similar to: CentOS 7 AD member having issues with AD groups

Hi! I am using mainly Samba 3.5 on CentOS, and I was very pleased with idmap_rid backend for SID-to-RID mappings. But on Solaris 10, I can only use 3.6 because OpenCSW ships only 3.6. Problem is, things are changed and are not working as expected... Here is my config on RHEL Samba 3.5: [global] workgroup = WINDOMAIN realm = WINDOMAIN.LOCAL server string = localserver

Hi. I can see that this is a long long standing issue... Apparently things changed in Windows 2008 R2, and after upgrade of domain from R1 to R2 cifs mounts don't work anymore between Linux servers. Windows can see Samba shares and mount them, but CIFS on another Linux box cannot... Here is a thread with explanation in lenght: http://ubuntuforums.org/showthread.php?t=1178484 I get the

Hi. I'm using CentOS 5 with samba3x packages (Samba 3.5.10) and Solaris 10 (Samba 3.5.8) for achieving AD integration. Samba hosts are added as domain members. Now, I've tried to add CentOS 6, which also uses 3.5.10, but have encountered a problem -> users cannot authenticate for some reason. Configurations are pretty much the same across the board, and they look like this: #

Hi. I want to run script which is distributed with my module, but the problem is I have to then hardcode the path to the script in the generate function call, for example: generate("/etc/puppet/environments/${environment}/modules/mymodule/scripts/myscript") But what If some other site uses other path to their modules, or doesn''t use environments at all? Is it possible

Module on forge: http://forge.puppetlabs.com/puppetlabs/apache Code and issue tracker: https://bitbucket.org/jsosic/puppet-cobbler Comments are welcome, hope somebody finds it useful. I''m very happy with it so far :D The reason I''m posting it is that couple of people asked me about publishing this module while I was in a process of developing it, so If those people

Hi. I've tried Samba 3.4.3 and it upgraded my passdb.tdb file. After testing I concluded that I'm not going to upgrade to 3.4.3 yet, because 'getent passwd' was broken in recent BlastWave Solaris packages: http://wiki.blastwave.org/forum/viewtopic.php?f=5&t=447&start=0 Now, after I downgraded the Samba back to 3.0.32, client connections started to malfunction. I saw

Hi. I''m using Xen on RHEL cluster, and I have strange problems. I gave raw volumes from storage to Xen virtual machines. With windows, I have a problem that nodes don''t see the volume as same one.... for example: clusternode1# clusvcadm -d vm:winxp clusternode1# dd if=/dev/mapper/winxp of=/node1winxp clusternode2# dd if=/dev/mapper/winxp of=/node2winxp clusternode3# dd

Hi. I have following errors in my log file: Mar 22 05:33:11 xentest libvirtd: 05:33:11.518: error : failed Xen syscall topology cpuset syntax error Mar 22 05:33:21 xentest libvirtd: 05:33:21.418: error : failed Xen syscall topology cpuset syntax error Mar 22 05:33:41 xentest libvirtd: 05:33:41.274: error : failed Xen syscall topology cpuset syntax error Mar 22 05:33:41 xentest libvirtd:

Hi, I''m trying to program custom type for managing Couchbase buckets. Problem is that every RW operation to Couchbase cluster (creating, deleting, resizing bucket) requires admin privileges (username/password). Do you have any suggestion how should I pass the username/password to provider? If I make it a param, then every resource of type ''couchbucket'' will need to

Hi. I have the following facts available: # facter | grep oper operatingsystem => CentOS operatingsystemrelease => 6.2 Now, if I wish to use conditionals on these facts, I have to do it like this: case $operatingsystem {} case $::operatingsystemrelease {} I''m puzzled as to why can''t I just use $operatingsystemrelease, and what do these two semicolons mean? Thank

Hi. I''m getting lots of warning like this one from puppet-lint: WARNING: line 67 has more than 80 characters Now, I don''t like warnings, so any idea how should I rewrite this line for example, to void the warning? package {''rpmforge-release'': ensure => ''0.5.2-2.el6.rf'', provider => ''rpm'', source =>

Hi. I''ve been trying to develop a module for managing Cobbler from puppet. So, I need a custom type - cobblerdistro, which will fetch ISO from http, unpack it at desired destination and register distro with Cobbler. I have one issue with ensure => absent situation. First of all, here is my type: <code> # cat type/cobblerdistro.rb Puppet::Type.newtype(:cobblerdistro) do @doc

I am trying to write a define type which will use an array but in the meantime have an argument pass to it that sets a case. See for example : define link_files ($linkcase) { case $linkcase { "var" : { file { "${name}_exelink" : path => "/var/log/puppet/${name}_log", ensure => link,

Deprecation notice: Resource references should now be capitalized on line 101 in file /etc/puppet/manifests/templates/basenode.pp This is the specific line of code: realize (users::useraccount[hiera(''users'')]) When I capitalize Users, I get the following error: Error 400 on SERVER: Could not parse for environment production: Syntax error at

Hi. Is it possible somehow to join a Linux machine to a AD Domain without providing any password on a CLI? So far, I've been joining machines purely by: # net ads joint -U Administrator%password But now, I'm trying to automatize the process through puppet, but don't know if it's possible somehow to join domain without using administrator (or any other) password? I can

Hi, I''m using PuppetDB with builtin backend, haven''t switched yet to postgresql, and I''m starting to see decrease in performance of my agent runs. I use PuppetDB solely because of exported resources support. How soon should I think about moving to PostgreSQL? How many clients does my master need to serve, so that PuppetDB in it''s default installation,

I have a problem with puppet on a machine which has public and private IP address. My nodes are on private lan, and hostname of master is FQDN of the public IP. Client''s just cannot connect. Problem which I get is: err: Could not retrieve catalog from remote server: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed I''ve added

Hi. I have an interesting use case. OSSEC is security tool based on server-client architecture. Server generates keys for agents, and every agent has different key. Now I want to distribute these keys via puppet. I''ve come accross hiera and installed it, and it works superbly, but how to store per-node key in hiera? This is my idea: hiera,yaml: --- :hierarchy: -

Hi, could this be a bug? I have this code: $mypath = get_module_path(''ssh'') if generate("${mypath}/scripts/generate_host_keys.sh", "${keys_dir}/${::fqdn}/ssh") { notify {''something'':} include ssh::server::keys } generate_host_keys.sh script generates ssh host keys for ssh daemons, and stores them in private section. Those files

Hi... I''ve been trying to set up boolean values in Hiera, but with no luck. For example, I''m using puppetlabs-haproxy module, and this is a code snippet: class haproxy ( $manage_service = true, ... ) inherits haproxy::params { ... if $manage_service { } } Now, this is how I set up values in hiera: haproxy::manage_service: false But, it seems that