On Fri, 14 Jan 2011, Robert Spangler wrote:
> On Friday 14 January 2011 04:01, Ritika Garg wrote:
>
>> When I give the command "cp file1 file2" then the error comes:
>> cp: cannot create regular file `file2': Input/output error
>>
>> This occurs sometimes and it occurs when I am giving the comm
On Wed, 19 Jan 2011, Les Mikesell wrote:
> CentOS would likely only be used as a desktop OS by people who also run
> servers and like everything to be the same. They all assemble approximately
> the same set of upstream packages, though, so it is possible to make them
> all do the same things wit
On Wed, 19 Jan 2011, Les Mikesell wrote:
> That's not true for desktop applications and environments. If you don't
> have something current you are missing the improvements that many
> thousands of man-hours of work have made.
But I guess that's the bit I don't /always/ buy into. In the pre-Fed
On Wed, 19 Jan 2011, Les Mikesell wrote:
> Sorry, but Outlook 2003 and 2007 are huge improvements over earlier
> versions - and lacking tight integration between messaging and
> calendar/scheduling has been one of the places where free software
> really missed the boat.
But then that's partly Mic
On Thu, 20 Jan 2011, Rudi Ahlers wrote:
> I don't know about you, but a user leaving his desk (for any purpose,
> other than going home) doesn't cause a security risk. I trust all our
> staff, and when Andrew goes on lunch I expect him to leave his PC
> unlocked.
I think I see things differently.
On Thu, 20 Jan 2011, Rudi Ahlers wrote:
I think I see things differently. Allowing others to access your account *is*
a security risk. It potentially opens confidential data open to other people,
and leaves that specific user open to abuse through people using their
machine. You might as well
On Thu, 20 Jan 2011, Sorin Srbu wrote:
>> -Original Message-
>> From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On
>> Behalf Of Tom H
>> Sent: Thursday, January 20, 2011 1:03 PM
>> To: CentOS mailing list
>> Subject: Re: [CentOS] How to disable screen locking system-wide
On Thu, 20 Jan 2011, Tom H wrote:
> Yes but someone's posted a global gconftool-2 recipe.
Run gconf-editor as root and you can edit the global mandatory rules too.
jh
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/ce
On Thu, 20 Jan 2011, Ross Walker wrote:
> On Jan 19, 2011, at 2:44 PM, Bob Eastbrook wrote:
>
>> By default, CentOS v5 requires a user's password when the system wakes
>> up from the screensaver. This can be disabled by each user, but how
>> can I disable this system-wide? Many of my users forg
On Thu, 20 Jan 2011, m.r...@5-cent.us wrote:
> Excuse me, but when I was in college, I heard the spiel about not leaving
> workstations unlocked, if only because some idiots would get cute and do
> something from your terminal to embarrass you, and/or aggravate someone
> else.
cat >> .bashrc
On Thu, 20 Jan 2011, Rudi Ahlers wrote:
> Benjamin, I'm sorry to say this, but you're wrong!
I'm fairly sure he's not.
> Now, since we're doing the name-calling thing, let's get that out of the way.
>
> Sometimes you need to access a PC of a staff member who is busy with
> something right now. A
On Wed, 26 Jan 2011, Rudi Ahlers wrote:
> That won't really work. The NFS clients run cPanel and we need a way
> for end-users to have full access to their backups all the time. We
> used to run backup over FTP, but then when a client wanted to restore
> data one of the techs first had to download
On Wed, 26 Jan 2011, Dr. Ed Morbius wrote:
> I'd suggest the automount route as well (you're only open to NFS issues
> while the filesystem is mounted), but you then have to maintain
> automount maps and run the risk of issues with the automounter (I've
> seen large production environments in whic
On Thu, 27 Jan 2011, Always Learning wrote:
> Thanks for the explanation. Now I know why locate never usually worked
> for me - it hadn't updated.
>
> find is fast, especially when I restrict the search paths.
But locate is faster still, in all but the smallest of cases. I'd only tend
to use fin
On Thu, 27 Jan 2011, Nico Kadel-Garcia wrote:
> Wrong again. Never use public key access for root accounts, it simply
> compounds the security risks. Passphrase protected SSH keys can be
> used, reasonably, for account access on other hosts, but should be
> avoided for root access. If you *HAVE* t
On Fri, 28 Jan 2011, Nico Kadel-Garcia wrote:
> One *does* have to remember the "mlocate" package's limitations. It
> doesn't browse network mounted directories, it doesn't browse /tmp or
> look for other excluded targets, and it runs with the nightly cron
> jobs. So if you're looking for files in
On Fri, 28 Jan 2011, Always Learning wrote:
>
> On Fri, 2011-01-28 at 14:50 +, John Hodrien wrote:
>
>> All configurable via /etc/updatedb.conf if your local needs differ.
>
> How does one remove it ?
>
> yum erase updated ?
>
> It is not present in
On Tue, 8 Feb 2011, Dr. Ed Morbius wrote:
> *OR* as a special case, if access is *only* read-only (or read-only to
> all but one initiator).
I get the all read-only case, but wouldn't the read-only clients end up
caching filesystem data that has since been changed by the read-write client?
I'd ha
On Fri, 11 Feb 2011, m.r...@5-cent.us wrote:
> They have *everything* to do. Look, I *said* this is OT, but since you
> insist, the overwhelmingly *bad* design decision was to put the GUI into
> ring 0, instead of the way Windows 3, and X on *Nix, and *everybody* else
> did, resulting in a GUI err
On Mon, 14 Feb 2011, Always Learning wrote:
>
> On Sun, 2011-02-13 at 19:21 -0700, compdoc wrote:
>
>>> ECC allows for single bit errors to be corrected and multiple bit
>>> errors to be noticed.
>
>> I know what it is and I've used it in the past, but I just don't see many
>> errors going on in d
On Mon, 14 Feb 2011, Nico Kadel-Garcia wrote:
> But the accumulated costs of the higher end motherboard, memory,
> shortage of space for upgrades in the same unit, the downtime at the
> BIOS to reset the "disabled by default" ECC settings in the BIOS, and
> the system monitoring to detect and mana
On Mon, 14 Feb 2011, Nico Kadel-Garcia wrote:
Trust me, it's a pain in the keister in production. If the standard is
now enabled, good: I haven't had my hands inside a server in a year, I
admit it. (My current role doesn't call for it.) It *didn't* used to
be standard. Are you sure it is?
I bu
On Mon, 28 Feb 2011, John R Pierce wrote:
> On 02/28/11 7:28 AM, system minami wrote:
>> Can someone please help how to enable samba quota for Active Directory
>> users' home directory automatically ?
>
> Samba has quota support? Good luck with that. Quotas are generally a
> file system thing,
On Thu, 3 Mar 2011, system minami wrote:
> # repquota -a
> (snip)
> user -- 40 0 0 7 0 0
> (snip)
> W2K8AD1\administrator -- 124 0 0 28 0 0
> W2K8AD1\samba -- 4 0 10 1 0 0
>
> It see
On Fri, 4 Mar 2011, Nico Kadel-Garcia wrote:
> Contemporary versions of git, subversion, and OpenSSH built-in. I'm
> particularly looking forward to the built-in chroot capabilities and
> GSSAPI support in OpenSSH, and the major release improvements to git
> and subversion.
What does the new GSSA
On Sat, 5 Mar 2011, Nico Kadel-Garcia wrote:
> On Fri, Mar 4, 2011 at 7:57 AM, John Hodrien wrote:
>> On Fri, 4 Mar 2011, Nico Kadel-Garcia wrote:
>>
>>> Contemporary versions of git, subversion, and OpenSSH built-in. I'm
>>> particularly looking forward t
On Mon, 7 Mar 2011, Nico Kadel-Garcia wrote:
> Have you backported OpenSSH 5.x to CentOS 5? Because I don't see the
> full features set without OpenSSH 5.x, such as "GSSApiKeyExchange".
Nope, I like the simple life.
> Hmm. What you've described is an ssh_config option, which is set to
> "no" by
On Mon, 7 Mar 2011, Nico Kadel-Garcia wrote:
> If this works, you've just solved a *BIG* problem for me: I'd been
> handed (ordered before I arrived on the site) the issues of getting
> Centrify OpenSSH to play nicely, and this avoids the "OpenSSH 5.x does
> not read .bashrc and read user aliases
On Mon, 7 Mar 2011, Nico Kadel-Garcia wrote:
> NFSv4 is *NOT* your friend, and Kerberizing it effectively is not
> trivial. I'm using Centrify for that and to have a reliable upstream
> vendor who can actually support it. (I'm on a contract.) What's the
> issue you're encountering, besides the lac
On Mon, 7 Mar 2011, Ross Walker wrote:
> 1Gbe can do 115MB/s @ 64K+ IO size, but at 4k IO size (NFS) 55MB/s is about
> it.
>
> If you need each node to be able to read 90-100MB/s you would need to setup
> a cluster file system using iSCSI or FC and make sure the cluster file
> system can handle la
On Mon, 7 Mar 2011, Laurence Hurst wrote:
> On Thu, Mar 03, 2011 at 03:11:52PM +, Digimer wrote:
>> How about the rest of you? What are you looking forward to in CentOS 6
>> when it is released?
>>
> For me the big wins with CentOS 6 should be SSSD to simplify and centralise
> (on the machine)
On Tue, 8 Mar 2011, Ross Walker wrote:
> The OP wanted 90MB/s per node and we have no clue whether the application he
> is using is capable of driving 1MB block sizes.
I thought he wanted 90MB/s reads per node (and I've demonstrated that's doable
with NFS). The only reason I'm not showing it wi
On Tue, 8 Mar 2011, Ross Walker wrote:
> Well on my local disk I don't cache the data of tens or hundreds of clients
> and a server can have a memory fault and oops just as easily as any client.
>
> Also I believe it doesn't sync every single write (unless mounted on the
> client sync which is onl
On Tue, 8 Mar 2011, wessel van der aart wrote:
> does anyone here uses nfs without sync in production? does data corrupt
> often?
Yes, I use it. If you had an NFS server that regularly died due to hardware
faults, or kernel panics, then I wouldn't consider using it.
> all the data send from the
On Wed, 9 Mar 2011, Ross Walker wrote:
> On Mar 8, 2011, at 12:02 PM, John Hodrien wrote:
>
>> The absolute definiton of safe here is quite important. In the event of a
>> power loss, and a failure of the UPS, quite possibly also followed by a
>> failure of the RAID batt
On Wed, 9 Mar 2011, Ross Walker wrote:
> On Mar 8, 2011, at 12:25 PM, John Hodrien wrote:
>>
>> I think you're right that this is how it should work, I'm just not entirely
>> sure that's actually generally the case (whether that's because typical
>>
On Wed, 9 Mar 2011, Dvorkin, Asya wrote:
> I was wondering if there is a way to do http authentication without passing
> my username/password considering server is already binded to AD, thus
> authenticated.
>
> Would I be able to utilize PAM authentication for this purpose?
mod_auth_kerb can u
On Wed, 9 Mar 2011, Dvorkin, Asya wrote:
> Thank you, John.
>
> I forgot to add that we cannot generate keytab from AD server for various
> reasons that I have no control over.
>
> Would mod_auth_kerb still work? My google searches all point to keytab file
> being there...
Yes. If you join AD
On Wed, 9 Mar 2011, John Hodrien wrote:
> On Wed, 9 Mar 2011, Dvorkin, Asya wrote:
>
>> Thank you, John.
>>
>> I forgot to add that we cannot generate keytab from AD server for various
>> reasons that I have no control over.
And are you really sure this is the case
On Wed, 9 Mar 2011, Michael Eager wrote:
> The problem with randomly replacing various components, other than
> the downtime and nuisance, is that there's no way to know that the
> change actually fixed any problem. When the base rate is one
> unknown system hang every few weeks, how many wees sh
On Wed, 9 Mar 2011, compdoc wrote:
> +36C and +39C are likely your cpu and motherboard temps. You have to look at
> the temps in the cmos and match them.
>
> The +87C is likely just a miss-reading by lm_sensors. Anything running that
> hot won't be stable.
In testing nVidia graphics cards to dest
On Thu, 10 Mar 2011, Simon Matter wrote:
> - Take a vacuum cleaner and *carefully* clean the whole box. Dust can
> really do bad things because it is not a perfect insulator.
Take the wrong vacuum cleaner and static your machine to death.
jh
___
CentOS
On Thu, 10 Mar 2011, Dvorkin, Asya wrote:
> John,
>
> Thank you for all your pointers! You are right.. I was able to create a
> keytab file. Still having some issues with getting apache to work the way I
> wan to, but will continue troubleshooting it.
No problem, and I'll be interested to hear
On Mon, 14 Mar 2011, Michael B Allen wrote:
> Hi Asya,
>
> You must set the servicePrincipalName attribute on the service account
> (MYSERVER$ in this case) to include all of the hostnames that will be
> used to access the web server which in this case would be at least
> "HTTP/myserver.server.com
On Fri, 11 Mar 2011, David Brian Chait wrote:
> It appears as though you need to create a proper SPN/keytab from the AD
> server:
>
> http://publib.boulder.ibm.com/infocenter/wasinfo/v6r1/index.jsp?topic=/com.ibm.websphere.express.doc/info/exp/ae/tsec_SPNEGO_config_dc.html
I've done this just wi
On Fri, 11 Mar 2011, David Brian Chait wrote:
>> I looked in AD configuration and see that my server does not have
>> appropriate ServicePrincipalName for HTTP (only host).
>
> Of course it doesn't, you gathered that ticket by joining the domain with
> Samba, but are not using samba auth with apa
On Fri, 11 Mar 2011, Dvorkin, Asya wrote:
> [root@myserver conf]# klist -k
> Keytab name: FILE:/etc/krb5.keytab
> KVNO Principal
>
> --
> 2 host/myserver.server@core.host.edu
> 2 host/rmyserver.server@core.ho
On Wed, 16 Mar 2011, Michael B Allen wrote:
> On Mon, Mar 14, 2011 at 5:58 AM, John Hodrien wrote:
>> On Mon, 14 Mar 2011, Michael B Allen wrote:
>>
>>> Hi Asya,
>>>
>>> You must set the servicePrincipalName attribute on the service account
>>
On Fri, 18 Mar 2011, Michael B Allen wrote:
> Hi John,
>
> Arguably it's not the end-of-the-world to go though CNAMEs. If it
> works for you, then don't let me deter you.
Indeed it does, and it was the only way I could see you /could/ do this.
Especially if you're not a domain admin. I'm still n
On Fri, 18 Mar 2011, MOKRANI Rachid wrote:
> Hi,
>
> I'm looking a wiki or share experience for replace NIS authentication by
> an existing Active directory Server (W2003). The problem is on the
> management of id and gid.
>
> How to move 1000 actual NIS users to AD ?
Create matching accounts i
On Fri, 18 Mar 2011, Nico Kadel-Garcia wrote:
> It can otherwise be done manually, but the data entry time wasted for
> your engineers well justifies the price of a Centrify license or two.
What do you mean by manually? Can't this all be done with ypcat, ldapmodify
and a shell script? After whi
On Fri, 18 Mar 2011, Michael B Allen wrote:
Hi John,
Actually I think this practice is now considered poor behavior. I look
at a lot of packet captures and I don't recall seeing PTR lookups. At
least not from Windows clients. Also I recall there was a discussion
about this on the Kerberos list
On Tue, 22 Mar 2011, Michael B Allen wrote:
> Hi John,
>
> You would not have to create "dummy" machine records. The
> servicePrincipalName attribute on an AD account is multi-valued and
> clients can request and get a ticket for ANY principal in that list.
> So you only need one account.
>
> And
On Wed, 23 Mar 2011, Michael B Allen wrote:
Yes, but using the machine principal you're able to request any number of
service principals that are SERVICENAME/. For this to work in a
virtual hosting environment, you need multiple machine names (since we're
talking about making a number of HTTP/
On Thu, 24 Mar 2011, Michael B Allen wrote:
> On Wed, Mar 23, 2011 at 2:35 PM, John Hodrien wrote:
>> On Wed, 23 Mar 2011, Michael B Allen wrote:
>>
>> Sure, but if you're not a domain admin, you've only got a machine principal,
>> and your own principal (wh
On Mon, 28 Mar 2011, ken wrote:
> Like the error says, you need to specify the display. I.e., on the
> remote machine you must set the environmental variable "DISPLAY"...
> something like
>
> (export DISPLAY=192.168.1.42:0.0 & firefox)
>
> Though this may work, this may well reveal another, diffe
On Wed, 30 Mar 2011, ken wrote:
> John,
>
> Whether or not it's "more work" is highly subjective. And it's not
> inherently insecure; people often *make* it insecure by lazily setting
> permissions to allow *any* server to have access. Even ssh can be
> insecure if it's not configured properly.
On Sat, 2 Apr 2011, Jay Leafey wrote:
> You COULD use option #1, but it requires some additional resources and a
> LOT of shuffling.
Why do you need to shuffle?
fdisk /dev/sda
delete the PV partition
create a new PV partition starting at the same sector but ending at the end of
the now larger di
On Mon, 4 Apr 2011, robert mena wrote:
> Hi Brunner,
>
> I need four network interfaces. This can be in one or multiple cards.
>
> The problem is just what you've described : lack of info regarding the
> compatibility/stability of such card under CentOS.
>
> And since some of those dual/quad card
On Mon, 4 Apr 2011, Tom Yates wrote:
> i occasionally trip my iptables rule myself, for example if i scp a couple
> of files off a server and then go back for a third; i feel it would be a
> shame to lock myself out for an hour, by doing that.
An argument for something like pam_tally? Ideally, y
On Tue, 5 Apr 2011, rrich...@blythe.org wrote:
> 1) Move sshd to another
> port, one higher than 5000
I'd have mixed feelings about the Wisdom of running on a non-reserved port.
jh
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailm
On Tue, 5 Apr 2011, Ljubomir Ljubojevic wrote:
> rpm is here:
> http://rpms.plnet.rs/centos5-i386/RPMS.plnet/skype-2.1.0.81-1.el5.noarch.rpm
>
> source rpm is now currently publicly available since I rearranged my
> repository links/path but haven't finished.
Since when did skype become noarch?
On Tue, 5 Apr 2011, Rudi Ahlers wrote:
> Why,
>
> We've been running SSH on hundreds of servers on a port higher than
> 5000 for year now and no problems at all.
I always feel slightly ickie about running services on ports normal users can
run on (this obviously depends a lot on who can run proce
On Wed, 6 Apr 2011, Jussi Hirvi wrote:
> On 5.4.2011 21.49, compdoc wrote:
>> For reasons of speed and ease of maintenance and backups, what I've settled
>> on is: a small separate drive for the host to boot from, a small separate
>> drive for the guest OSes (I like using qcow2 on WD Raptors), and
On Wed, 6 Apr 2011, Scott Robbins wrote:
> Not all that unique, but a bit better--I think it's
> VolumeGroup00/lvm_root, VolumeGroup00/lvm_swap, and things like that.
>
> (Keeping both LVs in the same VG by default.)
As far as I know it's much better than that:
The volume group by default with E
On Thu, 7 Apr 2011, Ljubomir Ljubojevic wrote:
> Just newer kernel and newer core packages that can drive newer
> applications. CentOS 5.5 kernel and core packages are 3-4 years old in
> the (Linux) world that dramatically changed since then.
I wouldn't refer to the 5.5 kernel as 3-4 years old as
On Sun, 10 Apr 2011, Alain Péan wrote:
After further verification, it seems to be related to ticket granting.
Here is what I have in /var/log/messages :
su: pam_krb5[7200]: TGT failed verification using keytab and key for
'host/bardeen.lab-lpp.local@LAB-LPP.LOCAL': Cannot find ticket for
request
On Tue, 12 Apr 2011, Alain Péan wrote:
Hi John,
Thnks for your answer. Here are the content of /etc/krb5.conf and klist
-ke. I agree that there can be siomething missing, that was working
before...
The keytab isn't valid for the host as it doesn't contain a usable principal
for doing a valida
On Tue, 12 Apr 2011, Alain Péan wrote:
Sorrry, little error with the output of klit -ke, because I am testing
on a test AD domain at this moment. On the first machine, output is :
# klist -ke
Keytab name: FILE:/etc/krb5.keytab
KVNO Principal
-
On Tue, 12 Apr 2011, Alain Péan wrote:
In fact, I solved the problem using the authconfig command, but I wonder
if it is really correct, as I mixed kerberos and ldap. Here is the
authconfig command for my test domain :
Using kerberos and ldap is a perfectly reasonable thing to want to do, but
On Tue, 12 Apr 2011, Alain Péan wrote:
Indeed, nothing fails now. I want my users to authenticate against
Active directory, and it works, and I would like them to be able to use
their kerberos credentials, if they need, to access domain ressources,
as shares. But I have still to see a problem th
On Tue, 12 Apr 2011, Alain Péan wrote:
Le 12/04/2011 22:03, John Hodrien a écrit :
On Tue, 12 Apr 2011, Alain Péan wrote:
Indeed, nothing fails now. I want my users to authenticate against
Active directory, and it works, and I would like them to be able to use
their kerberos credentials, if
On Wed, 13 Apr 2011, Alain Péan wrote:
Hi John,
There are only two realms I mentionned, LAB-LPP.LOCAL, and
TEST-LPP.LOCAL. I am currently doing test with the latter, and indeed,
pc-2003-test is the AD DC, so the KDC for TEST-LPP.LOCAL. The fdqn is
also pc-2003-test.test-lpp.local.
'kinit ' wor
On Wed, 13 Apr 2011, Alain Péan wrote:
I'll try know, with the change in /etc/krb5.conf (validate = false), if
it works now.
It won't (or at least it shouldn't). Validate is essential as it confirms
that the KDC providing the TGT to the user is the same KDC that you registered
with when you j
On Wed, 13 Apr 2011, Kai Schaetzl wrote:
> I'm not aware of an IPMI command that shows current power consumption.
That entirely depends on the system as far as I'm aware.
Dell R610 will give you this information from "ipmitool sdr":
Current 1| 0.28 Amps | ok
Current 2| 0
On Wed, 13 Apr 2011, Kai Schaetzl wrote:
> John Hodrien wrote on Wed, 13 Apr 2011 16:37:16 +0100 (BST):
>
>> System Level | 126 Watts | ok
>
> Ah, thanks. My systems don't show that :-)
Yep, it's entirely system dependent. And on a current Dell, I belie
On Wed, 13 Apr 2011, Joseph L. Casale wrote:
>> Well, Nagios is more for outage/alerts were I was looking more for
>> trending.
>>
>> Thats why I was originally using Cacti w/Nagios plugin.
>
> There are plenty of graphing/trending addons for Nagios, I moved to
> Icinga and use PNP4Nagios with it.
On Thu, 21 Apr 2011, Karanbir Singh wrote:
> On 04/21/2011 09:26 AM, Johnny Hughes wrote:
>>> Other workarounds for this particular issue have just been suggested here:
>>> http://lists.centos.org/pipermail/centos/2011-April/110547.html
>>> http://lists.centos.org/pipermail/centos/2011-April/11055
On Thu, 21 Apr 2011, Mathieu Baudier wrote:
> Sorry, but not everybody is on production machines.
>
> Since the OP could not analyze himself the error message, one could
> safely assume he is not dealing with critical production environments.
> Maybe he was just told: "install quickly this CentOS
On Thu, 21 Apr 2011, Karanbir Singh wrote:
> yes, a package was released, unsigned, and has been fixed. ( and 4 more
> tests added to the release process to make sure that this does not
> happen again; or atleast reduce the chance of this going out ).
And if people stick with the sane practice of
On Thu, 28 Apr 2011, Mattias Geniar wrote:
>> Did you include nss_initgroups_ignoreuser in your /etc/ldap.conf?
>>
>> nss_initgroups_ignoreusers root,ldap
>>
>> Brgds
>
> Hi Benjamin,
>
> I tried that, but that just makes it hang upon the next service trying
> to start (in our case: a zabbix monit
On Thu, 28 Apr 2011, Scott Robbins wrote:
> On Thu, Apr 28, 2011 at 03:52:44PM +0100, John Hodrien wrote:
>> On Thu, 28 Apr 2011, Mattias Geniar wrote:
>>
>>> could be a work-around I can live with, but it doesn't appear there is.
>>
>> I'd hope you
On Thu, 28 Apr 2011, Mattias Geniar wrote:
> I read quite a few topics on that solving the issue, but it didn't seem
> to be that case in my environment.
> Are there other workarounds/tips if the bind_policy doesn't work? The
> rc.local hack seems ... ugly ... and embarrassing if a client would
>
On Fri, 29 Apr 2011, Devin Reade wrote:
> Probably moot now anyway as nobody is interested in fixing it since sssd
> will cure all ills and bring world peace. (Insert sarcasm/skepticism as
> appropriate.)
I'd probably argue that nss_ldap is fundamentally unfixable. Why *not* get
behind sssd? H
On Tue, 3 May 2011, Mattias Geniar wrote:
> Understandable, but since a lot of people are still going to stick with
> CentOS 4/5 for legacy reasons, I would argue that nss_ldap is still
> worth "fixing".
I'm not saying it's not worth fixing, I suspect it's fundamentally unfixable
without a comple
On Tue, 3 May 2011, aurfal...@gmail.com wrote:
> So whats the answer today for ~10K users?
>
> The bug fixes suggested here work around the problems I have been
> encountering.
Well that's good then.
> Can any one comment on what ppl are using for larger deployments? I
> hope its not a resoundi
On Thu, 5 May 2011, Gordon Messmer wrote:
> On 05/03/2011 10:43 AM, aurfal...@gmail.com wrote:
>> Can any one comment on what ppl are using for larger deployments? I
>> hope its not a resounding M$ AD?!
>
> Use sssd. It's now included in CentOS 5.
Included doesn't necessarily mean usable though
On Fri, 8 May 2020, Leon Fauster via CentOS wrote:
Does someone uses EL8 as a workstation (GUI) here?
As a daily desktop, yes.
This bug is super annoying
https://bugzilla.redhat.com/show_bug.cgi?id=1808900
and it seems not to get addressed in the current branch.
How could a developer work
On Tue, 27 Sep 2011, Jon Detert wrote:
> I have a VMWare ESX server with virtual machines running CentOS. I want to
> add an ethernet interface to one of the CentOS virtual machines. VMWare
> allowed me to add a virtual NIC to the CentOS virtual machine while it was
> running. However, the Cent
On Tue, 27 Sep 2011, Alfred von Campe wrote:
> Most of my desktops are still running CentOS5, but I have installed CentOS6
> on a few of them. The users on those desktops are reporting that DNS
> lookups are slow, and from my brief tests, that does appear to be the case.
> After some googling, I
On Tue, 27 Sep 2011, Jon Detert wrote:
> I wonder if it has to do with the type of NIC. In my case, vmware says it's
> of
> type 'flexible', and the CentOS o.s uses the 'pcnet32' driver for it.
Right. When I add an e1000 NIC in vSphere to the VM, I immediately see a
message in dmesg.
jh
_
On Wed, 28 Sep 2011, Jerry Geis wrote:
> How do I get the centos 6 console screen out of high-res mode?
>
> I tried a couple things of adding to the grub.conf file vga=ask
> and vga=769. Neither had any effect. I did not get prompted to ask for
> what mode
> or anything
>
> Whats the correct
On Thu, 29 Sep 2011, Weiner, Michael wrote:
> I am trying to find a DVD iso that is not a torrent, and looking through
> the mirrors I am unable to find one. Does anyone happen to have a mirror
> or repository that they know of that carries the DVD iso for direct
> download? I am behind a pretty s
On Wed, 5 Oct 2011, Steve Rikli wrote:
> Why? I'll grant NIS is insecure at best for login auth, and should not
> be used for that purpose (at least not outside the lab).
>
> But for other purposes e.g. automount maps, NIS is simple and easy and
> still functional.
>
> I'll also readily agree I w
On Thu, 6 Oct 2011, James A. Peltier wrote:
> | The problem you get is when you compare it with LDAP.
> |
> | jh
>
> There is no comparison. NIS is *much* faster than LDAP for these purposes.
And slow (and let's put it into context here, not *that* slow) performance of
automount map resolution b
On Thu, 6 Oct 2011, Morgan Cox wrote:
> Hi.
>
> I am trying to use Mock to rebuild a .src.rpm file I have made for PHP 5.3.8
> (for Centos6)
>
> I have managed to install deps fine with mock.
>
> When I try to rebuild the package though I get.
BuildRequires are wrong, since this SRPM requires fil
On Thu, 6 Oct 2011, Steve Rikli wrote:
> In article , John
> Hodrien wrote:
>> On Wed, 5 Oct 2011, Steve Rikli wrote:
>>
>>> ...
>>> I'll also readily agree I wouldn't want NIS on internet-facing systems,
>>> but for things like automount
On Thu, 6 Oct 2011, Stephen Harris wrote:
> On Thu, Oct 06, 2011 at 09:14:35PM +0100, John Hodrien wrote:
>> place, I think it's hard to list *any* honest advantages over LDAP. Sorry, I
>> don't consider performance to be a credible advantage, especially after
>&g
On Thu, 6 Oct 2011, Steve Rikli wrote:
> So, back to my original example of automount maps (which I've long thought
> about implementing in LDAP but never pursued), how do you deal with the
> situation of needing map(s) loaded, without an active user on the system
> to authenticate the LDAP query
On Thu, 6 Oct 2011, Stephen Harris wrote:
> Which, up until a few months ago, was "no client". Solaris is crap (they
> recently rewrote their caching infrastructure to make it better); AIX
> is crap (with it's own unique solution and persistent connections).
> HPUX is crap
;)
> Oh wait... w
1 - 100 of 480 matches
Mail list logo