Discuss August 2008

discuss@lists.centos.org

271 participants
280 discussions

nsswitch.conf, ldap, local groups problem
by Mark Hennessy 28 Aug '08

28 Aug '08

I'm using CentOS 5.0,5.1, and 5.2 on several systems where I'm seeing this problem. Hello, I'm seeing a weird problem that perhaps someone has run into with groups. First, a little background. I was made aware of a problem with CentOS 5 where if the nscd password cache is clear and someone tries to log in if there is no network connection with an LDAP account that it just hangs. Even worse, if the machine is rebooted and it continues to have no network connection, even root login doesn't work. I messed around with nsswitch.conf to fix this problem. I altered these lines as so: passwd: files [!NOTFOUND=return] ldap shadow: files [!NOTFOUND=return] ldap group: files [!NOTFOUND=return] ldap and the problem seemed to go away. But now, here's the weird stuff: I have defined in my local /etc/groups file this line: group1:x:100:apache group2:x:101:apache 'getent group groupname' shows the right info: # getent group group1 group1:x:100:apache # sudo -u apache bash $ groups apache I revert back to my old config: # sudo -u apache bash $ groups apache group1 group2 Also, something else that's interesting. If I do this: passwd: files [!NOTFOUND=return] ldap shadow: files [!NOTFOUND=return] ldap group: ldap [NOTFOUND=continue] files and reboot, udev segfaults and the system freezes up after a few more seconds. Starting udev: /sbin/start_udev: line 43: 519 Segmentation fault "$@" $ARGS /sbin/start_udev: line 201: 523 Segmentation fault /sbin/udevd -d Wait timeout. Will continue in the background.[FAILED] Any advice?

6 17

System goes into read only mode - not the same as posted earlier
by Stephen Moccio 28 Aug '08

28 Aug '08

Hello all, I’m at my wits end trying to resolve this. We are running centos 4.5 on Intel hardware. Dual SCSI disk drives mirrored on an LSI Logic controller. Every once in a while and not always on the same server and not only on the local SCSI Drives. System A – Dual internal drives on /dev/sda System B – Dual internal drives on /dev/sdc with a DAS on /dev/sda. Each of these systems experienced a kernel mptbase error and placed /dev/sda into read only mode. Note again the /dev/sda isn’t always local. For system A – remounting in ro mode didn’t work and the system had to be rebooted. File system check and bad block checks showed nothing and when the system was rebooted – it was fine. A portion of the messages log is below. I would appreciate any ideas or directions. Thanks, Steve Moccio Aug 7 01:00:06 sshd(pam_unix)[18336]: session opened for user root by (uid=0) Aug 7 09:00:36 kernel: mptscsi: ioc1: attempting task abort! (sc=f6f07c80) Aug 7 09:00:36 kernel: scsi1 : destination target 0, lun 0 Aug 7 09:00:36 kernel: command = Write (10) 00 00 00 fb d7 00 01 90 00 Aug 7 09:00:38 kernel: mptbase: Initiating ioc1 recovery Aug 7 09:00:44 kernel: drivers/message/fusion/mptctl.c@1985::mptctl_do_mpt_command - Busy with IOC Reset Aug 7 09:01:19 last message repeated 10 times Aug 7 09:01:40 last message repeated 7 times Aug 7 09:01:41 kernel: mptbase: ioc1: ERROR - Diagnostic reset FAILED! (102h) Aug 7 09:01:41 kernel: mptbase: ioc1 NOT READY WARNING! Aug 7 09:01:41 kernel: mptbase: WARNING - (-1) Cannot recover ioc1 Aug 7 09:01:41 kernel: mptscsi: ioc1: Issue of TaskMgmt failed! Aug 7 09:01:41 kernel: mptscsi: ioc1: task abort: FAILED (sc=f6f07c80) Aug 7 09:01:41 kernel: mptscsi: ioc1: attempting bus reset! (sc=f6f07c80) Aug 7 09:01:41 kernel: scsi1 : destination target 0, lun 0 Aug 7 09:01:41 kernel: command = Write (10) 00 00 00 fb d7 00 01 90 00 Aug 7 09:01:41 kernel: mptbase: Initiating ioc1 recovery Aug 7 09:01:46 kernel: mptbase: ioc1: ERROR - Doorbell ACK timeout (count=4999), IntStatus=80000000! Aug 7 09:01:47 kernel: drivers/message/fusion/mptctl.c@1985::mptctl_do_mpt_command - Busy with IOC Reset Aug 7 09:02:23 last message repeated 10 times Aug 7 09:02:44 last message repeated 7 times Aug 7 09:02:47 kernel: mptbase: ioc1: ERROR - Diagnostic reset FAILED! (102h) Aug 7 09:02:47 kernel: mptbase: ioc1 NOT READY WARNING! Aug 7 09:02:47 kernel: mptbase: WARNING - (-1) Cannot recover ioc1 Aug 7 09:02:47 kernel: mptscsi: ioc1: bus reset: FAILED (sc=f6f07c80) Aug 7 09:02:48 kernel: mptscsi: ioc1: Attempting host reset! (sc=f6f07c80) Aug 7 09:02:48 kernel: mptbase: Initiating ioc1 recovery Aug 7 09:02:51 kernel: drivers/message/fusion/mptctl.c@1985::mptctl_do_mpt_command - Busy with IOC Reset Aug 7 09:02:51 kernel: drivers/message/fusion/mptctl.c@1985::mptctl_do_mpt_command - Busy with IOC Reset Aug 7 09:02:53 kernel: mptbase: ioc1: ERROR - Doorbell ACK timeout (count=4999), IntStatus=80000000! Aug 7 09:02:58 kernel: drivers/message/fusion/mptctl.c@1985::mptctl_do_mpt_command - Busy with IOC Reset Aug 7 09:03:34 last message repeated 10 times Aug 7 09:03:48 last message repeated 5 times Aug 7 09:03:54 kernel: mptbase: ioc1: ERROR - Diagnostic reset FAILED! (102h) Aug 7 09:03:54 kernel: mptbase: ioc1 NOT READY WARNING! Aug 7 09:03:54 kernel: mptbase: WARNING - (-1) Cannot recover ioc1 Aug 7 09:03:54 kernel: scsi: Device offlined - not ready after error recovery: host 1 channel 0 id 0 lun 0

1 0

RADVD address timeouts
by Robert Moskowitz 27 Aug '08

27 Aug '08

I am using RADVD to assign IPv6 addresses. It works for 'static' devices. I want it to work for devices that move to different networks without having to restart the network on those devices. So if I have a notebook on network Lab1 getting prefix 2607:7:4:1::64 and moves to network Lab2 where RADVD advertises prefix 2607:7:4:2::/64, I want the host to switch to the new address. This is NOT for MobileIP. Right now I get the new global address, but the old address never goes away. I have tried setting AdvPreferredLifetime, but that has not helped.

1 0

OT - Offline uncorrectable sectors
by Lorenzo Quatrini 27 Aug '08

27 Aug '08

I have few disk that have offline uncorrectables sectors; I found on this page how to identify the sectors and force a write on them to trigger the relocation of bad sectors on the disk: http://smartmontools.sourceforge.net/BadBlockHowTo.txt My question is: since I'm too lazy to follow all the procedure, do you think that a force rewrite of the full disk would work? Eg. "dd if=/dev/sda pf=/dev/sda bs=512" Shoudl this be done at runlevel 1 or offline or I can do it without too many worries, since I'm reading and rewriting the same data on the disk? TIA and sorry for the OT Lorenzo Quatrini

7 22

apache
by Mad Unix 27 Aug '08

27 Aug '08

How can I pass the following Oracle 10g variables to my apache? ORACLE_BASE=/u01/oracle ORACLE_HOME=/u01/oracle/10g ORACLE_SID=king LD_LIBRARY_PATH=$ORACLE_HOME/lib LD_LIBRARY_PATH_32=$ORACLE_HOME/lib32 PATH=$PATH:$ORACLE_HOME/bin NLS_LANG=AMERICAN_AMERICA.AR8MSWIN1256; export NLS_LANG NLS_DATE_FORMAT=dd-mm-yyyy ; export NLS_DATE_FORMAT export ORACLE_BASE ORACLE_HOME ORACLE_SID LD_LIBRARY_PATH LD_LIBRARY_PATH_32 PATH I start my apache through service httpd start... [root@king script]# ps -ef | grep apache apache 28494 15315 0 04:02 ? 00:00:01 /usr/sbin/httpd -k start apache 28495 15315 0 04:02 ? 00:00:01 /usr/sbin/httpd -k start apache 28496 15315 0 04:02 ? 00:00:00 /usr/sbin/httpd -k start apache 28497 15315 0 04:02 ? 00:00:01 /usr/sbin/httpd -k start apache 28499 15315 0 04:02 ? 00:00:01 /usr/sbin/httpd -k start apache 28500 15315 0 04:02 ? 00:00:01 /usr/sbin/httpd -k start apache 28502 15315 0 04:02 ? 00:00:00 /usr/sbin/httpd -k start apache 28503 15315 0 04:02 ? 00:00:00 /usr/sbin/httpd -k start root 31178 16299 0 08:36 pts/2 00:00:00 grep apache Thanks -- Madunix_at_Gmail Sysadmin "Computers are useless. They can only give you answers" - Pablo Picasso "Never trust a computer you can't throw out a window." - Steve Wozniak

9 12

restarting static-routes-ipv6
by Robert Moskowitz 27 Aug '08

27 Aug '08

I want to change the contents of my /etc/sysconfig/static-routes-ipv6 and NOT restart the network. Is there a way to do this??? I know about ifup and ifdown for interfaces, but what about routing (and IP6 at that).

3 5

CentOS-announce Digest, Vol 42, Issue 9
by centos-announce-request＠centos.org 27 Aug '08

27 Aug '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:0849 Important CentOS 3 i386 ipsec-tools - security update (Tru Huynh) 2. CESA-2008:0849 Important CentOS 3 x86_64 ipsec-tools - security update (Tru Huynh) 3. CESA-2008:0836 Moderate CentOS 3 i386 libxml2 - security update (Tru Huynh) 4. CESA-2008:0836 Moderate CentOS 3 x86_64 libxml2 - security update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Wed, 27 Aug 2008 00:54:10 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2008:0849 Important CentOS 3 i386 ipsec-tools - security update To: centos-announce(a)centos.org Message-ID: <20080826225410.GA14569(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2008:0849 ipsec-tools security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2008-0849.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/ipsec-tools-0.2.5-0.7.rhel3.5.i386.rpm source: updates/SRPMS/ipsec-tools-0.2.5-0.7.rhel3.5.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update ipsec-tools Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

Logwatch doesn´t report on dovecot
by henry ritzlmayr 27 Aug '08

27 Aug '08

Hi List, Centos 5(.2) ships with dovecot-1.0.7-2.el5 and logwatch-7.3-6.el5 However the shipped logwatch is not aware of dovecot 1.x meaning none of the log entries (var/log/maillog) are processed at all. Should I file a bug report on this? Upstream? cheers Henry

2 2

postfix install error: fatal file /etc/postfix/main.cf: parameter setgid_group: unknown group name: postdrop
by Rainer Traut 27 Aug '08

27 Aug '08

Hi, sys: Centos 5.2 x86_64 Trying to switch from sendmail to postfix I did: # yum remove sendmail which resulted in erasing of: mdadm sendmail-doc sendmail sendmail-cf mutt fetchmail redhat-lsb I did then: yum -y install redhat-lsb.x86_64 postfix and got this error: Installing: postfix ######################### [1/2] postfix: fatal: file /etc/postfix/main.cf: parameter setgid_group: unknown group name: postdrop warning: group postdrop does not exist - using root warning: group postdrop does not exist - using root warning: group postdrop does not exist - using root warning: group postdrop does not exist - using root Installing: redhat-lsb ######################### [2/2] I checked and indeed there is no group postdrop on the system. On an El5 system I see the group. Thx Rainer

3 8

OT: Port Scan
by Lanny Marcus 27 Aug '08

27 Aug '08

I just did a port scan on one of my web sites. Shared Hosting. Looking at ports 1863, 3000 and 3001. Are those ports normally open or something I should file a support ticket about? TIA! Port State Service 21 open ftp 22 open ssh 25 open smtp 80 open http 110 open pop3 143 open imap 443 open https 993 open imaps 995 open pop3s 1863 open msnp 3000 open hbci 3001 open redwood-broker 3306 open mysql 5190 open aol 5432 open postgres

4 6

← Newer
1
...
4
5
6
7
8
9
10
...
28
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss August 2008