[BlueOnyx:08868] Small installation Bug in 5108R

2011-10-19 Thread Dirk Estenfeld
Hello, yesterday I downloaded 5108R and installed in at a new box. After installation I enabled SNMP and wonder why no process is running. After a short investigation I noticed that net-snmp-5.5-31.el6.x86_64 is not existing at the server. I installed it manually via yum. Now it is possible to t

[BlueOnyx:08867] Re: Login manager not responsive on non valid usernames?

2011-10-19 Thread Barry Mishkind
At 05:56 PM 10/19/2011, Michael Stauber wrote: >Hi Barry, > >> How many attempts will it allow? I had >> one a couple of weeks ago that tried >> a dictionary attack and it ran 1700 tries. > >You can configure that in the GUI. After 30 failed attempts in one hour (this >i

[BlueOnyx:08866] Re: Login manager not responsive on non valid usernames?

2011-10-19 Thread Michael Stauber
Hi Barry, > How many attempts will it allow? I had > one a couple of weeks ago that tried > a dictionary attack and it ran 1700 tries. You can configure that in the GUI. After 30 failed attempts in one hour (this is the default) it will still accept connections from th

[BlueOnyx:08865] Re: Login manager not responsive on non valid usernames?

2011-10-19 Thread Barry Mishkind
At 05:04 PM 10/19/2011, Michael Stauber wrote: >Hi Maurice, > >If someone tries to brute force a nonexisting username, then it gains him >nothing. He can't login as that user anyway. > >If he tries to brute force an existing username, then he gets caught and >PAM_ABL will block further attempts f

[BlueOnyx:08864] Re: Login manager not responsive on non valid usernames?

2011-10-19 Thread Michael Stauber
Hi Maurice, > I have numerous failed logins from one host, with usernames that doesn't > exists on the system. These attemps can be found in the secure logfile. > However, these failed logins don't seem to be catched by the login > manager. If someone tries to brute force a nonexisting usernam

[BlueOnyx:08863] Re: Login manager not responsive on non valid usernames?

2011-10-19 Thread Michael Stauber
Hi Jeff, > It is my understanding that these would be caught by the host rule. The GUI > doesn't recommend using the user rule, as I recall. No, the GUI discourages the usage of the "user rule". The "host rule" is fine. -- With best regards Michael Stauber _

[BlueOnyx:08862] Re: Login manager not responsive on non valid usernames?

2011-10-19 Thread Jeff Folk
Well, it wouldn't put a line item in the user failed logins, but it should put a host in the host failed logins. It doesn't do that? Jeff Sent from my iPhone On Oct 19, 2011, at 6:11 PM, Maurice de Laat wrote: > On Wed, Oct 19, 2011 at 05:47:34PM -0500, Jeff Folk wrote: > >> It is my understa

[BlueOnyx:08861] Re: Login manager not responsive on non valid usernames?

2011-10-19 Thread Maurice de Laat
On Wed, Oct 19, 2011 at 05:47:34PM -0500, Jeff Folk wrote: > It is my understanding that these would be caught by the host rule. That's the point. They don't get caught by the host rule. -- Maurice de Laat ___ Blueonyx mailing list Blueonyx@mail.blueon

[BlueOnyx:08860] Re: Login manager not responsive on non valid usernames?

2011-10-19 Thread Jeff Folk
On Oct 19, 2011, at 5:35 PM, Maurice de Laat wrote: > > Hi list, > > On a 5107R, is it correct that the Login Manager, which records which > hosts has failed login attempts, doesn't log failed logins that use a > username that doesn't exist on the system? > > I have numerous failed logins from

[BlueOnyx:08859] Login manager not responsive on non valid usernames?

2011-10-19 Thread Maurice de Laat
Hi list, On a 5107R, is it correct that the Login Manager, which records which hosts has failed login attempts, doesn't log failed logins that use a username that doesn't exist on the system? I have numerous failed logins from one host, with usernames that doesn't exists on the system. These a

[BlueOnyx:08858] Re: SSH allow root login?

2011-10-19 Thread Brian Rahill
On 10/19/2011 4:40 PM, Christoph Schneeberger wrote: > Please check your /etc/ssh/sshd_config for lines with > PermitRootLogin yes > > I bet you have two of them. Remove both lines and go back to the GUI, > retick allow root access, save - and then it should work again. You were exactly right. I re

[BlueOnyx:08857] Re: SSH allow root login?

2011-10-19 Thread Christoph Schneeberger
Hi Brian, Brian Rahill wrote: > I have a BlueOnyx machine that I want to allow SSH root logins. I have > checked the box under: > Network Services...Shell..."SSH Root Login" > > However anytime the server reboots or CCE is restarted, this option gets > turned off and sshd_config is overwritten t

[BlueOnyx:08856] SSH allow root login?

2011-10-19 Thread Brian Rahill
Hi All, I have a BlueOnyx machine that I want to allow SSH root logins. I have checked the box under: Network Services...Shell..."SSH Root Login" However anytime the server reboots or CCE is restarted, this option gets turned off and sshd_config is overwritten to prevent root logins. Is there a