RE: ****RE: ****Re: ****Re: Linux Administration - Users in (any) database howto/why... SAMBA and CERTS

2009-01-03 Thread Lisa Kachold
ttle cscript "application" that prompts them through the process? www.Obnosis.com | http://en.wiktionary.org/wiki/Citations:obnosis | (503)754-4452 January PLUG HackFest = Kristy Westphal, AZ Department of Economic Security Forensics @ UAT 1/10/09 12-3PM > Subject: Re: RE

Re: ****Re: Linux Administration - Users in (any) database howto/why...

2009-01-02 Thread Ed
@ UAT 1/10/09 12-3PM > > >> Date: Fri, 2 Jan 2009 16:40:20 -0700 >> From: j...@nationnet.com >> To: plug-discuss@lists.plug.phoenix.az.us >> Subject: Re: Re: Linux Administration - Users in (any) database >> howto/why... >> >> Good point on TLS. The /

Re: ****RE: ****Re: ****Re: Linux Administration - Users in (any) database howto/why...

2009-01-02 Thread Craig White
On Fri, 2009-01-02 at 21:08 -0700, Joe wrote: > Sorry Craig, I had to jump in again. smbpasswd -w drives you crazy? From > the Eating Security page, this is what I was talking about eariler: > > "Another file with a plain text password is /etc/ldap.secret. This file > must contain the rootdn pas

Re: ****RE: ****Re: ****Re: Linux Administration - Users in (any) database howto/why...

2009-01-02 Thread Joe
Sorry Craig, I had to jump in again. smbpasswd -w drives you crazy? From the Eating Security page, this is what I was talking about eariler: "Another file with a plain text password is /etc/ldap.secret. This file must contain the rootdn password in plain text, but is again somewhat mitigated wi

Re: ****RE: ****Re: ****Re: Linux Administration - Users in (any) database howto/why...

2009-01-02 Thread Craig White
On Sat, 2009-01-03 at 02:48 +, Lisa Kachold wrote: > Here's the definitive guide for hammering down LDAP, noting defaults > for use, etc. > http://eatingsecurity.blogspot.com/2008/11/openldap-security.html I'd hardly call it a definitive guide to hammering down LDAP when there are only 2 A

RE: ****Re: ****Re: Linux Administration - Users in (any) database howto/why...

2009-01-02 Thread Lisa Kachold
2008/11/openldap-security.html www.Obnosis.com | http://en.wiktionary.org/wiki/Citations:obnosis | (503)754-4452 January PLUG HackFest = Kristy Westphal, AZ Department of Economic Security Forensics @ UAT 1/10/09 12-3PM > Subject: Re: ****Re: Re: Linux Administration - Users in (any) database

RE: ****Re: ****Re: Linux Administration - Users in (any) database howto/why...

2009-01-02 Thread Lisa Kachold
r administration with access to the hash also. www.Obnosis.com | http://en.wiktionary.org/wiki/Citations:obnosis | (503)754-4452 January PLUG HackFest = Kristy Westphal, AZ Department of Economic Security Forensics @ UAT 1/10/09 12-3PM > Subject: Re: Re: Re: Linux Administration - Users

RE: ****Re: Linux Administration - Users in (any) database howto/why...

2009-01-02 Thread Lisa Kachold
i, 2 Jan 2009 16:40:20 -0700 > From: j...@nationnet.com > To: plug-discuss@lists.plug.phoenix.az.us > Subject: Re: Re: Linux Administration - Users in (any)database > howto/why... > > Good point on TLS. The /etc/ldap.secret is where I had the problem. If > you

Re: ****Re: ****Re: Linux Administration - Users in (any) database howto/why...

2009-01-02 Thread Craig White
On Fri, 2009-01-02 at 16:40 -0700, Joe wrote: > Good point on TLS. The /etc/ldap.secret is where I had the problem. If > you put that file on an end users machine, wouldn't they be able to boot > into single user mode or sudo and read that file? Doesn't that file > provide the keys to the kingdo

Re: ****Re: ****Re: Linux Administration - Users in (any) database howto/why...

2009-01-02 Thread Craig White
On Fri, 2009-01-02 at 16:40 -0700, Joe wrote: > Good point on TLS. The /etc/ldap.secret is where I had the problem. If > you put that file on an end users machine, wouldn't they be able to boot > into single user mode or sudo and read that file? Doesn't that file > provide the keys to the kingdo

Re: ****Re: Linux Administration - Users in (any) database howto/why...

2009-01-02 Thread Joe
Good point on TLS. The /etc/ldap.secret is where I had the problem. If you put that file on an end users machine, wouldn't they be able to boot into single user mode or sudo and read that file? Doesn't that file provide the keys to the kingdom? Once you have full read access to the directory. c

RE: ****Re: Linux Administration - Users in (any) database howto/why...

2009-01-02 Thread Lisa Kachold
Security Forensics @ UAT 1/10/09 12-3 > Subject: Re: ****Re: Linux Administration - Users in (any) database > howto/why... > From: craigwh...@azapple.com > To: plug-discuss@lists.plug.phoenix.az.us > Date: Fri, 2 Jan 2009 13:24:20 -0700 > > On Fri, 2009-01-02 at 13:09 -0700,

[OT] Re: Linux Administration

2009-01-02 Thread Craig White
On Fri, 2009-01-02 at 15:04 -0700, Technomage wrote: > Thats all fine and good, but when it comes down to it, we wouldn't have > a government if no one paid any taxes. > That means no one to defend our borders, or make the laws or manage the > society properly... > > Take a look at Ethiopia and

Re: Linux Administration

2009-01-02 Thread Technomage
Thats all fine and good, but when it comes down to it, we wouldn't have a government if no one paid any taxes. That means no one to defend our borders, or make the laws or manage the society properly... Take a look at Ethiopia and you'll see an example of "lack of government" a fair tax would b

Re: Linux Administration

2009-01-02 Thread Mike Garfias
2-3PM > > > From: kitepi...@kitepilot.com > > To: plug-discuss@lists.plug.phoenix.az.us > > Subject: Re: Linux Administration > > Date: Thu, 1 Jan 2009 07:33:15 -0500 > > > > > http://www.fairtax.org/ > > ... > > > > > > > > Josh

Re: ****Re: Linux Administration - Users in (any) database howto/why...

2009-01-02 Thread Craig White
On Fri, 2009-01-02 at 13:09 -0700, Joe wrote: > Craig, > > Thanks for the info on FreeIPA. It sounds like you have quite a bit of > experience with LDAP. Maybe you can answer some questions. > > In the past when I tried to configure LDAP with nsswitch, I remember > that I had to put the Admin c

Re: Linux Administration - Users in (any) database howto/why...

2009-01-02 Thread Joe
Craig, Thanks for the info on FreeIPA. It sounds like you have quite a bit of experience with LDAP. Maybe you can answer some questions. In the past when I tried to configure LDAP with nsswitch, I remember that I had to put the Admin credentials in a file in /etc. Also, at the time ldap did no

Re: ****Re: ****Re: Linux Administration - Users in (any) database howto/why...

2009-01-02 Thread Craig White
On Fri, 2009-01-02 at 10:07 -0700, Stephen wrote: > open-LikeWise will not synchronise as far as i can tell, its more of a > authentication tool, or the free one is. but if your on a Linux > machine and need to auth against a Domain its handy. > > It also appears that the next version of freeIPA (

Re: ****Re: Linux Administration - Users in (any) database howto/why...

2009-01-02 Thread Stephen
open-LikeWise will not synchronise as far as i can tell, its more of a authentication tool, or the free one is. but if your on a Linux machine and need to auth against a Domain its handy. It also appears that the next version of freeIPA (2.0) is looking to make it less fedora only. which will be v

RE: ****Re: Linux Administration - Users in (any) database howto/why...

2009-01-02 Thread Craig White
On Fri, 2009-01-02 at 15:55 +, Lisa Kachold wrote: > AD takes care of the Windows side completely to include Domain Admin, > etc. OpenLDAP is trivial to configure for this. > > open-likewise simply puts it's own framework over it all. > I would build up test systems to see what you like, but

Re: ****Re: Linux Administration - Users in (any) database howto/why...

2009-01-02 Thread Stephen
Jan 2009 08:47:23 -0700 >> From: cryptwo...@gmail.com >> To: plug-discuss@lists.plug.phoenix.az.us >> Subject: Re: Re: Linux Administration - Users in (any) database >> howto/why... >> >> ok now here is a question. >> >> how well would this concept play w

RE: ****Re: Linux Administration - Users in (any) database howto/why...

2009-01-02 Thread Lisa Kachold
stphal, AZ Department of Economic Security Forensics @ UAT 1/10/09 12-3PM > Date: Fri, 2 Jan 2009 08:47:23 -0700 > From: cryptwo...@gmail.com > To: plug-discuss@lists.plug.phoenix.az.us > Subject: Re: Re: Linux Administration - Users in (any) database > howto/why... >

Re: ****Re: Linux Administration - Users in (any) database howto/why...

2009-01-02 Thread Stephen
t = Kristy Westphal, AZ Department of Economic Security > Forensics @ UAT 1/10/09 12-3PM > >> Subject: Re: Re: Linux Administration - Users in (any) database >> howto/why... >> From: craigwh...@azapple.com >> To: plug-discuss@lists.plug.phoenix.az.us >> Date: Thu,

RE: ****Re: Linux Administration - Users in (any) database howto/why...

2009-01-02 Thread Lisa Kachold
actually have the WINDOWS ADMINS DO USER MAINTENANCE www.Obnosis.com | http://en.wiktionary.org/wiki/Citations:obnosis | (503)754-4452 January PLUG HackFest = Kristy Westphal, AZ Department of Economic Security Forensics @ UAT 1/10/09 12-3PM > Subject: Re: ****Re: Linux Administrati

RE: Linux Administration - Users in (any) database howto/why...

2009-01-01 Thread Lisa Kachold
Okay, so you could use Pluggable Authentication Modules, but why not go for OpenLDAP with postgresql under LFS? http://www.samse.fr/GPL/ldap_pg/HOWTO/ www.Obnosis.com | http://en.wiktionary.org/wiki/Citations:obnosis | hackfest.obnosis.com (503)754-4452 January PLUG HackFest = Kristy Westpha

Re: Linux Administration - Users in (any) database howto/why...

2009-01-01 Thread James Mcphee
If you still feel the need to have local authentication via postgres, there is a PAM module for it that occassionally works. On Thu, Jan 1, 2009 at 12:18 PM, Ben Browning wrote: > kitepi...@kitepilot.com wrote: > >> I suggest you keep /etc/passwd and /etc/group for real linux users and add

Re: Linux Administration - Users in (any) database howto/why...

2009-01-01 Thread Ben Browning
kitepi...@kitepilot.com wrote: I suggest you keep /etc/passwd and /etc/group for real linux users and add "virtual users" support to each of the applications that need it. This is exactly what I am trying to do. If I understand you well, I am devising a solution for a problem that I don't have.

Re: Linux Administration - Users in (any) database howto/why...

2009-01-01 Thread kitepi...@kitepilot.com
>> I suggest you keep /etc/passwd and /etc/group for real linux users and >> add "virtual users" support to each of the applications that need it. This is exactly what I am trying to do. If I understand you well, I am devising a solution for a problem that I don't have... :( Is it? Thanks! ET

Re: ****Re: Linux Administration - Users in (any) database howto/why...

2009-01-01 Thread Craig White
On Thu, 2009-01-01 at 11:24 -0500, kitepi...@kitepilot.com wrote: > I think that LDAP is overkill for my application. > My users will authenticate only in/for one server, and probably to either > update a WEB site or drop/retrieve e-mail. > > Some users may have WEB sites, some users may have e-

Re: ****Re: Linux Administration - Users in (any) database howto/why...

2009-01-01 Thread Craig White
On Thu, 2009-01-01 at 09:01 -0700, Joe wrote: > That is a great question. First, let me say I don't have an answer. The > reason I'm responding is that Postgres scares me. The reason it scares > me is that I have had a number of times when upgrading postgres, the DB > files were not compatible w

Re: Linux Administration - Users in (any) database howto/why...

2009-01-01 Thread Dale Farnsworth
Enrique wrote: > OK, I've reached that (long postponed) point of my life where I *HAVE* to > ditch /etc/passwd and /etc/group in favor of storing my users in a database. > Any database... > [...] > Furthermore, I want to login with my trusted /etc/passwd - /etc/group > combination when I SSH

Re: Linux Administration - Users in (any) database howto/why...

2009-01-01 Thread kitepi...@kitepilot.com
I think that LDAP is overkill for my application. My users will authenticate only in/for one server, and probably to either update a WEB site or drop/retrieve e-mail. Some users may have WEB sites, some users may have e-mail, some users may be signed up in the wireless network, and some users m

Re: Linux Administration - Users in (any) database howto/why...

2009-01-01 Thread Joe
That is a great question. First, let me say I don't have an answer. The reason I'm responding is that Postgres scares me. The reason it scares me is that I have had a number of times when upgrading postgres, the DB files were not compatible with the older version and it wasn't till after the up

RE: Linux Administration

2009-01-01 Thread Lisa Kachold
-3PM > From: kitepi...@kitepilot.com > To: plug-discuss@lists.plug.phoenix.az.us > Subject: Re: Linux Administration > Date: Thu, 1 Jan 2009 07:33:15 -0500 > > http://www.fairtax.org/ > ... > > > > Joshua Zeidner writes: > > > The cost of living would be

Re: Linux Administration

2009-01-01 Thread kitepi...@kitepilot.com
12-3PM >>> Take the Black [Security] Pill & leave IT-Marketing-Matrix, or take the Blue >>> [MS Upgrade] Pill & stay happily ignorant... >>> >>>> Date: Wed, 31 Dec 2008 15:31:55 -0800 >>>> From: eculb...@yahoo.com >>>> Subject: RE: Linux Admi

Re: Linux Administration

2009-01-01 Thread kitepi...@kitepilot.com
epartment of Economic Security >> Forensics @ UAT 1/10/09 12-3PM >> Take the Black [Security] Pill & leave IT-Marketing-Matrix, or take the Blue >> [MS Upgrade] Pill & stay happily ignorant... >> >>> Date: Wed, 31 Dec 2008 15:31:55 -0800 >>> From: eculb.

RE: Linux Administration

2008-12-31 Thread Lisa Kachold
ate: Wed, 31 Dec 2008 19:24:20 -0700 > From: jjzeid...@gmail.com > To: plug-discuss@lists.plug.phoenix.az.us > Subject: Re: Linux Administration > > The cost of living would be much lower if we weren't taking tax > money to prop up real estate prices. -jmz > > On

Re: Linux Administration

2008-12-31 Thread Joshua Zeidner
ave IT-Marketing-Matrix, or take the Blue > [MS Upgrade] Pill & stay happily ignorant... > >> Date: Wed, 31 Dec 2008 15:31:55 -0800 >> From: eculb...@yahoo.com >> Subject: RE: Linux Administration >> To: plug-discuss@lists.plug.phoenix.az.us >> >> Yep,

RE: Linux Administration

2008-12-31 Thread Lisa Kachold
1/10/09 12-3PM Take the Black [Security] Pill & leave IT-Marketing-Matrix, or take the Blue [MS Upgrade] Pill & stay happily ignorant... > Date: Wed, 31 Dec 2008 15:31:55 -0800 > From: eculb...@yahoo.com > Subject: RE: Linux Administration > To: plug-discuss@lists.plug.ph

RE: Linux Administration

2008-12-31 Thread eculbert
s and http://www.kb0mga.net/exams/ --- On Wed, 12/31/08, Jason wrote: > From: Jason > Subject: RE: Linux Administration > To: "Main PLUG discussion list" > Cc: klsmith2...@yahoo.com > Date: Wednesday, December 31, 2008, 1:14 PM > I want to spend $250/month but I wa

RE: Linux Administration

2008-12-31 Thread Jason
anuary PLUG HackFest = Kristy Westphal, AZ Department of Economic > Security Forensics @ UAT 1/10/09 12-3PM > > __ > Date: Mon, 29 Dec 2008 20:09:37 -0700 > From: m...@garfias.org > To: klsmith2...@yahoo.com; plug-discus

Re: Linux Administration

2008-12-29 Thread Stephen
29 Dec 2008 20:09:37 -0700 > From: m...@garfias.org > To: klsmith2...@yahoo.com; plug-discuss@lists.plug.phoenix.az.us > Subject: Re: Linux Administration > > What a dork. And expecting good people for that much? Jeez. Maybe if I was > a junior guy and needed beer money it might

RE: Linux Administration

2008-12-29 Thread Lisa Kachold
January PLUG HackFest = Kristy Westphal, AZ Department of Economic Security Forensics @ UAT 1/10/09 12-3PM Date: Mon, 29 Dec 2008 20:09:37 -0700 From: m...@garfias.org To: klsmith2...@yahoo.com; plug-discuss@lists.plug.phoenix.az.us Subject: Re: Linux Administration What a dork. And expecting

Re: Linux Administration

2008-12-29 Thread Mike Garfias
the > copyright issues that arise. > > > > Keith Smith > > > --- On *Sun, 12/28/08, Lisa Kachold * wrote: > > From: Lisa Kachold > Subject: RE: Linux Administration > To: klsmith2...@yahoo.com, plug-discuss@lists.plug.phoenix.az.us > Date: Sunday, December 28, 2008, 6:

RE: Linux Administration

2008-12-28 Thread keith smith
k and I'll pass.  Not to mention the copyright issues that arise.  Keith Smith --- On Sun, 12/28/08, Lisa Kachold wrote: From: Lisa Kachold Subject: RE: Linux Administration To: klsmith2...@yahoo.com, plug-discuss@lists.plug.phoenix.az.us Date: Sunday, December 2

RE: Linux Administration

2008-12-28 Thread Lisa Kachold
, AZ Department of Economic Security Forensics @ UAT 1/10/09 12-3PM Take the Black [Linux BT3] Pill & leave SecurityMatrix, or take the Blue [XP/Vista Pill] & stay happily ignorant. Date: Sun, 28 Dec 2008 10:00:32 -0800 From: klsmith2...@yahoo.com Subject: Re: Linux Administration To: plug

Re: Linux Administration

2008-12-28 Thread keith smith
I'm not sure what you are trying to tell us Lisa.  Please be more verbose. Keith --- On Sat, 12/27/08, Lisa Kachold wrote: From: Lisa Kachold Subject: Linux Administration To: plug-discuss@lists.plug.phoenix.az.us Date: Saturday, December 27, 2008, 7:02 PM