Discuss May 2016

discuss@lists.centos.org

155 participants
149 discussions

FirewallD and FTP passive mode
by Marcin Trendota 06 May '16

06 May '16

Howdy I'm trying to run FTP server behind firewall. And i can't enable passive mode from the Internet. There are plenty howtos but there aren't many with my combination. For now i have configured port forwarding and ftp server itself. On the router: # firewall-cmd --list-all --zone=external external (active) interfaces: enp3s1 sources: services: openvpn ssh ports: 1194/tcp 2666/tcp 88/tcp masquerade: yes forward-ports: port=21:proto=tcp:toport=:toaddr=10.0.32.7 port=10090-10100:proto=tcp:toport=:toaddr=10.0.32.7 port=88:proto=tcp:toport=80:toaddr=10.0.32.23 icmp-blocks: rich rules: I also did: # modprobe ip_conntrack_ftp ports=10090,10100 excerpt form vsftpd.conf on the FTP server: pasv_enable=Yes pasv_min_port=10090 pasv_max_port=10100 pasv_addr_resolve=Yes >From LAN or through VPN it works. But on the public address i can only log in, cannot turn into passive mode: Connected to ftp1.domain.com (xxx.xxx.xxx.xxx). 220 (vsFTPd 2.2.2) Name (ftp1.domain.com:root): user 331 Please specify the password. Password: 230 Login successful. Remote system type is UNIX. Using binary mode to transfer files. ftp> ls 227 Entering Passive Mode (10,0,32,7,39,111). ftp: connect: Connection timed out Also this IP looks weird - shouldn't it be public IP? What am i doing wrong? TIA. -- Over And Out MoonWolf

4 3

yum update (first in a long time) - EXIM environment variable warning
by Gary Stainburn 06 May '16

06 May '16

Me again, Another problem I've found since doing my yum update is that EXIM is now showing the following error, on startup, and repeatedly in main.log [root@ollie2 ~]# exim -bt localpart(a)example.com 2016-05-06 09:27:04 WARNING: purging the environment. Suggested action: use keep_environment and add_environment. ............... Googling says that to fix this all I need to do is add keep_environment to exim.conf. What I'm struggling to find out is why it's suddenly needed and what the effects are

2 2

After restart, user's gnome autostart seems broken
by wwp 06 May '16

06 May '16

Hello there, CentOS6.7 64-bit up-to-date running on my laptop.. This night I had to restart (did it properly). Since then, my ~/.config/autostart/ contains some new broken .desktop files and /var/log/messages complains: gnome-session[7280]: WARNING: Could not parse desktop file /home/wwp/.config/autostart/gnome-keyring-daemon.desktop: Key file does not have key 'Name' gnome-session[7280]: WARNING: could not read /home/wwp/.config/autostart/gnome-keyring-daemon.desktop [snip] the log tells the same story about other desktop files: gnome-settings-daemon gnome-settings-daemon-helper gnome-power-manager gnome-screensaver gdu-notification-daemon at-spi-registryd user-dirs-update-gtk seahorse-daemon evolution-alarm-notify xfce4-settings-helper-autostart xfce4-notes-autostart IOW, stuff that sounds a bit critical from a GNOME desktop user PoV, explaining my concern. ALl the new broken .desktop files show the same date (Jul 3, 2014) and seem to be related to default services (/etc/xdg/autostart) that should normally NOT be there, as least from what I see on other similar systems running here. The services related to those files are NOT present anymore in my "Startup Applications Preferences", and I start wondering if the broken local desktop files are not shadowing system ones (that seem to run fine, according to `ps ax` and to my running GNOME desktop, showing no defect). I show you the contents of one of them, representative: ==== [Desktop Entry] X-XFCE-Autostart-Override=false Hidden=true ==== On another CentOS 6.7 box, I notice that those services (gnome keyring, at spi registry wrapper, etc.) are present in the "Startup Applications Preferences" but NOT in ~/.config/autostart/, so I assume that default system things are taken into account there. BTW, my user desktop settings are NOT to "automatically remember running applications when logging out". I have a complete backup of the system after last reboot (and a differential backup from one day ago), so I'm not risking anything apparently, but does anybody understand what happened? Is it safe to remove those broken desktop files are relogin my user? Regards, -- wwp

1 0

Copying CentOS to new drive
by Timothy Murphy 06 May '16

06 May '16

I recently asked about copying a running system to a new drive. As a postscript, I'm wondering if it would have been preferable to run the machine under a Live OS, and simply copy the root partition to the new drive? Eg while running under the LiveOS, # mkdir /mnt/old /mnt/new # mount /dev/sda7 /mnt/old # mount /dev/sdb6 /mnt/new # cp -avx /mnt/old /mnt/new or # rsync -ax --progress /mnt/old /mnt/new -- Timothy Murphy gayleard /at/ eircom.net School of Mathematics, Trinity College, Dublin

6 5

Dovecot on C7.2 - secure internet access
by Gary Stainburn 05 May '16

05 May '16

I have a mail server running on Centos 7.2 which has been working for my LAN for a long time. I'm at the point where I have to make it accessible to the internet. At the moment, access can be insecure but as it's on my LAN it isn't an issue. However, for internet access I wish to force SSL/TLS. Having read the documents I think it's as simple as changing 10-ssl.conf from ssl = yes to ssl = required remote 10.0.0.0/8 { ssl = yes } Am I right in thinking that this would make the global value now force SSL/TLS to be required, but for my LAN (10.0.0.0/8) override this with the old value of 'yes' Is there a better way to do this? Have I missed anything? I believe that this means implies disable_plaintext_auth = no for all except my LAN. Is that right?

2 3

CnetOS 7, hostname, and rsyslogd
by m.roth＠5-cent.us 05 May '16

05 May '16

A current system, but this has been happening since I built this box last fall: the system gets its name via DHCP, not from a hostname file. On reboot, such as after a yum update, it *appears* as though rsyslogd is started before the network is up, and so it doesn't have its hostname yet... so /var/log/messages shows the hostname as localhost. If I restart rsyslogd, and everything's fine. Has anyone else seen this behaviour? mark

1 0

Regarding upgrade from CentOS .5.5 to CentOS 7
by Venkateswara Rao Dokku 05 May '16

05 May '16

Hi, I wanted to upgrade from centOS 5.5 to CentOS 7 without losing the data. Is there any upgrade path available? or what is the proper way to do it without affecting the existing config? Thnaks for the help -- Thanks & Regards, Venkateswara Rao Dokku.

4 3

yum update (first in a long time) has broken clamd.exim
by Gary Stainburn 05 May '16

05 May '16

I have just run a 'yum update' on a Centos 7.2 server which updated several hundred RPMs. The update worked fine with no errors or warnings I then rebooted the server and now my EXIM is rejecting emails because the clamd service isn't running. So I tried: [root@ollie2 ~]# systemctl restart clamd.exim Failed to restart clamd.exim.service: Unit clamd.exim.service failed to load: No such file or directory. [root@ollie2 ~]# systemctl list-unit-files --type=service|grep -i exim exim.service enabled [root@ollie2 ~]# systemctl list-unit-files --type=service|grep -i clam clamd.service enabled clamd@.service static [root@ollie2 ~]# systemctl restart clamd [root@ollie2 ~]# systemctl status clamd ● clamd.service - Home brewed module for the Clam Antivirus scanner Loaded: loaded (/usr/lib/systemd/system/clamd.service; enabled; vendor preset: disabled) Active: failed (Result: start-limit) since Wed 2016-05-04 16:34:16 BST; 5s ago Process: 14405 ExecStart=/root/bin/clamd.start (code=exited, status=1/FAILURE) Main PID: 14405 (code=exited, status=1/FAILURE) May 04 16:34:16 ollie2.ringways.co.uk systemd[1]: Unit clamd.service entered failed state. May 04 16:34:16 ollie2.ringways.co.uk systemd[1]: clamd.service failed. May 04 16:34:16 ollie2.ringways.co.uk systemd[1]: clamd.service holdoff time over, scheduling restart. May 04 16:34:16 ollie2.ringways.co.uk systemd[1]: start request repeated too quickly for clamd.service May 04 16:34:16 ollie2.ringways.co.uk systemd[1]: Failed to start Home brewed module for the Clam Antivirus scanner. May 04 16:34:16 ollie2.ringways.co.uk systemd[1]: Unit clamd.service entered failed state. May 04 16:34:16 ollie2.ringways.co.uk systemd[1]: clamd.service failed. [root@ollie2 ~]# Can anyone tell me what happened to clamd.exim, and what I need to do to get it working again. For now I've had to comment out: # Deny if the message contains a virus. Before enabling this check, you # must install a virus scanner and set the av_scanner option above. # deny set acl_m0 = clamd:/var/run/clamd.exim/clamd.sock malware = * set acl_c_SPAM = 1 message = A virus has been detected ($malware_name).

1 1

c6, drbd and file systems
by John R Pierce 04 May '16

04 May '16

I have a pair of centos 6 systems, with a rather large raid thats DRBD replicated from box 1 to box 2... box 1 mounts this as /data when box 1 reboots, /data doesn't get mounted, but the drbd replication starts up just fine. the entry in fstab is... /dev/drbd0 /data xfs inode64 1 0 once the system is booted up, if I `mount /data`, it mounts just fine. I'm not using any sort of heartbeat or other HA management software, if box 1 fails, I'll manually configure box2 to take over after physically disabling box1 so it can't wake up a zombie. -- john r pierce, recycling bits in santa cruz

5 9

CentOS-announce Digest, Vol 135, Issue 2
by centos-announce-request＠centos.org 04 May '16

04 May '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2016:0714 CentOS 6 mod_nss BugFix Update (Johnny Hughes) 2. CEBA-2016:0713 CentOS 6 initscripts BugFix Update (Johnny Hughes) 3. CESA-2016:0715 Moderate CentOS 6 kernel Security Update (Johnny Hughes) 4. CEBA-2016:0717 CentOS 6 kdebase-workspace BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 3 May 2016 19:42:49 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2016:0714 CentOS 6 mod_nss BugFix Update Message-ID: <20160503194249.GA34891(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2016:0714 Upstream details at : https://rhn.redhat.com/errata/RHBA-2016-0714.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 6721dd9ce9edab03f763b556b9efe1f2b88bb98c587f7ea5326bc6f160f9e945 mod_nss-1.0.10-2.el6_7.i686.rpm x86_64: 9004453c2296db298f12473fa2b395daa60eee6cc90936a435f7cc78eac6fc99 mod_nss-1.0.10-2.el6_7.x86_64.rpm Source: aa71f2f7677c51de96b83855ee697f847a002598bd86a392ca2df78cf7edc704 mod_nss-1.0.10-2.el6_7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Tue, 3 May 2016 19:43:46 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2016:0713 CentOS 6 initscripts BugFix Update Message-ID: <20160503194346.GA35117(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2016:0713 Upstream details at : https://rhn.redhat.com/errata/RHBA-2016-0713.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 65ed46aeaddec92e92bbb9501164ef3800bb88ba16f3309a36e324a114b49d34 debugmode-9.03.49-1.el6.centos.5.i686.rpm f6efaf9160b02c157c0d72a6b9b44a306b17a0ee5c920733491abe54344b9d0e initscripts-9.03.49-1.el6.centos.5.i686.rpm x86_64: 505383d600b993ac8986f0557ba28ef65dc12b6e738e7fa5fb55cf5bdce966a2 debugmode-9.03.49-1.el6.centos.5.x86_64.rpm 74007651137890193f328fc113fc1fb79fdf6985fddce5a5d0232fb0efaeffd3 initscripts-9.03.49-1.el6.centos.5.x86_64.rpm Source: f6b1847129f1030e550ab1213f2113eb6bb172be943697da3fc7bfeefb198ab1 initscripts-9.03.49-1.el6.centos.5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Wed, 4 May 2016 03:07:19 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0715 Moderate CentOS 6 kernel Security Update Message-ID: <20160504030719.GA42738(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0715 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0715.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: c57558d0dae7aa07aa6f342ece99699686e120bcae889c64e2174c52b21fe0fa kernel-2.6.32-573.26.1.el6.i686.rpm 67f4925b7e037e25cba53451231122bfb6a02393b16bd18e1f99f27ba5f0ab7a kernel-abi-whitelists-2.6.32-573.26.1.el6.noarch.rpm 2288ce509385a0062f431eae0f24f69317ad5edb8f3415de318d4bf644a927a4 kernel-debug-2.6.32-573.26.1.el6.i686.rpm dfd9af9bca242bd2092107a37ee5f40fdbfaabaa0c143356a9b14c3972d7818e kernel-debug-devel-2.6.32-573.26.1.el6.i686.rpm e25a4c2dfe710a07eba43097f82cb5bb74326b5a879731a2100004df1683b9ac kernel-devel-2.6.32-573.26.1.el6.i686.rpm 588b5306cdd86ec5a77868ef58dc65a3f08b86f73c45f1b4aeba87e66be65a7b kernel-doc-2.6.32-573.26.1.el6.noarch.rpm 2f30e3d0a3f37f436f2e03f06e297f151573b70c4864c3cfe212cd9c45dba25b kernel-firmware-2.6.32-573.26.1.el6.noarch.rpm 49e84568ed669b5114071cb6f291fe2d4dcaf0bb8c4b81b578c358413924bb43 kernel-headers-2.6.32-573.26.1.el6.i686.rpm 13c4d01c55caf5c113597c7ab33372e69b3f3db603fb25a157b3bd1b6897250e perf-2.6.32-573.26.1.el6.i686.rpm 9e0a83aadee10727a33d0019f7fee30ce45671cb7eb85341363decd4b503d5d1 python-perf-2.6.32-573.26.1.el6.i686.rpm x86_64: dd926cd26ee29b5b3d662e4b56fd717a4e8fa7c6c6d34885ee7082f7841249df kernel-2.6.32-573.26.1.el6.x86_64.rpm 67f4925b7e037e25cba53451231122bfb6a02393b16bd18e1f99f27ba5f0ab7a kernel-abi-whitelists-2.6.32-573.26.1.el6.noarch.rpm 56e2f3a84b4dfa414d426e253c553b994ca7a345fceec2256022370b545a85d4 kernel-debug-2.6.32-573.26.1.el6.x86_64.rpm dfd9af9bca242bd2092107a37ee5f40fdbfaabaa0c143356a9b14c3972d7818e kernel-debug-devel-2.6.32-573.26.1.el6.i686.rpm 508bb7bf18dbf29a1f0c45c8f5fa5d59359a3106796efdd046454866f242365e kernel-debug-devel-2.6.32-573.26.1.el6.x86_64.rpm 457446da693c30100241eef365a1f87e768e2ea43899cc016231f16951feca6a kernel-devel-2.6.32-573.26.1.el6.x86_64.rpm 588b5306cdd86ec5a77868ef58dc65a3f08b86f73c45f1b4aeba87e66be65a7b kernel-doc-2.6.32-573.26.1.el6.noarch.rpm 2f30e3d0a3f37f436f2e03f06e297f151573b70c4864c3cfe212cd9c45dba25b kernel-firmware-2.6.32-573.26.1.el6.noarch.rpm a39f9b32d6db6ad1d6c125ee165043085650d1e5e32b5a2eaf1d2acb84ec4913 kernel-headers-2.6.32-573.26.1.el6.x86_64.rpm 636bbb3da90a573a1936d0cc7c80cbfda447e8936b066b58b033a8ae5a5bfbe6 perf-2.6.32-573.26.1.el6.x86_64.rpm 8570c7bb037ab090e953bf525569cb2935a9551e840a9c1351323075595af97c python-perf-2.6.32-573.26.1.el6.x86_64.rpm Source: cb53a6bf6389f7fd291562fc25c64c0ef72659b8a217dd3120d357a54ee81ae0 kernel-2.6.32-573.26.1.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Wed, 4 May 2016 10:39:24 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2016:0717 CentOS 6 kdebase-workspace BugFix Update Message-ID: <20160504103924.GA8627(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2016:0717 Upstream details at : https://rhn.redhat.com/errata/RHBA-2016-0717.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 587077044c62f85aa03244e66f2381b335de1f2316c811b8a26cc9af8a884454 kdebase-workspace-4.3.4-33.el6_7.i686.rpm 0b66c8ef112ca136ec640d419e785eb07bca0e9d64bf87011ea2999b173c19e6 kdebase-workspace-akonadi-4.3.4-33.el6_7.i686.rpm 2c9ad5ca10aa7f3cb6039674428b9997743e650746a3bb9b48aa67564460a35e kdebase-workspace-devel-4.3.4-33.el6_7.i686.rpm 1fcfc59285c6dd014bdc88ddcc492e03f271b27189b6d05ab2ca0d1aee56c91c kdebase-workspace-libs-4.3.4-33.el6_7.i686.rpm fd15af38ac3467dbe2e2a47fd4b57eacd089e8863e327e8a0b850a351d006bf7 kdebase-workspace-python-applet-4.3.4-33.el6_7.i686.rpm 982d638a6705180bb142a17fe4fae8558535be6e0e7f3ab8c553cbf8839a1b75 kdebase-workspace-wallpapers-4.3.4-33.el6_7.noarch.rpm da4e6515d5c7f14386676b27852e7cf1e303b4701ceca51dba2daaf93d30f2d0 kdm-4.3.4-33.el6_7.i686.rpm 3530578bc3a02f886db5d2c86c898bfd9cd3dafac197d8d313383926e1a3a8bb ksysguardd-4.3.4-33.el6_7.i686.rpm 9494adc6952ca48e18383b3ff9f5a4d868c0ad6a50fa1f6467e6de963285aaba oxygen-cursor-themes-4.3.4-33.el6_7.noarch.rpm x86_64: 52e363a8d81e69115846ac705090ff6dab166a6aabe0ebeafa6f9ac312d3f8e4 kdebase-workspace-4.3.4-33.el6_7.x86_64.rpm 2680a8a3021a8a7448ebe0651fbcd14767e5295bad2e3312ac6c70e7a69dd899 kdebase-workspace-akonadi-4.3.4-33.el6_7.x86_64.rpm 2c9ad5ca10aa7f3cb6039674428b9997743e650746a3bb9b48aa67564460a35e kdebase-workspace-devel-4.3.4-33.el6_7.i686.rpm 96793b85aa863d41dfc7c4dd8d411cd05e998b3f3dc6e1cfd297b8e1659259eb kdebase-workspace-devel-4.3.4-33.el6_7.x86_64.rpm 1fcfc59285c6dd014bdc88ddcc492e03f271b27189b6d05ab2ca0d1aee56c91c kdebase-workspace-libs-4.3.4-33.el6_7.i686.rpm f391dd8d36918e48a4b729d9eabfaa33c57823837cb33b62da7166c99bb8d788 kdebase-workspace-libs-4.3.4-33.el6_7.x86_64.rpm fad74d6d271c1ab5717376c268cde8e787df841d41225814cda9791d101bb205 kdebase-workspace-python-applet-4.3.4-33.el6_7.x86_64.rpm 982d638a6705180bb142a17fe4fae8558535be6e0e7f3ab8c553cbf8839a1b75 kdebase-workspace-wallpapers-4.3.4-33.el6_7.noarch.rpm d34729ccefc85a9a1c66613c1563f5e54f631340cccb8fe38141796464aa6fd3 kdm-4.3.4-33.el6_7.x86_64.rpm ec64aff8483dadeb241c1db5a4617060737d77c38760ad7f4831e04bde68dd00 ksysguardd-4.3.4-33.el6_7.x86_64.rpm 9494adc6952ca48e18383b3ff9f5a4d868c0ad6a50fa1f6467e6de963285aaba oxygen-cursor-themes-4.3.4-33.el6_7.noarch.rpm Source: 32e2aaa39dd509d7eea46b755b7a0a5f159381802dacbeec0b6a8e8f684459e8 kdebase-workspace-4.3.4-33.el6_7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 135, Issue 2 ***********************************************

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss May 2016