February 2011 - Discuss - lists.centos.org

ls returns file doesn't exist, find finds it??
by neubyr 24 Feb '11

24 Feb '11

Howdy, I am getting some errors with find and ls command - such that find is able to see a file whereas ls says the file doesn't exist. Initially I was trying find and ls together as: # find ./ -type f -mtime +15 | xargs ls Similar behavior is seen even when I execute both commands separately. Any thoughts on what might be wrong here? -- thanks, neubyr

8 8

RECALL: http://www.securityweek.com/high-severity-bind-vulnerability-advisory-issued
by Larry Vaden 24 Feb '11

24 Feb '11

On Wed, Feb 23, 2011 at 11:27 AM, Larry Vaden <vaden(a)texoma.net> wrote: > US-CERT encourages users and administrators using the affected > versions of BIND to upgrade to BIND 9.7.3. > > Optionally, one can wait on a backport. This message is RECALLED even though: 1) US-CERT used the word "affected." 2) the "optionally" was directed to those who might have used RHEL/CentOS' excellent facility to draw in code from other repos.

9 8

redirecting traffic using iptables
by Jobst Schmalenbach 24 Feb '11

24 Feb '11

Hi. I have two internet connections, the ADSL2+ is very very cheap (but fast 10mb) and I want to use the SHDSL (2mb) only for mail,ssh,http OUT and the ADSL2+ only for surfing. I all works fine if people specify the proxy in the browser, but in case like flash it of no use. Further if I can make the 80/443 traffic go through the proxy only, its an added bonus. If this can be done, fine. Bue I want all 80/443 traffic go through host2. SHDSL ADSL2+ ------ ------- host 1 host2 SQUID ------ ------- | | ------------ host3 ------------ | eth1 On host 3 I have been trying to do this with IPtables, but I am stuck, I tried to utilise squid too, does not work tried: iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j DNAT --to $PROXY:3128 iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 443 -j DNAT --to $PROXY:3128 browser tell me "invalid request". All I want is to redirect all traffic through host2 if ports 443 and 80 are encountered, thats all. If it goes through the proxy it is an added bonus, but not required. ANy ideas, anyone? Jobst -- 'Two things are infinite: the universe and human stupidity, and I'm not sure about the first one. - Albert Einstein | |0| | Jobst Schmalenbach, jobst(a)barrett.com.au, General Manager | | |0| Barrett Consulting Group P/L & The Meditation Room P/L |0|0|0| +61 3 9532 7677, POBox 277, Caulfield South, 3162, Australia

3 3

Unicode in C++
by Michael D. Berger 24 Feb '11

24 Feb '11

On my CentOS box, in C++ programs, is there a way to print Unicode characters? Thanks, Mike.

7 10

Air Conditioning - ON!
by John Hinton 23 Feb '11

23 Feb '11

All, (and please do not turn this into the next long thread) We have a small team which volunteers their time to create the CentOS releases. They are pounded right now with getting that done... it is as simple as that. Each of us 'chose' to use CentOS and with that choice comes nothing more. Why are we complaining? To me, it is all very self-centered. Basically we're all complaining because we 'want' something. And yes, I'm on edge wanting something as well... but that is life with RedHat in general. Some of the suggestions made: 1. Send money. OK, so using a very loose or reapplied definition of a word... we want to 'prostitute' the CentOS team. In other words, if we send money we have the 'right' to gripe and press for rapid releases? Demand services? 2. Add more staff. As a small business owner, the very last thing you want to do is add more staff when you are in a slammed state. It takes all of the 'productive' workers time to train the new staff and output slows to a crawl. 3. Make any other number of 'helpful' suggestions. Well, I think by now the CentOS team knows better than us how this needs to be done based on infrastructure and team members. And even if they aren't doing it right, we don't get to make demands that it be done differently as this is how they have decided to do it. Remember, you chose CentOS based on how they operate. You can go away if you like. 4. Bringing up other distros that are ahead of CentOS. This just an attempt at indirect pressure on the CentOS team to get a competition going. Only the team gets to choose their competition. CentOS 'rates' how it rates and that is up to the CentOS team and their decisions. Some cheerleading might be welcomed, as long as it doesn't become an "I cheer for you therefore you owe me". 5. MOST IMPORTANT---- discussing this right now is the wrong time. The CentOS team needs to be focused on the builds. They need to 'feel good'. They do not need these distractions, complaints, suggestions, pressures and generally negative comments at this moment in time. If it really bothers you, save it for later and bring it up when things are back to normal loads. Perhaps some good will come out of it, but not now. I know that most mean well, but look inside of yourself and the rush is about something you want... and YOU chose a FREE distro, which just so happens to convert to the paid version very easily. 6,7,8,9 and 10 (fill in your own but keep them to yourself) If I were a member of the CentOS team right now, I'd likely be looking at the door. I positively would be needing to step back and take some time to myself to try to cool off and feel positive about what I'm doing. To me and from what I have heard from the CentOS team, very little of what is being said on the list is helping but instead is counterproductive at the moment. Obviously the team is 'reading' the list and 'obviously' some of us have pushed them further at a very high stress time, than they have ever been pushed before. You may also note that upstream was also 'very late' with these new releases. Could it be we are discovering why? (please don't try to answer that) Please please please... ease up, give them the time they need. Make notes for future conversations, but quit distracting them and making them feel bad. Or, write your scathing reply to a thread... get really down angry and in the dirt... then when you're done, just delete it. CentOS team, I do have just one suggestion (and I have no rights to ask this). It seems that the list goes quiet and waits for a while and then explodes a few days/weeks/months later with this banter. If you would consider a public release to this list, perhaps once per week during major releases with just some tidbit of how things are going, perhaps these threads wouldn't explode. With that would be the need for it to be an announcement or something that does not allow it to become a drawn out thread with hoards of perceived 'helpful' suggestions. I can't blame you for not doing this prior, as I'm sure it will fuel fires such as the one raging at the moment. Is there a way this could be done with a 'no-reply' setting or something? With Much Appreciation, John Hinton

18 24

OT: please moderade or remove Larry Vaden
by Rudi Ahlers 23 Feb '11

23 Feb '11

Can an admin please moderate ALL posts from Larry Vaden, or remove him from the list? -- Kind Regards Rudi Ahlers SoftDux Website: http://www.SoftDux.com Technical Blog: http://Blog.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

1 0

openldap problems authenticating
by Tim Dunphy 23 Feb '11

23 Feb '11

Hello list, I am running an openldap 2.4 server under FreeBSD that was working well until the config was tweaked by someone on the team without properly documenting their work # /usr/local/etc/ldap.con on ldap server (FreeBSD 8.1) host LBSD.summitnjhome.com base dc=summitnjhome,dc=com sudoers_base ou=sudoers,ou=Services,dc=summitnjhome,dc=com binddn cn=pam_ldap,ou=Services,dc=summitnjhome,dc=com bindpw {SSHA}secret scope sub pam_password exop nss_base_passwd ou=staff,dc=summitnjhome,dc=com nss_base_shadow ou=staff,dc=summitnjhome,dc=com # grep for ldap account shows ldap account on the ldap server itself succeeds [root@LBSD2:/usr/local/etc/openldap] #getent passwd | grep walbs walbs:secret/:1002:1003:Walkiria Soares:/home/walbs:/usr/local/bin/bash [root@LBSD2:/usr/local/etc/openldap] #grep walbs /etc/passwd [root@LBSD2:/usr/local/etc/openldap] # # /etc/ldap.conf on ldap client (centos 5.5) host LBSD2.summitnjhome.com base dc=summitnjhome,dc=com sudoers_base ou=sudoers,ou=Services,dc=summitnjhome,dc=com binddn cn=pam_ldap,ou=Services,dc=summitnjhome,dc=com bindpw {crypt}secret scope sub pam_password exop nss_base_passwd ou=staff,dc=summitnjhome,dc=com nss_base_shadow ou=staff,dc=summitnjhome,dc=com # grep getent passwd for ldap account on the client nothing turns up after a long pause [root@LCENT01:~] #getent passwd | grep walbs [root@LCENT01:~] # # nsswitch on the client passwd: files ldap shadow: files ldap group: files ldap sudoers: ldap #hosts: db files nisplus nis dns hosts: files dns # this is what's going on in the logs on the ldap server during th getent from the #client Feb 22 21:31:18 LBSD2 slapd[51158]: conn=3411 op=0 RESULT tag=97 err=49 text= Feb 22 21:31:18 LBSD2 slapd[51158]: conn=3411 op=1 UNBIND Feb 22 21:31:18 LBSD2 slapd[51158]: conn=3411 fd=22 closed Feb 22 21:31:26 LBSD2 slapd[51158]: conn=3412 fd=22 ACCEPT from IP=192.168.1.42:53811 (IP=192.168.1.44:389) Feb 22 21:31:26 LBSD2 slapd[51158]: conn=3412 op=0 BIND dn="cn=pam_ldap,ou=Services,dc=summitnjhome,dc=com" method=128 Feb 22 21:31:26 LBSD2 slapd[51158]: conn=3412 op=0 RESULT tag=97 err=49 text= Feb 22 21:31:26 LBSD2 slapd[51158]: conn=3412 op=1 UNBIND Feb 22 21:31:26 LBSD2 slapd[51158]: conn=3412 fd=22 closed #ldap search from the client as the pam services account is able to locate the ldap user info [root@LCENT02:~] #ldapsearch -xH 'ldap://LBSD2.summitnjhome.com' -D 'cn=pam_ldap ,ou=Services,dc=summitnjhome,dc=com' -w 'secret' -b 'dc=summitnjhome,dc=com' '(uid=walbs)' # extended LDIF # # LDAPv3 # base <dc=summitnjhome,dc=com> with scope subtree # filter: (uid=walbs) # requesting: ALL # # walbs, People, summitnjhome.com dn: uid=walbs,ou=People,dc=summitnjhome,dc=com uid: walbs cn: Walkiria Soares givenName: Walkiria sn: Soares mail: walbs(a)example.com objectClass: inetLocalMailRecipient objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: posixAccount objectClass: top uidNumber: 1002 gidNumber: 1003 # search result search: 2 result: 0 Success # numResponses: 2 # numEntries: 1 #pam_ldap services account in the ldap directory 3 cn=pam_ldap,ou=Services,dc=summitnjhome,dc=com cn: pam_ldap objectClass: top objectClass: inetOrgPerson sn: PAM userPassword: {SSHA}secret I have also tried doing anonymous binds on the client as well as using plain text passwords. I get the same tag=97 err=49 messages on the client either way. Some advice is sorely needed here. Thank you very kindly in advance! -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

2 1

massive mirror errors
by John R Pierce 23 Feb '11

23 Feb '11

I'm trying to ... yum groupinstall "Development Tools" on a reasonably current 5.5 system and getting massive mirror failures... is there a problem, or is this my employer's network messing up? (45/74): rpm-build-4.4.2.3-20.el5_5.1.i386.rpm | 302 kB 00:03 http://mirror.singleedge.com/pub/centos/5.5/addons/i386/CentOS/imake-1.0.2-…: [Errno 14] HTTP Error 404: Not Found Trying other mirror. http://mirror.nwresd.org/pub/centos/5.5/addons/i386/CentOS/imake-1.0.2-3.i3…: [Errno 14] HTTP Error 404: Not Found Trying other mirror. http://hpc.arc.georgetown.edu/mirror/centos/5.5/addons/i386/CentOS/imake-1.…: [Errno 14] HTTP Error 404: Not Found Trying other mirror. http://mirror.its.uidaho.edu/pub/centos/5.5/addons/i386/CentOS/imake-1.0.2-…: [Errno 14] HTTP Error 404: Not Found Trying other mirror. http://mirror.flhsi.com/centos/5.5/addons/i386/CentOS/imake-1.0.2-3.i386.rpm: [Errno 14] HTTP Error 404: Not Found Trying other mirror. http://mirror.highspeedweb.net/CentOS/5.5/addons/i386/CentOS/imake-1.0.2-3.…: [Errno 14] HTTP Error 404: Not Found Trying other mirror. http://mirror.atlanticmetro.net/centos/5.5/addons/i386/CentOS/imake-1.0.2-3…: [Errno 14] HTTP Error 404: Not Found Trying other mirror. http://ftp.lug.udel.edu/pub/centos/5.5/addons/i386/CentOS/imake-1.0.2-3.i38…: [Errno 14] HTTP Error 404: Not found Trying other mirror. http://mirror.vcu.edu/pub/gnu%2Blinux/centos/5.5/addons/i386/CentOS/imake-1…: [Errno 12] Timeout: <urlopen error timed out> Trying other mirror. http://mirrors.greenmountainaccess.net/centos/5.5/addons/i386/CentOS/imake-…: [Errno 14] HTTP Error 404: Not Found Trying other mirror. http://mirror.singleedge.com/pub/centos/5.5/addons/i386/CentOS/libXaw-1.0.2…: [Errno 14] HTTP Error 404: Not Found Trying other mirror. http://mirror.nwresd.org/pub/centos/5.5/addons/i386/CentOS/libXaw-1.0.2-8.1…: [Errno 14] HTTP Error 404: Not Found Trying other mirror. http://hpc.arc.georgetown.edu/mirror/centos/5.5/addons/i386/CentOS/libXaw-1…: [Errno 14] HTTP Error 404: Not Found Trying other mirror. http://mirror.its.uidaho.edu/pub/centos/5.5/addons/i386/CentOS/libXaw-1.0.2…: [Errno 14] HTTP Error 404: Not Found Trying other mirror. http://mirror.flhsi.com/centos/5.5/addons/i386/CentOS/libXaw-1.0.2-8.1.i386…: [Errno 14] HTTP Error 404: Not Found Trying other mirror. http://mirror.highspeedweb.net/CentOS/5.5/addons/i386/CentOS/libXaw-1.0.2-8…: [Errno 14] HTTP Error 404: Not Found Trying other mirror. http://mirror.atlanticmetro.net/centos/5.5/addons/i386/CentOS/libXaw-1.0.2-…: [Errno 14] HTTP Error 404: Not Found Trying other mirror. http://ftp.lug.udel.edu/pub/centos/5.5/addons/i386/CentOS/libXaw-1.0.2-8.1.…: [Errno 4] IOError: <urlopen error (111, 'Connection refused')> Trying other mirror.

1 1

squashfs in the hundreds of GB range
by Boris Epstein 23 Feb '11

23 Feb '11

Hello listmates, I am running mksquashfs trying to archive a 400GB+ directory. It has already taken about a day and the resultant archive is only about 40GB thus far and the command is not done yet. Has anyone made a squashfs that size? Is it normal for the process to take this long? If it is not - what am I doing wrong. I am using the most basic syntax: mksquashfs <directory name> <image name> The process is running at 100% CPU. Thanks for any and all help. Boris.

1 0

sendmail, port 465/587, auth and imap
by Jobst Schmalenbach 23 Feb '11

23 Feb '11

Hi. Apologies to the list for sending this twice as I forgot to enter a proper subject line, I wanted to write the content first and then make up the subject line ;-) -------------------------------------------------------------------- I am trying to configure sendmail that is looks up the users credentials to allow them to send email via that server via an imap server on the same machine when sending email while on the road. I can send email when specifying a user that is stored in the servers /etc/shadow ... no problem but I cannot get my head around it how to do make saslauth OR sendmail lookup the user via the imap daemon. This is the working config (mc) for the sendmail daemon when using a locally created user (I knock the PLAIN off once I got it to work): define(`confAUTH_MECHANISMS', `LOGIN PLAIN DIGEST-MD5 CRAM-MD5') TRUST_AUTH_MECH(`LOGIN PLAIN DIGEST-MD5 CRAM-MD5') DAEMON_OPTIONS(`Family=inet, Port=465, Name=MTA-SSL, M=s') etc. How can I make sendmail (or saslauth) to get the user credentials via an imap server running on the same machine (the credentials are from an internal samba server) so I do not need to enter users details twice? Jobst -- 186,262 miles/second : Not just a good idea, it's the LAW. | |0| | Jobst Schmalenbach, jobst(a)barrett.com.au, General Manager | | |0| Barrett Consulting Group P/L & The Meditation Room P/L |0|0|0| +61 3 9532 7677, POBox 277, Caulfield South, 3162, Australia

1 1

asd
by Jobst Schmalenbach 23 Feb '11

23 Feb '11

Hi. I am trying to configure sendmail that is looks up the users credentials to allow them to send email via that server via an imap server on the same machine when sending email while on the road. I can send email when specifying a user that is stored in the servers /etc/shadow ... no problem but I cannot get my head around it how to do make saslauth OR sendmail lookup the user creds via the imap daemon. This is the working config (mc) for the sendmail daemon when using a locally created user (I knock the PLAIN off once I got it to work): define(`confAUTH_MECHANISMS', `LOGIN PLAIN DIGEST-MD5 CRAM-MD5')dnl TRUST_AUTH_MECH(`LOGIN PLAIN DIGEST-MD5 CRAM-MD5')dnl DAEMON_OPTIONS(`Family=inet, Port=465, Name=MTA-SSL, M=s')dnl etc. How can I make sendmail (or saslauth) to get the user credentials via an imap server running on the same machine (the credentials are from an internal samba server) so I do not need to enter users details twice? Jobst -- Passwords are like underwear. You don't share them, you don't hang them on your monitor, or under your keyboard, you don't email them, or put them on a web site, and you must change them very often. | |0| | Jobst Schmalenbach, jobst(a)barrett.com.au, General Manager | | |0| Barrett Consulting Group P/L & The Meditation Room P/L |0|0|0| +61 3 9532 7677, POBox 277, Caulfield South, 3162, Australia

1 0

System Log Error
by sync 22 Feb '11

22 Feb '11

When I issue sudo tail -f/var/log/syslog in order to try and track down an external drive problem I get the following: Jan 11 07:56:00 kernel: [17179663.076000] atkbd.c: Unknown key released (translated set 2, code 0x81 on isa0060/serio0). Jan 11 07:56:00 kernel: [17179663.076000] atkbd.c: Use 'setkeycodes e001 <keycode>' to make it known. Jan 11 07:56:00 kernel: [17179663.084000] atkbd.c: Unknown key pressed (translated set 2, code 0xd9 on isa0060/serio0). Jan 11 07:56:00 kernel: [17179663.084000] atkbd.c: Use 'setkeycodes e059 <keycode>' to make it known. Jan 11 07:56:11 kernel: [17179674.012000] atkbd.c: Unknown key pressed (translated set 2, code 0xd9 on isa0060/serio0). Jan 11 07:56:11 kernel: [17179674.012000] atkbd.c: Use'setkeycodes e059 <keycode>' to make it known. I have no idea what this means. atkbd presumably means AT keyboard? Can anybody translate the rest and point me at what might be wrong with my keyboard setup? By the way ,the server is CentOS 5.3 x86_64, and kernel version is 2.6.18-128 Thanks....

3 7

How much maximum memory will CentOS 5 support? I know it's not 16 GB!
by Aleksey Tsalolikhin 22 Feb '11

22 Feb '11

How much maximum memory will CentOS 5 support, please? The product info page at http://www.centos.org/product.html says 16GB, but I am running 80 GB RAM right now and seeing 80 GB in top. I see the same 16 GB limit on the RHEL page: http://www.redhat.com/rhel/compare/#note_4 The server hardware is capable of 192 GB RAM and I want to add memory, but want to be sure the OS will support it. Is anybody running CentOS 5 or RHEL 5 with 192 GB or more, please? Best, -at

2 1

Any update on 5.6 / 6?
by robert mena 22 Feb '11

22 Feb '11

Hi, Despite the mailing list and twitter I did not find any updated info on either versions regarding the current status. So, what is the current status of both versions? (like 60%)

56 179

problems with createrepo
by Janez Kosmrlj 22 Feb '11

22 Feb '11

I run a local repo for our company's packages. Since yesterday we have problems with creating the repo files. When i run "createrepo --update -s sha rpmdir" i get the folowing error: File "/usr/share/createrepo/genpkgmetadata.py", line 249, in ? main(sys.argv[1:]) File "/usr/share/createrepo/genpkgmetadata.py", line 223, in main mdgen.doPkgMetadata() File "/usr/lib/python2.4/site-packages/createrepo/__init__.py", line 368, in doPkgMetadata self.writeMetadataDocs(packages) File "/usr/lib/python2.4/site-packages/createrepo/__init__.py", line 532, in writeMetadataDocs self.primaryfile.write(po.xml_dump_primary_metadata()) File "/usr/lib/python2.4/site-packages/yum/packages.py", line 1032, in xml_dump_primary_metadata msg += misc.to_unicode(self._dump_base_items()) File "/usr/lib/python2.4/site-packages/yum/packages.py", line 866, in _dump_base_items msg = """ UnicodeDecodeError: 'ascii' codec can't decode byte 0xc2 in position 83: ordinal not in range(128) I didn't change anything on the server and it fails on packages that are more than a year old. It usually fails on package number 200-206. When i move the supposedly broken package to a new directory and run createrepo on that directory, then createrepo finishes OK. I googled a bit, but i couldn't find anything useful. Has anyone on this list seen something similar and what was the problem. thanx in advance Janez

1 1

funding
by compdoc 22 Feb '11

22 Feb '11

Maybe what Centos needs is a bridal registry. Here in the US, an engaged couple can tell their friends what they'd like to be given as wedding presents. They do this by listing items in a registry, in various stores around town. Anyway, the idea is, post stuff you need in a list on your site. Say you need 20 hard drives, or a particular power supply, or whatever items that get consumed in day to day operations. Just list what's needed, who needs it, and whatever info. It doesn't have to be hardware either - just something everyone can agree is OK to list. People visiting the site can look and decide if it's possible to contribute something - even if it's only one new hard drive of the type needed. Or maybe a canister of Columbia's finest coffee. (although I supposed consuming donated foods of any kind from unknown persons is a risk) And should a contributing member have a hardware failure on his own personal workstation, why not ask the world for some charity in return for his/her efforts? Just list what you need, what it is to be used for, and see if we like you enough to give it to you. 'Contributing members' meaning those known to the community, verifiable, and who are putting in the hours, or whatever efforts. And I'm thinking cash donations should be frowned upon because money can be so easily subverted to doing bad things in the world.

2 1

iptables question.
by Bill Campbell 22 Feb '11

22 Feb '11

We use a home-brew system similar to fail2ban to block traffic from IP addresses which appear to be doing Nasty Things(tm). The main thing our system does that fail2ban doesn't is to use a central DNSRBL we maintain allowing it to immedatiately ban listed IP addresses the first time they make an attempt to connection without waiting for them to hit a sufficient number of times to bring up the block. This system sends e-mail messages to our security alias whenever a blocking even occurs, either from tcp_wrappers or swatch log watcher. My problem is that occassionally an IP addresses doesn't appear to be blocked as we continue to see the e-mail messages after the blocks are in place. Most frequently these occur from courier-imap failed login attempts, less frequently from sshd. To start, iptables is initialized by setting up a named rule set, say on eth0: # these two set up the rule set. iptables -N csblocks iptables -A csblocks -j RETURN # now add it to input, check csblocks on all new connections. iptables -i eth0 -m state --state NEW -j csblocks #Insert block IP address 1.2.3.4 as first rule in the set. iptables -I csblocks 1 -s 1.2.3.4 -j DROP # now add a rule to prevent IP forwarding on gateway machines. iptables -A FORWARD -s 1.2.3.4 -j DROP # for good measure, null route the IP route add -host 1.2.3.4 reject With all that incoming attempts still seem to get by for a few IP addresses, but certainly not all. Can anybody point out what I'm doing wrong, or why this may happen? Bill -- INTERNET: bill(a)celestial.com Bill Campbell; Celestial Software LLC URL: http://www.celestial.com/ PO Box 820; 6641 E. Mercer Way Voice: (206) 236-1676 Mercer Island, WA 98040-0820 Fax: (206) 232-9186 Skype: jwccsllc (206) 855-5792 An almost hysterical antagonism toward the gold standard is one issue which unites statists of all persuasions. They seem to sense that gold and economic freedom are inseparable. -- Alan Greenspan

2 2

java-1.6.0-openjdk.x86_64 keeps clobbering logging.properties
by Jason Pyeron 21 Feb '11

21 Feb '11

It appears that the rpm does not list the logging.properties as a config file, as such every time yum updates the file get overwritten. /usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0.x86_64/jre/lib/logging.properties For now I have a cron job to replace it. Any suggestions? -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Principal Consultant 10 West 24th Street #100 - - +1 (443) 269-1555 x333 Baltimore, Maryland 21218 - - - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- This message is copyright PD Inc, subject to license 20080407P00.

2 2

Re: [CentOS] Air Conditioning - ON!
by aly.khimji＠gmail.com 21 Feb '11

21 Feb '11

I too am with the fella's on this. Thanks for all your time and hard work. It is greatly appreciated, more then words can say. Aly ------Original Message------ From: Corey A Johnson Sender: centos-bounces(a)centos.org To: CentOS mailing list ReplyTo: CentOS mailing list Subject: Re: [CentOS] Air Conditioning - ON! Sent: Feb 21, 2011 1:34 PM John Hinton wrote: > All, > > (and please do not turn this into the next long thread) > > <snip> I am not a man of many words.. and i am usually very quiet on this list. But would just like to say that i appreciate all the CentOS team members immensely. I sincerely thank you all for the time you put in to what i consider the best free Linux distro available. _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos Sent on the TELUS Mobility network with BlackBerry

1 0

Basic Bash Script Question
by James Bensley 21 Feb '11

21 Feb '11

I'm stuck trying to work this one out and my Google skills are apparently lacking today. This is a test bash script; #!/bin/bash do something | tee a.log if [ $? -ne 0]; then echo broken fi The problem with this script is $? contains the exit value of the tee command, but I want to check the exit value of whatever command I put in place of 'do something'. How can I achieve this without loosing the tee operation, as 'do something' maybe a long running command with a lot of output like rsync? I don't want to; result=`do something` if [ $? -ne 0... .... fi echo $result As that won't output anything until the script has finished (the reason for the tee is that this script will be a scheduled cron tab but it may be run interactively sometimes also). Thanks for reading :) -- James. http://www.jamesbensley.co.cc/ There are 10 kinds of people in the world; Those who understand Vigesimal, and J others...?

3 3

CentOS 5.5 Java Process Death
by Martin Hewitt 21 Feb '11

21 Feb '11

Hi all, I'm running CentOS 5.5 Final, Java version "1.6.0_17" OpenJDK Runtime Environment (IcedTea6 1.7.5) (rhel-1.16.b17.el5-x86_64) OpenJDK 64-Bit Server VM (build 14.0-b16, mixed mode) installed via Yum. We have a java application, packaged as a jar, running on our servers which, periodically, crawls RSS feeds and writes the articles to a database. Randomly, and seemingly without cause, these processes will die, not through the application exiting, or due to my killing it, but due to something that seems to kill without leaving a trace. My first step in diagnosing this was to log all output from the application, as well as sending stderr and stdout to a logfile, but none of these output logs contain anything that would indicate why these processes have died. My next instinct was the kernel-level out of memory killer, but the system is never low on memory (8GB installed, routinely showing 6.5GB in free cache) and usually has somewhere between 1GB and 3GB of memory free at any given point in time. I next thought the system could be hitting bad memory, segfaulting, and killing the process because of that, but I've mirrored the system on an identically configured server in a different datacentre, and the processes are still being killed. The java virtual machine does trigger JVM core dumps on exit, so the process is being killed by something, but the JVM dumps don't have any useful information. My question is: does anyone know what might be causing it, and where I should start looking to diagnose the cause? Thanks.

7 24

Recommendation for a Good Vulnerability Scanning Service?
by Michael B Allen 21 Feb '11

21 Feb '11

Hi, Can someone recommend a good vulnerability scanning service? I just need the minimum for PCI compliance (it's a sort of credit card processing certification). I got a free scan from https://www.hackerguardian.com/ and their scan reported a number of "Fail" results. I haven't checked them all yet but most seem to be things for which fixes were backported looong ago by The Upstream Vendor. I haven't spoken with the hackerguardian people yet but it would be nice if I could just say "I'm using CentOS 5.5" and have them factor that into their report so that I can focus on any real issues. Are there vulnerability scanning services that are more or less sophisticated about this? Thanks, Mike

9 13

We haven't had a lot of demand for Fedora...people seem okay with CentOS!
by Larry Vaden 20 Feb '11

20 Feb '11

That just in from chunkhost.com, where you help them beta test Xen for $FREE :) regards/ldv/vaden(a)texoma.net

3 2

initlog is deprecated
by Tim Dunphy 20 Feb '11

20 Feb '11

Hello Centos, I am getting an error that I am not familiar with when I restart ssh. [root@virtcent01:~] #service sshd restart Stopping sshd: [ OK ] Starting sshd:WARNING: initlog is deprecated and will be removed in a future release [ OK ] [root@virtcent01:~] # I was just wondering if this is in the 'ignorable but annoying' category of things or whether there is something you can do about this. I've tried googling this error but haven't found any definitive answer here. I've also tried grepping the conf file for some of the terms in the error message and not found anything. I'm enclosing my conf file in case this has some clues I'm missing. thanks in advance! -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

5 7

strace issue in 5.5?
by Eric Gerzon 20 Feb '11

20 Feb '11

Hello, I am trying to get some more information about the following issue: # strace -p 2256 attach: ptrace(PTRACE_ATTACH, ...): Operation not permitted I am trying to trace an mdadm re-sync pid and I keep getting the above error. I have done some digging on google and forums, but have not had much luck. Redhat-release says CentOS release 5.5 (Final) uname: 2.6.18-194.32.1.el5 Any help would be great. -Eric

3 3

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss February 2011