[solved pacman4 & paccheck] pacman grabed md5's form different server

Now GPG signed packages are the way to go, but what if pacman would grab the md5 hashes from a different server then the one it got the package from
This thought is based on the assumption that if a package mirror got owned the attacker could upload a trojaned package along with a new hash. If pacman got the hash form a different server then it would also be providing security along with integrity checking.
I am also assuming that this would be an easy thing to make pacman do.
Last edited by hunterthomson (2011-10-18 11:30:09)

karol wrote:
wonder wrote:signatures are available on public keyservers. pick a keyserver and add it to /etc/pacman.d/gnupg/gpg.conf
Is every package signed?
no
Do they work with pacman 3.5.4?
no. pacman 4.0 only

Similar Messages

  • Acrobat XI standard (Windows) - can't save PDF Form in server

    We created a PDF Form (Acrobat 11 standard) and located in company server. After fill up, it will be close & saved by script. It is working for some persons, but few person face the problem when they save PDF form in server "The file may be read only or another user may have it open. Please save the document with a different name or in a different folder.". It is sure that others not opened PDF form parallely.
    Please guide how to solve this issues.

    The message is telling the user either another program has the file open or another user is using the form.
    Other programs that may trigger the file lock or form in use are Windows Explorer in the Preview mode, anti-virus software, or backup software. It is even possible that the server has lost track of the lock on the file.

  • Migration Users with MD5 Passwords to Directory Server 6.1 on Solaris 10

    Hi,
    We are currently in a requirement of migrating some users to a application database to inside LDAP. Currently Application maintained the passwords in the MD5 hash form. Typical 32 digit Hex value - 41da76f0fc3ec62a6939e634bfb6a342
    Is there a way we can migrate these Users password to directory Server as-is so that they don't end up facing the prospect of resetting post migration.
    I have done some of the initial ground work but seems to be missing other critical info if at all it's possible.
    I believe it's possible to have CRYPT password policy (which directory server uses from underlying OS) as one of the plug-ins to configure in a way that underlying CRYPT utility starts to process/provide/support MD5 hashes. I got it to work, my using the below command on DSEE instance:
    dsconf set-plugin-prop -p 389 CRYPT argument:'$md5$'
    But for some reasons the MD5 hash (Sun MD5 library) provides does not match with the original hash value. It's 22 char long (as I have not specified any salt length) so I am assuming it's Base64 encoded. I have a perl script which converts the original 32-digit hex values to a base64 encoded representation (which I have also verified with other open source tools)
    Is there a way I can tweak CRYPT utility or something so that it understands typical standard MD5 hashes. (Confused between Sun MD5 and BSD (Linux) MD5 - none of them seems to match standard MD5 generated value).
    Any leads on this would be really helpful ?

    Just to reclarify or throw more information:
    a password - cleartext value - testuser1 has 32-digit HEX value as - 41da76f0fc3ec62a6939e634bfb6a342
    Same password when converted to Base64 pattern becomes - Qdp28Pw+xippOeY0v7ajQg==
    But when I use pwdhash utility in DSE after configuring CRYPT to use MD5 hashes it becomes -
    {crypt}$md5$$LiB/H70zXr3xfQPoXVuUQ1
    I used below command :
    pwdhash -D /opt/SUNWdsee/dsee6/ds6/slapd-oha-dev -s CRYPT testuser1
    Actual hash value of pwdhash is -LiB/H70zXr3xfQPoXVuUQ1 with rest of the prefix is to meet RFC standard and salt and algo name separator.
    I am wondering if Sun MD5 default uses any salt even when I haven't used or DS does it. Or if any other MD5 option is there which can be used.
    Thanks,
    Gaurav

  • Tabular form - Different LOV for different rows

    In a tabular form column, is it possible to have a select list whose values depend on some other column in the row? There doesn't appear to be a way to use #COL# notation to refer to current row values in the LOV query definition.
    Ideas? Thanks

    Hi Scott,
    Thanks ..I formed some idea about APEX_UTIL.KEYVAL_NUM. I have a problem where I am not able to decide if I can make use of this package and solve..
    Can you please have a look at this thread.. Re: Tabular form - Different LOV for different rows
    I have a SQL which populates a tabular form on the page.Coulmn1 some text, Column 2 is to show a drop down as YES and NO. i am trying to freeze the option for rows 2,3,4 as NO, if the Option choosen in first is NO.
    So, what I am trying to ask is..can I save my first selection in a global variable and use it in where clause of [select list query] the second drop down..Not sure how I can do this..Appreciate if you can show me a direction.
    Thanks,
    Chaitu.

  • SQL Verification Problem / Muse Form Issue (Server uses MySQL muse uses SQLite) I'm in desperate need of help

           Alright well here is my issue... I have been trying to fix it on my own for the past week non stop and I have finally came to a solid conclusion as to the cause of the issue.
       I always get the error "The server has encountered an error..." in red text when anyone tries to submit a form and also when I try and test it myself. This led me to test the server / site for compatibility or issues by using the test:
    mydomain.com /scripts/form_check.php
    I got the first two checks green (pass) and the third test threw a red check meaning I was having an issue with SQL verification. This then led me to days of trying to work with my hosting provider (one.com) trying to solve the problem and I was told that they use mySQL on their servers and that they couldn't do anything on their end to solve the issue. I read alot that we are recommended in this case to try and get our host to add the SQLite database to their server or whatever it is they would do, long story short I guess many people are able to ask their host to make SQLite work and most accept and add SQLite functionality to their servers but unfortunately my hosting provider doesn't want to do this and they said they were sorry and that I would need to either switch the script to work with mySQL or figure something else out...
       I took a lot of time building my site and I dont want to take the form out. I absolutely need it... I know many post on here saying "forms dont work, oh poop " or "adobe sucks I dont want to use business catalyst grrr" but I tried to find the source of the problem and I've successfully came to the conclusion that my issue is that my script wants to use SQLite but in order for my sites forms to work the server needs to have SQLite as well... My idea is that if I can configure the script and the site itself to use mySQL instead of SQLite the SQL verification will then not be an issue and my websites forms will function with no issues. I am curious if a member of the staff with adobe has experience with this particular issue and can help me out? or if a member of the adobe community has solved this problem? If not I am hoping that with the description I provided that someone with knowledge of mysql, sqlite or code in general could help me modify the script or write a new script that will allow the forms to work properly. I know its a long shot, I say that because this discussion is full of people who used muse in favor of dreamweaver because just like a large number of people in the muse discussion area, I'm a graphic designer, with plenty of computer experience, art and design skill and I am extremely familiar with photoshop. Muse is perfect in so many ways. In fact, like I mentioned above, I don't even have a complaint at this time about muse. I understand the form issue in this case, and I imagine in thousands of other users situations, is all just a matter of scripts and compatibility.. Its just a little issue between the SQLite scripts we are all given when we export our muse website and the SQL version our various hosting service may be using on their servers.
       Just incase I missed anything, to provide just a bit more info on the topic and myself for anyone who may be able to help:
    I can alter the text inside of the scripts easily if anyone happens to know any lines of code that easily solve this issue (making the muse contact forms, which are native to SQLite, functional on a server using mySQL)
    I was told one way I could make the forms work on a server using mySQL (or any version other than SQLite) If I were to make changes to adobe muses SQL version by converting the SQLite db to mySQL db (db = database)
    I am computer literate and I can take any directions necessary, I really just need to get this done, I really appreciate any help I can get!!
    Thank you in advance,
    Roy

    <?php
    If you see this text in your browser, PHP is not configured correctly on this hosting provider.
    Contact your hosting provider regarding PHP configuration for your site.
    PHP file generated by Adobe Muse CC 2014.1.6
    function formthrottle_check()
        if (!function_exists("sqlite_open"))
            return '1';
        $retCode ='5';
        if ($db = @sqlite_open('muse-throttle-db', 0666, $sqliteerror))
            $res = @sqlite_query($db, "SELECT 1 FROM sqlite_master WHERE type='table' AND name='Submission_History';",  $sqliteerror);
            if ($res == null or @sqlite_num_rows($res) == 0 or @sqlite_fetch_single($res) != 1)
                $created = @sqlite_exec($db, "CREATE TABLE Submission_History (IP VARCHAR(39), Submission_Date TIMESTAMP)",  $sqliteerror);
                if($created)
                    @sqlite_exec($db, "INSERT INTO Submission_History (IP,Submission_Date) VALUES ('256.256.256.256', DATETIME('now'))",  $sqliteerror);
                else
                    $retCode = '2';
            if($retCode == '5')
                $res = @sqlite_query($db, "SELECT COUNT(1) FROM Submission_History;",  $sqliteerror);
                if ($res != null and @sqlite_num_rows($res) > 0 and @sqlite_fetch_single($res) > 0)
                    $retCode = '0';
                else
                    $retCode = '3';
            @sqlite_close($db);
        else
            $retCode = '4';
        return $retCode;
    function formthrottle_too_many_submissions($ip)
        $tooManySubmissions = false;
        if (function_exists("sqlite_open") and $db = @sqlite_open('muse-throttle-db', 0666, $sqliteerror))
            $ip = @sqlite_escape_string($ip);
            @sqlite_exec($db, "DELETE FROM Submission_History WHERE Submission_Date < DATETIME('now','-2 hours')",  $sqliteerror);
            @sqlite_exec($db, "INSERT INTO Submission_History (IP,Submission_Date) VALUES ('$ip', DATETIME('now'))",  $sqliteerror);
            $res = @sqlite_query($db, "SELECT COUNT(1) FROM Submission_History WHERE IP = '$ip';",  $sqliteerror);
            if (@sqlite_num_rows($res) > 0 and @sqlite_fetch_single($res) > 25)
                $tooManySubmissions = true;
            @sqlite_close($db);
        return $tooManySubmissions;
    ?>

  • How to add a new font into Report Builder and Oracle Forms/Reports Server?

    Hi,
    I've searched the forum and can't find this being discussed.
    My developers run Report Builder 10.1.2.0.2 on their XP laptops.
    Their reports run (in production) on Oracle Forms/Reports Server 10.1.2.0.2.
    This server runs on MS Windows 2003, SP2.
    They've got a client who wants reports using the "Garamond Western" font.
    So....how do I get this font onto the developer's Report Builder laptops, and onto the Oracle Forms/Reports Server?
    I've moved various 'Garamond' fonts into C:\WINDOWS\FONTS on both the laptops and the server, but neither seem to recognize it.
    Thanks for your help.

    Thanks.
    This answers 1/2 of my question.
    The developer can now use Report Builder on his laptop, with the new fonts.
    But when he moves this new Report to the Oracle Application Server/Forms-Reports Server, it fails to use the new fonts.
    The Oracle App Server/Forms-Report Server is Version 10.1.2.0.2. It runs on MS Windows 2003, SP2.
    I have installed the exact same fonts on this server, into C:\WINDOWS\Fonts.
    I have used REGEDIT to change REPORTS_PATH....and placed C:\WINDOWS\Fonts; as the first value in this field.
    I have then stopped and restarted the Forms-Reports Server.

  • Urgent help needed to setup Forms 6i Server on Windows Server 2003

    Hello,
    I am trying to install Forms 6i Server from the Forms/Reports 6i Release 2 CD onto a server with Windows Server 2003 Standard Editon (services pack 1) installed.
    The Oracle Installer produced the following error when I tried to install the Forms 6i Server From the Forms/Reports 6i Release 2 CD:
    user1.pin(20); os_error while spawning ifsrv60 -install forms60server port=9000 mode=socket batch=yes.
    Has anyone successfully installed Forms 6i Server from Forms/Reports 6i Release 2 CD onto a Windows Server 2003 server?
    Any help is appreciated.
    Phil

    You it obtained to install the FORMS 6i SERVER in Windows 2003 ?
    I am with the same problem and not yet I obtained solution.

  • Acrobat form with server side submit, posting blank data

    Read more
    Acrobat form with server side submit, posting blank data,
    thanh xả tràn
    I have a PDF form which gets submitted to the server using a submit (server-side) button. The data is then received in XML format by a ColdFusion component which does some validation and stores it into the database.
    This PDF form is usually filled in by our clients using Adobe Reader 8 or below. While most of the times(and I mean like 96-97% of the times) everything goes well, at times we receive blank data into our database!! This renders couple of other features in our application useless as they try to parse an XML which does not exist.
    I do believe that this is not a problem at the ColdFusion side because all it does is trim(ToString(toBinary(GetHttpRequestData().content))).
    Does anyone has a clue as to why the data will be lost upon form submission?? I have done a lot of googling around it but in vain!

    There is an outside chance someone is just playing with you and submitting a blank form. Not uncommon if someone is not too familiar with forms.

  • Need information about Oracle Forms & Reports server installation

    Hello Friends,
    First of all I am very new user for oracle forums, So please ignore if I posted wrong place.
    We are using Oracle Database 10g and Oracle forms & Reports server 6i version.
    We just purchased oracle forms & reports (currently known as a Oracle Fusion middleware) license.  As per my knowledge latest version doesn't support Oracle 10g database.
    My question is can somebody give me Oracle Database 10g supported Forms & Reports version?
    We are planning to upgrade.
    Help would be really appreciated.
    Thanks & Regards.

    Thanks a lot for prompt response.
    I get my answer from your certification matrix.  I appreciate your response.
    Now second question arise that We are using currently Database version of 10.2.0.1.0.
    And in a certification matrix shows supported version Oracle 10.2.0.4+.
    Now I am bit confused that currently working database supports or not?
    Still i am trying to install on My window 2008 R2 with IIS 7.0.
    Let me check what happens.
    Again Thanks a lot to ccortez and PaulM  for your quick response and help.

  • Load Balancing - Forms Metrics Server

    Hi everyone, i have a doubt, for implemeting Load Balancing with Forms Metrics Server previous i must have configured Shared APPL TOP?
    And for Load Balancing JServ also i must have configured Shared APPL TOP in all my applications servers?
    Thank you very much for helping

    It is not a must, but it is recommended. If you are planning to configure PCP then it is a must.
    Implementing Load Balancing On Oracle E-Business Suite - Documentation For Specific Load Balancer Hardware [ID 727171.1]
    Thanks,
    Hussein

  • Is forms 9i server installation only supporting SSL?

    Frank,
    Do you think using html page to encrypt username/password to webserver then verify them, then launch the webforms 6iCGI can reach 128 bit encryption?
    Now our situation is to have to put webforms6iCGI deployed to extranet users network. I cannot make it comform to industry username/password encryption standard.
    Because even if I use html page thru CGI perlscript to verify username/password and encrypt it to server to check it, then launch the webforms application, then after that webforms 6i is till wide open. It is not in secure mode at all, and our application uses username as global variable thru our application.
    If 9iAS form/report server installation is not called
    9iAS but called forms/reports 9i server, then I could work on get buying it. But now it is zero possibility to buy it as corporate policy is to use websphere plus DB2/UDB.
    People who can sign the paper see the 9iAS, then immediately kill it. I did my best to save webforms plus Oracle database here. Now it is not possible to survive because Oracle policy and our corporate policy both kill them in a harmony way.
    Thanks a lot for your best tips.
    My office email: [email protected]
    John Feng

    In a world, Oracle did not put its developement elite members to work on forms/reports now, but it did in the early days, or forms/reports would not be accepted well then. Currently it's going to the worse direction, version changes and availability issues are the proof.
    Our management finally decided to kill Oracle forms/reports/Database for our corporate project I am supporting, and made project over-haul plan to use VAJ plus Websphere and UDB. The current forms6iCGI/Oracle database is under transition. I have been doing my best to contact Oracle to move it upgrade, but they don't care. Oracle database deal for our project is pretty much given to us free of charge, they just wanted to put a food in the IBM territory here. They did not make money here, but it helps their market share. Therefore they don't care us to scratch them.

  • Error installing Forms/Reports Server on linux m/c having EBS R12 installed

    Hi,
    We are trying to install Forms and Reports server (Oracle Application Server 10gR2 (10.1.2.0.2) Forms and Reports Services) on a linux x86 box. The box already has Oracle E-business Suite R12 running on it. Our end goal is to install Oracle Transport Management (OTM), which requires Oracle Forms and Reports server to run its reports. When installing Forms and Report server I am getting following error. During installation, I gave a different set of ports to be used by Oracle Forms/Reports Apps server (and not the default) in staticports.ini and ensured that those ports are available. Any idea what could be the issue. If the issue is due to port conflict, how do I find which is the conflicting port. Also, is it possible to re-use Oracle Applications' Forms/Reports server for other applications like OTM.
    Get the following error during installation of Oracle Application Server 10gR2 (10.1.2.0.2) Forms and Reports Services:
    . Please also check the logs located at
    ORACLE_HOME/dcm/logs to determine why DCM was unsuccessful in updating
    the configuration files on disk. Some possible causes are:
    * permissions on files
    * file contention issues on Windows NT
    * internal Oracle error
    After resolving the problem that prevented DCM from updating the configuration
    files, you may use the dcmctl resyncInstance command to resolve the problem.
    Alternatively, you can stop and then restart the active dcmctl or EMD
    process and resyncInstance will automatically be performed.
    Resolution:
    Base Exception:
    java.net.BindException
    Address already in use
    java.net.BindException: Address already in use
    at java.net.PlainSocketImpl.socketBind(Native Method)
    at java.net.PlainSocketImpl.bind(PlainSocketImpl.java:331)
    at java.net.Socket.bind(Socket.java:498)
    at java.net.Socket.<init>(Socket.java:307)
    at java.net.Socket.<init>(Socket.java:124)
    at oracle.ias.sysmgmt.clustermanagement.OpmnAgent.openOEMSSession(Unknown Source)
    at oracle.ias.sysmgmt.clustermanagement.OpmnAgent.openOEMSSession(Unknown Source)
    at oracle.ias.sysmgmt.clustermanagement.OpmnAgent.sendHTTPRequest(Unknown Source)
    at oracle.ias.sysmgmt.clustermanagement.OpmnAgent.getOpmnProcStatus(Unknown Source)
    at oracle.ias.sysmgmt.clustermanagement.OpmnAgent.getProcessStatus(Unknown Source)
    at oracle.ias.sysmgmt.clustermanagement.OpmnAgent.getComponentProcessStatus(Unknown Source)
    I do now have much experience on DBA side, so my question may be very basic, but pls bear with me.
    Thanks.
    Namit

    So ...
    After a lot of searches, it was necessary a help from a Weblogic Administrator to find out what was going on with the installation process. The problem was with the memory allocation to the Weblogic VM. The process EMGC_OMS1 could not be started cos it was not possible to create a VM into SERVERADMIN.
    With just my DB experience I could not find any logs besides emctl.log and that one that it's shown in OEM Installler interface. The Weblogic Administrator was browsing the HOME where the Weblogic was installed and he found logs that showed the error telling where the problem was. Even downloading the OEM 12c 32bit, it was allocated memory to the java as if it was 64bit. The solution was decreasing the values of memory and clicking in Retry. So, my OEM Cloud Control 12c it's working now.
    Regards
    Bruno Palma

  • Can Test Custom Jars with 6i Run Form - Client/Server?

    I want to test custom Jar files with Forms 6i from my desktop, but I cannot get the Run Form->Web to work. Is it possible for the run time to load the just jars for PJC when you do Run Form -> Client/Server? So far, when I have done this, it does not execute any PJC. Any ideas, tips?
    Thanks,
    Kurz

    Hi Kurz
    Any ideas, tips?pls have a look
    http://www.dulcian.com/papers/ODTUG/2004/ODTUG%202004_Balcu1_JavaBean.htm
    http://www.oracle.com/technology/sample_code/products/forms/extracted/getclientinfo/readme.html
    http://www.scribd.com/doc/1027764/Forms-6i-Deploying-Forms-Applications-to-the-Web-with-Oracle-Forms-Server
    Hope it helps u
    Regards,
    Abdetu...

  • Forms 6i Server and newest version of 9iAS

    Hi
    So far, I am using Oracle Forms 6i and 9iAS 1.0.2.0.0 to make forms run in web, as 9iAs brings itself the forms 6i server.
    I would like to know if I download and install the newest version of 9iAS (that comes with forms 9i) I will be able to run forms 6i as well, or it only runs forms 9i in web? Does it still brings forms 6i server? If not, how to install forms 6i server? It must be installed separatelly?
    Thanks!
    Luis Cabral

    You will have to have separate installs - running 6i forms under the latest version of iAS is not supported.

  • Form 6i server

    Hi
    Is anyone know from where I can download form 6i server , I have a cd of 6i developer but when try to install 6i form server
    It's display to me it's licencse , and I don't think It's could be installed.
    Is form 6i server a commercial product?

    You need the 6i version of Oracle Application Server Enterprise Edition (with Forms and Reports server). I very much doubt if there is still a download link for that version.
    If you only need to develop Forms, you don't need the OAS. That is only for production deployment. For development, the Developer Suite is enough.

Maybe you are looking for