[CentOS] file system resizing with cloud-init on centos/redhat??

2013-08-06 Thread Gelen James
Hi,

Has any one used resizefs module with cloud-init on centos/redhat before? How 
to call it with #cloud-config user data, do I need to give it any parameters? I 
googled cloud-init, but it is pretty difficult to find a manual/book on this, 
and mostly they are Ubuntu based.

If possible, I'd like to use a same image/AMI to boot up instances(VMs) with 
different disk size setup, and let cloud-init to take care of increasing 
partition size,  and file system resizing. Is it possible for centos/redhat?


Any insights / suggestions are welcomed. 


Thanks.
Gelen
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Failed to create /dev/loop0p* entries for partitions inside loopback devices

2013-05-24 Thread Gelen James
Hi Paul and all,

 Thanks for your workaround. I followed exactly with kpartx command, it does 
works for mkfs when using /dev/mapper/* entries. 

 But there is still no /dev/loop0p* entries created. Do you have any ideas why? 

 I've tried to use a loopback /dev/loop0 to simulate drive type storage pool 
for KVM virtualization tests, and so that always fails because no /dev/loop0p* 
entries created.

 Please shed a light on this. Thanks a lot.

--Robin





 From: Paul Heinlein 
To: CentOS mailing list  
Sent: Friday, May 24, 2013 11:05 AM
Subject: Re: [CentOS] Failed to create /dev/loop0p* entries for partitions 
inside loopback devices
 

On Fri, 24 May 2013, Gelen James wrote:

> centos 6 failed to create entries under /dev for newly created loopback 
> devices. Any one know why? and how to fix/workaround it?
> 
> The steps to duplicate is pretty simple
> 
> dd if=/dev/zero of=/tmp/deleteme bs=1M count=100
> losetup /dev/loop0 /tmp/deleteme
> fdisk /dev/loop0   ## created partitions 1, 2, etc.
> fdisk -l /dev/loop0  ## confirmed that the partitions do exist

At this point, you need to run "kpartx -a /dev/loop0" (fdisk should have told 
you so).

> mkfs.ext3 /dev/loop0p1 ## failed here [...]

kpartx drops partitions into /dev/mapper, so the actual invocation would be

  mkfs.ext3 /dev/mapper/loop0p1

You can also use partprobe instead of kpartx, but I'm not as familiar with its 
operation.

-- Paul Heinlein
heinl...@madboa.com
45°38' N, 122°6' W
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Failed to create /dev/loop0p* entries for partitions inside loopback devices

2013-05-24 Thread Gelen James
centos 6 failed to create entries under /dev for newly created loopback 
devices. Any one know why? and how to fix/workaround it?

The steps to duplicate is pretty simple

dd if=/dev/zero of=/tmp/deleteme bs=1M count=100
losetup /dev/loop0 /tmp/deleteme
fdisk /dev/loop0   ## created partitions 1, 2, etc.
fdisk -l /dev/loop0  ## confirmed that the partitions do exist
mkfs.ext3 /dev/loop0p1 ## failed here, the error prompt says that the 
/dev/loop0p1 doesn't exist!
ls /dev/loop0p*  ## no entries

Please shed a light here, I'm running centos 6.4

Thanks.
Robert
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] strange sporadic sssd problem on centos

2013-03-12 Thread Gelen James
>From time to time on centos 6 sssd I got login problems like 'connection 
>closed by *.*.*.*.', after a while then I login in again and the problem 
>already disappeared. 

For the ssh login problem, I can see the following entries in /var/log/secure. 
'Failed public key for '  is the entry for the login problem. Any one has 
some ideas why this happens?

Mar 12 04:30:12 master01 sshd[25185]: Set /proc/self/oom_score_adj to 0
Mar 12 04:30:12 master01 sshd[25185]: Connection from 192.168.1.80 port 48718
Mar 12 04:30:18 master01 sshd[25185]: Found matching RSA key: 
55:52:5e:6c:fe:74:ab:cd:ef:94:96:f4:f7:44:fb:fc
Mar 12 04:30:18 master01 sshd[25186]: Postponed publickey for gotcha from 
192.168.1.80 port 48718 ssh2
Mar 12 04:30:18 master01 sshd[25185]: Found matching RSA key: 
55:52:5e:6c:fe:74:ab:cd:ef:94:96:f4:f7:44:fb:fc
Mar 12 04:31:51 master01 sshd[25185]: Failed publickey for gotcha from 
192.168.1.80 port 48718 ssh2
Mar 12 04:31:51 master01 sshd[25186]: fatal: Access denied for user gotcha by 
PAM account configuration

Thanks.

--Gelen
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Please shed a light: when sssd will return from offline to online?

2013-03-04 Thread Gelen James
Hi all,

 I'm new to sssd configs and debugging. Recently we have encountered some 
problems with sssd. Basically 6 out of 50 servers has 'getent passwd' lost all 
userIDs from LDAP backend, while others are OK. 

My sssd is at version 1.8.0-32. the related error messages are attached below. 
The sssd_nss seems got killed by temporarily network connection problems to 
backend openLDAP servers. Wonder why? and can we change the backend retry check 
interval? (see the timestamps for log entries in sssd_nss.log).

[root@testbox sssd]# cat sssd_nss.log 
(Sat Mar  2 02:30:41 2013) [sssd[nss]] [sss_dp_init] (0x0010): Failed to 
connect to monitor services.
(Sat Mar  2 02:30:41 2013) [sssd[nss]] [sss_process_init] (0x0010): fatal error 
setting up backend connector
(Sat Mar  2 02:30:41 2013) [sssd[nss]] [sss_dp_init] (0x0010): Failed to 
connect to monitor services.
(Sat Mar  2 02:30:41 2013) [sssd[nss]] [sss_process_init] (0x0010): fatal error 
setting up backend connector
(Sat Mar  2 02:30:41 2013) [sssd[nss]] [sss_dp_init] (0x0010): Failed to 
connect to monitor services.
(Sat Mar  2 02:30:41 2013) [sssd[nss]] [sss_process_init] (0x0010): fatal error 
setting up backend connector
(Sat Mar  2 02:30:41 2013) [sssd[nss]] [sss_dp_init] (0x0010): Failed to 
connect to monitor services.
(Sat Mar  2 02:30:41 2013) [sssd[nss]] [sss_process_init] (0x0010): fatal error 
setting up backend connector

[root@testbox sssd]# cat sssd_pam.log
(Sat Mar  2 02:30:09 2013) [sssd[pam]] [pam_dp_reconnect_init] (0x0010): Could 
not reconnect to ldap provider.
(Sat Mar  2 02:30:39 2013) [sssd[pam]] [pam_dp_reconnect_init] (0x0010): Could 
not reconnect to ldap provider.

[root@testbox sssd]# cat sssd_ldap.log
(Sat Mar  2 02:30:53 2013) [sssd[be[ldap]]] [id_callback] (0x0010): The Monitor 
returned an error [org.freedesktop.DBus.Error.NoReply]

[root@testbox sssd]# cat sssd.log
(Sat Mar  2 02:30:41 2013) [sssd] [mt_svc_exit_handler] (0x0010): Process 
[nss], definitely stopped!
[root@testbox sssd]# 

Please shed a light. Thanks a lot.

--Gelen
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] what does the strange sssd log mesages mean?

2013-03-04 Thread Gelen James
Hi all,

I have a few centos 6 boxes running sssd, they are talking to OpenLDAP server 
still runs on centos 5. Today I enabled sssd debugging and found the following 
lines of messages in logs:

...
(Mon Mar  4 23:11:13 2013) [sssd[be[ldap]]] [get_naming_context] (0x0200): 
Using value from [namingContexts] as naming context.
(Mon Mar  4 23:11:13 2013) [sssd[be[ldap]]] [sdap_get_server_opts_from_rootdse] 
(0x0200): No known USN scheme is supported by this server!
(Mon Mar  4 23:11:13 2013) [sssd[be[ldap]]] [sdap_get_server_opts_from_rootdse] 
(0x0200): Will use modification timestamp as usn!
...

what does the above messages mean: why it uses modification timestamp as usn?  
does that have some harmful effects, if time drifts /time zone difference 
exists in a network? 

Please shed a light. Thanks. 

--Gelen
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Please help: Any way to query host membership in nested ldap groups?

2013-03-02 Thread Gelen James
Hi all,

I have a openldap server setup with netsted netgruops,. Say the netgroups are:

ngA: (host1, -, - ), (host2, -, - )
ngB: ngA, (host3, - - )
ngc: ngB, (host4, -, -)

Is there a way to find host1's membership? so that I can return: ngA, ngB, ngC?

Thanks a lot.
--Rob
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] How to query host membership in nested openldap netgroups?

2013-03-02 Thread Gelen James
Hi all,

I have a openldap server setup with netsted netgruops,. Say the netgroups are:

ngA: (host1, -, - ), (host2, -, - )
ngB: ngA, (host3, - - )
ngc: ngB, (host4, -, -)

Is there a way to find host1's membership? so that I can return: ngA, ngB, ngC?

Thanks a lot.
--Rob
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] SSHD rootkit in the wild/compromise for CentOS 5/6?

2013-02-25 Thread Gelen James
'rpm -V' can be misleading, if taking into account of prelink on Redhat/Centos 
Boxes which is running through cron by default. I've shown the steps on reverse 
the effect of prelink at the comments sections at link 
https://isc.sans.edu/diary/SSHD+rootkit+in+the+wild/15229?storyid=15229. I'm 
afraid that 'rpm -V' only will make big noises or false alarms.

But in general, maybe it is a good time to turn off prelink, or more 
aggressively, remove prelink packages from Centos 5/6? the prelink is said to 
bring some performance boost, but who really cares in the era of tens of CPUs? 
nowadays and later on we are -- and will -- more concerned on security threats 
instead of 3~5 percents CPU/performance gain, right?






 From: Leon Fauster 
To: CentOS mailing list  
Sent: Saturday, February 23, 2013 3:14 AM
Subject: Re: [CentOS] SSHD rootkit in the wild/compromise for CentOS 5/6?
 
Am 23.02.2013 um 05:52 schrieb Karanbir Singh :
> On 02/22/2013 09:35 PM, Leon Fauster wrote:
>> i use following script to scan top level 
>> directories for files that are not packaged: 
> 
> If you trust your rpm-db, ...


i used to scan this list

rpm -qa --qf '%{NAME}-%{SIGGPG:pgpsig}-%{SIGPGP:pgpsig}-%{VENDOR}\n'

and checked them against keys that are _not_ in /etc/pki/rpm-gpg/.

Just as a normal sanity check (plus rpm -V).

i aware that this does not substitute a real auditing solution. 

--
LF


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Is this right? -- Centos 6 and RHEL 6 infrastrure for continuous update/upgrade

2013-02-08 Thread Gelen James
Hi all,

Both RHEL 6 and CentOS 6 can be installed from any minor releases DVDs: 6.0, 
6.1, 6.2, 6.3, etc. And then got continuous upgrade/update with command 'yum -y 
upgrade' if repos are setup correct.

But the repos infrastructure is different between the two. CentOS uses two 
repos:

    /centos/6/os/... repo and .../centos/6/updates/...

The updates/ repo contains ONLY updated RPMs between minor releases. currently 
the updates/ contains updates after 6.3. and the /centos/6/os/ points to 
6.3Base.

Question #1: 


supposed I installed with Centos 6.2 last year, and let's say Centos 6.4 comes 
out two months later and I have not updated a single package since initial 
installation until Centos 6.4 comes out (I am way too lazy :) ), then How can I 
setup my yum config to not miss any updated packages?

Should I put all three repos inside yum config?

        centos-6.2-kickstart-os
        centos-6-os
        centos-6-updates
    
  or the centos-6.2-kickstart-os is not needed at all -- the centos-6-os and 
cnetos-6-updates together contains all latest RPMS since 6.0 -- ? The first way 
may render yum to report warning of 'duplicate RPM group definitions' or 
similar.


Questions #2:


I've heard that RHEL 6 uses a different path, they seems to have only one big 
continuously updated base os/ repository. all the RPMs updated since 6.0 
(include RPMs at the published day of RHEL 6.0) are contained in the repo. So 
only the one repo is in need to upgrade systems at any time. Is this true? and 
if so, any benefits go with it?

Thanks.

--Robinson
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] any Log archive tools suggestions?

2012-12-07 Thread Gelen James
Hi all,

 Has any one used any log archiving tools? Please suggest one that's your 
favorite. 

Presently I have a project to archive raw log files on hundreds of Centos boxes 
to a central server and stored there for two years. The basic requirements of 
the project are:

 1, The log files will be sent from hundreds of Centos clients with a client 
side agent or similar.
 2, better there is a client side configuration file which specify log files to 
archive
 3, a server side configuration file specified where to logs from host ( or 
host groups), and the directory structure to store log files
 4, better there is a way to remove duplication of log files, i.e. md5 
checksum, time stamp, etc.

Open source or commercial are both fine. And there is no need to do the 
indexing or other further processing, just raw files is fine.

Thanks a lot.

~Rob
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] strange 'find' tool behavior

2012-11-19 Thread Gelen James
Thanks a lot.

 with -prune option, now the find command works too.


find . -type d -name '.svn' -prune -exec /bin/rm -rf '{}' \;



 From: Stephen Harris 
To: CentOS mailing list  
Sent: Monday, November 19, 2012 4:52 PM
Subject: Re: [CentOS] strange 'find' tool behavior
 
On Mon, Nov 19, 2012 at 04:44:31PM -0800, Gelen James wrote:
> [root@centos_58_test_box workingDir]# find . -type d -name '.svn' -exec 
> /bin/rm -rf '{}' \;
> find: ./.svn: No such file or directory
[...]

"find" is attempting to open the ".svn" directory to see if there are
any subdirectories to work on but it can't because you just deleted it.

You either need "-prune" to stop it going further down the tree or "-depth"
to tell it to go down the tree first before running the -exec


-- 

rgds
Stephen
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] strange 'find' tool behavior

2012-11-19 Thread Gelen James
Hi all,

Just encountered an strange bahavior of frequent 'find' command. I tried to use 
find to recursively remove .svn directories from my working place, 'find' 
command removed all the '.svn' directories successfully but reported errors on 
screen. Any one knows why it shows this behavior?

BTW, if I use command " find . type d -name '.svn' -print0 | xargs -0 -n1 
/bin/rm -rf ", then it does the same job and reports no errors on screen at 
all. But still likes to understand why find have this behavior.

The screen and error prompts are attached below for your references. Thanks.

[root@centos_58_test_box workingDir]# find . -type d -name 
'.svn'
 
./.svn   
 
./var/.svn   
 
./var/myTestProj/projects/.svn   
 
./var/myTestProj/projects/Production/.svn
 
./var/myTestProj/projects/Production/etc/.svn
 
./var/myTestProj/projects/Production/jobs/.svn   
 
./var/myTestProj/.svn
 
./etc/.svn   
 
./etc/myTestProj/.svn
 
./etc/myTestProj/ssl/.svn
 
[root@centos_58_test_box workingDir]# find . -type d -name '.svn'  -exec  
/bin/rm -rf '{}' 
\;
 
find: ./.svn: No such file or 
directory  
 
find: ./var/.svn: No such file or 
directory  
 
find: ./var/myTestProj/projects/.svn: No such file or 
directory  
 
find: ./var/myTestProj/projects/Production/.svn: No such file or 
directory   
 
find: ./var/myTestProj/projects/Production/etc/.svn: No such file or 
directory   
 
find: ./var/myTestProj/projects/Production/jobs/.svn: No such file or 
directory  
 
find: ./var/myTestProj/.svn: No such file or 
directory   
 
find: ./etc/.svn: No such file or 
directory  
 
find: ./etc/myTestProj/.svn: No such file or 
directory   
 
find: ./etc/myTestProj/ssl/.svn: No such file or 
directory   
 
[root@centos_58_test_box workingDir]# find . -type d -name 
'.svn' 

Re: [CentOS] Please help -- centos 5.8: does the slapcat still breaks ldap data integrity?

2012-11-13 Thread Gelen James
> > Hi all,

> > 
> >  I've a small project to backup and restore openldap servers online on 
> >centos 5.8. Basically I don't have the luxury to shutdown the ldap server, 
> >then backup whole /var/lib/ldap/, but have to backup online with slapcat or 
> >similar command line tool.
> > 
> > The major concern of using slapcat is the warning below, which was excerpt 
> > from link 
> > http://www.centos.org/docs/5/html/5.1/Deployment_Guide/s1-ldap-daemonsutils.html
> > 
> > You must stop slapd by issuing the /sbin/service ldap stop command before 
> > using slapadd, slapcat or slapindex. Otherwise, the integrity of the LDAP 
> > directory is at risk.
> > Does the limitation of slapcat -- stop ldap first -- still exist? Please 
> > shed a light onto this. Thanks.
> 
> depends on what you are using for backend. If you are still using ldbm (you 
> definitely shouldn't at this point), then yes, it must be stopped before 
> doing the slapcat. If you are using > bdb or hdb, no… it's not necessary to 
> stop the service first.
>
>Craig

Thanks for confirmation, I'm using the default config/backend with minor 
changes, so it seems bdb. The following are the types of the files under 
/var/lib/ldap.

alock:   data
cn.bdb:  Berkeley DB (Btree, version 9, native byte-order)
__db.001:    Applesoft BASIC program data
__db.002:    data
__db.003:    data
__db.004:    data
__db.005:    data
__db.006:    data
DB_CONFIG:   ASCII English text
dn2id.bdb:   Berkeley DB (Btree, version 9, native byte-order)
gidNumber.bdb:   Berkeley DB (Btree, version 9, native byte-order)
givenName.bdb:   Berkeley DB (Btree, version 9, native byte-order)
id2entry.bdb:    Berkeley DB (Btree, version 9, native byte-order)
log.01:  Berkeley DB (Log, version 11, native byte-order)
loginShell.bdb:  Berkeley DB (Btree, version 9, native byte-order)
mail.bdb:    Berkeley DB (Btree, version 9, native byte-order)
objectClass.bdb: Berkeley DB (Btree, version 9, native byte-order)
ou.bdb:  Berkeley DB (Btree, version 9, native byte-order)
sn.bdb:  Berkeley DB (Btree, version 9, native byte-order)
uid.bdb: Berkeley DB (Btree, version 9, native byte-order)
uidNumber.bdb:   Berkeley DB (Btree, version 9, native byte-order)

Thanks.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Please help -- centos 5.8: does the slapcat still breaks ldap data integrity?

2012-11-12 Thread Gelen James
Hi all,

 I've a small project to backup and restore openldap servers online on centos 
5.8. Basically I don't have the luxury to shutdown the ldap server, then backup 
whole /var/lib/ldap/, but have to backup online with slapcat or similar command 
line tool.

The major concern of using slapcat is the warning below, which was excerpt from 
link 
http://www.centos.org/docs/5/html/5.1/Deployment_Guide/s1-ldap-daemonsutils.html

 You must stop slapd by issuing the /sbin/service ldap stop command before 
using slapadd, slapcat or slapindex. Otherwise, the integrity of the LDAP 
directory is at risk.
Does the limitation of slapcat -- stop ldap first -- still exist? Please shed a 
light onto this. Thanks.

--Guolin
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] any reliable HTTPS/SFTP based FTP software on Linux?

2012-11-05 Thread Gelen James
Thanks a lot for input.

The reason why we tested Serv-U, Axway ST, and other similar products for file 
transfer is for consolidation and security. We all known that Centos can 
provide SFTP for file in and file out with openssh, and Apache/HTTPS for 
distribution read only files. But our requirements are:

 1, both file in and file out functions for both SFTP protocol (port 22) and 
apache/HTTPS (port 443).
 2, an rich-feature client side program/applet inside popular browsers (IE, 
Firefix, etc), as our customers are not tech savvy.
 3, an consolidated user account management system, each user can use both SFTP 
and HTTPS freely. a web based user management interface is perferred, though 
not required.

 4, preliminary system-level and user-level file upload/download controls, 
file/directory access controls.


Based on above, it seems difficult to use ProFTD, or Apache combination. But I 
may be completely wrong,  your input here is greatly appreciated. Thanks.


Thanks.

 
--Rob




 From: Ljubomir Ljubojevic 
To: CentOS mailing list  
Sent: Sunday, November 4, 2012 9:24 AM
Subject: Re: [CentOS] any reliable HTTPS/SFTP based FTP software on Linux?
 
On 11/03/2012 10:24 AM, Gelen James wrote:
> I tried Serv-U, Axway SecureTransport and other several software on Linux , 
> Neither one works as expected.
>
> Serv-U is very inexpensive and can create unlimited FTP accounts, but crashes 
> pretty often with unknown reasons.
>
> Axway SecureTransport is a riduculously expensive: about $1K per FTP account! 
> and each FTP account has 2 months cool-down period on between remove old 
> accounts and adding new ones. It is just far too expensive and over kill for 
> regular FTP uses.
>
> Any one has experiences with SFTP/HTTPS based file transfer solutions, open 
> sources or commercial is fine, as long as it is not too expensive.
>
> Thanks.

First, you should not have used Reply option to start new thread, but 
what is done is done.

Next, I do not understand what you actually want.

>From ProFTPD site:
"By contrast, SFTP refers to "Secure File Transfer Protocol", and is not 
related to FTP in any way. SFTP is based on the SSH2 protocol, which 
uses binary encoding of messages over a secure channel. Unlike FTP, SSH2 
only uses a single TCP connection, and multiplexes multiple transfers or 
"channels" over that single connection. For this reason, many sites 
prefer SFTP to FTPS for secure transfer of data. "

So you just need Midnight Commander of Krusader (with sshfs added I 
think) for intermittent access to filesystem via SSH, and if you use 
Windows there is "WinSCP" SFTP client.

As server, ANY Linux box with allowed SSH connections will do.

If you want automounting of SFTP (Remote SSH) filesystem, follow 
https://wiki.archlinux.org/index.php/Autofs#Remote_SSH



-- 

Ljubomir Ljubojevic
(Love is in the Air)
PL Computers
Serbia, Europe

Google is the Mother, Google is the Father, and traceroute is your
trusty Spiderman...
StarOS, Mikrotik and CentOS/RHEL/Linux consultant
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] any reliable HTTPS/SFTP based FTP software on Linux?

2012-11-03 Thread Gelen James
I tried Serv-U, Axway SecureTransport and other several software on Linux , 
Neither one works as expected.

Serv-U is very inexpensive and can create unlimited FTP accounts, but crashes 
pretty often with unknown reasons.

Axway SecureTransport is a riduculously expensive: about $1K per FTP account! 
and each FTP account has 2 months cool-down period on between remove old 
accounts and adding new ones. It is just far too expensive and over kill for 
regular FTP uses.

Any one has experiences with SFTP/HTTPS based file transfer solutions, open 
sources or commercial is fine, as long as it is not too expensive.

Thanks.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] any reliable FTP server with HTTPS/FTPS, commercial or not

2012-06-14 Thread Gelen James
Hi John,

I had the same idea with you just a few years back that the ftp only servers 
FTP protocol. But nowadays a FTP server provides same contents over a lot of 
protocols at the same time: FTP/FTPS/SFTP/HTTP/HTTPS. 

 Please check the wiki 
page http://en.wikipedia.org/wiki/List_of_FTP_server_software. There are so 
many choices but it is difficult to find one that is reliable, secure and at 
the same time easy to use.

Thanks.

--David



 From: John R Pierce 
To: centos@centos.org 
Sent: Thursday, June 14, 2012 3:59 PM
Subject: Re: [CentOS] any reliable FTP server with HTTPS/FTPS, commercial or not
 
On 06/14/12 3:39 PM, Gelen James wrote:
>   Just like to know which secure FTP servers are popular in use on Linux, the 
>FTP server should provides HTTPS, FTPS and SFTP methods.

sftp is part of SSH, not FTP.  https is HTTP not FTP.

ftps (FTP over SSL) is a non-standard mess and should be banned.

I use vsftp for a straight FTP server, and apache for a https server, 
openssh for a SSH server.  these are all standard CentOS components.

-- 
john r pierce                            N 37, W 122
santa cruz ca                         mid-left coast

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] any reliable FTP server with HTTPS/FTPS, commercial or not

2012-06-14 Thread Gelen James


Hi all,

 Just like to know which secure FTP servers are popular in use on Linux, the 
FTP server should provides HTTPS, FTPS and SFTP methods.

 Current we are with Serv-U FTP server, but it has been crashed all the time 
for unknown reasons -- can not find any causes in its log file at all. Although 
we like its interfaces, but our customers complain its reliability a lot. 
Finally we are tired of it and would like an alternative. If you are satisfied 
with your ftp server, Please feel free to share with me. :)

Thanks.

--David
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Any documents for python-kerberos package??

2012-05-22 Thread Gelen James


Hi all,

 I'm in a project to program Kerberos with Python. The headache encountered is, 
there is no documents on how to call the Kerberos module functions and results. 

when run 'help kerberos.checkPassword' in python, it just show things like:

Help on built-in function checkPassword in module kerberos:

checkPassword(...)
    Check the supplied user/password against Kerberos KDC.
(END) 
  
So the help doesn't give an idea on how to call the function, and what the the 
results and exceptions. 

Any one has successfully programmed python-kerberos, please shed a light on 
this. 

Thanks a lot.

--David
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos