Discuss February 2019

discuss@lists.centos.org

97 participants
79 discussions

Support for Argon2 for password hashing
by Robert Moskowitz 13 Feb '19

13 Feb '19

Is there any information on adding support for Argon2? I have been working on my new mailserver and this came up in moving from the default MD5 hash to more 'modern' hashes like SHA256 and SHA512. Then I was pointed to the work behind Argon2, and I see that it is moving through the IRTF cfrg workgroup: draft-irtf-cfrg-argon2-04.txt It is a 'purpose built' hash for passwords, with recommendations that new implementations use it. Of course can't use it if crypt does not support it.... thanks

3 3

freeIPA from CR repo - conflicts
by lejeczek 13 Feb '19

13 Feb '19

hi guys do you see the same by any chance? .... --> Processing Dependency: ipa-server-common = 4.6.4-10.el7.centos.2 for package: python2-ipaserver-4.6.4-10.el7.centos.2.noarch --> Processing Dependency: ipa-common = 4.6.4-10.el7.centos.2 for package: python2-ipaserver-4.6.4-10.el7.centos.2.noarch --> Finished Dependency Resolution Error: Package: python2-ipaserver-4.6.4-10.el7.centos.2.noarch (updates) Requires: ipa-server-common = 4.6.4-10.el7.centos.2 Installed: ipa-server-common-4.6.4-10.el7.centos.noarch (@cr) ipa-server-common = 4.6.4-10.el7.centos Error: Package: ipa-server-4.6.4-10.el7.centos.x86_64 (@cr) Requires: python2-ipaserver = 4.6.4-10.el7.centos Removing: python2-ipaserver-4.6.4-10.el7.centos.noarch (@cr) python2-ipaserver = 4.6.4-10.el7.centos Updated By: python2-ipaserver-4.6.4-10.el7.centos.2.noarch (updates) python2-ipaserver = 4.6.4-10.el7.centos.2 Error: Package: python2-ipaclient-4.6.4-10.el7.centos.2.noarch (updates) Requires: ipa-common = 4.6.4-10.el7.centos.2 Installed: ipa-common-4.6.4-10.el7.centos.noarch (@cr) ipa-common = 4.6.4-10.el7.centos Error: Package: python2-ipaclient-4.6.4-10.el7.centos.2.noarch (updates) Requires: ipa-client-common = 4.6.4-10.el7.centos.2 Installed: ipa-client-common-4.6.4-10.el7.centos.noarch (@cr) ipa-client-common = 4.6.4-10.el7.centos Error: Package: python2-ipalib-4.6.4-10.el7.centos.2.noarch (updates) Requires: ipa-common = 4.6.4-10.el7.centos.2 Installed: ipa-common-4.6.4-10.el7.centos.noarch (@cr) ipa-common = 4.6.4-10.el7.centos Error: Package: ipa-client-4.6.4-10.el7.centos.x86_64 (@cr) Requires: python2-ipaclient = 4.6.4-10.el7.centos Removing: python2-ipaclient-4.6.4-10.el7.centos.noarch (@cr) python2-ipaclient = 4.6.4-10.el7.centos Updated By: python2-ipaclient-4.6.4-10.el7.centos.2.noarch (updates) python2-ipaclient = 4.6.4-10.el7.centos.2 Error: Package: python2-ipaserver-4.6.4-10.el7.centos.2.noarch (updates) Requires: ipa-common = 4.6.4-10.el7.centos.2 Installed: ipa-common-4.6.4-10.el7.centos.noarch (@cr) ipa-common = 4.6.4-10.el7.centos You could try using --skip-broken to work around the problem You could try running: rpm -Va --nofiles --nodigest

1 0

Cups Ink Levels
by Mark LaPierre 13 Feb '19

13 Feb '19

Hey all, In this week's Open Source Highlights I read: "Check ink level: If you have an Epson, Canon, HP, or Sony printer, you can see its ink level with a simple application. Look for the "ink" package in your distribution repositories." I checked my package manager but I didn't find any "ink" package. Does such a package exist for Centos? Is so, what it the package called? -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ ****

2 1

persistent generic device for tape changer
by Helmut Drodofsky 12 Feb '19

12 Feb '19

Hello, mtx and therefor amanda use generic device /dev/sg<x> for tape changer. These devices change on reboot. How to make them persistent? /dev/sch0 and /dev/sch1 seem to be persistent. /dev/tape/by-id/ shows links from WWID to generic device An UDEV rule could help? I have not found any example. -- Viele Grüße Helmut Drodofsky Internet XS Service GmbH Heßbrühlstraße 15 70565 Stuttgart Geschäftsführung Helmut Drodofsky HRB 21091 Stuttgart USt.ID: DE190582774 Fon: 0711 781941 0 <tel:+497117819410> Fax: 0711 781941 79 Mail: info(a)internet-xs.de www.internet-xs.de

3 5

bare-metal backup before update--options?
by Fred Smith 12 Feb '19

12 Feb '19

Hi all! I'm a "nervous nellie", I have not yet updated my 7.5 desktop to 7.6 because (1) it has an Nvidia card, and (2) I've heard of problems upgrading on top of software RAID (using RAID1 with 2 drives). I need to upgrade it to stay secure, and I want to do a bare-metal backup first (so I can put it all back as it now is, in case it explodes in my face), so I'm trying to figure out the safest way to do that. Here are the choices as I see them, I'd appreciate comments/thoughts: 1. boot from live DVD and manually reassemble the RAID array (how would I do that?) 2. degrade the array (with appropriate commands) so that it is running on just one drive, then boot a live DVD and use dd to back up that drive. 3. Other choices you can suggest? then after successfully getting a bare-metal backup, reboot it with the full RAID array and run the update. Thanks in advance! Fred -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- "And he will be called Wonderful Counselor, Mighty God, Everlasting Father, Prince of Peace. Of the increase of his government there will be no end. He will reign on David's throne and over his kingdom, establishing and upholding it with justice and righteousness from that time on and forever." ------------------------------- Isaiah 9:7 (niv) ------------------------------

3 4

time --verbose not working
by Robert Moskowitz 11 Feb '19

11 Feb '19

I can't seem to get the verbose mode of time working. I am trying to compare the compute cost of sha256-crypt to sha512-crypt: time doveadm pw -s sha256-crypt -p secret real 0m0.128s user 0m0.081s sys 0m0.040s time doveadm pw -s sha512-crypt -p secret real 0m0.162s user 0m0.105s sys 0m0.047s But all attempts to add --verbose fail: time --verbose doveadm pw -s sha512-crypt -p secret -bash: --verbose: command not found Googling gives different recommendations, none work for me.

3 4

Forums down?
by J Martin Rushton 11 Feb '19

11 Feb '19

All day I've been getting "Sorry but you cannot use search at this time. The server has high load. Please try again later." from https://www.centos.org/forums/search.php?search_id=unreadposts Is there a problem? -- J Martin Rushton MBCS

2 2

CentOS-announce Digest, Vol 168, Issue 3
by centos-announce-request＠centos.org 10 Feb '19

10 Feb '19

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2019:0229 Important CentOS 7 ghostscript Security Update (Johnny Hughes) 2. CESA-2019:0231 Important CentOS 7 spice Security Update (Johnny Hughes) 3. CESA-2019:0270 Important CentOS 7 thunderbird Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Sat, 9 Feb 2019 14:46:58 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2019:0229 Important CentOS 7 ghostscript Security Update Message-ID: <20190209144658.GA24698(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2019:0229 Important Upstream details at : https://access.redhat.com/errata/RHSA-2019:0229 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: a14798c9c960bb3c11ccb5977fc375b18f76f7b71980481ce6236d105184774a ghostscript-9.07-31.el7_6.9.i686.rpm 3362e81af80b52c0b1c994894366639cf47140c92c1ca66068b835321c86bd7b ghostscript-9.07-31.el7_6.9.x86_64.rpm fde0ef7fbc8d62436c35eb4be841d91a2b72b8736bda431e53b5ff53a0e051e8 ghostscript-cups-9.07-31.el7_6.9.x86_64.rpm aba79f9966ec6e298c87c2e0c11984ec5f6ab5541e960b1c5d183330f915a45e ghostscript-devel-9.07-31.el7_6.9.i686.rpm c910264022ef30db7ce8a197aa99a934c163ef22a47f379463462992436624a8 ghostscript-devel-9.07-31.el7_6.9.x86_64.rpm ece502d88db4a6450f4915d8e1fbb7685371fdaab5d3ad99b55ab3b81354de49 ghostscript-doc-9.07-31.el7_6.9.noarch.rpm 94520fdc4af704dd62edd1243395155125023bda580100c12392da91fd5a23ae ghostscript-gtk-9.07-31.el7_6.9.x86_64.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Sat, 9 Feb 2019 14:47:11 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2019:0231 Important CentOS 7 spice Security Update Message-ID: <20190209144711.GA24762(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2019:0231 Important Upstream details at : https://access.redhat.com/errata/RHSA-2019:0231 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: c6979682c6dc1a8170f1ee412fb7c0e48b5172bb6bb646d33ac5cb8d04e7e277 spice-server-0.14.0-6.el7_6.1.x86_64.rpm 302138f4831d8fc56db83fe48712328d7dc8fb9440bfd0014df4ec84dfd7ed23 spice-server-devel-0.14.0-6.el7_6.1.x86_64.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Sat, 9 Feb 2019 14:47:43 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2019:0270 Important CentOS 7 thunderbird Security Update Message-ID: <20190209144743.GA24839(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2019:0270 Important Upstream details at : https://access.redhat.com/errata/RHSA-2019:0270 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: c456b3359a02d7a2f7168682a28e03fa0a34907073fdfe07ee0a620d5a506cc5 thunderbird-60.5.0-1.el7.centos.x86_64.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 168, Issue 3 ***********************************************

1 0

Latest kernel crashes X and gnome
by Rob Kampen 10 Feb '19

10 Feb '19

Hi, Anyone else having problems with kernel 3.10.0-957.5.1.el7.x86_64? After my yum update today a reboot hung. A quick look at the Xorg.0.log shows two of my graphics cards appear to be working okay but the third one (I have two nvidia cards with a monitor each and then use the inbuilt intel one for the third monitor) gives: <cut> [ 14.246] (II) Loading sub module "fb" [ 14.246] (II) LoadModule: "fb" [ 14.247] (II) Loading /usr/lib64/xorg/modules/libfb.so [ 14.247] (II) Module fb: vendor="X.Org Foundation" [ 14.247] compiled for 1.20.1, module version = 1.0.0 [ 14.247] ABI class: X.Org ANSI C Emulation, version 0.4 [ 14.247] (II) UnloadModule: "vesa" [ 14.247] (II) Unloading vesa [ 14.247] (EE) modeset(G0): drmSetMaster failed: Invalid argument [ 14.247] (EE) Fatal server error: [ 14.247] (EE) AddScreen/ScreenInit failed for gpu driver 0 -1 [ 14.247] (EE) [ 14.247] (EE) Please consult the The X.Org Foundation support at http://wiki.x.org for help. [ 14.247] (EE) Please also check the log file at "/var/log/Xorg.0.log" for additional information. [ 14.247] (EE) [ 14.257] (EE) Server terminated with error (1). Closing log file. </end> So a reboot to kernel 3.10.0-957.1.3.el7.x86_64 and all is well. I note that the update also updated : Updated xorg-x11-drv-ati-18.0.1-1.el7.x86_64 @base Update 18.1.0-1.el7_6.x86_64 @updates Updated xorg-x11-server-Xorg-1.20.1-5.1.el7.x86_64 @updates Update 1.20.1-5.2.el7_6.x86_64 @updates Updated xorg-x11-server-common-1.20.1-5.1.el7.x86_64 @updates Update 1.20.1-5.2.el7_6.x86_64 @updates Before I start trying to solve this by myself, just wanted to see if anyone else has had issues. TIA Rob

1 1

firefox-60.5.0-2.el7.centos.x86_64 and Netflix
by Bernard Lheureux 09 Feb '19

09 Feb '19

Hi all, Since the last upgrade to firefox-60.5.0-2.el7.centos.x86_64 on my CentOS 7, it is no longer possible to watch Netflix with my Firefox, it always says that "Firefox is installing components needed to play the audio or video on this page. Please try again later." But nothing happens and Netflix is no longer readable with Firefox... I tried downgrading to firefox-60.4.0-1.el7.centos.x86_64 and al is now correct with Netflix... Anyone had experienced the same behavior ? -- (°- Bernard Lheureux //\ Linux System Administrator v_/_ MailTo:bernard@lheureux.be

4 4

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss February 2019