=== abartlet_ [n=abartlet@dp.samba.org] has joined #ubuntu-directory | ||
lophyte | ajmitch: isn't it | 12:51 |
---|---|---|
=== lionelp [n=lionel@ip-128.net-82-216-65.rev.numericable.fr] has joined #ubuntu-directory | ||
=== Fujitsu [n=Fujitsu@ubuntu/member/fujitsu] has joined #ubuntu-directory | ||
=== Burgwork [n=corey@ubuntu/member/burgundavia] has joined #ubuntu-directory | ||
=== lophyte [n=dsulliva@bas5-toronto63-1096731182.dsl.bell.ca] has joined #ubuntu-directory | ||
robertj__ | ajmitch: should make the relative necessity of hiring a small contingent to work on -directory full-time an easier pitch eh ;) | 02:41 |
ajmitch | sure | 02:42 |
ajmitch | as if that'll happen :) | 02:42 |
=== pressureman [n=pressure@210.48.105.162] has joined #ubuntu-directory | ||
=== pressureman [n=pressure@210.48.105.162] has left #ubuntu-directory [] | ||
=== bmonty [n=bmontgom@ubuntu/member/bmonty] has joined #ubuntu-directory | ||
nkassi_ | Hey folks | 03:27 |
ajmitch | hello | 03:28 |
nkassi_ | So will edubuntu just do there own thing ? | 03:29 |
ajmitch | we'll discuss that next week | 03:29 |
nkassi_ | oh at the Ubuntu Summit ? | 03:29 |
ajmitch | yes | 03:29 |
nkassi_ | ah | 03:29 |
nkassi_ | Using the samba.schema isn't a bad idea. Of course smbldap will be obsolete as soon as Samba 4 is out ,already pointed out I know, but including the schemaby default seems useful. | 03:34 |
abartlet_ | well, the transition from samba3 to samba4 schema will be a big thing, no matter how it's done... | 03:36 |
=== romey [n=stever@wsip-68-15-125-140.ok.ok.cox.net] has joined #ubuntu-directory | ||
nkassi_ | yeah, I guess so. But until then, samba3 seems like a nice enough temporary solution. The upgrade might hurt. | 03:37 |
abartlet_ | one other interesting approach could be a passdb backend for samba3 that reads the AD-like schema | 03:39 |
nkassi_ | uhm, never heard of that one beford | 03:40 |
nkassi_ | before | 03:40 |
=== wasabi [n=wasabi@ubuntu/member/wasabi] has joined #ubuntu-directory | ||
abartlet_ | hi wasabi | 03:51 |
wasabi | hiya | 03:51 |
ajmitch | hello wasabi | 03:52 |
wasabi | hiya | 03:52 |
robertj__ | nkassi_: directory services are always going to hurt | 04:00 |
nkassi_ | I'm living through NT4 with win 2000 to AD with XP right now at work. It quite painful. ( I lost the war, their gui were better then mine) | 04:02 |
nkassi_ | But the pain from AD to Linux will feel like love ;0) | 04:02 |
robertj__ | what's so painful about AD? | 04:03 |
nkassi_ | It's mostly the amount of work required in cleaning up the old stuff. The file are shared using PC Netlink on a solaris box, lots of permissions are messed up. We just couldn't do a simple upgrade. Plus changing 300 desktop from 2k to XP and making sure all there files are on the san is work | 04:05 |
nkassi_ | AD isn't bad. It's just not what I'm used too. | 04:06 |
nkassi_ | Plus, I really don't have enough working experience with AD to pass judgment. | 04:09 |
=== romey [n=stever@wsip-68-15-125-140.ok.ok.cox.net] has joined #ubuntu-directory | ||
=== Burgundavia [n=corey@ubuntu/member/burgundavia] has joined #ubuntu-directory | ||
nkassi_ | what happened to termcap-compat ? It's refered to in the FDS install doc for ubuntu/ | 05:53 |
ajmitch | probably another rpm they want you to convert | 05:54 |
nkassi_ | hum, no it doesn't seem so. | 05:54 |
nkassi_ | http://directory.fedora.redhat.com/wiki/Howto:DebianUbuntu | 05:55 |
nkassi_ | oh it seems to not be part of edgy's universer | 05:56 |
nkassi_ | -r | 05:56 |
nkassi_ | https://launchpad.net/distros/ubuntu/+source/termcap-compat | 05:57 |
nkassi_ | I found the .deb but the Fedora folks will have to update their docs | 05:59 |
nkassi_ | Of course it depends on libc5 which is also not available. | 06:00 |
nkassi_ | oh well no FDS for me I guess. | 06:02 |
abartlet_ | nkassi_: I think it's a wiki, so you should be able to update it (with variable amounts of pain to get an account) | 06:34 |
=== fernando [n=fernando@unaffiliated/musb] has joined #ubuntu-directory | ||
fernando | morning all | 01:02 |
=== robertj [n=rcaskey@cai17.music.uga.edu] has joined #ubuntu-directory | ||
lophyte | morning | 02:19 |
fernando | hi lophyte | 02:20 |
=== SimonAnibal [n=sruiz@66.244.123.100] has joined #ubuntu-directory | ||
lophyte | hiya | 02:47 |
SimonAnibal | howdy | 02:55 |
SimonAnibal | So, how bout that Microsoft and Novell deal? | 02:56 |
lophyte | yeah, really... | 02:58 |
SimonAnibal | The NYTimes article I read was very vague | 02:59 |
SimonAnibal | one thing that bothered me was: "As part of the agreement, Microsoft said it would not file patent infringement suits against customers who purchase Novells SuSE Linux." | 02:59 |
lophyte | yeah | 02:59 |
lophyte | what happens if they develop this joint technology and Microsoft pulls out of the deal? | 03:00 |
lophyte | then do they have the right to sue the ass off of Novell? | 03:00 |
lophyte | or their customers | 03:00 |
fernando | I don't believe in Santa Claus anymore. | 03:03 |
SimonAnibal | So...question is, if Microsoft and Novell jointly integrate their stuff, is it going to be MORE DIFFICULT, at least in the U.S., for Ubuntu to integrate with AD? | 03:04 |
lophyte | maybe, maybe not | 03:04 |
SimonAnibal | What, with "patent infringement" being bandied about like some sort of real possibility | 03:04 |
SimonAnibal | You know what this means for me is that our corporate people are going to want us to start using Novell | 03:05 |
lophyte | probably | 03:10 |
lophyte | gr.. I need a VGA male-to-male cable | 03:11 |
SimonAnibal | That's all we have over here | 03:27 |
SimonAnibal | (males are the ones with the wires sticking out, right?) | 03:27 |
nkassi_ | yep | 03:29 |
SimonAnibal | Hey, if I | 03:29 |
SimonAnibal | m subscribed to Planet Ubuntu, is that just an aggregator for other people's blogs (that is, can I just unsubscribe those people I had previously subscribed) | 03:30 |
lophyte | I think so | 03:31 |
SimonAnibal | cool | 03:31 |
=== stelis [n=se@82-71-4-26.dsl.in-addr.zen.co.uk] has joined #ubuntu-directory | ||
stelis | wasabi_: I think that NetworkAuthentication/Server and EasyLDAPServer are basically the same spec | 04:34 |
stelis | The EasyLDAPServer page talks about Kerberos, and has stuff about setup and management tools | 04:36 |
stelis | Although no specific recommendations for existing tools that could be reused | 04:37 |
wasabi_ | Yeah. I suspect they overlap. | 04:39 |
wasabi_ | I personally think "EasyLDAP" is a bit of a naive term to throw around though. | 04:39 |
stelis | I wasn't fond of it | 04:39 |
stelis | It was basically an empty spec that we occupied | 04:40 |
stelis | One thing that I was careful to do was emphasise that LDAP ought not be an auth system | 04:40 |
stelis | So the page explicits talks about using it in tandem with Kerberos | 04:41 |
stelis | Feel free to hack the EasyLDAP spec around to suit your requirements | 04:41 |
stelis | I noticed that your client auth spec talked about a Kerberos principal per machine | 04:42 |
stelis | Which I guess ties into having a record for each system in "EasyLDAP" | 04:43 |
stelis | https://wiki.ubuntu.com/EasyLDAPServer | 04:44 |
=== robertj [n=robertj@66-168-214-78.dhcp.athn.ga.charter.com] has joined #ubuntu-directory | ||
wasabi_ | stelis: My complaint with it is I would be very... maybe embarressed, to release a system which consisted of not much more than creation of a LDAP server. | 06:22 |
wasabi_ | This is something, which if we release, could be uptaken by really big shops. | 06:22 |
wasabi_ | They're going to expect us to have a schema in place, a supportable methodology to upgrade that schema. | 06:22 |
stelis | I agree about the big shops, but I figured that it might seem easier to sell/relate to for Ubuntu folks if I talked about small shops in the use cases | 06:24 |
stelis | Also I felt that if it was designed properly the underlying components would scale | 06:26 |
stelis | And different interfaces could be provided for different scales of deployment | 06:26 |
stelis | Again, the specs for interfaces emphasise the basic stuff that I thought would be more familiar to people | 06:27 |
stelis | Talking about federated authentication etc. might just sound like moon language | 06:28 |
stelis | But I am absolutely not an expert | 06:29 |
stelis | My own grand plans are more about system/host management | 06:30 |
stelis | What would like to see/do/implement? | 06:30 |
Burgwork | wasabi_: we need to consider that getting something that works is a first step | 07:00 |
=== em-dash [n=em-dash@63.145.207.195] has joined #ubuntu-directory | ||
wasabi_ | Burgwork: I sort of disagree, expecially when it comes to LDAP. | 08:05 |
wasabi_ | Which is something we need to maintain an upgrade path for. | 08:05 |
wasabi_ | Something which tends to be hard, with LDAP. | 08:05 |
wasabi_ | Y know, if we choose one schema, and it sucks, and doesn't take some stuff into account, and people deploy it... then we have to upgrade schema. | 08:06 |
wasabi_ | So, big scripts for schema migration, hacks made so old clients work with new schema versions. | 08:06 |
wasabi_ | It can get messy | 08:06 |
fernando | this is very common | 08:07 |
wasabi_ | I want to sit down and really think hard about it before commiting to anything. | 08:07 |
Burgwork | yep | 08:07 |
wasabi_ | MS did a very good job at it, and it took them 4 years. | 08:07 |
Burgwork | however, be aware that ogra is going to roll something out for Feisty for Edubuntu | 08:08 |
wasabi_ | And way more man power than we have. ;) | 08:08 |
Burgwork | come hell or high water | 08:08 |
wasabi_ | Yeah. I want to think about that though. Even it means commiting to one server, no replication, and an unsupported or complex upgrade path. | 08:08 |
wasabi_ | I want everybody to have in mind what we will have to maintain. | 08:08 |
wasabi_ | And it not to be a suprise. | 08:08 |
Burgwork | talk with ogra at MTV | 08:08 |
Burgwork | he has a plan | 08:08 |
wasabi_ | MS of course unleashed the entire thing, after 4 years. Cross realm auth, forests, mutlimaster repl, replicated schema updates. | 08:09 |
wasabi_ | schema locks, etc. | 08:09 |
wasabi_ | With the entire thing well planned out. | 08:09 |
wasabi_ | We can start smalll, but I don't want adding one of those to screw up everybodies install. =/ | 08:10 |
=== stelis [n=se@82-71-4-26.dsl.in-addr.zen.co.uk] has left #ubuntu-directory [] | ||
=== Burgwork [n=corey@ubuntu/member/burgundavia] has joined #ubuntu-directory | ||
SimonAnibal | Ya'll have a great weekend | 08:56 |
SimonAnibal | ciao! | 08:56 |
=== wasabi [n=wasabi@ubuntu/member/wasabi] has joined #ubuntu-directory | ||
=== orion_76520 [n=gaylord@mer76-1-82-235-196-94.fbx.proxad.net] has joined #ubuntu-directory | ||
=== orion_76520 [n=gaylord@mer76-1-82-235-196-94.fbx.proxad.net] has left #ubuntu-directory ["Kopete] | ||
=== robertj_ [n=robertj@68-117-223-205.dhcp.athn.ga.charter.com] has joined #ubuntu-directory | ||
=== SimonAnibal [n=sruiz@adsl-68-251-147-250.dsl.bltnin.ameritech.net] has joined #ubuntu-directory | ||
SimonAnibal | Anyone alive? | 12:01 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!