Log file *detailed* content description
So I spent the last 30 minutes or so trying to find a detailed
description of the content of /var/log/secure. Sure, I know the purpose
of the file and most of the messages are self-explanatory. But some
of the message content is not. I was surprised that multiple search
engines were unable to find anything beyond the obvious ("Keep
authentication logs for both successful ..."). Doesn't Fedora's
documentation anywhere describe this file in some detail?
For example, given the message,
Accepted publickey for ... from ... port ... ssh2: RSA
SHA256:QSyKp5SJ8gJFcYtbtb9SQ1axtqSg7fEoQBiZf3kPXgU
what is the meaning of the RSA value listed? Is it a "fingerprint"?
How can I compare it to the various keys on my system?
--
Dave Close, Compata, Irvine CA +1 714 434 7359
d...@compata.com dhcl...@alumni.caltech.edu
"Politics have no relation to morals." -- Niccolo Machiavelli
--
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
Re: Mouse not working on one USB port that still supports stick attachment
On 12/10/23 04:48, Robert Moskowitz wrote: Been having a problem here for a couple days now that I am not figuring out... A couple days ago, my mouse stopped working on the only right side USB port. It is a traveler Verbatim optical mouse; nothing special. It works in either of the left ports, but it is a pain to wrap the retracting cord around the notebook. The port is not "dead". I can attach a USB drive stick or my Samsung phone just fine. But no mouse. I am not interested in rebooting to see if that fixes things. At least until I get back home in a couple days. How might I trouble shoot this and maybe fix it without a reboot (if that will even fix the problem)? thanks What happens when the mouse is plugged into the suspicious hole and you wiggle the connector whilst moving the mouse? -- ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: firefox keeps freezing on me
It is almost certainly going to be a memory issue. In fact earlier today Firefox made my 32G windows 11 device mostly useless (not a complete lockup for anything but firefox, but everything else was horribly slow). I have had to kill firefox on multiple different websites and multiple different machines. On ones with a lot of ram they don't lockup, but on lower ram devices (16G and under) they start paging and become otherwise useless and lock up enough that the power off button is the fastest solution. If you have a second device that you can ssh into the first device, ssh into the first device and run top and leave it running. On lockup see what top last said before you reset/powered it off. You could also do top > top.out & and simply leave that running and the go see what top was showing next lockup. On Mon, Dec 11, 2023 at 5:13 PM Michael Hennebry wrote: > > On Mon, 27 Nov 2023, Michael Hennebry wrote: > > > On Sat, 25 Nov 2023, Roger Heflin wrote: > > > >> Hardware issues do not typically leave the machine up (except for > >> intel/amd throttling down when getting hot, but even that will crash > >> if it gets bad enough).install kernel-tools and run turbostat it > >> will show the cpu freqs and cpu temps. > > > > My CPU is Intel. > > I'll try kernel-tools. > > Today is the first time firefox froze on me since leaving turbostat running. > > -- > Michael henne...@mail.cs.ndsu.nodak.edu > "His longhand was fairly good in his youth, but as he got older it got > smaller, more scribbly, and harder to read; although, like being hanged, > one can get used to it." -- Gordon Dickson on H.P. Lovecraft's handwriting > -- > ___ > users mailing list -- users@lists.fedoraproject.org > To unsubscribe send an email to users-le...@lists.fedoraproject.org > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org > Do not reply to spam, report it: > https://pagure.io/fedora-infrastructure/new_issue -- ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
[389-users] Re: ERR - slapi_ldap_bind - Could not send bind request for id [(anon)] authentication mechanism [EXTERNAL]: error -1 (Can't contact LDAP server), system error 0 (no error), network error
On 19 Nov 2020, at 10:34, Graham Leggett wrote: >> Raised the bug here: https://bugzilla.redhat.com/show_bug.cgi?id=1771979 > > Coming back to this one - got to the bottom of this while investigating > something else that wasn’t working. > > This wasn’t a regression in NSS, but rather a regression in the openldap > libraries shipped by RHEL7.5 and above. > > For reasons that I haven’t found, there was an architecture change made half > way through the RHEL7 lifecycle where openldap was linked to openssl instead > of NSS. > > Openldap's NSS support and openldap’s openssl support differ in a fundamental > way - with NSS, when openldap makes an SSL connection intermediate > certificates are filled in by the client side as normal. With openssl, when > openldap makes an SSL connection intermediate certificates are ignored, and > the connection breaks. > > The hack workaround above fixes this because openldap’s openssl support > expects you to place intermediate certs in your trusted certificate store. As > soon as you mark the intermediates as trusted in NSS, the hack workaround in > 389ds that makes replication sort-of work bound to two different crypto > libraries exports trusted certs across into the ca certificate list passed to > openldap. Openldap then finds the intermediates and things work. > > Fundamentally there are two bugs: > > - https://bugzilla.redhat.com/show_bug.cgi?id=1898924 > > - An architectural change half way through the lifecycle of what is supposed > to be a stable OS. End of 2023, the bug is still present in RHEL9: [11/Dec/2023:23:02:09.510906411 +] - ERR - slapi_ldap_bind - Could not send bind request for id [(anon)] authentication mechanism [EXTERNAL]: error -1 (Can't contact LDAP server), system error -5987 (Invalid function argument.), network error 0 (Unknown error, host “ldap2.example.com:636") This time, the workaround of forcing the intermediate certificates to be marked trusted no longer works. We now get a low level complaint about a certificate verification failure. The error message doesn’t tell us which certificate failed, but this message is an openssl message. [11/Dec/2023:19:45:28.115134273 +] - ERR - NSMMReplicationPlugin - bind_and_check_pwp - agmt=“cn=ldap2" (thor:636) - Replication bind with EXTERNAL auth failed: LDAP error -1 (Can't contact LDAP server) (error:0A86:SSL routines::certificate verify failed (self-signed certificate in certificate chain)) There are no self-signed certificates being used, they are certs issued by public CAs, which like all public CAs, have intermediate certs. The bugs I raised in 2020 were all abandoned and closed. Regards, Graham — -- ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: firefox keeps freezing on me
On Mon, 27 Nov 2023, Michael Hennebry wrote: On Sat, 25 Nov 2023, Roger Heflin wrote: Hardware issues do not typically leave the machine up (except for intel/amd throttling down when getting hot, but even that will crash if it gets bad enough).install kernel-tools and run turbostat it will show the cpu freqs and cpu temps. My CPU is Intel. I'll try kernel-tools. Today is the first time firefox froze on me since leaving turbostat running. -- Michael henne...@mail.cs.ndsu.nodak.edu "His longhand was fairly good in his youth, but as he got older it got smaller, more scribbly, and harder to read; although, like being hanged, one can get used to it." -- Gordon Dickson on H.P. Lovecraft's handwriting -- ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: Mouse not working on one USB port that still supports stick attachment
Am 11.12.23 um 18:36 schrieb Robert Moskowitz: And now I am back home; plugged my KVM into the same USB port and have both keyb and mouse working. Did you consider "cleaning"? USB ports and plugs have a tendency to accumulate dust inside. Ralf -- ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: Mouse not working on one USB port that still supports stick attachment
On 12/11/23 00:57, Samuel Sieb wrote: On 12/10/23 04:48, Robert Moskowitz wrote: Been having a problem here for a couple days now that I am not figuring out... A couple days ago, my mouse stopped working on the only right side USB port. It is a traveler Verbatim optical mouse; nothing special. How might I trouble shoot this and maybe fix it without a reboot (if that will even fix the problem)? Is there anything in the journal when you plug it in? I was not finding anything. And now I am back home; plugged my KVM into the same USB port and have both keyb and mouse working. I expect to be rebooting before my next travel in 2 weeks, but I will be trying to monitor this. Weirdness is the watchword with computers. -- ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: Clean install of Fedora 39 on Dell notebook was working, but recent update not getting 50 selerts??
Actually, that brings up another point, that I don't know if it's still the case. When you write a file to a specific place, the SELinux contexts are set for what's usually expected at that file path. e.g. Write a page.html file in your homespace, and it'll get general context that won't be readable by a webserver. If you copied that file to another place, the copy will be written with the expected contexts for that new place. e.g. If you copied that page.html to your webserver serving path, the copy will get contexts that allow it to be web served. If you moved a file to another place, the original contexts went with the file. e.g. Your page.html in your homespace with general purpose contexts ends up in your webserver serving path still with general purpose contexts that don't allow it to be served. That kind of thing caused problems for people who migrated various kinds of data from one point to another, instead of copying it, or creating it in the right place to start with. Yup. In the video I linked to earlier, I talk about that problem. It's an easy mistake to make. Almost always, the solution is to just restorecon -vR the parent directory and you'll see what it was, and what it was changed to. Then it starts working. -- ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: I think Firefox crashed my system
On Sun, 2023-12-10 at 16:08 -0700, Joe Zeff wrote: > On 12/10/2023 03:09 PM, Patrick O'Callaghan wrote: > > In my case at least there wasn't even a mouse cursor on screen, and > > the > > fact that nothing was written to the journal for about 10 hours > > before > > I rebooted would seem to indicate everything was dead. I should > > have > > tried an ssh from my laptop but was too impatient to get the system > > up. > > Have you tried activating the Magic SysRq key and using it when this > happens? It's never happened before. If it happens again I'll consider it. poc -- ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
