Search results for "meeting" - WLUG

Re: [Wlug] Dec 12: Identity Management: FreeIPA, SSSD, Kerberos, etc.

by Higgins, Benjamin John

Chuck: Wow - a meeting my wife will let me attend :) I also think " FreeIPA + Kerberos" is likely the best topic. Thanks! --b -- Benjamin J. Higgins ('97), JNCIA-Junos | bjhiggins(a)wpi.edu Network Engineer | Office 508.831.4860 Worcester Polytechnic Institute | Cell 508.713.1739 -----Original Message----- From: wlug-bounces(a)mail.wlug.org [mailto:wlug-bounces@mail.wlug.org] On Behalf Of Chuck Anderson Sent: Monday, November 30, 2015 10:54 AM To: wlug(a)wlug.org Subject: [Wlug] Dec 12: Identity Management: FreeIPA, SSSD, Kerberos, etc. I have an offer from Dmitri Pal, Engineering Director at Red Hat, Inc., to come to WLUG on December 10 and give a talk on Identity Management. He asked which of the following topics people would be interested in: "FreeIPA - I go over problem space and talk about what IPA does and how it solves the problems - about an hour with Q&A. AD [Microsoft Active Directory] integration I can give an overview of the AD integration options and talk about best practices there - about an hour with Q&A. Application integration - is about how to build applications integrated with different authentication methods out of box - 40-50 min with Q&A. I can combine. I also can talk about Kerberos and explain how it works and how it can be used for SSO [Single Sign-On]." I was thinking FreeIPA + Kerberos which would fit nicely into our usual 2 hour meeting slot and provide a nice introduction to the topic, but let me know if the other topics are of more interest. Time is running short, so respond quickly! Thanks, Chuck _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

10 years, 2 months

Re: [Wlug] meeting topic

by Jared Greenwald

Yep, I'm pretty sure that was the graphical installer. Normally, for a stage1 install there is a 60M cd image that boots and has only command-line, but has many drivers that would be needed for a wide range of system installs. This method has an install guide of 7-8 webpages (the handbook) that walk you through everything from installing the basic packages to building a kernel and then setting up grub. The only complicated part is setting the CFLAGS and USE variables. -Jared On 1/31/06, Mike Leo <mleo963(a)yahoo.com> wrote: > I did not try ( or know of) a graphical installer... > > i booted off the "livecd" and walked through the handbook to install....then gave up... > > thanks for the feedback anyway. > > --- Greg Labonte <gbonte(a)WPI.EDU> wrote: > > > Just wondering Mike, Did you try using the Graphical installer for > > Gentoo? > > > > > > > On 1/30/06, Mike Leo <mleo963(a)yahoo.com> wrote: > > >> Am I wrong, or is the gentoo install insanely comlicated? > > >> > > >> Although I did not sit in front of it from start to finish, it > > >> seems like an install takes hours > > >> and hours of work... > > >> > > >> I followed the Handbook (some 80 pages of documentation), which > > >> i'm sure is very accurate and each > > >> step worked as advertised, but in the end it was too much. > > >> > > >> After an install of debian, which takes me less than 20 minutes, > > >> this was too much for my poor > > >> little brain to take, and I eventually gave up. > > >> > > >> In addition to that, I can't for the life of me, get slackware to > > >> consistantly install lilo > > >> correctly during the install. > > >> > > >> Any comments on either of these would be apreciated, however, I am > > >> just writing this to toss my > > >> vote in for a linux install fest as a meeting topic. > > >> > > >> I have no problem bringing in a laptop to show the simple, > > >> eligant, streamlined, 20 minute debian > > >> install, but I would like to also see someone go through a gentoo > > >> install, and assist on a > > >> slackware lilo config...all of which can be done via my laptop if > > >> needed. > > >> > > >> Thanks ! > > >> Mike > > >> _______________________________________________ > > >> Wlug mailing list > > >> Wlug(a)mail.wlug.org > > >> http://mail.wlug.org/mailman/listinfo/wlug > > >> > > > > > > _______________________________________________ > > > Wlug mailing list > > > Wlug(a)mail.wlug.org > > > http://mail.wlug.org/mailman/listinfo/wlug > > > > _______________________________________________ > > Wlug mailing list > > Wlug(a)mail.wlug.org > > http://mail.wlug.org/mailman/listinfo/wlug > > > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

20 years

Re: Meeting THIS WEEK, July 10th, 2025! Topic: ?TrueNAS? Pi Kiosk displays?

by John Stoffel

>>>>> "Kevin" == Kevin Stratton via WLUG <wlug(a)lists.wlug.org> writes: > I am interested in a pihole as well. I also just got an N150 mini pc for things like this. I am > particulary interested in doing this with docker images. When I tried to install a docker > recursive DNS server that I trust, It needed a Email address, which I did not want to place on my > internet email provider. So now I have to install a EMail server for pihole. (recusion sucks). > Another area of interest for me might be the consequences of CGNET > (if any) for a DYNDNS setup for a personal home page and similar > things. There is a small possibility that I will have fiber > available in the next couple of months and the provider apparently > uses CGNET. I use dyndns for my stoffel.org domain, so I have a couple of records in there, two are dynamic DNS which means the router at the remote location will send out updates if the WAN site IP changes. This makes it nice to get home via SSH if need be. What I'd like to see is a discussion on setting up and using wireguard to access home system(s) or networks from remote locations. I started playing with it, but got bogged down and never made any progress. I'm using OPNsense as my home firewall. And of course testing remote access is a pain. I've got wireguard on my phone, but haven't made the testing part work quite yet.

6 months, 3 weeks

Re: [Wlug] Upcoming meeting topic(s)

by Eric Martin

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm using Kgpg and I can't see the pic either. Theo Van Dinter wrote: > On Wed, Mar 28, 2007 at 12:32:39AM -0400, Keith Wright wrote: >>> I have a photo on my two current keys if you want to >>> check it out: E580B363 and 45D60F57. :) >> I would love to "check you out", but all I see are >> a couple of eight digit hex numbers. Where's the picture? >> >> ( Stupid questions are an intentional ploy to make somebody >> volunteer to explain it all. ) > > I would volunteer, but I don't live near Worcester anymore. :| > >> PS: OK, OK. I admit it. It's not just a ploy, I really >> am too stupid to find the picture. > > :) > > Generally speaking, it's: > > gpg --edit-key <keyid> > showphoto > > On my Mac, it pops up Preview with the jpg. You could also do: > > gpg --list-key --list-options show-photos <keyid | userid | ...> > > In theory it should work on Linux in X as well, though you may need to set > "--photo-viewer". "man gpg" is helpful, look for "photo". :) > > There may be GUI tools out there to deal with the keys as well. I'm a fan of > the CLI. > > > > ------------------------------------------------------------------------ > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGCk0faI8VEtSi4H8RAlFuAKCSwuzHvEx5U8wzapevHz9DtP7I4wCfc0gR f0R4hZUUr3brLoe88XsSRz8= =LBxX -----END PGP SIGNATURE-----

18 years, 10 months

Re: [Wlug] WPI Exchange Help

by Kurt Snieckus

On the WPI mail system mail first goes to the unix mail servers, and then gets forwarded to exchange. If you want you can keep the mail from being forwarded to exchange by changing the forwarding settings here: http://www.wpi.edu/Academics/CCC/Services/mailforward.html I forget exactly what I did, but it didn't work quite right, beacuse mail sent from other user's exchange accounts went to the exchange account instead of staying in the unix account. But if you e-mail the Helpdesk they can fix it for you. This then lets you use imap.wpi.edu, pop.wpi.edu, and webmail.wpi.edu/squirrelmail (And i think you can just login to ccc.wpi.eduand type pine and read your mail as well) If you'd like in-person help the Free Software Association tries to have meetings at 6pm on Tuesdays in the lounge on the 3rd floor of Fuller. E-mail owner-fsa(a)wpi.edu to get meeting announcements. -Kurt On Tue, Apr 7, 2009 at 11:39 PM, <tedshipper(a)gmail.com> wrote: > So I'm new to the Linux community and I could use a little help. I'm trying > to setup exchange to work through Evolution Mail on Ubuntu 8.10. I can't > seem to set it up correctly. I feel like i have all the necessary info like > the OWA URL, which I think is https://exchange.wpi.edu/owa/ . Please > advise as to whether I need to specify the DOMAIN\User which doesn't work or > if there is a better client for setting up exchange at WPI. > Thanks, > > Ship > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > >

16 years, 9 months

Re: Hey Everybody! WLUG Meeting this week!

by John Stoffel

>>>>> "Gregory" == Gregory Boyce <gregory.boyce(a)gmail.com> writes: > On Mon, Jun 10, 2024, 2:42 PM John Stoffel via WLUG <wlug(a)lists.wlug.org> wrote: >>>>>> "Tim" == Tim Keller <turbofx(a)gmail.com> writes: >> Currently we're having issues getting the Turing Pi 2 to boot, so >> doing a show off of Proxmox I could definitely do as well. > I'ev got proxmox running at owkr with some basic VMs on it for > testing. I might be able to show it off doing some basic stuff like > live migrations. > I recently switched my home server to proxmox, and I've been > spending time using terraform and packer to build and deploy VMs. Are you running a cluster or just one system? I've got a three node cluster at $WORK, but thinking of looking at their SCALE product. But of course while VMware is going to shaft us pricewise, the manglement might not want to leave the devil they know. Another issue is deploying OVA files. I find that ProxMOX is a pain in terms of .iso and .ova files, you need to first add them into it's own repository, then you can deploy from them. VMware just lets you browse for the files and deploy. Though I also admit that .ova deployments can be annoyingly tough, but I'm running VCenter 7.0.x and a mix of ESXi 6.7 and 7.0 on my systems. Legacy hardware which I can't move up. Another reason to hate vendor designed stuff, it locks you in. > I'd be happy to share code if anyone is interested. Please do!

1 year, 7 months

Re: [Wlug] Major WPA2 Vulnerability

by Keith Wright

"Sweetser, Frank E" <fs(a)WPI.EDU> writes: > Nothing so simple, unfortunately. This class of vulnerability is > actually a collection of 10 CVEs, which encompass both the AP side and > client side. If you've patched the AP side, for example, the attacker > may still be able to compromise the set of session keys on the client > side, and decrypt all of the client sent traffic. > You've got to patch both sides to be fully secure. You've got to avoid computers to be fully secure. But let's not get that paranoid. I pulled Cat 5 cable through the house years ago and never use wireless, but WPI has its hair on fire, and sent Professor Diane email (through Microsoft cloud service) to install "upgrades" immediately. I told her to at least wait until she has her computer back in the office and plugged into WPI cable. I have a friend who has been without a computer for a month or two because he tried to upgrade firmware and could not re-boot. This is very embarrassing for the authors of the standard, but is it really a big problem? Several meetings ago, somebody brought a device to the WLUG meeting that, as I understood it, pretends to be a wireless router and interposes itself into any nearby connection. If things like that exist, why care about encryption vulnerability? If you need to patch both sides to be secure, then you are not secure in the coffee shop no matter what you do. In any case, if you are using the wireless to connect to a web site or "cloud" server, then the wireless connection is the least of your insecurities. -- Keith

8 years, 3 months

Re: Reminder: Virtual meeting, October 15th, 2020!

by Chuck Anderson

On Thu, Oct 15, 2020 at 05:59:12PM -0400, Keith Wright via WLUG wrote: > I don't know what the package is for, but somebody on this list > said that it should work just to put the link into a browser, > so I plan to try it tonight. I'll reoort back to this list. > > I have never used the camara or microphone on this laptop, > I don't know if I have used used sound output, it was long > ago and might have been a different machine, > > Is video chat built into the browser now? Yes, video chat is built into all modern browsers. They call it "HTML5" and "WebRTC". > What exactly does Zoom or jit.si do then? It starts up a WebRTC session over HTTPS to the jit.si server using your microphone and camera to send your video/audio, while the web server jit.si sends the video/audio of all the other participants back to your browser. Each participant appears as a small video window in a "grid" on the web page. So the server acts as a "video router". > And what's in that Debian jit.si package? I haven't looked at the Debian package, but since the server side of jitsi is open source (the client side is open source if you use Firefox or Chromium or similar to access the server), I'd imagine that the Debian package contains the server code. jit.si the web site runs the open source code from jitsi.org. Anyone can run their own web server for people to connect to for creating their own video conference: https://jitsi.org/what-is-jitsi/

5 years, 3 months

Re: [Wlug] Dec 12: Identity Management: FreeIPA, SSSD, Kerberos, etc.

by Chuck Anderson

Sorry, I keep typing the wrong date. It is Thursday December 10th. I'm finalizing with Dmitri now. On Mon, Nov 30, 2015 at 05:50:07PM -0500, James Gray wrote: > This will be on December 10th? I only ask to confirm as the subject line of > the email mentions the 12th. > > Sounds like some great topics! > > On Mon, Nov 30, 2015 at 5:03 PM, Tim Keller <turbofx(a)gmail.com> wrote: > > > Chuck, > > > > Thanks for organizing this with Dmitri! I'll send out the meeting notice > > asap! > > > > Thanks, > > Tim. > > > > On Mon, Nov 30, 2015 at 11:00 AM, thinkbrown(a)gmail.com < > > thinkbrown(a)gmail.com> wrote: > > > >> I also think that FreeIPA and Kerberos is the best combo there > >> > >> Logan > >> On Nov 30, 2015 10:59 AM, "Higgins, Benjamin John" <bjhiggins(a)wpi.edu> > >> wrote: > >> > >>> Chuck: > >>> Wow - a meeting my wife will let me attend :) I also think " FreeIPA + > >>> Kerberos" is likely the best topic. Thanks! > >>> > >>> --b > >>> -- > >>> Benjamin J. Higgins ('97), JNCIA-Junos | bjhiggins(a)wpi.edu > >>> Network Engineer | Office 508.831.4860 > >>> Worcester Polytechnic Institute | Cell 508.713.1739 > >>> > >>> > >>> > >>> -----Original Message----- > >>> From: wlug-bounces(a)mail.wlug.org [mailto:wlug-bounces@mail.wlug.org] On > >>> Behalf Of Chuck Anderson > >>> Sent: Monday, November 30, 2015 10:54 AM > >>> To: wlug(a)wlug.org > >>> Subject: [Wlug] Dec 12: Identity Management: FreeIPA, SSSD, Kerberos, > >>> etc. > >>> > >>> I have an offer from Dmitri Pal, Engineering Director at Red Hat, Inc., > >>> to come to WLUG on December 10 and give a talk on Identity Management. > >>> > >>> He asked which of the following topics people would be interested in: > >>> > >>> "FreeIPA - I go over problem space and talk about what IPA does and > >>> how it solves the problems > >>> - about an hour with Q&A. > >>> > >>> AD [Microsoft Active Directory] integration I can give an overview > >>> of the AD integration options and talk about best practices there > >>> - about an hour with Q&A. > >>> > >>> Application integration - is about how to build applications > >>> integrated with different authentication methods out of box > >>> - 40-50 min with Q&A. > >>> > >>> I can combine. > >>> > >>> I also can talk about Kerberos and explain how it works and how it > >>> can be used for SSO [Single Sign-On]." > >>> > >>> I was thinking FreeIPA + Kerberos which would fit nicely into our usual > >>> 2 hour meeting slot and provide a nice introduction to the topic, but let > >>> me know if the other topics are of more interest. Time is running short, > >>> so respond quickly!

10 years, 2 months

Re: Reminder!!! *NO* Meeting tomorrow

by John Stoffel

>>>>> "Keith" == Keith Wright via WLUG <wlug(a)lists.wlug.org> writes: Keith, I hope you're staying cool! > John Stoffel via WLUG <wlug(a)lists.wlug.org> writes: >> What a great meeting last week! A big shout out to Xavier for doing >> his presentation on NixOS! Hopefully Tim will be able to share the >> links to the slides and other info. > Yes, thank you. I would like to review the slides. >> We talked about: >> >> NixOS >> >> - A tool and environment for building systems in a deterministic >> manner. Sorta like Ansible, or Puppet, or Chef, or Salt or >> cfengine (old school!) or Terraform. > I don't know what any of those are. I was comparing it to apt-get, rpm, > yumm and, of course guix. I think I heard Xavier say something about > teamwork between Nix and guix, which would be good because I don't think > we need $2^n$ incompatible package managers. So think of those tools listed above as the next step up in abstraction to managing groups of packages and entire system level configuration. So I use Ansible and I tell it to install a bunch of packages, and then ansible uses apt or dpkg to do the actual install. Ansible (or terraform, salt, chef, puppet, etc) are all tools for bringing systems into alignment with your specifications. They add/remove packages, make updates to configurations, etc. NixOS is more like apt and rpm, with the idea that (as I understand it) you have a much more reproducable set of packages that are cryptographically proveable to be the same. Not so much from a signed with a key, but more in the form of hashes that track state all the way back to the source package. > I looked up NixOS, expecting to see a lot of cartoons. Where did those > cartoons come from and are they "official"? I don't know. Maybe Xavier or somethinh with the slides can chime in here? >> And what are the feelings of those who are remote? > I feel lumpy; like a cucumber. LOL! >> Were you able to follow along and enjoy the talk? > The first half-hour or so was near intolerable, but then the noise > stopped and the camera stopped bouncing and all was good. Yeah, the noise in the usual conference room was crazy. And I just found another tool which I think Xavier was using in his shell. Take a look at 'starship': https://starship.rs/ which I find funky because it requires you to have Nerdfonts (https://www.nerdfonts.com/) installed. Which honestly seems like a step backwards, just like Emojis are a step backward. Yes, it's fun to have and know the meaning (or supposed meaning!) of a special graphical image, but it really feels like we're going back to Egyptian Heiroglyphics. Which means you have to memorize hundreds or thousands of individual characters to make words. And then you still have to join them together into bigger chunks. The power of the Roman (or other smaller alphabets) to me is that you have a smaller number of pictographs or letters to know, which you can string together into larger concepts more easily. This is ignoring language and pronounciation issues of course. Ah well, enough ranting, it's gonna be another scorcher today, so stay cool everybody! John

7 months, 1 week

WLUG search results for query "meeting"