Discuss

discuss@lists.centos.org

34753 discussions

Re: [CentOS] exercising pam_cracklib from the command line
by James B. Byrne 20 Nov '14

20 Nov '14

On Thu, November 20, 2014 04:44, Elias Persson wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On 2014-11-17 20:57, James B. Byrne wrote: >> CentOS-6.6 >> >> Is there any command line program that determines and reports what >> pam_cracklib.so returns for a given password; subject to variation >> in the command line options and values provided? For example, >> assuming a cli driver program called cli_driver_pgm: >> > > Googling for `"pam_cracklib" cli tool` got me a recommendation of > `cracklib-check` via superuser [1]. Not sure if that does what you want, > but it might be a start? > I came up with cracklib-check too. It too uses FascistCheck like pam_cracklib but none of the elements that are configurable for pam_cracklib are setable for cracklib-check. I have obtained the source for pam_cracklib so I will see if I can create something on my own to yield what I wish. Sometime. Maybe. If I live long enough. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Re: [CentOS] New mailserver problems
by James B. Byrne 20 Nov '14

20 Nov '14

On Wed, November 19, 2014 11:42, Robert Moskowitz wrote: > > On 11/19/2014 10:35 AM, Les Mikesell wrote: >> On Wed, Nov 19, 2014 at 7:36 AM, Robert Moskowitz <rgm(a)htt-consult.com> >> wrote: >>> output="/var/spool/amavisd/tmp/amavis-20141119T075446-18599/parts: lstat() >>> failed: Permission denied. ERROR\n" >> Ownership or selinux problem? > > Unfortunately no selinux on RSEL. has to do, in part, with it being a > port to armv5, eventhough I run it on armv7. > > I looked at the permissions and from /var/spool/amavisd it is owned by > amavis:amavis > Is the clamav user a member of the amavis group and does the group permit read access to /var/spool/amavisd/tmp? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

New mailserver problems
by Robert Moskowitz 20 Nov '14

20 Nov '14

Well, in part we will see if you get this and I get the return. I JUST launched my new mail server after a few miscues. Actually the OS is Redsleeve6, which is the arm port of Centos 6, and perhaps some of my problems may come down to porting problems. But first, it may be that despite my testing, I missed something in the configurations. First clamd problems: Nov 19 08:09:54 z9m9z clamd[857]: lstat() failed on: /var/spool/amavisd/tmp/amavis-20141119T075446-18598/parts Nov 19 08:10:15 z9m9z clamd[857]: lstat() failed on: /var/spool/amavisd/tmp/amavis-20141119T075446-18599/parts Nov 19 08:11:13 z9m9z clamd[857]: lstat() failed on: /var/spool/amavisd/tmp/amavis-20141119T075446-18598/parts Nov 19 08:11:35 z9m9z clamd[857]: lstat() failed on: /var/spool/amavisd/tmp/amavis-20141119T075446-18599/parts Nov 19 08:12:33 z9m9z clamd[857]: lstat() failed on: /var/spool/amavisd/tmp/amavis-20141119T075446-18598/parts Nov 19 08:12:54 z9m9z clamd[857]: lstat() failed on: /var/spool/amavisd/tmp/amavis-20141119T075446-18599/parts Nov 19 08:14:07 z9m9z clamd[857]: lstat() failed on: /var/spool/amavisd/tmp/amavis-20141119T075446-18598/parts Then amavis problems: 08:08:42 z9m9z amavis[18599]: (18599-05) Checking: dkz-30wwFhmC [85.214.87.163] <u-boot-bounces(a)lists.denx.de> -> <rgm(a)htt-consult.com> Nov 19 08:08:43 z9m9z amavis[18599]: (18599-05) (!)run_av (ClamAV-clamd) FAILED - unexpected , output="/var/spool/amavisd/tmp/amavis-20141119T075446-18599/parts: lstat() failed: Permission denied. ERROR\n" Nov 19 08:08:43 z9m9z amavis[18599]: (18599-05) (!)ClamAV-clamd av-scanner FAILED: CODE(0x29d9e28) unexpected , output="/var/spool/amavisd/tmp/amavis-20141119T075446-18599/parts: lstat() failed: Permission denied. ERROR\n" at (eval 100) line 594. Nov 19 08:08:43 z9m9z amavis[18599]: (18599-05) (!!)WARN: all primary virus scanners failed, considering backups But is seems others are working? Anyway, a mailserver change is always painful....

3 6

amavis-new and mysql
by Robert Moskowitz 20 Nov '14

20 Nov '14

Trying to figure this out, as it worked on my old server, but lots is different on my new server.... I forgot the mysql connection for amavis-new in my new mailserver, as none of the tutorials I was pouring through mentioned this, even though they claim they supported virtual domains... Maybe amavis-new has gotten smart enough to recognize a domain as not the one describe and suspect relaying. Anyway... in /etc/amavis/amavis.conf I added: @lookup_sql_dsn = ( ['DBI:mysql:database=postfix;host=127.0.0.1;port=3306', 'postfix', 'password'] ); but am getting in maillog: Nov 20 09:15:10 z9m9z postfix/error[3237]: AC81A62159: to=<user(a)virtualdomain.com>, relay=none, delay=1, delays=0.99/0/0/0.05, dsn=4.4.2, status=deferred (delivery temporarily suspended: lost connection with 127.0.0.1[127.0.0.1] while sending DATA command) Is there something off with that connection? Something is listening on port 3306: # netstat -an|grep 3306 tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN Perhaps because I forgot: $sql_select_policy = 'SELECT domain from domain WHERE CONCAT("@",domain) IN (%k)'; Which I picked up from an ubuntu help site google 'found' for me. The Centos amavis-new howto does not cover supporting a mysql table of virtual domains.

1 0

CentOS-announce Digest, Vol 117, Issue 11
by centos-announce-request＠centos.org 20 Nov '14

20 Nov '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2014:1873 Moderate CentOS 6 libvirt Security Update (Johnny Hughes) 2. CEBA-2014:1874 CentOS 5 ksh BugFix Update (Johnny Hughes) 3. Infra - CentOS {www,seven}.centos.org downtime (Fabian Arrotin) 4. Re: Infra - CentOS {www, seven}.centos.org downtime (Fabian Arrotin) ---------------------------------------------------------------------- Message: 1 Date: Tue, 18 Nov 2014 18:46:17 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2014:1873 Moderate CentOS 6 libvirt Security Update Message-ID: <20141118184617.GA37983(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:1873 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1873.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d73cd372d4a994be9140c08825b4aaa87fbffc13e7d7db3385acf5ef3384cd00 libvirt-0.10.2-46.el6_6.2.i686.rpm c98372d5d62adf98c9ce23a70ef66ccb61ed06881ce14443940e6ca4b98d289e libvirt-client-0.10.2-46.el6_6.2.i686.rpm 07a055575cc9e01feca7b60f75bd0fed91e2520a599a90b02591667e84744147 libvirt-devel-0.10.2-46.el6_6.2.i686.rpm 27d17c02a96d9d3e20e62ac668905f54a8a287baeba803574d37420be7f403e0 libvirt-python-0.10.2-46.el6_6.2.i686.rpm x86_64: 8a46b48c0619146d0bcbf922975a45d9f80eccb7faea89fe9b993ec3309fd29c libvirt-0.10.2-46.el6_6.2.x86_64.rpm c98372d5d62adf98c9ce23a70ef66ccb61ed06881ce14443940e6ca4b98d289e libvirt-client-0.10.2-46.el6_6.2.i686.rpm 0e344734ecfc28f395bf1c66449888480750f95019f38120d5e00f3337c0be20 libvirt-client-0.10.2-46.el6_6.2.x86_64.rpm 07a055575cc9e01feca7b60f75bd0fed91e2520a599a90b02591667e84744147 libvirt-devel-0.10.2-46.el6_6.2.i686.rpm 0a3cda311fe26c51eb102f4ac89be77d65d4d5bc1e8a7c1a3ecfbf82a1cc64ca libvirt-devel-0.10.2-46.el6_6.2.x86_64.rpm 1a4048a21d165d4ce6b43eeb772fd21e536091fc9ec2321d6999f0c9972b0879 libvirt-lock-sanlock-0.10.2-46.el6_6.2.x86_64.rpm 0815d150ad78d41c30eeaa95182fd65622df5ee5476cf7aebbf8d2fc0fd22f9f libvirt-python-0.10.2-46.el6_6.2.x86_64.rpm Source: aee46b4269412bd4fe66b9d3ab1081dee594b3a7c989d46402cf57ffbc62c777 libvirt-0.10.2-46.el6_6.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 19 Nov 2014 13:01:40 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2014:1874 CentOS 5 ksh BugFix Update Message-ID: <20141119130140.GA17061(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:1874 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-1874.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 18cc5f792c7178120ababb2b14dfcf57c6ca8dd9553baed51c14bb893ea6edff ksh-20100621-22.el5_11.i386.rpm x86_64: 221fddf0823f98b60ae9172f7451a87ceef90356550da14bae0bd985a36ab70b ksh-20100621-22.el5_11.x86_64.rpm Source: 471c12adb21b29c3dd862627d4e0765fe638e8b158010e46387eabf6dbefedff ksh-20100621-22.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Wed, 19 Nov 2014 16:36:58 +0100 From: Fabian Arrotin <arrfab(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] Infra - CentOS {www,seven}.centos.org downtime Message-ID: <546CB91A.9040807(a)centos.org> Content-Type: text/plain; charset=utf-8 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Due to a hardware maintenance (moving some gluster volumes to Infiniband, so adding/configuring the IB HBAs), we'll have to shutdown some nodes in the CentOS Infra. Migration is scheduled for Friday November 19th, 9:30 am UTC time. You can convert to local time with $(date -d '2014-11-19 09:30 UTC') The expected "downtime" is estimated to ~180 minutes (multiple things happening at the same time), but we hope to be able to restart the whole stack sooner. Impacted services : - - IPv6 traffic to www.centos.org (the server will remain online and accessible through IPv4, only the IPv6-to-v4 reverse proxy we use the moment will be offline, so AAAA record will even be removed during that maintenance) - - http://seven.centos.org Thanks for your comprehending and patience. on behalf of the Infra team, - -- Fabian Arrotin The CentOS Project | http://www.centos.org gpg key: 56BEC54E | twitter: @arrfab -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iEYEARECAAYFAlRsuRoACgkQnVkHo1a+xU47fwCgiKfV3kUtoKefqgpSEhK64CBp 09MAn0Qi3+N6qegcwRkjgghuEnYXijIC =5f3A -----END PGP SIGNATURE----- ------------------------------ Message: 4 Date: Wed, 19 Nov 2014 16:42:54 +0100 From: Fabian Arrotin <arrfab(a)centos.org> To: centos-announce(a)centos.org Subject: Re: [CentOS-announce] Infra - CentOS {www, seven}.centos.org downtime Message-ID: <546CBA7E.1040309(a)centos.org> Content-Type: text/plain; charset=windows-1252 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 19/11/14 16:36, Fabian Arrotin wrote: > Due to a hardware maintenance (moving some gluster volumes to > Infiniband, so adding/configuring the IB HBAs), we'll have to > shutdown some nodes in the CentOS Infra. > > Migration is scheduled for Friday November 19th, 9:30 am UTC time. > You can convert to local time with $(date -d '2014-11-19 09:30 > UTC') > The correct date is Thursday November 20th , 9:30 am UTC time. You can convert to local time with $(date -d '2014-11-20 09:30 UTC') Sorry for the error - -- Fabian Arrotin The CentOS Project | http://www.centos.org gpg key: 56BEC54E | twitter: @arrfab -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iEYEARECAAYFAlRsun4ACgkQnVkHo1a+xU6B5wCaAxTeBn2RmibASkPhWxz9ckK8 qlQAnR1ImNkGeOwAKIArQhHR1e98/8kM =v4VK -----END PGP SIGNATURE----- ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 117, Issue 11 ************************************************

1 0

exercising pam_cracklib from the command line
by James B. Byrne 20 Nov '14

20 Nov '14

CentOS-6.6 Is there any command line program that determines and reports what pam_cracklib.so returns for a given password; subject to variation in the command line options and values provided? For example, assuming a cli driver program called cli_driver_pgm: cli_driver_pgm pam_cracklib.so difok=8 minlen=14 dcredit=3 ucredit=3 lcredit=3 ocredit=3 minclass=2 maxrepeat=3 maxsequence=3 reject_username gecoscheck -- somepassword -> pam_cracklib calculated minlen value for somepassword My Google-fu appears to have deserted me. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

Please remove mirrors.skyshe.cn from mirror list,Thanks!
by Tom 20 Nov '14

20 Nov '14

Hi, This is a (new?) mirror in China, but I found this mirror hasn't enough bandwidth, I have tested in many server in China, this mirror has a low ping (smaller than 30ms), and a very low download speed(smaller than 10KB/s), so fastestmirror will let it to be the best mirror, but download very slow. I am really happy to see that skyshe.cn is willing to provide this service. However, I don't think their bandwidth is enough to handle this service. Tom

1 0

Can't build RPM for i686 target (i386 works)
by Ian Pilcher 20 Nov '14

20 Nov '14

I'm creating a simple RPM for my 32-bit CentOS 6 server. When I build the RPM without specifying a target architecture (rpmbuild foo.spec), it successfully builds an i386 RPM. If I try to build an i686 RPM, I get nothing: $ rpmbuild --target i686 foo.spec Building target platforms: i686 Building for target i686 And I'm returned to command prompt with no error message. The SPEC file doesn't contain any architecture-related tags. I feel like I must be missing something really, really basic, but I'll be darned if I can figure out what it might be. Any ideas? -- ======================================================================== Ian Pilcher arequipeno(a)gmail.com -------- "I grew up before Mark Zuckerberg invented friendship" -------- ========================================================================

4 5

Re: [CentOS] Actual complaining: nixspam
by Götz Reinicke - IT Koordinator 19 Nov '14

19 Nov '14

Am 19.11.14 um 15:31 schrieb m.roth(a)5-cent.us: > Götz Reinicke - IT Koordinator wrote: >> Am 08.10.14 um 23:07 schrieb John R. Dennison: >>> On Wed, Oct 08, 2014 at 05:04:45PM -0400, m.roth(a)5-cent.us wrote: >>>> >>>> Well, no: they tell me that they are *billed* for each major incident. >>> >>> There is a legal term that applies to this use case: "extortion" >> >> AFAIK IX is not billing .... They do a great job for couple of years. > > They have NOT been doing a "great job" for many years. Back around 2000 or > 2001, Cogeco in Canada was using them... and they blocked Chicago > Roadrunner, which was *the* ISP for most of the city of Chicago, one of > the three largest cities in the US (competition? what's that?) Right now, > hostmonster, my hosting provider, uses a primary mailserver to send from > their literal millions of domains (I got that figure from their tech > support), and it was hostmonster's tech support that told me they were > paying something like $150 "per incident" to get themselves removed - I > assume this is when nixspam claims they've got too many complaints for me > to remove myself. In ANY large hosting provider, anyone can buy a domain > and start spamming in hours, if not minutes, and I challenge you to show > me a large hosting provider that does not have this problem. > So some tech support tells you something, and you believe him for 100%? Go and get some real prove. > Twenty years ago, when there were thousands of small ISPs, nixspam's > method made sense. With the mergers, and the near-death of small ISPs, > it's an *idiot's* idea. Plus, they don't offer a whitelist, to get one's > self listed, for love or money. If it is such and idiot's idea, why are they still so famous and widely used? > > No, they're assholes, using a methodology that's 15+ years out of date. > And, I'll note, even the CentOS list gets spam, in spite of nixspam. Uh. your rudeness gives an deep insight of your state of mind and your POV. masterstroke to be taken seriously! >> >> The problem might be m.roths provider, if they have a zombi spam system >> somewhere and dynamic IPs e.g. they can be put on the list. > > See above. Perhaps you don't understand the current business model of > large hosting providers, and the reality of what they have to deal with. I know that and a lot of them (still) suck. We hat all over Germany problems couple of years ago with phone companies like eplus and cable tv providers as ISPs getting an RBLs etc. Still web.de, 1&1 and gmx with ++45 millions of mail accounts suck in some ways (currently we are investigating such an issue.) >> >> http://www.heise.de/ix/NiX-Spam-DNSBL-and-blacklist-for-download-499637.html >> >> If your mail server is affected by our blacklist please ask your >> internet service provider or your network administrator to shut down the >> spam source in your network because this is the blacklisting reason. >> Follow the removal instructions on www.dnsbl.manitu.net if you need to >> speed up the delisting process. > > Wait, *YOUR* blacklist? Are you actually affiliated with nixspam? If so, > then add a significant number of curses and insults, because you have *NO* > answer to what I say, above. And, btw, when are you going to block, say, > yahoo's mailservers? //very confused head-shaking// Read all information provided, than start shouting ... if you where interested in a objective discussion and problem solving you would have opened the link and read the text and would have seen that this is a quote. sorry that I forgot to mark and underline and point this out that a .... like you can see this. Over and out. my last2cents on this. /Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 82 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Jürgen Walter MdL Staatssekretär im Ministerium für Wissenschaft, Forschung und Kunst Baden-Württemberg Geschäftsführer: Prof. Thomas Schadt

1 0

Broadcom WiFi Wiki Updated
by Milos Blazevic 19 Nov '14

19 Nov '14

Hi all, Long time, no speak. Shifting from private sector job to full-time freelance work took its toll. As a result, among other things, the Broadcom Wiki page http://wiki.centos.org/HowTos/Laptops/Wireless/Broadcom I "maintain" was neglected, and over the past couple of years I've been receiving e-mail inquiries about the Wiki and its applicability. I'm happy to say and let you all know that the Wiki page has been updated with instructions for compiling the latest Broadcom driver with the latest kernel release, and the driver was tested. The current instructions are applicable to CentOS 6 x86_64, but I'm hoping to expand that to CentOS 7 as well. CentOS 5 instructions were removed. Of course, I can post compilation instructions for 5 also, but it'd be tested on a VM and the driver module wouldn't actually go through proper testing. Your thoughts on this matter are certainly welcome. The page is still being reviewed/edited by myself and could use 'polishing', but again, your feedback is always more than welcome and even desired! -- *Kind regards,* *Milos Blazevic* Signature Cert. No: 805010564450148

3 2

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss