Discuss

discuss@lists.centos.org

34753 discussions

ssh-agent autostarting
by Dave 21 Aug '09

21 Aug '09

Hello, I'm trying to get public key authentication working on a client to server connection so i can drop passwords. I've got the keys in place and confirmed they are working. I'm now trying to set up ssh-agent, I read i can do it manually i was looking for a more automated method for users on login. This is not through a gui. Thanks. Dave.

3 2

Repo with bacula for centos 5.3
by For＠ll 21 Aug '09

21 Aug '09

Hi, I was look a yum repository with I add to centos 5.3, where I find bacula with version 2.4.4 or 2.4.4.1 For@ll

2 2

Re: [CentOS] protecting multiuser systems from bruteforce ssh attacks
by J.Witvliet＠MINDEF.NL 21 Aug '09

21 Aug '09

-----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Eugene Vilensky Sent: Thursday, August 20, 2009 10:15 PM To: CentOS mailing list Subject: [CentOS] protecting multiuser systems from bruteforce ssh attacks Hello, What is the best way to protect multiuser systems from brute force attacks? I am setting up a relatively loose DenyHosts policy, but I like the idea of locking an account for a time if too many attempts are made, but to balance this with keeping the user from making a helpdesk call. What are some policies/techniques that have worked for this list with minimal hassle? Hi Eugene, Depends on the number of users (as you mentioned "mutisuser" ) And how strong you want your system to be protected. If its not a couple of thousands, i would suggest: Disabling password-login alltogether, and use keys only. On the other hand, you can also demand that all connection must be made by using a vpn-connection (openvpn/ipsec). After that you can be assured that any attempt is from a local user. Both are a much stronger protection than allow/deny or firewall-mechanisms Hans ______________________________________________________________________ Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten. This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages.

1 0

drbd xen question
by Coert Waagmeester 21 Aug '09

21 Aug '09

Hello all, I am running drbd protocol A to a secondary machine to have 'backups' of my xen domUs. Is it necessary to change the xen domains configs to use /dev/drbd* instead of the LVM volume that drbd mirrors, and which the xen domU runs of? regards, Coert

4 6

Running UML on CentOS?
by Dave 21 Aug '09

21 Aug '09

Hello, I've got a CentOS 5.3 machine that i'd like to virtualize some services on. Currently a reinstall for virtualization isn't doable so i thought about user-mode-linux, UML. Has anyone run this on Centos5? If so, feedback prose and cons appreciated. Thanks. Dave.

2 1

centos 5.1 kickstart CD and intel 82576 driver
by aurfalien＠gmail.com 21 Aug '09

21 Aug '09

Hi all, I've got a Centos 5.1 kickstart that I must continue to use. How can I update the kick start image so that it recognizes Intel gigabit 82576 nic? BTW, I compiled the driver I need and have this igb.ko file. How do I incorporate that into my initrd.img file that I see on the kickstart CD that is probably my kickstart boot OS. Thank you very much in advance. aurf -

1 1

Arg... jdk problem on centos 5
by Chuck 21 Aug '09

21 Aug '09

I have downloaded the EE JDK 5.07 for Linux from Sun. If I try and run java_ee_sdk-5_07-linux.bin as a normal user it works fine and I get the gui installer to appear. However if I run it as root, I get this output and then if hangs indefinitely ultimately requiring a kill -9 to stop: [root@canthus Downloads]# ./java_ee_sdk-5_07-linux.bin Checking available disk space... Checking Java(TM) 2 Runtime Environment... Extracting Java(TM) 2 Runtime Environment files... *** glibc detected *** ./java_ee_sdk-5_07-linux.bin: double free or corruption (!prev): 0x092d52a8 *** ======= Backtrace: ========= /lib/libc.so.6[0x5850f1] /lib/libc.so.6(cfree+0x90)[0x588bc0] ./java_ee_sdk-5_07-linux.bin(GetPublicJREPath+0x6df)[0x8054269] ./java_ee_sdk-5_07-linux.bin(main+0x8f8)[0x804e37c] /lib/libc.so.6(__libc_start_main+0xdc)[0x531e8c] ./java_ee_sdk-5_07-linux.bin(dlopen+0x41)[0x804c9f5] ======= Memory map: ======== <SNIP> ffce7000-ffcfc000 rw-p 7ffffffea000 00:00 0 [stack] ffffe000-fffff000 r-xp ffffe000 00:00 0 Deleting temporary files... Any ideas??? Thx

1 0

httpd .htaccess rewrite for images
by Dave 20 Aug '09

20 Aug '09

Hello, I'm running httpd on a Centos 5.3 machine. I'm trying to use .htaccess to disable direct linking to site images. I've got the following rewrite rule, the domain is test.example.com which is at /var/www/test.example.com under which is a directory called images. RewriteEngine on RewriteCond %{HTTP_REFERER} !^$ RewriteCond %{HTTP_REFERER} !^http://(test\.)?example.com/.*$ [NC] RewriteRule \.(jpg|gif)$ - [F] In my httpd virtual host directive i have: alias /images "/var/www/test.example.com/images" <Directory "/var/www/test.example.com/images"> Options None AllowOverride None order allow,deny Allow from all </Directory> Comments appreciated. Thanks. Dave.

11 12

DNS Server Recommendations
by Hugh E Cruickshank 20 Aug '09

20 Aug '09

Hi All: I am looking for some possible recommendations on the handling of our internal DNS services. First some background... Until recently our entire network was located within a single facility with internal DNS services provided by our CentOS 4.7 (using BIND). While I had problems with DHCP/DNS communications it was basically working. At the beginning of the month we moved the production servers (a couple of RHEL5.3 boxes with a Windows 2008 server) to a new facility connected to the old facility via a VPN. We are still running with our DevSys as the DNS server but I would like to make the two locations at least partially independent. I have been doing some research (probably enough to be really dangerous to myself<g>) and it looks like I need to setup a master/slave setup. Here are my questions... 1. Is the BIND master/slave the appropriate approach? 2. Can I have each subnet be a master for itself and a slave for the other subnet? 3. Any pointers to applicable docs/examples? 4. Can you recommend a "front end" for BIND (we have webmin installed but I have yet to start working with it)? Any and all thoughts, suggestions, criticisms gladly accepted. TIA Regards, Hugh -- Hugh E Cruickshank, Forward Software, www.forward-software.com

6 11

Alternative to logwatch
by Developer 20 Aug '09

20 Aug '09

Hello, I am searching an alternative to logwatch. After too much time spent trying to configure it. I have apache log's in different files and directories, for some reason I can not put logwatch to work. Anyone know and alternative? -- -- -- Publicidad y Servicios http://www.pas-world.com Directorio http://www.precioventa.com Tienda http://informatica.precioventa.com/es/ Autoridad certificadora http://ca.precioventa.com/es/ -- --

2 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss