Discuss July 2009

discuss@lists.centos.org

301 participants
276 discussions

Slowloris Apache DoS - solution
by David Hrbáč 02 Jul '09

02 Jul '09

Hi, Those who are interested in anti Sloworis solution. I have built and packed mod_antiloris for C4/5. Packages are to be found at: http://fs12.vsb.cz/hrb33/el5/hrb/stable/i386/repoview/mod_antiloris.html http://fs12.vsb.cz/hrb33/el5/hrb/stable/x86_64/repoview/mod_antiloris.html http://fs12.vsb.cz/hrb33/el4/hrb/stable/i386/repoview/mod_antiloris.html http://fs12.vsb.cz/hrb33/el4/hrb/stable/x86_64/repoview/mod_antiloris.html Works pretty fine. Regards, David Hrbáč

2 1

Configure a local DNS caching nameserver: partial success
by Niki Kovacs 02 Jul '09

02 Jul '09

Hi, The subject says it all. On my "server" machine in the local LAN (192.168.1.252 in a 192.168.1.0/24 network), I setup Bind. I installed the 'caching-nameserver' package, which provides a set of configuration files for Bind so it can be used as a caching nameserver out of the box. On the server : I start bind (service named start), and try it out. # host www.google.fr 127.0.0.1 Using domain server: Name: 127.0.0.1 Address: 127.0.0.1#53 Aliases: www.google.fr is an alias for www.google.com. www.google.com is an alias for www.l.google.com. www.l.google.com has address 209.85.227.99 www.l.google.com has address 209.85.227.103 www.l.google.com has address 209.85.227.104 www.l.google.com has address 209.85.227.147 Which tells me basically that my DNS server works. Now I'd like all the other machines on the network to use this local DNS server instead of my ISP's DNS. First thing, I know Bind uses port 53, so I take care to open that port on the server as well as on the other machines in the network. Then, I try to use my local DNS server manually on one of the machines, but I only get this : $ host www.google.fr 192.168.1.252 ;; connection timed out; no servers could be reached Since I'm rather new to Bind, this leaves me a bit clueless. I'm currently busy reading "DNS & Bind" from O'Reilly, but this 750 page book is ideal for blocking my terrace door on windy days, and the problem is not absence, but wealth of information. Any suggestions ? Niki

5 8

CentOS and Redhat Directory Server
by Giovanni Torres 02 Jul '09

02 Jul '09

I have implemented LDAP on CentOS successfully using Redhat's Directory Server and the great how-to on the CentOS wiki. Being new to LDAP, I have a question and maybe one of you guys can point me in the right direction: I have LDAP implemented on the network for logins to the workstation pcs. I also have an apache website that I now use LDAP for authentication. What I want, however, is to be able to allow a group of users to authenticate to the apache website, but not be able to login to any of the systems directly nor via ssh. Any suggestions or pointers in the right direction on where to read up on how to accomplish this specific task would be much appreciated. Thanks, Giovanni

4 3

Re: [CentOS] Dag's comment at linuxtag
by Radu-Cristian FOTESCU 02 Jul '09

02 Jul '09

> led to the great compiler we have today. The same > would hold for any large project (the kernel, firefox, etc.) And... are you happy with the quality of the huge $h1t which is Firefox? Because I am not. As for the Linux kernel, they pushed in all kind of crap. Back in 1996, I was running Linux with X in only 8 Megs of RAM! Now, I doubt I could even boot with such a memory... Linux is not like Jesus. Linux is not "good", nor "great". It's only "much less worse" than Windows, and marginally better than the BSDs. Of course, it's open source and so on. But it's a huge crap like everything that's software nowadays. > I fail to see why tens of micro repos are easier > to maintain consistent than a large one. They're not. But at least you don't have to make people get along. > > 7,600 packages is really too much for a couple of > people to > > maintain. Unless it's scaled *down*... > > ...or scale the maintainers up. Still, 7,600 is unmaintainable. For their ~20k packages, both Debian and Ubuntu use dozens and dozens of packages. (And I won't mention the quality of Ubuntu's packages.) As for TUV, they decided they can only support ~2.5k packages, regardless of the fact that they're the #1 Linux company. I maintain that RF is way too large to be properly maintainable. Cheers, R-F __________________________________________________________________ Yahoo! Canada Toolbar: Search from anywhere on the web, and bookmark your favourite sites. Download it now http://ca.toolbar.yahoo.com.

10 17

lost CentOS repositories from yum
by Sagar Koirala 02 Jul '09

02 Jul '09

Hi, I was using yum, which was working very well. Then I decided to try yumex, and installed yumex, which again worked fine. But, after that, when I came back to use console yum, it started giving error messages. So, I removed yumex and tried, in vain. Then I removed yum, and installed it with rpmforge repository. It works fine, but I only have rpmforge repository. How can I add CentOS repositories like Addons, Extras, etc back to my yum? Thanks

2 1

Re: [CentOS] Dag's comment at linuxtag
by Radu-Cristian FOTESCU 02 Jul '09

02 Jul '09

> I believe that YOU are the only person on this list > who has expressed an interest in "audacious" > (whatever it is & does) for CentOS during these several > days of rant. I believe that YOU are the only person on this list (whoever you are & do) to have suggested popularity as a required raison d'être. Maybe we should make a poll: from the 8,614 RPM files RPMforge are, I am pretty much sure you wouldn't find in a couple of days more than 1 person to express interest in *half* of them. Should half of them be dropped? R-C __________________________________________________________________ Ask a question on any topic and get answers from real people. Go to Yahoo! Answers and share what you know at http://ca.answers.yahoo.com

3 2

KVM on Dissimlar HW
by Rajagopal Swaminathan 02 Jul '09

02 Jul '09

Greetings, Can somebody share their experience regarding live migration of guests using KVM under Centos 5.3 (noted that 5.4 beta is out there) with cluster, GFS on DRBD and dissimilar hardware such as Xeon and duo core assuming sufficient memory is available on the target. TIA Thanks and Regards, Rajagopal

1 0

Re: [CentOS] Configure a local DNS caching nameserver: partial success
by Per Qvindesland 02 Jul '09

02 Jul '09

Hi Do you really need to use bind perhaps dnsmasq would be a better option for you. Per E-mail: per(a)norhex.com [1] http://www.linkedin.com/in/perqvindesland [2] --- Original message follows --- SUBJECT: [CentOS] Configure a local DNS caching nameserver: partial success FROM: Niki Kovacs TO: "CentOS mailing list" DATE: 02-07-2009 9:48 Hi, The subject says it all. On my "server" machine in the local LAN (192.168.1.252 in a 192.168.1.0/24 network), I setup Bind. I installed the 'caching-nameserver' package, which provides a set of configuration files for Bind so it can be used as a caching nameserver out of the box. On the server : I start bind (service named start), and try it out. # host www.google.fr 127.0.0.1 Using domain server: Name: 127.0.0.1 Address: 127.0.0.1#53 Aliases: www.google.fr is an alias for www.google.com. www.google.com is an alias for www.l.google.com. www.l.google.com has address 209.85.227.99 www.l.google.com has address 209.85.227.103 www.l.google.com has address 209.85.227.104 www.l.google.com has address 209.85.227.147 Which tells me basically that my DNS server works. Now I'd like all the other machines on the network to use this local DNS server instead of my ISP's DNS. First thing, I know Bind uses port 53, so I take care to open that port on the server as well as on the other machines in the network. Then, I try to use my local DNS server manually on one of the machines, but I only get this : $ host www.google.fr 192.168.1.252 ;; connection timed out; no servers could be reached Since I'm rather new to Bind, this leaves me a bit clueless. I'm currently busy reading "DNS & Bind" from O'Reilly, but this 750 page book is ideal for blocking my terrace door on windy days, and the problem is not absence, but wealth of information. Any suggestions ? Niki _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos Links: ------ [1] http://webmail.norhex.com/# [2] http://www.linkedin.com/in/perqvindesland

1 0

Re: [CentOS] Dag's comment at linuxtag
by Radu-Cristian FOTESCU 02 Jul '09

02 Jul '09

> Buildlogs are available from: > > http://packages.sw.be/comix/_buildlogs/ > > I hope you come back and tell me what was your problem. I have to be back on my continent before addressing this issue. So far, I can see that the build of Comix seems to have been done by Dries, and that it was successful in April 2009. I am pretty much sure I can prove it *won't* compile on any EL5 clone with the officially available versions of: BuildRequires: python, python-imaging, pygtk2-devel I am not sure what mushrooms were installed on the build machine. It *doesn't* build with: pygtk2-devel-2.10.1-12.el5.i386 python-imaging-devel-1.1.5-5.el5.i386 Which is whatever EL5 has. I can see that RF has a slightly newer version of python-imaging-1.1.6-2.el5.rf.i386 but as long as the SPEC file doesn't require a newer version than 1.1.5, nor does the tarball's Makefile, I *don't* pull updates from RF. Maybe I should have did it, but then the SPEC is incomplete and it assumes that whatever version is OK when it's not. I'll check this in a couple of days. OTOH, frankly, I should rather find some time (which I don't have) to fscking build my own VLC and MPlayer and gstreamer-* so I won't need RPMforge in the future. Frankly, I hate huge repos. Yes, even Debian's. Whatever is huge can't be maintained with the current mindset of the FLOSS people. R-C __________________________________________________________________ Connect with friends from any web browser - no download required. Try the new Yahoo! Canada Messenger for the Web BETA at http://ca.messenger.yahoo.com/webmessengerpromo.php

4 4

Re: [CentOS] Dag's comment at linuxtag
by Radu-Cristian FOTESCU 01 Jul '09

01 Jul '09

> My point being: audacious does build, but it has a missing > dependency. Which still == broken repo. > You were referring the whole time to SRPMs that do not build. > But you never give me an example of one. On the contrary, I mentioned Comix. But again, I never try the SRPM, but the SPEC+tarball. Which don't build. > > When they *did* build, it was maybe 2007. Now it's 2009 and > > EL5.3 and... it doesn't build :-( > > Care to give an example ? Then I can point you to the buildlog and you > might be able to find the cause of your problem by comparing ? Comix, for God's sake. > The audacious package is willing to wait that long :) Nope, because I've built it *for myself*, i.e. in my repo. > > See, this is why I am not a QA manager anywhere: people would commit > > mass suicide under my rule :-) > > Maybe the problem is indeed you, and not the repository. You expect > too much from people who volunteer their own time. As I said now > multiple times, unless you are not yourself committed to help, > why expect someone else to do it ? Because you either do something properly, or don't do it at all. > Maybe RPMforge should ask for money for those people who expect > more than we offer. But I seriously doubt you would pay for it. > So what we do is best effort, much like any other repository really. Maybe Ubuntu should ask for money from those people who expect more than they offer. But would this improve Ubuntu's quality? I very much doubt it. > > - audacious has a missing dependency (audacious-plugins) > - comix SRPM does not rebuild > > That's 2 packages, I think we do quite well if that is it :) But this is only because I am not crazy enough to try 7,600 packages! Cheers, R-C __________________________________________________________________ Get a sneak peak at messages with a handy reading pane with All new Yahoo! Mail: http://ca.promos.yahoo.com/newmail/overview2/

3 3

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss July 2009