Discuss

discuss@lists.centos.org

34758 discussions

redirect
by ZZZ 21 Sep '09

21 Sep '09

Hi, I have an Nginx http proxy server with SSL. What I want to do is: If a client that has a certificate is trying to access the server's address, he is to be redirected to our production server, to certain URL. If a client doesn't have a certificate, he is to be redirected to the same production server, but a different URL. The problem is that if the client doesn't have a certificate, he gets the following error: 400 Bad Request The SSL certificate error ------------------------------------------------------------------------ nginx/0.6.39 I've tried the following: server { listen 8443; ssl on; ssl_certificate /etc/httpd/ssl/proxy-ssl.cer; ssl_certificate_key /etc/httpd/ssl/server.key; ssl_client_certificate /etc/httpd/ssl/ca-bundle.crt; ssl_verify_client on ............................................................................................. ............................................................................................. error_page 400 /400.html; location = /400.html { root /usr/share/nginx/html; but the error page 400 statement is simply ignored. Does anyone have an idea how can I do it ? I tried to find the 400 error page, thinking maybe I can make the redirect there, but it is simply not to be found. P.S. my programming/scripting skills aren't any.....

1 1

SSL and virtual hosts?
by Niki Kovacs 21 Sep '09

21 Sep '09

Hi, I successfully managed to use SSL on a local webserver for testing purposes, following the section "Using SSL" in the Chapter "Using Apache" of the "Definitive Guide to CentOS". Now I wonder: how can I use SSL with virtual hosts? I have several virtual hosts defined. Let's say I want to use SSL with this one: <VirtualHost *:80> ServerAdmin info(a)microlinux.fr DocumentRoot /var/www/html/microlinux ServerName buildbox.presbytere.local ServerAlias microlinux.buildbox.presbytere.local ServerAlias microlinux.buildbox ErrorLog logs/microlinux-error_log CustomLog logs/microlinux-access_log common </VirtualHost> The key and certificate files are located in /etc/certs: # ls -lh /etc/certs total 12K -rw-r--r-- 1 root root 981 sep 20 11:06 microlinux.crt -rw-r--r-- 1 root root 716 sep 20 11:04 microlinux.csr -rw-r--r-- 1 root root 887 sep 20 11:11 microlinux.key I'm not sure about the correct syntax to use SSL on this one. Where do I configure SSLCertificateFile and SSLCertificateKeyFile? In the virtual host stanza? Before trying various haphazard configurations, I thought I'd better ask here. Niki

6 9

sed (or other) magic to get RPM base names ?
by Alan McKay 21 Sep '09

21 Sep '09

Hey folks, Once upon a time I saw some sed magic to take the output of "rpm -qa" and strip away all the version info to give just the RPM base names. And of course I forgot to note it :-/ And have not been able to replicate it myself. e.g. from this : avahi-0.6.16-1.el5 avahi-glib-0.6.16-1.el5 produce this : avahi avahi-glib thanks, -Alan -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of "In Defense of Food"

3 2

Thermal information
by Sergio Belkin 21 Sep '09

21 Sep '09

Hi, I'd want know get thermal information on Centos 5.3 but get nohting. If I run acpitool -e, it outputs: acpitool -e Kernel version : 2.6.18-92.1.18.20060707 - ACPI version : 20060707 ----------------------------------------------------------- Battery status : <error reading info> Function Do_AC_Info_Sys: could not read directory /sys/class/power_supply/ Make sure your kernel has ACPI AC adapter support enabled. Fan : <not available> CPU type : Intel(R) Xeon(R) CPU 5110 @ 1.60GHz CPU speed : 1595.980 MHz Cache size : 4096 KB Bogomips : 3193.92 Bogomips : 3191.86 # of CPU's found : 2 Processor ID : 0 Bus mastering control : no Power management : no Throttling control : yes Limit interface : yes Active C-state : C1 C-states (incl. C0) : 1 T-state count : 8 Active T-state : T0 Processor ID : 1 Bus mastering control : no Power management : no Throttling control : yes Limit interface : yes Active C-state : C1 C-states (incl. C0) : 1 T-state count : 8 Active T-state : T0 Thermal info : <not available> Device Sleep state Status --------------------------------------- 1. PCI0 5 disabled And: grep THERMAL /boot/config-2.6.18-92.el5 CONFIG_X86_MCE_P4THERMAL=y CONFIG_ACPI_THERMAL=y Am I doing something wrong? Thanks in advance! -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin -

5 9

Re: [CentOS] Problems with Adobe flash-plugin and Firefox-3.5.x under CentOs-5.3 (yum up to date) => libcurl.so.3/libcurl.so.4 missing
by Martin Knoblauch 20 Sep '09

20 Sep '09

----- Original Message ---- > From: Martin Knoblauch <spamtrap(a)knobisoft.de> > To: Centos Discussions <centos(a)centos.org> > Sent: Monday, September 14, 2009 3:16:20 PM > Subject: Problems with Adobe flash-plugin and Firefox-3.5.x under CentOs-5.3 (yum up to date) > > Hi, > > I am running 32-bit Firefox-3.5.3 on Centos-5.3 (64-bit kernel) on a Dell > Precision M65 laptop. This is likely a Adobe problem, but maybe someone else has > seen this before. Please CC me, as I only receive the digest version of the > list. > > > When using the 10.0.32.18-release version of the flash-plugin, trying > to access *any* page containing flash (e.g. www.adobe.com) causes the > browser to die. This also happens with version 10.0.22.87. Version > 9.0.115.0 works fine. To avoid problems with add-ons, Firefox is > started with "-safe-mode". As far as I know, the problem also happens > with Firefox-3.0.x. > > # uname -a > Linux l6g0223j 2.6.18-128.7.1.el5 #1 SMP Mon Aug 24 08:21:56 EDT 2009 x86_64 > x86_64 x86_64 GNU/Linux > # rpm -q flash-plugin > flash-plugin-10.0.32.18-release > > > Any idea? Anything I can help debugging the problem? > The problem turns out that libflashplayer.so (Version 10.x) is looking for dynamically loading libcurl.so.3 or libcurl.so.4. This dependency is neither documented, nor present in the flash-plugin RPMs from Adobe (both 32- and 64-bit). The dependency probably should also be present in the firefox RPM itself. I found out by chance when the problem went away after installing the curl.i386 package to get firefox building on my system. Cheers Martin

2 2

Apache: confusion about virtual hosts and DNS on a local network
by Niki Kovacs 20 Sep '09

20 Sep '09

Hi, I set up a webserver with Apache on one of the machines on the local network. There's a DNS configured for the LAN, with a dummy domain name (presbytere.local), and every machine is pingable by its hostname. The webserver runs on the machine 'buildbox'. The webserver actually has two (static) websites on it, for testing and fiddling purposes. Each site's pages are stored respectively under /var/www/html/microlinux and /var/www/html/kikinovak. I can reach the two websites from any machine on the local network by opening a web browser at http://buildbox/microlinux/ or http://buildbox.presbytere.local/microlinux/ for the first website, and http://buildbox/kikinovak resp. http://buildbox.presbytere.local/kikinovak for the second website. So far so good. Now I'd like to setup two virtual hosts on the server, so I can access the first site via http://microlinux.buildbox and the second site via http://kikinovak.buildbox. I tried various combinations that seemed to make sense, but to no avail. Here's what I *think* my /etc/httpd/conf/httpd.conf should look like: NameVirtualHost *:80 <VirtualHost *:80> ServerAdmin info(a)microlinux.fr DocumentRoot /var/www/html/microlinux ServerName buildbox.presbytere.local ServerAlias microlinux.buildbox.presbytere.local ErrorLog logs/microlinux-error_log CustomLog logs/microlinux-access_log common </VirtualHost> But that doesn't work out (yes, I restarted httpd :oD), because I think what's missing here is that I have to somehow add microlinux.buildbox (and later kikinovak.buildbox) to my local DNS server (only how?)... Here's my current Bind configuration for the local network: First, /var/named/zone.local.presbytere: ; ; Zone DNS pour presbytere.local ; $ORIGIN presbytere.local. $TTL 1D @ IN SOA babasse hostmaster ( 2009070201 ; serial 8H ; refresh 4H ; retry 4W ; expire 1D ) ; minimum ; babasse.presbytere.local est le serveur de noms (NS) pour ce domaine NS babasse ; au cas où quelqu'un ferait une requête pour localhost.presbytere.local localhost A 127.0.0.1 ; nos machines babasse A 192.168.1.1 buildbox A 192.168.1.2 lifebook A 192.168.1.3 raymonde A 192.168.1.4 jukebox A 192.168.1.5 frankenstein A 192.168.1.6 ap A 192.168.1.253 modem A 192.168.1.254 And then, /var/named/revp.192.168.1: ; ; Résolution inverse pour le réseau 192.168.1.0 ; $ORIGIN 1.168.192.in-addr.arpa. $TTL 1D @ IN SOA babasse.presbytere.local. contact.kikinovak.net. ( 2009070201 ; serial 28800 ; refresh (8 hours) 14400 ; retry (4 hours) 2419200 ; expire (4 weeks) 86400 ; minimum (1 day) ) ; Définit le serveur de noms faisant autorité NS babasse.presbytere.local. ; Nos machines 1 PTR babasse.presbytere.local. 2 PTR buildbox.presbytere.local. 3 PTR lifebook.presbytere.local. 4 PTR raymonde.presbytere.local. 5 PTR jukebox.presbytere.local. 6 PTR frankenstein.presbytere.local. 253 PTR ap.presbytere.local. 254 PTR modem.presbytere.local. I admit I'm a bit confused, and I don't know if I succeeded in accurately describing my ignorance here. Any suggestions? Niki

4 8

What repo did this rpm come from? rpm-VVa failures on new install
by Dave 20 Sep '09

20 Sep '09

Here is a list of files that I have not (knowingly) modified that do not pass rpm verification immediately after I installed centos 5.3. I am not really sure what this means - are the packagers sending out sloppy rpms, or is something going around modifying stuff? Other than the texmf stuff, the list seems to consist entirely of config files. Does yum or rpm or something do some instant reconfiguring when a package gets installed? Maybe rpms have a post-install script that mods the config? ....L... c /etc/pam.d/system-auth S.5....T c /etc/xml/catalog S.5....T c /usr/share/sgml/docbook/xmlcatalog S.5....T c /etc/sysconfig/system-config-securitylevel .......T c /etc/modprobe.d/blacklist-firewire ..5....T c /usr/lib/security/classpath.security S.5....T c /usr/share/config/kdm/kdmrc S.5....T c /etc/printcap SM5....T c /etc/sysconfig/iptables-config #(mode is -rw-r--r-- 1 root root, seem okay) S.5....T c /var/log/mail/statistics .......T c /etc/audit/auditd.conf .M...... /var/lib/texmf/ls-R S.5....T /usr/share/texmf-var/fonts/map/dvips/updmap/builtin35.map S.5....T /usr/share/texmf-var/fonts/map/dvips/updmap/download35.map [snip ... lots more texmf stuff...] S.5....T /usr/share/texmf-var/web2c/pdfetex.fmt S.5....T /usr/share/texmf-var/web2c/pdftex.fmt S.5....T /usr/share/texmf-var/web2c/tex.fmt How would I get a 'clean' copy of some of these files to do a diff? Figure out what rpm they're from (rpm -qf <filename>), then what repo the rpm came from, then go download a copy of the rpm by hand, extract the file. Maybe figure out if there is a post-install script and whether it does something. Googling, I see lots of hits suggesting that 'yum info <packagename>' will show what repo it came from. Testing this on a couple of the packages above, I get 'Repo : installed'. Does that mean that the rpm came from the install CD? Am I missing something, is there an easier way>? mahalo, Dave

6 11

Apache configuration: minor problem with special characters
by Niki Kovacs 19 Sep '09

19 Sep '09

Hi, I'm currently fiddling with protecting sections of a website with .htaccess. Here's an example: <Files .htaccess> order allow,deny deny from all </Files> AuthUserFile /etc/httpd/htpasswd AuthName "L'accès à ce site est restreint." AuthType Basic require valid-user The configuration works OK (after having created a valid user), but unfortunately, the message in the infobox that pops up on the site displays the french characters é and à incorrectly. Any idea how I could get this right? I'm more or less starting out from Apache's default httpd.conf. Cheers, Niki

2 2

memcached-1.4.1 and C4
by David Hrbáč 19 Sep '09

19 Sep '09

Hi, Is there someone successfully running memcached-1.4.1 on Centos 4 with centosplus php? I'm trying to use memcached under Centos 4. I can set values fine but 'get' returns: [root@rakosnicek eshop]# php d.php PHP Warning: Memcached::get(): bad type specifier while parsing parameters in /var/www/d.php on line 6 NULL string(7) "SUCCESS" array(1) { ["lhost:11211"]=> string(5) "1.4.1" } The code is: <?php $m = new Memcached(); $m->addServer('localhost', 11211); $m->set('foo', 100); var_dump($m->get('foo')); var_dump($m->getResultMessage()); var_dump($m->getVersion()); ?> Memcat returns: [root@rakosnicek eshop]# memcat --servers=localhost foo 100 Package version are: [root@rakosnicek eshop]# rpm -q httpd memcached php-pecl-memcached php | sort httpd-2.0.52-41.ent.4.centos4 memcached-1.4.1-2.el4.hrb php-5.1.6-3.el4s1.10 php-pecl-memcached-1.0.0-3.el4.hrb Thanks, David

1 0

Re: [CentOS] CentOS is dead, long live CentOS
by James B. Byrne 19 Sep '09

19 Sep '09

On: Wed, 16 Sep 2009 12:27:02 -0500, Johnny Hughes <johnny(a)centos.org> wrote: > I STILL do not understand why anyone would care what CentOS does > with money donated by people who used the product and wanted to > donate. > > If we were having wild beer parties every week ... as long as the > packages are built, compared, signed, and released on time, what > difference does it make? > > If you don't trust the organization, then how in the world do you > use it's software. > > If you do trust the software, then what difference does it make how > money is spent or saved? > > You trust us enough to use our software for free ... but not enough > to donate? Then so be it ... that is what open source is all about. > > But open source is NOT about the users running the company. It is > about software freedom. > > You display a naive point of view respecting why people choose to volunteer, whether it be in the form of time, money or things. I suggest that you seriously consider whether you, yourself, would care to donate money to a project where you knew from the outset that few, if any of, the funds collected were employed to improve the project in any tangible way. Your motive to donate would be what, exactly? Resources are limited and therefor they are directed according to the values held by the people doing the directing. If donated money is spent on parties, drugs, houses, entertainment, or otherwise personally enriching individuals rather than advancing the cause for which it is directed then why would one not choose to simply spend this on oneself instead? If not that then why not at least direct it towards some project where it might make a positive difference? There is another point to consider. Governments take a very, very dim view of tax evasion. Who or what is declaring the income from and remitting the taxes on donations? What taxes have been remitted on past donations, and where? I think that you will find that individuals associated with putting CentOS out are themselves liable for income earned and not declared if there is not some systematic mechanism in place to ensure compliance with the applicable laws. Be assured that such laws do exist and are enforced in each and every country that the maintainers reside in. The Internet is not terra nullius. If you provide a product or service and accept valuable consideration in return then you have earned income. It is tempting, and emotionally satisfying, to argue that cannot be so, that there is no relationship between the two because one is not compelled to buy CentOS. Sadly, this proves not to be the case. If you get income from any source, for whatever reason, then you must declare it and pay whatever tax is levied. Whether you received it personally or as part of an identifiable collective you are personally liable. Now, what happens if some, or many, or all of the CentOS maintainers ends up dealing with say one, or two or N taxation authorities over the small matter of the taxes outstanding on the thousands of Euros already donated? What happens then to the future of the CentOS project? What happens to the probability of a successful successor project? Somehow, I do not think that such a turn of events would improve the odds. Trust, well that is another matter. The number of sports clubs, churches, charities and service organisations that have been ripped off by individuals who betrayed their fellow members' trust is uncountable. No doubt most, if not all, of these people once warranted the trust reposed in them. However, as the Bernie Madoff case shows once again, trust without verification invites betrayal. Money is a very corrosive material to place in the hands of people absent public oversight. It needs to be treated with both caution and circumspection lest it destroy that which it is intended to aid. That is why some people very much care about how it is handled. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

9 10

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss