Discuss March 2014

discuss@lists.centos.org

167 participants
144 discussions

Re: [CentOS] KVM and DHCP
by James B. Byrne 13 Mar '14

13 Mar '14

On Thu, March 13, 2014 15:49, Reindl Harald wrote: > > > Am 13.03.2014 20:43, schrieb James B. Byrne: >> CentOS-6.5 >> >> We have a KVM guest running MS-WinV7pro. This guest is joined to an Active >> Directory Domain. That domain provides DHCP to the members. The KVM guest >> does not obtain its IP from the domain but from the local host's qemu >> hypervisor instead. >> >> Is there anyway to get around this and have the guest MS-Win OS get its DHCP >> from the same place as the rest of the domain members? > > smells like you are using NAT for your guest instead > bridge it to the host network, the guest does not > know from where it gets DHCP infos and there should > not be more than one dhcpd on a network segment, anything > else leads to race-conditions - the faster dhcpd wins > > http://www.dedoimedo.com/computers/kvm-bridged.html > > maybe the article is outdated, try google as i did > https://www.google.at/search?q=kvm+nat+versus+bridging > > Yes, that was it. Apparently if one creates a kvm guest via the virt-manager gui application then NAT is automatically selected as the default. It may be that the other guests were originally hand-crafted via virsh and the br0 interface was specified for them, but I doubt that. I have been using virt-manager since day one on this project and I am getting a queasy feeling that virt-manager's behaviour has obscurely changed in significant ways since I first began using it. This is not the first problem that I have had creating new guests with recent versions of virt-manager which were not in evidence with earlier use. In any case, to fix this via virt-manager's __virtual hardware details__ interface one must select the __NIC__ and change the settings from <Virtual network default 'NAT'> to <Specify shared device name> and then input the bridge interface name <br0> in the text box that subsequently appears. One must also change the Device model: from <Hypervisor default> to <virtio>. Thanks for the pointer. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

logwatch named logs
by John R Pierce 13 Mar '14

13 Mar '14

ever since implementing the no-recursion-on-outside queries fix on one of my name servers, my logwatch emails have been 10-20MB/day, filled with crud like... client 10.191.192.212 query (cache) 'm.777.liyuanxi.com/A/IN' denied: 1 Time(s) client 10.192.34.96 query (cache) 'dyjwntl.www.0411gogo.com/A/IN' denied: 1 Time(s) client 10.192.43.105 query (cache) 'doitxwx.777.liyuanxi.com/A/IN' denied: 1 Time(s) client 10.192.90.161 query (cache) 'v.www.90uc.com/A/IN' denied: 1 Time(s) any idea how to suppress this? this is centos 5.latest with bind 9.7 -- john r pierce 37N 122W somewhere on the middle of the left coast

8 11

KVM and DHCP
by James B. Byrne 13 Mar '14

13 Mar '14

CentOS-6.5 We have a KVM guest running MS-WinV7pro. This guest is joined to an Active Directory Domain. That domain provides DHCP to the members. The KVM guest does not obtain its IP from the domain but from the local host's qemu hypervisor instead. Is there anyway to get around this and have the guest MS-Win OS get its DHCP from the same place as the rest of the domain members? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

apache, krb5 annoyances
by m.roth＠5-cent.us 13 Mar '14

13 Mar '14

Something I've been fighting since yesterday... I got trac installed, and working. Then I had to add security. Got all the moving pieces in - mod_ssl, auth_kerb. If I go to https://hostname/trac, everything's fine, a popup window asks for username and password. But if I go to https://hostname.f.q.d.n/trac, it fails, returning a 500? 501? Internal server error. I'm on a workstation running CentOS 6.5; my user, on Windows and running IE, gets the same. But if I open another firefox window with -P --no-remote, and pick another profile, it works. I certainly have no idea what to try in IE.... But I think there's some other misconfiguration of apache. Anyone have any thoughts on the matter? I don't think management will appreciate a head-shaped hole in the wall by my cube.... mark

1 0

createrepo and parallel drpm generation
by Johnny Hughes 13 Mar '14

13 Mar '14

I wanted to point out this functionality in case others want to test it: http://centosnow.blogspot.com/2014/03/createrepo-and-parallel-delta-rpms-on… For the record, this cuts down the metadata generation to 1/4 of the original time on my test platform. Other relevant links: http://lists.baseurl.org/pipermail/yum-devel/2014-February/010580.html https://github.com/imcleod/createrepo/tree/feature/parallel_deltas_full http://people.centos.org/hughesjr/createrepo_delta/ Thanks, Johnny Hughes

1 0

Re: [CentOS] Anyone using trac on centos?
by m.roth＠5-cent.us 13 Mar '14

13 Mar '14

Hi, Dan, Daniel J Walsh wrote: > On 03/12/2014 04:52 PM, m.roth(a)5-cent.us wrote: >> Peter Brady wrote: >>> On 13/03/14 5:02 AM, m.roth(a)5-cent.us wrote: >>>> (Besides Paul, who's busy?) >>>> >>>> I just need one question answered: I keep reading the docs, and given >>>> the old traditional /var/www I get that part of trac should be >>>> installed in /var/www/trac/<myproj> (I think); what I can't figure out >>>> is whether there is *anything* under the document root, that is, >>>> /var/www/html/trac/<myproject>. >>>> >>>> Anyone have a clue? Do I even need it as a placeholder, or does >>>> anything actually go in there? <snip> >>> For the single site install I've got a few things in /var/www/html: >>> >>> [root@develop www]# ls html/ >> <snip> Thanks, Peter. Between you and Paul, and, of course, much >> googling, <snip> >> Installing the agilo-plugin was easy (well, I'll know when my user gets >> going). Now shutting up selinux.... And no, what I found was *wrong*, it >> was telling you to use chcon, which does *not* last across reboots. >> semanage (bleah!).... >> > Mark what changes did you have to make for SELinux? So far, all I've done is to change the fcontexts to httpd_sys_content_t, except for the cgi, which is httpd_sys_script_exec_t. I hadn't managed to google what to do with the trac.fsgi, which selinux doesn't seem to like as the latter context. What I was referring to, above, was someone's post that I found while googling, who was saying you should chcon, which, as much as you know how much I adore selinux (NOT!), I know to use semanage and restorecon. Hmmm, I see the nightly run of updatedb is complaining: I have the cgi-bin directory itself as httpd_sys_script_exec_t - what should that be, anyway? The more I think of it, the less I like some of this.... -rw-r--r--. apache root system:object_r:httpd_sys_content_t:s0 README -rw-r--r--. apache root system:object_r:httpd_sys_content_t:s0 VERSION drwxr-xr-x. apache root system:object_r:httpd_sys_content_t:s0 attachments drwxr-xr-x. apache root system:object_r:httpd_sys_script_exec_t:s0 cgi-bin drwxr-xr-x. apache root system:object_r:httpd_sys_content_t:s0 conf drwxr-xr-x. apache root system:object_r:httpd_sys_content_t:s0 db drwxr-xr-x. apache root system:object_r:httpd_sys_content_t:s0 htdocs drwxr-xr-x. apache root system:object_r:httpd_sys_content_t:s0 log drwxr-xr-x. apache root system:object_r:httpd_sys_content_t:s0 plugins drwxr-xr-x. apache root system:object_r:httpd_sys_content_t:s0 templates Seems to me that none of that but VERSION and htdocs should be content.... Advice? Let's get this correct, and I'll post, and email trac about what they should do. Right now, <http://trac.edgewall.org/wiki/TracWithSeLinux> is what they say, and they mention chcon with CentOS 6.3. I see they have a policy (which, for some reason, is *not* part of the trac package via upstream). I suppose I could implement it, but I'd rather get someone who actually knows what they're talking about look at what they say and advise me, Dan. mark.

1 0

Anyone using trac on centos?
by m.roth＠5-cent.us 13 Mar '14

13 Mar '14

(Besides Paul, who's busy?) I just need one question answered: I keep reading the docs, and given the old traditional /var/www I get that part of trac should be installed in /var/www/trac/<myproj> (I think); what I can't figure out is whether there is *anything* under the document root, that is, /var/www/html/trac/<myproject>. Anyone have a clue? Do I even need it as a placeholder, or does anything actually go in there? mark

4 4

Severe issues with the latest 6.5 desktop
by mark 13 Mar '14

13 Mar '14

Ok, here at home, I'm running kde. After the last update, last week, and reboot (and that was a *real* mess - some issue I'm not sure I've resolved yet, trying to boot off RAID 1), here's what's started happening: I run in runlevel 3, and have a startx in my .bash_profile. At some point, just about every day, suddenly the toolbar on the bottom vanishes, as does my desktop wallpaper, the background goes black, and dmesg is showing me: plasma-desktop[22021]: segfault at 11 ip 00000034820ffd02 sp 00007fffa6a0b000 error 4 in libplasma.so.3.0.0[3482000000+218000] over and over. I <ctrl-alt-bksp>, it kills X, and I startx again, and I'm good... well, unless it does it to me again. Happened several times last evening. Any ideas, folks? mark

3 2

CentOS-announce Digest, Vol 109, Issue 6
by centos-announce-request＠centos.org 13 Mar '14

13 Mar '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2014:0286 CentOS 6 upstart Update (Johnny Hughes) 2. CEBA-2014:0287 CentOS 6 coreutils Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 12 Mar 2014 16:29:57 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2014:0286 CentOS 6 upstart Update To: centos-announce(a)centos.org Message-ID: <20140312162957.GA5185(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:0286 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-0286.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 9a7f5ed6e4bef587d0059372e011ad2d89ee6835395485bf16fd15fe7a5e9bd3 upstart-0.6.5-13.el6_5.3.i686.rpm x86_64: 4c0734a1c9eef713f0185d12445c852b4802ccd0f90686994ea4012439d0a680 upstart-0.6.5-13.el6_5.3.x86_64.rpm Source: 01cf26f98db52b06f94522f7e6acc163ea0512174075be4ee1e9a198425918ff upstart-0.6.5-13.el6_5.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 12 Mar 2014 16:30:54 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2014:0287 CentOS 6 coreutils Update To: centos-announce(a)centos.org Message-ID: <20140312163054.GA5398(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:0287 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-0287.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: c501f02c5f96d2697122aa0751ee2f65e35b426758e4a1e1362113a69d65850a coreutils-8.4-31.el6_5.1.i686.rpm e837fad7e73ff059d370614a818ea65c5ecee41fa0e93c84d00326cda1331ee0 coreutils-libs-8.4-31.el6_5.1.i686.rpm x86_64: 8bb808eaac4c62cb20528f53bc96440f5bd6b5bd5b9b07349e56f15c87436bbf coreutils-8.4-31.el6_5.1.x86_64.rpm eb91fc751ca64c2b5b68690105a5bd281a9e60220529639369aa406f888ba841 coreutils-libs-8.4-31.el6_5.1.x86_64.rpm Source: f98a3838cfb4f9df72ecc4aa5aea2588e508a41fd10270efd189421c0584ca56 coreutils-8.4-31.el6_5.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 109, Issue 6 ***********************************************

1 0

Active Directory, sssd and pam_cracklib?
by James Pearson 13 Mar '14

13 Mar '14

I'm in the process of testing out sssd on a CentOS 6 install using Active Directory for user authentication via sssd All appears to be working fine - however, when I change a user password using 'passwd' (or at login when the account has expired etc), it appears pam_cracklib is being over-zealous with the new password requirements Active Directory is set up with a password policy - but pam_cracklib (and may be other PAM modules?) have stronger password policies So, I would like passwd to use the AD password requirements - and ignore any pam_cracklib requirements The password settings in the system-auth and password-auth PAM config files are (as generated by authconfig): password requisite pam_cracklib.so try_first_pass retry=3 type= password sufficient pam_unix.so sha512 shadow nullok try_first_pass use_authtok password sufficient pam_sss.so use_authtok password required pam_deny.so If I comment out the pam_cracklib line (and remove 'use_authtok' from the other lines) - it appears to do what I want - but doesn't seem 'correct' to me - i.e. what would happen if there were any local users defined on the system? Does anyone have any suggestions on how PAM should be configured to allow password changes to 'honour' the Active Directory password policy requirements - but still impose requirements on non-AD users? Thanks James Pearson

1 0

← Newer
1
...
7
8
9
10
11
12
13
14
15
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss March 2014