Re: [CentOS-docs] Samba
On Sun, Aug 31, 2008 at 10:52:59PM +0100, Ned Slider wrote: > Scott Robbins wrote: >> On Sun, Aug 31, 2008 at 06:51:24PM +0100, Ned Slider wrote: >>> >>> > > When I was reading through some documentation a few weeks ago, > specifically the "Samba by Example" book: > > http://us1.samba.org/samba/docs/man/Samba-Guide/ > > I was surprised that the "more basic" examples were commonly using > security = share. I thought I had read somewhere in the past that > security = share was either deprecated or at least not recommended hence > my surprise at seeing it being used in the official documentation. > Personally I've always used user level security but share level would > certainly ease a few potential headaches for new users requiring a > "quick and dirty" share. > > Just so we're all on the same page, does anyone know (or have any views) I don't have enough knowledge to state an informed opinion--however, you're not wrong, I also definitely remember coming across the fact that security = share was either deprecated or at least not recommended. -- Scott Robbins PGP keyID EB3467D6 ( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 ) gpg --keyserver pgp.mit.edu --recv-keys EB3467D6 Joyce: You belong in a good old fashioned college with keg parties and boys. Not here with Hellmouths and vampires. Buffy: Not really seeing the distinction. ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
Re: [CentOS-docs] Setting up an SSL secured Webserver
On 08/31/2008 07:11 PM, Mats Karlsson wrote: Will F. wrote: Hi, http://wiki.centos.org/HowTos/Https Please correct me if I'm wrong, but doesn't the private keys get automatically generated and httpd gets configured for it (via conf.d/ssl.conf)? I'm just not sure what's different doing it the way described in the document. Thanks, -will I agree with Will. The page should be changed to reflect how it's done in 5.x or forked into two pages, "The 4.x way" and "The 5.x way". Am I missing something here? mod_ssl contains the exact same code in %post in both C4.6 and C5.2. And in both cases the generated [dummy] certificate leaves the system in a ready-to-be-used (although not really recommended) configuration. ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
Re: [CentOS-docs] Samba
On 09/01/2008 12:52 AM, Ned Slider wrote: Scott Robbins wrote: On Sun, Aug 31, 2008 at 06:51:24PM +0100, Ned Slider wrote: As a thought - I'm wondering if the topic needs slitting up into multiple sections/pages? Maybe something like: An introduction/overview to samba (users, file permissions etc) Basic samba setup with example (security=share) Group shares with examples (security=user) Printing AD integration etc ... That seems to me to be the best way. When I was reading through some documentation a few weeks ago, specifically the "Samba by Example" book: http://us1.samba.org/samba/docs/man/Samba-Guide/ I was surprised that the "more basic" examples were commonly using security = share. I thought I had read somewhere in the past that security = share was either deprecated or at least not recommended hence my surprise at seeing it being used in the official documentation. Personally I've always used user level security but share level would certainly ease a few potential headaches for new users requiring a "quick and dirty" share. Just so we're all on the same page, does anyone know (or have any views) what the current thinking is on this? I am using security=share whenever I am not interested in authentication (public shares that is). The not so famous " map to guest = Bad User " was a much bigger headache. ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
Re: [CentOS-docs] Samba
Scott Robbins wrote: On Sun, Aug 31, 2008 at 06:51:24PM +0100, Ned Slider wrote: As a thought - I'm wondering if the topic needs slitting up into multiple sections/pages? Maybe something like: An introduction/overview to samba (users, file permissions etc) Basic samba setup with example (security=share) Group shares with examples (security=user) Printing AD integration etc ... That seems to me to be the best way. When I was reading through some documentation a few weeks ago, specifically the "Samba by Example" book: http://us1.samba.org/samba/docs/man/Samba-Guide/ I was surprised that the "more basic" examples were commonly using security = share. I thought I had read somewhere in the past that security = share was either deprecated or at least not recommended hence my surprise at seeing it being used in the official documentation. Personally I've always used user level security but share level would certainly ease a few potential headaches for new users requiring a "quick and dirty" share. Just so we're all on the same page, does anyone know (or have any views) what the current thinking is on this? ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
Re: [CentOS-docs] Samba
On Sun, Aug 31, 2008 at 06:51:24PM +0100, Ned Slider wrote: > Akemi Yagi wrote: >> On Sun, Aug 31, 2008 at 9:09 AM, Will F. <[EMAIL PROTECTED]> wrote: >>> Hi Fabian, >>> >>> Thanks for sharing your thoughts. >>> >>> >>> Getting deeper into the advanced topics of Samba "explaining how to >>> configure the backend (old smbpasswd, newer tdbsam, or ldap when acting as >>> a pdc), how to integrate in existing Samba/Windows domain/AD , explaining >>> Filesystem ACLs" seem better suited for samba.org since anyone who wants to >>> implement that really needs intimate knowledge of their environment. I >>> don't think they would want to read a summarized version in a CentOS wiki. >>> >>> Comments? >>> >>> Thanks, >>> -will >> >> I agree with your view. I would suggest you get started with a draft >> and we can all join in and make it most suitable for CentOS users. >> >> Akemi >> > > Agreed - many hands make light work for a task like this. > > As a thought - I'm wondering if the topic needs slitting up into > multiple sections/pages? Maybe something like: > > An introduction/overview to samba (users, file permissions etc) > Basic samba setup with example (security=share) > Group shares with examples (security=user) > Printing > AD integration > etc ... That seems to me to be the best way. Let's try to put ourselves in the shoes of someone who just tried to set up samba. Ok, he can go to the basic guide that Will writes. (Or anyone--and yeah, those of us using older versions of EMC Celerra at work are stuck on CentOS 4.4--I've lost track, I think it was Will who mentioned they'd overlooked people using older versions, but as we're talking about Samba, it's appropriate. 5.x versions don't work, and I haven't yet tried with later versions of 4.x, though I have to once my current project is done.) Ok, that's the home user. Now come the sysadmins, and for them, something like AD might be important. So, they go to the CentOS wiki, and they see, aha, an AD article. (If anyone is interested, I have my own--though about 96 percent is from the samba wiki--at http://home.nyc.rr.com/computertaijutsu/adsamba.html. ) And so forth--therefore, I think this idea is excellent. I would also make the strong recommendation that EVERY article about samba makes reference to the troubleshooting guides CentOS provides in the /usr/share/doc/ directory--it's also on the samba website at http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/diagnosis.html That can really be an invaluable resource for all levels of user. > > That way folks could chip in more easily on the bits they feel able to > contribute towards and it needn't seem like a herculean task from the > outset. > > Thoughts? See above. :) -- Scott Robbins PGP keyID EB3467D6 ( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 ) gpg --keyserver pgp.mit.edu --recv-keys EB3467D6 Colonel: Every inch of this installation is under constant, 24-hour surveillance. Willow: Including the secret lab? Colonel: Everything! (pause) What secret lab? ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
Re: [CentOS-docs] Samba
Akemi Yagi wrote: On Sun, Aug 31, 2008 at 9:09 AM, Will F. <[EMAIL PROTECTED]> wrote: Hi Fabian, Thanks for sharing your thoughts. It always seemed to me that HowTo pages catered to those people who didn't want to read "millions of pages of manpages" and just wanted things to work now. Turnkey solutions. I completely agree that an article on how to setup a simple public share is REALLY easy and all it takes is a quick Google search or skim of the smb.conf man page. But at the same time, so are the rest of the articles. My vision for this HowTo is really giving the yum command to grab the package, a basic smb.conf, the location on where to put it, and the service name on how to start it. That way someone can get a share up in less than 5 minutes. I believe these are the more CentOS-related bits of Samba. Getting deeper into the advanced topics of Samba "explaining how to configure the backend (old smbpasswd, newer tdbsam, or ldap when acting as a pdc), how to integrate in existing Samba/Windows domain/AD , explaining Filesystem ACLs" seem better suited for samba.org since anyone who wants to implement that really needs intimate knowledge of their environment. I don't think they would want to read a summarized version in a CentOS wiki. Comments? Thanks, -will I agree with your view. I would suggest you get started with a draft and we can all join in and make it most suitable for CentOS users. Akemi Agreed - many hands make light work for a task like this. As a thought - I'm wondering if the topic needs slitting up into multiple sections/pages? Maybe something like: An introduction/overview to samba (users, file permissions etc) Basic samba setup with example (security=share) Group shares with examples (security=user) Printing AD integration etc ... That way folks could chip in more easily on the bits they feel able to contribute towards and it needn't seem like a herculean task from the outset. Thoughts? ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
Re: [CentOS-docs] Samba
On Sun, Aug 31, 2008 at 9:09 AM, Will F. <[EMAIL PROTECTED]> wrote: > Hi Fabian, > > Thanks for sharing your thoughts. > > It always seemed to me that HowTo pages catered to those people who didn't > want to read "millions of pages of manpages" and just wanted things to work > now. Turnkey solutions. I completely agree that an article on how to setup a > simple public share is REALLY easy and all it takes is a quick Google search > or skim of the smb.conf man page. But at the same time, so are the rest of > the articles. My vision for this HowTo is really giving the yum command to > grab the package, a basic smb.conf, the location on where to put it, and the > service name on how to start it. That way someone can get a share up in less > than 5 minutes. I believe these are the more CentOS-related bits of Samba. > > Getting deeper into the advanced topics of Samba "explaining how to configure > the backend (old smbpasswd, newer tdbsam, or ldap when acting as a pdc), how > to integrate in existing Samba/Windows domain/AD , explaining Filesystem > ACLs" seem better suited for samba.org since anyone who wants to implement > that really needs intimate knowledge of their environment. I don't think they > would want to read a summarized version in a CentOS wiki. > > Comments? > > Thanks, > -will I agree with your view. I would suggest you get started with a draft and we can all join in and make it most suitable for CentOS users. Akemi P.S. Could you try avoiding top-posting? Thanks. ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
Re: [CentOS-docs] Setting up an SSL secured Webserver
You're saying not EVERYONE uses 5.2-latest-latest-latest? :) I totally forgot about the 4.x version. I really only got started with CentOS in 5. Thanks for the reminder. -will - Original Message - From: "Mats Karlsson" <[EMAIL PROTECTED]> To: "Mail list for wiki articles" Sent: Sunday, August 31, 2008 9:11:20 AM GMT -08:00 US/Canada Pacific Subject: Re: [CentOS-docs] Setting up an SSL secured Webserver Will F. wrote: > Hi, > > > http://wiki.centos.org/HowTos/Https > > Please correct me if I'm wrong, but doesn't the private keys get > automatically generated and httpd gets configured for it (via > conf.d/ssl.conf)? I'm just not sure what's different doing it the way > described in the document. > > > Thanks, > -will > I agree with Will. The page should be changed to reflect how it's done in 5.x or forked into two pages, "The 4.x way" and "The 5.x way". /Mats ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
Re: [CentOS-docs] Setting up an SSL secured Webserver
Will F. wrote: Hi, http://wiki.centos.org/HowTos/Https Please correct me if I'm wrong, but doesn't the private keys get automatically generated and httpd gets configured for it (via conf.d/ssl.conf)? I'm just not sure what's different doing it the way described in the document. Thanks, -will I agree with Will. The page should be changed to reflect how it's done in 5.x or forked into two pages, "The 4.x way" and "The 5.x way". /Mats ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
Re: [CentOS-docs] Samba
Hi Fabian, Thanks for sharing your thoughts. It always seemed to me that HowTo pages catered to those people who didn't want to read "millions of pages of manpages" and just wanted things to work now. Turnkey solutions. I completely agree that an article on how to setup a simple public share is REALLY easy and all it takes is a quick Google search or skim of the smb.conf man page. But at the same time, so are the rest of the articles. My vision for this HowTo is really giving the yum command to grab the package, a basic smb.conf, the location on where to put it, and the service name on how to start it. That way someone can get a share up in less than 5 minutes. I believe these are the more CentOS-related bits of Samba. Getting deeper into the advanced topics of Samba "explaining how to configure the backend (old smbpasswd, newer tdbsam, or ldap when acting as a pdc), how to integrate in existing Samba/Windows domain/AD , explaining Filesystem ACLs" seem better suited for samba.org since anyone who wants to implement that really needs intimate knowledge of their environment. I don't think they would want to read a summarized version in a CentOS wiki. Comments? Thanks, -will - Original Message - From: "Fabian Arrotin" <[EMAIL PROTECTED]> To: "Mail list for wiki articles" Sent: Sunday, August 31, 2008 5:33:24 AM GMT -08:00 US/Canada Pacific Subject: Re: [CentOS-docs] Samba Ned Slider wrote: > Will F. wrote: >> Hi, >> >> I recently found a need for me to setup a Samba share for some quick >> and dirty file copying. I already knew how to do this, but was >> wondering if it would be worth while to add it to the tips & tricks or >> howto section. >> >> Thanks! -will > > Hi Will, > > I was recently discussing with Akemi (toracat) the need for some Samba > documentation on the Wiki as we see quite a few questions on the forums > from new users, so I'd say go for it. > > Ralph may need to give you permissions or create a page for you (please). > > Ned Hmm, let's coordinate first about Samba .. if there is *one* package that can be configured in multiple ways to do the same thing, that's surely samba ;-) To be honnest, just writing a 'how to create a share on samba' wiki page is not enough (my opinion) .. but explaining how to configure the backend (old smbpasswd, newer tdbsam, or ldap when acting as a pdc), how to integrate in existing Samba/Windows domain/AD , explaining Filesystem ACLs . etc .. is duplicating the official howto .. Other thoughts on that ? -- - Fabian Arrotin <[EMAIL PROTECTED]> "Internet network currently down, TCP/IP packets delivered now by UPS/Fedex ..." ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
Re: [CentOS-docs] Samba
Fabian Arrotin wrote: Ned Slider wrote: Will F. wrote: Hi, I recently found a need for me to setup a Samba share for some quick and dirty file copying. I already knew how to do this, but was wondering if it would be worth while to add it to the tips & tricks or howto section. Thanks! -will Hi Will, I was recently discussing with Akemi (toracat) the need for some Samba documentation on the Wiki as we see quite a few questions on the forums from new users, so I'd say go for it. Ralph may need to give you permissions or create a page for you (please). Ned Hmm, let's coordinate first about Samba .. if there is *one* package that can be configured in multiple ways to do the same thing, that's surely samba ;-) To be honnest, just writing a 'how to create a share on samba' wiki page is not enough (my opinion) .. but explaining how to configure the backend (old smbpasswd, newer tdbsam, or ldap when acting as a pdc), how to integrate in existing Samba/Windows domain/AD , explaining Filesystem ACLs . etc .. is duplicating the official howto .. Other thoughts on that ? I was looking at it with a view to writing a Wiki guide, but when I started researching the documentation I got kind of daunted by it and then wondered if I'd be able to do the topic justice. At that point I put the whole idea on the back burner. If someone wants to tackle it, I say go for it. I'll agree it's certainly not a quick/easy topic to cover for the newer user primarily as there are a lot of ancillary topics where knowledge is required and there are lots of different ways to go about achieving the same goals, not to mention some just want quick and dirty file shares whereas others want Windows AD integration (or anything in between). This is why I backed away from the idea of writing something myself! ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
Re: [CentOS-docs] Samba
Ned Slider wrote: Will F. wrote: Hi, I recently found a need for me to setup a Samba share for some quick and dirty file copying. I already knew how to do this, but was wondering if it would be worth while to add it to the tips & tricks or howto section. Thanks! -will Hi Will, I was recently discussing with Akemi (toracat) the need for some Samba documentation on the Wiki as we see quite a few questions on the forums from new users, so I'd say go for it. Ralph may need to give you permissions or create a page for you (please). Ned Hmm, let's coordinate first about Samba .. if there is *one* package that can be configured in multiple ways to do the same thing, that's surely samba ;-) To be honnest, just writing a 'how to create a share on samba' wiki page is not enough (my opinion) .. but explaining how to configure the backend (old smbpasswd, newer tdbsam, or ldap when acting as a pdc), how to integrate in existing Samba/Windows domain/AD , explaining Filesystem ACLs . etc .. is duplicating the official howto .. Other thoughts on that ? -- - Fabian Arrotin <[EMAIL PROTECTED]> "Internet network currently down, TCP/IP packets delivered now by UPS/Fedex ..." ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
Re: [CentOS-docs] Howto: postfix_restrictions
Will F. wrote: Hey Ned, I found this very useful to test that the RBL was working: http://www.spamhaus.org/faq/answers.lasso?section=Spamhaus%20SBL#207 " How do I test my SBL setup? Once you have set up your mail server to use sbl.spamhaus.org (or the preferred zen.spamhaus.org), you can test to see if the SBL blocking is working by sending an email (any email) to: [EMAIL PROTECTED] (you must send the email from the mail server which you wish to test). The Crynwr system robot will answer you to tell you if your server is correctly blocking SBL-listed IP addresses or not. " Just thought I'd throw it out there. Thanks! -will Thanks for that - I could add that to the postfix_restrictions for testing :) ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
[CentOS-docs] Howto: postfix_restrictions
Hey Ned, I found this very useful to test that the RBL was working: http://www.spamhaus.org/faq/answers.lasso?section=Spamhaus%20SBL#207 " How do I test my SBL setup? Once you have set up your mail server to use sbl.spamhaus.org (or the preferred zen.spamhaus.org), you can test to see if the SBL blocking is working by sending an email (any email) to: [EMAIL PROTECTED] (you must send the email from the mail server which you wish to test). The Crynwr system robot will answer you to tell you if your server is correctly blocking SBL-listed IP addresses or not. " Just thought I'd throw it out there. Thanks! -will ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
Re: [CentOS-docs] Amavisd Howto
That'll be great! I'm doing this for a non-profit organization, and once I got the spam filtering done, they were so excited and started coming up with all these other things they'd like (i.e., that Samba server). I generally do all my testing via telnet, but I guess it'll be easier to use that sample message as well. I'll add that in. Thanks, -will - Original Message - From: "Ned Slider" <[EMAIL PROTECTED]> To: "Mail list for wiki articles" Sent: Saturday, August 30, 2008 5:52:59 PM GMT -08:00 US/Canada Pacific Subject: Re: [CentOS-docs] Amavisd Howto Hi Will, I may join in with this again as I now have amavisd/spamassassin back up and running on my mail server. I've been having a quick look at tweaking SA configuration so might write some more on that and I can also check the SELinux stuff as needed. WRT testing, take a look in the amavisd documentation in /usr/share/doc/amavisd-new-2.5.4/test-messages. The README describes how to inject the supplied spam and virus test messages which may be worth adding: sendmail -i [EMAIL PROTECTED] http://lists.centos.org/mailman/listinfo/centos-docs ___ CentOS-docs mailing list CentOS-docs@centos.org http://lists.centos.org/mailman/listinfo/centos-docs
