ROSA Server Setup

ROSA Enterprise Linux Server issues and questions
Правила форума
Dear server users! For help, questions and server support plese refer to bugzilla:
1) http://bugs.rosalinux.ru/enter_bug.cgi? ... A%20Server
2) or fill in the form at http://www.rosalab.com/products/server/download to get 30 days FREE support
Forums support IS NOT guaranteed. Thank you!
Ответить
galactus
Сообщения: 4
Зарегистрирован: 13 ноя 2012, 14:15
Operating system: Ubuntu 12.04 LTS

ROSA Server Setup

Сообщение galactus » 13 ноя 2012, 14:22

I try to setup the server, after successful installation.
Using the ROSA setup web-GUI, I encounter persistent problems with the Realm name, the message states "incorrect realm name" !?

Kerberos authentication with RDS backend
Realm akron.com : Incorrect realm
Kerberos realm (e.g., REALM.COM). Attention! It can be set only when the module is u.

I think this is probably a bug in the setup framework?

Аватара пользователя
ДроноваЮ
Сообщения: 2636
Зарегистрирован: 01 июн 2011, 13:11
Operating system: Ubuntu/ROSA
Откуда: Москва

Re: ROSA Server Setup

Сообщение ДроноваЮ » 13 ноя 2012, 14:34

Yes, please file a new bug on http://bugs.rosalinux.ru/, category 'server'.

galactus
Сообщения: 4
Зарегистрирован: 13 ноя 2012, 14:15
Operating system: Ubuntu 12.04 LTS

Re: ROSA Server Setup

Сообщение galactus » 13 ноя 2012, 15:26

Not a bug.. name MUST be in Capitals !

Аватара пользователя
ДроноваЮ
Сообщения: 2636
Зарегистрирован: 01 июн 2011, 13:11
Operating system: Ubuntu/ROSA
Откуда: Москва

Re: ROSA Server Setup

Сообщение ДроноваЮ » 13 ноя 2012, 15:31

Good.
ps -- I think we need a new forum for Server issues.

galactus
Сообщения: 4
Зарегистрирован: 13 ноя 2012, 14:15
Operating system: Ubuntu 12.04 LTS

Re: ROSA Server Setup

Сообщение galactus » 13 ноя 2012, 15:37

Agree, would be a good Idea..

Аватара пользователя
andrew.lukoshko
Сообщения: 39
Зарегистрирован: 12 ноя 2012, 19:49
Operating system: ROSA Enterprise Linux Server
Откуда: Москва
Контактная информация:

Re: ROSA Server Setup

Сообщение andrew.lukoshko » 13 ноя 2012, 16:17

Thanks for report. Here is the answer from RSS developer:

This error appears because of there is a convention to set the realm name in upper-case letters and today the realm check logic is oriented on this only.
http://web.mit.edu/kerberos/krb5-1.5/kr ... ealms.html

So to avoid this mistake it is need to enter the realm name in uppercase.
This is unnecessary restrictions which can be identified as a bug. It will be solved in the next RSS versions.

There are another (still undocumented) requirements for Kerberos in RSS:
1)You have to create the dns zone, where is ROSA Sever machine
2)You have to add the host for the Kerberos KDC machine (IP for this host should be equal to the IP for ROSA Server machine)
You can solve that via ROSA Management Console.

And it is desirable to don't forget to update your /etc/resolv.conf by adding a record for your DNS name server.

If all was configured correctly then the commands
host <your ROSA server machine IP>
host <your Kerberos KDC machine hostname>
don't return any errors.

Since this moment Kerberos is ready to be configured.

galactus
Сообщения: 4
Зарегистрирован: 13 ноя 2012, 14:15
Operating system: Ubuntu 12.04 LTS

Re: ROSA Server Setup

Сообщение galactus » 14 ноя 2012, 02:53

Thanks Andrew,

That was exactly where I stuck...the undocumented features ;-)

I see great potential for ROSA Server filling the gap in central user and resource management

Аватара пользователя
andrew.lukoshko
Сообщения: 39
Зарегистрирован: 12 ноя 2012, 19:49
Operating system: ROSA Enterprise Linux Server
Откуда: Москва
Контактная информация:

Re: ROSA Server Setup

Сообщение andrew.lukoshko » 14 ноя 2012, 11:57

You're welcome and thanks for feedback! :good:
We will try to improve Kerberos-related RSS behavior in updates.

Ответить