Re: [CentOS-virt] Virt SIG roadmap
On Tue, Apr 15, 2014 at 5:53 PM, George Dunlap dunl...@umich.edu wrote: As promised, in preparation for next week's SIG meeting, here's a kick-off discussion about the Virtualization SIG roadmap. I'm mainly tossing out ideas here -- see this is an invitation to discussion. Key things I think should be on the roadmap: * Release process - General cadence - Estimate of the next release (if any) * Specification of targets - Right now, mainly xen4centos - What packages? * Backlog of work items - Updates (mostly suggested by Pasi) - Items caveats from Russ P's CentOS talk == Release process == I don't have any real opinions on this -- KB / Johnny, did you guys have a vision for what the release schedule for any of the SIGs would look like? Are we going to have specific releases, or just continue to do rolling updates? If so, how frequent should the updates be? Obviously estimates for releases will need to wait until all the infrastructure has been set up, and we've discussed cadence / targets, c. == Targets == Targets will depend on community support. I'll be committing to extending the Xen4CentOS project. There was talk of having an OpenVZ variant, but that would require someone to actually step up and do the work to integrate and support it. == Backlog == Most of the items below are from the discussion Pasi started in February; a couple are from Russ Pavliczek's slides at a talk given recently. * Pull in updates f/ XenServer Suggested by dvrabel in http://marc.info/?l=centos-virtm=139289353315469 - 0001-x86-xen-rename-early_p2m_alloc-and-early_p2m_alloc_m.patch - 0008-x86-remove-the-Xen-specific-_PAGE_IOMAP-PTE-flag.patch - 0160676bba69523e8b0ac83f306cce7d342ed7c8 (xen/p2m: check MFN is in range before using the m2p table) - 7cde9b27e7b3a2e09d647bb4f6d94e842698d2d5 (xen: Fix possible user space selector corruption) * Xen 4.4 (Xen + qemu) * libvirt: 1.2.2 - Possibly with migration / pci pass-through back-ported? * dom0 / xen serial console * Ballooning bug? http://bugs.centos.org/view.php?id=6893 * UEFI? Anything else we need to discuss / plan? At our bi-weekly meeting today, we talked about what the general approach to releases has been. For Xen, major updates to packages will happen when the upstream releases. The plan at the moment is to do this every other release; so we would update to 4.4, but probably not update again until 4.5. Between those times, we will generaly be pulling in bug fixes by consuming point releases when they happen. Security updates will of course be pushed out immediately, as will bugs that affect a significant number of users. We didn't discuss this, but I would expect that libvirt might be similar to Xen. For Linux, the plan is to consume one of the LTS kernels. At the moment, that's 3.10. In general, the plan is to update to a new LTS kernel every 2 years. However, whenever there is a major release (for example, with RHEL 7 coming out soon), we may consider moving to a newer kernel for CentOS 6 sooner, so that the Virt SIG can maintain only a single kernel version across all CentOS releases. The initial target for the Virt SIG will be to update the packages inherited from xen4centos to Xen 4.4 and libvirt 1.2.2. We're currently in the process of brainstorming a backlog of work items that might be a good idea. Some things we've come up with so far: * CentOS 7 testing branch * Making a useful Xen CD image - Live CD? - With pre-made CentOS guest images? - Ready to be set up as an OpenStack node? * Getting some kind of automated testing infrastructure set up KB / Lars / Johnny, anything I missed / didn't get quite right? -George ___ CentOS-virt mailing list CentOS-virt@centos.org http://lists.centos.org/mailman/listinfo/centos-virt
Re: [CentOS-virt] AWS Images updated for new instance types
On Mon, Mar 31, 2014 at 3:38 PM, Dusty Mabe dustym...@gmail.com wrote: On Tue, Mar 11, 2014 at 11:31 PM, Dusty Mabe dustym...@gmail.com wrote: On Mar 11, 2014 1:37 PM, Karanbir Singh mail-li...@karan.org wrote: I've been working with the epel guys to bring that through - in the coming days, I will have the infra up to test and build / deliver these images. And at that point we can go ahead and start churning more community oriented builds and scripts that go with them ( as opposed to the official release process via AMP ). Thanks for the heads up. Let me know if I can do anything to help. I haven't noticed any changes on http://wiki.centos.org/Cloud/AWS. Is this progressing? I know you have been busy. Thanks for everything you do. Karanbir, I know in irc you mentioned that the images had been updated in amazon. I do see that there is a 6.5 AMI now. This is great but we had discussed[1] possibly having a CentOS blessed AMI that contains cloud-init from epel. I gave the 6.5 AMI a spin and I don't see cloud-init. Is an image with cloud-init still part of the plan? Thanks for everything! Dusty [1] http://lists.centos.org/pipermail/centos-virt/2014-March/003690.html ___ CentOS-virt mailing list CentOS-virt@centos.org http://lists.centos.org/mailman/listinfo/centos-virt
Re: [CentOS-es] servidores no logran verse los usuarios
Hola El 12/04/2014 7:47, William Romero escribió: hola lista. quisiera hacerles una consulta , tengo 2 servidores de firewal en centos cada uno tiene diferente proveedor de internet, todo funciona bien, pero tengo una problema con 3 servidor que es de correos electronicos tambien en centos. el firewall 1 , tiene la direccion 192.168.1.7 /dmz 192.168.20.20 el firewall 2 , tiene la direccion 192.168.1.10 /dmz 192.1682.20.5 el servidor de correos tiene la direccion 192.168.20.13/gateway 192.168.20.20 cuando paso a los usuarios al firewall 1 todos pueden tener correos electronicos y pueden ver la direccion publica del servidor de correos ingresando a http://mail.server de correo.com pero cuando paso a los usuarios al firewal 2 la direccion de http://mail.server de correo.com no la puede ver , sin embargo puedo hacerle ping. cual seria la solucion para llevar que todos los usuarios del firewall 2 enruten hacia el server firewall 1 y pueden resolver la direccion web mencioanda yo tengo iptables en los 2 server corriendo super bien . Tu servidor de correo usa siempre el firewall 1 para responder las solicitudes (aunque le lleguen del firewall 2). De ahí puede venir el problema. Un firewall puede cortar la conexión si detecta que el camino seguido por los paquetes es distinto entre la ida y la vuelta. Usa los logs del firewall 1 para confirmar esto. Deberías ver que las respuestas del servidor de correo (hacia tus clientes) son denegadas. saludos y gracias de antemano. William Romero -- Francesc Guitart ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
Re: [CentOS-es] Certificado valido para Pure-FTP
Hola a tod@s, ¿al final has podido implementarlo? ¿que parámetros has indicado en el fichero pure-ftpd.conf? Estoy en tu mismo tesitura, quiero implementar Pure-Ftpd con Geotrust pero no encuentro la manera. Gracias por cualquier información Saludos, Sergio. El 10 de abril de 2014, 17:04, Alex ( Servtelecom ) alex.and...@servtelecom.com escribió: te recomiendo proftpd :) y ya te he pasado las configuraciones en el correo anterior. Yo hace años que lo utilizo sin problemas! El 10/04/14 16:30, Salvador Guzman - Salman PSL escribió: :: Acabo de hacer una prueba con GoFTP y tampoco genera errores. Me resulta extrañisimo que FileZilla genere un error de algo que es correcto. Probare a instalar otro servidor distinto a pure-ftp pero me fastidiaria, pues es muy sencillo de instalar y de mantener con mucha seguridad. * *** Fin del mensaje *** * El 10/04/2014 16:19, Alex ( Servtelecom ) escribió: yo siempre uso el gftp que me va muy bien y sin problemas jejeje! :) Lo que ahora tendrias que mirar que servidor FTP es el que se adapta mejor a filezilla ya que ese cliente de ftp lo utiliza mucha gente :) Saludos El 10/04/14 15:43, Salvador Guzman - Salman PSL escribió: :: Pues despues de leer la pagina que me indicas y hacer lo que van explicando, y que de hecho ya habia yo intentado, se me encendio una lucecita, y pense ... ¿ Y si la culpa no es del pure-ftp sino del FileZilla ? Instale el primer programa de FTP que me mostro el Sr. Google y ... sorpresa, no dio ningun mensaje de aviso, se conecto a la primera sin mayor problema. Aqui teneis el dialogo de la conexion: [15:21:35] SmartFTP v5.0.1354.0 [15:21:35] Resolving host name Nombre_Servidor_FTP [15:21:35] Connecting to 95.211.111.xxx Port: 21 [15:21:35] Connected to Nombre_Servidor_FTP. [15:21:35] 220-- Welcome to Pure-FTPd [privsep] [TLS] -- [15:21:35] 220-You are user number 1 of 5 allowed. [15:21:35] 220-Local time is now 15:21. Server port: 21. [15:21:35] 220-This is a private system - No anonymous login [15:21:35] 220 You will be disconnected after 15 minutes of inactivity. [15:21:35] AUTH TLS [15:21:35] 234 AUTH TLS OK. [15:21:36] TLS 1.0 encrypted session established. [15:21:36] Key Exchange: 2048 bit RSA [15:21:36] Session Cipher: 128 bit RC4 [15:21:36] Command channel protection set to Private. [15:21:36] PBSZ 0 [15:21:36] 200 PBSZ=0 [15:21:36] USER Nombre_usuario_FTP [15:21:36] 331 User Nombre_usuario_FTP OK. Password required [15:21:36] PASS (hidden) [15:21:36] 230 OK. Current restricted directory is / [15:21:36] SYST [15:21:36] 215 UNIX Type: L8 [15:21:36] Detected Server Type: UNIX [15:21:36] RTT: 45.631 ms [15:21:36] FEAT [15:21:36] 211-Extensions supported: [15:21:36] EPRT [15:21:36] IDLE [15:21:36] MDTM [15:21:36] SIZE [15:21:36] MFMT [15:21:36] REST STREAM [15:21:36] MLST type*;size*;sizd*;modify*;UNIX.mode*;UNIX.uid*;UNIX.gid*;unique*; [15:21:36] MLSD [15:21:36] AUTH TLS [15:21:36] PBSZ [15:21:36] PROT [15:21:36] UTF8 [15:21:36] ESTA [15:21:36] PASV [15:21:36] EPSV [15:21:36] SPSV [15:21:36] ESTP [15:21:36] 211 End. [15:21:36] OPTS UTF8 ON [15:21:36] 200 OK, UTF-8 enabled [15:21:36] PWD [15:21:36] 257 / is your current location [15:21:36] TYPE A [15:21:36] 200 TYPE is now ASCII [15:21:36] PROT P [15:21:36] 200 Data protection level set to private [15:21:36] PASV [15:21:36] 227 Entering Passive Mode (95,211,111,xxx,172,29) [15:21:36] Opening data connection to 95.211.111.xxx Port: 44061 [15:21:36] MLSD [15:21:36] 150 Accepted data connection [15:21:36] 226-Options: -a -l [15:21:36] 226 43 matches total [15:21:36] 4629 bytes transferred. (26,4 KB/s) (171 ms) [15:21:36] TYPE I [15:21:36] 200 TYPE is now 8-bit binary [15:21:36] SIZE Control [15:21:36] 550 I can only retrieve regular files [15:21:36] CWD /Control [15:21:37] 250 OK. Current directory is /home/Nombre_Usuario_FTP/www/ [15:21:37] PWD [15:21:37] 257 /home/Nombre_Usuario_FTP/www is your current location Me he quedado un tanto sorprendido de que FileZilla genere ese error y otros no. De todas formas, voy a probar con otro programa en mi ordenador a ver si lo acepta o genera error. Gracias por las
Re: [CentOS-es] Certificado valido para Pure-FTP
:: Si, compre un certificado para cada servidor, yo trabajo con GlobeSSL Yo segui estas guias: http://www.howtoforge.com/forums/showthread.php?t=41883 http://wiki.ggis.biz/index.php/Pure-FTPd_on_Ubuntu Y para el pureftp.pem : cat certificado.key pureftp.pem cat certificado.crt pureftp.pem cat certificado.ca pureftp.pem Hay programas que lo reconocen sin problemas y otros como el FileZilla que dan un aviso, pero como el certificado es valido, no me preocupa. * *** Fin del mensaje *** * El 22/04/2014 18:52, Sergio Villalba escribió: Hola a tod@s, ¿al final has podido implementarlo? ¿que parámetros has indicado en el fichero pure-ftpd.conf? Estoy en tu mismo tesitura, quiero implementar Pure-Ftpd con Geotrust pero no encuentro la manera. Gracias por cualquier información Saludos, Sergio. El 10 de abril de 2014, 17:04, Alex ( Servtelecom ) alex.and...@servtelecom.com escribió: te recomiendo proftpd :) y ya te he pasado las configuraciones en el correo anterior. Yo hace años que lo utilizo sin problemas! El 10/04/14 16:30, Salvador Guzman - Salman PSL escribió: :: Acabo de hacer una prueba con GoFTP y tampoco genera errores. Me resulta extrañisimo que FileZilla genere un error de algo que es correcto. Probare a instalar otro servidor distinto a pure-ftp pero me fastidiaria, pues es muy sencillo de instalar y de mantener con mucha seguridad. * *** Fin del mensaje *** * El 10/04/2014 16:19, Alex ( Servtelecom ) escribió: yo siempre uso el gftp que me va muy bien y sin problemas jejeje! :) Lo que ahora tendrias que mirar que servidor FTP es el que se adapta mejor a filezilla ya que ese cliente de ftp lo utiliza mucha gente :) Saludos El 10/04/14 15:43, Salvador Guzman - Salman PSL escribió: :: Pues despues de leer la pagina que me indicas y hacer lo que van explicando, y que de hecho ya habia yo intentado, se me encendio una lucecita, y pense ... ¿ Y si la culpa no es del pure-ftp sino del FileZilla ? Instale el primer programa de FTP que me mostro el Sr. Google y ... sorpresa, no dio ningun mensaje de aviso, se conecto a la primera sin mayor problema. Aqui teneis el dialogo de la conexion: [15:21:35] SmartFTP v5.0.1354.0 [15:21:35] Resolving host name Nombre_Servidor_FTP [15:21:35] Connecting to 95.211.111.xxx Port: 21 [15:21:35] Connected to Nombre_Servidor_FTP. [15:21:35] 220-- Welcome to Pure-FTPd [privsep] [TLS] -- [15:21:35] 220-You are user number 1 of 5 allowed. [15:21:35] 220-Local time is now 15:21. Server port: 21. [15:21:35] 220-This is a private system - No anonymous login [15:21:35] 220 You will be disconnected after 15 minutes of