Discuss October 2010

discuss@lists.centos.org

256 participants
226 discussions

migrating users to openldap
by Tim Dunphy 31 Oct '10

31 Oct '10

I noticed that when I migrated my users with the migrate_passwd.pl tool from PADL it didn't migrate the actual passwords (just the rest of the posixAccount info). I think I need to set the EXTENDED_SCHEMA variable and then try running the tool again. does anyone know what this should be? I actually thought there might be a migrate_shadow.pl tool that could accomplish this, but there doesn't appear to be anything like that among the PADL migration tools. So in short the user info is there in LDAP but no one can log in because all the password fields look like this: userPassword: {crypt}* Here is a more complete user entry that is currently in the system: 73 uid=bluethundr,ou=summitnjops,ou=staff,dc=summitnjhome,dc=com uid: bluethundr cn: Timothy P. givenName: Timothy P. sn: Dunphy objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: posixAccount loginShell: /usr/local/bin/bash uidNumber: 1001 gidNumber: 1002 homeDirectory: /home/bluethundr gecos: Timothy P. userPassword: {crypt}* thanks in advance for any tips you can share that will get this working! -- Here's my RSA Public key: gpg --keyserver pgp.mit.edu --recv-keys 5A4873A9 Share and enjoy!!

6 6

Xen guest not starting automatically
by Jussi Hirvi 30 Oct '10

30 Oct '10

I have a xen system with four guest OS's, (see list below). When I reboot the host, other guests autostart normally, but mail2 does not. I have found no explanation for this. The host and all guests are CentOS 5.5. [root@farm1 xen]# ls -l /etc/xen/auto total 0 lrwxrwxrwx 1 root root 8 Dec 11 2009 dawit -> ../dawit lrwxrwxrwx 1 root root 8 May 5 21:10 mail2 -> ../mail2 lrwxrwxrwx 1 root root 8 Nov 26 2009 mail3 -> ../mail3 lrwxrwxrwx 1 root root 6 Oct 29 2009 ns2 -> ../ns2 Here is my config for the problem guest: cat /etc /xen/mail2 name = "mail2" uuid = "68e33ec6-ef36-9eac-27d7-65a709684551" maxmem = 500 memory = 500 vcpus = 1 bootloader = "/usr/bin/pygrub" # kernel = "/var/lib/xen/boot_kernel.5g5MLq" # ramdisk = "/var/lib/xen/boot_ramdisk.1pSOoP" # extra = "ro root=LABEL=/ console=xvc0" on_poweroff = "destroy" on_reboot = "restart" on_crash = "restart" disk = [ "tap:aio:/vm/mail2.img,xvda,w" ] vif = [ "mac=00:16:36:24:67:3c,bridge=xenbr0,script=vif-bridge" ] - Jussi -- Jussi Hirvi * Green Spot Topeliuksenkatu 15 C * 00250 Helsinki * Finland Tel. +358 9 493 981 * Mobile +358 40 771 2098 (only sms) jussi.hirvi(a)greenspot.fi * http://www.greenspot.fi

3 6

RPM DB DSA Signature Errors
by Camron W. Fox 30 Oct '10

30 Oct '10

Alle, I'm running CentOS 4.8. I just started seeing these errors during RPM operations: error: rpmdbAdd: skipping h# 990 Header V3 DSA signature: BAD, key ID 443e1821 error: rpmdbNextIterator: skipping h# 969 Header V3 DSA signature: BAD, key ID 443e1821 I've cleared out the __db.* files and tried to rebuild the DB with no luck. I've also tried this: http://forums.fedoraforum.org/showthread.php?t=145858 and this: cd /var/lib tar zcvf /var/preserve/rpmdb-`date +"%d%m%Y"`.tar.gz rpm cd /var/lib/rpm ls -l rm -f __db* /usr/lib/rpm/rpmdb_verify Packages rpm -qa 1> /dev/null rpm -v --rebuilddb with no joy (also with the PubKeys). Any ideas as to what to try next would be *most* appreciated. Best Regards, Camron -- Camron W. Fox Hilo Office High Performance Computing Group Fujitsu Management Services of America, Inc. E-mail: cwfox(a)us.fujitsu.com

1 0

Projects.centos.org down?
by Glenn Eychaner 30 Oct '10

30 Oct '10

I have been trying to get to the CentOS LiveCD site at projects.centos.org the last couple of days, but have been unable to reach it. Is it down, and is there any info on when it might be back up? Thanks, -G. -- Glenn Eychaner (geychaner(a)lco.cl) Telescope Systems Programmer, Las Campanas Observatory

2 2

selinux with samba
by Geert Batsleer 29 Oct '10

29 Oct '10

I'm having problems setting up a samba server with sellinux in centos 5.6 (x64). My samba config works flawlessly when selinux is disabled but fails to access shares when selinux is enabled. Wich command makes it possible to run samba with selinux without disabling it, now I've done: "set sebool -P smbd_disable_trans 1" but doesn't really solve my problem. Thanks in advance! geert

3 2

How to access one machine behind iptables, on different subnet?
by Rudi Ahlers 29 Oct '10

29 Oct '10

Hi all, I wonder if someone can help me with this: The setup is as follows: 192.168.1.254 - wireless ADSL modem, with DHCP pool on 192.168.100 - 192.168.200 192.168.1.250 - Linux firewall RED interface 192.168.2.250 - Linux firewall GREEN interface. There are some normal LAN clients behind the Linux firewall's GREEN interface, which can all access each other's shared services and also all the clients behind the RED interface. i.e. those clients connected to the 192.168.1.254 ADSL wifi APP directly. Now I want the clients on the "outside" to connect to one specific host on the inside, behind the GREEN interface, on IP 192.168.1.20. How would I do that? I know I can do this with port fowarding, but need many ports forwarded. How do I give full access to all ports on this IP, instead of forwarding every port? Does that make sense? Currently no clients on the 192.168.1.0 subnect can access any client on the 192.168.2.0 subnet. [root@intranet ~]# iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT udp -- anywhere anywhere udp dpt:domain ACCEPT tcp -- anywhere anywhere tcp dpt:domain ACCEPT udp -- anywhere anywhere udp dpt:bootps ACCEPT tcp -- anywhere anywhere tcp dpt:bootps ACCEPT tcp -- anywhere anywhere tcp dpt:tftp ACCEPT tcp -- anywhere anywhere tcp dpt:http ACCEPT tcp -- anywhere anywhere tcp dpt:25151 Chain FORWARD (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere 192.168.122.0/24 state RELATED,ESTAB LISHED ACCEPT all -- 192.168.122.0/24 anywhere ACCEPT all -- anywhere anywhere REJECT all -- anywhere anywhere reject-with icmp-po rt-unreachable REJECT all -- anywhere anywhere reject-with icmp-po rt-unreachable ACCEPT all -- 192.168.2.0/24 anywhere ACCEPT all -- anywhere 192.168.2.0/24 Chain OUTPUT (policy ACCEPT) target prot opt source destination [root@intranet ~]# route -nv Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 192.168.2.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1 192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth1 0.0.0.0 192.168.1.254 0.0.0.0 UG 0 0 0 eth0 The Linux firewall runs CentOS 5.5. x64 [root@intranet ~]# cat /etc/redhat-release CentOS release 5.5 (Final) [root@intranet ~]# iptables -V iptables v1.3.5 -- Kind Regards Rudi Ahlers SoftDux Website: http://www.SoftDux.com Technical Blog: http://Blog.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

3 2

CentOS-announce Digest, Vol 68, Issue 14
by centos-announce-request＠centos.org 29 Oct '10

29 Oct '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2010:0810 Critical CentOS 3 i386 seamonkey - security update (Tru Huynh) 2. CESA-2010:0810 Critical CentOS 3 x86_64 seamonkey - security update (Tru Huynh) 3. CESA-2010:0808 Critical CentOS 4 i386 firefox - security update (Tru Huynh) 4. CESA-2010:0808 Critical CentOS 4 x86_64 firefox - security update (Tru Huynh) 5. CESA-2010:0810 Critical CentOS 4 i386 seamonkey - security update (Tru Huynh) 6. CESA-2010:0810 Critical CentOS 4 x86_64 seamonkey - security update (Tru Huynh) 7. CESA-2010:0809 Critical CentOS 5 i386 xulrunner Update (Tru Huynh) 8. CESA-2010:0809 Critical CentOS 5 x86_64 xulrunner Update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 29 Oct 2010 00:32:32 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2010:0810 Critical CentOS 3 i386 seamonkey - security update To: centos-announce(a)centos.org Message-ID: <20101028223232.GA28692(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2010:0810 seamonkey security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2010-0810.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/seamonkey-1.0.9-0.62.el3.centos3.i386.rpm updates/i386/RPMS/seamonkey-chat-1.0.9-0.62.el3.centos3.i386.rpm updates/i386/RPMS/seamonkey-devel-1.0.9-0.62.el3.centos3.i386.rpm updates/i386/RPMS/seamonkey-dom-inspector-1.0.9-0.62.el3.centos3.i386.rpm updates/i386/RPMS/seamonkey-js-debugger-1.0.9-0.62.el3.centos3.i386.rpm updates/i386/RPMS/seamonkey-mail-1.0.9-0.62.el3.centos3.i386.rpm updates/i386/RPMS/seamonkey-nspr-1.0.9-0.62.el3.centos3.i386.rpm updates/i386/RPMS/seamonkey-nspr-devel-1.0.9-0.62.el3.centos3.i386.rpm updates/i386/RPMS/seamonkey-nss-1.0.9-0.62.el3.centos3.i386.rpm updates/i386/RPMS/seamonkey-nss-devel-1.0.9-0.62.el3.centos3.i386.rpm source: updates/SRPMS/seamonkey-1.0.9-0.62.el3.centos3.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update seamonkey Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

You do not appear to have the sources for the 2.6.18-128.1.1.el5.028stab062.3PAE kernel installed.
by Thuo Wilson 29 Oct '10

29 Oct '10

Hello Guys, This is a virtual server hosted by some guys in UK. Please help me out here, i dont seem to get the required sources. Where do i get the sources required to compile dahdi? I have searched to no avail. [root@vz016 dahdi-linux-complete-2.4.0+2.4.0]# make make -C linux all make[1]: Entering directory `/usr/src/dahdi-linux-complete-2.4.0+2.4.0/linux' make -C drivers/dahdi/firmware firmware-loaders make[2]: Entering directory `/usr/src/dahdi-linux-complete-2.4.0+2.4.0/linux/drivers/dahdi/firmware' make[2]: Leaving directory `/usr/src/dahdi-linux-complete-2.4.0+2.4.0/linux/drivers/dahdi/firmware' *You do not appear to have the sources for the 2.6.18-128.1.1.el5.028stab062.3PAE kernel installed.* make[1]: *** [modules] Error 1 make[1]: Leaving directory `/usr/src/dahdi-linux-complete-2.4.0+2.4.0/linux' make: *** [all] Error 2 [root@vz016 dahdi-linux-complete-2.4.0+2.4.0]# uname -r *2.6.18-128.1.1.el5.028stab062.3PAE* [root@vz016 dahdi-linux-complete-2.4.0+2.4.0]# ll ../kernels/ total 4 *drwxr-xr-x 19 root root 4096 Oct 28 17:47 2.6.18-194.17.4.el5-PAE-i686 lrwxrwxrwx 1 root root 28 Oct 28 17:47 2.6.18-194.17.4.el5PAE-i686 -> 2.6.18-194.17.4.el5-PAE-i686* Thanks in advacnce. KInd Regards, Thuo Wilson.

5 6

faster fsck ?
by przemolicc＠poczta.fm 29 Oct '10

29 Oct '10

Hi, we have CentOS ftp server (vsftpd) which has a lot of users who are writing and reading a lot of small files from/into its own accounts (and other servers - using samba client - are reading these files and putting them into outside database). Since this server is under heavy load its availability is important. >From time to time we "crash" this server (don't ask why ...) but then fsck is running for over 20-30 minuts. The question is: is there any other _stable_ filesystem (xfs ?, jfs ?) which we can use instead of ext3 which is (quite) immune to crashes and whose fsck is "faster" (by design) then in ext3 ? Regards Przemek ---------------------------------------------- Chcesz wiÄcej zarabiaÄ? ZmieĹ pracÄ na lepszÄ! http://linkint.pl/f2822

3 2

firefox problems
by James A. Peltier 29 Oct '10

29 Oct '10

Just wondering if anyone might be seeing any similar frequent crashes of Firefox/GNOME/Nautilus lately. I have a couple of users who have reported a problem like this. Any ideas are welcome. Latest CentOS 5.5 w/patches, latest nVidia graphics driver, firefox from repos. | ###!!! ABORT: Request 0.0: BadRequest (invalid request code or no such | operation): file nsX11ErrorHandler.cpp, line 182 | _XError+0x00000116 [/usr/lib64/libX11.so.6 +0x00049E46] | _XReply+0x00000199 [/usr/lib64/libX11.so.6 +0x0004B8C9] | UNKNOWN [/usr/lib64/libX11.so.6 +0x0004BCE4] | UNKNOWN [/usr/lib64/libX11.so.6 +0x0004BF5E] | XRenderCreatePicture+0x000000EE [/usr/lib64/libXrender.so.1 | +0x00004DFE] | UNKNOWN [/usr/lib64/libcairo.so.2 +0x000338FF] | UNKNOWN [/usr/lib64/libcairo.so.2 +0x000354E3] | UNKNOWN [/usr/lib64/libcairo.so.2 +0x0001AC4D] | UNKNOWN [/usr/lib64/libcairo.so.2 +0x0001AE45] | UNKNOWN [/usr/lib64/libcairo.so.2 +0x0001D7FB] | UNKNOWN [/usr/lib64/libcairo.so.2 +0x0001DDD2] | UNKNOWN [/usr/lib64/libcairo.so.2 +0x0001BAB0] | UNKNOWN [/usr/lib64/libcairo.so.2 +0x0001C207] | UNKNOWN [/usr/lib64/libcairo.so.2 +0x0001F444] | UNKNOWN [/usr/lib64/libcairo.so.2 +0x0001F787] | UNKNOWN [/usr/lib64/libcairo.so.2 +0x00034FB2] | UNKNOWN [/usr/lib64/libcairo.so.2 +0x0001AB01] | UNKNOWN [/usr/lib64/libcairo.so.2 +0x0001DA70] | UNKNOWN [/usr/lib64/libcairo.so.2 +0x0001CE2F] | UNKNOWN [/usr/lib64/libcairo.so.2 +0x0001D75B] | UNKNOWN [/usr/lib64/libcairo.so.2 +0x0001DB6C] | UNKNOWN [/usr/lib64/libcairo.so.2 +0x0001B87F] | UNKNOWN [/usr/lib64/libcairo.so.2 +0x000100C0] | cairo_stroke_preserve+0x0000001D [/usr/lib64/libcairo.so.2 | +0x0000BF9D] | cairo_stroke+0x00000009 [/usr/lib64/libcairo.so.2 +0x0000BFB9] | UNKNOWN [/usr/lib64/gtk-2.0/2.10.0/engines/libclearlooks.so | +0x0000C2C3] | UNKNOWN [/usr/lib64/gtk-2.0/2.10.0/engines/libclearlooks.so | +0x00004FC6] | UNKNOWN [/usr/lib64/xulrunner-1.9.2/libxul.so +0x00D60F68] | UNKNOWN [/usr/lib64/xulrunner-1.9.2/libxul.so +0x00D61E1B] | UNKNOWN [/usr/lib64/xulrunner-1.9.2/libxul.so +0x00D82BD9] | UNKNOWN [/usr/lib64/xulrunner-1.9.2/libxul.so +0x00F47576] | UNKNOWN [/usr/lib64/xulrunner-1.9.2/libxul.so +0x00F2CBD7] | _ZN20gfxGdkNativeRenderer4DrawEP10gfxContextiijPNS_10DrawOutputE+0x000000C4 | [/usr/lib64/xulrunner-1.9.2/libxul.so +0x00F47488] | UNKNOWN [/usr/lib64/xulrunner-1.9.2/libxul.so +0x00D8485B] | UNKNOWN [/usr/lib64/xulrunner-1.9.2/libxul.so +0x0066A736] | UNKNOWN [/usr/lib64/xulrunner-1.9.2/libxul.so +0x0066B29F] | UNKNOWN [/usr/lib64/xulrunner-1.9.2/libxul.so +0x0067403E] | UNKNOWN [/usr/lib64/xulrunner-1.9.2/libxul.so +0x00672948] | UNKNOWN [/usr/lib64/xulrunner-1.9.2/libxul.so +0x00673E8F] | UNKNOWN [/usr/lib64/xulrunner-1.9.2/libxul.so +0x00672948] | UNKNOWN [/usr/lib64/xulrunner-1.9.2/libxul.so +0x00673E8F] | UNKNOWN [/usr/lib64/xulrunner-1.9.2/libxul.so +0x00672948] | UNKNOWN [/usr/lib64/xulrunner-1.9.2/libxul.so +0x00686438] | UNKNOWN [/usr/lib64/xulrunner-1.9.2/libxul.so +0x006905CA] | UNKNOWN [/usr/lib64/xulrunner-1.9.2/libxul.so +0x0093A507] | UNKNOWN [/usr/lib64/xulrunner-1.9.2/libxul.so +0x0093A7E5] | UNKNOWN [/usr/lib64/xulrunner-1.9.2/libxul.so +0x0093BD9B] | UNKNOWN [/usr/lib64/xulrunner-1.9.2/libxul.so +0x009363EF] | UNKNOWN [/usr/lib64/xulrunner-1.9.2/libxul.so +0x00D62721] | UNKNOWN [/usr/lib64/xulrunner-1.9.2/libxul.so +0x00D6A796] | UNKNOWN [/usr/lib64/xulrunner-1.9.2/libxul.so +0x00D6CC9A] | UNKNOWN [/usr/lib64/libgtk-x11-2.0.so.0 +0x0012FFBD] | g_closure_invoke+0x0000010A [/lib64/libgobject-2.0.so.0 +0x0000B08A] | UNKNOWN [/lib64/libgobject-2.0.so.0 +0x0001B2ED] | g_signal_emit_valist+0x00000626 [/lib64/libgobject-2.0.so.0 | +0x0001C516] | g_signal_emit+0x00000083 [/lib64/libgobject-2.0.so.0 +0x0001C923] | UNKNOWN [/usr/lib64/libgtk-x11-2.0.so.0 +0x0022D78E] | gtk_main_do_event+0x000003D2 [/usr/lib64/libgtk-x11-2.0.so.0 | +0x0012A772] | UNKNOWN [/usr/lib64/libgdk-x11-2.0.so.0 +0x0003210A] | gdk_window_process_all_updates+0x0000008B | [/usr/lib64/libgdk-x11-2.0.so.0 +0x0003234B] | UNKNOWN [/usr/lib64/libgdk-x11-2.0.so.0 +0x000323BA] | g_main_context_dispatch+0x000001B4 [/lib64/libglib-2.0.so.0 | +0x0002CDB4] | UNKNOWN [/lib64/libglib-2.0.so.0 +0x0002FC0D] | g_main_context_iteration+0x0000006E [/lib64/libglib-2.0.so.0 | +0x0003011E] | UNKNOWN [/usr/lib64/xulrunner-1.9.2/libxul.so +0x00D84A3D] | UNKNOWN [/usr/lib64/xulrunner-1.9.2/libxul.so +0x00D84CE3] | UNKNOWN [/usr/lib64/xulrunner-1.9.2/libxul.so +0x00F00275] | UNKNOWN [/usr/lib64/xulrunner-1.9.2/libxul.so +0x00ECE76D] | UNKNOWN [/usr/lib64/xulrunner-1.9.2/libxul.so +0x00E36353] | UNKNOWN [/usr/lib64/xulrunner-1.9.2/libxul.so +0x00E97C22] | UNKNOWN [/usr/lib64/xulrunner-1.9.2/libxul.so +0x00D84B2B] | UNKNOWN [/usr/lib64/xulrunner-1.9.2/libxul.so +0x00C28F8F] | XRE_main+0x00001F9C [/usr/lib64/xulrunner-1.9.2/libxul.so +0x004C3EC8] | UNKNOWN [/usr/lib64/firefox-3.6/firefox +0x00002214] | __libc_start_main+0x000000F4 [/lib64/libc.so.6 +0x0001D994] | __gxx_personality_v0+0x00000099 [/usr/lib64/firefox-3.6/firefox | +0x00001D99] | WARNING: pipe error (3): Connection reset by peer: file | ./src/chrome/common/ipc_channel_posix.cc, line 404 | /usr/lib64/firefox-3.6/run-mozilla.sh: line 131: 13478 Aborted | "$prog" ${1+"$@"} -- -- James A. Peltier Systems Analyst (FASNet), VIVARIUM Technical Director Simon Fraser University - Burnaby Campus Phone : 778-782-6573 Fax : 778-782-3045 E-Mail : jpeltier(a)sfu.ca Website : http://www.fas.sfu.ca | http://vivarium.cs.sfu.ca http://blogs.sfu.ca/people/jpeltier MSN : subatomic_spam(a)hotmail.com

2 1

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss October 2010