Discuss September 2015

discuss@lists.centos.org

136 participants
130 discussions

Re: [CentOS] CentOS-6 Logwatch 7.3.6 behaviour
by James B. Byrne 21 Sep '15

21 Sep '15

On Sat, September 19, 2015 06:51, Tony Mountifield wrote: > In article > <d0000782c236fbee71045dad24a43def.squirrel(a)webmail.harte-lyne.ca>, James B. Byrne <byrnejb(a)harte-lyne.ca> wrote: >> After some experimenting I have observed that overriding settings from >> /usr/share/logwatch/default.conf/logwatch.conf in >> /etc/logwatch/conf/logwatch.conf does not produce consistent >> results. >> For example, if I replace the default detail configuration in >> etc/logwatch/conf/logwatch.conf with: >> Detail = High >> It does indeed change the level of detail from the default Low set in >> /usr/share/logwatch/default.conf/logwatch.conf. >> However, if I comment out the line: >> #Service = "-zz-sys" # Prevents execution of zz-sys service in the overridden file then the fact that this line remains in the default.conf version means that the sservice cannot be enabled to run >> by default without editing >> /usr/share/logwatch/default.conf/logwatch.conf. Of course doing that >> means that any update clobbers the local changes. > Can you just add it back in /etc/logwatch/conf/logwatch.conf with: Service = "zz-sys" > I haven't tried it, but it looks like Service lines are cumulative. /usr/sbin/logwatch --range 'today' --mailto support(a)harte-lyne.ca --service zz-runtime --service All Wrong configuration entry for "Service", if "All" selected, only "-" items are allowed As shown above, if you pass '--service All' then any later '--service X' option must be prefaced with a '-' ('--service -X'). In other words, once All is selected then one can only remove selected services. In the config files this is the order used: # The 'Service' option expects either the name of a filter # (in /usr/share/logwatch/scripts/services/*) or 'All'. # The default service(s) to report on. This should be left as All for # most people. Service = All # You can also disable certain services (when specifying all) Service = "-zz-network" # Prevents execution of zz-network service, which # prints useful network configuration info. Service = "-zz-sys" # Prevents execution of zz-sys service, which # prints useful system configuration info. Service = "-eximstats" # Prevents execution of eximstats service, which # is a wrapper for the eximstats program. So, no, one cannot restore a service that is deleted from the run in default.conf by adding it back to the local config file. I can understand what is happening here. The implementation of user config files is conceived as being additive to the default configuration. Anything not specified in /etc/logwatch/conf/logwatch.conf is picked up from /usr/share/logwatch/default.conf/logwatch.conf. Anything in /usr/share/logwatch/default.conf/logwatch.conf is overridden by any similar entry in an earlier config. This implies that the order of processing is: /etc/logwatch/conf/logwatch.conf /usr/share/logwatch/dist.conf /usr/share/logwatch/default.conf/logwatch.conf This seems to be something that needs to be fixed in the default.conf/logwatch.conf file. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Setting up BackupPC on CentOS-7
by Timothy Murphy 21 Sep '15

21 Sep '15

I'd be interested in any corrections or comments on the following instructions (basically for myself): We assume that BackupPC has been installed: sudo yum install BackupPC 1. BackupPC must be run by the user backuppc. Accordingly the lines User apache Group apache in /etc/httpd/conf/httpd.conf should be changed to User backuppc Group backuppc 2. The user backuppc must be able to ssh to root (to run rsync), since only root can access all the files on the system. This is slightly complicated because backuppc has no default shell. $ su Passwd: # su -s /bin/sh backuppc sh-4.1$ cd sh-4.1$ ssh-keygen Generating public/private rsa key pair. sh-4.1$ cd .ssh sh-4.1$ cp id_rsa.pub /tmp sh-4.1$ exit # cd # ls .ssh If .ssh exists and contains id_rsa and id_rsa.pub ignore the next command # ssh-keygen Generating public/private rsa key pair. # cd .ssh # cat /tmp/id_rsa.pub >> authorized_keys # su -s /bin/sh backuppc sh-4.1$ ssh -l root helen helen is the name of my server - substitute the correct name or IP address # exit sh-4.1$ exit # 3. We must setup the graphic interface to BackupPC, since it is more or less impossible to administer BackupPC otherwise. I want to configure BackupPC from my laptop. My laptop and server are on the same network 192.168.2.0 # vi /etc/httpd/conf.d/BackupPC.conf Firstly, after the line allow from 127.0.0.1 add allow from 192.168.2.0/255.255.255.0 (giving the IP address of your network in place of 192.168.2.0). Secondly, change the line Require local to Require ip 192.168.2.0/255.255.255.0 127.0.0.1 4. Give backuppc and yourself passwords to access BackupPC # htpasswd -c /etc/BackupPC/apache.users backuppc Password: # htpasswd -c /etc/BackupPC/apache.users yourusername Password: # exit 5. Ensure that all BackupPC files are owned by backuppc.apache # chown -R backuppc.apache /etc/BackupPC /etc/httpd/conf.d/BackupPC.conf /var/lib/BackupPC 6. Restart BackupPC and apache # systemctl restart backuppc # systemctl restart httpd 7. Now see if you can access BackupPC on your server: Browse to http://localhost/backuppc If this succeeds give username backuppc and the password you chose for yourself above 8. Now try the same on your laptop: Browse to http://helen/backuppc (substituting your server's name or IP address for "helen"). Again give username backuppc and the password you chose for yourself above. 9. Returning to the server, # cd /etc/BackupPC # vi hosts I appended the line helen 0 backuppc to this file - you can choose any name here in place of helen it does not have to be the name of your server. 10. Now browse again to BackupPC, on laptop or server. Where it says "Select a host" give the name you just chose. Click on "Edit Config" and then on "Xfer" and in the RsyncShareName line add the directory or directories on your server that you want to backup, and then click on Save. (I chose /Photos, /common/tim and /var/www, but of course this is entirely up to you.) Click on "helen Home" (substituting the name you chose above), and press "Start full backup". -- Timothy Murphy gayleard /at/ eircom.net School of Mathematics, Trinity College, Dublin

