search for: briosi

Il dom 22 apr 2018, 10:46 Alessandro Briosi <ab1 at metalit.com> ha scritto: > Imho the easiest path would be to turn off sharding on the volume and > simply do a copy of the files (to a different directory, or rename and > then copy i.e.) > > This should simply store the files without sharding. > If you turn off sh...

Il 2015-05-05 13:29 Guus Sliepen ha scritto: > On Tue, May 05, 2015 at 01:18:15PM +0200, Alessandro Briosi wrote: > >> Now the odd thing is that when the VPN comes up they both also add the >> local >> subnet to their routes on the tinc interface: > [...] >> the subnet-up script runs this command: >> ip route add $SUBNET dev $INTERFACE metric $WEIGHT >> >&...

...cting to the VPN? Isn't removing it's reference on the "servers" enough? > 2. No, tinc cannot do this itself. ok > 3. That is not a bad approach. ok > > -----Original Message----- > From: tinc [mailto:tinc-bounces at tinc-vpn.org] On Behalf Of Alessandro > Briosi > Sent: Monday, July 10, 2017 1:43 AM > To: tinc at tinc-vpn.org > Subject: Some tinc clatifications > > Hi all, > I'm currently happily using tinc in my networks. > > I also use OpenVPN based on the customer requirements. > > I though have some questions which...

Hi all, I'm currently happily using tinc in my networks. I also use OpenVPN based on the customer requirements. I though have some questions which I could not find a clear answer. What I'd like to know is: 1. How to revoke a "node", simply removing the host file on the servers is enough? And one created by invitation? 2. Is there a way to let tinc ask for a username/password

Il 22/04/2018 11:39, Gandalf Corvotempesta ha scritto: > Il dom 22 apr 2018, 10:46 Alessandro Briosi <ab1 at metalit.com > <mailto:ab1 at metalit.com>> ha scritto: > > Imho the easiest path would be to turn off sharding on the volume and > simply do a copy of the files (to a different directory, or rename > and > then copy i.e.) > > This shou...

2018-04-23 9:34 GMT+02:00 Alessandro Briosi <ab1 at metalit.com>: > Is it that really so? yes, i've opened a bug asking developers to block removal of sharding when volume has data on it or to write a huge warning message saying that data loss will happen > I thought that sharding was a extended attribute on the files creat...

Il 2014-12-31 16:29 Dr. Lars Hanke ha scritto: >>> OK, you can get winbind to update your keytab, you need to alter your >>> smb.conf slightly. You need to change 'kerberos method = secrets >>> only' >>> to either 'kerberos method = secrets and keytab' or 'kerberos method >>> = >>> system keytab' and add the line

Hi all, I'm experiencing a strange problem. I have setup 2 gateways which are behind a NAT router. They are configured in Route mode and have the ips 10.0.0.1/32 and 10.0.0.2/32 on the tinc interface The also have subnets (192.168.1.0/24 and 192.168.2.0/24 respectively). Now the odd thing is that when the VPN comes up they both also add the local subnet to their routes on the tinc

...t regards Peter *) I am on Debian Jessie using Jessie's sssd 1.11.7-2. This version of sssd is pretty old, but, well, this is Debian. Compiling sssd on Debian is next to impossible. At least for me: no luck. Rowland Penny schrieb am 31.12.2014 18:24: > On 31/12/14 15:48, Alessandro Briosi wrote: >> Il 2014-12-31 16:29 Dr. Lars Hanke ha scritto: >>>>> OK, you can get winbind to update your keytab, you need to alter your >>>>> smb.conf slightly. You need to change 'kerberos method = secrets only' >>>>> to either 'kerberos...

>> Hi, how have you setup the fileserver ? >> Is it joined to the domain ? >> Can you post your fileservers smb.conf >> Rowland OT: Oops, wasn't subscribed to the mailing list :) Yes, server is joined to the domain (otherwise I would not be able to generate the principal) Server configuration is following (only global part), winbind config is there because it was

Hi all. I have the following setup: 1st dc is on CentOS 6 with Sernet samba 4.1.13 2nd dc is on Debian 7 with Sernet samba 4.1.13 The 2 dc work as expected. on CentOS I was able to configure sssd to work on Debian I'm using winbind Now I have a 3rd server which is CentOS 7 with samba 4.1.1 from CentOS repository. This system serves as a file server and works ok with samba, but I have a

On Tue, May 05, 2015 at 01:18:15PM +0200, Alessandro Briosi wrote: > Now the odd thing is that when the VPN comes up they both also add the local > subnet to their routes on the tinc interface: [...] > the subnet-up script runs this command: > ip route add $SUBNET dev $INTERFACE metric $WEIGHT > > Should I filter it in the subnet-up scri...

...k at StrictSubnets and TunnelServer). It might also be recommended to have every node re-key itself (http://tinc-vpn.org/security/). 2. No, tinc cannot do this itself. 3. That is not a bad approach. -----Original Message----- From: tinc [mailto:tinc-bounces at tinc-vpn.org] On Behalf Of Alessandro Briosi Sent: Monday, July 10, 2017 1:43 AM To: tinc at tinc-vpn.org Subject: Some tinc clatifications Hi all, I'm currently happily using tinc in my networks. I also use OpenVPN based on the customer requirements. I though have some questions which I could not find a clear answer. What I'd lik...

On Tue, Jul 11, 2017 at 09:58:39AM +0200, Alessandro Briosi wrote: > I understand on a security bug or something, but having to rekey all the > hosts 'cause someone gets fired to me it sounds insane. > There must be an easy way to block somebody from connecting to the VPN? > Isn't removing it's reference on the "servers" e...

On 29/12/14 17:29, Alessandro Briosi wrote: > Hi all. > I have the following setup: > > 1st dc is on CentOS 6 with Sernet samba 4.1.13 > 2nd dc is on Debian 7 with Sernet samba 4.1.13 > > The 2 dc work as expected. > > on CentOS I was able to configure sssd to work > on Debian I'm using winbind > &...

On 31/12/14 08:58, Alessandro Briosi wrote: >>> Hi, how have you setup the fileserver ? >>> Is it joined to the domain ? >>> Can you post your fileservers smb.conf > >>> Rowland > > OT: Oops, wasn't subscribed to the mailing list :) > > Yes, server is joined to the domain (otherwi...

On 31/12/14 15:48, Alessandro Briosi wrote: > Il 2014-12-31 16:29 Dr. Lars Hanke ha scritto: >>>> OK, you can get winbind to update your keytab, you need to alter your >>>> smb.conf slightly. You need to change 'kerberos method = secrets only' >>>> to either 'kerberos method = secrets...

Il 2014-12-31 18:24 Rowland Penny ha scritto: > > It expires because it was not created on the member server, having > said that, sssd should be able to update the keytab, I would suggest > that sssd is not setup correctly and as such, I think that you need to > take this problem to the sssd mailing list. > > If you decide to use winbind, which I can assure you will work,

...settings. As you were told, if you join the domain with "kerberos method = secrets and keytab" on you smb.conf, the generated keytab won't expire. Another workaround would be to set "machine password timeout = 0" Best regards. On Mon, Dec 29, 2014 at 2:29 PM, Alessandro Briosi <tsdogs at briosix.org> wrote: > Hi all. > I have the following setup: > > 1st dc is on CentOS 6 with Sernet samba 4.1.13 > 2nd dc is on Debian 7 with Sernet samba 4.1.13 > > The 2 dc work as expected. > > on CentOS I was able to configure sssd to work > on Debi...

Il 24/10/2017 12:45, atris adam ha scritto: > thanks for answering. But I have to setup and test it myself and > record the result. Can you guide me a little more. The problem is, one > valid ip for each data centers exist, and each data centers have 3 > servers. How should I config the network in which the server bricks > see each other to create a glusterfs volume? > I would