Discuss March 2015

discuss@lists.centos.org

172 participants
172 discussions

OpenSSL vulnerability fix
by Venkateswara Rao Dokku 02 Apr '15

02 Apr '15

Hi All, I wanted to fix the openssl vulnerabilities (CVE-2014-3569, CVE-2014-3570, CVE-2014-3571, CVE-2014-3572) in my CentOS 5.5 and found out that 0.9.8zd has the fixes I am looking for (from the https://www.openssl.org/news/vulnerabilities.html link). But, When I tried to find the openssl-0.9.8zd rpm package, I did not find it in http://mirror.centos.org/centos/5/updates/x86_64/RPMS/. The latest that I could find was 0.9.8e-31-el5. Can you please help me on how can I find the rpm I am looking for or How can I fix the vulnerabilities.? Thanks for your help. -- Thanks & Regards, Venkateswara Rao Dokku.

3 4

How to decrypt rootpassword form kickstart file
by Jegadeesh Kumar 01 Apr '15

01 Apr '15

Hi Team, I have the kick start file where my root password is store like # Root password rootpw --iscrypted $1$1SItJOAg$UM9n7lRFK1/OCs./rgQtQ/ # System authorization information auth --useshadow --passalgo=sha512 Is there any way to decry pt the password and get it as plain text. I know single user mode works but my case it in remote site. Thanks, Jegadeesh

10 11

LDAP TLS error -8023
by Paul R. Ganci 01 Apr '15

01 Apr '15

Can somebody tell me what this error means (server, domain etc. changed to protect the innocent)? ldapsearch -H ldap://ldapserv-1.example.com:389 -ZZ -W -D cn=Boss,dc=example,dc=com -b dc=example,dc=com uid=testuser homeDirectory ldap_start_tls: Connect error (-11) additional info: TLS error -8023:A PKCS #11 module returned CKR_DEVICE_ERROR, indicating that a problem has occurred with the token or slot. My google searches do not seem to provide any useful information. I am just looking for some hints as to what to look for in my configuration. I just don't know how to interpret this error message. I am sure it is trying to tell me something but I just don't know what. What is really strange is I have a second ldap server which replicates with this one. It works fine so I am pretty convinced the problem is not with the ldap configuration but rather something with the certificates and/or the setup. Thanks. -- Paul (ganci(a)nurdog.com) (303)257-5208

1 1

Release 7 1503
by Jerry Geis 01 Apr '15

01 Apr '15

Just updated to release 7 1503. CentOS team is awesome! I thought I read sometime back that the release was going to rebase to a newer gnome? Did that not happen? Is there a way to get release 7 to a later gnome version? Thanks! Looking forward to playing. Jerry

2 1

opendkim-2.9.0
by James B. Byrne 31 Mar '15

31 Mar '15

There was an update to opendkim 2.10.1 which I applied and now I am seeing this: warning: connect to Milter service inet:127.0.0.1:8891: Connection refused I tried to yum history rollback to 2.9.1 but that package has disappeared so I am evidently constrained to resolve this. Does anyone have any idea what has happened and why I might be getting that message? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 3

Hdd maximum size
by donais 31 Mar '15

31 Mar '15

Server is a Lenovo RV-340 E2420 build 70AB001VUX 8go Support for Sata-3 6gbps and Raid-5 Did someone can tell if it can handle 6tb hard drives? -- Michel Donais

4 3

Building a newer glibc RPM for CentOS 6 and installing into an alternate path
by Alfred von Campe 31 Mar '15

31 Mar '15

We have a third party shared library from a vendor that requires glib 2.15 or newer. We are using CentOS 6.6 which comes with glibc 2.12, and I know it can’t be replaced as it’s an integral part of the OS. However, is it possible to build a glib 2.15 RPM from source to be installed in /opt/centos (or somewhere else other than /usr/lib) so that I can link the one application that requires the third party shared library with this version of glib? If so, does anyone have instructions on how to build such an RPM, or better yet, has already build such an RPM? Thanks, Alfred

7 10

upstart CentOS vs upstart Ubuntu is there any difference between them?
by reynierpm＠gmail.com 31 Mar '15

31 Mar '15

I'm moving some server configurations from Ubuntu Server 12.04 to CentOS 6.6. Now I'm working on `/etc/init` script that should be handled by `upstart` at both OS as far as I know. The files on both server are the same and I mean the same at content level and also at path level and permissions level, is the exactly copy from Ubuntu to CentOS. I'm having some issues with upstart at CentOS since scripts doesn't start and I can't find why (the cause). This is the output from `initctl list` at Ubuntu server: # Ubuntu 12.04 root@qa:/etc/init# initctl list // rest of processes goes here pdoneVendorBroker start/running, process 854 repToolBroker start/running, process 3705 emailBroker start/running, process 3738 cmeBroker start/running, process 3760 messageBroker start/running, process 3727 shareEventHandler start/running, process 3686 edetailBroker start/running, process 3749 pdoneLoginProctor start/running, process 3716 All the processes has been started at OS boot, that's fine. This is the output from CentOS server: # CentOS 6.6 root@staging:/etc/init# initctl list // rest of processes goes here pdoneVendorBroker stop/waiting repToolBroker stop/waiting emailBroker stop/waiting cmeBroker stop/waiting messageBroker stop/waiting shareEventHandler stop/waiting edetailBroker stop/waiting pdoneLoginProctor stop/waiting None processes has been started after OS boot, and that's wrong. Why? What I'm missing here? Can any give me some advice? At CentOS I've tried also to start the process manually by running this: initctl start messageBroker And this is the output at console: messageBroker start/running, process 3587 But if I run the command `initctl list` I didn't see the process started: initctl list rc stop/waiting tty (/dev/tty3) start/running, process 2565 tty (/dev/tty2) start/running, process 2562 tty (/dev/tty1) start/running, process 2558 tty (/dev/tty6) start/running, process 2577 tty (/dev/tty5) start/running, process 2574 tty (/dev/tty4) start/running, process 2571 plymouth-shutdown stop/waiting control-alt-delete stop/waiting debug stop/waiting rcS-emergency stop/waiting kexec-disable stop/waiting pdoneVendorBroker stop/waiting quit-plymouth stop/waiting rcS stop/waiting prefdm stop/waiting repToolBroker stop/waiting init-system-dbus stop/waiting emailBroker stop/waiting splash-manager stop/waiting cmeBroker stop/waiting start-ttys stop/waiting messageBroker stop/waiting shareEventHandler stop/waiting edetailBroker stop/waiting pdoneLoginProctor stop/waiting rcS-sulogin stop/waiting serial stop/waiting This is the content for the file `/ etc/init/messageBroker.conf`: description "messageBroker" start on runlevel [234] stop on runlevel [0156] respawn exec php /usr/local/bin/messageBroker/messageBroker.php post-start script PID=`status messageBroker| egrep -oi '([0-9]+)$' | head -n1` echo $PID > /var/run/messageBroker.pid end script post-stop script rm -f /var/run/messageBroker.pid end script Why it's not starting? What is wrong?

1 0

heavy IO load when working with sparse files (centos 6.4)
by Ron E 31 Mar '15

31 Mar '15

Dear List, We have noticed a variety of reproducible conditions working with sparse files on multiple servers under load with CentOS 6.4. The short story is that processes that read / write sparse files with large "holes" can generate an IO storm. Oddly, this only happens with holes and not with the sections of the files that contain data. We have seen extremely high IO load for example copying a 40 or 80gb sparse file that only has a few gigs of data in it. Attempts to lower the io priority and cpu priority of these processes do not make any measurable difference. (ionice, nice) This has been observed with processes such as: cp rsync sha1sum The server does have to be under some load to reproduce the necessary conditions. The cases we have seen involve servers running 10-30 guests under kvm. Load is in acceptable norms when the processes are run, such as load avg 5-15 on a 24 core (12 core with HT enabled) server. We also verify before starting such a process that the spindle with the file we're working on is not being unduly hammered by another process. These servers have one hardware raid controller each (Dell H700 controller with write cache enabled) and multiple raid arrays (separate sets of physical spindles). Interestingly, the IO storm is not limited to the array / spindles where the sparse file resides but affects all IO on that server. We have looked extensively and not found any account of a similar issue. We have seen this on configurations that are 'plain vanilla' enough to think that this is not something specific to our environment. Wondering if anyone else has seen this and if any suggestions on gathering more data / troubleshooting. We wonder if we've found either a raid controller driver issue, an OS issue or some other such thing. What seems to point in this direction is that even with ionice -c3 which should prevent the process from using IO unless the storage is idle, an io storm which appears to saturate the entire raid bus on a given server can occur. Thanks in advance.

3 3

NTLM Authentication ISA Server
by Tim 31 Mar '15

31 Mar '15

Hello list, how can I get CentOS 7 to authenticate against a Microsoft ISA server for package installations after the OS is installed. In Debian/Ubuntu apt.conf just needs to be edited and it works. How to do so in CentOS? Regards Tim

4 6

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss March 2015