April 2016 - Discuss - lists.centos.org

I want to connect to a l2tp server from centos.
by Eliezer Croitoru 22 Mar '17

22 Mar '17

I have a server currently connecting to a pptp remote server. This server(lns\lac) has the option for pptp connections and l2tp connections. The l2tp connections are not using ipsec encryption at all. I have seen couple guides\tutorials on the internet: - https://raymii.org/s/tutorials/IPSEC_L2TP_vpn_on_CentOS_-_Red_Hat_Enterpris… - https://wiki.archlinux.org/index.php/L2TP/IPsec_VPN_client_setup But all the guides that I have found are using ipsec with "secret". On ubuntu there is a gui applet that helps setting these kind of connections up but I am working with a CentOS server and not Ubuntu desktop. If someone used l2tp the same way I want to use on CentOS 7 please give me some advice. If you have a guide which might help me I will be more then happy to see this one. Thanks, Eliezer

4 8

CentOS-7-x86_64-GenericCloud.raw very unusual format
by Aliaksei Sheshka 15 Oct '16

15 Oct '16

Hello! Is anyone aware why CentOS-7-x86_64-GenericCloud.raw has such unusual format ? root@test-srv:~# wget http://cloud.centos.org/centos/7/images/CentOS-7-x86_64-GenericCloud.raw --2016-03-21 13:16:31-- http://cloud.centos.org/centos/7/images/CentOS-7-x86_64-GenericCloud.raw Resolving cloud.centos.org (cloud.centos.org)... 162.252.80.138 Connecting to cloud.centos.org (cloud.centos.org)|162.252.80.138|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 374668382 (357M) [application/x-gzip] Saving to: 'CentOS-7-x86_64-GenericCloud.raw' CentOS-7-x86_64-GenericCloud.raw 100%[=========================================================================>] 357.31M 12.9MB/s in 30s 2016-03-21 13:17:03 (11.9 MB/s) - 'CentOS-7-x86_64-GenericCloud.raw' saved [374668382/374668382] Download reports [application/x-gzip] for raw file And indeed root@test-srv:~# file CentOS-7-x86_64-GenericCloud.raw CentOS-7-x86_64-GenericCloud.raw: gzip compressed data, last modified: Sat Feb 27 02:14:37 2016, from Unix Ok, lets uncompress: root@test-srv:~# zcat -d CentOS-7-x86_64-GenericCloud.raw > CentOS-7-x86_64-GenericCloud.a And check again root@test-srv:~# file CentOS-7-x86_64-GenericCloud.a CentOS-7-x86_64-GenericCloud.a: POSIX tar archive (GNU) Ok. it's a tar archive. root@test-srv:~# tar -xf CentOS-7-x86_64-GenericCloud.a -v CentOS-7-x86_64-GenericCloud-1602.raw Now it's CentOS-7-x86_64-GenericCloud-1602.raw file which is indeed raw What is the point to pack single raw file into the tar.gz and to name it raw ? Or it's just a mistake ? Thanks!

8 16

[OT] disk utility showing message "the partition is misaligned by"
by g 26 Aug '16

26 Aug '16

greetings. centos 6.7 [current] 'disk utility' has started showing message; WARNING: The partition is misaligned by 2560 bytes. This may result in very poor performance. Repartitioning is suggested. for sdc5 - /home partition. /dev/sdc5 302243312 156348604 130534968 55% /home /dev/sdc7 80854912 57088 76683952 1% /hdd/c/07 other than time involved to backup sdc5, repartition is not a problem. to my thinking, but not recalling, with fsck; fsck -rN -t ext4 /dev/sdc5 * to check repairs fsck -r -t ext4 /dev/sdc5 * to repair gparted was used to partition drive. is pmagic live a better choice, or should i return fdisk because; =+=+= $ sudo fdisk -l /dev/sdc [sudo] password for geo: Disk /dev/sdc: 1000.2 GB, 1000204886016 bytes 255 heads, 63 sectors/track, 121601 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Sector size (logical/physical): 512 bytes / 4096 bytes I/O size (minimum/optimal): 4096 bytes / 4096 bytes Disk identifier: 0x0009ede7 Device Boot Start End Blocks Id System /dev/sdc1 * 1 103 819200 83 Linux Partition 1 does not end on cylinder boundary. /dev/sdc2 103 230 1024000 82 Linux swap / Solaris Partition 2 does not end on cylinder boundary. /dev/sdc3 230 2107 15073280 83 Linux /dev/sdc4 2107 121602 959844352 5 Extended /dev/sdc5 2108 42019 320587970+ 83 Linux Partition 5 does not start on physical sector boundary. =+=+= suggestions for correcting above boundaries also appreciated. help needed and greatly appreciated. -- peace out. If Bill Gates got a dime for every time Windows crashes... ...oh, wait. He does. THAT explains it! -+- in a world with out fences, who needs gates. CentOS GNU/Linux 6.7 tc,hago. g .

7 9

Broadcom BCM4313 support broken with kernel 2.6.32-573.7.1.el6.centos.plus.x86_64?
by wwp 24 Aug '16

24 Aug '16

Hello, I noticed that with latest kernel (2.6.32-573.7.1.el6.centos.plus.x86_64), my laptop's Wifi doesn't work, whereas with previous kernel (2.6.32-504.30.3.el6.centos.plus.x86_64), it works fine. Is this a known issue or did I miss something new? BTW, `lspci` says: Broadcom Corporation BCM4313 802.11bgn Wireless Network Adapter (rev 01) Regards, -- wwp

2 2

Any further developments on CentOS7 for i386?
by Kay Schenk 22 Jun '16

22 Jun '16

Well I haven't tested out the CentOS 7 for i386 yet as sent in the message of 06/02-- https://lists.centos.org/pipermail/centos-devel/2015-June/013426.html Nor have I seen any additional information. So how is this going? I'm almost ready to jump in as I would really prefer to be on Gnome 3. -- -------------------------------------------- MzK “The journey of a thousand miles begins with a single step.” --Lao Tzu

3 7

Badlock bad luck
by Bob Smith 23 May '16

23 May '16

I had exactly the same problem. Your workaround fixed me too. With the new samba packages my samba\logs are full of errors. If I temporarily disconnected the PC client NIC cable, and logged into the domain using cached credentials, then I could get past the problem. But, you helped me greatly with this posting. I wasted hours checking Windows updates - useless. We still need the new configuration settings for our conf file to workaround this problem. Bob Smith bobsmith at dbata dot com >* Am 13.04.2016 um 07:51 schrieb Mogens Kjaer <mk at lemo.dk <https://lists.centos.org/mailman/listinfo/centos>>: *> >* Hello, *> >* I run a CentOS 6 machine with samba, serving approx. 150 Windows users with samba running as an NT-like PDC. *> >* After today's samba update (samba-3.6.23-30.el6_7.x86_64 etc.), nobody can log in. *> >* They all get the "Trust relationship failed" error message. *> >* If I downgrade: *> >* yum downgrade samba-common samba-winbind samba-winbind-clients samba-client samba samba-doc samba-domainjoin-gui libsmbclient *> >* - the problem goes away. *> >* What am I missing? *> >* Mogens *> >* -- *>* Mogens Kjaer, mk at lemo.dk <https://lists.centos.org/mailman/listinfo/centos> *>* http://www.lemo.dk <http://www.lemo.dk> *>* _______________________________________________ *>* CentOS mailing list *>* CentOS at centos.org <https://lists.centos.org/mailman/listinfo/centos> *>* https://lists.centos.org/mailman/listinfo/centos <https://lists.centos.org/mailman/listinfo/centos> *

3 2

Re: [CentOS] Badlock bad luck
by Bill Baird 11 May '16

11 May '16

I'm seeing the exact same behavior in my environment (NT4 PDC, not AD). I had to downgrade samba get systems working again. The full error message is: "The trust relationship between this workstation and the primary domain failed". Did you have any luck finding a solution?

4 5

centos samba sssd active directory
by Stefan Fuhrmann 07 May '16

07 May '16

Hello all, Im having the latest centos that should be integrated into win 2012 active directory domain. Im having Authentication running, an AD user can login via ssh, getent and id working But Im not able to get the samba shares running with AD [sfu-erp] comment = Mandant path = /share # ; valid users = @"RZ-DOMAIN\linuxtest" @"RZ-DOMAIN\linuxtest" valid users = DOMAIN # valid users = @"RZ-DOMAIN+domänen-benutzer" # valid users = @"RZ-DOMAIN" #valid users = %S, RDOMAIN\%S #valid users = @DOMAIN #valid users = linuxtest # force user = fuhste # guest ok = yes # force group = @"RZ-DOMAIN+domänen-benutzer" # force group = @"RZ-ODOMAIN" # ; force group = domänen-benutzer force create mode = 0660 force directory mode = 0770 readonly = no writeable = yes As you can see Itried a lot with valid users with no success. Im trying some days now but Im not able to get it running. Need more information? Can someone help? Tia Stefan

2 3

systemd-journald corruption
by Chris Adams 03 May '16

03 May '16

I have several recently-installed CentOS 7 servers that keep having systemd-journald corruption (which stops ALL logging, including syslog). Interestingly, they are all spam-scanning servers running amavisd-new (so could be some particular pattern is triggering it). Is there a "supported" way to just cut systemd-journald out of the picture and have log entries go straight to rsyslogd? Has anyone else seen this? -- Chris Adams <linux(a)cmadams.net>

2 8

E-mail advice sought
by Alice Wonder 01 May '16

01 May '16

I'm working on setting up an e-mail service. I've got the e-mail servers working beautifully and am presently working on re-writing the parts of Roundcube I don't like (e.g. it uses inline JavaScript in a few places so CSP breaks it) but - Is there any advice on characters to allow in usernames? I know there are some wacky characters that are legal in e-mail addresses but are generally frowned upon - like "very.(),:;<>[]\".VERY.\"very@\ \"very\".unusual"@example.com is apparently a legal address - but I know I don't want to allow ampersands and brackets etc. in an address. I don't think a whitelist alphabet is best approach because of people with names that are not spelled with Latin characters. Is there an existing blacklist of characters that technically legal but are generally avoided in e-mail addresses? Thanks

7 14

Bonding wired and wireless ifaces
by wwp 01 May '16

01 May '16

Hello all, I'm wondering if there's any interest in trying to bond em1 and eth0 (respectively wired and wireless interfaces here), and if any, how to do it in CentOS6. I've found this, which could possibly help (but I'm failing yet): http://r.outlyer.net/linux:bonding https://help.ubuntu.com/community/UbuntuBonding Both are dealing w/ ifenslave. Any experience or point of view on this topic? For now, and without any change to the CentOS network config, I have my wired and wireless ifaces up at the same time, same IP (thanks for the DHCP config running on my router), but apparently only the wired one is taking into account in the routing table (if I understand), until I undock the laptop and run on the wireless one): > route -n Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 10.0.2.0 0.0.0.0 255.255.255.0 U 1 0 0 em1 <- wired 10.0.2.0 0.0.0.0 255.255.255.0 U 2 0 0 eth0 <- wireless 0.0.0.0 10.0.2.1 0.0.0.0 UG 0 0 0 em1 <- 10.0.2.1 is my router I'm a complete newbie to bonding, so please forgive any non-sense I could have written here! Regards, -- wwp

2 2

Re: [CentOS] E-mail advice sought
by Richard 30 Apr '16

30 Apr '16

------------ Original Message ------------ > Date: Saturday, April 30, 2016 11:28:23 -0700 > From: Alice Wonder <alice(a)domblogger.net> > > I'm working on setting up an e-mail service. > > I've got the e-mail servers working beautifully and am presently > working on re-writing the parts of Roundcube I don't like (e.g. it > uses inline JavaScript in a few places so CSP breaks it) but - > > Is there any advice on characters to allow in usernames? > > I know there are some wacky characters that are legal in e-mail > addresses but are generally frowned upon - like > > "very.(),:;<>[]\".VERY.\"very@\ \"very\".unusual"@example.com > > is apparently a legal address - but I know I don't want to allow > ampersands and brackets etc. in an address. > > I don't think a whitelist alphabet is best approach because of > people with names that are not spelled with Latin characters. > > Is there an existing blacklist of characters that technically legal > but are generally avoided in e-mail addresses? > You should avoid straying from the mail standards (as defined in the IETF RFCs). If you do stray your users will encounter arbitrary/seemingly random failures that will waste everyones time to debug. The wikipedia page: <https://en.wikipedia.org/wiki/Email_address> gives a good summary -- look at the "local part" section and the examples lower down. You'll also want to review the RFCs. Depending on your user community you may also need to look at the RFCs related to the internationalization of email addressing sooner rather than later. Note, that wiki page has some references to non-RFC sources that are basically the authors' views/preferences. In at least one of these cases, many of the recommendations violate the RFCs. If there is doubt, the RFCs should be your guide.

1 0

tune2fs: Filesystem has unsupported feature(s) while trying to open
by Matt Garman 30 Apr '16

30 Apr '16

I have an ext4 filesystem for which I'm trying to use "tune2fs -l". Here is the listing of the filesystem from the "mount" command: # mount | grep share /dev/mapper/VolGroup_Share-LogVol_Share on /share type ext4 (rw,noatime,nodiratime,usrjquota=aquota.user,jqfmt=vfsv0,data=writeback,nobh,barrier=0) When I try to run "tune2fs" on it, I get the following error: # tune2fs -l /dev/mapper/VolGroup_Share-LogVol_Share tune2fs 1.41.12 (17-May-2010) tune2fs: Filesystem has unsupported feature(s) while trying to open /dev/mapper/VolGroup_Share-LogVol_Share Couldn't find valid filesystem superblock. This filesystem was created on this system (i.e. not imported from another system). I have other ext4 filesystems on this server, and they all work with "tune2fs -l". Basic system info: # rpm -qf `which tune2fs` e2fsprogs-1.41.12-18.el6.x86_64 # cat /etc/redhat-release CentOS release 6.5 (Final) # uname -a Linux lnxutil8 2.6.32-504.12.2.el6.x86_64 #1 SMP Wed Mar 11 22:03:14 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux I did a little web searching on this, most of the hits were for much older systems, where (for example) the e2fsprogs only supported up to ext3, but the user had an ext4 filesystem. Obviously that's not the case here. In other words, the filesystem was created with the mkfs.ext4 binary from the same e2fsprogs package as the tune2fs binary I'm trying to use. Anyone ever seen anything like this? Thanks!

8 12

new firefox upgrade, then crash
by ken 30 Apr '16

30 Apr '16

Earlier today I upgrade firefox, closed the old version, opened the new, and first it froze-- displayed a message about a script running and asking me if I wanted to stop it; I said no to let it run-- then it crashed and disappeared. # ps -ef|grep firefox root 3150 4904 0 14:08 pts/2 00:00:00 grep --color=auto firefox # uname -r 3.10.0-327.10.1.el7.x86_64 # cat /etc/centos-release CentOS Linux release 7.2.1511 (Core)

4 3

Semi-OT: awk
by m.roth＠5-cent.us 30 Apr '16

30 Apr '16

This is odd, and annoying. CentOS 6, current. Here's my awk script: { room = substr($0, 48, 10); arr[$2,room,$1] = $0; } END { for ( i in arr ) { for ( j in arr[i] ) { for ( k in arr[i][j] ) { print arr[i][j][k]; } } } } And when I run it, it complains awk -f awksort proplist7 awk: awksort:7: for ( j in arr[i] ) { awk: awksort:7: ^ syntax error awk: awksort:8: for ( k in arr[i,j] ) { awk: awksort:8: ^ syntax error awk: awksort:9: print arr[i][j][k]; awk: awksort:9: ^ syntax error which makes no sense - I've done this a million times. Am I missing something, or is this a bug? mark

3 2

C5: The Firefox ESR 45.1.0 Nighmare
by Always Learning 29 Apr '16

29 Apr '16

Centos replaced well-running customise Firefox with version ESR 45.1.0 * All the add-ons (language dictionaries, Adblock Plus, Classic Theme Restorer etc.) were disabled with no simple method of reactivating them. Reason given was they were "unsigned". * About:config xpinstall.signatures.required = false partially reduced the problem. * Then possible to reactivate some disabled add-ons, but others down-loaded OK but would not install * removing files in ~/.mozilla/firefox/.../extensions.* and restarting was supposed to help However the time-wasting problem remains, so too do the down-loaded extensions in /tmp, example tmp-xxx.xpi Would be really nice if Centos warned its loyal and grateful users of possible problems before those users trustingly replaced working programmes with considerable time-wasting problems. Time spent on trying to return Firefox to a useful and dependable working tool is unavailable for other tasks :-( -- Regards, Paul. England, EU. England's place is in the European Union.

9 14

OT, security: if you're in the US, and like your dentist, call them, *now*
by m.roth＠5-cent.us 29 Apr '16

29 Apr '16

If you like your dentist, *call* them, today. <http://krebsonsecurity.com/2016/04/dental-assn-mails-malware-to-members/>, and the URL says it all - they mailed a card with a USB key... and some of them have malware, and Krebs says not all virus scanners can detect it.... mark "got off the phone with my dentists' office a few minutes ago

1 0

Firefox 46.0 fails on CentOS 6.7 due to GTK3 requirement
by Phelps, Matthew 29 Apr '16

29 Apr '16

The latest version of firefox, 46.0 requires GTK3 and so it fails on CentOS 6.7. I know there is the ESR release supplied by upstream, but that is based on version 38. We have regularly installed the Mozilla "Linux" version of Firefox in a central location for our users, and this has worked just fine until 46.0. (I note from https://www.mozilla.org/en-US/firefox/organizations/faq/ that even that ESR release is due to stop being supported soon). I filed a bugzilla report at https://bugzilla.mozilla.org/show_bug.cgi?id=1267815. If this matters to you, please consider tagging onto that bug. Yes, yes we have to upgrade to CentOS 7. But in our shop, the amount of work required to get this done is huge, and won't happen soon. The whole idea of using RHEL/CentOS is to have a stable, supported version for a long period of time. How can we do this if even a web browser won't work? -- Matt Phelps System Administrator, Computation Facility Harvard - Smithsonian Center for Astrophysics mphelps(a)cfa.harvard.edu, http://www.cfa.harvard.edu

5 8

Where can I find the CentOS gpg keys?
by Albin Otterhäll 29 Apr '16

29 Apr '16

Hi! I'm currently using a non-CentOS system, and wondering where I can find the GPG keys so I can verify the checksum file? The page on the website (https://www.centos.org/keys/) only give information where I can find them on an already installed system. Regards, Albin

5 6

Centos hold me back from work - sshd ...bull
by Andreas Benzler 28 Apr '16

28 Apr '16

I don’t know what’s going on the sushi from the laptop always kick me out!!! Fresh installation. packet_write_wait: Connection How can that be! Andy

6 8

useradd -r doesn't work right in some contexts
by Florin Andrei 28 Apr '16

28 Apr '16

"useradd -r testuser" run as root from an interactive ssh session does the right thing: it creates a user account with a UID in the system users range (< 400). Running the same command as a cron job (just for testing), also does the right thing. Now I'm trying to accomplish the same result via chef-client. I'm trying to run "useradd -r" as a simple command, as a bash command, or as a script, from chef-client. It does create the user account, but the UID is in the normal range (> 600), not the system range. It can't be a Chef bug, because it is actually running "/usr/sbin/useradd -r username", I'm not using the Chef user resource (although I've tried that with "system true" and it also fails to put the UID in the correct range). There's something about the context where chef-client is running that triggers different results. BTW, chef-client is running as a service via /etc/init.d/chef-client Adding SYS_UID_MAX to /etc/login.defs doesn't help. Any clue what's going on? Why useradd has different behaviors depending on how it's launched? -- Florin Andrei http://florin.myip.org/

1 0

About mysql upgrade
by Sergio Belkin 28 Apr '16

28 Apr '16

Hi, I've found some issues upgrading mysql, some people recommends run mysql_upgrade. I wonder why such a script is not run from scriptlet of mysql-server rpm. Thanks in advance -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org

5 5

DNSSEC deployment stats
by Alice Wonder 28 Apr '16

28 Apr '16

Since it was discussed earlier, I thought some might find this link interesting : http://secspider.verisignlabs.com/stats.html It is a spider that crawls DNS servers counting both DNSSEC and TLSA records.

1 0

Re: [CentOS] Any CentOS 6 Issues on Lenovo Y700?
by Brian Bernard 28 Apr '16

28 Apr '16

Oh, I wouldn't flame you. Hmm, I didn't think of using a virtual machine. The Lenovo has a NVidia 960MX, so I wonder if it would fully work under a virtual machine. The reason why I ask is that I do systems adminstration with meteorological software that requires OpenGL 2.0 and at least 2GB of video ram. Thank you for your reply, Mike. Brian Bernard On Apr 27, 2016 10:43 PM, "Mike Mohr" <akihana(a)gmail.com> wrote: > > Don't flame me, but I really recommend using Ubuntu on laptops. If you > really want CentOS, you should go with version 7. Many new laptops won't > work well with that either though. > > CentOS 6 only works well these days on older hardware or on virtual > machines. > On Apr 27, 2016 7:27 PM, "Brian Bernard" <brian.brianbernard(a)gmail.com> > wrote: > > Hi all, > > I'm looking at buying a Lenovo Y700 Notebook, and wondering if it would > work with CentOS 6. Or if anyone has experience with using it under CentOS > 6. I assume that the WiFi could be an issue as it uses an Intel 8260 card. > I want to make the correct decision. > > Thank you, > > Brian Bernard > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos

4 6

Re: [CentOS] Centos hold me back from work - sshd ...bull
by Andreas Benzler 28 Apr '16

28 Apr '16

what is wrong with the default sshd server. after retry to connect sshd - key changed from known hosts???? grrr

6 11

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss April 2016