Search found 126 matches

by jscarville
2020/06/30 21:52:28
Forum: CentOS 6 - General Support
Topic: Directory index full
Replies: 2
Views: 80

Re: Directory index full

Thank you.

Would it make more sense to just migrate the existing data to an XFS formatted volume and download the rest of the files to there?
by jscarville
2020/06/30 20:21:33
Forum: CentOS 6 - General Support
Topic: Directory index full
Replies: 2
Views: 80

Directory index full

I recently tried to copy a bunch of files from an S3 container to local storage on one of our file servers. I used the aws utilty. All the files (~11 million) are in one directory so I expected a bit of trouble but not like this. After 10,213,694 files the process stopped with an out of space error....
by jscarville
2019/11/03 13:42:12
Forum: CentOS 7 - Security Support
Topic: How can I record all login attempts?
Replies: 11
Views: 2281

Re: How can I record all login attempts?

I did know it was even possible to record the passwords entered in an ssh session. I suppose I could add code to the server and to openssl to do that but I am not even sure of that. Frankly, I've never even considered it. Seems to me adding such a thing seriously undermines the integrity of openssh ...
by jscarville
2019/09/10 03:28:27
Forum: CentOS 7 - General Support
Topic: How to rename all the files in centos
Replies: 1
Views: 163

Re: How to rename all the files in centos

*If* I understand what you want to do then this should print out a list of commands to rename the files. Once you are satisfied, pipe the output to bash to execute the cmmands

Code: Select all

find -type f -name oldname -printf "mv -v %h/oldname %h/new name\n"
by jscarville
2019/09/09 15:42:34
Forum: CentOS 6 - Security Support
Topic: [SOLVED] Getting Kerberos Password Expiration Date
Replies: 1
Views: 1179

Re: Getting Kerberos Password Expiration Date

OK. I figured it out. The programs remctl and remctld (remctl package in EPEL) can do what asked.
by jscarville
2019/09/06 20:02:27
Forum: CentOS 6 - Security Support
Topic: [SOLVED] Getting Kerberos Password Expiration Date
Replies: 1
Views: 1179

[SOLVED] Getting Kerberos Password Expiration Date

Is there any way to get the expiration date from a Kerberos 5 KDC without entering a password a second time? I want to arrange that, when a user logs in using kerberos for authentication, the expiration date of their password is displayed. I've searched and tried every utility I can find but, so far...
by jscarville
2019/07/01 23:33:07
Forum: CentOS 7 - Networking Support
Topic: SFTP monitoring tools
Replies: 4
Views: 1267

Re: SFTP monitoring tools

Thank you! Sounds good, so I can send log to my Loganalyzer server. What is the differnce between: Subsystem sftp internal-sftp and Subsystem sftp /usr/libexec/openssh/sftp-server -f AUTHPRIV -l INFO Thanks! Not much. They are built from the same code and support the same options. The big differenc...
by jscarville
2019/07/01 23:19:34
Forum: CentOS 7 - Security Support
Topic: Tips on Hardening Centos7?
Replies: 15
Views: 2635

Re: Tips on Hardening Centos7?

As a general rule, always set PermitRootLogin to "no". If you must allow remote root logins then put it in a Match block. Even then set it up to only allow key based logins. ie:

Code: Select all

Match Host ip.add.re.ss
  PermitRootLogin  prohibit-password
by jscarville
2019/07/01 22:02:40
Forum: CentOS 7 - Security Support
Topic: User logs in using expired Kerberos password
Replies: 0
Views: 767

User logs in using expired Kerberos password

My Linux systems (CentOS 6 and 7) configured to use Kerberos to login. No local passwords are allowed except for root and certain other users. During a recent clean up of expired accounts, I discovered that a user was logging in using a password that was expired in the Kerberos database. I created a...
by jscarville
2019/05/05 23:19:52
Forum: CentOS 7 - Software Support
Topic: Firefox addons bug - before panic sets in
Replies: 12
Views: 2012

Re: Firefox addons bug - before panic sets in

If you are running ESR, you can go to about:config and toggle xpinstall.signatures.required to false. Don't forget to set it back once there is an actual fix in place.

Go to advanced search