Discuss

discuss@lists.centos.org

11 participants
34747 discussions

question about shared samba directory file permissions..
by Jason Welsh 26 May '17

26 May '17

im trying to set up a shared samba directory for users to use on centos 7, but whenever I create a file from the samba client to the samba server, the owner of the file ends up being the user the share is mounted up as.. on the server (server1), [samba] comment = samba share path = /samba/ read only = No valid users = @samba write list = @samba force group = +samba create mask = 0770 browseable = yes [root@server1 ~]# grep samba /etc/group samba:x:6666:user2,user3 [root@server1 ~]# id user2 uid=2010(user2) gid=2010(user2) groups=2010(user2),6666(samba) on the client (server2), [root@server2 ~]# grep samba /etc/group samba:x:6666:user2,user3 [user2@server2 samba]$ pwd /mnt/samba [user2@server2 samba]$ df -h ./ Filesystem Size Used Avail Use% Mounted on //rhce1/samba 11G 4.5G 5.8G 44% /mnt/samba [user2@server2 samba]$ touch file [user2@server2 samba]$ ls -al file -rw-rw----. 1 *user3* samba 0 May 22 15:52 file [user2@server2 samba]$ id uid=2010(user2) gid=2010(user2) groups=2010(user2),6666(samba) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 [user2@server2 samba]$ any ideas? regards, Jason

4 4

What is in a yum group
by Robert Moskowitz 25 May '17

25 May '17

I want to install Xfce on a ClearOS server. They have not defined any desktop groups (actually no groups other than minimal). But lots of Xfce rpms are in their repos. How can I see what rpms Centos would install with a 'yum group install'? Then I get to install vnc server and set up the client right... thanks

7 21

startx on console 2
by Robert Moskowitz 25 May '17

25 May '17

I seem to recall that there is some special option to run X11 on <Alt-F2> On this ClearOS system, their console sits on the default console. You have to <Alt-F2> (etc.) to get a text login. Now that I have Xfce kind of installed, I want to see it on the system console, and I thought that just running startx would work. It doesn't. Got some errors. And then I remembered years back where there was some extra options used to run startx on one of the other consoles. But it has been too many years and I can't find any notes on it. The manpage says something about a DISPLAY option, but its use is very unclear. thanks

2 1

Getting to Mate or Xfce
by Beartooth 25 May '17

25 May '17

My wife bought a new Thinkpad, on which we had the shop install CentOS 7 (I *think* it's 7.3.) Alas!, I didn't think to specify NOT Gnome, in thunder. So of course I got it. I've tried several times to force myself to accommodate Gnome3, always with no joy. How do I get Mate or Xfce instead? Related problem: when I become root and tell it "yum update," it figures out a list of umpteen hundred rpms to update, but then runs through attempts at mirrors and keeps failing till it runs out. It failed to connect to my wireless router (or even to find it, afaict). So I plugged it into the router with an ethernet cable. No joy.

6 6

iptables
by Chad Cordero 25 May '17

25 May '17

I have an old postfix server that was historically used by the campus as an outbound gateway. The campus is now supposed to use a different server running HAProxy with several backe-end postfix servers. I am using iptables on CentOS 7 to log and block smtp and submission traffic not coming from my front-end HAProxy server (with a few exceptions for testing and monitoring). What I would like to do is log and redirect the connection to the proxy server. How do I do this? # cat /etc/sysconfig/iptables # Generated by iptables-save v1.4.21 on Wed May 24 12:22:03 2017 *filter :INPUT DROP [0:0] :FORWARD DROP [0:0] :OUTPUT ACCEPT [134:13069] :LOGGING - [0:0] -A INPUT -i lo -j ACCEPT -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT … -A INPUT -s 139.182.75.64/27 -p tcp -m tcp --dport 25 -j ACCEPT -A INPUT -s 139.182.111.0/24 -p tcp -m tcp --dport 25 -j ACCEPT -A INPUT -s 139.182.249.25/32 -p tcp -m tcp --dport 25 -j ACCEPT -A INPUT -s 139.182.249.254/32 -p tcp -m tcp --dport 25 -j ACCEPT -A INPUT -s 139.182.75.64/27 -p tcp -m tcp --dport 587 -j ACCEPT -A INPUT -s 139.182.111.0/24 -p tcp -m tcp --dport 587 -j ACCEPT -A INPUT -s 139.182.249.25/32 -p tcp -m tcp --dport 587 -j ACCEPT -A INPUT -s 139.182.249.254/32 -p tcp -m tcp --dport 587 -j ACCEPT … -A INPUT -j LOGGING -A LOGGING -m limit --limit 2/min -j LOG --log-prefix "IPTables-Dropped: " -A LOGGING -j DROP COMMIT # Completed on Wed May 24 12:22:03 2017 --- Chad Cordero Information Technology Consultant Enterprise & Cloud Services Information Technology Services California State University, San Bernardino 5500 University Pkwy San Bernardino, CA 92407-2393 Main Line: 909/537-7677 Direct Line: 909/537-7281 Fax: 909/537-7141 http://support.csusb.edu/ --- Disclaimer: This e-mail message is for the sole use of the intended recipient(s) and may contain confidential and privileged information protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer.

1 0

System Time Source
by Chris Olson 25 May '17

25 May '17

One of our STEM interns recently observed that there are inexpensive clocks that sync via radio to standard time services. This begged a question about why every computer would not have a radio module to receive time. Our senior staff did not have a good answer or if time from such a radio module would be supported by the operating system. When I was a student, such questions would have earned me extra homework assignments. We now have only PC directed relationships with interns so we don't assign any extra homework for curiosity. Can anyone help with the answers? Thanks and best regards.

12 17

CentOS6 and squid34 package ...
by Walter H. 25 May '17

25 May '17

Hello what is the essential difference between the default squid package and this squid34 package, as I have problems using this squid34 package for FTP connections; there are no shown icons, when going to e.g. ftp://ftp.adobe.com/ when I tell the browser to show the image then I get this squid generated message ... the same config /etc/squid/squid.conf works with the default squid package ... <message> While trying to retrieve the URL: http://proxy.local:3128/squid-internal-static/icons/silk/folder.png <http://zbox-ci323.waldinet.local:3128/squid-internal-static/icons/silk/fold…> The following error was encountered: * *Access Denied. * Access control configuration prevents your request from being allowed at this time. Please contact your service provider if you feel this is incorrect. Your cache administrator is ... ------------------------------------------------------------------------ Generated Thu, 25 May 2017 06:50:02 GMT by proxy.local (squid/3.4.14) </message> has anybody the hint for me, what is wrong ..., here is the /etc/squid/squid.conf <squid.conf> acl localnet src 192.168.1.0/24 acl SSL_ports port 443 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 # https acl Safe_ports port 70 # gopher acl CONNECT method CONNECT http_access deny !Safe_ports http_access deny CONNECT !SSL_ports http_access allow localhost manager http_access deny manager http_access deny to_localhost http_access allow localnet http_access allow localhost http_access deny all http_reply_access allow all http_port 3128 cache_dir ufs /var/spool/squid 16400 16 256 coredump_dir /var/spool/squid nonhierarchical_direct off visible_hostname proxy.local unique_hostname proxy.local forwarded_for off cache_mem 2560 MB icon_directory /usr/share/squid/icons error_directory /etc/squid/errors as_whois_server whois.ra.net logformat combined %>A %[ui %[un [%tl] "%rm %ru HTTP/%rv" %>Hs %<st "%{Referer}>h" "%{User-Agent}>h" %Ss:%Sh access_log /var/log/squid/access.log combined refresh_pattern ^ftp: 1440 20% 10080 refresh_pattern ^gopher: 1440 0% 1440 refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 refresh_pattern . 0 20% 4320 </squid.conf> the same host has a running apache, where host proxy.local is a password protected web, which has the folling for port 80 <virt. host> RewriteCond %{HTTP_HOST} ^proxy\.local(:80)?$ [NC] RewriteRule ^/(.*)$ https://proxy.local/$1 [L,R=301] </virt. host> for port 443 <virt. host> <Location /> AuthName Firewall/Router AuthType Basic AuthUserFile /var/www/passwrds Require User admin </Location> </virt. host> /var/log/squid/access.log has this ... <squid log> client - - [25/May/2017:08:50:02 +0200] "GET http://proxy.local:3128/squid-internal-static/icons/silk/folder.png HTTP/1.1" 403 1655 "ftp://ftp.adobe.com/" "UserAgent" TCP_DENIED:HIER_NONE </squid log> the apache doesn't log anything in connection with this ... has anybody the hint for me, what is causing this? Thanks, Walter

1 0

System Time Source Responses
by Chris Olson 25 May '17

25 May '17

It looks like we may have hit on a popular subject with the questions about system time sources. Thanks for all of the responses. Our intern and senior software staff now have useful information and new perspective.

1 0

network setup: meaning of PEERROUTES option
by hw 24 May '17

24 May '17

Hi, what´s the meaning of the PEERROUTES option in the networking scripts? I couldn´t find that documented anywhere. I managed to set up a bonding interface and when sending pings, I´m getting redirection messages from the gateway unless I manually add a route to the network. So I guess that for some reason, the routing doesn´t get set up correctly, and I wonder how to get that to work. Am I missing the PEERROUTES option, or does that do something else?

2 1

local ephemeral ports usage and distribution / inet_csk_get_port()
by Ferreol Lnx 24 May '17

24 May '17

Hello I'm using CentOS Linux release 7.3.1611 (Core) with kernel 3.10.0-514.16.1.el7.x86_64 Using iperf for bond benchmarking, and opening several sockets, I noticed a strange behavior. My Centos using iperf as a client to connect to an iperf server (running either CentOS or Debian) requesting N parallel TCP connections. I notice that the local ephemeral ports used are not consecutive and are always even ports numbers. This can change to "only odd ports numbers" depending on the setting net.ipv4.ip_local_port_range, but basically, the idea is the Centos kernel does "+2" when finding a local port for socket, not doing +1. Doing a netstat, generally speaking, only even (or odd) local ports are used so this does not seem application dependent. It's possible, however, to request both odd and even local ports, when requesting to bind them explicitly and not letting kernel function "inet_csk_get_port" determining it. To compare to another distro, Debian 7 3.2.78-1 x86_64 does increment local port number by +1 when opening sockets, using both even and odd local sockets numbers. This has an influence when doing network interfaces bonding with LACP 801.3ad with layer3+4 hashing policy, because the trafic to one remote host/service will improperly be balanced over bonded interfaces with Centos. Is there any known kernel patch or reason to explain this behavior ? thanks for any hints. best regards FdeS

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss