Discuss March 2005

discuss@lists.centos.org

50 participants
42 discussions

OK. time to make some contribution (centos4/ppc)
by Pasi Pirhonen 31 Mar '05

31 Mar '05

Hi, Even now someone is actually installing (i see that from the ftp-server logs) the centos-4/ppc beta-version from announced place. You people have to stand up and _TELL_ me what kind of hardware _IS_ working, so we would know more than already know - 43p works. I can't believe that all those, who installs, does have 43p too? Please? Something, so if it's actually working on something else than already known 43p, we'd really like to hear about it. If it's not working, we'd still ike to hear about it as one can't fix anything not known to be broken. Someone something, so eventually there would be release? -- Pasi Pirhonen - upi(a)iki.fi - http://iki.fi/upi/

2 1

CentOS-2 errata
by John Newbigin 31 Mar '05

31 Mar '05

The following errata for CentOS-2 have been built and uploaded to the centos mirror: RHSA-2005:330-01 Important: krb5 security update Files available: krb5-devel-1.2.2-34.i386.rpm krb5-libs-1.2.2-34.i386.rpm krb5-server-1.2.2-34.i386.rpm krb5-workstation-1.2.2-34.i386.rpm More details are available from the RedHat web site at https://rhn.redhat.com/errata/rh21as-errata.html The easy way to make sure you are up to date with all the latest patches is to run: # yum update -- John Newbigin Computer Systems Officer Faculty of Information and Communication Technologies Swinburne University of Technology Melbourne, Australia http://www.ict.swin.edu.au/staff/jnewbigin

1 0

CentOS-announce Digest, Vol 1, Issue 2
by centos-announce-request＠centos.org 31 Mar '05

31 Mar '05

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CentOS-3 s390(x) errata: Important: krb5 security update (Pasi Pirhonen) 2. CentOS-3 i386 errata: Important: krb5 security update (Tru Huynh) 3. CentOS-3 x86_64 errata: Important: krb5 security update (Tru Huynh) 4. CentOS-3 x86_64 errata: Moderate: XFree86 security update (Tru Huynh) 5. CentOS-3 i386 errata: Moderate: XFree86 security update (Tru Huynh) 6. CentOS-3 s390(x) errata: Moderate: XFree86 security update (Pasi Pirhonen) 7. VERY Important: CESA naming conventions (donavan nelson) ---------------------------------------------------------------------- Message: 1 Date: Wed, 30 Mar 2005 15:15:57 +0300 From: Pasi Pirhonen <upi(a)iki.fi> Subject: [CentOS-announce] CentOS-3 s390(x) errata: Important: krb5 security update To: centos-announce(a)centos.org Message-ID: <20050330121557.GQ6734(a)core.upi.iki.fi> Content-Type: text/plain; charset="us-ascii" Security update for CentOS 3 s390(x) https://rhn.redhat.com/errata/RHSA-2005-330.html The following updated files have been uploaded and are currently syncing to the mirrors: s390: updates/s390/RPMS/krb5-devel-1.2.7-42.s390.rpm updates/s390/RPMS/krb5-libs-1.2.7-42.s390.rpm updates/s390/RPMS/krb5-server-1.2.7-42.s390.rpm updates/s390/RPMS/krb5-workstation-1.2.7-42.s390.rpm s390x: updates/s390x/RPMS/krb5-devel-1.2.7-42.s390x.rpm updates/s390x/RPMS/krb5-libs-1.2.7-42.s390x.rpm updates/s390x/RPMS/krb5-server-1.2.7-42.s390x.rpm updates/s390x/RPMS/krb5-workstation-1.2.7-42.s390x.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://iki.fi/upi/

5 4

RE: [CentOS] CentOS-announce Digest, Vol 1, Issue 2
by Marc Powell 31 Mar '05

31 Mar '05

> -----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf Of Collins Richey > Sent: Thursday, March 31, 2005 7:36 AM > To: CentOS mailing list > Subject: Re: [CentOS] CentOS-announce Digest, Vol 1, Issue 2 > > On Thu, 31 Mar 2005 08:33:42 -0500, Douglas E. Warner > <dwarner(a)ctinetworks.com> wrote: > > Admin, > > > > I appologize if I'm missing something, but I hadn't signed up for the > digest > > and can't find that it is currently enabled for my email address > > (dwarner(a)ctinetworks.com). I'd appreciate it if you could help me track > down > > where this is enabled. > > If it helps, this only started happening after the maillist conversion > to the > > new host. > > > > I'm getting them, too. My guess is that the conversion turned digests > on for everyone. Perhaps they'll post a howto to remove this. If not, > it's no big deal to hit the bix X once a day. Wasn't there an email yesterday indicating that a daily digest of the announce list was emailed here for the benefit of those who did not want to sign up for two lists? -- Marc

1 0

RE: [Centos] Restart centos from Commandline
by Vaneet Sharma 31 Mar '05

31 Mar '05

you need to learn business i think ) to create multi dollar business, you need ideas, a team of people, a vision and a risk. Try this what i said and may be if u become rich, drop me a thank you Lets drop the argument cos it will never end ( we both have different ways to look at things and hence compromise will never reach) have fun -----Original Message----- From: centos-bounces(a)centos.org on behalf of Aleksandar Milivojevic Sent: Wed 3/30/2005 10:59 PM To: CentOS mailing list Cc: Subject: Re: [Centos] Restart centos from Commandline Vaneet Sharma wrote: > Well, regarding creating multi billion dollar business, you dont have to know everything I was just trying to be a bit funny. But it seems I wasn't as funny as I thought I was ;-) > You just need to know what is needed to make and create multi billion dollar business. That one is easy. To create multi billion dollar business you need money. Because only money can create more money. Everyting else is small details that will be taken care of by people who will never profit from the business itself. Just look at Microsoft, at the beggining you had one guy who had more money than he could ever possibly need, and he become even richer because he was rich to begin with. On the other side you had bunch of developers whose wealth is constantly at about the same level (not that I feel sorry for them looking at the final product). Simple, easy, clean ;-) Point of the story? If you have money, you don't need to reboot servers to create more money ;-) -- Aleksandar Milivojevic <amilivojevic(a)pbl.ca> Pollard Banknote Limited Systems Administrator 1499 Buffalo Place Tel: (204) 474-2323 ext 276 Winnipeg, MB R3T 1L7 _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos Vaneet Sharma executive manager iDeasTank Limited an iwg business dolphins' court po 388 valletta, m-malta/europe mobile: +356 9943 8263 skype: CALLVANEET fax: +356 9952 8888 phone: +356 9942 8888 vaneet(a)iwg.info call me on www.skype.com - my ID is CALLVANEET Want a signature like this? - www.plaxo.com\signature iwg is a global e-mobile company creating, building and growing new businesses. iwg founders are pioneers in creating multi-billion dollar mobile and Internet businesses in Europe, Asia and the US. www.iWG.info www.countryprofiler.com/iWG www.visitmalta.com www.mfc.com.mt Privileged/Confidential Information may be contained in this message. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone. In such case, you should destroy this message and kindly notify the sender by reply email.

1 0

RE: DHCPd Config or HOW-TO on DNS + DHCP + SQUID +Firewall + Router
by Stanley Langa (ST) 31 Mar '05

31 Mar '05

I thought I'd share this with you guys:- Been working/testing on the DEV release of SME7a3 based on CenTOS (on VMWARE), see contribs.org. Pretty neat I must say, most daemons (DNS, DCHP, SMB-PDC, LDAP, IMAP, POP, Web Admin) are preconfigured. I've got phpGroupware, WebERP, KnowledgeTree + other running on the same box (VMWARE). I've always had a challenge with manually configuring listeners etc and this has saved me hours/days on the Development I'm working on.' Cheers, Stanley "The only stupid question is the one never asked", "As one thinketh in his heart, so is he" Shakespeare ================================================================== This e-mail and its contents are subject to the Telkom SA Limited e-mail legal notice available at http://www.telkom.co.za/TelkomEMailLegalNotice.PDF

1 0

Re: [Centos] RFE: Please create a announcement mailing list
by Lance Davis 31 Mar '05

31 Mar '05

On Thu, 24 Mar 2005, Bernd Bartmann wrote: > On Thu, 24 Mar 2005 12:21:55 -0600, Johnny Hughes > <mailing-lists(a)hughesjr.com> wrote: > > On Thu, 2005-03-24 at 19:12 +0100, Bernd Bartmann wrote: > > > > > BTW: The announcement list is not being mentioned at > > > http://www.centos.org/modules/tinycontent/index.php?id=16. > > > > > > > Exactly ... (meaning, it is not officially in use yet :)) > > Ok, when we're already discussing the update/errata announcements here > are some more things to consider: > > 1. all announcements should be GPG signed by a central CENTOS key no - they are signed by individual keys that have been signed by a central centos key. > 2. md5sums and/or sha1sums should be listed next to each rpm filename > 3. the announcements should be a little more verbose (include > ChangeLog, release date, obsoletes, advisory id, ...). Use the RHES or > Fedora announcements as templates > 4. a web-site like https://rhn.redhat.com/errata/rhel4es-errata.html > should be created and are you volunteering ?? Regards Lance -- uklinux.net - The ISP of choice for the discerning Linux user.

2 1

VERY Important: CESA naming conventions
by donavan nelson 31 Mar '05

31 Mar '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 (sorry about the cross post, this is vital information to get out) The following naming conventions have been established for posts to the CentOS-announce mailing list. The purpose is to ensure uniformity across products, architectures, releases etc. This will allow easier and simpler automated CESA (CentOS Errata and Security Advisory) processing by end users. === CentOS-announce Subject Construction Guidelines for Errata and Product Announcements ~ For Errata Postings (all one line) ~ Subject: [CentOS-announce] CESA-$NUMBER: $priority CentOS $release $arch $package - $brief_description ~ First Line of Message: CentOS Errata and Security Advisory $NUMBER ~ where: ~ $NUMBER: use $RH_NUMBER if the matter is a result ~ of a RH?A, if not, YYYY-MMDD-SEQ ~ where: ~ YYYY-MMDD -- is in UTC, ~ SEQ is an increasing 3 digit number starting ~ at 000 each day, for the time being SEQ ~ numbers will be stored on the master mirror ~ in /centos/centos-cesa.txt. Developers ~ posting errata with a $NUMBER that is ~ CentOS errata will need to check the file for ~ an existing number for a given problem or ~ create a new number and add it to the file. ~ $priority: follows RH levels ~ $release: one of 4, 3, or 2 ~ For Product Releases (all one line) ~ Subject: [CentOS-announce] Release Announcement: $name $version $arch Note: [CentOS-announce] is automatically added by mailman. Note: All official announcements should be signed by your CentOS ~ signed key. Note: Not all $variable's are described above. === -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFCS3ynCRFXD+VcGBkRAm8YAKCEvaazYDK97s1Q+iGWah8bFdVb9QCfaEcb HGdUPF4vB4TAugFjXG3D24U= =sOE8 -----END PGP SIGNATURE-----

1 0

Re: [Centos] Mounting Netware Volumes
by Paul 31 Mar '05

31 Mar '05

On Thu, 2005-03-24 at 19:33 -0600, Paul wrote: > On Tue, 2005-03-22 at 22:22 -0600, Paul wrote: > > I have one last RH 7.3 system that I want to convert to CentOS 4, but I > > can't find the ncpfs utilities that I used to use to mount Netware > > shares. > > > > Has support been removed from the 3.x and 4? > > Well I dug though the RH's site and in the release notes for AS 3.95 ite > mentionsed that ncpfs has been deprecated. I can't find the release > notes for 4, but assume that they must have removed support in the > kernel along with the package. > > It looks like I've reached a dead-end unless I want to build a custom > version of the kernel for this workstation each time a new one comes > out. That looks to be more work than continuing with it as it is and > using fedoralegacy updates. > > Anybody have other ideas? > Well I modified the script and spec file at http://linux- ntfs.sourceforge.net/rpm/build.html to build rpms for the ncpfs module I'm still cleaning up the cruft that is not needed and will post them here if anybody is interested. Paul Berger

1 0

CentOS as an internet gateway
by ryanag＠zoominternet.net 31 Mar '05

31 Mar '05

I would add the below: -Recommend using CentOS 4.0 -Use squid rpm, no tar (this is for new users I'm guessing). -Recommend using etherape and iptraf (available as rpms) for a graphical overview of traffic. http://etherape.sourceforge.net/ -Recommend the use of chkrootkit, and TCP Wrappers (at the least put ALL: ALL EXCEPT PARANOID in /etc/hosts.allow) to protect servers. -Provide some information about how to protect the whole network from spyware with the /etc/hosts file (a nice side benefit from doing DNS proxy). http://www.mvps.org/winhelp2002/hosts.htm -A *huge* disclaimer on running squid on a machine with a public interface. -Consider using webmin to manage this outside a GUI. -fwlogwatch can parse log files nicely. http://fwlogwatch.inside- security.de/ Biggest issue I have with your setup: -I wouldn't use Guard Dog as the GUI setup - it is very nice, but inflexible and not really meant for what you are doing. Try kmyfirewall instead if you want a GUI for iptables. It offers near complete control of iptables functions. If you can get along with using webmin, try shorewall. *If* this is going to be in a bigger than SOHO (+ 30 PC) network, go with shorewall. Just my $.02, good luck with the site, it'll help a lot of people. :-) On Wednesday 30 March 2005 13:27, Seth Bardash wrote: > To the list: > > HOW-TO on DNS + DHCP + SQUID + Firewall + Router > > Since this seems to be a recurring topic: > > Thought you might be interested in a working set up of > DNS + DHCP + SQUID + Firewall + Router machine that took > quite an effort to get working but now runs flawlessly. > > Don't get discouraged. This takes some time to set up > correctly but once you get through it - it works great! > > Remember: tcpdump is your friend!!!! > > Anyone having a network internally that needs these > features should continue reading: > > We set up a new firewall based on CentOS 3.3. (3.4 should work fine) > > We needed it to serve many protocols internally. > > The specifications for it are: > > NOT Microsoft based > (We are a MS Partner with all the software but I wanted something that was > MS virus proof) > > KDE Graphical Firewall Control > External Internet LAN Port x 1 > Internal Networks x 2 (more can be added) -> we used 192.168.0.X and > 192.168.1.X > DNS Name Caching Server - internal and external, forward and reverse > lookups DHCP Server that does ddns-update internally > Squid Server > IP Masqerading > Routing between all networks > > Hardware: > > OLD P3-800 Based System (Only non AMD system we run) > 3 x Intel Pro 100 NIC's (We have a big box of these) > 1GB SDRAM > 40GB IDE Disk > CDROM Drive > Floppy > Standard PC Case with extra cooling and 400 w ps. > > This hardware is overkill as it never runs above 30% load. > Any machine supported by Centos with > 600 MHz CPU and 512M Memory should > do. > > Software: > > Centos 3.3 Full Install (Lessens the chance of missing packages) > > Guarddog Firewall RPM for Centos > (http://centos.hughesjr.com/3/guarddog/RPMS/) > Guidedog router/masqerader RPM for RH9 (works fine) > (http://www.simonzone.com/software/guidedog/guidedog-1.0.0-1_rh9.i386.rpm) > > Squid source tar ball. > > First install Centos and set it for a KDE graphical boot up. > Turn off all services not used > Leave Iptables on but turn off IP6tables > > Then Install Guarddog > Then install Guidedog > Configure both of the above - read the instructions for these carefully. > - questions for these should go to the writer > or his mail forum > - Make sure to enable DHCP for eth1 and eth2 > BUT NOT eth0 (external LAN NIC) > > Make sure you can see the internet from the inside LANs with the clients > set to use static IPs. > > NEXT --- > > Please read the instructions on how to set up DHCP and bind(DNS) here: > > http://integratedsolutions.org/downloads/DHCP-DDNS.txt > > Read this multiple times and make sure you understand it! > > Cut and paste can be an enemy. Be careful which editor you use > > > This set up allows us to have any number of machines on our internal > network automagically connected to each other and the internet with all the > IP information coming from our firewall / router / masquerader / squid > server. > > It works for forward and reverse DNS internally for Windows and linux > clients and servers. > > It also speeds up client internet traffic by caching most outside pages. > > Install squid per the INSTALL in the src tar ball and > add a startup entry to either chkconfig or rc.local. > We set it to use 5 GB of disk cache and start > automatically at boot time. We used the standard proxy port. > > We configured squid using webmin and this works fine. > > We added Webmin just to see how well it works: > It can break DNS and DHCP easily if you are not careful but it was helpful > getting squid working. > > Read up on syslogd and change the config file (or use webmin) to rotate > logs every day and keep 7 to 14 old logs for back checking purposes. This > will limit log size and make it easier to find any problems. > > Your milage mary vary. > > Standard software disclaimer applies. > > If this is helpful drop me an email so I know. > > If this needs work drop me an email with specifics. > > We will be adding a knowledgebase to our website with complete instructions > for this in the next few weeks. > > Best > > Seth Bardash > > Integrated Solutions and Systems > > seth(a)integratedsolutions.org > > 719-495-5866 > > Failure can not cope with perseverance!

2 2

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss March 2005