3 3

CentOS-6 Logwatch 7.3.6 behaviour
by James B. Byrne 19 Sep '15

19 Sep '15

After some experimenting I have observed that overriding settings from /usr/share/logwatch/default.conf/logwatch.conf in /etc/logwatch/conf/logwatch.conf does not produce consistent results. For example, if I replace the default detail configuration in etc/logwatch/conf/logwatch.conf with: Detail = High It does indeed change the level of detail from the default Low set in /usr/share/logwatch/default.conf/logwatch.conf. However, if I comment out the line: #Service = "-zz-sys" # Prevents execution of zz-sys service in the overridden file then the fact that this line remains in the default.conf version means that the sservice cannot be enabled to run by default without editing /usr/share/logwatch/default.conf/logwatch.conf. Of course doing that means that any update clobbers the local changes. I am not sure if this a bug or a design feature but it seems to me that on should be able to override all of the default settings for services. The only way around this seems to be to specify '--service All' on the command line. But then the service entries in logwatch.conf seem to be ignored entirely so that one must also specify the service exclusions on the command line. I also ran across a rather bizarre 'feature' with the 'DisplayOrder' setting. Evidently, if one gives the same DisplayOrder value to two or more services (say zz-sys which has DisplayOrder = 0.4 and zz-runtime which uses the default value of 0.5 otherwise) then only the last service (ordered alphabetically) is reported. No errors are logged or conflict notices are given either. The other service reports just 'disappear'. However, one can explicitly assign multiple services a DisplayOrder value of 0.5 and all are reported nonetheless, in alphabetic order, along with the other services which simply take the implicit default value. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

BackupPC is not easy to setup
by Timothy Murphy 18 Sep '15

18 Sep '15

I finally got BackupPC working under Centos-7.1 after several hours of pain. I had been running it for several years under CentOS-6, and probably CentOS-5, but there seem to me to have been several new issues that arise with CentOS-7. In my experience, the official documentation on this, <http://backuppc.sourceforge.net/faq/BackupPC.html>, is more or less useless unless you have a very long time to spend. It suffers from the usual Linux disease of having inordinately long explanations of everything with no examples of the actual commands a real person has to give. The explanation in <https://wiki.centos.org/HowTos/BackupPC> (which I only found later) is much better, though it starts with the warning "This page is no longer maintained, having been abandoned on 2009-09-17". I thought I'd write a 1-page note to myself of the steps I took, in preparation for CentOS-8... I have a couple of questions that this raises. 1. Why exactly does backuppc want to ssh to root? Is this just a way of running BackupPC as root? 2. The graphical interface seems to be treated as an extra, but what other way is there of accessing BackupPC? Is there a CLI approach? If so, where is the list of transfer requests kept? -- Timothy Murphy gayleard /at/ eircom.net School of Mathematics, Trinity College, Dublin

6 12

Nux VLC gives CLI only on CentOS-6.x
by Scott Robbins 18 Sep '15

18 Sep '15

I thought this was just because of various unwise repo mixing that I'd done on my main home server-cum-workstation, but I've been able to duplicate it on a fresh VirtualBox installation. I install the nux repo vlc-core and vlc-extras. I then try to start it from a command line. I get +++++++ main interface error: no suitable interface module [0x1ae5108] main libvlc error: interface "globalhotkeys,none" initialization failed [0x1ae5108] main libvlc: Running vlc with the default interface. Use 'cvlc' to use vlc without interface. [0x1bac2b8] [cli] lua interface: Listening on host "*console". VLC media player 2.0.8 Twoflower Command Line Interface initialized. Type `help' for help. +++++++ I can open any media file with it, but I can't get the usual GUI interface. I tend to use mplayer and smplayer more often, but I've not been able to find the reason for this not working. Googling has brought me some Ubuntu issues that were resolved with reinstalling, but the only thing I've seen with CentOS-6.x and this is a few years old. Does anyone else have this issue? I use openbox or dwm on the machines, I'm not sure if that's part of the issue. -- Scott Robbins PGP keyID EB3467D6 ( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 ) gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

2 2

edac-util, lables.db
by m.roth＠5-cent.us 18 Sep '15

18 Sep '15

Does anyone know of a source of edac labels? The one that gets installed is tiny, and doesn't for example, have anything for Dell. mark

1 0

Re: [CentOS] Is ATRPMs dead?
by Cal Sawyer 18 Sep '15

18 Sep '15

Thanks to Earl for the NUX repo recommendation. Good VLC and ffmpeg versions (for CentOS) here. From what i can tell, atrpms died a death earlier this year or the end of last cheers - cal sawyer Earl A Ramirez <earlaramirez(a)gmail.com> wrote: To: CentOS mailing list <centos(a)centos.org> Subject: Re: [CentOS] Is ATRPMs dead? On 14 Sep 2015 14:12, "Cal Sawyer" <cal-s(a)blue-bolt.com> wrote: Haven't been able to reach atrpms.net for over a week from London, UK, when i last looked for it after a couple of intervening months. Did i miss something? And if atrpms is truly defunct, where's a good place to obtain updated versions of vlc and mplayer now? thanks! - cal _______________________________________________ CentOS mailing list CentOS(a)centos.org https://lists.centos.org/mailman/listinfo/centos Have never used ATRPMS but a good alternative for at least VLC is Nux repo; I have been using it since EL 6 and it works just as good on EL 7.

1 0

Re: [CentOS] Centos 7 using cups with cups-lpd loaded getting print jobs from an Sco Unix lpd system
by Shawn Parks - CMAC 17 Sep '15

17 Sep '15

Centos users, I new to Centos 7 and my problem is the following: I am using my Centos 7 system as a print server in a warehouse. Using cups for the print queue's. Which I can print to the printers find from the Centos 7 machine. The hosting system is Sco Unix using lpd printing. This machine is in Illinois and the warehouse / Centos 7 machine is in Arizona. I have loaded "cups-lpd" using yum and it seems fine. I have also setup "/etc/xinetd.d/cups-lpd" Following is a "netstat -tanp |grep -i listen" tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1090/sshd tcp 0 0 0.0.0.0:631 0.0.0.0:* LISTEN 1096/cupsd tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 1671/master tcp6 0 0 :::515 :::* LISTEN 1095/xinetd tcp6 0 0 :::22 :::* LISTEN 1090/sshd tcp6 0 0 :::631 :::* LISTEN 1096/cupsd tcp6 0 0 ::1:25 :::* LISTEN 1671/master I notice that "port 515" is only listening on tcp6 not tcp. Question: could this be my problem? and how can I get "port 515" to be listened to on tcp? my Sco Unix print queue "status" file says "waiting for gate to come up". I have had the local hardware person verify that the router is "port forwarding" port 515 to my Centos 7 system. Help in this matter would be greatly appreciated. Thanks, Shawn

2 1

Secure boot
by Gordon Messmer 17 Sep '15

17 Sep '15

After updates to grub2 and kernel in CentOS 7, today, systems will no longer boot in Secure Boot mode. I'm not positive, but I think grub2 is the culprit. Is anyone else seeing the same problem?

2 3

gpg decryption error from only 1 user
by Dustin Kempter 17 Sep '15

17 Sep '15

Hi all, I am having an issue. We have a vm that has encrypted data with gpg. The vm is centos 6.5 and it has multiple users. user1=bob user2=kevin user3= postgres user4=root. Only postgres has access to the file in which we keep the encrypted data. I as root will su - postgres, cd that data dir, and use this command "gpg -d (file_name)" and it works just fine. However the user1 "bob" will sudo su - postgres (have an entry in sudoers file to allow) and become postgres, cd to the dir with the data, run this same command "gpg -d (file_name) however it gives this error gpg: CAST5 encrypted data can't connect to `/home/postgres/.gnupg/S.gpg-agent': No such file or directory gpg-agent[6153]: command get_passphrase failed: Operation cancelled gpg: cancelled by user gpg: encrypted with 1 passphrase gpg: decryption failed: No secret key I really do not understand whats going on here. I have tried deleting the user bob, and re creating it in case of some sort of corruption but still the same issue. We also see an issue where I installed screen. as any user but bob I can create or join. But as bob I get this error "Cannot open your terminal '/dev/pts/2' - please check."Also I, as superuser did this su - bob sudo su - postgres cd data dir gpg -d (file_name) works with no issues, please help me debug this I am out of ideas. thanks in advance

1 0

← Newer
1
2
3
4
5
6
7
8
...
13
Older →

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss September 2015