Displaying 20 results from an estimated 3000 matches similar to: "client certificate path hard coded?"
2010 Aug 19
1
[virt-tools-list] Client certificate paths?
On 08/12/2010 10:29 AM, Lars Kellogg-Stedman wrote:
> Hello all,
>
> I'm trying to get virsh (and virt-manager) to talk to a remote libvirt
> instance. I cannot for the life of me figure out how to tell either
> tool where to find client or CA certificates. Do they *really* need
> to access the ones in /etc/pki? In particular, the client seems to
> want to read the
2011 Apr 08
1
Python API - setting client certificate path
Hi there,
I'm trying to establish a TLS connection to libvirtd with certificates
verification from a python script. My question is quite simple:
is it possible to set the client certificate/keyfile path from within a
python script? or it has to be in /etc/pki/libvirt/...
Thanks in advance for any help
Wojciech Gumularz
2004 Sep 27
3
Problems with the IdealX scripts
Not sure if this is where I should ask about this, but if I try to run any of
the smbldap-* scripts, I get the following kind of output:
oink:/usr/local/sbin # ./smbldap-populate
Using builtin directory structure
erreur LDAP: Can't contact master ldap server (IO::Socket::INET: Bad protocol
'tcp') at /usr/local/sbin//smbldap_tools.pm line 153.
I feel like this must be from a typo
2010 Jul 27
2
Samba LDAP ignores group information
Hi.
Excuse my English.
I've installed Samba+OpenLDAP as a PDC.
Everything works fine but Samba ignores completely group information.
Linux is ok.
Any clue? I'm going crazy here!
Here's the sittuation:
user: fish1
home dir: /home/reaml/swim/fish1
primary group: swimmers
other groups: smokers
Directory of smoker's group: /home/realm/smokers
Here's an 'ls -l' on
2010 Feb 09
1
error: unable to connect to libvirtd at 'a.b.c.d': Connection refused
Greetings:
I have an issue with connecting to the esx hypervisor from my guest Vm. The purpose of the connection is to obtain host related information (like network, devices etc).
I am not sure what is it that rejects the connect at the server side, and what i am missing.
I am running lib0.7.5, i have libvirtd running on guest-vm.
The host ESX has the ip address a.b.c.d.
?
Any
2013 Oct 30
2
Re: Using certtool to generate certificates for ESXi
Hi Daniel,
thanks for the reply - The procedure I use is the same as I use for
XenServer, and the certificate exchange works just fine. The only thing
I'm a bit unclear on, is the location of the CA cert, which in the case of
XenServer, I simply put it in /etc/pki/CA. And when I start the libvirtd
daemon, it successfully picks it up. If I put the Server key and cert in
/etc/vmware/ssl for
2014 Jun 09
1
Samba AD member and connections from non-AD systems failing
Hello,
I have a problem where non-AD systems can no longer connect to Samba shares. Samba 3.5.x servers are a members in AD, Windows 2008R2. This has worked flawlessly since we initiated it a couple years back. This happened to all 3 Samba servers after AD servers were rebooted. My thoughts are it was a Windows update that wrecked the system. Here is a typical setup:
Winbind not used
Samba
2013 Mar 10
2
Logon with Client Certificate and OTP fallback
Dear Dovecot experts,
we have unusual authentication requirements, namely:
- almost all of our user are using a smartcard to connect
with our mailserver. Thunderbird is our friend here as it will
use the smartcard as an additional certificate store and
Thunderbird will do client certificate based authentication
when connecting via SSL with a mailserver
- there's no way (at least that I know
2006 Jun 15
3
UNIX accounts can create
Anybody know whats wrong when the commands
smbldap-useradd or populate work fine with ldap but cant create
unix/linux accounts ????
Pelase Help.
Jorge
__________________________________________________
Correo Yahoo!
Espacio para todos tus mensajes, antivirus y antispam ?gratis!
?Abr? tu cuenta ya! - http://correo.yahoo.com.ar
2023 Sep 10
2
Question about encryption and tls
(Posted few days ago on qemu group but no reactions)
Do I understand correctly that ssl shoudl be configured independently
for libvirt and each hypervisor?
I asked because I configured libvirt connection as
qemu+tls://bambus.kjonca/system?pkipath=...
(and on bambus in /etc/libvirt/libvirtd.conf) I set
key_file = ...
cert_file = ...
ca_file = ...
But after connect and lauching (on bambus) vm I
2004 Jun 11
2
Samba 3.0.3 on FC2: windows machine cannot join domain
I'm using Samba 3.0.3 on Fedora Core 2 with OpenLDAP 2.1.29 for a
backend. I'm getting to typical "The user name could not be found."
error upon trying to join a Windows box. I've gone through every digest
on lists.samba.org and other sites and nothing has worked yet. Any
suggestions:
Here's what I've done so far:
1. Installed everything via RPMS:
[root@smbtest
2012 Dec 21
1
Hiera and 'clientcert' fact not working :(
Morning All
I''m trying to use Hiera with Puppet 3.0 to streamline some of my module
configuration...
However I''m having issues using the ''*%{::clientcert}*'' variable as part of
the hierarchy...
Currently, my *hiera.yaml* file looks like:
---
:backends:
- yaml
- json
:yaml:
:datadir: /etc/puppet/hieradata
:json:
:datadir: /etc/puppet/hieradata
2004 Sep 23
1
Re: Samba 3.0.3 on FC2: windows machine cannot join domain
After, oh, six months of attempts here and there to read everyone's
experiences with Samba/LDAP and inability for a windows 2000/XP machine
to join the domain, I finally discovered what was not working properly.
In my smb.conf I put:
add machine script = /usr/local/sbin/smbldap-useradd -w "%u"
As instructed by many How-to's and Idealx. However, I thought to myself,
%m
2013 Aug 22
4
Could not parse for environment production: Cannot assign to variables in other namespaces
We''re trying to set a role variable in one of our role classes i.e.
class role::nameserver {
$::role = ''nameserver''
include profile::baseline
}
however we get the following error
Error: Could not retrieve catalog from remote server: Error 400 on SERVER:
Could not parse for environment production: Cannot assign to variables in
other namespaces
We do not get
2013 Oct 15
6
hiera_array, structured data and multiple levels of hierarchy
Hi all!
I''m trying to setup a puppet module for sudo that will write multiple files
with separate data for each file, all dependent on the hiera hierarchy.
Here''s the relevant portion of my hiera.yaml:
> :hierarchy:
>
> - "datacenter/app/role/node/%{::clientcert}"
>
> - "datacenter/app/role/%{::server_role}"
>
> -
2004 Nov 23
2
Users being deleted from Domain Users group on Samba BDC during vampire process of migration
I think I'm having a problem during the vampire process. Would someone
tell me why my domain users are being deleted from the Domain Users group
after they are created?
First, the accounts are being created normally...
Creating account: marshah
Creating account: marshab
Creating account: johnp
.
.
.
Creating account: ronniem
Creating account: bobbyr
Creating account: robertk
Creating
2012 Oct 26
2
Using regex to match hostnames in hiera
Hi, I''m having a problem with extlookup not respecting the ''certname'' parameter[1]. When executing a puppet run with either the --certname or --fqdn parameters, it ends up using the specified SSL certificate and gets the correct node definition applied from the puppetmaster. However, it still retrieves extlookup data using the node''s actual FQDN, not the one
2023 Sep 11
2
Question about encryption and tls
On Sun, Sep 10, 2023 at 01:00:21PM +0200, Kamil Jo?ca wrote:
>(Posted few days ago on qemu group but no reactions)
>
>Do I understand correctly that ssl shoudl be configured independently
>for libvirt and each hypervisor?
It depends what you are asking about. There are various connections,
each of you can configure separately.
>I asked because I configured libvirt connection as
2013 Jan 14
1
Extrange Hiera error
Hi:
I work on puppet 3 and hiera, but i cannt load a yaml file on a subdir.
my hiera.yaml looks like:
---
:backends:
- yaml
- json
:yaml:
:datadir: /etc/puppet/hieradata
:json:
:datadir: /etc/puppet/hieradata
:hierarchy:
- "servidores/%{clientcert}"
- %{::ve}
- common
:puppet:
:datasource: data
problem is on "servidores/%{clientcert}". If it is %{::clientcert}
2005 Jul 28
12
Can you caculate with me?
before I accuse somebody to "overbill" I would like you to calculate
with me:
Rate: 0.0189 for calling Taiwan via NuFone
Duration: 930 seconds
Lets vote for the answers: 0.7269 or 0.2929 ???
bye
Ronald Wiplinger