Re: Courier-IMAPs / POP3s login question

2005-01-04 Thread Mark Bucciarelli
On Tuesday 04 January 2005 08:55, Emmanuel Lacour wrote: > As I understand, he want to authenticate users with ssl certs Courier can do SASL_PLAIN auth for imap and pop auth. See /etc/courier/imapd and /etc/courier/pop3d. Regards, Mark -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a s

Re: Courier-IMAPs / POP3s login question

2005-01-04 Thread Emmanuel Lacour
On Tue, Jan 04, 2005 at 08:48:57AM -0500, Mark Bucciarelli wrote: > > Did you try this? > > # apt-get install courier-imap-ssl > # man mkimapdcert > # cat /etc/courier/imapd.cnf > As I understand, he want to authenticate users with ssl certs, not only to encrypt the imap transmission. I don't k

Re: Courier-IMAPs / POP3s login question

2005-01-04 Thread Mark Bucciarelli
On Tuesday 04 January 2005 03:53, Jens Zahner wrote: > martin f krafft wrote: > > Beyond the documentation and the comments in the files in > > /etc/courier, you mean? > > I couldn't find any helpfull information about ssl cert based auth > neither in the files nor in the documentation and google c

Re: Courier-IMAPs / POP3s login question

2005-01-04 Thread Jens Zahner
martin f krafft wrote: Beyond the documentation and the comments in the files in /etc/courier, you mean? I couldn't find any helpfull information about ssl cert based auth neither in the files nor in the documentation and google couldn't help me too. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED

Re: Courier-IMAPs / POP3s login question

2004-12-29 Thread martin f krafft
also sprach Jens Zahner <[EMAIL PROTECTED]> [2004.12.29.1121 +0100]: > Any hints? Beyond the documentation and the comments in the files in /etc/courier, you mean? -- Please do not send copies of list mail to me; I read the list! .''`. martin f. krafft <[EMAIL PROTECTED]> : :' :proud

Courier-IMAPs / POP3s login question

2004-12-29 Thread Jens Zahner
I've sucessfully set up public key infrastructure and now I want to use cert based auth for imaps and/or pop3s services, if this wouldn't be possible ip based auth would satisfy my needs too. All services are using ldap authentication currently. Any hints? Greetings Jens Zahner -- Jens Zahner IT-Se

Re: mrtg cfgmaker question

2004-10-21 Thread Steve Haavik
On Wed, 20 Oct 2004, Ben Vinger wrote: > Date: Wed, 20 Oct 2004 10:48:28 +0100 (BST) > From: Ben Vinger <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] > Subject: mrtg cfgmaker question > Resent-Date: Wed, 20 Oct 2004 04:48:40 -0500 (CDT) > Resent-From: [EMAIL PROTECTED]

mrtg cfgmaker question

2004-10-20 Thread Ben Vinger
Hi I'm using the following to create an mrtg.cfg: cfgmaker --snmp-options=::5:3:1:3 public@ --output mrtg.cfg The Cisco website states that the Cisco 831 uses SNMP v3, which is the last number under "snmp-options" above. But if I run this, it won't communicate, giving these errors: SNMP Error:

Re: Apt-Get Update/Upgrade Question

2004-09-29 Thread Aurélien Beaujean
Le mercredi 29 septembre 2004 à 06:51, David Thurman écrivait: > Is their a way to set our /etc/apt/sources.list file or a apt-get > command to ignore MS and SA when doing security updates? You can put thoses packages « on hold » : echo " hold" | dpkg --set-selections -- Auré -- To UNSUBSCRI

Apt-Get Update/Upgrade Question

2004-09-29 Thread David Thurman
We are running testing/Sarge for our production machines and for one of the servers we are using MailScanner and SpamAssassin from unstable. I know it's not wise to mix the two, testing/unstable but we wanted the latest releases of MS/SA as they seem to be pretty stable. When we do apt-get update

Re: addenda to question about status of VLAN support in Debian/Linux in general

2004-09-12 Thread Jonathan G - Mailing Lists
In such case the best you can do is setup some kind of QoS on network gear and TOS labeling along your network in order to prioritize traffic and get rid as much as posible of hard flows. j Adrian 'Dagurashibanipal' von Bidder wrote: On Sunday 12 September 2004 12.41, Leonardo Boselli wrote: [.

Re: addenda to question about status of VLAN support in Debian/Linux in general

2004-09-12 Thread Adrian 'Dagurashibanipal' von Bidder
On Sunday 12 September 2004 12.41, Leonardo Boselli wrote: [...] > using only one NIC per server is just a > "clean wiring" consideration.) I guess the most important (and obvious) consideration is that all VLANs on the same wire share the same bandwidth. With normal loads, this should be fine,

addenda to question about status of VLAN support in Debian/Linux in general

2004-09-12 Thread Leonardo Boselli
Il 12 Sep 2004 alle 12:31 Leonardo Boselli immise in rete > Just an information: > i will have a netgear 526T and a AT 8024 > my servers have one a NIC driven by e1000 module, the other by > 8139too . > Currently they have two nic each, one with 2 addresses and one with > other two, connected

Re: backup DNS question

2004-07-27 Thread Marek Isalski
Kilian Krause writes: maybe i can throw in the reference to the "dnstracer" tool aswell. That's usually pretty handy to check where your bad dns data does come from. (in case you don't see the results you expected to have).. Another tool I find incredibly useful is DNS Bajaj: http://www.zonecut

Re: Question about drac-add tool and courier

2004-07-27 Thread Tomàs Núñez
Hi again! :) I wrote the attached email about a month ago. Since then, I've googled a lot, I've written to courier list, I've written to drac patch author, and some other lists, but I get no answer anywhere... And I don't know what to do :P I have two separate mail servers (one for incoming and

Re: backup DNS question

2004-07-27 Thread Kilian Krause
Hi, > dig @a.root-servers.net ns > > You'll get back the response or you'll get a referral to the next level > down... maybe i can throw in the reference to the "dnstracer" tool aswell. That's usually pretty handy to check where your bad dns data does come from. (in case you don't see the resu

Re: backup DNS question

2004-07-27 Thread Nate Duehr
On Jul 26, 2004, at 10:47 PM, Nate Duehr wrote: On Jul 26, 2004, at 4:25 PM, Kilian Krause wrote: Hi Dan, until your ns1 goes down too, things should go fine. If you think, you need to worry, watch the load on ns1. If that goes alarmingly up, then things start going wrong (which is *very* unlikely

Re: backup DNS question

2004-07-26 Thread Nate Duehr
On Jul 26, 2004, at 4:25 PM, Kilian Krause wrote: Hi Dan, until your ns1 goes down too, things should go fine. If you think, you need to worry, watch the load on ns1. If that goes alarmingly up, then things start going wrong (which is *very* unlikely to happen). If however you desire to make sure y

Re: backup DNS question

2004-07-26 Thread Jason Lim
> We have: > ns1.lctc.org > ns2.lctc.org > > ns2.lctc.org is (aparently) down. It is in a locked and alarmed building. > > How is this effecting users of our DNS? This shouldn't affect them... that is the idea of having a minimum of 2 DNS servers, so that in the event one failed, the other will co

Re: backup DNS question

2004-07-26 Thread Kilian Krause
Hi Dan, until your ns1 goes down too, things should go fine. If you think, you need to worry, watch the load on ns1. If that goes alarmingly up, then things start going wrong (which is *very* unlikely to happen). If however you desire to make sure your DNS is safe and accessible even in case ns2 i

backup DNS question

2004-07-26 Thread Dan MacNeil
We have: ns1.lctc.org ns2.lctc.org ns2.lctc.org is (aparently) down. It is in a locked and alarmed building. How is this effecting users of our DNS? Where in the fine manual is this information? We've looked at the backup DNS chapter of the bind book. We've also

Question about drac-add tool and courier

2004-06-21 Thread Tomàs Núñez Lirola
Hi In the DRAC homepage(http://mail.cc.umanitoba.ca/drac/pop.html) I've seen a tool to make DRAC work without modifying any courier-pop sources (http://mail.cc.umanitoba.ca/drac/courier-exec.txt). I've tried it, but I get no response and I don't know where to look at... I have separate pop and

Question about drac-add tool and courier

2004-06-21 Thread Tomàs Núñez Lirola
Hi In the DRAC homepage(http://mail.cc.umanitoba.ca/drac/pop.html) I've seen a tool to make DRAC work without modifying any courier-pop sources (http://mail.cc.umanitoba.ca/drac/courier-exec.txt). I've tried it, but I get no response and I don't know where to look at... I have separate pop and

Question about Exim

2004-05-21 Thread Phillip Hofmeister
Greetings everyone, I set up an Exim mail filter file containing the following: # Exim filter if $h_X-Amavis-Hold contains " " then freeze endif Is there a better condition that will test just for the existence of the header? I have tried def: without any luck. If anyone knows how, that wo

Question about Exim

2004-05-21 Thread Phillip Hofmeister
Greetings everyone, I set up an Exim mail filter file containing the following: # Exim filter if $h_X-Amavis-Hold contains " " then freeze endif Is there a better condition that will test just for the existence of the header? I have tried def: without any luck. If anyone knows how, that wo

Re: cisco and t1 line question

2004-04-16 Thread Andrew Miehs
heers Andrew On 16.04.2004, at 16:47, Theodore Knab wrote: I have a Cisco/Local T1 Loop question. We have a local T1 line between a building in town and our location. Verizon leases us the line. The Verizon line tech says that the linecode is switching between b8zs and ami. In the router config

cisco and t1 line question

2004-04-16 Thread Theodore Knab
I have a Cisco/Local T1 Loop question. We have a local T1 line between a building in town and our location. Verizon leases us the line. The Verizon line tech says that the linecode is switching between b8zs and ami. In the router config, the 'line code' for the interface connecting

Re: cisco and t1 line question

2004-04-16 Thread Andrew Miehs
heers Andrew On 16.04.2004, at 16:47, Theodore Knab wrote: I have a Cisco/Local T1 Loop question. We have a local T1 line between a building in town and our location. Verizon leases us the line. The Verizon line tech says that the linecode is switching between b8zs and ami. In the router c

cisco and t1 line question

2004-04-16 Thread Theodore Knab
I have a Cisco/Local T1 Loop question. We have a local T1 line between a building in town and our location. Verizon leases us the line. The Verizon line tech says that the linecode is switching between b8zs and ami. In the router config, the 'line code' for the interface connecting

Re: /etc/sudoers precedence question

2004-02-21 Thread MB
Ok, I got things to work if I used my FQDN: omacneil www.yourserver.com = NOPASSWD: /usr/cs/2002/omacneil/sbin/update Mark MB wrote: Looks like I forgot to test my answer.  It does not seem that you can use localhost as a hostname in omacneil localhost=NOPASSWD: /usr/cs/2002/omac

Re: /etc/sudoers precedence question

2004-02-21 Thread MB
Looks like I forgot to test my answer.  It does not seem that you can use localhost as a hostname in omacneil localhost=NOPASSWD: /usr/cs/2002/omacneil/sbin/update Try using ALL and things should work.  I use ALL in my sudo file and have not given it any other thought.  My machines are not

Re: /etc/sudoers precedence question

2004-02-21 Thread Dan MacNeil
> Are you running the "update" command using the full path? > > /usr/cs/2002/omacneil/sbin/update I am prompted for a password if I say: sudo /usr/cs/2002/omacneil/sbin/update or if I say sudo update which update gives me /usr/cs/2002/omacneil/sbin/update. I am aware that the curren

Re: /etc/sudoers precedence question

2004-02-21 Thread MB
Dan, Are you running the "update" command using the full path? /usr/cs/2002/omacneil/sbin/update Your sudo file allows running the above command only with no password. Also you should note that a sudo file like this allows for you to get a root shell via "sudo bash", which may or may not be

/etc/sudoers precedence question

2004-02-20 Thread Dan MacNeil
Given the sudoers file below omacneil (as a member of wheel) should be able to do anything with a password and should be able to run "update" with no password. I can run everything but only with a password. What am I missing? reversing the order of %wheel & omacneil lines doesn't change things.

(Was: Postfix doesn't reject empty senders) Sorry for the stupid question

2004-01-29 Thread Tomàs Núñez Lirola
Ok, ok, sorry for the stupid question :P I were reading the wrong manual, I should be reading the RFC... Well, thank you all, I'll try Spamassasin to stop spam coming this way... El Jueves, 29 de Enero de 2004 03:35, Fraser Campbell escribió: > On January 28, 2004 12:48 pm, Tomàs Núñe

(Was: Postfix doesn't reject empty senders) Sorry for the stupid question

2004-01-29 Thread Tomàs Núñez Lirola
Ok, ok, sorry for the stupid question :P I were reading the wrong manual, I should be reading the RFC... Well, thank you all, I'll try Spamassasin to stop spam coming this way... El Jueves, 29 de Enero de 2004 03:35, Fraser Campbell escribió: > On January 28, 2004 12:48 pm, Tomàs Núñe

Re: Apache/MySQL question

2004-01-19 Thread Jan Kokoska
On Mon, 2004-01-19 at 17:27, Jeremy Zawodny wrote: > On Mon, Jan 19, 2004 at 03:05:34PM +0100, Jan Kokoska wrote: > > On Mon, 2004-01-19 at 12:30, Francis Tyers wrote: > > > hmm, you might want to look into mysql replication, i just googled and > > > got: > > > > > > http://www.mysql.com/doc/en/Re

Re: Apache/MySQL question

2004-01-19 Thread Jeremy Zawodny
On Mon, Jan 19, 2004 at 03:05:34PM +0100, Jan Kokoska wrote: > On Mon, 2004-01-19 at 12:30, Francis Tyers wrote: > > hmm, you might want to look into mysql replication, i just googled and > > got: > > > > http://www.mysql.com/doc/en/Replication.html > > http://jeremy.zawodny.com/mysql/managing-mys

Re: Apache/MySQL question

2004-01-19 Thread Jan Kokoska
On Mon, 2004-01-19 at 17:27, Jeremy Zawodny wrote: > On Mon, Jan 19, 2004 at 03:05:34PM +0100, Jan Kokoska wrote: > > On Mon, 2004-01-19 at 12:30, Francis Tyers wrote: > > > hmm, you might want to look into mysql replication, i just googled and > > > got: > > > > > > http://www.mysql.com/doc/en/Re

Re: Apache/MySQL question

2004-01-19 Thread Jeremy Zawodny
On Mon, Jan 19, 2004 at 03:05:34PM +0100, Jan Kokoska wrote: > On Mon, 2004-01-19 at 12:30, Francis Tyers wrote: > > hmm, you might want to look into mysql replication, i just googled and > > got: > > > > http://www.mysql.com/doc/en/Replication.html > > http://jeremy.zawodny.com/mysql/managing-mys

Re: Apache/MySQL question

2004-01-19 Thread Jan Kokoska
On Mon, 2004-01-19 at 12:30, Francis Tyers wrote: > hmm, you might want to look into mysql replication, i just googled and > got: > > http://www.mysql.com/doc/en/Replication.html > http://jeremy.zawodny.com/mysql/managing-mysql-replication.html > if you are on a lower budget, perhaps look at rsyn

Re: Apache/MySQL question

2004-01-19 Thread Jan Kokoska
On Mon, 2004-01-19 at 12:30, Francis Tyers wrote: > hmm, you might want to look into mysql replication, i just googled and > got: > > http://www.mysql.com/doc/en/Replication.html > http://jeremy.zawodny.com/mysql/managing-mysql-replication.html > if you are on a lower budget, perhaps look at rsyn

Re: Apache/MySQL question

2004-01-19 Thread Francis Tyers
hmm, you might want to look into mysql replication, i just googled and got: http://www.mysql.com/doc/en/Replication.html http://jeremy.zawodny.com/mysql/managing-mysql-replication.html as for apache, will you be using dynamic or static pages? you might want to look at a shared filesystem maybe?

Apache/MySQL question

2004-01-19 Thread Craig Schneider
Hi Guys I might be seting up a Debian box in the near future that is going to need to be able to mirror itself with another Debian box. It will be running Apache and MySQL however they are going to need to be exact clones of each other. Is this very difficult to setup and do you have any pointers

Re: Apache/MySQL question

2004-01-19 Thread Francis Tyers
hmm, you might want to look into mysql replication, i just googled and got: http://www.mysql.com/doc/en/Replication.html http://jeremy.zawodny.com/mysql/managing-mysql-replication.html as for apache, will you be using dynamic or static pages? you might want to look at a shared filesystem maybe?

Apache/MySQL question

2004-01-19 Thread Craig Schneider
Hi Guys I might be seting up a Debian box in the near future that is going to need to be able to mirror itself with another Debian box. It will be running Apache and MySQL however they are going to need to be exact clones of each other. Is this very difficult to setup and do you have any pointers

Re: Route Question!

2003-11-19 Thread Jeff S Wheeler
First, I strongly suggest you move your thread to the quagga-users list at [EMAIL PROTECTED] You can find numerous configuration examples in the archives at http://lists.quagga.net. This is the best forum for help with Zebra/Quagga. I suggest you follow-up on that list, which I also participate on.

Re: Route Question!

2003-11-19 Thread Jeff S Wheeler
First, I strongly suggest you move your thread to the quagga-users list at [EMAIL PROTECTED] You can find numerous configuration examples in the archives at http://lists.quagga.net. This is the best forum for help with Zebra/Quagga. I suggest you follow-up on that list, which I also participate on.

Route Question!

2003-11-19 Thread kgb
Hello guys, I have autonomously system, cisco router and Debian linux router on linux box i have zebra and ospf which communicated with cisco on cisco router i have bgp all my traffic which are bgpeer (all traffic in my country) and int (outside my country or with two words international traffic)

Route Question!

2003-11-19 Thread kgb
Hello guys, I have autonomously system, cisco router and Debian linux router on linux box i have zebra and ospf which communicated with cisco on cisco router i have bgp all my traffic which are bgpeer (all traffic in my country) and int (outside my country or with two words international traffic)

Apache question

2003-11-12 Thread Eduard Ballester
Hi We have a lot of strange log entry in our NetScreen FireWall: Nov 12 11:42:51 172.20.125.1 NSNAME: NetScreen device_id=NSNAME [MYISP]system-notification-00257(traffic): start_time="2003-11-12 11:42:10" duration=0 policy_id=51 service=tcp/port:20

Apache question

2003-11-12 Thread Eduard Ballester
Hi We have a lot of strange log entry in our NetScreen FireWall: Nov 12 11:42:51 172.20.125.1 NSNAME: NetScreen device_id=NSNAME [MYISP]system-notification-00257(traffic): start_time="2003-11-12 11:42:10" duration=0 policy_id=51 service=tcp/port:2

Re: musirc4.71.exe - firewall question

2003-10-04 Thread Jason Lim
> Anyway, I blocked it from connecting and I am trying to delete the file. I succeded and even put it in quarentine - but it keeps recreating itself. > > How can I get rid of it - or find the source that is recreating it? This is HIGHLY offtopic to this group, but anyway... Sounds like a virus.

musirc4.71.exe - firewall question

2003-10-04 Thread Elad Hemar
Hello all,   My personal firewall gives me a message that musirc4.71 is trying to create a listen port through 6667.  It is attempting every 2 minutes...   I believe it is an IRC port.   I searched in google and couldn't find anything about musirc4.71.exe.   I think it is an irc backdoor.   Does a

Shaper: Question?

2003-10-01 Thread kgb
Hello all, Can you tell me what software you use in your ISP for shaping users about few hundred users and what is your router hardware architecture and do you have some problems with cbq.init or your shaping software? Thank you for your help. -- Feci quod potui, faciant meliora potentes! sign

Re: RIPE Autonomously System: Question?

2003-09-30 Thread Nicolas Bougues
On Mon, Sep 29, 2003 at 12:01:29AM +0300, kgb wrote: > On Sun, 2003-09-28 at 23:40, Jonathan McDowell wrote: > > Yes and i thing that, do you know with mine architecture how traffic can > shift my PC without problem? And with more stronger PC architecture can > shift more traffic is that right? I

Re: RIPE Autonomously System: Question?

2003-09-29 Thread Stephane Bortzmeyer
On Mon, Sep 29, 2003 at 12:01:29AM +0300, kgb <[EMAIL PROTECTED]> wrote a message of 56 lines which said: > Yes and i thing that, do you know with mine architecture how traffic can > shift my PC without problem? Very difficult to tell, it depends on many things (for instance, on the typical si

Re: RIPE Autonomously System: Question?

2003-09-29 Thread Indra Kusuma
I am using all Debian machine as routers and servers on my ISP (no cisco label in the rack). My debian (zebra w/ BGP) machine manage my ASN and connect to Indonesian Internet eXchanges (IIX) and 3 Upstream for International BW. At 11:55 PM 9/28/2003 +0300, kgb wrote: On Sun, 2003-09-28 at 23:27,

Re: RIPE Autonomously System: Question?

2003-09-28 Thread kgb
On Sun, 2003-09-28 at 23:40, Jonathan McDowell wrote: > On Sun, Sep 28, 2003 at 10:52:03PM +0300, kgb wrote: > > > Next week i'll have AS from RIPE i'll be local LIR can i use zebra with > > bgpd on my debian linux to manage my network? i don't want to spend > > money for cisco router. > > Yes,

Re: RIPE Autonomously System: Question?

2003-09-28 Thread kgb
On Sun, 2003-09-28 at 23:27, Andy Coates wrote: > kgb ([EMAIL PROTECTED]) wrote: > > Hello all, > > > > Next week i'll have AS from RIPE i'll be local LIR can i use zebra with > > bgpd on my debian linux to manage my network? i don't want to spend > > money for cisco router. > > Although I can't

Re: RIPE Autonomously System: Question?

2003-09-28 Thread Jonathan McDowell
On Sun, Sep 28, 2003 at 10:52:03PM +0300, kgb wrote: > Next week i'll have AS from RIPE i'll be local LIR can i use zebra with > bgpd on my debian linux to manage my network? i don't want to spend > money for cisco router. Yes, Debian & Zebra might a fine option for bgp routing. The only problem

Re: RIPE Autonomously System: Question?

2003-09-28 Thread Andy Coates
kgb ([EMAIL PROTECTED]) wrote: > Hello all, > > Next week i'll have AS from RIPE i'll be local LIR can i use zebra with > bgpd on my debian linux to manage my network? i don't want to spend > money for cisco router. Although I can't see why LIR and zebra are in the same sentence, a lot of people

RIPE Autonomously System: Question?

2003-09-28 Thread kgb
Hello all, Next week i'll have AS from RIPE i'll be local LIR can i use zebra with bgpd on my debian linux to manage my network? i don't want to spend money for cisco router. Thanks. -- Feci quod potui, faciant meliora potentes! signature.asc Description: This is a digitally signed message par

SMTP retrys on failure -- General Question about rfc.

2003-09-08 Thread Theodore Knab
We lost our network connection recently for about an hour and I was going to explain to someone how mail servers work when it came apparent that I did not know the exact retry rate that other MTA servers use. So, I have been looking for information on mail server (MTA) retries. There does not s

Re: Question about system accounts in LDAP.

2003-08-14 Thread Donovan Baarda
On Tue, 2003-08-12 at 01:50, Fred Clausen wrote: > Hi All, > > I am in the process of deploying openldap for authentication. I am just > not sure what the best policy is for including system account like root, > daemon, lp, etc. in LDAP. Should they be there for consistency across > systems? Or wi

Re: Question about system accounts in LDAP.

2003-08-14 Thread Васил Колев
На ?, 2003-08-12 в 16:43, Stephane Bortzmeyer записа: > I do not really see why you want that (I suspect you should use groups > instead) but that's what PAM is for. Just put different things in > /etc/pam.d/ssh and /etc/pam.d/imap. I have a question about the pam thing ... I had t

Re: Question about system accounts in LDAP.

2003-08-14 Thread Korey Renner
I am not an expert. In fact, all my attempts at LDAP have been frusterated by authentication issues, but here is my take. The goal for LDAP authentication is to have consistent user accounts across a network of machines. System accounts do not need to roam like user accounts in this scenario. O

Question about system accounts in LDAP.

2003-08-14 Thread Fred Clausen
Hi All, I am in the process of deploying openldap for authentication. I am just not sure what the best policy is for including system account like root, daemon, lp, etc. in LDAP. Should they be there for consistency across systems? Or will they just cause confusion by having the same system accoun

Re: Question about system accounts in LDAP.

2003-08-14 Thread Donovan Baarda
On Wed, 2003-08-13 at 02:38, Korey Renner wrote: > I am not an expert. In fact, all my attempts at LDAP have been > frusterated by authentication issues, but here is my take. http://wiki.debian.net/index.cgi?LDAPAuthentication Most questions answered... the ones that aren't you can answer yourse

Re: Question about system accounts in LDAP.

2003-08-14 Thread Stephane Bortzmeyer
On Tue, Aug 12, 2003 at 11:15:17AM +0200, Leonardo Boselli <[EMAIL PROTECTED]> wrote a message of 23 lines which said: > I am thinking about ist: is possible to use the ldap authentication > for ALL BUT imap and ftp (that should use the passwd file I do not really see why you want that (

Re: Question about system accounts in LDAP.

2003-08-14 Thread Leonardo Boselli
I woul use a different password for crypted and uncrypted channels ! On 12 Aug 2003, at 15:43, Stephane Bortzmeyer wrote: > On Tue, Aug 12, 2003 at 11:15:17AM +0200, > Leonardo Boselli <[EMAIL PROTECTED]> wrote > a message of 23 lines which said: > > > I am thinking about ist: is possible to

Re: Question about system accounts in LDAP.

2003-08-14 Thread Jon Wood
On Tue, 2003-08-12 at 00:58, Donovan Baarda wrote: > On Tue, 2003-08-12 at 01:50, Fred Clausen wrote: [...snip...] > > > > What would you guys suggest is the best practice? > > In general its inadvisable to have system users in LDAP; when LDAP > breaks you can't even log in at the console as root

Re: Question about system accounts in LDAP.

2003-08-14 Thread Stephane Bortzmeyer
no. You can have a ssh authentication without anything in /etc/passwd. You need NSS, true (sshd looks up to see if the user name exists, before attempting authentication, and so getpwnam(3) must succeed) but not /etc/passwd if PAM and NSS both use LDAP. > So, my question is, am I wrong, or you a

Re: Question about system accounts in LDAP.

2003-08-12 Thread Leonardo Boselli
On 12 Aug 2003, at 9:58, Donovan Baarda wrote: > In general its inadvisable to have system users in LDAP; when LDAP > breaks you can't even log in at the console as root. > The default LDAP migration script in the debian migrationtools does > not migrate all users below UID 1000 and groups below GI

[Help] apache2 with openldap question.....

2003-07-23 Thread axacheng
Hello List¡G i'm axa from Asia , i've a question about apache2 TLS/SSL authenticate through openldap i've post my question in Gentoo GNU/Linux forum URL as follow http://forums.gentoo.org/viewtopic.php?t=69409 Could u look my question detail when u free. That's a very s

[Help] Please Help me about FreeS/WAN question........Thanks

2003-04-28 Thread axacheng
00 7. However, I am using ping command to ping 192.168.10.254 , i got ESP packet respond! Unfortunately, i CAN NOT ping 192.168.3.254[MIS] and 192.168.3.33[HOME] now..Its very strange. @_@ ▲My Question: 1. How do i let Windows2000 Clients using ipsec tunnel to connect to [HOME] ??

Re: easy lilo question

2003-03-25 Thread John Keimel
On Sun, Mar 16, 2003 at 02:31:23AM +0100, Marco Kammerer wrote: > i hope its an easy lilo question for you but i am about to kick that server :( > > i have a 3ware ATA Raid 7000-2b controller > together with an promises fasttrakt controller > together with 4 normal IDEs in a box &

Re: easy lilo question

2003-03-25 Thread Michelle Konzack
controller, the kernel will detect the Promise FastTrak and the standard IDE controller Michelle Am 02:31 2003-03-16 +0100 hat Marco Kammerer geschrieben: > >i hope its an easy lilo question for you but i am about to kick that server :( > >i have a 3ware ATA Raid 7000-2b controller &g

Re: easy lilo question

2003-03-25 Thread John Keimel
On Sun, Mar 16, 2003 at 02:31:23AM +0100, Marco Kammerer wrote: > i hope its an easy lilo question for you but i am about to kick that server :( > > i have a 3ware ATA Raid 7000-2b controller > together with an promises fasttrakt controller > together with 4 normal IDEs in a box &

Re: easy lilo question

2003-03-25 Thread Michelle Konzack
controller, the kernel will detect the Promise FastTrak and the standard IDE controller Michelle Am 02:31 2003-03-16 +0100 hat Marco Kammerer geschrieben: > >i hope its an easy lilo question for you but i am about to kick that server :( > >i have a 3ware ATA Raid 7000-2b controller &g

Question to: 400 000 mails in 12 Hours

2003-03-17 Thread Michelle Konzack
Am 12:10 2003-02-27 +0100 hat debian-isp geschrieben: > >Hi all ! >I have the task of setting up a mailserver capabel of sending 400 000 mail in a max time of 12 hours. >All mails have an attachment of 1 mb. The system should be a mailer for a newsletter system. As I made quite a couple of things

Question to: 400 000 mails in 12 Hours

2003-03-17 Thread Michelle Konzack
Am 12:10 2003-02-27 +0100 hat debian-isp geschrieben: > >Hi all ! >I have the task of setting up a mailserver capabel of sending 400 000 mail in a max time of 12 hours. >All mails have an attachment of 1 mb. The system should be a mailer for a newsletter system. As I made quite a couple of things

Re: easy lilo question

2003-03-16 Thread martin f krafft
also sprach Marco Kammerer <[EMAIL PROTECTED]> [2003.03.16.0231 +0100]: > how can i get lilo again to work? you need to configure your SCSI adapter's BIOS to claim 0x80 for its first disk. This has nothing to do with lilo. -- Please do not CC me when replying to lists; I read them! .''`.

Re: easy lilo question

2003-03-16 Thread martin f krafft
also sprach Marco Kammerer <[EMAIL PROTECTED]> [2003.03.16.0231 +0100]: > how can i get lilo again to work? you need to configure your SCSI adapter's BIOS to claim 0x80 for its first disk. This has nothing to do with lilo. -- Please do not CC me when replying to lists; I read them! .''`.

easy lilo question

2003-03-15 Thread Marco Kammerer
i hope its an easy lilo question for you but i am about to kick that server :(   i have a 3ware ATA Raid 7000-2b controller together with an promises fasttrakt controller together with 4 normal IDEs in a box   i run woody with 2.4.18 bf24 (now)   i want to boot from my 3ware mirror on sda

easy lilo question

2003-03-15 Thread Marco Kammerer
i hope its an easy lilo question for you but i am about to kick that server :(   i have a 3ware ATA Raid 7000-2b controller together with an promises fasttrakt controller together with 4 normal IDEs in a box   i run woody with 2.4.18 bf24 (now)   i want to boot from my 3ware mirror on sda

Re: Radius Question

2003-02-28 Thread Steve Suehring
Heh. Well, a google search for livingston radius linux config turned up a pile of stuff. This might help: http://portmasters.com/www.livingston.com/tech/docs/radius/introducing.html Steve On Fri, Feb 28, 2003 at 07:59:57AM -0800, Kevin Lynch wrote: > >WOOPS! > "L

RE: Radius Question

2003-02-28 Thread Kevin Lynch
Title: Message WOOPS!  "LIVINGSTON RADIUS"  I'm switching from Radius on a NT Server and I have the program install but, I'm not sure where the config files are supposed to go in Debian?   I also can't seem to find useful help files.     Suggestions?

Re: Radius Question

2003-02-28 Thread Steve Suehring
Heh. Well, a google search for livingston radius linux config turned up a pile of stuff. This might help: http://portmasters.com/www.livingston.com/tech/docs/radius/introducing.html Steve On Fri, Feb 28, 2003 at 07:59:57AM -0800, Kevin Lynch wrote: > >WOOPS! > "L

RE: Radius Question

2003-02-28 Thread Kevin Lynch
Title: Message WOOPS!  "LIVINGSTON RADIUS"  I'm switching from Radius on a NT Server and I have the program install but, I'm not sure where the config files are supposed to go in Debian?   I also can't seem to find useful help files.     Suggestions?

Re: Radius Question

2003-02-28 Thread Serkan Hamarat
Teun Vink wrote: It would help if you told us which radius server you're using... For radiusd-cistron (which we use at the ISP I work for), the configuration files are in /etc/raddb, documentation can be found in /usr/share/doc/radiusd-cistron. Same places for radiusd-freeradius package. Read /us

Re: Radius Question

2003-02-28 Thread Teun Vink
On Fri, 2003-02-28 at 01:02, Kevin Lynch wrote: > I'm switching from Radius on a NT Server and I have the program > install but, I'm not sure where the config files are supposed to go in > Debian? > > I also can't seem to find useful help files. > > > Suggestions? > > It would help if yo

Re: Radius Question

2003-02-28 Thread Serkan Hamarat
Teun Vink wrote: It would help if you told us which radius server you're using... For radiusd-cistron (which we use at the ISP I work for), the configuration files are in /etc/raddb, documentation can be found in /usr/share/doc/radiusd-cistron. Same places for radiusd-freeradius package. Read

Re: Radius Question

2003-02-28 Thread Teun Vink
On Fri, 2003-02-28 at 01:02, Kevin Lynch wrote: > I'm switching from Radius on a NT Server and I have the program > install but, I'm not sure where the config files are supposed to go in > Debian? > > I also can't seem to find useful help files. > > > Suggestions? > > It would help if yo

Re: Radius Question

2003-02-27 Thread Steve Suehring
Which radius server are you using? Steve On Thu, Feb 27, 2003 at 04:02:02PM -0800, Kevin Lynch wrote: > >I'm switching from Radius on a NT Server and I have the program >install but, I'm not sure where the config files are supposed to go in >Debian? > > > >I also can't seem t

Re: Radius Question

2003-02-27 Thread Steve Suehring
Which radius server are you using? Steve On Thu, Feb 27, 2003 at 04:02:02PM -0800, Kevin Lynch wrote: > >I'm switching from Radius on a NT Server and I have the program >install but, I'm not sure where the config files are supposed to go in >Debian? > > > >I also can't seem t

Radius Question

2003-02-27 Thread Kevin Lynch
Title: Message I'm switching from Radius on a NT Server and I have the program install but, I'm not sure where the config files are supposed to go in Debian?   I also can't seem to find useful help files.     Suggestions?    

Radius Question

2003-02-27 Thread Kevin Lynch
Title: Message I'm switching from Radius on a NT Server and I have the program install but, I'm not sure where the config files are supposed to go in Debian?   I also can't seem to find useful help files.     Suggestions?    

Re: tip and another question

2003-01-07 Thread Alex Borges (lex)
Tip Ive allways felt sar gives the best info regarding most of what ive needed... pretty massive at it though, but sometimes its good to have bundles of info to play with. Youd be able to turn any output from sar into an inetd ran service, no problem with that im shure. Question I want to know

Re: Cistron Radius password file question

2002-11-28 Thread Emile van Bergen
Hi, On Thu, Nov 28, 2002 at 07:09:49PM +0100, Radek Hnilica wrote: > > > > also, you might want to eventually move radius to this box too. if > > you're not using LDAP or other shared account db, it can be very useful > > to have with the radius server on the same machine as the mail server. >

  1   2   3   4   5   >