[CentOS] DoD approval of Centos Was RE: Firefox fails to authenticate .mil sites with New DoDCAC

2014-12-04 Thread Jason Pyeron
 -Original Message-
 From: Jason Ricles
 Sent: Thursday, December 04, 2014 11:23
 To: CentOS mailing list
 Subject: Re: [CentOS] Firefox fails to authenticate .mil 
 sites with New DoDCAC
 
 I thought DoD used RHEL and not Centos, or did Centos did approved
 DADEMS recently?

DADMS is a Navy system, but yes Centos is approved for use by DISA. You would 
STIG it just like RHEL.

-Jason

--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-   -
- Jason Pyeron  PD Inc. http://www.pdinc.us -
- Principal Consultant  10 West 24th Street #100-
- +1 (443) 269-1555 x333Baltimore, Maryland 21218   -
-   -
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
This message is copyright PD Inc, subject to license 20080407P00. 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] DoD approval of Centos Was RE: Firefox fails to authenticate .mil sites with New DoDCAC

2014-12-04 Thread Jason Ricles
Gotcha, I also work with DoD for Navy systems and was surprised by
that. So you mean if we don't want to pay RHEL licensing fees, we can
use Centos? Since we are paying about $100 per RHEL license.

On Thu, Dec 4, 2014 at 11:36 AM, Jason Pyeron jpye...@pdinc.us wrote:
 -Original Message-
 From: Jason Ricles
 Sent: Thursday, December 04, 2014 11:23
 To: CentOS mailing list
 Subject: Re: [CentOS] Firefox fails to authenticate .mil
 sites with New DoDCAC

 I thought DoD used RHEL and not Centos, or did Centos did approved
 DADEMS recently?

 DADMS is a Navy system, but yes Centos is approved for use by DISA. You would 
 STIG it just like RHEL.

 -Jason

 --
 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
 -   -
 - Jason Pyeron  PD Inc. http://www.pdinc.us -
 - Principal Consultant  10 West 24th Street #100-
 - +1 (443) 269-1555 x333Baltimore, Maryland 21218   -
 -   -
 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
 This message is copyright PD Inc, subject to license 20080407P00.

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] DoD approval of Centos Was RE: Firefox fails to authenticate .mil sites with New DoDCAC

2014-12-04 Thread Cal Webster
On Thu, 2014-12-04 at 11:41 -0500, Jason Ricles wrote:
 Gotcha, I also work with DoD for Navy systems and was surprised by
 that. So you mean if we don't want to pay RHEL licensing fees, we can
 use Centos? Since we are paying about $100 per RHEL license.

I would recommend RHEL for critical systems or those that must be
certified for a particular purpose, such as CA servers. We've been using
CentOS for years now on our internal networks for software development,
local site mail service (SMTP/POP/IMAP), file services
(FTP/NFS/SMB/CIFS), DNS, local web servers, etc. It works very well for
this, especially for software development where multiple people can get
a GUI login through Stunnel-VNC-GDM and/or shell through ssh.

We're also using CentOS for software maintenance of RHEL hosts on our
aircraft simulators. Many of our software developers prefer a CentOS
workstation because of its versatility. On those we install MS Windoze
as a KVM guest for those applications that require it. My internal
workstation is setup this way for use network/systems admin and
analysis, software development, as well as normal office tasks.

 On Thu, Dec 4, 2014 at 11:36 AM, Jason Pyeron jpye...@pdinc.us wrote:
  -Original Message-
  From: Jason Ricles
  Sent: Thursday, December 04, 2014 11:23
  To: CentOS mailing list
  Subject: Re: [CentOS] Firefox fails to authenticate .mil
  sites with New DoDCAC
 
  I thought DoD used RHEL and not Centos, or did Centos did approved
  DADEMS recently?
 
  DADMS is a Navy system, but yes Centos is approved for use by DISA. You 
  would STIG it just like RHEL.
 
  -Jason
 
  --
  -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
  -   -
  - Jason Pyeron  PD Inc. http://www.pdinc.us -
  - Principal Consultant  10 West 24th Street #100-
  - +1 (443) 269-1555 x333Baltimore, Maryland 21218   -
  -   -
  -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
  This message is copyright PD Inc, subject to license 20080407P00.
 
  ___
  CentOS mailing list
  CentOS@centos.org
  http://lists.centos.org/mailman/listinfo/centos
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] DoD approval of Centos Was RE: Firefox fails to authenticate .mil sites with New DoDCAC

2014-12-04 Thread Jason Ricles
That is true, which we are using ours for critical things. Guess RHEL
will be the way to go till Centos is maybe approved for critical
systems as well.

On Thu, Dec 4, 2014 at 12:29 PM, Cal Webster cwebs...@ec.rr.com wrote:
 On Thu, 2014-12-04 at 11:41 -0500, Jason Ricles wrote:
 Gotcha, I also work with DoD for Navy systems and was surprised by
 that. So you mean if we don't want to pay RHEL licensing fees, we can
 use Centos? Since we are paying about $100 per RHEL license.

 I would recommend RHEL for critical systems or those that must be
 certified for a particular purpose, such as CA servers. We've been using
 CentOS for years now on our internal networks for software development,
 local site mail service (SMTP/POP/IMAP), file services
 (FTP/NFS/SMB/CIFS), DNS, local web servers, etc. It works very well for
 this, especially for software development where multiple people can get
 a GUI login through Stunnel-VNC-GDM and/or shell through ssh.

 We're also using CentOS for software maintenance of RHEL hosts on our
 aircraft simulators. Many of our software developers prefer a CentOS
 workstation because of its versatility. On those we install MS Windoze
 as a KVM guest for those applications that require it. My internal
 workstation is setup this way for use network/systems admin and
 analysis, software development, as well as normal office tasks.

 On Thu, Dec 4, 2014 at 11:36 AM, Jason Pyeron jpye...@pdinc.us wrote:
  -Original Message-
  From: Jason Ricles
  Sent: Thursday, December 04, 2014 11:23
  To: CentOS mailing list
  Subject: Re: [CentOS] Firefox fails to authenticate .mil
  sites with New DoDCAC
 
  I thought DoD used RHEL and not Centos, or did Centos did approved
  DADEMS recently?
 
  DADMS is a Navy system, but yes Centos is approved for use by DISA. You 
  would STIG it just like RHEL.
 
  -Jason
 
  --
  -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
  -   -
  - Jason Pyeron  PD Inc. http://www.pdinc.us -
  - Principal Consultant  10 West 24th Street #100-
  - +1 (443) 269-1555 x333Baltimore, Maryland 21218   -
  -   -
  -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
  This message is copyright PD Inc, subject to license 20080407P00.
 
  ___
  CentOS mailing list
  CentOS@centos.org
  http://lists.centos.org/mailman/listinfo/centos
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos


 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] DoD approval of Centos Was RE: Firefox fails to authenticate .mil sites with New DoDCAC

2014-12-04 Thread Jason Pyeron
 -Original Message-
 From: Jason Ricles
 Sent: Thursday, December 04, 2014 11:42
 
 Gotcha, I also work with DoD for Navy systems and was surprised by
 that. So you mean if we don't want to pay RHEL licensing fees, we can
 use Centos? Since we are paying about $100 per RHEL license.

But you will still need a (self?) support plan to be STIG compliant.

 
 On Thu, Dec 4, 2014 at 11:36 AM, Jason Pyeron 
 jpye...@pdinc.us wrote:
  -Original Message-
  From: Jason Ricles
  Sent: Thursday, December 04, 2014 11:23
  To: CentOS mailing list
  Subject: Re: [CentOS] Firefox fails to authenticate .mil
  sites with New DoDCAC
 
  I thought DoD used RHEL and not Centos, or did Centos did approved
  DADEMS recently?
 
  DADMS is a Navy system, but yes Centos is approved for use 
 by DISA. You would STIG it just like RHEL.
 
  -Jason
 
  --
  -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
  -   -
  - Jason Pyeron  PD Inc. http://www.pdinc.us -
  - Principal Consultant  10 West 24th Street #100-
  - +1 (443) 269-1555 x333Baltimore, Maryland 21218   -
  -   -
  -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
  This message is copyright PD Inc, subject to license 20080407P00.
 
  ___
  CentOS mailing list
  CentOS@centos.org
  http://lists.centos.org/mailman/listinfo/centos
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
 
 



--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-   -
- Jason Pyeron  PD Inc. http://www.pdinc.us -
- Principal Consultant  10 West 24th Street #100-
- +1 (443) 269-1555 x333Baltimore, Maryland 21218   -
-   -
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
This message is copyright PD Inc, subject to license 20080407P00. 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] DoD approval of Centos Was RE: Firefox fails to authenticate .mil sites with New DoDCAC

2014-12-04 Thread Jason Ricles
Do you mean as in terms of updates? I forget some of the STIGs and
don't deal with that part of our projects.

On Thu, Dec 4, 2014 at 1:14 PM, Jason Pyeron jpye...@pdinc.us wrote:
 -Original Message-
 From: Jason Ricles
 Sent: Thursday, December 04, 2014 11:42

 Gotcha, I also work with DoD for Navy systems and was surprised by
 that. So you mean if we don't want to pay RHEL licensing fees, we can
 use Centos? Since we are paying about $100 per RHEL license.

 But you will still need a (self?) support plan to be STIG compliant.


 On Thu, Dec 4, 2014 at 11:36 AM, Jason Pyeron
 jpye...@pdinc.us wrote:
  -Original Message-
  From: Jason Ricles
  Sent: Thursday, December 04, 2014 11:23
  To: CentOS mailing list
  Subject: Re: [CentOS] Firefox fails to authenticate .mil
  sites with New DoDCAC
 
  I thought DoD used RHEL and not Centos, or did Centos did approved
  DADEMS recently?
 
  DADMS is a Navy system, but yes Centos is approved for use
 by DISA. You would STIG it just like RHEL.
 
  -Jason
 
  --
  -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
  -   -
  - Jason Pyeron  PD Inc. http://www.pdinc.us -
  - Principal Consultant  10 West 24th Street #100-
  - +1 (443) 269-1555 x333Baltimore, Maryland 21218   -
  -   -
  -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
  This message is copyright PD Inc, subject to license 20080407P00.
 
  ___
  CentOS mailing list
  CentOS@centos.org
  http://lists.centos.org/mailman/listinfo/centos
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos





 --
 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
 -   -
 - Jason Pyeron  PD Inc. http://www.pdinc.us -
 - Principal Consultant  10 West 24th Street #100-
 - +1 (443) 269-1555 x333Baltimore, Maryland 21218   -
 -   -
 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
 This message is copyright PD Inc, subject to license 20080407P00.

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] DoD approval of Centos Was RE: Firefox fails to authenticate .mil sites with New DoDCAC

2014-12-04 Thread Cal Webster
On Thu, 2014-12-04 at 13:09 -0500, Jason Ricles wrote:
 That is true, which we are using ours for critical things. Guess RHEL
 will be the way to go till Centos is maybe approved for critical
 systems as well.

That's really up to the program manager in which the machine would be
used. He would make a determination whether it's supportable and
maintainable, based on in-house expertise and/or outside contract
support. RHEL subscriptions give you instant support and patches if
necessary. Otherwise, unless another RHEL subscriber has the same issue,
you'd have to wait for the community to fix something then get it
integrated into RHEL before filtering down to CentOS. If this is
acceptable then CentOS is an option.

 On Thu, Dec 4, 2014 at 12:29 PM, Cal Webster cwebs...@ec.rr.com wrote:
  On Thu, 2014-12-04 at 11:41 -0500, Jason Ricles wrote:
  Gotcha, I also work with DoD for Navy systems and was surprised by
  that. So you mean if we don't want to pay RHEL licensing fees, we can
  use Centos? Since we are paying about $100 per RHEL license.
 
  I would recommend RHEL for critical systems or those that must be
  certified for a particular purpose, such as CA servers. We've been using
  CentOS for years now on our internal networks for software development,
  local site mail service (SMTP/POP/IMAP), file services
  (FTP/NFS/SMB/CIFS), DNS, local web servers, etc. It works very well for
  this, especially for software development where multiple people can get
  a GUI login through Stunnel-VNC-GDM and/or shell through ssh.
 
  We're also using CentOS for software maintenance of RHEL hosts on our
  aircraft simulators. Many of our software developers prefer a CentOS
  workstation because of its versatility. On those we install MS Windoze
  as a KVM guest for those applications that require it. My internal
  workstation is setup this way for use network/systems admin and
  analysis, software development, as well as normal office tasks.
 
  On Thu, Dec 4, 2014 at 11:36 AM, Jason Pyeron jpye...@pdinc.us wrote:
   -Original Message-
   From: Jason Ricles
   Sent: Thursday, December 04, 2014 11:23
   To: CentOS mailing list
   Subject: Re: [CentOS] Firefox fails to authenticate .mil
   sites with New DoDCAC
  
   I thought DoD used RHEL and not Centos, or did Centos did approved
   DADEMS recently?
  
   DADMS is a Navy system, but yes Centos is approved for use by DISA. You 
   would STIG it just like RHEL.
  
   -Jason
  
   --
   -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
   -   -
   - Jason Pyeron  PD Inc. http://www.pdinc.us -
   - Principal Consultant  10 West 24th Street #100-
   - +1 (443) 269-1555 x333Baltimore, Maryland 21218   -
   -   -
   -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
   This message is copyright PD Inc, subject to license 20080407P00.
  
   ___
   CentOS mailing list
   CentOS@centos.org
   http://lists.centos.org/mailman/listinfo/centos
  ___
  CentOS mailing list
  CentOS@centos.org
  http://lists.centos.org/mailman/listinfo/centos
 
 
  ___
  CentOS mailing list
  CentOS@centos.org
  http://lists.centos.org/mailman/listinfo/centos
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] DoD approval of Centos Was RE: Firefox fails to authenticate .mil sites with New DoDCAC

2014-12-04 Thread Jason Pyeron
 -Original Message-
 From: Cal Webster
 Sent: Thursday, December 04, 2014 13:31
 
 On Thu, 2014-12-04 at 13:09 -0500, Jason Ricles wrote:
  That is true, which we are using ours for critical things. 
 Guess RHEL
  will be the way to go till Centos is maybe approved for critical
  systems as well.
 
 That's really up to the program manager in which the machine would be

More correct the DAA [designated approving authority], not the PM.

 used. He would make a determination whether it's supportable and
 maintainable, based on in-house expertise and/or outside contract
 support. RHEL subscriptions give you instant support and patches if
 necessary. Otherwise, unless another RHEL subscriber has the 
 same issue,
 you'd have to wait for the community to fix something then get it
 integrated into RHEL before filtering down to CentOS. If this is
 acceptable then CentOS is an option.
 
  On Thu, Dec 4, 2014 at 12:29 PM, Cal Webster 
 cwebs...@ec.rr.com wrote:
   On Thu, 2014-12-04 at 11:41 -0500, Jason Ricles wrote:
   Gotcha, I also work with DoD for Navy systems and was 
 surprised by
   that. So you mean if we don't want to pay RHEL licensing 
 fees, we can
   use Centos? Since we are paying about $100 per RHEL license.
  
   I would recommend RHEL for critical systems or those that must be
   certified for a particular purpose, such as CA servers. 
 We've been using
   CentOS for years now on our internal networks for 
 software development,
   local site mail service (SMTP/POP/IMAP), file services
   (FTP/NFS/SMB/CIFS), DNS, local web servers, etc. It works 
 very well for
   this, especially for software development where multiple 
 people can get
   a GUI login through Stunnel-VNC-GDM and/or shell through ssh.
  
   We're also using CentOS for software maintenance of RHEL 
 hosts on our
   aircraft simulators. Many of our software developers 
 prefer a CentOS
   workstation because of its versatility. On those we 
 install MS Windoze
   as a KVM guest for those applications that require it. My internal
   workstation is setup this way for use network/systems admin and
   analysis, software development, as well as normal office tasks.
  
   On Thu, Dec 4, 2014 at 11:36 AM, Jason Pyeron 
 jpye...@pdinc.us wrote:
-Original Message-
From: Jason Ricles
Sent: Thursday, December 04, 2014 11:23
To: CentOS mailing list
Subject: Re: [CentOS] Firefox fails to authenticate .mil
sites with New DoDCAC
   
I thought DoD used RHEL and not Centos, or did Centos 
 did approved
DADEMS recently?
   
DADMS is a Navy system, but yes Centos is approved for 
 use by DISA. You would STIG it just like RHEL.
   
-Jason

--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-   -
- Jason Pyeron  PD Inc. http://www.pdinc.us -
- Principal Consultant  10 West 24th Street #100-
- +1 (443) 269-1555 x333Baltimore, Maryland 21218   -
-   -
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
This message is copyright PD Inc, subject to license 20080407P00. 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos