similar to: ipsec nat issue

Displaying 20 results from an estimated 900 matches similar to: "ipsec nat issue"

2013 Mar 04
6
Centos6 ipsec troubles
Hello, it looks like the usual way to do ipsec on centos5 won't work anymore on centos6 I installed ipsec-tools but an interface type IPsec is not recognized by the kernel ifup ipsec0 Device does not seem to be present, delaying initialization. I am not planning to use the awful OpenSwan, I Want to sue the Kame implementation which was working fine on CentOS5 any hints ? thank you
2012 Sep 26
7
Routing issue
Hello, This is on Centos 6 and not something I think is wrong with Centos 6 but I am looking to see if anybody else has experienced this and if there is solution. So thanks up front for indulging me. Because Linux makes routing decisions before SNAT it is causing problems when trying to use FTP with two upstream providers in a load balanced setup. Other than ftp, things seem to work OK. Below
2013 Apr 16
1
Running LMTP as a user other than the root user
Hello, With this one in Postfix' main.cf: virtual_transport = lmtp:unix:/_ROOT/var/run/dovecot/lmtp and Dovecot settings reproduced at the end of this message, there is no problem for having mail delivered into a user's INBOX. But as soon as I try the security improvement suggested in the docs: service lmtp { user = dovemailer } this is what I get in the logs:
2017 Apr 25
2
Flooding Samba DC with random requests
Hi, our virtual DCs specs are: 1vCPU, 1GB RAM System is running on iSCSI Storage in an Openstack Enviroment. Smb.conf on our DC 03 and 04: ================== # Global parameters [global] workgroup = NLI realm = nli.local netbios name = dc04 server role = active directory domain controller allow dns updates = nonsecure dns forwarder =
2017 Apr 25
3
Flooding Samba DC with random requests
Hi, yesterday we experienced a heavy request flooding from multiple servers being a domain member against our Samba Sernet DCs. All those servers are domain members and allow login using PAM (Samba+Winbind). Running TCPDump we had like 400 Requests per 5 seconds like this: tcpdump -i eth0 dst port 389 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth0,
2017 Apr 25
0
Flooding Samba DC with random requests
On Tue, 25 Apr 2017 12:07:35 +0000 Julian Zielke via samba <samba at lists.samba.org> wrote: > Smb.conf on our clients: > ================== > #Ansible managed > # global options > [global] > workgroup = NLI > realm = NLI.LOCAL > netbios name = xxxxxx > server string = Samba AD Client Version %v > security = ads > password server = dc3.nli.local,
2016 Sep 07
2
Winbind / Samba auth problem after username change
- It really ends in local. So I guess I can leave this one. - I've corrected the double entry in nsswitch.conf The command returns: # getent passwd | grep ren_test ren_test4:*:12521:10513:ren_test4:/home/NLI.LOCAL/ren_test4:/bin/bash What I copied into the message before was our object directly from the DC. I thought you said "ldapsearch", not ldbsearch ;-) Well here's the
2016 Sep 07
1
Winbind / Samba auth problem after username change
BTW I just tried the getent command again and it gets even weirder: # getent passwd ren_test4 ren_test4:*:12521:10513:ren_test4:/home/NLI.LOCAL/ren_test4:/bin/bash then did another getent after a couple of seconds: # getent passwd ren_test4 ren_test3:*:12521:10513:ren_test3:/home/NLI.LOCAL/ren_test3:/bin/bash This is...well..I have no damn clue XD > -----Ursprüngliche
2014 Feb 19
5
createrepo command for 6.4 respin
Hi List, I have been searching for the correct createrepo command to make a 6.4 respin. We have been doing this with previous versions using createrepo -u "media://$discinfo" -g ${DIR}/my_kickstart${VER}/comps.xml . Which had worked fine until now. Thanks, -- Stephen Clark *NetWolves* Director of Technology Phone: 813-579-3200 Fax: 813-882-0209 Email: steve.clark at netwolves.com
2012 May 05
8
CONFIG_ARPD turned on in centosplus kernel.
Alan& Akemi, Would it be possible to get CONFIG_ARPD turned on in the centosplus 6.x kernel? It is required to use opennhrp. See the link below where is was decided to turn it on in Fedora. https://bugzilla.redhat.com/show_bug.cgi?id=502844 -- Stephen Clark *NetWolves* Director of Technology Phone: 813-579-3200 Fax: 813-882-0209 Email: steve.clark at netwolves.com
2014 Mar 20
3
biosdevname
Hello, Anybody else run into problems with biosdevname .0.5..0-2 changing names from p2p1 to em1 when upgrading from biosdevname 0.4.1-3? Darn! I thought biosdevname was to keep the names the same!! -- Stephen Clark *NetWolves Managed Services, LLC.* Director of Technology Phone: 813-579-3200 Fax: 813-882-0209 Email: steve.clark at netwolves.com http://www.netwolves.com
2016 Sep 07
5
Winbind / Samba auth problem after username change
I would suggest. Stop samba and winbind Backup /etc/krb5.keytab /var/lib/samba /var/cache/samba Remove everything in : /var/lib/samba /var/cache/samba And remove : /etc/krb5.keytab Put in this config ( from Rowlands suggestion. ) Can you try this smb.conf: [global] workgroup = MYDOMAIN realm = MYDOMAIN.local netbios name = vmu09tcse01 dedicated keytab file = /etc/krb5.keytab
2016 Sep 07
0
Winbind / Samba auth problem after username change
On Wed, 7 Sep 2016 11:20:54 +0000 Julian Zielke <jzielke at next-level-integration.com> wrote: See inline comments: > - It really ends in local. So I guess I can leave this one. If AVAHI is running on any Unix machines, it can get in the way, so as I said, you would be advised to turn it off. > - I've corrected the double entry in nsswitch.conf > > The command returns:
2010 Dec 10
4
sudo doing DNS lookup
Hi, I have a confusing problem. I have two centos 5,5 boxes. Both have sudo.i386 1.7.2p1-9.el5_5 installed I am using the same sudoers file, but the one on box A keeps trying to do DNS lookups while the one on box B does not. How do I disable this DNS lookup? Thanks for any info. -- Stephen Clark *NetWolves* Sr. Software Engineer III Phone:
2013 Nov 20
5
Any experience with lanner appliances?
Hi, anybody has installed CentOS on an lanner appliance...? Eg. http://www.lannerinc.com/products/all-purpose-box-computers/industrial-automation/lec-2126 I was planning to buy an hp microserver to make a "small" CentOS firewall (and more since it is overpowered), but I am wondering if I could go for a lot smaller and with no fan/noise... but at the same time a bit more expensive...
2016 Apr 23
2
[IndVarSimplify] Narrow IV's are not eliminated resulting in inefficient code
Hi Sanjoy, Thank you for looking into this! Yes, your patch does fix my larger test case too. My algorithm gets double performance improvement with the patch, as the loop now has a smaller instruction set and succeeds to unroll w/o any extra #pragma's. I also ran the LLVM tests against the patch. There are 6 new failures: Analysis/LoopAccessAnalysis/number-of-memchecks.ll
2016 Apr 13
1
Out of Office. (was: Out of Office. (was: Out of Office. (was: Out of Office. (was: Out of Office. (was: Out of Office. (was: Problems with scsi-target-utils when hosted on dom0 centos 7 xen box))))))
2014 Feb 25
2
Migration from 32 to 64 bits
Hello to all, currently I have CentOS 6.4 32 bit, very simple setup on my notebook, I want to migrate it from 32 to 64 bits cause I want to play with some VMs etc etc. Do you have some suggestions on how to do backup of folders (mainly I have 1 user) or just copy the user folder and stop? Fabrizio -- "The intuitive mind is a sacred gift and the rational mind is a faithful servant. We
2011 May 10
3
Drive recovery?
I have a CentOS 5.6 system (recently installed) that, for some reason, has decided to mangle one of its drives, specifically /dev/hde1 ... No errors anywhere, just rebooted the machine over the weekend and it's gone. Up till the reboot, the drive was fine, I was writing to it without a problem. fdisk tells me: ---------- # fdisk -l /dev/hde Disk /dev/hde: 160.0 GB, 160041885696
2014 Sep 24
5
Critical update for bash released today.
You should 'yum update' as soon as possible to resolve this issue. Here's why you should care: https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/ Links to the centos updates: CentOS-5: http://lists.centos.org/pipermail/centos-announce/2014-September/020582.html CentOS-6: