Discuss January 2008

discuss@lists.centos.org

311 participants
383 discussions

Help with authenticating against Active Directory.
by Milton Calnek 01 Feb '08

01 Feb '08

Hello all, I'm trying to authenticate shell login's against an MS-ADS. I don't have admin access to the ADS, but I can talk to the admins. I have gotten as far as getting authentication working, but the uid's depend on the order of login. ie: the first guy to login gets 10000, the next gets 10001, etc. The problem I have with this is that I want to share the home directories via nfs, which means everyone has to have the same id. Is anyone else doing this? My smb.conf and nsswitch.conf files are below. TIA -- Milton Calnek BSc, A/Slt(Ret.) milton(a)calnek.com 306-717-8737 smb.conf [global] workgroup = example_com realm = example.COM server string = %h server (Samba %v) security = ADS map to guest = Bad Password passdb backend = tdbsam passwd program = /usr/bin/passwd %u passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n . log level = 2 winbind:10 syslog = 0 log file = /var/log/samba/log.%m max log size = 1000 dns proxy = No wins server = ldap ldap ssl = no panic action = /usr/share/samba/panic-action %d idmap uid = 10000-20000 idmap gid = 10000-20000 idmap backend = ldap:ldap://ldap.example.com:3268 ldap admin dn = cn=Manager,dc=example,dc=COM ldap idmap suffix = ou=Idmap ldap suffix = dc=example,dc=COM template homedir = /home/%U template shell = /bin/bash winbind separator = + winbind use default domain = Yes winbind nested groups = Yes invalid users = root nsswitch.confpasswd: files compat winbind shadow: files compat group: files compat winbind #hosts: db files nisplus nis dns hosts: files dns # Example - obey only what nisplus tells us... #services: nisplus [NOTFOUND=return] files #networks: nisplus [NOTFOUND=return] files #protocols: nisplus [NOTFOUND=return] files #rpc: nisplus [NOTFOUND=return] files #ethers: nisplus [NOTFOUND=return] files #netmasks: nisplus [NOTFOUND=return] files bootparams: nisplus [NOTFOUND=return] files ethers: files netmasks: files networks: files protocols: files rpc: files services: files netgroup: nisplus publickey: nisplus automount: files nisplus aliases: files nisplus -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

6 10

Unknown rootkit causes compromised servers
by Johnny Hughes 01 Feb '08

01 Feb '08

Here is the applicable article: http://www.linux.com/feature/125548 There are links in the above article that explain tests for the system and what is currently known about the rootkit. Apparently initial access is NOT via any vulnerability but just guessed root passwords. There are currently 2 methods to see if you are infected: 1. In some cases, the root kit causes you to not be able to create directories starting with a number ... so as root do: mkdir 1 If it gives you an error similar to this, you are probably infected: mkdir: cannot create directory `1': No such file or directory 2. Run this command for several minutes while you have windows users connecting to your web server: tcpdump -nAs 2048 src port 80 | grep "[a-zA-Z]\{5\}\.js'" If you get output from this script, you may be infected. ======================================================== More info: http://blog.cpanel.net/?p=31 http://www.cpanel.net/security/notes/random_js_toolkit.html http://www.finjan.com/Pressrelease.aspx?id=1820&PressLan=1819&lan=3 http://www.pcworld.com/article/id,141358-c,techindustrytrends/article.html http://www.webhostingtalk.com/showthread.php?t=651748 ========================================================== This does not seem to be caused by a specific vulnerability that CentOS or RHEL or cPanel has, but rather it seems to be caused by compromised root passwords. There are several recommendations in the above links to prevent becoming infected as well as what to do if you are infected. While there does not seem to be anything that the CentOS Development Team can "FIX" in relation to this issue ... I thought I would put the information out so that people can test their machines and take action as necessary. Thanks, Johnny Hughes

15 25

rsync and swapping
by Jerry Geis 01 Feb '08

01 Feb '08

hi all, I use rsync to copy/backup ALL my stuff to another disk. When I run this seems like my machine (4 GIG ram centos 5.1) now begins to swap out more programs. Is there a way to reduce that swapping? I am running with echo 1 > /proc/sys/vm/swappiness I simply mount /dev/sdc1 /mnt/backup; mkdir /mnt/backup/month.day.year then rsync -a /home /mnt/backup/mon.day.year This is approximately 102G of data. Thanks for any suggestions. Jerry

