Discuss

discuss@lists.centos.org

34758 discussions

Samba 3.0.28/3.0.32
by Spike Turner 08 Oct '08

08 Oct '08

I've looked at the CentOS docs-list as well as the Wiki as I was interested in Samba. On one CentOS box I've got 3.0.32 (the latest bug-fixed version from Samba.org) and on another I've got 3.0.28 (the latest from upstream). The docs look almost the same and the docs refer to security = share. However 3.0.32 comes with a blank smb.conf making it harder to get a secure server up and running. Is there a plan for a quick and dirty guide on the Wiki for setting up Samba with secure settings as well as TDB rather than deprecated settings? In tips and tricks there is http://wiki.centos.org/TipsAndTricks/WindowsShares Without writing a book as someone suggested, a few one-liners could be put together in the wiki. Spike

2 1

AW: Re: [CentOS] ssh error in /var/log/secure
by Marc Rebischke 08 Oct '08

08 Oct '08

>Akemi Yagi wrote: >> >> This has to do with ipv6. >Thanks! >Got it fixed. Hi, Maybe (?) it would be helpful for us all if You would tell us how the Problem was Fixed instead of telling us "Thanks, got it fixed" ;-) P.S. Sorry for the horrible Format of this Mail. But i'm using the lausy M$-Standard-Client on my Mobile-Phone... Regards Marc Rebischke

3 2

How to unsubscribe
by Joey Mendez 08 Oct '08

08 Oct '08

I appreciate all the help I received from this Mailing List. However I am receiving work email to my cell phone now and I am being overwhelmed with the mailing list emails. Can some one let me know how to unsubscribe from this mailing list. Thank you -- Jose Mendez Computer Resource Specialist HNRC 619-543-8090

7 6

Software Raid Expert Needed
by Iulian Badea 07 Oct '08

07 Oct '08

Hello all, I have 2 x 250GB sata disks (sda and sdb). # fdisk -l /dev/sda Disk /dev/sda: 250.0 GB, 250059350016 bytes 255 heads, 63 sectors/track, 30401 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Device Boot Start End Blocks Id System /dev/sda1 * 1 14939 119997486 fd Linux raid autodetect /dev/sda2 14940 29878 119997517+ fd Linux raid autodetect /dev/sda3 29879 30400 4192965 fd Linux raid autodetect # fdisk -l /dev/sdb Disk /dev/sdb: 250.0 GB, 250059350016 bytes 255 heads, 63 sectors/track, 30401 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Device Boot Start End Blocks Id System /dev/sdb1 * 1 522 4192933+ fd Linux raid autodetect # cat /proc/mdstat Personalities : [raid1] md2 : active raid1 sdb1[1] sda3[0] 4192832 blocks [2/2] [UU] md1 : active raid1 sda2[1] sda1[0] 119997376 blocks [2/2] [UU] What I want to do: - have on each disk 2 partitions (4gb for swap and the 200gb+ the rest for /) - raid 1 between them This is what I wanted in the beginning, but...I didn't paid attention... What can I do to rebuild it to my needs (without loosing data or reformatting)? Thanks

5 7

Discussion: automount problem in 5.2
by kapil singh 07 Oct '08

07 Oct '08

Hello all, Automount is not working well with centos 5.2, but the same is working nicely with centos 5 . -- Thanks and Regards, Kapil Singh Kushwah Linux System/Network Administrator Hotwax Media Inc. Indore,(M.P) INDIA

6 6

Cebit and Centos
by Didi 07 Oct '08

07 Oct '08

Hey I just read this http://www.linux-magazine.com/online/news/cebit_open_source_linux_magazine_… Maybe Centos want's to try to get a stand. Cheers Didi ---- www.ribalba.de Email / Jabber: ribalba(a)gmail.com Skype : ribalba

6 8

Customizing SELinux Policy
by Alain Reguera Delgado 07 Oct '08

07 Oct '08

Hi Guys, After some moths the server has been running in SELinux Permesive mode ... Some avc: denied messages has been recored ... I thought it was time to go to the next step and set SELinux Enforcing mode in the server ... it is a mail(postfix+cyrus+sasl), web, snmp with mrtg, squid sever with a local TLS configured for webmail access ... I took a look to the Deployment Guide about how to do it ... and tried to build modules with audit2allow from the /var/log/message The modules seem to work fine, because old avc denied messages desappeard ... but some messages like the following appear at /var/log/messages when I do a semodule -i modulename or semodule -r modulename : Oct 5 20:16:11 orion kernel: : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' Oct 5 20:16:11 orion kernel: audit(1223252171.572:8): policy loaded auid=4294967295 ses=4294967295 Oct 5 20:16:41 orion kernel: audit(1223252201.673:9): user pid=2172 uid=81 auid=4294967295 subj=system_u:system_r:system_dbus d_t:s0 msg='avc: received policyload notice (seqno=3) Oct 5 20:16:41 orion kernel: : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' Oct 5 20:16:41 orion kernel: audit(1223252201.676:10): policy loaded auid=4294967295 ses=4294967295 Oct 5 20:17:51 orion kernel: audit(1223252271.462:11): user pid=2172 uid=81 auid=4294967295 subj=system_u:system_r:system_dbu sd_t:s0 msg='avc: received policyload notice (seqno=4) Oct 5 20:17:51 orion kernel: : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' Oct 5 20:17:51 orion kernel: audit(1223252271.464:12): policy loaded auid=4294967295 ses=4294967295 Oct 5 20:19:06 orion kernel: audit(1223252346.208:13): user pid=2172 uid=81 auid=4294967295 subj=system_u:system_r:system_dbu sd_t:s0 msg='avc: received policyload notice (seqno=5) Oct 5 20:19:06 orion kernel: : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' Oct 5 20:19:06 orion kernel: audit(1223252346.211:14): policy loaded auid=4294967295 ses=4294967295 Oct 5 20:19:11 orion kernel: audit(1223252351.331:15): user pid=2172 uid=81 auid=4294967295 subj=system_u:system_r:system_dbu sd_t:s0 msg='avc: received policyload notice (seqno=6) Also, in the /var/log/httpd/ssl_error_log the following messages appear too: [Sun Oct 05 19:58:19 2008] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?) [Sun Oct 05 19:58:19 2008] [warn] RSA server certificate CommonName (CN) `orion.ciget.cienfuegos.cu' does NOT match server nam e!? Really rare to me because that name `orion.ciget.cienfuegos.cu' is the actual server hostname. When try to connect to the webmail through https:// can't connect to it, the browser reports connection failed after a waiting of a few seconds. http:// works as expected. This machine is fully updated in CentOS-5.2. Linux orion.ciget.cienfuegos.cu 2.6.18-92.1.13.el5 #1 SMP Wed Sep 24 19:33:52 EDT 2008 i686 i686 i386 GNU/Linux Could you suggest something ? ... Thank you very much guys, al.

1 1

CentOS-announce Digest, Vol 44, Issue 5
by centos-announce-request＠centos.org 07 Oct '08

07 Oct '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:0908 Moderate CentOS 4 s390(x) thunderbird - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Mon, 6 Oct 2008 18:44:07 +0300 From: Pasi Pirhonen <upi(a)centos.fi> Subject: [CentOS-announce] CESA-2008:0908 Moderate CentOS 4 s390(x) thunderbird - security update To: centos-announce(a)centos.org Message-ID: <20081006154407.GD5793(a)centos.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2008:0908 https://rhn.redhat.com/errata/RHSA-2008-0908.html The following updated files have been uploaded and are currently syncing to the mirrors: s390: updates/s390/RPMS/thunderbird-1.5.0.12-16.el4.centos.s390.rpm s390x: updates/s390x/RPMS/thunderbird-1.5.0.12-16.el4.centos.s390x.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

problem talking to server postgrey/socket: Permission denied
by Dirk H. Schulz 07 Oct '08

07 Oct '08

Hi folks, I have installed postgrey from the rpmforge repo, but it does not work well with postfix from CentOS 5.2: I always get the error: warning: connect to postgrey/socket: Permission denied problem talking to server postgrey/socket: Permission denied But the permissions on the socket seem okay (postfix could write to it): srw-rw-rw- 1 postgrey postgrey 0 4. Okt 14:48 socket I also tried "restorecon -R /var/spool/postfix/postgrey", but that did not change anything, either. Googling does not show anything recent and helpful. Any hint or help is appreciated. Dirk

3 4

vsftpd
by Mad Unix 07 Oct '08

07 Oct '08

Hi ALL I'm using vsftpd as FTP server, and I'd like to chroot my FTP users to their home dir. How can I do it? i.e. "jailing" them in their home dir... at the moment I have the following issues the user when they login to ftp server they go to the main directory /var/ftp/ /etc/passwd ... sdc:x:501:501::/var/ftp/sdc:/bin/bash ase:x:502:501::/var/ftp/ase:/bin/bash jsc:x:503:501::/var/ftp/jsc/:/bin/bash [root@linux10 ftp]# pwd /var/ftp [root@linux10 ftp]# ls -al total 28 drwx--x--x 6 root ftpusers 4096 Oct 6 13:46 . drwxr-xr-x 22 root root 4096 Oct 5 15:42 .. drwx------ 3 ase ftpusers 4096 Oct 6 20:30 ase drwx------ 3 jsc ftpusers 4096 Oct 6 17:27 jsc drwx------ 2 pons pons 4096 Oct 6 16:22 pub drwx------ 5 sdc ftpusers 4096 Oct 6 17:19 sdc chroot_list_enable=YES # (default follows) chroot_list_file=/etc/vsftpd/chroot_list chroot_local_user=YES # # You may activate the "-R" option to the builtin ls. This is disabled by # default to avoid remote users being able to cause excessive I/O on large # sites. However, some broken FTP clients such as "ncftp" and "mirror" assume # the presence of the "-R" option, so there is a strong case for enabling it. #ls_recurse_enable=YES # # When "listen" directive is enabled, vsftpd runs in standalone mode and # listens on IPv4 sockets. This directive cannot be used in conjunction # with the listen_ipv6 directive. listen=YES # # This directive enables listening on IPv6 sockets. To listen on IPv4 and IPv6 # sockets, you must run two copies of vsftpd whith two configuration files. # Make sure, that one of the listen options is commented !! #listen_ipv6=YES pam_service_name=vsftpd userlist_enable=YES tcp_wrappers=YES ###added for TLSand SSL permission ssl_enable=YES allow_anon_ssl=NO force_local_data_ssl=NO force_local_logins_ssl=YES ssl_tlsv1=YES ssl_sslv2=YES ssl_sslv3=YES rsa_cert_file=/etc/vsftpd/vsftpd.pem rsa_private_key_file=/etc/vsftpd/vsftpd.pem local_root=/var/ftp #userlist_file=/etc/vsftpd/ftpusers userlist_file=/etc/vsftpd/ftpusers #userlist_file=/etc/vsftpd/user_list pasv_enable=YES anon_max_rate=10485760 local_max_rate=0 max_clients=500 max_per_ip=4 passwd_chroot_enable=YES

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss