Discuss

discuss@lists.centos.org

34753 discussions

How to dump mails via HTTP
by gigzbyte 07 Dec '10

07 Dec '10

Hello everyone! How can i dump with human-readable format all e-mails sent and received via HTTP web-interface, for example, via aol.com or gmail.com - it's just examples, there's own mail service, but not under control. Connections to web-iface not secured with HTTPS, pure HTTP. In case of POP3/SMTP - i can successfully dump it with mailsnarf from dsniff rpm. Please, help with something! Sorry, english is not my native language :-) -- -------------------------------------- With regards, Dmitry Lock Network Engineer Customer Support Service PTC Center

1 0

pam_time.so and /etc/security/time.conf
by James B. Byrne 06 Dec '10

06 Dec '10

I have done a bit of experimenting and I am confused respecting the evident behaviour of this module. If I do this: sshd;*;*;Wk0700-1500 Then all user ids fail to log in (at the present time). However, if I add this: sshd;*;user01;Al0000-24000 sshd:*:*:Wk0700-1500 Then I get the same result for user01. If I do this instead: sshd:*:*:Wk0700-1500 sshd;*;user01;Al0000-24000 Then I also get the same result for user01; Forced disconnection. The inference I draw is that the time.conf file is processed until either a failure or the end of the file is encountered, which then counts as a success. Is this right? The manual pages and examples give no hint that this is what happens. They state in fact that sshd;*;user01;Al0000-24000 should always let user01 login. And that clearly does not happen. Is there something that I am doing wrong here? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Coolkey and esc and "SmartCard"s, oh, my
by m.roth＠5-cent.us 06 Dec '10

06 Dec '10

What's happening: I put my "SmartCard" in the reader, and the Coolkey phone home window pops up. I close it, and the SmartCard manager window pops up, saying it's not initialized. Neither of these should be happening with these cards (US federal gov't issue, not DoD). Googling, I find <https://rhn.redhat.com/errata/RHBA-2010-0068.html>, and in that, it says (in part): Excerpt: * the Red Hat Enterprise Security Client (ESC) incorrectly identified CAC cards as CoolKey cards, and mistakenly opened the Phone Home dialog after doing so. With this update, CoolKey correctly identifies CAC cards and assigns the correct functionality to them. With this fix, it is still possible to view certificates and diagnostics for CAC cards, though the management functions are now disabled. Finally, note that the RHBA-2010:0066 esc update must be installed in order to fully resolve this issue. (BZ#499976) --- end excerpt --- It appears to be bug: 226790. So, it sounds *exactly* like what's happening to me... except it's not fixed. Note also the reference to the esc update. a) it refers to 1.1.0.12.el5 of esc, and I have 1.1.0.12.el5, and I find and go to <https://rhn.redhat.com/errata/RHBA-2010-0066.html> which says this file is outdated, and b) this link is *wrong* - it reads File outdated by: RHSA-2010:0501, which has nothing to do with esc, but is a firefox critical fix. Anyone have any experience with this? This card should *never* be calling home.... mark

1 0

pam_time.so and /etc/security/time.conf
by James B. Byrne 06 Dec '10

06 Dec '10

I am investigating how to limit user logins via sshd to specific times of day. I have the basic syntax but what I want to know is how does pam_time.so process time.conf. Say I have a clutch of users that should login between 07:00 and 18:00 Monday to Friday. I infer that the following will handle that: sshd;*;*,Wk0700-1800 However, what is not clear to me is how does one permit certain userids additional login periods while handling the majority of users as above. Say user01 should also be allowed to logon during Saturday mornings Sa0800-1200 and early evenings the rest of the week wk1830-2100 Do I do this? sshd:*;user01;AL1830-2100&Wk0700-1800&Sa0800-1200 sshd:*:*:Al1830-2100 or will this work? sshd:*:user01:Sa0800-1200 sshd:*:user01:Wk1830-2100 sshd:*:*:Al0700-1800 or will this? sshd:*:*:Al0700-1800 sshd:*:user01:Wk1830-2100 sshd:*:user01:Sa0800-1200 What I am trying to understand is whether the first result encountered, either success or failure, is what is applied to a given login attempt. Or, does the stack progress until success or it ends in which case it fails? Recasting my question: Is it meaningful to have multiple entries for a singe userid, whether explicitly given or as part of a wildcard, contained in time.conf? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

CentOS 6: what's the status?
by Boris Epstein 06 Dec '10

06 Dec '10

Hello listmates, So, what's the story with CentOS 6? It is supposed to be out by now, or coming out soon, or so I heard - but yet there seems to be no mention of it at http://centos.org/ . Does anybody know what's up with that? Thanks. Boris.

8 8

Problem starting PostgreSQL-8.4 with SSL
by James B. Byrne 06 Dec '10

06 Dec '10

I installed PG-8.4 for Redhat from the PG84 repo. Everythign works save only that when I try to enable ssl connections then I get this error: Auto configuration failed 16276:error:0E065068:configuration file routines:STR_COPY:variable has no value:conf_def.c:629:line 207 I have verified that the server key and certificate are present, have the correct ownership (postgres:postgres), permissions (600) and that the certificate is valid. Validity Not Before: Dec 6 17:58:47 2010 GMT Not After : Dec 7 17:58:47 2015 GMT I have checked audit.log and there are no SELinux issues reported. I gather that this is an OpenSSL error of some sort but I have no clue what it means or where to search for the problem. Does anyone here know what this means and how to fix it? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

# chkconfig: kill at run level 3
by Michael D. Berger 06 Dec '10

06 Dec '10

In the control script of my daemon in /etc/init.d?, I have # chkconfig: 35 97 3 The result of this is that I have links: /etc/rc.d/rc1.d/K03... /etc/rc.d/rc3.d/S97... /etc/rc.d/rc5.d/S97... As mentioned in a previous thread, my complex daemon throws an exception when I shutdown. Perhaps things might be better if I had: /etc/rc.d/rc3.d/K03... Might this be a good idea? If so, how can I make it happen automatically? Thanks, Mike.

8 16

2.6.18-194.26.1.el5 NFS4 race conditions?
by Gerhard Schneider 06 Dec '10

06 Dec '10

Are there any known race conditions with 2.6.18-194.26.1.el5 x86_64 and NFS4? Today a user managed to shut down two identical Intel servers by copying a simple text file via NFS4. Reverting back to 17.1 made the error disappear. On other non-identical hardware the error was not reproducible (so it must be a combination of hardware and this special kernel revision). Anybody interested in a kernel dump? It's only 16GB. I could install kernel-debuginfo and try to get something out of the dump.. Gerhard Schneider -- Gerhard Schneider e-Mail:gs@ilsb.tuwien.ac.at Institute of Lightweight Design and Tel.: +43 664 60 588 3171 Structural Biomechanics (E317) Fax.: +43 1 58801 31799 Vienna University of Technology / Austria DVR: 0005886 A-1040 Wien, Gusshausstrasse 27-29 http://www.ilsb.tuwien.ac.at/

1 0

Centos DS and user password change
by Stanislav Vlasov 06 Dec '10

06 Dec '10

[stas@ds ~]$ cat /etc/redhat-release CentOS release 5.5 (Final) [stas@ds ~]$ rpm -qa | grep centos-ds centos-ds-admin-8.1.0-9.el5.centos.1 centos-ds-8.1.0-1.el5.centos.2 centos-ds-base-8.1.0-0.14.el5.centos.2 centos-ds-console-8.1.0-5.el5.centos.2 ds installed for: 1) linux workstations authentication 2) mail (accounts & aliases) 3) samba 4) squid acls Exists several r/o replicas. All services and workstations work with replica, not with main server. Now i need some interface for change user's own password by user. Password change must be on main server. I try login by user to main server, and i can't change own password. Added that ACL (via centos-idm-console): (targetattr = "userPassword") (version 3.0; acl "ChangePass"; allow (write) (userdn = "ldap:///self") and (dns="*.neyvabank.ru") ;) No effect. How i can give rights to users for change passwords? -- Stanislav

2 1

DVD drive ownership/permissions group ownership = mail?
by Dave 06 Dec '10

06 Dec '10

I can change the group ownershipp of the DVD drive, but if I log out & in again it changes back. Is there a way to make a change permanent? How could I figure out what process is changing this back? ls -la /dev/scd0 brw-rw---- 1 root mail 11, 0 Nov 12 15:17 /dev/scd0 mahalo, Dave

3 2

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss