similar to: Missing packets on Dom0 when sniffing bridge with wireshark/tethreal

Hi Everyone, In order to prevent DomU from entering promiscuous mode, is it just a matter of adding these 2 rules when the vif is created? # Accept packets leaving the bridge going to the domU only if # the destination IP for that packet matches an authorized IPv4 # address for that domU. iptables -A FORWARD -m physdev --physdev-out vif1.0 \ --destination 216.146.46.43 -j ACCEPT

Hi folks, I read quite some posts about "Destination host unreachable" problems before, but none could help me to solve my issue. So here we go: This is what I am using: SUSE Linux Enterprise Desktop 10 SP1 - Current with all updates Network configuration of my dom0: foobar:~ # ip a 1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue link/loopback 00:00:00:00:00:00 brd

Hi I am trying to stablish a relation between two different Samba domains. Each domain has two PDCs, all they are WINS servers, and the two domains are in different subnets. They are configured to use LDAP as the user/group/machine database. First, I will create the relation, being DOM1.CORP the trusted domain, and DOM2.CORP the trusting domain, so in a server of DOM1.CORP, I create a user this

Hi, well once u try lot and no good result is time to ask. My friends I want to make to domains running samba+ldap to share resources, I want to create a trust relation in two directions. Both domains have wins enable but are on different subnet. Domain Name: DOM1 Netbios Name = DOM1PDC 192.168.50.0/24 Domain Name: DOM2 Netbios Name = DOM2PDC 192.168.40.0/24 Both networks are separate,

> > > My friends I want to make to domains running samba+ldap to share > resources, I want to create a trust relation in two directions. Both > domains have wins enable but are on different subnet. MUST use the same WINS server for trusts to work. Why have two domains? > > > > Domain Name: DOM1 Netbios Name = DOM1PDC 192.168.50.0/24 > Domain Name: DOM2 Netbios

I hope someone can answer this since my other emails have gone unanswered. I am using Samba 3.0.7 on both machines and am using LDAP. I believe that the trusts are working but I am still having a slight problem. I guess we'll use DOM1 and DOM2 for the domain names. DOM2 is trusting DOM1. If a DOM1 user tries to locally login to a DOM1 computer, it gives a "System could not log you

Hi, I tried to configure the new idmap interface. Currently without much success. I have two samba domains, trusting each other. Each PDC using it's own LDAP server. I tried idmap domains = DOM1, DOM2 idmap config DOM1:default = yes idmap config DOM1:backend = ldap idmap config DOM1:ldap_base_dn = ou=Idmap,dc=dom1,dc=mydomain,dc=de idmap config

Hi, I have some problems with the following setup: DOM1 (PDC) -> DOM2 (PDC) <->DOM2(Member server) The users and groups from DOM1 (MS WinNT4 domain) are nicely visible on Samba PDC (DOM2) with established trust, but domain member server in DOM2 domain does not show any users from the DOM1 domain (only users from DOM2 are visible), BUT!! users from DOM1 can login to it and access shares

I have noticed the following behavior when testing out Samba 3.0.1 on RH9 with ldap authentication. Linux Samba V3.0.1 set up as PDC for domain DOM1 has a user test1. Two NT4 domains DOM2 and DOM3 also have a user called test1 with the same password as the user in DOM1 (all three users have the same username and password). All servers are on the same local subnet. When user1 does a logon to

Hello all, We've been using samba version 3.0.4 on RH9 with success for quite a while now for shares on our domain (DOM1). Since this machine will have to be available in the near future in another domain (DOM2) as a webserver, and limited fileserver, another network interface has been added for the NIC. When browsing the shares from a WIN98SE computer in DOM2, we are able to see the

Hello, my current network setup looks like the following: dom2-eth0 (172.30.1.22) netmask /24 | | xen-br1 (no ip) | dom1-eth0 (172.30.1.21) netmask /24 dom1-eth1 (172.30.0.21) netmask /24 | | xen-br10 (172.30.0.1) netmask /24 | dom0 | | xen-br0 (normal IP) | eth0 (same IP as xen-br0) |

Hi, There is my network. =09 _____ Subnet:192.168.2.0 / \ Subnet: 192.168.1.0 Domain:DOM1=09without PDC | Swap |Domain: DOM2 with PDC <---------------------- \_____/ ---------------------> =09 I want to setup the machine(swap) for sharing file. The file on swap can read/write by the member of the DOM2 and= read only by the member of the DOM1. The DOM1

Hi, Right now, the unprivileged account for privilege separation is only configurable at compile time (SSH_PRIVSEP_USER). I'd like to ask if it would be acceptable to have the account runtime configurable by adding something like PrivilegeSeparationAccount foo to sshd_config. The reason I'm asking is this. I'm working on a long overdue change to Cygwin which is supposed to get

Hi everyone, I need your help. I would like to create a front-back architecture with Xen. My physical server has only one public Interface. Currently, my DOM0 is using the network-route configuration: *(network-script ''network-route netdev=eth0'') (vif-script vif-route)* My DOM1 is configured with a public IP + proxy_arp with DOM0. DOM1 can connect any address on

Hi all! I have a doubt about shared resources: If I have a Dom-0 and two virtual machines Dom1 and Dom2, how can I split cpu resources? I mean how can I assign exactly 25% of cpu to Dom1 and 75% of cpu to Dom1? (I assume that Dom-0 uses 0% of cpu). Can I also choose which is the virtual machine I assign the disk I/O speed? Thanks very much! Marco

Hi, I have the following directory shared for the user "pcbadmin". He/she can mount and read/write without any difficulty: [pcbdata] comment = PCB Design Files path = /home/pcbadmin/pcbdata valid users = pcbadmin public = no writable = yes Question: How can I make the same directory only readable by the rest of the users ? TIA, Ben

Hello, I don''t know if TCO is supported for XEN_NETDEV_FRONTED in kernel 3.1.6, however I found an issue. I had to track down an issue today: Packet from a local machine didn''t get routed to the internet. After long searching I found the issue: The TCP-Segmentation-offloading assembles fragments with Do Not Fragment set. This introduces issues when the packet is to be rerouted

Hello, I searched the mail list, but can''t find a solution. I have a machine with 8 cores. I want to set the CPU affinity for dom0. For example, let Dom0 use processor 0-3, let guests use 4-7 For guest domains, I can do this by setting the "cpus" For dom0. there''s no such option. The only one I know is in /etc/xen- config.sxp, which has "dom0-cpus" setting.

Hi, This patch intends to accurate vcpu weighting for CPU intensive job. The reason of this problem is that vcpu round-robin queue blocks large weight vcpus by small weight vcpus. For example, we assume following case on 2pcpu environment. (with 4domains (each domain has 2vcpus)) dom1 vcpu0,1 w128 credit 4 dom2 vcpu0,1 w128 credit 4 dom3 vcpu0,1 w256 credit 8 dom4 vcpu0,1 w512 credit 15

Il 20/05/2015 10:44, David Gessel ha scritto: > Is there a way to completely disable caching on dovecot? Yes: mail_location = maildir:~/Maildir:INDEX=MEMORY -- Alessio Cecchi http://www.linkedin.com/in/alessice