Discuss June 2008

discuss@lists.centos.org

353 participants
415 discussions

syncrepl in OpenLDAP 2.3.x (CentOS 5) and updating on a replica
by Filipe Brandenburger 12 Jun '08

12 Jun '08

Hi, I have a setup with two CentOS 5 machines running OpenLDAP 2.3.x, right now the primary uses slurpd to send the updates to the second server, and the second server is using "updatedn" to allow updates (from what I understand! I'm no OpenLDAP guru here.) Clients are using pam_ldap and nss_ldap to get the users and authenticate them in LDAP. Right now hosts query only the primary LDAP server, that is the address set on the "host" variable of /etc/ldap.conf. Changing password with "passwd" works fine, and the password is correctly replicated to the secondary server. Now, first thing, I wanted to load balance between the two servers. The way I did it was to register a Round-Robin DNS record, with one A entry for each server IP, and I used that entry in the "host" variable of /etc/ldap.conf. Everything worked. Queries going each time to a different server. I was expecting to have problems changing passwords, but amazingly it worked. Apparently when a password change request goes to the second server, that server will do a query on the first server to do the password change, and then (through slurpd) the change gets replicated on the second one. Everything great. Now, I was reading that syncrepl is superior to slurpd, and that syncrepl is the preferred method of replication. I actually saw that it's true when I saw that it actually replicated the master without having to stop it and copy the dbs (which is necessary with slurpd.) I even saw that in OpenLDAP 2.4.x slurpd is deprecated/discontinued and only syncrepl is supported. So I'm trying to migrate from slurpd to syncrepl. And so far everything is working fine in my test environments. This is what I have configured on the master: overlay syncprov syncprov-checkpoint 1 10 syncprov-sessionlog 100 And on the slave: syncrepl rid=1 provider=ldap://ldap1.mydomain.com type=refreshAndPersist searchbase="dc=mydomain,dc=com" schemachecking=off bindmethod=simple binddn="cn=Manager,dc=mydomain,dc=com" credentials=xxxxxxxxxxx updateref ldap://ldap1.mydomain.com/ It works with queries, and when I do an update on the master, it replicates fine to the slave. But when I try to do some change on the slave, that's what I get: $ ldapdelete -H ldap://ldap2.mydomain.com/ -D cn=Manager,dc=mydomain,dc=com \ -w XXXXXXX -x uid=usertodelete,ou=Users,dc=mydomain,dc=com ldap_delete: Referral (10) referrals: ldap://ldap1.mydomain.com/uid=usertodelete,ou=Users,dc=mydomain,dc=com I would like to have something closer to what happens when using slurpd, which seems to be more transparent to clients. I tried to set "updatedn" but slapd complained that it is supported when using slurpd. I also tried to start configuring overlay on the slave and syncrepl on the master, but when I do that I can't run updates on either side, both of them end up being read-only. I read that on OpenLDAP 2.4.x Administration Guide, on the section about multi-master replication, but I then saw that multi-master replication is supposed to work only on 2.4.x, and not on 2.3.x, so that's apparently not an option. So I ask: is there a way to configure OpenLDAP so that the slave (running syncrepl) can send updates to the master when receives from a client? Or (not as good but still an option): If I use "updateref" to send Referral, how can I make sure the tools (ldapdelete, ldapmodify, ldapadd, ...) actually *follow* the referral (I looked for that in man pages and didn't find any obvious options for that)? And more important, will pam_ldap and nss_ldap follow those referrals when changing the password? Do I have to set something on /etc/ldap.conf for that? Upgrade to 2.4.x is something I would like to avoid, since I would rather stick with what is supported by CentOS 5. Long term, I'm planning to replace all this infrastructure to FreeIPA (http://www.freeipa.org/) which is supposed to be a more robust product, but that is going to take a while, so I'm trying to at least do the best I can with what I have now. Sorry for the long e-mail! Any help and advices will be appreciated. Thanks a lot! Filipe

1 0

[Fwd: Re: [CentOS] School Server Setup]
by Alain Terriault 12 Jun '08

12 Jun '08

Hi Harry, Has much has I like Centos and RH for big sophisticated setup, it would not be my first choice for your project. For 25 systems and if you want this done without spending to much time, Clarkconnect would by my first choice for server side OS (#2 would be SME). For me CentOS x64 is #1 choice for enterprise (+500 users with Terabytes of storage ) sever solution. If you have little experience configuring a RH server, get ready to spend lots of time getting everything going as nicely as Clarkconnect does it. For the clients side, my favorite flavor of Linux is Ubuntu. cheers, alain Harry Sukumar wrote: > > Hello All!!! > > I was wondering if you can help me little bit…. > > I am trying to help (voluntary service) a country side school > (Aboriginal community) in Northern Queensland Australia setup lab > infrastructure, it’s a very remote school and they don’t have enough > funds to go commercial > > The school has only till grade 6 > > They have 25 machines that was bought out of the government grant but > none of the machines come with windows > > I was asked by the school president to setup lab infrastructure > currently they have Internet (Dynamic) with only two machines connected > > I have asked them to change the plan to Static IP address which I > presume will be done some time this week > > I have decided to go Linux on all the machines including the server > > Could some one please cast some light on how I can carry on with this > project, I am not sure where to start and I am fairly new to Linux and > system administration world > > Currently what’s in my mind is to setup fedora on all desktop and > CentOS5 as my server with following services configured > > Proxy-squid (all the traffic to pass through) > > Firewall > > Apache > > Squirrel mail > > DNS > > DHCP > > I am not sure where to start with this project > > Your help will be highly appreciated by the little kids who have never > even touched a computer before in there life!!! > > -- > > Many Thanks > > Harry > > ------------------------------------------------------------------------ > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos >

15 27

Not seeing all memory in CentOS 5.1 x86_64
by Ruslan Sivak 11 Jun '08

11 Jun '08

I'm running CentOS 5.1 with all updates, and the xen kernel. For some reason the OS is not seeing the full amount of ram. #uname -a Linux CentOS-VM-A 2.6.18-53.1.21.el5xen #1 SMP Tue May 20 10:03:27 EDT 2008 x86_64 x86_64 x86_64 GNU/Linux # free total used free shared buffers cached Mem: 6104064 3445136 2658928 0 1412236 1515032 -/+ buffers/cache: 517868 5586196 Swap: 2031608 0 2031608 On another box with identical hardware, I see # free total used free shared buffers cached Mem: 5038080 1818980 3219100 0 145208 1148608 -/+ buffers/cache: 525164 4512916 Swap: 2031608 152 2031456 Both of these boxes have 8GB of ram. Is there a reason I'm not seeing all of it? Russ

9 22

[Off Topic, kind of] eMachine model T5254
by Bob Taylor 11 Jun '08

11 Jun '08

Hi list, Best Buy currently has an eMachine on sale for less than $300.00 without monitor. I didn't see any recent complaints on www.consumeraffairs.com. I didn't take the time to do a thourgh search so may have missed some. Red Hat hardware list does not have one eMachine listed. I went to eMachine's home page and found the following: AMD Athlon™ BE-2350 dual-core processor NVIDIA® GeForce® 6100 2048MB DDR2 dual-channel 320GB 7200rpm SATA II 16x DVD±R/RW SuperMulti drive High-performance 15-in-1 digital media card reader 6-channel (5.1) high-definition audio They do not list the manufacturer/model of the media card reader and audio. Any hardware guru see any problems? -- Bob Taylor

5 5

Could this be an advantage of CentOS over the PNAELV distribution?
by Luigi Perroti 11 Jun '08

11 Jun '08

Hello all, I understand that when releasing updates the CentOS team strips logos and such things from the upstream sources. If I'm not mistaken there is also a certain QA process going on before the actual releases, at least for major updates like the upcoming 5.2 version. Does this happen also for security updates? Since I don't mind the small delay from the upstream releases I was wondering if the additional QA process could actually be an advantage over the PNAELV distribution. This could be even more true if the QA isn't only related to CentOS specific changes but it's done even for practically untouched updates. Is this assumption correct? Thanks for reading, Luigi

2 1

Required for CentOS4.4 ia64 Clustersuite package
by Balaji 11 Jun '08

11 Jun '08

Dear All, I am new in Itanium server Installation and I have installed all the CentOS4.4 ia64 CDs and kernel version is 2.6.9-42.EL and I need the Cluster Suite Package for the same. I tried to google-out and i can't find out the Clustersuite package for CentOS4.4 and I findout the CentOS4.5 Clustersuite package from CentOS Website can any one send me path of the Clustersuite package for CentOS4.4 ia64 Please, do the needful. Regards -S.Balaji

3 2

yum upgrade 4.3 -> current ?
by Chris Boyd 11 Jun '08

11 Jun '08

Got a box running 4.3 x86 and we're trying up get it updated to 4.6, but yum is consuming all available memory (1GB) and swap (2GB), and then the oom starts killing processes. I've disabled all the optional repositories, done yum clean all, and still have the same problem even if I try to just update a specific package. Google got me this link, but no obvious resolution: http://www.centos.org/modules/newbb/viewtopic.php? forum=8&topic_id=5588&viewmode=flat Any pointers appreciated. --Chris

8 15

Bind Standard Practise
by Joseph L. Casale 11 Jun '08

11 Jun '08

In a chroot Bind installation, named.conf is located in /var/named/chroot/etc/. In that file, references to files for includes and other zones can be made as "filename" without a path. What is the expected location when no path is used, simply up one dir under chroot/? While moving a DNS from one machine to another, I noticed all ref's are "/etc/filename" and they are in the same dir as named.conf which obviously looks different from all the sample files. Thanks! jlc

2 2

Excluded files from repos?
by Sam Drinkard 11 Jun '08

11 Jun '08

Ok.. I'm way behind the 8-ball on setting things up correctly, but after going over the protection things in yum, I ran a yum check-update and it returned with having 318 files excluded because of protection. Is that too high a number? I have the numerical protection set to 1. Is there a good tutorial about how to correctly set up the protect base. Sorry if this is a noobie question.. I've been away from CentOS for some time and needing to get back into the swing of things. Thanks.. Sam

6 8

CentOS-announce Digest, Vol 40, Issue 5
by centos-announce-request＠centos.org 11 Jun '08

11 Jun '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:0529 Moderate CentOS 3 i386 net-snmp - security update (Tru Huynh) 2. CESA-2008:0529 Moderate CentOS 3 x86_64 net-snmp - security update (Tru Huynh) 3. CESA-2008:0528-01: Moderate CentOS 2 i386 ucd-snmp security update (John Newbigin) ---------------------------------------------------------------------- Message: 1 Date: Tue, 10 Jun 2008 22:39:52 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2008:0529 Moderate CentOS 3 i386 net-snmp - security update To: centos-announce(a)centos.org Message-ID: <20080610203952.GA706(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2008:0529 net-snmp security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2008-0529.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/net-snmp-5.0.9-2.30E.24.i386.rpm updates/i386/RPMS/net-snmp-devel-5.0.9-2.30E.24.i386.rpm updates/i386/RPMS/net-snmp-libs-5.0.9-2.30E.24.i386.rpm updates/i386/RPMS/net-snmp-perl-5.0.9-2.30E.24.i386.rpm updates/i386/RPMS/net-snmp-utils-5.0.9-2.30E.24.i386.rpm source: updates/SRPMS/net-snmp-5.0.9-2.30E.24.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update net-snmp Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

← Newer
1
...
26
27
28
29
30
31
32
...
42
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss June 2008