ciphermethod.com

Red Hat

bogus intrusion attempt

by on Mar.28, 2016, under Linux, Red Hat

Active log file changed? No way!

[root@entbamboo01 logs]# tmpwatch –test –mtime +7 –nodirs /opt/bamboo/atlassian-bamboo-5.9.7/logs/*log
error: directory /opt/bamboo/atlassian-bamboo-5.9.7/logs/catalina.2015-10-20.log changed right under us!!!
error: this indicates a possible intrusion attempt

Leave a Comment more...

Expired certificate /usr/share/rhn/RHNS-CA-CERT

by on Nov.20, 2015, under Red Hat



# service osad start
Starting osad: Invalid Cert Error:

ERROR: unhandled exception occurred: (Expired certificate /usr/share/rhn/RHNS-CA-CERT).
                                                           [FAILED]

# cd /usr/share/rhn
# wget http://satellite/pub/RHN-ORG-TRUSTED-SSL-CERT
# vi /etc/sysconfig/rhn/up2date

Change RHNS-CA-CERT to RHN-ORG-TRUSTED-SSL-CERT
#sslCACert=/usr/share/rhn/RHNS-CA-CERT
sslCACert=/usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT

# service osad start
Starting osad:                                             [  OK  ]



Leave a Comment more...

Show Installed Packages (including architecture)/Search for i386 Packages

by on Mar.26, 2014, under Linux, Red Hat

# rpm -qa –qf “%{n}.%{arch}\n”
pciutils-devel.x86_64
pkgconfig.x86_64
libusb.x86_64
info.x86_64
desktop-file-utils.x86_64
m4.x86_64
ORBit2.x86_64
perl-Compress-Zlib.x86_64
mkisofs.x86_64
ttmkfdir.x86_64

# rpm -qa –qf “%{n}.%{arch}\n” | grep i386 | head
glib2.i386
libSM.i386
audiofile.i386
gmp.i386
pcsc-lite-libs.i386
libXrandr.i386
libXdamage.i386
pcsc-lite-devel.i386
libogg-devel.i386
db4-devel.i386

# yum list | grep i386 | head
GConf2.i386 2.14.0-9.el5 installed
NetworkManager.i386 1:0.7.0-13.el5 installed
NetworkManager-glib.i386 1:0.7.0-13.el5 installed
ORBit2.i386 2.14.3-5.el5 installed
OpenIPMI-libs.i386 2.0.16-16.el5 installed
aex-nsclt.i386 6.2-1378 installed
alsa-lib.i386 1.0.17-1.el5 installed
apr.i386 1.2.7-11.el5_6.5 installed
apr-util.i386 1.2.7-11.el5_5.2 installed
aspell.i386 12:0.60.3-13 installed

Leave a Comment more...

SSH Passwordless Login Fails

by on Oct.24, 2012, under Red Hat

After verifying file permissions, still unable to login without entering passsord. Found issue where SELINUX was keeping the SSH service from reading the authorized_keys file. Issue encountered on a Red Hat 6 server.

Fix:
$ restorecon -R -v /home/user/.ssh
restorecon reset /home/user/.ssh context unconfined_u:object_r:home_root_t:s0->unconfined_u:object_r:ssh_home_t:s0
restorecon reset /home/user/.ssh/known_hosts context unconfined_u:object_r:home_root_t:s0->unconfined_u:object_r:ssh_home_t:s0
restorecon reset /home/user/.ssh/id_dsa context unconfined_u:object_r:home_root_t:s0->unconfined_u:object_r:ssh_home_t:s0
restorecon reset /home/user/.ssh/id_dsa.pub context unconfined_u:object_r:home_root_t:s0->unconfined_u:object_r:ssh_home_t:s0
restorecon reset /home/user/.ssh/authorized_keys context unconfined_u:object_r:home_root_t:s0->unconfined_u:object_r:ssh_home_t:s0

Passwordless login now works:
$ ssh gilis28.fls
Last login: Wed Oct 3 14:07:00 2012 from 10.255.2.204
[user@GILIS28 ~]$


Leave a Comment more...

Postfix/Dovecot Install

by on Feb.23, 2012, under Linux, Red Hat

Install Postfix:
yum install postfix (RedHat)
apt-get install postfix (Debian)

Add Domains to Accept Mail For:
vi /etc/postfix/main.cf
set
mydestination = localhost.localdomain, localhost, domain.com, host

Tell Postfix to use Maildir instead of mbox format:
postconf -e "home_mailbox = Maildir/"
postconf -e "mailbox_command ="

Set MAIL variable in /etc/profile:
export MAIL=$HOME/Maildir

Restart Postfix:
service postfix restart

Mail local user and confirm mail is delivered.

Install Dovecot:
apt-get install dovecot-common dovecot-imapd dovecot-pop3d

Leave a Comment more...

Looking for something?

Use the form below to search the site:

Still not finding what you're looking for? Drop a comment on a post or contact us so we can take care of it!

But Wait, There's More!

A few highly recommended friends...