Re: [CentOS] how to separate individual logs?

2010-11-28 Thread Fajar Priyanto
On Mon, Nov 29, 2010 at 2:58 PM, hadi motamedi wrote: > Dear All > I have captured a file  in my centos showing logs captured from many > modules concurrently. Please find attached a sample of the file. As > you see, there are logs from individual modules that have been > captured concurrently. Fo

[CentOS] how to separate individual logs?

2010-11-28 Thread hadi motamedi
Dear All I have captured a file in my centos showing logs captured from many modules concurrently. Please find attached a sample of the file. As you see, there are logs from individual modules that have been captured concurrently. For example, there are logs from IPTR,SNMP,HLR,TCAP,XAPP,and SCCP m

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-28 Thread Les Mikesell
On 11/28/10 5:29 PM, Marko Vojinovic wrote: > > I wouldn't know the typical ratio itself as a number, but I can tell you it is > surely less than one. I had three identical systems compromised at the same > time (one of the users had a weak password, and he used the same password on > all three mac

Re: [CentOS] Rebuilding samba3x rpms results in size doubled

2010-11-28 Thread Miguel Medalha
> I have rebuilt samba3x SRPM in Centos 5.5. The resultings RPM's are > nearly in triple size of the original RPMs. I have installed and > checked the binary files are stripped. What can result in such > difference in RPM sizes? Debugging information not removed from binaries? ___

Re: [CentOS] Rebuilding samba3x rpms results in size doubled

2010-11-28 Thread Christopher Chan
On Monday, November 29, 2010 04:15 AM, Oguz Yilmaz wrote: > Hi, > > I have rebuilt samba3x SRPM in Centos 5.5. The resultings RPM's are > nearly in triple size of the original RPMs. I have installed and checked > the binary files are stripped. What can result in such difference in RPM > sizes? May

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-28 Thread William Warren
On 11/28/2010 7:55 PM, Nico Kadel-Garcia wrote: > On Sun, Nov 28, 2010 at 10:39 AM, Bob McConnell > wrote: >> Marko Vojinovic wrote: >>> On Sunday 28 November 2010 13:15:24 Bob McConnell wrote: Marko Vojinovic wrote: > On Sunday 28 November 2010 03:45:54 Nico Kadel-Garcia wrote: >> Y

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-28 Thread Nico Kadel-Garcia
On Sun, Nov 28, 2010 at 10:39 AM, Bob McConnell wrote: > Marko Vojinovic wrote: >> On Sunday 28 November 2010 13:15:24 Bob McConnell wrote: >>> Marko Vojinovic wrote: On Sunday 28 November 2010 03:45:54 Nico Kadel-Garcia wrote: > You forgot "take on becoming the SELinux integration  manag

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-28 Thread Christopher Chan
On Sunday, November 28, 2010 10:50 PM, Scott Robbins wrote: > On Sun, Nov 28, 2010 at 09:14:43PM +0800, Christopher Chan wrote: > >>> >>> I think it is easier/cheaper to use hardware firewalls and idp systems >>> to protect servers than fight with selinux on each server. >>> >>> SELinux tuning migh

Re: [CentOS] ssh-agent fails to hold values

2010-11-28 Thread Ron Loftin
On Sun, 2010-11-28 at 17:16 -0500, bluethundr wrote: > That DID it!!! thanks and I agree.. god? root? what's the difference!! :) Actually, there IS a difference. God doesn't have to log in. ;^> > > On Sun, Nov 28, 2010 at 4:41 PM, Ron Loftin wrote: > > > > On Sun, 2010-11-28 at 16:35 -0500, b

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-28 Thread brett mm
> > This is where, as a sysadmin, you need to invest just a little time and > effort learning the system. Honestly, the vast majority of issues are > trivial to solve if you just spend a few hours reading the docs/guides, > and even if you really can't be bothered there are kind folks on this > lis

Re: [CentOS] ssh-agent fails to hold values

2010-11-28 Thread bluethundr
That DID it!!! thanks and I agree.. god? root? what's the difference!! :) On Sun, Nov 28, 2010 at 4:41 PM, Ron Loftin wrote: > > On Sun, 2010-11-28 at 16:35 -0500, bluethundr wrote: >> Hello list >> >> I am attempting to manage my key logins with ssh-agent. However EVERY >> time I try to ssh I ha

Re: [CentOS] yum is dumb in update of gmime & gmime-sharp

2010-11-28 Thread William Hooper
On Sun, Nov 28, 2010 at 5:12 PM, William Hooper wrote: > On Sun, Nov 28, 2010 at 4:00 PM, ken wrote: >>> You need to take a closer look at what yum is trying to install.  This >>> message is telling you yum won't update the package because it will >>> break a dependency on another installed packa

Re: [CentOS] yum is dumb in update of gmime & gmime-sharp

2010-11-28 Thread William Hooper
On Sun, Nov 28, 2010 at 4:00 PM, ken wrote: >> You need to take a closer look at what yum is trying to install.  This >> message is telling you yum won't update the package because it will >> break a dependency on another installed package. > > yum's trying to install gmime20.  This doesn't exist

Re: [CentOS] ssh-agent fails to hold values

2010-11-28 Thread Ron Loftin
On Sun, 2010-11-28 at 16:35 -0500, bluethundr wrote: > Hello list > > I am attempting to manage my key logins with ssh-agent. However EVERY > time I try to ssh I have to go through the same exact routing and it's > getting a little old... > > [bluethu...@lcent01:~]#ssh sum3 > Enter passphrase fo

[CentOS] ssh-agent fails to hold values

2010-11-28 Thread bluethundr
Hello list I am attempting to manage my key logins with ssh-agent. However EVERY time I try to ssh I have to go through the same exact routing and it's getting a little old... [bluethu...@lcent01:~]#ssh sum3 Enter passphrase for key '/home/bluethundr/.ssh/id_rsa': [bluethu...@lcent01:~]#exec ssh

Re: [CentOS] yum is dumb in update of gmime & gmime-sharp

2010-11-28 Thread ken
On 11/28/2010 01:58 PM William Hooper wrote: > On Sat, Nov 27, 2010 at 3:44 PM, ken wrote: >> # yum update >> ... >> --> Running transaction check >> --> Processing Dependency: gmime = 2.2.10-5.el5.centos for package: >> gmime-sharp >> ---> Package gmime20.i386 0:2.2.26-1.el5.rf set to be updated

[CentOS] Rebuilding samba3x rpms results in size doubled

2010-11-28 Thread Oguz Yilmaz
Hi, I have rebuilt samba3x SRPM in Centos 5.5. The resultings RPM's are nearly in triple size of the original RPMs. I have installed and checked the binary files are stripped. What can result in such difference in RPM sizes? I have not changed anything on built and install sections of spec file.

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-28 Thread Les Mikesell
On 11/28/10 1:06 PM, Jorge Fábregas wrote: > > There has been a lot of progress with SELinux lately. I think you should > reconsider your position and perhaps give it a try on the upcoming CentOS 6 > where the targeted policy is much matured. SELinux has been around many years now. Are there any

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-28 Thread cpolish
1,000 pardons for aggressively trimming this post, sorry if I have harmed the flow by being selective. Bob McConnell wrote: > Marko Vojinovic wrote: > > Bob McConnell wrote: > >> Marko Vojinovic wrote: > >>> Nico Kadel-Garcia wrote: Hypothetical: one admins a vended suite of applications that com

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-28 Thread Jorge Fábregas
On Sunday 28 November 2010 13:31:28 Benjamin Franz wrote: > Worse - it doesn't always log what it is doing in a way that you can figure > out. Occasionally not at all. SELinux does have some rate-limiting capabilities built-in to avoid a flood of identical messages...so the "triggering-event to

Re: [CentOS] yum is dumb in update of gmime & gmime-sharp

2010-11-28 Thread William Hooper
On Sat, Nov 27, 2010 at 3:44 PM, ken wrote: > # yum update > ... > --> Running transaction check > --> Processing Dependency: gmime = 2.2.10-5.el5.centos for package: > gmime-sharp > ---> Package gmime20.i386 0:2.2.26-1.el5.rf set to be updated > --> Finished Dependency Resolution > gmime-sharp-2.

Re: [CentOS] can't use godaddy SSL cert

2010-11-28 Thread bluethundr
Hello CentOS: Thanks for your input.. > As mentioned in my previous mail, there is no need to specify > >TLSCACertificateFile in slapd.conf unless your server will request client > >certificate for authentication. Nor is there any point in trying multiple > >files, you can concatenate the CA

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-28 Thread Benjamin Franz
On 11/27/2010 02:52 PM, Marko Vojinovic wrote: > On Saturday 27 November 2010 18:57:50 Benjamin Franz wrote: >> On 11/26/2010 05:17 PM, Patrick Lists wrote: >>> What's with people recommending to turn off SELinux?! That's just bad >>> advice and like recommending people keep their doors unlocked at

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-28 Thread Bob McConnell
Marko Vojinovic wrote: > On Sunday 28 November 2010 13:15:24 Bob McConnell wrote: >> Marko Vojinovic wrote: >>> On Sunday 28 November 2010 03:45:54 Nico Kadel-Garcia wrote: You forgot "take on becoming the SELinux integration manager for that project with every single update". >>> Every

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-28 Thread Scott Robbins
On Sun, Nov 28, 2010 at 09:14:43PM +0800, Christopher Chan wrote: > > > > I think it is easier/cheaper to use hardware firewalls and idp systems > > to protect servers than fight with selinux on each server. > > > > SELinux tuning might work on companies with unlimited resources like > > NSA .. or

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-28 Thread William Warren
On 11/28/2010 8:15 AM, Bob McConnell wrote: > Marko Vojinovic wrote: >> On Sunday 28 November 2010 03:45:54 Nico Kadel-Garcia wrote: >>> On Sat, Nov 27, 2010 at 9:21 PM, John R. Dennison wrote: You run it in Permissive mode, you deal with the exceptions as they arise whil

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-28 Thread Bob McConnell
Marko Vojinovic wrote: > On Sunday 28 November 2010 03:45:54 Nico Kadel-Garcia wrote: >> On Sat, Nov 27, 2010 at 9:21 PM, John R. Dennison wrote: >>>You run it in Permissive mode, you deal with the exceptions as >>>they arise while the software is running in its normal >>>e

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-28 Thread Christopher Chan
On Sunday, November 28, 2010 07:22 PM, Eero Volotinen wrote: >> You forgot "take on becoming the SELinux integration manager for that >> project with every single update". I've done that several times now > > In commercial service production, wasted time also costs money. > > I think it is easier/

Re: [CentOS] yum is dumb in update of gmime & gmime-sharp

2010-11-28 Thread ken
On 11/27/2010 04:38 PM John R Pierce wrote: > On 11/27/10 12:44 PM, ken wrote: >> This would seem like a bug... or why is yum trying to install package >> versions which are already installed? > > this most frequently happens when you mix dependencies of different yum > repositories.I noted .

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-11-28 Thread Eero Volotinen
> You forgot "take on becoming the SELinux integration  manager for that > project with every single update". I've done that several times now In commercial service production, wasted time also costs money. I think it is easier/cheaper to use hardware firewalls and idp systems to protect servers