| 00:51.58 | *** join/#fredlug jduncan (~jduncan@pool-96-248-11-23.rcmdva.fios.verizon.net) |
| 01:29.41 | ggd_road | hey jduncan |
| 01:30.00 | jduncan | what's up ggd? fun monday? |
| 01:33.36 | ggd_road | no still in richmond |
| 01:34.35 | jduncan | for fun i hope? If you're looking for killer food hit up Mekong on Broad St. :) |
| 01:35.06 | ggd_road | actually glen allen |
| 01:35.13 | jduncan | close enough. |
| 01:35.15 | ggd_road | fun.. no wifey had surgery |
| 01:35.25 | jduncan | food isn't as good up there. |
| 01:35.31 | jduncan | oh man that sucks. everything kosher?! |
| 01:35.42 | ggd_road | well as kosher as it can get |
| 01:36.35 | jduncan | true. |
| 01:36.47 | jduncan | how much longer are you in town? |
| 01:37.08 | ggd_road | untll tomarrow afternoon ish |
| 01:37.38 | jduncan | gotcha |
| 01:37.51 | ggd_road | how goes it for you |
| 01:38.49 | jduncan | not bad. blessedly quiet Monday. had an interesting conversation i'm cranking out a blog post about now. |
| 01:39.08 | jduncan | and watching my fantasy football team lose b/c of the Chargers. |
| 01:39.21 | ggd_road | lol FF? |
| 01:39.46 | jduncan | sure. I've got Chambers, the SD receiver, and you can smell the Chargers stink from here. |
| 01:40.04 | ggd_road | LOL |
| 01:40.16 | ggd_road | isn't it time to get some lysol then? |
| 01:40.22 | ggd_road | or fabreeze? |
| 01:40.22 | jduncan | hehehe |
| 01:41.02 | ggd_road | :) |
| 01:41.45 | ggd_road | anything else going on? |
| 01:41.54 | ggd_road | hey plarsen |
| 01:41.59 | ggd_road | benji, |
| 01:42.02 | ggd_road | jsmith-away, |
| 01:42.05 | ggd_road | Moe__, |
| 01:44.56 | Moe__ | hello |
| 01:45.32 | Moe__ | ggd_road: you rang? |
| 01:45.48 | ggd_road | how goes it tonight? |
| 01:45.57 | Moe__ | pulling my hair out |
| 01:46.09 | ggd_road | why? |
| 01:46.10 | Moe__ | Directory services and SSL is killing me |
| 01:46.32 | Moe__ | all of a sudden my ds wont start |
| 01:46.46 | Moe__ | had to rebuld it but it wont take the damn cert |
| 01:46.52 | Moe__ | I filed a bug report |
| 01:47.51 | ggd_road | thats a good start.. and asking perhaps in here might help too |
| 01:48.10 | Moe__ | checkout 750408 |
| 01:48.28 | Moe__ | its not very verbose but its all I have too work with |
| 01:49.01 | Moe__ | this all start from me wanting to get my gateway touch screen to work |
| 01:49.04 | Moe__ | :) |
| 01:49.54 | ggd_road | where is the bug filed red hat? |
| 01:50.04 | Moe__ | yeah |
| 01:50.58 | ggd_road | hey Moe__ were you at the last meeting |
| 01:50.59 | ggd_road | ? |
| 01:51.33 | Moe__ | no I want |
| 01:51.36 | Moe__ | wasnt^ |
| 01:51.57 | ggd_road | ahh |
| 01:52.51 | Moe__ | do you know anything about RDS? |
| 01:53.00 | ggd_road | not really |
| 01:53.09 | ggd_road | perhaps jduncan or plarsen can help? |
| 01:53.14 | Moe__ | all of my friends are clickastrators |
| 01:53.31 | ggd_road | a who? |
| 01:53.39 | Moe__ | clickastrators |
| 01:53.43 | Moe__ | M$ admins |
| 01:53.48 | ggd_road | the eveil empire? |
| 01:53.51 | ggd_road | evil |
| 01:54.45 | Moe__ | the good thing is, my radius server can still authenticate wireless. It can access ldap without TLS |
| 01:55.13 | ggd_road | so you do almost extensive FOSS? |
| 01:55.22 | Moe__ | all of my clients are using cached credentials for login |
| 01:55.29 | Moe__ | I try to |
| 01:55.38 | Moe__ | at work im part of the evil empire |
| 01:55.45 | ggd_road | LOL oh me too |
| 01:55.47 | ggd_road | i hate it |
| 01:55.50 | Moe__ | but im the only certified Linux admin on the team |
| 01:55.56 | ggd_road | rhce? |
| 01:56.03 | Moe__ | RHSCA |
| 01:56.06 | ggd_road | nice |
| 01:56.08 | Moe__ | still working on the CE |
| 01:56.09 | ggd_road | i want to get mine |
| 01:56.51 | ggd_road | so i can show my folks that i know a thing or two |
| 01:56.53 | ggd_road | LOL |
| 01:56.54 | Moe__ | I tried getting help in the #389 room but I think that they are all asleep |
| 01:57.22 | ggd_road | fedora room? |
| 01:57.48 | jduncan | the CE doesn't address 389 specifically, just openldap. |
| 01:57.51 | jduncan | FWIW |
| 01:57.52 | Moe__ | #389-ds is the upstream version of RDS |
| 01:58.21 | jduncan | yeah. |
| 01:58.38 | Moe__ | jduncan: correct im actually shocked that they dont push RDS in their coarses |
| 01:58.51 | Moe__ | thye stick to openldap like you said |
| 01:59.02 | jduncan | Moe__: They do, just in the 400's. :) |
| 01:59.09 | jduncan | it's its own class. |
| 01:59.13 | jduncan | or 2, lol.' |
| 01:59.32 | Moe__ | did you take it by chance? |
| 02:00.01 | jduncan | lol, the CE? yes. 4xx for RDS? nah. we use openldap. |
| 02:00.32 | Moe__ | ahh |
| 02:00.33 | Moe__ | lol |
| 02:01.02 | Moe__ | ive been working on the problem all day |
| 02:01.08 | jduncan | i hate those headbangers. |
| 02:01.22 | jduncan | 10:1 it's gonna' end up being a hanging semi-colon somewhere. |
| 02:01.24 | jduncan | lol |
| 02:01.33 | Moe__ | if I force my clients into FALLBACK mode I can get them to talk to ldap |
| 02:01.54 | Moe__ | no SSL involved |
| 02:02.14 | jduncan | so you can localize it to the 389 code/config, and not your database itself, at least. |
| 02:02.22 | jduncan | </glass_half_full> |
| 02:02.26 | Moe__ | but doing that breaks the authconfig gui |
| 02:02.36 | ggd_road | zabbix jduncan ? |
| 02:02.55 | jduncan | ??? |
| 02:03.26 | ggd_road | could it help? ( just curious) |
| 02:03.43 | Moe__ | zabbix is just monitoring software isnt it? |
| 02:04.36 | jduncan | ah. I've got dozens of hooks into ldap in our environment. could it help in 30 minutes? i seriously doubt it. |
| 02:04.52 | jduncan | this is gonna' be found in a log file, probably? |
| 02:05.13 | Moe__ | client - server? |
| 02:05.24 | Moe__ | or application - server? |
| 02:05.41 | jduncan | all of the above |
| 02:05.53 | jduncan | we had tons of issue with replication across a cross-country VPN. |
| 02:05.57 | Moe__ | what clients are you using RHEL? |
| 02:06.46 | jduncan | yeah, RHEL |
| 02:07.16 | Moe__ | what do you use to manage your ldap server? cli? |
| 02:07.59 | jduncan | mostly a batch of bash/py scripts. Also Apache's horrible Eclipse thing as well. |
| 02:08.36 | Moe__ | any plan to move to RDS? |
| 02:10.10 | jduncan | nah. we're big into the Atlassian software stack, and use their Crowd for our SSO. works pretty well. we also have a little WebPy GUI to allow people to reset their passwords, etc. |
| 02:11.46 | ggd_road | atlassian software stack? |
| 02:12.39 | Moe__ | sound like that setup was highly customized |
| 02:13.37 | jduncan | yeah, Atlassian makes Jira, Confluence, Fisheye, etc. Java collaboration apps. |
| 02:13.46 | jduncan | Moe__: massively, and before my time, lol. |
| 02:14.02 | Moe__ | I hope someone knows that stuff inside out |
| 02:14.02 | jduncan | LDAP is the golden source. Crowd reads from it and writes to it on occassion. |
| 02:14.44 | jduncan | LDAP didn't need any customization. Crowd is cake. The WebPy app is going away as soon as I can rewrite it in Django, lol. |
| 02:15.00 | jduncan | happily our CIO is anal about documentation as well, lol. |
| 02:16.41 | ggd_road | question Moe__ |
| 02:16.44 | ggd_road | about ldap |
| 02:16.52 | ggd_road | since you work woth M$ |
| 02:16.54 | ggd_road | with |
| 02:17.04 | Moe__ | ok |
| 02:17.18 | ggd_road | if i bind my ad account to ldap does that break my ad account? |
| 02:18.13 | Moe__ | so your account lives in AD and you want to sync it to LDAP? |
| 02:18.38 | ggd_road | well i want to use my AD account to log into linux apps |
| 02:18.43 | ggd_road | that user lda |
| 02:18.46 | ggd_road | ldap |
| 02:20.44 | Moe__ | you will have to setup SAMBA |
| 02:20.56 | ggd_road | ok.. i have an openfire server |
| 02:20.57 | Moe__ | I havent dont it yet though |
| 02:20.58 | ggd_road | as well |
| 02:21.06 | Moe__ | that will be my next project |
| 02:21.28 | ggd_road | SAMBA? |
| 02:22.01 | Moe__ | SAMBA can handle kerberos authentication |
| 02:22.08 | Moe__ | which AD uses |
| 02:23.01 | ggd_road | yea |
| 02:24.09 | Moe__ | https://www.linux.com/learn/tutorials/442411-unite-your-linux-and-active-directory-authentication |
| 02:25.31 | Moe__ | got to run see you guys later |
| 02:29.19 | ggd_road | :) |
| 02:36.01 | jduncan | holy crap! I'm gonna' get to sleep before 11! |
| 12:36.07 | *** join/#fredlug jduncan (~jduncan@pool-96-248-11-23.rcmdva.fios.verizon.net) |
| 17:29.27 | *** join/#fredlug GGD (~ggd_home@pool-173-72-204-39.clppva.fios.verizon.net) |
| 18:34.32 | GGD | hey stickster |
| 21:27.12 | plarsen | puts on his newly acquired RHCE hat |
| 21:45.30 | stickster | congrats!!! |
| 23:08.28 | *** join/#fredlug Moe__ (~MJames@c-71-62-116-235.hsd1.va.comcast.net) |