Discuss

discuss@lists.centos.org

34753 discussions

Re: [CentOS] ssmtp config for gmail
by Richard 07 Oct '15

07 Oct '15

> Date: Wednesday, October 07, 2015 10:39:00 -0400 > From: Jerry Geis <geisj(a)pagestation.com> > > I have tried to setup ssmtp to relay through gmail. > > root=my gmail address > AuthUser=my gmail address > AuthPass=my password > FromLineOverride=YES > mailhub=smtp.gmail.com:587 > UseSTARTTLS=YES > TLS_CA_FILE=/etc/pki/tls/certs/ca-bundle.crt > > I get this error: > > Authorization failed (534 5.7.14 > https://support.google.com/mail/answer/78754 145sm16287775qhb.20 - > gsmtp) > > I am not using two step verification at this time. I can sign into > my account just fine. > > Am I missing a step? > > Thanks > > Jerry I believe that your issue is the fourth bullet point in on the support page they link to: -- Your mail app might not support the latest security standards. Learn how to allow less secure apps access to your account. If you aren't using OAuth 2.0 (which you aren't in your context): <https://developers.google.com/gmail/oauth_overview?hl=en> you need to set your gmail account to accept connections from "less secure apps". <https://support.google.com/accounts/answer/6010255?hl=en>

1 0

Systemd spends 6 min. to startup a host
by C.L. Martinez 07 Oct '15

07 Oct '15

Hi all, I have a strange behavior with a CentOS7 host (fully patched). I have configured nics as old style format: ifcfg- ... due to I need to use openvswitch for my vms. All works well, except when I reboot this server. Systemd spends 6 min. to startup this host!!! .. It stops with: "A start job is running for LSB: Raise network ...". Are not supposed that systemd startups hosts more faster?? ok, is it possible to fix this?? Thanks.

8 17

[Fwd: Re: Can one construct an IPTables rule to block on NS records?]
by James B. Byrne 07 Oct '15

07 Oct '15

Hit reply instead of reply all. This is for the list. -------------------------- Original Message -------------------------- Subject: Re: [CentOS] Can one construct an IPTables rule to block on NS records? From: "James B. Byrne" <byrnejb(a)harte-lyne.ca> Date: Wed, October 7, 2015 08:52 To: "John R Pierce" <pierce(a)hogranch.com> ---------------------------------------------------------------------- On Tue, October 6, 2015 13:36, John R Pierce wrote: > On 10/6/2015 6:34 AM, Leon Fauster wrote: >> --On Monday, October 05, 2015 10:46 AM -0400 "James B. >> Byrne"<byrnejb(a)harte-lyne.ca> wrote: >> >>> >So, is there any convenient way to construct an IPTables rule to >>> block >>> >all IPs associated with a given Domain Name server? >> IPs have the reversed lookup "assosiated" with a NS. >> >> What do you mean with "associated"? >> >> Do mean all IPs that this DNS server resolves to >> (A-Records in zone) (how do know for what zone >> the NS gives authoritative answers)? >> >> Or just the domain name server IPs of a given >> domain name (NS records)? >> >> What are you trying to solve? > > I wondered much the same. most NS servers won't allow you to do a > zone transfer to find all the A/AAAA records in a given domain. doing > a > reverse DNS lookup on every incoming/outgoing socket connection would > be > beyond painful, it would bring your network to its knees as the > reverse > DNS zones are often broken. > > > I am well aware of the costs of dns lookups which is why I worded the question as broadly as I did. In the end whois provided the necessary information. Thanks to all who replied and provided advice. Regards -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

OpenLDAP on Centos/RHEL 6 still without openssl support?
by Götz Reinicke - IT Koordinator 07 Oct '15

07 Oct '15

Hi, I heard that the RHEL/Centos rpm packages of OpenLDAP 2.4 should support openssl and file pathes to the certs/keys in the online config too. But from the RHEL Documentation it is stated, that still ONLY Mozilla NSS DB Files are supported. Can anyone comment on that? Is that true? Thanks and Regards . Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 82420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Jürgen Walter MdL Staatssekretär im Ministerium für Wissenschaft, Forschung und Kunst Baden-Württemberg Geschäftsführer: Prof. Thomas Schadt

1 0

Can one construct an IPTables rule to block on NS records?
by James B. Byrne 06 Oct '15

06 Oct '15

This is the same origin that I reported on earlier. Apparently asking for an explanation of why they were probing our sites only encouraged them to make additional attempts. sshd: Authentication Failures: unknown (ip-173-201-178-18.ip.secureserver.net) 2 Time(s) unknown (ip-97-74-196-33.ip.secureserver.net) 2 Time(s) unknown (ip-97-74-202-95.ip.secureserver.net) 2 Time(s) root (ip-173-201-252-24.ip.secureserver.net) 1 Time(s) root (ip-72-167-249-196.ip.secureserver.net) 1 Time(s) root (ip-72-167-251-87.ip.secureserver.net) 1 Time(s) root (ip-97-74-121-108.ip.secureserver.net) 1 Time(s) root (ip-97-74-193-219.ip.secureserver.net) 1 Time(s) root (ip-97-74-206-13.ip.secureserver.net) 1 Time(s) unknown (ip-173-201-252-24.ip.secureserver.net) 1 Time(s) unknown (ip-72-167-249-196.ip.secureserver.net) 1 Time(s) unknown (ip-72-167-251-87.ip.secureserver.net) 1 Time(s) unknown (ip-97-74-121-108.ip.secureserver.net) 1 Time(s) unknown (ip-97-74-193-219.ip.secureserver.net) 1 Time(s) unknown (ip-97-74-206-13.ip.secureserver.net) 1 Time(s) Invalid Users: Unknown Account: 12 Time(s) So, is there any convenient way to construct an IPTables rule to block all IPs associated with a given Domain Name server? dig -x 173.201.178.18 ; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.37.rc1.el6_7.4 <<>> -x 173.201.178.18 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1357 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 4 ;; QUESTION SECTION: ;18.178.201.173.in-addr.arpa. IN PTR ;; ANSWER SECTION: 18.178.201.173.in-addr.arpa. 3600 IN PTR ip-173-201-178-18.ip.secureserver.net. ;; AUTHORITY SECTION: 201.173.in-addr.arpa. 66199 IN NS cns2.secureserver.net. 201.173.in-addr.arpa. 66199 IN NS cns1.secureserver.net. ;; ADDITIONAL SECTION: cns2.secureserver.net. 172800 IN A 216.69.185.100 cns2.secureserver.net. 172800 IN AAAA 2607:f208:303::64 cns1.secureserver.net. 172800 IN A 208.109.255.100 cns1.secureserver.net. 172800 IN AAAA 2607:f208:207::64 Like say, cns{1,2}.secureserver.net. Or an entire domain? Say secureserver.net. ? -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

5 5

Off Topic - SSL reverse proxy and Mixed Content
by Clint Dilks 06 Oct '15

06 Oct '15

Hi, Not a CentOS specific issue, but I am a bit stuck as where I might ask for help so if anyone has any ideas please share :) I have a site that I want to work behind a reverse proxy (httpd) if using http:// everything works as expected. If using https:// some content is displayed but some content is blocked because of stylesheets and etc being requested via http rather https. I know that the long term solution should be to get all code changed so that it references //myserver/resource or /resource rather than http://myserver/resource but is there anything I can do with httpd to get this working until these changes are made ? Thanks for any suggestions. Below is my current VirtualHost config ProxyRequests On ProxyPreserveHost On ProxyTimeout 300 <Proxy *> Order allow,deny Allow from all </Proxy> ProxyPass / http://myserver/ ProxyPassReverse / http://myserver/

2 2

python setup.py ssl error
by Tim Dunphy 06 Oct '15

06 Oct '15

Hey guys, I'm trying to do a source install of s3cmd onto a centos 6.5 host. Because the version in the repo is a little old. So when I go to run the installer app with the command python2.7 setup.py install, I'm getting the following error: Installed /usr/local/lib/python2.7/site-packages/s3cmd-1.6.0-py2.7.egg Processing dependencies for s3cmd==1.6.0 Searching for six>=1.5 Reading https://pypi.python.org/simple/six/ Download error on https://pypi.python.org/simple/six/: [Errno 1] _ssl.c:499: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed -- Some packages may not be found! Couldn't find index page for 'six' (maybe misspelled?) Scanning index of all packages (this may take a while) Reading https://pypi.python.org/simple/ Download error on https://pypi.python.org/simple/: [Errno 1] _ssl.c:499: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed -- Some packages may not be found! No local packages or download links found for six>=1.5 error: Could not find suitable distribution for Requirement.parse('six>=1.5') I thought this might be a proxy issue of some kind, but I have several proxy values set in my environment: [root@ushapld00050 s3cmd-1.6.0]# env | grep -i proxy http_proxy=http://proxy.mycompany.com:80 https_proxy=http://proxy.mycompany.com:80 HTTPS_PROXY=http://proxy.mycompany.com:80 no_proxy=usushaplp461.mycompany.ge.com HTTP_PROXY=http://proxy.mycompany.com:80 Can someone please give me a heads up as to how to resolve this issue? Thanks, Tim -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

1 0

CentOS 7 & dhclient hooks
by Tero M 06 Oct '15

06 Oct '15

Hi, I have CentOS 7 and I am trying to get dhclient hooks working. I have 1) created file /etc/dhcp/dhclient-enp4s0.conf, 2) created directories /etc/dhcp/{dhclient-enter-hooks.d, dhclient-exit-hooks.d}, 3) added line 'DHCLIENTARGS="-nc"' into file ifcfg-enp4s0 and 4) added file /etc/dhcp/dhclient-enter-hooks.d/test with line echo "executed enter-hook", 5) but I was not getting any output after executing ifdown enp4s0 && ifup enp4s0. However, I was able to do this with NetworkManagers dispather scripts, but I prefer old school dhclient hooks. :-) sincerely Tero M

2 1

Unable to install Chinese encoding package GBK
by Eric Dong 05 Oct '15

05 Oct '15

Hello, I found it in CentOS 7, the "yum install "Chinese support" is not available. And I need the Chinese simplified encoding with GBK support. Could please suggest how should I install this package in Centos 7? Thanks a lot. Regards, Eric

2 1

COMPILATION ERROR dev_t, into_t , no_tetc
by Samson 05 Oct '15

05 Oct '15

Hi, I have software in CentOS6, it is compiling very well. I decided to put the same software into CentOS7 but i am having this compilation errors below: In file included from /opt/TAFC/R14.1/include/jsystem.h:106:0, from BASIC_2.c:6: /opt/TAFC/R14.1/include/jedi.h:534:2: error: unknown type name ‘ino_t’ ino_t ino; // The i-node number of a file ^ /opt/TAFC/R14.1/include/jedi.h:535:2: error: unknown type name ‘dev_t’ dev_t dev; // The device number of a file ^ /opt/TAFC/R14.1/include/jedi.h:537:2: error: unknown type name ‘ino_t’ ino_t lockid1; In file included from /opt/TAFC/R14.1/include/jsystem.h:106:0, from BASIC_2.c:6: /opt/TAFC/R14.1/include/jedi.h:729:1: error: unknown type name ‘ino_t’ ino_t JRunFileIOGetIno(DPSTRUCT dp, struct jfd fdinfo ); ^ /opt/TAFC/R14.1/include/jedi.h:730:1: error: unknown type name ‘dev_t’ dev_t JRunFileIOGetDevice(DPSTRUCT dp, struct jfd fdinfo ); ^ /opt/TAFC/R14.1/include/jedi.h:732:1: error: unknown type name ‘ino_t’ ino_t JRunFileIOGetLock1(DPSTRUCT dp, struct jfd fdinfo ); Kindly Help. Thanks

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss