Discuss March 2015

discuss@lists.centos.org

172 participants
170 discussions

LUKS encypted partition using --key-file can only be decrypted with --key-file
by Digimer 15 Sep '15

15 Sep '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, I created a LUKS encrypted partition via a udev-triggered script on 6.6 using --key-file /tmp/foo. This worked fine, and I can decrypt the LUKS partition via script and manually using --key-file with luksOpen. The odd problem is that I can't decrypt the partition using the prompt. If I manually create a file with the passphrase in it and then point to it with --key-file, it decrypts fine. I used 'cat -A /tmp/foo' to verify that there … [View More]

3 3

SAMBA as AD DC
by Sergio Belkin 11 Sep '15

11 Sep '15

Hi folks, Is able SAMBA on CentOS 7 to work as Active Directory Domain Controller? If it's not, what is the recommended way of doing? Compiling from sources? Install packages from SerNet? Thanks in advance! -- -- Sergio Belkin http://www.sergiobelkin.com LPIC-2 Certified - http://www.lpi.org

9 14

How to setup own i686 buildenv for CentOS7
by Robin Lee 07 Sep '15

07 Sep '15

Hi, all! How to setup own i686 mock for CentOS7? Or, is there any public i686 repo for CentOS7? I found i686 repo available in internal CentOS building environment, from a root.log from a mock build result[1]. [1] http://buildlogs.centos.org/c7-updates/glibc/20141218212615/2.17-55.el7_0.3… Cheers, -robin

3 5

Mail Merge data to a pdf file by overlaying the data on the image
by Gregory P. Ennis 07 Jun '15

07 Jun '15

Everyone, I am looking for a utility that I can use to do a mail merge of data to a pdf image file. The image file does not have any active fields, but will be just an image file. I would like to overlay names addresses etc. We currently do this with a pcl file by just overlaying the data with pcl print positions. However, in order to get the pcl file from an original pdf file we have to use gimp to convert the pdf to pcl file, and we always lose a little resolution. I was wondering if … [View More]

4 10

Cannot remount drive after lost iSCSI connection
by Kyle Thorne 06 May '15

06 May '15

Hi all, We've having an issue at the moment where an iSCSI connection was temporarily lost on a few VMs running CentOS 6 on ESXi. The problem is, now that the iSCSI connection has returned, we are not able to remount the drive. At first the drive is read-only, so I tried '*mount -o remount,rw*' which didn't work (still read-only), so then I tried a '*umount*' (which worked), but now I get the following error when trying to mount it again: root@server [~]# mount /backup/ mount: /dev/sdb1 … [View More]

4 4

Re: [CentOS] Fail2Ban Centos 7 is there a trick to making it work?
by James B. Byrne 05 Apr '15

05 Apr '15

On Mon, March 9, 2015 13:11, John Plemons wrote: > Been working on fail2ban, and trying to make it work with plain Jane > install of Centos 7 > > Machine is a HP running 2 Quad core Xeons, 16 gig or ram and 1 plus TB > of disk space. Very generic and vanilla. > > Current available epel repo version is fail2ban-0.9.1 > > Looking at the log file, fail2ban starts and stops fine, there isn't > output though showing any login attempts being restricted. > > 2015-03-… [View More]09 12:54:37,930 fail2ban.server [14805]: INFO > Stopping all jails > 2015-03-09 12:54:37,931 fail2ban.server [14805]: INFO > Exiting Fail2ban > 2015-03-09 12:54:38,338 fail2ban.server [16678]: INFO > Changed logging target to /var/log/fail2ban.log for Fail2ban v0.9.1 > 2015-03-09 12:54:38,341 fail2ban.database [16678]: INFO > Connected to fail2ban persistent database > '/var/lib/fail2ban/fail2ban.sqlite3' > > I copied jail.conf and added the edited jail.local to the directory > /etc/fail2ban/ > > This is about as far as I have gotten with searches on how to > configure > with Centos 7. > > Any help would be welcome. What am I missing? > > john > This is what I have for ssh in jail.conf [ssh-iptables] enabled = true filter = sshd action = iptables[name=SSH, port=ssh, protocol=tcp] sendmail-whois[name=SSH, dest=x(a)harte-lyne.ca, sender=x(a)harte-lyne.ca, sendername=Fail2Ban] logpath = /var/log/secure maxretry = 5 And this (among many others) is what we have in /etc/fail2ban/action.d cat /etc/fail2ban/action.d/iptables.conf # Fail2Ban configuration file # # Author: Cyril Jaquier # # [INCLUDES] before = iptables-blocktype.conf [Definition] # Option: actionstart # Notes.: command executed once at the start of Fail2Ban. # Values: CMD # actionstart = iptables -N fail2ban-<name> iptables -A fail2ban-<name> -j RETURN iptables -I <chain> -p <protocol> --dport <port> -j fail2ban-<name> # Option: actionstop # Notes.: command executed once at the end of Fail2Ban # Values: CMD # actionstop = iptables -D <chain> -p <protocol> --dport <port> -j fail2ban-<name> iptables -F fail2ban-<name> iptables -X fail2ban-<name> # Option: actioncheck # Notes.: command executed once before each actionban command # Values: CMD # actioncheck = iptables -n -L <chain> | grep -q 'fail2ban-<name>[ \t]' # Option: actionban # Notes.: command executed when banning an IP. Take care that the # command is executed with Fail2Ban user rights. # Tags: See jail.conf(5) man page # Values: CMD # actionban = iptables -I fail2ban-<name> 1 -s <ip> -j <blocktype> # Option: actionunban # Notes.: command executed when unbanning an IP. Take care that the # command is executed with Fail2Ban user rights. # Tags: See jail.conf(5) man page # Values: CMD # actionunban = iptables -D fail2ban-<name> -s <ip> -j <blocktype> [Init] # Default name of the chain # name = default # Option: port # Notes.: specifies port to monitor # Values: [ NUM | STRING ] Default: # port = ssh # Option: protocol # Notes.: internally used by config reader for interpolations. # Values: [ tcp | udp | icmp | all ] Default: tcp # protocol = tcp # Option: chain # Notes specifies the iptables chain to which the fail2ban rules should be # added # Values: STRING Default: INPUT chain = INPUT HTH -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3 [View Less]

3 3

Re: [CentOS] [CentOS-announce] Release for CentOS Linux 7 (1503 ) on x86_64
by Ryan Qian 04 Apr '15

04 Apr '15

As a CentOs newbie, I'm not sure, will we still have CentOS 7.1 which derive from RHEL 7.1? or this is the new naming conversion for CentOS 7. Thanks! -Ryan > On Apr 1, 2015, at 12:30 AM, Karanbir Singh <kbsingh(a)centos.org> wrote: > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > We would like to announce the general availability of CentOS Linux 7 > (1503) for 64 bit x86 compatible machines. > > This is the second major release for CentOS-7 … [View More]

26 93

emailing plain text to exchange/outlook
by Les Mikesell 03 Apr '15

03 Apr '15

I know this isn't CentOS-specific, but it is probably a common problem - does anyone have a solution? If you mail something that is plain text from linux a recipient using outlook, it will remove line breaks more or less randomly. There is a way to tell outook to put them back as you read each message, but most people just think I sent it wrong. Is there something you can do to make a plain text list show up correctly short of converting it to html with <br>'s? -- Les Mikesell lesmikesell(a)gmail.com

3 2

OpenSSL vulnerability fix
by Venkateswara Rao Dokku 02 Apr '15

02 Apr '15

Hi All, I wanted to fix the openssl vulnerabilities (CVE-2014-3569, CVE-2014-3570, CVE-2014-3571, CVE-2014-3572) in my CentOS 5.5 and found out that 0.9.8zd has the fixes I am looking for (from the https://www.openssl.org/news/vulnerabilities.html link). But, When I tried to find the openssl-0.9.8zd rpm package, I did not find it in http://mirror.centos.org/centos/5/updates/x86_64/RPMS/. The latest that I could find was 0.9.8e-31-el5. Can you please help me on how can I find the rpm I am … [View More]

3 4

How to decrypt rootpassword form kickstart file
by Jegadeesh Kumar 01 Apr '15

01 Apr '15

Hi Team, I have the kick start file where my root password is store like # Root password rootpw --iscrypted $1$1SItJOAg$UM9n7lRFK1/OCs./rgQtQ/ # System authorization information auth --useshadow --passalgo=sha512 Is there any way to decry pt the password and get it as plain text. I know single user mode works but my case it in remote site. Thanks, Jegadeesh

10 11

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss March 2015