Discuss

discuss@lists.centos.org

9 participants
34745 discussions

CentOS 7 on PPC64le booting from a MD RAID volume
by Tom Leach 08 Sep '17

08 Sep '17

I've been trying to install CentOS 7 AltArch ppc64le onto a new Power 8 system and I want to configure mdraid for the volumes. I can get everything working if I install to a single disk, but when I configure for RAID 1, the system fails to boot. So, is mdraid1 supported for booting a Power 8 system? Tom Leach leach(a)coas.oregonstate.edu

1 0

Re: [CentOS] login case sensitivity
by James B. Byrne 08 Sep '17

08 Sep '17

On Thu, September 7, 2017 14:07, hw wrote: > Gordon Messmer wrote: >> On 09/07/2017 08:11 AM, Stephen John Smoogen wrote: >>> This was always problematic because DNS hostnames and >>> email addresses in the RFC standards were case insensitive >> >> >> Not quite. SMTP is required to treat the "local-part" of the RCPT >> argument as case-sensitive, and to preserve case when relaying mail. >> The destination is allowed to treat addresses according to local >> policy, but in general SMTP is case sensitive with regard to the >> user identifier. > > Last time I checked, RFCs said that local parts *should not* be case > sensitive, and cyrus defaulted to treat them case sensitive, which > is a default that usually needs to be changed because senders of > messages tend to not pay any attention to the case sensitiveness > of recipient addresses at all, which then confuses them like any > other error. > > https://tools.ietf.org/html/rfc5321 Updated by: 7504 DRAFT STANDARD Errata Exist Network Working Group J. Klensin Request for Comments: 5321 October 2008 Obsoletes: 2821 Updates: 1123 Category: Standards Track . . . 2.4. General Syntax Principles and Transaction Model . . . Verbs and argument values (e.g., "TO:" or "to:" in the RCPT command and extension name keywords) are not case sensitive, with the sole exception in this specification of a mailbox local-part (SMTP Extensions may explicitly specify case-sensitive elements). That is, a command verb, an argument value other than a mailbox local-part, and free form text MAY be encoded in upper case, lower case, or any mixture of upper and lower case with no impact on its meaning. __The local-part of a mailbox MUST BE treated as case sensitive.__ Therefore, SMTP implementations MUST take care to preserve the case of mailbox local-parts. In particular, for some hosts, the user "smith" is different from the user "Smith". However, exploiting the case sensitivity of mailbox local-parts impedes interoperability and is discouraged. Mailbox domains follow normal DNS rules and are hence not case sensitive. . . . Case munging of the local part is handled by the local delivery agent in my experience. The Cyrus LMTP service can be, and often is, configured to force lower case munging (imapd.conf 'lmtp_downcase_rcpt: 1') of the local part. That decision is site specific. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

intel wireless 3165 and CentOS 7.3
by Jerry Geis 08 Sep '17

08 Sep '17

I am trying to get wireless working on CentOS 7.3 with intel wireless 3165 ip link 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT qlen 1000 link/ether b8:ae:ed:77:b3:3a brd ff:ff:ff:ff:ff:ff 3: wlan0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT qlen 1000 link/ether 34:02:86:cc:a0:79 brd ff:ff:ff:ff:ff:ff 4: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN mode DEFAULT qlen 1000 link/ether 52:54:00:70:8f:48 brd ff:ff:ff:ff:ff:ff 5: virbr0-nic: <BROADCAST,MULTICAST> mtu 1500 qdisc noqueue master virbr0 state DOWN mode DEFAULT qlen 500 link/ether 52:54:00:70:8f:48 brd ff:ff:ff:ff:ff:ff lspci 00:00.0 Host bridge: Intel Corporation Device 2280 (rev 21) 00:02.0 VGA compatible controller: Intel Corporation Device 22b1 (rev 21) 00:13.0 SATA controller: Intel Corporation Device 22a3 (rev 21) 00:14.0 USB controller: Intel Corporation Device 22b5 (rev 21) 00:1a.0 Encryption controller: Intel Corporation Device 2298 (rev 21) 00:1b.0 Audio device: Intel Corporation Device 2284 (rev 21) 00:1c.0 PCI bridge: Intel Corporation Device 22c8 (rev 21) 00:1c.1 PCI bridge: Intel Corporation Device 22ca (rev 21) 00:1c.2 PCI bridge: Intel Corporation Device 22cc (rev 21) 00:1f.0 ISA bridge: Intel Corporation Device 229c (rev 21) 00:1f.3 SMBus: Intel Corporation Device 2292 (rev 21) 02:00.0 Network controller: Intel Corporation Wireless 3165 (rev 81) 03:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd. RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller (rev 15) I have created the ifcfg-ESSID and keys-ESSID files. but I dont even thing the wireless is loading. ifconfig does not report wlan0 or anything. What am I missing to get wireless going? Thanks, Jerry

1 0

08 Sep '17

hello, some users' login fails since they type upper case for their user ids ,etc ... how can case sensitivity be disabled so they can login with mix of upper and lower case? this is what i tried: in /etc/sssd/sssd.conf i tested this below [domain/default] case_sensitive = false i stopped sssd, deleted all inside /var/sss/db and started sssd but that did not help .... thank you, F-

8 11

installing lxqt on CentOS-7
by Fred Smith 07 Sep '17

07 Sep '17

I see that epel has a bunch of lxqt packages,, but there doesn't seem to be a lxqt group. if I try to install lxqt-* it of course wants to install a whole shipload of stuff alongside it. does anyone here happen to know the correct incantation for getting lxqt onto a C7 system without unnecessary crap? thanks in advance! Fredex -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- "For him who is able to keep you from falling and to present you before his glorious presence without fault and with great joy--to the only God our Savior be glory, majesty, power and authority, through Jesus Christ our Lord, before all ages, now and forevermore! Amen." ----------------------------- Jude 1:24,25 (niv) -----------------------------

1 0

lightdm dependency
by Jon LaBadie 05 Sep '17

05 Sep '17

On a CentOS 7 system I'm trying to install lightdm. Yum says it requires "glib2(x86-64) >= 2.50.3". glib2 2.46 is installed but I have not found a 2.50 version. Have I overlooked it in some repo? -- Jon H. LaBadie jcu(a)labadie.us 11226 South Shore Rd. (703) 787-0688 (H) Reston, VA 20190 (703) 935-6720 (C)

2 2

Network Interrogation
by Chris Olson 05 Sep '17

05 Sep '17

Small private networks are a necessary part of our business. We also run some small networks with Internet connectivity through firewall routers. The smallest of these networks has only a printer and a mix of five CentOS and Windows 7 machines. We use a commercial protection product on the W7 system. This product has worked well guarding against unwanted software on the system for about three and a half years. Scans are scheduled and performed routinely once a week or on demand at various times. A recent update to this protection product has caused it to start probing the network for other systems. There is sometimes a message following scans indicating that there are other systems on our network that are unprotected. It appears that the two systems it is naming are a CentOS 6 system and the HP printer. This network probing does not happen with every scan that is run by the protection software and we have not been able to determine what causes that probing to be initiated. We also do not know exactly what is happening over the network during the probing activity. The protection software support folks have been no help in figuring out what is going on. There seems to be no good reason for the probing message to name only these two systems. The available printer status shows no indication of network traffic associated with this probing activity. The CentOS 6 system also does not indicate any related network activity from the system that is running the protection software. We have tried unsuccessfully to capture the network probing activity using Wireshark. Any ideas regarding how to track down what is happening here would be greatly appreciated.

5 4

Kernel 4.12 and nVidia Driver
by Eugene Poole 05 Sep '17

05 Sep '17

I tried to move to the latest stable kernel (4.12) so I could take advantage of my newest custom system (Intel Core I7 6-core; 64 GB RAM; MSI nVidia graphics card; 2 - 120 GB SSD; 2 - 4TB WD Black) on a UEFI Asrock mother board. I've had the machine for 3-months but I couldn't get it to work until I found out that the Nouveau driver was causing me all the 'hardware' issues. I moved to the nVidia driver along with DKMS and all of my issues went away until I attempted to upgrade kernel 4.12 ... It seems that DKMS doesn't automatically upgrade when the kernel is upgraded. Will this issue go away if I change my graphics card to a AMD? -- Eugene Poole Woodstock, Georgia

4 3

Simple OCSP server ??
by Alice Wonder 05 Sep '17

05 Sep '17

Hello list, I'm contemplating running my own CA to implement the new proposed ISP for validation of S/MIME certificates via DANE. I already use self-signed for my MX servers (with 3 1 1 dane records on TCP port 25) but I don't want to use self-signed for S/MIME for user specific x.509 certs because A) That's potentially a lot of DNS records B) That requires a hash of the e-mail addresses in DNS Instead, I will be using a wildcard in DNS with an intermediary that signs the user x.509 certificates. Using an intermediary to sign their certificates though means I can't just revoke their certificates by removing the DNS certificate, I'll need to provide an OCSP server for when one of their private keys gets compromised. I found https://access.redhat.com/documentation/en-US/Red_Hat_Certificate_System/8.… but it looks like that is intended for enterprise, more complex than I need. Anyone know of a good simple script for providing OCSP ?? -=- Not relevant to question but just important for me to note, I will *not* be asking people to install my root certificate in their e-mail clients. I think it is a bad practice to get users in the habit of installing root certificates. I think the PKI system has way way way to many root certificates as it is. I want a world where DANE validates most certificates, and only a few root certificates are needed for things like banks where EV certificates are a must. DANE as a way to validate S/MIME I think will be a godsend to e-mail security, I hope clients implement it.

2 5

Problem with IPTABLES logging message to the screen/console
by Jobst Schmalenbach 05 Sep '17

05 Sep '17

Hi I am not sure how to solve this. I am constantly getting messages that should go into the kern/message log printed on screen - MOSTLY from iptables. The messages are ALSO logged to the syslog files. It still prints those message onto the console screen even if I am logged off (security issue). When logged in on the console its anoying as I constantly have to hit CTRL-L to refresh the screen to get rid of those messages. However it does NOT happen when I ssh into the machine. How can I solve this that those messages are NOT printed. thanks Jobst -- Share your knowledge. It's a way to achieve immortality. | |0| | Jobst Schmalenbach, jobst(a)barrett.com.au, General Manager | | |0| |0|0|0| +61 3 9532 7677, POBox 277, Caulfield South, 3162, Australia

2 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss