CentOS - Dec 2014 - DoD approval of Centos Was RE: Firefox fails to authenticate .mil sites with New DoDCAC

> -----Original Message-----
> From: Jason Ricles
> Sent: Thursday, December 04, 2014 11:23
> To: CentOS mailing list
> Subject: Re: [CentOS] Firefox fails to authenticate .mil 
> sites with New DoDCAC
> 
> I thought DoD used RHEL and not Centos, or did Centos did approved
> DADEMS recently?
DADMS is a Navy system, but yes Centos is approved for use by DISA. You would
STIG it just like RHEL.

-Jason

--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-                                                               -
- Jason Pyeron                      PD Inc. http://www.pdinc.us -
- Principal Consultant              10 West 24th Street #100    -
- +1 (443) 269-1555 x333            Baltimore, Maryland 21218   -
-                                                               -
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
This message is copyright PD Inc, subject to license 20080407P00.

Gotcha, I also work with DoD for Navy systems and was surprised by
that. So you mean if we don't want to pay RHEL licensing fees, we can
use Centos? Since we are paying about $100 per RHEL license.

On Thu, Dec 4, 2014 at 11:36 AM, Jason Pyeron <jpyeron at pdinc.us>
wrote:
>> -----Original Message-----
>> From: Jason Ricles
>> Sent: Thursday, December 04, 2014 11:23
>> To: CentOS mailing list
>> Subject: Re: [CentOS] Firefox fails to authenticate .mil
>> sites with New DoDCAC
>>
>> I thought DoD used RHEL and not Centos, or did Centos did approved
>> DADEMS recently?
>
> DADMS is a Navy system, but yes Centos is approved for use by DISA. You
would STIG it just like RHEL.
>
> -Jason
>
> --
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> -                                                               -
> - Jason Pyeron                      PD Inc. http://www.pdinc.us -
> - Principal Consultant              10 West 24th Street #100    -
> - +1 (443) 269-1555 x333            Baltimore, Maryland 21218   -
> -                                                               -
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> This message is copyright PD Inc, subject to license 20080407P00.
>
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos

On Thu, 2014-12-04 at 11:41 -0500, Jason Ricles wrote:
> Gotcha, I also work with DoD for Navy systems and was surprised by
> that. So you mean if we don't want to pay RHEL licensing fees, we can
> use Centos? Since we are paying about $100 per RHEL license.
I would recommend RHEL for critical systems or those that must be
certified for a particular purpose, such as CA servers. We've been using
CentOS for years now on our internal networks for software development,
local site mail service (SMTP/POP/IMAP), file services
(FTP/NFS/SMB/CIFS), DNS, local web servers, etc. It works very well for
this, especially for software development where multiple people can get
a GUI login through Stunnel->VNC->GDM and/or shell through ssh.

We're also using CentOS for software maintenance of RHEL hosts on our
aircraft simulators. Many of our software developers prefer a CentOS
workstation because of its versatility. On those we install MS Windoze
as a KVM guest for those applications that require it. My internal
workstation is setup this way for use network/systems admin and
analysis, software development, as well as normal office tasks.
> On Thu, Dec 4, 2014 at 11:36 AM, Jason Pyeron <jpyeron at pdinc.us>
wrote:
> >> -----Original Message-----
> >> From: Jason Ricles
> >> Sent: Thursday, December 04, 2014 11:23
> >> To: CentOS mailing list
> >> Subject: Re: [CentOS] Firefox fails to authenticate .mil
> >> sites with New DoDCAC
> >>
> >> I thought DoD used RHEL and not Centos, or did Centos did approved
> >> DADEMS recently?
> >
> > DADMS is a Navy system, but yes Centos is approved for use by DISA.
You would STIG it just like RHEL.
> >
> > -Jason
> >
> > --
> > -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> > -                                                               -
> > - Jason Pyeron                      PD Inc. http://www.pdinc.us -
> > - Principal Consultant              10 West 24th Street #100    -
> > - +1 (443) 269-1555 x333            Baltimore, Maryland 21218   -
> > -                                                               -
> > -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> > This message is copyright PD Inc, subject to license 20080407P00.
> >
> > _______________________________________________
> > CentOS mailing list
> > CentOS at centos.org
> > http://lists.centos.org/mailman/listinfo/centos
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos

> -----Original Message-----
> From: Jason Ricles
> Sent: Thursday, December 04, 2014 11:42
> 
> Gotcha, I also work with DoD for Navy systems and was surprised by
> that. So you mean if we don't want to pay RHEL licensing fees, we can
> use Centos? Since we are paying about $100 per RHEL license.
But you will still need a (self?) support plan to be STIG compliant.
> 
> On Thu, Dec 4, 2014 at 11:36 AM, Jason Pyeron 
> <jpyeron at pdinc.us> wrote:
> >> -----Original Message-----
> >> From: Jason Ricles
> >> Sent: Thursday, December 04, 2014 11:23
> >> To: CentOS mailing list
> >> Subject: Re: [CentOS] Firefox fails to authenticate .mil
> >> sites with New DoDCAC
> >>
> >> I thought DoD used RHEL and not Centos, or did Centos did approved
> >> DADEMS recently?
> >
> > DADMS is a Navy system, but yes Centos is approved for use 
> by DISA. You would STIG it just like RHEL.
> >
> > -Jason
> >
> > --
> > -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> > -                                                               -
> > - Jason Pyeron                      PD Inc. http://www.pdinc.us -
> > - Principal Consultant              10 West 24th Street #100    -
> > - +1 (443) 269-1555 x333            Baltimore, Maryland 21218   -
> > -                                                               -
> > -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> > This message is copyright PD Inc, subject to license 20080407P00.
> >
> > _______________________________________________
> > CentOS mailing list
> > CentOS at centos.org
> > http://lists.centos.org/mailman/listinfo/centos
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos
> 
> 


--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-                                                               -
- Jason Pyeron                      PD Inc. http://www.pdinc.us -
- Principal Consultant              10 West 24th Street #100    -
- +1 (443) 269-1555 x333            Baltimore, Maryland 21218   -
-                                                               -
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
This message is copyright PD Inc, subject to license 20080407P00.