search for: altname

We have discovered a security vulnerability (“AltNames Vulnerability”) whereby a malicious attacker can impersonate the Puppet master using credentials from a Puppet agent node. This vulnerability cannot cross Puppet deployments, but it can allow an attacker with elevated privileges on one Puppet-managed node to gain control of any other Puppet-manage...

Package: xen-utils-4.17 Version: 4.17.1+2-gb773c48e36-1 Severity: important Dear Maintainers, On one of our domUs we discovered that the network interface names were wrongly assigned since recreating the domU after an upgrade to bookworm. If over 10 network interfaces are configured the mapping (dom0) vifX.10 <-> eth10 (domU) does not apply anymore. Instead the interfaces on dom0 are

...and added a puppet-ca CNAME to henson figuring I could just keep using the CA. calling the systems by their "real" names as returned by ''facter fqdn'' or a reverslook up on thier IP works fine and "henson" is accepted as "puppet" due to it''s altName list, but "burton" (which was installed as a normal client to get it''s initial signed cert) didn''t get any altName fields. I''m OK with flushing all my certs and starting over, but I have a couple of questions. How does the puppet CA populate the altName field?...

Hello dear R-helpers, I'm working with R-2.15.2 on Windows 7 OS. I'm stucked with a merge of two data frames by characters. In each data frame I got two different list of names, that is my main-key to be merged. To figure out what I'm saying, I build up a modified "?merge" example, with errors by purpose: # Data for authors: authors <- data.frame( surname =

Folks, Please confirm or correct the following assertions: In Target.td one of the data member fields for class Register is list<string> AltNames. If this is for alternate names for a given register (in Mips $28 and $gp are the same) it would be quite useful for the llvm-mc assembler which has to handle cases where there are multiple names for the same register. A quick recursive grep shows that no target is currently using this. It is al...

Hello everyone,=I have a question as to how to remove the column headers in a data file and then replace those with titles from another file in this case the file labeled ann  ( in which the titles are all in one column).I am unsure which function to use.I tried rm () to remove the column headers but they are numbers and  the error message said to only use rm for charactors not numbers Below is

...om a samba share both the long filenames and the short 8.3 names by using DIR /x. Is there a way for a Linux client to obtain this same information swiftly for a large directory listing - or indeed for the samba server to show this information? The only way I have found is using smbclient's altname function but I seem to have to call this individually for each file, which makes it very slow. [In case you are wondering why anyone should want this info, it is to do with an old DOS program which accesses a samba share.] Thanks for any help Dominic -- *TimeDicer - Windows Backup and File R...

...stablish a connection with a Windows host (Windows 7) via smbclient (from ubuntu linux), to run a script which needs to get some file informations (eg. size, version, etc..). Connection and authentication works perfectly. From linux, i can execute the following command: smb: \> allinfo test.txt altname: test.txt create_time: Thu 01 Jul 2010 11:06:30 AM CEST CEST access_time: Thu 01 Jul 2010 11:06:30 AM CEST CEST write_time: Thu 01 Jul 2010 11:06:30 AM CEST CEST change_time: Thu 01 Jul 2010 12:12:07 PM CEST CEST stream: [::$DATA], 0 bytes response from Windows: 20 bytes (data_len wit...

...r ubuntu 22.04. We will use the local eth0 inet6 address fe80::250:56ff:fe00:243d for binding: vmadmin at li224-vmLS1:~$ ip add ... 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000 link/ether 00:50:56:00:24:3d brd ff:ff:ff:ff:ff:ff altname enp3s0 altname ens160 inet 192.168.110.61/24 brd 192.168.110.255 scope global eth0 valid_lft forever preferred_lft forever inet6 fe80::250:56ff:fe00:243d/64 scope link valid_lft forever preferred_lft forever vmadmin at li224-vmLS1:~$ ssh -B eth0 fe80::250:56ff:fe00:241e...

Puppet 2.6.12 is a security update release in the 2.6.x branch. The only changes since 2.6.11 are security fixes for the following vulnerability: * CVE-2011-3872, Altnames Vulnerability For more details on this vulnerability, follow the link on our blog post: http://puppetlabs.com/blog/important-security-announcement-altnames-vulnerability/ Other information available at: http://puppetlabs.com/security or visit http://puppetlabs.com/security/cve/cve-2011-3872 Fe...

...<certificate field="issuer-name" pattern="C=FI, O=SSH, CN=*" /> <certificate field="subject-name" pattern="C=FI, O=SSH, CN=%username%" /> <certificate field="serial-number" pattern="123456" /> <certificate field="altname-email" pattern="%username%@ssh.com" /> <certificate field="altname-upn" pattern="%username-without-domain%@ssh" /> </selector> </authentication> <authentication action="deny" /> </authentication> </authentication-metho...

On 4 October 2016 at 19:50, Krzysztof Parzyszek via llvm-dev <llvm-dev at lists.llvm.org> wrote: > If there are no objections, I'd like to start working on this soon... > > For the AMDGPU target this implies that RC->getSize will no longer be > available in the MC layer. Another advantage of this work that hasn't been mentioned yet is it will reduce the number of uses

Hello, We encountered a problem while testing SRIOV on kubevirt [1]: We are currently using the Device "hostdev" generic options to pass-through the VF to the guest. It is not done through the "interface" (with type hostdev) because that option requires access to the PF which is not available in our case (the VF is moved to the container namespace where libvirt runs, but not

...er file //===----------------------------------------------------------------------===// class MC6809Reg<bits<4> num, string n, list<string> alt = []> : Register<n> { field bits<4> Num = num; let Namespace = "MC6809"; let HWEncoding{3-0} = num; let AltNames = alt; } class MC6809RegWithSubregs<bits<4> num, string n, list<Register> subregs, list<string> alt = []> : RegisterWithSubRegs<n, subregs> { field bits<4> Num = num; let Namespace = "MC6809"; let HWEncoding{3-0} = num; let AltNames = alt; }...

...uppetca would know the answer to this question in minutes, not hours. Anyway, there should be a puppetlabs docs on how to do it. Really EVERY puppetca has the password ''secret''? I guess it is not a KNOWN security risk. http://puppetlabs.com/blog/important-security-announcement-altnames-vulnerability/ Not known. Come on puppetca guru''s how the hell do you change the puppetca "ca.pass" password from ''secret''???? -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group...

https://bugzilla.netfilter.org/show_bug.cgi?id=959 Summary: SSL misconfiguration Product: bugzilla Version: other Platform: x86_64 OS/Version: All Status: NEW Severity: normal Priority: P5 Component: netfilter bugzilla AssignedTo: netfilter-buglog at lists.netfilter.org ReportedBy:

Hello, is possible in some way use on each ip address different certificate (for imap, for pop3). There are options like (but that is not enough for me): protocol imap { listen = *:10143 ssl_listen = *:10943 .. } protocol pop3 { listen = *:10100 .. } I have server for 4 domains (each has own ip address), so i need bind one ip address to one domain to one certificate(each certificate

...stablish a connection with a Windows host (Windows 7) via smbclient (from ubuntu linux), to run a script which needs to get some file informations (eg. size, version, etc..). Connection and authentication works perfectly. From linux, i can execute the following command: smb: \> allinfo test.txt altname: test.txt create_time: Thu 01 Jul 2010 11:06:30 AM CEST CEST access_time: Thu 01 Jul 2010 11:06:30 AM CEST CEST write_time: Thu 01 Jul 2010 11:06:30 AM CEST CEST change_time: Thu 01 Jul 2010 12:12:07 PM CEST CEST stream: [::$DATA], 0 bytes response from Windows: 20 bytes (data_len wi...

...valid_lft forever preferred_lft forever ??? inet6 ::1/128 scope host noprefixroute ?????? valid_lft forever preferred_lft forever 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000 ??? link/ether 08:00:27:8d:c0:4d brd ff:ff:ff:ff:ff:ff ??? altname enp0s3 ??? inet 10.0.2.15/24 brd 10.0.2.255 scope global dynamic eth0 ?????? valid_lft 78916sec preferred_lft 78916sec ??? inet6 fe80::a00:27ff:fe8d:c04d/64 scope link ?????? valid_lft forever preferred_lft forever No problem to retrieve the A record: $ host -t A dc1.samdom.vm-myserver dc1.sa...

Fedora Core 7 has just updated their Ruby package (was 1.8.6.36-3.fc7, is now 1.8.6.110-3.fc7), and the upgrade broke my Puppet installation, and there was a similar report from someone else. Communications between the puppetmasterd and the puppetd running on the same host broke down with the message: Could not retrieve configuration: Certificates were not trusted: hostname not match with