Re: [CentOS-virt] Domain Controllers virtualized KVM

2014-10-16 Thread Nico Kadel-Garcia
On Wed, Oct 15, 2014 at 10:04 AM, David Vrabel  wrote:
> On 15/10/14 09:54, Andry Michaelidou wrote:
>> Hello to you all!
>>
>> We are implementing here at the University KVM virtualization for our
>> servers and services and i was wondering if anyone virtualized domain
>> cotrollers to KVM.
>> Does anyone done this before? Any advice?
>
> If you need to support restoring your Windows domain controller VM from
> a snapshot or you need to live migrate it then you need Server 2012 and
> a hypervisor that provides a VM generation ID.
>
> I don't believe KVM supports this and it's only available in Xen in the
> upcoming Xen 4.5 release.
>
> David

Samba also works fine in virtualization. I've been publishing tools to
build Samba 4.1, capable of acting as a fairly drop-in replacement for
Active Directory,  for RHEL 6 (and thus compatible with CentOS and
Scientific Linux 6) over at  My toolkit is over at
https://github.com/nkadel/samba4repo.

If you've worked your way up to CentOS 7, RHEL 7, etc., Samba 4.1.1 is
built-in and much easier to update as needed.
___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


Re: [CentOS-virt] Domain Controllers virtualized KVM

2014-10-16 Thread Alain Péan

Le 16/10/2014 14:21, Nico Kadel-Garcia a écrit :

If you've worked your way up to CentOS 7, RHEL 7, etc., Samba 4.1.1 is
built-in and much easier to update as needed.


But at this time, it seems that the Samba version shipped with RHEL7 and 
CentOS7 does not support Active Directory role, because Samba uses 
Heimdal kerberos implementation, and Red Hat uses elsewhre MIT kerberos, 
so no AD/kerberos emulation in RHEL7 Samba 4 for now.

http://lists.centos.org/pipermail/centos/2014-September/145613.html

Samba Team seems to work on a switch to use either Heimdal or MIT 
kerberos, and then it should be available in RHEL.


Alain

--
Administrateur Système/Réseau
Laboratoire de Photonique et Nanostructures (LPN/CNRS - UPR20)
Centre de Recherche Alcatel Data IV - Marcoussis
route de Nozay - 91460 Marcoussis
Tel : 01-69-63-61-34

___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


Re: [CentOS-virt] Domain Controllers virtualized KVM

2014-10-16 Thread Nico Kadel-Garcia
On Thu, Oct 16, 2014 at 8:37 AM, Alain Péan  wrote:
> Le 16/10/2014 14:21, Nico Kadel-Garcia a écrit :
>>
>> If you've worked your way up to CentOS 7, RHEL 7, etc., Samba 4.1.1 is
>> built-in and much easier to update as needed.
>
>
> But at this time, it seems that the Samba version shipped with RHEL7 and
> CentOS7 does not support Active Directory role, because Samba uses Heimdal
> kerberos implementation, and Red Hat uses elsewhre MIT kerberos, so no
> AD/kerberos emulation in RHEL7 Samba 4 for now.
> http://lists.centos.org/pipermail/centos/2014-September/145613.html
>
> Samba Team seems to work on a switch to use either Heimdal or MIT kerberos,
> and then it should be available in RHEL.
>
> Alain

I'd forgotten that was still going on for the upstream Samba. The one
at Sernet, available at http://www.enterprisesamba.com/news/, may be
more capable. I've not personally tried it on CentOS 7.
___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


Re: [CentOS-virt] Test new xen, centos-release-xen and kernel for auto grub update on kernel install

2014-10-16 Thread George Dunlap
On Fri, Oct 10, 2014 at 2:41 AM, Johnny Hughes  wrote:
> The new process for auto updates of grub upon kernel install is in the
> xen4centos testing repo.
>
> In order to test these as updates to an existing system, you can do this:
>
> 1. download the test repo file:
>
> http://dev.centos.org/centos/6/xen-c6-RC1/xen-c6-RC1.repo
>
> 2. Put it in /etc/yum.repos.d/
>
> 3. Issue this command:
>
> yum --disablerepo=Xen4CentOS upgrade xen\* centos-release-xen
>
> (that should install all the new files required to make the kernel
> update work automatically)
>
> 4.  Review the new file /etc/sysconfig/xen-kernel ... if there is any
> other items you want on the 'kernel /xen.gz' line, you would edit the
> file.  For example, I like to add  'com1=115200,8n1 console=com1' to the
> end of that line so I can use consoles in virsh.  So I would change the
> line:

Hmm -- so I take it that /etc/sysconfig/xen-kernel is now a part of
the xen package...?

One issue with this is that during normal Xen development I often make
an RPM directly from the upstream repo, so while I have the xen4centos
kernel & libvirt installed, I don't have a xen4centos xen installed.

The nice thing about the current script in centos-release-xen is that
it works with non-x4c xen packages.

Sorry I hadn't thought about that side-effect when you mentioned this
before. :-/

Any thoughts?  Would it be possible to have the script in
centos-release-xen and check for the existence of /boot/xen.gz, for
instance?

 -George
___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


Re: [CentOS-virt] Test new xen, centos-release-xen and kernel for auto grub update on kernel install

2014-10-16 Thread Johnny Hughes
On 10/16/2014 11:25 AM, George Dunlap wrote:
> On Fri, Oct 10, 2014 at 2:41 AM, Johnny Hughes  wrote:
>> The new process for auto updates of grub upon kernel install is in the
>> xen4centos testing repo.
>>
>> In order to test these as updates to an existing system, you can do this:
>>
>> 1. download the test repo file:
>>
>> http://dev.centos.org/centos/6/xen-c6-RC1/xen-c6-RC1.repo
>>
>> 2. Put it in /etc/yum.repos.d/
>>
>> 3. Issue this command:
>>
>> yum --disablerepo=Xen4CentOS upgrade xen\* centos-release-xen
>>
>> (that should install all the new files required to make the kernel
>> update work automatically)
>>
>> 4.  Review the new file /etc/sysconfig/xen-kernel ... if there is any
>> other items you want on the 'kernel /xen.gz' line, you would edit the
>> file.  For example, I like to add  'com1=115200,8n1 console=com1' to the
>> end of that line so I can use consoles in virsh.  So I would change the
>> line:
> 
> Hmm -- so I take it that /etc/sysconfig/xen-kernel is now a part of
> the xen package...?
> 
> One issue with this is that during normal Xen development I often make
> an RPM directly from the upstream repo, so while I have the xen4centos
> kernel & libvirt installed, I don't have a xen4centos xen installed.
> 
> The nice thing about the current script in centos-release-xen is that
> it works with non-x4c xen packages.
> 
> Sorry I hadn't thought about that side-effect when you mentioned this
> before. :-/
> 
> Any thoughts?  Would it be possible to have the script in
> centos-release-xen and check for the existence of /boot/xen.gz, for
> instance?

I don't think that is a good idea .. people might have the xen.repo
installed so that they can get the kernel.  But not xen installed (ie,
they are on a domU).  They want the kernel and have centos-release-xen
installed .. BUT they don't want the grub mods as they want to boot a
normal kernel.

The easier thing would be for you (as a one off installer situation) to
create your own /etc/sysconfig/xen-kernel manually if you want grub
updated.  It only has 2 variables.

I want to make it easy to get things right in the major use cases ..
which I think this solution does in the way it is split up.






signature.asc
Description: OpenPGP digital signature
___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt