Discuss October 2009

discuss@lists.centos.org

338 participants
324 discussions

gpg command works fine from login shell, not from cron script
by Sean Carolan 19 Oct '09

19 Oct '09

I have an odd situation here, maybe one of you can help. We have a script that runs via a cron job. It's purpose is to decrypt PGP-encrypted files in a certain directory. I have tried the command two different ways, both fail with the same error message: gpg --decrypt $file > ${file%.txt}.decrypted.txt gpg --output ${file%.txt}.decrypted.txt --decrypt $file (Don't even ask about the name substitution. The end-user insists they MUST submit files with a .txt extension, and not .pgp or .gpg) Anyway, I can run the script fine from a login shell. It works beautifully. But when it runs from a cron job two things happen: 1. A file of zero size is created called file.decrypted.txt 2. The error message in the cron email I get says: gpg: encrypted with ELG-E key, ID XXXXXXXX gpg: decryption failed: secret key not available Why does it say "secret key not available"? The output of gpg -K shows that the key is in fact available, and this is further confirmed when I run the script manually and the files are decrypted just fine.

3 5

Re: [CentOS] [OT] DHCP auth&auth software
by Antonio da Silva Martins Junior 19 Oct '09

19 Oct '09

----- "Marko Vojinovic" <vvmarko(a)gmail.com> escreveu: > Does anyone know about some free (as in beer, and maybe as in speech) > software which would implement authentication and authorization of a user prior > to issuing a valid dhcp lease? > > I imagine the following scenario: someone walks into my office > building with a laptop (a colleague, a visitor, a guest, whoever), and hooks up onto > the local net (wired or wireless). The server detects an unknown MAC address, > issues a bogus dhcp lease which resolves all dns queries to a single internal > web page with a form the user is supposed to fill in and send. After he does > so, an administrator does a sanity check of the data the user provided, and > grants or denies access. If access is granted, the user gets a new, unrestricted > dhcp lease, which provides him with a normal access to local network. > > The goal is to have a database which relates IP or MAC addresses to > people names, so I can track a person down efficiently if he brings an > infected/spamming machine into the building. > > I would know how to build this infrastructure manually, but it's a lot > of work, and I don't want to reinvent the wheel. Google somehow failed to > help, or I failed to provide the right keywords. :-( > After reading this thread I think you can try PacketFence (www.packetfence.org) and there are some others less powerfull ones on the wikipedia under the NAC topic: http://en.wikipedia.org/wiki/Network_Access_Control Antonio. -- +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Antonio S. Martins Jr. - Support Analist | "Only The Shadow Knows | | Universidade Estadual de Maringá - Brasil| what evil lurks in the | | NPD - Núcleo de Processamento de Dados | Heart of Men!" | | E-Mail: asmartins(a)uem.br / shadow(a)uem.br | !!! Linux User: 52392 !!! | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ "Real Programmers don’t need comments — the code is obvious." -- Esta mensagem foi verificada pelo sistema de antivírus e acredita-se estar livre de perigo.

1 0

apache env vars - best practices
by aurfalien＠gmail.com 19 Oct '09

19 Oct '09

I've been setting custom env vars for Apache 1 of 2 ways; 1 - Changing the passwd file so Apache has a shell and loading a custom .bashrc file. 2 - Using the SetEnv directive in my httpd.conf file. I'm crazy about neither one as they both have limitations; 1 - I don't like giving Apache its own shell. 2 - The SetEnv directive only takes 2 args so if I have a var with multiple values like a path, it won't work. What's the cleanest way to set complex env vars for Apache?

6 13

Re: Passenger Best Practice
by James B. Byrne 19 Oct '09

19 Oct '09

On Sun, 18 Oct 2009 17:13:38 +0100, Stephen Nelson-Smith <stephen(a)atalanta-systems.com> wrote: > I want to move from running puppet under it's own web brick server, > to using passenger. > > I'd like to get an idea of how folk are running passenger? Ideally > I'd like to keep everything rpm based, so would need ruby enterprise > rpms, and then the mod_rails / passenger plugin? > > How are you folk doing it? > Despite your desire for an rpm only solution, I believe that the best way to handle Passenger remains RubyGems. I have installed Enterprise Ruby and Passenger, but as far as I can recall, this still required building from source and using RubyGems to update the passenger gem. Even if an rpm solution was available, I do not consider this the preferred way to go when supporting a Ruby installation dependent upon gems. Gems are the canonical method of maintaining Ruby library extensions and it seems self-defeating to require further re-packaging. Sincerely, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Still Confused about Firewalling
by ML 19 Oct '09

19 Oct '09

Hi All, Sorry, I am still confused about implementing a firewall without having my ISP static route all of my traffic to my public IP's to a single public IP. So before when I have done this for work all traffic has been statically routed. Now I have a comcast modem and it is 'pass through' so traffic for all my 13 IP's is allowed and I have to decide what to do. So I am looking at Vyatta or UnTangle. I have a machine with 3 NIC'e in it. I think one would be In, DMZ and last private. What happens? I have one cable from my comcast gateway to my firewalls NIC, but how does it answer for all IP's that I have so i can evaluate the request incoming to a rule set and decide if allowed or denied? I am missing something fundamental! Can anyone help this click in my head? Without statically routing my traffic I dont get it. Say a request comes to my webserver 172.13.167.xxx on port 80, but my firewall's IP for the card is 172.13.167.zzz how does it answer for 172.13.167.xxx? -Jason

2 1

Postfix, Milters and SELinux
by Dirk H. Schulz 19 Oct '09

19 Oct '09

Hi folks, I want to run Postfix with external milter application on a CentOS 5.3 mailgateway. At the moment SELinux is preventing postfix' cleanup daemon from accessing sockets. Before I to through the process of audit2allow trial and error - has anybody out there successfully gone though this and can send me a policy I can work with? Any hint or help is appreciated. Dirk

1 0

update of openssh-server i386 4.3p2-36.el5, dependencies
by zagiatakrapovic＠gmx.ch 19 Oct '09

19 Oct '09

so far: - not a yum bug - not a configuration issue - other persons could reproduce this behaviour even under RHEL right? so this backport is actually broken or let's say the guy who did this, improved encryptFS-utils that much, it uses now X11 libraries even if it actually has no GUI... still right? ok, so now what is the next step? There is a ticket for this issue but it is reported as a yum bug (see my last post). we all just wait until somebody kicks some #$!@ of the responsible code monkeys? -- Jetzt kostenlos herunterladen: Internet Explorer 8 und Mozilla Firefox 3.5 - sicherer, schneller und einfacher! http://portal.gmx.net/de/go/atbrowser

2 1

Re: [CentOS] Backing up a centos serveR? how to ? Newbie question..
by Per Qvindesland 19 Oct '09

19 Oct '09

A really good place to find out info about the various raid levels and what their good for is here: http://www.acnc.com/04_01_00.html But please don't confuse raid with something like Bacula :) Regards Per At Monday, 19-10-2009 on 16:28 "Bobby" wrote: On Monday 19 October 2009 08:56:48 RedShift wrote: > David Suhendrik wrote: > > may be rsync help You > > Or u can try raid 0[mirrorig] > > for replicate failover triying drbd and heartbeat but I've tested and > > unsuccessfull on my zimbra machines > > RAID IS NOT A BACKUP. > > I repeat. > > RAID IS NOT A BACKUP. > > Nor is replication. Exactly. RAID above RAID 0 does provide redundancy towards hard disk errors. It makes the system more robust. But the data is still in the same set of drives. Backup, as with scp, rsync and cron to a different computer is what you need. We backup our computers every hour with the above. It's very low impact and all we can loose are some changes in the last two hours if the system dies during rsync. David, RAID 0 is not mirroring. What it does is extend capacity over two or more drives. RAID 1 is mirroring. Bobby _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

Backing up a centos serveR? how to ? Newbie question..
by RoLaNd RoLaNd 19 Oct '09

19 Oct '09

Hi all, excuse my newbie question but how can i backup my centos server? i have a dozzen of virtual hosts over it as well as substantial database entries.. i've backed up the following directories using rsync: workspace/ /etc/httpd/ /etc/apache-tomcat-6.0.20/ /usr/lib/mysql/ /var/lib/mysql though i'm still not at ease with this, so i decided to do a some sort of clone or something to move this server to a VMWARE which i will turn on when needed (if main server failed) any advice on how to do so ? i've looked around and tried using "clonezilla" though that didn't work with me, i guess i mustve done something wrong... each time i try to boot from the cloned image of the local disk (which in turn cloned to the VM's local disk) it gives an error bout root records... so any other way ? any sort of help is greatly appreciated :) thanks and best regards, Roland _________________________________________________________________ Keep your friends updated—even when you’re not signed in. http://www.microsoft.com/middleeast/windows/windowslive/see-it-in-action/so…

7 6

[OT] DHCP auth&auth software
by Marko Vojinovic 19 Oct '09

19 Oct '09

Does anyone know about some free (as in beer, and maybe as in speech) software which would implement authentication and authorization of a user prior to issuing a valid dhcp lease? I imagine the following scenario: someone walks into my office building with a laptop (a colleague, a visitor, a guest, whoever), and hooks up onto the local net (wired or wireless). The server detects an unknown MAC address, issues a bogus dhcp lease which resolves all dns queries to a single internal web page with a form the user is supposed to fill in and send. After he does so, an administrator does a sanity check of the data the user provided, and grants or denies access. If access is granted, the user gets a new, unrestricted dhcp lease, which provides him with a normal access to local network. The goal is to have a database which relates IP or MAC addresses to people names, so I can track a person down efficiently if he brings an infected/spamming machine into the building. I would know how to build this infrastructure manually, but it's a lot of work, and I don't want to reinvent the wheel. Google somehow failed to help, or I failed to provide the right keywords. :-( So what are my options? TIA, :-) Marko

5 8

← Newer
1
...
15
16
17
18
19
20
21
...
33
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss October 2009