Discuss

discuss@lists.centos.org

34758 discussions

problems with OpenVPN 2.1.4 on Centos 5.5
by Boris Epstein 20 Jan '11

20 Jan '11

Hello listmates, I've got this Centos 5.5 box which I am trying to configure as an OpenVPN server. Now 2.1.4 seems to have added pkcs11 support and that stops me from creating the CA and other necessary files: [root@gw5fl 2.0]# . ./vars bash: /usr/share/doc/openvpn-2.1.4/easy-rsa/2.0/whichopensslcnf: Permission denied NOTE: If you run ./clean-all, I will be doing a rm -rf on /usr/share/doc/openvpn-2.1.4/easy-rsa/2.0/keys [root@gw5fl 2.0]# ./clean-all [root@gw5fl 2.0]# ./build-ca Please edit the vars script to reflect your configuration, then source it with "source ./vars". Next, to start with a fresh PKI configuration and to delete any previous certificates and keys, run "./clean-all". Finally, you can run this tool (pkitool) to build certificates/keys. [root@gw5fl 2.0]# Now, the tool I seem to need (from the "vars" file): export PKCS11TOOL="pkcs11-tool" does not seem to be there and I am not sure how to install it as I couldn't find it. So, any perspective on what this mess is all about and how to get out of it would be much appreciated. Thanks. Boris.

5 12

xfs_quota - space differs between du -h vs report -h
by aurfalien＠gmail.com 20 Jan '11

20 Jan '11

Hi all, I'm having fun getting to know xfs_quotas. I do notice some irregularities. When running xfs_quota -s -c /dev/sdc1 And then running report -h, for user barney, his used space is 4.9G while his soft/hard limit is 5G. Since I set 5, all is well, but when I run du -hs on barnies dir, it shows only 4G used. I can adjust for the diff so that my quotas can be set to 6G when I really mean 5G, that is if its a linear diff vs a algo diff. However I was hoping you all could shed some light on this. - aurf

1 0

Re: [CentOS] How to disable screen locking system-wide?
by Mike McCarty 20 Jan '11

20 Jan '11

Sorin Srbu wrote: >> -----Original Message----- >> From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On >> Behalf Of Tom H >> Sent: Thursday, January 20, 2011 1:03 PM >> To: CentOS mailing list >> Subject: Re: [CentOS] How to disable screen locking system-wide? >> >> >> In our environment, leaving your desk without locking your >> computer/screen is punished with a disciplinary hearing and three such >> hearings result in dismissal. Having one person using another's >> account is considered a security risk. > > Sounds kinda' harsh. May I ask what industry this is in? Sounds pretty normal to me. I've worked for a variety of companies over a period of over twenty years, and similar policies were in effect in each one. At one company where I worked, possesion of another person's password was immediate dismissal grounds, though not automatic. Any company which doesn't exercise "due diligence" to protect its trade secrets will lose when trying to recover from an industrial espionage incident. I know from personal experience, since I was at a company which went after another for theft of IP, and nearly wound up having to testify in court. A friend of mine did have to. All employees were required to attend a seminar presented by the full time legal staff, explaining what IP is, and how it is protected. One thing we were told very forcefully was that we were to have good passwords (and what that meant), and that we were never to divulge our passwords to anyone else. IANAL, but I suggest that anyone who has any intellectual property (patents, trade secrets, trade marks) get a lawyer to explain what they are, what the differences are, and how to protect them. They need different kinds of protection, and trade secrets, especially, are hard to protect without good, secret passwords. Mike -- p="p=%c%s%c;main(){printf(p,34,p,34);}";main(){printf(p,34,p,34);} Oppose globalization and One World Governments like the UN. This message made from 100% recycled bits. You have found the bank of Larn. I speak only for myself, and I am unanimous in that!

1 1

dmesg and messages differences
by Keith Roberts 20 Jan '11

20 Jan '11

Hi everyone. I just wondered what's the difference between /var/log/dmesg, and /var/log/messages? Why do we have 2 log files that are similar? Kind Regards, Keith Roberts ----------------------------------------------------------------- Websites: http://www.karsites.net http://www.php-debuggers.net http://www.raised-from-the-dead.org.uk All email addresses are challenge-response protected with TMDA [http://tmda.net] -----------------------------------------------------------------

6 6

Re: [CentOS] How to disable screen locking system-wide?
by Tom H 20 Jan '11

20 Jan '11

On Thu, Jan 20, 2011 at 7:55 AM, Sorin Srbu <sorin.srbu(a)orgfarm.uu.se> wrote: >>-----Original Message----- >>From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On >>Behalf Of Tom H >>Sent: Thursday, January 20, 2011 1:03 PM >>To: CentOS mailing list >>Subject: Re: [CentOS] How to disable screen locking system-wide? >> >> >>In our environment, leaving your desk without locking your >>computer/screen is punished with a disciplinary hearing and three such >>hearings result in dismissal. Having one person using another's >>account is considered a security risk. > > Sounds kinda' harsh. May I ask what industry this is in? Finance. >>I don't know the exact path but you can use gconftool-2 (or >>gconf-editor as a GUI) to set the screensaver not to lock (and mimick >>doing so by changing the screensaver preferences in >>"System-Preferences-Screensaver"). > > That's a per-user setting you describe, right? Yes but someone's posted a global gconftool-2 recipe.

2 2

Re: [CentOS] How to disable screen locking system-wide?
by m.roth＠5-cent.us 20 Jan '11

20 Jan '11

Rudi Ahlers wrote: > On Thu, Jan 20, 2011 at 3:47 PM, Jerry Franz <jfranz(a)freerun.com> wrote: >> On 01/20/2011 02:55 AM, Rudi Ahlers wrote: >>> <snip>> >> If you don't have full administrative access to the machine >> *independent* of people's day-to-day login accounts you are doing it >> wrong and need to hire a competent IT admin - because your current one >> doesn't know what heck they are doing. > > Benjamin, I'm sorry to say this, but you're wrong! > > Sometimes you need to access a PC of a staff member who is busy with > something right now. And I'm not talking about administrative access. > Sure, I can access any PC via root login, and frankly for that matter > I can also reset any user's password via root login. > > The message I'm trying to bring across is that users in the company > shouldn't have passwords which admin doesn't know, or can't access. > The PC's and data, well at least in our company, is the property of > the company. Making it more difficult for an engineer to gain access > to a user's PC automatically arises suspicion I very strongly disagree with this, and agree with Benjamin. I do *not* want anyone else knowing my password, and whenever I have to be there when someone's entering a new one, I perform the Traditional Sysadmin Admiration of the Ceiling while they do it. I can't see any reason to have to know someone's password. If I need to be them, then going in as root, and su - <username> will do it. mark

1 0

Re: [CentOS] How to disable screen locking system-wide?
by Rudi Ahlers 20 Jan '11

20 Jan '11

On Thu, Jan 20, 2011 at 10:34 AM, Sorin Srbu <sorin.srbu(a)orgfarm.uu.se> wrote: >>-----Original Message----- >>From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On >>Behalf Of Joshua Baker-LePain >>Sent: Wednesday, January 19, 2011 8:47 PM >>To: CentOS mailing list >>Subject: Re: [CentOS] How to disable screen locking system-wide? >> >>> By default, CentOS v5 requires a user's password when the system wakes >>> up from the screensaver. This can be disabled by each user, but how >>> can I disable this system-wide? Many of my users forget to do this, >>> which results in workstations being locked up. >> >>Ctrl-Alt-Bksp will fix that right up. I'm not a big fan of users leaving >>workstations unsecured when they walk away. > > > Wouldn't that kill any programs, or whatever, the user has running? > Yup, and it totally defeats the purpose of what the OP actually wanted todo. Imagine your account being busy with your year-end books, and has to run to the toilet (she is a bit sick) now you come and press CTRL+ALT+Bksp and loose everything she's done. And, if she had a lot of invoices and statements already processed then she may need to redo it. Now, how do you explain to your boss that you just cost him another day with an expensive accountant because you're too ignorant to properly address the issue? -- Kind Regards Rudi Ahlers SoftDux Website: http://www.SoftDux.com Technical Blog: http://Blog.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

3 2

CentOS 5.4 LTTng patch
by Lissade, Joel 20 Jan '11

20 Jan '11

Hi all, Has anyone successfully applied the LTTng patch to CentOS 5.4 kernel? According to the LTTng compatibility table patch28-2.6.18-lttng-0.6.41 is the one that should be used but a number of the patch files did not apply cleanly. It generated a number of rejects. If anyone has done this successfully, let me know your procedure. Thanks, Joel

1 0

Re: [CentOS] How to disable screen locking system-wide?
by John Hodrien 20 Jan '11

20 Jan '11

On Thu, 20 Jan 2011, Sorin Srbu wrote: >> -----Original Message----- >> From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On >> Behalf Of Tom H >> Sent: Thursday, January 20, 2011 1:03 PM >> To: CentOS mailing list >> Subject: Re: [CentOS] How to disable screen locking system-wide? >> >> >> In our environment, leaving your desk without locking your >> computer/screen is punished with a disciplinary hearing and three such >> hearings result in dismissal. Having one person using another's >> account is considered a security risk. > > Sounds kinda' harsh. May I ask what industry this is in? > > >> I don't know the exact path but you can use gconftool-2 (or >> gconf-editor as a GUI) to set the screensaver not to lock (and mimick >> doing so by changing the screensaver preferences in >> "System-Preferences-Screensaver"). > > That's a per-user setting you describe, right? No, you can make that work for all users with gconf-editor by editing the right file. My previously suggested solution just does that in one go without a gui: gconftool-2 --direct \ --config-source xml:readwrite:/etc/gconf/gconf.xml.mandatory --type bool \ --set /apps/gnome-screensaver/lock_enabled false That makes it mandatory, so it can't be overridden, and will affect all users. Only fixes it for gnome, I don't know what the equivalent fix is for KDE. You need to take other steps to enforce it in the other direction, as killall gnome-screensaver would defeat it. jh

2 1

measuring performance of glibc
by Mag Gam 20 Jan '11

20 Jan '11

I was wondering, how does one measure the performance of glibc? Are there any tools? I am planning to compile my own version of glibc for educational purposes and I was simply curious. TIA

3 2

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss