[CentOS-virt] Traffic Accounting KVM vs Xen

2013-08-15 Thread Robert Dinse

  We've been using CentOS 6.4 for both host and KVM guests for our own 
internal uses here, ftp server, mail servers, web server, etc.

  I am getting to where we want to offer virtual servers for lease but to
do so we need some method of measuring and/or limiting traffic to individual
guests.

  I am wondering what others are using for this purpose?  I know that you
can look at traffic stats on the bridge on the host machine but that 
information is lost when the machine is rebooted.  I'm wondering if there is
any software that databases that information on an ongoing basis and does not
lost information across reboots?

  Second question, what are the advantaged and disadvantages of KVM verses
Xen?  I played with Xen back when I had CentOS 5, but find KVM easier to work
with and not much difference in performance.

-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-
  Eskimo North Linux Friendly Internet Access, Shell Accounts, and Hosting.
Knowledgeable human assistance, not telephone trees or script readers.
  See our web site: http://www.eskimo.com/ (206) 812-0051 or (800) 246-6874.
___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


Re: [CentOS-virt] Traffic Accounting KVM vs Xen

2013-08-15 Thread Mihamina Rakotomandimby

On 2013-08-16 02:24, Robert Dinse wrote:

   I am getting to where we want to offer virtual servers for lease but to
do so we need some method of measuring and/or limiting traffic to individual
guests.

   I am wondering what others are using for this purpose?  I know that you
can look at traffic stats on the bridge on the host machine but that
information is lost when the machine is rebooted.  I'm wondering if there is
any software that databases that information on an ongoing basis and does not
lost information across reboots?


What would be your policies when reaching the quota?
Depending on that, you could take some solution or another.
In a previous work, we used AAA with Coova and FreeRADIUS, but you can 
also just use iptables.


--
RMA.

___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


[CentOS-es] email

2013-08-15 Thread VICTOR MANUEL VARGAS GONZALEZ
Buenos Dias 

una pregunta como hago para que puedan enviar email desde un telefono de nextel 
ya configure el telefono y se le llegan los email
pero cuando quiero enviar uno no salen , mi servidor lo tengo configurado para 
que las ip que esten en el archivo access tengan acceso a poder enviar , pero 
no se que ip o como poner a nextel para que puedan enviar mis usuarios 
 
gracias
  
___
CentOS-es mailing list
CentOS-es@centos.org
http://lists.centos.org/mailman/listinfo/centos-es


Re: [CentOS-es] email

2013-08-15 Thread Ernesto Pérez Estévez, Ing.
On 08/15/2013 11:32 AM, VICTOR MANUEL VARGAS GONZALEZ wrote:
 Buenos Dias 
 
 una pregunta como hago para que puedan enviar email desde un telefono de 
 nextel ya configure el telefono y se le llegan los email
 pero cuando quiero enviar uno no salen , mi servidor lo tengo configurado 
 para que las ip que esten en el archivo access tengan acceso a poder enviar , 
 pero no se que ip o como poner a nextel para que puedan enviar mis usuarios 

implementa saslauth


-- 

Ernesto Pérez Estévez
Movi: 09 9924 6504
http://EcuaLinux.com
___
CentOS-es mailing list
CentOS-es@centos.org
http://lists.centos.org/mailman/listinfo/centos-es


[CentOS-es] AYUDA CON PROXY CENTOS Y FIREWALL SHOREWALL

2013-08-15 Thread Rolando Jesus Nuñez Tarazona
BUENAS PARA SOLICITARLE SU AYUDA A TODA LA COMUNIDAD HE INSTALADO UN SERVIDOR 
PROXY CON FIREWALL SHOREWALL TODO BIEN PERO CUANDO QUIERO ENVIAR Y RECIBIR 
CORREO DE MICROSOFT OUTLOOK 2007 NO CONECTA ME SALE ERROR DE CONEXIÓNSI PODRÍAN 
AYUDARME GRACIAS



ROLANDO JESÚS NUÑEZ TARAZONAPERU

 Date: Thu, 15 Aug 2013 12:11:09 -0500
 From: cen...@ecualinux.com
 To: centos-es@centos.org
 Subject: Re: [CentOS-es] email
 
 On 08/15/2013 11:32 AM, VICTOR MANUEL VARGAS GONZALEZ wrote:
  Buenos Dias 
  
  una pregunta como hago para que puedan enviar email desde un telefono de 
  nextel ya configure el telefono y se le llegan los email
  pero cuando quiero enviar uno no salen , mi servidor lo tengo configurado 
  para que las ip que esten en el archivo access tengan acceso a poder enviar 
  , pero no se que ip o como poner a nextel para que puedan enviar mis 
  usuarios 
 
 implementa saslauth
 
 
 -- 
 
 Ernesto Pérez Estévez
 Movi: 09 9924 6504
 http://EcuaLinux.com
 ___
 CentOS-es mailing list
 CentOS-es@centos.org
 http://lists.centos.org/mailman/listinfo/centos-es
  
___
CentOS-es mailing list
CentOS-es@centos.org
http://lists.centos.org/mailman/listinfo/centos-es


Re: [CentOS-es] AYUDA CON PROXY CENTOS Y FIREWALL SHOREWALL

2013-08-15 Thread Luis Terrel
Verifica en tu firewall las reglas de salida y entrada de la lan para los 
puertos SMTP IMAP POP3.

 From: rolandojesu...@hotmail.com
 To: centos-es@centos.org
 Date: Thu, 15 Aug 2013 12:25:38 -0500
 Subject: [CentOS-es] AYUDA CON PROXY CENTOS Y FIREWALL SHOREWALL
 
 BUENAS PARA SOLICITARLE SU AYUDA A TODA LA COMUNIDAD HE INSTALADO UN SERVIDOR 
 PROXY CON FIREWALL SHOREWALL TODO BIEN PERO CUANDO QUIERO ENVIAR Y RECIBIR 
 CORREO DE MICROSOFT OUTLOOK 2007 NO CONECTA ME SALE ERROR DE CONEXIÓNSI 
 PODRÍAN AYUDARME GRACIAS
 
 
 
 ROLANDO JESÚS NUÑEZ TARAZONAPERU
 
  Date: Thu, 15 Aug 2013 12:11:09 -0500
  From: cen...@ecualinux.com
  To: centos-es@centos.org
  Subject: Re: [CentOS-es] email
  
  On 08/15/2013 11:32 AM, VICTOR MANUEL VARGAS GONZALEZ wrote:
   Buenos Dias 
   
   una pregunta como hago para que puedan enviar email desde un telefono de 
   nextel ya configure el telefono y se le llegan los email
   pero cuando quiero enviar uno no salen , mi servidor lo tengo configurado 
   para que las ip que esten en el archivo access tengan acceso a poder 
   enviar , pero no se que ip o como poner a nextel para que puedan enviar 
   mis usuarios 
  
  implementa saslauth
  
  
  -- 
  
  Ernesto Pérez Estévez
  Movi: 09 9924 6504
  http://EcuaLinux.com
  ___
  CentOS-es mailing list
  CentOS-es@centos.org
  http://lists.centos.org/mailman/listinfo/centos-es
 
 ___
 CentOS-es mailing list
 CentOS-es@centos.org
 http://lists.centos.org/mailman/listinfo/centos-es
  
___
CentOS-es mailing list
CentOS-es@centos.org
http://lists.centos.org/mailman/listinfo/centos-es


Re: [CentOS-es] AYUDA CON PROXY CENTOS Y FIREWALL SHOREWALL

2013-08-15 Thread Jesús Rudas Simmonds
Ip_forwarding = 1


Jesús Rudas Simmonds
Móvil 57-3157482877
Enviado desde mi iPhone

El 15/08/2013, a las 12:40 p.m., Luis Terrel cantrel...@hotmail.com escribió:

 Verifica en tu firewall las reglas de salida y entrada de la lan para los 
 puertos SMTP IMAP POP3.
 
 From: rolandojesu...@hotmail.com
 To: centos-es@centos.org
 Date: Thu, 15 Aug 2013 12:25:38 -0500
 Subject: [CentOS-es] AYUDA CON PROXY CENTOS Y FIREWALL SHOREWALL
 
 BUENAS PARA SOLICITARLE SU AYUDA A TODA LA COMUNIDAD HE INSTALADO UN 
 SERVIDOR PROXY CON FIREWALL SHOREWALL TODO BIEN PERO CUANDO QUIERO ENVIAR Y 
 RECIBIR CORREO DE MICROSOFT OUTLOOK 2007 NO CONECTA ME SALE ERROR DE 
 CONEXIÓNSI PODRÍAN AYUDARME GRACIAS
 
 
 
 ROLANDO JESÚS NUÑEZ TARAZONAPERU
 
 Date: Thu, 15 Aug 2013 12:11:09 -0500
 From: cen...@ecualinux.com
 To: centos-es@centos.org
 Subject: Re: [CentOS-es] email
 
 On 08/15/2013 11:32 AM, VICTOR MANUEL VARGAS GONZALEZ wrote:
 Buenos Dias 
 
 una pregunta como hago para que puedan enviar email desde un telefono de 
 nextel ya configure el telefono y se le llegan los email
 pero cuando quiero enviar uno no salen , mi servidor lo tengo configurado 
 para que las ip que esten en el archivo access tengan acceso a poder 
 enviar , pero no se que ip o como poner a nextel para que puedan enviar 
 mis usuarios
 
 implementa saslauth
 
 
 -- 
 
 Ernesto Pérez Estévez
 Movi: 09 9924 6504
 http://EcuaLinux.com
 ___
 CentOS-es mailing list
 CentOS-es@centos.org
 http://lists.centos.org/mailman/listinfo/centos-es
 
 ___
 CentOS-es mailing list
 CentOS-es@centos.org
 http://lists.centos.org/mailman/listinfo/centos-es
 
 ___
 CentOS-es mailing list
 CentOS-es@centos.org
 http://lists.centos.org/mailman/listinfo/centos-es
___
CentOS-es mailing list
CentOS-es@centos.org
http://lists.centos.org/mailman/listinfo/centos-es


[CentOS-es] AYUDA CON PROXY CENTOS Y FIREWALL SHOREWALL

2013-08-15 Thread Rolando Jesus Nuñez Tarazona
BUENAS AHI LE ENVIO EL ARCHIVO DEL SHOREWALL SI PORQUE TODO ESTA BIEN SOLO NO 
SALE EL OUTLOOK.


BACH. ING. ROLANDO JESÚS NUÑEZ TARAZONAPROGRAMA NACIONAL DE ALIMENTACIÓN 
ESCOLAR - QALI WARMA
UNIDAD DE ADMINISTRACIÓN PROFESIONAL ADMINISTRATIVO – SOPORTE SIAF- SP
ESPECIALISTA SIAF - SIGA

 From: jrud...@gmail.com
 Date: Thu, 15 Aug 2013 12:50:16 -0500
 To: centos-es@centos.org
 Subject: Re: [CentOS-es] AYUDA CON PROXY CENTOS Y FIREWALL SHOREWALL
 
 Ip_forwarding = 1
 
 
 Jesús Rudas Simmonds
 Móvil 57-3157482877
 Enviado desde mi iPhone
 
 El 15/08/2013, a las 12:40 p.m., Luis Terrel cantrel...@hotmail.com 
 escribió:
 
  Verifica en tu firewall las reglas de salida y entrada de la lan para los 
  puertos SMTP IMAP POP3.
  
  From: rolandojesu...@hotmail.com
  To: centos-es@centos.org
  Date: Thu, 15 Aug 2013 12:25:38 -0500
  Subject: [CentOS-es] AYUDA CON PROXY CENTOS Y FIREWALL SHOREWALL
  
  BUENAS PARA SOLICITARLE SU AYUDA A TODA LA COMUNIDAD HE INSTALADO UN 
  SERVIDOR PROXY CON FIREWALL SHOREWALL TODO BIEN PERO CUANDO QUIERO ENVIAR 
  Y RECIBIR CORREO DE MICROSOFT OUTLOOK 2007 NO CONECTA ME SALE ERROR DE 
  CONEXIÓNSI PODRÍAN AYUDARME GRACIAS
  
  
  
  ROLANDO JESÚS NUÑEZ TARAZONAPERU
  
  Date: Thu, 15 Aug 2013 12:11:09 -0500
  From: cen...@ecualinux.com
  To: centos-es@centos.org
  Subject: Re: [CentOS-es] email
  
  On 08/15/2013 11:32 AM, VICTOR MANUEL VARGAS GONZALEZ wrote:
  Buenos Dias 
  
  una pregunta como hago para que puedan enviar email desde un telefono de 
  nextel ya configure el telefono y se le llegan los email
  pero cuando quiero enviar uno no salen , mi servidor lo tengo 
  configurado para que las ip que esten en el archivo access tengan acceso 
  a poder enviar , pero no se que ip o como poner a nextel para que puedan 
  enviar mis usuarios
  
  implementa saslauth
  
  
  -- 
  
  Ernesto Pérez Estévez
  Movi: 09 9924 6504
  http://EcuaLinux.com
  ___
  CentOS-es mailing list
  CentOS-es@centos.org
  http://lists.centos.org/mailman/listinfo/centos-es
  
  ___
  CentOS-es mailing list
  CentOS-es@centos.org
  http://lists.centos.org/mailman/listinfo/centos-es
  
  ___
  CentOS-es mailing list
  CentOS-es@centos.org
  http://lists.centos.org/mailman/listinfo/centos-es
 ___
 CentOS-es mailing list
 CentOS-es@centos.org
 http://lists.centos.org/mailman/listinfo/centos-es
  ___
CentOS-es mailing list
CentOS-es@centos.org
http://lists.centos.org/mailman/listinfo/centos-es


Re: [CentOS-es] manejar espacios en blanco en el nombre de usuario

2013-08-15 Thread Fermin Francisco
Gracias David, me han servido de mucho tus consejos!!


 
JOSE FERMIN



 De: David González Romero dgrved...@gmail.com
Para: centos-es@centos.org; Fermin Francisco abc...@yahoo.com 
Enviado: Miércoles, 14 de agosto, 2013 8:30 A.M.
Asunto: Re: [CentOS-es] manejar espacios en blanco en el nombre de usuario
 


Hijole... la solucion la tiene Winrus Creas el usuario fermin.perez pero lo 
muestras como Fermin Perez. En tu samba fermin.perez; al final el usuario ve 
fermin perez, usa la interface de los iconitos de windows para el perfil local, 
así solo da click sobre el nombre y luego el passwd.

Suerte,
David




El 12 de agosto de 2013 21:01, Fermin Francisco abc...@yahoo.com escribió:

Buenas noches!!

He instalado Centos 6.4 lo he configurado para que sea con controlado de 
dominio del Active Directory con Samba 4.

Todo va a la perfeccion hasta que decide intentar crear un un usuario en el 
Active Directory llamado: fermin francisco.

Resulta que cuando intento loguearme con M$ Windows 7 me dice lo siguiente:  
the user name or password

En realidad el usuario es el correcto y la contrasena tambien es la correcta.

Entonces decidi hacer una prueba, la cual fue que sustitui el espacio en 
blanco del usuario lo renombre de la siguiente manera: 
fermin-francisco. Despues de este cambio fue todo perfecto, me pude loguear 
con ese usuario.

Pero lo que me gustaria es poder crear usuarios que contengan espacios en 
blanco entre su nombre y apellido: ejemplo juan perez, ya que esa forma es la 
manera natural de una persona escribir su nombre completo y no juan_perez.

Alguien ha podido solucionar esa situacion??


 
JOSE FERMIN
___
CentOS-es mailing list
CentOS-es@centos.org
http://lists.centos.org/mailman/listinfo/centos-es

___
CentOS-es mailing list
CentOS-es@centos.org
http://lists.centos.org/mailman/listinfo/centos-es


Re: [CentOS-es] AYUDA CON PROXY CENTOS Y FIREWALL SHOREWALL

2013-08-15 Thread angel jauregui
creo que olvidaste adjuntar el archivo...

Pero de forma generica te recomiendo hagas algunas reviciones a tus reglas:

1- Manten abiertos los puertos: 25 (smtp), 110 (pop), 143(imap) y busca el
valor del puerto para esos mismo servicios pero en calidad de seguro
(smtps, pops, imaps).

2- Activar el ip_forwarding en:
*shell# echo 1 /proc/sys/net/ipv4/ip_forward*
*
*
3- Activar tu firewall y verfica tu LOG.

Haz prueba y checa el logo.

Saludos !


El 15 de agosto de 2013 14:02, Rolando Jesus Nuñez Tarazona 
rolandojesu...@hotmail.com escribió:

 BUENAS AHI LE ENVIO EL ARCHIVO DEL SHOREWALL SI PORQUE TODO ESTA BIEN SOLO
 NO SALE EL OUTLOOK.


 BACH. ING. ROLANDO JESÚS NUÑEZ TARAZONAPROGRAMA NACIONAL DE ALIMENTACIÓN
 ESCOLAR - QALI WARMA
 UNIDAD DE ADMINISTRACIÓN PROFESIONAL ADMINISTRATIVO – SOPORTE SIAF- SP
 ESPECIALISTA SIAF - SIGA

  From: jrud...@gmail.com
  Date: Thu, 15 Aug 2013 12:50:16 -0500
  To: centos-es@centos.org
  Subject: Re: [CentOS-es] AYUDA CON PROXY CENTOS Y FIREWALL SHOREWALL
 
  Ip_forwarding = 1
 
 
  Jesús Rudas Simmonds
  Móvil 57-3157482877
  Enviado desde mi iPhone
 
  El 15/08/2013, a las 12:40 p.m., Luis Terrel cantrel...@hotmail.com
 escribió:
 
   Verifica en tu firewall las reglas de salida y entrada de la lan para
 los puertos SMTP IMAP POP3.
  
   From: rolandojesu...@hotmail.com
   To: centos-es@centos.org
   Date: Thu, 15 Aug 2013 12:25:38 -0500
   Subject: [CentOS-es] AYUDA CON PROXY CENTOS Y FIREWALL SHOREWALL
  
   BUENAS PARA SOLICITARLE SU AYUDA A TODA LA COMUNIDAD HE INSTALADO UN
 SERVIDOR PROXY CON FIREWALL SHOREWALL TODO BIEN PERO CUANDO QUIERO ENVIAR Y
 RECIBIR CORREO DE MICROSOFT OUTLOOK 2007 NO CONECTA ME SALE ERROR DE
 CONEXIÓNSI PODRÍAN AYUDARME GRACIAS
  
  
  
   ROLANDO JESÚS NUÑEZ TARAZONAPERU
  
   Date: Thu, 15 Aug 2013 12:11:09 -0500
   From: cen...@ecualinux.com
   To: centos-es@centos.org
   Subject: Re: [CentOS-es] email
  
   On 08/15/2013 11:32 AM, VICTOR MANUEL VARGAS GONZALEZ wrote:
   Buenos Dias
  
   una pregunta como hago para que puedan enviar email desde un
 telefono de nextel ya configure el telefono y se le llegan los email
   pero cuando quiero enviar uno no salen , mi servidor lo tengo
 configurado para que las ip que esten en el archivo access tengan acceso a
 poder enviar , pero no se que ip o como poner a nextel para que puedan
 enviar mis usuarios
  
   implementa saslauth
  
  
   --
  
   Ernesto Pérez Estévez
   Movi: 09 9924 6504
   http://EcuaLinux.com
   ___
   CentOS-es mailing list
   CentOS-es@centos.org
   http://lists.centos.org/mailman/listinfo/centos-es
  
   ___
   CentOS-es mailing list
   CentOS-es@centos.org
   http://lists.centos.org/mailman/listinfo/centos-es
  
   ___
   CentOS-es mailing list
   CentOS-es@centos.org
   http://lists.centos.org/mailman/listinfo/centos-es
  ___
  CentOS-es mailing list
  CentOS-es@centos.org
  http://lists.centos.org/mailman/listinfo/centos-es


 ___
 CentOS-es mailing list
 CentOS-es@centos.org
 http://lists.centos.org/mailman/listinfo/centos-es




-- 
M.S.I. Angel Haniel Cantu Jauregui.

Celular: (011-52-1)-899-871-17-22
E-Mail: angel.ca...@sie-group.net
Web: http://www.sie-group.net/
Cd. Reynosa Tamaulipas.
___
CentOS-es mailing list
CentOS-es@centos.org
http://lists.centos.org/mailman/listinfo/centos-es


[CentOS-es] Modificar permisos carpeta compartida de samba en Win7

2013-08-15 Thread Fermin Francisco
Buenas noches!!

Tengo una carpeta compartida con Centos mediante samba4, y quiero a esta 
carpeta cambiarle algunos permisos desde Win7 haciendo lo siguiente:

Clic derecho sobre la carpeta compartida y luego haciendo clic en propiedades. 
Cuando hago clic en la pestaña seguridad me aparece lo siguiente: 

the requested security information is either unavailable or cannot be 
displayed


Alguno de ustedes habrá resuelto esta situación??


 
JOSE FERMIN
___
CentOS-es mailing list
CentOS-es@centos.org
http://lists.centos.org/mailman/listinfo/centos-es


[CentOS] yum-plugin-priorities

2013-08-15 Thread Timothy Murphy
If I add
  priority=1
to [updates] in CentOS-Base.repo
when I run sudo yum update I get the warning
  66 packages excluded due to repository priority protections

This does not seem to have any adverse effect,
but what exactly does it mean?


-- 
Timothy Murphy  
e-mail: gayleard /at/ eircom.net
tel: +353-86-2336090, +353-1-2842366
School of Mathematics, Trinity College, Dublin 2, Ireland


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] yum-plugin-priorities

2013-08-15 Thread Clint Dilks
On Thu, Aug 15, 2013 at 9:13 PM, Timothy Murphy gayle...@alice.it wrote:

 If I add
   priority=1
 to [updates] in CentOS-Base.repo
 when I run sudo yum update I get the warning
   66 packages excluded due to repository priority protections

 This does not seem to have any adverse effect,
 but what exactly does it mean?



Hi Timothy,

See http://wiki.centos.org/PackageManagement/Yum/Priorities ( take a close
look at section 5 )

Generally all active repo's in Base would be given the same priority.
If you have only added a setting of 1 for updates then all other repos will
have a priority of 99 (lower).
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] yum-plugin-priorities

2013-08-15 Thread Timothy Murphy
Clint Dilks wrote:

 If I add
   priority=1
 to [updates] in CentOS-Base.repo
 when I run sudo yum update I get the warning
   66 packages excluded due to repository priority protections

 This does not seem to have any adverse effect,
 but what exactly does it mean?

 See http://wiki.centos.org/PackageManagement/Yum/Priorities ( take a close
 look at section 5 )

Thanks for your response.
I had actually read this section, but evidently do not understand it.
I take it the 66 packages mentioned are in unofficial repositories,
in my case rpmforge.repo.rpmnew ?

 Generally all active repo's in Base would be given the same priority.
 If you have only added a setting of 1 for updates then all other repos
 will have a priority of 99 (lower).

I did realize that.
But as far as I can see, the effect of the plugin
is to disable all repositories with priority 99, 
or indeed with priority  2 ?

I've presently disabled this plugin,
since I don't see any rational way of using it.


-- 
Timothy Murphy  
e-mail: gayleard /at/ eircom.net
tel: +353-86-2336090, +353-1-2842366
School of Mathematics, Trinity College, Dublin 2, Ireland


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] yum-plugin-priorities

2013-08-15 Thread Scott Robbins
On Thu, Aug 15, 2013 at 12:07:26PM +0200, Timothy Murphy wrote:
 Clint Dilks wrote:
 
  If I add
priority=1
  to [updates] in CentOS-Base.repo
  when I run sudo yum update I get the warning
66 packages excluded due to repository priority protections
 

  See http://wiki.centos.org/PackageManagement/Yum/Priorities ( take a close
  look at section 5 )
 
 Thanks for your response.
 I had actually read this section, but evidently do not understand it.
 I take it the 66 packages mentioned are in unofficial repositories,
 in my case rpmforge.repo.rpmnew ?
 

If you have a repo called something.repo.rpmnew, it will be ignored.
You would have to rename it to something.repo.


To oversimplify, say that you have rpmforge, base, and epel repos.  Say
that all of them have versions of perl.  However, these versions may
conflict with each other and break things.  

So, if you gave base and updates priority of 1, then the others, even if
they have a later version of perl, won't install it.  The downside is that
you're running the older version.  The upside is that you don't risk this
newer version of perl breaking some other package that you'd forgotten.

There are disadvantages--as the wiki page in question mentions, the late
Seth Vidal disliked it.  

-- 
Scott Robbins
PGP keyID EB3467D6
( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 )
gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] back to: kernel: do_IRQ: 2.96 No irq handler for vector (irq -1)

2013-08-15 Thread m . roth
I asked here a week or so ago, and referenced an older bug, but haven't
seen any comments. Googling, I see others asking about the same. Datum:
*every* one I've found is like this: they're all HP DL580's or DL380's, or
such.

This is being used for heavy-duty scientific computing. Does anyone know
if it *will* it seriously affect throughput speed if I turn off
irqbalance?

It's running 6.4, btw.

mark



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] back to: kernel: do_IRQ: 2.96 No irq handler for vector (irq -1)

2013-08-15 Thread James A. Peltier
- Original Message -
| I asked here a week or so ago, and referenced an older bug, but
| haven't
| seen any comments. Googling, I see others asking about the same.
| Datum:
| *every* one I've found is like this: they're all HP DL580's or
| DL380's, or
| such.
| 
| This is being used for heavy-duty scientific computing. Does anyone
| know
| if it *will* it seriously affect throughput speed if I turn off
| irqbalance?
| 
| It's running 6.4, btw.
| 
| mark

That really depends on the type of computing.  If it's memory or CPU intensive 
computing it should have little to no affect. However, if you are doing heavy 
I/O intensive operations, more specifically network intensive, then yes, 
disabling irqbalance will have a fairly significant affect on performance for 
those operations.

-- 
James A. Peltier
Manager, IT Services - Research Computing Group
Simon Fraser University - Burnaby Campus
Phone   : 778-782-6573
Fax : 778-782-3045
E-Mail  : jpelt...@sfu.ca
Website : http://www.sfu.ca/itservices

“A successful person is one who can lay a solid foundation from the bricks 
others have thrown at them.” -David Brinkley via Luke Shaw
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] back to: kernel: do_IRQ: 2.96 No irq handler for vector (irq -1)

2013-08-15 Thread Akemi Yagi
On Thu, Aug 15, 2013 at 7:32 AM,  m.r...@5-cent.us wrote:
 I asked here a week or so ago, and referenced an older bug, but haven't
 seen any comments. Googling, I see others asking about the same. Datum:
 *every* one I've found is like this: they're all HP DL580's or DL380's, or
 such.

 This is being used for heavy-duty scientific computing. Does anyone know
 if it *will* it seriously affect throughput speed if I turn off
 irqbalance?

 It's running 6.4, btw.

 mark

You referred to http://bugs.centos.org/view.php?id=6319 in your
earlier post. If you believe you are hit by the bug reported there, I
strongly urge you to test the centosplus kernel that has a patch (see
note 17700 of the bug report).

Regarding the current status, upstream BZ (
https://bugzilla.redhat.com/show_bug.cgi?id=887006 ) is open to the
public. It is on QA at the moment. I suspect the fix will be in
EL6.5 and possibly in a 6.4 kernel update.

Akemi
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] samba: check password with AD without joining domain?

2013-08-15 Thread Les Mikesell
Is there a way to get samba to authenticate against an AD without
having to join that domain (which needs admin credentials)?I don't
want any of the automatic user creation or mapping stuff from winbind,
just a password check instead of having to maintain a local password.

I can get that effect via kerberos for normal linux logins by using
authconfig-tui, checking kerberos, and filling in the domain/kdc
details.Local users still have to be added to the linux system,
but where the user names match they can authenticate with their domain
password.   But, samba doesn't work that way.  Even though the
authconfig program modifies the smb.conf file, it doesn't seem to work
without joining the domain.  Is it possible to make it just
authenticate via kerberos but otherwise use the local account details
for the matching user?

-- 
   Les Mikesell
 lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] yum-plugin-priorities

2013-08-15 Thread Ljubomir Ljubojevic
On 08/15/2013 01:07 PM, Scott Robbins wrote:
 On Thu, Aug 15, 2013 at 12:07:26PM +0200, Timothy Murphy wrote:
 Clint Dilks wrote:

 If I add
priority=1
 to [updates] in CentOS-Base.repo
 when I run sudo yum update I get the warning
66 packages excluded due to repository priority protections


 See http://wiki.centos.org/PackageManagement/Yum/Priorities ( take a close
 look at section 5 )

 Thanks for your response.
 I had actually read this section, but evidently do not understand it.
 I take it the 66 packages mentioned are in unofficial repositories,
 in my case rpmforge.repo.rpmnew ?


 If you have a repo called something.repo.rpmnew, it will be ignored.
 You would have to rename it to something.repo.


 To oversimplify, say that you have rpmforge, base, and epel repos.  Say
 that all of them have versions of perl.  However, these versions may
 conflict with each other and break things.

 So, if you gave base and updates priority of 1, then the others, even if
 they have a later version of perl, won't install it.  The downside is that
 you're running the older version.  The upside is that you don't risk this
 newer version of perl breaking some other package that you'd forgotten.

 There are disadvantages--as the wiki page in question mentions, the late
 Seth Vidal disliked it.


Warning: If you set priority of base repo to 1, and priority of updates 
repo (or all others) to 2, then packages in updates repository will be 
hidden. that is why it is so important to have same priority on both 
base and updates repositories.

Any package name that exists in 2 or more repositories will be hidden 
from repositories with higher number / lesser priority (just like those 
66 in your case). Example:

httpd.x86_64 = ver. 2.2.15-26.el6.centos in base
httpd.x86_64 = ver  2.2.15-28.el6.centos in updates
httpd.x86_64 = ver. 2.2.15-29.el6.centos in updates

With priority plugin: base=1, updates=2 (or nothing)
2 packages excluded due to repository priority protections
Available:
httpd.x86_64 = ver. 2.2.15-26.el6.centos from base

With priority plugin: base=1, updates=1 (same priority)
0 packages excluded due to repository priority protections
Available:
httpd.x86_64 = ver. 2.2.15-29.el6.centos from updates


-- 
Ljubomir Ljubojevic
(Love is in the Air)
PL Computers
Serbia, Europe

StarOS, Mikrotik and CentOS/RHEL/Linux consultant
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] back to: kernel: do_IRQ: 2.96 No irq handler for vector (irq -1)

2013-08-15 Thread m . roth
Hi, Akemi,

Akemi Yagi wrote:
 On Thu, Aug 15, 2013 at 7:32 AM,  m.r...@5-cent.us wrote:
 I asked here a week or so ago, and referenced an older bug, but haven't
 seen any comments. Googling, I see others asking about the same. Datum:
 *every* one I've found is like this: they're all HP DL580's or DL380's,
 or such.

 This is being used for heavy-duty scientific computing. Does anyone know
 if it *will* it seriously affect throughput speed if I turn off
 irqbalance?

 It's running 6.4, btw.

 You referred to http://bugs.centos.org/view.php?id=6319 in your
 earlier post. If you believe you are hit by the bug reported there, I
 strongly urge you to test the centosplus kernel that has a patch (see
 note 17700 of the bug report).

I'm checking with the system co-owner (the other co-owner is another
Institute...), and that may take a while, because they've set up samba on
it, so there's a number of folks hitting this box.

 Regarding the current status, upstream BZ (
 https://bugzilla.redhat.com/show_bug.cgi?id=887006 ) is open to the
 public. It is on QA at the moment. I suspect the fix will be in
 EL6.5 and possibly in a 6.4 kernel update.

I see in the last message that I could set intremap=off on the grub kernel
command line. It then mentions If intr-remap is turned off, you'll also
have to add the kvm parameter to the boot line, or in an /etc/modprobe.d
file, allow_unsafe_assigned_interrupts .  Otherwise, kvm device assignment
will fail.. Now, the only kvm I know is the virtual machine package; as
there are no VMs running on this system, is this relevant to me?

   mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS6 bind DLV problems

2013-08-15 Thread Ljubomir Ljubojevic
On 08/14/2013 07:14 PM, Tony Mountifield wrote:
 I have two CentOS6 boxes, both running Bind as a local resolver, with
 what appears to me to be the same configuration as each other. I have
 a problem on one but not the other, to do with DNSSEC Lookaside Validation.

 On the box with the problem, if I do: host www.bbc.co.uk 127.0.0.1
 (for example), it sits there for a while, then gives me a timeout error.
 I did some tests while running a tcpdump packet capture on udp port 53,
 and I discovered that bind was fetching the correct answer normally,
 and then performing a validation query to one of the DLV servers at ISC
 (e.g. 199.6.0.29, 199.6.0.30, 199.6.1.29 or 199.6.1.30). It was not
 receiving any reply. After several seconds, it tried another DLV server
 and again received no reply.

 A similar test on the other box receives replies from ISC no problem.

 I have tried disabling iptables on the failing box, but that didn't help.
 I'm assuming something in the request causes ISC to ignore it.


Have you tried to switch IP addresses and see if possible routing or 
public IP denial is in place?


-- 
Ljubomir Ljubojevic
(Love is in the Air)
PL Computers
Serbia, Europe

StarOS, Mikrotik and CentOS/RHEL/Linux consultant
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Red Hat CEO: Go Ahead, Copy Our Software

2013-08-15 Thread Robert Arkiletian
http://www.businessinsider.com/red-hat-ceo-go-ahead-copy-our-software-2013-8

Title says is all. Nice to know RH understands and accepts the
relationship between CentOS and RHEL.

Although it is complex. After all, if too many choose CentOS, there
may no longer be a CentOS. However, I don't think I would refer to
CentOS as a parasite as the author Matt Asay does. More appropriate
to call it symbiotic.

Is the relationship a 50/50 affair? Not sure.

Complicating matters even more is Oracle Unmistakable Linux.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Red Hat CEO: Go Ahead, Copy Our Software

2013-08-15 Thread m . roth
Robert Arkiletian wrote:
 http://www.businessinsider.com/red-hat-ceo-go-ahead-copy-our-software-2013-8

 Title says is all. Nice to know RH understands and accepts the
 relationship between CentOS and RHEL.

 Although it is complex. After all, if too many choose CentOS, there
 may no longer be a CentOS. However, I don't think I would refer to
 CentOS as a parasite as the author Matt Asay does. More appropriate
 to call it symbiotic.

 Is the relationship a 50/50 affair? Not sure.

 Complicating matters even more is Oracle Unmistakable Linux.

Yeah, and the author *really* doesn't understand, and didn't bother to
try, to do their research.

Excerpt:
Arguably one critical area that CentOS hasn't helped Red Hat is with
developers. While developers want the latest and greatest technology, Red
Hat's bread-and-butter audience over the years has been operations
departments, which want stable and predictable software. (Read: boring.)
CentOS, by cloning RHEL's slow-and-steady approach to Linux development,
is ill-suited to attracting developers.
--- end excerpt ---

As I said

mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Red Hat CEO: Go Ahead, Copy Our Software

2013-08-15 Thread Les Mikesell
On Thu, Aug 15, 2013 at 3:20 PM,  m.r...@5-cent.us wrote:

 Yeah, and the author *really* doesn't understand, and didn't bother to
 try, to do their research.

 Excerpt:
 Arguably one critical area that CentOS hasn't helped Red Hat is with
 developers. While developers want the latest and greatest technology, Red
 Hat's bread-and-butter audience over the years has been operations
 departments, which want stable and predictable software. (Read: boring.)
 CentOS, by cloning RHEL's slow-and-steady approach to Linux development,
 is ill-suited to attracting developers.
 --- end excerpt ---

How about the real history, where Red Hat took a bunch of software
developed by others, published the barely-working stuff with horrible
bugs (read the changelogs if you disagree), then accepted
contributed debugging, fixes and improvements from the users until it
was good enough to charge for, then they cut off access even to the
people who had helped make it usable.  And CentOS helps fix that
problem.

-- 
   Les Mikesell
 lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Red Hat CEO: Go Ahead, Copy Our Software

2013-08-15 Thread Eddie G. O'Connor Jr.
I have no problems with RedHat and have used CEntOS steadily for quite 
some time now. Even though it's at home on my personal machines, I have 
been aching for my company to adopt an open source alternative to the 
five or six Windows 2008 servers that are currently in place...and I've 
made progess! So MUCH progress that in another month I'm to have a 
sit-down with the higher-ups from Accounting...IT...and Corporate to 
determine if my suggestion warrants merit, and if sohow to go about 
implementing itwhen I finally do get my chance on the mike so to 
speak?...I'll be recommending both Red Hat AND CEntOS.as they're 
basically the same thing...and the things I won't be able to 
troubleshoot myself...I'll have the RedHat Tech Support handle. Either 
way I see it as a win-win situation. The author might have flubbed a few 
things...as others have stated, CEntOS...isn't a parasite to 
RedHatbut more a sibling. And RedHat really DOESN'T own any of the 
source code it sells! but hey...everyone makes mistakes!..LoL! I 
will say this: I have used Windows since the Win '95 era, and even 
though they have come a long way, I have not enjoyed using my computers 
as much as when I installed Linux, and not just CEntOSbut 
Fedora...UbuntuopenSuSE..Debianetc. I wish there was a way 
to return' the favor to al lthe developers and contributors to the Open 
Source movement!


Cheers!




EGO II







On 08/15/2013 04:59 PM, Les Mikesell wrote:
 On Thu, Aug 15, 2013 at 3:20 PM,  m.r...@5-cent.us wrote:
 Yeah, and the author *really* doesn't understand, and didn't bother to
 try, to do their research.

 Excerpt:
 Arguably one critical area that CentOS hasn't helped Red Hat is with
 developers. While developers want the latest and greatest technology, Red
 Hat's bread-and-butter audience over the years has been operations
 departments, which want stable and predictable software. (Read: boring.)
 CentOS, by cloning RHEL's slow-and-steady approach to Linux development,
 is ill-suited to attracting developers.
 --- end excerpt ---
 How about the real history, where Red Hat took a bunch of software
 developed by others, published the barely-working stuff with horrible
 bugs (read the changelogs if you disagree), then accepted
 contributed debugging, fixes and improvements from the users until it
 was good enough to charge for, then they cut off access even to the
 people who had helped make it usable.  And CentOS helps fix that
 problem.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Red Hat CEO: Go Ahead, Copy Our Software

2013-08-15 Thread John R Pierce
On 8/15/2013 2:22 PM, Eddie G. O'Connor Jr. wrote:
 And RedHat really DOESN'T own any of the source code it sells!

redhat doesn't sell the source code.  they sell their support services 
and infrastructure.



-- 
john r pierce  37N 122W
somewhere on the middle of the left coast

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Red Hat CEO: Go Ahead, Copy Our Software

2013-08-15 Thread Les Mikesell
On Thu, Aug 15, 2013 at 4:08 PM, Reindl Harald h.rei...@thelounge.net wrote:

 How about the real history, where Red Hat took a bunch of software
 developed by others, published the barely-working stuff with horrible
 bugs (read the changelogs if you disagree), then accepted
 contributed debugging, fixes and improvements from the users until it
 was good enough to charge for, then they cut off access even to the
 people who had helped make it usable.  And CentOS helps fix that
 problem

 so what

 what about live and let live?

What about bait and switch?

 remove anything delevoped by RH paied employes in the last 10 years
 from the ecosystem and you stay here naked and helpless and most
 other distributions too in case of modern and rock solid software

Remove the stuff contributed by others and what would still work at all?

 GCC and the kernel are only two but importnat pieces where
 Redhat invested a lot of time and money over the years

 so whats your problem?

I guess I'd rather have seen the contributed work go to a distribution
that didn't develop a community with a free version and then after
accepting their work, take the free version away.  CentOS still gives
the same effect, so why didn't they just continue to allow
redistribution?

-- 
   Les Mikesell
 lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Red Hat CEO: Go Ahead, Copy Our Software

2013-08-15 Thread John R. Dennison
On Thu, Aug 15, 2013 at 04:40:14PM -0500, Les Mikesell wrote:
 
 What about bait and switch?

What about the fact that you've been beating this same horse for many
years now and it's a little tired at this point?

 I guess I'd rather have seen the contributed work go to a distribution
 that didn't develop a community with a free version and then after
 accepting their work, take the free version away.  CentOS still gives
 the same effect, so why didn't they just continue to allow
 redistribution?

If you're so disgruntled with Red Hat, and from the many years of beaten
horse posts it's clearly evident that you are, why do you continue to
use their components?  CentOS originates with Red Hat no matter how you
care to look at it.





John
-- 
The surest way to corrupt a youth is to instruct him to hold in higher
esteem those who think alike than those who think differently.

-- Friedrich Nietzsche


pgp4PGu2XgomD.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] samba: check password with AD without joining domain?

2013-08-15 Thread Natxo Asenjo
Do you require samba or do you just want linux users to authenticate to AD?

Samba when configured to work in a domain must be joined to the AD
domain. By the way, unless the admins have changed the defaults, any
authenticated user can join up to 10 hosts to an AD domain (search
ms-DS-MachineAccountQuota on your favorite search engine).

If you want your linux hosts to login using AD credentials, I haven't
tried it yet, but using sssd with msktutil should work with some trial
and error:

http://theblitzbit.com/2013/04/08/make-red-hat-talk-to-windows/

instead of using the samba bits, use msktutil, works much better (rpms
in repoforge). The rest should be the same.
--
Groeten,
natxo


On Thu, Aug 15, 2013 at 7:00 PM, Les Mikesell lesmikes...@gmail.com wrote:
 Is there a way to get samba to authenticate against an AD without
 having to join that domain (which needs admin credentials)?I don't
 want any of the automatic user creation or mapping stuff from winbind,
 just a password check instead of having to maintain a local password.

 I can get that effect via kerberos for normal linux logins by using
 authconfig-tui, checking kerberos, and filling in the domain/kdc
 details.Local users still have to be added to the linux system,
 but where the user names match they can authenticate with their domain
 password.   But, samba doesn't work that way.  Even though the
 authconfig program modifies the smb.conf file, it doesn't seem to work
 without joining the domain.  Is it possible to make it just
 authenticate via kerberos but otherwise use the local account details
 for the matching user?

 --
Les Mikesell
  lesmikes...@gmail.com
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Red Hat CEO: Go Ahead, Copy Our Software

2013-08-15 Thread Les Mikesell
On Thu, Aug 15, 2013 at 4:45 PM, John R. Dennison j...@gerdesas.com wrote:

 What about bait and switch?

 What about the fact that you've been beating this same horse for many
 years now and it's a little tired at this point?

They are the ones that changed their position.  Mine hasn't and won't.
 And I can't see a reason why it should.

 If you're so disgruntled with Red Hat, and from the many years of beaten
 horse posts it's clearly evident that you are, why do you continue to
 use their components?  CentOS originates with Red Hat no matter how you
 care to look at it.

If you are so happy with Red Hat, why even consider CentOS?

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Red Hat CEO: Go Ahead, Copy Our Software

2013-08-15 Thread Les Mikesell
On Thu, Aug 15, 2013 at 4:49 PM, Reindl Harald h.rei...@thelounge.net wrote:

 are you really that dumb?
 take the free version away - come on and explain how this works for GPL 
 software

Exactly, explain where the GPL distinguishes between what restrictions
you can add to binaries vs source components.

 Redhat *does not* sell the software and code
 they sell the service and support contracts

So, what about redistribution of copies?

 why are you not simply use a operating system without code from Redhat and 
 shut up?
 Windows and Apple OSX as example would free you from Redhat and CentOS
 come on, move forward if you are pissed of Redhat for no reason!

I could use debian, but then I'd have to learn to type apt-get instead
of rpm.   I'd prefer to continue using the commands that Red Hat
baited us with.

-- 
   Les Mikesell
  lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Red Hat CEO: Go Ahead, Copy Our Software

2013-08-15 Thread Les Mikesell
On Thu, Aug 15, 2013 at 5:34 PM, Reindl Harald h.rei...@thelounge.net wrote:

 So, what about redistribution of copies?

 learn the difference between trademarks and software licences

So, if you have a license that says  the distribution of the whole
must be on the terms of this License, and  You may not impose any
further restrictions on the recipients' exercise of the rights granted
herein, it really means that you can add something that adds
restrictions.

 I could use debian, but then I'd have to learn to type apt-get instead
 of rpm. I'd prefer to continue using the commands that Red Hat
 baited us with

 so learn it or shut up with your Redhat hate for no reason

I have my reason.  You don't have to like it.

-- 
   Les Mikesell
 lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] yum-plugin-priorities

2013-08-15 Thread Timothy Murphy
Ljubomir Ljubojevic wrote:

 To oversimplify, say that you have rpmforge, base, and epel repos.  Say
 that all of them have versions of perl.  However, these versions may
 conflict with each other and break things.

 So, if you gave base and updates priority of 1, then the others, even if
 they have a later version of perl, won't install it.  The downside is
 that
 you're running the older version.  The upside is that you don't risk this
 newer version of perl breaking some other package that you'd forgotten.

But what if a package in rpmforge requires a newer version of a package
that is available in rpmforge but not in updates?
Surely this is very likely to happen?

-- 
Timothy Murphy  
e-mail: gayleard /at/ eircom.net
tel: +353-86-2336090, +353-1-2842366
School of Mathematics, Trinity College, Dublin 2, Ireland


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] yum-plugin-priorities

2013-08-15 Thread Yves Bellefeuille
Timothy Murphy wrote:

  But what if a package in rpmforge requires a newer version of a
  package that is available in rpmforge but not in updates?
  Surely this is very likely to happen?

If a package in RPMForge requires another package from RPMForge that
doesn't conflict with a package from Base or Updates, then the second
package will be installed.

If a package in RPMForge requires another package from RPMForge that
_does_ conflict with a package from Base or Updates, then the second
package won't be installed, and neither will the first package. That's
what's supposed to happen.

By design, CentOS is a conservative and stable distribution. If you
need the latest packages, CentOS isn't the right distribution for you.

Yves Bellefeuille
y...@storm.ca


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] samba: check password with AD without joining domain?

2013-08-15 Thread Devin Reade
Last time I checked a few years ago I don't think AD supported an LDAP 
anonymous bind, so you may need to bind as that user in order to validate the 
creds.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] samba: check password with AD without joining domain?

2013-08-15 Thread Stephen Harris
On Thu, Aug 15, 2013 at 06:40:54PM -0700, Devin Reade wrote:
 Last time I checked a few years ago I don't think AD supported an LDAP 
 anonymous bind, so you may need to bind as that user in order to validate the 
 creds.

AD is kerberos for authentication.  If you just want to authenticate user
xyzzy to AD with password (as opposed to krb keys) then just configure
/etc/krb5.conf to point to an AD domain controller.

Don't need LDAP at all.

Everything else (samba, ldap, etc) gives closer integration, but isn't
essential for pure 'AD password' authentication.

-- 

rgds
Stephen
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] samba: check password with AD without joining domain?

2013-08-15 Thread Les Mikesell
On Thu, Aug 15, 2013 at 8:44 PM, Stephen Harris li...@spuddy.org wrote:
 On Thu, Aug 15, 2013 at 06:40:54PM -0700, Devin Reade wrote:
 Last time I checked a few years ago I don't think AD supported an LDAP 
 anonymous bind, so you may need to bind as that user in order to validate 
 the creds.

 AD is kerberos for authentication.  If you just want to authenticate user
 xyzzy to AD with password (as opposed to krb keys) then just configure
 /etc/krb5.conf to point to an AD domain controller.

 Don't need LDAP at all.

 Everything else (samba, ldap, etc) gives closer integration, but isn't
 essential for pure 'AD password' authentication.

Authconfig sets that up with pam when you pick kerberos authentication
and it works fine for linux user logins (console, ssh, etc.).   What I
want in addition is for those users to be able to map their home
directories from a windows box using that same login/password.   I
don't really care if they have to enter it explicitly for the share or
if whatever windows does because they are already logged into the
domain, I just don't want to manage a separate copy of each user's
password.  And what authconfig puts in the smb.conf doesn't seem to
work that way.   I used to be able to use security=server against an
older style windows domain controller, but I think the AD domain has
been upgraded and no longer has that backwards compatibility mode.

-- 
  Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos