Comments for bits | andy smith's blog

Comment on The Great White North by andys

andys — Tue, 23 Feb 2010 18:04:20 +0000

Good luck to you too, dude!

Like I say, it’s all plans and speculation at the moment – it could be months, or (much more likely) it could be years – but if we don’t try I’ve got a feeling we’ll regret it later on in life.

Comment on The Great White North by Simon wheatcroft

Simon wheatcroft — Tue, 23 Feb 2010 11:26:32 +0000

Hey man, good luck with all this sounds exciting for sure.

It’s something me and sian have spoke about to. I am in the process of heading to uni to obtain a degree. So I am attacking at a slightly different angle to yourself. Who knows one day we may all be out there!

Comment on Authenticating Active Directory users on Linux with Likewise Open by andys

andys — Mon, 22 Feb 2010 14:57:54 +0000

Hi Yvo,

Thanks for that – I’ve updated the post with a link to your hint.

Cheers!

Comment on GnuPG – RSA key-pair mini-Howto with stronger digests by andys

andys — Mon, 22 Feb 2010 14:55:07 +0000

Hi Tyler,

I’ve just noticed that they are on mine, too. I reposted it from my old site, and I must have missed out a few lines when checking they all fitted in. I’ll update it later on today!

Cheers for the tip and for the feedback

Comment on GnuPG – RSA key-pair mini-Howto with stronger digests by Tyler Oderkirk

Tyler Oderkirk — Mon, 22 Feb 2010 04:05:40 +0000

Andy-

Thanks for posting this handy article – just what I needed. Nitpick: some examples were truncated in my Chrome+Linux environment. E.g “Command> setpref SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 Z”

Keep up the good work,

-Tyler

Comment on Authenticating Active Directory users on Linux with Likewise Open by Yvo van Doorn

Yvo van Doorn — Mon, 22 Feb 2010 01:02:30 +0000

If you want to get rid of the DOMAIN\ part…
edit the following file:
“vi /etc/likewise/lsassd.conf”
Find the line that says “assume-default-domain”
and set it to true or uncomment depending on the version of likewise.
It’s best to reboot after this just to deal with the change.
PS. This only works when your user account and computer account are part of the same domain

Comment on GnuPG – RSA key-pair mini-Howto with stronger digests by Tim Cuthbertson

Tim Cuthbertson — Sun, 14 Feb 2010 22:18:13 +0000

Thank you for an excellent article. I have been searching for two days for something to help me understand how to implement good and usable security keys. This article did it for me.

Tim

Comment on Authenticating Active Directory users on Linux with Likewise Open by andys

andys — Tue, 02 Feb 2010 17:20:19 +0000

Ooh… I wonder if it’s baulking at the backslashes.

You can specify usernames in the form user@domain (so tso940@domain in your example) – that might work?

Failing that, try just specifying the UID (again, in your case 1115247694).

Comment on Authenticating Active Directory users on Linux with Likewise Open by Jon

Jon — Tue, 02 Feb 2010 16:55:54 +0000

Thanks for the pointer.

We don’t usually configure users with more than 8 characters for application compatibility but I’ve changed my AIX 5.3 system to accept a 20 character user and although this works ok:

root@utajona2:/ # id domain\\tso940
uid=1115247694(domain\tso940) gid=1115161089(domain\domain^users) groups=1115243261(domain\cs-gpounrestricteduser),1115317722(domain\jlbrallowedrodcpasswordreplicationgroup),1115294180(domain\wrbrallowedrodcpasswordreplicationgroup),1115161766(domain\g_gpo-s-u^unres)

when I run the command to add my domain user to the local ldap group again, I get another (different) error:

root@utajona2:/ # usermod -G domain\\domain^users,domain\\cs-gpounrestricteduser,domain\\jlbrallowedrodcpasswordreplicationgroup,domain\\wrbrallowedrodcpasswordreplicationgroup,domain\\g_gpo-s-u^unres,ldap domain\\tso940

3004-687 User “domaintso940″ does not exist.

Something malformed there…

Jon

Comment on Authenticating Active Directory users on Linux with Likewise Open by andys

andys — Tue, 02 Feb 2010 14:50:34 +0000

Ah – I think that is the problem :-/

I’m not sure on the limit these days under Linux – a quick Google suggests at least 32 characters is fine.

This page seems to suggest that the limit in AIX was 8 character up until one of the 5.x releases, but it’s now 255 characters…