[ale] Recommendations for my next distro?

[Damon L. Chesser]

http://techpubs.spinlocksolutions.com/dklar/kerberos.html


Never set it up for a business use.  Everybody I worked for used AD.  
But I have set this up to set this up.  Seemed easy to me.  I am sure 
Jim if facing some obstacle in actual use.


On 03/01/2015 11:38 AM, DJ-Pfulio wrote:
> Server to server kerberos isn't THAT hard on Debian/Ubuntu, NFSv4.
>
> I've never bothered with kerberos for user logins.
>
> On 03/01/2015 09:00 AM, Jim Kinney wrote:
>> Ovirt is large. Very large. It's design is to directly challenge VMware. So,
>> yes, very large and designed to be deployed across multiple physical systems.
>>
>> My grouse with it is the vast amount of java it's written in. But that's all
>> only for the web GUI and it's linking to the back end.  The back end is all
>> libvirt :-)
>>
>> I've used it to setup some developers with the ability to generate a VM that's a
>> clone of an existing devel environment with (yuck) Oracle ready to go for very
>> specific testing needs then drop it in the trash. As I don't have control of the
>> network, I can only setup test VM s with private lan  networking which I do
>> control. Ovirt uses spice to provide a console, CLI or X, and the access is over
>> the single, public IP. PluscI can lock down user access with FreeIPA :-)
>>
>> Yeah, that is a security issue having that much java web code. But the entire
>> process is designed to run with full SELinux lock down. That does much to
>> mitigate the damage from a break in.
>>
>> Ovirt is NOT for desktop users to run a few VMs with. Virt-manager does that
>> very well. Ovirt's to run a large collection of VMs that's managed by multiple
>> admins across multiple servers with large-scale shared storage (NFS is default
>> but iSCSI from a SAN is preferred).
>>

-- 
Damon at damtek.com
404-271-8699