[gentoo-user] Re: Digest of gentoo-user@lists.gentoo.org issue 1554 (82878-82927)
unsubscribe
Re: [gentoo-user] Re: Digest of gentoo-user@lists.gentoo.org issue 1554 (82878-82927)
toefraz wrote: unsubscribe http://www.gentoo.org/main/en/lists.xml Dale :-)
Re: [gentoo-user] Adding a gentoo workstation to Active Directory network
On 7 Aug 2008, at 23:04, Andrey Falko wrote: ... As far as I know, don't take my word for it, in order to use Active Directory on a GNU/Linux host, you need to setup LDAP and have it talk to AD. Unfortunately I don't know how to do this, perhaps this will help: http://www.linux.com/articles/40983 . Hi there, I understood Active Directory to be Microsoft's implementation of LDAP + extensions. Or maybe it's a Microsoft's entirely own way of doing a directory service, with LDAP support bolted on afterwards. Anyway, yes, Linux hosts should indeed be able to talk LDAP to an AD server. On a domain that I manage we authenticate over Samba instead. I can't entirely recall why I chose this method instead of AD, but I'm pretty sure there were good reasons for it at the time. Once Samba is configured to to do winbind - it obviously needs to know the name of the domain server &c - one installs the PAM winbind module and references it in /etc/pam.d/ for any Linux services one wishes to authenticate off the Windows server. Samba then, presumably, acts as a client to the domain server and says "user X, hash(password Y) wants to log on, is this ok?"; PAM passes the response back to the service the user is trying to use. I think winbind alleviates some need to deal with Active Directory. I really know nothing about AD - all I have to do is log on to the Windows server (SBS 2003) and add a user to the domain in the Server Management For Idiots program Microsoft so kindly provides. The user is able to authenticate on the Linux box immediately after restarting Samba (and the restart is probably only required because I've fouled- up the caching configuration, or something). I also use pam_mkhomedir so that when the user logs on to IMAP for the first time ~ is automagically created; I had to reject Courier-IMAP in favour of Dovecot in order to be able to do this, as IIRC Courier doesn't use the PAM type "session", and that's required to make pam_mkhomedir work (Dovecot doesn't actually need to use this type, but adds an option to open a PAM session specifically to enable mkhomedir to be used. This is a requirement of pam_mkhomedir, NOT pam_winbind). What I have enjoyed about winbind is that it has (so far!) made adding additional services easy. I needed to run an ftp server (allow only 127.0.0.1) on the Linux machine, so that Squirrelmail's vacation plugin could upload the users' vacation messages to their homedirs. To get the ftp service (net-ftp/vsftpd) to authenticate off the same credentials was as easy as copying the PAM settings for the already- working IMAP server to /etc/pam.d/ftp (although I see that each is "sufficient" instead of "required" in this case). I was quite surprised it worked so easily, quickly and smoothly. Anyway, any user can sit at their Windows workstation, CTRL-ALT-DEL and change their password and the IMAP server will now respect their new credentials, which is the important thing (for me). Stroller.
[gentoo-user] Problems installing Gentoo on an Asus EeePC 701
Hello folks. I have an Asus EeePC 701 (4GB) and I'm having problems installing Gentoo on it, so I wrote this giant e-mail to help you understand what is going on and what I have done and can't do. I have been using Gentoo for a while, so I am pretty comfortable on installing it and configuring it. "Disks" on my Eee: Internal Flash (4GB): /dev/sda1 -> Ubuntu 8.04 (blergh, not for long) :-) SD Card (8GB): /dev/sdb1 -> Gentoo 2.6.25-gentoo-r7 The Gentoo system is ready. I mean, it is still text-mode only, but I have some ideas about the other stuff to be installed, continue reading, please. :-) The problem is that I just can't boot the system. At first, I thought I had forgotten something when configuring the kernel. But I gave up that idea since me and a friend of mine re-checked it many times. I have installed Gentoo's grub on the MBR of /dev/sda, since I intend to remove Ubuntu later. The kernel hangs because it can't find /dev/sdb1 [1]. The system I consider a minimum usable text-mode system is already installed, configured and even up-to-date. I have tried a lot of different things. I tried booting Gentoo using the Ubuntu kernel. Sound reasonable, but Ubuntu's initrd (which later I realized is the one that recognizes my "disks") already mount /proc and when Gentoo's RC comes up it "oops" because of /proc [2]. Since booting Ubuntu's kernel is just temporary, I won't edit the init.d script that mounts /proc on Gentoo. Anyway. By-the-way, something that is worth mentioning. When booting Ubuntu's kernel, it sometimes (not always) hangs at this point [3]. It stays there for four to five MINUTES, sometimes. But some other times is just goes straight. Even when "hanging" there for a while, it always passed that and boots the system. Also happens when trying to boot Gentoo with Ubuntu's kernel. I have done tons of online research, but what I found is people that successfully installed Gentoo on the EeePC. I've read and bookmarked these links [4] [5] "just in case", but so far they didn't help me at all. [1]: http://www.las.ic.unicamp.br/~saffi/eee/Gentoo-Kernel_Gentoo.jpg [2]: http://www.las.ic.unicamp.br/~saffi/eee/Gentoo-Kernel_Ubuntu.jpg [3]: http://www.las.ic.unicamp.br/~saffi/eee/Gentoo-Kernel_Ubuntu2.jpg [4]: http://www.gentoo-wiki.com/Asus_Eee_PC_701 [5]: http://www.floccinaucinihilipilification.net/wiki/index.php/Gentoo_on_the_EEE_Pc I have ideas about installing the graphical system and other stuff later. I intend to share the ideas and will as soon as my basic system boots. Anyway, thanks in advance for any help! Best regards, Saffi -- Ricardo Saffi Marques http://www.rsaffi.com == Laboratory of System Administration and Security - LAS Institute of Computing - IC P.O. Box: 6176 University of Campinas - UNICAMP 13083-852, Campinas, SP, Brazil ==
Re: [gentoo-user] bridge configuration problem
On 8 Aug 2008, at 03:17, Shaochun Wang wrote: ... I configure my network bridge as following: ... Does anyone know what's wrong with it? It looks quite different to mine: $ cat /etc/conf.d/net dns_domain="redacted.example.net" dns_servers="192.168.1.43 192.168.1.1 212.104.130.9 212.104.130.65" bridge_br0="eth0 eth1" config_eth0=( "null" ) config_eth1=( "null" ) config_br0=( "192.168.1.44 netmask 255.255.255.0 broadcast 192.168.1.255" ) routes_br0=( "default via 192.168.1.1" ) preup() { if [[ ${IFACE} == "br0" ]] ; then sleep 30 ; fi return 0 } $ Note that the preup is added in an attempt to overcome similar problems to those you describe - starting or restarting the bridge doesn't always work first time - but mine is still flakey. Stroller.
Re: [gentoo-user] braille
mattias wrote: are braille supported with gentoo yet? There's an ebuild for brltty which should give you all the braille support you need. I'm not sure if its on the live cd though. However, you can use any live cd to install, for example GRML, which does include brltty. Alastair Irving
[gentoo-user] Moonlight on Gentoo
Hi group: I was rather excited at first about NBC streaming olympic events on the internet then I discovered that their media player is based on Silverlight. Do you have any experience installing/running Moonlight on Gentoo? Is there a ebuild available? Does it work with Firefox 3? Does Moonlight 1 (since Moonlight 2 is still in pre-alpha) work with NBC's stream? Best, Willie -- Today's subliminal message is "" Sortir en Pantoufles: up 609 days, 11:16
Re: [gentoo-user] Discover IP address of random Windows boxes on network?
On Thu, Aug 7, 2008 at 9:27 PM, Johann Schmitz <[EMAIL PROTECTED]> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > net-analyzer/arpwatch is your friend :) > > Thanks Johann. I've installed and started it assuming the default settings in /etc/conf.d/arpwatch are sufficient. I'm getting MAC & IP addresses in /var/log/messages. It does seem I'm now seeing some new messages saying 'Unable to connect to "mail" port 25'. Is that arpwatch trying to email updates to me? If so, do I have to run a mail server to make that work? Thanks, Mark
Re: [gentoo-user] Discover IP address of random Windows boxes on network?
On Fri, 8 Aug 2008 05:45:57 -0700, "Mark Knecht" <[EMAIL PROTECTED]> wrote: > It does seem I'm now seeing some new messages saying 'Unable to > connect to "mail" port 25'. Is that arpwatch trying to email updates > to me? If so, do I have to run a mail server to make that work? Yes, arpwatch sends a mail when it detects a new or changed MAC/IP combination. May be you can disable this in the arpwatch config file. br, Johann
Re: [gentoo-user] Problems installing Gentoo on an Asus EeePC 701
By the way, this might help. I put some files online, that you might wanna check: http://www.las.ic.unicamp.br/~saffi/eee/ * grub.conf * fstab * make.conf * Kernel config Best regards, Saffi -- Ricardo Saffi Marques http://www.rsaffi.com == Laboratório de Administração e Segurança de Sistemas - LAS Instituto de Computação - IC Caixa Postal: 6176 Universidade Estadual de Campinas - UNICAMP 13083-852, Campinas, SP, Brasil ==
Re: [gentoo-user] Problems installing Gentoo on an Asus EeePC 701
Ricardo Saffi Marques wrote: > By the way, this might help. > I put some files online, that you might wanna check: > > http://www.las.ic.unicamp.br/~saffi/eee/ > > * grub.conf > * fstab > * make.conf > * Kernel config Cheers! Daniel Veiga had the same issue and contacted me with the solution. My kernel was perfectly right. The solution is to add: rootwait rootdelay=10 in the kernel line. Gentoo is now running flawlessly! I intend to post here my mad ideas about compiling and installing the rest of the packages (mainly graphical stuff). Best regards, Saffi -- Ricardo Saffi Marques http://www.rsaffi.com == Laboratório de Administração e Segurança de Sistemas - LAS Instituto de Computação - IC Caixa Postal: 6176 Universidade Estadual de Campinas - UNICAMP 13083-852, Campinas, SP, Brasil ==
Re: [gentoo-user] Moonlight on Gentoo
Hi Willie, I have had no experience with moonlight yet, but google brought me to this [1]. More useful would be this [2]. At [2] you can just download an firefox 2 plugin in .xpi format. It seems that there is no ebuild atm. Please report your experience to this thread. [1] http://www.mono-project.com/Moonlight [2] http://www.go-mono.com/moonlight/ Regards acm. signature.asc Description: OpenPGP digital signature
[gentoo-user] problem configuring wireless lan
Hi, I've a problem configuring my wireless interface. I usually connect to two access points. One located at my home and another one at my work. The problem is that I should change my /etc/conf.d/net every time to connect the them. here is my config: --- preup() { if [[ ${IFACE} == "eth1" ]]; then /sbin/ifconfig eth1 up echo 0\ > /sys/devices/pci:00/:00:1c.1/:06:00.0/rf_kill /sbin/iwconfig eth1 txpower on /sbin/ifconfig eth1 up sleep 3 fi return 0 } modules=("iwconfig" ) #essid_eth1="any" essid_eth1="Home_ali" preferred_aps_wlan1=( "Home_ali" "P-P" ) associate_order="preferredonly" key_Home_ali="s:KeyKeyKey" config_Home_ali=( "dhcp" ) config_P_P=( "192.168.2.6 netmask 255.255.240.0" ) routes_P_P=( "default via 192.168.1.10" ) dns_servers_P_P=( "127.0.0.1 4.2.2.4" ) When I set essid_eth1 to "any", It can not detect the ESSID automatically and connect to it, and I should edit the config file manually, and the strange thing is when I specifically set my essid in the config it can successfully connect to any of them. and I can manually scan the access points by iwlist: --- localhost ISP # iwconfig eth1 txpower on localhost ISP # iwlist eth1 scan eth1 Scan completed : Cell 01 - Address: 00:30:4F:4F:E8:EA ESSID:"Home_ali" Protocol:IEEE 802.11bg Mode:Master Frequency:2.462 GHz (Channel 11) Encryption key:on Bit Rates:1 Mb/s; 2 Mb/s; 5.5 Mb/s; 11 Mb/s; 6 Mb/s 9 Mb/s; 12 Mb/s; 18 Mb/s; 24 Mb/s; 36 Mb/s 48 Mb/s; 54 Mb/s Quality=79/100 Signal level=-55 dBm Noise level=-55 dBm Extra: Last beacon: 1199ms ago here is the error, when I start the interface by init.d script: -- localhost ~ # /etc/init.d/net.eth1 start * Service net.eth1 starting Error for wireless request "Set Tx Power" (8B27) : GET failed on device eth1 ; Resource temporarily unavailable. Failed to configure wireless for eth1 [ !! ] * ERROR: net.eth1 failed to start --- here is what I get from dmesg: -- ipw3945: Detected geography ABG (11 802.11bg channels, 13 802.11a channels) ipw3945: Error sending SCAN_ABORT_CMD: time out after 500ms. -- Does anyone have any clue about this? I'm using the latest driver form: http://linuxwireless.org/en/users/Download. Best regards Platoali
Re: [gentoo-user] Problems installing Gentoo on an Asus EeePC 701
Ricardo Saffi Marques wrote: > Hello folks. I have an Asus EeePC 701 (4GB) and I'm having problems > installing Gentoo on it, so I wrote this giant e-mail to help you > understand what is going on and what I have done and can't do. > I have been using Gentoo for a while, so I am pretty comfortable on > installing it and configuring it. Please don't hijack threads. Please write a new email to the list if you wish to start a new thread. Here's a google search with lots of good resources on hijacking threads. http://www.google.com/search?hl=en&q=thread+hijacking&btnG=Google+Search thanks! -- Eric Martin Key fingerprint = D1C4 086E DBB5 C18E 6FDA B215 6A25 7174 A941 3B9F signature.asc Description: OpenPGP digital signature
Re: [gentoo-user] Moonlight on Gentoo
On 8/8/08, Willie Wong <[EMAIL PROTECTED]> wrote: > Hi group: > > I was rather excited at first about NBC streaming olympic events on > the internet then I discovered that their media player is based > on Silverlight. > > Do you have any experience installing/running Moonlight on Gentoo? > Is there a ebuild available? Does it work with Firefox 3? Does > Moonlight 1 (since Moonlight 2 is still in pre-alpha) work with > NBC's stream? Haven't tried it yet (but I will be shortly), but a quick search on bugs.gentoo.org brings up the following, which has an attached ebuild for moonlight - just add it to a local overlay and go for it. http://bugs.gentoo.org/show_bug.cgi?id=234189 > > Best, > > Willie > > -- > Today's subliminal message is "" > Sortir en Pantoufles: up 609 days, 11:16 > >
[gentoo-user] Odd portage / eix behavior
On one of my boxes, eix shows every package as (*) which is testing for my current arch but stable on some other. emerge --info reports x86 as my arch, so I don't know what the problem is. I don't think it's a huge problem as it's just an annoyance but I might be missing something. I don't know where to start on google / forums so I figured I'd start here. eix portage produces: [I] sys-apps/portage Available versions: (*)2.0.51.22-r3 (*)2.1.1-r2 (*)2.1.4.4 ~2.1.5.6 ~2.2_rc1 ~2.2_rc5 ~2.2_rc6 {build doc elibc_FreeBSD elibc_glibc elibc_uclibc epydoc linguas_pl selinux userland_GNU} Installed versions: 2.1.4.4(07:40:54 02/17/08)(-build -doc -epydoc -linguas_pl -selinux) Homepage:http://www.gentoo.org/proj/en/portage/index.xml Description: Portage is the package management and distribution system for Gentoo Here's the first few lines of emerge --info: Portage 2.1.4.4 (default/linux/x86/2008.0, gcc-4.1.2, glibc-2.6.1-r0, 2.6.19-gentoo-r5 i686) = System uname: 2.6.19-gentoo-r5 i686 Celeron (Coppermine) Timestamp of tree: Thu, 07 Aug 2008 04:20:01 + distcc 2.18.3 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632) [disabled] app-shells/bash: 3.2_p33 dev-java/java-config: 1.3.7, 2.1.4 dev-lang/python: 2.4.4-r14 dev-python/pycrypto: 2.0.1-r6 sys-apps/baselayout: 1.12.11.1 sys-apps/sandbox:1.2.18.1-r2 sys-devel/autoconf: 2.13, 2.61-r2 sys-devel/automake: 1.6.3, 1.8.5-r3, 1.9.6-r2, 1.10.1 sys-devel/binutils: 2.18-r1 sys-devel/gcc-config: 1.4.0-r4 sys-devel/libtool: 1.5.26 virtual/os-headers: 2.6.23-r3 ACCEPT_KEYWORDS="x86" TIA -- Eric Martin Key fingerprint = D1C4 086E DBB5 C18E 6FDA B215 6A25 7174 A941 3B9F signature.asc Description: OpenPGP digital signature
Re: [gentoo-user] Problems installing Gentoo on an Asus EeePC 701
Eric Martin wrote: Please don't hijack threads. Please write a new email to the list if you wish to start a new thread. Here's a google search with lots of good resources on hijacking threads. You don't have to explain to me what thread hijacking means. I moderate a Brazilian e-group of 2900 people and am always saying that to members. Tell me what made you think I did that, because it sure ain't clear for me. Jeez, wake up. I wrote that e-mail from scratch. Regards, Saffi -- Ricardo Saffi Marques http://www.rsaffi.com == Laboratory of System Administration and Security - LAS Institute of Computing - IC P.O. Box: 6176 University of Campinas - UNICAMP 13083-852, Campinas, SP, Brazil ==
Re: [gentoo-user] Problems installing Gentoo on an Asus EeePC 701
On AD 2008 August 08 Friday 03:08:17 PM -0300, Ricardo Saffi Marques wrote: > You don't have to explain to me what thread hijacking means. I moderate a > Brazilian e-group of 2900 people and am always saying that to members. Tell > me what made you think I did that, because it sure ain't clear for me. > Jeez, wake up. I wrote that e-mail from scratch. Your set of posts showed up as part of another thread in my client. Justin
Re: [gentoo-user] Problems installing Gentoo on an Asus EeePC 701
Ricardo Saffi Marques wrote: > Eric Martin wrote: >> Please don't hijack threads. Please write a new email to the list if >> you wish to start a new thread. Here's a google search with lots of >> good resources on hijacking threads. > > You don't have to explain to me what thread hijacking means. I moderate > a Brazilian e-group of 2900 people and am always saying that to members. No need to get upset, I was politely asking you not to thread hijack and pointing you towards references > Tell me what made you think I did that, because it sure ain't clear for me. It shows up under the "Adding a gentoo workstation to Active Directory Network" thread in thunderbird. Looking at the headers, your message has an In-Reply-To:<[EMAIL PROTECTED]> which means it was in reply to a message. > Jeez, wake up. I wrote that e-mail from scratch. > > Regards, > > Saffi > -- Eric Martin Key fingerprint = D1C4 086E DBB5 C18E 6FDA B215 6A25 7174 A941 3B9F signature.asc Description: OpenPGP digital signature
Re: [gentoo-user] Problems installing Gentoo on an Asus EeePC 701
Justin Findlay wrote: Your set of posts showed up as part of another thread in my client. Well, not in mine. I wrote that from scratch, I insist. Anyways, I won't discuss about that here on the list. I disencourage thread hijacking and never did that. Sorry for any inconvenience if something weird and out of my control happened. Best regards and let's keep up the good work. Saffi -- Ricardo Saffi Marques http://www.rsaffi.com == Laboratory of System Administration and Security - LAS Institute of Computing - IC P.O. Box: 6176 University of Campinas - UNICAMP 13083-852, Campinas, SP, Brazil ==
[gentoo-user] [OFF-TOPIC] Eee 701 thread
Apologies for any misunderstanding and if I seemed angry. I wasn't. Just felt misjudged. Anyways, I was checking here and noticed that I've written and wanted to send a reply to that thread "Adding a gentoo workstation to Active Directory Network" which never arrived to the list (not here and seems it didn't there too). So there *is* a chance I was confused and ended up sending the Eee question as a reply to that thread, but with a brand new subject and body. In case that did happen, it happened as a mistake and I apologize again. Certainly not my intention to promote flames on this list, which I consider a very good one. Cheers! Best regards, Saffi -- Ricardo Saffi Marques http://www.rsaffi.com == Laboratory of System Administration and Security - LAS Institute of Computing - IC P.O. Box: 6176 University of Campinas - UNICAMP 13083-852, Campinas, SP, Brazil ==
Re: [gentoo-user] Problems installing Gentoo on an Asus EeePC 701
On Friday 08 August 2008, Eric Martin wrote: > Ricardo Saffi Marques wrote: > > Eric Martin wrote: > >> Please don't hijack threads. Please write a new email to the list if > >> you wish to start a new thread. Here's a google search with lots of > >> good resources on hijacking threads. > > > > You don't have to explain to me what thread hijacking means. I moderate > > a Brazilian e-group of 2900 people and am always saying that to members. > > No need to get upset, I was politely asking you not to thread hijack and > pointing you towards references > > > Tell me what made you think I did that, because it sure ain't clear for > > me. > > It shows up under the "Adding a gentoo workstation to Active Directory > Network" thread in thunderbird. Looking at the headers, your message > has an > In-Reply-To:<[EMAIL PROTECTED]> > which means it was in reply to a message. > > > Jeez, wake up. I wrote that e-mail from scratch. Same here, it shows as a hi-jack. I remember raising this on a previous occasion and was told that something is wrong with my client (or wasn't it?!). Either way, please tell us how your installation on EeePC comes along. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] [OFF-TOPIC] Eee 701 thread
Ricardo Saffi Marques wrote: > Apologies for any misunderstanding and if I seemed angry. I wasn't. Just > felt misjudged. > Anyways, I was checking here and noticed that I've written and wanted to > send a reply to that thread "Adding a gentoo workstation to Active > Directory Network" which never arrived to the list (not here and seems > it didn't there too). > So there *is* a chance I was confused and ended up sending the Eee > question as a reply to that thread, but with a brand new subject and > body. In case that did happen, it happened as a mistake and I apologize > again. > Certainly not my intention to promote flames on this list, which I > consider a very good one. > Cheers! > > Best regards, > > Saffi > No worries :) -- Eric Martin Key fingerprint = D1C4 086E DBB5 C18E 6FDA B215 6A25 7174 A941 3B9F signature.asc Description: OpenPGP digital signature
Re: [gentoo-user] openrc & modules args
On Fri, 2008-08-08 at 08:35 +0200, gigli wrote: > Hi > > I upgraded to openrc on my gentoo system, i use it as a mythbackend + > desktop. I need to pass an argument to the module dvb_usb_dib0700 to > activate the low noise amplifier, but i can't get it to work. > /etc/conf.d/modules looks like this > > # You can define a list modules for a specific kernel version, > # a released kernel version, a main kernel version or just a list. > #modules_2_6_23_gentoo_r5="ieee1394 ohci1394" > modules_2_6="powernow-k8 dvb_usb_dib0700 cpufreq_ondemand" > > # Give the modules some arguments if needed, per version if necessary. > module_dvb_usb_dib0700_args="force_lna_activation=1" > > # You should consult your kernel documentation and configuration > # for a list of modules and their options. > > > What am i doing wrong. The old /etc/modules.d/options does not work i guess? I think it's a openrc problem. I had a similar problem and I *think* it's because udev was loading the module before openrc and so the module_*_args did not apply. Putting the options in /etc/modules.d/* and running modules-update (aka "the old way") seems to have fixed it for me. -a
[gentoo-user] {OT} High capacity backup plan needed
I'm struggling to come up with a plan for making backups that is both effective and economical. I have 4 Gentoo systems: 1. strong local desktop 2. weak local desktop 3. laptop 4. hosted remote server I'd like to backup the important system and data files from each of these systems, plus my entire (growing) music collection which is stored on system #1. I'd like these backups to be safe in case of fire, theft, hard drive crash, etc. The system and data files are not a problem to encrypt, archive, store, and rsync across systems #1 and #4 because their size is relatively small. However, my music collection is big and growing and I'd like to have 1TB available for it. I'm not sure how to handle that. I could add a 1TB hard drive to system #4 for $375, and I do have plenty of monthly bandwidth there to spare so I won't be paying extra for that. That system is crucial for me though. Could involving that P4 1GB system in a daily rsync with system #1 requiring sometimes multiple GBs of transferred data slow it down? I would think the limiting factor would be system #1's bandwidth on a Suddenlink cable connection, so maybe that would keep things from getting bogged down on system #4? I looked into standalone backup solutions from my host and they have hefty monthly charges. I could set up NAS storage at a friend's place. We both have Suddenlink cable connections so the throughput should be alright. I don't like running a non-Gentoo system though, even if it is just NAS. Plus he uses a Netgear router which needs to be reset periodically. In addition, I think I would periodically backup the encrypted system and data files to DVD and store a copy in two locations. Any thoughts? - Grant
Re: [gentoo-user] Adding a gentoo workstation to Active Directory network
Hi stroller, that was actually interesting, but it didn't help me much... I do not manage the network, neither do I have any knowledge of it's working. I asked the help desk guys to help out, but all they managed is to get me someone that knew, after a 2 hours work, to mount the directories I needed manually. If I were to ask them I will have to be sure I am quite knowing the area so I could correctly describe to the Microsoft-trained network administrators what I want. If you could point me to an article of any kind (or to the relevant part in samba's huge documentation) I would be much grateful. thanks. On Fri, Aug 8, 2008 at 2:42 PM, Stroller <[EMAIL PROTECTED]>wrote: > > On 7 Aug 2008, at 23:04, Andrey Falko wrote: > >> ... >> As far as I know, don't take my word for it, in order to use Active >> Directory on a GNU/Linux host, you need to setup LDAP and have it talk >> to AD. Unfortunately I don't know how to do this, perhaps this will >> help: http://www.linux.com/articles/40983 . >> > > Hi there, > > I understood Active Directory to be Microsoft's implementation of LDAP + > extensions. Or maybe it's a Microsoft's entirely own way of doing a > directory service, with LDAP support bolted on afterwards. Anyway, yes, > Linux hosts should indeed be able to talk LDAP to an AD server. > > On a domain that I manage we authenticate over Samba instead. I can't > entirely recall why I chose this method instead of AD, but I'm pretty sure > there were good reasons for it at the time. Once Samba is configured to to > do winbind - it obviously needs to know the name of the domain server &c - > one installs the PAM winbind module and references it in /etc/pam.d/ for any > Linux services one wishes to authenticate off the Windows server. Samba > then, presumably, acts as a client to the domain server and says "user X, > hash(password Y) wants to log on, is this ok?"; PAM passes the response back > to the service the user is trying to use. > > I think winbind alleviates some need to deal with Active Directory. I > really know nothing about AD - all I have to do is log on to the Windows > server (SBS 2003) and add a user to the domain in the Server Management For > Idiots program Microsoft so kindly provides. The user is able to > authenticate on the Linux box immediately after restarting Samba (and the > restart is probably only required because I've fouled-up the caching > configuration, or something). I also use pam_mkhomedir so that when the user > logs on to IMAP for the first time ~ is automagically created; I had to > reject Courier-IMAP in favour of Dovecot in order to be able to do this, as > IIRC Courier doesn't use the PAM type "session", and that's required to make > pam_mkhomedir work (Dovecot doesn't actually need to use this type, but adds > an option to open a PAM session specifically to enable mkhomedir to be used. > This is a requirement of pam_mkhomedir, NOT pam_winbind). > > What I have enjoyed about winbind is that it has (so far!) made adding > additional services easy. I needed to run an ftp server (allow only > 127.0.0.1) on the Linux machine, so that Squirrelmail's vacation plugin > could upload the users' vacation messages to their homedirs. To get the ftp > service (net-ftp/vsftpd) to authenticate off the same credentials was as > easy as copying the PAM settings for the already-working IMAP server to > /etc/pam.d/ftp (although I see that each is "sufficient" instead of > "required" in this case). I was quite surprised it worked so easily, quickly > and smoothly. Anyway, any user can sit at their Windows workstation, > CTRL-ALT-DEL and change their password and the IMAP server will now respect > their new credentials, which is the important thing (for me). > > Stroller. > > >