CentOS - Dec 2014 - DoD approval of Centos Was RE: Firefox fails to authenticate .mil sites with New DoDCAC

On Thu, 2014-12-04 at 11:41 -0500, Jason Ricles wrote:
> Gotcha, I also work with DoD for Navy systems and was surprised by
> that. So you mean if we don't want to pay RHEL licensing fees, we can
> use Centos? Since we are paying about $100 per RHEL license.
I would recommend RHEL for critical systems or those that must be
certified for a particular purpose, such as CA servers. We've been using
CentOS for years now on our internal networks for software development,
local site mail service (SMTP/POP/IMAP), file services
(FTP/NFS/SMB/CIFS), DNS, local web servers, etc. It works very well for
this, especially for software development where multiple people can get
a GUI login through Stunnel->VNC->GDM and/or shell through ssh.

We're also using CentOS for software maintenance of RHEL hosts on our
aircraft simulators. Many of our software developers prefer a CentOS
workstation because of its versatility. On those we install MS Windoze
as a KVM guest for those applications that require it. My internal
workstation is setup this way for use network/systems admin and
analysis, software development, as well as normal office tasks.
> On Thu, Dec 4, 2014 at 11:36 AM, Jason Pyeron <jpyeron at pdinc.us>
wrote:
> >> -----Original Message-----
> >> From: Jason Ricles
> >> Sent: Thursday, December 04, 2014 11:23
> >> To: CentOS mailing list
> >> Subject: Re: [CentOS] Firefox fails to authenticate .mil
> >> sites with New DoDCAC
> >>
> >> I thought DoD used RHEL and not Centos, or did Centos did approved
> >> DADEMS recently?
> >
> > DADMS is a Navy system, but yes Centos is approved for use by DISA.
You would STIG it just like RHEL.
> >
> > -Jason
> >
> > --
> > -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> > -                                                               -
> > - Jason Pyeron                      PD Inc. http://www.pdinc.us -
> > - Principal Consultant              10 West 24th Street #100    -
> > - +1 (443) 269-1555 x333            Baltimore, Maryland 21218   -
> > -                                                               -
> > -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> > This message is copyright PD Inc, subject to license 20080407P00.
> >
> > _______________________________________________
> > CentOS mailing list
> > CentOS at centos.org
> > http://lists.centos.org/mailman/listinfo/centos
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos

That is true, which we are using ours for critical things. Guess RHEL
will be the way to go till Centos is maybe approved for critical
systems as well.

On Thu, Dec 4, 2014 at 12:29 PM, Cal Webster <cwebster at ec.rr.com>
wrote:
> On Thu, 2014-12-04 at 11:41 -0500, Jason Ricles wrote:
>> Gotcha, I also work with DoD for Navy systems and was surprised by
>> that. So you mean if we don't want to pay RHEL licensing fees, we
can
>> use Centos? Since we are paying about $100 per RHEL license.
>
> I would recommend RHEL for critical systems or those that must be
> certified for a particular purpose, such as CA servers. We've been
using
> CentOS for years now on our internal networks for software development,
> local site mail service (SMTP/POP/IMAP), file services
> (FTP/NFS/SMB/CIFS), DNS, local web servers, etc. It works very well for
> this, especially for software development where multiple people can get
> a GUI login through Stunnel->VNC->GDM and/or shell through ssh.
>
> We're also using CentOS for software maintenance of RHEL hosts on our
> aircraft simulators. Many of our software developers prefer a CentOS
> workstation because of its versatility. On those we install MS Windoze
> as a KVM guest for those applications that require it. My internal
> workstation is setup this way for use network/systems admin and
> analysis, software development, as well as normal office tasks.
>
>> On Thu, Dec 4, 2014 at 11:36 AM, Jason Pyeron <jpyeron at
pdinc.us> wrote:
>> >> -----Original Message-----
>> >> From: Jason Ricles
>> >> Sent: Thursday, December 04, 2014 11:23
>> >> To: CentOS mailing list
>> >> Subject: Re: [CentOS] Firefox fails to authenticate .mil
>> >> sites with New DoDCAC
>> >>
>> >> I thought DoD used RHEL and not Centos, or did Centos did
approved
>> >> DADEMS recently?
>> >
>> > DADMS is a Navy system, but yes Centos is approved for use by
DISA. You would STIG it just like RHEL.
>> >
>> > -Jason
>> >
>> > --
>> > -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
>> > -                                                               -
>> > - Jason Pyeron                      PD Inc. http://www.pdinc.us -
>> > - Principal Consultant              10 West 24th Street #100    -
>> > - +1 (443) 269-1555 x333            Baltimore, Maryland 21218   -
>> > -                                                               -
>> > -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
>> > This message is copyright PD Inc, subject to license 20080407P00.
>> >
>> > _______________________________________________
>> > CentOS mailing list
>> > CentOS at centos.org
>> > http://lists.centos.org/mailman/listinfo/centos
>> _______________________________________________
>> CentOS mailing list
>> CentOS at centos.org
>> http://lists.centos.org/mailman/listinfo/centos
>
>
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos

On Thu, 2014-12-04 at 13:09 -0500, Jason Ricles wrote:
> That is true, which we are using ours for critical things. Guess RHEL
> will be the way to go till Centos is maybe approved for critical
> systems as well.
That's really up to the program manager in which the machine would be
used. He would make a determination whether it's supportable and
maintainable, based on in-house expertise and/or outside contract
support. RHEL subscriptions give you instant support and patches if
necessary. Otherwise, unless another RHEL subscriber has the same issue,
you'd have to wait for the community to fix something then get it
integrated into RHEL before filtering down to CentOS. If this is
acceptable then CentOS is an option.
> On Thu, Dec 4, 2014 at 12:29 PM, Cal Webster <cwebster at ec.rr.com>
wrote:
> > On Thu, 2014-12-04 at 11:41 -0500, Jason Ricles wrote:
> >> Gotcha, I also work with DoD for Navy systems and was surprised by
> >> that. So you mean if we don't want to pay RHEL licensing fees,
we can
> >> use Centos? Since we are paying about $100 per RHEL license.
> >
> > I would recommend RHEL for critical systems or those that must be
> > certified for a particular purpose, such as CA servers. We've been
using
> > CentOS for years now on our internal networks for software
development,
> > local site mail service (SMTP/POP/IMAP), file services
> > (FTP/NFS/SMB/CIFS), DNS, local web servers, etc. It works very well
for
> > this, especially for software development where multiple people can
get
> > a GUI login through Stunnel->VNC->GDM and/or shell through ssh.
> >
> > We're also using CentOS for software maintenance of RHEL hosts on
our
> > aircraft simulators. Many of our software developers prefer a CentOS
> > workstation because of its versatility. On those we install MS Windoze
> > as a KVM guest for those applications that require it. My internal
> > workstation is setup this way for use network/systems admin and
> > analysis, software development, as well as normal office tasks.
> >
> >> On Thu, Dec 4, 2014 at 11:36 AM, Jason Pyeron <jpyeron at
pdinc.us> wrote:
> >> >> -----Original Message-----
> >> >> From: Jason Ricles
> >> >> Sent: Thursday, December 04, 2014 11:23
> >> >> To: CentOS mailing list
> >> >> Subject: Re: [CentOS] Firefox fails to authenticate .mil
> >> >> sites with New DoDCAC
> >> >>
> >> >> I thought DoD used RHEL and not Centos, or did Centos did
approved
> >> >> DADEMS recently?
> >> >
> >> > DADMS is a Navy system, but yes Centos is approved for use by
DISA. You would STIG it just like RHEL.
> >> >
> >> > -Jason
> >> >
> >> > --
> >> >
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> >> > -                                                            
-
> >> > - Jason Pyeron                      PD Inc.
http://www.pdinc.us -
> >> > - Principal Consultant              10 West 24th Street #100 
-
> >> > - +1 (443) 269-1555 x333            Baltimore, Maryland 21218
-
> >> > -                                                            
-
> >> >
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> >> > This message is copyright PD Inc, subject to license
20080407P00.
> >> >
> >> > _______________________________________________
> >> > CentOS mailing list
> >> > CentOS at centos.org
> >> > http://lists.centos.org/mailman/listinfo/centos
> >> _______________________________________________
> >> CentOS mailing list
> >> CentOS at centos.org
> >> http://lists.centos.org/mailman/listinfo/centos
> >
> >
> > _______________________________________________
> > CentOS mailing list
> > CentOS at centos.org
> > http://lists.centos.org/mailman/listinfo/centos
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos