Discuss

discuss@lists.centos.org

34753 discussions

Re: [CentOS] Remote Desktop Recommendations (2)
by david 17 Nov '14

17 Nov '14

At 09:33 PM 11/16/2014, you wrote: >On Sun, Nov 16, 2014 at 9:59 PM, david <david(a)daku.org> wrote: > > > > I'm looking for a way to access a GUI desktop on a Centos 7 server from a > > Windows client. I have tried: > > - X2go from EPEL (fails immediately, apparently they are working on a > > solution, but...) > >X2go works, just not with Gnome3. Use KDE or MATE from epel. Also, >there was a bug in a recent x2goserver package that would fail if you >didn't have the x2goserver-xsession package installed. The fix for >that was done but I don't know if it ever got out of epel-testing. > >-- > Les Mikesell > lesmikesell(a)gmail.com Thanks, Les, for that detail. I knew that x2go had a known bug, but didn't know the name of the missing package. I explicitly installed it, but I still get failure asking for the MATE desktop. To summarize, my client shows the X2go screen, then it goes away. On the server, I see in /var/log/messages, a sequence such as: ------------------------ Nov 17 08:58:07 goat systemd: Created slice user-1000.slice. Nov 17 08:58:07 goat systemd: Starting Session 4 of user UUUUU. Nov 17 08:58:07 goat systemd: Started Session 4 of user UUUUU. Nov 17 08:58:07 goat systemd-logind: New session 4 of user UUUUU. Nov 17 08:58:11 goat /usr/bin/x2gostartagent: successfully started X2Go agent session with ID UUUUU-50-1416243489_stDMATE _dp32 Nov 17 08:58:15 goat kernel: fuse init (API version 7.22) Nov 17 08:58:15 goat systemd: Mounting FUSE Control File System... Nov 17 08:58:15 goat systemd: Mounted FUSE Control File System. Nov 17 08:58:15 goat /usr/bin/x2gosetkeyboard: Setting X keyboard according to /home/UUUUU/.x2go/C-UUUUU-50-1416243489_stD MATE_dp32/keyboard Nov 17 08:58:16 goat /usr/bin/x2goruncommand: launching session with Xsession-x2go mechanism, using STARTUP="mate-sessio n" Nov 17 08:58:16 goat /usr/bin/x2gomountdirs[3210]: successfully mounted VVVVV@127.0.0.1:30005/cygdrive/C/Users/VVVVV/X2GO~ 1/S-743F~1/spool to /tmp/.x2go-UUUUU/spool/C-UUUUU-50-1416243489_stDMATE_dp32 Nov 17 08:58:18 goat /usr/bin/x2goumount-session[3574]: successfully unmounted "/tmp/.x2go-UUUUU/spool/C-UUUUU-50-14162434 89_stDMATE_dp32" Nov 17 08:58:28 goat systemd-logind: Removed session 4. ------------------------- In the above, UUUUU is the user name on Centos 7, and VVVVV is the name on Windows, as evidenced by the reference to 'cygdrive'. --- In response to others that suggested VNC, I used to use it, but was disappointed with the speed when used remotely. On an internal LAN connect, it worked fine, but otherwise it became painful to use. NX became my next choice for Centos 6, but the x2go package became my favorite because of the ease of installation -- (nx needed lots of other things at setup, and appears unavailable for C7). David

3 2

Re: [CentOS] automated stopserver & shutdown?
by James B. Byrne 17 Nov '14

17 Nov '14

On Mon, November 17, 2014 01:17, Hadi Motamedi wrote: >> A simple script which loops though a text file that lists the hostname / >> username / password for the login and then runs the "shutdown - h now" >> command? Though, I would be uneasy with listing root passwords in a >> random text file. >> > > Thank you for your help . So how to open a session with another server > to login with root password and issue a command on it ? > > I do not believe that, on reflection, you really would want to do that. An alternative approach is to use ssh-keygen to create a key pair for root on the control host and then add that public key to the authorized_keys file inside /root/.ssh on each of the target hosts. So, something like this: On control host as root user: ssh-keygen -t rsa -b 4096 Generating public/private rsa key pair. Enter file in which to save the key (/<path to <<userid>> home directory>/.ssh/id_rsa): Enter passphrase (empty for no passphrase): Enter same passphrase again: Your identification has been saved in /<path to <<userid>> home directory>/.ssh/id_rsa. Your public key has been saved in /<path to <<userid>> home directory>/.ssh/id_rsa.pub. The key fingerprint is: 1c:6c:91:76:64:83:a5:32:4e:ac:df:28:ed:cb:9a:dd <userid>@<hostname> That will give you the following files in /root/.ssh ll .ssh total 28 -rw-r--r--. 1 root root 4619 Nov 17 2014 authorized_keys -rw-------. 1 root root 3239 Nov 17 2014 id_rsa -rw-r--r--. 1 root root 756 Nov 17 2014 id_rsa.pub Now login to each of your target hosts as root and transfer /root/.ssh/id_rsa.pub from the control host and append (>>) it to /root/.ssh/authorized_keys on the target host. If the .ssh directory does not already exist on the target host then you should first create the necessary files by running ssh-keygen on the target (otherwise you need consider whether or not selinux is enforced or not? is the mode set correctly? yada, yada). Once you have setup the target hosts for ssh and have added the control host's public key to .ssh/authorized_keys then you should be able to ssh into each from the control host without having to provide a password. You will however need to add each remote host's identity (/etc/ssh/ssh_host_rsa_key.pub) to your own /root/.ssh/known_hosts file the first time that you connect. This can be automatically created and maintained by the ssh client so long as the remote host's ssh identity is not subsequently changed. If you have previously ssh'ed into the remote hosts than this will already have been done. Once the connections have been set up between the control host and all of the target hosts then you should be a able to do this (mind the -t option to ssh): for host in \ long_host_name.domain.tld \ targethost{01,02,03,04,05,06}.domain.tld \ othername{x,y,z}.domain.tld \ yet_another_very_long_host_name.domain.tld \ 192.168.0.2{1,5,7,8,9} ; do ssh -t $host 'echo -e "\n\n$HOSTNAME\n" ; /root/stopServer ; init 0'; done Personally, I would use a separate account for this and add that account to the /etc/sudoers file on each of the targets: shutdown_userid NOPASSWD: localhost=/sbin/init 0 shutdown_userid NOPASSWD: localhost=/sbin/shutdown -h now shutdown_userid NOPASSWD: localhost=/root/stopServer The ssh-keygen / authorized_hosts setup would then need to be done in that account's home directory on each target rather than root's. Then use 'sudo /root/stopServer ; sudo init 0' to run the shutdown scripts. I also would use 'shutdown -h now' instead of 'init 0' -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

EL5 Security Policy for the final 3 years
by Johnny Hughes 17 Nov '14

17 Nov '14

Red Hat's Security policy for Production 3 Phase of the Life Cycle for EL5 is that they will only release "Critical impact Security Advisories (RHSAs) and selected Urgent Priority Bug Fix Advisories (RHBAs) may be released as they become available. Other errata advisories may be delivered as appropriate." https://access.redhat.com/support/policy/updates/errata/#Production_3_Phase In practice, what that means so far is this: All Important and Critical security updates have been released for EL5, but some moderate and below security updates have not been, and are not going to be released by Red Hat for EL5. I do not agree with this policy, but it is not one that the CentOS Project (or I) have any say about. These updates will not be released for RHEL-5 ... therefore they will also not be released for CentOS-5. Due to this security policy, I highly recommend moving CentOS-5 based workloads to CentOS-6 and that every user stop using CentOS-5 as soon as possible. Here is a list of updates that are not done on RHEL-5 and are not planned to be done at this time by Red Hat for RHEL-5 (and therefore CentOS-5): > ruby Moderate https://access.redhat.com/security/cve/CVE-2014-8080 > python Low https://access.redhat.com/security/cve/CVE-2014-7185 > libgcrypt Moderate https://access.redhat.com/security/cve/CVE-2014-5270 > wget Moderate https://access.redhat.com/security/cve/CVE-2014-4877 > perl-Data-Dumper Low https://access.redhat.com/security/cve/CVE-2014-4330 > cups Moderate https://access.redhat.com/security/cve/CVE-2014-3537 > dbus Moderate https://access.redhat.com/security/cve/CVE-2014-3477 > dovecot Moderate https://access.redhat.com/security/cve/CVE-2014-3430 > exim Low https://access.redhat.com/security/cve/CVE-2014-2972 > cups Moderate https://access.redhat.com/security/cve/CVE-2014-2856 > openssh Moderate https://access.redhat.com/security/cve/CVE-2014-2653 > libxml2 Moderate https://access.redhat.com/security/cve/CVE-2014-0191 > qemu Moderate https://access.redhat.com/security/cve/CVE-2013-6458 > squid Moderate https://access.redhat.com/security/cve/CVE-2012-5643 > openssh Low https://access.redhat.com/security/cve/CVE-2014-2532 > libX11 Moderate https://access.redhat.com/security/cve/CVE-2013-1997 > libFS Moderate https://access.redhat.com/security/cve/CVE-2013-1996 > libXext Moderate https://access.redhat.com/security/cve/CVE-2013-1982 > I wish there was another option, but I just don't see any others .. I know I would not use packages with moderate security issues unfixed in production on purpose. I think this is a ridiculous policy, but it is what it is. Thanks, Johnny Hughes

4 3

Re: [CentOS] Not To James B. Byrne
by Darr247 17 Nov '14

17 Nov '14

On 13 November 2014 @21:51 zulu, Miranda Hawarden-Ogata wrote: > Have you tried setting up the TB filter to mark as not-junk when it > runs? Mine are set to "apply before junk classification" matching on > "to/from/cc/bcc contains centos(a)centos.org" and then the actions are > "move to folder", "set junk to not-junk", "stop filter exec". It seems > to work, I don't recall getting any false-junks in quite a while... I > do also have a gmail filter that "never spam" filters all centos.org > email. > > Thanks! > Miranda 1) You sent that to my email, not the list. 2) I already have "Filter before Junk Classification" selected in that filter's Getting New Mail picklist. 3) You should look in your Spam folder and see if there aren't some emails with [CentOS] in their Subject lines. If it's completely empty, possibly you're having TB delete emails it thinks are junk.

6 17

Remote Desktop Recommendations (2)
by david 17 Nov '14

17 Nov '14

Folks I'm looking for a way to access a GUI desktop on a Centos 7 server from a Windows client. I have tried: - X2go from EPEL (fails immediately, apparently they are working on a solution, but...) - Freenx (doesn't exist for EL7) Both the above work fine with Centos 6. I'm looking for a solution that works over the internet from afar. My earlier posting failed to mention this. Are there any known working solutions? Thanks... Mystified but not urgent in San Francisco David

4 3

Remote Desktop Recommendations
by david 17 Nov '14

17 Nov '14

Folks I'm looking for a way to access a GUI desktop on a Centos 7 server from a Windows client. I have tried: - X2go from EPEL (fails immediately, apparently they are working on a solution, but...) - Freenx (doesn't exist for EL7) Both the above work fine with Centos 6. Are there any known working solutions? Thanks... Mystified but not urgent in San Francisco David

3 2

Re: [CentOS] Remote Desktop Recommendations
by david 17 Nov '14

17 Nov '14

At 06:35 PM 11/16/2014, you wrote: >On Sun, 16 Nov 2014 18:25:40 -0800 >david wrote: > > > I'm looking for a way to access a GUI desktop on a Centos 7 server > > from a Windows client. > >I use tiger vnc myself, but I don't access my desktops from a >Windows client. I assume any Windows vnc client should work with >the tiger vnc server, though. > >yum install tigervnc-server > >-- My recollection (as inaccurate as it may be), is that VNC protocol is painfully bandwidth-intensive, unlike the NX and X2go systems. I'm reluctant to switch to it. But, if that's all that works, I might have to. Thanks for the input. David

1 0

Building mod_suphp on Centos 7
by Steven Stern 16 Nov '14

16 Nov '14

I've downloaded the tarball. When I run ./configure, I get [sdstern@cumberland suphp-0.7.2]$ ./configure configure: error: cannot find install-sh, install.sh, or shtool in config "."/config I've installed libtool, autoconf and automake. shtool and install-sh are installed. Any clues on how to get this to configure? Or does anyone know of a repo where I can get an rpm for C7? -- -- Steve

2 1

To James B. Byrne
by Alexander Farber 16 Nov '14

16 Nov '14

Dear James, everyday I look into my Gmail SPAM folder and your mails (sent to Centos list) are there. Noone else is there but you. Please finally fix your MX records or whatever is needed. No offence Greetings from Germany Alex

14 36

ps/2 mouse stopped working
by Gergely Buday 15 Nov '14

15 Nov '14

Hi there, I was using a ps/2 mouse. I had to connect a ps/2 keyboard. As I have only one ps/2 socket I connected an usb mouse. I then removed the other keyboard and reconnected the ps/2 mouse and removed the usb mouse. Now the ps/2 mouse does not work, even after reboot. What should I do? - Gergely

4 5

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss