Discuss

discuss@lists.centos.org

34753 discussions

Adding SAMBA users in Centos 5.5
by Peter Crighton 11 Nov '10

11 Nov '10

I have SAMBA working on Centos 5.5 - I can see and access my "home" directory from a Windows machine. I have created a new folder to share, changed the owner and group to my username and chcon -t samba_share_t to allow SELinux to share the folder. I can see this folder from Windows but not access it's contents. I think that the key reason is that there is no user assigned to the new share that I have created in SAMBA. I don't seem to be able add users/passwords (at least they don't stay present! In the SAMBA section of Control Panel I have selected my username from the Unix users and added it to SAMBA users with the same password as the Windows machine (and as it happens the Centos machine). Click Apply and OK. When I re-load the SAMBA section of Control Panel my user has disappeared! This didn't happen when I setup a Centos 4.4 machine - all the users are still visible in Control Panel. Without the user available I can't assign it to my new share. Why is my added user disappearing and how can I solve it? (I presume that I can access my "home" share as it is automatically by the username from Windows).

2 3

quota broken for large NFS mount
by Dave 11 Nov '10

11 Nov '10

Should I report this as a bug somewhere? Or is it just a problem with the old fedora box, probably fixed long ago and not relevant to the centos list? On the server side, theme4, a very old fedora box, exports t4d5 via NFS. t4d5 is big, has lots of space, and the user tobiasf has plenty of quota: [root@theme4 ~]# quota -vls tobiasf|grep sdf /dev/sdf1 1312G 4578G 4769G 119k 0 0 [root@theme4 ~]# rpm -q quota nfs-utils;df -lh|grep sdf;uname -a quota-3.12-6 nfs-utils-1.0.7-13.FC4 /dev/sdf1 13T 11T 2.2T 84% /export/t4d5 Linux theme4.soest.hawaii.edu 2.6.17-1.2142_FC4smp #1 SMP Tue Jul 11 22:59:20 EDT 2006 x86_64 x86_64 x86_64 GNU/Linux On the client side, running centos, mounting the NFS partition with automount, quota looks exhausted: [tobiasf@lee1 ~]$ quota -vs Disk quotas for user tobiasf (uid 2797): Filesystem blocks quota limit grace files quota limit grace theme4:/export/t4d5 1312G* 482G 673G 119k 0 0 [tobiasf@lee1 ~]$ uname -a;cat /etc/redhat-release ;df -h|grep t4d5 Linux lee1 2.6.18-194.8.1.el5 #1 SMP Thu Jul 1 19:04:48 EDT 2010 x86_64 x86_64 x86_64 GNU/Linux CentOS release 5.5 (Final) theme4:/export/t4d5 13T 11T 2.2T 84% /home/t4d5 [tobiasf@lee1 ~]$ rpm -q nfs-utils quota nfs-utils-1.0.9-44.el5 quota-3.13-1.2.5.el5 Thanks, Dave

1 2

future modprobe.conf
by Jerry Geis 11 Nov '10

11 Nov '10

centos 5 had modprobe.conf entries for eth0 and if present eth1. something like: alias eth0 forcedeth alias eth1 e1000e For the new centos 6 (I have the rhel 6 client installed on my laptop) the modprobe.conf file is gone. Which is fine. I understand files can be created in /etc/modprobe.d and server the same purpose. My question is I dont see (doing a grep) any eth0 alias's in the files in /etc/modprobe.d/* My reason is when I have a system with 2 ethernet cards I used to have to specify the order of loading. Like: install e1000e /sbin/modprobe forcedeth; /sbin/modprobe --ignore-install e1000e So I used to grep for eth0 and eth1 do get the module names from modprobe.conf. How do I get that information in RHEL 6 since it doesnt seem to be there. Thanks, (just trying to prepare) Jerry

5 4

gmp package installation on CentOS 5.2
by Nastou Panagiotis 11 Nov '10

11 Nov '10

Hello, Last year, I installed CentOS 5.2 on an HP Proliant Server. Along with other packages, the gmp and gmp-devel version 4.1.4 packages were installed. To the best of my knowledge these packages do not come from the gmp team. Recently, I built an rpm package for gmp 5.0.1 for CentOS 5.2. I tried to update the gmp package by command rpm -Uvh gmp-5.0.1-1.x86_64.rpm but the update failed because the libgmp.so.3, libgmpxx.so.3 and the libmp.so.3 are needed from gcc-gfortran, php, php-cli, guile and gmp-devel packages. What kind of dependency exists between these packages and gmp? Could I forced the update without affecting the operation of the above packages? Since It is better to compile gmp 5.0.1 with the more recent gnu c compiler, is it safe to update gcc, gcc-gfortran and gcc-c++ on CentOS 5.2 to the more recent version appeared for CentOS 5.5? Regards, Panagiotis Nastou, Dpt of Mathematics University of Aegean Karlovasi, Samos, Greece

2 1

FW: Permissions issue
by Jason Pyeron 11 Nov '10

11 Nov '10

I am at loss on this mysterious file permission issue. I cannot move the file out of the directory, but I can rename it. I cannot read the file. It is not open by any processes, the filesystem is in read write mode. I am logged in as root. -Jason [root@localhost /]# tar cvzf ~/named.201011111228.tgz --one-file-system /etc/named.conf /var/named/ tar: Removing leading `/' from member names /etc/named.conf /var/named/ /var/named/data/ /var/named/lost+found/ /var/named/slaves/ tar: /var/named/backup.tgz: Cannot open: Permission denied /var/named/chroot/ /var/named/chroot/etc/ /var/named/chroot/etc/named.caching-nameserver.conf <snip/> tar: Error exit delayed from previous errors [root@localhost /]# dir /var/named/backup.tgz -rw------- 1 root root 6651 Nov 11 11:32 /var/named/backup.tgz [root@localhost /]# stat /var/named/backup.tgz File: `/var/named/backup.tgz' Size: 6651 Blocks: 24 IO Block: 4096 regular file Device: fd04h/64772d Inode: 98312 Links: 1 Access: (0600/-rw-------) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2010-11-11 12:28:33.000000000 -0500 Modify: 2010-11-11 11:32:03.000000000 -0500 Change: 2010-11-11 11:32:03.000000000 -0500 [root@localhost /]# mv /var/named/backup.tgz ~ mv: cannot open `/var/named/backup.tgz' for reading: Permission denied [root@localhost /]# chmod 777 /var/named/backup.tgz [root@localhost /]# mv /var/named/backup.tgz ~ mv: cannot open `/var/named/backup.tgz' for reading: Permission denied [root@localhost /]# getfacl /var/named/backup.tgz getfacl: Removing leading '/' from absolute path names # file: var/named/backup.tgz # owner: root # group: root user::rwx group::rwx other::rwx [root@localhost /]# dir /var/named/backup.tgz -rwxrwxrwx 1 root root 6651 Nov 11 11:32 /var/named/backup.tgz [root@localhost /]# setfacl -b /var/named/backup.tgz [root@localhost /]# dir /var/named/backup.tgz -rwxrwxrwx 1 root root 6651 Nov 11 11:32 /var/named/backup.tgz [root@localhost /]# getfacl /var/named/backup.tgz getfacl: Removing leading '/' from absolute path names # file: var/named/backup.tgz # owner: root # group: root user::rwx group::rwx other::rwx [root@localhost /]# mv /var/named/backup.tgz ~ mv: cannot open `/var/named/backup.tgz' for reading: Permission denied [root@localhost /]# mount <redact> No readonly mounts </redact> [root@localhost /]# df -h <redact> Each filessytem has plenty of free space </redact> [root@localhost /]# dir /var/named/ total 72 drwxr-x--- 6 root named 4096 Nov 11 11:32 . drwxr-xr-x 24 root root 4096 Apr 1 2010 .. -rwxrwxrwx 1 root root 6651 Nov 11 11:32 backup.tgz drwxr-x--- 6 root named 4096 Nov 11 11:48 chroot drwxrwx--- 2 named named 4096 Jan 18 2010 data drwx------ 2 root named 16384 Feb 4 2009 lost+found drwxrwx--- 2 named named 4096 Jan 18 2010 slaves [root@localhost named]# /etc/init.d/named stop Stopping named: . [ OK ] [root@localhost named]# mv backup.tgz foo [root@localhost named]# mv foo backup.tgz [root@localhost named]# mv backup.tgz ~ mv: cannot open `backup.tgz' for reading: Permission denied [root@localhost named]# lsof | grep backup.tgz [root@localhost named]# -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Principal Consultant 10 West 24th Street #100 - - +1 (443) 269-1555 x333 Baltimore, Maryland 21218 - - - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- This message is copyright PD Inc, subject to license 20080407P00.

3 5

dictonary attacks
by PA 11 Nov '10

11 Nov '10

Hi hoping someone can help me a little with this one. I have 2 mail servers, the incoming mail server runs dovecot and the outgoing mail server runs postfix with sasl. Lately I noticed a lot of spammers are running dictionary attacks on my incoming server and then using that user/password for sasl on the outgoing server. The weird thing is I never see on the logs the guessed username/password. I always see the ones they can't guess. For example: Looking at the logs I see the following dictionary attack from 94.242.206.37 Nov 10 03:04:38 pop dovecot: pop3-login: Disconnected: rip=94.242.206.37, lip=209.213.66.10 Nov 10 03:04:38 pop dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=209.213.66.10 rip=94.242.206.37 resp=<hidden> Nov 10 03:04:38 pop dovecot: auth(default): shadow(aarhus,94.242.206.37): lookup Nov 10 03:04:38 pop dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=209.213.66.10 rip=94.242.206.37 resp=<hidden> Nov 10 03:04:38 pop dovecot: auth(default): shadow(abaft,94.242.206.37): lookup Nov 10 03:04:38 pop dovecot: auth(default): shadow(abaft,94.242.206.37): unknown user Nov 10 03:04:38 pop dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=209.213.66.10 rip=94.242.206.37 resp=<hidden> Nov 10 03:04:38 pop dovecot: auth(default): shadow(aarhus,94.242.206.37): unknown user Nov 10 03:04:38 pop dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=209.213.66.10 rip=94.242.206.37 resp=<hidden> Nov 10 03:04:38 pop dovecot: auth(default): shadow(aaron,94.242.206.37): lookup Nov 10 03:04:38 pop dovecot: auth(default): shadow(aaron,94.242.206.37): unknown user Nov 10 03:04:38 pop dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=209.213.66.10 rip=94.242.206.37 resp=<hidden> Nov 10 03:04:38 pop dovecot: auth(default): shadow(ababa,94.242.206.37): lookup ..... And so on.. Then that ip gets banned by fail2ban [root@pop ~]# grep 94.242.206.37 /var/log/fail2ban.log 2010-11-10 03:04:42,416 fail2ban.actions: WARNING [dovecot] Ban 94.242.206.37 However on my outgoing mail server that ip is already sending out all sorts of spam with the sasl username of Paramus. This username Paramus never shows up on the dovecot dictionary attack log, as a matter of fact the user Paramus is nowhere to be found on the dovecot log at all and I have logs going back months. /var/log/maillog:Nov 10 02:46:16 mrelay3 postfix/smtpd[27776]: 3B64928015: client=unknown[94.242.206.37], sasl_method=LOGIN, sasl_username=paramus /var/log/maillog:Nov 10 02:47:54 mrelay3 postfix/smtpd[27776]: 247AB28016: client=unknown[94.242.206.37], sasl_method=LOGIN, sasl_username=paramus /var/log/maillog:Nov 10 02:48:00 mrelay3 postfix/smtpd[27785]: 87DE128016: client=unknown[94.242.206.37], sasl_method=LOGIN, sasl_username=paramus /var/log/maillog:Nov 10 02:56:00 mrelay3 postfix/smtpd[27792]: 9728628015: client=unknown[94.242.206.37], sasl_method=LOGIN, sasl_username=paramus /var/log/maillog:Nov 10 03:05:38 mrelay3 postfix/smtpd[27808]: D529F28015: client=unknown[94.242.206.37], sasl_method=LOGIN, sasl_username=paramus /var/log/maillog:Nov 10 03:06:00 mrelay3 postfix/smtpd[27808]: DDF7C2801B: client=unknown[94.242.206.37], sasl_method=LOGIN, sasl_username=Paramus Does anyone have any idea what could of happened here. I mean if the user/passwd was already harvested by 94.242.206.37 why would they bother to start another dict. attack. I'm just not sure how they guess the username/password as its not on any logs that goes back months and I don't have a dovecot fail record for that user on the logs. This is the case all the time for me and it happens with other ips. Any help would be appreciated. paul

2 2

Fwd: ntp help
by tony.chamberlain＠lemko.com 11 Nov '10

11 Nov '10

Hello I am trying to sync via NTP locally (since I have no Internet access). None of the NTP stuff I read on the net seems to work right. I mean it works fine setting up a client going to something like 0.pool.ntp.org but when I want to make my LInux box a server, and I do an ntpdate to it from another machine, it says no suitable server found. I have tried every possible combination of restrict, broadcast, multicast. Followed directions in the examples but nothing works. Also "iptables-save" shows no iptables stuff set at all, so there is no firewall blocking it. Maybe I could ask my question and someone could tell me how to configure? There are 4 machines: 1. 10.5.1.50 2. 10.5.0.20 / 192.168.1.100 3. 10.6.1.50 4. 10.6.0.20 / 192.168.1.101 The 10.5s cannot reach the 10.6s (except roundaboutly through the 192 network). The two 192 machines are connected directly to each other. You can get back and forth between them I want to set it up so that, and it doesn't matter which way), one of the 191.168.1.X machines NTP syncs to the other, and then the 10.5.1.50 syncs to 10.5.0.20 and the 10.6.1.20 syncs to 10.6.0.20. How do I set the ntp.conf files? Remember there is no external internet on any of the machines, and the 10.5 machines cannot reach the 10.6 machines and v.v. (except the 10.X.0.20 machines can reach each other through the 192 network). Also I am not allowed to use the 192 machines as routers for the 10.X.1.50 machines. Thanks

3 2

RHEL Released
by William Warren 11 Nov '10

11 Nov '10

It's on their website right now.

2 1

flash-plugin crashes on full screen
by Rob Kampen 11 Nov '10

11 Nov '10

Hi List. doing my weekly updates with yum last night installed kernel.x86_64 2.6.18-194.17.4.el5.centos.plus and flash-plugin.i386 10.1.102.64-release now today as I go to watch a movie from hulu.com it crashes the flash-plugin whenever I try to go full screen. Anyone else notice this behaviour? I guess I'll try to downgrade flash and see if that fixes the problem. TIA

4 7

kerboros and nfs v4
by m.roth＠5-cent.us 10 Nov '10

10 Nov '10

My mamnager's trying to get nfs v4 working with kerboros. One major issue is that we do *not* have access to the server, or ktadmin - that's the network folks, and they have AD on the other side. The result is that he can't create (if I have this right) objects. I found <http://sadiquepp.blogspot.com/2009/02/how-to-configure-nfsv4-with-kerberos-…>, and he says he's done everything and more. Any pointers, suggestions, etc? mark

2 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss