[CentOS] GnuPG 2.0.16?

2018-03-29 Thread Kay Schenk

Hello all --

Does anyone know where I can find GnuPG 2.0.16 for CentOS 6.9 32-bit? 
I've already looked in the normal repos.


I have 2.0.14 now and my Enigmail addon has stopped working.

Thanks.
--
--
MzK

"Ring out the false, ring in the true."
 -- poem "In Memoriam", Alfred Lord Tennyson
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] tftpd server S not responding

2018-03-29 Thread Asif Iqbal
On Thu, Mar 29, 2018 at 7:21 AM, Steven Tardy  wrote:

> A STATEFUL firewall with “ip any any” can and will still block asymmetric
> communications due to the firewall keeping track of state (hence tha name
> stateful firewall).
>
> Tcpdump on your servers /other/ NICs and you’ll see the tftp traffic
> leaving your server on some other NIC (probably on with the default route).
>

A (192.168.1.10)
S (192.168.1.20)

I do not see tftp traffic is leaving from S

A:~$ tftp
(to) 192.168.1.20
tftp> get file
Transfer timed out.

As you can see no pkt is leaving. If it were leaving S, but A were not
receiving then I would think firewall
is dropping it.

[ S ~]$ sudo tcpdump -A -nniany host 192.168.1.10
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on any, link-type LINUX_SLL (Linux cooked), capture size 262144
bytes

16:40:08.390939 IP 192.168.1.10.35553 > 192.168.1.20.69:  16 RRQ "file"
netascii
E..,J1@.>..n./...oAt...E..#...file.netascii...
16:40:13.391133 IP 192.168.1.10.35553 > 192.168.1.20.69:  16 RRQ "file"
netascii
E..,N.@.>/...oAt...E..#...file.netascii...
16:40:18.391220 IP 192.168.1.10.35553 > 192.168.1.20.69:  16 RRQ "file"
netascii
E..,QK@.>..T./...oAt...E..#...file.netascii...
16:40:23.391373 IP 192.168.1.10.35553 > 192.168.1.20.69:  16 RRQ "file"
netascii
E..,T^@.>..@./...oAt...E..#...file.netascii...
16:40:28.391469 IP 192.168.1.10.35553 > 192.168.1.20.69:  16 RRQ "file"
netascii
E..,X.@.>/...oAt...E..#...file.netascii...




>
> The upstream firewall will then block the tftp response if it never saw the
> tftp request (due to asymmetry).
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>



-- 
Asif Iqbal
PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] tftpd server S not responding

2018-03-29 Thread Steven Tardy
A STATEFUL firewall with “ip any any” can and will still block asymmetric
communications due to the firewall keeping track of state (hence tha name
stateful firewall).

Tcpdump on your servers /other/ NICs and you’ll see the tftp traffic
leaving your server on some other NIC (probably on with the default route).

The upstream firewall will then block the tftp response if it never saw the
tftp request (due to asymmetry).
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] How insecure is NIS ? Possible alternatives ?

2018-03-29 Thread Andreas Haumer
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi!

Am 29.03.2018 um 09:38 schrieb Nicolas Kovacs:
> Le 29/03/2018 à 06:44, Keith Keller a écrit :
>> I wonder how much support there is for NIS any more in recent distros. Is it 
>> possible CentOS 7 doesn't support NIS, or does but is buggy?
> 
> I'm planning to test this very soon, probably during the next week, and I'll 
> report back.
> 

We are using the OpenLDAP + pam_ldap / sssd solution in
several smaller networks (up to ~40 Linux clients), but
I think it should scale well for larger networks, too.

The OpenLDAP solution can also support Samba as domain controller,
if you have to support windows clients, too.

- From that point on we usually integrate other services like
an IMAP server (we use Cyrus IMAP), groupware server (we use SOGo)
and many other services which suport LDAP authentication.
You can apply LDAP password policies, too.

We use GOSa (or it's successor FusionDirectory, see 
https://www.fusiondirectory.org/)
as web frontend, so the users can change their passwords, mail settings etc. on
their own (if they are given the rights to do so)

With all that you get a nice, easy to manage, well integrated and
secure network with a central authentication service all with open
source software!

It should run with almost all modern linux distributions, even mixed
together in the same network.

HTH

- - andreas

- -- 
Andreas Haumer | mailto:andr...@xss.co.at
*x Software + Systeme  | http://www.xss.co.at/
Karmarschgasse 51/2/20 | Tel: +43-1-6060114-0
A-1100 Vienna, Austria | Fax: +43-1-6060114-71
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.22 (GNU/Linux)

iD8DBQFavJxYxJmyeGcXPhERAokrAKC1czb7l/AWaLZSDJ4g+VlIBN0IIQCgm7Iv
p5hn8aLp32GA4mJ49RXqp8A=
=s0/Q
-END PGP SIGNATURE-
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] How insecure is NIS ? Possible alternatives ?

2018-03-29 Thread rainer

Am 2018-03-29 09:38, schrieb Nicolas Kovacs:

Le 29/03/2018 à 06:44, Keith Keller a écrit :

I wonder how much support there is for NIS any more in recent
distros. Is it possible CentOS 7 doesn't support NIS, or does but is
buggy?


I'm planning to test this very soon, probably during the next week, and
I'll report back.

Cheers from another ex-Slackware user who migrated to CentOS. :o)

Niki



According to this:

https://access.redhat.com/solutions/7247


it's still possibly.




___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] How insecure is NIS ? Possible alternatives ?

2018-03-29 Thread Nicolas Kovacs
Le 29/03/2018 à 06:44, Keith Keller a écrit :
> I wonder how much support there is for NIS any more in recent
> distros. Is it possible CentOS 7 doesn't support NIS, or does but is
> buggy?

I'm planning to test this very soon, probably during the next week, and
I'll report back.

Cheers from another ex-Slackware user who migrated to CentOS. :o)

Niki

-- 
Microlinux - Solutions informatiques durables
7, place de l'église - 30730 Montpezat
Site : https://www.microlinux.fr
Blog : https://blog.microlinux.fr
Mail : i...@microlinux.fr
Tél. : 04 66 63 10 32
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos