Re: [CentOS] SSSD and usermod

2014-01-06 Thread Dimitar Georgievski
Hi MItja, it looks like you are trying to integrate SSSD with FreeIPA. I think the following presentation will help you review the SSSD configuration even if you are trying to use 389DS independently: http://www.freeipa.org/images/7/77/Freeipa30_SSSD_SUDO_Integration.pdf Check the page titled

[CentOS] Can we trust RedHAt encryption tools?

2014-01-06 Thread James B. Byrne
Recently I have been deeply troubled by evidence revealing the degree to which U.S. based corporations (well actually all resident in any of the so-called 5-eyes countries) appear to have rolled over and assumed the position with respect to NSA inspired pressure to cripple public key encryption

Re: [CentOS] Can we trust RedHAt encryption tools?

2014-01-06 Thread m . roth
James B. Byrne wrote: Recently I have been deeply troubled by evidence revealing the degree to which U.S. based corporations (well actually all resident in any of the so-called 5-eyes countries) appear to have rolled over and assumed the position with respect to NSA inspired pressure to

Re: [CentOS] Can we trust RedHAt encryption tools?

2014-01-06 Thread Eero Volotinen
I agree, but I just don't know how much in the way of manhours that would involved. However, if you do get it all built, and build packages out of them, there is an extras? contribs? repo, and I'd encourage you to submit it for that. RHEL nowdays supports already Elliptic Curve on openssl.

Re: [CentOS] Can we trust RedHAt encryption tools?

2014-01-06 Thread James B. Byrne
RHEL nowdays supports already Elliptic Curve on openssl. Which complete misses the point. First, the initial settings of the EC are significant in determining the strength of the resulting cipher. There is considerable evidence that suggests that some of these default settings have been

Re: [CentOS] Can we trust RedHAt encryption tools?

2014-01-06 Thread m . roth
Eero Volotinen wrote: mark wrote: I agree, but I just don't know how much in the way of manhours that would involved. However, if you do get it all built, and build packages out of them, there is an extras? contribs? repo, and I'd encourage you to submit it for that. RHEL nowdays supports

Re: [CentOS] Can we trust RedHAt encryption tools?

2014-01-06 Thread Eero Volotinen
Um, I guess you haven't read the news lately - the most used, POSIX-mandated elliptic curve is backdoored by the US NSA - when the Well, as you know backdoored EC Dual DBRG is not working at all on openssl: http://marc.info/?l=openssl-announcem=138747119822324 -- Eero

Re: [CentOS] Can we trust RedHAt encryption tools?

2014-01-06 Thread m . roth
Eero Volotinen wrote: Um, I guess you haven't read the news lately - the most used, POSIX-mandated elliptic curve is backdoored by the US NSA - when the Well, as you know backdoored EC Dual DBRG is not working at all on openssl: http://marc.info/?l=openssl-announcem=138747119822324 That I

[CentOS] nfs client kerberos cache

2014-01-06 Thread Darod Zyree
Greetings, Not sure if this is the correct mail list. I have the following test environment set up: - 1x ipa master = ipa1.example.com - 1x nfs server = nfs1.example.com - 1x nfs client = nfsclient1.example.com NFS version 4 is used and the appropriate Kerberos principal has been created in

Re: [CentOS] Can we trust RedHAt encryption tools?

2014-01-06 Thread James B. Byrne
I am doing a bit of investigative work to see just how hard it is to build openssl for myself. The source from openssl.org is readily available and the spec file provided seems fairly usable. However, I am seeing lots of errors similar to this when I try to build it using mock: +

Re: [CentOS] Can we trust RedHAt encryption tools?

2014-01-06 Thread m . roth
James B. Byrne wrote: I am doing a bit of investigative work to see just how hard it is to build openssl for myself. The source from openssl.org is readily available and the spec file provided seems fairly usable. However, I am seeing lots of errors similar to this when I try to build it

Re: [CentOS] ZFS on Linux testing effort

2014-01-06 Thread Lists
On 11/30/2013 06:20 AM, Andrew Holway wrote: Hey, http://zfsonlinux.org/epel.html If you have a little time and resource please install and report back any problems you see. Andrew, I want to run /var on zfs, but when I try to move /var over it won't boot thereafter, with errors about

Re: [CentOS] ZFS on Linux testing effort

2014-01-06 Thread Cliff Pratt
Grub only needs to know about the filesystems that it uses to boot the system. Mounting of the other file systems including /var is the responsibility of the system that has been booted. I suspect that you have something else wrong if you can't boot with /var/ on ZFS. I may be wrong, but I don't

Re: [CentOS] ZFS on Linux testing effort

2014-01-06 Thread John R Pierce
On 1/6/2014 3:26 PM, Cliff Pratt wrote: Grub only needs to know about the filesystems that it uses to boot the system. Mounting of the other file systems including /var is the responsibility of the system that has been booted. I suspect that you have something else wrong if you can't boot

Re: [CentOS] Odd problems with CR updates

2014-01-06 Thread Ganesh N
Could you please help me to downgrade nss-token..? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS-virt] xen_balloon: reserve_additional_memory: add_memory() Errors

2014-01-06 Thread David Vrabel
On 03/01/14 19:58, Chris Elliott wrote: Hi All Back in August there was a report of these errors popping up in dmesg, and as far as I can tell it’s still unresolved even in the latest kernel. System RAM resource [mem 0xc800-0xcfff] cannot be added xen_balloon:

[CentOS-virt] Announcing a new HA KVM tutorial!

2014-01-06 Thread Digimer
Almost exactly two years ago, I released the first tutorial for building an HA platform for KVM VMs. In that time, I have learned a lot, created some tools to simplify management and refined the design to handle corner-cases seen in the field. Today, the culmination of that learning is summed

Re: [CentOS-virt] Announcing a new HA KVM tutorial!

2014-01-06 Thread Digimer
Awesome, I'll be very happy for your feedback! On 06/01/14 11:20 AM, Aly Khimji wrote: Thank you very much for this, looks like a good read. Will provide feedback :) Aly On Mon, Jan 6, 2014 at 11:11 AM, Digimer li...@alteeve.ca mailto:li...@alteeve.ca wrote: Almost exactly two

Re: [CentOS-virt] Announcing a new HA KVM tutorial!

2014-01-06 Thread Aly Khimji
Thank you very much for this, looks like a good read. Will provide feedback :) Aly On Mon, Jan 6, 2014 at 11:11 AM, Digimer li...@alteeve.ca wrote: Almost exactly two years ago, I released the first tutorial for building an HA platform for KVM VMs. In that time, I have learned a lot,

[CentOS-es] error ssh

2014-01-06 Thread Rodrigo Pichiñual Norin
Estimados; en mi conexion a un servidor mediante ssh en ocaciones me aparece el siguiente mensaje *ssh_exchange_identification: Connection closed by remote host* e modificado el archivo /etc/hosts.allow agregando la siguiente linea sshd: ALL pero no ocurre nada en el archivo /etc/hosts.deny

Re: [CentOS-es] error ssh

2014-01-06 Thread Rodrigo Pichiñual Norin
cambie el puerto por defecto y me funciona... quizas alguien cambio algo.(seguridad firewall)...y dejo de funcionar..pero con puerto distinto a 22 funciona El 6 de enero de 2014, 16:46, Ernesto Pérez Estévez, Ing. ernesto.pe...@cedia.org.ec escribió: On 01/06/2014 01:55 PM, Rodrigo Pichiñual

Re: [CentOS-es] error ssh

2014-01-06 Thread Ernesto Pérez Estévez, Ing.
On 01/06/2014 01:55 PM, Rodrigo Pichiñual Norin wrote: Estimados; en mi conexion a un servidor mediante ssh en ocaciones me aparece el siguiente mensaje *ssh_exchange_identification: Connection closed by remote host* valida que /etc/hosts.deny esté vacío.. para estar seguro no es por

Re: [CentOS-es] Servidor HP 64 bits

2014-01-06 Thread Ing . Juan Carlos Ibañez Alva
esto es lo que contiene el /var/log/http/error_logerror client:1 PHP Warning date(): It is not safe to rely on the system's timezoneerror client PHP Notice: undefined index From: rmac...@rks.ec Date: Sat, 4 Jan 2014 16:34:45 -0500 To: centos-es@centos.org Subject: Re: [CentOS-es] Servidor

Re: [CentOS-es] Servidor HP 64 bits

2014-01-06 Thread Ramón Macías Zamora
el warning del date lo arreglas en /etc/php.ini le configuras la linea que dice date.timezone de acuerdo a tu región, en mi caso: date.timezone = America/Guayaquil, te sugiero que pongas un refresh (ctrl+f5) y los mensajes que te salgan en ese momento los pasas, en que herramienta está

Re: [CentOS-es] Servidor HP 64 bits

2014-01-06 Thread Wilmer Arambula
Debes chequear bien la configuración de tu servidor: 1.- Revisar que apache este corriendo. 2.- Revisar que php este corriendo. 3.- Revisar que tienes conexion con la base de datos, sea mysql o postgres. 4.- Revisar los permisos de los archivos. Ese error que te arroja el php debería dejar