[389-users] Change hostname of directory server.

2011-07-26 Thread Techie
Hello, We were required to change the hostname of our LDAP server running 389-DS. Since that time the LDAP server runs fine but the admin server does not authenticate login any longer, meaning i cannot log into the admin server. What do I need to do to fix the admin server and change all

binding socket fails when run under ptrace?

2011-07-26 Thread Tom Horsley
I just tried to run an rsh command under strace, and it always gets permission denied when it tries to bind the socket (fedora 15 64 bit). Is this some new helpful security feature I've never heard of? tomh strace -o working.trace rsh tomh date rcmd: socket: Permission denied From the

Re: binding socket fails when run under ptrace?

2011-07-26 Thread Bryn M. Reeves
On 07/26/2011 01:59 PM, Tom Horsley wrote: tomh strace -o working.trace rsh tomh date rcmd: socket: Permission denied It's presumably being having its capabilities dropped because you are ptracing an executable with the cap_net_bind_service capability as an unprivileged user (if it wasn't it

Re: binding socket fails when run under ptrace?

2011-07-26 Thread Tom Horsley
On Tue, 26 Jul 2011 14:05:59 +0100 Bryn M. Reeves wrote: It's presumably being having its capabilities dropped because you are ptracing an executable with the cap_net_bind_service capability as an unprivileged user (if it wasn't it would be a security hole as a regular user could use a

createrepo update?

2011-07-26 Thread Stephen Berg (Contractor)
The createrepo package that comes with Fedora 15 (0.9.9-3) is unable to generate repos using SHA1. This has caused me to downgrade createrepo to the Fedora 14 version (0.9.8-5) because the system hosts some local repos for Scientific Linux 5x. Is there anyone getting a fix in the pipeline? I

Re: binding socket fails when run under ptrace?

2011-07-26 Thread Chris Adams
Once upon a time, Tom Horsley horsley1...@gmail.com said: It is the rsh client program, why on earth would the rsh client need to bind a privileged port? Because that's how rsh works for .rhosts and /etc/hosts.equiv processing. Connections from a privileged port are considered trusted. --

Re: binding socket fails when run under ptrace?

2011-07-26 Thread Sam Varshavchik
Tom Horsley writes: On Tue, 26 Jul 2011 14:05:59 +0100 Bryn M. Reeves wrote: It's presumably being having its capabilities dropped because you are ptracing an executable with the cap_net_bind_service capability as an unprivileged user (if it wasn't it would be a security hole as a

Re: binding socket fails when run under ptrace?

2011-07-26 Thread Bryn M. Reeves
On 07/26/2011 02:29 PM, Tom Horsley wrote: On Tue, 26 Jul 2011 14:05:59 +0100 Bryn M. Reeves wrote: It's presumably being having its capabilities dropped because you are ptracing an executable with the cap_net_bind_service capability as an unprivileged user (if it wasn't it would be a

Re: binding socket fails when run under ptrace?

2011-07-26 Thread Tom Horsley
On Tue, 26 Jul 2011 14:54:18 +0100 Bryn M. Reeves wrote: As others have said, that's how rsh security works - if you need to strace the command as a non-root user you might be able to come up with something involving dropping the file capability and granting cap_net_bind_service to the user

Re: binding socket fails when run under ptrace?

2011-07-26 Thread Bryn M. Reeves
On 07/26/2011 05:00 PM, Bryn M. Reeves wrote: On 07/26/2011 03:05 PM, Tom Horsley wrote: On Tue, 26 Jul 2011 14:54:18 +0100 Bryn M. Reeves wrote: As others have said, that's how rsh security works - if you need to strace the command as a non-root user you might be able to come up with

[389-users] Setting certain users password to never expire

2011-07-26 Thread harry . devine
I have a password policy set to have passwords expire every 90 days, etc. However, we have 1 or 2 users that we never want their password to expire. I cannot find where to set this in the user's account settings. I have the latest 389-ds installed on a 64-bit CentOS 5.4 installation. Any

Re: [389-users] Setting certain users password to never expire

2011-07-26 Thread Rich Megginson
On 07/26/2011 10:03 AM, harry.dev...@faa.gov wrote: I have a password policy set to have passwords expire every 90 days, etc. However, we have 1 or 2 users that we never want their password to expire. I cannot find where to set this in the user's account settings. I have the latest 389-ds

Re: createrepo update?

2011-07-26 Thread Remi Collet
Le 26/07/2011 15:34, Stephen Berg (Contractor) a écrit : The createrepo package that comes with Fedora 15 (0.9.9-3) is unable to generate repos using SHA1. This has caused me to downgrade createrepo to the Fedora 14 version (0.9.8-5) because the system hosts some local repos for Scientific

Re: Where's the Junk

2011-07-26 Thread Chris Kottaridis
Maildir/cur/ - read messages Maildir/new/ - unread messages Got it! That's a help. Thanks Chris Kottaridis On Mon, 2011-07-25 at 23:30 +0100, Sam Sharpe wrote: On 25 July 2011 23:27, Chris Kottaridis chris...@quietwind.net wrote: On Mon, 2011-07-25 at 17:00 -0430, Patrick O'Callaghan

Re: createrepo update?

2011-07-26 Thread Stephen Berg (Contractor)
On 07/26/2011 12:00 PM, Remi Collet wrote: 1/ try the version in rawhide which should fix the issue 2/ try the version in my repo http://rpms.famillecollet.com/fedora/15/remi/i386/repoview/createrepo.html This is the version I use for the remi repo (which include EL-5). I ended up hand

nessus and systemd

2011-07-26 Thread Reindl Harald
F15 systemd writes only this in the log which is not very helpful systemd[1]: PID 7284 read from file /var/run/nessusd.pid does not exist Your service or init script might be broken ___ on F14 you get All plugins loaded

tp_smapi

2011-07-26 Thread Timothy Murphy
Is there a tp_smapi (for ThinkPads) Fedora RPM anywhere? If not, how do ThinkPad users install tp_smapi? Can one use dkms to keep tp_smapi up-to-date? -- Timothy Murphy e-mail: gayleard /at/ eircom.net tel: +353-86-2336090, +353-1-2842366 s-mail: School of Mathematics, Trinity College,

some questions about apache and tomcat

2011-07-26 Thread Benedict S
Hello,everybody. There is no packages about mod_jk-ap20 in our fedora rpm packages.How can I connect apache with tomcat,using http_proxy ,ajp_proxy or something else?Which method is the best way to use it? When i start tomcat6 with command service tomcat6 start or run_init service tomcat6 start

Unable to create a liveUSB from Fedora-15-i386-DVD.iso

2011-07-26 Thread yudi v
I am unable to create a liveUSB install of Fedora-15-i386-DVD.iso. first I tried dd if=~/Download/F15-Server-i386-DVD.iso of=/dev/sdc copies the files fine, but will not boot. not sure why? something flashes by too quickly and then boots from the HDD. /dev/sdc1 has the boot flag set. As I do

JACK/FC15-64

2011-07-26 Thread Elliott Chapin
I was fine with FC14-32, but the only way I've managed to start JACK is by having Ardour do it rather than jackd: Cannot connect to server socket err = No such file or directory Cannot connect to server socket jack server is not running or cannot be started). - A well-known

Re: Unable to create a liveUSB from Fedora-15-i386-DVD.iso

2011-07-26 Thread Ed Greshko
I am unable to create a liveUSB install of Fedora-15-i386-DVD.iso. first I tried dd if=~/Download/F15-Server-i386-DVD.iso of=/dev/sdc copies the files fine, but will not boot. not sure why? something flashes by too quickly and then boots from the HDD. /dev/sdc1 has the boot

Re: tp_smapi

2011-07-26 Thread Jatin K
On Wednesday 27 July 2011 04:40 AM, Timothy Murphy wrote: Is there a tp_smapi (for ThinkPads) Fedora RPM anywhere? If not, how do ThinkPad users install tp_smapi? Can one use dkms to keep tp_smapi up-to-date? http://www.thinkwiki.org/wiki/Tp_smapi -- °v° /(_)\ ^ ^ Jatin Khatri

Re: Unable to create a liveUSB from Fedora-15-i386-DVD.iso

2011-07-26 Thread yudi v
As I do not have access to a Fedora system, what other method can I use to create a liveUSB? https://fedorahosted.org/liveusb-creator/ yum install liveusb-creator Ed, I already mentioned that I do not have access to a Fedora system. Secondly, Preparing the USB stick The easiest

Re: tp_smapi

2011-07-26 Thread Jatin K
On Wednesday 27 July 2011 04:40 AM, Timothy Murphy wrote: Is there a tp_smapi (for ThinkPads) Fedora RPM anywhere? If not, how do ThinkPad users install tp_smapi? Can one use dkms to keep tp_smapi up-to-date? [1]