Discuss

discuss@lists.centos.org

34758 discussions

Command limiting with SSH keys and password auth ...
by Ian 30 Jan '08

30 Jan '08

Hi all, I'm trying to do a setup (Centos 4.4), with ssh keys. Ideal is that remote you can enter a limited set of commands with no password "or" you can ssh in with password and get a normal bash prompt. At the moment I have from="::ffff:x.x.x.x",command="/usr/local/bin/allowedcommands.sh" ssh-rsa <restofkey> (allowed commands I do checks for which ones are allowed and will add anything dodgy to check for) in authorized_keys2. This all works with the keys I have, I can do an ssh <server> ls for example (ls being allowed), which works, otherwise it returns nothing if not allowed command is given. Main problem I have is if you enter no command (simply ssh <server>) it also kicks you out, I'd like it to ask for a password if no command is given, and then if correct pass you onto a normal shell. Is such a thing possible, or other avenues to get to the same point ? Thanks in advance, Ian

2 1

RHEL / CentOS Kernel Updates
by Manish Kathuria 30 Jan '08

30 Jan '08

How are the updated kernels released by Red Hat / Cent OS related to the latest vanilla kernels ? Are the changes, new features and drivers, etc. available in the newer kernels also ported to the updated kernels released by Red Hat in their entirety ? For the lifetime of a distribution like RHEL 4 or RHEL 5, Red Hat would stick to the same major and minor number of the kernel and would just change release numbers. What is the relation, if any, between the new kernels and the updates released by Red Hat ? Thanks, -- Manish Kathuria Tux Technologies http://www.tuxtechnologies.co.in/

6 11

How can i share my WAN ip to my LAN?
by Tolun ARDAHANLI 30 Jan '08

30 Jan '08

Hi everybody... How can I share my WAN ip to my LAN? How can I do that I really dont know...:( I am using linux long time ago but this kind I would like to do newly... Can anybody help me about IP sharing in Centos? thanks alot... -- Tolun ARDAHANLI Bilgisayar Muhendisi E-posta:tolun.ardahanli@linux.org.tr Icq:326600 ---------------------------------------------------------------------------- Tolun ARDAHANLI Computer Engineer E-mail:tolun.ardahanli@linux.org.tr Icq:326600

10 22

Bonding two network cards
by Joseph L. Casale 30 Jan '08

30 Jan '08

I am searching the net for instructions on how to do this in CentOS 5.1 but am not 100% sure I am finding a reliable doc. I am doing this remotely and don't have much room for error:) Can anyone point me along here? Thanks! jlc

3 4

Re: [CentOS] Re: Network routes
by Ross S. W. Walker 30 Jan '08

30 Jan '08

Sorry for the top post. The default route is the route applied when no other route matches the destination IP. From that how would you figure out which default route to pick, only if the routes were weighted could you pick between two. If you had two routes with equal weight and the traffic went round robin between them then the originating host will discard half the returning traffic because it's not coming from the same ip it sent it to. No your best bet is probably to do reverse NAT'ing as it is simple to setup and you don't have to worry about default routes and weight. Traffic initiates on 1 gateway and sticks with it for the duration of the session. You can use BGP on the gateways outside interface to load balance or fail-over the default gateway or use round-robin DNS, MX records for mail, etc. -Ross ----- Original Message ----- From: centos-bounces(a)centos.org <centos-bounces(a)centos.org> To: centos(a)centos.org <centos(a)centos.org> Sent: Tue Jan 29 18:03:13 2008 Subject: [CentOS] Re: Network routes on 1/29/2008 2:53 PM Jason Pyeron spake the following: > > >> -----Original Message----- >> From: centos-bounces(a)centos.org >> [mailto:centos-bounces@centos.org] On Behalf Of Ross S. W. Walker >> Sent: Tuesday, January 29, 2008 17:38 >> To: CentOS mailing list >> Subject: RE: [CentOS] Network routes >> >> Jason Pyeron wrote: >>> I am unable to ping NE.TW.RKB.IP1 from an outside network. >>> Other machines >>> which do not have access or routes for NET.WOR.KA.0 respond >> just fine. >>> How do I get it to respond on both NET.WOR.KA.0 and >>> NE.TW.RKB.0 given all >>> default traffic should go through NET.WOR.KA.1 unless it is >>> in reply to >>> traffic from NE.TW.RKB.1 or there is an outage. >>> >>> [root@host20 ~]# route -n >>> Kernel IP routing table >>> Destination Gateway Genmask Flags Metric >>> Ref Use >>> Iface >>> NET.WOR.KA.0 0.0.0.0 255.255.255.0 U 0 >>> 0 0 eth1 >>> 192.168.1.0 0.0.0.0 255.255.255.0 U 0 >>> 0 0 eth0 >>> NE.TW.RKB.0 0.0.0.0 255.255.255.0 U 0 >>> 0 0 eth0 >>> 169.254.0.0 0.0.0.0 255.255.0.0 U 0 >>> 0 0 eth1 >>> 0.0.0.0 NET.WOR.KA.1 0.0.0.0 UG 0 >>> 0 0 eth1 >>> 0.0.0.0 NE.TW.RKB.1 0.0.0.0 UG 20 >>> 0 0 eth0 >>> >>> [root@host20 ~]# ifconfig >>> eth0 Link encap:Ethernet HWaddr 00:17:31:0F:04:AE >>> inet addr:NE.TW.RKB.IP1 Bcast:NE.TW.RKB.255 >>> Mask:255.255.255.0 >>> eth0:pn Link encap:Ethernet HWaddr 00:17:31:0F:04:AE >>> inet addr:192.168.1.20 Bcast:192.168.1.255 >>> Mask:255.255.255.0 >>> eth1 Link encap:Ethernet HWaddr 00:01:03:E9:42:D0 >>> inet addr:NET.WOR.KA.IP2 Bcast:NET.WOR.KA.255 >>> Mask:255.255.255.0 >>> lo Link encap:Local Loopback >>> inet addr:127.0.0.1 Mask:255.0.0.0 >>> >> You can have only 1 default route. >> >> You can use RIP or some other routing protocol to >> advertise defualt routes to the host from the >> gateways based upon route availability or weight, >> or you can deploy reverse NAT'ing on the gateways >> so external IPs will be masqueraded as the >> internal IP of the gateway and thus be routed to >> the appropriate gateway based on which IP they >> arrived on. >> >> -Ross >> > > But I have 2 physical network cards, on 2 different networks. Should they > not both have default routes? > You would think so, but it will confuse the system so bad that traffic won't know where to go. The default route is the route that packets need to take to leave your network to enter the outside world. Every thing under your control should have static routes of some kind, or a routing daemon. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! ______________________________________________________________________ This e-mail, and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution or copying of this e-mail, and any attachments thereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify the sender and permanently delete the original and any copy or printout thereof.

2 2

Re: [CentOS] Resizing a fat filesystem on a USB partition
by Ross S. W. Walker 29 Jan '08

29 Jan '08

Look for gnu parted. There are a couple of live cds out there with it, like "Parted Magic" and others. Parted can resize fat and ntfs file systems among others. -Ross ----- Original Message ----- From: centos-bounces(a)centos.org <centos-bounces(a)centos.org> To: CentOS mailing list <centos(a)centos.org> Sent: Tue Jan 29 17:53:07 2008 Subject: Re: [CentOS] Resizing a fat filesystem on a USB partition > AFAIK, there is no way to "resize" any FAT partition. You have to > delete both partitions and then create a new one. I thought the CD installer came with a utility to resize FAT partitions (albeit in MS DOS)? And this isn't possible in CentOS it self? :-/ Ho hum, thank you very much for the quick answer :-) Dan _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos ______________________________________________________________________ This e-mail, and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution or copying of this e-mail, and any attachments thereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify the sender and permanently delete the original and any copy or printout thereof.

3 2

Duplex Printing
by Clint Dilks 29 Jan '08

29 Jan '08

Hi People, This may be slightly off topic if so please let me know. My situation is I have a bunch of Fedora clients connecting to a CentOS Printer server (setup using cups). I have gone through and used Vendor supplied ppd files where possible. And basic printing is working. But, Duplex printing doesn't. The Printers I am using are mostly Brother / HP with a few MFD's from Konica Minolta. I have configured Duplexing information on both the Printer Server and the Clients but no matter what options are set jobs always come out single sided. The only successful Duplex Job I have been able to print was by using * enscript -DDuplex:true -P mfd_scmsoffice test.txt *Otherwise I have been trying *lp -d mfd_scmsoffice -o sides=two-sided-long-edge test.txt* The Cups versions involved are 1.2.4 (Centos 5 running latest rpms) - Print Server 1.2.12 Fedora Client I have done some searching on the Web and see a fair number of problems with Duplex Printing but no real mention of solutions to this issue. So firstly have people been able to get duplex printing working correctly for lp or lpr ? If not what alternative solutions are people using ? If reliable duplex printing is possible can anyone direct me to some good documentation about this so I can see why my configuration is wrong. I have tried removing the client from the loop completely and still see the behavior when printing from the print server directly. I see that the cups rpms used are a number of versions behind the current stable shown at cups.org so I was considering building rpms using the latest stable source and the spec file that they provide. Is this viable or am I just asking for trouble ? Thank you for your time and any knowledge / experience you are willing to share. Have a nice day.

2 2

Cyrus-Imapd Sieve Unable to connect to server
by Alain Reguera Delgado 29 Jan '08

29 Jan '08

Hi, Do you know if sieve implementation on cyrus-imapd package is working correctly ? When trying to connect to timsieved at localhost with sieveshell I'm getting the following error: $ sieveshell --user=al --authname=cyrus localhost connecting to localhost unable to connect to server at /usr/bin/sieveshell line 169 The configuration on /etc/cyrus.conf is by defult. Port 2000 is listening on all tcp interfaces. This port is not open in Iptables configuration. >From localhost, when trying imtest, authentication works fine ... I'm using auxprop with sasldb2 here in a CentOS 5.0 box. Some idea ? Some related references I'v found: http://lists.linuxcoding.com/rhl/2005/msg03157.html http://www.irbs.net/internet/info-cyrus/0503/0205.html Thank you very much, al.

2 9

Re: [CentOS] Unknown rootkit causes compromised servers
by David Thompson 29 Jan '08

29 Jan '08

"Michael A. Peters" wrote: >> >> I have never understood this. If I have a good, strong password that nobody >> knows, how is changing it to another one an improvement over what I already >> have? > >I agree with you. For user accounts, changing one strong password for another gains you nothing, and may cause people to start writing things down, or choosing trivial passwords which still meet the password strength criteria, or whatever, actually weakening security. However, if you have admins who come into or leave employment, changing privileged account passwords (read: root or equiv) is a necessary activity. Cheers, Dave Thompson UW-Madison

3 2

yum update change kernel auto rebuild drivers centos 5.1
by Jerry Geis 29 Jan '08

29 Jan '08

Is there any "formal" mechanizism by which after a yum update , and kernel change that "drivers" can automatically be recompiled and a service restarted? Do I need to make my own? Thanks, Jerry

4 3

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss