Discuss

discuss@lists.centos.org

3 participants
34748 discussions

Re: [CentOS] sssd.conf file missing
by Kaplan, Andrew H. 23 Jun '16

23 Jun '16

Hello – Thank-you for your e-mail. I corrected the syntax in the file, and I have confirmed the permissions are correct: -rw-------. 1 root root 266 Jun 23 08:45 sssd.conf Unfortunately, the error condition and messages listed in my initial e-mail are still present. From: l(a)avc.su [mailto:l@avc.su] Sent: Thursday, June 23, 2016 8:34 AM To: CentOS mailing list; Kaplan, Andrew H. Subject: Re: [CentOS] sssd.conf file missing Hello Andrew. The sssd.conf should be owned by root:root, mode 0600. Also please note this line in your config: [<domain>.org] enumate = true it's enumerate, not enumate. 23.06.2016, 15:24, "Kaplan, Andrew H." <ahkaplan(a)partners.org<mailto:ahkaplan@partners.org>>: Hello -- We are running CentOS 7.2 on a virtual machine, and we are trying to set up LDAP authentication. The ldap packages that are currently installed on the system are the following: python-sss 1.13.0-40.el7_2.4 python-sssdconfig 1.13.0-40.el7_2.4 sssd 1.13.0-40.el7_2.4 sssd-ad 1.13.0-40.el7_2.4 sssd-client 1.13.0-40.el7_2.4 sssd-common 1.13.0-40.el7_2.4 sssd-common-pac 1.13.0-40.el7_2.4 sssd-dbus 1.13.0-40.el7_2.4 sssd-ipa 1.13.0-40.el7_2.4 sssd-krb5 1.13.0-40.el7_2.4 sssd-krb5-common 1.13.0-40.el7_2.4 sssd-ldap 1.13.0-40.el7_2.4 sssd-libwbclient 1.13.0-40.el7_2.4 sssd-libwbclient-devel 1.13.0-40.el7_2.4 sssd-proxy 1.13.0-40.el7_2.4 sssd-tools 1.13.0-40.el7_2.4 I ran the following commands to set up LDAP/AD authentication: # ln -s /bin/bash /bin/PHSshell # ln -s /home /PHShome # authconfig --enablesssdauth --enablemkhomedir --enablesssd -update # chkconfig sssd on # service sssd restart Initially, I ran into problems because I had not created an sssd.conf file. Eventually I did create one, and its contents are the following: [<domain>.org] enumate = true cache_credentials = TRUE id_provider = ldap auth_provider = ldap chpass_provider = ldap ldap_uri = ldap://ldap.<domain>.org ldap_search_base = dc=<domain>,dc=org tls_reqcert = demand ldap_tls_cacert /etc/pki/tls/certs/ca-bundle.crt If there are any additions or corrections that I need to make, please let me know. I reran the service sssd restart command, and the error message that I am seeing via journalctl -xe is the following: Unit sssd.service has begun starting up. Jun 22 16:05:34 roadtest2.partners.org sssd[6384]: SSSD couldn't load the configuration database [5]: Input/output error. Jun 22 16:05:34 roadtest2.partners.org systemd[1]: sssd.service: control process exited, code=exited status=4 Jun 22 16:05:34 roadtest2.partners.org systemd[1]: Failed to start System Security Services Daemon. -- Subject: Unit sssd.service has failed -- Defined-By: systemd -- Support: http://lists.freedesktop.org/mailman.../systemd-devel<http://lists.freedesktop.org/mailman/listinfo/systemd-devel> -- -- Unit sssd.service has failed. -- -- The result is failed. Jun 22 16:05:34 roadtest2.partners.org systemd[1]: Unit sssd.service entered failed state. Jun 22 16:05:34 roadtest2.partners.org systemd[1]: sssd.service failed. Jun 22 16:05:34 roadtest2.partners.org polkitd[787]: Unregistered Authentication Agent for unix-process:6369:52587318 (system bus name :1.2287, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8) (disconnected from bus) Any ideas? The information in this e-mail is intended only for the person to whom it is addressed. If you believe this e-mail was sent to you in error and the e-mail contains patient information, please contact the Partners Compliance HelpLine at http://www.partners.org/complianceline . If the e-mail was sent to you in error but does not contain patient information, please contact the sender and properly dispose of the e-mail. _______________________________________________ CentOS mailing list CentOS(a)centos.org<mailto:CentOS@centos.org> https://lists.centos.org/mailman/listinfo/centos

3 6

Ovirt migration
by Andrew Dent 23 Jun '16

23 Jun '16

Hi We have a Single box running Ovirt 3.5.6.2-1 + CentOS7. The Engine, VDSM Host and the Storage is all on the Single box, which contains 2 * RAID1 arrays. We are looking to purchase a second box, and I'm wondering if someone can please help me to understand of how best to migrate to a HA environment using both boxes. We do have some additional NFS storage on the network that we can temporarily move VMs to. Is it possible to migrate our current Ovirt setup to be HA using Gluster, or would we need to start again by exporting all VMs, wipe box one and reinstall CentOS & Ovirt, then install CentOS and Ovirt on box two. I'd like to move the Engine to be hosted in a VM as well. Can we do HA without Gluster? Pros/Cons.... Regards Andrew Dent

2 1

KVM HA
by Tom Robinson 23 Jun '16

23 Jun '16

Hi, I have two KVM hosts (CentOS 7) and would like them to operate as High Availability servers, automatically migrating guests when one of the hosts goes down. My question is: Is this even possible? All the documentation for HA that I've found appears to not do this. Am I missing something? My configuration so fare includes: * SAN Storage Volumes for raw device mappings for guest vms (single volume per guest). * multipathing of iSCSI and Infiniband paths to raw devices * live migration of guests works * a cluster configuration (pcs, corosync, pacemaker) Currently when I migrate a guest, I can all too easily start it up on both hosts! There must be some way to fence these off but I'm just not sure how to do this. Any help is appreciated. Kind regards, Tom -- Tom Robinson IT Manager/System Administrator MoTeC Pty Ltd 121 Merrindale Drive Croydon South 3136 Victoria Australia T: +61 3 9761 5050 F: +61 3 9761 5051 E: tom.robinson(a)motec.com.au

9 23

Install C7 VM on C6 Host
by Mark LaPierre 23 Jun '16

23 Jun '16

Hey all, Before I waste myself a bunch of time trying the impossible I figured I would ask if I can install an instance of C7 in a KVM based VM on a C6 host. -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ ****

4 4

Centos 7 boot hanging unless systemd.log_target=console is used
by James Hartig 22 Jun '16

22 Jun '16

I have multiple VMs that are hanging on boot. Sometimes they'll boot fine after 5 mins and other times it'll take over an hour. The problem seems to be related to journald but I'd like to figure out how I can get more information. The VMs are running CentOS 7.1.1503. systemd and journald are both version 208. We are reluctant to upgrade to the newest CentOS because we found that journal-gatewayd is broken on boxes that have been upgraded. If I add the kernel parameter systemd.log_target=console then they boot up fine without hanging at all. I can't seem to get into the debug shell (Ctrl+Alt+F9) while the system is hanging after enabling debug-shell. Adding systemd.log_level=debug without systemd.log_target=console seems to make the problem worse and causes a hang of over an hour. I tried deleting /var/log/journal but that didn't help and I ran fsck on the root drive with no errors. I also tried masking systemd-udev-settle but that didn't help either. While the system is hanging the last console output is "Welcome to CentOS Linux 7 (Core)!". Here's the output from dmesg without "quiet" kernel parameter and without "systemd.log_level=debug": http://gobin.io/zScc systemd-analyze blame doesn't seem to help either (top 3): 10.451s nginx.service 7.149s network.service 2.178s etcd.service What else can I do to debug this? Thanks!

1 0

CentOS-announce Digest, Vol 136, Issue 4
by centos-announce-request＠centos.org 22 Jun '16

22 Jun '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2016:1266 CentOS 6 tzdata BugFix Update (Johnny Hughes) 2. CEBA-2016:1266 CentOS 7 tzdata BugFix Update (Johnny Hughes) 3. CESA-2016:1267 Important CentOS 6 setroubleshoot-plugins Security Update (Johnny Hughes) 4. CESA-2016:1267 Important CentOS 6 setroubleshoot Security Update (Johnny Hughes) 5. CEBA-2016:1266 CentOS 5 tzdata BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 21 Jun 2016 18:43:34 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2016:1266 CentOS 6 tzdata BugFix Update Message-ID: <20160621184334.GA56003(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2016:1266 Upstream details at : https://rhn.redhat.com/errata/RHBA-2016-1266.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 27275c88c15db6a83722068e6f998d74ccc00bafbb2a80cb4590b47b6ed9e5a2 tzdata-2016e-1.el6.noarch.rpm df6503b270368fa7f3b9147637e423ca6db45485f03072e9d5e273409d782007 tzdata-java-2016e-1.el6.noarch.rpm x86_64: 27275c88c15db6a83722068e6f998d74ccc00bafbb2a80cb4590b47b6ed9e5a2 tzdata-2016e-1.el6.noarch.rpm df6503b270368fa7f3b9147637e423ca6db45485f03072e9d5e273409d782007 tzdata-java-2016e-1.el6.noarch.rpm Source: 65814adef78cc1939847dc32f5ffbce8db34fc58acd8f1a002e002f5917ea638 tzdata-2016e-1.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Tue, 21 Jun 2016 19:05:22 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2016:1266 CentOS 7 tzdata BugFix Update Message-ID: <20160621190522.GA59766(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2016:1266 Upstream details at : https://rhn.redhat.com/errata/RHBA-2016-1266.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 35e627912852d34e84ea76e5cbcadf233c7945185320fc0a8b2fa7e5e4ee2099 tzdata-2016e-1.el7.noarch.rpm 688596a9be955e0f481845db5b41da2232ef701d56967971e2fe382be32fdad4 tzdata-java-2016e-1.el7.noarch.rpm Source: 32bbb097ae98767d8b45e3b38f03ae1c205eecaef6d1bcd58912fd6f5443a5fb tzdata-2016e-1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Tue, 21 Jun 2016 19:07:23 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:1267 Important CentOS 6 setroubleshoot-plugins Security Update Message-ID: <20160621190723.GA60050(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:1267 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-1267.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 3b8bbdeaf83bf2ae720395dd7ea13c3946f439e85bc60731f54414d85beb8a90 setroubleshoot-plugins-3.0.40-3.1.el6_8.noarch.rpm x86_64: 3b8bbdeaf83bf2ae720395dd7ea13c3946f439e85bc60731f54414d85beb8a90 setroubleshoot-plugins-3.0.40-3.1.el6_8.noarch.rpm Source: 524e4dac899bb14f96404df56f34475e037b4c9c770db40b4e039a05b5b1804f setroubleshoot-plugins-3.0.40-3.1.el6_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Tue, 21 Jun 2016 19:07:49 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:1267 Important CentOS 6 setroubleshoot Security Update Message-ID: <20160621190749.GA60273(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:1267 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-1267.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 6162d2040eee1d468be25455dff5505b881b0e843848a0d770b47f8f7b6de9fe setroubleshoot-3.0.47-12.el6_8.i686.rpm 711deca2ead9d099e1ca7f7a951902a3c7380ba0afa701870a280d23a7cbce89 setroubleshoot-doc-3.0.47-12.el6_8.i686.rpm 856cbc9cbfd54ebc46934f28aff9b56779aabc387ca4ecd5ebb0457572cf056e setroubleshoot-server-3.0.47-12.el6_8.i686.rpm x86_64: f108837ced085b3b45952528799c88f53bd1203d7e2f46e65c21a2ef9baa44ed setroubleshoot-3.0.47-12.el6_8.x86_64.rpm 0a76b22ee3f5d8bdcec67c3def7496f7c276c77db4bf23ac6cd5a208ed066260 setroubleshoot-doc-3.0.47-12.el6_8.x86_64.rpm 8a91304bb9f4f120a78858f5e18555b43027997923b0a3a73bdaa2b3c5ecabb4 setroubleshoot-server-3.0.47-12.el6_8.x86_64.rpm Source: 64dea800d736c50ce5d72c06dad0cfb36857a46254d84f01131bd2a09da549d5 setroubleshoot-3.0.47-12.el6_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 5 Date: Tue, 21 Jun 2016 19:09:43 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2016:1266 CentOS 5 tzdata BugFix Update Message-ID: <20160621190943.GA27729(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2016:1266 Upstream details at : https://rhn.redhat.com/errata/RHBA-2016-1266.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 980470351aa45a505738913c6b98e22543d182acb91410d9d23adcd5ce22efa4 tzdata-2016e-1.el5.i386.rpm f1ab933aec64ab8335388d2dc170670e6842c1828da3d9e6761d6ea4653bb729 tzdata-java-2016e-1.el5.i386.rpm x86_64: 14eea96779590f3a0a341ac8e144377cc2f5327c6e3df6d2757daf0e6a753123 tzdata-2016e-1.el5.x86_64.rpm 27051668651683bf9255059ca73b75ad2a42dee0b97c38065f073feee90fdd25 tzdata-java-2016e-1.el5.x86_64.rpm Source: 2be0737a89567aab8fa13639cfd0f98a04e6f2b337d5604e470ca5d44740f557 tzdata-2016e-1.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 136, Issue 4 ***********************************************

1 0

Any further developments on CentOS7 for i386?
by Kay Schenk 22 Jun '16

22 Jun '16

Well I haven't tested out the CentOS 7 for i386 yet as sent in the message of 06/02-- https://lists.centos.org/pipermail/centos-devel/2015-June/013426.html Nor have I seen any additional information. So how is this going? I'm almost ready to jump in as I would really prefer to be on Gnome 3. -- -------------------------------------------- MzK “The journey of a thousand miles begins with a single step.” --Lao Tzu

3 7

Package NetworkManager-libreswan-0.9.8.0-5.el7.x86_64.rpm is not signed
by Jules Bashizi 22 Jun '16

22 Jun '16

How to inst that Network manager please ================ Worthy agent of Light ================ Jules Irenge MSc Student University of Liverpool

4 3

Redirecting port 8080 to port 80 - how to add in /etc/sysconfig/iptables file?
by Alexander Farber 21 Jun '16

21 Jun '16

Good evening, on a CentOS 7 LAMP (not gateway) dedicated server I am using iptables-services with the following /etc/sysconfig/iptables: *filter :INPUT DROP [0:0] :FORWARD DROP [0:0] :OUTPUT ACCEPT [294:35064] -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -p icmp -m icmp --icmp-type any -j ACCEPT -A INPUT -p tcp -m state --state NEW -m tcp -m multiport --dports 25,80,443,8080 -j ACCEPT -A INPUT -p tcp -m state --state NEW -m tcp --dport 22 --tcp-flags FIN,SYN,RST,ACK SYN -m limit --limit 2/min --limit-burst 1 -j ACCEPT COMMIT Also I am running Jetty as user "nobody" at the port 8080 using the /etc/systemd/system/websocket-handler.service file: [Unit] Description=WebSocket Handler Service After=network-online.target [Service] Type=simple User=nobody Group=nobody ExecStart=/usr/bin/java -classpath '/usr/share/java/jetty/*' de.afarber.MyHandler 144.76.184.151:8080 ExecStop=/bin/kill ${MAINPID} SuccessExitStatus=143 [Install] WantedBy=multi-user.target However I actually need my Jetty program to run at port 80 - so that users behind corporate firewalls can connect too. The Jetty doc at https://www.eclipse.org/jetty/documentation/current/setting-port80-access.h… suggests to run the command # iptables -t nat -I PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080 but I can not figure out the corresponding line for the /etc/sysconfig/iptables I have tried running the above command and then "iptables -S" to see the added rule, but that didn't really work. Thank you Alex

6 11

Pulling in broadwell support for cent6u5
by jsl6uy js16uy 21 Jun '16

21 Jun '16

Hello, all. Hope all is well Is it possible to install kernel and support files from 6u7 into a base 6u5 image to achieve full broadwell support in 6u5? We are "locked", clearly not fully since willing to up jump kernels, on 6u5. Thanks for any and all help

4 7

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss