Re: [CentOS] input/output error while copy

2011-01-14 Thread John Hodrien
On Fri, 14 Jan 2011, Robert Spangler wrote: > On Friday 14 January 2011 04:01, Ritika Garg wrote: > >> When I give the command "cp file1 file2" then the error comes: >> cp: cannot create regular file `file2': Input/output error >> >> This occurs sometimes and it occurs when I am giving the comm

Re: [CentOS] Troubles for an non-IT beginner

2011-01-19 Thread John Hodrien
On Wed, 19 Jan 2011, Les Mikesell wrote: > CentOS would likely only be used as a desktop OS by people who also run > servers and like everything to be the same. They all assemble approximately > the same set of upstream packages, though, so it is possible to make them > all do the same things wit

Re: [CentOS] Troubles for an non-IT beginner

2011-01-19 Thread John Hodrien
On Wed, 19 Jan 2011, Les Mikesell wrote: > That's not true for desktop applications and environments. If you don't > have something current you are missing the improvements that many > thousands of man-hours of work have made. But I guess that's the bit I don't /always/ buy into. In the pre-Fed

Re: [CentOS] Troubles for an non-IT beginner

2011-01-19 Thread John Hodrien
On Wed, 19 Jan 2011, Les Mikesell wrote: > Sorry, but Outlook 2003 and 2007 are huge improvements over earlier > versions - and lacking tight integration between messaging and > calendar/scheduling has been one of the places where free software > really missed the boat. But then that's partly Mic

Re: [CentOS] How to disable screen locking system-wide?

2011-01-20 Thread John Hodrien
On Thu, 20 Jan 2011, Rudi Ahlers wrote: > I don't know about you, but a user leaving his desk (for any purpose, > other than going home) doesn't cause a security risk. I trust all our > staff, and when Andrew goes on lunch I expect him to leave his PC > unlocked. I think I see things differently.

Re: [CentOS] How to disable screen locking system-wide?

2011-01-20 Thread John Hodrien
On Thu, 20 Jan 2011, Rudi Ahlers wrote: I think I see things differently.  Allowing others to access your account *is* a security risk.  It potentially opens confidential data open to other people, and leaves that specific user open to abuse through people using their machine.  You might as well

Re: [CentOS] How to disable screen locking system-wide?

2011-01-20 Thread John Hodrien
On Thu, 20 Jan 2011, Sorin Srbu wrote: >> -Original Message- >> From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On >> Behalf Of Tom H >> Sent: Thursday, January 20, 2011 1:03 PM >> To: CentOS mailing list >> Subject: Re: [CentOS] How to disable screen locking system-wide

Re: [CentOS] How to disable screen locking system-wide?

2011-01-20 Thread John Hodrien
On Thu, 20 Jan 2011, Tom H wrote: > Yes but someone's posted a global gconftool-2 recipe. Run gconf-editor as root and you can edit the global mandatory rules too. jh ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/ce

Re: [CentOS] How to disable screen locking system-wide?

2011-01-20 Thread John Hodrien
On Thu, 20 Jan 2011, Ross Walker wrote: > On Jan 19, 2011, at 2:44 PM, Bob Eastbrook wrote: > >> By default, CentOS v5 requires a user's password when the system wakes >> up from the screensaver. This can be disabled by each user, but how >> can I disable this system-wide? Many of my users forg

Re: [CentOS] How to disable screen locking system-wide?

2011-01-20 Thread John Hodrien
On Thu, 20 Jan 2011, m.r...@5-cent.us wrote: > Excuse me, but when I was in college, I heard the spiel about not leaving > workstations unlocked, if only because some idiots would get cute and do > something from your terminal to embarrass you, and/or aggravate someone > else. cat >> .bashrc

Re: [CentOS] How to disable screen locking system-wide?

2011-01-20 Thread John Hodrien
On Thu, 20 Jan 2011, Rudi Ahlers wrote: > Benjamin, I'm sorry to say this, but you're wrong! I'm fairly sure he's not. > Now, since we're doing the name-calling thing, let's get that out of the way. > > Sometimes you need to access a PC of a staff member who is busy with > something right now. A

Re: [CentOS] how to unmount an NFS share when the NFS server is unavailable?

2011-01-26 Thread John Hodrien
On Wed, 26 Jan 2011, Rudi Ahlers wrote: > That won't really work. The NFS clients run cPanel and we need a way > for end-users to have full access to their backups all the time. We > used to run backup over FTP, but then when a client wanted to restore > data one of the techs first had to download

Re: [CentOS] how to unmount an NFS share when the NFS server is unavailable?

2011-01-26 Thread John Hodrien
On Wed, 26 Jan 2011, Dr. Ed Morbius wrote: > I'd suggest the automount route as well (you're only open to NFS issues > while the filesystem is mounted), but you then have to maintain > automount maps and run the risk of issues with the automounter (I've > seen large production environments in whic

Re: [CentOS] Recommendation for a Linux alternative to Centos - ATH9K disaster

2011-01-26 Thread John Hodrien
On Thu, 27 Jan 2011, Always Learning wrote: > Thanks for the explanation. Now I know why locate never usually worked > for me - it hadn't updated. > > find is fast, especially when I restrict the search paths. But locate is faster still, in all but the smallest of cases. I'd only tend to use fin

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-26 Thread John Hodrien
On Thu, 27 Jan 2011, Nico Kadel-Garcia wrote: > Wrong again. Never use public key access for root accounts, it simply > compounds the security risks. Passphrase protected SSH keys can be > used, reasonably, for account access on other hosts, but should be > avoided for root access. If you *HAVE* t

Re: [CentOS] Recommendation for a Linux alternative to Centos - ATH9K disaster

2011-01-28 Thread John Hodrien
On Fri, 28 Jan 2011, Nico Kadel-Garcia wrote: > One *does* have to remember the "mlocate" package's limitations. It > doesn't browse network mounted directories, it doesn't browse /tmp or > look for other excluded targets, and it runs with the nightly cron > jobs. So if you're looking for files in

Re: [CentOS] Recommendation for a Linux alternative to Centos - ATH9K disaster

2011-01-28 Thread John Hodrien
On Fri, 28 Jan 2011, Always Learning wrote: > > On Fri, 2011-01-28 at 14:50 +, John Hodrien wrote: > >> All configurable via /etc/updatedb.conf if your local needs differ. > > How does one remove it ? > > yum erase updated ? > > It is not present in

Re: [CentOS] iSCSI disk preperation

2011-02-08 Thread John Hodrien
On Tue, 8 Feb 2011, Dr. Ed Morbius wrote: > *OR* as a special case, if access is *only* read-only (or read-only to > all but one initiator). I get the all read-only case, but wouldn't the read-only clients end up caching filesystem data that has since been changed by the read-write client? I'd ha

Re: [CentOS] Strange Kernel for Centos 5.5

2011-02-11 Thread John Hodrien
On Fri, 11 Feb 2011, m.r...@5-cent.us wrote: > They have *everything* to do. Look, I *said* this is OT, but since you > insist, the overwhelmingly *bad* design decision was to put the GUI into > ring 0, instead of the way Windows 3, and X on *Nix, and *everybody* else > did, resulting in a GUI err

Re: [CentOS] server specifications

2011-02-14 Thread John Hodrien
On Mon, 14 Feb 2011, Always Learning wrote: > > On Sun, 2011-02-13 at 19:21 -0700, compdoc wrote: > >>> ECC allows for single bit errors to be corrected and multiple bit >>> errors to be noticed. > >> I know what it is and I've used it in the past, but I just don't see many >> errors going on in d

Re: [CentOS] server specifications

2011-02-14 Thread John Hodrien
On Mon, 14 Feb 2011, Nico Kadel-Garcia wrote: > But the accumulated costs of the higher end motherboard, memory, > shortage of space for upgrades in the same unit, the downtime at the > BIOS to reset the "disabled by default" ECC settings in the BIOS, and > the system monitoring to detect and mana

Re: [CentOS] server specifications

2011-02-14 Thread John Hodrien
On Mon, 14 Feb 2011, Nico Kadel-Garcia wrote: Trust me, it's a pain in the keister in production. If the standard is now enabled, good: I haven't had my hands inside a server in a year, I admit it. (My current role doesn't call for it.) It *didn't* used to be standard. Are you sure it is? I bu

Re: [CentOS] Samba quota for AD users

2011-03-01 Thread John Hodrien
On Mon, 28 Feb 2011, John R Pierce wrote: > On 02/28/11 7:28 AM, system minami wrote: >> Can someone please help how to enable samba quota for Active Directory >> users' home directory automatically ? > > Samba has quota support? Good luck with that. Quotas are generally a > file system thing,

Re: [CentOS] Samba quota for AD users

2011-03-03 Thread John Hodrien
On Thu, 3 Mar 2011, system minami wrote: > # repquota -a > (snip) > user -- 40 0 0 7 0 0 > (snip) > W2K8AD1\administrator -- 124 0 0 28 0 0 > W2K8AD1\samba -- 4 0 10 1 0 0 > > It see

Re: [CentOS] Centos 6 - What are you looking forward to?

2011-03-04 Thread John Hodrien
On Fri, 4 Mar 2011, Nico Kadel-Garcia wrote: > Contemporary versions of git, subversion, and OpenSSH built-in. I'm > particularly looking forward to the built-in chroot capabilities and > GSSAPI support in OpenSSH, and the major release improvements to git > and subversion. What does the new GSSA

Re: [CentOS] Centos 6 - What are you looking forward to?

2011-03-07 Thread John Hodrien
On Sat, 5 Mar 2011, Nico Kadel-Garcia wrote: > On Fri, Mar 4, 2011 at 7:57 AM, John Hodrien wrote: >> On Fri, 4 Mar 2011, Nico Kadel-Garcia wrote: >> >>> Contemporary versions of git, subversion, and OpenSSH built-in. I'm >>> particularly looking forward t

Re: [CentOS] Centos 6 - What are you looking forward to?

