Discuss April 2019

discuss@lists.centos.org

89 participants
83 discussions

FYI: C 7, broken cron, sort of SOLVED
by mark 17 Apr '19

17 Apr '19

I was fighting this a few weeks ago, and asking here. I *finally* solved it yesterday... and the answer isn't pleasant. Running the command authconfig --enablesssd --enablesssdauth --enablesmartcard --smartcardmodule=sssd --smartcardaction=0 --updateall breaks crond, as per bugzilla # Bug 1650314. The way that it breaks it is to insert into /etc/pam.d/password-auth-ac two lines reading auth required pam_deny.so one as the third line in the auth stanza, so: auth required pam_env.so auth required pam_faildelay.so delay=2000000 auth required pam_deny.so auth [default=1 ignore=ignore success=ok] pam_succeed_if.so uid >= 1000 quiet auth [default=1 ignore=ignore success=ok] pam_localuser.so auth sufficient pam_unix.so nullok try_first_pass auth requisite pam_succeed_if.so uid >= 1000 quiet_success <...> and the other where it belongs, as the last auth line. This is clearly a bug in the code, as pam_deny.so should ONLY be the *last* line in the auth stanza. We've replicated this on an RHEL workstation, and then put a ticket in. The... odd reply (so far) was that they weren't going to fix it in the 7.7 errata, and to use authselect in 8.0 (which is only a beta release). We're going to escalate this. In the meantime, if anyone has run into this, delete that auth required pam_deny.so that's in the middle of the auth stanza in /etc/pam.d/password-auth-ac, it should *only* be at the end of the auth stanza, and everything will work correctly. mark

1 0

A strange situation with MegaCli64 and smartctl
by mark 17 Apr '19

17 Apr '19

We have a system - it's C 7 - that a while back lost three drives of a large array. The other admin here replaced the failed drives, but never went through the MegaRAID replace series of commands. I've just brought it back up and put a new filesystem on it, but here's what's odd: if I do smartctl -a -d megaraid,x /dev/sda, where x=drive number, for all the other drives, I get smart info. For those three, I get Smartctl open device: /dev/sda [megaraid_disk_11] failed: INQUIRY failed However, if I run any commend with MegaCli64, it sees the drives fine. It's as though smartctl has cached some info, somewhere.... Any thoughts? NOTE: after a good bit of searching online, I found someone's cmts that on *some* cards, the drive number starts at 8. Oh, and when I tried that, I got "enclosure", and the actual drives show at 9.... mark

1 0

how to install Xorg X11 libXss runtime library
by qw 17 Apr '19

17 Apr '19

Hi, I try to install vtune on centos7, which shows the following message: Xorg X11 libXss runtime library is not found. 'Graphical user interface' component of VTune Amplifier cannot be installed. The install program cannot detect the Xorg X11 libXss runtime library required by the graphical user interface of the product. Contact your system administrator to install the library or install the product on a compliant system. Otherwise, go back and unselect 'Graphical user interface' component. How to install Xorg X11 libXss runtime library? Thanks! Regards Andrew

3 3

CentOS-announce Digest, Vol 170, Issue 3
by centos-announce-request＠centos.org 17 Apr '19

17 Apr '19

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2019:0766 Important CentOS 7 mod_auth_mellon Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 16 Apr 2019 19:39:45 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2019:0766 Important CentOS 7 mod_auth_mellon Security Update Message-ID: <20190416193945.GA27412(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2019:0766 Important Upstream details at : https://access.redhat.com/errata/RHSA-2019:0766 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 6fbadeafb03537e22803ea287e301dc9a665295d7d369c1674265f2c90c5b893 mod_auth_mellon-0.14.0-2.el7_6.4.x86_64.rpm 52ae0edcb767417ef584e8bba4588ea956cb89a70b543188eb54ce27662793f1 mod_auth_mellon-diagnostics-0.14.0-2.el7_6.4.x86_64.rpm Source: c64fc84f5d2130f808ed9e9228df21fbd79d3ea226855164ed98bbd8ab13f043 mod_auth_mellon-0.14.0-2.el7_6.4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 170, Issue 3 ***********************************************

1 0

CVE-2019-0211 CentOS SCL httpd24 patches
by Vesselin Markov 16 Apr '19

16 Apr '19

Hi folks, On April 11th 2019 RedHat has responded to httpd: privilege escalation from modules scripts (CVE-2019-0211) mod_auth_mellon: authentication bypass in ECP flow (CVE-2019-3878) building a patched Apache http24 version for Software Collections - https://access.redhat.com/errata/RHSA-2019:0746 When can we expect this will be done for the SCL CentOS 7? Regards, Vesselin

2 1

Outliner
by H 16 Apr '19

16 Apr '19

I would love to find an old-fashioned outliner, like the ones that used to exist prior to the modern GUIs. It would make writing structured documents, or organizing thoughts in general, so much more convenient, productive and faster. Ideally it should allow saving files in txt, OO and markdown formats... Does anything like this exist that can run in a terminal window under Centos??

8 11

No ack packet for tcp SYN with window scale of 64
by yf chu 16 Apr '19

16 Apr '19

I have found a very strange problem. We found that the time of establishing the websocket connection between mobile phone and server was too long. Then I use tcpdump to capture the data and found that the problem maybe has something to do with window scale option in SYN packet. Here is the SYN packet for websocket connection: 55488 → 443 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=64 TSval=570815281 TSecr=0 SACK_PERM=1 But the server did not respond with ack. Then several retransmissions of SYN occured. Finally, the client sent a retransmission of SYN: 55488 → 443 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 SACK_PERM=1 Then the server responded with ack. I also captured other data of HTTP connection and found that the window scale option in SYN packet for HTTP connection is "WS=128". No retransmission occurs in the handshake for HTTP connection. So I just want to know the reason for it. The OS on our server is CentOS release 6.7. The version of kernel is 2.6.32-573.el6.x86_64. By the way, I have also tested websocket connection in centos 5, but no such a problem occured.

1 0

Happy 15th Birthday, CentOS!
by Rich Bowen 15 Apr '19

15 Apr '19

CentOS is 15 years old today! Hear the story from some of our community members at https://blog.centos.org/2019/04/centos15-2/ Do you have your own story? Drop me a note - rbowen(a)centosproject.org - to tell me about it. -- Rich Bowen - rbowen(a)redhat.com @CentOSProject // @rbowen 859 351 9166

3 2

Re: [CentOS] How to specify kernel version when restart kdump
by Benjamin Hauger 15 Apr '19

15 Apr '19

kdump operates by booting a fresh kernel to capture the context of a crashed kernel, and so the only way for kdump to dump a kernel is to crash it and cause kdump to invoke its post-crash kernel. You can manually force a running kernel to panic (and invoke a correctly-configured kdump) with the following command sequence: > echo 1 > /proc/sys/kernel/sysrq > echo c > /proc/sysrq-trigger Cheers, Ben On 3/25/19 7:19 PM, wuzhouhui wrote: > Hi, > > Is there a way to specify kernel version when (re)start kdump > service? Suppose I have install a new kernel and kdump will > generate kdump.img for new kernel in next boot. But I want kdump > to generate kdump.img for new kernel immediately, is it possible? > > Thanks. > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos > -- Benjamin Hauger SysAdmin/CSDC-DMO Rm. 94 x8371

3 7

Centos 7.6 & ether-wake
by Gregory P. Ennis 15 Apr '19

15 Apr '19

Everyone, I have not been able to get ether-wake to work waking up other centos 7.6 machines after the upgrade to Centos 7.6. Has anyone else had this problem, and if so any luck with a fix? Greg Ennis

4 5

← Newer
1
2
3
4
5
6
7
8
9
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss April 2019