pfSense

It's a great router. Really. But here's what you need to know: If you're connecting  two subnets, it's really helpful to check the "Bypass firewall rules for traffic on the same interface" box under Advanced. There's 4 hours I'll never get back.

Upgrades!

Lots of new toys here at Shernet. The SAN and VMware server have both been upgraded to dual-core 64-bit systems. And they actually have some memory now! This should give us some working room to get a better test lab up, and hopefully make more progress towards a release.

Samba 3.4

Since it took me an embarrassingly long time to figure out why "use kerberos keytab" refused to work in Ubuntu 9.10, I'm posting here what my problem was. It seems "use kerberos keytab" is deprecated (as noted in the release notes). The replacement is some variation of kerberos method = If using the system keytab, that makes … Continue Reading ››

Calypso client working with Ubuntu

After a night of hacking, the calypso client installer now works with Ubuntu (at least 9.10, but should work with others). In fact, I'm logged in as a Calypso user to Karmic right now. One thing of note: nscd is required to use sudo with pam-ldap in Ubuntu... that wasn't a fun bug to track down, … Continue Reading ››

The marvel of the LoginContext

and the PrivilegedAction! The Calypso Admin application is progressing well. I'm now able to modify all of the LDAP data for users (except the picture, that can wait for later). This is all done via credentials provided at login and stored in a LoginContext. PrivelegedActions are then performed as the authenticated subject. eg: Subject currentSubject = CalypsoadminApp.userContext.getSubject(); PrivilegedAction currentGetUser … Continue Reading ››