Discuss April 2013

discuss@lists.centos.org

168 participants
148 discussions

Re: [CentOS] [CentOS-virt] qemu-kvm high cpu usage with idle windows guest
by Micky 07 Apr '13

07 Apr '13

On Sun, Apr 7, 2013 at 8:32 PM, Zoltan Frombach <zoltan(a)frombach.com> wrote: > Check out these threads they may help you solve your issue with Windows VMs: Well I did. Upstream provides rpms till version 0.12.1.x. Even the RHEV srpm (the one I am using) has the same version. And I don't want to compile both libvirt and qemu-kvm from source since it is the production machine. > http://forum.proxmox.com/threads/5770-Windows-guest-high-context-switch-rat… > > http://serverfault.com/questions/146922/why-is-idle-windows-vm-using-so-muc… > > On 4/7/2013 5:18 PM, Banyan He wrote: >> Maybe you can print out what it is doing, then try to figure out if they >> are doing good. My linux works good, never tried windows. >> Did. Nothing abnormal. A quick perf shows this: # ........ ........ .................. .............................................. # 4.96% qemu-kvm [kvm] [k] kvm_arch_vcpu_ioctl_run 4.83% qemu-kvm [kvm_intel] [k] vmx_vcpu_run 4.47% qemu-kvm [kernel.kallsyms] [k] find_busiest_group 3.23% qemu-kvm [kernel.kallsyms] [k] _spin_lock 3.10% qemu-kvm [kernel.kallsyms] [k] native_write_msr_safe 1.24% qemu-kvm [kernel.kallsyms] [k] _spin_lock_irq 1.22% qemu-kvm [kvm] [k] paging64_walk_addr 1.21% qemu-kvm [kvm] [k] x86_decode_insn 1.21% qemu-kvm [kvm_intel] [k] vmcs_writel >> Banyan He

1 0

qemu-kvm high cpu usage with idle windows guest
by Micky 07 Apr '13

07 Apr '13

Windows 2k8 R2 guest with updated virtio drivers is idle inside but on the host qemu-kvm process uses 7-15% cpu. Things that have been tried without any significant success - removed tablet device - manually set cpu topology for cores per socket Is it just me or the qemu-kvm has little tolerance with windows?

1 0

Does CentOS support dual graphics cards with 2 monitors each?
by Alfred von Campe 07 Apr '13

07 Apr '13

I have a user who wants to have 4 monitors attached to his CentOS 6.4 system. I know that you can't use both on-board video and a PCI video card at the same time, but what about two PCI video cards? The system seems to recognize them as shown by the lspci -v output below, but I can't get Xorg to use the second card. Has anyone done this? If so, what is the trick to get it to work? Alfred 00:00.0 Host bridge: Intel Corporation 2nd Generation Core Processor Family DRAM Controller (rev 09) Subsystem: Dell Device 04ad Flags: bus master, fast devsel, latency 0 Capabilities: [e0] Vendor Specific Information <?> 00:01.0 PCI bridge: Intel Corporation Xeon E3-1200/2nd Generation Core Processor Family PCI Express Root Port (rev 09) (prog-if 00 [Normal decode]) Flags: bus master, fast devsel, latency 0 Bus: primary=00, secondary=01, subordinate=01, sec-latency=0 I/O behind bridge: 00004000-00004fff Memory behind bridge: ed000000-ee0fffff Prefetchable memory behind bridge: 00000000e0000000-00000000e9ffffff Capabilities: [88] Subsystem: Dell Device 04ad Capabilities: [80] Power Management version 3 Capabilities: [90] MSI: Enable+ Count=1/1 Maskable- 64bit- Capabilities: [a0] Express Root Port (Slot+), MSI 00 Capabilities: [100] Virtual Channel <?> Capabilities: [140] Root Complex Link <?> Kernel driver in use: pcieport 00:16.0 Communication controller: Intel Corporation 6 Series/C200 Series Chipset Family MEI Controller #1 (rev 04) Subsystem: Dell Device 04ad Flags: bus master, fast devsel, latency 0, IRQ 11 Memory at eebb0000 (64-bit, non-prefetchable) [size=16] Capabilities: [50] Power Management version 3 Capabilities: [8c] MSI: Enable- Count=1/1 Maskable- 64bit+ 00:19.0 Ethernet controller: Intel Corporation 82579LM Gigabit Network Connection (rev 04) Subsystem: Dell Device 047e Flags: bus master, fast devsel, latency 0, IRQ 32 Memory at eeb00000 (32-bit, non-prefetchable) [size=128K] Memory at eeb80000 (32-bit, non-prefetchable) [size=4K] I/O ports at 5040 [size=32] Capabilities: [c8] Power Management version 2 Capabilities: [d0] MSI: Enable+ Count=1/1 Maskable- 64bit+ Capabilities: [e0] PCI Advanced Features Kernel driver in use: e1000e Kernel modules: e1000e 00:1a.0 USB controller: Intel Corporation 6 Series/C200 Series Chipset Family USB Enhanced Host Controller #2 (rev 04) (prog-if 20 [EHCI]) Subsystem: Dell Device 04ad Flags: bus master, medium devsel, latency 0, IRQ 16 Memory at eeb70000 (32-bit, non-prefetchable) [size=1K] Capabilities: [50] Power Management version 2 Capabilities: [58] Debug port: BAR=1 offset=00a0 Capabilities: [98] PCI Advanced Features Kernel driver in use: ehci_hcd 00:1b.0 Audio device: Intel Corporation 6 Series/C200 Series Chipset Family High Definition Audio Controller (rev 04) Subsystem: Dell Device 04ad Flags: bus master, fast devsel, latency 0, IRQ 31 Memory at eeb60000 (64-bit, non-prefetchable) [size=16K] Capabilities: [50] Power Management version 2 Capabilities: [60] MSI: Enable+ Count=1/1 Maskable- 64bit+ Capabilities: [70] Express Root Complex Integrated Endpoint, MSI 00 Capabilities: [100] Virtual Channel <?> Capabilities: [130] Root Complex Link <?> Kernel driver in use: snd_hda_intel Kernel modules: snd-hda-intel 00:1c.0 PCI bridge: Intel Corporation 6 Series/C200 Series Chipset Family PCI Express Root Port 1 (rev b4) (prog-if 00 [Normal decode]) Flags: bus master, fast devsel, latency 0 Bus: primary=00, secondary=02, subordinate=02, sec-latency=0 Capabilities: [40] Express Root Port (Slot+), MSI 00 Capabilities: [80] MSI: Enable- Count=1/1 Maskable- 64bit- Capabilities: [90] Subsystem: Dell Device 04ad Capabilities: [a0] Power Management version 2 00:1c.2 PCI bridge: Intel Corporation 6 Series/C200 Series Chipset Family PCI Express Root Port 3 (rev b4) (prog-if 00 [Normal decode]) Flags: bus master, fast devsel, latency 0 Bus: primary=00, secondary=03, subordinate=03, sec-latency=0 I/O behind bridge: 00003000-00003fff Memory behind bridge: ee100000-eeafffff Prefetchable memory behind bridge: 00000000ea100000-00000000eaafffff Capabilities: [40] Express Root Port (Slot+), MSI 00 Capabilities: [80] MSI: Enable- Count=1/1 Maskable- 64bit- Capabilities: [90] Subsystem: Dell Device 04ad Capabilities: [a0] Power Management version 2 00:1c.4 PCI bridge: Intel Corporation 6 Series/C200 Series Chipset Family PCI Express Root Port 5 (rev b4) (prog-if 00 [Normal decode]) Flags: bus master, fast devsel, latency 0 Bus: primary=00, secondary=04, subordinate=04, sec-latency=0 I/O behind bridge: 00002000-00002fff Memory behind bridge: eb000000-ec0fffff Prefetchable memory behind bridge: 00000000d0000000-00000000d9ffffff Capabilities: [40] Express Root Port (Slot+), MSI 00 Capabilities: [80] MSI: Enable- Count=1/1 Maskable- 64bit- Capabilities: [90] Subsystem: Dell Device 04ad Capabilities: [a0] Power Management version 2 00:1d.0 USB controller: Intel Corporation 6 Series/C200 Series Chipset Family USB Enhanced Host Controller #1 (rev 04) (prog-if 20 [EHCI]) Subsystem: Dell Device 04ad Flags: bus master, medium devsel, latency 0, IRQ 17 Memory at eeb50000 (32-bit, non-prefetchable) [size=1K] Capabilities: [50] Power Management version 2 Capabilities: [58] Debug port: BAR=1 offset=00a0 Capabilities: [98] PCI Advanced Features Kernel driver in use: ehci_hcd 00:1e.0 PCI bridge: Intel Corporation 82801 PCI Bridge (rev a4) (prog-if 01 [Subtractive decode]) Flags: bus master, fast devsel, latency 0 Bus: primary=00, secondary=05, subordinate=05, sec-latency=0 Capabilities: [50] Subsystem: Dell Device 04ad 00:1f.0 ISA bridge: Intel Corporation Q65 Express Chipset Family LPC Controller (rev 04) Subsystem: Dell Device 04ad Flags: bus master, medium devsel, latency 0 Capabilities: [e0] Vendor Specific Information <?> Kernel modules: iTCO_wdt 00:1f.2 SATA controller: Intel Corporation 6 Series/C200 Series Chipset Family SATA AHCI Controller (rev 04) (prog-if 01 [AHCI 1.0]) Subsystem: Dell Device 04ad Flags: bus master, 66MHz, medium devsel, latency 0, IRQ 30 I/O ports at 5090 [size=8] I/O ports at 5080 [size=4] I/O ports at 5070 [size=8] I/O ports at 5060 [size=4] I/O ports at 5020 [size=32] Memory at eeb40000 (32-bit, non-prefetchable) [size=2K] Capabilities: [80] MSI: Enable+ Count=1/1 Maskable- 64bit- Capabilities: [70] Power Management version 3 Capabilities: [a8] SATA HBA <?> Capabilities: [b0] PCI Advanced Features Kernel driver in use: ahci Kernel modules: ahci 00:1f.3 SMBus: Intel Corporation 6 Series/C200 Series Chipset Family SMBus Controller (rev 04) Subsystem: Dell Device 04ad Flags: medium devsel, IRQ 18 Memory at eeb30000 (64-bit, non-prefetchable) [size=256] I/O ports at 5000 [size=32] Kernel modules: i2c-i801 01:00.0 VGA compatible controller: NVIDIA Corporation Device 104a (rev a1) (prog-if 00 [VGA controller]) Subsystem: Micro-Star International Co., Ltd. Device 809f Flags: bus master, fast devsel, latency 0, IRQ 16 Memory at ed000000 (32-bit, non-prefetchable) [size=16M] Memory at e0000000 (64-bit, prefetchable) [size=128M] Memory at e8000000 (64-bit, prefetchable) [size=32M] I/O ports at 4000 [size=128] Expansion ROM at ee000000 [disabled] [size=512K] Capabilities: [60] Power Management version 3 Capabilities: [68] MSI: Enable- Count=1/1 Maskable- 64bit+ Capabilities: [78] Express Endpoint, MSI 00 Capabilities: [b4] Vendor Specific Information <?> Capabilities: [100] Virtual Channel <?> Capabilities: [128] Power Budgeting <?> Capabilities: [600] Vendor Specific Information <?> Kernel driver in use: nouveau Kernel modules: nouveau, nvidiafb 01:00.1 Audio device: NVIDIA Corporation GF119 HDMI Audio Controller (rev a1) Subsystem: Micro-Star International Co., Ltd. Device 809f Flags: bus master, fast devsel, latency 0, IRQ 17 Memory at ee080000 (32-bit, non-prefetchable) [size=16K] Capabilities: [60] Power Management version 3 Capabilities: [68] MSI: Enable- Count=1/1 Maskable- 64bit+ Capabilities: [78] Express Endpoint, MSI 00 Kernel driver in use: snd_hda_intel Kernel modules: snd-hda-intel 04:00.0 VGA compatible controller: NVIDIA Corporation Device 104a (rev a1) (prog-if 00 [VGA controller]) Subsystem: Micro-Star International Co., Ltd. Device 809f Flags: bus master, fast devsel, latency 0, IRQ 16 Memory at eb000000 (32-bit, non-prefetchable) [size=16M] Memory at d0000000 (64-bit, prefetchable) [size=128M] Memory at d8000000 (64-bit, prefetchable) [size=32M] I/O ports at 2000 [size=128] Expansion ROM at ec000000 [disabled] [size=512K] Capabilities: [60] Power Management version 3 Capabilities: [68] MSI: Enable- Count=1/1 Maskable- 64bit+ Capabilities: [78] Express Endpoint, MSI 00 Capabilities: [b4] Vendor Specific Information <?> Capabilities: [100] Virtual Channel <?> Capabilities: [128] Power Budgeting <?> Capabilities: [600] Vendor Specific Information <?> Kernel driver in use: nouveau Kernel modules: nouveau, nvidiafb 04:00.1 Audio device: NVIDIA Corporation GF119 HDMI Audio Controller (rev a1) Subsystem: Micro-Star International Co., Ltd. Device 809f Flags: bus master, fast devsel, latency 0, IRQ 17 Memory at ec080000 (32-bit, non-prefetchable) [size=16K] Capabilities: [60] Power Management version 3 Capabilities: [68] MSI: Enable- Count=1/1 Maskable- 64bit+ Capabilities: [78] Express Endpoint, MSI 00 Kernel driver in use: snd_hda_intel Kernel modules: snd-hda-intel

7 13

Apache Issue on CentOS 6
by linuxsupport 06 Apr '13

06 Apr '13

I am facing a problem with Apache on CentOS 6 Apache 2.2.19 is complied from source. I see so many reading requests in Apache status page, as per my previous experience this "reading request" issue mainly comes when any of the internet route having any problem and it request takes time to completely reach to Apache, but this time there is no network issue. I have ran same setup on CentOS 5 it works well, but on CentOS 6 it show 60%+ reading requests, web site has 20-25 requests per second that becomes 80+ I also tried to upgrade Apache to 2.2.24 but it is same on new version as well. Anyone else has experienced this issue?

3 3

mock and iaxmodem
by James B. Byrne 05 Apr '13

05 Apr '13

I am trying to build an rpm package for iaxmodem-1.2.0. At the moment I am still trying to get a working spec file put together. I have managed to get an SRPM produced but the binary build from this fails due to there being no install task in the Makefile.in provided with the source. I have found a spec file from opensuse that provides this in the install portion: %build [ "%{buildroot}" != '/' ] && rm -rf %{buildroot} # . . . ./configure %{__make} %{?_smp_mflags} %install # install the bunch manually mkdir -p $RPM_BUILD_ROOT/etc/logrotate.d $RPM_BUILD_ROOT/etc/iaxmodem $RPM_BUILD_ROOT/usr/bin %{__install} -m 644 %{S:1} $RPM_BUILD_ROOT/etc/logrotate.d/iaxmodem %{__install} -D -m 755 iaxmodem %{buildroot}%{_sbindir}/iaxmodem %{__install} -D -m 644 iaxmodem.1 %{buildroot}%{_mandir}/man1/iaxmodem.1 perl -pi -e 's,/usr/local/,/usr/,g' iaxmodem.init.fedora %{__install} -D -m 755 iaxmodem.init.suse %{buildroot}%{_initrddir}/iaxmodem But in mock I get a failure on the build because make has no install task. + make install DESTDIR=/builddir/build/BUILDROOT/iaxmodem-1.2.0-1.el6.x86_64 make: *** No rule to make target `install'. Stop. RPM build errors: error: Bad exit status from /var/tmp/rpm-tmp.apiDwk (%install) Bad exit status from /var/tmp/rpm-tmp.apiDwk (%install) Child return code was: 1 I have next to no experience with building on Linux and I have no idea of what I should do to resolve this. What are my options at this point? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

Re: [CentOS] mock and iaxmodem
by James B. Byrne 05 Apr '13

05 Apr '13

On Fri, April 5, 2013 15:45, Reindl Harald wrote: > > you can try my SPEC below which builds iaxmodem-packages on > Fedora since a long time, if this also does not work i suspect > a bug in mock! > Thank you very much. I had to make several small changes but with those in place your spec file works for me on CentOS-6.4. Libtiff-tools does not exist for CentOS but the requite components are included with libtiff. Libtiff needs a BuildRequires: libtiff-devel added. And as I do not have your Source2: .init file I copy the one provided in the sources for fedora instead. Name: iaxmodem Version: 1.2.0 Release: 1%{?dist} Summary: IAX software fax modem Source: http://dl.sourceforge.net/iaxmodem/%{name}-%{version}.tar.gz #Source2: %{name}.init URL: http://iaxmodem.sourceforge.net Group: Applications License: GPL BuildRoot: %{_tmppath}/build-%{name}-%{version} BuildRequires: gcc BuildRequires: glibc-devel BuildRequires: automake BuildRequires: autoconf BuildRequires: libtiff-devel Requires: libtiff %description IAXmodem is a software modem written in C that uses an IAX channel (commonly provided by an Asterisk PBX system) instead of a traditional phone line and uses a DSP library instead of DSP hardware chipsets. IAXmodem was originally conceived to function as a fax modem usable with HylaFAX, and it does that well. However IAXmodem also has been known to function with mgetty+sendfax and efax. To accomplish this IAXmodem interfaces an IAX library known as libiax2 with a DSP library known as spandsp, and then IAXmodem interfaces the DSP library with a tty device node for interfacing with modem applications. %prep %setup -q %build %configure %{__make} %{?_smp_mflags} %install mkdir -p $RPM_BUILD_ROOT/%{_bindir} mkdir -p $RPM_BUILD_ROOT/%{_mandir}/man1/ mkdir -p $RPM_BUILD_ROOT/etc/rc.d/init.d/ install %{name} $RPM_BUILD_ROOT/%{_bindir} install %{name}.1 $RPM_BUILD_ROOT/%{_mandir}/man1/ #install %{SOURCE2} $RPM_BUILD_ROOT/etc/rc.d/init.d/%{name} %{__install} -D -m 755 iaxmodem.init.fedora %{buildroot}%{_initrddir}/iaxmodem %clean rm -rf %{buildroot} %files %defattr(644,root,root,755) %attr(755,root,root) %{_bindir}/* %attr(754,root,root) /etc/rc.d/init.d/%{name} %{_mandir}/man1/* %doc TODO README FAQ CHANGES *.ttyIAX %changelog * Fri Apr 05 2013 James B. Byrne <byrnejb(a)harte-lyne.ca> - Rebuild for CentOS-6.4 * Thu Feb 03 2011 Reindl Harald <h.reindl(a)thelounge.net> - Rebuild for Fedora 14 * Sat Nov 20 2010 Reindl Harald <h.reindl(a)thelounge.net> - Rebuild with GCC 4.4.5 * Sat Nov 6 2010 Reindl Harald <h.reindl(a)thelounge.net> - Build x86_64 with SSE4-Support * Wed Sep 22 2010 Reindl Harald <h.reindl(a)thelounge.net> - Downgrade to 1.1.1 because 1.2 does not work - And upgrade again to 1.2.0 because stoopid people call fax per phone * Sun Sep 19 2010 Reindl Harald <h.reindl(a)thelounge.net> - First RPM for Fedora - Add "libtiff-tools" as Requirement because it provides: - * /usr/bin/fax2ps - * /usr/bin/fax2tiff - * /usr/bin/tiff2pdf - * /usr/bin/tiff2ps Now to see if it runs. Thank you again. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Touchpad doesn't work with C6, kernel-related...
by Marko Vojinovic 05 Apr '13

05 Apr '13

Hi folks! :-) I have a Fujitsu Lifebook U series laptop running updated CentOS 6.4 (64bit), and the touchpad doesn't work. It's a new laptop, the touchpad works correctly in Fedora 18 Live (given the kernel parameters below), no hardware problems. I searched the web all around, and it's a known issue for several laptop models. The only solution, quoted everywhere, it is to append the i8042.notimeout i8042.nomux to the kernel parameters. The problem is that the latest CentOS6 kernel (2.6.32-358.2.1.el6.x86_64) doesn't appear to recognize these. Or it otherwise ignores them. I did append the parameters, but (unlike in Fedora) the touchpad is still dead. This laptop is to be used by a noob user who needs a LTS distro and is already accustomed to CentOS, so a more modern distro like Fedora or Ubuntu is not an option. What can be done about this? Would a CentOSplus kernel work? It is somehow too lousy to tell the client "The touchpad of your brand-new laptop doesn't work because CentOS is too old, use an USB mouse instead". Any advice appreciated. TIA, :-) Marko

4 5

Using "root" Type User Via Forwarding-SSH-Tunnel Inside Non-Root SSH Connection
by Bry8 Star 05 Apr '13

05 Apr '13

Hi, QUESTION: what implications are there when using the "root" or a root type of account via a port-forwarding ssh-tunnel inside (or on top of) another non-root type of user's ssh-tunnel ? Is such double layer of encryption brings more security or system still vulnerable same as single layer of SSH encryption ? DETAILS: In CentOS (6.3 & 6.4) server side i have done these: (1) Created a user named "administrator". Then by using visudo command, i allowed "administrator" to have higher level of access & permission, similar/close to the "root" user, (not exactly same though). http://wiki.centos.org/TipsAndTricks/BecomingRoot (Basically this "administrator" user has maintenance related software running privilege). (2) Created a user named "non-root", a standard/normal user. (3) In /etc/ssh/sshd_config file i have modified the default configurations into this: # File: /etc/ssh/sshd_config port NNN10 protocol 2 SyslogFacility AUTHPRIV AllowUsers non-root root(a)127.0.0.1 administrator(a)127.0.0.1 PasswordAuthentication yes PermitEmptyPasswords no ChallengeResponseAuthentication no GSSAPIAuthentication yes GSSAPICleanupCredentials yes UsePAM yes AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES AcceptEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT AcceptEnv LC_IDENTIFICATION LC_ALL LANGUAGE AcceptEnv XMODIFIERS X11Forwarding no Banner /etc/issue.net Subsystem sftp /usr/libexec/openssh/sftp-server # End of File: /etc/ssh/sshd_config Above config allows only "non-root" user to connect with CentOS server from internet. And "administrator" or "root" can must/only connect using local ip address 127.0.0.1. In /etc/issue file and in /etc/issue.net file i have placed such text info: *********************************** NOTICE / WARNING TO USERS * This computer system is private property of its owner, Bry8Star. * This message is shown from hostname.sld.tld * It is for AUTHORIZED use only. Any unauthorized or improper use of this system will result in CIVIL and CRIMINAL PENALTIES ... * ... * Your connection IP ADDRESS, PORT, and TIME info etc are recorded by this computer. *********************************** In /etc/profile file, i have placed these below 13 lines just above the "unset i" line, at bottom side: if [ -n "$SSH_CLIENT" ] then set $SSH_CLIENT echo "Your current connection coming from IP Address $1 using port $2, to this computer." else if [ -n "$SSH_CONNECTION" ] then set $SSH_CONNECTION echo "Your current connection coming from IP Address $1 using port $2, to this computer." else echo "Your current connection's IP Address & port could not be shown for now." fi fi In /etc/profile.local file, i have placed these below 13 lines at bottom side: if [ -n "$SSH_CLIENT" ] then set $SSH_CLIENT echo "You have connected from IP Address $1 using port $2" else if [ -n "$SSH_CONNECTION" ] then set $SSH_CONNECTION echo "You have connected from IP Address $1 using port $2" else echo "User's IP Address could not be shown" fi fi Above codes allow me to see what IP:port is currently being used. And after login opensshd by default shows last/previous connection's IP-address or reverse-domain. This helps to see instantly which IP is being used right now or who is attempting to login in simple way. Ofcourse log can show more detailed info. And in client side (user side), i'm using PuTTY or PuTTY based or other SSH client software, with such configurations: SSH-client software has 3 connection profiles. The "ssh-client-01" connection ssh-profile is configured for regular user "non-root", and connects to ip.address.numbers:port (hostname.sld.tld:NNN10) (sld = 2nd level domain, tld = top level domain). This connection profile is also configured to create one encrypted port-forwarding tunnel through the SSH-tunnel: where, local port NNN11, is port-forwarded, to the (local-)port NNN10 inside CentOS server (hostname.sld.tld). The "ssh-client-02" connection ssh-profile is configured for user "administrator", and connects to local ip address 127.0.0.1 on port NNN11 (127.0.0.1:NNN11). This connection profile itself has no port-forwarding tunnels. It uses the forwarding-tunnel of "ssh-client-01" to create SSH-tunnel, toward the ssh-server port NNN10 of CentOS server. The "ssh-client-03" connection ssh-profile is configured with user "root", and connects to local ip address 127.0.0.1 on port NNN11 (127.0.0.1:NNN11). This connection profile itself has no port-forwarding tunnels. It uses the forwarding-tunnel of "ssh-client-01" to create SSH-tunnel, toward the ssh-server port NNN10 of CentOS server. I first connect with CentOS server using "ssh-client-01", then i connect again with CentOS server using the "ssh-client-02". In this way "ssh-client-02" (for "administrator") goes through the encryption layer of "ssh-client-01" (for "non-root"). If i need to use "root" level access/privilege, i do these: sudo one-command options For multiple commands i do these: su - a-command options another-command options exit To switch into another user account (like "GUIuser1", "non-root2") without disconnecting, i do: su GUIuser1 su non-root2 The "ssh-client-03" ssh-profile i use for exceptional purpose, when i absolutely must have to use the "root" account directly, only then. QUESTION: How can i configure opensshd related settings, so that, it shows current ip-address & port used by the current user who is trying/attempting to login ? BEFORE user types in the password. I have placed a text "This is \o | Now it is \t \d | Connection is using \l" in /etc/issue file and also in /etc/issue.net file, but it does not work, just appears as verbatim, (escape sequenced special variables do not get translated/replaced by special values). I want to show the user who is attempting to login, his/her IP-address, port, time, etc to him/her, every time before typing password. QUESTION: what is/are better practice(s) (to secure CentOS server related to SSH) ? QUESTION/Possible-SOLUTION: Should i remove the "root(a)127.0.0.1" from "AllowUsers" and add "PermitRootLogin no" line in /etc/sshd_config file ? Thanks in advance, -- Bright Star.

4 4

CentOS-announce Digest, Vol 98, Issue 2
by centos-announce-request＠centos.org 05 Apr '13

05 Apr '13

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2013:0703 CentOS 6 coreutils Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 5 Apr 2013 00:47:49 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2013:0703 CentOS 6 coreutils Update To: centos-announce(a)centos.org Message-ID: <20130405004749.GA28781(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2013:0703 Upstream details at : https://rhn.redhat.com/errata/RHBA-2013-0703.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: dbce6086fa4dc0861652fc9a3cfc358c53d6b93c0004f839712fddbc0f5f3231 coreutils-8.4-19.el6_4.1.i686.rpm 19f3eece775cf975b0a4dc703f5019171cee4762c21b09d924d89e66a327234a coreutils-libs-8.4-19.el6_4.1.i686.rpm x86_64: 88a59ae4ecd2c5639586d92e1136608f4d38921b1d84b8f5b4f3bbab2548917a coreutils-8.4-19.el6_4.1.x86_64.rpm fb884eac2dea8fb7993e491468ea4c84391ca63a1bd1c6f85b794a46bd856a99 coreutils-libs-8.4-19.el6_4.1.x86_64.rpm Source: a84d2d0d516d2dd975601cd3c65e82cf7f522ed1f828f2da99bf1353d2642b6b coreutils-8.4-19.el6_4.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 98, Issue 2 **********************************************

1 0

What is bind97 and what are the differences to bind
by Jobst Schmalenbach 05 Apr '13

05 Apr '13

Hi, sorry if this has been covered, I searched google for this but can't find an answer (maybe I am trying the incorrect search terms). What is bind97? What are the differences between bind97 and bind? thanks Jobst -- Fortune: No such file or directory. | |0| | Jobst Schmalenbach, jobst(a)barrett.com.au, General Manager | | |0| Barrett Consulting Group P/L & The Meditation Room P/L |0|0|0| +61 3 9532 7677, POBox 277, Caulfield South, 3162, Australia

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss April 2013