Discuss June 2006

discuss@lists.centos.org

217 participants
235 discussions

Building Mail Server, Need Advice
by Ajay Sharma 22 Jun '06

22 Jun '06

Hello, We're getting around to upgrading our mail server and here are the quick specs: MegaRAID SCSI 320-2X http://www.lsilogic.com/products/megaraid/scsi_320_2x.html TYAN Transport TA26 B2882T26U8H 2U Barebone Server-Rackmount - Retail http://www.newegg.com/Product/Product.asp?item=N82E16856152007 plus RAM, CPU and 4 SCSI drives setup in a RAID-5 Is that MegaRAID controller supported in CentOS4.3 out of the box? I really don't want to muck around with driver disks and the like. Anyone else have suggestions? Thanks, Ajay -- Satyajot (Ajay) Sharma REVShare System Administrator

3 5

HP DL360, tg3 driver, bonding and link flapping
by Michael Grinnell 22 Jun '06

22 Jun '06

Hi *, I'm running into a problem configuring bonding on an HP DL 360 G4p, running 4.3 + tg3 driver version 3.43f. I'm connecting eth0 and eth1 to a Cisco 2948 (CatOS 8.1(3)) and receiving flapping notices. The ethernet address is that of the primary interface. I have tried several different modes, including balance-rr (0), active-backup (1), and balance-alb (6). All have the same problem. More detailed info follows. 2.6.9-34.ELsmp #1 SMP Wed Mar 8 00:27:03 CST 2006 i686 i686 i386 GNU/ Linux [root@centos-test ~]# cat /etc/sysconfig/network-scripts/ifcfg-bond0 DEVICE=bond0 IPADDR=192.168.100.71 NETMASK=255.255.255.0 NETWORK=192.168.100.0 BROADCAST=192.168.100.255 GATEWAY=192.168.100.1 ONBOOT=yes BOOTPROTO=none USERCTL=no [root@centos-test ~]# cat /etc/sysconfig/network-scripts/ifcfg-eth0 DEVICE=eth0 USERCTL=no ONBOOT=yes MASTER=bond0 SLAVE=yes BOOTPROTO=none [root@centos-test ~]# cat /etc/sysconfig/network-scripts/ifcfg-eth1 DEVICE=eth1 USERCTL=no ONBOOT=yes MASTER=bond0 SLAVE=yes BOOTPROTO=none [root@centos-test~]# cat /etc/modprobe.conf alias eth0 tg3 alias eth1 tg3 alias bond0 bonding options bond0 mode=0 miimon=100 alias scsi_hostadapter cciss alias usb-controller ohci-hcd [root@centos-test ~]# modinfo tg3 filename: /lib/modules/2.6.9-34.ELsmp/kernel/drivers/net/tg3.ko author: David S. Miller (davem(a)redhat.com) and Jeff Garzik (jgarzik(a)pobox.com) description: Broadcom Tigon3 ethernet driver license: GPL version: 3.43f 7AC5B2FE640CA3E42CEB7C1 parm: tg3_debug:Tigon3 bitmapped debugging message enable value vermagic: 2.6.9-34.ELsmp SMP 686 REGPARM 4KSTACKS gcc-3.4 Port Name Status Vlan Level Duplex Speed Type ----- ------------------ ---------- ---------- ------ ------ ----- ------------ 2/11 Port 11 connected 256 normal a-full a-100 10/100BaseTX 2/12 Port 12 connected 256 normal a-full a-100 10/100BaseTX 2006 Jun 22 16:01:01 EDT -05:00 %ETHC-5-PORTTOSTP:Port 2/11 joined bridge port 2/11 2006 Jun 22 16:01:01 EDT -05:00 %ETHC-5-PORTTOSTP:Port 2/12 joined bridge port 2/12 2006 Jun 22 16:01:02 EDT -05:00 %SYS-4-P2_WARN: 1/Host 00:14:38:4c:e1:ee is flapping between port 2/12 and port 2/11 2006 Jun 22 16:01:19 EDT -05:00 %SYS-4-P2_WARN: 1/Host 00:14:38:4c:e1:ee is flapping between port 2/11 and port 2/12 I found http://www.uwsg.iu.edu/hypermail/linux/net/0605.1/0008.html but it wasn't very helpful. Other users seem to have it "just work." If anybody has run into this, I would appreciate some pointers. Thanks, Michael Grinnell Network Security Administrator The American University

1 0

RE: [CentOS] CentOS-4.4 - Some major changes on the way
by Nielsen, Steve 22 Jun '06

22 Jun '06

Just curious... are there preview packages of seamonkey available anywhere for download ? Steve -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Johnny Hughes Sent: Tuesday, June 20, 2006 6:03 AM To: CentOS ML Subject: [CentOS] CentOS-4.4 - Some major changes on the way I would like to take the time to inform people that CentOS-4.4 will contain some major changes. The changes are significant enough that I would like to spell out some of them now, probably at least a month before the release of the upstream "EL4 update 4" is released. The Mozilla Suite (Browser, Mail, Chat clients) will be replaced by SeaMonkey. This is due to Mozilla's change in policy and support for older versions. The Firefox 1.0.x (currently 1.0.8) web browser will be replaced by Firefox 1.5.x (currently 1.5.0.3). We currently have a version of Firefox 1.5.x in the CentOSPlus repo. That version will be replaced by the EL4 version after some more testing ... and the new version will be rolled into CentOS-4.4 in the Base repository when CentOS-4.4 is released. The Thunderbird 1.0.x (currently 1.0.8) will be upgraded to Thunderbird 1.5.x (currently 1.5.0.2). The OpenOffice.org 1.1.2 will be replaced by OpenOffice 1.1.5. This allows better sharing of files between OpenOffice.org 2.0 and CentOS clients. ------------------------------- All these changes will be implemented upstream and rolled out in the released source code, so they will be incorporated into CentOS as well. We will fully test these packages prior to release of the CentOS-4.4 ISOs, however these changes are fairly substantial. I would also like to remind people who are more cautious that CentOS has a vault that will contain CentOS-4.3 after we shift the main mirrors to CentOS-4.4. The vault is available at: http://vault.centos.org/ I am not suggesting that people don't upgrade (as security updates would require one to maintain the current version), but I am just providing information so that if the updates break something, you can easily get back to a known previous version. We have not had any problems so far with the new packages in our testing, and they will be deemed STABLE by upstream when they are released, however these changes are by far the most significant since the release of CentOS-4 and I think they deserve some special attention. Thanks, Johnny Hughes CentOS-4 Lead Developer

1 0

RE: [CentOS] Apache Security
by King, John (Greg) (LMIT-HOU) 22 Jun '06

22 Jun '06

Just as an fyi on a good checklist for linux (not comprehensive but a good start) http://www.cisecurity.org/bench_linux.html And some good areas via google on secure centos installations. If they do it again then it wont be your perl script obviously as you mentioned disabling the script, but if not, is your script configured with use strict and taint? Is every var in the script checked to ensure the data is within an allowed range? Does the perl script rely on third-party modules? If so you might check there as well. The rest is an assumption that you may have php installed on the system and someone may have used a php script as a gateway into your system. Even though the box has been compromised you may get lucky if this is related to apache by looking at the timestamp on the files in /tmp and correlate those with your apache logs. If so check your php logs as well(if you enabled it in /etc/php.ini). Are you running in safe mode? There are some things you can do to help reduce the amount of damage a vulnerable php script can do: safe_mode = On safe_mode_gid = On safe_mode_include_dir = /path where any include files you trust reside. Read only by apache process safe_mode_exec_dir = /path to area where you allow any executables to be called from php scripts Also (not restricted to safe mode) is if this is a home server you can also restrict where php scripts can 'roam': open_basedir = /var/www/html (for example) will prevent php scripts from going outside the /var/www/html area. If your done debugging any web code set this display_errors = off And turn on php file logging log_errors = On error_log = /var/log/phplogfilename.log Unless you need to allow file uploads turn that off too file_uploads = Off The same goes for treating URLs as files allow_url_fopen = Off Also make sure all the files in /var/www/html or whatever are not owned by the apache process so they cannot be over-written if at all possible. -Greg -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Matthew T. O'Connor Sent: Thursday, June 22, 2006 11:53 AM To: CentOS mailing list Subject: [CentOS] Apache Security Hello, I have a server running CentOS 4.3 with all the latest updates. The server in question has been hacked by spammers a few times. The details of the hack have been basically the same every time. I find some directory created by the apache user account in /tmp. The new directory contains an html file, and a list of email addresses to spam and a perl script that spams all those email addresses with the html file. My question is why is this happening? Obviously it's some apache exploit. I have removed mod_perl, that didn't help. I have now changed the permissions on the perl executable, that might help we will see, but that doesn't address the core problem. How is it that someone can upload arbitrary files to my server and then execute an arbitrary command via apache. Is this a know problem? Have others seen it? What can I do to help prevent this? Thanks, Matt _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

