Discuss

discuss@lists.centos.org

34753 discussions

CentOS 4: top default "solaris mode"
by Alan Sparks 02 Nov '06

02 Nov '06

Is there a way to default "top" to Solaris mode for all users (without using a .toprc in every user's home dir)? We're not big fans of >100% CPU usage stats... Thanks. -- Alan Sparks, UNIX/Linux Systems Integration and Administration <asparks(a)doublesparks.net>

2 3

RE: [CentOS] mppe support in kernel-2.6.9-42.0.3.EL
by Ian Anderson 02 Nov '06

02 Nov '06

I would second this suggestion. We use OpenVPN to control access to our management network and it works really well. We currently manage over 50 people with VPN keys and the list is growing. The only drawback is that there isn't a very good web based GUI to administer your keys. When you have a security team consisting of 10 people, it can be a bit of a pain relying on bash scripts for key generation/revocation. -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Alex Palenschat Sent: Thursday, November 02, 2006 1:39 PM To: CentOS mailing list Subject: RE: [CentOS] mppe support in kernel-2.6.9-42.0.3.EL > > MPPE required, but kernel has no support. > > > > Can anyone help me with getting this module for the 2.6.9-42.0.3.EL > > kernel??? > > > MPPE can cause you much heartache (as I learned the hard way > at my last > job...). I'd recommend using the dkms packages that PoPTop provide > (http://sourceforge.net/project/showfiles.php?group_id=44827) > > The first section of this FC faq at pptpclient outlines the > steps to get > it installed > (http://pptpclient.sourceforge.net/howto-fedora-core-4.phtml) > > -Shawn Or you could just use the very fast/modern/more secure openvpn package from DAG's repository. Loads up very easily with no patching or compatibility issues and can be configured using certificates (no poor user password). The only real added work is loading the client software. Just my 2 cents, Alex _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

RE: [CentOS] mppe support in kernel-2.6.9-42.0.3.EL
by Alex Palenschat 02 Nov '06

02 Nov '06

> > MPPE required, but kernel has no support. > > > > Can anyone help me with getting this module for the 2.6.9-42.0.3.EL > > kernel??? > > > MPPE can cause you much heartache (as I learned the hard way > at my last > job...). I'd recommend using the dkms packages that PoPTop provide > (http://sourceforge.net/project/showfiles.php?group_id=44827) > > The first section of this FC faq at pptpclient outlines the > steps to get > it installed > (http://pptpclient.sourceforge.net/howto-fedora-core-4.phtml) > > -Shawn Or you could just use the very fast/modern/more secure openvpn package from DAG's repository. Loads up very easily with no patching or compatibility issues and can be configured using certificates (no poor user password). The only real added work is loading the client software. Just my 2 cents, Alex

1 0

mppe support in kernel-2.6.9-42.0.3.EL
by Sherwyn Greene 02 Nov '06

02 Nov '06

Hi all I have installed pptpd on my server to run a vpn connection for some clients, but I got this error in the log file MPPE required, but kernel has no support. Can anyone help me with getting this module for the 2.6.9-42.0.3.EL kernel??? Thanks Sherwyn Greene Planner / I.T. Technician Project Controls Dept. Kentz-OJ's E&I Services J.V. +1 (868) 648-0876

2 1

Using perl-Net-SSH-Perl with pubkey authentication under CGI.
by Will McDonald 02 Nov '06

02 Nov '06

Guys, I wonder if anyone can give me any pointers here, I hope it's CentOS related enough not to be too off topic, if it is then apologies. I'm attempting to setup a CGI which can connect to a remote system and execute a command. On the 'client', for the Apache user 'apache' I've given it a shell and generated a key-pair. I've configured Keychain [ http://www.gentoo.org/proj/en/keychain/ ] to load the keys for the apache user and make these persistently available via ssh-agent. I've setup a specific user 'cgissh' on the remote target system and configured its authorized_keys with apache@client's pubkey. >From the client system, running the following script from the shell returns the information I'd expect... [apache@webdev1 cgi-bin]$ cat perl-net-ssh-perl-test.pl #!/usr/bin/perl print "Content-type: text/html\n\n"; print "<HEAD><TITLE>Quick Test</TITLE></HEAD>"; $ENV{HOME} = "/var/www"; $ENV{USER} = "apache"; use Net::SSH::Perl; $sshhost='target'; $sshuser='cgissh'; $sshport='22'; $sshprotocol='2'; $sshdebug='1'; $sshcipher='3des-cbc'; $sshconn = Net::SSH::Perl->new($sshhost, protocol=>$sshprotocol, port=>$sshport, debug=>$sshdebug, cipher=>$sshcipher); $sshconn->login($sshuser); my($out,$err) = $sshconn->cmd('hostname'); print "<HTML>"; print "<BODY>"; print $out; print "</HTML>"; print "</BODY>"; It's definately using the pubkey information from Keychain as the target system ONLY accepts key-based authentication and I'm "su - apache"d to run the script so it's not picking up another users ssh-agent key info from the environment. Attempting to execute the same script as a CGI by accessing http://client/cgi-bin/perl-net-ssh-perl-test.pl results in the following in the logs... [Wed Nov 01 17:10:53 2006] [error] [client 192.168.1.2] clienthostname: Reading configuration data /var/www/.ssh/config [Wed Nov 01 17:10:53 2006] [error] [client 192.168.1.2] clienthostname: Reading configuration data /etc/ssh_config [Wed Nov 01 17:10:53 2006] [error] [client 192.168.1.2] clienthostname: Connecting to manlvs1, port 2251. [Wed Nov 01 17:10:53 2006] [error] [client 192.168.1.2] clienthostname: Remote version string: SSH-2.0-OpenSSH_3.9p1 [Wed Nov 01 17:10:53 2006] [error] [client 192.168.1.2] [Wed Nov 01 17:10:53 2006] [error] [client 192.168.1.2] clienthostname: Remote protocol version 2.0, remote software version OpenSSH_3.9p 1 [Wed Nov 01 17:10:53 2006] [error] [client 192.168.1.2] clienthostname: Net::SSH::Perl Version 1.30, protocol version 2.0. [Wed Nov 01 17:10:53 2006] [error] [client 192.168.1.2] clienthostname: No compat match: OpenSSH_3.9p1. [Wed Nov 01 17:10:53 2006] [error] [client 192.168.1.2] clienthostname: Connection established. [Wed Nov 01 17:10:53 2006] [error] [client 192.168.1.2] clienthostname: Sent key-exchange init (KEXINIT), wait response. [Wed Nov 01 17:10:53 2006] [error] [client 192.168.1.2] clienthostname: Algorithms, c->s: 3des-cbc hmac-sha1 none [Wed Nov 01 17:10:53 2006] [error] [client 192.168.1.2] clienthostname: Algorithms, s->c: 3des-cbc hmac-sha1 none [Wed Nov 01 17:11:30 2006] [error] [client 192.168.1.2] clienthostname: Entering Diffie-Hellman Group 1 key exchange. [Wed Nov 01 17:11:30 2006] [error] [client 192.168.1.2] clienthostname: Sent DH public key, waiting for reply. [Wed Nov 01 17:11:30 2006] [error] [client 192.168.1.2] clienthostname: Received host key, type 'ssh-dss'. [Wed Nov 01 17:11:30 2006] [error] [client 192.168.1.2] clienthostname: Host 'manlvs1' is known and matches the host key. [Wed Nov 01 17:11:30 2006] [error] [client 192.168.1.2] clienthostname: Computing shared secret key. [Wed Nov 01 17:12:07 2006] [error] [client 192.168.1.2] clienthostname: Verifying server signature. [Wed Nov 01 17:12:18 2006] [error] [client 192.168.1.2] clienthostname: Waiting for NEWKEYS message. [Wed Nov 01 17:12:18 2006] [error] [client 192.168.1.2] clienthostname: Enabling incoming encryption/MAC/compression. [Wed Nov 01 17:12:18 2006] [error] [client 192.168.1.2] clienthostname: Send NEWKEYS, enable outgoing encryption/MAC/compression. [Wed Nov 01 17:12:18 2006] [error] [client 192.168.1.2] clienthostname: Sending request for user-authentication service. [Wed Nov 01 17:12:18 2006] [error] [client 192.168.1.2] clienthostname: Service accepted: ssh-userauth. [Wed Nov 01 17:12:18 2006] [error] [client 192.168.1.2] clienthostname: Trying empty user-authentication request. [Wed Nov 01 17:12:18 2006] [error] [client 192.168.1.2] clienthostname: Authentication methods that can continue: publickey,keyboard-interactive. [Wed Nov 01 17:12:18 2006] [error] [client 192.168.1.2] clienthostname: Next method to try is publickey. [Wed Nov 01 17:12:18 2006] [error] [client 192.168.1.2] clienthostname: Trying pubkey authentication with key file '/var/www/.ssh/id_dsa' [Wed Nov 01 17:12:18 2006] [error] [client 192.168.1.2] clienthostname: Will not query passphrase for '/var/www/.ssh/id_dsa' in batch mode. [Wed Nov 01 17:12:18 2006] [error] [client 192.168.1.2] clienthostname: Loading private key failed. [Wed Nov 01 17:12:18 2006] [error] [client 192.168.1.2] Permission denied at /home/clientusername/cgi-bin/perl-net-ssh-per l-test.pl line 18 Why is it failing to load the private key? Do I need to source something from the shell into the Perl script as would with a shell script to use the Keychain agent information? If this was a shell script I'd have used '[[ -f $HOME/.keychain/$HOSTNAME-sh ]] && source $HOME/.keychain/$HOSTNAME-sh'. Additional info: Both systems are up-to-date CentOS 4.4 systems running the default Apache with perl-Net-SSH-Perl and its dependencies from RPMForge. Any pointers greatly appreciated. Will.

3 4

RE: [CentOS] Step by step installing vmware server on centos
by Juan C. Valido 02 Nov '06

02 Nov '06

I'm not to experienced in Linux but I've done that (on 4.4) just let the downloader install it and type vmware. It'll point you to the config file and just follow the instructions, even a windows guy like me could do that, I was sorprised to find it run smoother than in Windows Server 2003. Now if I could just figure out how to export a directory in NFS 3, I could test ESX Server without the expense of SCSI <GRIN> Original Message ----------------------- hi could you please give me a notes to install vmware server on centos i will be thank full to you thanx _________________________________________________________________ Get today's hot entertainment gossip http://movies.msn.com/movies/hotgossip?icid=T002MSN03A07001 _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

CentOS-announce Digest, Vol 21, Issue 1
by centos-announce-request＠centos.org 02 Nov '06

02 Nov '06

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2006:0725 Moderate CentOS 4 ia64 qt - security update (Pasi Pirhonen) 2. CESA-2006:0725 Moderate CentOS 3 qt - security update (Pasi Pirhonen) 3. CESA-2006:0725 Moderate CentOS 3 i386 qt - security update (Tru Huynh) 4. CESA-2006:0725 Moderate CentOS 3 x86_64 qt - security update (Tru Huynh) 5. CESA-2006:0725 Moderate CentOS 3 s390(x) qt - security update (Pasi Pirhonen) 6. CESA-2006:0725 Moderate CentOS 4 s390(x) qt - security update (Pasi Pirhonen) 7. CESA-2006:0725-01: Moderate CentOS 2 i386 qt security update (John Newbigin) 8. CESA-2006:0725 Moderate CentOS 4 i386 qt - security update (Johnny Hughes) 9. CESA-2006:0725 Moderate CentOS 4 x86_64 qt - security update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 1 Nov 2006 23:03:30 +0200 From: Pasi Pirhonen <upi(a)centos.fi> Subject: [CentOS-announce] CESA-2006:0725 Moderate CentOS 4 ia64 qt - security update To: centos-announce(a)centos.org Message-ID: <20061101210330.GA27613(a)centos.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2006:0726 https://rhn.redhat.com/errata/RHSA-2006-0726.html The following updated files have been uploaded and are currently syncing to the mirrors: files: updates/ia64/RPMS/qt-3.3.3-10.RHEL4.ia64.rpm updates/ia64/RPMS/qt-MySQL-3.3.3-10.RHEL4.ia64.rpm updates/ia64/RPMS/qt-ODBC-3.3.3-10.RHEL4.ia64.rpm updates/ia64/RPMS/qt-PostgreSQL-3.3.3-10.RHEL4.ia64.rpm updates/ia64/RPMS/qt-config-3.3.3-10.RHEL4.ia64.rpm updates/ia64/RPMS/qt-designer-3.3.3-10.RHEL4.ia64.rpm updates/ia64/RPMS/qt-devel-3.3.3-10.RHEL4.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

Trouble syncing Palm via USB
by Marc D. Field 02 Nov '06

02 Nov '06

Hi, I'm having trouble getting my Palm to sync with jpilot on my Centos system via USB. When I sync, I get this error in jpilot: pi_accept Illegal seek Exiting with status SYNC_ERROR_PI_ACCEPT Finished I have jpilot syncing fine with this Palm over the network, BTW. For USB, I set things up for udev as described on various websites. Here are the relevant ports & symlink (created and deleted automatically with each sync attempt): lrwxrwxrwx 1 root root 7 Oct 17 09:09 /dev/pilot -> ttyUSB1 crw-rw---- 1 root uucp 188, 0 Oct 17 09:09 /dev/ttyUSB0 crw------- 1 marc uucp 188, 1 Oct 17 09:09 /dev/ttyUSB1 I added myself to the uucp group. It doesn't look like this is a permissions issue, does it? (I saw a message in the list's archives indicating that one must start jpilot as root in order to sync, but this doesn't make sense to me.) Any ideas as to what's going wrong? Are others syncing Palm devices to their Centos boxes via USB (and from normal user accounts)? I have tried other things, such as using a different USB port on the PC, and having jpilot sync to /dev/ttyUSB0 and /dev/ttyUSB1 instead of the /dev/pilot symlink. I've also searched the jpilot mailing list archives, and the web in general, and still no solution. I'm running an up to date Centos 4 system, pilot-link-0.11.8-8, and self-compiled jpilot 0.99.9. Thanks for any help! Marc

3 2

SOLVED: Re: Using perl-Net-SSH-Perl with pubkey authentication under CGI.
by Will McDonald 02 Nov '06

02 Nov '06

On 02/11/06, Will McDonald <wmcdonald(a)gmail.com> wrote: > Guys, I wonder if anyone can give me any pointers here, I hope it's > CentOS related enough not to be too off topic, if it is then > apologies. Thanks to Marc and Ingimar for their suggestions, I think we've cracked it. When Keychain runs it prompts the user for their private key password then stores the ssh-agent information away in ~/.keychain/$hostname-sh and ~/.keychain/$hostname-csh. For example... [root@webdev1 ~]# cat ~apache/.keychain/`hostname`-sh SSH_AUTH_SOCK=/tmp/ssh-yheGAI4188/agent.4188; export SSH_AUTH_SOCK; SSH_AGENT_PID=4189; export SSH_AGENT_PID; Ingimar suggested these environment variables might not be available to the CGI environment and he was spot on. It appears Agent.pm from Net::SSH::Perl looks for these in the environment and can find them when scripts are run from the shell because they're there (duh me :)). So, setup a password protected keypair and run Keychain from .bash_profile as follows... [root@webdev1 ~]# cat ~apache/.bash_profile keychain --nogui id_dsa --clear [[ -f $HOME/.keychain/$HOSTNAME-sh ]] && source $HOME/.keychain/$HOSTNAME-sh [[ -f $HOME/.keychain/$HOSTNAME-sh-gpg ]] && source $HOME/.keychain/$HOSTNAME-sh-gpg The '--clear' will remove all Keychain information on login (though not perfectly, it could be circumvented with a well-timed CTRL-C) but, critically, leave it available for non-interactive sessions if you login, enter private key passphrase then logout. You'll initially need to "su - apache" once if the box reboots and you need to enter the private key password if you need to 'su' to do anything else as the user, otherwise the ssh-agent information is available to scripts running as that user. For bash, as mentioned I'd just import it with [[ -f $HOME/.keychain/$HOSTNAME-sh ]] && source $HOME/.keychain/$HOSTNAME-sh For the Perl script I needed to add: $ENV{SSH_AGENT_PID}="4189"; $ENV{SSH_AUTH_SOCK}="/tmp/ssh-yheGAI4188/agent.4188"; Obviously, I'll read those in properly from ~/.keychain/$hostname-sh in the final script but as proof of concept... :) Will.

1 0

Step by step installing vmware server on centos
by hykin power 02 Nov '06

02 Nov '06

hi could you please give me a notes to install vmware server on centos i will be thank full to you thanx _________________________________________________________________ Get today's hot entertainment gossip http://movies.msn.com/movies/hotgossip?icid=T002MSN03A07001

4 3

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss