Discuss

discuss@lists.centos.org

34758 discussions

Postmap command
by Austin Einter 12 Mar '13

12 Mar '13

Dear All While setting up postfix, at one point I need to do postmap /etc/postfix/transport But I get the output as *bash: postmap: command not found* I was just wondering is it something I need to install separately. Thanks Austin

4 4

SSL Certificate
by Austin Einter 12 Mar '13

12 Mar '13

Dear All This is my continuation of postfix setup. Following link http://campworld.net/thewiki/pmwiki.php/LinuxServersCentOS/Cent6VirtMailSer… postfix setup. At one stage it says, Configuring The Server Setup SSL Certificate Now generate an SSL certificate for postfix and dovecot to have TLS support. Replace mail.example.com with your server hostname. > genkey --days 3650 mail.example.com My doubt is , 1. I have to install a SSL certificate for for web server (apache case). I am planning to purchase a SSL certificate and put it. The same certificate will be useful for both web server and mail server OR both web and mail server needs to separate separate SSL certificates. 2. I hope for web server case, one must purchase a ssl certificate and use it (so that browsers will work smoothly without complain). For mail server can one use locally generated ssl certificate? Kindly let me know. Best Regards Austin

4 4

Manual Yum Updates -- No connectivity to Outside Yum Server
by Al Sparks 12 Mar '13

12 Mar '13

I want to update a CentOS 6.x install. But it's located behind a firewall with no connectivity to the external internet. What are my options? === Al

3 2

seeking enlightenment (java and dependencies)
by m.roth＠5-cent.us 11 Mar '13

11 Mar '13

Ok, all you javaphiles, explain to me why, when I was looking to try to remove java-1.5.0-gcj and the -devel, it wanted to remove, as dependencies, things like tomcat6, ant, and gcc-java. Note that java-1.6.0-oipenjdk and -devel are installed.... mark

3 3

CentOS release 5.3 (Final) yum update error TypeError: unsubscriptable object
by Dave Burns 11 Mar '13

11 Mar '13

Just FYI. This machine has been offline and not updated for several months. I booted it and ran yum update. It generated an error. I googled the error, no hits. I did "yum clean all". Tried yum update again, it finished dependency resolution and reported some missing dependencies. I can deal with that. love and kisses, Dave Here is the tail end of the error output: ---> Package geos-devel.x86_64 0:3.1.0-1.el5.rf set to be updated --> Processing Dependency: libgeos-3.1.0.so()(64bit) for package: gdal 4f6cc3a71b7f8a837fe18f749eb1740523af76b0-filelists.sqlite.bz2 | 5.6 MB 02:09 Traceback (most recent call last): File "/usr/bin/yum", line 29, in ? yummain.user_main(sys.argv[1:], exit_code=True) File "/usr/share/yum-cli/yummain.py", line 229, in user_main errcode = main(args) File "/usr/share/yum-cli/yummain.py", line 145, in main (result, resultmsgs) = base.buildTransaction() File "/usr/lib/python2.4/site-packages/yum/__init__.py", line 647, in buildTransaction (rescode, restring) = self.resolveDeps() File "/usr/lib/python2.4/site-packages/yum/depsolve.py", line 704, in resolveDeps for po, dep in self._checkFileRequires(): File "/usr/lib/python2.4/site-packages/yum/depsolve.py", line 939, in _checkFileRequires if not self.tsInfo.getOldProvides(filename) and not self.tsInfo.getNewProvides(filename): File "/usr/lib/python2.4/site-packages/yum/transactioninfo.py", line 414, in getNewProvides for pkg, hits in self.pkgSack.getProvides(name, flag, version).iteritems(): File "/usr/lib/python2.4/site-packages/yum/packageSack.py", line 300, in getProvides return self._computeAggregateDictResult("getProvides", name, flags, version) File "/usr/lib/python2.4/site-packages/yum/packageSack.py", line 470, in _computeAggregateDictResult sackResult = apply(method, args) File "/usr/lib/python2.4/site-packages/yum/sqlitesack.py", line 861, in getProvides return self._search("provides", name, flags, version) File "/usr/lib/python2.4/site-packages/yum/sqlitesack.py", line 43, in newFunc return func(*args, **kwargs) File "/usr/lib/python2.4/site-packages/yum/sqlitesack.py", line 837, in _search for pkg in self.searchFiles(name, strict=True): File "/usr/lib/python2.4/site-packages/yum/sqlitesack.py", line 43, in newFunc return func(*args, **kwargs) File "/usr/lib/python2.4/site-packages/yum/sqlitesack.py", line 586, in searchFiles self._sql_pkgKey2po(rep, cur, pkgs) File "/usr/lib/python2.4/site-packages/yum/sqlitesack.py", line 470, in _sql_pkgKey2po pkg = self._packageByKey(repo, ob['pkgKey']) File "/usr/lib/python2.4/site-packages/yum/sqlitesack.py", line 413, in _packageByKey po = self.pc(repo, cur.fetchone()) File "/usr/lib/python2.4/site-packages/yum/sqlitesack.py", line 68, in __init__ self._read_db_obj(db_obj) File "/usr/lib/python2.4/site-packages/yum/sqlitesack.py", line 94, in _read_db_obj setattr(self, item, _share_data(db_obj[item])) TypeError: unsubscriptable object

2 2

Re: [CentOS] Postfix setup
by James B. Byrne 11 Mar '13

11 Mar '13

On Mon, March 11, 2013 04:52, Tilman Schmidt wrote: > Am 11.03.2013 03:54, schrieb Austin Einter: >> I am planning to setup mail server for my domain. >> >> Which one is preferred postfix or sendmail. > Postfix. I have been running Sendmail from version 8.6 in 1995 on HP-UX 9.02 to 8.13 at the present on CentOS-5.9 as these were the default MTA's shipped by the vendor. When RHEL-6 switched from Sendmail to Postfix I decided to bite the bullet and change my public MX servers to Postfix as and when I upgraded them to CentOS-6. This was not without difficulty and unhappiness, for I miss the command line email trace facility that Sendmail provides out of the box, but it was not traumatic either. The main benefit to using Postfix over Sendmail is that Postfix definitely places a lower intellectual load on its administrators. For that reason alone I would recommend it over Sendmail. While M4 macros take most of the arcana out of Sendmail's configuration files they are no where near as easy to understand as Postfix's simple config files. The only 'rule' I have to suggest is: The mail server host and all of its MX records must resolve to a DNS 'A" or 'AAAA' record. Do not use CNAME records with any MX host or you will learn why not to do this the hard way. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 3

serving a kickstart file over https with self-signed certificate
by jortega 11 Mar '13

11 Mar '13

I am currently using https for the --url and --repo options in a kickstart file. The yum repo files are also set to do the same. Both of them have a setting (noverifyssl and sslverify=no, respectively) and this works as expected to pass --insecure to curl. However, I cannot figure out how to also serve the kickstart file itself. ks=user:pass@url works as a url, but I get the "Problem with the SSL CA cert" error. Is there a kernel cmdline option? I have tried different variations of noverifyssl and rd_noverifyssl but haven't lucked upon the right one and I'm not finding the answer in google. This is centos6, btw. Thanks!

2 1

Re: [CentOS] lost connection during yum update
by Frank Cox 11 Mar '13

11 Mar '13

On Sun, 10 Mar 2013 12:14:14 +0100 Reindl Harald wrote: > use "screen" if you update over WAN connections > yes, i know it is too late but thats the way to go I was doing it through VNC, thinking that would be more-or-less equivalent to screen, which it apparently isn't. Somehow my vnc session (desktop) just disappeared in the middle of the job, while I was running "yum update" on the remote host machine and two other computers. Perhaps the "yum update" that was running on the remote host machine killed VNC -- in hindsight perhaps I shouldn't have done that. My google searching leads me to suspect that initramfs may be missing on those computers. If that is the case (which I will verify later this afternoon) then I'm thinking that perhaps chrooting to the hard drive followed by a simple yum remove kernel-2.6.32-358.0.1 and yum install kernel-2.6.32-358.0.1 will fix it. It's funny that all three of them died in the same way, though I guess they were all at about the same stage in the update process when my VNC session disappeared. Running "yum-complete-transaction", followed by "package-cleanup --cleandupes", followed by "yum update" seems to have put everything back the way that it should be, with the exception of whatever it is that prevents the machine from booting. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com www.creekfm.com - FIFTY THOUSAND WATTS of POW WOW POWER!

6 22

kickstart %pre vda/sda troubles
by Natxo Asenjo 11 Mar '13

11 Mar '13

hi, The problem: for kvm/qemu disks are /dev/vdx devices when using the virtio driver. For vmware, drives are /dev/sdx devices. For hp servers, /dev/ccisss/whatever (sorry, no proliant with an array controller handy to check it). in order to just have one kickstart script to maintain I am trying to use the %pre section but getting a bit stuck. This is what I have: %pre if [ -b /dev/sda ] then zerombr clearpart --all bootloader --location=mbr --timeout=0 --driveorder=sda --append="crashkernel=auto rhgb quiet" part /boot --fstype=ext4 --size=500 part pv.008002 --grow --size=1 volgroup vg_host --pesize=4096 pv.008002 logvol / --fstype=ext4 --name=lv_root --vgname=vg_host --grow --size=1024 --maxsize=51200 logvol swap --name=lv_swap --vgname=vg_host --grow --size=512 --maxsize=1024 fi elif [ -b /dev/vda ] then zerombr clearpart --all bootloader --location=mbr --timeout=0 --driveorder=vda --append="crashkernel=auto rhgb quiet" clearpart --linux --drives=vda part /boot --fstype=ext4 --size=500 --ondisk=vda part pv.008002 --grow --size=1 --ondisk=vda volgroup vg_host --pesize=4096 pv.008002 logvol / --fstype=ext4 --name=lv_root --vgname=vg_host --grow --size=1024 --recommended logvol swap --name=lv_swap --vgname=vg_host --grow --size=512 --maxsize=1024 fi else echo unknown disk fi But when kickstarting a guest on a kvm host, I get this error: the kickstart configuration file is missing required information that anaconda cannot promtp for. Please add the following sections and try again: Bootloader configuration. If I swith to another virtual terminal, I see this: Device vda not found. But it's there, I can see it with ls -l, it is a block device Has anybody implemented something like this and is willing to share it? TIA, -- Groeten, natxo

