Discuss November 2009

discuss@lists.centos.org

311 participants
291 discussions

Missing yum-priorities in 5.4?
by Morten Torstensen 06 Nov '09

06 Nov '09

I am looking for yum-priorities or any info on any changes here for CentOS 5.4. There is also a forum post for this here: <https://www.centos.org/modules/newbb/viewtopic.php?topic_id=22798&forum=37> Is this missing on purpose? Function merged with another yum package? Or is it just missing as an oversight? -- //Morten //morten(a)mortent.org

6 8

Re: [CentOS] [Samba] Accessing Windows file-system from Linux samba server
by Craig White 06 Nov '09

06 Nov '09

On Wed, 2009-11-04 at 10:43 +0000, Timothy Murphy wrote: > Adam Nielsen wrote: > > > When you mount the share, specify a Windows username to connect as > > (mount ... -o username=tim) > > Thanks for your response. > But sadly, this does not make the slightest difference. > Incidentally, the machine is running Windows XP Pro, > and I am the Administrator. > > I can browse in one share, but not the other, > although as far as I can see everything about them is identical, > except that they are on different drives: > > ----------------------------------------- > [root@helen ~]# mount -t cifs -o user=tim,password=****,rw //harriet/EAGD > /mnt/win > [root@helen ~]# ls /mnt/win > The Sims 2 > [root@helen ~]# umount /mnt/win > [root@helen ~]# mount -t cifs -o user=tim,password=****,rw //harriet/EAGC > /mnt/win > mount error 13 = Permission denied > Refer to the mount.cifs(8) manual page (e.g.man mount.cifs) > ----------------------------------------- ---- no matter how many lists you ask or how many different ways you want to keep asking the question, your problem is always Windows permissions are blocking you. This is not a Linux question. If you don't have permissions to mount a share or descend into a subdirectory, your problem lies with Windows permissions. Your first example demonstrates that it works. Your second example demonstrates that a permissions issue from the Windows 'server' is blocking you. There's no guarantee that even if you are the administrator that you can access a share, folder or file. Windows has a fairly sophisticated ACL system and you would probably be better served learning it than asking so many lists the same questions. Craig -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

3 2

Apache Not Serving, But Is Serving?
by Victor Subervi 06 Nov '09

06 Nov '09

Hi; I installed yum install mod_python and all went well. So I thought it would be appropriate to reboot apache apachectl -k restart and it appeared well but the pages don't load (they hang). Nevertheless, # ps wax|grep httpd 12179 ? Ss 0:00 /usr/sbin/httpd 17698 ? Z 0:00 [httpd] <defunct> 17703 pts/0 S+ 0:00 grep httpd So what gives? Please advise. Victor

5 9

vsFTP Question
by Victor Subervi 06 Nov '09

06 Nov '09

Hi; Now that it's installed, how do I start it and add a user? I can hardly believe there is *no* documentation! TIA, Victor

7 8

LSI SAS snmp agent
by Joseph L. Casale 06 Nov '09

06 Nov '09

Anyone set this up in CentOS? Can you shed some light on the requirements, does it require the LSI module, or does the rhel provided module work just fine? Thanks! jlc

3 4

Certificates Revocation Lists and Apache...
by John Doe 06 Nov '09

06 Nov '09

Hi, already asked in the openssl mailing list, but just in case you already went through this... I need a little help with Certificate Revocation Lists. I did setup client certificates filtering with apache and it seem to work fine so far (used a tutorial on http://www.adone.info/?p=4, down right now). I have a "CA" that is signing a "CA SSL". Then, the "CA SSL" is signing the clients certificates. Now, I am testing Certificate Revocation Lists, but apache keeps saying: "Invalid signature on CRL" I used: $ openssl ca -config openssl.conf -name CA_ssl_default -revoke cassl/$CLIENTNAME.pem Using configuration from openssl.conf Enter pass phrase for cassl/private/cassl.key: Revoking Certificate 02. Data Base Updated $ openssl ca -config openssl.conf -name CA_ssl_default -gencrl -out cassl/crl.pem -crldays 365 Using configuration from openssl.conf Enter pass phrase for /root/Certifs/cassl/private/cassl.key: $ # cat cassl/crl.pem -----BEGIN X509 CRL----- MIIB... ... ...v40= -----END X509 CRL----- In apache logs, when the CRL file is activated in the conf: [debug] ssl_engine_init.c(538): Configuring client authentication [debug] ssl_engine_init.c(1113): CA certificate: /C=AA/ST=BB/L=CC/O=DD/CN=myhost.mydomain [debug] ssl_engine_init.c(601): Configuring permitted SSL ciphers [ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW] [debug] ssl_engine_init.c(626): Configuring certificate revocation facility [debug] ssl_engine_init.c(729): Configuring RSA server certificate [debug] ssl_engine_init.c(768): Configuring RSA server private key When I try to connect with a revoked (or unrevoked) certificate, I get: [debug] ssl_engine_kernel.c(1199): Certificate Verification: depth: 2, subject: /C=AA/ST=BB/L=CC/O=DD/CN=myhost.mydomain, issuer: /C=AA/ST=BB/L=CC/O=DD/CN=myhost.mydomain [debug] ssl_engine_kernel.c(1391): CA CRL: Issuer: C=AA, ST=BB, L=CC, O=DD, CN=myhost.mydomain, lastUpdate: Nov 4 14:39:36 2009 GMT, nextUpdate: Nov 4 14:39:36 2010 GMT [warn] Invalid signature on CRL [error] Certificate Verification: Error (8): CRL signature failure [debug] ssl_engine_kernel.c(1779): OpenSSL: Write: SSLv3 read client certificate B [debug] ssl_engine_kernel.c(1798): OpenSSL: Exit: error in SSLv3 read client certificate B [debug] ssl_engine_kernel.c(1798): OpenSSL: Exit: error in SSLv3 read client certificate B [info] [client 192.168.16.23] SSL library error 1 in handshake (server myhost.mydomain:12345) [info] SSL Library Error: 67567722 error:0407006A:rsa routines:RSA_padding_check_PKCS1_type_1:block type is not 01 [info] SSL Library Error: 67530866 error:04067072:rsa routines:RSA_EAY_PUBLIC_DECRYPT:padding check failed [info] SSL Library Error: 218910726 error:0D0C5006:asn1 encoding routines:ASN1_item_verify:EVP lib [info] SSL Library Error: 336105650 error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned [info] [client 192.168.16.23] Connection closed to child 0 with abortive shutdown (server myhost.mydomain:12345) Also, at one point, I got a "data too large": [warn] Invalid signature on CRL [error] Certificate Verification: Error (8): CRL signature failure [debug] ssl_engine_kernel.c(1779): OpenSSL: Write: SSLv3 read client certificate B [debug] ssl_engine_kernel.c(1798): OpenSSL: Exit: error in SSLv3 read client certificate B [debug] ssl_engine_kernel.c(1798): OpenSSL: Exit: error in SSLv3 read client certificate B [info] [client 192.168.16.23] SSL library error 1 in handshake (server myhost.mydomain:12345) [info] SSL Library Error: 67530884 error:04067084:rsa routines:RSA_EAY_PUBLIC_DECRYPT:data too large for modulus [info] SSL Library Error: 218910726 error:0D0C5006:asn1 encoding routines:ASN1_item_verify:EVP lib [info] SSL Library Error: 336105650 error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned [info] [client 192.168.16.23] Connection closed to child 0 with abortive shutdown (server myhost.mydomain:12345) I reduced my CA and CASSL keys from 2048 down to 1024... not sure if it helped, but I don't have this error anymore... How can I check if the crl.pem file is ok? $ openssl crl -in cassl/crl.pem -text Certificate Revocation List (CRL): Version 1 (0x0) Signature Algorithm: sha1WithRSAEncryption Issuer: /C=AA/ST=BB/L=CC/O=DD/CN=myhost.mydomain Last Update: Nov 4 14:39:36 2009 GMT Next Update: Nov 4 14:39:36 2010 GMT Revoked Certificates: Serial Number: 02 Revocation Date: Nov 4 14:37:03 2009 GMT Signature Algorithm: sha1WithRSAEncryption 03:... ... ...:8d -----BEGIN X509 CRL----- MIIB... ... ...v40= -----END X509 CRL----- I also tried all sorts of verify combos, but all fail: $ openssl verify -verbose -config openssl.conf -purpose crlsign -crl_check cassl/crl.pem usage: verify [-verbose] [-CApath path] [-CAfile file] [-purpose purpose] [-crl_check] [-engine e] cert1 cert2 ... $ openssl verify -verbose -CApath cassl/ -purpose crlsign -crl_check cassl/crl.pem unable to load certificate 9605:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:647:Expecting: TRUSTED CERTIFICATE $ openssl verify -verbose -CAfile cassl/cassl.pem -purpose crlsign -crl_check cassl/crl.pem unable to load certificate 9606:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:647:Expecting: TRUSTED CERTIFICATE Any idea what I am doing wrong? Thx, JD

3 7

INSTALL ADDITIONAL PACKAGES FROM DVD
by Krishna Chandra Prajapati 06 Nov '09

06 Nov '09

Hi experts, I have install centos 5.4 on my laptop(compaq 510). It's very nice. Now i want to install some additional package using dvd. Sound is also not working. Please help me to fix the installation and sound issue. Thanks, Krishna

3 3

MySQL error 28, can't write temp files - how to debug?
by Rudi Ahlers 06 Nov '09

06 Nov '09

Hi all, I hope someone can help with this one. On one of our VPS's we have a fairly large MySQL database, which gives me the following error when running some queries against it: An error occured!Can't execute statement: Error writing file '/tmp/MYL4qeT5' (Errcode: 28) SQL: , , select * from tips order by rand() limit 0, 1 , According to google search, errorcode 28 means the HDD is full. But it isn't: root@vps:[~]$ df -h Filesystem Size Used Avail Use% Mounted on /dev/sda1 84G 18G 62G 23% / none 640M 0 640M 0% /dev/shm /usr/tmpDSK 485M 11M 449M 3% /tmp What else could cause this kind of problem? -- Kind Regards Rudi Ahlers CEO, SoftDux Hosting Web: http://www.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

3 2

CentOS Social, London, UK : 10 Nov 2009
by Karanbir Singh 06 Nov '09

06 Nov '09

Hi Guys, Some of us are yet-again going to be getting together for a CentOS Beer evening on the 10th Nov 2009 at the Kings and Queens. The Pub is mostly quiet during the week, has a fair selection of drinks and is central enough to most people in the city. The full address is : King & Queens, 1 Foley St, London, W1W 6DL‎ Here is a Google Street view of the place http://bit.ly/1PchSO We should be there from about 6:30pm onwards. And depending on how people feel about it, will move around the corner to Ragham, for some food around 9pm. When you get there, keep an eye out for people in CentOS T-Shirts/ Shirts. There is no real agenda except focus on beer and the food! However, you are welcome to bring laptops around and show off any cool stuff you've been working on ( iirc, there is no internet at the pub though ). -- Karanbir Singh London, UK | http://www.karan.org/ | twitter.com/kbsingh ICQ: 2522219 | Yahoo IM: z00dax | Gtalk: z00dax GnuPG Key : http://www.karan.org/publickey.asc

2 1

No driver to Intel
by eduardo cruz 06 Nov '09

06 Nov '09

I have a server hp proliant dl160g6 and i'm installing debian 5 but the network interface dosn't have support, anyone could help me, my netword card is broadcom netxtreme gigabit Intel 82576. -- ~~---~---~ Saludos, Eduardo Cruz Ramirez Departamento de Investigación y Desarrollo Grupo Phoenix – Desarrollo, Soporte y Asesoría ~ Visítanos en: http://www.grupo-phoenix.com ~~---~---~~~---~---~~~---~---~~~---~---~~~---~---~~~---~---~~~---~---~~~---~---~~~---~---~~~---~---~ Cell #: +593-8 5570182 Phone #: +593-4 2342207 Skype Account: eduardo.cruz.ramirez Gmail Account: ecfenix(a)gmail.com MSN Account: eduardocruz888(a)hotmail.com

3 2

← Newer
1
...
21
22
23
24
25
26
27
...
30
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss November 2009