Discuss

discuss@lists.centos.org

34753 discussions

Odd useradd/LDAP behaviour
by Paul Jones 11 Oct '13

11 Oct '13

Hello list, On our CentOS 6.4 machines I've LDAP enabled such that Windows users with the requisite unix attributes can log into the machines. These remote windows users have UID/GID starting at 20000 so are well out of the way of local users. If I now create a local user with useradd, the UID/GID of the local user is the next available number in the range used by the Windows users. This is, users created before setting up LDAP are UID 501, 502 etc, but new users are 200XX. This then potentially causes problems when a new LDAP user is added, as we then have two users with the same UID/GID values. I've resolved this by editing the UID_MAX and GID_MAX fields in /etc/login.defs so the value is below the range used by the windows users. New test user gets UID/GID 503 as expected. I guess specifying the values in the useradd command would also work. So why is LDAP making useradd use the wrong values? Thanks for any suggestions, Paul

2 1

CentOS6.4 and Apple keyboard
by Patrick Bégou 11 Oct '13

11 Oct '13

I have just installed (with kikstart) centOS6.4 on a PC which was previously running OpenSUSE (11.x). This PC has an apple keyboard and I'm unable to setup this keyboard. In .xsession-errors I get this messages : Error: No Symbols named "latin9" in the include file "macintosh_vndr/fr" Exiting Abandoning symbols file "(null)" ** (gnome-settings-daemon:8160): WARNING **: Could not activate the XKB configuration Error: No Symbols named "latin9" in the include file "macintosh_vndr/fr" Exiting Abandoning symbols file "(null)" ** (gnome-settings-daemon:8160): WARNING **: Could not activate the XKB configuration Google found on a RedHat forum that it seams to be an old known bug but do not find any update or workaround. I've several PC using Apple keyboards as users have also Apple laptops and they do not want to work with two different keyboards. Thanks for your help or advices. Patrick

2 2

Centos.org webpage down
by Erick Ocrospoma 11 Oct '13

11 Oct '13

Hi, It seems that centos.org is not working properly, got a 502 bad gateway message. ~ Happy install ! ---- Cellphone : +51 950307809 Blog : http://zerick.me/ LUG : http://www.utpinux.org IRC : zerick About : http://about.me/zerick Linux User ID : 549567

6 7

Port knocking and DNAT rules
by Lists 10 Oct '13

10 Oct '13

So I found an excellent port knocking tutorial using ONLY iptables rules that looks to be among the best I've ever seen. (warning: techno music, tough to read screen, you don't need to type it in because I post a link to script below) http://www.youtube.com/watch?v=0zFQocf7C_0 It works fabulously for simply opening a port to a locally managed service, but I can't seem to get it to work for a PREROUTING/DNAT rule. I've posted the shell script I'm trying to get to work, it should be self-documented. http://chico.benjamindsmith.com/iptables.txt I've confirmed that the logs correctly show port knocking 2, 3, and 4 in /var/log/messages so everything seems to be working golden all the way up to the last line. There are no errors reported when I run this script. The result that I get is that it acts as though packets are being dropped for 15 seconds, then I get connection refused. What am I doing wrong?

1 0

sssd - ldap uid/gid does not match with uid/gids in the openLDAP DS
by Arun Khan 10 Oct '13

10 Oct '13

CentOS 6.4 (amd64) client desktop with SSSD installed+configured to do LDAP AUTH from an openLDAP DS. Groups in LDAP DS -- dsusers (for all users), project1, project2, .... The objective is to give group permissions to directory trees with users belonging to various groups; users thereby inheriting the ACL given to respective groups. Test case -- uid: jdoe, gid: dsusers (primary) On LDAP client workstation - id jdoe shows uid+gid as above. Then I add uid jdoe to the 'project1' group in the openLDAP DS. On the client workstation - id jdoe shows member of 'dsusers' only. Thinking it could be due to local cache, I have deleted the files in /var/lib/sss/db/ and still id jdoe reports member of dsusers only. I have also waited > 5 mins. expecting the client side cache to be updated but still the same issue. jdoe does not show up as member of project1. In order for jdoe to show up as member of 'project1' group, I have to restart sssd. In sssd.conf, in the domain section enumerate=FALSE. I would appreciate any pointers to shorten the client side updates regarding uid+gid association. TIA. -- Arun Khan

2 3

- problem gcc with yum
by Paolo De Michele 10 Oct '13

10 Oct '13

hi all, today, I have this problem: # yum install gcc Loaded plugins: fastestmirror, security Loading mirror speeds from cached hostfile * base: ftp.hosteurope.de * epel: mirror.de.leaseweb.net * extras: ftp.hosteurope.de * updates: ftp.hosteurope.de Setting up Install Process Resolving Dependencies --> Running transaction check ---> Package gcc.x86_64 0:4.4.7-3.el6 will be installed --> Processing Dependency: libgomp = 4.4.7-3.el6 for package: gcc-4.4.7-3.el6.x86_64 --> Processing Dependency: cpp = 4.4.7-3.el6 for package: gcc-4.4.7-3.el6.x86_64 --> Processing Dependency: glibc-devel >= 2.2.90-12 for package: gcc-4.4.7-3.el6.x86_64 --> Processing Dependency: cloog-ppl >= 0.15 for package: gcc-4.4.7-3.el6.x86_64 --> Processing Dependency: libgomp.so.1()(64bit) for package: gcc-4.4.7-3.el6.x86_64 --> Running transaction check ---> Package cloog-ppl.x86_64 0:0.15.7-1.2.el6 will be installed --> Processing Dependency: libppl_c.so.2()(64bit) for package: cloog-ppl-0.15.7-1.2.el6.x86_64 --> Processing Dependency: libppl.so.7()(64bit) for package: cloog-ppl-0.15.7-1.2.el6.x86_64 ---> Package cpp.x86_64 0:4.4.7-3.el6 will be installed --> Processing Dependency: libmpfr.so.1()(64bit) for package: cpp-4.4.7-3.el6.x86_64 ---> Package glibc-devel.x86_64 0:2.12-1.107.el6_4.4 will be installed --> Processing Dependency: glibc-headers = 2.12-1.107.el6_4.4 for package: glibc-devel-2.12-1.107.el6_4.4.x86_64 --> Processing Dependency: glibc-headers for package: glibc-devel-2.12-1.107.el6_4.4.x86_64 ---> Package libgomp.x86_64 0:4.4.7-3.el6 will be installed --> Running transaction check ---> Package glibc-headers.x86_64 0:2.12-1.107.el6_4.4 will be installed --> Processing Dependency: kernel-headers >= 2.2.1 for package: glibc-headers-2.12-1.107.el6_4.4.x86_64 --> Processing Dependency: kernel-headers for package: glibc-headers-2.12-1.107.el6_4.4.x86_64 ---> Package mpfr.x86_64 0:2.4.1-6.el6 will be installed ---> Package ppl.x86_64 0:0.10.2-11.el6 will be installed --> Finished Dependency Resolution Error: Package: glibc-headers-2.12-1.107.el6_4.4.x86_64 (updates) Requires: kernel-headers >= 2.2.1 Error: Package: glibc-headers-2.12-1.107.el6_4.4.x86_64 (updates) Requires: kernel-headers You could try using --skip-broken to work around the problem You could try running: rpm -Va --nofiles --nodigest how can I fix? thanks in advance

4 4

Re: [CentOS] [CEntOS] - problem with iptables
by Paolo De Michele 10 Oct '13

10 Oct '13

you helped me clear ideas thanks for everything 2013/10/10 Reindl Harald <h.reindl(a)thelounge.net> > > Am 10.10.2013 16:13, schrieb Paolo De Michele: > > sorry, but now if I modify /etc/sysconfig/iptables and I add two strings, > > per example: > > > > output omitted > > ----- > > -A INPUT -s ddns.no-ip.org -p icmp -j ACCEPT > > -A INPUT -j DROP > > ------ > > output omitted > > > > and I do: > > > > service iptables save > > and > > restart my iptables firewall, output iptables -L is: > > > > -A INPUT -j DROP > > -A INPUT -s ddns.no-ip.org -p icmp -j ACCEPT > > > > > > why? > > *why* you you mangle around in /etc/sysconfig/iptables > this file is written by "service iptables save" > > this file is *read* at iptables *startup* and written with > the *currently* active rules with "service iptables save" > > man iptables > _______________________________________ > > #!/bin/bash > iptables -P INPUT DROP > iptables -P FORWARD DROP > iptables -F > iptables -X > CHAINS=`cat /proc/net/ip_tables_names 2>/dev/null` > for i in $CHAINS; do iptables -t $i -F; done && echo "Flush OK" || echo > "Flush FAILED" > for i in $CHAINS; do iptables -t $i -X; done && echo "Clear OK" || echo > "Clear FAILED" > for i in $CHAINS; do iptables -t $i -Z; done > iptables -A INPUT -p icmp -s 64.39.31.103 -j ACCEPT > iptables -A INPUT -j DROP > service iptables save > _______________________________________ > > BTW: > nobody but you is using hostnames for iptables-rules because it is a pretty > dumb idea to rely on a working name resolution in realy boot > >

1 0

Keyboard layout change
by Iqbal Aroussi 10 Oct '13

10 Oct '13

Hi All, I have a server acting as Terminal Server, with default US keyboard layout. How can I change keyboard language to another one for a specific user only ? Best Regards Iqbal Aroussi

1 0

[CEntOS] - problem with iptables
by Paolo De Michele 10 Oct '13

10 Oct '13

hi all, I have a problem with iptables on CentOS 6.2. I configured: chkconfig iptables on and the file /etc/sysconfig/iptables if you reboot the machine configurations are not loaded. iptables-L gives me the default configurations (not assigned) if I (a machine booted): service iptables start then then it works. how can I fix? thanks in advance

5 7

Re: [CentOS] SSH login from user with empty password
by Dolev Farhi 10 Oct '13

10 Oct '13

This error is when you ssh in (with PuTTY, for example) without attaching the private key. -------- Original Message -------- Subject: [CentOS] SSH login from user with empty password From: Michael Schultz <m.schultz(a)srz.de> Date: Thu, October 10, 2013 3:44 pm To: centos(a)centos.org Hello list, on a CentOS 6.4 machine I'm creating accounts with empty passwords. Each user's public key is located in <user's home>/.ssh/authorized_keys. When trying to ssh into that machine, following error message is displayed: Permission denied (publickey). In /etc/ssh/sshd_config I've set: PasswordAuthentication no UsePAM no If I set a password for the users, the public key auth works without any problems. Could anyone tell me what I'm missing here? Thanks Michael _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss