Discuss May 2017

discuss@lists.centos.org

112 participants
94 discussions

Getting to Mate or Xfce
by Beartooth 25 May '17

25 May '17

My wife bought a new Thinkpad, on which we had the shop install CentOS 7 (I *think* it's 7.3.) Alas!, I didn't think to specify NOT Gnome, in thunder. So of course I got it. I've tried several times to force myself to accommodate Gnome3, always with no joy. How do I get Mate or Xfce instead? Related problem: when I become root and tell it "yum update," it figures out a list of umpteen hundred rpms to update, but then runs through attempts at mirrors and keeps failing till it runs out. It failed to connect to my wireless router (or even to find it, afaict). So I plugged it into the router with an ethernet cable. No joy.

6 6

iptables
by Chad Cordero 25 May '17

25 May '17

I have an old postfix server that was historically used by the campus as an outbound gateway. The campus is now supposed to use a different server running HAProxy with several backe-end postfix servers. I am using iptables on CentOS 7 to log and block smtp and submission traffic not coming from my front-end HAProxy server (with a few exceptions for testing and monitoring). What I would like to do is log and redirect the connection to the proxy server. How do I do this? # cat /etc/sysconfig/iptables # Generated by iptables-save v1.4.21 on Wed May 24 12:22:03 2017 *filter :INPUT DROP [0:0] :FORWARD DROP [0:0] :OUTPUT ACCEPT [134:13069] :LOGGING - [0:0] -A INPUT -i lo -j ACCEPT -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT … -A INPUT -s 139.182.75.64/27 -p tcp -m tcp --dport 25 -j ACCEPT -A INPUT -s 139.182.111.0/24 -p tcp -m tcp --dport 25 -j ACCEPT -A INPUT -s 139.182.249.25/32 -p tcp -m tcp --dport 25 -j ACCEPT -A INPUT -s 139.182.249.254/32 -p tcp -m tcp --dport 25 -j ACCEPT -A INPUT -s 139.182.75.64/27 -p tcp -m tcp --dport 587 -j ACCEPT -A INPUT -s 139.182.111.0/24 -p tcp -m tcp --dport 587 -j ACCEPT -A INPUT -s 139.182.249.25/32 -p tcp -m tcp --dport 587 -j ACCEPT -A INPUT -s 139.182.249.254/32 -p tcp -m tcp --dport 587 -j ACCEPT … -A INPUT -j LOGGING -A LOGGING -m limit --limit 2/min -j LOG --log-prefix "IPTables-Dropped: " -A LOGGING -j DROP COMMIT # Completed on Wed May 24 12:22:03 2017 --- Chad Cordero Information Technology Consultant Enterprise & Cloud Services Information Technology Services California State University, San Bernardino 5500 University Pkwy San Bernardino, CA 92407-2393 Main Line: 909/537-7677 Direct Line: 909/537-7281 Fax: 909/537-7141 http://support.csusb.edu/ --- Disclaimer: This e-mail message is for the sole use of the intended recipient(s) and may contain confidential and privileged information protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer.

1 0

System Time Source
by Chris Olson 25 May '17

25 May '17

One of our STEM interns recently observed that there are inexpensive clocks that sync via radio to standard time services. This begged a question about why every computer would not have a radio module to receive time. Our senior staff did not have a good answer or if time from such a radio module would be supported by the operating system. When I was a student, such questions would have earned me extra homework assignments. We now have only PC directed relationships with interns so we don't assign any extra homework for curiosity. Can anyone help with the answers? Thanks and best regards.

