Discuss October 2009

discuss@lists.centos.org

338 participants
325 discussions

[OT] DHCP auth&auth software
by Marko Vojinovic 19 Oct '09

19 Oct '09

Does anyone know about some free (as in beer, and maybe as in speech) software which would implement authentication and authorization of a user prior to issuing a valid dhcp lease? I imagine the following scenario: someone walks into my office building with a laptop (a colleague, a visitor, a guest, whoever), and hooks up onto the local net (wired or wireless). The server detects an unknown MAC address, issues a bogus dhcp lease which resolves all dns queries to a single internal web page with a form the user is supposed to fill in and send. After he does so, an administrator does a sanity check of the data the user provided, and grants or denies access. If access is granted, the user gets a new, unrestricted dhcp lease, which provides him with a normal access to local network. The goal is to have a database which relates IP or MAC addresses to people names, so I can track a person down efficiently if he brings an infected/spamming machine into the building. I would know how to build this infrastructure manually, but it's a lot of work, and I don't want to reinvent the wheel. Google somehow failed to help, or I failed to provide the right keywords. :-( So what are my options? TIA, :-) Marko

5 8

Re: [CentOS] the ongoing wait for centos 5.4
by Neil Aggarwal 19 Oct '09

19 Oct '09

>> I am burning the DVD ISO image to disk right now. It is available from >> some mirrors. >which are mostly incomplete... maybe some isos are ok but even the centos.org >machines are not yet in sync... >I would strongly suggest that you wait for the actual announcements, but ymmv. This leads me to a question: If I use BitTorrent to download the DVD image from tracker.centos.org, I assume the file has to be complete or could it still be missing something? Thanks, Neil -- Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com Will your e-commerce site go offline if you have a DB server failure, fiber cut, flood, fire, or other disaster? If so, ask about our geographically redundant database system.

2 1

the ongoing wait for centos 5.4
by Robert P. J. Day 19 Oct '09

19 Oct '09

at the risk of picking at that scab a bit longer, i'm going to toss out a comment regarding people still waiting for the public availability of centos 5.4. here: http://lists.centos.org/pipermail/centos/2009-October/083743.html we read: "The last status (from twitter) is 2 days old with the '5.4 is baked! centos internal network will start syncing up today. Release ~ soon!'. Any ETA?" followed by the response: "Just relax and wait, this is a _volunteer_ based project. Want a release date? Go pay for RHEL." not to put too find a point on it, but that reply is more than a bit dickish. it doesn't *matter* if it's a volunteer project. as i see this, this is turning into an issue of credibility. once someone posts that the 5.4 release is allegedly "baked" and syncing is beginning, then it's not unreasonable that people will start getting anxious to see it hit the mirrors. and as the days go by, it's not unreasonable for those people to start wondering what the heck is going on. again, whether people are being paid to do any of this work is not relevant. it's important, from the perspective of reputation, that everyone see the centos project as being efficiently and competently run, and making what *appears* to be an announcement of completion and the beginning of syncing servers, followed by days of awkward silence and increasingly defensive rhetoric, is not the way to do it. it just looks bad. rday -- ======================================================================== Robert P. J. Day Waterloo, Ontario, CANADA Linux Consulting, Training and Annoying Kernel Pedantry. Web page: http://crashcourse.ca Twitter: http://twitter.com/rpjday ========================================================================

10 16

trying to understand OSS, GPL, BSD & other licensing model for software distribution.
by Rudi Ahlers 19 Oct '09

19 Oct '09

Hi all, We are busy developing some software (some is web based, others not) and I am having a bit of hard time understanding (or rather, choosing) a license model to work with, We will offer some free software (PHP based scripts, and even Windows based applications) and for this I'm sure the GPL, or even LGPL (for the network side?) will work fine. But, we also need to suppose these scripts, and will be charging for support (other for installations, customization, or even custom derivations, etc), but at the same time we need to distribute some commercial software to cover developer's salaries, rents, marketing, business growth, etc. Now, my question(s) is as follows: Can I sell one script as GPL, but another as AGPL, or even BSD under the same company name? And if these 2 are tied together (i.e. being able to be used together, although seperate programs / script - for example Apache + PHP), how would I license them? We are writing a series of PHP + MySQL based scripts which can be used on the internet, either stand-alone, or in conjunction with other scripts (API driven), and I want to offer a free, limited edition, as well as commercial edition with more features. We're also writing some software that makes use of MySQL / sqlite / postgresql, and even MSSQL, so I need to take their licenses into consideration. What would be the best license for this? I know it's broad, but there's just too much to readup on the different licences and I've read a lot already, not knowing where to go. I have a feeling that I may need to go the dual / multi-license route, but even then I don't know which licences to use. The open source projects wouls also be open for other people to add their own modifications, but I would also like to allow others to write commercial addon's as well. Any pointers, and even past-experiences? -- Kind Regards Rudi Ahlers CEO, SoftDux Hosting Web: http://www.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

6 7

allowing users to issue the "shutdown" command
by Buz Davis 19 Oct '09

19 Oct '09

I am running CentOS 5.3 and have just the two accounts "root" and "buz". I would like to be able to issue "shutdown" from the account "buz", and thus created /etc/shutdown.allow with the single entry "buz" (without any quotes). I still get the error message "only root can do this" (or something similar) even if I include the '-a' option on the shutdown command. What am I missing ?

6 5

Confusion about scheduling tasks with crontab
by Niki Kovacs 19 Oct '09

19 Oct '09

Hi, I have to setup a scheduled task on a server, and I just read through some crontab docs. Now I'm confused. It's not so much the syntax of the cron job to define (I got that), it's more... how do I get to define it? Use a text editor (vi or the likes) to edit /etc/crontab directly? Or create some empty file in /etc/cron.daily or /etc/cron.hourly or the likes and then edit it using crontab -e ? Anyway, here's what I'd like to do. I have a script: /root/scripts/backup.sh I want to run that script every day at 07:00 in the morning. Once. Now how would I go about that? The thing is: I'd like to know an orthodox way to go about this. You can be laconic in your answers, I'll retrive the details in the docs. Cheers, Niki

7 9

iptables - Forwarding with port translation thru an OpenVPN tunnel
by Chuck Munro 19 Oct '09

19 Oct '09

Perhaps someone with a sharper brain than I can solve this little mystery. I've Googled until I'm blue in the face, read all TFM's I can find, and tried several iptables rule combinations but just can't get the following to work. Here's my challenge: I have a CentOS-5.3 "main" server with a static public IP address running Apache, OpenVPN, and a bunch of other services. The primary IP address for the only NIC in this box is used by Apache on standard ports 80 and 443. I have a secondary static public IP address assigned to this same NIC as eth0:1 I have a working OpenVPN tunnel going to another CentOS-5.3 server which has Apache listening on its eth0 NIC for requests on non-standard ports 29080 and 29443(don't ask!). This server is accessible on its static public IP address and thru OpenVPN tunnel from the main server. The main server is the OpenVPN server as well, with private IP address 172.16.xxx.1/32 auto-assigned to it. The second server is a VPN client with IP address 172.16.xxx.yyy/32 assigned. The narrow netmasks are the OpenVPN default, presumably used for isolation among multiple clients. OpenVPN is configured to run over the main server's NIC via its eth0:1 secondary IP address 64.aaa.bbb.ccc The main server has a static route set up between its eth0:1 IP and the remote server's public IP address (not the tunnel IP). This route is only there so that during initial VPN negotiations the data will move via eth0:1's IP address. Things like ping, SSH, scp and HTTP/HTTPS all work correctly thru the VPN in both directions, so the VPN itself is solid. Ok, so now I want external HTTP/HTTPS requests made to the main server's eth0:1 public IP address to be forwarded thru the VPN to the second remote server, with port translation along the way. Here is what I want to happen: Outside world HTTP/HTTPS requests to eth0:1 ports 80/443 | V CentOS eth0:1 (64.aaa.bbb.ccc) | V Translate to ports 29080/29443 | V Forward requests thru the tunnel to 172.16.xxx.yyy | V Remote Apache responds, packets return thru VPN to "main" | V Response goes back to the outside world via 64.aaa.bbb.ccc HTTP/HTTPS requests to the 64.aaa.bbb.ccc public IP just hang and time out. Direct requests to the remote server on the non-standard ports work fine. I've tried lots of iptables example entries found on several forums but so far none of them seem to work. Does anyone have a cookbook-like complete set of iptables rules that will accomplish what I need? Is it possible I need to set up strong-end routing on the remote server to send the response packets back thru the VPN? (such a pain to configure) Any assistance will be most gratefully received! Best Regards, and my sincere kudos to the CentOS team and helpful list members over the past few years. Chuck

