users March 2017

users@lists.fedoraproject.org

110 participants
85 discussions

Re: SSH problem from BasicLinux floppy booted 486 to Fedora 25
by Philip Rhoades 13 Mar '17

13 Mar '17

Jakub, On 2017-03-13 23:43, users-request(a)lists.fedoraproject.org wrote: > Date: Mon, 13 Mar 2017 09:55:42 +0100 > From: Jakub Jelen <jjelen(a)redhat.com> > Subject: Re: SSH problem from BasicLinux floppy booted 486 to Fedora > 25 > To: phil(a)pricom.com.au, Community support for Fedora users > <users(a)lists.fedoraproject.org> > Message-ID: <b9905a1e-2a31-8500-1d0b-8d2f3db4464e(a)redhat.com> > Content-Type: text/plain; charset=utf-8; format=flowed > > On 03/13/2017 07:02 AM, Philip Rhoades wrote: >> People, >> >> I get an error trying to ssh from a BasicLinux floppy booted 486 (I >> want >> to sort out HD problems on the old Adaptec 1542 controlled SCSI drive >> that has RH5.2 on it!) when trying to connect to my Fedora 25 x86_64 >> workstation. On the F25 machine in /var/log/secure I get lines like: >> >> Mar 13 16:25:47 phil sshd[7562]: Unable to negotiate with 192.168.1.40 >> port 1034: no matching key exchange method found. Their offer: >> diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 >> [preauth] > > You are connecting from very old OpenSSH client (3.5), which does not > support any of the currently secure cryptography algorithms. You should > really consider updating that BasicLinux. There will probably be a very infrequent need to boot that computer - once I rsync everything off it, the HD will probably only be used for odd testing after that. Also, I am already using 3 floppies to boot the machine - an up-to-date BL will be bigger and use more floppies etc etc > Otherwise you can enable the legacy kex and ciphers in the Fedora > OpenSSH server by following these instructions: > > http://www.openssh.com/legacy.html Perfect! Thanks for that - I can reverse using the legacy stuff after I recover the data from the old machine. Regards, Phil. -- Philip Rhoades PO Box 896 Cowra NSW 2794 Australia E-mail: phil(a)pricom.com.au

1 0

SSH problem from BasicLinux floppy booted 486 to Fedora 25
by Philip Rhoades 13 Mar '17

13 Mar '17

People, I get an error trying to ssh from a BasicLinux floppy booted 486 (I want to sort out HD problems on the old Adaptec 1542 controlled SCSI drive that has RH5.2 on it!) when trying to connect to my Fedora 25 x86_64 workstation. On the F25 machine in /var/log/secure I get lines like: Mar 13 16:25:47 phil sshd[7562]: Unable to negotiate with 192.168.1.40 port 1034: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] On the BasLin terminal I get: OpenSSH_3.5p1, SSH protocols 1.5/2.0, OpenSSL 0x0090607f debug1: Rhosts Authentication disabled, originating port will not be trusted. debug1: ssh_connect: needpriv 0 debug1: Connecting to 192.168.1.20 [192.168.1.20] port 22. debug1: Connection established. debug1: identity file /root/.ssh/identity type -1 debug1: identity file /root/.ssh/id_rsa type -1 debug1: identity file /root/.ssh/id_dsa type -1 debug1: Remote protocol version 2.0, remote software version OpenSSH_7.3 debug1: match: OpenSSH_7.3 pat OpenSSH* debug1: Enabling compatibility mode for protocol 2.0 debug1: Local version string SSH-2.0-OpenSSH_3.5p1 debug1: SSH2_MSG_KEXINIT sent debug1: SSH2_MSG_KEXINIT received debug2: kex_parse_kexinit: diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 debug2: kex_parse_kexinit: ssh-rsa,ssh-dss debug2: kex_parse_kexinit: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,rijndael-cbc(a)lysator.liu.se debug2: kex_parse_kexinit: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,rijndael-cbc(a)lysator.liu.se debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160(a)openssh.com,hmac-sha1-96,hmac-md5-96 debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160(a)openssh.com,hmac-sha1-96,hmac-md5-96 debug2: kex_parse_kexinit: none,zlib debug2: kex_parse_kexinit: none,zlib debug2: kex_parse_kexinit: debug2: kex_parse_kexinit: debug2: kex_parse_kexinit: first_kex_follows 0 debug2: kex_parse_kexinit: reserved 0 debug2: kex_parse_kexinit: curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha51 2,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1 debug2: kex_parse_kexinit: ssh-rsa,rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519 debug2: kex_parse_kexinit: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com debug2: kex_parse_kexinit: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com debug2: kex_parse_kexinit: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh. com,umac-128(a)openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 debug2: kex_parse_kexinit: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 debug2: kex_parse_kexinit: none,zlib(a)openssh.com debug2: kex_parse_kexinit: none,zlib(a)openssh.com debug2: kex_parse_kexinit: debug2: kex_parse_kexinit: debug2: kex_parse_kexinit: first_kex_follows 0 debug2: kex_parse_kexinit: reserved 0 no matching cipher found: client aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,rijndael-cbc(a)lysator.liu.se server chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com debug1: Calling cleanup 0x805deb0(0x0) Any suggestions about how to fix this SSH problem? Thanks, Phil. -- Philip Rhoades PO Box 896 Cowra NSW 2794 Australia E-mail: phil(a)pricom.com.au

2 1

Problem installing MatLab
by carloberdondini＠live.it 12 Mar '17

12 Mar '17

Hi everyone, my name's Carlo. I installed Fedora 2 weeks ago because I need it at university. I had some problem installing MatLab. I tryed to install simply with the command ./install but then I have to choose the folder to install i had this error: "Failed to create folder (/usr/local/MATLAB/R2016b/).". So i created the folder myself from terminal with root permission, but then i hade another error: "Unable to write to /usr/local/MATLAB/R2016b/. Please select a different folder." I changed folder, trying to install in home/.matlab (again I created the folder .matlab) and fortunately I could go ahead in the installation. When it finished i saw the icon of Matlab but when i clicked on "Finish" the icon disappeared, and MatLab seems it's not installed. I then started the installation as root: sudo ./install but this is what happend: sudo ./install Preparing installation files ... Installing ... Finished I have no idea what i have to do now. Please can someone help me? Realy thank u. Carlo

4 3

sudden change in app window backgrounds ... help
by William W. Austin 11 Mar '17

11 Mar '17

A couple of days ago I used dnf to do a mass update (as in "dnf update<RETURN>") I am running the KDE desktop/Plasma work-space on a system which boots in multi-user (non graphical) mode and has i&The updates appeared to go smoothly and there were no error messages. However, the update added a newer kernel (I went from kernel-4.9.12-200.fc25.x86_64 to kernel-4.9.13-200.fc25.x86_64) so I did a reboot. (This is my normal approach and one I've done hundreds of times over at least a decade.) However, when the system came back up, everything looked OK until I started to run LibreOffice (writer, calc - it's tax time...) essentially the background for everything except the document/spreadsheet I'm working on has gone from something off-white to what I would get if I went into systemsettings5 and selected "Breeze Dark" as my overall work-space theme (which I haven't actually ever tried). Now in case you find it useful, the system has an Intel i7-5930K CPU (6 phys cores), 32 GB ram, just under 20TB disk space, 152GB swap (actually needed), and is currently running the 4.9.13-200.x86_64 kernel, Samsung 22" monitor 1920x1200 (new monitor not here yet... sigh). Since I hadn't reconfigured anything, I assumed that some configuration param was changed in the update, so I ran systemsettings5 to see what I needed to change. But I found nothing that helped the problem. Along the say I discovered that the same thing hits a few other apps as well, Now I have another (slightly older, slightly smaller) box which previously had the same config params as this one, so I brought up the KDE settings until on both boxes and did a sight-verify to compare the two. So far as I can tell they are identical. I did several hours of RTFM, online searches, more doc reading, more than a little experimentation, and still have not found a solution. If ANYBODY can shed some light on how to fix this I would really appreciate it. (It bugs me the most in LibreOffice since the background makes some of the icons almost invisible. -- william w. austin airedad(a)att.net "life is just another phase i'm going through. this time, anyway ..."

4 3

kwin makes GUI unresponsive and blocks half the screen.[Urgent]
by Jeroen Mathon 10 Mar '17

10 Mar '17

Hey, I filed a bug report earlier but wanted to know if anyone else is also experience this urgent issue. As detailed here: https://bugzilla.redhat.com/show_bug.cgi?id=1430660 My workstation has almost become unusable now with kwin blocking half of my screen and refusing to work. See: http://i.imgur.com/un69XnR.jpg I cannot use the gui and restarting kwin also does not work, the screen remains unusable.

1 0

[OT] oVirt folks?
by Chris Adams 10 Mar '17

10 Mar '17

Any oVirt people around? I know this is a little off-topic for the Fedora list, but hoping there's some overlap. The oVirt yum repo and mailing list servers have been down for a couple of hours, and I don't see any place to find a status update (and can't email). Alternately - any Red Hat folks know of any outages that could be causing this? These sites do appear to be hosted on Red Hat infrastructure. -- Chris Adams <linux(a)cmadams.net>

3 5

How do I set the run target and turn off services on a non running installation ?
by linux guy 09 Mar '17

09 Mar '17

I have a non booting installation that I need to get running. I would like to know how to change the run target to the command line and disable several services that are causing issues during the boot process. How does one manually change the run target on a non booting installation ? What do I edit ? Because my installation doesn't boot, I can't run systemctl, so I must edit the link manually. How does one manually disable services so they don't start during the boot process ? Because my installation doesn't boot, I can't run systemctl, so I must edit the configuration manually. Thanks

4 7

F24>F25 system-upgrade : how to recover half-done upgrade ?
by sean darcy 09 Mar '17

09 Mar '17

I'm trying to upgrade an older machine from F24 to F25. It failed half-way through : ................ dnf[627]: Installing : kernel-core-4.9.10-200.fc25.x86_64 1079/3109 dnf[627]: Installing : kernel-modules-4.9.10-200.fc25.x86_64 1080/3109 thermal thermal_zone0: critical temperature reached(97 C),shutting down ...... I'll fix the fan. But where do I go ? dnf system-upgrade reboot ? Or start all over again with download ? sean

3 4

Good firewalld documentation?
by Chris Adams 09 Mar '17

09 Mar '17

I'm trying to switch from using straight iptables to firewalld, but I'm not really "getting it" with how firewalld works. The documentation on firewalld.org doesn't really explain things to me. On a server, I would typically restrict management access (SSH, SNMP) to certain subnets, and leave the other ports (HTTP, HTTPS) open with an iptables like below. What would be the easiest way to accomplish the same thing with firewalld? ************************************************************************ :INPUT ACCEPT [0:0] :FORWARD DROP [0:0] :OUTPUT ACCEPT [0:0] :mgmt - [0:0] -A INPUT -i lo -j ACCEPT -A INPUT -p tcp --dport 22 -j mgmt -A INPUT -p udp --dport 161 -j mgmt -A mgmt -s xx.xx.xx.xx/xx -J ACCEPT -A mgmt -s yy.yy.yy.yy/yy -J ACCEPT -A mgmt -p tcp -j REJECT --reject-with tcp-reset -A mgmt -j DROP COMMIT ************************************************************************ -- Chris Adams <linux(a)cmadams.net>

2 2

How to add words to system spell-checking dictionary
by Andrew Toskin 09 Mar '17

09 Mar '17

Repost of my question on Ask Fedora -- https://ask.fedoraproject.org/en/question/101943/how-to-add-words-to-system… I'm trying to figure out how to add words to a spelling dictionary so that I get the most impact for the effort --- some way to have it apply to all applications, *or at least as many of the ones I actually use* as possible. If I have to target specific spell checkers for specific applications, then I'm mostly interested in adding words to the spell checking dictionaries used by the applications I most often compose text with: Firefox for web forms, Evolution for email, Atom and gedit for code and plain text, and LibreOffice for office documents. Each of these applications has a way to add words to their own spelling dictionary, but those dictionaries are application-specific, and I would have to add a given word to all of them. So I've been hunting to see If they share a single spell-check system, or even if there's 2 or 3 systems that covers all of those. Here's what I've found out so far: I notice my system in particular has these packages which match "spell" in the name, plus enchant: * aspell - 12:0.60.6.1-14.fc25 * gnome-python2-gtkspell - 2.25.3-48.fc25 * gspell - 1.2.3-1.fc25 * gtkspell - 2.0.16-11.fc24 * gtkspell3 - 3.0.9-1.fc25 * hunspell - 1.4.1-1.fc25 * hunspell-en - 0.20140811.1-5.fc24 * hunspell-en-GB - 0.20140811.1-5.fc24 * hunspell-en-US - 0.20140811.1-5.fc24 * enchant - 1:1.6.0-14.fc25 * python3-enchant - 1.6.8-1.fc25 Wikipedia says hunspell replaces myspell and is widely used. `rpm --query --requires` says that Firefox and LibreOffice both depend on hunspell. gedit uses gspell, which relies on enchant, which can use myspell as a backend --- and the directory `/usr/share/myspell/` is actually owned by hunspell. Atom's spell-checking package searches in the myspell directory too, so it seems like I *should* have a good chance of doing everything I want to do from the hunspell configuration. So I tried creating a user addon dictionary by creating the file `~/.hunspell_en_US` containing a few line-separated words (all lower case except for proper nouns, no /flags or anything). However, those words are still marked as a spelling error in all the applications I'm testing on, *except* for hunspell itself, via the command line tool. Why isn't it working? [1]: https://copr.fedorainfracloud.org/coprs/mosquito/atom/

3 4

← Newer
1
2
3
4
5
6
7
8
9
Older →