Re: SSH problem from BasicLinux floppy booted 486 to Fedora 25
by Philip Rhoades
Jakub,
On 2017-03-13 23:43, users-request(a)lists.fedoraproject.org wrote:
> Date: Mon, 13 Mar 2017 09:55:42 +0100
> From: Jakub Jelen <jjelen(a)redhat.com>
> Subject: Re: SSH problem from BasicLinux floppy booted 486 to Fedora
> 25
> To: phil(a)pricom.com.au, Community support for Fedora users
> <users(a)lists.fedoraproject.org>
> Message-ID: <b9905a1e-2a31-8500-1d0b-8d2f3db4464e(a)redhat.com>
> Content-Type: text/plain; charset=utf-8; format=flowed
>
> On 03/13/2017 07:02 AM, Philip Rhoades wrote:
>> People,
>>
>> I get an error trying to ssh from a BasicLinux floppy booted 486 (I
>> want
>> to sort out HD problems on the old Adaptec 1542 controlled SCSI drive
>> that has RH5.2 on it!) when trying to connect to my Fedora 25 x86_64
>> workstation. On the F25 machine in /var/log/secure I get lines like:
>>
>> Mar 13 16:25:47 phil sshd[7562]: Unable to negotiate with 192.168.1.40
>> port 1034: no matching key exchange method found. Their offer:
>> diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1
>> [preauth]
>
> You are connecting from very old OpenSSH client (3.5), which does not
> support any of the currently secure cryptography algorithms. You should
> really consider updating that BasicLinux.
There will probably be a very infrequent need to boot that computer -
once I rsync everything off it, the HD will probably only be used for
odd testing after that. Also, I am already using 3 floppies to boot the
machine - an up-to-date BL will be bigger and use more floppies etc etc
> Otherwise you can enable the legacy kex and ciphers in the Fedora
> OpenSSH server by following these instructions:
>
> http://www.openssh.com/legacy.html
Perfect! Thanks for that - I can reverse using the legacy stuff after I
recover the data from the old machine.
Regards,
Phil.
--
Philip Rhoades
PO Box 896
Cowra NSW 2794
Australia
E-mail: phil(a)pricom.com.au
7 years, 1 month
SSH problem from BasicLinux floppy booted 486 to Fedora 25
by Philip Rhoades
People,
I get an error trying to ssh from a BasicLinux floppy booted 486 (I want
to sort out HD problems on the old Adaptec 1542 controlled SCSI drive
that has RH5.2 on it!) when trying to connect to my Fedora 25 x86_64
workstation. On the F25 machine in /var/log/secure I get lines like:
Mar 13 16:25:47 phil sshd[7562]: Unable to negotiate with 192.168.1.40
port 1034: no matching key exchange method found. Their offer:
diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
On the BasLin terminal I get:
OpenSSH_3.5p1, SSH protocols 1.5/2.0, OpenSSL 0x0090607f
debug1: Rhosts Authentication disabled, originating port will not be
trusted.
debug1: ssh_connect: needpriv 0
debug1: Connecting to 192.168.1.20 [192.168.1.20] port 22.
debug1: Connection established.
debug1: identity file /root/.ssh/identity type -1
debug1: identity file /root/.ssh/id_rsa type -1
debug1: identity file /root/.ssh/id_dsa type -1
debug1: Remote protocol version 2.0, remote software version OpenSSH_7.3
debug1: match: OpenSSH_7.3 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_3.5p1
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug2: kex_parse_kexinit:
diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1
debug2: kex_parse_kexinit: ssh-rsa,ssh-dss
debug2: kex_parse_kexinit:
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,rijndael-cbc(a)lysator.liu.se
debug2: kex_parse_kexinit:
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,rijndael-cbc(a)lysator.liu.se
debug2: kex_parse_kexinit:
hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160(a)openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit:
hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160(a)openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: none,zlib
debug2: kex_parse_kexinit: none,zlib
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit: first_kex_follows 0
debug2: kex_parse_kexinit: reserved 0
debug2: kex_parse_kexinit:
curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha51
2,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1
debug2: kex_parse_kexinit:
ssh-rsa,rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519
debug2: kex_parse_kexinit:
chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm(a)openssh.com
debug2: kex_parse_kexinit:
chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm(a)openssh.com
debug2: kex_parse_kexinit:
umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64(a)openssh.
com,umac-128(a)openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: kex_parse_kexinit:
umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128(a)openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: kex_parse_kexinit: none,zlib(a)openssh.com
debug2: kex_parse_kexinit: none,zlib(a)openssh.com
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit: first_kex_follows 0
debug2: kex_parse_kexinit: reserved 0
no matching cipher found: client
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,rijndael-cbc(a)lysator.liu.se
server
chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm(a)openssh.com
debug1: Calling cleanup 0x805deb0(0x0)
Any suggestions about how to fix this SSH problem?
Thanks,
Phil.
--
Philip Rhoades
PO Box 896
Cowra NSW 2794
Australia
E-mail: phil(a)pricom.com.au
7 years, 1 month
Problem installing MatLab
by carloberdondini＠live.it
Hi everyone, my name's Carlo. I installed Fedora 2 weeks ago because I need it at university.
I had some problem installing MatLab. I tryed to install simply with the command ./install but then I have to choose the folder to install i had this error:
"Failed to create folder (/usr/local/MATLAB/R2016b/).".
So i created the folder myself from terminal with root permission, but then i hade another error:
"Unable to write to /usr/local/MATLAB/R2016b/. Please select a different folder."
I changed folder, trying to install in home/.matlab (again I created the folder .matlab) and fortunately I could go ahead in the installation. When it finished i saw the icon of Matlab but when i clicked on "Finish" the icon disappeared, and MatLab seems it's not installed.
I then started the installation as root: sudo ./install but this is what happend:
sudo ./install
Preparing installation files ...
Installing ...
Finished
I have no idea what i have to do now. Please can someone help me?
Realy thank u.
Carlo
7 years, 1 month
sudden change in app window backgrounds ... help
by William W. Austin
A couple of days ago I used dnf to do a mass update (as in "dnf
update<RETURN>")
I am running the KDE desktop/Plasma work-space on a system which boots
in multi-user (non graphical) mode and has i&The updates appeared to go
smoothly and there were no error messages. However, the update added a
newer kernel (I went from kernel-4.9.12-200.fc25.x86_64 to
kernel-4.9.13-200.fc25.x86_64) so I did a reboot. (This is my normal
approach and one I've done hundreds of times over at least a decade.)
However, when the system came back up, everything looked OK until I
started to run LibreOffice (writer, calc - it's tax time...) essentially
the background for everything except the
document/spreadsheet I'm working on has gone from something off-white to
what I would get if I went into systemsettings5 and selected "Breeze
Dark" as my overall work-space theme (which I haven't actually ever tried).
Now in case you find it useful, the system has an Intel i7-5930K CPU (6
phys cores), 32 GB ram, just under 20TB disk space, 152GB swap (actually
needed), and is currently running the 4.9.13-200.x86_64 kernel, Samsung
22" monitor 1920x1200 (new monitor not here yet... sigh).
Since I hadn't reconfigured anything, I assumed that some configuration
param was changed in the update, so I ran systemsettings5 to see what I
needed to change. But I found nothing that helped the problem. Along
the say I discovered that the same thing hits a few other apps as well,
Now I have another (slightly older, slightly smaller) box which
previously had the same config params as this one, so I brought up the
KDE settings until on both boxes and did a sight-verify to compare the
two. So far as I can tell they are identical.
I did several hours of RTFM, online searches, more doc reading, more
than a little experimentation, and still have not found a solution.
If ANYBODY can shed some light on how to fix this I would really
appreciate it. (It bugs me the most in LibreOffice since the background
makes some of the icons almost invisible.
--
william w. austin airedad(a)att.net
"life is just another phase i'm going through. this time, anyway ..."
7 years, 1 month
[OT] oVirt folks?
by Chris Adams
Any oVirt people around? I know this is a little off-topic for the
Fedora list, but hoping there's some overlap.
The oVirt yum repo and mailing list servers have been down for a couple
of hours, and I don't see any place to find a status update (and can't
email). Alternately - any Red Hat folks know of any outages that could
be causing this? These sites do appear to be hosted on Red Hat
infrastructure.
--
Chris Adams <linux(a)cmadams.net>
7 years, 1 month
How do I set the run target and turn off services on a non running
installation ?
by linux guy
I have a non booting installation that I need to get running. I would like
to know how to change the run target to the command line and disable
several services that are causing issues during the boot process.
How does one manually change the run target on a non booting installation
? What do I edit ? Because my installation doesn't boot, I can't run
systemctl, so I must edit the link manually.
How does one manually disable services so they don't start during the boot
process ? Because my installation doesn't boot, I can't run systemctl, so
I must edit the configuration manually.
Thanks
7 years, 1 month
F24>F25 system-upgrade : how to recover half-done upgrade ?
by sean darcy
I'm trying to upgrade an older machine from F24 to F25. It failed
half-way through :
................
dnf[627]: Installing : kernel-core-4.9.10-200.fc25.x86_64
1079/3109
dnf[627]: Installing : kernel-modules-4.9.10-200.fc25.x86_64
1080/3109
thermal thermal_zone0: critical temperature reached(97 C),shutting down
......
I'll fix the fan. But where do I go ? dnf system-upgrade reboot ? Or
start all over again with download ?
sean
7 years, 1 month
Good firewalld documentation?
by Chris Adams
I'm trying to switch from using straight iptables to firewalld, but I'm
not really "getting it" with how firewalld works. The documentation on
firewalld.org doesn't really explain things to me.
On a server, I would typically restrict management access (SSH, SNMP) to
certain subnets, and leave the other ports (HTTP, HTTPS) open with an
iptables like below. What would be the easiest way to accomplish the
same thing with firewalld?
************************************************************************
:INPUT ACCEPT [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [0:0]
:mgmt - [0:0]
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp --dport 22 -j mgmt
-A INPUT -p udp --dport 161 -j mgmt
-A mgmt -s xx.xx.xx.xx/xx -J ACCEPT
-A mgmt -s yy.yy.yy.yy/yy -J ACCEPT
-A mgmt -p tcp -j REJECT --reject-with tcp-reset
-A mgmt -j DROP
COMMIT
************************************************************************
--
Chris Adams <linux(a)cmadams.net>
7 years, 1 month
How to add words to system spell-checking dictionary
by Andrew Toskin
Repost of my question on Ask Fedora -- https://ask.fedoraproject.org/en/question/101943/how-to-add-words-to-syst...
I'm trying to figure out how to add words to a spelling dictionary so that I get the most impact for the effort --- some way to have it apply to all applications, *or at least as many of the ones I actually use* as possible.
If I have to target specific spell checkers for specific applications, then I'm mostly interested in adding words to the spell checking dictionaries used by the applications I most often compose text with: Firefox for web forms, Evolution for email, Atom and gedit for code and plain text, and LibreOffice for office documents. Each of these applications has a way to add words to their own spelling dictionary, but those dictionaries are application-specific, and I would have to add a given word to all of them. So I've been hunting to see If they share a single spell-check system, or even if there's 2 or 3 systems that covers all of those. Here's what I've found out so far:
I notice my system in particular has these packages which match "spell" in the name, plus enchant:
* aspell - 12:0.60.6.1-14.fc25
* gnome-python2-gtkspell - 2.25.3-48.fc25
* gspell - 1.2.3-1.fc25
* gtkspell - 2.0.16-11.fc24
* gtkspell3 - 3.0.9-1.fc25
* hunspell - 1.4.1-1.fc25
* hunspell-en - 0.20140811.1-5.fc24
* hunspell-en-GB - 0.20140811.1-5.fc24
* hunspell-en-US - 0.20140811.1-5.fc24
* enchant - 1:1.6.0-14.fc25
* python3-enchant - 1.6.8-1.fc25
Wikipedia says hunspell replaces myspell and is widely used. `rpm --query --requires` says that Firefox and LibreOffice both depend on hunspell. gedit uses gspell, which relies on enchant, which can use myspell as a backend --- and the directory `/usr/share/myspell/` is actually owned by hunspell. Atom's spell-checking package searches in the myspell directory too, so it seems like I *should* have a good chance of doing everything I want to do from the hunspell configuration. So I tried creating a user addon dictionary by creating the file `~/.hunspell_en_US` containing a few line-separated words (all lower case except for proper nouns, no /flags or anything). However, those words are still marked as a spelling error in all the applications I'm testing on, *except* for hunspell itself, via the command line tool.
Why isn't it working?
[1]: https://copr.fedorainfracloud.org/coprs/mosquito/atom/
7 years, 1 month
