Discuss July 2015

discuss@lists.centos.org

116 participants
116 discussions

CentOS-announce Digest, Vol 125, Issue 5
by centos-announce-request＠centos.org 15 Jul '15

15 Jul '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2015:1222 CentOS 6 dracut BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 14 Jul 2015 12:17:19 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:1222 CentOS 6 dracut BugFix Update Message-ID: <20150714121719.GA59733(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:1222 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-1222.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 8dc75ad1b4ce63d4d8d42fc791f54703fffb59e2eae6970bb576897ded5de370 dracut-004-356.el6_6.3.noarch.rpm 5df19b031cbd618cd9fab321a053b771271625ba5a267433e8ee8d25b6510e4f dracut-caps-004-356.el6_6.3.noarch.rpm 8ea7b720b3a5fe5c9e0df940506d7dab7a1cd4c6800100ae1ac852e3e6d30a5b dracut-fips-004-356.el6_6.3.noarch.rpm 6ba71308b46cde9d653ed7dd933b0e8a4b4d70cb8f368f4d6755555c52ec528e dracut-fips-aesni-004-356.el6_6.3.noarch.rpm fbd763e2e444d0feb615ddc2bb253a5a992bfa58c2a7b9807abdb17ada951f99 dracut-generic-004-356.el6_6.3.noarch.rpm 88b454575602d2991391c3edba2c308224307e67dea01c3e630257f7ea8137ab dracut-kernel-004-356.el6_6.3.noarch.rpm e575e9550930005c20b879480ca8ece2f885211d11703c1f313307f983b41edd dracut-network-004-356.el6_6.3.noarch.rpm aef9250752bfcee0493bcc8295b5b0db16f38b1076d12043c9e48455b6a900be dracut-tools-004-356.el6_6.3.noarch.rpm x86_64: 8dc75ad1b4ce63d4d8d42fc791f54703fffb59e2eae6970bb576897ded5de370 dracut-004-356.el6_6.3.noarch.rpm 5df19b031cbd618cd9fab321a053b771271625ba5a267433e8ee8d25b6510e4f dracut-caps-004-356.el6_6.3.noarch.rpm 8ea7b720b3a5fe5c9e0df940506d7dab7a1cd4c6800100ae1ac852e3e6d30a5b dracut-fips-004-356.el6_6.3.noarch.rpm 6ba71308b46cde9d653ed7dd933b0e8a4b4d70cb8f368f4d6755555c52ec528e dracut-fips-aesni-004-356.el6_6.3.noarch.rpm fbd763e2e444d0feb615ddc2bb253a5a992bfa58c2a7b9807abdb17ada951f99 dracut-generic-004-356.el6_6.3.noarch.rpm 88b454575602d2991391c3edba2c308224307e67dea01c3e630257f7ea8137ab dracut-kernel-004-356.el6_6.3.noarch.rpm e575e9550930005c20b879480ca8ece2f885211d11703c1f313307f983b41edd dracut-network-004-356.el6_6.3.noarch.rpm aef9250752bfcee0493bcc8295b5b0db16f38b1076d12043c9e48455b6a900be dracut-tools-004-356.el6_6.3.noarch.rpm Source: c6c08bcbd66cb00545749e3d57a18b31a39225c047e84bf443d85a7584e32ad2 dracut-004-356.el6_6.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 125, Issue 5 ***********************************************

1 0

CentOS 7.1 doesn't seem to have a functional default pdf reader installed (interesting)
by Kenneth Wolcott 15 Jul '15

15 Jul '15

Hi; This is the first time that I've installed CentOS 7.1 with a GUI (I've just used a CLI previously). I'd like to read a pdf file and I don't see any pdf reader applications installed by default. This seems unusual to me. So I see that gs is installed, but it doesn't really work very well for me as I can't seem to scroll to the next page. So what pdf reader application should I install (preferably open source) that will install itself to the menu along with Shotwell? It looks like Gnome desktop. Thanks, Ken Wolcott

3 5

Lenovo T420 internal microphone not working
by Tim 14 Jul '15

14 Jul '15

Hello, I have CentOS 7.1 installed on my Lenovo T420 Notebook. Now I will start to have some online meetings for a software project. In Bios the I/O-settings for camera and microphone are enabled. Camera is working (tested with cheese). In the audio settings of Gnome perferences I see an internal microphone which doesn't produce any input. The microphone is also not disabled by the key on the keyboard. Where can I take a look at? Thank you in advance Tim

2 2

OT, hardware: HP smart array drive issue
by m.roth＠5-cent.us 14 Jul '15

14 Jul '15

Hi. Anyone working with these things? I've got a drive in "predictive failure" on in a RAID5. Now here's the thing: there was an issue yesterday when I got in, and I wound up power cycling the RAID; first boot of attached server had issues, and said the controller had a failure, and a drive had failed, and wouldn't continue booting; when I gave it the three-finger salute, this time on the way up, during POST, it noted the controller issue... but the thing came up, looking like it did a couple of days ago. Trying to prevent this from happening again, I've decided to replace the drive that's in predictive failure. The array has a hot spare. I tried to remove, using hpacucli, it refuses "operation not permitted", and there doesn't *seem* to be a "mark as failed" command. *Do* I just yank the drive? mark

2 1

ssh failed only with nfs home directory
by Tim Dunphy 14 Jul '15

14 Jul '15

Hey all, Having a weird ssh issue I'd like some opinions on. If I have my home directory mounted on the NFS server itself, I get permission denied when I try to ssh into it. The correct permissions and ownership are on the home directory, ssh directory and the authorized_users file. Here's what a verbose ssh session looks like: #ssh -v bluethundr(a)nfs1.example.com OpenSSH_6.2p2, OSSLShim 0.9.8r 8 Dec 2011 debug1: Reading configuration data /etc/ssh_config debug1: /etc/ssh_config line 20: Applying options for * debug1: Connecting to nfs1.example.com [162.243.109.94] port 22. debug1: Connection established. debug1: identity file /Users/TimothyDunphy/.ssh/id_rsa type 1 debug1: identity file /Users/TimothyDunphy/.ssh/id_rsa-cert type -1 debug1: identity file /Users/TimothyDunphy/.ssh/id_dsa type -1 debug1: identity file /Users/TimothyDunphy/.ssh/id_dsa-cert type -1 debug1: Enabling compatibility mode for protocol 2.0 debug1: Local version string SSH-2.0-OpenSSH_6.2 debug1: Remote protocol version 2.0, remote software version OpenSSH_6.6.1 debug1: match: OpenSSH_6.6.1 pat OpenSSH* debug1: SSH2_MSG_KEXINIT sent debug1: SSH2_MSG_KEXINIT received debug1: kex: server->client aes128-ctr hmac-md5-etm(a)openssh.com none debug1: kex: client->server aes128-ctr hmac-md5-etm(a)openssh.com none debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP debug1: SSH2_MSG_KEX_DH_GEX_INIT sent debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY debug1: Server host key: RSA f7:06:1a:56:2f:0e:1b:bd:7b:e6:de:8c:9a:88:ea:09 debug1: Host 'nfs1.example.com' is known and matches the RSA host key. debug1: Found key in /Users/TimothyDunphy/.ssh/known_hosts:19 debug1: ssh_rsa_verify: signature correct debug1: SSH2_MSG_NEWKEYS sent debug1: expecting SSH2_MSG_NEWKEYS debug1: SSH2_MSG_NEWKEYS received debug1: Roaming not allowed by server debug1: SSH2_MSG_SERVICE_REQUEST sent debug1: SSH2_MSG_SERVICE_ACCEPT received debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic debug1: Next authentication method: publickey debug1: Offering RSA public key: /Users/TimothyDunphy/.ssh/id_rsa debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic debug1: Trying private key: /Users/TimothyDunphy/.ssh/id_dsa debug1: No more authentication methods to try. Permission denied (publickey,gssapi-keyex,gssapi-with-mic). And I see this message in the secure log: Jul 13 23:09:28 nfsdb1 sshd[15305]: Connection closed by xx.xx.xx.xx [preauth] The IP that I xxx'd out is my client IP Here's the permissions and ownership on the directories and files: #ls -ld /home/bluethundr/ /home/bluethundr/.ssh /home/bluethundr/.ssh/authorized_keys drwxr-x---. 37 bluethundr bluethundr 4096 Jul 13 20:57 /home/bluethundr/ drw-------. 3 bluethundr bluethundr 4096 Jun 15 17:22 /home/bluethundr/.ssh -rw-------. 1 bluethundr bluethundr 2614 Jun 15 17:22 /home/bluethundr/.ssh/authorized_keys SELinux is set to permissve: #getenforce Permissive If I unmount the nfs home directory I am able to log in: [root@nfs1:~] #umount -l /home [root@nfs1:~] # #ssh bluethundr(a)nfs1.example.com Last login: Mon Jul 13 23:08:35 2015 from ool-2f126f64.dyn.optonline.net -bash-4.2$ The permissions on the non-nfs home directory are the same as the NFS mounted home directory: #ls -ld /home/bluethundr/ /home/bluethundr/.ssh /home/bluethundr/.ssh/authorized_keys drwxr-x---. 37 bluethundr bluethundr 4096 Jul 13 20:57 /home/bluethundr/ drw-------. 3 bluethundr bluethundr 4096 Jun 15 17:22 /home/bluethundr/.ssh -rw-------. 1 bluethundr bluethundr 2614 Jun 15 17:22 /home/bluethundr/.ssh/authorized_keys As soon as I mount it back, the issue returns and I am unable to ssh in: #ssh bluethundr(a)nfs1.example.com Permission denied (publickey,gssapi-keyex,gssapi-with-mic). I'd really appreciate any ideas you guys may have as to why this is happening!! Thanks, Tim -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

3 2

Bond & Team: RX dropped packets
by Marc Caubet 13 Jul '15

13 Jul '15

Hi all, we are testing CentOS 7 in order to migrate from Scientific Linux 6 / CentOS 6 and we are facing an issue with the network. Trying to configure network with teaming in activebackup mode or also with bonding in mode=1 (active backup as well) we see many RX dropped packets in the bond0 interface (around 10% of the total), 100% RX drops in the backup interface and 0% in the active interface. Current kernel is 3.10.0-229.7.2.el7.x86_64, and I tried with included ixgbe driver (4.0.1) and with by compiling the newest version (ixgbe-4.1.1-1.x86_64), results are the same. We use tagged VLANs, but switch has configured a correct VLAN, a we saw no problems when this machine was running Scientific Linux 6 (CentOS 6-like system). Any ideas? [root@dc106 ~]# cat /proc/net/bonding/bond0 Ethernet Channel Bonding Driver: v3.7.1 (April 27, 2011) Bonding Mode: fault-tolerance (active-backup) Primary Slave: enp6s0 (primary_reselect always) Currently Active Slave: enp6s0 MII Status: up MII Polling Interval (ms): 100 Up Delay (ms): 600000 Down Delay (ms): 0 Slave Interface: enp6s0 MII Status: up Speed: 10000 Mbps Duplex: full Link Failure Count: 0 Permanent HW addr: 00:1b:21:91:aa:c5 Slave queue ID: 0 Slave Interface: enp7s0f0 MII Status: up Speed: 1000 Mbps Duplex: full Link Failure Count: 0 Permanent HW addr: 00:25:90:1a:2d:aa Slave queue ID: 0 [root@dc106 ~]# cat /etc/sysconfig/network-scripts/ifcfg-bond0 DEVICE=bond0 IPADDR=193.109.172.106 NETMASK=255.255.255.128 USERCTL=no BOOTPROTO=none ONBOOT=yes MTU=9000 IPV6ADDR=2001:67c:1148:200::106 TYPE=Bond BONDING_MASTER=yes NM_CONTROLLED=no BONDING_OPTS="options bonding mode=1 primary=enp6s0 miimon=100 updelay=600000" [root@dc106 ~]# cat /etc/sysconfig/network-scripts/ifcfg-enp7s0f0 # Network slave interface DEVICE=enp7s0f0 USERCTL=no ONBOOT=yes MASTER=bond0 SLAVE=yes BOOTPROTO=none HWADDR=00:25:90:1A:2D:AA NM_CONTROLLED=no [root@dc106 ~]# cat /etc/sysconfig/network-scripts/ifcfg-enp6s0 # Network slave interface DEVICE=enp6s0 USERCTL=no ONBOOT=yes MASTER=bond0 SLAVE=yes BOOTPROTO=none HWADDR=00:1B:21:91:AA:C5 NM_CONTROLLED=no [root@dc106 ~]# ifconfig enp6s0 enp6s0: flags=6211<UP,BROADCAST,RUNNING,SLAVE,MULTICAST> mtu 9000 ether 00:1b:21:91:aa:c5 txqueuelen 50000 (Ethernet) RX packets 19815269 bytes 1317959345 (1.2 GiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 126023402 bytes 1134827686804 (1.0 TiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 [root@dc106 ~]# ifconfig enp7s0f0 enp7s0f0: flags=6211<UP,BROADCAST,RUNNING,SLAVE,MULTICAST> mtu 9000 ether 00:1b:21:91:aa:c5 txqueuelen 50000 (Ethernet) RX packets 29436 bytes 1768642 (1.6 MiB) RX errors 0 dropped 29436 overruns 0 frame 0 TX packets 10 bytes 1275 (1.2 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 device memory 0xfafe0000-faffffff [root@dc106 ~]# ifconfig bond0 bond0: flags=5187<UP,BROADCAST,RUNNING,MASTER,MULTICAST> mtu 9000 inet 193.109.172.106 netmask 255.255.255.128 broadcast 193.109.172.127 ether 00:1b:21:91:aa:c5 txqueuelen 50000 (Ethernet) RX packets 19844789 bytes 1319735635 (1.2 GiB) RX errors 0 dropped 1960770 overruns 0 frame 0 TX packets 126023464 bytes 1134827699315 (1.0 TiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 Thanks a lot, -- Marc Caubet Serrabou PIC (Port d'Informació Científica) Campus UAB, Edificio D E-08193 Bellaterra, Barcelona Tel: +34 93 581 33 22 Fax: +34 93 581 41 10 http://www.pic.es Avis - Aviso - Legal Notice: http://www.ifae.es/legal.html

2 1

Bonds & Bridge best practices
by Jatin Davey 13 Jul '15

13 Jul '15

Hi All I have two bond interfaces namely, bond0 and bond1. bond0 has two ethernet interfaces associated with it and bond1 also has two ethernet interfaces associated with it. Now i create a bridge interface namely br20 (20 being the VLAN) and assign it a IP Address , subnet mask and the default gateway. I will use this IP to reach the server. So it is like a management bridge for me. Secondly this bridge is associated with the bond0.20 Can i create another bridge namely cr20 ( 20 being the VLAN ) on the bond1 interface ? This bridge does not have any ip address associated with it. I just want to use it for guest VMs. Is this the correct way to configure ? Thanks Jatin

3 2

Modifying RHEL OVAL CVE feed for use with CentOS 7
by Mosley, Graham A. (GSFC-6062)[GSFC - HIGHER EDUCATION] 13 Jul '15

13 Jul '15

Hi all. I am curious if anyone has experience using the OVAL tests for CVEs provided by Red Hat (https://www.redhat.com/security/data/metrics/) for CentOS 7. I was able to get the tests working for the non modified packages provided by RHEL but not the packages modified by CentOS. I believe this is because CentOS 7 no longer has minor versions (PACKAGE.VERSION.el7.*.rpm) whereas RHEL does (PACKAGE.VERSION.el7_1.*.rpm) so the CVE check thinks that the package is out of date. Any ideas? Thanks

1 0

Migrating to IdM
by isdtor 13 Jul '15

13 Jul '15

I have just started looking through the RHEL6 IdM guide, and while the documentation seems quite thorough and extensive, the examples are somewhat on the weak side. Migration scenarios can be much more complex - e.g. migrating away from NIS while at the same time moving to LDAP or AD for user account management. Is anyone aware of any tutorials or guidelines for such a situation? Then there are a number of technical questions that are unclear - are there equivalents for the standard yp* tools (enumeration via ldapsearch may be restricted by policy); can there be local (to the IdM server, not machine) users that are not in LDAP/AD; can there be local passwords for users; etc.etc. Should CentOS7 be considered over CentOS6?

2 1

Wrapper script for shutdown, passwd, etc. commands
by Kwan Lowe 13 Jul '15

13 Jul '15

Hello all. Thank you for reading. I'm hoping someone can point me in the right direction here. I am looking to implement a wrapper script/utility that will prompt for a ticket number before running certain commands. I've used similar scripts in the past on systems that I didn't have admin access. The wrapper would do something like this: [root@vm-helios-019] shutdown -h now *** WARNING *** You are attempting to shutdown a production server: vm-helios-019.digitalhermit.com Please enter the Change Log Ticket for shutdown CHG-FL-102122 Please confirm by entering your login password: xxxxxxxxxxxxxxxxxx Ticket number CHG-GL-102122 for user Kwan Lowe (klowe) has been logged at Sun Feb 4, 2001 at 14:23 (2:23PM). Ideally this would only kick in if the request is coming from an interactive session. Thinking about it, just replacing the command with a wrapper could cause other problems. Has anyone done anything similar? Thanks, Kwan

3 3

← Newer
1
...
4
5
6
7
8
9
10
11
12
Older →

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss July 2015