Discuss March 2008

discuss@lists.centos.org

300 participants
373 discussions

SSl Certificate problem
by Tom Diehl 30 Mar '08

30 Mar '08

Hi, I have a c4 server that I am trying to migrate an ssl site over to a new C5 machine with all of the updates. The certificate is an equifax cert and works as advertised on the C4 server. When I move it over to the C5 machine I get error in firefox that says error code -12227 which http://www.mozilla.org/projects/security/pki/nss/ref/ssl/sslerr.html says is an SSL_ERROR_HANDSHAKE_FAILURE_ALERT. In addition it says that this means that "SSL peer was unable to negotiate an acceptable set of security parameters." If I try to open the site in IE, it prompts for a client certificate. This fails because I am not using client certs. In the apache config for ssl.conf I have "SSLVerifyClient none". I have also tried setting it to "optional" with the same results. In the past moving these sites to a different machine was as simple as copying the certs and the config files over to the new machine, reloading httpd and everyting just worked. Is there something different about ssl on C5? Does anyone know a good way to troubleshoot this. Google and the docs are not helping. What am I missing? Regards, -- Tom Diehl tdiehl(a)rogueind.com Spamtrap address mtd123(a)rogueind.com

2 2

WPA enterprise
by David Hláčik 30 Mar '08

30 Mar '08

Hi i have freeradius mschap ldap working configuration - i am using it for pptpd (VPN server) to authentificate against freeradius with ldap . Windows VPN client can connect to our company network and use it. Next i want to add user/password auth to our WIFI (based on Dlink AP - with radius support). We are currently using wpa-preshared key. i want to use wpa enterprise with ldap authentification (providing username and password) without need to install any certificate on windows. First to make a clear - how do i achieve it? --- i mean exactly which protocol i need to use and how it works (some shortcut to such howto) How do i arrange to use same freeradius for currently working VPN and for my plan to make wpa enterprise. Thanks in advance! David

1 1

Xen Install
by John 30 Mar '08

30 Mar '08

http://wiki.centos.org/HowTos/Xen/InstallingCentOSDomU In reading that How To, will using the GUI Configuration Tools create all the files need to run a "DomU". Will I have manual edit any configuration files? Next question is the machine has 256MBs of ram and Dom0 uses about 225MBs of it. Is that a bit much? VmWare Server does not use that much ram. See #top Below....With out running the Xen Kernel it has no where near the ram usage as with the Xen one. Is that expected? top - 11:32:53 up 5:22, 1 user, load average: 0.00, 0.00, 0.00 Tasks: 101 total, 3 running, 96 sleeping, 1 stopped, 1 zombie Cpu(s): 2.0%us, 0.7%sy, 0.0%ni, 97.4%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%st Mem: 231424k total, 228784k used, 2640k free, 20636k buffers Swap: 524280k total, 16k used, 524264k free, 99324k cached -- ~/john OpenPGP Sig:BA91F079

2 2

sofware caused connection abort
by Gergely Buday 29 Mar '08

29 Mar '08

Hi there, some of my users use putty to connect to my server via ssh protocol. After some time they get the above error message, and it could be that my CentOS-side configuration caused this. Do anybody has experience with this problem? - Gergely

6 7

Cisco PIX vpn software
by Joseph L. Casale 29 Mar '08

29 Mar '08

Anyone got a resource on setting up a CentOS box to connect to a Cisco PIX 5xx VPN using IPSec? I don't know if it matters but an important part of functionality would be split tunneling, I need to maintain that from the windows side of functionality. Thanks! jlc

3 5

Yum update erased jdk, jre, and fuse-davfs2
by Robert Moskowitz 29 Mar '08

29 Mar '08

I just did a yum update. It pulled in a number of updates including the latest firefox and davfs2.i386. Then I watch the following show up during the cleanup phase of yum (/var/log/messages): Mar 28 15:42:18 nc2400 Erased: jdk Mar 28 15:42:25 nc2400 Erased: jre Mar 28 15:42:31 nc2400 Erased: fuse-davfs2 Are the first jsut removal of the alternatives? How do I tell and how do I find that message where I got what to do. There were soo many "alternatives" I tried til I got it right...... And something did happen to fuse-davfs2, becuase I now get: /sbin/mount.davfs: can't open fuse device /sbin/mount.davfs: trying coda kernel file system /sbin/mount.davfs: no free coda device to mount BTW, yes, I did reboot after the update.

2 1

Anybody running OpenClinica on CentOS?
by Siju George 29 Mar '08

29 Mar '08

Hi, Is anybody running OpenClinica on CentOS? http://www.openclinica.org/page.php?pid=133 Thanks --Siju

1 0

Sound card problem
by David G. Miller 29 Mar '08

29 Mar '08

I came into an Abit AX8 motherboard and single core AMD Athlon 64 FX. I did a quick install of CentOS 5.0 on it to make sure everything worked and then returned the hard disk and case to the original owner. After getting a new case and hard disk, I downloaded the CentOS 5.1 cd images and installed. For some reason the motherboard's on board sound no longer works (worked with CentOS 5.0). dmesg gives me: ACPI: PCI Interrupt Link [ALKC] enabled at IRQ 22 ACPI: PCI Interrupt 0000:00:11.5[C] -> Link [ALKC] -> GSI 22 (level, low) -> IRQ 90 PCI: Setting latency timer of device 0000:00:11.5 to 64 codec_read: codec 0 is not valid [0x1fc0000] codec_read: codec 0 is not valid [0x1fe0000] codec_ready: codec 0 is not ready [0x1000000] codec_ready: codec 0 is not ready [0x1000000] codec_read: codec 0 is not valid [0x1fc0000] codec_read: codec 0 is not valid [0x1fe0000] AC'97 0 access is not valid [0xffffffff], removing mixer. ACPI: PCI interrupt for device 0000:00:11.5 disabled VIA 82xx Audio: probe of 0000:00:11.5 failed with error -5 and I get the same result if I rmmod/modprobe the kernel sound module (snd-via82xx). lspci -vv gives me: 00:11.5 Multimedia audio controller: VIA Technologies, Inc. VT8233/A/8235/8237 AC97 Audio Controller (rev 60) Subsystem: ABIT Computer Corp. Unknown device 1416 Control: I/O- Mem- BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- Interrupt: pin C routed to IRQ 90 Region 0: I/O ports at e800 [disabled] [size=256] Capabilities: [c0] Power Management version 2 Flags: PMEClk- DSI- D1+ D2+ AuxCurrent=0mA PME(D0-,D1-,D2-,D3hot-,D3cold-) Status: D0 PME-Enable- DSel=0 DScale=0 PME- and my modprobe.conf (generated by kudzu) looks like: alias eth0 r8169 alias scsi_hostadapter sata_via alias snd-card-0 snd-via82xx options snd-card-0 index=0 options snd-via82xx index=0 remove snd-via82xx { /usr/sbin/alsactl store 0 >/dev/null 2>&1 || : ; }; /sbin/modprobe -r --ignore-remove snd-via82xx I can always stick a spare sound card in the remaining PCI slot but the sound card used to work with CentOS 5.0. It seems kind of silly that it doesn't work now. I've Googled for some different parts of the dmesg output but haven't found anything helpful. Same with error messages from aplay, amixer, etc. Any suggestions would be appreciated. Thanks, Dave -- Politics, n. Strife of interests masquerading as a contest of principles. -- Ambrose Bierce

2 1

Big devices and missing space
by Morten Nilsen 29 Mar '08

29 Mar '08

Hello, I have a Promise EX 12-port RAID controller in my box, connected to 8 750GB disks. I have set up 2 RAID-5 devices and joined these using LVM. This is working fine. However, there is something that seems wrong.. (4-1) * 750 = 2250, but df reports the LVM volume as a mere 4.0T; /dev/mapper/storage_volume-stor 4.0T 3.6T 507G 88% /storage Shouldn't this be 4.5TB? Relevant bit of boot log: scsi4 : stex Vendor: Promise Model: 4 Disk RAID5 Rev: 1.10 Type: Direct-Access ANSI SCSI revision: 02 sdb : very big device. try to use READ CAPACITY(16). SCSI device sdb: 4395053952 512-byte hdwr sectors (2250268 MB) sdb: Write Protect is off sdb: Mode Sense: 00 12 00 00 SCSI device sdb: drive cache: write back sdb : very big device. try to use READ CAPACITY(16). SCSI device sdb: 4395053952 512-byte hdwr sectors (2250268 MB) sdb: Write Protect is off sdb: Mode Sense: 00 12 00 00 SCSI device sdb: drive cache: write back sdb: sdb1 sd 4:0:0:0: Attached scsi disk sdb sd 4:0:0:0: Attached scsi generic sg1 type 0 Vendor: Promise Model: 4 Disk RAID5 Rev: 1.10 Type: Direct-Access ANSI SCSI revision: 02 sdc : very big device. try to use READ CAPACITY(16). SCSI device sdc: 4395053952 512-byte hdwr sectors (2250268 MB) sdc: Write Protect is off sdc: Mode Sense: 00 12 00 00 SCSI device sdc: drive cache: write back sdc : very big device. try to use READ CAPACITY(16). SCSI device sdc: 4395053952 512-byte hdwr sectors (2250268 MB) sdc: Write Protect is off sdc: Mode Sense: 00 12 00 00 SCSI device sdc: drive cache: write back sdc: sdc1 sd 4:0:4:0: Attached scsi disk sdc sd 4:0:4:0: Attached scsi generic sg2 type 0 Vendor: Promise Model: RAID Console Rev: 1.00 Type: Processor ANSI SCSI revision: 03 scsi 4:0:16:0: Attached scsi generic sg3 type 3 -- Cheers, Morten :wq

3 2

CentOS-announce Digest, Vol 37, Issue 11
by centos-announce-request＠centos.org 29 Mar '08

29 Mar '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:0208 Critical CentOS 4 x86_64 seamonkey - security update (Johnny Hughes) 2. CESA-2008:0208 Critical CentOS 4 i386 seamonkey - security update (Johnny Hughes) 3. CESA-2008:0208 Critical CentOS 3 ia64 seamonkey - security update (Pasi Pirhonen) 4. CESA-2008:0207 Critical CentOS 4 ia64 firefox - security update (Pasi Pirhonen) 5. CESA-2008:0208 Critical CentOS 4 ia64 seamonkey - security update (Pasi Pirhonen) 6. CESA-2008:0208 Critical CentOS 3 s390(x) seamonkey - security update (Pasi Pirhonen) 7. CESA-2008:0207 Critical CentOS 4 s390(x) firefox - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Fri, 28 Mar 2008 13:45:32 -0500 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2008:0208 Critical CentOS 4 x86_64 seamonkey - security update To: CentOS-Announce <centos-announce(a)centos.org> Message-ID: <47ED3CCC.8040508(a)centos.org> Content-Type: text/plain; charset="iso-8859-1" CentOS Errata and Security Advisory 2009:0208 https://rhn.redhat.com/errata/RHSA-2008-0208.html The following updated files have been uploaded and are currently syncing to the mirrors: x86_64: seamonkey-1.0.9-15.el4.centos.x86_64.rpm seamonkey-chat-1.0.9-15.el4.centos.x86_64.rpm seamonkey-devel-1.0.9-15.el4.centos.x86_64.rpm seamonkey-dom-inspector-1.0.9-15.el4.centos.x86_64.rpm seamonkey-js-debugger-1.0.9-15.el4.centos.x86_64.rpm seamonkey-mail-1.0.9-15.el4.centos.x86_64.rpm seamonkey-nspr-1.0.9-15.el4.centos.i386.rpm seamonkey-nspr-1.0.9-15.el4.centos.x86_64.rpm seamonkey-nspr-devel-1.0.9-15.el4.centos.x86_64.rpm seamonkey-nss-1.0.9-15.el4.centos.i386.rpm seamonkey-nss-1.0.9-15.el4.centos.x86_64.rpm seamonkey-nss-devel-1.0.9-15.el4.centos.x86_64.rpm src: seamonkey-1.0.9-15.el4.centos.src.rpm

1 0

← Newer
1
2
3
4
5
6
7
8
...
38
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss March 2008