Discuss

discuss@lists.centos.org

12 participants
34747 discussions

Manual Install fail in first steps
by Andreas Benzler 13 Feb '17

13 Feb '17

Hello everyone, while I wanne try out very special partition, i walk through https://wiki.centos.org/HowTos/ManualInstall but fail allready at "INSTALL setup basesystem filesystem" This is very clear to me, because rpm don't know the full path (real version) or is there some thing wrong ?? Anaconda it self works with groups like @base etc... Very wired. Doesn't looks like up to date. Sincerely Andy

1 0

Re: [CentOS] Automounting a USB drive
by tdukes＠palmettoshopper.com 13 Feb '17

13 Feb '17

-------- Original Message -------- Subject: Re: [CentOS] Automounting a USB drive From: Fred Smith <fredex(a)fcshome.stoneham.ma.us> Date: Sun, February 12, 2017 9:52 pm To: centos(a)centos.org On Sun, Feb 12, 2017 at 06:19:34PM -0700, tdukes(a)palmettoshopper.com wrote: > > Hello, > > Been try to use autofs to mount and unmount a usb flashdrive. I've never had to do anything at all to make this work,... I insert the USB device, wait a few seconds, and voila! are you trying this because you can't get it to work the "normal" way, or is this simply an educational experience? Fred Its not mounting on its own as it did in 6.8. If I click on it in gnome, it mounts but REAR won't backup to it. If i manually mount it from a terminal, I have read/write access. Haven't been able to get a backup since I upgraded back in mid-January.

3 2

pam_tally2 after unlock time
by Naveen Kumar 13 Feb '17

13 Feb '17

Hi All, I prepared a Centos 6.8 Minimal server, as part of hardening i added PAM rules under system-auth and password-auth to lock the user account for 30 minutes after 3 failed login attempts. ############system-auth############### auth required pam_tally2.so deny=3 unlock_time=1800 auth required pam_env.so auth sufficient pam_unix.so auth requisite pam_succeed_if.so uid >= 500 quiet auth required pam_deny.so account required pam_unix.so account required pam_tally2.so account sufficient pam_localuser.so account sufficient pam_succeed_if.so uid < 500 quiet account required pam_permit.so password requisite pam_cracklib.so try_first_pass retry=3 type= password sufficient pam_unix.so sha512 shadow nullok use_authtok password required pam_deny.so session optional pam_keyinit.so revoke session required pam_limits.so session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid session required pam_unix.so ###################password-auth######### auth required pam_tally2.so deny=3 unlock_time=1800 auth required pam_env.so auth sufficient pam_unix.so auth requisite pam_succeed_if.so uid >= 500 quiet auth required pam_deny.so account required pam_unix.so account required pam_tally2.so account sufficient pam_localuser.so account sufficient pam_succeed_if.so uid < 500 quiet account required pam_permit.so password requisite pam_cracklib.so try_first_pass retry=3 type= password sufficient pam_unix.so sha512 shadow nullok use_authtok password required pam_deny.so session optional pam_keyinit.so revoke session required pam_limits.so session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid session required pam_unix.so ################################################################# Now, *after 3 failed attempts user locked successfully but after 30mins when i tried with wrong password for first attempt it again got locked. It should wait for 3 more attempts after unlock, but got locked after first time,* after unlock. Anyway to correct the logic.

1 0

Automounting a USB drive
by tdukes＠palmettoshopper.com 13 Feb '17

13 Feb '17

Hello, Been try to use autofs to mount and unmount a usb flashdrive. The mount point is /media When the drive is NOT inserted, /media is empty. When Iinsert the drive, I see directories in /media that are on the usb drive but nocontent. So, its kind working. /etc/auto,master: # # Sample auto.master file # This is a 'master' automounter map and it has thefollowing format: # mount-point [map-type[,format]:]map [options] # For details of the format look at auto.master(5). # /misc /etc/auto.misc # # NOTE: mounts done from a hosts map will be mounted withthe # "nosuid"and "nodev" options unless the "suid" and "dev" # optionsare explicitly given. # /net -hosts # # Include /etc/auto.master.d/*.autofs # The included files must conform to the format of thisfile. # +dir:/etc/auto.master.d # # Include central master map if it can be found using # nsswitch sources. # # Note that if there are entries for /net or /misc (as # above) in the included master map any keys that are the # same will not be seen as the first read key seen takes # precedence. # +auto.master /media /etc/auto.usb /etc/auto.usb: usb -fstype=auto :/dev/sdb1 The particular usb drive is a REAR backup drive but Iused -fstype=auto in case it may be something different. TIA

2 1

Licence text questions
by Walter Dnes 12 Feb '17

12 Feb '17

I'm running a CentOS 6.5 chroot to build Pale Moon (a Firefox fork) for older machines running distros like Puppy linux. Before anyone asks... * Yes, even though the older machines are using "ancient" glibc, etc, they do have security patches back-ported, e.g. http://www.murga-linux.com/puppy/viewtopic.php?t=90461 "Lucid Puppy Revitalized as 5.2.8.7 - December, 2016" * I realize that CentOS 6.5 is "not safe for surfing". It starts at the commandline, and the only network activity is pulling down source code with git, and scp to send the compiled package to the host, i.e. my desktop PC. If necessary, that could be done by the host OS. It's used for building, and nothing else. Currently just Pale Moon, but other software could also be built. Other people are interested in doing the same. My choices are... * explain how to install CentOS 6.5, which options to choose, turn off boot-to-gui, and how to download and build newer gcc, yasm, and python-2.7 to duplicate my build environment, etc, etc. * or send out a 1.3 gigabyte centos65.tar.xz and give simple instructions to extract the archive, copy over /etc/resolv.conf, bind-mount /dev and /proc, chroot into the directory, and get going right away. I'm not charging money, but the 2nd choice literally involves re-distributing CentOS, and additional Open Source software. I believe that I'm required to provide at least the location from which it can be obtained. Here's a first draft of my "licences.txt". Any problems, suggestions? ======================================================================== The tarball is a collection of various Open Source software, assembled and bundled together by Walter Dnes <waltdnes(a)waltdnes.org>. It's based on a 32-bit CentOS 6.5 install. Additional components necessary for the building of Pale Moon 27 were built from source. It was originally installed in a QEMU VM (Virtual Machine), and then rsync'd to a directory on the host machine for use as a chroot environment. The tarballed directory is intended to run as a chroot environment. The various softwares remain subject to their original licences. As required by many Open Source licences, here is a list of where the original software can be obtained. * The CentOS 6.5 distro can be obtained at http://vault.centos.org/6.5/isos/i386/CentOS-6.5-i386-bin-DVD1.iso http://vault.centos.org/6.5/isos/i386/CentOS-6.5-i386-bin-DVD2.iso DVD1 is approx 3.6 gigabytes and DVD2 is approx 1 gigabyte The following additional source code was downloaded and used to build additional infrastructure required for building Pale Moon. * Python 2.7.13 can be otained at https://www.python.org/ftp/python/2.7.13/Python-2.7.13.tgz * gcc 4.9.4 can be obtained at http://gcc.parentingamerica.com/releases/gcc-4.9.4/gcc-4.9.4.tar.bz2 * gcc 5.4.0 can be obtained at http://gcc.parentingamerica.com/releases/gcc-5.4.0/gcc-5.4.0.tar.bz2 * YASM 1.3.0 can be obtained at http://www.tortall.net/projects/yasm/releases/yasm-1.3.0.tar.gz ======================================================================== -- Walter Dnes <waltdnes(a)waltdnes.org>

2 5

chcon failed to change context Permission denied
by Tim Smith 12 Feb '17

12 Feb '17

Hi, I'm confused, why can root not change context of a directory ? I've moved a mysql dir from /var/lib to another drive. But running sudo chcon -R -t mysqld_t ./mysql Yields a screen full of messages such as chcon: failed to change context of ‘schema_table_lock_waits.frm’ to ‘system_u:object_r:mysqld_t:s0’: Permission denied (and yes, mysql was shut down before the move and is till shut down).

2 2

Wich web browser on CentOS6 ?
by Patrick Begou 11 Feb '17

11 Feb '17

Hello I have more and more troubles using firefox in professional environment with CentOS6. The latest version is 45.7.0 But I can't use it anymore to access some old server hardware (IDRAC7 of DELL C6100) because of "/SSL_ERROR_WEAK_SERVER_CERT_KEY/". I had to install an old Firefox32 version to administrate these servers. Today I upgrade the firmware of 2 DELL switch and now Firefox cannot connect to them anymore saying: /An error occurred during a connection to xxx.xxx.xxx.xxx. The server rejected the handshake because the client downgraded to a lower TLS version than the server supports// //SSL_ERROR_INAPPROPRIATE_FALLBACK_ALERT /Is there a CentOS6 recommended web browser allowing continuous connections to olds and new base level (and local) system administration services ? Thanks Patrick -- =================================================================== | Equipe M.O.S.T. | | | Patrick BEGOU | mailto:Patrick.Begou@grenoble-inp.fr | | LEGI | | | BP 53 X | Tel 04 76 82 51 35 | | 38041 GRENOBLE CEDEX | Fax 04 76 82 52 71 | ===================================================================

8 9

Re: [CentOS] Wich web browser on CentOS6 ?
by James B. Byrne 11 Feb '17

11 Feb '17

On Fri, February 10, 2017 06:26, Patrick Begou wrote: > Hello > > I have more and more troubles using firefox in professional > environment with > CentOS6. The latest version is 45.7.0 But I can't use it anymore to > access some > old server hardware (IDRAC7 of DELL C6100) because of > "/SSL_ERROR_WEAK_SERVER_CERT_KEY/". I had to install an old Firefox32 > version > to administrate these servers. > > Today I upgrade the firmware of 2 DELL switch and now Firefox cannot > connect to them anymore saying: /An error occurred during a > connection to xxx.xxx.xxx.xxx. The server rejected > the handshake because the client downgraded to a lower TLS version > than the server supports// //SSL_ERROR_INAPPROPRIATE_FALLBACK_ALERT > > /Is there a CentOS6 recommended web browser allowing continuous > connections to olds and new base level (and local) system > administration services ? > This situation arises because older, dare I say old, equipment released with embedded software and using http/https as the administrative front end were shipped with minimally compliant x-509 certificates. Often self-signed with 1kb keys and md5 signature hashes. Not to mention many are past their expiry dates. However, given the revelations of state sanctioned snooping on network traffic browsers are being pushed to implement increased compliance checking for the overall security of users. Firefox is simply implementing what various 'authorities' are recommending as secure practices with respect to authentication using pki and x-509 certificates. The present situation is a PIA. It could be a lot more user-friendly if FF so chose. They could have easily allowed one to turn off these advanced compliance checks for specific IP and DNS addresses so that the intended benefit remained but the interference with existing infrastructure was minimised. But, FF is on its own chosen path to oblivion and the idea of compromise is totally absent from their project plan. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 3

Re: [CentOS] An rpm package with country flags in PNG format for CentOS 6
by Alexander Farber 10 Feb '17

10 Feb '17

awstats is good suggestion, thank you Frank Also found https://github.com/hjnilsson/country-flags - public domain and any size

1 0

An rpm package with country flags in PNG format for CentOS 6
by Alexander Farber 10 Feb '17

10 Feb '17

Hello fellow CentOS users, does anybody please know a package for CentOS 6 with at least 200 country flag images in PNG format and (lowercased or uppercased) ISO-conform 2-letter naming (like "us.png", "de.png", "ru.png", ...)? This does not have to be a specific graphic-related package, but can be anything - like a Nagios package, or maybe KDE-help package... I am looking for a package to install at my CentOS 6 LAMP server and to (ab)use those images to display the country flags on the served webpages. Thank you for any ideas Alex

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss