Re: [CentOS] Possible to use multiple disk to bypass I/O wait?

On 06/09/2011 08:21 PM, Emmanuel Noobadmin wrote: > But now that you brought it up, I'm wondering if that would had been > pointless. If the kernel considers KVM opening the diskfile and > holding onto it as a single access, regardless of how many subsequent > reads/writes there are, then this woul

Re: [CentOS] ultrasecure sshd server

Robert Spangler wrote: > On Thursday 09 June 2011 17:34, the following was written: > >> How to configure sshd to required both ssh public key and user >> password also? yes, stupid, but required on my setup.. > > Have you thought about securing your ssh keys with a pasword? I do that here > s

Re: [CentOS] ultrasecure sshd server

> Not really. My view is so he can authenticate from his own PC without > the need to type the password, but if he is on someone else's system he > whould use regular password. That is what I would like to be able to do. That is possible for the root-Account. You can allow sshd to log you in as ro

Re: [CentOS] ultrasecure sshd server

On 10.6.2011 10:35, Ljubomir Ljubojevic wrote: > Robert Spangler wrote: >> On Thursday 09 June 2011 17:34, the following was written: >> >>> How to configure sshd to required both ssh public key and user >>> password also? yes, stupid, but required on my setup.. >> >> Have you thought about secur

Re: [CentOS] pam_succeed_if

From: Daniel De Marco > auth        required      pam_env.so > auth        sufficient    pam_unix.so nullok try_first_pass > auth        requisite    pam_succeed_if.so uid >= 500 quiet > auth        required      pam_deny.so > What's the use of the pam_succeed_if line? It will only be reached if

Re: [CentOS] pam_succeed_if

On Fri, 10 Jun 2011, John Doe wrote: From: Daniel De Marco auth        required      pam_env.so auth        sufficient    pam_unix.so nullok try_first_pass auth        requisite    pam_succeed_if.so uid >= 500 quiet auth        required      pam_deny.so What's the use of the pam_succeed_if li

Re: [CentOS] Vim scripting - cursor motion

From: Jussi Hirvi >     :% s/\t/","/g > Then I should add something to the beginning of file (line 1, char 1). > And append something to the end of the file (last line, last char). But > I cannot find a way to do this. Should I move the cursor (and how?), or > what? echo "First Line" > NEWFILE

Re: [CentOS] Cloning LVM

On 8.6.2011 15:33, Christopher Hearn wrote: > On Jun 8, 2011, at 9:25 AM, Ross Walker wrote: >> If you can create your /boot partition on sector 2048 and make sure it is in >> megabytes and not cylinders that would make sure that it is aligned with >> both RAID chunks and memory pages. > No ide

Re: [CentOS] ultrasecure sshd server

> How to configure sshd to required both ssh public key and user > password also? yes, stupid, but required on my setup.. If you want 2 factor authentication, you can add yubikeys. They are little usb dongle that provides one-time-password. And the server-side for those is open-source if you don

Re: [CentOS] ultrasecure sshd server

Markus Falb wrote: > On 10.6.2011 10:35, Ljubomir Ljubojevic wrote: >> Robert Spangler wrote: >>> On Thursday 09 June 2011 17:34, the following was written: >>> How to configure sshd to required both ssh public key and user password also? yes, stupid, but required on my setup.. >>> Have

Re: [CentOS] ultrasecure sshd server

2011/6/10 Nicolas Ross : >> How to configure sshd to required both ssh public key and user >> password also? yes, stupid, but required on my setup.. > > If you want 2 factor authentication, you can add yubikeys. They are little > usb dongle that provides one-time-password. And the server-side for t

Re: [CentOS] pam_succeed_if

* John Hodrien [06/10/2011 05:43]: > If you succeed on pam_unix, you're done. So a local account doesn't need > further checks. The next check ensures that a non-local source (say NIS/LDAP) > doesn't allow logins to system accounts (UID<500). Since you've got none, it > makes no difference, sin

Re: [CentOS] ultrasecure sshd server

On 6/10/2011 3:35 AM, Ljubomir Ljubojevic wrote: > Robert Spangler wrote: >> On Thursday 09 June 2011 17:34, the following was written: >> >>> How to configure sshd to required both ssh public key and user >>> password also? yes, stupid, but required on my setup.. >> >> Have you thought about s

Re: [CentOS] Vim scripting - cursor motion

Jussi There is a good article on vimscript here: http://www.ibm.com/developerworks/linux/library/l-vimscript-1/index.html) Sent via BlackBerry by AT&T ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Vim scripting - cursor motion

Sorry there was a typo, the correct URL is: http://www.ibm.com/developerworks/linux/library/l-vim-script-1/index.html Sent via BlackBerry by AT&T -Original Message- From: flapecc...@gmail.com Date: Fri, 10 Jun 2011 15:39:12 To: CentOS mailing list Reply-To: flapecc...@gmail.com Subject:

Re: [CentOS] ultrasecure sshd server

2011/6/10 Les Mikesell : > On 6/10/2011 3:35 AM, Ljubomir Ljubojevic wrote: >> Robert Spangler wrote: >>> On Thursday 09 June 2011 17:34, the following was written: >>>   How to configure sshd to required both ssh public key and user   password also? yes, stupid, but required on my setup.

Re: [CentOS] ultrasecure sshd server

Another option that you might want to look at is putting up an OpenBSD gateway running authpf (see ). The model there is an outside user has to open up an ssh shell to the authpf gateway before they are allowed to access services inside the network. If

Re: [CentOS] ultrasecure sshd server

>> If you want 2 factor authentication, you can add yubikeys. They are >> little >> usb dongle that provides one-time-password. And the server-side for those >> is >> open-source if you don't want to use their authentication servers. And >> they >> are relatively cheap. >> >> We use these here o

Re: [CentOS] Vim scripting - cursor motion

On 10.6.2011 18.39, flapecc...@gmail.com wrote: > There is a good article on vimscript here: > http://www.ibm.com/developerworks/linux/library/l-vimscript-1/index.html) Sorry there was a typo, the correct URL is: http://www.ibm.com/developerworks/linux/library/l-vim-script-1/index.html Thanks, I

Re: [CentOS] Vim scripting - cursor motion

On 6/10/2011 1:03 PM, Jussi Hirvi wrote: > On 10.6.2011 18.39, flapecc...@gmail.com wrote: >> There is a good article on vimscript here: >> http://www.ibm.com/developerworks/linux/library/l-vimscript-1/index.html) > > Sorry there was a typo, the correct URL is: > http://www.ibm.com/developerworks/l

Re: [CentOS] ultrasecure sshd server

Devin Reade wrote: > Another option that you might want to look at is putting up an OpenBSD > gateway running authpf (see ). > > The model there is an outside user has to open up an ssh shell > to the authpf gateway before they are allowed to access servi

Re: [CentOS] ultrasecure sshd server

Les Mikesell wrote: > That's just normal behavior when both are enabled. If the key works, > you don't get the password prompt. But even in the 'ultrasecure' > scenario of requiring both, do you really want people typing their > passwords on equipment that might have a keylogger running? >

Re: [CentOS] ultrasecure sshd server

On Jun 10, 2011, at 12:04 PM, Ljubomir Ljubojevic wrote: > Les Mikesell wrote: > >> That's just normal behavior when both are enabled. If the key works, >> you don't get the password prompt. But even in the 'ultrasecure' >> scenario of requiring both, do you really want people typing their

Re: [CentOS] ultrasecure sshd server

On 6/10/2011 2:09 PM, Craig White wrote: > > On Jun 10, 2011, at 12:04 PM, Ljubomir Ljubojevic wrote: > >> Les Mikesell wrote: >> >>> That's just normal behavior when both are enabled. If the key works, >>> you don't get the password prompt. But even in the 'ultrasecure' >>> scenario of requiring

Re: [CentOS] Vim scripting - cursor motion

Jussi I tried various ways but it seems the only way to insert a line from a script is to use the append() function (do help append) specifying the line number as a parameter. I tried it on with an example script "moo.vim" as shown below flapeccino@T4410 ~ $ cat moo.vim :1,$s/ /,/g :call appen

Re: [CentOS] ultrasecure sshd server

--On Friday, June 10, 2011 08:55:47 PM +0200 Ljubomir Ljubojevic wrote: > Devin Reade wrote: >> Another option that you might want to look at is putting up an OpenBSD >> gateway running authpf (see ). [snip] > That is not something to strive for. Depend

[CentOS] C6 LiveCD top 5 apps

Regarding http://twitter.com/CentOS/statuses/79336297579282432 I don't have a twitter account so I'm spamming the list since it looks on topic :) I'd like to see on the LiveCD the following: 1. latest dd_rescue 2. latest gparted 3. ntfs-3g 4. screen 5. mc How about you? -- Nux! www.nux.ro ___

[CentOS] C6 LiveCD top 5 apps

On Sat, 11 Jun 2011, n...@nux.ro wrote: > I'd like to see on the LiveCD the following: > 1. latest dd_rescue > 2. latest gparted > 3. ntfs-3g > 4. screen > 5. mc CentOS 6 Live CD would composed of packges from the distribution's packages --- 'latest' is not a criteria there; as to something wit

Re: [CentOS] C6 LiveCD top 5 apps

On Sat, 11 Jun 2011, n...@nux.ro wrote: > I'd like to see on the LiveCD the following: > 1. latest dd_rescue > 2. latest gparted > 3. ntfs-3g > 4. screen > 5. mc I agree with most of this list except I don't use dd_rescue very much; screen and gparted are the two that I would find most useful. mc

Re: [CentOS] Possible to use multiple disk to bypass I/O wait?

On 6/10/11, Gordon Messmer wrote: > atime and mtime are updated for *every* read and write operation, not > for the open() of the file. Ok. In any case, the combination of atime and ionice on the cronjob seems to have helped, no locked up in the past 24 hours. But it is a Saturday here so that mi

Re: [CentOS] C6 LiveCD top 5 apps

R P Herrold writes: > CentOS 6 Live CD would composed of packges from the > distribution's packages Why? What's wrong with a few extra packages from EPEL? It's not like I'm asking for games or eye candy stuff. My 2 lei ___ CentOS mailing list CentOS