Discuss March 2015

discuss@lists.centos.org

172 participants
172 discussions

Centos 6 - disabling IPv6 addressing
by Robert Moskowitz 09 Mar '15

09 Mar '15

I have just moved a host from a network that supports static IPv4 and IPv6. The IPv4 addr is set in ifcfg-eth0, and the IPv6 via RA (I set the MAC so I get an IPv6 addr that I like). I just moved the host to a network that supports static IPv4, but only dymanic IPv6, so at this time (until I get static IPv6), I need to disable the global IPv6 addressing. So in the ifcfg-eth0 file I set: IPV6INIT="no" But I am still getting a global IPv6 (and of course local scope). What else do I need to do to disable the listening for RA announcements and setting an IPv6 global address? I do not want to reboot the box. I can restart the network as needed. I seem to recall, once upon atime an option in /etc/sysconfig/network thanks

9 19

install latest gcc/g++ dev tools on centos
by Adekoya Adekunle 09 Mar '15

09 Mar '15

Guys, How can I install the latest version of gcc/g++ development tools on my centos ? I have version 4.1.* on the machine. Can I do above from yum ? I would be glad to read your responses to my questions Br Kunle

4 4

Fail2Ban Centos 7 is there a trick to making it work?
by John Plemons 09 Mar '15

09 Mar '15

Been working on fail2ban, and trying to make it work with plain Jane install of Centos 7 Machine is a HP running 2 Quad core Xeons, 16 gig or ram and 1 plus TB of disk space. Very generic and vanilla. Current available epel repo version is fail2ban-0.9.1 Looking at the log file, fail2ban starts and stops fine, there isn't output though showing any login attempts being restricted. 2015-03-09 12:54:37,930 fail2ban.server [14805]: INFO Stopping all jails 2015-03-09 12:54:37,931 fail2ban.server [14805]: INFO Exiting Fail2ban 2015-03-09 12:54:38,338 fail2ban.server [16678]: INFO Changed logging target to /var/log/fail2ban.log for Fail2ban v0.9.1 2015-03-09 12:54:38,341 fail2ban.database [16678]: INFO Connected to fail2ban persistent database '/var/lib/fail2ban/fail2ban.sqlite3' I copied jail.conf and added the edited jail.local to the directory /etc/fail2ban/ This is about as far as I have gotten with searches on how to configure with Centos 7. Any help would be welcome. What am I missing? john

2 1

mod_clamav, apache and centos6?
by James Pearson 09 Mar '15

09 Mar '15

I'm trying to get mod_clamav working with Apache on a CentOS 6.6 box - without much luck ... I'm using httpd 2.2.15-39.el6.centos.x86_64 with clamav 0.98.6-1.el6.x86_64 (from EPEL) and mod_clamav 0.23 compiled from source via http://software.othello.ch/mod_clamav/ The mod_clamav source hasn't been updated in nearly 6 years - so may well no longer work with more recent versions of Apache or Clamav ... Before I spend too much time on this - I was wondering if anyone has this set up working, or should I give up and try something else? Thanks James Pearson

1 0

Problem with ntp
by C.L. Martinez 09 Mar '15

09 Mar '15

Hi all, I have a problem with ntpd daemon in my CentOS7 vm. When I try to list peers, command fails: [root@c7tst ntpstats]# ntpq ntpq> pe ntpq: read: Connection refused ntpq> My actual ntp.conf: # For more information about this file, see the man pages # ntp.conf(5), ntp_acc(5), ntp_auth(5), ntp_clock(5), ntp_misc(5), ntp_mon(5). driftfile /var/lib/ntp/drift # Permit time synchronization with our time source, but do not # permit the source to query or modify the service on this system. restrict default nomodify notrap nopeer noquery # Permit all access over the loopback interface. This could # be tightened as well, but to do so would effect some of # the administrative functions. restrict 127.0.0.1 #restrict ::1 # Hosts on local network are less restricted. #restrict 192.168.1.0 mask 255.255.255.0 nomodify notrap # Use public servers from the pool.ntp.org project. # Please consider joining the pool (http://www.pool.ntp.org/join.html) server 0.europe.pool.ntp.org iburst server 1.europe.pool.ntp.org iburst server 2.europe.pool.ntp.org iburst server 3.europe.pool.ntp.org iburst #broadcast 192.168.1.255 autokey # broadcast server #broadcastclient # broadcast client #broadcast 224.0.1.1 autokey # multicast server #multicastclient 224.0.1.1 # multicast client #manycastserver 239.255.254.254 # manycast server #manycastclient 239.255.254.254 autokey # manycast client # Enable public key cryptography. #crypto includefile /etc/ntp/crypto/pw # Key file containing the keys and key identifiers used when operating # with symmetric key cryptography. keys /etc/ntp/keys # Specify the key identifiers which are trusted. #trustedkey 4 8 42 # Specify the key identifier to use with the ntpdc utility. #requestkey 8 # Specify the key identifier to use with the ntpq utility. #controlkey 8 # Enable writing of statistics records. statistics clockstats cryptostats loopstats peerstats # Disable the monitoring facility to prevent amplification attacks using ntpdc # monlist command when default restrict does not include the noquery flag. See # CVE-2013-5211 for more details. # Note: Monitoring will not be disabled with the limited restriction flag. #disable monitor I have tried to disable all "restrict" statements without luck. Same ntp.conf works in my CentOS6.x hosts ... Any idea why?? (SELinux is disabled) Thanks.

3 5

LVM encryption and new volume group
by Tim 09 Mar '15

09 Mar '15

Hello list, I bought a Thinkpad T420 and installed CentOS 7 recently. I choosed to use lvm encryption for the entire volume group. It works so far. But now I am planning to install a second hard disk. My thought is to create a new volume group on this additional disk. But how can I integrate/do this according to the existing encryption so that it will be decrypted by the same passphrase I use at startup? Regards and thanks in advance Tim

3 8

mariadb driver for named-sdb (CentOS 7)
by Jim Holmes 08 Mar '15

08 Mar '15

I've looked high and low and I cannot a package that has the mariadb driver to go with bind-sdb-9.9.4-14.el7_0.1.x86_64. Everything I'm finding is how to build from source, which for this project will not be maintainable. Is there a yum repo with this driver anywhere? Thanks much, Jim

3 2

which uuid to specify a raid in fstab
by Negative 08 Mar '15

08 Mar '15

I'm confused about which UUID to use to identify a software RAID in fstab. lsblk -fs shows: md127p1 ext4 c43af789-82aa-49e9-a8ed-acd52b1cdd58 /y --- md127 ext4 39c20575-4257-4fd7-b5c8-8a15757e9e8e --- sdb1 linux_r hostname:0 af77830e-8cfd-9012-62ce-e57105c3bf6c --- sdb --- sdc1 linux_r hostname:0 af77830e-8cfd-9012-62ce-e57105c3bf6c --- sdc linux_r hostname:0 af77830e-8cfd-9012-62ce-e57105c3bf6c mdadm --detail gives for both md127p1 and md127 UUID : af77830e:8cfd9012:62cee571:05c3bf6c I want to add some disks to the server, not to the raid and I wanted to avoid trouble with the names. Any help would be appreciated. Barry

3 4

Squid on CentOS 7: few questions
by Niki Kovacs 07 Mar '15

07 Mar '15

Hi, I recently migrated my office's server from Slackware64 14.1 to CentOS 7. Right now I'm in the process of configuring the Squid web proxy. I edited the default /etc/squid/squid.conf, and here's what I have so far: --8<-------------------------------------------------- # /etc/squid/squid.conf # Nom d'hôte du serveur Squid visible_hostname amandine.microlinux.lan # Définitions acl localnet src 192.168.2.0/24 # RFC1918 possible internal network acl SSL_ports port 443 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 # https acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl CONNECT method CONNECT # Règles d'accès http_access deny !Safe_ports http_access deny CONNECT !SSL_ports http_access allow localnet # Port du proxy http_port 3128 # Taille du cache dans la RAM cache_mem 256 MB # Vidage système coredump_dir /var/spool/squid # Durée de vie des fichiers sans date d'expiration refresh_pattern ^ftp: 1440 20% 10080 refresh_pattern ^gopher: 1440 0% 1440 refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 refresh_pattern . 0 --8<-------------------------------------------------- The proxy is working as expected. I have a few questions for fine-tuning though. 1. Squid's main logs are stored in /var/log/squid/access.log. I'd like to setup logfile rotation for that, since it can become quite big. How do you handle this? With Squid's intern 'logfile_rotate' directive or with logrotate? What I'd like to do is rotate this logfile about once a week. 2. Which user is Squid supposed to run as under CentOS? On my Slackware server I had the following: cache_effective_user nobody cache_effective_group nobody What's an orthodox setting for CentOS? 3. The access rules are a bit minimal. Do they seem OK to you for a LAN? Any suggestions? Cheers, Niki -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

3 3

How to install tp_smapi and acpi_call kernel modules
by Tim 07 Mar '15

07 Mar '15

Hello, I've got a Thinkpad T420 and would like to use full tlp functionality. Therefore I need the kernel module tp_smapi and acpi_call. Have a look right here: http://linrunner.de/en/tlp/docs/tlp-linux-advanced-power-management.html#in… There are only fedora related packages but none for RHEL/CentOS. Should I install that repo and hardcode the mirror to the fc21 repo? Regards Tim

3 3

← Newer
1
...
11
12
13
14
15
16
17
18
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss March 2015