Discuss

discuss@lists.centos.org

34758 discussions

Backporting and Apache 2.0.52 is 4 1/2 years old
by Rob Townley 23 Mar '09

23 Mar '09

http://httpd.apache.org/security/vulnerabilities_20.html states that Apache 2.0.52 is 4 years old and the latest version is 2.0.68. i am no longer a httpd expert, but at least one of the security fixes involves XSS attacks via malformed ftp commands. I also realize that redhat / centos may patch things separately from Apache and that the sysadmin has a great deal to do with how secure things are, but almost 5 years? Does the sysadmin for www.centos.org get paid?

4 4

OT: centos.org web site not responding
by Lanny Marcus 22 Mar '09

22 Mar '09

The web site for CentOS is not responding. I can ping it OK, but the web site is not responding to http requests from my browser. If the webmaster should happen to read this...

16 73

(no subject)
by Daniel Hays 22 Mar '09

22 Mar '09

Hi there, Could you please remove me from your mailing list? Thank you Daniel _________________________________________________________________ Need a new place to rent, share or buy? Let ninemsn property help. http://a.ninemsn.com.au/b.aspx?URL=http%3A%2F%2Fninemsn%2Edomain%2Ecom%2Eau…

2 1

Being Green, Time to make the servers sleep!
by James Bensley 21 Mar '09

21 Mar '09

Shadies and Mentlemen; I am trying to be green and put our backup servers to sleep during the day and have them wake on LAN and fire back up at night for our nightly backups as "sleep" is a sort of low power usage mode. (At this point I would be curious to know the different levels of sleep, what can I achieve? Does my server just drop into a low power state, or can I stop the hard drives as well?) I am wondering if it is achievable to script the process of putting a server to sleep so I can cron tab its behind! I would assume it would be possible but I don't know how, does anyone have any idea? -----BEGIN GEEK CODE BLOCK----- Version: 3.1 GIT/MU/U dpu s: a--> C++>$ U+> L++> B-> P+> E?> W+++>$ N K W++ O M++>$ V- PS+++ PE++ Y+ PGP t 5 X+ R- tv+ b+> DI D+++ G+ e(+++++) h--(++) r++ z++ ------END GEEK CODE BLOCK------

7 10

fetchmail SSL protoco; issue
by Louis Lagendijk 21 Mar '09

21 Mar '09

I am using fetchmail to collect mail from some secondary mail accounts, among which is hotmail. So far I have used hotwayd to fetch the mail from hotmail using httpmail. Hotmail now supports pop3 access, so I decided to change fetchnail to fetch the mail directly over pop3. This works, but whatever I try, I get an error message when I run fetchmail: Invalid SSL protocol 'SSLv23' specified, using default (SSLv23). Invalid SSL protocol '' specified, using default (SSLv23). The relevant part of my .fetchmailrc is included below (userids and password changed for privacy reasons :-) poll pop3.live.com port 995 proto pop3 user xxxxx(a)hotmail.com password yyyyyy no keep ssl sslproto ssl23 fetchall to myuserid The error message remains almost the same when I remove the sslproto option, only the second line is printed My mail is correctly fetched however. For gmail I use the same setup, but do not get any errors there. Anybody got this working WITHOUT error messages? What am I doing wrong? Louis

2 1

Centos 5.2 ,5.3 and GFS2
by FM 21 Mar '09

21 Mar '09

Hello, I will create a Xen cluster and using GFS2 (with conga, ...) to create a new Xen cluster. I know that GFS2 is prod ready since RHEL 5.3. Do you know whent Centos 5.3 will be ready ? Can I install my GFS2 FS with centos 5.2 and then "simply" upgrade to 5.3 without reinstallation ? Tx

3 2

How to configure Xmanager to CentOS?
by madunix 21 Mar '09

21 Mar '09

Can any help in this issue, it would be really appreciated. I did the following, but it didnt help.... For XDMCP connection to Red Hat 5 EL 1. XDM Configuration 1. Change runlevel to 5 Open/etc/inittab and set the initial runlevel to 5 as following: id:5:initdefault: 2. Enable XDMCP For GDM: Open /etc/gdm/custom.conf and set the Enable entry to 1 in the [xdmcp] section as following. [xdmcp] Enable=1 For KDM: Open /usr/share/config/kdm/Xaccess and remove the initial "#" character for the following line: #* #any host can get a login window ==> * #any host can get a login window Open /usr/share/config/kdm/kdmrc and set the Enable entry to true in the [xdmcp] section as following. [xdmcp] Enable=true 2. Firewall (TCP/UDP Ports) Configuration Open UDP port 177 from the PC to the remote host direction. Open incoming TCP ports 6000~6010 from the remote host to your PC. 3. Reboot the remote host and start Xmanager # init 3; init 5

1 0

pam_access.so restrictions not working - syntax errors?
by Dirk H. Schulz 20 Mar '09

20 Mar '09

Hi folks, I want to restrict root access via ssh to certain (internal) hosts. That is what pam_access.so is for, I thought, so I configured: in /etc/security/access.conf I added (nothing in there before): + : root : 192.168.123.0/24 10.72.0.0/16 - : root : ALL in /etc/pam.d/ssh I added at the end: account required pam_access.so Then I restarted the ssh server. Basically, this kinda works. Cron suddenly had no right to do it's job, so I had to add + : root : LOCAL to /etc/security/access.conf But there still is no restriction on ssh logins by root - I can still login from anywhere. Next I tried putting it in one line in /etc/security/access.conf: - : root : ALL EXCEPT LOCAL 192.168.123.0/24 10.72.0.0/16 That did not change anything, still I can log in via ssh. I am stuck. According to documentation and the examples on the net this should be the right syntax. And, by the way, in my /etc/ssh/ sshd_config I have "UsePAM yes". Any help or hint is appreciated. Dirk

2 1

pam_ldap and nss_ldap failover
by Paul Heinlein 20 Mar '09

20 Mar '09

I'm (finally) getting around to putting a backup LDAP authentication server on my network. The backup uses syncrepl to grab the database, and to my eyes both LDAP servers answer read queries identically. I'm testing the client side of this configuration on virtual CentOS 5 i386 machine. /etc/ldap.conf reads ----- %< ----- base dc=DOMAIN,dc=com timelimit 30 bind_timelimit 30 idle_timelimit 300 nss_initgroups_ignoreusers root,ldap,named,[... trimmed ...] uri ldap://ldap1.DOMAIN.com ldap://ldap2.DOMAIN.com ssl start_tls tls_cacertdir /etc/openldap/cacerts pam_password md5 ----- %< ----- The client will bind to whichever server is listed first after the 'uri' directive. In the config snippet, it's 'ldap1' -- but it works the other way too. If the first-listed server goes away, the client never seems to try to find or bind to the second-listed server (where "never" == my patience limit of about an hour). Once the first-listed server goes away, all password authentication fails, though getent passwd and getent group still work (presumably because of nscd). Has anyone else experienced this or, more importantly, figured out a way to get failover to work in a reasonable timeframe? -- Paul Heinlein <> heinlein(a)madboa.com <> http://www.madboa.com/

2 2

stty and sockets
by Jerry Geis 20 Mar '09

20 Mar '09

With local com ports I can use stty to inspect the port settings. Is there a similiar method with a socket connection? I have an odd situation happening where my data collection program that is working on 3 machines is not working on the 4th. The program opens a socket to remote RS232 device no data is recieved. strangely though if I "telnet IP port" to the device it will send the data on this 4th unit. (odd that it works on 3 units but not the 1). I was thinking there must be something different with the way telnet is setting up the socket than I am setting up the socket. Is there a command or method that can inspect socket options like I can with stty for RS232 lines? If so how? Thanks, Jerry

2 2

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss