Discuss May 2006

discuss@lists.centos.org

233 participants
263 discussions

vsftpd: users can delete files they don't possess
by Kai Schaetzl 17 May '06

17 May '06

FTP users can delete files in their home directory they don't possess (including files belonging to root:root!) with vsftpd. I have reproduced that with vsftpd 1.1 on Suse and 2.0 on CentOS. I don't think this should happen at all. I can't see that the documentation at http://vsftpd.beasts.org/vsftpd_conf.html mentions this problem at all. How can I stop this? Kai

4 6

OpenOffice.org 1.1.2 vs. 2.0.2
by Niki Kovacs 16 May '06

16 May '06

Hi, I recently migrated from Slackware 10.2 to CentOS 4.3, upon advice of fellow Slacker and CentOS user Daniel de Kok. Been working very intensively for the last three weeks with it, and I must say: I really like it. This is the Real Work(tm) Distro I was always looking for! There's a practical reason for this: beginning on June 1st I will be chief sysadmin of our village's town hall. Don't be too impressed... besides the mayor and his dog, we're 900 people living here, mostly farmers... But the village got a nice budget to build an even nicer public "salle multimedia", the house is ready (with a nice view over the South French hills), and here's the scenario. About ten PC's will be acquired new, so they will be equipped with a shiny CentOS 4.3. The remaining PC's in the town hall will either get some light Linux distro (Slack with XFCE or something like this)... but some people here desperately cling to their Windows 98 or Windows XP and don't want this Linux thing. At least two Windows machines here are equipped with the latest OpenOffice.org. Now there's a slight compatibility issue. OO 2.0.x defaults to the .odt file format, which OO 1.2.2 can't read. I know that stock rpm's from openoffice.org *can* be installed, but I think it would be a pity to ruin the otherwise great artwork consistency (I have to seduce the new Linux users, remember). The latest Fedora 5 came out, and I see that there's a source rpm available at rpm.pbone.net. Unfortunately, I'm on dialup here, and there's no chance I can get this until next week. Plus, I'm only a beginner with source RPM's, and OO is somewhat of a bear to compile. Now what if one of the gurus here gave it a shot? Got some bandwidth and some CPU to spare? Or maybe evaluate my chances as to the outcome? Or is it better to tell the Windows people to default to .sxw and stick with the present version (which, I must say, looks quite bug-free)? Cheers, Niki Kovacs

2 1

NFS and firewall issues
by Niki Kovacs 16 May '06

16 May '06

Hi, I have a small home LAN, where one machine (192.168.1.1) connects to the internet via dialup (no DSL here) and shares the connection with IP masquerading. To achieve this, I tried out various recipes found on the internet, and finally put this in /etc/rc.d/rc.local: --8<------ rc.local ------------ #!/bin/sh # # This script will be executed *after* all the other init scripts. # You can put your own initialization stuff in here if you don't # want to do the full Sys V style init stuff. touch /var/lock/subsys/local # Setup IP Masquerading iptables -F; iptables -t nat -F; iptables -t mangle -F iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE # Secure it iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A INPUT -m state --state NEW -i ! ppp0 -j ACCEPT iptables -P INPUT DROP iptables -A FORWARD -i ppp0 -o ppp0 -j REJECT --8<--------------------------- I don't understand much about iptables. Documentation about it is on my TODO list (I'll keep it for after my death:oD). Now I have a problem. I fiddled a bit with NFS, and I had a firewall-related problem with it. In short, when iptables (the firewall) runs, I can't do an NFS mount. But as soon as I stop it (service iptables stop), NFS mounts are possible. Now what can I do to 1) go on sharing my ppp connection 2) be able to do NFS mounts while 3) still having a reasonable secure system? Cheers, Niki Kovacs

5 6

Loading GNOME with GDM
by Hairul Ikmal Mohamad Fuzi 16 May '06

16 May '06

Hi, We have a few PC with CentOS 4 installed. By default, it runs to runlevel 5, which displays the GDM. I'm just wondering, how do I actually make the GDM to start GNOME automatically (after a successful login) for all normal user account without having to add 'exec gnome-session' in every user's ~/.xinitrc? The current scenario is, only successful 'root' logins starts the GNOME, while other normal user successful login is presented with the minimalist window manager (which is equivalent to 'Default System Session' from the GDM menu). I'd appreciate if anyone could help me to figure this one out. Thanks! -Ikmal

4 6

PHP5 questions
by Kai Schaetzl 15 May '06

15 May '06

If I install PHP5 from centosplus it will replace PHP4, is this correct? Or is there a way to have it installed in parallel? I know I can't run both modules at the same time, but I'd prefer having them installed in parallel, so I can switch back/between easier. When I try updating I get a dependency warning from php-eaccelerator (from dag repo) - can I ignore that? Searching thru my list archive I find it mentioned several times that eaccelerator works with PHP5, but it's not clear if and what package. Thanks. Kai

3 4

Requirements for building source RPM's?
by Niki Kovacs 15 May '06

15 May '06

Hi, I have CentOS 4.3. On install, I chose the 'Personal Desktop' option without bothering about customizing. I'm on dialup, so I try to choose a mixture of rpm and yum, e. g. I do 'yum install something', take a peek at what is needed, and then install as much as I can from the CD's using rpm -ivh. I want to build an app (cdlabelgen and its frontend gtkcdlabel) from a source RPM, since the binary has a few encoding weirdnesses. I've never built a source RPM (using Slack before), now I wonder: what tools (packages) do I need for this, besides rpm-build, gcc, autoconf etc.? Niki Kovacs

4 4

4.3 ServerCD
by Michael Grinnell 15 May '06

15 May '06

I'm building some new servers next week, and I'm wondering if I should wait for the 4.3 ServerCD or just use the 4.2 ServerCD. Is there an ETA on 4.3? Thanks for the great work, Michael Grinnell

9 11

Basic SAMBA setup
by Niki Kovacs 15 May '06

15 May '06

Hi, I want to setup a simple SAMBA file server, in its most simple configuration first, and then fine-tune that gradually. I've never worked with SAMBA before, so I based myself on Carla Schroder's "Linux Cookbook", chapter XX: SAMBA. Here's what I did, following the step-by-step instructions and reading the explanations as to what-does-what: # mkdir -m 777 /shares Rename /etc/samba/smb.conf to something else (old.sambaconfig) and then edit a new smb.conf from scratch, which looks like this: --8<-------------------- [global] workgroup = workgroup netbios name = windbag server string = Anonymous local file server security = share browseable = yes hosts allow = 192.168.1. [share1] path = /shares comment = Test files read only = No guest ok = Yes --8<--------------------- I tested this configuration with testparm, and it looked OK. Next I restarted SAMBA (service smb restart) and checked the status (service smb status). After this I tried (on the same machine) to connect to my file server: $ smbclient -L windbag But there I got a "Failed to connect". Now what? Niki Kovacs

4 4

pop3d and iptables lockup
by Bowie Bailey 15 May '06

15 May '06

I am having a problem implementing iptables with Courier's pop3 daemon. If I disable iptables, everything works fine. As soon as I enable it, pop3 will stop working for messages over 32K. Small messages will go through with no problems, but large ones will time out. I get this message from OE: "Your POP3 server has not responded in 60 seconds." And an option to stop or continue waiting. I can wait as long as I want, but it will not download the message. This problem only exists with connections coming from outside our network. Connections from within the network can download large messages with no problems. Has anyone seen this before? I would like to implement iptables for more security, but I can't do it if this problem persists. My server is: P4 2.8, 1GB RAM CentOS 4.3 (fully patched) Courier 0.53.1 My iptables rules were initially created with system-config-securitylevel and then modified from there. The current rules are: Chain INPUT (policy ACCEPT) target prot opt in out source destination RH-Firewall-1-INPUT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain FORWARD (policy ACCEPT) target prot opt in out source destination RH-Firewall-1-INPUT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy ACCEPT) target prot opt in out source destination Chain RH-Firewall-1-INPUT (2 references) target prot opt in out source destination ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 255 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:25 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:110 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:53 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:53 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:587 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:80 ACCEPT tcp -- * * 172.16.0.0/16 0.0.0.0/0 state NEW tcp dpt:22 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:443 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:995 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited I have found information on Google indicating that this might be a problem with the MTU or MSS setting, but the solutions given seemed to be aimed at the end user rather than the server. I tried them anyway, but they didn't seem to help. This is what was generally suggested: iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN \ -j TCPMSS --clamp-mss-to-pmtu It didn't get any hits on the FORWARD chain. I put it on the OUTPUT chain and it got some hits there, but didn't have any effect on the problem. I also tried the --set-mss option with the same lack of results. I appreciate any suggestions. -- Bowie

1 0

Setting a different LANG variable for a single GTK application?
by Niki Kovacs 15 May '06

15 May '06

Hi, I just installed GtkCDLabel, a nifty little app to create CD covers in a matter of minutes, if not seconds, and which I've been using on a daily basis on Slackware (previous system). I've encountered some encoding issues. Whenever my CD text contains french special characters like é, è, à and ç, the resulting .ps file displays martian characters instead. 'printenv' shows me that the default LANG variable on my system is fr_FR.UTF-8. So I tried to start the app from the terminal with: $ LANG=fr_FR && gtkcdlabel ... and everything worked fine. The problem is now including this workaround in the corresponding .desktop menu entry in /usr/share/applications. When I try to replace Exec=gtkcdlabel by Exec='LANG=fr_FR && gtkcdlabel' ... GNOME complains about an error. My second attempt included an alias in /etc/bashrc, which resulted in a partial success. Typing 'gtkcdlabel' in gnome-terminal, I get the correct result. But when the app is launched from the desktop menu, it is unimpressed by the alias. Which leaves me clueless. Is there any other place where I could define a more global alias? Niki Kovacs

5 7

← Newer
1
...
11
12
13
14
15
16
17
...
27
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss May 2006