Discuss December 2008

discuss@lists.centos.org

247 participants
257 discussions

Miredo 1.1.5
by Robert Moskowitz 11 Dec '08

11 Dec '08

I found a src.rpm for 1.1.5-1 for fc8 (not rh8!). I was able to rebuild it on my Centos build system. The rpms are identified as 1.1.5-1.i386.rpm, no el5 or other identification was placed in the files. I don't see how to control this when you rebuild from an existing src.rpm. Interestingly the fc8 designation was lost. I also rebuild it on my fc10 system. It worked, and the rpms have fc10 in their names. Don't know how well they will work. I will be trying them over the next couple weeks. If anyone wants a copy, let me know....

4 6

Iptables Question
by Joseph L. Casale 10 Dec '08

10 Dec '08

I have a squid proxy running transparently, so in my firewall script I run the following fairly early: iptables -A PREROUTING -t nat -i $LAN -p tcp -m multiport --dports 80,443 -j REDIRECT --to-port 3128 This is a multihomed server so after this change the masquerading was removed (as only web access on the lan side of this server was needed). I now need to masq cleanly one device so that it can bypass the squid proxy. As order is important, would it be correct to put the following _in front_ of the PREROUTING command above: iptables -A POSTROUTING -t nat -o $WAN -j MASQUERADE iptables -A FORWARD -i $LAN -o $WAN -m mac --mac-source <mac addr> -m state --state NEW,ESTABLISHED,RELATED -p tcp -m multiport --dports 443 -j ACCEPT iptables -A FORWARD -i $WAN -o $LAN -m state --state RELATED,ESTABLISHED -j ACCEPT Where is the best place to filter for the mac in this scenario? I am hoping anything w/o this mac will skip the whole masq setup and enter the PREROUTING command below, resulting in the traffic being proxied through squid. Thanks! jlc

2 2

Fedora 9 domU on CentOS 5.2 dom0 - very unstable?
by Dirk H. Schulz 10 Dec '08

10 Dec '08

I am running a Fedora 9 domU on CentOS 5.2 dom0, and it is quite unreliable. Every few days I have the following phenomenon: - many applications do not work at all (e. g. Nagios 3.05 stops checking, but the cgis work perfectly, the web server works as well) - system processes run into time outs (e. g. logging in via ssh runs into timeouts <<"connection reset by peer">> after many seconds, logging into the console does not get finished ever, no error, no refusal) and similiar All I can do then is destroy the domain (xm shutdown does not lead to anything either). Is this a known phenomenon? Is there any way to work around it? I do not have these problems with CentOS 5.2 domUs on the same machine (at least not that massive). Every hint or help is appreciated. Dirk

2 1

Cannot mount samba shares
by Ralph Angenendt 10 Dec '08

10 Dec '08

Hi, quick(?) question: Has anybody seen that problem below? More important question: Did anybody solve that? This is my smb.conf (well, only the most important parts): [global] workgroup = FOOBAR server string = My Server map to guest = Bad User preferred master = No local master = No domain master = No dns proxy = No [on3] comment = Audio-Video-Imports path = /local/mir/import/on3 force group = users read only = No create mask = 0664 directory mask = 0775 guest ok = Yes The path has: drwxrwxr-x 3 mir users 4096 10. Dez 16:35 /local/mir/import/on3/ Meaning: group users and user mir are allowed to write in there. Works fine from windows clients. Guest user gets mapped to "nobody". Doesn't work from linux: [root@shutdown ~]# mount -t cifs -o user=nobody,guest //mir-qs/on3 /mnt/tmp/ mount error 13 = Permission denied Refer to the mount.cifs(8) manual page (e.g.man mount.cifs) root@mir-qs:~# uname -a ; rpm -q samba Linux mir-qs.br.de 2.6.9-78.0.8.ELsmp #1 SMP Wed Nov 19 20:05:04 EST 2008 i686 i686 i386 GNU/Linux samba-3.0.28-0.el4.9.i386 Machine is up to date. Error message on the server is make_connection: connection to on3 denied due to security descriptor. Googling around led me to the belief that someone fooled around with srvmgr.exe from a windows machine and that I should remove /var/cache/samba/share_info.tdb and restart samba. Which doesn't work. Now if I take out the "force group = users" everything works as expected. Except that I cannot write in this share - nobody isn't in the group users. I don't want to add nobody to the group users, nor can I go and change anything on that server regarding users and groups in the file system. Ah yes, smbclient works fine, but I really do not want to use that either. Cheers, Ralph

2 4

What is Judy?
by Robert Moskowitz 10 Dec '08

10 Dec '08

I am trying to build Miredo 1.1.5 (http://www.remlab.net/miredo/devel.shtml.en) I have followed the rpmbuild instructions from: http://www.owlriver.com/tips/non-root/, and have the miredo source in ~/build/miredo-1.1.5. I run ./configure (as the INSTALL text file tells me to do) and get the error: checking for Judy.h usablity... no checking for Judy.h presence... no checking for Judy.h... no configure: WARING: If you don't care about scalability, re-run configure with ' --without-Judy'. configure: error: Required Judy dynamic arrays library missing.

2 3

Re: [CentOS] Adobe plugin for firefox
by Bo Lynch 10 Dec '08

10 Dec '08

On Tue, December 9, 2008 3:49 pm, William L. Maltby wrote: > > On Tue, 2008-12-09 at 15:01 -0500, Bo Lynch wrote: >> I'm having an issue with workstation opening pdf's with firefox. I have >> the adobe plugin installed and enabled in firefox but firefox will only >> let me save the file. Under applications I have tried using the doc >> reader >> and adobe to associate pdf's with firefox with no luck. I am running >> firefox 3.0.4. Any help would be greatly appreciated. >> Thank you > > I've just been mucking about with this stuff. If you'll provide more > information, maybe I can help. Many folks ignore requests with no > substantive information because it wasts so much time trying to get the > information needed. > > For me, if you use rpm -q<splat whatever else you want> to list the > adobe plugin file installed, that would be a start. > > Under ~/.mozilla are one or more files named pluginreg.dat. Their > contents would be useful. The find command will help you locate them. If > you have multiple "default" directories there, which one is your active > one? Just get information from that one. > > If you have edited your preferences, list the settings for those that > may be related: what do you have for download actions, under > tools->add-ons->plugins tab, what is shown their. Anything else that may > be useful and related. > > -- > Bill > rpm -q firefox firefox-3.0.4-1.el5.centos [root@localhost ~]# acroread -v 8.1.3 The output of pluginreg.dat. This file was located in ~/.mozilla/firefox/ssehte9e.default Is this normal? Generated File. Do not edit. [HEADER] Version:0.09:$ [PLUGINS] /usr/lib/nspluginwrapper/npwrapper.so:$ :$ 1216305953000:1:1:$ <a href="http://gwenole.beauchesne.info/projects/nspluginwrapper/">nspluginwrapper</a> is a cross-platform NPAPI plugin viewer, in particular for linux/i386 plugins.<br>This is <b>beta</b> software available under the terms of the GNU General Public License.<br>:$ NPAPI Plugins Wrapper 0.9.91.5:$ 1 0:unknown/mime-type:Do not open:none:$ /usr/lib/mozilla/plugins-wrapped/nswrapper_32_32.libflashplayer.so:$ :$ 1226956491000:1:1:$ Shockwave Flash 10.0 r12:$ Shockwave Flash:$ 2 0:application/x-shockwave-flash:Shockwave Flash:swf:$ 1:application/futuresplash:FutureSplash Player:spl:$ /usr/lib/mozilla/plugins-wrapped/nswrapper_32_32.nppdf.so:$ :$ 1227025018000:1:1:$ The Adobe Reader plugin is used to enable viewing of PDF and FDF files from within the browser.:$ Adobe Reader 8.0:$ 5 0:application/pdf:Portable Document Format:pdf:$ 1:application/vnd.fdf:Acrobat Forms Data Format:fdf:$ 2:application/vnd.adobe.xfdf:XML Version of Acrobat Forms Data Format:xfdf:$ 3:application/vnd.adobe.xdp+xml:Acrobat XML Data Package:xdp:$ 4:application/vnd.adobe.xfd+xml:Adobe FormFlow99 Data File:xfd:$ Thanks for any help. Bo Lynch

3 8

squidGuard-simple.cgi display fields
by Joseph L. Casale 10 Dec '08

10 Dec '08

I have this cgi file running on CentOS 5 with Apache 2.2.3 and although it executes most fields are empty, a typical block by squidGuard yields this: Supplementary info : Client address = 192.168.0.5+clientname Client name = User ident = Client group = URL = Target class = The redirect lines is: http://localhost/cgi-bin/squidGuard-simple.cgi?clientaddr=%a+clientname=%n+… I assume the "+" throws this off somehow, something to do with cgi and apache? Any ideas? Thanks! jlc

2 2

Centos 4.7 httpd error messages
by Vandaman 10 Dec '08

10 Dec '08

I have the following error messages on a CentOS server. Googling did not identify the error. [Wed Dec 10 09:22:02 2008] [notice] caught SIGTERM, shutting down No log handling enabled - turning on stderr logging Cannot find module (IP-MIB): At line 0 in (none) Cannot find module (IF-MIB): At line 0 in (none) Cannot find module (TCP-MIB): At line 0 in (none) Cannot find module (UDP-MIB): At line 0 in (none) Cannot find module (HOST-RESOURCES-MIB): At line 0 in (none) Cannot find module (SNMPv2-MIB): At line 0 in (none) Cannot find module (SNMPv2-SMI): At line 0 in (none) Cannot find module (NOTIFICATION-LOG-MIB): At line 0 in (none) Cannot find module (UCD-SNMP-MIB): At line 0 in (none) Cannot find module (UCD-DEMO-MIB): At line 0 in (none) Cannot find module (SNMP-TARGET-MIB): At line 0 in (none) Cannot find module (NET-SNMP-AGENT-MIB): At line 0 in (none) Cannot find module (HOST-RESOURCES-TYPES): At line 0 in (none) Cannot find module (UCD-DISKIO-MIB): At line 0 in (none) Cannot find module (LM-SENSORS-MIB): At line 0 in (none) Cannot find module (DISMAN-EVENT-MIB): At line 0 in (none) Cannot find module (IPV6-ICMP-MIB): At line 0 in (none) Cannot find module (IPV6-MIB): At line 0 in (none) Cannot find module (IPV6-TCP-MIB): At line 0 in (none) Cannot find module (IPV6-UDP-MIB): At line 0 in (none) Cannot find module (SNMP-VIEW-BASED-ACM-MIB): At line 0 in (none) Cannot find module (SNMP-COMMUNITY-MIB): At line 0 in (none) Cannot find module (UCD-DLMOD-MIB): At line 0 in (none) Cannot find module (SNMP-FRAMEWORK-MIB): At line 0 in (none) Cannot find module (SNMP-MPD-MIB): At line 0 in (none) Cannot find module (SNMP-USER-BASED-SM-MIB): At line 0 in (none) Cannot find module (SNMP-NOTIFICATION-MIB): At line 0 in (none) Cannot find module (SNMPv2-TM): At line 0 in (none) Regards, Vandaman.

2 2

vsftpd and SElinux
by Dirk H. Schulz 10 Dec '08

10 Dec '08

Hi folks, I have configured vsftpd with virtual users for webserver users (that means, a virtual users chrooted home is the document root of a virtual host in apache). That works fine so far - as long as SElinux ist not enforcing. I have tried to audit2allow out the problem, but did not succeed. Virtual vsftpd users are denied access to directories: virtual users are mapped to a system user with vsftpd; after login the vsftpd process changes into the system users home directory, then into the virtual users chroot. And the first step (changing into the system users home dir) is denied by SElinux. But there is no "avc denial" in audit log any more - I have policied these out completely. There seems to be a "dontaudit" denial working - which I cannot make visible on CentOS since the -D flag is not available for semodule (as it is in Fedora 9, e.g.). So I am quite stuck here. Is there anything I can do to find the denial I need to feed into audit2allow? Or some other way to make SElinux accept vsftpds access? Perhaps someone out there has already gone through this process. Any hint or help is appreciated. Dirk

2 2

Running on 8G CF card
by Jerry Geis 10 Dec '08

10 Dec '08

hi all, Was wondering if anyone is running Centos on a CF card slot. It installed OK , it boots ok, but after a while it is no longer on the network. After power cycling there is nothing in the /var/log/messages as to a crash etc... I ran a USB thumb drive 8G on this same PC and it seems to continue to work. Just STICKS out a few inches. Not the best look. Any pointers on how to find out what it doesnt like? Any pointers on running from a CF card. I have done the straight 686 install - I do add asterisk to the box. Jerry

7 12

← Newer
1
...
14
15
16
17
18
19
20
...
26
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss December 2008