Discuss

discuss@lists.centos.org

34758 discussions

Centos 7 and Network/Bridges
by Oliver Schad 17 Aug '14

17 Aug '14

Hi all, I'm a little bit confused about networking in Centos 7: I've copied my bridge setup from a Centos 6 for KVM networking to Centos 7. I changed the interface name to the new schema and I had expect that it would work. But: The Bridges didn't came up with the following log message: "Error: Device 'br61' is waiting for slaves before proceeding with activation" Config: DEVICE=br61 ONBOOT=yes TYPE=Bridge BOOTPROTO=none DELAY=3 STP=yes NM_CONTROLLED="no" Some more messages from the same type for other bridges. Sounds like a dependency problem. The bridges were created but they all were in state "down". The physical vlan tagged interfaces were not created, which should be bridged to those bridges above. Playing with STP and Delay didn't help. Because I saw no error, I removed the NetworkManager and it worked. Now when I reboot the system doesn't exit the SSH daemon before removing network interface so you end up in a hanging SSH connection. Ok, minor problem. Does somebody have similar dependency problems? Best Regards Oli

1 1

Re: [CentOS] Instaling LAMP on CentOS 7.x
by James B. Byrne 17 Aug '14

17 Aug '14

On Thu, August 14, 2014 11:26, John Plemons wrote: > If you are looking for another method for mySQL management, then > webmin.com works too. Download the RPM package, ver. 1.700, it will > allow you to do a great number of tasks remotely via the web. > I would advise that if you choose to use Webmin (and I do) then you should consider having it listen only on one IP address where more than one virtual IP is available. Further, the IP address and port (default is 10000) used by Webmin should be blocked by firewall settings to prevent direct access from the Internet. Instead you should use some form of tunnelling to establish a secure link to your LAN or to the host system itself. Even then you should only permit connections from known addresses from within your LAN. You should also enable and require TLS (https) connections for Webmin as otherwise privileged user credentials are exposed. There are configuration choices available in Webmin to do this but these present a chicken and egg problem as the default setup uses plain http. If this is an issue then you can get around this by manually changing the following configuration settings in /etc/webmin/miniserv.conf using an editor over an ssh connection after installing but before using Webmin: ssl=1 ssl_redirect=1 certfile=/etc/webmin/miniserv.pem # default set up with webmin install keyfile=/etc/webmin/miniserv.pem # default set up with webmin install Or you can use a one-time set of credentials and change them immediately after setting Webmin to use https. Regardless of how you set up Webmin's https access you also require this Perl module to get Webmin over https to work: yum install perl-Net-SSLeay For remote access the simplest tunnel I have discovered employs ssh and Firefox proxied to use SOCKSV on localhost port 2001 (127.0.0.1:2001). Something like: ssh -p 22 \ -o ServerAliveInterval=30 \ -o ServerAliveCountMax=10 \ user-id(a)internal.host.domain.tld \ -D 2001; As a refinement I set up a specially configured sshd service that also listens on ports 80 and 443. This permits me to change the ssh port from 22 to 80 or 443 whenever a network provider decides that ssh is not part of their service (Hello Westin. . .) If you are using PuTTY as the ssh client then you can do the same thing in the /Connection/SSH configuration by adding 2001 as a source port and selecting Dynamic as the destination type. You specify the ssh connection port in the Basic Options for the Session set up. HTH -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

centos6 selinux-policy-targeted not getting installed properly from kickstart
by Andrew Lau 17 Aug '14

17 Aug '14

Hi, I'm using this kickstart to build a centos AMI, https://gist.github.com/andrewklau/9c354a43976d951bdedd For some reason, selinux isn't getting installed correctly, on first boot: $ semodule -B libsemanage.semanage_link_sandbox: Could not access sandbox base file /etc/selinux/targeted/modules/tmp/base.pp. (No such file or directory). semodule: Failed! Proceeding to do anything else selinux related fails as well. The only solution has so far been to yum reinstall selinux-policy-targeted Anyone know why this could be happening? Thanks, Andrew

1 0

LVM Configuration
by Günther J. Niederwimmer 17 Aug '14

17 Aug '14

Hello, I miss the system-config-lvm tool for CentOS 7 can I found this on a other place? -- mit freundlichen Grüßen / best Regards, Günther J. Niederwimmer

6 8

Bind config question, centos 5.10
by Chuck Campbell 16 Aug '14

16 Aug '14

I must have something mis-configured in my bond setup. Things are working, but I'm getting TONS of this sort of stuff in my log: +2001:502:ad09::4#53: 1 Time(s) network unreachable resolving 'kns1.kuwaitnet.net/A/IN': +2001:503:231d::2:30#53: 1 Time(s) network unreachable resolving 'kns1.kuwaitnet.net/A/IN': +2001:503:a83e::2:30#53: 1 Time(s) network unreachable resolving 'kns1.kuwaitnet.net/AAAA/IN': +2001:503:231d::2:30#53: 1 Time(s) network unreachable resolving 'kns1.kuwaitnet.net/AAAA/IN': +2001:503:a83e::2:30#53: 1 Time(s) network unreachable resolving 'kns2.kuwaitnet.net/A/IN': +2001:503:231d::2:30#53: 1 Time(s) network unreachable resolving 'kns2.kuwaitnet.net/A/IN': +2001:503:a83e::2:30#53: 1 Time(s) network unreachable resolving 'kns2.kuwaitnet.net/AAAA/IN': +2001:503:231d::2:30#53: 1 Time(s) network unreachable resolving 'kns2.kuwaitnet.net/AAAA/IN': +2001:503:a83e::2:30#53: 1 Time(s) network unreachable resolving 'kns3.kuwaitnet.net/A/IN': +2001:503:231d::2:30#53: 1 Time(s) network unreachable resolving 'kns3.kuwaitnet.net/A/IN': +2001:503:a83e::2:30#53: 1 Time(s) network unreachable resolving 'kns3.kuwaitnet.net/AAAA/IN': +2001:503:231d::2:30#53: 1 Time(s) I'm not sure where to look. it may be the "any" in the named.conf lines below, but I'm not sure. My named.conf looks like this: options { listen-on port 53 { 127.0.0.1; any; }; # listen-on-v6 port 53 { ::1; }; directory "/var/named"; dump-file "/var/named/data/cache_dump.db"; statistics-file "/var/named/data/named_stats.txt"; memstatistics-file "/var/named/data/named_mem_stats.txt"; // Those options should be used carefully because they disable port // randomization // query-source port 53; // query-source-v6 port 53; allow-query { localhost; any; }; allow-query-cache { localhost; any; }; # allow-query { localhost; }; # allow-query-cache { localhost; }; }; logging { channel default_debug { file "data/named.run"; severity dynamic; }; }; view localhost_resolver { match-clients { localhost; any; }; match-destinations { localhost; any; }; # match-clients { localhost; }; # match-destinations { localhost; }; recursion yes; include "/etc/named.rfc1912.zones"; }; -- ACCEL Services, Inc.| Specialists in Gravity, Magnetics | (713)993-0671 ph. | and Integrated Interpretation | (713)993-0608 fax 448 W. 19th St. #325| Since 1992 | (713)306-5794 cell Houston, TX, 77008 | Chuck Campbell | campbell(a)accelinc.com | President & Senior Geoscientist | "Integration means more than having all the maps at the same scale!"

3 2

Re: [CentOS] systemd and httpd
by galtsev＠kicp.uchicago.edu 16 Aug '14

16 Aug '14

I don't have passphrases on certificates () ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++ <div>-------- Original message --------</div><div>From: Jack Bailey <jack(a)internetguy.net> </div><div>Date:2014/08/15 16:52 (GMT-06:00) </div><div>To: centos(a)centos.org </div><div>Subject: Re: [CentOS] systemd and httpd </div><div> </div>On 08/15/14 14:48, Alexander Dalloz wrote: > Am 15.08.2014 um 23:29 schrieb Jack Bailey: >> Hello, >> >> On my new CentOS 7 server httpd stops running after about two minutes or >> so. strace shows me the process is asking for a password, and failing >> to get one, times out. In reading the docs I see an option to systemd: >> --no-ask-password. Can anyone tell me where and how to set this? > You are using a passphrase protected SSL key, aren't you? > > https://wiki.apache.org/httpd/RemoveSSLCertPassPhrase I'm moving a web site from CentOS 6 to CentOS 7 where the site currently works without prompting for a password. I'll check to see if the passphase is removed from the cert. Thanks, Jack _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

Webalizer not available for CentOS 7?
by Mike McCarthy, W1NR 16 Aug '14

16 Aug '14

It seems that the Webalizer WEB statistics reporting package is no longer available in CentOS 7. Rather than building from Sourceforge and writing custom configuration files for it, is there an alternative? Use the Fedora package? Another WEB analyzer? Thanks, Mike

2 1

systemd and httpd
by Jack Bailey 15 Aug '14

15 Aug '14

Hello, On my new CentOS 7 server httpd stops running after about two minutes or so. strace shows me the process is asking for a password, and failing to get one, times out. In reading the docs I see an option to systemd: --no-ask-password. Can anyone tell me where and how to set this? As a workaround, I added "KillMode=none" to httpd.service, but I'd rather use the option to just not ask for a password. Thanks, Jack

3 3

Centos7 - remove /home and expand / after install?
by Les Mikesell 15 Aug '14

15 Aug '14

I did a default install and after installing some other things I realized that a lot of space was allocated to /home as an lvm that is never going to be used. Is it possible to remove the lvm and grow the root (xfs) filesystem without starting over? -- Les Mikesell lesmikesell(a)gmail.com

2 1

el6 crash-trace-command vendor?
by Denniston, Todd A CIV NAVSURFWARCENDIV Crane 15 Aug '14

15 Aug '14

I was running a rpm -qa --qf "%{vendor} \t\t%{name}\n" |sort|grep -v CentOS looking for packages from other vendors installed on a machine and noticed a curious sight: Fujitsu Limited crash-trace-command It appears I am not the only one who has crash-trace-command from Fujitsu Limited https://www.centos.org/forums/viewtopic.php?f=13&t=1081&start=0#p6688 That is a good thing right? :) I was curious however to find it in my centos mirror, and apparently signed by the centos crew[2]. Would one of our gentle OS maintainers be kind enough to confirm this is just an extension of the issues in bug 5967[1]? (which I found near the end of my web search) Looking a little deeper it appears that there are a couple of other packages (rome) with odd vendors in the 6.5 tree: for i in centos/6/os/i386/Packages/*rpm; \ do rpm -q --qf "%{vendor} \t%{name}\n" -p $i; \ done |grep -v CentOS Fujitsu Limited crash-trace-command Red Hat, Inc. python-qpid-qmf Red Hat, Inc. qpid-qmf (none) rome (none) rome-javadoc Red Hat, Inc. ruby-qpid-qmf [1] http://bugs.centos.org/view.php?id=5967 [2] $ rpm -qa gpg-pubkey\* gpg-pubkey-c105b9de-4e0fd3a3 $ for i in centos/6/os/*/Packages/crash-trace-command-*; \ do echo $i;rpm -q --qf "%{vendor} \t%{name}\n" -p $i;done centos/6/os/i386/Packages/crash-trace-command-1.0-4.el6.i686.rpm Fujitsu Limited crash-trace-command centos/6/os/x86_64/Packages/crash-trace-command-1.0-4.el6.x86_64.rpm Fujitsu Limited crash-trace-command ##Note the lack of ##"warning: centos/6/os/i386/Packages/crash-trace-command-1.0-4.el6.i686.rpm: Header V3 RSA/SHA1 signature: NOKEY, key ID c105b9de" ## which I did get on a CentOS 5 machine doing the same check.

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss