Re: [CentOS] Specifying different options for different " smb" type gvfs mount

2018-06-22 Thread John Hodrien

On Thu, 21 Jun 2018, Gordon Messmer wrote:


On 06/21/2018 05:09 AM, John Hodrien wrote:

 On Thu, 21 Jun 2018, Toralf Lund wrote:


 I known that I might use mount.cifs and related "fstab" entries as an
 alternative, but its password handling seems a lot less convenient.


 If you're in an AD environment, you can probably do nicely with
 mount.cifs:
 sec=krb5,multiuser
 That way you don't have to deal with usernames/passwords at all. 


Interesting.  Seems like a lot of setup, but it's interesting.  I didn't know 
SMB supported this:


https://access.redhat.com/solutions/279183


That article makes it sound a whole lot harder than it is, as almost all of
that is pre done in later versions of CentOS.

You don't have to configure the upcall stuff as it's already done, you don't
need to generate a credential cache for root as it can just use the keytab,
and if you've already setup a machine to talk to AD with SSSD you've probably
done everything else.

Paired with wildcard automount entries, and you end up in a very usable setup
with minimal config.

jh
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Imap daemons for CentOS 6 (other then cyrus-imapd)

2018-06-22 Thread Walter H.
On Thu, June 21, 2018 23:23, Robert Heller wrote:
> At Thu, 21 Jun 2018 20:42:50 +0200 CentOS mailing list 
> wrote:
>
>>
>> On 21.06.2018 19:28, Robert Heller wrote:
>> > Are there any imap daemons (besides cyrus-imapd).  cyrus-imapd is
>> appearently
>> > not compatible with postfix + procmail.  I need an imap daemon that
>> will work
>> > with a postfix + procmail system.
>> >
>> the problem seems to be procmail, I use postfix and cyrus-imapd with no
>> problems;
>
> No actually the problem is cyrus-imapd: cyrus-imapd expects all users to
> use
> imap (or pop3) to access their E-Mail.
of course, what else do you expect?
(SSL is not the problem, as I'm using cyrus-imapd with SSL)

Walter


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Imap daemons for CentOS 6 (other then cyrus-imapd)

2018-06-22 Thread Walter H.
On Thu, June 21, 2018 23:23, Robert Heller wrote:
> At Thu, 21 Jun 2018 20:42:50 +0200 CentOS mailing list
 wrote:
>
>>
>> On 21.06.2018 19:28, Robert Heller wrote:
>> > Are there any imap daemons (besides cyrus-imapd).  cyrus-imapd is
>> appearently
>> > not compatible with postfix + procmail.  I need an imap daemon that
>> will work
>> > with a postfix + procmail system.
>> >
>> the problem seems to be procmail, I use postfix and cyrus-imapd with no
problems;
>
> No actually the problem is cyrus-imapd: cyrus-imapd expects all users to
use
> imap (or pop3) to access their E-Mail.
of course, what else do you expect?
(SSL is not the problem, as I'm using cyrus-imapd with SSL)

here my settings in /etc/imapd.conf

tls_cert_file: /etc/pki/cyrus-imapd/tls.crt/mail-host.crt
tls_key_file: /etc/pki/cyrus-imapd/tls.key/mail-host.key
tls_ca_file: /etc/pki/cyrus-imapd/tls.crt/server-chain-sslca.crt
tls_cipher_list:
EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA:EECDH:EDH+AESGCM:EDH:ECDH+AESGCM:ECDH+AES:ECDH:AES:HIGH:MEDIUM:3DES:!SSLv2:+SSLv3:!RC4:!MD5:!IDEA:!SEED:!aNULL:!eNULL:!LOW:!EXP:!DSS:!PSK:!SRP
tls_prefer_server_ciphers: 1
tls_versions: tls1_0 tls1_1 tls1_2

Walter




___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] [External] Re: Specifying different options for different " smb" type gvfs mount

2018-06-22 Thread Toralf Lund

On 21/06/18 14:09, John Hodrien wrote:

On Thu, 21 Jun 2018, Toralf Lund wrote:

I known that I might use mount.cifs and related "fstab" entries as an 
alternative, but its password handling seems a lot less convenient.


If you're in an AD environment, you can probably do nicely with 
mount.cifs:
Well, I'm not. Or the CentOS machine is not configured for it, anyway. 
Might be possible to do, but I'm not entirely sure it would be worth the 
effort.


- Toralf




sec=krb5,multiuser

That way you don't have to deal with usernames/passwords at all.

jh
___
CentOS mailing list
CentOS@centos.org
https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.centos.org_mailman_listinfo_centos&d=DwICAg&c=KV_I7O14pmwRcmAVyJ1eg4Jwb8Y2JAxuL5YgMGHpjcQ&r=Q0oqxzgUp3xCCIiJDwS-RbNDndQ-KZDhj8wwveNoqU4&m=tjPm9TrBI_sodSKxipBHSBeTtrzqGiPQ-GvbwhbK8qo&s=54vPa_7ySn8NlCa0GF4dXQAAF-EYwEbbgBEY58kiWKA&e= 




___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] [External] Re: Specifying different options for different " smb" type gvfs mount

2018-06-22 Thread Jonathan Billings
On Fri, Jun 22, 2018 at 03:43:56PM +0200, Toralf Lund wrote:
> Well, I'm not. Or the CentOS machine is not configured for it, anyway. Might
> be possible to do, but I'm not entirely sure it would be worth the effort.

All you'd need is to use AD's kerberos realm for authentication and
have a username that matches the AD name.

(And honestly, if you are someplace with AD you probably should be
using at least the kerberos component, and possibly binding to the
domain so you can use it's account managemnt too.  You just need
patient AD admins.)

-- 
Jonathan Billings 
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Specifying different options for different " smb" type gvfs mount

2018-06-22 Thread Gordon Messmer

On 06/22/2018 01:24 AM, John Hodrien wrote:


Paired with wildcard automount entries, and you end up in a very 
usable setup
with minimal config. 



Cool.  Thanks for clarifying!

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] Server disposal

2018-06-22 Thread Kenneth Porter
Can anyone recommend a mailing list or other resource for finding a home 
for old server hardware? I've got a growing bone pile of retired Dell and 
Supermicro rack servers. I've stripped the drives and memory but hate to 
see the other old parts go to waste, like old RAID controllers and other 
proprietary parts.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Server disposal

2018-06-22 Thread Dave Stevens
On Fri, 22 Jun 2018 13:49:12 -0700
Kenneth Porter  wrote:

> Can anyone recommend a mailing list or other resource for finding a
> home for old server hardware? I've got a growing bone pile of retired
> Dell and Supermicro rack servers. I've stripped the drives and memory
> but hate to see the other old parts go to waste, like old RAID
> controllers and other proprietary parts.

do you have a parts list?

d

> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos



-- 
In modern fantasy (literary or governmental), killing people is the
usual solution to the so-called war between good and evil. My books are
not conceived in terms of such a war, and offer no simple answers to
simplistic questions.

- Ursula Le Guin
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS-6.9 Bind-9.8.2 error messages

2018-06-22 Thread Gordon Messmer

On 06/21/2018 09:31 AM, James B. Byrne wrote:

I stopped and restarted the BIND daemon and this appears to have
corrected whatever issue was causing the errors to be generated.


That will probably fix the problem temporarily, until the next time the 
zone file is updated (I think).  If it returns, let us know.  In my 
case, the problem occurred because, as I implied, the zone existed in 
two views and that is something that wasn't handled well until recently 
(and I'd have to look up the right way to do it).

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos