Re: Re: nsfs4 client with kerberos
by Fernando Lozano
Hi Joe,
Everywhere on the net it's told do turn off SElinux in case of problems... so i was making sure nobody was going to ask that. I actually used 'setenforce 0' to confirm it was not the cause.
Nalin's hint on allow_weak_crypto solved this issue, thaks a lot.
[]s, Fernando Lozano
>---- Original Message ----
>From: Joe Zeff <joe(a)zeff.us>
>To: "Community support for Fedora users" <users(a)lists.fedoraproject.org>
>Sent: Qui, Abr 7, 2011, 13:40 PM
>Subject: Re: nsfs4 client with kerberos
>
>On 04/07/2011 09:24 AM, fernando(a)lozano.eti.br wrote:
>> and tried disabling SELinux and flusing iptables rules to no effect.
>
>What made you think SELinux was at fault? Did it report problems? Try
>turning it back on and making sure it's set to notify you of any issues,
>then try again. If you don't get any SELinux alerts, it's not involved.
>--
>users mailing list
>users(a)lists.fedoraproject.org
>To unsubscribe or change subscription options:
>https://admin.fedoraproject.org/mailman/listinfo/users
>Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
13 years, 1 month
Par2 broken in F14 ?
by John Wendel
par2 repair seems to be broken on my F14 box. It just says that "repair
failed". I pulled in a version from F11 and it works fine. I'll
bugzilla if anyone else can confirm the bug.
Thanks,
John
13 years, 1 month
None
by Phatsakone Chanhchom
Hi,
I am planning to buy computer hardwares and assemble them by myself, with installing 64-bit Fedora OS.
My purpose is to learn using gimp, inkscape, blender, scribus etc. kinda multimedias stuff.
Can you tell me both minimal and maximal hardware specifications (system requirements) that meet my demands.
Many thanks,
Ricco
13 years, 1 month
mozplugger stopped working again
by Sam Varshavchik
I've always had problems getting mozplugger to work correctly, and have PDF
documents opened inside Firefox.
A while ago I finally worked everything out, and things worked for a while,
but, for some reason it's broken again. mozplugger is launching evince, but
evince opens in a new window, and mozplugger fails to capture it and put it
inside Firefox.
strace shows me that Firefox is kicking off mozplugger, as expected:
8531 execve("/usr/bin/mozplugger-helper", ["mozplugger-helper",
"1050,1,68,41943041,0,0,1623,840", "evince \"$file\""], [/* 81 vars */] <unfinished …>
8531 <… execve resumed> ) = 0
selinux is off. So, anyone knows what's broken, this time?
13 years, 1 month
nsfs4 client with kerberos
by Fernando Lozano
Hi there,
I need to use OpenVPN to get to the company LAN and mount a NFS share. We
use NFS to secure access to NFS. I can connect to the PVN and access web
and ssh servers. Kinit to my own principal works fine. But root cannot get
a valid kerneros ticket to mount NFS shares. I already tried doing the same
on the local net (no VPN involved) with same results, and tried disabling
SELinux and flusing iptables rules to no effect.
Another notebook works fine and it looks to me both have the same settings,
except one has F13 (the one that works) and the other has F14 (the one that
doesn't).
I added -v -v to rpcgssd and the logs show that:
Apr 7 09:36:29 lgx200 rpc.gssd[2947]: handling gssd upcall
(/var/lib/nfs/rpc_pipefs/nfs/clnt0)
Apr 7 09:36:29 lgx200 rpc.gssd[2947]: handle_gssd_upcall: 'mech=krb5 uid=0
enctypes=18,17,16,23,3,1,2 '
Apr 7 09:36:29 lgx200 rpc.gssd[2947]: handling krb5 upcall
(/var/lib/nfs/rpc_pipefs/nfs/clnt0)
Apr 7 09:36:29 lgx200 rpc.gssd[2947]: process_krb5_upcall: service is ''
Apr 7 09:36:40 lgx200 rpc.gssd[2947]: WARNING: Key table entry not found
while getting initial ticket for principal 'nfs/lg.example.com@USERS' using
keytab 'WRFILE:/etc/krb5.keytab'
Apr 7 09:36:40 lgx200 rpc.gssd[2947]: ERROR: No credentials found for
connection to server filesystem.example.com
Apr 7 09:36:40 lgx200 rpc.gssd[2947]: doing error downcall
[all output was edted to change my employee dns domain name to example.com]
But the correct ticket (certificate?) is on the keytab, as shown by klist:
[root@lg etc]# hostname
lg
[root@lg etc]# klist -k
Keytab name: WRFILE:/etc/krb5.keytab
KVNO Principal
----
--------------------------------------------------------------------------
2 nfs/lg.example.com@USERS
Any idea one notebook can mount and authenticate root/the computer itself
using kerberos, but the other, older Fedora can't, using the same configs?
I already tried moving the certificate from one computer to the other (and
of course changing the hostname) and requesting a new certificate from the
company sysadmin. Same results. I guess it should be something local to the
netbook, like name resolution, but all network settings are the same for
both notebooks. One works, other don't, whatever keytab I use.
[]s, Fernando Lozano
13 years, 1 month
Barcode reader f14=no win=yes
by NoSpaze
Hi,
I got a new barcode reader, but it doesn't work (does in any Win box).
Am I missing something? Loading any USB keyboard module? (cant guess
any).
Thanks in advance.
dmesg output:
=============
[11302.128075] usb 2-2: new low speed USB device using ohci_hcd and address 7
[11302.279510] usb 2-2: New USB device found, idVendor=04b4, idProduct=ed81
[11302.279524] usb 2-2: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[11302.279533] usb 2-2: Product: Generic KB-HID
[11302.279539] usb 2-2: Manufacturer: Guest
[11302.290970] generic-usb: probe of 0003:04B4:ED81.0006 failed with error -22
lsusb -v:
=========
Bus 002 Device 007: ID 04b4:ed81 Cypress Semiconductor Corp.
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 1.10
bDeviceClass 0 (Defined at Interface level)
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 8
idVendor 0x04b4 Cypress Semiconductor Corp.
idProduct 0xed81
bcdDevice 2.50
iManufacturer 1
iProduct 2 Generic KB-HID
iSerial 0
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 34
bNumInterfaces 1
bConfigurationValue 1
iConfiguration 4 HID KB
bmAttributes 0xa0
(Bus Powered)
Remote Wakeup
MaxPower 100mA
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 1
bInterfaceClass 3 Human Interface Device
bInterfaceSubClass 1 Boot Interface Subclass
bInterfaceProtocol 1 Keyboard
iInterface 5 EP1
HID Device Descriptor:
bLength 9
bDescriptorType 33
bcdHID 1.00
bCountryCode 0 Not supported
bNumDescriptors 1
bDescriptorType 34 Report
wDescriptorLength 64
Report Descriptors:
** UNAVAILABLE **
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 3
Transfer Type Interrupt
Synch Type None
Usage Type Data
wMaxPacketSize 0x0008 1x 8 bytes
bInterval 10
Device Status: 0x0002
(Bus Powered)
Remote Wakeup Enabled
----------------------------------------------
Rodolfo Alcazar Portillo - nospaze(a)gmail.com
otbits.blogspot.com / counter.li.org: #367962
----------------------------------------------
"Manchmal ist es sehr schwer, wach zu bleiben, besonders in der Kirche."
- Oscar Wilde
13 years, 1 month
INS key on macbook and vuurmuur
by admin lewis
Hi
I have installed fedora on my macbook. Everythings work well but I
have a problem with vuurmuur software.
vuurmuur is a ncurses iptables front-end so that it run on terminal.
To insert data on vuurmuur I have to press INS key on my macbook ...
but it has NO INS key.
On gnome INS is mapped as FN+DEL and it works very well on vim, bash
etc. But it wont work on vuurmuur. How can I solve this problem ?
thanks luigi
13 years, 1 month
Clanbomber does not run on F14
by Oliver Ruebenacker
Hello,
I've had Clanbomber on my Fedora laptop for years, but since a
little while (I think since the upgrade to F14, but not sure) it does
not start any more but produces this error message:
Exception caught from ClanLib:
Error occured during read of config file
'/usr/local/share/clanbomber/clanbomber.dat' (line 2): Missing '='
following declaration of resource
'8'
Reinstalling Clanbomber and ClanLib06 did not help. Any ideas? Thanks!
Take care
Oliver
--
Oliver Ruebenacker, Computational Cell Biologist
Systems Biology Linker at Virtual Cell (http://vcell.org/sybil)
Turning Knowledge Data into Models
Center for Cell Analysis and Modeling
http://www.oliver.curiousworld.org
13 years, 1 month
