search for: serviceaccount

...the pod logs are as follows: # kubectl logs deploy-heketi-930916695-qpngx Heketi v4.0.0-8-g9372c22-release-4 [kubeexec] ERROR 2017/07/21 05:37:11 /src/ github.com/heketi/heketi/executors/kubeexec/kubeexec.go:125: Namespace must be provided in configuration: File /var/run/secrets/ kubernetes.io/serviceaccount/namespace not found [heketi] ERROR 2017/07/21 05:37:11 /src/ github.com/heketi/heketi/apps/glusterfs/app.go:85: Namespace must be provided in configuration: File /var/run/secrets/ kubernetes.io/serviceaccount/namespace not found ERROR: Unable to start application so what am I missing here? On...

...giving me the following error: # kubectl logs deploy-heketi-930916695-np4hb Heketi v4.0.0-8-g9372c22-release-4 [kubeexec] ERROR 2017/07/21 06:08:52 /src/ github.com/heketi/heketi/executors/kubeexec/kubeexec.go:125: Namespace must be provided in configuration: File /var/run/secrets/ kubernetes.io/serviceaccount/namespace not found [heketi] ERROR 2017/07/21 06:08:52 /src/ github.com/heketi/heketi/apps/glusterfs/app.go:85: Namespace must be provided in configuration: File /var/run/secrets/ kubernetes.io/serviceaccount/namespace not found ERROR: Unable to start application What am I doing wrong here?! I...

...# kubectl logs deploy-heketi-930916695-qpngx > > Heketi v4.0.0-8-g9372c22-release-4 > > [kubeexec] ERROR 2017/07/21 05:37:11 > /src/github.com/heketi/heketi/executors/kubeexec/kubeexec.go:125: Namespace > must be provided in configuration: File > /var/run/secrets/kubernetes.io/serviceaccount/namespace not found > > [heketi] ERROR 2017/07/21 05:37:11 > /src/github.com/heketi/heketi/apps/glusterfs/app.go:85: Namespace must be > provided in configuration: File > /var/run/secrets/kubernetes.io/serviceaccount/namespace not found > > ERROR: Unable to start application &g...

...kubectl logs deploy-heketi-930916695-np4hb > > Heketi v4.0.0-8-g9372c22-release-4 > > [kubeexec] ERROR 2017/07/21 06:08:52 /src/github.com/heketi/heketi/ > executors/kubeexec/kubeexec.go:125: Namespace must be provided in > configuration: File /var/run/secrets/kubernetes. > io/serviceaccount/namespace not found > > [heketi] ERROR 2017/07/21 06:08:52 /src/github.com/heketi/heketi/ > apps/glusterfs/app.go:85: Namespace must be provided in configuration: > File /var/run/secrets/kubernetes.io/serviceaccount/namespace not found > > ERROR: Unable to start application > &...

...x = } protocol imap { ? mail_plugins = quota imap_quota } plugin { ? quota = maildir:User quota } dovecot-ldap.conf.ext: root at mail1t dovecot]# cat dovecot-ldap.conf.ext #hosts = 192.168.122.30:636 # Windows Active Directory uris = ldaps://192.168.122.30:636 #dn = CN=DovecotAdministrator,OU=ServiceAccounts,OU=Identitiy,DC=test,DC=loc dn = CN=Administrator,CN=Users,DC=test,DC=loc dnpass = Test123! tls = no # Ben?tige ich (!) nicht auth_bind = yes # F?r die Dauer der Authentifizierung bindet sich Dovecot als einloggender Mailuser auth_bind_dn = %u ldap_version = 3 base = OU=Identitiy,DC=domain,DC=loca...

Hi! I maintain Linux servers that are members of a Samba4 Domain. User authentication / login via ssh works fine with Kerberos. But: only via one hostname. Those machines need a working Kerberos login via multiple hostnames (each hostname has its own IP address and DNS is set up correctly.) "net ads keytab list" of course gives me the main hostname that was in use when joining the

...s = yes username map = /usr/local/etc/smbusers.map log file = /var/log/samba/smb.log debug uid = Yes domain logons = Yes os level = 255 preferred master = Yes domain master = Yes passdb backend = ldapsam:ldapi://%2fvar%2frun%2fopenldap%2fldapi/ ldap admin dn = cn=samba,ou=serviceAccounts,o=myorg ldap suffix = o=myorg ldap machine suffix = ou=computers ldap user suffix = ou=users ldap group suffix = ou=groups [Public] path = /export/public/%G read only = No create mask = 0755 directory mask = 0775 force user = %U Thanks for your help, -- Pierre...

...d a working Kerberos login via multiple hostnames >(each hostname has its own IP address and DNS is set up correctly.) looks to me a bit overkill, but you wil have your reasons this a setup like this.. so.. you can try this.. asumming this : REALM=MY.REALM.TLD DNSDOMAIN=my.domain.tld and a serviceaccount the spn's. You can also use the existing "hostname" but for these extra spns I use a extra "service_account" 1) create "serviceaccount" for "HOSTNAME" : serviceaccount_name 2) create the spns for the service accounts samba-tool spn add host/hostn...

This falls under the 'getting clearcase to work with samba' category. Does anybody know if the clearcase albd server actually uses samba to access files (or anything else) on the unix side? I am having 'discussions' with rational (the clearcase people). The nt user running clearcase to access some unix-side views connects to the unix side using a set of credentials that have

...delegation for those users to service-account/service-principal-name for squid service I performed following steps:- 1. Added user using samba-tool user. 2. Joined the squid machine to AD-DC using "net ads join" 3. Added SPN using the command "samba-tool spn add HTTP/SQUID at DOMAIN serviceAccount" So far, I can get the TGT using my application but AD-DC do not issue TGS, following error is received by application while requesting the service ticket "gss_acquire_cred_impersonate_name: Generic error (see e-text)" I am kind of blank here, I did tried few steps using "samb...

...y, except for staff [SubShare1] path = /data/RootShare/SubShare1 browseable = no read only = no write list = @techs read list = @ausergroup [SubShare2] path = /data/RootShare/SubShare2 browseable = no read only = no write list = @techs, @mitsadmin read list = @techs, serviceaccount [SubShare3] path = /data/RootShare/SubShare3 browseable = no read only = no write list = @techs read list = @techs [SubShare4] path = /data/RootShare/SubShare4 browseable = no read only = no write list = @administrators, @mitsadmin [RootShare] path = /data/RootShar...

...9 2.0T 945G 1002G 49% /var/tmp [nfs-server]:/NFSv4_vol_cnv/ibragins-2-3.cnv-qe.rhcloud.com.pvs/pv15 2.0T 945G 1002G 49% /data/vm/disk1 tmpfs 3.9G 24K 3.9G 1% /run/secrets/kubernetes.io/serviceaccount -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones Read my programming and virtualization blog: http://rwmj.wordpress.com Fedora Windows cross-compiler. Compile Windows programs, test, and build Windows installers. Over 100 libraries supported. http://fedoraproject....

...for pre-existing resources... GlusterFS pods ... not found. deploy-heketi pod ... not found. heketi pod ... not found. Creating initial resources ... Error from server (AlreadyExists): error when creating "/root/gluster-kubernetes/deploy/kube-templates/heketi-service-account.yaml": serviceaccounts "heketi-service-account" already exists Error from server (AlreadyExists): clusterrolebindings.rbac.authorization.k8s.io "heketi-sa-view" already exists clusterrolebinding "heketi-sa-view" not labeled OK node "node-1.c.kubernetes-174104.internal" labeled nod...

...945G 1002G 49% /var/tmp > [nfs-server]:/NFSv4_vol_cnv/ibragins-2-3.cnv-qe.rhcloud.com.pvs/pv15 2.0T 945G 1002G 49% /data/vm/disk1 > tmpfs 3.9G 24K 3.9G 1% /run/secrets/kubernetes.io/serviceaccount > > > -- > Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones > Read my programming and virtualization blog: http://rwmj.wordpress.com > Fedora Windows cross-compiler. Compile Windows programs, test, and > build Windows installers. Over 100 librari...

Previously we placed large files in g#get_cachedir () (usually /var/tmp). However the problem is this ties the libguestfs appliance and the virt-v2v overlay files to the same location. When virt-v2v is run in a container, or any other situation where local storage is limited, it's helpful to be able to put the overlay files on an externally mounted PVC, which might be using NFS and shared

Hi Mathias and all. Am Donnerstag, 24. März 2016, 13:26:12 CEST schrieb mathias dufresne: > Hi, > > I'm glad that helped you : ) > > About SPN, I found that link few days ago: > https://adsecurity.org/?page_id=183 > It tries to list the string values available usable for SPN. > > And it gives also that link: >