ive done some commandline stuff before but im used to the windows cmd so its a bit confusing and BTW im not a complete linux N00B i do know some commands and ive used it for a while (3 yrs)

Hi,

If you want the latest of the latest, you can go with Fedora, but be aware it's not for the inexperienced user, so you might have to run into some trouble along the way. But then again, that's what LQ is for, right? If you're looking for stability you could go with CentOS, the latest version (5.6 I believe) or even with Scientific Linux (which is a RHEL6 clone). All of those are RPM based and you can add the EPEL repo to them to install the 389-ds package. The choice is up to you.

Kind regards,

Eric

Thanks

prob solved i think ill go with cent os
--dino123

Look above.

Kind regards,

Eric

one last thing
do i need to download a server distro of cent OS or will the standard one work

--dino123

oh and with those screenshots eric would i need to use fedora for that

Hey Eric, while your on this thread... what is your opinion about Squeeze. I'm thinking of switching a desktop to Debian. Im running slackware on my server and all the other machines around here. Security, Stability, Reliability ???

Cheers

Hi,

I believe the standard one will work, yum will take care of all dependencies when you install 389-ds, so I wouldn't worry to much. I'm not sure if the Management Console is available through yum already but here's the page that explains building it. I'm not sure if you could build it on CentOS, just give it a try, I never done it so your feedback is more then welcome.

Kind regards,

Eric

Hi,

I've always been a favorite of Debian when working in production environment servers for its stability, security and reliability. Haven't encountered any problem yet that couldn't be fixed in a very short period of time. I've used Slackware for quite some time on my personal laptop, two servers and a desktop to my great satisfaction, I really like Slackware a lot. In my work environment however, my work laptop that is, I'm running Linux Mint Debian Edition 64-bit (based on testing = rolling release) with Liquorix kernel which is one of the fastest to follow the kernel releases. I've been using it for a couple of months now and it works perfect, no glitches, no breaks, everything smooth, fast and easy.

If it's a desktop you're switching, Debian Squeeze will do great in my opinion. Debian IS one of the most stable distros out there (next to Slackware of course ).

Kind regards,

Eric

Hey Eric,

Thanks for the reply i think ill go with Debian for a trial. Hopefully all will go well. Stability is really all that matters with me. I can do the security myself thanks for your input.

Stay safe
Cheers

Hi,

You're welcome. Is security your specialty? That sounds pretty interesting. Can you point me to some good documentation on how to REALLY harden console access and limiting users? I've been playing with sudo to limit users for some time but there's this one guy that always finds a way around, for example by copying a binary to his home directory and running sudo on that one instead and thus gaining root access.

Kind regards,

Eric

Hi Eric,

Sorry for the late reply, ill give you all my links to IS documentation. At work ATM, ill ask the guys around here for some doco's too and get back to you either tonight or tomorrow, keep an eye on this thread.

Cheers.

Just quickly, im guessing your sudoers file looks something like this? If you want this *cleveruser* to be able to use sudo but not be able to "sudo passwd root" you im guessing you've tried something like this?? This is kinda locked down. He wont be able to run passwd.

#user privilege specs
root ALL=(ALL) ALL
Cmnd_Alias SHELL = /bin/bash, /bin/csh, /bin/sh, /usr/bin/bash
Cmnd_Alias PATHS = /bin/, /sbin/, /usr/bin/, /usr/sbin/
#admin programs
Cmnd_Alias ADMINCMDS = /usr/local/sbin/administration.pl
Cmnd_Alias DANGEROUS = /usr/bin/passwd, /bin/su

cleveruser ALL = PATHS, ADMINCMDS, !SHELL, !DANGEROUS

***cleveruser is this guy who keeps privilege escalating on you.


Or does it look more like this???
If he needs to be a sudoer, then this will work also.
He wont be able to elevate privileges of shells.

#user privilege specs
root ALL=(ALL) ALL
Cmnd_Alias SHELL = /bin/bash, , /bin/csh, /bin/sh, /usr/bin/bash
Cmnd_Alias PROGRAMS = /usr/sbin/useradd, /usr/bin/userdel /usr/bin/usermod
User_Alias ADMINS = user1, user2, cleveruser
ADMINS ALL = !/usr/bin/su, !SHELL, PROGRAMS, /bin/kill


Ill point you in the direction of some documentation later, still at work.

Hi 0men,

Thanks in advance, looking forward to it. Just PM or mail please, since this thread is marked as solved and it has nothing to do with it.

Kind regards,

Eric