Home / user-104112

xkcd's questions

Martin Hope
xkcd
Asked: 2020-08-18 08:39:50 +0800 CST
  • 1

The "crypto-policies" utility from Redhat and CentOS is also available in Ubuntu. It is supposed to help with the management of configuration of the core cryptographic subsystems like TLS, IKE, IPSec, DNSSec, and Kerberos. I was able to follow the documentation in the man pages and make it work in Redhat/CentOS 8 but not in Ubuntu 20.04. Is there a special way to configure this utility for Ubuntu?

For instance one difference that I observed was the in Redhat/CentOS, the apache's ssl.conf file has the following entry:

SSLCipherSuite PROFILE=SYSTEM

This is different in Ubuntu's apache ssl.conf file. There it is:

SSLCipherSuite HIGH:!aNULL

I tried setting this parameter's value to PROFILE=SYSTEM, but then apache doesn't restart and gives the following error:

[Mon Aug 17 16:26:12.015608 2020] [ssl:emerg] [pid 3369:tid 140004399066176] AH01898: Unable to configure permitted SSL ciphers
[Mon Aug 17 16:26:12.015654 2020] [ssl:emerg] [pid 3369:tid 140004399066176] SSL Library Error: error:1410D0B9:SSL routines:SSL_CTX_set_cipher_list:no cipher match
[Mon Aug 17 16:26:12.015660 2020] [ssl:emerg] [pid 3369:tid 140004399066176] AH02311: Fatal error initialising mod_ssl, exiting.

I am probably missing some small configuration step. Any pointers will be highly appreciated :)

centos ubuntu redhat apache-2.4
Martin Hope
xkcd
Asked: 2015-07-29 08:30:05 +0800 CST
  • 3

I have a situation where I am able to launch CentOS 6.6 images on a subnet such that the VM instances get their IP addresses from the virtual gateway of the subnet. Now this gateway has gone wonky and I don't have the access to fix it, so I have set up my own DHCP server on this subnet.

So now there are 2 DHCP servers on this subnet and my VMs are getting random IP addresses, sometimes from one DHCP server and sometimes from the other. My question is that how I can configure the dhcp client on my VMs so that they make DHCP requests to only my DHCP server rather than the faulty one? man dhcp.conf has not been very helpful.

centos
Martin Hope
xkcd
Asked: 2014-09-09 06:08:35 +0800 CST
  • 0

The Puppet agent on my Windows VMs is not executing PowerShell scripts. I have tested it with a very simple script as well. The script is stored on the C drive as test.ps1. Its contents are as follows:

"$(Get-Date -format F)" | Out-File C:\z.txt -Encoding ASCII

When I run this as ./test.ps1 from the PowerShell console manually, it works fine and the file z.txt is created. But for some reason the Puppet agent doesn't run this. The contents of my site.pp are:

exec { "Run Script":
        command => 'C:/Windows/System32/WindowsPowerShell/v1.0/powershell.exe -Executionpolicy Unrestricted -File c:/test.ps1',
        logoutput => true,
        refreshonly => true,
}

And the output of "puppet agent -t" from the VM itself is:

C:\Users\Administrator>puppet agent -t
Info: Retrieving pluginfacts
Warning: Copying owner/mode/group from the source file on Windows is deprecated;
 use source_permissions => ignore.
   (at C:/Program Files (x86)/Puppet Labs/Puppet/puppet/lib/puppet/type/file/sou
rce.rb:120:in `each')
Info: Retrieving plugin
Info: Caching catalog for f9881998-7fdf-4e96-a784-d9690fcd5495
Info: Applying configuration version '1410182959'
Notice: Finished catalog run in 0.42 seconds

So it seems to me that there is no error anywhere, but still the PowerShell script doesn't run. What am I doing wrong?

windows-server-2008
Martin Hope
xkcd
Asked: 2014-08-06 10:04:14 +0800 CST
  • 4

I have a DHCP server that issues "hostnames" to virtual machines when they boot up, based on their MAC addresses. It looks something like this:-

host VM01 {
  hardware ethernet c0:18:85:e3:13:31;
  fixed-address 10.1.1.129;
  option domain-name "example.org";
  option host-name "VM01";
  ddns-hostname "VM01.example.org";
}

This is working fine for my CentOS based VMs, but not for Windows VMs. Any ideas how to fix this?

windows
Martin Hope
xkcd
Asked: 2011-12-15 05:57:33 +0800 CST
  • 15

I have a situation where I want to connect to a Linux machine running VNC (lets call it VNCServer) which is behind two consecutive Linux machines i.e., to ssh into the VNCServer, I have to ssh into Gateway1 from my laptop, then from Gateway1 shell I ssh into the Gateway2 and then from that shell I finally ssh into VNCServer. I cannot change the network design and access flow Laptop-->Gateway1-->Gateway2-->Server. I have no root privileges on Gateway1 and all ports except 22 and 5901 are closed.

Is there a way by which I can launch a VNC viewer on my laptop and access the VNCServer? I understand that it might be done using ssh tunneling features and I have putty on my Windows laptop (sorry, no Linux or Cygwin etc. can be installed on the work laptop). Any help will be greatly appreciated as this would make my life so easier!

ssh vnc tunneling