Do somebody help me(with documents or ideas) in authentication on my
endian firewall 1.8?
I can' t use both Active directory and proxy local authentication
to authenticate my users.
2006/7/27, fedora-list-request(a)redhat.com <fedora-list-request(a)redhat.com>:
> Send fedora-list mailing list submissions to
> fedora-list(a)redhat.com
>
> To subscribe or unsubscribe via the World Wide Web, visit
>
https://www.redhat.com/mailman/listinfo/fedora-list
> or, via email, send a message with subject or body 'help' to
> fedora-list-request(a)redhat.com
>
> You can reach the person managing the list at
> fedora-list-owner(a)redhat.com
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of fedora-list digest..."
>
>
> Today's Topics:
>
> 1. Re: LDAP addressbook set up, now need to use it (Paul Howarth)
> 2. Re: Selinux woes (Paul Howarth)
> 3. Re: DNS Problem Maybe (Craig Preston)
> 4. Re: uname (Matthew Miller)
> 5. Re: Firefox closes without warning (Jonathan Underwood)
> 6. Re: uname (Kaushal Shriyan)
> 7. Re: Burning backup to dvd (Anne Wilson)
> 8. Re: Burning backup to dvd (Anne Wilson)
> 9. Re: uname (Matthew Miller)
> 10. Re: LDAP addressbook set up, now need to use it (Gary Stainburn)
> 11. Re: latest updates don't boot (Chip Old)
> 12. Re: ssh question (Bruno Wolff III)
> 13. Re: Burning backup to dvd (Dave M)
> 14. Re: Burning backup to dvd (Chong Yu Meng)
> 15. OT:Cybercafe Manager/Timer (sysadmin)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Thu, 27 Jul 2006 12:02:58 +0100
> From: Paul Howarth <paul(a)city-fan.org>
> Subject: Re: LDAP addressbook set up, now need to use it
> To: For users of Fedora Core releases <fedora-list(a)redhat.com>
> Message-ID: <44C89D62.7010107(a)city-fan.org>
> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
>
> Gary Stainburn wrote:
> > Hi folks.
> >
> > I've configured an LDAP addressbook using the openldap-servers rpm and the
> > tutorial at
> >
http://www.onlamp.com/pub/a/onlamp/2003/03/27/ldap_ab.html
> >
> > The server's configured and appears to be working, however I can't seem
to use
> > it.
> >
> > If I do a ldapsearch I see the two contacts I've added to the server.
> > I have configured the Kaddressbook to use the LDAP directory and it shows both
> > contacts and their details.
> >
> > However, in kmail composer when I click on Select the contacts are not there,
> > even when I choose the LDAP directory as the addressbook to use.
> >
> > When I try to use Outlook 2003 or Outlook Express I have the same problem in
> > that I don't see any contacts.
> >
> > Could anyone point me to any possible reasons for this, or how to fix it?
>
> slapd sends query details to syslog; add the following to
> /etc/syslog.conf to have ldap logs written to /var/log/ldaplogs:
>
> # slapd logs to local4
> local4.* /var/log/ldaplogs
>
> You'll be able to see what the clients are doing in the logs, which
> should help with debugging.
>
> Paul.
>
>
>
> ------------------------------
>
> Message: 2
> Date: Thu, 27 Jul 2006 12:05:21 +0100
> From: Paul Howarth <paul(a)city-fan.org>
> Subject: Re: Selinux woes
> To: For users of Fedora Core releases <fedora-list(a)redhat.com>
> Message-ID: <44C89DF1.2050503(a)city-fan.org>
> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
>
> Dan Track wrote:
> > On 7/27/06, Paul Howarth <paul(a)city-fan.org> wrote:
> >> Dan Track wrote:
> >> > On 7/27/06, Paul Howarth <paul(a)city-fan.org> wrote:
> >> >> Dan Track wrote:
> >> >> > Hi All
> >> >> >
> >> >> > I'm having trouble running software, especially the cgi
scripts. I
> >> >> > keep getting the following denial messages:
> >> >> >
> >> >> > audit(1153994541.663:20): avc: denied { execute_no_trans }
for
> >> >> > pid=9258 comm="httpd" name="status.cgi"
dev=sda2 ino=19426
> >> >> > scontext=root:system_r:httpd_t
tcontext=system_u:object_r:lib_t
> >> >> > tclass=file
> >> >> >
> >> >> > The files are located in /usr/lib/nagios/cgi/
> >> >> >
> >> >> > Could some please help me figure this out. I've started to
read
> >> >> > through the selinux manual but its a huge climb and would
appreciate
> >> >> > ways to solve the above.
> >> >>
> >> >> You should read "man httpd_selinux", which has notes on
running CGI
> >> >> programs under SELinux.
> >> >>
> >> >> You generally need to set the SELinux context type of CGI programs
to
> >> >> httpd_sys_script_exec_t:
> >> >>
> >> >> # chcon -R -t httpd_sys_script_exec_t /usr/lib/nagios/cgi
> >> >>
> >> >> Is this the nagios version in Fedora Extras? If it is, failure to
work
> >> >> with SELinux enabled should be bugzilla-ed.
> >> >>
> >> >> Paul.
> >> >>
> >> >> --
> >> >> fedora-list mailing list
> >> >> fedora-list(a)redhat.com
> >> >> To unsubscribe:
https://www.redhat.com/mailman/listinfo/fedora-list
> >> >>
> >> > Hi Paul,
> >> >
> >> > Thanks for the reply. I manged the above before I read you rmessage.
> >> > Thanks for the heads up though. Would you be able to help on the next
> >> > "search" error message.
> >>
> >> It's being denied access to search the /var/log directory to see
what's
> >> in it.
> >>
> >> > Just to add this is a nagios install from source.
> >>
> >> Is there some particular reason you're not using the package in Extras,
> >> which *may* have solved these problems already?
> >>
> >
> > Hi Paul
> >
> > I downloaded the latest version from nagios. I didn't see the latest
> > version in the repository.
> >
> > Would you what command to run to fix this problem? I ran audit2allow
> > and inserted teh rules in local.te, and ran make. I restarted the
> > httpd, nagios and syslog daemons but still no joy.
>
> Here's now I approach these problems on FC5:
>
http://www.city-fan.org/tips/BuildSeLinuxPolicyModules
>
> Paul.
>
>
>
> ------------------------------
>
> Message: 3
> Date: Thu, 27 Jul 2006 21:20:33 +1000
> From: "Craig Preston" <duffman23(a)gmail.com>
> Subject: Re: DNS Problem Maybe
> To: "For users of Fedora Core releases" <fedora-list(a)redhat.com>
> Message-ID:
> <6842681b0607270420o1712989bi6b29ac50838d6419(a)mail.gmail.com>
> Content-Type: text/plain; charset="iso-8859-1"
>
> Thanks Tod,
>
> Setting the disableIPv6 to true allowed firefox to work. So then I set it
> back to false and changed my DSL modem dhcp settings to give out the ISP DNS
> rather than just itself. This seems to have fixed the firefox networking
> issues.
>
> thanks for the help
>
> Craig
>
> On 27/07/06, Tod Merley <todbot88(a)gmail.com> wrote:
> >
> >
> >
> > On 7/27/06, Craig Preston <duffman23(a)gmail.com> wrote:
> >
> > > I have a strange problem that seems to be DNS related. From a command
> > prompt I can ping an address, say
www.google.com and I will get a reponse.
> > If I type a web address into the web browser (firefox) it can't resolve the
> > name and the connection times out. If I put the IP address in the web
> > browser it works and the web page is displayed. This also seems to affect
> > yum. If I do a yum update or whatever, it times out and cannot connect to
> > the update server.
> >
> > All my networking settings look correct, it is strange. Any help would be
> > appreciated.
> >
> >
> > Craig
> >
> > --
> > fedora-list mailing list
> > fedora-list(a)redhat.com
> > To unsubscribe:
https://www.redhat.com/mailman/listinfo/fedora-list
> >
> >
> > Hi Craig!
> >
> > In Firefox do an "about:config" in the URL window. This will take you
to
> > the internal Firefox configuration screen. In the "Filter" window
type
> > "dns". You should see "network dns.disableIPv6 " as one of
the parameters
> > found. Double click on the line to change the value to "True" and
then see
> > if you can browse by URL name to Google and friends.
> >
> > If this works for you then look at "/etc/resolv.conf". If you are on
a
> > DSL line with modem you may see "192.168.0.1" as one of the
"namserver"(s)
> > in this file (at any rate, look for the IP of the DSL or other modem which I
> > am assumeing contains a nameserver as well). Comment out or remove this
> > line and then see if you can browse in Firefox with "
dns.disableIPv6"
> > "False".
> >
> > If all of this hits, if you can, update the firmware on your modem. If
> > you cannot do that, then pray that my scripting skills sharpen and are put
> > to the task of editing dhclient.script so it can bypass the local modem's
> > nameserver.
> >
> > Good Hunting!
> >
> > Tod
> >
> > --
> > fedora-list mailing list
> > fedora-list(a)redhat.com
> > To unsubscribe:
https://www.redhat.com/mailman/listinfo/fedora-list
> >
> >
>