Discuss

discuss@lists.centos.org

3 participants
34748 discussions

Problems with ProxyPass to a local ip (using SSL)
by C. L. Martinez 03 Mar '16

03 Mar '16

Hi all, I am trying to setup an apache virtualhost under CentOS 6.7 that needs to redirects requests from port 444 to port 5100 in its local ip. But I am doing some mistakes because every time I'm receiving a loop error. My actual httpd's config for this virtualhost is: NameVirtualHost 192.168.1.5:444 <VirtualHost 192.168.1.5:444> ServerName myweb01.local.domain ErrorLog logs/ssl_error.log CustomLog logs/ssl_access.log combined CustomLog logs/ssl_request.log "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b" LogLevel info SSLEngine on SSLProxyEngine On SSLProtocol -ALL +SSLv3 +TLSv1 SSLCipherSuite ALL:!ADH:!EXPORT56:!EXP:!eNULL:!aNULL:RC4+RSA:+HIGH:+MEDIUM:!LOW:!SSLv2 SSLCertificateFile /etc/httpd/certs/server.crt SSLCertificateKeyFile /etc/httpd/certs/server.key ProxyRequests Off ProxyPreserveHost On ProxyPass / http://192.168.1.5:5100/ ProxyPassReverse / http://192.168.1.5:5100/ RequestHeader set X-Forwarded-Proto "https" RequestHeader set X-Forwarded-Port "444" RewriteEngine On RewriteRule ^/(.*) https://myweb01.local.domain:444/$1 [R,L] </VirtualHost> As you can see, I need to do a redirection to port 5100 from 444 port and protect it using ssl. I've configured iptables rules to drop connections to port 5100 directly: *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT -A INPUT -p icmp -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT -A INPUT -m state --state NEW -m tcp -p tcp --dport 444 -j ACCEPT -A INPUT -j REJECT --reject-with icmp-host-prohibited -A FORWARD -j REJECT --reject-with icmp-host-prohibited COMMIT Any idea how to accomplish/resolve this? Thanks. -- Greetings, C. L. Martinez

3 6

CentOS 7.2, nouveau won't go away
by m.roth＠5-cent.us 03 Mar '16

03 Mar '16

Hi, folks, Fully updated 7.2 system. I installed the correct proprietary NVidia driver (the user's expensive proprietary visualization software won't run with nouveau), I've put nouveau.modeset=0 rd.driver.blacklist=nouveau on the kernel line for grub2, and even yum removed the nouveau driver and built a new initrd... which won't boot, it seems to start and than does nothing, with a black screen, and this is just while booting, before it goes to graphical mode. If I boot the as-built current initramfs, it loads nouveau, though one of the modules listed if I do lsmod | grep nou shows nvidia, in addition to nouveau. So, in 7, what do I have to do to make nouveau go away? Is it as simple as creating an /etc/X11/xorg.conf, or...? mark

4 6

problem restoring ssl and vlc
by g 02 Mar '16

02 Mar '16

greeting. a short while ago, i may have gone to a site i should not have. maybe. after visiting, i decided i would check for rpm updates. when yumex opened to available packages, it showed that; openssl.x86_64 0:1.0.1e-42.el6_7.4 was available, so i checked it, then clicked install button. during log display, i got error message, tried again. still got error. seems that there is a 'protected' problem. text from log is at filefactory; http://www.filefactory.com/file/6x8rzrxmx8vx/yumex-error--openssl.2016-0301… tried a couple check at cli, it failed. then i tried a few more things that maybe i should not have. http://www.filefactory.com/file/6uryf80i52ix/yum-error--ssl.2016-0301-1841 during all this, i decided to open vlc to play some relaxing music. not. icon for vlc was no longer in my desktop top panel and reason the attempt to install vlc with yumex. not aware of what all is happening, i closed yumex. mistake. now, when i try to start yumex from panel icon, nothing. starting yumex from cli, i get this; ~]$ yumex Traceback (most recent call last): File "/usr/bin/yumex", line 25, in <module> from yumexgui import YumexApplication File "/usr/lib/python2.6/site-packages/yumexgui/__init__.py", line 34, in <module> from yumexgui.gui import Notebook, PackageInfo, CompletedEntry, YumexStatusIcon File "/usr/lib/python2.6/site-packages/yumexgui/gui.py", line 30, in <module> from yumexbase.constants import * File "/usr/lib/python2.6/site-packages/yumexbase/constants.py", line 35, in <module> from yum.constants import * File "/usr/lib/python2.6/site-packages/yum/__init__.py", line 53, in <module> import config File "/usr/lib/python2.6/site-packages/yum/config.py", line 30, in <module> from parser import ConfigPreProcessor, varReplace File "/usr/lib/python2.6/site-packages/yum/parser.py", line 4, in <module> import urlgrabber File "/usr/lib/python2.6/site-packages/urlgrabber/__init__.py", line 54, in <module> from grabber import urlgrab, urlopen, urlread File "/usr/lib/python2.6/site-packages/urlgrabber/grabber.py", line 422, in <module> import urllib2 File "/usr/lib64/python2.6/urllib2.py", line 93, in <module> import hashlib File "/usr/lib64/python2.6/hashlib.py", line 88, in <module> import _hashlib ImportError: libssl.so.10: cannot open shared object file: No such file or directory decided to try starting vlc from cli; ~]$ vlc bash: vlc: command not found presuming that vlc starts from a diff command, i tried to open kde menu, it will not open. i am now at a loss of what all has been removed and need help getting things back. thanks in advance for any and all help. -- peace out. If Bill Gates got a dime for every time Windows crashes... ...oh, wait. He does. THAT explains it! -+- in a world with out fences, who needs gates. CentOS GNU/Linux 6.7 tc,hago. g .

2 3

C7 minimal (1511) firewalld is not installed: logical?
by Patrick Bervoets 02 Mar '16

02 Mar '16

I just installed a host with CentOS-7-x86_64-Minimal-1511.iso It seems that firewalld is not included in the minimal set. I wonder why? If I recall correctly CentOS-7-x86_64-Minimal-1503-01.iso did include it. And, this could be a very stupid question, am I running without a firewall or just without a way to control my firewall? Thanks Patrick

2 2

RasPi 3.x and RH-based Distro (Slightly OT)
by Benjamin Smith 02 Mar '16

02 Mar '16

With the release of the Rasberry Pi 3.x, I think we have a platform I could jump on board with. Performance has just been lacking until now! But I really don't want to jump the "RH ship" - I'd rather stick with an environment I am comfortable in. Can anybody comment here on the best way to run RHEL/Fedora/CentOS on a RasPi, or if there's even a useful port? Thanks Ben S

6 7

CentOS-announce Digest, Vol 133, Issue 1
by centos-announce-request＠centos.org 02 Mar '16

02 Mar '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2016:0298 CentOS 6 findutils FASTTRACK BugFix Update (Johnny Hughes) 2. CESA-2016:0301 Important CentOS 6 openssl Security Update (Johnny Hughes) 3. CESA-2016:0301 Important CentOS 7 openssl Security Update (Johnny Hughes) 4. CESA-2016:0302 Important CentOS 5 openssl Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 1 Mar 2016 13:06:38 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2016:0298 CentOS 6 findutils FASTTRACK BugFix Update Message-ID: <20160301130638.GA3583(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2016:0298 Upstream details at : https://rhn.redhat.com/errata/RHBA-2016-0298.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: ed1a7580800b4cb68fd882f39eafe9c4a0d8b2ec9ff6d25358f2f10d9cc35555 findutils-4.4.2-9.el6.i686.rpm x86_64: fbbb4d9e91b0a7cac328167d09a3591d9ee50e990d86da45bee99f8020a03db3 findutils-4.4.2-9.el6.x86_64.rpm Source: 8f0afaba4a8461e71ea4001750df754ff6406e5a68e5276c8aae4a36a6a9632c findutils-4.4.2-9.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Tue, 1 Mar 2016 16:09:29 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0301 Important CentOS 6 openssl Security Update Message-ID: <20160301160929.GA26137(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0301 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0301.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 31cacdfe88b5e4b420bd2dd1fe6b491b35a2a57c7e3b4ef5b960573b095fc519 openssl-1.0.1e-42.el6_7.4.i686.rpm a57701c0598a7c91de1eac55fa5b6ffe2bc096c07f757723d6de65dd092dbc66 openssl-devel-1.0.1e-42.el6_7.4.i686.rpm 3e62aef02b5a465d587a3c3dfec494b27d55ec2a5dac0a13e6ac842188728d66 openssl-perl-1.0.1e-42.el6_7.4.i686.rpm 621cd98e6d221febb477906443a1692afd64ffcc79cb843a146ee4583e7224f7 openssl-static-1.0.1e-42.el6_7.4.i686.rpm x86_64: 31cacdfe88b5e4b420bd2dd1fe6b491b35a2a57c7e3b4ef5b960573b095fc519 openssl-1.0.1e-42.el6_7.4.i686.rpm e5fc87d5031ea23db0eb2be92743a557d8574caa583fad6a1cd16a757ed436f3 openssl-1.0.1e-42.el6_7.4.x86_64.rpm a57701c0598a7c91de1eac55fa5b6ffe2bc096c07f757723d6de65dd092dbc66 openssl-devel-1.0.1e-42.el6_7.4.i686.rpm 17b6a4dbe2f844d3944fa7c4cafe9ccf4d54a8dc23d26201a513fc86bd08d256 openssl-devel-1.0.1e-42.el6_7.4.x86_64.rpm 4b9ec40e680ad72d6134283f3ab6179d2c4c8a34433aed4f42c5117bfeb300a5 openssl-perl-1.0.1e-42.el6_7.4.x86_64.rpm aaaf4d42ef5f48f424ed9d6d04744e906a15d3ae66097bcd3ec60be226879cd6 openssl-static-1.0.1e-42.el6_7.4.x86_64.rpm Source: 152d1ec6f40854680bbad1524f2b7766c8f583de6b1a136b635ec9b257d4b088 openssl-1.0.1e-42.el6_7.4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Tue, 1 Mar 2016 16:41:22 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0301 Important CentOS 7 openssl Security Update Message-ID: <20160301164122.GA26845(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0301 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0301.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: b2aaed03ed2d01d2a6482ed97a95aec0545ffc4c00ad46c7cafc10c9554e1b58 openssl-1.0.1e-51.el7_2.4.x86_64.rpm b1aa349c2ea3a99cc65d031850d415b7feb7924f0a121593c12b439934440eb4 openssl-devel-1.0.1e-51.el7_2.4.i686.rpm 3e194452a2616702ee91e791b163b739d012da52957f6e91927de9d554e4e203 openssl-devel-1.0.1e-51.el7_2.4.x86_64.rpm 2e193ea886626e3e8b151f905920503e2e505cc2bdfef31a8d38a581c99e210f openssl-libs-1.0.1e-51.el7_2.4.i686.rpm 249cc7d68c0d8d48a26b50066ed29da2d70c7a573d23dc566ee7c99f5c5f71c9 openssl-libs-1.0.1e-51.el7_2.4.x86_64.rpm 61cfe9edcb1d521b2978fee1acda2a9cba73f2c371bc9217b44bd527569938c5 openssl-perl-1.0.1e-51.el7_2.4.x86_64.rpm a5d2395db7a0c87d069e3fc80e55deacffeea5acc5162058075a746871954ce7 openssl-static-1.0.1e-51.el7_2.4.i686.rpm e48dd73a4f9bc7d3b6617842414a1b50fc086c720795451ca4795ecd08ba3b22 openssl-static-1.0.1e-51.el7_2.4.x86_64.rpm Source: 26fa86503898fa5fcf91188aa6f56172ea1896e4d4943bd407aa54d21d330618 openssl-1.0.1e-51.el7_2.4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Tue, 1 Mar 2016 16:57:33 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:0302 Important CentOS 5 openssl Security Update Message-ID: <20160301165733.GA16183(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:0302 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0302.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 045550a5b7552b7a9cd5ea7a1f866de367e3bf677d240925d633a1b7938cd07a openssl-0.9.8e-39.el5_11.i386.rpm 8c73a864ce991ba4e6c950cc6ca642c09a7753fc5aa793a0a23e683ba5df99e9 openssl-0.9.8e-39.el5_11.i686.rpm 230b07861835e3a65052e45b617a73cbbd3057c6db38d315dbed7b3d01f1fba6 openssl-devel-0.9.8e-39.el5_11.i386.rpm c63d611b4519928413ed611a020d7e7113ccbf6890b264b4b8399f9af7bf6140 openssl-perl-0.9.8e-39.el5_11.i386.rpm x86_64: 8c73a864ce991ba4e6c950cc6ca642c09a7753fc5aa793a0a23e683ba5df99e9 openssl-0.9.8e-39.el5_11.i686.rpm d7e159cfd9e991adf152df48cb97751c8a26601b1f3f3a70a3e137efb05e0c35 openssl-0.9.8e-39.el5_11.x86_64.rpm 230b07861835e3a65052e45b617a73cbbd3057c6db38d315dbed7b3d01f1fba6 openssl-devel-0.9.8e-39.el5_11.i386.rpm f6bc29a1ab08303174206210af09b37ec53f0c0d643f18bf98427b20f2cb4a67 openssl-devel-0.9.8e-39.el5_11.x86_64.rpm 7953dcc480ff7815f39943f62fc848b3ce7ecb66217d2829332d95be4400c13d openssl-perl-0.9.8e-39.el5_11.x86_64.rpm Source: e0dab71e400c340b8eed7770c582ce6f3768888a61b4c492411d20e81ae1a9a6 openssl-0.9.8e-39.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 133, Issue 1 ***********************************************

1 0

Any experiences with newer WD Red drives?
by Emmanuel Noobadmin 02 Mar '16

02 Mar '16

Might be slightly OT as it isn't necessarily a CentOS related issue. I've been using WD Reds as mdraid components which worked pretty well for non-IOPS intensive workloads. However, the latest C7 server I built, ran into problems with them on on a Intel C236 board (SuperMicro X11SSH) with tons of "ata bus error write fpdma queued". Googling on it threw up old suggestions to limit SATA link speed to 1.5Gbps using libata.force boot options and/or noncq. Lowering the link speed helped to reduce the frequency of the errors (from not getting a smartctl output to getting a complete listing within 2 tries). Tried two Reds produced in Jan 2016, two HGST, two SSDs on the same combination of cable/bay/SATA port as well as different combos. SSD maxed out at 450Mbps dd write test so doesn't appear to be lousy cables or board problem. Basically only the Reds were having problems. Strange thing is a netinstall of CentOS 7.0 "minimal" worked with one of the Reds before starting to cough. Now that I think about it, could be due to an update to 7.2 after installing. Needed to get the server out the door ASAP so didn't have time to try C6 once I confirmed it was the drive and promptly replaced it with another HGST. Since I'm likely to use Reds again, it is a bit of a concern. So wondering if I just happen to get an unlucky batch, or is there some incompatibility between the Reds and the Intel C236 chipset, or between Red / C236 / Centos 7 combo or the unlikely chance WD has decided to do something with the firmware to make them work on on NAS and not workstation/server chipsets to make people buy better stuff. Anybody has recent experiences with them recently on the same chipset with C7?

6 10

ssh issues with centos 6
by William Warren 01 Mar '16

01 Mar '16

I have a new centos 6 install. Randomly i get out of memory messages and my ssh file transfer dies. I have tried this in filezilla as well as winscp. I have disabled motd in ssh and i also had entropy problems so i enacted rngd -r /dev/urandom -o /dev/random but did not stop the out of memory errors. I am seeing the below in the logs. It only occurs during ssh file transfers. Feb 28 17:18:19 web1 t of memory [13604]

3 2

making a new initrd
by Philip Manuel 01 Mar '16

01 Mar '16

Hi, I built a new kernel for C7 that contains the required driver for a new motherboard we have here. I'd like to take this initramfs and rebuild it/modify it so that it is suitable for pxe booting. I have tried dracut -v --force --add "anaconda" initramfs.img # results in an image that is too large for tftp Or dracut --nofscks --nomdadmconf --nolvmconf --xz --no-early-microcode -m "anaconda" --force initramfs.img # kernel panics What steps should I be taking to create an initrd image suitable for pxe boot ? Thanks

1 0

Pi 2 Alternatives
by Chris Olson 01 Mar '16

01 Mar '16

We have a requirement for a new application that will be used fixed, portable, and mobile. The hardware requirements drive the need for networking as well as some general purpose and special purpose interfaces. The software requirements are quite simple in comparison to many of our much larger systems with similar hardware requirements. We are not significantly restricted in choice of storage peripherals or other devices that may be needed. We believe that a small, single board computer will meet all requirements as long as it can run Linux. We have identified the need for approximately six prototyping units to support the initial production of about 200 to 300 operational systems. Our development and deployment time frame does not drive the need for an extremely rapid product decision, and there are pre-planned upgrade cycles over the next five years. An internal group has achieved a significant head of steam in support of using the Pi 2 Model B. The support enthusiasm may be partly technical and partly the hype associated with jumping into the Pi community. The number of suppliers does appear to support our supply chain and sustainment requirements, however the Linux available for the Pi 2 does not appear to be optimal. It would be better if there were choices that include a standard Linux distribution such as CentOS. This certainly seems like one of those situations where a trade of single board computer products is appropriate and achievable. There are products similar to the Pi 2 capable of running a more standard Linux distribution that we might consider. Does anyone have an experience-based single board computer recommendation? Thanks in advance for any product recommendations.

4 3

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss