[CentOS] file system resizing with cloud-init on centos/redhat??
Hi, Has any one used resizefs module with cloud-init on centos/redhat before? How to call it with #cloud-config user data, do I need to give it any parameters? I googled cloud-init, but it is pretty difficult to find a manual/book on this, and mostly they are Ubuntu based. If possible, I'd like to use a same image/AMI to boot up instances(VMs) with different disk size setup, and let cloud-init to take care of increasing partition size, and file system resizing. Is it possible for centos/redhat? Any insights / suggestions are welcomed. Thanks. Gelen ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Failed to create /dev/loop0p* entries for partitions inside loopback devices
Hi Paul and all, Thanks for your workaround. I followed exactly with kpartx command, it does works for mkfs when using /dev/mapper/* entries. But there is still no /dev/loop0p* entries created. Do you have any ideas why? I've tried to use a loopback /dev/loop0 to simulate drive type storage pool for KVM virtualization tests, and so that always fails because no /dev/loop0p* entries created. Please shed a light on this. Thanks a lot. --Robin From: Paul Heinlein To: CentOS mailing list Sent: Friday, May 24, 2013 11:05 AM Subject: Re: [CentOS] Failed to create /dev/loop0p* entries for partitions inside loopback devices On Fri, 24 May 2013, Gelen James wrote: > centos 6 failed to create entries under /dev for newly created loopback > devices. Any one know why? and how to fix/workaround it? > > The steps to duplicate is pretty simple > > dd if=/dev/zero of=/tmp/deleteme bs=1M count=100 > losetup /dev/loop0 /tmp/deleteme > fdisk /dev/loop0 ## created partitions 1, 2, etc. > fdisk -l /dev/loop0 ## confirmed that the partitions do exist At this point, you need to run "kpartx -a /dev/loop0" (fdisk should have told you so). > mkfs.ext3 /dev/loop0p1 ## failed here [...] kpartx drops partitions into /dev/mapper, so the actual invocation would be mkfs.ext3 /dev/mapper/loop0p1 You can also use partprobe instead of kpartx, but I'm not as familiar with its operation. -- Paul Heinlein heinl...@madboa.com 45°38' N, 122°6' W ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Failed to create /dev/loop0p* entries for partitions inside loopback devices
centos 6 failed to create entries under /dev for newly created loopback devices. Any one know why? and how to fix/workaround it? The steps to duplicate is pretty simple dd if=/dev/zero of=/tmp/deleteme bs=1M count=100 losetup /dev/loop0 /tmp/deleteme fdisk /dev/loop0 ## created partitions 1, 2, etc. fdisk -l /dev/loop0 ## confirmed that the partitions do exist mkfs.ext3 /dev/loop0p1 ## failed here, the error prompt says that the /dev/loop0p1 doesn't exist! ls /dev/loop0p* ## no entries Please shed a light here, I'm running centos 6.4 Thanks. Robert ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] strange sporadic sssd problem on centos
>From time to time on centos 6 sssd I got login problems like 'connection >closed by *.*.*.*.', after a while then I login in again and the problem >already disappeared. For the ssh login problem, I can see the following entries in /var/log/secure. 'Failed public key for ' is the entry for the login problem. Any one has some ideas why this happens? Mar 12 04:30:12 master01 sshd[25185]: Set /proc/self/oom_score_adj to 0 Mar 12 04:30:12 master01 sshd[25185]: Connection from 192.168.1.80 port 48718 Mar 12 04:30:18 master01 sshd[25185]: Found matching RSA key: 55:52:5e:6c:fe:74:ab:cd:ef:94:96:f4:f7:44:fb:fc Mar 12 04:30:18 master01 sshd[25186]: Postponed publickey for gotcha from 192.168.1.80 port 48718 ssh2 Mar 12 04:30:18 master01 sshd[25185]: Found matching RSA key: 55:52:5e:6c:fe:74:ab:cd:ef:94:96:f4:f7:44:fb:fc Mar 12 04:31:51 master01 sshd[25185]: Failed publickey for gotcha from 192.168.1.80 port 48718 ssh2 Mar 12 04:31:51 master01 sshd[25186]: fatal: Access denied for user gotcha by PAM account configuration Thanks. --Gelen ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Please shed a light: when sssd will return from offline to online?
Hi all, I'm new to sssd configs and debugging. Recently we have encountered some problems with sssd. Basically 6 out of 50 servers has 'getent passwd' lost all userIDs from LDAP backend, while others are OK. My sssd is at version 1.8.0-32. the related error messages are attached below. The sssd_nss seems got killed by temporarily network connection problems to backend openLDAP servers. Wonder why? and can we change the backend retry check interval? (see the timestamps for log entries in sssd_nss.log). [root@testbox sssd]# cat sssd_nss.log (Sat Mar 2 02:30:41 2013) [sssd[nss]] [sss_dp_init] (0x0010): Failed to connect to monitor services. (Sat Mar 2 02:30:41 2013) [sssd[nss]] [sss_process_init] (0x0010): fatal error setting up backend connector (Sat Mar 2 02:30:41 2013) [sssd[nss]] [sss_dp_init] (0x0010): Failed to connect to monitor services. (Sat Mar 2 02:30:41 2013) [sssd[nss]] [sss_process_init] (0x0010): fatal error setting up backend connector (Sat Mar 2 02:30:41 2013) [sssd[nss]] [sss_dp_init] (0x0010): Failed to connect to monitor services. (Sat Mar 2 02:30:41 2013) [sssd[nss]] [sss_process_init] (0x0010): fatal error setting up backend connector (Sat Mar 2 02:30:41 2013) [sssd[nss]] [sss_dp_init] (0x0010): Failed to connect to monitor services. (Sat Mar 2 02:30:41 2013) [sssd[nss]] [sss_process_init] (0x0010): fatal error setting up backend connector [root@testbox sssd]# cat sssd_pam.log (Sat Mar 2 02:30:09 2013) [sssd[pam]] [pam_dp_reconnect_init] (0x0010): Could not reconnect to ldap provider. (Sat Mar 2 02:30:39 2013) [sssd[pam]] [pam_dp_reconnect_init] (0x0010): Could not reconnect to ldap provider. [root@testbox sssd]# cat sssd_ldap.log (Sat Mar 2 02:30:53 2013) [sssd[be[ldap]]] [id_callback] (0x0010): The Monitor returned an error [org.freedesktop.DBus.Error.NoReply] [root@testbox sssd]# cat sssd.log (Sat Mar 2 02:30:41 2013) [sssd] [mt_svc_exit_handler] (0x0010): Process [nss], definitely stopped! [root@testbox sssd]# Please shed a light. Thanks a lot. --Gelen ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] what does the strange sssd log mesages mean?
Hi all, I have a few centos 6 boxes running sssd, they are talking to OpenLDAP server still runs on centos 5. Today I enabled sssd debugging and found the following lines of messages in logs: ... (Mon Mar 4 23:11:13 2013) [sssd[be[ldap]]] [get_naming_context] (0x0200): Using value from [namingContexts] as naming context. (Mon Mar 4 23:11:13 2013) [sssd[be[ldap]]] [sdap_get_server_opts_from_rootdse] (0x0200): No known USN scheme is supported by this server! (Mon Mar 4 23:11:13 2013) [sssd[be[ldap]]] [sdap_get_server_opts_from_rootdse] (0x0200): Will use modification timestamp as usn! ... what does the above messages mean: why it uses modification timestamp as usn? does that have some harmful effects, if time drifts /time zone difference exists in a network? Please shed a light. Thanks. --Gelen ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Please help: Any way to query host membership in nested ldap groups?
Hi all, I have a openldap server setup with netsted netgruops,. Say the netgroups are: ngA: (host1, -, - ), (host2, -, - ) ngB: ngA, (host3, - - ) ngc: ngB, (host4, -, -) Is there a way to find host1's membership? so that I can return: ngA, ngB, ngC? Thanks a lot. --Rob ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] How to query host membership in nested openldap netgroups?
Hi all, I have a openldap server setup with netsted netgruops,. Say the netgroups are: ngA: (host1, -, - ), (host2, -, - ) ngB: ngA, (host3, - - ) ngc: ngB, (host4, -, -) Is there a way to find host1's membership? so that I can return: ngA, ngB, ngC? Thanks a lot. --Rob ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] SSHD rootkit in the wild/compromise for CentOS 5/6?
'rpm -V' can be misleading, if taking into account of prelink on Redhat/Centos Boxes which is running through cron by default. I've shown the steps on reverse the effect of prelink at the comments sections at link https://isc.sans.edu/diary/SSHD+rootkit+in+the+wild/15229?storyid=15229. I'm afraid that 'rpm -V' only will make big noises or false alarms. But in general, maybe it is a good time to turn off prelink, or more aggressively, remove prelink packages from Centos 5/6? the prelink is said to bring some performance boost, but who really cares in the era of tens of CPUs? nowadays and later on we are -- and will -- more concerned on security threats instead of 3~5 percents CPU/performance gain, right? From: Leon Fauster To: CentOS mailing list Sent: Saturday, February 23, 2013 3:14 AM Subject: Re: [CentOS] SSHD rootkit in the wild/compromise for CentOS 5/6? Am 23.02.2013 um 05:52 schrieb Karanbir Singh : > On 02/22/2013 09:35 PM, Leon Fauster wrote: >> i use following script to scan top level >> directories for files that are not packaged: > > If you trust your rpm-db, ... i used to scan this list rpm -qa --qf '%{NAME}-%{SIGGPG:pgpsig}-%{SIGPGP:pgpsig}-%{VENDOR}\n' and checked them against keys that are _not_ in /etc/pki/rpm-gpg/. Just as a normal sanity check (plus rpm -V). i aware that this does not substitute a real auditing solution. -- LF ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Is this right? -- Centos 6 and RHEL 6 infrastrure for continuous update/upgrade
Hi all, Both RHEL 6 and CentOS 6 can be installed from any minor releases DVDs: 6.0, 6.1, 6.2, 6.3, etc. And then got continuous upgrade/update with command 'yum -y upgrade' if repos are setup correct. But the repos infrastructure is different between the two. CentOS uses two repos: /centos/6/os/... repo and .../centos/6/updates/... The updates/ repo contains ONLY updated RPMs between minor releases. currently the updates/ contains updates after 6.3. and the /centos/6/os/ points to 6.3Base. Question #1: supposed I installed with Centos 6.2 last year, and let's say Centos 6.4 comes out two months later and I have not updated a single package since initial installation until Centos 6.4 comes out (I am way too lazy :) ), then How can I setup my yum config to not miss any updated packages? Should I put all three repos inside yum config? centos-6.2-kickstart-os centos-6-os centos-6-updates or the centos-6.2-kickstart-os is not needed at all -- the centos-6-os and cnetos-6-updates together contains all latest RPMS since 6.0 -- ? The first way may render yum to report warning of 'duplicate RPM group definitions' or similar. Questions #2: I've heard that RHEL 6 uses a different path, they seems to have only one big continuously updated base os/ repository. all the RPMs updated since 6.0 (include RPMs at the published day of RHEL 6.0) are contained in the repo. So only the one repo is in need to upgrade systems at any time. Is this true? and if so, any benefits go with it? Thanks. --Robinson ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] any Log archive tools suggestions?
Hi all, Has any one used any log archiving tools? Please suggest one that's your favorite. Presently I have a project to archive raw log files on hundreds of Centos boxes to a central server and stored there for two years. The basic requirements of the project are: 1, The log files will be sent from hundreds of Centos clients with a client side agent or similar. 2, better there is a client side configuration file which specify log files to archive 3, a server side configuration file specified where to logs from host ( or host groups), and the directory structure to store log files 4, better there is a way to remove duplication of log files, i.e. md5 checksum, time stamp, etc. Open source or commercial are both fine. And there is no need to do the indexing or other further processing, just raw files is fine. Thanks a lot. ~Rob ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] strange 'find' tool behavior
Thanks a lot. with -prune option, now the find command works too. find . -type d -name '.svn' -prune -exec /bin/rm -rf '{}' \; From: Stephen Harris To: CentOS mailing list Sent: Monday, November 19, 2012 4:52 PM Subject: Re: [CentOS] strange 'find' tool behavior On Mon, Nov 19, 2012 at 04:44:31PM -0800, Gelen James wrote: > [root@centos_58_test_box workingDir]# find . -type d -name '.svn' -exec > /bin/rm -rf '{}' \; > find: ./.svn: No such file or directory [...] "find" is attempting to open the ".svn" directory to see if there are any subdirectories to work on but it can't because you just deleted it. You either need "-prune" to stop it going further down the tree or "-depth" to tell it to go down the tree first before running the -exec -- rgds Stephen ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] strange 'find' tool behavior
Hi all, Just encountered an strange bahavior of frequent 'find' command. I tried to use find to recursively remove .svn directories from my working place, 'find' command removed all the '.svn' directories successfully but reported errors on screen. Any one knows why it shows this behavior? BTW, if I use command " find . type d -name '.svn' -print0 | xargs -0 -n1 /bin/rm -rf ", then it does the same job and reports no errors on screen at all. But still likes to understand why find have this behavior. The screen and error prompts are attached below for your references. Thanks. [root@centos_58_test_box workingDir]# find . -type d -name '.svn' ./.svn ./var/.svn ./var/myTestProj/projects/.svn ./var/myTestProj/projects/Production/.svn ./var/myTestProj/projects/Production/etc/.svn ./var/myTestProj/projects/Production/jobs/.svn ./var/myTestProj/.svn ./etc/.svn ./etc/myTestProj/.svn ./etc/myTestProj/ssl/.svn [root@centos_58_test_box workingDir]# find . -type d -name '.svn' -exec /bin/rm -rf '{}' \; find: ./.svn: No such file or directory find: ./var/.svn: No such file or directory find: ./var/myTestProj/projects/.svn: No such file or directory find: ./var/myTestProj/projects/Production/.svn: No such file or directory find: ./var/myTestProj/projects/Production/etc/.svn: No such file or directory find: ./var/myTestProj/projects/Production/jobs/.svn: No such file or directory find: ./var/myTestProj/.svn: No such file or directory find: ./etc/.svn: No such file or directory find: ./etc/myTestProj/.svn: No such file or directory find: ./etc/myTestProj/ssl/.svn: No such file or directory [root@centos_58_test_box workingDir]# find . -type d -name '.svn'
Re: [CentOS] Please help -- centos 5.8: does the slapcat still breaks ldap data integrity?
> > Hi all, > > > > I've a small project to backup and restore openldap servers online on > >centos 5.8. Basically I don't have the luxury to shutdown the ldap server, > >then backup whole /var/lib/ldap/, but have to backup online with slapcat or > >similar command line tool. > > > > The major concern of using slapcat is the warning below, which was excerpt > > from link > > http://www.centos.org/docs/5/html/5.1/Deployment_Guide/s1-ldap-daemonsutils.html > > > > You must stop slapd by issuing the /sbin/service ldap stop command before > > using slapadd, slapcat or slapindex. Otherwise, the integrity of the LDAP > > directory is at risk. > > Does the limitation of slapcat -- stop ldap first -- still exist? Please > > shed a light onto this. Thanks. > > depends on what you are using for backend. If you are still using ldbm (you > definitely shouldn't at this point), then yes, it must be stopped before > doing the slapcat. If you are using > bdb or hdb, no… it's not necessary to > stop the service first. > >Craig Thanks for confirmation, I'm using the default config/backend with minor changes, so it seems bdb. The following are the types of the files under /var/lib/ldap. alock: data cn.bdb: Berkeley DB (Btree, version 9, native byte-order) __db.001: Applesoft BASIC program data __db.002: data __db.003: data __db.004: data __db.005: data __db.006: data DB_CONFIG: ASCII English text dn2id.bdb: Berkeley DB (Btree, version 9, native byte-order) gidNumber.bdb: Berkeley DB (Btree, version 9, native byte-order) givenName.bdb: Berkeley DB (Btree, version 9, native byte-order) id2entry.bdb: Berkeley DB (Btree, version 9, native byte-order) log.01: Berkeley DB (Log, version 11, native byte-order) loginShell.bdb: Berkeley DB (Btree, version 9, native byte-order) mail.bdb: Berkeley DB (Btree, version 9, native byte-order) objectClass.bdb: Berkeley DB (Btree, version 9, native byte-order) ou.bdb: Berkeley DB (Btree, version 9, native byte-order) sn.bdb: Berkeley DB (Btree, version 9, native byte-order) uid.bdb: Berkeley DB (Btree, version 9, native byte-order) uidNumber.bdb: Berkeley DB (Btree, version 9, native byte-order) Thanks. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Please help -- centos 5.8: does the slapcat still breaks ldap data integrity?
Hi all, I've a small project to backup and restore openldap servers online on centos 5.8. Basically I don't have the luxury to shutdown the ldap server, then backup whole /var/lib/ldap/, but have to backup online with slapcat or similar command line tool. The major concern of using slapcat is the warning below, which was excerpt from link http://www.centos.org/docs/5/html/5.1/Deployment_Guide/s1-ldap-daemonsutils.html You must stop slapd by issuing the /sbin/service ldap stop command before using slapadd, slapcat or slapindex. Otherwise, the integrity of the LDAP directory is at risk. Does the limitation of slapcat -- stop ldap first -- still exist? Please shed a light onto this. Thanks. --Guolin ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] any reliable HTTPS/SFTP based FTP software on Linux?
Thanks a lot for input. The reason why we tested Serv-U, Axway ST, and other similar products for file transfer is for consolidation and security. We all known that Centos can provide SFTP for file in and file out with openssh, and Apache/HTTPS for distribution read only files. But our requirements are: 1, both file in and file out functions for both SFTP protocol (port 22) and apache/HTTPS (port 443). 2, an rich-feature client side program/applet inside popular browsers (IE, Firefix, etc), as our customers are not tech savvy. 3, an consolidated user account management system, each user can use both SFTP and HTTPS freely. a web based user management interface is perferred, though not required. 4, preliminary system-level and user-level file upload/download controls, file/directory access controls. Based on above, it seems difficult to use ProFTD, or Apache combination. But I may be completely wrong, your input here is greatly appreciated. Thanks. Thanks. --Rob From: Ljubomir Ljubojevic To: CentOS mailing list Sent: Sunday, November 4, 2012 9:24 AM Subject: Re: [CentOS] any reliable HTTPS/SFTP based FTP software on Linux? On 11/03/2012 10:24 AM, Gelen James wrote: > I tried Serv-U, Axway SecureTransport and other several software on Linux , > Neither one works as expected. > > Serv-U is very inexpensive and can create unlimited FTP accounts, but crashes > pretty often with unknown reasons. > > Axway SecureTransport is a riduculously expensive: about $1K per FTP account! > and each FTP account has 2 months cool-down period on between remove old > accounts and adding new ones. It is just far too expensive and over kill for > regular FTP uses. > > Any one has experiences with SFTP/HTTPS based file transfer solutions, open > sources or commercial is fine, as long as it is not too expensive. > > Thanks. First, you should not have used Reply option to start new thread, but what is done is done. Next, I do not understand what you actually want. >From ProFTPD site: "By contrast, SFTP refers to "Secure File Transfer Protocol", and is not related to FTP in any way. SFTP is based on the SSH2 protocol, which uses binary encoding of messages over a secure channel. Unlike FTP, SSH2 only uses a single TCP connection, and multiplexes multiple transfers or "channels" over that single connection. For this reason, many sites prefer SFTP to FTPS for secure transfer of data. " So you just need Midnight Commander of Krusader (with sshfs added I think) for intermittent access to filesystem via SSH, and if you use Windows there is "WinSCP" SFTP client. As server, ANY Linux box with allowed SSH connections will do. If you want automounting of SFTP (Remote SSH) filesystem, follow https://wiki.archlinux.org/index.php/Autofs#Remote_SSH -- Ljubomir Ljubojevic (Love is in the Air) PL Computers Serbia, Europe Google is the Mother, Google is the Father, and traceroute is your trusty Spiderman... StarOS, Mikrotik and CentOS/RHEL/Linux consultant ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] any reliable HTTPS/SFTP based FTP software on Linux?
I tried Serv-U, Axway SecureTransport and other several software on Linux , Neither one works as expected. Serv-U is very inexpensive and can create unlimited FTP accounts, but crashes pretty often with unknown reasons. Axway SecureTransport is a riduculously expensive: about $1K per FTP account! and each FTP account has 2 months cool-down period on between remove old accounts and adding new ones. It is just far too expensive and over kill for regular FTP uses. Any one has experiences with SFTP/HTTPS based file transfer solutions, open sources or commercial is fine, as long as it is not too expensive. Thanks. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] any reliable FTP server with HTTPS/FTPS, commercial or not
Hi John, I had the same idea with you just a few years back that the ftp only servers FTP protocol. But nowadays a FTP server provides same contents over a lot of protocols at the same time: FTP/FTPS/SFTP/HTTP/HTTPS. Please check the wiki page http://en.wikipedia.org/wiki/List_of_FTP_server_software. There are so many choices but it is difficult to find one that is reliable, secure and at the same time easy to use. Thanks. --David From: John R Pierce To: centos@centos.org Sent: Thursday, June 14, 2012 3:59 PM Subject: Re: [CentOS] any reliable FTP server with HTTPS/FTPS, commercial or not On 06/14/12 3:39 PM, Gelen James wrote: > Just like to know which secure FTP servers are popular in use on Linux, the >FTP server should provides HTTPS, FTPS and SFTP methods. sftp is part of SSH, not FTP. https is HTTP not FTP. ftps (FTP over SSL) is a non-standard mess and should be banned. I use vsftp for a straight FTP server, and apache for a https server, openssh for a SSH server. these are all standard CentOS components. -- john r pierce N 37, W 122 santa cruz ca mid-left coast ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] any reliable FTP server with HTTPS/FTPS, commercial or not
Hi all, Just like to know which secure FTP servers are popular in use on Linux, the FTP server should provides HTTPS, FTPS and SFTP methods. Current we are with Serv-U FTP server, but it has been crashed all the time for unknown reasons -- can not find any causes in its log file at all. Although we like its interfaces, but our customers complain its reliability a lot. Finally we are tired of it and would like an alternative. If you are satisfied with your ftp server, Please feel free to share with me. :) Thanks. --David ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Any documents for python-kerberos package??
Hi all, I'm in a project to program Kerberos with Python. The headache encountered is, there is no documents on how to call the Kerberos module functions and results. when run 'help kerberos.checkPassword' in python, it just show things like: Help on built-in function checkPassword in module kerberos: checkPassword(...) Check the supplied user/password against Kerberos KDC. (END) So the help doesn't give an idea on how to call the function, and what the the results and exceptions. Any one has successfully programmed python-kerberos, please shed a light on this. Thanks a lot. --David ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos