Discuss March 2013

discuss@lists.centos.org

206 participants
228 discussions

Re: [CentOS] Postfix setup
by James B. Byrne 11 Mar '13

11 Mar '13

On Mon, March 11, 2013 04:52, Tilman Schmidt wrote: > Am 11.03.2013 03:54, schrieb Austin Einter: >> I am planning to setup mail server for my domain. >> >> Which one is preferred postfix or sendmail. > Postfix. I have been running Sendmail from version 8.6 in 1995 on HP-UX 9.02 to 8.13 at the present on CentOS-5.9 as these were the default MTA's shipped by the vendor. When RHEL-6 switched from Sendmail to Postfix I decided to bite the bullet and change my public MX servers to Postfix as and when I upgraded them to CentOS-6. This was not without difficulty and unhappiness, for I miss the command line email trace facility that Sendmail provides out of the box, but it was not traumatic either. The main benefit to using Postfix over Sendmail is that Postfix definitely places a lower intellectual load on its administrators. For that reason alone I would recommend it over Sendmail. While M4 macros take most of the arcana out of Sendmail's configuration files they are no where near as easy to understand as Postfix's simple config files. The only 'rule' I have to suggest is: The mail server host and all of its MX records must resolve to a DNS 'A" or 'AAAA' record. Do not use CNAME records with any MX host or you will learn why not to do this the hard way. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 3

serving a kickstart file over https with self-signed certificate
by jortega 11 Mar '13

11 Mar '13

I am currently using https for the --url and --repo options in a kickstart file. The yum repo files are also set to do the same. Both of them have a setting (noverifyssl and sslverify=no, respectively) and this works as expected to pass --insecure to curl. However, I cannot figure out how to also serve the kickstart file itself. ks=user:pass@url works as a url, but I get the "Problem with the SSL CA cert" error. Is there a kernel cmdline option? I have tried different variations of noverifyssl and rd_noverifyssl but haven't lucked upon the right one and I'm not finding the answer in google. This is centos6, btw. Thanks!

2 1

Re: [CentOS] lost connection during yum update
by Frank Cox 11 Mar '13

11 Mar '13

On Sun, 10 Mar 2013 12:14:14 +0100 Reindl Harald wrote: > use "screen" if you update over WAN connections > yes, i know it is too late but thats the way to go I was doing it through VNC, thinking that would be more-or-less equivalent to screen, which it apparently isn't. Somehow my vnc session (desktop) just disappeared in the middle of the job, while I was running "yum update" on the remote host machine and two other computers. Perhaps the "yum update" that was running on the remote host machine killed VNC -- in hindsight perhaps I shouldn't have done that. My google searching leads me to suspect that initramfs may be missing on those computers. If that is the case (which I will verify later this afternoon) then I'm thinking that perhaps chrooting to the hard drive followed by a simple yum remove kernel-2.6.32-358.0.1 and yum install kernel-2.6.32-358.0.1 will fix it. It's funny that all three of them died in the same way, though I guess they were all at about the same stage in the update process when my VNC session disappeared. Running "yum-complete-transaction", followed by "package-cleanup --cleandupes", followed by "yum update" seems to have put everything back the way that it should be, with the exception of whatever it is that prevents the machine from booting. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com www.creekfm.com - FIFTY THOUSAND WATTS of POW WOW POWER!

6 22

kickstart %pre vda/sda troubles
by Natxo Asenjo 11 Mar '13

11 Mar '13

hi, The problem: for kvm/qemu disks are /dev/vdx devices when using the virtio driver. For vmware, drives are /dev/sdx devices. For hp servers, /dev/ccisss/whatever (sorry, no proliant with an array controller handy to check it). in order to just have one kickstart script to maintain I am trying to use the %pre section but getting a bit stuck. This is what I have: %pre if [ -b /dev/sda ] then zerombr clearpart --all bootloader --location=mbr --timeout=0 --driveorder=sda --append="crashkernel=auto rhgb quiet" part /boot --fstype=ext4 --size=500 part pv.008002 --grow --size=1 volgroup vg_host --pesize=4096 pv.008002 logvol / --fstype=ext4 --name=lv_root --vgname=vg_host --grow --size=1024 --maxsize=51200 logvol swap --name=lv_swap --vgname=vg_host --grow --size=512 --maxsize=1024 fi elif [ -b /dev/vda ] then zerombr clearpart --all bootloader --location=mbr --timeout=0 --driveorder=vda --append="crashkernel=auto rhgb quiet" clearpart --linux --drives=vda part /boot --fstype=ext4 --size=500 --ondisk=vda part pv.008002 --grow --size=1 --ondisk=vda volgroup vg_host --pesize=4096 pv.008002 logvol / --fstype=ext4 --name=lv_root --vgname=vg_host --grow --size=1024 --recommended logvol swap --name=lv_swap --vgname=vg_host --grow --size=512 --maxsize=1024 fi else echo unknown disk fi But when kickstarting a guest on a kvm host, I get this error: the kickstart configuration file is missing required information that anaconda cannot promtp for. Please add the following sections and try again: Bootloader configuration. If I swith to another virtual terminal, I see this: Device vda not found. But it's there, I can see it with ls -l, it is a block device Has anybody implemented something like this and is willing to share it? TIA, -- Groeten, natxo

2 4

selinux + kvm virtualization + smartd problem
by Ilyas -- 11 Mar '13

11 Mar '13

Hello, I'm using HP homeserver where host system run CentOS 6.3 with KVM virtualization with SELinux enabled, guests too run the same OS (but without SELinux, but this does not matter). Host system installed on mirrors based on sda and sdb physical disks. sd{c..f} disks attached to KVM guest (whole disks, not partitions; needed to use zfs (zfsonlinux) benefit features). Problem is that disks (files in /dev) which attached to KVM guest has SELinux context which inaccessible from context of smartd process. [root(a)srv-1.home ~]# ls -laZ /dev/sd{a..f} brw-rw----. root disk system_u:object_r:fixed_disk_device_t:s0 /dev/sda brw-rw----. root disk system_u:object_r:fixed_disk_device_t:s0 /dev/sdb brw-rw----. qemu qemu system_u:object_r:svirt_image_t:s0:c281,c675 /dev/sdc brw-rw----. qemu qemu system_u:object_r:svirt_image_t:s0:c281,c675 /dev/sdd brw-rw----. qemu qemu system_u:object_r:svirt_image_t:s0:c281,c675 /dev/sde brw-rw----. qemu qemu system_u:object_r:svirt_image_t:s0:c281,c675 /dev/sdf [root(a)srv-1.home ~]# ps axwZ | grep smart[d] system_u:system_r:fsdaemon_t:s0 1762 ? S 0:00 /usr/sbin/smartd -q never When I restarts smartd next messages appears in audit.log: [root(a)srv-1.home ~]# tail -F /var/log/audit/audit.log | grep type=AVC type=AVC msg=audit(1357993548.964:8529): avc: denied { getattr } for pid=21321 comm="smartd" path="/dev/sdc" dev=devtmpfs ino=6327 scontext=unconfined_u:system_r:fsdaemon_t:s0 tcontext=system_u:object_r:svirt_image_t:s0:c281,c675 tclass=blk_file type=AVC msg=audit(1357993548.965:8530): avc: denied { getattr } for pid=21321 comm="smartd" path="/dev/sdd" dev=devtmpfs ino=6321 scontext=unconfined_u:system_r:fsdaemon_t:s0 tcontext=system_u:object_r:svirt_image_t:s0:c281,c675 tclass=blk_file type=AVC msg=audit(1357993548.966:8531): avc: denied { getattr } for pid=21321 comm="smartd" path="/dev/sde" dev=devtmpfs ino=6324 scontext=unconfined_u:system_r:fsdaemon_t:s0 tcontext=system_u:object_r:svirt_image_t:s0:c281,c675 tclass=blk_file type=AVC msg=audit(1357993548.966:8532): avc: denied { getattr } for pid=21321 comm="smartd" path="/dev/sdf" dev=devtmpfs ino=6330 scontext=unconfined_u:system_r:fsdaemon_t:s0 tcontext=system_u:object_r:svirt_image_t:s0:c281,c675 tclass=blk_file type=AVC msg=audit(1357993549.198:8533): avc: denied { read } for pid=21321 comm="smartd" name="sdc" dev=devtmpfs ino=6327 scontext=unconfined_u:system_r:fsdaemon_t:s0 tcontext=system_u:object_r:svirt_image_t:s0:c281,c675 tclass=blk_file type=AVC msg=audit(1357993549.198:8534): avc: denied { read } for pid=21321 comm="smartd" name="sdd" dev=devtmpfs ino=6321 scontext=unconfined_u:system_r:fsdaemon_t:s0 tcontext=system_u:object_r:svirt_image_t:s0:c281,c675 tclass=blk_file type=AVC msg=audit(1357993549.198:8535): avc: denied { read } for pid=21321 comm="smartd" name="sde" dev=devtmpfs ino=6324 scontext=unconfined_u:system_r:fsdaemon_t:s0 tcontext=system_u:object_r:svirt_image_t:s0:c281,c675 tclass=blk_file type=AVC msg=audit(1357993549.198:8536): avc: denied { read } for pid=21321 comm="smartd" name="sdf" dev=devtmpfs ino=6330 scontext=unconfined_u:system_r:fsdaemon_t:s0 tcontext=system_u:object_r:svirt_image_t:s0:c281,c675 tclass=blk_file I tried to create SELinux policy using audit2allow: [root(a)srv-1.home ~]# cat /var/log/audit/audit.log | grep smartd | audit2allow -M smartd_svirt_image [root(a)srv-1.home ~]# semodule -i smartd_svirt_image.pp but it not helped to solve problem. How I can create permissive rule for selinux in my case? Thank you. -- GPG Key ID: 6EC5EB27

3 11

6.4 SRPMS
by me＠tdiehl.org 11 Mar '13

11 Mar '13

Hi, Can someone tell me when the 6.4 srpms are going to appear in vault? I am looking for the centos-release srpm. Regards, -- Tom me(a)tdiehl.org Spamtrap address me123(a)tdiehl.org

3 3

question after updating to 6.4
by Jerry Geis 11 Mar '13

11 Mar '13

My video driver for AMD HD 4200 did not work after upgrading. I tried to fix it with 13.1 legacy drivers but that did not work I then just grapped a AMD HD 5200 video card and put on AMD 13.1 "regular" and that worked. however, After updating x86_64 to 6.4 and when I compile my project I get this message make: *** No rule to make target `/usr/lib/gcc/x86_64-redhat-linux/4.4.6/include/stddef.h', I have done a "make clean" and the message persists. there is no directory /usr/lib/gcc/x86_64-redhat-linux/4.4.6 - there is a 4.4.7 which matches the "gcc --version" Where is this message coming from and how can I remove it. Thanks, Jerry

1 0

Older versions of packages disappearing from yum repos
by Brian Lalor 11 Mar '13

11 Mar '13

I've been designing the infrastructure for a new team using CentOS 6 and Puppet. I'm still learning Puppet, but thought I had things pretty well under control. After this week, I'm beginning to wonder… :-) In the last week I've had versions of three packages disappear from the yum repositories I'm using, both EPEL and the standard ones from a base CentOS 6.3 install. Since I'm trying to install specific versions of packages with Puppet, this is a problem. The most recent one that just turned up this morning is kernel-devel. I have the following resource defined in one of my Puppet manifests: package {"kernel-devel-${::kernelrelease}": alias => 'kernel-devel', } I'm trying to ensure that I've got the kernel-devel package installed that matches the kernel I'm currently using. I naively assumed that once a package was made available via the official CentOS mirrors that it would never disappear. That doesn't appear to be the case. I have kernel-2.6.32-279.19.1.el6.x86_64 installed. kernel-devel-2.6.32-279.19.1.el6.x86_64 is gone, apparently replaced with kernel-devel-2.6.32-358.0.1.el6.x86_64. I have a couple of other packages that have given me problems, too, namely ngircd which was upgraded from 18 to 20.1. How do I manage this problem? Do I need to maintain my own mirrors? That seems like a horrible solution. Is there another CentOS repository I should be using? Am I just going about this all wrong? Thanks, Brian -- Brian Lalor blalor(a)bravo5.org

2 2

About VLC 1.1.11 and 1.1.13 on CentOS 6.3 64 bit
by Mayur Patil 11 Mar '13

11 Mar '13

Hello, I have installed, after a long hiccups, VLC on centOS. VLC is showing installed through package repo. I tried first VLC 1.1.13 but it says dependency issues. So I uninstall it and install 1.1.11 again from repo. This time installation gets completed and installation appears in package repo and VLC icon on the Accessories; but The problem is when I click on it displays nothing. And also one error occured it was asking for AMD video drivers but my PC is Intel based. Confused !! Seeking for guidance, Thank you !! -- *Cheers, Mayur*.

2 1

exim localhost vs 127.0.0.1
by Mihamina Rakotomandimby 11 Mar '13

11 Mar '13

Hi all, I had a big problem I did not figured out. It is solved, but I have questions about the matter. It's about Exim 4.72/CentOS 6. Connecting to Exim via "localhost" is denies relay Connecting to Exim via 127.0.0.1 accepts the relay "localhost" is in the local_domains domainlists "localhost" is resolving to 127.0.0.1 in /etc/hosts Why? [mihamina@recette53 ~]$ rpm -aq | grep exim exim-4.72-4.el6.x86_64 [mihamina@recette53 ~]$ telnet localhost 25 Trying ::1... Connected to localhost. Escape character is '^]'. 220 recette53.ideoneov.com ESMTP Exim 4.72 Mon, 11 Mar 2013 10:09:27 +0100 HELO mihamina 250 recette53.ideoneov.com Hello localhost [::1] MAIL from: <mrakotom(a)free.fr> 250 OK RCPT to: <mihamina(a)rktmb.org> 550 relay not permitted mihamina@recette53 ~]$ telnet 127.0.0.1 25 Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. 220 recette53.ideoneov.com ESMTP Exim 4.72 Mon, 11 Mar 2013 10:10:26 +0100 HELO mihamina 250 recette53.ideoneov.com Hello localhost [127.0.0.1] MAIL from: <mrakotom(a)free.fr> 250 OK RCPT to: <mihamina(a)rktmb.org> 250 Accepted DATA 354 Enter message, ending with "." on a line by itself From: <mrakotom(a)free.fr> To: <mihamina(a)rktmb.org> Subject: Haftra Andrana Ity dia andrana fotsiny ihany. . 250 OK id=1UEykk-0006Fr-TO QUIT 221 recette53.ideoneov.com closing connection -- RMA. -- RMA.

2 1

← Newer
1
...
12
13
14
15
16
17
18
...
23
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss March 2013