12 17

CentOS6 and squid34 package ...
by Walter H. 25 May '17

25 May '17

Hello what is the essential difference between the default squid package and this squid34 package, as I have problems using this squid34 package for FTP connections; there are no shown icons, when going to e.g. ftp://ftp.adobe.com/ when I tell the browser to show the image then I get this squid generated message ... the same config /etc/squid/squid.conf works with the default squid package ... <message> While trying to retrieve the URL: http://proxy.local:3128/squid-internal-static/icons/silk/folder.png <http://zbox-ci323.waldinet.local:3128/squid-internal-static/icons/silk/fold…> The following error was encountered: * *Access Denied. * Access control configuration prevents your request from being allowed at this time. Please contact your service provider if you feel this is incorrect. Your cache administrator is ... ------------------------------------------------------------------------ Generated Thu, 25 May 2017 06:50:02 GMT by proxy.local (squid/3.4.14) </message> has anybody the hint for me, what is wrong ..., here is the /etc/squid/squid.conf <squid.conf> acl localnet src 192.168.1.0/24 acl SSL_ports port 443 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 # https acl Safe_ports port 70 # gopher acl CONNECT method CONNECT http_access deny !Safe_ports http_access deny CONNECT !SSL_ports http_access allow localhost manager http_access deny manager http_access deny to_localhost http_access allow localnet http_access allow localhost http_access deny all http_reply_access allow all http_port 3128 cache_dir ufs /var/spool/squid 16400 16 256 coredump_dir /var/spool/squid nonhierarchical_direct off visible_hostname proxy.local unique_hostname proxy.local forwarded_for off cache_mem 2560 MB icon_directory /usr/share/squid/icons error_directory /etc/squid/errors as_whois_server whois.ra.net logformat combined %>A %[ui %[un [%tl] "%rm %ru HTTP/%rv" %>Hs %<st "%{Referer}>h" "%{User-Agent}>h" %Ss:%Sh access_log /var/log/squid/access.log combined refresh_pattern ^ftp: 1440 20% 10080 refresh_pattern ^gopher: 1440 0% 1440 refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 refresh_pattern . 0 20% 4320 </squid.conf> the same host has a running apache, where host proxy.local is a password protected web, which has the folling for port 80 <virt. host> RewriteCond %{HTTP_HOST} ^proxy\.local(:80)?$ [NC] RewriteRule ^/(.*)$ https://proxy.local/$1 [L,R=301] </virt. host> for port 443 <virt. host> <Location /> AuthName Firewall/Router AuthType Basic AuthUserFile /var/www/passwrds Require User admin </Location> </virt. host> /var/log/squid/access.log has this ... <squid log> client - - [25/May/2017:08:50:02 +0200] "GET http://proxy.local:3128/squid-internal-static/icons/silk/folder.png HTTP/1.1" 403 1655 "ftp://ftp.adobe.com/" "UserAgent" TCP_DENIED:HIER_NONE </squid log> the apache doesn't log anything in connection with this ... has anybody the hint for me, what is causing this? Thanks, Walter

1 0

System Time Source Responses
by Chris Olson 25 May '17

25 May '17

It looks like we may have hit on a popular subject with the questions about system time sources. Thanks for all of the responses. Our intern and senior software staff now have useful information and new perspective.

1 0

network setup: meaning of PEERROUTES option
by hw 24 May '17

24 May '17

Hi, what´s the meaning of the PEERROUTES option in the networking scripts? I couldn´t find that documented anywhere. I managed to set up a bonding interface and when sending pings, I´m getting redirection messages from the gateway unless I manually add a route to the network. So I guess that for some reason, the routing doesn´t get set up correctly, and I wonder how to get that to work. Am I missing the PEERROUTES option, or does that do something else?

2 1

local ephemeral ports usage and distribution / inet_csk_get_port()
by Ferreol Lnx 24 May '17

24 May '17

Hello I'm using CentOS Linux release 7.3.1611 (Core) with kernel 3.10.0-514.16.1.el7.x86_64 Using iperf for bond benchmarking, and opening several sockets, I noticed a strange behavior. My Centos using iperf as a client to connect to an iperf server (running either CentOS or Debian) requesting N parallel TCP connections. I notice that the local ephemeral ports used are not consecutive and are always even ports numbers. This can change to "only odd ports numbers" depending on the setting net.ipv4.ip_local_port_range, but basically, the idea is the Centos kernel does "+2" when finding a local port for socket, not doing +1. Doing a netstat, generally speaking, only even (or odd) local ports are used so this does not seem application dependent. It's possible, however, to request both odd and even local ports, when requesting to bind them explicitly and not letting kernel function "inet_csk_get_port" determining it. To compare to another distro, Debian 7 3.2.78-1 x86_64 does increment local port number by +1 when opening sockets, using both even and odd local sockets numbers. This has an influence when doing network interfaces bonding with LACP 801.3ad with layer3+4 hashing policy, because the trafic to one remote host/service will improperly be balanced over bonded interfaces with Centos. Is there any known kernel patch or reason to explain this behavior ? thanks for any hints. best regards FdeS

1 0

CentOS-announce Digest, Vol 147, Issue 5
by centos-announce-request＠centos.org 24 May '17

24 May '17

1 0

CentOS 6.8 and samba
by isdtor 23 May '17

23 May '17

Other than the original 6.8 release version 3.6.23-33, samba has not been functioning correctly for me under 6.8. The symptoms are that about 6-7 days after starting the server, users start complaining that they can no longer open documents on their share. Upon inspection, I find several, sometimes nearly a dozen smb processes owned by a single user, on top of those run under root. Stopping the service does not stop these processes. They are only killable with SIGKILL, and after that, a service restart does not result in a functioning service, i.e. connections are refused, which can be verified easily with smbclient. The only cure is a server reboot. And it is not the same user id every time it happens. Useful logs of any type are not available. I have tested -35 and -36, both show the same behaviour. This is a production server and I have no time for tinkering; downgrading to -33 and blocking samba updates is the only workaround for now.

6 12

CentOS-announce Digest, Vol 147, Issue 4
by centos-announce-request＠centos.org 23 May '17

23 May '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2017:1265 Moderate CentOS 7 samba Security Update (Johnny Hughes) 2. CESA-2017:1264 Important CentOS 7 kdelibs Security Update (Johnny Hughes) 3. CESA-2017:1262 Important CentOS 7 rpcbind Security Update (Johnny Hughes) 4. CESA-2017:1263 Important CentOS 7 libtirpc Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 22 May 2017 16:26:22 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:1265 Moderate CentOS 7 samba Security Update Message-ID: <20170522162622.GA45032(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:1265 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-1265.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 87f3041a57ee5ae9cab106a52453c7448378af844d78cd9b5b4dc2e1edc074a8 ctdb-4.4.4-13.el7_3.x86_64.rpm 6da6bdebf3976a903782cccc3b3eefc7e10f7257222aae625861051b92ca1a6c ctdb-tests-4.4.4-13.el7_3.x86_64.rpm 64c272f417ee271b7c12448322c320dc10445f88308494bdad738c569f70a008 libsmbclient-4.4.4-13.el7_3.i686.rpm fda4b264959ab24d720e57d908cf6b3a6cd16da0f099c9436b5b565f2910b590 libsmbclient-4.4.4-13.el7_3.x86_64.rpm 46f6ee213fc34fb9beb56cc4bb16cf00cea26ab715b37ae3c6b4a642308b6c99 libsmbclient-devel-4.4.4-13.el7_3.i686.rpm db1fc9912ea4320f0a42c3cea0fe7719312a95b883590d9967dabeec1aa3e5dc libsmbclient-devel-4.4.4-13.el7_3.x86_64.rpm a4c2a10e4d778f59c4e0f0cfeb36d47a84b3645a4f04c46ba2d81dd236c36305 libwbclient-4.4.4-13.el7_3.i686.rpm 1902ca4ca7dd60b90ca114035380ae707ebc5ef143fd9eb615f5e2c1cd974d03 libwbclient-4.4.4-13.el7_3.x86_64.rpm 7925ae6065f9de888b4df6317c219e90f330929da55ba18eff473cc6b5b7f05f libwbclient-devel-4.4.4-13.el7_3.i686.rpm 8683f0db33c1eac68a8f9df5bb112bc2fba0d03c560c7394e0ea6ceff06fcafb libwbclient-devel-4.4.4-13.el7_3.x86_64.rpm 1af0d447e22395bc73a27d096fdd463ee24bfbc13d61c26ff04ad01076b48093 samba-4.4.4-13.el7_3.x86_64.rpm 66de169c17078f8adafd1f9195d70193f453c10a7370e2a6607c37f543f4fa23 samba-client-4.4.4-13.el7_3.x86_64.rpm f2e7d714bcf7d689fe85c42f6de03ae0585ee9499cea6f04cedce06e057c03aa samba-client-libs-4.4.4-13.el7_3.i686.rpm 4fe84e05f773566ce25fdad4327a1f07d531eb45511212850574326df03062fa samba-client-libs-4.4.4-13.el7_3.x86_64.rpm 61f0afc67bf74e585c7a9ea7ae6706bd31b89ade09f0b143c39f361c80a7036e samba-common-4.4.4-13.el7_3.noarch.rpm 9e8196dd3c4cb4c429c3308a3e54274050805dbe66fe91b9ee45105be3155ef0 samba-common-libs-4.4.4-13.el7_3.x86_64.rpm 9bb13f57e44808322a3aa249bb29a085b068119cb6d1588735898e739351adf2 samba-common-tools-4.4.4-13.el7_3.x86_64.rpm 5454679d0b23895921f70e0e2e32ac7ea419a2c4c364f9d78f3bead74c112c23 samba-dc-4.4.4-13.el7_3.x86_64.rpm f992afe08f34cdec0ce7d5e993166d9b4b0229922034cacf97acc5c51e58ef56 samba-dc-libs-4.4.4-13.el7_3.x86_64.rpm b933f35d3228697c31b19aa947a7a1918c367929e1a7f93b629bbb3b6cff287a samba-devel-4.4.4-13.el7_3.i686.rpm a7cd27846531c3cba9a3adf73906700be0d89ff1e7478adabc0e373e851bc487 samba-devel-4.4.4-13.el7_3.x86_64.rpm 7614bd860d72f18585e5e5378525c6c0174d739c14e1d9177c060333a05a2149 samba-krb5-printing-4.4.4-13.el7_3.x86_64.rpm 6ad331fa053f8e99b9bcfc8b01d162acc84503f8e7abd55e49cd7ac83197ba4e samba-libs-4.4.4-13.el7_3.i686.rpm 03eefe547b37f3b8e1b821eafe657697e8b42811d63a9b6034d17ffe32bee711 samba-libs-4.4.4-13.el7_3.x86_64.rpm 2d0c871d224761b8c23fa669cd9eae34daa3723345212fe3d4269bbf60ef192a samba-pidl-4.4.4-13.el7_3.noarch.rpm c7c98de78c15b7e89028f72afd5818ed8340992de01a701993da9ec32624ea66 samba-python-4.4.4-13.el7_3.x86_64.rpm dde2ea6c04db36ded74a1df07270d6074c28b981f7e8f4e1507dcfb866e66b67 samba-test-4.4.4-13.el7_3.x86_64.rpm 6998106a6f0cff5b4f9a99c73f28b521b007df3d993ad62d0a07e20306b91d3e samba-test-libs-4.4.4-13.el7_3.i686.rpm 2ba737421a58044621b427c919bd51779bf078714d9d5a12a7f9387205c9b7a3 samba-test-libs-4.4.4-13.el7_3.x86_64.rpm c23517db31ebfaabce6122aa07ae036a7c96ec06ef90d2500d46841199f69770 samba-vfs-glusterfs-4.4.4-13.el7_3.x86_64.rpm e7affb4bc403411c40f7a08dc9268a6c55ee56edf43f280ea84821cd95e39d9a samba-winbind-4.4.4-13.el7_3.x86_64.rpm bdbb8a2be95c9d97aa3457ce42dcab4bf3716bed0cd3fe1b030deb7761901ee2 samba-winbind-clients-4.4.4-13.el7_3.x86_64.rpm e86b3e9f536f34f2a3e504f76b88db584a6edac3a71b0d3f0cebed4dc8f851f4 samba-winbind-krb5-locator-4.4.4-13.el7_3.x86_64.rpm cc01f1c5f9697d1e0f3c80f02c7e34fafd706f629596612ea9c8d76f27333042 samba-winbind-modules-4.4.4-13.el7_3.i686.rpm 52008986fb74177ceca12402970760a4d3dbf77e05b54a139f6233fe854b4e1b samba-winbind-modules-4.4.4-13.el7_3.x86_64.rpm Source: 9be3848e21123fc916dcc8a357f1b628682bdd92b42c806fc810dc350ffcd753 samba-4.4.4-13.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Mon, 22 May 2017 16:27:46 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:1264 Important CentOS 7 kdelibs Security Update Message-ID: <20170522162746.GA45138(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:1264 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-1264.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: f3e22666fba8c8111928a8f24136d3c9264c9ff493a7ed9e835a6bf5d7ce7140 kdelibs-4.14.8-6.el7_3.i686.rpm 94f689579faf8da4d7ad45123bb2c06bc11489165fef94b6147f51d31bcb30e8 kdelibs-4.14.8-6.el7_3.x86_64.rpm f7b0fc9c737d4b1bde539fe0ad6244197f2f33394af0681cfcf57140b5298b2a kdelibs-apidocs-4.14.8-6.el7_3.noarch.rpm 954c2ecab2f8bb2366f3b1877650dde9756c351b9a05143c9bde1d932decb191 kdelibs-common-4.14.8-6.el7_3.x86_64.rpm 873ec7107fc9f785552ed6364cab5177843b68eee619ddb23581980fcca75cc2 kdelibs-devel-4.14.8-6.el7_3.i686.rpm 8ba9a2644e75f5e404f6a41070fa4954e9e309ecc8e1fd6342b56cdc307c877c kdelibs-devel-4.14.8-6.el7_3.x86_64.rpm 0119fe8e7df71838bf35a67f96888e310b7f25f8c86282acf8474b03ae7326d5 kdelibs-ktexteditor-4.14.8-6.el7_3.i686.rpm 64978ded4630c6f325b78170824280d86bf2a1566232b9e8e5025992162ab858 kdelibs-ktexteditor-4.14.8-6.el7_3.x86_64.rpm Source: c2931314523bca3fb71d17d9da6bc61d118021c46ac3f70c7f4290b0b000900c kdelibs-4.14.8-6.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Mon, 22 May 2017 16:28:00 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:1262 Important CentOS 7 rpcbind Security Update Message-ID: <20170522162800.GA45200(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:1262 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-1262.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 9a1fa40b82e9edf90ecf7be9f2d8cc5a82cfb29d1715fee8e92934a5e28f4756 rpcbind-0.2.0-38.el7_3.x86_64.rpm Source: fe79bbfae44b1d853e0094063c9969433741aa668cee620fa43575bcfcd3dae8 rpcbind-0.2.0-38.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Mon, 22 May 2017 16:28:17 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:1263 Important CentOS 7 libtirpc Security Update Message-ID: <20170522162817.GA45269(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:1263 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-1263.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: c3335fa4f02ac6905a98a90e4edc9d520f5b654ab12634971afd148f61236a96 libtirpc-0.2.4-0.8.el7_3.i686.rpm 27af85f33e8eb8fdf75eb15f9ba9c42ccccafd38d84c423a108f44f2e459b6bb libtirpc-0.2.4-0.8.el7_3.x86_64.rpm 1271313afac68fc2f1dca601e55fb47377d906465eeea8fd17ab5967a005314a libtirpc-devel-0.2.4-0.8.el7_3.i686.rpm 09951955a070ede720c6f54f5d3eccc2817247c1b641dfb08e0bf1c92ccfa2f9 libtirpc-devel-0.2.4-0.8.el7_3.x86_64.rpm Source: 0bf32a9fcca7b97bb91e0f56edf32dcc5a41be35b9c39b53418b45bd16b2ae5f libtirpc-0.2.4-0.8.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 147, Issue 4 ***********************************************

1 0

← Newer
1
2
3
4
5
6
7
8
9
10
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss May 2017