Discuss October 2008

discuss@lists.centos.org

298 participants
291 discussions

problem talking to server postgrey/socket: Permission denied
by Dirk H. Schulz 07 Oct '08

07 Oct '08

Hi folks, I have installed postgrey from the rpmforge repo, but it does not work well with postfix from CentOS 5.2: I always get the error: warning: connect to postgrey/socket: Permission denied problem talking to server postgrey/socket: Permission denied But the permissions on the socket seem okay (postfix could write to it): srw-rw-rw- 1 postgrey postgrey 0 4. Okt 14:48 socket I also tried "restorecon -R /var/spool/postfix/postgrey", but that did not change anything, either. Googling does not show anything recent and helpful. Any hint or help is appreciated. Dirk

3 4

vsftpd
by Mad Unix 07 Oct '08

07 Oct '08

Hi ALL I'm using vsftpd as FTP server, and I'd like to chroot my FTP users to their home dir. How can I do it? i.e. "jailing" them in their home dir... at the moment I have the following issues the user when they login to ftp server they go to the main directory /var/ftp/ /etc/passwd ... sdc:x:501:501::/var/ftp/sdc:/bin/bash ase:x:502:501::/var/ftp/ase:/bin/bash jsc:x:503:501::/var/ftp/jsc/:/bin/bash [root@linux10 ftp]# pwd /var/ftp [root@linux10 ftp]# ls -al total 28 drwx--x--x 6 root ftpusers 4096 Oct 6 13:46 . drwxr-xr-x 22 root root 4096 Oct 5 15:42 .. drwx------ 3 ase ftpusers 4096 Oct 6 20:30 ase drwx------ 3 jsc ftpusers 4096 Oct 6 17:27 jsc drwx------ 2 pons pons 4096 Oct 6 16:22 pub drwx------ 5 sdc ftpusers 4096 Oct 6 17:19 sdc chroot_list_enable=YES # (default follows) chroot_list_file=/etc/vsftpd/chroot_list chroot_local_user=YES # # You may activate the "-R" option to the builtin ls. This is disabled by # default to avoid remote users being able to cause excessive I/O on large # sites. However, some broken FTP clients such as "ncftp" and "mirror" assume # the presence of the "-R" option, so there is a strong case for enabling it. #ls_recurse_enable=YES # # When "listen" directive is enabled, vsftpd runs in standalone mode and # listens on IPv4 sockets. This directive cannot be used in conjunction # with the listen_ipv6 directive. listen=YES # # This directive enables listening on IPv6 sockets. To listen on IPv4 and IPv6 # sockets, you must run two copies of vsftpd whith two configuration files. # Make sure, that one of the listen options is commented !! #listen_ipv6=YES pam_service_name=vsftpd userlist_enable=YES tcp_wrappers=YES ###added for TLSand SSL permission ssl_enable=YES allow_anon_ssl=NO force_local_data_ssl=NO force_local_logins_ssl=YES ssl_tlsv1=YES ssl_sslv2=YES ssl_sslv3=YES rsa_cert_file=/etc/vsftpd/vsftpd.pem rsa_private_key_file=/etc/vsftpd/vsftpd.pem local_root=/var/ftp #userlist_file=/etc/vsftpd/ftpusers userlist_file=/etc/vsftpd/ftpusers #userlist_file=/etc/vsftpd/user_list pasv_enable=YES anon_max_rate=10485760 local_max_rate=0 max_clients=500 max_per_ip=4 passwd_chroot_enable=YES

1 0

Re: [CentOS] Re: mysqld breaks yum, help?
by Vandaman 07 Oct '08

07 Oct '08

Dac Chartrand wrote: > Yum is broken. > I have the priorities plug-in setup. I did `yum update` before > messing around with 3rd party repositories. The only modules I > installed from the 3rd party sties are PHP related. Isn't there php in the CentOS plus repo? What repo is that you messed about with? ATRPMS or Livna? Regards, Vandaman.

11 29

Eclipse 3.2.1-19 package on Centos 5.2
by Tom [toms400] 07 Oct '08

07 Oct '08

Hi, I'm using Centos 5.2 and trying to use Eclipse's embedded browser without success. Could this be due to any of the patches that were commented out in 3.2.1-18? When trying to use the embedded browser, I get the error: No more handles (java.lang.UnsatisfiedLinkError: no swt-mozilla-gtk-3235 in java.library.path). I have a gre.conf, have set MOZILLA_FIVE_HOME, and LD_LIBRARY_PATH, but continue to get that error. If you have any ideas, I'd be very grateful. Thanks -Tom

2 1

Re: OT: RIP settings for private netblocks
by James B. Byrne 06 Oct '08

06 Oct '08

James B. Byrne wrote: > You can accomplish this much easier by simply using > a firewall. I like OpenBSD firewalls in layer 2 > bridging mode. Put the firewall in-line between the > router and the rest of the network, no other network > changes needed. The difficulty with this is that it requires yet another host, a reconfiguration of the existing wiring plan, and dealing with a number of other issues which directly arise from the first two requirements. We already use IPtables, and we already have some of our older hosts secured behind sshd linux boxes so that network traffic to them is only carried en clair across direct x-wired patch cables. > If your not well versed in routing I wouldn't recommend > going around making a bunch of changes to a system that > I assume has been more or less working for more than > a decade. Which is why I asked the question if by making a single change to the network parameter of the Cisco Router could I avoid: 1. Physically segmenting my LAN 2. Having to commission an additional host or reconfigure an existing host to multi-homed. Routing is something I do not go at very often and I do not trust my memory for such things in consequence. The manuals and books that I have give sketchy coverage of this aspect and use examples much more narrow in scope than I contemplate. It would be a gross over-statement to say that I am unfamiliar with the concepts of routing. But I am asking for specific guidance on specific software (CISCO ISO 12.x) and hardware (CISCO 26xx series) from someone with experience in these matters. I recognize that this is not the precise forum to ask, thus the OT. On the other hand, I trust that my situation cannot be very dissimilar to those faced previously by many system administrators who also happen to run CentOS. Regards, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

OT: RIP settings for private netblocks
by James B. Byrne 06 Oct '08

06 Oct '08

I am contemplating converting some of our internal networks from routable to private IPv4 address space. I have a question about RIP as implemented under Cisco IOS 12.x. Presently the setting for rip is: router rip version 2 passive-interface [[FastEthernet]]0/0 network aaa.bbb.ccc.0 no auto-summary What I would like to know is how one routes the entire 192.168/16 address space using rip. My perusal of the various Cisco manuals, technical documents and various O'Rielly books is not giving me any clear answer and I am rather reluctant to experiment on our live Internet connection. Will this do what I imagine it might, treat any address 192.168.x.y or 10.x.y.z as an internal network? router rip version 2 passive-interface [[FastEthernet]]0/0 network aaa.bbb.ccc.0 network 192.168.0.0 network 10.0.0.0 no auto-summary Regards, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 4

need ur kind advice
by fabian dacunha 06 Oct '08

06 Oct '08

Dear All, apprecite ur kind help n advice I have a Centos 5 server running only squid for sometime and its workin great. i am concerned about security so i have a shorewall firewall on the machine runnign squid n works grt now i would like to know the follwing 1) does anyone one know of any good antivirus software i could install on the centos OS squid server so as to scan for viruses so i cd periodically scan the server thnks and apprecite regards fabian -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

3 3

ejabberd 2.0.2 vs SELinux vs CentOS 5
by Damian S 06 Oct '08

06 Oct '08

Lordy, I've been having problems with this darn thing, so I hope someone can help me. :s My troubles started when I downloaded the latest erlang and ejabberd packages. I crashed and burned very quickly, trying two or three different versions of erlang along with several of ejabberd 2.0.x. Finally, after a week of pain, I admitted defeat, wiped the whole lot and installed the binary on the process-one website. Initially, the binary worked well, but mysteriously stopped working whenever I changed the config file and restarted the file. Anyway, to cut a long story short, I have discovered that SELinux is preventing erlang from accessing its crypto libs. This message appears in the SELinux audit logs: type=AVC msg=audit(1223133076.770:102): avc: denied { execmod } for pid=3878 comm="beam.smp" path="/opt/ejabberd-2.0.2_2/lib/crypto-1.5.2/priv/linux-x86/lib/crypto_drv.so" dev=dm-0 ino=26738869 scontext=user_u:system_r:unconfined_t:s0 tcontext=user_u:object_r:usr_t:s0 tclass=file What do I need to do, for selinux to allow this? (Or should I take this question to an SELinux list?) FWIW, ejabberd seems to run fine while selinux is enabled. Its just when starting up, that it needs selinux to stay out of the way.

5 8

find - text
by tony.chamberlain＠lemko.com 06 Oct '08

06 Oct '08

A while ago I sent mail about wanting to find all files that had a certain text string in it and changing it to something else. People mentioned that there is a system tool to do it (gnome has it too). I ran this, for example to find all files WITH "prog" in the name, and then I did a ps and I saw simply find . -iname '*prog*' then I did something similar, all file names but with "prog" in it, and found basically two lines (one was child process of the other, so I assume it was a pipe or something): find . -type f grep -i -c prog this does a grep for case insensitivity for "prog", so basically the tool uses find and grep. I could do something like find . -type f | while read fil do sed -i 's/prog/name/g' $f # change "prog" to "name" done A couple problems here. If what I am changing is the same length then it may be ok. But consider this quick (example) C program state.c int main( int argc, char **argv ) { printf( "Ohio\n" ); } if I compile it to "state" and then print it prints Ohio. If I do (on the compiled file state) sed -i 's/Ohio/Utah/' state then it will print Utah. However, if I change the length sed -i 's/Ohio/Michigan/' state it will of course SIGSEGV because it changed some of the object code. (Actually even doing the same length can be dangerous). What I want to do is either provide another option to the find (which I can'e seem to find), or pipe the files it finds to something like "file" to get only ASCII files (non-object code). However, I am not sure how to do this. On most files, the "file" command will return something with "text" in it, but not all files. For instance, sometimes it returns "application" or "shell script" but it is still OK to do the sed on these. Is there some easy way to take a file name and determine whether sed -i can safely be done on it (i.e., it is ASCII and not some sort of binary file)? Tony

2 1

Boot disk order: h/w vs. grub
by MHR 06 Oct '08

06 Oct '08

I'm still having conceptual trouble with this one. I have two PATA and two SATA disks in my home system. When the system comes up, these are, espectively, /dev/hda, /dev/hdb, /dev/sda and /dev/sdb. I have the boot order of the drives in the boot PROM set to boot from /dev/sda (hard drive 2), then /dev/hda (hd 0), and usually that works fine. /dev/sda is properly set up with the MBR and /boot lives there as well. However, when the system has to be shut down, usually for some length of time more than just a few seconds, when it comes back up, it can't find the boot image. I forgot how I got around this the first time. The second time, when it wasn't booting past the "GRUB" part of the grub announcement, I used the installation disk, booted into linux resuce mode, chroot'd to the actual system disk and re-did grub-install. Still, a few days later (last Tuesday) when my video card went south, I just edited the grub boot line to use root(hd2, 0) and it came up, followed by several reboots with unmodified grub config lines. I guess I'm wondering if there's some more permanent way around this issue. Do I need to overwrite the MBR on hd0? Should I reconfigure the system so the PATA drives are not connected to the m/b at all (i.e., usb enclosures)? Is this a bug in grub? All this is assuming that I do not get rid of the PATA drives and/or get a new m/b that has <something else>.... It seems strange that this should be such a pain, even though in a rather oddball way it makes sense. Thoughts? Thanks mhr

2 2

← Newer
1
...
21
22
23
24
25
26
27
...
30
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss October 2008