similar to: Mix/match C8 crypto policies

I migrated our internal wiki server last week, and some IE users aren't able to authenticate. The service is hosted by Apache using Digest authentication. It migrated from Apache 2.2.9 (Debian 5) to Apache 2.2.15 (CentOS 6). The internal hostname for the wiki server is a DNS CNAME that was repointed from one host to another during the cutover. In a normal session, 1. Client sends GET 2.

Hi, I started playing with CentOS8 and I am trying to set default crypto policies for openssh server/client. In CentOS7 I followed the guide from https://infosec.mozilla.org/guidelines/openssh.html and set KexAlgorithms /Ciphers/MACs in sshd_config. In CentOS8 I can edit /usr/share/crypto-policies/$POLICY/opensshserver.txt for the sshd arguments, but editing openssh.txt or even changing default

On Fri, 26 May 2017, Christian, Mark wrote: > On Fri, 2017-05-26 at 11:19 -0400, Bernard Fay wrote: >> Hi, >> >> Does a fix has already been made in the CenOS RPM repositories for this >> Samba remote execution code vulnerability, CVE-2017-7494? > yes. samba-3.6.23-43.el6_9.x86_64.rpm And samba-*-4.4.4-14.el7_3.x86_64 -- Paul Heinlein <> heinlein at

On Tue, May 12, 2020 at 8:02 PM Paul Heinlein <heinlein at madboa.com> wrote: > On Tue, 12 May 2020, Thomas Stephen Lee wrote: > > > Hi, > > > > I am user of CentOS 8. > > When can we expect an image on AWS? > > I am just learning AWS and would like to use CentOS 8 for that. > > I can't speak to AWS per se, but Digital Ocean has a CentOS 8

On 03/08/2017 11:00 AM, Paul Heinlein wrote: > On Wed, 8 Mar 2017, Mark Weaver wrote: > > > Hello all, > > > > I've been googling my brains out since yesterday looking for up-to-date > > information on this matter, and have found information that is > anywhere from > > 15 to 5 years old. I'd really like some information that much more > up to

Thanks for the breakdown Paul - I've had to learn all my sysadmin stuff through organic interactions like this. Still though - someone manages the default repositories - so my question is, who decides when a package gets an update from whatever CentOS ships with default to a newer version? How does that process take place, and, can I affect it by adding microcode_ctl-2.1-18 ? On Wed, Jan 4,

There is a slight performance related reason for exporting disk partitions individually, the performance boost is server-side as Paul says. The advantage is that the no_subtree_check can be used without any additional security risk. It is probably the case that the /export/base/a is a partition, is exported with no_subtree_check, and therefore there is a small performance boost. Preventing

I've got a CentOS 6 machine that's slated to go into production providing some web and development-repository services. Part of the environment is gitweb, which works as expected with one glitch: SELinux doesn't allow gitweb.cgi to query sssd to display who owns the repositories. The audit log entries are pretty straightforward, e.g., type=AVC msg=audit(XXXXXXXXXXXX): avc:

On Thu, 23 May 2019, Stephen John Smoogen wrote: > I might actually be able to have a workable answer: > > alias drf='/usr/bin/df -x tmpfs' /usr/bin/df \ -x autofs -x binfmt_misc -x cgroup -x configfs -x debugfs \ -x devpts -x devtmpfs -x efivarfs -x hugetlbfs -x mqueue \ -x nfsd -x proc -x pstore -x rpc_pipefs -x securityfs \ -x selinuxfs -x sysfs -x tmpfs :-) --

On Tue, 23 May 2017, m.roth at 5-cent.us wrote: > hw wrote: >> >> are there packages replacing the ancient perl version in >> Centos 7 with a more recent one, like 5.24? At least the >> state feature is required. Perl 5.24 is available in SCL, in the centos-sclo-rh repository. [root ~]# yum info rh-perl524-perl Name : rh-perl524-perl Arch : x86_64 Epoch

In case you didn't see it, the initial CentOS 6 trees have been released to QA: http://qaweb.dev.centos.org/node/81 -- Paul Heinlein <> heinlein at madboa.com <> http://www.madboa.com/

On Mon, 12 Oct 2020, Alexandru Lazarev wrote: > Hi community, > In CentOS 7 there is such rpm (libcxx-devel - it seems from EPEL > repository), but in CentOS 8 it isn't. > > How is it possible to have it there as RPM? because alternative to build it > (libc++) from sources is a big headache (I need it in order to build v9 and > plv8 projects) Do you mean the

On Sun, 5 Feb 2017, Gordon Messmer wrote: > Yes. Use the software collections. > > https://www.softwarecollections.org/en/ > > https://www.softwarecollections.org/en/scls/rhscl/devtoolset-4/ There are three ways to utilize SCLs: a temporary subshell invoked with the scl utility, a session-long environment shift by sourcing the package's 'enable' script, or a

On Wed, 24 May 2017, hw wrote: > Paul Heinlein schrieb: >> On Tue, 23 May 2017, m.roth at 5-cent.us wrote: >> >> > hw wrote: >> > > >> > > are there packages replacing the ancient perl version in >> > > Centos 7 with a more recent one, like 5.24? At least the >> > > state feature is required. >> >> Perl

I'm (finally) getting around to putting a backup LDAP authentication server on my network. The backup uses syncrepl to grab the database, and to my eyes both LDAP servers answer read queries identically. I'm testing the client side of this configuration on virtual CentOS 5 i386 machine. /etc/ldap.conf reads ----- %< ----- base dc=DOMAIN,dc=com timelimit 30 bind_timelimit 30

I don't know if it's a bug or a feature, but the filesystem-2.4.0-2.el5.centos rpm won't upgrade cleanly if /home is an NFS filesystem. I sorta-kinda remember this when going from 5.1 to 5.2, but that memory is hazy. -- Paul Heinlein <> heinlein at madboa.com <> http://www.madboa.com/

A server at work today appeared unresponsive to all network traffic. The machine in question doesn't have a k/v/m terminal; it's configured to use a serial console. So I connected to the serial console and got /etc/issue (with all the \char sequences properly expanded). At the login: prompt I typed root and pressed Enter. Several seconds went by before the Password: prompt was

On Mon, 14 Mar 2016, John R Pierce wrote: > On 3/14/2016 8:57 AM, Boris Epstein wrote: >> What are the proven/tested version of Perl for CentOS 6 and 7? Is Perl 6 >> operational on either? > > C6 comes with perl 5.10.1 > C7 comes with perl 5.16.3 Additionally, there are software collections available for Perl 5.16 and 5.20:

On Sat, 23 Nov 2019, Stephen John Smoogen wrote: > On Sat, 23 Nov 2019 at 15:39, Sergio Belkin <sebelk at gmail.com> wrote: >> >> Hi, >> >> I was using yum for years on CentOS servers, and since a few years ago dnf >> on Fedora desktops. My question is: >> Is the same yum4 on CentOS 8 that dnf? What should I use? >> Thanks in advance >>

I've written a short howto on creating and mounting an encrypted filesystem using dm-crypt. The doc currently lives on our internal wiki (Trac) at work, but I'd love to rewrite and post for a general readership. I suppose the proposed URL would be something like http://wiki.centos.org/TipsAndTricks/EncryptedFilesystem -- Paul Heinlein <> heinlein at madboa.com <>