Jack Bailey | 1 Nov 02:16 2011
Picon

Re: NSS ldap problems

On 10/31/2011 4:46 PM, Craig White wrote:
>> Here are the ldap related packaged installed on the 6.0 box:
>> >  [root <at> vburntest02 ~]# rpm -qa | grep ldap
>> >  openldap-2.4.19-15.el6_0.2.x86_64
>> >  pam_ldap-185-5.el6.x86_64
>> >  nss-pam-ldapd-0.7.5-3.el6.x86_64
>> >  openldap-clients-2.4.19-15.el6_0.2.x86_64
>> >  apr-util-ldap-1.3.9-3.el6.x86_64
>> >  
>> >  Any idea what to check next?
> ----
> I'm not a perl person so I just check from shell with:
> getent passwd
> getent group
>
> to make sure that the LDAP Users/Groups are indeed listed... authentication clearly won't work until
they do.
>
> The same /etc/ldap.conf from CentOS 5.x should work with CentOS 6.x

On CentOS 6  getent passwd  does not return a list of users, presumably 
because the list can be quite large.  Try

$ getent passwd <username>

If your system is set up correctly you will see the entry.

Jack
Trey Dockendorf | 1 Nov 05:25 2011
Picon

Re: NSS ldap problems

One difference I ran into with samba authentication is in cent 5
/etc/pam.d/system-auth-ac is the file to change but in cent 6 its
/etc/pam.d/password-auth-ac.  I found that changes I made only to
system-auth-ac in 5 had to be made to both system-auth-ac and
password-auth-ac in 6.  This was to have authentication work for things
like ssh and sudo in centos 6.

- Trey
On Oct 31, 2011 8:16 PM, "Jack Bailey" <jack@...> wrote:

> On 10/31/2011 4:46 PM, Craig White wrote:
> >> Here are the ldap related packaged installed on the 6.0 box:
> >> >  [root <at> vburntest02 ~]# rpm -qa | grep ldap
> >> >  openldap-2.4.19-15.el6_0.2.x86_64
> >> >  pam_ldap-185-5.el6.x86_64
> >> >  nss-pam-ldapd-0.7.5-3.el6.x86_64
> >> >  openldap-clients-2.4.19-15.el6_0.2.x86_64
> >> >  apr-util-ldap-1.3.9-3.el6.x86_64
> >> >
> >> >  Any idea what to check next?
> > ----
> > I'm not a perl person so I just check from shell with:
> > getent passwd
> > getent group
> >
> > to make sure that the LDAP Users/Groups are indeed listed...
> authentication clearly won't work until they do.
> >
> > The same /etc/ldap.conf from CentOS 5.x should work with CentOS 6.x
>
(Continue reading)

Bob Hoffman | 1 Nov 06:46 2011

redhat vs centos

I have been reading the threads on here with great ernest about redhat 
making a move to throw off centos compilations.
I read some stories about microsoft wanting to work closer with centos
http://www.theregister.co.uk/2011/05/17/microsoft_and_centos/

I have to update to centos 6 due to some needs of clients who need newer 
mysql and php (and installing them on centos5
was too hard for me).

I am thinking of going ubuntu server but at the same time I have this 
feeling centos team will pull through, make a new method to streamline
this, and redhat will back down and stop being REDa$$-hats.

Redhat thinks us 'freebie' people will move to them to get the quicker 
updates and releases.
I look at the pricing and I say they must be out of their minds.
The server comes at 1,999 a year for 2 sockets and more than 4 
guests...which is what I would need.
The virtualization  package, which may or may not be needed is thousands 
more.
All for one server.

that ain't gonna happen.

Personally I am thinking of staying away from all red hat clones due to 
redhat's actions for my own security.
The only thing on the horizon I see is ubuntu server as best supported 
and up to date.

I am teetering tonight. I have downloaded it and am thinking of wiping 
(Continue reading)

Eero Volotinen | 1 Nov 06:53 2011
Picon
Picon

Re: redhat vs centos

2011/11/1 Bob Hoffman <bob@...>:
> I have been reading the threads on here with great ernest about redhat
> making a move to throw off centos compilations.
> I read some stories about microsoft wanting to work closer with centos
> http://www.theregister.co.uk/2011/05/17/microsoft_and_centos/
>
> I have to update to centos 6 due to some needs of clients who need newer
> mysql and php (and installing them on centos5
> was too hard for me).

You can get updated php and mysql from ius community repo.

http://iuscommunity.org/

br,
--
Eero, RHCE
Mathieu Baudier | 1 Nov 09:13 2011

Re: What happened to 6.1

> If absolute 100% binary compatibility is not required, but admin-level compatibility and source-level
compatibility with upstream EL is, Scientific Linux is covering that niche, and has their 6.1 out.

In which concrete use cases is 100% binary compatibility important?
John Hodrien | 1 Nov 10:57 2011
Picon

Re: NSS ldap problems

On Tue, 1 Nov 2011, Trey Dockendorf wrote:

> One difference I ran into with samba authentication is in cent 5
> /etc/pam.d/system-auth-ac is the file to change but in cent 6 its
> /etc/pam.d/password-auth-ac.  I found that changes I made only to
> system-auth-ac in 5 had to be made to both system-auth-ac and
> password-auth-ac in 6.  This was to have authentication work for things
> like ssh and sudo in centos 6.

It is worth noting that those files should only be edited as a last resort.
You should go through authconfig if possible.

#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.

jh
Peter Peltonen | 1 Nov 11:02 2011
Picon

Re: What happened to 6.1

Hi,

On Tue, Nov 1, 2011 at 10:13 AM, Mathieu Baudier <mbaudier@...> wrote:
>> If absolute 100% binary compatibility is not required, but admin-level compatibility and
source-level compatibility with upstream EL is, Scientific Linux is covering that niche, and has their
6.1 out.
>
> In which concrete use cases is 100% binary compatibility important?

I am no expert in compiling RPMs, but just recently I experienced the
following:

After installing a previous version of 3rd party SOGo RPM and
reporting to the developers that the service wouldn't start after
installation, I was informed that the RPM had been compiled on
Scientific Linux 6.1 and because of binary incompatibility the RPM did
not work under RHEL/CentOS. They recompiled on CentOS and the updated
RPM installed/worked fine on my system.

So if CentOS wouldn't be 100% compatible with RHEL, I guess we would
start seeing more cases where programs compiled on RHEL might not run
on CentOS. If you use just the base RPMs provided by the distro, this
is no problem. But if you rely on some commercial / 3rd party RPMs,
you might start facing problems.

At least this is how I understood it, please correct me if I've got it wrong :)

Best,
Peter
(Continue reading)

Karanbir Singh | 1 Nov 11:46 2011

Re: Duplicated packages in CR repo?

hi Patrick,

On 10/31/2011 11:29 AM, Patrick Hurrelmann wrote:
> thanks for quickly handling this. But aren't the updated xorg-x11-server
> packages now missing in total? Or are they not yet ready for
> cr?

They are missing from the CR repo now, I've got the srpm and debug info
stuff going out at the moment, and these are just waiting in queue
behind those.

I could rebuild them and manually shovel them over..

- KB
Dennis Jacobfeuerborn | 1 Nov 12:26 2011
Picon

Re: redhat vs centos

On 11/01/2011 06:53 AM, Eero Volotinen wrote:
> 2011/11/1 Bob Hoffman<bob@...>:
>> I have been reading the threads on here with great ernest about redhat
>> making a move to throw off centos compilations.
>> I read some stories about microsoft wanting to work closer with centos
>> http://www.theregister.co.uk/2011/05/17/microsoft_and_centos/
>>
>> I have to update to centos 6 due to some needs of clients who need newer
>> mysql and php (and installing them on centos5
>> was too hard for me).
>
> You can get updated php and mysql from ius community repo.
>
> http://iuscommunity.org/

I don't think the real question here is whether you can get updated 
packages from somewhere but if it's worthwhile to build upon centos when 
it's becoming increasingly difficult for centos to make releases.

People like me are going to install a lot of systems in the coming months 
and years and upgrade older ones as well. Given that the problems we are 
seeing now don't seem to be temporary but are going to be around and 
probably get worse due to the upstream changes it is just prudent to 
consider to move to a more sustainable base.

Lack of communication from the core team in these matters doesn't improve 
the situation either. I would expect some sort of announcement that the CR 
repo will fully replace the point releases as that seems to be the case 
now. The only thing that is missing then is ISO releases of updated 
versions and perhaps more importantly installation ISOs with updated 
(Continue reading)

Eero Volotinen | 1 Nov 12:58 2011
Picon
Picon

Re: redhat vs centos

2011/11/1 Dennis Jacobfeuerborn <dennisml@...>:
> On 11/01/2011 06:53 AM, Eero Volotinen wrote:
>> 2011/11/1 Bob Hoffman<bob@...>:
>>> I have been reading the threads on here with great ernest about redhat
>>> making a move to throw off centos compilations.
>>> I read some stories about microsoft wanting to work closer with centos
>>> http://www.theregister.co.uk/2011/05/17/microsoft_and_centos/
>>>
>>> I have to update to centos 6 due to some needs of clients who need newer
>>> mysql and php (and installing them on centos5
>>> was too hard for me).
>>
>> You can get updated php and mysql from ius community repo.
>>
>> http://iuscommunity.org/
>
> I don't think the real question here is whether you can get updated
> packages from somewhere but if it's worthwhile to build upon centos when
> it's becoming increasingly difficult for centos to make releases.

Well, I mainly use RHEL on production systems - for many reasons. You
can also try use scientific linux..

br,
--
Eero

Gmane