[debian-lan-devel] Installation report

[Andreas B. Mundt]

Hi Julien,

On Wed, May 01, 2013 at 11:40:41PM +0200, Julien Lambot wrote:
> PS:
> - Monitoring (icinga/munin) needs a valid kerberos user. What's the best
> way to access it remotely?
> It seems it's not recommended/possible to have fall back with the kerberos
> AuthType.

Here in my virtual test network, I can point iceweasel to the
mainserver IP https://10.0.0.10/icinga and if I enter the user "admin"
and the coresponding kerbereos password I am allowed to see the icinga
stuff.  However, so far there has not been taken care about remote
access (also no firewalling).  I assumed that the mainserver is behind
some gateway/router and not drectly connected to the internet.

> May be I will leave this on a basic AuthType with only ldap auth or through
> the vpn.
> - Has anyone already tested a
> fai softupdate for the workstations?

Not especially for wheezy, but in my squeeze setup I had no problems
so far.

Best regards,

     Andi