Discuss July 2005

discuss@lists.centos.org

190 participants
231 discussions

Re: [CentOS] Re: Fix passwd/shadow/group files?
by Bryan J. Smith <b.j.smith＠ieee.org> 15 Jul '05

15 Jul '05

Ignacio Vazquez-Abrams wrote: > Stuff pam_netgroups into system-auth then make a group per machine. > http://www2.physics.umd.edu/~payerle/Software/PAM/ Doh!!! I should have realized that. Yes, using NIS Netgroups and PAM authentication around them is much, much better on Linux (and even Solaris) than using multiple NIS domains. And even if he still replicates his files manually (he should at least consider automating their distribution via SSH), he can still setup just 1 file and use the same netgroups-PAM solution. Good catch. From: Paul Heinlein <heinlein(a)madboa.com> > If you set up netgroups, you can specify login rights easily: > * /etc/passwd > [...] > +@login-group > +:::::/dev/null:/sbin/nologin > * /etc/nsswitch.conf > passwd: compat > shadow: compat > group: files nis > netgroup: files nis Now that only works for NIS distributed passwd, netgroups, correct? Or will it work for local users as well? -- Bryan J. Smith mailto:b.j.smith@ieee.org

2 1

Re: How to query the package owning the file? (no packahe manger installed)
by Bryan J. Smith <b.j.smith＠ieee.org> 15 Jul '05

15 Jul '05

From: Prasad Pillarisetti <prasad.pillarisetti(a)gmail.com> > Guys recently I had this question asked in a technical interview. > How do I find out the package owning a particular file, when no > package managers are installed? Impossible. I think he didn't know what he was talking about. He might have mistakenly been looking for... 1. Find the tarball on the system 2. Find the source directory of the system (/usr/local/src)? 3. Use Checkinstall (build package from tarball build) 4. Use rpmbuild -t to look inside of a tarball for SPEC files 5. Others? I guess I just had to be there. > I am assuimg SRPMs are used to install the software? An rpm -i blah.src.rpm merely dumps things into /usr/src/redhat. You go through the SPEC, SOURCE, etc... subdirectories. > Is this actually possible? > Install the Linux OS without a package manager? Of course! There are "packages"** distros like Debian, Fedora, etc... based. And then there are "tarball" distros with some meta-data** in the tarballs, such as Slackware. [ SIDE NOTE: Both DPKG and RPM are System V cpio archives, pretty much the same USTAR format as tar itself, but use 5KiB blocking instead of 10KiB blocking by default. ] Newer to Linux (but no stranger to BSD) are "ports" distros, such as Gentoo. It uses a centralized build system whereby instead of a "package manager" that creates the SPEC (RPM) file, config/Makefile and other commands and bundles it into a single file, the "ports" repository (e.g., Gentoo's portage) just gives you basic Makefiles and other meta-data, and you actually fetch the software. > I know "rpm -qf filename" gives the package owning the file. > But how to get the package name when I don't have any > package manager? Maybe this was a question to rattle me? Of course. People do it all-the-time. -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

CentOS-announce Digest, Vol 5, Issue 5
by centos-announce-request＠centos.org 15 Jul '05

15 Jul '05

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2005:567 Important CentOS 4 ia64 krb5 - security update (Pasi Pirhonen) 2. CESA-2005:567 Important CentOS 3 ia64 krb5 - security update (Pasi Pirhonen) 3. CESA-2005:562 Important CentOS 3 s390(x) krb5 - security update (Pasi Pirhonen) 4. CESA-2005:571 Moderate CentOS 3 ia64 cups - security update (Pasi Pirhonen) 5. CESA-2005:571 Moderate CentOS 3 s390(x) cups - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Thu, 14 Jul 2005 21:09:43 +0300 From: Pasi Pirhonen <upi(a)iki.fi> Subject: [CentOS-announce] CESA-2005:567 Important CentOS 4 ia64 krb5 - security update To: centos-announce(a)centos.org Message-ID: <20050714180943.GA26208(a)core.upi.iki.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2005:567 https://rhn.redhat.com/errata/RHSA-2005-567.html The following updated files have been uploaded and are currently syncing to the mirrors: files: updates/ia64/RPMS/krb5-devel-1.3.4-17.ia64.rpm updates/ia64/RPMS/krb5-libs-1.3.4-17.ia64.rpm updates/ia64/RPMS/krb5-server-1.3.4-17.ia64.rpm updates/ia64/RPMS/krb5-workstation-1.3.4-17.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://iki.fi/upi/

1 0

Re: Fix passwd/shadow/group files?
by Bryan J. Smith <b.j.smith＠ieee.org> 15 Jul '05

15 Jul '05

From: Les Mikesell <lesmikesell(a)gmail.com> > Good call! That and the corresponding grpck found a couple of > duplicate lines that seemed to be confusing things. Any reason you haven't considered NIS? If you're worried about passwords, setup Kerberos for authentication. It's easier than you think. -- Bryan J. Smith mailto:b.j.smith@ieee.org

4 3

Re: Upgrading from RH AS-3 to ??
by Penelope Fudd 15 Jul '05

15 Jul '05

Oh, and after it's all done, when rpm looks like it's permanently broken with errors like this: # rpm --rebuilddb rpmdb: Program version 4.2 doesn't match environment version error: db4 error(22) from dbenv->open: Invalid argument error: cannot open Packages index # The solution is: # cd /var/lib/rpm # rm __* # rpm --rebuilddb Thank heavens for Google, and that pasting error messages into it is the fastest way to get help. -- Penelope Fudd <centos(a)ch.pkts.ca>

1 0

Re: [CentOS] Re: Fix passwd/shadow/group files?
by Bryan J. Smith <b.j.smith＠ieee.org> 15 Jul '05

15 Jul '05

From: Les Mikesell <lesmikesell(a)gmail.com> > The machines in question were set up years ago when it wasn't so > easy and are on opposite sides of a firewall Setup an NIS slave local to each LAN (and a VPN to the NIS master, or consider SFS tunneling for portmap), and also run a name services cache daemon (nscd) on each client. > (but sometimes have NFS mounts in common). All the more reason to use NIS, for Automounter maps. ;-> I only recommend NIS because it's cake to setup. If you have ActiveDirectory Services (ADS), then consider Services for UNIX (SFU). You can even use one-way Kerberos trust from ADS to avoid password hashes (as well as clear text passwords using Kerberosized clients). I don't prefer ADS-SFU when you have UNIX platforms though. Especially Red Hat, who made NIS-Kerberos integration so seemless as of Red Hat Linux 7 onward. > One machine has all user accounts and things are managed > normally there. Great! It's so easy to turn that one system into an NIS master then. ;-> > The others only have small subsets of users (on purpose) > and I've pasted in the passwd entries from the machine that > has them all to keep the uids in sync for NFS and rsync'ing > chunks of stuff around. Then setup multiple NIS domains. It's easy to do even on one, physical NIS master for all. It'll easily repay you for the manual operations you do. [ But even then, why aren't you using a script run over ssh to minimize your manual workload? Just curious. ] > I just had some duplicated lines from the last OS version > change where I copied too much from the previous one. > I might re-do it with LDAP someday, but it's probably > more work to control the users that aren't supposed to > log into these machines than to separately add the ones > that are. Netscape Directory Server (NsDS), now Red Hat/Fedora Directory Server, is a great LDAP server. But when I just want something like you need, an NIS domain or a few from one system, with local NIS slaves and nscd running on all the clients does everything I need. -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

Fix passwd/shadow/group files?
by Les Mikesell 14 Jul '05

14 Jul '05

I've been copying old passwd/shadow/group files from system to system for ages across different distributions/updates and would like to get them back in sync with each other so the system tools will work. Now they hang like: #userdel irose hangs forever, syslog says: Jul 12 11:19:32 newftp userdel[30335]: delete user `irose' Jul 12 11:19:32 newftp userdel[30335]: delete `irose' from group `ftp' Jul 12 11:20:02 newftp last message repeated 373404 times Jul 12 11:21:04 newftp last message repeated 646597 times Jul 12 11:21:06 newftp last message repeated 29123 times Is there some kind of test/diagnostic tool I can use to clean up the parts that don't match anymore? Preferably one that doesn't hang forever when something is missing.... -- Les Mikesell lesmikesell(a)gmail.com

4 5

Upgrading from RH AS-3 to ??
by Penelope Fudd 14 Jul '05

14 Jul '05

I found my problem.. heh. The Centos-3.5 directories aren't set up to use the latest Yum; they don't have repomd.xml files. The secret is to use rpm -Uvh http://linux.duke.edu/projects/yum/download/2.0/yum-2.0.8-1.noarch.rpm and an /etc/yum.conf like this: ====8<-----cut-here------------ [main] exclude=mod_ssl* httpd* perl mysql* php* #add this line for cpanel servers cachedir=/var/cache/yum debuglevel=2 logfile=/var/log/yum.log pkgpolicy=newest distroverpkg=redhat-release tolerant=1 exactarch=1 [base] name=CentOS-$releasever - Base baseurl=http://mirror.centos.org/centos-3/3.5/os/$basearch/ gpgcheck=1 #released updates [update] name=CentOS-$releasever - Updates baseurl=http://mirror.centos.org/centos-3/3.5/updates/$basearch/ gpgcheck=1 #packages used/produced in the build but not released [addons] name=CentOS-$releasever - Addons baseurl=http://mirror.centos.org/centos-3/3.5/addons/$basearch/ gpgcheck=1 #additional packages that may be useful [extras] name=CentOS-$releasever - Extras baseurl=http://mirror.centos.org/centos-3/3.5/extras/$basearch/ gpgcheck=1 -- Penelope Fudd <centos(a)ch.pkts.ca>

1 0

Upgrading from RH AS-3 to ??
by Penelope Fudd 14 Jul '05

14 Jul '05

Hi! I'm trying to upgrade my Redhat 3AS server, but I'm encountering problems. The first problem was, I didn't know what repository to use. I settled on http://mirror.centos.org/, but using it is strange, as not all mirror servers have all of the directories, and so sometimes links appear broken, but the problem goes away if I hit reload. A number of them have empty directories, like this one: http://mirrors.versaweb.net/centos/3.5/extras/i386/RPMS/ The second problem was, I didn't know what CentOS version to use. I'm guessing 3.5 is the right one for compatibility with RH 3AS. The third problem is, yum reports: # yum install centos-logos Setting up Install Process Setting up Repos http://mirror.centos.org/centos-3/3.5/extras/i386/repodata/repomd.xml: [Errno 4] IOError: HTTP Error 404: Not Found Trying other mirror. Cannot open/read repomd.xml file for repository: extras failure: repodata/repomd.xml from extras: [Errno 256] No more mirrors to try. # Am I using the wrong version of yum? Is there an official yum.conf to use? Thanks! -- Penelope Fudd <centos(a)ch.pkts.ca>

1 0

RE: [CentOS] Problem with mouse and keyboard
by Harper, Patrick 14 Jul '05

14 Jul '05

Looks like it is going to be a hardware problem, I did the unthinkable and put my windows hard drive in and same results. Sorry to take up your time. -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Harper, Patrick Sent: Thursday, July 14, 2005 12:49 PM To: centos(a)centos.org Subject: [CentOS] Problem with mouse and keyboard This just started on my laptop yesterday. My mouse wants to go to the lower left corner of my screen, this seems to be triggered by using the keyboard. Once it is on its way I just have to wait for it to stop so I can move it where I need it or it will just drift back to that corner. I have tried several mice as well as just the onboard touchpad. I am on 4.1 running nightly updates. Thanks for any help you might be able to give. ----------------------------------------- Disclaimer: This electronic message, including any attachments, is confidential and intended solely for use of the intended recipient(s). This message may contain information that is privileged or otherwise protected from disclosure by applicable law. Any unauthorized disclosure, dissemination, use or reproduction is strictly prohibited. If you have received this message in error, please delete it and notify the sender immediately. _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

← Newer
1
...
11
12
13
14
15
16
17
...
24
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss July 2005