Discuss February 2015

discuss@lists.centos.org

153 participants
158 discussions

sssd - ldap host attribute ignored
by Ulrich Hiller 24 Feb '15

24 Feb '15

Dear all, i have a problem with sssd in conjunction with ldap on a centos 7 x86_64 box. ldap works fine. I can login there as an usual user registred in ldap. I want now restrict the access with ldap's host attribute. This is beeing ignored. Still every ldap user can login, no matter what the host attribute says. I googled around and only found that sssd.conf need two lines: access_provider = ldap ldap_access_order = host So i do not understand why it is not working. I append to this e-mail: /etc/sssd/sssd.conf /etc/ldap.conf /etc/pamd.d/ssh Can somebody give me hints what could be wrong? With kind reagards and thanks a lot in advance, Ulrich /etc/sssd/sssd.conf: -------------------- [sssd] config_file_version = 2 services = nss, pam, autofs domains = default # SSSD will not start if you do not configure any domains. # Add new domain configurations as [domain/<NAME>] sections, and # then add the list of domains (in the order you want them to be # queried) to the "domains" attribute below and uncomment it. # domains = LDAP [nss] filter_groups = root filter_users = root [pam] [domain/default] ldap_uri = ldap://myldapserver.mydomain ldap_search_base = o=XXXX ldap_schema = rfc2307bis id_provider = ldap ldap_user_uuid = entryuuid ldap_group_uuid = entryuuid ldap_id_use_start_tls = True enumerate = False cache_credentials = False ldap_tls_cacertdir = /etc/openldap/cacerts/ chpass_provider = ldap auth_provider = ldap ldap_tls_reqcert = never ldap_user_search_base = ou=YYYY,o=XXXX ldap_group_search_base = ou=YYYY,o=XXXX access_provider = ldap ldap_access_filter = memberOf=ou=YYYY,o=XXXX ldap_access_order = host /etc/ldap.conf: ---------------------- # # LDAP Defaults # # See ldap.conf(5) for details # This file should be world readable but not world writable. #BASE dc=example,dc=com #URI ldap://ldap.example.com ldap://ldap-master.example.com:666 #SIZELIMIT 12 #TIMELIMIT 15 #DEREF never TLS_CACERTDIR /etc/openldap/cacerts # Turning this off breaks GSSAPI used with krb5 when rdns = false SASL_NOCANON on URI ldap://myldapserver.mydomain BASE ou=YYYY,o=XXXX /etc/pam.d/sshd: ------------------------------ #%PAM-1.0 auth required pam_sepermit.so auth substack password-auth auth include postlogin account required pam_nologin.so account include password-auth password include password-auth # pam_selinux.so close should be the first session rule session required pam_selinux.so close session required pam_loginuid.so # pam_selinux.so open should only be followed by sessions to be executed in the user context session required pam_selinux.so open env_params session optional pam_keyinit.so force revoke session include password-auth session include postlogin session required pam_mkhomedir.so skel=/etc/skel/ umask=0077

2 2

Master - Slave Split DNS
by aditya hilman 24 Feb '15

24 Feb '15

Hi folks, I've already configured split DNS for internal-view and external-view. Also already configured the master - slave dns. But i've problem with external-view zone transfer. Based on the logs, the master notify to slave using the public ip, which is not accessible by master to transfering the zone over public ip. Is it possible to transfer zone over local ip for external-view ? Thanks. -- Regards, Adit http://a <http://simplyaddo.web.id>dityahilman.com http://id.linkedin.com/in/adityahilman ym : science2rule

6 9

Making systemd start a service after sshd?
by Bryan Wright 23 Feb '15

23 Feb '15

Hi folks, For complicated reasons, I'd like to have a service (lightdm) start after sshd starts. (This is on CentOS 7.) I've tried adding "sshd.service" to the lists of "Active=" and "Require=" items in /etc/systemd/system/lightdm.service (which started as a copy of /usr/lib/systemd/system/lightdm.service), but these changes don't seem to have any effect. Sshd still starts long after lightdm starts. Any suggestions? For what it's worth, here's the entire lightdm.service file: [Unit] Description=Light Display Manager Documentation=man:lightdm(1) Conflicts=getty(a)tty1.service After=systemd-user-sessions.service getty(a)tty1.service plymouth-quit.service livesys-late.service time-sync.target sshd.service Require=time-sync.target sshd.service [Service] ExecStart=/usr/sbin/lightdm Restart=always IgnoreSIGPIPE=no BusName=org.freedesktop.DisplayManager [Install] Alias=display-manager.service Thanks for any help. Bryan

3 4

Help with Driver Eth0
by Kevin Mauricio Benavides Castro 23 Feb '15

23 Feb '15

Dear Friends of the Community Here by I request some help, now Install Centos 5.0 in DELL 3020 one machine installation took correctly, but after installation I find that the network card that brings integrated computer does not recognize the eth0. 02:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd. RTL8111/8168B PCI Express Gigabit Ethernet controller (rev 02) Subsystem: Giga-byte Technology Unknown device e000 Flags: bus master, fast devsel, latency 0, IRQ 50 I/O ports at b000 [size=256] Memory at e1510000 (64-bit, prefetchable) [size=4K] Memory at e1500000 (64-bit, prefetchable) [size=64K] [virtual] Expansion ROM at e1520000 [disabled] [size=64K] Capabilities: [40] Power Management version 3 Capabilities: [50] Message Signalled Interrupts: 64bit+ Queue=0/1 Enable+ Capabilities: [70] Express Endpoint IRQ 1 Capabilities: [b0] MSI-X: Enable- Mask- TabSize=2 Capabilities: [d0] Vital Product Data Capabilities: [100] Advanced Error Reporting Capabilities: [140] Virtual Channel Capabilities: [160] Device Serial Number xx-xx-xx-xx-xx-xx-xx-xx I researched well into the problem in various forums, but the driver you need the equipment is Realtek RTL8111B / RTL8168B NIC. Someone may orient me well what I have to do to install the driver for usb Offline so ?? if you can clear regards *Kevin Mauricio Benavides Castro* *Integrador de Systemas* *Cel: +505 84478854 * *Skype: kevin.olpc.support*

4 3

lua-debuginfo for CentOS6?
by Les Mikesell 23 Feb '15

23 Feb '15

Is there some reason http://debuginfo.centos.org/6/x86_64/ is missing a lua-debuginfo package? The /5/ and /7/ sections have it. -- Les Mikesell lesmikesell(a)gmail.com

2 1

pidgin on 6.6
by m.roth＠5-cent.us 23 Feb '15

23 Feb '15

Anyone out there using pidgin and jabber? Recently, there was a redo of the organization's jabber server, (probably a Windows thing), and suddenly, instead of my usernamte@address, I get username@address/<looks like a socket id>. For example, mine, after my username@jabberserver/f862437769a069c68119dc3068e2acbd5f0eaba6, so a line and a half of garbage. Any ideas? Googling isn't finding me anything... oh, and the tech on the other end, who's using Windows, isn't seeing that, he just sees username@<jabberserver> mark

2 1

Re: [CentOS] Help with routing question.
by James B. Byrne 23 Feb '15

23 Feb '15

On Thu, February 19, 2015 12:33, Les Mikesell wrote: > On Thu, Feb 19, 2015 at 9:48 AM, James B. Byrne > <byrnejb(a)harte-lyne.ca> wrote: >> >>> I added these directives to the route-eth0:192 file: >>> >>> ADDRESS0=192.168.6.9 >>> NETMASK0=255.255.255.0 >>> GATEWAY0=192.168.6.1 >>> >> >> Which should have been: >> >> ADDRESS0=192.168.6.0 >> >> NETMASK0=255.255.255.0 >> GATEWAY0=192.168.6.1 >> > > But it still doesn't matter. Your netmask in the ifcfg- file already > covers that range and you don't need another route/GATEWAY for it. > You don't need the route- file at all. Thank you. I was grasping at straws in this case to solve a strange routing problem that turned out to be a misconfigured gateway firewall. It was a very odd error because it only affected one of our off-site net-blocks. So tracking it down cause a little more hair-pulling than usual. Fixed for now. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

scp -rp behavior
by Mark LaPierre 22 Feb '15

22 Feb '15

Hey all, I'm trying to copy configuration files from my old CentOS 6.6 32 bit machine to my new CentOS 6.6 64 bit machine. On my 32 bit machine: [mlapier@mushroom ~]$ ifconfig eth0 Link encap:Ethernet HWaddr 00:19:DB:E5:4E:9F inet addr:192.168.15.105 When I issue this command on my new 64 bit machine, 192.168.15.101: scp -pr mlapier(a)192.168.15.105: /home/mlapier/.thunderbird /home/mlapier/.thunderbird It copies all directories and files in 192.168.15.105: /home/mlapier/ to 192.168.15.101: /home/mlapier. I don't want all that, I just want the .thunderbird folder and all it's contents. The user and group account numbers match on the two machines for this user so that's not the issue. When I RTFM this is what I thought it said to do. I'm I misreading the FM or is something weird going on here? -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ ****

2 1

CentOS-announce Digest, Vol 120, Issue 7
by centos-announce-request＠centos.org 21 Feb '15

21 Feb '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2015:C002 CentOS-7 centos-release BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 20 Feb 2015 16:09:22 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:C002 CentOS-7 centos-release BugFix Update Message-ID: <20150220160922.GA1711(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and BugFix Advisory 2015:C002 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 89a6d526f11d2544adedaa554e010b772b644395689c5e246ef54f8205352741 centos-release-7-0.1406.el7.centos.2.6.x86_64.rpm Source: f2686a700e7c21c9117d2f418a1260c2cc80e4180c62ecf10544b3b1c85c9eac centos-release-7-0.1406.el7.centos.2.6.src.rpm NOTE: This update adds CentOS-CR.repo to /etc/yum.repos.d/ . It is disabled by default. If you want to enable the CR repo for future updates, then edit /etc/yum.repos.d/CentOS-CR.repo and set the [cr] repo from enabled=0 to enabled=1. For more information on the CentOS CR repository, see: http://wiki.centos.org/AdditionalResources/Repositories/CR -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos at irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 120, Issue 7 ***********************************************

1 0

how to stop yum when networkmanager has broken resolv.conf?
by Les Mikesell 21 Feb '15

21 Feb '15

So, I'm getting an error where the network service and NetworkManager apparently don't agree on how to bring up vlans on bonded nics. Things come up if you 'ifup ..' manually. I thought I'd check if there were any updates, forgetting to fix what NetworkManger had done to /etc/resolv.conf and: http://centos.arvixe.com/7.0.1406/os/x86_64/repodata/repomd.xml: [Errno 12] Timeout on http://centos.arvixe.com/7.0.1406/os/x86_64/repodata/repomd.xml: (28, 'Resolving timed out after 30381 milliseconds') Trying other mirror. ^C^C^C ^C^C^C Current download cancelled, interrupt (ctrl-c) again within two seconds to exit. Yeah - I did hit it about 6 times there. What do you have to do to make it actually stop in some reasonable amount of time? -- Les Mikesell lesmikesell(a)gmail.com

3 5

← Newer
1
2
3
4
5
6
7
8
...
16
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss February 2015