Discuss

discuss@lists.centos.org

5 participants
34752 discussions

Re: [CentOS] Passwords in plain text
by Richard 18 Jun '18

18 Jun '18

> Date: Monday, June 18, 2018 07:57:56 -0500 > From: Valeri Galtsev <galtsev(a)kicp.uchicago.edu> >> I agree with you .. unfortunately, gmail does not. They have >> enabled it for gmail users .. so if someone from yahoo xends a >> mail from a yahoo address, it gets rejected by gmail accounts. >> The list setting wrt dmarc doesn't matter .. it is totally gmail >> enabling it. >> >> What our settings do is NOT send the From (as the original >> sender), if the sender is on a domain where dmarc is enabled, so >> that gmail does not reject it. >> >> If it is rejected by gmail .. it causes (eventually) .. not he >> sender's, but the recipient's account on gmail to be disabled by >> the mailing list as non-existent. > > I'm surprised no one arrived at conclusion: don't use gmail then. > > Valeri > >> [OT] My (non-gmail) mail hosting provider also enforces the DMARC settings that others put in place, so this isn't (just) a gmail issue. Most people in the field find the p=reject setting that yahoo is using to be less than optimal, and come to the conclusion that the best course of action it to avoid sending mail (specifically to mailing lists) from such providers. All places like my provider and gmail are doing is enforcing the standard. That others have selected poorly considered settings is the fault of the site making those selections, not the site doing the enforcing of the standard. [the DMARC notifications are, in my view, a very serious privacy leak, so it should be avoided, but that's a whole separate off-topic discussion.] - Richard

1 0

Re: [CentOS] Passwords in plain text
by Richard 18 Jun '18

18 Jun '18

> Date: Friday, June 15, 2018 14:55:21 -0700 > From: Akemi Yagi <amyagi(a)gmail.com> > > On Fri, Jun 15, 2018 at 9:57 AM, Gianluca Cecchi > <gianluca.cecchi(a)gmail.com> wrote: >> >> Il Ven 15 Giu 2018, 18:45 Larry Martell <larry.martell(a)gmail.com> >> ha scritto: >> >>> On Fri, Jun 15, 2018 at 12:41 PM rj coleman >>> <rjcdevelop(a)gmail.com> wrote: >>> >>> > Am I the only one who just received this email from this group? >>> > Which came with my password in the email in plain text? > >>> > > Your membership in the mailing list CentOS has been disabled >>> > > due to excessive bounces The last bounce received from you >>> > > was dated 15-Jun-2018. You will not get any more messages >>> > > from this list until you re-enable your membership. You will >>> > > receive 3 more reminders like this before your membership in >>> > > the list is deleted. >>> > > >>> I got it as well. >>> >> Mee too > > I also received the "has been disabled" notification. It looks like > users with gmail addresses are affected. > > CentOS admins are looking into this issue (I believe). > > Akemi I believe this is a DMARC issue. Yahoo, among other places, has set their dmarc records to p=reject: dig +short txt _dmarc.yahoo.com "v=DMARC1; p=reject; pct=100; rua=mailto:dmarc_y_rua@yahoo.com;" So, if your mail hosting provider enforces dmarc,(gmail does) and you get mail from a list that doesn't rewrite the headers, and people from places like yahoo post to the list, you'll likely get some form of warning about being being kicked off the mailing list every now and then. The frequency depends on how often people from p=reject places post, and what the settings are for bounce handling of the mailing list in question. I believe that the current version of mailman can be configured to do the necessary header rewrites. Some lists I'm on only do the rewrites for headers of posts coming from p=reject sites (much less annoying than having them all rewritten).

8 12

DMARC test , please ignore (eom)
by Fabian Arrotin 18 Jun '18

18 Jun '18

1 0

wildcard certificate
by Jerry Geis 16 Jun '18

16 Jun '18

Hi all - I am trying to figure out how to add a wild card certificate given to me for a CentOS installation. I have a script that sets up HTTPS so I am a little familiar with things - but they provided me two files: name_ee.crt name_i1.crt I'm not sure how to apply that to the /etc/httpd/conf.d/ssl.conf file? Anyone done that before ? My initial searches were not helpful. Thanks, Jerry

5 8

CentOS-announce Digest, Vol 160, Issue 4
by centos-announce-request＠centos.org 16 Jun '18

16 Jun '18

1 0

About the membership issue
by Leon Fauster 16 Jun '18

16 Jun '18

Concerning the disabled membership (yesterday). Is there anything that I should do? Visiting the "re-enable" link shows only a plain site with meta information about the list but without any feedback like "membership enabled". Albeit some postings are coming in again now (with "normalized" sender address <centos(a)centos.org>). Seems the work to resolve this issue is in progress ... -- Thanks LF

3 5

Passwords in plain text
by rj coleman 16 Jun '18

16 Jun '18

Am I the only one who just received this email from this group? Which came with my password in the email in plain text? Begin forwarded message: > From: centos-request(a)centos.org > Date: June 15, 2018 at 12:31:04 PM EDT > To: rjcdevelop(a)gmail.com > Subject: confirm a8e9e592b9d81e13e569ffa9f6f4267c3f2a8fe8 > > Your membership in the mailing list CentOS has been disabled due to > excessive bounces The last bounce received from you was dated > 15-Jun-2018. You will not get any more messages from this list until > you re-enable your membership. You will receive 3 more reminders like > this before your membership in the list is deleted. > > To re-enable your membership, you can simply respond to this message > (leaving the Subject: line intact), or visit the confirmation page at > > https://lists.centos.org/mailman/confirm/centos/a8e9e592b9d81e13e569ffa9f6f… > > > You can also visit your membership page at > > https://lists.centos.org/mailman/options/centos/rjcdevelop%40gmail.com > > > On your membership page, you can change various delivery options such > as your email address and whether you get digests or not. As a > reminder, your membership password is > > Removed For Security > > If you have any questions or problems, you can contact the list owner > at > > centos-owner(a)centos.org

9 10

shellinabox via proxy(apache)
by lejeczek 15 Jun '18

15 Jun '18

hi guys, cannot get it to work - shellinabox - not being programmer nor selinux sorcerer. shellinabox via apache, when I ausearch it all I get is: #============= unconfined_service_t ============== #!!!! The file '/usr/bin/bash' is mislabeled on your system. #!!!! Fix with $ restorecon -R -v /usr/bin/bash allow unconfined_service_t unconfined_t:process transition; I have shellinabox in Apache's: <Location /cmd> AuthType Basic AuthName "some more" AuthBasicProvider PAM AuthPAMService rstudio Require valid-user #Require all granted ProxyPasshttp://localhost:4200/ </Location> using: LoadModule authnz_pam_module modules/mod_authnz_pam.so So all seems to work there between apache & shellinabox. Last bit when you login to shell you get denied. I also see: $ ps -FZp 2909167 --cols 999 LABEL UID PID PPID C SZ RSS PSR STIME TTY TIME CMD system_u:system_r:unconfined_service_t:s0 shellin+ 2909167 1 0 10785 2740 7 Jun11 ? 00:00:00 /usr/sbin/shellinaboxd -u shellinabox -g shellinabox --cert=/var/lib/shellinabox --port=4200 --localhost-only --disable-ssl So it seems that shellinabox runs unconfined and the centos' policy forbids transitions between unconfined domains. Would that be right? Many thanks, L.

1 0

CentOS7: Setting up ldap over TLS in kickstart file
by Patrick Begou 15 Jun '18

15 Jun '18

Hi, I'm facing a problem with setting up LDAP+TLS client authentication in a kickstart script on CentOS7 for several days. Setting up manualy the config with system-config-authentication works but I need to automate this in kickstart for deploying cluster nodes. This show that the server side is running fine. At this time the message is #systemctl status sssd |.... sssd[be[default]][2732]: Could not start TLS encryption. error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed (self signed certificate)| In my kickstart file I use: auth --useshadow --enableldaptls --enablecache --passalgo=sha512 --enableldap --enableldapauth --ldapserver="ldaps://my.ldap.server.fr" --ldapbasedn=dc=my,dc=base,dc=dn Then in a post install script I download the server and ca certificates and stops nslcd that I do not use: echo "TLS_REQCERT allow">>/etc/openldap/ldap.conf cd /etc/openldap/cacerts/ && wget http://xxx.xxx.xxx.xxx/Softwares7/LDAPCERTS/ca-bundle.crt && ln -s ca-bundle.crt $(openssl x509 -hash -in ca-bundle.crt -noout).0 cd /etc/openldap/certs/ && wget http://xxx.xxx.xxx.xxx/Softwares7/LDAPCERTS/server.crt cd / systemctl disable nslcd I'm unable to see what system-config-authentication is doing more in it's setup. Thanks for your help Patrick |||| || -- =================================================================== | Equipe M.O.S.T. | | | Patrick BEGOU | mailto:Patrick.Begou@grenoble-inp.fr | | LEGI | | | BP 53 X | Tel 04 76 82 51 35 | | 38041 GRENOBLE CEDEX | Fax 04 76 82 52 71 | ===================================================================

3 3

CentOS-announce Digest, Vol 160, Issue 3
by centos-announce-request＠centos.org 15 Jun '18

15 Jun '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2018:1838 CentOS 7 linux-firmware BugFix Update (Johnny Hughes) 2. CESA-2018:1836 Important CentOS 7 plexus-archiver Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 14 Jun 2018 15:09:26 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2018:1838 CentOS 7 linux-firmware BugFix Update Message-ID: <20180614150926.GA32842(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2018:1838 Upstream details at : https://access.redhat.com/errata/RHBA-2018:1838 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 940bc02535d7fd581dba6d53f939ed13dbf9a7cb78f23a22db0b94d6dbdbc980 iwl1000-firmware-39.31.5.1-62.2.el7_5.noarch.rpm 722a5873cbe15ee2c12aaac92f04ec012daca4b9d524037d358ebeeeb9e3f65b iwl100-firmware-39.31.5.1-62.2.el7_5.noarch.rpm 21a7b490b6736e116524cb3c6b676a8428323d6c90dee62694bb9b73cd86e1d9 iwl105-firmware-18.168.6.1-62.2.el7_5.noarch.rpm 0838322f12f12d545404810b33a006f7d9e981e1d9e758de14b7a8aadb143d4d iwl135-firmware-18.168.6.1-62.2.el7_5.noarch.rpm d0190f3079c3b729cefdb4fbdbfaea858778cce7d7214d636595657bdd4c43b4 iwl2000-firmware-18.168.6.1-62.2.el7_5.noarch.rpm c7a7cc8c5195e291ffc2ff8b647e642135f050611379e86c1d9c980439b80c67 iwl2030-firmware-18.168.6.1-62.2.el7_5.noarch.rpm a7f1d6426f6bd1440610f0b929971737c9fc24039bf88413cb43e21ad4ae1657 iwl3160-firmware-22.0.7.0-62.2.el7_5.noarch.rpm 12d43466da1c3c8055403ddcac8b4efba651ee35393fba897162cf86abcf0e0e iwl3945-firmware-15.32.2.9-62.2.el7_5.noarch.rpm 6fd48dfeef9416d6fa7636a89be2875c892335d89af6970b62aede43a8dc5e5c iwl4965-firmware-228.61.2.24-62.2.el7_5.noarch.rpm 5d5ff923fe6beb5904d43a5660b2f65d14a88fb5ae2f865ea10d2e17115a7360 iwl5000-firmware-8.83.5.1_1-62.2.el7_5.noarch.rpm 5ae3fa0eab138bb889e46725795724617047134f1c5c04113e6235c16761ee4c iwl5150-firmware-8.24.2.2-62.2.el7_5.noarch.rpm 8136f0d62b4419c840f101ca64c93e334ad6aa92e3e3d6fff37620069308f5b1 iwl6000-firmware-9.221.4.1-62.2.el7_5.noarch.rpm a0f96e3088e72ab8de9846ee75bc6460116b73b77db1bcdacde1a00dd1f7a076 iwl6000g2a-firmware-17.168.5.3-62.2.el7_5.noarch.rpm 5cbe19cd8a9be34c3ece1ea1ded527db0ccd5f8919c8a6b9ce29358b7dedc4ac iwl6000g2b-firmware-17.168.5.2-62.2.el7_5.noarch.rpm 8d7274ccd14611cb5214163c944b2834330984aa5906b68a49e28a8b82b8f7c1 iwl6050-firmware-41.28.5.1-62.2.el7_5.noarch.rpm 73ad0e98045b5da8a2600789197ec98c58ee605d83c3c24547bd8e498bdc9072 iwl7260-firmware-22.0.7.0-62.2.el7_5.noarch.rpm 03a7febf9a8380d07216ef53dd9d7ef78a684a61acc8006916d515d9cdb23583 iwl7265-firmware-22.0.7.0-62.2.el7_5.noarch.rpm b3eae0bc8cf3c427455ce5108efe07c3a76b7cdf8a3ad69342720b716b9ce864 linux-firmware-20180220-62.2.git6d51311.el7_5.noarch.rpm Source: b23b4d21947a38e5fb5353c3b49ee8d271cd779ad6ecb6509472c5bf345658e8 linux-firmware-20180220-62.2.git6d51311.el7_5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Thu, 14 Jun 2018 15:10:15 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:1836 Important CentOS 7 plexus-archiver Security Update Message-ID: <20180614151015.GA32924(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:1836 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:1836 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 9c26560f7b175d6e1455a7b9edf9c56be74c06a98f91074a36c3944a51ea110e plexus-archiver-2.4.2-5.el7_5.noarch.rpm 098c29d9f8e0b7703e1ded196eaa5ec3cbc68521fb4a46c9563cba2a9ceb7649 plexus-archiver-javadoc-2.4.2-5.el7_5.noarch.rpm Source: 3efde77b61ff8ce194ff060488b029ffbf3d465c8b9192b227ba8e3923d2d9ff plexus-archiver-2.4.2-5.el7_5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 160, Issue 3 ***********************************************

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss