In this paper, we address the correctness and performance issues that arise when implemening logging and crash recovery in a page-server anvironment. the issues result from two characteristic of page-server systems: 1) the fact that data is modified and cached in client database buffers that are not accessible by the server, and 2) the performance and cost tradeoffs that are inherent in a client-server environment. we describe a recovery system that we have implemented for the client-server version of the EXODUS stroge manager. the implementation supports efficient buffer management policies, allows flexbility in the interaction between clients and the server, and reduces the server load by generating log records at clients. we also present a preliminary performance analysis of the implementation.