[CentOS] DoD approval of Centos Was RE: Firefox fails to authenticate .mil sites with New DoDCAC

Thu Dec 4 20:42:15 UTC 2014
Jason Pyeron <jpyeron at pdinc.us>

> -----Original Message-----
> From: Cal Webster
> Sent: Thursday, December 04, 2014 13:31
> 
> On Thu, 2014-12-04 at 13:09 -0500, Jason Ricles wrote:
> > That is true, which we are using ours for critical things. 
> Guess RHEL
> > will be the way to go till Centos is maybe approved for critical
> > systems as well.
> 
> That's really up to the program manager in which the machine would be

More correct the DAA [designated approving authority], not the PM.

> used. He would make a determination whether it's supportable and
> maintainable, based on in-house expertise and/or outside contract
> support. RHEL subscriptions give you instant support and patches if
> necessary. Otherwise, unless another RHEL subscriber has the 
> same issue,
> you'd have to wait for the community to fix something then get it
> integrated into RHEL before filtering down to CentOS. If this is
> acceptable then CentOS is an option.
> 
> > On Thu, Dec 4, 2014 at 12:29 PM, Cal Webster 
> <cwebster at ec.rr.com> wrote:
> > > On Thu, 2014-12-04 at 11:41 -0500, Jason Ricles wrote:
> > >> Gotcha, I also work with DoD for Navy systems and was 
> surprised by
> > >> that. So you mean if we don't want to pay RHEL licensing 
> fees, we can
> > >> use Centos? Since we are paying about $100 per RHEL license.
> > >
> > > I would recommend RHEL for critical systems or those that must be
> > > certified for a particular purpose, such as CA servers. 
> We've been using
> > > CentOS for years now on our internal networks for 
> software development,
> > > local site mail service (SMTP/POP/IMAP), file services
> > > (FTP/NFS/SMB/CIFS), DNS, local web servers, etc. It works 
> very well for
> > > this, especially for software development where multiple 
> people can get
> > > a GUI login through Stunnel->VNC->GDM and/or shell through ssh.
> > >
> > > We're also using CentOS for software maintenance of RHEL 
> hosts on our
> > > aircraft simulators. Many of our software developers 
> prefer a CentOS
> > > workstation because of its versatility. On those we 
> install MS Windoze
> > > as a KVM guest for those applications that require it. My internal
> > > workstation is setup this way for use network/systems admin and
> > > analysis, software development, as well as normal office tasks.
> > >
> > >> On Thu, Dec 4, 2014 at 11:36 AM, Jason Pyeron 
> <jpyeron at pdinc.us> wrote:
> > >> >> -----Original Message-----
> > >> >> From: Jason Ricles
> > >> >> Sent: Thursday, December 04, 2014 11:23
> > >> >> To: CentOS mailing list
> > >> >> Subject: Re: [CentOS] Firefox fails to authenticate .mil
> > >> >> sites with New DoDCAC
> > >> >>
> > >> >> I thought DoD used RHEL and not Centos, or did Centos 
> did approved
> > >> >> DADEMS recently?
> > >> >
> > >> > DADMS is a Navy system, but yes Centos is approved for 
> use by DISA. You would STIG it just like RHEL.
> > >> >
> > >> > -Jason

--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-                                                               -
- Jason Pyeron                      PD Inc. http://www.pdinc.us -
- Principal Consultant              10 West 24th Street #100    -
- +1 (443) 269-1555 x333            Baltimore, Maryland 21218   -
-                                                               -
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
This message is copyright PD Inc, subject to license 20080407P00.