14 20

Problems to install java plugin in CentOS 5.1 x86_64
by Sergio Belkin 01 Feb '08

01 Feb '08

Hi! I've tried to install java plugin as is in http://www.howtoforge.com/installation-guide-centos5.1-desktop-p7 but with no success. All steps seems to go well, with no error messages, but Firefox says that there is no java plugin. Please, tell me what could be wrong? Thanks in advance!! -- Sergio Belkin ----------------------------------------

3 5

centosplus + priority plugin
by Christopher Chan 31 Jan '08

31 Jan '08

I have a Centos 4 box that has been updated all the way to 4.6 without using the centosplus repository. Now I want to use the centosplus repository for Centos 4 to get the latest LAMP, mod_perl, perl and other perl modules so that I can install rt 3.6.6 and its necessary modules. However, for some reason, the latest perl package in the centosplus repository does not appear on the radar when I run yum check-update. Has anybody ran into this and get around the problem? Contents of yum.conf and Centos-Base.repo and output from yum check-update follow. Christopher cat /etc/yum.conf [main] cachedir=/var/cache/yum debuglevel=2 logfile=/var/log/yum.log pkgpolicy=newest distroverpkg=centos-release tolerant=1 exactarch=1 retries=20 obsoletes=1 gpgcheck=1 plugins=1 exclude=postfix* cyrus-sasl* dovecot* -------------------------------------------------------------------- cat /etc/yum.repos.d/CentOS-Base.repo # CentOS-Base.repo # # This file uses a new mirrorlist system developed by Lance Davis for CentOS. # The mirror system uses the connecting IP address of the client and the # update status of each mirror to pick mirrors that are updated to and # geographically close to the client. You should use this for CentOS updates # unless you are manually picking other mirrors. # # If the mirrorlist= does not work for you, as a fall back you can try the # remarked out baseurl= line instead. # # [base] name=CentOS-$releasever - Base #mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=os baseurl=http://ftp.hostrino.com/pub/centos/$releasever/os/$basearch/ gpgcheck=1 gpgkey=http://mirror.centos.org/centos/RPM-GPG-KEY-centos4 exclude=php* httpd* postgres* MySQL* mysql* perl perl-DBD-MySQL perl-DBD-Pg perl-DBI perl-suidperl unixODBC* mod_auth_mysql mod_auth_pgsql mod_perl mod_perl-devel mod_ssl priority=1 #released updates [update] name=CentOS-$releasever - Updates #mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=updates baseurl=http://ftp.hostrino.com/pub/centos/$releasever/updates/$basearch/ gpgcheck=1 gpgkey=http://mirror.centos.org/centos/RPM-GPG-KEY-centos4 exclude=php* httpd* postgres* MySQL* mysql* perl perl-DBD-MySQL perl-DBD-Pg perl-DBI perl-suidperl unixODBC* mod_auth_mysql mod_auth_pgsql mod_perl mod_perl-devel mod_ssl priority=1 #packages used/produced in the build but not released [addons] name=CentOS-$releasever - Addons #mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=addons baseurl=http://ftp.hostrino.com/pub/centos/$releasever/addons/$basearch/ gpgcheck=1 enabled=0 gpgkey=http://mirror.centos.org/centos/RPM-GPG-KEY-centos4 #additional packages that may be useful [extras] name=CentOS-$releasever - Extras #mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=extras baseurl=http://ftp.hostrino.com/pub/centos/$releasever/extras/$basearch/ gpgcheck=1 enabled=1 gpgkey=http://mirror.centos.org/centos/RPM-GPG-KEY-centos4 #additional packages that extend functionality of existing packages [centosplus] name=CentOS-$releasever - Plus #mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=centosplus baseurl=http://ftp.hostrino.com/pub/centos/$releasever/centosplus/$basearch/ gpgcheck=1 enabled=1 gpgkey=http://mirror.centos.org/centos/RPM-GPG-KEY-centos4 priority=2 #contrib - packages by Centos Users [contrib] name=CentOS-$releasever - Contrib #mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=contrib baseurl=http://ftp.hostrino.com/pub/centos/$releasever/contrib/$basearch/ gpgcheck=1 enabled=0 gpgkey=http://mirror.centos.org/centos/RPM-GPG-KEY-centos4 ---------------------------------------------------------------- yum check-update Loading "priorities" plugin Setting up repositories Reading repository metadata in from local files Excluding Packages in global exclude list Finished Excluding Packages from CentOS-4 - Updates Finished Excluding Packages from CentOS-4 - Base Finished 43 packages excluded due to repository priority protections httpd.x86_64 2.0.59-1.el4s1.10.el4. centosplus httpd-manual.x86_64 2.0.59-1.el4s1.10.el4. centosplus mod_perl.x86_64 2.0.3-1.el4s1.3 centosplus mod_ssl.x86_64 1:2.0.59-1.el4s1.10.el centosplus mysql.x86_64 5.0.54-1.el4.centos centosplus mysql-devel.x86_64 5.0.54-1.el4.centos centosplus mysql-server.x86_64 5.0.54-1.el4.centos centosplus mysqlclient10.x86_64 3.23.58-9.2.c4 centosplus perl-DBD-MySQL.x86_64 3.0008-1.el4.centos centosplus perl-DBD-Pg.x86_64 1.49-1.el4s1 centosplus perl-DBI.x86_64 1.54-1.el4s1 centosplus php.x86_64 5.1.6-3.el4s1.8 centosplus php-gd.x86_64 5.1.6-3.el4s1.8 centosplus php-ldap.x86_64 5.1.6-3.el4s1.8 centosplus php-mbstring.x86_64 5.1.6-3.el4s1.8 centosplus php-pear.noarch 1:1.4.11-1.el4s1.1 centosplus php-pgsql.x86_64 5.1.6-3.el4s1.8 centosplus postgresql.x86_64 8.1.9-1.el4s1.1 centosplus postgresql-devel.x86_64 8.1.9-1.el4s1.1 centosplus postgresql-libs.x86_64 8.1.9-1.el4s1.1 centosplus postgresql-server.x86_64 8.1.9-1.el4s1.1 centosplus unixODBC.x86_64 2.2.12-1.el4s1.1 centosplus

2 3

VMWare 6.02 and Linux screen saver?
by Scott Ehrlich 31 Jan '08

31 Jan '08

I have a user who freshly installed CentOS on their desktop. They also installed VMWare 6.02. When they click the mouse on their Linux desktop, the screen saver properly activates. But, when they click the mouse in their VMWare session, the Linux screen saver never activates. This has been tried for both VMWare Player and Workstation. I don't know if it makes any difference, but the VMWare Guest OS is Windows XP w/SP2. Thanks for any insight. Scott

2 1

adaptec 2100S drivers
by Mark Weaver 31 Jan '08

31 Jan '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, I've got a server that I'm rebuilding and I've been given an Adaptec 2100S single channel scsi card to use. Problem is I can't find drivers for CentOS 4 anywhere. So far I've tried the adaptec drivers on the install CD but when it comes time to use disc druid it doesn't see the array that I've setup. don't know if it matters, but I've got the CDROM on IDE0 port and nothing on IDE1 port. Are there drivers for this scsi card anywhere? thanks, - -- Mark "If you have found a very wise man, then you've found a man that at one time was an idiot and lived long enough to learn from his own stupidity." ============================================== Powered by CentOS5 (RHEL5) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: GnuPT 2.5.8.1 by EQUIPMENTE.DE iD8DBQFHoNHkXIpLU+e4OpgRAgltAKCVRlOlrtXSHz4ptqeEVV58rGsEDACgkwzN f1RNeKUBfq8AaISTe5KFIPM= =+MVB -----END PGP SIGNATURE-----

2 1

About Creating a DVD iso from Cd's isos
by Manuel Enrique Chavez Manzano 31 Jan '08

31 Jan '08

I had tried the bash script that there is on the wiki about How to create a DVD from Cd's I got no errors during the making of the DVD but the size of the final DVD.iso is about 2.2 Gb when I look into the mirrors page a DVD iso is about 4 gb Is theiso size correct?, or I'm doing something wrong???

1 0

Where is gpg-agent?
by Anne Wilson 31 Jan '08

31 Jan '08

The only obstacle now to running this box as the mail server is that I do read and send mail on it occasionally, while working on something. I need gpg-agent, but can't find how to get it. Is it merged into another package, or do I simply have to look at other repositories? Anne

3 7

Locating the broken links
by Ioannis Vranos 31 Jan '08

31 Jan '08

Is there any command that I can use to find the broken links that point to non-existent files? Thanks a lot.

7 10

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss January 2008