Category: Security

Lol, hope to add more in furure grep -v “timed event” |grep -v “timer event”|grep -v “Requesting”|grep -v “SBUS”|grep -v “callback”|grep -v “dispatch”|grep -v “a sysbus message”|grep -v “No sub-attributes for” |grep -v “reusing cached connection” |grep -v “nesting:”|grep -v “sbus_remove_watch”|grep -v “be_client_destructor”|grep -v “sdap_process_result”|grep -v “Comparing LDAP with LDAP” |grep -v “Message type:”|grep -v…

If you need to debug Kerberos, check the time synchronization at the first place. In about 50% cases it is it. the ntpd (or chrony) should be presented in the process list they should really be configured correctly in case of the virtual host crony is preferable, with the ntpd time skew is possible Really nice crony/ntpd comparative chart: https://chrony.tuxfamily.org/comparison.html , “Summary” section is complete.

Checked one insecure approach to use sudo not to allow commands, but to prohibit commands for user with the NOT-operator “!”. Why it’s a bad idea we can see in the sudoers man page: ” Limitations of the ‘!’ operator It is generally not effective to “subtract” commands from ALL using the ‘!’ operator. A user can trivially circumvent this by copying the  desired command to a different name and then executing that. For example: bill…