Discuss November 2010

discuss@lists.centos.org

259 participants
220 discussions

large numbers of linux system user for postfix
by ahmad riza h nst 08 Nov '10

08 Nov '10

hello, i need to setup a mail server with postfix + dovecot + webmin + virtualmin + virtual user with linux system user. the virtual user may reach to thousands user from several hundreds virtual domains. what i concern is large numbers of linux system user which used in these setup, is it good or bad? maybe somebody would share their experience about this setup ? any links would be good. postfix 2.6.7 dovecot 2.0.6 centos 5.x webmin + virtualmin thank you. -- http://blog.rizahnst.org

9 10

pam_ldap login under centOS
by bluethundr 08 Nov '10

08 Nov '10

Hello List I am attempting to setup various pam modules to consult our new LDAP services in order to do what it needs to do. I have setup my /etc/pam.d sudo file (for example) this way in the attempt to accomplish this via LDAP: [root@VIRCENT03:~]#cat /etc/pam.d/sudo #%PAM-1.0 auth include system-auth auth required pam_ldap.so account include system-auth account required pam_ldap.so password include system-auth password required pam_ldap.so session optional pam_keyinit.so revoke session required pam_limits.so session required pam_ldap.so but even tho the user is part of the %wheel group under LDAP it is unable to sudo to any other account (including root). If I try to sudo this is what happens: [bluethundr@VIRCENT03:~]#sudo bash [sudo] password for bluethundr: bluethundr is not in the sudoers file. This incident will be reported. It would appear that sudo support for ldap is compiled in: [root@VIRCENT03:~]#ldd $(which sudo)| grep -i ldap libldap-2.3.so.0 => /usr/lib/libldap-2.3.so.0 (0x00552000) This is how I setup my ldap.conf file [root@VIRCENT03:~]#cat /etc/openldap/ldap.conf # # LDAP Defaults # # See ldap.conf(5) for details # This file should be world readable but not world writable. #BASE dc=example, dc=com #URI ldap://ldap.example.com ldap://ldap-master.example.com:666 #SIZELIMIT 12 #TIMELIMIT 15 #DEREF never URI ldap://ldap.acadaca.net/ BASE dc=acadaca,dc=net TLS_CACERTDIR /etc/openldap/cacerts sudoers_base ou=sudoers,ou=Services,dc=acadaca,dc=net In my openldap logs on the LDAP server there appears to be no activity when I sudo. however in the secure logs on the client I do.. Nov 8 16:05:34 VIRCENT03 su: pam_unix(su-l:session): session opened for user root by bluethundr(uid=500) Nov 8 16:05:37 VIRCENT03 su: pam_unix(su-l:session): session opened for user bluethundr by bluethundr(uid=0) Nov 8 16:05:44 VIRCENT03 sudo: bluethundr : user NOT in sudoers ; TTY=pts/5 ; PWD=/home/bluethundr ; USER=root ; COMMAND=/bin/bash I do see other events in secure.log that appear to be pam successes however. am i interpreting this correctly that at least part of the system is communicating with pam on the ldap server? thanks -- Here's my RSA Public key: gpg --keyserver pgp.mit.edu --recv-keys 5A4873A9 Share and enjoy!!

1 0

Bug or normal?
by Emmanuel Noobadmin 08 Nov '10

08 Nov '10

Not sure if this is normal or some kind of bug that I should be filing somewhere so asking for opinions here first. I have a new system (Gigabyte H55M-UD2H with i5-760) that has 2 disks with partitions used for RAID 1 MD devices. X was in use. After testing that the system would boot properly if one of the disk failed, simulated by pulling the cable on one then rebooting, I proceeded to do other configuration while the system resync the array. Subsequently, I made a mistake selecting the wrong partition to dd an image from another machine's HDD and filled up the md0 device. So I rm the half copied image file which was about 80GB at that time. It took more than the couple of seconds I would expect for rm on a single file. At this point, I realized that apart from being able to move the mouse cursor, the system was not responding to mouse clicks or keyboard. I thought it had locked up for some reason and power cycled the system. The system locked up again during the boot process when the md daemon was loaded, detected an improper shutdown and started syncing one of the array. There was an error message about pdflush:303 time out after 120 seconds and a suggestion on how to suppress the message. It repeated until I gave up and rebooted the machine. Sorry my bad for not noting down the exact error message because I was just going "WTF is this? I need this machine up and running within 8hrs!" I tried to boot up using the CentOS LiveCD and pretty much ran into the same problem when it tried to find the existing installation. Trying to figure out what is going on, I switched to another bash console and managed to run top. The load was more than 4.x but no single process appear to be heavily utilizing the system. Switching to the debug console, I managed to see that the md daemon was again trying to resync the arrays. There was an EXT3 message about deleting an unreference inode before I got a screenful of what appears to be a trace dump. So my question is, was all that supposed to happen or did I stumble on some bug that arose from the combination of a full md array being resync while rm was trying to remove a very large file? Or was it simply my bad for assuming that rm'ing a large file would take no longer than deleting a single small file and caused some inevitable FS corruption by power cycling thinking that the system had hung? Although that then begs the question of why would a simple rm command load up the system to the point it wouldn't respond to inputs apart from mouse movement?

1 0

obtaining non-packaged software
by Piscium 07 Nov '10

07 Nov '10

I have been using Fedora on my home desktop for close to an year, and I am happy with it, nevertheless I am considering switching to a slower-moving distro. CentOS + EPEL put together have less packages than Fedora. Moreover RPM Fusion has fewer packages for EL than for Fedora. I am wondering how can I install on my PC applications for which packages do not exist from one of the above-mentioned repos. I can go upstream, get sources and build them. It is a good solution, I do that even with Fedora, however this can mean a lot of work when a package depends on 10 others. So I wonder what do other CentOS users do in a similar situation? Is it possible to get a Fedora binary package and install it? What about getting a Fedora source package, building and installing it? Is there any other possibility?

5 12

Logwatch not working properly
by Albert McCann 07 Nov '10

07 Nov '10

I having a problem where Logwatch is not showing any events from the /var/log/secure log file. When I run logwatch --print --range today --service sshd --detail 10 --debug 10 the end result shows this: ... LogFiles that will be processed: [0] = secure [1] = messages Made Temp Dir: /var/cache/logwatch/logwatch.sOga48bL with tempdir export LOGWATCH_DATE_RANGE='today' export LOGWATCH_GLOBAL_DETAIL='10' export LOGWATCH_OUTPUT_TYPE='unformatted' export LOGWATCH_TEMP_DIR='/var/cache/logwatch/logwatch.sOga48bL/' export LOGWATCH_DEBUG='10' Preprocessing LogFile: secure /var/log/secure 2>/dev/null | /usr/bin/perl /usr/share/logwatch/scripts/shared/expandrepeats ''| /usr/bin/perl /usr/share/logwatch/scripts/shared/onlyhost ''| /usr/bin/perl /usr/share/logwatch/scripts/shared/applystddate ''>/var/cache/logwatch/logwatch.sOga48bL/secure TimeFilter: Period is day TimeFilter: SearchDate is (Nov 6 ..:..:..) TimeFilter: Debug SearchDate is (Nov 6 ) DEBUG: Inside ApplyStdDate... DEBUG: Looking For: (Nov 6 ..:..:..) Preprocessing LogFile: messages /var/log/messages 2>/dev/null | /usr/bin/perl /usr/share/logwatch/scripts/shared/expandrepeats ''| /usr/bin/perl /usr/share/logwatch/scripts/shared/removeservice 'talkd'| /usr/bin/perl /usr/share/logwatch/scripts/shared/removeservice 'telnetd'| /usr/bin/perl /usr/share/logwatch/scripts/shared/removeservice 'inetd'| /usr/bin/perl /usr/share/logwatch/scripts/shared/removeservice 'nfsd'| /usr/bin/perl /usr/share/logwatch/scripts/shared/removeservice '/sbin/mingetty'| /usr/bin/perl /usr/share/logwatch/scripts/shared/removeservice 'netscreen'| /usr/bin/perl /usr/share/logwatch/scripts/shared/removeservice 'netscreen'| /usr/bin/perl /usr/share/logwatch/scripts/shared/onlyhost ''| /usr/bin/perl /usr/share/logwatch/scripts/shared/applystddate ''>/var/cache/logwatch/logwatch.sOga48bL/messages DEBUG: Inside RemoveService... DEBUG: Inside RemoveService... DEBUG: Inside RemoveService... DEBUG: Inside RemoveService... DEBUG: Inside RemoveService... DEBUG: Inside RemoveService... DEBUG: Inside RemoveService: 930 Lines In, 930 Lines Out DEBUG: Inside RemoveService: 930 Lines In, 930 Lines Out DEBUG: Inside RemoveService: 930 Lines In, 930 Lines Out DEBUG: Inside RemoveService: 930 Lines In, 930 Lines Out DEBUG: Inside RemoveService: 930 Lines In, 930 Lines Out DEBUG: Inside RemoveService... DEBUG: Inside RemoveService: 930 Lines In, 930 Lines Out DEBUG: Inside RemoveService: 930 Lines In, 930 Lines Out TimeFilter: Period is day TimeFilter: SearchDate is ( 2010-Nov-06 ..h ..m ..s ) TimeFilter: Debug SearchDate is ( 2010-Nov-06 h m s ) ################### Logwatch 7.3 (03/24/06) #################### Processing Initiated: Sat Nov 6 11:38:23 2010 Date Range Processed: today ( 2010-Nov-06 ) Period is day. Detail Level of Output: 10 Type of Output: unformatted Logfiles for Host: valhala.xxxxxxxxxxxx.org ################################################################## --------------------- SSHD Begin ------------------------ DEBUG: Inside OnlyService for sshd DEBUG: Inside SSHD Filter ---------------------- SSHD End ------------------------- Looking at file /usr/share/logwatch/scripts/services/sshd there is block of code starting at line 165: ... if ( $Debug >= 5 ) { print STDERR "\n\nDEBUG: Inside SSHD Filter \n\n"; $DebugCounter = 1; } while (defined(my $ThisLine = <STDIN>)) { if ( $Debug >= 5 ) { print STDERR "DEBUG($DebugCounter): $ThisLine"; $DebugCounter++; } ... >From above, this line never prints anything: print STDERR "DEBUG($DebugCounter): $ThisLine"; while the previous print STDERR does print when $Debug >= 5. Doing a rpm -V Logwatch shows one changed file S.5....T c /etc/logwatch/conf/logwatch.conf as I added a " Detail = High" line to it. I do have sshd events in /var/log/secure, here's some showing testing a failed login using a non-existing account: 2010-11-06T08:59:03.684006-04:00 valhala sshd[23633]: Invalid user bob from 192.168.1.12 2010-11-06T08:59:03.688784-04:00 valhala sshd[23636]: input_userauth_request: invalid user bob 2010-11-06T08:59:05.996036-04:00 valhala sshd[23633]: pam_unix(sshd:auth): check pass; user unknown 2010-11-06T08:59:05.996313-04:00 valhala sshd[23633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=bunny2.xxxxxxxxxxxx.org 2010-11-06T08:59:07.837697-04:00 valhala sshd[23633]: Failed password for invalid user bob from 192.168.1.12 port 57945 ssh2 2010-11-06T08:59:10.644065-04:00 valhala sshd[23633]: pam_unix(sshd:auth): check pass; user unknown 2010-11-06T08:59:12.505509-04:00 valhala sshd[23633]: Failed password for invalid user bob from 192.168.1.12 port 57945 ssh2 2010-11-06T08:59:14.348019-04:00 valhala sshd[23633]: pam_unix(sshd:auth): check pass; user unknown 2010-11-06T08:59:15.759400-04:00 valhala sshd[23633]: Failed password for invalid user bob from 192.168.1.12 port 57945 ssh2 2010-11-06T08:59:18.315990-04:00 valhala sshd[23633]: pam_unix(sshd:auth): check pass; user unknown 2010-11-06T08:59:19.607300-04:00 valhala sshd[23633]: Failed password for invalid user bob from 192.168.1.12 port 57945 ssh2 2010-11-06T08:59:24.686480-04:00 valhala sshd[23636]: Connection closed by 192.168.1.12 2010-11-06T08:59:24.687107-04:00 valhala sshd[23633]: PAM 3 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=bunny2.xxxxxxxxxxxx.org 2010-11-06T08:59:24.687132-04:00 valhala sshd[23633]: PAM service(sshd) ignoring max retries; 4 > 3 Does anyone have any idea why this isn't working? The only thing I see is a date discrepancy: TimeFilter: SearchDate is ( 2010-Nov-06 ..h ..m ..s ), vs 2010-11-06T08:59:03.684006-04:00 Thanks in advance for any clues. Al -- Experience varies directly with equipment ruined.

1 2

"Semi-Authoritative" DNS?
by Tim Nelson 06 Nov '10

06 Nov '10

Greetings All- I have an odd need for a 'semi-authoritative' DNS server. Let's say I have a zone for 'domain.com' with public DNS servers. However, I wanted to run an internal DNS server for internal things. Public resolution of 'www.domain.com' would yield the public IPs, private resolution of 'www.domain.com' would yield the internal private IPs. Easy enough. BUT, what if there is a DNS record present on the public nameservers that is *not* present on the internal nameserver? Typically, DNS will say 'no record found' when it could really forward the request to the public DNS. Is it possible to configure this? So, the internal 'domain.com' zone will be authoritative for records it has but forward queries for those records it does not have, even on the same domain? I hope that made sense. Maybe there is a better way of accomplishing this? The systems in question are running Centos 5.5 x86_64 with BIND bind-9.3.6-4.P1.el5_4.1 . --Tim

3 2

CentOS-announce Digest, Vol 69, Issue 4
by centos-announce-request＠centos.org 06 Nov '10

06 Nov '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2010:0827 CentOS 5 i386 logrotate Update (Tru Huynh) 2. CEBA-2010:0827 CentOS 5 x86_64 logrotate Update (Tru Huynh) 3. CEBA-2010:0826 CentOS 5 i386 gnome-screensaver Update (Tru Huynh) 4. CEBA-2010:0826 CentOS 5 x86_64 gnome-screensaver Update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 5 Nov 2010 23:50:07 +0100 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0827 CentOS 5 i386 logrotate Update To: centos-announce(a)centos.org Message-ID: <20101105225007.GO24160(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Bugfix Advisory 2010:0827 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0827.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: ae1caae9068e3be9012a8a1bee428833 logrotate-3.7.4-9.el5_5.2.i386.rpm source: d0fef61c003ca12a30b3279c91ea233e logrotate-3.7.4-9.el5_5.2.src.rpm Tru -- Tru Huynh (mirrors, CentOS i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

file conflict while installing phonon-backend-gstreamer for Amarok
by Agnello George 06 Nov '10

06 Nov '10

Hi I am trying to install phonon-backend-gstreamer so that i can play mp3 songs through Amarok as per the following forum ( http://forums.fedoraforum.org/showthread.php?t=205019 ) , but i get the following dependency error . how can i solve this your inputs will be of great value i am using Fedora 9 . ---------------------------------------------- : : Total download size: 254 k Is this ok [y/N]: y Downloading Packages: (1/2): phonon-4.3.1-2.fc9.i386.rpm | 152 kB 00:05 (2/2): phonon-backend-gstreamer-4.3.1-2.fc9.i386.rpm | 102 kB 00:02 Running rpm_check_debug Running Transaction Test Finished Transaction Test Transaction Check Error: file /usr/lib/libphonon.so.4 from install of phonon-4.3.1-2.fc9.i386 conflicts with file from package kdelibs-4.0.3-7.fc9.i386 file /usr/lib/libphononexperimental.so.4 from install of phonon-4.3.1-2.fc9.i386 conflicts with file from package kdelibs-4.0.3-7.fc9.i386 file /usr/share/dbus-1/interfaces/org.kde.Phonon.AudioOutput.xml from install of phonon-4.3.1-2.fc9.i386 conflicts with file from package kdelibs-4.0.3-7.fc9.i386 Error Summary ------------- -- Regards Agnello D'souza

1 0

Pptp vpn server
by mattias 05 Nov '10

05 Nov '10

How to setup a vpn server on centos? I can't find the pptpd in any repo

17 39

Nagios installation problem
by Ben McGinnes 05 Nov '10

05 Nov '10

Hello, Has anyone managed a successful installation of Nagios using the RPMForge packages on CentOS 5.5? It looks like it should have worked, I followed the guides for Fedora and CentOS here (with appropriate path adjustments): http://nagios.sourceforge.net/docs/3_0/quickstart-fedora.html http://wiki.centos.org/HowTos/Nagios The SELinux policies look fine (I tend to ignore instructions to permanently disable SELinux, if I'm not using SELinux then there's no reason not to return to Slackware): # semodule -l | grep nagios nagios 1.1.0 # The nagios.cfg check gave the all clear: Reading configuration data... Read main config file okay... Processing object config file '/etc/nagios/objects/commands.cfg'... Processing object config file '/etc/nagios/objects/contacts.cfg'... Processing object config file '/etc/nagios/objects/timeperiods.cfg'... Processing object config file '/etc/nagios/objects/templates.cfg'... Processing object config file '/etc/nagios/objects/localhost.cfg'... Read object config files okay... Running pre-flight check on configuration data... Checking services... Checked 8 services. Checking hosts... Checked 1 hosts. Checking host groups... Checked 1 host groups. Checking service groups... Checked 0 service groups. Checking contacts... Checked 1 contacts. Checking contact groups... Checked 1 contact groups. Checking service escalations... Checked 0 service escalations. Checking service dependencies... Checked 0 service dependencies. Checking host escalations... Checked 0 host escalations. Checking host dependencies... Checked 0 host dependencies. Checking commands... Checked 24 commands. Checking time periods... Checked 5 time periods. Checking for circular paths between hosts... Checking for circular host and service dependencies... Checking global event handlers... Checking obsessive compulsive processor commands... Checking misc settings... Total Warnings: 0 Total Errors: 0 Things look okay - No serious problems were detected during the pre-flight check My adjustment of other config files is minimal, essentially just setting the email address to deliver notifications to. Yet every time I try to start the service I get this: # service nagios start nagios is stopped Configuration validation failed [FAILED] The error appears to be identical to that reported here: http://forums.meulie.net/viewtopic.php?f=61&t=6538&start=0 Like the original poster of the thread on that forum, I am able to start it with "nagios -d /etc/nagios/nagios.cfg" though various web pages continue to report an unspecified configuration error. Does anyone have any ideas? Regards, Ben

2 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss November 2010