Discuss June 2015

discuss@lists.centos.org

157 participants
171 discussions

OT Advantage of running DNS server?
by Timothy Murphy 05 Jul '15

05 Jul '15

What is the advantage, if any, of running one's own DNS server? Surely the link between domain name and IP address must already have been established? -- Timothy Murphy gayleard /at/ eircom.net School of Mathematics, Trinity College, Dublin

7 6

gssproxy items...
by Erik Laxdal 30 Jun '15

30 Jun '15

Hi, I've been working on some systems trying to get kerberized nfsv4 and kerberized web services going on 7. Kerberized nfsv4 was working with 7.0, but with the 7.1 release it stopped working, the key difference between the two setups is that gssproxy wasn't being used with 7.0, but seems to be key with 7.1. The problem I am encountering with Kerberized NFSv4 is that the directory will mount okay, and I can see it's contents as root, but I encounter "Permission denied" errors when trying to access it as a regular user. 'klist -ce' returns valid results as the user (including a a line for the server spn that I was trying to access), and I am able to access Kerberized NFSv4 shares hosted on EL6 servers as the same user. Kerberized web services have been a recent thing to try in order to see if they would work with gssproxy - a colleague did get Kerberized web services going on 7.1 without using gssproxy. I followed the instructions at https://fedorahosted.org/gss-proxy/wiki/Apache, but still didn't have any success until I added the cred_store line mentioned in comment 6 of https://bugzilla.redhat.com/show_bug.cgi?id=1168962 as we are running with selinux enabled. The success was short-lived for once I started adding user/group checking it would succeed about 30% of the time as the user principal was being returned as elaxdal@REALMH\x86\xf7\x12\x01\x02\x02 instead of just elaxdal@REALM. Today I tried recompiling the 0.4.1-1 source rpm from Fedora 21's updates, installed it onto a 7.1 nfsv4/web server, at which point everything started to consistently work - NFSv4 shares and web services with user/group checking. So it appears that the problem I'm encountering has been addressed. I've also tried recompiling the 0.3.1-1 and 0.3.1-4 source rpms from Fedora 20 and 21, both of which show the same problems I see with the 7.1 version of gssproxy. Some additional background information, the Kerberos server is an AD server that is maintained by another group. The system keytab uses a user account based spn on the AD server, and a computer account based keytab for the system with aliases for host and http keytabs. Any thoughts/suggestions as I'd rather stay with the distribution's version of supplied packages? Thanks, Erik

2 2

CPAN issues
by James D. Parra 30 Jun '15

30 Jun '15

Hello List, Running CentOS Linux release 7.0.1406 (Core), and trying to update CPAN from version 1.98 to version 2.10, but it fails. <snip> t/97-process_setup_options.t .. ok t/97-return_values.t .......... 6/10 # Failed test 'blib/script/cpan -j t/97-lib_cpan1/CPAN/Config.pm Local::Prereq::Fails' # at t/97-return_values.t line 49. # got: '2' # expected: '1' # Failed test 'blib/script/cpan -j t/97-lib_cpan1/CPAN/Config.pm Local::Make::Fails' # at t/97-return_values.t line 49. # got: '2' # expected: '1' t/97-return_values.t .......... 8/10 # Failed test 'blib/script/cpan -j t/97-lib_cpan1/CPAN/Config.pm Local::Test::Fails' # at t/97-return_values.t line 49. # got: '2' # expected: '1' t/97-return_values.t .......... 9/10 # Failed test 'blib/script/cpan -j t/97-lib_cpan1/CPAN/Config.pm Local::Unsupported::OS' # at t/97-return_values.t line 49. # got: '2' # expected: '1' t/97-return_values.t .......... 10/10 # Failed test 'blib/script/cpan -j t/97-lib_cpan1/CPAN/Config.pm Local::Works::Fine' # at t/97-return_values.t line 49. # got: '2' # expected: '0' # Looks like you failed 5 tests of 10. t/97-return_values.t .......... Dubious, test returned 5 (wstat 1280, 0x500) Failed 5/10 subtests Test Summary Report ------------------- t/30shell.t (Wstat: 65280 Tests: 150 Failed: 0) Non-zero exit status: 255 Parse errors: Bad plan. You planned 223 tests but ran 150. t/41distribution.t (Wstat: 1024 Tests: 19 Failed: 4) Failed tests: 14, 16-17, 19 Non-zero exit status: 4 t/97-return_values.t (Wstat: 1280 Tests: 10 Failed: 5) Failed tests: 6-10 Non-zero exit status: 5 Files=30, Tests=595, 259 wallclock secs ( 0.27 usr 0.02 sys + 14.40 cusr 1.11 csys = 15.80 CPU) Result: FAIL Failed 3/30 test programs. 9/595 subtests failed. make: *** [test_dynamic] Error 5 ANDK/CPAN-2.10.tar.gz one dependency not OK (CPAN::Meta::Requirements); additionally test harness failed /usr/bin/make test -- NOT OK //hint// to see the cpan-testers results for installing this module, try: reports ANDK/CPAN-2.10.tar.gz Running make install make test had returned bad status, won't install without force Failed during this command: ANDK/CPAN-2.10.tar.gz : make_test NO one dependency not OK (CPAN::Meta::Requirements); additionally test harness failed <end> Any ideas how I can resolve this? Thank you, James

3 4

user 'not listed' on login screen
by CS DBA 30 Jun '15

30 Jun '15

All; I installed centOS 7 (KDE), I also created a user 'postgres' the postgres user does not show up as a user on the login screen. How can I make this user show up on the login screen? I've googled it with no luck Thanks in advance

5 4

Tar CentOS installation and transfer it to new server
by Mike 30 Jun '15

30 Jun '15

Current Installation: CentOS 7.1503 with SerNet Samba 4 ver. 4.1.17 configured as Active Directory Domain Controller. Current Installation: HP Workstation with dual Xeon quadcore cpu's and 4 x SATA hard drives NOT configured in RAID array. New Installation: CentOS 7.1503 minimal install New Installation: SuperMicro with single Xeon quadcore cpu and 4 x SATA hard drives configured in two pairs of RAID 1. The Current Install is about 3.5 GB's and has my Samba 4 setup all solid and working well. I want to know if it's possible to simply: - tar up the whole root partition - put it on a USB drive - boot the New server with a livecd - chroot into / partition - unpack the tar'ed root (/) from the USB drive into the New server root (/). Both installs used the automatic partitioning from anaconda, so /boot is on a separate partition. Each server has an initrd and kernel that works from /boot partition. Both CentOS installs are setup using the xfs filesystem on the root (/) partition. I saw someone do this successfully once but they left out certain directories like /srv , /tmp , and /var. But I'm not 100% certain which directories need to be left out of the tarball. Has anyone done this before? Do you know if it's doable? Thanks for reading.

4 7

Qemu 2.x on CentOS 7?
by Robert Fitzpatrick 30 Jun '15

30 Jun '15

Is there any way to get the latest Qemu to run on CentOS 7? I'm looking for a way to create backup snapshots, but the current install says: [root@vhost1 ~]# virsh snapshot-create-as myvm snapshot1 "snapshot1 description" error: Operation not supported: live disk snapshot not supported with this QEMU binary -- Robert

2 1

CentOS 6 gcc is a bit old
by Michael Hennebry 30 Jun '15

30 Jun '15

gcc (GCC) 4.4.7 20120313 (Red Hat 4.4.7-11) is a bit old. There have been major changes since then. I'd like a newer version. If I have to, I expect that I can install from source. I'd rather not. Is there a CentOS 6-compatible repository from which I can get a newer version? Does a standard CentOS 7 repository have a newer version? Does a CentOS 7-compatible repository have a newer version? It's my understanding that to compile from source, I will need to keep the gcc I have. Otherwise I would have nothing to compile the source. I expect that providing the right options will let old and new co-exist. Is ensuring that I get the right gcc when I type "gcc" just a matter of having the right search path for gcc? Will I need to do anything interesting to ensure that the resulting executables run using the right libraries? I've installed from source before, but never to replace an existing compiler. My concern is that if I louse things up, the mess could be very hard to fix. -- Michael hennebry(a)web.cs.ndsu.NoDak.edu "SCSI is NOT magic. There are *fundamental technical reasons* why it is necessary to sacrifice a young goat to your SCSI chain now and then." -- John Woods

5 5

Re: [CentOS] Using a CentOS 6 Machine as a gateway/router/home server
by James B. Byrne 30 Jun '15

30 Jun '15

On Mon, June 29, 2015 02:14, Sorin Srbu wrote: OS 6? > > Please note: I'm not criticizing, just curious about the argument > behind using a regular OS to do firewall-stuff. > Maintenance. A consistent set of expectations does wonders for debugging odd-ball occurrences. Why learn the idiosyncrasies of two distros when one suffices? Just start with a minimal CentOS install on your router/gateway and add only the packages that you know that you need. Any critical omission will evidence itself in short order and can be added then; or the source of the need removed as circumstance warrants. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

7 8

CentOS-announce Digest, Vol 124, Issue 17
by centos-announce-request＠centos.org 30 Jun '15

30 Jun '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2015:1192 CentOS 7 openssl BugFix Update (Johnny Hughes) 2. CESA-2015:1194 Moderate CentOS 6 postgresql Security Update (Johnny Hughes) 3. CESA-2015:1193 Moderate CentOS 7 xerces-c Security Update (Johnny Hughes) 4. CESA-2015:1194 Moderate CentOS 7 postgresql Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 29 Jun 2015 13:10:10 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:1192 CentOS 7 openssl BugFix Update Message-ID: <20150629131010.GA18119(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:1192 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-1192.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: e6c2ef7c0b89fcfacb8e64488d2802271ab082921512860385fb1c0aae46684a openssl-1.0.1e-42.el7.9.x86_64.rpm b96a444096055df0ceec150eb107130a814060558ddaa4ecbec1abcfc0acc99e openssl-devel-1.0.1e-42.el7.9.i686.rpm 018b50c925ec2feba99dd5b06e651327da4258b7a0c0a4bb4e551c6f0710ceb0 openssl-devel-1.0.1e-42.el7.9.x86_64.rpm 7a2778580ee3d50584b8329e859d4be55d93ff749b088f50df2bb9a6879eb817 openssl-libs-1.0.1e-42.el7.9.i686.rpm b4dcd15094fc1a2f4e9742169d66e5de06a6751de26f2baa13282cca64954e3d openssl-libs-1.0.1e-42.el7.9.x86_64.rpm 13600af8063a7f56cb8686a5261c1c8cf42335a2a5f41ada1038d3e55ef78b08 openssl-perl-1.0.1e-42.el7.9.x86_64.rpm 3c62e5f755a5db436f16c15af1236b8c80565b69b00d31f60bb4b686f36270c7 openssl-static-1.0.1e-42.el7.9.i686.rpm 0aae83ae75cbcb9bb61c5c85fe5a06b35a8fc96d5fd35ce2b845d647c243b160 openssl-static-1.0.1e-42.el7.9.x86_64.rpm Source: ad13e94dd6fb298aef32f250d95ea9f27a2de4a62d2f1e9f3e3ecc7c8e034c84 openssl-1.0.1e-42.el7.9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Mon, 29 Jun 2015 16:03:44 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1194 Moderate CentOS 6 postgresql Security Update Message-ID: <20150629160344.GA21622(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1194 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1194.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 38011c1a69aac2d06e4309c0fa4cf17d8fa3f6393d9b99116365d277bf9df8a4 postgresql-8.4.20-3.el6_6.i686.rpm 75b8c97fbcc379ff002cc3ec6a9e65c3163966add47d9cc51a09ee8526ba31c7 postgresql-contrib-8.4.20-3.el6_6.i686.rpm 392b1251aab447568fbb76fd8c4997ff331246061db197b0cd13574a18cd4415 postgresql-devel-8.4.20-3.el6_6.i686.rpm dea73d52e9d5185a49ab859220cdecca739c8c7d85f7a51fba49d6dd7bfaa012 postgresql-docs-8.4.20-3.el6_6.i686.rpm 292276c6e567d46ef194cdd9fff8cb0fb11b7e924d418ad75cc3be1555634aeb postgresql-libs-8.4.20-3.el6_6.i686.rpm e570c1313bfe0e7502299d0af4696feb56f7d8847165896913e2baa3a198ea94 postgresql-plperl-8.4.20-3.el6_6.i686.rpm ae287231ae774f9aba82085551e38447eb4a611e2af5cf16887d666de6de0581 postgresql-plpython-8.4.20-3.el6_6.i686.rpm dd785db4e8c9f57a86907ac5abab40af293019afbfc731d9801083eaa3ad64ff postgresql-pltcl-8.4.20-3.el6_6.i686.rpm 110719e3176139a68fb8a6867b6183feee528b1a56fb45bc23ce8b4e5a3eb072 postgresql-server-8.4.20-3.el6_6.i686.rpm d02ede44f9cbd547693b9de880f3aed6583f390c9f478a53df6e25430804dd47 postgresql-test-8.4.20-3.el6_6.i686.rpm x86_64: 38011c1a69aac2d06e4309c0fa4cf17d8fa3f6393d9b99116365d277bf9df8a4 postgresql-8.4.20-3.el6_6.i686.rpm 449c2c72585adb94d9fbfcae049e2bcd3ef329b273c36e55c5a1f6a9f3da1e94 postgresql-8.4.20-3.el6_6.x86_64.rpm 19ee23df9fd054b6b748b6a91bd1d07a24e14e56eab91c8587e703daaea544ff postgresql-contrib-8.4.20-3.el6_6.x86_64.rpm 392b1251aab447568fbb76fd8c4997ff331246061db197b0cd13574a18cd4415 postgresql-devel-8.4.20-3.el6_6.i686.rpm 5afb7ab33f153c23ec0414273d02e1d0c801bd90878069dbd294873fbcbc5c16 postgresql-devel-8.4.20-3.el6_6.x86_64.rpm fff82d8f6ed8594ab0a2ac856cf555175520f03eb02b1227fe46810cf68df140 postgresql-docs-8.4.20-3.el6_6.x86_64.rpm 292276c6e567d46ef194cdd9fff8cb0fb11b7e924d418ad75cc3be1555634aeb postgresql-libs-8.4.20-3.el6_6.i686.rpm 79cbf9ab217cfbea6ac19785803e9ef5ed6e8f47a07f8c058ba7da2ae1713913 postgresql-libs-8.4.20-3.el6_6.x86_64.rpm 49b8fc43b5b0fb238135aa8c70dfddd6f8ef712b8e5051ae64543493ef3bf17b postgresql-plperl-8.4.20-3.el6_6.x86_64.rpm e3f840e38086a8df5bc209d997a4d45325abf357e35f5430ccfe48b1087e6522 postgresql-plpython-8.4.20-3.el6_6.x86_64.rpm 6b582939ebfd4f1ae95aa793356a1bfa55bd3fbc4173d8e272b1cb17d1238d20 postgresql-pltcl-8.4.20-3.el6_6.x86_64.rpm 814b84b3007ffcfe92f5f94903d04b185fb5ae263a9f9ec566397715711c737e postgresql-server-8.4.20-3.el6_6.x86_64.rpm e048ea27aa7f338a14c2dfdb7294f41d7dfe816124bae17916b4d59bd5128122 postgresql-test-8.4.20-3.el6_6.x86_64.rpm Source: 75d6b751e43de5008752eb631fb44aeedcec26f8acc61783cefd033451f489c7 postgresql-8.4.20-3.el6_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Mon, 29 Jun 2015 16:37:38 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1193 Moderate CentOS 7 xerces-c Security Update Message-ID: <20150629163738.GA39666(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1193 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1193.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: afe38236b7958205c190007679893aa52681defb42cec67e07a40222c0344ffd xerces-c-3.1.1-7.el7_1.i686.rpm 2978ee1ec27642b6233228ba6bb21dff81609aeded24f66ab348a5d2caf2bfb0 xerces-c-3.1.1-7.el7_1.x86_64.rpm cb5dfd0d635477caeab441417dc1310301661a5b366d845c060104824221f4a8 xerces-c-devel-3.1.1-7.el7_1.i686.rpm 48d763429c615c60c5153aa8b1e22149f056948f99cd5291dcbadc602fe34c7e xerces-c-devel-3.1.1-7.el7_1.x86_64.rpm db2116d626c0c82271a06e14ec8b067fdba3f12594d5d543092f7908e386b800 xerces-c-doc-3.1.1-7.el7_1.noarch.rpm Source: 69ab23c4a875ed4cd10a77b8e310032108569d047d6f323e7573ad146e8798c1 xerces-c-3.1.1-7.el7_1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Mon, 29 Jun 2015 16:37:58 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1194 Moderate CentOS 7 postgresql Security Update Message-ID: <20150629163758.GA39784(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1194 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1194.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 68f75a380fb35cbf47d27a27884116cea350e1d8fbf2f566bebb8b58d34bf4a1 postgresql-9.2.13-1.el7_1.i686.rpm 9e301e4212c06695f095b2bee281baf3435608cd63ad70be94e181de341d81c5 postgresql-9.2.13-1.el7_1.x86_64.rpm 981c31541f67bd4b110df1371f9ca313698a97810c38274b0f924459079e7e39 postgresql-contrib-9.2.13-1.el7_1.x86_64.rpm d9e577eb24b8d45803e7c33b320f0880879444c057928dc04a091c4af1cda292 postgresql-devel-9.2.13-1.el7_1.i686.rpm c6dc3e9f24d0b3fb1405506854e7815bd72c9b49c0e5df8498ce558c0001efc8 postgresql-devel-9.2.13-1.el7_1.x86_64.rpm 7995e777b8133a67d72a1b225560ce0f63d41bc064a469dce6b455dbe1a308c6 postgresql-docs-9.2.13-1.el7_1.x86_64.rpm 371b3f5c4adb28366fcce85191dc70455ec7383c1097b0202c4e761743dbea0e postgresql-libs-9.2.13-1.el7_1.i686.rpm eabcc29979df894bc6196447e440e11a5d85f0bac616e1250b6f8930ebc74300 postgresql-libs-9.2.13-1.el7_1.x86_64.rpm f539cb95191a69dd107feaa183ff31cc5f4159b8bad0262fd5449187716f63b7 postgresql-plperl-9.2.13-1.el7_1.x86_64.rpm 7373870c1833da0ca1671ed0cd7c311175967d397b59c2c1ba20ad8e39b9c6ec postgresql-plpython-9.2.13-1.el7_1.x86_64.rpm d036fc72f2c89a661c82cbab8023df4d16704f8a375ecec00cda512b0d2a930b postgresql-pltcl-9.2.13-1.el7_1.x86_64.rpm 392ca0e1accf6883e2b36f39cc9b203e991e48a340d8895b24f02118948c6cd0 postgresql-server-9.2.13-1.el7_1.x86_64.rpm c698baa54a3062dfd6e860c138cf2eef4aa87eea1ea8cbe659f4fe816c9e0a27 postgresql-test-9.2.13-1.el7_1.x86_64.rpm b4d4f0ac450076857682566e4b19dbb0a5362052de181854e13a3d9ad5a59e9f postgresql-upgrade-9.2.13-1.el7_1.x86_64.rpm Source: efa4a7c335d023956ac1d6adfd067921c46ea7bb6aecc15fe04634590f38ef28 postgresql-9.2.13-1.el7_1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 124, Issue 17 ************************************************

1 0

set up login.defs but password still not expire?
by mcclnx mcc 30 Jun '15

30 Jun '15

We have Centos 5.8 on LInux server.I setup /etc/login.defs following: PASS_MAX_DAYS 3 PASS_MIN_DAYS 0 PASS_MIN_LEN 8 PASS_WARN_AGE 1 after that I chack user password policy and it show:# chage -l user1 Last password change : Jun 29, 2015 Password expires : never Password inactive : never Account expires : never Minimum number of days between password change : 0 Maximum number of days between password change : 99999 Number of days of warning before password expires : 7 anyone know why? I did reboot server still same.

3 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss June 2015