Re: Get Kerberos Tickets at login
On Thu, Oct 20, 2011 at 01:07:45PM -0600, peter.stauff...@boehringer-ingelheim.com wrote: Hi, How can I get Kerberos tickets at login? When I login to my workstation, the account is authenticated against AD. Peter, How is the account authenicated against AD? We're doing this here but accessing AD as an LDAP server. But with klist, no ticket is displayed, so to get a Kerberos ticket, an additional call to kinit is required. It sounds like your /etc/krb5.conf file is correct as you are able to get Kerberos tickets. Which configuration options can be used on SL 5.5, to get Kerberos tickets immediately after login? In System - Administration - Authentication, there is a checkbox to enable Kerberos support for Authentication as well as Configure your Kerberos settings. It's been quite a while since we set this up and I can't remember if this was sufficient or additional manual configuration was required. The important part of Kerberos getting tickets automatically is in /etc/pam.d/system-auth. Here we have the following line in the auth section: authsufficientpam_krb5.so use_first_pass (There are similar lines in other sections.) This works for us here, and has worked with a different (ie non-AD) LDAP server. The only caveat to this, is that for this to work properly, passwords must be synchronized between LDAP and AD. If you have any other questions on this, please feel free to ask. I hope this helps. Steven Leikeim -- Steven Leikeim, GSEC-Gold| We, the willing Schulich School of Engineering | led by the unknowing Information Technologies | are doing the impossible | for the ungrateful. University of Calgary| We have done so much Calgary, Alberta | for so long with so little | we are now qualified Phone: (403) 220-5373| to do anything with nothing.
Re: SL 5.5 machines crash when using ATI proprietary driver
On Tue, Oct 11, 2011 at 09:38:31AM -0600, Alex Finch wrote: We have a number of SL 5.5 machines with ATI graphics cards. We have discovered that they freeze when using the ati proprietary driver (fglrx). I am guessing this is since the recent xorg-x11-server update on 7th October. They had worked fine previously, and they work ok if I revert to a default xorg.conf. Does anyone else see this problem, or even better, have a solution? Alex Finch We had the same problem here (with SL 5.6) on some lab machines where we have to use the ATI proprietary driver. As I was away on Friday when this showed up, the machines were rebuilt resulting in working machines (but with mediocre performance). Re-installing our local custom RPM for the fglrx driver was successful with no changes required. I suspect that the problem arises from the fglrx driver replacing some of the system files with it's own and when these files were changed by the RPM they belong to, the fglrx driver got confused and stopped operating properly. It looks like the solution may be as simple as just re-installing the fglrx driver. Steven Leikeim -- Steven Leikeim, GSEC-Gold| We, the willing Schulich School of Engineering | led by the unknowing Information Technologies | are doing the impossible | for the ungrateful. University of Calgary| We have done so much Calgary, Alberta | for so long with so little | we are now qualified Phone: (403) 220-5373| to do anything with nothing.
Re: a quick poll: what are your favourite linux power tools?
Some tools that I like and use frequently: find wget screen wc grep (and all the fun of regular expressions) awk sed While not necessarily tools themselves, the following may also be interesting: Use of cron/crontabs Use of hosts.allow/deny to control access to network services Or you could do some more advanced things with: find vi (and the fun things you can do with regular expressions there) bash scripting command pipelines -- Steven Leikeim, GSEC-Gold| We, the willing Schulich School of Engineering | led by the unknowing Information Technologies | are doing the impossible | for the ungrateful. University of Calgary| We have done so much Calgary, Alberta | for so long with so little | we are now qualified Phone: (403) 220-5373| to do anything with nothing.
Re: Scientific Linux 5.5 x86_64 Eclipse problems
On Wed, Jan 05, 2011 at 08:05:47AM -0700, Troy Dawson wrote: Troy J Dawson wrote: Steven Leikeim wrote: Happy New Year everyone. We are having a problem with the Eclipse IDE (eclipse-platform-3.2.1-19.el5.x86_64) in that it is not starting correctly. When we start Eclipse, doesn't matter if it's started from the command line or Window Manger Menu, we get the message: An error has occured. See the log file /sleikeim/workspace/.metadata/.log which contains: ... The last related updates to java appear to be on October 21st where jdk was updated to 2000:jdk-1.6.0_22-fcs and java-1.6.0-sun-compat was updated to java-1.6.0-sun-compat-1.6.0.22-3.sl5.jpp. (In both cases, both i586 and x86_64 architectures were updated.) I tested this on a clean installation of Scientific Linux 5.5 (x86_64) with the following results: - Basic minimal installation of Scientifc Linux 5.5 with the addition of eclipse-platform but no further updates - Eclipse works - Updated all RPMS **EXCEPT** jdk and java-1.6.0-sun-compat - Eclipse works. - Updated jdk and java-1.6.0-sun-compat - Eclipse crashes as noted above. Finally, my questions are: - Is this a known issue? (If not is is now!! :) ) Yes, though not widely known. It's a bit of a pain because with SL5.5 we have 3 different versions of java. gcj, sun (oracle), and openjdk - Is there a known workaround or update to fix this problem? This may, or may not, be a workaround for you. Eclipse wants to use the gcj version of java. I did the following to get eclipse working rpm -e --nodeps java-1.4.2-gcj-compat java-1.6.0-sun-compat yum install java-1.4.2-gcj-compat Of course, that means that all of my java links point to the gcj version of java, which may or may not be what you want. I am currently checking to see if eclipse will work with the openjdk, which would be a better solution, since it is version 1.6 Troy Well, it looks like openjdk is the better solution. I installed all of the openjdk packages yum install java-1.6.0-openjdk\* and eclipse worked for me. I even updated my sun java yum install java-1.6.0-sun-compat And eclipse continued to work. Let us know if this works for you. Thanks Troy Troy, Success!! Eclipse now starts up correctly with the java-1.6.0-openjdk installed. The only snag I ran is if the java-1.6.0-sun-compat is installed first, it creates the symbolic link /usr/bin/java pointing to /usr/java/default/bin/java. In order to use the java-1.6.0-openjdk this needs to point to /etc/alternatives/java. (It's possible that this link is being put in place by the jdk RPM.) Pointing /usr/bin/java to /etc/alternatives/java still allows the java-1.6.0-sun-compat java to work properly. When the java-1.6.0-openjdk is installed, it is automatically selected at the best version and Eclipse is happy. Thanks for your help in fixing this problem. Steven Leikeim -- Steven Leikeim, GSEC-Gold| We, the willing Schulich School of Engineering | led by the unknowing Information Technologies | are doing the impossible | for the ungrateful. University of Calgary| We have done so much Calgary, Alberta | for so long with so little | we are now qualified Phone: (403) 220-5373| to do anything with nothing.
Scientific Linux 5.5 x86_64 Eclipse problems
Happy New Year everyone. We are having a problem with the Eclipse IDE (eclipse-platform-3.2.1-19.el5.x86_64) in that it is not starting correctly. When we start Eclipse, doesn't matter if it's started from the command line or Window Manger Menu, we get the message: An error has occured. See the log file /sleikeim/workspace/.metadata/.log which contains: -- .log file --- !SESSION 2010-11-04 14:03:34.285 --- eclipse.buildId=M20060921-0945 java.version=1.6.0_22 java.vendor=Sun Microsystems Inc. BootLoader constants: OS=linux, ARCH=x86_64, WS=gtk, NL=en_US Command-line arguments: -os linux -ws gtk -arch x86_64 !ENTRY org.eclipse.osgi 4 0 2010-11-04 14:03:36.426 !MESSAGE Application error !STACK 1 java.lang.UnsatisfiedLinkError: /usr/lib64/eclipse/configuration/org.eclipse.osg i/bundles/101/1/.cp/libswt-pi-gtk-3235.so: /usr/lib64/eclipse/configuration/org. eclipse.osgi/bundles/101/1/.cp/libswt-pi-gtk-3235.so: wrong ELF class: ELFCLASS6 4 (Possible cause: architecture word width mismatch) at java.lang.ClassLoader$NativeLibrary.load(Native Method) at java.lang.ClassLoader.loadLibrary0(ClassLoader.java:1803) at java.lang.ClassLoader.loadLibrary(ClassLoader.java:1712) - Truncated end of .log file - The last related updates to java appear to be on October 21st where jdk was updated to 2000:jdk-1.6.0_22-fcs and java-1.6.0-sun-compat was updated to java-1.6.0-sun-compat-1.6.0.22-3.sl5.jpp. (In both cases, both i586 and x86_64 architectures were updated.) I tested this on a clean installation of Scientific Linux 5.5 (x86_64) with the following results: - Basic minimal installation of Scientifc Linux 5.5 with the addition of eclipse-platform but no further updates - Eclipse works - Updated all RPMS **EXCEPT** jdk and java-1.6.0-sun-compat - Eclipse works. - Updated jdk and java-1.6.0-sun-compat - Eclipse crashes as noted above. Finally, my questions are: - Is this a known issue? (If not is is now!! :) ) - Is there a known workaround or update to fix this problem? Any help to resolve this issue would be greatly appreciated. Thanks, Steven Leikeim -- Steven Leikeim, GSEC-Gold| We, the willing Schulich School of Engineering | led by the unknowing Information Technologies | are doing the impossible | for the ungrateful. University of Calgary| We have done so much Calgary, Alberta | for so long with so little | we are now qualified Phone: (403) 220-5373| to do anything with nothing.
Re: changing login/default shell
On Wed, Jan 20, 2010 at 11:11:00PM -0800, suvayu ali wrote: Hi everyone, I want to change my login shell on a SL 4.8 machine I don't have root access to (atcanpc, its only accessible from lxplus). I have tried `chsh -s `which bash`'. But that returns me the following error: chsh: Your shell is not in /etc/shells, shell change denied. However when I do `chsh -l' I see /bin/bash in it. Is there any solution to this? Thanks for any pointers. Suvanyu, My guess is that which bash is NOT returning /bin/bash. The command chsh -s /bin/bash will do what you want. Steven Leikeim -- Steven Leikeim, GSEC-Gold | We, the willing Schulich School of Engineering| led by the unknowing Information Technologies | are doing the impossible | for the ungrateful. University of Calgary | We have done so much Calgary, Alberta | for so long with so little | we are now qualified Phone: (403) 220-5373 Fax: (403) 282-6855 | to do anything with nothing.
