Discuss

discuss@lists.centos.org

34753 discussions

Winbind/AD/NFSv4: can't `ls/cd` private directory?
by Derek Warren 22 Aug '12

22 Aug '12

Hello everyone, We have a CentOS 6.3 NFSv4 server and client, and we've run into a situation where the client is unable to list "private" (chmod 700-ed) directories, even if the current user owns the directory in question. A bit more background: we're also using Samba 3.5+Winbind to provide authentication and UID/GID mapping against a Windows 2008 R2 domain controller. I've been asked to get Kerberized NFSv4 working, but this problem occurs on mounts both with and without Kerberos, so I won't torture anyone with the Kerberos part. :-) ID mapping works: [joeuser@nfsclient ~]$ id joeuser uid=56055(joeuser) gid=6502(domain users) groups=6502(domain users),1000001(BUILTIN\users) Mounting directories -o sec=none works: [joeuser@nfsclient ~]$ sudo mount -t nfs4 -o proto=tcp,port=2049 -o sec=none nfsserver.example.com:/testdir /mnt [joeuser@nfsclient ~]$ ls -l /mnt drwx------ 2 user1 domain users 4096 Aug 3 11:43 user1 drwx------ 2 adbinder domain users 4096 Aug 17 15:20 adbinder drwx------ 2 joeuser domain users 4096 Aug 3 11:43 joeuser ... however, we can't seem to track down why this happens: [joeuser@nfsclient ~]$ cd /mnt/joeuser bash: cd: joeuser: Permission denied We have the same issue when mounting -o sec=krb5p, which yields slightly more interesting debug output[2]. Both hosts are running CentOS 6.3: $ uname -a ; cat /etc/redhat-release ; rpm -qa | egrep "(samba|winbind|nfs)" Linux nfsserver 2.6.32-279.2.1.el6.x86_64 #1 SMP Fri Jul 20 01:55:29 UTC 2012 x86_64 x86_64 x86_64 GNU/Linux CentOS release 6.3 (Final) nfs-utils-1.2.3-26.el6.x86_64 nfs-utils-lib-1.1.5-4.el6.x86_64 samba-client-3.5.10-125.el6.x86_64 samba-common-3.5.10-125.el6.x86_64 samba-winbind-3.5.10-125.el6.x86_64 samba-winbind-clients-3.5.10-125.el6.x86_64 Out of curiosity, I tried the same AD/Winbind/NFSv4 setup on Fedora 17 and had the same results when mounting either -o sec=none or -o sec=krb5/i/p: $ uname -a ; cat /etc/redhat-release ; rpm -qa | egrep "(samba|winbind|nfs)" Linux nfsserver-fedora 3.5.2-1.fc17.x86_64 #1 SMP Wed Aug 15 16:09:27 UTC 2012 x86_64 x86_64 x86_64 GNU/Linux Fedora release 17 (Beefy Miracle) libnfsidmap-0.25-3.fc17.x86_64 libnfsidmap-debuginfo-0.25-3.fc17.x86_64 nfs-utils-1.2.6-3.fc17.x86_64 nfs-utils-debuginfo-1.2.6-3.fc17.x86_64 samba-3.6.6-92.fc17.1.x86_64 samba-client-3.6.6-92.fc17.1.x86_64 samba-common-3.6.6-92.fc17.1.x86_64 samba-winbind-3.6.6-92.fc17.1.x86_64 samba-winbind-clients-3.6.6-92.fc17.1.x86_64 So... * Is this an ID mapping problem of some kind? Many of the mailing list posts and bug reports that I've read pertaining to this problem usually stem from ID mapping failure, but it seems to be working in our case[4][5]. * Is it possible that this is an AD/Kerberos problem even though we're mounting -o sec=none and Kerberos is supposedly not involved? A recent linux-nfs mailing list post[0] described a similar problem when mounting, but the fix had no effect for us. (Once again, I tried mounting -o sec=none and -o sec=krb5/i/p). * Since we're relying in W2K8R2 for ID mapping, is there something extra we need to do to our least-privilege bind account[3]? We would greatly appreciate any advice that you NFSv4 experts out there could offer. I would be happy to pass along more details/logs/debug/puzzle pieces if needed. Many thanks, -- Derek Warren, IT Services, Research Computing Group, Simon Fraser University [0] http://www.spinics.net/lists/linux-nfs/msg27440.html [1] Preamble to mounting. Again, the same problem happens with or without Kerberos. # net ads join createupn="nfs/nfsserver.example.com(a)AD.EXAMPLE.COM" createcomputer="OU" -U $BINDUSER%$BINDPASSWD # kinit -k NFSSERVER$ (and NFSCLIENT$, but we're going to mount -o sec=none as mentioned above) # net ads keytab add nfs # klist -ke Keytab name: WRFILE:/etc/krb5.keytab KVNO Principal ---- -------------------------------------------------------------------------- 3 host/nfsserver.example.com(a)AD.EXAMPLE.COM (des-cbc-crc) 3 host/nfsserver.example.com(a)AD.EXAMPLE.COM (des-cbc-md5) 3 host/nfsserver.example.com(a)AD.EXAMPLE.COM (arcfour-hmac) 3 host/NFSSERVER(a)AD.EXAMPLE.COM (des-cbc-crc) 3 host/NFSSERVER(a)AD.EXAMPLE.COM (des-cbc-md5) 3 host/NFSSERVER(a)AD.EXAMPLE.COM (arcfour-hmac) 3 NFSSERVER$(a)AD.EXAMPLE.COM (des-cbc-crc) 3 NFSSERVER$(a)AD.EXAMPLE.COM (des-cbc-md5) 3 NFSSERVER$(a)AD.EXAMPLE.COM (arcfour-hmac) 3 nfs/nfsserver.example.com(a)AD.EXAMPLE.COM (des-cbc-crc) 3 nfs/nfsserver.example.com(a)AD.EXAMPLE.COM (des-cbc-md5) 3 nfs/nfsserver.example.com(a)AD.EXAMPLE.COM (arcfour-hmac) 3 nfs/NFSSERVER(a)AD.EXAMPLE.COM (des-cbc-crc) 3 nfs/NFSSERVER(a)AD.EXAMPLE.COM (des-cbc-md5) 3 nfs/NFSSERVER(a)AD.EXAMPLE.COM (arcfour-hmac) (same `klist -ke` output on the client, too) [2] The syslog output from the same problem, but when mounted -o sec=krb5/i/p: nfsclient rpc.gssd[10256]: handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt1b) nfsclient rpc.gssd[10256]: handle_gssd_upcall: 'mech=krb5 uid=56055 enctypes=18,17,16,23,3,1,2 ' nfsclient rpc.gssd[10256]: handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt1b) nfsclient rpc.gssd[10256]: process_krb5_upcall: service is '<null>' nfsclient rpc.gssd[10256]: getting credentials for client with uid 56055 for server nfsserver.example.com nfsclient rpc.gssd[10256]: CC file '/tmp/krb5cc_56055_od8D5s' being considered, with preferred realm 'AD.EXAMPLE.COM' nfsclient rpc.gssd[10256]: CC file '/tmp/krb5cc_56055_od8D5s'(joeuser(a)AD.EXAMPLE.COM) passed all checks and has mtime of 1344544593 nfsclient rpc.gssd[10256]: CC file '/tmp/krb5cc_56055_DUEN2I' being considered, with preferred realm 'AD.EXAMPLE.COM' nfsclient rpc.gssd[10256]: CC file '/tmp/krb5cc_56055_DUEN2I'(joeuser(a)AD.EXAMPLE.COM) passed all checks and has mtime of 1344543679 nfsclient rpc.gssd[10256]: CC file '/tmp/krb5cc_56055_od8D5s' is our current best match with mtime of 1344544593 nfsclient rpc.gssd[10256]: CC file '/tmp/krb5cc_0' being considered, with preferred realm 'AD.EXAMPLE.COM' nfsclient rpc.gssd[10256]: CC file '/tmp/krb5cc_0' owned by 0, not 56055 nfsclient rpc.gssd[10256]: using FILE:/tmp/krb5cc_56055_od8D5s as credentials cache for client with uid 56055 for server nfsserver.example.com nfsclient rpc.gssd[10256]: using environment variable to select krb5 ccache FILE:/tmp/krb5cc_56055_od8D5s nfsclient rpc.gssd[10256]: creating context using fsuid 56055 (save_uid 0) nfsclient rpc.gssd[10256]: creating tcp client for server nfsserver.example.com nfsclient rpc.gssd[10256]: DEBUG: port already set to 2049 nfsclient rpc.gssd[10256]: creating context with server nfs(a)nfsserver.example.com nfsclient rpc.gssd[10256]: WARNING: Failed to create krb5 context for user with uid 56055 for server nfsserver.example.com nfsclient rpc.gssd[10256]: WARNING: Failed to create krb5 context for user with uid 56055 for server nfsserver.example.com nfsclient rpc.gssd[10256]: doing error downcall [3] Our minimal-privilege Active Directory binding account for Winbind was created using the following steps: 1. Run ADU&C. View menu=>Advanced Features 2. Create a binding account (e.g., 'megabind') 3. Right-click on the FAS container=>Properties=>Security tab 4. [Advanced]=>[Add...]=>megabind=>[OK] 5. [megabind: This object and all descendant objects...] => Write All Properties: allow => Create Computer objects: allow 6. [OK]/[OK]/[OK] [4] rpc.idmapd debug output when listing /mnt--same results when mounted -o sec=none/-o sec=krb5/i/p: Aug 17 11:28:30 nfsserver rpc.idmapd[1484]: Server : (user) id "56055" -> name "joeuser(a)ad.example.com" Aug 17 11:28:30 nfsserver rpc.idmapd[1484]: nfsdcb: authbuf=199.60.0.0/255.255.240.0 authtype=group Aug 17 11:28:30 nfsserver rpc.idmapd[1484]: nfs4_gid_to_name: calling nsswitch->gid_to_name Aug 17 11:28:30 nfsserver rpc.idmapd[1484]: nfs4_gid_to_name: nsswitch->gid_to_name returned 0 Aug 17 11:28:30 nfsserver rpc.idmapd[1484]: nfs4_gid_to_name: final return value is 0 Aug 17 11:28:30 nfsserver rpc.idmapd[1484]: Server : (group) id "6502" -> name "domain users(a)ad.example.com" Aug 17 11:28:30 nfsserver rpc.idmapd[1484]: nfsdcb: authbuf=199.60.0.0/255.255.240.0 authtype=user Aug 17 11:28:30 nfsserver rpc.idmapd[1484]: nfs4_uid_to_name: calling nsswitch->uid_to_name Aug 17 11:28:30 nfsserver rpc.idmapd[1484]: nfs4_uid_to_name: nsswitch->uid_to_name returned 0 Aug 17 11:28:30 nfsserver rpc.idmapd[1484]: nfs4_uid_to_name: final return value is 0 [5] nfsd debug output: [joeuser@nfsclient /mnt] cd /mnt/joeuser Aug 17 11:28:30 nfsclient kernel: encode_compound: tag= Aug 17 11:28:30 nfsclient kernel: decode_attr_type: type=040000 Aug 17 11:28:30 nfsclient kernel: decode_attr_change: change attribute=17878195753850634499 Aug 17 11:28:30 nfsclient kernel: decode_attr_size: file size=4096 Aug 17 11:28:30 nfsclient kernel: decode_attr_fsid: fsid=(0x64e7963b2d1f48aa/0x98fd26d8b8883c44) Aug 17 11:28:30 nfsclient kernel: decode_attr_fileid: fileid=2117406 Aug 17 11:28:30 nfsclient kernel: decode_attr_fs_locations: fs_locations done, error = 0 Aug 17 11:28:30 nfsclient kernel: decode_attr_mode: file mode=0755 Aug 17 11:28:30 nfsclient kernel: decode_attr_nlink: nlink=6 Aug 17 11:28:30 nfsclient kernel: decode_attr_owner: uid=0 Aug 17 11:28:30 nfsclient kernel: decode_attr_group: gid=0 Aug 17 11:28:30 nfsclient kernel: decode_attr_rdev: rdev=(0x0:0x0) Aug 17 11:28:30 nfsclient kernel: decode_attr_space_used: space used=4096 Aug 17 11:28:30 nfsclient kernel: decode_attr_time_access: atime=1345215537 Aug 17 11:28:30 nfsclient kernel: decode_attr_time_metadata: ctime=1344019704 Aug 17 11:28:30 nfsclient kernel: decode_attr_time_modify: mtime=1344019352 Aug 17 11:28:30 nfsclient kernel: decode_attr_mounted_on_fileid: fileid=0 Aug 17 11:28:30 nfsclient kernel: decode_getfattr_attrs: xdr returned 0 Aug 17 11:28:30 nfsclient kernel: decode_getfattr_generic: xdr returned 0 Aug 17 11:28:30 nfsclient kernel: NFS: nfs_update_inode(0:17/2117406 ct=2 info=0x27e7f) Aug 17 11:28:30 nfsclient kernel: NFS: permission(0:17/2117406), mask=0x1, res=0 Aug 17 11:28:30 nfsclient kernel: NFS: nfs_lookup_revalidate(/joeuser) is valid Aug 17 11:28:30 nfsclient kernel: encode_compound: tag= joeuser: Permission denied. Aug 17 11:28:30 nfsclient kernel: decode_attr_type: type=040000 Aug 17 11:28:30 nfsclient kernel: decode_attr_change: change attribute=8802615669730494470 Aug 17 11:28:30 nfsclient kernel: decode_attr_size: file size=4096 Aug 17 11:28:30 nfsclient kernel: decode_attr_fsid: fsid=(0x64e7963b2d1f48aa/0x98fd26d8b8883c44) Aug 17 11:28:30 nfsclient kernel: decode_attr_fileid: fileid=2121737 Aug 17 11:28:30 nfsclient kernel: decode_attr_fs_locations: fs_locations done, error = 0 Aug 17 11:28:30 nfsclient kernel: decode_attr_mode: file mode=0700 Aug 17 11:28:30 nfsclient kernel: decode_attr_nlink: nlink=2 Aug 17 11:28:30 nfsclient kernel: decode_attr_owner: uid=56055 Aug 17 11:28:30 nfsclient kernel: decode_attr_group: gid=6502 Aug 17 11:28:30 nfsclient kernel: decode_attr_rdev: rdev=(0x0:0x0) Aug 17 11:28:30 nfsclient kernel: decode_attr_space_used: space used=4096 Aug 17 11:28:30 nfsclient kernel: decode_attr_time_access: atime=1345071487 Aug 17 11:28:30 nfsclient kernel: decode_attr_time_metadata: ctime=1345071482 Aug 17 11:28:30 nfsclient kernel: decode_attr_time_modify: mtime=1344019451 Aug 17 11:28:30 nfsclient kernel: decode_attr_mounted_on_fileid: fileid=0 Aug 17 11:28:30 nfsclient kernel: decode_getfattr_attrs: xdr returned 0 Aug 17 11:28:30 nfsclient kernel: decode_getfattr_generic: xdr returned 0 Aug 17 11:28:30 nfsclient kernel: NFS: nfs_update_inode(0:17/2121737 ct=1 info=0x27e7f) Aug 17 11:28:30 nfsclient kernel: NFS: permission(0:17/2121737), mask=0x11, res=-13 Aug 17 11:28:30 nfsclient kernel: NFS: dentry_delete(/joeuser, 8) Aug 17 11:28:30 nfsclient kernel: NFS: permission(0:17/2117406), mask=0x1, res=0 Aug 17 11:28:30 nfsclient kernel: NFS: nfs_lookup_revalidate(/joeuser) is valid Aug 17 11:28:30 nfsclient kernel: NFS: permission(0:17/2121737), mask=0x11, res=-13 Aug 17 11:28:30 nfsclient kernel: NFS: dentry_delete(/joeuser, 8)

1 0

CentOS-announce Digest, Vol 90, Issue 13
by centos-announce-request＠centos.org 22 Aug '12

22 Aug '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2012:1184 CentOS 5 perl-XML-SAX FASTTRACK Update (Johnny Hughes) 2. CEBA-2012:1188 CentOS 6 cluster Update (Johnny Hughes) 3. CESA-2012:1174 Low CentOS 5 kernel Update (Johnny Hughes) 4. CEBA-2012:1193 CentOS 5 pdksh Update (Johnny Hughes) 5. CEBA-2012:1191 CentOS 5 xorg-x11-server Update (Johnny Hughes) 6. CEBA-2012:1192 CentOS 6 ftp FASTTRACK Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 21 Aug 2012 20:57:16 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:1184 CentOS 5 perl-XML-SAX FASTTRACK Update To: centos-announce(a)centos.org Message-ID: <20120821205716.GA24120(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:1184 Upstream details at : http://rhn.redhat.com/errata/RHBA-2012-1184.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 85aed94f1ee9a2c4886d2bbca6ccd73b59d9e9e0903f866c84e12219703faeca perl-XML-SAX-0.14-13.el5.noarch.rpm x86_64: 85aed94f1ee9a2c4886d2bbca6ccd73b59d9e9e0903f866c84e12219703faeca perl-XML-SAX-0.14-13.el5.noarch.rpm Source: 6f4b61fbe7b63de7d5c02060658ff4abb22311683498d23cd28a74be734d21c1 perl-XML-SAX-0.14-13.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 22 Aug 2012 01:06:38 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:1188 CentOS 6 cluster Update To: centos-announce(a)centos.org Message-ID: <20120822010638.GA5037(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:1188 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-1188.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 0884f142ad72587353fe703782995289324bee58533e1ffd3894eb29bc9aec49 clusterlib-3.0.12.1-32.el6_3.1.i686.rpm 4bbd67e420ba3831a44c73352c9242e7069dcd5911bd6aa44ff4583018a6217b clusterlib-devel-3.0.12.1-32.el6_3.1.i686.rpm 2772b2983618ad22bedab7882b23b1d15812e108e1e67fe3bb4e65c14045d383 cman-3.0.12.1-32.el6_3.1.i686.rpm d894d4dbcd8d8affe9790b7c932d08b036e00b1b685497144539f609bee5cc74 gfs2-utils-3.0.12.1-32.el6_3.1.i686.rpm x86_64: 0884f142ad72587353fe703782995289324bee58533e1ffd3894eb29bc9aec49 clusterlib-3.0.12.1-32.el6_3.1.i686.rpm 7bc8556a181a8d9384e896f2f6d2a9873c4c0fc527e10d604bc87cdb7e504f19 clusterlib-3.0.12.1-32.el6_3.1.x86_64.rpm 4bbd67e420ba3831a44c73352c9242e7069dcd5911bd6aa44ff4583018a6217b clusterlib-devel-3.0.12.1-32.el6_3.1.i686.rpm 106cfdae34f1e8676c3a5ab8d38e75f512db2e76a4d354d67e5afb0e3e2878fa clusterlib-devel-3.0.12.1-32.el6_3.1.x86_64.rpm 12c9f4beb799cc83befa4654810653c7af4ef5bf50dc86dd64c27f240d8f2235 cman-3.0.12.1-32.el6_3.1.x86_64.rpm f2b3ac3f2de5883b927b3217ccf23d7f20563b663338c131f0da1d424880daa1 gfs2-utils-3.0.12.1-32.el6_3.1.x86_64.rpm Source: 7dd61eb2163bce86db970ce082765cc9c7e7b9e7e4ccce60a669f3ba657c3d74 cluster-3.0.12.1-32.el6_3.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Wed, 22 Aug 2012 02:56:42 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:1174 Low CentOS 5 kernel Update To: centos-announce(a)centos.org Message-ID: <20120822025642.GA9618(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:1174 Low Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-1174.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 007574b8b83e4f7a9115f5c88662987aa7cefa4ec8d643593093f6622368159d kernel-2.6.18-308.13.1.el5.i686.rpm 56d3750693a8e702ea5f2d228bfa90121d99ab684ee0e551cfec7ffd222aa86d kernel-debug-2.6.18-308.13.1.el5.i686.rpm d9ea4496ce8e7a242548a63e5314a36d8be6ba568e4c2509d6be382760b01ede kernel-debug-devel-2.6.18-308.13.1.el5.i686.rpm d9e78ac7660465cec5d4c0533a5a37690270eb0c048697d8717a066b24e96c7f kernel-devel-2.6.18-308.13.1.el5.i686.rpm ed283ffd469117f3696f77c57e58dea6ac1c037dd2648b497fb1cd58298f97c4 kernel-doc-2.6.18-308.13.1.el5.noarch.rpm 2554589055a1db9b4bc027bc58c22a2445438de6cf8eef5c1c6f430fc964f237 kernel-headers-2.6.18-308.13.1.el5.i386.rpm fb126c493e4d14cb4475a3c9214833893a03907fe15a98d45262aba89e877a43 kernel-PAE-2.6.18-308.13.1.el5.i686.rpm ddf76d4f4ba5b58654881dc9bdb1106e473c6a8f77d0428d57a199d2940566cb kernel-PAE-devel-2.6.18-308.13.1.el5.i686.rpm 7917773f962fa4be09e1285259f6205660727a55171cb2100ee8a951a278f98e kernel-xen-2.6.18-308.13.1.el5.i686.rpm a23b0ea62ffb7f46ba1bcbf4f0f936588dfddbede13c5d684043155cff53cd3e kernel-xen-devel-2.6.18-308.13.1.el5.i686.rpm x86_64: a98f8e0d679ccc7f436bedbf17a2ff4b928bd0ec81b34549989d8f29e972787b kernel-2.6.18-308.13.1.el5.x86_64.rpm 786ae2d03b1722d02625d816cf056fdb6f5dd844c174b7d84ba63ee9f82b6ef2 kernel-debug-2.6.18-308.13.1.el5.x86_64.rpm 7fb96cc3983922b0d76d8aabe574d6a8327bdfd16fa7e249b1e3a90567335817 kernel-debug-devel-2.6.18-308.13.1.el5.x86_64.rpm cc6f2f94ce5011eaa8d4ea1a671fae1c23c4051599eeab7604ffc0a34bd9ec63 kernel-devel-2.6.18-308.13.1.el5.x86_64.rpm ed283ffd469117f3696f77c57e58dea6ac1c037dd2648b497fb1cd58298f97c4 kernel-doc-2.6.18-308.13.1.el5.noarch.rpm b319cf7cc1586832b97c4143311f4c782de12e1e03d106cd4959e047f1a51d8c kernel-headers-2.6.18-308.13.1.el5.x86_64.rpm 5cfd019d08a7e516e959bd92d13180230a86deeb874c9d977ef64bd318e21bca kernel-xen-2.6.18-308.13.1.el5.x86_64.rpm dad1e5f000a37307c9469416dd3dbd1bacd5d8855655886fc2629537daf98782 kernel-xen-devel-2.6.18-308.13.1.el5.x86_64.rpm Source: dd30cc06c412caf391e7e96e3d4ab01d80dcb50b4d81e752735c8587b93372fe kernel-2.6.18-308.13.1.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Wed, 22 Aug 2012 11:00:04 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:1193 CentOS 5 pdksh Update To: centos-announce(a)centos.org Message-ID: <20120822110004.GA3164(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:1193 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-1193.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: e2349a6fe1df5df8f3666fc7813161e180e7e09f4664c285c295a7f8bf872bb7 pdksh-5.2.14-37.el5_8.1.i386.rpm x86_64: 4193cea23ac7bdfdfafcb5af258c4cbf32df8175ad474659c4443d09320020f2 pdksh-5.2.14-37.el5_8.1.x86_64.rpm Source: 9bafc6330fff922c383a9b06d921e56408961731c633132ed01ac717cf2be7c9 pdksh-5.2.14-37.el5_8.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Wed, 22 Aug 2012 11:02:08 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:1191 CentOS 5 xorg-x11-server Update To: centos-announce(a)centos.org Message-ID: <20120822110208.GA3395(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:1191 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-1191.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 216f91d332eab63c377b92bf5547eb4f00845d53c16c773cde12c3371b73a40b xorg-x11-server-sdk-1.1.1-48.91.el5_8.i386.rpm 74ddfd56b48a5f8b0db64b0a5be32838755cf8ff364395645838f7303c4f06bb xorg-x11-server-Xdmx-1.1.1-48.91.el5_8.i386.rpm 9e1f420b40070cfb0f103b156e8844b866a2a21bbabe0ed642b9afb368f0e0f0 xorg-x11-server-Xephyr-1.1.1-48.91.el5_8.i386.rpm fadeae183a45ca811f89e1ea8d81fa6d0f48d8d6af8ee91dd47748c6e587084b xorg-x11-server-Xnest-1.1.1-48.91.el5_8.i386.rpm 71abda15a9c633834b4b4ffddfd06fee1d2e1925d3adafa58efa4bf9060240ac xorg-x11-server-Xorg-1.1.1-48.91.el5_8.i386.rpm c5673fd2134792c7574db738490024f01340e6ee80a35eab5bf87389418a8bb9 xorg-x11-server-Xvfb-1.1.1-48.91.el5_8.i386.rpm df88129b77ca0b645e285fe90e3a97ce3f3c1340c827de749b9d7eac77cf66a4 xorg-x11-server-Xvnc-source-1.1.1-48.91.el5_8.i386.rpm x86_64: 2d4dcec4464a9a80cee5af11d894628742cb1374ce7f22d943576e1b65fbed06 xorg-x11-server-sdk-1.1.1-48.91.el5_8.x86_64.rpm b70952ba9a5124fb77089d6bdcd79597095248c8c619d84f45677f42efed1f68 xorg-x11-server-Xdmx-1.1.1-48.91.el5_8.x86_64.rpm 4f299a810335ad5fbacc4197c42eab1f63e8d5bc28f34c3bfcd2047f72490f02 xorg-x11-server-Xephyr-1.1.1-48.91.el5_8.x86_64.rpm 2aab4fdbe3dce67dd99fd269699ae2a0f7d4e8bff95919262ea426ffd89437ad xorg-x11-server-Xnest-1.1.1-48.91.el5_8.x86_64.rpm b57043b7cf6a6e5fef8209297fe6bd6a74ee0b2ac58e53446278eaa0d3551081 xorg-x11-server-Xorg-1.1.1-48.91.el5_8.x86_64.rpm 76cf56ce7535d25db18713fb934fec32efa64bb9c693209126b34727f0690856 xorg-x11-server-Xvfb-1.1.1-48.91.el5_8.x86_64.rpm 37fd3c491e31dc2797f2dbe69e73499cd4fdc39b918fa044d73ed6376c0ccf03 xorg-x11-server-Xvnc-source-1.1.1-48.91.el5_8.x86_64.rpm Source: 70f5ed308a9b6cecf079080b760d6f719b7cc3fca9eaa75d6660ea52d2e59f83 xorg-x11-server-1.1.1-48.91.el5_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Wed, 22 Aug 2012 11:39:03 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:1192 CentOS 6 ftp FASTTRACK Update To: centos-announce(a)centos.org Message-ID: <20120822113903.GA5124(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:1192 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-1192.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 9ba20e2d685e2f4e0bc00f80f6847e5c82b70bc5ac67f6144c954b78e7912225 ftp-0.17-51.3.el6.i686.rpm x86_64: e371624a743df20ec74cc1dacdb0f11c7f8dbb5eacfa08bf6b774e5cc23c60c7 ftp-0.17-51.3.el6.x86_64.rpm Source: f50198213cbed21a1ffa75086868de44c27a668abac584c2f5ee5b67f9144dd9 ftp-0.17-51.3.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 90, Issue 13 ***********************************************

1 0

OpenVPN TAP interface problem.
by Rafał Radecki 22 Aug '12

22 Aug '12

Hi all. I have an OpenVPN server: 2.2.1-1 x86_64 Server config: port 11223 dev tap proto udp tls-server ca keys/ca.crt cert keys/server.crt key keys/server.key dh keys/dh1024.pem server 1.2.3.3 255.255.255.0 push "route 192.168.0.0 255.255.255.0 1.2.3.4" keepalive 10 60 client-to-client duplicate-cn inactive 600 log /var/log/openvpn.log syslog status /var/log/openvpn-status.log user openvpn group openvpn persist-tun persist-key verb 4 comp-lzo Server interface: 11: tap0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 100 link/ether 56:73:e7:c9:c8:e5 brd ff:ff:ff:ff:ff:ff inet 1.2.3.4/24 brd 1.2.3.255 scope global tap0 Client: 2.2.1-8ubuntu1 x86_64 Client config: remote 1.2.3.3 port 11223 dev tap proto udp resolv-retry infinite #nobind persist-key persist-tun tls-client ca /etc/openvpn/keys/ca.crt cert /etc/openvpn/keys/client.crt key /etc/openvpn/keys/client.key ns-cert-type server comp-lzo verb 4 log /var/log/openvpn.log #syslog status /var/log/openvpn-status.log After successful start of openvpn service (Tue Aug 21 16:12:24 2012 us=644993 Initialization Sequence Completed in logfile) I have: Client interface: 9: tap0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 100 link/ether 4a:3d:52:dc:51:c3 brd ff:ff:ff:ff:ff:ff When I start the tunnel I am not able to ping 1.2.3.4 IP on server, the TAP interface is also in DOWN state. I have no firewall configured. My client log file is attached. Should I have an IP addres on my TAP interface? Thanks for the help ;) Best regards, Rafal.

3 3

Intel D425KT Motherboard / Realtek RTL8105E
by Tim Nelson 22 Aug '12

22 Aug '12

Greetings- I'm attempting to get CentOS 5.5 x86 (yes, very specific version required for specific software usage scenario... don't ask) running on an Intel D425KT mini-ITX motherboard. Everything works fine, with the exception of the onboard ethernet, which is a Realtek RTL8105E chip. The stock CentOS installation attempts to use the r8169 driver, which does not work. I've been around the block a few times dealing with Realtek interfaces and their driver hell, but this one is stumping me. Things tried so far: -Adding pci=assign-busses to the kernel parameters -Installing kmod-r8101 from elrepo, old and new versions -Compiling driver from scratch direct from Realtek In every test, I end up with what *appears* to be a functioning ethernet interface (r8101 driver detects chip as RTL8105E correctly), or as reported by the software (ifconfig, ethtool, etc). But, I just cannot get any traffic to pass. There is a link light for the ethernet interface, but no actual activity when testing. Any thoughts? --Tim

6 15

CentOS-announce Digest, Vol 90, Issue 12
by centos-announce-request＠centos.org 21 Aug '12

21 Aug '12

1 0

projects.centos.org - certificate has expired
by Rainer Duffner 21 Aug '12

21 Aug '12

Just FYI I guess, you could also run your own CA and sign stuff yourself. After all, your RPMs are also self-signed ;-)

7 7

KVM Setup for Win7 Pro on CentOS 5.x
by Bill Campbell 21 Aug '12

21 Aug '12

Can somebody point me to a HowTO or other documentation describing the tools available under the CentOS 5 KVM package to create and manage a Windows 7 Pro VM? All my VM experience to date has been the old free VMware Server. I need to: + Create the VM instance allowing for about 50GB total disk space which will be either a single image partitioned into two Windows 'Drives' for the OS and applications/data, or two images. + Install Windows 7 from an OEM System Builder Pack, either using the CD/DVD drive on the Linux server or from an image created with 'dd' from the Win7 media. + Set up network bridging on the private LAN so that the Windows system is accessible via OpenVPN connections from the outside world and by users on the LAN to run a client/server accounting application. Thanks Bill -- INTERNET: bill(a)celestial.com Bill Campbell; Celestial Software LLC URL: http://www.celestial.com/ PO Box 820; 6641 E. Mercer Way Voice: (206) 236-1676 Mercer Island, WA 98040-0820 Fax: (206) 232-9186 Skype: jwccsllc (206) 855-5792 The demands of the majority are always greater than taxation alone can provide and thats where the FED comes in. The value of the dollar has depreciated 97% since the creation of the FED.

8 14

proftp drives me crazy ....
by Götz Reinicke 21 Aug '12

21 Aug '12

Hi, I installed proftpd from Centos repository to my Centos 6.3 server. Iptables and selinux are off; I do have one unix user which can ssh and login to the server. I do use the default config and cant login to the ftp server (home directory of that user is all I want) :/ I use filezilla and Mac OS X native ftp access, both fails with incorrect login (530) WTF can be wrong? Or what may I have to change? Thanks for any hints and suggestions! Regards . Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 82 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Jürgen Walter MdL Staatssekretär im Ministerium für Wissenschaft, Forschung und Kunst Baden-Württemberg Geschäftsführer: Prof. Thomas Schadt

4 5

Debugging/optimizing LAN/Fileserver Performance
by Götz Reinicke 21 Aug '12

21 Aug '12

Hi, I do have one fileserver, which is compared to other systems slow when transferring file through the lan. The test I did get a transfer speed of about 70 - 80 MB/s. I copy files by rsync or scp from a SSD disk to the servers ISCSI Storage and I tested to copy to a serverside RAM disk. I copy one big file of about 2/10 GB; 2 is to the RAM disk. The point is, the mentioned one server just get rates off 35+- MB :/ To DAS HW Raid and RAM disk. And I don't have any clue, why it is so slow .... All servers and clients are connected to gbit full duplex cisco switche ports, which are configured the same. The servers ar centos 6.3. Filesystems ext4 with default settings. I checked cables and logfiles but don't get any errors/warnings to. The difference is: The concerned server has a 'small' CPU: Intel(R) Xeon(R) CPU 3040 @ 1.86GHz Dual Core. My question: What can affect the network speed? What parameters can I check? Thanks for any suggestion or hints! Best Regards . Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 82 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Jürgen Walter MdL Staatssekretär im Ministerium für Wissenschaft, Forschung und Kunst Baden-Württemberg Geschäftsführer: Prof. Thomas Schadt

2 4

Kernel Panic - not syncing: Attempted to kill Init!
by Joseph Koenig 20 Aug '12

20 Aug '12

Just installed CentOS 6.3 from a minimal install disc. All was well, so I ran a yum update, as well as installed some additional packages (mysql, httpd, libjpeg, libpng, and more that I don't remember off the top of my head). Went to reboot the machine and now it won't book up. As it starts to boot, says: Kernel panic - not syncing: Attempted to kill init! Pid: 1, comm: init Not tainted 2.6.32-279.5.1.el6.x86_64 #1 Call Trace: [<ffffffff814fd24a>] ? panic+0xa0/0x168 [<ffffffff81070bd2>] ? do_exit+0x862/0x870 [<ffffffff8117cba5>] ? fput+0x25/0x30 [<ffffffff81070c38>] ? do_group_exit+0x58/0xd0 [<ffffffff81070cc7>] ? sys_exit_group+0x17/0x20 [<ffffffff8100b0f2>] ? system_call_fastpath+0x16/0x1b Also, tried selecting the previous kernel at boot, but got the same message, except with 2.6.32-279.el6.x86_64 referenced. Machine is a dell poweredge 620, perc h310 raid controller, 4x600GB 10K SAS, 16GB RAM, 2xIntel Xeon E5-2630 2.3GHz procs (hex-core), dual 495W power supplies. Any help would be much appreciated. Thanks, -- Joe Koenig Creative Anvil 1346 Baur Blvd Olivette, MO 63132 314-692-0338 joe(a)creativeanvil.com http://www.creativeanvil.com/

4 10

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss