Discuss

discuss@lists.centos.org

34758 discussions

yum update and iptables
by David McGuffey 17 Nov '10

17 Nov '10

I'm doing some testing in a lab which is isolated from the rest of my network (DMZ). I'm doing both inbound and outbound filtering at the firewall (CentOS +iptables). What protocols, ports and destination IP addresses does yum use to identify updates, and then actually go get them for installation? Looking at yum.conf and wireshark data, yum appears to go to a central site, look up the closest mirrors, then query the mirrors for the latest updates. Using wireshark it appears that http and tcp are used, but the addresses are all over the place (many mirrors). Is there a way to restrict the outbound traffic to a small number of mirrors? In other words, can I force yum to only check certain sites? If that is not so easy, I should be able to restrict the outbound traffic to a small set of addresses (yes/no?). DaveM

3 2

easy httpd's problem
by 49163653 17 Nov '10

17 Nov '10

your guys: I can't see the direcotry under / produced by mkdir command via Internat Explorer, except the any direcotry and file that exist after the CentOS installation complete. This is my directory 's detail information: drwxr-xr-x root www-data root:object_r:default_t CenterRepo and my httpd's configuration information: <VirtualHost *:80> ServerAdmin gitserver DocumentRoot / <Directory /> Options Indexes FollowSymLinks includes order allow,deny AllowOverride None allow from all </Directory> ServerName dummy-host.example.com ErrorLog logs/dummy-host.example.com-error_log CustomLog logs/dummy-host.example.com-access_log common </VirtualHost> I just make sure the the CenterRepo directory belong to the www-date group which run by httpd ,why can't I still access that directory? Thanks for your help! 2010-11-16 49163653

4 4

Memtest86+ running time
by Keith Roberts 16 Nov '10

16 Nov '10

I have run one full test and got no errors on the memory module. Is it worth keeping it running overnight, just to see if temperature changes will afect the test? Regards, Keith -- In theory, theory and practice are the same; in practice they are not. This email was sent from my laptop with Centos 5.5

9 18

Question about a hard drive error
by Gilbert Sebenste 16 Nov '10

16 Nov '10

Hey everyone, I just got one of these today: Nov 10 16:07:54 stormy kernel: sd 0:0:0:0: SCSI error: return code = 0x08000000 Nov 10 16:07:54 stormy kernel: sda: Current: sense key: Medium Error Nov 10 16:07:54 stormy kernel: Add. Sense: Unrecovered read error Nov 10 16:07:54 stormy kernel: Nov 10 16:07:54 stormy kernel: Info fld=0x0 Nov 10 16:07:54 stormy kernel: end_request: I/O error, dev sda, sector 3896150669 Nov 10 16:07:54 stormy kernel: Read-error on swap-device (253:1:743752) Nov 10 16:07:54 stormy kernel: Read-error on swap-device (253:1:743760) Nov 10 16:07:54 stormy kernel: Read-error on swap-device (253:1:743768) Nov 10 16:07:54 stormy kernel: Read-error on swap-device (253:1:743776) Nov 10 16:07:54 stormy kernel: Read-error on swap-device (253:1:743784) Nov 10 16:07:54 stormy kernel: Read-error on swap-device (253:1:743792) Nov 10 16:07:54 stormy kernel: Read-error on swap-device (253:1:743800) Nov 10 16:07:54 stormy kernel: Read-error on swap-device (253:1:743808) My question is this: I have RAID00 set up, but don't really understand it well. This is how my disks are set up: Filesystem 1K-blocks Used Available Use% Mounted on /dev/mapper/VolGroup00-LogVol00 1886608544 296733484 1492495120 17% / /dev/sda1 101086 19877 75990 21% /boot tmpfs 1684312 1204416 479896 72% /dev/shm Which one is having the trouble? Any ideas so I can swap it out? ******************************************************************************* Gilbert Sebenste ******** (My opinions only!) ****** Staff Meteorologist, Northern Illinois University **** E-mail: sebenste(a)weather.admin.niu.edu *** web: http://weather.admin.niu.edu ** *******************************************************************************

4 8

Still have problems with secure NFS and Kerberos
by Hans Persson 16 Nov '10

16 Nov '10

Both pc13267 and pc14113 run CentOS 5.5. On pc14113, my test user gets a home directory when logging in, but not on pc13267. But why? All logs below are from /var/log/messages. I have removed dates and stuff from the beginning of lines to make them more readable, and then grouped lines about the same thing from both machines. > pc13267 Using keytab file '/etc/krb5.keytab' > pc13267 INFO: Credentials in CC > 'MEMORY:/tmp/krb5cc_machine_IFM.LIU.SE' are good until > 1288959329 > pc14113 getting credentials for client with uid 2038 for server > triangulum.ifm.liu.se > pc14113 CC file 'krb5cc_2038_R3Gzcw' being considered > pc14113 CC file 'krb5cc_2038_R3Gzcw' matches owner check and has > mtime of 1288949932 For some reason, only the broken machine appears to look in /etc/krb5.keytab (or at least it's the only one admitting to doing it). /etc/krb5.conf looks the same on both machines. /etc/krb5.keytab has the same rights (root.root, 600) and size on both machines, and as far as I can tell no differences in content: > [root@pc13267 ~]# klist -k -e > Keytab name: FILE:/etc/krb5.keytab > KVNO Principal > ---- ----------------------------------------------------------------- > 20 host/pc13267.ad.ifm.liu.se(a)IFM.LIU.SE (DES cbc mode with RSA-MD5) > 6 nfs/pc13267.ad.ifm.liu.se(a)IFM.LIU.SE (DES cbc mode with CRC-32) > [root@pc14113 ~]# klist -k -e > Keytab name: FILE:/etc/krb5.keytab > KVNO Principal > ---- ----------------------------------------------------------------- > 3 nfs/pc14113.ad.ifm.liu.se(a)IFM.LIU.SE (DES cbc mode with CRC-32) > 3 host/pc14113.ad.ifm.liu.se(a)IFM.LIU.SE (DES cbc mode with RSA-MD5) There are no differences in /etc/pam.d/ between the machines (except that the working machine apart from the files it should have also has a system-auth-ac~, but I have a hard time imagining that to be significant). > pc13267 using MEMORY:/tmp/krb5cc_machine_IFM.LIU.SE as credentials > cache for machine creds > pc13267 using environment variable to select krb5 ccache > MEMORY:/tmp/krb5cc_machine_IFM.LIU.SE > pc14113 using FILE:/tmp/krb5cc_2038_R3Gzcw as credentials cache for > client with uid 2038 for server triangulum.ifm.liu.se > pc14113 using environment variable to select krb5 ccache > FILE:/tmp/krb5cc_2038_R3Gzcw The machine having problems save to memory, the working one to disk, and they use file names with a different structure. I suspect this to be relevant somehow, but I have no clue why they behave differently. > pc13267 creating context using fsuid 0 (save_uid 0) > pc13267 creating tcp client for server triangulum.ifm.liu.se > pc13267 creating context with server nfs(a)triangulum.ifm.liu.se > pc14113 creating context using fsuid 2038 (save_uid 0) > pc14113 creating tcp client for server triangulum.ifm.liu.se > pc14113 creating context with server nfs(a)triangulum.ifm.liu.se The machine that works gets the uid right while the other one for some reason gets it to 0. Definitely wrong, but why? > pc13267 rpcsec_gss: gss_init_sec_context: (major) Unspecified GSS > failure. Minor code may provide more information - (minor) > Unknown code krb5 60 > pc13267 WARNING: Failed to create krb5 context for user with uid 0 > for server triangulum.ifm.liu.se > pc13267 WARNING: Failed to create krb5 context for user with uid 0 > with credentials cache MEMORY:/tmp/krb5cc_machine_IFM.LIU.SE for > server triangulum.ifm.liu.se > pc13267 WARNING: Failed to create krb5 context for user with uid 0 > with any credentials cache for server triangulum.ifm.liu.se > pc14113 DEBUG: serialize_krb5_ctx: lucid version! > pc14113 prepare_krb5_rfc1964_buffer: serializing keys with enctype 4 > and length 8 After this, things break down (which doesn't really surprise me). The question is, I guess, why the broken machine starts using uid 0 to begin with. There is also a difference in what tickets the user gets on the different machines. > [testson2@pc13267 /]$ klist > Ticket cache: FILE:/tmp/krb5cc_2038_ch9xY3 > Default principal: testson2(a)IFM.LIU.SE > > Valid starting Expires Service principal > 11/05/10 10:34:46 11/06/10 10:34:46 krbtgt/IFM.LIU.SE(a)IFM.LIU.SE > > > Kerberos 4 ticket cache: /tmp/tkt2038 > klist: You have no tickets cached (non-working) > pc14113:/home/testson2> klist > Ticket cache: FILE:/tmp/krb5cc_2038_R3Gzcw > Default principal: testson2(a)IFM.LIU.SE > > Valid starting Expires Service principal > 11/05/10 10:38:52 11/06/10 10:38:52 krbtgt/IFM.LIU.SE(a)IFM.LIU.SE > 11/05/10 10:38:52 11/06/10 10:38:52 nfs/triangulum.ifm.liu.se(a)IFM.LIU.SE > > > Kerberos 4 ticket cache: /tmp/tkt2038 > klist: You have no tickets cached (working) Ideas? I'm all out of 'em. Hans

1 0

Disk operations very slow on Lenovo Thinkcentre
by Niki Kovacs 16 Nov '10

16 Nov '10

Hi, I'm currently trying to install CentOS 5.5 on a series of Lenovo Thinkcentre nettops. At first, the install CD boots OK without any options, but when it comes to formatting, the process can only be described as terribly slow... it took about half an hour to format the 160 GB disk. A few cups of coffee later, the system boots with the following messages on bootup (right at the beginning, when it says "Red Hat Nash starting...") : ****************** ... PCI: Cannot allocate resource region 7 of bridge 0000:00:1c.0 ... ata_piix 0000:00:1f.2: no available legacy port ... ****************** And here's the output of lspci : ****************** 00:00.0 Host bridge: Intel Corporation 82Q963/Q965 Memory Controller Hub (rev 02) 00:02.0 VGA compatible controller: Intel Corporation 82Q963/Q965 Integrated Graphics Controller (rev 02) 00:1a.0 USB Controller: Intel Corporation 82801H (ICH8 Family) USB UHCI Controller #4 (rev 02) 00:1a.7 USB Controller: Intel Corporation 82801H (ICH8 Family) USB2 EHCI Controller #2 (rev 02) 00:1b.0 Audio device: Intel Corporation 82801H (ICH8 Family) HD Audio Controller (rev 02) 00:1c.0 PCI bridge: Intel Corporation 82801H (ICH8 Family) PCI Express Port 1 (rev 02) 00:1c.4 PCI bridge: Intel Corporation 82801H (ICH8 Family) PCI Express Port 5 (rev 02) 00:1d.0 USB Controller: Intel Corporation 82801H (ICH8 Family) USB UHCI Controller #1 (rev 02) 00:1d.1 USB Controller: Intel Corporation 82801H (ICH8 Family) USB UHCI Controller #2 (rev 02) 00:1d.2 USB Controller: Intel Corporation 82801H (ICH8 Family) USB UHCI Controller #3 (rev 02) 00:1d.7 USB Controller: Intel Corporation 82801H (ICH8 Family) USB2 EHCI Controller #1 (rev 02) 00:1e.0 PCI bridge: Intel Corporation 82801 PCI Bridge (rev f2) 00:1f.0 ISA bridge: Intel Corporation 82801HB/HR (ICH8/R) LPC Interface Controller (rev 02) 00:1f.2 IDE interface: Intel Corporation 82801H (ICH8 Family) 4 port SATA IDE Controller (rev 02) 00:1f.3 SMBus: Intel Corporation 82801H (ICH8 Family) SMBus Controller (rev 02) 00:1f.5 IDE interface: Intel Corporation 82801H (ICH8 Family) 2 port SATA IDE Controller (rev 02) 03:00.0 Ethernet controller: Broadcom Corporation NetXtreme BCM5755 Gigabit Ethernet PCI Express (rev 02) ****************** I'm not very proficient about hardware drivers. Most of the things I know about them is the mix of information I gathered over the years when they didn't work as expected. My haphazard guess here would be that the disk is somehow treated as IDE, not as SATA, thus making the read/write operations much slower than theoretically possible (which would mean that somewhere in the boot process, the wrong driver for the disk is loaded). But then, it's only my guess. Unfortunately, I don't have the slightest idea if there's a possibility to correct this behaviour a) during install, through some magic boot option maybe, and b) during normal operation once the system is installed. Blacklist something and add something else, my vague intuition says. Before going for CentOS 5.5, I booted and installed Fedora 14 on that machine, which runs very fast (at least for my standards). Cheers, Niki Kovacs

2 2

Best way to configure proprietary NVidia driver on CentOS ?
by Nicolas Kovacs 15 Nov '10

15 Nov '10

Hi, What's the best (cleanest, easiest, whatever) way to install the proprietary NVidia driver on CentOS 5.5 ? Usually I'm using the RPMForge 3rd party repo and compile the odd missing package myself from a Fedora SRPM. But the nvidia packages look a bit like a mess. DKMS has errors in the startup script (looking for a nonexistent log_action_msg and the likes), so I wonder if it's best to just download the driver from nvidia.com and build it myself. Then I thought : I'd rather ask. Cheers, Niki -- http://www.kikinovak.net

8 12

hwclock problem
by Jobst Schmalenbach 15 Nov '10

15 Nov '10

Hi. I run peridocally (from cron) on all of my machines 30 * * * * root /sbin/hwclock --systohc All of those machines in question take their time via NTP from the same local server, and that server gets its time from a ntp pool. Now I had to reboot a couple of them two days ago and to my surprise all had problems with the time upon booting. Here are the important files: [root@XXXXXX ~] #>l /etc/adjtime 0.001687 1289518202 0.000000 1289518202 LOCAL [root@XXXXXXX ~] #>l /etc/sysconfig/clock ZONE="Australia/Melbourne" UTC=false ARC=false So from my understanding the hwclock should contain the local time. [root@XXXXXX ~] #>date Fri Nov 12 11:26:23 EST 2010 [root@XXXXXX ~] #>hwclock Fri 12 Nov 2010 11:26:42 EST -0.167976 seconds [root@XXXXXX ~] #> However on boot I get the following: Nov 10 19:08:37 XXXXXX syslogd 1.4.1: restart. Nov 10 19:08:37 XXXXXX kernel: klogd 1.4.1, log source = /proc/kmsg started. Nov 10 19:08:37 XXXXXX kernel: Linux version 2.6.18-164.11.1.el5 (mockbuild(a)builder10.centos.org) (gcc version 4.1.2 20080704 (Red Hat 4. 1.2-46)) #1 SMP Wed Jan 20 07:32:21 EST 2010 Nov 10 19:08:37 XXXXXX kernel: Command line: ro root=/dev/sda2 vga=791 Nov 10 19:08:37 XXXXXX kernel: BIOS-provided physical RAM map: ... ... Nov 10 19:08:51 XXXXXX kernel: IPv6 over IPv4 tunneling driver Nov 10 08:08:52 XXXXXX ntpdate[2464]: step time server 192.168.1.1 offset -39599.950905 sec Nov 10 08:08:52 XXXXXX xinetd[2447]: xinetd Version 2.3.14 started with libwrap loadavg labeled-networking options compiled in. and off course dovecot falls over too "Time just moved backwards by 39599 seconds." Now, 39600s is 11 hours, which is (inc DST) *MY* offset from Greenwich. So what am I doing wrong? The idea of running hwclock is to make sure that exactly the problem with dovecot does NOT occur, and ntp does not have a coughing fit when the hardware clock is not close to the correct time upon booting. The last time I booted some of those machine was more than 200 days ago, so the hwclock will be skewed if I do not update it. Jobst -- Keyboard not found - please clean up desktop! | |0| | Jobst Schmalenbach, jobst(a)barrett.com.au, General Manager | | |0| Barrett Consulting Group P/L & The Meditation Room P/L |0|0|0| +61 3 9532 7677, POBox 277, Caulfield South, 3162, Australia

9 10

Auto-Re: CentOS Digest, Vol 70, Issue 14
by 韦加宁 15 Nov '10

15 Nov '10

信已收到,谢谢!

2 1

Re: [CentOS] SSH keys question [RESOLVED]
by John Kennedy 15 Nov '10

15 Nov '10

On Mon, Nov 15, 2010 at 13:45, Paul Heinlein <heinlein(a)madboa.com> wrote: > On Mon, 15 Nov 2010, cliff here wrote: > > > You should check the perms on the dirs, ssh will not allow it use > > the keys if they are too permissive. So I would check starting at > > /home > > This is the most likely cause; I'd check there too. > > If not, > > 1. Ensure the file hash is the same (e.g., no extraneous whitespace > in the middle of the key) > 2. sshd is usually pretty good about writing errors to syslog. > > -- > Paul Heinlein <> heinlein(a)madboa.com <> http://www.madboa.com/ > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos > Found it... In /var/log/secure I got "Authentication refused: bad ownership or modes for directory /home/zema/.ssh" I had checked the file, not the directory... Thanks all... John -- John Kennedy

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss