Discuss March 2020

discuss@lists.centos.org

63 participants
64 discussions

CentOS 6.10 bind DNSSEC issues
by Support 25 Mar '20

25 Mar '20

Hi, Anyone else had any issues with CentOS 6.10 bind DNS server issues this afternoon. At 16:26 (GMT) had alerts for DNS failures against our CentOS 6.10 bind DNS servers from our monitoring system. Sure enough DNS requests via the server was failing, checking the named.log showed dnssec issues; 25-Mar-2020 16:26:10.285 dnssec: info: validating @0xb48b17c0: push.services.mozilla.com A: bad cache hit (push.services.mozilla.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.337 dnssec: info: validating @0xb4858cb0: push.services.mozilla.com AAAA: bad cache hit (push.services.mozilla.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.349 dnssec: info: validating @0xb48b17c0: push.services.mozilla.com AAAA: bad cache hit (push.services.mozilla.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.349 dnssec: info: validating @0xb4858cb0: push.services.mozilla.com A: bad cache hit (push.services.mozilla.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.359 dnssec: info: validating @0xb1ec0030: push.services.mozilla.com A: bad cache hit (push.services.mozilla.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.360 dnssec: info: validating @0xb462c430: push.services.mozilla.com AAAA: bad cache hit (push.services.mozilla.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.441 dnssec: info: validating @0xb48b17c0: push.services.mozilla.com A: bad cache hit (push.services.mozilla.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.441 dnssec: info: validating @0xb4858cb0: push.services.mozilla.com AAAA: bad cache hit (push.services.mozilla.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.451 dnssec: info: validating @0xb1ec0030: push.services.mozilla.com A: bad cache hit (push.services.mozilla.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.452 dnssec: info: validating @0xb462c430: push.services.mozilla.com AAAA: bad cache hit (push.services.mozilla.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.463 dnssec: info: validating @0xb1ec0030: push.services.mozilla.com A: bad cache hit (push.services.mozilla.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.463 dnssec: info: validating @0xb462c430: push.services.mozilla.com AAAA: bad cache hit (push.services.mozilla.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.474 dnssec: info: validating @0xb1ec0030: push.services.mozilla.com AAAA: bad cache hit (push.services.mozilla.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.474 dnssec: info: validating @0xb462c430: push.services.mozilla.com A: bad cache hit (push.services.mozilla.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.898 dnssec: info: validating @0xb48b17c0: www.kernel.org AAAA: bad cache hit (www.kernel.org.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.899 dnssec: info: validating @0xb4858cb0: www.kernel.org A: bad cache hit (www.kernel.org.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.902 dnssec: info: validating @0xb1ec0030: www.national-lottery.co.uk A: bad cache hit (www.national-lottery.co.uk.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.902 dnssec: info: validating @0xb48b17c0: www.mirrorservice.org A: bad cache hit (www.mirrorservice.org.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.902 dnssec: info: validating @0xb462c430: www.national-lottery.co.uk AAAA: bad cache hit (www.national-lottery.co.uk.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.903 dnssec: info: validating @0xb48b17c0: www.mirrorservice.org AAAA: bad cache hit (www.mirrorservice.org.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.908 dnssec: info: validating @0xb1ec0030: www.kernel.org A: bad cache hit (www.kernel.org.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.909 dnssec: info: validating @0xb462c430: www.kernel.org AAAA: bad cache hit (www.kernel.org.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.914 dnssec: info: validating @0xb48b17c0: www.mirrorservice.org A: bad cache hit (www.mirrorservice.org.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.915 dnssec: info: validating @0xb4858cb0: www.mirrorservice.org AAAA: bad cache hit (www.mirrorservice.org.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.915 dnssec: info: validating @0xb48b17c0: www.national-lottery.co.uk AAAA: bad cache hit (www.national-lottery.co.uk.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.916 dnssec: info: validating @0xb48b17c0: www.national-lottery.co.uk A: bad cache hit (www.national-lottery.co.uk.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.925 dnssec: info: validating @0xb1ec0030: www.boredpanda.com A: bad cache hit (www.boredpanda.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.925 dnssec: info: validating @0xb48b17c0: www.boredpanda.com AAAA: bad cache hit (www.boredpanda.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.927 dnssec: info: validating @0xb48b17c0: www.bbc.co.uk AAAA: bad cache hit (www.bbc.co.uk.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.927 dnssec: info: validating @0xb4858cb0: www.bbc.co.uk A: bad cache hit (www.bbc.co.uk.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.935 dnssec: info: validating @0xb48b17c0: www.boredpanda.com A: bad cache hit (www.boredpanda.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.935 dnssec: info: validating @0xb4858cb0: www.boredpanda.com AAAA: bad cache hit (www.boredpanda.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.938 dnssec: info: validating @0xb1ec0030: www.bbc.co.uk A: bad cache hit (www.bbc.co.uk.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.938 dnssec: info: validating @0xb462c430: www.bbc.co.uk AAAA: bad cache hit (www.bbc.co.uk.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.950 dnssec: info: validating @0xb48b17c0: www.fosslinux.com A: bad cache hit (www.fosslinux.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.951 dnssec: info: validating @0xb4858cb0: www.fosslinux.com AAAA: bad cache hit (www.fosslinux.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.962 dnssec: info: validating @0xb48b17c0: www.fosslinux.com A: bad cache hit (www.fosslinux.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:10.962 dnssec: info: validating @0xb4858cb0: www.fosslinux.com AAAA: bad cache hit (www.fosslinux.com.dlv.isc.org/DLV) 25-Mar-2020 16:26:11.021 dnssec: info: validating @0xb1ec0030: uk.yahoo.com AAAA: bad cache hit (uk.yahoo.com.dlv.isc.org/DLV) Followed by; 25-Mar-2020 16:26:25.828 dnssec: info: validating @0xb48fdcd0: dlv.isc.org NSEC: verify failed due to bad signature (keyid=64263): RRSIG has expired 25-Mar-2020 16:26:25.828 dnssec: info: validating @0xb48fdcd0: dlv.isc.org NSEC: no valid signature found 25-Mar-2020 16:29:05.075 dnssec: info: validating @0xb473dc48: dlv.isc.org DNSKEY: verify failed due to bad signature (keyid=19297): RRSIG has expired 25-Mar-2020 16:29:05.075 dnssec: notice: validating @0xb473dc48: dlv.isc.org DNSKEY: unable to find a DNSKEY which verifies the DNSKEY RRset and also matches a trusted key for 'dlv.isc.org' 25-Mar-2020 16:29:05.075 dnssec: notice: validating @0xb473dc48: dlv.isc.org DNSKEY: please check the 'trusted-keys' for 'dlv.isc.org' in named.conf. No issues with our CentOS 7.7.1908 bind DNS servers. To fix I had to set the following in /etc/named.conf and restart the named service. dnssec-enable no; dnssec-validation no; Anyone else had this issue? Is there and updated key that is needed in CentOS 6.10 version of bind so that I can turn dnssec back on. regards Tim Tim D'Cruz

3 2

Building a NFS server with a mix of HDD and SSD (for caching)
by kadafax＠gmail.com 24 Mar '20

24 Mar '20

Hi list, I'm building a NFS server on top of CentOS 8. It has 8 x 8 TB HDDs and 2 x 500GB SSDs. The spinning drives are in a RAID-6 array. They are 4K sector size. The SSDs are in RAID-1 array and with a 512bytes sector size. I want to use the SSDs as a cache using dm-cache. So here what I've done so far: /dev/sdb ==> SSD raid1 array /dev/sdd ==> spinning raid6 array I've added "allow_mixed_block_sizes = 1" to lvm.conf to be able to add sdb and sdd in the same VG (because of the sector size missmatch). But as the LVs will only use one and only one PV I guess it's OK. # lvcreate -L 500M -n lv_cache_meta VGnfs /dev/sdb # lvcreate -l +100%FREE -n lv_cache VGnfs /dev/sdb # lvconvert --type cache-pool /dev/VGnfs/lv_cache --poolmetadata /dev/VGnfs/lv_cache_meta # lvcreate -l +100%FREE -n LVnfs VGnfs /dev/sdd # lvconvert --type cache /dev/VGnfs/LVnfs --cachepool /dev/VGnfs/lv_cache # lvconvert --cachemode writeback --type cache /dev/VGnfs/LVnfs --cachepool /dev/VGnfs/lv_cache # mkfs.xfs /dev/VGnfs/LVnfs And now I'm asking myself if I'm not doing something somewhat dangerous for a server that will be critical when in production :] The server has 128GB of RAM so maybe the caching in memory will be sufficient to achieve good performance ? What do you think ? Do you use something similar ? Thanks !

2 2

Firewalld direct.xml
by Jerry Geis 24 Mar '20

24 Mar '20

HI All - I created a /etc/firewalld/direct.xml file and put in it : <?xml version="1.0" encoding="utf-8"?> <direct> <chain ipv="ipv4" table="raw" chain="blacklist"/> <rule ipv="ipv4" table="raw" chain="PREROUTING" priority="0">-s 192.168.1.8 -j blacklist</rule> </direct> I rebooted, so then from the 192.168.1.8 machine I tried to ping the machine. I responds. I was expecting it not to respond? What do I not have right with the direct.xml file ? Thanks Jerry

2 2

Issue with AppStream
by Jerry Geis 24 Mar '20

24 Mar '20

is there an issue happening ? yum provides "*/firewall-config" CentOS-8 - AppStream 0.0 B/s | 0 B 00:05 Failed to download metadata for repo 'AppStream' Error: Failed to download metadata for repo 'AppStream' jerry

1 1

Pidgin + pidgin-sipe audo/video calls to Skype for Business
by Toralf Lund 23 Mar '20

23 Mar '20

Has anyone got the audio/video call functionality to work with the CentOS 7 Pidgin packages? I primarily interested in Skype for Business/Office Communicator, but if you have anything else set up that supports audio/video, that may also be of interest. I recently tried to join a "scheduled conference", and got a (working) chat window, but didn't get any sound, and nobody else heard me. And there were no traces of video. I got an additional window with two sound-level bars, with a status line saying "Calling...", which seemed to get no further. I've tried "Test call" from the Accounts, with a similar result - a new window saying "Calling...", but no further progress. I then went ahead and tried "Call a phone number...", again from Accounts, and entered my cell phone number. Then got the "Calling..." window again, and an actual call to the mobile phone. But when I answered it, nothing much happened. The Pidgin window was unchanged, i.e. there was nothing to indicate that the call had been connected, and I couldn't hear any sound at either end. Also, there was no call signal or anything in Pidgin before I picked up. So, has anyone tried this functionality? Any luck? What's supposed to happen when I make a "Test call", anyway? Thanks. - Toralf

1 0

gnome-keyring auto locking
by Leon Fauster 21 Mar '20

21 Mar '20

Hey all, I am preparing some workstations with C8/GNOME here and wonder if there is a smart way to automatically lock the keyring after some defined time (e.g 1800 seconds). The net suggests killing the gnome-keyring-daemon process - not the smartest way. I can manually lock the keyring with seahorse but this way doesn't scale very well :-) Any hints? Leon

1 0

gdm postsession scripts
by Leon Fauster 20 Mar '20

20 Mar '20

Its seems that only the "Default" script in /etc/gdm/PostSession gets processed. Is this the intended behaviour? This makes packaging harder. Or can drop-in scripts/files be enabled? Thanks for hints, Leon

2 2

Re: [CentOS] CentOS 8 VM 800x600
by Jerry Geis 19 Mar '20

19 Mar '20

Ok I tried that and rebooted. I get all kinds of lines in X log that says FBDEV(0): mode "1440x900" not found. FBDEV(0): mode "1024x768" not found. Funny thing is I set up a different CentOS 7 and Windows 10 guest - and they are scaling just fine and I get higher resolutions. Its just my CentOS 8 guest that is 800x600. Thoughts? Jerry

1 1

How do I manually renew Identity Management (FreeIPA) certificates on CentOS6 after they have expired?
by liyi 19 Mar '20

19 Mar '20

Hello： Does someone know how I manually renew Identity Management (FreeIPA) certificates on CentOS6 after they have expired? There is a solution on redhat.com (https://access.redhat.com/solutions/643753) but I can't see it. Please help, thank you! Li Yi

1 0

vnc kde emacs redraw issue
by Steve Clark 18 Mar '20

18 Mar '20

Does anyone have access to the following that could help me with the issue I am having trying to use kdrc with vnc and emacs. VNC redraw issues with emacs on KDE https://access.redhat.com/solutions/1585893 I can't access the portal since I am using CentOS. -- Stephen Clark Email Confidentiality Notice: The information contained in this transmission may contain privileged and confidential and/or protected health information (PHI) and may be subject to protection under the law, including the Health Insurance Portability and Accountability Act of 1996, as amended (HIPAA). This transmission is intended for the sole use of the individual or entity to whom it is addressed. If you are not the intended recipient, you are notified that any use, dissemination, distribution, printing or copying of this transmission is strictly prohibited and may subject you to criminal or civil penalties. If you have received this transmission in error, please contact the sender immediately and delete this email and any attachments from any computer. Vaso Corporation and its subsidiary companies are not responsible for data leaks that result from email messages received that contain privileged and confidential and/or protected health information (PHI).

2 4

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss March 2020