Discuss

discuss@lists.centos.org

1 participants
34753 discussions

RE: [CentOS] When ".." isn't the same? (not a problem
by Marc Powell 13 May '05

13 May '05

> -----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf Of Maciej Zenczykowski > Sent: Friday, May 13, 2005 9:19 AM > To: CentOS mailing list > Subject: RE: [CentOS] When ".." isn't the same? (not a problem > > > I believe I understand what you're describing and it's been a long time > > since I've had this 'issue' but if I remember correctly, it's a function > > of your shell, which I believe is going to be bash. It tries to be > > intelligent about its symlink handling. It remembers the cd path you > > used to get to that symlink and 'cd ..' sends you back the same way you > > got in. It basically treats symlinks as real directories, not pointers. > > This can be very useful but it can also be annoying. I'll bet if you use > > tcsh, which uses a more literal interpretation of the file-structure, it > > would work as you expect. I wasn't ever interested in it enough to see > > if it could be disabled in bash. > > I believe the proper option is -P as in "set -P" in bash to disable this > feature (IMHO very useful). Indeed -- -P If set, the shell does not follow symbolic links when executing commands such as cd that change the current working directory. It uses the physical directory structure instead. By default, bash follows the logical chain of directories when performing commands which change the current directory. -- Marc

1 0

Apache config for Squirrelmail?
by James B. Byrne 13 May '05

13 May '05

This is my corrected configuration file for squirrelmail over ssl if anyone is interested: # squirrelmail.conf 2005 May 13 James B. Byrne JBB8 # # SquirrelMail is a webmail package written in PHP. # This configuration file forces users to connect via SSL # # If the incoming request is already https:// then this # file will only be processed if the directive: # # Include /etc/httpd/conf.d/squirrelmail.conf # # is appended to ssl.conf for the default server or added # to the virtual host configuration file of the virtual # host used to process webmail. Note that ssl requires # IP addressed virtual hosts to work and that the necessary # Listen directives must be placed in the appropriate # configuration files as well. # Alias /webmail /usr/share/squirrelmail <Directory /usr/share/squirrelmail> AllowOverride None Options ExecCGI Order allow,deny Allow from all </Directory> RewriteEngine on RewriteLog "/var/log/httpd/rewrite_log" RewriteLogLevel 0 # AIDE-MEMOIRE # Arguments $1, $2 etc. refer to () matches in the # CURRENT RewriteRule line. # Arguments %1, %2 etc. refer to () matches in the # LAST matched RewriteCond. # Do not process established ssl squirrelmail sessions RewriteCond %{HTTPS} on RewriteCond %{REQUEST_URI} ^/webmail(/?|/.*)$ RewriteRule (^.*$) - [L,R] # Rewrite short form URLs whether SSL or not for forms # webmail.anything.dom and www.webmail.anything.dom RewriteCond %{HTTP_HOST} ^(www\.)?(webmail\.)(..+\.)(..+)$ [NC] RewriteCond %{REQUEST_URI} !^/webmail/ RewriteRule (^.*$) https://webmail.%3%4/webmail/ [L,R] # Force SSL otherwise RewriteCond %{HTTPS} off RewriteCond %{REQUEST_URI} ^/webmail(/?|/.*)$ RewriteCond %{HTTP_HOST} ^(.*\.)?(..+\.)(..+)$ [NC] RewriteRule (^.*$) https://webmail.%2%3/webmail/ [L,R] #EOF -- *** e-mail is not a secure channel *** mailto:byrnejb.<token>@harte-lyne.ca James B. Byrne Harte & Lyne Limited vox: +1 905 561 1241 9 Brockley Drive fax: +1 905 561 0757 Hamilton, Ontario <token> = hal Canada L8E 3C3

1 0

RE: [CentOS] When ".." isn't the same? (not a problem
by Marc Powell 13 May '05

13 May '05

> -----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf Of Ulrik S. Kofod > Sent: Friday, May 13, 2005 2:25 AM > To: centos(a)centos.org > Subject: [CentOS] When ".." isn't the same? (not a problem > > I don't understand why ".." isn't working the same way for "ls" and "cd" > when inside > a symbolic link. The reason I ask is that I made a link to a directory > with some > scripts that saves output in "../output.txt" and I could not find the > output until I > found that ".." isn't the directory you see when you do a $pwd. I solved > the problem > by making a directory and then make a link to each script in there. > > I would just like to know: > 1) if there is a good reason to this behaviour. > 2) if there is a rule, so you know when ".." is level up from $ pwd and > when it is > one level up from the link target. > 3) if there is an alternativ way to point to the parent directory. > I believe I understand what you're describing and it's been a long time since I've had this 'issue' but if I remember correctly, it's a function of your shell, which I believe is going to be bash. It tries to be intelligent about its symlink handling. It remembers the cd path you used to get to that symlink and 'cd ..' sends you back the same way you got in. It basically treats symlinks as real directories, not pointers. This can be very useful but it can also be annoying. I'll bet if you use tcsh, which uses a more literal interpretation of the file-structure, it would work as you expect. I wasn't ever interested in it enough to see if it could be disabled in bash. -- Marc

2 1

Re: Mini-centOS -- static libraries, XFCE
by Bryan J. Smith <b.j.smith＠ieee.org> 13 May '05

13 May '05

kenkensmile(a)netscape.net wrote: > However, centOS is a bit heavy to run on my notebook (P III 1G, 256MB > RAM). I need gnome, firefox, openoffice, realplayer, gaim, acrobat and > thunderbird on my notebook, but if I install all of them (plus base- > system), my notebook becomes very slow. I wish I could have a lighter > version of centOS for notebooks and old desktops. CentOS isn't the issue, but your application selection. In fact, I have a 4 year-old Toshiba Satellitte 2805-S402 with a P3-850MHz, 256MB of RAM that runs Fedora Core 3 just fine -- with _full_ GNOME. OpenOffice 1.x, Acrobat and RealPlayer have their own, statically-linked widget-sets. I'm sure that's massively bloating the memory footprint. Consider switching to OpenOffice 2.0 [betas] (natively GTK+ now I believe?), HelixPlayer (GTK+ based) with the RealPlayer libraries added (HelixPlayer is from Real, and the new RealPlayer is Helix+non-free libs). As far as Acrobat 7, I'm not sure, but I think it's still statically linked Motif. But that leaves only one application that is not native. I don't leave Acrobat running, which really saves me. As far as GNOME, you do _not_ need to run GNOME session with nautilus and metacity (GNOME 2.x file/window) to get full GNOME compatibility. Run XFCE session with xffm and xfwm (XFCE file/window) and you'll see your footprint go way down. Shortly after Fedora Core 2 (what I call "RHCL4.0") was introduced with XFCE as a new, 3rd session/file/window standard option, which RHEL4 inherited its selection, I remember Alan Cox boasting he was running it on a WinChip2 225MHz with only 48MB of RAM. XFCE is GTK+ based, but much, much lighter than a full GNOME environment, while being 100% GNOME compatible at the same time. Johnny Hughes wrote: >It won't get much faster if you choose those products :) As I mentioned, OpenOffice 2.0 and the new HelixPlayer are far more "native" in their libraries. OpenOffice 2.0 is in beta and HelixPlayer should (?) be included in FC3/RHEL4, and it's simply a matter of adding the non-free libraries which turns it into RealPlayer. I have to give Real a "thank you" for doing everything they could to make their offering to the community. >There is XFCE-4.2 that you could install instead of GNOME or KDE Well, you typically want to install XFCE _along_with_ GNOME, so it can use GNOME components when necessary. But just have the user (as well as system for new users) default to XFCE. XFCE takes some getting used to, but it's definitely worth it for older systems. >If you want to change permanently ... do: >switchdesk XFCE That's the 1 command I make sure I let _everyone_ know when they are installing FC/RHEL on any new system and memory is going to be limited. I really tire of the "Red Hat is bloated" comments, especially as of FC2+. Yes, you _do_ need a i686 class (PPro, K6, M2), but that's more to do NPTL and other details than "bloat." You can make Fedora-based distros as "lean" or as "bloated" as you want. And it's only going to get better in the future with more Fedora development and a YUM-integrated installer. > You can get a minimum install by doing a minimal install from > anaconda ... Yet another excellent recommendation that I see people forget about. 600MB of everything you should need to get using the system. In actuality, there is also a really, really "lean" 90MB install that you can do from any FC2+ distro, but not from Anaconda. > then doing: > yum groupinstall XFCE-4.2 "X Window System" "Office/Productivity" > then install the individual things you want via yum... > I'll do that on a test box and tell you how much space it is :) With that said, I've seen no less than 5 YUM GUIs. What does everyone like? -- Bryan J. Smith mailto:b.j.smith@ieee.org

2 1

CentOS-announce Digest, Vol 3, Issue 6
by centos-announce-request＠centos.org 13 May '05

13 May '05

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2005:412-01: Moderate CentOS 2 i386 openmotif security update (John Newbigin) 2. CEBA-2005:428 BUG fix CentOS 3 ia64 bonobo-activation - bug fix update (Pasi Pirhonen) 3. CEBA-2005:428 BUG fix Centos 3 s390(x) bonobo-activation - bug fix update (Pasi Pirhonen) 4. CEBA-2005:428 BUG fix CentOS 3 i386 bonobo-activation - bug fix update (Tru Huynh) 5. CEBA-2005:428 BUG fix CentOS 3 x86_64 bonobo-activation - bug fix update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 13 May 2005 09:58:58 +1000 From: John Newbigin <jnewbigin(a)ict.swin.edu.au> Subject: [CentOS-announce] CESA-2005:412-01: Moderate CentOS 2 i386 openmotif security update To: centos-announce(a)centos.org Message-ID: <4283EDC2.9070508(a)ict.swin.edu.au> Content-Type: text/plain; charset=us-ascii; format=flowed The following errata for CentOS-2 have been built and uploaded to the centos mirror: RHSA-2005:412-01 Moderate: openmotif security update Files available: openmotif-2.1.30-13.21AS.5.i386.rpm openmotif-devel-2.1.30-13.21AS.5.i386.rpm More details are available from the RedHat web site at https://rhn.redhat.com/errata/rh21as-errata.html The easy way to make sure you are up to date with all the latest patches is to run: # yum update -- John Newbigin Computer Systems Officer Faculty of Information and Communication Technologies Swinburne University of Technology Melbourne, Australia http://www.ict.swin.edu.au/staff/jnewbigin ------------------------------ Message: 2 Date: Fri, 13 May 2005 06:23:26 +0300 From: Pasi Pirhonen <upi(a)iki.fi> Subject: [CentOS-announce] CEBA-2005:428 BUG fix CentOS 3 ia64 bonobo-activation - bug fix update To: centos-announce(a)centos.org Message-ID: <20050513032326.GO13577(a)core.upi.iki.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CEBA-2005:428 https://rhn.redhat.com/errata/RHBA-2005-428.html The following updated files have been uploaded and are currently syncing to the mirrors: files: updates/ia64/RPMS/bonobo-activation-2.2.2-1.2E.ia64.rpm updates/ia64/RPMS/bonobo-activation-devel-2.2.2-1.2E.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://iki.fi/upi/

1 0

DNS master slave update issue
by James B. Byrne 13 May '05

13 May '05

I have a situation where the slave nameservers for a zone are being notified by the master that a change has occurred but the slaves are not requesting a zone file transfer in consequence. Is there some special flag or directive that I must set somewhere in order for this activity to be automatic upon receipt of such notices? All systems involved are running DNS 9.2.4. Regards, Jim -- *** e-mail is not a secure channel *** mailto:byrnejb.<token>@harte-lyne.ca James B. Byrne Harte & Lyne Limited vox: +1 905 561 1241 9 Brockley Drive fax: +1 905 561 0757 Hamilton, Ontario <token> = hal Canada L8E 3C3

4 3

Has anybody managed to get native IPSec working?
by Aleksandar Milivojevic 13 May '05

13 May '05

I've just wrote a lenghty email on Fedora ML as reply to Phillip who seems to be in the same trouble as myself... Found that while searching all mailing list archives and bugzillas I could think off (not really successfully, many people with same problems, no answers other than "works for me" -- glad to hear it works for somebody else, but it would be nice if he/she was a bit more elaborate why it "works for me"). I'd really like to get IPSec VPN working. I know about OpenVPN, and I know it works very well, and all that. But being userland application based on SSL, it works only between Linux and Windows machines. While it would do as temporary solution for short period of time, I might need something that has possiblity to interoperate with things such as Cisco routers and/or dedicated VPN boxes too, if need for it arises in the future (and I see it comming, since I do have some Cisco routers around, and some dedicated VPN boxes, all capable of IPSec). So, OpenVPN woudn't be a good way to go (maybe as temporary solution, until I'm able to get IPSec stuff working). Anyhow, the machines in question are CentOS 4.0 with all updates installed. And since what I actually use is labeled CentOS, thought about asking here also... It seems something is broken in IPSec implementation. Either as distributed by RedHat (and therefore present in CentOS), or maybe in the upstream kernel or userland tools. By searching the archives of various mailing lists, I found many people having problems with it. I'm attempting to setup IPSec (host2host for now, VPN when I'm done with simpler host2host setup) as I write this. Using native 2.6 kernel implementation, between two fully updated CentOS 4.0 boxes. I found this bug report that affects VPN configuration, not really relevant to my case (host 2 host). I've applied the patches since configuring VPN is going to be my next step anyhow: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=146169 There are two proposed patches for ifup-ipsec and ifdown-ipsec scripts that will go into RHEL3 U6 and RHEL4 U2. Probably Fedora Core has the same issues. Looking at log files and monitoring the network with tcpdump (when doing "ping host-b" from host-a), this seems to be happening. The first packet from host-a doesn't fly anywhere, as expected. Subsequent packets are sent, but no response is ever received from host-b. Pinging from host-b doesn't work at all (no packet leaving host-b, ever). Sumarized: - host-a attempts to negotiate automatic keying with host-b (success) - sends encrypted ICMP echo packet to host-b - host-b attempts to negotiate automatic keying with host-a (looks like success) - host-b repeats previous step indefinetly and never sends back encrypted ICMP echo-reply packet to host-a Looking at the output of "setkey -D" on both hosts, the key tables are huge after some time. Something doesn't look righ, and I can't pinpoint down what's wrong. It looks like new pair of keys is generate each time host-b is supposed to send packet to host-a. The /etc/sysconfig/network-scripts/ifcfg-IPSecToHostB on host-a looks something like this: DST=192.168.1.100 TYPE=IPSEC ONBOOT=no IKE_METHOD=X509 IKE_CERTFILE=/etc/racoon/certs/host-a IKE_PEER_CERTFILE=/etc/racoon/certs/host-b The /etc/sysconfig/network-scripts/ifcfg-IPSecToHostA on host-b looks similar (DST and IKE_*CERTFILE pointing the other way). Keys and certificates for host-a are stored in host-a.private (no passphrase, so that racoon can read the key) and host-a.public and likewise for host-b, just the way ifup-ipsec script expects them to be. After doing "ifup IPSecToHostB" on host-a, and "ifup IPSecToHostA" on host-b, the generated racoon configuration looks good (long certificate_type line might get wrapped around by my mail client, but it is a single line in the configuration file). This is store in /etc/racoon/192.168.1.100.conf, which is included from racoon.conf. remote 192.168.1.100 { exchange_mode aggressive, main; my_identifier asn1dn; peers_identifier asn1dn; certificate_type x509 "/etc/racoon/certs/host-a.public" "/etc/racoon/certs/host-a.private"; peers_certfile "/etc/racoon/certs/host-b.public"; proposal { encryption_algorithm 3des; hash_algorithm sha1; authentication_method rsasig; dh_group 2; } } The racoon.conf file looks like this (I made no changes to it, as installed by ipsec-tools, include statement added by ifup-ipsec script): # Racoon IKE daemon configuration file. # See 'man racoon.conf' for a description of the format and entries. path include "/etc/racoon"; path pre_shared_key "/etc/racoon/psk.txt"; path certificate "/etc/racoon/certs"; sainfo anonymous { pfs_group 2; lifetime time 1 hour ; encryption_algorithm 3des, blowfish 448, rijndael ; authentication_algorithm hmac_sha1, hmac_md5 ; compression_algorithm deflate ; } include "/etc/racoon/192.168.120.165.conf"; Configuration on host-b looks similar, referencing back to host-a. When I ping host-b, the first packet is dropped, as expected (while Racoon does its job with automatic keying). I've included excerpt from /var/log/message from both host-a and host-b as attachments (messages-host-*.txt), as well as output of "tcpdump host-b" that was running on host-a (tcpdump-host-a.txt). I've put them as attachments to avoid my mail client making them unreadable by wrapping around long lines. All in all, either I'm missing something really obvious, or something is really broken as distributed in Fedora/RHEL (and clones)... -- Aleksandar Milivojevic <amilivojevic(a)pbl.ca> Pollard Banknote Limited Systems Administrator 1499 Buffalo Place Tel: (204) 474-2323 ext 276 Winnipeg, MB R3T 1L7 May 12 10:11:54 host-a kernel: NET: Registered protocol family 15 May 12 10:11:54 host-a racoon: INFO: @(#)ipsec-tools 0.3.3 (http://ipsec-tools.sourceforge.net) May 12 10:11:54 host-a racoon: INFO: @(#)This product linked OpenSSL 0.9.7a Feb 19 2003 (http://www.openssl.org/) May 12 10:11:55 host-a racoon: INFO: 192.168.0.100[500] used as isakmp port (fd=8) May 12 10:11:55 host-a racoon: INFO: 127.0.0.1[500] used as isakmp port (fd=9) May 12 10:12:32 host-a racoon: INFO: IPsec-SA request for 192.168.1.100 queued due to no phase1 found. May 12 10:12:32 host-a racoon: INFO: initiate new phase 1 negotiation: 192.168.0.100[500]<=>192.168.1.100[500] May 12 10:12:32 host-a racoon: INFO: begin Aggressive mode. May 12 10:12:32 host-a racoon: INFO: ISAKMP-SA established 192.168.0.100[500]-192.168.1.100[500] spi:b962c618a3d1137c:d99254c172eb5de5 May 12 10:12:33 host-a racoon: INFO: initiate new phase 2 negotiation: 192.168.0.100[0]<=>192.168.1.100[0] May 12 10:12:33 host-a racoon: INFO: IPsec-SA established: AH/Transport 192.168.1.100->192.168.0.100 spi=165105177(0x9d74e19) May 12 10:12:33 host-a racoon: INFO: IPsec-SA established: ESP/Transport 192.168.1.100->192.168.0.100 spi=65841791(0x3ecaa7f) May 12 10:12:33 host-a racoon: INFO: IPsec-SA established: AH/Transport 192.168.0.100->192.168.1.100 spi=197556428(0xbc678cc) May 12 10:12:33 host-a racoon: INFO: IPsec-SA established: ESP/Transport 192.168.0.100->192.168.1.100 spi=227305975(0xd8c69f7) May 12 10:12:59 host-a racoon: INFO: respond new phase 2 negotiation: 192.168.0.100[0]<=>192.168.1.100[0] May 12 10:12:59 host-a racoon: INFO: IPsec-SA established: AH/Transport 192.168.1.100->192.168.0.100 spi=80675908(0x4cf0444) May 12 10:12:59 host-a racoon: INFO: IPsec-SA established: ESP/Transport 192.168.1.100->192.168.0.100 spi=198278184(0xbd17c28) May 12 10:12:59 host-a racoon: INFO: IPsec-SA established: AH/Transport 192.168.0.100->192.168.1.100 spi=142149191(0x8790647) May 12 10:12:59 host-a racoon: INFO: IPsec-SA established: ESP/Transport 192.168.0.100->192.168.1.100 spi=220511737(0xd24bdf9) May 12 10:13:00 host-a racoon: INFO: respond new phase 2 negotiation: 192.168.0.100[0]<=>192.168.1.100[0] May 12 10:13:00 host-a racoon: INFO: IPsec-SA established: AH/Transport 192.168.1.100->192.168.0.100 spi=236322388(0xe15fe54) May 12 10:13:00 host-a racoon: INFO: IPsec-SA established: ESP/Transport 192.168.1.100->192.168.0.100 spi=23039671(0x15f8eb7) May 12 10:13:00 host-a racoon: INFO: IPsec-SA established: AH/Transport 192.168.0.100->192.168.1.100 spi=168473301(0xa0ab2d5) May 12 10:13:00 host-a racoon: INFO: IPsec-SA established: ESP/Transport 192.168.0.100->192.168.1.100 spi=34968109(0x215922d) May 12 10:13:01 host-a racoon: INFO: respond new phase 2 negotiation: 192.168.0.100[0]<=>192.168.1.100[0] May 12 10:13:01 host-a racoon: INFO: IPsec-SA established: AH/Transport 192.168.1.100->192.168.0.100 spi=129055629(0x7b13b8d) May 12 10:13:01 host-a racoon: INFO: IPsec-SA established: ESP/Transport 192.168.1.100->192.168.0.100 spi=97213500(0x5cb5c3c) May 12 10:13:01 host-a racoon: INFO: IPsec-SA established: AH/Transport 192.168.0.100->192.168.1.100 spi=12584766(0xc0073e) May 12 10:13:01 host-a racoon: INFO: IPsec-SA established: ESP/Transport 192.168.0.100->192.168.1.100 spi=113731845(0x6c76905) May 12 10:12:02 host-b kernel: NET: Registered protocol family 15 May 12 10:12:03 host-b racoon: INFO: @(#)ipsec-tools 0.3.3 (http://ipsec-tools.sourceforge.net) May 12 10:12:03 host-b racoon: INFO: @(#)This product linked OpenSSL 0.9.7a Feb 19 2003 (http://www.openssl.org/) May 12 10:12:03 host-b racoon: INFO: 192.168.1.100[500] used as isakmp port (fd=8) May 12 10:12:03 host-b racoon: INFO: 127.0.0.1[500] used as isakmp port (fd=9) May 12 10:12:31 host-b racoon: INFO: respond new phase 1 negotiation: 192.168.1.100[500]<=>192.168.0.100[500] May 12 10:12:31 host-b racoon: INFO: begin Aggressive mode. May 12 10:12:31 host-b racoon: INFO: ISAKMP-SA established 192.168.1.100[500]-192.168.0.100[500] spi:b962c618a3d1137c:d99254c172eb5de5 May 12 10:12:32 host-b racoon: INFO: respond new phase 2 negotiation: 192.168.1.100[0]<=>192.168.0.100[0] May 12 10:12:33 host-b racoon: INFO: IPsec-SA established: AH/Transport 192.168.0.100->192.168.1.100 spi=197556428(0xbc678cc) May 12 10:12:33 host-b racoon: INFO: IPsec-SA established: ESP/Transport 192.168.0.100->192.168.1.100 spi=227305975(0xd8c69f7) May 12 10:12:33 host-b racoon: INFO: IPsec-SA established: AH/Transport 192.168.1.100->192.168.0.100 spi=165105177(0x9d74e19) May 12 10:12:33 host-b racoon: INFO: IPsec-SA established: ESP/Transport 192.168.1.100->192.168.0.100 spi=65841791(0x3ecaa7f) May 12 10:12:58 host-b racoon: INFO: initiate new phase 2 negotiation: 192.168.1.100[0]<=>192.168.0.100[0] May 12 10:12:59 host-b racoon: INFO: IPsec-SA established: AH/Transport 192.168.0.100->192.168.1.100 spi=142149191(0x8790647) May 12 10:12:59 host-b racoon: INFO: IPsec-SA established: ESP/Transport 192.168.0.100->192.168.1.100 spi=220511737(0xd24bdf9) May 12 10:12:59 host-b racoon: INFO: IPsec-SA established: AH/Transport 192.168.1.100->192.168.0.100 spi=80675908(0x4cf0444) May 12 10:12:59 host-b racoon: INFO: IPsec-SA established: ESP/Transport 192.168.1.100->192.168.0.100 spi=198278184(0xbd17c28) May 12 10:12:59 host-b racoon: INFO: initiate new phase 2 negotiation: 192.168.1.100[0]<=>192.168.0.100[0] May 12 10:13:00 host-b racoon: INFO: IPsec-SA established: AH/Transport 192.168.0.100->192.168.1.100 spi=168473301(0xa0ab2d5) May 12 10:13:00 host-b racoon: INFO: IPsec-SA established: ESP/Transport 192.168.0.100->192.168.1.100 spi=34968109(0x215922d) May 12 10:13:00 host-b racoon: INFO: IPsec-SA established: AH/Transport 192.168.1.100->192.168.0.100 spi=236322388(0xe15fe54) May 12 10:13:00 host-b racoon: INFO: IPsec-SA established: ESP/Transport 192.168.1.100->192.168.0.100 spi=23039671(0x15f8eb7) May 12 10:13:00 host-b racoon: INFO: initiate new phase 2 negotiation: 192.168.1.100[0]<=>192.168.0.100[0] May 12 10:13:01 host-b racoon: INFO: IPsec-SA established: AH/Transport 192.168.0.100->192.168.1.100 spi=12584766(0xc0073e) May 12 10:13:01 host-b racoon: INFO: IPsec-SA established: ESP/Transport 192.168.0.100->192.168.1.100 spi=113731845(0x6c76905) May 12 10:13:01 host-b racoon: INFO: IPsec-SA established: AH/Transport 192.168.1.100->192.168.0.100 spi=129055629(0x7b13b8d) May 12 10:13:01 host-b racoon: INFO: IPsec-SA established: ESP/Transport 192.168.1.100->192.168.0.100 spi=97213500(0x5cb5c3c) 10:12:32.116735 IP host-a.isakmp > host-b.isakmp: isakmp: phase 1 I agg 10:12:32.266347 IP host-b.isakmp > host-a.isakmp: isakmp: phase 1 R agg 10:12:32.266374 IP host-b > host-a: udp 10:12:32.370155 IP host-a.isakmp > host-b.isakmp: isakmp: phase 1 I agg 10:12:32.370228 IP host-a > host-b: udp 10:12:32.370944 IP host-a.isakmp > host-b.isakmp: isakmp: phase 2/others I inf[E] 10:12:32.389413 IP host-b.isakmp > host-a.isakmp: isakmp: phase 2/others R inf[E] 10:12:33.411478 IP host-a.isakmp > host-b.isakmp: isakmp: phase 2/others I oakley-quick[E] 10:12:33.435885 IP host-b.isakmp > host-a.isakmp: isakmp: phase 2/others R oakley-quick[E] 10:12:33.436808 IP host-a.isakmp > host-b.isakmp: isakmp: phase 2/others I oakley-quick[E] 10:12:59.369421 IP host-a > host-b: AH(spi=0x0bc678cc,seq=0x1): ESP(spi=0x0d8c69f7,seq=0x1) 10:12:59.393050 IP host-b.isakmp > host-a.isakmp: isakmp: phase 2/others R oakley-quick[E] 10:12:59.416746 IP host-a.isakmp > host-b.isakmp: isakmp: phase 2/others I oakley-quick[E] 10:12:59.418339 IP host-b.isakmp > host-a.isakmp: isakmp: phase 2/others R oakley-quick[E] 10:13:00.369018 IP host-a > host-b: AH(spi=0x0bc678cc,seq=0x2): ESP(spi=0x0d8c69f7,seq=0x2) 10:13:00.392529 IP host-b.isakmp > host-a.isakmp: isakmp: phase 2/others R oakley-quick[E] 10:13:00.413340 IP host-a.isakmp > host-b.isakmp: isakmp: phase 2/others I oakley-quick[E] 10:13:00.414949 IP host-b.isakmp > host-a.isakmp: isakmp: phase 2/others R oakley-quick[E] 10:13:01.369325 IP host-a > host-b: AH(spi=0x0bc678cc,seq=0x3): ESP(spi=0x0d8c69f7,seq=0x3) 10:13:01.392868 IP host-b.isakmp > host-a.isakmp: isakmp: phase 2/others R oakley-quick[E] 10:13:01.415756 IP host-a.isakmp > host-b.isakmp: isakmp: phase 2/others I oakley-quick[E] 10:13:01.417302 IP host-b.isakmp > host-a.isakmp: isakmp: phase 2/others R oakley-quick[E] 11:00:33.407722 IP host-a.isakmp > host-b.isakmp: isakmp: phase 2/others I oakley-quick[E] 11:00:33.432074 IP host-b.isakmp > host-a.isakmp: isakmp: phase 2/others R oakley-quick[E] 11:00:33.433031 IP host-a.isakmp > host-b.isakmp: isakmp: phase 2/others I oakley-quick[E] host-a# setkey -D 192.168.1.100 192.168.0.100 esp mode=transport spi=97213500(0x05cb5c3c) reqid=0(0x00000000) E: 3des-cbc 985da9c3 28e552dc c477cdce 66512651 13afbca9 a1984bcf A: hmac-sha1 71458a89 4717fcf1 781c4588 930e9b5f 98f3376a seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:01 2005 current: May 12 10:17:02 2005 diff: 241(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=15 pid=4067 refcnt=0 192.168.1.100 192.168.0.100 ah mode=transport spi=129055629(0x07b13b8d) reqid=0(0x00000000) A: hmac-sha1 7dba1ffc aedf1719 8fb451c7 ee81826a 67b1be0a seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:01 2005 current: May 12 10:17:02 2005 diff: 241(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=14 pid=4067 refcnt=0 192.168.1.100 192.168.0.100 esp mode=transport spi=23039671(0x015f8eb7) reqid=0(0x00000000) E: 3des-cbc dc20f03c 9c483a84 f4b28e0e 42def71a e88720f1 9c0ac34f A: hmac-sha1 64caede6 fda16b7d 0a94c78c a0da465d 72421e78 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:00 2005 current: May 12 10:17:03 2005 diff: 243(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=13 pid=4067 refcnt=0 192.168.1.100 192.168.0.100 ah mode=transport spi=236322388(0x0e15fe54) reqid=0(0x00000000) A: hmac-sha1 2c01e096 86e02e30 59d16c86 3adcd917 d94a6bba seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:00 2005 current: May 12 10:17:03 2005 diff: 243(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=12 pid=4067 refcnt=0 192.168.1.100 192.168.0.100 esp mode=transport spi=198278184(0x0bd17c28) reqid=0(0x00000000) E: 3des-cbc b6a82412 4263eca7 276e33a7 2c170e4c 36391465 2e808e08 A: hmac-sha1 3eae5cc8 83896894 53ccb18e bfa23ba0 d4c8fdb8 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:59 2005 current: May 12 10:17:03 2005 diff: 244(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=11 pid=4067 refcnt=0 192.168.1.100 192.168.0.100 ah mode=transport spi=80675908(0x04cf0444) reqid=0(0x00000000) A: hmac-sha1 6dda1c62 afb2e99e d55e320e 7245fdf9 df1a8c61 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:59 2005 current: May 12 10:17:03 2005 diff: 244(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=10 pid=4067 refcnt=0 192.168.1.100 192.168.0.100 esp mode=transport spi=65841791(0x03ecaa7f) reqid=0(0x00000000) E: 3des-cbc 899e241e db481177 88e14620 3fc0eaad dbc3d769 6d10c818 A: hmac-sha1 150afe5b bbd82d7d fb9917cc 28891bb5 828d5315 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:33 2005 current: May 12 10:17:03 2005 diff: 270(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=9 pid=4067 refcnt=0 192.168.1.100 192.168.0.100 ah mode=transport spi=165105177(0x09d74e19) reqid=0(0x00000000) A: hmac-sha1 ce7cc6b4 86b9dfab 67928a3a 71d1b074 d2703603 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:33 2005 current: May 12 10:17:03 2005 diff: 270(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=8 pid=4067 refcnt=0 192.168.0.100 192.168.1.100 esp mode=transport spi=113731845(0x06c76905) reqid=0(0x00000000) E: 3des-cbc 38b74d9c 71b443d6 23f383db b63f7c19 ef6b506f adf34372 A: hmac-sha1 34884873 8e20a3b3 5dd9a80a 07b7597e 6d578b8b seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:01 2005 current: May 12 10:17:03 2005 diff: 242(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=7 pid=4067 refcnt=0 192.168.0.100 192.168.1.100 ah mode=transport spi=12584766(0x00c0073e) reqid=0(0x00000000) A: hmac-sha1 617f44e0 f22ab543 9728e3cd 3739d7b7 11e73e02 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:01 2005 current: May 12 10:17:03 2005 diff: 242(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=6 pid=4067 refcnt=0 192.168.0.100 192.168.1.100 esp mode=transport spi=34968109(0x0215922d) reqid=0(0x00000000) E: 3des-cbc 5ed41af5 e628d951 6ca215e2 3b82e59f 86e09e5b b4a156bf A: hmac-sha1 2aa99103 66c4332c b3b15a5c 032b1b69 4d23b730 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:00 2005 current: May 12 10:17:04 2005 diff: 244(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=5 pid=4067 refcnt=0 192.168.0.100 192.168.1.100 ah mode=transport spi=168473301(0x0a0ab2d5) reqid=0(0x00000000) A: hmac-sha1 dc9ebbf3 c3e56d7c 0ee1a666 389952f0 86b4ac91 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:00 2005 current: May 12 10:17:04 2005 diff: 244(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=4 pid=4067 refcnt=0 192.168.0.100 192.168.1.100 esp mode=transport spi=220511737(0x0d24bdf9) reqid=0(0x00000000) E: 3des-cbc cb79158c 491dad95 6641aea1 efebd408 72499132 caeb2692 A: hmac-sha1 5b5b2a54 a40b8b84 3899e885 2f2bfd0a dbbe71a0 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:59 2005 current: May 12 10:17:04 2005 diff: 245(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=3 pid=4067 refcnt=0 192.168.0.100 192.168.1.100 ah mode=transport spi=142149191(0x08790647) reqid=0(0x00000000) A: hmac-sha1 4ed8c044 b86f1911 53894bee 2260bd8a 0fb04d51 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:59 2005 current: May 12 10:17:04 2005 diff: 245(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=2 pid=4067 refcnt=0 192.168.0.100 192.168.1.100 esp mode=transport spi=227305975(0x0d8c69f7) reqid=0(0x00000000) E: 3des-cbc 562387fe f3e94364 36132d0c 9ab1380d 252026c0 3644312a A: hmac-sha1 3c358c51 6aa4cec0 dca37231 28398fec c1838efa seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:33 2005 current: May 12 10:17:04 2005 diff: 271(s) hard: 3600(s) soft: 2880(s) last: May 12 10:12:59 2005 hard: 0(s) soft: 0(s) current: 360(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 3 hard: 0 soft: 0 sadb_seq=1 pid=4067 refcnt=0 192.168.0.100 192.168.1.100 ah mode=transport spi=197556428(0x0bc678cc) reqid=0(0x00000000) A: hmac-sha1 144d8dca 0554524c 99eb29e7 fd697910 f5dfadef seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:33 2005 current: May 12 10:17:04 2005 diff: 271(s) hard: 3600(s) soft: 2880(s) last: May 12 10:12:59 2005 hard: 0(s) soft: 0(s) current: 432(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 3 hard: 0 soft: 0 sadb_seq=0 pid=4067 refcnt=0 host-b# setkey -D 192.168.1.100 192.168.0.100 esp mode=transport spi=97213500(0x05cb5c3c) reqid=0(0x00000000) E: 3des-cbc 985da9c3 28e552dc c477cdce 66512651 13afbca9 a1984bcf A: hmac-sha1 71458a89 4717fcf1 781c4588 930e9b5f 98f3376a seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:01 2005 current: May 12 10:17:11 2005 diff: 250(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=11 pid=2730 refcnt=0 192.168.1.100 192.168.0.100 esp mode=transport spi=23039671(0x015f8eb7) reqid=0(0x00000000) E: 3des-cbc dc20f03c 9c483a84 f4b28e0e 42def71a e88720f1 9c0ac34f A: hmac-sha1 64caede6 fda16b7d 0a94c78c a0da465d 72421e78 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:00 2005 current: May 12 10:17:11 2005 diff: 251(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=10 pid=2730 refcnt=0 192.168.1.100 192.168.0.100 esp mode=transport spi=198278184(0x0bd17c28) reqid=0(0x00000000) E: 3des-cbc b6a82412 4263eca7 276e33a7 2c170e4c 36391465 2e808e08 A: hmac-sha1 3eae5cc8 83896894 53ccb18e bfa23ba0 d4c8fdb8 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:59 2005 current: May 12 10:17:11 2005 diff: 252(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=9 pid=2730 refcnt=0 192.168.1.100 192.168.0.100 esp mode=transport spi=65841791(0x03ecaa7f) reqid=0(0x00000000) E: 3des-cbc 899e241e db481177 88e14620 3fc0eaad dbc3d769 6d10c818 A: hmac-sha1 150afe5b bbd82d7d fb9917cc 28891bb5 828d5315 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:33 2005 current: May 12 10:17:11 2005 diff: 278(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=8 pid=2730 refcnt=0 192.168.0.100 192.168.1.100 esp mode=transport spi=113731845(0x06c76905) reqid=0(0x00000000) E: 3des-cbc 38b74d9c 71b443d6 23f383db b63f7c19 ef6b506f adf34372 A: hmac-sha1 34884873 8e20a3b3 5dd9a80a 07b7597e 6d578b8b seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:01 2005 current: May 12 10:17:11 2005 diff: 250(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=7 pid=2730 refcnt=0 192.168.0.100 192.168.1.100 ah mode=transport spi=12584766(0x00c0073e) reqid=0(0x00000000) A: hmac-sha1 617f44e0 f22ab543 9728e3cd 3739d7b7 11e73e02 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:01 2005 current: May 12 10:17:11 2005 diff: 250(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=6 pid=2730 refcnt=0 192.168.0.100 192.168.1.100 esp mode=transport spi=34968109(0x0215922d) reqid=0(0x00000000) E: 3des-cbc 5ed41af5 e628d951 6ca215e2 3b82e59f 86e09e5b b4a156bf A: hmac-sha1 2aa99103 66c4332c b3b15a5c 032b1b69 4d23b730 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:00 2005 current: May 12 10:17:11 2005 diff: 251(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=5 pid=2730 refcnt=0 192.168.0.100 192.168.1.100 ah mode=transport spi=168473301(0x0a0ab2d5) reqid=0(0x00000000) A: hmac-sha1 dc9ebbf3 c3e56d7c 0ee1a666 389952f0 86b4ac91 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:00 2005 current: May 12 10:17:11 2005 diff: 251(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=4 pid=2730 refcnt=0 192.168.0.100 192.168.1.100 esp mode=transport spi=220511737(0x0d24bdf9) reqid=0(0x00000000) E: 3des-cbc cb79158c 491dad95 6641aea1 efebd408 72499132 caeb2692 A: hmac-sha1 5b5b2a54 a40b8b84 3899e885 2f2bfd0a dbbe71a0 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:59 2005 current: May 12 10:17:11 2005 diff: 252(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=3 pid=2730 refcnt=0 192.168.0.100 192.168.1.100 ah mode=transport spi=142149191(0x08790647) reqid=0(0x00000000) A: hmac-sha1 4ed8c044 b86f1911 53894bee 2260bd8a 0fb04d51 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:59 2005 current: May 12 10:17:11 2005 diff: 252(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=2 pid=2730 refcnt=0 192.168.0.100 192.168.1.100 esp mode=transport spi=227305975(0x0d8c69f7) reqid=0(0x00000000) E: 3des-cbc 562387fe f3e94364 36132d0c 9ab1380d 252026c0 3644312a A: hmac-sha1 3c358c51 6aa4cec0 dca37231 28398fec c1838efa seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:33 2005 current: May 12 10:17:11 2005 diff: 278(s) hard: 3600(s) soft: 2880(s) last: May 12 10:12:58 2005 hard: 0(s) soft: 0(s) current: 192(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 3 hard: 0 soft: 0 sadb_seq=1 pid=2730 refcnt=0 192.168.0.100 192.168.1.100 ah mode=transport spi=197556428(0x0bc678cc) reqid=0(0x00000000) A: hmac-sha1 144d8dca 0554524c 99eb29e7 fd697910 f5dfadef seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:33 2005 current: May 12 10:17:11 2005 diff: 278(s) hard: 3600(s) soft: 2880(s) last: May 12 10:12:58 2005 hard: 0(s) soft: 0(s) current: 300(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 3 hard: 0 soft: 0 sadb_seq=0 pid=2730 refcnt=0

2 1

CentOS Live?
by Dominik Składanowski 13 May '05

13 May '05

Hello list. I've just read this news (http://distrowatch.com/?newsid=02638) - in my opinion very good idea. What do you think? Regards.

8 12

Re: Hardware RAID Controller -- Risers and 66+MHz ...
by Bryan J. Smith <b.j.smith＠ieee.org> 12 May '05

12 May '05

From: Lee W <centos-list(a)unassemble.co.uk> > Shouldn't be a problem as it's probably going in a 1U Rack case > with a Riser/extender card. Be sure to hit the 3Ware site to read about _incompatible_ risers! At 66+MHz PCI/PCI-X signaling, many cards/risers have issues. Many are only designed for 33MHz. -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

RE: [CentOS] About strongs passwords!
by Bryan J. Smith <b.j.smith＠ieee.org> 12 May '05

12 May '05

israel.garcia(a)cimex.com.cu wrote: > Here is my question, I have a DataBase CentOS server working with > about 150 users connected via ssh, so I want to set up for all users > strongs passwords ... cut ... In addition to the password considerations, I recommend the following. 1) Disable SSH v1 access 2) Disable all authentication, including password authentication, except public key authentication. 3) Generate all public keys with passphrases. Alternatively, if you have either a UNIX Kerberos realm, or you are already synchronizing UNIX and ADS authentication, consider Kerberos authentication instead (e.g., one-way ADS trust, if you are are already using ADS for authentication of UNIX). Otherwise, public key would be far better than password authentication. -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss