Discuss

discuss@lists.centos.org

34758 discussions

openvpn + bridge utils in CentOS 6
by 唐建伟 09 Nov '11

09 Nov '11

Hi all, I just intalled openvpn + bridge in CentOS 6, but i get strange problems: the remote PCs cannot get the local PCs' MACs and also, the local PCs cannot get the remote PCs' MACs but when i run "brctl showmacs br0" it will list all the MACs and also " brctl show" will show that all the correct adapters are in br0 SELinux disabled any ideas? -- Tang Jianwei System Administrator

3 13

Linux hosts file /etc/hosts
by Jonathan Vomacka 08 Nov '11

08 Nov '11

Good afternoon Gentlemen, I have a question regarding /etc/hosts for CentOS 6 x64. I already have a hostname set on my server, however there are 10 additional IP aliases assigned to the box, one which I plan to use as a mail server. The mail server will be serving mail for a completely different domain (different then the default hostname of my box). My question is this: If I take one of my additional IP addresses and bind it to postfix for mail, do I also have to specify the remote IP and mail server hostname in /etc/hosts? For example my hosts looks something like this 127.0.0.1 localhost Can I add? 66.x.x.x mail.foo.bar Is this even necessary?

5 7

redhat vs centos
by Bob Hoffman 08 Nov '11

08 Nov '11

I have been reading the threads on here with great ernest about redhat making a move to throw off centos compilations. I read some stories about microsoft wanting to work closer with centos http://www.theregister.co.uk/2011/05/17/microsoft_and_centos/ I have to update to centos 6 due to some needs of clients who need newer mysql and php (and installing them on centos5 was too hard for me). I am thinking of going ubuntu server but at the same time I have this feeling centos team will pull through, make a new method to streamline this, and redhat will back down and stop being REDa$$-hats. Redhat thinks us 'freebie' people will move to them to get the quicker updates and releases. I look at the pricing and I say they must be out of their minds. The server comes at 1,999 a year for 2 sockets and more than 4 guests...which is what I would need. The virtualization package, which may or may not be needed is thousands more. All for one server. that ain't gonna happen. Personally I am thinking of staying away from all red hat clones due to redhat's actions for my own security. The only thing on the horizon I see is ubuntu server as best supported and up to date. I am teetering tonight. I have downloaded it and am thinking of wiping my new centos6 install and trying it out. How do you all feel about this turn of events and what is your gut feeling on where this is going? And how about them hard drive prices?!!

32 88

Re: [CentOS] CentOS 6 yum Groupinstall vs Manual install
by Jonathan Vomacka 08 Nov '11

08 Nov '11

Makes sense, I appreciate the help Richard. On 11/8/2011 12:55 PM, lists-centos wrote: > > > ------------ Original Message ------------ >> Date: Tuesday, November 08, 2011 12:28:42 PM -0500 >> From: Jonathan Vomacka<juvix88(a)gmail.com> >> To: centos(a)centos.org >> >> Gentlemen, >> >> I have a question regarding yum groupinstall vs just using yum >> install. I have been reading tutorials online (for example how to >> run a Centos LAMP). Most of the tutorials have examples to >> install httpd, mysql, etc using yum install httpd.... >> >> The reason for this e-mail is that I noticed in yum grouplist that >> there is an option to install Web Server, MySQL database server, >> etc. >> >> Question: Is there any advantage to using yum groupinstall for a >> webserver as opposed to using yum install httpd? I am just curious >> why most online docs dont mention groupinstall and only reference >> installing each app manually one by one. >> >> Any information would be appreciated > > I generally don't use "groupinstall" on things that I'm familiar > with because I want more control. Without more digging than it's > worth I don't know exactly what packages are included. Most times a > "groupinstall" will miss things I need while including things I know > I don't want. > > I suppose that if you are unfamiliar with a whole class of software > and want to do a brute-force install, then "groupinstall" serves a > purpose. [then again, actually spending the time to learn the > various pieces, and why you would want them, will serve one better > in the long run.] > > > - Richard > >

1 0

CentOS 6 yum Groupinstall vs Manual install
by Jonathan Vomacka 08 Nov '11

08 Nov '11

Gentlemen, I have a question regarding yum groupinstall vs just using yum install. I have been reading tutorials online (for example how to run a Centos LAMP). Most of the tutorials have examples to install httpd, mysql, etc using yum install httpd.... The reason for this e-mail is that I noticed in yum grouplist that there is an option to install Web Server, MySQL database server, etc. Question: Is there any advantage to using yum groupinstall for a webserver as opposed to using yum install httpd? I am just curious why most online docs dont mention groupinstall and only reference installing each app manually one by one. Any information would be appreciated

2 2

CentOS-announce Digest, Vol 81, Issue 5
by centos-announce-request＠centos.org 08 Nov '11

08 Nov '11

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2011:1435 CentOS 5 x86_64 autofs Update (Johnny Hughes) 2. CEBA-2011:1435 CentOS 5 i386 autofs Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 8 Nov 2011 14:07:21 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2011:1435 CentOS 5 x86_64 autofs Update To: centos-announce(a)centos.org Message-ID: <20111108140721.GA11031(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2011:1435 Upstream details at : https://rhn.redhat.com/errata/RHBA-2011-1435.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: ee780bd388186f1f63012902f5a32f54 autofs-5.0.1-0.rc2.156.el5_7.4.x86_64.rpm Source: f699ef3a277ccd03fcad6e1a8c382d2c autofs-5.0.1-0.rc2.156.el5_7.4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 8 Nov 2011 14:07:20 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2011:1435 CentOS 5 i386 autofs Update To: centos-announce(a)centos.org Message-ID: <20111108140720.GA11016(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2011:1435 Upstream details at : https://rhn.redhat.com/errata/RHBA-2011-1435.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: c59d7e7e9ac3d0b20cfd115bfaa7f38a autofs-5.0.1-0.rc2.156.el5_7.4.i386.rpm Source: f699ef3a277ccd03fcad6e1a8c382d2c autofs-5.0.1-0.rc2.156.el5_7.4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 81, Issue 5 **********************************************

1 0

SELinux and SETroubleshootd woes in CR
by Trey Dockendorf 07 Nov '11

07 Nov '11

I'm setting up a dedicated database server, and since this will be a central service to my various web servers I wanted it to be as secure as possible...so I am leaving SELinux enabled. However I'm having trouble getting Apache to use mod_auth_pam. I also now can't get setroubleshootd working to send me notifications of the denials and provide tips to solve the problem. The Apache service has this directive on the default vhost, ------------------- <Directory "/usr/share/phpMyAdmin"> AuthPAM_Enabled on AllowOverride None AuthName "HTTP Auth" AuthType basic require valid-user </Directory> When I attempt to authenticate I noticed this in /var/log/secure -------------------- Nov 1 15:06:58 host httpd: PAM audit_open() failed: Permission denied This is the entry from the audit log... ---------------- type=AVC msg=audit(1320178016.209:919): avc: denied { create } for pid=22689 comm="unix_chkpwd" scontext=unconfined_u:system_r:httpd_t:s0 tcontext=unconfined_u:system_r:httpd_t:s0 tclass=netlink_audit_socket type=SYSCALL msg=audit(1320178016.209:919): arch=c000003e syscall=41 success=no exit=-13 a0=10 a1=3 a2=9 a3=7fff23386470 items=0 ppid=20102 pid=22689 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) ses=107 comm="unix_chkpwd" exe="/sbin/unix_chkpwd" subj=unconfined_u:system_r:httpd_t:s0 key=(null) type=AVC msg=audit(1320178018.386:920): avc: denied { create } for pid=20102 comm="httpd" scontext=unconfined_u:system_r:httpd_t:s0 tcontext=unconfined_u:system_r:httpd_t:s0 tclass=netlink_audit_socket type=SYSCALL msg=audit(1320178018.386:920): arch=c000003e syscall=41 success=no exit=-13 a0=10 a1=3 a2=9 a3=0 items=0 ppid=20099 pid=20102 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) ses=107 comm="httpd" exe="/usr/sbin/httpd" subj=unconfined_u:system_r:httpd_t:s0 key=(null) As for setroubleshoot, I have a duplicate install working just fine on another server, or at least it was working. I'm worried updating to CR may have broken setroubleshootd. Mainly I'd like to know how to troubleshoot that application. Messagebus is running. Running setroubleshootd yields these results... ------------------- # setroubleshootd -f -V 2011-11-01 15:11:53,919 [database.DEBUG] created new database: name=audit_listener, friendly_name=Audit Listener, filepath=/var/lib/setroubleshoot/audit_listener_database.xml 2011-11-01 15:11:53,920 [database.DEBUG] database version 3.0 compatible with current 3.0 version 2011-11-01 15:11:53,923 [plugin.DEBUG] load_plugins() names=['httpd_bad_labels', 'allow_saslauthd_read_shadow', 'tftpd_write_content', 'allow_nfsd_anon_write', 'vbetool', 'allow_ypbind', 'httpd_use_cifs', 'file', 'allow_execheap', 'nfs_export_all_rw', 'allow_java_execstack', 'allow_httpd_sys_script_anon_write', 'samba_share', 'filesystem_associate', 'fcron_crond', 'inetd_bind_ports', 'named_write_master_zones', 'qemu_file_image', 'catchall', 'allow_mplayer_execstack', 'httpd_can_sendmail', 'httpd_enable_homedirs', 'wine', 'xen_image', 'secure_mode_policyload', 'allow_execmod', 'disable_ipv6', 'httpd_can_network_connect_db', 'sys_module', 'bind_ports', 'samba_export_all_rw', 'use_samba_home_dirs', 'rsync_data', 'allow_kerberos', 'httpd_ssi_exec', 'mmap_zero', 'global_ssp', 'allow_rsync_anon_write', 'cvs_data', 'allow_ftpd_anon_write', 'device', 'catchall_boolean', 'automount_exec_config', 'leaks', 'setenforce', 'ftpd_is_daemon', 'allow_zebra_write_config', 'firefox', 'nfs_export_all_ro', 'httpd_enable_cgi', 'httpd_tty_comm', 'public_content', 'ftp_home_dir', 'prelink_mislabled', 'allow_execstack', 'spamd_enable_home_dirs', 'sshd_root', 'samba_share_nfs', 'httpd_builtin_scripting', 'allow_ftpd_full_access', 'default', 'allow_ftpd_use_nfs', 'samba_enable_home_dirs', 'restorecon', 'selinuxpolicy', 'pppd_can_insmod', 'allow_daemons_dump_core', 'httpd_write_content', 'allow_httpd_anon_write', 'secure_mode_insmod', 'kernel_modules', 'samba_export_all_ro', 'httpd_enable_ftp_server', 'allow_postfix_local_write_mail_spool', 'execute', 'privoxy_connect_any', 'use_nfs_home_dirs', 'allow_smbd_anon_write', 'sys_resource', 'allow_ftpd_use_cifs', 'connect_ports', 'swapfile', 'httpd_use_nfs', 'httpd_can_network_relay', 'allow_cvs_read_shadow', 'squid_connect_any', 'mounton', 'qemu_blk_image', 'user_tcp_server', 'restore_source_context'] 2011-11-01 15:11:53,923 [plugin.INFO] importing /usr/share/setroubleshoot/plugins/__init__ as plugins 2011-11-01 15:11:55,114 [avc.DEBUG] Number of Plugins = 90 2011-11-01 15:11:55,116 [communication.DEBUG] parse_socket_address_list: input='{unix}/var/run/setroubleshoot/setroubleshoot_server' 2011-11-01 15:11:55,117 [communication.DEBUG] parse_socket_address_list: {unix}/var/run/setroubleshoot/setroubleshoot_server --> {unix}/var/run/setroubleshoot/setroubleshoot_server socket=None 2011-11-01 15:11:55,118 [communication.DEBUG] new_listening_socket: {unix}/var/run/setroubleshoot/setroubleshoot_server socket=None 2011-11-01 15:11:55,118 [server.INFO] creating system dbus: bus_name=org.fedoraproject.Setroubleshootd object_path=/org/fedoraproject/Setroubleshootd interface=org.fedoraproject.SetroubleshootdIface 2011-11-01 15:11:55,119 [server.DEBUG] dbus __init__ /org/fedoraproject/Setroubleshootd called 2011-11-01 15:12:05,119 [server.DEBUG] received signal=14 2011-11-01 15:12:05,119 [server.DEBUG] KeyboardInterrupt in RunFaultServer 2011-11-01 15:12:05,119 [database.DEBUG] writing database (/var/lib/setroubleshoot/audit_listener_database.xml) modified_count=0 ------------------------ I've found this resource, http://docs.fedoraproject.org/en-US/Fedora/13/html/SELinux_FAQ/index.html#i…, but have no idea how to make that change or where that modification would go. Please let me know what other information would be useful. Thanks - Trey

2 8

Monitoring IO -- vmstat doesn't match snmp
by David Dyer-Bennet 07 Nov '11

07 Nov '11

I made the mistake of looking at disk IO numbers in two different ways -- now I'm confused, because they give inconsistent answers. First way was using 'vmstat 10'. This gave me (apologies for wrapped lines): r b swpd free buff cache si so bi bo in cs us sy id wa st 2 0 2162944 4071928 162444 4218456 0 0 0 286 1103 528 3 2 95 0 0 1 0 2162944 4071976 162448 4218440 0 0 0 301 1102 548 2 4 95 0 0 2 0 2162944 4074488 162456 4218448 0 0 0 252 1097 501 1 4 96 0 0 2 0 2162944 4081572 162480 4218508 0 0 0 430 1145 1006 2 3 95 0 0 2 0 2162944 4079340 162488 4218508 0 0 0 354 1148 604 2 3 95 0 0 1 0 2162944 4082604 162492 4218512 0 0 0 258 1105 446 1 4 96 0 0 1 0 2162944 4084052 162500 4218520 0 0 0 300 1101 482 1 4 95 0 0 1 0 2162944 4080652 162500 4218536 0 0 0 393 1118 585 1 3 95 0 0 1 0 2162944 4081160 162500 4218536 0 0 0 304 1100 462 0 4 95 0 0 1 0 2162944 4075636 162508 4218536 0 0 0 214 1132 397 0 4 96 0 0 3 0 2162944 4081640 162516 4218540 0 0 0 332 1111 554 2 3 94 0 0 1 0 2162944 4075104 162516 4218552 0 0 0 382 1179 566 2 3 95 0 0 The "bo" column, block out, is described in the man page as being blocks per second. I believe the blocks are 512 bytes. Okay; but then I used SNMP to fetch 1.3.6.1.4.1.2021.11.57.0 (ssIORawSent). That's an incrementing counter of blocks sent. I'm fetching it every 10 seconds, same as before. 3,204,124,952 1,603 820,736 3,204,139,960 1,500 768,000 3,204,155,848 1,588 813,056 3,204,164,600 875 448,000 3,204,184,536 1,993 1,020,416 3,204,194,184 964 493,568 3,204,204,040 896 458,752 3,204,218,696 1,465 750,080 3,204,235,224 1,652 845,824 The first column is the counter; the second column is the difference between them divided by the actual number of seconds elapsed (i.e. it tries to correct for imprecisions in the sleep; though in fact when I monitored that, it was hitting the exact second consistently), i.e, the second column is blocks per second. And the third column is bytes per second based on a 512-byte block. You'll note that the blocks per second figures are not compatible with the blocks per second figures from vmstat. These two sets of numbers overlap, and the numbers before and after are similar. So what's up with that ? (Here's my monitoring code that produced the second set of figures, in case I did something dumb-ass: #! /bin/bash set -e HOST=prcapp01 secs=10 lbc=0 lts=0 echo "blockcount bl/sec bytes/sec" while true; do bc=$( snmpget -v 2c -c xxx $HOST 1.3.6.1.4.1.2021.11.57.0 | cut -d' ' -f4 ) ts=$( date +%s ) if [[ $lbc > 0 ]]; then (( bsec = ( bc - lbc ) / ( ts - lts ) )) (( bytes = bsec * 512 )) #echo $lbc $bc $bsec $bytes $lts $ts printf "%'12d %'7d %'10d\n" $bc $bsec $bytes fi lbc="$bc" lts="$ts" sleep $secs done I have obfuscated the read-only community name.) -- David Dyer-Bennet, dd-b(a)dd-b.net; http://dd-b.net/ Snapshots: http://dd-b.net/dd-b/SnapshotAlbum/data/ Photos: http://dd-b.net/photography/gallery/ Dragaera: http://dragaera.info

2 5

yum update fails for 5.6
by Alex 07 Nov '11

07 Nov '11

google for "centos error performing checksum" refers to createrepo but of course "yum install createrepo" also fails and the instructions appear to be overkill. Is there a "simple" soultion? here's the result of yum update: # yum -v update Loading "fastestmirror" plugin Config time: 0.118 Yum Version: 3.2.22 Setting up Package Sacks Loading mirror speeds from cached hostfile * base: mirror.science.uottawa.ca * extras: mirror.science.uottawa.ca * rpmforge: ftp-stud.fht-esslingen.de * updates: mirror.science.uottawa.ca rhel-src/primary | 1.1 MB 00:02 ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/os/SRPMS/repoda…: [Errno -3] Error performing checksum Trying other mirror. Error: failure: repodata/primary.xml.gz from rhel-src: [Errno 256] No more mirrors to try. and for repolist # yum repolist Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * base: mirror.science.uottawa.ca * extras: mirror.science.uottawa.ca * rpmforge: ftp-stud.fht-esslingen.de * updates: mirror.science.uottawa.ca rhel-src/primary | 1.1 MB 00:02 ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/os/SRPMS/repoda…: [Errno -3] Error performing checksum Trying other mirror. Error: failure: repodata/primary.xml.gz from rhel-src: [Errno 256] No more mirrors to try. TIA -- This message has been scanned for viruses and dangerous content by Avantel Systems, and is believed to be clean.

3 3

Call supplicant on link detection
by Peter von Nostrand 07 Nov '11

07 Nov '11

Dear all, I have a working 802.1x structure with a bunch of Cisco switches, and a couple of NPS RADIUS servers. 802.1x auhtentication with MSCHAPv2 is working with Windows clients and I need to get some Centos clients into the structure. I've been using wpa_supplicant and now it would be usefull to have an auto start script when the interface detects a link and call the supplicant to authenticate the user prior to request an IP to the DHCP server. I've seen on ubuntu-like systems a pre-up set of options. Is there anything like that on Centos? Exists some way to detect a link on the interface, start the supplicant and after that start the interface with the configuration under ifcg-eth0 ? Sorry if this was discussed previusly. Thanks in advance. -- Peter

2 2

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss