Discuss May 2011

discuss@lists.centos.org

225 participants
154 discussions

FTP Migration
by listmail 24 May '11

24 May '11

Hi All, Please feel free to correct any misconceptions in my premises as I get to my question. I have about 6 ftp services running on a CentOS system that is going down for service, and I want to move the ftp services to a VM on another network. These are all running on Proftpd, with fairly complicated directory/permissions/rate control layouts, as proftpd nicely supports. First, it appears that RH and CentOS have dropped proftpd since I last looked and are now only shipping vsftpd in the repositories. Second, I looked at the vsftpd site, and noticed a complete absence of documentation (other than a basic bare-bones manpage), so I have no idea if vsftpd will support anything that I'm doing with proftpd, or any information about how to configure anything. Obviously I could just install the latest version of proftpd from source on the new host and get on with my life, but is there any reason to bite the bullet and try to convert my ftp sites to a new, basically undocumented ftp server? Any input appreciated, especially on conversions of complicated ftp sites from proftpd to vsftpd. Thanks, --Bill

2 1

Web based file versioning frontend
by Joseph L. Casale 24 May '11

24 May '11

Hey guys, Need an opinion on what to use for file versioning text conf files that get updated by scheduled rsync's etc. Need something that can watch the file, so it doesn't need an explicit checkin, and can be diffed by a web front end. I haven't any preference on backend either. Thanks for any suggestions, jlc

4 5

Keep CentOS 5.5 from upgrading?
by Mailing List 23 May '11

23 May '11

Thanks, I'm trying to keep CentOS 5.5 from upgrading to 5.6 because of my issue with the time sync. I thought I had it figured out till today. I have tried google for help but with no luck. Can someone point me to a page or link that will give me a good idea as to how to stop the upgrade but still allow me to update my 5.5 packages? This is what I tried, that is not working now. I edited "/etc/yum.repos.d/CentOS-Base.repo" to look as such. <snip> [base] name=CentOS-5.5 - Base ## name=CentOS-5.5 - Base mirrorlist=http://mirrorlist.centos.org/?release=5.5&arch=$basearch&repo=os #baseurl=http://mirror.centos.org/centos/$releasever/os/$basearch/ gpgcheck=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5 priority=1 </snip> Brian.

4 3

xferlog not rotating.
by Patricia A Moss 22 May '11

22 May '11

I am not sure how to correctly troubleshoot this. I just noticed that my /var/log/xferlog file is huge. There are no files in /etc/logrotate.d/ for xferlog. This is what leads me to believe that it isnot rotating. Or perhaps I do not have it set to rotate. I am not sure. I am running CentOS release 5 (Final). Can someone tell me what I, apparently, do not have configured correctly. Thank you. PATI MOSS System Engineer Sr. Professional CSC

9 15

Passing password to script for rpmsign of list of .rpm files
by Ljubomir Ljubojevic 21 May '11

21 May '11

I am trying to automatize signing of unsigned .rpm files. My repo has at least 50 x 3 packages. But I would have to type numerous passwords for each file. I can not see hot to pass pass phrase to script. rpmsign --resign {--pass=??} <filename from list> ???? Can someone advise me how to do that? Ljubomir

5 8

Re: [CentOS] Passing password to script for rpmsign of list of .rpm files
by Ljubomir Ljubojevic 21 May '11

21 May '11

Marian Marinov wrote: > > You should also check this: > > http://blogs.23.nu/till/2008/12/rpm-addsign-with-gpg-agent/ > I am not really trilled by entering blank passwords. Anyhow, I have developed nice script for automatic signing of (--addsign = only unsigned, --resign = all) rpm's. Features: 1) It supports subdirectories of unlimited? depth. 2) Password is only asked once. 3) Timestamps are preserved. 4) Script outputs check of rpm's together with active GPG Key ID and time of signing. Useful for final check and logging. I hope this script will find good use for rpm packagers. I named the script "rpm-autosign". NOTICE: I forgot to filter only files so I had to change code. Improved is: Code: #!/bin/bash # Author Ljubomir Ljubojevic <office at plnet dot rs> for i in $(find . -type f | grep .rpm); do touch -r "$i" "$i.zzz" done #rpmsign --resign `find . | grep .rpm | grep -v .zzz` rpmsign --addsign `find . -type f | grep .rpm | grep -v .zzz` for i in $(find . -type f | grep .rpm | grep -v .zzz); do touch -r "$i.zzz" "$i" done for i in $(find . -type f | grep .zzz); do rm -f "$i" done #rpmsign --checksig `find . | grep .rpm` rpm -qp `find . -type f | grep .rpm` --qf='%-{NAME} %{BUILDHOST} %{PACKAGER} %{SIGGPG:pgpsig} \n' Notice that last line is broken in two by mail client. Ljubomir

4 8

OpenVAS Vulnerability
by Kaushal Shriyan 21 May '11

21 May '11

Hi, Please advice me about the below reported vulnerability. High OpenSSH X Connections Session Hijacking Vulnerability Risk: High Application: ssh Port: 22 Protocol: tcp ScriptID: 100584 Overview: OpenSSH is prone to a vulnerability that allows attackers to hijack forwarded X connections. Successfully exploiting this issue may allow an attacker run arbitrary shell commands with the privileges of the user running the affected application. This issue affects OpenSSH 4.3p2; other versions may also be affected. NOTE: This issue affects the portable version of OpenSSH and may not affect OpenSSH running on OpenBSD. Solution: Updates are available. Please see the references for more information. References: http://www.securityfocus.com/bid/28444 http://support.apple.com/kb/HT3137 http://www.openbsd.org/errata41.html http://www.openbsd.org/errata42.html http://www.openbsd.org/errata43.html http://www.openssh.com/txt/release-5.0 http://www.openssh.com http://sourceforge.net/project/shownotes.php?release_id=590180 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463011 http://www.securityfocus.com/archive/1/492447 http://aix.software.ibm.com/aix/efixes/security/ssh_advisory.asc http://support.avaya.com/elmodocs2/security/ASA-2008-205.htm http://www.globus.org/mail_archive/security-announce/2008/04/msg00000.html http://support.attachmate.com/techdocs/2374.html#Security_Updates_in_7.0_SP1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-237444-1 CVE : CVE-2008-1483 BID : 28444 Medium OpenSSH CBC Mode Information Disclosure Vulnerability Risk: Medium Application: ssh Port: 22 Protocol: tcp ScriptID: 100153 Overview: The host is installed with OpenSSH and is prone to information disclosure vulnerability. Vulnerability Insight: The flaw is caused due to the improper handling of errors within an SSH session encrypted with a block cipher algorithm in the Cipher-Block Chaining 'CBC' mode. Impact: Successful exploits will allow attackers to obtain four bytes of plaintext from an encrypted session. Impact Level: Application Affected Software/OS: Versions prior to OpenSSH 5.2 are vulnerable. Various versions of SSH Tectia are also affected. Fix: Upgrade to higher version http://www.openssh.com/portable.html References: http://www.securityfocus.com/bid/32319 CVE : CVE-2008-5161 BID : 32319 Regards, Kaushal

3 2

Re: [CentOS] CentOS Digest, Vol 76, Issue 20
by Ian Murray 21 May '11

21 May '11

> Subject: Re: [CentOS] xferlog not rotating. > To: centos(a)centos.org > Message-ID: <20110520144308.GA23319(a)bludgeon.org> > Content-Type: text/plain; charset=us-ascii > > On Fri, May 20, 2011 at 10:44:49AM -0400, Steven Crothers wrote: > > It's a bit funny that logrotate is difficult to fix for you... > > considering you have "System Engineer Sr. Professional" in your > > signature... > > This gave me a chuckle. :) Ah, the advantage of being a consultant or > working at a tiny company where you can assign your own titles! > > Ray > And maybe the OP is a guru in embedded systems and gets lumbered with looking at the email server when it goes awry. At least Patricia has the good sense not to top post. (A hanging offence on this list.) As for the second comment, CSC may be many things, but "tiny" they are not. Why the need for belittling comments, I do not know. p.s. yes, the thread is broken. Am using digest.

2 1

Creating a Centos endorsed 3rd part repo
by Keith Roberts 20 May '11

20 May '11

Hi all. I'd like to put together a small repo for Centos packages that I build on my machine, and make them available for other Centos users. Are there any guidlines for creating an officially endorsed Centos 3rd party repo please? Kind Regards, Keith Roberts ----------------------------------------------------------------- Websites: http://www.karsites.net http://www.php-debuggers.net http://www.raised-from-the-dead.org.uk All email addresses are challenge-response protected with TMDA [http://tmda.net] -----------------------------------------------------------------

7 13

OT: SQuirreL and NGS SQuirrel
by m.roth＠5-cent.us 20 May '11

20 May '11

The IRT gave a class yesterday, and mentioned about auditors coming in with squirrel to security test d/bs. I was doing some research on this, and found (and I'm being correct with my capitalization) the subject line here, the F/OSS project off sourceforge SQuirrel, which is a cross-platform java client for d/bs, and a company, NGS, which has NGS SQuirreL for Oracle, DB/2, etc. What I can't find is any suggestion whether the latter is built on the former, if there's any relation at all, and if not, whether there's a copyright issue here.... Anyone know about them? mark

1 0

← Newer
1
2
3
4
5
6
7
8
...
16
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss May 2011