Discuss

discuss@lists.centos.org

34758 discussions

CentOS-announce Digest, Vol 112, Issue 5
by centos-announce-request＠centos.org 11 Jun '14

11 Jun '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2014:0670 CentOS 6 spice-server Update (Johnny Hughes) 2. CEBA-2014:0682 CentOS 6 libvirt Update (Johnny Hughes) 3. CEEA-2014:0681 CentOS 6 man-pages-ja FASTTRACK Update (Johnny Hughes) 4. CEBA-2014:0683 CentOS 6 nmap FASTTRACK Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 9 Jun 2014 15:26:41 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2014:0670 CentOS 6 spice-server Update To: centos-announce(a)centos.org Message-ID: <20140609152641.GA35330(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:0670 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-0670.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 5543ae6fca2208bec2ecdb67eaf76b1f3ade9afff493821bd285f3a8b5a21b41 spice-server-0.12.4-6.el6_5.2.x86_64.rpm 07ce967f6e02027c7e594c7d41e24d04083d984d6a16754bbf659f7d15f169ef spice-server-devel-0.12.4-6.el6_5.2.x86_64.rpm Source: 960539140363daa8c027500ef00a701adc33cde983048e6779a236796f150a8a spice-server-0.12.4-6.el6_5.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 10 Jun 2014 14:39:43 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2014:0682 CentOS 6 libvirt Update To: centos-announce(a)centos.org Message-ID: <20140610143943.GA45335(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:0682 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-0682.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 62490f09ccdf5a17e5cb3da2d1af90a0575d73be78c8bc9c2cf8ab567b6e0f9f libvirt-0.10.2-29.el6_5.9.i686.rpm 301f45f41619dabd2c633bd4f8c4d883cbfbafc3159fa8e41533cc5cd6f60754 libvirt-client-0.10.2-29.el6_5.9.i686.rpm d04af0bfafe8eadbad6152922c44a547b32dfb877f1a123b9d36a71ec0923b8c libvirt-devel-0.10.2-29.el6_5.9.i686.rpm 1624234697741a6e1e96ae5f7d71a88a9168116c57305654747e6b3a4a046d05 libvirt-python-0.10.2-29.el6_5.9.i686.rpm x86_64: 4e47030afe720840413a04c52147ddc797a8882a5584ba2e6151e2b389d4a289 libvirt-0.10.2-29.el6_5.9.x86_64.rpm 301f45f41619dabd2c633bd4f8c4d883cbfbafc3159fa8e41533cc5cd6f60754 libvirt-client-0.10.2-29.el6_5.9.i686.rpm 17a5da00a78e1dc6c099b0d6eb7b368d7e939883b1acadc86c4e5211e846b944 libvirt-client-0.10.2-29.el6_5.9.x86_64.rpm d04af0bfafe8eadbad6152922c44a547b32dfb877f1a123b9d36a71ec0923b8c libvirt-devel-0.10.2-29.el6_5.9.i686.rpm 47e4bcbf412dcd1e5fb2f85126ec9d9b74447c3edc2994742cc1abf9899ed7dc libvirt-devel-0.10.2-29.el6_5.9.x86_64.rpm baa757c566e4fa7d98f64967e7f392a4dd7401f8fdc3a5594dfc458120e49fd8 libvirt-lock-sanlock-0.10.2-29.el6_5.9.x86_64.rpm c2573952f4fc1669031016d70f9cac7d1dbdadcaa724be43c3840439df2664db libvirt-python-0.10.2-29.el6_5.9.x86_64.rpm Source: df0fcc1ce2d70b3867be331bf3c8d4d096745e46718093bdafc9ec5b8075999d libvirt-0.10.2-29.el6_5.9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Tue, 10 Jun 2014 14:39:58 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEEA-2014:0681 CentOS 6 man-pages-ja FASTTRACK Update To: centos-announce(a)centos.org Message-ID: <20140610143958.GA45417(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2014:0681 Upstream details at : https://rhn.redhat.com/errata/RHEA-2014-0681.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: a8a19677754875e6ab0b47e9a0ed9da40036067d75964e868ba896991995041b man-pages-ja-20100115-8.el6.noarch.rpm x86_64: a8a19677754875e6ab0b47e9a0ed9da40036067d75964e868ba896991995041b man-pages-ja-20100115-8.el6.noarch.rpm Source: 4b1eb2f51ca4c05f67aba0adf0f17b3d5348b4fdf5102bbda6ccca0ae729acca man-pages-ja-20100115-8.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Tue, 10 Jun 2014 14:40:14 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2014:0683 CentOS 6 nmap FASTTRACK Update To: centos-announce(a)centos.org Message-ID: <20140610144014.GA45518(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:0683 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-0683.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 28dff93e66f36501f807b6db7c96c533169d8660aca40fc5bc469e1cc3d8430f nmap-5.51-4.el6.i686.rpm dd06297b7fb16ddf605b4bdb099b1f07923ff8a4385c8e56a1e1b4cdf719bc78 nmap-frontend-5.51-4.el6.noarch.rpm x86_64: 129cb963ea068dcb2bc7d918c3ce1f2e84f0ce7dc9e76e9b6907375f15c4557c nmap-5.51-4.el6.x86_64.rpm dd06297b7fb16ddf605b4bdb099b1f07923ff8a4385c8e56a1e1b4cdf719bc78 nmap-frontend-5.51-4.el6.noarch.rpm Source: 18e2150b4a4557b1a5a9d99dd9420e4352be0bdb918805e951157778837a51c8 nmap-5.51-4.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 112, Issue 5 ***********************************************

1 0

XFS project quota and samba
by Götz Reinicke - IT Koordinator 11 Jun '14

11 Jun '14

Hi, I managed to configure project quotas on a xfs device on a centos 6.5 server. (just pquota in fstab, no grquota, rebooted server....) Reporting the quota settings and usage looks good. But mounting a smb-share with the proect quota enabled on my os x client shows much less space used (3GB) and 0% free. Currently 650 GB are used, the quota limit is set to 1TB. My user I'm mounting the smb-share has no quota limits set. The users are in ldap. Any suggestions or hints what might be wrong? Thanks and best regards . Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 82 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Jürgen Walter MdL Staatssekretär im Ministerium für Wissenschaft, Forschung und Kunst Baden-Württemberg Geschäftsführer: Prof. Thomas Schadt

1 0

LDAP login problem for CentOS 6.5
by mordech3＠post.tau.ac.il 11 Jun '14

11 Jun '14

Hi, We are experiencing a problem to use LDAP user accounts to login into a CentOS system. A fresh 6.5 system was installed recently to become a central server. Both OpenLDAP and 389 Directory Server were installed and configured (not at the same time) with groups and normal user accounts. The server was configured to use LDAP authentication (through authconfig and system-config-authentication). First, the LDAP user wasn't identified by running the 'id' command. The same with SSH. Although ldapsearch listed all objects correctly. Observing /var/log/secure had shown that the user is not identified at all (no uid etc.). Following another article, POSIX details (uid + gid, and set gid to some LDAP group) were set for that user and the 'id' command was successful. However, still, SSH connections are refused and the log states: "Authentication service cannot retrieve authentication info" (for pam_sss). The secure log shows that user details are unavailable (uid=0,gid=0...) to sshd. Locally, when a root performs "su user", the login is successful, home is created and the secure log state authentication is performed by pam_unix, contrast to pam_sss. Need to mention that we've tried to follow most of the literature online (RedHat directory server, CentOS OpenLDAP client setup and many other resources). None were found to be complete enough to bring a system to a working state where users are able to login and authenticate. In addition, system-config-authentication requires the use of LDAPS or LDAP with TLS. Only command line tools are able to configure simple LDAP (no TLS or SSL). However, even being a security measure, we'd like to avoid all the (serious) burden of working with certificates at first for simple experimentation. Any comment or insight will be helpful. In addition, any link to where we can find a step-by-step guide to install an (working) LDAP server with a client, will be more than appreciated. Many thanks, Moti.

5 5

How to configure user accounts without NIS
by Alfred von Campe 11 Jun '14

11 Jun '14

The company where I work is mostly a Windows shop, but I run a few CentOS servers and desktops. I have configured my systems as follows with Kickstart: authconfig --enablemd5 --passalgo=sha512 --enablenis --nisdomain=XXX \ --nisserver=nis1.XXX.com,nis2.XXX.com --useshadow --enablekrb5 \ --krb5realm=XXX.COM --krb5kdc=ldap.XXX.com --krb5adminserver=ldap.XXX.com The /etc/nsswitch.conf file looks like this: passwd: files nis shadow: files nis group: files nis The NIS services are provided by the Windows Domain controllers using Windows Unix Services (or something similarly named). This allows anyone that’s in the NIS database to log into any CentOS system with their Windows username and password. Home directories are automounted from a big NAS box (and are also available on Windows). This all works great most of the time. However, if the network or the NIS server goes down, the CentOS system just hangs. For CentOS 7 I'd like to make the systems more robust to network failures. I could create local accounts (I believe there is a way to autocreate an account and a home directory upon login), but I'm not sure how to go about it. This also implies that the home directories will not be shared among the systems, so ssh keys will have to be manually copied to the local home directories. Ideally, I'd like to get rid of NIS altogether and use LDAP and Kerberos for everything, but I don't know if that is feasible. I think these are the only services that we currently rely on NIS for: - passwd file - group file - automount maps (including auto.home for home directories) Before I go re-inventing the wheel, I'd like to find out how others manage multiple users on multiple systems using a central service. And in case it wasn’t obvious, I want to use the same usernames and passwords that are used in the Windows environment. Thanks, Alfred

3 4

Re: [CentOS] Loss of Ethernet adaptor
by James B. Byrne 10 Jun '14

10 Jun '14

On Mon, June 9, 2014 12:57, Steve Clark wrote: > > This show how to do a one time boot and then the next time boot the original > system > > https://www.gnu.org/software/grub/manual/legacy/Booting-once_002donly.html > > Thank you. Based on my readings of this reference there are two mechanisms available: 1. boot once, 2. fallback. The critical step seems to be issuing the command 'grub-set-default n' where n is a value between 0 and the number of entries in boot.conf less one. Reading the boot-once fallback documentation it recommends fallback as the superior alternative. <--- Then you may want GRUB to boot the first system which is bootable among `A', `B' and `C'. A configuration file can be written in this way: default saved # This is important!!! timeout 10 fallback 1 2 # This is important!!! title A root (hd0,0) kernel /kernel savedefault fallback # This is important!!! title B root (hd1,0) kernel /kernel savedefault fallback # This is important!!! title C root (hd2,0) kernel /kernel savedefault Note that `default saved' (see default), `fallback 1 2' and `savedefault fallback' are used. GRUB will boot the saved entry at index 0 by default and save a fallback entry as next boot entry with this configuration. When GRUB tries to boot `A', GRUB saves `1' as next boot entry, because the command fallback specifies that `1' is the first fallback entry. The entry `1' is `B', so GRUB will try to boot `B' at next boot time. Likewise, when GRUB tries to boot `B', GRUB saves `2' as next boot entry, because fallback specifies `2' as next fallback entry. This makes sure that GRUB will boot `C' after booting `B'. ---> SO a combination of the two boot forms might look like this?: default saved # This is important!!! timeout 10 fallback 1 2 # This is important!!! title A root (hd0,0) kernel /kernel savedefault fallback # index is zero title B root (hd1,0) # assumes a different boot device kernel /kernel savedefault fallback # index is one title C root (hd2,0) # assumes a third boot device kernel /kernel savedefault # index is two title the new kernel boot options root (hd0,0) kernel /kernel new_options savedefault 0 # index is three but we save 0 for next boot I am not sure that I am following the logic of this closely enough to place any reliance in my conclusions but is seems to me that in the last case the command to issue before rebooting is: grub-set-default 3 -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

CentOS-announce Digest, Vol 112, Issue 4
by centos-announce-request＠centos.org 10 Jun '14

10 Jun '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2014:0636 CentOS 6 autofs Update (Johnny Hughes) 2. CEBA-2014:0640 CentOS 6 pcs Update (Johnny Hughes) 3. CEBA-2014:0639 CentOS 6 amtu FASTTRACK Update (Johnny Hughes) 4. CEBA-2014:0637 CentOS 6 man-pages-fr FASTTRACK Update (Johnny Hughes) 5. CEBA-2014:0638 CentOS 6 vte FASTTRACK Update (Johnny Hughes) 6. CEBA-2014:0642 CentOS 6 file-roller FASTTRACK Update (Johnny Hughes) 7. CEBA-2014:0641 CentOS 6 perl-Authen-SASL FASTTRACK Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 9 Jun 2014 12:26:40 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2014:0636 CentOS 6 autofs Update To: centos-announce(a)centos.org Message-ID: <20140609122640.GA22592(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:0636 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-0636.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: dfce5db7c516810d6483220da5f770ba9c249b56b3f6d7fa6bdb8de4b96f154b autofs-5.0.5-89.el6_5.2.i686.rpm x86_64: be0f227aabec1dc27ede36a52fb0cc010ab2fc8296806fc84585b4ad5f4a98a6 autofs-5.0.5-89.el6_5.2.x86_64.rpm Source: 53c1af91cc5eefb4936bd9c9b783d42a940a9a95844cc82a46f63a1158cb8539 autofs-5.0.5-89.el6_5.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Mon, 9 Jun 2014 12:27:44 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2014:0640 CentOS 6 pcs Update To: centos-announce(a)centos.org Message-ID: <20140609122744.GA22795(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:0640 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-0640.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: dc25c21909848ea8f70721308836ab82aed9338e83f0c65d8e19cf39b4976e39 pcs-0.9.90-2.el6.centos.3.noarch.rpm x86_64: dc25c21909848ea8f70721308836ab82aed9338e83f0c65d8e19cf39b4976e39 pcs-0.9.90-2.el6.centos.3.noarch.rpm Source: c6bf6bf67eccc8720b9e07c1ff34e15f0cb3374a5fcad62eb209c0f5734d3294 pcs-0.9.90-2.el6.centos.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Mon, 9 Jun 2014 12:29:19 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2014:0639 CentOS 6 amtu FASTTRACK Update To: centos-announce(a)centos.org Message-ID: <20140609122919.GA23085(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:0639 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-0639.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 774dd71b91efc13f11037deaf9c27ae481e9da3c40ae88b1a6d65c7cc002d11f amtu-1.0.8-11.el6.i686.rpm x86_64: f242059bed6ac1064db1c1b870fc15c85918a2025ed3d5547226a274a0f9eda7 amtu-1.0.8-11.el6.x86_64.rpm Source: ea361a4221553a238e376def8db68c2886b28454f0dd3a856fac5b642d04a2ed amtu-1.0.8-11.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Mon, 9 Jun 2014 12:29:52 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2014:0637 CentOS 6 man-pages-fr FASTTRACK Update To: centos-announce(a)centos.org Message-ID: <20140609122952.GA23172(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:0637 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-0637.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 12f987f1a09a9887c3c222d0eb2ca64092a0f7e0ea6738b0a48aef6ea3f76010 man-pages-fr-3.23-11.el6.noarch.rpm x86_64: 12f987f1a09a9887c3c222d0eb2ca64092a0f7e0ea6738b0a48aef6ea3f76010 man-pages-fr-3.23-11.el6.noarch.rpm Source: 8b3c6721d258442b90805195366acae788d9ebf7fe702829f2c257b9f140397e man-pages-fr-3.23-11.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Mon, 9 Jun 2014 12:30:29 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2014:0638 CentOS 6 vte FASTTRACK Update To: centos-announce(a)centos.org Message-ID: <20140609123029.GA23406(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:0638 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-0638.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: cb4abb34b3b0f8078a8adb9bdcaf738e9fbcd33c2506f96d017eff5c8b0289a0 vte-0.25.1-9.el6.i686.rpm b09005ba3bdca7728dc8484becbfdf13fa7ef9208cf90b26921d476423bee8ab vte-devel-0.25.1-9.el6.i686.rpm x86_64: cb4abb34b3b0f8078a8adb9bdcaf738e9fbcd33c2506f96d017eff5c8b0289a0 vte-0.25.1-9.el6.i686.rpm d679a530e5033c2401321f130f6519a317d7164f10e5aaa4a6e1a9abb4f114e2 vte-0.25.1-9.el6.x86_64.rpm b09005ba3bdca7728dc8484becbfdf13fa7ef9208cf90b26921d476423bee8ab vte-devel-0.25.1-9.el6.i686.rpm 81acdb220077dc0caf1a6a192b8a3ef504e533ff58df5b74e6745eb7b56d5072 vte-devel-0.25.1-9.el6.x86_64.rpm Source: 0d77769e38fbe678cec5e412065637c74f9ef77682da42c3b499ea59c36ad69b vte-0.25.1-9.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Mon, 9 Jun 2014 12:30:55 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2014:0642 CentOS 6 file-roller FASTTRACK Update To: centos-announce(a)centos.org Message-ID: <20140609123055.GA23587(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:0642 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-0642.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 0102fffc2e31056dee9f5e7a701fc4cf274fbf29ff8ad03153b9f613034da721 file-roller-2.28.2-7.el6.i686.rpm x86_64: 129008442bf3a55a52e21b046b742cf00975ea8d346be4567a2ca719aa92d0b6 file-roller-2.28.2-7.el6.x86_64.rpm Source: b8058d4168ac4359fe4ba5dc19163303f350782f628de5c64ab4ae6769b3d30b file-roller-2.28.2-7.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 7 Date: Mon, 9 Jun 2014 12:31:30 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2014:0641 CentOS 6 perl-Authen-SASL FASTTRACK Update To: centos-announce(a)centos.org Message-ID: <20140609123130.GA23786(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:0641 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-0641.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 569fc16f6dfa7b701f3b62c505f63516e71eea94cdf8ad7722420992f8fee107 perl-Authen-SASL-2.13-3.el6.noarch.rpm x86_64: 569fc16f6dfa7b701f3b62c505f63516e71eea94cdf8ad7722420992f8fee107 perl-Authen-SASL-2.13-3.el6.noarch.rpm Source: fd17429f887d8d49ccd65a57acdeb93a481b1472674641fd3ebb0c26f94dc44d perl-Authen-SASL-2.13-3.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 112, Issue 4 ***********************************************

1 0

apache server-status permission denied
by Tim Dunphy 10 Jun '14

10 Jun '14

Hey all, I'm having a slightly weird issue with apache server-status on just one of my nodes. In my httpd.conf I have the following: <Location /server-status> SetHandler server-status Order deny,allow Deny from all Allow from 127.0.0.1 10.10.160 </Location> If I do a ps grep I know that I'm using the right config: [root@webhosta apache2]# ps -ef | grep apache | grep -v grep | head -5 root 28359 1 0 21:38 ? 00:00:00 /opt/apache2/bin/httpd -k start apache 28360 28359 0 21:38 ? 00:00:00 /opt/apache2/bin/httpd -k start apache 28361 28359 0 21:38 ? 00:00:00 /opt/apache2/bin/httpd -k start apache 28362 28359 0 21:38 ? 00:00:00 /opt/apache2/bin/httpd -k start apache 28363 28359 0 21:38 ? 00:00:00 /opt/apache2/bin/httpd -k start And if I check apachectl -S things look ok there too. I can also see I'm using the right config: [root@webhosta apache2]# /opt/apache2/bin/httpd -S VirtualHost configuration: wildcard NameVirtualHosts and _default_ servers: *:* is a NameVirtualHost default server test.mydomain.com (/opt/apache2/conf.d/z001_mydomain.conf:1) port * namevhost test.mydomain.com (/opt/apache2/conf.d/z001_mydomain.conf:1) port * namevhost webhosta.dmz.domain.com (/opt/apache2/conf/httpd.conf:469) port * namevhost webhosta.dmz.domain.com (/opt/apache2/conf/httpd.conf:480) port * namevhost hcphp.nbc.com (/opt/apache2/conf/httpd.conf:501) Syntax OK Yet, for some reason I get permission denied when I try to do a get from localhost: [root@webhosta apache2]# GET http://$(hostname -i)/server-status <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>403 Forbidden</title> </head><body> <h1>Forbidden</h1> <p>You don't have permission to access /server-status on this server.</p> <hr> <address>Apache Server at 10.10.1.160 Port 80</address> </body></html> I can do a successful GET to 127.0.0.1, but our system is automated and relies on doing a GET to the value of hostname -i. Does anyone have any ideas or suggestions as to what could be wrong? Thanks Tim -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

4 7

USB key accessible/seen remotely.
by Rafał Radecki 10 Jun '14

10 Jun '14

Hi All :) I have currently an USB key which is needed by some software on a remote server. Is there a way to use my local USB port (attach mentioned device to it) and share it with this remote server? BR, Rafal.

3 2

Re: [CentOS] Loss of Ethernet adaptor
by James B. Byrne 09 Jun '14

09 Jun '14

On Mon, June 9, 2014 11:46, Steve Clark wrote: > > Hi, > > Don't know if you saw my prior email, but we experienced this exact same > problem see log excerpts below: > ... > Jul 31 17:05:18 wolfpac kernel: pciehp 0000:00:1c.5:pcie04: Card not present > on Slot(37) > Jul 31 17:05:18 wolfpac kernel: pciehp 0000:00:1c.5:pcie04: Card present on > Slot(37) > Jul 31 17:05:18 wolfpac kernel: device eth5 left promiscuous mode > Jul 31 17:05:19 wolfpac kernel: e1000e 0000:07:00.0: PCI INT A disabled > Jul 31 17:05:20 wolfpac ntpd[2726]: Deleting interface #7 eth5, > 192.168.198.95#123, interface stats: received=517, sent=522, dropped=0, > active_time=108106 secs > Jul 31 17:05:20 wolfpac ntpd[2726]: Deleting interface #8 eth5, > fe80::290:bff:fe2a:acf3#123, interface stats: received=0, sent=0, dropped=0, > active_time=108039 secs > ... > > This would randomly happen on systems that weren't connected directly to the > internet. > We experienced this on multiple systems. Since we upgraded to the latest > elrepo driver and added > pcie_aspm=off to our kernel command line we have never experienced the issue > again. Thank you. I did get your message and I simply have not had time to test its implementation as it necessarily involves a restart of the test system. I am trying to discover if there is some way of restarting a headless server and use a specific grub entry instead of the default. I want to leave the default unchanged until I can prove that any manual changes I make do not negatively impact a system restart. If anyone knows if this is possible and if so, how it is done, I would welcome the information. Regards, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 4

Re: [CentOS] Loss of Ethernet adaptor
by James B. Byrne 09 Jun '14

09 Jun '14

On Fri, June 6, 2014 09:58, Alexander Dalloz wrote: > Am 06.06.2014 14:50, schrieb James B. Byrne: >> At ~07:40 (UTC-4:00) this morning our gateway host lost its WAN Ethernet >> adaptor. Subsequent to recovery, which required a reboot, the following > > [ ... ] > >> lspci -tv # provides this device tree >> >> -[0000:00]-+-00.0 Intel Corporation Atom Processor D4xx/D5xx/N4xx/N5xx DMI >> Bridge >> . . . >> +-1c.0-[01]-- >> +-1c.4-[02]----00.0 Intel Corporation 82574L Gigabit Network >> Connection >> +-1c.5-[03]----00.0 Intel Corporation 82574L Gigabit Network >> Connection >> . . . >> >> >> >> lspci -v -nn -k -qq -D # provides this information: >> >> . . . >> 0000:02:00.0 Ethernet controller [0200]: Intel Corporation 82574L Gigabit >> Network Connection [8086:10d3] >> Subsystem: Super Micro Computer Inc Device [15d9:10d3] >> Physical Slot: 0-1 >> Flags: bus master, fast devsel, latency 0, IRQ 16 >> Memory at fe9e0000 (32-bit, non-prefetchable) [size=128K] >> I/O ports at dc00 [size=32] >> Memory at fe9dc000 (32-bit, non-prefetchable) [size=16K] >> Capabilities: [c8] Power Management version 2 >> Capabilities: [d0] MSI: Enable- Count=1/1 Maskable- 64bit+ >> Capabilities: [e0] Express Endpoint, MSI 00 >> Capabilities: [a0] MSI-X: Enable+ Count=5 Masked- >> Capabilities: [100] Advanced Error Reporting >> Capabilities: [140] Device Serial Number 00-25-90-ff-ff-61-74-c0 >> Kernel driver in use: e1000e >> Kernel modules: e1000e >> . . . >> >> I have never run into this before. Can anyone cast any light on what might >> be >> going on? Is this an incipient hardware failure with one of the on-board >> PCI >> Ethernet adaptors? Is there any relationship with the syn flood that was >> blacklisted immediately before the failure? I do not thinks so but I need >> to >> ask. >> >> Thanks, > > https://isc.sans.edu/forums/diary/Intel+Network+Card+82574L+Packet+of+Death… > > http://www.itwalker3.com/2013/02/packet-of-death-attack-a-deadly-dos-agains… > > Worth to verify in your case. > > Alexander > > > Re: Packet of Death attack: a deadly DoS against Intel NICs It appears that my problem is caused by something else as the EPROM fingerprint matches the 'good' version (mostly). ethtool -e eth0 . . . 0x0010:01 01 ff ff 6b 02 d3 10 d9 15 d3 10 ff ff 58 a5 . . . 0x0030:c9 6c 50 31 3e 07 0b 46 84 2d 40 01 00 f0 06 07 . . . However this matches neither the known 'bad' nor the reputed 'good' EPROM image: 0x0060:00 01 ff ff ff ff ff ff ff ff ff ff ff ff ff ff But it seems a lot closer to the 'bad: 0×0060:ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff than to the 'good': 0×0060:20 01 00 40 16 13 ff ff ff ff ff ff ff ff ff ff I cannot find the file pod-icmp-ping.pcap so I cannot try out the recommended test using tcpreplay. The original Google code page reference is now gone. However, ping -p 32 -s 1110 192.168.99.1 against the on-board nic adaptors does not shut them down. I infer (so long as there is no great delay between sending the packet of death and its effects made manifest) that this means that the POD was not the cause of our recent difficulty. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss