- Discuss - lists.centos.org

Re: [CentOS] CentOS 5 sshd does not log IP address of reverse mapping failure
by Tilman Schmidt 08 Mar '13

08 Mar '13

Am 08.03.2013 17:40, schrieb Reindl Harald: > but you can not tell me that such attempts would not be logged > maybe you have fucked your syslog-configuration or whatever Tsk, tsk. Language! > Mar 8 17:35:13 openvas sshd[10017]: Invalid user donotexist from 10.0.0.241 > Mar 8 17:35:13 openvas sshd[10018]: input_userauth_request: invalid user donotexist > > Mar 8 17:37:38 openvas sshd[10172]: User vnstat from 10.0.0.241 not allowed because not listed in AllowUsers > Mar 8 17:37:38 openvas sshd[10173]: input_userauth_request: invalid user vnstat If you had actually read the thread before replying you might have noticed that it is not about these messages at all. These are messages about invalid users. I already wrote that I get these too, complete with IP addresses, even before putting in "UseDNS no". My question is about these: Feb 10 13:32:41 dns01 sshd[16161]: Disconnecting: Too many authentication failures for root Feb 10 13:32:45 dns01 sshd[16163]: Disconnecting: Too many authentication failures for root Feb 10 13:32:48 dns01 sshd[16165]: Disconnecting: Too many authentication failures for root Feb 10 13:32:53 dns01 sshd[16167]: Disconnecting: Too many authentication failures for root Feb 10 13:32:55 dns01 sshd[16169]: Disconnecting: Too many authentication failures for root Feb 10 13:32:59 dns01 sshd[16171]: Disconnecting: Too many authentication failures for root Feb 10 13:33:02 dns01 sshd[16173]: Disconnecting: Too many authentication failures for root Feb 10 13:33:05 dns01 sshd[16175]: Disconnecting: Too many authentication failures for root Feb 10 13:33:08 dns01 sshd[16177]: Disconnecting: Too many authentication failures for root Feb 10 13:33:11 dns01 sshd[16179]: Disconnecting: Too many authentication failures for root Do you have log entries with IP addresses for these? Oh, before you ask, the sshd which logged these runs of course with PermitRootLogin no PasswordAuthentication no > cat /etc/redhat-release > CentOS release 6.3 (Final) Notice the subject line? How it says "CentOS 5"? That was deliberate. -- Tilman Schmidt Phoenix Software GmbH Bonn, Germany

1 0

Webinar server, installable on CentOS6
by Mihamina Rakotomandimby 08 Mar '13

08 Mar '13

Hi all, I'm looking for an opensource solution for hosting webinars on a remote dedicated server running CentOS6. I would like to use FOSS, and it would be perfect if it's packaged, or at least easealy packageable. Please let me know if you have some suggestion. -- RMA.

2 1

Re: [CentOS] CentOS 5 sshd does not log IP address of reverse mapping failure
by Tilman Schmidt 08 Mar '13

08 Mar '13

Am 08.03.2013 15:50, schrieb Reindl Harald: > Am 08.03.2013 15:01, schrieb Tilman Schmidt: >> Am 07.03.2013 19:49, schrieb Les Mikesell: [...] >>> Does it work if you set >>> UseDNS no >>> in /etc/ssh/sshd_config? >> >> Not really. That seems to remove the "reverse mapping checking failed" >> messages (assuming there were the usual number of such attempts after >> I set that option), but IP addresses for failed logins to existing >> users are never logged. The log contains just: >> >> sshd[27912]: Disconnecting: Too many authentication failures for root > > not true, How do you know? I saw no logon from you on the machine I tested this on. :-) > i have "UseDNS no" on ANY machine since a long time > and /var/log/secure contains ip-addresses as also logwatch For failed login attempts to existing usernames? Can you share a log entry? That would give me hope that it's just a configuration issue. Thanks, Tilman -- Tilman Schmidt Abteilungsleiter Technik ---------------------------------------------------------------- Phoenix Software GmbH Tel. +49 228 97199 0 Geschäftsführer: W. Grießl Fax +49 228 97199 99 Adolf-Hombitzer-Str. 12 www.phoenixsoftware.de 53227 Bonn, Germany Amtsgericht Bonn HRB 2934 ----------------------------------------------------------------

1 0

setroubleshoot bug returns?
by m.roth＠5-cent.us 08 Mar '13

08 Mar '13

I just updated a system to the latest 6.3 (no CR), and I'm seeing setroubleshoot: [avc.ERROR] Plugin Exception catchall_boolean #012Traceback (most recent call last):#012 File "/usr/lib64/python2.6/site-packages/setroubleshoot/analyze.py", line 191, in analyze_avc#012 report = plugin.analyze(avc)#012 File "/usr/share/setroubleshoot/plugins/catchall_boolean.py", line 90, in analyze#012 man_page = self.check_for_man(b)#012 File "/usr/share/setroubleshoot/plugins/catchall_boolean.py", line 76, in check_for_man#012 man_page = name.split("_")[0] + "_selinux"#012AttributeError: 'tuple' object has no attribute 'split' which appears to be *exactly* Red Hat Bugzilla – Bug 518232, closed in rawhide on 2009-08-19. Has this crept back in? mark

1 0

CentOS-announce Digest, Vol 97, Issue 4
by centos-announce-request＠centos.org 08 Mar '13

08 Mar '13

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2013:0611 Moderate CentOS 5 ruby Update (Johnny Hughes) 2. CESA-2013:0608 Important CentOS 5 kvm Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 8 Mar 2013 00:25:53 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0611 Moderate CentOS 5 ruby Update To: centos-announce(a)centos.org Message-ID: <20130308002553.GA6956(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0611 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0611.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: ef322fc87fd653cc2d0fccce4aa0ead352de83b9a3af1d3450da03d9fe2c8d02 ruby-1.8.5-29.el5_9.i386.rpm f15afe0f535a2ef6ee7b2b6337e3d3f4a82b361ecb3c6d9120b922afd9c2e7fc ruby-devel-1.8.5-29.el5_9.i386.rpm 76f84f99e4c3317d408b087ddd580d887560af49f68ab653ae0492eca8078fdd ruby-docs-1.8.5-29.el5_9.i386.rpm 7b562c8003021f3b625d14f6bb50f017989ea038c3d97c410613fb906680fe06 ruby-irb-1.8.5-29.el5_9.i386.rpm f86766db583b6eb3f2d98965e9b66d2962ddfca7d5bdfbedf5e3ea8b43e2ec29 ruby-libs-1.8.5-29.el5_9.i386.rpm 1e9c018e1d942b04a8528a89113b48f30bfb2898d37e1322e68f382409ebcaec ruby-mode-1.8.5-29.el5_9.i386.rpm 6c22e87a39bac6e60df524999688a0a3e9235066df297c15fe347ae09110d3f7 ruby-rdoc-1.8.5-29.el5_9.i386.rpm 50979e4a78b935db5ed2638a0e7417c617b644ae7bd117d81468abe5c6be8d14 ruby-ri-1.8.5-29.el5_9.i386.rpm f6fc258288f78572d5f6f8bdc319ab7f0023c55b5397fd2ae79921fe618a28b4 ruby-tcltk-1.8.5-29.el5_9.i386.rpm x86_64: f4c9027ce39339a538c0d024f0e5916d2303aa93590aaa9f9c5c434f826e763d ruby-1.8.5-29.el5_9.x86_64.rpm f15afe0f535a2ef6ee7b2b6337e3d3f4a82b361ecb3c6d9120b922afd9c2e7fc ruby-devel-1.8.5-29.el5_9.i386.rpm d37b1f84958d5f31e1840bb93fac1ad0e013a684e31d9cde95302ed2259045a4 ruby-devel-1.8.5-29.el5_9.x86_64.rpm 6a3f538d47173f9211bdb7e9679a8d5accdca0771affbca5040d2e1994a6ca48 ruby-docs-1.8.5-29.el5_9.x86_64.rpm a2faab996c4d842252cadd4f43a65780ed90efd0438ea94cfd1b14b04e5d6efd ruby-irb-1.8.5-29.el5_9.x86_64.rpm f86766db583b6eb3f2d98965e9b66d2962ddfca7d5bdfbedf5e3ea8b43e2ec29 ruby-libs-1.8.5-29.el5_9.i386.rpm 24b87e3014c9e4de3ac094cf327a656c06d85e41e608dd4d996fa88dd94bc9ca ruby-libs-1.8.5-29.el5_9.x86_64.rpm c843bf9d5dc3799574600ba3e5e1f79443afa7ba658fc2cb596691439f00de77 ruby-mode-1.8.5-29.el5_9.x86_64.rpm d206914003dd63cff6c0444be5899ae39aec6bdc95e1743f7008d8bdb982a8a5 ruby-rdoc-1.8.5-29.el5_9.x86_64.rpm f00de1c27f3e5c25555b9fba74cbdb53bffd1b5a79061a3867e6729aa45edfae ruby-ri-1.8.5-29.el5_9.x86_64.rpm 0676c1b89c15e2848fbe7bae350372b4e6c9a1e144de71c655d4da99dd045ea8 ruby-tcltk-1.8.5-29.el5_9.x86_64.rpm Source: e45f2bf3958f6697ffbec648f3d687284efa1e2c12d99f2d89646f16e973baaa ruby-1.8.5-29.el5_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Fri, 8 Mar 2013 00:28:36 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0608 Important CentOS 5 kvm Update To: centos-announce(a)centos.org Message-ID: <20130308002836.GA7091(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0608 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0608.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: f84197e4bf90b42dda0aa7a7a911a8a401bc8b64141ec160c01e5253d01a5f99 kmod-kvm-83-262.el5.centos.1.x86_64.rpm 2cd9c16054366da95d0e0913d5d6b18ff7106dc303556103aac60c1caf15d858 kmod-kvm-debug-83-262.el5.centos.1.x86_64.rpm 68a91efa039e84ef5a0753268f3d994ba03883ef08dd166061def06454f27133 kvm-83-262.el5.centos.1.x86_64.rpm 3f9a9749a02b670a38af2705b963d85feb366edce5e6e178eb681f7a1c97c388 kvm-qemu-img-83-262.el5.centos.1.x86_64.rpm 35a85b39f363b49e41a137d7bff7d982031b268daed90cdeb7b4e6b89b3783fc kvm-tools-83-262.el5.centos.1.x86_64.rpm Source: 74394e61e0d18b3a415fab15560d964dc74f80bd8f878d6940ddd342891a47ea kvm-83-262.el5.centos.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 97, Issue 4 **********************************************

1 0

nc not working as advertised
by Robert Moskowitz 08 Mar '13

08 Mar '13

I can't get nc to do anything worthwhile. In fact I can't even get the examples in the manpage to work. From either my C6 servers or my F17 notebooks. For example: echo -n "GET / HTTP/1.0\r\n\r\n" | nc medon.htt-consult.com 80 Gets no response. And looking into the access.log of medon shows no access by my client. I have tried the client/server on both -4 and -6 on a port I have enabled on my firewall. The server looks to be listening, but the client seems to never connect. what I typed in eventually gets played to the terminal session and of course bash says no such command. Say I have port 5902 open (for vncserver, and vncserver is not running). So on server foo, in a su session (because of the port range) I type: nc -4l 5902 seems to be listening. Then on bar, also in an su session: nc -4 foo.domain 5902 hello world After some time nc terminates and "hello world" gets sent to the su session and of course is not a valid command... So what am I missing here? Doesn't matter if I use -4, -6, or neither. It does not work.

5 6

netcat or netcat6 for Centos 6.3
by Robert Moskowitz 07 Mar '13

07 Mar '13

In my testing of HIP, there is reference to use 'nc6' for a simple TCP character echo server. No such animal in Centos, and after a bit of digging I find this refers to Netcat6 which seems to be a dead app? Is it available as an rpm somewhere for Centos? My searching is coming up empty. Or just about any service that I can start on one system and connect from another that would perform this simple echo test.

4 5

HIPHOP for Php
by Rodrigo Pichiñual Norin 07 Mar '13

07 Mar '13

Hi all, someone have installed hiphop for php?? thanks

1 0

Replacing Multiple Servers with One
by Tim Evans 07 Mar '13

07 Mar '13

We are replacing four servers, running mail, web, ftp, and dns, respectively, with a single server to run all four services. The new server will have a new IP address. It seems fairly straightforward to redirect mail, web, and ftp services to the new server via DNS CNAMES, but I'm not quite sure about how to do the change for the DNS service itself. Is there a need to maintain the old DNS server's IP address during a transition, or longer? Via a virtual IP with the old DNS server's IP address on the new machine, perhaps? Or a second NIC with the old address? Or just have the router redirect incoming DNS requests? Thanks. -- Tim Evans | 5 Chestnut Court Linux/UNIX Consulting | Owings Mills, MD 21117 http://www.tkevans.com/ | 443-394-3864 tkevans(a)tkevans.com

4 3

CentOS-announce Digest, Vol 97, Issue 3
by centos-announce-request＠centos.org 07 Mar '13

07 Mar '13

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2013:0594 Low CentOS 5 kernel Update (Johnny Hughes) 2. CESA-2013:0599 Important CentOS 5 xen Update (Johnny Hughes) 3. CESA-2013:0604 Important CentOS 5 java-1.6.0-openjdk Update (Johnny Hughes) 4. CESA-2013:0603 Important CentOS 5 java-1.7.0-openjdk Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 6 Mar 2013 16:59:50 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0594 Low CentOS 5 kernel Update To: centos-announce(a)centos.org Message-ID: <20130306165950.GA8409(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0594 Low Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0594.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: cefdb7a757f1969636b70ee04d4a81cf3e979358944d2e1629847bc639a86d20 kernel-2.6.18-348.2.1.el5.i686.rpm 418abeed53c568f3d4fbabdac6728bfdf44ab42a96bd39a71709ecdd658e27bf kernel-debug-2.6.18-348.2.1.el5.i686.rpm 40d16a9efc269a3c245ea26ff976cbffa92359129b23dbc960b76098835726cd kernel-debug-devel-2.6.18-348.2.1.el5.i686.rpm 54093d35bc327bf9c99c34ed14608aaec9e9ae2cef9f41d8e35c3c036b72b2b4 kernel-devel-2.6.18-348.2.1.el5.i686.rpm a85275d677eeda78e805cd6f8322c49a88c68c8808fae9ac6de791109f8c9df5 kernel-doc-2.6.18-348.2.1.el5.noarch.rpm 23915d3577177c15cfc390496dd9b180b850da715b6917e0f63142d9a1488fde kernel-headers-2.6.18-348.2.1.el5.i386.rpm 3204ce3e9bdaf854b5ca5cf8c21d69fb24f3049d8c58ea20c1bd672b72b70a44 kernel-PAE-2.6.18-348.2.1.el5.i686.rpm 488e6ba7fa76673fbad4a2d25f8327a72b712393aca9fb48a5a08ac4d365fad4 kernel-PAE-devel-2.6.18-348.2.1.el5.i686.rpm 97f962ac7454245b18cbf455d7e815665346d18f86522523573b05f079f96365 kernel-xen-2.6.18-348.2.1.el5.i686.rpm bf29952485281f824cd5f0ad1eb654927c3b66a4328c89f3173205e2cc52a24d kernel-xen-devel-2.6.18-348.2.1.el5.i686.rpm x86_64: 8ccc7416be8ddef84894ef2df598375410eb81408ec33f85100a7bfcc673fd57 kernel-2.6.18-348.2.1.el5.x86_64.rpm efec14a102e162699e9ce8e99b51cd66ce68924f734f37a2545063a1c8d9dc34 kernel-debug-2.6.18-348.2.1.el5.x86_64.rpm 744c33a014bbba45af1f4eac4cf7b58947dac6be625cd09d0cf01f262f1d0e1f kernel-debug-devel-2.6.18-348.2.1.el5.x86_64.rpm bfb03f15e3d186a7146ff4e90e66e8985836699b96957b437f16d9e6070634d7 kernel-devel-2.6.18-348.2.1.el5.x86_64.rpm a85275d677eeda78e805cd6f8322c49a88c68c8808fae9ac6de791109f8c9df5 kernel-doc-2.6.18-348.2.1.el5.noarch.rpm 05f218b7b51feadcbe9d08903ab495ce1ebc8a328f7e3b4a710ac2a9417efade kernel-headers-2.6.18-348.2.1.el5.x86_64.rpm 4e5f7935392f90a46a7fdda5ae6bc6727bbc7b846f7b80a125029ce32359811b kernel-xen-2.6.18-348.2.1.el5.x86_64.rpm df2eda13fe10264980f25dca687cf1661a104db4995f1c4a8cf49081404a8e76 kernel-xen-devel-2.6.18-348.2.1.el5.x86_64.rpm Source: 51d8f1326965884808c9d639e3cf0a080233e079dac63eecf68fdf98b4305ff1 kernel-2.6.18-348.2.1.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 6 Mar 2013 19:54:46 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0599 Important CentOS 5 xen Update To: centos-announce(a)centos.org Message-ID: <20130306195446.GA19097(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0599 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0599.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b3ffbf68a1ef9d3b3f7f9d9436ed876031748bd82dddc7ff570b0f8bfbe71ff4 xen-3.0.3-142.el5_9.2.i386.rpm 4b369ecd0eedb47ef9a8129f8c4f0cca424773a19ad955cb5face9642989004e xen-devel-3.0.3-142.el5_9.2.i386.rpm a22c2f5a5ba0e98fcf92047005fa8d039ba94c632b92e1eccbc930fd6f8548f2 xen-libs-3.0.3-142.el5_9.2.i386.rpm x86_64: 764e0cdf3881bf1302638bcf3f22a50480ecebc023495211eeed588915720d1a xen-3.0.3-142.el5_9.2.x86_64.rpm 4b369ecd0eedb47ef9a8129f8c4f0cca424773a19ad955cb5face9642989004e xen-devel-3.0.3-142.el5_9.2.i386.rpm 010d796268614c4c7129e52c2cbef5e3315ab091d42f0854356312195cf6fb58 xen-devel-3.0.3-142.el5_9.2.x86_64.rpm a22c2f5a5ba0e98fcf92047005fa8d039ba94c632b92e1eccbc930fd6f8548f2 xen-libs-3.0.3-142.el5_9.2.i386.rpm d02d144eeec0fbf47e123e918fc2887a579c98e09de7f9f05400dc914901e064 xen-libs-3.0.3-142.el5_9.2.x86_64.rpm Source: db77d39f3370d75b0c119dbcb5bba46889502fad7684b786098ad7dc41ec3577 xen-3.0.3-142.el5_9.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Wed, 6 Mar 2013 21:15:03 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0604 Important CentOS 5 java-1.6.0-openjdk Update To: centos-announce(a)centos.org Message-ID: <20130306211503.GA24595(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0604 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0604.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 406e74135b4f3259be39452d9c8fb7ce87413360df85ede2df2a78c64f1d29ae java-1.6.0-openjdk-1.6.0.0-1.36.1.11.9.el5_9.i386.rpm 325fb93b2cb6856c1a984075aa3b13f0120801c58b87d249d345fd8c02837a07 java-1.6.0-openjdk-demo-1.6.0.0-1.36.1.11.9.el5_9.i386.rpm ef349dc86d2d8da31151d2f1dbff7bce4488c01f5b127234441321eb2be2b84e java-1.6.0-openjdk-devel-1.6.0.0-1.36.1.11.9.el5_9.i386.rpm ca98194668425496a529391ec01a0d5a3e24af9bbc958f37964b86aa99a5878f java-1.6.0-openjdk-javadoc-1.6.0.0-1.36.1.11.9.el5_9.i386.rpm 7b55f7fe045e3e3e7b91335e661cb518e700da5d799354f9ba2b690202286ed2 java-1.6.0-openjdk-src-1.6.0.0-1.36.1.11.9.el5_9.i386.rpm x86_64: 827277133e3da04648edbe38339b28de20d88fd09333be091a78c2e58da9f8fe java-1.6.0-openjdk-1.6.0.0-1.36.1.11.9.el5_9.x86_64.rpm 51ce968d7ff5d821e8bea9595aaa58cb3d41fa6eab3d7693d49de62773117be6 java-1.6.0-openjdk-demo-1.6.0.0-1.36.1.11.9.el5_9.x86_64.rpm ace2341f357703e53fdfad6b8991a3cd9e7fad60518744e3fc30c19f424c46da java-1.6.0-openjdk-devel-1.6.0.0-1.36.1.11.9.el5_9.x86_64.rpm e96fe84ee2a6af2696cc3e03f0bbdea9c55bdac8dbeb32aad6e9acab62a11940 java-1.6.0-openjdk-javadoc-1.6.0.0-1.36.1.11.9.el5_9.x86_64.rpm 53212f7310503cb0ae63af155e6643a837e4f5efca9863c13f18dcfbfcefbf4c java-1.6.0-openjdk-src-1.6.0.0-1.36.1.11.9.el5_9.x86_64.rpm Source: 8cf4357a96c9438eac2605d5e22bff356df2ac5c9c5bc9b58abb9fac39b9cb3c java-1.6.0-openjdk-1.6.0.0-1.36.1.11.9.el5_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Wed, 6 Mar 2013 21:16:37 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0603 Important CentOS 5 java-1.7.0-openjdk Update To: centos-announce(a)centos.org Message-ID: <20130306211637.GA24649(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0603 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0603.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 0f0a21614483015e4d1d138ed9045ae13c32512c46a9ce2d872bfca4267b7f92 java-1.7.0-openjdk-1.7.0.9-2.3.8.0.el5_9.i386.rpm d54f262d3c98609fcb240ff5aa207e5a77066096c969cd1df447f991f8c30891 java-1.7.0-openjdk-demo-1.7.0.9-2.3.8.0.el5_9.i386.rpm b95983b9909387b8fba942953762c69f582a2c5635ac027c74dd5e04e5f91177 java-1.7.0-openjdk-devel-1.7.0.9-2.3.8.0.el5_9.i386.rpm 9b0c09391ebcb872ed13e994c08a48aa303ae14dcd147495067ccbd45091d4ca java-1.7.0-openjdk-javadoc-1.7.0.9-2.3.8.0.el5_9.i386.rpm 09a4c8cee8bb36423eacc165e2847af21a45e59ac39f185e951d5f04ccc602a3 java-1.7.0-openjdk-src-1.7.0.9-2.3.8.0.el5_9.i386.rpm x86_64: 20177a704047ca30e1ffbaddfad8e000ba9c6f117e8fe09c8ea14f52551d04b1 java-1.7.0-openjdk-1.7.0.9-2.3.8.0.el5_9.x86_64.rpm 241b5808c1104883a767441a7874fa7fb0efcb9c71bb6d537febbb2bd11b8a55 java-1.7.0-openjdk-demo-1.7.0.9-2.3.8.0.el5_9.x86_64.rpm 5c6b21e367c4f152ccbd16f39221d26d218f4587754e70fb877aad9aea1ce18f java-1.7.0-openjdk-devel-1.7.0.9-2.3.8.0.el5_9.x86_64.rpm 1f1156860def7ef715986588cf7e0459edd6ef682ac185bcd6a4d8bb5b2d7fe5 java-1.7.0-openjdk-javadoc-1.7.0.9-2.3.8.0.el5_9.x86_64.rpm 49f55d6dd6de510144e7d2eae0acf5e05b65cfeaefc3cfc444d6d305927d32c5 java-1.7.0-openjdk-src-1.7.0.9-2.3.8.0.el5_9.x86_64.rpm Source: 1a30f338e1348d5bd5709bd7d7c3a8ae38baaacb811ef00281c66345c1fd573e java-1.7.0-openjdk-1.7.0.9-2.3.8.0.el5_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 97, Issue 3 **********************************************

1 0

Software RAID complete drives or individual partitions
by Chris Weisiger 06 Mar '13

06 Mar '13

I have been reading about software raid. I configured my first software raid system about a month ago. I have 4 500 Gig drives configured in RAID 5 configuration with a total of 1.5TB. Currently I configured the complete individual drivers as software raid, then created a /dev/md0 with the drives I then created a /file_storage partition on /dev/md0. I created my /boot / and swap partitions on a non raid drive in my system. Is the the proper way to configure software raid?

8 17

Centos 6.3 - unsupported video hardware
by Robert Moskowitz 06 Mar '13

06 Mar '13

I pulled one of my old OQO model 2 out of the junk bin and installed Centos 6.3 over Centos 5.3. The internal video does not work in graphics mode (text works fine), though a monitor attacked to the VGA port works fine. Although my intension is to use this as a portable test server, it would be nice if the video was available. How might I go about figuring out the Xorg magic to get it working?

3 6

Apache attacks - you can't stop them, or can you?
by Robert Moskowitz 06 Mar '13

06 Mar '13

So I have this nice, simple web server up running. Its purpose is to allow me external testing with HIP, and to provide some files for external distribution. Of course, there it is sitting on port 80 and the attacks are coming in per logwatch report. Examples from the report include: Requests with error response codes 404 Not Found //phpMyAdmin-2.5.1/scripts/setup.php: 1 Time(s) //phpMyAdmin-2.5.4/scripts/setup.php: 1 Time(s) //phpMyAdmin-2.5.5-pl1/scripts/setup.php: 1 Time(s) //phpMyAdmin-2.5.5-rc1/scripts/setup.php: 1 Time(s) //phpMyAdmin-2.5.5-rc2/scripts/setup.php: 1 Time(s) /muieblackcat: 1 Time(s) /myadmin/scripts/setup.php: 2 Time(s) /mysql-admin/scripts/setup.php: 1 Time(s) /mysql/scripts/setup.php: 1 Time(s) /mysqladmin/scripts/setup.php: 2 Time(s) /mysqlmanager/scripts/setup.php: 1 Time(s) Now these are only a few, though I am probably not being hit as hard as others out there. My question is: Is there a way to shut this nonsense down? Or because I am sending the 404, I am doing all that is reasonable to do? I am wondering that if this list starts getting long, that is a lot of logging and I probably don't need to log 404s?

6 5

Google Earth on EL6.x x86_64
by Fred Smith 06 Mar '13

06 Mar '13

Has anyone gotten 64-bit google earth to run on el6 x86_64? It dies almost immediately, complaining for lack of ld-lsb.so.3. Perusing user forums at google I see a few others with the problem, but no (working) solutions. Thanks in advance! -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- "For the word of God is living and active. Sharper than any double-edged sword, it penetrates even to dividing soul and spirit, joints and marrow; it judges the thoughts and attitudes of the heart." ---------------------------- Hebrews 4:12 (niv) ------------------------------

5 7

Re: [CentOS] Software RAID complete drives or individual partitions
by Chris Weisiger 06 Mar '13

06 Mar '13

Im not so much concerned about the os not being on a raid system. I am really concerned about my data, music, pictures,docs, etc. I run a minimum os centos 5.9 install anyway so it would take long to reload the os if i had to. -----Original Message----- From: John R Pierce Sent: 3/5/2013 6:45 PM To: centos(a)centos.org Subject: Re: [CentOS] Software RAID complete drives or individual partitions On 3/5/2013 4:27 PM, Mark LaPierre wrote: > The question is why are you using raid at all? indeed. the primary justification for the "R" in RAID, Redundant, is high availability. having the OS on a non-raid volume completely violates this. RAID is most definitely NOT a substitute for backups. -- john r pierce 37N 122W somewhere on the middle of the left coast _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

2 1

CentOS-announce Digest, Vol 97, Issue 2
by centos-announce-request＠centos.org 06 Mar '13

06 Mar '13

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2013:0588 Moderate CentOS 5 gnutls Update (Johnny Hughes) 2. CEBA-2013:0591 CentOS 5 libxml2 Update (Johnny Hughes) 3. CESA-2013:0587 Moderate CentOS 5 openssl Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 5 Mar 2013 13:43:03 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0588 Moderate CentOS 5 gnutls Update To: centos-announce(a)centos.org Message-ID: <20130305134303.GA27307(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0588 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0588.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d406c1625f60d19b757d3a3b1c3755e8b3d512f39c6b62405c3dfb40e407e106 gnutls-1.4.1-10.el5_9.1.i386.rpm b545ba0216af79f830a203ecb36f56c18a4d8f1b3114c680096a1999b428f9e5 gnutls-devel-1.4.1-10.el5_9.1.i386.rpm 938cad7cb143172b6190a97e4c36f6ec508d86efdac3b6bc8121cd8e958c09c6 gnutls-utils-1.4.1-10.el5_9.1.i386.rpm x86_64: d406c1625f60d19b757d3a3b1c3755e8b3d512f39c6b62405c3dfb40e407e106 gnutls-1.4.1-10.el5_9.1.i386.rpm bb64f014b99389f570571c073312fca6f07db748a19d8a5f8e9734493fd0329b gnutls-1.4.1-10.el5_9.1.x86_64.rpm b545ba0216af79f830a203ecb36f56c18a4d8f1b3114c680096a1999b428f9e5 gnutls-devel-1.4.1-10.el5_9.1.i386.rpm 023bf23e98b902bbe2a0f8899d9e567f5f892f0ee355dc321464d5df264ab23e gnutls-devel-1.4.1-10.el5_9.1.x86_64.rpm 54eef63f0b8d0d21847a1798ac1322917f33f0e5f1c3a6668793b776469574bc gnutls-utils-1.4.1-10.el5_9.1.x86_64.rpm Source: 8549aa07932fdfb2eaaabfad862ec66f74f1dc153dee55591297b00b86bebb2f gnutls-1.4.1-10.el5_9.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 5 Mar 2013 13:44:17 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2013:0591 CentOS 5 libxml2 Update To: centos-announce(a)centos.org Message-ID: <20130305134417.GA27439(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2013:0591 Upstream details at : https://rhn.redhat.com/errata/RHBA-2013-0591.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 65bb89c8944962636db78141830c7f69aa4426a2a6e6113cc2b02458074b5a66 libxml2-2.6.26-2.1.21.el5_9.2.i386.rpm 85a25609b42b0d9d43508c0b636318f19f77e75f84ff2f5e7f547693798cc1a6 libxml2-devel-2.6.26-2.1.21.el5_9.2.i386.rpm 0e01f0682cfdf5cd0f963895bc3ad90809fd3a6b4e94503d4e3f7e84e8955ffc libxml2-python-2.6.26-2.1.21.el5_9.2.i386.rpm x86_64: 65bb89c8944962636db78141830c7f69aa4426a2a6e6113cc2b02458074b5a66 libxml2-2.6.26-2.1.21.el5_9.2.i386.rpm 0d35a2642461ef969c648b17c8975a853e3a5e9645600fb124d51122dd62a719 libxml2-2.6.26-2.1.21.el5_9.2.x86_64.rpm 85a25609b42b0d9d43508c0b636318f19f77e75f84ff2f5e7f547693798cc1a6 libxml2-devel-2.6.26-2.1.21.el5_9.2.i386.rpm 20c1e1ae776ac266e279bd1067087cccdd4cfb53400f4dc47d05fb1a7da33b62 libxml2-devel-2.6.26-2.1.21.el5_9.2.x86_64.rpm 51fd9ad1f3d74f426f1af7c1c5d813bbe819d15b9d07d27cb1f3f8a7b1b70e3b libxml2-python-2.6.26-2.1.21.el5_9.2.x86_64.rpm Source: 5c100afcfbde58be99b2c4ef94ed959ee163de55f8e3e0379ec174cb2320e767 libxml2-2.6.26-2.1.21.el5_9.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Tue, 5 Mar 2013 13:45:27 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0587 Moderate CentOS 5 openssl Update To: centos-announce(a)centos.org Message-ID: <20130305134527.GA27575(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0587 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0587.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b3c9e6759e2b6b562b9d8d7edb48a83ade73d041376f32b223249f7e4bb5db8a openssl-0.9.8e-26.el5_9.1.i386.rpm e04c5bcf1b3a72831df27f7d089a5698c889acafc8225584d8234b84ad204cd1 openssl-0.9.8e-26.el5_9.1.i686.rpm 3a8e98ce86754ab28bb9dea2938dd5d4a958cfc87606dbe7518b92c6e785084f openssl-devel-0.9.8e-26.el5_9.1.i386.rpm e062413c195abe8387e58aaaa0fbcaad830d2b6ba48ccefad5f67c0281cead80 openssl-perl-0.9.8e-26.el5_9.1.i386.rpm x86_64: e04c5bcf1b3a72831df27f7d089a5698c889acafc8225584d8234b84ad204cd1 openssl-0.9.8e-26.el5_9.1.i686.rpm 6301afe0afe607925b8a2264cb287e9acdc91bf67e01df80e0fa8a56d622bbef openssl-0.9.8e-26.el5_9.1.x86_64.rpm 3a8e98ce86754ab28bb9dea2938dd5d4a958cfc87606dbe7518b92c6e785084f openssl-devel-0.9.8e-26.el5_9.1.i386.rpm 6b9f38a6c7fa5dd9756550e536da72492eeabe4e641f680a5e4e86834c911b6d openssl-devel-0.9.8e-26.el5_9.1.x86_64.rpm 8741963c8aeefb148cfcfb92b0c6baa52b513c7503223f8b55cf5a75faf8f6bb openssl-perl-0.9.8e-26.el5_9.1.x86_64.rpm Source: 61018d7eb0442320a0175a1e1bd9863eee5fd3c9334c47631dce14973203a590 openssl-0.9.8e-26.el5_9.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 97, Issue 2 **********************************************

1 0

fencing nodes with drac under 5.9
by Adam Wead 06 Mar '13

06 Mar '13

Hi all, A recent update to CentOS 5.9 has broken my cluster's ability to fence nodes. I have two Dell's which are both fenced via their DRAC6 cards. The current configuration in cluster.conf for the fencing devices is: <fencedevice agent="fence_drac5" cmd_prompt="admin1->" ipaddr="192.168.251.11" login="fencer" name="ms1-drac" passwd="[omitted]" secure="1"/> After the updates, when one of the two systems comes online and starts the cman service, it will startup fencing. At that point it contacts the other node and reboots it repeatedly, never allowing the system to come back online. If I disable the cman service and renable it after both systems come back online, when cman starts up, it reboots the other and the process starts over again. Fencing with DRAC devices is not terribly well-documented, so I immagine there was something in the update that changed the way this worked. I originally used system-config-cluster to created the configuration file, but that had to tweak it adding the fence_drac5 agent manually because the configuration tool didn't support it. I also tried recreating the cluster with conga, via luci and ricci, but no success there either. Is anyone out there doing clustering with Dells and DRAC6 cards under CentOS 5.9? Or under CentOS 6 for that matter... I'm willing to update if it fixes this. thanks in advance, ...adam ____________________________________________ Adam Wead Systems and Digital Collections Librarian Rock and Roll Hall of Fame and Museum 216.515.1960 (t) 215.515.1964 (f)

2 5

Re: [CentOS] Software RAID complete drives or individual partitions
by Chris Weisiger 06 Mar '13

06 Mar '13

Im in the process of configuring my data to be backed up to external devices. -----Original Message----- From: John R Pierce Sent: 3/5/2013 6:45 PM To: centos(a)centos.org Subject: Re: [CentOS] Software RAID complete drives or individual partitions On 3/5/2013 4:27 PM, Mark LaPierre wrote: > The question is why are you using raid at all? indeed. the primary justification for the "R" in RAID, Redundant, is high availability. having the OS on a non-raid volume completely violates this. RAID is most definitely NOT a substitute for backups. -- john r pierce 37N 122W somewhere on the middle of the left coast _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

Re: [CentOS] Software RAID complete drives or individual partitions
by Chris Weisiger 06 Mar '13

06 Mar '13

I essentially configured the software raid to create a home server and not have to worry about individual drives. I've built a collection of several several gigs of music and pictures. Enough to look into a raid system. Plus it is alot cheaper than a hardware raid setup. Plus I want to do testing with it to possible use it for some of the clients that the business I work for do work for for basic file server services -----Original Message----- From: Mark LaPierre Sent: 3/5/2013 6:27 PM To: centos(a)centos.org Subject: Re: [CentOS] Software RAID complete drives or individual partitions On 03/04/2013 10:53 PM, Chris Weisiger wrote: > I have been reading about software raid. I configured my first software raid system about a month ago. > > I have 4 500 Gig drives configured in RAID 5 configuration with a total of 1.5TB. > > Currently I configured the complete individual drivers as software raid, then created a /dev/md0 with the drives > > I then created a /file_storage partition on /dev/md0. > > I created my /boot / and swap partitions on a non raid drive in my system. > > Is the the proper way to configure software raid? > _______________________________________________ Hey Chris, What you have done is a totally acceptable way of building a raid array. Software raid on Linux is amazingly flexible. It is able to build arrays on individual matching drives as you have done, drives of different physical sizes, a combination physical drives and partitions on other drives, or a combination of partitions on different drives. It can even build a raid array on several partitions on one physical drive, not that you would ever want to do that. In other words, if you can dream it up, software raid can probably build it. The question is why are you using raid at all? If you are trying to increase access speed or data security then raid makes sense. The appropriate configuration depends on your available resources and the nature of your intent. -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ **** _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

2 1

New java update?
by m.roth＠5-cent.us 05 Mar '13

05 Mar '13

I see there's a release today or so from Oracle of a new zero-day vulnerability. Any idea how soon we'll have an update? <https://threatpost.com/en_us/blogs/oracle-rushes-emergency-java-update-patc…> mark

8 34

network connectivity lost after reboot/upgrade
by Kai Schaetzl 05 Mar '13

05 Mar '13

I upgraded one of my old machines running 5.x to the latest kernel (from 308.24.1 to 348.1.1). After rebooting network connectivity was gone. I rebooted with the old kernel, I also tried the one before it (308.20.1) still no luck. So I assume it's got nothing to do with the kernel or even CentOS. But a hardware failure seems also unlikely, see below. ethtool shows the link as up and if I remove the cable as down. I attached a laptop via crossover cable, it detects the link, but same problem. I disabled iptables and set selinux to disabled. No change. There's a Xen VM running on that machine and I can ping it from the hardware. So, internal networking seems to be ok. I'm using bridged networking for Xen connectivity, setup by normal Red Hat means, not via Xen. Never had a problem. There are no errors in the logs, except for dhcpd telling network is down and named is also giving some weird errors. This is my only dhcpd, so I would like to have it up ASAP :-( Is there anything else besides a weird hardware failure that I could check? I'm going to get a new card tomorrow and see if that changes the situation. This is mobo internal networking based on nforce-MCP61. Has anyone seen such a hardware failure where the link goes up but no packets go over the wire? It seems a bit unlikely that this hardware failure (and nothing else) should happen on a reboot after an upgrade. Thanks. Kai

6 10

ProLiant ML110 G7
by Juan De Mola 05 Mar '13

05 Mar '13

How I can set up CentOS 5 on it if it don't see the drives. -- Juan Pablo De Mola Rodríguez

4 6

Centos6 ipsec troubles
by Riccardo Veraldi 05 Mar '13

05 Mar '13

Hello, it looks like the usual way to do ipsec on centos5 won't work anymore on centos6 I installed ipsec-tools but an interface type IPsec is not recognized by the kernel ifup ipsec0 Device does not seem to be present, delaying initialization. I am not planning to use the awful OpenSwan, I Want to sue the Kame implementation which was working fine on CentOS5 any hints ? thank you Rick

4 5

CUPS halts when no Internet
by Juan De Mola 05 Mar '13

05 Mar '13

Hi. I have CentOS 6 on a HP ProLiant ML110 G7. We have a cobol invoicing system that prints to LPD printers on Windows hosts via CUPS. All works great until the ADSL service goes down. The printers stop working and the service restart gives a connection error. What will be happening here and how I can solve it? Our previous server was on CentOS 5 and worked OK. Thanks. -- Juan Pablo De Mola Rodríguez

4 5

Finding matching words in a word game
by Alexander Farber 05 Mar '13

05 Mar '13

Hello, is there maybe a clever way of finding all possible words from a given set of letters by means of PostgreSQL (i.e. inside the database vs. scanning all database rows by a PHP script, which would take too long) - if the dictionary is kept in a simple table like: create table good_words ( word varchar(16) primary key, stamp timestamp default current_timestamp ); I could add a column above, where same letters as in "word" would be sorted alphabetically... but then I don't know. I've described my question in more detail at http://stackoverflow.com/questions/15220072/postgresql-and-word-games Thank you for any suggestions Alex

1 1

Re: [CentOS] acrobat reader for x86_64?
by Fred Smith 05 Mar '13

05 Mar '13

On Mon, Mar 04, 2013 at 08:45:40AM +0100, Sorin Srbu wrote: > > -----Original Message----- > > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > > Behalf Of Fred Smith > > Sent: Saturday, March 02, 2013 5:03 AM > > To: centos(a)centos.org > > Subject: [CentOS] acrobat reader for x86_64? > > > > Adobe doesn't seem to have acroread for x86_64 linux, or at least I > > don't > > see it anywhere. > > > > Anybody know otherwise? > > > > Evince and other tools work pretty well, but I have always liked having > > the "real thing" around for those occasions when they don't. > > What would be the advantage running having this software in 64b? the "advantage" would be the diff between having it and not, as opposed to having it in 64-bit versus 32-bit. Modern 64-bit installs do not install all the 32-bit runtimes needed to run 32-bit programs, so having to use a 32-bit program can be painful, give you'd need to install a bazillion other files just to accommodate that one proggy. -- ------------------------------------------------------------------------------- .---- Fred Smith / ( /__ ,__. __ __ / __ : / / / / /__) / / /__) .+' Home: fredex(a)fcshome.stoneham.ma.us / / (__ (___ (__(_ (___ / :__ 781-438-5471 -------------------------------- Jude 1:24,25 ---------------------------------

5 4

Please shed a light: when sssd will return from offline to online?
by Gelen James 05 Mar '13

05 Mar '13

Hi all, I'm new to sssd configs and debugging. Recently we have encountered some problems with sssd. Basically 6 out of 50 servers has 'getent passwd' lost all userIDs from LDAP backend, while others are OK. My sssd is at version 1.8.0-32. the related error messages are attached below. The sssd_nss seems got killed by temporarily network connection problems to backend openLDAP servers. Wonder why? and can we change the backend retry check interval? (see the timestamps for log entries in sssd_nss.log). [root@testbox sssd]# cat sssd_nss.log (Sat Mar 2 02:30:41 2013) [sssd[nss]] [sss_dp_init] (0x0010): Failed to connect to monitor services. (Sat Mar 2 02:30:41 2013) [sssd[nss]] [sss_process_init] (0x0010): fatal error setting up backend connector (Sat Mar 2 02:30:41 2013) [sssd[nss]] [sss_dp_init] (0x0010): Failed to connect to monitor services. (Sat Mar 2 02:30:41 2013) [sssd[nss]] [sss_process_init] (0x0010): fatal error setting up backend connector (Sat Mar 2 02:30:41 2013) [sssd[nss]] [sss_dp_init] (0x0010): Failed to connect to monitor services. (Sat Mar 2 02:30:41 2013) [sssd[nss]] [sss_process_init] (0x0010): fatal error setting up backend connector (Sat Mar 2 02:30:41 2013) [sssd[nss]] [sss_dp_init] (0x0010): Failed to connect to monitor services. (Sat Mar 2 02:30:41 2013) [sssd[nss]] [sss_process_init] (0x0010): fatal error setting up backend connector [root@testbox sssd]# cat sssd_pam.log (Sat Mar 2 02:30:09 2013) [sssd[pam]] [pam_dp_reconnect_init] (0x0010): Could not reconnect to ldap provider. (Sat Mar 2 02:30:39 2013) [sssd[pam]] [pam_dp_reconnect_init] (0x0010): Could not reconnect to ldap provider. [root@testbox sssd]# cat sssd_ldap.log (Sat Mar 2 02:30:53 2013) [sssd[be[ldap]]] [id_callback] (0x0010): The Monitor returned an error [org.freedesktop.DBus.Error.NoReply] [root@testbox sssd]# cat sssd.log (Sat Mar 2 02:30:41 2013) [sssd] [mt_svc_exit_handler] (0x0010): Process [nss], definitely stopped! [root@testbox sssd]# Please shed a light. Thanks a lot. --Gelen

1 0

what does the strange sssd log mesages mean?
by Gelen James 05 Mar '13

05 Mar '13

Hi all, I have a few centos 6 boxes running sssd, they are talking to OpenLDAP server still runs on centos 5. Today I enabled sssd debugging and found the following lines of messages in logs: ... (Mon Mar 4 23:11:13 2013) [sssd[be[ldap]]] [get_naming_context] (0x0200): Using value from [namingContexts] as naming context. (Mon Mar 4 23:11:13 2013) [sssd[be[ldap]]] [sdap_get_server_opts_from_rootdse] (0x0200): No known USN scheme is supported by this server! (Mon Mar 4 23:11:13 2013) [sssd[be[ldap]]] [sdap_get_server_opts_from_rootdse] (0x0200): Will use modification timestamp as usn! ... what does the above messages mean: why it uses modification timestamp as usn? does that have some harmful effects, if time drifts /time zone difference exists in a network? Please shed a light. Thanks. --Gelen

1 0

Re: [CentOS] preventing apache from being a mail relay
by Robert Moskowitz 04 Mar '13

04 Mar '13

On 03/03/2013 05:39 PM, Reindl Harald wrote: > > Am 03.03.2013 22:49, schrieb Robert Moskowitz: >> On 03/03/2013 04:33 PM, Reindl Harald wrote: >>> Am 03.03.2013 22:30, schrieb Robert Moskowitz: >>>> I am trying to recall back at least 2 years, and my notes are poor, and >>>> my searching appears to be worst... >>>> >>>> Seems I recall that last when I set up my apache server, the spammers >>>> were posting to it so it would send out the spam on port 25. There was >>>> some conf that I did to block this, but I did not document it, and I >>>> can't find any reference to this >>> what are you speaking about? >>> apache is a WEBSERVER and has NOTHING to do with email >> There was an attack, and if you search you will find references to it, where the spammers post to your web server >> in such a way that they relay out port 25. They send to your port 80, but you send out port 25. For example: >> >> http://forums.fedoraforum.org/archive/index.php/t-173601.html > only if you are so stupid and enable prxy-requests and load > any useless module becuse it exists - in other words: this > only affects poorly wrong configured setups which have way > larger problems as this one Once upon a time, it worked this way out of the box. I did NOT set up proxy, and I was being pounded, and found I had to turn it off. Now knowing what to look for, I found my notes and it was back on my '07 server. There is no reason for a general web server to function as a proxy, so for some time it has come with that part commented out. I looked a another '10 box (Centos 5.5) that had apache installed but never used and the proxy part was commented out. So yes, anyone turning on proxy today without care gets what they set up. But again, who needs proxying on a general web server?

3 3

RAID MD10
by m.roth＠5-cent.us 04 Mar '13

04 Mar '13

I'm going to rebuild my system at home soon, and was planning to mirror two drives. However, I was just looking up something about RAID, and on wikipedia found some information about the Linux MD driver, and "near" and "far" RAID10. Anyone have some opinions about them? mark "or should that be how many opinions do folks have about them?"

6 8

GUI volume control/mixer in C6??
by Fred 04 Mar '13

04 Mar '13

Just bringing up a Centos-6 (x86_64, FWIW) and I can't find the mixer app... on my C5 box(es), double click on the speaker icon in the top panel and I get a mixer app appears on the screen. My new C6 box doesn't do that. I've installed all the PULSEAUDIO RPMS I can find, but still nothing. what am I missing here? thanks! Fred

8 15

problems with .forward
by Robert Moskowitz 04 Mar '13

04 Mar '13

My old Centos 5.5 servers had a /root/.forward to send things like logwatch to this email account. It did not take any special configuration in sendmail for this to work. Now Centos 6.3 is using postfix (as we well know, and generally I am happy for this) and I have set up the /root/.forward as always, but it seems like postfix is ignoring it. I have restarted postfix with no difference in behaviour. /root/.forward contains the single line without ending in <cr> (I have tested with <cr> at the end as well: rgm(a)htt-consult.com 'host htt-consult.com' responses with: htt-consult.com mail is handled by 10 klovia.htt-consult.com. For the testing from my regular account I run: mail -s Test root < /dev/null /var/log/maillog shows: Mar 4 10:16:04 onlo postfix/pickup[30442]: 911731400CE: uid=500 from=<rgm> Mar 4 10:16:04 onlo postfix/cleanup[30526]: 911731400CE: message-id=<20130304151604.911731400CE(a)onlo.htt-consult.com> Mar 4 10:16:04 onlo postfix/qmgr[30443]: 911731400CE: from=<rgm(a)onlo.htt-consult.com>, size=471, nrcpt=1 (queue active) Mar 4 10:16:04 onlo postfix/local[30528]: 911731400CE: to=<root(a)onlo.htt-consult.com>, orig_to=<root>, relay=local, delay=0.15, delays=0.08/0.01/0/0.06, dsn=2.0.0, status=sent (delivered to mailbox) Mar 4 10:16:04 onlo postfix/qmgr[30443]: 911731400CE: removed You have mail in /var/spool/mail/root Does anyone else use the .forward file? This should work. Of course I can modify the alias file for postfix, but .forward was always 'easier' to configure. If I have to plow through the postfix docs for this, I will, but I would think this should work.

6 12

Re: [CentOS] Centos6 ipsec troubles
by Leon Fauster 04 Mar '13

04 Mar '13

Am 04.03.2013 um 17:41 schrieb Steve Clark <sclark(a)netwolves.com>: > On 03/04/2013 10:45 AM, Riccardo Veraldi wrote: >> Hello, >> it looks like the usual way to do ipsec on centos5 won't work anymore on >> centos6 >> >> I installed ipsec-tools but an interface type IPsec is not recognized by >> the kernel >> >> ifup ipsec0 >> Device does not seem to be present, delaying initialization. >> >> >> I am not planning to use the awful OpenSwan, I Want to sue the Kame >> implementation which was working fine on CentOS5 >> >> any hints ? >> >> thank you >> >> Rick >> _______________________________________________ >> CentOS mailing list >> CentOS(a)centos.org >> http://lists.centos.org/mailman/listinfo/centos >> > Hmm... > > I have been using ipsec-tools on linux for a long time and was never had it create and ipsec0 device. > > Only when I was using FreeSwan years ago, did I see and ipsec device. this is specific to rhel5 - they have /etc/sysconfig/network-scripts/ifup-ipsec for that. in rhel6 this possibility was replaced https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/h… -- LF

1 0

OT? : Big Yellow Cursor
by Beartooth 04 Mar '13

04 Mar '13

Last time I had a machine running CentOS (6.2 iirc) I had managed to get a big yellow arrow to show the mouse cursor. It was wonderful. Now I have machines running Fedora (17 & 18) and Puppy (5.0) -- and I need cursor symbols that my antiquated eyeballs can spot even through trifocals. Can anyone tell me a way to get my arrow back?? -- Beartooth Sciurivore, Curmudgeon On Line Viruses, trojans, and spyware, Oh My!

3 3

Re: [CentOS] Not installing avahi in a kickstart install
by Robert Moskowitz 04 Mar '13

04 Mar '13

On 03/03/2013 04:39 PM, Reindl Harald wrote: > > Am 03.03.2013 22:35, schrieb Robert Moskowitz: >> In the packages section of my kickstart I have: >> >> -avahi >> >> and I am still getting avahi and all of its rpms installed. I don't >> want avahi on my servers, how do I specify in a kickstart to NOT install it? > do not install packages which requires avahi? > which they are? > > try "yum remove avahi" and see what it lists after install.... > The list is too long. It includes firstboot! Easier just to disable it after install as I have been doing. Just thought I could prevent it from installing in the first place. I can put a %post in to turn it off at least.

3 3

Re: [CentOS] preventing apache from being a mail relay
by James B. Byrne 04 Mar '13

04 Mar '13

On Sun, March 3, 2013 18:57, Eddie G. O'Connor Jr. wrote: > If / when I get the guts to build my own Apache web server...I would > think that the ONLY way to do it would be to document > EVERYTHING....sort > of as a "Just-In-Case" policy?....or is it only after you've built > it?...and when you make CHANGES to your server....THAT'S when you > document everything?.... > The workflow I have adopted with respect to system administration is to use a project management application, such as Trac (originally) or Redmine/ChileProject (currently), and to open an issue for each activity that I perform on any of my servers. Therein I record the motivation for the activity, the desired and intended result, and log my time. I also record each problem that is encountered, solutions as they are found, and insights as they are revealed. I attach configuration files, copies of related email messages, and make any notes right on the issue. As Redmine allows full-text case-insensitive searches I can usually find in fairly short order the details about anything I have done that I can at least dimly recall doing. I add subsequent maintenance events either directly to the original issue or create a new issue and link that to the original. While hardly perfect this practice has saved my behind on several occasions. In fact I would recommend that one document each package install from the initial selection of the software and go on from there. I have had occasion where the question asked of me was "why was this package selected instead of that package?" Having the answer to hand along with the evidence has short-circuited the blame-game on at least one occasion. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Tomcat query from complete newbie
by Timothy Murphy 04 Mar '13

04 Mar '13

I'm a complete tomcat beginner - (I installed it on my CentOS-6.3 server this morning.) According to the web-interface on port 8080 tomcat is running fine. Basically, I want to allow a Java program I have written (which works well) to be run over the internet. This is to test students understanding of Turing machines. The student has to enter a short "program" (consisting of 20-80 "quadruples"). My program will then test if the program does what it is meant to do. So the student enters his program (about 1k), eg by pasting from a file - the program should then run, and the student should see what it outputs. I'm looking for advice on the best way to set this up. As I understand it, tomcat can either be run "standalone" or "behind apache". I am running httpd on the server, so either method should be available. It seems that the standalone option is simpler, so I would probably prefer that. Any and all suggestions gratefully received.

3 3

acrobat reader for x86_64?
by Fred Smith 04 Mar '13

04 Mar '13

Adobe doesn't seem to have acroread for x86_64 linux, or at least I don't see it anywhere. Anybody know otherwise? Evince and other tools work pretty well, but I have always liked having the "real thing" around for those occasions when they don't. -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- I can do all things through Christ who strengthens me. ------------------------------ Philippians 4:13 -------------------------------

7 9

preventing apache from being a mail relay
by Robert Moskowitz 04 Mar '13

04 Mar '13

I am trying to recall back at least 2 years, and my notes are poor, and my searching appears to be worst... Seems I recall that last when I set up my apache server, the spammers were posting to it so it would send out the spam on port 25. There was some conf that I did to block this, but I did not document it, and I can't find any reference to this. I don't think my memory is that bad, but it IS sunday... I don't want to put up this new server and have it flooding the world with spam and then get the server blocked. So do I remember correctly that this was a problem? Is it still, and how is this prevented? Thanks. Am putting up better notes this time around.

5 7

Centos6.4 via CR-repo; boot problems
by jvermeulen 04 Mar '13

04 Mar '13

Dear All, after updating to Centos6.4 via cr-repo, my laptop hangs on: starting crond : ok I booted in single user mode but I'm not sure what to change .... The laptop is an older MSI, hardware details attached. what could be the issue here? greetings, J.

7 13

Re: [CentOS] preventing apache from being a mail relay
by Robert Moskowitz 03 Mar '13

03 Mar '13

On 03/03/2013 04:33 PM, Reindl Harald wrote: > > Am 03.03.2013 22:30, schrieb Robert Moskowitz: >> I am trying to recall back at least 2 years, and my notes are poor, and >> my searching appears to be worst... >> >> Seems I recall that last when I set up my apache server, the spammers >> were posting to it so it would send out the spam on port 25. There was >> some conf that I did to block this, but I did not document it, and I >> can't find any reference to this > what are you speaking about? > apache is a WEBSERVER and has NOTHING to do with email There was an attack, and if you search you will find references to it, where the spammers post to your web server in such a way that they relay out port 25. They send to your port 80, but you send out port 25. For example: http://forums.fedoraforum.org/archive/index.php/t-173601.html My old server has been running smoothly for over two years, but it is time to bring the software current. I did all the work on this back then, or maybe before and copied from my earlier server. This time I am trying to build everything clean and document every change I make.

4 5

Strange behavior from software RAID
by Harold Pritchett 03 Mar '13

03 Mar '13

Somewhere, mdadm is cacheing information. Here is my /etc/mdadm.conf file: more /etc/mdadm.conf # mdadm.conf written out by anaconda DEVICE partitions MAILADDR root ARRAY /dev/md0 level=raid1 num-devices=4 metadata=0.90 UUID=55ff58b2:0abb5bad:42911890:5950dfce ARRAY /dev/md1 level=raid1 num-devices=2 metadata=0.90 UUID=315eaf5c:776c85bd:5fa8189c:68a99382 ARRAY /dev/md2 level=raid1 num-devices=2 metadata=0.90 UUID=5b017f95:b7e266cc:f17a7611:8b752a02 ARRAY /dev/md3 level=raid1 num-devices=2 metadata=0.90 UUID=4cc310ee:60201e16:c7017bd4:9feea350 ARRAY /dev/md4 level=raid1 num-devices=2 metadata=0.90 UUID=ea205046:3c6e78c6:ab84faa4:0da53c7c After a system re-boot, here is the contents of /proc/mdstat # cat /proc/mdstat Personalities : [raid1] md125 : active raid1 sdc3[0] 455482816 blocks [2/1] [U_] md0 : active raid1 sdd1[3] sdc1[0] sdb1[1] sda1[2] 1000320 blocks [4/4] [UUUU] md127 : active raid1 sdd3[1] sdb3[0] 971747648 blocks [2/2] [UU] md3 : active raid1 sdf1[1] sde1[0] 1003904 blocks [2/2] [UU] md4 : active raid1 sdf3[1] sde3[0] 1948491648 blocks [2/2] [UU] md1 : active raid1 sda3[1] 455482816 blocks [2/1] [_U] unused devices: <none> There are six physical disks in this system: Disk /dev/sda: 500.1 GB, 500107862016 bytes Disk /dev/sdb: 1000.2 GB, 1000204886016 bytes Disk /dev/sdc: 500.1 GB, 500107862016 bytes Disk /dev/sdd: 1000.2 GB, 1000204886016 bytes Disk /dev/sde: 2000.3 GB, 2000398934016 bytes Disk /dev/sdf: 2000.3 GB, 2000398934016 bytes I used mdadm --examine /dev/sda1 to find the internal UUID for each of the physical volumes making up these volume groups /dev/sda1: Magic : a92b4efc Version : 0.90.00 UUID : 55ff58b2:0abb5bad:42911890:5950dfce /dev/sdb1: Magic : a92b4efc Version : 0.90.00 UUID : 55ff58b2:0abb5bad:42911890:5950dfce /dev/sdc1: Magic : a92b4efc Version : 0.90.00 UUID : 55ff58b2:0abb5bad:42911890:5950dfce /dev/sdd1: Magic : a92b4efc Version : 0.90.00 UUID : 55ff58b2:0abb5bad:42911890:5950dfce /dev/sda3: Magic : a92b4efc Version : 0.90.00 UUID : 315eaf5c:776c85bd:5fa8189c:68a99382 /dev/sdc3: Magic : a92b4efc Version : 0.90.00 UUID : 315eaf5c:776c85bd:5fa8189c:68a99382 /dev/sdb3: Magic : a92b4efc Version : 0.90.00 UUID : 5b017f95:b7e266cc:f17a7611:8b752a02 /dev/sdd3: Magic : a92b4efc Version : 0.90.00 UUID : 5b017f95:b7e266cc:f17a7611:8b752a02 /dev/sde1: Magic : a92b4efc Version : 0.90.00 UUID : 4cc310ee:60201e16:c7017bd4:9feea350 /dev/sdf1: Magic : a92b4efc Version : 0.90.00 UUID : 4cc310ee:60201e16:c7017bd4:9feea350 /dev/sde3: Magic : a92b4efc Version : 0.90.00 UUID : ea205046:3c6e78c6:ab84faa4:0da53c7c /dev/sdf3: Magic : a92b4efc Version : 0.90.00 UUID : ea205046:3c6e78c6:ab84faa4:0da53c7c As you can see, the UUID on the various PVs match the values in the /etc/mdadm.conf file. My question is What the heck is going on. When I boot the system, I end up with two unexpected, unconfigured volume groups. Where the heck are /dev/md125 and /dev/md127 coming from? They don't appear in /etc/mdadm.conf and if I re-boot they keep coming back. It appears that somewhere mdadm is keeping information. How can I get rid of it so the mdadm.conf file is used. Harold

3 2

Not installing avahi in a kickstart install
by Robert Moskowitz 03 Mar '13

03 Mar '13

In the packages section of my kickstart I have: -avahi and I am still getting avahi and all of its rpms installed. I don't want avahi on my servers, how do I specify in a kickstart to NOT install it?

1 0

Re: [CentOS] Strange behavior from software RAID
by Harold Pritchett 03 Mar '13

03 Mar '13

Here I am following up on my own post... It occurred to me that all of this stuff must be magic. How does it work when the mdadm.conf file is on a raid/LVM volume which is not available at boot time? I looked in the /boot filesystem, the only one which is available at boot time and there is nothing there, unless this data is actually saved in one of the kernel modules or other binary files... Harold

2 1

EDNS support
by Robert Moskowitz 03 Mar '13

03 Mar '13

I am having problems with EDNS support on a few Centos 6.3 bind servers. I am trying to determine if the problem is my Juniper SSG5 firewall of Centos. All the servers have firewall enabled, though I have tested with stopping iptables and ip6tables. I am using tests from: https://www.dns-oarc.net/oarc/services/replysizetest dig @localhost +short rs.dns-oarc.net txt gets: ;; Truncated, retrying in TCP mode. Is anyone here running bind on their server and can run this command from the server? If you are not getting this truncation, then my problem is the firewall. If you are, then either you have figured out the majic for Centos or something like that...

3 5

installaing CentOS 6.3
by Daniel Robinson 03 Mar '13

03 Mar '13

I have a question about which ISO to use to install CentOS 6.3. I have installed it before from a USB stick, and when I did, I got a installation package selection menu. I overwrote that USB with something else, and I work out which ISO is the with that configuration option. When I installed it before, I had the opportunity to select from among the options listed here. http://unix.stackexchange.com/questions/20379/centos-6-default-installation… Yes, I know that I can just use yum to get the things I want, but I would like to set up a USB stick like the one I had before that can be used for multiple installations. One thing that changed is that when I installed it before, I set it up on a 350 GB partition, and I have it now on a 100 GB partition. I don't know if the install script is looking at partition size to decide the options available. I would think not. Any help would be appreciated. Thanks, Dan -- ----------------------- daniel g. robinson www.bornlivelovedie.com bornlivelovedie.tumblr.com @daguro

2 1

Please help: Any way to query host membership in nested ldap groups?
by Gelen James 02 Mar '13

02 Mar '13

Hi all, I have a openldap server setup with netsted netgruops,. Say the netgroups are: ngA: (host1, -, - ), (host2, -, - ) ngB: ngA, (host3, - - ) ngc: ngB, (host4, -, -) Is there a way to find host1's membership? so that I can return: ngA, ngB, ngC? Thanks a lot. --Rob

2 1

LDAP users/groups not showing up with nis, pam, & ldap
by Wes Modes 02 Mar '13

02 Mar '13

I am trying to configure NIS, PAM, & LDAP on a CentOS 6.2 host. I've previously installed a similar configuration on RHEL4, but CentOS now uses nss-pam-ldapd and nslcd instead of nss_ldap, so the configurations are a little different. Currently, local users and groups are showing up but not LDAP users. When I do a /getent passwd/ and/getent group/ I don't get LDAP users. When I do a listing of a share directory that should have user and group ownership determined by LDAP, I get the uidNumbers and gidNumbers rather than the UIDs and GIDs. [root@edgar2 openldap]# ls -l /data/home | tail drwx------. 2 30634 30080 4096 Mar 18 2009 userdir1 drwx------. 33 30548 30075 4096 Jan 29 15:20 userdir2 drwx------. 3 30554 30075 4096 Jan 26 2009 userdir3 drwx------. 12 30467 30075 4096 Jun 21 2012 userdir4 drwx------. 4 30543 30075 4096 Oct 21 2008 userdir5 drwx------. 8 30555 30075 4096 Oct 31 10:36 userdir5 Other details: centos 6.2, smbldap-tools 0.9.6, openldap 2.4.23 I've fussed with /etc/nsswitch.conf, /etc/pam_ldap.conf, /etc/nslcd.conf, /etc/pam.d/system-auth, and /etc/sysconfig/authconfig. And selinux is off. I know the machine is successfully connecting to LDAP. An ldapsearch works from this machine, and I can even connect to a samba share with an ldap login through smbclient. Relevant parts of /etc/nsswitch: passwd: files ldap shadow: files ldap group: files ldap #hosts: db files nisplus nis dns hosts: files dns bootparams: nisplus [NOTFOUND=return] files ethers: files netmasks: files networks: files protocols: files ldap rpc: files services: files ldap netgroup: nisplus ldap #netgroup: ldap publickey: nisplus automount: files nisplus ldap #automount: files ldap aliases: files nisplus Relevant parts of /etc/pam_ldap.conf (everything else is commented out): host dir1.ourdomain.com base dc=.ourdomain,dc=com #uri ldaps://dir1.ourdomain.com uri ldap://dir1.ourdomain.com # basic auth config binddn cn=admin,dc=ourdomain,dc=com rootbinddn cn=admin,dc=ourdomain,dc=com # random stuff #timelimit 120 #bind_timelimit 120 #bind_policy hard # brought these times down wmodes Aug 11, 2008 timelimit 30 bind_timelimit 30 bind_policy soft idle_timelimit 3600 nss_initgroups_ignoreusers root,ldap # pam config #pam_password md5 pam_password md5 # config for nss nss_base_passwd ou=people,dc=ourdomain,dc=com?one nss_base_shadow ou=people,dc=ourdomain,dc=com?one nss_base_group ou=group,dc=ourdomain,dc=com?one # OpenLDAP SSL mechanism # start_tls mechanism uses the normal LDAP port, LDAPS typically 636 ssl no # OpenLDAP SSL options # Require and verify server certificate (yes/no) #tls_checkpeer yes # CA certificates for server certificate verification tls_cacertfile /etc/openldap/cacerts/cacert.pem tls_cacertdir /etc/openldap/cacerts # Client certificate and key tls_cert /etc/openldap/cacerts/servercert.pem tls_key /etc/openldap/cacerts/serverkey.pem Relevant parts of /etc/pam.d/system-auth: auth required pam_env.so auth sufficient pam_fprintd.so auth sufficient pam_unix.so nullok try_first_pass auth requisite pam_succeed_if.so uid >= 500 quiet auth sufficient pam_ldap.so use_first_pass auth required pam_deny.so account required pam_unix.so account sufficient pam_localuser.so account sufficient pam_succeed_if.so uid < 500 quiet account [default=bad success=ok user_unknown=ignore] pam_ldap.so account required pam_permit.so password requisite pam_cracklib.so try_first_pass retry=3 type= password sufficient pam_unix.so sha512 shadow nullok try_first_pass use_authtok password sufficient pam_ldap.so use_authtok password required pam_deny.so session optional pam_keyinit.so revoke session required pam_limits.so session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid session required pam_unix.so session optional pam_ldap.so session optional pam_mkhomedir.so skel=/etc/skel umask=077 And the only line in /etc/sysconfig/authconfig I changed was: USELDAP=yes Any thoughts? For those who are experienced with nis and pam, I'm sure this is a no brainer, but I could sure use the little bit of your brain that knows how to fix this. Wes -- Wes Modes Systems Designer, Developer, and Administrator University Library ITS University of California, Santa Cruz

4 4

running yum update on remote servers
by Robert Moskowitz 02 Mar '13

02 Mar '13

I have read a couple old threads here on updates for servers, and I am looking for some mechanics to getting the actual updates done. I don't want automatic updates; I want to control when and what gets updated. First I have to determine that a particular server needs updates. I suppose a daily script that would run "yum check-updates' and emails me the results could work, but then I would only want the email IF there was something to update, at my limited use of this option does not show anything to trigger a notify on changes. Does anyone know of a script that would do this? Then there is the actual update. I learned long ago NOT to run yum over an SSH connection, as WHEN that connection breaks in the middle of an update, you can have quite a problem to clean up. All I have done todate is to start vncserver and connect via vnc to then run yum. I can even drop the vnc connection and come back later to check results. I have considered running yum disconnected (? when you end a command with &) and log the results to a file that you check later. What are practical approaches to this? I only have a few servers here to manage.

13 24

can not login to server (use ssh)
by mcclnx mcc 02 Mar '13

02 Mar '13

we have CENTOS 5.6 on DELL server. I tried to use ssh login to server and failed: ssh oracle@ora10 oracle@ora10's password: Read from remote host ora10: Connection reset by peer Connection to ora10 closed. I have not problem login as "root" or other users. Is it possible too many processes run by "oracle" and don't allow me login. I check server current have 2000 oracle processes running. $ ps -ef|grep oracle|wc -l 2000 anyone know how to fix this issue? Thanks.

4 5

What can I do to UNDERSTAND why I can't reach centos.org (but everyone else can)?
by Rock 02 Mar '13

02 Mar '13

What can I do to UNDERSTAND why, periodically, I can't reach www.centos.org (but everyone else can)? Every few months, http://www.centos.org just drops off for me and for me only. It's not the web site, because I can reach it via a proxy (e.g., TOR browser bundle) and other tests show it to be alive (e.g., http://www.downforeveryoneorjustme.com/centos.org or http://traceroute.monitis.com) But, for me, I just can't reach it by any means. Mike Easter kindly determined "centos.org does not echo ICMP or UDP pings, only TCP, and its associated netblock level3 doesn't echo UDP, but does echo ICMP and TCP." But, for me, this is what a traceroute returned just now on Centos: $ traceroute www.centos.org ... early hops removed ... 16 ae-6-6.ebr2.LosAngeles1.Level3.net (4.69.148.201) 211.850 ms ae-3-3.ebr3.Dallas1.Level3.net (4.69.132.78) 205.221 ms ae-6-6.ebr2.LosAngeles1.Level3.net (4.69.148.201) 207.392 ms 17 ae-3-3.ebr3.Dallas1.Level3.net (4.69.132.78) 128.453 ms ae-73-73.csw2.Dallas1.Level3.net (4.69.151.145) 160.451 ms ae-93-93.csw4.Dallas1.Level3.net (4.69.151.169) 160.437 ms 18 ae-83-83.csw3.Dallas1.Level3.net (4.69.151.157) 165.923 ms ae-1-60.edge3.Dallas1.Level3.net (4.69.145.8) 165.920 ms 178.414 ms 19 LAYERED-TEC.edge3.Dallas1.Level3.net (4.71.170.6) 241.537 ms 244.324 ms ae-3-80.edge3.Dallas1.Level3.net (4.69.145.136) 244.318 ms 20 * LAYERED-TEC.edge3.Dallas1.Level3.net (4.71.170.6) 244.291 ms 244.250 ms 21 * * * 22 * * * 23 * * * 24 * * * 25 * * * 26 * * * 27 * * * 28 * * * 29 * * * 30 * * * Here is a screenshot (modified to remove early hops) using mtr: $ mtr www.centos.org http://www2.picturepush.com/photo/a/12303130/img/12303130.png My related questions are: 1. What can I do (on Centos) to UNDERSTAND this problem? 2. Why does this problem happen every few months to me (and to just me)? 3. How can the net be this arbitrary and still work?

9 28

Re: [CentOS] CentOS 6.4 in the making perhaps?
by Timothy Murphy 02 Mar '13

02 Mar '13

Sorin Srbu wrote: >> > Is CentOS 6.4 brewing yet then? 8-) ... > Hey! We need an exact date!! ;-) > > Nah, just kidding. It will be released when ready, right. I can wait. I have two servers running CentOS-6.3. On one of them I had (inadvertently) enabled the CentOS-CR repository. I noticed that there were a huge number of updates (over 400 packages) from this repository yesterday. I'm wondering if I disabled it now, would that cause confusion with subsequence updates? I'm also wondering if I leave it enabled, is the danger that the system will stop running negligible? (The machine is in another country, so surgery would be difficult!) -- Timothy Murphy e-mail: gayleard /at/ eircom.net tel: +353-86-2336090, +353-1-2842366 s-mail: School of Mathematics, Trinity College Dublin

3 4

autofs and LDAP automount maps
by Tim Gustafson 01 Mar '13

01 Mar '13

Hi, We've been using autofs and LDAP automount maps for years now, and it has worked well. We run an environment that has CentOS, RHEL, Solaris and FreeBSD servers and clients. Historically, all our automount maps have looked like this: -vers=3 server:/export/home/& However, we're switching to NFSv4 and therefore we need to remove the -vers=3 flag. For CentOS 6.3, Solaris and FreeBSD clients, this causes them to mount with NFSv4, which is their default. However, the CentOS 5.x boxes are still defaulting to NFSv3 instead. Looking in /etc/sysconfig/autofs, I see a setting for "OPTIONS", but I'm not sure if those are mount options or what. Is there any way to cause CentOS 5.x to default to NFSv4 when using autofs? -- Tim Gustafson tjg(a)ucsc.edu 831-459-5354 Baskin Engineering, Room 313A

1 0

ssh debug
by Markus Falb 01 Mar '13

01 Mar '13

Hi, I try to understand the debug messages from ssh $ ssh -vv whateverhost ... debug1: SSH2_MSG_KEXINIT sent debug1: SSH2_MSG_KEXINIT received ... debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160(a)openssh.com,hmac-sha1-96,hmac-md5-96 debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160(a)openssh.com,hmac-sha1-96,hmac-md5-96 debug2: kex_parse_kexinit: none,zlib(a)openssh.com,zlib debug2: kex_parse_kexinit: none,zlib(a)openssh.com,zlib debug2: kex_parse_kexinit: debug2: kex_parse_kexinit: debug2: kex_parse_kexinit: first_kex_follows 0 debug2: kex_parse_kexinit: reserved 0 … why are some log entries duplicated? Is it a bug? And how can I tell if it is telling me capabilities of the client or of the server? -- Kind Regards, Markus

1 0

CentOS-announce Digest, Vol 97, Issue 1
by centos-announce-request＠centos.org 01 Mar '13

01 Mar '13

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2013:0568 Important CentOS 5 dbus-glib Update (Johnny Hughes) 2. CEBA-2013:0575 CentOS 5 libvirt Update (Johnny Hughes) 3. CESA-2013:0581 Moderate CentOS 5 libxml2 Update (Johnny Hughes) 4. CESA-2013:0580 Moderate CentOS 5 cups Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 1 Mar 2013 00:41:40 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0568 Important CentOS 5 dbus-glib Update To: centos-announce(a)centos.org Message-ID: <20130301004140.GA20895(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0568 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0568.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 0223ca642952e05ebc211d0a4c70d384c940ac27b099bc3d75b54ca68f9c0f90 dbus-glib-0.73-11.el5_9.i386.rpm 62777a9ce986e177104fe0e1a0f0426f301da6507598d498e9ce33fe2393455a dbus-glib-devel-0.73-11.el5_9.i386.rpm x86_64: 0223ca642952e05ebc211d0a4c70d384c940ac27b099bc3d75b54ca68f9c0f90 dbus-glib-0.73-11.el5_9.i386.rpm 04b24df1ce6e666a9270a596a472f35feeaf6b838b8c243d4a84b9ca24de2520 dbus-glib-0.73-11.el5_9.x86_64.rpm 62777a9ce986e177104fe0e1a0f0426f301da6507598d498e9ce33fe2393455a dbus-glib-devel-0.73-11.el5_9.i386.rpm 884d110f0c5379c6ca1fffdfbba09f54d92945dd81e6d212139189c113a20f57 dbus-glib-devel-0.73-11.el5_9.x86_64.rpm Source: 35b7f75cbbb1386b4e632c74925555778b07f0701066f92bc336f5e52f6c6fc9 dbus-glib-0.73-11.el5_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Fri, 1 Mar 2013 00:43:34 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2013:0575 CentOS 5 libvirt Update To: centos-announce(a)centos.org Message-ID: <20130301004334.GA21032(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2013:0575 Upstream details at : https://rhn.redhat.com/errata/RHBA-2013-0575.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 5d226b37e3a94f164d50aef45b3f6b7b0a64788404270fe021f5c6efc9e37dba libvirt-0.8.2-29.el5_9.1.i386.rpm 0a581b651ae75683f2448834b6bf2121d8ce2387c496bbced6999680a2202f83 libvirt-devel-0.8.2-29.el5_9.1.i386.rpm a8ff6a0b9fef2f20c5901bedaa2cb23d7d2350f607e9d04c8fe40949990f8540 libvirt-python-0.8.2-29.el5_9.1.i386.rpm x86_64: 5d226b37e3a94f164d50aef45b3f6b7b0a64788404270fe021f5c6efc9e37dba libvirt-0.8.2-29.el5_9.1.i386.rpm f0d871e9abda492ba0bfb48ae25a0c0594d73c361a95464a5511c4779c844f0d libvirt-0.8.2-29.el5_9.1.x86_64.rpm 0a581b651ae75683f2448834b6bf2121d8ce2387c496bbced6999680a2202f83 libvirt-devel-0.8.2-29.el5_9.1.i386.rpm 5fea1922e24b927f92abe455120d70bbee8251374af868c7af90c7ccee4e8bf5 libvirt-devel-0.8.2-29.el5_9.1.x86_64.rpm 7456a0536afef03552b2b92293017e8bae17fc60536dcd3bf4a6053e62628ba6 libvirt-python-0.8.2-29.el5_9.1.x86_64.rpm Source: 5ca698b978950796c6098fb3c1d3ce8dd7f4f963663daa068cd744b3a4331a41 libvirt-0.8.2-29.el5_9.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Fri, 1 Mar 2013 00:45:13 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0581 Moderate CentOS 5 libxml2 Update To: centos-announce(a)centos.org Message-ID: <20130301004513.GA21167(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0581 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0581.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 37744da0abe7d75464da9498d9ad2575c550e875cf068f0d00e30d8c9221b0b5 libxml2-2.6.26-2.1.21.el5_9.1.i386.rpm 4a444273456b1fdba7330b37e6033715b7d471530e14c2d6f0e516fc6897f205 libxml2-devel-2.6.26-2.1.21.el5_9.1.i386.rpm 144b9741b82d70cb82de090609482987d34d6cdac657a9fbb9954f569cbdbaa0 libxml2-python-2.6.26-2.1.21.el5_9.1.i386.rpm x86_64: 37744da0abe7d75464da9498d9ad2575c550e875cf068f0d00e30d8c9221b0b5 libxml2-2.6.26-2.1.21.el5_9.1.i386.rpm a68601aad7a108fc5dce83d8d107a8e4850afcd58e378360a34123b6b639435b libxml2-2.6.26-2.1.21.el5_9.1.x86_64.rpm 4a444273456b1fdba7330b37e6033715b7d471530e14c2d6f0e516fc6897f205 libxml2-devel-2.6.26-2.1.21.el5_9.1.i386.rpm f528e385046af9543854df65f50ab7214e2d62812752e52f3a2e98712ad4c268 libxml2-devel-2.6.26-2.1.21.el5_9.1.x86_64.rpm cbe3c0ecbe4dd9f6696e440617862ee876999b7f4c3d7eab36214aee74008d01 libxml2-python-2.6.26-2.1.21.el5_9.1.x86_64.rpm Source: 30a7bb607148784ac9bf6e76a4ab1914df94d4a2cbf2f5d23c7a4665aeef99c7 libxml2-2.6.26-2.1.21.el5_9.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Fri, 1 Mar 2013 10:00:14 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0580 Moderate CentOS 5 cups Update To: centos-announce(a)centos.org Message-ID: <20130301100014.GA16247(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0580 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0580.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 01fcf6e5d2d17403e58945ea9e3c6b9169d478850a16862fd73615e44eeae598 cups-1.3.7-30.el5_9.3.i386.rpm 54bf5c1b7a4018e77c45877979a5ced5709e46aa4734773695c8fe59c9525e77 cups-devel-1.3.7-30.el5_9.3.i386.rpm cf700a7effa3ffa53b5ca1ccdecc69a4306efc2dd1abc25865a8cc816ba776b9 cups-libs-1.3.7-30.el5_9.3.i386.rpm 48db4fe49ae0c17df7c8e3a35e4546c1a5e5cdef4fe08f0ab74b963001f73fae cups-lpd-1.3.7-30.el5_9.3.i386.rpm x86_64: eb4594812053434feb5567fcbb03d9b88a8065e03df933933560ce36dea1023f cups-1.3.7-30.el5_9.3.x86_64.rpm 54bf5c1b7a4018e77c45877979a5ced5709e46aa4734773695c8fe59c9525e77 cups-devel-1.3.7-30.el5_9.3.i386.rpm a21686b2db1b3dbf9ea742680b86a30275c6334ee80b53b680d6be34c0cbbc9f cups-devel-1.3.7-30.el5_9.3.x86_64.rpm cf700a7effa3ffa53b5ca1ccdecc69a4306efc2dd1abc25865a8cc816ba776b9 cups-libs-1.3.7-30.el5_9.3.i386.rpm 4de955b40a9d352888834671776e44a7b6e512ed8625bb5fc5c32bc1268c18bd cups-libs-1.3.7-30.el5_9.3.x86_64.rpm 42361f5d747d7d8b879916670a1d4ec1d80ab27450790d08432f41462d376d6d cups-lpd-1.3.7-30.el5_9.3.x86_64.rpm Source: ad817337971593f0df4637ad6852a5b2c4007ec9f916ca6a47618d29adecaa95 cups-1.3.7-30.el5_9.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 97, Issue 1 **********************************************

1 0

Re: [CentOS] CentOS 6.4 in the making perhaps?
by Johnny Hughes 01 Mar '13

01 Mar '13

On 02/28/2013 02:31 AM, Sorin Srbu wrote: > I see Johnny Hughes has released CR-updates for CentOS 6. > > Is CentOS 6.4 brewing yet then? 8-) Eventually, yes ... thats how it goes, right? We are working on the consolidated tree, spinning isos, QA'ing those, etc. CR is for access now, for those what want it ... the tree should be along soon. Not exactly sure when soon will be yet :)

2 1

Reorg of a RAID/LVM system
by Harold Pritchett 01 Mar '13

01 Mar '13

I have a system with 4 disk drives, two 512 Gb and two 1 Tb. It look like this: CentOS release 5.9 (Final) Disk /dev/sda: 500.1 GB, 500107862016 bytes Disk /dev/sdb: 1000.2 GB, 1000204886016 bytes Disk /dev/sdc: 500.1 GB, 500107862016 bytes Disk /dev/sdd: 1000.2 GB, 1000204886016 bytes ================================================================= Disk /dev/sda: 500.1 GB, 500107862016 bytes 16 heads, 63 sectors/track, 969021 cylinders Units = cylinders of 1008 * 512 = 516096 bytes Device Boot Start End Blocks Id System /dev/sda1 * 1 1985 1000408+ fd Linux raid autodetect /dev/sda2 1986 9923 4000752 82 Linux swap / Solaris /dev/sda3 9924 969021 483385392 fd Linux raid autodetect Disk /dev/sdb: 1000.2 GB, 1000204886016 bytes 255 heads, 63 sectors/track, 121601 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Device Boot Start End Blocks Id System /dev/sdb1 * 1 125 1004031 fd Linux raid autodetect /dev/sdb2 126 624 4008217+ 82 Linux swap / Solaris /dev/sdb3 625 121601 971747752+ fd Linux raid autodetect Disk /dev/sdc: 500.1 GB, 500107862016 bytes 255 heads, 63 sectors/track, 60801 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Device Boot Start End Blocks Id System /dev/sdc1 * 1 125 1004031 fd Linux raid autodetect /dev/sdc2 126 4096 31897057+ 82 Linux swap / Solaris /dev/sdc3 4097 60801 455482912+ fd Linux raid autodetect Disk /dev/sdd: 1000.2 GB, 1000204886016 bytes 255 heads, 63 sectors/track, 121601 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Device Boot Start End Blocks Id System /dev/sdd1 * 1 125 1004031 fd Linux raid autodetect /dev/sdd2 126 624 4008217+ 82 Linux swap / Solaris /dev/sdd3 625 121601 971747752+ fd Linux raid autodetect The four 1 GB partitions (sd[abcd]1) are configured as a RAID 1 array with a single ext4 filesystem mounted as /boot. Swap is Swap... the two smaller drives (sd[ac]3) partitions are configured as a RAID 1 array containing an LVM physical volume (md1). the two larger drives (sd[bd]3) are configured as a RAID 1 array containing an LVM physical volume (md2). # pvdisplay --- Physical volume --- PV Name /dev/md1 VG Name vg0 PV Size 434.38 GB / not usable 7.44 MB Allocatable yes PE Size (KByte) 32768 Total PE 13900 Free PE 7810 Allocated PE 6090 PV UUID z5QGpO-6bKP-k8xm-vUha-CWYj-dkjG-UaHAE5 --- Physical volume --- PV Name /dev/md2 VG Name vg0 PV Size 926.73 GB / not usable 12.31 MB Allocatable yes (but full) PE Size (KByte) 32768 Total PE 29655 Free PE 0 Allocated PE 29655 PV UUID RIliNF-SENU-O2S9-Qo4H-rtOC-2Yzr-7jzuB0 The two physical volumes are defined as a single volume group. # vgdisplay --- Volume group --- VG Name vg0 System ID Format lvm2 Metadata Areas 2 Metadata Sequence No 17 VG Access read/write VG Status resizable MAX LV 0 Cur LV 10 Open LV 10 Max PV 0 Cur PV 2 Act PV 2 VG Size 1.33 TB PE Size 32.00 MB Total PE 43555 Alloc PE / Size 35745 / 1.09 TB Free PE / Size 7810 / 244.06 GB VG UUID dKKD3L-pcHy-F8KQ-6qNX-vFye-tXdv-6Qs98W One of the 512 Gb drives is failing. What I want to do is to replace the two 512 Gb drives with 3 Tb drives, expand the RAID array on them and then expand the LVM PV contained therein. This much I can do. I then want to move all of the date from the other PV into this one, and remove the second PV, RAID array, and the two 1 Tb drives, leaving me with two 3 Tb drves, a large RAID array and a single PV containing everything (except the /boot and SWAP partitions.) What I'm not sure about is how to move the date from the second PV to the first so I can then delete the contents of the drive and physically remove them from the system leaving me with only the two 3 Tb drives. Help! Thanks Harold

2 1

Newer SANE packages for 5.9 ??
by fred smith 01 Mar '13

01 Mar '13

I just got a Canon Canoscan LiDE 210 scanner, which the SANE project pages say works "completely" with Sane. but what isn't obvious without a lot of digging is that the version of Sane in EL5 isn't new enough. it works fine with what's on my eeepc (Fedora 17) but not Centos 5.9. I've been messing around with building sane from source, but have not been fully successful, yet, so thought before butchering my system any further I should ask if anyone has (or can point me to) newer Sane packages for EL5?? Thanks! Fred -- ------------------------------------------------------------------------------- Under no circumstances will I ever purchase anything offered to me as the result of an unsolicited e-mail message. Nor will I forward chain letters, petitions, mass mailings, or virus warnings to large numbers of others. This is my contribution to the survival of the online community. --Roger Ebert, December, 1996 ----------------------------- The Boulder Pledge -----------------------------

3 6

drbd and el6
by John R Pierce 28 Feb '13

28 Feb '13

hey, I have an application for drbd replication between a pair of EL6 servers, and I just realized that drbd is no longer built in. googling found me this blog on doing it using ElRepo distributions... http://www.broexperts.com/2012/06/how-to-install-drbd-on-centos-6-2/ is that still best practice? or is there a better distribution? or really... my application is a BackupPC server replicating its backup volume to a standby server (hey, no backup is really a backup, unless there is a backup of the backup, right?). is there a better/alternate way of maintaining a mirror of a backupPC volume than drbd... the backup volume is initially 8TB and could well grow to 3 times that over time. its stored on an XFS file system, under LVM, on striped raid6 volumes. -- john r pierce 37N 122W somewhere on the middle of the left coast

10 14

remote logging with rsyslog
by Nelson Green 28 Feb '13

28 Feb '13

This is a similar post to one I've made on the rsyslog list that has received no responses after four days, so I figured I'd try here since the problem seems to be CentOS specific. This is also my second attempt to send it to this list as the first seems to have never showed up. I am trying to test remote logging between two CentOS 6.3 systems and unable to get the client logs to show up on the server, using the RELP module. First of all, the client is a stock install of CentOS 6.3 running rsyslog v5.8.10. I inherited the server, but the change logging that we keep indicates it is pretty much stock too, and it is v5.8.10 as well. On the server, I added to /etc/rsyslog.conf: $ModLoad imrelp $InputRELPServerRun 20514 And restarted the daemon: sudo service rsyslog restart Shutting down system logger: [ OK ] Starting system logger: [ OK ] On the client, I added to /etc/rsyslog.conf: $ModLoad omrelp $WorkDirectory /var/spool/rsyslog $ActionQueueType LinkedList $ActionQueueFileName syslogfwd $ActionQueueMaxDiskSpace 10g $ActionResumeRetryCount -1 $ActionQueueSaveOnShutdown on *.* :omrelp:xxx.xxx.xxx.xxx:20514 And restarted the daemon: sudo service rsyslog restart Shutting down system logger: [ OK ] Starting system logger: [ OK ] Nothing ever showed up on the server, so I started going through the troubleshooting steps, which includes running the client in foreground mode and logging debug output: sudo service rsyslog stop sudo /sbin/rsyslogd -dn > /tmp/rsyslog.debug However, as soon as the service started in the foreground, log entries began showing up on the server. But when I stop the foreground service and restart it as a background service, the log entries quit showing up at the server. I can change things around so that tcp is used instead of RELP, and everything works that way. The problem is specific to using RELP in the normal background mode. I also tested the above RELP configuration on two Debian Wheezy boxes, each running rsyslog v5.8.11, and everything worked as expected. So the problem seems to be specific to CentOS with RELP. Has anyone gotten this to work on CentOS? Thanks, Nelson

2 5

Re: [CentOS] CentOS 6.4 in the making perhaps?
by Nux! 28 Feb '13

28 Feb '13

On 28.02.2013 08:31, Sorin Srbu wrote: > I see Johnny Hughes has released CR-updates for CentOS 6. > > Is CentOS 6.4 brewing yet then? 8-) https://www.youtube.com/watch?v=N9lbCrjqMKw -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro

3 2

CentOS 6.4 in the making perhaps?
by Sorin Srbu 28 Feb '13

28 Feb '13

I see Johnny Hughes has released CR-updates for CentOS 6. Is CentOS 6.4 brewing yet then? 8-) -- BW, Sorin ----------------------------------------------------------- # Sorin Srbu [Sysadmin, Systems Engineer] # Dept of Medicinal Chemistry, Phone: +46 (0)18-4714482 >3 signals> GSM # Div of Org Pharm Chem, Mobile: +46 (0)70-4250229 # Box 574, Uppsala University, Fax: +46 (0)18-4714482 # SE-751 23 Uppsala, Sweden Visit: BMC, Husargatan 3, D5:512b # Web: http://www.orgfarm.uu.se ----------------------------------------------------------- # () ASCII ribbon campaign - Against html E-mail # /\ # # This message was not sent from an iProduct! # # MotD follows: # CentOS: In Service.

1 0

hp1213nf mfp printer driver in centos6.2
by Asok Mallick 28 Feb '13

28 Feb '13

Dear Sir, Please know me how to function hp 1213nf mfp printer (printer + scanner + fax + copy) in centOS 6.2. The computer shows the printer but cannot oprate. the message displayed "Missing printer driver" etc. This will be very helpful to me if anyone can inform me the technique to operate this printer in centOS 6.2. Thanking you, Yours faithfully, Asok mallick.

3 3

Samba authentication against 389 DS
by Todor Petkov 28 Feb '13

28 Feb '13

Hello, I am using Centos 6 with 389 DS. Everything is working, I can authenticate my users against it etc. Now I am trying to make Samba authenticate against the LDAP by following http://directory.fedoraproject.org/wiki/Howto:Samba However, it seems that Samba does not read the 'password' value, but 'sambaNTPassword'. I wrote in 389-DS mailing list and they said, that there is no way to make Samba read the 'password'. So I must end with two password (Samba and "normal" one). I can not sync them, since crypt algorithms are different and I can not just copy/paste the password to sambaNTPassword. Did someone else had this issue? I need some file sharing software (can be even a web application), which can authenticate against LDAP, so all the people have one password for authentication. Regards,

4 7

VNC server not reponding to external requests
by Neil Aggarwal 28 Feb '13

28 Feb '13

Hello everyone: I tried following the instructions on this page to set up a VNC server: http://wiki.centos.org/HowTos/VNC-Server I can telnet to port 5901 from the machine itself: # telnet 127.0.0.1 5901 Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. RFB 003.008 But, when I try to connect to it from the outside world, I get a connection timeout. My /etc/sysconfig/vncservers file does not have the -nolisten tcp nor the -localhost options so it should be configured to accept outside connections. Is there some default setting in the vncserver that I need to change to allow outside connections? Thanks, Neil -- Neil Aggarwal, (972)834-1565, http://UnmeteredVPS.net/centos Virtual private server with CentOS 6 preinstalled Unmetered bandwidth = no overage charges

9 22

SNAT Logging
by Antonio da Silva Martins Junior 27 Feb '13

27 Feb '13

Hi All, I'm running our network with an 10/8 IPv4 subnets, with an SNAT catch all rule on the iptables firewall to the world. Is there a pratical way to log each connection? Maybe an "automatic hotspot" wich will assign an "external" IP to each "internal" one, and log it. What are you using folks? Thanks, Antonio. -- +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Antonio S. Martins Jr. - Support Analyst | "Only The Shadow Knows | | Universidade Estadual de Maringá - Brasil| what evil lurks in the | | NPD - Núcleo de Processamento de Dados | Heart of Men!" | | E-Mail: asmartins(a)uem.br / shadow(a)uem.br | !!! Linux User: 52392 !!! | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ "Real Programmers don’t need comments — the code is obvious." -- Esta mensagem foi verificada pelo sistema de antivirus e acredita-se estar livre de perigo.

2 1

Is 6.4 out?
by m.roth＠5-cent.us 27 Feb '13

27 Feb '13

My manager was just asking me if it's out - he's just gotten a large number of updates on one of our systems, just now. Please note this is NOT INTENDED TO START ANOTHER IDIOT FLAMEWAR; I'm just asking for a clarification, given that I don't see anything on the CentOS site. mark mark

5 5

CentOS 6.4 i386 and x86_64 Packages Available in the Continuous Release (CR) Repository
by Johnny Hughes 27 Feb '13

27 Feb '13

The CentOS-6.4 Packages for the i386 and x86_64 Architectures are now available via the Continuous Release (CR) Repository. The CR Announcements for CentOS-6.4 can be viewed here: http://lists.centos.org/pipermail/centos-cr-announce/2013-February/thread.h… More information about the CR Repository and how to install it is available here: http://wiki.centos.org/AdditionalResources/Repositories/CR As explained in the above link, we are still doing advanced QA testing on CentOS-6.4 and there may be some minor changes before the final release. This "opt-in" CR Repo process allows earlier access to our best effort packages now while we complete the final CentOS-6.4 QA processes, spin the ISOs and create an installable tree. Thanks, Johnny Hughes

1 0

an rsync question
by m.roth＠5-cent.us 27 Feb '13

27 Feb '13

Is there any way to have rsync compare against a file with a *different* name? What I'd like to do is compare a vm - whatsit.img against a backup - whatsit.current, that's a symlink to whatsit.timestamp, and if different, *then* make the copy (which my script will then move to whatsit.newtimestamp, and change the symlink to point to the new one, then remove the old (or maybe save an older copy or two). So: backupdir \ whatsit.20130101 (backup of whatsit.img) whatsit.current -> whatsit.20130101 whatsit.20121201 After script w/ rsync backupdir \ whatsit.20130201 (backup of whatsit.img) whatsit.current -> whatsit.20130201 whatsit.20130101 mark

4 4

OT - 'IP' Security and Capturing Software
by Tom Brown 27 Feb '13

27 Feb '13

Hi After returning from a trip to discover the delights on being burgled i wonder if anyone has any experience of IP security camera(s) and software that can constantly record the stream? I have infrastructure that could store a few TB's of video data which should be plenty for a few weeks worth of recording thats attached to a CentOS 6 box. This would be purely for after the event viewing and in no way a preventative measure Anyone have any ideas? thanks

6 6

CentOS-announce Digest, Vol 96, Issue 11
by centos-announce-request＠centos.org 27 Feb '13

27 Feb '13

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2013:0558 CentOS 5 rpm Update (Johnny Hughes) 2. CEBA-2013:0559 CentOS 5 rgmanager Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 26 Feb 2013 16:05:54 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2013:0558 CentOS 5 rpm Update To: centos-announce(a)centos.org Message-ID: <20130226160554.GA16464(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2013:0558 Upstream details at : https://rhn.redhat.com/errata/RHBA-2013-0558.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: e1b9f740f247c2d2d5f12d994dfa20e060dd9cb4ecaf3f49a7178e3d269b1e5e popt-1.10.2.3-32.el5_9.i386.rpm 4754bbb37ef0cbbf93713f2c36db85bfd17b6ef4f20d592a2a326247c83b019e rpm-4.4.2.3-32.el5_9.i386.rpm 709aae2dcecd69d9f618ff2df6b2287a66ad19f70b49e71d6466b2728677f4f3 rpm-apidocs-4.4.2.3-32.el5_9.i386.rpm 0bf2abc1f4a4f8a5cd8c1b9640ae0dbc93ab494ca4871f74a1a6f92ad25004f1 rpm-build-4.4.2.3-32.el5_9.i386.rpm 7ca0a6635cc98a70b68f3d219634f7058d510fa94f0ff10094cf66a5a5133068 rpm-devel-4.4.2.3-32.el5_9.i386.rpm 639b54e492116f6ae6f5ad5d68b6369e0af9115ca19a4b7552cbd28af6abe0e9 rpm-libs-4.4.2.3-32.el5_9.i386.rpm 5311dcd963e3e5a886b667c8aaace683cb7d28cb74007e055c1af0920a6d2c7d rpm-python-4.4.2.3-32.el5_9.i386.rpm x86_64: e1b9f740f247c2d2d5f12d994dfa20e060dd9cb4ecaf3f49a7178e3d269b1e5e popt-1.10.2.3-32.el5_9.i386.rpm 2b80a4055de8dac4be3000e6e04c5413c975c30feeae12057a149944e93c571c popt-1.10.2.3-32.el5_9.x86_64.rpm b709444ee4c7009046de6d64616bc2769c7b9aa2b88018e2ac982c5bd8fe869c rpm-4.4.2.3-32.el5_9.x86_64.rpm 66e2627515c37e20400d202d5bff7eeee54737871ec0689d9c3cacfac88dbd25 rpm-apidocs-4.4.2.3-32.el5_9.x86_64.rpm df76ed1cb1d24996aecf644861f1f0ba7a309fc5ccdaaebf7f28cfb05fe52d53 rpm-build-4.4.2.3-32.el5_9.x86_64.rpm 7ca0a6635cc98a70b68f3d219634f7058d510fa94f0ff10094cf66a5a5133068 rpm-devel-4.4.2.3-32.el5_9.i386.rpm 990430a8952296ac879c0230071e0d3fbceab301265308ba10dd3af5d604a06e rpm-devel-4.4.2.3-32.el5_9.x86_64.rpm 639b54e492116f6ae6f5ad5d68b6369e0af9115ca19a4b7552cbd28af6abe0e9 rpm-libs-4.4.2.3-32.el5_9.i386.rpm 78d97ed81dd2bfb324611dc8b57ced8e74fbac94ba54e8b76a5db904939e3be3 rpm-libs-4.4.2.3-32.el5_9.x86_64.rpm 9a4ff6fd6ee5af2fe19a4a2ef59c8bf7e5e8af5576060c1f6134cf130e7d380e rpm-python-4.4.2.3-32.el5_9.x86_64.rpm Source: 042c0e851da369e1557facc1b87ecfeb6bd2b4a22dc9d767b7eedd44366428e5 rpm-4.4.2.3-32.el5_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 26 Feb 2013 16:28:33 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2013:0559 CentOS 5 rgmanager Update To: centos-announce(a)centos.org Message-ID: <20130226162833.GA16682(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2013:0559 Upstream details at : https://rhn.redhat.com/errata/RHBA-2013-0559.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 10d6ad046b53a8e55920ddb5ea4c34f09e9405250143d716021da5004b22a856 rgmanager-2.0.52-37.el5.centos.1.i386.rpm x86_64: cf91e9ffdc1ab8ae24a7dfba2216ccce1be18f478f472a413999aade839cec47 rgmanager-2.0.52-37.el5.centos.1.x86_64.rpm Source: 09f520aaea478ed93c8845aceb98b3b8f3432c5a96e5fc80cbb27faecb6f7e80 rgmanager-2.0.52-37.el5.centos.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 96, Issue 11 ***********************************************

1 0

HP download.linux.hp.com not available for rsync?
by Rafał Radecki 27 Feb '13

27 Feb '13

Hi All. TCP port 873 (rsync) is closed on download.linux.hp.com for ~24 hours. Does anyone know why? A quick look in google has not helped to find the answer. Best regards, Rafal.

2 2

Did anybody do a dovecot update on centos 5.x?
by Götz Reinicke - IT Koordinator 27 Feb '13

27 Feb '13

Hi, dose anybody did a dovecot update from the original 1.0.7 to e.g. 1.1 or 1.2 from atrpms repository? We dont have any special settings; Each user one mbox mailbox. About 500 imap/pop3 accounts, 400GB data. Any suggestions and comments are welcome. Regards . G. Reinicke -- Götz Reinicke - IT-Koordinator - Filmakademie Baden-Württemberg GmbH

4 5

Centos 6 apache mod_wsgi warning
by Robert Moskowitz 26 Feb '13

26 Feb '13

On a system I just built and installed fresh from base and update I am getting warnings in httpd/error.log about mod_wsgi: Compiled for Python/2.6.2 mod_wsgi: Runtime using Python/2.6.6 Just a 'warning'. What to do?

1 0

SSHD rootkit in the wild/compromise for CentOS 5/6?
by Gilbert Sebenste 26 Feb '13

26 Feb '13

Hello everyone, I hope you are having a good day. However, I am concerned by this: https://isc.sans.edu/diary/SSHD+rootkit+in+the+wild/15229 Has anyone heard yet what the attack vector is, if 5.9 and 6.4 are affected, and if a patch is coming out? Thanks! Gilbert ******************************************************************************* Gilbert Sebenste ******** (My opinions only!) ****** *******************************************************************************

10 13

Re: [CentOS] running yum update on remote servers
by James B. Byrne 26 Feb '13

26 Feb '13

On Mon, February 25, 2013 09:03, Dennis Jacobfeuerborn wrote: > On 02/25/2013 02:48 PM, Robert Moskowitz wrote: >> I have read a couple old threads here on updates for servers, and I >> am >> looking for some mechanics to getting the actual updates done. I >> don't >> want automatic updates; I want to control when and what gets >> updated. >> >> First I have to determine that a particular server needs updates. I >> suppose a daily script that would run "yum check-updates' and emails >> me >> the results could work, but then I would only want the email IF >> there >> was something to update, at my limited use of this option does not >> show >> anything to trigger a notify on changes. Does anyone know of a >> script >> that would do this? > In crontab: MAILTO=whomever@whatever MAILFROM=this_system@whatever JOBNAME="Check for updates and report if found" ; /usr/bin/yum check-update -q The -q suppresses output unless there is something to report. Cron handles the rest. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

disabling lame server logging
by Robert Moskowitz 26 Feb '13

26 Feb '13

Continuing to 'clean up' my new server by reviewing logged messages. Researching a common one: Feb 26 07:30:29 onlo named[19336]: error (unexpected RCODE SERVFAIL) resolving 'foo.com/MX/IN': 1.2.3.4#53 I get the drift that my server has been directed to a 'lame server' and logs that fact. Supposedly I am to lookup the SOA record and contact the admin to fix this. What I really want to do is stop all these messages as I suspect I will not be able to do anything to fix the problem. So far what I have found is to add to my global logging section: category lame-servers { null; }; Is there a finer scalpel? I believe there are other lame server failures? Like 'RCODE REFUSED' and 'RCODE 15' (these are the 3 I see in my messages)? Can I block logging by RCODE, so as new ones appear I can learn what they mean before /dev/null ing them?

1 1

IUS repositories
by Kaushal Shriyan 26 Feb '13

26 Feb '13

Hi, what does the word "Inline" mean in Inline with Upstream Stable as per http://iuscommunity.org/pages/FAQs.html#what-does-ius-stand-for? Regards, Kaushal

2 1

Nagios NRPE IPv6
by Tilman Schmidt 26 Feb '13

26 Feb '13

On my network management server I have Name : nagios-plugins-nrpe Arch : x86_64 Version : 2.13 Release : 1.el6 Size : 38 k Repo : installed From repo : epel To my dismay I noticed that this doesn't seem to support IPv6: [ts@bombur ~]$ host galadriel.example.com galadriel.example.com has IPv6 address 2001:db8:f004:8::32 [ts@bombur ~]$ /usr/lib64/nagios/plugins/check_nrpe -n -H galadriel.example.com Invalid host name 'galadriel.example.com' [ts@bombur ~]$ /usr/lib64/nagios/plugins/check_nrpe -n -H 2001:db8:f004:8::32 Invalid host name '2001:db8:f004:8::32' [ts@bombur ~]$ (With obvious sanitization.) What gives? -- Tilman Schmidt Phoenix Software GmbH Bonn, Germany

4 8

Re: [CentOS] running yum update on remote servers
by Tilman Schmidt 25 Feb '13

25 Feb '13

Am 25.02.2013 23:36, schrieb Reindl Harald: > > Am 25.02.2013 23:34, schrieb Tilman Schmidt: >> Am 25.02.2013 15:56, schrieb m.roth(a)5-cent.us: >>> Robert Moskowitz wrote: >> >>>> Then there is the actual update. I learned long ago NOT to run yum over >>>> an SSH connection, as WHEN that connection breaks in the middle of an >>>> update, you can have quite a problem to clean up. All I have done >>> >>> That sounds, to me, as though you have very serious communications issues >>> that need to be solved, and yesterday. We've used ssh here, and at my >>> previous two? three? contracts, for years, and almost *never* have an ssh >>> connection break. >> >> It does happen. SSH is not as forgiving to network glitches as one >> would wish sometimes. A firewall that drops idle or long-running >> TCP connections, a DSL link doing its daily PPPoE disconnect at an >> inopportune moment, a VPN tunnel dropping, a hole in UMTS coverage, >> have all killed a SSH connection for me one time or another > > and that is why "screen" was invented Well, not quite. IIRC screen is older than SSH and was actually invented to switch between multiple screens on a text mode terminal attached either via a modem or a null modem cable. But I agree that it comes in handy for this scenario, too. > everybody doing a yum-upgarde over WAN directly on SSH > instead use screen is a foll and should not maintain servers Sure. Whatever a "foll" is supposed to be ... :-) -- Tilman Schmidt Phoenix Software GmbH Bonn, Germany

1 0

Re: [CentOS] running yum update on remote servers
by Robert Moskowitz 25 Feb '13

25 Feb '13

On 02/25/2013 02:17 PM, Reindl Harald wrote: > > Am 25.02.2013 19:35, schrieb Robert Moskowitz: >> For example, an apache update MAY require that I first check what it >> will do to http.conf. > NOT ON RHEL/CENTOS > > there are no major upgrades with changing API/ABI/Config > that is why it is called "enterprise distribution" I did some archive digging and it was shorewall that got me on this. And then I went into conservative mode, as this impacted my firewall on Centos. Obviously overly conservative. I am learning more, and this time, for example, I am trying hard NOT to edit http.conf, instead to put some http.d/00-init-nn.conf files together so I can know as much as possible what I have added. I don't know yet if that can be done. I have done this on my test mail server. Will see if I can do it on my web server.

1 0

Re: [CentOS] mixing MX and CNAME
by aurfalien 25 Feb '13

25 Feb '13

On Feb 25, 2013, at 9:39 AM, Reindl Harald wrote: > > > Am 25.02.2013 17:56, schrieb aurfalien: >> >> On Feb 25, 2013, at 8:11 AM, Reindl Harald wrote: >> >>> >>> >>> Am 25.02.2013 17:06, schrieb aurfalien: >>>> Hi, >>>> >>>> Has any one had problems with mail clients were your DNS is like this; >>>> >>>> doman.com MX 50 mail.domain.com >>>> domain.com MX 100 mail2.domain.com >>>> >>>> domain.com CNAME www.domain.com >>> >>> you CAN NOT do that >>> >>> domain.com must be a A-record >>> is so, nothing can change this and named will refuse to start if you do so >> >> Sorry, should have clarified that an A record does exist for www.domain.com > > and why do you not make the A-record for "domain.com" and the > CNAME for "www.domain.com" to "domain.com" as virtually everybody > does who has mail and web services on a domain? > So A records and MX record mixes can coexist? For example; domain.com A 1.2.3.4 www.domain.com CNAME domain.com And leave MX as is. This should work? - aurf

1 0

Re: [CentOS] UC centos 5 with xfs root?
by Rushton Martin 25 Feb '13

25 Feb '13

There are 3 issues here: Grub, the kernel and RedHat. 1) Grub won't run in an XFS /boot partition, but will happily run xfs_state1_5 to boot from an XFS root partition. 2) The kernel has supported XFS quite happily since at least 2005, I am looking at an SGI Propack 4 manual of February that year and it states that SLES 9 SP 1 contains the kernels with XFS support. 3) May be an issue. I'm just closing down an old Altix (2004 vintage) and that has always run XFS for everything except /boot. In the early days it used RedHat, but SGI's software included a patched kernel. Later on it ran SuSE Linux out-of-the-box. For compatibility I've configured the x86 machines with OpenSuSE 9 onwards as EXT2 for /boot and everything else on XFS. Sorry to mention SuSE on a CentOS NG, but that's where my experience lay at that time! Regards, Martin -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of James Pearson Sent: 24 February 2013 13:20 To: CentOS mailing list Subject: Re: [CentOS] centos 5 with xfs root? John R Pierce wrote: > On 2/23/2013 7:40 AM, Eero Volotinen wrote: > >>Is it possible to install centos 5 with xfs root and how to do it? > > > Wait. I just realized you're asking about centos *5* and XFS? > > I wouldn't use XFS with EL5, root or not.... the XFS support was very > preliminary, the base kernel was just too old. That's not completely true - XFS existed in the Linux kernel before EL5 - however, RedHat's support of XFS was added to the EL 5.4 kernel with a backport of a contemporary XFS release - and has had fixes added in subsequent EL5 kernels However, I would agree that unless you have a very good reason for staying with CentOS 5, then using CentOS 6 would be better - regardless of XFS support James Pearson _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. QinetiQ may monitor email traffic data and also the content of email for the purposes of security. QinetiQ Limited (Registered in England & Wales: Company Number: 3796233) Registered office: Cody Technology Park, Ively Road, Farnborough, Hampshire, GU14 0LX http://www.qinetiq.com.

1 0

Re: [CentOS] mixing MX and CNAME
by aurfalien 25 Feb '13

25 Feb '13

On Feb 25, 2013, at 8:11 AM, Reindl Harald wrote: > > > Am 25.02.2013 17:06, schrieb aurfalien: >> Hi, >> >> Has any one had problems with mail clients were your DNS is like this; >> >> doman.com MX 50 mail.domain.com >> domain.com MX 100 mail2.domain.com >> >> domain.com CNAME www.domain.com > > you CAN NOT do that > > domain.com must be a A-record > is so, nothing can change this and named will refuse to start if you do so Sorry, should have clarified that an A record does exist for www.domain.com. - aurf

1 0

Re: [CentOS] running yum update on remote servers
by Robert Moskowitz 25 Feb '13

25 Feb '13

On 02/25/2013 09:03 AM, Reindl Harald wrote: > > Am 25.02.2013 14:48, schrieb Robert Moskowitz: >> I have read a couple old threads here on updates for servers, and I am >> looking for some mechanics to getting the actual updates done. I don't >> want automatic updates; I want to control when and what gets updated. >> >> First I have to determine that a particular server needs updates. I >> suppose a daily script that would run "yum check-updates' and emails me >> the results could work, but then I would only want the email IF there >> was something to update, at my limited use of this option does not show >> anything to trigger a notify on changes. Does anyone know of a script >> that would do this? > /etc/cron.daily: > #!/bin/bash > ANG=C; yum -q check-update I am searching all sorts of combinations to figure out what 'ANG' does. I keep getting results like "Emmanuel C. Yumang M.D" :) So please enlighten me. Checking the exit value seems to be important. I did find http://wiki.centos.org/YumCheckOrInstallUpdates which I am studying. And it does not use ANG...

2 2

Re: [CentOS] Help Requested: KVM VM configuration on Centos 6.3
by Sanjay Arora 25 Feb '13

25 Feb '13

On Mon, Feb 25, 2013 at 5:00 PM, Reindl Harald <h.reindl(a)thelounge.net> wrote: > Am 25.02.2013 12:27, schrieb Sanjay Arora: >> I need my VMs to be reachable from the internet by ssh & vnc > > VNC via internet? > man ssh-forwarding! > Yes, Thanks. But my problem at this stage is getting the bridging working right and testing it from LAN where I do not have any firewall between the VM host & client. Security issues will come later. Right now I'm failing to access the VMs at all ;-( so I am doing a fresh setup with the howto!

1 1

Procmail/Formail problem on 6.3
by Fred Smith 25 Feb '13

25 Feb '13

Hi! In the process of making mysystem work again, having just done a reinstall of 6.3 x86_64. I have a considerable collection of procmail recipes for filtering mail in various ways, and since the upgrade none of 'em is working. procmail passes every mail thru spambayes, which gives back a rating on spamminess. this happens, so it's not as if procmail is simply punting. that is followed by tests for which mailbox it should go into, depending on the mailing list, or otherwise who it's from. these ARE NOT working. these recipes all use formail to append a header identifying the mail folder Procmail decided to use, and then the mail is appended to the mailbox. This has been working without problem for YEARS. but now, it all ends up in my main mailbox, where only those things that fail all the filters are supposed to go. aparently all the filters are failing. each filter is akin to this one: :0: * ^X-BeenThere: centos(a)centos.org | $FORMAIL -A"X-procmail: Centos-users" >>$HOME/Mail/centos which checks to see if it came from the centos mailing list, and if so should append a X"-Procmail: Centos-users" header then append the mail to $HOME/Mail/centos. Only it doesn't append the header, and it doesn't drop the mail in the centos mailbox. anyone out there got a clue? thanks! Fred -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- The eyes of the Lord are everywhere, keeping watch on the wicked and the good. ----------------------------- Proverbs 15:3 (niv) -----------------------------

2 4

Help Requested: KVM VM configuration on Centos 6.3
by Sanjay Arora 25 Feb '13

25 Feb '13

Hello I am trying to install KVM based VMs on my machine. First Timer...little idea on actually configuring related networking related issues. Am planning to follow this howto: http://www.howtoforge.com/virtualization-with-kvm-on-a-centos-6.3-server My trial machine is a server cum desktop with two network ports..eth0 is normally used for LAN & Internet access...eth1 is reserved for use with LTSP which is to be configured later. I need my VMs to be reachable from the internet by ssh & vnc etc. required ports will be forwarded from the Internet router. I propose to use subnet 10.0.1.0/24 for my virtual machines. Can someone please advise the content of bridge configuration file at /etc/sysconfig/network-scripts/ifcfg-br0, as given in the howto? The two bridges ltspbr0 & virbr0 shown below, are created by packages installed & not by me, so if any modifications are required in them...I need to know. Also, please advise if it is possible to get the VMs to use a 3G usb device for Internet access through the host machine Network Manage, in case Internet access through eth0 is down? Though this is not a priority at this stage, as I am just learning to use my first VM, but I'd like this feature if it is not too difficult. With regards. Sanjay. ifconfig output: [root@Swayam ~]# ifconfig eth0 Link encap:Ethernet HWaddr E0:69:95:77:A7:F3 inet addr:10.0.0.101 Bcast:10.0.0.255 Mask:255.255.255.0 inet6 addr: fe80::e269:95ff:fe77:a7f3/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:5120 errors:0 dropped:0 overruns:0 frame:0 TX packets:5506 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:4205139 (4.0 MiB) TX bytes:684760 (668.7 KiB) Interrupt:20 Memory:fe600000-fe620000 eth1 Link encap:Ethernet HWaddr 00:60:52:0C:0B:DE UP BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) Interrupt:16 lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:155 errors:0 dropped:0 overruns:0 frame:0 TX packets:155 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:59335 (57.9 KiB) TX bytes:59335 (57.9 KiB) ltspbr0 Link encap:Ethernet HWaddr AE:41:A9:3D:FE:A3 inet addr:172.31.100.254 Bcast:172.31.100.255 Mask:255.255.255.0 inet6 addr: fe80::ac41:a9ff:fe3d:fea3/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:73 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 b) TX bytes:14407 (14.0 KiB) virbr0 Link encap:Ethernet HWaddr 52:54:00:86:BD:15 inet addr:192.168.122.1 Bcast:192.168.122.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:45 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 b) TX bytes:11636 (11.3 KiB)

1 0

Force CentOS 6.3 to discover new video card
by David McGuffey 24 Feb '13

24 Feb '13

I want to add a new video card that will drive multiple monitors. Current installation of CentOS 6.3 x86_64 is working well with the hdmi output of the motherboard. Once I install the new video card, how do I force 6.3 to discover and configure it? Seems with 6.0 and newer, system-config-display is gone and replaced with a combination of udev and xrandr. I'm not familiar with these and don't want to mess up a working system. Tips/pointers to some decent guidance/how-to docs would be appreciated. DaveM

4 3

Audio Editor
by Mark LaPierre 24 Feb '13

24 Feb '13

Hey All, I need some advice. I need an application, that will work with CentOS 6.3, that I can use to edit audio files. I've used Audacity in the past but it has compatibility issues with CentOS 6.3 that I would prefer to avoid. I've spent a couple of hours perusing the Add/Remove Software tool where I found the Gnome Sound Recorder, but that tool doesn't offer any editing capability as far as I can tell. Please, if you make a suggestion, also include the name of the repository where that application can be found. -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ ****

2 5

NFS mount auto remount in case of problems.
by Rafał Radecki 24 Feb '13

24 Feb '13

Hi All. I have a setup in which I have two servers serving nfs share. The nfs service is made highly available with pacemaker. When the primary server goes down the secondary starts nfs service. Service IP is floating between servers but they have NO "shared" storage/filesystem so NFS state/connection information in case of failover is lost. I have two clients. When the failover from primary to secondary occurs the mount is stale and I need to manually remount the share. Is there a way in linux/CentOS to automatically remount nfs share in such case? Or should I just write a script which (for example) check /proc/mounts and execute it from crontab? I am curious if it can be done with "standard" linux services (automounter?) ;) Best regards, Rafal Radecki.

3 3

centos 5 with xfs root?
by Eero Volotinen 24 Feb '13

24 Feb '13

Hi List, Is it possible to install centos 5 with xfs root and how to do it? -- Eero

4 9

Re: [CentOS] Warning: Your BIOS is broken
by Robert Moskowitz 24 Feb '13

24 Feb '13

On 02/22/2013 03:04 PM, Reindl Harald wrote: > > Am 22.02.2013 20:58, schrieb Robert Moskowitz: >> Kernel param. I really should have caught that. >> >> So I was all ready to edit grub.conf and then slapped my hand. >> You TEST it out first, adding the command at boot time. ARGH! > one option > >> Once before (5+ years back) I had to add a kernel param and did it wrong and >> it was a big recovery challenge > what is the challenge? > there is no difference add or remove a param at boot If you get the option wrong and the system will now not boot? Then you have to boot from a recovery CD, mount your harddrve /boot and edit out the change from grub.conf and try again. All the time you SHOULD have been working on something else. > >> But as I read up on this option, it does not sound like something I want >> to globally turn off just to stop a supposedly annoying >> message (if they have indeed worked around it, and my new DNS server is running with this OK) > and you looked at the other options? > "intel_iommu=igfx_off" maybe a good idea > > intel_iommu= [DMAR] Intel IOMMU driver (DMAR) option > on > Enable intel iommu driver. > off > Disable intel iommu driver. > igfx_off [Default Off] > By default, gfx is mapped as normal device. If a gfx > device has a dedicated DMAR unit, the DMAR unit is > bypassed by not enabling DMAR with this option. In > this case, gfx device will use physical address for > DMA. > forcedac [x86_64] > With this option iommu will not optimize to look > for io virtual address below 32 bit forcing dual > address cycle on pci bus for cards supporting greater > than 32 bit addressing. The default is to look > for translation below 32 bit and if not available > then look in the higher range. > strict [Default Off] > With this option on every unmap_single operation will > result in a hardware IOTLB flush operation as opposed > to batching them for performance. > sp_off [Default Off] > By default, super page will be supported if Intel IOMMU > has the capability. With this option, super page will > not be supported. > I will look at these closely and figure out what course to test. The sabbath is almost here, so got a hard stop time.

2 2

About CentOS & RH References
by Bassem Sossan 23 Feb '13

23 Feb '13

Hello Since CentOS is a clone of RedHat, can I ask about the depeandable references guides of RedHat that are produced by RedHat itself, such as RH033 and so on... I need to know which is the latest copyright of this suit ( RH033, RH133 and RH253 ) Thanks in advaned

2 1

Firefox 17.0.3 New Tab
by Mark LaPierre 23 Feb '13

23 Feb '13

Hey Y'll, Where might I enter a complaint about the new tabs showing a tile of recent web sites visited. I don't like that. I would like to change that setting but I don't see anything in the preferences to adjust. -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ ****

3 3

How to re-enable Adobe Flash in Firefox
by David McGuffey 23 Feb '13

23 Feb '13

Mozilla seems to have disabled Adobe Flash in a recent update. I have one 6.3 Desktop load that I need flash. when directed to the Adobe site and download the latest version, yum tells me I have the latest version for x86_64 already installed. I must keep the wife happy with Facebook and YouTube--and if the wife isn't happy, no one in the house is happy. How do I re-enable flash? DaveM

2 1

problem building partitionable RAID-1 on Centos-6
by Fred 23 Feb '13

23 Feb '13

Trying to install Centos6 on my system (it's been running C5 for years). I've got a pair of drives, so I'm trying to use RAID-1. Previously I used a procedure where each partition was part of a separate RAID device, but this time I'm trying the HOWTO from the Centos WIKI on making a partitionable RAID pair. I've been having a lot of problems, but have also been working thru them. but t his latest one has me stumped, I'd appreciate some advice. Booting encounters a panic when trying to mount the RAID subsystem. you can see an image of it at users.rcn.com/fredricksmith/panic.JPG. Looks as if it's trying to boot from md127. there ain't no such critter, where'd it get the idea it could boot from there? or more importantly, how can I solve it? thanks! I may have to revert to the other method, but I figured this one was worth a try. Fred

3 3

Centos 6.3 and dovecot with an abrt problem
by Gregory P. Ennis 23 Feb '13

23 Feb '13

Everyone, I have a mail server running CentOS release 6.3 (Final) with 2.6.32-279.22.1.el6.i686 kernel that is reporting errors to me pertaining dovecot. I have appended the error message to this note. There is only one user that appears to generate this message, and it is generated to me by way of e-mail without a perceptible problem to the user which is not me. This particular user had an inbox greater than 2 gigs in size, so I asked him to move or delete unwanted files, which reduced the size of the inbox to 400 megs. Unfortunately, the abrt messages have continued. I did a google search on : "usr/libexec/dovecot/imap was killed by signal 6", but did not find much that I could use to help me debug this. Can any of you point me in the right direction. ' Thanks much!!! Greg From: user(a)domain.com To: root(a)domain.com Subject: [abrt] full crash report Date: Fri, 22 Feb 2013 17:57:29 -0600 abrt_version: 2.0.8 cmdline: dovecot/imap environ: '\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab \xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab \xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab \xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab \xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab \xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab \xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab \xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab \xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab \xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab \xab\xab' executable: /usr/libexec/dovecot/imap kernel: 2.6.32-279.22.1.el6.i686 pid: 12871 pwd: /home/user reason: Process /usr/libexec/dovecot/imap was killed by signal 6 (SIGABRT) time: Fri 22 Feb 2013 05:56:56 PM CST uid: 507 username: user sosreport.tar.xz: Binary file, 2236756 bytes limits: :Limit Soft Limit Hard Limit Units :Max cpu time unlimited unlimited seconds :Max file size unlimited unlimited bytes :Max data size unlimited unlimited bytes :Max stack size 10485760 unlimited bytes :Max core file size 0 unlimited bytes :Max resident set unlimited unlimited bytes :Max processes 1024 19090 processes :Max open files 1024 4096 files :Max locked memory 65536 65536 bytes :Max address space unlimited unlimited bytes :Max file locks unlimited unlimited locks :Max pending signals 19090 19090 signals :Max msgqueue size 819200 819200 bytes :Max nice priority 0 0 :Max realtime priority 0 0 :Max realtime timeout unlimited unlimited us maps: :001ec000-001f8000 r-xp 00000000 08:07 2108047 /lib/libnss_files-2.12.so :001f8000-001f9000 r--p 0000b000 08:07 2108047 /lib/libnss_files-2.12.so :001f9000-001fa000 rw-p 0000c000 08:07 2108047 /lib/libnss_files-2.12.so :00595000-00596000 r-xp 00000000 00:00 0 [vdso] :0069b000-006b9000 r-xp 00000000 08:07 2109054 /lib/ld-2.12.so :006b9000-006ba000 r--p 0001d000 08:07 2109054 /lib/ld-2.12.so :006ba000-006bb000 rw-p 0001e000 08:07 2109054 /lib/ld-2.12.so :006bd000-0084d000 r-xp 00000000 08:07 2109055 /lib/libc-2.12.so :0084d000-0084f000 r--p 0018f000 08:07 2109055 /lib/libc-2.12.so :0084f000-00850000 rw-p 00191000 08:07 2109055 /lib/libc-2.12.so :00850000-00853000 rw-p 00000000 00:00 0 :00881000-00884000 r-xp 00000000 08:07 2109061 /lib/libdl-2.12.so :00884000-00885000 r--p 00002000 08:07 2109061 /lib/libdl-2.12.so :00885000-00886000 rw-p 00003000 08:07 2109061 /lib/libdl-2.12.so :00888000-0089f000 r-xp 00000000 08:07 2109060 /lib/libpthread-2.12.so :0089f000-008a0000 r--p 00016000 08:07 2109060 /lib/libpthread-2.12.so :008a0000-008a1000 rw-p 00017000 08:07 2109060 /lib/libpthread-2.12.so :008a1000-008a3000 rw-p 00000000 00:00 0 :008bb000-008c2000 r-xp 00000000 08:07 2109063 /lib/librt-2.12.so :008c2000-008c3000 r--p 00006000 08:07 2109063 /lib/librt-2.12.so :008c3000-008c4000 rw-p 00007000 08:07 2109063 /lib/librt-2.12.so :008c6000-00946000 r-xp 00000000 08:07 1071940 /usr/lib/dovecot/libdovecot.so.0.0.0 :00946000-00948000 rw-p 0007f000 08:07 1071940 /usr/lib/dovecot/libdovecot.so.0.0.0 :00948000-00949000 rw-p 00000000 00:00 0 :0094b000-00a21000 r-xp 00000000 08:07 1079292 /usr/lib/dovecot/libdovecot-storage.so.0.0.0 :00a21000-00a25000 rw-p 000d6000 08:07 1079292 /usr/lib/dovecot/libdovecot-storage.so.0.0.0 :00d59000-00d76000 r-xp 00000000 08:07 2109059 /lib/libgcc_s-4.4.6-20120305.so.1 :00d76000-00d77000 rw-p 0001d000 08:07 2109059 /lib/libgcc_s-4.4.6-20120305.so.1 :08048000-08066000 r-xp 00000000 08:07 1187972 /usr/libexec/dovecot/imap :08066000-08069000 rw-p 0001e000 08:07 1187972 /usr/libexec/dovecot/imap :09722000-0976c000 rw-p 00000000 00:00 0 [heap] :b7619000-b769a000 rw-p 00000000 00:00 0 :b7703000-b7705000 rw-p 00000000 00:00 0 :b771c000-b771f000 r--s 00000000 08:06 5373984 /home/user/mail/.imap/INBOX/dovecot.index.log :b771f000-b7720000 rw-p 00000000 00:00 0 :bf9d8000-bf9ed000 rw-p 00000000 00:00 0 [stack] open_fds: :0:/dev/null :pos: 0 :flags: 0100001 :1:/dev/null :pos: 0 :flags: 0100001 :2:pipe:[12459322] :pos: 0 :flags: 01 :3:pipe:[12459236] :pos: 0 :flags: 01 :4:pipe:[16684763] :pos: 0 :flags: 04000 :5:pipe:[12459338] :pos: 0 :flags: 04001 :6:pipe:[12459231] :pos: 0 :flags: 01 :7:socket:[12459252] :pos: 0 :flags: 04002 :8:pipe:[16684763] :pos: 0 :flags: 04001 :9:anon_inode:[eventpoll] :pos: 0 :flags: 02 :10:/home/user/mail/.imap/Draft/dovecot.index.log :pos: 0 :flags: 0100002 :11:socket:[16684731] :pos: 0 :flags: 04002 :12:/home/user/mail/.imap/Draft/dovecot.index :pos: 0 :flags: 0100002 :13:/home/user/mail/.imap/INBOX/dovecot.index.log :pos: 0 :flags: 0100002 :14:/home/user/mail/.imap/INBOX/dovecot.index :pos: 0 :flags: 0100002 :15:/home/user/mail/.imap/Sent/dovecot.index.log :pos: 0 :flags: 0100002 :16:/home/user/mail/.imap/Sent/dovecot.index :pos: 0 :flags: 0100002

1 0

Re: [CentOS] Warning: Your BIOS is broken
by Robert Moskowitz 22 Feb '13

22 Feb '13

On 02/22/2013 02:32 PM, Reindl Harald wrote: > > Am 22.02.2013 20:28, schrieb Robert Moskowitz: >>> on a similar/identical bug with Fedora FC17, someone suggested booting >>> with iommu=off to work around this. >> Where do I add this? > like every other kernel param in /boot/grub/grub.conf at > the end of the kernel line Kernel param. I really should have caught that. So I was all ready to edit grub.conf and then slapped my hand. You TEST it out first, adding the command at boot time. ARGH! Once before (5+ years back) I had to add a kernel param and did it wrong and it was a big recovery challenge. No test and verify before making permanent. Whew. So I googled the param to get its format right, and it is iommu=off. Without that dash in front. But as I read up on this option, it does not sound like something I want to globally turn off just to stop a supposedly annoying message (if they have indeed worked around it, and my new DNS server is running with this OK). So I will test from booting and typing the option in without actually altering grub.conf. But if there is a way to just stop getting this message, that would be good too. thank you all for your help. > > https://www.google.com/search?q=linux+add+kernel+params > http://www.kernel.org/doc/Documentation/kernel-parameters.txt >

1 0

Warning: Your BIOS is broken
by Robert Moskowitz 22 Feb '13

22 Feb '13

I am getting the following on my 'new box' for my DNS server: Date: Wed, 20 Feb 2013 13:58:04 -0500 From: To: Subject: [abrt] full crash report User-Agent: Heirloom mailx 12.4 7/29/08 abrt_version: 2.0.8 cmdline: ro root=/dev/mapper/vg_onlo3-root_01 rd_NO_LUKS rd_LVM_LV=vg_onlo3/root_01 LANG=en_US.UTF-8 +rd_NO_MD SYSFONT=latarcyrheb-sun16 KEYBOARDTYPE=pc KEYTABLE=us crashkernel=128M rhgb quiet rd_NO_DM rhgb +quiet kernel: 2.6.32-279.22.1.el6.i686 not-reportable: Your BIOS is broken reason: WARNING: at drivers/pci/dmar.c:594 warn_invalid_dmar+0x7f/0xa0() (Not tainted) time: Wed 20 Feb 2013 01:57:36 PM EST sosreport.tar.xz: Binary file, 460076 bytes backtrace: :WARNING: at drivers/pci/dmar.c:594 warn_invalid_dmar+0x7f/0xa0() (Not tainted) :Hardware name: HP Compaq dc7800 Small Form Factor :[Firmware Warn]: Your BIOS is broken; DMAR reported at address fed90000 returns all ones! :BIOS vendor: Hewlett-Packard; Ver: 786F1 v01.04; Product Version: :Modules linked in: :Pid: 0, comm: swapper Not tainted 2.6.32-279.22.1.el6.i686 #1 :Call Trace: :[<c0455141>] ? warn_slowpath_common+0x81/0xc0 :[<c06217ff>] ? warn_invalid_dmar+0x7f/0xa0 :[<c06217ff>] ? warn_invalid_dmar+0x7f/0xa0 :[<c04551d3>] ? warn_slowpath_fmt_taint+0x33/0x40 :[<c06217ff>] ? warn_invalid_dmar+0x7f/0xa0 :[<c0abdeb8>] ? check_zero_address+0xfb/0x132 :[<c06608b7>] ? acpi_tb_verify_table+0x1d/0x46 :[<c0abdefd>] ? detect_intel_iommu+0xe/0x57 :[<c0aae15b>] ? mem_init+0x10/0x2ab :[<c0828e00>] ? rcu_init_percpu_data.clone.0+0x87/0xa1 :[<c0828e00>] ? rcu_init_percpu_data.clone.0+0x87/0xa1 :[<c0828e00>] ? rcu_init_percpu_data.clone.0+0x87/0xa1 :[<c0828e00>] ? rcu_init_percpu_data.clone.0+0x87/0xa1 :[<c0828e00>] ? rcu_init_percpu_data.clone.0+0x87/0xa1 :[<c0828e00>] ? rcu_init_percpu_data.clone.0+0x87/0xa1 :[<c082ee00>] ? die_nmi+0x80/0xf0 :[<c082ee00>] ? die_nmi+0x80/0xf0 :[<c0828e00>] ? rcu_init_percpu_data.clone.0+0x87/0xa1 :[<c0828e00>] ? rcu_init_percpu_data.clone.0+0x87/0xa1 :[<c0a9781d>] ? start_kernel+0x1d1/0x3b5 :[<c0a9748a>] ? unknown_bootoption+0x0/0x190 Should I worry?

4 8

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss