Discuss August 2008

discuss@lists.centos.org

271 participants
280 discussions

ext2online / ext2resize
by Al Sparks 11 Aug '08

11 Aug '08

I'm running CentOS 5.2 x x86_64. I did an lvextend of a logical volume, and proceeded to run one of the ext2 utilities (e.g. ext2online, ext2resize) and found to my surprise that it wasn't on there. So I started googling around, and as far as I can see, though I'm not sure, they're supposed to be a part of the e2fsprogs package. Well, it's installed on the system, at least the x86_64 version is. Should I be downloading the i386 version of that package? If I do, will I be stomping on the x86_64 tools? Is there another package I should be looking at? BTW, I tried loading the source, and compiling, ./configure and make fails. === Al

3 3

Need to restart ypserv to update the nis maps
by Theo Band 11 Aug '08

11 Aug '08

Hi I use NIS om my network (CentOS4.6). When an update on a map occurs (home directory changed in /etc/passwd for instance), I run make -C /var/yp/ and check the result on a client. On the client I use "ypcat passwd" and find indeed that the update has propagated (the clients run ypbind service). On the client I have configured /etc/nsswitch.conf with : passwd: files nis shadow: files nis group: files nis The problem is however that on the client, if I try to use the new data, it still uses the old one. For instance "cd ~john" still directs me to the old path instead of to the updated path (as correctly reported by "ypcat passwd"). To solve it I need to restart the ypserv service on the nis server for every change. Does anyone now what could be the problem or where I should look? Apparently the OS gets password and user info using another way than the ypcat tool. (ypserv-2.13-18,ypbind-1.17.2-13) Thanks, Theo

6 8

centos 5.2 / sun java ?
by Stephan van Hienen 11 Aug '08

11 Aug '08

Starting with rhel 5.2, Redhat provides sun java in the Supplementary channel. Are there any plans to release sun-java in the centos extra or plus repo ? Would be nice to keep sun java up to date using yum. Thnx, Stephan

5 4

Question about Open SSH Public Keys
by Clint Dilks 11 Aug '08

11 Aug '08

Hi People I am setting up some systems with ssh public keys and as part of this I am using the from directive inside .ssh/authorized_keys. Currently I am using the IP address to control the source. eg from="10.0.0.1" but on one CentOS 4 System that is up to date this will only work if I replace the IP with the DNS name of the server. I have verified that DNS is resolving the DNS Name to the correct IP address on the server in question and all seems to be fine. Aside from this CentOS Box have only been able to test this out on some old FC6 Machines and they behave as I expected. Anyone got any ideas why this might be happening ? I have compared the sshd config between the FC6 Machines and the CentOS Box and can't spot anything that would explain the issue. Thanks for any ideas, and have a nice day :)

3 3

rebuilding the kernel.
by Yahia Tachwali 11 Aug '08

11 Aug '08

Hello folks, I am trying to add HDLC module support in the menuconfig. However, I am facing difficulties in rebuilding the kernel and modules. My main objective is to get the HDLC supported in kernel 2.6.9. I have a CentOS 4.4 with kernel 2.6.9.42. I need help in finding the best way to add the HDLC support whether through getting an RPM package for it or refering me to the right procedure in rebuilding the kernel. Thank you very much in advance for your help.

7 20

Help: Server security compromised?
by Noob Centos Admin 10 Aug '08

10 Aug '08

Hi, Need some help about this as it's gotten me really concerned. I'm probably reading too much into this but for about two weeks now my daily log has increased by almost 10 times. After running through a couple of days of logs with a script, it seems that I'm getting flooded on SMTP from this IP 219.64.114.52 which belongs to VSNL and appears to be statically assigned IP (219.64.114.52.chn.bb-static.vsnl.net). This IP address is apparently listed in the spamhous.org Policy Block List, eXploit Block List and Composite Block List, which basically indicates it's either an open proxy or a hijacked system. I'm not sure what it's trying to do, but for exactly 10 hours a day which correspond to India 9:30am or so until 7pm or so, I will get massive amounts of SMTP connections from this host. It will attempt to masquerade as domains on my server while trying to send to non-existent accounts on these domains. 2008-08-06 13:32:58 H=(****.com) [219.64.114.52] F=<lnyz(a)hush.com> rejected RCPT <484f6f23.8020304(a)****.com>: 2008-08-06 13:32:58 H=(****.com) [219.64.114.52] incomplete transaction (connection lost) from <djclg(a)hotmail.com> 2008-08-06 13:32:58 unexpected disconnection while reading SMTP command from (****.com) [219.64.114.52] 2008-08-06 13:32:58 H=(****.com) [219.64.114.52] F=<48720243.8060909(a)****.com> rejected RCPT <285.8030501(a)****.com>: 2008-08-06 13:32:58 H=(****.com) [219.64.114.52] incomplete transaction (connection lost) from <lnyz(a)hush.com> 2008-08-06 13:32:58 unexpected disconnection while reading SMTP command from (****.com) [219.64.114.52] At this point, I thought it was just a case of a dedicated spamming, until I decided I had enough of multi-megabytes daily logs flooding my mailbox, plus the fact it was probably contributing to an increase server load in the past weeks as the mail daemon had to handle the connections. So I thought I could just block the IP using iptables. I had a bad experience locking myself out by accident after editing the iptables file so for this time I decided to test from command line first using instructions from the Internet like this /sbin/iptables -A RH-Firewall-1-INPUT -s 219.64.114.52 -j DROP and I got an error that chain/command /sbin/iptables -L produces "blank" output [root@myserver confused]# /sbin/iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination which was of course a shock to me, since that seems to say that my server firewall is basically non-existent. I did a /sbin/service iptables restart and iptables -L produced the expected output showing all the rules on file. I could then add the new rule from command line without any messages. Minutes later, my tail -f on the exim log started spewing the smtp messages AGAIN. iptables -L again shows NO RULES Everytime I restart, iptables, for a short while, the rules are there. But minutes later, it's wiped. So I'm very concerned that the server had been compromised and something is wiping my iptables. Or am I just badly mistaken about the way iptables -L is supposed to work? If not, what should I do next to find and eliminate this problem? Thanks in advance for any advice!

10 19

Mount a Xen disk image file
by Dirk H. Schulz 10 Aug '08

10 Aug '08

Hi Folks, I search for a way to mount the .img files virt-install creates for Xen VMs. Using fdisk -lu I found it contains to 2 partitions: > # fdisk -lu /var/lib/xen/images/BaseCentos.img > last_lba(): I don't know how to handle files with mode 81ed > Sie müssen angeben Zylinder. > Sie können dies im Zusatzfunktionsmenü tun. > > Platte /var/lib/xen/images/BaseCentos.img: 0 MByte, 0 Byte > 255 heads, 63 sectors/track, 0 cylinders, zusammen 0 Sektoren > Einheiten = Sektoren von 1 × 512 = 512 Bytes > > Gerät boot. Anfang Ende Blöcke Id System > /var/lib/xen/images/BaseCentos.img1 * 63 208844 104391 83 Linux > /var/lib/xen/images/BaseCentos.img2 208845 8177084 3984120 8e Linux LVM And I can mount the first partition with no problem using the offset (start) from the partition table: > mount -o loop,offset=$((63*512) /PATH/TO/IMAGE.img /MOUNTPOINT But I cannot mount the second partition using the offset of it: > mount -o loop,offset=$((208845*512)) /PATH/TO/IMAGE.img /MOUNTPOINT > mount: you have to specify the file system type Even using ext3, ext2 does not work. I do not think the offset is incorrect - I venture it is because the second partition is LVM (8e). Did anybody out there succeed in mounting an LVM partition out of an image file? Any hint or help is appreciated. Dirk

3 8

Xen and bonding on Centos 5.2
by Dirk H. Schulz 10 Aug '08

10 Aug '08

Hi folks, I am stuck with a weird phenomenon. I have set up two servers as xen servers with bonded interfaces (mode 1). The bond interface works fine on both servers as long as xen is not used. When using xen's network-bridge script (with netdev=bond0), one server works fine without problems, and the other starts upping and downing the slave interfaces of the bond in a very fast manner (several runs per second). Both configurations are identical, the only difference is: - the working server has tg3 nic drivers - the dysfunctional server has e100 nic drivers. Does it really depend on the nic driver if bonding works? And why does it not work in xen, but work fine without xen? What can I do to analyse the problem? I know I could ask this on the xen list, but I fear that this is a redhat/centos specific phenomenon. Any hint or help is appreciated. Dirk

2 2

can't access irc server on xen domU, please help
by Rudi Ahlers 10 Aug '08

10 Aug '08

Hi all, I'm running a CentOS 5.2 server with a FC8 xen domU guest, and an irc server on the FC8 domU guest. For some odd reason, I can't access the irc server on the xen domU guest. >From FC8, when I run netstat -a, I can see irc is listening: netstat -a Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 *:ircd *:* LISTEN tcp 0 0 *:6668 *:* LISTEN tcp 0 0 *:6669 *:* LISTEN tcp 0 0 *:ftp *:* LISTEN tcp 0 0 192.168.10.:afs3-fileserver *:* LISTEN tcp 0 0 localhost.localdomain:smtp *:* LISTEN tcp 0 0 192.168.10.13:ftp 196-209-84-62-tpr-esr:49615 ESTABLISHED tcp 0 0 *:http *:* LISTEN tcp 0 0 *:ssh *:* LISTEN and running nmap on the localhost looks promising as well: netstat -a Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 *:ircd *:* LISTEN tcp 0 0 *:6668 *:* LISTEN tcp 0 0 *:6669 *:* LISTEN tcp 0 0 *:ftp *:* LISTEN tcp 0 0 196.34.136.:afs3-fileserver *:* LISTEN tcp 0 0 localhost.localdomain:smtp *:* LISTEN tcp 0 0 196.34.136.55:ftp 196-209-84-62-tpr-esr:49615 ESTABLISHED tcp 0 0 *:http *:* LISTEN tcp 0 0 *:ssh *:* LISTEN Yet, from the outside (either from another PC, or the dom0 itself), I can't connect to the irc ports. I've even disabled iptables on the dom0 altogether, but stil can't connect to it. The only open ports are: PORT STATE SERVICE 80/tcp open http 443/tcp closed https 7001/tcp closed afs3-callback 8000/tcp closed http-alt 8080/tcp closed http-proxy 8081/tcp closed blackice-icecap How do I get this to work? P.S. Sorry for the cross-post, for those of you who are on the centos-virt list as well, I just find that this list is being used more. -- Kind Regards Rudi Ahlers

3 11

New kernel and keyboard shortcuts
by Mark Hull-Richter 09 Aug '08

09 Aug '08

Has anyone else noticed or had a problem with keyboard shortcuts not working properly after the last kernel update? I'm finding on my 64-bit home system that even <alt><f4> no longer works in my terminal windows, and none of the normal keyboard shortcuts in OOo work properly either. Just curious if it's just me.... mhr

1 0

← Newer
1
...
19
20
21
22
23
24
25
...
28
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss August 2008