Discuss July 2005

discuss@lists.centos.org

190 participants
231 discussions

Backup Server with rsync methods
by scott 08 Jul '05

08 Jul '05

Hi guys: I'm about to migrate a sever to a managed server facility. I've alwau=ys used tape to backup my server, now that's not an option. I've read abut using rsync to do backups and have several scripts to do same. I believe rsync is a good solution. I am missing some important nuiances though... I would like to have essentially a "mirror" server at my facility ( call it "master") that I can backup to, and from, completely from the other server (call it "hosted"). Obviously I have to have at least different IP addresses on "master" and "hosted", but other than that, I'd like them to be mirrors of each other. I would like to do all my configs, setup, etc. at my leisure on "master", where I have hands on control, then when ready, have "hosted" setup with a basic Centos server install, then configure it to rsync to my "master" and update the entire thing (updates and all) to my "master". 1. Which files tdo I need to exclude to avoid IP address and hostname changes? 2. What caveats do I need to be aware of? Are there other files such as 'live" libraries that I cannot sync to? 3. The "master" server at my facility and their server may have different hard drive architecture (i.e. IDS and SCSI drives, different processor, etc.). As long as I use a generic Kernel (i.e. stock) that supposts the hardware on both, this shoudl not be a problem, right? 4. Am I missing something, is there a better way? Thanks, Scott

5 4

CentOS-announce Digest, Vol 5, Issue 3
by centos-announce-request＠centos.org 08 Jul '05

08 Jul '05

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2005:564 Important CentOS 3 ia64 php - security update (Pasi Pirhonen) 2. CESA-2005:564 Important CentOS 4 ia64 php - security update (Pasi Pirhonen) 3. CESA-2005:564 Important CentOS 3 i386 php - security update (Tru Huynh) 4. CESA-2005:564 Important CentOS 3 x86_64 php - security update (Tru Huynh) 5. CESA-2005:564 Important CentOS 4 i386 php - security update (Johnny Hughes) 6. CESA-2005:564 Important CentOS 4 x86_64 php - security update (Johnny Hughes) 7. CESA-2005:564 Important CentOS 3 s390(x) php - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Thu, 7 Jul 2005 23:36:04 +0300 From: Pasi Pirhonen <upi(a)iki.fi> Subject: [CentOS-announce] CESA-2005:564 Important CentOS 3 ia64 php - security update To: centos-announce(a)centos.org Message-ID: <20050707203604.GA23950(a)core.upi.iki.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2005:564 https://rhn.redhat.com/errata/RHSA-2005-564.html The following updated files have been uploaded and are currently syncing to the mirrors: files: updates/ia64/RPMS/php-4.3.2-24.ent.ia64.rpm updates/ia64/RPMS/php-devel-4.3.2-24.ent.ia64.rpm updates/ia64/RPMS/php-imap-4.3.2-24.ent.ia64.rpm updates/ia64/RPMS/php-ldap-4.3.2-24.ent.ia64.rpm updates/ia64/RPMS/php-mysql-4.3.2-24.ent.ia64.rpm updates/ia64/RPMS/php-odbc-4.3.2-24.ent.ia64.rpm updates/ia64/RPMS/php-pgsql-4.3.2-24.ent.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://iki.fi/upi/

1 0

Dual booting centos 4.1 and Solaris 10 express build 15
by mohamed yusuf 08 Jul '05

08 Jul '05

I have been trying to multiboot centos 4.1 and the current solaris express build 15. I have two hard drive s, the first one ( hd0 ) devoted to CentOS 4.1 and windows xp (no problems). The second drive (hd1) for Solaris 10 only. I tried to boot solaris from CentOS grub and got the following error messages: Booting Solaris 10 root(hd1,0) Filesystem type unknown, partition type 0Xbf kernel /platform/i86pc/multiboot Error 17: can not mount selected partition press any key to continue.... I googled for error 17 and found out that "the partition exists but grub failed to recognize Solaris partition". That is odd because I had no problems triple booting windows,CentOs 4.1 and opensolaris build 16 and I don't get it, there is no partition difference between opensolaris 10 and solaris express. or is there ? Please somebody explain to me. Here is menu.lst for centos grub # grub.conf generated by anaconda # # Note that you do not have to rerun grub after making changes to this file # NOTICE: You have a /boot partition. This means that # all kernel and initrd paths are relative to /boot/, eg. # root (hd0,5) # kernel /vmlinuz-version ro root=/dev/hda7 # initrd /initrd-version.img #boot=/dev/hda default=0 timeout=5 splashimage=(hd0,5)/grub/splash.xpm.gz hiddenmenu title CentOS (2.6.9-11.106.unsupported) root (hd0,5) kernel /vmlinuz-2.6.9-11.106.unsupported ro root=LABEL=/ rhgb quiet initrd /initrd-2.6.9-11.106.unsupported.img title CentOS (2.6.9-11.EL) root (hd0,5) kernel /vmlinuz-2.6.9-11.EL ro root=LABEL=/ rhgb quiet initrd /initrd-2.6.9-11.EL.img title Solaris 10 root (hd1,0) kernel /platform/i86pc/multiboot module /platform/i86pc/boot_archive makeactive chainloader +1 title Windows xp rootnoverify (hd0,0) chainloader +1 Note: This is my first post and I have learned a lot from your forum since I moved from mandrake 3 months ago. Thanks alot guys __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

3 3

ftp daemon problem
by Jeff Lasman 08 Jul '05

08 Jul '05

New install of CentOS 4.1; our first try at the 4.x. On previous 3.x installs we've used proftpd. On this one we're using (trying to use is a better statement of what we're going through) the default daemon, /usr/sbin/vsftpd. But we don't get anywhere. <snip> ftp> passiv Passive mode off. ftp> put ~/xorg.conf.work local: /home/jlasman/xorg.conf.work remote: /home/jlasman/xorg.conf.work 200 PORT command successful. Consider using PASV. 553 Could not create file. </snip> and <snip> ftp> pass Passive mode on. ftp> put ~/xorg.conf.work local: /home/jlasman/xorg.conf.work remote: /home/jlasman/xorg.conf.work 227 Entering Passive Mode (65,58,240,217,174,30) ftp: connect: Connection timed out </snip> When we turn off our firewall (which allows passive under CentOS 3 on a 2.4 kernel) we don't get the connection timeout on passive transfers, but we still get the 533. Any ideas where we should go from here? Perhaps install proftpd? I'm willing to, but I shouldn't have to. Thanks. Jeff -- Jeff Lasman, Nobaloney Internet Services 1254 So Waterman Ave., Suite 50, San Bernardino, CA 92408 Our blists address used on lists is for list email only Phone +1 909 266-9209, or see: "http://www.nobaloney.net/contactus.html"

2 3

Re: [CentOS] ftp daemon problem
by Jeff Lasman 08 Jul '05

08 Jul '05

On Thursday 07 July 2005 12:36 pm, someone wrote offlist: > how is the user logging in -- what username? and what are the > ownerships and permissions on /home/jlasman/ ? The user on my local desktop is jlasman. /home/jlasman is myself as a local user on my desktop system. Which is Mandriva 2005 LE. But I don't think that should matter. The remote server (running CentOS 4.1) user is test, set up as a standard user with adduser and passwd. But I did change the the default shell to "nologin". However nologin IS listed in /etc/shells, so my understanding is it should work. The file I tried to transfer is: -rw-rw-r-- 1 jlasman jlasman 2505 Jun 27 15:34 xorg.conf.work The permissions for /home/jlasman are: drwxr-xr-x 33 jlasman jlasman 4096 Jul 6 22:07 /home/jlasman/ Any help appreciated. (Though I know you wrote me offlist, the questions are good and helpful and I can only hope you won't mind my responding onlist in an attempt to get as much help as possible.) Thanks in advance. Jeff -- Jeff Lasman, Nobaloney Internet Services 1254 So Waterman Ave., Suite 50, San Bernardino, CA 92408 Our blists address used on lists is for list email only Phone +1 909 266-9209, or see: "http://www.nobaloney.net/contactus.html"

2 2

DHCPd Config
by Joao Medeiros 07 Jul '05

07 Jul '05

I've read a number of articles, googled the web for a few months and now attempting at turning my CentOS box into a gateway for the third time. Configured my dhcpd.conf and other related files and all seems to be working, I can have my M$ desktop leasing an ip address and all. The problem is when I want to go out to the internet I keep on getting the Request Timed out error. I'm pretty sure I've followed the manuals to the letter. The hardware is working fine. Any clues or pointers would be very much appreciated. TIA, Joao

11 19

Kickstart-based Install, editing comps.xml, hdlist/hdlist2
by dan.trainor 07 Jul '05

07 Jul '05

Hello, all - I've been throwing the question around on the kickstart-list for the last few days here, and can't quite get ahold of things. Please, allow me to explain. I am in the process of making a custom CentOS/RHEL kickstart install. It works well right now; however, it's a hackjob, and I am not comfortable with it as of yet. For the past few days, I've even gone as far as making a custom comps.xml file, for the purpose of the kickstart. What I'd like to do is not include any @groups or -/+files in my kickstart file; rather, I'd like to edit comps.xml's @Base and @Core so that I need nothing else in my kickstart file, except for the configuration options. I know that this isn't required, I'm just anal about the whole situation ;) This would also give me a chance to package, along with my install, newer and updated packages/RPMs so that I don't have to run an update process on the newly installed machine. My understanding is, if this is done, a new base/hdlist{2} file{s} is/are needed to be created. I've read around a bit, and apparently I'm supposed to use a tool named "genhdlist", but I've not been able to find any documentation on this tool, what exactly it does, and how exactly to use it. I'm expressing my frustration, along with many other people who have been in the same situation, as seen from the kickstart-list. I guess what I'm asking for, is if someone has ever made a completely custom kickstart install that does the following: 1) edits comps.xml to modify @base and @core 2) takes newer packages into consideration 3) compiles this information, creates new hdlist{2} reference files 4) gets the mother to work. This seemingly simple process seems to lack a bit of documentation. I ahve found sniplets all over the 'net where it would show a small process of how to get all this done, however, the author fails to document the utility or method in detail, or the process is for something totally archaic such as RH6.2. Any help would be greatly appreciated. Thanks! -dant

3 5

CentOS-announce Digest, Vol 5, Issue 2
by centos-announce-request＠centos.org 07 Jul '05

07 Jul '05

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2005:569 Important CentOS 4 ia64 zlib - security update (Pasi Pirhonen) 2. CESA-2005:569 Important CentOS 4 i386 zlib - security update (Johnny Hughes) 3. CESA-2005:569 Important CentOS 4 x86_64 zlib - security update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 6 Jul 2005 17:58:06 +0300 From: Pasi Pirhonen <upi(a)iki.fi> Subject: [CentOS-announce] CESA-2005:569 Important CentOS 4 ia64 zlib - security update To: centos-announce(a)centos.org Message-ID: <20050706145806.GA23921(a)core.upi.iki.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2005:569 https://rhn.redhat.com/errata/RHSA-2005-569.html The following updated files have been uploaded and are currently syncing to the mirrors: files: updates/ia64/RPMS/zlib-1.2.1.2-1.1.ia64.rpm updates/ia64/RPMS/zlib-devel-1.2.1.2-1.1.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://iki.fi/upi/

1 0

Yum Update issues
by William Warren 07 Jul '05

07 Jul '05

I get this when i try to yum update: http://mirror.centos.org/centos/4/updates/i386/repodata/primary.xml.gz: [Errno -1] Metadata file does not match checksum Trying other mirror. Error: failure: repodata/primary.xml.gz from update: [Errno 256] No more mirrors to try. I have done yum clean all with no joy. I have two servers with CentOS-4.1 and both are exhibiting htis issue. I have not made any changes to my yum configuration. Here is my Yum configuration. First /etc/yum.repo.d/CentOS-Base.repo [base] name=CentOS-$releasever - Base baseurl=http://mirror.centos.org/centos/$releasever/os/$basearch/ gpgcheck=1 #released updates [update] name=CentOS-$releasever - Updates baseurl=http://mirror.centos.org/centos/$releasever/updates/$basearch/ gpgcheck=1 #packages used/produced in the build but not released [addons] name=CentOS-$releasever - Addons baseurl=http://mirror.centos.org/centos/$releasever/addons/$basearch/ gpgcheck=1 #additional packages that may be useful [extras] name=CentOS-$releasever - Extras baseurl=http://mirror.centos.org/centos/$releasever/extras/$basearch/ gpgcheck=1 #additional packages that extend functionality of existing packages [centosplus] name=CentOS-$releasever - Plus baseurl=http://mirror.centos.org/centos/$releasever/centosplus/$basearch/ gpgcheck=1 enabled=0 #contrib - packages by Centos Users [contrib] name=CentOS-$releasever - Contrib baseurl=http://mirror.centos.org/centos/$releasever/contrib/$basearch/ gpgcheck=1 enabled=0 #packages in testing [testing] name=CentOS-$releasever - Testing baseurl=http://mirror.centos.org/centos/$releasever/testing/$basearch/ gpgcheck=1 enabled=0 Now is my yum.conf: [dag] name=Dag RPM Repository for Red Hat Enterprise Linux baseurl=http://apt.sw.be/redhat/el$releasever/en/$basearch/dag gpgcheck=1 enabled=1 -- My "Foundation" verse: Isa 54:17 No weapon that is formed against thee shall prosper; and every tongue that shall rise against thee in judgment thou shalt condemn. This is the heritage of the servants of the LORD, and their righteousness is of me, saith the LORD. -- carpe ductum -- "Grab the tape" CDTT (Certified Duct Tape Technician) Linux user #322099 Machines: 206822 256638 276825 http://counter.li.org/

2 3

[Fwd: [Full-disclosure] [ GLSA 200507-05 ] zlib: Buffer overflow]
by William Warren 07 Jul '05

07 Jul '05

Has Centos been tested for this yet? -------- Original Message -------- Subject: [Full-disclosure] [ GLSA 200507-05 ] zlib: Buffer overflow Date: Wed, 06 Jul 2005 16:23:20 +0200 From: Thierry Carrez <koon(a)gentoo.org> Organization: Gentoo Linux To: gentoo-announce(a)lists.gentoo.org CC: full-disclosure(a)lists.grok.org.uk, bugtraq(a)securityfocus.com, security-alerts(a)linuxsecurity.com - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200507-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: zlib: Buffer overflow Date: July 06, 2005 Bugs: #98121 ID: 200507-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== A buffer overflow has been discovered in zlib, potentially resulting in the execution of arbitrary code. Background ========== zlib is a widely used free and patent unencumbered data compression library. Affected packages ================= ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 sys-libs/zlib < 1.2.2-r1 >= 1.2.2-r1 Description =========== Tavis Ormandy of the Gentoo Linux Security Audit Team discovered a buffer overflow in zlib. A bounds checking operation failed to take invalid data into account, allowing a specifically malformed deflate data stream to overrun a buffer. Impact ====== An attacker could construct a malformed data stream, embedding it within network communication or an application file format, potentially resulting in the execution of arbitrary code when decoded by the application using the zlib library. Workaround ========== There is no known workaround at this time. Resolution ========== All zlib users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=sys-libs/zlib-1.2.2-r1" References ========== [ 1 ] CAN-2005-2096 http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2096 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: http://security.gentoo.org/glsa/glsa-200507-05.xml Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to security(a)gentoo.org or alternatively, you may file a bug at http://bugs.gentoo.org. License ======= Copyright 2005 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.0 -- My "Foundation" verse: Isa 54:17 No weapon that is formed against thee shall prosper; and every tongue that shall rise against thee in judgment thou shalt condemn. This is the heritage of the servants of the LORD, and their righteousness is of me, saith the LORD. -- carpe ductum -- "Grab the tape" CDTT (Certified Duct Tape Technician) Linux user #322099 Machines: 206822 256638 276825 http://counter.li.org/ _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/

2 2

← Newer
1
...
16
17
18
19
20
21
22
23
24
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss July 2005