Discuss September 2014

discuss@lists.centos.org

182 participants
169 discussions

yum updates not working
by Joseph Godino 22 Sep '14

22 Sep '14

I think my software updates are not working. I know a Firefox update was announced yesterday but when I try sudo yum update I get a message saying that no packages are marked for update. I tried sudo yum clean all but I still get the same response. Any suggestions? Joe

5 7

C6 : "extra" file access permission ?
by Always Learning 22 Sep '14

22 Sep '14

In C5.10 when I do a "ls -al" (or .l as I am lazy) I see:- drwxr-xr-x 2 root root 4096 Dec 4 2013 alias In C6.5 (2.6.32-431.23.3.el6.x86_64) I see:- drwxr-xr-x. 2 root root 4096 Sep 9 04:26 conf drwxrwxrwt. 4 root root 4096 Sep 21 03:39 tmp drwxr-xr-x. 9 root root 4096 Sep 9 04:26 spool lrwxrwxrwx. 1 root root 10 Sep 8 21:45 mail -> spool/mail I have never noticed the "extra dot" before. QUESTION What does the extra dot (.) signify ? Thank you, Paul (Supporting Yes for Scotland)

2 3

rndc permission denied
by Sergio Belkin 22 Sep '14

22 Sep '14

Hi, h when I have the following problem with rndc: [root@centos7 ~]# rndc recursing and rndc: 'recursing' failed: permission denied SELinux is disables: named.conf config file is: // // named.conf // // Provided by Red Hat bind package to configure the ISC BIND named(8) DNS // server as a caching only nameserver (as a localhost DNS resolver only). // // See /usr/share/doc/bind*/sample/ for example named configuration files. // options { // listen-on port 53 { 127.0.0.1; }; listen-on port 53 { 192.168.0.107; }; // listen-on-v6 port 53 { ::1; }; directory "/var/named"; dump-file "/var/named/data/cache_dump.db"; statistics-file "/var/named/data/named_stats.txt"; memstatistics-file "/var/named/data/named_mem_stats.txt"; allow-query { localhost; 192.168.0.0/24; }; /* - If you are building an AUTHORITATIVE DNS server, do NOT enable recursion. - If you are building a RECURSIVE (caching) DNS server, you need to enable recursion. - If your recursive DNS server has a public IP address, you MUST enable access control to limit queries to your legitimate users. Failing to do so will cause your server to become part of large scale DNS amplification attacks. Implementing BCP38 within your network would greatly reduce such attack surface */ recursion yes; dnssec-enable yes; dnssec-validation yes; dnssec-lookaside auto; bindkeys-file "/etc/named.iscdlv.key"; managed-keys-directory "/var/named/dynamic"; }; logging { channel default_debug { file "data/named.run"; severity dynamic; }; }; zone "." IN { type hint; file "named.ca"; }; zone "example.com." IN { type master; file "example.com.fz"; allow-update { none; }; }; zone "0.168.192.in-addr.arpa" IN { type master; file "example.com.rz"; allow-update { none; }; }; include "/etc/named.rfc1912.zones"; include "/etc/named.root.key"; any ideas TIA -- -- Sergio Belkin http://www.sergiobelkin.com LPIC-2 Certified - http://www.lpi.org

1 1

Ifconfig ipv6:permission denied.
by dE 21 Sep '14

21 Sep '14

Hi! I installed CentOS 7 today, it's a minimal install, so it didn't have ifconfig command. So I installed net-tools, however I can't add ipv6 address to it. # ifconfig enp0s3 add fc00::1002/124 SIOCSIFADDR: Permission denied. Yes, I'm running as root. CentOS is running in a Qemu instance with e1000 ethernet card.

5 18

lost packets - Bond
by Eduardo Augusto Pinto 19 Sep '14

19 Sep '14

Guys, good afternoon I'm using in my bond interfaces as active backup, in theory, should assume an interface (or work) only when another interface is down. But I'm just lost packets on the interface that is not being used and is generating packet loss on bond. What can that be? Follow my settings bond [root@xxxxx ~]# ifconfig bond0 ; ifconfig eth0 ; ifconfig eth1 bond0 Link encap:Ethernet HWaddr 2C:59:E5:3C:71:68 inet addr:10.104.x.x Bcast:10.104.172.255 Mask:255.255.255.0 UP BROADCAST RUNNING MASTER MULTICAST MTU:1500 Metric:1 RX packets:38386574 errors:0 dropped:1295024 overruns:0 frame:0 TX packets:34733102 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:23626317629 (22.0 GiB) TX bytes:21028389425 (19.5 GiB) eth0 Link encap:Ethernet HWaddr 2C:59:E5:3C:71:68 UP BROADCAST RUNNING SLAVE MULTICAST MTU:1500 Metric:1 RX packets:37091397 errors:0 dropped:0 overruns:0 frame:0 TX packets:34732869 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:23524827730 (21.9 GiB) TX bytes:21028299937 (19.5 GiB) eth1 Link encap:Ethernet HWaddr 2C:59:E5:3C:71:68 UP BROADCAST RUNNING SLAVE MULTICAST MTU:1500 Metric:1 RX packets:1295179 errors:0 dropped:1294944 overruns:0 frame:0 TX packets:237 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:101490019 (96.7 MiB) TX bytes:90360 (88.2 KiB) [root@xxxxx ~]# [root@xxxxx ~]# cat /proc/net/bonding/bond0 Ethernet Channel Bonding Driver: v3.7.1 (April 27, 2011) Bonding Mode: fault-tolerance (active-backup) Primary Slave: None Currently Active Slave: eth0 MII Status: up MII Polling Interval (ms): 1000 Up Delay (ms): 0 Down Delay (ms): 0 Slave Interface: eth0 MII Status: up Speed: 10000 Mbps Duplex: full Link Failure Count: 0 Permanent HW addr: 2c:59:e5:3c:71:68 Slave queue ID: 0 Slave Interface: eth1 MII Status: up Speed: 10000 Mbps Duplex: full Link Failure Count: 0 Permanent HW addr: 2c:59:e5:3c:71:6c Slave queue ID: 0 [root@xxxxx ~]# cat /etc/sysconfig/network-scripts/ifcfg-bond0 DEVICE=bond0 IPADDR=10.104.x.x NETMASK=255.255.255.0 ONBOOT=yes BOOTPROTO=none USERCTL=no BONDING_OPTS="mode=1 miimon=1000" In /var/log/messages I have a lot martian source .... [root@xxxxx ~]# tail -f /var/log/messages Sep 17 13:26:38 xxxxx kernel: IPv4: martian source 10.104.172.0 from 0.0.0.0, on dev bond0 Sep 17 13:26:38 xxxxx kernel: ll header: 00000000: ff ff ff ff ff ff 00 00 00 00 5b 00 08 00 ..........[... Sep 17 13:26:39 xxxxx kernel: IPv4: martian source 10.104.172.0 from 0.0.0.0, on dev bond0 Sep 17 13:26:39 xxxxx kernel: ll header: 00000000: ff ff ff ff ff ff 00 00 00 00 5b 01 08 00 ..........[... Sep 17 13:26:39 xxxxx kernel: IPv4: martian source 10.104.172.0 from 0.0.0.0, on dev bond0 Sep 17 13:26:39 xxxxx kernel: ll header: 00000000: ff ff ff ff ff ff 00 00 00 00 5b 00 08 00 ..........[... Sep 17 13:26:39 xxxxx kernel: IPv4: martian source 10.104.172.0 from 0.0.0.0, on dev bond0 Sep 17 13:26:39 xxxxx kernel: ll header: 00000000: ff ff ff ff ff ff 00 00 00 00 5b 00 08 00 ..........[... Sep 17 13:26:39 xxxxx kernel: IPv4: martian source 10.104.172.0 from 0.0.0.0, on dev bond0 Sep 17 13:26:39 xxxxx kernel: ll header: 00000000: ff ff ff ff ff ff 00 00 00 00 5b 01 08 00 ..........[... Sep 17 13:26:43 xxxxx kernel: net_ratelimit: 69 callbacks suppressed Thks ....

3 2

Firefox-31 STARTTLS cipher strengh degraded?
by James B. Byrne 19 Sep '14

19 Sep '14

Has anyone else experienced a degraded symmetric key exchange when using FF-31 vice FF24? When I use FF24 then I get a symmetric type of AES-256 (Very Strong) rating in Calomel 0.62. When I switch to FF31 and connect to exactly the same server host and url then in Calomel 0.62 I see this instead: TLS_DHE_RSA_WITH_AES_256_CBC_SHA (Very Weak). I am not altering any of the configuration options in FF between version trials. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Help test OpenStack on CentOS 7
by Rich Bowen 19 Sep '14

19 Sep '14

CentOS/OpenStack enthusiasts, please come help us test OpenStack on CentOS7, October 1 & 2. There's more detail in this blog post: http://community.redhat.com/blog/2014/09/rdo-juno-test-day/ The test day details are at https://openstack.redhat.com/RDO_test_day_Juno_milestone_3 We'll be using #RDO on the Freenode IRC network for discussion/questions during the event. Thanks! -- Rich Bowen - rbowen(a)redhat.com OpenStack Community Liaison http://openstack.redhat.com/

1 0

Re: [CentOS] process identification
by kqt4at5v＠gmail.com 19 Sep '14

19 Sep '14

On Fri, 19 Sep 2014, Reindl Harald wrote: > > Am 19.09.2014 um 15:58 schrieb kqt4at5v(a)gmail.com: >> On Fri, 19 Sep 2014, Reindl Harald wrote: >> >>> Am 19.09.2014 um 15:45 schrieb kqt4at5v(a)gmail.com: >>>> I am running CentOS 6.5. I know this is not a CentOS specific problem. >>>> Netstat shows several open ports and no pid. >>>> >>>> tcp 0 0 *:48720 *:* LISTEN - tcp 0 0 *:43422 >>>> *:* LISTEN - >>>> udp 0 0 *:50216 *:* >>> >>> alias netstat='/bin/netstat --numeric-hosts --numeric-ports --notrim --programs -u -t' >>> /bin/netstat >>> >>> [root@openvas:~]$ /bin/netstat --numeric-hosts --numeric-ports --notrim --programs -u -t -l >>> Aktive Internetverbindungen (Nur Server) >>> Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name >>> tcp 0 0 127.0.0.1:9390 0.0.0.0:* LISTEN 5454/openvasmd >>> tcp 0 0 127.0.0.1:9391 0.0.0.0:* LISTEN 5473/openvassd >>> tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 5438/gsad >>> tcp 0 0 0.0.0.0:10022 0.0.0.0:* LISTEN 1177/sshd >> >> This netstat show exactly the same > > boah then call it as root, for a unprivileged user it shows only > executeable and PID of own processes for good reasons > >> Lsof does not show these ports > > because you just have no permissions > > My bad I should have said. My original commands were sudo netstat -tulpn | less sudo lsof | less I have several CentOS 6.5 machines and only one shows these odd ports. I have also run chkrootkit and used clamscan to check filesystems. It may be harmless but my curiosity is killing me.

5 5

Re: [CentOS] process identification
by kqt4at5v＠gmail.com 19 Sep '14

19 Sep '14

On Fri, 19 Sep 2014, Reindl Harald wrote: > > Am 19.09.2014 um 15:45 schrieb kqt4at5v(a)gmail.com: >> I am running CentOS 6.5. I know this is not a CentOS specific problem. >> Netstat shows several open ports and no pid. >> >> tcp 0 0 *:48720 *:* LISTEN - tcp 0 0 *:43422 >> *:* LISTEN - >> udp 0 0 *:50216 *:* > > alias netstat='/bin/netstat --numeric-hosts --numeric-ports --notrim --programs -u -t' > /bin/netstat > > [root@openvas:~]$ /bin/netstat --numeric-hosts --numeric-ports --notrim --programs -u -t -l > Aktive Internetverbindungen (Nur Server) > Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name > tcp 0 0 127.0.0.1:9390 0.0.0.0:* LISTEN 5454/openvasmd > tcp 0 0 127.0.0.1:9391 0.0.0.0:* LISTEN 5473/openvassd > tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 5438/gsad > tcp 0 0 0.0.0.0:10022 0.0.0.0:* LISTEN 1177/sshd > > This netstat show exactly the same. Lsof does not show these ports.

3 4

process identification
by kqt4at5v＠gmail.com 19 Sep '14

19 Sep '14

I am running CentOS 6.5. I know this is not a CentOS specific problem. Netstat shows several open ports and no pid. tcp 0 0 *:48720 *:* LISTEN - tcp 0 0 *:43422 *:* LISTEN - udp 0 0 *:50216 *:* - How can I identify what application is using these ports? Richard

2 1

← Newer
1
...
4
5
6
7
8
9
10
...
17
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss September 2014