discuss-pt-br

discuss-pt-br@lists.centos.org

1528 discussions

SSH
by Janderson Jetto 14 Feb '20

14 Feb '20

Bom dia amigos, Estou tendo problemas com acesso externo via SSH. sempre usei as versões 5 e 6 do CentOS, porem os servidor2s Dell não aceitam mais, somente da 7 em diante. Me conecto via OpenVpn e acesso novamente o servidor via SSH pela rede interna, quando vou direto pela internet pede usuario e senha e da erro de senha... mas a senha esta correta pois é a mesma que uso quando acesso pela OpenVpn... Regras de firewall (IPTABLES) ok, O range 200.0/24 é o alocado ao OpenVpn. Como podem ver fiz até uma regra somente para testes lkiberando o INPUT ao servidor vindo de qualquer origem $IPTABLES -A INPUT -m state --state NEW -j ACCEPT Acredito ser alguma configuração no .conf do SSH, mas ali já não é muito a minha praia.. No CentOs5 e 6 nunca tive esse problema. Fico muito grato pela ajuda de vcs. #!/bin/sh --debug ############################################################################### ## Data 25/01/2020 - Janderson Jetto ## ## /etc/init.d/firewall ## ############################################################################### #Variaveis IPTABLES=/sbin/iptables IFEXT=em1 IFINT=em2 VPN01=192.168.21.254 DARIUS=191.252.201.92 INTERNA=192.168.21.0/24 DMZ=10.10.21.0/24 ###################### $IPTABLES -L -n | awk '/Chain/ {printf "iptables -F %s\n", $2;}'|/bin/sh $IPTABLES -t nat -L -n | awk '/Chain/ {printf "iptables -t nat -F %s\n", $2;}'|/bin/sh $IPTABLES -t mangle -L -n | awk '/Chain/ {printf "iptables -t mangle -F %s\n", $2;}'|/bin/sh $IPTABLES -X $IPTABLES -t nat -X $IPTABLES -t mangle -X $IPTABLES -P OUTPUT ACCEPT $IPTABLES -P INPUT DROP $IPTABLES -P FORWARD DROP $IPTABLES -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT $IPTABLES -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT $IPTABLES -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT # Registro de LOGS $IPTABLES -A INPUT -p tcp -j LOG --log-prefix "INPUT TCP: " --log-ip-options $IPTABLES -A INPUT -p udp -j LOG --log-prefix "INPUT UDP: " --log-ip-options $IPTABLES -A INPUT -p icmp -j LOG --log-prefix "INPUT ICMP: " --log-ip-options $IPTABLES -A FORWARD -p tcp -j LOG --log-prefix "FORWARD TCP: " --log-ip-options $IPTABLES -A FORWARD -p udp -j LOG --log-prefix "FORWARD UDP: " --log-ip-options $IPTABLES -A FORWARD -p icmp -j LOG --log-prefix "FORWARD ICMP: " --log-ip-options #Script Secundario #source /usr/local/scripts/firewall/regras_usuario ################################################################################################ # # # # # ATENCAO NUNCA ALTERAR DESTA JANELA ACIMA. SE ALTERAR UMA VARIAVEL ALTERA TODO O SCRIPT # ################################################################################################# # REGRAS USUARIOS # GERENCIA # *$IPTABLES -A INPUT -m state --state NEW -j ACCEPT* $IPTABLES -A INPUT -m state --state NEW -s 191.252.201.92 -j ACCEPT $IPTABLES -A INPUT -m state --state NEW -s 192.168.200.9 -p tcp --dport 22 -j ACCEPT *$IPTABLES -A INPUT -m state --state NEW -s 192.168.200.5 -j ACCEPT* $IPTABLES -A INPUT -m state --state NEW -s 192.168.21.10 -p tcp --dport 22 -j ACCEPT # $IPTABLES -A FORWARD -m state --state NEW -s 192.168.200.5 -j ACCEPT ################################################################ # # MANGLE # $IPTABLES -t mangle -A PREROUTING -d 192.168.0.0/16 -j RETURN $IPTABLES -t mangle -A PREROUTING -d 172.16.0.0/12 -j RETURN $IPTABLES -t mangle -A OUTPUT -d 192.168.0.0/16 -j RETURN $IPTABLES -t mangle -A OUTPUT -d 172.16.0.0/12 -j RETURN ################################################################ # # INTERNET - CORREIO # $IPTABLES -t nat -A POSTROUTING -p tcp -m multiport --dport 465,587,993,995 -o em1 -j SNAT --to-source 192.168.21.254 $IPTABLES -A FORWARD -m state --state NEW -p tcp -m multiport --dport 465,587,993,995 -j ACCEPT # ################################################################ # # PROXY # $IPTABLES -A INPUT -m state --state NEW -s $INTERNA -p tcp --dport 3128 -j ACCEPT $IPTABLES -A INPUT -m state --state NEW -s $DMZ -p tcp --dport 3128 -j ACCEPT $IPTABLES -t nat -A POSTROUTING -s 192.168.21.253 -o em1 -j SNAT --to-source 192.168.21.254 $IPTABLES -A FORWARD -m state --state NEW -s 192.168.21.253 -j ACCEPT # ################################################################

2 1

SFTP with chroot
by Rodrigo Cunha 17 Jun '19

17 Jun '19

Dears, i make a enviroment to sftp with chroot, but not work. I try setup four users to only directory (home) with chroot but when users with shell /bin/nologin try acess my server, the sistem closed session. I test my enviroment with users setuped bash: /bin/bash and work fine. Following my setup, for sftpd: roupadd zion mkdir -p /var/www/nabucodonosor.d && chmod 775 /var/www/nabucodonosor.d/ chown :zion /var/www/nabucodonosor.d adduser -d /var/www/nabucodonosor.d -s /bin/false -g zion neo && echo "P4ssw0rd" | passwd neo --stdin adduser -d /var/www/nabucodonosor.d -s /bin/false -g zion trinity && echo "P4ssw0rd" | passwd trinity --stdin adduser -d /var/www/nabucodonosor.d -s /bin/false -g zion morpheus && echo "P4ssw0rd" | passwd morpheus --stdin adduser -d /var/www/nabucodonosor.d -s /bin/false -g zion apoc && echo "P4ssw0rd" | passwd apoc --stdin sftp: [...] Subsystem sftp internal-sftp Match Group zion X11Forwarding no AllowTcpForwarding no ChrootDirectory /var/www/nabucodonosor.d ForceCommand internal-sftp [...] -- Atenciosamente, Rodrigo da Silva Cunha São Gonçalo, RJ - Brasil

1 0

Re: [CentOS-pt-br] Samba!
by Fabio Fraga [DS] 13 May '19

13 May '19

Glênio. Vamos responder pra lista para guardar histórico. O journalctl tem que retornar automático. Se não está subindo, tem algo errado aí. Você desabilitou ou deixou permissivo o selinux? *Fabio Fraga Machado* *Network & System Administrator / DevOPs* LinkedIn: Meu LinkedIn <https://www.linkedin.com/in/fabio-fraga-machado/> On Mon, May 13, 2019 at 2:14 PM Glenio Cortes Himmen < glenio.himmen(a)gmail.com> wrote: > Fábio, > > Verifiquei o endereço da interface e está correto. > Executei o comando journalctl com as opções conforme você solicitou e > aguardei por 5 minutos para obter retorno e nada, então cancelei com o > ctrl+c. > Utilizo um notebook com duas Interfaces (wifi e cabo) mas somente wifi > conectado e tenho instalado o virtualbox para rodar windows. > Em 13/05/2019 12:22, Fabio Fraga [DS] escreveu: > > Opa. > > Veja se te ajuda. > > > https://www.linuxquestions.org/questions/linux-newbie-8/cannot-start-nmb-se… > > Caso não, manda pra nós o # journalctl -f -u nmbd > > > > *Fabio Fraga Machado * > *Network & System Administrator / DevOPs* > LinkedIn: Meu LinkedIn <https://www.linkedin.com/in/fabio-fraga-machado/> > > > On Mon, May 13, 2019 at 11:33 AM Glenio Cortes Himmen < > glenio.himmen(a)gmail.com> wrote: > >> Estou com problemas no start do samba. >> >> Abaixo o log. >> >> Job for nmb.service failed because the control process exited with error >> code. See "systemctl status nmb.service" and "journalctl -xe" for details. >> ● smb.service - Samba SMB Daemon >> Loaded: loaded (/usr/lib/systemd/system/smb.service; enabled; vendor >> preset: disabled) >> Active: active (running) since Seg 2019-05-13 11:29:46 -03; 1s ago >> Docs: man:smbd(8) >> man:samba(7) >> man:smb.conf(5) >> Main PID: 16344 (smbd) >> Status: "smbd: ready to serve connections..." >> Tasks: 5 >> CGroup: /system.slice/smb.service >> ├─16344 /usr/sbin/smbd --foreground --no-process-group >> ├─16355 /usr/sbin/smbd --foreground --no-process-group >> ├─16356 /usr/sbin/smbd --foreground --no-process-group >> └─16385 /usr/sbin/smbd --foreground --no-process-group >> >> Mai 13 11:29:37 notgchredes systemd[1]: Starting Samba SMB Daemon... >> Mai 13 11:29:46 notgchredes smbd[16344]: [2019/05/13 11:29:46.624330, >> 0] ../lib/util/become_daemon.c:138(daemon_ready) >> Mai 13 11:29:46 notgchredes smbd[16344]: daemon_ready: STATUS=daemon >> 'smbd' finished starting up and ready to serve connections >> Mai 13 11:29:46 notgchredes systemd[1]: Started Samba SMB Daemon. >> ● nmb.service - Samba NMB Daemon >> Loaded: loaded (/usr/lib/systemd/system/nmb.service; enabled; vendor >> preset: disabled) >> Active: failed (Result: exit-code) since Seg 2019-05-13 11:29:46 >> -03; 751ms ago >> Docs: man:nmbd(8) >> man:samba(7) >> man:smb.conf(5) >> Process: 16374 ExecStart=/usr/sbin/nmbd --foreground >> --no-process-group $NMBDOPTIONS (code=exited, status=1/FAILURE) >> Main PID: 16374 (code=exited, status=1/FAILURE) >> Status: "daemon failed to start: NMBD failed when creating subnet >> lists" >> Error: 13 (Permissão negada) >> >> Mai 13 11:29:46 notgchredes nmbd[16374]: Error = Não foi possível >> acessar o endereço requisitado >> Mai 13 11:29:46 notgchredes nmbd[16374]: [2019/05/13 11:29:46.872555, >> 0] ../source3/nmbd/nmbd_subnetdb.c:113(make_subnet) >> Mai 13 11:29:46 notgchredes nmbd[16374]: nmbd_subnetdb:make_subnet() >> Mai 13 11:29:46 notgchredes nmbd[16374]: Failed to open nmb socket >> on interface 192.168.0.8 for port 137. Error was Não foi possível >> a…equisitado >> Mai 13 11:29:46 notgchredes nmbd[16374]: [2019/05/13 11:29:46.872642, >> 0] ../lib/util/become_daemon.c:124(exit_daemon) >> Mai 13 11:29:46 notgchredes nmbd[16374]: exit_daemon: STATUS=daemon >> failed to start: NMBD failed when creating subnet lists, error code 13 >> Mai 13 11:29:46 notgchredes systemd[1]: nmb.service: main process >> exited, code=exited, status=1/FAILURE >> Mai 13 11:29:46 notgchredes systemd[1]: Failed to start Samba NMB Daemon. >> Mai 13 11:29:46 notgchredes systemd[1]: Unit nmb.service entered failed >> state. >> Mai 13 11:29:46 notgchredes systemd[1]: nmb.service failed. >> Hint: Some lines were ellipsized, use -l to show in full. >> >> Alguém pode me dar uma dica? >> >> -- >> Glênio Côrtes Himmen >> glenio.himmen(a)gmail.com >> https://www.curriculum.com.br/ucn/p205993-734 >> >> _______________________________________________ >> CentOS-pt-br mailing list >> CentOS-pt-br(a)centos.org >> https://lists.centos.org/mailman/listinfo/centos-pt-br >> > > _______________________________________________ > CentOS-pt-br mailing listCentOS-pt-br@centos.orghttps://lists.centos.org/mailman/listinfo/centos-pt-br > > -- > Glênio Côrtes Himmenglenio.himmen@gmail.comhttps://www.curriculum.com.br/ucn/p205993-734 > >

1 0

Samba!
by Glenio Cortes Himmen 13 May '19

13 May '19

Estou com problemas no start do samba. Abaixo o log. Job for nmb.service failed because the control process exited with error code. See "systemctl status nmb.service" and "journalctl -xe" for details. ● smb.service - Samba SMB Daemon Loaded: loaded (/usr/lib/systemd/system/smb.service; enabled; vendor preset: disabled) Active: active (running) since Seg 2019-05-13 11:29:46 -03; 1s ago Docs: man:smbd(8) man:samba(7) man:smb.conf(5) Main PID: 16344 (smbd) Status: "smbd: ready to serve connections..." Tasks: 5 CGroup: /system.slice/smb.service ├─16344 /usr/sbin/smbd --foreground --no-process-group ├─16355 /usr/sbin/smbd --foreground --no-process-group ├─16356 /usr/sbin/smbd --foreground --no-process-group └─16385 /usr/sbin/smbd --foreground --no-process-group Mai 13 11:29:37 notgchredes systemd[1]: Starting Samba SMB Daemon... Mai 13 11:29:46 notgchredes smbd[16344]: [2019/05/13 11:29:46.624330, 0] ../lib/util/become_daemon.c:138(daemon_ready) Mai 13 11:29:46 notgchredes smbd[16344]: daemon_ready: STATUS=daemon 'smbd' finished starting up and ready to serve connections Mai 13 11:29:46 notgchredes systemd[1]: Started Samba SMB Daemon. ● nmb.service - Samba NMB Daemon Loaded: loaded (/usr/lib/systemd/system/nmb.service; enabled; vendor preset: disabled) Active: failed (Result: exit-code) since Seg 2019-05-13 11:29:46 -03; 751ms ago Docs: man:nmbd(8) man:samba(7) man:smb.conf(5) Process: 16374 ExecStart=/usr/sbin/nmbd --foreground --no-process-group $NMBDOPTIONS (code=exited, status=1/FAILURE) Main PID: 16374 (code=exited, status=1/FAILURE) Status: "daemon failed to start: NMBD failed when creating subnet lists" Error: 13 (Permissão negada) Mai 13 11:29:46 notgchredes nmbd[16374]: Error = Não foi possível acessar o endereço requisitado Mai 13 11:29:46 notgchredes nmbd[16374]: [2019/05/13 11:29:46.872555, 0] ../source3/nmbd/nmbd_subnetdb.c:113(make_subnet) Mai 13 11:29:46 notgchredes nmbd[16374]: nmbd_subnetdb:make_subnet() Mai 13 11:29:46 notgchredes nmbd[16374]: Failed to open nmb socket on interface 192.168.0.8 for port 137. Error was Não foi possível a…equisitado Mai 13 11:29:46 notgchredes nmbd[16374]: [2019/05/13 11:29:46.872642, 0] ../lib/util/become_daemon.c:124(exit_daemon) Mai 13 11:29:46 notgchredes nmbd[16374]: exit_daemon: STATUS=daemon failed to start: NMBD failed when creating subnet lists, error code 13 Mai 13 11:29:46 notgchredes systemd[1]: nmb.service: main process exited, code=exited, status=1/FAILURE Mai 13 11:29:46 notgchredes systemd[1]: Failed to start Samba NMB Daemon. Mai 13 11:29:46 notgchredes systemd[1]: Unit nmb.service entered failed state. Mai 13 11:29:46 notgchredes systemd[1]: nmb.service failed. Hint: Some lines were ellipsized, use -l to show in full. Alguém pode me dar uma dica? -- Glênio Côrtes Himmen glenio.himmen(a)gmail.com https://www.curriculum.com.br/ucn/p205993-734

2 1

Outra Lista!
by Glenio Cortes Himmen 13 May '19

13 May '19

Estou numa lista de CentOS em inglês. Posso postar os tópicos nesta lista? Lembrando que o idioma do email será inglês. -- Glênio Côrtes Himmen glenio.himmen(a)gmail.com https://www.curriculum.com.br/ucn/p205993-734

3 2

ajuda
by Glenio Cortes Himmen 12 May '19

12 May '19

-- Glênio Côrtes Himmen glenio.himmen(a)gmail.com https://www.curriculum.com.br/ucn/p205993-734

2 2

Jogos!
by Glenio Cortes Himmen 22 Jul '18

22 Jul '18

Prezados colegas, Como faço para remover todos os jogos do CentOS 6.9? Como faço para migrar para CentOS 7? Glênio Côrtes Himmen https://www.curriculum.com.br/ucn/p205993-734

3 2

Erro libvirt
by Diogo 17 May '18

17 May '18

Caros, muito bom dia! Estou com um problema na atualização com yum no que diz respeito ao libvir, onde: # yum update...--> Finished Dependency ResolutionError: Package: libvirt-daemon-xen-3.2.1-402.el7.x86_64 (@centos-virt-xen) Requires: libvirt-daemon-driver-network = 3.2.1-402.el7 Removing: libvirt-daemon-driver-network-3.2.1-402.el7.x86_64 (@centos-virt-xen) libvirt-daemon-driver-network = 3.2.1-402.el7 Updated By: libvirt-daemon-driver-network-3.9.0-14.el7_5.2.x86_64 (updates) libvirt-daemon-driver-network = 3.9.0-14.el7_5.2 Available: libvirt-daemon-driver-network-3.9.0-14.el7.x86_64 (base) libvirt-daemon-driver-network = 3.9.0-14.el7Error: Package: libvirt-daemon-xen-3.2.1-402.el7.x86_64 (@centos-virt-xen) Requires: libvirt-daemon-driver-storage = 3.2.1-402.el7 Removing: libvirt-daemon-driver-storage-3.2.1-402.el7.x86_64 (@centos-virt-xen) libvirt-daemon-driver-storage = 3.2.1-402.el7 Updated By: libvirt-daemon-driver-storage-3.9.0-14.el7_5.2.x86_64 (updates) libvirt-daemon-driver-storage = 3.9.0-14.el7_5.2 Available: libvirt-daemon-driver-storage-3.9.0-14.el7.x86_64 (base) libvirt-daemon-driver-storage = 3.9.0-14.el7 ... Já passaram por esta situação? Informações sobre o sistema: CentOS Linux release 7.4.1708 (Core) Kernel 4.9.44-29.el7.x86_64 [ ]sDiogo

1 0

Políticas de Segurança ? - Instalação - CentOS 7.
by Cássio Elias 02 Aug '17

02 Aug '17

Galera, um bom dia! Estou a estuda para futura migração do CentOS 6, para o CentOS 7. Notei grandes diferenças..rrss. Vocês sabem aquelas políticas de segurança padrão nas opções de instalação do CentOS 7, que vão desde padrões de orgãos do governo americado as mais básicas.. Vocês sabem qual é uma boa opção para instalação que não de dor de cabeça com configurações futuras no S.O? Att Cássio Elias.

3 3

Cluster Mongodb
by Christiano Liberato 30 Jul '17

30 Jul '17

PessoALL, tô precisando fazer um cluster com mongodb mas não existe o script do ocf. Alguém tem isso em produção para dar uma força? Obrigado.

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

discuss-pt-br