Discuss

discuss@lists.centos.org

34753 discussions

dmcrypt on install with centos 5.1?
by Andrew Henry 04 Feb '08

04 Feb '08

Im new to the list and CentOS and wonder if there is any option to do full disk encryption with dmcrypt and LUKS during the install stage of CentOS 5.1? I use Debian Etch at the moment and Debian is able to to this. If not possible, are there any good guides that anyone knows about that explain how to dmcrypt everything but /boot on CentOS manually? --andrew -- GnuPG Key ID: ECB18ABA Fingerprint: FDF3 91FC F5BC 1164 E217 315E 337E 219B ECB1 8ABA

3 3

RE: Strong security in user's accounts and paswords..[SOLVE]
by israel.garcia＠cimex.com.cu 04 Feb '08

04 Feb '08

Hi Mark and thanks for your soon answer.. I found this excellent guide on internet http://www.puschitz.com/SecuringLinux.shtml... here I could fine all I was looking for about securing my database server running on CentOS.. Regards Israel, >I'm running RHEL 4.6 and am using the features you are looking to >implement. PAM is the direction to look. I have included my >/etc/pam.d/system-auth file as example: >#%PAM-1.0 ># This file is auto-generated. ># User changes will be destroyed the next time authconfig is run. >auth required /lib/security/$ISA/pam_env.so ># The following was added on 12-Apr-06 to count failed password >and "su" attempts >auth required /lib/security/$ISA/pam_tally.so onerr=fail no_magic_root ># End of changes >auth sufficient /lib/security/$ISA/pam_unix.so likeauth nullok>> auth required /lib/security/$ISA/pam_deny.so >account required /lib/security/$ISA/pam_unix.so ># The following was added on 12-Apr-06 to count failed password >and "su" attempts >account required /lib/security/$ISA/pam_tally.so per_user >deny=3 no_magic_root reset # End of changes >account sufficient /lib/security/$ISA/pam_succeed_if.so uid < 100 quiet >account required /lib/security/$ISA/pam_permit.so #password requisite /lib/security/$ISA/pam_cracklib.so retry=3 #password requisite /lib/security/$ISA/pam_cracklib.so retry=3 minlen=10 ucredit=-2 lcredit=-2 dcredit=-2 ocredit=-2 difok=3 # Changed to 15 character length password password requisite /lib/security/$ISA/pam_cracklib.so retry=3 minlen=15 ucredit=-2 lcredit=-2 dcredit=-2 ocredit=-2 difok=3 # Remember the last 15 passwords password sufficient /lib/security/$ISA/pam_unix.so nullok use_authtok md5 shadow remember=15 password required /lib/security/$ISA/pam_deny.so session required /lib/security/$ISA/pam_limits.so session required /lib/security/$ISA/pam_unix.so ~ I haven't dealt with this for a while so there my be other changes required. This should be a start for a search with your favorite search engine.

1 0

Re: [CentOS] Re: Monitor power save question
by David G. Miller 04 Feb '08

04 Feb '08

I wrote and now I'm answering my own post: > nate" <centos(a)linuxpowered.net> wrote: >> > David G. Miller wrote: >> > >> > >> >>>> >> > >>>> >> > Section "Device" >>>> >> > Identifier "Videocard0" >>>> >> > Driver "vesa" >>>> >> > EndSection >>>> >>> >> >>> >> > >> > [..] >> > >> > >> >>>> >> > and the video card is (this is a single card that shows up twice in lspci): >>>> >> > >>>> >> > 04:00.0 VGA compatible controller: ATI Technologies Inc RV516 [Radeon >>>> >> > X1300/X1550 Series] (prog-if 00 [VGA]) >>>> >>> >> >>> >> > >> > any particular reason why your using the vesa driver on what seems to >> > be a fairly recent ATI card instead of the ATI specific drivers? Perhaps >> > the vesa driver doesn't work as well with power management(never used it >> > myself for very long). >> > >> > I'd try the ATI drivers and see if it fixes the behavior, you'll probably >> > get much better performance at the same time, with perhaps a bit less >> > stability depending on what you do. >> > >> > nate >> > It's what the install configurator came up with and the ati driver > doesn't work with this video card (output from startx): > > ... > (WW) RADEON: No matching Device section for instance (BusID PCI:4:0:1) found > (WW) R128: No matching Device section for instance (BusID PCI:4:0:1) found > (EE) No devices detected. > > Fatal server error: > no screens found > XIO: fatal IO error 104 (Connection reset by peer) on X server ":0.0" > after 0 requests (0 known processed) with 0 events remaining. > > I like getting a new install stable and fully functional with open > source drivers before introducing perturbations like using a proprietary > display driver. That being said, I just installed the ATI proprietary > driver. So far the system is stable. I'll see whether the monitor > correctly goes to a low power mode tonight. The ATI proprietary driver seems to have fixed the problem. The monitor was in power save mode when I checked it this morning. The ATI Linux Driver wiki at http://wiki.cchtml.com/index.php/Red_Hat_Enterprise_Linux is very badly out of date. It has lots of dire warnings about things not working, work arounds required, etc. I pulled down the driver package from the ATI site, ran it to create a Red Hat rpm and installed the RPM. After I rebooted, everything just worked. I added some comments to the wiki to indicate that the problems described there only apply to RHEL/CentOS 5.0. Upgrading a 5.0 install to 5.1 or installing from 5.1 images and then installing the ATI proprietary driver is a piece of cake. It would be nice if the open source "ati" display driver got extended to include more recent ATI video cards. I'm now running a "tainted" kernel since I have the proprietary fglrx kernel module. Unfortunately, as with how this thread got started, lots of functionality isn't there with the "vesa" display driver. Cheers, Dave -- Politics, n. Strife of interests masquerading as a contest of principles. -- Ambrose Bierce

1 0

Re: [CentOS] One approach to dealing with SSH brute force attacks.
by Les Bell 04 Feb '08

04 Feb '08

mouss <mouss(a)netoyen.net> wrote: >> If you consider this security through obscurity, then why not publish the list of your users on a public web page? after all, you should use strong passwords, so why hide usernames? << Usernames are comparatively hard to guess, and chosen from a large space - although email addresses often provide a huge clue. By contrast, there are only 64K port numbers (and only 1K privileged ports, all of which will be scanned by default with nmap) - and to make it worse, the attacker only has to telnet or nc to a port and sshd will obligingly send back its version number and protocol version info as plaintext. So, the added "obscurity" is effectively zero. I sort of half-buy the log volume/noise argument, but rate-limiting and good analysis tools deal with this as well. And it does nothing for the stress level, since the serious adversary will see through your non-standard port number in seconds. Best, --- Les Bell, RHCE, CISSP [http://www.lesbell.com.au] Tel: +61 2 9451 1144 FreeWorldDialup: 800909

3 2

Strong security in user's accounts and paswords..
by israel.garcia＠cimex.com.cu 04 Feb '08

04 Feb '08

Hi, I have some databases running on CentOS4 with users accessing the shell (bash), so I'd like to strong the security on my server in user's accounts and passwords.. I mean, enforcing strong passwords, min/max age passwords, locking passwords when you fail 3 times, and all this stuff. Is there any package which do this work? Any tutorial? Thanks in advance Regards Israel

2 1

CentOS 5 loses ip address (newbie question)
by frankly3d-centos 04 Feb '08

04 Feb '08

Reserved ip in 192.168.x.x range for CenOS 5 (Samba Server) loses samba clients due to eth0 losing it's ip. eth0 Link encap:Ethernet HWaddr 00:04:61:72:AB:98 inet addr:169.254.66.122 Bcast:169.254.255.255 Mask:255.255.0.0 inet6 addr: fe80::204:61ff:fe72:ab98/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1492 Metric:1 RX packets:60058 errors:0 dropped:0 overruns:0 frame:0 TX packets:66564 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:11387965 (10.8 MiB) TX bytes:45451041 (43.3 MiB) Interrupt:193 lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:23 errors:0 dropped:0 overruns:0 frame:0 TX packets:23 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:2340 (2.2 KiB) TX bytes:2340 (2.2 KiB)

7 7

Overclocking core 2 duo on centos 5
by Ern jura 04 Feb '08

04 Feb '08

Anyone out there ever overclocked core 2 duo on centos 5

2 1

cannot rewrite shadow password file
by Samuel Rochas 04 Feb '08

04 Feb '08

Hi, I run Centos 4. I can't add users using the adduser command, I get this error: adduser: cannot rewrite shadow password file I can't change the users passwords with passwd, I get this error: passwd: Authentication token manipulation error What is wrong? Thank you Samuel

5 13

CentOS 5.1 on Dell R200 with 6iR?
by Plant, Dean 04 Feb '08

04 Feb '08

Hello list, Can anyone confirm if CentOS 5.1 works happily on a Dell R200 with a SAS 6iR RAID controller. Thanks Dean

2 1

Java and Xalan
by http://www.pas-world.com 04 Feb '08

04 Feb '08

Hello, I have some problems running some tools of java in CentOS. Anyone know where is the problem for this? > [jv@localhost ~]$ java org.apache.xalan.xslt.Process > Exception in thread "main" java.lang.NoClassDefFoundError: org.apache.xalan.xslt.Process > at gnu.java.lang.MainThread.run(libgcj.so.7rh) > Caused by: java.lang.ClassNotFoundException: org.apache.xalan.xslt.Process not found in gnu.gcj.runtime.SystemClassLoader{urls=[file:./], parent=gnu.gcj.runtime.ExtensionClassLoader{urls=[], parent=null}} > at java.net.URLClassLoader.findClass(libgcj.so.7rh) > at gnu.gcj.runtime.SystemClassLoader.findClass(libgcj.so.7rh) > at java.lang.ClassLoader.loadClass(libgcj.so.7rh) > at java.lang.ClassLoader.loadClass(libgcj.so.7rh) > at gnu.java.lang.MainThread.run(libgcj.so.7rh) > [jv@localhost ~]$ Thanks in advance. -- -- Publicidad http://www.pas-world.com

2 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss