similar to: scope issue after upgrade

Is there any security (or perhaps plans to add security) within the fileserver to verify that clients are only able to receive files specified in the manifests on the server? I''d like to distribute different Kerberos keytabs to different nodes such that nodes www01 and www02 can retrieve different files from nodes www03 and www04. Any ideas on how best to approach this problem? Thanks,

I''d like to create a component that takes different actions based on the classes associated with the node using the component. Is this possible? Here''s what I''m thinking. node www01 { include webserver website { "site1.com": aliases => ["www.site1.com", "test.site1.com"], username => www0001 } } node www02 { include

I''m trying to trigger a service to be refreshed when the target of a symlink changes. Here''s how it''s configured: file { "/etc/lighttpd/sites-enabled/$domain.conf": notify => service[lighttpd], ensure => "/nfs/www/$domain/etc/lighttpd.conf", links => follow, } This causes the service to be refreshed everytime puppet updates, even if the

I just started playing with puppet. Unfortunately, it keeps crashing in a variety of places. I don''t have much experience with Ruby yet, so any tips in tracking down these problems would be appreciated. I''m using the Debian package 0.18.4-1. Here''s the output of a couple runs: www01:/home/cwarden# puppetd --verbose --onetime info: Caching configuration at

Hello, I've got a little problem with NFSv4 + Kerberos. I can do a mount with Kerberos with a valid ticket, but read-only. After the mount -vvv -t nfs -o nfsv4,sec=krb5 nfsserver:/ /mount_test/ I can see: #klist: Feb 6 07:22:47 Feb 6 17:22:43 nfs/nfsserver at my.domain #/var/heimdal/kdc.log: 2013-02-06T07:28:26 TGS-REQ clientnfs at my.domain from IPv4:192.168.0.23 for nfs/nfsserver at

Hello, we are using ctdb 4.15.5 on RHEL8 (Kernel 4.18.0-372.32.1.el8_6.x86_64) to provide NFS v3 (via tcp) to RHEL7/8 clients. Whenever an ip takeover happens most clients report something like this: [Mon Feb 13 12:21:22 2023] nfs: server x.x.253.252 not responding, still trying [Mon Feb 13 12:21:28 2023] nfs: server x.x.253.252 not responding, still trying [Mon Feb 13 12:22:31 2023] nfs: server

On 18.08.23 07:39, Darren Tucker wrote: > On Fri, 18 Aug 2023 at 15:25, Stuart Longland VK4MSL <me at vk4msl.com> wrote: > [...] >> The crux of this is that we cannot assume the local IPv4 address is >> unique, since it's not (and in many cases, not even static). > > If the IP address is not significant, you can tell ssh to not record > them ("CheckHostIP

I have narrowed my problem in a prior topic (I''m having trouble with Routes) to the fact that I get the problem, below only when I reload my page. Clicking on links to go to the pages I want ... I seem not to have problems. Given that it seems to be a reload that is generating an "/undefined" path somewhere ... can anyone suggest what I should be looking for to fix the

On RHEL 6.2 + dovecot 2.1.5 with the stats and fts (squat) plugins enabled and each user having their own uid on the system I get the following error in the logs when the indexer-worker process indexes some messages: Apr 25 09:56:19 wardentest3 dovecot: imap-login: Login: user=warden, method=PLAIN, rip=137.238.60.164, lip=137.238.2.240, lport=1993, mpid=19464, encryption=TLS Apr 25 09:56:26

I'm having difficulty with the doveadm who command on a multi-instance setup of dovecot. When I run the who command on the non-standard instance with the -m flag (to see their mail location), this happens: [root at wardentest3 dovecot]# doveadm -i mailtest user -m warden doveadm(root): Error: user warden: Initialization failed: Namespace 'INBOX.': Ambiguous mail location setting,

Hi, I’m having difficulties trying to understand the performance differences between NFS and SMB. I have used rsync (OS X) over SMB (mounted network storage) and using rsync (OS X) over SSH (NFS mounted storage) From my test, rsync over SMB builds a file list each time comparing modified source/destination, where as rsync over ssh/nfs is incredibly quicker, pretty much instant. During the

Puppet is failing to restart lighttpd using the Debian init script. Both the default action of stop/start and using the reload action, which basically does the same thing, fail. It seems to be a filehandle problem. Changing the execute method in service.rb to redirect stdout to /dev/null allows the daemon to restart. Otherwise, I end up with a zombie process and according to strace, ruby

I changed fairly much in my app without constant testing ( my bad ) now i get an error which I cannot seem to debug point my finger on. I have a home controller which just displays a welcome page this had a index only action. Whatever controller I try to open i always get above error message ActionView::TemplateError (undefined method `show'' for

I apologize if this is a stupid question but I just compiled 2.0.8 and am trying to use doveadm to get the quota for a user using the -S <socket_path> option because I have different options for the various local IPs that dovecot listens on. For example, my default quota is filesystem (NFS rquota) and I can get that by doing: doveadm quota get -u warden which tells me: Quota name

Hi, I noticed that my 4.8R box seems to have a NFS problem. I use a FreeBSD/i386 4.8R box as a NFS server, and a FreeBSD/i386 5-CURRENT (as of today) as the NFS client. On the client, /a (on the server) can be mounted successfully with -o rw,bg,intr,mntudp options. However, when a large amount of write operations such as "cp -r /home/ncvs /a" are performed on the client, the

Here I am, trying to learn TDD and BDD. Getting start, most simple case, and the world is falling apart: My test code: it "should respond with success" do puts ''hi'' # get :new # response.should be_success end My stack trace: $ rspec spec "controller: nil" F Failures: 1) VideosController new exposes request and response before and

I am using devise and omniauth for authentication. Wherever i click on the facebook login button i get this warning msg. ****************************************** warning: peer certificate won''t be verified in this SSL session ****************************************** But now i get this error msg ***************************************** OpenSSL::SSL::SSLError SSL_connect returned=1

Hello, I set up NFSv4 server. To make sure I set vfs.nfsd.server_min_nfsvers=4. I can check its version, for example, by tcpduming and then I can see in wireshark lines like: Network File System Program Version: 4 V4 Procedure: COMPOUND.... .... is there any easier way to check its version? I see there is nfsstat -e option which shows delegs and locks. But all other ones are combined with nfsv3

Do explicit class dependencies work? This simple example fails with: Could not find resource ''Class[Config]'' for relationship on ''Class[Uses_config]'' class config { } class uses_config { Class[''config''] -> Class[''uses_config''] } include uses_config Am I doing something? Thanks, Christian -- You received this

I get the above panic after nfs clients attach to this nfs server and being read/write ops on it after an unclean shutdown. I've fsck'ed the fs, and it marks it as clean, but I get this every time. It's an NFS share of a GEOM stripe (about 2TB). mode = 0100600, inum = 58456203, fs = /mnt panic: ffs_valloc: dup alloc I do have dumps from two crashes so far. This is