Re: Strange problem with phpmyadmin after recent dnf update?? Was GNOME Shell integration
On 14 Nov 2023 at 16:06, Michael D. Setzer II via user wrote: To: users@lists.fedoraproject.org Date sent: Tue, 14 Nov 2023 16:06:52 +1000 Subject:Strange problem with phpmyadmin after recent dnf upate?? Priority: normal Send reply to: mi...@guam.net, Community support for Fedora users From: "Michael D. Setzer II via users" Copies to: "Michael D. Setzer II" > Failed to set session cookie. Maybe you are using HTTP instead of > HTTPS to access phpMyAdmin. > > Had been using firefox to access phpMyAdmin on a system to > update databases. > > Just now get the above error message. > > Have found that if I run firefox from root user rather than my user > it works fine and connects and allows same processes that I was > able to do? > Problem was GNOME Shell integration extension in Firefox?? Recent update on gnome-tweaks and it said to install this extension?? But seems it messes with the phpMyAdmin in some way?? Just disabled the extension, and the old process works fine, so not sure why the extension would screw up the login?? Thanks. > So, what might have changed. > Recall seeing firefox upgrade, but tried with Chrome and same > error message? > > > ++ > Michael D. Setzer II - Computer Science Instructor (Retired) > mailto:mi...@guam.net > mailto:msetze...@gmail.com > Guam - Where America's Day Begins > G4L Disk Imaging Project maintainer > http://sourceforge.net/projects/g4l/ > ++ > > > ___ > users mailing list -- users@lists.fedoraproject.org > To unsubscribe send an email to users-le...@lists.fedoraproject.org > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org > Do not reply to spam, report it: > https://pagure.io/fedora-infrastructure/new_issue ++ Michael D. Setzer II - Computer Science Instructor (Retired) mailto:mi...@guam.net mailto:msetze...@gmail.com Guam - Where America's Day Begins G4L Disk Imaging Project maintainer http://sourceforge.net/projects/g4l/ ++ ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Strange problem with phpmyadmin after recent dnf upate??
Failed to set session cookie. Maybe you are using HTTP instead of HTTPS to access phpMyAdmin. Had been using firefox to access phpMyAdmin on a system to update databases. Just now get the above error message. Have found that if I run firefox from root user rather than my user it works fine and connects and allows same processes that I was able to do? So, what might have changed. Recall seeing firefox upgrade, but tried with Chrome and same error message? ++ Michael D. Setzer II - Computer Science Instructor (Retired) mailto:mi...@guam.net mailto:msetze...@gmail.com Guam - Where America's Day Begins G4L Disk Imaging Project maintainer http://sourceforge.net/projects/g4l/ ++ ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: strange problem, may be related to ssh
Thanks for the clarification Samuel, On 12/11/2023 19.09, Samuel Sieb wrote: On 11/11/23 14:07, fed...@eyal.emu.id.au wrote: My SMTP server requires SSL/TLS security, and uploading files to the same site requires sftp. So both run over ssh. This is not correct. SSL ≠ SSH. They use similar encryption, but they are different protocols and not using the same port. True. I meant it in a very weak way as saying "they share some encryption library that may be the source of the problem". I do not know enough about the internals to see how much they share. The problem turned out to not be related at all. -- Eyal at Home (fed...@eyal.emu.id.au) ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: strange problem, may be related to ssh
On 11/11/23 14:07, fed...@eyal.emu.id.au wrote: My SMTP server requires SSL/TLS security, and uploading files to the same site requires sftp. So both run over ssh. This is not correct. SSL ≠ SSH. They use similar encryption, but they are different protocols and not using the same port. ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: strange problem, may be related to ssh [resolved]
On 12/11/2023 10.06, fed...@eyal.emu.id.au wrote: On 12/11/23 09:16, Roger Heflin wrote: If connections/files/stuff passes that is less than 1 network packet (about 1500 bytes - header--say 1460 give or take) then this is a sign that a piece of the network somehow has the wrong MTU size. I have seen network ports not get their MTU set to 1502 or 1504 and when this happens it causes the MTU on the network to be 2-4 bytes short and causes havoc. Routers have done similar things. I have seen network port restarts sometimes cause the MTU to be wrong. ping -s 1400 and ping -s 2000 if 2000 fails then raise the 1400 by 2 bytes at a time until it starts failing (or do a binary search for it, but it is going to be under 1500). Lower your main host interface's MTU by say 4 and retest, if that "fixes" it that is a sign that this is the issue. It did fix it. I initially dropped the MTU to 1400 and now all uploads work. I hope email will go out now too. I will fine tune it later. I now verified that it all works with MTU down (from 1500) to 1456 (using ifconfig), but fails with 1458 or above. Until the problem is resolved by my ISP I updated /etc/sysconfig/network-scripts/ifcfg-eth1 eyal I have an open case with my ISP who are in charge of my modem etc. and I think they are involved in the problem. Thanks everyone Eyal On Sat, Nov 11, 2023 at 4:08 PM wrote: Since the middle of the night on 7/Nov, uploading files with ssh is problematic. My SMTP server requires SSL/TLS security, and uploading files to the same site requires sftp. So both run over ssh. I have a few scripts that run from cron and send me mail when required. They also upload some files for other people and for me when I am away from home. Now here is the problem. Small files pass though just fine. Using sftp I measured that files up to 1300 bytes upload, but anything larger hangs. Large mail is also blocked, queued as seen in mailq: (timeout writing message to ..net.au.: Connection timed) It seems that after some time (often hours) things resolve. Rebooting the machine also allows the mail through. Scripts that upload larger files (using lftp) hang for hours. Now I tested the same from a laptop over 4G and it does not show any of these problems. So it is probably not at the receiving end (I also asked them). All they see is occasional timeouts on mail and ssh (from me). I cannot figure what can do this. Small files upload OK larger ones hang??? I said earlier "middle of the night" because I was not at my computer then and nothing of note that I could see, but the problems started showing in the logs. There is still the possibility of my ISP fiddling with the modem remotely (in the past they did it around this time). I am chasing them. One thing that can help now is a way to un-hang the uploads without having to reboot. I do not know where to even look. Some details: The modem uses 4G for wireless internet. I used a laptop wired to my server, then wired to the modem, then connected to my WiFi ap (which is wired to the modem) and all hang on large(ish) uploads. Only when I connected the laptop to my phone (as a WiFi ap) things worked well. BTW, one thing I did was disable ipv6 but the problem persists. -- Eyal at Home (fed...@eyal.emu.id.au) -- Eyal at Home (fed...@eyal.emu.id.au) ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: strange problem, may be related to ssh [resolved]
On 12/11/23 09:16, Roger Heflin wrote: If connections/files/stuff passes that is less than 1 network packet (about 1500 bytes - header--say 1460 give or take) then this is a sign that a piece of the network somehow has the wrong MTU size. I have seen network ports not get their MTU set to 1502 or 1504 and when this happens it causes the MTU on the network to be 2-4 bytes short and causes havoc. Routers have done similar things.I have seen network port restarts sometimes cause the MTU to be wrong. ping -s 1400and ping -s 2000 if 2000 fails then raise the 1400 by 2 bytes at a time until it starts failing (or do a binary search for it, but it is going to be under 1500). Lower your main host interface's MTU by say 4 and retest, if that "fixes" it that is a sign that this is the issue. It did fix it. I initially dropped the MTU to 1400 and now all uploads work. I hope email will go out now too. I will fine tune it later. I have an open case with my ISP who are in charge of my modem etc. and I think they are involved in the problem. Thanks everyone Eyal On Sat, Nov 11, 2023 at 4:08 PM wrote: Since the middle of the night on 7/Nov, uploading files with ssh is problematic. My SMTP server requires SSL/TLS security, and uploading files to the same site requires sftp. So both run over ssh. I have a few scripts that run from cron and send me mail when required. They also upload some files for other people and for me when I am away from home. Now here is the problem. Small files pass though just fine. Using sftp I measured that files up to 1300 bytes upload, but anything larger hangs. Large mail is also blocked, queued as seen in mailq: (timeout writing message to ..net.au.: Connection timed) It seems that after some time (often hours) things resolve. Rebooting the machine also allows the mail through. Scripts that upload larger files (using lftp) hang for hours. Now I tested the same from a laptop over 4G and it does not show any of these problems. So it is probably not at the receiving end (I also asked them). All they see is occasional timeouts on mail and ssh (from me). I cannot figure what can do this. Small files upload OK larger ones hang??? I said earlier "middle of the night" because I was not at my computer then and nothing of note that I could see, but the problems started showing in the logs. There is still the possibility of my ISP fiddling with the modem remotely (in the past they did it around this time). I am chasing them. One thing that can help now is a way to un-hang the uploads without having to reboot. I do not know where to even look. Some details: The modem uses 4G for wireless internet. I used a laptop wired to my server, then wired to the modem, then connected to my WiFi ap (which is wired to the modem) and all hang on large(ish) uploads. Only when I connected the laptop to my phone (as a WiFi ap) things worked well. BTW, one thing I did was disable ipv6 but the problem persists. -- Eyal at Home (e...@eyal.emu.id.au) ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue -- Eyal at home (e...@eyal.emu.id.au) ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: strange problem, may be related to ssh
On Sat, Nov 11, 2023 at 5:08 PM wrote: > > Since the middle of the night on 7/Nov, uploading files with ssh is > problematic. > > My SMTP server requires SSL/TLS security, and uploading files to the same > site requires sftp. > So both run over ssh. > > I have a few scripts that run from cron and send me mail when required. > They also upload some files for other people and for me when I am away from > home. > > Now here is the problem. Small files pass though just fine. Using sftp I > measured > that files up to 1300 bytes upload, but anything larger hangs. Large mail is > also blocked, > queued as seen in mailq: > (timeout writing message to ..net.au.: Connection timed) > > It seems that after some time (often hours) things resolve. > Rebooting the machine also allows the mail through. > > Scripts that upload larger files (using lftp) hang for hours. > > Now I tested the same from a laptop over 4G and it does not show any of these > problems. > So it is probably not at the receiving end (I also asked them). > All they see is occasional timeouts on mail and ssh (from me). > > I cannot figure what can do this. Small files upload OK larger ones hang??? > > I said earlier "middle of the night" because I was not at my computer then and > nothing of note that I could see, but the problems started showing in the > logs. > > There is still the possibility of my ISP fiddling with the modem remotely (in > the > past they did it around this time). I am chasing them. > > One thing that can help now is a way to un-hang the uploads without having to > reboot. > I do not know where to even look. Well, SMTP is store and forward. The MUA or MTA will keep retrying until it times out (perhaps several days later). So it seems like restarting the service might be a good choice. I'm not sure which service to restart. I would start with the SSH or SFTP server. > Some details: > > The modem uses 4G for wireless internet. > > I used a laptop wired to my server, then wired to the modem, then connected > to my WiFi ap > (which is wired to the modem) and all hang on large(ish) uploads. > > Only when I connected the laptop to my phone (as a WiFi ap) things worked > well. > > BTW, one thing I did was disable ipv6 but the problem persists. Jeff ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: strange problem, may be related to ssh
If connections/files/stuff passes that is less than 1 network packet (about 1500 bytes - header--say 1460 give or take) then this is a sign that a piece of the network somehow has the wrong MTU size. I have seen network ports not get their MTU set to 1502 or 1504 and when this happens it causes the MTU on the network to be 2-4 bytes short and causes havoc. Routers have done similar things.I have seen network port restarts sometimes cause the MTU to be wrong. ping -s 1400and ping -s 2000 if 2000 fails then raise the 1400 by 2 bytes at a time until it starts failing (or do a binary search for it, but it is going to be under 1500). Lower your main host interface's MTU by say 4 and retest, if that "fixes" it that is a sign that this is the issue. On Sat, Nov 11, 2023 at 4:08 PM wrote: > > Since the middle of the night on 7/Nov, uploading files with ssh is > problematic. > > My SMTP server requires SSL/TLS security, and uploading files to the same > site requires sftp. > So both run over ssh. > > I have a few scripts that run from cron and send me mail when required. > They also upload some files for other people and for me when I am away from > home. > > Now here is the problem. Small files pass though just fine. Using sftp I > measured > that files up to 1300 bytes upload, but anything larger hangs. Large mail is > also blocked, > queued as seen in mailq: > (timeout writing message to ..net.au.: Connection timed) > > It seems that after some time (often hours) things resolve. > Rebooting the machine also allows the mail through. > > Scripts that upload larger files (using lftp) hang for hours. > > Now I tested the same from a laptop over 4G and it does not show any of these > problems. > So it is probably not at the receiving end (I also asked them). > All they see is occasional timeouts on mail and ssh (from me). > > I cannot figure what can do this. Small files upload OK larger ones hang??? > > I said earlier "middle of the night" because I was not at my computer then and > nothing of note that I could see, but the problems started showing in the > logs. > > There is still the possibility of my ISP fiddling with the modem remotely (in > the > past they did it around this time). I am chasing them. > > One thing that can help now is a way to un-hang the uploads without having to > reboot. > I do not know where to even look. > > Some details: > > The modem uses 4G for wireless internet. > > I used a laptop wired to my server, then wired to the modem, then connected > to my WiFi ap > (which is wired to the modem) and all hang on large(ish) uploads. > > Only when I connected the laptop to my phone (as a WiFi ap) things worked > well. > > BTW, one thing I did was disable ipv6 but the problem persists. > > -- > Eyal at Home (e...@eyal.emu.id.au) > ___ > users mailing list -- users@lists.fedoraproject.org > To unsubscribe send an email to users-le...@lists.fedoraproject.org > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org > Do not reply to spam, report it: > https://pagure.io/fedora-infrastructure/new_issue ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
strange problem, may be related to ssh
Since the middle of the night on 7/Nov, uploading files with ssh is problematic. My SMTP server requires SSL/TLS security, and uploading files to the same site requires sftp. So both run over ssh. I have a few scripts that run from cron and send me mail when required. They also upload some files for other people and for me when I am away from home. Now here is the problem. Small files pass though just fine. Using sftp I measured that files up to 1300 bytes upload, but anything larger hangs. Large mail is also blocked, queued as seen in mailq: (timeout writing message to ..net.au.: Connection timed) It seems that after some time (often hours) things resolve. Rebooting the machine also allows the mail through. Scripts that upload larger files (using lftp) hang for hours. Now I tested the same from a laptop over 4G and it does not show any of these problems. So it is probably not at the receiving end (I also asked them). All they see is occasional timeouts on mail and ssh (from me). I cannot figure what can do this. Small files upload OK larger ones hang??? I said earlier "middle of the night" because I was not at my computer then and nothing of note that I could see, but the problems started showing in the logs. There is still the possibility of my ISP fiddling with the modem remotely (in the past they did it around this time). I am chasing them. One thing that can help now is a way to un-hang the uploads without having to reboot. I do not know where to even look. Some details: The modem uses 4G for wireless internet. I used a laptop wired to my server, then wired to the modem, then connected to my WiFi ap (which is wired to the modem) and all hang on large(ish) uploads. Only when I connected the laptop to my phone (as a WiFi ap) things worked well. BTW, one thing I did was disable ipv6 but the problem persists. -- Eyal at Home (e...@eyal.emu.id.au) ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: (fedora) Re: sshd on F31 : strange problem with login with keys's
On 2019-11-30 04:34, Samuel Sieb wrote: > On 11/28/19 4:33 AM, Ed Greshko wrote: >> On 2019-11-28 20:28, Ed Greshko wrote: >>> If you're suggesting this to be a permission issue on authorized_keys >>> wouldn't it be a good >>> idea to request the output of "ls -Z ~/.ssh"? >> >> Oh, as well as "ls -Zd ~/.ssh"? > > Or combine the results of both using "ls -Za ~/.ssh". Sure. I would have said that, had I remembered at the time that the context of the ~/.ssh directory was needed as well. :-) -- The key to getting good answers is to ask good questions. ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Re: (fedora) Re: sshd on F31 : strange problem with login with keys's
On 11/28/19 4:33 AM, Ed Greshko wrote: On 2019-11-28 20:28, Ed Greshko wrote: If you're suggesting this to be a permission issue on authorized_keys wouldn't it be a good idea to request the output of "ls -Z ~/.ssh"? Oh, as well as "ls -Zd ~/.ssh"? Or combine the results of both using "ls -Za ~/.ssh". ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Re: EXTERNAL: Re: sshd on F31 : strange problem with login with keys's
On Thu, 2019-11-28 at 16:27 +, Wells, Roger K. via users wrote: > On 11/26/19 8:32 AM, Ed Greshko wrote: > > On 2019-11-26 20:27, Jouk Jansen wrote: > > > I'm trying to setup an ssh-server on F31 which logs a user in > > > without a > > > password, but with a key-exchange. I generated all the keys and > > > placed them > > > in the right locations. It still asks for the password. > > > > > > Than comes the strange : I stoped the service by "systemctl stop > > > sshd" and > > > did run "as root" /usr/sbin/sshd. And than it just worked. (tried > > > to stop > > > and start with systemctl again made the passwordless login fail > > > again) > > > > > > Question : why does is work with just running "/usr/sbin/sshd" > > > but not with > > > "systemctl start sshd" ? > > One thing you should check is the permissions on the ~/.ssh on the > > machine you're trying to connect > > to. If it is not 700 you will get the behavior you cite. > I've seen this on several fedora updates. Something changes > permissions > on ~/.ssh and then what you see happens Nothing changes permissions on updates on itself. The .ssh directory was copied from somewhere else and it retained its SELinux context or wrong modes. Regards, -- Jakub Jelen Senior Software Engineer Security Technologies Red Hat, Inc. ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Re: EXTERNAL: Re: sshd on F31 : strange problem with login with keys's
On 11/26/19 8:32 AM, Ed Greshko wrote: > On 2019-11-26 20:27, Jouk Jansen wrote: >> I'm trying to setup an ssh-server on F31 which logs a user in without a >> password, but with a key-exchange. I generated all the keys and placed them >> in the right locations. It still asks for the password. >> >> Than comes the strange : I stoped the service by "systemctl stop sshd" and >> did run "as root" /usr/sbin/sshd. And than it just worked. (tried to stop >> and start with systemctl again made the passwordless login fail again) >> >> Question : why does is work with just running "/usr/sbin/sshd" but not with >> "systemctl start sshd" ? > One thing you should check is the permissions on the ~/.ssh on the machine > you're trying to connect > to. If it is not 700 you will get the behavior you cite. I've seen this on several fedora updates. Something changes permissions on ~/.ssh and then what you see happens > > -- Roger Wells, P.E. leidos 221 Third St Newport, RI 02840 401-847-4210 (voice) 401-849-1585 (fax) roger.k.we...@leidos.com ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Re: (fedora) Re: sshd on F31 : strange problem with login with keys's
On 2019-11-28 20:50, Jouk Jansen wrote: > Ed Greshko wrote on 28-NOV-2019 13:46:10.58 > >> On 2019-11-28 20:28, Ed Greshko wrote: >>> If you're suggesting this to be a permission issue on authorized_keys >>> wouldn't it be a good >>> idea to request the output of "ls -Z ~/.ssh"? >> Oh, as well as "ls -Zd ~/.ssh"? > > vleegert-jj ) ls -Z .ssh > system_u:object_r:default_t:s0 authorized_keys > system_u:object_r:default_t:s0 config > system_u:object_r:default_t:s0 id_rsa.jacobjansen > system_u:object_r:default_t:s0 id_rsa.jacobjansen.pub > system_u:object_r:default_t:s0 known_hosts > system_u:object_r:default_t:s0 known_hosts~ > system_u:object_r:default_t:s0 result.pub > vleegert-jj ) ls -Zd .ssh > system_u:object_r:default_t:s0 .ssh > vleegert-jj ) I would suggest running "restorecon -R ~/.ssh" Mine appear as so [egreshko@meimei ~]$ ls -Z ~/.ssh unconfined_u:object_r:ssh_home_t:s0 authorized_keys unconfined_u:object_r:ssh_home_t:s0 authorized_keys.bak unconfined_u:object_r:ssh_home_t:s0 id_rsa unconfined_u:object_r:ssh_home_t:s0 id_rsa.pub unconfined_u:object_r:ssh_home_t:s0 known_hosts [egreshko@meimei ~]$ ls -Zd ~/.ssh unconfined_u:object_r:ssh_home_t:s0 /home/egreshko/.ssh -- The key to getting good answers is to ask good questions. ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Re: (fedora) Re: sshd on F31 : strange problem with login with keys's
Ed Greshko wrote on 28-NOV-2019 13:46:10.58 >On 2019-11-28 20:28, Ed Greshko wrote: >> If you're suggesting this to be a permission issue on authorized_keys >> wouldn't it be a good >> idea to request the output of "ls -Z ~/.ssh"? >Oh, as well as "ls -Zd ~/.ssh"? vleegert-jj ) ls -Z .ssh system_u:object_r:default_t:s0 authorized_keys system_u:object_r:default_t:s0 config system_u:object_r:default_t:s0 id_rsa.jacobjansen system_u:object_r:default_t:s0 id_rsa.jacobjansen.pub system_u:object_r:default_t:s0 known_hosts system_u:object_r:default_t:s0 known_hosts~ system_u:object_r:default_t:s0 result.pub vleegert-jj ) ls -Zd .ssh system_u:object_r:default_t:s0 .ssh vleegert-jj ) Pax, vel iniusta, utilior est quam iustissimum bellum. (free after Marcus Tullius Cicero (106 b.Chr.-46 b.Chr.) Epistularum ad Atticum 7.1.4.3) Touch not the cat bot a glove >--< Jouk Jansen jo...@hrem.nano.tudelft.nl Technische Universiteit Delfttt uu uu ddd Kavli Institute of Nanoscience tt uu uu dddd Nationaal centrum voor HREM tt uu uu dd dd Lorentzweg 1 tt uu uu dd dd 2628 CJ Delfttt uu uu dd dd Nederlandtt uu uu dddd tel. 31-15-2782272 tt uuu ddd >--< ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Re: (fedora) Re: sshd on F31 : strange problem with login with keys's
On 2019-11-28 20:28, Ed Greshko wrote: > If you're suggesting this to be a permission issue on authorized_keys > wouldn't it be a good > idea to request the output of "ls -Z ~/.ssh"? Oh, as well as "ls -Zd ~/.ssh"? -- The key to getting good answers is to ask good questions. ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Re: (fedora) Re: sshd on F31 : strange problem with login with keys's
On 2019-11-28 20:21, Jakub Jelen wrote: > On Wed, 2019-11-27 at 13:47 +0100, Jouk Jansen wrote: >> Jakub Jelen wrote on 27-NOV-2019 13:20:25.09 >> >>> On Tue, 2019-11-26 at 13:27 +0100, Jouk Jansen wrote: >> [snip] Question : why does is work with just running "/usr/sbin/sshd" but not with "systemctl start sshd" ? >>> This sounds like an issue with selinux permissions on the >>> authorizied >>> keys file or path to it. Configure sshd to run in debug mode by >>> setting >>> LogLevel DEBUG3 in sshd_config, restart the service and retry. The >>> logs >>> will show up in journal and in /var/log/secure pointing the reason >>> why >>> your key was rejected. >> You are right. I switched selinux off (setenforce 0) and the problem >> is >> gone. I could not find an entry in the journalctl -e output (but >> maybe I >> overlooked (too many records)). Perhaps I should look in the selinux >> logs, >> but where do I find them? > Hello. > I would start with sshd logs as I described above. The selinux denials > are in /var/log/audit/audit.log but they sometimes do not give enough > information what is wrong. If you're suggesting this to be a permission issue on authorized_keys wouldn't it be a good idea to request the output of "ls -Z ~/.ssh"? -- The key to getting good answers is to ask good questions. ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Re: (fedora) Re: sshd on F31 : strange problem with login with keys's
On Wed, 2019-11-27 at 13:47 +0100, Jouk Jansen wrote: > Jakub Jelen wrote on 27-NOV-2019 13:20:25.09 > > > On Tue, 2019-11-26 at 13:27 +0100, Jouk Jansen wrote: > [snip] > > > Question : why does is work with just running "/usr/sbin/sshd" > > > but > > > not with > > > "systemctl start sshd" ? > > This sounds like an issue with selinux permissions on the > > authorizied > > keys file or path to it. Configure sshd to run in debug mode by > > setting > > LogLevel DEBUG3 in sshd_config, restart the service and retry. The > > logs > > will show up in journal and in /var/log/secure pointing the reason > > why > > your key was rejected. > > You are right. I switched selinux off (setenforce 0) and the problem > is > gone. I could not find an entry in the journalctl -e output (but > maybe I > overlooked (too many records)). Perhaps I should look in the selinux > logs, > but where do I find them? Hello. I would start with sshd logs as I described above. The selinux denials are in /var/log/audit/audit.log but they sometimes do not give enough information what is wrong. Regards, -- Jakub Jelen Senior Software Engineer Security Technologies Red Hat, Inc. ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Re: (fedora) Re: sshd on F31 : strange problem with login with keys's
Jakub Jelen wrote on 27-NOV-2019 13:20:25.09 >On Tue, 2019-11-26 at 13:27 +0100, Jouk Jansen wrote: [snip] >> Question : why does is work with just running "/usr/sbin/sshd" but >> not with >> "systemctl start sshd" ? >This sounds like an issue with selinux permissions on the authorizied >keys file or path to it. Configure sshd to run in debug mode by setting >LogLevel DEBUG3 in sshd_config, restart the service and retry. The logs >will show up in journal and in /var/log/secure pointing the reason why >your key was rejected. You are right. I switched selinux off (setenforce 0) and the problem is gone. I could not find an entry in the journalctl -e output (but maybe I overlooked (too many records)). Perhaps I should look in the selinux logs, but where do I find them? Regards Jouk Pax, vel iniusta, utilior est quam iustissimum bellum. (free after Marcus Tullius Cicero (106 b.Chr.-46 b.Chr.) Epistularum ad Atticum 7.1.4.3) Touch not the cat bot a glove >--< Jouk Jansen jo...@hrem.nano.tudelft.nl Technische Universiteit Delfttt uu uu ddd Kavli Institute of Nanoscience tt uu uu dddd Nationaal centrum voor HREM tt uu uu dd dd Lorentzweg 1 tt uu uu dd dd 2628 CJ Delfttt uu uu dd dd Nederlandtt uu uu dddd tel. 31-15-2782272 tt uuu ddd >--< ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Re: sshd on F31 : strange problem with login with keys's
On Tue, 2019-11-26 at 13:27 +0100, Jouk Jansen wrote: > Hi All, > > I'm trying to setup an ssh-server on F31 which logs a user in without > a > password, but with a key-exchange. I generated all the keys and > placed them > in the right locations. It still asks for the password. > > Than comes the strange : I stoped the service by "systemctl stop > sshd" and > did run "as root" /usr/sbin/sshd. And than it just worked. (tried to > stop > and start with systemctl again made the passwordless login fail > again) > > Question : why does is work with just running "/usr/sbin/sshd" but > not with > "systemctl start sshd" ? This sounds like an issue with selinux permissions on the authorizied keys file or path to it. Configure sshd to run in debug mode by setting LogLevel DEBUG3 in sshd_config, restart the service and retry. The logs will show up in journal and in /var/log/secure pointing the reason why your key was rejected. Regards, -- Jakub Jelen Senior Software Engineer Security Technologies Red Hat, Inc. ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Re: (fedora) Re: sshd on F31 : strange problem with login with keys's
Tom Horsley wrote on 26-NOV-2019 19:05:50.24 >Try running the ssh command which is attempting to >login with the -v -v -v options, then you can see what it Does not learn me much (I added the log below). They are different from line 99 when a 1 or 0 is returned which enables/disables the key-login apparently. >is trying and what didn't work. >If it is an old enough system it may not share any >ciphers with the new f31 system as they have disabled >a lot of old ciphers by default. This would be strange since I put all the needed cyphers in /etc/ssh/sshd_config. And why would it work for running the command manually and not for the one started with systemctl? Regards Jouk = log with starting manually (connects OK ) tango-jj) ssh -v -v -v vleegert debug(27-NOV-2019 08:11:00.58): Ssh2/SSH2.C:1896: CRTL version (SYS$SHARE:DECC$S HR.EXE ident) is ELF debug(27-NOV-2019 08:11:00.60): SshAppCommon/SSHAPPCOMMON.C:313: Allocating glob al SshRegex context. debug(27-NOV-2019 08:11:00.61): SshConfig/SSHCONFIG.C:3482: Metaconfig parsing s topped at line 4. debug(27-NOV-2019 08:11:00.61): SshConfig/SSHCONFIG.C:890: Setting variable 'Ver boseMode' to 'FALSE'. debug(27-NOV-2019 08:11:00.61): SshConfig/SSHCONFIG.C:3390: Unable to open ssh2/ ssh2_config debug(27-NOV-2019 08:11:00.62): Connecting to vleegert, port 22... (SOCKS not us ed) debug(27-NOV-2019 08:11:00.62): Ssh2/SSH2.C:2881: Entering event loop. debug(27-NOV-2019 08:11:00.64): Ssh2Client/SSHCLIENT.C:1655: Creating transport protocol. debug(27-NOV-2019 08:11:00.64): SshAuthMethodClient/SSHAUTHMETHODC.C:104: Added "publickey" to usable methods. debug(27-NOV-2019 08:11:00.64): SshAuthMethodClient/SSHAUTHMETHODC.C:104: Added "password" to usable methods. debug(27-NOV-2019 08:11:00.64): Ssh2Client/SSHCLIENT.C:1696: Creating userauth p rotocol. debug(27-NOV-2019 08:11:00.64): client supports 2 auth methods: 'publickey,passw ord' debug(27-NOV-2019 08:11:00.64): SshUnixTcp/SSHUNIXTCP.C:1758: using local hostna me tango.nano.tudelft.nl debug(27-NOV-2019 08:11:00.64): Ssh2Common/SSHCOMMON.C:541: local ip = 131.180.1 21.84, local port = 57056 debug(27-NOV-2019 08:11:00.64): Ssh2Common/SSHCOMMON.C:543: remote ip = 131.180. 116.49, remote port = 22 debug(27-NOV-2019 08:11:00.64): SshConnection/SSHCONN.C:2584: Wrapping... debug(27-NOV-2019 08:11:00.64): SshReadLine/SSHREADLINE.C:3662: Initializing Rea dLine... debug(27-NOV-2019 08:11:00.66): Remote version: SSH-2.0-OpenSSH_8.1 debug(27-NOV-2019 08:11:00.66): OpenSSH: Major: 8 Minor: 1 Revision: 0 debug(27-NOV-2019 08:11:00.66): Ssh2Transport/TRCOMMON.C:1857: All versions of O penSSH handle kex guesses incorrectly. debug(27-NOV-2019 08:11:00.66): Ssh2Transport/TRCOMMON.C:1935: Using Client orde r for common key exchange algorithms. debug(27-NOV-2019 08:11:00.66): Ssh2Transport/TRCOMMON.C:1139: Sending packet wi th type 2 to connection debug(27-NOV-2019 08:11:00.66): Ssh2Transport/TRCOMMON.C:1139: Sending packet wi th type 20 to connection debug(27-NOV-2019 08:11:00.66): Ssh2Transport/TRCOMMON.C:2832: >TR packet_type=2 0 debug(27-NOV-2019 08:11:00.66): Ssh2Transport/TRCOMMON.C:2394: lang s to c: `', lang c to s: `' debug(27-NOV-2019 08:11:00.66): Ssh2Transport/TRCOMMON.C:2459: c_to_s: cipher ae s128-cbc, mac hmac-sha1, compression none debug(27-NOV-2019 08:11:00.66): Ssh2Transport/TRCOMMON.C:2462: s_to_c: cipher ae s128-cbc, mac hmac-sha1, compression none debug(27-NOV-2019 08:11:00.67): Ssh2Transport/TRCOMMON.C:1139: Sending packet wi th type 2 to connection debug(27-NOV-2019 08:11:00.67): Ssh2Transport/TRCOMMON.C:1139: Sending packet wi th type 30 to connection debug(27-NOV-2019 08:11:00.68): Ssh2Transport/TRCOMMON.C:2832: >TR packet_type=3 1 debug(27-NOV-2019 08:11:00.69): Remote host key found from database. debug(27-NOV-2019 08:11:00.70): Ssh2Transport/TRCOMMON.C:1139: Sending packet wi th type 2 to connection debug(27-NOV-2019 08:11:00.70): Ssh2Transport/TRCOMMON.C:1139: Sending packet wi th type 21 to connection debug(27-NOV-2019 08:11:00.70): Ssh2Transport/TRCOMMON.C:1139: Sending packet wi th type 2 to connection debug(27-NOV-2019 08:11:00.70): Ssh2Transport/TRCOMMON.C:1139: Sending packet wi th type 5 to connection debug(27-NOV-2019 08:11:00.70): Ssh2Transport/TRCOMMON.C:2832: >TR packet_type=2 1 debug(27-NOV-2019 08:11:00.70): Ssh2Transport/TRCOMMON.C:2832: >TR packet_type=6 debug(27-NOV-2019 08:11:00.70): Ssh2Transport/TRCOMMON.C:1139: Sending packet wi th type 2 to connection debug(27-NOV-2019 08:11:00.70): Ssh2Transport/TRCOMMON.C:1139: Sending packet wi th type 50 to connection debug(27-NOV-2019 08:11:00.71): Ssh2Common/SSHCOMMON.C:342: Received SSH_CROSS_S TARTUP packet from connection protocol. debug(27-NOV-2019 08:11:00.71): Ssh2Common/SSHCOMMON.C:392: Received SSH_CROSS_A LGORITHMS packet from connection protocol. debug(27-NOV-2019 08:11:00.71): Ssh2Transport/TRCOMMON.C:2832: >TR packet_type=5 1 debug(27-NOV-2019 08:11:00.71):
Re: (fedora) Re: sshd on F31 : strange problem with login with keys's
Try running the ssh command which is attempting to login with the -v -v -v options, then you can see what it is trying and what didn't work. If it is an old enough system it may not share any ciphers with the new f31 system as they have disabled a lot of old ciphers by default. ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Re: (fedora) Re: sshd on F31 : strange problem with login with keys's
George N. White III wrote on 26-NOV-2019 14:26:34.37 >On Tue, 26 Nov 2019 at 08:36, Jouk Jansen >wrote: > >> Hi All, >> >> I'm trying to setup an ssh-server on F31 which logs a user in without a [snip] >> Question : why does is work with just running "/usr/sbin/sshd" but not wi= >th >> "systemctl start sshd" ? >> > >When your root ran /usr/sbin/sshd was the very long list of options used >when sshd is started by systemd included? I see: > >$ sudo systemctl status sshd |fold >=E2=97=8F sshd.service - OpenSSH server daemon > [...] > CGroup: /system.slice/sshd.service > =E2=94=94=E2=94=80994 /usr/sbin/sshd -D -oCiphers=3Daes256-gcm@o= On my machine I only get /usr/sbin/sshd -D here Jouk Pax, vel iniusta, utilior est quam iustissimum bellum. (free after Marcus Tullius Cicero (106 b.Chr.-46 b.Chr.) Epistularum ad Atticum 7.1.4.3) Touch not the cat bot a glove >--< Jouk Jansen jo...@hrem.nano.tudelft.nl Technische Universiteit Delfttt uu uu ddd Kavli Institute of Nanoscience tt uu uu dddd Nationaal centrum voor HREM tt uu uu dd dd Lorentzweg 1 tt uu uu dd dd 2628 CJ Delfttt uu uu dd dd Nederlandtt uu uu dddd tel. 31-15-2782272 tt uuu ddd >--< ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Re: (fedora) Re: sshd on F31 : strange problem with login with keys's
Sam Varshavchik wrote on 26-NOV-2019 14:09:36.69 >Jouk Jansen writes: > >> Hi All, >> >> I'm trying to setup an ssh-server on F31 which logs a user in without a >> password, but with a key-exchange. I generated all the keys and placed them >> in the right locations. It still asks for the password. >> >> Than comes the strange : I stoped the service by "systemctl stop sshd" and >> did run "as root" /usr/sbin/sshd. And than it just worked. (tried to stop >> and start with systemctl again made the passwordless login fail again) >> >> Question : why does is work with just running "/usr/sbin/sshd" but not with >> "systemctl start sshd" ? > >Perhaps the actual command and set up, from sshd.service, will offer a clue: > >EnvironmentFile=-/etc/crypto-policies/back-ends/opensshserver.config >EnvironmentFile=-/etc/sysconfig/sshd-permitrootlogin >EnvironmentFile=-/etc/sysconfig/sshd >ExecStart=/usr/sbin/sshd -D $OPTIONS $CRYPTO_POLICY $PERMITROOTLOGIN > >That's what systemctl start sshd does. /etc/crypto-policies/back-ends/opensshserver.config is the default file of the system. /etc/sysconfig/sshd-permitrootlogin does not exists (and we do not try to logon as root anyway. /etc/sysconfig/sshd : In this file the CRYPTO_POLICY= line is uncommented to allow for more cyphers. (I try to connect from a machine with not the newest cyphers (yes I know the risk)) It used to work on a F30 system, which crashed and is now fresh installed with F31. Can it be that I have to add more cyphers to the /etc/ssh/sshd_conf files? (the public key from the client machine starts with : ssh-rsa) Regards Jouk Pax, vel iniusta, utilior est quam iustissimum bellum. (free after Marcus Tullius Cicero (106 b.Chr.-46 b.Chr.) Epistularum ad Atticum 7.1.4.3) Touch not the cat bot a glove >--< Jouk Jansen jo...@hrem.nano.tudelft.nl Technische Universiteit Delfttt uu uu ddd Kavli Institute of Nanoscience tt uu uu dddd Nationaal centrum voor HREM tt uu uu dd dd Lorentzweg 1 tt uu uu dd dd 2628 CJ Delfttt uu uu dd dd Nederlandtt uu uu dddd tel. 31-15-2782272 tt uuu ddd >--< ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Re: sshd on F31 : strange problem with login with keys's
On 2019-11-26 20:27, Jouk Jansen wrote: > I'm trying to setup an ssh-server on F31 which logs a user in without a > password, but with a key-exchange. I generated all the keys and placed them > in the right locations. It still asks for the password. > > Than comes the strange : I stoped the service by "systemctl stop sshd" and > did run "as root" /usr/sbin/sshd. And than it just worked. (tried to stop > and start with systemctl again made the passwordless login fail again) > > Question : why does is work with just running "/usr/sbin/sshd" but not with > "systemctl start sshd" ? One thing you should check is the permissions on the ~/.ssh on the machine you're trying to connect to. If it is not 700 you will get the behavior you cite. -- The key to getting good answers is to ask good questions. ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Re: sshd on F31 : strange problem with login with keys's
On Tue, 26 Nov 2019 at 08:36, Jouk Jansen wrote: > Hi All, > > I'm trying to setup an ssh-server on F31 which logs a user in without a > password, but with a key-exchange. I generated all the keys and placed them > in the right locations. It still asks for the password. > > Than comes the strange : I stoped the service by "systemctl stop sshd" and > did run "as root" /usr/sbin/sshd. And than it just worked. (tried to stop > and start with systemctl again made the passwordless login fail again) > > Question : why does is work with just running "/usr/sbin/sshd" but not with > "systemctl start sshd" ? > When your root ran /usr/sbin/sshd was the very long list of options used when sshd is started by systemd included? I see: $ sudo systemctl status sshd |fold ● sshd.service - OpenSSH server daemon [...] CGroup: /system.slice/sshd.service └─994 /usr/sbin/sshd -D -oCiphers=aes256-...@openssh.com ,chacha20-pol y1...@openssh.com,aes256-ctr,aes256-cbc,aes128-...@openssh.com ,aes128-ctr,aes128 -cbc -oMACs=hmac-sha2-256-...@openssh.com,hmac-sha1-...@openssh.com ,umac-128-etm @openssh.com,hmac-sha2-512-...@openssh.com ,hmac-sha2-256,hmac-sha1,umac-128@open ssh.com,hmac-sha2-512 -oGSSAPIKexAlgorithms=gss-gex-sha1-,gss-group14-sha1- -oKe xAlgorithms=curve25519-sha256,curve25519-sha...@libssh.org ,ecdh-sha2-nistp256,ec dh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie- hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha5 12,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1 -oHostKeyAlgor ithms=rsa-sha2-256,rsa-sha2-256-cert-...@openssh.com ,ecdsa-sha2-nistp256,ecdsa-s ha2-nistp256-cert-...@openssh.com ,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v 0...@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-...@openssh.com ,ecdsa-sha2-nistp52 1,ecdsa-sha2-nistp521-cert-...@openssh.com ,ssh-ed25519,ssh-ed25519-cert-v01@open ssh.com,ssh-rsa,ssh-rsa-cert-...@openssh.com -oPubkeyAcceptedKeyTypes=rsa-sha2-2 56,rsa-sha2-256-cert-...@openssh.com ,ecdsa-sha2-nistp256,ecdsa-sha2-nistp256-cer t-...@openssh.com,ecdsa-sha2-nistp384, ecdsa-sha2-nistp384-cert-...@openssh.com,r sa-sha2-512,rsa-sha2-512-cert-...@openssh.com ,ecdsa-sha2-nistp521,ecdsa-sha2-nis tp521-cert-...@openssh.com,ssh-ed25519,ssh-ed25519-cert-...@openssh.com ,ssh-rsa, ssh-rsa-cert-...@openssh.com -oCASignatureAlgorithms=rsa-sha2-256,ecdsa-sha2-nis tp256,ecdsa-sha2-nistp384,rsa-sha2-512,ecdsa-sha2-nistp521,ssh-ed25519,ssh-rsa -- George N. White III ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Re: sshd on F31 : strange problem with login with keys's
Jouk Jansen writes: Hi All, I'm trying to setup an ssh-server on F31 which logs a user in without a password, but with a key-exchange. I generated all the keys and placed them in the right locations. It still asks for the password. Than comes the strange : I stoped the service by "systemctl stop sshd" and did run "as root" /usr/sbin/sshd. And than it just worked. (tried to stop and start with systemctl again made the passwordless login fail again) Question : why does is work with just running "/usr/sbin/sshd" but not with "systemctl start sshd" ? Perhaps the actual command and set up, from sshd.service, will offer a clue: EnvironmentFile=-/etc/crypto-policies/back-ends/opensshserver.config EnvironmentFile=-/etc/sysconfig/sshd-permitrootlogin EnvironmentFile=-/etc/sysconfig/sshd ExecStart=/usr/sbin/sshd -D $OPTIONS $CRYPTO_POLICY $PERMITROOTLOGIN That's what systemctl start sshd does. pgprI8n4Qiwoo.pgp Description: PGP signature ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
sshd on F31 : strange problem with login with keys's
Hi All, I'm trying to setup an ssh-server on F31 which logs a user in without a password, but with a key-exchange. I generated all the keys and placed them in the right locations. It still asks for the password. Than comes the strange : I stoped the service by "systemctl stop sshd" and did run "as root" /usr/sbin/sshd. And than it just worked. (tried to stop and start with systemctl again made the passwordless login fail again) Question : why does is work with just running "/usr/sbin/sshd" but not with "systemctl start sshd" ? regards Jouk Pax, vel iniusta, utilior est quam iustissimum bellum. (free after Marcus Tullius Cicero (106 b.Chr.-46 b.Chr.) Epistularum ad Atticum 7.1.4.3) Touch not the cat bot a glove >--< Jouk Jansen jo...@hrem.nano.tudelft.nl Technische Universiteit Delfttt uu uu ddd Kavli Institute of Nanoscience tt uu uu dddd Nationaal centrum voor HREM tt uu uu dd dd Lorentzweg 1 tt uu uu dd dd 2628 CJ Delfttt uu uu dd dd Nederlandtt uu uu dddd tel. 31-15-2782272 tt uuu ddd >--< ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Re: strange problem
Chrome was working fine on this system yesterday. The upgrade went fine, so I'm really stumped as to why it has stopped working. Paolo On 11/11/18 2:47 PM, stan wrote: On Sun, 11 Nov 2018 14:03:31 -0800 Paolo Galtieri wrote: What I don't understand about this problem is why it affects only one system. Chrome on my other system works fine as does chrome on my android tablet. Plugins? Configuration? Were some packages rejected for update because of dependencies? Try to remove chrome on the system that doesn't work, and the system that works (be sure to say no to confirmation). Does dnf want to delete the same packages, and the same versions? If the chrome is the same version, then it has to be something else. ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Re: strange problem
On 11/11/2018 03:47 PM, stan wrote: Try to remove chrome on the system that doesn't work, and the system that works (be sure to say no to confirmation). Or, just use dnf --assumeno to make sure it doesn't get removed by accident. ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Re: strange problem
On Sun, 11 Nov 2018 14:03:31 -0800 Paolo Galtieri wrote: > What I don't understand about this problem is why it affects only one > system. Chrome on my other system works fine as does chrome on my > android tablet. Plugins? Configuration? Were some packages rejected for update because of dependencies? Try to remove chrome on the system that doesn't work, and the system that works (be sure to say no to confirmation). Does dnf want to delete the same packages, and the same versions? If the chrome is the same version, then it has to be something else. ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Re: strange problem
What I don't understand about this problem is why it affects only one system. Chrome on my other system works fine as does chrome on my android tablet. Paolo On 11/11/18 12:12 PM, stan wrote: On Sun, 11 Nov 2018 09:55:06 -0800 Paolo Galtieri wrote: I encountered a strange problem today I'm wondering if someone can explain what's going on. Here's the problem, I have 2 systems running F28, one system was upgraded from F27 two days ago, the other upgraded yesterday. Both systems were working fine yesterday. Today the second system will not connect to any website using chrome, I get the following error Your connection is not private with the following detail NET::ERR_CERT_WEAK_SIGNATURE_ALGORITHM If I use firefox I don't get this error. I have killed and restarted chrome and the problem persists. I have even rebooted the system and the problem still persists. What's curious is that the other system doesn't show this failure. The system that fails is the one that actually connects to the internet, the other system routes through the failing system to connect to the internet. Anyone have any idea why I'm seeing this error and how to fix it? Any help is appreciated. I vaguely recall that chrome and firefox were going to start refusing to connect to sites using certificates that were generated with an algorithm that is now considered too weak. It must be something in the chrome configuration of the failing system doing this. What happens if you create a new user, and run chrome as that user? When I saw this in firefox, it was possible to override the refusal. I don't know chrome, so can't say if it also has that ability. Try a web search using 'chrome weak certificate refusal' or similar and you should find what other people did to get around this. ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Re: strange problem
On Sun, 11 Nov 2018 09:55:06 -0800 Paolo Galtieri wrote: > I encountered a strange problem today I'm wondering if someone can > explain what's going on. > > Here's the problem, I have 2 systems running F28, one system was > upgraded from F27 two days ago, the other upgraded yesterday. Both > systems were working fine yesterday. Today the second system will > not connect to any website using chrome, I get the following error > > > Your connection is not private > > with the following detail > > NET::ERR_CERT_WEAK_SIGNATURE_ALGORITHM > > If I use firefox I don't get this error. I have killed and restarted > chrome and the problem persists. I have even rebooted the system and > the problem still persists. What's curious is that the other system > doesn't show this failure. The system that fails is the one that > actually connects to the internet, the other system routes through > the failing system to connect to the internet. > > Anyone have any idea why I'm seeing this error and how to fix it? > > Any help is appreciated. I vaguely recall that chrome and firefox were going to start refusing to connect to sites using certificates that were generated with an algorithm that is now considered too weak. It must be something in the chrome configuration of the failing system doing this. What happens if you create a new user, and run chrome as that user? When I saw this in firefox, it was possible to override the refusal. I don't know chrome, so can't say if it also has that ability. Try a web search using 'chrome weak certificate refusal' or similar and you should find what other people did to get around this. ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
strange problem
I encountered a strange problem today I'm wondering if someone can explain what's going on. Here's the problem, I have 2 systems running F28, one system was upgraded from F27 two days ago, the other upgraded yesterday. Both systems were working fine yesterday. Today the second system will not connect to any website using chrome, I get the following error Your connection is not private with the following detail NET::ERR_CERT_WEAK_SIGNATURE_ALGORITHM If I use firefox I don't get this error. I have killed and restarted chrome and the problem persists. I have even rebooted the system and the problem still persists. What's curious is that the other system doesn't show this failure. The system that fails is the one that actually connects to the internet, the other system routes through the failing system to connect to the internet. Anyone have any idea why I'm seeing this error and how to fix it? Any help is appreciated. Paolo ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Strange problem if your login shell is /bin/ksh
My shell is /bin/ksh My gnome-terminal is configured to be opened as a login shell. Upon opening gnome terminal,I get the following output: /etc/profile.d/colorls.sh: line 4: return: can only `return' from a function or sourced script /etc/profile.d/vte.sh: line 21: return: can only `return' from a function or sourced script -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Strange problem with Haswell HD 4600 IGA and screen resolution
All, I recently built a new desktop machine using a Shuttle SZ87R6, an I7-4770S and a Dell U2713HM monitor. Did my initial HW burn-in and testing using a Fedora 20 KDE Spin Live CD (Kernel 3.11.10-301.fc20.x86_64 KDE Systems settings v4.11.3) everything worked fine and the display resolution was 2560x1440 (native for the display). The last of the parts came in (HD for secondary storage) and I finished the build and did an install and a full system update (Kernel 3.14.8-200.fc20.x86_64 and KDE System Settings v4.11.10, along with ~=750MB of other updates) The display looked odd after rebooting and when I checked it was set to 1600x1200 (not only wrong resolution but wrong aspect ratio). Checked the U2713HM OSD and found that while the max resolution was 2560x1440, current resolution was 1600x1200 and the interface was correctly reported (DVI-D). Verified the interconnection was DVI-D to DVI-D via a dual link DVI cable. Went back inside and rechecked the Display and Monitor settings in Systems Settings and maximum available resolution was 1600x1200 (which is what the display was set to). also noted that the Display and Monitor applet was reporting an HDMI interconnect vice the actual DVI-D. Ran xrandr from the command line and found that while 1920x1200 was shown as an available resolution (at least the correct aspect ratio), I could not set it to that using the command line. Scratched my head and spent several hours Googling to see if anyone else had run into this problem - no luck although there were some postings from roughly a year ago about people in the Win8 world having video problems with the HD 4600 IGA. I then spent some time on the Intel site, found several conflicting threads on HD 4600 capability and did an explicit update to the latest version of the Intel video stack for Linux. No change and still unable to reset video resolution or aspect ratio from within F20. BTW, going back to the earlier kernel is not really an option as I wanted the privilege escalation bug fix that came out in 3.14.6, however with the earlier kernel the resolution and aspect ratio is correct. At this stage, I have pretty well established (at least in my own mind) that it is a SW vice a HW problem and it is entirely reproducible as when I reboot with the Live CD the 2560x1440 resolution comes up by default. While at this point I rather strongly suspect the Intel i915 driver and video stack, it could also be either a KDE or an xorg or a kernel issue and I really don' know where to file a bug report since I can't nail down which SW is screwing up or what to try next short of installing a low TDP video card, which I would rather avoid. Any ideas, insight or suggestions would be most welcome. Paul Livingston p...@accokeekwoods.com -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Strange problem -
On 10.02.2014 14:17, Bob Goodwin - Zuni, Virginia, USA wrote: … But the sledgehammer [bobG, new user] works! Bob http://www.youtube.com/embed/cQl6r0fqRAI?rel=0border=0autoplay=1 :) poma -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Strange problem -
On 02/12/2014 02:56 AM, poma wrote: On 10.02.2014 14:17, Bob Goodwin - Zuni, Virginia, USA wrote: … But the sledgehammer [bobG, new user] works! Bob http://www.youtube.com/embed/cQl6r0fqRAI?rel=0border=0autoplay=1 :) great series. lmao nearly every time i watched it. -- peace out. in a world with out fences, who needs gates. tc.hago. g . -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Strange problem -
On 09/02/14 21:06, David wrote: When I offer advice here I am usually ignored. I have offered you advice before with similar results. I know how to solve this but I choose not to give you the information. My apologies David, I try to acknowledge everyone. I also feel this accusation is unjust without specifics ... Ask on the Xfce list. I am aware of, and have at times subscribed to, the xfce list. I may do that. Thank you, Bob -- http://www.qrz.com/db/w2bod Box10 Fedora-20/64bit Linux/XFCE -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Strange problem -
On Sun, 09 Feb 2014 21:06:24 -0500 David dgbo...@gmail.com wrote: Most users here use KDE or Gnome so I doubt they can help you with a Xfce problem. I use Xfce. There are also Fedora lists for Gnome and KDE, this is a Fedora user list, not specific to DE X snipped But? Want a suggestion? A good one? Ask on the Xfce list. Either the Fedora one (second choice but not a bad one) or the real Xfce list (first choice and a better choice IMO). Myabe Bob, has more than one DE installed, it might be some other churn. I havn't looked into it. I use Xfce exclusively and don't' have this problem. I wouldn't ever ask on an upstream list, unless knowing for certain in was a bug in their code. You can get the worksforme answer quite easily, with most upstream whether, Xfce, KDE, Calibre etc.. ___ Regards Frank frankly3d.com -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Strange problem -
On Sun, 09 Feb 2014 20:21:28 -0500 Bob Goodwin - Zuni, Virginia, USA bobgood...@wildblue.net wrote: I worked around the problem by creating a new user, that will have to do! Bob That was using a sledgehammer for toilet paper. In Xfce Application Menu Settings Session and Startup Session Clear Saved Session If you do not want any programs started except those that are in Application Autostart: As above but: Session and Startup uncheck Logout Settings Automatically save session on Logout ___ Regards Frank frankly3d.com -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Strange problem -
On 10/02/14 04:43, Frank Murphy wrote: That was using a sledgehammer for toilet paper. In Xfce Application Menu Settings Session and Startup Session Clear Saved Session If you do not want any programs started except those that are in Application Autostart: As above but: Session and Startup uncheck Logout Settings Automatically save session on Logout ___ Regards Frank frankly3d.com I've done those things early this morning. Clear Saved Session got rid of the stuff it insisted on running after start up but xfce4 is still running in the second console while the first console is displaying junk. I can try entering stuff in console F1 but it has no effect or at least ignores commands. Stopping/killing that first console is what it needs/ My attempts with logctl have not been successful either, Got to feed horses, be back shortly, Bob -- http://www.qrz.com/db/w2bod Box10 Fedora-20/64bit Linux/XFCE -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Strange problem -
On 09/02/14 21:22, poma wrote: I worked around the problem by creating a new user, that will have to do! Bob That is always a valid choice, however 'xfce4-session-settings', http://docs.xfce.org/xfce/xfce4-session/preferences#session ;) If that doesn't help, man 1 loginctl poma That helped although I did not expect it to since nothing showed up under Sessions? That was blank, however after I clicked Clear Saved Session and rebooted xfce stopped bringing up all those pages as it had been ... Xfce is still coming up on console 2. I need to stop whatever causes console 1 to be active. It appears to be happening when xfce4 starts since it sits displaying a small progress circle until something times-out and then switches to the usual larger circle before running? Nothing I did with loginctl worked, it showed only USER bobg 1000 Seat0, nothing else unless I ssh'd in from this computer. Nothing I did appeared to have any effect on or even recognize what was going on on console 1. But the sledgehammer [bobG, new user] works! Bob -- http://www.qrz.com/db/w2bod Box10 Fedora-20/64bit Linux/XFCE -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Strange problem -
On Mon, 10 Feb 2014 08:17:07 -0500 Bob Goodwin - Zuni, Virginia, USA bobgood...@wildblue.net wrote: Xfce is still coming up on console 2. I need to stop whatever causes console 1 to be active. It appears to be happening when xfce4 starts since it sits displaying a small progress circle until something times-out and then switches to the usual larger circle before running? Remove rhgb and quite from the kernel line during bootup. See if you can spot something. If not wait till you login and: journalctl -b | grep timeout # or whatever is the correct time-out you see. ___ Regards Frank frankly3d.com -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Strange problem -
On 10/02/14 08:22, Frank Murphy wrote: Xfce is still coming up on console 2. I need to stop whatever causes console 1 to be active. It appears to be happening when xfce4 starts since it sits displaying a small progress circle until something times-out and then switches to the usual larger circle before running? Remove rhgb and quite from the kernel line during bootup. Done, that is one of the first things I do after installation of system. See if you can spot something. If not wait till you login and: journalctl -b | grep timeout # or whatever is the correct time-out you see. Not sure how to implement time-out but this is the data after 08:33:30 and startxfce4 the small progress circle was displayed: Feb 10 08:33:26 box7 systemd[1]: Started Stop Read-Ahead Data Collection. Feb 10 08:33:30 box7 kernel: mei_me :00:03.0: reset: connect/disconnect timeout. Feb 10 08:33:30 box7 kernel: mei_me :00:03.0: unexpected reset: dev_state = RESETTING Feb 10 08:33:32 box7 fprintd[968]: ** Message: No devices in use, exit Feb 10 08:33:36 box7 kernel: mei_me :00:03.0: reset: connect/disconnect timeout. Feb 10 08:33:36 box7 kernel: mei_me :00:03.0: unexpected reset: dev_state = RESETTING Feb 10 08:33:42 box7 kernel: mei_me :00:03.0: reset: connect/disconnect timeout. Feb 10 08:33:42 box7 kernel: mei_me :00:03.0: unexpected reset: dev_state = RESETTING Feb 10 08:33:48 box7 kernel: mei_me :00:03.0: reset: connect/disconnect timeout. Feb 10 08:33:48 box7 kernel: mei_me :00:03.0: unexpected reset: dev_state = RESETTING Feb 10 08:33:54 box7 kernel: mei_me :00:03.0: reset: connect/disconnect timeout. Feb 10 08:33:54 box7 kernel: mei_me :00:03.0: unexpected reset: dev_state = RESETTING Feb 10 08:33:54 box7 polkitd[669]: Registered Authentication Agent for unix-session:1 (system bus name :1.23 [/usr/libexec/polkit-gnome-authen Feb 10 08:33:54 box7 systemd[1]: Starting CUPS Printing Service... Feb 10 08:33:54 box7 systemd[1]: Started CUPS Printing Service. Feb 10 08:33:54 box7 dbus-daemon[424]: dbus[424]: [system] Activating via systemd: service name='org.freedesktop.RealtimeKit1' unit='rtkit-dae Feb 10 08:33:54 box7 dbus[424]: [system] Activating via systemd: service name='org.freedesktop.RealtimeKit1' unit='rtkit-daemon.service' Feb 10 08:33:54 box7 systemd[1]: Starting RealtimeKit Scheduling Policy Service... Feb 10 08:33:55 box7 dbus-daemon[424]: dbus[424]: [system] Successfully activated service 'org.freedesktop.RealtimeKit1' Feb 10 08:33:55 box7 dbus[424]: [system] Successfully activated service 'org.freedesktop.RealtimeKit1' Feb 10 08:33:55 box7 systemd[1]: Started RealtimeKit Scheduling Policy Service. Feb 10 08:33:55 box7 rtkit-daemon[1063]: Successfully called chroot. Feb 10 08:33:55 box7 rtkit-daemon[1063]: Successfully dropped privileges. Feb 10 08:33:55 box7 rtkit-daemon[1063]: Successfully limited resources. Feb 10 08:33:55 box7 rtkit-daemon[1063]: Running. Feb 10 08:33:55 box7 rtkit-daemon[1063]: Canary thread running. Feb 10 08:33:55 box7 rtkit-daemon[1063]: Watchdog thread running. Feb 10 08:33:55 box7 rtkit-daemon[1063]: Successfully made thread 1062 of process 1062 (/usr/bin/pulseaudio) owned by '1000' high priority at Feb 10 08:33:55 box7 rtkit-daemon[1063]: Supervising 1 threads of 1 processes of 1 users. Feb 10 08:33:55 box7 pulseaudio[1062]: [pulseaudio] core-util.c: Home directory not accessible: Permission denied Feb 10 08:33:55 box7 kernel: fuse init (API version 7.22) Feb 10 08:33:55 box7 systemd[1]: Mounting FUSE Control File System... Feb 10 08:33:55 box7 systemd[1]: Mounted FUSE Control File System. Feb 10 08:33:55 box7 kernel: SELinux: initialized (dev fusectl, type fusectl), uses genfs_contexts Feb 10 08:33:55 box7 kernel: SELinux: initialized (dev fuse, type fuse), uses genfs_contexts Feb 10 08:33:56 box7 dbus-daemon[424]: dbus[424]: [system] Activating via systemd: service name='org.freedesktop.UPower' unit='upower.service' Feb 10 08:33:56 box7 dbus[424]: [system] Activating via systemd: service name='org.freedesktop.UPower' unit='upower.service' Feb 10 08:33:56 box7 systemd[1]: Starting Daemon for power management... Feb 10 08:33:56 box7 dbus-daemon[424]: dbus[424]: [system] Successfully activated service 'org.freedesktop.UPower' Feb 10 08:33:56 box7 dbus[424]: [system] Successfully activated service 'org.freedesktop.UPower' Feb 10 08:33:56 box7 systemd[1]: Started Daemon for power management. Feb 10 08:33:57 box7 dbus-daemon[424]: dbus[424]: [system] Activating via systemd: service name='org.freedesktop.UDisks2' unit='udisks2.servic Feb 10 08:33:57 box7 dbus[424]: [system] Activating via systemd: service name='org.freedesktop.UDisks2' unit='udisks2.service' Feb 10 08:33:57 box7 systemd[1]: Starting Disk Manager... Feb 10 08:33:57 box7 udisksd[1382]: udisks daemon version 2.1.2 starting Feb 10 08:33:57 box7 dbus-daemon[424]: dbus[424]: [system] Successfully activated service 'org.freedesktop.UDisks2' Feb 10
Re: Strange problem -
On Mon, 10 Feb 2014 08:46:30 -0500 Bob Goodwin - Zuni, Virginia, USA bobgood...@wildblue.net wrote: Feb 10 08:33:30 box7 kernel: mei_me :00:03.0: reset: connect/disconnect timeout. What kernel are you using on that box? https://bugzilla.redhat.com/show_bug.cgi?id=917081 also check: https://bbs.archlinux.org/viewtopic.php?id=168403 in case it's Intel having a bad-hair day. ___ Regards Frank frankly3d.com -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Strange problem -
On 10/02/14 09:00, Frank Murphy wrote: On Mon, 10 Feb 2014 08:46:30 -0500 Bob Goodwin - Zuni, Virginia, USA bobgood...@wildblue.net wrote: Feb 10 08:33:30 box7 kernel: mei_me :00:03.0: reset: connect/disconnect timeout. What kernel are you using on that box? [bobg@box7 ~]$ uname -a Linux box7 3.12.9-301.fc20.x86_64 #1 SMP Wed Jan 29 15:56:22 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux on a Dell Optiplex 755 desktop system. https://bugzilla.redhat.com/show_bug.cgi?id=917081 So as in the bug report I did: [root@box7 bobg]# echo -e blacklist mei\ninstall mei /bin/true /etc/modprobe.d/mei.conf [root@box7 bobg]# dracut --force [root@box7 bobg]# exit And for the first time in many months the garbage I have been seeing at boot, which I normally ignore since it did not seem to do anyhing except clutter the display, the log in is nice and clear but console-1 is still busy and xfce is on console-2? Ther is a difference though in that it console-1 now shows at the prompt: xfdesktop: Fatal IO error 11 (Resource temporarily unavailable) on x server :0.0 I don't know what to do about that but I'll bet if I did things would improve? also check: https://bbs.archlinux.org/viewtopic.php?id=168403 in case it's Intel having a bad-hair day. ___ Regards Frank frankly3d.com Bob -- http://www.qrz.com/db/w2bod Box10 Fedora-20/64bit Linux/XFCE -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Strange problem -
On Mon, 10 Feb 2014 09:29:35 -0500 Bob Goodwin - Zuni, Virginia, USA bobgood...@wildblue.net wrote: xfdesktop: Fatal IO error 11 (Resource temporarily unavailable) on x server :0.0 You have a borked X | Xfce try: https://bbs.archlinux.org/viewtopic.php?id=129274 ___ Regards Frank frankly3d.com -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Strange problem -
Fedora 20 64 bit XFCE When logging out from gui I get: Received error while trying to log out Session manager must be in idle state when requesting a shutdown. Each time I reboot a number of windows/tabs are loaded, I go through and close them all. However there is garbage running when I look at ctrl-alt-F1 and XFCE is in ctrl-alt-F2. There must be a command to kill everything but I haven't found it. Need help please, Bob -- http://www.qrz.com/db/w2bod Box10 Fedora-20/64bit Linux/XFCE -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Strange problem -
On 09/02/14 13:23, Bob Goodwin - Zuni, Virginia, USA wrote: Fedora 20 64 bit XFCE When logging out from gui I get: Received error while trying to log out Session manager must be in idle state when requesting a shutdown. Each time I reboot a number of windows/tabs are loaded, I go through and close them all. However there is garbage running when I look at ctrl-alt-F1 and XFCE is in ctrl-alt-F2. There must be a command to kill everything but I haven't found it. Need help please, Bob I worked around the problem by creating a new user, that will have to do! Bob -- http://www.qrz.com/db/w2bod Box10 Fedora-20/64bit Linux/XFCE -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Strange problem -
On 2/9/2014 8:21 PM, Bob Goodwin - Zuni, Virginia, USA wrote: On 09/02/14 13:23, Bob Goodwin - Zuni, Virginia, USA wrote: Fedora 20 64 bit XFCE When logging out from gui I get: Received error while trying to log out Session manager must be in idle state when requesting a shutdown. Each time I reboot a number of windows/tabs are loaded, I go through and close them all. However there is garbage running when I look at ctrl-alt-F1 and XFCE is in ctrl-alt-F2. There must be a command to kill everything but I haven't found it. Need help please, Bob I worked around the problem by creating a new user, that will have to do! Bob Most users here use KDE or Gnome so I doubt they can help you with a Xfce problem. When I offer advice here I am usually ignored. I have offered you advice before with similar results. I know how to solve this but I choose not to give you the information. But? Want a suggestion? A good one? Ask on the Xfce list. Either the Fedora one (second choice but not a bad one) or the real Xfce list (first choice and a better choice IMO). -- David -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Strange problem -
On 10.02.2014 02:21, Bob Goodwin - Zuni, Virginia, USA wrote: On 09/02/14 13:23, Bob Goodwin - Zuni, Virginia, USA wrote: Fedora 20 64 bit XFCE When logging out from gui I get: Received error while trying to log out Session manager must be in idle state when requesting a shutdown. Each time I reboot a number of windows/tabs are loaded, I go through and close them all. However there is garbage running when I look at ctrl-alt-F1 and XFCE is in ctrl-alt-F2. There must be a command to kill everything but I haven't found it. Need help please, Bob I worked around the problem by creating a new user, that will have to do! Bob That is always a valid choice, however 'xfce4-session-settings', http://docs.xfce.org/xfce/xfce4-session/preferences#session ;) If that doesn't help, man 1 loginctl poma -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
[389-users] Strange problem with 389 console
Account activation and inactivation no longer seems to be working with my 389 console system. Unfortunately, there are several people with admin rights to the ldap servers so I am unsure if someone might have messed the server up. Currently, I can select inactivate for an account and I will get back a box showing no errors. If I look at the account however, only the nsmangeddisalble role and nsdisabled roles have been set. The nsaccountlock is never added to the account. Also, if you right click on the account the activate is always greyed out. I can manually add the nsaccountlock attribute and set it to true. If I do this, the activate will appear when I right click on the account but when I activate it only the roles will be removed, the nsaccountlock attribute is still in place. Also I have noticed that there are two entries for some of the attributes if I go to add them to an account, nsaccount lock is one of them. Sadly, this is running in a production system, so I really need to have a way for other SAs to lock out accounts for users that are no longer on the system with having them added attributes for each account. Anyone know what might be going on here? Thanks. -- I am not completely worthless, I can always serve as a bad example. -- 389 users mailing list 389-us...@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/389-users
Re: [389-users] Strange problem with 389 console
On 02/06/2012 08:49 AM, Brian Bresina wrote: Account activation and inactivation no longer seems to be working with my 389 console system. Unfortunately, there are several people with admin rights to the ldap servers so I am unsure if someone might have messed the server up. Currently, I can select inactivate for an account and I will get back a box showing no errors. If I look at the account however, only the nsmangeddisalble role and nsdisabled roles have been set. The nsaccountlock is never added to the account. Also, if you right click on the account the activate is always greyed out. I can manually add the nsaccountlock attribute and set it to true. If I do this, the activate will appear when I right click on the account but when I activate it only the roles will be removed, the nsaccountlock attribute is still in place. Also I have noticed that there are two entries for some of the attributes if I go to add them to an account, nsaccount lock is one of them. Sadly, this is running in a production system, so I really need to have a way for other SAs to lock out accounts for users that are no longer on the system with having them added attributes for each account. Anyone know what might be going on here? Thanks. The way the console does account lockout (and the command line scripts such as ns-inactivate.pl) is to use Roles and Class of Service to provide the nsAccountLock attribute as a virtual attribute based on membership in the disabled role. If you have manually set the nsAccountLock attribute at some point it has turned into a real attribute and is no longer virtual, no longer able to be managed by the console/script virtual attribute mechanism. -- 389 users mailing list 389-us...@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/389-users
Strange problem with guake in F15/KDE
I have a problem with guake in F15/KDE that I don't know how to solve. Can anybody help? In whichever of the following two ways I start guake -typing guake after 'Alt-F2' -clicking on the guake icon it allways opens with the following prompt: [ander@localhost Documents]$ instead of [ander@localhost ~]$ However when I start guake by typing guake in a terminal it takes on the location I was already in, thus: '[ander@localhost ~]$guake' opens in [ander@localhost ~]$ '[ander@localhost Pictures]$guake' opens in [ander@localhost Pictures]$ How can I change the 'Alt-F2'/'icon click' behaviour so that guake allways opens in [ander@localhost ~]$ Alexander -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Strange problem booting a current release mainline kernel under F14
Hi All, I have uograded to F14 and all was well. Because I was tracking a bug I had reported to bugzilla.kernel.org, I was advised to see if I could replicate it in 2.6.38.2. Well, I built that kernel and booted and was not able to replicate the bug, so I assumed it was fixed in in 2.6.38.2. So, I rebooted back into FC14's latest 2.6.35.11-83. During bootup, (things scroll up the screen fast (as usual), but then the screen is turned off and soon, all disk activity stops, but power on computer remains on. No response to keyboard or mouse. All I can do is Ctrl-Alt-Delete. and then power down. Any suggestions how I can debug this problem so I can get to the bottom of it? -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
