Discuss

discuss@lists.centos.org

2 participants
34758 discussions

Re: su, context(selinux?) 2nd prompt
by Kanwar Ranbir Sandhu 27 Jan '06

27 Jan '06

On Wed, 2006-25-01 at 12:06 -0500, Daniel J Walsh wrote: > >> Remove multiple from the pam file. > >> > > > > editing /etc/pam.d/su, changing > > session required /lib/security/$ISA/pam_selinux.so open multiple > > to > > session required /lib/security/$ISA/pam_selinux.so open > > > > Did the trick, thanks Dan! > > > > # rpm -q -f /etc/pam.d/su > > coreutils-5.2.1-31.2 > > > > > You can actually remove the pam_selinux.so lines from the su file > altogether. We have done this for FC5 and it works > fine. In strict or MLS Policy you will be required to run newrole but > in targeted everything should just work. I'm seeing the same behaviour with telnetd. I had to install it for a client that runs a text based app which Windows users telnet into (it's only open to the local network, and the app loads immediately after login). When a user logs in via telnet, the same question appears. I told my client to just accept the default answer, which is "no". Ideally, I'd like to remove the option all together. I assume it's possible to turn it off like it was for "su", but I'm not sure which file to edit. /etc/pam.d/login looks like the closest one, specifically this line: # pam_selinux.so open should be the last session rule session required pam_selinux.so multiple open I'm not sure though. Any tips? Regards, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.14-1.1656_FC4 i686 GNU/Linux 16:34:54 up 9:34, 5 users, load average: 0.06, 0.35, 0.43

1 0

CentOS 4.2 Install - Can't Surf Web
by Charles Sliger 27 Jan '06

27 Jan '06

I just installed CentOS 4.2 on a system that was running RedHat 9. Now the browser (Mozilla Firefox) can't connect to web sites via their name (www.google.com <http://www.google.com/> ). It can however connect if the IP address is used (66.102.7.147). Also the 'dig' command times out with either the name or the IP address. Has anyone else seen this? Any pointers would be most appreciated. Regards, Chaz Charles L. Sliger, Information Systems Engineer, chaz(a)bctonline.com "no matter where you go, there you are..."

2 2

djbdns rpm for centos [dnk]
by Dustin Krysak 27 Jan '06

27 Jan '06

Can anyone point me to a good one for use? It would be cool if it was from a repo for updates, etc. Thanks in advance! Dustin

6 5

Vacation messages...
by Francois Meehan 27 Jan '06

27 Jan '06

Hi all, Is there a way to implement "out of office" messages for outlook client that are connected by IMAP to a Dovecot-Postfix Centos 4.1 server? I have heard of an application called vacation, but could not find recent rpm for it. Regards, François

4 4

md5sum rpms >> list
by Andrew Rice 27 Jan '06

27 Jan '06

Does anyone know in centos how to create an md5sum list based on the current rpms that I have installed right now on my box? I tried something like rpm -q -v | md5sum >> list but didnt work. Andrew

6 7

RE: [CentOS] Hidden networking device configuration
by Bowie Bailey 27 Jan '06

27 Jan '06

Barry Brimer wrote: > > Rodrigo Barbosa wrote: > > > On Thu, Jan 26, 2006 at 04:15:59PM -0500, Bowie Bailey wrote: > > > > I am trying to configure load balancing for a couple of CentOS4 > > > > servers. > > Have a look at the Piranha/LVS direct routing information here: > <http://www.redhat.com/magazine/014dec05/departments/tips_tricks/> > > You will have to scroll down the page to find it. Interesting. I'm not too familiar with iptables, but based on that tip and what I've read from the man page, I should be able to do this for a webserver: iptables -t nat -A PREROUTING -p tcp -d 192.168.1.20 \ --dport 80 -j REDIRECT This should allow my machine to accept packets destined for the virtual IP (on port 80) and redirect them to localhost. Did I mess anything up there? Just a couple of questions come up here: 1) Do I still need to enable ip_forward? 2) When the server replies to the client, will the reply be sent from the proper virtual IP address? -- Bowie

1 0

RE: [CentOS] Hidden networking device configuration
by Bowie Bailey 27 Jan '06

27 Jan '06

Rodrigo Barbosa wrote: > On Thu, Jan 26, 2006 at 04:15:59PM -0500, Bowie Bailey wrote: > > I am trying to configure load balancing for a couple of CentOS4 > > servers. In order to make it work, I need to add a hidden > > networking device on > > each server with the virtual IP. I found the following > > instructions on linuxvirtualserver.org for doing this, but they > > don't work. > > > > echo 1 > /proc/sys/net/ipv4/ip_forward > > ifconfig dummy0 0.0.0.0 up > > echo 1 > /proc/sys/net/ipv4/conf/all/hidden > > echo 1 > /proc/sys/net/ipv4/conf/dummy0/hidden > > ifconfig dummy0:0 172.26.20.110 up > > > > When I try to write to /proc/sys/net/ipv4/conf/all/hidden, the > > system refuses to let me create the file. I'm logged in as root, > > so why am I having permission problems? > > > > Also, I believe these instructions are for 2.2 or 2.4 kernels. > > Have things changed with 2.6? > > No, things are exactly the same. Meaning that LVS is a separated patch > that is not included either on the stock kernel or the RHEL one. > > If you really want to use LVS, you will have to apply the patch. Hmm... I saw a reference to a kernel patch, but I thought the patch was for the server. I am actually not using a Linux LVS server, I am using a Foundry ServerIron to do the load balancing. It works great for standard balancing, but now I need to do direct routing to balance two CentOS4 servers. The instructions that came with the ServerIron just gave a single ifconfig command to set it up (which royally screwed up the networking). Do I need to install the kernel patch on these machines? And why would that affect the permissions problem I was seeing? As root, I should be able to create a file in any directory. It may not do what I expect if the functionality is not in the kernel, but I should be able to create the file. -- Bowie

2 1

Migrate from WBEL3 to CentOS3
by Tom Brown 27 Jan '06

27 Jan '06

Hi I have followed the steps in the howto on the site to move a box from WBEL3 to CentOS3 (i have done this on another box before without issue) however i'm getting this error on a yum update Resolving dependencies .conflict between gtk2 and librsvg2 the update then exits - anyone know about this one? thanks

1 1

firewall and opening ports
by jim＠datamantic.com 27 Jan '06

27 Jan '06

Hi list. This is my first post here. Super newbie. I will try not to ask too many questions, but searching is hard when you don't even know where to begin. Hopefully someone can point me in the right direction. I have just installed CentOS 4.2. I selected to have a firewall in the graphic installer, and I opened ports 22 and 80. Fine so far. SSH and HTTP both work. But now that everything is set up I have discovered I need to open port 53 in order to install djbdns. My main question is: what did I install by choosing to have a firewall in the CentOS installer? Is this iptables? Or is it something else? And then if anyone just wants to give me the complete answer: how do I open port 53? Thanks!

2 1

Yum Python Errors
by Mark Sargent 27 Jan '06

27 Jan '06

Hi All, what is the meaning of below from yum, Traceback (most recent call last): File "/usr/bin/yum", line 7, in ? yummain.main(sys.argv[1:]) File "/usr/share/yum-cli/yummain.py", line 68, in main result, resultmsgs = base.doCommands() File "/usr/share/yum-cli/cli.py", line 408, in doCommands return self.updatePkgs() File "/usr/share/yum-cli/cli.py", line 923, in updatePkgs self.doRepoSetup() File "/usr/share/yum-cli/cli.py", line 84, in doRepoSetup self.doSackSetup() File "__init__.py", line 143, in doSackSetup File "repos.py", line 211, in populateSack File "mdcache.py", line 103, in getPrimary File "mdcache.py", line 90, in _getGeneric File "mdcache.py", line 62, in _unpickle EOFError This occurred after 1st attempt to do a yum update yum, for a laptop install that I've just allowed onto the net. Same after rebooting. Cheers. CentOS version: 4.1 yum version: 2.2.0 yum.conf: [dag] name=Dag RPM Repository for Red Hat Enterprise Linux baseurl=http://apt.sw.be/redhat/el$releasever/en/$basearch/dag gpgcheck=1 enabled=1 Mark Sargent.

2 2

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss