July 2014 - Admins - mailman3.cels.anl.gov

Re: [JLSE-Admins] [Fail2Ban] SSH: banned 219.138.135.59 on
by Allen, Benjamin S. 29 Jul '14

29 Jul '14

These are notifications that fail2ban is adding firewall rules to one or both of the logins because someone or something has too many failed authentication attempts. Admins is currently the only appropriate mailing list we have to send notifications like this to. Ben From: Rajeev Thakur <thakur(a)mcs.anl.gov> Sent: Jul 29, 2014 8:17 AM To: admins(a)jlse.anl.gov Subject: Re: [JLSE-Admins] [Fail2Ban] SSH: banned 219.138.135.59 on What are these messages? On Jul 29, 2014, at 7:16 AM, Fail2Ban <fail2ban(a)alcf.anl.gov> wrote: > > The IP 219.138.135.59 has just been banned by Fail2Ban after > 18 attempts against SSH. > > Latest lines containing IP:219.138.135.59 in /var/log/syslog/sshd.log > > Jul 29 12:16:18 ftlogin2 sshd[7078]: error: PAM: Authentication failure for root from 219.138.135.59 > Jul 29 12:16:18 ftlogin2 sshd[7078]: Failed keyboard-interactive/pam for root from 219.138.135.59 port 42378 ssh2 > Jul 29 12:16:18 ftlogin2 sshd[7072]: error: PAM: Authentication failure for root from 219.138.135.59 > Jul 29 12:16:18 ftlogin2 sshd[7072]: Failed keyboard-interactive/pam for root from 219.138.135.59 port 42366 ssh2 > Jul 29 12:16:18 ftlogin2 sshd[7066]: error: PAM: Authentication failure for root from 219.138.135.59 > Jul 29 12:16:18 ftlogin2 sshd[7066]: Failed keyboard-interactive/pam for root from 219.138.135.59 port 42357 ssh2 > Jul 29 12:16:18 ftlogin2 sshd[7080]: error: PAM: Authentication failure for root from 219.138.135.59 > Jul 29 12:16:18 ftlogin2 sshd[7080]: Failed keyboard-interactive/pam for root from 219.138.135.59 port 42381 ssh2 > Jul 29 12:16:18 ftlogin2 sshd[7079]: error: PAM: Authentication failure for root from 219.138.135.59 > Jul 29 12:16:18 ftlogin2 sshd[7079]: Failed keyboard-interactive/pam for root from 219.138.135.59 port 42369 ssh2 > > > - Fail2ban on > _______________________________________________ > Admins mailing list > Admins(a)lists.jlse.anl.gov > https://lists.jlse.anl.gov/mailman/listinfo/admins _______________________________________________ Admins mailing list Admins(a)lists.jlse.anl.gov https://lists.jlse.anl.gov/mailman/listinfo/admins

1 0

Re: [JLSE-Admins] [Fail2Ban] SSH: banned 219.138.135.59 on
by Rajeev Thakur 29 Jul '14

29 Jul '14

What are these messages? On Jul 29, 2014, at 7:16 AM, Fail2Ban <fail2ban(a)alcf.anl.gov> wrote: > > The IP 219.138.135.59 has just been banned by Fail2Ban after > 18 attempts against SSH. > > Latest lines containing IP:219.138.135.59 in /var/log/syslog/sshd.log > > Jul 29 12:16:18 ftlogin2 sshd[7078]: error: PAM: Authentication failure for root from 219.138.135.59 > Jul 29 12:16:18 ftlogin2 sshd[7078]: Failed keyboard-interactive/pam for root from 219.138.135.59 port 42378 ssh2 > Jul 29 12:16:18 ftlogin2 sshd[7072]: error: PAM: Authentication failure for root from 219.138.135.59 > Jul 29 12:16:18 ftlogin2 sshd[7072]: Failed keyboard-interactive/pam for root from 219.138.135.59 port 42366 ssh2 > Jul 29 12:16:18 ftlogin2 sshd[7066]: error: PAM: Authentication failure for root from 219.138.135.59 > Jul 29 12:16:18 ftlogin2 sshd[7066]: Failed keyboard-interactive/pam for root from 219.138.135.59 port 42357 ssh2 > Jul 29 12:16:18 ftlogin2 sshd[7080]: error: PAM: Authentication failure for root from 219.138.135.59 > Jul 29 12:16:18 ftlogin2 sshd[7080]: Failed keyboard-interactive/pam for root from 219.138.135.59 port 42381 ssh2 > Jul 29 12:16:18 ftlogin2 sshd[7079]: error: PAM: Authentication failure for root from 219.138.135.59 > Jul 29 12:16:18 ftlogin2 sshd[7079]: Failed keyboard-interactive/pam for root from 219.138.135.59 port 42369 ssh2 > > > - Fail2ban on > _______________________________________________ > Admins mailing list > Admins(a)lists.jlse.anl.gov > https://lists.jlse.anl.gov/mailman/listinfo/admins

1 0

[JLSE-Admins] [Fail2Ban] SSH: banned 219.138.135.59 on
by Fail2Ban 29 Jul '14

29 Jul '14

The IP 219.138.135.59 has just been banned by Fail2Ban after 18 attempts against SSH. Latest lines containing IP:219.138.135.59 in /var/log/syslog/sshd.log Jul 29 12:16:18 ftlogin2 sshd[7078]: error: PAM: Authentication failure for root from 219.138.135.59 Jul 29 12:16:18 ftlogin2 sshd[7078]: Failed keyboard-interactive/pam for root from 219.138.135.59 port 42378 ssh2 Jul 29 12:16:18 ftlogin2 sshd[7072]: error: PAM: Authentication failure for root from 219.138.135.59 Jul 29 12:16:18 ftlogin2 sshd[7072]: Failed keyboard-interactive/pam for root from 219.138.135.59 port 42366 ssh2 Jul 29 12:16:18 ftlogin2 sshd[7066]: error: PAM: Authentication failure for root from 219.138.135.59 Jul 29 12:16:18 ftlogin2 sshd[7066]: Failed keyboard-interactive/pam for root from 219.138.135.59 port 42357 ssh2 Jul 29 12:16:18 ftlogin2 sshd[7080]: error: PAM: Authentication failure for root from 219.138.135.59 Jul 29 12:16:18 ftlogin2 sshd[7080]: Failed keyboard-interactive/pam for root from 219.138.135.59 port 42381 ssh2 Jul 29 12:16:18 ftlogin2 sshd[7079]: error: PAM: Authentication failure for root from 219.138.135.59 Jul 29 12:16:18 ftlogin2 sshd[7079]: Failed keyboard-interactive/pam for root from 219.138.135.59 port 42369 ssh2 - Fail2ban on

1 0

[JLSE-Admins] [Fail2Ban] SSH: banned 219.138.135.59 on
by Fail2Ban 29 Jul '14

29 Jul '14

The IP 219.138.135.59 has just been banned by Fail2Ban after 18 attempts against SSH. Latest lines containing IP:219.138.135.59 in /var/log/syslog/sshd.log Jul 29 12:15:04 ftlogin1 sshd[23227]: error: PAM: Authentication failure for root from 219.138.135.59 Jul 29 12:15:04 ftlogin1 sshd[23212]: error: PAM: Authentication failure for root from 219.138.135.59 Jul 29 12:15:04 ftlogin1 sshd[23227]: Failed keyboard-interactive/pam for root from 219.138.135.59 port 47813 ssh2 Jul 29 12:15:04 ftlogin1 sshd[23212]: Failed keyboard-interactive/pam for root from 219.138.135.59 port 47803 ssh2 Jul 29 12:15:04 ftlogin1 sshd[23228]: error: PAM: Authentication failure for root from 219.138.135.59 Jul 29 12:15:04 ftlogin1 sshd[23228]: Failed keyboard-interactive/pam for root from 219.138.135.59 port 47814 ssh2 Jul 29 12:15:04 ftlogin1 sshd[23209]: error: PAM: Authentication failure for root from 219.138.135.59 Jul 29 12:15:04 ftlogin1 sshd[23209]: Failed keyboard-interactive/pam for root from 219.138.135.59 port 47795 ssh2 Jul 29 12:15:04 ftlogin1 sshd[23233]: error: PAM: Authentication failure for root from 219.138.135.59 Jul 29 12:15:04 ftlogin1 sshd[23233]: Failed keyboard-interactive/pam for root from 219.138.135.59 port 47820 ssh2 - Fail2ban on

1 0

Re: [JLSE-Admins] [mcs-userbase #221241] Fwd: JLSE Account Request Approval Needed
by Rajeev Thakur 23 Jul '14

23 Jul '14

Yes, it is ok now. On Jul 23, 2014, at 2:41 PM, Ti Leggett <leggett(a)mcs.anl.gov> wrote: > He's a sponsor, so I've removed the expiration. Can you tell me if his account disappears from > the list? > > On Wed Jul 23 14:38:54 2014, leggett wrote: >> I believe it's because his account is going to expire in 45 days. >> >> On Wed Jul 23 13:58:43 2014, thakur wrote: >>> Ti, >>> Any idea why Kumar's account shows up as pending like this? >>> >>> Rajeev >>> >>> >>> Begin forwarded message: >>> >>>> From: Rajeev Thakur <thakur(a)mcs.anl.gov> >>>> Subject: Re: [JLSE-Admins] JLSE Account Request Approval Needed >>>> Date: July 23, 2014 1:36:45 PM CDT >>>> To: <admins(a)jlse.anl.gov> >>>> >>>> Not sure why I just got this request to approve Kumar's account, and >>> there is no yes/no button to approve either. >>>> >>>> >>>> On Jul 23, 2014, at 1:28 PM, <admins(a)jlse.anl.gov> >>>> wrote: >>>> >>>>> >>>>> Your approval is needed on one or more requests that have come in. >>> These are either requests for new accounts from people, or they are >>> requests for additional computing resources from people that >>> already have an account. In either case, your approval is needed >>> before these requests can be processed. To indicate your decision, >>> please go to the following page: >>> https://accounts.jlse.anl.gov/index.php?tpl=sponsorships.tpl >>>> >>>> _______________________________________________ >>>> Admins mailing list >>>> Admins(a)lists.jlse.anl.gov >>>> https://lists.jlse.anl.gov/mailman/listinfo/admins >>> >> >> > > >

1 0

[JLSE-Admins] Fwd: JLSE Account Request Approval Needed
by Rajeev Thakur 23 Jul '14

23 Jul '14

Ti, Any idea why Kumar's account shows up as pending like this? Rajeev Begin forwarded message: > From: Rajeev Thakur <thakur(a)mcs.anl.gov> > Subject: Re: [JLSE-Admins] JLSE Account Request Approval Needed > Date: July 23, 2014 1:36:45 PM CDT > To: <admins(a)jlse.anl.gov> > > Not sure why I just got this request to approve Kumar's account, and there is no yes/no button to approve either. > > > On Jul 23, 2014, at 1:28 PM, <admins(a)jlse.anl.gov> > wrote: > >> >> Your approval is needed on one or more requests that have come in. These are either requests for new accounts from people, or they are requests for additional computing resources from people that already have an account. In either case, your approval is needed before these requests can be processed. To indicate your decision, please go to the following page: https://accounts.jlse.anl.gov/index.php?tpl=sponsorships.tpl > > _______________________________________________ > Admins mailing list > Admins(a)lists.jlse.anl.gov > https://lists.jlse.anl.gov/mailman/listinfo/admins

1 0

[JLSE-Admins] software license
by Kazutomo Yoshii 23 Jul '14

23 Jul '14

Hi, How do we manage software license? I have a serial number for Intel compilers expires in 2015. I prefer to keep licenses in a cetral place (e.g., repo). - kaz

1 0

Re: [JLSE-Admins] JLSE Account Request Approval Needed
by Kenneth Raffenetti 23 Jul '14

23 Jul '14

You might have gotten a notification about someone else. I told Toni to request an account, but already approved it. Kumar's on the other hand, is showing about to expire in Sept. We should have Ti check this, as your account should be permanent with no expiry. Ken On 07/23/2014 01:36 PM, Rajeev Thakur wrote: > Not sure why I just got this request to approve Kumar's account, and > there is no yes/no button to approve either. > > > On Jul 23, 2014, at 1:28 PM, <admins(a)jlse.anl.gov > <mailto:[email protected]>> > wrote: > >> >> Your approval is needed on one or more requests that have come in. >> These are either requests for new accounts from people, or they are >> requests for additional computing resources from people that already >> have an account. In either case, your approval is needed before these >> requests can be processed. To indicate your decision, please go to the >> following page: >> https://accounts.jlse.anl.gov/index.php?tpl=sponsorships.tpl > > > > _______________________________________________ > Admins mailing list > Admins(a)lists.jlse.anl.gov > https://lists.jlse.anl.gov/mailman/listinfo/admins >

1 0

Re: [JLSE-Admins] JLSE Account Request Approval Needed
by Kalyan Kumaran 23 Jul '14

23 Jul '14

Maybe the tool knows more than we do. I won't go up if asked to meet my boss. On Jul 23, 2014, at 1:36 PM, Rajeev Thakur <thakur(a)mcs.anl.gov> wrote: > Not sure why I just got this request to approve Kumar's account, and there is no yes/no button to approve either. > > <Screen Shot 2014-07-23 at 1.35.52 PM.png> > > On Jul 23, 2014, at 1:28 PM, <admins(a)jlse.anl.gov> > wrote: > >> >> Your approval is needed on one or more requests that have come in. These are either requests for new accounts from people, or they are requests for additional computing resources from people that already have an account. In either case, your approval is needed before these requests can be processed. To indicate your decision, please go to the following page: https://accounts.jlse.anl.gov/index.php?tpl=sponsorships.tpl > > _______________________________________________ > Admins mailing list > Admins(a)lists.jlse.anl.gov > https://lists.jlse.anl.gov/mailman/listinfo/admins

1 0

Re: [JLSE-Admins] JLSE Account Request Approval Needed
by Rajeev Thakur 23 Jul '14

23 Jul '14

Not sure why I just got this request to approve Kumar's account, and there is no yes/no button to approve either. On Jul 23, 2014, at 1:28 PM, <admins(a)jlse.anl.gov> wrote: > > Your approval is needed on one or more requests that have come in. These are either requests for new accounts from people, or they are requests for additional computing resources from people that already have an account. In either case, your approval is needed before these requests can be processed. To indicate your decision, please go to the following page: https://accounts.jlse.anl.gov/index.php?tpl=sponsorships.tpl

1 0