Discuss February 2010

discuss@lists.centos.org

273 participants
231 discussions

Logrotate in CentOS 5.4 more brutal (to httpd at least) than in 5.3?
by Christopher Thorjussen 03 Feb '10

03 Feb '10

I've just updated a few CentOS 5.3 servers to 5.4. One of them were a Apache Webserver. Doing a diff/check on the new ".rpmnew" config files that are made, I saw that the logrotate command for apache was changed. In 5.3 it did a reload, but in 5.4 it does a hard kill: CentOS 5.3: /var/log/httpd/*log { missingok notifempty sharedscripts postrotate /sbin/service httpd reload > /dev/null 2>/dev/null || true endscript } CentOS 5.4: /var/log/httpd/*log { missingok notifempty sharedscripts postrotate /bin/kill -HUP `cat /var/run/httpd.pid 2>/dev/null` 2> /dev/null || true endscript } Isn't this a bit harsh in 5.4? Wouldn't the 5.3 method be better? -Christopher Thorjussen

8 7

Re: [CentOS] Updating gfortran in CentOS 5.4?
by m.roth＠5-cent.us 03 Feb '10

03 Feb '10

> We're finding that several of the packages we > need don't compile using the version 4.1.2 of > gfortran that comes with CentOS 5.4. So, > I've built the latest version of gfortran (e.g. 4.4.2) > but I've done it so that all the new version's > files go in /share/apps/gnu so that they > don't interfere with the standard gcc distribution > (building gfortran requires building some parts > of gcc). <snip> > Since "Hello, world" compiles and runs, but charmm > compiles and doesn't run, there's something wrong > with how charmm is linked. Also, although the > 'file charmm' command shows an ELF 64-bit dynamically > linked file, 'ldd charmm' says " not a dynamic executable" > (note no file name). So, something is strange. <snip> I was just talking to one of the researchers here who's built it, and pointed out the completely obvious (once he pointed it out): the "<blank> not a dynamic executable" tells you that that piece, at least, is statically linked, *not* dynamic. He recommends getting a core dump, so you can do a traceback. mark

1 0

kickstart installation from usb key
by Georghy 03 Feb '10

03 Feb '10

2 17

VMware Workstation 7.0.x and CentOS 5.4
by Akemi Yagi 03 Feb '10

03 Feb '10

VMware Workstation 7.0.1 Release Notes has a list of supported OS: http://www.vmware.com/support/ws7/doc/releasenotes_ws701.html According to that, RHEL 5.4 is listed as supported for both host and guest but CentOS 5.4 is only for guest. This is quite strange and, if it is true, that could be a serious issue. If you have VMware Workstation 7.0.x, could you tell us what you find? Did you encounter any problem when running CentOS 5.4 as a host? Thanks to nikkilocke who reported about the above release notes in the CentOS forum. Akemi

1 0

Re: [CentOS] authentication failure
by fabien faye 03 Feb '10

03 Feb '10

I have create a script and modify an action file's of fail2ban to contact the IP provider's of bruteforce attacks source. If you are interested : http://www.generationip.eu/documentation/mini-howto/135-use-fail2ban-to-con… Fabien FAYE RHCE www.generationip.com Free network tools & HOWTO for centos and Redhat ----- Original Message ----- From: "fabien faye" <fabien(a)faye.eu> To: "CentOS mailing list" <centos(a)centos.org> Sent: Monday, January 25, 2010 1:30:39 PM Subject: Re: [CentOS] authentication failure Hi, No one knows how to auto send fail2ban report to the email address present in the whois ? Fabien FAYE RHCE www.generationip.com Free network tools & HOWTO for centos and Redhat ----- Original Message ----- From: "fabien faye" <fabien(a)faye.eu> To: "CentOS mailing list" <centos(a)centos.org> Sent: Saturday, January 23, 2010 8:30:36 PM Subject: Re: [CentOS] authentication failure Hi, I am a fail2ban user and i am very interested to have an autosent mail to the ip provider of the brute force ip address. Do you know if it is possible with fail2ban or if we have to rewrite action in fail2ban ?. Fabien FAYE RHCE www.generationip.com Free network tools & HOWTO for centos and Redhat ----- Mail Original ----- De: "Athmane Madjoudj" <athmanem(a)gmail.com> À: "CentOS mailing list" <centos(a)centos.org> Envoyé: Samedi 23 Janvier 2010 18:20:01 Objet: Re: [CentOS] authentication failure On Sat, Jan 23, 2010 at 6:14 PM, madunix <madunix(a)gmail.com> wrote: > I noticed that my server has a lot ca. 1000x auth failure from > different alocated in China / Romania and Netherlands per day since 3 > days > It looks to me like somebody was trying to get into server by guessing > my password by brute force. > what would be the best to stop this attack and how? the server running > apache mysql and ftp > PORT STATE SERVICE > 21/tcp open ftp > 80/tcp open http > 443/tcp open https > 3306/tcp open mysql > ... > Jan 22 16:07:14 user vsftpd(pam_unix)[17462]: authentication failure; > logname= uid=0 euid=0 tty= ruser= rhost=195.95.228.150 > Jan 22 16:07:16 user vsftpd(pam_unix)[16737]: check pass; user unknown > Jan 22 16:07:16 user vsftpd(pam_unix)[16737]: authentication failure; > logname= uid=0 euid=0 tty= ruser= rhost=195.95.228.150 > Jan 22 16:07:17 user vsftpd(pam_unix)[17462]: check pass; user unknown > Jan 23 17:23:52 user vsftpd(pam_unix)[20524]: authentication failure; > logname= uid=0 euid=0 tty= ruser= rhost=221.7.40.47 > Jan 23 17:23:55 user vsftpd(pam_unix)[20524]: check pass; user unknown > Jan 23 17:23:55 user vsftpd(pam_unix)[20524]: authentication failure; > logname= uid=0 euid=0 tty= ruser= rhost=221.7.40.47 > Jan 23 17:23:59 user vsftpd(pam_unix)[20524]: check pass; user unknown > Jan 23 17:24:58 user vsftpd(pam_unix)[20524]: authentication failure; > logname= uid=0 euid=0 tty= ruser= rhost=221.7.40.47 > Jan 23 00:37:47 user vsftpd(pam_unix)[1791]: check pass; user unknown > Jan 23 00:37:47 user vsftpd(pam_unix)[1791]: authentication failure; > logname= uid=0 euid=0 tty= ruser= rhost=217.23.14.168 > Jan 23 00:38:06 user vsftpd(pam_unix)[1791]: check pass; user unknown > Jan 23 00:38:06 user vsftpd(pam_unix)[1791]: authentication failure; > logname= uid=0 euid=0 tty= ruser= rhost=217.23.14.168 > ... > > Thanks > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos > Maybe a brute force attack, try to install a HIDS like: APF/BFD: http://www.rfxn.com/projects/advanced-policy-firewall/ http://www.rfxn.com/projects/brute-force-detection/ Fail2ban: http://www.fail2ban.org/ Fail2ban is available in EPEL repos. HTH -- Athmane Madjoudj _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

Re: [CentOS] cannot mount NFS share, portmap problems, what todo? [SOLVED]
by Rudi Ahlers 03 Feb '10

03 Feb '10

On Wed, Feb 3, 2010 at 2:40 PM, Geoff Galitz <geoff(a)galitz.org> wrote: > > > > Should it be running, or not? > > > > > > >root@mercury:[~]$ netstat -ap --inet | grep rpc > > >tcp 0 0 *:sunrpc *:* > LISTEN 6458/portsentry > > >udp 0 0 localhost:filenet-rpc localhost:filenet-rpc > ESTABLISHED 1980/postmaster > > > > > > It looks like you need to deconfigure portsentry from listening on that > port and then you should be good to go. IOW, portsentry is ok to run, but > not on your portmapper port when you need to run portmapper. > > > > -geoff > > > > --------------------------------- > Geoff Galitz > Blankenheim NRW, Germany > http://www.galitz.org/ > http://german-way.com/blog/ > > _______________________________________________ > awesome, thanx. It's working now :) -- Kind Regards Rudi Ahlers SoftDux Website: http://www.SoftDux.com Technical Blog: http://Blog.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

1 0

monitoring a workstation
by MOKRANI Rachid 03 Feb '10

03 Feb '10

Hi, I need to monitor a workstation (Centos 5 x86_64). I need to obtain informations about : - cpu utilization per user, per a period, how many days per user, Any ideas about a good and simple free tool ? Regards. __________________________ Ce message (et toutes ses pièces jointes éventuelles) est confidentiel et établi à l'intention exclusive de ses destinataires. Toute utilisation de ce message non conforme à sa destination, toute diffusion ou toute publication, totale ou partielle, est interdite, sauf autorisation expresse. L'IFP décline toute responsabilité au titre de ce message. This message and any attachments (the message) are confidential and intended solely for the addressees. Any unauthorised use or dissemination is prohibited. IFP should not be liable for this message. Visitez notre site Web / Visit our web site : http://www.ifp.fr __________________________

9 8

cannot mount NFS share, portmap problems, what todo?
by Rudi Ahlers 03 Feb '10

03 Feb '10

Hi all, I want to map an NFS share from a remote server to a local CentOS 5.4 server, but have a problem with portmap: root@mercury:[~]$ service portmap restart pmap_getmaps rpc problem: RPC: Unable to receive; errno = Connection reset by peer Stopping portmap: [FAILED] Starting portmap: [ OK ] root@mercury:[~]$ service portmap status portmap dead but subsys locked root@mercury:[~]$ What is "subsys", and how do I "unlock it"? /var/log/messages gives me this: Feb 3 13:44:23 mercury portmap[2221]: cannot bind udp: Address already in use Which address is it referring to? Portmap isn't running so I don't see how it can be in use. Or should I be looking for the problem elsewhere? Google search results sugested opening port 111 in the firewall, which I have, but still get the error. And I cannot, at any costs, reboot this server. So, is there a way to fix this? -- Kind Regards Rudi Ahlers SoftDux Website: http://www.SoftDux.com Technical Blog: http://Blog.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

4 4

Not able to redirect console msgs to serial port
by premrajm＠digilink.in 03 Feb '10

03 Feb '10

Hi, Iam using cento-5.3 on x86 machine and iam working to get the console messages redirected to serial port. I have made the necessary changes in the /etc/inittab file. - - - - - id:3:initdefault . . so:12345:respawn:/sbin/agetty ttyS0 9600 vt100 - - - -- - and also in /etc/grub.conf file - - - - serial --speed=9600 --unit=0 --word=8 --parity=no --stop=1 terminal --timeout=10 serial . . kernel /boot/vmlinux-2.6.18-128.el5 ro root=LABEL=/1 console=ttyS0,9600 - - - Still Iam not able to see any console messages redirection on serial port.I have connected the serial port of the Machine_1 which has centos running to Machine_2 where i have opened an hyperterminal.I see no console messages displayed here. Iam , I missing any configuration or is there an rpm i should install ? Thanks and Regards, Premraj M Sr.Software Engineer Tel: +91-080-67274900 Cell: +91-9741231739 Email: premrajm(a)digilink.in Smartlink Network Systems Ltd. Digilink India Ltd, Plot No. 10-A,Next to Hi-Cal Magnetics, Electronic City Phase II, Konappana Agrahara, Bangalore - 560100 Disclaimer : This message is proprietary to Smartlink Network Systems Limited and is intended solely for the use of the individual to whom it is addressed. It may contain privileged or confidential information and should not be circulated or used for any purpose other than for what it is intended. If you have received this message in error, please notify the originator immediately. If you are not the intended recipient, you are notified that you are strictly prohibited from using, copying, altering, or disclosing the contents of this message. Smartlink Network Systems Ltd. accepts no responsibility for loss or damage arising from the use of the information transmitted by this email including damage from virus. ______________________________________________________________________________ This email has been scrubbed for your protection by SecureMX. For more information visit http://securemx.in ______________________________________________________________________________

4 3

Is it possible to run serial console redirection without xen kernel
by premrajm＠digilink.in 03 Feb '10

03 Feb '10

Hi, I have customized my centos Installation and removed the vitalization, Cluster and storage cluster support along with GUI support.I have enabled only server related packages. Regarding serial console redirection,I have checked my serial cable,Ports and inittab and grub.conf configuration.Everything seems to be correct.I wanted to know that is it necessary to have a xen kernel (2.6.18-128xen.el5) installed although you may be booting through an base linux kernel (2.6.18-128.el5).Is there any package for serial redirection that could be necessary.I have installed setserial rpm. Thanks premraj Disclaimer : This message is proprietary to Smartlink Network Systems Limited and is intended solely for the use of the individual to whom it is addressed. It may contain privileged or confidential information and should not be circulated or used for any purpose other than for what it is intended. If you have received this message in error, please notify the originator immediately. If you are not the intended recipient, you are notified that you are strictly prohibited from using, copying, altering, or disclosing the contents of this message. Smartlink Network Systems Ltd. accepts no responsibility for loss or damage arising from the use of the information transmitted by this email including damage from virus. ______________________________________________________________________________ This email has been scrubbed for your protection by SecureMX. For more information visit http://securemx.in ______________________________________________________________________________

2 1

← Newer
1
...
17
18
19
20
21
22
23
24
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss February 2010