Discuss

discuss@lists.centos.org

34753 discussions

restricting access to an NIS netgroup
by Mike VanHorn 10 Nov '11

10 Nov '11

I am using CentOS 5.7. I have an /etc/security/access.conf file which has the following: + : root : LOCAL + : @mynetgroup : ALL - : ALL : ALL I thought this is supposed to restrict access to the system to only root and the accounts in the mynetgroup netgroup; however, anyone NIS account is still able to login. It appears that the access.conf is being ignored completely, so I'm thinking there's something I'm missing. How can I restrict access to a system based on NIS netgroups? Thanks! --- Mike VanHorn Senior Computer Systems Administrator College of Engineering and Computer Science Wright State University 265 Russ Engineering Center 937-775-5157 michael.vanhorn(a)wright.edu http://www.engineering.wright.edu/~mvanhorn/

6 8

Re: [CentOS] coordinated NIS and LDAP servers
by Boris Epstein 10 Nov '11

10 Nov '11

On Sat, Nov 5, 2011 at 4:23 AM, Jonathan Nilsson <jnilsson(a)uci.edu> wrote: > > You're welcome! I have used FreeIPA in the past with great success (though not specifically as an NIS data source). So if you do pursue FreeIPA, I highly recommend joining their separate mailing list freeipa-users(a)redhat.com > https://www.redhat.com/mailman/listinfo/freeipa-users > They have a very active development community that will be able to help you get up and running. > To get you started, I recommend that you try installing it on a Fedora server, rather than CentOS (people have reported being able to build and install on CentOS 5, but yum install is easier on Fedora). > Good luck! > -- > jonathan Jonathan, Did you get this for CentOS. I've got CentOS 5.6. Would you know if there is a repository for that that contains FreeIPA? Boris.

4 3

coordinated NIS and LDAP servers
by Boris Epstein 09 Nov '11

09 Nov '11

Hello listmates, We are currently running NIS for authentication but would like to migrate to LDAP. Thing is, though, that some of the machines that authenticate via NIS are so old I'd rather not even touch them. Hence the question - is there a good way to have an NIS server for user authentication that is a mirror image of an LDAP server, with a proviso that an update introduced there is replicated in the LDAP server's databases? Thanks. Boris.

4 4

Re: [CentOS] Postfix mail server procedure
by Les Bell 09 Nov '11

09 Nov '11

Alain Péan <alain.pean(a)lpp.polytechnique.fr> wrote: >> These two links, even if I read them rapidly, seem more accurate : http://wiki.centos.org/HowTos/postfix http://wiki.centos.org/HowTos/Amavisd << A few years ago, I followed the Postfix/amavisd/spamassassin/ClamAV HOWTO on the Centos Wiki and had two inbound mail gateways set up in next to no time with no pain*. http://wiki.centos.org/HowTos#head-0facb50d5796bee0bd394636c32ffa9a997a6ab5 and especiallly http://wiki.centos.org/HowTos/Amavisd Best, --- Les Bell [http://www.lesbell.com.au] Tel: +61 2 9451 1144 * Oh, all right - there was some SELinux pain, as always, but a few minutes with audit2allow got the policy tweaked.

1 0

Fwd: centos Wireless - Broadcom BCM4313
by Johan Vermeulen 09 Nov '11

09 Nov '11

Dear All, I'm trying to configure wireless card on a Dell Vostro 1540. I had a look at this site : http://wiki.centos.org/HowTos/Laptops/Wireless/Broadcom?action=show wireless card :# /sbin/lspci | grep Broadcom 12:00.0 Network controller: Broadcom Corporation BCM4313 802.11b/g/n Wireless LAN Controller (rev 01) I decided to follow the ELrepo instructions suggested on the site : http://elrepo.org/tiki/wl-kmod because it would give me a clear and present rpm that I can use on different machines and that will survive kernel updates. This all goes down without error messages. After installing, there is a new entry in /etc/udev/rules.d/70-persistent-net.rules : # PCI device 0x14e4:0x4727 (wl) SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="94:39:e5:dc:3a:cf", ATTR{type}=="1", KERNEL=="eth*", NAME="eth1" and there is now a blacklist-Broadcom.conf in /etc/modprobe.d/: blacklist b43 blacklist b43legacy blacklist bcm43xx blacklist ssb So I think the driver works and the blacklist - issue that is reported on different sites is ok. I then made an entry in /etc/sysconfig/network-scripts: vi ifcfg-eth1 DEVICE="eth1" #BOOTPROTO="dhcp" HWADDR="94:39:e5:dc:3a:cf" NM_CONTROLLED="yes" ONBOOT="yes" TYPE=Wireless *The problem is* I'm not seeing any wireless networks. Eth1 seems to try to get an adress via dhcp and then exits. And it is listed in the gui as wired network... [root@wduerloo ~]# dmesg | tail -n15 lib80211: common routines for IEEE802.11 drivers lib80211_crypt: registered algorithm 'NULL' wl: module license 'unspecified' taints kernel. Disabling lock debugging due to kernel taint wl 0000:12:00.0: PCI INT A -> GSI 17 (level, low) -> IRQ 17 wl 0000:12:00.0: setting latency timer to 64 lib80211_crypt: registered algorithm 'TKIP' eth1: Broadcom BCM4727 802.11 Hybrid Wireless Controller 5.100.82.112 eth1: no IPv6 routers present eth1: no IPv6 routers present eth1: no IPv6 routers present eth1: no IPv6 routers present eth1: no IPv6 routers present on restarting network manager this is in /var/log/messages : Nov 8 07:45:54 wduerloo dhclient[11719]: DHCPDISCOVER on eth1 to 255.255.255.255 port 67 interval 6 (xid=0x3c613d0e) Nov 8 07:46:00 wduerloo dhclient[11719]: DHCPDISCOVER on eth1 to 255.255.255.255 port 67 interval 12 (xid=0x3c613d0e) Nov 8 07:46:12 wduerloo dhclient[11719]: DHCPDISCOVER on eth1 to 255.255.255.255 port 67 interval 14 (xid=0x3c613d0e) Nov 8 07:46:26 wduerloo dhclient[11719]: DHCPDISCOVER on eth1 to 255.255.255.255 port 67 interval 12 (xid=0x3c613d0e) Nov 8 07:46:33 wduerloo NetworkManager[11711]:<warn> (eth1): DHCPv4 request timed out. Nov 8 07:46:33 wduerloo NetworkManager[11711]:<info> (eth1): canceled DHCP transaction, DHCP client pid 11719 Nov 8 07:46:33 wduerloo NetworkManager[11711]:<info> Activation (eth1) Stage 4 of 5 (IP4 Configure Timeout) scheduled... Nov 8 07:46:33 wduerloo NetworkManager[11711]:<info> Activation (eth1) Stage 4 of 5 (IP4 Configure Timeout) started... Nov 8 07:46:33 wduerloo NetworkManager[11711]:<info> Activation (eth1) Stage 5 of 5 (IP Configure Commit) scheduled... Nov 8 07:46:33 wduerloo NetworkManager[11711]:<info> Activation (eth1) Stage 4 of 5 (IP4 Configure Timeout) complete. Nov 8 07:46:33 wduerloo NetworkManager[11711]:<info> Activation (eth1) Stage 5 of 5 (IP Configure Commit) started... Nov 8 07:46:33 wduerloo NetworkManager[11711]:<info> Activation (eth1) Stage 5 of 5 (IP Configure Commit) failed (no IP configuration found) Nov 8 07:46:33 wduerloo NetworkManager[11711]:<info> (eth1): device state change: 7 -> 9 (reason 5) Nov 8 07:46:33 wduerloo NetworkManager[11711]:<info> Marking connection 'Auto eth1' invalid. Nov 8 07:46:33 wduerloo NetworkManager[11711]:<warn> Activation (eth1) failed. Nov 8 07:46:33 wduerloo NetworkManager[11711]:<info> Activation (eth1) Stage 5 of 5 (IP Configure Commit) complete. Nov 8 07:46:33 wduerloo NetworkManager[11711]:<info> (eth1): device state change: 9 -> 3 (reason 0) Nov 8 07:46:33 wduerloo NetworkManager[11711]:<info> (eth1): deactivating device (reason: 0). I think I need to configure something else. I know a lot of you guys don't like NetworkManager but because it's a laptop I would like to use it. I hope I gave enough info, any help would be greatly appreciated. greetings, James. Centos is here to stay, I'm sure. P.S. I don't have an English spell checker on this machine, sorry for language mistakes :=) Johan Vermeulen IT-medewerker Caw De Kempen johan.vermeulen(a)cawdekempen.be 0479.82.01.41 Opensource Software is the future.

4 7

openvpn + bridge utils in CentOS 6
by 唐建伟 09 Nov '11

09 Nov '11

Hi all, I just intalled openvpn + bridge in CentOS 6, but i get strange problems: the remote PCs cannot get the local PCs' MACs and also, the local PCs cannot get the remote PCs' MACs but when i run "brctl showmacs br0" it will list all the MACs and also " brctl show" will show that all the correct adapters are in br0 SELinux disabled any ideas? -- Tang Jianwei System Administrator

3 13

Linux hosts file /etc/hosts
by Jonathan Vomacka 08 Nov '11

08 Nov '11

Good afternoon Gentlemen, I have a question regarding /etc/hosts for CentOS 6 x64. I already have a hostname set on my server, however there are 10 additional IP aliases assigned to the box, one which I plan to use as a mail server. The mail server will be serving mail for a completely different domain (different then the default hostname of my box). My question is this: If I take one of my additional IP addresses and bind it to postfix for mail, do I also have to specify the remote IP and mail server hostname in /etc/hosts? For example my hosts looks something like this 127.0.0.1 localhost Can I add? 66.x.x.x mail.foo.bar Is this even necessary?

5 7

redhat vs centos
by Bob Hoffman 08 Nov '11

08 Nov '11

I have been reading the threads on here with great ernest about redhat making a move to throw off centos compilations. I read some stories about microsoft wanting to work closer with centos http://www.theregister.co.uk/2011/05/17/microsoft_and_centos/ I have to update to centos 6 due to some needs of clients who need newer mysql and php (and installing them on centos5 was too hard for me). I am thinking of going ubuntu server but at the same time I have this feeling centos team will pull through, make a new method to streamline this, and redhat will back down and stop being REDa$$-hats. Redhat thinks us 'freebie' people will move to them to get the quicker updates and releases. I look at the pricing and I say they must be out of their minds. The server comes at 1,999 a year for 2 sockets and more than 4 guests...which is what I would need. The virtualization package, which may or may not be needed is thousands more. All for one server. that ain't gonna happen. Personally I am thinking of staying away from all red hat clones due to redhat's actions for my own security. The only thing on the horizon I see is ubuntu server as best supported and up to date. I am teetering tonight. I have downloaded it and am thinking of wiping my new centos6 install and trying it out. How do you all feel about this turn of events and what is your gut feeling on where this is going? And how about them hard drive prices?!!

32 88

Re: [CentOS] CentOS 6 yum Groupinstall vs Manual install
by Jonathan Vomacka 08 Nov '11

08 Nov '11

Makes sense, I appreciate the help Richard. On 11/8/2011 12:55 PM, lists-centos wrote: > > > ------------ Original Message ------------ >> Date: Tuesday, November 08, 2011 12:28:42 PM -0500 >> From: Jonathan Vomacka<juvix88(a)gmail.com> >> To: centos(a)centos.org >> >> Gentlemen, >> >> I have a question regarding yum groupinstall vs just using yum >> install. I have been reading tutorials online (for example how to >> run a Centos LAMP). Most of the tutorials have examples to >> install httpd, mysql, etc using yum install httpd.... >> >> The reason for this e-mail is that I noticed in yum grouplist that >> there is an option to install Web Server, MySQL database server, >> etc. >> >> Question: Is there any advantage to using yum groupinstall for a >> webserver as opposed to using yum install httpd? I am just curious >> why most online docs dont mention groupinstall and only reference >> installing each app manually one by one. >> >> Any information would be appreciated > > I generally don't use "groupinstall" on things that I'm familiar > with because I want more control. Without more digging than it's > worth I don't know exactly what packages are included. Most times a > "groupinstall" will miss things I need while including things I know > I don't want. > > I suppose that if you are unfamiliar with a whole class of software > and want to do a brute-force install, then "groupinstall" serves a > purpose. [then again, actually spending the time to learn the > various pieces, and why you would want them, will serve one better > in the long run.] > > > - Richard > >

1 0

CentOS 6 yum Groupinstall vs Manual install
by Jonathan Vomacka 08 Nov '11

08 Nov '11

Gentlemen, I have a question regarding yum groupinstall vs just using yum install. I have been reading tutorials online (for example how to run a Centos LAMP). Most of the tutorials have examples to install httpd, mysql, etc using yum install httpd.... The reason for this e-mail is that I noticed in yum grouplist that there is an option to install Web Server, MySQL database server, etc. Question: Is there any advantage to using yum groupinstall for a webserver as opposed to using yum install httpd? I am just curious why most online docs dont mention groupinstall and only reference installing each app manually one by one. Any information would be appreciated

2 2

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss