text:
Advanced Search
Windows Insider
Follow these steps and have your users logging on at their Linux/Unix desktops with their Windows accounts.
A Modest Proposal
With this in mind, I set out to accomplish what I considered to be a fairly straightforward goal: Configure the Linux desktops and servers in my office to accept logins using accounts stored in AD. My metrics for success were relatively modest. I wanted to sit down at a Linux desktop, enter a set of Windows credentials, and get a KDE or Gnome desktop with a home directory that has appropriate access permissions.
Achieving this goal turned out to be a bit more challenging than anticipated. After spending lots of time reading through docs and chasing down hints and configuration snippets, I finally found the right combination of settings for all the different Linux flavors in my lab. The results were gratifying, though. I had seamless authentication with AD that could be used for initial login, file sharing, secure shell (ssh) and other network services.
To save you a little time in case you decide to give this interoperability experiment a try, I put together notes and screen shots that show how to configure AD authentication for Fedora Core 2 (and the Core 3 beta). To see examples and instructions for these other Linux flavors: SuSE Linux 9.1 Professional, Mandrake 10.1 and Xandros Desktop 2.5, visit my Web site at www.billboswellconsulting.com/linux-ad.html.
If you're a bottom-line kind of person, here's a quick summary. Xandros 2.5 has the slickest AD configuration of the bunch. Mandrakelinux and Fedora are fairly simple once you know where to add a few settings. SuSE required the most work, but Novell should have this corrected in Novell Linux Desktop.
In the examples here, I used a Windows Server 2003 domain called Company.com, flat name COMPANY. I retained the default Windows 2003 security settings, including SMB signing, LDAP signing and anonymous logon restrictions. I set the domain and forest functional level to Windows Server 2003 and left the Authentication Users group in Pre-Windows 2000 Compatible Access, the default Windows 2003 setting.
I installed Fedora Core 2 with the Workstation package options. During setup, I assigned a unique computer name of Fedora.company.com. Following the installation, I updated all packages using Yum, the Yellowdog Updater, Modified. (Other Linux flavors use different package managers.)
Initial Configuration
Regardless of Linux flavor, you'll work with the same elements when configuring AD authentication:
To configure winbind in Fedora, launch the authconfig utility (see Figure 1) as superuser (root). Fedora has a GUI utility—system-config-authentication—but it doesn't make all the required configuration settings.
Check the Use Winbind option, then click Next. The Winbind Settings screen opens (Figure 2.) Fill in the following settings (the entries you make in this screen aren't case sensitive):
There's a Join Domain option, but don't select it. It might not work, and you won't get sufficient feedback to help resolve problems. For now, just click OK to save the changes you just entered.
When the authconfig window closes, the console window should show that winbind starts. If this fails, try starting the service manually with the following command:
/etc/init.d/winbind start
If winbind starts, it will appear on a ps process list like this:
# ps -A | grep winbind
3132 ? 00:00:00 winbindd
3133 ? 00:00:00 winbindd
If you get an error, search the Internet with the error message. It may take a while, but nearly always someone with a similar error will have posted a solution.
Configuration Files
Authconfig makes changes to three configuration files. Listings 1-3 show their contents, with comments and irrelevant information removed.
Also, in smb.conf, note the home directory path inserted by authconfig, /home/%D/%U. A user, call him winuser1, from an AD domain, call it company.com, would get a home directory path of /home/COMPANY/ winuser1. Authconfig does not create the domain folder under /home. You must create it manually.
Joining an AD Domain
You can now join the Linux workstation to the AD domain using the Linux net command. Here's the syntax, with everything after the first line generated by net:
# net ads join -U administrator
administrator's password:
Using short domain name -- COMPANY
Joined 'FEDORA' to realm 'COMPANY.COM'
You'll see many different syntax examples for net ads if you browse the Internet. My example shows the bare minimum, which is all you really need.
Configure PAM
At this point, a Windows user trying to authenticate at the Linux desktop would get a series of errors because a local home directory isn't present. A PAM module—mkhomedir.so—automatically creates a home directory. To include this module as part of the login process, change two configuration files under /etc/pam.d (see Listings 4 and 5):
Always make copies of the original files before changing PAM files. You can lock yourself out of a system if you aren't careful.
After changing the PAM files, restart the desktop. This is a quick way to ensure that authconfig made the correct boot settings for the required services.
At the login window following restart, Fedora prompts for a name. Enter the Windows account name in domain\user format, such as company\winuser1, then enter the password when prompted. (Other Linux flavors present a selection list of Windows accounts. The option to display a selection list is available in Fedora, but it is not the default setting.)
You can configure smb.conf so that you don't need to enter a domain name, which is fine if you have one AD domain but a little cumbersome if you have several.
At this point, when the login succeeds, you'll get an announcement about creating a home directory for the user. The permissions assigned to the home directory use the AD account of the user.
Rock On
If you can't get the steps to work, e-mail me with the particulars. This can be a finicky configuration, and you want to make sure you're in the right state of mind. During the testing I did for this column, I played Jeff Beck's album, You Had It Coming. I found track six, "Loose Cannon," especially good when setting PAM files. Give it a try.
Listing 1: nsswitch.conf
passwd: files winbind
shadow: files winbind
group: files winbind
hosts: files dns
bootparams: nisplus [NOTFOUND=return] files
ethers: files
netmasks: files
networks: files
protocols: files winbind
rpc: files
services: files winbind
netgroup: files winbind
publickey: nisplus
automount: files
aliases: files nisplus
Listing 2: smb.con
workgroup = COMPANY
server string = Samba Server
printcap name = /etc/printcap
load printers = yes
log file = /var/log/samba/%m.log
max log size = 50
security = ads
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
dns proxy = no
idmap uid = 16777216-33554431
idmap gid = 16777216-33554431
template shell = /bin/bash
winbind use default domain = no
password server = w2k3-dc1.company.com w2k3-dc1.company.com
realm = COMPANY.COM
Listing 3: system-auth
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
auth required /lib/security/$ISA/pam_env.so
auth sufficient /lib/security/$ISA/pam_unix.so likeauth nullok
auth sufficient /lib/security/$ISA/pam_winbind.so use_first_pass
auth required /lib/security/$ISA/pam_deny.so
account sufficient /lib/security/$ISA/pam_succeed_if.so uid <>
account required /lib/security/$ISA/pam_unix.so
account [default=bad success=ok user_unknown=ignore] /lib/security/$ISA/pam_winbind.so
password requisite /lib/security/$ISA/pam_cracklib.so retry=3
password sufficient /lib/security/$ISA/pam_unix.so nullok use_authtok md5 shadow
password sufficient /lib/security/$ISA/pam_winbind.so use_authtok
password required /lib/security/$ISA/pam_deny.so
session required /lib/security/$ISA/pam_limits.so
session required /lib/security/$ISA/pam_unix.so
Listing 4: gdm (PAM configuration file)
auth required pam_env.so
auth required pam_stack.so service=system-auth
auth required pam_nologin.so
account required pam_stack.so service=system-auth
password required pam_stack.so service=system-auth
session required pam_stack.so service=system-auth
session optional pam_console.so
session required pam_mkhomedir.so skel=/etc/skel/ umask=0077
Listing 5: login (PAM configuration file)
auth required pam_securetty.so
auth required pam_stack.so service=system-auth
auth required pam_nologin.so
account required pam_stack.so service=system-auth
password required pam_stack.so service=system-auth
session required pam_selinux.so multiple
session required pam_stack.so service=system-auth
session optional pam_console.so
session required pam_mkhomedir.so skel=/etc/skel/ umask=0077
Printable Format
Regarding the Group Authentication. For example: I have 5 users named user1, user2, user3,user4 and user5. And each user has a dieffrent groups belong. Ex. user1 belong to group1, user2 belong to group2, user3 belong to group3, user4 belong to group5. Now the question is? Using the squid_ldap_group how you will authenticate users belongs to dieffrent group what sort of parameters will i do. Because in your example you only authenticate a user in a particular group not on so many groups. http://ucaqvcguw.com [url=http://pszlrxjei.com]pszlrxjei[/url] [link=http://blemfkep.com]blemfkep[/link]
Clear, invoematifr, simple. Could I send you some e-hugs?
Kindly send information how we can joint Rhel4 samba domain controller with winxp or how to add machine winxp in Rhel4 samba domain controller
hUfNmN himamaster hi
MtDXgC window media player
Carrie anger bereavement irreversibly,Fomalhaut crossbars.
The configuration file is correct, just now I mistyped some words, so it didn't work fine, thank u for providing such a good guide
Thank you very much, I followed this artical , and got my problem solved! one other question: I followed the configuration file as above, Why each time I log in linux with windows account, I should type password twice to log in , but if I use local account , no such problem happened, what is wrong, what should I modify to solve the problem? Thank u
Anyone have any luck with FC6 (I keep getting locked out of my computer when I modify the PAM files)??
Thanks Bill. Your article saved a lot of time for me. I had to use NIS to get the same UID as the UID in the samba server, i have linux and windows clients for the samba server. I am trying to mount linux home dir for linux clients. Windows works smooth.
to Tim:I would like to authorize a AD group's user to logon linux clients. but I don't know the relationship between linux gid and AD's group id. How to figure it out?
Hi Bill,thanks, I dont know much about AD, but I made Linux and Active directory integration succesfully using this paperthanks
Sorry but - Xandros 2.5?? Thats a really old version - and it still is tops in its class. Try the new 4.1, its all that and more!!
FC5 you need authconfig-gtk. Which is the gui version.
To autocreate the directories on the first logon enter this to system-authrequired /lib/security/pam_mkhomedir.so skel=/etc/skel umask=0022This will copy the entry of /etc/skel to the user home dir specified in smb.cnf with the user level 755
Has anyone tried this with Fedora Core 5? My first attempt failed andf I locked myself out. I'm going to try iy again and be sure I backup everything. One thing different with FC5 is there no longer is a GUI for authconfig. Now it's command line...(a step forward?)
Great article and works really well, however I was wondering if anyone has tried this in a multi domain environment? I cannot seem to authenticate via different domains - anyone else had any experience of this?thanks Nige
Big problem with this method: UIDs and GIDs are based on a simple increment-in-order-fetched method. So, after starting winbind, if my first operation is 'id moomo', then that username will get (and have cached) the first UID in the range specified. If, however, the cache files are destroyed or lost, and the next operation is 'id lamph', then lamph gets the UID that was formerly moomo's... including access to all of moomo's files.Samba mentions an option called "idmap backend," but this option is not compiled into the samba-3.0.14a package from RedHat Fedora Core 4 (RHEL 4 uses samba-3.0.10, which doesn't seem compatible with ActiveDirectory 2003).
sir i have configured ldap in fedoracor4.i can login in linux platform.but how can a windows user be able to login ias ldapuser.what are the steps or changes to be applied to the ldap cofiguration.
Got me started on the right path
Dear Sir, When I join the windows 2003 domain using command net ads join -U administrator I am getting the error message " utils/net_ads.c:ads_tartup(186) ads_connect: no such file (or) directory.please tell me how to do it.With RegardsR.Balaji
Dear sir, I tried the way to u said but when i run this net ads join -U administrator---- im getting the error the following error is displayed "[2006/02/15 15:51:02] utils/net-ads.c:ads_startup(186) ads_connect: No such file or directory" and another one when I start winbind service I am getting error" audit(1139998420.585:0) avc:denied {create } for pid=3851 exe=/usr/sbin/winbindd name=winbindd.log scontext=root:system_r:winbind_t tcontext=root:object:samba_log_t tclass=file"please tell me how to do it.with Regards R.Balaji
oops, mean to type Linux, doh. That's what happens when you doing other things at work while typing! Yes, the link doesn't work, this also doesn't inspire confidence. Maybe the article was considered so weak he couldn't get any more work and also had to give up his domain!
I have to say that this is not a very detailed article and hence I found it of no real use until I went away and read some proper docs, coming back I can see references to stuff, but no real explanation and I think this won't work unless you know the background stuff. Telling people to use Redhat's own config tools is a terrible idea. Distro tools suck and shouldn't be used, it should be generic across Linnux.
Dear Sir, I need step by step configuration in windows 2003 migration with RHEL4With RegardsR.Balaji
Dear Team,I used the configurations as done by Bill in FC4 but could not work for me. The ADC is in Win2k. The FC4 server was made the member of ADC successfully and all the groups and names can be seen from FC4 server. I have however, been able to set up a Printing Server using CUPS and is working fine using the ADC authentication parameters. The only problem am getting is loging into the FC4 using ADC authentication parameters. The error am getting while login into FC4 server using ADC authentication parameters is "pam_ winbind[ ] : request failed: No such user, PAM error was 10, NT error was NT_STATUS_NO_SUCH_USER". Kindly assist the way forward. Thanks in advance. Emmanuel
Dear sir, i tried the way tou said but when i run this net ads join -U administrator----im getting the error [2006/01/04 23:05:25, 0] libads/kerberos.c:ads_kinit_password(146) kerberos_kinit_password email@example.com failed: Cannot find KDC for requested realm[2006/01/04 23:05:25, 0] utils/net_ads.c:ads_startup(186) ads_connect: Cannot find KDC for requested realmplease tell me how to do it thanks and regardsbose
I found this article only to be a skim through without proper explanation of how or why and is very limited to Red Hat distro. I'm using gentoo, debian and suse. I'm definitely no greenhorn, been into Linux for years, but I think Linux is a little bit too much haslle sometimes, even for me. Better desktop? not on your life... I've got a nice Linux desktop at home, as well as an XP and a CLI server, but it took huge amount of work to get Linux looking and working properly, lots of little hacks everywhere on Debian for fixes, definitely not worth the time/effort for work cos you have to change job yearly to get reasonable wages nowadays and start again...OS X is far superior to Linux, and Windows marginally beats OS X thanks to monopolistic compatability issues unfortunately.Anyway, if anyone has come across some proper Documentation on how to do this, please post URL here....
I try this steps in FC4. But it is not work for me .I am using 2k3 server netbios name qlc-server ,domain name quantumleap.co.in ip address 192.168.2.1 . Please help me to configure my linux system to authenticate using windows domain
In /etc/pam.d/login, where should the line session required pam_mkhomedir.so skel=/etc/skel umask=0077be? Because I had it before# pam_selinux.so open should be the last session rulesession required pam_selinux.so multiple open and it would not create the account, but in /etc/pam.d/gdm I added it as the last line. When I logged in from the login screen (after creating the /home/COMPANY directory), it created the account automagically. So, I am guessing the location of the line may be important. Am I correct?
Many thanks for this article. It's saved me many hours and days of pain to get this working. I was up and running in 30 mins! The only problem I have @ present is that some Gnome applications don't like spaces in the user name and as we use real name logins within out ADS set up the HOME$ is created with spaces. I'm sure there is a workaround to this (hardcode HOMEDIR$) but everything else works 100%.
I have the same problem a few people here have mentioned - when I try to log in with a windows account, I get "Authentication Failed" messages. The syslogs on the Fedora client throws up the error "Client not found in Kerberos Database, and the syslogs on the 2003 server throws up:Source Event ID Last Occurrence Total Occurrences Security 537 23/11/2005 2:25 PM 13 * Logon Failure: Reason: An error occurred during logon User Name: Domain: Logon Type: 3 Logon Process: Kerberos Authentication Package: Kerberos Workstation Name: - Status code: 0xC000006D Substatus code: 0xC0000133 Caller User Name: - Caller Domain: - Caller Logon ID: - Caller Process ID: - Transited Services: - Source Network Address: 192.168.0.14 Source Port: 1786Any ideas where I have gone wrong?
I got the following error:04.11 22:57 Nov 4 22:56:17 localhost login[4941]: initgroups: Operation not permitted What cold it be?
How are user rights determined? I am logged into FC4 with my Windows domian account (an admin account) but I can't access everything...like I can't see a CDROM when it's inserted unless I'm logged in as root. Where and how are local rights determined for domain accounts?
My problem with 2003 SP1 was solved when I upgraded to Samba 3.0.14a. I've since added a notebook to the domain but I had allot of trouble getting past the login screen. At login there was a problem finding the domain controller. I have a host setting for the domain controller, but nothing worked until I added the IP address of the DC in authconfig. I didn't have to do this on the desktop. I'm not sure why this is happening. Anyone have any ideas? I have a fixed IP on the machine and I do specify 2 machines in the DNS setting. Sometimes the DNS setting for the DC disappears...maybe the DNS setting are being reset from the DHCP server?
Hey, The above coloum was wonderful, i had a situation to solve with in a redline and i had no hope as everthing failed, atlast u saved me by my neck, thnx man you work is awsome please continue the researches and update us allKEEP UP THE GOOD WORK MAN.
Let me add my kudos to BBoswell. A very complete artical. However even with this assistance, it took most of the summer getting SSO authentication against AD. The biggest issue was 'joining' computers to the domain. This worked very inconsistently from one computer to another. We found that creating the Computer object in AD just prior to the join helped to avoid conflicts. Like Martin & Lasse above, I now need to mount remote directory as the users home. I have tried smbmount to Win2K3: mounts but XSessions fail because of inability to create symbolic links to local /tmp filessmbmount to NAS: folder disappears and access deniedmount.cifs to NAS: mounts but XSessions fail because of inability to create symbolic links to local /tmp filesInstalled Services for Unix (SFU) on Win2K3 and used mount.nfs: Server and client say it mounts but permissions denied any access. Since I do not control the domain, I cannot install SFU NIS on domain controllers. All I can administer is Win2K3 server running SFU and some limited control of AD OU's.If anyone has any suggestion on how to make any one of these mounting methods work it would be greatly appreciated.Please contact email@example.com
Great article. It works great on FC4. And if you edit the krb.conf file, user can log in without having to type the Domain.But does anyone know, how to mount a users homedrive, when logging in? The share is located on a 2003 server.
It worked for so many others I guess I did something wrong. After my attempt at this with Fedora 4 core I could not log on as root nor as a user in my 2003 SP1 AD.I am reloading Fedora right now. Good article. I may actually learn some Linux.pw
Good one...
this has been ripped off of redmondmag's site and does not contain the required conf file listings, you morons!
Worked good for me, Thanks
Great article, and very helpful. Manages to point the way through a complicated process without getting bogged down in the details. Had a few problems I had to work out myself, but I'm very glad I found this page. As for the critics, Googling your error message really is one of the best ways to troubleshoot, for the very reasons Bill wrote: someone's probably made the same mistake before.
In answer to Mathew, the UID is taken from the AD so Windows users are given the same UID across Linux machines.
Really useful article. My user accounts in windows live at ''servername'username$. How can I automount their windows domain home when tehy log in to the linux box?I think sunburntkamel's comment is just petty. As for Novell man. I wanted to do this to experiment in one depratment in a large site. I am not going to dump a large AD install of 2000+ users. The whole point of this is that Linux can live with just about anything, unlike several other large players in the OS market place.
I am using FC3 and have joined my ADS domain. I can see and get to shares but when it comes time to use a single logon I always recieve an "Authentication Failed" message. I am using the latest Samba 3.0.14a distribution with the W23SP1 fix. What am I doing wrong?
There is a winbind patch for that problem. not sure if samba 3.014 will address it or not. i guess i'll find out today and report.
I have the same problem as Tony. I redirected my authentication to a DC that has not been upgraded to SP1 for now. This is only a temporary fix as upgrading the rest of the Dc's is inevitable. Can anybody help out here?
I just installed Windows 2003 Server SP1 and lost my ablility to login from Fedora. I checked my settings and rejoined the domain and was told I al already in the domain. I'm uninstalling SP1 to see what happens....any ideas?
GREAT JOB Bill,As a frustrated Died in the Wool Windows System Admin. I was going nuts trying to figure out how to make a Linux machine do a Single Sign-On. Google searches returned hundreds of suggestions, but this was the only article I found that allowed me to get my feet wet. I believe that Micro$ofts decision on licensing is going to hurt them in the long run, many of my friends & Admins that I know are starting to look to Linux to see if it can replace their Micro$oft Desktops. More articles on the subject are worth their weight in gold. Now we need a good article on how to set up scripts to map the Windows shares to the Linux box.
It would appear that this solution will mean that a given windows user will get a unique Unix UID on every Unix machine she or he logs into. If so, that's not good. What's required to get a unique user to have a consistent user id on every Unix system and all be tied to one Windows ADS login?
1/1/05 – Better Idea says: Ditch Linux and simply use Windows. No complicated configuration. No hassles. 1/2/05 – Even better idea says: Ditch Windows n Linux and simply use Mac OS X. No complicated configuration, No adware/malware/viruses, *Really* no hassles. :P JUST GO BACK TO OLD WAYS !!! DITCH COMPUTERS LOL
All this computerese is above me, I'm a has-been. If you meet Bill, tell him he ought to incorporate Linux or it will replace him. Also tell Bill his natural father wishes to meet him, to phone (future number in Salem) 503 588-8255.Very Truly,Laurence
P.S. I see that my email is not automatically included... its shabalin(AT)in.tum.de
I am a student at the CDTM (www.cdtm.de) and we a running a workshop on Security, particular topic of my group is Single Sign-In. We are looking for enthusiasts who have ideas and maybe custom solutions for the problem, with further plans to arrange exchange of ideas. The project is supported by both Munich Universities and Deutsche Telekom Innovation Center. Please contact me anyone interested. Will be also helpful if you could forward the message to suitable people. thank you, sorry for being offtopic..
If you are in a large Enterprise and it has been decided to implement LDAP or you have an LDAP implementation running like Novell's, CA's, or IBM's among some of the major companies besides Microsoft's AD. You may have found it troublesome to communicate from AD to LDAP.You might want to look at using a Freebie from M$ to assist the communications like their SFU. You might want to consider the use of M$'s newer program called ADAM. ADAM means Active Directory Application Mode. It is, " A fullfeatured yet flexible LDAP directory that can leverage the native securitymechanisms of the Windows platform." " ... ADAM supports some non-ADfeatures and can run on both Windows 2003 and Windows XP Service Pack 1.Unlike AD, multiple instances of ADAM can run on a server, including adomain controller, and you can specify which ports an ADAM instance listenson for LDAP requests. "It can be downloaded from Microsoft's web site. The package is a littlelarger than 8 MBs. You can gain a sense of how this Mode can address theproblem of integrating directory security with OS security by reviewing JohnHowie's article from Windows & .Net Magazine " Getting to Know ADAM "attheir web site www.winnetmag.com . The article's number is # 42450 of theJune 2004 issue.If you need to learn more about ADAM and additional features go towww.microsoft.com/windowsserver2003/adam/default.mspx . At this locationyou can download white papers, reviewer guides, and the ADAM Feature Pack.-Rabbit
I would use SFU or eDirectory, as for the guy who said to use Windows only, he's never seen a Linux desktop and how far superior it is over a standard Windows install out of the box.
In regards to restricting user accounts who can login to the linux boxes, you can make the default shell in the samba config a copy of bash (i.e. bash-nt), chmod o-x it and make the group owner an NT group. That way you can control who can logon to Linux servers through group membership in AD instead of having to manage a bunch of junk locally on each server.
How about SFU (free) from Microsoft, making the AD DC's act as NIS servers as well for *nix hosts? Or is that way too old and insecure?
Hi Brett. Perhaps you could post a short article on the MWVLUG website or talk about it in tonight's meeting?
We've done this in a bit different way - we didn't use samba or winbind. Of course we're also running RedHat 9 or less. To help overcome the problem with every windoes user being able log into the Linux servers, we give the windows users almost no access what-so-ever. Then we assign windows groups to SUDOERS and give groups of people rights to do more advanced and specific tasks. -Brett
One thing left out is that if you do this, then ANY windows account will be able to log into your Linux server.Adding lines like: account lib/security/$ISA/pam_succeed_if.so login = bgates to the pam.d/system_auth file would allow you to restrict users based on login. valid parameters to pam_succeed_if.so include 'login', 'gid', 'uid', 'shell', etc, allowing quite a range of flixibility with regards to limiting access to the unix servers from the windows users. -Tim
To Greg. Well said. Thank You, It would be nice if people would be more appreciative of this type of work. many people dont seem to realize that Linux is not windows so it will take some time to get used to ! Damn brats ( lol ) :P-Nx
Does this work for a laptop configuration as well? One of the main things about the early versions for Xandros were that "cached credentials" weren't working (you had to be connected to that network only) so it was useless for laptops because you'd always have one profile for outside and one for inside the building. Does this setup work when you aren't connected to the AD network, like Win2k or XP does?
this article is a complete waste of everyone's time. "google for your error message"? that's so sloppy it's unbelievable you even got this thing posted. at least point people in the direction of the relevant config files. there are several very important config files that need to be modified, which you provide some examples of at the end, but don't explain when to modify them, where they are, or what they do. i've done this very thing with a SUSE workstation, and this article glosses over everything that was difficult about it. even from an FC3 perspective, you jump from topic to topic, without any clear outline or set of steps. it's this sort of weak writing that gives linux a bad name to the windows users an article like this would be helpful to.
Ditch Windows n Linux and simply use Mac OS X. No complicated configuration, No adware/malware/viruses, *Really* no hassles. :P
Ditch Linux and simply use Windows. No complicated configuration. No hassles.
Thanks for the great article. I have been looking for an easy how-to like this for a while.I set it up on my FC3 box. When trying to login via ssh I can authenticate, but the home directory does not get created on the fly.I have modified the login and gdm files to include mkhomedir.so, do I need to edit something else for ssh logins?
I agree with gh3ng1s. If you really want interoperability with Windows, Linux, NetWare, Mac etc. Install eDirectory instead of AD. eDirectory plays nice with everyone.
Great article, but I don't think a lot of everyday users are going to run out and try this on there desktop. I had been noticing a trend to use Linux (red hat) in large corporation in different roles where cost saving can be made. Most corporations have two I.T. divisions: Windows and UNIX team. The UNIX groups usually deploy and maintain Linux servers that are used to saving money over utilizing larger UNIX servers. My question is can the same principles be used on Linux servers? Applying Windows AD users/groups to Linux (red hat) servers for something like file server? Most IT security groups frown on Samba stating it's not security for corporate use. Thx Windows Admin
I have a much simpler solution - ditch AD and install Novell's eDirectory. It will install natively on both Windows and Linux and gives you a much simpler and far more robust method of managing all your accounts.
Hi,Something like a year ago I faced similair project. The outcome is quite different, though.1. it was not AD but NT-domain authentication system.2. among over 200 users there, only a fractions ever needed UNIX access (apart from server diskspace). 2-3 really required shell.A single-sing-on was do-able as you described above - with the only difference, that logins would be goverend by domain master brawser, not the AD - but I've chosen agains it.The reasons were:1. I haven't found a consise info on safety of NT-domain cryptography... and if it's at least as secure as /etcshadow-SHA1. (I understand, that AD uses kerberos, so this securiti concern is not an issue there).2. my domain users mainly needed e-mail access, so their careing for strong password selection is ... none.So, for me an article on MSW-UNIX single-sing-on would be of some help if:1. it covered comparition of NT-domain (SAMBA-LDAP or cource) v.s. /etc/shadow password repository security.2. it showed a way to allow users to 'upgrade' their access to cover full UNIX shell access, too - once they peeked a stronger password.
More Tech Library
Sign up for our newsletter.
I agree to this site's Privacy Policy.
More Webcasts


text:
(The Journal's editorial of Friday, Oct. 4, (Not for Congress) was in error when it said that a Republican budget proposal on Sept. 30 would have eliminated government health insurance for Congress, lawmakers' staffs, White House appointees and other federal employees. What the Republicans proposed, and what Senate Democrats rejected, was a ban on the federal government giving subsidies to Congressional members and staff to help them buy insurance in the Obamacare exchanges.
The gist of the editorial, that Congress should bear the same financial burden as the rest of the country when it comes to Obamacare, stands.)
Members of Congress might have been more interested in delaying the Affordable Care Act if they and their staffs had to cope with anything like it. But they do not.
At the heart of the disagreement that shut down many federal government agencies this week is the bitter battle over the ACA. At first, conservative lawmakers wanted to defund it. Democrats rejected it.
Then conservatives wanted to delay most of the law's provisions for a year, in keeping with exemptions President Barack Obama already has granted for big business, some labor unions and a few others. No, said Democrats.
On Monday, conservatives in the House of Representatives proposed another change. This one was to eliminate government health insurance for Congress, lawmakers' staffs, White House appointees and a few thousand other federal employees. They would have been directed to the highly touted insurance exchanges.
Again, the answer was a firm "no."
But why not, if the Affordable Care Act is such a great deal for the 300 million or so other Americans who will be forced to cope with it in one way or another?
Because taxpayer subsidies for insurance covering the about 18,000 federal employees in question are worth up to $11,000 a year. That is what it is estimated some of them would have to pay out of their own pockets to obtain "affordable" insurance equivalent to what they have now.
They would have been required to do that under a provision inserted into the law three years ago by conservatives. But the White House Office of Personnel Management ruled the employees can keep taxpayer insurance subsidies they enjoy now.
"Obamacare," in other words, isn't good enough for a few presidential employees and members of Congress. For most of the rest of us, though, it's the law of the land.
We don't agree with the method being used to push this agenda, but the question merits debate.

subset: commoncrawl


text:
Thomas Dining Set which includes tumbler, bowl and plate set with knife, fork and spoon.
Disney Princess Beautiful as a Rose Fragrance and Purse Gift Set
- Price
- £10.00
- In Stock
3 reviews
- Delivery
- Next day delivery available
The Disney Princess Beautiful as a Rose Fragrance and Purse Gift Set is a royally good addition to any girl's collection.
This lovely set comes with a 50ml eau de toilette with a sweet floral scent.
It also includes a cute little pink purse featuring images of different Disney characters and a delightful pink string bracelet!
Useful info:
- Disney Princess Beautiful as a Rose Gift Set
- Comes with 50ml eau de toilette spray
- Includes purse and string bracelet
- Perfect gift for your little princess
Monsters University Dining Set which includes tumbler, bowl and plate set with knife, fork and spoon.
Huggable and undeniably cute, the Boo plush toy makes the ideal gift for dog lovers of all ages. Designed for children aged on year and older, this soft dog offers maximum cuddliness. Whether or not you're a facebook fan of the real-life Pomeranian Boo, this plush version will work hard to convince you Boo the tag-line of World's cutest dog.
Height: 9 inch.
Make night time magical with the brilliant Hello Kitty Glitter Lamp.
Fans of the popular cartoon character will love this pretty glitter lamp with its tall cylinder and compact shape that produces a soft and gentle glow as the amazing shapes dance around inside.
At 46 cm in height it's big enough to stand out in the room with its pink and warm Hello Kitty colours.
To make evenings even more relaxing why not combine with the Hello Kitty Blossom Dream Hot Water Bottle (see item number 29BR5) and the Hello Kitty shaped mug (29BR7).
Useful info:
- Hello Kitty Glitter Lamp
- Makes cool internal shapes
- Gives off soft and gentle glow
- Suitable for age 14 and over
A great, fun way to pack your child's lunch for their day at Nursery or School. The bag features a football design and can be personalised with any name up to 12 characters. The bag is insulated to keep the contents fresh and has an adjustable shoulder strap measuring 122 cm at its longest. Dimensions of the bag are 23 x 16 x 14 cm.
Winnie The Pooh Hot Water Bottle Cover
- Was
- Was £20.00
- Now
- Now £10.00
- Save £10.00
- In Stock
0 review
- Delivery
- Next day delivery available
Winnie the Pooh Hot Water bottle cover.
Warning: Not suitable for children under 3 years.
Moshi Monsters Lip Gloss Set
- Was
- Was £8.00
- Now
- Now £5.00
- Save £3.00
- In Stock
4 reviews
- Delivery
- Next day delivery available
Get a taste of a whole new world of fun with the Moshi Monsters Lip Gloss Set.
Inspired by the popular online world of Moshi Monsters, this set contains 4 lip glosses and each comes with a fun collectable charm for each monster, Poppet, Diavlo, Katsuma and Luvli!
Why not combine it with the Moshi Monsters Fragrance Gift Set (see item number 3NAQ6) for even more monstrously good fun?
Useful info:
- Moshi Monsters Lip Gloss Set
- Comes with 4 lip glosses
- Based on Poppet, Diavlo, Katsuma and Luvli monsters
- Each comes with a cute charm
Minnie Mouse – Minnie Eau De Toilette
Young fans of Disney's iconic Minnie Mouse will love this eau de toilette, named after Minnie herself.
It's a fantastic gift for a young girl. It's perfume so it's a grown up gift like one mum would receive, but its Disney theme and everyday fragrance mean it's suitable for a child. The pretty bottle with Minnie posing in her classic red and white polka dots will look lovely in her bedroom too.
Useful info:
- 50ml EDT
- Suitable for everyday wear
- Pretty bottle
- Minnie Mouse – Minnie Eau De Toilette
Disney Princess Pretty Girl Fragrance and Hair Accessory Gift Set
- Price
- £8.00
- In Stock
2 reviews
- Delivery
- Next day delivery available
Disney Princess Pretty Girl Fragrance and Hair Accessory Gift Set
Your little princess will love the Pretty Girl fragrance set from Disney Princess.
Presented in a beautiful pink gift box featuring Rapunzel, Cinderella and Aurora, the set includes a 20 ml eau de toilette, a pretty pink comb and 2 hair elastics featuring heart charms. Your little girl will have a ball styling her hair and putting on perfume – just like mum.
The perfect gift for a little one who'd like to play pretend as a princess, this will really make her day.
Useful info:
- Includes 20 ml EDT, comb and hair elastics
- Perfect gift
- Box features 3 Disney Princesses
- Disney Princess Pretty Girl Fragrance and Hair Accessory Gift Set
Peppa Pig dining set which includes tumbler, bowl and plate set along with a knife, fork and spoon set.
The Batman Fragrance Duo Gift Set lets your little hero pick up the scent of the Dark Knight.
After a long day of crime fighting in Gotham City, Batman must spruce himself up before he changes back into slick billionaire Bruce Wayne.
And now your hero can do the same with this fantastic gift set which includes a 150 ml shower gel and 50 ml eau de toilette spray with hints of vanilla and musk.
Useful info:
- Batman Fragrance Duo Gift Set
- Capture the scent of The Dark Knight
- Contains 150 ml shower gel
- Comes with 50 ml eau de toilette spray


text:
Quick Butter Roasted Asparagus
Oven-roasting is an easy way to prepare asparagus that really brings out its sweetness and rich flavor. Simple seasonings like butter, balsamic vinegar and parmesan cheese are easy additions that subtly enhance its natural flavor.
- Ingredients:
- 1-1/2 to 2 lbs fresh asparagus
- 1 lemon
- 2 tablespoons butter
- Salt and freshly ground black pepper
Preheat the oven to 400°F. Line a large, rimmed baking sheet with aluminum foil and spray with non-stick cooking spray.
Trim off any woody ends from the asparagus and unless your spears are very slender, peel a bit of the outer skin off toward the bottom of the stalk. This helps to ensure tenderness and the spears will cook more evenly. Also, don't use the "snapping" method to trim the ends - you'll waste too much of the spear.
Put the butter in the center of the prepared baking sheet and place it in the oven until melted. Remove and arrange the asparagus spears in a single layer. Using tongs, toss the asparagus to coat completely with the melted butter, then season lightly with salt and pepper.
Roast until the spears are tender, about 12 to 15 minutes, then squeeze lemon juice over the top. Serve immediately.
Makes 4 to 6 servings
Recipe Variation:
For a different flavor, replace the butter with olive oil and drizzle on a few drops of balsamic vinegar. Season with salt and pepper and roast as directed above. When the asparagus is done, grate some fresh parmesan cheese over the top in place of the lemon juice.
Nutritional Info:
Asparagus contains moderate amounts of vitamins C, A and E, potassium, small amounts of iron and quite a bit of fiber. Springtime is the best time to find an abundance of fresh asparagus at your local supermarket. Like garlic and onions, asparagus is an edible member of the lily family, prized for its great flavor and nutritional value.
more recipes from this category
from around the web
comments & replies
2 comments ~
Try this on someone who says they don't like asparagus - I did - and with great results. It is really yummy and no work at all!
This sounds really great and easy. Our family loves asparagus and I am definitely going to have to try this recipe out.


text:
- Destinations
- Tour Type
- Our Experts
- Photo Gallery
- About Us
- Call 855-330-1542
Moshe Gershovich
Moshe Gershovich is Professor of Modern Middle Eastern History at the University of Nebraska-Omaha (UNO). A native of Israel, he earned a B.A. at Tel Aviv University and a Ph.D. in history and Middle Eastern studies at Harvard University. He taught for three years at the Massachusetts Institute of Technology before traveling to Morocco in 1998 as a Fulbright Senior Scholar to research the oral history of Moroccan veterans of the French Army. Moshe resided in Morocco between 1998 and 2000 during which time he also taught at Al-Akhawayn University in Ifrane. He is the author of French Military Rule in Morocco: Colonialism and Its Consequences (Cass, 2000) as well as numerous scholarly and popular articles related to the modern history and politics of Morocco and French colonialism. In recent years, Moshe has taken groups of UNO students to Morocco where they were immersed in the study of Arabic and North African history and culture. He is fluent in Hebrew, French, and Moroccan Arabic.
Kenneth Perkins
Kenneth Perkins received his M.A. and Ph.D. in Middle Eastern Studies from Princeton University. He is a Professor of History at the University of South Carolina, where he has served on the faculty since 1974 and teaches courses on Islamic civilization, the history of North Africa and the Middle East in the Islamic Era, and U.S. relations with the Middle East. A frequent traveler to the Middle East and North Africa, Dr. Perkins has conducted scholarly research in Tunisia, Algeria, Morocco, France, the United Kingdom, and Sudan. He is the author of Qaids, Captains, and Colons: French Military Administration in the Colonial Maghrib, 1844-1934; Port Sudan: The Evolution of a Colonial City; Tunisia: Crossroads of the Islamic and European Worlds; and A History of Modern Tunisia; as well as numerous articles, book chapters, book reviews, and encyclopedia and other reference entries. He is currently working on a book examining the social, economic, and political impact of Western travelers in North Africa from 1870 to 1939.


text:
The skin is the body's first barrier against bacteria that cause infections. Even though many bacteria live on the surface of our skin, healthy skin can usually protect us from infection. However, bacterial skin infections can affect a small spot or may spread, affecting a large area. They can range from a treatable infection to a life-threatening skin condition.
Many types of bacterial skin infections require clinical care by a physician or other health care professional. Listed in the directory below are some, for which we have provided a brief overview.
If you cannot find the information in which you are interested, please visit the Dermatology Online Resources page in this website for an Internet address that may contain additional information on that topic.
Folliculitis, Boils, and Carbuncles
Staphylococcal Scalded Skin Syndrome
Other Bacterial Skin Infections
Last reviewed: 9/29/2011
Topic Index
Anatomy of the Skin
Skin Tests
Describing a Skin Condition
Common Dermatological Procedures
Common Skin Disorders
Skin Growths and Pigmentation Disorders
Skin Inflammation (Rashes)
Skin Injury
Skin Sweating Disorders
Skin Infections
Hair Problems
Online Resources


text:
Having these things on your resume could make it end up in the trash.When you're applying for a job, you want to make sure your resume stands out -- but not for the wrong reasons. Whether you apply online or provide a printed copy, there are certain things that can send your CV to the trash instead of to the big boss. Here are five things you should never put on your resume:
Related: Bizarre interview questions (and how to answer them)
- An objective or mission statement. There was a time when job-seekers were encouraged to spell out exactly what they were hoping for in a job, which is a useful exercise for the candidate but a waste of time for the employer. Why? The company is looking for someone who can meet its goals, not trying to figure out if they're able to meet yours. Go ahead and craft that mission statement -- but then leave it on your computer instead of putting it on your resume.
- Personal information. There's no need to include your marital status, sexual preference, number of kids, religion, or political affiliation on your resume. If you have a blog, only include the URL if it's pertinent to the job. And don't ever include your drivers license number or your social security number; if your resume ends up in the trash, someone can use that information to impersonate you, and identify theft is not a good thing at all.
- Salary requirements. Discussions about money are best left for much later in the employment process. If the job posting requires that you mention your salary range, keep it as broad as possible and be prepared to negotiate.
- Unrelated experience or activities. Unless it's germane to the job you're applying for, your previous experience in unrelated fields, club or group affiliations, and a list of what you like to do in your spare time has no place on your resume.
- Your weaknesses. Plenty of employers ask candidates about their perceived weaknesses, but you don't need to beat them to the punch. Focus on your strengths, and leave the trick-questions for the interview -- in person, you can provide a positive spin.
- Don't use the same resume for every job application. It's important that you tailor your resume to fit the job for which you're applying. And if you're applying to several jobs within in same large company, it's essential. Different jobs require different skills, and even if you're applying for the same exact job at several places, each company is still different, so it's worth submitting a (slightly) different resume for each job.
- Don't forget the cover letter. The cover letter is your chance to blow your own horn, tout your skills, and explain any puzzling parts of your resume. It's also a great place to show that you're already aware of how the industry -- and the company -- operates, and how you'd fit right in. It's your chance to show the company exactly what you can do for them. Don't forget to include one.
- Don't just list your previous job titles and responsibilities. It's important to show a prospective employers how you sharpened your skills at previous jobs, and how those skills relate to the job you want. So list your past responsibilities, sure, but also list your achievements and the skills you honed along the way.
- Don't forget to proofread. Proofreading means more than simply fixing spelling, punctuation, and grammar issues. Spellcheck can't tell the difference between "sew" and "so" or "too," "two," and "to" -- but an employer or recruiter sure can. And if you get the name of your contact person wrong, or address them as "Mr." instead of "Ms.," chances are that a recruiter will hit "delete" no matter how great a candidate you may be.
- Don't embellish. If your resume makes the cut -- and that's the goal, right? -- a good employer is going to fact-check. It's easy to double check data online, and a quick phone call to a previous employer can bring truth to light pretty quickly. If you have a tricky situation that bears explaining, do it in the cover letter -- or, better yet, in person.
On our new talk show, "The Shine," we're talking about these and other great resume tips. Watch the video below, and stay tuned for more from Yahoo! Shine!
Copyright © 2012 Yahoo Inc.
Also on Shine:
Words to cut from your resume
Spring clean your resume (in less than two hours)
Four things you didn't know you could put on your resume


text:
About President Wallace Loh
Media Coverage
President Wallace Loh's Inauguration
Selected Speeches, Statements and Columns
Vice Presidents
Offices and Staff
Contact Information
Welcome to the University of Maryland.
I extend to you a warm welcome and I thank you for taking time to visit our web site.
If you are a student, parent, alum, business person, Marylander, or any other form of Terp, I am sure that you will discover that our university has much to offer.
From our modest beginnings in 1856 as a small agricultural school with four faculty members and 35 students, the University of Maryland has developed into a globally preeminent research university with more than 37,000 students from more than 130 countries around the world.
These students are the pride of our university. Each year, the credentials of our talented and diverse students go even higher. Our students are among the best of the best.
The heart and soul of our University is our high-quality faculty. They have been awarded Nobel prizes, Pulitzers, and Fulbright grants. A host of our professors are members of national academies.
I also point out that the University of Maryland is a powerful economic engine for the state of Maryland as it pumps about 3.5 billion dollars into the state economy each year, supports about 25,000 jobs, and brings in more than a half billion dollars in research money.
Because of our students and faculty, our academic programs are among the best in the country. According to national publications, UMD is one of the top schools in the country for employers to recruit and is rated as the #5 best value among public colleges in the United States.
As a globally-connected university offering a world-class education, the University of Maryland prepares our students to be successful in today's knowledge-based, global economy.
But the opportunities and benefits of the University of Maryland are not limited to academic pursuits. We prepare our students to be enlightened, well-rounded citizens who enjoy life, art, sports, and other extracurricular activities. Through our co-curricular and service programs we offer them the opportunity to give back to their communities.
We have a superb performing arts center which features concerts, plays, and other forms of live entertainment by our talented students and faculty, and visiting artists.
Many of our athletic programs are nationally rankedif you are not yet a Terp fan, you soon will be because Terp sports are as captivating as they are exciting.
We are only a few miles away from three of our nation's great cities. Our nation's capital, Washington, D.C., and our state capital in historic Annapolis both offer internships for students and job opportunities for graduates as well as opportunities for networking with our political and business leaders. And we are only a short drive from the city of Baltimore with its magnificent inner harbor, medical complexes, and professional sports.
Please explore our website and discover even more about us.
Wallace D. Loh


text:
"I look forward to using the cute gift tag stickers over the holidays. I purchased several different designs to match my wrapping paper. All were just as depicted. The paper quality is high and designs clear. I purchased this in gold and plan to use it with some bags of holiday bubbly."
"Matching tags I got with my sons invitations. Was surprised as I was expecting something bigger but a in actual fact nice and small. These a stickers and il be using them on the kids party/loot bags."
"I love gifting bottles of wine, and thought instead of packing it in a bag that usually no one uses, I'd add the sticker and a cute bow to let my hostess know where they came from."
"I personalized this tag to say " A gift for you" and "From DeenaB" below. I was concerned about too much empty space but TinyPrints centered everything and they came out so pretty. Simple and elegant gift tags."
"My youngest (6 years old) picked these out as her Valentines. She put them on a packet of candy for each person in her class. She put a "K" in the heart for kindergarten and thought that they were super cool!"


text:
April 23, 2014
Steve Greer joined a number of fellow former Virginia teammates when he signed a contract with the Washington Redskins late Saturday night.
He joins Oday Aboushi, who was drafted in the fifth round of the NFL Draft by the New York Jets, and fellow undrafted free agents LaRoy Reynolds (Jaguars), Paul Freedman (Cowboys) and Perry Jones (Ravens).
Greer was a team captain for the Cavaliers in 2012 and was also a first-team All-ACC selection at linebacker.
The comments sections of Newsplex.com are designed for thoughtful, intelligent conversation and debate. We want to hear from our viewers, but we only ask that you use your best judgment. E-mail is required, but will not be displayed with comment.
As a host Newsplex.com welcomes a wide spectrum of opinions. However this is a site that we host. We have a responsibility to all our readers to try to keep our comment section fair and decent. For that reason The Newsplex reserves the right to not post or to remove any comment.
If you have any ideas to improve the conversation or this section let us know. Send an e-mail to email@example.com.
powered by Disqus


text:
Latest Headlines
Cooler than average temperatures this week.
A company said it has faced challenges since seeking approval to put a care ...
Heated words Monday night between people attending
an educational seminar and ...
The No. 24 Arkansas baseball team (21-13) raced out to an early lead Wednesday ...
Due to the threat of inclement weather, Arkansas baseball's series opener with ...
WELLINGTON, New Zealand (CNN) -- You'd have to have been hiding down a, er, Hobbit hole, to miss the hubbub.
You can fly to New Zealand, where the Hobbit premieres on Wednesday, on a Hobbit-branded plane complete with Hobbit-inspired safety video with Sir Peter Jackson, telling you how to keep safe, if the flight approaches its own Mount Doom.
When you arrive in the self-styled Middle (Wellington, my home town) of Middle Earth, a giant Gollum, reaching for a fish, hangs from the airport terminal's ceiling. On the short ride into the city you'll see the Hobbit-themed flags fluttering in Wellington's persistent wind before a giant Gandalf hovers into view.
He is perched on the Embassy theatre's verandah, standing outside a delightfully rendered Hobbit hole, waiting to welcome the stars and thousands who will watch them parade down the red carpet. Will the movie receive critical acclaim -- or Jar Jar Binks reception?
Whatever happens, the marketing has been brilliant.
New Zealand's taxpayers have been helping subsidize 14%, or US$82M, of the films (which cost close to NZ$700M, or US$575M).
While we Kiwis adore nothing more than being told how wonderful our little country is, we need more than that as a return on our investment.
Prime Minister John Key, who helped woo the Warner Bros executives when they threatened to film elsewhere, has said it's good value for money because it's far less than the NZ$300m (US$246M) the Lord of the Rings trilogy cost the country.
He argues it is all money well spent on creating jobs and that the cross-promotional benefits will return a treasure to please even Smaug the dragon.
Sir Peter, meanwhile, has popped out of the editing room in the past few days to remind everyone that the subsidies helped ensure that the films were made here. Big studios do not make decisions based on "sentimentality," he said, and there was a real danger of the films being shot in England or Scotland. God forbid.
There have been many benefits besides the jobs -- such as celebrity spotting.
Orlando Bloom ate across from us one night -- as did James Nesbitt at a Mexican joint near Sir Peter's burgeoning studio complex.
Many more Kiwis will be waiting by the red carpet, hoping for their own little bit of movie tinsel.
They deserve to be treated to a show.


text:
Ritter to speak Friday as county Dems meet
Mesa County Democrats will see several big names in state politics Friday at their annual dinner. So far, U.S. Rep. John Salazar, U.S. Sen. Michael Bennet, Colorado Secretary of State Bernie…
Want to read more?
This article and other exclusive local content now require a subscription. (Learn More)


text:
Megabus returns to LA, expands service in time for holiday travel
Photo via Facebook.com/megabus.com.officialpage
Angelenos will have a busload of new holiday travel options this year. Megabus.com — the low-cost, express bus service that briefly rolled through Los Angeles in 2007 — will be returning next month with expanded operations across California and Nevada
Los Angeles will be one of the new West Coast hubs, and beginning Dec. 12, the wheels on the city-to-city bus will go round-and-round from Union Station...
To the following locations:
- Las Vegas
- Oakland
- San Francisco
- San Jose
With the following amenities:
- No charge for the first checked bag
- Free onboard Wi-Fi
- At-seat power outlets
- Single and double decker buses
- Bathrooms
- Panoramic views
Travel times will vary depending on day of the week and time of day. Los Angeles-to-Las Vegas, for example, ranges from just over five hours, to just under six and a half hours.


text:
Find out first!
Sign up for the What's on updates and be the first to know
What's on
Browse our special events below. For details of permanent exhibitions and activities, check out the Family Homes pages.
For schools events visit our Beyond the classroom section.
What's on- 14 February 2014
Play on
A series of blog posts exploring the relationship between Shakespeare and music.
Permanent exhibition
No need to book just come along!
Star in a Romeo & Juliet Video
Shakespeare's Birthplace
Create a video of Romeo & Juliet on Valentine's Day
14-17 February 2014
No need to book just come along!
Part of February Half Term
February Half Term at Shakespeare's Family Homes
Family friendly activities at Shakespeare's Family Homes throughout the holidays
14-23 February 2014
No need to book just come along!
Part of February Half Term


text:
CIT's mission is to provide outstanding leadership and support to the college community in computing, voice and data communications, and instructional technologies. The CIT department consists of 34 highly qualified staff members located in South Hall and Newton Hall.
Monday-Thursday: 8:00am - 6:00pm
Friday: 8:00am - 4:00pm
Saturday-Sunday: CLOSED
Phone: (585) 245-5588


text:
According to this movie the two universal human imperatives are the need to find out whether we can contact the dead and the need to use Google to do so. Can we please de-Google-ize movies? I ...
Movie Mom's Archives
Movie Mom's full archives of more than 1,400 reviews (including her 200 best films for families) and 400 blog posts is now on Beliefnet for searching.
You are reporting this content because it violates the Terms of Service.
All reported content is logged for investigation.


text:
To the Editor:
Wrong, wrong, wrong this was just malicious. How could you have ever thought the article concerning Clark Jenkins was a news item? How would you liked for someone to print this same article about you and spatter it across the front page of the local newspaper? You must have a great deal of resentment toward Mr. Jenkins. I hardly think telling Edgecombe county how many houses, their square feet and value, how much land he owns and the personal details of he and his wife's life whether rumor or fact is news. Maybe you are turning into just a gossip tabloid. Oddly enough, I had just written the check to renew our subscription to the newspaper but after reading this article we will no longer subscribe to a newspaper that would stoop this low.
Jean and Donnie Whitehurst


text:
Trojan Horses?
After UF looked like ..... words escape me, the Aggies looked incredible. Bama looked terrific in the second half, and I think if AJ had been a little more on his game in the first, this would have been a much different game. But its football, you play with the team that shows up, and the Ags proved they can play with anybody this year. Very happy we got them on game one and not game 9, 10,11 or 12. What a great, exciting two halfs of football. Bama never quit and A&M proved they can figure out how to play both sides of the ball all game long. By far the best football game I watched this year. Exciting all the way to the end.


text:
Many of you who have stayed with us here at our Arkansas bed and breakfast have fallen in love with our handmade stoneware coffee mugs and, of course, purchased them to take home. Those mugs have been made for us by Deneen Pottery in St. Paul, MN. They are the premier producers of custom handmade logo stoneware and have been in their family-run business since 1972. They carry forward a long tradition of hand-thrown stoneware designs based on shapes and functions hundreds of years in the making. Each piece is carefully crafted, one at a time.
The process of hand making pottery is both time consuming and labor intensive. Over 24 pairs of hands will touch each mug during its production until it is ready to be shipped. While each piece is uniform in size and shape, every one is created by hand, making it unique. A custom hand thrown mug by Deneen Pottery truly makes a statement of American made quality and craftsmanship. Always check the bottom, you'll find their mark on each piece that they make.
Peter and Mary Deneen studied ceramics and pottery at Luther College (1966-1970) and from master potter Marguerite Wildenhain (1968-1978). Peter earned his MA at the University of Northern Iowa (1971). With more than 30 years of experience, Deneen Pottery has developed through several locations and creative specialties, both retail and wholesale, to emerge as the premier producer of custom logo stoneware.
"Glaze Engraving"TM is an exclusive process in which original studio art is cut directly into the clay and filled with glaze, achieving a distinctive detailed image. The process was developed by Peter Deneen assisted by artist David Christofferson. David is an illustrator, metal smith, and boat builder. His talents in drawing, three dimensional work, and attention to detail are all part of the "Glaze Engraved"TM quality product.
We usually keep two styles on hand here at the inn, the footed style (shown above) and the round belly style (see below). We like to keep a variety of colors and usually will order a new color or two each order, for variety – and just because we fall in love with it!
So come see us and browse the mugs!
Warmest regards,
Jeff and Nadara (Sam) Feldman – and Sophie, too!


text:
Watch the inspiring messages of general conference.
View now
Watch or listen to the inspiring messages for women ages 8 and up.
Watch Sister Linda K. Burton's inspiring address.
Watch now
These trainings help leaders learn their duties and to introduce resource materials.
Capture the vision of the work, understand your role, and inspire others.
Enjoy the Mormon Tabernacle Choir Music and the Spoken Word broadcasts.
Listen to inspiring messages from Church leaders.
"An Evening with a General Authority" is a yearly broadcast to Church Educational System educators and personnel.


text:
Welcome to the homepage of FileZilla, the free FTP solution. Both a client and a server are available. FileZilla is open source software distributed free of charge under the terms of the GNU General Public License
Support is available through our forums, the wiki and the bug and feature request trackers.
In addition, you will find documentation on how to compile FileZilla and nightly builds for multiple platforms in the development section.
Quick download links
Pick the client if you want to transfer files. Get the server if you want to make files available for others.
2014-04-08 - FileZilla Server 0.9.44 released
Fixed vulnerabilities:
- Update to OpenSSL 1.0.1g to address CVE-2014-0160
New features:
- Improve alias description and guide user towards alias creation if multiple unrelated directories are being shared. Support for the old non-virtual alias configuration has been removed.
- Display additional information if a certificate or key file cannot be loaded
2014-03-28 - FileZilla Client 3.8.0 released
New features:
- OS X: Implemented the reboot, shutdown and suspend queue completion actions
Bugfixes and minor changes:
- Popup dialogs no longer automatically open if other dialogs are already open. This prevents FileZilla from becoming unresponsive on OS X
- Fix calculation of current transfer speed. In some situations the transfer speed tooltip over the activity indicators showed negative speeds
- Fix handling of focus item in local directory listings if connecting to a site with a default local directory
2014-03-22 - FileZilla Client 3.8.0-rc1 released
New features:
- MSW: Added suspend as new queue completion action
Bugfixes and minor changes:
- Minor fixes to new updater
2014-01-28 - Advisory: Malware downloads on third-party websites
As recently published on the avast! blog, modified versions of FileZilla tainted with malware are being distributed on some third-party websites.
This is by no means a new threat. While this instance is one of the largest to date, there have been many cases of modified versions spreading malware hosted on third-party websites for over a decade. We do not condone these actions and are taking measures to get the known offenders removed. Note that we cannot in general prevent tainted versions on third-party websites or prove their authenticity, especially since the FileZilla Project promotes beneficial redistribution and modifications of FileZilla in the spirit of free open source software and the GNU General Public License.
To avoid any risk when downloading FileZilla, we recommend that you only download FileZilla from the official FileZilla website or from SourceForge, the official download partner of FileZilla and many other open source projects.
To check the authenticity of your version of FileZilla, the SHA-512 hash of the unmodified FileZilla_3.7.3_win32-setup.exe is f56716044dcf1239d09343d11422b26230fb14419a4e85b702a03080550bc9e69e1c7ec22312874701de54c1ed4085e0f468d93d4993b36eabd704406b3567ff
In case you no longer have the installer, the SHA-512 hash of the installed filezilla.exe in version 3.7.3 is d6d68f564295a878ba6cdf1d79cc90b4cff4fb98177bf5aac0eb22ad3757f8997e2de718e290eb97520892d04a8d2388bb2bcb71b785d05c2b59b037abf6d28f
2013-12-03 - Donations via Bitcoin
Due to popular demand we're now accepting donations via Bitcoin using the following address: 1436j9Kw2veuQbY1FzPd4VFGZzejLEBjhb
2010-01-02 - Subversion repository moved
The address of the subversion repository has changed.
The old address, http(s)://filezilla.svn.sourceforge.net/svnroot/filezilla is no longer valid. The new address is http(s)://svn.filezilla-project.org/svn/
The new repository can be browsed using http://svn.filezilla-project.org/filezilla/.


text:
Update, 4:30 p.m.: Montgomery County spokeswoman Esther Bowring says Ride On is planning a similar electronic notification system at major transit centers.
"Timing for implementation has not been set," Bowring wrote in an e-mail to Patch.
Original post, 3 p.m.: Waiting in the cold and wondering when that next bus will arrive?
Some Metrobus bus shelters will soon be equipped with flat screens that will display real-time bus arrival times, The Washington Examiner reports.
Up to 70 screens, funded by a federal grant, could be installed at Metrobus stops on Metro property across the region, according to the report.
Local jurisdictions will need to decide whether the screens will be installed at Merobus stops on streets they own, Metro spokesman Philip Stewart told The Examiner.
Following an inquiry from Patch Thursday afternoon, a Montgomery County spokeswoman was looking into whether the county is interested in having the screens installed at Metrobus stops on county roads.
Montgomery County last year launched Ride On Real Time, a service that provides real time bus arrival information for Ride On buses via text, Web or app.


text:
HGTV and HGTV Dream Home Giveaway and their associated logos are trademarks of Scripps Networks, LLC. Used with permission; all rights reserved.
© 2014 Ethan Allen Global Inc.
sign up for email updates
We'd be happy to send you the latest scoop. Enter your email address below to be included.
Thanks for signing up!
You'll be getting Ethan Allen updates and news before you know it.


text:
I graduated in Computer Science and Engineering from KUET. Then I worked as a Senior Software Engineer for Samsung at its Bangladesh R&D facility. Now, I am pursuing MS in Computer Science at Stony Brook University. Besides, I write blog on computing and other subjects, draw graphic images, make icons and logos. I like to design and develop mobile, desktop and web apps.
I am a programmer and I speak C/C++, C#, PHP, Java, XML, SQL, and OWL. I weave in HTML, CSS and jQuery. I also know shell scripts, some dialects of assembly, Prolog, LINQ, SPARQL, RDF... I want to have some Perl and Ruby with me and become a parselmouth with Python. I advocate semantic web as the next great stage of the web.
I like to draw pictures both by using paint-brushes and computer-mice. Sometimes I write poetry, do photography, travel around and of course watch movies. I am fond of listening music (from hip hop rap to classic). I read books ranging from classic literature, fantasy, sci-fi to nonsense.
I am a Bangladeshi Muslim and grew up in Tangail. My schools were Town Primary School and Bindubasini Govt. Boys' High School; I passed my best days there. Later I attended B N M Rifles Public School and College for Higher Secondary education. Afterwards, I went for pursuing an engineering degree in Computer Science at KUET; there, I lived in Fazlul Haque Hall and lead a great university life. There, I served in many representative roles and got involved in attending and organizing events.
I like to cheer-up my life and enjoy my work; I always try to see smile on people's faces and I laugh a lot. I enjoy company of people but sometimes I get into solitude. I have my own beliefs and views but I respect others' too and like to have debate and discussion on opinions.


text:
Sophia Watson
16 years of work experience
Century 21 Bob Mc Elroy Realty
169 W High St
Mt Gilead, OH, 43338
(419) 571-0662
Ratings & reviews (3)
Powered by Zillow
Highly likely to recommend
Showed me homes
A real go-getter. Was at my beck and call 24/7 and was always right on top of stuff. Returned emails, phone calls, and texts immediately, no matter what time of day or night. Would work with her again in a heartbeat.
Highly likely to recommend
Helped me buy home
Sophia helped me find the perfect home. I knew the areas I wanted to look and had a price in mind. She helped me look at at lot of houses. I had a lot of requests and she was right on top of everyone of them. I was unsure of a lot of the processes and she made it clear and easy to understand them. She helped me line up a local Mortgage Lender to make the process even easier. Her communication and free time for me was a plus. I felt like I was her priority. When I needed something she was there. I would highly recommend using Sophia for buying a house and if I ever sell and relocate or upgrade she will be my first call! Christopher L. Smith Less ... More
Highly likely to recommend
Showed me homes
I am looking forward to Sophia's knowledge of the area and her negotiating skills, concerning my personal situation. She's very friendly, down to earth and called me when promised. I look forward to working with her.


text:
Beats Solo HD - Drenched in Pink
Beats Solo HD - Drenched in Pink
Product Information
Beats Solo HD headphones are made for music lovers looking for high-definition headphones that look as good as they sound. These headphones combine advanced driver technology and premium design that deliver legendary Beats by Dr. Dre sound and are lightweight and durable.
Clearer sound, deeper bass
These are the only Beats by Dr. Dre that come with not one, but two speakers inside each can. That means you get crystal-clear highs and deep, rumbling lows in high definition.
Almost impossible to break
Every pair is now constructed of super-durable, flexible material, reinforced with a metal strip to make sure it never comes apart. They look good, too—every pair features the same high-quality clear-coat finish you find on a luxury car.
Built-in mic for calls
Switch easily between songs and incoming calls. No need to take off your headphones or talk into the phone like a walkie-talkie.
Remote control
Take calls, skip songs, and adjust volume right from the cord of your Beats Solo HD headphones. No more searching for your phone or iPod just to find the right song.
- Made from super lightweight materials and featuring soft leather ear cups
- Adjustable headband for optimum comfort
- Proprietary titanium coated driver technology for deep bass and accurately reproduced details
- Control music with the built-in, three-button remote control; adjust music, volume, and move between tracks
- Unique folding system and lightweight materials to handle life on the road
Did you notice?The three-button mic gives you solid playback control, plus you get crystal-clear hands-free calling on your iPhone.
Apple Recommends ForListen to music or watch movies on your iPhone and still take calls with the touch of a button.
What's in the Box?
- Beats Solo HD on-ear headphones
- Cable with in-line mic and remote that controls iOS devices
- Carrying case
Tech Specs
- Form Factor: On Ear
- Cable Length: 4.3 ft./1.3m
Manufacturer Information
Part Number
- Mfr. Part Number: 900-00174-01
- UPC or EAN No.: 848447007837
- Note: Products sold through this website that do not bear the Apple Brand name are serviced and supported exclusively by their manufacturers in accordance with terms and conditions packaged with the products. Apple's Limited Warranty does not apply to products that are not Apple-branded, even if packaged or sold with Apple products. Please contact the manufacturer directly for technical support and customer service.
- Warranty: One-year limited
1-800-MY-APPLE or Chat now
iPhone models
iPad models
iPad (1st generation)
iPad 2 (2nd generation)
iPad (3rd generation)
iPad with Retina display
iPad mini
iPod models
iPod 1st & 2nd Generation
iPod 3rd Generation
iPod 4th Generation (click wheel)
iPod 4th Generation (color display)
iPod 5th Generation (video)
iPod classic 80GB/160GB (2007)
iPod classic 120GB (2008)
iPod classic 160GB (2009)
iPod mini
iPod nano 1st Generation
iPod nano 2nd Generation
iPod nano 3rd Generation (video)
iPod nano 4th Generation (video)
iPod nano 5th Generation (video camera)
iPod nano 6th Generation
iPod nano 7th Generation
iPod shuffle 1st Generation
iPod shuffle 2nd Generation
iPod shuffle 3rd Generation
iPod shuffle 4th Generation
iPod touch 1st Generation
iPod touch 2nd Generation
iPod touch 3rd Generation
iPod touch 4th Generation
iPod touch 5th Generation 32GB/64GB
iPod touch 5th Generation 16GB
Ratings & Reviews
Love PiNk
Oh My God ! NeVer ImagiNe PiNk BeAt So IN LovE WiTh It <3
- Written by Lin H from Longbeach
7 of 18 people found this useful
Questions & Answers
Answers from the community
Do they become uncomfortable after wearing for more than an hour?
- Asked by Louis H
- Jun 6, 2013
Best Answer:
no not really, they only become uncomfortable for me if I'm wearing my sunglasses with them on as th no not really, they only become uncomfortable for me if I'm wearing my sunglasses with them on as they push down on the ear area. They are so comfy i hardly realise I'm wearing them half the time. …
- Answered by Abbie E
- Jul 4, 2013
What different between the beats studio over ear headphone and beats solo hd on earphone?
- Asked by Ha V from Richardson
- Nov 6, 2012
Best Answer:
Studios, which are over ear, cover your entire ear so your ears are inside of the headphones and the Studios, which are over ear, cover your entire ear so your ears are inside of the headphones and they are much bigger than solo hds. Solo hds rest quite comfortably on your ears and are very light and portable. People argue that the sound quality is better on Studios but I reccomend picking yourself up some solo hds because a). the quality is just as good b). they are smaller and lighter and c). they cost $100 less.
Just my opinion …
- Answered by Chris L
- Nov 15, 2012
Will it work with iPod classic 80gb
- Asked by Wesley K from Seattle
- Apr 28, 2013
Best Rule Of Thumb For Everyone
Asking The Same Questions
"Will These Work With..."
Remembe Best Rule Of Thumb For Everyone
Asking The Same Questions
"Will These Work With..."
If it's An iPad, iPod, or ANY Device That Has
A Round ( Approx 3.5mm ) socket plug, On Either
Side of the Device, Then It Will Work. I Know I Can Plug Mine Into Almost
Every Electronic "APPLE" toy ( IPod reg/mini, iPhone iPad Air etc! )
Even Smart phones like BlackBerry or Other Big Name Brands Work.
My Sisters Reg Cell Phone TOO!!! So Give it a Try! …
- Answered by Michele C from Fall River
- Apr 14, 2014
Will they work with an iPad Air?
- Asked by Kurtis C from Madison
- Dec 13, 2013
Yes it will work because it will work on most phones or tablets. It is not wireless so you will just Yes it will work because it will work on most phones or tablets. It is not wireless so you will just have to plug it in to you tablet or phone. …
- Answered by Sue M from Edmonton
- Jan 1, 2014
What's the hz
- Asked by Becca B from Lincoln
- Jul 16, 2013
do they come with airplane connector ?
- Asked by Rishab K from Amritsar
- Aug 23, 2013


text:
University of Missouri Health Care and University Physicians comply with the Fair and Accurate Credit Transactions Act of 2003 (FACTA), also known as the Identity Theft Red Flags and Notices of Address Discrepancy or "Red Flag Rules." The rules require all organizations subject to the legislation to develop and implement a formal, written and revisable identity theft prevention program to detect, prevent and mitigate identity theft.
To comply with this regulation, MU Health Care and University Physicians have established new practices to help deter, detect and mitigate identity theft issues. Providing your photo identification upon arrival is one of those practices.


text:
You have no items in your shopping cart.
SKU# IRONMAN Wisconsin 2013 Men's FINISHER Softshell Jacket - Gray
You made it to the Finish Line! Now, show everyone you are an IRONMAN®. This Softshell Jacket by Zorrel features the IRONMAN® Wisconsin logo, FINISHER graphic and date of event on shoulder.
From designated finish line viewing areas to custom all-access experiences, we invite you to enjoy the races as a VIP.
Get information regarding IRONMAN news, races & events:
Please wait...


text:
Bin City is a 3D platform game I've been working on for about 9 months and I thought I could show it to you.
It is my first 3D project and actually the first game I ever finished. It is written in C++ and DirectX 9. I didn't make any use of shaders, my goal was to create a finished game and not to spend too much time on complex effects.
As you might see I prefer programming to drawing and I've never drawn in 3D before, but it was a good experience to get into some modelling.
Sounds and music are NOT recorded/composed by me (the music is from
I would have liked to make the music myself but I didn't have enough time.
Unfortunately the game hasn't been tested on more than a few systems, so let me know if problems occur.
Download it
Watch a youtube video here
Watch more screenshots here
I hope you like it! And let me know what you think about the game.


text:
The BBC elicits sympathy for Palestinian terrorists.
Israel is in the midst of a battle for public opinion – waged primarily via the media. To ensure Israel is represented fairly and accurately, HonestReporting monitors the media, exposes cases of bias, promotes balance, and effects change through education and action.
Read more
We'd love to hear what you have
to say.
Leave a Comment
HonestReporting Comments Policy
HonestReporting Syndication & Fair Use Terms