search for: saltstack

http://saltstack.org/ http://puppetlabs.com/mcollective/ I found this link that talks about Func, Rundeck, Salt and mcollective, but it doesn''t really compare and contrast. http://www.coloandcloud.com/editorial/func-mcollective-salt-and-rundeck/(From a 10,000 overview Saltstack and mcollective look very s...

Hi everyone, I have a question about certificates generated on Samba AD/DC deployment. After all server configuration, I notice that there are ca.pem, cert.pem and key.pem on /usr/local/samba/private/tls directory. I realize the ca.pem and cert.pem have 2 years validity. Will Samba AD/DC generate automatically new certs before this time over? Or, must I have to generate them manually? -- Igor

On 01/20/2015 08:41 AM, Tom Grace wrote: > I would suggest that the "right way" would be to kickstart all your > machines the same way, and then use a configuration management tool > (like Puppet or Chef) to customize them Seconded. Personally, I recommend either ansible or bcfg2 over other tools. Puppet has a larger user base, but when I talk to users at conferences (such

On Tue, January 20, 2015 18:37, Les Mikesell wrote: > > There's also saltstack which is one of the newer of the bunch. It has > some chance of working reasonably across different platforms. How > you feel about it will probably depend on how you feel about python in > general - and how you expect upgrades to go in the future. > Is this what you are talking abo...

I've had that happen in the past with non-RedHat linux boxes. Fortunately we have Saltstack on all the boxes and can just salt '*' cmd.run 'killall -SIGKILL winbindd; service winbind restart' But it hangs SSH sessions and things like 'ls -lha' that need to resolve usernames and groups. i.e. if you removed winbind from /etc/nsswitch.conf it would stop happening....

...t again after cloning. The more complex your machine is setup, the more complex this tasks becomes. It is as simple as that, but certainly not impossible. In any case I would advice to invest time in creating a repeatable setup / config mechanism for every type of server you have. Use Ansible, Saltstack, Terraform, Chef etc. or just bash scripts. That makes the machine itself and its software + configs disposable. When it breaks, just run the code against a fresh base-OS and you are back in business. The only thing still required is a good backup of your data and a **tested** restore procedure...

Hello mjt, I can only speak for myself: For bigger upgrades (e. g. samba 4.19 -> 4.20) Im manually updating a few servers and check if everything works. For smaller updates (e. g. 4.20.1 -> 4.20.2) Im using saltstack to automate updating the servers. It suppresses these messages and this is fine in 99% of all cases because a minor update is not supposed to change much (e. g. split a package). Funnily enough our DCs kept running after updating to 4.20.2 WITHOUT the samba-ad-dc package. Dont know why it work...

Hi, we see a growing need for a better Configuration management for our servers. Are there any known good resources for a comparison of e.g. Puppet, Chef, Ansible etc? What would you suggest and why? :) Thanks and Regards . G?tz

...recommend either ansible or bcfg2 over other tools. Puppet has > a larger user base, but when I talk to users at conferences (such as LISA), > ansible and bcfg2 users tend to like their tools, while an awful lot of > people dislike Puppet but use it anyway due to inertia. There's also saltstack which is one of the newer of the bunch. It has some chance of working reasonably across different platforms. How you feel about it will probably depend on how you feel about python in general - and how you expect upgrades to go in the future. -- Les Mikesell lesmikesell at gmail.com

> > What would you suggest and why? :) Ansible is now owned by Redhat so I would expect its feature set to be specifically aligned towards the administration of RHEL type operating systems over time. We've previously been using Saltstack to great effect but we are gently sliding towards Ansible. Both are YAML defined and coded in python which makes life really easy. I believe Chef and Puppet to be demons incarnate. Only ruby mavens seems to be able to effect any kind of control on these beasts. Ruby is the work of satan. Cheers,...

...Filip > > > --- > [1] http://wiki2.dovecot.org/Director > [2] https://github.com/brandond/poolmon/ > [3] "LMTP however doesn't currently support mixing recipients to both > being proxied and store locally." > > --- > BTW if someone is interested in SaltStack, here are Salt formulas for > Dovecot + Postfix + GlusterFS + Roundcube + Mailman setup which we are > using: > > https://github.com/tcpcloud/salt-formula-dovecot > https://github.com/tcpcloud/salt-formula-postfix > https://github.com/tcpcloud/salt-formula-roundcube > https://...

...lerhold Aktiengesellschaft via samba wrote: > Hello mjt, > > I can only speak for myself: > > For bigger upgrades (e. g. samba 4.19 -> 4.20) Im manually updating a > few servers and check if everything works. > > For smaller updates (e. g. 4.20.1 -> 4.20.2) Im using saltstack to > automate updating the servers. It suppresses these messages and this is > fine in 99% of all cases because a minor update is not supposed to > change much (e. g. split a package). You're mistaken upstream version changes and stable debian releases here. Once debian release become...

Hello We are running several Red Hat 7 servers as domain members using AD for winbind idmap backend and it had been working fine (no sssd is configured either) The last month or so (possibly since the latest samba-winbind package update we applied on Sep 24), server ssh logins on several servers hang on occasion, until a winbind restart, when it all works again Since this is the Red Hat

...> The more complex your machine is setup, the more complex this tasks > becomes. It is as simple as that, but certainly not impossible. > > In any case I would advice to invest time in creating a repeatable setup / > config mechanism for every type of server you have. Use Ansible, Saltstack, > Terraform, Chef etc. or just bash scripts. That makes the machine itself and its > software + configs disposable. When it breaks, just run the code against a > fresh base-OS and you are back in business. > The only thing still required is a good backup of your data and a > **teste...

Thank you very much James for your deep explaining answer! That cleared everything up for me and yes that helped a lot. Have a nice day :) -----Urspr?ngliche Nachricht----- Von: CentOS [mailto:centos-bounces at centos.org] Im Auftrag von James Hogarth Gesendet: Montag, 16. J?nner 2017 19:37 An: CentOS mailing list <centos at centos.org> Betreff: Re: [CentOS] disable/mask NetworkManager

...in my architecture design? Thanks for any help, Filip --- [1] http://wiki2.dovecot.org/Director [2] https://github.com/brandond/poolmon/ [3] "LMTP however doesn't currently support mixing recipients to both being proxied and store locally." --- BTW if someone is interested in SaltStack, here are Salt formulas for Dovecot + Postfix + GlusterFS + Roundcube + Mailman setup which we are using: https://github.com/tcpcloud/salt-formula-dovecot https://github.com/tcpcloud/salt-formula-postfix https://github.com/tcpcloud/salt-formula-roundcube https://github.com/tcpcloud/salt-formula-gl...

On Mon, 22 Jul 2024 16:48:59 +0200 Joachim Lindenberg via samba <samba at lists.samba.org> wrote: > Hello Rowland, > there can be a lot more services than just the OS and Samba-AD-DC. Just like Microsoft, Samba doesn't recommend using a DC for other services and running it in some form of VM doesn't make it different. > As > a must have you have to configure bind, and

Hi. I am currently debugging an issue with libguestfs in Centos 7.2 (Kernel 3.10.0-327.36.3.el7.x86_64). libguestfs is being called by SaltStack to access a qcow2 image, but it is failing. I have narrowed the issue down to the command below: guestmount -i -a /opt/vm-spinning/salt-mnt/salt-images/pb123/system.qcow2 --rw /tmp/guest/opt.vm-spinning.salt-mnt.salt-images.pb123.system.qcow2 I have run libguestfs-test-tool in debug as recommende...

04.07.2024 21:27, Paul Leiber via samba wrote: > Dear Samba list, > > I have a Samba instance running as an ad-dc on debian bullseye. Some time ago, I changed the standard installation to backports with > > apt -t bullseye-backports install samba > > After a recent update, samba-ad-dc service didn't start anymore. The journal gave the following hint: > > Jul 04