- Discuss - lists.centos.org

Re: [CentOS] editing bind (DNS) configuration under CentOS 6
by James B. Byrne 02 May '12

02 May '12

On Wed, May 2, 2012 09:15, Karanbir Singh wrote: > On 05/02/2012 02:09 PM, Nux! wrote: >>> it manually? That is doable, of course, but kind of cumbersome. >>> Does >>> anybody know if there is a tool we are expected to use for that >>> purpose? >> >> If you're afraid of "vi", I can recommend webmin. >> http://dl.nux.ro/rpm/webmin.repo >> > > and then you have 2 problems, one of which is a security hole. > > I've mostly just gone to using nsupdate from the cli for all zone > edits in bind zones. if you ever need the clear zone file, its > easily dumped out with rndc - works, and you can do some fairly > complex things in a clear and simple transaction manner ( plus, > easily automated from other scripts / code for more win ) > For those of us not blessed with either the depth of experience or the time required to master every single idiosyncratic cli for each one of the the very many system daemons we are required to administer Webmin is an excellent alternative to daily trips into the arcane. Any security issue respecting access to Webmin is handled simply and efficiently in three steps: 1. Set IPTables, or whatever firewall you employ, to block all access to webmin's listening port (default 10000) from addresses outside your local lan or from any but a specific host address. Do this first and reload the firewall rules. 2. Install and immediately configure Webmin to use https only. This can be done from the command line using any convenient editor by editing the following three lines in /etc/webmin/miniserv.conf: keyfile=/etc/webmin/miniserv.pem ssl=1 ssl_redirect=1 3. Create a secure tunnel to an address inside your firewall that is permitted access to webmin using whatever means you find convenient. I use SOCKS via "ssh -D 2001 user@host" with RSA certs and Firefox configured to use the SOCKS proxy on my local host. VPN or other techniques will work as well, if not better. But SOCKS over ssh works well enough for my purposes. This will get you up and going without ever having to pass credentials to webmin over the wire enclair. Webmin has the virtue of being remarkably easy to setup and simplifies most abuse configuration issues on a wide variety of services. For one, it usually handles which files require which configuration options. It does not, and cannot, cover every eventuality. But, for basic setup and ongoing control of the main system services running on most mainline Linux distros Webmin works most admirably in my experience. It certainly saves me a great deal of time and frustration. I would not give access to Webmin to anyone that did not already have root access to that server. But, if they already have root then I see no reason to make their work any harder than it needsbe. One caution. Webmin is a powerful tool. If you do not know what you are doing then you can hurt yourself very badly with it. On the other hand I have made serious configuration errors with an editor some of which were just spelling mistakes; a problem that Webmin mostly avoids. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 3

Upgrading PHP and PHP53 on CentOS5 - P.S - Instructions
by Max Pyziur 02 May '12

02 May '12

Greetings, IUS has a set of instructions here; they seem to be fairly detailed: http://iuscommunity.org/Docs/ClientUsageGuide fyi, MP pyz(a)brama.com

1 0

Help with writing a udev rule
by Turnbough, Bradley E. 02 May '12

02 May '12

Can someone please help me with writing a udev rule? I need /dev/ttyUSB0 to automatically have 777 rights when plugged in. I'd like it to only apply to that one specific device. I'm not sure where to start, what files to look at and also what to write to make it work. TIA Brad This e-mail transmission contains information that is confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated.

2 1

editing bind (DNS) configuration under CentOS 6
by Boris Epstein 02 May '12

02 May '12

Hello listmates, It appears that system-config-bind has been phased out. Whatever the reasoning was behind that decision - what are we expected to do now? Edit it manually? That is doable, of course, but kind of cumbersome. Does anybody know if there is a tool we are expected to use for that purpose? Thanks. Boris.

4 6

PHP and PHP53
by Max Pyziur 02 May '12

02 May '12

Greetings, We have someone requesting the use of Wordpress 3.3.1. It requires PHP 5.2 minimum. Currently, our machine is running CentOS 5.7. What are the issues/concerns in upgrading from PHP 5.1 (the current PHP rpms) to PHP53? Much thanks, Max Pyziur pyz(a)brama.com

9 15

giomm-2.4 not found
by john w 02 May '12

02 May '12

Hello, I am trying to install a software from source in a 64 bit centos machine(CentOS release 5.5 (Final)). But I am getting the following error while doing the configure. No package 'giomm-2.4' found I could not find the corresponding package in repositories. Anyone please help me to resolve this issue. Regards John

1 0

update php54 with conflict php53
by fakessh 02 May '12

02 May '12

hello all member hello karanbir how to fix this issue how to update php54 knowing that a conflict exists with php53 what is the rpm or yum to use sincerely -- http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC2626742 gpg --keyserver pgp.mit.edu --recv-key C2626742 http://urlshort.eu fakessh @ http://gplus.to/sshfake http://gplus.to/sshswilting http://gplus.to/john.swilting https://lists.fakessh.eu/mailman/ This list is moderated by me, but all applications will be accepted provided they receive a note of presentation

3 3

Re: [CentOS] Virt-manager
by Jason Pyeron 02 May '12

02 May '12

> -----Original Message----- > From: Barry L. Kline > Sent: Tuesday, May 01, 2012 15:38 > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > For some reason my response to the mailing list was lost in the ether. > > make your command read: > > ssh -X root(a)x.y.a.z virt-manager & > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.5 (GNU/Linux) > > iD8DBQFPoDuVCFu3bIiwtTARAhqJAJwLmHokt/aZ4coYjX+zHOfpypZRYgCcD4wl > u1uRZL7mpapAdeZ64iVWkq8= > =s/0B > -----END PGP SIGNATURE----- > I should have noted that my ~/ssh/config already does that. It suspends waiting for stdin. Ex: cat & -Jason -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Principal Consultant 10 West 24th Street #100 - - +1 (443) 269-1555 x333 Baltimore, Maryland 21218 - - - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- This message is copyright PD Inc, subject to license 20080407P00.

1 0

disconnected NIC under CentOS 6
by Boris Epstein 01 May '12

01 May '12

Hello all, I've got a multi-NIC machine on which I am running Centos 6.2. I am trying to have a NIC configured with an IP address but not connected to anything. The reason for this is to create a network currently only used by VM's residing on the machine, with that NIC configured to have an IP address that is a part of that network, with a view of connecting real machines to the same network in the future. How can I implement that? Currently ifup just refuses to bring that NIC up. Thanks. Boris.

3 7

Re: [CentOS] OT Open Cobol
by James B. Byrne 01 May '12

01 May '12

On Mon, April 30, 2012 19:40, Scott Silva wrote: > on 4/27/2012 8:04 AM m.roth(a)5-cent.us spake the >> It really is past time to migrate to another language, y'know. You >> could >> probably move it to something like perl fairly easily, or even >> *bleah* >> java. >> >> mark > Just think how much money you could earn at Y3K!!! <<DUCKS>> ;) A former IBM programmer analyst who had invested heavily in the dot com bubble and who had realized his millions before the collapse fell deathly ill. Faced with the inevitability of his imminent death he decided to chance the untried technology of cryonics to evade death until a cure be found. Having gambled once and won, given the circumstance, he felt no compunction about doing so again, albeit this time with his life and not his life savings. He awoke in a lighted chamber surrounded by people clothed in strange garb and accoutred even more strangely. Groggily he asked, "What date is it?" He felt, rather than heard, the reply, "9997 CE, or as you might know it, AD 9997." "It took that long to find a cure?" he asked. "No" came the reply. "Then why have you awakened me now?" he asked again. "It says here that you know COBOL." came the reply. . . -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Maintainer for Krita on CentOS
by Dotan Cohen 01 May '12

01 May '12

The Krita [1] mailing list is now discussing making a standalone .tgz package of the latest Krita for CentOS 5.x. After this tarball is created is there anyone interested in making and maintaining a CentOS 5.x RPM package from it? [1] http://krita.org/ -- Dotan Cohen http://gibberish.co.il http://what-is-what.com

4 9

CentOS-announce Digest, Vol 87, Issue 1
by centos-announce-request＠centos.org 01 May '12