3 2

For the CentOS team : The openais Nightmare. And some questions.
by F M 18 Oct '09

18 Oct '09

Hello guys, I have some questions about how the CentOS choose and rebuild RH RPMS. First here is my w-e nightmare : I have a 4 nodes Xen cluster using GFS2 (on SAN) and the Cluster Suite. Everything is from the CentOS repo. I am not updating these computers very often. I am always waiting several weeks to install updates just to be sure that everything is fine for others. This w-e I installed the lastest updates on these machines. Some were cluster related : cman, rgmanager and gfs2_tools. These updates are in the CentOS updates repo for 1 month now. After the reboot the cluster died. After hours of troubleshooting I found this thread on the Linux cluster mailing list : http://bit.ly/3HxVLu It said that CentOS is missing the openais update and without it the cluster is broken. The solution is to downgrade the RPMS installed. This fix the probe for now. Why the other RPM did not complain during the installation ? No idea. But what is interesting is that the threat 1 month old. And today the openais RPM is still missing from CentOS repo. It means that at the moment you cannot install a cluster using CentOS. Now my questions : Why after 1 month the update is still missing ? Without it : no cluster at all. As I am writing this email you cannot built a Cluster using CentOS. Is the RPMS for openais was hidden by RH ? No We can find it on the RH FTP. And after looking in other threat I found that Mr K Singh built it on 16-Sep-2009. So why can't I find it on the update. Once again I'd like to remind you that without it you cannot build a CentOS Cluster. I do not blame CentOS team. They are making a great job. Without them my company would not have a cluster. We cannot afford to pay 20k $ each year to RH for that. The team is making an amazing job and I do not care if I wait 1 or 2 months more for 5.4. And I really really respect Mr Singh. This email is not directed to him at all it is just that he is the one that kindly built the openais update and share it on his centOS page. But the question remains : why is this update is not on the repo ? And are they others ? Tx for answering me and have a good week-end. it is Sunday 6PM and mine finally starts ;-)

2 1

installing working skype possible???
by ken 18 Oct '09

18 Oct '09

I easily installed and used skype on my previous linux distro on this same machine, but am having problems getting it to work on my relatively new centos 5.3. I downloaded three versions of skype from their website: the two fedora rpms wouldn't install, their error messages complaining that it needed another package, a package which was already installed. (I figured it had to be looking for that package in the wrong place... something I couldn't do anything about.) So I downloaded the suse 10+ rpm and it installed just fine. But when I ran it (/usr/bin/skype), it errored out also, saying "/usr/lib/libstdc++.so.6: version `GLIBCXX_3.4.9' not found (required by /usr/bin/skype)". So I used yum to search for any glibc which remotely corresponded to that glibc and got nothing. So is anybody running skype on 5.3? If so, how did you install it and get it to work? Thanks for the good tips. -- War is a failure of the imagination. --William Blake

2 2

Passenger Best Practice
by Stephen Nelson-Smith 18 Oct '09

18 Oct '09

I want to move from running puppet under it's own web brick server, to using passenger. I'd like to get an idea of how folk are running passenger? Ideally I'd like to keep everything rpm based, so would need ruby enterprise rpms, and then the mod_rails / passenger plugin? How are you folk doing it? I've seen: http://download.elff.bravenet.com/5/x86_64/repoview/mod_passenger.html And I've also seen: https://packages.endpoint.com/ Which seems to do some enterprise ruby. What else is out there? I'm more than happy to do it all myself, but if so it ought to be done in the way which best serves the project... So... what thoughts / recommendations? S. -- Stephen Nelson-Smith, Technical Director, Atalanta Systems Ltd

3 3

← Newer
1
...
16
17
18
19
20
21
22
...
33
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss October 2009