Discuss August 2016

discuss@lists.centos.org

131 participants
135 discussions

howto install yumex
by geo.inbox.ignored 07 Apr '17

07 Apr '17

greetings. trying to install yumex, but obviously have forgotten what i did previously to install packages. sudo yum install yumex* errors out with; No package yumex* available. please inform my chemo brain what is correct. tia. -- peace out. CentOS GNU/Linux 7.1511 tc,hago. g . =+= Tired of having your microsoft os hacked? Change to Linux os, used by microsoft hackers. =+= in a world with out fences, who needs gates. =+=

7 16

I want to connect to a l2tp server from centos.
by Eliezer Croitoru 22 Mar '17

22 Mar '17

I have a server currently connecting to a pptp remote server. This server(lns\lac) has the option for pptp connections and l2tp connections. The l2tp connections are not using ipsec encryption at all. I have seen couple guides\tutorials on the internet: - https://raymii.org/s/tutorials/IPSEC_L2TP_vpn_on_CentOS_-_Red_Hat_Enterpris… - https://wiki.archlinux.org/index.php/L2TP/IPsec_VPN_client_setup But all the guides that I have found are using ipsec with "secret". On ubuntu there is a gui applet that helps setting these kind of connections up but I am working with a CentOS server and not Ubuntu desktop. If someone used l2tp the same way I want to use on CentOS 7 please give me some advice. If you have a guide which might help me I will be more then happy to see this one. Thanks, Eliezer

4 8

What is broken with fail2ban
by Günther J. Niederwimmer 02 Nov '16

02 Nov '16

Hello List, with CentOS 7.2 it is not longer possible to run fail2ban on a Server ? I install a new CentOS 7.2 and the EPEL directory yum install fail2ban I don't change anything only I create a jail.local to enable the Filters [sshd] enabled = true .... ..... When I start afterward fail2ban systemctl status fail2ban is clean But systemctl status firewalld is broken ● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled) Active: active (running) since Sa 2016-08-20 12:08:27 CEST; 4min 50s ago Main PID: 13158 (firewalld) CGroup: /system.slice/firewalld.service └─13158 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid Aug 20 12:12:23 yyyy.xxxxxx.at firewalld[13158]: 2016-08-20 12:12:23 ERROR: NOT_ENABLED Aug 20 12:12:24 yyyy.xxxxxx.at firewalld[13158]: 2016-08-20 12:12:24 ERROR: NOT_ENABLED Aug 20 12:12:25 yyyy.xxxxxx.at firewalld[13158]: 2016-08-20 12:12:25 ERROR: NOT_ENABLED Aug 20 12:12:27 yyyy.xxxxxx.at firewalld[13158]: 2016-08-20 12:12:27 ERROR: NOT_ENABLED Aug 20 12:12:27 yyyy.xxxxxx.at firewalld[13158]: 2016-08-20 12:12:27 ERROR: NOT_ENABLED Aug 20 12:12:28 yyyy.xxxxxx.at firewalld[13158]: 2016-08-20 12:12:28 ERROR: NOT_ENABLED Aug 20 12:12:29 yyyy.xxxxxx.at firewalld[13158]: 2016-08-20 12:12:29 ERROR: NOT_ENABLED Aug 20 12:12:30 yyyy.xxxxxx.at firewalld[13158]: 2016-08-20 12:12:30 ERROR: NOT_ENABLED Aug 20 12:12:31 yyyy.xxxxxx.at firewalld[13158]: 2016-08-20 12:12:31 ERROR: NOT_ENABLED Aug 20 12:12:31 yyyy.xxxxxx.at firewalld[13158]: 2016-08-20 12:12:31 ERROR: NOT_ENABLED Have any a Idea what is broken ? ipset, iptables, fail2ban ? -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer

3 4

How to block routing/forwarding with firewalld
by Jeff White 02 Nov '16

02 Nov '16

On CentOS 7 with firewalld I have a box with numerous interfaces acting as a NAT gateway. This works but I noticed that it routes/forwards traffic not just from my internal zone to external zone but also between interfaces within the internal zone. How can I prevent that traffic? I've tried adding direct and rich rules to deny the traffic but it doesn't work. Direct: firewall-cmd --direct --add-rule ipv4 filter INPUT 0 -s 10.110.4.0/22 -d 10.110.0.0/22 -j REJECT That command works, and I see it in `iptables -L` but traffic is still allowed. Rich: # firewall-cmd --zone=trusted --add-rich-rule='rule family=ipv4 source address=10.110.4.0/22 destination address=10.110.0.0/22 reject' Error: INVALID_RULE: destination action I can't find any explanation of what that error means. So, how do you tell firewalld to stop forwarding traffic between interfaces? # firewall-cmd --get-active-zones public interfaces: ens161 ens193 trusted interfaces: ens192 ens224 ens256 lo # firewall-cmd --list-all public (default, active) interfaces: ens161 ens193 sources: services: dhcpv6-client ssh ports: masquerade: yes forward-ports: icmp-blocks: rich rules: -- Jeff White HPC Systems Engineer Information Technology Services - WSU

3 2

Ordering rich rules with firewalld
by Jeff White 26 Oct '16

26 Oct '16

Is there any way to order rich rules in firewalld? If I remove all rules and add them back in firewalld seems to put them in whatever order it feels like. Alternatively, how can I change the default policy of a firewalld zone? At the moment I don't see any way to have a zone accept traffic by default other than adding a rich rule allowing 0.0.0.0/0. -- Jeff White HPC Systems Engineer Information Technology Services - WSU

5 4

CentOS-7-x86_64-GenericCloud.raw very unusual format
by Aliaksei Sheshka 15 Oct '16

15 Oct '16

Hello! Is anyone aware why CentOS-7-x86_64-GenericCloud.raw has such unusual format ? root@test-srv:~# wget http://cloud.centos.org/centos/7/images/CentOS-7-x86_64-GenericCloud.raw --2016-03-21 13:16:31-- http://cloud.centos.org/centos/7/images/CentOS-7-x86_64-GenericCloud.raw Resolving cloud.centos.org (cloud.centos.org)... 162.252.80.138 Connecting to cloud.centos.org (cloud.centos.org)|162.252.80.138|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 374668382 (357M) [application/x-gzip] Saving to: 'CentOS-7-x86_64-GenericCloud.raw' CentOS-7-x86_64-GenericCloud.raw 100%[=========================================================================>] 357.31M 12.9MB/s in 30s 2016-03-21 13:17:03 (11.9 MB/s) - 'CentOS-7-x86_64-GenericCloud.raw' saved [374668382/374668382] Download reports [application/x-gzip] for raw file And indeed root@test-srv:~# file CentOS-7-x86_64-GenericCloud.raw CentOS-7-x86_64-GenericCloud.raw: gzip compressed data, last modified: Sat Feb 27 02:14:37 2016, from Unix Ok, lets uncompress: root@test-srv:~# zcat -d CentOS-7-x86_64-GenericCloud.raw > CentOS-7-x86_64-GenericCloud.a And check again root@test-srv:~# file CentOS-7-x86_64-GenericCloud.a CentOS-7-x86_64-GenericCloud.a: POSIX tar archive (GNU) Ok. it's a tar archive. root@test-srv:~# tar -xf CentOS-7-x86_64-GenericCloud.a -v CentOS-7-x86_64-GenericCloud-1602.raw Now it's CentOS-7-x86_64-GenericCloud-1602.raw file which is indeed raw What is the point to pack single raw file into the tar.gz and to name it raw ? Or it's just a mistake ? Thanks!

8 16

Centos7 kickstart & pxe
by johan.vermeulen7＠telenet.be 05 Sep '16

05 Sep '16

Hello All, I'm trying to get kickstart to work through pxe. So far I've set up dhcp server, tftp and so on. But it seems at some point I always get stuck because the iso file is write-protected. I've tried remounting it rw, and I 've dd the iso first, I then get EM not a block device. Any help would be appreciated. Greetings, J.

3 4

"Windows" share issue; access via smb:// fails, "mount -t cifs" works
by Toralf Lund 01 Sep '16

01 Sep '16

Hi, Is anyone here using smb:// URLs to access "Windows" shares? I've been doing this for a while with common file systems at work, and it used to work just fine. Then I while back, I started getting issues; I will now just keep getting asked for a password when I try to access something through smb://. I thought at first that this meant there had been some kind of change related to permissions on the shares, but now I find that I can mount them just fine using "mount -t cifs". In other words, I get: gvfs-mount smb://mydomain\;toralf.lund@theserver/myshare Password required for share myshare on theserver Password: Password required for share myshare on theserver Password: Password required for share myshare on theserver Password: [ I enter the correct password, but gvs-mount keeps asking... Behaviour is the same if I try to open the URL in the file manager instead. ] mount -t cifs -o user=toralf.lund,workgroup=mydomain //theserver/myshare /tmp_mnt/ Password: [ At this stage the filesystem is mounted, as long as I enter the correct password. ] Does anyone have any idea what is going on here? Why does the VFS mount fail when mount.cifs works on the same share? Is there a difference in the way authentication works, or something? Has there been a change to the smb support that might explain this? This is on a CentOS 6 x86_64 installation with all updates applied. - Toralf

1 1

None
by None 31 Aug '16

31 Aug '16

by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id u7VJ6PIp019192 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT) for <centos(a)centos.org>; Wed, 31 Aug 2016 15:06:26 -0400 To: centos(a)centos.org References: <d059a28c-b866-5056-dda6-29e3077ca907(a)mit.edu> <8d10f9b1-0ed9-0217-ae0e-726acd1d9a87(a)gmail.com> <8d59038f-3dbe-5bff-9673-fbada1d3f31c(a)mit.edu> <b9abfd5a5a37f29bff085aae6174877f.squirrel(a)host290.hostmonster.com> From: Pat Haley <phaley(a)mit.edu> Message-ID: <d9ac7e12-3283-ea9e-a5b0-5dcd8d27d87d(a)mit.edu> Date: Wed, 31 Aug 2016 15:06:25 -0400 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.2.0 MIME-Version: 1.0 In-Reply-To: <b9abfd5a5a37f29bff085aae6174877f.squirrel(a)host290.hostmonster.com> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFrrBIsWRmVeSWpSXmKPExsUixCmqrLtJ63i4wb2P5hbLzixgdmD0WNk2 mTmAMYrLJiU1J7MstUjfLoEr4/byu8wFPzgrrs+7zNjA+Im9i5GTQ0LARGLh8c1sXYxcHEIC bUwSi39fYIZwTjJKLLyznRXCOcgkcWvPV7AWYQFHiRcvt7OB2CICohI9i19BtT9hlPj2ayoT SIJNQEFi3a0zYA28AlYSzVcOgDWwCKhKLFndxQJiiwpESNxa9ZERokZQ4uTMJ2BxToEAiTVH L7GC2MwCthJ35u5mhrDlJba/ncM8gZF/FpKWWUjKZiEpW8DIvIpRNiW3Sjc3MTOnODVZtzg5 MS8vtUjXTC83s0QvNaV0EyMoANldlHcwvuzzPsQowMGoxMPr8OZYuBBrYllxZe4hRkkOJiVR 3pZXQCG+pPyUyozE4oz4otKc1OJDjBIczEoivMc0j4cL8aYkVlalFuXDpKQ5WJTEebtmHAgX EkhPLEnNTk0tSC2CycpwcChJ8M4CaRQsSk1PrUjLzClBSDNxcIIM5wEafkQDZHhxQWJucWY6 RP4Uo6KUOO8CkIQASCKjNA+uF5wg1NgPvWIUB3pFmJcNmC6EeIDJBa77FdBgJqDBBXcOgwwu SURISTUwekkEz/r5Ts9xgmniZrvezD3CvKIqb+P5P7Azrpy5cn5G7td1kfqrlaa+VBA73XvY ZouP+Ivat6VOp7UWyp70ygmaZWdk1XxgxvSrG8NWq98uvbZ9SdDf16tCGhUapSbLbogpWLg4 4YjHrLdMmouWrTp5Z9rsdxN3z2/M+KtT5s2zT+ad3u3EViWW4oxEQy3mouJEAMZPH+/rAgAA Subject: Re: [CentOS] group write permissions not being respected X-BeenThere: centos(a)centos.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: CentOS mailing list <centos.centos.org> List-Unsubscribe: <https://lists.centos.org/mailman/options/centos>, <mailto:centos-request@centos.org?subject=unsubscribe> List-Archive: <http://lists.centos.org/pipermail/centos/> List-Post: <mailto:centos@centos.org> List-Help: <mailto:centos-request@centos.org?subject=help> List-Subscribe: <https://lists.centos.org/mailman/listinfo/centos>, <mailto:centos-request@centos.org?subject=subscribe> X-List-Received-Date: Wed, 31 Aug 2016 19:06:26 -0000 For example the directory /gdata/bibliography/Work/GroupBib/trunk/ can be written in by user phaley but not by other users who are member of the group mseasweb. The directory has permissions [root@mseas ~]# ls -lh /gdata/bibliography/Work/GroupBib total 12K drwxrwsr-x 4 phaley mseasweb 4.0K Aug 30 12:31 trunk The parent directory (/gdata/bibliography/Work/GroupBib) has permissions [root@mseas ~]# ls -lh /gdata/bibliography/Work/ total 8.0K drwxrwsr-x 6 phaley mseasweb 4.0K Aug 30 14:01 GroupBib On 08/31/2016 02:04 PM, m.roth(a)5-cent.us wrote: > Stupid question, and note I missed most of the earlier posts in this > thread: what are the permissions on the directory that this directory are > in? > > mark > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Pat Haley Email: phaley(a)mit.edu Center for Ocean Engineering Phone: (617) 253-6824 Dept. of Mechanical Engineering Fax: (617) 253-8125 MIT, Room 5-213 http://web.mit.edu/phaley/www/ 77 Massachusetts Avenue Cambridge, MA 02139-4301

1 0

Re: [CentOS] group write permissions not being respected
by m.roth＠5-cent.us 31 Aug '16

31 Aug '16

Stupid question, and note I missed most of the earlier posts in this thread: what are the permissions on the directory that this directory are in? mark

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss August 2016