Discuss August 2013

discuss@lists.centos.org

147 participants
142 discussions

CentOS6 bind DLV problems
by tony＠softins.co.uk 16 Aug '13

16 Aug '13

I have two CentOS6 boxes, both running Bind as a local resolver, with what appears to me to be the same configuration as each other. I have a problem on one but not the other, to do with DNSSEC Lookaside Validation. On the box with the problem, if I do: host www.bbc.co.uk 127.0.0.1 (for example), it sits there for a while, then gives me a timeout error. I did some tests while running a tcpdump packet capture on udp port 53, and I discovered that bind was fetching the correct answer normally, and then performing a validation query to one of the DLV servers at ISC (e.g. 199.6.0.29, 199.6.0.30, 199.6.1.29 or 199.6.1.30). It was not receiving any reply. After several seconds, it tried another DLV server and again received no reply. A similar test on the other box receives replies from ISC no problem. I have tried disabling iptables on the failing box, but that didn't help. I'm assuming something in the request causes ISC to ignore it. The relevant parts of named.conf are the same on both boxes, and are pretty close to the stock installation from CentOS6: //------------------------------------------------------------- options { listen-on port 53 { any; }; //listen-on-v6 port 53 { ::1; }; listen-on-v6 port 53 { none; }; directory "/var/named"; dump-file "/var/named/data/cache_dump.db"; statistics-file "/var/named/data/named_stats.txt"; memstatistics-file "/var/named/data/named_mem_stats.txt"; //allow-query { localhost; }; //allow-recursion { localhost; }; recursion yes; dnssec-enable yes; dnssec-validation yes; dnssec-lookaside auto; /* Path to ISC DLV key */ bindkeys-file "/etc/named.iscdlv.key"; managed-keys-directory "/var/named/dynamic"; }; logging { channel default_debug { file "data/named.run"; severity dynamic; }; }; zone "." IN { type hint; file "named.ca"; }; include "/etc/named.rfc1912.zones"; include "/etc/named.root.key"; //------------------------------------------------------------- I have compared named.iscdlv.key, named.root.key and named.rfc1912.zones, the they are the same on both systems. The key records stored in /var/named/dynamic are also the same on both. The failing box fails whether allow-query and allow-recursion are commented out or not. I can make it work by commenting out the dnssec lines, but of course that it just disabling the queries to ISC. Can anyone give me any ideas why one box would get DLV replies and the other would not? And hopefully how to fix it! Thanks! Tony -- Tony Mountifield Work: tony(a)softins.co.uk - http://www.softins.co.uk Play: tony(a)mountifield.org - http://tony.mountifield.org

2 2

samba: check password with AD without joining domain?
by Les Mikesell 16 Aug '13

16 Aug '13

Is there a way to get samba to authenticate against an AD without having to join that domain (which needs admin credentials)? I don't want any of the automatic user creation or mapping stuff from winbind, just a password check instead of having to maintain a local password. I can get that effect via kerberos for normal linux logins by using authconfig-tui, checking kerberos, and filling in the domain/kdc details. Local users still have to be added to the linux system, but where the user names match they can authenticate with their domain password. But, samba doesn't work that way. Even though the authconfig program modifies the smb.conf file, it doesn't seem to work without joining the domain. Is it possible to make it just authenticate via kerberos but otherwise use the local account details for the matching user? -- Les Mikesell lesmikesell(a)gmail.com

4 4

yum-plugin-priorities
by Timothy Murphy 16 Aug '13

16 Aug '13

If I add priority=1 to [updates] in CentOS-Base.repo when I run "sudo yum update" I get the warning 66 packages excluded due to repository priority protections This does not seem to have any adverse effect, but what exactly does it mean? -- Timothy Murphy e-mail: gayleard /at/ eircom.net tel: +353-86-2336090, +353-1-2842366 School of Mathematics, Trinity College, Dublin 2, Ireland

5 6

Re: [CentOS] Red Hat CEO: Go Ahead, Copy Our Software
by Les Mikesell 16 Aug '13

16 Aug '13

On Thu, Aug 15, 2013 at 4:49 PM, Reindl Harald <h.reindl(a)thelounge.net> wrote: > > are you really that dumb? > "take the free version away" -> come on and explain how this works for GPL software Exactly, explain where the GPL distinguishes between what restrictions you can add to binaries vs source components. > Redhat *does not* sell the software and code > they sell the service and support contracts So, what about redistribution of copies? > why are you not simply use a operating system without code from Redhat and shut up? > Windows and Apple OSX as example would free you from Redhat and CentOS > come on, move forward if you are pissed of Redhat for no reason! I could use debian, but then I'd have to learn to type apt-get instead of rpm. I'd prefer to continue using the commands that Red Hat baited us with. -- Les Mikesell lesmikesell(a)gmail.com

1 0

Re: [CentOS] Red Hat CEO: Go Ahead, Copy Our Software
by Les Mikesell 16 Aug '13

16 Aug '13

On Thu, Aug 15, 2013 at 4:08 PM, Reindl Harald <h.reindl(a)thelounge.net> wrote: > >> How about the real history, where Red Hat took a bunch of software >> developed by others, published the barely-working stuff with horrible >> bugs (read the changelogs if you disagree....), then accepted >> contributed debugging, fixes and improvements from the users until it >> was good enough to charge for, then they cut off access even to the >> people who had helped make it usable. And CentOS helps fix that >> problem > > so what > > what about live and let live? What about bait and switch? > remove anything delevoped by RH paied employes in the last 10 years > from the ecosystem and you stay here naked and helpless and most > other distributions too in case of modern and rock solid software Remove the stuff contributed by others and what would still work at all? > GCC and the kernel are only two but importnat pieces where > Redhat invested a lot of time and money over the years > > so whats your problem? I guess I'd rather have seen the contributed work go to a distribution that didn't develop a community with a free version and then after accepting their work, take the free version away. CentOS still gives the same effect, so why didn't they just continue to allow redistribution? -- Les Mikesell lesmikesell(a)gmail.com

2 2

back to: kernel: do_IRQ: 2.96 No irq handler for vector (irq -1)
by m.roth＠5-cent.us 15 Aug '13

15 Aug '13

I asked here a week or so ago, and referenced an older bug, but haven't seen any comments. Googling, I see others asking about the same. Datum: *every* one I've found is like this: they're all HP DL580's or DL380's, or such. This is being used for heavy-duty scientific computing. Does anyone know if it *will* it seriously affect throughput speed if I turn off irqbalance? It's running 6.4, btw. mark

3 3

Mirror failure
by Phil Dobbin 15 Aug '13

15 Aug '13

Hi, all. I was getting: `http://mirror01.th.ifl.net/epel/6/x86_64/repodata/c60f7c3ee6f9a4902d5ce9dd181a84ca684bba1a1df1c612702c7c6760a04645-filelists.sqlite.bz2: [Errno 14] PYCURL ERROR 6 - "Couldn't resolve host 'mirror01.th.ifl.net'" Trying other mirror. ftp://ftp.mirrorservice.org/sites/dl.fedoraproject.org/pub/epel/6/x86_64/re…: [Errno 14] PYCURL ERROR 6 - "Couldn't resolve host 'ftp.mirrorservice.org'" Trying other mirror. ftp://ftp.fedora.is/pub/epel/6/x86_64/repodata/c60f7c3ee6f9a4902d5ce9dd181a84ca684bba1a1df1c612702c7c6760a04645-filelists.sqlite.bz2: [Errno 14] PYCURL ERROR 6 - "Couldn't resolve host 'ftp.fedora.is'" Trying other mirror. ftp://ftp.funet.fi/pub/mirrors/fedora.redhat.com/pub/epel/6/x86_64/repodata…: [Errno 14] PYCURL ERROR 6 - "Couldn't resolve host 'ftp.funet.fi'" Trying other mirror. ftp://mirrors.fedoraproject.org.uk/dl.fedoraproject.org/pub/epel/6/x86_64/r…: [Errno 14] PYCURL ERROR 6 - "Couldn't resolve host 'mirrors.fedoraproject.org.uk'" Trying other mirror. Error: failure: repodata/c60f7c3ee6f9a4902d5ce9dd181a84ca684bba1a1df1c612702c7c6760a04645-filelists.sqlite.bz2 from epel: [Errno 256] No more mirrors to try. You could try using --skip-broken to work around the problem` every time I ran `sudo yum update'. This happened on Fedora 17 also. I've had to switch both machines to Ubuntu because I need working machines. I've Googled this extensively & changed my nameservers, commented out relevant lines in the configs, etc, etc but no luck so far. Ubuntu works fine & I have no network problems (two HP ProCurves 2124s working normally over the rest of the network: 17 machines). Is there a workaround for this as I need a working CentOS box. Any help appreciated. Cheers, Phil... -- currently (ab)using CentOS 5.9 & 6.4, Debian Squeeze & Wheezy, Fedora Beefy, Spherical & That Damn Cat, Lubuntu 12.10, OS X Snow Leopard & Tiger, Ubuntu Precise, Quantal & Raring GnuGPG Key : http://phildobbin.org/publickey.asc

5 11

convert webpage to image
by Carl T. Miller 15 Aug '13

15 Aug '13

What is the easiest way to convert a webpage into a jpg or png file? I've seen several programs that can do various conversions, but nothing open source that can do it in a single conversion. Just wondering if anyone on the list has suggestions for something I can put into a script to convert a webpage into a file I can use with my screensaver. c

14 18

Intel e1000e driver bug and 82574L controller
by Glenn Eychaner 14 Aug '13

14 Aug '13

One of the more promising solutions I'm looking at for my dual-ethernet dual-monitor workstation contains an Intel 82574L Ethernet controller. I found a LOT of postings regarding a bug in the driver for this controller: http://www.doxer.org/learn-linux/resolved-intel-e1000e-driver-bug-on-82574l… https://bugzilla.redhat.com/show_bug.cgi?id=632650 but there isn't any clear indication as to whether the bug has been resolved in mainline CentOS 6.4 or not. Has this bug been resolved? -G. -- Glenn Eychaner (geychaner(a)lco.cl) Telescope Systems Programmer, Las Campanas Observatory

3 2

Re: [CentOS] qemu-kvm package?
by Dave Johansen 14 Aug '13

14 Aug '13

On Fri, Aug 9, 2013 at 8:15 AM, lists-centos <replies-lists-c9y6-centos(a)listmail.innovate.net> wrote: > > > > ------------ Original Message ------------ > > Date: Friday, August 09, 2013 08:04:08 AM -0700 > > From: Dave Johansen <davejohansen(a)gmail.com> > > To: CentOS mailing list <centos(a)centos.org> > > Cc: > > Subject: [CentOS] qemu-kvm package? > > > > I just did a clean net install of CentOS 6.4 and when I run > > virt-manager it says that qemu-kvm is missing, but when I try to > > install it with yum it says that there isn't a package with that > > name. Is something wrong with my configuration? Or what is causing > > this package to appear as not available? Thanks, > > Dave > > Is this install on a 32-bit machine? > > It's there for 64-bit, but I don't see it for 32-bit. > > > - Richard It's a 32-bit install.

7 14

← Newer
1
...
6
7
8
9
10
11
12
...
15
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss August 2013