Discuss May 2015

discuss@lists.centos.org

140 participants
131 discussions

Could not complete SSL handshake to Amazon EC2 host
by Tim Dunphy 04 May '15

04 May '15

Hello, I am trying to monitor a host in the Amazon EC2 cloud. Yet when I try to check NRPE from the monitoring host I am getting an SSL handshake error: [root@monitor1:~] #/usr/local/nagios/libexec/check_nrpe -H ops.jokefire.com CHECK_NRPE: Error - Could not complete SSL handshake. And if I telnet into the host on port 5666 to see if the FW port is open, the connection closes right away: [root@monitor1:~] #telnet ops.somewhere.com 5666 Trying 54.225.218.125... Connected to ops.somewhere.com. Escape character is '^]'. Connection closed by foreign host. You can see there it connects, but then it closes immediately after the connection. I have NRPE running on the host I want to monitor: [root@ops:~] #lsof -i :5666 COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME xinetd 1434 root 5u IPv4 4063 TCP *:nrpe (LISTEN) And I have the IP of my nagios server listed in the xinetd conf file: [root@ops:~] #cat /etc/xinetd.d/nrpe # default: on # description: NRPE (Nagios Remote Plugin Executor) service nrpe { flags = REUSE socket_type = stream port = 5666 wait = no user = nagios group = nagios server = /usr/local/nagios/bin/nrpe server_args = -c /usr/local/nagios/etc/nrpe.cfg --inetd log_on_failure += USERID disable = no only_from = 127.0.0.1 xx.xx.xx.xx # <- representing my real nagios server IP } And I have my default security group for that host open on port 5666 to the world for this experiment. I plan on locking that down again to the single IP of my monitoring host once I get this resolved. Does anyone have any suggestions on how I can get that problem solved? Thanks, Tim -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

6 18

can't disable tcp6 on centos 7
by Tim Dunphy 04 May '15

04 May '15

hey all, I tried disabling tcp v6 on a C7 box this way: [root@puppet:~] #cat /etc/sysctl.conf # System default settings live in /usr/lib/sysctl.d/00-system.conf. # To override those settings, enter new settings here, or in an /etc/sysctl.d/<name>.conf file # # For more information, see sysctl.conf(5) and sysctl.d(5). net.ipv6.conf.all.disable_ipv6 = 1 net.ipv6.conf.default.disable_ipv6 = 1 Then going: [root@puppet:~] #sysctl -p net.ipv6.conf.all.disable_ipv6 = 1 net.ipv6.conf.default.disable_ipv6 = 1 Then I restarted xinetd for good measure: [root@puppet:~] #systemctl restart xinetd [root@puppet:~] # Because I'm trying to hit nrpe on this host. Yet, xinetd/nrpe still seems to be listeing on TCP v6!! [root@puppet:~] #netstat -tulpn | grep -i listen | grep xinetd tcp6 0 0 :::5666 :::* LISTEN 2915/xinetd This is a CentOS 7.1 box: [root@puppet:~] #cat /etc/redhat-release CentOS Linux release 7.1.1503 (Core) What am I doing wrong? I need to be able to disable tcpv6 completely! Thanks Tim -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

7 12

VPN connection before login
by Tim 04 May '15

04 May '15

Hi all, is there a possibility to connect to a VPN manually before login on CentOS desktop (Gnome). I know of a similar functionality in Windows. Is there a tutorial or something? Thank you Tim

6 8

Kvm + libvirt + virt-manager
by Alessandro Baggi 04 May '15

04 May '15

Hi list, I have updated C7 to 7.1 and get some issue (I don't know if problems depend from upgrade). My first problem is on virt-manager that crash after some time. From system messages I get that virt-manager is crashed with signal sigsegv and this problem is related to python (python get sigsegv). Anyone get similar behaviour after upgrade? Another problem, I can't say if it showed before/after upgrade, is related to libvirt when I shutdown my system. On my host I have different vm runned on KVM, where only 2 have autostart enabled. When shutting down the system I get from the console an error like this: Suspending test1: Done Suspending test2: ... error: Failed to save domain $someid state error: internal error: unable to execute QEMU command 'migrate': State blocked by non-migratable device '0000:00:04.8/ich9_ahci' Vm test2 has a disk attached as raw device and not as image file. This message, with same error, is showed also for 2 other vm with autostart disabled and disk on qcow2 images, but only when them are online during shutdown. When system starts, all vms are running without problem. I can't figure out with this error... Why libvirt-guest.sh run migrate command when I shutdown the system? Hope in help. Thanks in advance

3 2

Re: [CentOS] Could not complete SSL handshake to Amazon EC2 host
by Tim Dunphy 04 May '15

04 May '15

> > Not just /var/log/messages. Doesn't nrpe have a log file? Maybe even > secure. Hmmm I don't find any log specific to nrpe. In other words I don't see /var/log/nrpe.log or whatever. :) And when I tail -f /var/log/secure or /var/log/messages I don't see any entries turning up in them when I hit the client with check_nrpe. I was checking the logs on the client itself. > > >> Also nrpe needs to be told from where connections are allowed whether > >> running under an inetd or self-daemonized. > > > >Yep! I've set the only_from to have only the loopback address and the IP > >for the monitoring host in /etc/xinetd.d/npre. > > Not the xinetd config, the nrpe config (too). Hmmmm. but the nrpe.confg file is ignored in the case of allowed hosts. >From the nrpe config: # NOTE: This option is ignored if NRPE is running under either inetd or xinetd allowed_hosts=127.0.0.1 Thanks for the input tho, I genuinely appreciate it! On Sat, May 2, 2015 at 4:05 PM, Mark Milhollan <mlm(a)pixelgate.net> wrote: > On Sat, 2 May 2015, Tim Dunphy wrote: > > >>>It's only when checking from the monitoring host that nrpe fails: > >>Check /var/log/messages to see if xinetd says anything. > > > >I tailed /var/log/messages while hitting the client with check_nrpe from > >the monitoring host. However, that didn't cause an entry in the messages > >log. > > Not just /var/log/messages. Doesn't nrpe have a log file? Maybe even > secure. > > >> Also nrpe needs to be told from where connections are allowed whether > >> running under an inetd or self-daemonized. > > > >Yep! I've set the only_from to have only the loopback address and the IP > >for the monitoring host in /etc/xinetd.d/npre. > > Not the xinetd config, the nrpe config (too). > > > /mark > -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

3 2

Re: [CentOS] Could not complete SSL handshake to Amazon EC2 host
by Tim Dunphy 02 May '15

02 May '15

> > >And I made sure the local firewall was stopped, because I am blocking > ports > >with the security groups instead. > As an aside, I wouldn't do this unless running in a VPC as there are > other hosts in the general cloud and many are malicious. Hmmm... you make an excellent point! I picked up this habit from an AWS shop I used to work at. But what you just said will make me reconsider! > > >It's only when checking from the monitoring host that nrpe fails: > Check /var/log/messages to see if xinetd says anything. I tailed /var/log/messages while hitting the client with check_nrpe from the monitoring host. However, that didn't cause an entry in the messages log. > Also nrpe needs > to be told from where connections are allowed whether running under an > inetd or self-daemonized. Yep! I've set the only_from to have only the loopback address and the IP for the monitoring host in /etc/xinetd.d/npre. > > Also check the NRPE reviews on exchange.nagios.org, where the issue is > discussed. Cool! Thanks. I'll check it out, and see if I can find anything useful. I appreciate the input! Also I really appreciate the ongoing dialog with the community on this issue. I'm grasping at straws at this point. And all the attempts at help have been really great! I hope we can still get to the bottom of this! Tim On Sat, May 2, 2015 at 11:45 AM, Mark Milhollan <mlm(a)pixelgate.net> wrote: > On Fri, 1 May 2015, Tim Dunphy wrote: > > >And I made sure the local firewall was stopped, because I am blocking > ports > >with the security groups instead. > > As an aside, I wouldn't do this unless running in a VPC as there are > other hosts in the general cloud and many are malicious. > > >It's only when checking from the monitoring host that nrpe fails: > > Check /var/log/messages to see if xinetd says anything. Also nrpe needs > to be told from where connections are allowed whether running under an > inetd or self-daemonized. > > Also check the NRPE reviews on exchange.nagios.org, where the issue is > discussed. > > > /mark > -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

1 0

Re: [CentOS] Folding At Home OT
by Mark LaPierre 02 May '15

02 May '15

On 04/22/15 21:05, Mark LaPierre wrote: > Can someone recommend a good video card to use with CentOS 6.6 that has > a GPU, or two, or more, that will work with the Folding At Home project. > > I built a killer machine primarily for contributing to the FAH effort > but the video card, NVIDIA Corporation G94 [GeForce 9600 GT], I had on > hand is not getting any assignments. I'm using the proprietary NVIDIA > driver. I've got a pcie 16X socket to plug it into. > The underwelming response to my question leaves me wondering: Am I to gather that there are no CentOS FAH users here? or Am I to understand that none of the CentOS FAH users have a GPU that works with FAH? -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ ****

4 5

rsync backup to fileserver - mystery
by Frank Cox 02 May '15

02 May '15

I have an Intel SS4000E fileserver that I've been using for several years to backup my home directory to. I have a daily cron job that runs the following command: rsync -av --delete /home/frankcox/ /mnt/fileserver/backup I have a directory named misc/sheet-music/classical. About a week ago I created a new subdirectory there, /home/frankcox/misc/sheet-music-classical/Russian\ and\ Eastern\ European/ Notice the spaces in the subdirectory name; I don't know if that's relevant or not. I store a number of bzip-ed pdf files in that subdirectory, like this: BARTOKA.pdf.bz2, BARTOKB.pdf.bz2 and so on. Now for the mystery. The rsync command above gets me a report in my email from cron telling me what files were changed or deleted since the last backup run. And ever since I created that misc/sheet-music-classical/Russian\ and\ Eastern\ European subdirectory, it appears that the files in that subdirectory are getting copied to the fileserver again every day, since they are all listed in the email report that I receive. diff -r --brief /home/frankcox/misc/sheet-music-classical/Russian\ and\ Eastern\ European/ /mnt/fileserver/backup/misc/misc/sheet-music-classical/Russian\ and\ Eastern\ European/ That command gives me no output, so the contents of that subdirectory appear to match on both machines. So why is that subdirectory getting copied again every day when it hasn't changed? -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

4 5

eno1 and eth0 on centos 7.1
by Jerry Geis 01 May '15

01 May '15

I installed 7.1 with the command line values biosdevname=0 net.ifnames=0 thinking this would result in ifcfg-eth0 being the file to use... The system still created an ifcfg-eno1 file and that was what is being used for network config information. I remove the ifcfg-eno1 and rebooted - got no network. I then copied back the ifcfg-eth0 to ifcfg-en01 and changed the device name in the file and rebooted and back to the correct network. How can I get just the old behaviour of ifcfg-eth0 ? Thanks, Jerry

2 1

Centos 7.1
by Jerry Geis 01 May '15

01 May '15

Still new to 7.1... I noticed today that when I did a cp command on the console and it asked me to overrite (as it should) the file name had a lower case a with a ^ above the a. Never ran across that before. What might I have not configured? Thanks, Jerry

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss May 2015