inactivity. [15:21:35] AUTH TLS [15:21:35] 234 AUTH TLS OK. [15:21:36] TLS 1.0 encrypted session established. [15:21:36] Key Exchange: 2048 bit RSA [15:21:36] Session Cipher: 128 bit RC4 [15:21:36] Command channel protection set to Private. [15:21:36] PBSZ 0 [15:21:36] 200 PBSZ=0 [15:21:36] USER Nombre_usuario_FTP [15:21:36] 331 User Nombre_usuario_FTP OK. Password required [15:21:36] PASS (hidden) [15:21:36] 230 OK. Current restricted directory is / [15:21:36] SYST [15:21:36] 215 UNIX Type: L8 [15:21:36] Detected Server Type: UNIX [15:21:36] RTT: 45.631 ms [15:21:36] FEAT [15:21:36] 211-Extensions supported: [15:21:36] EPRT [15:21:36] IDLE [15:21:36] MDTM [15:21:36] SIZE [15:21:36] MFMT [15:21:36] REST STREAM [15:21:36] MLST type*;size*;sizd*;modify*;UNIX.mode*;UNIX.uid*;UNIX.gid*;unique*; [15:21:36] MLSD [15:21:36] AUTH TLS [15:21:36] PBSZ [15:21:36] PROT [15:21:36] UTF8 [15:21:36] ESTA [15:21:36] PASV [15:21:36] EPSV [15:21:36] SPSV [15:21:36] ESTP [15:21:36] 211 End. [15:21:36] OPTS UTF8 ON [15:21:36] 200 OK, UTF-8 enabled [15:21:36] PWD [15:21:36] 257 / is your current location [15:21:36] TYPE A [15:21:36] 200 TYPE is now ASCII [15:21:36] PROT P [15:21:36] 200 Data protection level set to private [15:21:36] PASV [15:21:36] 227 Entering Passive Mode (95,211,111,xxx,172,29) [15:21:36] Opening data connection to 95.211.111.xxx Port: 44061 [15:21:36] MLSD [15:21:36] 150 Accepted data connection [15:21:36] 226-Options: -a -l [15:21:36] 226 43 matches total [15:21:36] 4629 bytes transferred. (26,4 KB/s) (171 ms) [15:21:36] TYPE I
Re: [CentOS] Samba4 questions
On 18 Apr 2014 16:49, Steve Campbell campb...@cnpapers.com wrote: As I read more and more about this beast, I keep finding pages that indicate the samba4 rpms supplied with the Centos/RH distribution are not the full version and that I should get them from either samba.org or certain other sources that provide complete versions. These pages are a little dated, but not that old. The samba4 packages redhat provides has AD DC functionality disabled due to heimdal/MIT issues. They are also quite out of date. To get more recent working packages look to SerNet Samba. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] nfs question
Hello! We have central ldap for users, idmapd.conf configured on every machine and users' home folders on nfs, mounted by automount on several machines. After the last OS upgrade we notice that permissions on some files (not for all users) are corrupted: For example: -rw-r--r--1 4294967294 429496729445 Nov 11 21:20 hostlist drwx--2 4294967294 4294967294 4096 Jun 27 2012 .ssh -rw-r--r--1 4294967294 4294967294 0 Aug 28 2013 test -rw-r--r--1 4294967294 429496729453 Jan 6 12:44 test.sh instead of: -rw-r--r--1 ops001 ops 45 Nov 11 21:20 hostlist drwx--2 ops001 ops 4096 Jun 27 2012 .ssh -rw-r--r--1 ops001 ops 0 Aug 28 2013 test -rw-r--r--1 ops001 ops 53 Jan 6 12:44 test.sh Kernel used: 2.6.32-431.11.2.el6.x86_64 Nfs version: nfs-utils-1.2.3-39.el6.x86_64 User/group mapping works fine. Same behaviour appears when I mount the home folder manually. Any ideas? Thanks, Barbara ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] nfs question
Restarting rpcidmapd and clearing the cache helped to solve the problem. Barbara On 04/22/2014 10:15 AM, Barbara Krasovec wrote: Hello! We have central ldap for users, idmapd.conf configured on every machine and users' home folders on nfs, mounted by automount on several machines. After the last OS upgrade we notice that permissions on some files (not for all users) are corrupted: For example: -rw-r--r--1 4294967294 429496729445 Nov 11 21:20 hostlist drwx--2 4294967294 4294967294 4096 Jun 27 2012 .ssh -rw-r--r--1 4294967294 4294967294 0 Aug 28 2013 test -rw-r--r--1 4294967294 429496729453 Jan 6 12:44 test.sh instead of: -rw-r--r--1 ops001 ops 45 Nov 11 21:20 hostlist drwx--2 ops001 ops 4096 Jun 27 2012 .ssh -rw-r--r--1 ops001 ops 0 Aug 28 2013 test -rw-r--r--1 ops001 ops 53 Jan 6 12:44 test.sh Kernel used: 2.6.32-431.11.2.el6.x86_64 Nfs version: nfs-utils-1.2.3-39.el6.x86_64 User/group mapping works fine. Same behaviour appears when I mount the home folder manually. Any ideas? Thanks, Barbara ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Samba4 questions
Thanks very much. The SerNet stuff was what I was seeing using Google, but as I mentioned, the postings were rather old. Thanks James for the reply. steve On 4/22/2014 3:20 AM, James Hogarth wrote: On 18 Apr 2014 16:49, Steve Campbell campb...@cnpapers.com wrote: As I read more and more about this beast, I keep finding pages that indicate the samba4 rpms supplied with the Centos/RH distribution are not the full version and that I should get them from either samba.org or certain other sources that provide complete versions. These pages are a little dated, but not that old. The samba4 packages redhat provides has AD DC functionality disabled due to heimdal/MIT issues. They are also quite out of date. To get more recent working packages look to SerNet Samba. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Samba4 questions
I have used the informations available at samba4: http://wiki.samba.org/index.php/Main_Page wget ftp://ftp.samba.org/pub/samba/samba-4.1.6.tar.gz and compiled samba4. CentOS Version is 6.5 best regards Helmut Viele Grüße Helmut Drodofsky Internet XS Service GmbH Heßbrühlstraße 15 70565 Stuttgart Geschäftsführung Dr.-Ing. Roswitha Hahn-Drodofsky HRB 21091 Stuttgart USt.ID: DE190582774 Tel. 0711 781941 0 Fax: 0711 781941 79 Mail: i...@internet-xs.de www.internet-xs.de Am 18.04.2014 17:49, schrieb Steve Campbell: I'm a little new to Samba when used as more than just a simple place to mount a single user to a single share, but we're now getting ready to replace our Netware servers with Samba, and I guess that means Active Directory DC. As I read more and more about this beast, I keep finding pages that indicate the samba4 rpms supplied with the Centos/RH distribution are not the full version and that I should get them from either samba.org or certain other sources that provide complete versions. These pages are a little dated, but not that old. Can anyone provide insight into what they've done in this situation and whether the samba rpms are now full versions? Most of what I have found on the web is dated around when samba4 just came out of beta through a little later. There doesn't seem to be much documentation on this subject on the web or through Amazon, so half of my time is spent searching instead of reading. A good source for reading would be appreciated as well. I can find plenty examples, just not definitive manuals. steve campbell ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Does anyone use tcp wrappers (hosts.allow/hosts.deny) anymore?
And, would you care strongly if it went away (or would you just migrate to something else)? I would care strongly as I use it at home to limit inbound ssh to just the IP addresses of my work machine. Setting up IPtables is more complicated which can be read as easier to get it wrong. The question become, Why get rid of it? It is small works well and works the same across many flavors of UNIX. I have not looked recently, but I would guess that the source code does not change very often. Just my 2cents. Bob - Phoenix, AZ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Samba4 questions
Am 18.04.2014 17:49, schrieb Steve Campbell: I'm a little new to Samba when used as more than just a simple place to mount a single user to a single share, but we're now getting ready to replace our Netware servers with Samba, and I guess that means Active Directory DC. As I read more and more about this beast, I keep finding pages that indicate the samba4 rpms supplied with the Centos/RH distribution are not the full version and that I should get them from either samba.org or certain other sources that provide complete versions. These pages are a little dated, but not that old. Can anyone provide insight into what they've done in this situation and whether the samba rpms are now full versions? Most of what I have found on the web is dated around when samba4 just came out of beta through a little later. snip One question: why do you need samba 4? We're running 3.6.9 (the current) on CentOS 6.5, in a moderately complex environment, and we connect to AD (and kerberos, I think - I don't normally touch samba). mark ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Samba4 questions
I'm not sure why I need that. As I stated, I'm a little new to Samba and AD. For some reason, my research suggests that to get AD, I need Samba 4. The person who manages our Netware, and who will be assuming the responsibility of managing all of this once installed wants to keep as much of the similarities between Samba and Netware as he/she can. We are replacing Netware with Samba as a file services device. steve On 4/22/2014 9:59 AM, m.r...@5-cent.us wrote: Am 18.04.2014 17:49, schrieb Steve Campbell: I'm a little new to Samba when used as more than just a simple place to mount a single user to a single share, but we're now getting ready to replace our Netware servers with Samba, and I guess that means Active Directory DC. As I read more and more about this beast, I keep finding pages that indicate the samba4 rpms supplied with the Centos/RH distribution are not the full version and that I should get them from either samba.org or certain other sources that provide complete versions. These pages are a little dated, but not that old. Can anyone provide insight into what they've done in this situation and whether the samba rpms are now full versions? Most of what I have found on the web is dated around when samba4 just came out of beta through a little later. snip One question: why do you need samba 4? We're running 3.6.9 (the current) on CentOS 6.5, in a moderately complex environment, and we connect to AD (and kerberos, I think - I don't normally touch samba). mark ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Samba4 questions
Please don't top post. Steve Campbell wrote: On 4/22/2014 9:59 AM, m.r...@5-cent.us wrote: Am 18.04.2014 17:49, schrieb Steve Campbell: I'm a little new to Samba when used as more than just a simple place to mount a single user to a single share, but we're now getting ready to replace our Netware servers with Samba, and I guess that means Active Directory DC. As I read more and more about this beast, I keep finding pages that indicate the samba4 rpms supplied with the Centos/RH distribution are not the full version and that I should get them from either samba.org or certain other sources that provide complete versions. These pages are a little dated, but not that old. Can anyone provide insight into what they've done in this situation and whether the samba rpms are now full versions? Most of what I have found on the web is dated around when samba4 just came out of beta through a little later. snip One question: why do you need samba 4? We're running 3.6.9 (the current) on CentOS 6.5, in a moderately complex environment, and we connect to AD (and kerberos, I think - I don't normally touch samba). I'm not sure why I need that. As I stated, I'm a little new to Samba and AD. For some reason, my research suggests that to get AD, I need Samba 4. The person who manages our Netware, and who will be assuming the responsibility of managing all of this once installed wants to keep as much of the similarities between Samba and Netware as he/she can. We are replacing Netware with Samba as a file services device. Well, Let me assure you that, as I said, we're running the version of samba that you get when you do yum install samba with CentOS 6.5, and we've been running for quite a number of years. mark your federal tax dollars at work, here* * I work for a federal contractor at a civilian sector US federal gov't organization. I do not speak for my organization, my employer, or the view out my window (as if they'd give me a window). ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Yum cannot download from local repository
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of James B. Byrne Sent: Monday, 21 April, 2014 17:28 To: centos@centos.org Subject: [CentOS] Yum cannot download from local repository ... snip in /root/RPMS/repos/Packages I have this: ll /root/RPMS/repos/Packages/http* -rw-rw-r--. 1 root root 1151252 Apr 21 16:15 /root/RPMS/repos/Packages/httpd-2.4.9-1.el6.x86_64.rpm -rw-rw-r--. 1 root root 3415444 Apr 21 16:15 /root/RPMS/repos/Packages/httpd-debuginfo-2.4.9-1.el6.x86_64.rpm -rw-rw-r--. 1 root root 186000 Apr 21 16:15 /root/RPMS/repos/Packages/httpd-devel-2.4.9-1.el6.x86_64.rpm -rw-rw-r--. 1 root root 3300912 Apr 21 16:15 /root/RPMS/repos/Packages/httpd-manual-2.4.9-1.el6.x86_64.rpm -rw-rw-r--. 1 root root 69784 Apr 21 16:15 /root/RPMS/repos/Packages/httpd-tools-2.4.9-1.el6.x86_64.rpm Yet when I try to install or upgrade using yum I get a download error: # yum --enablerepo=localfiles --nogpgcheck update httpd ... snip Resolving Dependencies -- Running transaction check --- Package httpd.x86_64 0:2.2.15-30.el6.centos will be updated -- Processing Dependency: httpd-mmn = 20051115 for package: 1:mod_ssl-2.2.15-30.el6.centos.x86_64 -- Processing Dependency: httpd = 2.2.15-30.el6.centos for package: 1:mod_ssl-2.2.15-30.el6.centos.x86_64 --- Package httpd.x86_64 0:2.4.9-1.el6 will be an update -- Running transaction check --- Package mod_ssl.x86_64 1:2.2.15-30.el6.centos will be updated --- Package mod_ssl.x86_64 1:2.4.9-1.el6 will be an update -- Finished Dependency Resolution Dependencies Resolved Package Arch VersionRepository Size Updating: httpd x86_64 2.4.9-1.el6localfiles 1.1 M Updating for dependencies: mod_ssl x86_64 1:2.4.9-1.el6 localfiles 79 k Transaction Summary Upgrade 2 Package(s) Total download size: 1.2 M Is this ok [y/N]: y Downloading Packages: Error Downloading Packages: httpd-2.4.9-1.el6.x86_64: failure: Packages/httpd-2.4.9-1.el6.x86_64.rpm from localfiles: [Errno 256] No more mirrors to try. 1:mod_ssl-2.4.9-1.el6.x86_64: failure: Packages/mod_ssl-2.4.9-1.el6.x86_64.rpm from localfiles: [Errno 256] No more mirrors to try. Any ideas on what I am doing wrong? James B. Byrnemailto:byrn...@harte-lyne.ca Jason, Your local file-based repo area is missing the 'mod_ssl' RPM that 'httpd' depends on (and has requested that be updated). Because you have excluded all the other repos where the 'mod_ssl' might be found (or perhaps they do not have the required version matching your httpd packages), the update fails because the dependenc(y)s cannot be downloaded. Cheers! Simba Engineering ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Samba4 questions
The person who manages our Netware, and who will be assuming the responsibility of managing all of this once installed wants to keep as much of the similarities between Samba and Netware as he/she can. Is that his/her same forward thinking that managed to keep you guys on netware for so long? His/her phone is ringing, its 1980, they want their technology back:) ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Samba4 questions
On Tue, Apr 22, 2014 at 9:07 AM, Steve Campbell campb...@cnpapers.com wrote: I'm not sure why I need that. As I stated, I'm a little new to Samba and AD. For some reason, my research suggests that to get AD, I need Samba 4. Do you want to replace AD or just interoperate with a Microsoft AD? Samba 3 will do the latter. -- Les Mikesell lesmikes...@gmail.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Samba4 questions
On 4/22/2014 2:13 PM, Les Mikesell wrote: On Tue, Apr 22, 2014 at 9:07 AM, Steve Campbell campb...@cnpapers.com wrote: I'm not sure why I need that. As I stated, I'm a little new to Samba and AD. For some reason, my research suggests that to get AD, I need Samba 4. Do you want to replace AD or just interoperate with a Microsoft AD? Samba 3 will do the latter. I'll tell you what we've got now, and how the new stuff will be used. I'm definitely not a windows type guy, and windows domains are confusing as H*** to me. With our current netware: We have 3 domains. They're really not domains but we have 3 separate companies here. Based on the netware logins, you get certain volumes mapped to windows drives. The netware login scripts do the mapping. We have opted not to get a new Windows Server and whatever Netware is now. So I guess from the Samba standpoint, the volumes are shares. This netware guy wants the ability to add new users to a domain that will have common mappings, and all the other stuff like specific printers attached. When the new user/machine is configured, the Windows domain is specified as well for that user. Now understand, I don't speak windows domains, and all I've researched about Samba and what he's wanting to do sort of points to a Samba AD DC to accomplish this. I've only created individual shares using Samba and mounted those shares manually to a windows machine. That all works great (on Windows 7, XP requires a remount during every boot up). The best thing I can come up with for now is to install Samba on a machine and see how far I can get with a test Windows machine. My original post was about the Samba rpms that come with Centos, and I think I got the answer that it's not fully complete due to copyright infringements. Thanks for all the help. One day I hope it all makes sense. steve ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Samba4 questions
Steve Campbell wrote: On 4/22/2014 2:13 PM, Les Mikesell wrote: On Tue, Apr 22, 2014 at 9:07 AM, Steve Campbell campb...@cnpapers.com wrote: I'm not sure why I need that. As I stated, I'm a little new to Samba and AD. For some reason, my research suggests that to get AD, I need Samba 4. Do you want to replace AD or just interoperate with a Microsoft AD? Samba 3 will do the latter. I'll tell you what we've got now, and how the new stuff will be used. I'm definitely not a windows type guy, and windows domains are confusing as H*** to me. With our current netware: We have 3 domains. They're really not domains but we have 3 separate companies here. Based on the netware logins, you get certain volumes mapped to windows drives. The netware login scripts do the mapping. We have opted not to get a new Windows Server and whatever Netware is now. So I guess from the Samba standpoint, the volumes are shares. This netware guy wants the ability to add new users to a domain that will have common mappings, and all the other stuff like specific printers attached. When the new user/machine is configured, the Windows domain is specified as well for that user. snip I'm nowhere near a samba guru, but I'd think that the AD info - that's a version of LDAP - could *say* what shares a given user mounts. Wait, as I think of it, this is percolating through: nahhh, what you do is have three workgroups, and what they user is on gets that workgroup's shares. mark ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Samba4 questions
On 4/22/2014 2:40 PM, m.r...@5-cent.us wrote: Steve Campbell wrote: On 4/22/2014 2:13 PM, Les Mikesell wrote: On Tue, Apr 22, 2014 at 9:07 AM, Steve Campbell campb...@cnpapers.com wrote: I'm not sure why I need that. As I stated, I'm a little new to Samba and AD. For some reason, my research suggests that to get AD, I need Samba 4. Do you want to replace AD or just interoperate with a Microsoft AD? Samba 3 will do the latter. I'll tell you what we've got now, and how the new stuff will be used. I'm definitely not a windows type guy, and windows domains are confusing as H*** to me. With our current netware: We have 3 domains. They're really not domains but we have 3 separate companies here. Based on the netware logins, you get certain volumes mapped to windows drives. The netware login scripts do the mapping. We have opted not to get a new Windows Server and whatever Netware is now. So I guess from the Samba standpoint, the volumes are shares. This netware guy wants the ability to add new users to a domain that will have common mappings, and all the other stuff like specific printers attached. When the new user/machine is configured, the Windows domain is specified as well for that user. snip I'm nowhere near a samba guru, but I'd think that the AD info - that's a version of LDAP - could *say* what shares a given user mounts. Wait, as I think of it, this is percolating through: nahhh, what you do is have three workgroups, and what they user is on gets that workgroup's shares. mark ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos But do the workgroups have their own login scripts on the server? That's sort of been the difference between using workgroups and domains, at least from any readings I've done so far. We actually break the workgroups/domains down into departmental groups. We're a newspaper corporation. We have 3 distinct newspapers here (by law, the newspapers must be distinct). Then there's the JOA that operates over the 3 newspapers that controls finance, production (press room and the like). Within each newspaper, there is sub-workgroups like copy desk, editors, etc that all get subsets of the mappings. Mark, thanks for the brain work. I'm not sure Samba 4 wouldn't be the better choice. I've subscribed to SerNet and downloaded the rpms. The server isn't loaded yet with the OS, so it's still planning time. And redundancy of any type hasn't been looked at yet, but I think Samba 4 is supposed to be more mature for that. I probably should join the samba list from here on. Just a matter of time before someone shouts OT, but the original post was not. steve ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Samba4 questions
On 4/22/2014 11:52 AM, Steve Campbell wrote: But do the workgroups have their own login scripts on the server? That's sort of been the difference between using workgroups and domains, at least from any readings I've done so far. We actually break the workgroups/domains down into departmental groups. workgroups are just groupings of peer hosts for the 'network neighborhood' view. nothing more or less. most importantly, they don't include any 'server' or centralized authentication, thats what Active Directory provides. In Microsoft's Active Directory, you put users and systems in OU (Organizational Units), and each OU can have group policies and those policies can specify login scripts, these can do things like map network drives for users. Presumably, Samba's implementation of AD offers a similar facility, but I don't think the domain management tools in Samba are anywhere near as well integrated or full featured as what you get with a Windows Server system. -- john r pierce 37N 122W somewhere on the middle of the left coast ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Samba4 questions
On 4/22/2014 3:02 PM, John R Pierce wrote: On 4/22/2014 11:52 AM, Steve Campbell wrote: But do the workgroups have their own login scripts on the server? That's sort of been the difference between using workgroups and domains, at least from any readings I've done so far. We actually break the workgroups/domains down into departmental groups. workgroups are just groupings of peer hosts for the 'network neighborhood' view. nothing more or less. most importantly, they don't include any 'server' or centralized authentication, thats what Active Directory provides. In Microsoft's Active Directory, you put users and systems in OU (Organizational Units), and each OU can have group policies and those policies can specify login scripts, these can do things like map network drives for users. Presumably, Samba's implementation of AD offers a similar facility, but I don't think the domain management tools in Samba are anywhere near as well integrated or full featured as what you get with a Windows Server system. Another samba 4 advantage, I think: You can load and use Windows Remote Server Administration Tools (RSAT) to manage the domains. How completely? Time will tell. steve ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Samba4 questions
Le 22/04/2014 21:21, Steve Campbell a écrit : Another samba 4 advantage, I think: You can load and use Windows Remote Server Administration Tools (RSAT) to manage the domains. How completely? Time will tell. I think you should wait for RHEL 7 (and then CentOS 7), which will be released soon (June ?). Perhaps, it well include samba4 without anything to build from source, and a rather recent one, 4.2 ? Better than to recompile to source, and the maintainers take care of the updates (security one are the most important). Alain ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Samba4 questions
On 4/22/2014 12:21 PM, Steve Campbell wrote: Another samba 4 advantage, I think: You can load and use Windows Remote Server Administration Tools (RSAT) to manage the domains. How completely? Time will tell. I'd read the EULA on those tools carefully. I would not be at all surprised that their useage is tied to having Microsoft Servers. TANSTAAFL. -- john r pierce 37N 122W somewhere on the middle of the left coast ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Samba4 questions
Le 22/04/2014 21:54, Reindl Harald a écrit : I think you should wait for RHEL 7 (and then CentOS 7), which will be released soon (June ?). Perhaps, it well include samba4 without anything to build from source not perhaps, for sure samba-4.1.0-3.el7.x86_64 samba-client-4.1.0-3.el7.x86_64 samba-common-4.1.0-3.el7.x86_64 samba-libs-4.1.0-3.el7.x86_64 I notice it is samba-common-4, so samba 4 will be the default in RHEL 7, not samba 3.6.x ? Alain ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] [OT] how do I remove a battery
I've got an MSI K9N Platinum MS 7250 VER 1.1 motherboard with a dead battery. The battery mounts vertically: http://www.cs.ndsu.nodak.edu/~hennebry/computer/battery.png To me, the tab on the right would seem to need moving. It does not want to move. I am reluctant to apply any more force than I already have without knowing how to apply it. How do I remove the battery? -- Michael henne...@web.cs.ndsu.nodak.edu SCSI is NOT magic. There are *fundamental technical reasons* why it is necessary to sacrifice a young goat to your SCSI chain now and then. -- John Woods ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] [OT] how do I remove a battery
On 2014-04-22 16:08, Michael Hennebry wrote: I've got an MSI K9N Platinum MS 7250 VER 1.1 motherboard with a dead battery. The battery mounts vertically: http://www.cs.ndsu.nodak.edu/~hennebry/computer/battery.png To me, the tab on the right would seem to need moving. It does not want to move. I am reluctant to apply any more force than I already have without knowing how to apply it. How do I remove the battery? Pliers? -- Mike Burger http://www.bubbanfriends.org It's always suicide-mission this, save-the-planet that. No one ever just stops by to say 'hi' anymore. --Colonel Jack O'Neill, SG1 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] [OT] how do I remove a battery
Yup, looks like that tab needs moved out of the way and the battery removed. Down seems to be the shortest path to my eyes. However, I could see why one might also try right. --Blake Michael Hennebry wrote the following on 4/22/2014 3:08 PM: I've got an MSI K9N Platinum MS 7250 VER 1.1 motherboard with a dead battery. The battery mounts vertically: http://www.cs.ndsu.nodak.edu/~hennebry/computer/battery.png To me, the tab on the right would seem to need moving. It does not want to move. I am reluctant to apply any more force than I already have without knowing how to apply it. How do I remove the battery? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Samba4 questions
Le 22/04/2014 22:14, Reindl Harald a écrit : not perhaps, for sure samba-4.1.0-3.el7.x86_64 samba-client-4.1.0-3.el7.x86_64 samba-common-4.1.0-3.el7.x86_64 samba-libs-4.1.0-3.el7.x86_64 I notice it is samba-common-4, so samba 4 will be the default in RHEL 7, not samba 3.6.x? samba 3.x is dead Fedora did the swicth to 4.x long ago RHEL7 is based on Fedora 19 / Fedora 20 Thanks for the information. Samba 4 domains are a very different beast than samba 3.x ones (NT4 style). A samba 4 (AD style) includes its own DNS, its own LDAP etc... Alain ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Samba4 questions
On Tue, Apr 22, 2014 at 2:02 PM, John R Pierce pie...@hogranch.com wrote: On 4/22/2014 11:52 AM, Steve Campbell wrote: But do the workgroups have their own login scripts on the server? That's sort of been the difference between using workgroups and domains, at least from any readings I've done so far. We actually break the workgroups/domains down into departmental groups. workgroups are just groupings of peer hosts for the 'network neighborhood' view. nothing more or less. most importantly, they don't include any 'server' or centralized authentication, thats what Active Directory provides. Windows had a concept of 'domain controller' before AD, and samba 3.x should be able to emulate that for one domain and run a logon script. It might be cheaper to run 3 Centos instances (or VMs) than Netware or AD (or learn how to manage the AD emulation in samba 4). SME server used to be pretty good at that sort of thing (small business server). You could just add users and put them in groups with the web interface and set up file shares by group. The ClearOS version might be more up to date, though.The old lanman authentication wouldn't be as secure as AD, though. -- Les Mikesell lesmikes...@gmail.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] [OT] how do I remove a battery
On Tue, Apr 22, 2014 at 04:17:30PM -0400, Mike Burger wrote: Pliers? I would suggest a 22oz claw hammer and a more appropriate venue. John -- Be always at war with your vices, at peace with your neighbors, and let each new year find you a better man. -- Benjamin Franklin pgpG1R7NTo0bY.pgp Description: PGP signature ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] [OT] how do I remove a battery
On Tue, Apr 22, 2014 at 4:18 PM, Blake Hudson bl...@ispn.net wrote: Yup, looks like that tab needs moved out of the way and the battery removed. Down seems to be the shortest path to my eyes. However, I could see why one might also try right. How does it look from the backside? --Blake Michael Hennebry wrote the following on 4/22/2014 3:08 PM: I've got an MSI K9N Platinum MS 7250 VER 1.1 motherboard with a dead battery. The battery mounts vertically: http://www.cs.ndsu.nodak.edu/~hennebry/computer/battery.png To me, the tab on the right would seem to need moving. It does not want to move. I am reluctant to apply any more force than I already have without knowing how to apply it. How do I remove the battery? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Samba4 questions
On Tue, Apr 22, 2014 at 3:18 PM, Alain Péan alain.p...@lpn.cnrs.fr wrote: Thanks for the information. Samba 4 domains are a very different beast than samba 3.x ones (NT4 style). A samba 4 (AD style) includes its own DNS, its own LDAP etc... A lot of which is irrelevant if you just have one server, serving file shares. -- Les Mikesell lesmikes...@gmail.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] [OT] how do I remove a battery
Michael Hennebry wrote: I've got an MSI K9N Platinum MS 7250 VER 1.1 motherboard with a dead battery. The battery mounts vertically: http://www.cs.ndsu.nodak.edu/~hennebry/computer/battery.png To me, the tab on the right would seem to need moving. It does not want to move. I am reluctant to apply any more force than I already have without knowing how to apply it. How do I remove the battery? Dumb question: have you tried pushing the tab *down*? Maybe it'll release, then slide up? mark ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] [OT] how do I remove a battery
On Tue, Apr 22, 2014 at 03:08:29PM -0500, Michael Hennebry wrote: I've got an MSI K9N Platinum MS 7250 VER 1.1 motherboard with a dead battery. The battery mounts vertically: http://www.cs.ndsu.nodak.edu/~hennebry/computer/battery.png To me, the tab on the right would seem to need moving. It does not want to move. I am reluctant to apply any more force than I already have without knowing how to apply it. How do I remove the battery? 'I replaced a battery re3cently on a board with a similar battery holder. I just bent the tab that comes up over the edge of the battery and pulled out the battery then bgent it back and pushed a new batteryh in, using some pressure on the battery to flex the tab. when I was done it didn't look quite straight, but it worked. Fred -- Fred Smith -- fre...@fcshome.stoneham.ma.us - Show me your ways, O LORD, teach me your paths; Guide me in your truth and teach me, for you are God my Savior, And my hope is in you all day long. -- Psalm 25:4-5 (NIV) ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Samba4 questions
On 4/22/2014 1:31 PM, Les Mikesell wrote: On Tue, Apr 22, 2014 at 3:18 PM, Alain Péanalain.p...@lpn.cnrs.fr wrote: Thanks for the information. Samba 4 domains are a very different beast than samba 3.x ones (NT4 style). A samba 4 (AD style) includes its own DNS, its own LDAP etc... A lot of which is irrelevant if you just have one server, serving file shares. active directory is relevant if you have more than a couple users, logging into desktop Windows machines, who want to connect to your server. without that, you get to muck about with smbpasswd on a per user basis on the samba server, and their desktop passwords and smbpasswords are never in sync. with active directory, you can manage the user access from a central location, and potentially manage desktop policies (security policies, login scripts, etc etc), even push application software installs via GPO's. note I said potentially as I don't know how much GPO support Samba4's AD implementation has. -- john r pierce 37N 122W somewhere on the middle of the left coast ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Samba4 questions
On Tue, Apr 22, 2014 at 4:10 PM, John R Pierce pie...@hogranch.com wrote: A lot of which is irrelevant if you just have one server, serving file shares. active directory is relevant if you have more than a couple users, logging into desktop Windows machines, who want to connect to your server. without that, you get to muck about with smbpasswd on a per user basis on the samba server, and their desktop passwords and smbpasswords are never in sync. I never actually used it that way, but I thought that you were supposed to be able to change your password from windows when using samba as a domain (not AD) controller. And there was some support for making that change your linux password to match. with active directory, you can manage the user access from a central location, and potentially manage desktop policies (security policies, login scripts, etc etc), even push application software installs via GPO's. note I said potentially as I don't know how much GPO support Samba4's AD implementation has. You could also use samba with LDAP accounts. ClearOS might make that work out of the box but otherwise it is painful to set up. But going forward, finding a packaged samba4 that works is probably the best approach. -- Les Mikesell lesmikes...@gmail.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Samba4 questions
On 4/22/2014 2:25 PM, Les Mikesell wrote: I never actually used it that way, but I thought that you were supposed to be able to change your password from windows when using samba as a domain (not AD) controller. And there was some support for making that change your linux password to match. yeah, you're right, NT4 domains could do that.been quite a long time since I've used those. I'm not sure win7/8 professional are happy about joining a NT4 Domain, at least not without a bunch of tinkering with security policies. -- john r pierce 37N 122W somewhere on the middle of the left coast ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] strange behavior with cron
Do somebody had this situation where an Email is sent every minutes to a specific user named michel. These emails are incoming from:Root with an header like: Cron michel@donais ~/.h5siP /dev/null 2/dev/null; and a text message as: /bin/sh: no: command not found There is a cron task named h5siP in the path of this user; he is the only one affected by this situation. I found that this script have a relation with an other one named as R5Agz If I remove the cron job h5siP from the cron listing and I restart cron the script is back a few minutes later. .h5siP-p and .R5Agz-p are located in dev/shm/ and both contain a process number as 23374 and 35678 .R5Agz and .h5siP can be found in a user named michel repertory wich the one who receive a lot of emails .h5siP is also located in /temp The only changes we made to our system was yesterday. We made an automatic yum updte of three programs ; java 1.6. kpartx and device-mapper-multipath. I don't know if there is a relation or do I face a kind of virus? I hope somebody can help --- Michel Donais ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] strange behavior with cron
On Tue, Apr 22, 2014 at 7:40 PM, Michel Donais don...@telupton.com wrote: Do somebody had this situation where an Email is sent every minutes to a specific user named michel. These emails are incoming from:Root with an header like: Cron michel@donais ~/.h5siP /dev/null 2/dev/null; and a text message as: /bin/sh: no: command not found There is a cron task named h5siP in the path of this user; he is the only one affected by this situation. I found that this script have a relation with an other one named as R5Agz Did this user intentionally set up something that automatically recreates cronjobs? If I remove the cron job h5siP from the cron listing and I restart cron the script is back a few minutes later. If a person was to guess blindly, they might suspect that a nefarious person has compromised your server and set a cronjob. Without knowing more about your set up and how you have protected your servers (if SSH is open to the world, has SSH been brute forced, who has last logged in, etc), it will be tough to give good answers. Years ago, I found remnants of cronjobs in /var/spool/cron/ on a shared web server that was compromised (and subsequently cleaned up). By the sounds of it, those files are user cronjobs which will be in the cron spool. .h5siP-p and .R5Agz-p are located in dev/shm/ and both contain a process number as 23374 and 35678 .R5Agz and .h5siP can be found in a user named michel repertory wich the one who receive a lot of emails .h5siP is also located in /temp The only changes we made to our system was yesterday. We made an automatic yum updte of three programs ; java 1.6. kpartx and device-mapper-multipath. I don't know if there is a relation or do I face a kind of virus? For starters, you need to find out what those cronjobs are doing -- that will indicate the urgency. Use strace to connect to those processes. strace -p pid# And from there, determine what is creating that file. You would think that whatever it is, would routinely check for the file to exist and you could catch it by grepping the output from lsof. I hope somebody can help --- Michel Donais ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos -- ---~~.~~--- Mike // SilverTip257 // ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] [OT] how do I remove a battery
On 04/23/14 02:08, Michael Hennebry wrote: I've got an MSI K9N Platinum MS 7250 VER 1.1 motherboard with a dead battery. The battery mounts vertically: http://www.cs.ndsu.nodak.edu/~hennebry/computer/battery.png To me, the tab on the right would seem to need moving. It does not want to move. I am reluctant to apply any more force than I already have without knowing how to apply it. How do I remove the battery? 1- why not consider contacting MSI and ask? http://us.msi.com/about/contact-us/ 2- try rotating tab and battery? -- peace out. in a world with out fences, who needs gates. tc.hago. g . ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] strange behavior with cron
Did this user intentionally set up something that automatically recreates cronjobs? No, he cannot do such a task. Yesterday, our business was closed; so no body there. This morning we found at 7:30 am we found 826 emails in his mailbox. For one a minute this process was started around 13.76 hours sooner wich mean this process was created round 17:45 monday at the end of the afternoon. Strange situation --- Michel Donais ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] [OT] how do I remove a battery
Looking at the picture, does the tab toggle to the right. There is a slot that leads me to believe that if you pushed the tab to the righ, it might release the battery. john On 4/22/2014 9:32 PM, g wrote: On 04/23/14 02:08, Michael Hennebry wrote: I've got an MSI K9N Platinum MS 7250 VER 1.1 motherboard with a dead battery. The battery mounts vertically: http://www.cs.ndsu.nodak.edu/~hennebry/computer/battery.png To me, the tab on the right would seem to need moving. It does not want to move. I am reluctant to apply any more force than I already have without knowing how to apply it. How do I remove the battery? 1- why not consider contacting MSI and ask? http://us.msi.com/about/contact-us/ 2- try rotating tab and battery? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Module building and signing
In order to get Beats Audio (2.1 channel sound) working on my HP k025dx laptop running CentOS 6.5, I need to re-assign some of the pins on the Intel HDA soundcard - model 92HD91BXX. This is trivial in newer distros for two reasons: 1. the 'hda-jack-retask' application compiles and runs on newer distros 2. the snd-hda-intel modules on newer distros are compiled with CONFIG_SND_HDA_RECONFIG=y Even if I could get 'hda-jack-retask' to compile, I'd still need the module built with CONFIG_SND_HDA_RECONFIG=y. So I followed the 2 wiki articles to install full kernel sources and I re-compiled the module. When loading the new module, I get the following error: FATAL: Error inserting snd_hda_intel (/lib/modules/2.6.32-431.11.2.el6.x86_64/extra/snd-hda-intel.ko): Invalid module format I run 'file' on the new and original modules and they seem identical: /lib/modules/2.6.32-431.11.2.el6.x86_64/extra/snd-hda-intel.ko: ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped /lib/modules/2.6.32-431.11.2.el6.x86_64/kernel/sound/pci/hda/snd-hda-intel.ko: ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped My next attempt was to compile an entire kernel, and then copy the new module over to the original kernel. Inserting the module give the following: Module signed with unknown public key ksign: module signed with unknown public key - signature keyid: 3000b37e8a34083d ver=4 I googled for a fix and tried two methods of removing the module signing (neither worked): objcopy -R .note.module_sig snd-hda-intel.ko objcopy -R .module_sig snd-hda-intel.ko (I did get finally get the audio pins re-mapped, but I had to resort to using my newly-compiled kernel as well). Should kmod fix my issues? Thanks, Chris ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
