Discuss March 2008

discuss@lists.centos.org

300 participants
373 discussions

System Rebooted by 2.6.18-8.1.8.el5
by Andrew Hearn 26 Mar '08

26 Mar '08

Hello, I have a machine that seemed to reboot by itself yesterday, in /var/log/messages I only see: Mar 25 14:26:45 asterisk shutdown[19256]: shutting down for system reboot When I type: last reboot I see: reboot system boot 2.6.18-8.1.8.el5 Tue Mar 25 14:28 (18:41) So it seems like the kernel rebooted, but I'm not sure how I can track down why, any pointers? Thanks! Andrew

5 5

how to setup SFTP log file like vsftpd.log???
by mcclnx mcc 26 Mar '08

26 Mar '08

We have CENTOS version 3,4 and 5 on DELL servers. What I want to know is how to setup SFTP log file similiar to vsftpd.log. I knew /var/log/secure provide me login user information, but I need more detail like "file name", "get/put", etc. Thanks you for help. 付費才容量無上限？Yahoo!奇摩電子信箱2.0免費給你，信件永遠不必刪！ - 馬上體驗！

1 0

RE: [CentOS] Securing SSH
by Bowie Bailey 26 Mar '08

26 Mar '08

Kai Schaetzl wrote: > Bowie Bailey wrote on Wed, 26 Mar 2008 09:18:56 -0500: > > > Use VPN to connect to your network and then ssh through the VPN > > tunnel to any machines you need to work with. This way only the > > VPN is exposed to the Internet. > > if the machines are within the LAN, yes. My original point was that > if you have a static IP address for your local LAN *and* you want to > restrict the *remote* machines to be ssh-connectable only from that > LAN (which is a good security measure) *and* you are on the road you > can still work on your remote machine by VPNing into your LAN. There > are other solutions, but VPN is probably the easiest one as most SOHO > routers should be able to terminate a VPN and it's likely that you > want to connect to your LAN via VPN for other purposes, anyway. Doing > that for the machines *within* your LAN is granted. Ok. I was thinking of a simpler "traveling user needs access to machines on the LAN" scenario. :) -- Bowie

1 0

RE: [CentOS] Securing SSH
by Bowie Bailey 26 Mar '08

26 Mar '08

Kai Schaetzl wrote: > Robert Spangler wrote on Wed, 26 Mar 2008 08:03:48 -0400: > > > If you are going to use VPN then why not setup your remote site to > > use VPN and bypass SSH altogether then? > > There could be several reasons, for instance: > 1. SSH is all what is necessary > 2. it's probably easier to have *one* VPN and then be able to ssh to > dozens of other machines instead of setting up VPN on all of them and > running several VPN tunnels at once Use VPN to connect to your network and then ssh through the VPN tunnel to any machines you need to work with. This way only the VPN is exposed to the Internet. > > Bottom line is if you want to be secure don't use passwords for > > login. > > Still doesn't stop those brute-force attacks. It just makes them > fail. That's the point about moving port etc., not the security. Agreed. I have one machine on my network that exposes an ssh connection on a non-standard port. My logs for the last month do not show a single failed connection attempt. -- Bowie

3 2

Re: [CentOS] Securing SSH
by Lee Garner 26 Mar '08

26 Mar '08

>> 3. Install some brute force protection which can automatically ban an >> IP on say 5 / 10 failed login attempts >The only software I know that could do this isn't supported anymore (trisentry) or is too confusing and I don't know it yet (snort). Suggestions? OSSEC-HIDS is pretty good.

1 0

yum: removing Java group fails
by Kai Schaetzl 26 Mar '08

26 Mar '08

I did a "yum groupremove Java" and that failed "somehow". Yum listed all group members as "erased", but some rpm packages failed because of missing config files or so. As a result none of the 50 packages were removed from the rpm database, but all of their files seem to have been removed. How can I clean them out from the rpm db? Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

2 3

Automount CIFS share in CentOS 5.1
by Joseph L. Casale 26 Mar '08

26 Mar '08

I am looking online trying to find a procedure to automount a CIFS share but need to use username/domain/pass in the credential file thats referenced in fstab. Its not working, anyone know of a resource that works in CentOS5.1? If it matters, the unc has a dash and a $ in it, and the password has special characters in it. Thanks! jlc

3 3

Re: [CentOS] System Rebooted by 2.6.18-8.1.8.el5
by Ross S. W. Walker 26 Mar '08

26 Mar '08

Check if you allow write access to snmp and from whom. A reboot request could have been issued via snmp. -Ross ----- Original Message ----- From: centos-bounces(a)centos.org <centos-bounces(a)centos.org> To: CentOS mailing list <centos(a)centos.org> Sent: Wed Mar 26 07:09:06 2008 Subject: Re: [CentOS] System Rebooted by 2.6.18-8.1.8.el5 > This looks like a normal shutdown command was issued from somewhere, > IMO. I would check the other log files under /var/log and its sub- > directories for entries around this time. Especially secure.log*. Also, > I don't know your configuration, but is there a cron or at entry that > has a scheduled reboot? > > also check last log to see who was logged in _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos ______________________________________________________________________ This e-mail, and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution or copying of this e-mail, and any attachments thereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify the sender and permanently delete the original and any copy or printout thereof.

2 1

NTFS-3G Support for CentOS 5.1 Live
by Mark Rose 26 Mar '08

26 Mar '08

I have been trying to mount my NTFS hard disk using the CentOS 5.1 Live USB pendrive I created from the LiveCD. I did an "fdisk-l" and see the partition as /dev/sdb1, but when I try to mount it, I get an error stating that NTFS is an unknown filesystem type. I attempted to install the ntfs-3g and fuse rpms, without any success (there were numerous dependancies and could not get libc to install).. Has anyone been able to successfully RW mount an NTFS filesystem using an USB install, if its even possible, that is? If not, are there any plans to include NTFS-3G support in the next release of the Live CD? Thanks! Mark

2 1

swat is now broken
by Jason Pyeron 26 Mar '08

26 Mar '08

seems to mess up the pam for swat. [root@host67 security]# rpm -qf /etc/pam.d/samba samba-3.0.25b-1.el4_6.4 [root@host67 security]# cat /etc/pam.d/samba #auth required /lib/security/pam_stack.so service=system-auth #account required /lib/security/pam_stack.so service=system-auth auth required pam_stack.so service=system-auth account required pam_stack.so service=system-auth and now it works See below for debug/effort ==> /var/log/messages <== Mar 24 09:50:58 host67 swat[26626]: PAM unable to dlopen(/lib/security/pam_stack.so) Mar 24 09:50:58 host67 swat[26626]: PAM [dlerror: /lib/security/pam_stack.so: cannot open shared object file: No such file or directory] Mar 24 09:50:58 host67 swat[26626]: PAM adding faulty module: /lib/security/pam_stack.so Mar 24 09:50:58 host67 swat[26626]: [2008/03/24 09:50:58, 0] auth/pampass.c:smb_pam_auth(534) Mar 24 09:50:58 host67 swat[26626]: smb_pam_auth: PAM: UNKNOWN ERROR while authenticating user root Mar 24 09:50:58 host67 swat[26626]: [2008/03/24 09:50:58, 0] auth/pampass.c:smb_pam_passcheck(809) Mar 24 09:50:58 host67 swat[26626]: smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User root ! [root@host67 ~]# rpm -ql pam | grep stack /lib64/security/pam_stack.so /usr/share/doc/pam-0.77/txts/README.pam_stack /usr/share/man/man8/pam_stack.8.gz [root@host67 ~]# up2date --whatprovides /lib/security/pam_stack.so pam-0.77-66.23.i386 [root@host67 ~]# rpm -q pam pam-0.77-66.23 [root@host67 ~]# uname -a Linux host67.1.internal.pdinc.us 2.6.9-55.0.2.ELsmp #1 SMP Tue Jun 26 14:14:47 EDT 2007 x86_64 x86_64 x86_64 GNU/Linux [root@host67 ~]# up2date -u pam Fetching Obsoletes list for channel: centos4-Base... Fetching Obsoletes list for channel: centos4-Updates... Fetching Obsoletes list for channel: centos4-extras... Fetching Obsoletes list for channel: centos4-addons... Fetching rpm headers... ######################################## Name Version Rel ---------------------------------------------------------- All packages are currently up to date [root@host67 ~]# up2date -u pam --arch=i386 Fetching Obsoletes list for channel: centos4-Base... Fetching Obsoletes list for channel: centos4-Updates... Fetching Obsoletes list for channel: centos4-extras... Fetching Obsoletes list for channel: centos4-addons... Fetching rpm headers... ######################################## Name Version Rel ---------------------------------------------------------- pam 0.77 66.23 i386 Testing package set / solving RPM inter-dependencies... Downloading headers to solve dependencies... ####################################### Downloading headers to solve dependencies... ######################################## audit-libs-1.0.15-3.el4_6.1 ########################## Done. audit-libs-1.0.15-3.el4_6.1 ########################## Done. cracklib-2.8.9-1.3.i386.rpm ########################## Done. cracklib-2.8.9-1.3.i386.rpm ########################## Done. glib2-2.4.7-1.i386.rpm: ########################## Done. glib2-2.4.7-1.i386.rpm: ########################## Done. pam-0.77-66.23.i386.rpm: ########################## Done. pam-0.77-66.23.i386.rpm: ########################## Done. cracklib-dicts-2.8.9-1.3.i3 ########################## Done. cracklib-dicts-2.8.9-1.3.i3 ########################## Done. Preparing ########################################### [100%] Installing... 1:glib2 ########################################### [100%] 2:audit-libs ########################################### [100%] 3:cracklib ########################################### [100%] 4:cracklib-dicts ########################################### [100%] 5:pam ########################################### [100%] The following packages were added to your selection to satisfy dependencies: Name Version Release -------------------------------------------------------------- audit-libs 1.0.15 3.el4_6.1 cracklib 2.8.9 1.3 glib2 2.4.7 1 cracklib-dicts 2.8.9 1.3 [root@host67 ~]# tail -f /var/log/messages Mar 25 19:26:17 host67 swat[5003]: PAM unable to dlopen(/lib/security/pam_stack.so) Mar 25 19:26:17 host67 swat[5003]: PAM [dlerror: /lib/security/pam_stack.so: cannot open shared object file: No such file or directory] Mar 25 19:26:17 host67 swat[5003]: PAM adding faulty module: /lib/security/pam_stack.so Mar 25 19:26:17 host67 swat[5003]: [2008/03/25 19:26:17, 0] auth/pampass.c:smb_pam_auth(534) Mar 25 19:26:17 host67 swat[5003]: smb_pam_auth: PAM: UNKNOWN ERROR while authenticating user root Mar 25 19:26:17 host67 swat[5003]: [2008/03/25 19:26:17, 0] auth/pampass.c:smb_pam_passcheck(809) Mar 25 19:26:17 host67 swat[5003]: smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User root ! [root@host67 ~]# dir /lib/security/pam_stack.so -rwxr-xr-x 1 root root 10764 Nov 16 22:59 /lib/security/pam_stack.so [root@host67 ~]# rpm -Vf /lib/security/pam_stack.so S.5....T. c /etc/pam.d/system-auth [root@host67 ~]# rpm -e glib2.i386 pam-0.77-66.23.i386 [root@host67 ~]# rpm -e audit-libs.i386 [root@host67 ~]# rpm -e cracklib.i386 [root@host67 ~]# rpm -e cracklib-dicts.i386 [root@host67 ~]# -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us <http://www.pdinc.us/> - - Principal Consultant 10 West 24th Street #100 - - +1 (443) 269-1555 x333 Baltimore, Maryland 21218 - - - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- This message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, purge the message from your system and notify the sender immediately. Any other use of the email by you is prohibited.

1 0

← Newer
1
...
6
7
8
9
10
11
12
...
38
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss March 2008