Discuss September 2016

discuss@lists.centos.org

118 participants
96 discussions

CentOS 6.8 and samba
by isdtor 23 May '17

23 May '17

Other than the original 6.8 release version 3.6.23-33, samba has not been functioning correctly for me under 6.8. The symptoms are that about 6-7 days after starting the server, users start complaining that they can no longer open documents on their share. Upon inspection, I find several, sometimes nearly a dozen smb processes owned by a single user, on top of those run under root. Stopping the service does not stop these processes. They are only killable with SIGKILL, and after that, a service restart does not result in a functioning service, i.e. connections are refused, which can be verified easily with smbclient. The only cure is a server reboot. And it is not the same user id every time it happens. Useful logs of any type are not available. I have tested -35 and -36, both show the same behaviour. This is a production server and I have no time for tinkering; downgrading to -33 and blocking samba updates is the only workaround for now.

6 12

howto install yumex
by geo.inbox.ignored 07 Apr '17

07 Apr '17

greetings. trying to install yumex, but obviously have forgotten what i did previously to install packages. sudo yum install yumex* errors out with; No package yumex* available. please inform my chemo brain what is correct. tia. -- peace out. CentOS GNU/Linux 7.1511 tc,hago. g . =+= Tired of having your microsoft os hacked? Change to Linux os, used by microsoft hackers. =+= in a world with out fences, who needs gates. =+=

7 16

How to enable the svm cpu flag inside a vm?
by Leonard den Ottolander 03 Apr '17

03 Apr '17

Hello, I'm trying to get the Android Emulator to run inside a kvm vm on CentOS-6. Apparently the latest Android Emulators cannot run without hardware acceleration so I am trying to get the vm to see the svm cpu flag. Host: $ grep model\ name /proc/cpuinfo | sort -u model name : AMD Phenom(tm) II X4 965 Processor $ grep svm /proc/cpuinfo | sort -u flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt pdpe1gb rdtscp lm 3dnowext 3dnow constant_tsc rep_good nonstop_tsc extd_apicid pni monitor cx16 popcnt lahf_lm cmp_legacy svm extapic cr8_legacy abm sse4a misalignsse 3dnowprefetch osvw ibs skinit wdt npt lbrv svm_lock nrip_save $ cat /sys/module/kvm_amd/parameters/nested 1 I have tried copying the cpu options (Opteron_G3) in the host cpu configuration and setting the svm flag to either "model", "required" or "force" to no avail: $ ps waux | grep qemu qemu 7962 7.2 21.9 3722092 2680668 ? Rl 13:23 6:36 /usr/libexec/qemu-kvm -name C7-Android -S -M rhel6.6.0 -cpu Opteron_G3,+invtsc,+wdt,+skinit,+ibs,+osvw,+3dnowprefetch,+cr8legacy, +extapic,+cmp_legacy,+3dnow,+3dnowext,+pdpe1gb,+fxsr_opt,+mmxext,+ht, +vme -enable-kvm -m 3072 -realtime mlock=off -smp <snip> So the question is: How do I enable the svm flag in the guest? Regards, Leonard. -- mount -t life -o ro /dev/dna /genetic/research

4 7

I want to connect to a l2tp server from centos.
by Eliezer Croitoru 22 Mar '17

22 Mar '17

I have a server currently connecting to a pptp remote server. This server(lns\lac) has the option for pptp connections and l2tp connections. The l2tp connections are not using ipsec encryption at all. I have seen couple guides\tutorials on the internet: - https://raymii.org/s/tutorials/IPSEC_L2TP_vpn_on_CentOS_-_Red_Hat_Enterpris… - https://wiki.archlinux.org/index.php/L2TP/IPsec_VPN_client_setup But all the guides that I have found are using ipsec with "secret". On ubuntu there is a gui applet that helps setting these kind of connections up but I am working with a CentOS server and not Ubuntu desktop. If someone used l2tp the same way I want to use on CentOS 7 please give me some advice. If you have a guide which might help me I will be more then happy to see this one. Thanks, Eliezer

4 8

An 'orrible question: Outlook 365 under wine on CentOS?
by m.roth＠5-cent.us 21 Mar '17

21 Mar '17

Either CentOS 6 or 7 - anyone know if it's possible? Upper Management has decided on a policy that IMAP is going to go away in the near future, and they want everyone on Lookout, sorry, Outlook 365. mark, VMNH* * Very Much Not Happy

14 22

What is broken with fail2ban
by Günther J. Niederwimmer 02 Nov '16

02 Nov '16

Hello List, with CentOS 7.2 it is not longer possible to run fail2ban on a Server ? I install a new CentOS 7.2 and the EPEL directory yum install fail2ban I don't change anything only I create a jail.local to enable the Filters [sshd] enabled = true .... ..... When I start afterward fail2ban systemctl status fail2ban is clean But systemctl status firewalld is broken ● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled) Active: active (running) since Sa 2016-08-20 12:08:27 CEST; 4min 50s ago Main PID: 13158 (firewalld) CGroup: /system.slice/firewalld.service └─13158 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid Aug 20 12:12:23 yyyy.xxxxxx.at firewalld[13158]: 2016-08-20 12:12:23 ERROR: NOT_ENABLED Aug 20 12:12:24 yyyy.xxxxxx.at firewalld[13158]: 2016-08-20 12:12:24 ERROR: NOT_ENABLED Aug 20 12:12:25 yyyy.xxxxxx.at firewalld[13158]: 2016-08-20 12:12:25 ERROR: NOT_ENABLED Aug 20 12:12:27 yyyy.xxxxxx.at firewalld[13158]: 2016-08-20 12:12:27 ERROR: NOT_ENABLED Aug 20 12:12:27 yyyy.xxxxxx.at firewalld[13158]: 2016-08-20 12:12:27 ERROR: NOT_ENABLED Aug 20 12:12:28 yyyy.xxxxxx.at firewalld[13158]: 2016-08-20 12:12:28 ERROR: NOT_ENABLED Aug 20 12:12:29 yyyy.xxxxxx.at firewalld[13158]: 2016-08-20 12:12:29 ERROR: NOT_ENABLED Aug 20 12:12:30 yyyy.xxxxxx.at firewalld[13158]: 2016-08-20 12:12:30 ERROR: NOT_ENABLED Aug 20 12:12:31 yyyy.xxxxxx.at firewalld[13158]: 2016-08-20 12:12:31 ERROR: NOT_ENABLED Aug 20 12:12:31 yyyy.xxxxxx.at firewalld[13158]: 2016-08-20 12:12:31 ERROR: NOT_ENABLED Have any a Idea what is broken ? ipset, iptables, fail2ban ? -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer

3 4

How to block routing/forwarding with firewalld
by Jeff White 02 Nov '16

02 Nov '16

On CentOS 7 with firewalld I have a box with numerous interfaces acting as a NAT gateway. This works but I noticed that it routes/forwards traffic not just from my internal zone to external zone but also between interfaces within the internal zone. How can I prevent that traffic? I've tried adding direct and rich rules to deny the traffic but it doesn't work. Direct: firewall-cmd --direct --add-rule ipv4 filter INPUT 0 -s 10.110.4.0/22 -d 10.110.0.0/22 -j REJECT That command works, and I see it in `iptables -L` but traffic is still allowed. Rich: # firewall-cmd --zone=trusted --add-rich-rule='rule family=ipv4 source address=10.110.4.0/22 destination address=10.110.0.0/22 reject' Error: INVALID_RULE: destination action I can't find any explanation of what that error means. So, how do you tell firewalld to stop forwarding traffic between interfaces? # firewall-cmd --get-active-zones public interfaces: ens161 ens193 trusted interfaces: ens192 ens224 ens256 lo # firewall-cmd --list-all public (default, active) interfaces: ens161 ens193 sources: services: dhcpv6-client ssh ports: masquerade: yes forward-ports: icmp-blocks: rich rules: -- Jeff White HPC Systems Engineer Information Technology Services - WSU

3 2

Ordering rich rules with firewalld
by Jeff White 26 Oct '16

26 Oct '16

Is there any way to order rich rules in firewalld? If I remove all rules and add them back in firewalld seems to put them in whatever order it feels like. Alternatively, how can I change the default policy of a firewalld zone? At the moment I don't see any way to have a zone accept traffic by default other than adding a rich rule allowing 0.0.0.0/0. -- Jeff White HPC Systems Engineer Information Technology Services - WSU

5 4

CentOS-7-x86_64-GenericCloud.raw very unusual format
by Aliaksei Sheshka 15 Oct '16

15 Oct '16

Hello! Is anyone aware why CentOS-7-x86_64-GenericCloud.raw has such unusual format ? root@test-srv:~# wget http://cloud.centos.org/centos/7/images/CentOS-7-x86_64-GenericCloud.raw --2016-03-21 13:16:31-- http://cloud.centos.org/centos/7/images/CentOS-7-x86_64-GenericCloud.raw Resolving cloud.centos.org (cloud.centos.org)... 162.252.80.138 Connecting to cloud.centos.org (cloud.centos.org)|162.252.80.138|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 374668382 (357M) [application/x-gzip] Saving to: 'CentOS-7-x86_64-GenericCloud.raw' CentOS-7-x86_64-GenericCloud.raw 100%[=========================================================================>] 357.31M 12.9MB/s in 30s 2016-03-21 13:17:03 (11.9 MB/s) - 'CentOS-7-x86_64-GenericCloud.raw' saved [374668382/374668382] Download reports [application/x-gzip] for raw file And indeed root@test-srv:~# file CentOS-7-x86_64-GenericCloud.raw CentOS-7-x86_64-GenericCloud.raw: gzip compressed data, last modified: Sat Feb 27 02:14:37 2016, from Unix Ok, lets uncompress: root@test-srv:~# zcat -d CentOS-7-x86_64-GenericCloud.raw > CentOS-7-x86_64-GenericCloud.a And check again root@test-srv:~# file CentOS-7-x86_64-GenericCloud.a CentOS-7-x86_64-GenericCloud.a: POSIX tar archive (GNU) Ok. it's a tar archive. root@test-srv:~# tar -xf CentOS-7-x86_64-GenericCloud.a -v CentOS-7-x86_64-GenericCloud-1602.raw Now it's CentOS-7-x86_64-GenericCloud-1602.raw file which is indeed raw What is the point to pack single raw file into the tar.gz and to name it raw ? Or it's just a mistake ? Thanks!

8 16

Flash player beta
by isdtor 13 Oct '16

13 Oct '16

Has anyone tried the new flash player beta for Linux? http://labs.adobe.com/downloads/flashplayer.html I can't get it to work on CentOS 6.8, ff 45.3.0-1, all x86_64. ff's pluginreg.dat shows the plugin is [INVALID], which is often a sign of bitness-mismatch, but that's not the case here. $ tail -n 3 pluginreg.dat [INVALID] /usr/lib64/flash-plugin/libflashplayer.so:$ 1474541270000:$ $ file /usr/lib64/flash-plugin/libflashplayer.so /usr/lib64/flash-plugin/libflashplayer.so: ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, stripped $ strings /usr/lib64/flash-plugin/libflashplayer.so | grep FlashPlayer_23 FlashPlayer_23_0_0_179_FlashPlayer $ rpm -q firefox firefox-45.3.0-1.el6.centos.x86_64 $ I have it working on a different Linux system, not CentOS, with ff 48.0.1.

4 5

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss September 2016