Discuss

discuss@lists.centos.org

34758 discussions

Update to EL 6.3 breaks TCP NFS automounts
by Cal Webster 09 Aug '12

09 Aug '12

See Red Hat Bugzilla bug #846852 for details. https://bugzilla.redhat.com/show_bug.cgi?id=846852 FYI: We discovered that after updating to EL 6.3 on our x86_64 server, autofs 5.0.5-54 broke our nightly backups that rely on automounting an NFS share hosted on another EL 6 machine on our local network. The machine hosting NFS server was configured to allow only TCP connections to the port specified by MOUNTD_PORT in "/etc/sysconfig/nfs" Any attempts to access this share caused segmentation faults in the automount daemon. EL 6.2 hosts that had not yet been updated had no problems accessing the same NFS shares. While testing we found that opening the UDP MOUNTD_PORT on the NFS server firewall allowed successful access to the NFS shares from the EL 6.3 NFS client without segfault. Closing the port caused the EL 6.3 NFS client to return to the faulty behavior. On another fully updated EL 6.3 i386 host, we were able to duplicate the same symptoms. On one of the EL 6.2 hosts not yet updated we confirmed no issues with the previous autofs package, then upgraded only autofs. After the upgrade we confirmed symptoms identical to the fully updated 6.3 machines. While filing the bug report I found 2 other, possibly related, bugs written against autofs 5.0.5-54 that did not describe our symptoms but may be relevant to other users on this list. Bug 840025 - autofs 5.0.5-54 fails to mount share on IPv6 netapp https://bugzilla.redhat.com/show_bug.cgi?id=840025 Bug 834641 - autofs requires portmapper on server for NFSv4 mounts https://bugzilla.redhat.com/show_bug.cgi?id=834641 [Workaround] For now, we are leaving the UDP NFS port open on the firewall of the NFS server. Our networks are completely isolated from the outside world so this doesn't pose a significant risk. However, this may not be acceptable for everyone's environment.

4 4

Re: [CentOS] How protect bash history file, do audit alike in server
by Heng Su 08 Aug '12

08 Aug '12

Hi Harald, Thank you so much to guide to correct path and let me know how to move on, learn more from you. Indeed I am a developer not an admin, that's a good question for the headers of my company why there is no admin to manage the server in our company. Anyway this can not controlled by me, I am a developer leader just want to make sure my team member do correct things in server. I really like linux especially CentOS, I want learn more from you. Thank you again. Best Regards. On 08/09/2012 03:14 AM, Reindl Harald wrote: > > Am 08.08.2012 21:07, schrieb Heng Su: >> OK, assuming there is an jboss application server running under user >> 'jboss' in PRD server, and we have 4 developers want to update the jar >> file in that server. > look in the manuals for sftp / chroot and bind-mounts > >> they always login use same user 'jboss' to do updating file in server, >> how can I tell which guy doing what things cause the server down as they >> use same user account 'jboss'? > WHY do they user the same acount? > >> So I don't know how should I do as I am a shoddy server admin, so I use >> root to maintain the application server. then create 4 account in server >> for individual developer. So if they want copy, move or other operations >> on those deploy folder or files. Let them use sudo. Now I got all >> commands they did in /var/log/secure > a DEVELOPER has not to get sudo or even any shell to update > any files - never, really never > > they have only to update files and if needed get WEB-APLICATIONS > with cron-jobs behind to call CAREFUL DEFINED specific commands > > if you give different people sudo/root permeissions because > you are missing the knowledge how to maintain a server > in a secure way you are the wrong person with the wrong job > > how comes taht you ignore all teh security-news at least of the > recent two years? how comes that there is nobody in your comanpy > with the knowledge a admin needs? > -- Best Regards, Su Heng

1 0

Re: [CentOS] [SOLVED] iptables rule question for Centos 5
by Blackburn, Marvin 08 Aug '12

08 Aug '12

We have a simple configuration so we could get by with this -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT -A RH-Firewall-1-INPUT -s "SOURCIPADDRESS" -j REJECT --reject-with icmp-host-prohibited it doesn't scale well but servies the purpose. _____________________________________ "He's no failure. He's not dead yet." William Lloyd George -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Steve Clark Sent: Thursday, August 02, 2012 1:17 PM To: CentOS mailing list Cc: Blackburn, Marvin Subject: Re: [CentOS] iptables rule question for Centos 5 On 08/02/2012 01:06 PM, Blackburn, Marvin wrote: > I have a server that allows incoming traffic for ssh and some other > things. > > I need to set up a rule that will drop/reject all traffic from a > particular server except ssh. > > How can I do that. > > > > > > _____________________________________ > "He's no failure. He's not dead yet." > William Lloyd George > > > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos > Something like this first in your ruleset: -A INPUT -i eth0 -p tcp -s 10.0.1.0/24 --sport 1024:65535 -d 10.0.1.90/32 ! --dport 22 -j DROP substitute your appropriate ips and interface -- Stephen Clark *NetWolves* Director of Technology Phone: 813-579-3200 Fax: 813-882-0209 Email: steve.clark(a)netwolves.com http://www.netwolves.com _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

5 6

CentOS-announce Digest, Vol 90, Issue 5
by centos-announce-request＠centos.org 08 Aug '12

08 Aug '12

1 0

CentOS-announce Digest, Vol 90, Issue 1
by centos-announce-request＠centos.org 08 Aug '12

08 Aug '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2012:1126 CentOS 5 samba3x Update (Johnny Hughes) 2. CESA-2012:1130 Moderate CentOS 5 xen Update (Johnny Hughes) 3. CEBA-2012:1128 CentOS 5 python-iniparse FASTTRACK Update (Johnny Hughes) 4. CESA-2012:1131 Important CentOS 6 krb5 Update (Johnny Hughes) 5. CESA-2012:1132 Important CentOS 6 icedtea-web Update (Johnny Hughes) 6. CEBA-2012:1134 CentOS 5 symlinks FASTTRACK Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 31 Jul 2012 22:54:58 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:1126 CentOS 5 samba3x Update To: centos-announce(a)centos.org Message-ID: <20120731225458.GA28891(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:1126 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-1126.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 9a6fa2d1334aa8bafc93794a16be2c8c9b834e1aa6ebc3c44f4b5aa5c12ad5f6 samba3x-3.5.10-0.110.el5_8.i386.rpm 52566d68beeae5e58dc54a411c5658a1efa71695c9ad1371ddeb5b7611cadf61 samba3x-client-3.5.10-0.110.el5_8.i386.rpm 2b7835904e1dcc6774cde74340617e4c8680cd6052df0bc0f4c2300aadfc10cc samba3x-common-3.5.10-0.110.el5_8.i386.rpm 49199608bed393b54b28415b4688e25fb93e995eac2c6dff1ed46dc9ba14808d samba3x-doc-3.5.10-0.110.el5_8.i386.rpm 9446709b51a26bf11e8045da469f1aca4e9bc8982852cf7b19f008097885db02 samba3x-domainjoin-gui-3.5.10-0.110.el5_8.i386.rpm 05c4863eed4bbfb6f30d2921c188e9ad06b66c06d8a15b1aedd14fcbc925642c samba3x-swat-3.5.10-0.110.el5_8.i386.rpm 868f771db634d74f53cb8ab06f01b797d1b28e470bb4b2106545365a2ee28eef samba3x-winbind-3.5.10-0.110.el5_8.i386.rpm 8e6a61c6090692bae6e48968d3865c13496794f69ecbe1cfc135cbd220f81f32 samba3x-winbind-devel-3.5.10-0.110.el5_8.i386.rpm x86_64: 268d2eab51e8b3363ea5bb3f6b28ed3d0ead69fe135b5e48ae1a3806692a0055 samba3x-3.5.10-0.110.el5_8.x86_64.rpm c76bc92b3063efbfc43ec97bef3c918438969e7203f9405e2cc58e6ccceef938 samba3x-client-3.5.10-0.110.el5_8.x86_64.rpm 47e67cf7e51862a886971b8a88b944b5763b7c1033b6a5c8e8bc45c63edb3458 samba3x-common-3.5.10-0.110.el5_8.x86_64.rpm 6b456fe13f7a39133cd20b5840345ad86f8a553692196d21d338c7d5cbcad43b samba3x-doc-3.5.10-0.110.el5_8.x86_64.rpm 6579816c2549f7db9208ccaddecf5cd92203249bac5419811e4739749dae2405 samba3x-domainjoin-gui-3.5.10-0.110.el5_8.x86_64.rpm eb5bafd1670d9c9425e399aa91d556a313390a9489d2c29783b7df06d36d7afd samba3x-swat-3.5.10-0.110.el5_8.x86_64.rpm 868f771db634d74f53cb8ab06f01b797d1b28e470bb4b2106545365a2ee28eef samba3x-winbind-3.5.10-0.110.el5_8.i386.rpm 0ba54d111ba3aceab5acf11328ebe5a5bbe6bc2a3a95b2c7d59b756cb1fe572f samba3x-winbind-3.5.10-0.110.el5_8.x86_64.rpm 8e6a61c6090692bae6e48968d3865c13496794f69ecbe1cfc135cbd220f81f32 samba3x-winbind-devel-3.5.10-0.110.el5_8.i386.rpm 138dd9031b93ded540510a63479f088e0b692516235e9648dc45a52517e5936f samba3x-winbind-devel-3.5.10-0.110.el5_8.x86_64.rpm Source: 35cee77c05e95e24446ce14258d593f11782fa565689fd2a65b2624ca7c33568 samba3x-3.5.10-0.110.el5_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 31 Jul 2012 22:57:53 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:1130 Moderate CentOS 5 xen Update To: centos-announce(a)centos.org Message-ID: <20120731225753.GA29027(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:1130 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-1130.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 99d0a06fd4267a9a28a13bd23ffe9822aabdb4e86320f6768ae8caa15fdcec9b xen-3.0.3-135.el5_8.4.i386.rpm 624c20a5a80c37318c3b1d33a831bbc7d1c5f398f3dde6b8e1283cc832112915 xen-devel-3.0.3-135.el5_8.4.i386.rpm 760677b2f647edc72a8fbbda44f516942625982a09368d5e072e3d90adec767b xen-libs-3.0.3-135.el5_8.4.i386.rpm x86_64: bc7907b04214a2b242b15140104ed026cb1c9d8fa76cfaa82eca0874c8f74ad5 xen-3.0.3-135.el5_8.4.x86_64.rpm 624c20a5a80c37318c3b1d33a831bbc7d1c5f398f3dde6b8e1283cc832112915 xen-devel-3.0.3-135.el5_8.4.i386.rpm f43489a87dc12f4b7de8042b2fa3ec0dc6e02a1e10aa98ef1ea9862b37d67e8a xen-devel-3.0.3-135.el5_8.4.x86_64.rpm 760677b2f647edc72a8fbbda44f516942625982a09368d5e072e3d90adec767b xen-libs-3.0.3-135.el5_8.4.i386.rpm c39504c160bba874277ab0fe32709127bd181445f05357ab49500a940c337b8e xen-libs-3.0.3-135.el5_8.4.x86_64.rpm Source: ce7bbc557f72e2348f3e5c226a533876842e92328db3b0c9fbb288e01536a953 xen-3.0.3-135.el5_8.4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Tue, 31 Jul 2012 23:16:09 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:1128 CentOS 5 python-iniparse FASTTRACK Update To: centos-announce(a)centos.org Message-ID: <20120731231609.GA30562(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:1128 Upstream details at : http://rhn.redhat.com/errata/RHBA-2012-1128.