2 4

selinux + kvm virtualization + smartd problem
by Ilyas -- 11 Mar '13

11 Mar '13

Hello, I'm using HP homeserver where host system run CentOS 6.3 with KVM virtualization with SELinux enabled, guests too run the same OS (but without SELinux, but this does not matter). Host system installed on mirrors based on sda and sdb physical disks. sd{c..f} disks attached to KVM guest (whole disks, not partitions; needed to use zfs (zfsonlinux) benefit features). Problem is that disks (files in /dev) which attached to KVM guest has SELinux context which inaccessible from context of smartd process. [root(a)srv-1.home ~]# ls -laZ /dev/sd{a..f} brw-rw----. root disk system_u:object_r:fixed_disk_device_t:s0 /dev/sda brw-rw----. root disk system_u:object_r:fixed_disk_device_t:s0 /dev/sdb brw-rw----. qemu qemu system_u:object_r:svirt_image_t:s0:c281,c675 /dev/sdc brw-rw----. qemu qemu system_u:object_r:svirt_image_t:s0:c281,c675 /dev/sdd brw-rw----. qemu qemu system_u:object_r:svirt_image_t:s0:c281,c675 /dev/sde brw-rw----. qemu qemu system_u:object_r:svirt_image_t:s0:c281,c675 /dev/sdf [root(a)srv-1.home ~]# ps axwZ | grep smart[d] system_u:system_r:fsdaemon_t:s0 1762 ? S 0:00 /usr/sbin/smartd -q never When I restarts smartd next messages appears in audit.log: [root(a)srv-1.home ~]# tail -F /var/log/audit/audit.log | grep type=AVC type=AVC msg=audit(1357993548.964:8529): avc: denied { getattr } for pid=21321 comm="smartd" path="/dev/sdc" dev=devtmpfs ino=6327 scontext=unconfined_u:system_r:fsdaemon_t:s0 tcontext=system_u:object_r:svirt_image_t:s0:c281,c675 tclass=blk_file type=AVC msg=audit(1357993548.965:8530): avc: denied { getattr } for pid=21321 comm="smartd" path="/dev/sdd" dev=devtmpfs ino=6321 scontext=unconfined_u:system_r:fsdaemon_t:s0 tcontext=system_u:object_r:svirt_image_t:s0:c281,c675 tclass=blk_file type=AVC msg=audit(1357993548.966:8531): avc: denied { getattr } for pid=21321 comm="smartd" path="/dev/sde" dev=devtmpfs ino=6324 scontext=unconfined_u:system_r:fsdaemon_t:s0 tcontext=system_u:object_r:svirt_image_t:s0:c281,c675 tclass=blk_file type=AVC msg=audit(1357993548.966:8532): avc: denied { getattr } for pid=21321 comm="smartd" path="/dev/sdf" dev=devtmpfs ino=6330 scontext=unconfined_u:system_r:fsdaemon_t:s0 tcontext=system_u:object_r:svirt_image_t:s0:c281,c675 tclass=blk_file type=AVC msg=audit(1357993549.198:8533): avc: denied { read } for pid=21321 comm="smartd" name="sdc" dev=devtmpfs ino=6327 scontext=unconfined_u:system_r:fsdaemon_t:s0 tcontext=system_u:object_r:svirt_image_t:s0:c281,c675 tclass=blk_file type=AVC msg=audit(1357993549.198:8534): avc: denied { read } for pid=21321 comm="smartd" name="sdd" dev=devtmpfs ino=6321 scontext=unconfined_u:system_r:fsdaemon_t:s0 tcontext=system_u:object_r:svirt_image_t:s0:c281,c675 tclass=blk_file type=AVC msg=audit(1357993549.198:8535): avc: denied { read } for pid=21321 comm="smartd" name="sde" dev=devtmpfs ino=6324 scontext=unconfined_u:system_r:fsdaemon_t:s0 tcontext=system_u:object_r:svirt_image_t:s0:c281,c675 tclass=blk_file type=AVC msg=audit(1357993549.198:8536): avc: denied { read } for pid=21321 comm="smartd" name="sdf" dev=devtmpfs ino=6330 scontext=unconfined_u:system_r:fsdaemon_t:s0 tcontext=system_u:object_r:svirt_image_t:s0:c281,c675 tclass=blk_file I tried to create SELinux policy using audit2allow: [root(a)srv-1.home ~]# cat /var/log/audit/audit.log | grep smartd | audit2allow -M smartd_svirt_image [root(a)srv-1.home ~]# semodule -i smartd_svirt_image.pp but it not helped to solve problem. How I can create permissive rule for selinux in my case? Thank you. -- GPG Key ID: 6EC5EB27

3 11

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss