Re: [OpenAFS] pam_openafs_session source

2003-06-12 Thread Derek Atkins
Ok, this is new. It did not do that before. Good work on consolidating. -derek Balazs GAL <[EMAIL PROTECTED]> writes: > 2003-06-08, v keltezéssel Derek Atkins ezt írta: > > No. There are definitely other cases where you want > > pam-openafs-session. For example, ssh with forwarded krb5 ticke

Re: [OpenAFS] Distributing passwd

2003-06-12 Thread Derek Atkins
Nathan Neulinger <[EMAIL PROTECTED]> writes: > > Umm, I think _ALL_ of these have to do with storing the encrypted > > password entry in the NIS database. As I said, we're using Kerberos > > for authentication so you can leave the password entry as "None" > > (e.g. '*' or 'x') in NIS... So, iter

Re: [OpenAFS] pam_openafs_session source

2003-06-12 Thread Balazs GAL
2003-06-08, v keltezéssel Richard Wallace ezt írta: > On Sat, 2003-06-07 at 23:59, Charles Clancy wrote: > > Hasn't pam_krb5 with built-in AFS support pretty much obsoleted > > pam_openafs-session? > > > > Sure. I'm assuming you're referring to the pam_krb5 module on > sourceforge (http://source

Re: [OpenAFS] pam_openafs_session source

2003-06-12 Thread Balazs GAL
2003-06-08, v keltezéssel Derek Atkins ezt írta: > No. There are definitely other cases where you want > pam-openafs-session. For example, ssh with forwarded krb5 tickets. pam-krb5.sf.net do it for you, so you should not use pam-openafs-session in any case unless you like it. balsa __

Re: [OpenAFS] pam_openafs_session source

2003-06-12 Thread Richard Wallace
On Thu, 2003-06-12 at 12:13, Richard Wallace wrote: > > > the /usr/include directory but then get this error when compiling: > > > gcc -c -I/usr/include -DHAVE_CONFIG_H -DLIBDIR='"/usr/local/lib"' -I. > > > -I. -g -O2 lifetime.c > > > lifetime.c:120: conflicting types for `krb_life_to_time' > > >

Re: [OpenAFS] AFS and Oracle

2003-06-12 Thread Nathan Neulinger
We have quite a few on linux oracle servers using filesystem based db's (not raw devices), and have the oracle client installed in afs. Not aware of any problems with oracle use as a result of this. Really don't interact much with each other. The servers just happen to have afs on them for userid h

Re: [OpenAFS] AFS and Oracle

2003-06-12 Thread Russ Allbery
Dave McMurtrie <[EMAIL PROTECTED]> writes: > Is anybody running afs client on the same machine as an Oracle database? Yes, we do so routinely. > If anyone has this setup, I'd appreciate hearing about any problems > you've had. If you haven't had any problems, I'd like to hear that > also. No p

[OpenAFS] AFS and Oracle

2003-06-12 Thread Dave McMurtrie
Is anybody running afs client on the same machine as an Oracle database? I'm not interested in installing Oracle in AFS, or running Oracle out of AFS, or storing anything that Oracle cares about in AFS. Literally, we'll just have home directories in AFS on a machine that happens to run Oracle. If

Re: [OpenAFS] pam_openafs_session source

2003-06-12 Thread Richard Wallace
> > the /usr/include directory but then get this error when compiling: > > gcc -c -I/usr/include -DHAVE_CONFIG_H -DLIBDIR='"/usr/local/lib"' -I. > > -I. -g -O2 lifetime.c > > lifetime.c:120: conflicting types for `krb_life_to_time' > > krbafs_locl.h:143: previous declaration of `krb_life_to_time'

Re: [OpenAFS] Distributing passwd

2003-06-12 Thread Christian Ospelkaus
> Yes, you used krb for auth, but do you prevent regular and passwordless > auth from working? +:*:0:0::: in /etc/passwd (or similar for shadow-like configuration) should be enough? Christian ___ OpenAFS-info mailing list [EMAIL PROTECTED] https://l

Re: [OpenAFS] Distributing passwd

2003-06-12 Thread Nathan Neulinger
> Umm, I think _ALL_ of these have to do with storing the encrypted > password entry in the NIS database. As I said, we're using Kerberos > for authentication so you can leave the password entry as "None" > (e.g. '*' or 'x') in NIS... So, iterating over the NIS map doesn't > help you (no password

Re: [OpenAFS] Distributing passwd

2003-06-12 Thread Derek Atkins
Stephen Joyce <[EMAIL PROTECTED]> writes: > On 11 Jun 2003, Derek Atkins wrote: > > > > It would be wise to think twice (or more!) before deploying NIS due to > > > security concerns. > > > > Ok, what security concerns? The encrypted password isn't stored there > > (we use Kerberos) -- you can j

Re: [OpenAFS] Which DBM-Server does aklog use?

2003-06-12 Thread Derek Atkins
I believe this is true of all the user-space commands. Doesn't "vos" or "pts" also try the first server first? -derek Klaas Hagemann <[EMAIL PROTECTED]> writes: > Hi, > > which management server should aklog use? I realized that aklog always > uses the first one in /user/vice/etc/CellServDB an

Re: [OpenAFS] problem with openafs on a recompiled 2.4.20-8 kernel

2003-06-12 Thread Derek Atkins
Yes, you are correct. You need to remove those files from the kernel directory, then rebuild the kernel from scratch, and then rebuild AFS. -derek Johann Cohen-Tanugi <[EMAIL PROTECTED]> writes: > On Thu, 2003-06-12 at 17:06, Derek Atkins wrote: > > If you are going to reconfigure a Red Hat ker

Re: [OpenAFS] problem with openafs on a recompiled 2.4.20-8 kernel

2003-06-12 Thread Derek Atkins
Johann Cohen-Tanugi <[EMAIL PROTECTED]> writes: > ok, but I added acpi support, plus changed a few config to match my > hardware better, and recompiled... so if this is not a standard 2.4.20-8 > anymore for afs, it has to be because of config parameters that it > expects in the kernel, and that I

Re: [OpenAFS] problem with openafs on a recompiled 2.4.20-8 kernel

2003-06-12 Thread Derrick J Brashear
You need not reply to me directly; Please don't. On Thu, 12 Jun 2003, Johann Cohen-Tanugi wrote: > On Thu, 2003-06-12 at 17:06, Derek Atkins wrote: > > If you are going to reconfigure a Red Hat kernel then you MUST > > remove the pre-computed ksyms from include/linux/modules/* > > > ok, currently