Discuss

discuss@lists.centos.org

34753 discussions

RE: [CentOS] Server Hacked: Cpanel
by Bowie Bailey 10 Aug '06

10 Aug '06

William L. Maltby wrote: > On Wed, 2006-08-09 at 17:26 -0400, Bowie Bailey wrote: > > William L. Maltby wrote: > > > The solution to that is a secure password manager. > > http://passwordsafe.sourceforge.net/ > > > > You just have to remember the one password and the program will track > > all of the rest for you. This way you can use gibberish passwords for > > important sites such as online banking and you don't have to remember > > them or write them down anywhere. The password database is encrypted > > using Twofish and SHA-256. > > I don't care for that concept. One password cracked gives access to all. > I would rather take the admitted risk of writing them down (in *my* > scenario, rather secure at home) and referring to that when needed. True, but if you make that one a good one and use it only for that purpose, the risks are minimal. > The ones I use frequently will be remembered. I don't use them on the > road at all, so that's reasonable. I prefer to not have passwords stored > on computers any more that necessary. I don't think it's a problem to have the passwords stored on the computer. Just make sure they're securely encrypted. > No I'll admit I fudge a *small* amount. Those who have access in my home > know windows only, not Linux and I have no shares with them. They are > TDU (Typical Dumb Users) and don't know how to use SSH, FTP, ... or even > how to find my comps on the LAN (now SMB node or Domain Controllers > here). > > > > The only real downside is that if you don't have access to the > > password manager, you don't have access to anything else either. > > Well, I do consider the one password exposes all a downside. But I also > grant that it is more secure than many alternatives. You know what they say: "You can put all your eggs in one basket, but WATCH THAT BASKET!" As long as you are extremely careful with the access password, you shouldn't have a problem. I will take this risk for the advantage of being able to easily use highly secure passwords. For example, my online banking password is a sequence of random characters. I don't have to remember it or type it. If I didn't have a tool like this, I would have to either write it down somewhere or use a less-secure password that I could remember. > > Oh...and don't forget backup the password database! :) > > I'm finalizing my LVM-based snapshots with aging of deleted files right > now, so I will be covered. That works, but a simple backup copy to a floppy disk or external hard drive works as well. > Thanks for the URL. I will go take a look. My mind is not yet > rusted closed even if (... *when*) I think I'm right! :-) The creator of this tool is a rather paranoid security expert. I figure if he is willing to use it, it's worth a look. http://schneier.com/ (note that the Password Safe information on that page refers to an older version that used Blowfish rather than Twofish) -- Bowie

2 1

undelete
by Jerry Geis 10 Aug '06

10 Aug '06

I just removed a bunch of Personal stuff I should not have. Is there anyway to undelete??? Jerry

7 11

MD raid tools ... did i missed something?
by "Petr \"Qaxi\" Klíma" 10 Aug '06

10 Aug '06

Hi I have a degraded array /dev/md2 ===================================================================== $ mdadm -D /dev/md2 /dev/md2: Version : 00.90.01 Creation Time : Thu Oct 6 20:31:57 2005 Raid Level : raid5 Array Size : 221953536 (211.67 GiB 227.28 GB) Device Size : 110976768 (105.84 GiB 113.64 GB) Raid Devices : 3 Total Devices : 2 Preferred Minor : 2 Persistence : Superblock is persistent Update Time : Thu Aug 10 07:32:45 2006 State : dirty, degraded Active Devices : 2 Working Devices : 2 Failed Devices : 0 Spare Devices : 0 Layout : left-symmetric Chunk Size : 256K Number Major Minor RaidDevice State 0 0 0 -1 removed 1 8 21 1 active sync /dev/sdb5 2 8 37 2 active sync /dev/sdc5 UUID : 4c77d8a9:3952f00b:876ce47a:a65d5522 Events : 0.12152695 ===================================================================== I need to add the 3rd partition, so I open documentation http://www.centos.org/docs/4/html/rhel-isa-en-4/s1-storage-rhlspec.html#S2-… (I know the RTFM ;-) But in chapter 5.9.9.2. they want tool caled "raidhotadd" What was my wonder when it is not included in CentOS 4.3 ===================================================================== # yum provides raidhotadd Searching Packages: Setting up repositories update 100% |=========================| 951 B 00:00 base 100% |=========================| 951 B 00:00 local 100% |=========================| 951 B 00:00 Reading repository metadata in from local files primary.xml.gz 100% |=========================| 71 kB 00:00 update : ################################################## 195/195 Added 0 new packages, deleted 2 old in 0.32 seconds Importing Additional filelist information for packages filelists.xml.gz 100% |=========================| 697 kB 00:00 update : ################################################## 195/195 Added 32 new packages, deleted 0 old in 2.51 seconds No Matches found ===================================================================== How can I repair the MD device? -- Petr Klíma e-mail: qaxi(a)seznam.cz

4 4

CentOS-announce Digest, Vol 18, Issue 9
by centos-announce-request＠centos.org 10 Aug '06

10 Aug '06

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2006:0612 Important CentOS 4 s390(x) krb5 - security update (Pasi Pirhonen) 2. CESA-2006:0614-4: Low CentOS 2 i386 tzdata enhancement update (John Newbigin) ---------------------------------------------------------------------- Message: 1 Date: Wed, 9 Aug 2006 16:28:36 +0300 From: Pasi Pirhonen <upi(a)centos.fi> Subject: [CentOS-announce] CESA-2006:0612 Important CentOS 4 s390(x) krb5 - security update To: centos-announce(a)centos.org Message-ID: <20060809132836.GD18903(a)centos.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2006:0612 https://rhn.redhat.com/errata/RHSA-2006-0612.html The following updated files have been uploaded and are currently syncing to the mirrors: s390: updates/s390/RPMS/krb5-devel-1.3.4-33.s390.rpm updates/s390/RPMS/krb5-libs-1.3.4-33.s390.rpm updates/s390/RPMS/krb5-server-1.3.4-33.s390.rpm updates/s390/RPMS/krb5-workstation-1.3.4-33.s390.rpm s390x: updates/s390x/RPMS/krb5-devel-1.3.4-33.s390x.rpm updates/s390x/RPMS/krb5-libs-1.3.4-33.s390x.rpm updates/s390x/RPMS/krb5-server-1.3.4-33.s390x.rpm updates/s390x/RPMS/krb5-workstation-1.3.4-33.s390x.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

Wifi wpa_supplicant with atheros successes or failures?
by Max H. 10 Aug '06

10 Aug '06

I remember being a small part of and following this thread a few months ago. <http://lists.centos.org/pipermail/centos/2006-May/065091.html> I've been attempting a go at getting wpa_supplicant running on CentOS 4.3 and haven't had much luck. I'm assuming my failure is my lack of knowledge on the subject, but anyways. First, my normal setup is as follows: IBM Thinkpad R40 Ethernet controller: Atheros Communications, Inc. AR5211 802.11ab NIC (rev 01) Works great and has been working great for over a year now off the madwifi drivers at <http://atrpms.net/dist/el4/madwifi/>. I've done a bit of Googling the past few days as well. One link I follow it mentions about CentOS/RHEL not supporting wpa_supplicant in the current kernel, and that you'd have to recompile your kernel. Other threads I've read of successes, but usually not much detail is provided and it's done so through compiling the drivers and what not. My question is: Has anyone had success off the RPMs on atrpms? I've attempted a shot at it with these: <http://atrpms.net/dist/el4/wpa_supplicant/> and haven't had much luck. It installs after I get a few dependencies and I can configure the .conf file, but after that it just gets really upset about doing anything. Perhaps I can't get it working due to confusion of the packages that I need or don't need. Currently, I'm running the kernel module packages from the madwifi section at atrpms. Any thoughts, help, or comments from the peanut gallery are greatly appreciated. :) Thanks! Max

2 2

CentOS 4 and laptop and wifi works
by jim stockford 09 Aug '06

09 Aug '06

I want to buy a laptop and install CentOS 4 on it and have the wifi work when I'm done. (Hoping for reasonable specs: 2GHz, 40GB drive, 1/2 to 1 GB RAM, CD-ROM, light and thin, 13 or 14 inch screen....) Any recommendations?

10 30

Least painful MySQL 4.1 -> 5 upgrade on CentOS 4.1
by Morten 09 Aug '06

09 Aug '06

Hi. I've happily been running MySQL 4.1 on my CentOS 4.1 x86_64 server. But I need to upgrade to MySQL 5. Any recommendations on how to accomplish this without too much pain? I guess I'll need to get RPMs from the MySQL website. Br, Morten

5 4

RE: [CentOS] Server Hacked: Cpanel
by Bowie Bailey 09 Aug '06

09 Aug '06

William L. Maltby wrote: > > Same here, even in my own net (I have grandchildren: they can be > "snoopy"). The darn trouble is trying to remember them all, including > those for different 'net sites; all have a different password. The solution to that is a secure password manager. http://passwordsafe.sourceforge.net/ You just have to remember the one password and the program will track all of the rest for you. This way you can use gibberish passwords for important sites such as online banking and you don't have to remember them or write them down anywhere. The password database is encrypted using Twofish and SHA-256. The only real downside is that if you don't have access to the password manager, you don't have access to anything else either. Oh...and don't forget backup the password database! :) -- Bowie

2 1

Connecting to WiFi private networks
by Guillermo Garron 09 Aug '06

09 Aug '06

Hi all, I am using NetworManager and NetworkManagerInfo in my Laptop, to connect to WiFi networks. It works great with open DHCP networks, but now i am in a Hotel wich gave me a login/password to connect to its network, and NetworkManagerInfo sees the WiFi network as private and opens a dialog windows but only asking a passphrase or HEX key, no login / password options. what can i do? maybe use anoter application rather than NetworkManager? XP works great in that Hotel. :( regards, Guillermo

1 1

Where's rpmbuild ???
by Nicholas Anderson 09 Aug '06

09 Aug '06

Hi All, hi all, dont know if there's something wrong with my system or what, but i can't find "rpmbuild" command ... is it a package separated from rpm? I dont think so cause there's no rpmbuild package in yum .... neither in rpmforge repositories .... the strange thing is that my system has the manuals for it, but the it doesnt have the binary (command itself).... I was following instructions in a manual, and it asks me to do a "rpmbuild --rebuild package", but i dont know how to do it if a dont have rpmbuild ..... :-( -- Nicholas Anderson Administrador de Sistemas Unix LPIC-1 Certified Rede Fiocruz e-mail: nicholas(a)fiocruz.br

4 6

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss