Discuss

discuss@lists.centos.org

34753 discussions

Backup PC or other solution
by Alessandro Baggi 11 May '15

11 May '15

I list, I'm new with backup ops and I'm searching a good system to accomplish this work. I know that on centos there are bacula and amanda but they are too tape oriented. Another is that they are very powerfull but more complex. I need a solution for small office for disk storage and I found Backup PC. Many people say that it is great for small stuff and for great number of data. What do you mean about Backup PC? Any experiences? What solution do you use? Thanks in advances.

19 39

firewalld trouble opening a port
by Tim Dunphy 11 May '15

11 May '15

Hey all, I'm having a little trouble opening up a port on a C7 machine. Here's the default zone: [root@appd:~] #firewall-cmd --get-default-zone home So I try to add the port: [root@appd:~] #firewall-cmd --zone=home --add-port=8181/tcp success Then I reload firewalld: [root@appd:~] #firewall-cmd --reload success Simple! That should do it. Right? Well not quite. Cuz when I telnet to that host on that port, it's not connecting: #telnet appd.mydomain.com 8181 Trying xx.xx.xx.xx... <---obscuring the real IP telnet: connect to address xx.xx.xx.xx: Connection refused telnet: Unable to connect to remote host Yet, that port is definitely listening on the host: [root@appd:~] #lsof -i :8181 COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME java 13423 root 333u IPv6 3526508 0t0 TCP *:intermapper (LISTEN) And if I stop the firewall momentarily : I can telnet to that port from a remote location: #telnet appd.mydomain.com 8181 Trying xx.xx.xx.xx... Connected to appd.mydomain.com. Escape character is '^]'. Of course I bring up the firewall right away once I'm done testing: [root@appd:~] #systemctl start firewalld [root@appd:~] #systemctl status firewalld firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled) Active: active (running) since Sat 2015-05-09 14:56:20 EDT; 7s ago Main PID: 18826 (firewalld) CGroup: /system.slice/firewalld.service └─18826 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid May 09 14:56:20 appd systemd[1]: Started firewalld - dynamic firewall daemon. Any ideas on what I'm doing wrong? Thanks, Tim -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

3 4

Q: respecting .ssh/id_rsa
by James B. Byrne 11 May '15

11 May '15

While attempting to debug something else I ran across this: ssh -vvv somehost . . . debug1: Connection established. debug1: permanently_set_uid: 0/0 debug1: identity file /root/.ssh/identity type -1 debug1: identity file /root/.ssh/identity-cert type -1 debug3: Not a RSA1 key file /root/.ssh/id_rsa. debug2: key_type_from_name: unknown key type '-----BEGIN' debug3: key_read: missing keytype debug3: key_read: missing whitespace . . . However if I verify the key I see this: ssh-keygen -l -f ~/.ssh/id_rsa.pub 4096 08:70:3b:92:4c:96:1c:6a:03:a4:ae:66:8d:9e:6c:93 /root/.ssh/id_rsa.pub (RSA) Which seems ok to me. The permissions also seem ok: .ssh]# ll total 40 -rw-------. 1 root root 3863 Oct 11 2012 authorized_keys -rw-------. 1 root root 3243 Aug 9 2012 id_rsa -rw-r--r--. 1 root root 757 Aug 9 2012 id_rsa.pub -rw-r--r--. 1 root root 11071 May 8 09:42 known_hosts The password-less connections complete in any case but I am perplexed as to what is the problem with the root identity key that ssh is reporting. Can anyone explain to me what this means? -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

7 9

Centos6 & 7 : unable to print from webmail
by johan.vermeulen7＠telenet.be 11 May '15

11 May '15

Hello All, I have this problem in both Centos 6 and 7, with standard Firefox, version 31.6. I've tested this with Zarafa and Zimbra webmail. Certain mails cannot be printed. These are mails that have "untrusted" images somewhere in the body of the mail. As a workaround : If you forward the mail, and before you press send, you delete these images, you can print them. I hope I'm explaining this right. Note : if you ever wonder what a bunch of people complain about the most when you put them behind Linux machines, it's printing. Probably they all of a sudden they cannot complain any more about annoying pop-ups or viruses shutting them down completely. I see this Em in /var/log/messages : May 11 10:07:03 jvermeulen dbus[994]: [system] Rejected send message, 10 matched rules; type="method_return", sender=":1.1" (uid=70 pid=985 comm="avahi-daemon: starting up ") interface="(unset)" member="(unset)" error name="(unset)" requested_reply="0" destination=":1.92" (uid=15587 pid=4069 comm="/usr/lib64/firefox/firefox ") May 11 10:07:03 jvermeulen dbus[994]: [system] Rejected send message, 10 matched rules; type="method_return", sender=":1.1" (uid=70 pid=985 comm="avahi-daemon: starting up ") interface="(unset)" member="(unset)" error name="(unset)" requested_reply="0" destination=":1.92" (uid=15587 pid=4069 comm="/usr/lib64/firefox/firefox ") I tested this on Centos7 with Google Chrome, same issue. I have not tested this with newer Firefox versions. Some of my ( hopefully one day ex ) colleagues let me know this does work on Ubuntu. Thanks for any help on this. Greetings, Johan

1 0

KVM Questions
by Paul R. Ganci 11 May '15

11 May '15

I have a system with two CentOS 7.1 guests. When I created the VMs I did not have enough storage space in the default location /var/lib/libvirt/images so I moved the default location to a directory /home/vmimages. While this configuration is functional I regret creating a new storage pool in /home. I would like to create a separate partition to place the VM images removing them from their present /home/images location. The /home partition is presently empty other than the VM images directory so I can easily steal space from it (using only ~4% of 500GB). However, I have a problem. Namely /home is an XFS file system so I cannot shrink the partition in order to make space for the desired new VM images partition. I was wondering if this procedure might work to do what I desire: 1.) Shutdown the VMs 2.) Archive the VM image directory /home/vmimages to a network drive (don't have space locally other than on /home) 3.) Use parted or fdisk to delete present /home partition 4.) Use parted or fdisk to re-create smaller/home partition and new /vm-images partition 5.) Create XFS file system on /home and /vm-images 6.) Extact VM image directory archive into /vm-images 7.) Use virt-manager to change default location of images to /vm-images Is there any chance that after all this the VMs would actually start up again especially after a re-boot? Thanks. -- Paul (ganci(a)nurdog.com) (303)257-5208

4 7

mariadb fails to start under C7
by Tim Dunphy 11 May '15

11 May '15

Hey all, I just unstalled MariaDB version 10 from the mariadb repositories under a CentOS 7 host. The install went fine! [root@nfsdb1 ~]# rpm -qa | grep -i mariadb MariaDB-common-10.0.19-1.el7.centos.x86_64 MariaDB-server-10.0.19-1.el7.centos.x86_64 MariaDB-client-10.0.19-1.el7.centos.x86_64 MariaDB-shared-10.0.19-1.el7.centos.x86_64 However, when I go to start up the service, I'm getting this error: [root@nfsdb1 ~]# systemctl start mariadb.service Failed to issue method call: Unit mariadb.service failed to load: No such file or directory. Can someone please let me know how to start this up? Thanks, Tim -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

7 14

Re: [CentOS] openvpn and firewalld
by James B. Byrne 09 May '15

09 May '15

On Fri, May 8, 2015 12:06, Bowie Bailey wrote: > > Replying to myself here, I finally figured out how to do it with > direct rules. Firewalld on CentOS 7 defaults to a drop rule for > the FORWARD chain which my previous server didn't have. So I > needed to put the rules in the FORWARD chain rather than the > INPUT chain. > This does not make sense to me. The INPUT, OUTPUT and FORWARD chains are swimlanes. A packet starts out, following PREROUTING, in exactly one of these three and never leaves it. It can JUMP to shared chains but it will always return to its original chain until ACCEPTed, DROPped or REJECTed. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

Centos 7 and qemu-kvm
by Jerry Geis 09 May '15

09 May '15

Still trying to migrate to CentOS 7. I used to use qemu-kvm on centos 6. tried to compile on centos 7 and get error about undefined reference to timer_gettime searching for that says basically use virt-manager so I installed virt-manager - I have file images and those work. some times I do directly to a USB connected disk. I do not see how to do that in virt-manager ??? How do I use a device like /dev/sdh as my disk??? Thanks, Jerry

4 3

Re: [CentOS] Q: respecting .ssh/id_rsa
by James B. Byrne 09 May '15

09 May '15

On Fri, May 8, 2015 13:23, m.roth(a)5-cent.us wrote: > Devin Reade wrote: >> --On Friday, May 08, 2015 09:58:32 AM -0400 "James B. Byrne" >> <byrnejb(a)harte-lyne.ca> wrote: >> >>> While attempting to debug something else I ran across this: >>> >>> ssh -vvv somehost >>> . . . >>> debug1: Connection established. >>> debug1: permanently_set_uid: 0/0 >>> debug1: identity file /root/.ssh/identity type -1 >>> debug1: identity file /root/.ssh/identity-cert type -1 >>> debug3: Not a RSA1 key file /root/.ssh/id_rsa. >>> debug2: key_type_from_name: unknown key type '-----BEGIN' >>> debug3: key_read: missing keytype >>> debug3: key_read: missing whitespace >>> >>> [snip] >>> >>> The password-less connections complete in any case but I am >>> perplexed >>> as to what is the problem with the root identity key that ssh is >>> reporting. >>> >>> Can anyone explain to me what this means? >> >> IIRC there was a time when id_rsa could refer to either an >> RSA1 key or RSA2 key. I believe ssh is first trying to read >> the file as an RSA1 key, finding problems, and then opening it >> as an RSA2 key. In fact, if you scroll down from there you probably >> see a line like the following: >> >> debug1: identity file /home/somebody/.ssh/id_rsa type 1 >> >> which is a successful read (note the type is 1 and not -1). >> >> In other words, it's nothing to worry about. The messages are >> a bit different under CentOS 7 (I suspect you're running CentOS 6 >> on the client), but they say about the same thing. > <snip> > I would *strongly* recommend editing your /etc/ssh/sshd_config, and > comment or delete the fallback, and replace it, like: > #Protocol 2,1 > Protocol 2 > > That way, it won't even try. > > mark > If the problem is indeed a lookup on id_rsa for an rsa1 type key then the setting you suggest does not prevent it. All of the sshd_conf files in our CentOS-6 systems already have that set and I believe that it is the default setting for the distro. # Disable legacy (protocol version 1) support in the server for new # installations. In future the default will change to require explicit # activation of protocol 1 Protocol 2 However, your suggestion causes me to consider whether or not there is a similar setting for ssh_config. The problematic key lookup occurs on the client side of the connection. It seems unlikely that sshd server settings on client host would have much of an effect. Indeed there is no reason to suppose that sshd is even present. Respecting the other recommendations offered in various messages: These are, insofar as I can determine, already in effect. There are no AVCs reported, the ssh connections complete as expected, and there are no odd messages in /var/log/secure or /var/log/messages. The user in this case is root. The problem being debugged was automated internal network rsync transfers over ssh. All permissions, contexts and ownerships of the associated files and directories are as they were originally created by ssh-keygen. It seems to me likely that these messages are the result of code in the client application which simply reports and ploughs on when it runs into a file format it is not expecting leaving the final determination of whether or not the encounter is an error condition to somewhere later in the program. Thank you for the guidance. P.S. Also thanks for the info on SYN in ACK, . . ., SYN. Due to the problems some on the list are having with my emails I now find myself avoiding simple acknowledgements of help given. But it is gratefully received nonetheless. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Re: [CentOS] Backup PC or other solution
by James B. Byrne 08 May '15

08 May '15

On Fri, May 8, 2015 07:59, Timothy Murphy wrote: > Sorin Srbu wrote: >> Yeah, well, but it's free. >> I'm not sure you can complain too much in that case. 8-) > > I find this comment, often made, completely unacceptable. > The implication is that inferior code is OK > if the developer is not being paid. > > (Actually, the premise is probably nonsense, > as most Linux developers _are_ paid, even if formally > their pay is not specifically for Linux development. > But presumably the company that pays them believes that > it is of value to the company to have a Linux developer on board.) > > But is Linux code in fact inferior to code produced by Microsoft, say? > I don't think so. > And I don't think Linux developers are less keen to improve their > code. > Just the opposite. > > The difference is that a large portion of the FOSS corpus, if not a preponderant majority, is ultimately dependent upon the interest of the people responsible for its existance and not the people using it. Once a project's core team either loses enthusiasm for something, or have otherwise moved on in life, their project oft-times is left without any meaningful support. If a project is backed/picked up by a corporation, say Redhat or Oracle, or a foundation, say Apache or LibreOffice, then it may have a future more or less independent of any single individual or group. Otherwise it does not. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 4

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss