Displaying 20 results from an estimated 900 matches similar to: "ipsec nat issue"
2013 Mar 04
6
Centos6 ipsec troubles
Hello,
it looks like the usual way to do ipsec on centos5 won't work anymore on
centos6
I installed ipsec-tools but an interface type IPsec is not recognized by
the kernel
ifup ipsec0
Device does not seem to be present, delaying initialization.
I am not planning to use the awful OpenSwan, I Want to sue the Kame
implementation which was working fine on CentOS5
any hints ?
thank you
2012 Sep 26
7
Routing issue
Hello,
This is on Centos 6 and not something I think is wrong with Centos 6
but I am looking to see if anybody else has experienced this and
if there is solution. So thanks up front for indulging me.
Because Linux makes routing decisions before SNAT it is causing
problems when trying to use FTP with two upstream providers in
a load balanced setup.
Other than ftp, things seem to work OK. Below
2013 Apr 16
1
Running LMTP as a user other than the root user
Hello,
With this one in Postfix' main.cf:
virtual_transport = lmtp:unix:/_ROOT/var/run/dovecot/lmtp
and Dovecot settings reproduced at the end of this message, there is no problem for having mail delivered into a user's INBOX.
But as soon as I try the security improvement suggested in the docs:
service lmtp {
user = dovemailer
}
this is what I get in the logs:
2017 Apr 25
2
Flooding Samba DC with random requests
Hi,
our virtual DCs specs are:
1vCPU, 1GB RAM
System is running on iSCSI Storage in an Openstack Enviroment.
Smb.conf on our DC 03 and 04:
==================
# Global parameters
[global]
workgroup = NLI
realm = nli.local
netbios name = dc04
server role = active directory domain controller
allow dns updates = nonsecure
dns forwarder =
2017 Apr 25
3
Flooding Samba DC with random requests
Hi,
yesterday we experienced a heavy request flooding from multiple servers being a domain member against our Samba Sernet DCs.
All those servers are domain members and allow login using PAM (Samba+Winbind).
Running TCPDump we had like 400 Requests per 5 seconds like this:
tcpdump -i eth0 dst port 389
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0,
2017 Apr 25
0
Flooding Samba DC with random requests
On Tue, 25 Apr 2017 12:07:35 +0000
Julian Zielke via samba <samba at lists.samba.org> wrote:
> Smb.conf on our clients:
> ==================
> #Ansible managed
> # global options
> [global]
> workgroup = NLI
> realm = NLI.LOCAL
> netbios name = xxxxxx
> server string = Samba AD Client Version %v
> security = ads
> password server = dc3.nli.local,
2016 Sep 07
2
Winbind / Samba auth problem after username change
- It really ends in local. So I guess I can leave this one.
- I've corrected the double entry in nsswitch.conf
The command returns:
# getent passwd | grep ren_test
ren_test4:*:12521:10513:ren_test4:/home/NLI.LOCAL/ren_test4:/bin/bash
What I copied into the message before was our object directly from the DC.
I thought you said "ldapsearch", not ldbsearch ;-)
Well here's the
2016 Sep 07
1
Winbind / Samba auth problem after username change
BTW I just tried the getent command again and it gets even weirder:
# getent passwd ren_test4
ren_test4:*:12521:10513:ren_test4:/home/NLI.LOCAL/ren_test4:/bin/bash
then did another getent after a couple of seconds:
# getent passwd ren_test4
ren_test3:*:12521:10513:ren_test3:/home/NLI.LOCAL/ren_test3:/bin/bash
This is...well..I have no damn clue XD
> -----Ursprüngliche
2014 Feb 19
5
createrepo command for 6.4 respin
Hi List,
I have been searching for the correct createrepo command to make a 6.4 respin.
We have been doing this with previous versions using
createrepo -u "media://$discinfo" -g ${DIR}/my_kickstart${VER}/comps.xml .
Which had worked fine until now.
Thanks,
--
Stephen Clark
*NetWolves*
Director of Technology
Phone: 813-579-3200
Fax: 813-882-0209
Email: steve.clark at netwolves.com
2012 May 05
8
CONFIG_ARPD turned on in centosplus kernel.
Alan& Akemi,
Would it be possible to get CONFIG_ARPD turned on in the
centosplus 6.x kernel? It is required to use opennhrp.
See the link below where is was decided to turn it on in Fedora.
https://bugzilla.redhat.com/show_bug.cgi?id=502844
--
Stephen Clark
*NetWolves*
Director of Technology
Phone: 813-579-3200
Fax: 813-882-0209
Email: steve.clark at netwolves.com
2014 Mar 20
3
biosdevname
Hello,
Anybody else run into problems with biosdevname .0.5..0-2 changing names
from p2p1 to em1 when upgrading from biosdevname 0.4.1-3?
Darn!
I thought biosdevname was to keep the names the same!!
--
Stephen Clark
*NetWolves Managed Services, LLC.*
Director of Technology
Phone: 813-579-3200
Fax: 813-882-0209
Email: steve.clark at netwolves.com
http://www.netwolves.com
2016 Sep 07
5
Winbind / Samba auth problem after username change
I would suggest.
Stop samba and winbind
Backup
/etc/krb5.keytab
/var/lib/samba
/var/cache/samba
Remove everything in :
/var/lib/samba
/var/cache/samba
And remove :
/etc/krb5.keytab
Put in this config ( from Rowlands suggestion. )
Can you try this smb.conf:
[global]
workgroup = MYDOMAIN
realm = MYDOMAIN.local
netbios name = vmu09tcse01
dedicated keytab file = /etc/krb5.keytab
2016 Sep 07
0
Winbind / Samba auth problem after username change
On Wed, 7 Sep 2016 11:20:54 +0000
Julian Zielke <jzielke at next-level-integration.com> wrote:
See inline comments:
> - It really ends in local. So I guess I can leave this one.
If AVAHI is running on any Unix machines, it can get in the way, so as
I said, you would be advised to turn it off.
> - I've corrected the double entry in nsswitch.conf
>
> The command returns:
2010 Dec 10
4
sudo doing DNS lookup
Hi,
I have a confusing problem. I have two centos 5,5 boxes. Both have
sudo.i386 1.7.2p1-9.el5_5
installed
I am using the same sudoers file, but the one on box A keeps trying to
do DNS lookups
while the one on box B does not. How do I disable this DNS lookup?
Thanks for any info.
--
Stephen Clark
*NetWolves*
Sr. Software Engineer III
Phone:
2013 Nov 20
5
Any experience with lanner appliances?
Hi,
anybody has installed CentOS on an lanner appliance...?
Eg. http://www.lannerinc.com/products/all-purpose-box-computers/industrial-automation/lec-2126
I was planning to buy an hp microserver to make a "small" CentOS firewall (and more since it is overpowered), but I am wondering if I could go for a lot smaller and with no fan/noise... but at the same time a bit more expensive...
2016 Apr 23
2
[IndVarSimplify] Narrow IV's are not eliminated resulting in inefficient code
Hi Sanjoy,
Thank you for looking into this!
Yes, your patch does fix my larger test case too. My algorithm gets double
performance improvement with the patch, as the loop now has a smaller
instruction set and succeeds to unroll w/o any extra #pragma's.
I also ran the LLVM tests against the patch. There are 6 new failures:
Analysis/LoopAccessAnalysis/number-of-memchecks.ll
2016 Apr 13
1
Out of Office. (was: Out of Office. (was: Out of Office. (was: Out of Office. (was: Out of Office. (was: Out of Office. (was: Problems with scsi-target-utils when hosted on dom0 centos 7 xen box))))))
2014 Feb 25
2
Migration from 32 to 64 bits
Hello to all,
currently I have CentOS 6.4 32 bit, very simple setup on my notebook,
I want to migrate it from 32 to 64 bits cause I want to play with some
VMs etc etc.
Do you have some suggestions on how to do backup of folders (mainly I
have 1 user) or just copy the user folder and stop?
Fabrizio
--
"The intuitive mind is a sacred gift and the rational mind is a
faithful servant. We
2011 May 10
3
Drive recovery?
I have a CentOS 5.6 system (recently installed) that, for some
reason, has decided to mangle one of its drives, specifically /dev/hde1
... No errors anywhere, just rebooted the machine over the weekend and
it's gone. Up till the reboot, the drive was fine, I was writing to it
without a problem.
fdisk tells me:
----------
# fdisk -l /dev/hde
Disk /dev/hde: 160.0 GB, 160041885696
2014 Sep 24
5
Critical update for bash released today.
You should 'yum update' as soon as possible to resolve this issue.
Here's why you should care:
https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/
Links to the centos updates:
CentOS-5:
http://lists.centos.org/pipermail/centos-announce/2014-September/020582.html
CentOS-6: