Hi Gea,
if you deploy Netatalk, are you compilling the
sources yourself? If yes, how do you determine which
options to compile in?
E.g. for me it has to be with --enable-nfsv4acls,
which yields a problem in oi147 and up, since the
aclmode property has been removed from zfs and now
Hi Gea,
if you deploy Netatalk, are you compilling the sources yourself? If yes, how do
you determine which options to compile in?
E.g. for me it has to be with --enable-nfsv4acls, which yields a problem in
oi147 and up, since the aclmode property has been removed from zfs and now
Netatalk up
hello sentinel
i have had some problems with role basec access control
and pfexec with napp-it in Primary Administrator role
(logins doesn't work, path was needed)
and:
-sudo is much simpler
-napp-it needs all critical rights (create/ delete user, set permission, delete
pools)
-there is no
Hi Gea,
I just went ahead and let the installer run. What I suspected about Netatalk
seems to have proven true:
oi 2.0 install afp if missing - folder/etc/netatalk is missing
###
##
oi 2.1 setup db and libs for afp
hello budy
you can't have napp-it partly or it will work only partly.
it's not the service alone, its all the config files expected
in /etc/netatalk modified from napp-it on sharing.
napp-it will never care about different installations
(thats far ahead of what i can support)
gea
--
This
Hi Gea,
that's okay with me, but why not let the user chose, whether or not to have all
these bits and pieces installed?
That would provide the best of both worlds, I guess.
Cheers,
budy
--
This message posted from opensolaris.org
___
to check permissions, i suppose you have to
1. edit /etc/user_attr
and delete webservedtype=role
to allow login
2. and set a passwort for webservd via passwd
you can then login at console as user webservd
3. then you can try
sudo sbdadm list-lu
to see if it will work with root
Point taken.
I guess, I am not the usual user anyway. ;)
Cheers,
budy
--
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org
This is what I have in /etc/sudoers
# User privilege specification
rootALL=(ALL) ALL
admin ALL=(ALL) ALL
webservd ALL=(root) NOPASSWD: ALL
However, I am still getting these errors and napp-it is still unable to run any
system command.
Cheers,
budy
--
This message posted from
hello budy
the online installer will only change:
/etc/sudoer
webservd ALL=(root) NOPASSWD: ALL
and in /etc/user_attr
webservdtype=role
to disallow remote login
i have done a Rollback of my OpenIndiana
to the State after OS-Installation and had no
problems after running the
Why aren't you using RBAC and pfexec more often and, instead, relying on sudo?
On Wed, Oct 13, 2010 at 10:44, Günther a...@hfg-gmuend.de wrote:
hello budy
the online installer will only change:
/etc/sudoer
webservd ALL=(root) NOPASSWD: ALL
and in /etc/user_attr
webservdtype=role
to
Hi,
yesterday I tried to set up the webservd as requested and I removed the
All:suser:cmd:::*:uid=0 from /etc/security/exec_attr, but after doing that I
couldn't access any low level system function in napp-it, like viewing the
discs or the zpools.
usermod -P 'Primary Administrator' webservd
Hi,
yesterday I tried to set up the webservd as requested and I removed the
All:suser:cmd:::*:uid=0 from /etc/security/exec_attr, but after doing that I
couldn't access any low level system function in napp-it, like viewing the
discs or the zpools.
All should be exacty like:
senti...@openindiana:/etc/security$ pfexec usermod -P 'Primary
Administrator' webservd
Works for me.
senti...@openindiana:/etc/security$ uname -a
SunOS openindiana 5.11 oi_147 i86pc i386 i86pc Solaris
On Tue, Oct 12, 2010 at 02:38, casper@sun.com wrote:
Hi,
yesterday I tried to set up
Thanks Casper.
I reverted exec_attr and rolemod also just did it.
Thanks,
budy
--
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org
hello all
i could not reproduce this problem on a new install.
did you have this problem with napp-it 0.325_pre, installed
with online-installer
wget -O - www.napp-it.org/nappit-newest | perl
up from this version, napp-it use sudo instead of pfexec,
so the role should not matter (or am i
Hmm… my oi147 is also a new installation.
I did not run the installer since I do already have Netatalk installed and
setup and I wasn't sure, whether or not the napp-it installer would recognize
it.
I have then downloaded napp-it 0.325_pre manually and installed it, but when I
try ti run any
hello budy
the only needed setting to run napp-it should be set in file /etc/sudoers
and this is normally done via online-installer:
webservd ALL=(root) NOPASSWD: ALL
if this entry is missing, you will get your error message due to insufficient
permissions.
and
i would strongly recommend
napp-it needs superuser privilege to manage system settings. br
up to version 0.324 it is done via pfexec and webuser-account assigned to
Primary Adiministrator profile. brbr
To do it the same way on all platforms and because i had problems get all
running on OpenIndiana (example logins
Hi,
I will check that asap on my Openindiana box.
Thanks,
budy
--
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org
On 10/10/10 1:11 AM, Stephan Budach wrote:
Great - I will check it asap (today, that is ;) ). I had already
considered to sit down and do some scripting for nappit installation
on Openindiana, but I didn't had the time to do so.
Btw, on Openindiana oi_147 I was only able to get napp-it working
It's not a bug, but rather a feature request: wenn running
wget -O - www.napp-it.org/nappit-newest | perl
the installer states that it will reboot the host after installation - this
shouldn't be madantory. E.g. I have a couple of COMSTAR iSCSI targets that are
mounted on several Mac in my
hello budy
i will follow your request.
current newest-online installer will only suggest a reboot.
up to now i will always publish a newest release of napp-it first. if nobody is
reporting major problems it will become the default release some days later to
have this quite stable.
one more
napp-it 0.325_pre is out
new: AFP-Support for OpenIndiana
Its on the way for the best available free AFP Server with Time-Machine support
+ ZFS. Please report bugs. Any help for AD-Integration of netatalk is welcome.
install/ update on OpenIndiana or NexentaCore
at console enter su to get
about napp-it
napp-it, the project to build a free ready to run Web- or NAS-Appliance now
supports not only Nexenta but also OpenIndiana. It includes a user extendable
Web-UI and a online-installer to setup and install all needed tools and
services.
On OpenIndiana support for AFP and some
25 matches
Mail list logo