Discuss September 2011

discuss@lists.centos.org

268 participants
254 discussions

Unable to run yum update
by david 08 Oct '11

08 Oct '11

Folks The system involved is a 32-bit system, installed via the net about a week ago. The command yum update encountered the following diagonstic Error: Package: yaf-1.3.2-1.el6.rf.x86_64 (@rpmforge) Requires: libfixbuf-0.9.0.so.8()(64bit) Removing: libfixbuf-0.9.0-1.el6.rf.x86_64 (@rpmforge) libfixbuf-0.9.0.so.8()(64bit) Updated By: libfixbuf-1.0.1-1.el6.rf.x86_64 (rpmforge) Not found You could try using --skip-broken to work around the problem You could try running: rpm -Va --nofiles --nodigest The repositories I use are: base epel extras rpmforge updates virtualbox I wonder if using priorities would help? Rpmforge is "supposed" to be non-conflicting, but then.... Please let me know what I should do. David

5 5

[C6] Some typical apps missing?
by Marko Vojinovic 08 Oct '11

08 Oct '11

Hi everyone! :-) I just installed CentOS 6 on one of my desktop machines, and yum now tells me that some of my favorite apps are not present in any of the repositories I configured. To name a few: ktorrent, kile, krusader, pavucontrol, mplayerplug-in (or is it now gecko-mediaplayer), xine, xmms, and so on... All these apps were readily available for C5, and I used them happily. I am mostly surprised with the absence of *any* torrent client, bar the rtorrent (which doesn't have a man page and I have no idea how to use it). Also kile, krusader and pavucontrol are quite basic and common apps... The configured repositories are: base, updates, extras, rpmforge, elrepo, as reported by yum. What am I missing? I would also be grateful if anyone has a suggestion for a reasonable (and available) substitute for any of these apps. I usually prefer KDE4 apps, but will use anything that works. I found some (rtorrent, mozilla-vlc, gnome-volume-control), but I am not exactly thrilled with their quality, so I'm hoping someone has a better suggestion. Google didn't want to be my friend this time, all hits were related to C5... ;-) TIA, :-) Marko

8 8

Problems with Intel Ethernet and module e1000e
by Volker Poplawski 04 Oct '11

04 Oct '11

Hi all, I'm facing a serious problem with the e100e kernel module for Intel 82574L gigabit nics on Centos 6. The device eth0 suddenly stops working i.e. no more networking. When I do ifconfig from console I get eth0 Link encap:Ethernet HWaddr 00:xx:xx:xx:xx:EA inet6 addr: fe80::225:90ff:fe50:8fea/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:37984 errors:54245436935850 dropped:9040906155975 overruns:0 frame:36163624623900 TX packets:20884 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:4431149 (4.2 MiB) TX bytes:4628666 (4.4 MiB) Memory:fb900000-fb920000 Reported byte count and RX TX packet count is reasonable. Howerver the incredible large number of errors is not. Also they don't pile up but simply appear when the device stopped working. In /var/log/messages I get: Sep 23 12:21:09 wader2 kernel: ------------[ cut here ]------------ Sep 23 12:21:09 wader2 kernel: WARNING: at net/sched/sch_generic.c:261 dev_watchdog+0x26d/0x280() (Not tainted) Sep 23 12:21:09 wader2 kernel: Hardware name: X9SCL/X9SCM Sep 23 12:21:09 wader2 kernel: NETDEV WATCHDOG: eth0 (e1000e): transmit queue 0 timed out Sep 23 12:21:09 wader2 kernel: Modules linked in: tun ebtable_nat ebtables xt_CHECKSUM iptable_mangle ipt_MASQUERADE iptable_nat nf_nat sunrpc bridge stp llc xt_physdev ipt_REJECT nf_conntrack_ipv4 nf_defrag_ipv4 iptable_filter ip_tables ip6t_REJECT nf_conntrack_ipv6 xt_state nf_conntrack ip6table_filter ip6_tables ipv6 kvm_intel kvm serio_raw i2c_i801 i2c_core iTCO_wdt iTCO_vendor_support sg e1000e ext4 mbcache jbd2 sd_mod crc_t10dif ahci megaraid_sas dm_mod [last unloaded: scsi_wait_scan] Sep 23 12:21:09 wader2 kernel: Pid: 0, comm: swapper Not tainted 2.6.32-71.29.1.el6.x86_64 #1 Sep 23 12:21:09 wader2 kernel: Call Trace: Sep 23 12:21:09 wader2 kernel: <IRQ> [<ffffffff8106b947>] warn_slowpath_common+0x87/0xc0 Sep 23 12:21:09 wader2 kernel: [<ffffffff8106ba36>] warn_slowpath_fmt+0x46/0x50 Sep 23 12:21:09 wader2 kernel: [<ffffffff8142a07d>] dev_watchdog+0x26d/0x280 Sep 23 12:21:09 wader2 kernel: [<ffffffff8107d3c5>] ? internal_add_timer+0xb5/0x110 Sep 23 12:21:09 wader2 kernel: [<ffffffff81429e10>] ? dev_watchdog+0x0/0x280 Sep 23 12:21:09 wader2 kernel: [<ffffffff8107dfc7>] run_timer_softirq+0x197/0x340 Sep 23 12:21:09 wader2 kernel: [<ffffffff810a0e90>] ? tick_sched_timer+0x0/0xc0 Sep 23 12:21:09 wader2 kernel: [<ffffffff8102f52d>] ? lapic_next_event+0x1d/0x30 Sep 23 12:21:09 wader2 kernel: [<ffffffff81073d67>] __do_softirq+0xb7/0x1e0 Sep 23 12:21:09 wader2 kernel: [<ffffffff81095c50>] ? hrtimer_interrupt+0x140/0x250 Sep 23 12:21:09 wader2 kernel: [<ffffffff810142cc>] call_softirq+0x1c/0x30 Sep 23 12:21:09 wader2 kernel: [<ffffffff81015f35>] do_softirq+0x65/0xa0 Sep 23 12:21:09 wader2 kernel: [<ffffffff81073b65>] irq_exit+0x85/0x90 Sep 23 12:21:09 wader2 kernel: [<ffffffff814d0a31>] smp_apic_timer_interrupt+0x71/0x9c Sep 23 12:21:09 wader2 kernel: [<ffffffff81013c93>] apic_timer_interrupt+0x13/0x20 Sep 23 12:21:09 wader2 kernel: <EOI> [<ffffffff812dac0f>] ? acpi_idle_enter_bm+0x28f/0x2c3 Sep 23 12:21:09 wader2 kernel: [<ffffffff812dac08>] ? acpi_idle_enter_bm+0x288/0x2c3 Sep 23 12:21:09 wader2 kernel: [<ffffffff813df687>] cpuidle_idle_call+0xa7/0x140 Sep 23 12:21:09 wader2 kernel: [<ffffffff81011e96>] cpu_idle+0xb6/0x110 Sep 23 12:21:09 wader2 kernel: [<ffffffff814b1a0a>] rest_init+0x7a/0x80 Sep 23 12:21:09 wader2 kernel: [<ffffffff818c3f19>] start_kernel+0x413/0x41f Sep 23 12:21:09 wader2 kernel: [<ffffffff818c333a>] x86_64_start_reservations+0x125/0x129 Sep 23 12:21:09 wader2 kernel: [<ffffffff818c3438>] x86_64_start_kernel+0xfa/0x109 Sep 23 12:21:09 wader2 kernel: ---[ end trace 69b6c5e494cffe4d ]--- Sep 23 12:21:10 wader2 kernel: 0000:04:00.0: eth0: Error reading PHY register Sep 23 12:21:10 wader2 kernel: e1000e: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX The last line falsely reports the link to be 1000Mbit but it is actually 100Mbit. Same does ethtool. Bringing down the interface with ifconfig eth0 down and then ifconfig eth0 up does not help. A reboot gets the interface back to normal. The problem returns after some minutes, hours or a day. Any ideas? Regards .......Volker

9 12

Expunge Old Email
by John Hinton 04 Oct '11

04 Oct '11

For those of you running mailservers on CentOS 6, what are the suggestions for programs to expunge old email? For instance, deleting email from a Spam folder that is 2 weeks old or older. I see that Dovecot does have a solution, but was wondering about what others have landed on. My systems are basically Postfix, Dovecot using Maildir. Thanks, John Hinton

4 4

VLAN support?
by Les Mikesell 03 Oct '11

03 Oct '11

Are there any new tools in CentOS 6 to configure VLAN interfaces (where the switch passes multiple tagged VLANs over one physical link to the host) or is it best to edit /etc/sysconfig/network-scripts/eth?.vlan# files manually? -- Les Mikesell lesmikesell(a)gmail.com

4 7

Re: [CentOS] Apache security , Was: Running Apache sites as separate users
by Trey Dockendorf 03 Oct '11

03 Oct '11

On Thu, Sep 29, 2011 at 9:35 PM, Lucian <lucian(a)lastdot.org> wrote: > On Fri, Sep 30, 2011 at 2:22 AM, Trey Dockendorf <treydock(a)gmail.com> > wrote: > > I had a recent request to improve security on my web servers by having > each > > website use a different user to run the hosting service. So > > example1.comhas it's own Apache instance running as apache1 and then > > example2.com has its own instance of Apache as apache2. Is this even > > possible or realistic? I understand the idea of how that would be > secure, > > much like creating a virtual machine to segregate services. The only way > I > > can think how this is done is to chroot each website. What makes this > > request even stranger is that each website will be managed by the same > CMS > > and code base. So with that being the case, I don't see how this is > > possible. Any ideas or insight are very welcome. > > Is there a specific requirement to run different http servers? Because > if there is not then you can just use Suexec+fastcgi. > Otherwise, just use Apache to proxy stuff to backend servers (can be > anything from apache to nginx). > > HTH > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos > I do not know the exact reasoning for wanting each website to be run by a separate Apache process that has it's own user. Likely it's a misunderstanding of actual threats to websites, or using a IIS mindset to set requirements for Apache. I'll give Suexec+fastcgi a look and mod_ruid. Thanks for those suggestions While on subject of Apache security... Another request / idea was to have this CMS under development write user controls to .htaccess files to restrict download access to directories. Typically if I even allow any overrides, I set it so apache can only read .htaccess. My understanding of the more obvious implications is that if the web server can write to .htaccess so can any attacker, and then can easily inject malware or redirect the site to malicious content. Is there ever a case where it's safe to allow write access by apache to .htaccess? Does the below config for .htaccess in httpd.conf protect from this at all if write permissions were given on the file system? <Files ~ "^\.htaccess"> Order allow,deny Deny from all Satisfy All </Files> Personally I think that the CMS should handle authorization, and at then possibly rely on Apache for authentication. In the case of this CMS it will be authenticating against a campus SSO through CAS, but access has to be restricted based on user lists. - Trey

2 1

add on sata card relabeling drives, installation
by Bob Hoffman 02 Oct '11

02 Oct '11

Hi all. I have a new server and am playing with the installation. (centos 6). My onboard sata card has 6 drives attached to it, yet the server has 8 bays. I bought a sata controller card (adaptec) and added it to the mix, adding two more drives. Everything works and all is accessible, but there is one annoying issue. When installing with anaconda, the 2 drives located on the add-on sata card are being listed as sda and sdb instead of going to the back of the line. I would rather my a and b drives be the 0 and 1 sata ports of the onboard controller, but it seems the add-on is taking priority. My only thought is to install without the 2 drives connected and then add them afterwords. But again, that makes no sense to have to do it that way. Is this just normal for the add on sata cards? If I add the drives to the system after I install it all, will linux barf on it and change the drive letters? I do not want my raid 1 mirror OS to be on sdc, sdd, and sde....it just looks weird. thanks

12 37

udev-devel or libudev-devel on CentOS 5.6
by Kaushal Shriyan 02 Oct '11

02 Oct '11

Hi, Is there libudev-devel or udev-devel package available on CentOS 5.6 ? [root@~]# yum search udev-devel Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * base: centos.aol.in * extras: centos.aol.in * updates: centos.aol.in base | 1.1 kB 00:00 extras | 2.1 kB 00:00 updates | 1.9 kB 00:00 Warning: No matches found for: udev-devel No Matches found [root@~]# yum search libudev-devel Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * base: centos.aol.in * extras: centos.aol.in * updates: centos.aol.in Warning: No matches found for: libudev-devel No Matches found [root@~]# Regards Kaushal

2 3

CentOS 6 and NIS not working
by Martyn Klassen 30 Sep '11

30 Sep '11

I am having no luck getting NIS to work on a clean install of CentOS 6. It seems to be an issue with ypbind. I have simple /etc/yp.conf which explicitly sets the server domain myDomain server myServer The service seems to start okay #service ypbind start Starting NIS service: [OK] Binding NIS service: … [OK] But when I try to use any of the yp services, like ypwhich #ypwhich ypwhich: Can't communicate with ypbind This is usually blamed on ypbind not running, but ypbind is confirmed to be running #ps -ef | grep ypbind root 3033 1 0 15:11 ? 00:00:00 /usr/sbin/ypbind ypcat also does not work #ypcat netgroup No such map net group. Reason: Can't bind to the server which serves this domain I have double checked that the server is running #rpcinfo -u myServer ypserv program 100004 version 1 ready and waiting program 100004 version 2 ready and waiting The domain name seems to be set correctly as well #domainname myDomain I have tried disabling iptables and selinux, but that has no effect. I am probably missing something obvious, but NIS has never given me these issues before. Any suggestions on what might be the culprit? Martyn

2 2

Running Apache sites as separate users
by Trey Dockendorf 30 Sep '11

30 Sep '11

I had a recent request to improve security on my web servers by having each website use a different user to run the hosting service. So example1.comhas it's own Apache instance running as apache1 and then example2.com has its own instance of Apache as apache2. Is this even possible or realistic? I understand the idea of how that would be secure, much like creating a virtual machine to segregate services. The only way I can think how this is done is to chroot each website. What makes this request even stranger is that each website will be managed by the same CMS and code base. So with that being the case, I don't see how this is possible. Any ideas or insight are very welcome. Thanks - Trey

11 14

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss September 2011