November 2010 - Discuss - lists.centos.org

Memory vs. Display Card
by Rick 28 Oct '25

28 Oct '25

Since memory has become quite cheap lately I decided to move from 2 GB to 6. When I installed the memory every thing was fine until I went to run level 5. At that point the screen turned to garbage and the system froze. Is there a way to fix this so I can use the memory I bought? Do I need a new display card? Current hardware: Intel D975XBX2 Motherboard VGA compatible controller: ATI Technologies Inc RV505 [Radeon X1550 64-bit] -- http://www.spinics.net/lists/

13 19

Centos v3.3 CD 2
by Luis-Miguel Astudillo 15 Nov '11

15 Nov '11

Sorry, I have been away for a while. has anyone fixed CD2 fotr CentOS v3.3 ? -- Luis

6 7

Redirecting PHP error messages into a log file
by Alexander Farber 29 Jun '11

29 Jun '11

Hello, I'm using CentOS release 5.5 x86_64 with the stock php-5.1.6-27.el5 and would like to redirect PHP messages into /var/log/httpd/php_log First I tried adding that file name to /etc/php.ini: error_log = "/var/log/httpd/php_log" and restarted httpd, but the file didn't appear. I've touched it and changed owner to apache.apache, but that didn't help. Then I've changed that line to error_log = syslog and now I get the messages in /var/log/messages: Jul 29 21:29:24 hXXX httpd: PHP Notice: Undefined index: REMOTE_ADDR in /var/www/html/odnoklassniki/index.php on line 44 Jul 29 21:29:45 hXXX httpd: PHP Parse error: syntax error, unexpected '[' in /var/www/html/odnoklassniki/index.php on line 44 I still would like to move those message to a separate file though, so I've added the following line to /etc/syslog.conf and reloaded syslogd service: httpd.* /var/log/httpd/php_log but the file is still empty. Any hints please? Thank you Alex -- http://preferans.de

6 6

Lingering dhclient issue
by Alfred von Campe 22 Jun '11

22 Jun '11

I recently reconfigured some CentOS 4.3 systems that were using DHCP to use static IP addresses. At the same time, the systems were moved to a new VLAN. Here is the approximate sequence of events that took place: 1. ifdown eth0 2. edit /etc/sysconfig/network-scripts/ifcfg-eth0 with static IP address 3. wait for network folks to reconfigure switch 4. ifup eth0 I may have reversed steps 1 and 2 on some of the systems. The problem was that the dhclient process didn't go away, and kept renewing the old lease. Our DHCP server is configured to contact the DNS server and update the entry for each host it serves. So the DNS entries for these systems were pointing to the old address in the old VLAN. The eth0 interface itself just kept the static IP address for which it was configured. It took me a while to figure out what was going on. My question is, what could I have done to avoid this (other than killing the dhclient process)? Is there a better way to reconfigure an interface to use a static address? I am not interested in solutions that involve using a GUI (i.e., only command line solutions). Thanks, Alfred

9 17

Re: [CentOS] Issue with Perl and rpmforge - advice? - SOLVED
by Mark 13 Jun '11

13 Jun '11

On Wed, Sep 1, 2010 at 6:51 PM, Mark <mhullrich(a)gmail.com> wrote: > I have an old version of rkhunter installed on my CentOS 5 machine, > one I got from rpmforge. > > In my most recent attempts to update this, I get the following errors in yum: > : > --> Finished Dependency Resolution > perl-AnyEvent-5.240-1.el5.rf.noarch from rpmforge has depsolving problems > --> Missing Dependency: perl(Net::SSLeay) >= 1.33 is needed by > package perl-AnyEvent-5.240-1.el5.rf.noarch (rpmforge) > Error: Missing Dependency: perl(Net::SSLeay) >= 1.33 is needed by > package perl-AnyEvent-5.240-1.el5.rf.noarch (rpmforge) The solution (from the rpmforge users list) was to exclude perl-AnyEvent. Just thought you should know.... Mark

4 4

To PAE or not to PAE...
by John Doe 16 Apr '11

16 Apr '11

Hi, I was wondering if anyone would know the cons of running a PAE kernel...? I have a 4GB pc and was wondering if it was worth going the PAE way to gain those exta 700MB... In the past, I heard that these 700MB were normally reserved for bios or chipset stuff... And that running in PAE would slow down some processes. By the way, I know 64 bits would solve this dilemn but right now I am 32bits... Thx, JD

13 22

CentOS MD RAID 1 on Openfiler iSCSI
by Emmanuel Noobadmin 01 Mar '11

01 Mar '11

Has anybody tried or knows if it is possible to create a MD RAID1 device using networked iSCSI devices like those created using OpenFiler? The idea I'm thinking of here is to use two OpenFiler servers with physical drives in RAID 1, to create iSCSI virtual devices and run CentOS guest VMs off the MD RAID 1 device. Since theoretically, this setup would survive both a single physical drive failure as well as a machine failure on the storage side with a much shorter failover time than say using heartbeat. Or is this yet another stupid idea again from me? :D

9 36

what pkg contains libstdc++-libc6.2-2.so.3
by Fong Vang 02 Feb '11

02 Feb '11

In CentOS 4.1/2, what package contains this library: libstdc++-libc6.2-2.so.3? I installed a couple of the compat- packages, but this library is still missing.

8 8

libsrtp package anywhere?
by Bob Beers 26 Jan '11

26 Jan '11

Hi list, I'm trying to create an asterisk 1.8 rpm with SRTP. I found mention of a libsrtp rpm, <http://qutecom.ipex.cz/RPMS/srtp-1.4.4-1.i386.rpm > in these instructions, <http://www.voip-info.org/wiki/view/Asterisk+SRTP> but it is unreachable (by me, anyway). The libSRTP source is here, <http://srtp.sourceforge.net/download.html>. Has this already been packaged for CentOS 5? Thanks, -Bob Beers

3 13

gdm_slave_xioerror_handler problem
by sync 07 Jan '11

07 Jan '11

Hi , guys: Today , I work on my laptop which uses the CentOS x86_64 operating system , Suddenly the X-windows restarts when left at the login screen for more than a few seconds. The error in my syslog is: Apr 12 15:26:45 localhost gdm[2892]: gdm_slave_xioerror_handler: Fatal X error - Restarting :0 This message came up serval times previously ~ Any other help would be nice. Thanks in advance ~

2 1

Problem with SSHD update.
by James B. Byrne 07 Jan '11

07 Jan '11

This morning I applied the 13 or so new updates to my servers. On one of them the ssh service and clients stopped working immediately after the update. I restarted the server in anticipation that there might be some instability introduced by updating on a system with active ssh connections. However, this has not cleared the problem. The packages in question are: openssh.i386 0:4.3p2-41.el5_5.1 openssh-askpass.i386 0:4.3p2-41.el5_5.1 openssh-clients.i386 0:4.3p2-41.el5_5.1 openssh-server.i386 0:4.3p2-41.el5_5.1 The error I am getting when attempting to start the sshd service is this: Starting sshd: Auto configuration failed 6486:error:0E065068:configuration file routines:STR_COPY:variable has no value:conf_def.c:629:line 207 [FAILED] Can anyone reading this inform me as to what this means, what the likely cause is, and how it may be repaired? I have webmin access to the server and, as it is inside our firewall I can probably enable telnet to get a terminal window do carry out modifications. But I need to know what it is that I need to modify. Alternatively, can anyone point me to a reference regarding removing the current version of openssh and reverting to the prior version, which worked with presumably the same user configuration that the present version does not accept. The only references that I can find respecting this error message are all several years old and some of them suggest that their is a problem with accessing or using /dev/random or /dev/urandom. This matter is somewhat urgent. I have temporarily routed essential ssh connections through a spare host but the box affected sits in front of our legacy systems providing secure access to them as their native OSs and telecom protocols do not support encryption. It is very important that the SSHD service be restored on this host as soon as is possible. Any help with this is gratefully appreciated. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

12 20

SELinux - way of the future or good idea but !!!
by Alison 07 Jan '11

07 Jan '11

Hi, total newbie on CentOS. Just firing up an install of 5.5 on a development webserver. Installed Webmin, Awstats, PHPMyAdmin and Drupal successfully. Yet to work on Sendmail and Samba. SELinux in enforcing mode, reporting "SELinux preventing ifconfig (ifconfig_t) "read write" to /var/webminsessiondb.pag (var_t)". Googled the error message without real success in finding fix - bug reports showing. Question is whether worth pursuing as SELinux is the way of the future. Or is SELinux a good idea that never really made it's way into the sun. Thoughts please. Alison PS. Semi-retired. Cut my teeth as sys prog on RSX11-M systems eons ago.

40 176

Re: [CentOS] Optimal VPN
by J.Witvliet＠mindef.nl 10 Dec '10

10 Dec '10

-----Original Message----- > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos > My sense is that openvpn is the easiest to configure, the most robust and fault tolerant, as far as keeping connections up and reestablishing failed connections. The downside of openvpn is incompatibility with most mobile devices, not relevant if you are able to install openvpn clients. You can configure fixed IP addresses using either the ccd files or the client-connect script. Based on other discussussions on the list my recollection is that IPSEC provides better performance if you need GigE or better data rates on your VPNs. My sense is that IPSEC may be more difficult to configure and less robust at keeping connections up, but this has probably improved in recent years. The main advantage to pptp that I see is compatibility with mobile devices. A disadvantage of PPTP, as far as I know it cannot easily be tunneled through something like a linux firewall because it uses non-standard protocol packets (not TCP/UDP). Both OPENVPN and IPSEC can easily be tunneled through most firewalls. Though I have not researched this extensively, just based on watching list of security updates that get released for Centos, Fedora etc, It seems that OPENVPN has had very few security issues. I have definely seen a few for strongswan and openswan (both are IPSEC implementations). Again this is just gut feeling, not the result of any investigation. I do note though that OPENVPN runs easily in a chroot environment, just by enabling options in the config file. I'm not sure if openswan or strongswan can do this. Nataraj _______________________________________________ Hi, If you don't use any fancy features, OpenVPN is rather easy to set up. Additional effort is needed with: -certificates -routing -smartcards Exactly _the same troubles_ you will encounter with ipsec (though i have only used with strongswan) If it is only master/slave configuration, openvpn will do, for a more complex topology (meshed) consider ipsec Will you be confronted with IPv6 in the (not so) near future? Forget OpenVPN, it is still beta there, while it has been implemented in strongswan for ages, and part of there standard test plan. Furthermore, openvpn is only compatible with openvpn, while using ipsec you might be able to connect to other boxes. If you can install software on both ends, openvpn is available for many platforms. hw ______________________________________________________________________ Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten. This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages.

6 6

Optimal VPN
by tony.chamberlain＠lemko.com 09 Dec '10

09 Dec '10

I am looking for the optimal VPN. Well it doens't have to be that elaborate. Just the best VPN. We currently have some customers using PPTP, some using openvpn, some using Cisco Any Connect and there are a few others. So my question is, if you have control of both ends (client and server) what is the best VPN to use? There are not too many requirements, but a big one is The VPN must return the same IP address to the same user each time That is there must be a specific IP address assigned to a user/password combination. pptp does not really do this but I wrote sort of a backend (or maybe frontend? ;-) ) to change the IP address assigned based on a login and password. It is extra stuff I would prefer not to do though.

9 10

Any chance to get a working, current openldap srpm/rpm for centos 5.5
by Götz Reinicke - IT-Koordinator 06 Dec '10

06 Dec '10

Hello, is there anyone out there, who has a current 2.4.23 srpm or good how to compile it from src with supported db4? I tried to compile recent source files, but always finding the current (installed) db4 >4.3 fails. Than I tried to compile the LTB Project Files: http://ltb-project.org/wiki/documentation/openldap-rpm May be it is just a small step or option to be set. Would be nice to get it working :-) Thanks and best regards Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzende des Aufsichtsrats: Prof. Dr. Claudia Hübner Geschäftsführer: Prof. Thomas Schadt

5 7

how to separate individual logs?
by hadi motamedi 04 Dec '10

04 Dec '10

Dear All I have captured a file in my centos showing logs captured from many modules concurrently. Please find attached a sample of the file. As you see, there are logs from individual modules that have been captured concurrently. For example, there are logs from IPTR,SNMP,HLR,TCAP,XAPP,and SCCP modules but they are coming concurrently.Each log has the header name of its accompanied module in the beginning. I need to have the log of each modules separately. Can you please show me the power of centos on how to separate individual module's logs from the whole? Thank you

7 21

rsyslog as default syslog daemon?
by Andrej Moravcik 01 Dec '10

01 Dec '10

Hi all! Is anybody here using rsyslog? I am looking for the right solution how to use rsyslog in CentOS 5 as the default logging daemon. We use it because of filtering using regular expressions. I switched from sysklogd to rsyslog simply using chkconfig --del syslog chkconfig --add rsyslog chkconfig rsyslog on service syslog stop service rsyslog start but this seems not to be "bullet-proof" solution - when yum automaticaly install updates, sysklogd rpm package runs postinstall scriptlet which unfortunately returns sysklogd back to game (and breaks logging based on regex). # rpm -q --scripts sysklogd postinstall scriptlet (using /bin/sh): if [ "$1" -ge 1 ]; then /sbin/chkconfig --add syslog <<HERE for n in /var/log/{messages,secure,maillog,spooler} do [ -f $n ] && continue touch $n chmod 600 $n done /sbin/service syslog condrestart > /dev/null 2>&1 fi exit 0 ... # chkconfig --list syslog syslog 0:off 1:off 2:on 3:on 4:on 5:on 6:off Meanwhile, automatic update of rsyslog package results (thanks to postinstall scriptlet) into disabled rsyslog :-/ ... # rpm -q --scripts rsyslog postinstall scriptlet (using /bin/sh): /sbin/chkconfig --add rsyslog <<HERE for n in /var/log/{messages,secure,maillog,spooler} do [ -f $n ] && continue umask 066 && touch $n done ... # chkconfig --list rsyslog rsyslog 0:off 1:off 2:off 3:off 4:off 5:off 6:off - uninstalling sysklogd package will not solve the problem of disabling rsyslog after yum update. Or should I uninstall it and simply change '# chkconfig:' part of rsyslog rc script? - I don't want to disable automatic updates of sysklogd and rsyslog packages using /etc/yum.conf:exclude=... bacause of security reasons. - I think about using 'alternatives', but I am not sure if it is the appropriate solution. - should I report to Red Hat's bugzilla? Maybe I overlooked something in documentation. Thank you for any advice and patience. Andrej

2 2

Converting to Raid1
by Matt 01 Dec '10

01 Dec '10

Have a CentOS 4.x 32 bit server running on a single 500M SATA drive. What is easiest way to convert too RAID 1 on it? Anyone have a link? Would be open to hardware or software just do not want to reinstall the entire mess.

4 3

Minimising disk I/O
by Keith Roberts 01 Dec '10

01 Dec '10

I'd like to get disk I/O down to a minimum for my new Centos 5.5 installation. The machine will not be used as a web server anymore, as that's now hosted on a cloud platform. So there are no HTTP requests coming down the line. If I move the SWAP partition and /var/log/ to a small spare drive, and install Centos on the new larger drive, is there anything else that would cause disk activity on the main drive, when the machine is running but not in use? fetchmail will be collecting my email hourly, but I'd like the drive to spin down and go into hibernate mode if possible. I have a backup drive that gets woken up once an hour to backup email, and also during the night to make backups of specified directories every 24 hours. Apart from that, the drive is not in use, unless I run a backup script manually. So I'm hoping to do the same for the main drive if that's posible? Kind Regards, Keith Roberts -- In theory, theory and practice are the same; in practice they are not. This email was sent from my laptop with Centos 5.5

3 4

Samsung CLP-325W network connection?
by Timothy Murphy 01 Dec '10

01 Dec '10

Anyone got this working over a LAN under CentOS? The instructions claim it is easy to connect after pressing the WPS button on printer and router. Sadly, I don't see a WPS button on my Linksys WRT54GL router. When I press the WPS button on the printer the WiFi icon flashes, but I don't see any attempt to connect in /var/log/messages on my CentOS-5.5 server. Any advice or suggestions gratefully received. -- Timothy Murphy e-mail: gayleard /at/ eircom.net tel: +353-86-2336090, +353-1-2842366 s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland

4 8

Help with yum and cpio: MD5 sum mismatch
by James B. Byrne 01 Dec '10

01 Dec '10

I am trying to install Ruby-1.8.7p302 on a CentOS-5.5 server in preparation for a Rails-3 application deployment. I have downloaded the source from Rubyforge.org, unpacked it, and ran ./config and make. Everything built without error. I then ran checkinstall to create an rpm package. That too completed without error. However, when I try to install the resulting package using: yum localinstall /path/to/package --nogpgcheck I get this message: . . . Running Transaction Installing : ruby-1.8.7 1/1 Error unpacking rpm package ruby-1.8.7-p302-1.i386 error: unpacking of archive failed on file /usr/bin/make;4cf56119: cpio: MD5 sum mismatch Failed: ruby-1.8.7.i386 0:p302-1 Does anyone here know how to work around this? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

Re: [CentOS] SELinux - way of the future or good idea but !!!
by brett mm 01 Dec '10

01 Dec '10

> > This is where, as a sysadmin, you need to invest just a little time and > effort learning the system. Honestly, the vast majority of issues are > trivial to solve if you just spend a few hours reading the docs/guides, > and even if you really can't be bothered there are kind folks on this > list (and others) that will likely solve your issues for you. How is > that not worth the extra security SELinux affords? > In reality, I am not at all sure that a quantum leap in complexity adds to security at all. Any proper use of old-school group permissions can give as finely-grained a security policy as you would like. The time spent running SELinux in permissive mode to configure could better be spent looking for holes in the operating system, or helping patch the many bugs that the speedy Linux development schedule lets through: http://lwn.net/Articles/409954/ And then we could have real security, and not a false sense of security generated by heavy-sounding phrases like "mandatory access controls." :-)

18 39

linux-2.6.18.tar.bz2 is missing
by Pascal Robert 30 Nov '10

30 Nov '10

We have to rebuild our kernel to add support for a Mainpine fax board on a CentOS 5.5 board: http://www.hylafax.org/content/Handbook:Basic_Server_Configuration:Modem-sp… We followed all steps, but when calling rpmbuild, we are getting: [root@hylafax SPECS]# rpmbuild -ba --target x86_64 kernel-2.6.spec Construction pour plate-formes cibles: x86_64 Construction pour cible x86_64 erreur: Fichier /usr/src/redhat/SOURCES/linux-2.6.18.tar.bz2: Aucun fichier ou répertoire de ce type So it doesn't find linux-2.6.18.tar.bz2 We do have both the kernel-devel and kernel-headers packages installed, so I don't understand why that file is missing. Googling for "linux-2.6.18.tar.bz2 is missing" didn't bring any useful info. So where/how can we rebuild or get that archive?

4 5

CF disks images and centos
by Jerry Geis 30 Nov '10

30 Nov '10

Hi all, I have 8G -CF cards that I have been putting linux on. Everything was working fine till yesterday when I got a new batch of CF cards. The size has changed. The original CF card was 7637M (255 heads/63 sectors/928 cylinders) The new CF card is 8019M (255 heads/63 sectors/974 cylinders) I would have thought putting the smaller image file onto the larger CF card would be ok. However its not. centos boots but there are journal issues and everything is mounted read-only. Any ideas why this doesnt work or how I can keep my smaller image and "succecssfully" put it on the larger CF card? I simply do "dd if=cf.img of=/dev/sde" to copy the images to CF. Thanks, Jerry

5 9

ssh-agent fails to hold values
by bluethundr 30 Nov '10

30 Nov '10

Hello list I am attempting to manage my key logins with ssh-agent. However EVERY time I try to ssh I have to go through the same exact routing and it's getting a little old... [bluethundr@LCENT01:~]#ssh sum3 Enter passphrase for key '/home/bluethundr/.ssh/id_rsa': [bluethundr@LCENT01:~]#exec ssh-agent bash [bluethundr@LCENT01:~]#ssh-add Enter passphrase for /home/bluethundr/.ssh/id_rsa: Identity added: /home/bluethundr/.ssh/id_rsa (/home/bluethundr/.ssh/id_rsa) [bluethundr@LCENT01:~]#ssh sum3 Last login: Sun Nov 28 14:32:34 2010 from localhost.localdomain ######################################################### # SUMMITNJHOME.COM # # TITLE: LCENT03 BOX # # LOCATION: SUMMIT BASEMENT # # # ######################################################### [bluethundr@LCENT03:~]# Does anyone have any suggestions to make ssh-agent hold these values a bit more persistently? thanks!! -- Here's my RSA Public key: gpg --keyserver pgp.mit.edu --recv-keys B6D6EAC3

4 8

yum/RPM Problem: several packages with the same name were installed, how to remove one of them ?
by giggzounet 30 Nov '10

30 Nov '10

Hi, We have a cluster with CentOS 5.5 installed with oscar. The firm which has pre-installed the cluster has done strange things...and now I get problems: - if I understand correctly what was done, several infiniband CentOS packages were installed (compat-dapl, compat-dapl-devel, compat-dapl-utils, libibcm, libibverb, librdmacm, mpi-selector). - Then the tar package from OFED was installed. This archive contains rpm packages too...and were installed. - So on our nodes we have several versions of "compat-dapl, compat-dapl-devel, compat-dapl-utils, libibcm, libibverb, librdmacm, mpi-selector". I would like to remove the package from CentOS (in order to have homogen OFED environment). How can I do that ? These packages target the sames files...If I remove the package of CentOS, will it erase all the files in common ? how does rpm/yum behave in this situation ? Best regards, Guillaume

2 1

( SOLVED ) Hostname too long
by Johan Scheepers 30 Nov '10

30 Nov '10

Good day, Some time ago I asked some assistance for the long hostname in the terminals. Editing .bashrc in user and root by adding PS1=xxxxxxx did make the difference. Here is something I picked up on another list that make editing .bashrc not necessary. as root.. gedit /etc/sysconfig/network # HOSTNAME=localhost.localdomain change to in my case and that solves the problem HOSTNAME=johan.jan Regards Johan

1 0

centos 5.5 - which partition manager installed
by Johan Scheepers 30 Nov '10

30 Nov '10

Good day, Gparted is not available on my installation. Which patition tool is available in centos 5.5 please. Thanks Johan

7 10

pcscd
by m.roth＠5-cent.us 30 Nov '10

30 Nov '10

Anyone working with/using it? One thing that's driving me nuts is that it keeps spitting garbage into the logs (card absent or mute!!!). I just tried editing /etc/init.d/pcscd - there's *no* way to pass parms from the config file - and set the logging level to --error, and it's still doing it. Clues for the poor, to shut it up? mark

2 3

yum/RPM behaviour: does yum/RPM overwrite a file modified by a user during an update ?
by giggzounet 29 Nov '10

29 Nov '10

Hi, On our cluster with CentOS 5.5, I have a little problem with a script for infiniband (this problem: http://web.archiveorange.com/archive/v/NUQmuN84gd3D31Fdl8PU) So the fix a very easy. But what will yum/RPM do during the next update ? Will it overwrite the file ? Will it write on display that the file was modified by an user (as under debian) ? Thx a lot, Best regards, Guillaume

5 10

the wandering MAC?
by Boris Epstein 29 Nov '10

29 Nov '10

Hi all, I have what appears to be a truly puzzling problem. I've got this P4 32-bit machine running CentOS 5.5 with XEN that has two NICs: one onboard, an Intel Corporation 82540EM Gigabit and one on an expansion card, Realtek Semiconductor Co., Ltd. RTL-8169 Gigabit. The second one is recognized as eth1. What's happening is, it is showing up under one of the two MAC's: either 00:0a:cd:1a:c1:71 or 00:00:00:00:c1:71. If you reboot it the MAC stays the same; if you shutdown and do a full powerdown it seems to change. Obviously, after it goes from one MAC to another you have to play with the start-up scripts for this interface to start up correctly and this becomes a major annoyance. Any idea what all of this mess could mean? Thanks. Boris.

6 8

rpm dependencies
by bluethundr 29 Nov '10

29 Nov '10

I have successfully created a packaged version of openssh that has the LPK patch. LPK allows you to store your public keys in LDAP. However when I go to install the package I created it complains about dependencies: [root@VIRTCENT13:/home/bluethundr/rpm]#rpm -Uvh openssh-5.6p1-1.i386.rpm error: Failed dependencies: openssh = 5.5p1-1.el5 is needed by (installed) openssh-clients-5.5p1-1.el5.i386 openssh = 5.5p1-1.el5 is needed by (installed) openssh-server-5.5p1-1.el5.i386 how can I get past this? thanks!! -- Here's my RSA Public key: gpg --keyserver pgp.mit.edu --recv-keys B6D6EAC3

3 5

yum is dumb in update of gmime & gmime-sharp
by ken 29 Nov '10

29 Nov '10

# yum update ... --> Running transaction check --> Processing Dependency: gmime = 2.2.10-5.el5.centos for package: gmime-sharp ---> Package gmime20.i386 0:2.2.26-1.el5.rf set to be updated --> Finished Dependency Resolution gmime-sharp-2.2.10-5.el5.centos.i386 from installed has depsolving problems --> Missing Dependency: gmime = 2.2.10-5.el5.centos is needed by package gmime-sharp-2.2.10-5.el5.centos.i386 (installed) Error: Missing Dependency: gmime = 2.2.10-5.el5.centos is needed by package gmime-sharp-2.2.10-5.el5.centos.i386 (installed) ... # rpm -q gmime gmime-sharp gmime-2.2.10-5.el5.centos gmime-sharp-2.2.10-5.el5.centos This would seem like a bug... or why is yum trying to install package versions which are already installed? Yes, I already ran package-cleanup --problems, package-cleanup --dupes, and rpm -Va --nofiles --nodigest

3 10

directory services and root/sudo access
by Iain Morris 29 Nov '10

29 Nov '10

This is perhaps a more general security question. For those of you with a directory services installation, do you install a generic local user with sudo access in case directory services is not available? Or do you just beef up your directory services to the point that you are confident it will almost always be up? I usually disable root login via ssh, but allow it from the physical console, and make an emergency generic account with sudo privs in case DS breaks down. What I've noticed, however, is if I simulate a directory services failure, ssh logins with this generic local account take an eternity as the server still tries to auth that user against ldap/kerberos first. I'm sure this could be adjusted in pam in some way. I was just curious how other admins approach this, and what level of trust they place in directory services being available. -- -- - Iain Morris iain.t.morris(a)gmail.com

2 1

opensc/ct/etc
by m.roth＠5-cent.us 29 Nov '10

29 Nov '10

Has anyone worked with the upstream installation for 5.5, and successfully told it to ->shut up<- when you pull your smart card out of the reader? Since you can't add parms in /etc/reader.conf, or in a file in /etc/reader.conf.d, I tried editing /etc/init.d/pcscd to tell it error level and above logging only, and it ignores it, and writes over and over that the card is "mute or absent", filling my logs. mark

1 0

Rebuilding samba3x rpms results in size doubled
by Oguz Yilmaz 29 Nov '10

29 Nov '10

Hi, I have rebuilt samba3x SRPM in Centos 5.5. The resultings RPM's are nearly in triple size of the original RPMs. I have installed and checked the binary files are stripped. What can result in such difference in RPM sizes? I have not changed anything on built and install sections of spec file. Regards, Some files and sizes in original samba3x rpm: -rwxr-xr-x 1 root root 17904 Mar 31 2010 recycle.so -rwxr-xr-x 1 root root 18156 Mar 31 2010 shadow_copy2.so -rwxr-xr-x 1 root root 9668 Mar 31 2010 shadow_copy.so -rwxr-xr-x 1 root root 13844 Mar 31 2010 smb_traffic_analyzer.so -rwxr-xr-x 1 root root 13796 Mar 31 2010 streams_depot.so -rwxr-xr-x 1 root root 17984 Mar 31 2010 streams_xattr.so -rwxr-xr-x 1 root root 5560 Mar 31 2010 syncops.so -rwxr-xr-x 1 root root 17744 Mar 31 2010 xattr_tdb.so -rwxr-xr-x 1 root root 22052 Mar 31 2010 /usr/lib/samba/vfs/acl_tdb.so -rwxr-xr-x 1 root root 17920 Mar 31 2010 /usr/lib/samba/vfs/acl_xattr.so -rwxr-xr-x 1 root root 9668 Mar 31 2010 /usr/lib/samba/vfs/audit.so -rwxr-xr-x 1 root root 14060 Mar 31 2010 /usr/lib/samba/vfs/cap.so -rwxr-xr-x 1 root root 5448 Mar 31 2010 /usr/lib/samba/vfs/default_quota.so -rwxr-xr-x 1 root root 5512 Mar 31 2010 /usr/lib/samba/vfs/dirsort.so -rwxr-xr-x 1 root root 9600 Mar 31 2010 /usr/lib/samba/vfs/expand_msdfs.so -rwxr-xr-x 1 root root 13832 Mar 31 2010 /usr/lib/samba/vfs/extd_audit.so -rwxr-xr-x 1 root root 5444 Mar 31 2010 /usr/lib/samba/vfs/fake_perms.so -rwxr-xr-x 1 root root 9644 Mar 31 2010 /usr/lib/samba/vfs/fileid.so -rwxr-xr-x 1 root root 31312 Mar 31 2010 /usr/lib/samba/vfs/full_audit.so -rwxr-xr-x 1 root root 9696 Mar 31 2010 /usr/lib/samba/vfs/netatalk.so -rwxr-xr-x 1 root root 9636 Mar 31 2010 /usr/lib/samba/vfs/preopen.so -rwxr-xr-x 1 root root 9584 Mar 31 2010 /usr/lib/samba/vfs/readahead.so -rwxr-xr-x 1 root root 17752 Mar 31 2010 /usr/lib/samba/vfs/readonly.so -rwxr-xr-x 1 root root 17904 Mar 31 2010 /usr/lib/samba/vfs/recycle.so -rwxr-xr-x 1 root root 9668 Mar 31 2010 /usr/lib/samba/vfs/shadow_copy.so -rwxr-xr-x 1 root root 18156 Mar 31 2010 /usr/lib/samba/vfs/shadow_copy2.so -rwxr-xr-x 1 root root 13844 Mar 31 2010 /usr/lib/samba/vfs/smb_traffic_analyzer.so -rwxr-xr-x 1 root root 13796 Mar 31 2010 /usr/lib/samba/vfs/streams_depot.so -rwxr-xr-x 1 root root 17984 Mar 31 2010 /usr/lib/samba/vfs/streams_xattr.so -rwxr-xr-x 1 root root 5560 Mar 31 2010 /usr/lib/samba/vfs/syncops.so -rwxr-xr-x 1 root root 17744 Mar 31 2010 /usr/lib/samba/vfs/xattr_tdb.so -rwxr-xr-x 1 root root 2502552 Mar 31 2010 /usr/sbin/nmbd -rwxr-xr-x 1 root root 6807276 Mar 31 2010 /usr/sbin/smbd Some files and sizes in mine samba3x rpm: -rwxr-xr-x 1 root root 62018 Nov 26 14:50 recycle.so -rwxr-xr-x 1 root root 72876 Nov 26 14:50 shadow_copy2.so -rwxr-xr-x 1 root root 44528 Nov 26 14:50 shadow_copy.so -rwxr-xr-x 1 root root 54391 Nov 26 14:50 smb_traffic_analyzer.so -rwxr-xr-x 1 root root 56096 Nov 26 14:50 streams_depot.so -rwxr-xr-x 1 root root 63394 Nov 26 14:50 streams_xattr.so -rwxr-xr-x 1 root root 42007 Nov 26 14:50 syncops.so -rwxr-xr-x 1 root root 63989 Nov 26 14:50 xattr_tdb.so -rwxr-xr-x 1 root root 68818 Nov 26 14:50 /usr/lib/samba/vfs/acl_tdb.so -rwxr-xr-x 1 root root 60184 Nov 26 14:50 /usr/lib/samba/vfs/acl_xattr.so -rwxr-xr-x 1 root root 46167 Nov 26 14:50 /usr/lib/samba/vfs/audit.so -rwxr-xr-x 1 root root 60597 Nov 26 14:50 /usr/lib/samba/vfs/cap.so -rwxr-xr-x 1 root root 37894 Nov 26 14:50 /usr/lib/samba/vfs/default_quota.so -rwxr-xr-x 1 root root 40378 Nov 26 14:50 /usr/lib/samba/vfs/dirsort.so -rwxr-xr-x 1 root root 44448 Nov 26 14:50 /usr/lib/samba/vfs/expand_msdfs.so -rwxr-xr-x 1 root root 51756 Nov 26 14:50 /usr/lib/samba/vfs/extd_audit.so -rwxr-xr-x 1 root root 37428 Nov 26 14:50 /usr/lib/samba/vfs/fake_perms.so -rwxr-xr-x 1 root root 46429 Nov 26 14:50 /usr/lib/samba/vfs/fileid.so -rwxr-xr-x 1 root root 95070 Nov 26 14:50 /usr/lib/samba/vfs/full_audit.so -rwxr-xr-x 1 root root 48276 Nov 26 14:50 /usr/lib/samba/vfs/netatalk.so -rwxr-xr-x 1 root root 48882 Nov 26 14:50 /usr/lib/samba/vfs/preopen.so -rwxr-xr-x 1 root root 43154 Nov 26 14:50 /usr/lib/samba/vfs/readahead.so -rwxr-xr-x 1 root root 62346 Nov 26 14:50 /usr/lib/samba/vfs/readonly.so -rwxr-xr-x 1 root root 62018 Nov 26 14:50 /usr/lib/samba/vfs/recycle.so -rwxr-xr-x 1 root root 44528 Nov 26 14:50 /usr/lib/samba/vfs/shadow_copy.so -rwxr-xr-x 1 root root 72876 Nov 26 14:50 /usr/lib/samba/vfs/shadow_copy2.so -rwxr-xr-x 1 root root 54391 Nov 26 14:50 /usr/lib/samba/vfs/smb_traffic_analyzer.so -rwxr-xr-x 1 root root 56096 Nov 26 14:50 /usr/lib/samba/vfs/streams_depot.so -rwxr-xr-x 1 root root 63394 Nov 26 14:50 /usr/lib/samba/vfs/streams_xattr.so -rwxr-xr-x 1 root root 42007 Nov 26 14:50 /usr/lib/samba/vfs/syncops.so -rwxr-xr-x 1 root root 63989 Nov 26 14:50 /usr/lib/samba/vfs/xattr_tdb.so -rwxr-xr-x 1 root root 6293564 Nov 26 14:50 /usr/sbin/nmbd -rwxr-xr-x 1 root root 18057363 Nov 26 14:50 /usr/sbin/smbd -- Oguz YILMAZ

4 4

can't use godaddy SSL cert
by bluethundr 28 Nov '10

28 Nov '10

Hey list, I was having a similar SSL/openLDAP problem to this last week. I had a chance to look at this again today and it still appears to not be working. I called godaddy and had the last cert cancelled and reissued as I had mis-typed the name of the CN on the last one. I am trying to setup a Godaddy turbo SSL certificate with an openLDAP 2.4 server under FreeBSD 8.1. The clients are mainly a network of virtual CentOS 5.5 instances. [root@LBSD2:/usr/home/bluethundr]#pkg_info | grep openldap openldap-sasl-client-2.4.23 Open source LDAP client implementation with SASL2 support openldap-sasl-server-2.4.23 Open source LDAP server implementation I have setup the certificate chain in my slapd.conf like so: [root@LBSD2:/usr/home/bluethundr]#grep -i tls /usr/local/etc/openldap/slapd.conf## TLS options for slapd TLSCipherSuite HIGH:MEDIUM:+SSLv2 TLSCertificateFile /usr/local/etc/openldap/cacerts/LBSD2.summitnjhome.com.crt TLSCertificateKeyFile /usr/local/etc/openldap/cacerts/slapd.pem TLSCACertificateFile /usr/local/etc/openldap/cacerts/sf_issuing.crt I have tried each of the following certs with no luck in getting my cert to talk to it's CA: -rw-r--r-- 1 root bluethundr 2604 Nov 25 11:37 ca_bundle.crt -r--r----- 1 root ldap 4604 Nov 24 18:57 gd_bundle.crt -r--r----- 1 root ldap 1537 Nov 25 02:00 sf_issuing.crt and I get the same result for each when I attempt to connect to SSL on the LDAP server: [root@LCENT01:/tmp/Foswiki-1.1.2]#openssl s_client -connect ldap.example.com:389 -showcerts -CAfile sf_issuing.crt 13730:error:02001002:system library:fopen:No such file or directory:bss_file.c:122:fopen('sf_issuing.crt','r') 13730:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:125: 13730:error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib:by_file.c:279: CONNECTED(00000003) 13730:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188: ldapsearch -h ldap.example.com -d -1 -ZZ "dc=example,dc=com" TLS certificate verification: depth: 0, err: 20, subject: /O=LBSD2.summitnjhome.com/OU=Domain Control Validated/CN=LBSD2.summitnjhome.com, issuer: /C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certificates.godaddy.com/repository/CN=Go Daddy Secure Certification Authority/serialNumber=07969287 TLS certificate verification: Error, unable to get local issuer certificate tls_write: want=7, written=7 0000: 15 03 01 00 02 02 30 ......0 TLS trace: SSL3 alert write:fatal:unknown CA TLS trace: SSL_connect:error in SSLv3 read server certificate B TLS trace: SSL_connect:error in SSLv3 read server certificate B TLS: can't connect. ldap_perror ldap_start_tls: Connect error (-11) additional info: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed It seems to indicate that it can't talk to it's CA... does anyone have any suggestions on how to make this work? thanks! -- Here's my RSA Public key: gpg --keyserver pgp.mit.edu --recv-keys B6D6EAC3

2 2

Re: [CentOS] simple website hit counter
by Les Bell 27 Nov '10

27 Nov '10

John Hinton <webmaster(a)ew3d.com> wrote: >> You set it to run once per day against the logs for that website... normally around midnight. The loads aren't that bad. The reporting I think defaults to 12 months of stored data which is stored normally in a directory in the web root for that website. That directory of course can be protected by something like htaccess. << Just a heads up: the Webalizer report logs are not managed by logrotate, and will continue to accumulate indefinitely. I had a server fall over a couple of months ago when /var filled up; after a little du'ing, I discovered that the thing had three and a half years' worth of Webalizer logs taking up a lot of space. Best, --- Les Bell [http://www.lesbell.com.au] Tel: +61 2 9451 1144

1 0

centos-5.5 VS Firefox 3.6.12
by fred smith 27 Nov '10

27 Nov '10

My firefox auto-installed an update from 3.6.11 to 3.6.12 this morning, after which it gives this upon a restart attempt: Program received signal SIGBUS, Bus error. 0x00123c47 in memset () from /lib/ld-linux.so.2 while I dig deeper, wondering if anyone else has seen it and/or can suggest a fix. Thanks! -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- I can do all things through Christ who strengthens me. ------------------------------ Philippians 4:13 -------------------------------

2 2

Postfix - message queue filling with Host or name not found - try again
by Rob Kampen 27 Nov '10

27 Nov '10

Hi list, I have noted over the last week or so my DNS servers are dumping lots of messages for bogus domain lookups. Examining the postfix queue with postqueue -p: I see many (Host or domain name not found. Name service error for name=bdgiedjhea.po6e4ina.com type=MX: Host not found, try again) Jake(a)bdgiedjhea.po6e4ina.com My question - why does this stay in the message queue - why not dumped back with message undeliverable or dropped? I understand this is probably related to my config - which follows: <main.cf> queue_directory = /var/spool/postfix command_directory = /usr/sbin daemon_directory = /usr/libexec/postfix mail_owner = postfix myhostname = <mumble> mydomain = <mumble> myorigin = $mydomain inet_interfaces = all inet_protocols = ipv4 proxy_interfaces = <mumble> mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, mail.$mydomain, www.$mydomain, ftp.$mydomain unknown_local_recipient_reject_code = 550 mynetworks = 192.168.230.0/24, 127.0.0.0/8 relay_domains = virtual_alias_domains = hash:/etc/postfix/virtual_alias_domains virtual_alias_maps = hash:/etc/postfix/virtual_alias_maps smtpd_helo_required = yes smtpd_delay_reject = yes strict_rfc821_envelopes = yes smtpd_helo_restrictions = permit_mynetworks, reject_non_fqdn_helo_hostname, reject_invalid_helo_hostname, permit smtpd_sender_login_maps = hash:/etc/postfix/smtpd_sender_login_map smtpd_client_restrictions = check_client_access hash:/etc/postfix/access smtpd_recipient_restrictions = reject_unauth_pipelining, reject_non_fqdn_recipient, reject_non_fqdn_sender, reject_unknown_sender_domain, reject_unknown_recipient_domain, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, check_recipient_access hash:/etc/postfix/roleaccount_exceptions, reject_invalid_hostname, check_helo_access pcre:/etc/postfix/helo_checks, reject_rbl_client sbl-xbl.spamhaus.org, permit smtpd_sender_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_non_fqdn_sender smtpd_sasl_auth_enable = yes smtpd_sasl_security_options = noanonymous broken_sasl_auth_clients = yes tls_random_exchange_name = /var/spool/postfix/prng_exch smtpd_sasl_type = dovecot smtpd_sasl_path = private/auth smtpd_use_tls = yes smtpd_tls_security_level = may smtpd_tls_auth_only = yes smtpd_tls_key_file = /etc/pki/tls/private/ssl.key.private.decrypted smtpd_tls_cert_file = /etc/pki/tls/certs/<mumble> smtpd_tls_CAfile = /etc/pki/tls/certs/sub.class2.server.ca.pem smptd_tls_loglevel = 2 smtpd_tls_received_header = yes smtpd_sasl_tls_security_options = noanonymous smtpd_sasl_security_options = noanonymous mailbox_size_limit = 102400000 message_size_limit = 40960000 in_flow_delay = 1s alias_maps = hash:/etc/aliases alias_database = hash:/etc/aliases home_mailbox = Maildir/ content_filter=amavisfeed:[127.0.0.1]:10024 debug_peer_level = 2 debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin xxgdb $daemon_directory/$process_name $process_id & sleep 5 sendmail_path = /usr/sbin/sendmail.postfix newaliases_path = /usr/bin/newaliases.postfix mailq_path = /usr/bin/mailq.postfix setgid_group = postdrop html_directory = no manpage_directory = /usr/share/man sample_directory = /usr/share/doc/postfix-2.2.2/samples readme_directory = /usr/share/doc/postfix-2.2.2/README_FILES </main.cf> Any suggestions appreciated. TIA rob

6 10

CentOS-announce Digest, Vol 69, Issue 9
by centos-announce-request＠centos.org 27 Nov '10

27 Nov '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2010:0913 CentOS 5 x86_64 gtk2 Update (Karanbir Singh) 2. CEBA-2010:0913 CentOS 5 i386 gtk2 Update (Karanbir Singh) 3. CEBA-2010:0900 CentOS 5 i386 thunderbird Update (Karanbir Singh) 4. CEBA-2010:0900 CentOS 5 x86_64 thunderbird Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 26 Nov 2010 18:08:26 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0913 CentOS 5 x86_64 gtk2 Update To: centos-announce(a)centos.org Message-ID: <20101126180826.GA27443(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0913 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0913.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 1cc83a152509a74f6614308e42c6f43a gtk2-2.10.4-21.el5_5.6.i386.rpm 87c5c3a858d9d63f031fec320a6a547d gtk2-2.10.4-21.el5_5.6.x86_64.rpm 9286c99d64aaca8ca442c9cc5549b284 gtk2-devel-2.10.4-21.el5_5.6.i386.rpm e39c7a2371e7f5abdf4950fd173ad677 gtk2-devel-2.10.4-21.el5_5.6.x86_64.rpm Source: 2f26dac41203a95ac15d9cc74f039845 gtk2-2.10.4-21.el5_5.6.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Fri, 26 Nov 2010 18:08:26 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0913 CentOS 5 i386 gtk2 Update To: centos-announce(a)centos.org Message-ID: <20101126180826.GA27428(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0913 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0913.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 29b4a5cd2b0b3f6f1fe25e54d20ee01d gtk2-2.10.4-21.el5_5.6.i386.rpm e0d9866168342114db39d4fb5e5beeea gtk2-devel-2.10.4-21.el5_5.6.i386.rpm Source: 2f26dac41203a95ac15d9cc74f039845 gtk2-2.10.4-21.el5_5.6.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Sat, 27 Nov 2010 12:43:33 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0900 CentOS 5 i386 thunderbird Update To: centos-announce(a)centos.org Message-ID: <20101127124333.GA1984(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0900 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0900.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 5c69a7bc16453026ec7caa85216f0c9d thunderbird-2.0.0.24-12.el5.centos.i386.rpm Source: 32e3dae9627ae0b4caa3ce1a57c881cb thunderbird-2.0.0.24-12.el5.centos.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Sat, 27 Nov 2010 12:43:33 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0900 CentOS 5 x86_64 thunderbird Update To: centos-announce(a)centos.org Message-ID: <20101127124333.GA2001(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0900 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0900.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 11960f6689f559620bcedc18beae46a3 thunderbird-2.0.0.24-12.el5.centos.x86_64.rpm Source: 32e3dae9627ae0b4caa3ce1a57c881cb thunderbird-2.0.0.24-12.el5.centos.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 69, Issue 9 **********************************************

1 0

simple website hit counter
by Frank Cox 27 Nov '10

27 Nov '10

Googling for this finds me a ton of stuff that doesn't actually do what I'm looking for. I want a simple hit counter cgi script of some kind that will increment a counter on every page load but I want to access the counter from a different page. In other words, I don't want to have a visible hit counter on the webpage itself. I want to have a different webpage that will show me the number. -- MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com

8 14

Centos and Bridging
by Robert Spangler 27 Nov '10

27 Nov '10

Hello, Presently I am running CentOS release 5.5 (Final). I am looking to setup bridging as I would like to setup some KVM virtual hosts on my system as a test lab. I am following the the instruction at this site > http://tldp.org/HOWTO/BRIDGE-STP-HOWTO/index.html but I cannot figure out where I am going wrong and would be thankful if someone could point me in the right direction. Here is what I have done: Check bridge information with the following: > ~ $ modprobe -v bridge No issues or errors > ~ $ cat /proc/modules | grep bridge > bidge 91889 0 - Live 0xffffffff89247000 Check to ensure forwarding is turned on: > ~ $ cat /proc/sys/net/ipv4/ip_forward > 1 Checked that my interface are up and running (Was sure of this but did the check anyway): > ~ $ ifconfig > eth0 Link encap:Ethernet HWaddr 48:5B:39:2A:07:D5 > inet addr:192.168.1.100 Bcast:192.168.1.255 Mask:255.255.255.0 > inet6 addr: fe80::4a5b:39ff:fe2a:7d5/64 Scope:Link > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > RX packets:1059 errors:0 dropped:0 overruns:0 frame:0 > TX packets:1080 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:1000 > RX bytes:454226 (443.5 KiB) TX bytes:120584 (117.7 KiB) > Interrupt:90 Base address:0x8400 > > lo Link encap:Local Loopback > inet addr:127.0.0.1 Mask:255.0.0.0 > inet6 addr: ::1/128 Scope:Host > UP LOOPBACK RUNNING MTU:16436 Metric:1 > RX packets:92 errors:0 dropped:0 overruns:0 frame:0 > TX packets:92 errors:0 dropped:0 overruns:0 carrier:0[Thu Nov 25 So now I begin to create the bridge form CLI as I want to make sure everything works before committing it to the config: > brctl addbr br0 > ifconfig eth0 down > ifconfig br0 192.168.1.100 up > ifconfig eth0 0.0.0.0 up > route add default gw 192.168.1.254 I check my interfaces and routing: > ~ $ ifconfig > br0 Link encap:Ethernet HWaddr 00:00:00:00:00:00 > inet addr:192.168.1.100 Bcast:192.168.1.255 Mask:255.255.255.0 > inet6 addr: fe80::200:ff:fe00:0/64 Scope:Link > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > RX packets:0 errors:0 dropped:0 overruns:0 frame:0 > TX packets:5 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:0 > RX bytes:0 (0.0 b) TX bytes:398 (398.0 b) > > eth0 Link encap:Ethernet HWaddr 48:5B:39:2A:07:D5 > inet6 addr: fe80::4a5b:39ff:fe2a:7d5/64 Scope:Link > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > RX packets:64662 errors:0 dropped:0 overruns:0 frame:0 > TX packets:63301 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:1000 > RX bytes:17699194 (16.8 MiB) TX bytes:7958063 (7.5 MiB) > Interrupt:90 Base address:0x8400 > > lo Link encap:Local Loopback > inet addr:127.0.0.1 Mask:255.0.0.0 > inet6 addr: ::1/128 Scope:Host > UP LOOPBACK RUNNING MTU:16436 Metric:1 > RX packets:211 errors:0 dropped:0 overruns:0 frame:0 > TX packets:211 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:0 > RX bytes:17346 (16.9 KiB) TX bytes:17346 (16.9 KiB) > ~ $ route -n > Kernel IP routing table > Destination Gateway Genmask Flags Metric Ref Use Iface > 192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 br0 > 0.0.0.0 192.168.1.254 0.0.0.0 UG 0 0 0 br0 Time to test if ping works: > ~ $ ping -c3 192.168.1.254 > PING 192.168.1.254 (192.168.1.254) 56(84) bytes of data. > ping: sendmsg: Operation not permitted > ping: sendmsg: Operation not permitted > ping: sendmsg: Operation not permitted > > --- 192.168.1.254 ping statistics --- > 3 packets transmitted, 0 received, 100% packet loss, time 2000ms I know the firewall is causing this issue so I stop the firewall: > ~ $ service iptables stop > Flushing firewall rules: [ OK ] > Setting chains to policy ACCEPT: nat filter [ OK ] > Unloading iptables modules: [ OK ] Time to try ping again: > ~ $ ping -c3 192.168.1.254 > PING 192.168.1.254 (192.168.1.254) 56(84) bytes of data. > From 192.168.1.100 icmp_seq=1 Destination Host Unreachable > From 192.168.1.100 icmp_seq=2 Destination Host Unreachable > From 192.168.1.100 icmp_seq=3 Destination Host Unreachable > > --- 192.168.1.254 ping statistics --- > 3 packets transmitted, 0 received, +3 errors, 100% packet loss, time 1999ms To back out all I needed to do was: > ifconfig br0 down > brctl delbr br0 > service iptables start > service netowrk restart Everything is back to normal. I cannot figure out what am I missing here? Interfaces and routing look to be setup correctly. Is there something else I need to be looking at? -- Regards Robert Linux The adventure of a life time. Linux User #296285 Get Counted http://counter.li.org/

8 14

sed with several lines, how?
by Arthur Bela 27 Nov '10

27 Nov '10

hyphen's [ - ] are just for marking the start/end of a pattern, but there are _not in_ the pattern! "OUTPUT" is what i want after "seding" the PATTERN#X's so i for e.g.: need the first, and second "magic" sed "FIRSTMAGIC" PATTERN#1 sed "SECONDMAGIC" PATTERN#2 PATTERN#1: ----------------------------------- SOMETEXT#1 SOMETEXT#2 SOMETEXT#3 SOMETEXT#4 ----------------------------------- "exact pattern", what is unique from the pattern: ----------------------------------- \n ----------------------------------- OUTPUT: ----------------------------------- SOMETEXT#1 SOMETEXT#3 SOMETEXT#4 ----------------------------------- and: PATTERN#2: ----------------------------------- SOMETEXT#1 SOMETEXT#2 </div></body></html> SOMETEXT#3 ----------------------------------- "exact pattern", what is unique from the pattern: ----------------------------------- \n</div></body></html> ----------------------------------- OUTPUT: ----------------------------------- SOMETEXT#1 </div></body></html> SOMETEXT#3 ----------------------------------- i just can't figure it out, how to "sed" when having several lines [nor in awk, perl..] could anyone post a link, or some guide, how to write these two lines of "sed"? Thank You! :\

2 2

experience with Sympa to Mailman?
by Dave Stevens 27 Nov '10

27 Nov '10

I have a Centos 5.5 box with Mailman installed. A new user will host lists using Mailman, moving from a Sympa based host. Sympa isn't in the repos, does anyone know why? or have any experience moving the archive from Sympa to Mailman? Dave

2 1

Checking what's running inside a httpd process
by Pascal Robert 26 Nov '10

26 Nov '10

I'm trying to fix a CentOS (5.5 x86_64) VM that we have where it become unstable due to swapping. But I did notice something: I have 10 httpd processes, and 5 of them are using 13 MB of resident memory, the other are using between 91 and 96 MB of RAM. I find it quite strange to see such differences in RAM usage. I ran a "lsof -P -p" on the processes, and I didn't see any major differences, so I'm wondering what is the best way to know what the processes are doing?

2 2

Re: [CentOS] Add application to start at booting
by sheraznaz＠yahoo.com 26 Nov '10

26 Nov '10

This was recently answered in another thread <Quote> Re: [CentOS] best way to start and shutdown programs in CentOS? On 24 November 2010 14:20, killscript <killscript(a)gmail.com> wrote: > Les Mikesell wrote: >> The RedHat/Centos way of doing things is to have init scripts in >> /etc/rc.d/init.d that take at least start, stop, and restart as arguments for >> each program that should start automatically. Then for the runlevels where you >> want them to start you have a symlink where the name starts with S and the rest >> is a number to make it sort alphabetically into the order that things should >> start in /etc/rc?.d (where the ? is the runlevel). Likewise add links starting >> with 'K' in the levels where the process should be stopped. There is a >> convention for comments in the scripts so that 'checkconfig program on' can make >> the links for you. Look through some of the other scripts to see how they work. > > Sorry for the stupid question here, but does the /etc/initd./scriptname > file "know" about these symlinks because of a particular comment in there? Copied from the man file for chkconfig: RUNLEVEL FILES Each service which should be manageable by chkconfig needs two or more commented lines added to its init.d script. The first line tells chkconfig what runlevels the service should be started in by default, as well as the start and stop priority levels. If the service should not, by default, be started in any runlevels, a - should be used in place of the runlevels list. The sec- ond line contains a description for the service, and may be extended across multiple lines with backslash continuation. For example, random.init has these three lines: # chkconfig: 2345 20 80 # description: Saves and restores system entropy pool for \ # higher quality random number generation. This says that the random script should be started in levels 2, 3, 4, and 5, that its start priority should be 20, and that its stop priority should be 80. You should be able to figure out what the description says; the \ causes the line to be continued. The extra space in front of the line is ignored. Basically, create your file by taking one of the files as a sample and place it in /etc/init.d. For example, I've copied /etc/init.d/vncserver to /etc/init.d/sample and ran [root@hakan init.d]# chkconfig --add sample [root@hakan init.d]# chkconfig --list|grep sample sample 0:off 1:off 2:off 3:off 4:off 5:off 6:off Now my sample is there but won't run at all but it's all there. [root@hakan init.d]# chkconfig sample on [root@hakan init.d]# chkconfig --list|grep sample sample 0:off 1:off 2:on 3:on 4:on 5:on 6:off Now it's on for all of the levels in the comment included in the file. Nevertheless, I could have overriden that with the ckconfig --level <levels> <name> on command options to run on other levels. [root@hakan etc]# find rc* -iname *sample*|sort rc.d/init.d/sample rc.d/rc0.d/K35sample rc.d/rc1.d/K35sample rc.d/rc2.d/S91sample rc.d/rc3.d/S91sample rc.d/rc4.d/S91sample rc.d/rc5.d/S91sample rc.d/rc6.d/K35sample and the file comment looks like below which matches the above, startup priority is 91, kill priority is 35. It will run on all normal levels since it's not defined, excluding 1 (single user), 0 (shutdown) and 6 (reboot). # chkconfig: - 91 35 I better remove this sample from my startup :) -- Hakan (m1fcj) - http://www.hititgunesi.org _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos ------Original Message------ From: Johan Scheepers Sender: centos-bounces(a)centos.org To: centos ReplyTo: CentOS mailing list Subject: [CentOS] Add application to start at booting Sent: Nov 25, 2010 10:45 AM Good day, Please, How/where can I add an application to start at boot up. Don't seem to find it in options available Thanks Johan _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos Sent from my Verizon Wireless BlackBerry

4 3

How to install PHP PEAR stuff best?
by Alexander Farber 26 Nov '10

26 Nov '10

Hello CentOS users, I'm using gChartPhp by having copied it into /var/www/html dir. It works ok, but I wonder how to better install/organize/maintain PEAR "packages" under CentOS? I've got the php-pecl rpm installed too, wonder if it's helpful here. Or maybe just add a dir to php.ini? Please share your PHP "admin" wisdom Regards Alex -- Sent from my mobile device

4 5

Re: [CentOS] good shell script examples?
by 洪　川 26 Nov '10

26 Nov '10

#!/bin/bash H=" 192.168.1.1 192.168.1.2 192.168.1.3 192.168.1.4 " for i in $H ; do expect << -EOF- set timeout 2 spawn scp ${rootidfile} root@${host}:/tmp/id_file expect "d:" send "${password}\n" expect eof spawn ssh ${host} expect "d:" send "${password}\n" expect "#" send "mkdir -p /root/.ssh; chmod 700 /root/.ssh\n" expect "#" send "cat /tmp/id_file >> /root/.ssh/authorized_keys\n" expect "#" send "rm -f /tmp/id_file; exit\n" expect eof -EOF- done http://www.bsdmap.com/2010/11/06/ssh-shell-script/ ------------------ Original ------------------ From: "Kill Script"<killscript(a)gmail.com>; Date: Tue, Nov 16, 2010 02:47 AM To: "centos"<centos(a)centos.org>; Subject: [CentOS] good shell script examples? I am looking for a beginner guide to shell scripting simple tasks on CentOS (e.g. ssh'ing into a server / router / switch, checking for certain things, then exiting and going to the next IP). Does anyone have any suggestions on where to look? ?(I'm relatively new to bash)

2 1

Terminal - name too long
by Johan Scheepers 26 Nov '10

26 Nov '10

Good day, > [johan@unknown2a6800000000 ~]$ How/where could I make the above a lot shorter please. Thanks Johan

4 6

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss November 2010