Discuss

discuss@lists.centos.org

34758 discussions

CentOS-announce Digest, Vol 118, Issue 4
by centos-announce-request＠centos.org 05 Dec '14

05 Dec '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEEA-2014:1958 CentOS 7 bnx2x Enhancement Update (Johnny Hughes) 2. CEBA-2014:1957 CentOS 7 resource-agents BugFix Update (Johnny Hughes) 3. CESA-2014:1956 Moderate CentOS 7 wpa_supplicant Security Update (Johnny Hughes) 4. CESA-2014:1959 Moderate CentOS 5 kernel Security Update (Johnny Hughes) 5. Release for CentOS Linux Rolling media (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Thu, 4 Dec 2014 13:37:11 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2014:1958 CentOS 7 bnx2x Enhancement Update Message-ID: <20141204133711.GA44352(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2014:1958 Upstream details at : https://rhn.redhat.com/errata/RHEA-2014-1958.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: eab035c4c87117fc19cc75cd8f5b856aa52a1a63a54ab7cf441755b89dd28ace kmod-bnx2x-1.710.51-3.el7_0.x86_64.rpm a4b5a1acbedc67060930542d951007f74845314a6215bdf5c5c5e93ea8b1909d kmod-bnx2x-firmware-1.710.51-3.el7_0.x86_64.rpm Source: a44c81bac129e207108d4b8d9b61f8e373c993175bbfe4399b9cbf3c5187b24f bnx2x-1.710.51-3.el7_0.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Thu, 4 Dec 2014 13:37:42 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2014:1957 CentOS 7 resource-agents BugFix Update Message-ID: <20141204133742.GA44420(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:1957 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-1957.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 324557e085beb83897926fe401aa1bff5a96bd437c0ec1aa4d443893f9eae08d resource-agents-3.9.5-26.el7_0.6.x86_64.rpm Source: ea95a99f8a74cb22e963873f5693f1dcca724e2ac2cd9e7caee1b7821254bdb5 resource-agents-3.9.5-26.el7_0.6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Thu, 4 Dec 2014 13:38:10 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1956 Moderate CentOS 7 wpa_supplicant Security Update Message-ID: <20141204133810.GA44491(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1956 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1956.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 867c5ed3ca6d8ddad3d7b237c318c8087a3f00b84608290c8029045c7d61e2d2 wpa_supplicant-2.0-13.el7_0.x86_64.rpm Source: f80528eda6d9a6aaddd3e357c3262d2daabed1fa4f3c8a09329d91ce98201004 wpa_supplicant-2.0-13.el7_0.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Thu, 4 Dec 2014 21:58:10 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1959 Moderate CentOS 5 kernel Security Update Message-ID: <20141204215810.GA25971(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1959 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1959.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 571e827d7dbab6fe3597c0829b9305c53799be25559f1da4cf7f9ee8734cfee2 kernel-2.6.18-400.el5.i686.rpm 30ac09c18f82823a59cc15190e2122c68b118d6b22cd21dcb7b42b02c8a2ac47 kernel-debug-2.6.18-400.el5.i686.rpm a3ffa5d52b54b9d0fcc7b93aa0468466aff00785baddb2480b7e721daca13fe3 kernel-debug-devel-2.6.18-400.el5.i686.rpm dab96c2095b6d8af0440dbce169fa7f12d4959b20f257445aba655bfef15f0ec kernel-devel-2.6.18-400.el5.i686.rpm 0bcdb43d7e5a6f0ba3d8b2fdc83b0b67ca6b1d9a6eab18539b226fdb690cd21f kernel-doc-2.6.18-400.el5.noarch.rpm b95947c4d03ad59211433a60d3400eb19b7b1aab87214b3957bd8711b019b869 kernel-headers-2.6.18-400.el5.i386.rpm 36a0e7df7468c4a3a934a5dc7b353bce88d006d8b67b49a5969c0035c029fb1d kernel-PAE-2.6.18-400.el5.i686.rpm 55667df2e69466595e21c816c8c7349c1fa1003d657c968918c919e5f9defd51 kernel-PAE-devel-2.6.18-400.el5.i686.rpm ec8ca478d8071c3bfe1efeefb4b311fbe68ccb22e3856efb5cdf198a649604df kernel-xen-2.6.18-400.el5.i686.rpm 64e517b032083c8bcd3c647428ca20564c79e3b74e36292fa7545e90ab1982e0 kernel-xen-devel-2.6.18-400.el5.i686.rpm x86_64: 3b164c554a8fd7dada2bfcff2f9869b79b2592704ef2403d553ee7c1b017e8ac kernel-2.6.18-400.el5.x86_64.rpm dbd5c43ab0079acc611b4ee88fd960d9e4671599f909ae98d1d10275073f2f02 kernel-debug-2.6.18-400.el5.x86_64.rpm ca31c6755e0bf9553cb8272617d7df78a071495e143a2f8f4a85075058f941a5 kernel-debug-devel-2.6.18-400.el5.x86_64.rpm b6d114eed6268a5f24e61df0a92b36c8a79013749dd6af1b33cdf4af9868c657 kernel-devel-2.6.18-400.el5.x86_64.rpm 0bcdb43d7e5a6f0ba3d8b2fdc83b0b67ca6b1d9a6eab18539b226fdb690cd21f kernel-doc-2.6.18-400.el5.noarch.rpm dad86e534519df2cba7e4685709ad09a9d5337793d8c9e36cee7c72f13bc7020 kernel-headers-2.6.18-400.el5.x86_64.rpm 6c39539b27af4d38dc293047f9ece8f3545f671f66d49cfeb0e34db5074a6d66 kernel-xen-2.6.18-400.el5.x86_64.rpm e35581f0d3f928f3d39c998c5cca6b624385d7c365e0dc98a235383cf6a307d3 kernel-xen-devel-2.6.18-400.el5.x86_64.rpm Source: 22aff4842eebb3976961fb12a11adbf6e7cdfc4b1801dfe6a151994c3d53d55e kernel-2.6.18-400.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Fri, 05 Dec 2014 01:48:21 +0000 From: Karanbir Singh <kbsingh(a)centos.org> To: CentOS Announcements List <centos-announce(a)centos.org> Subject: [CentOS-announce] Release for CentOS Linux Rolling media Message-ID: <54810EE5.1090909(a)centos.org> Content-Type: text/plain; charset=utf-8 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I am pleased to announce general availability of the rolling builds for CentOS Linux. Todays release includes CentOS Linux 7 iso based install media and the generic cloud images. CentOS Linux rolling builds are point in time snapshot media rebuild from original release time, to include all updates pushed to mirror.centos.org's repositories. This includes all security, bugfix, enhancement and general updates for CentOS Linux. Machines installed from this media will have all these updates pre-included and will look no different when compared with machines installed with older media that have been yum updated to the same point in time. All rpm/yum repos remain on mirror.centos.org with no changes in either layout or content. We will aim to update and issue for release a new set of these files at the end of every month going forward. Each released filename includes a datestamp and a buildtag to indicate the content included. Files marked as 20141129_02 indicate that it includes all content released to mirror.centos.org upto ( and including ) the 29th of Nov 2014 and is the second build of that cycle. While all build's are made public at buildlogs.centos.org/, only those that pass our QA and testing cycles will be marked as released, to be included in buildlogs.centos.org/rolling/. We will also do interim builds as needed ( for development and testing purposes ) at different points in time, those builds will not be marked for general release, but will still be avilable publicly. Since there is a need to test these images, the release will always lag few days behind the datestamp ( and therefore content included ) in the release. My aim is to automate as much of this as possible going forward to reduce this time lag as much as possible, however we might not be able to remove it completely. With every cycle, we hope to increase the content made available in this rolling format. Immediate next steps include bringing the CentOS Linux 7 livemedia into the rolling releases followed by CentOS Linux 6 content from the next ( December 2014 ) cycle. Due to the way the installer works in CentOS-5, and its point in time we have no plans on including CentOS-5 in this cycle at this point. For the sake of uniformity and communication, the release media will be referenced by the month it reflects, not the month it was released in. Making this release the Nov 2014 Rolling release. Other content formats like containers and vendor specific images will aim to start with the same cycle as the main CentOS Linux media, but might move to a more frequent build and release cycle if needed. Special Interest Groups ( http://wiki.centos.org/SpecialInterestGroup ) wanting to do media and installer releases should also consider using the rolling timelines to sync with. Finally, I want to highlight that we will always consider doing a rolling release to address major security issues like the recent heartbleed, shellshock and poodle patches. - ----------- CentOS Linux distro installer media: File: CentOS-7-x86_64-DVD-20141129_02.iso Sha256sum: 85a46c62b5bfc701678bef7854bb73af4ccfb840dfcbfb2f9b2189e08fe9438c File: CentOS-7-x86_64-Everything-20141129_02.iso Sha256sum: f9fdd8b12c9529a1e3bf7628ebee964b2aeb9fd66540de7b369e0fde6f7a4236 File: CentOS-7-x86_64-Minimal-20141129_02.iso Sha256sum: e1338d13178f1c66c17386b7ced0b1459c677ff9a1cf095ac4db377234cc03fa Symlinks are provided that will always map to the latest released builds, as follows ( including their current mapping ) http://buildlogs.centos.org/rolling/7/isos/x86_64/CentOS-7-x86_64-DVD.iso - -> CentOS-7-x86_64-DVD-20141129_02.iso http://buildlogs.centos.org/rolling/7/isos/x86_64/CentOS-7-x86_64-Everythin… - -> CentOS-7-x86_64-Everything-20141129_02.iso http://buildlogs.centos.org/rolling/7/isos/x86_64/CentOS-7-x86_64-Minimal.i… - -> CentOS-7-x86_64-Minimal-20141129_02.iso These symlinks will be updated to point at the latest tested and released media and make for a good target in automation that requires CentOS Linux media. - ---------- Cloud and Instance Images: The CentOS Linux 7 GenericCloud image is built to include cloud-init from the Extras/ repository. The image is made available in multiple formats, with identical content. The cloud images are released via http://cloud.centos.org/centos/7/images/ File: CentOS-7-x86_64-GenericCloud-20141129_01.qcow2 Desc: is the reference image. Size: 944 MB Sha256Sum: 7710ffdd497cf00fc72c22a3fa7cc7adb3424d3542521ca8fbe19eba9ded403f File: CentOS-7-x86_64-GenericCloud-20141129_01.qcow2c Desc: This is the same image, run through the qemu qcow2 internal compression setup - while this image is suiteable for development and play, it comes with non trivial i/o performance penalties and therefore not recommended for production. Size: 399MB Sha256Sum: db42e4fb9565e75f0acbe6b54a5b8822f3f1e9783fb1a553e1552c72ceaff8df File: CentOS-7-x86_64-GenericCloud-20141129_01.qcow2.xz Desc: This is the regular qcow2 file, run through the xz compression tool. This gives a regular qcow2 file, suiteable for production use. Size: 266MB Sha256Sum: 9b0b38c48a24164c15c33625972b87835501b6994c3ee894f6b79ce40e7d5e54 File: CentOS-7-x86_64-GenericCloud-20141129_01.raw Desc: This is a raw format file for systems that dont consume qcow2 image types. Its also suiteable to use with "qemu-img convert" to render into different formats. Size: 8GB. Sha256Sum: 2e643310bdb3cda775905408dbfe378a5eed04e91db193165178afc5ed5492b8 Symlinks are provided that will always map to the latest released builds, as follows ( including their current mapping ) http://cloud.centos.org/centos/7/images/CentOS-7-x86_64-GenericCloud.qcow2 - -> CentOS-7-x86_64-GenericCloud-20141129_01.qcow2 http://cloud.centos.org/centos/7/images/CentOS-7-x86_64-GenericCloud.qcow2c - -> CentOS-7-x86_64-GenericCloud-20141129_01.qcow2c http://cloud.centos.org/centos/7/images/CentOS-7-x86_64-GenericCloud.qcow2.… - -> CentOS-7-x86_64-GenericCloud-20141129_01.qcow2.xz http://cloud.centos.org/centos/7/images/CentOS-7-x86_64-GenericCloud.raw - -> CentOS-7-x86_64-GenericCloud-20141129_01.raw These symlinks will be updated to point at the latest tested and released media and make for a good target in automation that requires CentOS Linux media. - ---------- For more information and comments please join us on the centos-devel mailing list ( http://lists.centos.org/ ) Enjoy! - -- Karanbir Singh, Project Lead, The CentOS Project -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQEcBAEBAgAGBQJUgQ7lAAoJEI3Oi2Mx7xbtkogH/2Y/kum8rfJZbLKHsYguHndk V9JHBiBLB7f8t5m/8XJXZHd630eWe80iADQdtS7sSRxsFXfb7yVIqHo5O/ahx80n 5jqKdCNmJdY0nv/thIQzgxVYy51mEGcm940OD1OZ3DPgJKAC74MLaXpRX/WoGgcB q64DHQF/TjfHf4mArtvw+HxBV9cVCq1v8Z7BDlBErNN9UMRhj8Y0nQM2w3BwAOVJ VvN39XN7nCKb2wWalrRMA2VJooQ1d91sI1xKNNUv23vgM5lYZDT8A0kRebUOSazU QFtAFZD3MydlKgooNaYMi2G+sY+JKWRsYmzUqTLxzT7Q8ASpvOXH12nFOxdwyM0= =1HdB -----END PGP SIGNATURE----- ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 118, Issue 4 ***********************************************

1 0

CentOS 5 text mode installer: minimum requirements?
by Niki Kovacs 05 Dec '14

05 Dec '14

Hi, A company I do some teaching for has a load of legacy hardware, among which a Dell Poweredge 1300 server. Rough specs: Pentium-III 500 MHz processor, 110 MB RAM, 3 x 9 GB SCSI disks. This thing is a dinosaur, and horribly loud, but apparently it takes a meteor strike to wipe it. I like using it for training purposes, mainly to poke fun at the Windows Server trainer, who complained that 8 GB RAM was "a bit short" to run all his various services. :o) The last time I used it, I installed Slackware 14.1 successfully on it (init 3, no GUI, various services like Dnsmasq, NTP, Samba, Squid, a LAMP stack, etc.). I wonder if that thing would be able to boot CentOS 5.11 in text mode. I vaguely remember the text mode installer requires a minimum of 128 MB RAM, but I can't seem to find some conclusive information on the subject. Cheers, Niki -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

1 0

Cisco Anyconnect Client on Centos 7
by Samson 05 Dec '14

05 Dec '14

Hi all, I have Centos 7 which is doing great. I tried to install Cisco Anyconnect VPN client but could not launch it. It appear on my Application tab but not launching. Kindly assist me the a working rpm on Centos 7. Regards.

3 2

Re: [CentOS] What is the "not supported" hardware?
by Jeremy Hoel 05 Dec '14

05 Dec '14

On Thu, Dec 4, 2014 at 12:32 PM, <m.roth(a)5-cent.us> wrote: > Jeremy Hoel wrote: > > We noticed this when installing onto some new Dell R320's.. it might have > > something to do with hardware that the device had that the older kernel > > might not have known about. Nothing seemed wrong and everything seemed > to > > install ok (we would also update the kernel in the install process, so > > that > > probably hid any further problems), but moving to a 6.6 install made the > > silly error message go away. > > > Please don't top post. > > Dumb question: *how* were you installing? Did you have a kickstart of your > very own? If so... could it have wanted eth0, and the installer called it > em1? > > mark > > Kickstart.. and we had already changed the interface to the new name. It's the same kickstart between the two versions, with just the nic name being different.

2 1

Firefox fails to authenticate .mil sites with New DoD CAC
by Cal Webster 04 Dec '14

04 Dec '14

Can anyone help with getting the new DoD CACs (Smart Card) to work in CentOS 6.6? I don't use it for console logins, only for email and .mil web sites. I recently had to get a new DoD CAC (Smart Card) when one of the buildings I work in upgraded their security system. My old CAC was working fine prior to this for signing and encrypting email and for authenticating to various DoD (.mil) sites from the Internet using the coolkey libraries. After getting my new CAC I am no longer able to authenticate to any DoD sites. I can still sign and encrypt email in Thunderbird via the coolkey libraries but .mil sites either simply display blank pages or raise various errors in firefox. I am prompted for my PIN, which is successfully accepted but I'm not even prompted for which cert to use, like I used to be. I've tried installing and loading the latest "cackey" libraries (see below) but when I insert my CAC and attempt to login to the module in the Mozilla device manager it completely freezes firefox. Recovery requires killing firefox. If I remove the latest and install the next previous cackey library it works the same as coolkey - doesn't freeze up firefox but never connects to .mil sites. I tried building the cackey RPMs from the source RPMs too but the result is the same. Latest 64-bit cackey: cackey-0.6.8-3522.x86_64.rpm Next previous cackey: cackey-0.6.5-2444.x86_64.rpm I'm pretty sure it has something to do with the newer PIV CAC internal layout. I went through a similar transition when the GEMAL 144 cards came out but the cackey libraries did at least work and coolkey eventually caught up. One thing is for sure... the cackey RPM from forge.mil is not a drop-in replacement for coolkey. The cackey RPM only installs the libraries themselves, nothing else. It doesn't even register them in the nss db I had to do that manually with modutil. I must be missing something... Without direct access to forge.mil it's difficult to troubleshoot cackey. For some silly reason they still require CAC authentication to get the CAC software and drivers and access the forums, etc. More relevant information below... I'd be grateful for any ideas or advice on this. I desperately need to retrieve vulnerability reports, patches, and other DoD resources. Thanks! Cal Webster Smart Card Reader: SCM Microsystems Inc. SCR3310 USB Smart Card Reader (21120628202509) 00 00-0 Old CAC: GEMAL TO TOPDL GX4 144 New CAC: G&D FIPS 201 SCE 3.2 [root@inet3 ~]# cat /etc/redhat-release CentOS release 6.6 (Final) [root@inet3 ~]# uname -a Linux inet3 2.6.32-504.1.3.el6.x86_64 #1 SMP Tue Nov 11 17:57:25 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux [root@inet3 ~]# Installed Packages coolkey.i686 1.1.0-32.el6 @base coolkey.x86_64 1.1.0-32.el6 @base firefox.i686 31.2.0-3.el6.centos @updates firefox.x86_64 31.2.0-3.el6.centos @updates thunderbird.x86_64 31.2.0-3.el6.centos @updates pcsc-lite.x86_64 1.5.2-14.el6 @base pcsc-lite-devel.x86_64 1.5.2-14.el6 @base pcsc-lite-libs.x86_64 1.5.2-14.el6 @base nss.i686 3.16.1-14.el6 @base nss.x86_64 3.16.1-14.el6 @base nss-devel.x86_64 3.16.1-14.el6 @base nss-softokn.i686 3.14.3-18.el6_6 @updates nss-softokn.x86_64 3.14.3-18.el6_6 @updates nss-softokn-devel.x86_64 3.14.3-18.el6_6 @updates nss-softokn-freebl.i686 3.14.3-18.el6_6 @updates nss-softokn-freebl.x86_64 3.14.3-18.el6_6 @updates nss-softokn-freebl-devel.x86_64 3.14.3-18.el6_6 @updates nss-sysinit.x86_64 3.16.1-14.el6 @base nss-tools.x86_64 3.16.1-14.el6 @base nss-util.i686 3.16.1-3.el6 @base nss-util.x86_64 3.16.1-3.el6 @base nss-util-devel.x86_64 3.16.1-3.el6 @base [root@inet3 ~]# modutil -list -dbdir /etc/pki/nssdb Listing of PKCS #11 Modules ----------------------------------------------------------- 1. NSS Internal PKCS #11 Module slots: 2 slots attached status: loaded slot: NSS Internal Cryptographic Services token: NSS Generic Crypto Services slot: NSS User Private Key and Certificate Services token: NSS Certificate DB 2. CoolKey PKCS #11 Module library name: libcoolkeypk11.so slots: 1 slot attached status: loaded slot: SCM Microsystems Inc. SCR3310 USB Smart Card Reader (21120628202 token: WEBSTER.CALVIN.DALE.9427154028 3. cackey library name: libcackey.so slots: 2 slots attached status: loaded slot: CACKey Slot token: WEBSTER.CALVIN.DALE.9427154028 slot: CACKey Slot token: DoD Certificates ----------------------------------------------------------- [root@inet3 ~]#

3 12

What is the "not supported" hardware?
by Robert Nichols 04 Dec '14

04 Dec '14

When the installer complains that it has detected unsupported hardware, is there any way to tell just what it didn't like? Following the URL in the message just ends up at the RHEL Hardware Certification page, which isn't much help. The installer seemed quite willing to continue with the installation, and poking around from the shell VT I didn't find anything that didn't seem to be working. I also didn't see anything relevant in any of the message VTs. As it turns out this isn't a big deal for me, since this was the CentOS 6.5 installer and there was no such warning from the 6.6 installer. I'm just wondering how I might go about tracking that down, -- Bob Nichols "NOSPAM" is really part of my email address. Do NOT delete it.

2 1

Re: [CentOS] Firefox fails to authenticate .mil sites with New DoD CAC
by Cal Webster 04 Dec '14

04 Dec '14

On Thu, 2014-12-04 at 11:30 -0500, m.roth(a)5-cent.us wrote: > Cal Webster wrote: > > On Thu, 2014-12-04 at 08:08 -0500, mark wrote: > >> On 12/03/14 17:34, Cal Webster wrote: > >> > Can anyone help with getting the new DoD CACs (Smart Card) to work in > >> > CentOS 6.6? I don't use it for console logins, only for email and .mil > >> > web sites. > >> > > >> > I recently had to get a new DoD CAC (Smart Card) when one of the > >> > buildings I work in upgraded their security system. My old CAC was > >> > working fine prior to this for signing and encrypting email and for > >> > authenticating to various DoD (.mil) sites from the Internet using the > >> > coolkey libraries. > >> > >> Dunno 'bout the new CaC keys, but they "upgraded" our PIV cards to 128? > >> 256? I forget, earlier this year, and I *think* I remember my manager > pushing > >> an enhancement on upstream, and since then we've had no trouble with > >> coolkey accessing them. The two *should* be identical. > > > > Was source for this upstream enhancement released to the community? Not > > Yup. We have a few RHEL licenses, so he could push for the enhancement. It > was released, and we were using it with CentOS 6.5. It must have been in the coolkey-1.1.0-32 update. Build Date: Wed 15 Oct 2014 11:11:10 AM EDT Install Date: Wed 29 Oct 2014 05:04:04 AM EDT > > sure what you meant by "The two" - you mean coolkey and cackey? > > Nope. We don't use cackey. > > > >> <snip> > >> > I've tried installing and loading the latest "cackey" libraries (see > >> > >> I know nothing about cackey libraries, but it's possible that, and pcscd > >> are arguing. > >> > >> I don't see pcscd installed. > > > > pcsc-lite-1.5.2-14.el6.x86_64 (listed on original post) contains pcscd. > > Sure that's possible but I see nothing to support that in the system > > logs > > Watch out that opensc that *doesn't* come with pcscd isn't loaded. Oh, > also, new card - do you have a new CA chain? Is that installed? > <snip> > > mark, who has a new card a few weeks ago, and had to deal with the > CA change from Verizon to Entrust.... Yes, I learned to avoid opensc years ago when we first setup the CACs. A missing CA cert turned out to be the problem. I checked after Jason Pyeron was kind enough to mention "MAIL CA-32" listed on my CAC cert lookup. Sure enough, it was missing in the Firefox CA store but present in the Thunderbird store. This explains why I could sign and encrypt email but not access .mil web sites. When I used the dod_configuration mozilla add-on to update the certs I assumed it would get them all. Apparently not. In fact, I think it deleted this cert because I recorded everything on my previous CAC before getting the new one. It was also using CA-32. I ended up just exporting the cert from Thunderbird and importing it into Firefox. ./Cal

1 0

Re: [CentOS] Firefox fails to authenticate .mil sites with New DoD CAC
by Cal Webster 04 Dec '14

04 Dec '14

On Thu, 2014-12-04 at 08:08 -0500, mark wrote: > On 12/03/14 17:34, Cal Webster wrote: > > Can anyone help with getting the new DoD CACs (Smart Card) to work in > > CentOS 6.6? I don't use it for console logins, only for email and .mil > > web sites. > > > > I recently had to get a new DoD CAC (Smart Card) when one of the > > buildings I work in upgraded their security system. My old CAC was > > working fine prior to this for signing and encrypting email and for > > authenticating to various DoD (.mil) sites from the Internet using the > > coolkey libraries. > > Dunno 'bout the new CaC keys, but they "upgraded" our PIV cards to 128? 256? I > forget, earlier this year, and I *think* I remember my manager pushing an > enhancement on upstream, and since then we've had no trouble with coolkey > accessing them. The two *should* be identical. Was source for this upstream enhancement released to the community? Not sure what you meant by "The two" - you mean coolkey and cackey? > <snip> > > I've tried installing and loading the latest "cackey" libraries (see > > I know nothing about cackey libraries, but it's possible that, and pcscd are > arguing. > > I don't see pcscd installed. pcsc-lite-1.5.2-14.el6.x86_64 (listed on original post) contains pcscd. Sure that's possible but I see nothing to support that in the system logs. I just got a cackey developer contact on forge.mil today from a Civil Svc engineer who does have access so I'll send him my data too. Thanks Mark. > mark > <snip> > > More relevant information below... > > > > Smart Card Reader: > > SCM Microsystems Inc. SCR3310 USB Smart Card Reader (21120628202509) 00 > > 00-0 > > > > Old CAC: GEMAL TO TOPDL GX4 144 > > New CAC: G&D FIPS 201 SCE 3.2 > > > > > > [root@inet3 ~]# cat /etc/redhat-release > > CentOS release 6.6 (Final) > > [root@inet3 ~]# uname -a > > Linux inet3 2.6.32-504.1.3.el6.x86_64 #1 SMP Tue Nov 11 17:57:25 UTC > > 2014 x86_64 x86_64 x86_64 GNU/Linux > > [root@inet3 ~]# > > > > Installed Packages > > > > coolkey.i686 1.1.0-32.el6 @base > > coolkey.x86_64 1.1.0-32.el6 @base > > firefox.i686 31.2.0-3.el6.centos @updates > > firefox.x86_64 31.2.0-3.el6.centos @updates > > thunderbird.x86_64 31.2.0-3.el6.centos @updates > > pcsc-lite.x86_64 1.5.2-14.el6 @base > > pcsc-lite-devel.x86_64 1.5.2-14.el6 @base > > pcsc-lite-libs.x86_64 1.5.2-14.el6 @base > > nss.i686 3.16.1-14.el6 @base > > nss.x86_64 3.16.1-14.el6 @base > > nss-devel.x86_64 3.16.1-14.el6 @base > > nss-softokn.i686 3.14.3-18.el6_6 @updates > > nss-softokn.x86_64 3.14.3-18.el6_6 @updates > > nss-softokn-devel.x86_64 3.14.3-18.el6_6 @updates > > nss-softokn-freebl.i686 3.14.3-18.el6_6 @updates > > nss-softokn-freebl.x86_64 3.14.3-18.el6_6 @updates > > nss-softokn-freebl-devel.x86_64 3.14.3-18.el6_6 @updates > > nss-sysinit.x86_64 3.16.1-14.el6 @base > > nss-tools.x86_64 3.16.1-14.el6 @base > > nss-util.i686 3.16.1-3.el6 @base > > nss-util.x86_64 3.16.1-3.el6 @base > > nss-util-devel.x86_64 3.16.1-3.el6 @base > > > > > > [root@inet3 ~]# modutil -list -dbdir /etc/pki/nssdb > > > > Listing of PKCS #11 Modules > > ----------------------------------------------------------- > > 1. NSS Internal PKCS #11 Module > > slots: 2 slots attached > > status: loaded > > > > slot: NSS Internal Cryptographic Services > > token: NSS Generic Crypto Services > > > > slot: NSS User Private Key and Certificate Services > > token: NSS Certificate DB > > > > 2. CoolKey PKCS #11 Module > > library name: libcoolkeypk11.so > > slots: 1 slot attached > > status: loaded > > > > slot: SCM Microsystems Inc. SCR3310 USB Smart Card Reader (21120628202 > > token: WEBSTER.CALVIN.DALE.9427154028 > > > > 3. cackey > > library name: libcackey.so > > slots: 2 slots attached > > status: loaded > > > > slot: CACKey Slot > > token: WEBSTER.CALVIN.DALE.9427154028 > > > > slot: CACKey Slot > > token: DoD Certificates >

1 0

wield messages on /var/log/messages after install BACKEXEC
by mcclnx mcc 04 Dec '14

04 Dec '14

we have Centos 5.X on DELL servers. Recently we upgrade to BACKEXEC later version of software and /var/log/messages have following messages: Dec 3 18:19:04 ORA1 modprobe: WARNING: Unmatched bracket in ÷ 0E[rŠ£½Øô/N Dec 3 19:14:45 ORA1 modprobe: WARNING: Unmatched bracket in •§ºÎãù(A[v’¯Íì Dec 3 19:14:45 ORA1 modprobe: WARNING: Unmatched bracket in ÈÚí,C[tŽ©Åâ Dec 3 19:14:45 ORA1 modprobe: WARNING: Unmatched bracket in `r…™®ÄÛó &A]z˜· Dec 3 19:29:45 ORA1 SYMBDSNAP_SDK[7808]: Reloc File successfully created. Dec 3 19:30:38 ORA1 SYMBDSNAP_SDK[7808]: Reloc File successfully created. ANy one know why? Thanks

1 0

ELRepo still active?
by Niki Kovacs 04 Dec '14

04 Dec '14

Hi, I'm currently installing CentOS 5.11 i386 on an old PC. Is the ELRepo third-party repository still active and maintained? Cheers, Niki Kovacs -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

2 2

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss