similar to: Feature Suggestion: hosts cert syncing

Hi Peter and other Libvirt-Users, Thank you, I greatly appreciate your response. The diagram I provided may be a little misleading, so I have attached a new diagram (also available here: https://i.imgur.com/X3nFMCz.png ). I think I also need to provide some more detail about my scenario here: These physical nodes are provided to me by "bare-metal cloud" providers like Scaleway / OVH /

Hello tinc users! Has anyone been able to get LocalDiscovery to work properly? I'm not quite sure what I need to do other than enable it in tinc.conf, and it doesnt seem to be working. Has anyone else tried it? -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://www.tinc-vpn.org/pipermail/tinc/attachments/20160901/5698fc86/attachment.html>

Hello Libvirt Users, I would like to setup a two node bare-metal cluster. I need to guidance on the network configuration. I have attached a small diagram, the same diagram can be seen here: https://i.imgur.com/SOk6a6G.png I would like to configure the following details: - Each node has a DHCP enabled guest network where VMs will run. (eg, *192.168.1.0/24 <http://192.168.1.0/24>* for

I absolutely love tinc and the features it brings to the table, and also the stability it provides. My one issue with tinc is that managing certs between different nodes seems rather inconvenient. By using "tincd -n vpn -D -d5" I can see when a cert fingerprint is denied. Does tinc have features like that of puppet where you can list the pending certs and accept or deny them? see

Hello, I have 4 VM's running in Microsoft Azure. They all should have similar configurations except from their tinc ip addresses of course. They run tinc 1.0.24. I have a 5th machine, my development machine. I am able to ping all 4 VM's from my computer when I start tinc from the commandline (tincd -n innomeer -D -d 2). 3 of the computers also work ok when running tinc as a service

Hello Libvirt-Users! I have a quick question about the qemu guest agent. Is it possible to use the guest agent from inside the guest in order to query the name of its own domain? For example, I use a base-image.qcow2 with a baked-in hostname. I would like to include a little tool in my guest image to change the hostname to the name of the domain. Is this sort of thing possible? -Cobin

First off, I would like to express my appreciation for the tinc software, it has been such a great vpn solution for what i need, its amazing. I am setting up another node on the vpn. "KVM" is my public facing node, "MacbookAir" is my workstation, "NewNode" is my node i have recently configured and the one with the issue presumably. NewNode and MacbookAir are on the

Hi all! Doing my first steps with OCFS (1.0.9), I ran across a nifty little "feature".... We've been trying if DMP with QLogic 2300 HBAs works without having DMP activated (ok, blame on me...). ocfstool allows you to mount different partitions on the same mountpoint, but after we tried that, everything went to state "D" and we chose to reboot the whole cluster (4

I have to say that I wouldn't do the networking that way - in fact, in the clusters I manage, we haven't done the networking that way :-). Rather than layer 3 routing between VMs, we've chosen to use layer 2 virtual switching (yes, using openvswitch). We have the luxury of multiple 10G NICs between our hosts, so we've separated out the management network from the guest network,

Hi All, I have two networks: 10.10.20.0/24 and 10.10.30.0/24 The two networks can talk IPv4 to eachother, but only subnet 10.10.20.0/24 has access to the public internet, whereas 10.10.30.0/24 cannot reach the public internet. I have a windows host on the 10.10.30.0/24 network at 10.10.30.50 and I would like to use tinc to connect the windows host to my linux workstation at 10.10.20.40 to

We're experiencing weird problems here: The Solaris guys have user-packages, so we had to do this too for the Linux boxes (7.0, 7.1). Since some of the accounts get "easy" passwords set at install time, they are expired at once: /usr/bin/chage -m 7 -M 84 -W 14 <user> Now, at login, the user is prompted: You are required to change your password immediately (root enforced)

Ooops, I missed that one, sorry. I'll see if it helps. Thx. Nick Nick (Gunnar) Bluth Linux Systems Administrator Dresdner Kleinwort Wasserstein Dresdner Bank AG Global Business Services <mailto: gunnar.bluth at DrKW.com> IT Operational Integrity Voice: +49 69 263 57913 (97000 - 57913) J?rgen-Ponto-Platz 1 Fax: +49 69 263 16994 (97000 - 16994) D-60301

Hi, there, I put roaming profiles for NT4 users on samba server. In "Domain User Manager", I set "User profile Path" \\abel\profile\%U.pds, here abel is samba server. It works well, but everyday several users complain. Sometime, they cannot login because of roaming profiles. Sometimes, some users cannot run VC or VB. Sometime, I only need to remove ntuser.dat on samba

Hi folks [ Please add me CC. Thanks ] We have here a Jboss app and web server. We signed the SSL-certificate that end-user don't have ugly error messages. I don't understand why we need to import the Root-Cert in PEM format? $ keytool -import -trustcacerts -file rootcert.pem -keystore myserver.keystore -alias root The Root-Cert is in web browser, why there is a must to import in

Hello, I'm using samba 2.2.4 as a fileserver in a Win2K domain with AD functionality. Our users are using offline-folders for syncing with samba, when offline or not at office. But recently many of them report failures during the syncing process with a growing number of files. After studying the logfiles, I was able to find out, that failing chmod attempts from the clients are the reason. As

I am building a mail server on Centos 6.3 and working with OpenSSL to create a self-signed certificate for mail use. Along the line of learning the 'best' options to use for OpenSSL and dealing with the default SSL virtual host for Apache, I discovered that the localhost cert created (I believe) during firstboot has the X509v3 extensions set as a CA cert (eg basicConstraint CA:TRUE).

How do I setup mixed authentication so that I can have say a couple of machines on my lan only use ssl without client certs, but have all the other machines connecting from remotely required to have ssl certs to connect to imap? This is with Dovecot 1.1.4 on CentOS 5.2 -- Harondel J. Sibble Sibble Computer Consulting Creating Solutions for the small and medium business computer user. help at

Hi, I'm trying to get apache, sendmail , and dovecot to use SSL certs signed by my own CA. I've got the apache certs working fine. However, dovecot ( I haven't even tried sendmail yet) doesn't seem to accept any of the certificates that I create for it. There is a script that comes with dovecot that creates self-signed certificates for you but, I need certificates signed by my own

I've read the client ssl cert section in the wiki and it talks about using a self signed cert, if I am using a commercial cert, in this case godaddy, how do I implement a self signed cert for the client side and have dovecot make use of this? I know the mechanics of setting up the self signed ca, the question is more what configuration changes do I need to make in dovecot to handle both

Dear List, Im new to R - making a transition from SAS. I have a space delimited file with the following structure. Each line in the datafile is identified by the first letter. A = Inventory (Inventory) X = Stratum (Stratum_no Total Ye=year established) P = Plot (Plot_no age slope= species) T = Tree (tree_no frequency) L = Leader (leader diameter height) F = Feature (start_height finish_height