Discuss September 2010

discuss@lists.centos.org

225 participants
167 discussions

Sendmail TLS verify=fail
by Morten P.D. Stevens 21 Sep '10

21 Sep '10

Hi, I have a small question with sendmail and tls verification. The tls verify fails on our internal/external sendmail servers. For example: STARTTLS=server, relay=mx1.imt-systems.com [89.146.219.60], version=TLSv1/SSLv3, verify=FAIL, cipher=DHE-RSA-AES256-SHA, bits=256/256 STARTTLS=server, relay=acsinet12.imt-systems.com [89.146.219.42], version=TLSv1/SSLv3, verify=FAIL, cipher=DHE-RSA-AES256-SHA, bits=256/256 What's the problem? The sendmail tls certificate should be okay on both servers. Here is the output of the openssl starttls check: Server 1 [root@mx1 ~]# openssl s_client -starttls smtp -connect acsinet12.imt-systems.com:25 New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE SSL-Session: Protocol : TLSv1 Cipher : DHE-RSA-AES256-SHA Session-ID: FE604F9A1765705F518A416F824DDE0B4316C52F36A3171A1593DC503EB63404 Session-ID-ctx: Master-Key: 57DB71C1E48CA6AC4E5C381B28915AF0A2D66F23D80919E05DFB77345586D6F63AD6C9A7929880E29045CD7D3ADD9556 Key-Arg : None Krb5 Principal: None Start Time: 1285023670 Timeout : 300 (sec) Verify return code: 0 (ok) --- 250 HELP quit 221 2.0.0 acsinet12.imt-systems.com closing connection On the other server: Server 2 [root@acsinet12 ~]# openssl s_client -starttls smtp -connect mx1.imt-systems.com:25 New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA Server public key is 2048 bit Secure Renegotiation IS supported Compression: zlib compression Expansion: zlib compression SSL-Session: Protocol : TLSv1 Cipher : DHE-RSA-AES256-SHA Session-ID: 4FEA16066A719033CEA69C185EDDA504CA8EDB1BB572C21A6BEB303F15F76621 Session-ID-ctx: Master-Key: 615713E2500A52E996F2BB27F3A6A0CF9A471212805120BCC81623656327A9B6184BBB61F6CF28D6E62408397CF2D221 Key-Arg : None Krb5 Principal: None PSK identity: None PSK identity hint: None Compression: 1 (zlib compression) Start Time: 1285024237 Timeout : 300 (sec) Verify return code: 0 (ok) --- 250 HELP quit 221 2.0.0 mx1.imt-systems.com closing connection The verify return code: 0 (ok) seems to be okay on both servers? Here is the sendmail TLS configuration: (Server 1) define(`confCACERT_PATH', `/etc/pki/tls/certs')dnl define(`confCACERT', `/etc/pki/tls/certs/ca-bundle.crt')dnl define(`confSERVER_CERT', `/etc/pki/tls/certs/mx1.crt')dnl define(`confSERVER_KEY', `/etc/pki/tls/certs/mx1.key')dnl define(`confCLIENT_CERT', `/etc/pki/tls/certs/mx1.crt')dnl define(`confCLIENT_KEY', `/etc/pki/tls/certs/mx1.key')dnl (Server 2) define(`confCACERT_PATH', `/etc/pki/tls/certs')dnl define(`confCACERT', `/etc/pki/tls/certs/ca-bundle.crt')dnl define(`confSERVER_CERT', `/etc/pki/tls/certs/acsinet12.crt')dnl define(`confSERVER_KEY', `/etc/pki/tls/certs/acsinet12.key')dnl define(`confCLIENT_CERT', `/etc/pki/tls/certs/acsinet12.crt')dnl define(`confCLIENT_KEY', `/etc/pki/tls/certs/acsinet12.key')dnl Does anyone know something about this issue? (verify=fail) Thank you. Best regards, Morten

2 2

problem clamd via rpmforge
by fakessh 21 Sep '10

21 Sep '10

hello list hello centos network hello all the builder of rpm's i use clamd package via rpmforge today they are passes i use CentOS 5.5 with small system with low memory system support couple postfix/amavisd/clamd/dkimproxy/sid-milter/policyd/postgrey/dovecot2 when i restart clamd i obtain one error i quote for clarity ~]# service clamd restart Stopping Clam AntiVirus Daemon: [ OK ] Starting Clam AntiVirus Daemon: WARNING: Running on 32-bit system, and RLIMIT_DATA > 2GB, lowering to 2GB! [ OK ] what error RLIMIT_DATA > 2GB i use 1GB swap how to configure the machine to remove this error thanks for all return

2 1

Where can I find list of "Core" and "Base" install groups?
by Chad Woolley 21 Sep '10

21 Sep '10

e.g. what packages are in them, as well as other groups or group-related options which may exist... Thanks, -- Chad

3 3

Software RAID + LVM + Grub
by Matthew Topper 21 Sep '10

21 Sep '10

I'm playing with software RAID and LVM in some virtual machines and I've run into an issue that I can't find a good answer to in the docs. I have the following RAID setup: md0: sda1 and sdb1, RAID 1. This is /boot md1: sda2 and sdb2, RAID 1. This is a PV for LVM. VolGroup00, this is the volume group and md1 is the only PV in it. LogVol00 is swap LogVol01 is / LogVol02 is /home So, I tested to see what happens if I disable sdb in virtualbox. Machine booted find and I was able to see that part of the raid array was gone. I reattached the disk and rebuilt the array mdam --add /dev/md0 /dev/sdb1 mdam --add /dev/md1 /dev/sdb2 The array rebuilt without issue. But now, if I remove sda, the machine doesn't boot and grub complains. The question I have is how does one reinstall the boot sector at this point? I'm a little confused as far as to what device to install it on and what to specify as the root. This is grub.conf if it helps: default=0 timeout=5 splashimage=(hd0,0)/grub/splash.xpm.gz title CentOS (2.6.18-194.e15) root (hd0,0) kernel /vmlinuz-2.6.18-194.e15 ro root=/dev/VolGroup00/LogVol01 initrd /initrd-2.6.18-194.e15.img Grub has always been a little confusing for me, so I guess I don't understand. What do the two root entries specify? And again, my main question is how do I reinstall grub to the repaired disk? Sorry for the lengthy post, I'm trying to provide as much information as possible.

3 5

Amazon Linux AMI based on CentOS?
by Timo Schoeler 21 Sep '10

21 Sep '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, a german IT news site [0] today posted that Amazon Linux AMI is based on CentOS 5.5 -- is that true? Maybe this would be stuff for the next newsletter... ;) Cheers, Timo http://www.golem.de/1009/78088.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iD8DBQFMl2Nxfg746kcGBOwRAg8sAKCelTvLYTNxVBjtOxteb7/hQY2eowCfYFzP g5VeYpo3HboTHRtibdJlrdY= =5jZQ -----END PGP SIGNATURE-----

3 3

Oracle's Unbreakable Enterprise Kernel for Oracle Linux!!!
by Robert P. J. Day 20 Sep '10

20 Sep '10

http://blogs.computerworld.com/16997/oracle_rips_red_hat_and_sort_of_launch… oracle: just another centos wanna-be? rday -- ======================================================================== Robert P. J. Day Waterloo, Ontario, CANADA Top-notch, inexpensive online Linux/OSS/kernel courses http://crashcourse.ca Twitter: http://twitter.com/rpjday LinkedIn: http://ca.linkedin.com/in/rpjday ========================================================================

4 9

iptables
by alexus 20 Sep '10

20 Sep '10

I'm trying to do some simple tcp port forwarding [root@wcmisdlin02 ~]# cat /proc/sys/net/ipv4/ip_forward 0 [root@wcmisdlin02 ~]# /bin/echo 1 > /proc/sys/net/ipv4/ip_forward [root@wcmisdlin02 ~]# cat /proc/sys/net/ipv4/ip_forward 1 [root@wcmisdlin02 ~]# iptables --list Chain INPUT (policy ACCEPT) target prot opt source destination RH-Firewall-1-INPUT all -- anywhere anywhere Chain FORWARD (policy ACCEPT) target prot opt source destination RH-Firewall-1-INPUT all -- anywhere anywhere Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain RH-Firewall-1-INPUT (2 references) target prot opt source destination ACCEPT all -- anywhere anywhere ACCEPT icmp -- anywhere anywhere icmp any ACCEPT esp -- anywhere anywhere ACCEPT ah -- anywhere anywhere ACCEPT udp -- anywhere 224.0.0.251 udp dpt:mdns ACCEPT udp -- anywhere anywhere udp dpt:ipp ACCEPT tcp -- anywhere anywhere tcp dpt:ipp ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:mysql ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ssh ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:http ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ftp ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:https REJECT all -- anywhere anywhere reject-with icmp-host-prohibited [root@wcmisdlin02 ~]# iptables --table nat --append PREROUTING --proto tcp --dport 80 --jump DNAT --to 10.52.208.223:80 [root@wcmisdlin02 ~]# iptables --table nat --list PREROUTING Chain PREROUTING (policy ACCEPT) target prot opt source destination DNAT tcp -- anywhere anywhere tcp dpt:http to:10.52.208.223:80 [root@wcmisdlin02 ~]# curl --verbose http://10.52.208.221:80 * About to connect() to 10.52.208.221 port 80 * Trying 10.52.208.221... Connection refused * couldn't connect to host * Closing connection #0 curl: (7) couldn't connect to host [root@wcmisdlin02 ~]# -- http://alexus.org/

6 7

Gnome mouse configuration.
by James B. Byrne 20 Sep '10

20 Sep '10

On my Centos-5.5 (x64) based desktop the optical mouse I originally configured during the system install has died. In /etc/sysconfig/hwconf this is configured as: class: MOUSE bus: USB detached: 0 device: input/mice driver: genericwheelusb desc: "Microsoft Microsoft 3-Button Mouse with IntelliEye(TM)" usbclass: 3 usbsubclass: 1 usbprotocol: 2 usbbus: 4 usblevel: 1 usbport: 0 usbdev: 4 vendorId: 045e deviceId: 0053 usbmfr: Microsoft usbprod: Microsoft 3-Button Mouse with IntelliEye(TM) I have replaced the failed mouse with a spare from our surplus parts cabinet and now the centre wheel/button click no longer inserts selected text at the current cursor position. I would like to obtain this feature with the replacement mouse, which is described on the bottom as a MicroSoft Optical Mouse Blue USB and PS/2 compatible. It has a usb connector which is plugged directly into the chassis usb port. All the other features of the mouse seem to work just fine. I simply cannot obtain the centre button click insert capability. Is there no way to simply force CentOS-5 to re-detect the attached mouse? It must have done something akin to this during the initial install. I tried running kudzu as root from a gnome terminal session but that had no effect that I can detect. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

xen
by mattias 20 Sep '10

20 Sep '10

If i will use nat on a xen vm what should i set in the config file?

2 2

How to simulate minimal ISO install using stage2 image file?
by Chad Woolley 20 Sep '10

20 Sep '10

Hello, I'm working on a project which automates creation of EC2 AMI images. To do this, you must use a running EC2 instance to mount an image file in a chroot jail. My problem is that I want to create an AMI that looks exactly like a minimal (nothing selected) install from the CentOS ISO image, but the "stage2" image [1] file is much more "minimal" than that. e.g., it doesn't have yum, groups, devices, networking, etc set up as you would if you had run the ISO minimal install on a real or virtual box. I can't mount the ISO directly in the chroot (as far as I know, but I could be wrong). My question is, how can I make the mounted stage2.img chroot jail look just like a minimal ISO install? I could manually create everything (which I have started), but this is a lot of work, and I'm likely to miss something that an ISO build would have (e.g. some group). Is there some other standard CentOS script I can run after mounting the stage2.img which will do everything the installer does? Can I run the installer manually with some kickstart script? Pointers to references and documentation are welcome... Thanks, -- Chad [1] http://mirrors.usc.edu/pub/linux/distributions/centos/5.5/os/x86_64/images/

1 1

← Newer
1
...
5
6
7
8
9
10
11
...
17
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss September 2010