[CentOS] guidance on enabling 2FA at Linux GUI level

[Erick Perez - Quadrian Enterprises]

Hi all,
running a machine with Centos 7.6 that already has a 2FA PAM- enabled
module for SSH logins.

Is there a document that talks about configuring Centos 7.6 default GUI
(Gnome) to use 2fa with PAM?

thanks,
-- 

-
Erick Perez
Quadrian Enterprises S.A. - Panama, Republica de Panama
Skype chat: eaperezh
WhatsApp IM: +507-6675-5083
-
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Mail server troubles

[Jonathan Billings]

On Fri, Oct 09, 2020 at 02:23:20PM -0500, Valeri Galtsev wrote:
> Not for my users, thank you. My authenticated users send whatever they want
> without any filtering, scoring, scanning for virii (that is Latin plural for
> virus).

It might interest you to know that the plural for 'virus' is
'viruses'.  The latin word it was derived from was a neuter term, so
you might say 'vira', but since it was derived from what meant
'poison' (like the word virulent) there wasn't really a plural used.
Also, the Romans hadn't figured out Germ Theory yet so they didn't
know it was composed of multiple small entities.  Also, the word
'Viri' is the plural of the masculine word 'Vir' for 'Male human', so
it is confusing. ('vir' used in the words 'triumvir' or 'virile' /
'virility') 

Chuck 'virii' in the bin with words like 'octopi'.

-- 
Jonathan Billings 
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Mail server troubles

[Valeri Galtsev]

On 2020-10-09 14:16, Kenneth Porter wrote:
--On Friday, October 09, 2020 6:29 PM +1300 Rob Kampen 
 wrote:



If this reject is due to their spam filtering process, it is actually the
email author's problem - how they make up their sentences, key words etc.
and thus the problem will travel with them, to whatever email provider
they choose.

Suggest they get educated in how to write an appropriate email that
doesn't raise alarms, or they could use mailchimp (e.g. only) for their
large group emails.


Good point. Feed all your outbound mail to SpamAssassin


Not for my users, thank you. My authenticated users send whatever they 
want without any filtering, scoring, scanning for virii (that is Latin 
plural for virus).


But if there is problem created by my user, it definitely will be 
properly addressed, with user, in person.


Valeri

and set it to 
retain the report in the output, directed to a local email account so 
you can review it via Dovecot. You could also direct it to an external 
mail account (eg. on a VPS) so you can see what it looks like to the 
outside world.




___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


--

Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Mail server troubles

[Kenneth Porter]

--On Friday, October 09, 2020 6:29 PM +1300 Rob Kampen 
 wrote:



If this reject is due to their spam filtering process, it is actually the
email author's problem - how they make up their sentences, key words etc.
and thus the problem will travel with them, to whatever email provider
they choose.

Suggest they get educated in how to write an appropriate email that
doesn't raise alarms, or they could use mailchimp (e.g. only) for their
large group emails.


Good point. Feed all your outbound mail to SpamAssassin and set it to 
retain the report in the output, directed to a local email account so you 
can review it via Dovecot. You could also direct it to an external mail 
account (eg. on a VPS) so you can see what it looks like to the outside 
world.




___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Mail server troubles

[Kenneth Porter]

--On Friday, October 09, 2020 12:49 AM +0200 Nicolas Kovacs 
 wrote:



This is probably a bit OT, but here goes.


I suggest subscribing to the Mailop list and then looking at the archives. 
Very low traffic, comparable to the CentOS users list.




___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] kindle app on CentOS 7?

[Fred]

Mark:

Older version(s), e.g. 1.17 of Kindle for PC worked fine on wine (on my
Ubuntu 18.04 VM), but some of the later versions didn't. I was using it for
DeDRM, and since I wasn't smart enough to figure out the correct
incantation to make later versions work, I chose a different approach. I
can tell you what that was if you care.

I used Ubuntu because I've never had any luck making things work in Wine on
Centos, possibly because RH/Centos only ship 64-bit wine and Calibre and
Kindle for PC are 32-bit. There's a (somewhat outdated) HOWTO on Apprentice
Alf's blog about doing the kindle on Ubuntu setup that I followed, and it
was close enough to let me get it working. I don't have a clue about
whether 20.04 is still close enough, or not.

Good Luck!

Fred

On Fri, Oct 9, 2020 at 11:37 AM mark  wrote:

> Anyone got a link to someone's how to install the kindle app for PC on
> CentOS 7?
>
> mark "don't get me started on Nook and ACE"
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Mail server troubles

[Phil Perry]

On 09/10/2020 16:42, Ian Pilcher wrote:

On 10/8/20 4:49 PM, Nicolas Kovacs wrote:
The school's not happy because in their eyes I'm faulty of badly 
maintaining

their mail server.


As someone with school age children, I've observed that schools seem to
have a vastly over-inflated view of the importance of their
communications.  I've provided my email address to my children's schools
as an EMERGENCY contact method, and I've been receiving notifications of
every single fund raising activity, athletic event, PTA meeting, etc.,
etc., ever since - despite multiple complaints.

It seems likely to me that the school's emails are being reported as
spam by their recipients.  Tell them to look in the mirror.



Further, you need to explain to them that *you* are only responsible for 
the policies which dictate which emails *you* accept. You can not 
mandate other people to accept your mail. It is their mail server and 
they are completely within their rights to run it how they see fit, and 
they will.


Of course one hopes you are following industry best practices to aid 
your deliverability, but ultimately you are not in control of what 
others are willing to accept. If they do not understand this, flip it 
around and ask them how they feel about a spammer insisting you accept 
their spam and deliver it to all the staff and pupils.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Mail server troubles

[Ian Pilcher]

On 10/8/20 4:49 PM, Nicolas Kovacs wrote:

The school's not happy because in their eyes I'm faulty of badly maintaining
their mail server.


As someone with school age children, I've observed that schools seem to
have a vastly over-inflated view of the importance of their
communications.  I've provided my email address to my children's schools
as an EMERGENCY contact method, and I've been receiving notifications of
every single fund raising activity, athletic event, PTA meeting, etc.,
etc., ever since - despite multiple complaints.

It seems likely to me that the school's emails are being reported as
spam by their recipients.  Tell them to look in the mirror.

--

 In Soviet Russia, Google searches you!


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] kindle app on CentOS 7?

[mark]

Anyone got a link to someone's how to install the kindle app for PC on 
CentOS 7?


mark "don't get me started on Nook and ACE"
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] SEcontext setting failure on an external harddisk

[H]

On 10/08/2020 11:10 PM, Jonathan Billings wrote:
> On Oct 8, 2020, at 15:22, H  wrote:
>> I tried moving a PosgreSQL database to an external harddisk due to lack of 
>> space on the main harddisks. Not the ideal solution of course but it should 
>> work. However, on CentOS 7 the external harddisk is mounted under /run/media 
>> and the user. I copied the postgresql database directory and made sure it is 
>> owned recursively by postgres, changed the necessary settings in both the 
>> systemd unit and the conf file.
> I don’t believe that the volume will be mounted on boot in /run/media, that 
> is for storage mounted by a user logged at the console. 
>
> It would make more sense to set up a systemd .mount and .automount unit for 
> the device and mount point (someplace outside of /run, such as 
> /srv/mountpointname). Then set up the labels correctly. 
>
> You need to use a file system that supports extended attribute if you want it 
> to work with selinux, so XFS or ext4.
>
> --
> Jonathan Billings
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos

You are correct, I mounted the external harddisk as a user. The harddisk is 
formatted xfs so it supports labels.

However, I was not planning to automount this disk every time which of course 
would mean postgresql would fail without the harddisk. It might be better to 
use the smaller existing space on the existing harddisk until I buy a larger 
internal harddisk which would automount and then move postgresql to that.

Thank you for your reply.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos