Discuss

discuss@lists.centos.org

34758 discussions

Question on sys v migrating to upstart
by Jerry Geis 24 Jan '12

24 Jan '12

Hi I presently have a line in /etc/inittab (for 5.X based systems) like: v1:2345:respawn:/home/silentm/bin/myfile which runs for any runlevel in 2345. I am looking at migrating that to the new upstart stuff. I can create a file in in /etc/init called myfile.conf and in there have: # /etc/init/myfile.conf start on startup This seems ok... However - my question is how do I stop they myfile and restart it. In the past I would comment out the entry in /etc/initttab and do "init q". then put on the new version lets say... then uncomment the /etc/inittab entry and do another "init q". How do I do that in the new upstart ? Thanks, Jerry

1 0

Machine becoming irresponsive
by Dotan Cohen 24 Jan '12

24 Jan '12

There is a CentOS 5.2 machine that is sometimes found to be offline. It runs a few websites but nothing very high traffic. I happened to notice a few days ago that before it went down, one of the sites written in PHP was throwing errors that it could not connect to the MySQL backend. Two hours later, the whole server was down and wasn't even responding to SSH. It's not my box, but I may have opportunity to look at it. After going through dmesg and messages, if I don't find anything obvious, what should I start looking for? What are the likely, common culprits and how to identify them? Is there a page of the fine manual that addresses issues like this? Thanks. -- Dotan Cohen http://gibberish.co.il http://what-is-what.com

10 12

rpc.statd: gethostbyname error for ...
by Toralf Lund 24 Jan '12

24 Jan '12

Hi, Lately, the system log on my CentOS 5 box, with all the latest updates, have started filling up with messages of the form: Jan 24 09:47:26 i58524 rpc.statd[3452]: gethostbyname error for i58524 Jan 24 09:47:26 i58524 rpc.statd[3452]: STAT_FAIL to i58524 for SM_MON of 10.30.39.59 Jan 24 09:47:26 i58524 kernel: lockd: cannot monitor 10.30.39.59 It does not seem like there is really anything wrong with the hosts setup, though - the gethostbyname call in question works appears just fine in other programs. Does anyone have any idea what may be going on? Note: i58524 is the local hostname, 10.30.39.59 is the IP address of an NFS server I'm using actively (so nothing suspicious, there.) - Toralf This e-mail, including any attachments and response string, may contain proprietary information which is confidential and may be legally privileged. It is for the intended recipient only. If you are not the intended recipient or transmission error has misdirected this e-mail, please notify the author by return e-mail and delete this message and any attachment immediately. If you are not the intended recipient you must not use, disclose, distribute, forward, copy, print or rely on this e-mail in any way except as permitted by the author.

1 0

CentOS and LessFS
by Hugh E Cruickshank 24 Jan '12

24 Jan '12

Hi All: We have been looking at implementing deduplication on a backup server. >From what I have been able to find the available documentation is pretty thin. I ended up trying to install LessFS on this CentOS 5.7 box but we have now encountered problems with fuse version. Has anyone out there been able to get LessFS running on CentOS 5.7 and can provide some pointers? If not LessFS can you suggest an alternate deduplication software? TIA Regards, Hugh -- Hugh E Cruickshank, Forward Software, www.forward-software.com

11 31

DNS and Reverse Adresses
by Götz Reinicke 23 Jan '12

23 Jan '12

Hi, I do have a domain and a couple of different ip networks. E.g. domainname.de and 172.17.0.0/16 and 192.168.200.0/24 In our old dns files I only have a reverse master zone for the 172.17.-lans, but also 192.168.200.x addresses in the forward zone config. My question: dose maybe someone forgot the 192.168.200.x reverse zone files and config and can I just create a file like that for the 172.17 hosts and adding the config for the reverse zone to my named.conf? Any suggestions are welcome. Regards. Götz who has to deal with some very old horses ... :) -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Jürgen Walter MdL Staatssekretär im Ministerium für Wissenschaft, Forschung und Kunst Baden-Württemberg Geschäftsführer: Prof. Thomas Schadt

2 1

Re: [CentOS] Machine becoming irresponsive
by Dotan Cohen 23 Jan '12

23 Jan '12

On Mon, Jan 23, 2012 at 18:57, <m.roth(a)5-cent.us> wrote: > a) You should NOT, under any circumstances, be backing it up to your home > systems. You should be backing it up to a work server - there are very > serious legal implications involved here. > Thanks, but there are no customer data or other sensitive data on the server. I wouldn't dream of compromising customer data! > b) Since it's in a datacenter, presumably being hosted, you need to > contact the datacenter provider and inform them that you believe it may be > infected, and work with them to investigate - they may have an intrusion > response team far more qualified than you to investigate whether there's > been an intrusion. On the other hand, you've also got to worry about your > company's proprietary data, and what they should see, and what they should > not. > That is a good idea. There do exist professionals for this type of work, and that is the place to find them. Thanks. > As I said, a *lot* of legal issues - don't put yourself into a position > that could get you, personally, out of a job, sued, or even, as an > extreme, jailed. > Thank you for the concern. I will be cautious and not reckless! My own security is not worth that server! -- Dotan Cohen http://gibberish.co.il http://what-is-what.com

1 0

CentOS6 KDE: Desktop Activity type: desktop only
by wwp 23 Jan '12

23 Jan '12

Hello there, I'm looking at different desktop activity types (in Desktop Settings), and on my CentOS 6, I only have "desktop". No folderview, for instance. Does anybody know how to install/enable other types? Regards, -- wwp

2 2

weird XFS problem
by Boris Epstein 23 Jan '12

23 Jan '12

Hello all, I have a CentOS 5.7 machine hosting a 16 TB XFS partition used to house backups. The backups are run via rsync/rsnapshot and are large in terms of the number of files: over 10 million each. Now the machine is not particularly powerful: it is 64-bit machine, dual core CPU, 3 GB RAM. So perhaps this is a factor in why I am having the following problem: once in awhile that XFS partition starts generating multiple I/O errors, files that had content become 0 byte, directories disappear, etc. Every time a reboot fixes that, however. So far I've looked at logs but could not find a cause of precipitating event. Hence the question: has anyone experienced anything along those lines? What could be the cause of this? Thanks. Boris.

5 18

Problem with spamassassin under CentOS-5.7
by Timothy Murphy 23 Jan '12

23 Jan '12

I'm getting the following warning in my logwatch, or if I restart the spamassassin service. I've tried yum-reinstalling the packages involved but that didn't help. ------------------------------- /etc/cron.daily/sa-learn: Subroutine IO::Socket::INET6::AF_INET6 redefined at /usr/lib/perl5/5.8.8/Exporter.pm line 65. at /usr/lib/perl5/vendor_perl/5.8.8/IO/Socket/INET6.pm line 16 Subroutine Net::DNS::Resolver::Base::AF_INET6 redefined at /usr/lib/perl5/5.8.8/Exporter.pm line 65. at /usr/lib64/perl5/vendor_perl/5.8.8/x86_64-linux-thread- multi/Net/DNS/Resolver/Base.pm line 66 Learned tokens from 1 message(s) (1 message(s) examined) ------------------------------- I wonder if anyone else is getting this? -- Timothy Murphy e-mail: gayleard /at/ eircom.net tel: +353-86-2336090, +353-1-2842366 s-mail: School of Mathematics, Trinity College Dublin

2 2

squid transparent proxy problem
by Hüvely Balázs 23 Jan '12

23 Jan '12

Greetings, I installed a squid 3.1.10.i686 squid to a centos 6.2i686. The proxy is working fine with the default config. After I decided to use it as a transparent proxy, I added two lines to config: http_proxy 10.0.5.1:3128 transparent, always_direct allow all http_port 10.0.5.1:3128 transparent # # Recommended minimum configuration: # acl manager proto cache_object #acl localhost src 127.0.0.1/32 ::1 acl localhost src 127.0.0.1/32 #acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1 acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 # Example rule allowing access from your local networks. # Adapt to list your (internal) IP networks from where browsing # should be allowed acl localnet src 10.0.0.0/8 # RFC1918 possible internal network #acl localnet src 172.16.0.0/12 # RFC1918 possible internal network #acl localnet src 192.168.0.0/16 # RFC1918 possible internal network #acl localnet src fc00::/7 # RFC 4193 local private network range #acl localnet src fe80::/10 # RFC 4291 link-local (directly plugged) machines acl SSL_ports port 443 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 # https acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl CONNECT method CONNECT # # Recommended minimum Access Permission configuration: # # Only allow cachemgr access from localhost http_access allow manager localhost http_access deny manager # Deny requests to certain unsafe ports http_access deny !Safe_ports # Deny CONNECT to other than secure SSL ports http_access deny CONNECT !SSL_ports # We strongly recommend the following be uncommented to protect innocent # web applications running on the proxy server who think the only # one who can access services on "localhost" is a local user #http_access deny to_localhost # # INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS # # Example rule allowing access from your local networks. # Adapt localnet in the ACL section to list your (internal) IP networks # from where browsing should be allowed http_access allow localnet http_access allow localhost # And finally deny all other access to this proxy http_access deny all # Squid normally listens to port 3128 http_port 3128 # We recommend you to use at least the following line. hierarchy_stoplist cgi-bin ? # Uncomment and adjust the following to add a disk cache directory. #cache_dir ufs /var/spool/squid 100 16 256 # Leave coredumps in the first cache dir coredump_dir /var/spool/squid # Add any of your own refresh_pattern entries above these. refresh_pattern ^ftp: 1440 20% 10080 refresh_pattern ^gopher: 1440 0% 1440 refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 refresh_pattern . 0 20% 4320 always_direct allow all There are 2 iptables rule too: -A PREROUTING -i lo -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128 -A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128 eth0 is the local NIC, eth1 is for internet. ipv4_forward is enabled. [root@atom squid]# iptables -S -t nat -P PREROUTING ACCEPT -P POSTROUTING ACCEPT -P OUTPUT ACCEPT -A PREROUTING -i lo -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128 -A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128 -A POSTROUTING -o eth1 -j MASQUERADE [root@atom squid]# iptables -S -P INPUT DROP -P FORWARD ACCEPT -P OUTPUT ACCEPT -A INPUT -i eth1 -m state --state RELATED,ESTABLISHED -j ACCEPT -A INPUT -p udp -m udp --dport 53 -j ACCEPT -A INPUT -p tcp -m tcp --dport 53 -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -i tun+ -j ACCEPT -A INPUT -i eth0 -j ACCEPT -A INPUT -p icmp -j ACCEPT -A INPUT -j DROP -A FORWARD -j ACCEPT -A OUTPUT -j ACCEPT The cache.log tells me about strange errors: 2012/01/22 00:23:51| Starting Squid Cache version 3.1.4 for i386-koji-linux-gnu... 2012/01/22 00:23:51| Process ID 4981 2012/01/22 00:23:51| With 1024 file descriptors available 2012/01/22 00:23:51| Initializing IP Cache... 2012/01/22 00:23:51| DNS Socket created at [::], FD 7 2012/01/22 00:23:51| Adding nameserver 192.168.4.254 from /etc/resolv.conf 2012/01/22 00:23:51| Adding nameserver 192.168.5.254 from /etc/resolv.conf 2012/01/22 00:23:51| User-Agent logging is disabled. 2012/01/22 00:23:51| Referer logging is disabled. 2012/01/22 00:23:51| Unlinkd pipe opened on FD 12 2012/01/22 00:23:51| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec 2012/01/22 00:23:51| Store logging disabled 2012/01/22 00:23:51| Swap maxSize 0 + 262144 KB, estimated 20164 objects 2012/01/22 00:23:51| Target number of buckets: 1008 2012/01/22 00:23:51| Using 8192 Store buckets 2012/01/22 00:23:51| Max Mem size: 262144 KB 2012/01/22 00:23:51| Max Swap size: 0 KB 2012/01/22 00:23:51| Using Least Load store dir selection 2012/01/22 00:23:51| Set Current Directory to /var/spool/squid 2012/01/22 00:23:51| Loaded Icons. 2012/01/22 00:23:51| Accepting HTTP connections at [::]:3128, FD 13. 2012/01/22 00:23:51| HTCP Disabled. 2012/01/22 00:23:51| Squid modules loaded: 0 2012/01/22 00:23:51| Adaptation support is off. 2012/01/22 00:23:51| Ready to serve requests. 2012/01/22 00:23:52| storeLateRelease: released 0 objects 2012/01/22 00:23:56| idnsGrokReply: Malformed DNS response 2012/01/22 00:24:01| idnsGrokReply: Malformed DNS response 2012/01/22 00:24:02| idnsGrokReply: Malformed DNS response 2012/01/22 00:24:06| idnsGrokReply: Malformed DNS response 2012/01/22 00:24:08| idnsGrokReply: Malformed DNS response 2012/01/22 00:24:13| idnsGrokReply: Malformed DNS response 2012/01/22 00:24:16| idnsGrokReply: Malformed DNS response 2012/01/22 00:24:23| idnsGrokReply: Malformed DNS response I tried to get another verision of squid, but 3.1.4, and 3.1.10 makes the same error. On a fedora 16 x86_64, with the same config as above, there is no error, and works perfectly, with the same iptables rule. Any idea, how can I fix it, or what I may configured wrong? Thanks Balazs

2 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss