Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread James Bensley
Hello all, I've been reading this thread and have a question. I would like to set up passwordless ssh between two servers for some automated tasks but I don't like the paswordless key's option. How can I supply a passphrase when generating my keys but still have this process automated? --James. (

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread Cameron Kerr
On 27/01/2011, at 9:32 PM, James Bensley wrote: > I've been reading this thread and have a question. I would like to set up > passwordless ssh between two servers for some automated tasks but I don't > like the paswordless key's option. How can I supply a passphrase when > generating my keys but

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread Cameron Kerr
On 27/01/2011, at 8:48 PM, Nico Kadel-Garcia wrote: > And the permissions of $HOME/.ssh should be 0700. Ah, yes. My mistake, sorry. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread James Bensley
On 27 January 2011 08:48, Cameron Kerr wrote: > I think 'keychain' is often used for this. It's a bit like ssh-agent, in > that you unlock the key manually (eg. just after starting the system), but > it can be accessed by other programs later. I've never used it myself. Ah yes, I see thats what N

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread Stephen Harris
On Thu, Jan 27, 2011 at 02:39:29AM -0500, Nico Kadel-Garcia wrote: > Wrong again. Never use public key access for root accounts, it simply > compounds the security risks. Passphrase protected SSH keys can be That is 100% backwards. *NEVER* use password authentication for root (passwords are easie

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread Stephen Harris
On Thu, Jan 27, 2011 at 12:33:31PM +0530, Indunil Jayasooriya wrote: > # ssh-keygen -t rsa ( passphrase should be empty ) Don't use passphraseless keys unless you're using it for an automated tool (eg rsync kicked off from cron). If this is for human interactive work then learn how to use s

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread Stephen Harris
On Thu, Jan 27, 2011 at 07:59:30AM +, John Hodrien wrote: > On Thu, 27 Jan 2011, Nico Kadel-Garcia wrote: > > > Wrong again. Never use public key access for root accounts, it simply > > compounds the security risks. Passphrase protected SSH keys can be > Is this actually current doctrine for

Re: [CentOS] Package updates for 5.4?

2011-01-27 Thread Kevin Krieser
On Jan 26, 2011, at 8:08 PM, John R Pierce wrote: > On 01/26/11 5:51 PM, Mitch Patenaude wrote: >> >> >> On Wed, Jan 26, 2011 at 5:42 PM, Gene > > wrote: >> >>Can you tell us more about you cluster? Nodes? Purpose? I managed >>a small 90 node cluster for s

Re: [CentOS] Package updates for 5.4?

2011-01-27 Thread James Hogarth
As per the Redhat Virtualisation Expo yesterday... API/ABI compatibility is maintained within the point releases. If your stuff is certified on 5.4 it will run on 5.5/5.6. In addition there are compatibility libraries to get anything running on 5.X on 6.0... and when you move to 6.0 then anything

Re: [CentOS] Package updates for 5.4?

2011-01-27 Thread Nico Kadel-Garcia
On Thu, Jan 27, 2011 at 7:16 AM, James Hogarth wrote: > As per the Redhat Virtualisation Expo yesterday... API/ABI > compatibility is maintained within the point releases. If your stuff > is certified on 5.4 it will run on 5.5/5.6. > > In addition there are compatibility libraries to get anything

Re: [CentOS] how to unmount an NFS share when the NFS server is unavailable?

2011-01-27 Thread Les Mikesell
On 1/27/11 12:57 AM, Rudi Ahlers wrote: > >> >> Actually, since the original question involved access to backups, I >> should have given my usual answer which is that backuppc is the thing to >> use for backups and it provides a web interface for restores (you pick >> the historical version you wan

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread David Christensen
If pw less access is something you prefer use a kerberos based service like FreeIPA/RedhatIPA. No need for ssh keys, and pw aren't stored locally. You can log in as a regular user and sudo su - to root, which can be done during ssh login: ssh -t user@host sudo su - David On Jan 27, 2011,

Re: [CentOS] how to unmount an NFS share when the NFS server is unavailable?

2011-01-27 Thread Rudi Ahlers
On Thu, Jan 27, 2011 at 3:00 PM, Les Mikesell wrote: > On 1/27/11 12:57 AM, Rudi Ahlers wrote: >> >>> >>> Actually, since the original question involved access to backups, I >>> should have given my usual answer which is that backuppc is the thing to >>> use for backups and it provides a web inter

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread Always Learning
On Thu, 2011-01-27 at 02:48 -0500, Nico Kadel-Garcia wrote: > >> On 27/01/2011, at 7:45 PM, Always Learning wrote: > >>> > >>> server /root/.ssh > >>> > >>> id_rsa.authorized_keys -rw > But, the name of the file with a copy of your public key should be > $HOME/.ssh/authorized_keys. And

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread Always Learning
On Thu, 2011-01-27 at 20:35 +1300, Cameron Kerr wrote: > Also, it should be named authorized_keys, not id_rsa.authorized_keys B I N G O ** I can now log-in with just my home made command .s2 Thanks a lot. That cured it. Brilliant. Many thanks again. -- With

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread Always Learning
On Thu, 2011-01-27 at 02:39 -0500, Nico Kadel-Garcia wrote: > Also, there's a stack of reasons that DSA is preferred to RSA for SSH > keys these days. When you generate your private keys, use "ssh-keygen > -t dsa", not rsa. RSA is the default if no cypher type is declared on the command line. I

[CentOS] centos 5.5: iptables: module recent

2011-01-27 Thread Helmut Drodofsky
Hello, I have well performing iptables in centos 5.2 and 5.3 : -A INPUT -m state --state NEW -m recent --update --seconds 60 --hitcount 1000 -p tcp --dport 25 -j LOG --log-prefix "FW DROP IP Flood: " Centos 5.5, updated today: Without -hitcount : iptables accept the line Including -hitcoun

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread Always Learning
On Thu, 2011-01-27 at 12:33 +0530, Indunil Jayasooriya wrote: > you expect Passwordless SSH. If so, I wanted a quick effortless automated log-on. > # ssh-keygen -t rsa ( passphrase should be empty ) Yes I did exactly that but following advice from this mailing list have changed to DSA

Re: [CentOS] Package updates for 5.4?

2011-01-27 Thread James Hogarth
> > This... is theory. In practice, major architectural changes will break > things and need to be tested. For example, the anaconda environment > for RHEL 6 does not contain the "dirname" command. The environment for > RHEL 5 did. I anticipate that CentOS 6 will also lack it. Who would > know that

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread Always Learning
On Thu, 2011-01-27 at 06:40 -0500, Stephen Harris wrote: > *NEVER* use password authentication for root > (passwords are easier to brute force 'cos people choose bad passwords). > Use ssh public key access for root, with appropriate restrictions > (eg "from="). You haven't seen my long and diffic

Re: [CentOS] Help - Seeking recommendations-script to install on CENT OS web server for backup to Network Attached Storage

2011-01-27 Thread Krishna Chandra Prajapati
rsync Krishna On Thu, Jan 27, 2011 at 7:27 AM, Steve Eisenberg wrote: > Hello: > > I wanted to know if anyone on the list can recommend one or more scripts to > install on a CENT OS web server that allows you to back up the entire box to > network attached storage? > > Many thanks, > Steve Eisen

Re: [CentOS] how to unmount an NFS share when the NFS server is unavailable?

2011-01-27 Thread m . roth
Rudi Ahlers wrote: > On Thu, Jan 27, 2011 at 3:00 PM, Les Mikesell > wrote: >> On 1/27/11 12:57 AM, Rudi Ahlers wrote: >>> Actually, since the original question involved access to backups, I should have given my usual answer which is that backuppc is the thing > It currently backs up ev

Re: [CentOS] how to unmount an NFS share when the NFS server is unavailable?

2011-01-27 Thread Always Learning
On Wed, 2011-01-26 at 23:05 -0800, John R Pierce wrote: > cpanel is pure crap. It is a ghastly and frustrating nightmare. Command line, even for a Linux beginner like me, is far superior. It is amazing that people pay lots of money to use it. -- With best regards, Paul. England, EU.

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread Always Learning
On Thu, 2011-01-27 at 06:57 -0600, David Christensen wrote: > If pw less access is something you prefer use a kerberos based service like > FreeIPA/RedhatIPA. No need for ssh keys, and pw aren't stored locally. You > can log in as a regular user and sudo su - to root, which can be done during

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread m . roth
Always Learning wrote: > > On Thu, 2011-01-27 at 06:40 -0500, Stephen Harris wrote: >> *NEVER* use password authentication for root >> (passwords are easier to brute force 'cos people choose bad passwords). >> Use ssh public key access for root, with appropriate restrictions >> (eg "from="). > > Yo

[CentOS] setting up icecast

2011-01-27 Thread mike cutie and maia
Hi all, I am new at setting up icecastand was wondering if someone cold point me to a guide on how to do so on cent 5.5 or give my instructions Best mike ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] how to unmount an NFS share when the NFS server is unavailable?

2011-01-27 Thread m . roth
Always Learning wrote: > > On Wed, 2011-01-26 at 23:05 -0800, John R Pierce wrote: > >> cpanel is pure crap. > > It is a ghastly and frustrating nightmare. Command line, even for a > Linux beginner like me, is far superior. It is amazing that people pay > lots of money to use it. > It may be crap,

[CentOS] Ext4 on CentOS 5.5 x64

2011-01-27 Thread Sorin Srbu
Hi all, For those of you that have been using the ext4 technology preview on CentOS 5.5, how has it panned out? Does it perform as expected? How do you feel the stability, creation of the FS and the administration of it is? Ideas and comments welcome. Thanks. -- BW, Sorin ---

[CentOS] Access to a Power6/Power7 machine?

2011-01-27 Thread Timo Schoeler
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, is there anybody here who has access to such a machine and could test e... 'some software' there? Please mail me privately. Thanks & best, Timo -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) iD8DBQFNQYqAfg746kcGBOwRArE2AJ4

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread Always Learning
On Thu, 2011-01-27 at 10:01 -0500, m.r...@5-cent.us wrote: > Always Learning wrote: > > You haven't seen my long and difficult (for others) password (uppercase, > > lowercase, and digits). It is unlikely ever to succumb to brute > > force. :-) > > Ah, no. Where can you log in as root from? If i

Re: [CentOS] how to unmount an NFS share when the NFS server is unavailable?

2011-01-27 Thread Always Learning
On Thu, 2011-01-27 at 10:05 -0500, m.r...@5-cent.us wrote: > > On Wed, 2011-01-26 at 23:05 -0800, John R Pierce wrote: > > > >> cpanel is pure crap. > It may be crap, but a) I haven't seen any ISPs that offer shell access for > the better part of a decade, at least, and b) consider the enTHUsist

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread m . roth
Always Learning wrote: > On Thu, 2011-01-27 at 10:01 -0500, m.r...@5-cent.us wrote: >> Always Learning wrote: > >> > You haven't seen my long and difficult (for others) password >> (uppercase, lowercase, and digits). It is unlikely ever to succumb to brute >> > force. :-) >> >> Ah, no. Where can yo

Re: [CentOS] centos 5.5: iptables: module recent

2011-01-27 Thread Mário Barbosa
Hi, Helmut Drodofsky wrote: > When I add the line interactive, the result is > > [root@host sysconfig]# iptables -A INPUT -m state --state NEW -m recent > --update --seconds 60 --hitcount 1000 -p tcp --dport 25 -j LOG > --log-prefix "FW DROP IP Flood: " > > iptables: Unknown error 184467440737

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread Always Learning
On Thu, 2011-01-27 at 10:27 -0500, m.r...@5-cent.us wrote: > Security through obscurity doesn't work. It certainly helps defeat most potential intruders but not the most determined. IPtables does help too. > Are you familiar with nmap? Yes. I used to read the bloke's circulars when I was on

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread John R Pierce
On 01/27/11 5:46 AM, Always Learning wrote: > > -rw--- 1 root root 404 Jan 27 03:23 id_rsa.authorized_keys how many times do you have to be told that the filename is authorized_keys, NOT id_rsa.authorized_keys for someone who claims to have been in IT since the 1960s, you don't seem to pay

Re: [CentOS] how to unmount an NFS share when the NFS server is unavailable?

2011-01-27 Thread Stephen Harris
On Thu, Jan 27, 2011 at 10:05:35AM -0500, m.r...@5-cent.us wrote: > It may be crap, but a) I haven't seen any ISPs that offer shell access for > the better part of a decade, at least, and b) consider the enTHUsistic www.panix.com - Your $HOME away from home. Of course many people who want shell a

Re: [CentOS] Ext4 on CentOS 5.5 x64

2011-01-27 Thread James Hogarth
On 27 January 2011 15:06, Sorin Srbu wrote: > Hi all, > > For those of you that have been using the ext4 technology preview on CentOS > 5.5, how has it panned out? Does it perform as expected? How do you feel the > stability, creation of the FS and the administration of it is? Ideas and > comments

Re: [CentOS] Ext4 on CentOS 5.5 x64

2011-01-27 Thread Rudi Ahlers
On Thu, Jan 27, 2011 at 5:37 PM, James Hogarth wrote: > On 27 January 2011 15:06, Sorin Srbu wrote: >> Hi all, >> >> For those of you that have been using the ext4 technology preview on CentOS >> 5.5, how has it panned out? Does it perform as expected? How do you feel the >> stability, creation o

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread m . roth
Always Learning wrote: > > On Thu, 2011-01-27 at 10:27 -0500, m.r...@5-cent.us wrote: > >> Security through obscurity doesn't work. > > It certainly helps defeat most potential intruders but not the most > determined. IPtables does help too. We also run fail2ban at work. Very nice, installs (alon

Re: [CentOS] how to unmount an NFS share when the NFS server is unavailable?

2011-01-27 Thread m . roth
Stephen Harris wrote: > On Thu, Jan 27, 2011 at 10:05:35AM -0500, m.r...@5-cent.us wrote: >> It may be crap, but a) I haven't seen any ISPs that offer shell access >> for >> the better part of a decade, at least, and b) consider the enTHUsistic > > www.panix.com - Your $HOME away from home. > > Of

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread Michel van Deventer
>> >>> Security through obscurity doesn't work. >> >> It certainly helps defeat most potential intruders but not the most >> determined. IPtables does help too. > > We also run fail2ban at work. Very nice, installs (along with shorewall), > and creates a temporary blacklist, blocking an IP that's

Re: [CentOS] how to unmount an NFS share when the NFS server is unavailable?

2011-01-27 Thread Les Mikesell
On 1/27/2011 7:30 AM, Rudi Ahlers wrote: >> >>> BackupPC doesn't intergrate into cPanel. >> >> Why does it have to integrate? It runs on a different machine. Can't you >> make a >> remote apache authenticate the same way as a cpanel user would to access its >> web >> interface? >> > > Sorry, I sh

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread Always Learning
On Thu, 2011-01-27 at 07:35 -0800, John R Pierce wrote: > On 01/27/11 5:46 AM, Always Learning wrote: > > > > -rw--- 1 root root 404 Jan 27 03:23 id_rsa.authorized_keys > how many times do you have to be told that the filename is > authorized_keys, NOT id_rsa.authorized_keys Once. How ma

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread Always Learning
On Thu, 2011-01-27 at 10:40 -0500, m.r...@5-cent.us wrote: > We also run fail2ban at work. Very nice, installs (along with shorewall), > and creates a temporary blacklist, blocking an IP that's tried five, I > think, times to break in. All configurable, btw. Thanks. I'll add that to the list to

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread m . roth
Michel van Deventer wrote: >>> Security through obscurity doesn't work. >>> >>> It certainly helps defeat most potential intruders but not the most >>> determined. IPtables does help too. >> >> We also run fail2ban at work. Very nice, installs (along with >> shorewall), and creates a temporar

Re: [CentOS] centos 5.5: iptables: module recent

2011-01-27 Thread Kai Schaetzl
Helmut Drodofsky wrote on Thu, 27 Jan 2011 15:41:15 +0100: > The man page describes the parameter well, did you google before asking? I'm pretty sure that this topic has already been raised here (and probably elsewhere) a few times and as far as I recall it there must be a bug. I don't know if

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread David
On 01/27/2011 09:00 AM, Always Learning wrote: > On Thu, 2011-01-27 at 06:57 -0600, David Christensen wrote: > >> If pw less access is something you prefer use a kerberos based service like >> FreeIPA/RedhatIPA. No need for ssh keys, and pw aren't stored locally. You >> can log in as a regular

Re: [CentOS] Ext4 on CentOS 5.5 x64

2011-01-27 Thread compdoc
>For those of you that have been using the ext4 technology preview on CentOS 5.5, how has it panned out? Does it perform as expected? How do you feel the stability, creation of the FS and the administration of it is? Ideas and comments welcome. I've recently been using ext4 because I have servers

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread Robert Nichols
On 01/27/2011 01:39 AM, Nico Kadel-Garcia wrote: > Also, there's a stack of reasons that DSA is preferred to RSA for SSH > keys these days. When you generate your private keys, use "ssh-keygen > -t dsa", not rsa. Care to elaborate on that? Searching, I find mostly a "stack of reasons" for prefer

Re: [CentOS] Ext4 on CentOS 5.5 x64

2011-01-27 Thread Blake Hudson
Original Message Subject: Re: [CentOS] Ext4 on CentOS 5.5 x64 From: compdoc To: 'CentOS mailing list' Date: Thursday, January 27, 2011 10:08:46 AM >> For those of you that have been using the ext4 technology preview on CentOS > 5.5, how has it panned out? Does it perform as ex

Re: [CentOS] Ext4 on CentOS 5.5 x64

2011-01-27 Thread Jerry Franz
On 01/27/2011 07:37 AM, James Hogarth wrote: > On 27 January 2011 15:06, Sorin Srbu wrote: >> Hi all, >> >> For those of you that have been using the ext4 technology preview on CentOS >> 5.5, how has it panned out? Does it perform as expected? How do you feel the >> stability, creation of the FS a

Re: [CentOS] setting up icecast

2011-01-27 Thread Frank Cox
I run the CreekFM streaming audio server on icecast and ices. (You can find it at www.creekfm.com.) It runs on Centos 5. Do you have any specific questions? On Thu, 27 Jan 2011 09:02:56 -0600 mike cutie and maia wrote: > Hi all, > > I am new at setting up icecastand was wondering if someone c

[CentOS] CentOS-announce Digest, Vol 71, Issue 2

2011-01-27 Thread centos-announce-request
ttachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.centos.org/pipermail/centos-announce/attachments/20110127/8235005f/attachment-0001.bin -- Message: 2 Date: Thu, 27 Jan 2011 09:45:04 +01

Re: [CentOS] setting up icecast

2011-01-27 Thread Kai Schaetzl
Please do not hijack threads. If you want to send a new message to the list then do NOT reply to a message. Also, I ask that you first try to install icecast and *then* come to the list if you encounter problems. This is not an all-purpose support list. Thanks. Kai ___

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread Patrick Lists
On 01/27/2011 04:57 PM, m.r...@5-cent.us wrote: [snip] >> Here too and from my own systems those 'scriptkiddies' are exposed to the >> world using http://twitter.com/fail2ban :) > > So, where's most of your hits from? The most I see is China, followed by > Brazil, then Korea (not sure which), then,

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread Keith Keller
On Thu, Jan 27, 2011 at 10:40:14AM -0500, m.r...@5-cent.us wrote: > > We also run fail2ban at work. Very nice, installs (along with shorewall), > and creates a temporary blacklist, blocking an IP that's tried five, I > think, times to break in. All configurable, btw. There is also denyhosts, whic

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread Michel van Deventer
Hi, On Thu, 2011-01-27 at 10:57 -0500, m.r...@5-cent.us wrote: > > Here too and from my own systems those 'scriptkiddies' are exposed to the > > world using http://twitter.com/fail2ban :) > > So, where's most of your hits from? The most I see is China, followed by > Brazil, then Korea (not sure

Re: [CentOS] #!/bin/csh -v not work on CENTOS 5.5

2011-01-27 Thread David G . Miller
Cameron Kerr writes: > > > On 27/01/2011, at 7:27 AM, David G. Miller wrote: > > > chmod -R g+rx,o+rx Nelson/ > > > > cd > > What is the result of 'cd' (a shell-internal command) in this version of tcsh? > It is the same as in sh? As expected, cd with no directory is the same as cd ~/ Chee

[CentOS] Static assignment of SCSI device names?

2011-01-27 Thread Chuck Munro
Hello list members, In CentOS-5.5 I'm trying to achieve static assignment of SCSI device names for a bunch of RAID-60 drives on a Supermicro motherboard. The "scsi_id" command identifies all drives ok. The board has one SATA controller and three SAS/SATA controllers ... standard on-board IC

Re: [CentOS] Static assignment of SCSI device names?

2011-01-27 Thread Les Mikesell
On 1/27/2011 2:41 PM, Chuck Munro wrote: > > Identifying drives by their ID string (which includes the drive's serial > number) and assigning names in the rules works ok. BUT, what happens > when I have to swap out a failed drive? The serial number (and possibly > model number) changes, and the

Re: [CentOS] how to unmount an NFS share when the NFS server is unavailable?

2011-01-27 Thread Dr. Ed Morbius
on 07:54 Thu 27 Jan, John Hodrien (j.h.hodr...@leeds.ac.uk) wrote: > On Wed, 26 Jan 2011, Dr. Ed Morbius wrote: > > > I'd suggest the automount route as well (you're only open to NFS issues > > while the filesystem is mounted), but you then have to maintain > > automount maps and run the risk of i

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread Always Learning
On Thu, 2011-01-27 at 20:30 +0100, Michel van Deventer wrote: > Lots from China, Russia and some South American countries. Sometimes > even from my own country ! (Netherlands). Attempts from Holland always, in my experience, come from Leaseweb IPs but complaining to them produces no results. Mv

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread Frank Cox
On Thu, 27 Jan 2011 21:23:51 + Always Learning wrote: > Attempts from Holland always, in my experience, come from Leaseweb IPs > but complaining to them produces no results. The appropriate entries in /etc/hosts.deny does produce results -- MELVILLE THEATRE ~ Melville Sask ~ www.melvill

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread Dr. Ed Morbius
on 10:15 Thu 27 Jan, Robert Nichols (rnicholsnos...@comcast.net) wrote: > On 01/27/2011 01:39 AM, Nico Kadel-Garcia wrote: > > > Also, there's a stack of reasons that DSA is preferred to RSA for SSH > > keys these days. When you generate your private keys, use "ssh-keygen > > -t dsa", not rsa. >

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread Dr. Ed Morbius
on 14:50 Thu 27 Jan, Always Learning (cen...@g7.u22.net) wrote: > > On Thu, 2011-01-27 at 12:33 +0530, Indunil Jayasooriya wrote: > > > > you expect Passwordless SSH. If so, > > I wanted a quick effortless automated log-on. That's what ssh-agent gives you. If you invoke a command under ssh-a

Re: [CentOS] Static assignment of SCSI device names?

2011-01-27 Thread Dr. Ed Morbius
on 12:41 Thu 27 Jan, Chuck Munro (chu...@seafoam.net) wrote: > > Hello list members, > > In CentOS-5.5 I'm trying to achieve static assignment of SCSI device > names for a bunch of RAID-60 drives on a Supermicro motherboard. The > "scsi_id" command identifies all drives ok. > > The board has

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread Michael Klinosky
m.r...@5-cent.us wrote: > Always Learning wrote: ... >> Blush, blush access is on a non-standard port and then restricted >> to a few IP addresses. I don't want my servers taken over by others. >> > Security through obscurity doesn't work. Are you familiar with nmap? If port scanning is a co

Re: [CentOS] SSH Automatic Log-on Failure - Centos 5.5

2011-01-27 Thread Nico Kadel-Garcia
On Thu, Jan 27, 2011 at 6:40 AM, Stephen Harris wrote: > On Thu, Jan 27, 2011 at 02:39:29AM -0500, Nico Kadel-Garcia wrote: >> Wrong again. Never use public key access for root accounts, it simply >> compounds the security risks. Passphrase protected SSH keys can be > > That is 100% backwards.  *N

Re: [CentOS] Ext4 on CentOS 5.5 x64

2011-01-27 Thread Sorin Srbu
>-Original Message- >From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On >Behalf Of compdoc >Sent: Thursday, January 27, 2011 5:09 PM >To: 'CentOS mailing list' >Subject: Re: [CentOS] Ext4 on CentOS 5.5 x64 > >>For those of you that have been using the ext4 technology prev