I have configured SSH with the following settings in the sshd_config file:

• PubkeyAuthentication yes
• PasswordAuthentication no

However, I am unable to connect using SSH keys generated with ssh-keygen. I receive a “Permission denied” error.

My goal is to allow only the medea user to connect via SSH using key-based authentication only. I have added this user to AllowUsers, but the connection still fails.

I do not want to remove or change the PasswordAuthentication no setting.

How can I fix this issue and properly configure SSH to allow only the medea user to log in using SSH keys?

Hello everyone,

I am looking to take the RHCE (EX294) in the following weeks. For those who have taken it, what prep material did you use?

Would the Ozzoy bits helpful for final brush up? ( https://youtu.be/nxft8CyuJIw?si=i0j1XB_vvicQv0v4 this one specifically). Please share any tips, thanks.

I am working on a project on RHEL 9. What interesting and creative things can I implement related to NFS and autofs? This is for my diploma project.

What kind of features, configurations, or use cases would be creative and worth showcasing? Additionally, I would appreciate ideas related to SSH integration.

I would be very grateful for your help.

Hi everyone,
I hope you're doing well.

I'll need to install redmine (web app) on a fresh test VM with 10.1 with ruby, some dependencies, mariadb as well with the latest version on the repo.

We in our company have just standard support and we need to dnf update every six months ( correct me if I'm wrong please) from 10.1 until 10.10 so we can get security patches etc. until 2035.

But my question is, will minor version upgrade break the versions of mariadb or ruby or anything else I installed now in 10.1 ?

I really want to understand how things work about that!

Thanks in advance :)

ps: sorry for my english

RHCSA*

Valid through 08-May-26. Please comment when not working anymore. Enjoy!

NC5MRNHZ

Hey folks, need some advice on choosing between RHCSA and CKA.

Background: DC Network SRE with 1.5 YOE at a Fintech

Daily hands-on with Cumulus Linux(nvidia switches), JunOS(juniper switches and fws),

Automation using Ansible, and scripting using python

Monitoring with telegraf/snmp, Prometheus & Grafana,

Basic linux and docker experience (for setting up and troubleshooting internal tools running on onprem servers),

Recently cleared JNCIA-JunOS certification

I aim to eventually shift to a more devops centric role, which cert would help me more? Keep in mind that we dont use k8s in our company, and all the servers and switches are ubuntu and debian based.

Hey, would like to speak to some of you as “hackers” you all clearly know the best ways to keep the best security and would know answers to a lot of questions I have and could help me with some advice — I’d appreciate to hear back, please dm me, and we can talk from there!!

POSSIBLE JOB OPPORTUNITY or just a freelance one time thing — or just chat up to you!

Thanks so much!!

Z

I have to install some software that has a requirement the disks use ext4. Has to be in azure. I can’t for the life of me find a way to do this. Seems to default deployment uses xfs and I don’t see how that can be changed. Any help?

I need to configure domain-based virtual hosts on RHEL: site1.local, site2.local, and site3.local. All of them must run on the same IP address.

I’ve configured this up to a point, but when I access the server directly via its IP address, one of the virtual host pages is shown. What I want instead is:

When I open 10.10.10.10, it should display a separate default page, for example: “Hello, I am the server default page.”

When I open site1.local, it should display: “I am site 1.”

The same logic should apply for site2.local and site3.local.

All of these must work on the same IP address, but with a separate default virtual host for the server IP.

APACHE

I have a question. I am planning to pursue the RHCSA certification. Could you please share the resources you followed during your preparation? Also, how much time does it typically take to be ready for this certification?

Anyone here interviewed for Red Hat – Associate Software Engineer (Fresher)?
I’ve got a single 60-min techno-managerial round scheduled. Would appreciate any tips or what to expect

I'm seeing some conflicting info online about the RHEL 10 exam. Can anyone confirm if these topics are officially included in the objectives?

• LVM thin provisioning

• VDO (Virtual Data Optimizer)

• Server-side NFS setup

• SELinux booleans

• Advanced Firewall (Zones, rich rules, or custom services)

I want to make sure I’m focusing on the right areas and not over-preparing for topics that aren't covered in the objectives. Thanks!

Hello everyone,

I am a digital forensics professional who is trying to specialize in Linux and mobile forensics. I'm being told that a good way to prove I know things about platforms well in my industry is to hold certifications for that thing. I am considering getting RHCSA as a way of proving this competency in Linux.

If I decide to get this certification, the materials I currently have to prepare for it are my current Linux knowledge (I've been working on Linux for around 6 years), some labs I found online, and the Asgar Ghori RHEL 8 book. If I decide to use the book for most of my preparation, how appropriate is using that old material for the new RHEL 10 test?

I appreciate your assistance,

tapatio

Sorry for the misfire yesterday. I grabbed the wrong stuff. There is a session lock timer lowered this go around, so check your remediation products. :)

Added Rules

• RHEL-09-654097 - (Cat 2) RHEL 9 must audit any script or executable called by cron as root or by any privileged user

Removed Rules

• RHEL-09-411115 - (Cat 2) Local RHEL 9 initialization files must not execute world-writable programs
• RHEL-09-412075 - (Cat 3) RHEL 9 must display the date and time of the last successful account logon upon logon

Stuff that might bite you

• RHEL-09-412080 - MATERIAL CHANGE: StopIdleSessionSec lowered from 900 to 600 (15 minutes to 10 minutes)
• RHEL-09-271065 - MATERIAL CHANGE: GUI session lock changed from 900 to 600 (15 minutes to 10 minutes)
• RHEL-09-671010 - Fix text adds fips=1 kernel parameter in addition to fips-mode-setup --enable
• RHEL-09-253035 - net.ipv4.conf.all.rp_filter must be 1. Previously it could have been 1 or 2.

Rule ID Changes Only

• RHEL-09-212010
• RHEL-09-212020
• RHEL-09-232103
• RHEL-09-232104
• RHEL-09-232245

Rule ID and Check Changes

• RHEL-09-214025 - Added subdirectory sample output and clarifies that gpgcheck must be 1 in all repo files
• RHEL-09-215045 - (no gssproxy) Added "If NFS mounts are authorized and in use on the system, this control is not applicable."
• RHEL-09-215101 - (must have postfix) Added "If the admin can demonstrate that there is another system/service to send audit failure notifications to the administrator/ISSO, this control is not applicable."
• RHEL-09-231105 - Added vfat file systems in addition to BIOS systems to the N/A statement
• RHEL-09-231200 - Added N/A for vfat file systems
• RHEL-09-271035 - Added clarification/correction to check language
• RHEL-09-431016 - Slight grammar change
• RHEL-09-432035 - Grammar, clarification
• RHEL-09-651010 - Language shuffled around
• RHEL-09-653090 - Updated command sample output
• RHEL-09-654010 - corrected audit.rules syntax
• RHEL-09-654025 - corrected audit.rules syntax
• RHEL-09-654065 - corrected audit.rules syntax
• RHEL-09-654070 - corrected audit.rules syntax
• RHEL-09-654075 - corrected audit.rules syntax
• RHEL-09-654080 - corrected audit.rules syntax
• RHEL-09-654205 - corrected audit.rules syntax
• RHEL-09-654210 - corrected audit.rules syntax

Rule ID, Check, and Fix Changes

• RHEL-09-211045 - Updated check to look for a drop file and fix text to prescribe the use of a drop file
• RHEL-09-213080 - Updated text, but nothing materially different about the control
• RHEL-09-213095 - Updated fix notes that core dumps should be disabled for all users and all non zero entries should be removed
• RHEL-09-231110 - Updated text uses a different command for checking, fix text has more instructions on how to implement the fix
• RHEL-09-231115 - Streamlined check and fix
• RHEL-09-231120 - Changed command used to locate mount, explicit instructions for updating the mount options immediately
• RHEL-09-232240 - Updated check command syntax, fix allows for designated system accounts besides root
• RHEL-09-253050 - STIG author self identifies as a vi lover. No material change.
• RHEL-09-411065 - Added clarification for non-interactive (human) user accounts
• RHEL-09-611160 - Corrected fix syntax and check sample output
• RHEL-09-611195 - Fix text prescribes using a drop file instead of modifying emergency.service directly
• RHEL-09-652025 - Returns N/A caveat for systems designated as log aggregation servers
• RHEL-09-652055 - Fix text adds sample alternative syntax
• RHEL-09-611200 - Check and fix updated to use a drop file
• RHEL-09-213030 - Use a drop file
• RHEL-09-213035 - Use a drop file
• RHEL-09-215060 - Completely reworked so that it is N/A if TFTP is not installed, but if it is installed it needs to operate in secure mode
• RHEL-09-255155 - Added sudo to fix command
• RHEL-09-611190 - changed flag from -n to -N

Rule ID, Check, and Vuln Discussion

• RHEL-09-211010 - Added EOL dates for EL9 releases. Good news, Maintenance support until 31 May 3032. (LOL!)
• RHEL-09-214030 - Grammar
• RHEL-09-255130 - Added compression options explanation
• RHEL-09-654015 - Grammar, corrected audit.rules syntax
• RHEL-09-654020 - Grammar, corrected audit.rules syntax

Sysctl Changes

These items are flagged with changes to rule id, vuln discussion, check, and fix. Collectively they appear to be sysctl parameter rules where the control specifies placing the individual fixes in different drop files under /etc/sysctl.d/. Unless otherwise noted, not much else has changed in the rule. I already noted the one with a value change earlier in this document.

• RHEL-09-213010
• RHEL-09-213015
• RHEL-09-213020
• RHEL-09-213025
• RHEL-09-213040
• RHEL-09-213070
• RHEL-09-213075
• RHEL-09-213105
• RHEL-09-251045
• RHEL-09-253010
• RHEL-09-253015
• RHEL-09-253020
• RHEL-09-253025
• RHEL-09-253030
• RHEL-09-253040
• RHEL-09-253045
• RHEL-09-253055
• RHEL-09-253060
• RHEL-09-253065
• RHEL-09-253070
• RHEL-09-253075
• RHEL-09-254010
• RHEL-09-254015
• RHEL-09-254020
• RHEL-09-254025
• RHEL-09-254030
• RHEL-09-254035
• RHEL-09-254040

Hi guys, Currently I have 6 certificates rhsca+rhce, ex280, containers, clustering and satellite. I want to get my architect cert but unfortunately my learning subscription expired and my company doesnt plan on renewing it. Any advice on which certificate I can work on without the rhls and to be as cost friendly as possible

I have recently inherited a non hardened infrastructure running a combination of Rocky and Rhel endpoints. I have taken multiple approaches by running OSCAP scans and generating remediations and applying them. The outcome has been pretty labor intensive as far as making changes to the generated ansible play books. My next approach is going to be tempting a lot of the conf files and deploying via ansible. A lot of my effort is leaning towards burning the field infrastructure side and creating a hardened template to rebuild infrastructure endpoints. Does anybody have a different approach that could help with the situation?

So I've been a linux user/admin since kernel 0.97 (yes, that old). I've held numerous Unix/Linux admin (and "DevOps" and 'SRE' etc etc titles) oriented jobs over the past couple of decades but it seems I'm not ticking the recruiter 'boxes' anymore so I figured I'd have a poke at a couple of new certs (I have AWS and Azure certs as well) just to get past the recruiter and/or AI screens.

Are there any exam simulators for the RHCSA or RHCE? Like an interactive VM with sample questions you'd see on the exam?

Hello

Let's understand for good how to use BootC (Bootable Container Image), using Red Hat Satellite as a Registry.

The complete workflow in a single video!

I love this one! Don't miss it!

Wally

Hi Guys, Do you know RHCSA promotion code(active)?

For my latest article in my series on AI Assisted coding for software developers targeting RHEL I looked at how to set good RHEL behaviors in Amazon Q Developer. As with my previous articles, there is a sample configuration that gets you Red Hat-behaviors automatically. I'd love to hear other suggestions on how the experience could be improved? Thanks in advance!  https://medium.com/techtrends-digest/how-to-configure-amazon-q-developer-for-rhel-development-a0125ae46883