2011-03-07 Thread John Hodrien
On Mon, 7 Mar 2011, Nico Kadel-Garcia wrote: > Have you backported OpenSSH 5.x to CentOS 5? Because I don't see the > full features set without OpenSSH 5.x, such as "GSSApiKeyExchange". Nope, I like the simple life. > Hmm. What you've described is an ssh_config option, which is set to > "no" by

Re: [CentOS] Centos 6 - What are you looking forward to?

2011-03-07 Thread John Hodrien
On Mon, 7 Mar 2011, Nico Kadel-Garcia wrote: > If this works, you've just solved a *BIG* problem for me: I'd been > handed (ordered before I arrived on the site) the issues of getting > Centrify OpenSSH to play nicely, and this avoids the "OpenSSH 5.x does > not read .bashrc and read user aliases

Re: [CentOS] Centos 6 - What are you looking forward to?

2011-03-07 Thread John Hodrien
On Mon, 7 Mar 2011, Nico Kadel-Garcia wrote: > NFSv4 is *NOT* your friend, and Kerberizing it effectively is not > trivial. I'm using Centrify for that and to have a reliable upstream > vendor who can actually support it. (I'm on a contract.) What's the > issue you're encountering, besides the lac

Re: [CentOS] connection speeds between nodes

2011-03-07 Thread John Hodrien
On Mon, 7 Mar 2011, Ross Walker wrote: > 1Gbe can do 115MB/s @ 64K+ IO size, but at 4k IO size (NFS) 55MB/s is about > it. > > If you need each node to be able to read 90-100MB/s you would need to setup > a cluster file system using iSCSI or FC and make sure the cluster file > system can handle la

Re: [CentOS] Centos 6 - What are you looking forward to?

2011-03-07 Thread John Hodrien
On Mon, 7 Mar 2011, Laurence Hurst wrote: > On Thu, Mar 03, 2011 at 03:11:52PM +, Digimer wrote: >> How about the rest of you? What are you looking forward to in CentOS 6 >> when it is released? >> > For me the big wins with CentOS 6 should be SSSD to simplify and centralise > (on the machine)

Re: [CentOS] connection speeds between nodes

2011-03-08 Thread John Hodrien
On Tue, 8 Mar 2011, Ross Walker wrote: > The OP wanted 90MB/s per node and we have no clue whether the application he > is using is capable of driving 1MB block sizes. I thought he wanted 90MB/s reads per node (and I've demonstrated that's doable with NFS). The only reason I'm not showing it wi

Re: [CentOS] connection speeds between nodes

2011-03-08 Thread John Hodrien
On Tue, 8 Mar 2011, Ross Walker wrote: > Well on my local disk I don't cache the data of tens or hundreds of clients > and a server can have a memory fault and oops just as easily as any client. > > Also I believe it doesn't sync every single write (unless mounted on the > client sync which is onl

Re: [CentOS] connection speeds between nodes

2011-03-09 Thread John Hodrien
On Tue, 8 Mar 2011, wessel van der aart wrote: > does anyone here uses nfs without sync in production? does data corrupt > often? Yes, I use it. If you had an NFS server that regularly died due to hardware faults, or kernel panics, then I wouldn't consider using it. > all the data send from the

Re: [CentOS] connection speeds between nodes

2011-03-09 Thread John Hodrien
On Wed, 9 Mar 2011, Ross Walker wrote: > On Mar 8, 2011, at 12:02 PM, John Hodrien wrote: > >> The absolute definiton of safe here is quite important. In the event of a >> power loss, and a failure of the UPS, quite possibly also followed by a >> failure of the RAID batt

Re: [CentOS] connection speeds between nodes

2011-03-09 Thread John Hodrien
On Wed, 9 Mar 2011, Ross Walker wrote: > On Mar 8, 2011, at 12:25 PM, John Hodrien wrote: >> >> I think you're right that this is how it should work, I'm just not entirely >> sure that's actually generally the case (whether that's because typical >>

Re: [CentOS] Apache/Active Directory authentication

2011-03-09 Thread John Hodrien
On Wed, 9 Mar 2011, Dvorkin, Asya wrote: > I was wondering if there is a way to do http authentication without passing > my username/password considering server is already binded to AD, thus > authenticated. > > Would I be able to utilize PAM authentication for this purpose? mod_auth_kerb can u

Re: [CentOS] Apache/Active Directory authentication

2011-03-09 Thread John Hodrien
On Wed, 9 Mar 2011, Dvorkin, Asya wrote: > Thank you, John. > > I forgot to add that we cannot generate keytab from AD server for various > reasons that I have no control over. > > Would mod_auth_kerb still work? My google searches all point to keytab file > being there... Yes. If you join AD

Re: [CentOS] Apache/Active Directory authentication

2011-03-09 Thread John Hodrien
On Wed, 9 Mar 2011, John Hodrien wrote: > On Wed, 9 Mar 2011, Dvorkin, Asya wrote: > >> Thank you, John. >> >> I forgot to add that we cannot generate keytab from AD server for various >> reasons that I have no control over. And are you really sure this is the case

Re: [CentOS] Server hangs on CentOS 5.5

2011-03-09 Thread John Hodrien
On Wed, 9 Mar 2011, Michael Eager wrote: > The problem with randomly replacing various components, other than > the downtime and nuisance, is that there's no way to know that the > change actually fixed any problem. When the base rate is one > unknown system hang every few weeks, how many wees sh

Re: [CentOS] Server hangs on CentOS 5.5

2011-03-10 Thread John Hodrien
On Wed, 9 Mar 2011, compdoc wrote: > +36C and +39C are likely your cpu and motherboard temps. You have to look at > the temps in the cmos and match them. > > The +87C is likely just a miss-reading by lm_sensors. Anything running that > hot won't be stable. In testing nVidia graphics cards to dest

Re: [CentOS] Server hangs on CentOS 5.5

2011-03-10 Thread John Hodrien
On Thu, 10 Mar 2011, Simon Matter wrote: > - Take a vacuum cleaner and *carefully* clean the whole box. Dust can > really do bad things because it is not a perfect insulator. Take the wrong vacuum cleaner and static your machine to death. jh ___ CentOS

Re: [CentOS] Apache/Active Directory authentication

2011-03-10 Thread John Hodrien
On Thu, 10 Mar 2011, Dvorkin, Asya wrote: > John, > > Thank you for all your pointers! You are right.. I was able to create a > keytab file. Still having some issues with getting apache to work the way I > wan to, but will continue troubleshooting it. No problem, and I'll be interested to hear

Re: [CentOS] Apache/Active Directory authentication

2011-03-14 Thread John Hodrien
On Mon, 14 Mar 2011, Michael B Allen wrote: > Hi Asya, > > You must set the servicePrincipalName attribute on the service account > (MYSERVER$ in this case) to include all of the hostnames that will be > used to access the web server which in this case would be at least > "HTTP/myserver.server.com

Re: [CentOS] Apache/Active Directory authentication

2011-03-14 Thread John Hodrien
On Fri, 11 Mar 2011, David Brian Chait wrote: > It appears as though you need to create a proper SPN/keytab from the AD > server: > > http://publib.boulder.ibm.com/infocenter/wasinfo/v6r1/index.jsp?topic=/com.ibm.websphere.express.doc/info/exp/ae/tsec_SPNEGO_config_dc.html I've done this just wi

Re: [CentOS] Apache/Active Directory authentication

2011-03-14 Thread John Hodrien
On Fri, 11 Mar 2011, David Brian Chait wrote: >> I looked in AD configuration and see that my server does not have >> appropriate ServicePrincipalName for HTTP (only host). > > Of course it doesn't, you gathered that ticket by joining the domain with > Samba, but are not using samba auth with apa

Re: [CentOS] Apache/Active Directory authentication

2011-03-14 Thread John Hodrien
On Fri, 11 Mar 2011, Dvorkin, Asya wrote: > [root@myserver conf]# klist -k > Keytab name: FILE:/etc/krb5.keytab > KVNO Principal > > -- > 2 host/myserver.server@core.host.edu > 2 host/rmyserver.server@core.ho

Re: [CentOS] Apache/Active Directory authentication

2011-03-17 Thread John Hodrien
On Wed, 16 Mar 2011, Michael B Allen wrote: > On Mon, Mar 14, 2011 at 5:58 AM, John Hodrien wrote: >> On Mon, 14 Mar 2011, Michael B Allen wrote: >> >>> Hi Asya, >>> >>> You must set the servicePrincipalName attribute on the service account >>

Re: [CentOS] Apache/Active Directory authentication

2011-03-18 Thread John Hodrien
On Fri, 18 Mar 2011, Michael B Allen wrote: > Hi John, > > Arguably it's not the end-of-the-world to go though CNAMEs. If it > works for you, then don't let me deter you. Indeed it does, and it was the only way I could see you /could/ do this. Especially if you're not a domain admin. I'm still n

Re: [CentOS] Replace NIS by Active Directory

2011-03-18 Thread John Hodrien
On Fri, 18 Mar 2011, MOKRANI Rachid wrote: > Hi, > > I'm looking a wiki or share experience for replace NIS authentication by > an existing Active directory Server (W2003). The problem is on the > management of id and gid. > > How to move 1000 actual NIS users to AD ? Create matching accounts i

Re: [CentOS] Replace NIS by Active Directory

2011-03-18 Thread John Hodrien
On Fri, 18 Mar 2011, Nico Kadel-Garcia wrote: > It can otherwise be done manually, but the data entry time wasted for > your engineers well justifies the price of a Centrify license or two. What do you mean by manually? Can't this all be done with ypcat, ldapmodify and a shell script? After whi

Re: [CentOS] Apache/Active Directory authentication

2011-03-19 Thread John Hodrien
On Fri, 18 Mar 2011, Michael B Allen wrote: Hi John, Actually I think this practice is now considered poor behavior. I look at a lot of packet captures and I don't recall seeing PTR lookups. At least not from Windows clients. Also I recall there was a discussion about this on the Kerberos list

Re: [CentOS] Apache/Active Directory authentication

2011-03-22 Thread John Hodrien
On Tue, 22 Mar 2011, Michael B Allen wrote: > Hi John, > > You would not have to create "dummy" machine records. The > servicePrincipalName attribute on an AD account is multi-valued and > clients can request and get a ticket for ANY principal in that list. > So you only need one account. > > And

Re: [CentOS] Apache/Active Directory authentication

2011-03-23 Thread John Hodrien
On Wed, 23 Mar 2011, Michael B Allen wrote: Yes, but using the machine principal you're able to request any number of service principals that are SERVICENAME/.  For this to work in a virtual hosting environment, you need multiple machine names (since we're talking about making a number of HTTP/

Re: [CentOS] Apache/Active Directory authentication

2011-03-25 Thread John Hodrien
On Thu, 24 Mar 2011, Michael B Allen wrote: > On Wed, Mar 23, 2011 at 2:35 PM, John Hodrien wrote: >> On Wed, 23 Mar 2011, Michael B Allen wrote: >> >> Sure, but if you're not a domain admin, you've only got a machine principal, >> and your own principal (wh

Re: [CentOS] Failed to start new browser session: Error while launching browser on session null

2011-03-29 Thread John Hodrien
On Mon, 28 Mar 2011, ken wrote: > Like the error says, you need to specify the display. I.e., on the > remote machine you must set the environmental variable "DISPLAY"... > something like > > (export DISPLAY=192.168.1.42:0.0 & firefox) > > Though this may work, this may well reveal another, diffe

Re: [CentOS] Failed to start new browser session: Error while launching browser on session null

2011-03-30 Thread John Hodrien
On Wed, 30 Mar 2011, ken wrote: > John, > > Whether or not it's "more work" is highly subjective. And it's not > inherently insecure; people often *make* it insecure by lazily setting > permissions to allow *any* server to have access. Even ssh can be > insecure if it's not configured properly.

Re: [CentOS] Best way to extend pv partition for LVM

2011-04-04 Thread John Hodrien
On Sat, 2 Apr 2011, Jay Leafey wrote: > You COULD use option #1, but it requires some additional resources and a > LOT of shuffling. Why do you need to shuffle? fdisk /dev/sda delete the PV partition create a new PV partition starting at the same sector but ending at the end of the now larger di

Re: [CentOS] Tips for motherboard with multiple PCI / PCI-e slots

2011-04-04 Thread John Hodrien
On Mon, 4 Apr 2011, robert mena wrote: > Hi Brunner, > > I need four network interfaces. This can be in one or multiple cards. > > The problem is just what you've described : lack of info regarding the > compatibility/stability of such card under CentOS. > > And since some of those dual/quad card

Re: [CentOS] sshd: Authentication Failures: 137 Time(s)

2011-04-04 Thread John Hodrien
On Mon, 4 Apr 2011, Tom Yates wrote: > i occasionally trip my iptables rule myself, for example if i scp a couple > of files off a server and then go back for a third; i feel it would be a > shame to lock myself out for an hour, by doing that. An argument for something like pam_tally? Ideally, y

Re: [CentOS] sshd: Authentication Failures: 137 Time(s)

2011-04-05 Thread John Hodrien
On Tue, 5 Apr 2011, rrich...@blythe.org wrote: > 1) Move sshd to another > port, one higher than 5000 I'd have mixed feelings about the Wisdom of running on a non-reserved port. jh ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailm

Re: [CentOS] Centos 6 Update?

2011-04-05 Thread John Hodrien
On Tue, 5 Apr 2011, Ljubomir Ljubojevic wrote: > rpm is here: > http://rpms.plnet.rs/centos5-i386/RPMS.plnet/skype-2.1.0.81-1.el5.noarch.rpm > > source rpm is now currently publicly available since I rearranged my > repository links/path but haven't finished. Since when did skype become noarch?

Re: [CentOS] sshd: Authentication Failures: 137 Time(s)

2011-04-05 Thread John Hodrien
On Tue, 5 Apr 2011, Rudi Ahlers wrote: > Why, > > We've been running SSH on hundreds of servers on a port higher than > 5000 for year now and no problems at all. I always feel slightly ickie about running services on ports normal users can run on (this obviously depends a lot on who can run proce

Re: [CentOS] KVM Host Disk Performance

2011-04-06 Thread John Hodrien
On Wed, 6 Apr 2011, Jussi Hirvi wrote: > On 5.4.2011 21.49, compdoc wrote: >> For reasons of speed and ease of maintenance and backups, what I've settled >> on is: a small separate drive for the host to boot from, a small separate >> drive for the guest OSes (I like using qcow2 on WD Raptors), and

Re: [CentOS] KVM Host Disk Performance

2011-04-07 Thread John Hodrien
On Wed, 6 Apr 2011, Scott Robbins wrote: > Not all that unique, but a bit better--I think it's > VolumeGroup00/lvm_root, VolumeGroup00/lvm_swap, and things like that. > > (Keeping both LVs in the same VG by default.) As far as I know it's much better than that: The volume group by default with E

Re: [CentOS] Centos 6 Update?

2011-04-07 Thread John Hodrien
On Thu, 7 Apr 2011, Ljubomir Ljubojevic wrote: > Just newer kernel and newer core packages that can drive newer > applications. CentOS 5.5 kernel and core packages are 3-4 years old in > the (Linux) world that dramatically changed since then. I wouldn't refer to the 5.5 kernel as 3-4 years old as

Re: [CentOS] Kerberos/LDAP authentication no more working in 5.6 ?

2011-04-12 Thread John Hodrien
On Sun, 10 Apr 2011, Alain Péan wrote: After further verification, it seems to be related to ticket granting. Here is what I have in /var/log/messages : su: pam_krb5[7200]: TGT failed verification using keytab and key for 'host/bardeen.lab-lpp.local@LAB-LPP.LOCAL': Cannot find ticket for request

Re: [CentOS] Kerberos/LDAP authentication no more working in 5.6 ?

2011-04-12 Thread John Hodrien
On Tue, 12 Apr 2011, Alain Péan wrote: Hi John, Thnks for your answer. Here are the content of /etc/krb5.conf and klist -ke. I agree that there can be siomething missing, that was working before... The keytab isn't valid for the host as it doesn't contain a usable principal for doing a valida

Re: [CentOS] Kerberos/LDAP authentication no more working in 5.6 ?

2011-04-12 Thread John Hodrien
On Tue, 12 Apr 2011, Alain Péan wrote: Sorrry, little error with the output of klit -ke, because I am testing on a test AD domain at this moment. On the first machine, output is : # klist -ke Keytab name: FILE:/etc/krb5.keytab KVNO Principal -

Re: [CentOS] Kerberos/LDAP authentication no more working in 5.6 ?

2011-04-12 Thread John Hodrien
On Tue, 12 Apr 2011, Alain Péan wrote: In fact, I solved the problem using the authconfig command, but I wonder if it is really correct, as I mixed kerberos and ldap. Here is the authconfig command for my test domain : Using kerberos and ldap is a perfectly reasonable thing to want to do, but

Re: [CentOS] Kerberos/LDAP authentication no more working in 5.6 ?

2011-04-12 Thread John Hodrien
On Tue, 12 Apr 2011, Alain Péan wrote: Indeed, nothing fails now. I want my users to authenticate against Active directory, and it works, and I would like them to be able to use their kerberos credentials, if they need, to access domain ressources, as shares. But I have still to see a problem th

Re: [CentOS] Kerberos/LDAP authentication no more working in 5.6 ?

2011-04-13 Thread John Hodrien
On Tue, 12 Apr 2011, Alain Péan wrote: Le 12/04/2011 22:03, John Hodrien a écrit : On Tue, 12 Apr 2011, Alain Péan wrote: Indeed, nothing fails now. I want my users to authenticate against Active directory, and it works, and I would like them to be able to use their kerberos credentials, if

Re: [CentOS] Kerberos/LDAP authentication no more working in 5.6 ?

2011-04-13 Thread John Hodrien
On Wed, 13 Apr 2011, Alain Péan wrote: Hi John, There are only two realms I mentionned, LAB-LPP.LOCAL, and TEST-LPP.LOCAL. I am currently doing test with the latter, and indeed, pc-2003-test is the AD DC, so the KDC for TEST-LPP.LOCAL. The fdqn is also pc-2003-test.test-lpp.local. 'kinit ' wor

Re: [CentOS] Kerberos/LDAP authentication no more working in 5.6 ?

2011-04-13 Thread John Hodrien
On Wed, 13 Apr 2011, Alain Péan wrote: I'll try know, with the change in /etc/krb5.conf (validate = false), if it works now. It won't (or at least it shouldn't). Validate is essential as it confirms that the KDC providing the TGT to the user is the same KDC that you registered with when you j

Re: [CentOS] Monitoring power consumption

2011-04-13 Thread John Hodrien
On Wed, 13 Apr 2011, Kai Schaetzl wrote: > I'm not aware of an IPMI command that shows current power consumption. That entirely depends on the system as far as I'm aware. Dell R610 will give you this information from "ipmitool sdr": Current 1| 0.28 Amps | ok Current 2| 0

Re: [CentOS] Monitoring power consumption

2011-04-13 Thread John Hodrien
On Wed, 13 Apr 2011, Kai Schaetzl wrote: > John Hodrien wrote on Wed, 13 Apr 2011 16:37:16 +0100 (BST): > >> System Level | 126 Watts | ok > > Ah, thanks. My systems don't show that :-) Yep, it's entirely system dependent. And on a current Dell, I belie

Re: [CentOS] SNMP monitoring options

2011-04-14 Thread John Hodrien
On Wed, 13 Apr 2011, Joseph L. Casale wrote: >> Well, Nagios is more for outage/alerts were I was looking more for >> trending. >> >> Thats why I was originally using Cacti w/Nagios plugin. > > There are plenty of graphing/trending addons for Nagios, I moved to > Icinga and use PNP4Nagios with it.

Re: [CentOS] rpm libuser-devel is not signed

2011-04-21 Thread John Hodrien
On Thu, 21 Apr 2011, Karanbir Singh wrote: > On 04/21/2011 09:26 AM, Johnny Hughes wrote: >>> Other workarounds for this particular issue have just been suggested here: >>> http://lists.centos.org/pipermail/centos/2011-April/110547.html >>> http://lists.centos.org/pipermail/centos/2011-April/11055

Re: [CentOS] rpm libuser-devel is not signed

2011-04-21 Thread John Hodrien
On Thu, 21 Apr 2011, Mathieu Baudier wrote: > Sorry, but not everybody is on production machines. > > Since the OP could not analyze himself the error message, one could > safely assume he is not dealing with critical production environments. > Maybe he was just told: "install quickly this CentOS

Re: [CentOS] rpm libuser-devel is not signed

2011-04-21 Thread John Hodrien
On Thu, 21 Apr 2011, Karanbir Singh wrote: > yes, a package was released, unsigned, and has been fixed. ( and 4 more > tests added to the release process to make sure that this does not > happen again; or atleast reduce the chance of this going out ). And if people stick with the sane practice of

Re: [CentOS] LDAPs causing System Message Bus to hang when there's no network

2011-04-28 Thread John Hodrien
On Thu, 28 Apr 2011, Mattias Geniar wrote: >> Did you include nss_initgroups_ignoreuser in your /etc/ldap.conf? >> >> nss_initgroups_ignoreusers root,ldap >> >> Brgds > > Hi Benjamin, > > I tried that, but that just makes it hang upon the next service trying > to start (in our case: a zabbix monit

Re: [CentOS] LDAPs causing System Message Bus to hang when there's no network

2011-04-28 Thread John Hodrien
On Thu, 28 Apr 2011, Scott Robbins wrote: > On Thu, Apr 28, 2011 at 03:52:44PM +0100, John Hodrien wrote: >> On Thu, 28 Apr 2011, Mattias Geniar wrote: >> >>> could be a work-around I can live with, but it doesn't appear there is. >> >> I'd hope you&#

Re: [CentOS] LDAPs causing System Message Bus to hang when there's no network

2011-04-28 Thread John Hodrien
On Thu, 28 Apr 2011, Mattias Geniar wrote: > I read quite a few topics on that solving the issue, but it didn't seem > to be that case in my environment. > Are there other workarounds/tips if the bind_policy doesn't work? The > rc.local hack seems ... ugly ... and embarrassing if a client would >

Re: [CentOS] LDAPs causing System Message Bus to hang when there's no network

2011-05-03 Thread John Hodrien
On Fri, 29 Apr 2011, Devin Reade wrote: > Probably moot now anyway as nobody is interested in fixing it since sssd > will cure all ills and bring world peace. (Insert sarcasm/skepticism as > appropriate.) I'd probably argue that nss_ldap is fundamentally unfixable. Why *not* get behind sssd? H

Re: [CentOS] LDAPs causing System Message Bus to hang when there's no network

2011-05-03 Thread John Hodrien
On Tue, 3 May 2011, Mattias Geniar wrote: > Understandable, but since a lot of people are still going to stick with > CentOS 4/5 for legacy reasons, I would argue that nss_ldap is still > worth "fixing". I'm not saying it's not worth fixing, I suspect it's fundamentally unfixable without a comple

Re: [CentOS] LDAPs causing System Message Bus to hang when there's no network

2011-05-04 Thread John Hodrien
On Tue, 3 May 2011, aurfal...@gmail.com wrote: > So whats the answer today for ~10K users? > > The bug fixes suggested here work around the problems I have been > encountering. Well that's good then. > Can any one comment on what ppl are using for larger deployments? I > hope its not a resoundi

Re: [CentOS] LDAPs causing System Message Bus to hang when there's no network

2011-05-05 Thread John Hodrien
On Thu, 5 May 2011, Gordon Messmer wrote: > On 05/03/2011 10:43 AM, aurfal...@gmail.com wrote: >> Can any one comment on what ppl are using for larger deployments? I >> hope its not a resounding M$ AD?! > > Use sssd. It's now included in CentOS 5. Included doesn't necessarily mean usable though

Re: [CentOS] DND Issues in Gnome (GTK3 regression)

2020-05-11 Thread John Hodrien
On Fri, 8 May 2020, Leon Fauster via CentOS wrote: Does someone uses EL8 as a workstation (GUI) here? As a daily desktop, yes. This bug is super annoying https://bugzilla.redhat.com/show_bug.cgi?id=1808900 and it seems not to get addressed in the current branch. How could a developer work

Re: [CentOS] is there a way to make the kernel see a new ethernet device without rebooting?

2011-09-27 Thread John Hodrien
On Tue, 27 Sep 2011, Jon Detert wrote: > I have a VMWare ESX server with virtual machines running CentOS. I want to > add an ethernet interface to one of the CentOS virtual machines. VMWare > allowed me to add a virtual NIC to the CentOS virtual machine while it was > running. However, the Cent

Re: [CentOS] Slow DNS lookups on CentOS6

2011-09-27 Thread John Hodrien
On Tue, 27 Sep 2011, Alfred von Campe wrote: > Most of my desktops are still running CentOS5, but I have installed CentOS6 > on a few of them. The users on those desktops are reporting that DNS > lookups are slow, and from my brief tests, that does appear to be the case. > After some googling, I

Re: [CentOS] is there a way to make the kernel see a new ethernet device without rebooting?

2011-09-27 Thread John Hodrien
On Tue, 27 Sep 2011, Jon Detert wrote: > I wonder if it has to do with the type of NIC. In my case, vmware says it's > of > type 'flexible', and the CentOS o.s uses the 'pcnet32' driver for it. Right. When I add an e1000 NIC in vSphere to the VM, I immediately see a message in dmesg. jh _

Re: [CentOS] centos 6 console screen

2011-09-28 Thread John Hodrien
On Wed, 28 Sep 2011, Jerry Geis wrote: > How do I get the centos 6 console screen out of high-res mode? > > I tried a couple things of adding to the grub.conf file vga=ask > and vga=769. Neither had any effect. I did not get prompted to ask for > what mode > or anything > > Whats the correct

Re: [CentOS] 5.7 x86_64 DVD iso

2011-09-29 Thread John Hodrien
On Thu, 29 Sep 2011, Weiner, Michael wrote: > I am trying to find a DVD iso that is not a torrent, and looking through > the mirrors I am unable to find one. Does anyone happen to have a mirror > or repository that they know of that carries the DVD iso for direct > download? I am behind a pretty s

Re: [CentOS] Odd issue with C6 and NIS

2011-10-06 Thread John Hodrien
On Wed, 5 Oct 2011, Steve Rikli wrote: > Why? I'll grant NIS is insecure at best for login auth, and should not > be used for that purpose (at least not outside the lab). > > But for other purposes e.g. automount maps, NIS is simple and easy and > still functional. > > I'll also readily agree I w

Re: [CentOS] Odd issue with C6 and NIS

2011-10-06 Thread John Hodrien
On Thu, 6 Oct 2011, James A. Peltier wrote: > | The problem you get is when you compare it with LDAP. > | > | jh > > There is no comparison. NIS is *much* faster than LDAP for these purposes. And slow (and let's put it into context here, not *that* slow) performance of automount map resolution b

Re: [CentOS] Mock - Problems building Centos5 package on Centos6 - where can I ask for advice ?

2011-10-06 Thread John Hodrien
On Thu, 6 Oct 2011, Morgan Cox wrote: > Hi. > > I am trying to use Mock to rebuild a .src.rpm file I have made for PHP 5.3.8 > (for Centos6) > > I have managed to install deps fine with mock. > > When I try to rebuild the package though I get. BuildRequires are wrong, since this SRPM requires fil

Re: [CentOS] Odd issue with C6 and NIS

2011-10-06 Thread John Hodrien
On Thu, 6 Oct 2011, Steve Rikli wrote: > In article , John > Hodrien wrote: >> On Wed, 5 Oct 2011, Steve Rikli wrote: >> >>> ... >>> I'll also readily agree I wouldn't want NIS on internet-facing systems, >>> but for things like automount

Re: [CentOS] Odd issue with C6 and NIS

2011-10-06 Thread John Hodrien
On Thu, 6 Oct 2011, Stephen Harris wrote: > On Thu, Oct 06, 2011 at 09:14:35PM +0100, John Hodrien wrote: >> place, I think it's hard to list *any* honest advantages over LDAP. Sorry, I >> don't consider performance to be a credible advantage, especially after >&g

Re: [CentOS] Odd issue with C6 and NIS

2011-10-06 Thread John Hodrien
On Thu, 6 Oct 2011, Steve Rikli wrote: > So, back to my original example of automount maps (which I've long thought > about implementing in LDAP but never pursued), how do you deal with the > situation of needing map(s) loaded, without an active user on the system > to authenticate the LDAP query

Re: [CentOS] Odd issue with C6 and NIS

2011-10-06 Thread John Hodrien
On Thu, 6 Oct 2011, Stephen Harris wrote: > Which, up until a few months ago, was "no client". Solaris is crap (they > recently rewrote their caching infrastructure to make it better); AIX > is crap (with it's own unique solution and persistent connections). > HPUX is crap ;) > Oh wait... w

  1   2   3   4   5   >