Надо сохронить, так как этот полезный текст остался только в Веб Архиве.
Copyright 1988, 1997 Массачусетский технологический институт. Все права защищены.
Билл Брант (Bill Bryant), февраль 1988.
Отредактировал и подготовил HTML вариант — Теодор Тсо (Theodore Ts’o), Февраль, 1997. Также добавлено приложение описывающие изменения 5-й версии протокола Kerberos. Continue reading
I have login.keychain corrupted in my Gnome 3 enabled workplace due to the recent Google Accounts engine problem. For some reason it has become completely unusable, Gnome Keychain was unable to unlock it, Google Chrome stopped loading sites, goa-daemon died (as usual) and Evolution has stopped getting mail.
Goog Friday morning frustration.
Recently I had installed RHEL 7 FreeIPA test lab on my workplace. I have made virtual host with default 1GB RAM, installed the system, enrolled it into the IPA domain OK, then tried ipa-replica-install. Turns out that 1GB is not enough and OOM-killer tries to solve the problem by killing processes that ipa-replica-install had spawned. Surprisingly turns out that for some reason the script is not detecting errors caused and you have strangely configured replica as the result.
If you have host in the AD with the SSSD then your root user can be any user from the domain. So
%groupname ALL=(ALL) NOPASSWD:ALLwould actually give permissions to all users from the “groupname” to become any AD user they want, and if they’re SSH’ng the localhost then, they would have Kerberos ticket as well. It is not actually that evident, but Active Directory is an identity provider, so if you are superuser on the host — you can be AD user on the host.
One of the most frequent cases I have is that “sometimes” and “somewhere” user is not getting authenticated. Trying to SSH to the host works for some users not always, “id username” returns errors sometimes — it’s all the same problem in the environment with LDAP replication. It does not actually matter what kind of the LDAP server or domain controller is being used, always check:
This would help to identify and fix the problem.
Lol, hope to add more in furure
grep -v "timed event" |grep -v "timer event"|grep -v "Requesting"|grep -v "SBUS"|grep -v "callback"|grep -v "dispatch"|grep -v "a sysbus message"|grep -v "No sub-attributes for" |grep -v "reusing cached connection" |grep -v "nesting:"|grep -v "sbus_remove_watch"|grep -v "be_client_destructor"|grep -v "sdap_process_result"|grep -v "Comparing LDAP with LDAP" |grep -v "Message type:"|grep -v "unenforced gpo skipped"I need to see long path and host name. And not to lose command line space at the same time:
BOLD="\[$($TTY && /usr/bin/tput bold)\]"
COLOR_BLACK="\[$($TTY && /usr/bin/tput setaf 0)\]"
COLOR_RED="\[$($TTY && /usr/bin/tput setaf 1)\]"
COLOR_GREEN="\[$($TTY && /usr/bin/tput setaf 2)\]"
COLOR_YELLOW="\[$($TTY && /usr/bin/tput setaf 3)\]"
COLOR_BLUE="\[$($TTY && /usr/bin/tput setaf 4)\]"
COLOR_MAGENTA="\[$($TTY && /usr/bin/tput setaf 5)\]"
COLOR_CYAN="\[$($TTY && /usr/bin/tput setaf 6)\]"
COLOR_WHITE="\[$($TTY && /usr/bin/tput setaf 7)\]"
COLOR_GRAY="\[$($TTY && /usr/bin/tput setaf 8)\]"
RESET="\[$($TTY && /usr/bin/tput sgr0)\]"
function prompt_command {
local TIMESTAMP="${BOLD}${COLOR_GRAY}\D{%d/%m %H:%M:%S}${RESET}"
local CURPWD="${BOLD}${COLOR_BLUE}${PWD/#${HOME}/~}${RESET}"
PS1="\n┌[${BOLD}\u@${COLOR_RED}\h${RESET}]─[${CURPWD}]\n"
PS1=${PS1}"└─"${TIMESTAMP}${BOLD}"-> "
}
PROMPT_COMMAND=prompt_command
17% so far
Funny browser: mouse multitouch, gestures, extensions, settings import, vpn, turbo, profile login – that’s all does not work. No Linux version. But tab management is really neat!
Strange things: there are 3 search engines pre-configured: google, Yandes and mail.ru. I am not located in the Russia though!
If your organization uses Google Apps as mail service but you are using Evolution, there is no evident way to view and edit shared group calendars until recent versions. To add group calendar you need: