Trying to access Openfiler 2.3 samba shares using older MS DOS LanManager v2.1 Netbind clients (netbootdisk, when ghosting) does not work out of the box, so I made some “hammer style” tweaking in order to login from the netbootdisk MS DOS LanaManager client into the Openfiler 2.3 Samba shares (the filer is AD member and hosts many PC ghost images).

1. Edit /opt/openfiler/var/www/includes/generate.inc and after the lines:

$ac_smb_fp->AddLine( “password server = ” . $ac_aresult[25]);
$ac_smb_fp->AddLine( “realm = ” . $ac_aresult[32]);
$ac_smb_fp->AddLine( “; interfaces = ” . “192.168.12.2/24 192.168.13.2/24″);
$ac_smb_fp->AddLine( “; remote announce = ” . “192.168.1.255 192.168.2.44″);
$ac_smb_fp->AddLine( “; domain logons = ” . “yes”);
$ac_smb_fp->AddLine( “log file = /var/log/samba/%m.log”);
$ac_smb_fp->AddLine( “max log size = 0″);
$ac_smb_fp->AddLine( “; hosts deny = all”);
$ac_smb_fp->AddLine( “map to guest = Bad User”);
$ac_smb_fp->AddLine( “guest account = ofguest”);

insert:

$ac_smb_fp->AddLine( “lanman auth = Yes”);
$ac_smb_fp->AddLine( “client lanman auth = Yes”);
$ac_smb_fp->AddLine( “client NTLMv2 auth = Yes”);

Beware: these 4 extra lines will go away after updating the samba package or the opefiler program (conary etc), but they will be still present after making changes to shares using the filer web interface. (Do not poke the bear! once the openfiler is well setup, I don’t do any updates).

2. Add userfoo into the local /etc/samba/passdb.tdb collection with:

smbpasswd -L userfoo

(more likely the same password as in the AD)

3. Add userfoo into a local UNIX group like nagios, in /etc/group, BTW you did setup nrpe on the filer, isn’t you?

4. Add read/write permission on the SAMBA share for the local UNIX group (nagios) using the filer web interface.

Using netbootdisk userfoo was able to login and map network drive into Openfiler samba share.
In memory of Jason Litka (rumblem etc)

Supero Doctor II – Linux version 2.69 on OpenFiler 2.3 (2.6.29.6-0.24.smp.gcc3.4.x86_64)
Supermicro motherboard: X7DBE

Added extra conary repository in /etc/conaryrc as:
installLabelPath openfiler.rpath.org@ofns:2 conary.rpath.com@rpl:1 conary.rpath.com@rpl:2

and installed all the required libraries for superodoctor:

#ldd /usr/sbin/superodoctor.x86_64
libgnomeui-2.so.0 => not found
libSM.so.6 => not found
libICE.so.6 => not found
libbonoboui-2.so.0 => not found
libxml2.so.2 => /usr/lib64/libxml2.so.2 (0x00007f6d5b294000)
libpthread.so.0 => /lib64/tls/libpthread.so.0 (0x00007f6d5b180000)
libz.so.1 => /usr/lib64/libz.so.1 (0x00007f6d5b06b000)
libgnomecanvas-2.so.0 => not found
libgnome-2.so.0 => not found
libart_lgpl_2.so.2 => not found
libpangoft2-1.0.so.0 => not found
libgtk-x11-2.0.so.0 => not found
libgdk-x11-2.0.so.0 => not found
libatk-1.0.so.0 => not found
libgdk_pixbuf-2.0.so.0 => not found
libpangoxft-1.0.so.0 => not found
libpangox-1.0.so.0 => not found
libpango-1.0.so.0 => not found
libbonobo-2.so.0 => not found
libgconf-2.so.4 => not found
libgnomevfs-2.so.0 => not found
libbonobo-activation.so.4 => not found
libORBit-2.so.0 => not found
libm.so.6 => /lib64/tls/libm.so.6 (0x00007f6d5aee6000)
liblinc.so.1 => not found
libgmodule-2.0.so.0 => /usr/lib64/libgmodule-2.0.so.0 (0x00007f6d5ade3000)
libdl.so.2 => /lib64/libdl.so.2 (0x00007f6d5ace0000)
libgobject-2.0.so.0 => /usr/lib64/libgobject-2.0.so.0 (0x00007f6d5aba1000)
libgthread-2.0.so.0 => /usr/lib64/libgthread-2.0.so.0 (0x00007f6d5aa9d000)
libglib-2.0.so.0 => /usr/lib64/libglib-2.0.so.0 (0x00007f6d5a911000)
libc.so.6 => /lib64/tls/libc.so.6 (0x00007f6d5a6eb000)
/lib64/ld-linux-x86-64.so.2 (0x00007f6d5b4c8000)

(http://www.supermicro.biz/support/faqs/faq.cfm?faq=7027)

#conary update libgnomeui
#conary update linc

# ldd /usr/sbin/superodoctor.x86_64
libgnomeui-2.so.0 => /usr/lib64/libgnomeui-2.so.0 (0x00007f8aa46bc000)
libSM.so.6 => /usr/X11R6/lib64/libSM.so.6 (0x00007f8aa45b2000)
libICE.so.6 => /usr/X11R6/lib64/libICE.so.6 (0x00007f8aa4497000)
libbonoboui-2.so.0 => /usr/lib64/libbonoboui-2.so.0 (0x00007f8aa4328000)
libxml2.so.2 => /usr/lib64/libxml2.so.2 (0x00007f8aa40f4000)
libpthread.so.0 => /lib64/tls/libpthread.so.0 (0x00007f8aa3fe0000)
libz.so.1 => /usr/lib64/libz.so.1 (0x00007f8aa3ecb000)
libgnomecanvas-2.so.0 => /usr/lib64/libgnomecanvas-2.so.0 (0x00007f8aa3d9c000)
libgnome-2.so.0 => /usr/lib64/libgnome-2.so.0 (0x00007f8aa3c86000)
libart_lgpl_2.so.2 => /usr/lib64/libart_lgpl_2.so.2 (0x00007f8aa3b6f000)
libpangoft2-1.0.so.0 => /usr/lib64/libpangoft2-1.0.so.0 (0x00007f8aa3a47000)
libgtk-x11-2.0.so.0 => /usr/lib64/libgtk-x11-2.0.so.0 (0x00007f8aa362a000)
libgdk-x11-2.0.so.0 => /usr/lib64/libgdk-x11-2.0.so.0 (0x00007f8aa3499000)
libatk-1.0.so.0 => /usr/lib64/libatk-1.0.so.0 (0x00007f8aa337a000)
libgdk_pixbuf-2.0.so.0 => /usr/lib64/libgdk_pixbuf-2.0.so.0 (0x00007f8aa3263000)
libpangoxft-1.0.so.0 => /usr/lib64/libpangoxft-1.0.so.0 (0x00007f8aa315c000)
libpangox-1.0.so.0 => /usr/lib64/libpangox-1.0.so.0 (0x00007f8aa3050000)
libpango-1.0.so.0 => /usr/lib64/libpango-1.0.so.0 (0x00007f8aa2f12000)
libbonobo-2.so.0 => /usr/lib64/libbonobo-2.so.0 (0x00007f8aa2da0000)
libgconf-2.so.4 => /usr/lib64/libgconf-2.so.4 (0x00007f8aa2c65000)
libgnomevfs-2.so.0 => /usr/lib64/libgnomevfs-2.so.0 (0x00007f8aa2af2000)
libbonobo-activation.so.4 => /usr/lib64/libbonobo-activation.so.4 (0x00007f8aa29d9000)
libORBit-2.so.0 => /usr/lib64/libORBit-2.so.0 (0x00007f8aa286e000)
libm.so.6 => /lib64/tls/libm.so.6 (0x00007f8aa26e9000)
liblinc.so.1 => /usr/lib64/liblinc.so.1 (0x00007f8aa25df000)
libgmodule-2.0.so.0 => /usr/lib64/libgmodule-2.0.so.0 (0x00007f8aa24dc000)
libdl.so.2 => /lib64/libdl.so.2 (0x00007f8aa23d9000)
libgobject-2.0.so.0 => /usr/lib64/libgobject-2.0.so.0 (0x00007f8aa229a000)
libgthread-2.0.so.0 => /usr/lib64/libgthread-2.0.so.0 (0x00007f8aa2196000)
libglib-2.0.so.0 => /usr/lib64/libglib-2.0.so.0 (0x00007f8aa200a000)
libc.so.6 => /lib64/tls/libc.so.6 (0x00007f8aa1de4000)
libpangocairo-1.0.so.0 => /usr/lib64/libpangocairo-1.0.so.0 (0x00007f8aa1cdd000)
libcairo.so.2 => /usr/lib64/libcairo.so.2 (0x00007f8aa1b8e000)
libfreetype.so.6 => /usr/lib64/libfreetype.so.6 (0x00007f8aa1a1d000)
libfontconfig.so.1 => /usr/lib64/libfontconfig.so.1 (0x00007f8aa18de000)
libXrender.so.1 => /usr/X11R6/lib64/libXrender.so.1 (0x00007f8aa17d5000)
libX11.so.6 => /usr/X11R6/lib64/libX11.so.6 (0x00007f8aa15f4000)
libXext.so.6 => /usr/X11R6/lib64/libXext.so.6 (0x00007f8aa14e2000)
libpng12.so.0 => /usr/lib64/libpng12.so.0 (0x00007f8aa13be000)
libgnome-keyring.so.0 => /usr/lib64/libgnome-keyring.so.0 (0x00007f8aa12b2000)
libjpeg.so.62 => /usr/lib64/libjpeg.so.62 (0x00007f8aa1191000)
libpopt.so.0 => /usr/lib64/libpopt.so.0 (0x00007f8aa1089000)
/lib64/ld-linux-x86-64.so.2 (0x00007f8aa4855000)
libesd.so.0 => /usr/lib64/libesd.so.0 (0x00007f8aa0f7f000)
libaudiofile.so.0 => /usr/lib64/libaudiofile.so.0 (0x00007f8aa0e55000)
libXrandr.so.2 => /usr/X11R6/lib64/libXrandr.so.2 (0x00007f8aa0d52000)
libXi.so.6 => /usr/X11R6/lib64/libXi.so.6 (0x00007f8aa0c4a000)
libXinerama.so.1 => /usr/X11R6/lib64/libXinerama.so.1 (0x00007f8aa0b48000)
libXcursor.so.1 => /usr/X11R6/lib64/libXcursor.so.1 (0x00007f8aa0a3e000)
libXfixes.so.3 => /usr/X11R6/lib64/libXfixes.so.3 (0x00007f8aa0939000)
libXft.so.2 => /usr/X11R6/lib64/libXft.so.2 (0x00007f8aa0825000)
libORBitCosNaming-2.so.0 => /usr/lib64/libORBitCosNaming-2.so.0 (0x00007f8aa071e000)
libssl.so.5 => /lib64/libssl.so.5 (0x00007f8aa05d5000)
libcrypto.so.5 => /lib64/libcrypto.so.5 (0x00007f8aa0365000)
libgssapi_krb5.so.2 => /usr/kerberos/lib64/libgssapi_krb5.so.2 (0x00007f8aa024d000)
libkrb5.so.3 => /usr/kerberos/lib64/libkrb5.so.3 (0x00007f8aa00d3000)
libcom_err.so.3 => /usr/kerberos/lib64/libcom_err.so.3 (0x00007f8a9ffcf000)
libk5crypto.so.3 => /usr/kerberos/lib64/libk5crypto.so.3 (0x00007f8a9feab000)
libhowl.so.0 => /usr/lib64/libhowl.so.0 (0x00007f8a9fc76000)
libresolv.so.2 => /lib64/libresolv.so.2 (0x00007f8a9fb63000)
librt.so.1 => /lib64/tls/librt.so.1 (0x00007f8a9fa49000)
libexpat.so.0 => /usr/lib64/libexpat.so.0 (0x00007f8a9f926000)
libasound.so.2 => /usr/lib64/libasound.so.2 (0x00007f8a9f756000)
libkrb5support.so.0 => /usr/kerberos/lib64/libkrb5support.so.0 (0x00007f8a9f653000)

[root@filer ]# superodoctor
*****************************************************************************
Supero Doctor II – Linux version 2.69(100208)
Copyright(c) 1993-2010 by Super Micro Computer, Inc. http://supermicro.com/
*****************************************************************************
Error: no i2c device files found. Please use mkdev.sh to create them.
[root@filer superodoctor]# ./mkdev.sh
/dev/i2c-0
/dev/i2c-1
/dev/i2c-2
/dev/i2c-3
/dev/i2c-4
/dev/i2c-5
/dev/i2c-6
/dev/i2c-7
/dev/i2c-8
/dev/i2c-9
/dev/i2c-10
/dev/i2c-11
/dev/i2c-12
/dev/i2c-13
/dev/i2c-14
/dev/i2c-15
/dev/i2c-16
/dev/i2c-17
/dev/i2c-18
/dev/i2c-19
/dev/i2c-20
/dev/i2c-21
/dev/i2c-22
/dev/i2c-23
/dev/i2c-24
/dev/i2c-25
/dev/i2c-26
/dev/i2c-27
/dev/i2c-28
/dev/i2c-29
/dev/i2c-30
/dev/i2c-31
[root@filer ]# superodoctor -r “Chassis Intrusion”
[root@filer ]# superodoctor -t
*****************************************************************************
Supero Doctor II – Linux version 2.69(100208)
Copyright(c) 1993-2010 by Super Micro Computer, Inc. http://supermicro.com/
*****************************************************************************
Monitored Item            High Limit  Low Limit     Status
———————————————————————-
Fan1 Fan Speed                              712       5895
Fan2 Fan Speed                              712       6053
Fan3 Fan Speed                              712       6108
Fan4 Fan Speed                              712          0  Warning!
Fan5 Fan Speed                              712       4891
Fan6 Fan Speed                              712       4981
CPU1 Vcore Voltage              1.48       0.92       1.06
CPU2 Vcore Voltage              1.48       0.92       0.00  Warning!
-12V Voltage                  -10.58     -13.40     -12.21
+1.5V Voltage                   1.65       1.34       1.47
+3.3V Voltage                   3.63       2.96       3.33
+12V Voltage                   13.25      10.75      11.81
+5V Voltage                     5.50       4.49       4.94
+5Vsb Voltage                   5.50       4.49       4.90
VBAT Voltage                    3.66       2.99       3.25
PECI Agent1 Temperature       89/192                   Low
PECI Agent2 Temperature       89/192                   N/A
PECI Agent3 Temperature       89/192                   N/A
PECI Agent4 Temperature       89/192                   N/A
System Temperature            50/122                 37/98
Chassis Intrusion                                     Good
Power Supply Failure                                  Good
——————————————— Tue May  4 17:58:48 2010
[root@filer ]#

Installing Kaltura CE 1.5 on Fedora 11 (i386) with a “trick” to point to the system’s ffmpeg, the below selinux error messages showed up:

type=AVC msg=audit(1248459483.954:30685): avc:  denied  { execstack } for  pid=8515 comm=”ffmpeg” scontext=unconfined_u:system_r:httpd_t:s0 tcontext=unconfined_u:system_r:httpd_t:s0 tclass=process
type=SYSCALL msg=audit(1248459483.954:30685): arch=40000003 syscall=125 success=no exit=-13 a0=bfc28000 a1=1000 a2=1000007 a3=bfc280ac items=0 ppid=8482 pid=8515 auid=0 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) ses=13 comm=”ffmpeg” exe=”/usr/bin/ffmpeg” subj=unconfined_u:system_r:httpd_t:s0 key=(null)

type=AVC msg=audit(1248462183.935:30734): avc:  denied  { execmem } for  pid=8758 comm=”ffmpeg” scontext=unconfined_u:system_r:httpd_t:s0 tcontext=unconfined_u:system_r:httpd_t:s0 tclass=process
type=SYSCALL msg=audit(1248462183.935:30734): arch=40000003 syscall=125 success=no exit=-13 a0=bffea000 a1=1000 a2=1000007 a3=bffe994c items=0 ppid=8744 pid=8758 auid=0 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) ses=1255 comm=”ffmpeg” exe=”/usr/bin/ffmpeg” subj=unconfined_u:system_r:httpd_t:s0 key=(null)

they were domesticated using Tomáš “Tomyk” Ruprich hint from:

https://akela.mendelu.cz/~ruprich/tlachy/zend_selinux.html

as bellow:

[root@localhost selinux]# more local.te
module local 1.1;

require {
type httpd_t;
#type usr_t;
class file execute;
#class process { execstack execmem execheap };
class process { execstack execmem };
}

#============= httpd_t ==============
allow httpd_t self:process execstack;
allow httpd_t self:process execmem;
#allow httpd_t self:process execheap;
#allow httpd_t usr_t:file execute;

[root@localhost selinux]# checkmodule -M -m -o local.mod local.te
checkmodule:  loading policy configuration from local.te
checkmodule:  policy configuration loaded
checkmodule:  writing binary representation (version 10) to local.mod

[root@localhost selinux]# semodule_package -o local.pp -m local.mod

[root@localhost selinux]# semodule -i ./local.pp

Updated account #299759 on Linux Counter. I wondered about the future of this web site, about the Linux distros, and about any web site in 100 years.