August 2004 - Discuss - lists.centos.org

[Fwd: Whitepaper about the new security features in RHEL3 U3]
by John Newbigin 31 Aug '04

31 Aug '04

http://www.redhat.com/f/pdf/rhel/WHP0006US_Execshield.pdf -------- Original Message -------- Subject: Whitepaper about the new security features in RHEL3 U3 Date: Tue, 31 Aug 2004 09:54:15 +0200 From: Arjan van de Ven <arjanv(a)redhat.com> Reply-To: Discussion of Red Hat Enterprise Linux 3 (Taroon) <taroon-list(a)redhat.com> To: taroon-list(a)redhat.com Hi, with the beta of RHEL3U3 out for some time it should come of no suprise that U3 is comming out sometime soon. In preparation of that I wrote a whitepaper about the new security features that were added to U3: http://www.redhat.com/f/pdf/rhel/WHP0006US_Execshield.pdf If anyone here has questions about this stuff please just ask... Greetings, Arjan van de Ven -- "Computer games don't affect kids; I mean if Pac-Man affected us as kids, we'd all be running around in darkened rooms, munching magic pills and listening to repetitive electronic music." -- Kristian Wilson, Nintendo Inc., 1989 -- John Newbigin - Computer Systems Officer School of Information Technology Swinburne University of Technology Melbourne, Australia http://www.it.swin.edu.au/staff/jnewbigin -- Taroon-list mailing list Taroon-list(a)redhat.com http://www.redhat.com/mailman/listinfo/taroon-list

1 0

CentOS-2 errata
by John Newbigin 31 Aug '04

31 Aug '04

I am currently in the process of updating all centos modified packages to contain the release suffix .c2.$n This will help identify modified packages and aid with RedHat -> CentOS upgrades. These packages have been rebuilt but should be the same as the previous release. It should be safe to update them but of course when upgrading the boot loader it is always wise to use some caution. The following packages for CentOS-2 have been built and uploaded the the centos mirror: Files available: grub-0.90-11.c2.1.i386.rpm mkinitrd-3.2.6.2-1.c2.1.i386.rpm indexhtml-7.2-1.c2.1.noarch.rpm There will be more package to follow including apache, nautilus, perl, tetex & Xconfigurator. These will be available soon. The easy way to make sure you are up to date with all the latest patches is to run: # yum update -- John Newbigin - Computer Systems Officer School of Information Technology Swinburne University of Technology Melbourne, Australia http://www.it.swin.edu.au/staff/jnewbigin

1 0

CentOS-2 errata
by John Newbigin 31 Aug '04

31 Aug '04

The following errata for CentOS-2 have been built and uploaded the the centos mirror: RHSA-2004:448-01 Updated krb5 packages fix security vulnerabilities Files available: krb5-devel-1.2.2-31.i386.rpm krb5-libs-1.2.2-31.i386.rpm krb5-server-1.2.2-31.i386.rpm krb5-workstation-1.2.2-31.i386.rpm More details are available from the RedHat web site at https://rhn.redhat.com/errata/rh21as-errata.html The easy way to make sure you are up to date with all the latest patches is to run: # yum update -- John Newbigin - Computer Systems Officer School of Information Technology Swinburne University of Technology Melbourne, Australia http://www.it.swin.edu.au/staff/jnewbigin

1 0

Updates for Centos3
by seth vidal 31 Aug '04

31 Aug '04

Hi Everyone, Critical security updates for centos3. Available from: http://mirror.caosity.org/centos-3/3.1/ and soon your local mirror. krb5: https://rhn.redhat.com/errata/RHSA-2004-350.html updates/i386/RPMS/krb5-server-1.2.7-28.i386.rpm updates/i386/RPMS/krb5-devel-1.2.7-28.i386.rpm updates/i386/RPMS/krb5-workstation-1.2.7-28.i386.rpm updates/i386/RPMS/krb5-libs-1.2.7-28.i386.rpm updates/i386/SRPMS/krb5-1.2.7-28.src.rpm The vulnerabilities involved look pretty ugly. Let me know if there are any problems. To update for any of these simply run: yum update -sv

1 0

Messing around with iptables
by scty Library 27 Aug '04

27 Aug '04

Hello all, I am messing around with iptables, trying to learn how it works so that I can build my self a router/firewall and mabey a VPN. Anyway I tried to use a command on my Desktop CentOS3 machine. "iptables -A INPUT -s 127.0.0.1 -p icmp -j DROP" now the command seems to have went through because I didn't get any errors, but when I go to ping 127.0.0.1 I am getting a response and my packet loss is 0%. It should be 100% packet loss. Can anyone tell me what I am doing wrong. I am not trying to do anything yet, just want to learn by exploring. Thanks all. __________________________________ Do you Yahoo!? Yahoo! Mail - 50x more storage than other providers! http://promotions.yahoo.com/new_mail

6 10

Novell Evolution Connector
by Johnny Hughes 27 Aug '04

27 Aug '04

I just built a version of the Novell Evolution Connector (to use Evolution with a MS exchange server) that works with RHEL/WBEL/CentOS/TaoLinux. You can get it from here if you are interested... http://www.hughesjr.com/component/option,com_docman/Itemid,34/task,view_cat… Here is the Novell link: http://www.novell.com/products/connector/ Johnny Hughes http://www.hughesjr.com/

2 3

redhat-config-packages
by xspace 25 Aug '04

25 Aug '04

anyone fix the redhat-config-packages bug (https://bugzilla.caosity.org/show_bug.cgi?id=632) I cant life without redhat-config-packages :)

1 0

is centos3.1 compatible with dag's el3 repo?
by xspace 25 Aug '04

25 Aug '04

im sure CentOS 3 = Red Hat Enterprise Linux 3 (without update) and CentOS 3.1 = Red Hat Enterprise Linux 3 U1

1 0

is centos3.1 compatible with dag's el3 repo?
by sophana 24 Aug '04

24 Aug '04

Hi All What is the major difference between version 3 and 3.1? Is there any incompatibilities for rpms? For example I wish to install evms from dag's repo. Is there any problem? Thanks for your great job.

2 1

FAQ for installing Flash animation support
by Rick Graves 23 Aug '04

23 Aug '04

Hey, I did a first draft FAQ on installing the player for Flash animations in CentOS-3. This was the link last time I checked: http://caosity.org/index.php?option=faq&task=viewfaq&artid=30&Itemid=5 Any comments? Thanks, Rick

1 0

CentOS-2 errata
by John Newbigin 22 Aug '04

22 Aug '04

The following errata for CentOS-2 have been built and uploaded the the centos mirror: RHSA-2004:414-01 Updated qt packages fix security issue Files available: qt-2.3.1-10.i386.rpm qt-Xt-2.3.1-10.i386.rpm qt-designer-2.3.1-10.i386.rpm qt-devel-2.3.1-10.i386.rpm qt-static-2.3.1-10.i386.rpm More details are available from the RedHat web site at https://rhn.redhat.com/errata/rh21as-errata.html The easy way to make sure you are up to date with all the latest patches is to run: # yum update -- John Newbigin - Computer Systems Officer School of Information Technology Swinburne University of Technology Melbourne, Australia http://www.it.swin.edu.au/staff/jnewbigin

1 0

Updates for Centos3
by seth vidal 22 Aug '04

22 Aug '04

Hi Everyone More updates for Centos3 Available from: http://mirror.caosity.org/centos-3/3.1/ and soon your local mirror. Security: qt: https://rhn.redhat.com/errata/RHSA-2004-414.html updates/i386/RPMS/qt-3.1.2-13.4.i386.rpm updates/i386/RPMS/qt-config-3.1.2-13.4.i386.rpm updates/i386/RPMS/qt-designer-3.1.2-13.4.i386.rpm updates/i386/RPMS/qt-devel-3.1.2-13.4.i386.rpm updates/i386/RPMS/qt-MySQL-3.1.2-13.4.i386.rpm updates/i386/RPMS/qt-ODBC-3.1.2-13.4.i386.rpm updates/i386/RPMS/qt-PostgreSQL-3.1.2-13.4.i386.rpm updates/i386/SRPMS/qt-3.1.2-13.4.src.rpm Bugfix: net-snmp: https://rhn.redhat.com/errata/RHBA-2004-316.html updates/i386/RPMS/net-snmp-5.0.9-2.30E.6.i386.rpm updates/i386/RPMS/net-snmp-devel-5.0.9-2.30E.6.i386.rpm updates/i386/RPMS/net-snmp-perl-5.0.9-2.30E.6.i386.rpm updates/i386/RPMS/net-snmp-utils-5.0.9-2.30E.6.i386.rpm updates/i386/SRPMS/net-snmp-5.0.9-2.30E.6.src.rpm Let me know if there are any problems. To update for any of these simply run: yum update sorry for the delay on net-snmp, I had a busy friday. -sv

1 0

RE: [kernel-2.4.21-15] rebuild problem
by kevin 20 Aug '04

20 Aug '04

Martin wrote: >Date: Fri, 20 Aug 2004 11:27:18 +0200 From: Martin Hamant <mh(a)accelance.fr> >To: centos(a)caosity.org >Organization: Accelance MSP. >Subject: [Centos] [kernel-2.4.21-15] rebuild problem >Hello, >Sorry if this mail would have to be post in the development ML, but my >problem is just at using centOS.. >I'm trying to recompile the centOS-3.1 kernel. >I done this: ># cd /usr/src/linux-2.4 ># make menuconfig >< i select my CPU type > >< Exit and save > ># make dep ># make modules >(...no errors ...) >gcc -D__KERNEL__ -I/usr/src/linux-2.4.21-15.0.4.EL/include -Wall >-Wstrict-prototypes -Wno-trigraphs -O2 -fno-strict-aliasing -fno-common >-Wno-unused -fomit-frame-poi nter -pipe -freorder-blocks >-mpreferred-stack-boundary=2 -march=pentium4 -DMODULE -DMODVERSIONS >-include /usr/src/linux-2.4.21-15.0.4.EL/include/linux/modversions.h >-nostdinc -iwithprefix include -DKBUILD_BASENAME=module -c -o module.o >module.c In file included from >/usr/src/linux-2.4.21-15.0.4.EL/include/linux/if.h:23, >from cipe.h:21, from module.c:15: >/usr/src/linux-2.4.21-15.0.4.EL/include/linux/socket.h:264: invalid >suffix on integer >constant/usr/src/linux-2.4.21-15.0.4.EL/include/linux/socket.h:264: >syntax error before numeric >constant/usr/src/linux-2.4.21-15.0.4.EL/include/linux/socket.h:264: >`memcpy_fromiovec_R_ver_str' declared as function returning a >function/usr/src/linux-2.4.21-15.0.4.EL/include/linux/socket.h:264: >warning: function declaration isn't a >prototype/usr/src/linux-2.4.21-15.0.4.EL/include/linux/socket.h:273: >invalid suffix on integer >constant/usr/src/linux-2.4.21-15.0.4.EL/include/linux/socket.h:273: >syntax error before numeric constant >(...) >/usr/src/linux-2.4.21-15.0.4.EL/include/linux/skbuff.h: In function >`kunmap_skb_frag':/usr/src/linux-2.4.21-15.0.4.EL/include/linux/skbuff. >h:1152: warning: asm operand 1 probably doesn't match constraints >make[3]: *** [module.o] Error 1 make[3]: Leaving directory >`/usr/src/linux-2.4.21-15.0.4.EL/drivers/addon/cipe' make[2]: *** >[_modsubdir_cipe] Error 2 make[2]: Leaving directory >`/usr/src/linux-2.4.21-15.0.4.EL/drivers/addon' make[1]: *** >[_modsubdir_addon] Error 2 make[1]: Leaving directory >`/usr/src/linux-2.4.21-15.0.4.EL/drivers' make: *** [_mod_drivers] Error >2 >Is anyone ever tried that ? Before you build packages on CentOS 3.1, make sure you have installed all the relevant packages from the addons directory. ftp://ftp.pasteur.fr/pub/computing/linux/cAos/centos-3/3.1/addons/i386/RPMS Kevin Wood. >Thanks for help ! >-- >Martin

1 0

[kernel-2.4.21-15] rebuild problem
by Martin Hamant 20 Aug '04

20 Aug '04

Hello, Sorry if this mail would have to be post in the development ML, but my problem is just at using centOS.. I'm trying to recompile the centOS-3.1 kernel. I done this: # cd /usr/src/linux-2.4 # make menuconfig < i select my CPU type > < Exit and save > # make dep # make modules (...no errors ...) gcc -D__KERNEL__ -I/usr/src/linux-2.4.21-15.0.4.EL/include -Wall -Wstrict-prototypes -Wno-trigraphs -O2 -fno-strict-aliasing -fno-common -Wno-unused -fomit-frame-poi nter -pipe -freorder-blocks -mpreferred-stack-boundary=2 -march=pentium4 -DMODULE -DMODVERSIONS -include /usr/src/linux-2.4.21-15.0.4.EL/include/linux/modversions.h -nostdinc -iwithprefix include -DKBUILD_BASENAME=module -c -o module.o module.c In file included from /usr/src/linux-2.4.21-15.0.4.EL/include/linux/if.h:23, from cipe.h:21, from module.c:15: /usr/src/linux-2.4.21-15.0.4.EL/include/linux/socket.h:264: invalid suffix on integer constant/usr/src/linux-2.4.21-15.0.4.EL/include/linux/socket.h:264: syntax error before numeric constant/usr/src/linux-2.4.21-15.0.4.EL/include/linux/socket.h:264: `memcpy_fromiovec_R_ver_str' declared as function returning a function/usr/src/linux-2.4.21-15.0.4.EL/include/linux/socket.h:264: warning: function declaration isn't a prototype/usr/src/linux-2.4.21-15.0.4.EL/include/linux/socket.h:273: invalid suffix on integer constant/usr/src/linux-2.4.21-15.0.4.EL/include/linux/socket.h:273: syntax error before numeric constant (...) /usr/src/linux-2.4.21-15.0.4.EL/include/linux/skbuff.h: In function `kunmap_skb_frag':/usr/src/linux-2.4.21-15.0.4.EL/include/linux/skbuff. h:1152: warning: asm operand 1 probably doesn't match constraints make[3]: *** [module.o] Error 1 make[3]: Leaving directory `/usr/src/linux-2.4.21-15.0.4.EL/drivers/addon/cipe' make[2]: *** [_modsubdir_cipe] Error 2 make[2]: Leaving directory `/usr/src/linux-2.4.21-15.0.4.EL/drivers/addon' make[1]: *** [_modsubdir_addon] Error 2 make[1]: Leaving directory `/usr/src/linux-2.4.21-15.0.4.EL/drivers' make: *** [_mod_drivers] Error 2 Is anyone ever tried that ? Thanks for help ! -- Martin

1 1

CentOS-2 errata update 5
by John Newbigin 20 Aug '04

20 Aug '04

The following errata for CentOS-2 have been built and uploaded the the centos mirror. These packages are all small bug fixes except for arptables_jf which is a new package. You should also remember to uninstall netscape with this command: rpm --erase netscape-common netscape-communicator netscape-navigator RHBA-2004:155 Updated XFree86 packages fix memory faults on Itanium RHBA-2004:223 Updated clumanager package fixes bugs RHBA-2004:229 Updated sh-utils package fixes 64-bit expr behavior RHBA-2004:230 Updated fileutils package fixes two bugs RHBA-2004:238 Updated wu-ftpd package fixes large file support RHBA-2004:241 Updated pam_krb5 package available RHBA-2004:252 Updated rdist package fixes symlink bug RHBA-2004:256 Updated iptables packages are available RHBA-2004:274 Updated psacct package fixes bugs on Itanium RHBA-2004:281 Updated squid package RHBA-2004:287 Updated autofs package RHBA-2004:294 Updated redhat-config-network package RHBA-2004:295 Updated XEmacs packages fix startup segfault on Itanium RHBA-2004:298 Updated openmotif packages RHBA-2004:300 Updated sysstat package RHBA-2004:303 Updated openssh packages RHBA-2004:305 Updated shadow-utils package RHBA-2004:306 Updated tcsh package RHBA-2004:310 Updated bind package RHBA-2004:329 Updated initscripts package RHBA-2004:332 Updated chkconfig package RHBA-2004:334 Updated kudzu packages RHBA-2004:339 Updated expect packages RHBA-2004:341 Updated at package RHBA-2004:343 Updated bash package RHBA-2004:345 Updated ethtool package RHBA-2004:348 Updated sysklogd package RHBA-2004:368 Updated up2date packages RHBA-2004:369 Updated rhn_register packages RHBA-2004:370 Updated vixie-cron package RHBA-2004:375 Updated rhnlib package RHBA-2004:377 Updated lftp packages available RHEA-2004:251 New arptables_jf package avaliable RHEA-2004:331 Updated pciutils packages with pci.ids sync RHEA-2004:374 Updated procps package Files available: arptables_jf-0.0.8-0.21as.i386.rpm at-3.1.8-24.ent.1.i386.rpm autofs-3.1.7-51.i386.rpm bash-2.05-8.2.i386.rpm bash-doc-2.05-8.2.i386.rpm bind-9.2.1-6.1.i386.rpm bind-devel-9.2.1-6.1.i386.rpm bind-utils-9.2.1-6.1.i386.rpm chkconfig-1.3.11-0.2.1.i386.rpm clumanager-1.0.27-1.i386.rpm ethtool-1.8-3.2.i386.rpm expect-5.38.0-74.1.i386.rpm fileutils-4.1-10.6.i386.rpm iptables-1.2.5-3.AS21.1.i386.rpm iptables-ipv6-1.2.5-3.AS21.1.i386.rpm itcl-3.2-74.1.i386.rpm initscripts-6.47.10-1.c2.1.i386.rpm kernel-BOOT-2.4.9-e.49.i386.rpm kernel-doc-2.4.9-e.49.i386.rpm kernel-headers-2.4.9-e.49.i386.rpm kernel-source-2.4.9-e.49.i386.rpm kudzu-0.99.42.3.3-1.i386.rpm kudzu-devel-0.99.42.3.3-1.i386.rpm lftp-2.4.9-3.i386.rpm ntsysv-1.3.11-0.2.1.i386.rpm openmotif-2.1.30-12.i386.rpm openmotif-devel-2.1.30-12.i386.rpm openssh-3.1p1-15.i386.rpm openssh-askpass-3.1p1-15.i386.rpm openssh-askpass-gnome-3.1p1-15.i386.rpm openssh-clients-3.1p1-15.i386.rpm openssh-server-3.1p1-15.i386.rpm pam_krb5-1.47-4.i386.rpm pciutils-2.1.8-26.2.i386.rpm pciutils-devel-2.1.8-26.2.i386.rpm procps-2.0.7-11.21AS.4.i386.rpm procps-X11-2.0.7-11.21AS.4.i386.rpm psacct-6.3.2-10.21as.i386.rpm rdist-6.1.5-35.21.1.i386.rpm redhat-config-network-1.0.6-0.AS21.1.i386.rpm rhn_register-2.9.12-1.2.1AS.i386.rpm rhn_register-gnome-2.9.12-1.2.1AS.i386.rpm shadow-utils-20000902-16.i386.rpm sh-utils-2.0.11-5.1.i386.rpm squid-2.4.STABLE7-0.21as.i386.rpm sysklogd-1.4.1-4.1.i386.rpm sysstat-4.0.1-15.2.1as.i386.rpm sysstat-isag-4.0.1-15.2.1as.i386.rpm tcl-8.3.3-74.1.i386.rpm tcllib-1.0-74.1.i386.rpm tclx-8.3-74.1.i386.rpm tcsh-6.10-9.i386.rpm tix-8.2.0b1-74.1.i386.rpm tk-8.3.3-74.1.i386.rpm up2date-2.9.11-1.2.1AS.i386.rpm up2date-gnome-2.9.11-1.2.1AS.i386.rpm vixie-cron-3.0.1-63.1.i386.rpm wu-ftpd-2.6.1-24.i386.rpm xemacs-21.4.6-6.9.i386.rpm xemacs-el-21.4.6-6.9.i386.rpm xemacs-info-21.4.6-6.9.i386.rpm XFree86-100dpi-fonts-4.1.0-61.EL.i386.rpm XFree86-4.1.0-61.EL.i386.rpm XFree86-75dpi-fonts-4.1.0-61.EL.i386.rpm XFree86-cyrillic-fonts-4.1.0-61.EL.i386.rpm XFree86-devel-4.1.0-61.EL.i386.rpm XFree86-doc-4.1.0-61.EL.i386.rpm XFree86-ISO8859-15-100dpi-fonts-4.1.0-61.EL.i386.rpm XFree86-ISO8859-15-75dpi-fonts-4.1.0-61.EL.i386.rpm XFree86-ISO8859-2-100dpi-fonts-4.1.0-61.EL.i386.rpm XFree86-ISO8859-2-75dpi-fonts-4.1.0-61.EL.i386.rpm XFree86-ISO8859-9-100dpi-fonts-4.1.0-61.EL.i386.rpm XFree86-ISO8859-9-75dpi-fonts-4.1.0-61.EL.i386.rpm XFree86-libs-4.1.0-61.EL.i386.rpm XFree86-tools-4.1.0-61.EL.i386.rpm XFree86-twm-4.1.0-61.EL.i386.rpm XFree86-xdm-4.1.0-61.EL.i386.rpm XFree86-xf86cfg-4.1.0-61.EL.i386.rpm XFree86-xfs-4.1.0-61.EL.i386.rpm XFree86-Xnest-4.1.0-61.EL.i386.rpm XFree86-Xvfb-4.1.0-61.EL.i386.rpm kernel-2.4.9-e.49.i686.rpm kernel-debug-2.4.9-e.49.i686.rpm kernel-enterprise-2.4.9-e.49.i686.rpm kernel-smp-2.4.9-e.49.i686.rpm kernel-summit-2.4.9-e.49.i686.rpm kernel-2.4.9-e.49.athlon.rpm kernel-smp-2.4.9-e.49.athlon.rpm rhnlib-1.8-6.p15.noarch.rpm More details are available from the RedHat web site at https://rhn.redhat.com/errata/rh21as-errata.html The easy way to make sure you are up to date with all the latest patches is to run: # yum update -- John Newbigin - Computer Systems Officer School of Information Technology Swinburne University of Technology Melbourne, Australia http://www.it.swin.edu.au/staff/jnewbigin

1 0

Re: [Centos] newest up2date rpm
by cweisiger＠i-55.com 19 Aug '04

19 Aug '04

im just using the default /etc/sysconfig/rhn/sources file with up2date i didnt add or remove any mirrors in the file i could add another mirror to the file and fix it how you did yours.... could i also install the previous version of up2date so i can recieve updates till this version gets fixed that would not cause any problems would it?

3 4

CentOS-2 update 5
by John Newbigin 18 Aug '04

18 Aug '04

CentOS-2 update 5 is about to be released. As of update 5, Netscape 4.8 will be removed from the distribution. The currently shipped version of Netscape 4.8 has security flaws and should not be used. Users of CentOS-2 should uninstall the Netscape packages and switch to using mozilla. For more information see RHSA-2004:429-01 Also, in order to easily identify packages which have been modified for CentOS-2, the release suffix .c2.release will be appended to the existing release. All packages which currently are missing this suffix will be reissued with the new suffix. The suffix release will always start at 1 and be incremented if a package needs to be reissues with only centos changes. When the original release is increased, the centos release will start again at 1. This is part of a new automated procedure which should result in reproducible modifications which will speed up the release of errata for modified packages and cut down on errors in the modification process. John. -- John Newbigin - Computer Systems Officer School of Information Technology Swinburne University of Technology Melbourne, Australia http://www.it.swin.edu.au/staff/jnewbigin

1 0

CentOS-2 errata
by John Newbigin 18 Aug '04

18 Aug '04

The following errata for CentOS-2 have been built and uploaded the the centos mirror: RHSA-2004:344-01 Updated semi packages fix flim vulnerability Files available: semi-1.14.3-8.72.EL.1.noarch.rpm: semi-xemacs-1.14.3-8.72.EL.1.noarch.rpm: More details are available from the RedHat web site at https://rhn.redhat.com/errata/rh21as-errata.html The easy way to make sure you are up to date with all the latest patches is to run: # yum update -- John Newbigin - Computer Systems Officer School of Information Technology Swinburne University of Technology Melbourne, Australia http://www.it.swin.edu.au/staff/jnewbigin

1 0

CentOS-2 errata
by John Newbigin 18 Aug '04

18 Aug '04

The following errata for CentOS-2 have been built and uploaded the the centos mirror: RHSA-2004:304-01 Updated pam packages Files available: pam-0.75-46.9.i386.rpm: pam-devel-0.75-46.9.i386.rpm: More details are available from the RedHat web site at https://rhn.redhat.com/errata/rh21as-errata.html The easy way to make sure you are up to date with all the latest patches is to run: # yum update -- John Newbigin - Computer Systems Officer School of Information Technology Swinburne University of Technology Melbourne, Australia http://www.it.swin.edu.au/staff/jnewbigin

1 0

ssh problems
by scty Library 13 Aug '04

13 Aug '04

Here's another one for ya, I can ssh into my server from workstationB but when I try to ssh into workstationB from my server I get this error message. @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY! Someone could be eavesdropping on you right now (man-in-the-middle attack)! It is also possible that the RSA host key has just been changed. The fingerprint for the RSA key sent by the remote host is 55:2e:6a:d8:08:26:7f:cd:f4:1d:36:8f:cf:85:3d:1a. Please contact your system administrator. Add correct host key in /home/diadicic/.ssh/known_hosts to get rid of this message. Offending key in /home/diadicic/.ssh/known_hosts:2 RSA host key for 172.16.12.200 has changed and you have requested strict checking. Host key verification failed. Now it looks like I have to learn about rsa keys and ssh. A point in the right direction would be appreciated. Thank all. __________________________________ Do you Yahoo!? Yahoo! Mail - Helps protect you from nasty viruses. http://promotions.yahoo.com/new_mail

4 3

centos31 anaconda bug with lvm lvcreate?
by sophana 13 Aug '04

13 Aug '04

Hi I just tried to install centos3.1 from the 3cd. I removed all existing partitions and made a custom partitionning: a /boot partition /dev/hda1 and a lvm physical volume for the rest: /dev/hda2 in the lvm volume group I placed all other partitions including root (/) The anaconda crashed because of an error in lvcreate for the root partition. Is there a problem with that? I did reboot and restarted with then same config and it is now installing. I have saved the debug info on a floppy if anyone interested. Thanks Sophana

1 0

Re: migration center
by Rick Graves 13 Aug '04

13 Aug '04

John, > I started a web page to collect my ideas > http://uranus.it.swin.edu.au/~jn/linux/centos-2/migration.htm I looked at the page collecting your ideas. That is a good start, and a good looking web page. Your wizard idea is fancier than what I had in mind. I was thinking of a table listing the starting points and in the left column and the sensible options in the right column. Then step by step instructions for each supported migration path. (I can imagine writing step by step instructions by actually doing it and taking notes as I go.) I agree that we do not have to rush it. On the other hand, I do not know what the schedule for the new web site will be. As for the migration center content (plain text type content), I suggest we move at our own pace, and when we are ready, either put the content in the existing site or in the new site, whichever is available. When cAos moves to the new site, much if the text will get copied from the old site and pasted into the new site anyway. Since I do not know anything about the schedule for the new site, I can imagine that it could take more time than doing a useful migration center. I simply suggest that we do not let any potential problems in doing a whole new web site delay putting out migration information that people could be using right now. > Each procedure could have a forum where people can contribute feedback, like they do with the php manual. This would be best. > Another thing I might have a play with is a family tree. That might help people see the differences between versions. That is another good suggestion. It could go in the FAQ explaining the difference between cAos and CentOS. Rick

1 0

more about: migration center
by Rick Graves 13 Aug '04

13 Aug '04

John, I did not hear back from you right away. Maybe doing all the combinations is too big a job for one person. It might work if we split them up. I could do these two: RedHat 9 -> reinstall CentOS-3.1 RedHat 9 -> live update to CentOS-3.1 I am volunteering for these because I already have RedHat 9 and CentOS-3.1 CD's. The only rub is on Saturday I go on vacation, and at the end of August I will be back to where I have my computer junk. I could do those two in early September. Any other volunteers for any of the other combinations? My offer to work it all into the web site still stands. Rick --- Rick Graves <gravesricharde(a)yahoo.com> wrote: > Date: Thu, 12 Aug 2004 06:13:59 -0700 (PDT) > From: Rick Graves <gravesricharde(a)yahoo.com> > Subject: Re: migration center > To: centos(a)caosity.org > > John, > > Would you like to take a first crack at the text for > the migration center? You could then run it by this > group. > > If we get something that is good enough not to get > shot down here, I will work it into the web site. > > If we decide to go with separate sites, the text > could > just be copied over, so there would be no wasted > effort. > > Rick > > --- centos-request(a)caosity.org wrote: > > Message: 8 > Date: Thu, 12 Aug 2004 09:28:57 +1000 > From: John Newbigin <jn(a)it.swin.edu.au> > To: centos(a)caosity.org > Subject: Re: [Centos] suggestions for CentOS > > > ... > > I think another thing we should have is a 'migration > centre' which can > help people decide what product and procedure to use > to upgrade from > various distros. > > Something along the lines of: > RedHat 7.2 -> reinstall with CentOS-2 > -> reinstall with CentOS-3.1 > -> reinstall with cAos > -> live update to CentOS-2 > RedHat 9 -> reinstall CentOS-3.1 > -> live update to CentOS-3.1 > RHEL 2.1 -> live update to CentOS-2 > RHEL 3 -> live update to CentOS-3 > > And I am sure there are more. For each procedure, > instructions and > pitfalls etc can be listed, perhaps with community > feedback etc. > > > >

2 1

Re: more about messing around with iptables
by Rick Graves 12 Aug '04

12 Aug '04

Hey scty Library, > I am messing around with iptables, trying to learn how it works so that I can build my self a router/firewall and mabey a VPN. Oops! I forgot about that. The LinWiz iptables wizards cannot help you, a router/firewall/VPN application is too complicated for them. If you do not care about reinventing the wheel, then proceed with your learning experience. If you just want a router/firewall/VPN, look at Smoothwall. A mountain of effort and expertise has been put into that dedicated firewall distribution, and I suspect there is NO WAY anything you could do on your own could come close. But if your purpose is to have a learning experience, then you are on the right track. Rick On Thu, 12 Aug 2004, scty Library wrote: > I am messing around with iptables, trying to learn how > it works so that I can build my self a router/firewall > and mabey a VPN. Anyway I tried to use a command on my > Desktop CentOS3 machine. > > "iptables -A INPUT -s 127.0.0.1 -p icmp -j DROP" > > now the command seems to have went through because I > didn't get any errors, but when I go to ping 127.0.0.1 > I am getting a response and my packet loss is 0%. It > should be 100% packet loss. > > Can anyone tell me what I am doing wrong. I am not > trying to do anything yet, just want to learn by > exploring.

1 0

Re: messing around with iptables
by Rick Graves 12 Aug '04

12 Aug '04

Hey scty Library, I forget your name. I do not have an answer for your question exactly. However, I think I have a solution to the overall problem, and it is here: http://www.lowth.com/LinWiz/1.09/ I use the wizards to create my iptables files. I have a couple of basic files that I use, and then I tweek the appropriate one after copying it to a new install. For people who want a solution fast, the two wizards are great. I hope this helps. Rick On Thu, 12 Aug 2004, scty Library wrote: > I am messing around with iptables, trying to learn how > it works so that I can build my self a router/firewall > and mabey a VPN. Anyway I tried to use a command on my > Desktop CentOS3 machine. > > "iptables -A INPUT -s 127.0.0.1 -p icmp -j DROP" > > now the command seems to have went through because I > didn't get any errors, but when I go to ping 127.0.0.1 > I am getting a response and my packet loss is 0%. It > should be 100% packet loss. > > Can anyone tell me what I am doing wrong. I am not > trying to do anything yet, just want to learn by > exploring.

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss August 2004