[OpenIndiana-discuss] XStreamOS and Desktop beta 3 installers
Hi, new iso/usb installers of XStreamOS and Desktop beta 3 are available here: https://sourceforge.net/projects/xstreamos/files/ featuring: - kernel updated to illumos as of end of September 2014 - bash patches as from Oracle userland, including the Shellshock bug fix only on desktop release: - desktop is now stable, no more crashes on core dumps - updated firefox - updated thunderbird - new login manager based on lightdm - gvfs and keyring integration of file manager - added in repo musescore - added in repo netbeans 7 bundles (single, with tomcat, with glassfish, with both) - added in repo eclipse - more software available in repo Register to the lists to send us comments : http://lists.sonicle.com Gabriele ___ openindiana-discuss mailing list openindiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Process to install tape changer?
On 10/ 7/14 07:42 PM, Kurt Richman wrote: I have a Dell PowerVault TL2000 tape library which I'd like to connect directly to our OpenIndiana server. The drives on the TL2000 are connected via SAS and show show up under /dev/rmt/, but I'm not sure how to add the Tape changer. Do I need to modify /kernel/drv/sgen.conf and add a changer? I tried to use add_drv as the sgen.conf file suggests, but sgen was already in use (even though everything is commented out in the sgen.conf file). We have a Dell PowerVault on an old Sun Sparc (Solaris) connected via scsi. The configuration might be similar in openindiana. To recognize the changer, the following is defined in /kernel/drv/sgen.conf matching the SCSI identifier of the changer. device-type-config-list="changer"; inquiry-config-list="DELL", "PV-124T"; name="sgen" class="scsi" target=0 lun=0; name="sgen" class="scsi" target=1 lun=0; name="sgen" class="scsi" target=2 lun=0; name="sgen" class="scsi" target=3 lun=0; (etc for all targets) after a reconfiguration reboot, the device shows up in /dev/scsi/changer/c?t?d? and use the "mtx" program to control it. # mtx -f /dev/scsi/changer/c0t5d1 status Storage Changer /dev/scsi/changer/c0t5d1:1 Drives, 16 Slots ( 0 Import/Export ) Data Transfer Element 0:Empty Storage Element 1:Full Storage Element 2:Full Storage Element 3:Full (etc) ___ openindiana-discuss mailing list openindiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
[OpenIndiana-discuss] Join to AD Domain with HA kpasswd server
Hello,
I am attempting to join an OpenIndiana server to an Active Directory domain for
authenticating smb/server following this guide:
http://docs.oracle.com/cd/E19120-01/open.solaris/820-2429/configuredomainmodetask/index.html
However, I do not want to specify just a single domain controller in the kdc,
admin_server, and kpasswd_server fields since that would be a single point of
failure. I have a pair of forwarding servers that host a VIP (ad.example.com)
and NAT traffic to any of the available DCs, so I'd prefer to put the hostname
of this VIP in these fields instead:
[libdefaults]
default_realm = EXAMPLE.COM
[realms]
EXAMPLE.COM = {
kdc = ad.example.com
admin_server = ad.example.com
kpasswd_server = ad.example.com
kpasswd_protocol = SET_CHANGE
}
[domain_realm]
.example.com = EXAMPLE.COM
However, this doesn't work when I run "smbadm join":
Tree Connection SUCCEEDED (0)
Authentication SUCCEEDED (0) for administra...@example.com by dc0
Using ad.example.com (dc0) as DC for domain example.com (example)
Tree Connection SUCCEEDED (0)
Authentication SUCCEEDED (0) for administra...@example.com by dc0
getting initial credentials (Incorrect net address)
getting initial credentials (Incorrect net address)
Joining domain to alter computer account FAILED (1) using
administra...@example.com credentials.
Failed to connect to an Active Directory server.
Joining domain failed (c001)
I think this "Incorrect net address" error is occurring because the address
list provided to Kerberos contains the IP addresses of the OpenIndiana server,
not the NAT server (ad.example.com). According to the manpage, I should be able
to add no_addresses to the [appdefaults] section to request an address-less
ticket:
[libdefaults]
default_realm = EXAMPLE.COM
[realms]
EXAMPLE.COM = {
kdc = ad.example.com
admin_server = ad.example.com
kpasswd_server = ad.example.com
kpasswd_protocol = SET_CHANGE
}
[domain_realm]
.example.com = EXAMPLE.COM
[appdefaults]
kinit = {
renewable = true
forwardable = true
no_addresses = true
}
However, doing this does not improve the situation when running "smbadm join".
This DOES work when running "kinit" manually. Changing the kdc, admin_server,
and kpasswd_server to use one of the DCs directly, e.g dc0.example.com, makes
"smbadm join" work successfully. What can I do to successfully join the domain
using this NAT server for HA?
Thanks,
Andrew Martin
___
openindiana-discuss mailing list
openindiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Join to AD Domain with HA kpasswd server
I think " joining domain failed (c001)" might give you a clue.
When the NAT translates you computers ip-address to a new local, no dns
reference will exist for that IP.
At least that is what came up in google..
On 8 oktober 2014 21:00:00 Andrew Martin wrote:
Hello,
I am attempting to join an OpenIndiana server to an Active Directory domain for
authenticating smb/server following this guide:
http://docs.oracle.com/cd/E19120-01/open.solaris/820-2429/configuredomainmodetask/index.html
However, I do not want to specify just a single domain controller in the kdc,
admin_server, and kpasswd_server fields since that would be a single point of
failure. I have a pair of forwarding servers that host a VIP (ad.example.com)
and NAT traffic to any of the available DCs, so I'd prefer to put the hostname
of this VIP in these fields instead:
[libdefaults]
default_realm = EXAMPLE.COM
[realms]
EXAMPLE.COM = {
kdc = ad.example.com
admin_server = ad.example.com
kpasswd_server = ad.example.com
kpasswd_protocol = SET_CHANGE
}
[domain_realm]
.example.com = EXAMPLE.COM
However, this doesn't work when I run "smbadm join":
Tree Connection SUCCEEDED (0)
Authentication SUCCEEDED (0) for administra...@example.com by dc0
Using ad.example.com (dc0) as DC for domain example.com (example)
Tree Connection SUCCEEDED (0)
Authentication SUCCEEDED (0) for administra...@example.com by dc0
getting initial credentials (Incorrect net address)
getting initial credentials (Incorrect net address)
Joining domain to alter computer account FAILED (1) using
administra...@example.com credentials.
Failed to connect to an Active Directory server.
Joining domain failed (c001)
I think this "Incorrect net address" error is occurring because the address
list provided to Kerberos contains the IP addresses of the OpenIndiana server,
not the NAT server (ad.example.com). According to the manpage, I should be able
to add no_addresses to the [appdefaults] section to request an address-less
ticket:
[libdefaults]
default_realm = EXAMPLE.COM
[realms]
EXAMPLE.COM = {
kdc = ad.example.com
admin_server = ad.example.com
kpasswd_server = ad.example.com
kpasswd_protocol = SET_CHANGE
}
[domain_realm]
.example.com = EXAMPLE.COM
[appdefaults]
kinit = {
renewable = true
forwardable = true
no_addresses = true
}
However, doing this does not improve the situation when running "smbadm join".
This DOES work when running "kinit" manually. Changing the kdc, admin_server,
and kpasswd_server to use one of the DCs directly, e.g dc0.example.com, makes
"smbadm join" work successfully. What can I do to successfully join the domain
using this NAT server for HA?
Thanks,
Andrew Martin
___
openindiana-discuss mailing list
openindiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss
___
openindiana-discuss mailing list
openindiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss
