Discuss

discuss@lists.centos.org

34758 discussions

https
by Jerry Geis 16 Sep '10

16 Sep '10

hi all, I wish to just have secure browsing for my application. no credit cards or anything like that just secure browser usage is the goal. I can self sign a certificate (I already have) on my servers but for "anyone" accessing the server you see this "nasty" message about "untrusted sight " and all that. This will all be intranet type usage for the server. What is the best method to not see that "untrusted sight" and have the certificate load without and exception? jerry

8 7

CentOS-announce Digest, Vol 67, Issue 4
by centos-announce-request＠centos.org 16 Sep '10

16 Sep '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2010:0697 Critical CentOS 3 i386 samba - security and bug fix update (Tru Huynh) 2. CESA-2010:0697 Critical CentOS 3 x86_64 samba - security and bug fix update (Tru Huynh) 3. CESA-2010:0697 Critical CentOS 4 i386 samba - security and bug fix update (Tru Huynh) 4. CESA-2010:0697 Critical CentOS 4 x86_64 samba - security and bug fix update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Wed, 15 Sep 2010 15:23:12 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2010:0697 Critical CentOS 3 i386 samba - security and bug fix update To: centos-announce(a)centos.org Message-ID: <20100915132312.GA2862(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2010:0697 samba security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2010-0697.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/samba-3.0.9-1.3E.18.i386.rpm updates/i386/RPMS/samba-client-3.0.9-1.3E.18.i386.rpm updates/i386/RPMS/samba-common-3.0.9-1.3E.18.i386.rpm updates/i386/RPMS/samba-swat-3.0.9-1.3E.18.i386.rpm source: updates/SRPMS/samba-3.0.9-1.3E.18.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update samba Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

how to show that a filesystem is ACL-enabled?
by Robert P. J. Day 16 Sep '10

16 Sep '10

currently reading the RHEL deployment guide and i have a short question about ACLs that i can test on my centos 5.5 box. here: http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/Deploymen… the manual clearly claims that, in order to use ACLs on a filesystem, that filesystem must be mounted with the "acl" mount option, and even shows a sample /etc/fstab entry that represents that. however, i just verified that i can use setfacl to give my non-root account read access to /etc/shadow so, clearly(?), the root filesystem supports ACLs, but the mount entry for that filesystem in /etc/fstab reads only "defaults" and, as i read it in the man page for "mount", the "defaults" option is not listed as including the "acl" option. can someone clarify this? is there a command that shows whether a filesystem is currently acl-enabled? and is the mount man page simply incomplete in that respect? thanks. rday -- ======================================================================== Robert P. J. Day Waterloo, Ontario, CANADA Top-notch, inexpensive online Linux/OSS/kernel courses http://crashcourse.ca Twitter: http://twitter.com/rpjday LinkedIn: http://ca.linkedin.com/in/rpjday ========================================================================

3 3

Re: [CentOS] Can anyone suggest a decent backup system?
by Les Mikesell 16 Sep '10

16 Sep '10

On 9/16/10 6:20 AM, Sorin Srbu wrote: >> -----Original Message----- >> From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf >> Of Kevin Thorpe >> Sent: Thursday, September 16, 2010 11:59 AM >> To: CentOS mailing list >> Subject: Re: [CentOS] Can anyone suggest a decent backup system? >> >> I'll definitely look into BackupPC for HDD backups but they're in the >> same offfice and >> don't give us the audit monthend tapes we are required to keep > indefinitely. > > Given you have enough storage space, it's possible to keep a full backup > with BackupPC indefinitely as well, *if* you set up the rentention > parameters properly. I ran amanda and backuppc independently for a long time. Both are pretty much 'full automatic' once you set them up. If your backup window is long enough having both means you still have backups if one or the other has some kind of problem or is being upgraded. But, after years of never restoring from tapes I gave up on them and now have the backuppc archive on a 3-member raid1 mirror and swap one of the drives offsite regularly. Tapes are kind of an afterthought with backuppc, but if you want to use it by itself you can use its concept of 'archive host' to write a tar copy of the last backup to tape (or compress/split for dvds, etc.). This can be done through the web interface or you could use the command line tool that generates a tar image to script whatever you wanted to write to tape. With the command line tool you can specify the backup you want so you'd be able to generate a 'month-end' tar any time before the run for that day expired. Also, backuppc can use rsync over ssh for the transport, so once you get the initial copy you might be able to move the server to a remote location. -- Les Mikesell lesmikesell(a)gmail.com

1 0

why does automounting removable media always have options nodev, noexec, nosuid?
by Robert P. J. Day 15 Sep '10

15 Sep '10

i'm experimenting with some basic removable media mounting exercises for an upcoming class, and i read that, while you can use gconf-editor to change some of the mount options in cases like that, there is no way to override the mount options of nodev, noexec and nosuid. for example, that claim is made here (admittedly for fedora, but it appears to be true for centos as well): http://scrolls.mafgani.net/2007/03/gnome-automount-options/ is there somewhere that one could see and verify that those options always hold for mountable filesystems on removable media? thanks. rday -- ======================================================================== Robert P. J. Day Waterloo, Ontario, CANADA Top-notch, inexpensive online Linux/OSS/kernel courses http://crashcourse.ca Twitter: http://twitter.com/rpjday LinkedIn: http://ca.linkedin.com/in/rpjday ========================================================================

3 3

CentOS in low RAM settings
by Boris Epstein 15 Sep '10

15 Sep '10

Hello listmates, I have been playing with Xen VM's and was wondering what the minimum RAM size in which you could run CentOS 5.5 (i386). So far I managed to install in 256 MB or 512 MB and then shrink the VM's RAM to 128 MB and still run the installation. Would anyone know why the install in a 128 MB VM fails (even in text mode)? Thanks. Boris.

3 2

Re: [CentOS] CentOS in low RAM settings
by J.Witvliet＠mindef.nl 15 Sep '10

15 Sep '10

-----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Bobby Sent: Wednesday, September 15, 2010 3:11 PM To: CentOS mailing list Subject: Re: [CentOS] CentOS in low RAM settings On Wednesday, September 15, 2010 09:00:35 am Boris Epstein wrote: > Hello listmates, > > I have been playing with Xen VM's and was wondering what the minimum > RAM size in which you could run CentOS 5.5 (i386). So far I managed to > install in 256 MB or 512 MB and then shrink the VM's RAM to 128 MB and > still run the installation. Would anyone know why the install in a 128 > MB VM fails (even in text mode)? > > Thanks. > > Boris. Eh, not enough RAM. :) -- Sometimes one can add swap during the installation. But swap is slow and thus making the installation takes twice (or worse) longer. Better is what you did, install with lots of mem, are reducing it afterwards. ______________________________________________________________________ Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten. This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages.

1 0

Centos Virtual Machine 32 bit with 8 GB ram ?
by Roland RoLaNd 15 Sep '10

15 Sep '10

Hello, I have a centos 5.2 core 2 duo 3.0 GHZ with 2 GB ram which is working as a Virtual machine. i've just upgraded the hosting physical server from 32 GB to 64 GB of ram. which in turn, would require me to upgrade the VM to 8 GB. this is a 32 bit centos installation, would the system recognize and use the 8 GB? the option of using a 64 bit centos isnt possible. So i'm turning to you for advice. would upgrading the Ram be enough, or is there anything to be done that's kernel based of some sort? best, --Roland

7 14

problem with gfs_controld
by sandra-llistes 15 Sep '10

15 Sep '10

Hi, We have two nodes with centos 5.5 x64 and cluster+gfs offering samba and NFS services. Recently one node displayed the following messages in log files: Sep 13 08:19:07 NODE1 gfs_controld[3101]: cpg_mcast_joined error 2 handle 2846d7ad00000000 MSG_PLOCK Sep 13 08:19:07 NODE1 gfs_controld[3101]: send plock message error -1 Sep 13 08:19:11 NODE1 gfs_controld[3101]: cpg_mcast_joined error 2 handle 2846d7ad00000000 MSG_PLOCK Sep 13 08:19:11 NODE1 gfs_controld[3101]: send plock message error -1 When this happens in the other node access to samba services begin to freeze and this error appears: Sep 13 08:08:22 NODE2 kernel: INFO: task smbd:23084 blocked for more than 120 seconds. Sep 13 08:08:22 NODE2 kernel: "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. Sep 13 08:08:22 NODE2 kernel: smbd D ffff810001576420 0 23084 6602 23307 19791 (NOTLB) Sep 13 08:08:22 NODE2 kernel: ffff81003e187e08 0000000000000086 ffff81003e187e24 0000000000000092 Sep 13 08:08:22 NODE2 kernel: ffff810005dbdc38 000000000000000a ffff81003f4f77a0 ffffffff80309b60 Sep 13 08:08:22 NODE2 kernel: 000062f1773ef4c3 000000000000624f ffff81003f4f7988 000000008008c597 Sep 13 08:08:22 NODE2 kernel: Call Trace: Sep 13 08:08:22 NODE2 kernel: [<ffffffff8875cb7d>] :dlm:dlm_posix_lock+0x172/0x210 Sep 13 08:08:22 NODE2 kernel: [<ffffffff800a1ba4>] autoremove_wake_function+0x0/0x2e Sep 13 08:08:22 NODE2 kernel: [<ffffffff8882a5b9>] :gfs:gfs_lock+0x9c/0xa8 Sep 13 08:08:22 NODE2 kernel: [<ffffffff8003a142>] fcntl_setlk+0x11e/0x273 Sep 13 08:08:22 NODE2 kernel: [<ffffffff800b878c>] audit_syscall_entry+0x180/0x1b3 Sep 13 08:08:22 NODE2 kernel: [<ffffffff8002e7da>] sys_fcntl+0x269/0x2dc Sep 13 08:08:22 NODE2 kernel: [<ffffffff8005e28d>] tracesys+0xd5/0xe0 The configuration of the cluster is the following: <?xml version="1.0"?> <cluster alias="lcfib" config_version="60" name="lcfib"> <quorumd device="/dev/gfs-webn/quorum" interval="1" label="quorum" min_score="1" tko="10" votes="2"> <heuristic interval="10" program="/bin/ping -t1 -c1 numIP.1" score="1" tko="5"/> </quorumd> <fence_daemon post_fail_delay="0" post_join_delay="3"/> <clusternodes> <clusternode name="NODE2.fib.upc.es" nodeid="1" votes="1"> <fence> <method name="1"> <device lanplus="1" name="NODE2SP"/> </method> </fence> </clusternode> <clusternode name="NODE1.fib.upc.es" nodeid="2" votes="1"> <fence> <method name="1"> <device lanplus="1" name="NODE1SP"/> </method> </fence> </clusternode> </clusternodes> <cman broadcast="yes" expected_votes="4" two_node="0"/> <fencedevices> <fencedevice agent="fence_ipmilan" auth="md5" ipaddr="192.168.13.77" login="" name="NODE2SP" passwd="5jSTv3Mb"/> <fencedevice agent="fence_ipmilan" auth="md5" ipaddr="192.168.13.78" login="" name="NODE1SP" passwd="5jSTv3Mb"/> </fencedevices> <rm> <failoverdomains> <failoverdomain name="NODE1-NODE2" ordered="1" restricted="1"> <failoverdomainnode name="NODE2.fib.upc.es" priority="2"/> <failoverdomainnode name="NODE1.fib.upc.es" priority="1"/> </failoverdomain> <failoverdomain name="NODE2-NODE1" ordered="1" restricted="1"> <failoverdomainnode name="NODE2.fib.upc.es" priority="1"/> <failoverdomainnode name="NODE1.fib.upc.es" priority="2"/> </failoverdomain> </failoverdomains> <resources> <script file="/etc/init.d/fibsmb1" name="fibsmb1"/> <script file="/etc/init.d/fibsmb2" name="fibsmb2"/> <clusterfs device="/dev/gfs-webn/gfs-webn" force_unmount="0" fsid="14417" fstype="gfs" mountpoint="/web" name="web" options=""/> <clusterfs device="/dev/gfs-perfils/gfs-assig" force_unmount="0" fsid="21646" fstype="gfs" mountpoint="/assig" name="assig" options=""/> <smb name="FIBSMB1" workgroup="FIBSMB"/> <smb name="FIBSMB2" workgroup="FIBSMB"/> <ip address="numIP.111/24" monitor_link="1"/> <ip address="numIP.110/24" monitor_link="1"/> <ip address="numIP.112/24" monitor_link="1"/> </resources> <service autostart="1" domain="NODE2-NODE1" name="samba" recovery="disable"> <clusterfs ref="web"/> <ip ref="numIP.110/24"/> <ip ref="numIP.112/24"/> <clusterfs ref="assig"/> <script ref="fibsmb2"/> <smb ref="FIBSMB2"/> </service> <service domain="NODE2-NODE1" name="sambalin" recovery="disable"> <clusterfs ref="web"/> <ip ref="numIP.111/24"/> <smb ref="FIBSMB1"/> <script ref="fibsmb1"/> </service> </rm> </cluster> I thinks it's a problem with the configuration, and the cluster cannot communicate together at one point. Any hints about this? Thanks, Sandra PD: versions of kernel and cluster kernel-2.6.18-194.el5 cman-2.0.115-34.el5 kmod-gfs-0.1.34-12.el5.centos gfs-utils-0.1.20-7.el5

1 0

[Fwd: Re: Problem with SSHD update.]
by James B. Byrne 14 Sep '10

14 Sep '10

On Tue, September 14, 2010 02:30, R P Herrold wrote: > On Mon, 13 Sep 2010, Karanbir Singh wrote: > >> So, I'm quite keen on finding out what is it that is causing >> the breakage for you > > Karanbir, in the middle of the thread from the archive: > > James B. Byrne at Mon Sep 13 12:59:25 EDT 2010 >> Did that via webmin's command interface and nothing changed >> insofar as I can see. Same error obtained when starting >> sshd. > > We ship no webmin of course, and it tinkers with the > dependency chain for openssh ourside of the package system. > > -- Russ herrold I did not use webmin to update. I only resorted to using webmin to access the server after I could no longer connected to the host using ssh. The update was performed in an ssh session using yum update. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3 -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss