Discuss December 2012

discuss@lists.centos.org

146 participants
124 discussions

SpamAssassin reporting help
by Jason T. Slack-Moehrle 10 Feb '13

10 Feb '13

Hello All, CentOS release 6.3 (Final) I am getting e-mails now where they are: Subject: Cron <root@www> /usr/share/spamassassin/sa-update.cron 2>&1 | tee -a /var/log/sa-update.log Body: http: GET http://daryl.dostech.ca/sa-update/asf/1387055.tar.gz request failed: 404 Not Found: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>404 Not Found</title> </head><body> <h1>Not Found</h1> <p>The requested URL /sa-update/asf/1387055.tar.gz was not found on this server.</p> <hr> <address>Apache/2.2.6 (Fedora) Server at daryl.dostech.ca Port 80</address> </body></html> Can anyone help me understand what is happening here? Are they trying to inject an http request, looking for a specific file? Or checking to see if I am running a piece of software that has vulnerabilities to exploit? -Jason

4 3

Building Dovecot CentOS 5 RPMs with custom LDAP packages
by Nikolaos Milas 11 Jan '13

11 Jan '13

Hi, We are (still) mainly using CentOS 5 (5.8 x86_64). As CentOS / EL 5 standard OpenLDAP packages are rather old (2.3.x), we've been using LTB OpenLDAP packages ( http://ltb-project.org/wiki/download#openldap) which get installed in non-standard file system locations. I am not much experienced in building RPMs and preparing spec files. We are currently using dovecot RPM packages from the atrpms repo (http://packages.atrpms.net/dist/el5/dovecot/) I would like to re-build Dovecot packages based on the LTB OpenLDAP RPM packages (OpenLDAP v2.4.x), esp. because I see that ATRPMs Dovecot RPM packages are built using OpenLDAP v2.3 devel code (i.e. standard CentOS OpenLDAP devel packages). In http://dl.atrpms.net/all/dovecot.spec I see: ------------------------------------------------ BuildRequires: openldap-devel, cyrus-sasl-devel ... Obsoletes: %{name}-pgsql < %{epoch}:%{version}-%{release}, %{name}-mysql < %{epoch}:%{version}-%{release}, %{name}-sqlite < %{epoch}:%{version}-%{release}, %{name}-ldap < %{epoch}:%{version}-%{release}, $ Conflicts: %{name}-pgsql > %{epoch}:%{version}-%{release}, %{name}-mysql > %{epoch}:%{version}-%{release}, %{name}-sqlite > %{epoch}:%{version}-%{release}, %{name}-ldap > %{epoch}:%{version}-%{release}, $ ------------------------------------------------ So, I guess I can/should change the former line to: BuildRequires: openldap-ltb-debuginfo, cyrus-sasl-devel Note: The final Dovecot RPM and the associated executables (included therein) do not need any LDAP dynamic library in order to run with LDAP support; i.e. after building, the produced package does not require any ldap package on the system. Question 1: What other changes/additions should we make in the spec file in order to specify that we will be using (if needed) LDAP libraries from: /usr/local/openldap/lib64 and include files from: /usr/local/openldap/include (rather than from /usr/lib64 and /usr/include, respectively, which are the standard file paths used in native openldap-devel RPM)? Question 2: How the Obsoletes and Conflicts lines should be changed? Any other associated info would be appreciated. Thanks, Nick

2 3

IE 9 not sending digest auth info
by Paul Heinlein 11 Jan '13

11 Jan '13

I migrated our internal wiki server last week, and some IE users aren't able to authenticate. The service is hosted by Apache using Digest authentication. It migrated from Apache 2.2.9 (Debian 5) to Apache 2.2.15 (CentOS 6). The internal hostname for the wiki server is a DNS CNAME that was repointed from one host to another during the cutover. In a normal session, 1. Client sends GET 2. Server sends 401 with WWW-Authenticate header 3. Client sends GET with Authorization header 4. Server sends 200 with Authentication-Info header and page content When using IE 9 (and possibly 8, I'm still trying to track that down), 1. Client sends GET 2. Server sends 401 with WWW-Authenticate header 3. Client resends GET (*without* Authorization header) 4. Server sends 401 with WWW-Authenticate header 5. Etc. IE seems to be ignoring 401 and/or the WWW-Authenticate headers. Using Chrome on Windows works fine; the issues are specific to IE. Any ideas? My google-fu has failed me. -- Paul Heinlein <> heinlein(a)madboa.com <> http://www.madboa.com/

3 4

CentOS 5.7 eth0, eth1 and arpwatch flip flops
by Gavin Henry 05 Jan '13

05 Jan '13

Dear all, Has anyone experienced this whilst running DRBD over eth1 between two CentOS 5.7 servers? eth1 is a private IP address, unroutable. eth0 is the public address. CentOS will reply sometimes once every 3 days or every 14mins~ saying "My public IP is on eth1" to arp requests when it's not, it's eth0. This freezes traffic and causes issues. We've looked at arp* /etc/sysctl.conf etc. and arptables, but wondered if anyone had a recipe? We have this already which didn't help as it happened Christmas Eve too as we kept eth1 up for a few days to test: # For the dual interface - 06.12.12 net.ipv4.conf.eth0.arp_filter = 1 net.ipv4.conf.eth0.arp_ignore = 1 net.ipv4.conf.eth1.arp_filter = 1 net.ipv4.conf.eth1.arp_ignore = 1 net.ipv4.conf.all.arp_filter = 1 eth0 and eth1 are on the same VLAN/broadcast domain, but eth1 is a 169.xx and eth0 is a routable public IP. We're having to shut eth1 down and bring it up for sync at night. Thanks, Gavin.

4 9

Happy new years everyone
by Karanbir Singh 01 Jan '13

01 Jan '13

hi, 2012 has been a great and eventful year for CentOS, the project. CentOS the Linux Distribution and for everyone involved, including the users. Along with new initiatives, lots of new relationships came up - and most of all, lots of new people stepped up to help in various corners of the project. Hope to see even more new efforts kicking off in 2013 and even more people getting involved. Everyone, have a great and safe new years. See you all in 2013. Regards, -- Karanbir Singh +44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh ICQ: 2522219 | Yahoo IM: z00dax | Gtalk: z00dax GnuPG Key : http://www.karan.org/publickey.asc

6 5

Samba vs. Firewall and/or SELinux
by Ibrahim Yurtseven 01 Jan '13

01 Jan '13

Hi all. I created a smb-share on my el6 for all windows-pcs in my home-network (I'm the only Linux-User in my family) for sharing all the stuff we have, like music and videos and documents. The share will be shown on the other pcs (Windows XP), but they can't open it. The error-message ist "Share not found" on our preferred language of course! SELINUX-CONFIG sh-4.1# cat /etc/selinux/targeted/contexts/files/file_contexts.local # This file is auto-generated by libsemanage # Do not edit directly. /data(/.*)? system_u:object_r:samba_share_t:s0 FIREWALL-CONFIG (Port 901 is for SWAT) sh-4.1# cat /etc/sysconfig/iptables # Generated by iptables-save v1.4.7 on Thu Dec 20 17:28:14 2012 *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] -A INPUT -p tcp -m state --state NEW -m tcp --dport 901 -j ACCEPT -A INPUT -p tcp -m state --state NEW -m tcp --dport 445 -j ACCEPT -A INPUT -p tcp -m state --state NEW -m tcp --dport 139 -j ACCEPT -A INPUT -p udp -m state --state NEW -m udp --dport 138 -j ACCEPT -A INPUT -p udp -m state --state NEW -m udp --dport 137 -j ACCEPT COMMIT # Completed on Thu Dec 20 17:28:14 2012 SAMBA-CONFIG "Alice im Wunderland" is the testfile I uploaded with disabled Firewall and disabled SELinux sh-4.1# testparm Load smb config files from /etc/samba/smb.conf rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384) Processing section "[public]" Loaded services file OK. Server role: ROLE_STANDALONE Press enter to see a dump of your service definitions [global] workgroup = NETZWERK server string = Samba Server Version %v security = SHARE log file = /var/log/samba/log.%m max log size = 50 cups options = raw [public] comment = hier kannn reinkopiert werden path = /data/public read only = No create mask = 0777 guest only = Yes guest ok = Yes sh-4.1# cat /etc/samba/smbusers # Unix_name = SMB_name1 SMB_name2 ... root = administrator admin nobody = guest pcguest smbguest sh-4.1# ls -lisah /data/public total 144M 1703938 12K drwxrwxrwx. 4 nobody users 12K Dec 27 13:39 . 1703937 4.0K drwxr-xr-x. 3 root root 4.0K Dec 22 19:43 .. 1706985 144M -rwxrw-rw- 1 nobody nobody 144M Dec 27 13:39 Disney_ Alice im Wunderland (1951).mp4 -- Ibrahim "Arastirmacilar" Yurtseven 2.6.32-279.19.1.el6.i686

7 12

Hi
by Derek Stewart 01 Jan '13

01 Jan '13

Hi, Just joinedthe mailing list. I am new to Centos, anybody got any tips. Derek

9 12

xoscope
by Mark LaPierre 30 Dec '12

30 Dec '12

Is xoscope available in any available CentOS repo? http://xoscope.sourceforge.net/ -- _ °v° /(_)\ ^ ^ Mark LaPierre Registerd Linux user No #267004 https://linuxcounter.net/ ****

3 4

Live CD iso
by James Freer 30 Dec '12

30 Dec '12

Hi folks I'm just about to start using Centos again. I used it briefly a couple of years ago but found the switch to rpm a bit much after using deb for 5 years. Now there seem to be a lot of changes on the deb front so i'm going to try again with rpm. I noticed that there is now a live CD (as well as the DVD) instead of the six CDs that i used before (iirc). I would just be grateful if someone could confirm that... i've been an xfce user so i was thinking that i've either got to go back to gnome and load the xfce desktop or use the DVD (and install xfce straight). thanks james

5 15

Ethernet puzzle
by Ashley M. Kirchner 29 Dec '12

29 Dec '12

So I just finished doing a fresh install of CentOS 6.3. The machine has three ethernet ports in it: one on the motherboard (VIA Rhine), and two add-on cards, an Intel Pro100 and an old SMC1255TX. When CentOS comes up, this is what I see in the dmesg output: # dmesg | grep eth e100 0000:00:08.0: eth0: addr 0xf6043000, irq 16, MAC addr 00:02:b3:be:02:87 eth1: ADMtek Comet rev 17 at MMIO 0xf6040000, 00:4c:69:6e:75:79, IRQ 17. udev: renamed network interface eth0 to rename2 udev: renamed network interface eth1 to eth3 udev: renamed network interface rename2 to eth1 eth0: VIA Rhine II at 0xf6042000, 00:16:17:17:22:8e, IRQ 23. eth0: MII PHY found at address 1, status 0x786d advertising 05e1 Link 45e1. eth0: link up, 100Mbps, full-duplex, lpa 0x45E1 eth0: no IPv6 routers present So, according to the musical playing going on there, the result is: eth0: VIA Rhine eth1: IntelPro 100 (originally comes up as eth0 but gets renamed eth1) eth3: SMC1255TX (originally comes up as eth1 but gets renamed eth3) Here's my issue: In udev rules (/etc/udev/rules.d/70-persistent-net.rules I see: # PCI device 0x1113:0x1216 (tulip) SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:4c:68:6e:ff:ff", ATTR{type}=="1", KERNEL=="eth*", NAME="eth2" # PCI device 0x8086:0x1229 (e100) SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:02:b3:be:02:87", ATTR{type}=="1", KERNEL=="eth*", NAME="eth1" # PCI device 0x1106:0x3065 (via-rhine) SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:16:17:17:22:8e", ATTR{type}=="1", KERNEL=="eth*", NAME="eth0" # PCI device 0x1113:0x1216 (tulip) SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:4c:69:6e:75:79", ATTR{type}=="1", KERNEL=="eth*", NAME="eth3" Question is, where did the first tulip interface come from? That's not any of the interfaces on the machine, it doesn't match the MAC address of any of the interfaces, so where'd it come from? Furthermore, when I look in /etc/sysconfig/network-scripts/ifcfg-eth2, the HWADDR there is the same as the first interface listed above. But again, it's not in dmesg's output. As far as I can tell, it's a ghost interface ... What gives, and how can I get rid of it so that the proper interface gets the eth2 spot? A

5 11

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss December 2012