So I've been having to deal with some IPA-related bugs in the past little bit, which of course got me thinking that I had no idea what IPA did or how to use it (thankfully I wasn't responsible for fixing the bugs!). But as I had to deal with this …

So I had upgraded my wife's MacBook to Lion and discovered that, once again, Apple screwed around with Kerberos. This seems to be a recurring theme (and not a good one). After quite a bit of fighting and figuring, a few things have been sorted out. Once I've got it …

Well, I've begun the migration and probably picked the hardest machine to start with. One of my goals here was to do a clean migration from a Red Hat Enterprise Linux 5 box to a Red Hat Enterprise Linux 6 box for a specific set of services, and to intentionally …

This week's techmail was Kerberos authentication with NFSv4 which looks at how to get more security out of NFS. By using Kerberos. I'm not sure if this is the definition of insane for a home network or not, but since I've got Kerberos running here already, I keep trying to …

Missed two mac-related techmails from the previous weeks. The first is Learn to use the improved Snow Leopard Services menu which talks about the OS X 10.6 much overhauled services menu and some of the cool things you can do with it such as making your own Automator actions …

Last month I got Kerberos working quite nicely on my macs, thank-you-very-much. This week Apple wrecked it by making Kerberos an absolute nuisance. It wasn't bad in OS X 10.5.. a bit annoying to setup but the tools were adequate. In 10.6 they threw away the half-decent GUI …

Ok, this time the word "fun" is sarcastic. I had it working this afternoon and couldn't figure out why it all of a sudden stopped working or... at least... subversion via kerberos. I was getting this error whenever I did a "svn ls http://svn.example.com/svn/anthill/ on …

This actually isn't a sarcastic title, for once. I'm actually having a blast fiddling with Kerberos these last few days. I was put into a position to do some kerberos debugging for work, so had to re-setup a kerberos realm at home to do the testing. Of course, at the …

I find LDAP for authentication highly irritating. It's better than some alternatives, like NIS (haven't looked at NIS+ so I don't know how it measures up), but man oh man, it's a real nuisance sometimes.

I wrote that LDAP Authentication piece when there was essentially nothing else and it took …