Discuss February 2019

discuss@lists.centos.org

97 participants
77 discussions

Did I install too much for clamav?
by Robert Moskowitz 08 Feb '19

08 Feb '19

I just checked the status of amavisd: # systemctl -l status amavisd ● amavisd.service - Amavisd-new is an interface between MTA and content checkers. Loaded: loaded (/usr/lib/systemd/system/amavisd.service; enabled; vendor preset: disabled) Active: active (running) since Thu 2019-02-07 08:16:59 EST; 7h ago Docs: http://www.ijs.si/software/amavisd/#doc Process: 5715 ExecStart=/usr/sbin/amavisd -c /etc/amavisd/amavisd.conf (code=exited, status=0/SUCCESS) Main PID: 6327 (/usr/sbin/amavi) CGroup: /system.slice/amavisd.service ├─6327 /usr/sbin/amavisd (master) ├─6336 /usr/sbin/amavisd (virgin child) └─6337 /usr/sbin/amavisd (virgin child) Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Found decoder for .lha at /usr/bin/7z Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Found decoder for .iso at /usr/bin/7z Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Found decoder for .exe at /usr/bin/unarj Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Using primary internal av scanner code for ClamAV-clamd Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Found secondary av scanner ClamAV-clamscan at /usr/bin/clamscan Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Deleting db files __db.002,snmp.db,nanny.db,__db.001,__db.003 in /var/spool/amavisd/db Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Creating db in /var/spool/amavisd/db/; BerkeleyDB 0.51, libdb 5.3 Feb 07 08:17:00 klovia.htt-consult.com amavis[6327]: initializing Mail::SpamAssassin (0) Feb 07 08:17:08 klovia.htt-consult.com amavis[6327]: SpamControl: init_pre_fork on SpamAssassin done Feb 07 08:17:08 klovia.htt-consult.com amavis[6327]: extra modules loaded after daemonizing/chrooting: /usr/lib/perl5/vendor_perl/auto/Net/SSLeay/autosplit.ix, /usr/lib/perl5/vendor_perl/auto/Net/SSLeay/randomize.al, /usr/share/perl5/Net/libnet.cfg, IO/Socket/SSL.pm, Mail/SpamAssassin/Plugin/FreeMail.pm, Mail/SpamAssassin/Plugin/SpamCop.pm, Net/Cmd.pm, Net/Config.pm, Net/SMTP.pm, Net/SSLeay.pm Primary and secondary AV scanner? Is this right? I installed: # grep clam /var/log/yum.log* /var/log/yum.log:Feb 06 08:40:06 Installed: clamav-filesystem-0.101.1-1.el7.noarch /var/log/yum.log:Feb 06 08:40:29 Installed: clamav-lib-0.101.1-1.el7.armv7hl /var/log/yum.log:Feb 06 08:40:30 Installed: clamav-update-0.101.1-1.el7.armv7hl /var/log/yum.log:Feb 06 08:40:59 Installed: clamav-devel-0.101.1-1.el7.armv7hl /var/log/yum.log:Feb 06 08:41:01 Installed: clamav-0.101.1-1.el7.armv7hl /var/log/yum.log:Feb 06 08:46:16 Installed: clamd-0.101.1-1.el7.armv7hl /var/log/yum.log:Feb 06 08:46:17 Installed: clamav-server-systemd-0.101.1-1.el7.armv7hl thanks

2 2

CentOS 7.6 update with gettimeofday()
by david allan finch 08 Feb '19

08 Feb '19

In my app compiled on another linux I am getting Assertion 'clock_gettime(clock_id, &ts) == 0' failed at src/shared/time-util.c:34, function now(). Aborting. when calling gettimeofday() on an update CentOS (did not fail in 7.5). Is it possible that the update has changed the size of the types in the timeval struct and causing the crash? Or has there be some for of bug fix etc? Regards

2 1

netmask on aliases overriden by netmask on interface
by James B. Byrne 08 Feb '19

08 Feb '19

CentOS-6.10 We have a host with the following ifcfg file contents: BOOTPROTO=none BROADCAST="" DEFROUTE=yes DEVICE=eth1 . . . GATEWAY=X.Y.Z.234 IPADDR=A.B.C.2 IPV4_FAILURE_FATAL=yes NAME="LAN Link - eth1" NETMASK="255.255.255.128" NETWORK="A.B.C.0" NM_CONTROLLED=no ONBOOT=yes PREFIX=25 TYPE=Ethernet USERCTL=no And an aliased ifcfg containing this: BOOTPROTO="none" BROADCAST="192.168.8.255" DEVICE="eth1:192008001" IPADDR="192.168.8.1" IPV6INIT="no" NETMASK="255.255.255.0" NETWORK="192.168.8.0" ONPARENT="yes" However, ifconfig shows this: # ifconfig eth1:192008001 eth1:192008001 Link encap:Ethernet HWaddr 00:25:90:61:74:C1 inet addr:192.168.8.1 Bcast:192.168.8.255 Mask:255.255.255.128 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 Interrupt:17 Memory:feae0000-feb00000 Which shows that the network mask is determined by the interface mask and is not overridden by the alias definition. Is this expected behaviour? Does this mean that a particular physical interface cannot belong to more than one network, or at least not to networks having differing cidr masks? -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

C7, enable an abrt for a daemon
by mark 08 Feb '19

08 Feb '19

I've mentioned here before that gssproxy is crashing all over the place with a SEGV. However, there's no /var/spool/abrt/... when it does. How do I enable the daemon to give me an abrt with information? I'm just not sure of what the right word is for systemd, so online searching isn't always useful. Thanks in advance. mark

1 0

systemd
by Jerry Geis 08 Feb '19

08 Feb '19

Hi All - I have a systemd service file to start my application. Part of my service file is: [Service] Type=forking ExecStart=/path to start ExecStop=/path to stop RemainAfterExit=yes This works fine "normally". However - when I do a "yum update; and reboot" my script detects a kernel change and now does a number of "recompiling" steps for drivers and such before starting my application. Somewhere along the way that just stops. I'm half way into recompiling those drivers and it just stops. Is there something else I need in the service file ? Thanks Jerry

3 2

CentOS 6 and 389 Directory Server
by Eugene Poole 07 Feb '19

07 Feb '19

I'm not sure it this is the correct location to ask these questions, but ... In the past when I worked for a living the place where I worked had thousands of RHEL Linux servers on various hardware, but the access was controlled by Windows Active Directory and a third party piece of software that was the middle-man between the 2. Now that I no longer work I'm trying to build a CentOS Linux environment where the access is controlled by 389-Directory Server. But I have no practical experience with 389-Directory Server (Question 1) so I'm looking for a tutorial or 'How To' to put information into 389-DS from a machine that is currently running? (Question 2) Can I export the 389-DS database to a LDIF file, migrate my machine from CentOS 6 to CentOS 7 by doing a fresh CentOS 7 install. Install 389-DS and import the just created LDIF file? I want to use 389-DS (or OpenLDAP) because as my environment grows defining everything locally is becoming hard to be exact. Any comments will be helpful TIA -- Eugene Poole Woodstock, Georgia

2 1

Pb with bounding
by Pierre Malard 07 Feb '19

07 Feb '19

Hi, We have a Dell server with 4 Ethernet interface. I would to aggregate them in a bond. Everything work but the default gateway doesn’t work on the « bond0 » interface and I have no links. My configuration: - CentOS 7: :/etc/sysconfig/network-scripts# uname -a Linux nas-mtd2 3.10.0-957.5.1.el7.x86_64 #1 SMP Fri Feb 1 14:54:57 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux - NetworkManager disabled: :/etc/sysconfig/network-scripts# systemctl list-unit-files | grep NetworkManager NetworkManager-dispatcher.service disabled NetworkManager-wait-online.service disabled NetworkManager.service disabled - ifcfg-em1 to em4 (they are identical): :/etc/sysconfig/network-scripts# cat ifcfg-em2 NAME=bond0-slave[1 to 4] DEVICE=em[1 to 4] TYPE=Ethernet BOOTPROTO=none ONBOOT=yes MASTER=bond0 SLAVE=yes NM_CONTROLLED=no - the bond0 declaration: :/etc/sysconfig/network-scripts# cat ifcfg-bond0 DEVICE=bond0 TYPE=Ethernet BONDING_MASTER=yes BOOTPROTO=none ONBOOT=yes NM_CONTROLLED=no # IP IPADDR=172.16.1.128 PREFIX=16 GATEWAY=172.16.0.254 # Bonding BONDING_OPTS="mode=802.3ad ad_select=stable use_carrier=1 miimon=100 arp_ip_target=172.16.1.128 updelay=100 lacp_rate=fast" USERCTL=no After a « systemctl restart network »: :/etc/sysconfig/network-scripts# ip a 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever 2: em1: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP group default qlen 1000 link/ether d0:94:66:65:32:0e brd ff:ff:ff:ff:ff:ff 3: em2: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff 4: em3: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff 5: em4: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff 6: bond0: <BROADCAST,MULTICAST,MASTER,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff inet 172.16.1.128/16 brd 172.16.255.255 scope global bond0 valid_lft forever preferred_lft forever And the route command: :/etc/sysconfig/network-scripts# ip r default via 172.16.0.254 dev bond0 169.254.0.0/16 dev bond0 scope link metric 1006 169.254.0.0/16 dev bond0.10 scope link metric 1008 172.16.0.0/16 dev bond0 proto kernel scope link src 172.16.1.128 but their is no network connection on « bond0 »! The only way I found to have a network active connection is keeping my first interface outside the bond and having the default route on this one! In this case I have a specific IP to it and a bond one on bound. As I must have also a VLAN connection on the bound, I have create a « ifcfg-bond0.10 » file: :/etc/sysconfig/network-scripts# cat ifcfg-bond0.10 NAME=bond0.10 DEVICE=bond0.10 #TYPE="Ethernet" VLAN=yes NM_CONTROLLED=no ONPARENT=yes DEFROUTE="no" # IP IPADDR=XXX.XXX.XXX.142 NETMASK=255.255.255.0 NETWORK=XXX.XXX.XXX.0 BROADCAST=XXX.XXX.XXX.255 PREFIX=24 GATEWAY=1XXX.XXX.XXX.126 With that and the first Ethernet interface on a specific address I have: :/etc/sysconfig/network-scripts# ip a 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever 2: em1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000 link/ether d0:94:66:65:32:0e brd ff:ff:ff:ff:ff:ff inet 172.16.1.86/16 brd 172.16.255.255 scope global em1 valid_lft forever preferred_lft forever 3: em2: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff 4: em3: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff 5: em4: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff 6: bond0: <BROADCAST,MULTICAST,MASTER,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff inet 172.16.1.128/16 brd 172.16.255.255 scope global bond0 valid_lft forever preferred_lft forever 8: bond0.10@bond0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000 link/ether d0:94:66:65:32:10 brd ff:ff:ff:ff:ff:ff inet XXX.XXX.XXX.142/24 brd XXX.XXX.XXX.255 scope global bond0.10 valid_lft forever preferred_lft forever :/etc/sysconfig/network-scripts# ip r default via 172.16.0.254 dev em1 169.254.0.0/16 dev em1 scope link metric 1002 169.254.0.0/16 dev bond0 scope link metric 1006 169.254.0.0/16 dev bond0.10 scope link metric 1008 172.16.0.0/16 dev em1 proto kernel scope link src 172.16.1.86 172.16.0.0/16 dev bond0 proto kernel scope link src 172.16.1.128 XXX.XXX.XXX.0/24 dev bond0.10 proto kernel scope link src XXX.XXX.XXX.142 And everything is working. But… I am not satisfy. Is it normal? Is it a way to have all the Ethernet link on a bond? Your help is needed :-) Best wishes -- Pierre Malard « Si l'on veut croire en l'humanité, il faut voir et comprendre l'inhumanité » |\ _,,,---,,_ /,`.-'`' -. ;-;;,_ |,4- ) )-,_. ,\ ( `'-' '---''(_/--' `-'\_) πr perl -e '$_=q#: 3|\ 5_,3-3,2_: 3/,`.'"'"'`'"'"' 5-. ;-;;,_: |,A- ) )-,_. ,\ ( `'"'"'-'"'"': '"'"'-3'"'"'2(_/--'"'"' `-'"'"'\_): 24πr::#;y#:#\n#;s#(\D)(\d+)#$1x$2#ge;print' - --> Ce message n’engage que son auteur <--

2 2

reinstall
by Jerry Geis 05 Feb '19

05 Feb '19

I have a C7 7.6.1810 install that I wish to "reinstall". when I run "yum reinstall \* " I get a long list of items saying will be updated or will be installed but then nothing happens - nothing is re-downloaded etc... How do I get the system to actual download all current packages and re-install them ? Thanks, Jerry

1 0

Problem Webinstall Centos 7 on Acer S2000 32 Bit.
by Ger van Dijck 05 Feb '19

05 Feb '19

Hi Centos World , I am trying to install Centos 7 (i686) on an Acer 2000 PC and I get following message(s) : [0117110] ACPI : SCI (ACPI GSIG) not registered . [26.532360] systemd [1] : caught <ILL> , dumped core as pid 76. [26.532956] systemd [1] : Freezing execution. My question is : What is wrong and how can I solve this problem ? Maybe a fresh install ? Regards , Ger van Dijck . -- Using Opera's mail client: http://www.opera.com/mail/

1 1

Back to c7 and firewalld
by mark 05 Feb '19

05 Feb '19

If I've missed someone's response, apologies. As I said, my converted rules seem fine, and I can run the script that issues a bunch of direct rules for the built-in FORWARD rule... but when I try firewall-cmd --reload, it tells me error, that FORWARD is a built-in. Now, today, what I've been looking at is to run iptables-save, and what I see is this (in part): -A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -A FORWARD -i lo -j ACCEPT -A FORWARD -j FORWARD_direct -A FORWARD -j FORWARD_IN_ZONES_SOURCE -A FORWARD -j FORWARD_IN_ZONES -A FORWARD -j FORWARD_OUT_ZONES_SOURCE -A FORWARD -j FORWARD_OUT_ZONES -A FORWARD -m conntrack --ctstate INVALID -j DROP -A FORWARD -j REJECT --reject-with icmp-host-prohibited Does this mean that, instead of the format of the entry of the rule being firewall-cmd --permanent --direct --add-rule ipv4 filter FORWARD <actual rule) that it should, instead, be firewall-cmd --permanent --direct --add-rule ipv4 filter FORWARD_direct <actual rule> ? And if that's what I need to do, that's fine, but I have found *zero* documentation about that. Everything I have found about adding direct rules to a built-in chain don't mention it. Is this so new, it's not documented? mark

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss February 2019