Discuss November 2010

discuss@lists.centos.org

259 participants
220 discussions

gmp package installation on CentOS 5.2
by Nastou Panagiotis 11 Nov '10

11 Nov '10

Hello, Last year, I installed CentOS 5.2 on an HP Proliant Server. Along with other packages, the gmp and gmp-devel version 4.1.4 packages were installed. To the best of my knowledge these packages do not come from the gmp team. Recently, I built an rpm package for gmp 5.0.1 for CentOS 5.2. I tried to update the gmp package by command rpm -Uvh gmp-5.0.1-1.x86_64.rpm but the update failed because the libgmp.so.3, libgmpxx.so.3 and the libmp.so.3 are needed from gcc-gfortran, php, php-cli, guile and gmp-devel packages. What kind of dependency exists between these packages and gmp? Could I forced the update without affecting the operation of the above packages? Since It is better to compile gmp 5.0.1 with the more recent gnu c compiler, is it safe to update gcc, gcc-gfortran and gcc-c++ on CentOS 5.2 to the more recent version appeared for CentOS 5.5? Regards, Panagiotis Nastou, Dpt of Mathematics University of Aegean Karlovasi, Samos, Greece

2 1

FW: Permissions issue
by Jason Pyeron 11 Nov '10

11 Nov '10

I am at loss on this mysterious file permission issue. I cannot move the file out of the directory, but I can rename it. I cannot read the file. It is not open by any processes, the filesystem is in read write mode. I am logged in as root. -Jason [root@localhost /]# tar cvzf ~/named.201011111228.tgz --one-file-system /etc/named.conf /var/named/ tar: Removing leading `/' from member names /etc/named.conf /var/named/ /var/named/data/ /var/named/lost+found/ /var/named/slaves/ tar: /var/named/backup.tgz: Cannot open: Permission denied /var/named/chroot/ /var/named/chroot/etc/ /var/named/chroot/etc/named.caching-nameserver.conf <snip/> tar: Error exit delayed from previous errors [root@localhost /]# dir /var/named/backup.tgz -rw------- 1 root root 6651 Nov 11 11:32 /var/named/backup.tgz [root@localhost /]# stat /var/named/backup.tgz File: `/var/named/backup.tgz' Size: 6651 Blocks: 24 IO Block: 4096 regular file Device: fd04h/64772d Inode: 98312 Links: 1 Access: (0600/-rw-------) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2010-11-11 12:28:33.000000000 -0500 Modify: 2010-11-11 11:32:03.000000000 -0500 Change: 2010-11-11 11:32:03.000000000 -0500 [root@localhost /]# mv /var/named/backup.tgz ~ mv: cannot open `/var/named/backup.tgz' for reading: Permission denied [root@localhost /]# chmod 777 /var/named/backup.tgz [root@localhost /]# mv /var/named/backup.tgz ~ mv: cannot open `/var/named/backup.tgz' for reading: Permission denied [root@localhost /]# getfacl /var/named/backup.tgz getfacl: Removing leading '/' from absolute path names # file: var/named/backup.tgz # owner: root # group: root user::rwx group::rwx other::rwx [root@localhost /]# dir /var/named/backup.tgz -rwxrwxrwx 1 root root 6651 Nov 11 11:32 /var/named/backup.tgz [root@localhost /]# setfacl -b /var/named/backup.tgz [root@localhost /]# dir /var/named/backup.tgz -rwxrwxrwx 1 root root 6651 Nov 11 11:32 /var/named/backup.tgz [root@localhost /]# getfacl /var/named/backup.tgz getfacl: Removing leading '/' from absolute path names # file: var/named/backup.tgz # owner: root # group: root user::rwx group::rwx other::rwx [root@localhost /]# mv /var/named/backup.tgz ~ mv: cannot open `/var/named/backup.tgz' for reading: Permission denied [root@localhost /]# mount <redact> No readonly mounts </redact> [root@localhost /]# df -h <redact> Each filessytem has plenty of free space </redact> [root@localhost /]# dir /var/named/ total 72 drwxr-x--- 6 root named 4096 Nov 11 11:32 . drwxr-xr-x 24 root root 4096 Apr 1 2010 .. -rwxrwxrwx 1 root root 6651 Nov 11 11:32 backup.tgz drwxr-x--- 6 root named 4096 Nov 11 11:48 chroot drwxrwx--- 2 named named 4096 Jan 18 2010 data drwx------ 2 root named 16384 Feb 4 2009 lost+found drwxrwx--- 2 named named 4096 Jan 18 2010 slaves [root@localhost named]# /etc/init.d/named stop Stopping named: . [ OK ] [root@localhost named]# mv backup.tgz foo [root@localhost named]# mv foo backup.tgz [root@localhost named]# mv backup.tgz ~ mv: cannot open `backup.tgz' for reading: Permission denied [root@localhost named]# lsof | grep backup.tgz [root@localhost named]# -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Principal Consultant 10 West 24th Street #100 - - +1 (443) 269-1555 x333 Baltimore, Maryland 21218 - - - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- This message is copyright PD Inc, subject to license 20080407P00.

3 5

dictonary attacks
by PA 11 Nov '10

11 Nov '10

Hi hoping someone can help me a little with this one. I have 2 mail servers, the incoming mail server runs dovecot and the outgoing mail server runs postfix with sasl. Lately I noticed a lot of spammers are running dictionary attacks on my incoming server and then using that user/password for sasl on the outgoing server. The weird thing is I never see on the logs the guessed username/password. I always see the ones they can't guess. For example: Looking at the logs I see the following dictionary attack from 94.242.206.37 Nov 10 03:04:38 pop dovecot: pop3-login: Disconnected: rip=94.242.206.37, lip=209.213.66.10 Nov 10 03:04:38 pop dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=209.213.66.10 rip=94.242.206.37 resp=<hidden> Nov 10 03:04:38 pop dovecot: auth(default): shadow(aarhus,94.242.206.37): lookup Nov 10 03:04:38 pop dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=209.213.66.10 rip=94.242.206.37 resp=<hidden> Nov 10 03:04:38 pop dovecot: auth(default): shadow(abaft,94.242.206.37): lookup Nov 10 03:04:38 pop dovecot: auth(default): shadow(abaft,94.242.206.37): unknown user Nov 10 03:04:38 pop dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=209.213.66.10 rip=94.242.206.37 resp=<hidden> Nov 10 03:04:38 pop dovecot: auth(default): shadow(aarhus,94.242.206.37): unknown user Nov 10 03:04:38 pop dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=209.213.66.10 rip=94.242.206.37 resp=<hidden> Nov 10 03:04:38 pop dovecot: auth(default): shadow(aaron,94.242.206.37): lookup Nov 10 03:04:38 pop dovecot: auth(default): shadow(aaron,94.242.206.37): unknown user Nov 10 03:04:38 pop dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=209.213.66.10 rip=94.242.206.37 resp=<hidden> Nov 10 03:04:38 pop dovecot: auth(default): shadow(ababa,94.242.206.37): lookup ..... And so on.. Then that ip gets banned by fail2ban [root@pop ~]# grep 94.242.206.37 /var/log/fail2ban.log 2010-11-10 03:04:42,416 fail2ban.actions: WARNING [dovecot] Ban 94.242.206.37 However on my outgoing mail server that ip is already sending out all sorts of spam with the sasl username of Paramus. This username Paramus never shows up on the dovecot dictionary attack log, as a matter of fact the user Paramus is nowhere to be found on the dovecot log at all and I have logs going back months. /var/log/maillog:Nov 10 02:46:16 mrelay3 postfix/smtpd[27776]: 3B64928015: client=unknown[94.242.206.37], sasl_method=LOGIN, sasl_username=paramus /var/log/maillog:Nov 10 02:47:54 mrelay3 postfix/smtpd[27776]: 247AB28016: client=unknown[94.242.206.37], sasl_method=LOGIN, sasl_username=paramus /var/log/maillog:Nov 10 02:48:00 mrelay3 postfix/smtpd[27785]: 87DE128016: client=unknown[94.242.206.37], sasl_method=LOGIN, sasl_username=paramus /var/log/maillog:Nov 10 02:56:00 mrelay3 postfix/smtpd[27792]: 9728628015: client=unknown[94.242.206.37], sasl_method=LOGIN, sasl_username=paramus /var/log/maillog:Nov 10 03:05:38 mrelay3 postfix/smtpd[27808]: D529F28015: client=unknown[94.242.206.37], sasl_method=LOGIN, sasl_username=paramus /var/log/maillog:Nov 10 03:06:00 mrelay3 postfix/smtpd[27808]: DDF7C2801B: client=unknown[94.242.206.37], sasl_method=LOGIN, sasl_username=Paramus Does anyone have any idea what could of happened here. I mean if the user/passwd was already harvested by 94.242.206.37 why would they bother to start another dict. attack. I'm just not sure how they guess the username/password as its not on any logs that goes back months and I don't have a dovecot fail record for that user on the logs. This is the case all the time for me and it happens with other ips. Any help would be appreciated. paul

2 2

Fwd: ntp help
by tony.chamberlain＠lemko.com 11 Nov '10

11 Nov '10

Hello I am trying to sync via NTP locally (since I have no Internet access). None of the NTP stuff I read on the net seems to work right. I mean it works fine setting up a client going to something like 0.pool.ntp.org but when I want to make my LInux box a server, and I do an ntpdate to it from another machine, it says no suitable server found. I have tried every possible combination of restrict, broadcast, multicast. Followed directions in the examples but nothing works. Also "iptables-save" shows no iptables stuff set at all, so there is no firewall blocking it. Maybe I could ask my question and someone could tell me how to configure? There are 4 machines: 1. 10.5.1.50 2. 10.5.0.20 / 192.168.1.100 3. 10.6.1.50 4. 10.6.0.20 / 192.168.1.101 The 10.5s cannot reach the 10.6s (except roundaboutly through the 192 network). The two 192 machines are connected directly to each other. You can get back and forth between them I want to set it up so that, and it doesn't matter which way), one of the 191.168.1.X machines NTP syncs to the other, and then the 10.5.1.50 syncs to 10.5.0.20 and the 10.6.1.20 syncs to 10.6.0.20. How do I set the ntp.conf files? Remember there is no external internet on any of the machines, and the 10.5 machines cannot reach the 10.6 machines and v.v. (except the 10.X.0.20 machines can reach each other through the 192 network). Also I am not allowed to use the 192 machines as routers for the 10.X.1.50 machines. Thanks

3 2

RHEL Released
by William Warren 11 Nov '10

11 Nov '10

It's on their website right now.

2 1

flash-plugin crashes on full screen
by Rob Kampen 11 Nov '10

11 Nov '10

Hi List. doing my weekly updates with yum last night installed kernel.x86_64 2.6.18-194.17.4.el5.centos.plus and flash-plugin.i386 10.1.102.64-release now today as I go to watch a movie from hulu.com it crashes the flash-plugin whenever I try to go full screen. Anyone else notice this behaviour? I guess I'll try to downgrade flash and see if that fixes the problem. TIA

4 7

kerboros and nfs v4
by m.roth＠5-cent.us 10 Nov '10

10 Nov '10

My mamnager's trying to get nfs v4 working with kerboros. One major issue is that we do *not* have access to the server, or ktadmin - that's the network folks, and they have AD on the other side. The result is that he can't create (if I have this right) objects. I found <http://sadiquepp.blogspot.com/2009/02/how-to-configure-nfsv4-with-kerberos-…>, and he says he's done everything and more. Any pointers, suggestions, etc? mark

2 1

Need advice trying to load ethernet firmware for kickstart
by Spiro Harvey 10 Nov '10

10 Nov '10

I've got a memory stick that I use to install systems. It's basically just has a simple isolinux setup on it that calls up the kickstart files from an http server and pulls down the distro via our online repo. However, I'm trying to get a standard automated install like this on an IBM box which has a Broadcom NetXtreme 2 NIC that requires firmware to be there on bootup. I've got the file, and I've added it into the directory that I think it should be in (/lib/firmware/bnx2) on the initrd.img. However, when the system boots, it identifies the NICs on one of the console screens, but borks and won't boot properly. On console 1: GRUB boots, I get menu, choose option. Kernel loads initrd.img loads anaconda starts loads usb-storage module borks with: """ loader received SIGSEGV! Backtrace [0xf00bar] ... etc install exited normally [1/1] """ sends termination signals, unmounts everything, and halts ("You may safely reboot") On console screen 3: last few items are loading bnx2 module, insert module, remove usb-storge from modprobe.conf, and finally "getting kickstart file" On screen 4: detects storge devices and BNX2 NICs It seems to be crapping out when it tries to do the network access, but I've got nothing more I can trace the problem with. There's no shell yet. So I can't figure out if I've put the firmware in the wrong place, given it the wrong permissions (dirs are 755 and .fw file is 644) but whether that even matters because the source files are on a FAT16 partition, I don't know. It could just not be loading it, or the file could be corrupt. So how do I go about debugging this? Or am I doing it wrong? Any advice or pointers greatly appreciated. Thanks. -- Spiro Harvey Knossos Networks Ltd (04) 460-2531 : (021) 295-1923 www.knossos.net.nz

1 0

Re: [CentOS] flash-plugin crashes on full screen
by brett mm 10 Nov '10

10 Nov '10

>> now today as I go to watch a movie from hulu.com it crashes the >> flash-plugin whenever I try to go full screen. On Fedora 13, some versions of Flash crashed when fullscreen button was clicked, if the user also had nvidia drivers installed. The workaround was to right click on the flash video content (before switching to fullscreen), unticking "enable hardware acceleration" then clicking fullscreen. Might be worth a try. Brett.

3 2

Re: [CentOS] CentOS Digest, Vol 70, Issue 10
by Frans Rosslee 10 Nov '10

10 Nov '10

I listened to your email using DriveCarefully and will respond as soon as I can. Download DriveCarefully for free at www.drivecarefully.com Sent via my BlackBerry from Vodacom - let your email find you!

3 2

← Newer
1
...
14
15
16
17
18
19
20
21
22
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss November 2010