Discuss

discuss@lists.centos.org

34758 discussions

update bind97 centos 5 to centos 6
by fakessh ＠ 15 Jan '12

15 Jan '12

hello centos list hello guys hello master of Fu I want to know the different changes to be applied in the config bind97 because I use dnssec and differences may be present. I do not know they are the differences that may exist between centos 5.7 and bind to bind to centos 6.2 I want to know the small differences that may be present in the config bind in the concerns of my desire to perform the update from my server to centos 6.2 in the best conditions all testimonial are welcome -- http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x092164A7 gpg --keyserver pgp.mit.edu --recv-key 092164A7 http://urlshort.eu fakessh @ http://gplus.to/sshfake http://gplus.to/sshswilting http://gplus.to/john.swilting

1 0

Is avahi essential?
by Timothy Murphy 15 Jan '12

15 Jan '12

I've been getting a few avahi-daemon errors in /var/log/messages, eg ------------------------------- Jan 11 00:40:24 helen avahi-daemon[12732]: Invalid query packet. Jan 11 00:40:29 helen last message repeated 17 times ------------------------------- (This is on a CentOS-5.7 server.) So I looked up avahi on the web, but as far as I could see it is not doing anything essential; so I was wondering if stopping avahi-daemon would have any bad effect? -- Timothy Murphy e-mail: gayleard /at/ eircom.net tel: +353-86-2336090, +353-1-2842366 s-mail: School of Mathematics, Trinity College Dublin

15 30

Re: [CentOS] Storage - posibilities?
by Lisandro Grullon 15 Jan '12

15 Jan '12

I hope you will be clustering those storage arrays since email is such a vital service for any organization. What are your current choices? I don't think there would be any major issues as long as you plan you current and long term capacity needs. Let us know what are your plans at the moment. ------Original Message------ From: Rafał Radecki Sender: centos-bounces(a)centos.org To: CentOS mailing list ReplyTo: CentOS mailing list Subject: [CentOS] Storage - posibilities? Sent: Jan 14, 2012 4:56 AM Hi all. Currently I am administering a mail cluster in which messages are stored on software RAID shared with NFS. There are several NFS servers, every one of them exports a part of all mail files for a specific frontend with postfix. We are thinking about replacing these storage hosts with one solution, maybe a storage array with appropriate disk space and I/O capacity. What are pros and cons of that solution? Do storage arrays have appropriate I/O capacity (X*software RAID)? Does it scale good? Does storage capacity also scale good in those solutions? Best regards, R. _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos Sent on the Sprint® Now Network from my BlackBerry®

1 0

LSI/3ware 9750-4i and multipath I/O
by Vahan Yerkanian 15 Jan '12

15 Jan '12

Hi, I was wondering if anyone has successfully configured two lsi/3ware 9750-4i series controllers for multipathing under CentOS 5.7 x86_64? I've tried some basic setups with both multibus and failover settings, and had repeatable filesystem corruption over a iscsi(tgtd) or nfs3 connection. Any ideas? Vahan

3 12

blue screen instead of login screen
by Frank Cox 14 Jan '12

14 Jan '12

I installed Centos 6.2/i386 on a machine last night with a 1920x1080 monitor. The installer ran in graphical mode and looked fine. After the install was finished I rebooted and ran through the "firstboot" stuff (set up user, etc) with no problem and, again, it looked good. After that, when I should have seen the gdm login screen, all I got was the blue background but not the box with the usernames in it, so there is no way to log in. "telinit 3", login to the text console, no problem. Type "startx", back to the same empty blue screen that gdm shows me. [root@ws194 log]# cat /etc/hosts 127.0.0.1 localhost localhost.localdomain ws194 ws194.ltsp ::1 localhost localhost.localdomain ws194 ws194.ltsp [root@ws194 log]# uname -a Linux ws194.ltsp 2.6.32-220.2.1.el6.i686 #1 SMP Thu Dec 22 18:50:52 GMT 2011 i686 i686 i386 GNU/Linux [root@ws194 log]# I rsynced /etc/skel to /home/myusername before running startx but that made no difference. Still got the blank blue screen. I tried disabling the Composite extension as directed here: http://www.linuxquestions.org/questions/slackware-14/unable-to-startx-after… Nothing changed. I don't see anything in /var/log/Xorg.0.log that looks too interesting; it appears that X figures it's running fine. This was working fine with a smaller monitor on Centos 5.7. Plus the Centos 6 installer looked fine, and the blue screen also looks nice and crisp, -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com www.creekfm.com - FIFTY THOUSAND WATTS of POW WOW POWER!

3 8

Storage - posibilities?
by Rafał Radecki 14 Jan '12

14 Jan '12

Hi all. Currently I am administering a mail cluster in which messages are stored on software RAID shared with NFS. There are several NFS servers, every one of them exports a part of all mail files for a specific frontend with postfix. We are thinking about replacing these storage hosts with one solution, maybe a storage array with appropriate disk space and I/O capacity. What are pros and cons of that solution? Do storage arrays have appropriate I/O capacity (X*software RAID)? Does it scale good? Does storage capacity also scale good in those solutions? Best regards, R.

4 3

iptable rule for bypassing netfilter queue for a matching address.‏
by Arif Tuhin 14 Jan '12

14 Jan '12

I have two iptable rules for userspace modification : iptable -t mangle -A PREROUTING -p udp --dport 9090 -j NFQUEUE iptable -t mangle -A OUTPUT -p udp --sport 9090 -j NFQUEUE I have the following network setup: client ---------------->Linux Box or router--------------------->server. What i'm trying to achieve is modifying all packets which comes from client to 9090 port of the Linux Box. Also which packets will go from Linux Box to client. I do not want to manipulate both from or to the server. So the rules i need will work like this: If packet comes from client to port 9090 i will modify it. Now the router opens symmetric port when it communicates with the server. That means it opens 9090 port when it communicates with the server and hence get modified by the second rule(--sport 9090). I want to avoid this. The rules will be like this: 1.If packet comes from a specific ip block i will accept it. then i will queue the remaining packets based on the destination port it comes to. 2.If packet goes to a specific ip block i will forward it. I will queue the remaining packets based on the source port information. Thanks in advance.

1 0

Rozważania odnośnie storage?
by Rafał Radecki 14 Jan '12

14 Jan '12

Cześć. Aktualnie mam do czynienia z klastrem pocztowym, w którym pliki wiadomości pocztowych użytkowników są przechowywane na raid software-owym udostępnianym po NFS. Serwerów NFS jest kilka, każdy udostępnia podzbiór wiadomości dla odpowiedniego serwera z postfix-em, który jest klientem NFS. Dane z jakiego serwera NFS host frontend z postfix-em powinien montować katalogi z pocztą są w MySQL. Zastanawiamy się nad zastąpieniem kilku host-ów storage jednym rozwiązaniem, macierzą o odpowiedniej pojemności dyskowej i wydajności I/O. Możecie podpowiedzieć plusy i minusy takiego rozwiązania? Czy macierze zazwyczaj dysponują kilkukrotnie większą wydajnością I/O niż pojedynczy serwer z dyskami SATA? Czy taka wydajność I/O jest skalowalna? Czy skalować przestrzeń dyskową w macierzach można "bez ograniczeń"? Dzięki! Pozdrawiam, R.

9 9

defense-in-depth possible for sshd?
by Bennett Haselton 14 Jan '12

14 Jan '12

If an attacker finds an exploit to take control of httpd, they're still blocked in part by the fact that httpd runs as the unprivileged apache user and hence can't write any root-owned files on the system, unless the attacker also knows of a second attack that lets apache escalate its privilege. Basically correct? What about sshd -- assuming that the attacker can connect to sshd at all (i.e. not prevented by a firewall), if they find an exploit to let them take control of sshd, would that imply immediate total control of the machine? Because if they can control sshd they can tell sshd, "Allow root login (even if prohibited in sshd.conf) and accept 'foo' as the password", then the attacker can log in as root. Is it possible, even in theory, to provide a second layer of defense behind sshd to prevent the attacker from controlling the machine, if the attacker controls sshd? The "log me in as root" attack would appear to imply that an extra layer is not possible. (Note I'm not talking about extra layers of security *in front* of sshd, like a firewall that only permits logins from known locations. I'm also not talking about detection after the fact -- obviously you can detect unexpected root logins from the /var/log/secure* files if the attacker doesn't erase them -- only whether you could use extra layers to *prevent* the attacker from owning the machine if they take control of sshd.)

11 16

sendmail deferred
by Ismail Ozatay 13 Jan '12

13 Jan '12

Hi all, I having a problem with my sendmail server running on centos 5.7 x64. Sometimes when we send an email to microsoft exchange servers, sendmail says deferred or timeout. I do not know what is happening. Here is some details; [root@avgw ~]# sendmail -v -qRxxx(a)xxx.gov.qa Running /var/spool/mqueue/q0B7caw9023076 (sequence 1 of 2) <xxx(a)xxx.gov.qa>... Connecting to smtp.xxx.gov.qa. via esmtp... 220 mail.xxx.gov.qa Microsoft ESMTP MAIL Service ready at Fri, 13 Jan 2012 16:37:28 +0300 >>> EHLO avgw.yyy.com 250-mail.xxx.gov.qa Hello [95.9.x.x] 250-SIZE 10485760 250-PIPELINING 250-DSN 250-ENHANCEDSTATUSCODES 250-AUTH 250-8BITMIME 250-BINARYMIME 250 CHUNKING >>> MAIL From:<xxx(a)yyy.com> SIZE=939155 250 2.1.0 Sender OK >>> RCPT To:<xxx(a)xxx.gov.qa> >>> DATA 250 2.1.5 Recipient OK 354 Start mail input; end with <CRLF>.<CRLF> timeout writing message to smtp2.xxx.gov.qa.: Connection reset by smtp2.xxx.gov.qa. <xxx(a)xxx.gov.qa>... Deferred [root@avgw ~]# telnet smtp2.xxx.gov.qa 25 Trying 89.211.40.246... Connected to smtp2.xxx.gov.qa (89.211.x.x). Escape character is '^]'. 220 mail.xxx.gov.qa Microsoft ESMTP MAIL Service ready at Fri, 13 Jan 2012 17:54:56 +0300 It seems everything is ok but i do not know what is the problem with exchange communication. Has anybody experienced this issue? Regards

2 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss