From f5fde06f18dfff0d66cfa0aac6b35ba645dbc7ca Mon Sep 17 00:00:00 2001 From: github deployment bot Date: Sun, 7 Jan 2024 00:44:27 +0000 Subject: [PATCH] Deploy to gh-pages. --- 404.html | 2 +- _sources/el/pxeboot.rst.txt | 229 ++++++++++++++++++++++++++++++++---- about/contributors.html | 2 +- el/builds.html | 2 +- el/freeipa.html | 2 +- el/nat.html | 2 +- el/openldap.html | 2 +- el/pxeboot.html | 201 +++++++++++++++++++++++++------ el/sysadmin.html | 2 +- el/unbound.html | 2 +- errata/removed.html | 2 +- errata/upcoming.html | 2 +- fedora/backups.html | 2 +- fedora/btrfs.html | 2 +- fedora/cipc.html | 2 +- fedora/clang.html | 2 +- fedora/copr.html | 2 +- fedora/dnf.html | 2 +- fedora/dns.html | 2 +- fedora/docker.html | 2 +- fedora/emulators.html | 2 +- fedora/firefox.html | 2 +- fedora/gcc.html | 2 +- fedora/git.html | 2 +- fedora/gnometips.html | 2 +- fedora/grub.html | 2 +- fedora/iphone.html | 2 +- fedora/mcafee.html | 2 +- fedora/misc.html | 2 +- fedora/mpv.html | 2 +- fedora/nvidia.html | 2 +- fedora/pip.html | 2 +- fedora/powerline.html | 2 +- fedora/tmux.html | 2 +- fedora/vim.html | 2 +- fedora/winetips.html | 2 +- fedora/xscreensaver.html | 2 +- index.html | 2 +- macos/image.html | 2 +- misc/euphemism.html | 2 +- misc/ipv6he.html | 2 +- misc/mingw.html | 2 +- misc/port465.html | 2 +- misc/vnc.html | 2 +- search.html | 2 +- searchindex.js | 2 +- security/antipatterns.html | 2 +- security/myths.html | 2 +- security/passwords.html | 2 +- training/ex362.html | 2 +- training/ex407.html | 2 +- training/ex415.html | 2 +- 52 files changed, 420 insertions(+), 110 deletions(-) diff --git a/404.html b/404.html index 2ded4733..9c91bf99 100644 --- a/404.html +++ b/404.html @@ -95,7 +95,7 @@

Page not found

© Copyright 2022, remyabel, nazunalika. - Last updated on Dec 07, 2023. + Last updated on Jan 07, 2024.

We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.

diff --git a/_sources/el/pxeboot.rst.txt b/_sources/el/pxeboot.rst.txt index a9c68fbe..525b3b11 100644 --- a/_sources/el/pxeboot.rst.txt +++ b/_sources/el/pxeboot.rst.txt @@ -23,18 +23,19 @@ Here are the list of requirements below. * Enterprise Linux 8, 9, or Fedora * A DHCP server setup that allows you to setup the `next_server` directive or setup the tftp server location +* Optionally if you are using a local mirror, `httpd` or `nginx` installed. (This guide assumes `httpd`) Tutorial Preface, Notes, and Recommendations -------------------------------------------- -In some environments, it may be better (or easier, depending on your perspective) to setup a PXE server and roll out systems in a lab or otherwise in that fashion. It's one of the most straight forward ways to roll out systems easily and consistently. The difference between a typical PXE setup and this is we're using grub2 menus, rather than the classic menu style. This makes it simpler to keep all configurations consistent between classic boot and EFI boot. +In some environments, it may be better (or easier, depending on your perspective) to setup a PXE server and roll out systems in a lab or otherwise in that fashion. It's one of the most straight forward ways to build out systems easily and consistently. The difference between a typical PXE setup and this is we're using grub2 menus, rather than the classic menu style. This makes it simpler to keep all configurations consistent between classic boot and EFI boot. If you plan on using supporting other architectures, it will be easier to use that architecture to run the `grub2-mknetdir` command and brings those to your tftp server. Cobbler +++++++ -While cobbler is a perfectly viable solution to setting up a pxeboot system for various distros and configurations, it is out of scope for this article. As of this writing, cobbler does not use grub2 as its baseline. +While cobbler is a perfectly viable solution to setting up a pxeboot system for various distros and configurations, it is out of scope for this article. It is unknown if it sets up or directly supports grub2. Server Setup ------------ @@ -80,8 +81,8 @@ Now you'll need to enable the tftp socket and open the port. Traditionally, you % firewall-cmd --add-service=tftp --permanent % systemctl enable tftp.socket --now -DHCP -++++ +DHCP (ISC) +++++++++++ On your DHCP server configuration (typically `/etc/dhcp/dhcpd.conf` if running on Fedora or EL), you should set the following options: @@ -185,6 +186,26 @@ Note that in your subnet blocks, you should also mention `next_server`, which sh Ensure that the `dhcpd` service is restarted after making the necessary changes. +DHCP (Kea) +++++++++++ + +Kea is a different configuration style from ISC. At this time, we do not have a full working example. + +Web Server (httpd) +++++++++++++++++++ + +If we plan on hosting the installation mirror in your environment, it's recommended to stand up a simple web server. It does not require any kind of special configuration. We'll use the default `/var/www/html/` path. If you wish to use another such as `/srv/www`, you will need to setup a virtual host (this is outside the scope of this page). + +.. code-block:: shell + + % dnf install httpd -y + % systemctl enable httpd --now + % firewall-cmd --add-service=http --permanent + % firewall-cmd --complete-reload + + # create the directories for our distributions + % mkdir -p /var/www/html/os/{fedora,centos,rocky} + Setting up Grub +++++++++++++++ @@ -220,7 +241,169 @@ This should produce a grub menu for both EFI and BIOS systems that contain three Adding Distributions ++++++++++++++++++++ -Now that grub is sort of setup, we should add a distribution to it at least. Let's put up a regular installer with no kickstart for Fedora. +Now that grub is sort of setup, we should add a distribution to it at least. Below are a couple examples using Fedora, Rocky Linux, and CentOS Stream. + +Rocky Linux +''''''''''' + +Setting up Rocky Linux (or any other Enterprise Linux distribution) should be straight forward. We'll download both Rocky Linux 8 and Rocky Linux 9 and setup the menus. + +.. note:: Using upstream mirror path + + If you plan on not hosting a mirror of the base repositories, ensure that your inst.repo/inst.stage2 commands are accurate to a mirror of your choice. + +.. code-block:: none + + % cd /var/tmp + # Rocky Linux 8 + % wget https://dl.rockylinux.org/pub/rocky/8/isos/x86_64/Rocky-8-latest-x86_64-dvd.iso + # Rocky Linux 9 + % wget https://dl.rockylinux.org/pub/rocky/9/isos/x86_64/Rocky-9-latest-x86_64-dvd.iso + + # Optionally, if you plan on supporting ARM... + % wget https://dl.rockylinux.org/pub/rocky/8/isos/aarch64/Rocky-8-latest-aarch64-dvd.iso + % wget https://dl.rockylinux.org/pub/rocky/9/isos/aarch64/Rocky-9-latest-aarch64-dvd.iso + +Here we'll copy the data we want into the necessary directories. Any pxeboot related images will go to `/var/lib/tftpboot/rocky-X-ARCH` (X being the major version, ARCH being the architecture). If we are keeping a local mirror of the DVD, we'll put it into `/var/www/html/os/rocky/X/ARCH`. Below is for x86_64, but the same steps can be repeated for aarch64 without any issues. Just replace x86_64 with aarch64. + +.. code-block:: shell + ## Rocky 8 + % mount -o loop Rocky-8-latest-x86_64-dvd.iso /mnt + % mkdir /var/lib/tftpboot/rocky-8-x86_64 + % cp /mnt/images/pxeboot/* /var/lib/tftpboot/rocky-8-x86_64 + ################################## + # If you are hosting a mirror... + % mkdir -p /var/www/html/os/rocky/8/x86_64 + % rsync -vrlptDSH --delete /mnt/ /var/www/html/os/rocky/8/x86_64 + % restorecon -R /var/www/html/os/rocky/8 + ################################## + % umount /mnt + + ## Rocky 9 + % mount -o loop Rocky-9-latest-x86_64-dvd.iso /mnt + % mkdir /var/lib/tftpboot/rocky-9-x86_64 + % cp /mnt/images/pxeboot/* /var/lib/tftpboot/rocky-9-x86_64 + ################################## + # If you are hosting a mirror... + % mkdir -p /var/www/html/os/rocky/9/x86_64 + % rsync -vrlptDSH --delete /mnt/ /var/www/html/os/rocky/9/x86_64 + % restorecon -R /var/www/html/os/rocky/9 + ################################## + % umount /mnt + +At this point, we'll need to setup the grub menus. We'll setup non-kickstart examples for BIOS and UEFI. + +.. code-block:: none + + . . . + # Rocky 8 + menuentry 'Install Rocky Linux 8 (No KS) (UEFI)' --class fedora --class gnu-linux --class gnu --class os { + echo "Loading Rocky Linux 8 kernel..." + linuxefi rocky-8-x86_64/vmlinuz inst.repo=http://10.100.0.1/os/rocky/8/x86_64 inst.stage2=http://10.100.0.1/os/rocky/8/x86_64 ip=dhcp + initrdefi rocky-8-x86_64/initrd.img + } + menuentry 'Install Rocky Linux 8 (No KS) (BIOS)' --class fedora --class gnu-linux --class gnu --class os { + echo "Loading Rocky Linux 8 kernel..." + linux16 rocky-8-x86_64/vmlinuz inst.repo=http://10.100.0.1/os/rocky/8/x86_64 inst.stage2=http://10.100.0.1/os/rocky/8/x86_64 ip=dhcp + initrd16 rocky-8-x86_64/initrd.img + } + + # if you are setting up arm... + menuentry 'Install Rocky Linux 8 (No KS) (aarch64)' --class fedora --class gnu-linux --class gnu --class os { + echo "Loading Rocky Linux 8 kernel..." + linux rocky-9-aarch64/vmlinuz inst.repo=http://10.100.0.1/os/rocky/8/aarch64 inst.stage2=http://10.100.0.1/os/rocky/8/aarch64 ip=dhcp + initrd rocky-9-aarch64/initrd.img + } + +.. code-block:: none + + . . . + # Rocky 9 + menuentry 'Install Rocky Linux 9 (No KS) (UEFI)' --class fedora --class gnu-linux --class gnu --class os { + echo "Loading Rocky Linux 9 kernel..." + linuxefi rocky-9-x86_64/vmlinuz inst.repo=http://10.100.0.1/os/rocky/9/x86_64 inst.stage2=http://10.100.0.1/os/rocky/9/x86_64 ip=dhcp + initrdefi rocky-9-x86_64/initrd.img + } + menuentry 'Install Rocky Linux 9 (No KS) (BIOS)' --class fedora --class gnu-linux --class gnu --class os { + echo "Loading Rocky Linux 9 kernel..." + linux16 rocky-9-x86_64/vmlinuz inst.repo=http://10.100.0.1/os/rocky/9/x86_64 inst.stage2=http://10.100.0.1/os/rocky/9/x86_64 ip=dhcp + initrd16 rocky-9-x86_64/initrd.img + } + + # if you are setting up arm... + menuentry 'Install Rocky Linux 9 (No KS) (aarch64)' --class fedora --class gnu-linux --class gnu --class os { + echo "Loading Rocky Linux 9 kernel..." + linux rocky-9-aarch64/vmlinuz inst.repo=http://10.100.0.1/os/rocky/9/aarch64 inst.stage2=http://10.100.0.1/os/rocky/9/aarch64 ip=dhcp + initrd rocky-9-aarch64/initrd.img + } + +The Rocky Linuxinstallation should now be bootable. + +CentOS Stream +''''''''''''' + +Much like Rocky Linux (or other derivatives), the path is the same for setting it up. + +.. note:: Using upstream mirror path + + If you plan on not hosting a mirror of the base repositories, ensure that your inst.repo/inst.stage2 commands are accurate to a mirror of your choice. + +.. code-block:: none + + % cd /var/tmp + # CentOS Stream 9 + % wget -O CentOS-Stream-9-latest-x86_64-dvd1.iso \ + 'https://mirrors.centos.org/mirrorlist?path=/9-stream/BaseOS/x86_64/iso/CentOS-Stream-9-latest-x86_64-dvd1.iso&redirect=1&protocol=https' + + # Optionally, if you plan on supporting ARM... + % wget -O CentOS-Stream-9-latest-aarch64-dvd1.iso \ + 'https://mirrors.centos.org/mirrorlist?path=/9-stream/BaseOS/aarch64/iso/CentOS-Stream-9-latest-aarch64-dvd1.iso&redirect=1&protocol=https' + +Here we'll copy the data we want into the necessary directories. Any pxeboot related images will go to `/var/lib/tftpboot/rocky-X-ARCH` (X being the major version, ARCH being the architecture). If we are keeping a local mirror of the DVD, we'll put it into `/var/www/html/os/rocky/X/ARCH`. Below is for x86_64, but the same steps can be repeated for aarch64 without any issues. Just replace x86_64 with aarch64. + +.. code-block:: shell + ## CentOS Stream 9 + % mount -o loop CentOS-Stream-9-latest-x86_64-dvd1.iso /mnt + % mkdir /var/lib/tftpboot/centos-9-x86_64 + % cp /mnt/images/pxeboot/* /var/lib/tftpboot/centos-9-x86_64 + ################################## + # If you are hosting a mirror... + % mkdir -p /var/www/html/os/centos/9/x86_64 + % rsync -vrlptDSH --delete /mnt/ /var/www/html/os/centos/9/x86_64 + % restorecon -R /var/www/html/os/centos/9 + ################################## + % umount /mnt + +At this point, we'll need to setup the grub menus. We'll setup non-kickstart examples for BIOS and UEFI. + +.. code-block:: none + + . . . + # CentOS Stream 9 + menuentry 'Install CentOS Stream 9 (No KS) (UEFI)' --class fedora --class gnu-linux --class gnu --class os { + echo "Loading CentOS Stream 9 kernel..." + linuxefi centos-9-x86_64/vmlinuz inst.repo=http://10.100.0.1/os/centos/9/x86_64 inst.stage2=http://10.100.0.1/os/centos/9/x86_64 ip=dhcp + initrdefi centos-9-x86_64/initrd.img + } + menuentry 'Install CentOS Stream 9 (No KS) (BIOS)' --class fedora --class gnu-linux --class gnu --class os { + echo "Loading CentOS Stream 9 kernel..." + linux16 centos-9-x86_64/vmlinuz inst.repo=http://10.100.0.1/os/centos/9/x86_64 inst.stage2=http://10.100.0.1/os/centos/9/x86_64 ip=dhcp + initrd16 centos-9-x86_64/initrd.img + } + + # if you are setting up arm... + menuentry 'Install CentOS Stream 9 (No KS) (aarch64)' --class fedora --class gnu-linux --class gnu --class os { + echo "Loading CentOS Stream 9 kernel..." + linux centos-9-aarch64/vmlinuz inst.repo=http://10.100.0.1/os/centos/9/aarch64 inst.stage2=http://10.100.0.1/os/centos/9/aarch64 ip=dhcp + initrd centos-9-aarch64/initrd.img + } + +The CentOS Stream installation should now be bootable. + +Fedora +'''''' + +Let's put up a regular installer with no kickstart for Fedora. This does not involve pulling down any ISO's and will rely entirely on using upstream repositories. .. code-block:: shell @@ -244,16 +427,16 @@ Now we can add a couple menu entry items for Fedora. I'm making both EFI and Cla . . . menuentry 'Install Fedora Linux (EFI)' --class fedora --class gnu-linux --class gnu --class os { - linuxefi fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os ip=dhcp + linuxefi fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os ip=dhcp initrdefi fedora-x86_64/initrd.img } menuentry 'Install Fedora Linux (Classic)' --class fedora --class gnu-linux --class gnu --class os { - linux16 fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os/ ip=dhcp + linux16 fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os/ ip=dhcp initrd16 fedora-x86_64/initrd.img } # Add the below for ARM systems menuentry 'Install Fedora Linux (ARM)' --class fedora --class gnu-linux --class gnu --class os { - linux fedora-aarch64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/aarch64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/aarch64/os/ ip=dhcp + linux fedora-aarch64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/aarch64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/aarch64/os/ ip=dhcp initrd fedora-aarch64/initrd.img } @@ -303,15 +486,15 @@ Submenus are easily created using `submenu` in the grub configuration. For examp set color_normal=white/black menuentry 'Install Fedora Linux (EFI)' --class fedora --class gnu-linux --class gnu --class os { - linuxefi fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os ip=dhcp + linuxefi fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os ip=dhcp initrdefi fedora-x86_64/initrd.img } menuentry 'Install Fedora Linux (Classic)' --class fedora --class gnu-linux --class gnu --class os { - linux16 fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os/ ip=dhcp + linux16 fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os/ ip=dhcp initrd16 fedora-x86_64/initrd.img } menuentry 'Install Fedora Linux (ARM)' --class fedora --class gnu-linux --class gnu --class os { - linux fedora-aarch64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/aarch64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/aarch64/os/ ip=dhcp + linux fedora-aarch64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/aarch64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/aarch64/os/ ip=dhcp initrd fedora-aarch64/initrd.img } } @@ -334,15 +517,15 @@ It is also possible to place everything into separate source-able files. Note th .. code-block:: none menuentry 'Install Fedora Linux (EFI)' --class fedora --class gnu-linux --class gnu --class os { - linuxefi fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os ip=dhcp + linuxefi fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os ip=dhcp initrdefi fedora-x86_64/initrd.img } menuentry 'Install Fedora Linux (Classic)' --class fedora --class gnu-linux --class gnu --class os { - linux16 fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os/ ip=dhcp + linux16 fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os/ ip=dhcp initrd16 fedora-x86_64/initrd.img } menuentry 'Install Fedora Linux (ARM)' --class fedora --class gnu-linux --class gnu --class os { - linux fedora-aarch64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/aarch64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/aarch64/os/ ip=dhcp + linux fedora-aarch64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/aarch64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/aarch64/os/ ip=dhcp initrd fedora-aarch64/initrd.img } @@ -399,17 +582,17 @@ Submenus can be nested too. Here's a deeper, working example of my own setup usi set color_normal=white/black menuentry 'Install Fedora Linux (No KS)' --class fedora --class gnu-linux --class gnu --class os { - linuxefi fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os ip=dhcp + linuxefi fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os ip=dhcp initrdefi fedora-x86_64/initrd.img } menuentry 'Install Fedora Linux' --class fedora --class gnu-linux --class gnu --class os { - linuxefi fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os ip=dhcp + linuxefi fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os ip=dhcp initrdefi fedora-x86_64/initrd.img } menuentry 'Fedora Linux (Rescue Mode)' --class fedora --class gnu-linux --class gnu --class os { - linuxefi fedora-x86_64/vmlinuz inst.rescue inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os + linuxefi fedora-x86_64/vmlinuz inst.rescue inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os initrdefi fedora-x86_64/initrd.img } } @@ -421,17 +604,17 @@ Submenus can be nested too. Here's a deeper, working example of my own setup usi set color_normal=white/black menuentry 'Install Fedora Linux (No KS)' --class fedora --class gnu-linux --class gnu --class os { - linux16 fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os/ ip=dhcp + linux16 fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os/ ip=dhcp initrd16 fedora-x86_64/initrd.img } menuentry 'Install Fedora Linux' --class fedora --class gnu-linux --class gnu --class os { - linux16 fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os/ ip=dhcp + linux16 fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os/ ip=dhcp initrd16 fedora-x86_64/initrd.img } menuentry 'Fedora Linux (Rescue Mode)' --class fedora --class gnu-linux --class gnu --class os { - linux16 fedora-x86_64/vmlinuz inst.rescue inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os/ + linux16 fedora-x86_64/vmlinuz inst.rescue inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os/ initrd16 fedora-x86_64/initrd.img } } @@ -443,17 +626,17 @@ Submenus can be nested too. Here's a deeper, working example of my own setup usi set color_normal=white/black menuentry 'Install Fedora Linux (No KS)' --class fedora --class gnu-linux --class gnu --class os { - linuxefi fedora-aarch64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/aarch64/os inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/aarch64/os ip=dhcp + linuxefi fedora-aarch64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/aarch64/os inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/aarch64/os ip=dhcp initrdefi fedora-aarch64/initrd.img } menuentry 'Install Fedora Linux' --class fedora --class gnu-linux --class gnu --class os { - linuxefi fedora-aarch64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/aarch64/os inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/aarch64/os ip=dhcp + linuxefi fedora-aarch64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/aarch64/os inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/aarch64/os ip=dhcp initrdefi fedora-aarch64/initrd.img } menuentry 'Fedora Linux (Rescue Mode)' --class fedora --class gnu-linux --class gnu --class os { - linuxefi fedora-aarch64/vmlinuz inst.rescue inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/aarch64/os + linuxefi fedora-aarch64/vmlinuz inst.rescue inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/aarch64/os initrdefi fedora-aarch64/initrd.img } } diff --git a/about/contributors.html b/about/contributors.html index dd1e950f..1c970654 100644 --- a/about/contributors.html +++ b/about/contributors.html @@ -108,7 +108,7 @@

Contributors

© Copyright 2022, remyabel, nazunalika. - Last updated on Dec 07, 2023. + Last updated on Jan 07, 2024.

We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.

diff --git a/el/builds.html b/el/builds.html index 9a039b7b..b1509e47 100644 --- a/el/builds.html +++ b/el/builds.html @@ -116,7 +116,7 @@

Auto-Provisioning

© Copyright 2022, remyabel, nazunalika. - Last updated on Dec 07, 2023. + Last updated on Jan 07, 2024.

We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.

diff --git a/el/freeipa.html b/el/freeipa.html index de4def0b..f88c1d09 100644 --- a/el/freeipa.html +++ b/el/freeipa.html @@ -2511,7 +2511,7 @@

Accounts with OTP En

© Copyright 2022, remyabel, nazunalika. - Last updated on Dec 07, 2023. + Last updated on Jan 07, 2024.

We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.

diff --git a/el/nat.html b/el/nat.html index 9be092d3..aa46d50b 100644 --- a/el/nat.html +++ b/el/nat.html @@ -212,7 +212,7 @@

DHCP

© Copyright 2022, remyabel, nazunalika. - Last updated on Dec 07, 2023. + Last updated on Jan 07, 2024.

We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.

diff --git a/el/openldap.html b/el/openldap.html index a04f6d7c..88020eab 100644 --- a/el/openldap.html +++ b/el/openldap.html @@ -997,7 +997,7 @@

Password Policy

© Copyright 2022, remyabel, nazunalika. - Last updated on Dec 07, 2023. + Last updated on Jan 07, 2024.

We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.

diff --git a/el/pxeboot.html b/el/pxeboot.html index a8b7685c..209652af 100644 --- a/el/pxeboot.html +++ b/el/pxeboot.html @@ -63,9 +63,16 @@
  • Server Setup
  • Customizing Grub @@ -144,15 +159,16 @@

    Requirements

  • Enterprise Linux 8, 9, or Fedora

  • A DHCP server setup that allows you to setup the next_server directive or setup the tftp server location

    • +

  • Optionally if you are using a local mirror, httpd or nginx installed. (This guide assumes httpd)

    • Tutorial Preface, Notes, and Recommendations

    -

    In some environments, it may be better (or easier, depending on your perspective) to setup a PXE server and roll out systems in a lab or otherwise in that fashion. It’s one of the most straight forward ways to roll out systems easily and consistently. The difference between a typical PXE setup and this is we’re using grub2 menus, rather than the classic menu style. This makes it simpler to keep all configurations consistent between classic boot and EFI boot.

    +

    In some environments, it may be better (or easier, depending on your perspective) to setup a PXE server and roll out systems in a lab or otherwise in that fashion. It’s one of the most straight forward ways to build out systems easily and consistently. The difference between a typical PXE setup and this is we’re using grub2 menus, rather than the classic menu style. This makes it simpler to keep all configurations consistent between classic boot and EFI boot.

    If you plan on using supporting other architectures, it will be easier to use that architecture to run the grub2-mknetdir command and brings those to your tftp server.

    Cobbler

    -

    While cobbler is a perfectly viable solution to setting up a pxeboot system for various distros and configurations, it is out of scope for this article. As of this writing, cobbler does not use grub2 as its baseline.

    +

    While cobbler is a perfectly viable solution to setting up a pxeboot system for various distros and configurations, it is out of scope for this article. It is unknown if it sets up or directly supports grub2.

    @@ -182,8 +198,8 @@

    TFTP# Note: This is port 69 with the UDP protocol % firewall-cmd --add-service=tftp --permanent % systemctl enable tftp.socket --now

    -
    -

    DHCP

    +
    +

    DHCP (ISC)

    On your DHCP server configuration (typically /etc/dhcp/dhcpd.conf if running on Fedora or EL), you should set the following options:

    option pxe-system-type code 93 = unsigned integer 16;
 option rfc3442-classless-static-routes code 121 = array of integer 8;
@@ -271,8 +287,22 @@ 
    DHCP
+
    DHCP (Kea)
    
+
    Kea is a different configuration style from ISC. At this time, we do not have a full working example.
    
+
    +
    +

    Web Server (httpd)

    +

    If we plan on hosting the installation mirror in your environment, it’s recommended to stand up a simple web server. It does not require any kind of special configuration. We’ll use the default /var/www/html/ path. If you wish to use another such as /srv/www, you will need to setup a virtual host (this is outside the scope of this page).

    +
    % dnf install httpd -y
+% systemctl enable httpd --now
+% firewall-cmd --add-service=http --permanent
+% firewall-cmd --complete-reload
+
+# create the directories for our distributions
+% mkdir -p /var/www/html/os/{fedora,centos,rocky}
    -

    Setting up Grub

    +

    Setting up Grub

    When you run grub2-mknetdir, it created a core.* set of files. An accompanying grub.cfg must sit next to them. To prevent a duplication of work, it can be simplified by making all grub configurations at /var/lib/tftpboot and then symlink them next to each directory containing core.*. Let’s make a very, very simple one.

    set default=0
 set timeout=60
@@ -293,8 +323,104 @@ 
    Setting up Grub

    This should produce a grub menu for both EFI and BIOS systems that contain three bootable options.

    -

    Adding Distributions

    -

    Now that grub is sort of setup, we should add a distribution to it at least. Let’s put up a regular installer with no kickstart for Fedora.

    +

    Adding Distributions

    +

    Now that grub is sort of setup, we should add a distribution to it at least. Below are a couple examples using Fedora, Rocky Linux, and CentOS Stream.

    +
    +

    Rocky Linux

    +

    Setting up Rocky Linux (or any other Enterprise Linux distribution) should be straight forward. We’ll download both Rocky Linux 8 and Rocky Linux 9 and setup the menus.

    +
    +

    Note

    +

    Using upstream mirror path

    +

    If you plan on not hosting a mirror of the base repositories, ensure that your inst.repo/inst.stage2 commands are accurate to a mirror of your choice.

    +
    +
    % cd /var/tmp
+# Rocky Linux 8
+% wget https://dl.rockylinux.org/pub/rocky/8/isos/x86_64/Rocky-8-latest-x86_64-dvd.iso
+# Rocky Linux 9
+% wget https://dl.rockylinux.org/pub/rocky/9/isos/x86_64/Rocky-9-latest-x86_64-dvd.iso
+
+# Optionally, if you plan on supporting ARM...
+% wget https://dl.rockylinux.org/pub/rocky/8/isos/aarch64/Rocky-8-latest-aarch64-dvd.iso
+% wget https://dl.rockylinux.org/pub/rocky/9/isos/aarch64/Rocky-9-latest-aarch64-dvd.iso

    Here we’ll copy the data we want into the necessary directories. Any pxeboot related images will go to /var/lib/tftpboot/rocky-X-ARCH (X being the major version, ARCH being the architecture). If we are keeping a local mirror of the DVD, we’ll put it into /var/www/html/os/rocky/X/ARCH. Below is for x86_64, but the same steps can be repeated for aarch64 without any issues. Just replace x86_64 with aarch64.

    +

    At this point, we’ll need to setup the grub menus. We’ll setup non-kickstart examples for BIOS and UEFI.

    +
    . . .
+# Rocky 8
+menuentry 'Install Rocky Linux 8 (No KS) (UEFI)' --class fedora --class gnu-linux --class gnu --class os {
+  echo "Loading Rocky Linux 8 kernel..."
+  linuxefi rocky-8-x86_64/vmlinuz inst.repo=http://10.100.0.1/os/rocky/8/x86_64 inst.stage2=http://10.100.0.1/os/rocky/8/x86_64 ip=dhcp
+  initrdefi rocky-8-x86_64/initrd.img
+}
+menuentry 'Install Rocky Linux 8 (No KS) (BIOS)' --class fedora --class gnu-linux --class gnu --class os {
+  echo "Loading Rocky Linux 8 kernel..."
+  linux16 rocky-8-x86_64/vmlinuz inst.repo=http://10.100.0.1/os/rocky/8/x86_64 inst.stage2=http://10.100.0.1/os/rocky/8/x86_64 ip=dhcp
+  initrd16 rocky-8-x86_64/initrd.img
+}
+
+# if you are setting up arm...
+menuentry 'Install Rocky Linux 8 (No KS) (aarch64)' --class fedora --class gnu-linux --class gnu --class os {
+  echo "Loading Rocky Linux 8 kernel..."
+  linux rocky-9-aarch64/vmlinuz inst.repo=http://10.100.0.1/os/rocky/8/aarch64 inst.stage2=http://10.100.0.1/os/rocky/8/aarch64 ip=dhcp
+  initrd rocky-9-aarch64/initrd.img
+}
    . . .
+# Rocky 9
+menuentry 'Install Rocky Linux 9 (No KS) (UEFI)' --class fedora --class gnu-linux --class gnu --class os {
+  echo "Loading Rocky Linux 9 kernel..."
+  linuxefi rocky-9-x86_64/vmlinuz inst.repo=http://10.100.0.1/os/rocky/9/x86_64 inst.stage2=http://10.100.0.1/os/rocky/9/x86_64 ip=dhcp
+  initrdefi rocky-9-x86_64/initrd.img
+}
+menuentry 'Install Rocky Linux 9 (No KS) (BIOS)' --class fedora --class gnu-linux --class gnu --class os {
+  echo "Loading Rocky Linux 9 kernel..."
+  linux16 rocky-9-x86_64/vmlinuz inst.repo=http://10.100.0.1/os/rocky/9/x86_64 inst.stage2=http://10.100.0.1/os/rocky/9/x86_64 ip=dhcp
+  initrd16 rocky-9-x86_64/initrd.img
+}
+
+# if you are setting up arm...
+menuentry 'Install Rocky Linux 9 (No KS) (aarch64)' --class fedora --class gnu-linux --class gnu --class os {
+  echo "Loading Rocky Linux 9 kernel..."
+  linux rocky-9-aarch64/vmlinuz inst.repo=http://10.100.0.1/os/rocky/9/aarch64 inst.stage2=http://10.100.0.1/os/rocky/9/aarch64 ip=dhcp
+  initrd rocky-9-aarch64/initrd.img
+}

    The Rocky Linuxinstallation should now be bootable.

    +
    +
    +

    CentOS Stream

    +

    Much like Rocky Linux (or other derivatives), the path is the same for setting it up.

    +
    +

    Note

    +

    Using upstream mirror path

    +

    If you plan on not hosting a mirror of the base repositories, ensure that your inst.repo/inst.stage2 commands are accurate to a mirror of your choice.

    +
    +
    % cd /var/tmp
+# CentOS Stream 9
+% wget -O CentOS-Stream-9-latest-x86_64-dvd1.iso \
+  'https://mirrors.centos.org/mirrorlist?path=/9-stream/BaseOS/x86_64/iso/CentOS-Stream-9-latest-x86_64-dvd1.iso&redirect=1&protocol=https'
+
+# Optionally, if you plan on supporting ARM...
+% wget -O CentOS-Stream-9-latest-aarch64-dvd1.iso \
+  'https://mirrors.centos.org/mirrorlist?path=/9-stream/BaseOS/aarch64/iso/CentOS-Stream-9-latest-aarch64-dvd1.iso&redirect=1&protocol=https'

    Here we’ll copy the data we want into the necessary directories. Any pxeboot related images will go to /var/lib/tftpboot/rocky-X-ARCH (X being the major version, ARCH being the architecture). If we are keeping a local mirror of the DVD, we’ll put it into /var/www/html/os/rocky/X/ARCH. Below is for x86_64, but the same steps can be repeated for aarch64 without any issues. Just replace x86_64 with aarch64.

    +

    At this point, we’ll need to setup the grub menus. We’ll setup non-kickstart examples for BIOS and UEFI.

    +
    . . .
+# CentOS Stream 9
+menuentry 'Install CentOS Stream 9 (No KS) (UEFI)' --class fedora --class gnu-linux --class gnu --class os {
+  echo "Loading CentOS Stream 9 kernel..."
+  linuxefi centos-9-x86_64/vmlinuz inst.repo=http://10.100.0.1/os/centos/9/x86_64 inst.stage2=http://10.100.0.1/os/centos/9/x86_64 ip=dhcp
+  initrdefi centos-9-x86_64/initrd.img
+}
+menuentry 'Install CentOS Stream 9 (No KS) (BIOS)' --class fedora --class gnu-linux --class gnu --class os {
+  echo "Loading CentOS Stream 9 kernel..."
+  linux16 centos-9-x86_64/vmlinuz inst.repo=http://10.100.0.1/os/centos/9/x86_64 inst.stage2=http://10.100.0.1/os/centos/9/x86_64 ip=dhcp
+  initrd16 centos-9-x86_64/initrd.img
+}
+
+# if you are setting up arm...
+menuentry 'Install CentOS Stream 9 (No KS) (aarch64)' --class fedora --class gnu-linux --class gnu --class os {
+  echo "Loading CentOS Stream 9 kernel..."
+  linux centos-9-aarch64/vmlinuz inst.repo=http://10.100.0.1/os/centos/9/aarch64 inst.stage2=http://10.100.0.1/os/centos/9/aarch64 ip=dhcp
+  initrd centos-9-aarch64/initrd.img
+}

    The CentOS Stream installation should now be bootable.

    +
    +
    +

    Fedora

    +

    Let’s put up a regular installer with no kickstart for Fedora. This does not involve pulling down any ISO’s and will rely entirely on using upstream repositories.

    % cd /var/lib/tftpboot
 % mkdir fedora-x86_64
 % cd fedora-x86_64
@@ -310,25 +436,26 @@ 
    Adding Distributions<
 % wget https://dl.fedoraproject.org/pub/fedora/linux/releases/XX/Everything/aarch64/os/images/pxeboot/vmlinuz

    Now we can add a couple menu entry items for Fedora. I’m making both EFI and Classic entries to ensure we can boot both EFI and BIOS systems from the same menu.

    . . .
 menuentry 'Install Fedora Linux (EFI)' --class fedora --class gnu-linux --class gnu --class os {
-  linuxefi fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os ip=dhcp
+  linuxefi fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os ip=dhcp
   initrdefi fedora-x86_64/initrd.img
 }
 menuentry 'Install Fedora Linux (Classic)' --class fedora --class gnu-linux --class gnu --class os {
-  linux16 fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os/ ip=dhcp
+  linux16 fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os/ ip=dhcp
   initrd16 fedora-x86_64/initrd.img
 }
 # Add the below for ARM systems
 menuentry 'Install Fedora Linux (ARM)' --class fedora --class gnu-linux --class gnu --class os {
-  linux fedora-aarch64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/aarch64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/aarch64/os/ ip=dhcp
+  linux fedora-aarch64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/aarch64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/aarch64/os/ ip=dhcp
   initrd fedora-aarch64/initrd.img
 }

    Now the Fedora installation should be bootable.

    +
    -

    Customizing Grub

    +

    Customizing Grub

    Grub is customizable. It is possible to setup background images, choose menu colors, setup themes, and so on.

    -

    Colors and Backgrounds

    +

    Colors and Backgrounds

    Colors and backgrounds are perfectly possible, even in an EFI setup. We’ll need to load a few modules and then set the colors and background we want. Note that if you’re using a background, it should live in /var/lib/tftpboot to make things easier.

    . . .
 insmod all_video
@@ -347,7 +474,7 @@ 
    Colors and Backgroun
 ../_images/grub_ex.png
    -

    Special Submenus

    +

    Special Submenus

    Submenus are easily created using submenu in the grub configuration. For example:

    submenu 'Fedora Linux' --class fedora --class gnu-linux --class gnu --class os {
    set menu_color_highlight=black/light-cyan
@@ -355,15 +482,15 @@ 
    Special Submenus
    set color_normal=white/black
 
    menuentry 'Install Fedora Linux (EFI)' --class fedora --class gnu-linux --class gnu --class os {
-     linuxefi fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os ip=dhcp
+     linuxefi fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os ip=dhcp
      initrdefi fedora-x86_64/initrd.img
    }
    menuentry 'Install Fedora Linux (Classic)' --class fedora --class gnu-linux --class gnu --class os {
-     linux16 fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os/ ip=dhcp
+     linux16 fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os/ ip=dhcp
      initrd16 fedora-x86_64/initrd.img
    }
    menuentry 'Install Fedora Linux (ARM)' --class fedora --class gnu-linux --class gnu --class os {
-     linux fedora-aarch64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/aarch64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/aarch64/os/ ip=dhcp
+     linux fedora-aarch64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/aarch64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/aarch64/os/ ip=dhcp
      initrd fedora-aarch64/initrd.img
    }
 }

    This now means “Fedora Linux” will show up as a menu option and it will take you to a brand new menu with the two listed items, and another color scheme. Note that we created color items because submenus will reset the theme options. Example of how it looks is below.

    @@ -375,15 +502,15 @@

    Special Submenus set color_normal=white/black source fedora.cfg }
    menuentry 'Install Fedora Linux (EFI)' --class fedora --class gnu-linux --class gnu --class os {
-  linuxefi fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os ip=dhcp
+  linuxefi fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os ip=dhcp
   initrdefi fedora-x86_64/initrd.img
 }
 menuentry 'Install Fedora Linux (Classic)' --class fedora --class gnu-linux --class gnu --class os {
-  linux16 fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os/ ip=dhcp
+  linux16 fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os/ ip=dhcp
   initrd16 fedora-x86_64/initrd.img
 }
 menuentry 'Install Fedora Linux (ARM)' --class fedora --class gnu-linux --class gnu --class os {
-  linux fedora-aarch64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/aarch64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/aarch64/os/ ip=dhcp
+  linux fedora-aarch64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/aarch64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/aarch64/os/ ip=dhcp
   initrd fedora-aarch64/initrd.img
 }

    Submenus can be nested too. Here’s a deeper, working example of my own setup using Fedora 35.

    # grub.cfg
@@ -435,17 +562,17 @@ 
    Special Submenus
     set color_normal=white/black
 
     menuentry 'Install Fedora Linux (No KS)' --class fedora --class gnu-linux --class gnu --class os {
-      linuxefi fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os ip=dhcp
+      linuxefi fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os ip=dhcp
       initrdefi fedora-x86_64/initrd.img
     }
 
     menuentry 'Install Fedora Linux' --class fedora --class gnu-linux --class gnu --class os {
-      linuxefi fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os ip=dhcp
+      linuxefi fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os ip=dhcp
       initrdefi fedora-x86_64/initrd.img
     }
 
     menuentry 'Fedora Linux (Rescue Mode)' --class fedora --class gnu-linux --class gnu --class os {
-      linuxefi fedora-x86_64/vmlinuz inst.rescue inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os
+      linuxefi fedora-x86_64/vmlinuz inst.rescue inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os
       initrdefi fedora-x86_64/initrd.img
     }
   }
@@ -457,17 +584,17 @@ 
    Special Submenus
     set color_normal=white/black
 
     menuentry 'Install Fedora Linux (No KS)' --class fedora --class gnu-linux --class gnu --class os {
-      linux16 fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os/ ip=dhcp
+      linux16 fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os/ ip=dhcp
       initrd16 fedora-x86_64/initrd.img
     }
 
      menuentry 'Install Fedora Linux' --class fedora --class gnu-linux --class gnu --class os {
-      linux16 fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os/ ip=dhcp
+      linux16 fedora-x86_64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os/ inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os/ ip=dhcp
       initrd16 fedora-x86_64/initrd.img
     }
 
     menuentry 'Fedora Linux (Rescue Mode)' --class fedora --class gnu-linux --class gnu --class os {
-      linux16 fedora-x86_64/vmlinuz inst.rescue inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os/
+      linux16 fedora-x86_64/vmlinuz inst.rescue inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/x86_64/os/
       initrd16 fedora-x86_64/initrd.img
     }
   }
@@ -479,17 +606,17 @@ 
    Special Submenus
     set color_normal=white/black
 
     menuentry 'Install Fedora Linux (No KS)' --class fedora --class gnu-linux --class gnu --class os {
-      linuxefi fedora-aarch64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/aarch64/os inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/aarch64/os ip=dhcp
+      linuxefi fedora-aarch64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/aarch64/os inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/aarch64/os ip=dhcp
       initrdefi fedora-aarch64/initrd.img
     }
 
     menuentry 'Install Fedora Linux' --class fedora --class gnu-linux --class gnu --class os {
-      linuxefi fedora-aarch64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/aarch64/os inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/aarch64/os ip=dhcp
+      linuxefi fedora-aarch64/vmlinuz inst.repo=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/aarch64/os inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/aarch64/os ip=dhcp
       initrdefi fedora-aarch64/initrd.img
     }
 
     menuentry 'Fedora Linux (Rescue Mode)' --class fedora --class gnu-linux --class gnu --class os {
-      linuxefi fedora-aarch64/vmlinuz inst.rescue inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/aarch64/os
+      linuxefi fedora-aarch64/vmlinuz inst.rescue inst.stage2=http://dl.fedoraproject.org/pub/fedora/linux/releases/39/Everything/aarch64/os
       initrdefi fedora-aarch64/initrd.img
     }
   }
@@ -515,7 +642,7 @@ 
    Special Submenus
 
   
    
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
    
diff --git a/el/sysadmin.html b/el/sysadmin.html
index 254e2345..25cc576f 100644
--- a/el/sysadmin.html
+++ b/el/sysadmin.html
@@ -496,7 +496,7 @@ 
    Ansible
    
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
    
diff --git a/el/unbound.html b/el/unbound.html
index 6c5363cb..b3c9a372 100644
--- a/el/unbound.html
+++ b/el/unbound.html
@@ -184,7 +184,7 @@ 
    DNS over TLS (DoT)
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/errata/removed.html b/errata/removed.html
index d8415aac..73fc6dc9 100644
--- a/errata/removed.html
+++ b/errata/removed.html
@@ -212,7 +212,7 @@ 
    Removed information
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/errata/upcoming.html b/errata/upcoming.html
index 915be394..606b255f 100644
--- a/errata/upcoming.html
+++ b/errata/upcoming.html
@@ -117,7 +117,7 @@ 
    Annoucements
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/fedora/backups.html b/fedora/backups.html
index f94069dd..d2936371 100644
--- a/fedora/backups.html
+++ b/fedora/backups.html
@@ -321,7 +321,7 @@ 
    git-annex
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/fedora/btrfs.html b/fedora/btrfs.html
index 6054079b..282e58e6 100644
--- a/fedora/btrfs.html
+++ b/fedora/btrfs.html
@@ -120,7 +120,7 @@ 
    BTRFS
 
   
    
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
    
diff --git a/fedora/cipc.html b/fedora/cipc.html
index 64961d22..781f3421 100644
--- a/fedora/cipc.html
+++ b/fedora/cipc.html
@@ -160,7 +160,7 @@ 
    Pulse Audio
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/fedora/clang.html b/fedora/clang.html
index 5c973740..cbacdc74 100644
--- a/fedora/clang.html
+++ b/fedora/clang.html
@@ -122,7 +122,7 @@ 
    clang-format
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/fedora/copr.html b/fedora/copr.html
index b21b535c..2ccf7695 100644
--- a/fedora/copr.html
+++ b/fedora/copr.html
@@ -148,7 +148,7 @@ 
    ircd
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/fedora/dnf.html b/fedora/dnf.html
index dcc21de5..7872a054 100644
--- a/fedora/dnf.html
+++ b/fedora/dnf.html
@@ -135,7 +135,7 @@ 
    dnf
    
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/fedora/dns.html b/fedora/dns.html
index d2d82ab2..9d008e7b 100644
--- a/fedora/dns.html
+++ b/fedora/dns.html
@@ -153,7 +153,7 @@ 
    Interoperability with systemd-resolved
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/fedora/docker.html b/fedora/docker.html
index 73c9b51e..18c4664b 100644
--- a/fedora/docker.html
+++ b/fedora/docker.html
@@ -159,7 +159,7 @@ 
    Podman
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/fedora/emulators.html b/fedora/emulators.html
index 097cb1ed..fd07616b 100644
--- a/fedora/emulators.html
+++ b/fedora/emulators.html
@@ -149,7 +149,7 @@ 
    No Sound?
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/fedora/firefox.html b/fedora/firefox.html
index a42bd91d..b5b98f0c 100644
--- a/fedora/firefox.html
+++ b/fedora/firefox.html
@@ -203,7 +203,7 @@ 
    Alternative to Stylus
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/fedora/gcc.html b/fedora/gcc.html
index 4f8802b0..ae2750cd 100644
--- a/fedora/gcc.html
+++ b/fedora/gcc.html
@@ -166,7 +166,7 @@ 
    “invalid instruction suffix for”
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/fedora/git.html b/fedora/git.html
index 00711660..078843ae 100644
--- a/fedora/git.html
+++ b/fedora/git.html
@@ -171,7 +171,7 @@ 
    GPG
    
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/fedora/gnometips.html b/fedora/gnometips.html
index 9bce6ba6..b16174a7 100644
--- a/fedora/gnometips.html
+++ b/fedora/gnometips.html
@@ -150,7 +150,7 @@ 
    Changing “Program not responding” check timeout
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/fedora/grub.html b/fedora/grub.html
index af0be9f1..537d4abe 100644
--- a/fedora/grub.html
+++ b/fedora/grub.html
@@ -120,7 +120,7 @@ 
    Fedora Grub Menu Missing
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/fedora/iphone.html b/fedora/iphone.html
index 637fb801..8f9f307c 100644
--- a/fedora/iphone.html
+++ b/fedora/iphone.html
@@ -131,7 +131,7 @@ 
    iPhone
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/fedora/mcafee.html b/fedora/mcafee.html
index 19df7ce2..bf02ba0f 100644
--- a/fedora/mcafee.html
+++ b/fedora/mcafee.html
@@ -200,7 +200,7 @@ 
    McAfee
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/fedora/misc.html b/fedora/misc.html
index b238dba3..1cbd50ce 100644
--- a/fedora/misc.html
+++ b/fedora/misc.html
@@ -198,7 +198,7 @@ 
    statvfs ‘/run/user/1000/doc’ failed: Operation not permitted
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/fedora/mpv.html b/fedora/mpv.html
index 9c5de738..1f6a1078 100644
--- a/fedora/mpv.html
+++ b/fedora/mpv.html
@@ -114,7 +114,7 @@ 
    mpv
    
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/fedora/nvidia.html b/fedora/nvidia.html
index 4e6f7783..eccbb7df 100644
--- a/fedora/nvidia.html
+++ b/fedora/nvidia.html
@@ -197,7 +197,7 @@ 
    Automatically signing modules for secure boot
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/fedora/pip.html b/fedora/pip.html
index b6931a52..ae71bc0d 100644
--- a/fedora/pip.html
+++ b/fedora/pip.html
@@ -124,7 +124,7 @@ 
    pip
    
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/fedora/powerline.html b/fedora/powerline.html
index 4b71e7ec..a5adfaed 100644
--- a/fedora/powerline.html
+++ b/fedora/powerline.html
@@ -172,7 +172,7 @@ 
    tmux
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/fedora/tmux.html b/fedora/tmux.html
index a692dfe7..6d39eb09 100644
--- a/fedora/tmux.html
+++ b/fedora/tmux.html
@@ -132,7 +132,7 @@ 
    tmux
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/fedora/vim.html b/fedora/vim.html
index 3d3969db..6193e6f2 100644
--- a/fedora/vim.html
+++ b/fedora/vim.html
@@ -124,7 +124,7 @@ 
    Plugins
    
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
    
diff --git a/fedora/winetips.html b/fedora/winetips.html
index 9fb3f124..86265c20 100644
--- a/fedora/winetips.html
+++ b/fedora/winetips.html
@@ -257,7 +257,7 @@ 
    proton-caller
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/fedora/xscreensaver.html b/fedora/xscreensaver.html
index e2f1cc23..98e1726b 100644
--- a/fedora/xscreensaver.html
+++ b/fedora/xscreensaver.html
@@ -142,7 +142,7 @@ 
    Conflict with xfce-screensaver
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/index.html b/index.html
index e7513100..8113092f 100644
--- a/index.html
+++ b/index.html
@@ -210,7 +210,7 @@ 
    Linux Guide and Hints
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/macos/image.html b/macos/image.html
index b1fac279..ebcdfab5 100644
--- a/macos/image.html
+++ b/macos/image.html
@@ -116,7 +116,7 @@ 
    Create macOS ISO Images
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/misc/euphemism.html b/misc/euphemism.html
index fd0cc11f..44b63072 100644
--- a/misc/euphemism.html
+++ b/misc/euphemism.html
@@ -168,7 +168,7 @@ 
    Please don’t say “timeframe”
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/misc/ipv6he.html b/misc/ipv6he.html
index bcf05bbc..da314373 100644
--- a/misc/ipv6he.html
+++ b/misc/ipv6he.html
@@ -137,7 +137,7 @@ 
    Hurricane Electric IPv6 Tunnel
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/misc/mingw.html b/misc/mingw.html
index 1ef6b1d6..14dbbe76 100644
--- a/misc/mingw.html
+++ b/misc/mingw.html
@@ -123,7 +123,7 @@ 
    Why not use WSL?
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/misc/port465.html b/misc/port465.html
index 066dbdc7..5f02844c 100644
--- a/misc/port465.html
+++ b/misc/port465.html
@@ -175,7 +175,7 @@ 
    Is port 465 deprecated?
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/misc/vnc.html b/misc/vnc.html
index b68d9f20..4b2c7783 100644
--- a/misc/vnc.html
+++ b/misc/vnc.html
@@ -141,7 +141,7 @@ 
    Setup
 
   
    
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
    
diff --git a/search.html b/search.html
index b93cfa02..d58fce23 100644
--- a/search.html
+++ b/search.html
@@ -129,7 +129,7 @@ 
    Search
    
 
   
    
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
    
diff --git a/searchindex.js b/searchindex.js
index 79eee8d2..30b8d0f7 100644
--- a/searchindex.js
+++ b/searchindex.js
@@ -1 +1 @@
-Search.setIndex({"docnames": ["about/contributors", "el/builds", "el/freeipa", "el/nat", "el/openldap", "el/pxeboot", "el/sysadmin", "el/unbound", "errata/removed", "errata/upcoming", "fedora/backups", "fedora/btrfs", "fedora/cipc", "fedora/clang", "fedora/copr", "fedora/dnf", "fedora/dns", "fedora/docker", "fedora/emulators", "fedora/firefox", "fedora/gcc", "fedora/git", "fedora/gnometips", "fedora/grub", "fedora/iphone", "fedora/mcafee", "fedora/misc", "fedora/mpv", "fedora/nvidia", "fedora/pip", "fedora/powerline", "fedora/tmux", "fedora/vim", "fedora/winetips", "fedora/xscreensaver", "index", "macos/image", "misc/euphemism", "misc/ipv6he", "misc/mingw", "misc/port465", "misc/vnc", "security/antipatterns", "security/myths", "security/passwords", "training/ex362", "training/ex407", "training/ex415"], "filenames": ["about/contributors.rst", "el/builds.rst", "el/freeipa.rst", "el/nat.rst", "el/openldap.rst", "el/pxeboot.rst", "el/sysadmin.rst", "el/unbound.rst", "errata/removed.rst", "errata/upcoming.rst", "fedora/backups.rst", "fedora/btrfs.rst", "fedora/cipc.rst", "fedora/clang.rst", "fedora/copr.rst", "fedora/dnf.rst", "fedora/dns.rst", "fedora/docker.rst", "fedora/emulators.rst", "fedora/firefox.rst", "fedora/gcc.rst", "fedora/git.rst", "fedora/gnometips.rst", "fedora/grub.rst", "fedora/iphone.rst", "fedora/mcafee.rst", "fedora/misc.rst", "fedora/mpv.rst", "fedora/nvidia.rst", "fedora/pip.rst", "fedora/powerline.rst", "fedora/tmux.rst", "fedora/vim.rst", "fedora/winetips.rst", "fedora/xscreensaver.rst", "index.rst", "macos/image.rst", "misc/euphemism.rst", "misc/ipv6he.rst", "misc/mingw.rst", "misc/port465.rst", "misc/vnc.rst", "security/antipatterns.rst", "security/myths.rst", "security/passwords.rst", "training/ex362.rst", "training/ex407.rst", "training/ex415.rst"], "titles": ["Contributors", "Auto-Provisioning", "FreeIPA", "NAT/Router", "OpenLDAP", "PXE (with grub2)", "The System Administrator Experience", "Unbound", "Errata", "Upcoming", "Backups", "BTRFS", "Cisco IP Communicator", "Clang", "COPR", "dnf", "DNS", "Docker", "Emulators", "Firefox", "GCC", "Git", "GNOME Tips", "GRUB", "iPhone", "McAfee", "Misc", "mpv", "Nvidia drivers", "pip", "Powerline", "tmux", "vim", "Wine Tips", "XScreenSaver", "Linux Guide and Hints", "Create macOS ISO Images", "The Euphemism Review", "Hurricane Electric IPv6 Tunnel", "MinGW", "Is port 465 deprecated?", "VNC", "Anti-patterns", "Myths", "Password management", "EX362 Exam Prep", "EX407 Exam Prep", "EX415 Exam Prep"], "terms": {"nazunalika": [0, 1, 2, 3, 4, 5, 6, 7, 9, 22, 23, 25, 36, 37, 41, 45, 46, 47], "linux": [0, 1, 3, 5, 6, 8, 9, 12, 18, 25, 26, 33, 39, 40, 42, 43, 44, 45, 47], "system": [0, 2, 3, 4, 5, 10, 11, 12, 15, 17, 19, 20, 23, 25, 28, 29, 33, 35, 36, 41, 42, 44, 45], "engin": [0, 2, 43], "remyabel": 0, "i": [0, 2, 3, 4, 5, 6, 7, 8, 10, 11, 12, 13, 15, 16, 17, 19, 20, 21, 22, 23, 24, 25, 27, 28, 29, 30, 31, 32, 33, 35, 36, 37, 38, 39, 41, 42, 44, 45, 46, 47], "am": [0, 2], "affili": [0, 45, 46, 47], "rocki": [0, 4, 8, 9, 35], "ani": [0, 2, 4, 6, 10, 11, 16, 30, 33, 34, 39, 42, 43, 44, 45, 46, 47], "capac": 0, "xamiel": 0, "secur": [0, 2, 4, 8, 10, 17, 25, 40, 41, 43, 44, 45], "origin": [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 36, 37, 39, 40, 41, 42, 43, 44, 45, 46, 47], "author": [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 36, 37, 39, 40, 41, 42, 43, 44, 46, 47], "last": [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 36, 37, 39, 40, 41, 42, 43, 44, 45, 46, 47], "modifi": [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 36, 37, 39, 40, 41, 42, 43, 44, 45, 46, 47], "mon": [1, 3, 5, 6, 7, 9, 11, 12, 13, 14, 15, 17, 18, 19, 20, 21, 22, 23, 24, 25, 27, 28, 29, 30, 31, 32, 33, 34, 36, 37, 39, 40, 41, 42, 43, 44, 46, 47], "aug": [1, 2, 3, 5, 6, 7, 9, 10, 11, 12, 13, 14, 15, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 36, 37, 39, 40, 41, 42, 43, 44, 46, 47], "1": [1, 2, 3, 4, 5, 6, 7, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47], "17": [1, 3, 5, 6, 7, 8, 9, 11, 12, 13, 14, 15, 17, 18, 19, 20, 21, 22, 23, 24, 25, 27, 28, 29, 30, 31, 32, 33, 34, 36, 37, 39, 40, 41, 42, 43, 44, 46, 47], "02": [1, 2, 3, 5, 6, 7, 8, 9, 11, 12, 13, 14, 15, 17, 18, 19, 20, 21, 22, 23, 24, 25, 27, 28, 29, 30, 31, 32, 33, 34, 36, 37, 39, 40, 41, 42, 43, 44, 45, 46, 47], "thi": [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 12, 13, 15, 16, 17, 19, 20, 21, 22, 24, 25, 26, 28, 29, 30, 31, 33, 34, 35, 36, 37, 38, 40, 41, 42, 43, 44, 45, 46, 47], "page": [1, 2, 3, 5, 8, 10, 13, 17, 19, 20, 33, 35, 42, 45, 46, 47], "goe": [1, 2, 3, 4, 5, 17, 18, 19, 26, 30, 42, 44, 45, 47], "over": [1, 2, 3, 4, 5, 6, 16, 17, 19, 29, 37, 40, 43, 44, 45, 46, 47], "variou": [1, 2, 4, 5, 12, 16, 20, 42, 45, 46, 47], "wai": [1, 2, 4, 5, 19, 20, 23, 24, 28, 29, 40, 42, 45, 47], "instal": [1, 3, 5, 6, 8, 10, 11, 13, 14, 15, 18, 19, 22, 23, 25, 26, 27, 28, 29, 32, 33, 36, 39, 41, 47], "can": [1, 2, 3, 4, 5, 6, 10, 11, 12, 14, 15, 16, 17, 19, 20, 21, 22, 24, 25, 26, 28, 29, 30, 33, 35, 36, 37, 38, 41, 42, 45, 46, 47], "autom": [1, 6, 45, 46, 47], "without": [1, 2, 3, 6, 10, 11, 17, 19, 21, 25, 28, 33, 37, 42, 44, 47], "us": [1, 2, 3, 4, 5, 7, 8, 10, 11, 12, 13, 15, 16, 17, 20, 21, 27, 28, 29, 30, 31, 33, 35, 36, 37, 38, 40, 41, 43, 46], "pxe": [1, 35], "instead": [1, 2, 3, 4, 6, 8, 9, 10, 11, 13, 17, 19, 20, 22, 26, 27, 33, 37, 40, 41, 43, 45, 47], "we": [1, 2, 3, 4, 5, 6, 8, 9, 10, 11, 12, 14, 16, 17, 19, 25, 35, 37, 41, 44, 45, 46, 47], "templat": [1, 4], "script": [1, 4, 10, 13, 20, 25, 28, 33, 36, 45], "pre": [1, 2, 4, 38, 45], "configur": [1, 5, 7, 10, 12, 14, 20, 21, 25, 28, 30, 38, 40, 42, 43], "command": [1, 2, 4, 5, 6, 10, 11, 15, 26, 33, 39, 40, 44, 45], "boot": [1, 5, 23, 47], "imag": [1, 2, 5, 6, 17, 20, 25, 35, 47], "mirror": [1, 2, 3], "build": [1, 2, 17, 19, 28, 43], "cover": [1, 3, 4, 10, 31, 45], "follow": [1, 2, 4, 5, 6, 10, 13, 14, 16, 18, 19, 20, 21, 22, 27, 28, 31, 33, 36, 37, 38, 42, 45, 46, 47], "here": [1, 2, 3, 4, 5, 6, 7, 10, 19, 25, 28, 35, 37, 40, 45, 46, 47], "cento": [1, 6, 8, 9, 23, 35, 41, 45, 47], "stream": [1, 6], "9": [1, 2, 3, 4, 5, 6, 7, 20, 45], "enterpris": [1, 3, 5, 6], "8": [1, 2, 3, 4, 5, 6, 7, 9, 10, 38, 45, 46, 47], "fedora": [1, 3, 5, 6, 8, 10, 11, 16, 17, 18, 19, 20, 24, 25, 26, 29, 30, 41, 43, 47], "opensus": [1, 2], "15": [1, 2, 36, 45, 47], "window": [1, 2, 6, 12, 19, 23, 33, 39, 45], "server": [1, 7, 16, 25, 26, 38, 40, 41, 42, 47], "fri": 2, "12": [2, 8, 45, 47], "19": [2, 45, 47], "18": [2, 8, 28, 45, 47], "seri": [2, 10, 45, 47], "inform": [2, 4, 6, 15, 21, 25, 35, 38, 44, 46], "how": [2, 3, 4, 5, 6, 14, 16, 25, 26, 31, 37, 40, 42, 44, 45, 47], "well": [2, 3, 4, 20, 27, 34, 35, 40, 42, 45, 46, 47], "machin": [2, 4, 5, 6, 25, 36, 38, 43, 47], "connect": [2, 3, 4, 10, 24, 40], "util": [2, 4, 6, 26, 27, 39, 45], "resourc": [2, 6, 8, 40, 42, 46], "polici": [2, 25, 42, 47], "eg": [2, 4, 6, 38, 45], "host": [2, 4, 6, 25, 45, 47], "base": [2, 4, 6, 22, 26, 36, 43, 45, 47], "access": [2, 4, 7, 17, 23, 25, 36, 40, 42, 44, 47], "control": [2, 4, 7, 25, 43, 45, 47], "method": [2, 4, 6, 30, 31, 36, 38, 45], "also": [2, 4, 5, 6, 8, 10, 16, 17, 25, 26, 28, 30, 33, 37, 38, 40, 41, 42, 44, 45, 46, 47], "go": [2, 3, 4, 6, 7, 10, 16, 19, 26, 30, 33, 37, 45, 47], "scenario": [2, 45, 47], "an": [2, 3, 4, 5, 6, 7, 10, 14, 20, 21, 25, 26, 28, 31, 37, 38, 40, 42, 44, 47], "work": [2, 3, 4, 5, 7, 8, 12, 16, 21, 27, 30, 33, 39, 41, 42, 43, 44, 45, 47], "ar": [2, 3, 4, 5, 6, 7, 8, 10, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 25, 26, 28, 29, 30, 32, 33, 35, 36, 37, 40, 41, 42, 45, 46, 47], "same": [2, 5, 6, 7, 20, 34, 40, 44, 45, 47], "just": [2, 3, 4, 5, 7, 10, 13, 15, 20, 25, 30, 42, 45, 47], "version": [2, 4, 5, 8, 10, 12, 14, 17, 18, 28, 29, 30, 36, 40, 45, 47], "integr": [2, 6, 13, 44, 47], "combin": [2, 4, 6, 10, 16, 42], "389": [2, 4, 45], "ntp": [2, 45], "dogtag": [2, 45], "It": [2, 3, 4, 5, 6, 10, 11, 12, 14, 15, 17, 19, 20, 22, 25, 26, 28, 29, 30, 31, 33, 34, 37, 38, 39, 40, 41, 42, 44, 45, 46, 47], "loos": [2, 46, 47], "compar": [2, 10, 44], "what": [2, 3, 4, 6, 8, 9, 10, 15, 19, 31, 37, 40, 42, 43, 44, 45, 47], "attempt": [2, 4, 6, 28, 29, 31, 39, 42, 45, 47], "solv": [2, 4], "unix": [2, 6, 47], "even": [2, 5, 6, 10, 20, 26, 33, 37, 42, 45, 47], "mix": [2, 25, 33, 42], "environ": [2, 4, 5, 10, 15, 22, 25, 31, 37, 47], "while": [2, 3, 4, 5, 6, 10, 11, 17, 19, 26, 29, 33, 42, 43, 45], "ident": [2, 45, 47], "authent": [2, 4, 6], "which": [2, 4, 5, 8, 10, 13, 15, 17, 19, 22, 24, 25, 26, 33, 34, 40, 41, 42, 43, 44, 45, 47], "mean": [2, 4, 5, 6, 18, 26, 45, 47], "doe": [2, 4, 5, 6, 10, 11, 17, 19, 20, 21, 22, 26, 27, 28, 33, 37, 42, 43, 44, 45, 46, 47], "support": [2, 4, 5, 6, 8, 14, 16, 20, 21, 22, 26, 28, 30, 31, 33, 41, 42, 45, 47], "One": [2, 3, 10, 16, 29, 45, 47], "problem": [2, 4, 26, 42], "give": [2, 4, 6, 10, 47], "back": [2, 4, 6, 12, 22], "administr": [2, 4, 35, 42, 44, 45, 47], "team": [2, 39], "rather": [2, 4, 5, 10, 17, 26, 29, 43, 45], "than": [2, 4, 5, 6, 10, 17, 26, 29, 40, 43, 44, 45, 47], "try": [2, 6, 12, 25, 26, 30, 33, 45, 46, 47], "directli": [2, 6, 13, 19, 43, 45, 46, 47], "where": [2, 3, 4, 6, 10, 14, 19, 22, 26, 28, 33, 40, 43, 45, 46, 47], "do": [2, 3, 4, 5, 6, 9, 10, 11, 12, 16, 17, 19, 20, 22, 24, 27, 28, 30, 31, 33, 34, 36, 37, 41, 42, 43, 44, 45, 46, 47], "all": [2, 3, 4, 5, 6, 12, 17, 18, 28, 29, 30, 33, 37, 38, 40, 42, 45, 47], "And": [2, 10, 11, 22, 32, 37, 44, 45], "becaus": [2, 4, 5, 6, 8, 10, 16, 21, 26, 28, 29, 30, 37, 41, 42, 45, 47], "third": [2, 4, 42, 43, 44], "parti": [2, 4, 42, 43, 44], "softwar": [2, 4, 6, 10, 14, 40, 43, 44, 45, 47], "list": [2, 3, 4, 5, 6, 10, 12, 20, 21, 24, 26, 28, 42, 45, 46, 47], "below": [2, 3, 4, 5, 7, 19, 36, 37, 40, 45, 47], "internet": [2, 3, 4, 6, 16, 20, 26, 28, 40], "avail": [2, 3, 4, 6, 12, 14, 16, 28, 30, 39, 42, 43, 45, 47], "intern": [2, 3, 4, 6], "2": [2, 3, 4, 5, 6, 10, 14, 19, 20, 30, 31, 33, 38, 40, 42, 45, 47], "core": [2, 4, 5, 6, 25, 33, 40, 45, 47], "4gb": [2, 33, 45], "least": [2, 3, 4, 5, 6, 12, 13, 22, 38, 45, 47], "10gb": [2, 45], "disk": [2, 6, 45, 47], "var": [2, 4, 5, 17, 25, 28, 45, 47], "lib": [2, 4, 5, 17, 18, 25, 27, 28, 29, 41, 45, 47], "dirsrv": [2, 45], "applianc": 2, "alreadi": [2, 3, 4, 6, 7, 18, 29, 30, 45, 46], "exist": [2, 3, 5, 8, 19, 26, 45, 47], "potenti": [2, 4, 22], "pitfal": [2, 4], "leav": [2, 4], "selinux": [2, 4, 5, 6, 10, 17, 35], "time": [2, 4, 5, 6, 10, 11, 14, 15, 19, 22, 25, 37, 40, 41, 44, 45, 46, 47], "you": [2, 3, 4, 5, 6, 7, 8, 10, 11, 12, 13, 15, 16, 17, 18, 19, 20, 21, 22, 24, 25, 27, 28, 29, 30, 31, 32, 33, 34, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47], "run": [2, 4, 5, 6, 7, 8, 10, 11, 12, 13, 15, 16, 17, 18, 19, 20, 21, 22, 23, 25, 28, 29, 32, 33, 34, 37, 39, 42, 43, 45, 47], "better": [2, 5, 6, 20, 26, 41, 45, 46], "when": [2, 3, 4, 5, 6, 10, 14, 16, 20, 22, 25, 26, 28, 31, 33, 37, 40, 43, 45, 47], "given": [2, 4, 10, 37, 43, 47], "entir": [2, 4, 7, 26, 43], "dhcp": [2, 45], "isc": 2, "dynam": [2, 6, 47], "updat": [2, 4, 5, 6, 14, 28, 38, 45, 47], "perform": [2, 4, 6, 10, 27, 36, 42, 47], "keep": [2, 4, 5, 6, 8, 10, 14, 19, 25], "enforc": [2, 4, 6, 25], "must": [2, 3, 4, 5, 45, 47], "care": [2, 4, 29, 42], "your": [2, 3, 4, 5, 7, 10, 11, 12, 13, 15, 16, 17, 19, 20, 21, 22, 24, 25, 26, 28, 29, 30, 31, 33, 34, 37, 38, 41, 42, 43, 45, 46, 47], "network": [2, 3, 4, 6, 7, 12, 16, 24, 25, 26, 38, 45, 47], "case": [2, 3, 6, 10, 25, 26, 28, 31, 33, 38, 43, 45, 47], "have": [2, 3, 4, 6, 7, 8, 10, 12, 13, 14, 18, 19, 22, 23, 25, 26, 28, 33, 37, 38, 40, 42, 43, 44, 45, 46, 47], "ssh": [2, 10, 45, 47], "kei": [2, 4, 10, 19, 21, 28, 40, 42, 44, 45, 47], "sshfp": 2, "record": [2, 6, 42, 45], "enrol": [2, 6, 28, 45], "benefit": [2, 45], "its": [2, 5, 19, 25, 34, 45], "own": [2, 4, 5, 6, 10, 25, 34, 45, 46, 47], "entri": [2, 4, 5, 6, 18, 19, 31, 33, 45], "A": [2, 3, 4, 5, 6, 14, 16, 20, 21, 33, 40, 44, 45, 47], "ptr": [2, 45], "ip": [2, 4, 5, 6, 7, 21, 35, 38, 45], "chang": [2, 4, 5, 6, 9, 10, 18, 19, 25, 26, 28, 33, 34, 38, 45, 46, 47], "so": [2, 4, 5, 6, 7, 8, 10, 11, 12, 15, 16, 17, 18, 20, 33, 37, 42, 43, 45, 47], "choos": [2, 5, 6, 10, 38, 44, 45], "subdomain": [2, 21], "live": [2, 4, 5, 6, 11, 17, 22], "member": [2, 45], "lose": 2, "out": [2, 4, 5, 6, 10, 20, 21, 26, 35, 36, 38, 42, 45, 47], "sso": 2, "hijack": 2, "consid": [2, 4, 6, 20, 37, 40, 41, 42, 44, 45, 47], "up": [2, 3, 4, 7, 8, 10, 12, 14, 17, 19, 22, 25, 26, 28, 29, 33, 34, 38, 42, 47], "winsync": 2, "deprec": [2, 4, 10, 19, 26, 34, 35], "should": [2, 4, 5, 6, 7, 8, 9, 10, 11, 12, 15, 16, 17, 20, 24, 26, 29, 33, 34, 38, 40, 41, 42, 44, 45, 47], "static": [2, 3, 5, 6, 14, 45, 47], "assign": [2, 38, 40, 45], "address": [2, 3, 4, 5, 6, 7, 21, 33, 34, 38, 45], "via": [2, 6, 8, 13, 24, 42, 45, 47], "nmcli": [2, 3, 38, 45], "etc": [2, 3, 4, 5, 6, 7, 10, 12, 16, 17, 19, 24, 25, 26, 28, 38, 39, 41, 44, 45, 47], "sysconfig": [2, 4], "ifcfg": 2, "avoid": [2, 4, 6, 10, 28, 33, 43, 44, 45], "possibl": [2, 4, 5, 6, 14, 28, 29, 34, 38, 40, 45, 46, 47], "creat": [2, 4, 5, 6, 7, 10, 16, 17, 19, 26, 28, 33, 35, 38, 47], "higher": [2, 4, 6, 45], "mainten": 2, "If": [2, 3, 4, 5, 6, 7, 10, 11, 12, 15, 16, 17, 18, 19, 20, 21, 24, 26, 27, 28, 30, 31, 33, 37, 40, 41, 42, 45, 46, 47], "both": [2, 4, 5, 6, 17, 22, 28, 30, 31, 33, 34, 40, 42, 43, 45, 47], "between": [2, 5, 6, 40, 42, 47], "thei": [2, 4, 6, 14, 16, 22, 23, 25, 26, 28, 37, 39, 42, 45, 47], "need": [2, 3, 4, 5, 6, 10, 11, 15, 19, 20, 22, 23, 24, 25, 26, 27, 28, 29, 33, 36, 37, 38, 41, 42, 43, 45, 47], "differ": [2, 3, 4, 5, 12, 23, 26, 28, 33, 39, 40, 42, 43, 45], "exampl": [2, 3, 4, 5, 6, 7, 10, 14, 16, 17, 19, 21, 26, 33, 42, 43, 45, 46, 47], "com": [2, 4, 7, 10, 16, 17, 19, 21, 25, 30, 32, 42, 44, 45, 47], "net": [2, 3, 4, 5, 7, 18, 25, 33, 38, 45], "duplic": [2, 5], "nor": [2, 6, 8, 10, 12, 28, 47], "As": [2, 4, 5, 6, 10, 26, 33, 40, 45, 47], "previou": [2, 4, 28, 45], "section": [2, 3, 4, 5, 8, 9, 10, 28, 33, 40, 42, 45, 46, 47], "d": [2, 4, 12, 16, 26, 32, 33, 36, 38, 45, 46, 47], "taken": [2, 4, 43, 45], "approach": 2, "typic": [2, 4, 5, 6, 14, 32, 43, 44, 45, 47], "revers": [2, 6, 45], "zone": [2, 3, 4, 6, 7, 45], "type": [2, 4, 5, 10, 18, 21, 25, 26, 33, 38, 42, 45, 47], "full": [2, 4, 5, 6, 10, 30, 36, 42, 43, 45, 47], "view": [2, 3, 4, 6, 17, 23, 24, 44, 45, 47], "t": [2, 3, 4, 6, 8, 10, 13, 16, 19, 20, 26, 33, 39, 42, 45, 47], "extern": [2, 3, 4], "assum": [2, 7, 18, 44, 45], "public": [2, 4, 38, 47], "face": 2, "In": [2, 4, 5, 10, 12, 19, 20, 22, 24, 28, 30, 33, 34, 38, 40, 42, 43, 45, 47], "event": [2, 38, 45, 47], "servic": [2, 3, 4, 5, 6, 10, 11, 14, 17, 25, 28, 40, 41, 42, 44, 47], "provid": [2, 4, 6, 8, 11, 14, 20, 26, 28, 30, 31, 39, 40, 42, 44, 45, 46, 47], "There": [2, 4, 6, 10, 12, 16, 17, 20, 26, 28, 32, 33, 36, 42, 43, 44, 45, 47], "two": [2, 3, 4, 5, 7, 10, 19, 23, 26, 44, 45, 47], "suffici": [2, 4, 8, 26, 31, 45, 47], "latter": [2, 10, 26, 37], "addit": [2, 4, 5, 6, 20, 22, 25, 33, 40, 42, 44, 45, 47], "outsid": [2, 6, 33, 47], "scope": [2, 5, 6, 25, 45, 47], "write": [2, 4, 5, 6, 10, 11, 22, 43, 44, 47], "throughout": [2, 6, 47], "guid": [2, 6, 8, 9, 12, 16, 19, 28, 33, 40, 42, 47], "mai": [2, 3, 4, 5, 6, 8, 10, 14, 15, 17, 19, 20, 24, 25, 26, 27, 28, 29, 31, 33, 42, 43, 45, 46, 47], "find": [2, 4, 6, 10, 22, 33, 34, 40, 42, 45, 46, 47], "see": [2, 4, 5, 6, 10, 11, 15, 17, 19, 24, 25, 26, 28, 31, 33, 35, 40, 42, 44, 45, 46, 47], "would": [2, 4, 5, 6, 10, 12, 16, 21, 33, 37, 43, 45, 46, 47], "more": [2, 3, 6, 8, 15, 20, 28, 29, 40, 42, 43, 44, 45, 47], "real": [2, 4, 45, 47], "world": [2, 6, 45, 47], "bring": [2, 5], "place": [2, 5, 10, 30, 33, 37, 45], "major": [2, 10, 42], "normal": [2, 4, 12, 26, 33, 34, 37, 45, 47], "actual": [2, 4, 6, 10, 16, 20, 27, 33, 42, 45, 47], "parent": [2, 33, 47], "fact": [2, 6, 33, 42, 45, 47], "other": [2, 4, 5, 6, 10, 16, 22, 23, 24, 28, 36, 37, 39, 42, 43, 44, 45, 47], "long": [2, 4, 26, 37, 42, 44], "aaaa": 2, "associ": 2, "them": [2, 4, 5, 6, 10, 18, 19, 24, 25, 33, 37, 42, 44, 45, 46, 47], "could": [2, 4, 6, 8, 28, 41, 43, 44, 45, 47], "everyth": [2, 4, 5, 6, 7, 16, 25, 45], "caveat": [2, 6, 29, 42], "fail": [2, 4, 17, 31, 44, 47], "don": [2, 4, 6, 8, 10, 19, 20, 26, 33, 45, 47], "overlap": [2, 10, 16], "manner": [2, 8, 44, 45], "look": [2, 5, 6, 8, 10, 11, 19, 21, 22, 30, 31, 33, 37, 45, 47], "IN": [2, 45], "soa": 2, "n": [2, 4, 10, 11, 26, 45], "np": 2, "ad01": 2, "ad02": 2, "200": 2, "0": [2, 4, 5, 7, 10, 12, 16, 18, 25, 34, 45, 47], "232": [2, 45], "233": 2, "mani": [2, 6, 12, 15, 17, 19, 22, 23, 29, 37, 40, 43, 47], "pertain": 2, "msdc": 2, "srv": [2, 5, 45, 47], "ipa01": 2, "ipa02": [2, 45], "230": [2, 45], "231": [2, 5], "send": [2, 6, 45], "nsupdat": [2, 6], "permiss": [2, 4, 10, 26, 42, 43, 45, 47], "why": [2, 8, 17, 28, 42, 43, 45], "technic": [2, 15, 42], "sssd": [2, 4, 6, 45], "pull": [2, 4, 10, 24, 26, 28], "depend": [2, 4, 5, 12, 20, 24, 25, 26, 29, 43, 45], "To": [2, 3, 4, 5, 6, 10, 12, 17, 18, 22, 25, 36, 39, 40, 45, 47], "make": [2, 4, 5, 6, 10, 12, 14, 17, 18, 20, 22, 24, 25, 26, 28, 29, 30, 34, 37, 38, 42, 43, 44, 45, 47], "sure": [2, 4, 6, 10, 18, 24, 25, 28, 34, 38, 44, 45, 47], "hostnam": [2, 4, 10, 45], "ve": [2, 4, 6, 10, 18, 33, 37, 44, 45, 47], "put": [2, 4, 5, 6, 13, 19, 26, 31, 41, 45], "won": [2, 26, 47], "respond": [2, 6], "lookup": [2, 6, 25, 33], "stand": [2, 26, 45], "alon": 2, "top": [2, 4, 10, 30, 45], "level": [2, 26, 45, 47], "ll": [2, 3, 4, 5, 6, 7, 9, 28, 33, 40, 45, 47], "hostnamectl": [2, 10, 45], "server1": 2, "con": [2, 3, 38, 42, 45], "mod": [2, 3, 8, 45], "ens192": 2, "ipv4": [2, 38, 45], "24": [2, 4, 7, 8, 45], "gatewai": [2, 6, 38, 45], "manual": [2, 4, 5, 6, 8, 10, 15, 26, 28, 33, 38, 44, 45, 47], "vi": [2, 4, 6, 7, 25, 38, 41, 45, 47], "server2": 2, "dnf": [2, 4, 5, 18, 20, 22, 25, 26, 27, 28, 35], "common": [2, 4, 26, 33, 41, 42, 43, 45, 47], "y": [2, 4, 7, 22, 25, 33, 41, 45, 47], "modul": [2, 4, 5, 12, 24, 42, 45], "idm": 2, "dl1": [2, 45], "adtrust": [2, 45], "appear": [2, 4, 5, 24, 26, 28, 44, 47], "firewal": [2, 3, 5, 38, 41, 45, 47], "cmd": [2, 3, 4, 5, 41, 45, 47], "perman": [2, 3, 4, 5, 10, 41, 45, 47], "add": [2, 3, 5, 6, 10, 13, 19, 21, 25, 26, 28, 30, 31, 38, 41, 42, 46, 47], "4": [2, 4, 5, 20, 45, 47], "complet": [2, 3, 4, 10, 17, 20, 24, 26, 29, 31, 45], "reload": [2, 3, 4, 10, 17, 25, 45], "no_hbac_allow": 2, "want": [2, 3, 4, 5, 6, 10, 11, 12, 15, 17, 19, 20, 22, 25, 31, 32, 33, 36, 42, 45, 47], "allow_al": [2, 45], "initi": [2, 5, 10, 47], "from": [2, 3, 4, 5, 6, 8, 10, 11, 13, 15, 17, 19, 20, 21, 22, 23, 28, 29, 30, 33, 37, 38, 40, 42, 43, 44, 45, 47], "take": [2, 4, 5, 10, 12, 17, 29, 37, 42, 44, 45, 46, 47], "off": [2, 4, 42, 45], "show": [2, 4, 5, 7, 16, 33, 45, 47], "step": [2, 4, 6, 12, 30, 36, 45], "offici": [2, 20, 21], "one": [2, 3, 4, 5, 6, 10, 13, 14, 18, 25, 26, 32, 33, 34, 42, 43, 45, 46, 47], "workstat": [2, 25], "similar": [2, 4, 16, 25, 26, 40, 43], "separ": [2, 4, 5, 6, 45, 46], "form": [2, 4, 6, 42, 47], "kinit": [2, 45], "admin": [2, 4, 45, 47], "first": [2, 4, 6, 11, 12, 15, 16, 19, 20, 27, 33, 38, 42, 43, 45, 47], "cn": [2, 4, 45], "geco": 2, "flast2": 2, "On": [2, 5, 6, 19, 20, 23, 26, 38, 39, 43, 45, 47], "ensur": [2, 4, 5, 6, 7, 10, 12, 15, 16, 17, 18, 21, 42, 45, 46, 47], "repeat": 2, "abov": [2, 4, 6, 15, 18, 33, 37, 45, 47], "password": [2, 25, 34, 35, 38, 47], "changepass123": 2, "now": [2, 3, 4, 5, 6, 7, 8, 10, 11, 16, 17, 19, 22, 23, 25, 26, 34, 36, 40, 45, 47], "abl": [2, 4, 5, 6, 8, 22, 24, 38, 45, 47], "master": [2, 4, 6, 30, 45], "met": [2, 18], "commandlin": [2, 44], "ipaserv": [2, 45], "ran": [2, 18, 26, 45], "onc": [2, 4, 6, 10, 18, 29, 30, 33, 46, 47], "unattend": [2, 45], "mkhomedir": [2, 4], "multi": [2, 10, 25, 26], "process": [2, 4, 10, 19, 45, 47], "7": [2, 3, 4, 6, 33, 38, 40, 45, 47], "anoth": [2, 3, 4, 5, 6, 12, 16, 29, 30, 33, 40, 45, 47], "regardless": [2, 4, 5, 41, 44], "begin": [2, 4, 23, 47], "verifi": [2, 4, 10, 17, 26, 28, 45, 47], "synchron": 2, "ntpstat": 2, "equival": [2, 5, 6, 33], "role": [2, 4, 45, 47], "current": [2, 5, 6, 8, 11, 14, 16, 33, 36, 38, 47], "statu": [2, 10, 16, 21, 25, 28, 45], "new": [2, 4, 5, 6, 8, 10, 17, 18, 19, 32, 42, 47], "jump": 2, "latest": [2, 5, 6, 8, 10, 21, 35, 47], "singl": [2, 41], "doesn": [2, 3, 4, 6, 8, 10, 13, 16, 19, 33, 42, 43, 45, 47], "multipl": [2, 6, 7, 19, 33, 38, 44, 45, 47], "let": [2, 4, 5, 7, 37, 42, 45, 47], "sai": [2, 4, 6, 16, 25, 26, 31, 42, 44, 45, 47], "old": [2, 10, 17, 47], "reinstal": 2, "power": [2, 10, 28, 47], "x": [2, 4, 10, 14, 25, 29, 36, 41, 45, 47], "being": [2, 3, 4, 8, 16, 27, 40, 42, 44, 45, 47], "crl": 2, "adjust": [2, 10], "pki": [2, 4, 7, 28, 45], "tomcatd": 2, "httpd": [2, 6, 45, 47], "test": [2, 4, 10, 13, 16, 20, 28, 33, 42, 45, 46, 47], "dna": 2, "rang": [2, 5, 47], "stop": [2, 4, 5], "uninstal": [2, 33], "second": [2, 6, 22, 45], "again": [2, 4, 30, 42, 47], "necessari": [2, 4, 5, 11, 12, 15, 26, 30, 43, 45, 46, 47], "ie": 2, "switch": [2, 10, 28, 45, 47], "feel": 2, "kra": [2, 45], "state": [2, 4, 6, 10, 26, 33, 40, 47], "ipactl": 2, "csreplica": 2, "elx": 2, "eli": 2, "verbos": [2, 34], "init": [2, 10, 26, 47], "none": [2, 4, 6, 14, 33, 47], "end": [2, 4, 6, 10, 12, 29, 40, 44, 45, 47], "1970": 2, "01": [2, 4, 8, 9, 47], "00": [2, 5, 10, 25, 38, 45, 47], "error": [2, 4, 17, 20, 26, 28, 31, 42, 45, 47], "acquir": 2, "successfulli": [2, 47], "increment": [2, 10], "succeed": [2, 4], "2019": [2, 6, 8, 25, 42, 45, 47], "07": [2, 5, 8, 45, 47], "22": [2, 4, 28, 45, 47], "46": [2, 25], "config": [2, 4, 10, 16, 17, 19, 21, 26, 28, 30, 45, 47], "shut": [2, 45], "down": [2, 4, 6, 19, 33, 44, 45], "crlgen": 2, "edit": [2, 7, 26, 31, 33, 37], "tomcat": [2, 6], "c": [2, 4, 10, 13, 20, 26, 30, 39, 45, 47], "cfg": [2, 5, 47], "start": [2, 4, 6, 10, 11, 17, 25, 28, 31, 41, 44, 45, 47], "proxi": [2, 16, 21, 45], "restart": [2, 4, 5, 12, 15, 17, 19, 22, 33, 47], "local": [2, 4, 6, 10, 16, 18, 29, 30, 33, 42, 45, 47], "pleas": [2, 4, 6, 20, 28, 45, 46, 47], "wa": [2, 3, 4, 8, 10, 12, 14, 16, 20, 22, 40, 41, 45, 47], "success": [2, 40, 45, 46, 47], "file": [2, 3, 4, 5, 6, 10, 13, 14, 16, 17, 18, 19, 25, 26, 28, 29, 30, 33, 39, 44, 45, 47], "rewriterul": 2, "comment": [2, 4, 18, 42, 47], "tail": [2, 11], "mastercrl": 2, "bin": [2, 4, 10, 22, 25, 30, 38, 44, 45, 47], "ee": 2, "getcrl": 2, "op": 2, "crlissuingpoint": 2, "l": [2, 4, 24, 26, 30, 34, 45, 47], "r": [2, 4, 5, 10, 28, 44, 45, 47], "301": 2, "nc": 2, "turn": [2, 3, 4, 6, 42, 45, 47], "systemctl": [2, 3, 4, 5, 7, 15, 17, 25, 28, 41, 45, 47], "valu": [2, 4, 10, 19, 21, 26, 42, 47], "fals": [2, 4, 19], "true": [2, 4, 6, 10, 40, 45], "enablecrlcach": 2, "enablecrlupd": 2, "rewrit": 2, "rule": [2, 3, 7, 21, 44, 45, 47], "ha": [2, 3, 4, 6, 8, 9, 10, 16, 17, 19, 20, 21, 22, 26, 28, 29, 30, 33, 37, 40, 42, 43, 44, 47], "replic": [2, 6, 19, 45], "testinguser1": 2, "dnarang": 2, "delet": [2, 4, 17, 26, 33, 45, 47], "topologi": 2, "del": [2, 45], "2022": [2, 8], "08": [2, 5, 8, 45, 47], "certstatusupdateinterv": 2, "600": [2, 4, 45], "vim": [2, 4, 6, 13, 26, 31, 35], "properli": [2, 3, 6, 16, 33], "resolv": [2, 21, 29, 45], "either": [2, 4, 6, 8, 10, 15, 16, 20, 22, 26, 28, 33, 42, 43, 44, 45, 47], "infrastructur": [2, 43], "forest": [2, 45], "includ": [2, 4, 8, 10, 16, 25, 39, 42, 47], "prioriti": [2, 4], "correctli": [2, 4, 6, 12, 16, 21, 28], "choic": [2, 6, 30, 41, 42], "befor": [2, 4, 6, 10, 18, 23, 26, 28, 31, 45, 47], "continun": 2, "posix": [2, 45], "id": [2, 4, 45, 47], "automat": [2, 4, 6, 7, 10, 11, 12, 15, 20, 21, 23, 29, 38, 45, 47], "v": [2, 4, 10, 20, 39, 45, 47], "non": [2, 4, 10, 12, 33, 45, 47], "decid": [2, 6, 14, 21], "expect": [2, 6, 16, 37], "uidnumb": [2, 4], "gidnumb": [2, 4, 45], "loginshel": [2, 4], "unixhomedirectori": 2, "els": [2, 5, 6, 11, 12, 15, 20], "overrid": [2, 12, 19, 26, 28], "peopl": [2, 4, 8, 15, 26, 42], "plan": [2, 4, 5, 6, 26, 45], "pure": 2, "afterward": [2, 32], "get": [2, 3, 4, 6, 10, 12, 14, 16, 18, 20, 30, 32, 33, 41, 42, 43, 45, 47], "gid": [2, 4, 45, 47], "yourself": [2, 36, 42], "prep": [2, 35], "compat": [2, 14, 17, 26, 28, 42, 45], "sid": [2, 45], "agent": [2, 10, 21, 22, 25], "5": [2, 4, 5, 6, 10, 22, 25, 26, 45, 47], "hp": [2, 45], "ux": [2, 45], "aix": [2, 45], "sle": 2, "mode": [2, 5, 10, 16, 17, 38, 47], "though": [2, 6, 47], "certain": [2, 4], "app": [2, 6, 36, 43, 45], "open": [2, 4, 5, 6, 12, 18, 19, 33, 34, 38, 39, 42, 45, 47], "port": [2, 4, 5, 6, 7, 26, 35, 37, 39, 45, 47], "tcp": [2, 4, 6], "135": 2, "138": [2, 45], "139": 2, "445": 2, "1024": 2, "1300": 2, "3268": 2, "udp": [2, 4, 5, 6, 45], "part": [2, 4, 6, 10, 12, 38, 47], "former": [2, 10], "path": [2, 4, 10, 17, 20, 30, 33, 39, 45, 47], "resist": [2, 42], "adminaccount": 2, "netbio": [2, 45], "identifi": [2, 5, 45, 47], "xx": [2, 4, 5], "xxxxxxxxx": 2, "xxxxxxxxxx": [2, 45], "direct": [2, 5, 10, 45, 47], "upn": 2, "aduser1": 2, "xxxxx": 2, "some": [2, 3, 4, 5, 6, 10, 12, 14, 15, 16, 19, 20, 24, 26, 31, 33, 35, 37, 38, 40, 41, 42, 43, 44, 45, 46, 47], "each": [2, 4, 5, 6, 10, 19, 24, 45], "rootds": 2, "applic": [2, 4, 6, 12, 15, 18, 20, 22, 25, 26, 33, 34, 36, 42, 43, 45, 47], "determin": [2, 19], "import": [2, 4, 6, 10, 19, 35, 37, 42, 44, 45], "know": [2, 3, 6, 26, 31, 37, 43, 45, 47], "ldapmodifi": [2, 4, 45], "xzz": 2, "w": [2, 10, 20, 44, 45], "h": [2, 4, 44, 45, 47], "enter": [2, 4, 34, 38, 45, 47], "ldap": 2, "changetyp": [2, 4, 45], "replac": [2, 3, 4, 5, 6, 11, 20, 28, 33, 40, 42], "nsslapd": 2, "allow": [2, 4, 5, 6, 7, 10, 12, 15, 17, 21, 24, 33, 38, 39, 42, 45, 47], "interest": [2, 28, 47], "littl": [2, 3, 4, 17, 33, 42], "bit": [2, 20, 28, 47], "fight": 2, "troubleshoot": [2, 45], "right": [2, 4, 5, 6, 42, 45], "catalina": [2, 36], "mobil": [2, 44], "function": [2, 16, 19, 45], "recent": [2, 17, 29], "releas": [2, 5, 9, 14, 25, 35, 47], "ymmv": 2, "coupl": [2, 4, 5, 16, 26, 32, 45, 47], "found": [2, 6, 14, 19, 20, 21, 26, 28, 33, 35, 42, 45, 46, 47], "help": [2, 4, 6, 19, 21, 33, 45, 46, 47], "much": [2, 6, 12, 28, 33, 41, 45, 46, 47], "think": [2, 22, 42, 43], "lion": 2, "sierra": 2, "made": [2, 4, 40, 45], "mostli": [2, 45], "my": [2, 4, 5, 6, 7, 26, 38, 39, 45, 47], "refer": [2, 4, 10, 28, 45], "thing": [2, 3, 4, 5, 6, 10, 16, 19, 20, 29, 33, 37, 40, 42, 44, 45, 46, 47], "those": [2, 4, 5, 6, 19, 26, 43, 44, 45, 46], "didn": 2, "couldn": 2, "mail": [2, 4, 6, 10, 21, 40, 45], "archiv": [2, 10], "cannot": [2, 4, 10, 43, 47], "through": [2, 4, 6, 20, 28, 45], "theori": [2, 43], "point": [2, 4, 5, 6, 9, 14, 16, 17, 21, 26, 33, 40, 41, 44, 45, 47], "tree": [2, 4, 33], "attribut": [2, 4, 45], "map": [2, 4, 13, 33, 45, 47], "rfc2307": [2, 4], "never": [2, 4, 14, 42, 47], "been": [2, 4, 8, 9, 40, 43, 45, 47], "experi": [2, 4, 15, 19, 35, 43, 45], "check": [2, 4, 6, 11, 24, 25, 45, 47], "defin": [2, 26, 40, 45, 47], "sit": [2, 5, 6, 38], "scutil": 2, "click": [2, 6, 18, 19, 22, 34, 38, 45], "after": [2, 4, 5, 6, 12, 14, 15, 17, 26, 28, 33, 38, 47], "cd": [2, 4, 5, 10, 11, 20, 25, 32, 33, 47], "desktop": [2, 14, 15, 18, 22, 41, 44, 45], "curl": [2, 30, 32, 45], "ol": 2, "crt": [2, 45], "mkdir": [2, 4, 5, 18, 20, 32, 45, 47], "cp": [2, 4, 10, 17, 41, 44, 47], "cert": [2, 4, 7, 28, 45], "trustroot": 2, "k": [2, 5, 13, 22, 28, 44, 45, 47], "librari": [2, 4, 12, 20, 27, 33, 39], "keychain": 2, "keytab": [2, 45], "macaddress": 2, "getkeytab": [2, 45], "p": [2, 10, 11, 18, 25, 32, 45, 47], "tmp": [2, 4, 36, 47], "krb5": [2, 45], "transfer": [2, 44, 45], "scp": [2, 4], "mv": [2, 45, 47], "chmod": [2, 4, 25, 41], "chown": [2, 4, 47], "root": [2, 4, 6, 10, 17, 19, 23, 24, 25, 26, 29, 41, 42, 45, 47], "wheel": [2, 14], "domain_realm": 2, "libdefault": 2, "default_realm": 2, "allow_weak_crypto": 2, "ye": [2, 4, 6, 7, 24, 25, 37, 45, 47], "dns_lookup_realm": 2, "dns_lookup_kdc": 2, "rdn": 2, "ticket_lifetim": 2, "24h": 2, "hurt": [2, 3, 4, 45], "opinion": [2, 25, 37, 42], "shouldn": 2, "hardcod": 2, "good": [2, 4, 17, 42, 45], "reason": [2, 4, 6, 16, 20, 21, 26, 37, 40, 42, 47], "kdc": 2, "admin_serv": 2, "pkinit_anchor": 2, "webui": 2, "usernam": [2, 4, 18, 38, 41, 45], "explain": [2, 8, 9, 40], "auth": [2, 4, 45, 47], "twice": 2, "no_ccach": 2, "pam_krb5": 2, "use_first_pass": 2, "use_kcminit": 2, "default_princip": 2, "pam_opendirectori": 2, "nullok": [2, 47], "screensav": 2, "lock": [2, 4, 10, 26, 34, 47], "screen": [2, 31, 34], "sleep": [2, 10, 19, 44], "pam_self": 2, "pam_group": 2, "no_warn": 2, "fail_saf": 2, "deni": [2, 45, 47], "ruser": 2, "passwd": [2, 4, 25, 45, 47], "pam_permit": [2, 47], "session": [2, 10, 15, 25, 31, 34, 41, 45, 47], "prefer": [2, 4, 8, 19, 20, 22, 27, 28, 40, 42], "displai": [2, 4, 13, 26, 33, 45], "fast": [2, 42], "menu": [2, 5], "join": 2, "next": [2, 4, 5, 6, 9, 15, 26, 31, 45, 47], "later": [2, 3, 6, 8, 16, 45], "backup": [2, 6, 17, 35], "purpos": [2, 10, 17, 19, 31, 39, 40, 45], "continu": [2, 4, 45, 47], "ldapv3": 2, "select": [2, 4, 5, 12, 23, 28, 33, 45, 47], "close": [2, 6, 22, 25, 33], "queri": [2, 7, 10, 16], "idl": [2, 10], "minut": [2, 4, 47], "encrypt": [2, 6, 10, 25, 42, 44, 45], "ssl": [2, 4, 40, 42, 45], "search": [2, 4, 6, 45, 47], "dropdown": [2, 33], "custom": [2, 6, 20, 21, 33, 45], "ask": [2, 4, 22, 37, 47], "re": [2, 3, 4, 5, 6, 16, 21, 25, 27, 33, 45, 47], "scroll": [2, 33], "object": [2, 45, 46, 47], "class": [2, 5, 42, 44, 47], "objectclass": [2, 4, 45], "posixgroup": [2, 4], "ipausergroup": 2, "groupofnam": [2, 4, 45], "seem": [2, 8, 10, 22, 33, 34, 37, 41], "understand": [2, 37, 43, 45], "concept": 2, "expand": 2, "primarygroupid": 2, "recordnam": 2, "inetorgperson": [2, 4], "posixaccount": [2, 4], "shadowaccount": [2, 4], "appl": 2, "homedirectori": [2, 4], "otherwis": [2, 4, 5, 10, 13, 15, 20, 36, 41, 45, 47], "authenticationauthor": 2, "generateduid": 2, "ipauniqueid": 2, "nfshomedirectori": 2, "realnam": 2, "uniqueid": 2, "usershel": 2, "altsecurityident": 2, "krbprincipalnam": 2, "reach": [2, 25], "subtre": 2, "ok": [2, 12, 25, 47], "beneath": 2, "until": [2, 10, 14, 19, 33], "termin": [2, 30, 31, 45, 47], "dscacheutil": 2, "flushcach": 2, "q": [2, 18], "return": [2, 31, 45], "further": [2, 4, 10, 42], "succe": [2, 6, 12, 45], "editor": [2, 4, 6], "hand": [2, 4, 6, 10, 38, 39, 43, 45, 46], "side": [2, 4, 38, 45], "readonli": 2, "sysaccount": [2, 45], "f2": [2, 47], "_": 2, "coreservic": 2, "managedcli": 2, "createmobileaccount": 2, "press": [2, 22, 25, 34, 45], "dscl": 2, "append": [2, 19, 28, 47], "groupmembership": 2, "wait": [2, 22, 45], "green": [2, 34], "unlock": [2, 10, 47], "pencil": 2, "bottom": [2, 4, 46], "left": [2, 38], "corner": 2, "portion": [2, 4, 5, 6], "under": [2, 4, 13, 22, 26, 33, 34, 42, 47], "clck": 2, "patch": [2, 33, 43], "appli": [2, 4, 10, 19, 26, 42, 43, 47], "hang": 2, "awar": [2, 6, 10, 15, 33], "gui": [2, 22, 26], "haven": [2, 45, 47], "had": [2, 4, 28], "hour": 2, "suce": 2, "cach": [2, 4, 6, 10, 11, 16, 45], "awai": [2, 6, 17, 18, 45], "howev": [2, 4, 10, 11, 12, 16, 19, 22, 26, 28, 29, 33, 34, 40, 42, 43, 44, 45, 46], "report": [2, 25, 42, 43, 47], "github": [2, 4, 6, 10, 13, 14, 17, 19, 32, 35, 43], "unabl": 2, "confirm": 2, "adapt": 2, "took": [2, 47], "tarbal": [2, 33], "proper": [2, 4, 14, 17], "temporari": [2, 47], "nf": [2, 45], "samba": [2, 45], "mount": [2, 4, 6, 17, 24, 33, 42, 45, 47], "unmount": [2, 11, 24, 33], "wish": [2, 4, 6, 7, 10, 19, 38, 42, 45, 47], "bash": [2, 4, 10, 21, 33, 44, 45], "servernam": [2, 6], "krb5conf": 2, "krb5tab": 2, "pamdirectori": 2, "chain": [2, 10, 43], "flushout": 2, "usr": [2, 4, 10, 18, 20, 22, 25, 26, 30, 41, 47], "sbin": [2, 4, 47], "launchctl": 2, "unload": 2, "launchdaemon": 2, "opendirectoryd": 2, "plist": 2, "deploi": [2, 40, 42], "zip": [2, 25], "dsconfigldap": 2, "figur": [2, 37], "honestli": 2, "relev": [2, 45], "tar": [2, 10, 20, 25], "czf": 2, "macconfig": 2, "gz": [2, 20, 25, 47], "opendirectori": 2, "xzf": [2, 20, 25], "load": [2, 4, 5, 12, 19, 24, 25, 33, 42, 47], "30": [2, 4, 25, 45, 47], "kill": [2, 10, 12], "loginwindow": 2, "killal": 2, "reboot": [2, 5, 15, 26, 28, 41, 47], "move": [2, 8, 12, 17, 33, 45, 47], "tread": 2, "lightli": 2, "person": [2, 4, 6, 8], "believ": [2, 45], "alwai": [2, 10, 42, 45, 46, 47], "fresh": [2, 18], "ditto": 2, "suppos": [2, 27], "someth": [2, 6, 11, 16, 19, 26, 28, 31, 33, 42, 47], "su": [2, 4, 10, 41, 45, 47], "localfold": 2, "networkfold": 2, "mayb": [2, 26, 47], "folder": [2, 4, 19, 24, 33], "lot": [2, 4, 10, 16, 26, 41, 45, 46, 47], "localus": 2, "staff": [2, 47], "fix": [2, 8, 12, 26, 28, 42], "too": [2, 4, 5, 6, 10, 15, 25, 42, 45, 47], "discoveri": 2, "framework": [2, 47], "abil": [2, 4, 45, 47], "discov": 2, "particular": [2, 38, 40, 47], "contain": [2, 4, 5, 6, 8, 10, 16, 17, 25, 28, 33, 35, 39, 45, 46, 47], "schema": [2, 4, 45], "plugin": [2, 4, 13, 15, 18, 22, 26, 28, 30, 33, 45, 47], "mdn": [2, 16], "avahi": 2, "among": 2, "wip": 2, "2017": 2, "abbra": 2, "unclear": [2, 28], "clear": [2, 11, 37], "ever": [2, 47], "did": [2, 4, 5, 6, 7, 37, 45], "python3": [2, 29, 30, 47], "python": [2, 4, 10, 13, 29, 30, 33, 45, 47], "hint": [2, 6, 26], "3": [2, 4, 5, 10, 13, 25, 26, 29, 30, 33, 40, 42, 45, 47], "discuss": [2, 33, 40, 42, 44], "pagur": [2, 45], "macosx": 2, "main": [2, 7, 25], "repositori": [2, 4, 5, 6, 10, 28, 43], "repo": [2, 5, 6, 14, 26, 28], "experiment": [2, 17], "willing": [2, 17, 33], "o": [2, 4, 5, 10, 13, 18, 20, 36, 38, 45, 47], "anchor": 2, "zypper": 2, "yast2": 2, "openldap2": 2, "cyru": 2, "sasl": 2, "gssapi": [2, 45], "cache_credenti": [2, 4], "krb5_store_password_if_offlin": 2, "ipa_domain": 2, "ipa_hostnam": 2, "specif": [2, 6, 14, 33, 40, 43, 45, 47], "ipa_serv": 2, "_srv_": 2, "dns_discovery_domain": 2, "full_name_format": 2, "id_provid": [2, 4], "auth_provid": [2, 4], "access_provid": 2, "chpass_provid": [2, 4], "ldap_tls_cacert": [2, 4], "nss": [2, 4, 45], "filter_us": 2, "haldaemon": 2, "dbu": 2, "radiusd": 2, "nscd": 2, "postgr": 2, "homedir_substr": 2, "home": [2, 10, 13, 18, 19, 20, 26, 33, 41, 44, 47], "autof": [2, 4], "dns_canonicalize_hostnam": 2, "udp_preference_limit": 2, "default_ccache_nam": 2, "keyr": [2, 45], "persist": [2, 4], "bundl": [2, 7, 32], "pem": [2, 4, 7, 45], "pkinit_pool": 2, "sss": [2, 4, 47], "umask": [2, 47], "0077": [2, 47], "pwhistori": 2, "rememb": [2, 4, 26, 44, 47], "cracklib": 2, "minlen": [2, 47], "14": [2, 4, 25, 45, 47], "dcredit": [2, 47], "ucredit": [2, 47], "lcredit": [2, 47], "ocredit": [2, 47], "retri": [2, 47], "sha512": [2, 42, 47], "nsswitch": [2, 4], "sed": [2, 4, 12], "bak": [2, 4, 12], "g": [2, 4, 31, 47], "echo": [2, 4, 10, 22, 31], "sudoer": [2, 4, 47], "netgroup": [2, 45], "ni": [2, 4, 45], "nisdomainnam": 2, "netconfig_nis_static_domain": 2, "netconfig": 2, "f": [2, 4, 10, 36, 45, 47], "line": [2, 4, 10, 39], "forward_pass": [2, 47], "pc": [2, 5], "affect": [2, 12, 33, 42], "pam_sss": [2, 47], "our": [2, 3, 4, 5, 10, 14, 35, 42, 44, 45, 46, 47], "wasn": 2, "everyon": [2, 45], "habit": 2, "idrang": 2, "com_id_rang": 2, "686600000": [2, 45], "number": [2, 4, 33, 35, 44, 45, 47], "200000": 2, "rid": 2, "correspond": [2, 10, 45], "1000": [2, 47], "secondari": [2, 45], "100000000": 2, "686610000": 2, "linuxadm": 2, "flast": 2, "isn": [2, 4, 26, 43, 47], "linuxadm_extern": 2, "adgroup1": 2, "effect": [2, 4, 19, 42, 45, 47], "hbacrul": [2, 45], "hostcat": [2, 45], "servicecat": [2, 45], "desc": [2, 4, 45], "hbactest": [2, 45], "all_system": 2, "sshd": [2, 45, 47], "might": [2, 16, 17, 25, 26, 31, 33, 45], "Or": [2, 47], "three": [2, 4, 5, 25, 45], "These": [2, 15, 45, 47], "behavior": [2, 15, 22, 26, 45], "global": [2, 4, 16, 21, 45], "univers": [2, 42, 45], "rel": [2, 4, 16, 40], "easi": [2, 4, 6, 42], "16": [2, 5, 42, 47], "sampl": [2, 33], "everi": [2, 6, 41], "sudorul": 2, "runasusercat": 2, "cmdcat": 2, "all_linux_sudo": 2, "call": [2, 4, 5, 6, 12, 17, 19, 26, 30, 33, 37, 41, 42, 45, 47], "sudo_rul": 2, "sudocmd": 2, "less": [2, 3, 40, 43], "feat": 2, "come": [2, 3, 4, 15, 20, 22, 26, 29, 42, 45, 47], "No": [2, 5, 14, 40, 45], "tl": [2, 4, 16, 40, 42, 45], "talk": [2, 37], "text": [2, 5, 42], "cipher": [2, 47], "still": [2, 3, 4, 10, 18, 25, 26, 28, 29, 33, 42, 47], "enough": [2, 8, 27], "pass": [2, 10, 20, 31, 38, 43, 44, 45, 46, 47], "highli": [2, 4, 6, 8, 44], "suggest": [2, 16, 19, 26, 42], "decommiss": 2, "eventu": [2, 9], "ldif": 2, "simplesecurityobject": [2, 45], "userpassword": [2, 4, 45], "secret123": 2, "passwordexpirationtim": [2, 45], "20380119031407z": [2, 45], "nsidletimeout": [2, 45], "ldapadd": [2, 4, 45], "xwd": [2, 4], "nisdomain": 2, "defaultdomain": 2, "verify_ap_req_nofail": 2, "kdc_rotat": 2, "period": [2, 22, 37], "1d": 2, "appdefault": 2, "solaris10": 2, "644": 2, "sy": [2, 45], "databas": [2, 4, 45], "wget": [2, 5, 18, 38], "certutil": [2, 4], "ct": 2, "sub": [2, 4, 26], "tls_cacertdir": [2, 4], "tls_cert": 2, "cert8": 2, "db": [2, 4, 45, 47], "tls_cacert": 2, "tls_checkpeer": 2, "bind_timelimit": 2, "120": 2, "timelimit": 2, "uri": [2, 4], "sudoers_bas": 2, "ou": [2, 4], "pam_lookup_polici": 2, "ldapclient": 2, "authenticationmethod": 2, "defaultsearchbas": 2, "domainnam": 2, "defaultserverlist": 2, "followreferr": 2, "objectclassmap": 2, "shadow": [2, 47], "servicesearchdescriptor": 2, "ng": 2, "ether": 2, "comput": [2, 28, 42, 44], "bindtimelimit": 2, "credentiallevel": 2, "simpl": [2, 3, 4, 5, 10, 11, 32, 44, 45, 47], "proxydn": 2, "proxypassword": 2, "With": [2, 6, 27, 44], "pam_ldap": 2, "read": [2, 4, 6, 10, 20, 33, 44, 47], "consol": [2, 25, 33, 45, 47], "requisit": [2, 47], "pam_authtok_get": 2, "pam_unix_cr": 2, "pam_dial_auth": 2, "pam_unix_auth": 2, "server_polici": 2, "rlogin": 2, "pam_rhosts_auth": 2, "pam_dhkei": 2, "krb": 2, "krlogin": 2, "krsh": 2, "ppp": 2, "fallback": [2, 14, 16, 20], "pam_rol": 2, "pam_project": 2, "pam_unix_account": 2, "pam_unix_sess": 2, "pam_authtok_check": 2, "force_check": 2, "pam_authtok_stor": 2, "cron": [2, 10, 47], "pam_passwd_auth": 2, "pubkei": 2, "openldap": [2, 6, 35], "probabl": [2, 11, 42, 45], "minimum": [2, 4, 6, 42, 45, 47], "notfound": 2, "rest": [2, 3, 4], "ipnod": 2, "publickei": 2, "automount": 2, "ldaplist": 2, "ipaoverridetarget": 2, "1006800001": 2, "ipaanchoruuid": 2, "8babb9a8": 2, "5aaf": 2, "11e7": 2, "9769": 2, "00505690319e": 2, "last2": 2, "share": [2, 4, 18, 20, 30, 33, 45, 47], "trivial": 2, "who": [2, 3, 4, 8, 12, 23, 26, 37, 39, 42, 43], "fulli": [2, 4], "sru": 2, "solaris11": 2, "klist": [2, 45], "ket": [2, 45], "previous": [2, 10, 17, 28], "longer": [2, 4, 5, 8], "start_tl": [2, 4], "hit": [2, 4], "miss": [2, 8, 26, 45, 46, 47], "perfectli": [2, 5], "onli": [2, 3, 4, 5, 6, 7, 10, 12, 13, 16, 21, 26, 27, 30, 37, 42, 44, 45, 46, 47], "self": [2, 4], "svccfg": 2, "setprop": 2, "astr": 2, "svcadm": 2, "refresh": 2, "svc": 2, "fine": [2, 25, 47], "definit": [2, 42], "pam_user_polici": 2, "pam_authtok_common": 2, "built": [2, 4, 6, 10, 14, 16, 28, 37, 41, 43, 47], "bunch": [2, 4], "outdat": [2, 8], "random": [2, 19, 44, 45], "regress": 2, "randomli": [2, 44], "break": [2, 4, 19, 30, 33, 45], "big": [2, 47], "shout": 2, "oracl": 2, "brief": [2, 22, 40], "irc": [2, 14, 26, 41, 45, 47], "channel": [2, 4, 6, 26, 47], "chop": 2, "were": [2, 4, 8, 12, 26, 45, 47], "20": [2, 10, 29, 45, 47], "present": [2, 4, 30, 45], "tri": [2, 3, 4, 33], "he": [2, 3], "got": [2, 6, 45], "notic": [2, 31, 35, 47], "esqu": 2, "occur": 2, "fqdn": 2, "hi": [2, 4, 39], "idview": 2, "extrem": [2, 4], "angelsofclockwork": [2, 4, 5], "prop": 2, "adusernam": 2, "thank": 2, "mewho": 2, "freenod": [2, 47], "workaround": [2, 17, 26, 28, 33], "standalon": [2, 6, 25, 33], "For": [2, 3, 4, 5, 6, 10, 15, 16, 17, 19, 20, 21, 23, 24, 26, 28, 30, 33, 40, 42, 44, 45, 47], "compil": [2, 20, 30, 33], "clone": [2, 10, 32], "branch": [2, 10], "download": [2, 4, 15, 20, 33, 36, 43], "instruct": [2, 8, 10, 19, 28, 33], "opt": [2, 6, 10, 25, 45, 47], "csw": 2, "pkgutil": 2, "libnet": 2, "binutil": [2, 20, 39], "gcc4g": 2, "glib2": 2, "libglib2_dev": 2, "gmake": 2, "export": [2, 6, 10, 19, 21, 41, 45], "m4": 2, "gm4": 2, "autoconf": 2, "autoreconf": 2, "cflag": 2, "cxxflag": 2, "ldflag": 2, "m32": 2, "gar": 2, "pammoddir": 2, "sysconfdir": 2, "man": [2, 10, 45, 47], "pkg": 2, "libtool": 2, "automak": 2, "gcc": [2, 19, 35, 39], "docbook": 2, "mandir": 2, "develop": [2, 14, 17, 22, 26, 29, 42, 43, 44], "gcc48": 2, "header": [2, 45, 47], "linker": 2, "bind_dn": 2, "bind_pw": 2, "ssl_path": 2, "host_nam": 2, "block": [2, 5, 6, 16, 25, 47], "ignore_unknown_us": 2, "ignore_authinfo_unavail": 2, "aren": [2, 6], "debug": [2, 28], "watch": [2, 47], "authlog": 2, "hbacsvc": [2, 45], "legacy_client_auth": 2, "hostgroup": [2, 45], "usercat": 2, "shortnam": 2, "But": [2, 4, 6, 47], "anymor": [2, 33], "correct": [2, 4, 5, 6, 10, 33, 40], "unless": [2, 10, 28], "situat": [2, 10, 23, 40], "reflect": [2, 45, 46, 47], "fit": [2, 8, 43, 45, 46, 47], "dure": [2, 40, 45, 47], "deploy": [2, 45], "post": [2, 6, 10, 28, 43, 45], "except": [2, 12, 14, 45, 47], "itself": [2, 10, 25, 33], "theme": [2, 5, 30], "info": [2, 4, 8, 17, 45, 47], "most": [2, 3, 4, 5, 6, 7, 9, 12, 42, 45, 47], "piec": [2, 4, 26, 45, 47], "nativ": [2, 39], "advers": 2, "caus": [2, 4, 26, 34], "ldapsearch": [2, 4], "done": [2, 3, 4, 5, 6, 10, 12, 19, 33, 37, 38, 44, 45, 47], "whoami": 2, "introduc": 2, "sss_cach": 2, "e": [2, 10, 13, 16, 20, 21, 22, 26, 28, 33, 47], "insuffici": 2, "rm": [2, 4, 20, 28], "rf": [2, 4], "prompt": [2, 25, 39, 45], "drop": [2, 4, 42, 47], "intermitt": 2, "shorten": 2, "errant": 2, "dupecheck": 2, "sh": [2, 10, 25, 33, 38], "arrai": [2, 5, 45], "b": [2, 4, 11, 25, 40, 45, 47], "lll": [2, 4], "samaccountnam": 2, "grep": [2, 4, 25, 34, 45, 47], "eq": [2, 4], "fi": [2, 38, 44], "factor": 2, "whether": [2, 3, 5, 7, 19, 22, 26, 37, 42, 43, 45, 47], "By": [2, 10, 11, 17, 19, 42, 45], "locat": [2, 5, 10, 14, 19, 26, 28, 33, 39, 45], "contact": 2, "air": 2, "gap": 2, "ad_sit": 2, "site_nam": 2, "ad_serv": 2, "dc1": 2, "dc2": 2, "ad_backup_serv": 2, "dc3": 2, "dc4": 2, "tool": [2, 4, 5, 17, 19, 22, 33, 47], "brows": 2, "wd": 2, "deal": [2, 42, 47], "themselv": [2, 4, 47], "dnshostnam": 2, "hard": [2, 6, 23], "disrupt": 2, "fall": 2, "copr": [2, 8, 26, 28, 35], "establish": [2, 45], "default_shel": 2, "great": [2, 4], "ambari": 2, "aw": 2, "node": [2, 47], "stupid": 2, "reli": [2, 17, 43], "dnsmasq": [2, 16], "upset": 2, "about": [2, 4, 6, 11, 19, 33, 37, 42, 43, 44, 45, 46, 47], "veri": [2, 4, 5, 6, 10, 42, 44, 45, 46, 47], "director": 2, "involv": [2, 26, 44], "contractor": 2, "absolut": [2, 4, 45], "insist": [2, 4], "against": [2, 4, 6, 20, 43, 45, 47], "judgement": 2, "despit": [2, 41, 45], "whatev": [2, 4, 19], "pain": [2, 4], "box": [2, 5, 12, 25, 26, 33, 38, 42], "obvious": [2, 16], "dev": [2, 4, 10, 11, 25, 38, 47], "2015": 2, "focus": [2, 6], "retriev": [2, 45], "charact": [2, 42, 44, 47], "cloud": [2, 44], "onprem": 2, "ultim": 2, "limit": [2, 6, 16, 25, 28, 42], "cluster": 2, "broken": [2, 8, 10], "freeli": 2, "heavili": [2, 41], "simpli": [2, 4, 10, 17, 20, 24, 26, 29, 33, 34, 37, 39, 42, 43, 45], "summar": [2, 21], "propos": 2, "cdh": 2, "privileg": [2, 10, 17, 42, 45, 47], "expir": [2, 4, 47], "sinc": [2, 4, 8, 10, 25, 26, 33, 41, 42, 47], "special": 2, "loui": [2, 37], "abel": [2, 37], "disclaim": 2, "respons": [2, 6, 45, 46, 47], "breach": [2, 44], "misconfigur": 2, "risk": [2, 10, 17, 30, 42, 44], "variabl": [2, 4, 6, 10, 26, 31, 33, 47], "anywher": [2, 33, 36], "cdhkt": 2, "cdhuser": 2, "iparealm": 2, "destin": [2, 42], "question": [2, 24, 26, 40, 41, 42, 45, 46, 47], "fullprinc": 2, "princ": 2, "00_kinitus": 2, "pick": [2, 4, 33, 45], "suit": [2, 8, 42, 45, 46], "best": [2, 39, 43, 47], "prior": [2, 33, 40, 45, 46, 47], "somewher": [2, 4, 13, 19, 25, 33], "guess": 2, "thisisaweakpassword": 2, "kt": 2, "TO": [2, 4], "exit": [2, 25, 47], "01_createprinc": 2, "principl": 2, "Not": [2, 4, 37, 45, 47], "02_createserviceallow": 2, "retriv": 2, "kdestroi": 2, "getkeytabscdh": 2, "scm": 2, "775": 2, "wizard": [2, 12], "almost": [2, 6], "tidbit": [2, 47], "memori": [2, 19, 25], "java": [2, 4], "cat": [2, 4, 18, 19, 45, 47], "doh": 2, "document": [2, 4, 10, 19, 21, 30, 32, 33, 35, 42, 44, 45], "unbound": [2, 6, 16, 35], "tell": [2, 3, 6, 15, 21], "spin": [2, 17], "instanc": [2, 4, 43, 45], "100": [2, 5, 7, 45], "224": 2, "dnsconfig": [2, 45], "xxxx": 2, "9553": 2, "slapd": [2, 4], "popul": [2, 19], "term": [2, 31, 47], "modif": [2, 4, 14], "style": [2, 5, 19, 45, 47], "dse": 2, "label": [2, 26, 45, 47], "localhost": [2, 4, 7, 16], "auditlog": [2, 4], "ctrl": [2, 22, 25, 34, 45], "jbasket": 2, "aocus": 2, "686600003": 2, "sun": [2, 10, 47], "mar": [2, 6], "29": [2, 8, 45, 47], "42": [2, 25, 47], "36": [2, 28], "mst": [2, 25], "2020": [2, 6, 8, 45], "pt": [2, 25], "20200329223754": 2, "result": [2, 10, 12, 16, 17, 26, 31, 33, 40, 42, 45, 47], "modifiersnam": 2, "modifytimestamp": 2, "20200330053754z": 2, "b2019": 2, "323": 2, "229": 2, "636": [2, 4], "happen": [2, 8, 28, 37, 45, 47], "20200329224007": 2, "20200330054006z": 2, "entryusn": 2, "900028": 2, "sort": [2, 5, 6, 47], "accid": 2, "realli": 2, "m": [2, 5, 10, 13, 25, 47], "sometim": [2, 4, 6, 15, 47], "2021": [2, 6, 8, 9, 45], "healthcheck": 2, "failur": [2, 4, 45, 47], "certmong": [2, 45], "pop": [2, 22, 40], "me": [2, 7, 45, 47], "getcert": [2, 45], "request": [2, 6, 16, 40, 45, 46, 47], "track": [2, 10, 45], "20191106025922": 2, "monitor": [2, 4, 6, 45, 47], "pair": [2, 45, 47], "storag": [2, 6, 17, 45], "krb5kdc": 2, "issuer": [2, 45], "subject": [2, 26, 45], "05": [2, 6, 8, 9, 25, 45], "59": [2, 8, 47], "27": [2, 4, 6, 45, 47], "krbtgt": 2, "usag": [2, 45], "digitalsignatur": [2, 45], "nonrepudi": [2, 45], "keyencipher": [2, 45], "dataencipher": [2, 45], "eku": [2, 45], "kp": [2, 45], "serverauth": [2, 45], "pkinit": 2, "kpkdc": 2, "save": [2, 4, 28, 45, 47], "libexec": [2, 47], "renew_kdc_cert": 2, "auto": [2, 4, 19, 27, 35, 45, 47], "20200123075636": 2, "nssdb": [2, 45], "nicknam": [2, 45], "token": [2, 45], "pinfil": 2, "pwdfile": 2, "txt": [2, 16, 33, 44], "55": [2, 26, 47], "33": [2, 6], "clientauth": [2, 45], "restart_dirsrv": 2, "20200123075639": 2, "newly_added_need_keyinfo_read_pin": 2, "privat": [2, 25, 45, 47], "48": [2, 4, 38, 45, 47], "restart_httpd": 2, "interestingli": 2, "meant": [2, 42, 47], "accord": 2, "output": [2, 4, 11, 15, 28, 33, 42, 45], "openssl": [2, 4], "x509": [2, 4], "noout": [2, 4], "nov": [2, 45, 47], "gmt": 2, "year": [2, 47], "443": [2, 6], "rsa": [2, 47], "20200504003758": 2, "pin": [2, 47], "auditsigningcert": 2, "alia": [2, 4, 6, 21], "20200615180351": 2, "unknown": 2, "stop_pkicad": 2, "renew_ca_cert": 2, "03": [2, 8, 45, 47], "13": [2, 8, 25, 47], "23": [2, 6, 10, 45, 47], "41": [2, 47], "aris": 2, "balanc": 2, "layer": [2, 40, 47], "perhap": [2, 45], "round": [2, 6, 42], "robin": [2, 6], "verif": 2, "necessarili": [2, 37], "xml": [2, 26], "reconfigur": 2, "connector": [2, 26], "secret": [2, 43], "requiredsecret": 2, "paramet": [2, 28], "8009": 2, "protocol": [2, 5, 16, 38, 40], "ajp": 2, "redirectport": 2, "8443": 2, "localhost4": 2, "aaa": 2, "bbb": 2, "localhost6": 2, "conflict": [2, 4, 10, 42], "proxypass": 2, "field": [2, 45, 47], "proxypassmatch": 2, "stuff": [2, 46], "somedai": 2, "easili": [2, 5, 37, 41, 47], "ticket": 2, "invalid": 2, "argument": [2, 33, 45], "credenti": [2, 44], "bugzilla": [2, 45], "2014": 2, "exact": [2, 4, 47], "footnot": [2, 17, 42], "background": [2, 4, 6, 15, 19, 34], "mileag": 2, "vari": 2, "set": [3, 4, 6, 7, 10, 17, 19, 20, 22, 25, 26, 27, 28, 30, 31, 33, 34, 42, 45, 47], "activ": [3, 4, 25, 47], "packag": [3, 5, 6, 8, 13, 14, 15, 17, 20, 22, 24, 25, 26, 28, 29, 30, 35, 41, 45], "few": [3, 4, 5, 6, 7, 10, 22, 26, 28, 42, 45, 47], "wan": 3, "lan": 3, "group": [3, 6, 17, 24, 26, 37, 47], "becom": [3, 21, 42, 45, 47], "bridg": 3, "ip_forward": 3, "option": [3, 4, 5, 6, 7, 10, 19, 20, 22, 25, 34, 41, 45, 47], "prefix": [3, 10, 19, 20, 33, 47], "": [3, 4, 5, 7, 10, 12, 14, 15, 17, 19, 20, 21, 22, 26, 29, 31, 33, 34, 37, 38, 40, 41, 42, 43, 44, 45, 47], "isp": 3, "broker": 3, "gener": [3, 4, 6, 8, 16, 17, 20, 28, 35, 42, 43, 44, 45, 47], "masquerad": 3, "syntax": [3, 4, 6, 45, 47], "ideal": [3, 42], "user": [3, 10, 12, 21, 22, 23, 24, 25, 28, 29, 33, 38, 40, 41, 42, 43, 44, 47], "quickli": 3, "The": [3, 4, 5, 8, 10, 12, 14, 16, 18, 19, 20, 21, 22, 26, 28, 30, 31, 33, 34, 35, 39, 40, 42, 43, 44, 45, 46, 47], "drawback": 3, "hidden": [3, 23], "behind": 3, "frontend": [3, 4, 6], "eth0": [3, 45], "eth1": 3, "default": [3, 4, 5, 6, 8, 10, 11, 12, 14, 17, 18, 19, 22, 23, 26, 27, 31, 33, 40, 42, 45, 47], "supersed": 3, "recommend": [3, 8, 11, 14, 15, 17, 19, 26, 27, 29, 33, 40, 42, 44, 47], "stick": [3, 11, 13, 47], "tricki": [3, 6, 33], "quit": [3, 20, 22, 42, 45, 47], "oversimplif": 3, "idea": [3, 6, 17, 35, 37, 42, 43, 45, 46, 47], "rough": 3, "migrat": [3, 40], "disabl": [3, 6, 16, 18, 20, 25, 35, 38, 45, 47], "enabl": [3, 4, 5, 6, 7, 10, 16, 19, 20, 21, 22, 25, 26, 28, 33, 34, 41, 42, 43, 45, 47], "mask": [3, 5], "flush": 3, "nft": 3, "ruleset": [3, 47], "soon": [3, 40, 45], "thu": [4, 8, 45], "sep": [4, 8], "21": [4, 10, 45, 47], "06": [4, 8, 45, 47], "rhel": [4, 6, 23, 45, 47], "thusli": 4, "el": [4, 5, 8], "deriv": [4, 42], "stai": [4, 6], "ltb": 4, "plu": [4, 5, 22], "context": [4, 5, 10, 17, 26, 27, 47], "issu": [4, 10, 12, 19, 26, 33, 34, 42, 45], "date": [4, 6, 8, 10, 14, 47], "6": [4, 20, 25, 26, 33, 36, 45, 47], "account": [4, 6, 21, 38, 40, 42, 45, 47], "implement": [4, 6, 25, 40], "across": [4, 20, 33, 42], "setup": [4, 12, 30, 38, 40, 45, 47], "foremost": 4, "mind": [4, 6, 10], "fulfil": 4, "road": 4, "dn": [4, 8, 21, 35, 42, 45], "NOT": [4, 6, 24, 28, 45, 47], "appreci": 4, "incorrect": [4, 10], "login": [4, 10, 25, 45], "el7": [4, 45], "primarili": [4, 6], "nasti": 4, "color": [4, 6, 19, 31], "enhanc": [4, 6], "vimrc": [4, 6, 13, 30], "brighter": [4, 6], "dark": [4, 6], "bash_profil": [4, 6], "lmdb": 4, "hdb": 4, "bdb": 4, "codereadi": 4, "powertool": 4, "distribut": [4, 6, 10, 23, 29, 38, 39, 43], "extra": [4, 5, 6, 15, 26, 30, 42, 45, 46, 47], "epel": [4, 47], "detail": [4, 10, 28, 33, 38, 45], "migrationtool": 4, "newer": [4, 14, 29], "toward": [4, 29, 44, 45, 47], "lab": [4, 5, 6, 45], "anyth": [4, 6, 10, 20, 45, 46, 47], "relat": [4, 37, 42, 45, 46, 47], "remov": [4, 6, 14, 26, 28, 30, 45, 47], "genrsa": 4, "des3": 4, "ca": [4, 6, 7, 45, 47], "4096": [4, 45, 47], "ldapserv": 4, "req": 4, "dai": [4, 41, 45, 47], "3650": 4, "countri": 4, "name": [4, 5, 6, 7, 18, 21, 25, 26, 28, 33, 38, 45, 47], "letter": [4, 45, 47], "code": [4, 5, 14, 35, 42], "u": [4, 8, 10, 24, 33, 37, 44, 45, 46, 47], "provinc": 4, "arizona": 4, "citi": 4, "phoenix": [4, 38], "organ": [4, 33], "compani": [4, 47], "ltd": 4, "ssn": 4, "studio": 4, "organiz": 4, "unit": [4, 10, 25, 45, 47], "maintain": [4, 8, 20, 26, 42], "email": [4, 40, 45], "youremail": 4, "csr": [4, 45], "zera1": 4, "cakei": 4, "set_seri": 4, "ln": [4, 5, 33], "hash": [4, 44, 47], "beyond": [4, 47], "640": [4, 45], "cacountri": 4, "castat": 4, "calocal": 4, "caorgan": 4, "caorganizationalunit": 4, "screw": [4, 29], "sign": [4, 21, 45], "caconicalnam": 4, "caemail": 4, "tucklesepk": 4, "gmail": [4, 6, 40], "organizationalunit": 4, "conicalnam": 4, "pc68xl": 4, "certdir": 4, "subj": [4, 47], "st": 4, "emailaddress": 4, "obtain": [4, 5, 29, 33], "mine": 4, "39642ab3": 4, "slappasswd": 4, "ssha": 4, "cuakctex7rl": 4, "ldg0ejktmzjdrxnc46": 4, "suffix": 4, "mdb": 4, "dit": 4, "olcsuffix": 4, "olcrootdn": 4, "olcrootpw": 4, "olcdbmaxs": 4, "20gb": [4, 6], "olcdbenvflag": 4, "olcdatabas": 4, "olcdatabaseconfig": 4, "olcmdbconfig": 4, "olcdbdirectori": 4, "dc": [4, 45, 47], "manag": [4, 8, 10, 13, 16, 19, 20, 22, 24, 25, 26, 28, 29, 32, 35, 38, 42], "olcdbindex": 4, "surnam": [4, 45], "givennam": [4, 45], "olclastmod": 4, "nometasync": 4, "writemap": 4, "21474836480": 4, "primari": [4, 10], "describ": [4, 20], "certificatefil": 4, "olctlscacertificatepath": 4, "olctlscertificatefil": 4, "olctlscertificatekeyfil": 4, "ad": [4, 6, 8, 21, 22, 47], "rootdn": 4, "ldapi": 4, "treat": 4, "bug": [4, 8, 10, 26, 33, 42, 43, 45], "olcpasswordhash": 4, "olcaccess": 4, "peercr": 4, "slapd_url": 4, "slaptest": 4, "conf": [4, 5, 6, 7, 10, 16, 22, 28, 31, 45, 47], "checksum": 4, "oper": [4, 10, 44, 45, 46, 47], "That": [4, 28, 33, 41, 47], "backend": [4, 6], "el6": [4, 45], "chunk": 4, "like": [4, 5, 6, 7, 10, 11, 12, 15, 19, 21, 25, 26, 28, 30, 31, 33, 36, 40, 42, 43, 44, 45, 46, 47], "loop": [4, 25], "ppolici": 4, "slapo": 4, "upgrad": [4, 10, 15, 29, 42, 45], "corba": 4, "cosin": 4, "duaconf": 4, "dyngroup": 4, "misc": [4, 8, 35], "collect": 4, "togeth": 4, "sourc": [4, 5, 6, 10, 11, 14, 17, 20, 22, 28, 33, 35, 36, 40, 43, 45, 47], "commerci": 4, "offer": [4, 42], "rfc2307bi": 4, "schemaord": 4, "clutter": 4, "chose": [4, 24], "earlier": [4, 45], "domain": [4, 5, 6, 16, 19, 21, 47], "messag": [4, 6, 10, 16, 28, 40, 45], "aid": [4, 47], "creation": [4, 45], "fun": [4, 6], "10000": [4, 45], "lhome": 4, "proce": 4, "semanag": [4, 47], "fcontext": [4, 47], "home_root_t": 4, "restorecon": [4, 5, 26, 47], "reset": [4, 5, 45], "unconfined_u": [4, 47], "object_r": [4, 47], "default_t": 4, "s0": [4, 47], "groupadd": 4, "sokel": 4, "10001": 4, "10002": 4, "rano": 4, "useradd": [4, 47], "alias": 4, "migus": 4, "migrate_passwd": 4, "pl": 4, "miggroup": 4, "migrate_group": 4, "padl": 4, "migrate_common": 4, "ph": 4, "convert": [4, 11, 36], "ourus": 4, "uid": [4, 45, 47], "satisfi": 4, "zera": 4, "nalika": 4, "11000": 4, "sn": [4, 45], "displaynam": 4, "changeme2": 4, "ownership": 4, "skel": 4, "rv": [4, 26, 47], "skip": [4, 6, 18, 26, 44], "nfsv3": 4, "prevent": [4, 5, 10, 14, 19, 42, 43, 47], "squash": 4, "nfsv4": 4, "fashion": [4, 5, 45], "tend": [4, 43, 47], "nobodi": 4, "solut": [4, 5, 6, 16, 26], "forc": [4, 22, 30, 45], "warn": [4, 26, 33, 44, 45], "libnfsidmap": 4, "rw": [4, 25, 45, 47], "sync": [4, 6, 10, 25, 45], "root_squash": 4, "no_all_squash": 4, "idmapd": 4, "need_idmapd": 4, "nfsmapid_domain": 4, "bad": [4, 28, 42, 47], "practic": [4, 37, 40, 42, 43, 45, 46], "111": 4, "2049": 4, "firewalld": [4, 6], "straight": [4, 5, 6, 7, 16, 19, 45], "forward": [4, 5, 6, 7, 16, 45], "troubl": [4, 28, 33], "temporarili": 4, "appropri": [4, 6, 27], "superced": 4, "obsolet": [4, 40, 42], "yum": [4, 7, 41, 45, 47], "silent": [4, 47], "pam": [4, 45], "ldapd": 4, "policycoreutil": [4, 47], "authselect": [4, 45], "krb5_realm": 4, "ldap_search_bas": 4, "sudo_provid": 4, "ldap_uri": 4, "ldap_id_use_start_tl": 4, "ldap_tls_cacertdir": 4, "ldap_sudo_search_bas": 4, "ago": [4, 25], "symbol": [4, 13], "link": [4, 6, 8, 14, 20, 25, 35, 42, 47], "hostobject": 4, "radiusprofil": 4, "ldappublickei": 4, "autofs_t": 4, "setsebool": [4, 47], "use_nfs_home_dir": 4, "copi": [4, 10, 17, 22, 25, 27, 29, 36, 41, 45, 47], "fstype": [4, 45], "iso9660": 4, "ro": 4, "nosuid": 4, "nodev": 4, "cdrom": 4, "soft": [4, 45], "intr": 4, "edu": 4, "olc": 4, "format": [4, 10, 31, 36, 45, 47], "olcschemaconfig": 4, "olcattributetyp": 4, "15953": 4, "sudous": 4, "equal": [4, 47], "caseexactia5match": 4, "substr": [4, 5], "caseexactia5substringsma": 4, "tch": 4, "1466": 4, "115": [4, 25], "121": [4, 5], "26": [4, 8, 45], "sudohost": 4, "caseexactia5substringsmat": 4, "ch": 4, "sudocommand": 4, "comma": 4, "nd": 4, "execut": [4, 43, 47], "466": 4, "sudoruna": 4, "imperson": [4, 42], "sudoopt": 4, "sudorunasus": 4, "sudorunasgroup": 4, "gr": 4, "oup": 4, "66": [4, 38, 47], "sudonotbefor": 4, "sta": 4, "rt": 4, "interv": 4, "valid": [4, 42, 45, 47], "generalizedtimemat": 4, "order": [4, 10, 24, 26, 30, 33, 43, 44], "generalizedtimeorderingmatch": 4, "sudonotaft": 4, "generalizedtimematch": 4, "10": [4, 5, 6, 7, 25, 36, 45, 47], "sudoord": 4, "int": 4, "eger": 4, "sudorol": 4, "integermatch": 4, "integerord": 4, "eringmatch": 4, "olcobjectclass": 4, "en": [4, 25], "sup": 4, "udoruna": 4, "sudonotb": 4, "efor": 4, "descript": [4, 10, 20, 25, 43], "sudoschema": 4, "desir": [4, 40, 45], "requiretti": 4, "env_reset": 4, "env_keep": 4, "histsiz": 4, "inputrc": 4, "kdedir": 4, "ls_color": 4, "ps1": 4, "ps2": 4, "qtdir": 4, "lang": 4, "lc_address": 4, "lc_ctype": 4, "lc_collat": 4, "lc_identif": 4, "lc_measur": 4, "lc_messag": 4, "lc_monetari": 4, "lc_name": 4, "lc_numer": 4, "lc_paper": 4, "lc_telephon": 4, "lc_time": 4, "lc_all": 4, "languag": [4, 20, 47], "lingua": 4, "_xkb_charset": 4, "xauthor": 4, "specifi": [4, 10, 17, 28, 45, 47], "zera2": 4, "zera3": 4, "around": [4, 43], "match": [4, 5, 10, 21, 47], "secure_path": 4, "especi": [4, 26, 45], "grant": [4, 45], "olcmodulelist": 4, "olcmodulepath": 4, "lib64": [4, 47], "olcmoduleload": 4, "memberof": [4, 45], "la": 4, "olcoverlai": 4, "olcmemberof": 4, "olcoverlayconfig": 4, "olcconfig": 4, "olcmemberofdangl": 4, "ignor": [4, 5, 10, 14, 26, 37, 47], "olcmemberofrefint": 4, "olcmemberofgroupoc": 4, "olcmemberofmemberad": 4, "olcmemberofmemberofad": 4, "chri": 4, "sithlord": 4, "minor": 4, "ldap_access_filt": 4, "ldap_schema": 4, "enumer": 4, "basic": [4, 7, 47], "membership": 4, "disappear": 4, "clean": [4, 11], "refint": 4, "overlai": 4, "olcrefintconfig": 4, "olcrefintattribut": 4, "protect": [4, 10], "him": 4, "attr": 4, "shadowlastchang": 4, "product": [4, 6, 45], "disallow": [4, 42], "handl": [4, 6, 10, 30, 42, 43, 45, 46], "olcdisallow": 4, "bind_anon": 4, "olcrequir": 4, "authc": 4, "ceas": [4, 22], "ldap_bind": 4, "inappropri": 4, "cours": [4, 45, 46, 47], "standard": [4, 14, 45], "audit": 4, "olclogfil": 4, "olcloglevel": 4, "256": [4, 30, 31], "olcauditlogconfig": 4, "olcauditlogfil": 4, "logrot": 4, "ton": 4, "transact": 4, "rotat": [4, 47], "100m": 4, "250m": 4, "respect": [4, 10, 33], "missingok": 4, "compress": 4, "notifempti": 4, "daili": [4, 37], "size": [4, 6, 36], "rsyslog": [4, 6], "local4": 4, "asset": [4, 42], "olcppolicyconfig": 4, "olcppolicydefault": 4, "olcppolicyuselockout": 4, "olcppolicyhashcleartext": 4, "ones": [4, 45], "pwdpolici": 4, "passworddefault": 4, "pwdattribut": 4, "qualiti": 4, "mechan": [4, 26, 40, 42, 44], "poison": 4, "pwdcheckqual": 4, "84": [4, 45, 47], "pwdminag": 4, "pwdmaxag": 4, "7257600": 4, "length": [4, 44], "pwdminlength": 4, "histori": [4, 47], "pwdinhistori": 4, "till": 4, "lockout": [4, 47], "pwdmaxfailur": 4, "pwdfailurecountinterv": 4, "pwdlockout": 4, "pwdlockoutdur": 4, "1800": 4, "pwdallowuserchang": 4, "pwdexpirewarn": 4, "1209600": 4, "pwdgraceauthnlimit": 4, "pwdmustchang": 4, "pwdsafemodifi": 4, "pwdcheckmodul": 4, "check_password": 4, "pxeboot": 5, "next_serv": 5, "easier": [5, 6, 7, 17, 20, 42, 45], "perspect": 5, "roll": [5, 21], "consist": [5, 40, 47], "classic": [5, 6, 41], "simpler": [5, 6, 33], "efi": 5, "architectur": [5, 20, 45], "mknetdir": 5, "viabl": 5, "distro": [5, 42, 43], "articl": [5, 10, 19, 20, 35, 37, 42, 43, 44], "baselin": [5, 6, 47], "tftpserver": 5, "baseo": 5, "x86_64": [5, 25], "x64": 5, "shim": 5, "ia32": 5, "el9": 5, "aarch64": [5, 14], "aa64": 5, "directori": [5, 6, 10, 14, 20, 24, 28, 33, 41, 47], "tftpboot": 5, "netboot": 5, "i386": 5, "socket": [5, 17, 42, 47], "tradition": 5, "xinetd": 5, "69": [5, 47], "dhcpd": [5, 6], "93": 5, "unsign": 5, "integ": 5, "rfc3442": 5, "classless": 5, "rout": [5, 6, 10, 38], "249": 5, "space": [5, 6, 11, 17], "pxelinux": 5, "magic": 5, "208": 5, "string": [5, 31, 42, 44, 47], "configfil": 5, "209": 5, "pathprefix": 5, "210": 5, "reboottim": 5, "211": 5, "32": [5, 7, 28, 45, 47], "mtftp": 5, "cport": 5, "sport": 5, "tmout": 5, "delai": [5, 47], "within": [5, 6, 10, 17, 31, 33, 42], "subnet": [5, 6, 7, 38], "bootload": [5, 23], "x86": [5, 47], "armhfp": 5, "0a": [5, 47], "0b": [5, 47], "pxeclient": 5, "vendor": [5, 25, 42], "filenam": 5, "09": [5, 6, 8, 25, 26, 45, 47], "bio": 5, "mention": 5, "noth": [5, 15], "ddn": 5, "interim": 5, "bootp": 5, "authorit": 5, "log": [5, 6, 16, 33, 45, 47], "facil": 5, "local6": 5, "client": [5, 6, 12, 40, 44, 47], "vendorclass": 5, "netmask": 5, "255": 5, "interfac": [5, 6, 7, 10, 28, 38, 47], "br1000": 5, "router": [5, 35], "110": 5, "199": 5, "catch": 5, "armv7a": 5, "leas": 5, "21600": 5, "max": [5, 10, 47], "43200": 5, "accompani": [5, 45], "simplifi": [5, 20], "symlink": [5, 10, 33], "timeout": 5, "60": [5, 22], "menuentri": 5, "firmwar": 5, "menuentry_id_opt": 5, "uefi": 5, "fwsetup": 5, "shutdown": [5, 10], "halt": 5, "produc": [5, 47], "bootabl": 5, "regular": [5, 6, 10, 24, 33, 38, 45, 47], "kickstart": [5, 6], "http": [5, 16, 17, 18, 21, 28, 30, 32, 38, 45, 47], "dl": 5, "fedoraproject": 5, "org": [5, 17, 22, 28], "pub": [5, 47], "initrd": 5, "img": 5, "vmlinuz": 5, "arm": 5, "item": [5, 47], "gnu": 5, "linuxefi": 5, "inst": 5, "38": [5, 45, 47], "stage2": 5, "initrdefi": 5, "linux16": 5, "initrd16": 5, "customiz": 5, "insmod": 5, "all_video": 5, "gfxterm": 5, "gfxterm_menu": 5, "gfxmenu": 5, "gfxterm_background": 5, "png": [5, 18], "terminal_output": 5, "background_imag": 5, "stretch": [5, 42], "bg": [5, 19], "menu_color_highlight": 5, "cyan": 5, "black": 5, "menu_color_norm": 5, "white": [5, 19], "color_norm": 5, "grai": 5, "transpar": [5, 17], "light": [5, 19], "brand": 5, "scheme": [5, 31], "nest": 5, "deeper": 5, "35": [5, 45, 47], "loadfont": 5, "unicod": 5, "pf2": 5, "stabl": [5, 6], "rescu": [5, 47], "red": [6, 34, 45, 46], "hat": [6, 45, 46], "mainli": [6, 12], "rhce": [6, 45, 46, 47], "requir": [6, 10, 13, 21, 25, 26, 28, 30, 33, 39, 40, 42, 43, 45, 47], "postgresql": [6, 42], "mysql": 6, "mariadb": 6, "foreman": 6, "pulp": 6, "uyuni": 6, "esxi": 6, "icinga": 6, "iptabl": 6, "nftabl": 6, "virtual": [6, 39, 45, 47], "hardwar": [6, 12, 25, 27, 34], "ram": [6, 45], "8gb": 6, "32gb": 6, "cpu": [6, 45], "quad": 6, "i5": 6, "ht": 6, "i7": 6, "xeon": 6, "1tb": 6, "4tb": 6, "spread": [6, 43], "2x2tb": 6, "4x1tb": 6, "1gb": [6, 45], "guidelin": 6, "exclus": 6, "learn": 6, "ovirt": 6, "manageiq": 6, "redesign": 6, "2016": [6, 45], "cobbler": 6, "jul": [6, 45], "2018": 6, "28": [6, 8, 45, 47], "convers": 6, "el8": 6, "At": [6, 10, 11, 14, 41, 42, 46, 47], "wiki": [6, 19, 20], "chanc": [6, 45], "word": [6, 37, 44], "platform": [6, 20, 25, 31, 42, 47], "libvirt": 6, "featur": [6, 10, 16, 22, 42, 43, 44, 47], "cost": 6, "stabil": [6, 15], "egrep": 6, "vmx": 6, "svm": 6, "proc": 6, "cpuinfo": 6, "datastor": 6, "pool": 6, "lvm": 6, "store": [6, 10, 17, 42, 44, 45, 47], "volum": [6, 36, 47], "logic": 6, "partit": [6, 45, 47], "destroi": [6, 25, 47], "virbr0": 6, "OR": 6, "virsh": 6, "fdisk": 6, "pvcreat": 6, "vgcreat": 6, "mkf": [6, 47], "wise": 6, "qcow2": 6, "virtio": 6, "whenev": [6, 28, 29], "raw": [6, 30, 45], "replica": [6, 45], "doubl": [6, 45], "bind": [6, 7, 16, 45, 47], "slave": 6, "sensibl": 6, "exposur": 6, "eas": 6, "esx": 6, "sysctl": 6, "nat": [6, 35], "rfc": [6, 40], "routabl": 6, "strictli": [6, 45], "bonu": 6, "ipa": [6, 45], "9053": [6, 7], "cname": [6, 21], "smaller": 6, "satellit": 6, "candlepin": 6, "phase": 6, "head": [6, 47], "serious": [6, 20], "250gb": 6, "heavi": 6, "tune": [6, 12, 45], "errata": 6, "advisori": 6, "virt": [6, 8, 47], "regist": 6, "task": [6, 25, 45, 46, 47], "tutori": [6, 20, 35, 41], "plenti": 6, "onlin": [6, 19, 20, 44, 45, 46, 47], "playbook": [6, 47], "consum": 6, "hassl": 6, "pgpool": 6, "ii": 6, "safe": [6, 14, 26, 27, 29], "puppet": 6, "solitari": 6, "hook": 6, "exam": [6, 8, 35], "docker": [6, 35], "awx": [6, 45], "strict": [6, 25, 42], "attach": [6, 31, 36], "scsi": 6, "target": [6, 10, 25, 26, 36, 47], "targetcli": 6, "lun": 6, "confus": [6, 33, 40], "digit": [6, 45], "ocean": 6, "larg": [6, 33], "small": [6, 10, 42], "ext4": [6, 11], "bigger": [6, 47], "50": [6, 47], "suffic": 6, "bakula": 6, "flatfil": 6, "web": [6, 19, 45], "apach": [6, 45, 47], "shop": 6, "weblog": 6, "wildfli": 6, "virtualhost": 6, "tld": 6, "serveralia": 6, "vip": 6, "haproxi": 6, "80": [6, 45], "rndc": 6, "listen": [6, 7, 26, 47], "receiv": [6, 26, 28, 42, 45, 47], "relai": 6, "doabl": 6, "mailhost1": 6, "mailhost2": 6, "mailhost": 6, "25": [6, 28, 45, 47], "snmp": 6, "commun": [6, 35, 38, 45], "kind": [6, 37, 45], "filesystem": [6, 11, 47], "snmpd": 6, "514": 6, "inclus": 6, "graylog": 6, "elast": 6, "mongodb": 6, "fluentd": 6, "sky": 6, "design": [6, 47], "mock": 6, "koji": 6, "bodhi": 6, "project": [6, 8, 16, 17, 26], "faint": 6, "heart": 6, "popular": [6, 32, 42], "opensourc": 6, "gitea": 6, "tower": [6, 45], "vlan": 7, "everywher": 7, "refus": [7, 22], "snoop": 7, "127": [7, 16, 45], "allow_snoop": 7, "ffff": 7, "sandbox": [7, 43], "trust": [7, 42, 43, 47], "extract": [7, 39], "upstream": [7, 14, 43], "cloudflar": [7, 42], "addr": [7, 45], "853": 7, "2606": 7, "4700": 7, "1111": 7, "1001": 7, "quad9": 7, "149": 7, "112": 7, "tommi": [8, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 24, 26, 27, 28, 29, 30, 31, 32, 33, 34, 39, 40, 42, 43, 44], "nguyen": [8, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 24, 26, 27, 28, 29, 30, 31, 32, 33, 34, 39, 40, 42, 43, 44], "wonder": [8, 9], "went": [8, 46], "dnscrypt": [8, 16], "31": [8, 47], "kubernet": 8, "negativo": [8, 28], "renam": [8, 10, 33, 47], "nvidia": [8, 26, 27, 35], "wayland": [8, 27, 41], "emul": [8, 30, 35], "slate": [8, 28], "rewritten": 8, "11": [8, 45, 47], "04": 8, "gitlab": 8, "suck": 8, "gettingstart": 8, "virtualbox": [8, 36], "vmware": 8, "kvm": 8, "wouldn": [8, 45], "anywai": [8, 44, 45], "pulseaudio": [8, 12, 18], "pipewir": [8, 15, 43], "bup": 8, "readm": [8, 28, 33, 47], "motiv": 8, "revisit": 8, "train": [8, 45, 46, 47], "ex294": [8, 46], "websit": [8, 22, 37, 43], "credit": [8, 17, 19, 26, 30], "encourag": [8, 41], "ex407": [8, 35], "lisenet": 8, "antipattern": [8, 35, 42, 44], "blockifi": 8, "spotifi": 8, "prohibit": 8, "blocker": [8, 43], "gentoo": 8, "gdm": [8, 45], "proton": 8, "reliabl": 8, "ge": 8, "esni": 8, "vaporwar": 8, "moment": 8, "wine": [8, 28, 35], "tip": [8, 35], "vega": 8, "viva": [8, 33], "pcsx2": 8, "rpmfusion": [8, 28], "flatpak": 8, "git": [8, 26, 32, 35, 39], "workflow": [8, 10, 45], "rc1": 9, "tue": [10, 25, 47], "varieti": [10, 45], "advantag": [10, 42], "snapshot": 10, "written": [10, 20, 41], "borgmat": 10, "snapper": 10, "altern": [10, 17, 30, 33, 45], "gilbertchen": 10, "benchmark": [10, 47], "disadvantag": 10, "restor": [10, 36, 45], "lengthi": 10, "useless": 10, "duplicaci": 10, "superior": [10, 42], "undergo": 10, "transit": [10, 47], "exclud": 10, "pattern": [10, 35], "gopher": 10, "wildcard": 10, "gpg2": [10, 21], "binari": [10, 13, 20, 39, 43], "passphras": [10, 44, 47], "flag": [10, 17, 31, 43, 45], "cleartext": [10, 40], "crontab": [10, 11, 47], "700": 10, "gnupg": [10, 22], "ttl": 10, "34560000": 10, "Then": [10, 15, 16, 19, 24, 27, 28, 30, 33], "reloadag": 10, "gpgconf": 10, "front": 10, "ssh_auth_sock": 10, "interact": [10, 42, 45, 47], "ship": [10, 34, 42], "shell": [10, 26], "funtoo": 10, "explicitli": [10, 19, 28], "id_rsa": [10, 47], "invok": [10, 45], "startup": [10, 25, 34], "eval": 10, "some_gpg_key_id": 10, "fish": [10, 21], "futur": [10, 19], "4583": 10, "tracker": 10, "final": [10, 17, 42, 47], "job": [10, 33, 45, 47], "z": [10, 33, 47], "unam": [10, 28], "null": [10, 38, 45], "intend": [10, 26, 42], "systemd": [10, 11, 17, 25, 28, 41, 45, 47], "tab": [10, 19, 34], "flock": 10, "inhibit": 10, "wake": [10, 20, 28], "wakesystem": 10, "properti": [10, 40, 42], "weekli": 10, "timer": [10, 11], "weekly_backup": 10, "oncalendar": 10, "wantedbi": [10, 25], "oneshot": 10, "execstartpr": 10, "1m": 10, "execstart": [10, 25], "race": 10, "condit": [10, 47], "suspend": 10, "calendar": [10, 37], "per": [10, 45], "insid": [10, 15, 33], "monthli": [10, 37], "preced": 10, "fuser": 10, "hold": [10, 23, 45], "laptop": 10, "lid": 10, "inact": [10, 19, 47], "xfce": [10, 19, 41], "xfconf": [10, 26], "xfce4": [10, 26, 41], "ac": 10, "metadata": 10, "essenti": [10, 42, 43, 47], "verb": [10, 33], "v6": 10, "v5": 10, "central": 10, "remain": 10, "frequent": 10, "far": [10, 25, 43], "xattr": 10, "etckeep": 10, "helper": 10, "20store": 10, "20restor": 10, "vc": 10, "chcon": [10, 47], "source_dir": 10, "target_dir": 10, "pipefail": 10, "shopt": 10, "dotglob": 10, "snip": 10, "preserv": [10, 45], "rsync": 10, "avzax": 10, "content": [10, 16, 19, 36, 37, 42], "remot": [10, 12, 38, 41, 45], "propag": 10, "merg": [10, 33, 43], "url": [10, 47], "act": [10, 47], "addunlock": 10, "largefil": 10, "dot": 10, "dotfil": 10, "scrub": 11, "sudo": [11, 15, 26, 28, 29, 41, 45, 47], "df": 11, "repair": 11, "consult": [11, 30], "someon": 11, "cryptsetup": [11, 47], "luksopen": [11, 47], "sdax": 11, "myvolum": 11, "mapper": [11, 25, 47], "diagnost": [11, 26], "free": [11, 42, 44], "v1": 11, "v2": 11, "softphon": 12, "voip": 12, "corpor": [12, 37], "desk": 12, "phone": [12, 24], "jabber": 12, "sip": 12, "troublesom": 12, "crash": [12, 14, 15], "imposs": 12, "horrend": 12, "nois": 12, "crackl": 12, "skype": 12, "vpn": 12, "sound": [12, 33], "program": [12, 21, 29, 30, 33, 34, 45, 46, 47], "crypt32": 12, "xp": 12, "pol_function_overridedl": 12, "pol_install_corefont": 12, "pol_install_crypt32": 12, "pol_internal_installfont": 12, "msi": 12, "shortcut": 12, "communicatork9": 12, "hear": 12, "wineprefix": [12, 33], "corefont": 12, "trick": 12, "wide": [12, 16, 40, 43, 45], "udev": 12, "detect": [12, 16, 31], "tsched": 12, "pa": 12, "driver": [12, 17, 18, 27, 35], "ifexist": 12, "llvm": 13, "memorysanit": 13, "grab": 13, "lt": [13, 18, 28, 45, 47], "gt": [13, 18, 28, 45, 47], "py3f": 13, "tom": 13, "py": [13, 33], "cr": 13, "imap": [13, 40], "note": [13, 15, 16, 19, 21, 26, 28, 30, 31, 33, 38, 40, 41, 45, 46, 47], "deliber": 13, "pyf": 13, "assumpt": [13, 43], "rpm": [14, 28, 30], "athem": 14, "solanum": 14, "addition": 14, "firejail": 14, "libimobiledevic": [14, 24], "fluidsynth": [14, 28], "soundfont": 14, "push": 14, "freedoom": 14, "daemon": [14, 17, 25, 42], "charybdi": 14, "inspircd": 14, "reinvent": 14, "compli": 14, "fh": 14, "ppc64le": 14, "tracer": 15, "weird": [15, 26], "overtim": 15, "critic": 15, "networkmanag": [15, 38], "firefox": [15, 35, 43], "media": [15, 33, 47], "iat": 15, "1624024025": 15, "9470344": 15, "shown": 15, "unsupport": [15, 16], "tty": [15, 21, 47], "offlin": [15, 44, 45], "known": [16, 20, 34], "buggi": 16, "incomplet": 16, "capabl": [16, 25], "speak": 16, "resolvectl": 16, "statist": 16, "mislead": 16, "claim": [16, 40], "dnssec": 16, "although": [16, 17, 34, 40], "footgun": 16, "resolut": [16, 25], "undesir": [16, 26], "traffic": [16, 40, 45], "sent": [16, 45, 46, 47], "unencrypt": 16, "dns_server": 16, "llmnr": 16, "dnsovertl": 16, "stub": 16, "wander": 16, "scienc": 16, "qname": 16, "minim": [16, 42, 47], "dig": [16, 45], "qnamemintest": 16, "nl": [16, 20], "leak": 16, "dnsleaktest": 16, "json": [17, 45], "graph": 17, "mnt": [17, 24, 47], "obscur": 17, "structur": 17, "piotr": 17, "kr\u00f3l": 17, "stackoverflow": [17, 20, 26, 40], "answer": [17, 26, 42, 45, 46, 47], "difficult": 17, "due": [17, 29, 35, 40, 42, 43, 44], "cli": [17, 29, 44], "daemonless": 17, "rootless": [17, 42], "hacki": 17, "compos": 17, "matter": 17, "model": 17, "inher": 17, "flaw": [17, 43], "anyon": [17, 42, 47], "intent": 17, "terribli": 17, "insecur": [17, 44], "wrapper": [17, 43], "toolbox": 17, "scratch": 17, "pollut": 17, "devel": [17, 20, 26, 28, 47], "cheatsheetseri": 17, "owasp": 17, "cheatsheet": 17, "docker_security_cheat_sheet": 17, "html": [17, 19, 47], "containrrr": 17, "watchtow": [17, 44], "alsa": 18, "i686": [18, 28], "mesa": 18, "dri": [18, 26], "libglu": 18, "gtk2": [18, 26], "libsm": 18, "ini": [18, 33], "eof": [18, 45], "alsadevicenam": 18, "libmpg123path": 18, "libmpg123": 18, "icon": [18, 34], "hicolor": 18, "256x256": 18, "trya": 18, "alwaysdata": 18, "exec": [18, 26, 41], "game": [18, 33, 44], "genericnam": 18, "sega": 18, "categori": 18, "checkmark": 18, "nowadai": 19, "histor": [19, 29], "advic": [19, 42, 47], "individu": 19, "rst": 19, "browser": [19, 26, 42, 43, 45], "fixup": 19, "env": [19, 26, 33], "gtk_theme": 19, "adwaita": 19, "inconveni": [19, 22], "widget": 19, "expos": [19, 26, 42, 44], "systemusesdarkthem": 19, "flash": 19, "usercont": 19, "css": 19, "toolkit": 19, "legacyuserprofilecustom": 19, "stylesheet": 19, "chrome": 19, "profil": [19, 27, 42], "tridactyl": 19, "newtab": 19, "2510": 19, "1d1b19": 19, "fg": 19, "moz": 19, "bodi": 19, "element": [19, 44], "maricn": 19, "privaci": 19, "xoriginpolici": 19, "xorigintrimmingpolici": 19, "lead": [19, 42, 45], "increas": [19, 45], "garbag": 19, "collector": 19, "margin": 19, "mitig": 19, "high": [19, 42, 45, 47], "preload": 19, "discard": 19, "insert": 19, "mozilla": [19, 28, 42], "short": [20, 44], "summari": [20, 28, 45, 47], "johnathan": 20, "wrong": [20, 24, 26, 31, 41], "obtus": 20, "visit": 20, "snippet": 20, "godbolt": 20, "coliru": 20, "disassembl": 20, "plethora": [20, 44], "tag": [20, 21], "libmpc": 20, "contrib": 20, "download_prerequisit": 20, "ill": 20, "advis": 20, "objdir": 20, "pwd": 20, "multilib": 20, "cross": 20, "toolchain": 20, "src": 20, "myapp": 20, "along": [20, 45], "osdev": 20, "strang": 20, "assembl": 20, "todo": [20, 42], "research": [20, 41], "tandem": 21, "slightli": 21, "trickier": 21, "www": [21, 47], "cdn": 21, "redirect": [21, 42], "signingkei": 21, "armor": 21, "commit": [21, 43], "bump": 21, "interchang": 21, "gpg_tty": 21, "gx": [21, 26], "extens": 22, "topicon": 22, "goto": 22, "kde": [22, 26], "gone": 22, "libappind": 22, "legaci": 22, "clementin": 22, "discord": [22, 43], "dropbox": 22, "telegram": 22, "statusnotifieritem": 22, "appind": 22, "gset": 22, "wm": 22, "button": 22, "layout": [22, 36], "appmenu": 22, "statusnotiferitem": 22, "indic": [22, 31], "ubuntu": 22, "modal": 22, "past": [22, 26, 47], "gpg": [22, 44, 45], "pinentri": 22, "shift": [22, 23, 34], "freedesktop": 22, "ibu": 22, "panel": 22, "hotkei": 22, "tweak": 22, "dconf": 22, "xkb": 22, "swapescap": 22, "often": [22, 37, 42, 43, 44], "stall": 22, "mutter": 22, "annoi": [22, 34], "aliv": 22, "60000": 22, "kernel": [23, 25, 28, 42, 47], "dual": 23, "drive": 23, "grub2": [23, 35], "editenv": 23, "unset": [23, 47], "menu_auto_hid": 23, "tether": 24, "photo": 24, "fuse": 24, "ifus": [24, 44], "usbmuxd": 24, "libusbmuxd": 24, "fusermount": [24, 44], "said": [24, 27, 44], "devic": [24, 25, 26], "navig": 24, "dcim": 24, "easiest": 24, "mark": 24, "ipheth": 24, "modprob": [24, 28], "usb": 24, "bluetooth": 24, "antiviru": [25, 42], "pointless": 25, "ridicul": [25, 41], "auditor": 25, "profession": 25, "compliant": 25, "happi": 25, "epo": 25, "concern": [25, 42], "nogpg": 25, "installroot": 25, "lazybox": 25, "anacron": 25, "dmidecod": 25, "releasev": 25, "initscript": 25, "setenforc": 25, "nspawn": 25, "av": [25, 47], "unzip": [25, 33], "agentpackag": 25, "isectp": 25, "isec": 25, "threatprevent": 25, "isecav": 25, "usefanotifi": 25, "notifi": 25, "restartforceexitstatu": 25, "133": 25, "successexitstatu": 25, "limitnofil": 25, "100000": 25, "cap_ipc_lock": 25, "cap_audit_writ": 25, "cap_audit_control": 25, "cap_sys_modul": 25, "cap_syslog": 25, "cap_net_admin": 25, "journal": [25, 37], "guest": [25, 47], "watchdogsec": 25, "3min": 25, "slice": 25, "deleg": [25, 45], "tasksmax": 25, "16384": 25, "alloc": 25, "devicepolici": 25, "deviceallow": 25, "tun": 25, "rwm": 25, "char": 25, "blkext": 25, "luk": [25, 47], "loopback": [25, 45], "killmod": 25, "preset": [25, 39], "1h": 25, "29min": 25, "pid": [25, 47], "1084": 25, "finish": [25, 44], "280": 25, "3m": 25, "cgroup": 25, "diurn": 25, "chotel": 25, "dispatch": [25, 38], "endpoint": [25, 38], "47": 25, "c2": 25, "mfe": 25, "51": [25, 47], "2b": [25, 47], "blob": 25, "data": [25, 33, 45, 47], "thirti": 25, "300": 25, "fc30": 25, "1b": 25, "ef": 25, "1909": 25, "1187": 25, "masvc": 25, "self_start": 25, "2432": 25, "macompatsvc": 25, "2434": 25, "2435": 25, "2436": 25, "2437": 25, "2438": 25, "2439": 25, "2440": 25, "sat": 26, "regard": [26, 35], "lack": [26, 29, 43], "2456": 26, "invoc": 26, "xg": 26, "printf": 26, "sd": 26, "lucasb": 26, "eyer": 26, "xz": 26, "lzma": 26, "wxgtk": 26, "wxgtk3": 26, "golang": 26, "zarat": 26, "mindepth": 26, "maxdepth": 26, "print": 26, "quot": 26, "bracket": 26, "95": 26, "pdavydov108": 26, "778": 26, "ncurs": 26, "clang": [26, 35], "favor": 26, "keepassxc": [26, 44], "smork": 26, "keepassnatmsg": 26, "keepass": 26, "cnf": 26, "sock": 26, "dbenv": 26, "alz": 26, "var_lib_t": 26, "rpm_var_lib_t": 26, "1461313": 26, "rebuilddb": 26, "gnome": [26, 35, 41, 47], "fullcompositionpipelin": 26, "14950": 26, "perchannel": 26, "stack": [26, 47], "render": 26, "arial": 26, "slight": 26, "pixel": 26, "rgb": 26, "thunar": 26, "tumbler": 26, "gstreamer1": [26, 28], "libav": [26, 28], "mysteri": 26, "ffmpeg": 26, "fork": [26, 33], "hood": [26, 42], "flatseal": 26, "gpu": [26, 27], "acceler": [26, 27], "xdg": 26, "portal": 26, "fuse_t": 26, "owner": 26, "therefor": 26, "vlc": 27, "cuda": 27, "decod": 27, "AND": 27, "hq": 27, "hwdec": 27, "serv": [28, 39, 45, 47], "reader": [28, 45, 46, 47], "sift": 28, "blog": [28, 30, 43], "philosophi": 28, "incompat": 28, "epoch": 28, "ugli": 28, "openh264": 28, "mpv": [28, 35], "vulkan": 28, "loader": 28, "akmod": 28, "empti": [28, 47], "390": 28, "415": [28, 47], "immedi": [28, 45], "preservevideomemoryalloc": 28, "procf": 28, "resum": 28, "forum": 28, "grubbi": 28, "arg": 28, "blacklist": 28, "nouveau": 28, "neither": 28, "intervent": [28, 47], "mok": 28, "secureboot": 28, "kmodtool": 28, "egeretto": 28, "keygen": [28, 47], "redhat": [28, 43, 45], "mokutil": 28, "public_kei": 28, "der": 28, "interfer": 29, "safer": 29, "consider": 29, "gear": 29, "poetri": 29, "pipx": 29, "interpret": [29, 40], "orphan": 29, "site": [29, 39, 42, 43, 45, 46], "statuslin": 30, "font": 30, "fish_function_path": 30, "repository_root": 30, "githubusercont": 30, "sha256": [30, 42, 47], "sha256sum": 30, "omf": 30, "bobthefish": 30, "endif": 30, "robertbas": 30, "bleed": 31, "faq": 31, "colour": 31, "excerpt": 31, "xterm": 31, "256color": 31, "underli": 31, "usual": [31, 42, 47], "infocmp": 31, "terminfo": 31, "256col": 31, "pathogen": 32, "autoload": 32, "lsso": 32, "tpo": 32, "pe": 32, "someus": 32, "helptag": 32, "resid": 33, "evil": 33, "remast": 33, "err08": 33, "overrun": 33, "drm": 33, "steam": 33, "fallout": 33, "gabriel": 33, "corona": 33, "laa": 33, "board": 33, "comprehens": [33, 42], "furthermor": [33, 44], "vc2019": 33, "steamapp": 33, "compatdata": 33, "22380": 33, "pfx": 33, "winetrick": 33, "vcrun2019": 33, "mo": 33, "j": [33, 36], "venter": 33, "movfs4l": 33, "redund": 33, "unmanag": [33, 42], "unvf": 33, "rerun": 33, "falloutnvlinuxlaunch": 33, "overlayf": 33, "9999": 33, "rootdir": 33, "mergerdir": 33, "moddatadir": 33, "moddir": 33, "0010": 33, "jip": 33, "nvse": 33, "prenam": 33, "depth": 33, "execdir": 33, "launch": 33, "fonvlaunchinmerg": 33, "rungameid": 33, "_overlay_": 33, "_mod": 33, "getislaa": 33, "loadord": 33, "fonv": 33, "esp": 33, "esm": 33, "falloutnv": 33, "optim": 33, "your_usernam": 33, "deu": 33, "ex": [33, 47], "vision": 33, "textur": 33, "utx": 33, "gmdxv9": 33, "dx": 33, "music": 33, "umx": 33, "hdtp": 33, "uax": 33, "plai": 33, "incorpor": 33, "dxvk": 33, "tinker": 33, "pane": 33, "compatibilitytool": 33, "user_set": 33, "lutri": 33, "thread": 33, "ge2": 33, "foundat": 33, "cutscen": 33, "movi": 33, "bulletstorm": 33, "mf": 33, "appid": 33, "protonfix": 33, "runtim": [33, 41, 43, 47], "inflex": 33, "xgamma": 34, "observ": 34, "xrandr": 34, "664": 34, "blue": 34, "touch": [34, 42, 47], "exhibit": 34, "symptom": 34, "advanc": 34, "colormap": 34, "uncheck": 34, "blank": 34, "starri": 34, "autostart": 34, "quick": [35, 44], "solid": 35, "doc": [35, 47], "felt": 35, "terribl": 35, "upcom": 35, "ex362": 35, "ex415": 35, "provis": 35, "freeipa": [35, 45, 46], "anti": [35, 47], "myth": 35, "euphem": 35, "review": [35, 45, 46, 47], "hurrican": 35, "electr": 35, "ipv6": 35, "tunnel": 35, "mingw": 35, "465": 35, "vnc": 35, "btrf": 35, "cisco": 35, "grub": 35, "iphon": [35, 44], "mcafe": 35, "pip": 35, "powerlin": 35, "tmux": 35, "xscreensav": 35, "iso": 35, "contributor": [35, 37], "vm": [36, 45, 47], "mac": [36, 47], "assist": [36, 45], "softwareupd": 36, "fetch": 36, "hdiutil": 36, "cdr": 36, "7516m": 36, "spud": 36, "hf": 36, "dmg": 36, "noverifi": 36, "nobrows": 36, "mountpoint": 36, "asr": 36, "sharedsupport": 36, "basesystem": 36, "noprompt": 36, "eras": 36, "detach": 36, "udto": 36, "humor": 37, "repres": 37, "viewpoint": 37, "held": 37, "welcom": 37, "imprecis": 37, "speech": 37, "eskimo": 37, "hundr": 37, "snow": 37, "vital": 37, "walk": 37, "sink": 37, "sled": 37, "igloo": 37, "bucket": 37, "doubt": [37, 45], "savag": 37, "modern": [37, 43], "western": 37, "societi": 37, "bless": 37, "curs": 37, "debat": 37, "schedul": 37, "frequenc": 37, "yearli": 37, "deadlin": 37, "certainli": 37, "understood": 37, "fluent": 37, "speaker": 37, "microsoft": [37, 39], "accept": [37, 45], "reput": 37, "fool": 37, "handi": 37, "dandi": 37, "tabl": [37, 45], "june": 37, "1st": 37, "octob": 37, "shorter": 37, "thought": 37, "closest": 38, "220": 38, "82": 38, "ifnam": 38, "sit0": 38, "2001": 38, "470": 38, "1f18": 38, "96": 38, "64": [38, 47], "icmp": 38, "heartbeat": 38, "ping": [38, 45], "tunnelfix": 38, "tunnel_id": 38, "tunnelbrok": 38, "ipv4_end": 38, "php": 38, "tid": 38, "knowledg": [39, 45, 46, 47], "stephan": 39, "lavavej": 39, "employe": [39, 43], "w64": 39, "coreutil": 39, "sever": 39, "bat": 39, "wsl2": 39, "supposedli": 39, "hyper": 39, "exim4": 40, "implicit": 40, "debian": 40, "587": 40, "8314": 40, "entitl": 40, "transport": [40, 42], "submiss": 40, "starttl": 40, "memo": 40, "greater": [40, 47], "mua": 40, "msp": 40, "discourag": 40, "negoti": [40, 45], "appendix": 40, "conflat": 40, "smtp": [40, 42, 45], "briefli": [40, 42], "subsequ": [40, 43], "revok": [40, 47], "unfortun": 40, "rfc6409": 40, "reiter": 40, "signific": [40, 42], "phrase": 40, "negot": 40, "nonsens": 41, "xresourc": 41, "unnecessari": [41, 42, 44], "abyssm": 41, "frown": 41, "upon": [41, 45, 46, 47], "pathet": 41, "whatsoev": 41, "vino": 41, "tigervnc": 41, "vncserver": 41, "vncpasswd": 41, "xstartup": 41, "xdg_session_typ": 41, "x11": 41, "gdk_backend": 41, "logout": 41, "infosec": 42, "hygien": 42, "downplai": 42, "apathi": 42, "expens": 42, "costli": 42, "certif": 42, "certbot": 42, "revoc": 42, "renew": [42, 45], "speed": 42, "istlsfastyet": 42, "complaint": 42, "rebutt": 42, "doesmysiteneedhttp": 42, "extend": [42, 43], "dead": 42, "troi": 42, "hunt": 42, "vulner": [42, 43], "suspect": 42, "mitm": 42, "attack": [42, 44], "vector": 42, "whitelist": [42, 47], "damag": 42, "csp": 42, "unsaf": 42, "inlin": 42, "trade": 42, "nginx": [42, 47], "strong": [42, 47], "badssl": 42, "scan": 42, "testssl": 42, "md5": 42, "sha1": [42, 44], "emploi": 42, "iter": [42, 47], "salt": [42, 47], "bruteforc": 42, "bcrypt": 42, "argon2": 42, "pbkdf2": 42, "xmpp": 42, "scram": 42, "strongli": 42, "digest": [42, 47], "plain": 42, "input": 42, "cap": 42, "moder": 42, "512": [42, 47], "denial": 42, "argu": 42, "obfusc": [42, 44], "reus": [42, 44], "rampant": 42, "strategi": 42, "educ": [42, 45, 46, 47], "javascript": 42, "meltdown": 42, "spectr": 42, "md": 42, "et": 42, "al": 42, "l1tf": 42, "pro": 42, "nutshel": 42, "degrad": [42, 45], "smt": 42, "loss": [42, 47], "low": [42, 44, 45], "action": [42, 47], "gain": [42, 47], "oxymoron": 42, "malwar": [42, 44], "escal": 42, "cve": 42, "5736": 42, "virus": 42, "superus": 42, "iron": [42, 43], "whole": 42, "avc": [42, 47], "audit2allow": [42, 47], "wholesal": 42, "similarli": [42, 43], "seccomp": 42, "danger": 42, "syscal": [42, 47], "henc": 42, "podman": 42, "ae": [42, 47], "byte": 42, "maximum": 42, "contenti": 43, "topic": 43, "overal": 43, "tackl": 43, "misconcept": 43, "ecosystem": [43, 47], "skillset": 43, "realiti": 43, "modicum": 43, "skill": 43, "analyz": [43, 44], "yet": 43, "martin": 43, "stranski": 43, "contribut": 43, "codebas": 43, "percept": 43, "repackag": 43, "redistribut": 43, "azur": 43, "forth": 43, "suppli": 43, "careless": 43, "2fa": 43, "api": 43, "bypass": 43, "micha\u0142": 43, "g\u00f3rny": 43, "nightmar": 43, "arbitrari": 43, "tradit": 43, "registri": 43, "flathub": 43, "downsid": 43, "sens": [43, 45], "weaken": 43, "broadest": 43, "proprietari": 43, "telemetri": 43, "spectrum": 43, "ublock": 43, "aim": 44, "wealth": 44, "lowercas": [44, 47], "uppercas": [44, 45, 47], "punctuat": 44, "chosen": 44, "dictionari": [44, 45], "ala": 44, "dicewar": 44, "entropi": 44, "dwelv": 44, "deep": [44, 47], "complex": 44, "weak": 44, "poor": [44, 47], "human": 44, "thumb": 44, "heurist": 44, "measur": 44, "stuf": 44, "strongbox": 44, "itun": 44, "poorli": 44, "unfriendli": 44, "bloatwar": 44, "icloud": 44, "myself": 44, "straightforward": 44, "markmcguil": 44, "newdatabas": 44, "instantli": 44, "haveibeenpwn": 44, "1password": 44, "paid": 44, "pwned": 44, "count": [44, 45, 47], "v7": 44, "kdbx": 44, "huge": 44, "comparison": [44, 47], "brain": 44, "plaintext": 44, "cryptograph": 44, "physic": [44, 47], "autotyp": 44, "autofil": 44, "defeat": 44, "wed": 45, "dec": 45, "prepar": [45, 46, 47], "certifi": [45, 46, 47], "specialist": [45, 46, 47], "youtub": [45, 46, 47], "playlist": [45, 46, 47], "studi": [45, 46, 47], "materi": [45, 46, 47], "disclos": [45, 46, 47], "violat": [45, 46, 47], "nda": [45, 46, 47], "tutor": [45, 46, 47], "teach": [45, 46, 47], "video": [45, 46, 47], "outlin": [45, 47], "evalu": [45, 47], "meet": [45, 47], "criteria": [45, 47], "rhca": [45, 47], "architect": [45, 47], "rhcsa": [45, 47], "anatomi": 45, "workshop": 45, "curriculum": 45, "fairli": [45, 47], "2gb": 45, "scale": 45, "gb": 45, "10k": 45, "3gb": 45, "swap": 45, "100k": 45, "50k": 45, "16gb": 45, "larger": 45, "idm1": 45, "192": [45, 47], "168": [45, 47], "idm2": 45, "reserv": 45, "compon": [45, 47], "realm": 45, "arpa": 45, "passw0rd": 45, "kerbero": 45, "kpasswd": 45, "john": 45, "smith": 45, "jsmith": 45, "bob": 45, "rufu": 45, "brufu": 45, "corp": 45, "larri": 45, "dufu": 45, "ldufu": 45, "helpdesk": 45, "robert": 45, "cole": 45, "rcole": 45, "stage": 45, "thoma": 45, "snyder": 45, "tsnyder": 45, "syshost": 45, "syshostmgt": 45, "sup3r": 45, "ecre7": 45, "stageus": 45, "tsynder": 45, "nonposix": 45, "centos123": 45, "krblastpwdchang": 45, "authtyp": 45, "authnam": 45, "krb5keytab": 45, "kerb": 45, "krbmethodnegoti": 45, "krbmethodk5passwd": 45, "krbservicenam": 45, "krbauthrealm": 45, "krbsavecredenti": 45, "entail": 45, "workplac": 45, "obviou": 45, "20190902000318": 45, "stuck": 45, "utc": 45, "princip": 45, "20190902000756": 45, "57": [45, 47], "elimin": 45, "rbac": 45, "partial": 45, "hbac": 45, "seen": 45, "total": [45, 47], "272": 45, "atd": 45, "apr": 45, "328": 45, "crond": [45, 47], "lrwxrwxrwx": 45, "jan": 45, "fingerprint": [45, 47], "70": [45, 47], "ksu": 45, "715": 45, "154": 45, "155": 45, "polkit": 45, "postlogin": 45, "143": 45, "runus": 45, "smartcard": 45, "jun": 45, "mta": 45, "76": 45, "postfix": 45, "727": 45, "feb": 45, "214": 45, "shadowutil": 45, "566": 45, "40": [45, 47], "178": 45, "137": 45, "248": 45, "vlock": 45, "mgt": 45, "predefin": [45, 47], "procedur": [45, 47], "all_admin": 45, "corp_access": 45, "automout": 45, "automountmap": 45, "automountkei": 45, "nfs4": 45, "sec": 45, "krb5i": 45, "krb5p": 45, "mkhomedir_help": 45, "filter": [45, 47], "binder": 45, "password123": 45, "ansibl": [45, 46], "windowsfeatur": 45, "addsdeploy": 45, "addsforest": 45, "collid": 45, "prerequisit": 45, "smb": 45, "older": 45, "bsd": 45, "solari": 45, "omnio": 45, "slapi": 45, "ascii": 45, "dash": 45, "ipa0": 45, "sidgen": 45, "dnsforwardzon": 45, "examplead": 45, "dnsrecord": 45, "dnszone": 45, "system32": 45, "dnscmd": 45, "zoneadd": 45, "_ldap": 45, "_tcp": 45, "61": [45, 47], "opcod": 45, "noerror": 45, "14793": 45, "qr": 45, "aa": 45, "rd": 45, "ra": 45, "pseudosect": 45, "edn": 45, "86400": 45, "1200": 45, "12195": 45, "intiat": 45, "directiron": 45, "yyyyyyyyi": 45, "zzzzzzzzzz": 45, "adus": 45, "adgroup_extern": 45, "adusers_access": 45, "changelog": 45, "translat": [45, 47], "readabl": 45, "perl": 45, "vv": 45, "param": 45, "excut": 45, "posit": 45, "group_show": 45, "ipareplica": 45, "cookiejar": 45, "cooki": 45, "jar": 45, "cacert": 45, "login_kerbero": 45, "user_find": 45, "applicaton": 45, "tie": 45, "ui": [45, 47], "radiu": 45, "oauth": 45, "keycloak": 45, "readi": 46, "visudo": 47, "nopasswd": 47, "ener": 47, "identif": 47, "randomart": 47, "2048": 47, "node1": 47, "node2": 47, "inventori": 47, "ansible_host": 47, "uptim": 47, "yaml": 47, "suspici": 47, "malici": 47, "dir": 47, "night": 47, "negat": 47, "spool": 47, "app_access": 47, "luksformat": 47, "sdb1": 47, "luksdump": 47, "xt": 47, "plain64": 47, "spec": 47, "payload": 47, "offset": 47, "mk": 47, "1c": 47, "c8": 47, "5c": 47, "4f": 47, "c5": 47, "58": 47, "f8": 47, "90": 47, "3d": 47, "ed": 47, "97": 47, "d6": 47, "4b": 47, "e3": 47, "e8": 47, "c9": 47, "6b": 47, "a3": 47, "6c": 47, "4c": 47, "dd": 47, "63": 47, "2f": 47, "fd": 47, "e4": 47, "a1": 47, "72": 47, "a4": 47, "e7": 47, "0f": 47, "bc": 47, "119809": 47, "uuid": 47, "b2a181b0": 47, "4078": 47, "415e": 47, "94c2": 47, "18c51a886a3b": 47, "slot": 47, "1855886": 47, "c1": 47, "6f": 47, "fe": 47, "4e": 47, "ce": 47, "e5": 47, "68": 47, "fb": 47, "b1": 47, "a0": 47, "d1": 47, "cc": 47, "6e": 47, "d0": 47, "6d": 47, "b8": 47, "af": 47, "stripe": 47, "4000": 47, "isluk": 47, "xf": 47, "umount": 47, "luksclos": 47, "tang": 47, "clevi": 47, "crypttab": 47, "fstab": 47, "nbde": 47, "bound": 47, "presenc": 47, "essenc": 47, "stateless": 47, "decrypt": 47, "tangd": 47, "dracut": 47, "ynyn": 47, "yn": 47, "luksmeta": 47, "cryptab": 47, "_netdev": 47, "askpass": 47, "jose": 47, "jwk": 47, "gen": 47, "alg": 47, "es512": 47, "new_sig": 47, "ecmr": 47, "new_exc": 47, "old_sig": 47, "old_exc": 47, "plug": 47, "udisks2": 47, "sdc1": 47, "guard": 47, "yubikei": 47, "keyboard": 47, "usbguard": 47, "1d6b": 47, "0002": 47, "serial": 47, "0000": 47, "xhci": 47, "jep": 47, "6wzviqdj5vsetuy8patcnbkearevo2oqdplnd": 47, "g1ehgqdrl3dj9hvw9w2hdc": 47, "pk87pkzfe1wy25bq8k4": 47, "0003": 47, "3wo3xwdgen1hd5xm3psnl3p98klp1rutggq5hsxtf8k": 47, "0853": 47, "0111": 47, "realforc": 47, "87": 47, "tfzkrwqsnte7xb6rnxvrskg3d1fbz8azpvgpqomsino": 47, "046d": 47, "c52b": 47, "5zenofqhsazg43m4kgvcuwvu8c": 47, "gncy8rgdlwxc": 47, "vpk": 47, "8087": 47, "0a2b": 47, "ttrmrwxjil9goi": 47, "jzidueoz0yuiwwzblm8d7djvgxdg": 47, "e0": 47, "5986": 47, "2113": 47, "camera": 47, "8wiuhlrxrajhb9tp": 47, "q4nujsyob4cqfapuutwcr": 47, "amic": 47, "0e": 47, "0bda": 47, "0316": 47, "20120501030900000": 47, "usb3": 47, "crw": 47, "wg1msc3yzsmcsltngpjttjt2luvhnfu4gevvd3giuv4": 47, "3c": 47, "k9guue6cnbob2wb": 47, "kmz1hz1ugvi6rrqnkidvdmq": 47, "iu6qpiqudps2m89viixpdzxoj69o6tb9kpjnyawdvm": 47, "j0p3jeotlspqlacl0jebdt": 47, "k4mgto84skv39leysc": 47, "usb4": 47, "1050": 47, "0407": 47, "otp": 47, "fido": 47, "ccid": 47, "jai4elg4fej": 47, "gf1qxlwplej54mqmto16esmr8": 47, "unblock": 47, "poolici": 47, "reject": 47, "0600": 47, "1996": 47, "four": 47, "tightli": 47, "faillock": 47, "pwqualiti": 47, "authconfig": 47, "ci": 47, "passminlen": 47, "enablereqlow": 47, "enablerequpp": 47, "enablereqdigit": 47, "enablereqoth": 47, "enablefaillock": 47, "faillockarg": 47, "unlock_tim": 47, "900": 47, "updateal": 47, "odd": 47, "surround": 47, "pam_unix": 47, "pam_env": 47, "pam_faildelai": 47, "2000000": 47, "pam_faillock": 47, "preauth": 47, "pam_succeed_if": 47, "quiet": 47, "pam_localus": 47, "try_first_pass": 47, "quiet_success": 47, "authfail": 47, "pam_deni": 47, "user_unknown": 47, "pam_pwqual": 47, "local_users_onli": 47, "authtok_typ": 47, "use_authtok": 47, "pam_keyinit": 47, "pam_limit": 47, "pam_systemd": 47, "pam_oddjob_mkhomedir": 47, "use_uid": 47, "pam_pwhistori": 47, "auditd": 47, "subsystem": 47, "trail": 47, "logger": 47, "augenrul": 47, "auditctl": 47, "lost": 47, "backlog": 47, "buffer": 47, "arch": 47, "interfield": 47, "euid": 47, "setuid": 47, "execv": 47, "asm": 47, "unistd_64": 47, "ausearch": 47, "aureport": 47, "8192": 47, "perm": 47, "auid": 47, "4294967295": 47, "b64": 47, "fa0": 47, "setresuid": 47, "proctitl": 47, "msg": 47, "1574027940": 47, "430": 47, "155902": 47, "7375646f007375002d": 47, "ld": 47, "inod": 47, "8413547": 47, "0100755": 47, "ouid": 47, "ogid": 47, "rdev": 47, "obj": 47, "system_u": 47, "ld_so_t": 47, "nametyp": 47, "cap_fp": 47, "0000000000000000": 47, "cap_fi": 47, "cap_f": 47, "cap_fver": 47, "4414497": 47, "0104111": 47, "sudo_exec_t": 47, "argc": 47, "a2": 47, "c000003e": 47, "5558e5c69c60": 47, "5558e5b54700": 47, "5558e5b52c80": 47, "ppid": 47, "13115": 47, "13146": 47, "suid": 47, "fsuid": 47, "egid": 47, "sgid": 47, "fsgid": 47, "pts5": 47, "se": 47, "comm": 47, "unconfined_r": 47, "unconfined_t": 47, "c0": 47, "c1023": 47, "pci": 47, "dss": 47, "thankfulli": 47, "loginuid": 47, "cont": 47, "dont": 47, "no32bit": 47, "chroni": 47, "nispom": 47, "ospp": 47, "v42": 47, "v31": 47, "stig": 47, "abus": 47, "inject": 47, "43": 47, "einval": 47, "71": 47, "99": 47, "golden": 47, "clock_settim": 47, "b32": 47, "0x0": 47, "giggl": 47, "yesterdai": 47, "todai": 47, "56": 47, "579": 47, "453": 47, "anomali": 47, "crypto": 47, "191": 47, "77": 47, "1110": 47, "14879": 47, "timedatex": 47, "14515": 47, "8491": 47, "6357": 47, "chronyd": 47, "2974": 47, "822": 47, "451": 47, "nazu": 47, "sess": 47, "oct": 47, "1571799698": 47, "833": 47, "107001": 47, "26065": 47, "system_r": 47, "sshd_t": 47, "csv": 47, "serial_num": 47, "event_kind": 47, "subj_prim": 47, "subj_sec": 47, "subj_kind": 47, "obj_prim": 47, "obj_sec": 47, "obj_kind": 47, "acct": 47, "nice": 47, "fill": 47, "errorn": 47, "frankli": 47, "standpoint": 47, "viru": 47, "dictat": 47, "clamav": 47, "getenforc": 47, "relabel": 47, "autorelabel": 47, "boolean": 47, "getsebool": 47, "httpd_unifi": 47, "httpd_sys_content_rw_t": 47, "httpd_enable_homedir": 47, "public_html": 47, "stock": 47, "httpd_sys_content_t": 47, "matchpathcon": 47, "surpris": 47, "norm": 47, "wipe": 47, "land": 47, "incorrectli": 47, "lz": 47, "user_tmp_t": 47, "1843": 47, "ssh_home_t": 47, "init_t": 47, "2709": 47, "efz": 47, "auxz": 47, "ftpd_t": 47, "public_content_t": 47, "sesearch": 47, "semant": 47, "ioctl": 47, "getattr": 47, "non_security_file_typ": 47, "setattr": 47, "unlink": 47, "uncommon": 47, "clever": 47, "ml": 47, "mc": 47, "__default__": 47, "tester": 47, "guest_u": 47, "guest_r": 47, "staff_r": 47, "sysadm_r": 47, "staff_u": 47, "sysadm_u": 47, "user_u": 47, "user_r": 47, "xguest_u": 47, "xguest_r": 47, "newrol": 47, "sysadmin": 47, "ON": 47, "ssh_sysadm_login": 47, "exec_cont": 47, "auditadm_exec_cont": 47, "dbadm_exec_cont": 47, "guest_exec_cont": 47, "logadm_exec_cont": 47, "secadm_exec_cont": 47, "staff_exec_cont": 47, "sysadm_exec_cont": 47, "user_exec_cont": 47, "xguest_exec_cont": 47, "setroubleshoot": 47, "sealert": 47, "sepolici": 47, "audit2whi": 47, "setool": 47, "seinfo": 47, "confin": 47, "pnv": 47}, "objects": {}, "objtypes": {}, "objnames": {}, "titleterms": {"contributor": 0, "auto": 1, "provis": 1, "freeipa": [2, 6], "content": [2, 3, 5, 6, 45, 46, 47], "overview": [2, 4, 45, 46, 47], "requir": [2, 3, 4, 5, 7], "tutori": [2, 3, 4, 5], "prefac": [2, 4, 5], "note": [2, 4, 5, 6], "recommend": [2, 4, 5, 6, 45], "dn": [2, 6, 7, 16], "deleg": 2, "server": [2, 4, 5, 6, 45], "setup": [2, 3, 5, 6, 7, 41], "packag": [2, 4, 43, 47], "option": 2, "instal": [2, 4, 7, 12, 20, 30, 45], "replica": 2, "autom": 2, "migrat": [2, 4], "upgrad": [2, 28], "el7": 2, "el8": 2, "el9": 2, "activ": [2, 45], "directori": [2, 4, 17, 26, 45], "trust": [2, 45], "disabl": [2, 4, 19, 22, 26, 34, 42], "anonym": [2, 4], "bind": [2, 4], "client": [2, 4, 42, 45], "enterpris": [2, 4, 35], "linux": [2, 4, 35], "fedora": [2, 4, 23, 28, 35], "mac": 2, "monterei": 2, "older": 2, "ventura": 2, "like": 2, "newer": 2, "gener": 2, "maco": [2, 35, 36], "suse": 2, "hbac": 2, "sudo": [2, 4], "legaci": 2, "solari": 2, "10": 2, "11": 2, "script": 2, "ad": [2, 5, 45], "doubl": 2, "uid": 2, "omnio": 2, "illumo": 2, "pam_hbac": 2, "conf": 2, "pam": [2, 47], "configur": [2, 4, 6, 18, 45, 47], "login": [2, 47], "user": [2, 4, 19, 26, 45], "domain": [2, 45], "resolut": 2, "order": 2, "odd": 2, "weird": 2, "remov": [2, 8], "realm": 2, "ipa": 2, "group": [2, 4, 45], "name": 2, "short": 2, "site": 2, "dc": 2, "": [2, 6], "6": 2, "default": 2, "suffix": [2, 20], "set": [2, 5, 21], "shell": 2, "kerbero": 2, "princip": 2, "hadoop": 2, "cloudera": 2, "manag": [2, 6, 43, 44, 45, 47], "woe": 2, "The": [2, 6, 37], "solut": 2, "forward": [2, 3], "dot": [2, 7], "log": [2, 4, 26], "audit": [2, 47], "certif": [2, 4, 6, 45], "renew": 2, "http": [2, 19, 42], "stuck": 2, "ca": 2, "relat": 2, "san": 2, "cm": 2, "commun": [2, 12], "issu": 2, "403": 2, "account": 2, "otp": 2, "enabl": [2, 30], "nat": 3, "router": 3, "interfac": 3, "firewalld": 3, "iptabl": 3, "nftabl": 3, "ipv6": [3, 38], "dhcp": [3, 5, 6], "openldap": 4, "ldap": [4, 45], "structur": 4, "add": [4, 22, 45], "via": [4, 12, 30], "ldif": 4, "nf": [4, 6], "export": 4, "home": [4, 45], "firewal": 4, "current": [4, 26], "releas": 4, "automount": [4, 45], "ons": 4, "member": 4, "referenti": 4, "integr": 4, "acl": 4, "password": [4, 22, 42, 44, 45], "polici": [4, 45], "pxe": [5, 6], "grub2": 5, "cobbler": 5, "tftp": 5, "up": [5, 6, 21, 44, 45], "grub": [5, 23], "distribut": 5, "custom": [5, 19], "color": 5, "background": 5, "special": 5, "submenu": 5, "system": [6, 22, 47], "administr": 6, "experi": 6, "complet": 6, "changelog": 6, "begin": 6, "kvm": 6, "hypervisor": 6, "connect": 6, "spin": 6, "vm": 6, "us": [6, 19, 22, 26, 39, 42, 44, 45, 47], "katello": 6, "spacewalk": 6, "two": 6, "databas": [6, 44], "iscsi": 6, "deploi": 6, "bacula": 6, "four": 6, "load": [6, 28], "balanc": 6, "postfix": 6, "nagio": 6, "syslog": 6, "document": 6, "your": [6, 44], "work": [6, 26, 28], "rpm": [6, 26], "build": [6, 20], "git": [6, 10, 21], "ansibl": [6, 47], "unbound": 7, "over": 7, "tl": 7, "errata": [8, 35], "articl": 8, "inform": [8, 45, 47], "upcom": 9, "annouc": 9, "backup": [10, 45], "btrf": [10, 11], "duplic": 10, "gpg": [10, 21], "keychain": 10, "unattend": 10, "annex": 10, "cisco": 12, "ip": [12, 26], "playonlinux": 12, "regular": 12, "wine": [12, 33], "puls": 12, "audio": 12, "clang": 13, "msan": 13, "line": 13, "number": 13, "format": 13, "copr": 14, "gzdoom": 14, "ircd": 14, "dnf": [15, 30], "interoper": 16, "systemd": 16, "resolv": 16, "docker": [17, 20], "chang": [17, 22], "data": 17, "podman": 17, "emul": 18, "kega": 18, "fusion": 18, "depend": 18, "No": 18, "sound": 18, "firefox": 19, "arkenfox": 19, "j": 19, "automat": [19, 28], "redirect": 19, "websit": 19, "type": 19, "an": [19, 43, 45], "invalid": [19, 20], "url": 19, "glitchi": 19, "ui": 19, "when": [19, 34], "gtk": 19, "theme": 19, "forc": 19, "dark": 19, "network": 19, "refer": 19, "spoofsourc": 19, "minim": [19, 22], "ram": 19, "usag": 19, "altern": [19, 26], "stylu": 19, "gcc": 20, "prerequisit": 20, "gmp": 20, "mpfr": 20, "mpc": 20, "instruct": 20, "cloudflar": 21, "github": 21, "page": 21, "gnome": 22, "tip": [22, 33], "trai": 22, "maxim": 22, "pidgin": 22, "curs": 22, "dialog": 22, "input": 22, "emoji": 22, "swap": [22, 26], "cap": 22, "lock": 22, "escap": 22, "program": 22, "respond": 22, "check": [22, 44], "timeout": 22, "menu": 23, "miss": 23, "iphon": 24, "mcafe": 25, "misc": 26, "ld_library_path": 26, "fish": [26, 30], "unabl": 26, "find": 26, "liblzma": 26, "wxwidget": 26, "updat": 26, "all": 26, "repositori": 26, "youcompletem": 26, "crash": 26, "due": 26, "libtinfo": 26, "so": 26, "version": 26, "mismatch": 26, "keepasshttp": 26, "longer": 26, "tcp": 26, "socket": 26, "mysql": 26, "selinux": [26, 42, 47], "i": [26, 34, 40, 43], "prevent": 26, "abrt": 26, "action": 26, "sav": 26, "from": 26, "write": 26, "access": [26, 45], "var": 26, "lib": 26, "desktop": 26, "environ": [26, 45], "upon": [26, 28], "xfce": [26, 34], "freez": 26, "until": 26, "you": 26, "switch": 26, "anoth": 26, "tty": 26, "font": 26, "video": 26, "thumbnail": 26, "stop": 26, "flatpak": [26, 43], "spotifi": 26, "close": 26, "statvf": 26, "run": 26, "1000": 26, "doc": 26, "fail": 26, "oper": 26, "permit": 26, "mpv": 27, "nvidia": 28, "driver": 28, "negativo17": 28, "multimedia": 28, "dkm": 28, "suspend": 28, "doesn": 28, "t": [28, 37, 43, 44], "modul": [28, 47], "35": 28, "sign": 28, "secur": [28, 35, 42, 47], "boot": 28, "pip": 29, "powerlin": 30, "oh": 30, "my": 30, "vim": [30, 32], "tmux": [30, 31], "plugin": 32, "out": 33, "memori": 33, "error": 33, "new": [33, 45], "vega": 33, "mod": 33, "loot": 33, "gmdx": 33, "proton": 33, "ge": 33, "mf_instal": 33, "caller": 33, "xscreensav": 34, "gamma": 34, "bright": 34, "too": 34, "high": 34, "unlock": 34, "fade": 34, "black": 34, "effect": 34, "conflict": 34, "screensav": 34, "guid": 35, "hint": 35, "train": 35, "resourc": [35, 45, 47], "miscellan": 35, "about": 35, "u": 35, "creat": [36, 45], "iso": 36, "imag": 36, "euphem": 37, "review": 37, "pleas": 37, "don": 37, "sai": 37, "timefram": 37, "hurrican": 38, "electr": 38, "tunnel": 38, "mingw": 39, "why": 39, "wsl": 39, "port": 40, "465": 40, "deprec": [40, 42], "vnc": 41, "anti": 42, "pattern": 42, "Not": 42, "insecur": [42, 43], "request": 42, "cipher": 42, "hash": 42, "function": 42, "arbitrari": 42, "length": 42, "side": 42, "mitig": 42, "contain": 42, "myth": 43, "most": 43, "maintain": 43, "can": [43, 44], "code": 43, "ar": 43, "unnecessari": 43, "middleman": 43, "good": 43, "compromis": 43, "back": [44, 45], "phone": 44, "against": 44, "hibp": 44, "dump": 44, "faq": 44, "isn": 44, "singl": 44, "bad": 44, "But": 44, "master": 44, "stolen": 44, "keylogg": 44, "ex362": 45, "exam": [45, 46, 47], "prep": [45, 46, 47], "hardwar": 45, "idm": 45, "scalabl": 45, "fault": 45, "toler": 45, "expir": 45, "implement": 45, "sso": 45, "kerber": 45, "servic": 45, "ha": 45, "author": 45, "secret": 45, "vault": 45, "roam": 45, "backend": 45, "extern": 45, "relationship": 45, "authent": [45, 47], "mainten": 45, "infrastructur": 45, "perform": 45, "without": 45, "interrupt": 45, "valu": 45, "rest": 45, "api": 45, "queri": 45, "idp": 45, "ex407": 46, "ex415": 47, "red": 47, "hat": 47, "engin": 47, "intrus": 47, "detect": 47, "encrypt": 47, "storag": 47, "restrict": 47, "usb": 47, "devic": 47, "pluggabl": 47, "binari": 47, "glossari": 47, "command": 47, "enforc": 47, "complianc": 47}, "envversion": {"sphinx.domains.c": 3, "sphinx.domains.changeset": 1, "sphinx.domains.citation": 1, "sphinx.domains.cpp": 9, "sphinx.domains.index": 1, "sphinx.domains.javascript": 3, "sphinx.domains.math": 2, "sphinx.domains.python": 4, "sphinx.domains.rst": 2, "sphinx.domains.std": 2, "sphinx": 60}, "alltitles": {"Contributors": [[0, "contributors"]], "Auto-Provisioning": [[1, "auto-provisioning"]], "FreeIPA": [[2, "freeipa"]], "Contents": [[2, "contents"], [3, "contents"], [5, "contents"], [45, "contents"], [46, "contents"], [47, "contents"]], "Overview": [[2, "overview"], [4, "overview"], [45, "overview"], [46, "overview"], [47, "overview"]], "Requirements": [[2, "requirements"], [3, "requirements"], [4, "requirements"], [5, "requirements"], [7, "requirements"]], "Tutorial Preface, Notes, and Recommendations": [[2, "tutorial-preface-notes-and-recommendations"], [4, "tutorial-preface-notes-and-recommendations"], [5, "tutorial-preface-notes-and-recommendations"]], "DNS": [[2, "dns"], [16, "dns"]], "Delegation": [[2, "delegation"]], "Server Setup": [[2, "server-setup"], [5, "server-setup"]], "Required Packages": [[2, "required-packages"]], "Optional Packages": [[2, "optional-packages"]], "Installation": [[2, "installation"], [4, "installation"], [7, "installation"]], "Replica": [[2, "replica"]], "Replica Automation": [[2, "replica-automation"]], "Server Migration/Upgrade": [[2, "server-migration-upgrade"]], "EL7 to EL8": [[2, "el7-to-el8"]], "EL8 to EL9": [[2, "el8-to-el9"]], "Active Directory Trust": [[2, "active-directory-trust"]], "Disable Anonymous Bind": [[2, "disable-anonymous-bind"]], "Client Setup": [[2, "client-setup"]], "Enterprise Linux & Fedora": [[2, "enterprise-linux-fedora"]], "Mac Clients": [[2, "mac-clients"]], "Monterey and older": [[2, "monterey-and-older"]], "Ventura and likely newer": [[2, "ventura-and-likely-newer"]], "General macOS Notes": [[2, "general-macos-notes"]], "SUSE": [[2, "suse"]], "HBAC": [[2, "hbac"]], "SUDO": [[2, "sudo"], [4, "sudo"]], "Legacy Client Setup": [[2, "legacy-client-setup"]], "Solaris 10": [[2, "solaris-10"], [2, "id2"]], "Solaris 11": [[2, "solaris-11"], [2, "id3"]], "Automated Scripts": [[2, "automated-scripts"]], "AD Trust Double UID": [[2, "ad-trust-double-uid"]], "OmniOS/Illumos": [[2, "omnios-illumos"]], "Legacy HBAC": [[2, "legacy-hbac"]], "Omnios": [[2, "omnios"]], "pam_hbac.conf": [[2, "pam-hbac-conf"]], "PAM Configuration": [[2, "pam-configuration"]], "Login with AD Users to Legacy Clients": [[2, "login-with-ad-users-to-legacy-clients"]], "Legacy Active Directory Trust Notes": [[2, "legacy-active-directory-trust-notes"]], "Domain Resolution Order Oddness": [[2, "domain-resolution-order-oddness"]], "Solaris Weirdness": [[2, "solaris-weirdness"]], "Domain Options": [[2, "domain-options"]], "Remove @realm for AD users": [[2, "remove-realm-for-ad-users"]], "AD and IPA group names with short names": [[2, "ad-and-ipa-group-names-with-short-names"]], "Sites and AD DC\u2019s": [[2, "sites-and-ad-dc-s"]], "Enterprise Linux 6 SUDO and Default Domain Suffix": [[2, "enterprise-linux-6-sudo-and-default-domain-suffix"]], "Set Default Shell for AD Users": [[2, "set-default-shell-for-ad-users"]], "Automated Kerberos Principals": [[2, "automated-kerberos-principals"]], "Hadoop/Cloudera": [[2, "hadoop-cloudera"]], "Cloudera Manager Woes": [[2, "cloudera-manager-woes"]], "The Solution": [[2, "the-solution"]], "DNS Forwarding": [[2, "dns-forwarding"]], "DNS Forwarding to DoT": [[2, "dns-forwarding-to-dot"]], "Logging": [[2, "logging"]], "Audit Logs": [[2, "audit-logs"]], "Certificates": [[2, "certificates"], [4, "certificates"]], "Renewed IPA HTTP Certificate Stuck": [[2, "renewed-ipa-http-certificate-stuck"]], "CA Related Certificates Stuck": [[2, "ca-related-certificates-stuck"]], "Default Certificates with SAN": [[2, "default-certificates-with-san"]], "CMS Communication Issues (403)": [[2, "cms-communication-issues-403"]], "Kerberos": [[2, "kerberos"]], "Accounts with OTP Enabled": [[2, "accounts-with-otp-enabled"]], "NAT/Router": [[3, "nat-router"]], "Tutorial": [[3, "tutorial"]], "Interface Setup": [[3, "interface-setup"]], "FirewallD": [[3, "firewalld"]], "iptables": [[3, "iptables"]], "nftables": [[3, "nftables"]], "IPv6 Forwarding": [[3, "ipv6-forwarding"]], "DHCP": [[3, "dhcp"], [5, "dhcp"]], "OpenLDAP": [[4, "openldap"]], "Packages": [[4, "packages"]], "LDAP Server Configuration": [[4, "ldap-server-configuration"]], "LDAP Structure": [[4, "ldap-structure"]], "Add Users via Migration": [[4, "add-users-via-migration"]], "Add Users via LDIF": [[4, "add-users-via-ldif"]], "NFS Export Home Directories": [[4, "nfs-export-home-directories"]], "Firewall": [[4, "firewall"]], "Client": [[4, "client"]], "Enterprise Linux/Current Fedora Releases": [[4, "enterprise-linux-current-fedora-releases"]], "Automounting Home Directories": [[4, "automounting-home-directories"]], "LDAP Structure Add-ons": [[4, "ldap-structure-add-ons"]], "Member Groups": [[4, "member-groups"]], "Referential Integrity": [[4, "referential-integrity"]], "ACL": [[4, "acl"]], "Disable Anonymous Binding": [[4, "disable-anonymous-binding"]], "LDAP Logging": [[4, "ldap-logging"]], "Password Policy": [[4, "password-policy"]], "PXE (with grub2)": [[5, "pxe-with-grub2"]], "Cobbler": [[5, "cobbler"]], "TFTP": [[5, "tftp"]], "Setting up Grub": [[5, "setting-up-grub"]], "Adding Distributions": [[5, "adding-distributions"]], "Customizing Grub": [[5, "customizing-grub"]], "Colors and Backgrounds": [[5, "colors-and-backgrounds"]], "Special Submenus": [[5, "special-submenus"]], "The System Administrator Experience": [[6, "the-system-administrator-experience"]], "Recommendations": [[6, "recommendations"]], "Certification Completions": [[6, "certification-completions"]], "Notes and Changelog": [[6, "notes-and-changelog"]], "Begin": [[6, "begin"]], "Setup a KVM Hypervisor": [[6, "setup-a-kvm-hypervisor"]], "DHCP and DNS": [[6, "dhcp-and-dns"]], "Server and Content Management": [[6, "server-and-content-management"]], "Connect Content Management to Hypervisor": [[6, "connect-content-management-to-hypervisor"]], "Spin Up VM\u2019s Using Katello/Spacewalk or PXE Server": [[6, "spin-up-vm-s-using-katello-spacewalk-or-pxe-server"]], "Setup FreeIPA": [[6, "setup-freeipa"]], "Spin Up Two VM\u2019s for Databases": [[6, "spin-up-two-vm-s-for-databases"]], "Spin Up Configuration Management": [[6, "spin-up-configuration-management"]], "Spin Up VM for NFS/iSCSI": [[6, "spin-up-vm-for-nfs-iscsi"]], "Deploy Bacula Server": [[6, "deploy-bacula-server"]], "Deploy Two/Four VM\u2019s": [[6, "deploy-two-four-vm-s"]], "Deploy Load Balancer VM": [[6, "deploy-load-balancer-vm"]], "Deploy Postfix VM": [[6, "deploy-postfix-vm"]], "Setup Nagios VM": [[6, "setup-nagios-vm"]], "Setup Syslog VM": [[6, "setup-syslog-vm"]], "Document Your Work": [[6, "document-your-work"]], "RPM Build Server": [[6, "rpm-build-server"]], "Git Server": [[6, "git-server"]], "Ansible": [[6, "ansible"]], "Unbound": [[7, "unbound"]], "Setup": [[7, "setup"], [41, "setup"]], "DNS over TLS (DoT)": [[7, "dns-over-tls-dot"]], "Errata": [[8, "errata"], [35, null]], "Removed articles": [[8, "removed-articles"]], "Removed information": [[8, "removed-information"]], "Upcoming": [[9, "upcoming"]], "Annoucements": [[9, "annoucements"]], "Backups": [[10, "backups"]], "BTRFS": [[10, "btrfs"], [11, "btrfs"]], "Duplicity": [[10, "id1"]], "GPG": [[10, "gpg"], [21, "gpg"]], "Keychain": [[10, "keychain"]], "Unattended backups": [[10, "unattended-backups"]], "git-annex": [[10, "id3"]], "Cisco IP Communicator": [[12, "cisco-ip-communicator"]], "Installing via PlayOnLinux": [[12, "installing-via-playonlinux"]], "Installing via Regular Wine": [[12, "installing-via-regular-wine"]], "Pulse Audio": [[12, "pulse-audio"]], "Clang": [[13, "clang"]], "MSan line numbers": [[13, "msan-line-numbers"]], "clang-format": [[13, "clang-format"]], "COPR": [[14, "copr"]], "gzdoom": [[14, "gzdoom"]], "ircd": [[14, "ircd"]], "dnf": [[15, "dnf"]], "Interoperability with systemd-resolved": [[16, "interoperability-with-systemd-resolved"]], "Docker": [[17, "docker"], [20, "docker"]], "Changing the data directory": [[17, "changing-the-data-directory"]], "Podman": [[17, "podman"]], "Emulators": [[18, "emulators"]], "Kega Fusion": [[18, "kega-fusion"]], "Dependencies": [[18, "dependencies"]], "Configuration": [[18, "configuration"]], "No Sound?": [[18, "no-sound"]], "Firefox": [[19, "firefox"]], "arkenfox/user.js": [[19, "arkenfox-user-js"]], "Disable automatic redirect to a website if typing an invalid URL": [[19, "disable-automatic-redirect-to-a-website-if-typing-an-invalid-url"]], "Glitchy UI when using custom GTK theme": [[19, "glitchy-ui-when-using-custom-gtk-theme"]], "Forcing dark theme": [[19, "forcing-dark-theme"]], "Disable network.http.referer.spoofSource": [[19, "disable-network-http-referer-spoofsource"]], "Minimizing ram usage": [[19, "minimizing-ram-usage"]], "Alternative to Stylus": [[19, "alternative-to-stylus"]], "GCC": [[20, "gcc"]], "Installing prerequisites: GMP, MPFR, MPC": [[20, "installing-prerequisites-gmp-mpfr-mpc"]], "Building": [[20, "building"]], "\u201cinvalid instruction suffix for\u201d": [[20, "invalid-instruction-suffix-for"]], "Git": [[21, "git"]], "Setting up Cloudflare and Github pages": [[21, "setting-up-cloudflare-and-github-pages"]], "GNOME Tips": [[22, "gnome-tips"]], "System Tray": [[22, "system-tray"]], "Add minimize/maximize": [[22, "add-minimize-maximize"]], "Pidgin": [[22, "pidgin"]], "Use curses dialog for password input": [[22, "use-curses-dialog-for-password-input"]], "Disable emoji input": [[22, "disable-emoji-input"]], "Swap caps lock and escape": [[22, "swap-caps-lock-and-escape"]], "Changing \u201cProgram not responding\u201d check timeout": [[22, "changing-program-not-responding-check-timeout"]], "GRUB": [[23, "grub"]], "Fedora Grub Menu Missing": [[23, "fedora-grub-menu-missing"]], "iPhone": [[24, "iphone"]], "McAfee": [[25, "mcafee"]], "Misc": [[26, "misc"]], "Using LD_LIBRARY_PATH in Fish": [[26, "using-ld-library-path-in-fish"]], "Unable to find LibLZMA": [[26, "unable-to-find-liblzma"]], "Unable to find wxWidgets": [[26, "unable-to-find-wxwidgets"]], "Update all repositories in the current directory": [[26, "update-all-repositories-in-the-current-directory"]], "YouCompleteMe crashes due to libtinfo.so version mismatch": [[26, "youcompleteme-crashes-due-to-libtinfo-so-version-mismatch"]], "KeePassHttp no longer works": [[26, "keepasshttp-no-longer-works"]], "Disable TCP/IP and use sockets for MySQL": [[26, "disable-tcp-ip-and-use-sockets-for-mysql"]], "SELinux is preventing abrt-action-sav from write access on the directory /var/lib/rpm": [[26, "selinux-is-preventing-abrt-action-sav-from-write-access-on-the-directory-var-lib-rpm"]], "Swapping Desktop Environments": [[26, "swapping-desktop-environments"]], "Upon logging into XFCE, desktop freezes until you switch to another TTY": [[26, "upon-logging-into-xfce-desktop-freezes-until-you-switch-to-another-tty"]], "Alternative fonts": [[26, "alternative-fonts"]], "Video thumbnails": [[26, "video-thumbnails"]], "Stop Flatpak Spotify from crashing upon close": [[26, "stop-flatpak-spotify-from-crashing-upon-close"]], "statvfs \u2018/run/user/1000/doc\u2019 failed: Operation not permitted": [[26, "statvfs-run-user-1000-doc-failed-operation-not-permitted"]], "mpv": [[27, "mpv"]], "Nvidia drivers": [[28, "nvidia-drivers"]], "Negativo17": [[28, "negativo17"]], "Multimedia": [[28, "multimedia"]], "Nvidia": [[28, "nvidia"]], "DKMS": [[28, "dkms"]], "Suspend doesn\u2019t work": [[28, "suspend-doesn-t-work"]], "Module doesn\u2019t load upon upgrade to Fedora 35": [[28, "module-doesn-t-load-upon-upgrade-to-fedora-35"]], "Automatically signing modules for secure boot": [[28, "automatically-signing-modules-for-secure-boot"]], "pip": [[29, "pip"]], "Powerline": [[30, "powerline"]], "Installing via dnf": [[30, "installing-via-dnf"]], "Enabling powerline (installed via dnf)": [[30, "enabling-powerline-installed-via-dnf"]], "Fish": [[30, "fish"]], "oh-my-fish": [[30, "oh-my-fish"]], "vim": [[30, "vim"], [32, "vim"]], "tmux": [[30, "tmux"], [31, "tmux"]], "Plugins": [[32, "plugins"]], "Wine Tips": [[33, "wine-tips"]], "Out of memory errors": [[33, "out-of-memory-errors"]], "New Vegas": [[33, "new-vegas"]], "Modding": [[33, "modding"]], "LOOT": [[33, "loot"]], "GMDX": [[33, "gmdx"]], "Proton": [[33, "proton"]], "wine-ge": [[33, "wine-ge"]], "mf_install": [[33, "mf-install"]], "proton-caller": [[33, "proton-caller"]], "XScreenSaver": [[34, "xscreensaver"]], "Gamma or brightness is too high when unlocking": [[34, "gamma-or-brightness-is-too-high-when-unlocking"]], "Disable fade to black effect": [[34, "disable-fade-to-black-effect"]], "Conflict with xfce-screensaver": [[34, "conflict-with-xfce-screensaver"]], "Linux Guide and Hints": [[35, "linux-guide-and-hints"]], "Training Resources": [[35, null]], "Enterprise Linux": [[35, null]], "Security": [[35, null]], "Miscellaneous": [[35, null]], "Fedora": [[35, null]], "MacOS": [[35, null]], "About Us": [[35, null]], "Create macOS ISO Images": [[36, "create-macos-iso-images"]], "The Euphemism Review": [[37, "the-euphemism-review"]], "Please don\u2019t say \u201ctimeframe\u201d": [[37, "please-don-t-say-timeframe"]], "Hurricane Electric IPv6 Tunnel": [[38, "hurricane-electric-ipv6-tunnel"]], "MinGW": [[39, "mingw"]], "Why not use WSL?": [[39, "why-not-use-wsl"]], "Is port 465 deprecated?": [[40, "is-port-465-deprecated"]], "VNC": [[41, "vnc"]], "Anti-patterns": [[42, "anti-patterns"]], "Not using HTTPS": [[42, "not-using-https"]], "Insecure requests": [[42, "insecure-requests"]], "Using insecure ciphers": [[42, "using-insecure-ciphers"]], "Password security": [[42, "password-security"]], "Using deprecated hashing functions": [[42, "using-deprecated-hashing-functions"]], "Arbitrary password lengths": [[42, "arbitrary-password-lengths"]], "Client-side hashing": [[42, "client-side-hashing"]], "Disabling mitigations": [[42, "disabling-mitigations"]], "Disabling SELinux": [[42, "disabling-selinux"]], "Containers": [[42, "containers"]], "Myths": [[43, "myths"]], "Most package maintainers can\u2019t code": [[43, "most-package-maintainers-can-t-code"]], "Package managers are an unnecessary and insecure middleman": [[43, "package-managers-are-an-unnecessary-and-insecure-middleman"]], "Is Flatpak a good compromise?": [[43, "is-flatpak-a-good-compromise"]], "Password management": [[44, "password-management"]], "Backing your databases up to your phone": [[44, "backing-your-databases-up-to-your-phone"]], "Checking your passwords against a HIBP dump": [[44, "checking-your-passwords-against-a-hibp-dump"]], "FAQ": [[44, "faq"]], "Isn\u2019t using a single password bad?": [[44, "isn-t-using-a-single-password-bad"]], "But your master password can be stolen by a keylogger": [[44, "but-your-master-password-can-be-stolen-by-a-keylogger"]], "EX362 Exam Prep": [[45, "ex362-exam-prep"]], "Exam Information": [[45, "exam-information"], [47, "exam-information"]], "Resources": [[45, "resources"], [47, "resources"]], "Hardware Recommendations": [[45, "hardware-recommendations"]], "IdM Server Installation and Configuration": [[45, "idm-server-installation-and-configuration"]], "Install IdM in a scalable, fault tolerant environment": [[45, "install-idm-in-a-scalable-fault-tolerant-environment"]], "Creating Users, Groups, and Policies": [[45, "creating-users-groups-and-policies"]], "New Passwords Expired": [[45, "new-passwords-expired"]], "Implement a SSO": [[45, "implement-a-sso"]], "IdM Client Installation and Configuration": [[45, "idm-client-installation-and-configuration"]], "Install and configure IdM Clients": [[45, "install-and-configure-idm-clients"]], "Configure Kerberized services": [[45, "configure-kerberized-services"]], "IdM HA Configuration": [[45, "idm-ha-configuration"]], "Configure and manage a certificate authority": [[45, "configure-and-manage-a-certificate-authority"]], "Create Secret Vaults": [[45, "create-secret-vaults"]], "IdM Users and Policies Management": [[45, "idm-users-and-policies-management"]], "Configure Policies and User Access": [[45, "configure-policies-and-user-access"]], "Configure roaming/automounted home directories": [[45, "configure-roaming-automounted-home-directories"]], "Configure IdM as an LDAP backend for external services": [[45, "configure-idm-as-an-ldap-backend-for-external-services"]], "Creating Trust with AD Domain": [[45, "creating-trust-with-ad-domain"]], "Create trust relationships with Active Directory": [[45, "create-trust-relationships-with-active-directory"]], "Authenticate users with an Active Directory domain": [[45, "authenticate-users-with-an-active-directory-domain"]], "IdM maintenance": [[45, "idm-maintenance"]], "Back up an IdM infrastructure": [[45, "back-up-an-idm-infrastructure"]], "Perform a backup without interruption of services": [[45, "perform-a-backup-without-interruption-of-services"]], "Value Add": [[45, "value-add"]], "Use the REST api to query IdM": [[45, "use-the-rest-api-to-query-idm"]], "Implement an IdP": [[45, "implement-an-idp"]], "EX407 Exam Prep": [[46, "ex407-exam-prep"]], "EX415 Exam Prep": [[47, "ex415-exam-prep"]], "Use Red Hat Ansible Engine": [[47, "use-red-hat-ansible-engine"]], "Configure Intrusion Detection": [[47, "configure-intrusion-detection"]], "Configure Encrypted Storage": [[47, "configure-encrypted-storage"]], "Restrict USB Devices": [[47, "restrict-usb-devices"]], "Manage System Login Security using Pluggable Authentication Modules (PAM)": [[47, "manage-system-login-security-using-pluggable-authentication-modules-pam"]], "Configure System Auditing": [[47, "configure-system-auditing"]], "Configure SELinux": [[47, "configure-selinux"]], "Package & Binary Glossary": [[47, "package-binary-glossary"]], "Command Glossary": [[47, "command-glossary"]], "Enforce Security Compliance": [[47, "enforce-security-compliance"]]}, "indexentries": {}})
\ No newline at end of file
+Search.setIndex({"docnames": ["about/contributors", "el/builds", "el/freeipa", "el/nat", "el/openldap", "el/pxeboot", "el/sysadmin", "el/unbound", "errata/removed", "errata/upcoming", "fedora/backups", "fedora/btrfs", "fedora/cipc", "fedora/clang", "fedora/copr", "fedora/dnf", "fedora/dns", "fedora/docker", "fedora/emulators", "fedora/firefox", "fedora/gcc", "fedora/git", "fedora/gnometips", "fedora/grub", "fedora/iphone", "fedora/mcafee", "fedora/misc", "fedora/mpv", "fedora/nvidia", "fedora/pip", "fedora/powerline", "fedora/tmux", "fedora/vim", "fedora/winetips", "fedora/xscreensaver", "index", "macos/image", "misc/euphemism", "misc/ipv6he", "misc/mingw", "misc/port465", "misc/vnc", "security/antipatterns", "security/myths", "security/passwords", "training/ex362", "training/ex407", "training/ex415"], "filenames": ["about/contributors.rst", "el/builds.rst", "el/freeipa.rst", "el/nat.rst", "el/openldap.rst", "el/pxeboot.rst", "el/sysadmin.rst", "el/unbound.rst", "errata/removed.rst", "errata/upcoming.rst", "fedora/backups.rst", "fedora/btrfs.rst", "fedora/cipc.rst", "fedora/clang.rst", "fedora/copr.rst", "fedora/dnf.rst", "fedora/dns.rst", "fedora/docker.rst", "fedora/emulators.rst", "fedora/firefox.rst", "fedora/gcc.rst", "fedora/git.rst", "fedora/gnometips.rst", "fedora/grub.rst", "fedora/iphone.rst", "fedora/mcafee.rst", "fedora/misc.rst", "fedora/mpv.rst", "fedora/nvidia.rst", "fedora/pip.rst", "fedora/powerline.rst", "fedora/tmux.rst", "fedora/vim.rst", "fedora/winetips.rst", "fedora/xscreensaver.rst", "index.rst", "macos/image.rst", "misc/euphemism.rst", "misc/ipv6he.rst", "misc/mingw.rst", "misc/port465.rst", "misc/vnc.rst", "security/antipatterns.rst", "security/myths.rst", "security/passwords.rst", "training/ex362.rst", "training/ex407.rst", "training/ex415.rst"], "titles": ["Contributors", "Auto-Provisioning", "FreeIPA", "NAT/Router", "OpenLDAP", "PXE (with grub2)", "The System Administrator Experience", "Unbound", "Errata", "Upcoming", "Backups", "BTRFS", "Cisco IP Communicator", "Clang", "COPR", "dnf", "DNS", "Docker", "Emulators", "Firefox", "GCC", "Git", "GNOME Tips", "GRUB", "iPhone", "McAfee", "Misc", "mpv", "Nvidia drivers", "pip", "Powerline", "tmux", "vim", "Wine Tips", "XScreenSaver", "Linux Guide and Hints", "Create macOS ISO Images", "The Euphemism Review", "Hurricane Electric IPv6 Tunnel", "MinGW", "Is port 465 deprecated?", "VNC", "Anti-patterns", "Myths", "Password management", "EX362 Exam Prep", "EX407 Exam Prep", "EX415 Exam Prep"], "terms": {"nazunalika": [0, 1, 2, 3, 4, 5, 6, 7, 9, 22, 23, 25, 36, 37, 41, 45, 46, 47], "linux": [0, 1, 3, 6, 8, 9, 12, 18, 25, 26, 33, 39, 40, 42, 43, 44, 45, 47], "system": [0, 2, 3, 4, 5, 10, 11, 12, 15, 17, 19, 20, 23, 25, 28, 29, 33, 35, 36, 41, 42, 44, 45], "engin": [0, 2, 43], "remyabel": 0, "i": [0, 2, 3, 4, 5, 6, 7, 8, 10, 11, 12, 13, 15, 16, 17, 19, 20, 21, 22, 23, 24, 25, 27, 28, 29, 30, 31, 32, 33, 35, 36, 37, 38, 39, 41, 42, 44, 45, 46, 47], "am": [0, 2], "affili": [0, 45, 46, 47], "rocki": [0, 4, 8, 9, 35], "ani": [0, 2, 4, 5, 6, 10, 11, 16, 30, 33, 34, 39, 42, 43, 44, 45, 46, 47], "capac": 0, "xamiel": 0, "secur": [0, 2, 4, 8, 10, 17, 25, 40, 41, 43, 44, 45], "origin": [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 36, 37, 39, 40, 41, 42, 43, 44, 45, 46, 47], "author": [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 36, 37, 39, 40, 41, 42, 43, 44, 46, 47], "last": [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 36, 37, 39, 40, 41, 42, 43, 44, 45, 46, 47], "modifi": [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 36, 37, 39, 40, 41, 42, 43, 44, 45, 46, 47], "mon": [1, 3, 5, 6, 7, 9, 11, 12, 13, 14, 15, 17, 18, 19, 20, 21, 22, 23, 24, 25, 27, 28, 29, 30, 31, 32, 33, 34, 36, 37, 39, 40, 41, 42, 43, 44, 46, 47], "aug": [1, 2, 3, 5, 6, 7, 9, 10, 11, 12, 13, 14, 15, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 36, 37, 39, 40, 41, 42, 43, 44, 46, 47], "1": [1, 2, 3, 4, 5, 6, 7, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47], "17": [1, 3, 5, 6, 7, 8, 9, 11, 12, 13, 14, 15, 17, 18, 19, 20, 21, 22, 23, 24, 25, 27, 28, 29, 30, 31, 32, 33, 34, 36, 37, 39, 40, 41, 42, 43, 44, 46, 47], "02": [1, 2, 3, 5, 6, 7, 8, 9, 11, 12, 13, 14, 15, 17, 18, 19, 20, 21, 22, 23, 24, 25, 27, 28, 29, 30, 31, 32, 33, 34, 36, 37, 39, 40, 41, 42, 43, 44, 45, 46, 47], "thi": [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 12, 13, 15, 16, 17, 19, 20, 21, 22, 24, 25, 26, 28, 29, 30, 31, 33, 34, 35, 36, 37, 38, 40, 41, 42, 43, 44, 45, 46, 47], "page": [1, 2, 3, 5, 8, 10, 13, 17, 19, 20, 33, 35, 42, 45, 46, 47], "goe": [1, 2, 3, 4, 5, 17, 18, 19, 26, 30, 42, 44, 45, 47], "over": [1, 2, 3, 4, 5, 6, 16, 17, 19, 29, 37, 40, 43, 44, 45, 46, 47], "variou": [1, 2, 4, 5, 12, 16, 20, 42, 45, 46, 47], "wai": [1, 2, 4, 5, 19, 20, 23, 24, 28, 29, 40, 42, 45, 47], "instal": [1, 3, 5, 6, 8, 10, 11, 13, 14, 15, 18, 19, 22, 23, 25, 26, 27, 28, 29, 32, 33, 36, 39, 41, 47], "can": [1, 2, 3, 4, 5, 6, 10, 11, 12, 14, 15, 16, 17, 19, 20, 21, 22, 24, 25, 26, 28, 29, 30, 33, 35, 36, 37, 38, 41, 42, 45, 46, 47], "autom": [1, 6, 45, 46, 47], "without": [1, 2, 3, 5, 6, 10, 11, 17, 19, 21, 25, 28, 33, 37, 42, 44, 47], "us": [1, 2, 3, 4, 5, 7, 8, 10, 11, 12, 13, 15, 16, 17, 20, 21, 27, 28, 29, 30, 31, 33, 35, 36, 37, 38, 40, 41, 43, 46], "pxe": [1, 35], "instead": [1, 2, 3, 4, 6, 8, 9, 10, 11, 13, 17, 19, 20, 22, 26, 27, 33, 37, 40, 41, 43, 45, 47], "we": [1, 2, 3, 4, 5, 6, 8, 9, 10, 11, 12, 14, 16, 17, 19, 25, 35, 37, 41, 44, 45, 46, 47], "templat": [1, 4], "script": [1, 4, 10, 13, 20, 25, 28, 33, 36, 45], "pre": [1, 2, 4, 38, 45], "configur": [1, 5, 7, 10, 12, 14, 20, 21, 25, 28, 30, 38, 40, 42, 43], "command": [1, 2, 4, 5, 6, 10, 11, 15, 26, 33, 39, 40, 44, 45], "boot": [1, 5, 23, 47], "imag": [1, 2, 5, 6, 17, 20, 25, 35, 47], "mirror": [1, 2, 3, 5], "build": [1, 2, 5, 17, 19, 28, 43], "cover": [1, 3, 4, 10, 31, 45], "follow": [1, 2, 4, 5, 6, 10, 13, 14, 16, 18, 19, 20, 21, 22, 27, 28, 31, 33, 36, 37, 38, 42, 45, 46, 47], "here": [1, 2, 3, 4, 5, 6, 7, 10, 19, 25, 28, 35, 37, 40, 45, 46, 47], "cento": [1, 6, 8, 9, 23, 35, 41, 45, 47], "stream": [1, 6], "9": [1, 2, 3, 4, 5, 6, 7, 20, 45], "enterpris": [1, 3, 5, 6], "8": [1, 2, 3, 4, 5, 6, 7, 9, 10, 38, 45, 46, 47], "fedora": [1, 3, 6, 8, 10, 11, 16, 17, 18, 19, 20, 24, 25, 26, 29, 30, 41, 43, 47], "opensus": [1, 2], "15": [1, 2, 36, 45, 47], "window": [1, 2, 6, 12, 19, 23, 33, 39, 45], "server": [1, 7, 16, 25, 26, 38, 40, 41, 42, 47], "fri": 2, "12": [2, 8, 45, 47], "19": [2, 45, 47], "18": [2, 8, 28, 45, 47], "seri": [2, 10, 45, 47], "inform": [2, 4, 6, 15, 21, 25, 35, 38, 44, 46], "how": [2, 3, 4, 5, 6, 14, 16, 25, 26, 31, 37, 40, 42, 44, 45, 47], "well": [2, 3, 4, 20, 27, 34, 35, 40, 42, 45, 46, 47], "machin": [2, 4, 5, 6, 25, 36, 38, 43, 47], "connect": [2, 3, 4, 10, 24, 40], "util": [2, 4, 6, 26, 27, 39, 45], "resourc": [2, 6, 8, 40, 42, 46], "polici": [2, 25, 42, 47], "eg": [2, 4, 6, 38, 45], "host": [2, 4, 5, 6, 25, 45, 47], "base": [2, 4, 5, 6, 22, 26, 36, 43, 45, 47], "access": [2, 4, 7, 17, 23, 25, 36, 40, 42, 44, 47], "control": [2, 4, 7, 25, 43, 45, 47], "method": [2, 4, 6, 30, 31, 36, 38, 45], "also": [2, 4, 5, 6, 8, 10, 16, 17, 25, 26, 28, 30, 33, 37, 38, 40, 41, 42, 44, 45, 46, 47], "go": [2, 3, 4, 5, 6, 7, 10, 16, 19, 26, 30, 33, 37, 45, 47], "scenario": [2, 45, 47], "an": [2, 3, 4, 5, 6, 7, 10, 14, 20, 21, 25, 26, 28, 31, 37, 38, 40, 42, 44, 47], "work": [2, 3, 4, 5, 7, 8, 12, 16, 21, 27, 30, 33, 39, 41, 42, 43, 44, 45, 47], "ar": [2, 3, 4, 5, 6, 7, 8, 10, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 25, 26, 28, 29, 30, 32, 33, 35, 36, 37, 40, 41, 42, 45, 46, 47], "same": [2, 5, 6, 7, 20, 34, 40, 44, 45, 47], "just": [2, 3, 4, 5, 7, 10, 13, 15, 20, 25, 30, 42, 45, 47], "version": [2, 4, 5, 8, 10, 12, 14, 17, 18, 28, 29, 30, 36, 40, 45, 47], "integr": [2, 6, 13, 44, 47], "combin": [2, 4, 6, 10, 16, 42], "389": [2, 4, 45], "ntp": [2, 45], "dogtag": [2, 45], "It": [2, 3, 4, 5, 6, 10, 11, 12, 14, 15, 17, 19, 20, 22, 25, 26, 28, 29, 30, 31, 33, 34, 37, 38, 39, 40, 41, 42, 44, 45, 46, 47], "loos": [2, 46, 47], "compar": [2, 10, 44], "what": [2, 3, 4, 6, 8, 9, 10, 15, 19, 31, 37, 40, 42, 43, 44, 45, 47], "attempt": [2, 4, 6, 28, 29, 31, 39, 42, 45, 47], "solv": [2, 4], "unix": [2, 6, 47], "even": [2, 5, 6, 10, 20, 26, 33, 37, 42, 45, 47], "mix": [2, 25, 33, 42], "environ": [2, 4, 5, 10, 15, 22, 25, 31, 37, 47], "while": [2, 3, 4, 5, 6, 10, 11, 17, 19, 26, 29, 33, 42, 43, 45], "ident": [2, 45, 47], "authent": [2, 4, 6], "which": [2, 4, 5, 8, 10, 13, 15, 17, 19, 22, 24, 25, 26, 33, 34, 40, 41, 42, 43, 44, 45, 47], "mean": [2, 4, 5, 6, 18, 26, 45, 47], "doe": [2, 4, 5, 6, 10, 11, 17, 19, 20, 21, 22, 26, 27, 28, 33, 37, 42, 43, 44, 45, 46, 47], "support": [2, 4, 5, 6, 8, 14, 16, 20, 21, 22, 26, 28, 30, 31, 33, 41, 42, 45, 47], "One": [2, 3, 10, 16, 29, 45, 47], "problem": [2, 4, 26, 42], "give": [2, 4, 6, 10, 47], "back": [2, 4, 6, 12, 22], "administr": [2, 4, 35, 42, 44, 45, 47], "team": [2, 39], "rather": [2, 4, 5, 10, 17, 26, 29, 43, 45], "than": [2, 4, 5, 6, 10, 17, 26, 29, 40, 43, 44, 45, 47], "try": [2, 6, 12, 25, 26, 30, 33, 45, 46, 47], "directli": [2, 5, 6, 13, 19, 43, 45, 46, 47], "where": [2, 3, 4, 6, 10, 14, 19, 22, 26, 28, 33, 40, 43, 45, 46, 47], "do": [2, 3, 4, 5, 6, 9, 10, 11, 12, 16, 17, 19, 20, 22, 24, 27, 28, 30, 31, 33, 34, 36, 37, 41, 42, 43, 44, 45, 46, 47], "all": [2, 3, 4, 5, 6, 12, 17, 18, 28, 29, 30, 33, 37, 38, 40, 42, 45, 47], "And": [2, 10, 11, 22, 32, 37, 44, 45], "becaus": [2, 4, 5, 6, 8, 10, 16, 21, 26, 28, 29, 30, 37, 41, 42, 45, 47], "third": [2, 4, 42, 43, 44], "parti": [2, 4, 42, 43, 44], "softwar": [2, 4, 6, 10, 14, 40, 43, 44, 45, 47], "list": [2, 3, 4, 5, 6, 10, 12, 20, 21, 24, 26, 28, 42, 45, 46, 47], "below": [2, 3, 4, 5, 7, 19, 36, 37, 40, 45, 47], "internet": [2, 3, 4, 6, 16, 20, 26, 28, 40], "avail": [2, 3, 4, 6, 12, 14, 16, 28, 30, 39, 42, 43, 45, 47], "intern": [2, 3, 4, 6], "2": [2, 3, 4, 5, 6, 10, 14, 19, 20, 30, 31, 33, 38, 40, 42, 45, 47], "core": [2, 4, 5, 6, 25, 33, 40, 45, 47], "4gb": [2, 33, 45], "least": [2, 3, 4, 5, 6, 12, 13, 22, 38, 45, 47], "10gb": [2, 45], "disk": [2, 6, 45, 47], "var": [2, 4, 5, 17, 25, 28, 45, 47], "lib": [2, 4, 5, 17, 18, 25, 27, 28, 29, 41, 45, 47], "dirsrv": [2, 45], "applianc": 2, "alreadi": [2, 3, 4, 6, 7, 18, 29, 30, 45, 46], "exist": [2, 3, 5, 8, 19, 26, 45, 47], "potenti": [2, 4, 22], "pitfal": [2, 4], "leav": [2, 4], "selinux": [2, 4, 5, 6, 10, 17, 35], "time": [2, 4, 5, 6, 10, 11, 14, 15, 19, 22, 25, 37, 40, 41, 44, 45, 46, 47], "you": [2, 3, 4, 5, 6, 7, 8, 10, 11, 12, 13, 15, 16, 17, 18, 19, 20, 21, 22, 24, 25, 27, 28, 29, 30, 31, 32, 33, 34, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47], "run": [2, 4, 5, 6, 7, 8, 10, 11, 12, 13, 15, 16, 17, 18, 19, 20, 21, 22, 23, 25, 28, 29, 32, 33, 34, 37, 39, 42, 43, 45, 47], "better": [2, 5, 6, 20, 26, 41, 45, 46], "when": [2, 3, 4, 5, 6, 10, 14, 16, 20, 22, 25, 26, 28, 31, 33, 37, 40, 43, 45, 47], "given": [2, 4, 10, 37, 43, 47], "entir": [2, 4, 5, 7, 26, 43], "dhcp": [2, 45], "isc": 2, "dynam": [2, 6, 47], "updat": [2, 4, 5, 6, 14, 28, 38, 45, 47], "perform": [2, 4, 6, 10, 27, 36, 42, 47], "keep": [2, 4, 5, 6, 8, 10, 14, 19, 25], "enforc": [2, 4, 6, 25], "must": [2, 3, 4, 5, 45, 47], "care": [2, 4, 29, 42], "your": [2, 3, 4, 5, 7, 10, 11, 12, 13, 15, 16, 17, 19, 20, 21, 22, 24, 25, 26, 28, 29, 30, 31, 33, 34, 37, 38, 41, 42, 43, 45, 46, 47], "network": [2, 3, 4, 6, 7, 12, 16, 24, 25, 26, 38, 45, 47], "case": [2, 3, 6, 10, 25, 26, 28, 31, 33, 38, 43, 45, 47], "have": [2, 3, 4, 5, 6, 7, 8, 10, 12, 13, 14, 18, 19, 22, 23, 25, 26, 28, 33, 37, 38, 40, 42, 43, 44, 45, 46, 47], "ssh": [2, 10, 45, 47], "kei": [2, 4, 10, 19, 21, 28, 40, 42, 44, 45, 47], "sshfp": 2, "record": [2, 6, 42, 45], "enrol": [2, 6, 28, 45], "benefit": [2, 45], "its": [2, 19, 25, 34, 45], "own": [2, 4, 5, 6, 10, 25, 34, 45, 46, 47], "entri": [2, 4, 5, 6, 18, 19, 31, 33, 45], "A": [2, 3, 4, 5, 6, 14, 16, 20, 21, 33, 40, 44, 45, 47], "ptr": [2, 45], "ip": [2, 4, 5, 6, 7, 21, 35, 38, 45], "chang": [2, 4, 5, 6, 9, 10, 18, 19, 25, 26, 28, 33, 34, 38, 45, 46, 47], "so": [2, 4, 5, 6, 7, 8, 10, 11, 12, 15, 16, 17, 18, 20, 33, 37, 42, 43, 45, 47], "choos": [2, 5, 6, 10, 38, 44, 45], "subdomain": [2, 21], "live": [2, 4, 5, 6, 11, 17, 22], "member": [2, 45], "lose": 2, "out": [2, 4, 5, 6, 10, 20, 21, 26, 35, 36, 38, 42, 45, 47], "sso": 2, "hijack": 2, "consid": [2, 4, 6, 20, 37, 40, 41, 42, 44, 45, 47], "up": [2, 3, 4, 7, 8, 10, 12, 14, 17, 19, 22, 25, 26, 28, 29, 33, 34, 38, 42, 47], "winsync": 2, "deprec": [2, 4, 10, 19, 26, 34, 35], "should": [2, 4, 5, 6, 7, 8, 9, 10, 11, 12, 15, 16, 17, 20, 24, 26, 29, 33, 34, 38, 40, 41, 42, 44, 45, 47], "static": [2, 3, 5, 6, 14, 45, 47], "assign": [2, 38, 40, 45], "address": [2, 3, 4, 5, 6, 7, 21, 33, 34, 38, 45], "via": [2, 6, 8, 13, 24, 42, 45, 47], "nmcli": [2, 3, 38, 45], "etc": [2, 3, 4, 5, 6, 7, 10, 12, 16, 17, 19, 24, 25, 26, 28, 38, 39, 41, 44, 45, 47], "sysconfig": [2, 4], "ifcfg": 2, "avoid": [2, 4, 6, 10, 28, 33, 43, 44, 45], "possibl": [2, 4, 5, 6, 14, 28, 29, 34, 38, 40, 45, 46, 47], "creat": [2, 4, 5, 6, 7, 10, 16, 17, 19, 26, 28, 33, 35, 38, 47], "higher": [2, 4, 6, 45], "mainten": 2, "If": [2, 3, 4, 5, 6, 7, 10, 11, 12, 15, 16, 17, 18, 19, 20, 21, 24, 26, 27, 28, 30, 31, 33, 37, 40, 41, 42, 45, 46, 47], "both": [2, 4, 5, 6, 17, 22, 28, 30, 31, 33, 34, 40, 42, 43, 45, 47], "between": [2, 5, 6, 40, 42, 47], "thei": [2, 4, 6, 14, 16, 22, 23, 25, 26, 28, 37, 39, 42, 45, 47], "need": [2, 3, 4, 5, 6, 10, 11, 15, 19, 20, 22, 23, 24, 25, 26, 27, 28, 29, 33, 36, 37, 38, 41, 42, 43, 45, 47], "differ": [2, 3, 4, 5, 12, 23, 26, 28, 33, 39, 40, 42, 43, 45], "exampl": [2, 3, 4, 5, 6, 7, 10, 14, 16, 17, 19, 21, 26, 33, 42, 43, 45, 46, 47], "com": [2, 4, 7, 10, 16, 17, 19, 21, 25, 30, 32, 42, 44, 45, 47], "net": [2, 3, 4, 5, 7, 18, 25, 33, 38, 45], "duplic": [2, 5], "nor": [2, 6, 8, 10, 12, 28, 47], "As": [2, 4, 6, 10, 26, 33, 40, 45, 47], "previou": [2, 4, 28, 45], "section": [2, 3, 4, 5, 8, 9, 10, 28, 33, 40, 42, 45, 46, 47], "d": [2, 4, 12, 16, 26, 32, 33, 36, 38, 45, 46, 47], "taken": [2, 4, 43, 45], "approach": 2, "typic": [2, 4, 5, 6, 14, 32, 43, 44, 45, 47], "revers": [2, 6, 45], "zone": [2, 3, 4, 6, 7, 45], "type": [2, 4, 5, 10, 18, 21, 25, 26, 33, 38, 42, 45, 47], "full": [2, 4, 5, 6, 10, 30, 36, 42, 43, 45, 47], "view": [2, 3, 4, 6, 17, 23, 24, 44, 45, 47], "t": [2, 3, 4, 6, 8, 10, 13, 16, 19, 20, 26, 33, 39, 42, 45, 47], "extern": [2, 3, 4], "assum": [2, 5, 7, 18, 44, 45], "public": [2, 4, 38, 47], "face": 2, "In": [2, 4, 5, 10, 12, 19, 20, 22, 24, 28, 30, 33, 34, 38, 40, 42, 43, 45, 47], "event": [2, 38, 45, 47], "servic": [2, 3, 4, 5, 6, 10, 11, 14, 17, 25, 28, 40, 41, 42, 44, 47], "provid": [2, 4, 6, 8, 11, 14, 20, 26, 28, 30, 31, 39, 40, 42, 44, 45, 46, 47], "There": [2, 4, 6, 10, 12, 16, 17, 20, 26, 28, 32, 33, 36, 42, 43, 44, 45, 47], "two": [2, 3, 4, 5, 7, 10, 19, 23, 26, 44, 45, 47], "suffici": [2, 4, 8, 26, 31, 45, 47], "latter": [2, 10, 26, 37], "addit": [2, 4, 5, 6, 20, 22, 25, 33, 40, 42, 44, 45, 47], "outsid": [2, 5, 6, 33, 47], "scope": [2, 5, 6, 25, 45, 47], "write": [2, 4, 6, 10, 11, 22, 43, 44, 47], "throughout": [2, 6, 47], "guid": [2, 5, 6, 8, 9, 12, 16, 19, 28, 33, 40, 42, 47], "mai": [2, 3, 4, 5, 6, 8, 10, 14, 15, 17, 19, 20, 24, 25, 26, 27, 28, 29, 31, 33, 42, 43, 45, 46, 47], "find": [2, 4, 6, 10, 22, 33, 34, 40, 42, 45, 46, 47], "see": [2, 4, 5, 6, 10, 11, 15, 17, 19, 24, 25, 26, 28, 31, 33, 35, 40, 42, 44, 45, 46, 47], "would": [2, 4, 5, 6, 10, 12, 16, 21, 33, 37, 43, 45, 46, 47], "more": [2, 3, 6, 8, 15, 20, 28, 29, 40, 42, 43, 44, 45, 47], "real": [2, 4, 45, 47], "world": [2, 6, 45, 47], "bring": [2, 5], "place": [2, 5, 10, 30, 33, 37, 45], "major": [2, 5, 10, 42], "normal": [2, 4, 12, 26, 33, 34, 37, 45, 47], "actual": [2, 4, 6, 10, 16, 20, 27, 33, 42, 45, 47], "parent": [2, 33, 47], "fact": [2, 6, 33, 42, 45, 47], "other": [2, 4, 5, 6, 10, 16, 22, 23, 24, 28, 36, 37, 39, 42, 43, 44, 45, 47], "long": [2, 4, 26, 37, 42, 44], "aaaa": 2, "associ": 2, "them": [2, 4, 5, 6, 10, 18, 19, 24, 25, 33, 37, 42, 44, 45, 46, 47], "could": [2, 4, 6, 8, 28, 41, 43, 44, 45, 47], "everyth": [2, 4, 5, 6, 7, 16, 25, 45], "caveat": [2, 6, 29, 42], "fail": [2, 4, 17, 31, 44, 47], "don": [2, 4, 6, 8, 10, 19, 20, 26, 33, 45, 47], "overlap": [2, 10, 16], "manner": [2, 8, 44, 45], "look": [2, 5, 6, 8, 10, 11, 19, 21, 22, 30, 31, 33, 37, 45, 47], "IN": [2, 45], "soa": 2, "n": [2, 4, 10, 11, 26, 45], "np": 2, "ad01": 2, "ad02": 2, "200": 2, "0": [2, 4, 5, 7, 10, 12, 16, 18, 25, 34, 45, 47], "232": [2, 45], "233": 2, "mani": [2, 6, 12, 15, 17, 19, 22, 23, 29, 37, 40, 43, 47], "pertain": 2, "msdc": 2, "srv": [2, 5, 45, 47], "ipa01": 2, "ipa02": [2, 45], "230": [2, 45], "231": [2, 5], "send": [2, 6, 45], "nsupdat": [2, 6], "permiss": [2, 4, 10, 26, 42, 43, 45, 47], "why": [2, 8, 17, 28, 42, 43, 45], "technic": [2, 15, 42], "sssd": [2, 4, 6, 45], "pull": [2, 4, 5, 10, 24, 26, 28], "depend": [2, 4, 5, 12, 20, 24, 25, 26, 29, 43, 45], "To": [2, 3, 4, 5, 6, 10, 12, 17, 18, 22, 25, 36, 39, 40, 45, 47], "make": [2, 4, 5, 6, 10, 12, 14, 17, 18, 20, 22, 24, 25, 26, 28, 29, 30, 34, 37, 38, 42, 43, 44, 45, 47], "sure": [2, 4, 6, 10, 18, 24, 25, 28, 34, 38, 44, 45, 47], "hostnam": [2, 4, 10, 45], "ve": [2, 4, 6, 10, 18, 33, 37, 44, 45, 47], "put": [2, 4, 5, 6, 13, 19, 26, 31, 41, 45], "won": [2, 26, 47], "respond": [2, 6], "lookup": [2, 6, 25, 33], "stand": [2, 5, 26, 45], "alon": 2, "top": [2, 4, 10, 30, 45], "level": [2, 26, 45, 47], "ll": [2, 3, 4, 5, 6, 7, 9, 28, 33, 40, 45, 47], "hostnamectl": [2, 10, 45], "server1": 2, "con": [2, 3, 38, 42, 45], "mod": [2, 3, 8, 45], "ens192": 2, "ipv4": [2, 38, 45], "24": [2, 4, 7, 8, 45], "gatewai": [2, 6, 38, 45], "manual": [2, 4, 5, 6, 8, 10, 15, 26, 28, 33, 38, 44, 45, 47], "vi": [2, 4, 6, 7, 25, 38, 41, 45, 47], "server2": 2, "dnf": [2, 4, 5, 18, 20, 22, 25, 26, 27, 28, 35], "common": [2, 4, 26, 33, 41, 42, 43, 45, 47], "y": [2, 4, 5, 7, 22, 25, 33, 41, 45, 47], "modul": [2, 4, 5, 12, 24, 42, 45], "idm": 2, "dl1": [2, 45], "adtrust": [2, 45], "appear": [2, 4, 5, 24, 26, 28, 44, 47], "firewal": [2, 3, 5, 38, 41, 45, 47], "cmd": [2, 3, 4, 5, 41, 45, 47], "perman": [2, 3, 4, 5, 10, 41, 45, 47], "add": [2, 3, 5, 6, 10, 13, 19, 21, 25, 26, 28, 30, 31, 38, 41, 42, 46, 47], "4": [2, 4, 5, 20, 45, 47], "complet": [2, 3, 4, 5, 10, 17, 20, 24, 26, 29, 31, 45], "reload": [2, 3, 4, 5, 10, 17, 25, 45], "no_hbac_allow": 2, "want": [2, 3, 4, 5, 6, 10, 11, 12, 15, 17, 19, 20, 22, 25, 31, 32, 33, 36, 42, 45, 47], "allow_al": [2, 45], "initi": [2, 5, 10, 47], "from": [2, 3, 4, 5, 6, 8, 10, 11, 13, 15, 17, 19, 20, 21, 22, 23, 28, 29, 30, 33, 37, 38, 40, 42, 43, 44, 45, 47], "take": [2, 4, 5, 10, 12, 17, 29, 37, 42, 44, 45, 46, 47], "off": [2, 4, 42, 45], "show": [2, 4, 5, 7, 16, 33, 45, 47], "step": [2, 4, 5, 6, 12, 30, 36, 45], "offici": [2, 20, 21], "one": [2, 3, 4, 5, 6, 10, 13, 14, 18, 25, 26, 32, 33, 34, 42, 43, 45, 46, 47], "workstat": [2, 25], "similar": [2, 4, 16, 25, 26, 40, 43], "separ": [2, 4, 5, 6, 45, 46], "form": [2, 4, 6, 42, 47], "kinit": [2, 45], "admin": [2, 4, 45, 47], "first": [2, 4, 6, 11, 12, 15, 16, 19, 20, 27, 33, 38, 42, 43, 45, 47], "cn": [2, 4, 45], "geco": 2, "flast2": 2, "On": [2, 5, 6, 19, 20, 23, 26, 38, 39, 43, 45, 47], "ensur": [2, 4, 5, 6, 7, 10, 12, 15, 16, 17, 18, 21, 42, 45, 46, 47], "repeat": [2, 5], "abov": [2, 4, 6, 15, 18, 33, 37, 45, 47], "password": [2, 25, 34, 35, 38, 47], "changepass123": 2, "now": [2, 3, 4, 5, 6, 7, 8, 10, 11, 16, 17, 19, 22, 23, 25, 26, 34, 36, 40, 45, 47], "abl": [2, 4, 5, 6, 8, 22, 24, 38, 45, 47], "master": [2, 4, 6, 30, 45], "met": [2, 18], "commandlin": [2, 44], "ipaserv": [2, 45], "ran": [2, 18, 26, 45], "onc": [2, 4, 6, 10, 18, 29, 30, 33, 46, 47], "unattend": [2, 45], "mkhomedir": [2, 4], "multi": [2, 10, 25, 26], "process": [2, 4, 10, 19, 45, 47], "7": [2, 3, 4, 6, 33, 38, 40, 45, 47], "anoth": [2, 3, 4, 5, 6, 12, 16, 29, 30, 33, 40, 45, 47], "regardless": [2, 4, 5, 41, 44], "begin": [2, 4, 23, 47], "verifi": [2, 4, 10, 17, 26, 28, 45, 47], "synchron": 2, "ntpstat": 2, "equival": [2, 5, 6, 33], "role": [2, 4, 45, 47], "current": [2, 5, 6, 8, 11, 14, 16, 33, 36, 38, 47], "statu": [2, 10, 16, 21, 25, 28, 45], "new": [2, 4, 5, 6, 8, 10, 17, 18, 19, 32, 42, 47], "jump": 2, "latest": [2, 5, 6, 8, 10, 21, 35, 47], "singl": [2, 41], "doesn": [2, 3, 4, 6, 8, 10, 13, 16, 19, 33, 42, 43, 45, 47], "multipl": [2, 6, 7, 19, 33, 38, 44, 45, 47], "let": [2, 4, 5, 7, 37, 42, 45, 47], "sai": [2, 4, 6, 16, 25, 26, 31, 42, 44, 45, 47], "old": [2, 10, 17, 47], "reinstal": 2, "power": [2, 10, 28, 47], "x": [2, 4, 5, 10, 14, 25, 29, 36, 41, 45, 47], "being": [2, 3, 4, 5, 8, 16, 27, 40, 42, 44, 45, 47], "crl": 2, "adjust": [2, 10], "pki": [2, 4, 7, 28, 45], "tomcatd": 2, "httpd": [2, 6, 45, 47], "test": [2, 4, 10, 13, 16, 20, 28, 33, 42, 45, 46, 47], "dna": 2, "rang": [2, 5, 47], "stop": [2, 4, 5], "uninstal": [2, 33], "second": [2, 6, 22, 45], "again": [2, 4, 30, 42, 47], "necessari": [2, 4, 5, 11, 12, 15, 26, 30, 43, 45, 46, 47], "ie": 2, "switch": [2, 10, 28, 45, 47], "feel": 2, "kra": [2, 45], "state": [2, 4, 6, 10, 26, 33, 40, 47], "ipactl": 2, "csreplica": 2, "elx": 2, "eli": 2, "verbos": [2, 34], "init": [2, 10, 26, 47], "none": [2, 4, 6, 14, 33, 47], "end": [2, 4, 6, 10, 12, 29, 40, 44, 45, 47], "1970": 2, "01": [2, 4, 8, 9, 47], "00": [2, 5, 10, 25, 38, 45, 47], "error": [2, 4, 17, 20, 26, 28, 31, 42, 45, 47], "acquir": 2, "successfulli": [2, 47], "increment": [2, 10], "succeed": [2, 4], "2019": [2, 6, 8, 25, 42, 45, 47], "07": [2, 5, 8, 45, 47], "22": [2, 4, 28, 45, 47], "46": [2, 25], "config": [2, 4, 10, 16, 17, 19, 21, 26, 28, 30, 45, 47], "shut": [2, 45], "down": [2, 4, 5, 6, 19, 33, 44, 45], "crlgen": 2, "edit": [2, 7, 26, 31, 33, 37], "tomcat": [2, 6], "c": [2, 4, 10, 13, 20, 26, 30, 39, 45, 47], "cfg": [2, 5, 47], "start": [2, 4, 6, 10, 11, 17, 25, 28, 31, 41, 44, 45, 47], "proxi": [2, 16, 21, 45], "restart": [2, 4, 5, 12, 15, 17, 19, 22, 33, 47], "local": [2, 4, 5, 6, 10, 16, 18, 29, 30, 33, 42, 45, 47], "pleas": [2, 4, 6, 20, 28, 45, 46, 47], "wa": [2, 3, 4, 8, 10, 12, 14, 16, 20, 22, 40, 41, 45, 47], "success": [2, 40, 45, 46, 47], "file": [2, 3, 4, 5, 6, 10, 13, 14, 16, 17, 18, 19, 25, 26, 28, 29, 30, 33, 39, 44, 45, 47], "rewriterul": 2, "comment": [2, 4, 18, 42, 47], "tail": [2, 11], "mastercrl": 2, "bin": [2, 4, 10, 22, 25, 30, 38, 44, 45, 47], "ee": 2, "getcrl": 2, "op": 2, "crlissuingpoint": 2, "l": [2, 4, 24, 26, 30, 34, 45, 47], "r": [2, 4, 5, 10, 28, 44, 45, 47], "301": 2, "nc": 2, "turn": [2, 3, 4, 6, 42, 45, 47], "systemctl": [2, 3, 4, 5, 7, 15, 17, 25, 28, 41, 45, 47], "valu": [2, 4, 10, 19, 21, 26, 42, 47], "fals": [2, 4, 19], "true": [2, 4, 6, 10, 40, 45], "enablecrlcach": 2, "enablecrlupd": 2, "rewrit": 2, "rule": [2, 3, 7, 21, 44, 45, 47], "ha": [2, 3, 4, 6, 8, 9, 10, 16, 17, 19, 20, 21, 22, 26, 28, 29, 30, 33, 37, 40, 42, 43, 44, 47], "replic": [2, 6, 19, 45], "testinguser1": 2, "dnarang": 2, "delet": [2, 4, 17, 26, 33, 45, 47], "topologi": 2, "del": [2, 45], "2022": [2, 8], "08": [2, 5, 8, 45, 47], "certstatusupdateinterv": 2, "600": [2, 4, 45], "vim": [2, 4, 6, 13, 26, 31, 35], "properli": [2, 3, 6, 16, 33], "resolv": [2, 21, 29, 45], "either": [2, 4, 6, 8, 10, 15, 16, 20, 22, 26, 28, 33, 42, 43, 44, 45, 47], "infrastructur": [2, 43], "forest": [2, 45], "includ": [2, 4, 8, 10, 16, 25, 39, 42, 47], "prioriti": [2, 4], "correctli": [2, 4, 6, 12, 16, 21, 28], "choic": [2, 5, 6, 30, 41, 42], "befor": [2, 4, 6, 10, 18, 23, 26, 28, 31, 45, 47], "continun": 2, "posix": [2, 45], "id": [2, 4, 45, 47], "automat": [2, 4, 6, 7, 10, 11, 12, 15, 20, 21, 23, 29, 38, 45, 47], "v": [2, 4, 10, 20, 39, 45, 47], "non": [2, 4, 5, 10, 12, 33, 45, 47], "decid": [2, 6, 14, 21], "expect": [2, 6, 16, 37], "uidnumb": [2, 4], "gidnumb": [2, 4, 45], "loginshel": [2, 4], "unixhomedirectori": 2, "els": [2, 5, 6, 11, 12, 15, 20], "overrid": [2, 12, 19, 26, 28], "peopl": [2, 4, 8, 15, 26, 42], "plan": [2, 4, 5, 6, 26, 45], "pure": 2, "afterward": [2, 32], "get": [2, 3, 4, 6, 10, 12, 14, 16, 18, 20, 30, 32, 33, 41, 42, 43, 45, 47], "gid": [2, 4, 45, 47], "yourself": [2, 36, 42], "prep": [2, 35], "compat": [2, 14, 17, 26, 28, 42, 45], "sid": [2, 45], "agent": [2, 10, 21, 22, 25], "5": [2, 4, 5, 6, 10, 22, 25, 26, 45, 47], "hp": [2, 45], "ux": [2, 45], "aix": [2, 45], "sle": 2, "mode": [2, 5, 10, 16, 17, 38, 47], "though": [2, 6, 47], "certain": [2, 4], "app": [2, 6, 36, 43, 45], "open": [2, 4, 5, 6, 12, 18, 19, 33, 34, 38, 39, 42, 45, 47], "port": [2, 4, 5, 6, 7, 26, 35, 37, 39, 45, 47], "tcp": [2, 4, 6], "135": 2, "138": [2, 45], "139": 2, "445": 2, "1024": 2, "1300": 2, "3268": 2, "udp": [2, 4, 5, 6, 45], "part": [2, 4, 6, 10, 12, 38, 47], "former": [2, 10], "path": [2, 4, 5, 10, 17, 20, 30, 33, 39, 45, 47], "resist": [2, 42], "adminaccount": 2, "netbio": [2, 45], "identifi": [2, 5, 45, 47], "xx": [2, 4, 5], "xxxxxxxxx": 2, "xxxxxxxxxx": [2, 45], "direct": [2, 5, 10, 45, 47], "upn": 2, "aduser1": 2, "xxxxx": 2, "some": [2, 3, 4, 5, 6, 10, 12, 14, 15, 16, 19, 20, 24, 26, 31, 33, 35, 37, 38, 40, 41, 42, 43, 44, 45, 46, 47], "each": [2, 4, 5, 6, 10, 19, 24, 45], "rootds": 2, "applic": [2, 4, 6, 12, 15, 18, 20, 22, 25, 26, 33, 34, 36, 42, 43, 45, 47], "determin": [2, 19], "import": [2, 4, 6, 10, 19, 35, 37, 42, 44, 45], "know": [2, 3, 6, 26, 31, 37, 43, 45, 47], "ldapmodifi": [2, 4, 45], "xzz": 2, "w": [2, 10, 20, 44, 45], "h": [2, 4, 44, 45, 47], "enter": [2, 4, 34, 38, 45, 47], "ldap": 2, "changetyp": [2, 4, 45], "replac": [2, 3, 4, 5, 6, 11, 20, 28, 33, 40, 42], "nsslapd": 2, "allow": [2, 4, 5, 6, 7, 10, 12, 15, 17, 21, 24, 33, 38, 39, 42, 45, 47], "interest": [2, 28, 47], "littl": [2, 3, 4, 17, 33, 42], "bit": [2, 20, 28, 47], "fight": 2, "troubleshoot": [2, 45], "right": [2, 4, 5, 6, 42, 45], "catalina": [2, 36], "mobil": [2, 44], "function": [2, 16, 19, 45], "recent": [2, 17, 29], "releas": [2, 5, 9, 14, 25, 35, 47], "ymmv": 2, "coupl": [2, 4, 5, 16, 26, 32, 45, 47], "found": [2, 6, 14, 19, 20, 21, 26, 28, 33, 35, 42, 45, 46, 47], "help": [2, 4, 6, 19, 21, 33, 45, 46, 47], "much": [2, 5, 6, 12, 28, 33, 41, 45, 46, 47], "think": [2, 22, 42, 43], "lion": 2, "sierra": 2, "made": [2, 4, 40, 45], "mostli": [2, 45], "my": [2, 4, 5, 6, 7, 26, 38, 39, 45, 47], "refer": [2, 4, 10, 28, 45], "thing": [2, 3, 4, 5, 6, 10, 16, 19, 20, 29, 33, 37, 40, 42, 44, 45, 46, 47], "those": [2, 4, 5, 6, 19, 26, 43, 44, 45, 46], "didn": 2, "couldn": 2, "mail": [2, 4, 6, 10, 21, 40, 45], "archiv": [2, 10], "cannot": [2, 4, 10, 43, 47], "through": [2, 4, 6, 20, 28, 45], "theori": [2, 43], "point": [2, 4, 5, 6, 9, 14, 16, 17, 21, 26, 33, 40, 41, 44, 45, 47], "tree": [2, 4, 33], "attribut": [2, 4, 45], "map": [2, 4, 13, 33, 45, 47], "rfc2307": [2, 4], "never": [2, 4, 14, 42, 47], "been": [2, 4, 8, 9, 40, 43, 45, 47], "experi": [2, 4, 15, 19, 35, 43, 45], "check": [2, 4, 6, 11, 24, 25, 45, 47], "defin": [2, 26, 40, 45, 47], "sit": [2, 5, 6, 38], "scutil": 2, "click": [2, 6, 18, 19, 22, 34, 38, 45], "after": [2, 4, 5, 6, 12, 14, 15, 17, 26, 28, 33, 38, 47], "cd": [2, 4, 5, 10, 11, 20, 25, 32, 33, 47], "desktop": [2, 14, 15, 18, 22, 41, 44, 45], "curl": [2, 30, 32, 45], "ol": 2, "crt": [2, 45], "mkdir": [2, 4, 5, 18, 20, 32, 45, 47], "cp": [2, 4, 10, 17, 41, 44, 47], "cert": [2, 4, 7, 28, 45], "trustroot": 2, "k": [2, 5, 13, 22, 28, 44, 45, 47], "librari": [2, 4, 12, 20, 27, 33, 39], "keychain": 2, "keytab": [2, 45], "macaddress": 2, "getkeytab": [2, 45], "p": [2, 5, 10, 11, 18, 25, 32, 45, 47], "tmp": [2, 4, 5, 36, 47], "krb5": [2, 45], "transfer": [2, 44, 45], "scp": [2, 4], "mv": [2, 45, 47], "chmod": [2, 4, 25, 41], "chown": [2, 4, 47], "root": [2, 4, 6, 10, 17, 19, 23, 24, 25, 26, 29, 41, 42, 45, 47], "wheel": [2, 14], "domain_realm": 2, "libdefault": 2, "default_realm": 2, "allow_weak_crypto": 2, "ye": [2, 4, 6, 7, 24, 25, 37, 45, 47], "dns_lookup_realm": 2, "dns_lookup_kdc": 2, "rdn": 2, "ticket_lifetim": 2, "24h": 2, "hurt": [2, 3, 4, 45], "opinion": [2, 25, 37, 42], "shouldn": 2, "hardcod": 2, "good": [2, 4, 17, 42, 45], "reason": [2, 4, 6, 16, 20, 21, 26, 37, 40, 42, 47], "kdc": 2, "admin_serv": 2, "pkinit_anchor": 2, "webui": 2, "usernam": [2, 4, 18, 38, 41, 45], "explain": [2, 8, 9, 40], "auth": [2, 4, 45, 47], "twice": 2, "no_ccach": 2, "pam_krb5": 2, "use_first_pass": 2, "use_kcminit": 2, "default_princip": 2, "pam_opendirectori": 2, "nullok": [2, 47], "screensav": 2, "lock": [2, 4, 10, 26, 34, 47], "screen": [2, 31, 34], "sleep": [2, 10, 19, 44], "pam_self": 2, "pam_group": 2, "no_warn": 2, "fail_saf": 2, "deni": [2, 45, 47], "ruser": 2, "passwd": [2, 4, 25, 45, 47], "pam_permit": [2, 47], "session": [2, 10, 15, 25, 31, 34, 41, 45, 47], "prefer": [2, 4, 8, 19, 20, 22, 27, 28, 40, 42], "displai": [2, 4, 13, 26, 33, 45], "fast": [2, 42], "menu": [2, 5], "join": 2, "next": [2, 4, 5, 6, 9, 15, 26, 31, 45, 47], "later": [2, 3, 6, 8, 16, 45], "backup": [2, 6, 17, 35], "purpos": [2, 10, 17, 19, 31, 39, 40, 45], "continu": [2, 4, 45, 47], "ldapv3": 2, "select": [2, 4, 5, 12, 23, 28, 33, 45, 47], "close": [2, 6, 22, 25, 33], "queri": [2, 7, 10, 16], "idl": [2, 10], "minut": [2, 4, 47], "encrypt": [2, 6, 10, 25, 42, 44, 45], "ssl": [2, 4, 40, 42, 45], "search": [2, 4, 6, 45, 47], "dropdown": [2, 33], "custom": [2, 6, 20, 21, 33, 45], "ask": [2, 4, 22, 37, 47], "re": [2, 3, 4, 5, 6, 16, 21, 25, 27, 33, 45, 47], "scroll": [2, 33], "object": [2, 45, 46, 47], "class": [2, 5, 42, 44, 47], "objectclass": [2, 4, 45], "posixgroup": [2, 4], "ipausergroup": 2, "groupofnam": [2, 4, 45], "seem": [2, 8, 10, 22, 33, 34, 37, 41], "understand": [2, 37, 43, 45], "concept": 2, "expand": 2, "primarygroupid": 2, "recordnam": 2, "inetorgperson": [2, 4], "posixaccount": [2, 4], "shadowaccount": [2, 4], "appl": 2, "homedirectori": [2, 4], "otherwis": [2, 4, 5, 10, 13, 15, 20, 36, 41, 45, 47], "authenticationauthor": 2, "generateduid": 2, "ipauniqueid": 2, "nfshomedirectori": 2, "realnam": 2, "uniqueid": 2, "usershel": 2, "altsecurityident": 2, "krbprincipalnam": 2, "reach": [2, 25], "subtre": 2, "ok": [2, 12, 25, 47], "beneath": 2, "until": [2, 10, 14, 19, 33], "termin": [2, 30, 31, 45, 47], "dscacheutil": 2, "flushcach": 2, "q": [2, 18], "return": [2, 31, 45], "further": [2, 4, 10, 42], "succe": [2, 6, 12, 45], "editor": [2, 4, 6], "hand": [2, 4, 6, 10, 38, 39, 43, 45, 46], "side": [2, 4, 38, 45], "readonli": 2, "sysaccount": [2, 45], "f2": [2, 47], "_": 2, "coreservic": 2, "managedcli": 2, "createmobileaccount": 2, "press": [2, 22, 25, 34, 45], "dscl": 2, "append": [2, 19, 28, 47], "groupmembership": 2, "wait": [2, 22, 45], "green": [2, 34], "unlock": [2, 10, 47], "pencil": 2, "bottom": [2, 4, 46], "left": [2, 38], "corner": 2, "portion": [2, 4, 5, 6], "under": [2, 4, 13, 22, 26, 33, 34, 42, 47], "clck": 2, "patch": [2, 33, 43], "appli": [2, 4, 10, 19, 26, 42, 43, 47], "hang": 2, "awar": [2, 6, 10, 15, 33], "gui": [2, 22, 26], "haven": [2, 45, 47], "had": [2, 4, 28], "hour": 2, "suce": 2, "cach": [2, 4, 6, 10, 11, 16, 45], "awai": [2, 6, 17, 18, 45], "howev": [2, 4, 10, 11, 12, 16, 19, 22, 26, 28, 29, 33, 34, 40, 42, 43, 44, 45, 46], "report": [2, 25, 42, 43, 47], "github": [2, 4, 6, 10, 13, 14, 17, 19, 32, 35, 43], "unabl": 2, "confirm": 2, "adapt": 2, "took": [2, 47], "tarbal": [2, 33], "proper": [2, 4, 14, 17], "temporari": [2, 47], "nf": [2, 45], "samba": [2, 45], "mount": [2, 4, 6, 17, 24, 33, 42, 45, 47], "unmount": [2, 11, 24, 33], "wish": [2, 4, 5, 6, 7, 10, 19, 38, 42, 45, 47], "bash": [2, 4, 10, 21, 33, 44, 45], "servernam": [2, 6], "krb5conf": 2, "krb5tab": 2, "pamdirectori": 2, "chain": [2, 10, 43], "flushout": 2, "usr": [2, 4, 10, 18, 20, 22, 25, 26, 30, 41, 47], "sbin": [2, 4, 47], "launchctl": 2, "unload": 2, "launchdaemon": 2, "opendirectoryd": 2, "plist": 2, "deploi": [2, 40, 42], "zip": [2, 25], "dsconfigldap": 2, "figur": [2, 37], "honestli": 2, "relev": [2, 45], "tar": [2, 10, 20, 25], "czf": 2, "macconfig": 2, "gz": [2, 20, 25, 47], "opendirectori": 2, "xzf": [2, 20, 25], "load": [2, 4, 5, 12, 19, 24, 25, 33, 42, 47], "30": [2, 4, 25, 45, 47], "kill": [2, 10, 12], "loginwindow": 2, "killal": 2, "reboot": [2, 5, 15, 26, 28, 41, 47], "move": [2, 8, 12, 17, 33, 45, 47], "tread": 2, "lightli": 2, "person": [2, 4, 6, 8], "believ": [2, 45], "alwai": [2, 10, 42, 45, 46, 47], "fresh": [2, 18], "ditto": 2, "suppos": [2, 27], "someth": [2, 6, 11, 16, 19, 26, 28, 31, 33, 42, 47], "su": [2, 4, 10, 41, 45, 47], "localfold": 2, "networkfold": 2, "mayb": [2, 26, 47], "folder": [2, 4, 19, 24, 33], "lot": [2, 4, 10, 16, 26, 41, 45, 46, 47], "localus": 2, "staff": [2, 47], "fix": [2, 8, 12, 26, 28, 42], "too": [2, 4, 5, 6, 10, 15, 25, 42, 45, 47], "discoveri": 2, "framework": [2, 47], "abil": [2, 4, 45, 47], "discov": 2, "particular": [2, 38, 40, 47], "contain": [2, 4, 5, 6, 8, 10, 16, 17, 25, 28, 33, 35, 39, 45, 46, 47], "schema": [2, 4, 45], "plugin": [2, 4, 13, 15, 18, 22, 26, 28, 30, 33, 45, 47], "mdn": [2, 16], "avahi": 2, "among": 2, "wip": 2, "2017": 2, "abbra": 2, "unclear": [2, 28], "clear": [2, 11, 37], "ever": [2, 47], "did": [2, 4, 5, 6, 7, 37, 45], "python3": [2, 29, 30, 47], "python": [2, 4, 10, 13, 29, 30, 33, 45, 47], "hint": [2, 6, 26], "3": [2, 4, 5, 10, 13, 25, 26, 29, 30, 33, 40, 42, 45, 47], "discuss": [2, 33, 40, 42, 44], "pagur": [2, 45], "macosx": 2, "main": [2, 7, 25], "repositori": [2, 4, 5, 6, 10, 28, 43], "repo": [2, 5, 6, 14, 26, 28], "experiment": [2, 17], "willing": [2, 17, 33], "o": [2, 4, 5, 10, 13, 18, 20, 36, 38, 45, 47], "anchor": 2, "zypper": 2, "yast2": 2, "openldap2": 2, "cyru": 2, "sasl": 2, "gssapi": [2, 45], "cache_credenti": [2, 4], "krb5_store_password_if_offlin": 2, "ipa_domain": 2, "ipa_hostnam": 2, "specif": [2, 6, 14, 33, 40, 43, 45, 47], "ipa_serv": 2, "_srv_": 2, "dns_discovery_domain": 2, "full_name_format": 2, "id_provid": [2, 4], "auth_provid": [2, 4], "access_provid": 2, "chpass_provid": [2, 4], "ldap_tls_cacert": [2, 4], "nss": [2, 4, 45], "filter_us": 2, "haldaemon": 2, "dbu": 2, "radiusd": 2, "nscd": 2, "postgr": 2, "homedir_substr": 2, "home": [2, 10, 13, 18, 19, 20, 26, 33, 41, 44, 47], "autof": [2, 4], "dns_canonicalize_hostnam": 2, "udp_preference_limit": 2, "default_ccache_nam": 2, "keyr": [2, 45], "persist": [2, 4], "bundl": [2, 7, 32], "pem": [2, 4, 7, 45], "pkinit_pool": 2, "sss": [2, 4, 47], "umask": [2, 47], "0077": [2, 47], "pwhistori": 2, "rememb": [2, 4, 26, 44, 47], "cracklib": 2, "minlen": [2, 47], "14": [2, 4, 25, 45, 47], "dcredit": [2, 47], "ucredit": [2, 47], "lcredit": [2, 47], "ocredit": [2, 47], "retri": [2, 47], "sha512": [2, 42, 47], "nsswitch": [2, 4], "sed": [2, 4, 12], "bak": [2, 4, 12], "g": [2, 4, 31, 47], "echo": [2, 4, 5, 10, 22, 31], "sudoer": [2, 4, 47], "netgroup": [2, 45], "ni": [2, 4, 45], "nisdomainnam": 2, "netconfig_nis_static_domain": 2, "netconfig": 2, "f": [2, 4, 10, 36, 45, 47], "line": [2, 4, 10, 39], "forward_pass": [2, 47], "pc": [2, 5], "affect": [2, 12, 33, 42], "pam_sss": [2, 47], "our": [2, 3, 4, 5, 10, 14, 35, 42, 44, 45, 46, 47], "wasn": 2, "everyon": [2, 45], "habit": 2, "idrang": 2, "com_id_rang": 2, "686600000": [2, 45], "number": [2, 4, 33, 35, 44, 45, 47], "200000": 2, "rid": 2, "correspond": [2, 10, 45], "1000": [2, 47], "secondari": [2, 45], "100000000": 2, "686610000": 2, "linuxadm": 2, "flast": 2, "isn": [2, 4, 26, 43, 47], "linuxadm_extern": 2, "adgroup1": 2, "effect": [2, 4, 19, 42, 45, 47], "hbacrul": [2, 45], "hostcat": [2, 45], "servicecat": [2, 45], "desc": [2, 4, 45], "hbactest": [2, 45], "all_system": 2, "sshd": [2, 45, 47], "might": [2, 16, 17, 25, 26, 31, 33, 45], "Or": [2, 47], "three": [2, 4, 5, 25, 45], "These": [2, 15, 45, 47], "behavior": [2, 15, 22, 26, 45], "global": [2, 4, 16, 21, 45], "univers": [2, 42, 45], "rel": [2, 4, 16, 40], "easi": [2, 4, 6, 42], "16": [2, 5, 42, 47], "sampl": [2, 33], "everi": [2, 6, 41], "sudorul": 2, "runasusercat": 2, "cmdcat": 2, "all_linux_sudo": 2, "call": [2, 4, 5, 6, 12, 17, 19, 26, 30, 33, 37, 41, 42, 45, 47], "sudo_rul": 2, "sudocmd": 2, "less": [2, 3, 40, 43], "feat": 2, "come": [2, 3, 4, 15, 20, 22, 26, 29, 42, 45, 47], "No": [2, 5, 14, 40, 45], "tl": [2, 4, 16, 40, 42, 45], "talk": [2, 37], "text": [2, 5, 42], "cipher": [2, 47], "still": [2, 3, 4, 10, 18, 25, 26, 28, 29, 33, 42, 47], "enough": [2, 8, 27], "pass": [2, 10, 20, 31, 38, 43, 44, 45, 46, 47], "highli": [2, 4, 6, 8, 44], "suggest": [2, 16, 19, 26, 42], "decommiss": 2, "eventu": [2, 9], "ldif": 2, "simplesecurityobject": [2, 45], "userpassword": [2, 4, 45], "secret123": 2, "passwordexpirationtim": [2, 45], "20380119031407z": [2, 45], "nsidletimeout": [2, 45], "ldapadd": [2, 4, 45], "xwd": [2, 4], "nisdomain": 2, "defaultdomain": 2, "verify_ap_req_nofail": 2, "kdc_rotat": 2, "period": [2, 22, 37], "1d": 2, "appdefault": 2, "solaris10": 2, "644": 2, "sy": [2, 45], "databas": [2, 4, 45], "wget": [2, 5, 18, 38], "certutil": [2, 4], "ct": 2, "sub": [2, 4, 26], "tls_cacertdir": [2, 4], "tls_cert": 2, "cert8": 2, "db": [2, 4, 45, 47], "tls_cacert": 2, "tls_checkpeer": 2, "bind_timelimit": 2, "120": 2, "timelimit": 2, "uri": [2, 4], "sudoers_bas": 2, "ou": [2, 4], "pam_lookup_polici": 2, "ldapclient": 2, "authenticationmethod": 2, "defaultsearchbas": 2, "domainnam": 2, "defaultserverlist": 2, "followreferr": 2, "objectclassmap": 2, "shadow": [2, 47], "servicesearchdescriptor": 2, "ng": 2, "ether": 2, "comput": [2, 28, 42, 44], "bindtimelimit": 2, "credentiallevel": 2, "simpl": [2, 3, 4, 5, 10, 11, 32, 44, 45, 47], "proxydn": 2, "proxypassword": 2, "With": [2, 6, 27, 44], "pam_ldap": 2, "read": [2, 4, 6, 10, 20, 33, 44, 47], "consol": [2, 25, 33, 45, 47], "requisit": [2, 47], "pam_authtok_get": 2, "pam_unix_cr": 2, "pam_dial_auth": 2, "pam_unix_auth": 2, "server_polici": 2, "rlogin": 2, "pam_rhosts_auth": 2, "pam_dhkei": 2, "krb": 2, "krlogin": 2, "krsh": 2, "ppp": 2, "fallback": [2, 14, 16, 20], "pam_rol": 2, "pam_project": 2, "pam_unix_account": 2, "pam_unix_sess": 2, "pam_authtok_check": 2, "force_check": 2, "pam_authtok_stor": 2, "cron": [2, 10, 47], "pam_passwd_auth": 2, "pubkei": 2, "openldap": [2, 6, 35], "probabl": [2, 11, 42, 45], "minimum": [2, 4, 6, 42, 45, 47], "notfound": 2, "rest": [2, 3, 4], "ipnod": 2, "publickei": 2, "automount": 2, "ldaplist": 2, "ipaoverridetarget": 2, "1006800001": 2, "ipaanchoruuid": 2, "8babb9a8": 2, "5aaf": 2, "11e7": 2, "9769": 2, "00505690319e": 2, "last2": 2, "share": [2, 4, 18, 20, 30, 33, 45, 47], "trivial": 2, "who": [2, 3, 4, 8, 12, 23, 26, 37, 39, 42, 43], "fulli": [2, 4], "sru": 2, "solaris11": 2, "klist": [2, 45], "ket": [2, 45], "previous": [2, 10, 17, 28], "longer": [2, 4, 5, 8], "start_tl": [2, 4], "hit": [2, 4], "miss": [2, 8, 26, 45, 46, 47], "perfectli": [2, 5], "onli": [2, 3, 4, 5, 6, 7, 10, 12, 13, 16, 21, 26, 27, 30, 37, 42, 44, 45, 46, 47], "self": [2, 4], "svccfg": 2, "setprop": 2, "astr": 2, "svcadm": 2, "refresh": 2, "svc": 2, "fine": [2, 25, 47], "definit": [2, 42], "pam_user_polici": 2, "pam_authtok_common": 2, "built": [2, 4, 6, 10, 14, 16, 28, 37, 41, 43, 47], "bunch": [2, 4], "outdat": [2, 8], "random": [2, 19, 44, 45], "regress": 2, "randomli": [2, 44], "break": [2, 4, 19, 30, 33, 45], "big": [2, 47], "shout": 2, "oracl": 2, "brief": [2, 22, 40], "irc": [2, 14, 26, 41, 45, 47], "channel": [2, 4, 6, 26, 47], "chop": 2, "were": [2, 4, 8, 12, 26, 45, 47], "20": [2, 10, 29, 45, 47], "present": [2, 4, 30, 45], "tri": [2, 3, 4, 33], "he": [2, 3], "got": [2, 6, 45], "notic": [2, 31, 35, 47], "esqu": 2, "occur": 2, "fqdn": 2, "hi": [2, 4, 39], "idview": 2, "extrem": [2, 4], "angelsofclockwork": [2, 4, 5], "prop": 2, "adusernam": 2, "thank": 2, "mewho": 2, "freenod": [2, 47], "workaround": [2, 17, 26, 28, 33], "standalon": [2, 6, 25, 33], "For": [2, 3, 4, 5, 6, 10, 15, 16, 17, 19, 20, 21, 23, 24, 26, 28, 30, 33, 40, 42, 44, 45, 47], "compil": [2, 20, 30, 33], "clone": [2, 10, 32], "branch": [2, 10], "download": [2, 4, 5, 15, 20, 33, 36, 43], "instruct": [2, 8, 10, 19, 28, 33], "opt": [2, 6, 10, 25, 45, 47], "csw": 2, "pkgutil": 2, "libnet": 2, "binutil": [2, 20, 39], "gcc4g": 2, "glib2": 2, "libglib2_dev": 2, "gmake": 2, "export": [2, 6, 10, 19, 21, 41, 45], "m4": 2, "gm4": 2, "autoconf": 2, "autoreconf": 2, "cflag": 2, "cxxflag": 2, "ldflag": 2, "m32": 2, "gar": 2, "pammoddir": 2, "sysconfdir": 2, "man": [2, 10, 45, 47], "pkg": 2, "libtool": 2, "automak": 2, "gcc": [2, 19, 35, 39], "docbook": 2, "mandir": 2, "develop": [2, 14, 17, 22, 26, 29, 42, 43, 44], "gcc48": 2, "header": [2, 45, 47], "linker": 2, "bind_dn": 2, "bind_pw": 2, "ssl_path": 2, "host_nam": 2, "block": [2, 5, 6, 16, 25, 47], "ignore_unknown_us": 2, "ignore_authinfo_unavail": 2, "aren": [2, 6], "debug": [2, 28], "watch": [2, 47], "authlog": 2, "hbacsvc": [2, 45], "legacy_client_auth": 2, "hostgroup": [2, 45], "usercat": 2, "shortnam": 2, "But": [2, 4, 6, 47], "anymor": [2, 33], "correct": [2, 4, 5, 6, 10, 33, 40], "unless": [2, 10, 28], "situat": [2, 10, 23, 40], "reflect": [2, 45, 46, 47], "fit": [2, 8, 43, 45, 46, 47], "dure": [2, 40, 45, 47], "deploy": [2, 45], "post": [2, 6, 10, 28, 43, 45], "except": [2, 12, 14, 45, 47], "itself": [2, 10, 25, 33], "theme": [2, 5, 30], "info": [2, 4, 8, 17, 45, 47], "most": [2, 3, 4, 5, 6, 7, 9, 12, 42, 45, 47], "piec": [2, 4, 26, 45, 47], "nativ": [2, 39], "advers": 2, "caus": [2, 4, 26, 34], "ldapsearch": [2, 4], "done": [2, 3, 4, 5, 6, 10, 12, 19, 33, 37, 38, 44, 45, 47], "whoami": 2, "introduc": 2, "sss_cach": 2, "e": [2, 10, 13, 16, 20, 21, 22, 26, 28, 33, 47], "insuffici": 2, "rm": [2, 4, 20, 28], "rf": [2, 4], "prompt": [2, 25, 39, 45], "drop": [2, 4, 42, 47], "intermitt": 2, "shorten": 2, "errant": 2, "dupecheck": 2, "sh": [2, 10, 25, 33, 38], "arrai": [2, 5, 45], "b": [2, 4, 11, 25, 40, 45, 47], "lll": [2, 4], "samaccountnam": 2, "grep": [2, 4, 25, 34, 45, 47], "eq": [2, 4], "fi": [2, 38, 44], "factor": 2, "whether": [2, 3, 5, 7, 19, 22, 26, 37, 42, 43, 45, 47], "By": [2, 10, 11, 17, 19, 42, 45], "locat": [2, 5, 10, 14, 19, 26, 28, 33, 39, 45], "contact": 2, "air": 2, "gap": 2, "ad_sit": 2, "site_nam": 2, "ad_serv": 2, "dc1": 2, "dc2": 2, "ad_backup_serv": 2, "dc3": 2, "dc4": 2, "tool": [2, 4, 5, 17, 19, 22, 33, 47], "brows": 2, "wd": 2, "deal": [2, 42, 47], "themselv": [2, 4, 47], "dnshostnam": 2, "hard": [2, 6, 23], "disrupt": 2, "fall": 2, "copr": [2, 8, 26, 28, 35], "establish": [2, 45], "default_shel": 2, "great": [2, 4], "ambari": 2, "aw": 2, "node": [2, 47], "stupid": 2, "reli": [2, 5, 17, 43], "dnsmasq": [2, 16], "upset": 2, "about": [2, 4, 6, 11, 19, 33, 37, 42, 43, 44, 45, 46, 47], "veri": [2, 4, 5, 6, 10, 42, 44, 45, 46, 47], "director": 2, "involv": [2, 5, 26, 44], "contractor": 2, "absolut": [2, 4, 45], "insist": [2, 4], "against": [2, 4, 6, 20, 43, 45, 47], "judgement": 2, "despit": [2, 41, 45], "whatev": [2, 4, 19], "pain": [2, 4], "box": [2, 5, 12, 25, 26, 33, 38, 42], "obvious": [2, 16], "dev": [2, 4, 10, 11, 25, 38, 47], "2015": 2, "focus": [2, 6], "retriev": [2, 45], "charact": [2, 42, 44, 47], "cloud": [2, 44], "onprem": 2, "ultim": 2, "limit": [2, 6, 16, 25, 28, 42], "cluster": 2, "broken": [2, 8, 10], "freeli": 2, "heavili": [2, 41], "simpli": [2, 4, 10, 17, 20, 24, 26, 29, 33, 34, 37, 39, 42, 43, 45], "summar": [2, 21], "propos": 2, "cdh": 2, "privileg": [2, 10, 17, 42, 45, 47], "expir": [2, 4, 47], "sinc": [2, 4, 8, 10, 25, 26, 33, 41, 42, 47], "special": 2, "loui": [2, 37], "abel": [2, 37], "disclaim": 2, "respons": [2, 6, 45, 46, 47], "breach": [2, 44], "misconfigur": 2, "risk": [2, 10, 17, 30, 42, 44], "variabl": [2, 4, 6, 10, 26, 31, 33, 47], "anywher": [2, 33, 36], "cdhkt": 2, "cdhuser": 2, "iparealm": 2, "destin": [2, 42], "question": [2, 24, 26, 40, 41, 42, 45, 46, 47], "fullprinc": 2, "princ": 2, "00_kinitus": 2, "pick": [2, 4, 33, 45], "suit": [2, 8, 42, 45, 46], "best": [2, 39, 43, 47], "prior": [2, 33, 40, 45, 46, 47], "somewher": [2, 4, 13, 19, 25, 33], "guess": 2, "thisisaweakpassword": 2, "kt": 2, "TO": [2, 4], "exit": [2, 25, 47], "01_createprinc": 2, "principl": 2, "Not": [2, 4, 37, 45, 47], "02_createserviceallow": 2, "retriv": 2, "kdestroi": 2, "getkeytabscdh": 2, "scm": 2, "775": 2, "wizard": [2, 12], "almost": [2, 6], "tidbit": [2, 47], "memori": [2, 19, 25], "java": [2, 4], "cat": [2, 4, 18, 19, 45, 47], "doh": 2, "document": [2, 4, 10, 19, 21, 30, 32, 33, 35, 42, 44, 45], "unbound": [2, 6, 16, 35], "tell": [2, 3, 6, 15, 21], "spin": [2, 17], "instanc": [2, 4, 43, 45], "100": [2, 5, 7, 45], "224": 2, "dnsconfig": [2, 45], "xxxx": 2, "9553": 2, "slapd": [2, 4], "popul": [2, 19], "term": [2, 31, 47], "modif": [2, 4, 14], "style": [2, 5, 19, 45, 47], "dse": 2, "label": [2, 26, 45, 47], "localhost": [2, 4, 7, 16], "auditlog": [2, 4], "ctrl": [2, 22, 25, 34, 45], "jbasket": 2, "aocus": 2, "686600003": 2, "sun": [2, 10, 47], "mar": [2, 6], "29": [2, 8, 45, 47], "42": [2, 25, 47], "36": [2, 28], "mst": [2, 25], "2020": [2, 6, 8, 45], "pt": [2, 25], "20200329223754": 2, "result": [2, 10, 12, 16, 17, 26, 31, 33, 40, 42, 45, 47], "modifiersnam": 2, "modifytimestamp": 2, "20200330053754z": 2, "b2019": 2, "323": 2, "229": 2, "636": [2, 4], "happen": [2, 8, 28, 37, 45, 47], "20200329224007": 2, "20200330054006z": 2, "entryusn": 2, "900028": 2, "sort": [2, 5, 6, 47], "accid": 2, "realli": 2, "m": [2, 5, 10, 13, 25, 47], "sometim": [2, 4, 6, 15, 47], "2021": [2, 6, 8, 9, 45], "healthcheck": 2, "failur": [2, 4, 45, 47], "certmong": [2, 45], "pop": [2, 22, 40], "me": [2, 7, 45, 47], "getcert": [2, 45], "request": [2, 6, 16, 40, 45, 46, 47], "track": [2, 10, 45], "20191106025922": 2, "monitor": [2, 4, 6, 45, 47], "pair": [2, 45, 47], "storag": [2, 6, 17, 45], "krb5kdc": 2, "issuer": [2, 45], "subject": [2, 26, 45], "05": [2, 6, 8, 9, 25, 45], "59": [2, 8, 47], "27": [2, 4, 6, 45, 47], "krbtgt": 2, "usag": [2, 45], "digitalsignatur": [2, 45], "nonrepudi": [2, 45], "keyencipher": [2, 45], "dataencipher": [2, 45], "eku": [2, 45], "kp": [2, 45], "serverauth": [2, 45], "pkinit": 2, "kpkdc": 2, "save": [2, 4, 28, 45, 47], "libexec": [2, 47], "renew_kdc_cert": 2, "auto": [2, 4, 19, 27, 35, 45, 47], "20200123075636": 2, "nssdb": [2, 45], "nicknam": [2, 45], "token": [2, 45], "pinfil": 2, "pwdfile": 2, "txt": [2, 16, 33, 44], "55": [2, 26, 47], "33": [2, 6], "clientauth": [2, 45], "restart_dirsrv": 2, "20200123075639": 2, "newly_added_need_keyinfo_read_pin": 2, "privat": [2, 25, 45, 47], "48": [2, 4, 38, 45, 47], "restart_httpd": 2, "interestingli": 2, "meant": [2, 42, 47], "accord": 2, "output": [2, 4, 11, 15, 28, 33, 42, 45], "openssl": [2, 4], "x509": [2, 4], "noout": [2, 4], "nov": [2, 45, 47], "gmt": 2, "year": [2, 47], "443": [2, 6], "rsa": [2, 47], "20200504003758": 2, "pin": [2, 47], "auditsigningcert": 2, "alia": [2, 4, 6, 21], "20200615180351": 2, "unknown": [2, 5], "stop_pkicad": 2, "renew_ca_cert": 2, "03": [2, 8, 45, 47], "13": [2, 8, 25, 47], "23": [2, 6, 10, 45, 47], "41": [2, 47], "aris": 2, "balanc": 2, "layer": [2, 40, 47], "perhap": [2, 45], "round": [2, 6, 42], "robin": [2, 6], "verif": 2, "necessarili": [2, 37], "xml": [2, 26], "reconfigur": 2, "connector": [2, 26], "secret": [2, 43], "requiredsecret": 2, "paramet": [2, 28], "8009": 2, "protocol": [2, 5, 16, 38, 40], "ajp": 2, "redirectport": 2, "8443": 2, "localhost4": 2, "aaa": 2, "bbb": 2, "localhost6": 2, "conflict": [2, 4, 10, 42], "proxypass": 2, "field": [2, 45, 47], "proxypassmatch": 2, "stuff": [2, 46], "somedai": 2, "easili": [2, 5, 37, 41, 47], "ticket": 2, "invalid": 2, "argument": [2, 33, 45], "credenti": [2, 44], "bugzilla": [2, 45], "2014": 2, "exact": [2, 4, 47], "footnot": [2, 17, 42], "background": [2, 4, 6, 15, 19, 34], "mileag": 2, "vari": 2, "set": [3, 4, 6, 7, 10, 17, 19, 20, 22, 25, 26, 27, 28, 30, 31, 33, 34, 42, 45, 47], "activ": [3, 4, 25, 47], "packag": [3, 5, 6, 8, 13, 14, 15, 17, 20, 22, 24, 25, 26, 28, 29, 30, 35, 41, 45], "few": [3, 4, 5, 6, 7, 10, 22, 26, 28, 42, 45, 47], "wan": 3, "lan": 3, "group": [3, 6, 17, 24, 26, 37, 47], "becom": [3, 21, 42, 45, 47], "bridg": 3, "ip_forward": 3, "option": [3, 4, 5, 6, 7, 10, 19, 20, 22, 25, 34, 41, 45, 47], "prefix": [3, 10, 19, 20, 33, 47], "": [3, 4, 5, 7, 10, 12, 14, 15, 17, 19, 20, 21, 22, 26, 29, 31, 33, 34, 37, 38, 40, 41, 42, 43, 44, 45, 47], "isp": 3, "broker": 3, "gener": [3, 4, 6, 8, 16, 17, 20, 28, 35, 42, 43, 44, 45, 47], "masquerad": 3, "syntax": [3, 4, 6, 45, 47], "ideal": [3, 42], "user": [3, 10, 12, 21, 22, 23, 24, 25, 28, 29, 33, 38, 40, 41, 42, 43, 44, 47], "quickli": 3, "The": [3, 4, 5, 8, 10, 12, 14, 16, 18, 19, 20, 21, 22, 26, 28, 30, 31, 33, 34, 35, 39, 40, 42, 43, 44, 45, 46, 47], "drawback": 3, "hidden": [3, 23], "behind": 3, "frontend": [3, 4, 6], "eth0": [3, 45], "eth1": 3, "default": [3, 4, 5, 6, 8, 10, 11, 12, 14, 17, 18, 19, 22, 23, 26, 27, 31, 33, 40, 42, 45, 47], "supersed": 3, "recommend": [3, 8, 11, 14, 15, 17, 19, 26, 27, 29, 33, 40, 42, 44, 47], "stick": [3, 11, 13, 47], "tricki": [3, 6, 33], "quit": [3, 20, 22, 42, 45, 47], "oversimplif": 3, "idea": [3, 6, 17, 35, 37, 42, 43, 45, 46, 47], "rough": 3, "migrat": [3, 40], "disabl": [3, 6, 16, 18, 20, 25, 35, 38, 45, 47], "enabl": [3, 4, 5, 6, 7, 10, 16, 19, 20, 21, 22, 25, 26, 28, 33, 34, 41, 42, 43, 45, 47], "mask": [3, 5], "flush": 3, "nft": 3, "ruleset": [3, 47], "soon": [3, 40, 45], "thu": [4, 8, 45], "sep": [4, 8], "21": [4, 10, 45, 47], "06": [4, 8, 45, 47], "rhel": [4, 6, 23, 45, 47], "thusli": 4, "el": [4, 5, 8], "deriv": [4, 5, 42], "stai": [4, 6], "ltb": 4, "plu": [4, 5, 22], "context": [4, 5, 10, 17, 26, 27, 47], "issu": [4, 5, 10, 12, 19, 26, 33, 34, 42, 45], "date": [4, 6, 8, 10, 14, 47], "6": [4, 20, 25, 26, 33, 36, 45, 47], "account": [4, 6, 21, 38, 40, 42, 45, 47], "implement": [4, 6, 25, 40], "across": [4, 20, 33, 42], "setup": [4, 12, 30, 38, 40, 45, 47], "foremost": 4, "mind": [4, 6, 10], "fulfil": 4, "road": 4, "dn": [4, 8, 21, 35, 42, 45], "NOT": [4, 6, 24, 28, 45, 47], "appreci": 4, "incorrect": [4, 10], "login": [4, 10, 25, 45], "el7": [4, 45], "primarili": [4, 6], "nasti": 4, "color": [4, 6, 19, 31], "enhanc": [4, 6], "vimrc": [4, 6, 13, 30], "brighter": [4, 6], "dark": [4, 6], "bash_profil": [4, 6], "lmdb": 4, "hdb": 4, "bdb": 4, "codereadi": 4, "powertool": 4, "distribut": [4, 6, 10, 23, 29, 38, 39, 43], "extra": [4, 5, 6, 15, 26, 30, 42, 45, 46, 47], "epel": [4, 47], "detail": [4, 10, 28, 33, 38, 45], "migrationtool": 4, "newer": [4, 14, 29], "toward": [4, 29, 44, 45, 47], "lab": [4, 5, 6, 45], "anyth": [4, 6, 10, 20, 45, 46, 47], "relat": [4, 5, 37, 42, 45, 46, 47], "remov": [4, 6, 14, 26, 28, 30, 45, 47], "genrsa": 4, "des3": 4, "ca": [4, 6, 7, 45, 47], "4096": [4, 45, 47], "ldapserv": 4, "req": 4, "dai": [4, 41, 45, 47], "3650": 4, "countri": 4, "name": [4, 5, 6, 7, 18, 21, 25, 26, 28, 33, 38, 45, 47], "letter": [4, 45, 47], "code": [4, 5, 14, 35, 42], "u": [4, 8, 10, 24, 33, 37, 44, 45, 46, 47], "provinc": 4, "arizona": 4, "citi": 4, "phoenix": [4, 38], "organ": [4, 33], "compani": [4, 47], "ltd": 4, "ssn": 4, "studio": 4, "organiz": 4, "unit": [4, 10, 25, 45, 47], "maintain": [4, 8, 20, 26, 42], "email": [4, 40, 45], "youremail": 4, "csr": [4, 45], "zera1": 4, "cakei": 4, "set_seri": 4, "ln": [4, 5, 33], "hash": [4, 44, 47], "beyond": [4, 47], "640": [4, 45], "cacountri": 4, "castat": 4, "calocal": 4, "caorgan": 4, "caorganizationalunit": 4, "screw": [4, 29], "sign": [4, 21, 45], "caconicalnam": 4, "caemail": 4, "tucklesepk": 4, "gmail": [4, 6, 40], "organizationalunit": 4, "conicalnam": 4, "pc68xl": 4, "certdir": 4, "subj": [4, 47], "st": 4, "emailaddress": 4, "obtain": [4, 5, 29, 33], "mine": 4, "39642ab3": 4, "slappasswd": 4, "ssha": 4, "cuakctex7rl": 4, "ldg0ejktmzjdrxnc46": 4, "suffix": 4, "mdb": 4, "dit": 4, "olcsuffix": 4, "olcrootdn": 4, "olcrootpw": 4, "olcdbmaxs": 4, "20gb": [4, 6], "olcdbenvflag": 4, "olcdatabas": 4, "olcdatabaseconfig": 4, "olcmdbconfig": 4, "olcdbdirectori": 4, "dc": [4, 45, 47], "manag": [4, 8, 10, 13, 16, 19, 20, 22, 24, 25, 26, 28, 29, 32, 35, 38, 42], "olcdbindex": 4, "surnam": [4, 45], "givennam": [4, 45], "olclastmod": 4, "nometasync": 4, "writemap": 4, "21474836480": 4, "primari": [4, 10], "describ": [4, 20], "certificatefil": 4, "olctlscacertificatepath": 4, "olctlscertificatefil": 4, "olctlscertificatekeyfil": 4, "ad": [4, 6, 8, 21, 22, 47], "rootdn": 4, "ldapi": 4, "treat": 4, "bug": [4, 8, 10, 26, 33, 42, 43, 45], "olcpasswordhash": 4, "olcaccess": 4, "peercr": 4, "slapd_url": 4, "slaptest": 4, "conf": [4, 5, 6, 7, 10, 16, 22, 28, 31, 45, 47], "checksum": 4, "oper": [4, 10, 44, 45, 46, 47], "That": [4, 28, 33, 41, 47], "backend": [4, 6], "el6": [4, 45], "chunk": 4, "like": [4, 5, 6, 7, 10, 11, 12, 15, 19, 21, 25, 26, 28, 30, 31, 33, 36, 40, 42, 43, 44, 45, 46, 47], "loop": [4, 25], "ppolici": 4, "slapo": 4, "upgrad": [4, 10, 15, 29, 42, 45], "corba": 4, "cosin": 4, "duaconf": 4, "dyngroup": 4, "misc": [4, 8, 35], "collect": 4, "togeth": 4, "sourc": [4, 5, 6, 10, 11, 14, 17, 20, 22, 28, 33, 35, 36, 40, 43, 45, 47], "commerci": 4, "offer": [4, 42], "rfc2307bi": 4, "schemaord": 4, "clutter": 4, "chose": [4, 24], "earlier": [4, 45], "domain": [4, 5, 6, 16, 19, 21, 47], "messag": [4, 6, 10, 16, 28, 40, 45], "aid": [4, 47], "creation": [4, 45], "fun": [4, 6], "10000": [4, 45], "lhome": 4, "proce": 4, "semanag": [4, 47], "fcontext": [4, 47], "home_root_t": 4, "restorecon": [4, 5, 26, 47], "reset": [4, 5, 45], "unconfined_u": [4, 47], "object_r": [4, 47], "default_t": 4, "s0": [4, 47], "groupadd": 4, "sokel": 4, "10001": 4, "10002": 4, "rano": 4, "useradd": [4, 47], "alias": 4, "migus": 4, "migrate_passwd": 4, "pl": 4, "miggroup": 4, "migrate_group": 4, "padl": 4, "migrate_common": 4, "ph": 4, "convert": [4, 11, 36], "ourus": 4, "uid": [4, 45, 47], "satisfi": 4, "zera": 4, "nalika": 4, "11000": 4, "sn": [4, 45], "displaynam": 4, "changeme2": 4, "ownership": 4, "skel": 4, "rv": [4, 26, 47], "skip": [4, 6, 18, 26, 44], "nfsv3": 4, "prevent": [4, 5, 10, 14, 19, 42, 43, 47], "squash": 4, "nfsv4": 4, "fashion": [4, 5, 45], "tend": [4, 43, 47], "nobodi": 4, "solut": [4, 5, 6, 16, 26], "forc": [4, 22, 30, 45], "warn": [4, 26, 33, 44, 45], "libnfsidmap": 4, "rw": [4, 25, 45, 47], "sync": [4, 6, 10, 25, 45], "root_squash": 4, "no_all_squash": 4, "idmapd": 4, "need_idmapd": 4, "nfsmapid_domain": 4, "bad": [4, 28, 42, 47], "practic": [4, 37, 40, 42, 43, 45, 46], "111": 4, "2049": 4, "firewalld": [4, 6], "straight": [4, 5, 6, 7, 16, 19, 45], "forward": [4, 5, 6, 7, 16, 45], "troubl": [4, 28, 33], "temporarili": 4, "appropri": [4, 6, 27], "superced": 4, "obsolet": [4, 40, 42], "yum": [4, 7, 41, 45, 47], "silent": [4, 47], "pam": [4, 45], "ldapd": 4, "policycoreutil": [4, 47], "authselect": [4, 45], "krb5_realm": 4, "ldap_search_bas": 4, "sudo_provid": 4, "ldap_uri": 4, "ldap_id_use_start_tl": 4, "ldap_tls_cacertdir": 4, "ldap_sudo_search_bas": 4, "ago": [4, 25], "symbol": [4, 13], "link": [4, 6, 8, 14, 20, 25, 35, 42, 47], "hostobject": 4, "radiusprofil": 4, "ldappublickei": 4, "autofs_t": 4, "setsebool": [4, 47], "use_nfs_home_dir": 4, "copi": [4, 5, 10, 17, 22, 25, 27, 29, 36, 41, 45, 47], "fstype": [4, 45], "iso9660": 4, "ro": 4, "nosuid": 4, "nodev": 4, "cdrom": 4, "soft": [4, 45], "intr": 4, "edu": 4, "olc": 4, "format": [4, 10, 31, 36, 45, 47], "olcschemaconfig": 4, "olcattributetyp": 4, "15953": 4, "sudous": 4, "equal": [4, 47], "caseexactia5match": 4, "substr": [4, 5], "caseexactia5substringsma": 4, "tch": 4, "1466": 4, "115": [4, 25], "121": [4, 5], "26": [4, 8, 45], "sudohost": 4, "caseexactia5substringsmat": 4, "ch": 4, "sudocommand": 4, "comma": 4, "nd": 4, "execut": [4, 43, 47], "466": 4, "sudoruna": 4, "imperson": [4, 42], "sudoopt": 4, "sudorunasus": 4, "sudorunasgroup": 4, "gr": 4, "oup": 4, "66": [4, 38, 47], "sudonotbefor": 4, "sta": 4, "rt": 4, "interv": 4, "valid": [4, 42, 45, 47], "generalizedtimemat": 4, "order": [4, 10, 24, 26, 30, 33, 43, 44], "generalizedtimeorderingmatch": 4, "sudonotaft": 4, "generalizedtimematch": 4, "10": [4, 5, 6, 7, 25, 36, 45, 47], "sudoord": 4, "int": 4, "eger": 4, "sudorol": 4, "integermatch": 4, "integerord": 4, "eringmatch": 4, "olcobjectclass": 4, "en": [4, 25], "sup": 4, "udoruna": 4, "sudonotb": 4, "efor": 4, "descript": [4, 10, 20, 25, 43], "sudoschema": 4, "desir": [4, 40, 45], "requiretti": 4, "env_reset": 4, "env_keep": 4, "histsiz": 4, "inputrc": 4, "kdedir": 4, "ls_color": 4, "ps1": 4, "ps2": 4, "qtdir": 4, "lang": 4, "lc_address": 4, "lc_ctype": 4, "lc_collat": 4, "lc_identif": 4, "lc_measur": 4, "lc_messag": 4, "lc_monetari": 4, "lc_name": 4, "lc_numer": 4, "lc_paper": 4, "lc_telephon": 4, "lc_time": 4, "lc_all": 4, "languag": [4, 20, 47], "lingua": 4, "_xkb_charset": 4, "xauthor": 4, "specifi": [4, 10, 17, 28, 45, 47], "zera2": 4, "zera3": 4, "around": [4, 43], "match": [4, 5, 10, 21, 47], "secure_path": 4, "especi": [4, 26, 45], "grant": [4, 45], "olcmodulelist": 4, "olcmodulepath": 4, "lib64": [4, 47], "olcmoduleload": 4, "memberof": [4, 45], "la": 4, "olcoverlai": 4, "olcmemberof": 4, "olcoverlayconfig": 4, "olcconfig": 4, "olcmemberofdangl": 4, "ignor": [4, 5, 10, 14, 26, 37, 47], "olcmemberofrefint": 4, "olcmemberofgroupoc": 4, "olcmemberofmemberad": 4, "olcmemberofmemberofad": 4, "chri": 4, "sithlord": 4, "minor": 4, "ldap_access_filt": 4, "ldap_schema": 4, "enumer": 4, "basic": [4, 7, 47], "membership": 4, "disappear": 4, "clean": [4, 11], "refint": 4, "overlai": 4, "olcrefintconfig": 4, "olcrefintattribut": 4, "protect": [4, 10], "him": 4, "attr": 4, "shadowlastchang": 4, "product": [4, 6, 45], "disallow": [4, 42], "handl": [4, 6, 10, 30, 42, 43, 45, 46], "olcdisallow": 4, "bind_anon": 4, "olcrequir": 4, "authc": 4, "ceas": [4, 22], "ldap_bind": 4, "inappropri": 4, "cours": [4, 45, 46, 47], "standard": [4, 14, 45], "audit": 4, "olclogfil": 4, "olcloglevel": 4, "256": [4, 30, 31], "olcauditlogconfig": 4, "olcauditlogfil": 4, "logrot": 4, "ton": 4, "transact": 4, "rotat": [4, 47], "100m": 4, "250m": 4, "respect": [4, 10, 33], "missingok": 4, "compress": 4, "notifempti": 4, "daili": [4, 37], "size": [4, 6, 36], "rsyslog": [4, 6], "local4": 4, "asset": [4, 42], "olcppolicyconfig": 4, "olcppolicydefault": 4, "olcppolicyuselockout": 4, "olcppolicyhashcleartext": 4, "ones": [4, 45], "pwdpolici": 4, "passworddefault": 4, "pwdattribut": 4, "qualiti": 4, "mechan": [4, 26, 40, 42, 44], "poison": 4, "pwdcheckqual": 4, "84": [4, 45, 47], "pwdminag": 4, "pwdmaxag": 4, "7257600": 4, "length": [4, 44], "pwdminlength": 4, "histori": [4, 47], "pwdinhistori": 4, "till": 4, "lockout": [4, 47], "pwdmaxfailur": 4, "pwdfailurecountinterv": 4, "pwdlockout": 4, "pwdlockoutdur": 4, "1800": 4, "pwdallowuserchang": 4, "pwdexpirewarn": 4, "1209600": 4, "pwdgraceauthnlimit": 4, "pwdmustchang": 4, "pwdsafemodifi": 4, "pwdcheckmodul": 4, "check_password": 4, "pxeboot": 5, "next_serv": 5, "nginx": [5, 42, 47], "easier": [5, 6, 7, 17, 20, 42, 45], "perspect": 5, "roll": [5, 21], "consist": [5, 40, 47], "classic": [5, 6, 41], "simpler": [5, 6, 33], "efi": 5, "architectur": [5, 20, 45], "mknetdir": 5, "viabl": 5, "distro": [5, 42, 43], "articl": [5, 10, 19, 20, 35, 37, 42, 43, 44], "tftpserver": 5, "baseo": 5, "x86_64": [5, 25], "x64": 5, "shim": 5, "ia32": 5, "el9": 5, "aarch64": [5, 14], "aa64": 5, "directori": [5, 6, 10, 14, 20, 24, 28, 33, 41, 47], "tftpboot": 5, "netboot": 5, "i386": 5, "socket": [5, 17, 42, 47], "tradition": 5, "xinetd": 5, "69": [5, 47], "dhcpd": [5, 6], "93": 5, "unsign": 5, "integ": 5, "rfc3442": 5, "classless": 5, "rout": [5, 6, 10, 38], "249": 5, "space": [5, 6, 11, 17], "pxelinux": 5, "magic": 5, "208": 5, "string": [5, 31, 42, 44, 47], "configfil": 5, "209": 5, "pathprefix": 5, "210": 5, "reboottim": 5, "211": 5, "32": [5, 7, 28, 45, 47], "mtftp": 5, "cport": 5, "sport": 5, "tmout": 5, "delai": [5, 47], "within": [5, 6, 10, 17, 31, 33, 42], "subnet": [5, 6, 7, 38], "bootload": [5, 23], "x86": [5, 47], "armhfp": 5, "0a": [5, 47], "0b": [5, 47], "pxeclient": 5, "vendor": [5, 25, 42], "filenam": 5, "09": [5, 6, 8, 25, 26, 45, 47], "bio": 5, "mention": 5, "noth": [5, 15], "ddn": 5, "interim": 5, "bootp": 5, "authorit": 5, "log": [5, 6, 16, 33, 45, 47], "facil": 5, "local6": 5, "client": [5, 6, 12, 40, 44, 47], "vendorclass": 5, "netmask": 5, "255": 5, "interfac": [5, 6, 7, 10, 28, 38, 47], "br1000": 5, "router": [5, 35], "110": 5, "199": 5, "catch": 5, "armv7a": 5, "leas": 5, "21600": 5, "max": [5, 10, 47], "43200": 5, "At": [5, 6, 10, 11, 14, 41, 42, 46, 47], "kind": [5, 6, 37, 45], "www": [5, 21, 47], "html": [5, 17, 19, 47], "virtual": [5, 6, 39, 45, 47], "http": [5, 16, 17, 18, 21, 28, 30, 32, 38, 45, 47], "accompani": [5, 45], "simplifi": [5, 20], "symlink": [5, 10, 33], "timeout": 5, "60": [5, 22], "menuentri": 5, "firmwar": 5, "menuentry_id_opt": 5, "uefi": 5, "fwsetup": 5, "shutdown": [5, 10], "halt": 5, "produc": [5, 47], "bootabl": 5, "upstream": [5, 7, 14, 43], "inst": 5, "stage2": 5, "accur": 5, "dl": 5, "rockylinux": 5, "org": [5, 17, 22, 28], "pub": [5, 47], "iso": [5, 35], "dvd": 5, "arm": 5, "data": [5, 25, 33, 45, 47], "arch": [5, 47], "kickstart": [5, 6], "gnu": 5, "kernel": [5, 23, 25, 28, 42, 47], "linuxefi": 5, "vmlinuz": 5, "initrdefi": 5, "initrd": 5, "img": 5, "linux16": 5, "initrd16": 5, "linuxinstal": 5, "dvd1": 5, "mirrorlist": 5, "redirect": [5, 21, 42], "regular": [5, 6, 10, 24, 33, 38, 45, 47], "fedoraproject": 5, "item": [5, 47], "39": 5, "customiz": 5, "insmod": 5, "all_video": 5, "gfxterm": 5, "gfxterm_menu": 5, "gfxmenu": 5, "gfxterm_background": 5, "png": [5, 18], "terminal_output": 5, "background_imag": 5, "stretch": [5, 42], "bg": [5, 19], "menu_color_highlight": 5, "cyan": 5, "black": 5, "menu_color_norm": 5, "white": [5, 19], "color_norm": 5, "grai": 5, "transpar": [5, 17], "light": [5, 19], "brand": 5, "scheme": [5, 31], "nest": 5, "deeper": 5, "35": [5, 45, 47], "loadfont": 5, "unicod": 5, "pf2": 5, "stabl": [5, 6], "rescu": [5, 47], "baselin": [6, 47], "red": [6, 34, 45, 46], "hat": [6, 45, 46], "mainli": [6, 12], "rhce": [6, 45, 46, 47], "requir": [6, 10, 13, 21, 25, 26, 28, 30, 33, 39, 40, 42, 43, 45, 47], "postgresql": [6, 42], "mysql": 6, "mariadb": 6, "foreman": 6, "pulp": 6, "uyuni": 6, "esxi": 6, "icinga": 6, "iptabl": 6, "nftabl": 6, "hardwar": [6, 12, 25, 27, 34], "ram": [6, 45], "8gb": 6, "32gb": 6, "cpu": [6, 45], "quad": 6, "i5": 6, "ht": 6, "i7": 6, "xeon": 6, "1tb": 6, "4tb": 6, "spread": [6, 43], "2x2tb": 6, "4x1tb": 6, "1gb": [6, 45], "guidelin": 6, "exclus": 6, "learn": 6, "ovirt": 6, "manageiq": 6, "redesign": 6, "2016": [6, 45], "cobbler": 6, "jul": [6, 45], "2018": 6, "28": [6, 8, 45, 47], "convers": 6, "el8": 6, "wiki": [6, 19, 20], "chanc": [6, 45], "word": [6, 37, 44], "platform": [6, 20, 25, 31, 42, 47], "libvirt": 6, "featur": [6, 10, 16, 22, 42, 43, 44, 47], "cost": 6, "stabil": [6, 15], "egrep": 6, "vmx": 6, "svm": 6, "proc": 6, "cpuinfo": 6, "datastor": 6, "pool": 6, "lvm": 6, "store": [6, 10, 17, 42, 44, 45, 47], "volum": [6, 36, 47], "logic": 6, "partit": [6, 45, 47], "destroi": [6, 25, 47], "virbr0": 6, "OR": 6, "virsh": 6, "fdisk": 6, "pvcreat": 6, "vgcreat": 6, "mkf": [6, 47], "wise": 6, "qcow2": 6, "virtio": 6, "whenev": [6, 28, 29], "raw": [6, 30, 45], "replica": [6, 45], "doubl": [6, 45], "bind": [6, 7, 16, 45, 47], "slave": 6, "sensibl": 6, "exposur": 6, "eas": 6, "esx": 6, "sysctl": 6, "nat": [6, 35], "rfc": [6, 40], "routabl": 6, "strictli": [6, 45], "bonu": 6, "ipa": [6, 45], "9053": [6, 7], "cname": [6, 21], "smaller": 6, "satellit": 6, "candlepin": 6, "phase": 6, "head": [6, 47], "serious": [6, 20], "250gb": 6, "heavi": 6, "tune": [6, 12, 45], "errata": 6, "advisori": 6, "virt": [6, 8, 47], "regist": 6, "task": [6, 25, 45, 46, 47], "tutori": [6, 20, 35, 41], "plenti": 6, "onlin": [6, 19, 20, 44, 45, 46, 47], "playbook": [6, 47], "consum": 6, "hassl": 6, "pgpool": 6, "ii": 6, "safe": [6, 14, 26, 27, 29], "puppet": 6, "solitari": 6, "hook": 6, "exam": [6, 8, 35], "docker": [6, 35], "awx": [6, 45], "strict": [6, 25, 42], "attach": [6, 31, 36], "scsi": 6, "target": [6, 10, 25, 26, 36, 47], "targetcli": 6, "lun": 6, "confus": [6, 33, 40], "digit": [6, 45], "ocean": 6, "larg": [6, 33], "small": [6, 10, 42], "ext4": [6, 11], "bigger": [6, 47], "50": [6, 47], "suffic": 6, "bakula": 6, "flatfil": 6, "web": [6, 19, 45], "apach": [6, 45, 47], "shop": 6, "weblog": 6, "wildfli": 6, "virtualhost": 6, "tld": 6, "serveralia": 6, "vip": 6, "haproxi": 6, "80": [6, 45], "rndc": 6, "listen": [6, 7, 26, 47], "receiv": [6, 26, 28, 42, 45, 47], "relai": 6, "doabl": 6, "mailhost1": 6, "mailhost2": 6, "mailhost": 6, "25": [6, 28, 45, 47], "snmp": 6, "commun": [6, 35, 38, 45], "filesystem": [6, 11, 47], "snmpd": 6, "514": 6, "inclus": 6, "graylog": 6, "elast": 6, "mongodb": 6, "fluentd": 6, "sky": 6, "design": [6, 47], "mock": 6, "koji": 6, "bodhi": 6, "project": [6, 8, 16, 17, 26], "faint": 6, "heart": 6, "popular": [6, 32, 42], "opensourc": 6, "gitea": 6, "tower": [6, 45], "vlan": 7, "everywher": 7, "refus": [7, 22], "snoop": 7, "127": [7, 16, 45], "allow_snoop": 7, "ffff": 7, "sandbox": [7, 43], "trust": [7, 42, 43, 47], "extract": [7, 39], "cloudflar": [7, 42], "addr": [7, 45], "853": 7, "2606": 7, "4700": 7, "1111": 7, "1001": 7, "quad9": 7, "149": 7, "112": 7, "tommi": [8, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 24, 26, 27, 28, 29, 30, 31, 32, 33, 34, 39, 40, 42, 43, 44], "nguyen": [8, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 24, 26, 27, 28, 29, 30, 31, 32, 33, 34, 39, 40, 42, 43, 44], "wonder": [8, 9], "went": [8, 46], "dnscrypt": [8, 16], "31": [8, 47], "kubernet": 8, "negativo": [8, 28], "renam": [8, 10, 33, 47], "nvidia": [8, 26, 27, 35], "wayland": [8, 27, 41], "emul": [8, 30, 35], "slate": [8, 28], "rewritten": 8, "11": [8, 45, 47], "04": 8, "gitlab": 8, "suck": 8, "gettingstart": 8, "virtualbox": [8, 36], "vmware": 8, "kvm": 8, "wouldn": [8, 45], "anywai": [8, 44, 45], "pulseaudio": [8, 12, 18], "pipewir": [8, 15, 43], "bup": 8, "readm": [8, 28, 33, 47], "motiv": 8, "revisit": 8, "train": [8, 45, 46, 47], "ex294": [8, 46], "websit": [8, 22, 37, 43], "credit": [8, 17, 19, 26, 30], "encourag": [8, 41], "ex407": [8, 35], "lisenet": 8, "antipattern": [8, 35, 42, 44], "blockifi": 8, "spotifi": 8, "prohibit": 8, "blocker": [8, 43], "gentoo": 8, "gdm": [8, 45], "proton": 8, "reliabl": 8, "ge": 8, "esni": 8, "vaporwar": 8, "moment": 8, "wine": [8, 28, 35], "tip": [8, 35], "vega": 8, "viva": [8, 33], "pcsx2": 8, "rpmfusion": [8, 28], "flatpak": 8, "git": [8, 26, 32, 35, 39], "workflow": [8, 10, 45], "rc1": 9, "tue": [10, 25, 47], "varieti": [10, 45], "advantag": [10, 42], "snapshot": 10, "written": [10, 20, 41], "borgmat": 10, "snapper": 10, "altern": [10, 17, 30, 33, 45], "gilbertchen": 10, "benchmark": [10, 47], "disadvantag": 10, "restor": [10, 36, 45], "lengthi": 10, "useless": 10, "duplicaci": 10, "superior": [10, 42], "undergo": 10, "transit": [10, 47], "exclud": 10, "pattern": [10, 35], "gopher": 10, "wildcard": 10, "gpg2": [10, 21], "binari": [10, 13, 20, 39, 43], "passphras": [10, 44, 47], "flag": [10, 17, 31, 43, 45], "cleartext": [10, 40], "crontab": [10, 11, 47], "700": 10, "gnupg": [10, 22], "ttl": 10, "34560000": 10, "Then": [10, 15, 16, 19, 24, 27, 28, 30, 33], "reloadag": 10, "gpgconf": 10, "front": 10, "ssh_auth_sock": 10, "interact": [10, 42, 45, 47], "ship": [10, 34, 42], "shell": [10, 26], "funtoo": 10, "explicitli": [10, 19, 28], "id_rsa": [10, 47], "invok": [10, 45], "startup": [10, 25, 34], "eval": 10, "some_gpg_key_id": 10, "fish": [10, 21], "futur": [10, 19], "4583": 10, "tracker": 10, "final": [10, 17, 42, 47], "job": [10, 33, 45, 47], "z": [10, 33, 47], "unam": [10, 28], "null": [10, 38, 45], "intend": [10, 26, 42], "systemd": [10, 11, 17, 25, 28, 41, 45, 47], "tab": [10, 19, 34], "flock": 10, "inhibit": 10, "wake": [10, 20, 28], "wakesystem": 10, "properti": [10, 40, 42], "weekli": 10, "timer": [10, 11], "weekly_backup": 10, "oncalendar": 10, "wantedbi": [10, 25], "oneshot": 10, "execstartpr": 10, "1m": 10, "execstart": [10, 25], "race": 10, "condit": [10, 47], "suspend": 10, "calendar": [10, 37], "per": [10, 45], "insid": [10, 15, 33], "monthli": [10, 37], "preced": 10, "fuser": 10, "hold": [10, 23, 45], "laptop": 10, "lid": 10, "inact": [10, 19, 47], "xfce": [10, 19, 41], "xfconf": [10, 26], "xfce4": [10, 26, 41], "ac": 10, "metadata": 10, "essenti": [10, 42, 43, 47], "verb": [10, 33], "v6": 10, "v5": 10, "central": 10, "remain": 10, "frequent": 10, "far": [10, 25, 43], "xattr": 10, "etckeep": 10, "helper": 10, "20store": 10, "20restor": 10, "vc": 10, "chcon": [10, 47], "source_dir": 10, "target_dir": 10, "pipefail": 10, "shopt": 10, "dotglob": 10, "snip": 10, "preserv": [10, 45], "rsync": 10, "avzax": 10, "content": [10, 16, 19, 36, 37, 42], "remot": [10, 12, 38, 41, 45], "propag": 10, "merg": [10, 33, 43], "url": [10, 47], "act": [10, 47], "addunlock": 10, "largefil": 10, "dot": 10, "dotfil": 10, "scrub": 11, "sudo": [11, 15, 26, 28, 29, 41, 45, 47], "df": 11, "repair": 11, "consult": [11, 30], "someon": 11, "cryptsetup": [11, 47], "luksopen": [11, 47], "sdax": 11, "myvolum": 11, "mapper": [11, 25, 47], "diagnost": [11, 26], "free": [11, 42, 44], "v1": 11, "v2": 11, "softphon": 12, "voip": 12, "corpor": [12, 37], "desk": 12, "phone": [12, 24], "jabber": 12, "sip": 12, "troublesom": 12, "crash": [12, 14, 15], "imposs": 12, "horrend": 12, "nois": 12, "crackl": 12, "skype": 12, "vpn": 12, "sound": [12, 33], "program": [12, 21, 29, 30, 33, 34, 45, 46, 47], "crypt32": 12, "xp": 12, "pol_function_overridedl": 12, "pol_install_corefont": 12, "pol_install_crypt32": 12, "pol_internal_installfont": 12, "msi": 12, "shortcut": 12, "communicatork9": 12, "hear": 12, "wineprefix": [12, 33], "corefont": 12, "trick": 12, "wide": [12, 16, 40, 43, 45], "udev": 12, "detect": [12, 16, 31], "tsched": 12, "pa": 12, "driver": [12, 17, 18, 27, 35], "ifexist": 12, "llvm": 13, "memorysanit": 13, "grab": 13, "lt": [13, 18, 28, 45, 47], "gt": [13, 18, 28, 45, 47], "py3f": 13, "tom": 13, "py": [13, 33], "cr": 13, "imap": [13, 40], "note": [13, 15, 16, 19, 21, 26, 28, 30, 31, 33, 38, 40, 41, 45, 46, 47], "deliber": 13, "pyf": 13, "assumpt": [13, 43], "rpm": [14, 28, 30], "athem": 14, "solanum": 14, "addition": 14, "firejail": 14, "libimobiledevic": [14, 24], "fluidsynth": [14, 28], "soundfont": 14, "push": 14, "freedoom": 14, "daemon": [14, 17, 25, 42], "charybdi": 14, "inspircd": 14, "reinvent": 14, "compli": 14, "fh": 14, "ppc64le": 14, "tracer": 15, "weird": [15, 26], "overtim": 15, "critic": 15, "networkmanag": [15, 38], "firefox": [15, 35, 43], "media": [15, 33, 47], "iat": 15, "1624024025": 15, "9470344": 15, "shown": 15, "unsupport": [15, 16], "tty": [15, 21, 47], "offlin": [15, 44, 45], "known": [16, 20, 34], "buggi": 16, "incomplet": 16, "capabl": [16, 25], "speak": 16, "resolvectl": 16, "statist": 16, "mislead": 16, "claim": [16, 40], "dnssec": 16, "although": [16, 17, 34, 40], "footgun": 16, "resolut": [16, 25], "undesir": [16, 26], "traffic": [16, 40, 45], "sent": [16, 45, 46, 47], "unencrypt": 16, "dns_server": 16, "llmnr": 16, "dnsovertl": 16, "stub": 16, "wander": 16, "scienc": 16, "qname": 16, "minim": [16, 42, 47], "dig": [16, 45], "qnamemintest": 16, "nl": [16, 20], "leak": 16, "dnsleaktest": 16, "json": [17, 45], "graph": 17, "mnt": [17, 24, 47], "obscur": 17, "structur": 17, "piotr": 17, "kr\u00f3l": 17, "stackoverflow": [17, 20, 26, 40], "answer": [17, 26, 42, 45, 46, 47], "difficult": 17, "due": [17, 29, 35, 40, 42, 43, 44], "cli": [17, 29, 44], "daemonless": 17, "rootless": [17, 42], "hacki": 17, "compos": 17, "matter": 17, "model": 17, "inher": 17, "flaw": [17, 43], "anyon": [17, 42, 47], "intent": 17, "terribli": 17, "insecur": [17, 44], "wrapper": [17, 43], "toolbox": 17, "scratch": 17, "pollut": 17, "devel": [17, 20, 26, 28, 47], "cheatsheetseri": 17, "owasp": 17, "cheatsheet": 17, "docker_security_cheat_sheet": 17, "containrrr": 17, "watchtow": [17, 44], "alsa": 18, "i686": [18, 28], "mesa": 18, "dri": [18, 26], "libglu": 18, "gtk2": [18, 26], "libsm": 18, "ini": [18, 33], "eof": [18, 45], "alsadevicenam": 18, "libmpg123path": 18, "libmpg123": 18, "icon": [18, 34], "hicolor": 18, "256x256": 18, "trya": 18, "alwaysdata": 18, "exec": [18, 26, 41], "game": [18, 33, 44], "genericnam": 18, "sega": 18, "categori": 18, "checkmark": 18, "nowadai": 19, "histor": [19, 29], "advic": [19, 42, 47], "individu": 19, "rst": 19, "browser": [19, 26, 42, 43, 45], "fixup": 19, "env": [19, 26, 33], "gtk_theme": 19, "adwaita": 19, "inconveni": [19, 22], "widget": 19, "expos": [19, 26, 42, 44], "systemusesdarkthem": 19, "flash": 19, "usercont": 19, "css": 19, "toolkit": 19, "legacyuserprofilecustom": 19, "stylesheet": 19, "chrome": 19, "profil": [19, 27, 42], "tridactyl": 19, "newtab": 19, "2510": 19, "1d1b19": 19, "fg": 19, "moz": 19, "bodi": 19, "element": [19, 44], "maricn": 19, "privaci": 19, "xoriginpolici": 19, "xorigintrimmingpolici": 19, "lead": [19, 42, 45], "increas": [19, 45], "garbag": 19, "collector": 19, "margin": 19, "mitig": 19, "high": [19, 42, 45, 47], "preload": 19, "discard": 19, "insert": 19, "mozilla": [19, 28, 42], "short": [20, 44], "summari": [20, 28, 45, 47], "johnathan": 20, "wrong": [20, 24, 26, 31, 41], "obtus": 20, "visit": 20, "snippet": 20, "godbolt": 20, "coliru": 20, "disassembl": 20, "plethora": [20, 44], "tag": [20, 21], "libmpc": 20, "contrib": 20, "download_prerequisit": 20, "ill": 20, "advis": 20, "objdir": 20, "pwd": 20, "multilib": 20, "cross": 20, "toolchain": 20, "src": 20, "myapp": 20, "along": [20, 45], "osdev": 20, "strang": 20, "assembl": 20, "todo": [20, 42], "research": [20, 41], "tandem": 21, "slightli": 21, "trickier": 21, "cdn": 21, "signingkei": 21, "armor": 21, "commit": [21, 43], "bump": 21, "interchang": 21, "gpg_tty": 21, "gx": [21, 26], "extens": 22, "topicon": 22, "goto": 22, "kde": [22, 26], "gone": 22, "libappind": 22, "legaci": 22, "clementin": 22, "discord": [22, 43], "dropbox": 22, "telegram": 22, "statusnotifieritem": 22, "appind": 22, "gset": 22, "wm": 22, "button": 22, "layout": [22, 36], "appmenu": 22, "statusnotiferitem": 22, "indic": [22, 31], "ubuntu": 22, "modal": 22, "past": [22, 26, 47], "gpg": [22, 44, 45], "pinentri": 22, "shift": [22, 23, 34], "freedesktop": 22, "ibu": 22, "panel": 22, "hotkei": 22, "tweak": 22, "dconf": 22, "xkb": 22, "swapescap": 22, "often": [22, 37, 42, 43, 44], "stall": 22, "mutter": 22, "annoi": [22, 34], "aliv": 22, "60000": 22, "dual": 23, "drive": 23, "grub2": [23, 35], "editenv": 23, "unset": [23, 47], "menu_auto_hid": 23, "tether": 24, "photo": 24, "fuse": 24, "ifus": [24, 44], "usbmuxd": 24, "libusbmuxd": 24, "fusermount": [24, 44], "said": [24, 27, 44], "devic": [24, 25, 26], "navig": 24, "dcim": 24, "easiest": 24, "mark": 24, "ipheth": 24, "modprob": [24, 28], "usb": 24, "bluetooth": 24, "antiviru": [25, 42], "pointless": 25, "ridicul": [25, 41], "auditor": 25, "profession": 25, "compliant": 25, "happi": 25, "epo": 25, "concern": [25, 42], "nogpg": 25, "installroot": 25, "lazybox": 25, "anacron": 25, "dmidecod": 25, "releasev": 25, "initscript": 25, "setenforc": 25, "nspawn": 25, "av": [25, 47], "unzip": [25, 33], "agentpackag": 25, "isectp": 25, "isec": 25, "threatprevent": 25, "isecav": 25, "usefanotifi": 25, "notifi": 25, "restartforceexitstatu": 25, "133": 25, "successexitstatu": 25, "limitnofil": 25, "100000": 25, "cap_ipc_lock": 25, "cap_audit_writ": 25, "cap_audit_control": 25, "cap_sys_modul": 25, "cap_syslog": 25, "cap_net_admin": 25, "journal": [25, 37], "guest": [25, 47], "watchdogsec": 25, "3min": 25, "slice": 25, "deleg": [25, 45], "tasksmax": 25, "16384": 25, "alloc": 25, "devicepolici": 25, "deviceallow": 25, "tun": 25, "rwm": 25, "char": 25, "blkext": 25, "luk": [25, 47], "loopback": [25, 45], "killmod": 25, "preset": [25, 39], "1h": 25, "29min": 25, "pid": [25, 47], "1084": 25, "finish": [25, 44], "280": 25, "3m": 25, "cgroup": 25, "diurn": 25, "chotel": 25, "dispatch": [25, 38], "endpoint": [25, 38], "47": 25, "c2": 25, "mfe": 25, "51": [25, 47], "2b": [25, 47], "blob": 25, "thirti": 25, "300": 25, "fc30": 25, "1b": 25, "ef": 25, "1909": 25, "1187": 25, "masvc": 25, "self_start": 25, "2432": 25, "macompatsvc": 25, "2434": 25, "2435": 25, "2436": 25, "2437": 25, "2438": 25, "2439": 25, "2440": 25, "sat": 26, "regard": [26, 35], "lack": [26, 29, 43], "2456": 26, "invoc": 26, "xg": 26, "printf": 26, "sd": 26, "lucasb": 26, "eyer": 26, "xz": 26, "lzma": 26, "wxgtk": 26, "wxgtk3": 26, "golang": 26, "zarat": 26, "mindepth": 26, "maxdepth": 26, "print": 26, "quot": 26, "bracket": 26, "95": 26, "pdavydov108": 26, "778": 26, "ncurs": 26, "clang": [26, 35], "favor": 26, "keepassxc": [26, 44], "smork": 26, "keepassnatmsg": 26, "keepass": 26, "cnf": 26, "sock": 26, "dbenv": 26, "alz": 26, "var_lib_t": 26, "rpm_var_lib_t": 26, "1461313": 26, "rebuilddb": 26, "gnome": [26, 35, 41, 47], "fullcompositionpipelin": 26, "14950": 26, "perchannel": 26, "stack": [26, 47], "render": 26, "arial": 26, "slight": 26, "pixel": 26, "rgb": 26, "thunar": 26, "tumbler": 26, "gstreamer1": [26, 28], "libav": [26, 28], "mysteri": 26, "ffmpeg": 26, "fork": [26, 33], "hood": [26, 42], "flatseal": 26, "gpu": [26, 27], "acceler": [26, 27], "xdg": 26, "portal": 26, "fuse_t": 26, "owner": 26, "therefor": 26, "vlc": 27, "cuda": 27, "decod": 27, "AND": 27, "hq": 27, "hwdec": 27, "serv": [28, 39, 45, 47], "reader": [28, 45, 46, 47], "sift": 28, "blog": [28, 30, 43], "philosophi": 28, "incompat": 28, "epoch": 28, "ugli": 28, "openh264": 28, "mpv": [28, 35], "vulkan": 28, "loader": 28, "akmod": 28, "empti": [28, 47], "390": 28, "415": [28, 47], "immedi": [28, 45], "preservevideomemoryalloc": 28, "procf": 28, "resum": 28, "forum": 28, "grubbi": 28, "arg": 28, "blacklist": 28, "nouveau": 28, "neither": 28, "intervent": [28, 47], "mok": 28, "secureboot": 28, "kmodtool": 28, "egeretto": 28, "keygen": [28, 47], "redhat": [28, 43, 45], "mokutil": 28, "public_kei": 28, "der": 28, "interfer": 29, "safer": 29, "consider": 29, "gear": 29, "poetri": 29, "pipx": 29, "interpret": [29, 40], "orphan": 29, "site": [29, 39, 42, 43, 45, 46], "statuslin": 30, "font": 30, "fish_function_path": 30, "repository_root": 30, "githubusercont": 30, "sha256": [30, 42, 47], "sha256sum": 30, "omf": 30, "bobthefish": 30, "endif": 30, "robertbas": 30, "bleed": 31, "faq": 31, "colour": 31, "excerpt": 31, "xterm": 31, "256color": 31, "underli": 31, "usual": [31, 42, 47], "infocmp": 31, "terminfo": 31, "256col": 31, "pathogen": 32, "autoload": 32, "lsso": 32, "tpo": 32, "pe": 32, "someus": 32, "helptag": 32, "resid": 33, "evil": 33, "remast": 33, "err08": 33, "overrun": 33, "drm": 33, "steam": 33, "fallout": 33, "gabriel": 33, "corona": 33, "laa": 33, "board": 33, "comprehens": [33, 42], "furthermor": [33, 44], "vc2019": 33, "steamapp": 33, "compatdata": 33, "22380": 33, "pfx": 33, "winetrick": 33, "vcrun2019": 33, "mo": 33, "j": [33, 36], "venter": 33, "movfs4l": 33, "redund": 33, "unmanag": [33, 42], "unvf": 33, "rerun": 33, "falloutnvlinuxlaunch": 33, "overlayf": 33, "9999": 33, "rootdir": 33, "mergerdir": 33, "moddatadir": 33, "moddir": 33, "0010": 33, "jip": 33, "nvse": 33, "prenam": 33, "depth": 33, "execdir": 33, "launch": 33, "fonvlaunchinmerg": 33, "rungameid": 33, "_overlay_": 33, "_mod": 33, "getislaa": 33, "loadord": 33, "fonv": 33, "esp": 33, "esm": 33, "falloutnv": 33, "optim": 33, "your_usernam": 33, "deu": 33, "ex": [33, 47], "vision": 33, "textur": 33, "utx": 33, "gmdxv9": 33, "dx": 33, "music": 33, "umx": 33, "hdtp": 33, "uax": 33, "plai": 33, "incorpor": 33, "dxvk": 33, "tinker": 33, "pane": 33, "compatibilitytool": 33, "user_set": 33, "lutri": 33, "thread": 33, "ge2": 33, "foundat": 33, "cutscen": 33, "movi": 33, "bulletstorm": 33, "mf": 33, "appid": 33, "protonfix": 33, "runtim": [33, 41, 43, 47], "inflex": 33, "xgamma": 34, "observ": 34, "xrandr": 34, "664": 34, "blue": 34, "touch": [34, 42, 47], "exhibit": 34, "symptom": 34, "advanc": 34, "colormap": 34, "uncheck": 34, "blank": 34, "starri": 34, "autostart": 34, "quick": [35, 44], "solid": 35, "doc": [35, 47], "felt": 35, "terribl": 35, "upcom": 35, "ex362": 35, "ex415": 35, "provis": 35, "freeipa": [35, 45, 46], "anti": [35, 47], "myth": 35, "euphem": 35, "review": [35, 45, 46, 47], "hurrican": 35, "electr": 35, "ipv6": 35, "tunnel": 35, "mingw": 35, "465": 35, "vnc": 35, "btrf": 35, "cisco": 35, "grub": 35, "iphon": [35, 44], "mcafe": 35, "pip": 35, "powerlin": 35, "tmux": 35, "xscreensav": 35, "contributor": [35, 37], "vm": [36, 45, 47], "mac": [36, 47], "assist": [36, 45], "softwareupd": 36, "fetch": 36, "hdiutil": 36, "cdr": 36, "7516m": 36, "spud": 36, "hf": 36, "dmg": 36, "noverifi": 36, "nobrows": 36, "mountpoint": 36, "asr": 36, "sharedsupport": 36, "basesystem": 36, "noprompt": 36, "eras": 36, "detach": 36, "udto": 36, "humor": 37, "repres": 37, "viewpoint": 37, "held": 37, "welcom": 37, "imprecis": 37, "speech": 37, "eskimo": 37, "hundr": 37, "snow": 37, "vital": 37, "walk": 37, "sink": 37, "sled": 37, "igloo": 37, "bucket": 37, "doubt": [37, 45], "savag": 37, "modern": [37, 43], "western": 37, "societi": 37, "bless": 37, "curs": 37, "debat": 37, "schedul": 37, "frequenc": 37, "yearli": 37, "deadlin": 37, "certainli": 37, "understood": 37, "fluent": 37, "speaker": 37, "microsoft": [37, 39], "accept": [37, 45], "reput": 37, "fool": 37, "handi": 37, "dandi": 37, "tabl": [37, 45], "june": 37, "1st": 37, "octob": 37, "shorter": 37, "thought": 37, "closest": 38, "220": 38, "82": 38, "ifnam": 38, "sit0": 38, "2001": 38, "470": 38, "1f18": 38, "96": 38, "64": [38, 47], "icmp": 38, "heartbeat": 38, "ping": [38, 45], "tunnelfix": 38, "tunnel_id": 38, "tunnelbrok": 38, "ipv4_end": 38, "php": 38, "tid": 38, "knowledg": [39, 45, 46, 47], "stephan": 39, "lavavej": 39, "employe": [39, 43], "w64": 39, "coreutil": 39, "sever": 39, "bat": 39, "wsl2": 39, "supposedli": 39, "hyper": 39, "exim4": 40, "implicit": 40, "debian": 40, "587": 40, "8314": 40, "entitl": 40, "transport": [40, 42], "submiss": 40, "starttl": 40, "memo": 40, "greater": [40, 47], "mua": 40, "msp": 40, "discourag": 40, "negoti": [40, 45], "appendix": 40, "conflat": 40, "smtp": [40, 42, 45], "briefli": [40, 42], "subsequ": [40, 43], "revok": [40, 47], "unfortun": 40, "rfc6409": 40, "reiter": 40, "signific": [40, 42], "phrase": 40, "negot": 40, "nonsens": 41, "xresourc": 41, "unnecessari": [41, 42, 44], "abyssm": 41, "frown": 41, "upon": [41, 45, 46, 47], "pathet": 41, "whatsoev": 41, "vino": 41, "tigervnc": 41, "vncserver": 41, "vncpasswd": 41, "xstartup": 41, "xdg_session_typ": 41, "x11": 41, "gdk_backend": 41, "logout": 41, "infosec": 42, "hygien": 42, "downplai": 42, "apathi": 42, "expens": 42, "costli": 42, "certif": 42, "certbot": 42, "revoc": 42, "renew": [42, 45], "speed": 42, "istlsfastyet": 42, "complaint": 42, "rebutt": 42, "doesmysiteneedhttp": 42, "extend": [42, 43], "dead": 42, "troi": 42, "hunt": 42, "vulner": [42, 43], "suspect": 42, "mitm": 42, "attack": [42, 44], "vector": 42, "whitelist": [42, 47], "damag": 42, "csp": 42, "unsaf": 42, "inlin": 42, "trade": 42, "strong": [42, 47], "badssl": 42, "scan": 42, "testssl": 42, "md5": 42, "sha1": [42, 44], "emploi": 42, "iter": [42, 47], "salt": [42, 47], "bruteforc": 42, "bcrypt": 42, "argon2": 42, "pbkdf2": 42, "xmpp": 42, "scram": 42, "strongli": 42, "digest": [42, 47], "plain": 42, "input": 42, "cap": 42, "moder": 42, "512": [42, 47], "denial": 42, "argu": 42, "obfusc": [42, 44], "reus": [42, 44], "rampant": 42, "strategi": 42, "educ": [42, 45, 46, 47], "javascript": 42, "meltdown": 42, "spectr": 42, "md": 42, "et": 42, "al": 42, "l1tf": 42, "pro": 42, "nutshel": 42, "degrad": [42, 45], "smt": 42, "loss": [42, 47], "low": [42, 44, 45], "action": [42, 47], "gain": [42, 47], "oxymoron": 42, "malwar": [42, 44], "escal": 42, "cve": 42, "5736": 42, "virus": 42, "superus": 42, "iron": [42, 43], "whole": 42, "avc": [42, 47], "audit2allow": [42, 47], "wholesal": 42, "similarli": [42, 43], "seccomp": 42, "danger": 42, "syscal": [42, 47], "henc": 42, "podman": 42, "ae": [42, 47], "byte": 42, "maximum": 42, "contenti": 43, "topic": 43, "overal": 43, "tackl": 43, "misconcept": 43, "ecosystem": [43, 47], "skillset": 43, "realiti": 43, "modicum": 43, "skill": 43, "analyz": [43, 44], "yet": 43, "martin": 43, "stranski": 43, "contribut": 43, "codebas": 43, "percept": 43, "repackag": 43, "redistribut": 43, "azur": 43, "forth": 43, "suppli": 43, "careless": 43, "2fa": 43, "api": 43, "bypass": 43, "micha\u0142": 43, "g\u00f3rny": 43, "nightmar": 43, "arbitrari": 43, "tradit": 43, "registri": 43, "flathub": 43, "downsid": 43, "sens": [43, 45], "weaken": 43, "broadest": 43, "proprietari": 43, "telemetri": 43, "spectrum": 43, "ublock": 43, "aim": 44, "wealth": 44, "lowercas": [44, 47], "uppercas": [44, 45, 47], "punctuat": 44, "chosen": 44, "dictionari": [44, 45], "ala": 44, "dicewar": 44, "entropi": 44, "dwelv": 44, "deep": [44, 47], "complex": 44, "weak": 44, "poor": [44, 47], "human": 44, "thumb": 44, "heurist": 44, "measur": 44, "stuf": 44, "strongbox": 44, "itun": 44, "poorli": 44, "unfriendli": 44, "bloatwar": 44, "icloud": 44, "myself": 44, "straightforward": 44, "markmcguil": 44, "newdatabas": 44, "instantli": 44, "haveibeenpwn": 44, "1password": 44, "paid": 44, "pwned": 44, "count": [44, 45, 47], "v7": 44, "kdbx": 44, "huge": 44, "comparison": [44, 47], "brain": 44, "plaintext": 44, "cryptograph": 44, "physic": [44, 47], "autotyp": 44, "autofil": 44, "defeat": 44, "wed": 45, "dec": 45, "prepar": [45, 46, 47], "certifi": [45, 46, 47], "specialist": [45, 46, 47], "youtub": [45, 46, 47], "playlist": [45, 46, 47], "studi": [45, 46, 47], "materi": [45, 46, 47], "disclos": [45, 46, 47], "violat": [45, 46, 47], "nda": [45, 46, 47], "tutor": [45, 46, 47], "teach": [45, 46, 47], "video": [45, 46, 47], "outlin": [45, 47], "evalu": [45, 47], "meet": [45, 47], "criteria": [45, 47], "rhca": [45, 47], "architect": [45, 47], "rhcsa": [45, 47], "anatomi": 45, "workshop": 45, "curriculum": 45, "fairli": [45, 47], "2gb": 45, "scale": 45, "gb": 45, "10k": 45, "3gb": 45, "swap": 45, "100k": 45, "50k": 45, "16gb": 45, "larger": 45, "idm1": 45, "192": [45, 47], "168": [45, 47], "idm2": 45, "reserv": 45, "compon": [45, 47], "realm": 45, "arpa": 45, "passw0rd": 45, "kerbero": 45, "kpasswd": 45, "john": 45, "smith": 45, "jsmith": 45, "bob": 45, "rufu": 45, "brufu": 45, "corp": 45, "larri": 45, "dufu": 45, "ldufu": 45, "helpdesk": 45, "robert": 45, "cole": 45, "rcole": 45, "stage": 45, "thoma": 45, "snyder": 45, "tsnyder": 45, "syshost": 45, "syshostmgt": 45, "sup3r": 45, "ecre7": 45, "stageus": 45, "tsynder": 45, "nonposix": 45, "centos123": 45, "krblastpwdchang": 45, "authtyp": 45, "authnam": 45, "krb5keytab": 45, "kerb": 45, "krbmethodnegoti": 45, "krbmethodk5passwd": 45, "krbservicenam": 45, "krbauthrealm": 45, "krbsavecredenti": 45, "entail": 45, "workplac": 45, "obviou": 45, "20190902000318": 45, "stuck": 45, "utc": 45, "princip": 45, "20190902000756": 45, "57": [45, 47], "elimin": 45, "rbac": 45, "partial": 45, "hbac": 45, "seen": 45, "total": [45, 47], "272": 45, "atd": 45, "apr": 45, "328": 45, "crond": [45, 47], "lrwxrwxrwx": 45, "jan": 45, "fingerprint": [45, 47], "70": [45, 47], "ksu": 45, "715": 45, "38": [45, 47], "154": 45, "155": 45, "polkit": 45, "postlogin": 45, "143": 45, "runus": 45, "smartcard": 45, "jun": 45, "mta": 45, "76": 45, "postfix": 45, "727": 45, "feb": 45, "214": 45, "shadowutil": 45, "566": 45, "40": [45, 47], "178": 45, "137": 45, "248": 45, "vlock": 45, "mgt": 45, "predefin": [45, 47], "procedur": [45, 47], "all_admin": 45, "corp_access": 45, "automout": 45, "automountmap": 45, "automountkei": 45, "nfs4": 45, "sec": 45, "krb5i": 45, "krb5p": 45, "mkhomedir_help": 45, "filter": [45, 47], "binder": 45, "password123": 45, "ansibl": [45, 46], "windowsfeatur": 45, "addsdeploy": 45, "addsforest": 45, "collid": 45, "prerequisit": 45, "smb": 45, "older": 45, "bsd": 45, "solari": 45, "omnio": 45, "slapi": 45, "ascii": 45, "dash": 45, "ipa0": 45, "sidgen": 45, "dnsforwardzon": 45, "examplead": 45, "dnsrecord": 45, "dnszone": 45, "system32": 45, "dnscmd": 45, "zoneadd": 45, "_ldap": 45, "_tcp": 45, "61": [45, 47], "opcod": 45, "noerror": 45, "14793": 45, "qr": 45, "aa": 45, "rd": 45, "ra": 45, "pseudosect": 45, "edn": 45, "86400": 45, "1200": 45, "12195": 45, "intiat": 45, "directiron": 45, "yyyyyyyyi": 45, "zzzzzzzzzz": 45, "adus": 45, "adgroup_extern": 45, "adusers_access": 45, "changelog": 45, "translat": [45, 47], "readabl": 45, "perl": 45, "vv": 45, "param": 45, "excut": 45, "posit": 45, "group_show": 45, "ipareplica": 45, "cookiejar": 45, "cooki": 45, "jar": 45, "cacert": 45, "login_kerbero": 45, "user_find": 45, "applicaton": 45, "tie": 45, "ui": [45, 47], "radiu": 45, "oauth": 45, "keycloak": 45, "readi": 46, "visudo": 47, "nopasswd": 47, "ener": 47, "identif": 47, "randomart": 47, "2048": 47, "node1": 47, "node2": 47, "inventori": 47, "ansible_host": 47, "uptim": 47, "yaml": 47, "suspici": 47, "malici": 47, "dir": 47, "night": 47, "negat": 47, "spool": 47, "app_access": 47, "luksformat": 47, "sdb1": 47, "luksdump": 47, "xt": 47, "plain64": 47, "spec": 47, "payload": 47, "offset": 47, "mk": 47, "1c": 47, "c8": 47, "5c": 47, "4f": 47, "c5": 47, "58": 47, "f8": 47, "90": 47, "3d": 47, "ed": 47, "97": 47, "d6": 47, "4b": 47, "e3": 47, "e8": 47, "c9": 47, "6b": 47, "a3": 47, "6c": 47, "4c": 47, "dd": 47, "63": 47, "2f": 47, "fd": 47, "e4": 47, "a1": 47, "72": 47, "a4": 47, "e7": 47, "0f": 47, "bc": 47, "119809": 47, "uuid": 47, "b2a181b0": 47, "4078": 47, "415e": 47, "94c2": 47, "18c51a886a3b": 47, "slot": 47, "1855886": 47, "c1": 47, "6f": 47, "fe": 47, "4e": 47, "ce": 47, "e5": 47, "68": 47, "fb": 47, "b1": 47, "a0": 47, "d1": 47, "cc": 47, "6e": 47, "d0": 47, "6d": 47, "b8": 47, "af": 47, "stripe": 47, "4000": 47, "isluk": 47, "xf": 47, "umount": 47, "luksclos": 47, "tang": 47, "clevi": 47, "crypttab": 47, "fstab": 47, "nbde": 47, "bound": 47, "presenc": 47, "essenc": 47, "stateless": 47, "decrypt": 47, "tangd": 47, "dracut": 47, "ynyn": 47, "yn": 47, "luksmeta": 47, "cryptab": 47, "_netdev": 47, "askpass": 47, "jose": 47, "jwk": 47, "gen": 47, "alg": 47, "es512": 47, "new_sig": 47, "ecmr": 47, "new_exc": 47, "old_sig": 47, "old_exc": 47, "plug": 47, "udisks2": 47, "sdc1": 47, "guard": 47, "yubikei": 47, "keyboard": 47, "usbguard": 47, "1d6b": 47, "0002": 47, "serial": 47, "0000": 47, "xhci": 47, "jep": 47, "6wzviqdj5vsetuy8patcnbkearevo2oqdplnd": 47, "g1ehgqdrl3dj9hvw9w2hdc": 47, "pk87pkzfe1wy25bq8k4": 47, "0003": 47, "3wo3xwdgen1hd5xm3psnl3p98klp1rutggq5hsxtf8k": 47, "0853": 47, "0111": 47, "realforc": 47, "87": 47, "tfzkrwqsnte7xb6rnxvrskg3d1fbz8azpvgpqomsino": 47, "046d": 47, "c52b": 47, "5zenofqhsazg43m4kgvcuwvu8c": 47, "gncy8rgdlwxc": 47, "vpk": 47, "8087": 47, "0a2b": 47, "ttrmrwxjil9goi": 47, "jzidueoz0yuiwwzblm8d7djvgxdg": 47, "e0": 47, "5986": 47, "2113": 47, "camera": 47, "8wiuhlrxrajhb9tp": 47, "q4nujsyob4cqfapuutwcr": 47, "amic": 47, "0e": 47, "0bda": 47, "0316": 47, "20120501030900000": 47, "usb3": 47, "crw": 47, "wg1msc3yzsmcsltngpjttjt2luvhnfu4gevvd3giuv4": 47, "3c": 47, "k9guue6cnbob2wb": 47, "kmz1hz1ugvi6rrqnkidvdmq": 47, "iu6qpiqudps2m89viixpdzxoj69o6tb9kpjnyawdvm": 47, "j0p3jeotlspqlacl0jebdt": 47, "k4mgto84skv39leysc": 47, "usb4": 47, "1050": 47, "0407": 47, "otp": 47, "fido": 47, "ccid": 47, "jai4elg4fej": 47, "gf1qxlwplej54mqmto16esmr8": 47, "unblock": 47, "poolici": 47, "reject": 47, "0600": 47, "1996": 47, "four": 47, "tightli": 47, "faillock": 47, "pwqualiti": 47, "authconfig": 47, "ci": 47, "passminlen": 47, "enablereqlow": 47, "enablerequpp": 47, "enablereqdigit": 47, "enablereqoth": 47, "enablefaillock": 47, "faillockarg": 47, "unlock_tim": 47, "900": 47, "updateal": 47, "odd": 47, "surround": 47, "pam_unix": 47, "pam_env": 47, "pam_faildelai": 47, "2000000": 47, "pam_faillock": 47, "preauth": 47, "pam_succeed_if": 47, "quiet": 47, "pam_localus": 47, "try_first_pass": 47, "quiet_success": 47, "authfail": 47, "pam_deni": 47, "user_unknown": 47, "pam_pwqual": 47, "local_users_onli": 47, "authtok_typ": 47, "use_authtok": 47, "pam_keyinit": 47, "pam_limit": 47, "pam_systemd": 47, "pam_oddjob_mkhomedir": 47, "use_uid": 47, "pam_pwhistori": 47, "auditd": 47, "subsystem": 47, "trail": 47, "logger": 47, "augenrul": 47, "auditctl": 47, "lost": 47, "backlog": 47, "buffer": 47, "interfield": 47, "euid": 47, "setuid": 47, "execv": 47, "asm": 47, "unistd_64": 47, "ausearch": 47, "aureport": 47, "8192": 47, "perm": 47, "auid": 47, "4294967295": 47, "b64": 47, "fa0": 47, "setresuid": 47, "proctitl": 47, "msg": 47, "1574027940": 47, "430": 47, "155902": 47, "7375646f007375002d": 47, "ld": 47, "inod": 47, "8413547": 47, "0100755": 47, "ouid": 47, "ogid": 47, "rdev": 47, "obj": 47, "system_u": 47, "ld_so_t": 47, "nametyp": 47, "cap_fp": 47, "0000000000000000": 47, "cap_fi": 47, "cap_f": 47, "cap_fver": 47, "4414497": 47, "0104111": 47, "sudo_exec_t": 47, "argc": 47, "a2": 47, "c000003e": 47, "5558e5c69c60": 47, "5558e5b54700": 47, "5558e5b52c80": 47, "ppid": 47, "13115": 47, "13146": 47, "suid": 47, "fsuid": 47, "egid": 47, "sgid": 47, "fsgid": 47, "pts5": 47, "se": 47, "comm": 47, "unconfined_r": 47, "unconfined_t": 47, "c0": 47, "c1023": 47, "pci": 47, "dss": 47, "thankfulli": 47, "loginuid": 47, "cont": 47, "dont": 47, "no32bit": 47, "chroni": 47, "nispom": 47, "ospp": 47, "v42": 47, "v31": 47, "stig": 47, "abus": 47, "inject": 47, "43": 47, "einval": 47, "71": 47, "99": 47, "golden": 47, "clock_settim": 47, "b32": 47, "0x0": 47, "giggl": 47, "yesterdai": 47, "todai": 47, "56": 47, "579": 47, "453": 47, "anomali": 47, "crypto": 47, "191": 47, "77": 47, "1110": 47, "14879": 47, "timedatex": 47, "14515": 47, "8491": 47, "6357": 47, "chronyd": 47, "2974": 47, "822": 47, "451": 47, "nazu": 47, "sess": 47, "oct": 47, "1571799698": 47, "833": 47, "107001": 47, "26065": 47, "system_r": 47, "sshd_t": 47, "csv": 47, "serial_num": 47, "event_kind": 47, "subj_prim": 47, "subj_sec": 47, "subj_kind": 47, "obj_prim": 47, "obj_sec": 47, "obj_kind": 47, "acct": 47, "nice": 47, "fill": 47, "errorn": 47, "frankli": 47, "standpoint": 47, "viru": 47, "dictat": 47, "clamav": 47, "getenforc": 47, "relabel": 47, "autorelabel": 47, "boolean": 47, "getsebool": 47, "httpd_unifi": 47, "httpd_sys_content_rw_t": 47, "httpd_enable_homedir": 47, "public_html": 47, "stock": 47, "httpd_sys_content_t": 47, "matchpathcon": 47, "surpris": 47, "norm": 47, "wipe": 47, "land": 47, "incorrectli": 47, "lz": 47, "user_tmp_t": 47, "1843": 47, "ssh_home_t": 47, "init_t": 47, "2709": 47, "efz": 47, "auxz": 47, "ftpd_t": 47, "public_content_t": 47, "sesearch": 47, "semant": 47, "ioctl": 47, "getattr": 47, "non_security_file_typ": 47, "setattr": 47, "unlink": 47, "uncommon": 47, "clever": 47, "ml": 47, "mc": 47, "__default__": 47, "tester": 47, "guest_u": 47, "guest_r": 47, "staff_r": 47, "sysadm_r": 47, "staff_u": 47, "sysadm_u": 47, "user_u": 47, "user_r": 47, "xguest_u": 47, "xguest_r": 47, "newrol": 47, "sysadmin": 47, "ON": 47, "ssh_sysadm_login": 47, "exec_cont": 47, "auditadm_exec_cont": 47, "dbadm_exec_cont": 47, "guest_exec_cont": 47, "logadm_exec_cont": 47, "secadm_exec_cont": 47, "staff_exec_cont": 47, "sysadm_exec_cont": 47, "user_exec_cont": 47, "xguest_exec_cont": 47, "setroubleshoot": 47, "sealert": 47, "sepolici": 47, "audit2whi": 47, "setool": 47, "seinfo": 47, "confin": 47, "pnv": 47}, "objects": {}, "objtypes": {}, "objnames": {}, "titleterms": {"contributor": 0, "auto": 1, "provis": 1, "freeipa": [2, 6], "content": [2, 3, 5, 6, 45, 46, 47], "overview": [2, 4, 45, 46, 47], "requir": [2, 3, 4, 5, 7], "tutori": [2, 3, 4, 5], "prefac": [2, 4, 5], "note": [2, 4, 5, 6], "recommend": [2, 4, 5, 6, 45], "dn": [2, 6, 7, 16], "deleg": 2, "server": [2, 4, 5, 6, 45], "setup": [2, 3, 5, 6, 7, 41], "packag": [2, 4, 43, 47], "option": 2, "instal": [2, 4, 7, 12, 20, 30, 45], "replica": 2, "autom": 2, "migrat": [2, 4], "upgrad": [2, 28], "el7": 2, "el8": 2, "el9": 2, "activ": [2, 45], "directori": [2, 4, 17, 26, 45], "trust": [2, 45], "disabl": [2, 4, 19, 22, 26, 34, 42], "anonym": [2, 4], "bind": [2, 4], "client": [2, 4, 42, 45], "enterpris": [2, 4, 35], "linux": [2, 4, 5, 35], "fedora": [2, 4, 5, 23, 28, 35], "mac": 2, "monterei": 2, "older": 2, "ventura": 2, "like": 2, "newer": 2, "gener": 2, "maco": [2, 35, 36], "suse": 2, "hbac": 2, "sudo": [2, 4], "legaci": 2, "solari": 2, "10": 2, "11": 2, "script": 2, "ad": [2, 5, 45], "doubl": 2, "uid": 2, "omnio": 2, "illumo": 2, "pam_hbac": 2, "conf": 2, "pam": [2, 47], "configur": [2, 4, 6, 18, 45, 47], "login": [2, 47], "user": [2, 4, 19, 26, 45], "domain": [2, 45], "resolut": 2, "order": 2, "odd": 2, "weird": 2, "remov": [2, 8], "realm": 2, "ipa": 2, "group": [2, 4, 45], "name": 2, "short": 2, "site": 2, "dc": 2, "": [2, 6], "6": 2, "default": 2, "suffix": [2, 20], "set": [2, 5, 21], "shell": 2, "kerbero": 2, "princip": 2, "hadoop": 2, "cloudera": 2, "manag": [2, 6, 43, 44, 45, 47], "woe": 2, "The": [2, 6, 37], "solut": 2, "forward": [2, 3], "dot": [2, 7], "log": [2, 4, 26], "audit": [2, 47], "certif": [2, 4, 6, 45], "renew": 2, "http": [2, 19, 42], "stuck": 2, "ca": 2, "relat": 2, "san": 2, "cm": 2, "commun": [2, 12], "issu": 2, "403": 2, "account": 2, "otp": 2, "enabl": [2, 30], "nat": 3, "router": 3, "interfac": 3, "firewalld": 3, "iptabl": 3, "nftabl": 3, "ipv6": [3, 38], "dhcp": [3, 5, 6], "openldap": 4, "ldap": [4, 45], "structur": 4, "add": [4, 22, 45], "via": [4, 12, 30], "ldif": 4, "nf": [4, 6], "export": 4, "home": [4, 45], "firewal": 4, "current": [4, 26], "releas": 4, "automount": [4, 45], "ons": 4, "member": 4, "referenti": 4, "integr": 4, "acl": 4, "password": [4, 22, 42, 44, 45], "polici": [4, 45], "pxe": [5, 6], "grub2": 5, "cobbler": 5, "tftp": 5, "isc": 5, "kea": 5, "web": 5, "httpd": 5, "up": [5, 6, 21, 44, 45], "grub": [5, 23], "distribut": 5, "rocki": 5, "cento": 5, "stream": 5, "custom": [5, 19], "color": 5, "background": 5, "special": 5, "submenu": 5, "system": [6, 22, 47], "administr": 6, "experi": 6, "complet": 6, "changelog": 6, "begin": 6, "kvm": 6, "hypervisor": 6, "connect": 6, "spin": 6, "vm": 6, "us": [6, 19, 22, 26, 39, 42, 44, 45, 47], "katello": 6, "spacewalk": 6, "two": 6, "databas": [6, 44], "iscsi": 6, "deploi": 6, "bacula": 6, "four": 6, "load": [6, 28], "balanc": 6, "postfix": 6, "nagio": 6, "syslog": 6, "document": 6, "your": [6, 44], "work": [6, 26, 28], "rpm": [6, 26], "build": [6, 20], "git": [6, 10, 21], "ansibl": [6, 47], "unbound": 7, "over": 7, "tl": 7, "errata": [8, 35], "articl": 8, "inform": [8, 45, 47], "upcom": 9, "annouc": 9, "backup": [10, 45], "btrf": [10, 11], "duplic": 10, "gpg": [10, 21], "keychain": 10, "unattend": 10, "annex": 10, "cisco": 12, "ip": [12, 26], "playonlinux": 12, "regular": 12, "wine": [12, 33], "puls": 12, "audio": 12, "clang": 13, "msan": 13, "line": 13, "number": 13, "format": 13, "copr": 14, "gzdoom": 14, "ircd": 14, "dnf": [15, 30], "interoper": 16, "systemd": 16, "resolv": 16, "docker": [17, 20], "chang": [17, 22], "data": 17, "podman": 17, "emul": 18, "kega": 18, "fusion": 18, "depend": 18, "No": 18, "sound": 18, "firefox": 19, "arkenfox": 19, "j": 19, "automat": [19, 28], "redirect": 19, "websit": 19, "type": 19, "an": [19, 43, 45], "invalid": [19, 20], "url": 19, "glitchi": 19, "ui": 19, "when": [19, 34], "gtk": 19, "theme": 19, "forc": 19, "dark": 19, "network": 19, "refer": 19, "spoofsourc": 19, "minim": [19, 22], "ram": 19, "usag": 19, "altern": [19, 26], "stylu": 19, "gcc": 20, "prerequisit": 20, "gmp": 20, "mpfr": 20, "mpc": 20, "instruct": 20, "cloudflar": 21, "github": 21, "page": 21, "gnome": 22, "tip": [22, 33], "trai": 22, "maxim": 22, "pidgin": 22, "curs": 22, "dialog": 22, "input": 22, "emoji": 22, "swap": [22, 26], "cap": 22, "lock": 22, "escap": 22, "program": 22, "respond": 22, "check": [22, 44], "timeout": 22, "menu": 23, "miss": 23, "iphon": 24, "mcafe": 25, "misc": 26, "ld_library_path": 26, "fish": [26, 30], "unabl": 26, "find": 26, "liblzma": 26, "wxwidget": 26, "updat": 26, "all": 26, "repositori": 26, "youcompletem": 26, "crash": 26, "due": 26, "libtinfo": 26, "so": 26, "version": 26, "mismatch": 26, "keepasshttp": 26, "longer": 26, "tcp": 26, "socket": 26, "mysql": 26, "selinux": [26, 42, 47], "i": [26, 34, 40, 43], "prevent": 26, "abrt": 26, "action": 26, "sav": 26, "from": 26, "write": 26, "access": [26, 45], "var": 26, "lib": 26, "desktop": 26, "environ": [26, 45], "upon": [26, 28], "xfce": [26, 34], "freez": 26, "until": 26, "you": 26, "switch": 26, "anoth": 26, "tty": 26, "font": 26, "video": 26, "thumbnail": 26, "stop": 26, "flatpak": [26, 43], "spotifi": 26, "close": 26, "statvf": 26, "run": 26, "1000": 26, "doc": 26, "fail": 26, "oper": 26, "permit": 26, "mpv": 27, "nvidia": 28, "driver": 28, "negativo17": 28, "multimedia": 28, "dkm": 28, "suspend": 28, "doesn": 28, "t": [28, 37, 43, 44], "modul": [28, 47], "35": 28, "sign": 28, "secur": [28, 35, 42, 47], "boot": 28, "pip": 29, "powerlin": 30, "oh": 30, "my": 30, "vim": [30, 32], "tmux": [30, 31], "plugin": 32, "out": 33, "memori": 33, "error": 33, "new": [33, 45], "vega": 33, "mod": 33, "loot": 33, "gmdx": 33, "proton": 33, "ge": 33, "mf_instal": 33, "caller": 33, "xscreensav": 34, "gamma": 34, "bright": 34, "too": 34, "high": 34, "unlock": 34, "fade": 34, "black": 34, "effect": 34, "conflict": 34, "screensav": 34, "guid": 35, "hint": 35, "train": 35, "resourc": [35, 45, 47], "miscellan": 35, "about": 35, "u": 35, "creat": [36, 45], "iso": 36, "imag": 36, "euphem": 37, "review": 37, "pleas": 37, "don": 37, "sai": 37, "timefram": 37, "hurrican": 38, "electr": 38, "tunnel": 38, "mingw": 39, "why": 39, "wsl": 39, "port": 40, "465": 40, "deprec": [40, 42], "vnc": 41, "anti": 42, "pattern": 42, "Not": 42, "insecur": [42, 43], "request": 42, "cipher": 42, "hash": 42, "function": 42, "arbitrari": 42, "length": 42, "side": 42, "mitig": 42, "contain": 42, "myth": 43, "most": 43, "maintain": 43, "can": [43, 44], "code": 43, "ar": 43, "unnecessari": 43, "middleman": 43, "good": 43, "compromis": 43, "back": [44, 45], "phone": 44, "against": 44, "hibp": 44, "dump": 44, "faq": 44, "isn": 44, "singl": 44, "bad": 44, "But": 44, "master": 44, "stolen": 44, "keylogg": 44, "ex362": 45, "exam": [45, 46, 47], "prep": [45, 46, 47], "hardwar": 45, "idm": 45, "scalabl": 45, "fault": 45, "toler": 45, "expir": 45, "implement": 45, "sso": 45, "kerber": 45, "servic": 45, "ha": 45, "author": 45, "secret": 45, "vault": 45, "roam": 45, "backend": 45, "extern": 45, "relationship": 45, "authent": [45, 47], "mainten": 45, "infrastructur": 45, "perform": 45, "without": 45, "interrupt": 45, "valu": 45, "rest": 45, "api": 45, "queri": 45, "idp": 45, "ex407": 46, "ex415": 47, "red": 47, "hat": 47, "engin": 47, "intrus": 47, "detect": 47, "encrypt": 47, "storag": 47, "restrict": 47, "usb": 47, "devic": 47, "pluggabl": 47, "binari": 47, "glossari": 47, "command": 47, "enforc": 47, "complianc": 47}, "envversion": {"sphinx.domains.c": 3, "sphinx.domains.changeset": 1, "sphinx.domains.citation": 1, "sphinx.domains.cpp": 9, "sphinx.domains.index": 1, "sphinx.domains.javascript": 3, "sphinx.domains.math": 2, "sphinx.domains.python": 4, "sphinx.domains.rst": 2, "sphinx.domains.std": 2, "sphinx": 60}, "alltitles": {"Contributors": [[0, "contributors"]], "Auto-Provisioning": [[1, "auto-provisioning"]], "FreeIPA": [[2, "freeipa"]], "Contents": [[2, "contents"], [3, "contents"], [5, "contents"], [45, "contents"], [46, "contents"], [47, "contents"]], "Overview": [[2, "overview"], [4, "overview"], [45, "overview"], [46, "overview"], [47, "overview"]], "Requirements": [[2, "requirements"], [3, "requirements"], [4, "requirements"], [5, "requirements"], [7, "requirements"]], "Tutorial Preface, Notes, and Recommendations": [[2, "tutorial-preface-notes-and-recommendations"], [4, "tutorial-preface-notes-and-recommendations"], [5, "tutorial-preface-notes-and-recommendations"]], "DNS": [[2, "dns"], [16, "dns"]], "Delegation": [[2, "delegation"]], "Server Setup": [[2, "server-setup"], [5, "server-setup"]], "Required Packages": [[2, "required-packages"]], "Optional Packages": [[2, "optional-packages"]], "Installation": [[2, "installation"], [4, "installation"], [7, "installation"]], "Replica": [[2, "replica"]], "Replica Automation": [[2, "replica-automation"]], "Server Migration/Upgrade": [[2, "server-migration-upgrade"]], "EL7 to EL8": [[2, "el7-to-el8"]], "EL8 to EL9": [[2, "el8-to-el9"]], "Active Directory Trust": [[2, "active-directory-trust"]], "Disable Anonymous Bind": [[2, "disable-anonymous-bind"]], "Client Setup": [[2, "client-setup"]], "Enterprise Linux & Fedora": [[2, "enterprise-linux-fedora"]], "Mac Clients": [[2, "mac-clients"]], "Monterey and older": [[2, "monterey-and-older"]], "Ventura and likely newer": [[2, "ventura-and-likely-newer"]], "General macOS Notes": [[2, "general-macos-notes"]], "SUSE": [[2, "suse"]], "HBAC": [[2, "hbac"]], "SUDO": [[2, "sudo"], [4, "sudo"]], "Legacy Client Setup": [[2, "legacy-client-setup"]], "Solaris 10": [[2, "solaris-10"], [2, "id2"]], "Solaris 11": [[2, "solaris-11"], [2, "id3"]], "Automated Scripts": [[2, "automated-scripts"]], "AD Trust Double UID": [[2, "ad-trust-double-uid"]], "OmniOS/Illumos": [[2, "omnios-illumos"]], "Legacy HBAC": [[2, "legacy-hbac"]], "Omnios": [[2, "omnios"]], "pam_hbac.conf": [[2, "pam-hbac-conf"]], "PAM Configuration": [[2, "pam-configuration"]], "Login with AD Users to Legacy Clients": [[2, "login-with-ad-users-to-legacy-clients"]], "Legacy Active Directory Trust Notes": [[2, "legacy-active-directory-trust-notes"]], "Domain Resolution Order Oddness": [[2, "domain-resolution-order-oddness"]], "Solaris Weirdness": [[2, "solaris-weirdness"]], "Domain Options": [[2, "domain-options"]], "Remove @realm for AD users": [[2, "remove-realm-for-ad-users"]], "AD and IPA group names with short names": [[2, "ad-and-ipa-group-names-with-short-names"]], "Sites and AD DC\u2019s": [[2, "sites-and-ad-dc-s"]], "Enterprise Linux 6 SUDO and Default Domain Suffix": [[2, "enterprise-linux-6-sudo-and-default-domain-suffix"]], "Set Default Shell for AD Users": [[2, "set-default-shell-for-ad-users"]], "Automated Kerberos Principals": [[2, "automated-kerberos-principals"]], "Hadoop/Cloudera": [[2, "hadoop-cloudera"]], "Cloudera Manager Woes": [[2, "cloudera-manager-woes"]], "The Solution": [[2, "the-solution"]], "DNS Forwarding": [[2, "dns-forwarding"]], "DNS Forwarding to DoT": [[2, "dns-forwarding-to-dot"]], "Logging": [[2, "logging"]], "Audit Logs": [[2, "audit-logs"]], "Certificates": [[2, "certificates"], [4, "certificates"]], "Renewed IPA HTTP Certificate Stuck": [[2, "renewed-ipa-http-certificate-stuck"]], "CA Related Certificates Stuck": [[2, "ca-related-certificates-stuck"]], "Default Certificates with SAN": [[2, "default-certificates-with-san"]], "CMS Communication Issues (403)": [[2, "cms-communication-issues-403"]], "Kerberos": [[2, "kerberos"]], "Accounts with OTP Enabled": [[2, "accounts-with-otp-enabled"]], "NAT/Router": [[3, "nat-router"]], "Tutorial": [[3, "tutorial"]], "Interface Setup": [[3, "interface-setup"]], "FirewallD": [[3, "firewalld"]], "iptables": [[3, "iptables"]], "nftables": [[3, "nftables"]], "IPv6 Forwarding": [[3, "ipv6-forwarding"]], "DHCP": [[3, "dhcp"]], "OpenLDAP": [[4, "openldap"]], "Packages": [[4, "packages"]], "LDAP Server Configuration": [[4, "ldap-server-configuration"]], "LDAP Structure": [[4, "ldap-structure"]], "Add Users via Migration": [[4, "add-users-via-migration"]], "Add Users via LDIF": [[4, "add-users-via-ldif"]], "NFS Export Home Directories": [[4, "nfs-export-home-directories"]], "Firewall": [[4, "firewall"]], "Client": [[4, "client"]], "Enterprise Linux/Current Fedora Releases": [[4, "enterprise-linux-current-fedora-releases"]], "Automounting Home Directories": [[4, "automounting-home-directories"]], "LDAP Structure Add-ons": [[4, "ldap-structure-add-ons"]], "Member Groups": [[4, "member-groups"]], "Referential Integrity": [[4, "referential-integrity"]], "ACL": [[4, "acl"]], "Disable Anonymous Binding": [[4, "disable-anonymous-binding"]], "LDAP Logging": [[4, "ldap-logging"]], "Password Policy": [[4, "password-policy"]], "PXE (with grub2)": [[5, "pxe-with-grub2"]], "Cobbler": [[5, "cobbler"]], "TFTP": [[5, "tftp"]], "DHCP (ISC)": [[5, "dhcp-isc"]], "DHCP (Kea)": [[5, "dhcp-kea"]], "Web Server (httpd)": [[5, "web-server-httpd"]], "Setting up Grub": [[5, "setting-up-grub"]], "Adding Distributions": [[5, "adding-distributions"]], "Rocky Linux": [[5, "rocky-linux"]], "CentOS Stream": [[5, "centos-stream"]], "Fedora": [[5, "fedora"], [35, null]], "Customizing Grub": [[5, "customizing-grub"]], "Colors and Backgrounds": [[5, "colors-and-backgrounds"]], "Special Submenus": [[5, "special-submenus"]], "The System Administrator Experience": [[6, "the-system-administrator-experience"]], "Recommendations": [[6, "recommendations"]], "Certification Completions": [[6, "certification-completions"]], "Notes and Changelog": [[6, "notes-and-changelog"]], "Begin": [[6, "begin"]], "Setup a KVM Hypervisor": [[6, "setup-a-kvm-hypervisor"]], "DHCP and DNS": [[6, "dhcp-and-dns"]], "Server and Content Management": [[6, "server-and-content-management"]], "Connect Content Management to Hypervisor": [[6, "connect-content-management-to-hypervisor"]], "Spin Up VM\u2019s Using Katello/Spacewalk or PXE Server": [[6, "spin-up-vm-s-using-katello-spacewalk-or-pxe-server"]], "Setup FreeIPA": [[6, "setup-freeipa"]], "Spin Up Two VM\u2019s for Databases": [[6, "spin-up-two-vm-s-for-databases"]], "Spin Up Configuration Management": [[6, "spin-up-configuration-management"]], "Spin Up VM for NFS/iSCSI": [[6, "spin-up-vm-for-nfs-iscsi"]], "Deploy Bacula Server": [[6, "deploy-bacula-server"]], "Deploy Two/Four VM\u2019s": [[6, "deploy-two-four-vm-s"]], "Deploy Load Balancer VM": [[6, "deploy-load-balancer-vm"]], "Deploy Postfix VM": [[6, "deploy-postfix-vm"]], "Setup Nagios VM": [[6, "setup-nagios-vm"]], "Setup Syslog VM": [[6, "setup-syslog-vm"]], "Document Your Work": [[6, "document-your-work"]], "RPM Build Server": [[6, "rpm-build-server"]], "Git Server": [[6, "git-server"]], "Ansible": [[6, "ansible"]], "Unbound": [[7, "unbound"]], "Setup": [[7, "setup"], [41, "setup"]], "DNS over TLS (DoT)": [[7, "dns-over-tls-dot"]], "Errata": [[8, "errata"], [35, null]], "Removed articles": [[8, "removed-articles"]], "Removed information": [[8, "removed-information"]], "Upcoming": [[9, "upcoming"]], "Annoucements": [[9, "annoucements"]], "Backups": [[10, "backups"]], "BTRFS": [[10, "btrfs"], [11, "btrfs"]], "Duplicity": [[10, "id1"]], "GPG": [[10, "gpg"], [21, "gpg"]], "Keychain": [[10, "keychain"]], "Unattended backups": [[10, "unattended-backups"]], "git-annex": [[10, "id3"]], "Cisco IP Communicator": [[12, "cisco-ip-communicator"]], "Installing via PlayOnLinux": [[12, "installing-via-playonlinux"]], "Installing via Regular Wine": [[12, "installing-via-regular-wine"]], "Pulse Audio": [[12, "pulse-audio"]], "Clang": [[13, "clang"]], "MSan line numbers": [[13, "msan-line-numbers"]], "clang-format": [[13, "clang-format"]], "COPR": [[14, "copr"]], "gzdoom": [[14, "gzdoom"]], "ircd": [[14, "ircd"]], "dnf": [[15, "dnf"]], "Interoperability with systemd-resolved": [[16, "interoperability-with-systemd-resolved"]], "Docker": [[17, "docker"], [20, "docker"]], "Changing the data directory": [[17, "changing-the-data-directory"]], "Podman": [[17, "podman"]], "Emulators": [[18, "emulators"]], "Kega Fusion": [[18, "kega-fusion"]], "Dependencies": [[18, "dependencies"]], "Configuration": [[18, "configuration"]], "No Sound?": [[18, "no-sound"]], "Firefox": [[19, "firefox"]], "arkenfox/user.js": [[19, "arkenfox-user-js"]], "Disable automatic redirect to a website if typing an invalid URL": [[19, "disable-automatic-redirect-to-a-website-if-typing-an-invalid-url"]], "Glitchy UI when using custom GTK theme": [[19, "glitchy-ui-when-using-custom-gtk-theme"]], "Forcing dark theme": [[19, "forcing-dark-theme"]], "Disable network.http.referer.spoofSource": [[19, "disable-network-http-referer-spoofsource"]], "Minimizing ram usage": [[19, "minimizing-ram-usage"]], "Alternative to Stylus": [[19, "alternative-to-stylus"]], "GCC": [[20, "gcc"]], "Installing prerequisites: GMP, MPFR, MPC": [[20, "installing-prerequisites-gmp-mpfr-mpc"]], "Building": [[20, "building"]], "\u201cinvalid instruction suffix for\u201d": [[20, "invalid-instruction-suffix-for"]], "Git": [[21, "git"]], "Setting up Cloudflare and Github pages": [[21, "setting-up-cloudflare-and-github-pages"]], "GNOME Tips": [[22, "gnome-tips"]], "System Tray": [[22, "system-tray"]], "Add minimize/maximize": [[22, "add-minimize-maximize"]], "Pidgin": [[22, "pidgin"]], "Use curses dialog for password input": [[22, "use-curses-dialog-for-password-input"]], "Disable emoji input": [[22, "disable-emoji-input"]], "Swap caps lock and escape": [[22, "swap-caps-lock-and-escape"]], "Changing \u201cProgram not responding\u201d check timeout": [[22, "changing-program-not-responding-check-timeout"]], "GRUB": [[23, "grub"]], "Fedora Grub Menu Missing": [[23, "fedora-grub-menu-missing"]], "iPhone": [[24, "iphone"]], "McAfee": [[25, "mcafee"]], "Misc": [[26, "misc"]], "Using LD_LIBRARY_PATH in Fish": [[26, "using-ld-library-path-in-fish"]], "Unable to find LibLZMA": [[26, "unable-to-find-liblzma"]], "Unable to find wxWidgets": [[26, "unable-to-find-wxwidgets"]], "Update all repositories in the current directory": [[26, "update-all-repositories-in-the-current-directory"]], "YouCompleteMe crashes due to libtinfo.so version mismatch": [[26, "youcompleteme-crashes-due-to-libtinfo-so-version-mismatch"]], "KeePassHttp no longer works": [[26, "keepasshttp-no-longer-works"]], "Disable TCP/IP and use sockets for MySQL": [[26, "disable-tcp-ip-and-use-sockets-for-mysql"]], "SELinux is preventing abrt-action-sav from write access on the directory /var/lib/rpm": [[26, "selinux-is-preventing-abrt-action-sav-from-write-access-on-the-directory-var-lib-rpm"]], "Swapping Desktop Environments": [[26, "swapping-desktop-environments"]], "Upon logging into XFCE, desktop freezes until you switch to another TTY": [[26, "upon-logging-into-xfce-desktop-freezes-until-you-switch-to-another-tty"]], "Alternative fonts": [[26, "alternative-fonts"]], "Video thumbnails": [[26, "video-thumbnails"]], "Stop Flatpak Spotify from crashing upon close": [[26, "stop-flatpak-spotify-from-crashing-upon-close"]], "statvfs \u2018/run/user/1000/doc\u2019 failed: Operation not permitted": [[26, "statvfs-run-user-1000-doc-failed-operation-not-permitted"]], "mpv": [[27, "mpv"]], "Nvidia drivers": [[28, "nvidia-drivers"]], "Negativo17": [[28, "negativo17"]], "Multimedia": [[28, "multimedia"]], "Nvidia": [[28, "nvidia"]], "DKMS": [[28, "dkms"]], "Suspend doesn\u2019t work": [[28, "suspend-doesn-t-work"]], "Module doesn\u2019t load upon upgrade to Fedora 35": [[28, "module-doesn-t-load-upon-upgrade-to-fedora-35"]], "Automatically signing modules for secure boot": [[28, "automatically-signing-modules-for-secure-boot"]], "pip": [[29, "pip"]], "Powerline": [[30, "powerline"]], "Installing via dnf": [[30, "installing-via-dnf"]], "Enabling powerline (installed via dnf)": [[30, "enabling-powerline-installed-via-dnf"]], "Fish": [[30, "fish"]], "oh-my-fish": [[30, "oh-my-fish"]], "vim": [[30, "vim"], [32, "vim"]], "tmux": [[30, "tmux"], [31, "tmux"]], "Plugins": [[32, "plugins"]], "Wine Tips": [[33, "wine-tips"]], "Out of memory errors": [[33, "out-of-memory-errors"]], "New Vegas": [[33, "new-vegas"]], "Modding": [[33, "modding"]], "LOOT": [[33, "loot"]], "GMDX": [[33, "gmdx"]], "Proton": [[33, "proton"]], "wine-ge": [[33, "wine-ge"]], "mf_install": [[33, "mf-install"]], "proton-caller": [[33, "proton-caller"]], "XScreenSaver": [[34, "xscreensaver"]], "Gamma or brightness is too high when unlocking": [[34, "gamma-or-brightness-is-too-high-when-unlocking"]], "Disable fade to black effect": [[34, "disable-fade-to-black-effect"]], "Conflict with xfce-screensaver": [[34, "conflict-with-xfce-screensaver"]], "Linux Guide and Hints": [[35, "linux-guide-and-hints"]], "Training Resources": [[35, null]], "Enterprise Linux": [[35, null]], "Security": [[35, null]], "Miscellaneous": [[35, null]], "MacOS": [[35, null]], "About Us": [[35, null]], "Create macOS ISO Images": [[36, "create-macos-iso-images"]], "The Euphemism Review": [[37, "the-euphemism-review"]], "Please don\u2019t say \u201ctimeframe\u201d": [[37, "please-don-t-say-timeframe"]], "Hurricane Electric IPv6 Tunnel": [[38, "hurricane-electric-ipv6-tunnel"]], "MinGW": [[39, "mingw"]], "Why not use WSL?": [[39, "why-not-use-wsl"]], "Is port 465 deprecated?": [[40, "is-port-465-deprecated"]], "VNC": [[41, "vnc"]], "Anti-patterns": [[42, "anti-patterns"]], "Not using HTTPS": [[42, "not-using-https"]], "Insecure requests": [[42, "insecure-requests"]], "Using insecure ciphers": [[42, "using-insecure-ciphers"]], "Password security": [[42, "password-security"]], "Using deprecated hashing functions": [[42, "using-deprecated-hashing-functions"]], "Arbitrary password lengths": [[42, "arbitrary-password-lengths"]], "Client-side hashing": [[42, "client-side-hashing"]], "Disabling mitigations": [[42, "disabling-mitigations"]], "Disabling SELinux": [[42, "disabling-selinux"]], "Containers": [[42, "containers"]], "Myths": [[43, "myths"]], "Most package maintainers can\u2019t code": [[43, "most-package-maintainers-can-t-code"]], "Package managers are an unnecessary and insecure middleman": [[43, "package-managers-are-an-unnecessary-and-insecure-middleman"]], "Is Flatpak a good compromise?": [[43, "is-flatpak-a-good-compromise"]], "Password management": [[44, "password-management"]], "Backing your databases up to your phone": [[44, "backing-your-databases-up-to-your-phone"]], "Checking your passwords against a HIBP dump": [[44, "checking-your-passwords-against-a-hibp-dump"]], "FAQ": [[44, "faq"]], "Isn\u2019t using a single password bad?": [[44, "isn-t-using-a-single-password-bad"]], "But your master password can be stolen by a keylogger": [[44, "but-your-master-password-can-be-stolen-by-a-keylogger"]], "EX362 Exam Prep": [[45, "ex362-exam-prep"]], "Exam Information": [[45, "exam-information"], [47, "exam-information"]], "Resources": [[45, "resources"], [47, "resources"]], "Hardware Recommendations": [[45, "hardware-recommendations"]], "IdM Server Installation and Configuration": [[45, "idm-server-installation-and-configuration"]], "Install IdM in a scalable, fault tolerant environment": [[45, "install-idm-in-a-scalable-fault-tolerant-environment"]], "Creating Users, Groups, and Policies": [[45, "creating-users-groups-and-policies"]], "New Passwords Expired": [[45, "new-passwords-expired"]], "Implement a SSO": [[45, "implement-a-sso"]], "IdM Client Installation and Configuration": [[45, "idm-client-installation-and-configuration"]], "Install and configure IdM Clients": [[45, "install-and-configure-idm-clients"]], "Configure Kerberized services": [[45, "configure-kerberized-services"]], "IdM HA Configuration": [[45, "idm-ha-configuration"]], "Configure and manage a certificate authority": [[45, "configure-and-manage-a-certificate-authority"]], "Create Secret Vaults": [[45, "create-secret-vaults"]], "IdM Users and Policies Management": [[45, "idm-users-and-policies-management"]], "Configure Policies and User Access": [[45, "configure-policies-and-user-access"]], "Configure roaming/automounted home directories": [[45, "configure-roaming-automounted-home-directories"]], "Configure IdM as an LDAP backend for external services": [[45, "configure-idm-as-an-ldap-backend-for-external-services"]], "Creating Trust with AD Domain": [[45, "creating-trust-with-ad-domain"]], "Create trust relationships with Active Directory": [[45, "create-trust-relationships-with-active-directory"]], "Authenticate users with an Active Directory domain": [[45, "authenticate-users-with-an-active-directory-domain"]], "IdM maintenance": [[45, "idm-maintenance"]], "Back up an IdM infrastructure": [[45, "back-up-an-idm-infrastructure"]], "Perform a backup without interruption of services": [[45, "perform-a-backup-without-interruption-of-services"]], "Value Add": [[45, "value-add"]], "Use the REST api to query IdM": [[45, "use-the-rest-api-to-query-idm"]], "Implement an IdP": [[45, "implement-an-idp"]], "EX407 Exam Prep": [[46, "ex407-exam-prep"]], "EX415 Exam Prep": [[47, "ex415-exam-prep"]], "Use Red Hat Ansible Engine": [[47, "use-red-hat-ansible-engine"]], "Configure Intrusion Detection": [[47, "configure-intrusion-detection"]], "Configure Encrypted Storage": [[47, "configure-encrypted-storage"]], "Restrict USB Devices": [[47, "restrict-usb-devices"]], "Manage System Login Security using Pluggable Authentication Modules (PAM)": [[47, "manage-system-login-security-using-pluggable-authentication-modules-pam"]], "Configure System Auditing": [[47, "configure-system-auditing"]], "Configure SELinux": [[47, "configure-selinux"]], "Package & Binary Glossary": [[47, "package-binary-glossary"]], "Command Glossary": [[47, "command-glossary"]], "Enforce Security Compliance": [[47, "enforce-security-compliance"]]}, "indexentries": {}})
\ No newline at end of file
diff --git a/security/antipatterns.html b/security/antipatterns.html
index 31496151..88537643 100644
--- a/security/antipatterns.html
+++ b/security/antipatterns.html
@@ -288,7 +288,7 @@ 
    Containers
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/security/myths.html b/security/myths.html
index b870febf..75d9d70b 100644
--- a/security/myths.html
+++ b/security/myths.html
@@ -168,7 +168,7 @@ 
    Is Flatpak a good compromise?
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/security/passwords.html b/security/passwords.html
index 2bbf2722..9a33d7df 100644
--- a/security/passwords.html
+++ b/security/passwords.html
@@ -184,7 +184,7 @@ 
    But your master password can be stolen by a keylogger
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/training/ex362.html b/training/ex362.html
index 2815e434..34a1a9a6 100644
--- a/training/ex362.html
+++ b/training/ex362.html
@@ -1088,7 +1088,7 @@ 
    Implement an IdP
 
   
    
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
    
diff --git a/training/ex407.html b/training/ex407.html
index be2826fc..1b90a772 100644
--- a/training/ex407.html
+++ b/training/ex407.html
@@ -134,7 +134,7 @@ 
    Overview
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.
    
   
diff --git a/training/ex415.html b/training/ex415.html
index 9c93a237..250d5f32 100644
--- a/training/ex415.html
+++ b/training/ex415.html
@@ -846,7 +846,7 @@ 
    Enforce Security Com
 
   
    
     
    © Copyright 2022, remyabel, nazunalika.
-      Last updated on Dec 07, 2023.
+      Last updated on Jan 07, 2024.
       
    
     
    We are not affiliated with Red Hat®, Fedora®, Rocky Linux® or CentOS®. Red Hat®, Fedora® and CentOS® are registered trademarks of Red Hat, Inc. in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. Rocky Linux® is a registered trademark of the Rocky Enterprise Software Foundation. Inc. in the United States.