RE: [CentOS] Apache Security
by mike.redan＠bell.ca 22 Jun '06

22 Jun '06

Hello, I have a server running CentOS 4.3 with all the latest updates. The server in question has been hacked by spammers a few times. The details of the hack have been basically the same every time. I find some directory created by the apache user account in /tmp. The new directory contains an html file, and a list of email addresses to spam and a perl script that spams all those email addresses with the html file. My question is why is this happening? Obviously it's some apache exploit. Why is this obvious? What else is exposed to the internet on this server? They could be coming in another way, then creating files owned by the apache user to make it look like an Apache problem. Is SSH exposed to the internet? Maybe there is a user with a weak password or something. I have removed mod_perl, that didn't help. I have now changed the permissions on the perl executable, that might help we will see, but that doesn't address the core problem. How is it that someone can upload arbitrary files to my server and then execute an arbitrary command via apache. What is exposed via apache? Are there any custom applications/CGI's? Is this a know problem? Have others seen it? What can I do to help prevent this? Thanks, Matt _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

Tracking down whats causing a high load?
by Ian mu 22 Jun '06

22 Jun '06

Hiya, Currently running Centos 4.2 x86_64 dist on a dual 3G xeon, 2G ram, scsi setupand everythings been running fine on it for some time. Then at 4am last night something kicked in (have mrtg running monitoring when) and since then its been running a load of about 1.5 (normally around 0.4). CPU usage is Cpu(s): 1.1% us, 0.6% sy, 0.0% ni, 97.9% id, 0.2% wa, 0.1% hi, 0.1%si. Can't see any new processes that would cause the load, just wondering is there any way to try and track down whats actually causing this? It's not excessive load, but want to add some new services and wary now, its something that seems wrong given the sudden increase at 4am (think thats when some o.s housekeeping tasks are normally scheduled, but there's none running that I can see that started today). Just hoping someone may have some tips on checking whats always waiting or how to isolate whats happening. As said, ps -ef shows no new processes, and cpu usage is very low. Tia, Ian

8 10

Adobe Reader 7.0.8 on x86_64 system
by Kanwar Ranbir Sandhu 22 Jun '06

22 Jun '06

Hi Everyone, [yes, this is about a proprietary product, but I'm just asking for some tips/pointers] Has anyone tried installing the new Adobe Reader (7.0.8) RPM from Adobe on a CentOS 4.3 x86_64 box? I just attempted an upgrade from AdobeReader_enu-7.0.1-1 (also RPM install), and I'm getting this error: error: Failed dependencies: libGLU.so.1 is needed by AdobeReader_enu-7.0.8-1.i386 It looks like Adboe wants the i386 version of that library, which is provided by xorg-x11-Mesa-libGLU.i386. However, I already have the x86_64 version installed. What's stranger is that I was able to install the previous version without any problems. Any tips/suggestions/flames appreciated. Regards, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.16-1.2111_FC4 i686 GNU/Linux 01:17:39 up 3 days, 18:46, 2 users, load average: 1.23, 0.56, 0.41

2 2

completely custom rpm's
by Tom Brown 22 Jun '06

22 Jun '06

Hi During a 'normal' install i have to add a bunch of users and modify some files such as DNS, Syslog, ssh key files etc While i can do this with a shell script post install it would be VERY neat to just have all these changes packaged up into an rpm and i can then just rpm -i this post install. Can i do this and if so can anyone point me to a how-to that would help me through the steps required. thanks

3 2

Problem generating SSL certificates
by mbneto 22 Jun '06

22 Jun '06

Hi, I am trying to generate client certificates (to use in internal web/email servers) but the process is aborting. I can generate the CA OK but when I try to generate the client... openssl ca -days 365 -out certs/xxxx.crt -in csr/xxx.csr -config ../tls/openssl.cnf Using configuration from ../tls/openssl.cnf Enter pass phrase for ../CA/private/cakey.pem: wrong number of fields on line 1 (looking for field 6, got 1, '' left) Any ideas? The openssl.cnf is the one that comes with the distro with the following modification: --- ../tls/openssl.cnf 2006-06-01 16:29:56.000000000 -0400 +++ ../tls/openssl.cnf.orig 2006-06-01 15:29:15.000000000 -0400 -dir = ../CA # Where everything is kept +dir = ../../CA # Where everything is kept Without the modification it simply complains about a missing file.

1 0

Re: [CentOS] Appended 1 in fstab entries CentOS4.X installs
by cweisiger＠i-55.com 22 Jun '06

22 Jun '06

Ok so its a bug(feature?) HEH. alright. Well I'll just deal with it for now. Is there a way to fix the appended 1 after a completed install.

6 6

← Newer
1
...
5
6
7
8
9
10
11
...
24
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss June 2006