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: de4ef90b51675da8cbcfcd77125337eca517df7fc6623092325519ef15245fa6 python-iniparse-0.2.3-6.el5.noarch.rpm x86_64: de4ef90b51675da8cbcfcd77125337eca517df7fc6623092325519ef15245fa6 python-iniparse-0.2.3-6.el5.noarch.rpm Source: 4353f94848127730b40b293d21052db25968a5246722145dd26d8f2b33d9f5e6 python-iniparse-0.2.3-6.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Tue, 31 Jul 2012 23:18:36 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:1131 Important CentOS 6 krb5 Update To: centos-announce(a)centos.org Message-ID: <20120731231836.GA30734(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:1131 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-1131.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 91e2684e2ba585f1a75160c01aef49192408f9861d8827e6a6dec24518a93c52 krb5-devel-1.9-33.el6_3.2.i686.rpm 3a5b5a17cd82f7f7c1e1d295ff2d2551450e17844ddcd78247654ea614125636 krb5-libs-1.9-33.el6_3.2.i686.rpm 2db0d3e82635f440db55b267999a0dada65338d7e5380b99ddaa8457232c798a krb5-pkinit-openssl-1.9-33.el6_3.2.i686.rpm 1a5fdc266ca7ec4bd8bce0926af02af2f299ac1682bdfdb89c2e469e151f783b krb5-server-1.9-33.el6_3.2.i686.rpm 3ef367b3ead3efd98ecf325e4519022c3b2aa633f377a3c8ae43636d85316909 krb5-server-ldap-1.9-33.el6_3.2.i686.rpm 249aeaae6a4480f47f3cbd64398f97a969636aa25d7347cb5111a079d56e22ea krb5-workstation-1.9-33.el6_3.2.i686.rpm x86_64: 91e2684e2ba585f1a75160c01aef49192408f9861d8827e6a6dec24518a93c52 krb5-devel-1.9-33.el6_3.2.i686.rpm be31d0353dc31f060172e49090d5d7c33edcdf8c4686d82e101b31927d5cac82 krb5-devel-1.9-33.el6_3.2.x86_64.rpm 3a5b5a17cd82f7f7c1e1d295ff2d2551450e17844ddcd78247654ea614125636 krb5-libs-1.9-33.el6_3.2.i686.rpm 62693af68105abd6078bd915a32ec5212e88d78fc96c0282da11dd62b75cf739 krb5-libs-1.9-33.el6_3.2.x86_64.rpm f9c5d3ee9c691158cc0217d173750b204d219c309d7a199ac917cc83c59d18cb krb5-pkinit-openssl-1.9-33.el6_3.2.x86_64.rpm 814a8d2cc9271d7f29c75a8fb1aac04b051706fdebc03118388c39668a5c9941 krb5-server-1.9-33.el6_3.2.x86_64.rpm 3ef367b3ead3efd98ecf325e4519022c3b2aa633f377a3c8ae43636d85316909 krb5-server-ldap-1.9-33.el6_3.2.i686.rpm ce59f30bd0dcde6242609960cad4f1e62e3c1bccd8dd8268952dfb3b2dbe3b95 krb5-server-ldap-1.9-33.el6_3.2.x86_64.rpm bdaf9f5d1b6cb46770230e94214becc09d21503e39575ee27a10cf6efb14b0e6 krb5-workstation-1.9-33.el6_3.2.x86_64.rpm Source: 76c145b259a08fd426a097d579efb63c2f47256712fc0bc5e06e3114cef04b48 krb5-1.9-33.el6_3.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Tue, 31 Jul 2012 23:18:48 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:1132 Important CentOS 6 icedtea-web Update To: centos-announce(a)centos.org Message-ID: <20120731231848.GA30816(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:1132 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-1132.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 1c10116bc0ba1eb809918574ac7b863705c3c0f8b88c803af90502a9aed7c12e icedtea-web-1.2.1-1.el6_3.i686.rpm ff821206c5984afd8f60f8c1077e3cb4e823ef255a1bfdfd54b7e9e55f263dfb icedtea-web-javadoc-1.2.1-1.el6_3.i686.rpm x86_64: b8a07d55726ab4a51c882d3d120298e8efa30b48295f650ac86ec593b6d70163 icedtea-web-1.2.1-1.el6_3.x86_64.rpm a66f46a1da7b11936bf4c10c19e1dce113bde2f723436b56af8bb027a5163195 icedtea-web-javadoc-1.2.1-1.el6_3.x86_64.rpm Source: 098802f1bfad854a10aeebf3641fd7faa1982182f3d51e4504ae8663cbcc63af icedtea-web-1.2.1-1.el6_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Wed, 1 Aug 2012 14:07:31 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:1134 CentOS 5 symlinks FASTTRACK Update To: centos-announce(a)centos.org Message-ID: <20120801140731.GA9469(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:1134 Upstream details at : http://rhn.redhat.com/errata/RHBA-2012-1134.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 7dd9d15ed0403860569976d101a197b5a6d771046968b108e859c3cd825a52e8 symlinks-1.2-26.el5.i386.rpm x86_64: 4fb24c27273e5cf9558e27181541e4752fc925b312976c3d4032e3395bfe96d3 symlinks-1.2-26.el5.x86_64.rpm Source: fc1c8f7fab2fa376973f347718bf07ad96ccccccaa5df39f3e23052a4c04035a symlinks-1.2-26.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 90, Issue 1 **********************************************

2 1

centos deployment community project
by Kay Williams 07 Aug '12

07 Aug '12

Hello, Wanted to let folks know about a community project focused on centos/rhel deployment. The project is called CentOS Studio. The idea is to provide a general platform for assembling and testing rpm package repositories containing existing rpms, user-provided content and, optionally, anaconda installation images. The repositories can be used with yum, as usual, or to install complete systems from boot images, over the network, etc. A stable beta release of the CentOS Studio product is available at www.centosstudio.org. Hope this may be useful to some. Kay

1 0

centos deployment project
by Kay Williams 07 Aug '12

07 Aug '12

1 0

ATI X1800 XT driver for CentOS 5
by Dick Holland 07 Aug '12

07 Aug '12

Does anyone have direct experience of setting up an ATI X1800 XT under CentOS 5? I have seen horror stories on the web about buggy drivers. What is the best source (and version) for drivers? Any advice would be much appreciated. -- Dick Holland

1 0

Re: [CentOS] CentOS Digest, Vol 91, Issue 7
by Cal Sawyer 07 Aug '12

07 Aug '12

On 07/08/12 17:00, centos-request(a)centos.org wrote: > Message: 6 > Date: Mon, 06 Aug 2012 21:34:43 +0200 > From: Alexander Dalloz <ad+lists(a)uni-x.org> > Subject: Re: [CentOS] Configure LAGG Interface? > To: centos(a)centos.org > Message-ID: <50201C53.2070300(a)uni-x.org> > Content-Type: text/plain; charset=ISO-8859-1 > > Am 06.08.2012 19:44, schrieb Rainer Duffner: >> > >> > Am 06.08.2012 um 19:22 schrieb Cal Sawyer <cal-s(a)blue-bolt.com>: >> > >>> >> In my experience, LAG/LACP won't provide aggregatation, only failover >>> >> and fault tolerance. For link aggregation, you don't need to configure >>> >> the switch ports - just set bonding to mode=6 for balanced >>> >> transmit/receive and plug up the the NICs to a group of ports on the >>> >> switch. However, balance-alb doesn't help with single stream rsync/FTP >>> >> sessions, etc, but helps a lot with concurrent transmits/receives as >>> >> encountered in typical fileserver scenarios. >>> >> >> > >> > >> > On FreeBSD, you don't get 2*1 Gbit from A to B, but 1*1 Gbit from A to B and another 1*1 Gbit from C to B. >> > "B" being the server with the LAGG interface. Yup, as i said, which isn't too bad (imho). "Real" LAG/LACP can't provide 2x bandwidth for one stream either, can it? >> > >> > How is that in CentOS? > It is of course the same, as long as we speak about standardized 802.3ad > protocol. > > Alexander The nice thing about balance-alb is that you don't have to care (or forget, in my case) about how the switch is configured. Ever come across a switch that "someone else" has set up LAGs on but nobody can remember (or admit) why? ) Throw arpwatch on the bonded-NICs server and see how the bonded interface flips between the slave MACs as intended - cal

1 0

CentOS-announce Digest, Vol 90, Issue 4
by centos-announce-request＠centos.org 07 Aug '12

07 Aug '12

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss