similar to: Problems with firewalld-0.7.0

I'm trying to figure out a puzzling thing that we are seeing with some recently joined or re-joined samba servers. Our linux servers are in a different DNS domain than our AD machines (nwra.com or cora.nwra.com vs ad.nwra.com for the AD machines). Generally when we've joined a machine to AD the DNS name recorded in AD is their regular linux FQDN. But a couple machines have ended up with

Just saw this: ================================================================================ Package Arch Version Repository Size ================================================================================ Updating: ansible noarch 2.9.1-2.el7 ovirt-4.3-centos-ovirt43 17 M which seems new. No longer pulling ansible from

Looks like the GPG key we use to sign our RPMs is not longer good with EL9: # rpm --import RPM-GPG-KEY-nwra error: RPM-GPG-KEY-nwra: key 1 import failed gpg key info: sec rsa2048/35DDB0B86218AC2F created: 2017-08-16 expires: never usage: SC trust: ultimate validity: ultimate ssb rsa2048/6A7FBC1E9DB22E8E created: 2017-08-16 expires: never usage: E Can someone

With dovecot-2.2.36-3.el7.x86_64 we had a couple hours where mail_plugins did not properly include zlib for all of the needed services. This seems to have led to some corruption in our mdbox mailboxes. I've run doveadm force-resync on a number of users, but I'm still seeing messages like this: dovecot[13563]: imap(USER): Error: Corrupted record in index cache file

On 2/14/23 08:49, Orion Poplawski wrote: > On 1/29/23 11:24, Orion Poplawski wrote: >> It seems that thunderbird-102.7.1-1.el8 (at least on CentOS Stream) broke >> OAuth authentication with outlook.office365.com.? Downgrading to >> 102.4.0-1.el8 resolved the issue. >> >> Error console reports: >> >> XHR POST

On 4/9/20 6:31 AM, Andreas Haumer wrote: ... > I'm neither a fail2ban nor a SELinux expert, but it seems the > standard fail2ban SELinux policy as provided by CentOS 7 is not > sufficient anymore and the recent updates did not correctly > update the required SELinux policies. > > I could report this as bug, but where does such a bugreport belong to > in the first place?

On 5/15/20 8:22 AM, Rowland penny via samba wrote: > On 15/05/2020 14:56, Orion Poplawski wrote: >> On 5/15/20 12:56 AM, Rowland penny via samba wrote: >>> On 14/05/2020 21:59, Orion Poplawski via samba wrote: >>>> >>>> This configuration (dropping the username map script hack) seems to be >>>> working >>>> for us, does this seem

On 5/15/20 12:56 AM, Rowland penny via samba wrote: > On 14/05/2020 21:59, Orion Poplawski via samba wrote: >> Sorry, I thought I had re-enabled delivery, but I had not.? So trying to reply >> to Rowland Penny here: >> >>> On 14/05/2020 18:46, Orion Poplawski via samba wrote: >>>> All - >>>> >>>> ??? I seem to be suffering from the

> On 05 December 2018 at 20:54 Orion Poplawski <orion at nwra.com> wrote: > > > With dovecot-2.2.36-3.el7.x86_64 we had a couple hours where mail_plugins did > not properly include zlib for all of the needed services. This seems to have > led to some corruption in our mdbox mailboxes. > > I've run doveadm force-resync on a number of users, but I'm still

On 5/15/20 12:56 AM, Rowland penny via samba wrote: > On 14/05/2020 21:59, Orion Poplawski via samba wrote: >> Sorry, I thought I had re-enabled delivery, but I had not.? So trying >> to reply >> to Rowland Penny here: >> >>> On 14/05/2020 18:46, Orion Poplawski via samba wrote: >>>> All - >>>> >>>> ??? I seem to be suffering

On 6/1/20 3:08 AM, Patrick B?gou wrote: > Le 13/05/2020 ? 02:13, Orion Poplawski a ?crit?: >> On 5/12/20 2:46 AM, Patrick B?gou wrote: >>> Hi, >>> >>> I need some help with NFSv4 setup/tuning. I have a dedicated nfs server >>> (2 x E5-2620? 8cores/16 threads each, 64GB RAM, 1x10Gb ethernet and 16x >>> 8TB HDD) used by two servers and a small

On 10/22/19 7:04 AM, Leon Fauster via CentOS wrote: > Am 22.10.19 um 04:52 schrieb Orion Poplawski: >> On 10/21/19 3:42 PM, Leon Fauster via CentOS wrote: >>> Does someone have a working tmp on tmpfs via >>> >>> systemctl enable tmp.mount >>> >>> under CentOS8/RHEL8? This seems to work straight in EL7 ... >>> >>> >>>

Sorry, I thought I had re-enabled delivery, but I had not. So trying to reply to Rowland Penny here: > On 14/05/2020 18:46, Orion Poplawski via samba wrote: >> All - >> >> I seem to be suffering from the common complaint that users loose >> supplementary group access after a while - in our case it seems to be >> connections left overnight. Restarting smb

I''d like to add an event listener for dragging markers, but it looks like YM4R GM (and Mapstraction) doesn''t support this. I need an init like: marker = new GMarker(... GEvent.addListener(marker, "dragend", function() { }) but the current setup makes "anonymous" markers - never creates variable that can be used to access them. Has anyone thought about

On 6/1/22 13:43, Fabian Arrotin wrote: > On 01/06/2022 19:51, Orion Poplawski wrote: >> Looks like the GPG key we use to sign our RPMs is not longer good with EL9: >> >> # rpm --import RPM-GPG-KEY-nwra >> error: RPM-GPG-KEY-nwra: key 1 import failed >> >> gpg key info: >> >> sec? rsa2048/35DDB0B86218AC2F >> ????? created: 2017-08-16?

Isn't "nut" package there an umbrella/meta-package (in terms of other distros) to pull together the likely suspects in one command? Not at a computer now, but I think Debian and OpenIndiana packages were grouped this way. Likely all packages with daemons would depend on a "nut-common" package then, to consistently deliver user accounts, systemd-tmpfiles and other similar

On Wed, 23 Sep 2020 at 23:39, Orion Poplawski <orion at nwra.com> wrote: > On 9/23/20 7:07 AM, Stephen John Smoogen wrote: > > On Wed, 23 Sep 2020 at 04:33, Carlos Lopez <clopmz at outlook.com> wrote: > > > >> Hi all, > >> > >> > >> With SystemD, how can I make certain service dependent on certain > network > >> interfaces

We have a samba server that we would like to share a directory that is nfs4 sec=krb5 mounted from another machine. However, the user has no kerberos ticket on the samba server and so their smbd process cannot access the nfs mount. If the samba server process took the user's kerberos ticket and put it where rpc.gssd could find it, then it would have access. On 05/12/2017 03:47 AM, L.P.H. van

Would it be at all useful to have just the nut "server" components installed and running on a machine without a nut-monitor service running? -- Orion Poplawski IT Systems Manager 720-772-5637 NWRA, Boulder/CoRA Office FAX: 303-415-9702 3380 Mitchell Lane orion at nwra.com Boulder, CO 80301 https://www.nwra.com/

It seems that thunderbird-102.7.1-1.el8 (at least on CentOS Stream) broke OAuth authentication with outlook.office365.com. Downgrading to 102.4.0-1.el8 resolved the issue. Error console reports: XHR POST https://login.microsoftonline.com/common/oauth2/v2.0/token [HTTP/1.1 400 Bad Request 293ms] Is anyone else seeing this? -- Orion Poplawski he/him/his - surely the least important thing