Discuss December 2010

discuss@lists.centos.org

278 participants
226 discussions

Re: [CentOS] difference between cron and shell invocation.
by James B. Byrne 07 Dec '10

07 Dec '10

On Tue, December 7, 2010 09:49, Brent L. Bates wrote: > If you aren't already doing so, use the full path to the > commands you are I have done as you suggest and that indeed has solved the problem. Thank you very much. Regards, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

difference between cron and shell invocation.
by James B. Byrne 07 Dec '10

07 Dec '10

I have a fairly involved root cron task that I moved verbatim from another server. On the original server, this task ran without problem. On the new server, when this task runs via cron, which I confirm is happening by looking in the cron log, no files are transferred and no error is reported. However, if I copy cron command from roots crontab and paste it into a terminal session on the new server then the task runs to completion and the files are transferred. This task involves sshfs, fuse, and rsync and employs pki certificates for authentication. The fact that it works from the shell without alteration and yet not from cron is the issue. Does anyone have any idea where I would start to track down what is going on? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 3

How to dump mails via HTTP
by gigzbyte 07 Dec '10

07 Dec '10

Hello everyone! How can i dump with human-readable format all e-mails sent and received via HTTP web-interface, for example, via aol.com or gmail.com - it's just examples, there's own mail service, but not under control. Connections to web-iface not secured with HTTPS, pure HTTP. In case of POP3/SMTP - i can successfully dump it with mailsnarf from dsniff rpm. Please, help with something! Sorry, english is not my native language :-) -- -------------------------------------- With regards, Dmitry Lock Network Engineer Customer Support Service PTC Center

1 0

pam_time.so and /etc/security/time.conf
by James B. Byrne 06 Dec '10

06 Dec '10

I have done a bit of experimenting and I am confused respecting the evident behaviour of this module. If I do this: sshd;*;*;Wk0700-1500 Then all user ids fail to log in (at the present time). However, if I add this: sshd;*;user01;Al0000-24000 sshd:*:*:Wk0700-1500 Then I get the same result for user01. If I do this instead: sshd:*:*:Wk0700-1500 sshd;*;user01;Al0000-24000 Then I also get the same result for user01; Forced disconnection. The inference I draw is that the time.conf file is processed until either a failure or the end of the file is encountered, which then counts as a success. Is this right? The manual pages and examples give no hint that this is what happens. They state in fact that sshd;*;user01;Al0000-24000 should always let user01 login. And that clearly does not happen. Is there something that I am doing wrong here? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Coolkey and esc and "SmartCard"s, oh, my
by m.roth＠5-cent.us 06 Dec '10

06 Dec '10

What's happening: I put my "SmartCard" in the reader, and the Coolkey phone home window pops up. I close it, and the SmartCard manager window pops up, saying it's not initialized. Neither of these should be happening with these cards (US federal gov't issue, not DoD). Googling, I find <https://rhn.redhat.com/errata/RHBA-2010-0068.html>, and in that, it says (in part): Excerpt: * the Red Hat Enterprise Security Client (ESC) incorrectly identified CAC cards as CoolKey cards, and mistakenly opened the Phone Home dialog after doing so. With this update, CoolKey correctly identifies CAC cards and assigns the correct functionality to them. With this fix, it is still possible to view certificates and diagnostics for CAC cards, though the management functions are now disabled. Finally, note that the RHBA-2010:0066 esc update must be installed in order to fully resolve this issue. (BZ#499976) --- end excerpt --- It appears to be bug: 226790. So, it sounds *exactly* like what's happening to me... except it's not fixed. Note also the reference to the esc update. a) it refers to 1.1.0.12.el5 of esc, and I have 1.1.0.12.el5, and I find and go to <https://rhn.redhat.com/errata/RHBA-2010-0066.html> which says this file is outdated, and b) this link is *wrong* - it reads File outdated by: RHSA-2010:0501, which has nothing to do with esc, but is a firefox critical fix. Anyone have any experience with this? This card should *never* be calling home.... mark

1 0

pam_time.so and /etc/security/time.conf
by James B. Byrne 06 Dec '10

06 Dec '10

I am investigating how to limit user logins via sshd to specific times of day. I have the basic syntax but what I want to know is how does pam_time.so process time.conf. Say I have a clutch of users that should login between 07:00 and 18:00 Monday to Friday. I infer that the following will handle that: sshd;*;*,Wk0700-1800 However, what is not clear to me is how does one permit certain userids additional login periods while handling the majority of users as above. Say user01 should also be allowed to logon during Saturday mornings Sa0800-1200 and early evenings the rest of the week wk1830-2100 Do I do this? sshd:*;user01;AL1830-2100&Wk0700-1800&Sa0800-1200 sshd:*:*:Al1830-2100 or will this work? sshd:*:user01:Sa0800-1200 sshd:*:user01:Wk1830-2100 sshd:*:*:Al0700-1800 or will this? sshd:*:*:Al0700-1800 sshd:*:user01:Wk1830-2100 sshd:*:user01:Sa0800-1200 What I am trying to understand is whether the first result encountered, either success or failure, is what is applied to a given login attempt. Or, does the stack progress until success or it ends in which case it fails? Recasting my question: Is it meaningful to have multiple entries for a singe userid, whether explicitly given or as part of a wildcard, contained in time.conf? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

CentOS 6: what's the status?
by Boris Epstein 06 Dec '10

06 Dec '10

Hello listmates, So, what's the story with CentOS 6? It is supposed to be out by now, or coming out soon, or so I heard - but yet there seems to be no mention of it at http://centos.org/ . Does anybody know what's up with that? Thanks. Boris.

8 8

Problem starting PostgreSQL-8.4 with SSL
by James B. Byrne 06 Dec '10

06 Dec '10

I installed PG-8.4 for Redhat from the PG84 repo. Everythign works save only that when I try to enable ssl connections then I get this error: Auto configuration failed 16276:error:0E065068:configuration file routines:STR_COPY:variable has no value:conf_def.c:629:line 207 I have verified that the server key and certificate are present, have the correct ownership (postgres:postgres), permissions (600) and that the certificate is valid. Validity Not Before: Dec 6 17:58:47 2010 GMT Not After : Dec 7 17:58:47 2015 GMT I have checked audit.log and there are no SELinux issues reported. I gather that this is an OpenSSL error of some sort but I have no clue what it means or where to search for the problem. Does anyone here know what this means and how to fix it? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

# chkconfig: kill at run level 3
by Michael D. Berger 06 Dec '10

06 Dec '10

In the control script of my daemon in /etc/init.d?, I have # chkconfig: 35 97 3 The result of this is that I have links: /etc/rc.d/rc1.d/K03... /etc/rc.d/rc3.d/S97... /etc/rc.d/rc5.d/S97... As mentioned in a previous thread, my complex daemon throws an exception when I shutdown. Perhaps things might be better if I had: /etc/rc.d/rc3.d/K03... Might this be a good idea? If so, how can I make it happen automatically? Thanks, Mike.

8 16

2.6.18-194.26.1.el5 NFS4 race conditions?
by Gerhard Schneider 06 Dec '10

06 Dec '10

Are there any known race conditions with 2.6.18-194.26.1.el5 x86_64 and NFS4? Today a user managed to shut down two identical Intel servers by copying a simple text file via NFS4. Reverting back to 17.1 made the error disappear. On other non-identical hardware the error was not reproducible (so it must be a combination of hardware and this special kernel revision). Anybody interested in a kernel dump? It's only 16GB. I could install kernel-debuginfo and try to get something out of the dump.. Gerhard Schneider -- Gerhard Schneider e-Mail:gs@ilsb.tuwien.ac.at Institute of Lightweight Design and Tel.: +43 664 60 588 3171 Structural Biomechanics (E317) Fax.: +43 1 58801 31799 Vienna University of Technology / Austria DVR: 0005886 A-1040 Wien, Gusshausstrasse 27-29 http://www.ilsb.tuwien.ac.at/

1 0

← Newer
1
...
16
17
18
19
20
21
22
23
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss December 2010