3,470 reputation
822
bio website
location
age
visits member for 5 years, 2 months
seen 2 days ago

Apr
15
comment Tuning Apache For mid-sized site
Is your system fully patched?
Mar
6
comment Is there any reason to keep the “Server” response header in Apache
Why volunteer version information? I always set "ServerSignature Off" and "ServerTokens Prod". Also agree that keeping your web servers up to date is the only real protection. If you don't remove the version information and submit to a third-party penetration test they are sure to flag this as "Information Leakage".
Mar
6
revised Having trouble starting/restarting httpd (apache)
edited title
Mar
5
comment Improve Disk Performance of a Linux 2.4 Guest on KVM Host
Which distribution of Linux is your 2.4 guest?
Jan
29
comment CentOS 5.8 - The most difficult MySQL installation ever?
You can change the MySQL root password using the --init-file method described here: dev.mysql.com/doc/refman/5.0/en/resetting-permissions.html . Also agree that you are making it complicated by not using the distro repo
Jan
27
revised Does high traffic on HTACCESS affect the server?
deleted 2 characters in body; edited title
Dec
19
accepted Using FreeIPA for centralized sudo - using SSSD for sudoers
Dec
19
comment Using FreeIPA for centralized sudo - using SSSD for sudoers
It is working now. I was messing around a lot with different switches to ipa-client-install (after doing an uninstall) and got my sssd.conf mixed up with another host I was also testing on. I think - but can't say for sure - that when I first reported this it was using the correct ldap_sasl_authid host but perhaps it wasn't. Anyway, I learned a lot in debugging this, thanks for your help.
Dec
19
comment Using FreeIPA for centralized sudo - using SSSD for sudoers
I've added UPDATE 3 with the sssd_sudo.log output at debug_level = 8 (cuts out some noise). The sudo-debug.log produced 1500 lines of output, can you narrow it down to what to look for? Anyway, it looks like SSSD can't find any rules (i.e. my All rule). But why?
Dec
19
revised Using FreeIPA for centralized sudo - using SSSD for sudoers
added 4054 characters in body
Dec
19
comment Using FreeIPA for centralized sudo - using SSSD for sudoers
Yes, nisdomainname is set. Again it all works if I am using "sudoers: files ldap" in /etc/nsswitch.conf
Dec
19
comment Using FreeIPA for centralized sudo - using SSSD for sudoers
I am using CentOS/RHEL 6.5.
Dec
18
comment Using FreeIPA for centralized sudo - using SSSD for sudoers
Thanks for your reply but I've seen that post.
Dec
12
revised Using FreeIPA for centralized sudo - using SSSD for sudoers
added 778 characters in body
Dec
11
revised Using FreeIPA for centralized sudo - using SSSD for sudoers
edited body
Dec
11
revised Using FreeIPA for centralized sudo - using SSSD for sudoers
added 607 characters in body
Dec
11
asked Using FreeIPA for centralized sudo - using SSSD for sudoers
Dec
10
comment Using FreeIPA for centralized sudo - how to specify ALL commands?
Agreed, I finished off the rule in the Web UI.
Dec
10
accepted Using FreeIPA for centralized sudo - how to specify ALL commands?
Dec
10
comment Using FreeIPA for centralized sudo - how to specify ALL commands?
The rule didn't exist by default and it took a little bit of work to get a rule that matched yours, i.e. "%admins ALL=(ALL) ALL" but I think I'm on the path of enlightenment now. Much appreciated, thanks!