November 2010 - Discuss - lists.centos.org

Memory vs. Display Card
by Rick 28 Oct '25

28 Oct '25

Since memory has become quite cheap lately I decided to move from 2 GB to 6. When I installed the memory every thing was fine until I went to run level 5. At that point the screen turned to garbage and the system froze. Is there a way to fix this so I can use the memory I bought? Do I need a new display card? Current hardware: Intel D975XBX2 Motherboard VGA compatible controller: ATI Technologies Inc RV505 [Radeon X1550 64-bit] -- http://www.spinics.net/lists/

13 19

Centos v3.3 CD 2
by Luis-Miguel Astudillo 15 Nov '11

15 Nov '11

Sorry, I have been away for a while. has anyone fixed CD2 fotr CentOS v3.3 ? -- Luis

6 7

Redirecting PHP error messages into a log file
by Alexander Farber 29 Jun '11

29 Jun '11

Hello, I'm using CentOS release 5.5 x86_64 with the stock php-5.1.6-27.el5 and would like to redirect PHP messages into /var/log/httpd/php_log First I tried adding that file name to /etc/php.ini: error_log = "/var/log/httpd/php_log" and restarted httpd, but the file didn't appear. I've touched it and changed owner to apache.apache, but that didn't help. Then I've changed that line to error_log = syslog and now I get the messages in /var/log/messages: Jul 29 21:29:24 hXXX httpd: PHP Notice: Undefined index: REMOTE_ADDR in /var/www/html/odnoklassniki/index.php on line 44 Jul 29 21:29:45 hXXX httpd: PHP Parse error: syntax error, unexpected '[' in /var/www/html/odnoklassniki/index.php on line 44 I still would like to move those message to a separate file though, so I've added the following line to /etc/syslog.conf and reloaded syslogd service: httpd.* /var/log/httpd/php_log but the file is still empty. Any hints please? Thank you Alex -- http://preferans.de

6 6

Lingering dhclient issue
by Alfred von Campe 22 Jun '11

22 Jun '11

I recently reconfigured some CentOS 4.3 systems that were using DHCP to use static IP addresses. At the same time, the systems were moved to a new VLAN. Here is the approximate sequence of events that took place: 1. ifdown eth0 2. edit /etc/sysconfig/network-scripts/ifcfg-eth0 with static IP address 3. wait for network folks to reconfigure switch 4. ifup eth0 I may have reversed steps 1 and 2 on some of the systems. The problem was that the dhclient process didn't go away, and kept renewing the old lease. Our DHCP server is configured to contact the DNS server and update the entry for each host it serves. So the DNS entries for these systems were pointing to the old address in the old VLAN. The eth0 interface itself just kept the static IP address for which it was configured. It took me a while to figure out what was going on. My question is, what could I have done to avoid this (other than killing the dhclient process)? Is there a better way to reconfigure an interface to use a static address? I am not interested in solutions that involve using a GUI (i.e., only command line solutions). Thanks, Alfred

9 17

Re: [CentOS] Issue with Perl and rpmforge - advice? - SOLVED
by Mark 13 Jun '11

13 Jun '11

On Wed, Sep 1, 2010 at 6:51 PM, Mark <mhullrich(a)gmail.com> wrote: > I have an old version of rkhunter installed on my CentOS 5 machine, > one I got from rpmforge. > > In my most recent attempts to update this, I get the following errors in yum: > : > --> Finished Dependency Resolution > perl-AnyEvent-5.240-1.el5.rf.noarch from rpmforge has depsolving problems > --> Missing Dependency: perl(Net::SSLeay) >= 1.33 is needed by > package perl-AnyEvent-5.240-1.el5.rf.noarch (rpmforge) > Error: Missing Dependency: perl(Net::SSLeay) >= 1.33 is needed by > package perl-AnyEvent-5.240-1.el5.rf.noarch (rpmforge) The solution (from the rpmforge users list) was to exclude perl-AnyEvent. Just thought you should know.... Mark

4 4

To PAE or not to PAE...
by John Doe 16 Apr '11

16 Apr '11

Hi, I was wondering if anyone would know the cons of running a PAE kernel...? I have a 4GB pc and was wondering if it was worth going the PAE way to gain those exta 700MB... In the past, I heard that these 700MB were normally reserved for bios or chipset stuff... And that running in PAE would slow down some processes. By the way, I know 64 bits would solve this dilemn but right now I am 32bits... Thx, JD

13 22

CentOS MD RAID 1 on Openfiler iSCSI
by Emmanuel Noobadmin 01 Mar '11

01 Mar '11

Has anybody tried or knows if it is possible to create a MD RAID1 device using networked iSCSI devices like those created using OpenFiler? The idea I'm thinking of here is to use two OpenFiler servers with physical drives in RAID 1, to create iSCSI virtual devices and run CentOS guest VMs off the MD RAID 1 device. Since theoretically, this setup would survive both a single physical drive failure as well as a machine failure on the storage side with a much shorter failover time than say using heartbeat. Or is this yet another stupid idea again from me? :D

9 36

what pkg contains libstdc++-libc6.2-2.so.3
by Fong Vang 02 Feb '11

02 Feb '11

In CentOS 4.1/2, what package contains this library: libstdc++-libc6.2-2.so.3? I installed a couple of the compat- packages, but this library is still missing.

8 8

libsrtp package anywhere?
by Bob Beers 26 Jan '11

26 Jan '11

Hi list, I'm trying to create an asterisk 1.8 rpm with SRTP. I found mention of a libsrtp rpm, <http://qutecom.ipex.cz/RPMS/srtp-1.4.4-1.i386.rpm > in these instructions, <http://www.voip-info.org/wiki/view/Asterisk+SRTP> but it is unreachable (by me, anyway). The libSRTP source is here, <http://srtp.sourceforge.net/download.html>. Has this already been packaged for CentOS 5? Thanks, -Bob Beers

3 13

gdm_slave_xioerror_handler problem
by sync 07 Jan '11

07 Jan '11

Hi , guys: Today , I work on my laptop which uses the CentOS x86_64 operating system , Suddenly the X-windows restarts when left at the login screen for more than a few seconds. The error in my syslog is: Apr 12 15:26:45 localhost gdm[2892]: gdm_slave_xioerror_handler: Fatal X error - Restarting :0 This message came up serval times previously ~ Any other help would be nice. Thanks in advance ~

2 1

Problem with SSHD update.
by James B. Byrne 07 Jan '11

07 Jan '11

This morning I applied the 13 or so new updates to my servers. On one of them the ssh service and clients stopped working immediately after the update. I restarted the server in anticipation that there might be some instability introduced by updating on a system with active ssh connections. However, this has not cleared the problem. The packages in question are: openssh.i386 0:4.3p2-41.el5_5.1 openssh-askpass.i386 0:4.3p2-41.el5_5.1 openssh-clients.i386 0:4.3p2-41.el5_5.1 openssh-server.i386 0:4.3p2-41.el5_5.1 The error I am getting when attempting to start the sshd service is this: Starting sshd: Auto configuration failed 6486:error:0E065068:configuration file routines:STR_COPY:variable has no value:conf_def.c:629:line 207 [FAILED] Can anyone reading this inform me as to what this means, what the likely cause is, and how it may be repaired? I have webmin access to the server and, as it is inside our firewall I can probably enable telnet to get a terminal window do carry out modifications. But I need to know what it is that I need to modify. Alternatively, can anyone point me to a reference regarding removing the current version of openssh and reverting to the prior version, which worked with presumably the same user configuration that the present version does not accept. The only references that I can find respecting this error message are all several years old and some of them suggest that their is a problem with accessing or using /dev/random or /dev/urandom. This matter is somewhat urgent. I have temporarily routed essential ssh connections through a spare host but the box affected sits in front of our legacy systems providing secure access to them as their native OSs and telecom protocols do not support encryption. It is very important that the SSHD service be restored on this host as soon as is possible. Any help with this is gratefully appreciated. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

12 20

SELinux - way of the future or good idea but !!!
by Alison 07 Jan '11

07 Jan '11

Hi, total newbie on CentOS. Just firing up an install of 5.5 on a development webserver. Installed Webmin, Awstats, PHPMyAdmin and Drupal successfully. Yet to work on Sendmail and Samba. SELinux in enforcing mode, reporting "SELinux preventing ifconfig (ifconfig_t) "read write" to /var/webminsessiondb.pag (var_t)". Googled the error message without real success in finding fix - bug reports showing. Question is whether worth pursuing as SELinux is the way of the future. Or is SELinux a good idea that never really made it's way into the sun. Thoughts please. Alison PS. Semi-retired. Cut my teeth as sys prog on RSX11-M systems eons ago.

40 176

Re: [CentOS] Optimal VPN
by J.Witvliet＠mindef.nl 10 Dec '10

10 Dec '10

-----Original Message----- > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos > My sense is that openvpn is the easiest to configure, the most robust and fault tolerant, as far as keeping connections up and reestablishing failed connections. The downside of openvpn is incompatibility with most mobile devices, not relevant if you are able to install openvpn clients. You can configure fixed IP addresses using either the ccd files or the client-connect script. Based on other discussussions on the list my recollection is that IPSEC provides better performance if you need GigE or better data rates on your VPNs. My sense is that IPSEC may be more difficult to configure and less robust at keeping connections up, but this has probably improved in recent years. The main advantage to pptp that I see is compatibility with mobile devices. A disadvantage of PPTP, as far as I know it cannot easily be tunneled through something like a linux firewall because it uses non-standard protocol packets (not TCP/UDP). Both OPENVPN and IPSEC can easily be tunneled through most firewalls. Though I have not researched this extensively, just based on watching list of security updates that get released for Centos, Fedora etc, It seems that OPENVPN has had very few security issues. I have definely seen a few for strongswan and openswan (both are IPSEC implementations). Again this is just gut feeling, not the result of any investigation. I do note though that OPENVPN runs easily in a chroot environment, just by enabling options in the config file. I'm not sure if openswan or strongswan can do this. Nataraj _______________________________________________ Hi, If you don't use any fancy features, OpenVPN is rather easy to set up. Additional effort is needed with: -certificates -routing -smartcards Exactly _the same troubles_ you will encounter with ipsec (though i have only used with strongswan) If it is only master/slave configuration, openvpn will do, for a more complex topology (meshed) consider ipsec Will you be confronted with IPv6 in the (not so) near future? Forget OpenVPN, it is still beta there, while it has been implemented in strongswan for ages, and part of there standard test plan. Furthermore, openvpn is only compatible with openvpn, while using ipsec you might be able to connect to other boxes. If you can install software on both ends, openvpn is available for many platforms. hw ______________________________________________________________________ Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten. This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages.

6 6

Optimal VPN
by tony.chamberlain＠lemko.com 09 Dec '10

09 Dec '10

I am looking for the optimal VPN. Well it doens't have to be that elaborate. Just the best VPN. We currently have some customers using PPTP, some using openvpn, some using Cisco Any Connect and there are a few others. So my question is, if you have control of both ends (client and server) what is the best VPN to use? There are not too many requirements, but a big one is The VPN must return the same IP address to the same user each time That is there must be a specific IP address assigned to a user/password combination. pptp does not really do this but I wrote sort of a backend (or maybe frontend? ;-) ) to change the IP address assigned based on a login and password. It is extra stuff I would prefer not to do though.

9 10

Any chance to get a working, current openldap srpm/rpm for centos 5.5
by Götz Reinicke - IT-Koordinator 06 Dec '10

06 Dec '10

Hello, is there anyone out there, who has a current 2.4.23 srpm or good how to compile it from src with supported db4? I tried to compile recent source files, but always finding the current (installed) db4 >4.3 fails. Than I tried to compile the LTB Project Files: http://ltb-project.org/wiki/documentation/openldap-rpm May be it is just a small step or option to be set. Would be nice to get it working :-) Thanks and best regards Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzende des Aufsichtsrats: Prof. Dr. Claudia Hübner Geschäftsführer: Prof. Thomas Schadt

5 7

how to separate individual logs?
by hadi motamedi 04 Dec '10

04 Dec '10

Dear All I have captured a file in my centos showing logs captured from many modules concurrently. Please find attached a sample of the file. As you see, there are logs from individual modules that have been captured concurrently. For example, there are logs from IPTR,SNMP,HLR,TCAP,XAPP,and SCCP modules but they are coming concurrently.Each log has the header name of its accompanied module in the beginning. I need to have the log of each modules separately. Can you please show me the power of centos on how to separate individual module's logs from the whole? Thank you

7 21

rsyslog as default syslog daemon?
by Andrej Moravcik 01 Dec '10

01 Dec '10

Hi all! Is anybody here using rsyslog? I am looking for the right solution how to use rsyslog in CentOS 5 as the default logging daemon. We use it because of filtering using regular expressions. I switched from sysklogd to rsyslog simply using chkconfig --del syslog chkconfig --add rsyslog chkconfig rsyslog on service syslog stop service rsyslog start but this seems not to be "bullet-proof" solution - when yum automaticaly install updates, sysklogd rpm package runs postinstall scriptlet which unfortunately returns sysklogd back to game (and breaks logging based on regex). # rpm -q --scripts sysklogd postinstall scriptlet (using /bin/sh): if [ "$1" -ge 1 ]; then /sbin/chkconfig --add syslog <<HERE for n in /var/log/{messages,secure,maillog,spooler} do [ -f $n ] && continue touch $n chmod 600 $n done /sbin/service syslog condrestart > /dev/null 2>&1 fi exit 0 ... # chkconfig --list syslog syslog 0:off 1:off 2:on 3:on 4:on 5:on 6:off Meanwhile, automatic update of rsyslog package results (thanks to postinstall scriptlet) into disabled rsyslog :-/ ... # rpm -q --scripts rsyslog postinstall scriptlet (using /bin/sh): /sbin/chkconfig --add rsyslog <<HERE for n in /var/log/{messages,secure,maillog,spooler} do [ -f $n ] && continue umask 066 && touch $n done ... # chkconfig --list rsyslog rsyslog 0:off 1:off 2:off 3:off 4:off 5:off 6:off - uninstalling sysklogd package will not solve the problem of disabling rsyslog after yum update. Or should I uninstall it and simply change '# chkconfig:' part of rsyslog rc script? - I don't want to disable automatic updates of sysklogd and rsyslog packages using /etc/yum.conf:exclude=... bacause of security reasons. - I think about using 'alternatives', but I am not sure if it is the appropriate solution. - should I report to Red Hat's bugzilla? Maybe I overlooked something in documentation. Thank you for any advice and patience. Andrej

2 2

Converting to Raid1
by Matt 01 Dec '10

01 Dec '10

Have a CentOS 4.x 32 bit server running on a single 500M SATA drive. What is easiest way to convert too RAID 1 on it? Anyone have a link? Would be open to hardware or software just do not want to reinstall the entire mess.

4 3

Minimising disk I/O
by Keith Roberts 01 Dec '10

01 Dec '10

I'd like to get disk I/O down to a minimum for my new Centos 5.5 installation. The machine will not be used as a web server anymore, as that's now hosted on a cloud platform. So there are no HTTP requests coming down the line. If I move the SWAP partition and /var/log/ to a small spare drive, and install Centos on the new larger drive, is there anything else that would cause disk activity on the main drive, when the machine is running but not in use? fetchmail will be collecting my email hourly, but I'd like the drive to spin down and go into hibernate mode if possible. I have a backup drive that gets woken up once an hour to backup email, and also during the night to make backups of specified directories every 24 hours. Apart from that, the drive is not in use, unless I run a backup script manually. So I'm hoping to do the same for the main drive if that's posible? Kind Regards, Keith Roberts -- In theory, theory and practice are the same; in practice they are not. This email was sent from my laptop with Centos 5.5

3 4

Samsung CLP-325W network connection?
by Timothy Murphy 01 Dec '10

01 Dec '10

Anyone got this working over a LAN under CentOS? The instructions claim it is easy to connect after pressing the WPS button on printer and router. Sadly, I don't see a WPS button on my Linksys WRT54GL router. When I press the WPS button on the printer the WiFi icon flashes, but I don't see any attempt to connect in /var/log/messages on my CentOS-5.5 server. Any advice or suggestions gratefully received. -- Timothy Murphy e-mail: gayleard /at/ eircom.net tel: +353-86-2336090, +353-1-2842366 s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland

4 8

Help with yum and cpio: MD5 sum mismatch
by James B. Byrne 01 Dec '10

01 Dec '10

I am trying to install Ruby-1.8.7p302 on a CentOS-5.5 server in preparation for a Rails-3 application deployment. I have downloaded the source from Rubyforge.org, unpacked it, and ran ./config and make. Everything built without error. I then ran checkinstall to create an rpm package. That too completed without error. However, when I try to install the resulting package using: yum localinstall /path/to/package --nogpgcheck I get this message: . . . Running Transaction Installing : ruby-1.8.7 1/1 Error unpacking rpm package ruby-1.8.7-p302-1.i386 error: unpacking of archive failed on file /usr/bin/make;4cf56119: cpio: MD5 sum mismatch Failed: ruby-1.8.7.i386 0:p302-1 Does anyone here know how to work around this? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

Re: [CentOS] SELinux - way of the future or good idea but !!!
by brett mm 01 Dec '10

01 Dec '10

> > This is where, as a sysadmin, you need to invest just a little time and > effort learning the system. Honestly, the vast majority of issues are > trivial to solve if you just spend a few hours reading the docs/guides, > and even if you really can't be bothered there are kind folks on this > list (and others) that will likely solve your issues for you. How is > that not worth the extra security SELinux affords? > In reality, I am not at all sure that a quantum leap in complexity adds to security at all. Any proper use of old-school group permissions can give as finely-grained a security policy as you would like. The time spent running SELinux in permissive mode to configure could better be spent looking for holes in the operating system, or helping patch the many bugs that the speedy Linux development schedule lets through: http://lwn.net/Articles/409954/ And then we could have real security, and not a false sense of security generated by heavy-sounding phrases like "mandatory access controls." :-)

18 39

linux-2.6.18.tar.bz2 is missing
by Pascal Robert 30 Nov '10

30 Nov '10

We have to rebuild our kernel to add support for a Mainpine fax board on a CentOS 5.5 board: http://www.hylafax.org/content/Handbook:Basic_Server_Configuration:Modem-sp… We followed all steps, but when calling rpmbuild, we are getting: [root@hylafax SPECS]# rpmbuild -ba --target x86_64 kernel-2.6.spec Construction pour plate-formes cibles: x86_64 Construction pour cible x86_64 erreur: Fichier /usr/src/redhat/SOURCES/linux-2.6.18.tar.bz2: Aucun fichier ou répertoire de ce type So it doesn't find linux-2.6.18.tar.bz2 We do have both the kernel-devel and kernel-headers packages installed, so I don't understand why that file is missing. Googling for "linux-2.6.18.tar.bz2 is missing" didn't bring any useful info. So where/how can we rebuild or get that archive?

4 5

CF disks images and centos
by Jerry Geis 30 Nov '10

30 Nov '10

Hi all, I have 8G -CF cards that I have been putting linux on. Everything was working fine till yesterday when I got a new batch of CF cards. The size has changed. The original CF card was 7637M (255 heads/63 sectors/928 cylinders) The new CF card is 8019M (255 heads/63 sectors/974 cylinders) I would have thought putting the smaller image file onto the larger CF card would be ok. However its not. centos boots but there are journal issues and everything is mounted read-only. Any ideas why this doesnt work or how I can keep my smaller image and "succecssfully" put it on the larger CF card? I simply do "dd if=cf.img of=/dev/sde" to copy the images to CF. Thanks, Jerry

5 9

ssh-agent fails to hold values
by bluethundr 30 Nov '10

30 Nov '10

Hello list I am attempting to manage my key logins with ssh-agent. However EVERY time I try to ssh I have to go through the same exact routing and it's getting a little old... [bluethundr@LCENT01:~]#ssh sum3 Enter passphrase for key '/home/bluethundr/.ssh/id_rsa': [bluethundr@LCENT01:~]#exec ssh-agent bash [bluethundr@LCENT01:~]#ssh-add Enter passphrase for /home/bluethundr/.ssh/id_rsa: Identity added: /home/bluethundr/.ssh/id_rsa (/home/bluethundr/.ssh/id_rsa) [bluethundr@LCENT01:~]#ssh sum3 Last login: Sun Nov 28 14:32:34 2010 from localhost.localdomain ######################################################### # SUMMITNJHOME.COM # # TITLE: LCENT03 BOX # # LOCATION: SUMMIT BASEMENT # # # ######################################################### [bluethundr@LCENT03:~]# Does anyone have any suggestions to make ssh-agent hold these values a bit more persistently? thanks!! -- Here's my RSA Public key: gpg --keyserver pgp.mit.edu --recv-keys B6D6EAC3

4 8

yum/RPM Problem: several packages with the same name were installed, how to remove one of them ?
by giggzounet 30 Nov '10

30 Nov '10

Hi, We have a cluster with CentOS 5.5 installed with oscar. The firm which has pre-installed the cluster has done strange things...and now I get problems: - if I understand correctly what was done, several infiniband CentOS packages were installed (compat-dapl, compat-dapl-devel, compat-dapl-utils, libibcm, libibverb, librdmacm, mpi-selector). - Then the tar package from OFED was installed. This archive contains rpm packages too...and were installed. - So on our nodes we have several versions of "compat-dapl, compat-dapl-devel, compat-dapl-utils, libibcm, libibverb, librdmacm, mpi-selector". I would like to remove the package from CentOS (in order to have homogen OFED environment). How can I do that ? These packages target the sames files...If I remove the package of CentOS, will it erase all the files in common ? how does rpm/yum behave in this situation ? Best regards, Guillaume

2 1

( SOLVED ) Hostname too long
by Johan Scheepers 30 Nov '10

30 Nov '10

Good day, Some time ago I asked some assistance for the long hostname in the terminals. Editing .bashrc in user and root by adding PS1=xxxxxxx did make the difference. Here is something I picked up on another list that make editing .bashrc not necessary. as root.. gedit /etc/sysconfig/network # HOSTNAME=localhost.localdomain change to in my case and that solves the problem HOSTNAME=johan.jan Regards Johan

1 0

centos 5.5 - which partition manager installed
by Johan Scheepers 30 Nov '10

30 Nov '10

Good day, Gparted is not available on my installation. Which patition tool is available in centos 5.5 please. Thanks Johan

7 10

pcscd
by m.roth＠5-cent.us 30 Nov '10

30 Nov '10

Anyone working with/using it? One thing that's driving me nuts is that it keeps spitting garbage into the logs (card absent or mute!!!). I just tried editing /etc/init.d/pcscd - there's *no* way to pass parms from the config file - and set the logging level to --error, and it's still doing it. Clues for the poor, to shut it up? mark

2 3

yum/RPM behaviour: does yum/RPM overwrite a file modified by a user during an update ?
by giggzounet 29 Nov '10

29 Nov '10

Hi, On our cluster with CentOS 5.5, I have a little problem with a script for infiniband (this problem: http://web.archiveorange.com/archive/v/NUQmuN84gd3D31Fdl8PU) So the fix a very easy. But what will yum/RPM do during the next update ? Will it overwrite the file ? Will it write on display that the file was modified by an user (as under debian) ? Thx a lot, Best regards, Guillaume

5 10

the wandering MAC?
by Boris Epstein 29 Nov '10

29 Nov '10

Hi all, I have what appears to be a truly puzzling problem. I've got this P4 32-bit machine running CentOS 5.5 with XEN that has two NICs: one onboard, an Intel Corporation 82540EM Gigabit and one on an expansion card, Realtek Semiconductor Co., Ltd. RTL-8169 Gigabit. The second one is recognized as eth1. What's happening is, it is showing up under one of the two MAC's: either 00:0a:cd:1a:c1:71 or 00:00:00:00:c1:71. If you reboot it the MAC stays the same; if you shutdown and do a full powerdown it seems to change. Obviously, after it goes from one MAC to another you have to play with the start-up scripts for this interface to start up correctly and this becomes a major annoyance. Any idea what all of this mess could mean? Thanks. Boris.

6 8

rpm dependencies
by bluethundr 29 Nov '10

29 Nov '10

I have successfully created a packaged version of openssh that has the LPK patch. LPK allows you to store your public keys in LDAP. However when I go to install the package I created it complains about dependencies: [root@VIRTCENT13:/home/bluethundr/rpm]#rpm -Uvh openssh-5.6p1-1.i386.rpm error: Failed dependencies: openssh = 5.5p1-1.el5 is needed by (installed) openssh-clients-5.5p1-1.el5.i386 openssh = 5.5p1-1.el5 is needed by (installed) openssh-server-5.5p1-1.el5.i386 how can I get past this? thanks!! -- Here's my RSA Public key: gpg --keyserver pgp.mit.edu --recv-keys B6D6EAC3

3 5

yum is dumb in update of gmime & gmime-sharp
by ken 29 Nov '10

29 Nov '10

# yum update ... --> Running transaction check --> Processing Dependency: gmime = 2.2.10-5.el5.centos for package: gmime-sharp ---> Package gmime20.i386 0:2.2.26-1.el5.rf set to be updated --> Finished Dependency Resolution gmime-sharp-2.2.10-5.el5.centos.i386 from installed has depsolving problems --> Missing Dependency: gmime = 2.2.10-5.el5.centos is needed by package gmime-sharp-2.2.10-5.el5.centos.i386 (installed) Error: Missing Dependency: gmime = 2.2.10-5.el5.centos is needed by package gmime-sharp-2.2.10-5.el5.centos.i386 (installed) ... # rpm -q gmime gmime-sharp gmime-2.2.10-5.el5.centos gmime-sharp-2.2.10-5.el5.centos This would seem like a bug... or why is yum trying to install package versions which are already installed? Yes, I already ran package-cleanup --problems, package-cleanup --dupes, and rpm -Va --nofiles --nodigest

3 10

directory services and root/sudo access
by Iain Morris 29 Nov '10

29 Nov '10

This is perhaps a more general security question. For those of you with a directory services installation, do you install a generic local user with sudo access in case directory services is not available? Or do you just beef up your directory services to the point that you are confident it will almost always be up? I usually disable root login via ssh, but allow it from the physical console, and make an emergency generic account with sudo privs in case DS breaks down. What I've noticed, however, is if I simulate a directory services failure, ssh logins with this generic local account take an eternity as the server still tries to auth that user against ldap/kerberos first. I'm sure this could be adjusted in pam in some way. I was just curious how other admins approach this, and what level of trust they place in directory services being available. -- -- - Iain Morris iain.t.morris(a)gmail.com

2 1

opensc/ct/etc
by m.roth＠5-cent.us 29 Nov '10

29 Nov '10

Has anyone worked with the upstream installation for 5.5, and successfully told it to ->shut up<- when you pull your smart card out of the reader? Since you can't add parms in /etc/reader.conf, or in a file in /etc/reader.conf.d, I tried editing /etc/init.d/pcscd to tell it error level and above logging only, and it ignores it, and writes over and over that the card is "mute or absent", filling my logs. mark

1 0

Rebuilding samba3x rpms results in size doubled
by Oguz Yilmaz 29 Nov '10

29 Nov '10

Hi, I have rebuilt samba3x SRPM in Centos 5.5. The resultings RPM's are nearly in triple size of the original RPMs. I have installed and checked the binary files are stripped. What can result in such difference in RPM sizes? I have not changed anything on built and install sections of spec file. Regards, Some files and sizes in original samba3x rpm: -rwxr-xr-x 1 root root 17904 Mar 31 2010 recycle.so -rwxr-xr-x 1 root root 18156 Mar 31 2010 shadow_copy2.so -rwxr-xr-x 1 root root 9668 Mar 31 2010 shadow_copy.so -rwxr-xr-x 1 root root 13844 Mar 31 2010 smb_traffic_analyzer.so -rwxr-xr-x 1 root root 13796 Mar 31 2010 streams_depot.so -rwxr-xr-x 1 root root 17984 Mar 31 2010 streams_xattr.so -rwxr-xr-x 1 root root 5560 Mar 31 2010 syncops.so -rwxr-xr-x 1 root root 17744 Mar 31 2010 xattr_tdb.so -rwxr-xr-x 1 root root 22052 Mar 31 2010 /usr/lib/samba/vfs/acl_tdb.so -rwxr-xr-x 1 root root 17920 Mar 31 2010 /usr/lib/samba/vfs/acl_xattr.so -rwxr-xr-x 1 root root 9668 Mar 31 2010 /usr/lib/samba/vfs/audit.so -rwxr-xr-x 1 root root 14060 Mar 31 2010 /usr/lib/samba/vfs/cap.so -rwxr-xr-x 1 root root 5448 Mar 31 2010 /usr/lib/samba/vfs/default_quota.so -rwxr-xr-x 1 root root 5512 Mar 31 2010 /usr/lib/samba/vfs/dirsort.so -rwxr-xr-x 1 root root 9600 Mar 31 2010 /usr/lib/samba/vfs/expand_msdfs.so -rwxr-xr-x 1 root root 13832 Mar 31 2010 /usr/lib/samba/vfs/extd_audit.so -rwxr-xr-x 1 root root 5444 Mar 31 2010 /usr/lib/samba/vfs/fake_perms.so -rwxr-xr-x 1 root root 9644 Mar 31 2010 /usr/lib/samba/vfs/fileid.so -rwxr-xr-x 1 root root 31312 Mar 31 2010 /usr/lib/samba/vfs/full_audit.so -rwxr-xr-x 1 root root 9696 Mar 31 2010 /usr/lib/samba/vfs/netatalk.so -rwxr-xr-x 1 root root 9636 Mar 31 2010 /usr/lib/samba/vfs/preopen.so -rwxr-xr-x 1 root root 9584 Mar 31 2010 /usr/lib/samba/vfs/readahead.so -rwxr-xr-x 1 root root 17752 Mar 31 2010 /usr/lib/samba/vfs/readonly.so -rwxr-xr-x 1 root root 17904 Mar 31 2010 /usr/lib/samba/vfs/recycle.so -rwxr-xr-x 1 root root 9668 Mar 31 2010 /usr/lib/samba/vfs/shadow_copy.so -rwxr-xr-x 1 root root 18156 Mar 31 2010 /usr/lib/samba/vfs/shadow_copy2.so -rwxr-xr-x 1 root root 13844 Mar 31 2010 /usr/lib/samba/vfs/smb_traffic_analyzer.so -rwxr-xr-x 1 root root 13796 Mar 31 2010 /usr/lib/samba/vfs/streams_depot.so -rwxr-xr-x 1 root root 17984 Mar 31 2010 /usr/lib/samba/vfs/streams_xattr.so -rwxr-xr-x 1 root root 5560 Mar 31 2010 /usr/lib/samba/vfs/syncops.so -rwxr-xr-x 1 root root 17744 Mar 31 2010 /usr/lib/samba/vfs/xattr_tdb.so -rwxr-xr-x 1 root root 2502552 Mar 31 2010 /usr/sbin/nmbd -rwxr-xr-x 1 root root 6807276 Mar 31 2010 /usr/sbin/smbd Some files and sizes in mine samba3x rpm: -rwxr-xr-x 1 root root 62018 Nov 26 14:50 recycle.so -rwxr-xr-x 1 root root 72876 Nov 26 14:50 shadow_copy2.so -rwxr-xr-x 1 root root 44528 Nov 26 14:50 shadow_copy.so -rwxr-xr-x 1 root root 54391 Nov 26 14:50 smb_traffic_analyzer.so -rwxr-xr-x 1 root root 56096 Nov 26 14:50 streams_depot.so -rwxr-xr-x 1 root root 63394 Nov 26 14:50 streams_xattr.so -rwxr-xr-x 1 root root 42007 Nov 26 14:50 syncops.so -rwxr-xr-x 1 root root 63989 Nov 26 14:50 xattr_tdb.so -rwxr-xr-x 1 root root 68818 Nov 26 14:50 /usr/lib/samba/vfs/acl_tdb.so -rwxr-xr-x 1 root root 60184 Nov 26 14:50 /usr/lib/samba/vfs/acl_xattr.so -rwxr-xr-x 1 root root 46167 Nov 26 14:50 /usr/lib/samba/vfs/audit.so -rwxr-xr-x 1 root root 60597 Nov 26 14:50 /usr/lib/samba/vfs/cap.so -rwxr-xr-x 1 root root 37894 Nov 26 14:50 /usr/lib/samba/vfs/default_quota.so -rwxr-xr-x 1 root root 40378 Nov 26 14:50 /usr/lib/samba/vfs/dirsort.so -rwxr-xr-x 1 root root 44448 Nov 26 14:50 /usr/lib/samba/vfs/expand_msdfs.so -rwxr-xr-x 1 root root 51756 Nov 26 14:50 /usr/lib/samba/vfs/extd_audit.so -rwxr-xr-x 1 root root 37428 Nov 26 14:50 /usr/lib/samba/vfs/fake_perms.so -rwxr-xr-x 1 root root 46429 Nov 26 14:50 /usr/lib/samba/vfs/fileid.so -rwxr-xr-x 1 root root 95070 Nov 26 14:50 /usr/lib/samba/vfs/full_audit.so -rwxr-xr-x 1 root root 48276 Nov 26 14:50 /usr/lib/samba/vfs/netatalk.so -rwxr-xr-x 1 root root 48882 Nov 26 14:50 /usr/lib/samba/vfs/preopen.so -rwxr-xr-x 1 root root 43154 Nov 26 14:50 /usr/lib/samba/vfs/readahead.so -rwxr-xr-x 1 root root 62346 Nov 26 14:50 /usr/lib/samba/vfs/readonly.so -rwxr-xr-x 1 root root 62018 Nov 26 14:50 /usr/lib/samba/vfs/recycle.so -rwxr-xr-x 1 root root 44528 Nov 26 14:50 /usr/lib/samba/vfs/shadow_copy.so -rwxr-xr-x 1 root root 72876 Nov 26 14:50 /usr/lib/samba/vfs/shadow_copy2.so -rwxr-xr-x 1 root root 54391 Nov 26 14:50 /usr/lib/samba/vfs/smb_traffic_analyzer.so -rwxr-xr-x 1 root root 56096 Nov 26 14:50 /usr/lib/samba/vfs/streams_depot.so -rwxr-xr-x 1 root root 63394 Nov 26 14:50 /usr/lib/samba/vfs/streams_xattr.so -rwxr-xr-x 1 root root 42007 Nov 26 14:50 /usr/lib/samba/vfs/syncops.so -rwxr-xr-x 1 root root 63989 Nov 26 14:50 /usr/lib/samba/vfs/xattr_tdb.so -rwxr-xr-x 1 root root 6293564 Nov 26 14:50 /usr/sbin/nmbd -rwxr-xr-x 1 root root 18057363 Nov 26 14:50 /usr/sbin/smbd -- Oguz YILMAZ

4 4

can't use godaddy SSL cert
by bluethundr 28 Nov '10

28 Nov '10

Hey list, I was having a similar SSL/openLDAP problem to this last week. I had a chance to look at this again today and it still appears to not be working. I called godaddy and had the last cert cancelled and reissued as I had mis-typed the name of the CN on the last one. I am trying to setup a Godaddy turbo SSL certificate with an openLDAP 2.4 server under FreeBSD 8.1. The clients are mainly a network of virtual CentOS 5.5 instances. [root@LBSD2:/usr/home/bluethundr]#pkg_info | grep openldap openldap-sasl-client-2.4.23 Open source LDAP client implementation with SASL2 support openldap-sasl-server-2.4.23 Open source LDAP server implementation I have setup the certificate chain in my slapd.conf like so: [root@LBSD2:/usr/home/bluethundr]#grep -i tls /usr/local/etc/openldap/slapd.conf## TLS options for slapd TLSCipherSuite HIGH:MEDIUM:+SSLv2 TLSCertificateFile /usr/local/etc/openldap/cacerts/LBSD2.summitnjhome.com.crt TLSCertificateKeyFile /usr/local/etc/openldap/cacerts/slapd.pem TLSCACertificateFile /usr/local/etc/openldap/cacerts/sf_issuing.crt I have tried each of the following certs with no luck in getting my cert to talk to it's CA: -rw-r--r-- 1 root bluethundr 2604 Nov 25 11:37 ca_bundle.crt -r--r----- 1 root ldap 4604 Nov 24 18:57 gd_bundle.crt -r--r----- 1 root ldap 1537 Nov 25 02:00 sf_issuing.crt and I get the same result for each when I attempt to connect to SSL on the LDAP server: [root@LCENT01:/tmp/Foswiki-1.1.2]#openssl s_client -connect ldap.example.com:389 -showcerts -CAfile sf_issuing.crt 13730:error:02001002:system library:fopen:No such file or directory:bss_file.c:122:fopen('sf_issuing.crt','r') 13730:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:125: 13730:error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib:by_file.c:279: CONNECTED(00000003) 13730:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188: ldapsearch -h ldap.example.com -d -1 -ZZ "dc=example,dc=com" TLS certificate verification: depth: 0, err: 20, subject: /O=LBSD2.summitnjhome.com/OU=Domain Control Validated/CN=LBSD2.summitnjhome.com, issuer: /C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certificates.godaddy.com/repository/CN=Go Daddy Secure Certification Authority/serialNumber=07969287 TLS certificate verification: Error, unable to get local issuer certificate tls_write: want=7, written=7 0000: 15 03 01 00 02 02 30 ......0 TLS trace: SSL3 alert write:fatal:unknown CA TLS trace: SSL_connect:error in SSLv3 read server certificate B TLS trace: SSL_connect:error in SSLv3 read server certificate B TLS: can't connect. ldap_perror ldap_start_tls: Connect error (-11) additional info: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed It seems to indicate that it can't talk to it's CA... does anyone have any suggestions on how to make this work? thanks! -- Here's my RSA Public key: gpg --keyserver pgp.mit.edu --recv-keys B6D6EAC3

2 2

Re: [CentOS] simple website hit counter
by Les Bell 27 Nov '10

27 Nov '10

John Hinton <webmaster(a)ew3d.com> wrote: >> You set it to run once per day against the logs for that website... normally around midnight. The loads aren't that bad. The reporting I think defaults to 12 months of stored data which is stored normally in a directory in the web root for that website. That directory of course can be protected by something like htaccess. << Just a heads up: the Webalizer report logs are not managed by logrotate, and will continue to accumulate indefinitely. I had a server fall over a couple of months ago when /var filled up; after a little du'ing, I discovered that the thing had three and a half years' worth of Webalizer logs taking up a lot of space. Best, --- Les Bell [http://www.lesbell.com.au] Tel: +61 2 9451 1144

1 0

centos-5.5 VS Firefox 3.6.12
by fred smith 27 Nov '10

27 Nov '10

My firefox auto-installed an update from 3.6.11 to 3.6.12 this morning, after which it gives this upon a restart attempt: Program received signal SIGBUS, Bus error. 0x00123c47 in memset () from /lib/ld-linux.so.2 while I dig deeper, wondering if anyone else has seen it and/or can suggest a fix. Thanks! -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- I can do all things through Christ who strengthens me. ------------------------------ Philippians 4:13 -------------------------------

2 2

Postfix - message queue filling with Host or name not found - try again
by Rob Kampen 27 Nov '10

27 Nov '10

Hi list, I have noted over the last week or so my DNS servers are dumping lots of messages for bogus domain lookups. Examining the postfix queue with postqueue -p: I see many (Host or domain name not found. Name service error for name=bdgiedjhea.po6e4ina.com type=MX: Host not found, try again) Jake(a)bdgiedjhea.po6e4ina.com My question - why does this stay in the message queue - why not dumped back with message undeliverable or dropped? I understand this is probably related to my config - which follows: <main.cf> queue_directory = /var/spool/postfix command_directory = /usr/sbin daemon_directory = /usr/libexec/postfix mail_owner = postfix myhostname = <mumble> mydomain = <mumble> myorigin = $mydomain inet_interfaces = all inet_protocols = ipv4 proxy_interfaces = <mumble> mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, mail.$mydomain, www.$mydomain, ftp.$mydomain unknown_local_recipient_reject_code = 550 mynetworks = 192.168.230.0/24, 127.0.0.0/8 relay_domains = virtual_alias_domains = hash:/etc/postfix/virtual_alias_domains virtual_alias_maps = hash:/etc/postfix/virtual_alias_maps smtpd_helo_required = yes smtpd_delay_reject = yes strict_rfc821_envelopes = yes smtpd_helo_restrictions = permit_mynetworks, reject_non_fqdn_helo_hostname, reject_invalid_helo_hostname, permit smtpd_sender_login_maps = hash:/etc/postfix/smtpd_sender_login_map smtpd_client_restrictions = check_client_access hash:/etc/postfix/access smtpd_recipient_restrictions = reject_unauth_pipelining, reject_non_fqdn_recipient, reject_non_fqdn_sender, reject_unknown_sender_domain, reject_unknown_recipient_domain, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, check_recipient_access hash:/etc/postfix/roleaccount_exceptions, reject_invalid_hostname, check_helo_access pcre:/etc/postfix/helo_checks, reject_rbl_client sbl-xbl.spamhaus.org, permit smtpd_sender_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_non_fqdn_sender smtpd_sasl_auth_enable = yes smtpd_sasl_security_options = noanonymous broken_sasl_auth_clients = yes tls_random_exchange_name = /var/spool/postfix/prng_exch smtpd_sasl_type = dovecot smtpd_sasl_path = private/auth smtpd_use_tls = yes smtpd_tls_security_level = may smtpd_tls_auth_only = yes smtpd_tls_key_file = /etc/pki/tls/private/ssl.key.private.decrypted smtpd_tls_cert_file = /etc/pki/tls/certs/<mumble> smtpd_tls_CAfile = /etc/pki/tls/certs/sub.class2.server.ca.pem smptd_tls_loglevel = 2 smtpd_tls_received_header = yes smtpd_sasl_tls_security_options = noanonymous smtpd_sasl_security_options = noanonymous mailbox_size_limit = 102400000 message_size_limit = 40960000 in_flow_delay = 1s alias_maps = hash:/etc/aliases alias_database = hash:/etc/aliases home_mailbox = Maildir/ content_filter=amavisfeed:[127.0.0.1]:10024 debug_peer_level = 2 debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin xxgdb $daemon_directory/$process_name $process_id & sleep 5 sendmail_path = /usr/sbin/sendmail.postfix newaliases_path = /usr/bin/newaliases.postfix mailq_path = /usr/bin/mailq.postfix setgid_group = postdrop html_directory = no manpage_directory = /usr/share/man sample_directory = /usr/share/doc/postfix-2.2.2/samples readme_directory = /usr/share/doc/postfix-2.2.2/README_FILES </main.cf> Any suggestions appreciated. TIA rob

6 10

CentOS-announce Digest, Vol 69, Issue 9
by centos-announce-request＠centos.org 27 Nov '10

27 Nov '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2010:0913 CentOS 5 x86_64 gtk2 Update (Karanbir Singh) 2. CEBA-2010:0913 CentOS 5 i386 gtk2 Update (Karanbir Singh) 3. CEBA-2010:0900 CentOS 5 i386 thunderbird Update (Karanbir Singh) 4. CEBA-2010:0900 CentOS 5 x86_64 thunderbird Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 26 Nov 2010 18:08:26 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0913 CentOS 5 x86_64 gtk2 Update To: centos-announce(a)centos.org Message-ID: <20101126180826.GA27443(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0913 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0913.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 1cc83a152509a74f6614308e42c6f43a gtk2-2.10.4-21.el5_5.6.i386.rpm 87c5c3a858d9d63f031fec320a6a547d gtk2-2.10.4-21.el5_5.6.x86_64.rpm 9286c99d64aaca8ca442c9cc5549b284 gtk2-devel-2.10.4-21.el5_5.6.i386.rpm e39c7a2371e7f5abdf4950fd173ad677 gtk2-devel-2.10.4-21.el5_5.6.x86_64.rpm Source: 2f26dac41203a95ac15d9cc74f039845 gtk2-2.10.4-21.el5_5.6.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Fri, 26 Nov 2010 18:08:26 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0913 CentOS 5 i386 gtk2 Update To: centos-announce(a)centos.org Message-ID: <20101126180826.GA27428(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0913 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0913.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 29b4a5cd2b0b3f6f1fe25e54d20ee01d gtk2-2.10.4-21.el5_5.6.i386.rpm e0d9866168342114db39d4fb5e5beeea gtk2-devel-2.10.4-21.el5_5.6.i386.rpm Source: 2f26dac41203a95ac15d9cc74f039845 gtk2-2.10.4-21.el5_5.6.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Sat, 27 Nov 2010 12:43:33 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0900 CentOS 5 i386 thunderbird Update To: centos-announce(a)centos.org Message-ID: <20101127124333.GA1984(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0900 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0900.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 5c69a7bc16453026ec7caa85216f0c9d thunderbird-2.0.0.24-12.el5.centos.i386.rpm Source: 32e3dae9627ae0b4caa3ce1a57c881cb thunderbird-2.0.0.24-12.el5.centos.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Sat, 27 Nov 2010 12:43:33 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0900 CentOS 5 x86_64 thunderbird Update To: centos-announce(a)centos.org Message-ID: <20101127124333.GA2001(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0900 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0900.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 11960f6689f559620bcedc18beae46a3 thunderbird-2.0.0.24-12.el5.centos.x86_64.rpm Source: 32e3dae9627ae0b4caa3ce1a57c881cb thunderbird-2.0.0.24-12.el5.centos.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 69, Issue 9 **********************************************

1 0

simple website hit counter
by Frank Cox 27 Nov '10

27 Nov '10

Googling for this finds me a ton of stuff that doesn't actually do what I'm looking for. I want a simple hit counter cgi script of some kind that will increment a counter on every page load but I want to access the counter from a different page. In other words, I don't want to have a visible hit counter on the webpage itself. I want to have a different webpage that will show me the number. -- MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com

8 14

Centos and Bridging
by Robert Spangler 27 Nov '10

27 Nov '10

Hello, Presently I am running CentOS release 5.5 (Final). I am looking to setup bridging as I would like to setup some KVM virtual hosts on my system as a test lab. I am following the the instruction at this site > http://tldp.org/HOWTO/BRIDGE-STP-HOWTO/index.html but I cannot figure out where I am going wrong and would be thankful if someone could point me in the right direction. Here is what I have done: Check bridge information with the following: > ~ $ modprobe -v bridge No issues or errors > ~ $ cat /proc/modules | grep bridge > bidge 91889 0 - Live 0xffffffff89247000 Check to ensure forwarding is turned on: > ~ $ cat /proc/sys/net/ipv4/ip_forward > 1 Checked that my interface are up and running (Was sure of this but did the check anyway): > ~ $ ifconfig > eth0 Link encap:Ethernet HWaddr 48:5B:39:2A:07:D5 > inet addr:192.168.1.100 Bcast:192.168.1.255 Mask:255.255.255.0 > inet6 addr: fe80::4a5b:39ff:fe2a:7d5/64 Scope:Link > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > RX packets:1059 errors:0 dropped:0 overruns:0 frame:0 > TX packets:1080 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:1000 > RX bytes:454226 (443.5 KiB) TX bytes:120584 (117.7 KiB) > Interrupt:90 Base address:0x8400 > > lo Link encap:Local Loopback > inet addr:127.0.0.1 Mask:255.0.0.0 > inet6 addr: ::1/128 Scope:Host > UP LOOPBACK RUNNING MTU:16436 Metric:1 > RX packets:92 errors:0 dropped:0 overruns:0 frame:0 > TX packets:92 errors:0 dropped:0 overruns:0 carrier:0[Thu Nov 25 So now I begin to create the bridge form CLI as I want to make sure everything works before committing it to the config: > brctl addbr br0 > ifconfig eth0 down > ifconfig br0 192.168.1.100 up > ifconfig eth0 0.0.0.0 up > route add default gw 192.168.1.254 I check my interfaces and routing: > ~ $ ifconfig > br0 Link encap:Ethernet HWaddr 00:00:00:00:00:00 > inet addr:192.168.1.100 Bcast:192.168.1.255 Mask:255.255.255.0 > inet6 addr: fe80::200:ff:fe00:0/64 Scope:Link > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > RX packets:0 errors:0 dropped:0 overruns:0 frame:0 > TX packets:5 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:0 > RX bytes:0 (0.0 b) TX bytes:398 (398.0 b) > > eth0 Link encap:Ethernet HWaddr 48:5B:39:2A:07:D5 > inet6 addr: fe80::4a5b:39ff:fe2a:7d5/64 Scope:Link > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > RX packets:64662 errors:0 dropped:0 overruns:0 frame:0 > TX packets:63301 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:1000 > RX bytes:17699194 (16.8 MiB) TX bytes:7958063 (7.5 MiB) > Interrupt:90 Base address:0x8400 > > lo Link encap:Local Loopback > inet addr:127.0.0.1 Mask:255.0.0.0 > inet6 addr: ::1/128 Scope:Host > UP LOOPBACK RUNNING MTU:16436 Metric:1 > RX packets:211 errors:0 dropped:0 overruns:0 frame:0 > TX packets:211 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:0 > RX bytes:17346 (16.9 KiB) TX bytes:17346 (16.9 KiB) > ~ $ route -n > Kernel IP routing table > Destination Gateway Genmask Flags Metric Ref Use Iface > 192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 br0 > 0.0.0.0 192.168.1.254 0.0.0.0 UG 0 0 0 br0 Time to test if ping works: > ~ $ ping -c3 192.168.1.254 > PING 192.168.1.254 (192.168.1.254) 56(84) bytes of data. > ping: sendmsg: Operation not permitted > ping: sendmsg: Operation not permitted > ping: sendmsg: Operation not permitted > > --- 192.168.1.254 ping statistics --- > 3 packets transmitted, 0 received, 100% packet loss, time 2000ms I know the firewall is causing this issue so I stop the firewall: > ~ $ service iptables stop > Flushing firewall rules: [ OK ] > Setting chains to policy ACCEPT: nat filter [ OK ] > Unloading iptables modules: [ OK ] Time to try ping again: > ~ $ ping -c3 192.168.1.254 > PING 192.168.1.254 (192.168.1.254) 56(84) bytes of data. > From 192.168.1.100 icmp_seq=1 Destination Host Unreachable > From 192.168.1.100 icmp_seq=2 Destination Host Unreachable > From 192.168.1.100 icmp_seq=3 Destination Host Unreachable > > --- 192.168.1.254 ping statistics --- > 3 packets transmitted, 0 received, +3 errors, 100% packet loss, time 1999ms To back out all I needed to do was: > ifconfig br0 down > brctl delbr br0 > service iptables start > service netowrk restart Everything is back to normal. I cannot figure out what am I missing here? Interfaces and routing look to be setup correctly. Is there something else I need to be looking at? -- Regards Robert Linux The adventure of a life time. Linux User #296285 Get Counted http://counter.li.org/

8 14

sed with several lines, how?
by Arthur Bela 27 Nov '10

27 Nov '10

hyphen's [ - ] are just for marking the start/end of a pattern, but there are _not in_ the pattern! "OUTPUT" is what i want after "seding" the PATTERN#X's so i for e.g.: need the first, and second "magic" sed "FIRSTMAGIC" PATTERN#1 sed "SECONDMAGIC" PATTERN#2 PATTERN#1: ----------------------------------- SOMETEXT#1 <br><font size=3>SOMETEXT#2</font><br> <br><font size=3>SOMETEXT#3</font><br> SOMETEXT#4 ----------------------------------- "exact pattern", what is unique from the pattern: ----------------------------------- </font><br>\n<br><font size=3> ----------------------------------- OUTPUT: ----------------------------------- SOMETEXT#1 <br><font size=3>SOMETEXT#3</font><br> SOMETEXT#4 ----------------------------------- and: PATTERN#2: ----------------------------------- SOMETEXT#1 <br><font size=3>SOMETEXT#2</font><br> </font></div></body></html> SOMETEXT#3 ----------------------------------- "exact pattern", what is unique from the pattern: ----------------------------------- </font><br>\n</font></div></body></html> ----------------------------------- OUTPUT: ----------------------------------- SOMETEXT#1 </font></div></body></html> SOMETEXT#3 ----------------------------------- i just can't figure it out, how to "sed" when having several lines [nor in awk, perl..] could anyone post a link, or some guide, how to write these two lines of "sed"? Thank You! :\

2 2

experience with Sympa to Mailman?
by Dave Stevens 27 Nov '10

27 Nov '10

I have a Centos 5.5 box with Mailman installed. A new user will host lists using Mailman, moving from a Sympa based host. Sympa isn't in the repos, does anyone know why? or have any experience moving the archive from Sympa to Mailman? Dave

2 1

Checking what's running inside a httpd process
by Pascal Robert 26 Nov '10

26 Nov '10

I'm trying to fix a CentOS (5.5 x86_64) VM that we have where it become unstable due to swapping. But I did notice something: I have 10 httpd processes, and 5 of them are using 13 MB of resident memory, the other are using between 91 and 96 MB of RAM. I find it quite strange to see such differences in RAM usage. I ran a "lsof -P -p" on the processes, and I didn't see any major differences, so I'm wondering what is the best way to know what the processes are doing?

2 2

Re: [CentOS] Add application to start at booting
by sheraznaz＠yahoo.com 26 Nov '10

26 Nov '10

This was recently answered in another thread <Quote> Re: [CentOS] best way to start and shutdown programs in CentOS? On 24 November 2010 14:20, killscript <killscript(a)gmail.com> wrote: > Les Mikesell wrote: >> The RedHat/Centos way of doing things is to have init scripts in >> /etc/rc.d/init.d that take at least start, stop, and restart as arguments for >> each program that should start automatically. Then for the runlevels where you >> want them to start you have a symlink where the name starts with S and the rest >> is a number to make it sort alphabetically into the order that things should >> start in /etc/rc?.d (where the ? is the runlevel). Likewise add links starting >> with 'K' in the levels where the process should be stopped. There is a >> convention for comments in the scripts so that 'checkconfig program on' can make >> the links for you. Look through some of the other scripts to see how they work. > > Sorry for the stupid question here, but does the /etc/initd./scriptname > file "know" about these symlinks because of a particular comment in there? Copied from the man file for chkconfig: RUNLEVEL FILES Each service which should be manageable by chkconfig needs two or more commented lines added to its init.d script. The first line tells chkconfig what runlevels the service should be started in by default, as well as the start and stop priority levels. If the service should not, by default, be started in any runlevels, a - should be used in place of the runlevels list. The sec- ond line contains a description for the service, and may be extended across multiple lines with backslash continuation. For example, random.init has these three lines: # chkconfig: 2345 20 80 # description: Saves and restores system entropy pool for \ # higher quality random number generation. This says that the random script should be started in levels 2, 3, 4, and 5, that its start priority should be 20, and that its stop priority should be 80. You should be able to figure out what the description says; the \ causes the line to be continued. The extra space in front of the line is ignored. Basically, create your file by taking one of the files as a sample and place it in /etc/init.d. For example, I've copied /etc/init.d/vncserver to /etc/init.d/sample and ran [root@hakan init.d]# chkconfig --add sample [root@hakan init.d]# chkconfig --list|grep sample sample 0:off 1:off 2:off 3:off 4:off 5:off 6:off Now my sample is there but won't run at all but it's all there. [root@hakan init.d]# chkconfig sample on [root@hakan init.d]# chkconfig --list|grep sample sample 0:off 1:off 2:on 3:on 4:on 5:on 6:off Now it's on for all of the levels in the comment included in the file. Nevertheless, I could have overriden that with the ckconfig --level <levels> <name> on command options to run on other levels. [root@hakan etc]# find rc* -iname *sample*|sort rc.d/init.d/sample rc.d/rc0.d/K35sample rc.d/rc1.d/K35sample rc.d/rc2.d/S91sample rc.d/rc3.d/S91sample rc.d/rc4.d/S91sample rc.d/rc5.d/S91sample rc.d/rc6.d/K35sample and the file comment looks like below which matches the above, startup priority is 91, kill priority is 35. It will run on all normal levels since it's not defined, excluding 1 (single user), 0 (shutdown) and 6 (reboot). # chkconfig: - 91 35 I better remove this sample from my startup :) -- Hakan (m1fcj) - http://www.hititgunesi.org _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos ------Original Message------ From: Johan Scheepers Sender: centos-bounces(a)centos.org To: centos ReplyTo: CentOS mailing list Subject: [CentOS] Add application to start at booting Sent: Nov 25, 2010 10:45 AM Good day, Please, How/where can I add an application to start at boot up. Don't seem to find it in options available Thanks Johan _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos Sent from my Verizon Wireless BlackBerry

4 3

How to install PHP PEAR stuff best?
by Alexander Farber 26 Nov '10

26 Nov '10

Hello CentOS users, I'm using gChartPhp by having copied it into /var/www/html dir. It works ok, but I wonder how to better install/organize/maintain PEAR "packages" under CentOS? I've got the php-pecl rpm installed too, wonder if it's helpful here. Or maybe just add a dir to php.ini? Please share your PHP "admin" wisdom Regards Alex -- Sent from my mobile device

4 5

Re: [CentOS] good shell script examples?
by 洪　川 26 Nov '10

26 Nov '10

#!/bin/bash H=" 192.168.1.1 192.168.1.2 192.168.1.3 192.168.1.4 " for i in $H ; do expect << -EOF- set timeout 2 spawn scp ${rootidfile} root@${host}:/tmp/id_file expect "d:" send "${password}\n" expect eof spawn ssh ${host} expect "d:" send "${password}\n" expect "#" send "mkdir -p /root/.ssh; chmod 700 /root/.ssh\n" expect "#" send "cat /tmp/id_file >> /root/.ssh/authorized_keys\n" expect "#" send "rm -f /tmp/id_file; exit\n" expect eof -EOF- done http://www.bsdmap.com/2010/11/06/ssh-shell-script/ ------------------ Original ------------------ From: "Kill Script"<killscript(a)gmail.com>; Date: Tue, Nov 16, 2010 02:47 AM To: "centos"<centos(a)centos.org>; Subject: [CentOS] good shell script examples? I am looking for a beginner guide to shell scripting simple tasks on CentOS (e.g. ssh'ing into a server / router / switch, checking for certain things, then exiting and going to the next IP). Does anyone have any suggestions on where to look? ?(I'm relatively new to bash)

2 1

Terminal - name too long
by Johan Scheepers 26 Nov '10

26 Nov '10

Good day, > [johan@unknown2a6800000000 ~]$ How/where could I make the above a lot shorter please. Thanks Johan

4 6

centos 5.5 -software updater-break in download
by Johan Scheepers 26 Nov '10

26 Nov '10

Good day, New to centos, New install . Using - Software updater While updating - downloading 73 updates there was a break in the download. The break happened close to the end. Now when using software updater again will it start all over again? Go on where the break happened? Could not find on google this issue Kindly some advice please. Thanks, Regards Johan

3 2

CentOS vs. RHEL vs. Oracle Linux ?
by Niki Kovacs 26 Nov '10

26 Nov '10

Hi, I've been contacted by a local training center specialized in Oracle databases, to train a group of four administrators to use Linux. They're supposed to use Oracle Linux (more exactly "OL5"), which I understand is some specialized version of Red Hat Enterprise Linux. I'm reasonably proficient with CentOS. I've been using it exclusively on desktops and servers since 2007 (version 4.3 if I remember correctly), after a few years on Slackware and Debian. I've setup CentOS-based networks in small town halls, public libraries and schools, my dedicated webserver is running the latest CentOS, and I've published a book about basic Linux concepts entirely based on CentOS 5.3. On the other hand, I've never got to work on the "real thing", so to speak. The only time I put my hands on a Red Hat Enterprise Linux server was to retrieve the root password for a distracted client (add init=/bin/bash to the kernel line in GRUB, mount -o remount,rw /, passwd :oD). And I never came near a machine running Oracle Linux. What differences can I expect between a server running Oracle Linux and my average server running CentOS ? As far as I can guess, their "unbreakable" Linux kernel will still be some package called 'kernel' (with the according 'kernel-devel' and 'kernel-headers' packages). Probably Yum will be used as a dependency resolver (will it?), only with different repositories. And for the rest, I except it to work the same, in that I can still use chkconfig, ntsysv, rpm, etc. (what about system-config-securitylevel-tui or similar tools?) In short, what differences/similarities can I expect? Is there some document stating these? Cheers from the sunny South of France, Niki Kovacs -- http://www.microlinux.fr

6 9

PE850 Interrupt conflicts on CentOS 5 and onboard ethernet and pci-e serial
by Dan Irwin 26 Nov '10

26 Nov '10

Hello, I have an interrupt conflict between a two port pci-e serial card and the onboard ethernet controllers in a PowerEdge 850. I'm running kernel 2.6.18-194.26.1.el5PAE with bios revision A04. In every instance, the two serial ports have been allocated the same interrupts as the two ethernet controllers. I have tried many kernel boot options, including acpi=off, pci=noirq, acpi=noirq. When I enter the bios, I can see the same interrupts allocated to the serial ports and ethernet controllers. Attempting to change the interrupts manual causes both a nic and a serial port to both change, both to the same interrupt. I have even tried disabling onboard usb and serial with no change. I'm beginning to think the pci-e serial card is broken under linux. I have a similar card running on a PE850 under Windows Server 2003 and there are no such conflicts. Here is some output from lspci -v : 02:00.0 Serial controller: Oxford Semiconductor Ltd OX16PCI954 (Quad 16950 UART) function 0 (Uart) (prog-if 06 [16950]) Subsystem: Oxford Semiconductor Ltd Unknown device 0001 Flags: medium devsel, IRQ 137 I/O ports at ecf8 [size=8] Memory at feaff000 (32-bit, non-prefetchable) [size=4K] I/O ports at ece0 [size=16] Memory at feafe000 (32-bit, non-prefetchable) [size=4K] Memory at feafd000 (32-bit, non-prefetchable) [size=4K] Capabilities: [40] Power Management version 1 02:01.0 Serial controller: Oxford Semiconductor Ltd OXCB950 Cardbus 16950 UART (prog-if 06 [16950]) Subsystem: Oxford Semiconductor Ltd Unknown device 0001 Flags: medium devsel, IRQ 145 I/O ports at ecf0 [disabled] [size=8] Memory at feafc000 (32-bit, non-prefetchable) [disabled] [size=4K] I/O ports at ecd0 [disabled] [size=16] Memory at feafb000 (32-bit, non-prefetchable) [disabled] [size=4K] Memory at feafa000 (32-bit, non-prefetchable) [disabled] [size=4K] Capabilities: [40] Power Management version 1 05:00.0 Ethernet controller: Broadcom Corporation NetXtreme BCM5721 Gigabit Ethe rnet PCI Express (rev 11) Subsystem: Dell Unknown device 01b6 Flags: bus master, fast devsel, latency 0, IRQ 137 Memory at fe5f0000 (64-bit, non-prefetchable) [size=64K] Expansion ROM at <ignored> [disabled] Capabilities: [48] Power Management version 2 Capabilities: [50] Vital Product Data Capabilities: [58] Message Signalled Interrupts: 64bit+ Queue=0/3 Enable - Capabilities: [d0] Express Endpoint IRQ 0 Capabilities: [100] Advanced Error Reporting Capabilities: [13c] Virtual Channel 06:00.0 Ethernet controller: Broadcom Corporation NetXtreme BCM5721 Gigabit Ethe rnet PCI Express (rev 11) Subsystem: Dell Unknown device 01b6 Flags: bus master, fast devsel, latency 0, IRQ 145 Memory at fe3f0000 (64-bit, non-prefetchable) [size=64K] Expansion ROM at <ignored> [disabled] Capabilities: [48] Power Management version 2 Capabilities: [50] Vital Product Data Capabilities: [58] Message Signalled Interrupts: 64bit+ Queue=0/3 Enable - Capabilities: [d0] Express Endpoint IRQ 0 Capabilities: [100] Advanced Error Reporting Capabilities: [13c] Virtual Channel I'm fairly stumped, and I'm about ready to try different serial hardware. Any clues from the experts on this list? Regards, Dan ------ dan irwin it manager jackie's wholesale nurseries p/l t/a zoomgarden 56 coutts drive burpengary qld 4505 email dan(a)jackies.com.au tel 07 3888 2481 fax 07 3888 2530 ************************************************************************ Jackie's Legal Disclaimer: 1) This email is confidential and may contain legally privileged information. If you are not the intended recipient, you must not disclose or use the information contained in it. If you have received this email in error, please notify us immediately by return email and delete the document. 2) All emails sent to and from Jackie's Wholesale Nurseries Pty Ltd. are scanned for content. Any material deemed to contain inappropriate subject matter will be reported to the email administrator of all parties concerned. ************************************************************************

2 3

set and lengthen time between screensavers
by Johan Scheepers 25 Nov '10

25 Nov '10

Good day, I am the only user of the laptop at home. Please, How/where can I change to keep to screen longer open. Thanks Johan

2 2

Add application to start at booting
by Johan Scheepers 25 Nov '10

25 Nov '10

Good day, Please, How/where can I add an application to start at boot up. Don't seem to find it in options available Thanks Johan

3 3

CENTOS 5.5 X86 continue get "out of memory" error?????
by mcclnx mcc 25 Nov '10

25 Nov '10

we just installed CENTOS 5.5 X86 (32 bits) on DELL server. After installed we also apply lated O.S. patches. This server have 64 GB RAM and run "2.6.18-194.26.1.el5PAE #1 SMP ". when I doing "cp", "mv". "ftp", .... it continue "kill" my process and pop up "out of memory" on /var/log/messages: ========================================================== Nov 24 16:36:25 MCC kernel: HighMem: 1*4kB 0*8kB 1*16kB 3210*32kB 17367*64kB 4010*128kB 2497*256kB 126*512kB 2*1024kB 0*2048kB 10549*4096kB = 45642004kB Nov 24 16:36:25 MCC kernel: 4927968 pagecache pages Nov 24 16:36:25 MCC kernel: Swap cache: add 0, delete 0, find 0/0, race 0+0 Nov 24 16:36:25 MCC kernel: Free swap = 36869116kB Nov 24 16:36:25 MCC kernel: Total swap = 36869116kB Nov 24 16:36:25 MCC kernel: Free swap: 36869116kB Nov 24 16:36:25 MCC kernel: 16777216 pages of RAM Nov 24 16:36:25 MCC kernel: 16547840 pages of HIGHMEM Nov 24 16:36:25 MCC kernel: 362985 reserved pages Nov 24 16:36:25 MCC kernel: 3334251 pages shared Nov 24 16:36:25 MCC kernel: 0 pages swap cached Nov 24 16:36:25 MCC kernel: 839171 pages dirty Nov 24 16:36:25 MCC kernel: 2 pages writeback Nov 24 16:36:25 MCC kernel: 3528 pages mapped Nov 24 16:36:25 MCC kernel: 59119 pages slab Nov 24 16:36:25 MCC kernel: 584 pages pagetables Nov 24 16:36:25 MCC kernel: Out of memory: Killed process 5114, UID 81, (dbus-daemon). Nov 24 16:37:11 MCC gpm[5531]: *** info [client.c(137)]: Nov 24 16:37:11 MCC gpm[5531]: Connecting at fd 6 =================================================== any one know why? Is CENTOS X86 5..5 really NOT stable version? Thanks.

10 16

New list ?
by Karanbir Singh 25 Nov '10

25 Nov '10

Hi, Taking this to a new thread. Thoughts on getting a new list started up ? Should it be centos-sysadmin or centos-infra ? Are we going to then restrict it to admin/infra related chatter ? in which case, does the eyeball density on this list reduce for that sort of content ? How about the politics and news stuff that gets posted to this list. And how would those things be addressed with the new admin focused list ? - KB

16 21

Novell sale news?
by Les Mikesell 25 Nov '10

25 Nov '10

Is anyone following the news of the Novell sale and some mysterious 'intellectual property assets' that were transferred to a holding company controlled by Microsoft? -- Les Mikesell lesmikesell(a)gmail.com

28 58

(no subject)
by 清水大輔 25 Nov '10

25 Nov '10

-- 清水大輔 <shimizu.daisuke(a)mycom.co.jp>

1 0

Grub, pata, and sata
by David G. Mackay 24 Nov '10

24 Nov '10

I've just filed bug 0004634. Grub won't install onto my pata drive now that I have a sata drive installed. This is grub 0.97 on CentOS5.5. Has anyone else encountered this? I'm guessing that I can always install Fedora on hda, which should give me a working grub, but I was hoping for something a little less involved. Thanks, Dave Mackay

4 7

best way to start and shutdown programs in CentOS?
by Kill Script 24 Nov '10

24 Nov '10

I have a Java program that I want to start up with every boot, but I'm unsure how to do it. There are two bootup scripts that start manually (script1.sh and script2.sh), and when the server gets shutdown, we have another script that we run (shutdownscript.sh) so that the DB does not get corrupted.

9 17

Gnome 2.32 backported to RHEL6
by Sergio Rubio 24 Nov '10

24 Nov '10

Hi all, In case anyone is interested, I´ve backported Gnome 2.32 from F14 to RHEL6 for my own good : http://blog.frameos.org/2010/11/24/installing-gnome-2-32-in-red-hat-enterpr… Packages tagged with frameos in the release version have been patched by my self. Sources: http://mirror.frameos.org/frameos/6/experimental/SRPMS/ Enjoy! -- FrameOS Linux website: http://www.frameos.org <http://www.frameos.org> twitter: @rubiojr blog: http://blog.frameos.org

1 0

program in centos rpm
by ann kok 24 Nov '10

24 Nov '10

Hi all I can't find some program eg: fping rpm in centos 1/ How can I get this program install if yum won't find it? 2/ Can I use fedora12 fping rpm to install on it? Thank you

4 3

Centos 5.5 - php53 and mhash
by For＠ll 24 Nov '10

24 Nov '10

Hi, I'm using repo from http://dl.iuscommunity.org/ and I want use php5.3 but I can't see module php53-mhash, where I find this module? Any repo can I use where this module I find? For@ll

4 3

CentOS 5.5: what do /etc/sysconfig/networking and /etc/sysconfig/network-scripts exactly ?
by giggzounet 24 Nov '10

24 Nov '10

Hi, on our cluster we have 5 network interfaces. I was surprised to discover that the ifcfd-* files under /etc/sysconfig/networking and /etc/sysconfig/network-scripts were not the same. So I have searched a little bit, but I'm now confused: - the files under /etc/sysconfig/networking come from system-config-network. - the files under /etc/sysconfig/network-scripts are read by the /etc/init.d/network script and used to set up the network interfaces. - I don't find where the files under /etc/sysconfig/networking are used. - Does system-config-network modify the file under /etc/sysconfig/network-scripts too ? Is there someone who can enlightenment me ? Thx in advance, Best regards, Guillaume

7 9

DNS update system-config-network GUI
by Lanny Marcus 24 Nov '10

24 Nov '10

Box is fully updated CentOS 5.5 (32 bit). DHCP is from the ADSL modem 192.168.1.1. After I update the DNS settings and restart the network, the DNS changes do not hold. I have tried using this GUI, as a regular user, after giving the root password, and, also, logged in as the root user. When I begin, the Primary DNS is shown as 192.168.1.1 the IP of the ADSL modem. I move that IP to the Tertiary DNS and insert the Primary and Secondary DNS IP's I want to use. Then, I save the file, quit, and restart the network (service network restart). I see messages that the file has been saved and suggesting that I restart the network or the box. The DNS I want to use is that of OpenDNS.com and I saw it work, briefly.Then,it stops working and when I launch the system-config-network GUI again, I see it has reverted to the original configuration, with only the Primary DNS of 192.168.1.1 (the ADSL modem) shown. Questions: The "DNS Search Path" is blank. Is there something I should insert there? If it appears that I am using the system-config-network GUI properly, what configuration file can I modify, to make these DNS changes hold permanently? TIA! Lanny http://www.magazines-magazine.com/

4 5

slow network throughput, how to improve?
by Rudi Ahlers 24 Nov '10

24 Nov '10

would like some input on this one please. Two CentOS 5.5 XEN servers, with 1GB NIC's, connected to a 1GB switch transfer files to each other at about 30MB/s between each other. Both servers have the following setup: CentOS 5.5 x64 XEN 1GB NIC's 7200rpm SATA HDD's The hardware configuration can't change, I need to use these servers as they are. They are both used in production with a few xen domU's virtual machines running on them. I want to connect them both to a SAN, with gigabit connectivity and would like to know how I can increase network performance a bit, as is. The upstream datacentre only supplies 100MB network connection, so in the internet side of it isn't much of a problem. If I do manage to reach 100MB that will be my limit in any case. root@zaxen02.securehosting.co.za:/vm/xen/template/centos-5-x64-cpanel root@zaxen02.securehosting.co.za:/ root(a)zaxen02.securehosting.co.za's password: centos-5-x64-cpanel.tar.gz 100% 1163MB 29.1MB/s 00:40 iperf indicates that the network throughput is about 930MB though: root@zaxen01:[~]$ iperf -s ------------------------------------------------------------ Server listening on TCP port 5001 TCP window size: 85.3 KByte (default) ------------------------------------------------------------ [ 4] local 196.34.x.x port 5001 connected with 196.34.x.x port 45453 [ ID] Interval Transfer Bandwidth [ 4] 0.0-10.0 sec 1.09 GBytes 935 Mbits/sec root@zaxen02:[~]$ iperf -c zaxen01 ------------------------------------------------------------ Client connecting to zaxen01, TCP port 5001 TCP window size: 16.0 KByte (default) ------------------------------------------------------------ [ 3] local 196.34.x.x port 45453 connected with 196.34.x.x port 5001 [ ID] Interval Transfer Bandwidth [ 3] 0.0-10.0 sec 1.09 GBytes 936 Mbits/sec Is iperf really that accurate, or reliable in this instance, since the packet size is so small that it probably goes straight to memory, instead of HDD? But at the same time, changing the packet size to 10MB, 100MB and 1000MB respectively doesn't seem to degrade performance much either: root@zaxen02:[~]$ iperf -w 10M -c zaxen01 ------------------------------------------------------------ Client connecting to zaxen01, TCP port 5001 TCP window size: 256 KByte (WARNING: requested 10.0 MByte) ------------------------------------------------------------ [ 3] local 196.34.x.x port 36756 connected with 196.34.x.x port 5001 [ ID] Interval Transfer Bandwidth [ 3] 0.0-10.0 sec 1.07 GBytes 921 Mbits/sec root@zaxen02:[~]$ iperf -w 100M -c zaxen01 ------------------------------------------------------------ Client connecting to zaxen01, TCP port 5001 TCP window size: 256 KByte (WARNING: requested 100 MByte) ------------------------------------------------------------ [ 3] local 196.34.x.x port 36757 connected with 196.34.x.x9 port 5001 [ ID] Interval Transfer Bandwidth [ 3] 0.0-10.0 sec 1.08 GBytes 927 Mbits/sec root@zaxen02:[~]$ iperf -w 1000M -c zaxen01 ------------------------------------------------------------ Client connecting to zaxen01, TCP port 5001 TCP window size: 256 KByte (WARNING: requested 1000 MByte) ------------------------------------------------------------ [ 3] local 196.34.x.x port 36758 connected with 196.34.x.x port 5001 [ ID] Interval Transfer Bandwidth [ 3] 0.0-10.0 sec 1.04 GBytes 895 Mbits/sec -- Kind Regards Rudi Ahlers SoftDux Website: http://www.SoftDux.com Technical Blog: http://Blog.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

3 4

Router for SOHO network - hardware considerations
by Niki Kovacs 24 Nov '10

24 Nov '10

Hi, Last week I finished installing a small network in a private school : one server (an old IBM X225), seventeen desktops (Fujitsu Siemens PIV 2.4 GHZ, 512 MB RAM, 40 GB HD), all running CentOS 5.5. One extra machine is acting as a router, in that it is installed between the DSL modem and the network, with two Ethernet cards, and it's taking care of DHCP, DNS, NTP and also acts like a proxy (with Squid). It seems quite big and noisy and electricity-consuming to me, so I wonder if there is any small device that could possibly do the job as good, but which would me more adapted : small, solid and cheap (if possible). I imagine some tiny box just with a CPU and a small harddisk, a little RAM and two network interfaces (one out, one in), where I could install a very stripped-down CentOS, and then just forget about it. So far, I've googled a bit, and I've found two things: 1) Pyramid Soekris boards, where I can put something like Pyramid Linux on it. And 2) The Linksys WRT54GL, for which there are Linux firmwares like OpenWRT and DD-WRT. Is there anything you could especially recommend for this job? (I'm not afraid of getting my hands dirty, BTW :oD) Cheers, Niki

13 14

Boot failure after install on IBM x3550 M3
by Toralf Lund 24 Nov '10

24 Nov '10

I'm trying to install CentOS 5.5 on a couple of servers of type IBM System x3550 M3, but it's not going too well. Actually, the install setup phase runs as expected, and the actual installation also appears to be successful, but the system will not boot - I just get a message (presumably) from BIOS saying that boot from hard disk 0. If I start the installer again after this, or boot rescue mode off the install DVD, the installation is correctly found, however. Does anyone have any idea what may cause this and/or how I can fix the problem? Or is there at least anyone out there who has tried CentOS on the same type of hardware? Note that I've tried (re)installing several times, and also tested CentOS 5.4, but the result is always the same. I've also used CentOS without any problems on an x3550 M2, i.e. a slightly older variant of the hardware. I've (so far) installed with the default disk layout and package selection. - Toralf This e-mail, including any attachments and response string, may contain proprietary information which is confidential and may be legally privileged. It is for the intended recipient only. If you are not the intended recipient or transmission error has misdirected this e-mail, please notify the author by return e-mail and delete this message and any attachment immediately. If you are not the intended recipient you must not use, disclose, distribute, forward, copy, print or rely on this e-mail in any way except as permitted by the author.

6 15

DisplayPort output with intel graphics driver?
by Toralf Lund 24 Nov '10

24 Nov '10

Hi. We've installed CentOS 5.5 on a "mini PC" with an onboard Intel graphics chip, which has both "VGA" and DisplayPort output. This works reasonably well, except that I'd like to connect the monitor to the DisplayPort, and I only seem to get a signal on the VGA connector. This is the case even if I boot with the DisplayPort (only) connected, in which case console output during boot goes to the DisplayPort, but the graphical output does not. On the other hand, . DisplayPort display did work when booting from a "live" Ubuntu CD. Is there anything I can do to get the correct display setup? Note that the driver used is "intel", not "i810". Thanks, - Toralf This e-mail, including any attachments and response string, may contain proprietary information which is confidential and may be legally privileged. It is for the intended recipient only. If you are not the intended recipient or transmission error has misdirected this e-mail, please notify the author by return e-mail and delete this message and any attachment immediately. If you are not the intended recipient you must not use, disclose, distribute, forward, copy, print or rely on this e-mail in any way except as permitted by the author.

1 0

nspluginwrapper rpms on x86_64? (was: firefox. java. 64 bit. bleah!)
by Mike Fedyk 24 Nov '10

24 Nov '10

On Sat, Nov 20, 2010 at 3:25 PM, Lars Hecking <lhecking(a)users.sourceforge.net> wrote: > Possibly. Or possibly not. On a closely related topic, can you comment on > whether or not it's a good idea to install the nspluginwrapper rpms on x86_64? > They seem to be fundamentally broken. > I don't think you need it anymore with FF 3.6.

4 3

10gig NIC - Link Delay
by Tom Brown 23 Nov '10

23 Nov '10

Hi I am having real trouble with a new batch of Intel NIC's - We were using another type of 10gig card and they were fine but got EOL'd from Intel and are now using something subtly different. I dont have all the details yet on the issue but basically there is a major delay in when the link comes up and this is causing major issues with PXE amongst other things. The log states this Nov 23 23:18:53 xxx kernel: ADDRCONF(NETDEV_UP): eth0: link is not ready Nov 23 23:19:09 xxx kernel: ixgbe: eth0 NIC Link is Up 10 Gbps, Flow Control: RX/TX Nov 23 23:19:09 xxx kernel: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready So 16 seconds for the link to come up - The only real difference between the old card and the new is that the new seems to support FCOE whereas the older one didnt Has anyone got any clues as to what causes link delays? thanks

3 3

Centos 6 installation memory requirements
by Robert Moskowitz 23 Nov '10

23 Nov '10

Will (does) Centos 6 require 512Mb of memory for the GUI install like FC14 or the lower requirement of FC13? My ASUS EE 700 has ~490Mb of memory (vidoe steals some from the 512Mb base) and FC14 switches to text install and does not install any GUI, leaving the boot in test mode. I recall a message earlier that 6 is based off of 14, but not the final Anaconda, thus my question. It would be NICE if the install can work with at least 384Mb of memory, as this is the recommended minimum for FC14 so I would think it is the miniumum for RHEL/Centos 6. I am seeing FC leave more older hardware behind and with its short cycles and 'currentness' of apps for RHEL 6, I am looking at moving some of my desktops back from FC to Centos. FC13 may be the last FC for some of them...

11 24

Strange happening with new users and keyed access on diskless cluster
by Joseph Norris 23 Nov '10

23 Nov '10

Hello to all, I have been battling this situation now for 3 days and still have not found a resolution. I appeal to any and all for help. Here are the facts as far as I can tell. 1) I moved a 66 node rocks based cluster to a diskless cluster using the latest version of Centos and all updates in place. 2) users are added with home directory mounted across the nodes on the cluster so a user's home directory would sit on /export/home with sym link from home on head node 3) sshkey-gen used to create public/private key in .ssh so that user can have keyless access to all nodes, allowing sge jobs to run across nodes. ( if I have left any information out above - please let me know ) So here is the problem: All of my current user base has had not issues what so ever with current arrangement and up to about a month ago I could create a user, use the the script that I have to build the keys and do an expect script out to each node answering yes to add access to known_hosts etc.... permissions correctly set on user .ssh directory and files. Now the problem: I build a new user - run my script and the users when ssh c33 ( name of a node ) gets a password challenge. I dink with the sshd_config for the nodes and not matter what I do I keep getting the password challenge or a permission error on publickey. I have done the ssh -vvv c33 and get "sending packet" but no return from openssh and then it defaults out to next method with no results. I have checked permissions with users that have no issue and as-far-as-I-can tell there is not issue. Now here is the real strange thing: I take a user that is already been on the system with no issues and delete the .ssh directory. Then I re-run my keybuilder bash script rebuilding the keys and setting the known_hosts and I get seamless ssh to all nodes. With the new users in the last month, do the same thing and I get the issues above. I am totally confused. Has something changed with an update? Do I need to do something different with the build of a new user that I did not have to do before? Do I have to do something in particular with my sshd_config file? Please give me any and all observations - I really need to resolve this issue. Thanks. -- Joseph Norris Applications Developer/Server Admin 209-228-4576

2 2

Eclipse Helios on CentOS 5.5 (was Websites Up!)
by Mathieu Baudier 23 Nov '10

23 Nov '10

> Then I hope to finish my tutorial on installing Eclipse > Helios for Centos 5.5 Is there anything special to be done? I just unzipped the SR1 distribution for RCP/RAP developers linux-gtk-x86_64 and it works without problem on an up to date CentOS 5.5 x86_64. (to be more precise: I install it as root under /opt, install some plugins like subclipse and regular users start it from there)

2 1

Re: [CentOS] Centos 6 installation memory requirements
by m.roth＠5-cent.us 23 Nov '10

23 Nov '10

Mathieu Baudier wrote: >> break out your wallet, blow the dust out, and spend a few bucks on some RAM > > Sometimes the hardware is so old, that it is not as easy as that to find the right RAM for it... > > I have some very old IBM PoS cashier machines (sic! got them for 30 EUR each, plenty of connectors, very well built) based on Celeron processors which valiantly run CentOS 5 for some tests/router/storage, etc., but I have a hard time finding RAM for them. > I think that they will never make it to CentOS 6 (maybe I'll switch them to Debian which I always found pretty good for low-end hardware). I've always been impressed with how solid IBM's hardware is. Anyway, one thing you might look at is to see what's running, and if you don't need it, turn it off, and maybe uninstall. If these are PoS boxen, do you need X windows? Do you need Gnome or KDE as windonw managers (look at smaller ones - I use IceWM at home, < 600k, yes, k, not M; the other admin here likes xfce)? mark

2 2

Websites Up!
by Keith Roberts 23 Nov '10

23 Nov '10

Just a quick note to say that I have moved all my websites to a cloud platform with 99.99% uptime. So I apologise if anyone has been trying to get to the Kickstart User Guide and other Centos bits on my website. My home server is being worked on, and I'll just use that for development purposes from now on. Then I hope to finish my tutorial on installing Eclipse Helios for Centos 5.5 Kind Regards, Keith Roberts www.karsites.net www.php-debuggers.net www.raised-from-the-dead.org.uk -- In theory, theory and practice are the same; in practice they are not. This email was sent from my laptop with Centos 5.5

1 0

Upgrade from RHEL 6 beta ?
by Nicolas Ross 23 Nov '10

23 Nov '10

I've installed rhel 6 beta to start playing around with clustering, gfs2 and ldap. Will I be able to upgrade to centos 6 final or I'll have to re-install ? Nicolas

3 6

Automount, External USB disk and e2fsck
by Robert Heller 23 Nov '10

23 Nov '10

Does Automount/autofs automagically run e2fsck? If so, how does one disable this? We have an external USB connected 2TB hard drive setup to automount. Sometimes e2fsck gets fired up, I think from Automount. I have this line in the automount config: /backupdisk -fstype=ext3,nocheck :LABEL=BACKUP I believe this should prevent Automount from running e2fsck, but it still runs it. (We have a cron job that daily does a e2fsck -p on this disk at a 'quiet' time.) -- Robert Heller -- 978-544-6933 / heller(a)deepsoft.com Deepwoods Software -- http://www.deepsoft.com/ () ascii ribbon campaign -- against html e-mail /\ www.asciiribbon.org -- against proprietary attachments

1 0

200 line kernel patch to improve performance
by Jerry Geis 23 Nov '10

23 Nov '10

There was an article about a kernel patch to improve performance. www.webupd8.org/2010/11/alternative-to-200-lines-kernel-patch.html it involves adding this to ~/.bashrc | if [ "$PS1" ] ; then mkdir -m 0700 /sys/fs/cgroup/cpu/user/$$ echo $$ > /sys/fs/cgroup/cpu/user/$$/tasks fi and this as root: ||mount -t cgroup cgroup /sys/fs/cgroup/cpu -o cpu mkdir -m 0777 /sys/fs/cgroup/cpu/user| My machine Centos 5.5 does not have a /sys/fs/cgroup Is there anything else to do instead? Jerry

2 1

redirecting time output
by Rainer Traut 23 Nov '10

23 Nov '10

Hi, am trying to pipe output from time command and output from a shell script to the mail program. So far it's not working as expected... # time echo "test" 2>&1 | mail -s "timetest" my(a)mail.com real 0m0.126s user 0m0.000s sys 0m0.000s The time command writes to stderror, but here the redirection seems to apply to the echo command? Thx Rainer

3 3

Fail Transfer of Large Files
by Michael D. Berger 23 Nov '10

23 Nov '10

On my intranet, I sometimes transfer large files, about 4G, to an CentOS old box that I use for a web server. I transfer with ftp or sftp. Usually, before the file is complete, the transfer "stalls". At that point, ping from the destination box to the router fails. I then deactivate the net interface on the destination box and then activate it. Ping is then successful, and the transfer is completed. The transferred file is correct, as verified with sha1sum. All connections are via cat6 wire. So what do you think? Should I try changing the net card? Any tests to run? Any other suggestions? Thanks for your help. Mike.

7 13

Sendmail, localloop, and iptables -- should I be more paranoid?
by Robert Moskowitz 23 Nov '10

23 Nov '10

By default, sendmail only listens on the localloop: DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')dnl But by default to allow sendmail to even work the iptables entry is: -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 25 -j ACCEPT Without this, sendmail can't even connect to localloop. But should I handedit this line to something like: -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp -d 127.0.0.1 --dport 25 -j ACCEPT And once you handedit iptables, you can't use the gnome firewall applet, I suspect...

3 5

upcoming mailman version change?
by Dave Stevens 23 Nov '10

23 Nov '10

Hi, I'm using CentOS on a box that, among other things, offers mailman mailing lists, currently mailman 2.1.9. Version 2.1.14 is avilable from the developers but integrating it into the system promises to be tedious. I looked at RHEL 6 and don't know where to look to find the version there, which I assume will be the version in CentOS 6. Can anyone either confirm what version will be in C6 or where to find the full feature list in RHEL 6? Dave -- "It is no measure of health to be well adjusted to a profoundly sick society." Krishnamurti

2 2

where to download tzdata-java-20101-1.e15 RPM fro CENTOS 5.5 X86?
by mcclnx mcc 22 Nov '10

22 Nov '10

I am installed CENTOS 5.5 on X86. After finish, I tried to apply latest patches. Rpm patch manager say need "dependency" "tzdata-java-20101-1.e15". I search CENTOS 5.5 CD and can NOT find this file. I also search Internet and no result. Can anyone tell me where to download "tzdata-java-20101-1.e15" RPM? Thanks.

3 2

firefox. java. 64 bit. bleah!
by m.roth＠5-cent.us 22 Nov '10

22 Nov '10

Found this <http://plugindoc.mozdev.org/linux-amd64.html#java-sun>, and I remember the plugins directory... except firefox 3.6.11, I can't find any, not in ~/.mozilla, not in /usr/lib64/mozilla. Anyone have a clue for the poor? mark

4 6

Re: [CentOS] Router for SOHO network - hardware considerations
by Bob Puff＠NLE 22 Nov '10

22 Nov '10

I am looking for something similar to this thread.. Is there a way to make a small CentOS distro that is bootable and runnable from only a USB memory stick? It would need to be able to have files modified, but I wouldn't want the USB stick to die prematurely due to a ton of writes... Bob

2 1

Strange ntp behaviour?
by Robert Moskowitz 22 Nov '10

22 Nov '10

The following is from my logwatch email: --------------------- XNTPD Begin ------------------------ XNTPD Killed: 7 Time(s) XNTPD Started: 8 Time(s) Total interfaces 8 (non-local: 4) Total synchronizations 6 (hosts: 1) Errors getaddrinfo: "0.centos.pool.ntp.org" invalid host address, ignored: 2 time(s) getaddrinfo: "1.centos.pool.ntp.org" invalid host address, ignored: 2 time(s) getaddrinfo: "2.centos.pool.ntp.org" invalid host address, ignored: 2 time(s) ---------------------- XNTPD End ------------------------- Yet from this host I get: # host 0.centos.pool.ntp.org 0.centos.pool.ntp.org has address 208.53.158.34 0.centos.pool.ntp.org has address 69.50.219.51 0.centos.pool.ntp.org has address 108.76.168.145 So what is NTP doing here; why the errors for getaddrinfo? Or is this nothing more than 2 out of some many times getaddrinfo failed, but worked just fine enough to count?

2 2

TC Filter Flows & ESFQ - Traffic Shaping
by Frederick Abrams 22 Nov '10

22 Nov '10

Hi, We currently have ESFQ running on an old Fedora machine and i'm trying to build a new router with something similar using CentOS 5.5 The problem is that it seems by default the CentOS is not compiled with TC ESFQ or TC filter hash flows I get the following error: Unknown filter "flow", hence option "hash" is unparsable How can i add support for the hash flow option or ESFQ or perhaps someone can suggest a better option where I can get the same functionality of even sharing based on src / dst tc filter add dev eth0 parent 10: protocol ip handle 10 flow hash keys dst divisor 1024 -- Fred -- This message has been scanned for viruses and dangerous content by Intelvision MailScanner, and is believed to be clean.

1 0

"Cracking Passwords In The Cloud: Amazon’s New EC2 GPU Instances" -- using CentOS
by Timo Schoeler 22 Nov '10

22 Nov '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, in case someone missed it: CentOS was used in a EC2 setup to demonstrate GPU-based brute force cracking of passwords. "Cracking Passwords In The Cloud: Amazon’s New EC2 GPU Instances" http://stacksmashing.net/2010/11/15/cracking-in-the-cloud-amazons-new-ec2-g… See also: http://it.slashdot.org/story/10/11/16/1549245/Cracking-Passwords-With-Amazo… Cheers, Timo :) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iD8DBQFM6i59fg746kcGBOwRAoioAKC6oCVuh0meM5ynVUe7L+a3JlLFHgCeMivH nwFIhD4rcm6pP66uE9/M3Uo= =ZWeW -----END PGP SIGNATURE-----

1 0

Routing of outgoing packets
by Mitja Mihelič 22 Nov '10

22 Nov '10

Hi! I am trying to use hping to chek the latency of our network. Somehow things are not going to plan and I thought someone might be able to shed some light on the subject. Here is the setup: (the IP addresses gvien here are fake, but they do represent the correct state of the networking setup) vlan interface IP mask V2 eth0 192.168.20.20 32 V4 eth1 172.16.4.40 32 V6 eth2 172.16.6.60 32 The default route is set to eth1. The idea is to use eth2 for pinging only, the other two interfaces are used by another service and management access. If I do: ping -c 2 -I eth2 74.125.39.147 or fping -c 2 -I eth2 74.125.39.147 It binds to eth2 and sends its ICMP probes via that interface with the IP on that interface. If I do: hping3 -1 -c 2 -I eth2 74.125.39.147 -VD or [root@server ~]# hping3 -c 2 -I eth2 74.125.39.147 -VD DEBUG: if lo: Don't Match (but seems to be UP) DEBUG: if eth0: Don't Match (but seems to be UP) DEBUG: if eth1: Don't Match (but seems to be UP) DEBUG: if eth2: OK using eth2, addr: 172.16.6.60, MTU: 1500 It supposedly binds to eth2. But tcpdump tells another story. Packets get sent out via the default route (eth1) with the IP from eth2 set as the source address. The same happens with tcptraceroute (tcptraceroute-1.5-0.beta7.el5.rf.i386.rpm). I have tried various routing policies, but I have yet to find a solution that works. I have used iptables to log the packets in the OUTPUT chain, but they arrive there with the interface already set to eth1. Can anyone help ? Regards, Mitja Mihelic

3 3

Centos 4 and cgiemail
by Todd Cary 22 Nov '10

22 Nov '10

I am running Centos 4 and want to run cgiemail in a directory under the web application. The setting of the "value" property in the <form> is tricky, but I have the web application running on other servers without a problem. On my server I get the error that it cannot find the file pointed to by the value in the <form>. My question is whether or not I need to do something special like install an application on the server or do something special with permissions (the cgiemail is owned by apache and has 775 for permissions). The web app is in the "interact" folder with the cgiemail in cgi-bin under it. Works on other servers. Many thanks... Todd -- Ariste Software Petaluma, CA 94952 http://www.aristesoftware.com

2 5

LDAP clients fail to connect with SSL enabled
by bluethundr 21 Nov '10

21 Nov '10

I am attempting to setup SSL/TLS support on my openLDAP 2.4 server on FreeBSD. LBSD2# pkg_info | grep openldap openldap-sasl-client-2.4.23 Open source LDAP client implementation with SASL2 support openldap-sasl-server-2.4.23 Open source LDAP server implementation I put my cert file, key file and CA certfile in a directory called /usr/local/etc/openldap/cacerts Here's how it looks: [root@LBSD2:/usr/local/etc/openldap/cacerts]#ls -l total 48 dr--r----- 2 root ldap 512 Nov 21 17:12 bak -r--r----- 1 root ldap 1960 Nov 21 07:05 bsd2.summitnjhome.com.crt -r--r----- 1 root ldap 4604 Nov 21 17:16 gd_bundle.crt -r--r----- 1 root ldap 4689 Nov 21 18:59 sf_bundle.crt -r--r----- 1 root ldap 1537 Nov 21 17:16 sf_issuing.crt -r--r----- 1 root ldap 1090 Nov 21 12:29 slapd.csr -r--r----- 1 root ldap 1743 Nov 21 12:26 slapd.key -r--r----- 1 root ldap 1675 Nov 21 17:25 slapd.pem My cert flie is a GoDaddy turbo-ssl certfile named bsd2.summitnjhome.com.crt. slapd.key is the key file and slapd.pem is the same thing only with the password removed. I'm a little unsure of which CA file to use but I think that sf_issuing.crt _should_ work as this is the CA file that I used to setup a similar SSL enabled LDAP server for a client recently. Although I have tried all three CA files in this directory: (gd_bundle.crt, sf_bundle.crt, and sf_issuing.crt). I put the various cert/key files into my slapd.conf file like this: LBSD2# cat slapd.conf | grep -i tls ## TLS options for slapd TLSCipherSuite HIGH:MEDIUM:+SSLv2 TLSCertificateFile /usr/local/etc/openldap/cacerts/bsd2.summitnjhome.com.crt TLSCertificateKeyFile /usr/local/etc/openldap/cacerts/slapd.pem TLSCACertificateFile /usr/local/etc/openldap/cacerts/sf_issuing.crt Slapd restarts cleanly! LBSD2# /usr/local/etc/rc.d/slapd restart Stopping slapd. Waiting for PIDS: 81924. Starting slapd. Then I attempt to setup a virtual instance of CentOS 5.5 on the client side and that's where things fall apart...I attempt to ssh to localhost as an LDAP account: [root@VIRTCENT08:/etc/openldap/cacerts]#ssh bluethundr@localhost [...tectonic plates drift, careers begin and end, babies learn to walk, talk and grow to adulthood..] Connection closed by 127.0.0.1 [root@VIRTCENT08:/etc/openldap/cacerts]#getent passwd | grep ldapAccount [same interminable wait as above] This is what my /etc/ldap.conf file looks like on the client: [root@VIRTCENT08:/etc/openldap/cacerts]#cat /etc/ldap.conf # Your LDAP server. Must be resolvable without using LDAP. # Multiple hosts may be specified, each separated by a # space. How long nss_ldap takes to failover depends on # whether your LDAP client library supports configurable # network or connect timeouts (see bind_timelimit). #host 127.0.0.1 # The distinguished name of the search base. base dc=summitnjhome,dc=com # stored in /etc/ldap.secret (mode 600) #rootbinddn cn=manager,dc=example,dc=com # The port. # Optional: default is 389. #port 389 # Search timelimit #timelimit 30 timelimit 120 # Bind/connect timelimit #bind_timelimit 30 bind_timelimit 120 # Idle timelimit; client will close connections # (nss_ldap only) if the server has not been contacted # for the number of seconds specified below. #idle_timelimit 3600 idle_timelimit 3600 # Netscape SDK LDAPS #ssl on # Netscape SDK SSL options #sslpath /etc/ssl/certs # OpenLDAP SSL mechanism # start_tls mechanism uses the normal LDAP port, LDAPS typically 636 #ssl start_tls #ssl on # OpenLDAP SSL options # Require and verify server certificate (yes/no) # Default is to use libldap's default behavior, which can be configured in # /etc/openldap/ldap.conf using the TLS_REQCERT setting. The default for # OpenLDAP 2.0 and earlier is "no", for 2.1 and later is "yes". #tls_checkpeer yes # CA certificates for server certificate verification # At least one of these are required if tls_checkpeer is "yes" #tls_cacertfile /etc/ssl/ca.cert #tls_cacertdir /etc/ssl/certs # SSL cipher suite # See man ciphers for syntax #tls_ciphers TLSv1 # Client certificate and key # Use these, if your server requires client authentication. #tls_cert #tls_key # SASL mechanism for PAM authentication - use is experimental # at present and does not support password policy control uri ldap://ldap.summitnjhome.com/ ssl start_tls tls_cacertdir /etc/openldap/cacerts pam_password crypt This is how my nsswitch on the client side is setup: passwd: files ldap shadow: files ldap group: files ldap And here is the cert dir on my CentOS client: [root@VIRTCENT08:/etc/openldap/cacerts]#ls -l total 72 lrwxrwxrwx 1 root root 13 Nov 21 09:44 97552d04.0 -> gd_bundle.crt lrwxrwxrwx 1 root root 14 Nov 21 09:44 b737b221.0 -> sf_issuing.crt dr--r--r-- 2 root root 4096 Nov 21 2010 bak -r--r--r-- 1 root root 1960 Nov 21 07:05 bsd2.summitnjhome.com.crt lrwxrwxrwx 1 root root 25 Nov 21 09:44 c75be861.0 -> bsd2.summitnjhome.com.crt -r--r--r-- 1 root root 4604 Nov 21 2010 gd_bundle.crt -r--r--r-- 1 root root 1537 Nov 21 2010 sf_issuing.crt -r--r--r-- 1 root root 1090 Nov 21 12:29 slapd.csr -r--r--r-- 1 root root 1743 Nov 21 12:26 slapd.key -r--r--r-- 1 root root 1675 Nov 21 2010 slapd.pem Back on the server side there is a lot of activity in the ldap logs (here is an excerpt) Nov 21 20:21:38 LBSD2 slapd[81972]: daemon: read activity on 11 Nov 21 20:21:38 LBSD2 slapd[81972]: daemon: select: listen=6 active_threads=0 tvp=NULL Nov 21 20:21:38 LBSD2 slapd[81972]: daemon: select: listen=7 active_threads=0 tvp=NULL Nov 21 20:21:38 LBSD2 slapd[81972]: connection_read(11): input error=-2 id=1017, closing. Nov 21 20:21:38 LBSD2 slapd[81972]: connection_closing: readying conn=1017 sd=11 for close Nov 21 20:21:38 LBSD2 slapd[81972]: daemon: activity on 1 descriptor I've encloses a more complete log file as an attachment. I then try to show the CA files with an openssl command. First with sf_issuing.crt - slapd.conf: TLSCACertificateFile /usr/local/etc/openldap/cacerts/sf_issuing.crt On the client: [root@VIRTCENT08:/etc/openldap/cacerts]#openssl s_client -connect ldap.summitnjhome.com:389 -showcerts -CAfile sf_issuing.crt CONNECTED(00000003) 3143:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188 Next with sf_bundle.crt - slapd.conf: TLSCACertificateFile /usr/local/etc/openldap/cacerts/sf_bundle.crt [root@VIRTCENT08:/etc/openldap/cacerts]#openssl s_client -connect ldap.summitnjhome.com:389 -showcerts -CAfile sf_bundle.crt 3149:error:02001002:system library:fopen:No such file or directory:bss_file.c:122:fopen('sf_bundle.crt','r') 3149:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:125: 3149:error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib:by_file.c:279: CONNECTED(00000003) 3149:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188: Next with gd_bundle.crt - TLSCACertificateFile /usr/local/etc/openldap/cacerts/gd_bundle.crt [root@VIRTCENT08:/etc/openldap/cacerts]#openssl s_client -connect ldap.summitnjhome.com:389 -showcerts -CAfile gd_bundle.crt CONNECTED(00000003) 3156:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188: Disabling TLS on the client side authentication works again! [root@VIRTCENT08:/etc/openldap/cacerts]#ssh bluethundr@localhost bluethundr@localhost's password: Last login: Sun Nov 21 09:41:34 2010 from 192.168.1.50 ######################################################### # SUMMITNJHOME.COM # # TITLE: VIRTCENT08 BOX # # LOCATION: SUMMIT BASEMENT # # # ######################################################### Any thought on how to resolve the current situation would be most appreciated! ;) -- Here's my RSA Public key: gpg --keyserver pgp.mit.edu --recv-keys 5A4873A9 Share and enjoy!!

1 0

Auto-Re: CentOS Digest, Vol 70, Issue 20
by 韦加宁 21 Nov '10

21 Nov '10

信已收到,谢谢!

2 1

Auto-Re: CentOS Digest, Vol 70, Issue 21
by 韦加宁 21 Nov '10

21 Nov '10

信已收到,谢谢!

1 0

Old thread:how many people still use NIS?
by Nico Kadel-Garcia 21 Nov '10

21 Nov '10

Good morning! I've been offlist for years, and hopping back on for various reasons, I see a thread that I'd like to add to. There's an old thread on NIS use in Centrify that I'd like to add some comments to. I'm still forced to work with NIS for various reasons, including interaction with heavy duty NAS's that require it for NFSv4. I have been busy falling in serious love with Centrify (www.centrify.com) for this. For an environment that already has an extensive Active Directory investment, it's a way to save weeks or months of expensive engineering time and get on with your job. It's a commercial toolkit, reasonably open source friendly and with free components for home users. It provides a very good plug-and-play solution to merging Linux and UNIX authentication, including NIS support, to an Active Directory back end. They basically do what I'd do if I had the time, including workable GUI's and error reporting. You get genuine single-sign-on, commercially supported Putty for your Windows clients, Kerberos password handling, commercially supported OpenSSH 5.x with GSSAPI, good support for multiple "zones" that have different sets of authorized users, scriptable toolkits for adding or adding machines to the relevant zones, etc., etc. It works well with CentOS 5.x, and saves me the work of having to manually compile my own OpenSSH to get GSSAPI support. And the NIS plugin works *very* well and saves weeks of work building your own solution with the limited and out of date components in CentOS or RHEL 5. It "Just Works(tm)".

1 0

PATA Hard Drive woes
by Keith Roberts 21 Nov '10

21 Nov '10

Hi All. Yesterday I was installing Centos 5.5 to my web server, and it looks like the main hard drive has gone AWOL. Fedora 12 put the file system into r/o mode. The drive is an Hitachi, still under warranty. There are bad sectors on it, and running the Hitachi DFT tool confirms this. Also I cannot repair the bad sectors. Would this be caused by a faulty I/O chip, or is it safe to say it's definately the HDD at fault? Kind Regards, Keith Roberts -- In theory, theory and practice are the same; in practice they are not. This email was sent from my laptop with Centos 5.5

12 30

Old metadata for centosplus 4 repo.
by I.Piasecki 20 Nov '10

20 Nov '10

Hi Centos maintainers ! Could You please refresh repo data for centosplus reposytory 4 ? There are new kernels rpms, but repo index files arn't updated. Please fix that. For example: http://mirror.centos.org/centos/4/centosplus/x86_64/ rpm from 20 oct 2010 but meatadata from 28 sep 2010 ... P.S: That was 17 nov 2010 fixed for centosplus 5 repo, but centosplus 4 was omitted. Best regards, -- Ireneusz Piasecki

2 1

centos 5.5--gnome desktop--all icons disappeared.
by fred smith 20 Nov '10

20 Nov '10

gang, I feel dumb having to ask this... I've got a Centos 5.5 installation (it's not new, I've been using it for over a year on this machine) and all of a sudden just a few minutes ago everything on the gnome desktop disappeared. no icons, right-click doesn't bring up a context menu. the panels are still there, though, thank goodness. tried logging off and back on but that didn't help. I'm perusing the centos forums for clues, and thought I should ask all of you too in parallel. Suggestions appreciated, thanks in advance! Fred -- ------------------------------------------------------------------------------- Under no circumstances will I ever purchase anything offered to me as the result of an unsolicited e-mail message. Nor will I forward chain letters, petitions, mass mailings, or virus warnings to large numbers of others. This is my contribution to the survival of the online community. --Roger Ebert, December, 1996 ----------------------------- The Boulder Pledge -----------------------------

2 2

kickstart raid disk partitioning
by Roberto Nunnari 20 Nov '10

20 Nov '10

Hello. A couple of years ago I installed two file-servers using kickstart. The server has two 1TB sata disks with two software raid1 partitions as follows: # cat /proc/mdstat Personalities : [raid1] md1 : active raid1 sdb4[1] sda4[0] 933448704 blocks [2/2] [UU] md0 : active raid1 sdb1[1] sda2[2](F) 40957568 blocks [2/1] [_U] Now the drives are starting to be failing and next week I'll backup /homes, reinstall OS with kickstart, and finally restore /homes. There's a problem with how the kickstart process partitions the disks, though. As you may have noticed above, md0 is made up of sdb1 and sda2. Could anybody help me understand how to make the partitions on the two drives identical still using kickstart? Here's the relevant part from the kickstart file: zerombr yes clearpart --all --initlabel bootloader --location=mbr part /boot --fstype ext3 --size 250 --asprimary --ondisk sda part swap --size 2048 --asprimary --ondisk sda part raid.01 --size 40000 --asprimary --ondisk sda part raid.03 --size 1 --grow --asprimary --ondisk sda part /boot2 --fstype ext3 --size 250 --asprimary --ondisk sdb part swap --size 2048 --asprimary --ondisk sdb part raid.02 --size 40000 --asprimary --ondisk sdb part raid.04 --size 1 --grow --asprimary --ondisk sdb raid / --level=1 --device=md0 --fstype ext3 raid.01 raid.02 raid /home --level=1 --device=md1 --fstype ext3 raid.03 raid.04 ..but here's the produced partitioning on the two drives: # parted /dev/sda print Disk geometry for /dev/sda: 0.000-953869.710 megabytes Disk label type: msdos Minor Start End Type Filesystem Flags 1 0.031 251.015 primary ext3 boot 2 251.016 40248.786 primary ext3 raid 3 40248.787 42296.132 primary linux-swap 4 42296.133 953867.219 primary ext3 raid # parted /dev/sdb print Disk geometry for /dev/sdb: 0.000-953869.710 megabytes Disk label type: msdos Minor Start End Type Filesystem Flags 1 0.031 39997.771 primary ext3 boot, raid 2 39997.771 42045.117 primary linux-swap 3 42045.117 42296.132 primary ext3 4 42296.133 953867.219 primary ext3 raid I'm not asking because I'm picky, but just because, it would have made my life easier to fix bad blocks on disks by dd from good block on disk1 to bad block on disk2, and as next week I'll reinstall, I'd prefer to do it the right way. Some more bits about my environment: # cat /etc/redhat-release CentOS release 4.8 (Final) # uname -rms Linux 2.6.9-89.0.18.ELsmp i686 Thank you and best regards. Robi

5 14

juniper netscreen (ssg5) and centos
by aurfalien＠gmail.com 20 Nov '10

20 Nov '10

Hi all, Lookin to do an IPSEC VPN between a Juniper SSG5 and Centos 5.5. Reading some docs that ref /etc/ipsec-tools.conf but they do not exist on my box being Centos 5.5. The package ipsec-tools is installed and I'm guessing /etc/racoon/ racoon.conf is what I am looking for. Anyways, some help would be very appreciated. - aurf

1 0

OT: Java down
by Helmut Drodofsky 19 Nov '10

19 Nov '10

Hallo, yesterday from 3 to 11 pm UTC our Java application was down. As far as I know, the server java.sun.com was not available. Needs any java application direct access to sun? Can I stop this hell? Any idea? Best regards Helmut

4 3

Centos podcast on FLOSS weekly
by Les Mikesell 19 Nov '10

19 Nov '10

If you've ever wondered what Karanbir Singh looks like, check out this week's (142) video podcast at http://twit.tv/floss. I'm only partway through the audio version (will finish on the drive home) and haven't heard anything that would be surprising to people already using Centos yet but it's a great presentation and something to recommend to people who aren't familiar with the project. -- Les Mikesell lesmikesell(a)gmail.com

8 9

New to Centos
by Johan Scheepers 19 Nov '10

19 Nov '10

Good day, I would like to first test and then use centos 5.5. I downloaded centos 5.5 x86_64 live CD. Problem...screen resolution only 800x600. In fedora 14 it is 1024x768, same in debian squeeze and opensuse11.3. Could there be a way to increase the resolution? in either i386 or x86_64. Thanks Regards Johan

6 10

become mirror
by ann kok 19 Nov '10

19 Nov '10

Hi all My company would like to mirror the centos. How can it join? and which software for the mirror using? Thank you

2 1

How can I setup to allow php running on CentOS server?
by wang suya 19 Nov '10

19 Nov '10

Dear Everyone I met truble to setup centos Server. I installed centos lastest version, then installed apache lastest version and yum installed php lastest version. And looked at internet information to set up httpd.conf, then I run http://localhost/test.php but forbbiton 403 error return to me. Who know how to set up to allow php run in my server? Thank you in advance Wang wang suya

3 7

[HOWTO] Running Xen 4.0 host (dom0) with Redhat Enterprise Linux 6 (RHEL6)
by Pasi Kärkkäinen 18 Nov '10

18 Nov '10

Hello, If you're interested in running Xen 4.0 hypervisor/dom0 on RHEL6, take a look at here: http://wiki.xen.org/xenwiki/RHEL6Xen4Tutorial It explains steps needed to rebuild Xen 4.0.1 src.rpm from Fedora on RHEL6, and how to fetch dom0 capable 2.6.32.x kernel from upstream git repository. It also shows how to get libvirt/virt-manager working with Xen on RHEL6. Hopefully it helps :) -- Pasi

2 1

CentOS-announce Digest, Vol 69, Issue 8
by centos-announce-request＠centos.org 18 Nov '10

18 Nov '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2010:0895 Moderate CentOS 4 i386 systemtap - security update (Tru Huynh) 2. CESA-2010:0895 Moderate CentOS 4 x86_64 systemtap - security update (Tru Huynh) 3. CEBA-2010:0722 CentOS 5 x86_64 xorg-x11-server Update (Karanbir Singh) 4. CEBA-2010:0722 CentOS 5 i386 xorg-x11-server Update (Karanbir Singh) 5. CEBA-2010:0721 CentOS 5 x86_64 iscsi-initiator-utils Update (Karanbir Singh) 6. CEBA-2010:0721 CentOS 5 i386 iscsi-initiator-utils Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Wed, 17 Nov 2010 19:59:39 +0100 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2010:0895 Moderate CentOS 4 i386 systemtap - security update To: centos-announce(a)centos.org Message-ID: <20101117185939.GA10638(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2010:0895 systemtap security update for CentOS 4 i386: https://rhn.redhat.com/errata/RHSA-2010-0895.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/systemtap-0.6.2-2.el4_8.3.i386.rpm updates/i386/RPMS/systemtap-runtime-0.6.2-2.el4_8.3.i386.rpm updates/i386/RPMS/systemtap-testsuite-0.6.2-2.el4_8.3.i386.rpm source: updates/SRPMS/systemtap-0.6.2-2.el4_8.3.src.rpm You may update your CentOS-4 i386 installations by running the command: yum update systemtap Tru -- Tru Huynh (mirrors, CentOS i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

memory map
by Jerry Geis 18 Nov '10

18 Nov '10

Is there any way to tell what has been "mapped" into memory on linux (C5 x86_64)? I am trying to use the "pagein @pagein-impress" command from openoffice and it does not seem to make any difference in speed. Can I tell if the files have actually been mapped into memory? Maybe I am not doing something right. Thanks, Jerry

1 0

centos 5.5 x86_64 live cd
by Johan Scheepers 18 Nov '10

18 Nov '10

good day, I am new to centos. Using a standalone laptop. Downloaded and burned the live cd. All seem ok except screen resolution only 800x600. Most importand I do not seem to find the install to hard disk option anywhere. Some distros I tried do have an option to install on the screen when you are happy about the OS. Googled but could not find the howto for the live cd install. Kindly please..Is the live CD installable. Thanks Regards Johan

3 2

ssh prompting for password
by bluethundr 18 Nov '10

18 Nov '10

hello list I have a network mounted home directory shared between all hosts on my network: [bluethundr@LCENT03:~]#df -h Filesystem Size Used Avail Use% Mounted on /dev/mapper/VolGroup00-LogVol00 140G 4.4G 128G 4% / /dev/sda1 99M 35M 60M 37% /boot tmpfs 1.6G 0 1.6G 0% /dev/shm nas.summitnjhome.com:/mnt/nas 903G 265G 566G 32% /mnt/nas nas2.summitnjhome.com:/mnt/store 1.4T 187G 1.1T 15% /mnt/store nas2.summitnjhome.com:/mnt/home 903G 47G 784G 6% /home none 1.6G 136K 1.6G 1% /var/lib/xenstored So therefore my RSA key should already be in my authorized_keys on any host. However logging into the virtual network, I always get prompted for a password. just for the heck of it, I scp'd the key over again to one of the virtual hosts: [bluethundr@LCENT03:~]#scp .ssh/id_rsa.pub virt1:~ bluethundr@virt1's password: id_rsa.pub 100% 381 0.4KB/s 00:00 ssh'd in: [bluethundr@LCENT03:~]#ssh virt1 bluethundr@virt1's password: Last login: Tue Nov 16 15:57:24 2010 from 192.168.1.46 Searched for the key on the host I just ssh'd into: [bluethundr@VIRTCENT01:~]#grep -f id_rsa.pub .ssh/authorized_keys ssh-rsa AAAAB3NzaC1yc2EAAAABI-FAKE-DATA-dgjIWxnyplIYKE5IQw9FY2+IVsYw== As you can see, it's already there.. I then checked the modes on authorized_keys: [bluethundr@VIRTCENT01:~]#ls -l .ssh/authorized_keys -rw------- 1 1001 1002 1597 Nov 15 12:02 .ssh/authorized_keys And checked that I was using the same shared network mounted home directory from the machine I just ssh'd in from: [bluethundr@VIRTCENT01:~]#df -h Filesystem Size Used Avail Use% Mounted on /dev/mapper/VolGroup00-LogVol00 9.1G 1.8G 6.9G 21% / /dev/xvda1 99M 20M 75M 21% /boot tmpfs 129M 0 129M 0% /dev/shm nas.summitnjhome.com:/mnt/nas 903G 265G 566G 32% /mnt/nas nas2.summitnjhome.com:/mnt/store 1.4T 187G 1.1T 15% /mnt/store nas2.summitnjhome.com:/mnt/home 903G 47G 784G 6% /home [bluethundr@VIRTCENT01:~]# Considering that this key is internal network only and doesn't have a passphrase set (it does not traverse internet boundaries) why on earth am I being prompted for a password whenever I ssh into this machine? thanks! -- Here's my RSA Public key: gpg --keyserver pgp.mit.edu --recv-keys 5A4873A9 Share and enjoy!!

8 10

SMS Gateway
by Jakub Jedelsky 18 Nov '10

18 Nov '10

Hi list-people! Is there anybody who has expiriences with sms gateway on Centos? Our customer has a Siemens modem (connected via serial port) and finds any tool for sending and receving sms. I found something like gammu and smstools but I'm not sure with it.. Have you any tips? Thanks a lot! JJ.

5 5

something chmod'ing /dev/null
by Joe Pruett 18 Nov '10

18 Nov '10

it looks like one of the recent updates will sometimes chmod /dev/null to 600. out of 20 machines i've updated, 3 of them had the odd /dev/null perms afterwards. i haven't tried to identify what it doing it yet, but wanted to give a heads up to others that might start seeing weird behavior.

5 5

upgrading Centos-Xen when version 6 comes along
by Dave Stevens 18 Nov '10

18 Nov '10

I am curious what is the best way to upgrade my dom0 and domUs to V.6 (currently 5) when it releases. Any experience or docs on this? Dave -- "It is no measure of health to be well adjusted to a profoundly sick society." Krishnamurti

12 19

Recycle Bin disappeared (GNOME, CentOS 5.5, 32 bit)
by Lanny Marcus 18 Nov '10

18 Nov '10

Probably this is due to operator error, The Recycle Bin in GNOME disappeared, for this CentOS 5.5 (32 bit) Desktop PC. The box is fully updated. Is there a command I can use, or another procedure, to get the Recycle Bin in GNOME working again? The .trash folder is there. Incredibly rare that I use the KDE Desktop, but it is also installed on this box and the Trash folder (like the Recycle Bin on GNOME) is working perfectly, so this seems to be something I've done to GNOME. [lanny@dell1602 ~]$ uname -a Linux dell1602 2.6.18-194.17.4.el5 #1 SMP Mon Oct 25 15:51:07 EDT 2010 i686 i686 i386 GNU/Linux [lanny@dell1602 ~]$ TIA! Lanny http://www.magazines-magazine.com/

4 8

Ipv6 addr with Vlan-Id - unable to ping neighbour
by Rohit Mediratta 18 Nov '10

18 Nov '10

Hi All, If I have a vlan-Id on an interface with an ipv6 address, then I am unable to ping a real router. The problem is that the Neighbour Solicitation originated from the Centos machine is missing the Vlan-Id in the packet. Therefore a real router will drop such a packet. I have tried this with Centos 4.7 and with Centos 5.5 with the same result. If I originate the first Neighbour Solicitation from the Router (which contains the Vlan-Id), then Linux learns the Mac address correctly and bidirectional ping works. This is a workaround that I am using at the moment, but I would like to avoid doing this all the time (especially when there is a timeout of the neighbour information). This problem does not exist for Ipv4 (i.e. ARP packets originated from Centos contain the Vlan-Id as expected). Here is my topology. Router--port1/1/1.1-------------------eth2---(eth2.1)--Centos 10.10.8.1/24 1.1.1.2 10.10.8.10 (3ffe::a0a:801/120) (3ffe::a0a:80a/120) port 1/1/1.21--------------------------eth2.21 (3ffe::a0f:801/120) (3ffe::a0f:80a/120) (KANRTB1):~ > cat /etc/*-release CentOS release 5.5 (Final) (KANRTB1):~ > cat /proc/version Linux version 2.6.18-194.el5 (mockbuild(a)builder16.centos.org) (gcc version 4.1.2 20080704 (Red Hat 4.1.2-48)) #1 SMP Fri Apr 2 14:58:35 EDT 2010 (KANRTB1):~ > ip -6 addr show <SNIP> 687: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qlen 500 inet6 3ffe::a0f:80a/128 scope global valid_lft forever preferred_lft forever inet6 3ffe::a0a:80a/120 scope global valid_lft forever preferred_lft forever inet6 fe80::2ff:7ff:fe00:2/64 scope link valid_lft forever preferred_lft forever <SNIP> 692: eth2.1@eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 inet6 3ffe::a0a:80a/120 scope global valid_lft forever preferred_lft forever inet6 fe80::2ff:7ff:fe00:2/64 scope link valid_lft forever preferred_lft forever 693: eth2.21@eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 inet6 3ffe::a0f:80a/120 scope global valid_lft forever preferred_lft forever inet6 fe80::2ff:7ff:fe00:2/64 scope link valid_lft forever preferred_lft forever <SNIP> KANRTB1):~ > ifconfig <SNIP> eth2 Link encap:Ethernet HWaddr 00:FF:07:00:00:02 inet addr:1.1.1.2 Bcast:1.1.1.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:29 errors:0 dropped:0 overruns:0 frame:0 TX packets:313 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:500 RX bytes:3330 (3.2 KiB) TX bytes:48442 (47.3 KiB) eth2.1 Link encap:Ethernet HWaddr 00:FF:07:00:00:02 inet addr:10.10.8.10 Bcast:10.10.8.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:29 errors:0 dropped:0 overruns:0 frame:0 TX packets:64 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:2924 (2.8 KiB) TX bytes:10071 (9.8 KiB) eth2.21 Link encap:Ethernet HWaddr 00:FF:07:00:00:02 inet addr:10.15.8.10 Bcast:10.15.8.10 Mask:255.255.255.255 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:34 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 b) TX bytes:6313 (6.1 KiB) <SNIP> Any help/easy fixes/pointers are much appreciated. thanks, Rohit

1 0

MacBook Pro and CentOS-5
by James B. Byrne 18 Nov '10

18 Nov '10

After a long, and quite disheartening, series of hardware problems with my HP laptop I decided to try out a Mac (late 2009 Intel based 19.5 inch). In the months since January past I have discovered this to be no significant improvement and I have grown tired of the persistent wireless connectivity problems and am totally put off by the upgrade to OSX-10.6.4 which killed HD graphics using Open-Gl. Since July, trying to use HD on my Mac now blackens half the screen and then locks the system. I am contemplating wiping the system and installing CentOS-5.5 instead. Before my frustration leads me to run straight on into a wall, what can I expect to NOT work on the Macbook if I do this? I do need wireless, albeit I really cannot say that I have it now. I also dearly would like to get back HD graphics as well. Regards, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

5 7

How to stop automount
by Dick Roth 17 Nov '10

17 Nov '10

I just put a USB hard drive into service, but find that unless the drive is connected to my PC the machine won't boot and drops to a shell. Below is the line I added to fstab. I thought that the option "noauto" would prevent the machine from trying to mount the drive /dev/sdb /usbdrive ext3 user,noauto,rw 0 2 What am I doing wrong? Any advice is welcome. Dick -- Yes indeed...the Hokey Pokey *is* what its all about!

6 10

IDE port test card
by Keith Roberts 17 Nov '10

17 Nov '10

I was looking for something to test the IDE ports on my mobo, and came across this item: http://cgi.ebay.co.uk/PC-Desktop-LPT-IDE-Printer-Port-Analyzer-Tester-Check… Has anybody on the list seen or used anything like this before? I was also wondering if the IDE port tests OK, could I test a HDD cable by plugging that into the port, then putting this tester at the end of the cable? Kind Regards, Keith Roberts -- In theory, theory and practice are the same; in practice they are not. This email was sent from my laptop with Centos 5.5

1 0

CENTOS 5 (X86 32 bits) only support 16 Gb RAM???
by mcclnx mcc 17 Nov '10

17 Nov '10

I would like confirm one thing. Based on what I saw Redhat document before, look like CENTOS 5 (X86, 32 bits) only support 16 GB RAM. Is this correct? Thanks.

8 11

good shell script examples?
by Kill Script 17 Nov '10

17 Nov '10

I am looking for a beginner guide to shell scripting simple tasks on CentOS (e.g. ssh'ing into a server / router / switch, checking for certain things, then exiting and going to the next IP). Does anyone have any suggestions on where to look? (I'm relatively new to bash)

8 10

Snag installing CentOS in a VirtualBox VM
by Mark 17 Nov '10

17 Nov '10

I spent most of the evening trying to boot a new install of CentOS in a VirtualBox VM. The VM recognizes the install DVD, runs it, asks for me to boot it and I type in <return> (or any number of other combinations, all of which fail in exactly the same way) and it continues to run up to the point shown in the attached screenshot. I've tried numerous different combinations of device alternatives, even turned off the virtual NIC, and no joy. I tried marking it as a Red Hat Linux and as Other Linux - same results. I know this isn't a VB forum, but I'm just wondering.... Thanks. Mark

3 3

CentOS-announce Digest, Vol 69, Issue 7
by centos-announce-request＠centos.org 17 Nov '10

17 Nov '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2010:0883 CentOS 5 x86_64 cmirror Update (Karanbir Singh) 2. CEBA-2010:0883 CentOS 5 i386 cmirror Update (Karanbir Singh) 3. CESA-2010:0889 Important CentOS 5 i386 freetype Update (Karanbir Singh) 4. CESA-2010:0889 Important CentOS 5 x86_64 freetype Update (Karanbir Singh) 5. CEBA-2010:0886 CentOS 5 x86_64 dapl Update (Karanbir Singh) 6. CEBA-2010:0886 CentOS 5 i386 dapl Update (Karanbir Singh) 7. CEBA-2010:0885 CentOS 5 x86_64 initscripts Update (Karanbir Singh) 8. CEBA-2010:0885 CentOS 5 i386 initscripts Update (Karanbir Singh) 9. CESA-2010:0889 Important CentOS 4 i386 freetype - security update (Tru Huynh) 10. CESA-2010:0889 Important CentOS 4 x86_64 freetype - security update (Tru Huynh) 11. CESA-2010:0894 Important CentOS 5 x86_64 systemtap Update (Karanbir Singh) 12. CESA-2010:0894 Important CentOS 5 i386 systemtap Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 12 Nov 2010 17:13:45 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0883 CentOS 5 x86_64 cmirror Update To: centos-announce(a)centos.org Message-ID: <20101112171345.GA19080(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0883 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0883.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 2b39f1b7447ede5211469b45ae9fb1db cmirror-1.1.39-8.el5_5.1.x86_64.rpm Source: af16dcc51b0da82d1d7e55750012b8ed cmirror-1.1.39-8.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Fri, 12 Nov 2010 17:13:45 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0883 CentOS 5 i386 cmirror Update To: centos-announce(a)centos.org Message-ID: <20101112171345.GA19066(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0883 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0883.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 79f32f797b61a07c7143ac47d080ac69 cmirror-1.1.39-8.el5_5.1.i386.rpm Source: af16dcc51b0da82d1d7e55750012b8ed cmirror-1.1.39-8.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Tue, 16 Nov 2010 17:01:38 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2010:0889 Important CentOS 5 i386 freetype Update To: centos-announce(a)centos.org Message-ID: <20101116170138.GA10324(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2010:0889 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2010-0889.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 9c8c93f93c94e7b5d7702a80f6601741 freetype-2.2.1-28.el5_5.1.i386.rpm b1fe2de666dc55c47841d0395a89b482 freetype-demos-2.2.1-28.el5_5.1.i386.rpm d130d0e3f6391ac7caa7bd2d8d05b589 freetype-devel-2.2.1-28.el5_5.1.i386.rpm Source: 3a19ad77ac022f78ca1adbdf39c19cb8 freetype-2.2.1-28.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Tue, 16 Nov 2010 17:01:39 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2010:0889 Important CentOS 5 x86_64 freetype Update To: centos-announce(a)centos.org Message-ID: <20101116170139.GA10338(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2010:0889 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2010-0889.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: b8b5f883806ca4b5f7dfa235ff08c0db freetype-2.2.1-28.el5_5.1.i386.rpm af2cc3429b90bad95f9741c8b6325c20 freetype-2.2.1-28.el5_5.1.x86_64.rpm da89202293e76ac2cd7a8acf5351d5cd freetype-demos-2.2.1-28.el5_5.1.x86_64.rpm 264af5226d97e11be5a63493cde43d7f freetype-devel-2.2.1-28.el5_5.1.i386.rpm 0194f2799a458b56091d71b152690a14 freetype-devel-2.2.1-28.el5_5.1.x86_64.rpm Source: 3a19ad77ac022f78ca1adbdf39c19cb8 freetype-2.2.1-28.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Tue, 16 Nov 2010 17:22:58 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0886 CentOS 5 x86_64 dapl Update To: centos-announce(a)centos.org Message-ID: <20101116172258.GA10918(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0886 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0886.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 6c9194376f7b6214a3bfe4c4f83144f2 compat-dapl-2.0.25-2.el5_5.1.i386.rpm b1a8cdb6b67d65856ce1f40b87adef9e compat-dapl-2.0.25-2.el5_5.1.x86_64.rpm 8c1d29ce21de333532ef6037dfb8192c compat-dapl-devel-2.0.25-2.el5_5.1.i386.rpm abac44f8ecc27f5383a0e0e093036cd1 compat-dapl-devel-2.0.25-2.el5_5.1.x86_64.rpm d9d8a373b86063bc7655df2ff6528832 compat-dapl-static-2.0.25-2.el5_5.1.x86_64.rpm 02633b19bd109faa435ab5d1a713a303 compat-dapl-utils-2.0.25-2.el5_5.1.x86_64.rpm 7b6a9e4968ce8c4c90c10db1f3049f37 dapl-2.0.25-2.el5_5.1.i386.rpm cf9236700ad96d4ba39f46d957e0116f dapl-2.0.25-2.el5_5.1.x86_64.rpm b6fa6be1c87acfdd279b1a4c6bf5bbaa dapl-devel-2.0.25-2.el5_5.1.i386.rpm b4532efc9895b293debde6f5da3da45d dapl-devel-2.0.25-2.el5_5.1.x86_64.rpm 9c99d53c491753a8d196b50d9c5a78c2 dapl-static-2.0.25-2.el5_5.1.x86_64.rpm bd0a1ba2581d3d66ca008d375bcb1bfa dapl-utils-2.0.25-2.el5_5.1.x86_64.rpm Source: 16823592e6507fae5236bbea9987f126 dapl-2.0.25-2.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Tue, 16 Nov 2010 17:22:58 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0886 CentOS 5 i386 dapl Update To: centos-announce(a)centos.org Message-ID: <20101116172258.GA10903(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0886 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0886.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 1ebb1cfad1f49a8355d6eff2c814b9b1 compat-dapl-2.0.25-2.el5_5.1.i386.rpm 7af2a207e7087ee339bf1443631a6777 compat-dapl-devel-2.0.25-2.el5_5.1.i386.rpm 368c93205b90740d988633d062cfa957 compat-dapl-static-2.0.25-2.el5_5.1.i386.rpm 6d71142017d23213c2c64b2aa5386e7c compat-dapl-utils-2.0.25-2.el5_5.1.i386.rpm 56b46a7521f772a239402b5f2305bbaf dapl-2.0.25-2.el5_5.1.i386.rpm 55627e8a0bff3fccd9a66a629a203450 dapl-devel-2.0.25-2.el5_5.1.i386.rpm 2ab30b263bbed66f36a2e79242e28314 dapl-static-2.0.25-2.el5_5.1.i386.rpm fc40d3bbe3f0bccdd1ebc209acf19d6f dapl-utils-2.0.25-2.el5_5.1.i386.rpm Source: 16823592e6507fae5236bbea9987f126 dapl-2.0.25-2.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 7 Date: Tue, 16 Nov 2010 17:35:04 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0885 CentOS 5 x86_64 initscripts Update To: centos-announce(a)centos.org Message-ID: <20101116173504.GA11148(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0885 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0885.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: a6e10c44a7120332c44be6bc425a58a7 initscripts-8.45.30-3.el5.centos.x86_64.rpm Source: c0c7f8a646ebea4ce14dcfece3b4c543 initscripts-8.45.30-3.el5.centos.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 8 Date: Tue, 16 Nov 2010 17:35:03 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0885 CentOS 5 i386 initscripts Update To: centos-announce(a)centos.org Message-ID: <20101116173503.GA11133(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0885 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0885.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 42bffe6e6e6df6c324855ad921ff7951 initscripts-8.45.30-3.el5.centos.i386.rpm Source: c0c7f8a646ebea4ce14dcfece3b4c543 initscripts-8.45.30-3.el5.centos.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 9 Date: Wed, 17 Nov 2010 00:37:49 +0100 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2010:0889 Important CentOS 4 i386 freetype - security update To: centos-announce(a)centos.org Message-ID: <20101116233749.GA19660(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2010:0889 freetype security update for CentOS 4 i386: https://rhn.redhat.com/errata/RHSA-2010-0889.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/freetype-2.1.9-17.el4_8.1.i386.rpm updates/i386/RPMS/freetype-demos-2.1.9-17.el4_8.1.i386.rpm updates/i386/RPMS/freetype-devel-2.1.9-17.el4_8.1.i386.rpm updates/i386/RPMS/freetype-utils-2.1.9-17.el4_8.1.i386.rpm source: updates/SRPMS/freetype-2.1.9-17.el4_8.1.src.rpm You may update your CentOS-4 i386 installations by running the command: yum update freetype Tru -- Tru Huynh (mirrors, CentOS i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

yum update and iptables
by David McGuffey 17 Nov '10

17 Nov '10

I'm doing some testing in a lab which is isolated from the rest of my network (DMZ). I'm doing both inbound and outbound filtering at the firewall (CentOS +iptables). What protocols, ports and destination IP addresses does yum use to identify updates, and then actually go get them for installation? Looking at yum.conf and wireshark data, yum appears to go to a central site, look up the closest mirrors, then query the mirrors for the latest updates. Using wireshark it appears that http and tcp are used, but the addresses are all over the place (many mirrors). Is there a way to restrict the outbound traffic to a small number of mirrors? In other words, can I force yum to only check certain sites? If that is not so easy, I should be able to restrict the outbound traffic to a small set of addresses (yes/no?). DaveM

3 2

easy httpd's problem
by 49163653 17 Nov '10

17 Nov '10

your guys: I can't see the direcotry under / produced by mkdir command via Internat Explorer, except the any direcotry and file that exist after the CentOS installation complete. This is my directory 's detail information: drwxr-xr-x root www-data root:object_r:default_t CenterRepo and my httpd's configuration information: <VirtualHost *:80> ServerAdmin gitserver DocumentRoot / <Directory /> Options Indexes FollowSymLinks includes order allow,deny AllowOverride None allow from all </Directory> ServerName dummy-host.example.com ErrorLog logs/dummy-host.example.com-error_log CustomLog logs/dummy-host.example.com-access_log common </VirtualHost> I just make sure the the CenterRepo directory belong to the www-date group which run by httpd ,why can't I still access that directory? Thanks for your help! 2010-11-16 49163653

4 4

Memtest86+ running time
by Keith Roberts 16 Nov '10

16 Nov '10

I have run one full test and got no errors on the memory module. Is it worth keeping it running overnight, just to see if temperature changes will afect the test? Regards, Keith -- In theory, theory and practice are the same; in practice they are not. This email was sent from my laptop with Centos 5.5

9 18

Question about a hard drive error
by Gilbert Sebenste 16 Nov '10

16 Nov '10

Hey everyone, I just got one of these today: Nov 10 16:07:54 stormy kernel: sd 0:0:0:0: SCSI error: return code = 0x08000000 Nov 10 16:07:54 stormy kernel: sda: Current: sense key: Medium Error Nov 10 16:07:54 stormy kernel: Add. Sense: Unrecovered read error Nov 10 16:07:54 stormy kernel: Nov 10 16:07:54 stormy kernel: Info fld=0x0 Nov 10 16:07:54 stormy kernel: end_request: I/O error, dev sda, sector 3896150669 Nov 10 16:07:54 stormy kernel: Read-error on swap-device (253:1:743752) Nov 10 16:07:54 stormy kernel: Read-error on swap-device (253:1:743760) Nov 10 16:07:54 stormy kernel: Read-error on swap-device (253:1:743768) Nov 10 16:07:54 stormy kernel: Read-error on swap-device (253:1:743776) Nov 10 16:07:54 stormy kernel: Read-error on swap-device (253:1:743784) Nov 10 16:07:54 stormy kernel: Read-error on swap-device (253:1:743792) Nov 10 16:07:54 stormy kernel: Read-error on swap-device (253:1:743800) Nov 10 16:07:54 stormy kernel: Read-error on swap-device (253:1:743808) My question is this: I have RAID00 set up, but don't really understand it well. This is how my disks are set up: Filesystem 1K-blocks Used Available Use% Mounted on /dev/mapper/VolGroup00-LogVol00 1886608544 296733484 1492495120 17% / /dev/sda1 101086 19877 75990 21% /boot tmpfs 1684312 1204416 479896 72% /dev/shm Which one is having the trouble? Any ideas so I can swap it out? ******************************************************************************* Gilbert Sebenste ******** (My opinions only!) ****** Staff Meteorologist, Northern Illinois University **** E-mail: sebenste(a)weather.admin.niu.edu *** web: http://weather.admin.niu.edu ** *******************************************************************************

4 8

Still have problems with secure NFS and Kerberos
by Hans Persson 16 Nov '10

16 Nov '10

Both pc13267 and pc14113 run CentOS 5.5. On pc14113, my test user gets a home directory when logging in, but not on pc13267. But why? All logs below are from /var/log/messages. I have removed dates and stuff from the beginning of lines to make them more readable, and then grouped lines about the same thing from both machines. > pc13267 Using keytab file '/etc/krb5.keytab' > pc13267 INFO: Credentials in CC > 'MEMORY:/tmp/krb5cc_machine_IFM.LIU.SE' are good until > 1288959329 > pc14113 getting credentials for client with uid 2038 for server > triangulum.ifm.liu.se > pc14113 CC file 'krb5cc_2038_R3Gzcw' being considered > pc14113 CC file 'krb5cc_2038_R3Gzcw' matches owner check and has > mtime of 1288949932 For some reason, only the broken machine appears to look in /etc/krb5.keytab (or at least it's the only one admitting to doing it). /etc/krb5.conf looks the same on both machines. /etc/krb5.keytab has the same rights (root.root, 600) and size on both machines, and as far as I can tell no differences in content: > [root@pc13267 ~]# klist -k -e > Keytab name: FILE:/etc/krb5.keytab > KVNO Principal > ---- ----------------------------------------------------------------- > 20 host/pc13267.ad.ifm.liu.se(a)IFM.LIU.SE (DES cbc mode with RSA-MD5) > 6 nfs/pc13267.ad.ifm.liu.se(a)IFM.LIU.SE (DES cbc mode with CRC-32) > [root@pc14113 ~]# klist -k -e > Keytab name: FILE:/etc/krb5.keytab > KVNO Principal > ---- ----------------------------------------------------------------- > 3 nfs/pc14113.ad.ifm.liu.se(a)IFM.LIU.SE (DES cbc mode with CRC-32) > 3 host/pc14113.ad.ifm.liu.se(a)IFM.LIU.SE (DES cbc mode with RSA-MD5) There are no differences in /etc/pam.d/ between the machines (except that the working machine apart from the files it should have also has a system-auth-ac~, but I have a hard time imagining that to be significant). > pc13267 using MEMORY:/tmp/krb5cc_machine_IFM.LIU.SE as credentials > cache for machine creds > pc13267 using environment variable to select krb5 ccache > MEMORY:/tmp/krb5cc_machine_IFM.LIU.SE > pc14113 using FILE:/tmp/krb5cc_2038_R3Gzcw as credentials cache for > client with uid 2038 for server triangulum.ifm.liu.se > pc14113 using environment variable to select krb5 ccache > FILE:/tmp/krb5cc_2038_R3Gzcw The machine having problems save to memory, the working one to disk, and they use file names with a different structure. I suspect this to be relevant somehow, but I have no clue why they behave differently. > pc13267 creating context using fsuid 0 (save_uid 0) > pc13267 creating tcp client for server triangulum.ifm.liu.se > pc13267 creating context with server nfs(a)triangulum.ifm.liu.se > pc14113 creating context using fsuid 2038 (save_uid 0) > pc14113 creating tcp client for server triangulum.ifm.liu.se > pc14113 creating context with server nfs(a)triangulum.ifm.liu.se The machine that works gets the uid right while the other one for some reason gets it to 0. Definitely wrong, but why? > pc13267 rpcsec_gss: gss_init_sec_context: (major) Unspecified GSS > failure. Minor code may provide more information - (minor) > Unknown code krb5 60 > pc13267 WARNING: Failed to create krb5 context for user with uid 0 > for server triangulum.ifm.liu.se > pc13267 WARNING: Failed to create krb5 context for user with uid 0 > with credentials cache MEMORY:/tmp/krb5cc_machine_IFM.LIU.SE for > server triangulum.ifm.liu.se > pc13267 WARNING: Failed to create krb5 context for user with uid 0 > with any credentials cache for server triangulum.ifm.liu.se > pc14113 DEBUG: serialize_krb5_ctx: lucid version! > pc14113 prepare_krb5_rfc1964_buffer: serializing keys with enctype 4 > and length 8 After this, things break down (which doesn't really surprise me). The question is, I guess, why the broken machine starts using uid 0 to begin with. There is also a difference in what tickets the user gets on the different machines. > [testson2@pc13267 /]$ klist > Ticket cache: FILE:/tmp/krb5cc_2038_ch9xY3 > Default principal: testson2(a)IFM.LIU.SE > > Valid starting Expires Service principal > 11/05/10 10:34:46 11/06/10 10:34:46 krbtgt/IFM.LIU.SE(a)IFM.LIU.SE > > > Kerberos 4 ticket cache: /tmp/tkt2038 > klist: You have no tickets cached (non-working) > pc14113:/home/testson2> klist > Ticket cache: FILE:/tmp/krb5cc_2038_R3Gzcw > Default principal: testson2(a)IFM.LIU.SE > > Valid starting Expires Service principal > 11/05/10 10:38:52 11/06/10 10:38:52 krbtgt/IFM.LIU.SE(a)IFM.LIU.SE > 11/05/10 10:38:52 11/06/10 10:38:52 nfs/triangulum.ifm.liu.se(a)IFM.LIU.SE > > > Kerberos 4 ticket cache: /tmp/tkt2038 > klist: You have no tickets cached (working) Ideas? I'm all out of 'em. Hans

1 0

Disk operations very slow on Lenovo Thinkcentre
by Niki Kovacs 16 Nov '10

16 Nov '10

Hi, I'm currently trying to install CentOS 5.5 on a series of Lenovo Thinkcentre nettops. At first, the install CD boots OK without any options, but when it comes to formatting, the process can only be described as terribly slow... it took about half an hour to format the 160 GB disk. A few cups of coffee later, the system boots with the following messages on bootup (right at the beginning, when it says "Red Hat Nash starting...") : ****************** ... PCI: Cannot allocate resource region 7 of bridge 0000:00:1c.0 ... ata_piix 0000:00:1f.2: no available legacy port ... ****************** And here's the output of lspci : ****************** 00:00.0 Host bridge: Intel Corporation 82Q963/Q965 Memory Controller Hub (rev 02) 00:02.0 VGA compatible controller: Intel Corporation 82Q963/Q965 Integrated Graphics Controller (rev 02) 00:1a.0 USB Controller: Intel Corporation 82801H (ICH8 Family) USB UHCI Controller #4 (rev 02) 00:1a.7 USB Controller: Intel Corporation 82801H (ICH8 Family) USB2 EHCI Controller #2 (rev 02) 00:1b.0 Audio device: Intel Corporation 82801H (ICH8 Family) HD Audio Controller (rev 02) 00:1c.0 PCI bridge: Intel Corporation 82801H (ICH8 Family) PCI Express Port 1 (rev 02) 00:1c.4 PCI bridge: Intel Corporation 82801H (ICH8 Family) PCI Express Port 5 (rev 02) 00:1d.0 USB Controller: Intel Corporation 82801H (ICH8 Family) USB UHCI Controller #1 (rev 02) 00:1d.1 USB Controller: Intel Corporation 82801H (ICH8 Family) USB UHCI Controller #2 (rev 02) 00:1d.2 USB Controller: Intel Corporation 82801H (ICH8 Family) USB UHCI Controller #3 (rev 02) 00:1d.7 USB Controller: Intel Corporation 82801H (ICH8 Family) USB2 EHCI Controller #1 (rev 02) 00:1e.0 PCI bridge: Intel Corporation 82801 PCI Bridge (rev f2) 00:1f.0 ISA bridge: Intel Corporation 82801HB/HR (ICH8/R) LPC Interface Controller (rev 02) 00:1f.2 IDE interface: Intel Corporation 82801H (ICH8 Family) 4 port SATA IDE Controller (rev 02) 00:1f.3 SMBus: Intel Corporation 82801H (ICH8 Family) SMBus Controller (rev 02) 00:1f.5 IDE interface: Intel Corporation 82801H (ICH8 Family) 2 port SATA IDE Controller (rev 02) 03:00.0 Ethernet controller: Broadcom Corporation NetXtreme BCM5755 Gigabit Ethernet PCI Express (rev 02) ****************** I'm not very proficient about hardware drivers. Most of the things I know about them is the mix of information I gathered over the years when they didn't work as expected. My haphazard guess here would be that the disk is somehow treated as IDE, not as SATA, thus making the read/write operations much slower than theoretically possible (which would mean that somewhere in the boot process, the wrong driver for the disk is loaded). But then, it's only my guess. Unfortunately, I don't have the slightest idea if there's a possibility to correct this behaviour a) during install, through some magic boot option maybe, and b) during normal operation once the system is installed. Blacklist something and add something else, my vague intuition says. Before going for CentOS 5.5, I booted and installed Fedora 14 on that machine, which runs very fast (at least for my standards). Cheers, Niki Kovacs

2 2

Best way to configure proprietary NVidia driver on CentOS ?
by Nicolas Kovacs 15 Nov '10

15 Nov '10

Hi, What's the best (cleanest, easiest, whatever) way to install the proprietary NVidia driver on CentOS 5.5 ? Usually I'm using the RPMForge 3rd party repo and compile the odd missing package myself from a Fedora SRPM. But the nvidia packages look a bit like a mess. DKMS has errors in the startup script (looking for a nonexistent log_action_msg and the likes), so I wonder if it's best to just download the driver from nvidia.com and build it myself. Then I thought : I'd rather ask. Cheers, Niki -- http://www.kikinovak.net

8 12

hwclock problem
by Jobst Schmalenbach 15 Nov '10

15 Nov '10

Hi. I run peridocally (from cron) on all of my machines 30 * * * * root /sbin/hwclock --systohc All of those machines in question take their time via NTP from the same local server, and that server gets its time from a ntp pool. Now I had to reboot a couple of them two days ago and to my surprise all had problems with the time upon booting. Here are the important files: [root@XXXXXX ~] #>l /etc/adjtime 0.001687 1289518202 0.000000 1289518202 LOCAL [root@XXXXXXX ~] #>l /etc/sysconfig/clock ZONE="Australia/Melbourne" UTC=false ARC=false So from my understanding the hwclock should contain the local time. [root@XXXXXX ~] #>date Fri Nov 12 11:26:23 EST 2010 [root@XXXXXX ~] #>hwclock Fri 12 Nov 2010 11:26:42 EST -0.167976 seconds [root@XXXXXX ~] #> However on boot I get the following: Nov 10 19:08:37 XXXXXX syslogd 1.4.1: restart. Nov 10 19:08:37 XXXXXX kernel: klogd 1.4.1, log source = /proc/kmsg started. Nov 10 19:08:37 XXXXXX kernel: Linux version 2.6.18-164.11.1.el5 (mockbuild(a)builder10.centos.org) (gcc version 4.1.2 20080704 (Red Hat 4. 1.2-46)) #1 SMP Wed Jan 20 07:32:21 EST 2010 Nov 10 19:08:37 XXXXXX kernel: Command line: ro root=/dev/sda2 vga=791 Nov 10 19:08:37 XXXXXX kernel: BIOS-provided physical RAM map: ... ... Nov 10 19:08:51 XXXXXX kernel: IPv6 over IPv4 tunneling driver Nov 10 08:08:52 XXXXXX ntpdate[2464]: step time server 192.168.1.1 offset -39599.950905 sec Nov 10 08:08:52 XXXXXX xinetd[2447]: xinetd Version 2.3.14 started with libwrap loadavg labeled-networking options compiled in. and off course dovecot falls over too "Time just moved backwards by 39599 seconds." Now, 39600s is 11 hours, which is (inc DST) *MY* offset from Greenwich. So what am I doing wrong? The idea of running hwclock is to make sure that exactly the problem with dovecot does NOT occur, and ntp does not have a coughing fit when the hardware clock is not close to the correct time upon booting. The last time I booted some of those machine was more than 200 days ago, so the hwclock will be skewed if I do not update it. Jobst -- Keyboard not found - please clean up desktop! | |0| | Jobst Schmalenbach, jobst(a)barrett.com.au, General Manager | | |0| Barrett Consulting Group P/L & The Meditation Room P/L |0|0|0| +61 3 9532 7677, POBox 277, Caulfield South, 3162, Australia

9 10

Auto-Re: CentOS Digest, Vol 70, Issue 14
by 韦加宁 15 Nov '10

15 Nov '10

信已收到,谢谢!

2 1

Re: [CentOS] SSH keys question [RESOLVED]
by John Kennedy 15 Nov '10

15 Nov '10

On Mon, Nov 15, 2010 at 13:45, Paul Heinlein <heinlein(a)madboa.com> wrote: > On Mon, 15 Nov 2010, cliff here wrote: > > > You should check the perms on the dirs, ssh will not allow it use > > the keys if they are too permissive. So I would check starting at > > /home > > This is the most likely cause; I'd check there too. > > If not, > > 1. Ensure the file hash is the same (e.g., no extraneous whitespace > in the middle of the key) > 2. sshd is usually pretty good about writing errors to syslog. > > -- > Paul Heinlein <> heinlein(a)madboa.com <> http://www.madboa.com/ > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos > Found it... In /var/log/secure I got "Authentication refused: bad ownership or modes for directory /home/zema/.ssh" I had checked the file, not the directory... Thanks all... John -- John Kennedy

1 0

SSH keys question
by John Kennedy 15 Nov '10

15 Nov '10

All, I have 3 servers. All 3 are CentOS 5.5. All 3 have identical /etc/ssh/sshd_config files. I used ssh-keygen (with no arguments) to generate keys with no password. I then added all 3 id_rsa.pub keys to the authorized_keys file. With this set up, I should be able to ssh between all 3 boxes without needing a password. The problem is that one of the servers keeps asking for a password even with the keys set up. servera --> serverb No password serverb --> servera No password servera --> serverc Password serverc --> servera No password serverb --> serverc Password serverc --> serverb No password If they are all identical from an ssh standpoint (at least the authorized_keys, /etc/sshd_config, and UID for the user on all 3 hosts), why will serverc not play nicely with the other 2> Is there something else I should be checking? Thanks, John -- John Kennedy

3 3

can't find ldapseaerch
by bluethundr 15 Nov '10

15 Nov '10

hello list I'm having a very strange problem with my centos 5.5 system. For some strange reason, this machine cannot find ldapsearch: [root@VIRTCENT13 ~]# ldapsearch ldapsearch: Command not found. [root@VIRTCENT13 ~]# whereis ldapsearch ldapsearch: /usr/bin/ldapsearch /usr/share/man/man1/ldapsearch.1.gz ldapsearch currently lives at /usr/bin along with a lot of other really very useful tools. /usr/bin is also _clearly_ on my root path:i [root@VIRTCENT13 ~]# echo $PATH /usr/kerberos/sbin:/usr/kerberos/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/X11R6/bin And here are the permissions and modes for this tool: [root@VIRTCENT13 bin]# ls -l ldapsearch -rwxr-xr-x 1 root wheel 65336 Aug 11 09:20 ldapsearch And other things in this directory (like yum for example) work just fine: [root@VIRTCENT13 bin]# yum repolist Loaded plugins: fastestmirror, priorities Existing lock /var/run/yum.pid: another copy is running as pid 11750. Another app is currently holding the yum lock; waiting for it to exit... The other application is: yum-updatesd-he Memory : 65 M RSS (107 MB VSZ) Started: Sat Nov 13 18:04:22 2010 - 00:57 ago State : Running, pid: 11750 If you feed the command line the full path to ldapsearch it works as intended. I was wondering if anyone had any idea why ldapsearch isn't being found? thanks! -- Here's my RSA Public key: gpg --keyserver pgp.mit.edu --recv-keys 5A4873A9 Share and enjoy!!

4 3

ipvs and destination hashing...
by John Doe 15 Nov '10

15 Nov '10

Hi, just in case some ipvs knowledgable people read this... I tried to find some info on ipvs destination hashing on the net but did not find anything... Right now we have a basic direct routing round-robin keepalived configuration: abc.example.com (a.b.c.d) => LVS ( round-robin ) => server_[1..n] with IP[1..n]. If we use the dh option, on what would the hashing be done? I saw some pseudo code that states that the hash is based on the destination IPs in the packets... But there is only 1 IP in input and the output IPs are selected by round-robin already (so no point dhing them)... Do we have to have n IPs for abc.example.com (in the dns) and the hashing will be done on these IPs? Thx, JD

1 0

Auto-Re: CentOS Digest, Vol 70, Issue 15
by 韦加宁 15 Nov '10

15 Nov '10

信已收到,谢谢!

1 0

RPM/YUM on CentOS 5.4 issue - multiple versions of the same package installed
by Gabriel Tabares 15 Nov '10

15 Nov '10

Hi all, We currently have an issue with multiple versions of a custom package being installed. The RPM contains a liquibase script (a Java-based DB change management tool) and a %post script to run liquibase. We are installing with scripts that run "yum update liquibase-script". If the %post script runs correctly, it returns 0 and the application gets installed correctly but, if the %post script fails, it returns -1 and the application does get installed, but the old one does not get unistalled, so if I run "rpm -qa | grep liquibase-script" I get a list of all the versions that have been installed. I know that the files have been installed correctly, as the RPM contents have the same name but different content and I have checked it. Why is this happening? I thought that %post scripts failing do not prevent the application to installing and that RPM installation is atomic, so installing one package will remove the previous verison. Is there any way to prevent this issue? We're using CentOS 5.4 on x86_64 Thanks Gabriel

2 2

updating to gtk+ >= 2.0
by aurfalien＠gmail.com 15 Nov '10

15 Nov '10

Hi all, Any know the best way to up gtk+ on Centos 5.5 to something being at least 2.0 or greater? - aurf

6 8

xServes are dead ;-( / SAN Question
by Nicolas Ross 15 Nov '10

15 Nov '10

Hi ! As some of you might know, Apple has discontinued it's xServes server as of january 31st 2011. We have a server rack with 12 xserves ranging from dual G5's to dual quand-core xeon lastest generation, 3 xserve-raid and one activeraid 16 TB disk enclosure. We also use xSan to access a shared file system among the servers. Services are run from this shared filesystem, spreaded across the servers. Some LUNs on the fiber channel network are accessed directly and mounted on a case-by-case basis. Those raid volumes are partitioned with a GUID partition map, and apple_label type volumes. So they can be mounted by name with mount_hfs. We were on the verge on upgrading at least 6 of our server in a separate location (as a backup-site), with another SAN, same aplication etc. But this announce has come put a little delay. We do have several servers running CentOS (about 10 or so), on intel server platform. Now with this said, I am searching for documentation on operating a SAN under linux. We are looking at Quantum StorNext FS2 product for the SAN itselft. And I am searching info about accessing volumes on a fiber channel network by label. I know I can label individual ext3 partition, but how to do so on a raid array via fiber channel ? Basicly, I search for a linux starter guide to fiber channel storage. Thanks for any insight. Nicolas

18 40

Does "yum update tzdata" update /etc/localtime?
by Jobst Schmalenbach 15 Nov '10

15 Nov '10

Hi list. Does "yum update tzdata" update /etc/localtime or does this need to be done manually? [this is part of the hwclock problem, a guy from sage-au has given me a hint] Jobst -- Keyboard not found - please clean up desktop! | |0| | Jobst Schmalenbach, jobst(a)barrett.com.au, General Manager | | |0| Barrett Consulting Group P/L & The Meditation Room P/L |0|0|0| +61 3 9532 7677, POBox 277, Caulfield South, 3162, Australia

2 1

kernel bug ?
by My LinuxHAList 15 Nov '10

15 Nov '10

Hi, I was using kernel-2.6.18-164.15.1 with no known issues. Then, I updated to: Linux 2.6.18-194.17.1.el5 #1 SMP Wed Sep 29 12:50:31 EDT 2010 x86_64 x86_64 x86_64 GNU/Linux I'm aware that there are later updates that patch couple more security bugs. Here is an issue I run with 2.6.18-194.17.1 and am asking if anyone hits that kernel bug. Here are the symptoms: 1) kswapd1 running at 100%, there are not much paging 2) when i logged in, root can't kill -9 ANY processes 3) memory is used up, swap is probably only used up for couple hundred MBs at most (Swap space has couple Gig available) I saw in the logs: kernel: INFO: task sadc:23936 blocked for more than 120 seconds. kernel: "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. Annoyingly, I failed to reproduce the issues. I tried to reproduce it with the "stress" software package, using up CPU, memory, etc. But I failed to reproduce those. Reading later release of kernel did not mention this bug. If anyone can contribute to what is happening here, that would be great. Thanks

2 1

Confused about Java browser plugin for Firefox
by Nicolas Kovacs 15 Nov '10

15 Nov '10

Hi, I'd like to install a working Java Plugin for Firefox, and I wonder how to go about it. There's some documentation available online, but one quickly gets the feeling it's quite a mess. I also admit being a contributor to the mess, since the Linux book I published in June 2009 gives a detailed - and now obsolete - description about installing JRE : http://www.microlinux.fr/linux_aux_petits_oignons/chapitre_8/01.php#java Any advice on how to go about that without jumping through burning loops? A pointer to some concise documentation or, even better, a short and working step-by-step HOWTO? Cheers, Niki Kovacs -- http://www.kikinovak.net

7 9

External HD on CentOS 5.5
by Dick Roth 14 Nov '10

14 Nov '10

I'm looking into backing up my CentOS 5.5 system using an external USB 2.0 hard drive. Anyone with experience with Toshiba Canvio USB 750 GB unit? I'm backing up to DVDs now and would like to streamline the process. Any advice is welcome with thanks. Dick -- Yes indeed...the Hokey Pokey *is* what its all about!

2 2

RAID Resynch...??
by Tom Bishop 14 Nov '10

14 Nov '10

So still coming up to speed with mdadm and I notice this morning one of my servers acting sluggish...so when I looked at the mdadm raid device I see this: mdadm --detail /dev/md0 /dev/md0: Version : 0.90 Creation Time : Mon Sep 27 22:47:44 2010 Raid Level : raid10 Array Size : 976759808 (931.51 GiB 1000.20 GB) Used Dev Size : 976759808 (931.51 GiB 1000.20 GB) Raid Devices : 2 Total Devices : 2 Preferred Minor : 0 Persistence : Superblock is persistent Update Time : Sun Nov 14 11:33:51 2010 State : clean, resyncing Active Devices : 2 Working Devices : 2 Failed Devices : 0 Spare Devices : 0 Layout : far=2 Chunk Size : 512K Rebuild Status : 57% complete UUID : f045370a:5be687e9:73e57992:06ea59e5 Events : 0.8 Number Major Minor RaidDevice State 0 8 17 0 active sync /dev/sdb1 1 8 33 1 active sync /dev/sdc1 If done some googling but I am stumped as to what would have kicked this off, anyone have any insight that would be great...The system has been up for ~34 days and it kicked off at 4am local time...Here are some of my system details... Centos 5.5 - 2.6.18-194.11.4.el5 fstab: LABEL=/ / ext3 defaults 1 1 LABEL=/boot /boot ext3 defaults 1 2 /dev/md0 /home ext4 noatime,defaults 0 2 /dev/md0 /mnt/data-raid ext4 noatime,defaults 0 2 tmpfs /dev/shm tmpfs defaults 0 0 devpts /dev/pts devpts gid=5,mode=620 0 0 sysfs /sys sysfs defaults 0 0 proc /proc proc defaults 0 0 LABEL=SWAP-sda2 swap swap defaults 0 0 Thanks in advance....

2 3

Best practices for the maximal length of user names
by Mathieu Baudier 14 Nov '10

14 Nov '10

Hello, are there any best practices for the length of user names? I tend to limit them to 8 characters and to follow the pattern 'first letter of the first name'+'first 7 letters of the last name' (e.g. mbaudier). But people are sometimes frustrated with having their last name truncated and I wonder if limiting the user name to 8 characters is not a kind of superstition coming from some old times... I would be very interested to hear opinions / experience about this. (I'm using CentOS 5.5) Thanks in advance! Mathieu

4 3

Addressing outgoing connections to a specific interface
by Dotan Cohen 14 Nov '10

14 Nov '10

On a CentOS 5.5 laptop (Dell Inspiron, dual boot with a Debian-based distro) I have a cable plugged into eth0 which is on a LAN with no internet connection. Additionally, I connect wirelessly on wlan0 to the internet. Both connections have router on the 192.168.0.1 address. Although I need to stay connected to the wireless router, can I still access the address 192.168.0.1 on the wired interface? Some googling led me to the keyword "loopback" but I am at a loss as how to configure it, or if this is even the right idea. If there is a specific page that I should be reading in the fine manual then please do RTFM me, as I myself failed to find the proper page. Thanks in advance. -- Dotan Cohen http://gibberish.co.il http://what-is-what.com

11 30

Oracle charging for InnoDB support in MySQL : what is going to change for us?
by robert mena 14 Nov '10

14 Nov '10

Hi, I've noticed that Oracle is charging for the MySQL version that supports InnoDB (http://www.mysql.com/products/) I could not find any other link with direct confirmation of what is going to change for the existing servers/versions and I was wondering if anybody has a more detailed info. For example, is RHEL (and CentOS) going to drop support for it? Are we going to see any further updates for security issues?

5 4

make fails with "recompile with -fPIC"
by aurfalien＠gmail.com 14 Nov '10

14 Nov '10

Hi all, I am trying to get monodevelop installed on Centos 5.5 In order to do so, I must install several packages, all of which give me the following error when doing a make; /usr/bin/ld: .libs/image.o: relocation R_X86_64_PC32 against `gdip_getcodecinfo_gif' can not be used when making a shared object; recompile with -fPIC /usr/bin/ld: final link failed: Bad value How and where do I add this value of -fPIC? Better yet, has any one done this before? Keep in mind this is diff then mono-devel. Thanks in advance, - aurf

2 2

Flash plugin not working
by Niki Kovacs 13 Nov '10

13 Nov '10

Hi, I have a fresh install of CentOS 5.5, with a minimal GNOME desktop. I configured RPMForge as third party repo. I updated everything first, then installed flash-plugin. (And yes, I restarted Firefox... :oD). All I see when I try to see some things Flash on the Internet, like Youtube or the likes, I get... nothing. The space remains white. Sometimes a black square will appear, sometimes it will redisappear again. $ rpm -q flash-plugin flash-plugin-10.1.82.76-0.1.el5.rf I also tried to give the more recent version from Adobe a shot, with the same result. I took a look in /usr/lib/mozilla/plugins, where everything seems normal. $ ls -l /usr/lib/mozilla/plugins/ total 0 lrwxrwxrwx 1 root root 39 nov 8 22:22 libflashplayer.so -> /usr/lib/flash-plugin/libflashplayer.so Which leaves me clueless. Any suggestions ? Cheers, Niki

7 15

httpd RPM newer than 2.0.63 avail for CentOS 4.x?
by Philip Amadeo Saeli 12 Nov '10

12 Nov '10

I'm maintaining an internet-facing web server which is now running httpd 2.0.63 (httpd-2.0.63-2.el4s1.centos.2) which is now neary 2.5 years old(!?!). I need to move to either 2.0.64 or 2.2.12 or later. However, I've been unable to find available RPMs for such releases for CentOS 4.x. I have to believe that others have these needs also. In light of this, how do others keep up with security upgrades for the httpd? I'm rather new to this aspect of things, so am still in the process of sorting things out in this regard. Any help would be appreciated. Thanks! --Phil -- Philip Amadeo Saeli CentOS, RHEL, openSUSE psaeli(a)zorodyne.com

5 7

Redhat Virtualization
by Nataraj 12 Nov '10

12 Nov '10

What are the differences between the Redhat virtualization product and the kvm virtualization that is currently included with Redhat/CentOS? If I don't want to run the standalone hypervisor or the windows based management interface (Is this worth considering?), are there any advantages to the virtualization product over running kvm on CentOS? It is my understanding that the windows management will at some point run under linux. Other than the current kvm, will the Redhat virtualization product be part of CentOS in any way? Thank You, Nataraj

2 1

conntrack-tools
by Steve Clark 12 Nov '10

12 Nov '10

Hi, I have been looking for a conntrack-tools rpm for Centos 5.5. Does anyone know of one? Thanks, -- Stephen Clark *NetWolves* Sr. Software Engineer III Phone: 813-579-3200 Fax: 813-882-0209 Email: steve.clark(a)netwolves.com http://www.netwolves.com

1 0

Gnome-Screensaver Problem
by Chi-Duen Poon 12 Nov '10

12 Nov '10

Around last weekend, the updated package, gnome-screensaver-2.16.1-8.el5_5.1, came in replacing gnome-screensaver-2.16.1-8.el5. Once our CentOS 5.5 machines are running the new gnome-screensaver, we start seeing problem in unlocking the Gnome screensaver with Kerberos authentication. Unlocking the screensaver with local password works fine. After we back out from the new version, Kerberos authentication to unlock the screensaver works fine. We have submitted a bug report on this finding. Do you have any workaround besides backing out from the new version? CD Poon.

1 0

RHEL 6 Officially Released
by John Kennedy 12 Nov '10

12 Nov '10

When will CentOS 6 be released??? (Just kidding...Just wanted to let you all know that RHEL6 has been released...And yes, I know that most of you all know...) John -- John Kennedy

29 52

CentOS-announce Digest, Vol 69, Issue 6
by centos-announce-request＠centos.org 12 Nov '10

12 Nov '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2010:0880 CentOS 5 x86_64 mod_authz_ldap Update (Karanbir Singh) 2. CEBA-2010:0880 CentOS 5 i386 mod_authz_ldap Update (Karanbir Singh) 3. CEEA-2010:0876 CentOS 5 i386 cman Update (Karanbir Singh) 4. CEEA-2010:0876 CentOS 5 x86_64 cman Update (Karanbir Singh) 5. CEBA-2010:0871 CentOS 5 i386 python Update (Karanbir Singh) 6. CEBA-2010:0871 CentOS 5 x86_64 python Update (Karanbir Singh) 7. CEBA-2010:0869 CentOS 5 i386 tog-pegasus Update (Karanbir Singh) 8. CEBA-2010:0869 CentOS 5 x86_64 tog-pegasus Update (Karanbir Singh) 9. CEBA-2010:0868 CentOS 5 i386 e2fsprogs Update (Karanbir Singh) 10. CEBA-2010:0868 CentOS 5 x86_64 e2fsprogs Update (Karanbir Singh) 11. CEBA-2010:0833 CentOS 5 i386 autofs Update (Karanbir Singh) 12. CEBA-2010:0833 CentOS 5 x86_64 autofs Update (Karanbir Singh) 13. CEBA-2010:0832 CentOS 5 i386 selinux-policy Update (Karanbir Singh) 14. CEBA-2010:0832 CentOS 5 x86_64 selinux-policy Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 12 Nov 2010 00:20:27 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0880 CentOS 5 x86_64 mod_authz_ldap Update To: centos-announce(a)centos.org Message-ID: <20101112002027.GA12369(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0880 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0880.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 42db2383be48a1641382365621dfe685 mod_authz_ldap-0.26-9.el5_5.1.x86_64.rpm Source: cb5cc9b72f29b3271394d3af0b83faf3 mod_authz_ldap-0.26-9.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Fri, 12 Nov 2010 00:20:26 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0880 CentOS 5 i386 mod_authz_ldap Update To: centos-announce(a)centos.org Message-ID: <20101112002026.GA12354(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0880 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0880.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 9e4f41b6e56160b97aafeb0c93205fd7 mod_authz_ldap-0.26-9.el5_5.1.i386.rpm Source: cb5cc9b72f29b3271394d3af0b83faf3 mod_authz_ldap-0.26-9.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Fri, 12 Nov 2010 00:21:11 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEEA-2010:0876 CentOS 5 i386 cman Update To: centos-announce(a)centos.org Message-ID: <20101112002111.GA12465(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2010:0876 Upstream details at : https://rhn.redhat.com/errata/RHEA-2010-0876.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: edfea91a42ac32d995caf68d14d89f01 cman-2.0.115-34.el5_5.4.i386.rpm 22103177e6e2400f241f6696cae1a978 cman-devel-2.0.115-34.el5_5.4.i386.rpm Source: 491bb3d3c129bc38d95ca3872cc50982 cman-2.0.115-34.el5_5.4.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Fri, 12 Nov 2010 00:21:11 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEEA-2010:0876 CentOS 5 x86_64 cman Update To: centos-announce(a)centos.org Message-ID: <20101112002111.GA12478(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2010:0876 Upstream details at : https://rhn.redhat.com/errata/RHEA-2010-0876.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 75910fc915609dc8b0c939f5adea8c7e cman-2.0.115-34.el5_5.4.x86_64.rpm 5b072200d3e266b3e6ce443856bbb852 cman-devel-2.0.115-34.el5_5.4.i386.rpm ee13bdfc2aa8b0e5922f098b11458275 cman-devel-2.0.115-34.el5_5.4.x86_64.rpm Source: 491bb3d3c129bc38d95ca3872cc50982 cman-2.0.115-34.el5_5.4.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Fri, 12 Nov 2010 00:22:18 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0871 CentOS 5 i386 python Update To: centos-announce(a)centos.org Message-ID: <20101112002218.GA12578(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0871 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0871.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: c76cdba5e527547b9923fd182cafd581 python-2.4.3-27.el5_5.3.i386.rpm e82e2502ea0acab992fe2a8d66f09b2a python-devel-2.4.3-27.el5_5.3.i386.rpm be20281fe1c00c5ce2655ba685c97033 python-tools-2.4.3-27.el5_5.3.i386.rpm fed33376ca58d5e3317b516f69fa8db9 tkinter-2.4.3-27.el5_5.3.i386.rpm Source: 4066452a673e3475e9ef95efdab92bb7 python-2.4.3-27.el5_5.3.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Fri, 12 Nov 2010 00:22:18 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0871 CentOS 5 x86_64 python Update To: centos-announce(a)centos.org Message-ID: <20101112002218.GA12592(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0871 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0871.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 0661b58d35cff838823e6c6ef57ef379 python-2.4.3-27.el5_5.3.x86_64.rpm 5dfa3aa050b8c52b8037cde4d8d12ff5 python-devel-2.4.3-27.el5_5.3.i386.rpm f2997eedf0baebe346c42bd3e665e513 python-devel-2.4.3-27.el5_5.3.x86_64.rpm e4b0539a0b50ac649346faacc26b3610 python-tools-2.4.3-27.el5_5.3.x86_64.rpm 008f6998fd60c807ec344a4bbd580756 tkinter-2.4.3-27.el5_5.3.x86_64.rpm Source: 4066452a673e3475e9ef95efdab92bb7 python-2.4.3-27.el5_5.3.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 7 Date: Fri, 12 Nov 2010 00:23:29 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0869 CentOS 5 i386 tog-pegasus Update To: centos-announce(a)centos.org Message-ID: <20101112002329.GA12689(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0869 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0869.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: b25f676511ec584eb376ac64203efdc0 tog-pegasus-2.9.1-2.el5_5.1.i386.rpm bfdffe1a264c55ccb21289983e7bcc0b tog-pegasus-devel-2.9.1-2.el5_5.1.i386.rpm Source: f394e0a573c3e62dba709f85db73eea2 tog-pegasus-2.9.1-2.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 8 Date: Fri, 12 Nov 2010 00:23:30 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0869 CentOS 5 x86_64 tog-pegasus Update To: centos-announce(a)centos.org Message-ID: <20101112002330.GA12702(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0869 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0869.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 672f0f4df18d9fc5f98d5f19c482b04f tog-pegasus-2.9.1-2.el5_5.1.i386.rpm 8c2de74d394d70b99c794650640c8774 tog-pegasus-2.9.1-2.el5_5.1.x86_64.rpm 5d1a749de278436f49be2deec8f4a4e4 tog-pegasus-devel-2.9.1-2.el5_5.1.i386.rpm 767420cfdd1ff4e3954555db5e2014ec tog-pegasus-devel-2.9.1-2.el5_5.1.x86_64.rpm Source: f394e0a573c3e62dba709f85db73eea2 tog-pegasus-2.9.1-2.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 9 Date: Fri, 12 Nov 2010 00:24:13 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0868 CentOS 5 i386 e2fsprogs Update To: centos-announce(a)centos.org Message-ID: <20101112002413.GA12807(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0868 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0868.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: a477a70b06fd236162771f78187e3dac e2fsprogs-1.39-23.el5_5.1.i386.rpm dfce9fe20220afca74b5c278668bc07a e2fsprogs-devel-1.39-23.el5_5.1.i386.rpm 66857f3ea704d06c059fe6b98f46d81c e2fsprogs-libs-1.39-23.el5_5.1.i386.rpm a951709c523462d965563bd88dbfeb5d uuidd-1.39-23.el5_5.1.i386.rpm Source: a711a0cb837672eb9cb784b35b5591ba e2fsprogs-1.39-23.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 10 Date: Fri, 12 Nov 2010 00:24:13 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0868 CentOS 5 x86_64 e2fsprogs Update To: centos-announce(a)centos.org Message-ID: <20101112002413.GA12820(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0868 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0868.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 24646daefeadb4d062694da4309dc797 e2fsprogs-1.39-23.el5_5.1.x86_64.rpm cd50d249a778c3098b2d44edebf2d40b e2fsprogs-devel-1.39-23.el5_5.1.i386.rpm 6e36db7a97015bba23e2034e9ed6ce4e e2fsprogs-devel-1.39-23.el5_5.1.x86_64.rpm c999210eae1aa0d536b29c7378607d6d e2fsprogs-libs-1.39-23.el5_5.1.i386.rpm 8473c5004b92c32a8276b9c34cde4db2 e2fsprogs-libs-1.39-23.el5_5.1.x86_64.rpm a0173fc59230b128fa587e2f9981311c uuidd-1.39-23.el5_5.1.x86_64.rpm Source: a711a0cb837672eb9cb784b35b5591ba e2fsprogs-1.39-23.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 11 Date: Fri, 12 Nov 2010 00:24:45 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0833 CentOS 5 i386 autofs Update To: centos-announce(a)centos.org Message-ID: <20101112002445.GA12893(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0833 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0833.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: ea962af72e3e055c1526ad115c9dfabd autofs-5.0.1-0.rc2.143.el5_5.6.i386.rpm Source: 8955138b030c20366aedd2e7586f39c3 autofs-5.0.1-0.rc2.143.el5_5.6.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 12 Date: Fri, 12 Nov 2010 00:24:46 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0833 CentOS 5 x86_64 autofs Update To: centos-announce(a)centos.org Message-ID: <20101112002446.GA12906(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0833 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0833.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: fc0615a882733719117342c371633e5a autofs-5.0.1-0.rc2.143.el5_5.6.x86_64.rpm Source: 8955138b030c20366aedd2e7586f39c3 autofs-5.0.1-0.rc2.143.el5_5.6.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 13 Date: Fri, 12 Nov 2010 00:25:52 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0832 CentOS 5 i386 selinux-policy Update To: centos-announce(a)centos.org Message-ID: <20101112002552.GA13028(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0832 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0832.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 7edd19f7ac2572c54e4bd16f53d2e72b selinux-policy-2.4.6-279.el5_5.2.noarch.rpm 9e7ae71e9e2ba91314e7c164ffd76ac8 selinux-policy-devel-2.4.6-279.el5_5.2.noarch.rpm 8f0b9668eb7733518c874831c76d46c2 selinux-policy-minimum-2.4.6-279.el5_5.2.noarch.rpm 2a263b4ac37f2929ecf6ecfbebde6285 selinux-policy-mls-2.4.6-279.el5_5.2.noarch.rpm 4bd6bb1eefdd59fdef846b46472e3f90 selinux-policy-strict-2.4.6-279.el5_5.2.noarch.rpm 0dcd7a7640acb2668647676eb037a829 selinux-policy-targeted-2.4.6-279.el5_5.2.noarch.rpm Source: ff6fedf3fd6e9ec4ebc96663621edfc2 selinux-policy-2.4.6-279.el5_5.2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 14 Date: Fri, 12 Nov 2010 00:25:52 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0832 CentOS 5 x86_64 selinux-policy Update To: centos-announce(a)centos.org Message-ID: <20101112002552.GA13044(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0832 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0832.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 5b5df1a65007df30315a1f571547c38a selinux-policy-2.4.6-279.el5_5.2.noarch.rpm f0661bfb03b44cf3af2d460afe4c8579 selinux-policy-devel-2.4.6-279.el5_5.2.noarch.rpm 95269368ca64c0ae81ba349171c020ad selinux-policy-minimum-2.4.6-279.el5_5.2.noarch.rpm c78dfbecc342233abf9ac24a83675b1f selinux-policy-mls-2.4.6-279.el5_5.2.noarch.rpm 8a1b6714052029fca221b2d3052aee35 selinux-policy-strict-2.4.6-279.el5_5.2.noarch.rpm 63e56b68678484b38ddb82f716ba7401 selinux-policy-targeted-2.4.6-279.el5_5.2.noarch.rpm Source: ff6fedf3fd6e9ec4ebc96663621edfc2 selinux-policy-2.4.6-279.el5_5.2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 69, Issue 6 **********************************************

1 0

Flash problems in newest upgrade?
by Ron Blizzard 12 Nov '10

12 Nov '10

Hi, I just upgraded to the newest kernel and Flash. Hulu now "grays out" when I try to go to full screen. I tried uninstalling and reinstalling the proprietary video drivers (no difference either way), so I'm guessing it has something to do with either the new Flash or the new kernel. Anyone else experiencing this problem? Thanks for any pointers. -- RonB -- Using CentOS 5.5

2 2

http form automation tools?
by Les Mikesell 11 Nov '10

11 Nov '10

I need to grab some data from a remote web server that offers a csv download but only after viewing a chart where you have to first navigate to a form and make some selections. Are there any good tools for automating this kind of access? (What I'm really after are bandwidth stats from some routers where I only have read access to a CA/ehealth system that monitors it). Previously the intermediate system was cacti where the link to the data download for a time interval can be computed directly. -- Les Mikesell lesmikesell(a)gmail.com

2 2

Adding SAMBA users in Centos 5.5
by Peter Crighton 11 Nov '10

11 Nov '10

I have SAMBA working on Centos 5.5 - I can see and access my "home" directory from a Windows machine. I have created a new folder to share, changed the owner and group to my username and chcon -t samba_share_t to allow SELinux to share the folder. I can see this folder from Windows but not access it's contents. I think that the key reason is that there is no user assigned to the new share that I have created in SAMBA. I don't seem to be able add users/passwords (at least they don't stay present! In the SAMBA section of Control Panel I have selected my username from the Unix users and added it to SAMBA users with the same password as the Windows machine (and as it happens the Centos machine). Click Apply and OK. When I re-load the SAMBA section of Control Panel my user has disappeared! This didn't happen when I setup a Centos 4.4 machine - all the users are still visible in Control Panel. Without the user available I can't assign it to my new share. Why is my added user disappearing and how can I solve it? (I presume that I can access my "home" share as it is automatically by the username from Windows).

2 3

quota broken for large NFS mount
by Dave 11 Nov '10

11 Nov '10

Should I report this as a bug somewhere? Or is it just a problem with the old fedora box, probably fixed long ago and not relevant to the centos list? On the server side, theme4, a very old fedora box, exports t4d5 via NFS. t4d5 is big, has lots of space, and the user tobiasf has plenty of quota: [root@theme4 ~]# quota -vls tobiasf|grep sdf /dev/sdf1 1312G 4578G 4769G 119k 0 0 [root@theme4 ~]# rpm -q quota nfs-utils;df -lh|grep sdf;uname -a quota-3.12-6 nfs-utils-1.0.7-13.FC4 /dev/sdf1 13T 11T 2.2T 84% /export/t4d5 Linux theme4.soest.hawaii.edu 2.6.17-1.2142_FC4smp #1 SMP Tue Jul 11 22:59:20 EDT 2006 x86_64 x86_64 x86_64 GNU/Linux On the client side, running centos, mounting the NFS partition with automount, quota looks exhausted: [tobiasf@lee1 ~]$ quota -vs Disk quotas for user tobiasf (uid 2797): Filesystem blocks quota limit grace files quota limit grace theme4:/export/t4d5 1312G* 482G 673G 119k 0 0 [tobiasf@lee1 ~]$ uname -a;cat /etc/redhat-release ;df -h|grep t4d5 Linux lee1 2.6.18-194.8.1.el5 #1 SMP Thu Jul 1 19:04:48 EDT 2010 x86_64 x86_64 x86_64 GNU/Linux CentOS release 5.5 (Final) theme4:/export/t4d5 13T 11T 2.2T 84% /home/t4d5 [tobiasf@lee1 ~]$ rpm -q nfs-utils quota nfs-utils-1.0.9-44.el5 quota-3.13-1.2.5.el5 Thanks, Dave

1 2

future modprobe.conf
by Jerry Geis 11 Nov '10

11 Nov '10

centos 5 had modprobe.conf entries for eth0 and if present eth1. something like: alias eth0 forcedeth alias eth1 e1000e For the new centos 6 (I have the rhel 6 client installed on my laptop) the modprobe.conf file is gone. Which is fine. I understand files can be created in /etc/modprobe.d and server the same purpose. My question is I dont see (doing a grep) any eth0 alias's in the files in /etc/modprobe.d/* My reason is when I have a system with 2 ethernet cards I used to have to specify the order of loading. Like: install e1000e /sbin/modprobe forcedeth; /sbin/modprobe --ignore-install e1000e So I used to grep for eth0 and eth1 do get the module names from modprobe.conf. How do I get that information in RHEL 6 since it doesnt seem to be there. Thanks, (just trying to prepare) Jerry

5 4

gmp package installation on CentOS 5.2
by Nastou Panagiotis 11 Nov '10

11 Nov '10

Hello, Last year, I installed CentOS 5.2 on an HP Proliant Server. Along with other packages, the gmp and gmp-devel version 4.1.4 packages were installed. To the best of my knowledge these packages do not come from the gmp team. Recently, I built an rpm package for gmp 5.0.1 for CentOS 5.2. I tried to update the gmp package by command rpm -Uvh gmp-5.0.1-1.x86_64.rpm but the update failed because the libgmp.so.3, libgmpxx.so.3 and the libmp.so.3 are needed from gcc-gfortran, php, php-cli, guile and gmp-devel packages. What kind of dependency exists between these packages and gmp? Could I forced the update without affecting the operation of the above packages? Since It is better to compile gmp 5.0.1 with the more recent gnu c compiler, is it safe to update gcc, gcc-gfortran and gcc-c++ on CentOS 5.2 to the more recent version appeared for CentOS 5.5? Regards, Panagiotis Nastou, Dpt of Mathematics University of Aegean Karlovasi, Samos, Greece

2 1

FW: Permissions issue
by Jason Pyeron 11 Nov '10

11 Nov '10

I am at loss on this mysterious file permission issue. I cannot move the file out of the directory, but I can rename it. I cannot read the file. It is not open by any processes, the filesystem is in read write mode. I am logged in as root. -Jason [root@localhost /]# tar cvzf ~/named.201011111228.tgz --one-file-system /etc/named.conf /var/named/ tar: Removing leading `/' from member names /etc/named.conf /var/named/ /var/named/data/ /var/named/lost+found/ /var/named/slaves/ tar: /var/named/backup.tgz: Cannot open: Permission denied /var/named/chroot/ /var/named/chroot/etc/ /var/named/chroot/etc/named.caching-nameserver.conf <snip/> tar: Error exit delayed from previous errors [root@localhost /]# dir /var/named/backup.tgz -rw------- 1 root root 6651 Nov 11 11:32 /var/named/backup.tgz [root@localhost /]# stat /var/named/backup.tgz File: `/var/named/backup.tgz' Size: 6651 Blocks: 24 IO Block: 4096 regular file Device: fd04h/64772d Inode: 98312 Links: 1 Access: (0600/-rw-------) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2010-11-11 12:28:33.000000000 -0500 Modify: 2010-11-11 11:32:03.000000000 -0500 Change: 2010-11-11 11:32:03.000000000 -0500 [root@localhost /]# mv /var/named/backup.tgz ~ mv: cannot open `/var/named/backup.tgz' for reading: Permission denied [root@localhost /]# chmod 777 /var/named/backup.tgz [root@localhost /]# mv /var/named/backup.tgz ~ mv: cannot open `/var/named/backup.tgz' for reading: Permission denied [root@localhost /]# getfacl /var/named/backup.tgz getfacl: Removing leading '/' from absolute path names # file: var/named/backup.tgz # owner: root # group: root user::rwx group::rwx other::rwx [root@localhost /]# dir /var/named/backup.tgz -rwxrwxrwx 1 root root 6651 Nov 11 11:32 /var/named/backup.tgz [root@localhost /]# setfacl -b /var/named/backup.tgz [root@localhost /]# dir /var/named/backup.tgz -rwxrwxrwx 1 root root 6651 Nov 11 11:32 /var/named/backup.tgz [root@localhost /]# getfacl /var/named/backup.tgz getfacl: Removing leading '/' from absolute path names # file: var/named/backup.tgz # owner: root # group: root user::rwx group::rwx other::rwx [root@localhost /]# mv /var/named/backup.tgz ~ mv: cannot open `/var/named/backup.tgz' for reading: Permission denied [root@localhost /]# mount <redact> No readonly mounts </redact> [root@localhost /]# df -h <redact> Each filessytem has plenty of free space </redact> [root@localhost /]# dir /var/named/ total 72 drwxr-x--- 6 root named 4096 Nov 11 11:32 . drwxr-xr-x 24 root root 4096 Apr 1 2010 .. -rwxrwxrwx 1 root root 6651 Nov 11 11:32 backup.tgz drwxr-x--- 6 root named 4096 Nov 11 11:48 chroot drwxrwx--- 2 named named 4096 Jan 18 2010 data drwx------ 2 root named 16384 Feb 4 2009 lost+found drwxrwx--- 2 named named 4096 Jan 18 2010 slaves [root@localhost named]# /etc/init.d/named stop Stopping named: . [ OK ] [root@localhost named]# mv backup.tgz foo [root@localhost named]# mv foo backup.tgz [root@localhost named]# mv backup.tgz ~ mv: cannot open `backup.tgz' for reading: Permission denied [root@localhost named]# lsof | grep backup.tgz [root@localhost named]# -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Principal Consultant 10 West 24th Street #100 - - +1 (443) 269-1555 x333 Baltimore, Maryland 21218 - - - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- This message is copyright PD Inc, subject to license 20080407P00.

3 5

dictonary attacks
by PA 11 Nov '10

11 Nov '10

Hi hoping someone can help me a little with this one. I have 2 mail servers, the incoming mail server runs dovecot and the outgoing mail server runs postfix with sasl. Lately I noticed a lot of spammers are running dictionary attacks on my incoming server and then using that user/password for sasl on the outgoing server. The weird thing is I never see on the logs the guessed username/password. I always see the ones they can't guess. For example: Looking at the logs I see the following dictionary attack from 94.242.206.37 Nov 10 03:04:38 pop dovecot: pop3-login: Disconnected: rip=94.242.206.37, lip=209.213.66.10 Nov 10 03:04:38 pop dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=209.213.66.10 rip=94.242.206.37 resp=<hidden> Nov 10 03:04:38 pop dovecot: auth(default): shadow(aarhus,94.242.206.37): lookup Nov 10 03:04:38 pop dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=209.213.66.10 rip=94.242.206.37 resp=<hidden> Nov 10 03:04:38 pop dovecot: auth(default): shadow(abaft,94.242.206.37): lookup Nov 10 03:04:38 pop dovecot: auth(default): shadow(abaft,94.242.206.37): unknown user Nov 10 03:04:38 pop dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=209.213.66.10 rip=94.242.206.37 resp=<hidden> Nov 10 03:04:38 pop dovecot: auth(default): shadow(aarhus,94.242.206.37): unknown user Nov 10 03:04:38 pop dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=209.213.66.10 rip=94.242.206.37 resp=<hidden> Nov 10 03:04:38 pop dovecot: auth(default): shadow(aaron,94.242.206.37): lookup Nov 10 03:04:38 pop dovecot: auth(default): shadow(aaron,94.242.206.37): unknown user Nov 10 03:04:38 pop dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=209.213.66.10 rip=94.242.206.37 resp=<hidden> Nov 10 03:04:38 pop dovecot: auth(default): shadow(ababa,94.242.206.37): lookup ..... And so on.. Then that ip gets banned by fail2ban [root@pop ~]# grep 94.242.206.37 /var/log/fail2ban.log 2010-11-10 03:04:42,416 fail2ban.actions: WARNING [dovecot] Ban 94.242.206.37 However on my outgoing mail server that ip is already sending out all sorts of spam with the sasl username of Paramus. This username Paramus never shows up on the dovecot dictionary attack log, as a matter of fact the user Paramus is nowhere to be found on the dovecot log at all and I have logs going back months. /var/log/maillog:Nov 10 02:46:16 mrelay3 postfix/smtpd[27776]: 3B64928015: client=unknown[94.242.206.37], sasl_method=LOGIN, sasl_username=paramus /var/log/maillog:Nov 10 02:47:54 mrelay3 postfix/smtpd[27776]: 247AB28016: client=unknown[94.242.206.37], sasl_method=LOGIN, sasl_username=paramus /var/log/maillog:Nov 10 02:48:00 mrelay3 postfix/smtpd[27785]: 87DE128016: client=unknown[94.242.206.37], sasl_method=LOGIN, sasl_username=paramus /var/log/maillog:Nov 10 02:56:00 mrelay3 postfix/smtpd[27792]: 9728628015: client=unknown[94.242.206.37], sasl_method=LOGIN, sasl_username=paramus /var/log/maillog:Nov 10 03:05:38 mrelay3 postfix/smtpd[27808]: D529F28015: client=unknown[94.242.206.37], sasl_method=LOGIN, sasl_username=paramus /var/log/maillog:Nov 10 03:06:00 mrelay3 postfix/smtpd[27808]: DDF7C2801B: client=unknown[94.242.206.37], sasl_method=LOGIN, sasl_username=Paramus Does anyone have any idea what could of happened here. I mean if the user/passwd was already harvested by 94.242.206.37 why would they bother to start another dict. attack. I'm just not sure how they guess the username/password as its not on any logs that goes back months and I don't have a dovecot fail record for that user on the logs. This is the case all the time for me and it happens with other ips. Any help would be appreciated. paul

2 2

Fwd: ntp help
by tony.chamberlain＠lemko.com 11 Nov '10

11 Nov '10

Hello I am trying to sync via NTP locally (since I have no Internet access). None of the NTP stuff I read on the net seems to work right. I mean it works fine setting up a client going to something like 0.pool.ntp.org but when I want to make my LInux box a server, and I do an ntpdate to it from another machine, it says no suitable server found. I have tried every possible combination of restrict, broadcast, multicast. Followed directions in the examples but nothing works. Also "iptables-save" shows no iptables stuff set at all, so there is no firewall blocking it. Maybe I could ask my question and someone could tell me how to configure? There are 4 machines: 1. 10.5.1.50 2. 10.5.0.20 / 192.168.1.100 3. 10.6.1.50 4. 10.6.0.20 / 192.168.1.101 The 10.5s cannot reach the 10.6s (except roundaboutly through the 192 network). The two 192 machines are connected directly to each other. You can get back and forth between them I want to set it up so that, and it doesn't matter which way), one of the 191.168.1.X machines NTP syncs to the other, and then the 10.5.1.50 syncs to 10.5.0.20 and the 10.6.1.20 syncs to 10.6.0.20. How do I set the ntp.conf files? Remember there is no external internet on any of the machines, and the 10.5 machines cannot reach the 10.6 machines and v.v. (except the 10.X.0.20 machines can reach each other through the 192 network). Also I am not allowed to use the 192 machines as routers for the 10.X.1.50 machines. Thanks

3 2

RHEL Released
by William Warren 11 Nov '10

11 Nov '10

It's on their website right now.

2 1

flash-plugin crashes on full screen
by Rob Kampen 11 Nov '10

11 Nov '10

Hi List. doing my weekly updates with yum last night installed kernel.x86_64 2.6.18-194.17.4.el5.centos.plus and flash-plugin.i386 10.1.102.64-release now today as I go to watch a movie from hulu.com it crashes the flash-plugin whenever I try to go full screen. Anyone else notice this behaviour? I guess I'll try to downgrade flash and see if that fixes the problem. TIA

4 7

kerboros and nfs v4
by m.roth＠5-cent.us 10 Nov '10

10 Nov '10

My mamnager's trying to get nfs v4 working with kerboros. One major issue is that we do *not* have access to the server, or ktadmin - that's the network folks, and they have AD on the other side. The result is that he can't create (if I have this right) objects. I found <http://sadiquepp.blogspot.com/2009/02/how-to-configure-nfsv4-with-kerberos-…>, and he says he's done everything and more. Any pointers, suggestions, etc? mark

2 1

Need advice trying to load ethernet firmware for kickstart
by Spiro Harvey 10 Nov '10

10 Nov '10

I've got a memory stick that I use to install systems. It's basically just has a simple isolinux setup on it that calls up the kickstart files from an http server and pulls down the distro via our online repo. However, I'm trying to get a standard automated install like this on an IBM box which has a Broadcom NetXtreme 2 NIC that requires firmware to be there on bootup. I've got the file, and I've added it into the directory that I think it should be in (/lib/firmware/bnx2) on the initrd.img. However, when the system boots, it identifies the NICs on one of the console screens, but borks and won't boot properly. On console 1: GRUB boots, I get menu, choose option. Kernel loads initrd.img loads anaconda starts loads usb-storage module borks with: """ loader received SIGSEGV! Backtrace [0xf00bar] ... etc install exited normally [1/1] """ sends termination signals, unmounts everything, and halts ("You may safely reboot") On console screen 3: last few items are loading bnx2 module, insert module, remove usb-storge from modprobe.conf, and finally "getting kickstart file" On screen 4: detects storge devices and BNX2 NICs It seems to be crapping out when it tries to do the network access, but I've got nothing more I can trace the problem with. There's no shell yet. So I can't figure out if I've put the firmware in the wrong place, given it the wrong permissions (dirs are 755 and .fw file is 644) but whether that even matters because the source files are on a FAT16 partition, I don't know. It could just not be loading it, or the file could be corrupt. So how do I go about debugging this? Or am I doing it wrong? Any advice or pointers greatly appreciated. Thanks. -- Spiro Harvey Knossos Networks Ltd (04) 460-2531 : (021) 295-1923 www.knossos.net.nz

1 0

Re: [CentOS] flash-plugin crashes on full screen
by brett mm 10 Nov '10

10 Nov '10

>> now today as I go to watch a movie from hulu.com it crashes the >> flash-plugin whenever I try to go full screen. On Fedora 13, some versions of Flash crashed when fullscreen button was clicked, if the user also had nvidia drivers installed. The workaround was to right click on the flash video content (before switching to fullscreen), unticking "enable hardware acceleration" then clicking fullscreen. Might be worth a try. Brett.

3 2

Re: [CentOS] CentOS Digest, Vol 70, Issue 10
by Frans Rosslee 10 Nov '10

10 Nov '10

I listened to your email using DriveCarefully and will respond as soon as I can. Download DriveCarefully for free at www.drivecarefully.com Sent via my BlackBerry from Vodacom - let your email find you!

3 2

CentOS-announce Digest, Vol 69, Issue 5
by centos-announce-request＠centos.org 10 Nov '10

10 Nov '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2010:0839 Moderate CentOS 5 i386 kernel Update (Karanbir Singh) 2. CESA-2010:0839 Moderate CentOS 5 x86_64 kernel Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Tue, 9 Nov 2010 22:40:43 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2010:0839 Moderate CentOS 5 i386 kernel Update To: centos-announce(a)centos.org Message-ID: <20101109224043.GA10138(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2010:0839 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2010-0839.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: d121c43f4c192a0d57f3a914ff9d5e62 kernel-2.6.18-194.26.1.el5.i686.rpm df72e94d0c64ebc4719fbe2321c3aa17 kernel-debug-2.6.18-194.26.1.el5.i686.rpm e8a473a5489412c52bc234c5592a5846 kernel-debug-devel-2.6.18-194.26.1.el5.i686.rpm b1bc156cbc685de1d5987ab0e68ec1ed kernel-devel-2.6.18-194.26.1.el5.i686.rpm 98854bc0cc91c508eb1886b54baf8101 kernel-doc-2.6.18-194.26.1.el5.noarch.rpm 6e9e8c55cb7ca9721342937a42a12bec kernel-headers-2.6.18-194.26.1.el5.i386.rpm 1ef86e848ec5804fdbfc1e8cacfc1753 kernel-PAE-2.6.18-194.26.1.el5.i686.rpm 3f17d764da86ce8ff192d6bfde59a862 kernel-PAE-devel-2.6.18-194.26.1.el5.i686.rpm f1a492c80a81ce80a3a1d190a7299679 kernel-xen-2.6.18-194.26.1.el5.i686.rpm fd2dd0907c7730bda802152ff460126b kernel-xen-devel-2.6.18-194.26.1.el5.i686.rpm Source: d3b4f0593f5f8c2ab2f436549b7e6347 kernel-2.6.18-194.26.1.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 9 Nov 2010 22:40:44 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2010:0839 Moderate CentOS 5 x86_64 kernel Update To: centos-announce(a)centos.org Message-ID: <20101109224044.GA10154(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2010:0839 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2010-0839.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 960beaa2770d2d0607ff426fbe936f82 kernel-2.6.18-194.26.1.el5.x86_64.rpm 00e18cf5f435e198d83c419e3d8c7d53 kernel-debug-2.6.18-194.26.1.el5.x86_64.rpm ba1cd10ff374a4beaec8de1c6090e3b0 kernel-debug-devel-2.6.18-194.26.1.el5.x86_64.rpm 18d005a14e65e7b7779698e89a30ff42 kernel-devel-2.6.18-194.26.1.el5.x86_64.rpm c7a10fd5410f4997f78371757681bc43 kernel-doc-2.6.18-194.26.1.el5.noarch.rpm 2fd1f1e9466c96372d0bc6bff59ebd8e kernel-headers-2.6.18-194.26.1.el5.x86_64.rpm 21675572616e9cc3d3c8cdebc9c03e60 kernel-xen-2.6.18-194.26.1.el5.x86_64.rpm 3a98cb4aed00e182ff8986c8ce6d3b5f kernel-xen-devel-2.6.18-194.26.1.el5.x86_64.rpm Source: d3b4f0593f5f8c2ab2f436549b7e6347 kernel-2.6.18-194.26.1.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 69, Issue 5 **********************************************

1 0

Re-export an NFS mount from another machine for roaming profiles
by Nicolas Kovacs 10 Nov '10

10 Nov '10

Hi, In my office I have a server running CentOS 5.5. I have Apache+PHP+MySQL running on that server, and I'm exporting /var/www/html, so I can mount it on my main desktop with NFS. Server : grossebertha Desktop : babasse [root@babasse:~] # mount /dev/sda3 on / type ext4 (rw) proc on /proc type proc (rw) sysfs on /sys type sysfs (rw) devpts on /dev/pts type devpts (rw,gid=5,mode=620) tmpfs on /dev/shm type tmpfs (rw) /dev/sda1 on /boot type ext2 (rw) /dev/sdb1 on /Disque2 type ext4 (rw) none on /proc/sys/fs/binfmt_misc type binfmt_misc (rw) sunrpc on /var/lib/nfs/rpc_pipefs type rpc_pipefs (rw) grossebertha:/var/www/html on /home/kikinovak/Sites type nfs (rw,rsize=8192,wsize=8192,timeo=14,intr,addr=192.168.1.252) Now I'm thinking about configuring a few roaming profiles here with NIS/NFS, using 'babasse' as my main machine. In that case, I would export babasse's full /home to the local network, and then configure authentication with NIS. I wonder if it can be a problem when one of the directories, in that case /home/kikinovak/Sites, is already an NFS mount. I can't really figure it out, but I guess I vaguely fear some situation similar to the one displayes in "Being John Malkovich", where John Malkovich enters the secret trapdoor to his own thoughts. Thought I'd better ask before doing something silly. Cheers, Niki -- http://www.kikinovak.net

3 2

RHEL 6 potential release date???
by Tom Bishop 10 Nov '10

10 Nov '10

Benn playing with the beta's and have looked around for a potential release date...Does anyone know what the likely date is??? Thanks....

11 16

Network card not working after update to 2.6.18-194.17.4.el5
by Mathieu Baudier 10 Nov '10

10 Nov '10

Hello, the network card of my workstation stopped working after I updated the kernel to 2.6.18-194.17.4.el5 . I don't see any specific error messages when booting, and the related interface is shown as up by ifconfig with its (static) IP address properly set. But I cannot reach any other computer or router on the LAN (whereas other boxes work fine). Where the network cable is plugged, an orange light stays on and does not blink. Booting with 2.6.18-194.17.1.el5 instead solves the issue. The network card is: Ethernet controller: Realtek Semiconductor Co., Ltd. RTL-8110SC/8169SC Gigabit Ethernet (rev 10) I just wanted to share this, and see if anybody else experienced such issues. It makes me feel uncomfortable with updating some remote servers, because it would really be a pain to fix if their network cards stopped working after rebooting (they are not the same as the one of my workstation, but I would feel safer if I could find out that this is a problem with my computer and not with the kernel) Cheers, Mathieu

3 3

Init.d script troubleshooting.
by Don Krause 10 Nov '10

10 Nov '10

I got a strange problem with init.d scripts on a fully updated (as of today) fresh install of 5.5 x64. I've written a script, /etc/init.d/Fast that starts a fairly large and slow commercial application, by calling that applications control binary to do the actual work. I "registered" the script, via chkconfig --add Fast, and the symlinks are in the expected places. [root@rpmbuilder etc]# ls /etc/rc*/*Fast /etc/rc0.d/K10Fast /etc/rc4.d/S90Fast /etc/rc1.d/K10Fast /etc/rc5.d/S90Fast /etc/rc2.d/K10Fast /etc/rc6.d/K10Fast /etc/rc3.d/S90Fast [root@rpmbuilder etc]# ls -la init.d/Fast -rwxr-xr-x 1 root root 2691 Nov 9 16:49 init.d/Fast [root@rpmbuilder etc]# Testing the script, both via "/etc/init.d/Fast start" and "service Fast start" works, and it fully works for the implemented "start","stop","status" commands. "/etc/rc0.d/K10Fast stop" works as expected. (as does /etc/rc1,2,6 etc..) The script contains full paths to everything. At boot, the script functions as expected. My problem is that at reboot, via shutdown -r or shutdown -h the script does NOT get called, so naturally the system doesn't get to clean up after itself, then it fails to startup correctly next boot. The startup and shutdown of this application is slow, 2+ minutes. I know it doesn't work at reboot or halt because the host goes down fast, and the system is littered with left over pid files and such that prevents a clear restart of the Fast process. I've placed echo commands in the script, both in the stop() function to log the date/time to a file when it's called, and in the head of the script itself, just to see if it gets called at all during shutdown. As far as I can tell, the script does NOT get called at shutdown/reboot time. At all. I'm just confused, this ain't supposed to be this hard... Is there some way to debug init? Suggestions? Thanks <-- /etc/init.f/Fast --> #!/bin/bash # # Startup script for Fast # # chkconfig: 345 90 10 # description: Fast Search Engine # processname: nctrl echo "************************* In Fast ****************************" # Source function library . /etc/init.d/functions RETVAL=0 FASTSEARCH=/opt/Opti/9.1/Fast/fast BIN=${FASTSEARCH}/bin LIBPATH=${FASTSEARCH}/lib SHLIB=${FASTSEARCH}/lib LD_LIBRARY_PATH=${FASTSEARCH}/lib PYTHONPATH=${FASTSEARCH}/lib/python2.3/lib-dynload export FASTSEARCH LIBPATH SHLIB LD_LIBRARY_PATH PYTHONPATH start() { if [ -f ${BIN}/nctrl ]; then cd ${BIN} echo -n $"Starting Fast " su fastadmin -c "./nctrl start" RETVAL=$? [ $RETVAL -eq 0 ] && touch /var/lock/subsys/fast echo fi return $RETVAL } stop() { echo -n $"Stopping Fast " cd ${BIN} su fastadmin -c "./nctrl stop" RETVAL=$? [ $RETVAL -eq 0 ] && rm -f /var/lock/subsys/fast echo return $RETVAL } status() { cd ${BIN} su fastadmin -c "./nctrl status" } restart() { stop start } case "$1" in start) start ;; stop) stop ;; restart) restart ;; killlock) if [ -f /var/lock/subsys/fast ]; then rm -f /var/lock/subsys/fast fi ;; status) status ;; *) echo $"Usage: $0 {start|stop|restart|killlock|status}" exit 1 esac exit $RETVAL -- Don Krause

2 3

"yum -yq --security check-update" spouting lots of text?
by Dave 09 Nov '10

09 Nov '10

uname -a Linux 2.6.18-194.17.4.el5.centos.plus #1 SMP Tue Oct 26 04:07:11 EDT 2010 x86_64 x86_64 x86_64 GNU/Linux I thought -q meant 'no output'. Recently yum -q has started spewing the following garbage, can anyone tell me why? thanks, Dave # yum -yq --security check-update 2>/dev/null Loaded plugins: fastestmirror, priorities, security Loading mirror speeds from cached hostfile * addons: mirror.5ninesolutions.com * base: ftp.osuosl.org * centosplus: centos.promopeddler.com * contrib: mirrors.kernel.org * epel: mirror.pnl.gov * extras: mirror.rocketinternet.net * rpmforge: ftp-stud.fht-esslingen.de * rpmfusion-free-updates: mirror.web-ster.com * rpmfusion-free-updates-testing: mirror.web-ster.com * rpmfusion-nonfree-updates: mirror.web-ster.com * rpmfusion-nonfree-updates-testing: mirror.web-ster.com * updates: mirrors.cat.pdx.edu Limiting package lists to security relevant ones No packages needed, for security, 31 available aalib.x86_64 1.4.0-5.el5.rf rpmforge blas.x86_64 3.1.1-1.el5.rf rpmforge cadaver.x86_64 0.22.5-1.el5.rf rpmforge dnsmasq.x86_64 2.55-1.el5.rf rpmforge emacs-git.x86_64 1.7.3-1.el5.rf rpmforge enca.x86_64 1.10-1.el5.rf rpmforge gdal.x86_64 1.4.4-2.el5.rf rpmforge geos.x86_64 3.2.2-1.el5.rf rpmforge git.x86_64 1.7.3-1.el5.rf rpmforge hdf5.x86_64 1.8.0-1.el5.rf rpmforge iso-codes.noarch 1.0a-1.el5.rf rpmforge lapack.x86_64 3.1.1-1.el5.rf rpmforge lftp.x86_64 4.0.10-1.el5.rf rpmforge libextractor.x86_64 0.5.22-2.el5.rf rpmforge libmpcdec.x86_64 1.2.6-1.el5.rf rpmforge libpaper.x86_64 1.1.22-1.el5.rf rpmforge libwpd.x86_64 0.8.14-1.el5.rf rpmforge mtr.x86_64 2:0.80-1.el5.rf rpmforge netcdf.x86_64 3.6.3-1.el5.rf rpmforge netcdf-devel.x86_64 3.6.3-1.el5.rf rpmforge perl-Compress-Zlib.noarch 2.015-1.el5.rf rpmforge perl-DBI.x86_64 1.615-1.el5.rf rpmforge perl-Git.x86_64 1.7.3-1.el5.rf rpmforge perl-HTML-Parser.x86_64 3.68-1.el5.rf rpmforge perl-HTML-Tagset.noarch 3.20-1.el5.rf rpmforge proj.x86_64 4.7.0-1.el5.rf rpmforge rsync.x86_64 3.0.7-1.el5.rf rpmforge syslinux.x86_64 4.03-1.el5.rf rpmforge udftools.x86_64 1.0.0b3-3.el5.rf rpmforge xvidcore.x86_64 1.2.2-1.el5.rf rpmforge Obsoleting Packages perl-IO-Compress.noarch 2.030-2.el5.rf dag perl-Compress-Zlib.x86_64 1.42-1.fc6 installed

1 1

Running a DNS signed zone on Centos 5.5
by Robert Moskowitz 09 Nov '10

09 Nov '10

My DNS server has been running Centos for some time. I am in the process of upgrading it to Centos 5.5 (long overdue, I know). Since we now have .com signed I want to get my domain signed as well, but I see that Centos 5.5 is running BIND 9.3.6 and a thread on the BIND list recommends against running a DNSSEC master zone on anything less than 9.6 and you really should be on 9.7. The thread DOES mention that some functionality has been backported by RH to what their 9.3.6. I did find the following: http://jason.roysdon.net/2009/10/16/building-bind-9-6-on-rhel5-centos5-for-… Is this the best path at this time? Can anyone point me to other documents? I have a server that I can test this out and get everything ready before I upgrade my main Centos DNS server. This way I can get it right in one try (or that is the dream).

9 10

lvm and /dev/cdrom: open failed: No medium found
by Rainer Traut 09 Nov '10

09 Nov '10

Hi, every lvm command gives one line with: /dev/cdrom: open failed: No medium found I looked at https://bugzilla.redhat.com/show_bug.cgi?id=431901 and changed filter in /etc/lvm/lvm.conf to filter = [ "r|/dev/cdrom|", "a/.*/" ] then deleted cache /etc/lvm/cache/.cache This seems to help, but after a while the message reappears. Is there a way to get rid of it, because I'm making use of lvm with snapshots very often? Rainer

2 2

OT - Any true bourne shells out there for linux?
by Phil Savoie 09 Nov '10

09 Nov '10

Hi All, Was wondering if anyone knows there are any separate rpms to be able to install a true bourne shell and not one linked to bash. Thanks in advance, Phil -- Manners are the unenforced standards of conduct which demonstrate that a person is proper, polite, and refined.

8 8

Update for mailman 2.1.11 -> 2.1.14? Centos 5.5
by Götz Reinicke - IT-Koordinator 09 Nov '10

09 Nov '10

Hey, recently I was asked, how mailman handles bounces and after digging around I also noticed that the current version is 2.1.14 with a lot of bug fixes. So I'd like to ask if there is a (src)rpm out there with the recent version working on centos 5.5. Thanks and best regadrs . Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzende des Aufsichtsrats: Prof. Dr. Claudia Hübner Geschäftsführer: Prof. Thomas Schadt

1 0

large numbers of linux system user for postfix
by ahmad riza h nst 08 Nov '10

08 Nov '10

hello, i need to setup a mail server with postfix + dovecot + webmin + virtualmin + virtual user with linux system user. the virtual user may reach to thousands user from several hundreds virtual domains. what i concern is large numbers of linux system user which used in these setup, is it good or bad? maybe somebody would share their experience about this setup ? any links would be good. postfix 2.6.7 dovecot 2.0.6 centos 5.x webmin + virtualmin thank you. -- http://blog.rizahnst.org

9 10

pam_ldap login under centOS
by bluethundr 08 Nov '10

08 Nov '10

Hello List I am attempting to setup various pam modules to consult our new LDAP services in order to do what it needs to do. I have setup my /etc/pam.d sudo file (for example) this way in the attempt to accomplish this via LDAP: [root@VIRCENT03:~]#cat /etc/pam.d/sudo #%PAM-1.0 auth include system-auth auth required pam_ldap.so account include system-auth account required pam_ldap.so password include system-auth password required pam_ldap.so session optional pam_keyinit.so revoke session required pam_limits.so session required pam_ldap.so but even tho the user is part of the %wheel group under LDAP it is unable to sudo to any other account (including root). If I try to sudo this is what happens: [bluethundr@VIRCENT03:~]#sudo bash [sudo] password for bluethundr: bluethundr is not in the sudoers file. This incident will be reported. It would appear that sudo support for ldap is compiled in: [root@VIRCENT03:~]#ldd $(which sudo)| grep -i ldap libldap-2.3.so.0 => /usr/lib/libldap-2.3.so.0 (0x00552000) This is how I setup my ldap.conf file [root@VIRCENT03:~]#cat /etc/openldap/ldap.conf # # LDAP Defaults # # See ldap.conf(5) for details # This file should be world readable but not world writable. #BASE dc=example, dc=com #URI ldap://ldap.example.com ldap://ldap-master.example.com:666 #SIZELIMIT 12 #TIMELIMIT 15 #DEREF never URI ldap://ldap.acadaca.net/ BASE dc=acadaca,dc=net TLS_CACERTDIR /etc/openldap/cacerts sudoers_base ou=sudoers,ou=Services,dc=acadaca,dc=net In my openldap logs on the LDAP server there appears to be no activity when I sudo. however in the secure logs on the client I do.. Nov 8 16:05:34 VIRCENT03 su: pam_unix(su-l:session): session opened for user root by bluethundr(uid=500) Nov 8 16:05:37 VIRCENT03 su: pam_unix(su-l:session): session opened for user bluethundr by bluethundr(uid=0) Nov 8 16:05:44 VIRCENT03 sudo: bluethundr : user NOT in sudoers ; TTY=pts/5 ; PWD=/home/bluethundr ; USER=root ; COMMAND=/bin/bash I do see other events in secure.log that appear to be pam successes however. am i interpreting this correctly that at least part of the system is communicating with pam on the ldap server? thanks -- Here's my RSA Public key: gpg --keyserver pgp.mit.edu --recv-keys 5A4873A9 Share and enjoy!!

1 0

Bug or normal?
by Emmanuel Noobadmin 08 Nov '10

08 Nov '10

Not sure if this is normal or some kind of bug that I should be filing somewhere so asking for opinions here first. I have a new system (Gigabyte H55M-UD2H with i5-760) that has 2 disks with partitions used for RAID 1 MD devices. X was in use. After testing that the system would boot properly if one of the disk failed, simulated by pulling the cable on one then rebooting, I proceeded to do other configuration while the system resync the array. Subsequently, I made a mistake selecting the wrong partition to dd an image from another machine's HDD and filled up the md0 device. So I rm the half copied image file which was about 80GB at that time. It took more than the couple of seconds I would expect for rm on a single file. At this point, I realized that apart from being able to move the mouse cursor, the system was not responding to mouse clicks or keyboard. I thought it had locked up for some reason and power cycled the system. The system locked up again during the boot process when the md daemon was loaded, detected an improper shutdown and started syncing one of the array. There was an error message about pdflush:303 time out after 120 seconds and a suggestion on how to suppress the message. It repeated until I gave up and rebooted the machine. Sorry my bad for not noting down the exact error message because I was just going "WTF is this? I need this machine up and running within 8hrs!" I tried to boot up using the CentOS LiveCD and pretty much ran into the same problem when it tried to find the existing installation. Trying to figure out what is going on, I switched to another bash console and managed to run top. The load was more than 4.x but no single process appear to be heavily utilizing the system. Switching to the debug console, I managed to see that the md daemon was again trying to resync the arrays. There was an EXT3 message about deleting an unreference inode before I got a screenful of what appears to be a trace dump. So my question is, was all that supposed to happen or did I stumble on some bug that arose from the combination of a full md array being resync while rm was trying to remove a very large file? Or was it simply my bad for assuming that rm'ing a large file would take no longer than deleting a single small file and caused some inevitable FS corruption by power cycling thinking that the system had hung? Although that then begs the question of why would a simple rm command load up the system to the point it wouldn't respond to inputs apart from mouse movement?

1 0

obtaining non-packaged software
by Piscium 07 Nov '10

07 Nov '10

I have been using Fedora on my home desktop for close to an year, and I am happy with it, nevertheless I am considering switching to a slower-moving distro. CentOS + EPEL put together have less packages than Fedora. Moreover RPM Fusion has fewer packages for EL than for Fedora. I am wondering how can I install on my PC applications for which packages do not exist from one of the above-mentioned repos. I can go upstream, get sources and build them. It is a good solution, I do that even with Fedora, however this can mean a lot of work when a package depends on 10 others. So I wonder what do other CentOS users do in a similar situation? Is it possible to get a Fedora binary package and install it? What about getting a Fedora source package, building and installing it? Is there any other possibility?

5 12

Logwatch not working properly
by Albert McCann 07 Nov '10

07 Nov '10

I having a problem where Logwatch is not showing any events from the /var/log/secure log file. When I run logwatch --print --range today --service sshd --detail 10 --debug 10 the end result shows this: ... LogFiles that will be processed: [0] = secure [1] = messages Made Temp Dir: /var/cache/logwatch/logwatch.sOga48bL with tempdir export LOGWATCH_DATE_RANGE='today' export LOGWATCH_GLOBAL_DETAIL='10' export LOGWATCH_OUTPUT_TYPE='unformatted' export LOGWATCH_TEMP_DIR='/var/cache/logwatch/logwatch.sOga48bL/' export LOGWATCH_DEBUG='10' Preprocessing LogFile: secure /var/log/secure 2>/dev/null | /usr/bin/perl /usr/share/logwatch/scripts/shared/expandrepeats ''| /usr/bin/perl /usr/share/logwatch/scripts/shared/onlyhost ''| /usr/bin/perl /usr/share/logwatch/scripts/shared/applystddate ''>/var/cache/logwatch/logwatch.sOga48bL/secure TimeFilter: Period is day TimeFilter: SearchDate is (Nov 6 ..:..:..) TimeFilter: Debug SearchDate is (Nov 6 ) DEBUG: Inside ApplyStdDate... DEBUG: Looking For: (Nov 6 ..:..:..) Preprocessing LogFile: messages /var/log/messages 2>/dev/null | /usr/bin/perl /usr/share/logwatch/scripts/shared/expandrepeats ''| /usr/bin/perl /usr/share/logwatch/scripts/shared/removeservice 'talkd'| /usr/bin/perl /usr/share/logwatch/scripts/shared/removeservice 'telnetd'| /usr/bin/perl /usr/share/logwatch/scripts/shared/removeservice 'inetd'| /usr/bin/perl /usr/share/logwatch/scripts/shared/removeservice 'nfsd'| /usr/bin/perl /usr/share/logwatch/scripts/shared/removeservice '/sbin/mingetty'| /usr/bin/perl /usr/share/logwatch/scripts/shared/removeservice 'netscreen'| /usr/bin/perl /usr/share/logwatch/scripts/shared/removeservice 'netscreen'| /usr/bin/perl /usr/share/logwatch/scripts/shared/onlyhost ''| /usr/bin/perl /usr/share/logwatch/scripts/shared/applystddate ''>/var/cache/logwatch/logwatch.sOga48bL/messages DEBUG: Inside RemoveService... DEBUG: Inside RemoveService... DEBUG: Inside RemoveService... DEBUG: Inside RemoveService... DEBUG: Inside RemoveService... DEBUG: Inside RemoveService... DEBUG: Inside RemoveService: 930 Lines In, 930 Lines Out DEBUG: Inside RemoveService: 930 Lines In, 930 Lines Out DEBUG: Inside RemoveService: 930 Lines In, 930 Lines Out DEBUG: Inside RemoveService: 930 Lines In, 930 Lines Out DEBUG: Inside RemoveService: 930 Lines In, 930 Lines Out DEBUG: Inside RemoveService... DEBUG: Inside RemoveService: 930 Lines In, 930 Lines Out DEBUG: Inside RemoveService: 930 Lines In, 930 Lines Out TimeFilter: Period is day TimeFilter: SearchDate is ( 2010-Nov-06 ..h ..m ..s ) TimeFilter: Debug SearchDate is ( 2010-Nov-06 h m s ) ################### Logwatch 7.3 (03/24/06) #################### Processing Initiated: Sat Nov 6 11:38:23 2010 Date Range Processed: today ( 2010-Nov-06 ) Period is day. Detail Level of Output: 10 Type of Output: unformatted Logfiles for Host: valhala.xxxxxxxxxxxx.org ################################################################## --------------------- SSHD Begin ------------------------ DEBUG: Inside OnlyService for sshd DEBUG: Inside SSHD Filter ---------------------- SSHD End ------------------------- Looking at file /usr/share/logwatch/scripts/services/sshd there is block of code starting at line 165: ... if ( $Debug >= 5 ) { print STDERR "\n\nDEBUG: Inside SSHD Filter \n\n"; $DebugCounter = 1; } while (defined(my $ThisLine = <STDIN>)) { if ( $Debug >= 5 ) { print STDERR "DEBUG($DebugCounter): $ThisLine"; $DebugCounter++; } ... >From above, this line never prints anything: print STDERR "DEBUG($DebugCounter): $ThisLine"; while the previous print STDERR does print when $Debug >= 5. Doing a rpm -V Logwatch shows one changed file S.5....T c /etc/logwatch/conf/logwatch.conf as I added a " Detail = High" line to it. I do have sshd events in /var/log/secure, here's some showing testing a failed login using a non-existing account: 2010-11-06T08:59:03.684006-04:00 valhala sshd[23633]: Invalid user bob from 192.168.1.12 2010-11-06T08:59:03.688784-04:00 valhala sshd[23636]: input_userauth_request: invalid user bob 2010-11-06T08:59:05.996036-04:00 valhala sshd[23633]: pam_unix(sshd:auth): check pass; user unknown 2010-11-06T08:59:05.996313-04:00 valhala sshd[23633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=bunny2.xxxxxxxxxxxx.org 2010-11-06T08:59:07.837697-04:00 valhala sshd[23633]: Failed password for invalid user bob from 192.168.1.12 port 57945 ssh2 2010-11-06T08:59:10.644065-04:00 valhala sshd[23633]: pam_unix(sshd:auth): check pass; user unknown 2010-11-06T08:59:12.505509-04:00 valhala sshd[23633]: Failed password for invalid user bob from 192.168.1.12 port 57945 ssh2 2010-11-06T08:59:14.348019-04:00 valhala sshd[23633]: pam_unix(sshd:auth): check pass; user unknown 2010-11-06T08:59:15.759400-04:00 valhala sshd[23633]: Failed password for invalid user bob from 192.168.1.12 port 57945 ssh2 2010-11-06T08:59:18.315990-04:00 valhala sshd[23633]: pam_unix(sshd:auth): check pass; user unknown 2010-11-06T08:59:19.607300-04:00 valhala sshd[23633]: Failed password for invalid user bob from 192.168.1.12 port 57945 ssh2 2010-11-06T08:59:24.686480-04:00 valhala sshd[23636]: Connection closed by 192.168.1.12 2010-11-06T08:59:24.687107-04:00 valhala sshd[23633]: PAM 3 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=bunny2.xxxxxxxxxxxx.org 2010-11-06T08:59:24.687132-04:00 valhala sshd[23633]: PAM service(sshd) ignoring max retries; 4 > 3 Does anyone have any idea why this isn't working? The only thing I see is a date discrepancy: TimeFilter: SearchDate is ( 2010-Nov-06 ..h ..m ..s ), vs 2010-11-06T08:59:03.684006-04:00 Thanks in advance for any clues. Al -- Experience varies directly with equipment ruined.

1 2

"Semi-Authoritative" DNS?
by Tim Nelson 06 Nov '10

06 Nov '10

Greetings All- I have an odd need for a 'semi-authoritative' DNS server. Let's say I have a zone for 'domain.com' with public DNS servers. However, I wanted to run an internal DNS server for internal things. Public resolution of 'www.domain.com' would yield the public IPs, private resolution of 'www.domain.com' would yield the internal private IPs. Easy enough. BUT, what if there is a DNS record present on the public nameservers that is *not* present on the internal nameserver? Typically, DNS will say 'no record found' when it could really forward the request to the public DNS. Is it possible to configure this? So, the internal 'domain.com' zone will be authoritative for records it has but forward queries for those records it does not have, even on the same domain? I hope that made sense. Maybe there is a better way of accomplishing this? The systems in question are running Centos 5.5 x86_64 with BIND bind-9.3.6-4.P1.el5_4.1 . --Tim

3 2

CentOS-announce Digest, Vol 69, Issue 4
by centos-announce-request＠centos.org 06 Nov '10

06 Nov '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2010:0827 CentOS 5 i386 logrotate Update (Tru Huynh) 2. CEBA-2010:0827 CentOS 5 x86_64 logrotate Update (Tru Huynh) 3. CEBA-2010:0826 CentOS 5 i386 gnome-screensaver Update (Tru Huynh) 4. CEBA-2010:0826 CentOS 5 x86_64 gnome-screensaver Update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 5 Nov 2010 23:50:07 +0100 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0827 CentOS 5 i386 logrotate Update To: centos-announce(a)centos.org Message-ID: <20101105225007.GO24160(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Bugfix Advisory 2010:0827 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0827.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: ae1caae9068e3be9012a8a1bee428833 logrotate-3.7.4-9.el5_5.2.i386.rpm source: d0fef61c003ca12a30b3279c91ea233e logrotate-3.7.4-9.el5_5.2.src.rpm Tru -- Tru Huynh (mirrors, CentOS i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

file conflict while installing phonon-backend-gstreamer for Amarok
by Agnello George 06 Nov '10

06 Nov '10

Hi I am trying to install phonon-backend-gstreamer so that i can play mp3 songs through Amarok as per the following forum ( http://forums.fedoraforum.org/showthread.php?t=205019 ) , but i get the following dependency error . how can i solve this your inputs will be of great value i am using Fedora 9 . ---------------------------------------------- : : Total download size: 254 k Is this ok [y/N]: y Downloading Packages: (1/2): phonon-4.3.1-2.fc9.i386.rpm | 152 kB 00:05 (2/2): phonon-backend-gstreamer-4.3.1-2.fc9.i386.rpm | 102 kB 00:02 Running rpm_check_debug Running Transaction Test Finished Transaction Test Transaction Check Error: file /usr/lib/libphonon.so.4 from install of phonon-4.3.1-2.fc9.i386 conflicts with file from package kdelibs-4.0.3-7.fc9.i386 file /usr/lib/libphononexperimental.so.4 from install of phonon-4.3.1-2.fc9.i386 conflicts with file from package kdelibs-4.0.3-7.fc9.i386 file /usr/share/dbus-1/interfaces/org.kde.Phonon.AudioOutput.xml from install of phonon-4.3.1-2.fc9.i386 conflicts with file from package kdelibs-4.0.3-7.fc9.i386 Error Summary ------------- -- Regards Agnello D'souza

1 0

Pptp vpn server
by mattias 05 Nov '10

05 Nov '10

How to setup a vpn server on centos? I can't find the pptpd in any repo

17 39

Nagios installation problem
by Ben McGinnes 05 Nov '10

05 Nov '10

Hello, Has anyone managed a successful installation of Nagios using the RPMForge packages on CentOS 5.5? It looks like it should have worked, I followed the guides for Fedora and CentOS here (with appropriate path adjustments): http://nagios.sourceforge.net/docs/3_0/quickstart-fedora.html http://wiki.centos.org/HowTos/Nagios The SELinux policies look fine (I tend to ignore instructions to permanently disable SELinux, if I'm not using SELinux then there's no reason not to return to Slackware): # semodule -l | grep nagios nagios 1.1.0 # The nagios.cfg check gave the all clear: Reading configuration data... Read main config file okay... Processing object config file '/etc/nagios/objects/commands.cfg'... Processing object config file '/etc/nagios/objects/contacts.cfg'... Processing object config file '/etc/nagios/objects/timeperiods.cfg'... Processing object config file '/etc/nagios/objects/templates.cfg'... Processing object config file '/etc/nagios/objects/localhost.cfg'... Read object config files okay... Running pre-flight check on configuration data... Checking services... Checked 8 services. Checking hosts... Checked 1 hosts. Checking host groups... Checked 1 host groups. Checking service groups... Checked 0 service groups. Checking contacts... Checked 1 contacts. Checking contact groups... Checked 1 contact groups. Checking service escalations... Checked 0 service escalations. Checking service dependencies... Checked 0 service dependencies. Checking host escalations... Checked 0 host escalations. Checking host dependencies... Checked 0 host dependencies. Checking commands... Checked 24 commands. Checking time periods... Checked 5 time periods. Checking for circular paths between hosts... Checking for circular host and service dependencies... Checking global event handlers... Checking obsessive compulsive processor commands... Checking misc settings... Total Warnings: 0 Total Errors: 0 Things look okay - No serious problems were detected during the pre-flight check My adjustment of other config files is minimal, essentially just setting the email address to deliver notifications to. Yet every time I try to start the service I get this: # service nagios start nagios is stopped Configuration validation failed [FAILED] The error appears to be identical to that reported here: http://forums.meulie.net/viewtopic.php?f=61&t=6538&start=0 Like the original poster of the thread on that forum, I am able to start it with "nagios -d /etc/nagios/nagios.cfg" though various web pages continue to report an unspecified configuration error. Does anyone have any ideas? Regards, Ben

2 2

Auto-Re: CentOS Digest, Vol 70, Issue 5
by 韦加宁 05 Nov '10

05 Nov '10

信已收到,谢谢!

2 1

CentOS-announce Digest, Vol 69, Issue 3
by centos-announce-request＠centos.org 05 Nov '10

05 Nov '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2010:0824 Moderate CentOS 4 i386 mysql - security update (Tru Huynh) 2. CESA-2010:0824 Moderate CentOS 4 x86_64 mysql - security update (Tru Huynh) 3. CESA-2010:0825 Moderate CentOS 5 i386 mysql Update (Tru Huynh) 4. CESA-2010:0825 Moderate CentOS 5 x86_64 mysql Update (Tru Huynh) 5. CEBA-2010:0816 CentOS 5 i386 tetex Update (Tru Huynh) 6. CEBA-2010:0816 CentOS 5 x86_64 tetex Update (Tru Huynh) 7. CEEA-2010:0821 CentOS 5 i386 apr Update (Tru Huynh) 8. CEEA-2010:0821 CentOS 5 x86_64 apr Update (Tru Huynh) 9. CEBA-2010:0823 CentOS 5 i386 tcsh Update (Tru Huynh) 10. CEBA-2010:0823 CentOS 5 x86_64 tcsh Update (Tru Huynh) 11. http://rhn.redhat.com/errata/CEBA-2010:0714 CentOS 5 x86_64 kvm Update (Tru Huynh) 12. CEBA-2010:0822 CentOS 5 i386 openmotif Update (Tru Huynh) 13. CEBA-2010:0822 CentOS 5 x86_64 openmotif Update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 5 Nov 2010 15:22:54 +0100 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2010:0824 Moderate CentOS 4 i386 mysql - security update To: centos-announce(a)centos.org Message-ID: <20101105142254.GA24160(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2010:0824 mysql security update for CentOS 4 i386: https://rhn.redhat.com/errata/RHSA-2010-0824.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/mysql-4.1.22-2.el4_8.4.i386.rpm updates/i386/RPMS/mysql-bench-4.1.22-2.el4_8.4.i386.rpm updates/i386/RPMS/mysql-devel-4.1.22-2.el4_8.4.i386.rpm updates/i386/RPMS/mysql-server-4.1.22-2.el4_8.4.i386.rpm source: updates/SRPMS/mysql-4.1.22-2.el4_8.4.src.rpm You may update your CentOS-4 i386 installations by running the command: yum update mysql Tru -- Tru Huynh (mirrors, CentOS i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

IP forwarding and OpenVPN
by Bart Schaefer 05 Nov '10

05 Nov '10

I have a CentOS 4 server that acts as a gateway for a small LAN. The lower half of the 192.168.144 address space is the LAN on eth1, the upper half is the WAN on eth0, and the default route is to 192.168.144.254 which is my DSL router; this has been working fine for years. However, it's recently become convenient to connect the server to a VPN from time to time, for which I've set up OpenVPN. This works for connections originating from the server itself, but breaks for machines on the LAN when accessing IPs in the ranges that are routed to the VPN. Connections to IPs not in the private network still work as before. Can anyone advise what I may need to change to configure the server to forward packets to the VPN? Pointers to documentation are welcome. Thanks. /etc/sysctl.conf has: net.ipv4.ip_forward = 1 net.ipv4.conf.default.rp_filter = 1 net.ipv4.conf.default.accept_source_route = 0

3 12

new apache mod on centos? Google page speed?
by Bob Hoffman 05 Nov '10

05 Nov '10

Just saw this article http://news.yahoo.com/s/mashable/20101103/tc_mashable/google_helps_autotune… (/rant - stupid seo links, lame /rant off) it mentions it is set up for linux distros, notably centos. Anyone use this yet? Affect the auto yum update at all?

2 1

Re: [CentOS] was, PATA Hard Drive woes, is "SMART"
by m.roth＠5-cent.us 04 Nov '10

04 Nov '10

Folks, Thanks a *lot* to those who suggested I try fsck -cc - that took six hours, and at the end, I was standing there, and it tells me that there's two back blocks, one was /dead/base.pp, and... (wait for it) bad blocks, in node 1. I said yes, fix them, and rebooted, and I don't see complaints. mark "and there was much rejoicing"

3 2

orphan inodes deleted issue
by David S. 04 Nov '10

04 Nov '10

Dear All, My servers running on CentOS 5.5 x86_64 with kernel 2.6.18.194.17.4.el gigabyte motherboard and 2 harddisks (seagate 500GB). My CentOS box configured RAID 1, yesterday and today I had the same problem on 2 servers with same configuration. See the following error messages for details: EXT3-fs: INFO: recovery required on readonly filesystem. EXT3-fs: write access will be enabled during recovery. kjournald starting. Commit interval 5 seconds EXT3-fs: md1: orphan cleanup on readonly fs ext3_orphan_cleanup: deleting unreferenced inode 2010087 ext3_orphan_cleanup: deleting unreferenced inode 259361 ext3_orphan_cleanup: deleting unreferenced inode 972510 ext3_orphan_cleanup: deleting unreferenced inode 2009841 ext3_orphan_cleanup: deleting unreferenced inode 2010102 ext3_orphan_cleanup: deleting unreferenced inode 2010079 ext3_orphan_cleanup: deleting unreferenced inode 2010078 ext3_orphan_cleanup: deleting unreferenced inode 2009831 ext3_orphan_cleanup: deleting unreferenced inode 2010001 ext3_orphan_cleanup: deleting unreferenced inode 2009991 ext3_orphan_cleanup: deleting unreferenced inode 2009989 ext3_orphan_cleanup: deleting unreferenced inode 2009811 ext3_orphan_cleanup: deleting unreferenced inode 2009806 ext3_orphan_cleanup: deleting unreferenced inode 2009978 ext3_orphan_cleanup: deleting unreferenced inode 2009976 ext3_orphan_cleanup: deleting unreferenced inode 2009972 ext3_orphan_cleanup: deleting unreferenced inode 2009828 ext3_orphan_cleanup: deleting unreferenced inode 2009964 ext3_orphan_cleanup: deleting unreferenced inode 2009865 ext3_orphan_cleanup: deleting unreferenced inode 2009863 ext3_orphan_cleanup: deleting unreferenced inode 2009830 ext3_orphan_cleanup: deleting unreferenced inode 2009809 ext3_orphan_cleanup: deleting unreferenced inode 2009823 ext3_orphan_cleanup: deleting unreferenced inode 2009856 ext3_orphan_cleanup: deleting unreferenced inode 2009807 ext3_orphan_cleanup: deleting unreferenced inode 2009799 ext3_orphan_cleanup: deleting unreferenced inode 2009794 EXT3-fs: md1: 27 orphan inodes deleted EXT3-fs: recovery complete. It's my array: $ df -h Filesystem Size Used Avail Use% Mounted on /dev/md1 9.5G 735M 8.3G 8% / /dev/md7 38G 6.7G 30G 19% /var /dev/md6 15G 4.5G 9.1G 33% /usr /dev/md5 103G 45G 54G 46% /backup /dev/md3 284G 42G 228G 16% /home /dev/md2 2.0G 214M 1.7G 12% /tmp /dev/md0 243M 24M 207M 11% /boot I've been searching on google but I can't find the explanation for this problem. It's a BUG? :D Thank You very much :D -- - -- Best regards, David http://blog.pnyet.web.id

4 5

generate signing subkey
by Tim Dunphy 04 Nov '10

04 Nov '10

hello all I need to generate a subkey in gpg in order to sign my emails. I already have a main key. how do I generate the subkey I need to encrypt emails? I have already run gpg --gen-key thanks -- Here's my RSA Public key: gpg --keyserver pgp.mit.edu --recv-keys 5A4873A9 Share and enjoy!!

2 2

failure to import ldif into ldap
by Tim Dunphy 04 Nov '10

04 Nov '10

Thanks all.. I have read the man of ldif.... your advice has gotten me quite far both in my current implementation and in my overall understanding of LDAP which I am hoping grows with each passing day. In my attempt to build my current directory, I have taken a dump of my last successful implementation (which was created on FreeBSD 8.1) and substituted values for the dc=company and dc=com values with the correct ones for the current directory (attempting to implement under CentOS 5.4) and even tho the correct schemas are in place it is choking on this entry: # defaults, sudoers, Services, acadaca.com dn: cn=defaults,ou=sudoers,ou=Services,dc=acadaca,dc=net objectClass: top objectClass: sudoRole cn: defaults description: Default sudoOption's go here And again I should have all the schemas in place to make this work... include /etc/openldap/schema/core.schema include /etc/openldap/schema/cosine.schema include /etc/openldap/schema/inetorgperson.schema include /etc/openldap/schema/nis.schema include /etc/openldap/schema/misc.schema inlcude /etc/openldap/schema/sudoers.schema include /etc/openldap/schema/openldap.schema [root@ldap ldif]# ldapadd -h ldap -a -w secret -x -D "cn=Manager,dc=acadaca,dc=net" -f /home/tim/txt/ldif/acadaca-master.ldif adding new entry "cn=defaults,ou=sudoers,ou=Services,dc=acadaca,dc=net" ldapadd: Invalid syntax (21) additional info: objectClass: value #1 invalid per syntax Why this ldif will work in one directory but not another is a mystery at this point.. thanks again -- Here's my RSA Public key: gpg --keyserver pgp.mit.edu --recv-keys 5A4873A9 Share and enjoy!!

1 0

Copying root partition
by Timothy Murphy 04 Nov '10

04 Nov '10

I recently transferred the / partition on my CentOS server from a small disk to a large disk, using "rsync -auvz". This works fine, except that I get dozens of selinux warnings when I re-boot. I'm running selinux in permissive mode. Is there any way to make sure that all the files in a partition are kosher as far as selinux is concerned? -- Timothy Murphy e-mail: gayleard /at/ eircom.net tel: +353-86-2336090, +353-1-2842366 s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland

5 4

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss November 2010