search for: ldv

..._rsa_key_allowed() Product: Portable OpenSSH Version: 5.6p1 Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2 Component: sshd AssignedTo: unassigned-bugs at mindrot.org ReportedBy: ldv at altlinux.org Created attachment 1936 --> https://bugzilla.mindrot.org/attachment.cgi?id=1936 proposed patch Both auth_rsa_verify_response() and auth_rsa_key_allowed() are PRIVSEP'ed, so there should be no security degradation. auth_rsa_key_allowed() is called from auth_rsa() only; a...

What are the likely cockpit errors involved when getting POOR results when running this test on an updated CentOS 5.2? Kind regards/ldv [root at shell ~]# dig +short porttest.dns-oarc.net TXT z.y.x.w.v.u.t.s.r.q.p.o.n.m.l.k.j.i.h.g.f.e.d.c.b.a.pt.dns-oarc.net. "a.b.c.d is POOR: 26 queries in 1.3 seconds from 1 ports with std dev 0.00"

...4_6 branch. openssh/auth-pam.c | 9 ++++----- openssh/auth2.c | 2 -- openssh/readconf.c | 7 ++++--- openssh/servconf.c | 14 ++++++++------ openssh/sftp-server.c | 9 ++++++--- openssh/sshd.c | 2 +- 6 files changed, 23 insertions(+), 20 deletions(-) -- ldv -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20070411/4412560c/attachment.bin

thanks/ldv

Mem: 2075040k total, 1331452k used, 743588k free, 50896k buffers Swap: 2031608k total, 144k used, 2031464k free, 1191532k cached SunFire X2100 running Centos 4.3. Linux maytag1.texoma.net 2.6.9-34.0.2.EL #1 Fri Jul 7 19:24:57 CDT 2006 i686 athlon i386 GNU/Linux rgds/ldv

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=454 ------- Additional Comments From ldv@altlinux.org 2006-03-02 00:39 MET ------- Created an attachment (id=220) --> (https://bugzilla.netfilter.org/bugzilla/attachment.cgi?id=220&action=view) iptables-1.3.5-alt-link.patch Proposed patch. FC iptables package also attempts to address this issue, but their approach is worse: it...

Came across this page... intended to showcase the high-end capabilities of WMV9... http://www.microsoft.com/windows/windowsmedia/content_provider/film/ContentShowcase.aspx Just thought some people might be interested in it to make some comparisons... and it's also probably some of the highest quality sample material i've found on the net... so it's also useful for me to use as

...aries: libssl.so.4: cannot open shared object file: No such file or directory [root at mail src]# How does one go about restoring libssl.so.4? [I've tried Google, compiling current edition from source, yum install, but note 'yum remove openssl' would take out about 140 features.] TIA/ldv

...Gnome's stock issue or Konsole or Putty. Not sure about SecureCRT. Sometimes one can break loose the logjam; if so: . terminal prompts are stacked left to right vs. vertically . keyboard input is not echo'd . in this event, terminal clear/reset doesn't end if so. Any thoughts? rgds/ldv [vaden at mx1 ~]$ ps auxw | grep -i pts/0 vaden 2475 0.0 0.1 37444 3064 ? S 04:53 0:00 sshd: vaden at pts/0 vaden 2476 0.0 0.0 53964 1480 pts/0 Ss 04:53 0:00 -bash root 2511 0.0 0.0 71284 1312 pts/0 S 04:53 0:00 su - root 2512 0.0 0.0 53968 1492...

Has anyone already worked out the files involved in changing from the rather pedestrian screensaver to some more pleasing eye candy like Fedora Core 5 uses? thnx/ldv

...ions of ssh-keygen designed to work only with DSA keys. It means that key_type_name variable have to be initialized to "dsa" if any of these options were specified. Regards, Dmitry +-------------------------------------------------------------------------+ Dmitry V. Levin mailto://ldv at fandra.org Software Engineer PGP pubkey http://www.fandra.org/users/ldv/pgpkeys.html IPLabs Linux Team http://linux.iplabs.ru Fandra Project http://www.fandra.org +-------------------------------------------------------------------------+ UNIX is user friendly. It's just very select...

...moment> Since beauty is in the eye of the beholder(s), please select my most egregious post(s) and let me know said post(s) so that I have the opportunity to better modify my behavior with the result that we can focus on the business at hand. </request for a learning moment> kind regards/ldv/vaden at texoma.net

Hi I have very special needs and i wanted to use rsync over ssh. I don't know if a solution already exists for what i want to do. I want to provide rsync over ssh to my users. Howevern i want to have the following limitations : 1. No shell access 2. Limitting users to their home directories I was thinking to the folowing solution, but i don't know if it is secure enough : Create a

...ased on the presumption that time is taking us to a more complete and correct implementation of the basic functions like DNS. IOW, is CentOS philosophy of tracking RH so nailed-to-the-wall that it is blasphemy to propose a REPO of current editions of certain very important functions? kind regards/ldv A quote from a long term mentor now at Internet2: "It's fundamentally wrong for RedHat to attempt to backport security patches for such a fundamental service. I'd cuss a blue streak about this point, in fact, except that I don't want to trigger the anti-cuss features at Dr. Vaugh...

That just in from chunkhost.com, where you help them beta test Xen for $FREE :) regards/ldv/vaden at texoma.net

...t; proftpd-postgresql-1.3.3d-2.el5.i386.rpm > repodata/ > unbound-1.4.8-1.el5.i386.rpm > unbound-devel-1.4.8-1.el5.i386.rpm > unbound-libs-1.4.8-1.el5.i386.rpm > unbound-munin-1.4.8-1.el5.i386.rpm > vnstat-1.10-2.el5.i386.rpm > vsftpd-2.3.4-1.el5.i386.rpm > > kind regards/ldv >

...; owner="15023277 at N02" secret="e7b8037738" server="5192" farm="6" title="Blue, red, yellow, green" ispublic="1" isfriend="0" isfamily="0" tags="blue red green grass yellow truck amusement fair fete royalmail van ldv 2011 birstall" /> <photo id="5876786530" owner="58185891 at N00" secret="54ec727b3d" server="5065" farm="6" title="Boathko" ispublic="1" isfriend="0" isfamily="0" tags="blue abstract black yel...

...ions that in this configuration the packager must make certain that fcntl locking is in force, but I DUNNO. Full disclosure: postfix is version 2.3, compiled locally. Procmail is invoked with by postfix via "mailbox_command = /usr/bin/procmail". Thanks in advance for your time. rgds/ldv procmail: Locking "/var/spool/mail/vaden.lock" procmail: Error while writing to "/var/spool/mail/_2VF.HWivEB.mail.texoma.net" procmail: Lock failure on "/var/spool/mail/vaden.lock" procmail: Assigning "LASTFOLDER=/var/spool/mail/vaden" procmail: Opening &qu...

Googling this (specifically the nvidia-bug-report line below) doesn't find anything. This is a server (console is text only, no GUI), so we may not need x11 nor nvidia, I dunno for sure. Thanks in advance for your thoughts. kind regards/ldv Transaction Check Error: file /usr/bin/nvidia-bug-report.sh from install of dkms-nvidia-x11-drv-185.18.14-1.nodist.rf conflicts with file from package nvidia-x11-drv-96xx-1.0.9631-1.nodist.rf file /usr/bin/nvidia-settings from install of dkms-nvidia-x11-drv-185.18.14-1.nodist.rf conflicts with...

Hello Rowland, thanks, configuring the uidNumber and gidNumber on the AD fixed the issue, now getent passwd works. I just have one remaining issue, it seems the ACL doesn't work. As an example when I set ACL with full permission for user andrea: # /usr/bin/ls -ldV /cache/testsamba/ d---------+  3 root     root           5 Jun 19 19:40 /cache/testsamba/             user:andrea:rwxpdDaARWcCos:fd-----:allow the user andrea can't mount the share. I have added the following entry in smb.conf for ACL:     vfs objects = acl_xattr     map acl inherit = Yes...