Closes: #120097)
+  * Redo how library object files are found for the PAM module build to
+    avoid assuming C locale character set behavior.  (Closes: #323582)
+  * Remove the openafs-client warning against dynroot for the first system
+    in a cell now that afs-rootvol can cope.  Provide some basic
+    documentation of the CellAlias syntax in that message until we have a
+    real man page.
+  * Suggest openafs-doc.
+  * Update standards version to 3.6.2 for the kernel module packages (no
+    changes required).
+  * Translation updates.
+    - Czech, thanks Martin Sin.
+    - Vietnamese, thanks Clytie Siddall.
+    - French, thanks Christian Perrier.
+
+ -- Russ Allbery <rra@stanford.edu>  Fri, 26 Aug 2005 01:30:21 -0700
+
+openafs (1.3.87-1) unstable; urgency=low
+
+  * New upstream version.
+    - Fixes build problems with 2.6.12.3 and later.  (Closes: #320099)
+  * Add support for ppc64, thanks Andreas Jochens.  (Closes: #322020)
+  * Improve the openafs-client init script.
+    - Update the default client options based on the cache tuning synopsis
+      by Jeffrey Hutzelman, including setting a larger chunksize for all
+      default option sets.  (Closes: #303944)
+    - Choose the client options based on the cache size by default.
+    - Move the code to build the options string to the init script from
+      afs.conf so that afs.conf is pure configuration.
+    - Add an AFS_PRE_SHUTDOWN hook called before shutting down the client.
+    - Provide a shutdown hook, disabled by default, that kills all
+      processes with files open in /afs.  Enabling this ensures a more
+      reliable clean shutdown and umounting of the cache partition, but
+      may not always be what the admin wants.
+    - Improve the readability of the output on start.
+    - Significantly improve the comments in afs.conf.
+    - Remove the code to set -nosettime as it's now the default.
+  * Move the openafs-client init script and afs.conf file we use into the
+    debian directory rather than patching the upstream version.  We've
+    diverged so much that there's no point in continuing to merge changes.
+  * Diagnose unsupported architectures earlier and with a clearer error.
+  * Suppress error messages from a missing kernel version header since
+    they occur normally when doing the regular package build and are just
+    confusing.  Instead, print an error in kern-sysname and abort if the
+    kernel version could not be determined.
+  * Rework how PAM modules are handled.
+    - Build against the pthread-aware libraries.  (Closes: #297804)
+    - Use the shared library objects instead of building separate PIC
+      objects, eliminating the need for many Makefile modifications.
+    - Include pam_afs.krb.so as well.  (Closes: #165972)
+  * Don't include the empty /usr/src/modules directory in
+    openafs-modules-source, only the tarball, to match how other kernel
+    module source packages behave.  (Closes: #244685)
+  * Update config.guess and config.sub.
+  * Translation updates.
+    - French, thanks Christian Perrier.  (Closes: #318807)
+    - Vietnamese, thanks Clytie Siddall.  (Closes: #319705)
+    - Czech, thanks Martin Sin.  (Closes: #319940)
+
+ -- Russ Allbery <rra@stanford.edu>  Sun, 14 Aug 2005 14:41:48 -0700
+
+openafs (1.3.82-2) unstable; urgency=low
+
+  * Output error messages from heredocs in the init script with cat rather
+    than echo.  Thanks, Reid Barton.  (Closes: #311729)
+  * Make bosserver less picky about permissions and remove the attempt to
+    set /etc/openafs/server-local not-world-readable since dh_fixperms was
+    overridding it anyway.  (Closes: #312921)
+  * Fix some spacing and capitalization errors in the debconf templates.
+    Thanks, Clytie Siddall.  (Closes: #316597)
+  * Initial Czech translation, thanks Martin Sin.  (Closes: #310699)
+  * New Vietnamese translation, thanks Clytie Siddall.  (Closes: #316598)
+  * Update standards version to 3.6.2 (no changes required).
+
+ -- Russ Allbery <rra@stanford.edu>  Mon, 11 Jul 2005 17:34:13 -0700
+
+openafs (1.3.82-1) unstable; urgency=medium
+
+  * New upstream version.  (Closes: #307699)
+    - Proper locking for preempt kernels.  This bug manifested as an
+      inability to shut down AFS cleanly.  (Closes: #308399, #304040)
+    - Correctly handle the inotify semaphore.  (Closes: #303495)
+  * Repackage upstream to remove MacOS-specific files covered by the APSL.
+    Remove the WINNT directory to save space since we have to repackage
+    anyway.  Provide a get-orig-source target to do the repackaging.
+  * libpam-openafs-kaserver: Fix compilation so that the PAM module isn't
+    missing symbols and therefore unusable.  (Closes: #308844)
+  * Apply patch from Chas Williams to fix stale cache data from deleted
+    files, a bug introduced in 1.3.82.
+  * In all cases, only build the module appropriate to the kernel we're
+    building against.  Building an SMP module against a non-SMP kernel
+    fails due to missing defines.  (Closes: #225907)
+  * README.modules: Add documentation for module-assistant and recommend
+    it when using Debian kernels.  Mention divergences from upstream in
+    module naming.  (Closes: #253168)  Emphasize that the kernel source
+    tree used for make-kpkg must be identically configured to the kernel
+    the module will be used with.
+  * Update copyright with more complete information from upstream
+    src/LICENSE.
+  * Simplify clean target.  Upstream make distclean is now better.
+
+ -- Russ Allbery <rra@stanford.edu>  Tue, 10 May 2005 21:09:55 -0700
+
+openafs (1.3.81-5) unstable; urgency=low
+
+  * Handle modules named either with or without the .mp extension on SMP
+    hosts.  (Closes: #305389, #307280, #307797)
+  * README.Debian: Document that the client cache partition must be ext2
+    or ext3 and that XFS and ReiserFS will not work.  upserver and
+    upclient are now provided.  Provide some information about why
+    kaserver is not provided.  (Closes: #249315)
+  * Overhaul the module build rules.
+    - Use debhelper to build the module binary package.
+    - Let debhelper handle the module postinst and prerm control scripts.
+    - Properly support modules_config and modules_clean.
+    - Break the build process into configure, build, install, and binary
+      rules, paralleling the regular build rules and making it easier to
+      maintain the make-kpkg build targets.
+    - Include the kernel version in the long description.
+    - Update standards version of module packages to 3.6.1.
+    - Include the copyright and basic documentation in the module binary
+      package.  Otherwise, policy requires an exact versioned dependency
+      on the package containing the copyright file.
+  * Update standards version to 3.6.1.
+    - Install Debian::OpenAFS::ConfigUtils in /usr/share, not /usr/lib.
+    - Always enable debugging symbols and disable optimization if noopt is
+      set in DEB_BUILD_OPTIONS.  (Alas, this doesn't entirely work; the
+      upstream makefiles don't always honor the configure options.)
+    - /etc/init.d/openafs-fileserver restart starts bosserver if it's not
+      already running.
+  * Update debhelper compatibility level to V4.
+    - Remove all *.conffiles control files.  They're no longer needed.
+    - Use misc:Depends to get debconf dependencies.
+    - Use dh_install rather than the movefiles script.
+  * openafs-dbserver doesn't need to depend on debconf.
+  * Use dh_perl to get the correct Perl dependency for openafs-dbserver.
+  * Remove unnecessary build dependencies.
+  * Depend on comerr-dev rather than e2fslibs-dev.
+  * Remove unnecessary preinst for openafs-fileserver.
+  * Clean up and reformat package build rules.
+  * Update lintian overrides.
+
+ -- Russ Allbery <rra@stanford.edu>  Sat,  7 May 2005 20:57:12 -0700
+
+openafs (1.3.81-4) unstable; urgency=low
+
+  * make-kpkg doesn't run fakeroot for us but instead expects the module
+    rules file to use $(ROOT_CMD) appropriately.  (Closes: #237861)
+  * Put the compiled modules into KPKG_DEST_DIR if set.  This appears to
+    be preferred over DEB_DEST by the make-kpkg documentation.  Thanks,
+    Jonas Smedegaard.  (Closes: #206403)
+  * Add a check to afs-newcell to ensure the local hostname doesn't
+    resolve to 127.0.0.1.  (Closes: #163751)
+  * Exclude .svn directories from the modules source tarball.
+  * Fix genchanges for module builds to not fail when trying to remove a
+    nonexistent file.
+    * New French translations from Christian Perrier, Closes: #305780
+
+ -- Russ Allbery <rra@stanford.edu>  Sun, 17 Apr 2005 00:00:27 -0700
+
+openafs (1.3.81-3) unstable; urgency=low
+
+  * Patch from kcr to fix osconf.m4 so that sparc defines afs_pthread_env
+    and thus builds.
+
+ -- Sam Hartman <hartmans@debian.org>  Wed,  6 Apr 2005 19:54:24 -0400
+
+openafs (1.3.81-2) unstable; urgency=low
+
+  * Oops, update debian/sysname because hppa is hppa not parisc-*-linux-*
+    since we now use dpkg --print-installation-architecture
+
+ -- Sam Hartman <hartmans@debian.org>  Wed,  6 Apr 2005 11:10:14 -0400
+
+openafs (1.3.81-1) unstable; urgency=low
+
+  * New Upstream version
+  * Use Linux 2.4 as the claimed userspace OS for alpha; hopefully this
+    resolves the  largefile issue and allows us to build again, Closes: #271923
+
+ -- Sam Hartman <hartmans@debian.org>  Wed,  6 Apr 2005 08:08:29 -0400
+
+openafs (1.3.80-1) UNRELEASED; urgency=low
+
+  *  New upstream version, Closes: #297781
+  * I think this works on sparc better and definitely works on 2.6.10, Closes: #283488
+  * Make thiscell a high debconf value, Closes: #302939
+  * New upstream version (1.3.79)
+        - Works with 2.6.10, Closes: #296835
+  * Use amd64 not x86_64 for sysname script, Closes: #296855
+  * Patches from kcr
+      - Loosen dependencies for client and modules
+      - Enable debugging
+      - Some callbacks later stuff and fix short bitfield
+      - Fix permissions on /etc/openafs/server-local, Closes: #271460
+
+  * Versions 1.3.79 an newer work on amd64, Closes: #262382
+
+ -- Sam Hartman <hartmans@debian.org>  Mon,  4 Apr 2005 00:32:42 -0400
+
+openafs (1.3.77-1) unstable; urgency=low
+
+  * New upstream version
+  * Target for unstable not experimental
+  * New CellServDB
+  * OpenAFS seems not to have a changelog available, so stop shipping it.
+  * Build openafs.ko not libafs.ko so the right name appears in lsmod
+
+ -- Sam Hartman <hartmans@debian.org>  Sat,  8 Jan 2005 20:02:23 -0500
+
+openafs (1.3.74-1) experimental; urgency=low
+
+  * New upstream version
+
+ -- Sam Hartman <hartmans@mit.edu>  Mon, 15 Nov 2004 16:58:02 -0500
+
+openafs (1.3.73-1) experimental; urgency=low
+
+  * New upstream version
+    -  Works with 2.6.8 and 2.6.9, Closes: #277521
+  * Remove call to dh_suidregister
+  * Update sysname to prefer 2.4 on more arches for largefile issues
+  * Patch from pnelson@ANDREW.CMU.EDU to add x86_64 support to sysname scripts
+  * debian/sysname: Use installation architecture
+
+ -- Sam Hartman <hartmans@debian.org>  Wed, 27 Oct 2004 20:42:12 -0400
+
+openafs (1.3.71-1) experimental; urgency=low
+
+  * New upstream version
+
+ -- Sam Hartman <hartmans@mit.edu>  Tue, 31 Aug 2004 09:45:59 -0400
+
+openafs (1.3.70-1) experimental; urgency=low
+
+  * New upstream version
+  * debian/kern-sysname: 2.6* not 2.6
+  * Enable supergroups and largefile-fileserver
+
+ -- Sam Hartman <hartmans@debian.org>  Sun, 15 Aug 2004 18:56:48 -0400
+
+openafs (1.3.65-1) experimental; urgency=low
+
+  * New upstream Version, Closes: #256580
+
+ -- Sam Hartman <hartmans@debian.org>  Mon, 28 Jun 2004 19:40:30 -0400
+
+openafs (1.3.64-2) experimental; urgency=low
+
+  * Allow loading of a .ko file not just .o
+
+ -- Sam Hartman <hartmans@debian.org>  Mon, 31 May 2004 13:46:05 -0400
+
+openafs (1.3.64-1) experimental; urgency=low
+
+  * New upstream version
+  * Add 2.6 to kern-sysname for i386
+  * Apply patch from
+    /afs/cs.cmu.edu/user/jhutz/junk/openafs-patches/openafs-build-on-linux26  which correctly generates 2.6 modules, Closes: #234284
+  * use make only_libafs not dest_only_libafs
+    - AS a result, build times are much faster, Closes: #144781
+  * Correct module build scripts to install module package from new location
+  * Fix afslocaldir to be /etc/openafs/server-local, Closes: #237154
+
+ -- Sam Hartman <hartmans@debian.org>  Sun, 30 May 2004 18:12:54 -0400
+
+openafs (1.2.12-1) unstable; urgency=medium
+
+  * New upstream version
+  * Medium urgency because this version fixes a significant server crash
+    bug.  Windows clients, particularly greater than version 1.3.70 tend
+    to crash openafs servers.
+  * Cause openafs-kpasswd to conflict  with kerberos4kth-clients, Closes:
+    #277844
+  * Conflict between libopenafs-dev and arla-dev, Closes: #274788
+
+ -- Sam Hartman <hartmans@debian.org>  Fri, 22 Oct 2004 16:21:29 -0400
+
+openafs (1.2.11-3) unstable; urgency=high
+
+  * Now that libopenafs-dev contains binaries, it should have shared
+    library dependencies, Closes: #267509
+  * New fr.po from Christian Perrier, Closes: #237098
+
+ -- Sam Hartman <hartmans@debian.org>  Tue, 24 Aug 2004 12:10:02 -0400
+
+openafs (1.2.11-2) unstable; urgency=low
+
+  * Install rxgen
+  * Install upserver and upclient
+  * Mark as version 1.2.11, Closes: #255883
+
+ -- Sam Hartman <hartmans@debian.org>  Thu, 12 Aug 2004 14:27:39 -0400
+
+openafs (1.2.11-1) unstable; urgency=high
+
+  * Versions prior to 1.2.10 stopped working with multiple servers in a
+    cell because of a ubik bug prompting the 1.2.11 release.
+  * Fix afs startup script not to start afsd if already running; really
+    fixed in 1.2.10-3, but not documented, Closes: #219702
+
+ -- Sam Hartman <hartmans@debian.org>  Sat, 10 Jan 2004 16:37:33 -0500
+
+openafs (1.2.10-3) unstable; urgency=low
+
+  * Fix Openafs not to include kernel headers from /usr/include,
+  Closes: #220600
+  * Fix typo in openafs templates, Closes: #215714
+  * New French translations, Closes: #216158
+  * Build-depend on e2fslibs-dev to get appropriate headers
+
+ -- Sam Hartman <hartmans@debian.org>  Thu, 20 Nov 2003 16:02:45 -0500
+
+openafs (1.2.10-2) unstable; urgency=low
+
+  * New Brazilian Portuguese (pt_BR) translations, Closes: #208035
+  * Don't conflict with ircd, Closes: #204865
+  * Fix wording of question about using dynroot, Closes: #209332
+  * New French debconf translations, sorry about the delay in including these, Closes: #203608
+  * Avoid yes/no construction in openafs-client templates, Closes: #198476
+  * Fix libpam-openafs-kaserver to include the symbols it needs, patch
+    from Daniel Joseph Barnhart Clark , Closes: #194818
+
+ -- Sam Hartman <hartmans@debian.org>  Mon, 13 Oct 2003 00:38:42 -0400
+
+openafs (1.2.10-1) unstable; urgency=low
+
+  * New upstream version
+  * net/*.h included properly by kernel module, Closes: #204642
+  * Don't build libafsrpc or libafsauthent, as we can't exactly use them
+    because they contain non-pic code, Closes: #203456
+  * I think I finally build the PAM module on hppa, Closes: #179679
+  * Decnet includes should work now because of the change of the net
+    symlink, Closes: #204486
+  * Escape $ in debian/rules, Closes: #204185
+
+ -- Sam Hartman <hartmans@debian.org>  Sun, 24 Aug 2003 18:03:21 -0400
+
+openafs (1.2.9-3) unstable; urgency=low
+
+  * Add support for kernel headers, thanks to Patrick Sodre,
+    Closes: #173137
+  * Add patch to support the Debian 2.4.21 Kernel sources, thanks to amu,
+    Closes: #198774
+  * Add chronyd to list of programs we assume set the clock, thanks RISKO
+    Gergely, Closes: #201725
+  * Fix template formatting (extra leading spaces), Closes: #198477
+  * New French translations, thanks Christian Perrier, Closes: #198719
+  * Fix PAM problem on hppa, Closes: #179679
+  * Don't translate defaults: Closes: #198384
+  * Fix movefiles error handling and errors exposed by this change.  The
+    contents of libopenafs-dev  were somewhat wrong because of this.
+  * Make /usr/src/modules root.src 775, Closes: #201733
+
+ -- Sam Hartman <hartmans@debian.org>  Sat, 26 Jul 2003 18:03:31 -0400
+
+openafs (1.2.9-2) unstable; urgency=low
+
+  * Fix   to not build PAM krb since we don't install it and it breaks alpha, Closes: #189548
+  * Don't install pagsh man page symlink since we no longer link to
+    undocumented, Closes: #189860
+
+ -- Sam Hartman <hartmans@debian.org>  Mon, 21 Apr 2003 21:05:51 -0400
+
+openafs (1.2.9-1) unstable; urgency=low
+
+  * Literal newline fixes, Closes: #175627
+  * Require new kernel modules per upstream change.
+  * New upstream version
+  * Fix section of libopenafs-dev to libdevel
+  * openafs-client stop should shut down afsd if it is running even if afs
+    not mounted, Closes: #188000
+      * Fix to build on alpha again; PAM patch was broken
+  * Report i386_linux24 not linux22 on i386, Closes: #187789
+  * Convert to po-debconf, patch from Andre Luis Lopes, CLoses: #187901
+  * Fix from Lamont to build on hppa, Closes: #179679
+
+ -- Sam Hartman <hartmans@debian.org>  Sun, 13 Apr 2003 17:21:54 -0400
+
+openafs (1.2.8-4) unstable; urgency=low
+
+  * Fix from Eduard Bloch to compile on kernels with variable numbers of
+    CPUs; he is not sure it actually works yet though, Closes: #178505
+  * Patch that might possibly fix the fails to build on recent unstable;
+    definitely fixes a bug in include path handling, but I am not sure it
+    is a correct patch since I cannot reproduce the problem, Closes: #178154
+
+ -- Sam Hartman <hartmans@debian.org>  Sun,  2 Feb 2003 14:08:14 -0500
+
+openafs (1.2.8-3) unstable; urgency=medium
+
+  * Patch from Eduard Bloch <blade@debian.org> to build the PAM module for
+    kaserver users; the main thing this patch does in create a bunch of
+    PIC object files so it is a policy-conformant shared library, Closes:
+    #174668
+  * Do not include -I/usr/include and especially -I/usr/include/sys in the
+    PAM Makefile so gcc 3.2 works; already fixed upstream, Closes: #176538
+
+ -- Sam Hartman <hartmans@debian.org>  Sun, 19 Jan 2003 17:44:53 -0500
+
+openafs (1.2.8-2) unstable; urgency=low
+
+  * Convert v5 principal names to v4 style names in rxkad 2b.  Especially
+    important for rcmd vs host
+  * Fix debian/rules clean to remove  generated files, Closes: #174625
+  * Fix AFS not to declare errno, Closes: #174059
+
+ -- Sam Hartman <hartmans@debian.org>  Fri,  3 Jan 2003 15:28:30 -0500
+
+openafs (1.2.8-1) unstable; urgency=low
+
+  * New upstream version
+
+ -- Sam Hartman <hartmans@debian.org>  Tue, 10 Dec 2002 23:43:46 -0500
+
+openafs (1.2.7-3) unstable; urgency=low
+
+  * Apparently OpenAFS and  ircd conflict on a UDP port, so you can't use
+    both at once, Closes: #150242
+  * Patch from seph to add -nosettime when ntp is installed, Closes: #155123
+  * Fix bosserver  shutdown on restart after upgrade, Closes :#155586
+  * Install translate_et, Closes: #138672
+  * Allow byacc instead of bison
+
+ -- Sam Hartman <hartmans@debian.org>  Tue,  3 Dec 2002 22:30:44 -0500
+
+openafs (1.2.7-2) unstable; urgency=low
+
+  * Fix uss to build with bison 1.50 and 1.75 so we can throw away the
+    resulting binaries, Closes: #164366
+  * Evaluate all limited range of comparison warnings; a warning in
+    rxkad_client.c remains but is harmless, other warnings pointed to
+    potential problems that were fixed, Closes: #162754
+  * Fix s390 modules to actually build, Closes: #162772
+
+ -- Sam Hartman <hartmans@debian.org>  Sun, 20 Oct 2002 15:20:19 -0400
+
+openafs (1.2.7-1) unstable; urgency=low
+
+  * Fix typo in templates, Closes: #150356
+
+  * New upstream version
+
+ -- Sam Hartman <hartmans@debian.org>  Thu, 26 Sep 2002 16:11:25 -0400
+
+openafs (1.2.6-1) unstable; urgency=low
+
+
+  * New upstream version
+  * Update CellServDB, Closes: #154893
+  * Add debconf support for fakestat
+  * Patch from Sergio Gelato to avoid use of host, Closes: #144264
+  * Install sys because it was requested
+  * Fix version string, Closes: #153136
+ -- Sam Hartman <hartmans@debian.org>  Fri,  2 Aug 2002 17:33:11 -0400
+
+openafs (1.2.5-1) unstable; urgency=low
+
+  * New upstream version.
+
+ -- Sam Hartman <hartmans@debian.org>  Mon, 10 Jun 2002 08:09:05 -0400
+
+openafs (1.2.4-1) unstable; urgency=low
+
+  * New upstream version
+  * Now builds for ia64, closes: #142287
+  * Now works again with 2.2 kernels, thanks to upstream fix, closes: #140187
+  * openafs-modules-source depends on kernel-package, Closes: #137169
+  * Fix typo in readme.modules, Closes: #148155
+
+ -- Sam Hartman <hartmans@debian.org>  Sun,  2 Jun 2002 17:54:42 -0400
+
+openafs (1.2.3final2-5) unstable; urgency=medium
+
+  * Fix subarch handling, closes: #139662
+  * Update module control files to use  net not non-us
+
+ -- Sam Hartman <hartmans@debian.org>  Thu, 18 Apr 2002 13:13:16 -0400
+
+openafs (1.2.3final2-4) unstable; urgency=low
+
+  * Move from non-us to main.
+  * Fix ultrasparc 2.4 build to actually work.
+
+ -- Sam Hartman <hartmans@debian.org>  Sat, 16 Mar 2002 15:33:33 -0500
+
+openafs (1.2.3final2-3) unstable; urgency=medium
+
+  * Oops, install backup
+
+ -- Sam Hartman <hartmans@debian.org>  Thu,  7 Mar 2002 08:12:34 -0500
+
+openafs (1.2.3final2-2) unstable; urgency=low
+
+  * Add dynroot support to debconf; currently no support for creating
+    CellAliases  automatically
+  * Don't call depmod since we call update-modules, closes: #132851
+  * Add hppa to debian/sysname, process.c patch from Lamont, closes: #134173
+
+ -- Sam Hartman <hartmans@debian.org>  Mon, 25 Feb 2002 15:45:32 -0500
+
+openafs (1.2.3final2-1) unstable; urgency=low
+
+  * Upstream released a new version that they call 1.2.3 after things were
+    tagged  in the Debian repository.
+
+ -- Sam Hartman <hartmans@debian.org>  Wed, 30 Jan 2002 16:59:04 -0500
+
+openafs (1.2.3final-1) unstable; urgency=low
+
+  * New upstream release
+  * Add support for fs setcrypt in debconf; by default traffic is encrypted.
+
+ -- Sam Hartman <hartmans@debian.org>  Wed, 30 Jan 2002 10:46:46 -0500
+
+openafs (1.2.3candidate3-1) unstable; urgency=low
+
+  *  New  upstream release candidate
+  * Use different version number format; people who installed rc1 will
+    need to upgrade manually.  Sorry, but rc1 was never uploaded to Debian.
+  * Support sparc_linux24
+
+ -- Sam Hartman <hartmans@debian.org>  Sun, 27 Jan 2002 19:57:04 -0500
+
+openafs (1.2.3.candidate1-1) unstable; urgency=low
+
+  *  New upstream release candidate
+  * Add ia64 as a potential architecture
+
+ -- Sam Hartman <hartmans@debian.org>  Tue, 22 Jan 2002 19:00:51 -0500
+
+openafs (1.2.2-3) unstable; urgency=low
+
+  * Support s390, closes: #123540
+  * Support update-alternatives for pagsh, closes: #122144
+  * Note that alpha port doesn't work for fileservers, closes: #127387
+  * Implement subarch, closes: #126192
+
+ -- Sam Hartman <hartmans@debian.org>  Mon,  7 Jan 2002 05:26:03 -0500
+
+openafs (1.2.2-2) unstable; urgency=low
+
+  * Don't declare lseek in auth/ktc.c; sent upstream
+  * Allow /etc/openafs/server to be mode 700 and /var/lib/openafs to be
+    755, closes: #120072
+  *  Don't try to shut down during afs-newcell until we've done enough
+    that works, closes: #119452
+  * Fix message  output on server failed to start, closes: #119461
+  * Fix openafs to deal if /etc/openafs/server/ThisCell has a newline,
+    closes: #118086
+
+ -- Sam Hartman <hartmans@debian.org>  Sun, 25 Nov 2001 20:03:01 -0500
+
+openafs (1.2.2-1) unstable; urgency=low
+
+  * New upstream release.
+  * We now require openafs-modules1 and conflict with openafs-modules.
+  Our modules packages now provide openafs-modules1.  This is because
+  upstream made a forward and backward incompatible change in the modules
+  interface.
+   * Include buserver in openafs-dbserver, butc and fms in openafs-client.c
+    butc and fms may move, but they are there for now, closes: #114313
+
+ -- Sam Hartman <hartmans@debian.org>  Sun, 14 Oct 2001 15:07:10 -0400
+
+openafs (1.2.1-1) unstable; urgency=low
+
+  * New upstream version.
+  * Document that you may need to append a version for newer kernels,
+    closes: #112246
+
+ -- Sam Hartman <hartmans@debian.org>  Thu, 20 Sep 2001 03:10:54 -0400
+
+openafs (1.2.0-3) unstable; urgency=high
+
+  * High until we get this into testing.
+  * Fix dependency on ncurses, closes: #112244
+  * Fix typo in German template added in last version, closes: #112289
+
+ -- Sam Hartman <hartmans@debian.org>  Fri, 14 Sep 2001 23:40:25 -0400
+
+openafs (1.2.0-2) unstable; urgency=high
+
+  * Fix PPC makefile so that it finds install; this time actually
+    submitted upstream.
+  * Have openafs-modules-source depend on libpam0g-dev because upstream
+    seems to need it.  Bug opened upstream asking if this is really necessary.
+  * Include German template, closes: #110087
+
+ -- Sam Hartman <hartmans@debian.org>  Thu, 13 Sep 2001 16:58:53 -0400
+
+openafs (1.2.0-1) unstable; urgency=high
+
+  * Fix typo in  README.servers; thanks to mdz@debian.org, closes: #109199
+  * Upstream patch for configure-style path handling accepted, closes: #88897
+  * New upstream version.
+  * Update upstream changelog
+
+ -- Sam Hartman <hartmans@debian.org>  Tue, 11 Sep 2001 16:21:35 -0400
+
+openafs (1.1.1-3) unstable; urgency=low
+
+  * Oops, that last upstream patch for rx debug and version didn't work on
+    Linux.  Since some Debian users may run Linux, let's try again.
+
+ -- Sam Hartman <hartmans@debian.org>  Sat, 21 Jul 2001 12:48:00 -0400
+
+openafs (1.1.1-2) unstable; urgency=medium
+
+  * Swallow before vomiting, for it is the Debconf way, closes: #106030
+  * Fix setting of INSTALL macro on powerpc, closes: #106019
+  * Support AFSDB in debconf.  By default now (assuming you take the new
+    /etc/openafs/afs.conf), AFS will look up cells  it doesn't know
+    about in DNS.
+  * Include upstream patch to prevent potential DOS with two RX servers
+    looping rxdebug and version amongst each other.
+  * Install rxdebug (oops)
+  * Fix lintian overrides to get Lintian to stop complaining about
+    non-problems.
+
+ -- Sam Hartman <hartmans@debian.org>  Sat, 21 Jul 2001 08:53:10 -0400
+
+openafs (1.1.1-1) unstable; urgency=low
+
+  * New upstream release to fix readlink sometimes giving permission
+    denied when it shouldn't.
+  * Bring back the upstream changelog, now with change descriptions
+  * Patch to give better error messages when  copyonwrite fails in the
+    fileserver (contributed upstream)
+  * New CellServDB
+
+ -- Sam Hartman <hartmans@debian.org>  Fri, 20 Jul 2001 08:12:24 -0400
+
+openafs (1.1.0-1) unstable; urgency=low
+
+  * New Upstream release.
+  * Warn if not running as root for afs-newcell|rootvol, closes: #103532
+  * Work around upstream make clean target not working correctly.
+ -- Sam Hartman <hartmans@debian.org>  Mon, 16 Jul 2001 06:13:41 -0400
+
+openafs (1.0.90.20010710.snapshot-1) experimental; urgency=low
+
+  *  New upstream snapshot
+  * Fix module package to not have build cruft
+  * Use --disable-kernel-module option except for module sources
+  * Attempt to build modules correctly, although still not in right place
+  * Pretend we build for alpha. This is mostly not a fiction, although I
+    don't really know that much more than the kernel module and afsd
+    work.  The pointer cast warnings are frightening.
+
+ -- Sam Hartman <hartmans@debian.org>  Wed, 11 Jul 2001 11:41:22 -0400
+
+openafs (1.0.90.20010704.snapshot-1) experimental; urgency=low
+
+  * New upstream snapshot.  Support AFSDB records and many other
+    features.  Not at all stable yet.  This is packaged so I and others
+    can try it out.
+
+ -- Sam Hartman <hartmans@debian.org>  Thu,  5 Jul 2001 04:04:20 -0400
+
+openafs (1.0.4-3) unstable; urgency=medium
+
+  * Fix patch introduced in -2 to be consistent with what is sent upstream.
+  * openafs-modules-source depends on debhelper
+
+ -- Sam Hartman <hartmans@debian.org>  Wed,  4 Jul 2001 03:52:37 -0400
+
+openafs (1.0.4-2) unstable; urgency=low
+
+  * Fix modversions and athlon memcpy mmx bug, closes: #91925
+  * Fix openafs-client to fail rather than starting a useless afsd if we don't have any db servers
+  * If AFS client fails to start for afs-newcell, then complain, closes: #98303
+  * New CellServDB
+  * Fix module builds on non-i386, closes: #100939
+
+ -- Sam Hartman <hartmans@debian.org>  Sun, 17 Jun 2001 01:22:37 -0400
+
+openafs (1.0.4-1) unstable; urgency=low
+
+  * New upstream version, closes: #92776
+  * Allow openafs-client to depend on openafs-modules-source not just
+    openafs-modules.  This allows us to be installable on testing even
+    without binary modules which may become a necessity given the current
+    kernel image mess.
+  *  implement target for modules_clean, closes: #95049
+
+ -- Sam Hartman <hartmans@debian.org>  Tue, 24 Apr 2001 14:56:57 -0400
+
+openafs (1.0.3-2) unstable; urgency=low
+
+  * Fix  direntry type to be DT_UNKNOWN not DT_DIR on Linux (contributed upstream)
+  * Return ENOTEMPTY not ENOTDIR for rmdir of non-empty directory, closes: #82589
+  * Include build instructions in modules, closes: #92032
+  * Don't grep a file for a potentially null string, closes: #89967
+
+ -- Sam Hartman <hartmans@debian.org>  Thu, 29 Mar 2001 22:09:29 -0500
+
+openafs (1.0.3-1) unstable; urgency=low
+
+  * New upstream version
+  * Allow host to be used instead of dnsutils, closes: #87915
+  * Document kernel module build.
+  * Include upstream changelog
+
+ -- Sam Hartman <hartmans@debian.org>  Thu,  8 Mar 2001 14:35:57 -0500
+
+openafs (1.0.2-3) unstable; urgency=low
+
+  * Apply patch from  Stefan Kluth  <skluth@mppmu.mpg.de> for ppc_linux22
+  * Back out architecture change from last version; no good way to
+    actually solve that problem apparently.
+
+
+ -- Sam Hartman <hartmans@debian.org>  Sat, 17 Feb 2001 23:45:06 -0500
+
+openafs (1.0.2-2) unstable; urgency=low
+
+  * Provide openafs-ptutil in hope that apt will deal better with upgrade,
+    closes: #84303
+  * Make thiscell default to dnsdomainname so things don't break quite as
+    bad if you don't enter it, closes: #81149
+  * Include source architecture line, Closes: #84530
+  * Rebuild with new debhelper to fix dh_installinit not shutting down on
+    removal (Thanks Joey) (now requires debhelper 2.2.20)
+  * Move CellServDB to /usr/share/openafs  so we comply with policy 3.5
+
+ -- Sam Hartman <hartmans@debian.org>  Mon,  5 Feb 2001 13:23:51 -0500
+
+openafs (1.0.2-1) unstable; urgency=low
+
+  * Add support for ppc and sparc, closes: #80835
+  * Update maintainer address for modules.
+  * Support for 2.4.0 final (and not just prereleases as before), closes: #82751
+  * New upstream version.
+  * Conflict with openafs-ptutil since it is now included
+  * Fix message in RC script, closes: #82489
+  * Attempt to avoid using pinstall  in kernel module build
+
+ -- Sam Hartman <hartmans@debian.org>  Fri, 19 Jan 2001 22:38:32 -0500
+
+openafs (1.0.1-3) unstable; urgency=low
+
+  * Add support for Linux Kernel 2.4.x.
+  * Note that administration scripts are released under the GPL.
+
+ -- Sam Hartman <hartmans@debian.org>  Mon,  18 Dec 2000 19:06:00 -0500
+
+
+openafs (1.0.1-2) unstable; urgency=medium
+
+  * New maintainer address.
+  * Depend on debhelper 2.1.16 for /usr/share/doc symlinks.
+  * Only run init script once; confusion with DH_OPTIONS
+  * Fix bosserver to look in /usr/openafs/lib so it restarts correctly every Sunday.
+  * Upload to Debian (Gloses: BUG#69336)
+  * Do not generate .map file for module; depmod complains.
+
+ -- Sam Hartman <hartmans@debian.org>  Wed,  6 Dec 2000 11:21:53 -0500
+
+openafs (1.0.1-1) unstable; urgency=low
+
+  * New upstream version
+  * Fix typo in openafs-client templates.
+  * Clarify that afs-newcell sets up for afs-rootvol
+
+ -- Sam Hartman <hartmans@mit.edu>  Sun,  3 Dec 2000 02:04:50 -0500
+
+openafs (1.0.snap20001106-10) unstable; urgency=low
+
+  * Release (Closes: BUG#69336)
+  * Fix typo and afs-rootvol and test from CLI
+
+ -- Sam Hartman <hartmans@mit.edu>  Sat,  2 Dec 2000 00:44:37 -0500
+
+openafs (1.0.snap20001106-9) unstable; urgency=medium
+
+  * Fix openafs-fileserver restart to do a bos restart
+  * Document that AFS key must be single-DES.
+  * afs-rootvol: use the -fast option so we do not hang forever on bad cells or firewalls.
+  * Fix priority on openafs-client rc script to run after server starts.
+
+ -- Sam Hartman <hartmans@mit.edu>  Wed, 29 Nov 2000 20:43:59 -0500
+
+openafs (1.0.snap20001106-8) unstable; urgency=low
+
+  * Modules no longer depend on the tlient; client depends on modules.
+    This works better for AFS, even though it is not the way packages like
+    alsa-base work.
+  * Fix several typos in configuration scripts.
+  * Clarify that it starts the client just after debconf.
+
+ -- Sam Hartman <hartmans@mit.edu>  Wed, 29 Nov 2000 13:10:43 -0500
+
+openafs (1.0.snap20001106-7) unstable; urgency=low
+
+  * Add command line options to afs-newcell
+  * Fix control.module for real this time.
+  * Add kpasswd and kas to the openafs-kpasswd package.
+  * Add manpage for afs-newcell and many undocumented links.
+  * Remove PAM module from libopenafs-dev.
+  * Instal udebug, pagsh, cmdebug.
+  * Remove execute bit from some includes in /usr/include.
+
+ --  Sam Hartman <hartmans@mit.edu>  Mon, 27 Nov 2000 03:02:57 -0500
+
+openafs (1.0.snap20001106-6) unstable; urgency=medium
+
+  * Add config option to disable  client on boot
+  * Create rc.d links
+  * Make CellServDB handled by postinst not a conffile.  Sadly AFSDB
+    records will be a while in the future.
+  * New script: afs-newcell to configure a dbserver
+  * Use the native Debian install instead of afs install while building;
+    works  under fakeroot.  Important for modules package.
+  * Fix purge to delete configuration files
+
+ -- Sam Hartman <hartmans@mit.edu>  Sat, 25 Nov 2000 01:09:55 -0500
+
+openafs (1.0.snap20001106-5) unstable; urgency=low
+
+  * Make change so kdump builds on potato
+
+ --  Sam Hartman <hartmans@mit.edu>  Sun, 19 Nov 2000 19:27:01 -0500
+
+openafs (1.0.snap20001106-4) unstable; urgency=low
+
+  * Fix so dpkg-buildpackage works.  Oops.
+
+ --  Sam Hartman <hartmans@mit.edu>  Sun, 19 Nov 2000 02:18:05 -0500
+
+openafs (1.0.snap20001106-3) unstable; urgency=low
+
+  * Increase stacksize for server processes so they don't dump core.
+  * New script: afs-rootvol--creates the root.afs and root.cell.  Works
+    fairly well except that it is overly verbose and that it has my test
+    cell hardcoded.  This script will evolve into part of a new cell
+    config tool.
+
+
+  --
+  * Support removing module for smP
+  * Prune build directories out of modules sources--oops
+  * Fix bogus depends for module sources--note that it really does want
+    bison and flex at least for now.
+
+ --  Sam Hartman <hartmans@mit.edu>  Thu, 16 Nov 2000 01:39:48 -0500
+
+openafs (1.0.snap20001106-2) unstable; urgency=low
+
+  * Fix directories for servers to be FHS-reasonable
+  * Fix init.d script to actually work for stop this time--tested and works
+  * Add server packages; fairly useless right now but at least we
+      ship the binaries
+  * Check to make sure home cell exists and warn user if not
+  * Fix purge for openafs-client
+
+ --  Sam Hartman <hartmans@mit.edu>  Fri, 10 Nov 2000 23:35:30 -0500
+
+openafs (1.0.snap20001106-1) unstable; urgency=low
+
+  * New Upstream version
+  * Fix init.d script to properly remove openafs.o
+
+ --  Sam Hartman <hartmans@mit.edu>  Tue,  7 Nov 2000 13:55:47 -0500
+
+openafs (1.0.snap20001104-1) unstable; urgency=low
+
+  * New upstream snapshot
+  * Fix path to afsd in /etc/init.d/openafs-client
+  * Build openafs module packages
+
+ --  Sam Hartman <hartmans@mit.edu>  Mon,  6 Nov 2000 09:39:11 -0500
+
+openafs (1.0.snap20001103-1) unstable; urgency=low
+
+  * Initial Release.
+
+ -- unknown <hartmans@snorklewacker.mit.edu>  Fri,  3 Nov 2000 23:41:41 -0500

diff --git a/debian/clean b/debian/clean
new file mode 100644 (file)
index 0000000..ac1bb43
--- /dev/null
+++ b/debian/clean
@@ -0,0 +1,12 @@
+.version
+aclocal.m4
+configure
+configure-libafs
+doc/man-pages/man1/*.1
+doc/man-pages/man5/*.5
+doc/man-pages/man8/*.8
+doc/xml/*/Makefile
+doc/xml/*/version.xml
+src/config/Makefile.version-CML
+src/kauth/ka-forwarder
+src/packaging/RedHat/openafs.spec

diff --git a/debian/compat b/debian/compat
new file mode 100644 (file)
index 0000000..ec63514
--- /dev/null
+++ b/debian/compat
@@ -0,0 +1 @@
+9

diff --git a/debian/configuration-transcript.txt b/debian/configuration-transcript.txt
new file mode 100644 (file)
index 0000000..1acaeb6