Discuss

discuss@lists.centos.org

34758 discussions

Thunderbird bug, anyone else have seen it?
by Eliezer Croitoru 19 Jun '14

19 Jun '14

https://bugzilla.mozilla.org/show_bug.cgi?id=541130 The bug I see is using thunderbird 24.6 which is the latest update on centos 6.5. The issue is that every time I open an email with some "+" somewhere in the source (which I didn't traced yet) I get annoying message: An error occurred while loading or saving configuration information for thunderbird. Some of your configuration settings may not work properly. =In the details section I get: Bad key or directory name: "/desktop/gnome/url-handlers/EDH+CAMELLIA/command": `+' is an invalid character in key/directory names Bad key or directory name: "/desktop/gnome/url-handlers/EDH+CAMELLIA/command": `+' is an invalid character in key/directory names Bad key or directory name: "/desktop/gnome/url-handlers/EDH+aRSA/command": `+' is an invalid character in key/directory names Bad key or directory name: "/desktop/gnome/url-handlers/EDH+aRSA/command": `+' is an invalid character in key/directory names Bad key or directory name: "/desktop/gnome/url-handlers/EECDH+aRSA+AESGCM/command": `+' is an invalid character in key/directory names Bad key or directory name: "/desktop/gnome/url-handlers/EECDH+aRSA+AESGCM/command": `+' is an invalid character in key/directory names Bad key or directory name: "/desktop/gnome/url-handlers/EECDH+aRSA+SHA384/command": `+' is an invalid character in key/directory names Bad key or directory name: "/desktop/gnome/url-handlers/EECDH+aRSA+SHA384/command": `+' is an invalid character in key/directory names Bad key or directory name: "/desktop/gnome/url-handlers/EECDH+aRSA+SHA256/command": `+' is an invalid character in key/directory names Bad key or directory name: "/desktop/gnome/url-handlers/EECDH+aRSA+SHA256/command": `+' is an invalid character in key/directory names ##end By the last message of the bug-report I understand that RH released a bug-fix\patch that should help with the issue. Before I file a bug, anyone else is having the same issue? anyone has the patch from the bug-report? Thanks, Eliezer

4 5

problem with centos.org whois
by Devin Reade 19 Jun '14

19 Jun '14

It looks like someone pooched a domain transfer, and the whois entry for centos.org is missing its NS records. I've sent an email to the whois tech contact @redhat, but I'm sending this to the list to hopefully bring it to someone else's attention, as well. Hopefully it gets gets out before my mailserver expires its DNS cache for centos.org. Expect centos.org to be offline for a bit ... Devin -- I wish there was a knob on the TV to turn up the intelligence. There's a knob called `brightness', but it doesn't work. - Gallagher

4 4

compiling centos 6.5 linux-2.6.32-431.el6-kernel
by Dilip Basavaraju 19 Jun '14

19 Jun '14

Dear all, I have compiled the linux-2.6.32-431.el6-kernel with the following steps 1. Make mproper 2. Make menuconfig 3. Make 4. Make modules 5. Make modules_install The compilation is successful but there is a huge change in the size of the .ko generated compared to original .ko from the rpm. Please suggest the steps to compile the centos linux-2.6.32-431.el6-kernel and use the modules and to build the kernel.rpm Thanks and regards Dilip Kumar B L&T Technology Services Ltd www.LntTechservices.com<http://www.lnttechservices.com/> This Email may contain confidential or privileged information for the intended recipient (s). If you are not the intended recipient, please do not use or disseminate the information, notify the sender and delete it from your system.

3 2

Question about clustering
by Alessandro Baggi 19 Jun '14

19 Jun '14

Hi list, I'm new to clustering, and I'm running a little cluster@home. The cluster is running on a workstation hardware and running on Centos 6.5. Component: corosync, pacemaker, drbd and pcs. All works good. This cluster has different resources: 1) drbd0 2) drbd1 3) drbd0_fs 4) drbd1_fs 5) pgsql 6) smb + nmb 7) libvirt (lbs) 8) libvirt_guests (lsb) I've this constraint colocation and ordering constraint (sorry for format): Ordering Constraints: promote drbd_ms then start drbd0_fs (Mandatory) (id:order-drbd_ms-drbd0_fs-mandatory) promote drbd1_ms then start drbd1_fs (Mandatory) (id:order-drbd1_ms-drbd1_fs-mandatory) start drbd1_fs then start pgsql_res (Mandatory) (id:order-drbd1_fs-pgsql_res-mandatory) start drbd0_fs then start samba_res (Mandatory) (id:order-drbd0_fs-samba_res-mandatory) start samba_res then start nmbd_res (Mandatory) (id:order-samba_res-nmbd_res-mandatory) start drbd1_fs then start libvirt_res (Mandatory) (id:order-drbd1_fs-libvirt_res-mandatory) start libvirt_res then start libvirt_guest_res (Mandatory) (id:order-libvirt_res-libvirt_guest_res-mandatory) Colocation Constraints: drbd0_fs with drbd_ms (INFINITY) (with-rsc-role:Master) (id:colocation-drbd0_fs-drbd_ms-INFINITY) drbd1_fs with drbd1_ms (INFINITY) (with-rsc-role:Master) (id:colocation-drbd1_fs-drbd1_ms-INFINITY) drbd1_fs with pgsql_res (INFINITY) (id:colocation-drbd1_fs-pgsql_res-INFINITY) drbd0_fs with samba_res (INFINITY) (id:colocation-drbd0_fs-samba_res-INFINITY) samba_res with nmbd_res (INFINITY) (id:colocation-samba_res-nmbd_res-INFINITY) drbd1_fs with libvirt_res (INFINITY) (id:colocation-drbd1_fs-libvirt_res-INFINITY) libvirt_res with libvirt_guest_res (INFINITY) (id:colocation-libvirt_res-libvirt_guest_res-INFINITY) Today, starting my "cluster", I've encontered a (obscure-not identified) problem during libvirt_guest_res start, and I've noticed that drbd1_fs was stopped because libvirt_guest_res has failed, and consequently all other resource that depend from drbd1_fs was stopped. I suppose that this behaviour is colocation constraint related (correct me if I'm wrong). In my case I've: drbd1_fs with libvirt_res libvirt_res with libvirt_guest_res drbd1_fs with pgsql There is a way to avoid that if libvirt_guest_res fails, drbd1_fs will not be stopped and then all other resources depending from drbd1_fs? Another question is about fencing. I've ridden that a cluster must have fencing to be considered as such. On CentOS 6.5 there is stonith that concerns node level fencing. For this type of fencing I must have ilo, ilom, drac, and other. It's possible to have fencing without Light-out devices, blade power control device and other? There are other device that can be used for fencing? Supposing a 2 node cluster with two server assembled (no hp, dell, sun, ibm..) how I can implement fencing with stonith? I can run a cluster without fencing and what implies do not use fencing? Thanks in advance. Alessandro.

6 16

CentOS-announce Digest, Vol 112, Issue 8
by centos-announce-request＠centos.org 18 Jun '14

18 Jun '14

1 0

transmission-2.82-1.el6 with qt5 frontend
by ngeorgop 18 Jun '14

18 Jun '14

1 0

iptables question
by Chuck Campbell 18 Jun '14

18 Jun '14

I'm running fail2ban to attempt to block malicious brute-force password dictionary attacks against ssh. They seem to be rolling through a block of ip addresses as the source to defeat this kind of screening, so I've set some ip addresses to be blocked in iptables. Here is the output of iptables -L (edited): Chain INPUT (policy ACCEPT) target prot opt source destination fail2ban-VSFTPD tcp -- anywhere anywhere tcp dpt:ftp fail2ban-SSH tcp -- anywhere anywhere tcp dpt:ssh RH-Firewall-1-INPUT all -- anywhere anywhere DROP all -- 116.10.191.0/24 anywhere DROP all -- 183.136.220.0/24 anywhere DROP all -- 183.136.221.0/24 anywhere DROP all -- 183.136.222.0/24 anywhere DROP all -- 183.136.223.0/24 anywhere DROP all -- 122.224.11.0/24 anywhere DROP all -- 219.138.0.0/16 anywhere Chain FORWARD (policy ACCEPT) target prot opt source destination RH-Firewall-1-INPUT all -- anywhere anywhere REJECT all -- anywhere anywhere reject-with icmp-ho st-prohibited Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain RH-Firewall-1-INPUT (2 references) target prot opt source destination ACCEPT all -- anywhere anywhere ACCEPT icmp -- anywhere anywhere icmp any ACCEPT esp -- anywhere anywhere . . . Yet in my logwatch emails, I see this, long after the iptables rules are in place to drop some ip ranges: --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: root (116.10.191.166): 1 Time(s) root (116.10.191.167): 1 Time(s) root (116.10.191.170): 1 Time(s) root (116.10.191.173): 1 Time(s) root (116.10.191.179): 1 Time(s) root (116.10.191.182): 1 Time(s) root (116.10.191.186): 1 Time(s) root (116.10.191.199): 1 Time(s) root (116.10.191.203): 1 Time(s) root (116.10.191.211): 1 Time(s) root (116.10.191.219): 1 Time(s) root (116.10.191.223): 1 Time(s) root (116.10.191.226): 1 Time(s) root (116.10.191.228): 1 Time(s) root (116.10.191.237): 1 Time(s) <snip> --------------------- SSHD Begin ------------------------ Failed logins from: 116.10.191.165: 4 times 116.10.191.181: 3 times 116.10.191.201: 4 times 116.10.191.207: 4 times 116.10.191.218: 4 times 116.10.191.231: 4 times 116.10.191.234: 3 times 116.10.191.235: 4 times 116.10.191.239: 4 times If they keep going through this ip block, they will still get 255 attempts at the root password and 1020 attempts at other login/password combinations before they are blocked by fail2ban. Why is this ip range still able to attempt connections? Have I done something wrong with my address ranges, or added them in the wrong place? thanks, -chuck -- ACCEL Services, Inc.| Specialists in Gravity, Magnetics | (713)993-0671 ph. | and Integrated Interpretation | (713)993-0608 fax 448 W. 19th St. #325| Since 1992 | (713)306-5794 cell Houston, TX, 77008 | Chuck Campbell | campbell(a)accelinc.com | President & Senior Geoscientist | "Integration means more than having all the maps at the same scale!"

6 7

Re: [CentOS] iptables question
by Eliezer Croitoru 17 Jun '14

17 Jun '14

On 06/17/2014 01:46 AM, Bret Taylor wrote: > Get rid of fail2ban, it's not needed. Just write a proper firewall. Are you series?? There are applications that fail2ban offers them things which others just can't.. If you can email me the ip for your servers and also the root password and allow me in your INPUT all over the place I will leave you a message in the server.(hope you understand jokes) All The Bests, Eliezer

5 8

KVM oom-killer
by James B. Byrne 17 Jun '14

17 Jun '14

CENTOS-6.5 I had a kvm guest shutdown by oom-killer this morning. I have the syslog entries that pertain to this but they tell me little beyond that it happened. What must I look at to determine the root cause of this issue? How is it prevented? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

CentOS-announce Digest, Vol 112, Issue 7
by centos-announce-request＠centos.org 17 Jun '14

17 Jun '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2014:0755 CentOS 6 less FASTTRACK Update (Johnny Hughes) 2. CEBA-2014:0757 CentOS 6 dnsmasq FASTTRACK Update (Johnny Hughes) 3. CESA-2014:X008 Moderate: Xen4CentOS xen Security Update (Johnny Hughes) 4. CESA-2014:X009 Important: Xen4CentOS kernel Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 16 Jun 2014 15:51:35 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2014:0755 CentOS 6 less FASTTRACK Update To: centos-announce(a)centos.org Message-ID: <20140616155135.GA27342(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:0755 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-0755.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: ac7bc80bcad24e573be8441a3854b71caa93efcdcc5ba20e42348a636db9af57 less-436-13.el6.i686.rpm x86_64: 7bf9bb5d1143cadddd6390215d9aa9477d367f3e0c09ac3bd5da3af846215522 less-436-13.el6.x86_64.rpm Source: 02f5363b8f82f4df9a4d359de686314fae3bf988c57401cac9eea641bbe2e0af less-436-13.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Mon, 16 Jun 2014 15:51:51 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2014:0757 CentOS 6 dnsmasq FASTTRACK Update To: centos-announce(a)centos.org Message-ID: <20140616155151.GA27429(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:0757 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-0757.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 6a65c4723db14b7cbde8227815bd546a2d4ce3c01f223e49bb50465beb6b9955 dnsmasq-2.48-14.el6.i686.rpm 360f60ebdc924e755e6e3a83fe45fa343746e712f7c7fb8c7a426bec3f118177 dnsmasq-utils-2.48-14.el6.i686.rpm x86_64: aa2ed48fc51ccbfc4e00196a1253e3e12b1056a0fe19c3e32c2a7e3e3404c4a1 dnsmasq-2.48-14.el6.x86_64.rpm d4c5d4f9fd5eaa3f82a5e3395934033793c7317123bef83559173742846bafc3 dnsmasq-utils-2.48-14.el6.x86_64.rpm Source: 0e55257a4fb830325e6fbc761212c112cf6e2d37ca1ac03327eeb65cb9b3f531 dnsmasq-2.48-14.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Mon, 16 Jun 2014 22:14:47 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2014:X008 Moderate: Xen4CentOS xen Security Update To: centos-announce(a)centos.org Message-ID: <20140616221447.GA37009(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:X008 (Xen4CentOS) The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) ----------------------------- X86_64 ----------------------------- 58469d64c897d1deb6832b2cc69d1d28c83162075835d256ff56996aecb8d145 xen-4.2.4-33.el6.centos.alt.x86_64.rpm 638a23de4472d3ded206c72359d4080826561e958e2b2e2560cf1937491c3c42 xen-devel-4.2.4-33.el6.centos.alt.x86_64.rpm 19c75d460905acd5a16e97c1775ba40c26ee10b413bb52510afb1e3fab594426 xen-doc-4.2.4-33.el6.centos.alt.x86_64.rpm 7906b1282cbe24e123e777271f88d978912edb056dd0c9424396359a4a939d6f xen-hypervisor-4.2.4-33.el6.centos.alt.x86_64.rpm 12ca64fef26338932ed2dda1d155f29dbb3224f076fd41d14ba56344d454ce40 xen-libs-4.2.4-33.el6.centos.alt.x86_64.rpm 20b5ccd7c84c310f76d0d25513fd510fc5704199168c42a1ce22e2de073ec2e0 xen-licenses-4.2.4-33.el6.centos.alt.x86_64.rpm b35e9eb7f784d34a671e44b6b795ace02857d06a597973f22f9712e7c2ddaae6 xen-ocaml-4.2.4-33.el6.centos.alt.x86_64.rpm 4730853e1c2846a1374ba650722f92ab385a3e8ea2b2c0bebd2d9ec6f1985759 xen-ocaml-devel-4.2.4-33.el6.centos.alt.x86_64.rpm 8c9bb14dd42a17632826a00d8523b188c53ea34da18c147c474c60b79c314a37 xen-runtime-4.2.4-33.el6.centos.alt.x86_64.rpm ----------------------------- Source: ----------------------------- d2083203e161753a5a6668b41af7b70a856d312afd8cd656f0331511fd9b17d3 xen-4.2.4-33.el6.centos.alt.src.rpm ===================================================== xen Changelog info from the SPEC file: * Mon Jun 16 2014 Johnny Hughes <johnny(a)centos.org> - 4.2.4-33.el6.centos - Really apply Patch203 * Mon Jun 16 2014 Johnny Hughes <johnny(a)centos.org> - 4.2.4-32.el6.centos - Patch203 (XSA-96, CVE-2014-3967 and CVE-2014-3968) added * Mon May 5 2014 Johnny Hughes <johnny(a)centos.org> - 4.2.4-31.el6.centos - Roll in Patch202, XSA-92 (CVE-2014-3124) - Created Patch201 to allow RHEL7 Beta and RC to boot * Wed Mar 26 2014 Johnny Hughes <johnny(a)centos.org> - 4.2.4-30.el6.centos - roll in Patch200, XSA-89 (CVE-2014-2599) ===================================================== The following Release info is available from the Xen site regarding XSAs: http://xenbits.xenproject.org/xsa/advisory-89.html http://xenbits.xenproject.org/xsa/advisory-92.html http://xenbits.xenproject.org/xsa/advisory-96.html -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos at irc.freenode.net ------------------------------ Message: 4 Date: Mon, 16 Jun 2014 22:15:27 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2014:X009 Important: Xen4CentOS kernel Security Update To: centos-announce(a)centos.org Message-ID: <20140616221527.GA37018(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:X009 (Xen4CentOS) The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) ----------------------------- X86_64 ----------------------------- b46a8cc4391424f463aec8e81e716152357426ae3601857b2661bc5a1257f9b3 e1000e-2.5.4-3.10.43.2.el6.centos.alt.x86_64.rpm 0528f65b84416ced556de3a320bd564119f991ed45788a39149c70165c3f49e1 kernel-3.10.43-11.el6.centos.alt.x86_64.rpm b73f39b966c049755e084ebcefc620c85b06c3057bb6b865e98569a87ac9d2bf kernel-devel-3.10.43-11.el6.centos.alt.x86_64.rpm 84f31763fefee0f9b239a4857e90bdf69c8a93469e5ccb9dc24e68d433a4e49c kernel-doc-3.10.43-11.el6.centos.alt.noarch.rpm cfcc0b15c5733b56a806f769cc0c9adb43b8eb74ac79a82be5e57235403fc88e kernel-firmware-3.10.43-11.el6.centos.alt.noarch.rpm d7bf65737662549f3da4ddf674956d000bbc23aab690a70d30451738a00f55bf kernel-headers-3.10.43-11.el6.centos.alt.x86_64.rpm d382d890feb56a58559433232eb842274074eb26566eb7956f5a1e7a506e0b0a perf-3.10.43-11.el6.centos.alt.x86_64.rpm ----------------------------- Source: ----------------------------- 739803937e9552290f64d442d884af6ea1f236ef7c119c3cbb2abced6a302b75 e1000e-2.5.4-3.10.43.2.el6.centos.alt.src.rpm 478a93491c7b821d18b0586b2e47012a1c6f1b73e145068395199060decfdbb4 kernel-3.10.43-11.el6.centos.alt.src.rpm ===================================================== Kernel Changelog info from the SPEC file: * Mon Jun 16 2014 Johnny Hughes <johnny(a)centos.org> - 3.10.43-11 - upgraded to upstream 3.10.43 - addresses CVE-2014-0155, CVE-2014-0196, CVE-2014-1739, and CVE-2014-3153. * Mon May 5 2014 Johnny Hughes <johnny(a)centos.org> - 3.10.38-11 - upgraded to upstream 3.10.38 - addresses CVE-2014-0055 and CVE-2014-0077 * Wed Mar 26 2014 Johnny Hughes <johnny(a)centos.org> - 3.10.34-11 - upgrade to upstream 3.10.34 - addresses CVE-2014-0049 and CVE-2014-0069 e1000e Changelog info from the SPEC file: * Mon Jun 16 2014 Johnny Hughes <johnny(a)centos.org> - 2.5.4-3.10.34.2.el6.centos.alt - build against version 3.10.43 kernel * Thu Apr 3 2014 Johnny Hughes <johnny(a)centos.org> - 2.5.4-3.10.34.2.el6.centos.alt - build against version 3.10.34 kernel ===================================================== The following kernel changelogs are available from kernel.org since the previous kernel: https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.33 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.34 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.35 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.36 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.37 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.38 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.39 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.40 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.41 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.42 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.43 ===================================================== The following security issues are addressed in this update: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0049 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0055 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0069 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0077 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0155 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0196 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3153 http://seclists.org/oss-sec/2014/q2/529 (for CVE-2014-1739, its blank on the nist.gov list) ===================================================== NOTE: You must run /usr/bin/grub-bootxen.sh to update the file /boot/grub/grub.conf (or you must update that file manually) to boot the new kernel on a dom0 xen machine. See for info: http://wiki.centos.org/HowTos/Xen/Xen4QuickStart -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos at irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 112, Issue 7 ***********************************************

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss