Discuss June 2017

discuss@lists.centos.org

90 participants
76 discussions

Domain Logout, then domain login again, profile corrupt -> replaced by TEMP profile
by Jobst Schmalenbach 07 Jun '17

07 Jun '17

Hi I have had this problem for a while, but waited to post this until I upgraded to see whether the upgrade would fix it. I upgraded samba to the 4.2.X stream from 3.6.X stream, but it happens on both, 3.6.X and 4.2.10. Whenever someone logs out, then in again the profile gets corrupted and a new TEMP profile is created (the dreadful "creating new desktop"). Now I do not know where this problem is - the desktop or the server. It also happens if you wait 1/2 hour or so, never tried it longer. I can quickly fix this by: - tell the user to log out - rsync -avHAX the profile with yesterdays profile - tell the user to log in again Now if I log out on my workstation, then on the server I do a "smb reload", then log in again this problem does not happen. This morning a person logged out of his workstation, went over to the bigscreen in one of our training rooms and logged in there, then logged out, went over to his machine but got the dreadful "preparing desktop" on login .... Anybody got any idea? thanks Jobst Here is some info: ~~~~~~~~~~~~~~~~~~ All latest patches installed on everything. OS server: CentOS 6.X OS Workstations: Windows 7 Prof Samba: 4.2.10 (was 3.6.23) Other: roaming profiles (as we log into other stations, e.g. training rooms) smb.conf (important bits): [global] workgroup = LALA server string = Domain Server netbios name = LALAMACHINE username map = /etc/samba/smbusers interfaces = eth0, lo bind interfaces only = yes # these flags were recommended. socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE SO_RCVBUF=131072 SO_SNDBUF=131072 # Logging, what, how much, etc log level = 1 syslog = 0 log file = /var/log/samba/samba.log max log size = 10000000 # Auditing vfs objects = full_audit full_audit:prefix = %u|%I|%m|%S full_audit:failure = none full_audit:facility = LOCAL4 full_audit:priority = NOTICE full_audit:success = none full_audit:failure = none idmap config *: backend = tdb idmap config *: range = 1000000-1999999 idmap config LALA : default = Yes idmap config LALA : backend = <idmap backend> idmap config LALA : range = 500-999999 winbind use default domain = Yes winbind nested groups = Yes winbind normalize names = no # domain stuff logon script = user.cmd logon path = \\lalamachine\profiles\%u logon drive = Z: logon home = \\lalamachine\%u\samba-homeshare domain logons = Yes os level = 200 domain master = Yes dns proxy = No wins support = Yes security = user encrypt passwords = Yes hosts allow = 192.168.0., 127. guest account = nobody usershare allow guests = No # printer setup load printers = Yes printing = cups printcap name = cups printcap = cups printcap cache time = 750 cups options = raw read raw = yes write raw = yes oplocks = yes max xmit = 65535 dead time = 15 getwd cache = yes # Samba implements the CIFS UNIX unix extensions = no [netlogon] comment = Network Logon Service path = /samba/NetLogon browseable = Yes guest ok = yes admin users = root full_audit:success = none full_audit:failure = none # this is required for log files to be written to read only = No write list = @lalausers, @lalaadmins [profiles] comment = Roaming Profile Share path = /samba/Profiles/ read only = No create mask = 0600 directory mask = 0700 browseable = yes # you MUST disable caching on shares that have roaming profiles stored csc policy = disable guest ok = no valid users = @lalausers, @lalaadmins admin users = root store dos attributes = yes profile acls = yes full_audit:success = none full_audit:failure = none -- Keyboard not found - please clean up desktop! | |0| | Jobst Schmalenbach, jobst(a)barrett.com.au, General Manager | | |0| Barrett Consulting Group P/L & The Meditation Room P/L |0|0|0| +61 3 9532 7677, POBox 277, Caulfield South, 3162, Australia

1 1

weird SELinux denial
by Vanhorn, Mike 06 Jun '17

06 Jun '17

I keep seeing this in my audit.logs: type=AVC msg=audit(1496336600.230:6): avc: denied { name_connect } for pid=2411 comm="dbus-daemon" dest=111 scontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:portmap_port_t:s0 tclass=tcp_socket Was caused by: The boolean allow_ypbind was set incorrectly. Description: Allow system to run with NIS Allow access by executing: # setsebool -P allow_ypbind 1 The weirdness is that when I check allow_ypbind, it’s already on: # getsebool allow_ypbind allow_ypbind --> on # Does anyone with more experience with SELinux than me have any idea why this is happening? --- Mike VanHorn Senior Computer Systems Administrator College of Engineering and Computer Science Wright State University 265 Russ Engineering Center 937-775-5157 michael.vanhorn(a)wright.edu

2 6

Disabling user list in Gnome
by Daniel Ruiz Molina 06 Jun '17

06 Jun '17

Hello, how can I disable user list that has been logged, at least, one time into X environment in Gnome running Centos 7? Thanks.

2 1

CentOS-announce Digest, Vol 148, Issue 2
by centos-announce-request＠centos.org 06 Jun '17

06 Jun '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEEA-2017:1388 CentOS 7 kmod-redhat-i40evf Enhancement Update (Johnny Hughes) 2. CEEA-2017:1388 CentOS 7 kmod-redhat-i40e Enhancement Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 5 Jun 2017 14:31:40 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2017:1388 CentOS 7 kmod-redhat-i40evf Enhancement Update Message-ID: <20170605143140.GA48572(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2017:1388 Upstream details at : https://rhn.redhat.com/errata/RHEA-2017-1388.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: b28b4ff3b0afadb7c7b0f42ec738f7b9c71ad53cac2450a2358c0ad4ae5ac848 kmod-redhat-i40evf-1.6.27_k_dup7.3-1.el7_3.x86_64.rpm Source: f1294299b43cdb3096d30db51f3d82974c9ff5b36301280aebc617d02e1017f1 kmod-redhat-i40evf-1.6.27_k_dup7.3-1.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Mon, 5 Jun 2017 14:32:32 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2017:1388 CentOS 7 kmod-redhat-i40e Enhancement Update Message-ID: <20170605143232.GA48656(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2017:1388 Upstream details at : https://rhn.redhat.com/errata/RHEA-2017-1388.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: fc4079f76e3fb6e8d1fce4f0320b7d426d31d97abe170e0cd8c271e6b03ffc9b kmod-redhat-i40e-1.6.27_k_dup7.3-1.el7_3.x86_64.rpm Source: 7f4a6d484065c10c89d2f5e23ba6517eddd512174d70bcb560b48234f074f65e kmod-redhat-i40e-1.6.27_k_dup7.3-1.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 148, Issue 2 ***********************************************

1 0

more recent perl version?
by hw 06 Jun '17

06 Jun '17

Hi, are there packages replacing the ancient perl version in Centos 7 with a more recent one, like 5.24? At least the state feature is required.

13 34

C7 ansible 2.3 become_method: su not working
by Mark Haney 05 Jun '17

05 Jun '17

I just don't know what else to try. I've beat my head on this for 3 days now and it's becoming obvious that either Ansible 2.3 is a complete disaster, or the CentOS 7 package is a complete cluster. Here's my problem. I am working on getting an ansible server to manage about 100 or so CentOS 6 servers. All have an unprivileged user account setup (up to 3 years before I got here in April) but that user account isn't setup with sudo access. The way to get to root is 'su'. I'm not a newbie with Ansible as I used it extensively in my previous position to manage ~70 or so Ubuntu servers. The Ansible is CentOS 7. I'm working on getting Ansible to play nice with privilege escalation using SU and NAFT has worked. Here's an example (very simple) playbook: Because I'm having to use 'su' I have to either add the user password to the inventory file or use the --ask-become-pass parameter to the command line. Every time I do, I get this: [root@ansible ~]# ansible-playbook playbooks/radtest.yml --ask-become-pass SUDO password: It bombs timing out on privilege escalation. Every single time. I'm absolutely frustrated and am almost ready to throw ansible to the curb for something that doesn't suck so bad. But before I do, I'm asking the list, anyone seen anything like this before? I could post to the ansible list, but it's a google group and God knows when I might get a reply. BTW, setting up root with key-only auth is an option, but would be a real PITA to configure 100+ external servers by hand with the keys and reconfig sshd for it.

2 2

CentOS 7 install: closest mirror not supported?
by Jos Vos 05 Jun '17

05 Jun '17

Hi, Do CentOS 7 installs not automatically use a closest mirror for installing like Fedora does, or is that due to the way I'm starting the install (virt-install)? Background: I'm trying to find the best way to do installs using basic local media (network install, but *without* the need to download the squashfs.img for every install) but without a full local mirror. On Fedora (25), it works fine using a local boot.iso (virt-install -l), but with CentOS 7 you then have to manually enter a repository URL. I also tried a local kernel/pxeboot tree with LiveOS/squashfs.img (the latter similar to Fedora's install.img?) with no result. Cheers, -- -- Jos Vos <jos(a)xos.nl> -- X/OS Experts in Open Systems BV | Office: +31 20 6938364 -- Amsterdam, The Netherlands | Mobile: +31 6 26216181

2 3

MySQL on Centos 7 (armv7)
by Leon Vergottini 04 Jun '17

04 Jun '17

Dear Community I am trying to install MySQL 5.6 on a Raspberry PI 3B. Using my normal procedure by downloading the yum repo rpm and installing MySQL through that is not working. There is no rpm information for arm7. Can anyone please point me in a direction where I can find a procedure on how to install MySQL 5.6 on Centos 7 running on a PI3? Kind Regards, Leon

3 2

Upgrade 6 to 7
by Jerry Geis 03 Jun '17

03 Jun '17

I found this site https://wiki.centos.org/TipsAndTricks/CentOSUpgradeTool Is this still the case - there is no upgrade path from 6 to 7 ? I have a few remote servers I'd like to upgrade (if possible). Thanks, Jerry

4 3

yum install <olderversion> does not downgrade
by Anand Buddhdev 03 Jun '17

03 Jun '17

We're using ansible to configure our CentOS 6 servers, and we have a task to install a specific version of a package: - name: install thrift2 yum: name=ripencc-thrift2-{{ version }} In this ansible task, the "version" variable is set by the operator. When we want to upgrade, it works. But today we had to downgrade, and noticed that ansible wasn't downgrading it. So we tried by hand (the installed version was 1.0.8): # yum install ripencc-thrift2-1.0.3 I don't have the output handy, because a colleague was working on it, but basically, yum said something like "package already installed" and refused to downgrade it, even though the package is in our repository. I have a strong sense that yum _used to_ downgrade packages if asked to install an older version, but perhaps I am misremembering. Nevertheless, I want to ask: is this a bug in yum? If asked to install a specific version, should it not upgrade OR downgrade as needed? Regards, Anand

4 4

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss June 2017