Discuss January 2008

discuss@lists.centos.org

311 participants
383 discussions

Re: [CentOS] Howto for LDAP authentication with replication
by Ross S. W. Walker 13 Jan '08

13 Jan '08

In fact Kerberos and LDAP are two great tastes that go well together. Keep user information and authorization information in LDAP while keep user authentication information in Kerberos. Later you could try to keep Kerberos authentication information in LDAP with Heimdel (spelling?) Kerberos (like MS AD does) though many purists feel this compromises the whole Kerberos security principal. Maybe it does, but it sure makes for easy redundancy. -Ross ----- Original Message ----- From: centos-bounces(a)centos.org <centos-bounces(a)centos.org> To: CentOS mailing list <centos(a)centos.org> Sent: Sat Jan 12 18:49:31 2008 Subject: Re: [CentOS] Howto for LDAP authentication with replication > Just so we're clear here, you are actually trying to learn two distinct > things simultaneously, how to use LDAP and how to use LDAP to > authenticate. They are not the same thing. If you knew how to use LDAP, > adding authentication to the knowledge base would be relatively trivial. > Likewise, if you knew how to use LDAP, configuring Webmin would be > relatively trivial. Thank you for the info. I understand that LDAP and authentication are not the same thing. We use LDAP within our organization for storing other types of data but most of the staff do not like to deal with it. In fact some team members were opposed to using LDAP for authentication, now I understand why! It seems to be a pain in the ass to learn how to use and configure. > I can tell you that Gerald Carter's book makes the entire process > painless but you are going to do it your way and I respect that to a > point...but ask that you recognize that you do so at the peril of > massive frustration. At this point I am leaning toward using kerberos instead. It took me 20 minutes to get a working kerberos server installation up and running, and I can now easily add new users and authenticate them, manage tickets, etc. Now I understand what you meant about LDAP not being designed for authentication. Thank you again for your time, Craig. This was a good learning experience for me. thanks Sean _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos ______________________________________________________________________ This e-mail, and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution or copying of this e-mail, and any attachments thereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify the sender and permanently delete the original and any copy or printout thereof.

2 1

Sendmail and the $h (solved)
by Jason Pyeron 12 Jan '08

12 Jan '08

I feel dirty after trolling throught the .cf file. Plussed addresses will not work w/ procmail if there is a typo in the sendmail.mc Works: /etc/mail/sendmaill.mc Addr 0 1 2 3 4 5 6 7 8 9 A B C D E F 0 2 4 6 8 A C E -------- ---- ---- ---- ---- ---- ---- ---- ---- ---------------- 00000610 ---- ---- --0a 4645 4154 5552 4528 6d61 -----.FEATURE(ma 00000620 7371 7565 7261 6465 5f65 6e76 656c 6f70 squerade_envelop 00000630 6529 0a-- ---- ---- ---- ---- ---- ---- e).------------- Does not work (note the space before the new line): /etc/mail/sendmaill.mc.bad Addr 0 1 2 3 4 5 6 7 8 9 A B C D E F 0 2 4 6 8 A C E -------- ---- ---- ---- ---- ---- ---- ---- ---- ---------------- 00000600 ---- ---- ---- 0a46 4541 5455 5245 286d ------.FEATURE(m 00000610 6173 7175 6572 6164 655f 656e 7665 6c6f asquerade_envelo 00000620 7065 2920 0a-- ---- ---- ---- ---- ---- pe) .----------- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Sr. Consultant 10 West 24th Street #100 - - +1 (443) 269-1555 x333 Baltimore, Maryland 21218 - - - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- This message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, purge the message from your system and notify the sender immediately. Any other use of the email by you is prohibited.

2 1

centos command to monitor a process for exit
by Jerry Geis 12 Jan '08

12 Jan '08

Is there a command that will monitor a process for exiting (crash or normal exit) and then execute another command based on the said process no longer being active? Or is there a "wrapper" command that runs a process and when that process exists due to crashing or just exiting normally) that another process can be run. Thanks, Jerry

8 7

service nfs start hangs on CentOS 4
by Frank Büttner 12 Jan '08

12 Jan '08

Hello when I try to start nfs the command hangs. I have found out, that the problem is, that I set an IP address at /etc/exports sample: /var/foo XXX.XXX.XXX(some rights) when replace the IP address to * then service nfs start work, but no one can use the exports. What goes wrong??

4 9

md5 passwords?
by Scott Ehrlich 12 Jan '08

12 Jan '08

On a C4.4 system, I want to add md5 passwords for the grub boot menu to prevent users from making selections other than the default boot options. I also want to add md5 passwords when attempting single user mode boots (may be answered by first request). The same for C5 systems. Thanks. Scott

3 2

Out of disk space at 2 GB?
by Scott Ehrlich 12 Jan '08

12 Jan '08

On an ext3 filesystem, what would cause the system to claim it is out of disk space for a program writing information to disk, when df -h shows ample GB available and the file is being written to local disk rather than an nfs-mounted filesystem? I believe the hard drive is good. Ideas welcome. Thanks. Scott

8 7

CentOS-announce Digest, Vol 35, Issue 4
by centos-announce-request＠centos.org 12 Jan '08

12 Jan '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:0032 Important CentOS 3 i386 libxml2 - security update (Tru Huynh) 2. CESA-2008:0032 Important CentOS 3 x86_64 libxml2 - security update (Tru Huynh) 3. CESA-2008:0039 Moderate CentOS 3 i386 postgresql - security update (Tru Huynh) 4. CESA-2008:0039 Moderate CentOS 3 x86_64 postgresql - security update (Tru Huynh) 5. CESA-2008:0032 Important CentOS 3 ia64 libxml2 - security update (Pasi Pirhonen) 6. CESA-2008:0039 Moderate CentOS 3 ia64 postgresql - security update (Pasi Pirhonen) 7. CESA-2008:0032 Important CentOS 4 ia64 libxml2 - security update (Pasi Pirhonen) 8. CESA-2008:0038 Moderate CentOS 4 ia64 postgresql - security update (Pasi Pirhonen) 9. CESA-2008:0032 Important CentOS 3 s390(x) libxml2 - security update (Pasi Pirhonen) 10. CESA-2008:0032 Important CentOS 4 s390(x) libxml2 - security update (Pasi Pirhonen) 11. CESA-2008:0039 Moderate CentOS 3 s390(x) postgresql - security update (Pasi Pirhonen) 12. CESA-2008:0038 Moderate CentOS 4 s390(x) postgresql - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Fri, 11 Jan 2008 15:30:01 +0100 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2008:0032 Important CentOS 3 i386 libxml2 - security update To: centos-announce(a)centos.org Message-ID: <20080111143001.GA18937(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2008:0032 libxml2 security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2008-0032.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/libxml2-2.5.10-8.i386.rpm updates/i386/RPMS/libxml2-devel-2.5.10-8.i386.rpm updates/i386/RPMS/libxml2-python-2.5.10-8.i386.rpm source: updates/SRPMS/libxml2-2.5.10-8.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update libxml2\* Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

PHP 5.2.5 when ?
by Santa Claus 12 Jan '08

12 Jan '08

Hi >> When (some) expected rpm package for the upgrade php to version 5.2.5(CentOS4) ? >ummm ... the answer is probably never. It is not clear why Red Hat (and CentOS too), so weak responds to changes of important packages. In this case the question: how to upgrade to PHP 5.2.5 correctly? 1. make ... etc. 2. or go search rpms/rpm in private repositories (for example: http://www.jasonlitka.com/2007/11/16/upgrading-to-php-525-on-rhel-and-cento… )? -- wbr

2 1

How do I change the default media player from Totem to <anything-else>?
by MHR 12 Jan '08

12 Jan '08

On CentOS 5.1 (and before), the default player for CD and DVD media is Totem, despite the fact (?) that it doesn't handle a whole bunch of media very well (i.e., can't play them at all) by default. Unfortunately, this is not one of the preferred applications controllable from that applet (it only does browser, email and terminal emulator. I'd like to change what plays the CDs and DVDs by default to something else. I tried a google on this, but nothing relevant showed up. Any suggestions? (Or is this a GNOME questions?) Thanks. mhr

2 1

Syslog timezone issue
by Bart Schaefer 12 Jan '08

12 Jan '08

We recently upgraded (as in, backup, reinstall, selective restore) a couple of servers from CentOS-3.9 to CentOS-5.1. This generally went smoothly but we've encountered one confusing problem with syslog. Under CentOS-3, syslog entries were always dated in the host local timezone. With CentOS-5.1, they're dated in UTC *most* of the time, but occasionally in the local timezone. This has seriously confused a couple of our homegrown process monitoring scripts. The cron, secure, and maillog logs are all consistently in the local timezone ... it's only /var/log/messages that wanders around. It appears that any given process is consistent about which timezone it uses, but there's no obvious reason why any particular process gets the local zone vs. UTC. For example, we have a couple of long-running daemons that fork children to handle network requests, and although the parent daemon consistently logs in one timezone, its forks (which do not even do an exec, so they should be identical to the parent) randomly switch to the other timezone. What we'd like is for the local timezone always to be used as it was before. What configuration option or whatever, have we missed?

3 4

← Newer
1
...
22
23
24
25
26
27
28
...
39
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss January 2008