Discuss December 2014

discuss@lists.centos.org

164 participants
168 discussions

Cisco Anyconnect Client on Centos 7
by Samson 05 Dec '14

05 Dec '14

Hi all, I have Centos 7 which is doing great. I tried to install Cisco Anyconnect VPN client but could not launch it. It appear on my Application tab but not launching. Kindly assist me the a working rpm on Centos 7. Regards.

3 2

Re: [CentOS] What is the "not supported" hardware?
by Jeremy Hoel 05 Dec '14

05 Dec '14

On Thu, Dec 4, 2014 at 12:32 PM, <m.roth(a)5-cent.us> wrote: > Jeremy Hoel wrote: > > We noticed this when installing onto some new Dell R320's.. it might have > > something to do with hardware that the device had that the older kernel > > might not have known about. Nothing seemed wrong and everything seemed > to > > install ok (we would also update the kernel in the install process, so > > that > > probably hid any further problems), but moving to a 6.6 install made the > > silly error message go away. > > > Please don't top post. > > Dumb question: *how* were you installing? Did you have a kickstart of your > very own? If so... could it have wanted eth0, and the installer called it > em1? > > mark > > Kickstart.. and we had already changed the interface to the new name. It's the same kickstart between the two versions, with just the nic name being different.

2 1

Firefox fails to authenticate .mil sites with New DoD CAC
by Cal Webster 04 Dec '14

04 Dec '14

Can anyone help with getting the new DoD CACs (Smart Card) to work in CentOS 6.6? I don't use it for console logins, only for email and .mil web sites. I recently had to get a new DoD CAC (Smart Card) when one of the buildings I work in upgraded their security system. My old CAC was working fine prior to this for signing and encrypting email and for authenticating to various DoD (.mil) sites from the Internet using the coolkey libraries. After getting my new CAC I am no longer able to authenticate to any DoD sites. I can still sign and encrypt email in Thunderbird via the coolkey libraries but .mil sites either simply display blank pages or raise various errors in firefox. I am prompted for my PIN, which is successfully accepted but I'm not even prompted for which cert to use, like I used to be. I've tried installing and loading the latest "cackey" libraries (see below) but when I insert my CAC and attempt to login to the module in the Mozilla device manager it completely freezes firefox. Recovery requires killing firefox. If I remove the latest and install the next previous cackey library it works the same as coolkey - doesn't freeze up firefox but never connects to .mil sites. I tried building the cackey RPMs from the source RPMs too but the result is the same. Latest 64-bit cackey: cackey-0.6.8-3522.x86_64.rpm Next previous cackey: cackey-0.6.5-2444.x86_64.rpm I'm pretty sure it has something to do with the newer PIV CAC internal layout. I went through a similar transition when the GEMAL 144 cards came out but the cackey libraries did at least work and coolkey eventually caught up. One thing is for sure... the cackey RPM from forge.mil is not a drop-in replacement for coolkey. The cackey RPM only installs the libraries themselves, nothing else. It doesn't even register them in the nss db I had to do that manually with modutil. I must be missing something... Without direct access to forge.mil it's difficult to troubleshoot cackey. For some silly reason they still require CAC authentication to get the CAC software and drivers and access the forums, etc. More relevant information below... I'd be grateful for any ideas or advice on this. I desperately need to retrieve vulnerability reports, patches, and other DoD resources. Thanks! Cal Webster Smart Card Reader: SCM Microsystems Inc. SCR3310 USB Smart Card Reader (21120628202509) 00 00-0 Old CAC: GEMAL TO TOPDL GX4 144 New CAC: G&D FIPS 201 SCE 3.2 [root@inet3 ~]# cat /etc/redhat-release CentOS release 6.6 (Final) [root@inet3 ~]# uname -a Linux inet3 2.6.32-504.1.3.el6.x86_64 #1 SMP Tue Nov 11 17:57:25 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux [root@inet3 ~]# Installed Packages coolkey.i686 1.1.0-32.el6 @base coolkey.x86_64 1.1.0-32.el6 @base firefox.i686 31.2.0-3.el6.centos @updates firefox.x86_64 31.2.0-3.el6.centos @updates thunderbird.x86_64 31.2.0-3.el6.centos @updates pcsc-lite.x86_64 1.5.2-14.el6 @base pcsc-lite-devel.x86_64 1.5.2-14.el6 @base pcsc-lite-libs.x86_64 1.5.2-14.el6 @base nss.i686 3.16.1-14.el6 @base nss.x86_64 3.16.1-14.el6 @base nss-devel.x86_64 3.16.1-14.el6 @base nss-softokn.i686 3.14.3-18.el6_6 @updates nss-softokn.x86_64 3.14.3-18.el6_6 @updates nss-softokn-devel.x86_64 3.14.3-18.el6_6 @updates nss-softokn-freebl.i686 3.14.3-18.el6_6 @updates nss-softokn-freebl.x86_64 3.14.3-18.el6_6 @updates nss-softokn-freebl-devel.x86_64 3.14.3-18.el6_6 @updates nss-sysinit.x86_64 3.16.1-14.el6 @base nss-tools.x86_64 3.16.1-14.el6 @base nss-util.i686 3.16.1-3.el6 @base nss-util.x86_64 3.16.1-3.el6 @base nss-util-devel.x86_64 3.16.1-3.el6 @base [root@inet3 ~]# modutil -list -dbdir /etc/pki/nssdb Listing of PKCS #11 Modules ----------------------------------------------------------- 1. NSS Internal PKCS #11 Module slots: 2 slots attached status: loaded slot: NSS Internal Cryptographic Services token: NSS Generic Crypto Services slot: NSS User Private Key and Certificate Services token: NSS Certificate DB 2. CoolKey PKCS #11 Module library name: libcoolkeypk11.so slots: 1 slot attached status: loaded slot: SCM Microsystems Inc. SCR3310 USB Smart Card Reader (21120628202 token: WEBSTER.CALVIN.DALE.9427154028 3. cackey library name: libcackey.so slots: 2 slots attached status: loaded slot: CACKey Slot token: WEBSTER.CALVIN.DALE.9427154028 slot: CACKey Slot token: DoD Certificates ----------------------------------------------------------- [root@inet3 ~]#

3 12

What is the "not supported" hardware?
by Robert Nichols 04 Dec '14

04 Dec '14

When the installer complains that it has detected unsupported hardware, is there any way to tell just what it didn't like? Following the URL in the message just ends up at the RHEL Hardware Certification page, which isn't much help. The installer seemed quite willing to continue with the installation, and poking around from the shell VT I didn't find anything that didn't seem to be working. I also didn't see anything relevant in any of the message VTs. As it turns out this isn't a big deal for me, since this was the CentOS 6.5 installer and there was no such warning from the 6.6 installer. I'm just wondering how I might go about tracking that down, -- Bob Nichols "NOSPAM" is really part of my email address. Do NOT delete it.

2 1

Re: [CentOS] Firefox fails to authenticate .mil sites with New DoD CAC
by Cal Webster 04 Dec '14

04 Dec '14

On Thu, 2014-12-04 at 11:30 -0500, m.roth(a)5-cent.us wrote: > Cal Webster wrote: > > On Thu, 2014-12-04 at 08:08 -0500, mark wrote: > >> On 12/03/14 17:34, Cal Webster wrote: > >> > Can anyone help with getting the new DoD CACs (Smart Card) to work in > >> > CentOS 6.6? I don't use it for console logins, only for email and .mil > >> > web sites. > >> > > >> > I recently had to get a new DoD CAC (Smart Card) when one of the > >> > buildings I work in upgraded their security system. My old CAC was > >> > working fine prior to this for signing and encrypting email and for > >> > authenticating to various DoD (.mil) sites from the Internet using the > >> > coolkey libraries. > >> > >> Dunno 'bout the new CaC keys, but they "upgraded" our PIV cards to 128? > >> 256? I forget, earlier this year, and I *think* I remember my manager > pushing > >> an enhancement on upstream, and since then we've had no trouble with > >> coolkey accessing them. The two *should* be identical. > > > > Was source for this upstream enhancement released to the community? Not > > Yup. We have a few RHEL licenses, so he could push for the enhancement. It > was released, and we were using it with CentOS 6.5. It must have been in the coolkey-1.1.0-32 update. Build Date: Wed 15 Oct 2014 11:11:10 AM EDT Install Date: Wed 29 Oct 2014 05:04:04 AM EDT > > sure what you meant by "The two" - you mean coolkey and cackey? > > Nope. We don't use cackey. > > > >> <snip> > >> > I've tried installing and loading the latest "cackey" libraries (see > >> > >> I know nothing about cackey libraries, but it's possible that, and pcscd > >> are arguing. > >> > >> I don't see pcscd installed. > > > > pcsc-lite-1.5.2-14.el6.x86_64 (listed on original post) contains pcscd. > > Sure that's possible but I see nothing to support that in the system > > logs > > Watch out that opensc that *doesn't* come with pcscd isn't loaded. Oh, > also, new card - do you have a new CA chain? Is that installed? > <snip> > > mark, who has a new card a few weeks ago, and had to deal with the > CA change from Verizon to Entrust.... Yes, I learned to avoid opensc years ago when we first setup the CACs. A missing CA cert turned out to be the problem. I checked after Jason Pyeron was kind enough to mention "MAIL CA-32" listed on my CAC cert lookup. Sure enough, it was missing in the Firefox CA store but present in the Thunderbird store. This explains why I could sign and encrypt email but not access .mil web sites. When I used the dod_configuration mozilla add-on to update the certs I assumed it would get them all. Apparently not. In fact, I think it deleted this cert because I recorded everything on my previous CAC before getting the new one. It was also using CA-32. I ended up just exporting the cert from Thunderbird and importing it into Firefox. ./Cal

1 0

Re: [CentOS] Firefox fails to authenticate .mil sites with New DoD CAC
by Cal Webster 04 Dec '14

04 Dec '14

On Thu, 2014-12-04 at 08:08 -0500, mark wrote: > On 12/03/14 17:34, Cal Webster wrote: > > Can anyone help with getting the new DoD CACs (Smart Card) to work in > > CentOS 6.6? I don't use it for console logins, only for email and .mil > > web sites. > > > > I recently had to get a new DoD CAC (Smart Card) when one of the > > buildings I work in upgraded their security system. My old CAC was > > working fine prior to this for signing and encrypting email and for > > authenticating to various DoD (.mil) sites from the Internet using the > > coolkey libraries. > > Dunno 'bout the new CaC keys, but they "upgraded" our PIV cards to 128? 256? I > forget, earlier this year, and I *think* I remember my manager pushing an > enhancement on upstream, and since then we've had no trouble with coolkey > accessing them. The two *should* be identical. Was source for this upstream enhancement released to the community? Not sure what you meant by "The two" - you mean coolkey and cackey? > <snip> > > I've tried installing and loading the latest "cackey" libraries (see > > I know nothing about cackey libraries, but it's possible that, and pcscd are > arguing. > > I don't see pcscd installed. pcsc-lite-1.5.2-14.el6.x86_64 (listed on original post) contains pcscd. Sure that's possible but I see nothing to support that in the system logs. I just got a cackey developer contact on forge.mil today from a Civil Svc engineer who does have access so I'll send him my data too. Thanks Mark. > mark > <snip> > > More relevant information below... > > > > Smart Card Reader: > > SCM Microsystems Inc. SCR3310 USB Smart Card Reader (21120628202509) 00 > > 00-0 > > > > Old CAC: GEMAL TO TOPDL GX4 144 > > New CAC: G&D FIPS 201 SCE 3.2 > > > > > > [root@inet3 ~]# cat /etc/redhat-release > > CentOS release 6.6 (Final) > > [root@inet3 ~]# uname -a > > Linux inet3 2.6.32-504.1.3.el6.x86_64 #1 SMP Tue Nov 11 17:57:25 UTC > > 2014 x86_64 x86_64 x86_64 GNU/Linux > > [root@inet3 ~]# > > > > Installed Packages > > > > coolkey.i686 1.1.0-32.el6 @base > > coolkey.x86_64 1.1.0-32.el6 @base > > firefox.i686 31.2.0-3.el6.centos @updates > > firefox.x86_64 31.2.0-3.el6.centos @updates > > thunderbird.x86_64 31.2.0-3.el6.centos @updates > > pcsc-lite.x86_64 1.5.2-14.el6 @base > > pcsc-lite-devel.x86_64 1.5.2-14.el6 @base > > pcsc-lite-libs.x86_64 1.5.2-14.el6 @base > > nss.i686 3.16.1-14.el6 @base > > nss.x86_64 3.16.1-14.el6 @base > > nss-devel.x86_64 3.16.1-14.el6 @base > > nss-softokn.i686 3.14.3-18.el6_6 @updates > > nss-softokn.x86_64 3.14.3-18.el6_6 @updates > > nss-softokn-devel.x86_64 3.14.3-18.el6_6 @updates > > nss-softokn-freebl.i686 3.14.3-18.el6_6 @updates > > nss-softokn-freebl.x86_64 3.14.3-18.el6_6 @updates > > nss-softokn-freebl-devel.x86_64 3.14.3-18.el6_6 @updates > > nss-sysinit.x86_64 3.16.1-14.el6 @base > > nss-tools.x86_64 3.16.1-14.el6 @base > > nss-util.i686 3.16.1-3.el6 @base > > nss-util.x86_64 3.16.1-3.el6 @base > > nss-util-devel.x86_64 3.16.1-3.el6 @base > > > > > > [root@inet3 ~]# modutil -list -dbdir /etc/pki/nssdb > > > > Listing of PKCS #11 Modules > > ----------------------------------------------------------- > > 1. NSS Internal PKCS #11 Module > > slots: 2 slots attached > > status: loaded > > > > slot: NSS Internal Cryptographic Services > > token: NSS Generic Crypto Services > > > > slot: NSS User Private Key and Certificate Services > > token: NSS Certificate DB > > > > 2. CoolKey PKCS #11 Module > > library name: libcoolkeypk11.so > > slots: 1 slot attached > > status: loaded > > > > slot: SCM Microsystems Inc. SCR3310 USB Smart Card Reader (21120628202 > > token: WEBSTER.CALVIN.DALE.9427154028 > > > > 3. cackey > > library name: libcackey.so > > slots: 2 slots attached > > status: loaded > > > > slot: CACKey Slot > > token: WEBSTER.CALVIN.DALE.9427154028 > > > > slot: CACKey Slot > > token: DoD Certificates >

1 0

wield messages on /var/log/messages after install BACKEXEC
by mcclnx mcc 04 Dec '14

04 Dec '14

we have Centos 5.X on DELL servers. Recently we upgrade to BACKEXEC later version of software and /var/log/messages have following messages: Dec 3 18:19:04 ORA1 modprobe: WARNING: Unmatched bracket in ÷ 0E[rŠ£½Øô/N Dec 3 19:14:45 ORA1 modprobe: WARNING: Unmatched bracket in •§ºÎãù(A[v’¯Íì Dec 3 19:14:45 ORA1 modprobe: WARNING: Unmatched bracket in ÈÚí,C[tŽ©Åâ Dec 3 19:14:45 ORA1 modprobe: WARNING: Unmatched bracket in `r…™®ÄÛó &A]z˜· Dec 3 19:29:45 ORA1 SYMBDSNAP_SDK[7808]: Reloc File successfully created. Dec 3 19:30:38 ORA1 SYMBDSNAP_SDK[7808]: Reloc File successfully created. ANy one know why? Thanks

1 0

ELRepo still active?
by Niki Kovacs 04 Dec '14

04 Dec '14

Hi, I'm currently installing CentOS 5.11 i386 on an old PC. Is the ELRepo third-party repository still active and maintained? Cheers, Niki Kovacs -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

2 2

CentOS 7 - not using latest installed kernel
by John Horne 04 Dec '14

04 Dec '14

Hello, I have just installed CentOS 7 onto two servers and applied all the current patches. There are currently two kernels installed: # rpm -q kernel kernel-3.10.0-123.el7.x86_64 kernel-3.10.0-123.9.3.el7.x86_64 However, if I reboot the servers they both start up on the older kernel: # uname -r 3.10.0-123.el7.x86_64 I would have expected them to restart using kernel 3.10.0-123.9.3. I know I can manually select the kernel to use at boot time (from the grub2 menu), but, as with CentOS 6, I would have expected the servers to reboot using the latest kernel automatically. Has anyone else noticed this? Any ideas as to why it might be happening? Thanks, John. -- John Horne Tel: +44 (0)1752 587287 Plymouth University, UK

3 3

SEtroubleshootd Crashing
by Gary Smithson 04 Dec '14

04 Dec '14

When running Node.js through Phusion Passenger on Centos 6.5 ( Linux 2.6.32-431.23.3.el6.x86_64 #1 SMP Thu Jul 31 17:20:51 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux), with SELinux enabled in permissive mode we receive a large number of entries in the audit.log and setroubleshootd randomly crashes with the following error, We have resolved the selinux alerts by following the troubleshooting steps recommend by running sealert,However we are concerned by setroubleshootd crashing and are concered that we may have masked the issue by fixing the entries in the audit.log. abrt_version: 2.0.8 cmdline: /usr/bin/python -Es /usr/sbin/setroubleshootd -f '' executable: /usr/sbin/setroubleshootd kernel: 2.6.32-431.23.3.el6.x86_64 last_occurrence: 1417101625 time: Thu 27 Nov 2014 03:20:25 PM UTC uid: 0 username: root sosreport.tar.xz: Binary file, 3642240 bytes backtrace: :analyze.py:426:lookup_signature:ProgramError: [Errno 1001] signature not found : :Traceback (most recent call last): : File "/usr/lib64/python2.6/site-packages/setroubleshoot/analyze.py", line 401, in auto_save_callback : self.save() : File "/usr/lib64/python2.6/site-packages/setroubleshoot/analyze.py", line 377, in save : self.prune() : File "/usr/lib64/python2.6/site-packages/setroubleshoot/analyze.py", line 340, in prune : self.delete_signature(sig, prune=True) : File "/usr/lib64/python2.6/site-packages/setroubleshoot/analyze.py", line 471, in delete_signature : siginfo = self.lookup_signature(sig) : File "/usr/lib64/python2.6/site-packages/setroubleshoot/analyze.py", line 426, in lookup_signature : raise ProgramError(ERR_NO_SIGNATURE_MATCH) :ProgramError: [Errno 1001] signature not found : :Local variables in innermost frame: :matches: [] :siginfo: None :self: <setroubleshoot.analyze.SETroubleshootDatabase object at 0x151d590> :sig: <setroubleshoot.signature.SEFaultSignature object at 0x645a050> We are running the following versions Passenger/htttpd/node passenger --version Phusion Passenger version 4.0.53 httpd -v Server version: Apache/2.2.15 (Unix) Server built: Jul 23 2014 14:17:29 node -v v0.10.32 This email is from the Press Association. For more information, see www.pressassociation.com. This email may contain confidential information. Only the addressee is permitted to read, copy, distribute or otherwise use this email or any attachments. If you have received it in error, please contact the sender immediately. Any opinion expressed in this email is personal to the sender and may not reflect the opinion of the Press Association. Any email reply to this address may be subject to interception or monitoring for operational reasons or for lawful business practices.

3 11

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss December 2014