01 May '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2012:0537 CentOS 5 vsftpd Update (Karanbir Singh) 2. CESA-2012:0533 Important CentOS 5 samba3x Update (Karanbir Singh) 3. CEEA-2012:0530 CentOS 6 qpid Update (Johnny Hughes) 4. CESA-2012:0533 Important CentOS 6 samba Update (Johnny Hughes) 5. CEBA-2012:0536 CentOS 6 corosync Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 30 Apr 2012 22:20:48 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0537 CentOS 5 vsftpd Update To: centos-announce(a)centos.org Message-ID: <20120430222048.GA5849(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0537 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0537.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: f1186a040768af68985671d4571060cec8117458871de974e72d2f3bf44f738b vsftpd-2.0.5-24.el5_8.1.i386.rpm x86_64: f9848c88a9752859d6c9d367c1a4ee4a38f536021ad8e299019379afc6e3b2bd vsftpd-2.0.5-24.el5_8.1.x86_64.rpm Source: 90a37e37b5ee769b636bff896219f4e57fc16df3bb5e7559ed2c757c6f340b33 vsftpd-2.0.5-24.el5_8.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Mon, 30 Apr 2012 22:24:11 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2012:0533 Important CentOS 5 samba3x Update To: centos-announce(a)centos.org Message-ID: <20120430222411.GA6008(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0533 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0533.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 471f54ba5397283d3f5251590236e720589c28103b36630455e431e461d17961 samba3x-3.5.10-0.109.el5_8.i386.rpm 0588014f570618f67967d8fe428ed06945fa76ab80cd6d1a9087f455dd010993 samba3x-client-3.5.10-0.109.el5_8.i386.rpm b3875d65b066326c5d24ba91f2234f52363e40000125f6615a87fc1e5d2b4256 samba3x-common-3.5.10-0.109.el5_8.i386.rpm e2c20c1a9367c9608ec1c8039350a6298ef115851f1d7225a3ede3466418a0ac samba3x-doc-3.5.10-0.109.el5_8.i386.rpm 28b26c5967dfbcf6e53afc7f986c53219981172fca214af008c8633e18d133f6 samba3x-domainjoin-gui-3.5.10-0.109.el5_8.i386.rpm 7fd8f9bddc8db814fd4410fff2810ca579bea49452e7f4479df3f8a44f07a262 samba3x-swat-3.5.10-0.109.el5_8.i386.rpm 3c0f33a4f5c371de88b98104e5a1c64eb077b9698ab2673b435d8753defa1ce6 samba3x-winbind-3.5.10-0.109.el5_8.i386.rpm 6f10201e78c503f3d39f9816bd309a4087bd5a4372d82051ca299293390faaf3 samba3x-winbind-devel-3.5.10-0.109.el5_8.i386.rpm x86_64: c120384e75970424f0688eb3fc33f67412dd94daf220dd5ef968290127f3e647 samba3x-3.5.10-0.109.el5_8.x86_64.rpm f3f98d5d2519dc15e39009a1585ff7de137a694670f74f8d2695c305135036b7 samba3x-client-3.5.10-0.109.el5_8.x86_64.rpm 3bd8b415c711f086c76816ec6bbb4a4ca89dfabf3532a6864a04f60d266b6013 samba3x-common-3.5.10-0.109.el5_8.x86_64.rpm b62603b6158514b30acb264a768154571235437ae21d7038912a995379b65b5f samba3x-doc-3.5.10-0.109.el5_8.x86_64.rpm 2aea847a88837da14619ef08481261fd09d413317f3f9ba53f016d4cb90ab4dc samba3x-domainjoin-gui-3.5.10-0.109.el5_8.x86_64.rpm 82e185183e2e8c4a47afdf5297208202fb3f241a8438948e9750805d742e2d0f samba3x-swat-3.5.10-0.109.el5_8.x86_64.rpm 3c0f33a4f5c371de88b98104e5a1c64eb077b9698ab2673b435d8753defa1ce6 samba3x-winbind-3.5.10-0.109.el5_8.i386.rpm 585e1fea26e04d3ad6ff061e6368f1fe3393b7da7bce7b9f83ca771b0ada7f78 samba3x-winbind-3.5.10-0.109.el5_8.x86_64.rpm 6f10201e78c503f3d39f9816bd309a4087bd5a4372d82051ca299293390faaf3 samba3x-winbind-devel-3.5.10-0.109.el5_8.i386.rpm de3ea0b85f9bb82e6af60e9c9465a91fc0bacd8d9809830977949973c7cdc7ef samba3x-winbind-devel-3.5.10-0.109.el5_8.x86_64.rpm Source: ced91f19035de06a2a90a332ab2b15a788866287bf5fd862dc199c76bc517f98 samba3x-3.5.10-0.109.el5_8.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Tue, 1 May 2012 03:23:53 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEEA-2012:0530 CentOS 6 qpid Update To: centos-announce(a)centos.org Message-ID: <20120501032353.GA20708(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2012:0530 Upstream details at : https://rhn.redhat.com/errata/RHEA-2012-0530.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 53da93638561a35a13a8f47db761d728b2b850b11eccd729c8d071289883d244 python-qpid-0.14-7.el6_2.noarch.rpm cf1ef0b9e96f5ea033858e804f0ed49b44d68a6ea740af6d9314aaebd206d998 python-qpid-qmf-0.14-7.el6_2.i686.rpm 1408dc44390e8f1f41b45166a776433667cd1b189149a6d635ceea83da7095fa qpid-cpp-client-0.14-14.el6_2.i686.rpm ec7456d34af6183054184741dbd0dff10e4470f283489c0f3761d9a524ec8d14 qpid-cpp-client-devel-0.14-14.el6_2.i686.rpm e33620b7a96bbaa9a8b5b94f1d169ec79e91cbdf343ddf463ce8ad2768fe2d30 qpid-cpp-client-devel-docs-0.14-14.el6_2.noarch.rpm 626afed44465c3fe551fd22b2cb53dedf43180a5fcd7a10df7737d974d8c4b92 qpid-cpp-client-rdma-0.14-14.el6_2.i686.rpm 433c3935c6afaf173b0d2fed64562515a43cf9ddc268e035589337e2a3f84ac0 qpid-cpp-client-ssl-0.14-14.el6_2.i686.rpm fa8aba51b1da5ef38e87717473c56737d5daef7d59eeac1023c1d325f5379794 qpid-cpp-server-0.14-14.el6_2.i686.rpm 1a8d1302df9efaf2f392503ac3bce6f58792f76d13d3a381a3651116d3114287 qpid-cpp-server-cluster-0.14-14.el6_2.i686.rpm 74af162ef5b114e9323b85be1445c9bdcb1f3d13781bfab35f7563e78b6aac30 qpid-cpp-server-devel-0.14-14.el6_2.i686.rpm 2f8ea78cc335bd433f6248fcceacdafdfeb46d750d669a8f51057926cee83e79 qpid-cpp-server-rdma-0.14-14.el6_2.i686.rpm ef641ea6dde8693538b65b67979cbdf9b50315c3bc3d3d604593358680cab4b5 qpid-cpp-server-ssl-0.14-14.el6_2.i686.rpm 324e7e75430f62202c393515bc062aeff007e183b69de5d9eb2e10074b0bbff7 qpid-cpp-server-store-0.14-14.el6_2.i686.rpm 84d524a60e83a2f4b3e3bc3cebab4ab17ba1b449714ab2b952e90d03cf3ec570 qpid-cpp-server-xml-0.14-14.el6_2.i686.rpm da0611e15a8f0f81b751b2f8f74e293a3cad97e1c16b47ef02573c5cf2c50ff1 qpid-qmf-0.14-7.el6_2.i686.rpm cee75dbed7c7a913813f57cd18334fe45e2274a8cae2bfe25682c8586953f5bf qpid-qmf-devel-0.14-7.el6_2.i686.rpm ae28b233c12d90e0f2e31382f156996336a42a18abb6f518a9ec0bfb55c7c318 qpid-tests-0.14-1.el6_2.noarch.rpm ded0cb965e1fb06ed3c61e030514feaabc1af108835ff8af4f7ca1c5a9b0be45 qpid-tools-0.14-2.el6_2.noarch.rpm 2f15a43984de4367e85944291b071199e389a7440295d2dc4caa8f566bf1a0c6 rh-qpid-cpp-tests-0.14-14.el6_2.i686.rpm 5b1df39d7475052baca686ac1d74a868dfa779515413f50bca45f16feab2b35c ruby-qpid-qmf-0.14-7.el6_2.i686.rpm x86_64: 53da93638561a35a13a8f47db761d728b2b850b11eccd729c8d071289883d244 python-qpid-0.14-7.el6_2.noarch.rpm a50f0ecd7b27e351203bed61984d017467fa39897e34da5f8e2b543879acc31b python-qpid-qmf-0.14-7.el6_2.x86_64.rpm 1408dc44390e8f1f41b45166a776433667cd1b189149a6d635ceea83da7095fa qpid-cpp-client-0.14-14.el6_2.i686.rpm 07e88414fb6254ce42dfaeb7d97fb102004c6b69d66314dd109f627a5d55296f qpid-cpp-client-0.14-14.el6_2.x86_64.rpm 2c6fe4375735b65216f9487d2d279a0f00b0c4ee71cde9ab60834577ce083df2 qpid-cpp-client-devel-0.14-14.el6_2.x86_64.rpm 245dca90c5597267c036fe82c75ee0a43af7cb4c2b98a2e691ecacb52ea54996 qpid-cpp-client-devel-docs-0.14-14.el6_2.noarch.rpm 3e30838195934164a8415deac33ee93d4a233eefaffbb20f190de2e422146867 qpid-cpp-client-rdma-0.14-14.el6_2.x86_64.rpm 433c3935c6afaf173b0d2fed64562515a43cf9ddc268e035589337e2a3f84ac0 qpid-cpp-client-ssl-0.14-14.el6_2.i686.rpm b1c8f4838734af4ffd58345be345c0c649eabd7b18ddc7c43fb57b66eba3c44d qpid-cpp-client-ssl-0.14-14.el6_2.x86_64.rpm fa8aba51b1da5ef38e87717473c56737d5daef7d59eeac1023c1d325f5379794 qpid-cpp-server-0.14-14.el6_2.i686.rpm 46c1d12939b5861f9f43f090cd70f6ae9fffa821f67a02e560045aa1e2e5d8f9 qpid-cpp-server-0.14-14.el6_2.x86_64.rpm 74c0ce03c8e26d91cb6925abc66210e97497ca1e783e8de5f342a0a1a01629be qpid-cpp-server-cluster-0.14-14.el6_2.x86_64.rpm 0470d953b9d734e057f43026eb46631e533f0e229418482d5be6dca32baa79a6 qpid-cpp-server-devel-0.14-14.el6_2.x86_64.rpm 5107ffc75522c063c37fabd28eecb5241977a02c9720666b425e5feb94ce70b9 qpid-cpp-server-rdma-0.14-14.el6_2.x86_64.rpm 0dc47a276bb89d0c2526b28037699e54e3cb6ceb4dfac9aa9e42d05e1f69dd05 qpid-cpp-server-ssl-0.14-14.el6_2.x86_64.rpm 2b9089c2892a691aa6787397a35c4c353fba88b4e69c73e2680170cfbbb830cb qpid-cpp-server-store-0.14-14.el6_2.x86_64.rpm f46766457fe21537d616b17a7f3abd1cc1ecefc6985bed0e33bf36d776dc12fd qpid-cpp-server-xml-0.14-14.el6_2.x86_64.rpm da0611e15a8f0f81b751b2f8f74e293a3cad97e1c16b47ef02573c5cf2c50ff1 qpid-qmf-0.14-7.el6_2.i686.rpm abcd2a600bb69c7e6588205f8340d642e6e1726caa15b6497a095cf44cf437d4 qpid-qmf-0.14-7.el6_2.x86_64.rpm 8cf78b19523a5049710fbced81b038e536d443ebfd8b8cc31ca9bb02f17c1eda qpid-qmf-devel-0.14-7.el6_2.x86_64.rpm ae28b233c12d90e0f2e31382f156996336a42a18abb6f518a9ec0bfb55c7c318 qpid-tests-0.14-1.el6_2.noarch.rpm ded0cb965e1fb06ed3c61e030514feaabc1af108835ff8af4f7ca1c5a9b0be45 qpid-tools-0.14-2.el6_2.noarch.rpm f8ce0fd09ffe7dc8164a1275af2ea96ff38bd84fdab975f2d29a7ccc45f441fb rh-qpid-cpp-tests-0.14-14.el6_2.x86_64.rpm 31c4b793ee23daf5800bd7ef4327dc7d9b237c1d0886b2f8bb0e4a782b4210a7 ruby-qpid-qmf-0.14-7.el6_2.x86_64.rpm Source: cb26240ad3b2cc4d234c55f457b72fa8f5e3852634c019f6181e4a0a98a9b6aa python-qpid-0.14-7.el6_2.src.rpm c0d27e8f47b65405fb6503bf01d901e4885c944e646aeb87601f2b357db181a8 qpid-cpp-0.14-14.el6_2.src.rpm 69b6a1bd215ca8103ed3179ec8ed32e534e1566d981df307c53790529875a4e8 qpid-qmf-0.14-7.el6_2.src.rpm 308c10a20e9d8d0e988b262a8854aaf29c3e9796cbb37f8ee7b16fbbc5ea8e3f qpid-tests-0.14-1.el6_2.src.rpm a2c8173174d4daebea5e5e3bd3033fcc73fdc25543ae46cfea3d2991911fdb34 qpid-tools-0.14-2.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Tue, 1 May 2012 03:24:40 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0533 Important CentOS 6 samba Update To: centos-announce(a)centos.org Message-ID: <20120501032440.GA20844(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0533 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0533.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 63330e547be2fb88da1a76d17be54632c0d24c05936d6066b1b496615f04760f libsmbclient-3.5.10-116.el6_2.i686.rpm 447d0422936180740ca554f4df055b0c6285fbc44bf130ae19e4331ce0c0752e libsmbclient-devel-3.5.10-116.el6_2.i686.rpm 81137e22c093516ced2b4de9083862473d404f0e10210f4169d134ffbab343b3 samba-3.5.10-116.el6_2.i686.rpm dcaada4b792b28b1556539adeeb4c5f0f9ab40ceb54d8fc04e159d7ead9757ed samba-client-3.5.10-116.el6_2.i686.rpm 250941e19d61bfeec2e38f0b717831447e372d8bce7d3d99b76ced3114431cef samba-common-3.5.10-116.el6_2.i686.rpm 1b99788520d31225058fe8f36b9c4d6f0413a34a70198074305717f26967cba6 samba-doc-3.5.10-116.el6_2.i686.rpm f373c28d9a2317c30f96f452f4a72bda4210253ea159ca359cb82445fa7fa3d4 samba-domainjoin-gui-3.5.10-116.el6_2.i686.rpm 386b9a45d50baf8bc2b19ffd80e3dfc5c77ece9ea517f16c38e45e2aac855b6b samba-swat-3.5.10-116.el6_2.i686.rpm 380c19b2c6bb0eebb2d729a1c4e97f3796c7c947481428ed26b390bf5f882aa5 samba-winbind-3.5.10-116.el6_2.i686.rpm 0af5c71092259c490c7edc7effd1159e077ac6739223bd177608a917f4199034 samba-winbind-clients-3.5.10-116.el6_2.i686.rpm c140f4f85f3633817cd198d9a815c3e358ecb146182abd4a181cacc5f73eca6e samba-winbind-devel-3.5.10-116.el6_2.i686.rpm 7b3627f458022e8c1bd6bf146935a0237f839ef3c2b931cf20778bad56cd2b76 samba-winbind-krb5-locator-3.5.10-116.el6_2.i686.rpm x86_64: 63330e547be2fb88da1a76d17be54632c0d24c05936d6066b1b496615f04760f libsmbclient-3.5.10-116.el6_2.i686.rpm 0e5948afefb49cdd728f3d8d58d1628fa9b0f19d5143713dd4735fd08c6332e3 libsmbclient-3.5.10-116.el6_2.x86_64.rpm 447d0422936180740ca554f4df055b0c6285fbc44bf130ae19e4331ce0c0752e libsmbclient-devel-3.5.10-116.el6_2.i686.rpm 6fd435ce71f56e78b67f940fded07d5584a5a63217a69fdae40f6724ef12c8f3 libsmbclient-devel-3.5.10-116.el6_2.x86_64.rpm ed11170e156a0a52028ac0798ce3cf4ca48b908876eb820822e49a8e01fa69d9 samba-3.5.10-116.el6_2.x86_64.rpm 4bdc0ef13e55666a3fcd3832e56a49b91c3211ce1294bb9dce8ccb3096a86ccf samba-client-3.5.10-116.el6_2.x86_64.rpm 250941e19d61bfeec2e38f0b717831447e372d8bce7d3d99b76ced3114431cef samba-common-3.5.10-116.el6_2.i686.rpm 1b8b5acfce521224c8e9b3bf5922f601664f934867c4578f0bd008a3eefbb21b samba-common-3.5.10-116.el6_2.x86_64.rpm 2ebc54357f9da69f54201dc450ee6a8ef9714ec16ed48460533c7920add85f1f samba-doc-3.5.10-116.el6_2.x86_64.rpm 3b1ab1ece64ff17bcac504fe8fae9aabf8fa7702760a0efb1348a25c4f286d4b samba-domainjoin-gui-3.5.10-116.el6_2.x86_64.rpm b513ad5e9d960f62ee86e7417161d4df0a46a0dfd2eda95baf1c75c179060cdd samba-swat-3.5.10-116.el6_2.x86_64.rpm 5ca4721f2f0944cc8fd6aed1c1eeb1d327d21b042963d5b35a9540a900eaf485 samba-winbind-3.5.10-116.el6_2.x86_64.rpm 0af5c71092259c490c7edc7effd1159e077ac6739223bd177608a917f4199034 samba-winbind-clients-3.5.10-116.el6_2.i686.rpm 376c90903d36b11cf56d69d45940dfc7231f7cb289396db061779ad3cee94d07 samba-winbind-clients-3.5.10-116.el6_2.x86_64.rpm c140f4f85f3633817cd198d9a815c3e358ecb146182abd4a181cacc5f73eca6e samba-winbind-devel-3.5.10-116.el6_2.i686.rpm 09099769c9a2bccece5a95e8cd68c441eaf5037be169e5fb67f681fd30bd2966 samba-winbind-devel-3.5.10-116.el6_2.x86_64.rpm ff6b3674cb1e5a2ea1f0b46df6985fc8c4613eb1d0d0c7b4561cc4757d2ec510 samba-winbind-krb5-locator-3.5.10-116.el6_2.x86_64.rpm Source: 3a1e6fcfc693d8f50f6b94d2baf5f86cfbcd7a30cfd8a18cdfc7215e510b2ed6 samba-3.5.10-116.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Tue, 1 May 2012 03:25:10 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0536 CentOS 6 corosync Update To: centos-announce(a)centos.org Message-ID: <20120501032510.GA20929(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0536 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0536.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b3ef842e59dfadc7103df029398c5e2aca0e8162a76213575480ae1eeab7f677 corosync-1.4.1-4.el6_2.2.i686.rpm 265063403a1b8c5eeece189402eab4bf5335a144f4fc2297e7f4dcac0c7a84a6 corosynclib-1.4.1-4.el6_2.2.i686.rpm a01759ef979b948f59397249aebbd215b1f30eb5f0f446b5b4862722c01a5d3e corosynclib-devel-1.4.1-4.el6_2.2.i686.rpm x86_64: 0ba1ae4c2bf74918c7f967a26bd30ad8fbf66661d2b02b119eeeb82dd512f5ae corosync-1.4.1-4.el6_2.2.x86_64.rpm 265063403a1b8c5eeece189402eab4bf5335a144f4fc2297e7f4dcac0c7a84a6 corosynclib-1.4.1-4.el6_2.2.i686.rpm 517b701ab4ac9043cc6dcf656ba6ea7052bf753c6e583defcb62075b5fb6c51a corosynclib-1.4.1-4.el6_2.2.x86_64.rpm a01759ef979b948f59397249aebbd215b1f30eb5f0f446b5b4862722c01a5d3e corosynclib-devel-1.4.1-4.el6_2.2.i686.rpm d7d86da2fa04953468bf1c73b3e89ec76a6803b8ec219ee87381598412b74b4c corosynclib-devel-1.4.1-4.el6_2.2.x86_64.rpm Source: db8bd67a31b6f32c2e81aafdea93b3b408f3e3b9462199b218dea55bba047522 corosync-1.4.1-4.el6_2.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 87, Issue 1 **********************************************

1 0

Host Machine and Iptables problem
by Cbulist 01 May '12

01 May '12

Hi, I experienced some problems with my VM's and NetworkManager. Then I decided to remove NetworkManager on the VM's and the Host machine and everything is working well now. After that I stopped the Iptables on the Host machine and I lost external connectivity on my VM's. The only way that I found that VM machine works again is restarting the Host Machine. (Start Iptables service again on the Host didn't work) I'm using CentOS 6.2: 2.6.32-220.7.1.el6.x86_64 The host's iptables is the default, I didn't add anything. Why the Iptables is stopping the connectivity of VM when I stop it? Thanks in advance!

4 8

SELinux is preventing /usr/libexec/postfix/pickup from module_request
by David McGuffey 30 Apr '12

30 Apr '12

Getting module_request errors from SELinux. Errors being thrown by metacity sendmail.postfix cleanup trivial-rewarite local postdrop pickup All errors are essentially the same System was working well until I began to apply some basic security hardening configuration. Postfix started complaining when I made /tmp noexec, nodev, nosuid, and then did a mount --bind of /var/tmp under /tmp. Backed that out the remount of /var/tmp and those errors went away. But then these errors started showing up. Here is an example of a postfix pickup error. What is going on? I could allow the module to load, but I want to understand what is going on and the dangers of making the mod before I do it. SELinux is preventing /usr/libexec/postfix/pickup from module_request access on the system Unknown. ***** Plugin catchall_boolean (89.3 confidence) suggests ******************* If you want to allow all domains to have the kernel load modules Then you must tell SELinux about this by enabling the 'domain_kernel_load_modules' boolean. Do setsebool -P domain_kernel_load_modules 1 ***** Plugin catchall (11.6 confidence) suggests *************************** If you believe that pickup should be allowed module_request access on the Unknown system by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # grep pickup /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp Additional Information: Source Context system_u:system_r:postfix_pickup_t:s0 Target Context system_u:system_r:kernel_t:s0 Target Objects Unknown [ system ] Source pickup Source Path /usr/libexec/postfix/pickup Port <Unknown> Host desk.localdomain Source RPM Packages postfix-2.6.6-2.2.el6_1 Target RPM Packages Policy RPM selinux-policy-3.7.19-126.el6_2.10 Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name desk.localdomain Platform Linux desk.localdomain 2.6.32-220.13.1.el6.x86_64 #1 SMP Tue Apr 17 23:56:34 BST 2012 x86_64 x86_64 Alert Count 24 First Seen Fri 27 Apr 2012 02:46:55 PM MDT Last Seen Sun 29 Apr 2012 05:10:32 AM MDT Local ID 4b8e5292-93f1-4e69-8bb4-4ea70bc5232e Raw Audit Messages type=AVC msg=audit(1335697832.612:34911): avc: denied { module_request } for pid=24226 comm="pickup" kmod="net-pf-10" scontext=system_u:system_r:postfix_pickup_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system type=SYSCALL msg=audit(1335697832.612:34911): arch=x86_64 syscall=socket success=no exit=EAFNOSUPPORT a0=a a1=1 a2=0 a3=7fff3ca82190 items=0 ppid=1925 pid=24226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=pickup exe=/usr/libexec/postfix/pickup subj=system_u:system_r:postfix_pickup_t:s0 key=(null) Hash: pickup,postfix_pickup_t,kernel_t,system,module_request audit2allow #============= postfix_pickup_t ============== #!!!! This avc can be allowed using the boolean 'domain_kernel_load_modules' allow postfix_pickup_t kernel_t:system module_request; audit2allow -R #============= postfix_pickup_t ============== #!!!! This avc can be allowed using the boolean 'domain_kernel_load_modules' allow postfix_pickup_t kernel_t:system module_request;

3 2

error 24 attempt to access block outside of partition
by Phil Savoie 30 Apr '12

30 Apr '12

Hi All, After updating to the latest kernel, I get subject error at grub. I have no idea as to how to fix this. Booting of the previous kernel is fine. Could someone please help sort this out? Thank you in advance!! Phil Relative info: grub.conf # grub.conf generated by anaconda # # Note that you do not have to rerun grub after making changes to this file # NOTICE: You do not have a /boot partition. This means that # all kernel and initrd paths are relative to /, eg. # root (hd0,0) # kernel /boot/vmlinuz-version ro root=/dev/sdb1 # initrd /boot/initrd-[generic-]version.img #boot=/dev/sdb default=1 timeout=5 splashimage=(hd0,0)/boot/grub/splash.xpm.gz hiddenmenu title CentOS (2.6.32-220.13.1.el6.x86_64) root (hd0,0) kernel /boot/vmlinuz-2.6.32-220.13.1.el6.x86_64 ro root=UUID=b9245ece-994f-44c8-9831-ec24cf865b6e nomodeset rd_NO_LUKS KEYBOARDTYPE=pc KEYTABLE=us LANG=en_US.UTF-8 rd_NO_MD quiet SYSFONT=latarcyrheb-sun16 rhgb crashkernel=auto rd_NO_LVM selinux=0 rd_NO_DM nouveau.modeset=0 rdblacklist=nouveau initrd /boot/initramfs-2.6.32-220.13.1.el6.x86_64.img title CentOS (2.6.32-220.el6.x86_64) root (hd0,0) kernel /boot/vmlinuz-2.6.32-220.el6.x86_64 ro root=UUID=b9245ece-994f-44c8-9831-ec24cf865b6e nomodeset rd_NO_LUKS KEYBOARDTYPE=pc KEYTABLE=us LANG=en_US.UTF-8 rd_NO_MD quiet SYSFONT=latarcyrheb-sun16 rhgb crashkernel=auto rd_NO_LVM selinux=0 rd_NO_DM nouveau.modeset=0 rdblacklist=nouveau initrd /boot/initramfs-2.6.32-220.el6.x86_64.img Output of fdisk -cul: [root@cc ~]# fdisk -cul Disk /dev/sda: 1500.3 GB, 1500301910016 bytes 255 heads, 63 sectors/track, 182401 cylinders, total 2930277168 sectors Units = sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 4096 bytes I/O size (minimum/optimal): 4096 bytes / 4096 bytes Disk identifier: 0x00042630 Device Boot Start End Blocks Id System /dev/sda1 * 2048 2921889791 1460943872 83 Linux /dev/sda2 2921889792 2930276351 4193280 82 Linux swap / Solaris WARNING: GPT (GUID Partition Table) detected on '/dev/sdb'! The util fdisk doesn't support GPT. Use GNU Parted. Disk /dev/sdb: 1000.2 GB, 1000204886016 bytes 255 heads, 63 sectors/track, 121601 cylinders, total 1953525168 sectors Units = sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 4096 bytes I/O size (minimum/optimal): 4096 bytes / 4096 bytes Disk identifier: 0xb77be37a Device Boot Start End Blocks Id System /dev/sdb1 * 2048 206847 102400 7 HPFS/NTFS /dev/sdb2 206848 1953521663 976657408 7 HPFS/NTFS [root@cc ~]#

3 3

yum yum or not?
by Shaun 30 Apr '12

30 Apr '12

Hi all, I'm a bit of a newbie to CentOS though not Linux in general. I come from an apt-get package management mentality and I've had a few issues where package management actions haven't quite done what I'd expect. So I'm guessing it's user error! :) I installed GNOME and then decided that I wanted to install Xfce to try it out. I decided to then remove it with just 'yum remove' after playing with it a bit. It seemed to uninstall a lot of GNOME stuff (presumably that they had in common) and so the next time I tried to use GNOME it looked different and was missing a few components. Should I have just reverted the install of Xfce to undo it so that those dependencies would've have been touched or is this just how yum works?

8 20

(no subject)
by nxbtch 30 Apr '12

30 Apr '12

1 0

NTLMv2 compatibility in Samba 3.0.33 standard packages
by Andrew Reis 28 Apr '12

28 Apr '12

Good afternoon/morning/evening everyone, I've been running into the problem of clients using Windows 7 with CentOS 5.X and file/printer sharing. Correct me if I'm wrong, but the stand samba-3.0.33-x.x.x packages DO NOT provide compatibility with Windows Vista/7. I've had to manually compile samba from source or use the samba3x packages to fix the problem. Just wondering if we're ever going to have the NTLMv2 subroutines compiled into the update/centosplus repo packages. Thanks, -- _ANDREW REIS_ MCTS, Network+ Software/Networking Microsoft Windows Support/Webmaster DBMS Inc. Email: areis(a)dbmsinc.com [1] Direct Line: (888) 862-0662 ext. 307 Emergency # ONLY: (218) 833-2508 __ Links: ------ [1] mailto:areis@dbmsinc.com

4 3

iptables drop on virtual host
by Bob Hoffman 28 Apr '12

28 Apr '12

Does this work? adding DROP to iptables on the virtual host's iptables, before the phys bridge....will it prevent those ips from getting to the bridged part of iptables? Or would a different syntax be used? -A INPUT -s 66.77.65.128/26 -j DROP -I FORWARD -m physdev --physdev-is-bridged -j ACCEPT -A INPUT -j REJECT --reject-with icmp-host-prohibited -A FORWARD -j REJECT --reject-with icmp-host-prohibited COMMIT

2 3

imagemagick convert/display eps file no decode delegate
by Tony Schreiner 27 Apr '12

27 Apr '12

I am finding on all my CentOS 5.8 systems (all fully updated but a variety of package mixes) that the display or convert commands from ImageMagick are unable to handle eps files. I get error output as follows, curious if anyone else sees this $ convert rna.eps rna.epi convert rna.eps rna.epi Error: /undefinedfilename in (72x72) Operand stack: Execution stack: %interp_exit .runexec2 --nostringval-- --nostringval-- --nostringval-- 2 %stopped_push --nostringval-- --nostringval-- --nostringval-- false 1 %stopped_push Dictionary stack: --dict:1154/1684(ro)(G)-- --dict:0/20(G)-- --dict:70/200(L)-- Current allocation mode is local Last OS error: 2 GPL Ghostscript 8.70: Unrecoverable error, exit code 1 Error: /undefinedfilename in (72x72) Operand stack: Execution stack: %interp_exit .runexec2 --nostringval-- --nostringval-- --nostringval-- 2 %stopped_push --nostringval-- --nostringval-- --nostringval-- false 1 %stopped_push Dictionary stack: --dict:1154/1684(ro)(G)-- --dict:0/20(G)-- --dict:70/200(L)-- Current allocation mode is local Last OS error: 2 GPL Ghostscript 8.70: Unrecoverable error, exit code 1 convert: no decode delegate for this image format `rna.eps'. convert: Postscript delegate failed `rna.eps'. convert: missing an image filename `rna.epi'. ImageMagick 5.2.8.0-12.el5 ghostcript-8.0-14.el5 the equivalent GraphicsMagick command gm convert does work This is a recent development, but I can't say how recent Tony Schreiner

1 0

Virt-manager requires stdin to run?
by Jason Pyeron 27 Apr '12

27 Apr '12

Anyone have any ideas on this? $ ssh root(a)x.y.z.a virt-manager & $ Warning: untrusted X11 forwarding setup failed: xauth key data not generated Warning: No xauth data; using fake authentication data for X11 forwarding. [2]+ Stopped ssh root(a)x.y.z.a virt-manager $ bg [2]+ ssh root(a)x.y.z.a virt-manager & $ [2]+ Stopped ssh root(a)x.y.z.a virt-manager -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Principal Consultant 10 West 24th Street #100 - - +1 (443) 269-1555 x333 Baltimore, Maryland 21218 - - - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- This message is copyright PD Inc, subject to license 20080407P00.

1 0

Help with software raid + LVM on Centos 6
by aurfalien 27 Apr '12

27 Apr '12

Hi all, Please excuse the many posts. Wondering if any one can help me with the the setup. I have 2x2TBdisks. I would like to mirror them. I would like to create two LVMs so that I can snap shot from one to the other. During Centos 6 install, how would I go about this as its confusing? So far I am here; 1) Created the following raid devices; md0 500MB (use it for /boot) md1 4000MB (use it for swap) md2 All remaining space (use it for /) 2) Created two physical LVMs, one on md0, the other on md1. 3) ? This is were I am confused, do I create two LVM volume groups? I was thinking that my primary LVM can be ~1TB and that my other LVM which I snapshot to can also be ~1TB. Anyways, I am very green on this topic as I usually do hardware raids but I don't have that option. Thanks in advance, - aurf

2 2

Re: [CentOS] yum yum or not?
by James B. Byrne 27 Apr '12

27 Apr '12

On Fri, April 27, 2012 04:15, Shaun wrote: > Well this is it. I've used both 'remove' and 'history undo' and had > better success (system not having something important removed) with > the latter. I have only this suspicion. It may be that yum history undo only rolls back the changes actually made by the previous yum update/install since it 'knows' that the system environment has not changed in the interim. Whereas yum history remove, since it has to cherry-pick packages from a possibly changed environment, instead removes rpm dependencies based on the package specs of the items directly added by the original yum command, whether these were installed in that transaction or not. But, this is only a guess. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Centos 6 - Create raid 1 + LVM during gui install
by aurfalien 27 Apr '12

27 Apr '12

Hi all, Does any one know of a how to for creating raid 1 + LVMs during install for Centos 6? Do I create the physical LVM first and then raid or vise versa? Its seems diff then doing it for Centos 5. - aurf

2 2

More on the ATA sense error
by m.roth＠5-cent.us 27 Apr '12

27 Apr '12

AFAIK, no one's responded to me about whether I should just turn off smartd. At any rate, here's more info: this server only started spitting Apr 25 07:47:50 <server> kernel: sda: Current [descriptor]: sense key: Recovered Err ror Apr 25 07:47:50 <server> kernel: Add. Sense: ATA pass through information availl able Apr 25 07:47:50 <server> kernel: Apr 25 07:47:50 <server> kernel: Descriptor sense data with sense descriptors (in hh ex): Apr 25 07:47:50 <server> kernel: 72 01 00 1d 00 00 00 0e 09 0c 00 00 00 00 00 00 Apr 25 07:47:50 <server> kernel: 00 4f 00 c2 40 50 for every drive - and it has four - right after updated to the most current kernel 2.6.18-308.4.1.el5 #1 SMP and rebooted. So one question becomes three: a) should I turn off smartd? b) should I reboot to the previous kernel, and see if it keeps up? c) is this a known bug? mark

1 0

fail2ban logrotate failure
by Bob Hoffman 27 Apr '12

27 Apr '12

I got the fail2ban from epel. There were a number of issues relating to using a log file... logwatch was looking for both fail2ban and fail2ban.log logrotate file fail2ban added looked for fail2ban.log and then reset itself to syslog fail2ban itself went to syslog, over riding its fail2ban.log. took a while, but I use /var/log/fail2ban now, that finally worked through logrotates and logwatch. Problem with centos variant of fail2ban: logrotate causes all 'ban' actions to stop happening. I am pretty sure it stops reading the logs but still functions. Unban actions still keep showing up in the log, but the 'ban' actions just stop. Program is running, but no longer working. Long searches online show a million others with the same issue. Only way to prevent it seems to be to add a reload or restart in the syslog file. This is undesired due to losing all banned ips listed. It happens as part of the logrotate. The logrotate file I have changed a few times and recently tried this postrotate /usr/bin/fail2ban-client set logtarget /var/log/fail2ban 1>/dev/null || true endscript setting the logtarget, which the original called for changing it to syslog and 2>dev/null || true so what would you do? I imagine when logrotate happens and syslog restarts something is causing fail2ban to stop working properly, but still timing 'unbans'. This is apparently a bug/problem for almost everyone of all distros. Other than just uninstalling, the only way to make it work would be a restart around 4 every morning, making any long term bans useless. My last thought is to just throw the /var/log/fail2ban to be rotated by syslog like maillog and the others..and not doing anything special. Maybe it would just work. I write here because I know there are hundreds of you and someone must have figured out how to make fail2ban work for more than 24 hours without a restart....

2 2

High load
by Kaushal Shriyan 27 Apr '12

27 Apr '12

Hi Is there a way to nail down the issue of high load on a server basically trying to understand the reason behind high load at a specific time period. I use top command but it does not have history. Nagios reports saying "*[04-25-2012 10:11:00] SERVICE ALERT: dev;LOAD;WARNING;HARD;3;WARNING - load average: 6.88, 6.36, 5.71"* * * Please help me understand. Regards Kaushal

4 3

High load averages copying USB
by Lists 27 Apr '12

27 Apr '12

Problem as follows: 1) Plug in an external USB drive. 2) Mount it anywhere. Doesn't matter how. 3) Copy a few GB of data to the drive from a non-USB disk. 4) Watch the load average "climb" to 5.x, sometimes 10.x or more. Why? This on an otherwise unloaded system. Doesn't matter how many cores, how much RAM, 32/64 bit, etc. Why should copying some files to a USB drive cause load averages to climb so high? (and network monitors to freak out?)

5 7

Re: [CentOS] LibreOffice rpm's vs Centos testing repo
by Johan Vermeulen 27 Apr '12

27 Apr '12

This time in the "normal" repo or also in testing? Greetings, j. verzonden m.b.v Android vandaar de beknoptheid. Nux! <nux(a)li.nux.ro>schreef: >On 19.03.2012 11:43, Jake Shipton wrote: >> On Mon, 19 Mar 2012 09:50:21 +0000 >> nux(a)li.nux.ro wrote: >> >>> Jake, >>> >>> Sure, 3.5 is on the to do list. >>> I see this trend a lot, to make repos out of official rpms (at least >>> Ljubomir is also doing it). Maybe it's worth doing this on a bigger >>> scale. Care to share what exactly you are doing? Are you using any >>> "meta" packages? >> Hi, >> >> The setup is pretty basic (imo) because the repo is used only in a >> LAN >> and never used outside of this LAN, I do not worry about generating >> delta's or stuff like that. I don't even GPG sign them. >> >> The local repo is also used for other self compiled RPM's. These >> would >> usually be tagged with a ".hr" tag (ie, >> <packagename>-<version>.el6.hr.x86_64) for easy removal. >> >> But as far as I am aware to do that, with official RPM's it would >> require a rebuild. >> >> So what I tend to do is just open up filezilla, ftp to a libreoffice >> mirror, browse my way to libreoffice stable RPM's, and download them >> to >> "/var/www/html/repository/<arch>" (Which is actually just a link >> to /home/<username>/rpmbuild/RPMS) >> >> Obviously the repository it's self is pre-setup because of the other >> packages, so as my normal user next up I would just run: >> >> createrepo --update ~/rpmbuild/RPMS/<arch> >> createrepo --update ~/rpmbuild/RPMS/SRPMS >> >> A quick check for SELinux permission's and it's good to go :-). Now >> from local machines on the LAN I would just use "yum install >> libobasis* >> libreoffice*" etc, then pick and remove the unnecessary extra >> packages. >> and "yum update" takes care of updates :-) (after I have redone the >> above..) >> >> This is something most user could easily do them selves, and it could >> also be done publicly, however it is still a "messy" method even if >> somebody else does it for you (and you just enable/add the repo). >> >> I would still prefer to be able to have RPM's built specifically for >> EL6. >> >> I guess that raises the question of "You have the repo, rpmbuild >> etc setup, why don't you build them your self?", and to answer it: >> >> Because I do not have the CPU Power :-) (Still got a Single core >> here....) >> >> But yeah.. that's basically all I do :-). > >And that's what I did as well. Check this out: >http://www.nux.ro/archive/2012/04/LibreOffice_org_RPMs_in_a_yum_friendly_fo… >I'll spam this in a separate message on the usual places. > >Also, more good news comes from Redhat as RHEL 6.3 will contains >Libreoffice 3.4.5! > >-- >Sent from the Delta quadrant using Borg technology! > >Nux! >www.nux.ro >_______________________________________________ >CentOS mailing list >CentOS(a)centos.org >http://lists.centos.org/mailman/listinfo/centos

2 1

OpenOffice.org3 Error after Software Update
by Mark LaPierre 27 Apr '12

27 Apr '12

Hey Y'all, I just installed the updates recommended by Software Update. Apr 25 19:04:43 Updated: xulrunner-10.0.4-1.el6.centos.i686 Apr 25 19:04:53 Updated: firefox-10.0.4-1.el6.centos.i686 Apr 25 19:05:03 Updated: thunderbird-10.0.4-1.el6.centos.i686 Apr 25 19:05:05 Updated: matahari-lib-0.4.4-12.el6_2.i686 Apr 25 19:05:06 Updated: matahari-agent-lib-0.4.4-12.el6_2.i686 Apr 25 19:05:09 Updated: matahari-broker-0.4.4-12.el6_2.i686 Apr 25 19:05:10 Updated: matahari-network-0.4.4-12.el6_2.i686 Apr 25 19:05:11 Updated: matahari-sysconfig-0.4.4-12.el6_2.i686 Apr 25 19:05:12 Updated: matahari-service-0.4.4-12.el6_2.i686 Apr 25 19:05:13 Updated: matahari-host-0.4.4-12.el6_2.i686 Apr 25 19:05:14 Updated: 2:libpng-1.2.49-1.el6_2.i686 Apr 25 19:05:17 Updated: openssl-1.0.0-20.el6_2.4.i686 Apr 25 19:05:21 Updated: openssl-devel-1.0.0-20.el6_2.4.i686 Apr 25 19:05:22 Updated: 2:libpng-devel-1.2.49-1.el6_2.i686 Apr 25 19:05:23 Updated: matahari-0.4.4-12.el6_2.i686 I also installed Virtual Box. Apr 25 19:23:55 Installed: VirtualBox-4.1-4.1.12_77245_rhel6-1.i686 Now open office will not start. It complains about not being able to load a library. The application cannot be started. loading component library failed: file:///usr/lib/openoffice.org3/program/../basis-link/program/i18npool.uno.so I checked for the existence of i18npool.uno.so in the directory indicated. It is there. 1. Has anyone else experienced any problems with the latest software update? 2. What course of action would you recommend to restore the operation of openoffice.org? CentOS release 6.2 (Final) Linux mushroom.patch 2.6.32-220.13.1.el6.i686 #1 SMP Tue Apr 17 22:09:08 BST 2012 i686 i686 i386 GNU/Linux -- _ °v° /(_)\ ^ ^ Mark LaPierre Registerd Linux user No #267004 www.counter.li.org ****

2 3

Re: [CentOS] CentOS-announce Digest, Vol 84, Issue 14
by Johan Vermeulen 26 Apr '12

26 Apr '12

Maybe this came out wrong. What I meant is: I was told RHEL doesn't do major application upgrades in one version, so we would end op with Firefox 3.6.x in CentOs 6.x in a few years from now. Apparently this is not true. So now I,m wondering if a move to LO within CentOs 6 is imaginable. Grt. J. verzonden m.b.v Android vandaar de beknoptheid. Johan Vermeulen <jvermeulen(a)cawdekempen.be>schreef: >If Rhel/CentOs goes from Firefox3.6 to Firefox 10, could they go from OpenOffice to LibreOffice as wel? > >Greetings, James > >verzonden m.b.v Android >vandaar de beknoptheid. > >centos-announce-request(a)centos.orgschreef: > >>Send CentOS-announce mailing list submissions to >> centos-announce(a)centos.org >> >>To subscribe or unsubscribe via the World Wide Web, visit >> http://lists.centos.org/mailman/listinfo/centos-announce >>or, via email, send a message with subject or body 'help' to >> centos-announce-request(a)centos.org >> >>You can reach the person managing the list at >> centos-announce-owner(a)centos.org >> >>When replying, please edit your Subject line so it is more specific >>than "Re: Contents of CentOS-announce digest..." >> >> >>Today's Topics: >> >> 1. CEEA-2012:0327 CentOS 6 firefox Update (Johnny Hughes) >> 2. CEBA-2012:0337 CentOS 6 nss Update (Johnny Hughes) >> 3. CEEA-2012:0329 CentOS 6 thunderbird Update (Johnny Hughes) >> 4. CEBA-2012:0339 CentOS 6 openswan Update (Johnny Hughes) >> 5. CEBA-2012:0338 CentOS 6 selinux-policy Update (Johnny Hughes) >> 6. CEBA-2012:0335 CentOS 6 iptables Update (Johnny Hughes) >> >> >>---------------------------------------------------------------------- >> >>Message: 1 >>Date: Sat, 25 Feb 2012 05:17:37 +0000 >>From: Johnny Hughes <johnny(a)centos.org> >>Subject: [CentOS-announce] CEEA-2012:0327 CentOS 6 firefox Update >>To: centos-announce(a)centos.org >>Message-ID: <20120225051737.GA11681(a)chakra.karan.org> >>Content-Type: text/plain; charset=us-ascii >> >> >>CentOS Errata and Enhancement Advisory 2012:0327 >> >>Upstream details at : http://rhn.redhat.com/errata/RHEA-2012-0327.html >> >>The following updated files have been uploaded and are currently >>syncing to the mirrors: ( sha256sum Filename ) >> >> >>i386: >>d2599a661b132aa2ddd7392eae5685646cf3c635d0ef0267599b8740f09c12e2 firefox-10.0.1-1.el6.centos.i686.rpm >>77de9c554ac1f16ba2520f07cee4c15d4e1e2979cf740c7c002fea07c34faf96 xulrunner-10.0.1-2.el6.centos.i686.rpm >>fcd332a2aeb56279601acf6494a33a2983344f5b9982f37c6800cb9e3aa4f663 xulrunner-devel-10.0.1-2.el6.centos.i686.rpm >>6461e5d96c34674c8d429155b071ef03f770951c296667b9fe481b4bbafa78b5 yelp-2.28.1-13.el6_2.i686.rpm >> >>x86_64: >>d2599a661b132aa2ddd7392eae5685646cf3c635d0ef0267599b8740f09c12e2 firefox-10.0.1-1.el6.centos.i686.rpm >>22976c0f8338775d7407b9239c3f9f32ec7ca88faa10c94f437772ae9b380137 firefox-10.0.1-1.el6.centos.x86_64.rpm >>77de9c554ac1f16ba2520f07cee4c15d4e1e2979cf740c7c002fea07c34faf96 xulrunner-10.0.1-2.el6.centos.i686.rpm >>b3441c386c20957faa6130d8bed19875ac5d1494f3a385ed12249191792e1fa2 xulrunner-10.0.1-2.el6.centos.x86_64.rpm >>fcd332a2aeb56279601acf6494a33a2983344f5b9982f37c6800cb9e3aa4f663 xulrunner-devel-10.0.1-2.el6.centos.i686.rpm >>8d92e10fba11d7b9300d13244f49e6fb1ce97bdde46ee197447af2dcbf4d9699 xulrunner-devel-10.0.1-2.el6.centos.x86_64.rpm >>a839b1a862c44fa07ce558f0f4a81a254abda5ad7cacef7f41fa6c6c591fe04f yelp-2.28.1-13.el6_2.x86_64.rpm >> >>Source: >>1a53d0a7664910c65c00711815fcfd8a87f965b5529d6135099d989454251231 firefox-10.0.1-1.el6.centos.src.rpm >>385d3e038296c9ca12d13bc5c3396049d70f4f8a879fc2468b6ce9c3a93ec96b xulrunner-10.0.1-2.el6.centos.src.rpm >>dc668b084f356b2049f8e724476ff665876bea6b8abbe533aa5555d7cea42c07 yelp-2.28.1-13.el6_2.src.rpm >> >> >> >>-- >>Johnny Hughes >>CentOS Project { http://www.centos.org/ } >>irc: hughesjr, #centos(a)irc.freenode.net >> >> >> >>------------------------------ >> >>Message: 2 >>Date: Sat, 25 Feb 2012 05:20:36 +0000 >>From: Johnny Hughes <johnny(a)centos.org> >>Subject: [CentOS-announce] CEBA-2012:0337 CentOS 6 nss Update >>To: centos-announce(a)centos.org >>Message-ID: <20120225052036.GA11839(a)chakra.karan.org> >>Content-Type: text/plain; charset=us-ascii >> >> >>CentOS Errata and Bugfix Advisory 2012:0337 >> >>Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0337.html >> >>The following updated files have been uploaded and are currently >>syncing to the mirrors: ( sha256sum Filename ) >> >> >>i386: >>96a9433b9cfb6009dcc4e4b61168752313ab925cc72d9cf2bd104136bd1770f5 nspr-4.8.9-3.el6_2.i686.rpm >>e1e90d9135b4087a9f97ea2ba0b6025e8d6a812e98a1743fe897474d8ec719e5 nspr-devel-4.8.9-3.el6_2.i686.rpm >>cbefa7c87e5dc51dab0a433f47c0cd4f6b06ca0c9c3f2579f32141d9b3d30998 nss-3.13.1-6.el6_2.i686.rpm >>a495226e3abee7423caa069e2b8a1749ee63543800b37b5e3cbd7afcf05d65e1 nss-devel-3.13.1-6.el6_2.i686.rpm >>54c94e1640a123d70b4ae4446f750432c47ba0e786237791695ce47289312020 nss-pkcs11-devel-3.13.1-6.el6_2.i686.rpm >>440a26179856dc203924ae31147056bfda9a11e35826c23cacb06dbe5a520a95 nss-sysinit-3.13.1-6.el6_2.i686.rpm >>ff4640259883bd7d9d9fb33d3a295328023c06d5b3865dce69839657d0202761 nss-tools-3.13.1-6.el6_2.i686.rpm >>1b1f933409d29705c281e800769c5610811a65d6568674ddda7dace5e9db76f9 nss-util-3.13.1-3.el6_2.i686.rpm >>89039a389f73a99561ba3629dfb0eac27f031e59c209ea4eaee9fcea5141a632 nss-util-devel-3.13.1-3.el6_2.i686.rpm >> >>x86_64: >>96a9433b9cfb6009dcc4e4b61168752313ab925cc72d9cf2bd104136bd1770f5 nspr-4.8.9-3.el6_2.i686.rpm >>0555f49bb513bb0e7188f5a894898e3650c8d8472b990f283749254e59ce8d16 nspr-4.8.9-3.el6_2.x86_64.rpm >>e1e90d9135b4087a9f97ea2ba0b6025e8d6a812e98a1743fe897474d8ec719e5 nspr-devel-4.8.9-3.el6_2.i686.rpm >>9ce858d877be449049d136db3167fe7775151861886ac9a728a94411613c3d35 nspr-devel-4.8.9-3.el6_2.x86_64.rpm >>cbefa7c87e5dc51dab0a433f47c0cd4f6b06ca0c9c3f2579f32141d9b3d30998 nss-3.13.1-6.el6_2.i686.rpm >>e0b350fc3c83e8fa088a64e97e308c0ac254c07836b5d2c1b1abf651550ac433 nss-3.13.1-6.el6_2.x86_64.rpm >>a495226e3abee7423caa069e2b8a1749ee63543800b37b5e3cbd7afcf05d65e1 nss-devel-3.13.1-6.el6_2.i686.rpm >>d5b1fb57fe5c17ba10057de8ffa632f963b813e5de576d152c18b2708f627c6d nss-devel-3.13.1-6.el6_2.x86_64.rpm >>54c94e1640a123d70b4ae4446f750432c47ba0e786237791695ce47289312020 nss-pkcs11-devel-3.13.1-6.el6_2.i686.rpm >>1266afcedd753ef7b93d722782367fd5f12962dfcf6bee8093861b9587f243c4 nss-pkcs11-devel-3.13.1-6.el6_2.x86_64.rpm >>a2d7acdca92b38c0daab5713413cb97ccadf28e186494c87fff905120d8921bf nss-sysinit-3.13.1-6.el6_2.x86_64.rpm >>e82cd7c4c577721da6698a3b20cb90203ee5a6240181eb4ebf877ed8e86c173b nss-tools-3.13.1-6.el6_2.x86_64.rpm >>1b1f933409d29705c281e800769c5610811a65d6568674ddda7dace5e9db76f9 nss-util-3.13.1-3.el6_2.i686.rpm >>b90b050163b1605b8d7bd002955899fe4dd43f865462edfb5470de461906fbb7 nss-util-3.13.1-3.el6_2.x86_64.rpm >>89039a389f73a99561ba3629dfb0eac27f031e59c209ea4eaee9fcea5141a632 nss-util-devel-3.13.1-3.el6_2.i686.rpm >>41e31d4aad5ad08ada416aa0d5c8ea4121ab3171ba211f45f06f5b6fbb213793 nss-util-devel-3.13.1-3.el6_2.x86_64.rpm >> >>Source: >>e528dee7d721d3a621e883a2ea7df3befc8f3a4cc19fa37c3f97f773bccab2ae nspr-4.8.9-3.el6_2.src.rpm >>05b8b089f4dd7cca6c022e900a52ca1d2e036d716847c4cc4d8fa2eb89b3a049 nss-3.13.1-6.el6_2.src.rpm >>f0273a41ba5b4459ad0247611cfa473345886f21bab6dcb096e84d82f588a464 nss-util-3.13.1-3.el6_2.src.rpm >> >> >> >>-- >>Johnny Hughes >>CentOS Project { http://www.centos.org/ } >>irc: hughesjr, #centos(a)irc.freenode.net >> >> >> >>------------------------------ >> >>Message: 3 >>Date: Sat, 25 Feb 2012 05:22:40 +0000 >>From: Johnny Hughes <johnny(a)centos.org> >>Subject: [CentOS-announce] CEEA-2012:0329 CentOS 6 thunderbird Update >>To: centos-announce(a)centos.org >>Message-ID: <20120225052240.GA11930(a)chakra.karan.org> >>Content-Type: text/plain; charset=us-ascii >> >> >>CentOS Errata and Enhancement Advisory 2012:0329 >> >>Upstream details at : http://rhn.redhat.com/errata/RHEA-2012-0329.html >> >>The following updated files have been uploaded and are currently >>syncing to the mirrors: ( sha256sum Filename ) >> >> >>i386: >>0deb275c3241a3943572cab3b6c01515525ad42a679df5dabe66206a4f5f4441 thunderbird-10.0.1-3.el6.centos.i686.rpm >> >>x86_64: >>3b1a148fddacd067db594fde1b86bf3448d6cf1079b38438d7432a4764e1db29 thunderbird-10.0.1-3.el6.centos.x86_64.rpm >> >>Source: >>fba41db75d164461c9603a4735a0f670dcf29d9daf6520611c0806e4ca7965a9 thunderbird-10.0.1-3.el6.centos.src.rpm >> >> >> >>-- >>Johnny Hughes >>CentOS Project { http://www.centos.org/ } >>irc: hughesjr, #centos(a)irc.freenode.net >> >> >> >>------------------------------ >> >>Message: 4 >>Date: Sat, 25 Feb 2012 05:23:10 +0000 >>From: Johnny Hughes <johnny(a)centos.org> >>Subject: [CentOS-announce] CEBA-2012:0339 CentOS 6 openswan Update >>To: centos-announce(a)centos.org >>Message-ID: <20120225052310.GA12010(a)chakra.karan.org> >>Content-Type: text/plain; charset=us-ascii >> >> >>CentOS Errata and Bugfix Advisory 2012:0339 >> >>Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0339.html >> >>The following updated files have been uploaded and are currently >>syncing to the mirrors: ( sha256sum Filename ) >> >> >>i386: >>2ad5574961178d92774023258d278131c83acfa0bfa1d2584d06fd9e64d16d78 openswan-2.6.32-10.el6_2.i686.rpm >>ba280a99b04ca752185ff05289ba1f7e429a26186baf68eaf579cbcdea93e5d1 openswan-doc-2.6.32-10.el6_2.i686.rpm >> >>x86_64: >>dec60d50e94a8e644d1f92e44ec8ee8770e5ab69073f39e914c8efbd47ac0fb6 openswan-2.6.32-10.el6_2.x86_64.rpm >>fd82468d39d724dbe68cb8a63f72217a6c3aaefbd368739c8b9fa7c30ba66d2e openswan-doc-2.6.32-10.el6_2.x86_64.rpm >> >>Source: >>901e69b53004c2c736e4d863c4583563f83ed8f9c6ae6a9bf185eb3797100272 openswan-2.6.32-10.el6_2.src.rpm >> >> >> >>-- >>Johnny Hughes >>CentOS Project { http://www.centos.org/ } >>irc: hughesjr, #centos(a)irc.freenode.net >> >> >> >>------------------------------ >> >>Message: 5 >>Date: Sat, 25 Feb 2012 05:23:47 +0000 >>From: Johnny Hughes <johnny(a)centos.org> >>Subject: [CentOS-announce] CEBA-2012:0338 CentOS 6 selinux-policy >> Update >>To: centos-announce(a)centos.org >>Message-ID: <20120225052347.GA12114(a)chakra.karan.org> >>Content-Type: text/plain; charset=us-ascii >> >> >>CentOS Errata and Bugfix Advisory 2012:0338 >> >>Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0338.html >> >>The following updated files have been uploaded and are currently >>syncing to the mirrors: ( sha256sum Filename ) >> >> >>i386: >>a6af66e794daab711544237711fc60a877d6a766117abe9be5404262f6688446 selinux-policy-3.7.19-126.el6_2.9.noarch.rpm >>c7d4083b26698968559660235c43bb10a97751ebfff7dc3b64abc9462db76c39 selinux-policy-doc-3.7.19-126.el6_2.9.noarch.rpm >>9863d5eb132e9d24874f17018afec339347c59ac29dd76440944b433554994d7 selinux-policy-minimum-3.7.19-126.el6_2.9.noarch.rpm >>26968984b4a1a1eb3910193f7bcfea6d70d615c7be5cc53523c2b9d96f44a575 selinux-policy-mls-3.7.19-126.el6_2.9.noarch.rpm >>fc4da222ceb175ab2f72862084a68f5e818e452457666b7e85f37795f8f8f010 selinux-policy-targeted-3.7.19-126.el6_2.9.noarch.rpm >> >>x86_64: >>71d4b96c4ac6ea7f5e9327da9e54be5d9d88774cae563c793a5063dbe94d51c9 selinux-policy-3.7.19-126.el6_2.9.noarch.rpm >>f75088e18583cf323f24696131ac3567ac9aa992b04c1cb2761938cff4cab69c selinux-policy-doc-3.7.19-126.el6_2.9.noarch.rpm >>9d89b2389cca275c4f1e23ad55ae6d0b24802ec7545957f4c2bc46a9954deff4 selinux-policy-minimum-3.7.19-126.el6_2.9.noarch.rpm >>6ff9803ed6ec2393aa3a65b161ec76ed1162922754c804370229ae701976f8a5 selinux-policy-mls-3.7.19-126.el6_2.9.noarch.rpm >>c4edce76d8f801df40d83ed88e28690d7719614920b6b68bc81b196324953aad selinux-policy-targeted-3.7.19-126.el6_2.9.noarch.rpm >> >>Source: >>ddbb5765611d2fa274c41cc42b0731f3ce56eb5cba1bd5bc5fd23beff49a44c7 selinux-policy-3.7.19-126.el6_2.9.src.rpm >> >> >> >>-- >>Johnny Hughes >>CentOS Project { http://www.centos.org/ } >>irc: hughesjr, #centos(a)irc.freenode.net >> >> >> >>------------------------------ >> >>Message: 6 >>Date: Sat, 25 Feb 2012 10:41:06 +0000 >>From: Johnny Hughes <johnny(a)centos.org> >>Subject: [CentOS-announce] CEBA-2012:0335 CentOS 6 iptables Update >>To: centos-announce(a)centos.org >>Message-ID: <20120225104106.GA27872(a)chakra.karan.org> >>Content-Type: text/plain; charset=us-ascii >> >> >>CentOS Errata and Bugfix Advisory 2012:0335 >> >>Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0335.html >> >>The following updated files have been uploaded and are currently >>syncing to the mirrors: ( sha256sum Filename ) >> >> >>i386: >>6a7d7caa6fbee984d04f36138cad2c8c423348d96f7d631f26ef465b102bcb54 iptables-1.4.7-5.1.el6_2.i686.rpm >>78c572e6d1922558eae95995ea36858d43a33d9c956dd67fc62f393d7f0a26c3 iptables-devel-1.4.7-5.1.el6_2.i686.rpm >>91627a7f937e8e5c7a4904ba4b30c20cccfc707e43e86eef59d19acf2d68e4e8 iptables-ipv6-1.4.7-5.1.el6_2.i686.rpm >> >>x86_64: >>6a7d7caa6fbee984d04f36138cad2c8c423348d96f7d631f26ef465b102bcb54 iptables-1.4.7-5.1.el6_2.i686.rpm >>31caf99ebbbc8db11957b1b910bbac0367828338fe07982f7c31c744416415bc iptables-1.4.7-5.1.el6_2.x86_64.rpm >>78c572e6d1922558eae95995ea36858d43a33d9c956dd67fc62f393d7f0a26c3 iptables-devel-1.4.7-5.1.el6_2.i686.rpm >>9da9193de62224271ec2340d171c3282b3d226185f8f34dfb4410d22ff45be47 iptables-devel-1.4.7-5.1.el6_2.x86_64.rpm >>36511e71182583c5775d442f02f5aaab115252c3eaf343890d151440b06ceb02 iptables-ipv6-1.4.7-5.1.el6_2.x86_64.rpm >> >>Source: >>0e7eb17349dd0543c4e817c8f5025d9f2ddeffc70a6f165528ebb3a4a3b86aaf iptables-1.4.7-5.1.el6_2.src.rpm >> >> >> >>-- >>Johnny Hughes >>CentOS Project { http://www.centos.org/ } >>irc: hughesjr, #centos(a)irc.freenode.net >> >> >> >>------------------------------ >> >>_______________________________________________ >>CentOS-announce mailing list >>CentOS-announce(a)centos.org >>http://lists.centos.org/mailman/listinfo/centos-announce >> >> >>End of CentOS-announce Digest, Vol 84, Issue 14 >>*********************************************** >>_______________________________________________ >>CentOS mailing list >>CentOS(a)centos.org >>http://lists.centos.org/mailman/listinfo/centos >_______________________________________________ >CentOS mailing list >CentOS(a)centos.org >http://lists.centos.org/mailman/listinfo/centos

13 23

Re: [CentOS] Not Quite Minimal CentOS 6.2
by James B. Byrne 26 Apr '12

26 Apr '12

On Thu, April 26, 2012 08:55, Johnny Hughes wrote: >> It has the network stack ... you must configure it during the install. >> >> If you do not configure and enable the ethernet card then it does not >> turn on by default ... but it is in the installer to be able to do: >> >> http://wiki.centos.org/FAQ/CentOS6#head-b67e85d98f0e9f1b599358105c551632c6f… >> > > Don't get the wrong idea here ... I think it is a very silly way to do > installs to not default with the network turned on. It should be turned > on ... but upstream decided it differently and I do not get to be the > decider :D I used to think the same thing. However, on reflection I think that the decision to keep the network down until deliberately enabled is a sensible and prudent security choice. This leaves up to the operator the decision as to whether or not a given system is sufficiently hardened against Internet attacks before connecting. Now, consider upstream's decision to enable network-manager by default on an enterprise distro. THAT I both understand and fundamentally disagree with. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 6

CentOS-announce Digest, Vol 86, Issue 15
by centos-announce-request＠centos.org 26 Apr '12

26 Apr '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2012:0524 CentOS 5 cmirror Update (Johnny Hughes) 2. CEBA-2012:0525 CentOS 6 libvirt-qmf Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 26 Apr 2012 13:31:50 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0524 CentOS 5 cmirror Update To: centos-announce(a)centos.org Message-ID: <20120426133150.GA16368(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0524 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0524.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 6e7c19773229d2bea54b66f9e6531a500be84e1acd499ba5a590527fac33a300 cmirror-1.1.39-13.el5_8.1.1.i386.rpm x86_64: 45f9ce129859bac0227954f72f69a1dc5e6ec5eb95c0bc805f6b928578052eee cmirror-1.1.39-13.el5_8.1.1.x86_64.rpm Source: ff96e198ad67477356b10aa36879448f36c4a6ecb0214eb389f1838799fe9989 cmirror-1.1.39-13.el5_8.1.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Thu, 26 Apr 2012 13:55:04 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0525 CentOS 6 libvirt-qmf Update To: centos-announce(a)centos.org Message-ID: <20120426135504.GA16629(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0525 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0525.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: fa16888103bb2243159f81124ccb59385f30342c4cd92e9522fa3a0eac662c97 libvirt-qmf-0.3.0-7.el6_2.i686.rpm x86_64: 496f469fee6a6f5d073405964e1458d7e5dbfa504bacc250de127e9c768a771a libvirt-qmf-0.3.0-7.el6_2.x86_64.rpm Source: 2ddbe9d375c6b9e5f81d2850c412021b62a7b3f891bd32ff3f078eff1ce28fbb libvirt-qmf-0.3.0-7.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 86, Issue 15 ***********************************************

1 0

Not Quite Minimal CentOS 6.2
by listmail 26 Apr '12

26 Apr '12

Hi All, I a working on configuring a not-quite minimal installation of CentOS 6.2. I tried doing the "minimal" installation available with the installer, but it's a bit too minimal to be useful. So I'm cutting down from a less minimal starting place. I'm pretty familiar with 5.x, but what I'm finding in 6.2 is a lot of new stuff, and a lot of odd behavior. For example, cups is starting at boot time, despite being disabled by chkconfig. And I'm finding things like qpidd, matahari, messagebus, and portreserve that really don't belong in a minimal setup. To clarify, I'm shooting for a simple config, like one would use for a dedicated DNS server. Can anyone point me to an up-to-date list of daemon processes that indicates what they do and whether they can be safely disabled? Also, any ideas as to what would be launching cups would be appreciated. Thanks, --Bill

5 7

restorecon and sudo
by Philippe Naudin 26 Apr '12

26 Apr '12

Hello, On CentOS-6.2, these two commands (on the same machine) give me different results : # restorecon -r /var/www/html/Centos/ # (as root) $ sudo restorecon -r /var/www/html/Centos/ # (as an unprivileged user) /var/www/html/Centos/ is a symlink to /mnt/packages/Centos/ In the first case, I get : # ls -Z /var/www/html/Centos/ drwxr-xr-x. naudin biom system_u:object_r:httpd_sys_content_t 6 and in the second case : $ ls -Z /var/www/html/Centos/ drwxr-xr-x. naudin biom system_u:object_r:unlabeled_t:s0 6 Is this the expected behavior, or is there something I have missed ? -- Philippe Naudin UMR MISTEA : Mathématiques, Informatique et STatistique pour l'Environnement et l'Agronomie INRA, bâtiment 29 - 2 place Viala - 34060 Montpellier cedex 2 tél: 04.99.61.26.34, fax: 04.99.61.29.03, mél: naudin(a)supagro.inra.fr

1 0

OpenOffice.org3 Error after Software Update
by Mark LaPierre 25 Apr '12

25 Apr '12

Hey Y'all, I just installed the updates recommended by Software Update. Apr 25 19:04:43 Updated: xulrunner-10.0.4-1.el6.centos.i686 Apr 25 19:04:53 Updated: firefox-10.0.4-1.el6.centos.i686 Apr 25 19:05:03 Updated: thunderbird-10.0.4-1.el6.centos.i686 Apr 25 19:05:05 Updated: matahari-lib-0.4.4-12.el6_2.i686 Apr 25 19:05:06 Updated: matahari-agent-lib-0.4.4-12.el6_2.i686 Apr 25 19:05:09 Updated: matahari-broker-0.4.4-12.el6_2.i686 Apr 25 19:05:10 Updated: matahari-network-0.4.4-12.el6_2.i686 Apr 25 19:05:11 Updated: matahari-sysconfig-0.4.4-12.el6_2.i686 Apr 25 19:05:12 Updated: matahari-service-0.4.4-12.el6_2.i686 Apr 25 19:05:13 Updated: matahari-host-0.4.4-12.el6_2.i686 Apr 25 19:05:14 Updated: 2:libpng-1.2.49-1.el6_2.i686 Apr 25 19:05:17 Updated: openssl-1.0.0-20.el6_2.4.i686 Apr 25 19:05:21 Updated: openssl-devel-1.0.0-20.el6_2.4.i686 Apr 25 19:05:22 Updated: 2:libpng-devel-1.2.49-1.el6_2.i686 Apr 25 19:05:23 Updated: matahari-0.4.4-12.el6_2.i686 I also installed Virtual Box. Apr 25 19:23:55 Installed: VirtualBox-4.1-4.1.12_77245_rhel6-1.i686 Now open office will not start. It complains about not being able to load a library. The application cannot be started. loading component library failed: file:///usr/lib/openoffice.org3/program/../basis-link/program/i18npool.uno.so I checked for the existence of i18npool.uno.so in the directory indicated. It is there. 1. Has anyone else experienced any problems with the latest software update? 2. What course of action would you recommend to restore the operation of openoffice.org? CentOS release 6.2 (Final) Linux mushroom.patch 2.6.32-220.13.1.el6.i686 #1 SMP Tue Apr 17 22:09:08 BST 2012 i686 i686 i386 GNU/Linux -- _ °v° /(_)\ ^ ^ Mark LaPierre Registerd Linux user No #267004 www.counter.li.org ****

1 0

ATA errors
by m.roth＠5-cent.us 25 Apr '12

25 Apr '12

We just started seeing the errors described in <http://bugs.centos.org/print_bug_page.php?bug_id=5575> The question is, given that we're not seeing DRDY errors, and this is showing on all four drives, and there's no RAID, should we just turn off SMART, or is this telling us something important, other than the bug? mark

1 0

pcscd fails due to hal not running - CentOS 6.2
by Rob Kampen 25 Apr '12

25 Apr '12

Hi list, I have a fully updated 6.2 laptop that gives the following log message upon startup: <snip> Apr 26 08:30:38 robsasus pcscd: pcscdaemon.c:506:main() pcsc-lite 1.5.2 daemon ready. Apr 26 08:30:38 robsasus pcscd: hotplug_libhal.c:490:HPRegisterForHotplugEvents() Could not initialise connection to hald. Apr 26 08:30:38 robsasus pcscd: hotplug_libhal.c:491:HPRegisterForHotplugEvents() Normally this means the HAL daemon (hald) is not running or not ready. Apr 26 08:30:38 robsasus pcscd: pcscdaemon.c:525:main() SVCServiceRunLoop returned Apr 26 08:30:38 robsasus pcscd: pcscdaemon.c:531:at_exit() cleaning /var/run </snip> so I check the /etc/rcX.d/ init files and find that pcscd is set at start 25 but haldaemon is start 26 - thus I guess this is why I get the failure message - hal does not get started until after pcscd. if I start pcscd manually after boot all is well. the pscsd init.d script claims it will start hal - thus I am confused - and at the limit of my knowledge. If someone could enlighten me. TIA

1 0

forwarding packets to service in same host without using loopback network
by Arif Hossain 25 Apr '12

25 Apr '12

This question is not about linux usage. But still i think user list is a good crowd for linux programmer. So here it goes. I have this libnetfilter_queue application which receives packets from kernel based on some iptables rule. Before going straight to my problem, i'm giving a sample workable code and other tools to set up a test environment so that We problem definition and possible solutions can be more accurate and robust. The following code describes the core functionality of the application: #include <stdio.h> #include <stdlib.h> #include <unistd.h> #include <netinet/in.h> #include <linux/types.h> #include <linux/netfilter.h> /* for NF_ACCEPT */ #include <errno.h> #include <libnetfilter_queue/libnetfilter_queue.h> #define PREROUTING 0 #define POSTROUTING 4 #define OUTPUT 3 /* returns packet id */ static u_int32_t print_pkt (struct nfq_data *tb) { int id = 0; struct nfqnl_msg_packet_hdr *ph; struct nfqnl_msg_packet_hw *hwph; u_int32_t mark, ifi; int ret; unsigned char *data; ph = nfq_get_msg_packet_hdr (tb); if (ph) { id = ntohl (ph->packet_id); printf ("hw_protocol=0x%04x hook=%u id=%u ", ntohs (ph->hw_protocol), ph->hook, id); } hwph = nfq_get_packet_hw (tb); if (hwph) { int i, hlen = ntohs (hwph->hw_addrlen); printf ("hw_src_addr="); for (i = 0; i < hlen - 1; i++) printf ("%02x:", hwph->hw_addr[i]); printf ("%02x ", hwph->hw_addr[hlen - 1]); } mark = nfq_get_nfmark (tb); if (mark) printf ("mark=%u ", mark); ifi = nfq_get_indev (tb); if (ifi) printf ("indev=%u ", ifi); ifi = nfq_get_outdev (tb); if (ifi) printf ("outdev=%u ", ifi); ifi = nfq_get_physindev (tb); if (ifi) printf ("physindev=%u ", ifi); ifi = nfq_get_physoutdev (tb); if (ifi) printf ("physoutdev=%u ", ifi); ret = nfq_get_payload (tb, &data); if (ret >= 0) printf ("payload_len=%d ", ret); fputc ('\n', stdout); return id; } static int cb (struct nfq_q_handle *qh, struct nfgenmsg *nfmsg, struct nfq_data *nfa, void *data) { uint32_t ip_src, ip_dst; struct in_addr s_ip; struct in_addr d_ip; uint16_t src_port; uint16_t dst_port; int verdict; int id; int ret; unsigned char *buffer; struct nfqnl_msg_packet_hdr *ph = nfq_get_msg_packet_hdr (nfa); if (ph) { id = ntohl (ph->packet_id); printf ("received packet with id %d", id); } ret = nfq_get_payload (nfa, &buffer); ip_src = *((uint32_t *) (buffer + 12)); ip_dst = *((uint32_t *) (buffer + 16)); src_port = *((uint16_t *) (buffer + 20)); dst_port = *((uint16_t *) (buffer + 22)); s_ip.s_addr = (uint32_t) ip_src; d_ip.s_addr = (uint32_t) ip_dst; *(buffer + 26) = 0x00; *(buffer + 27) = 0x00; printf ( "source IP %s", inet_ntoa (s_ip)); printf ( "destination IP %s", inet_ntoa (d_ip)); printf ( "source port %d", src_port); printf ( "destination port %d", dst_port); if (ret) { switch (ph->hook) { case PREROUTING: printf ( "inbound packet"); //my_mangling_fun(); break; case OUTPUT: printf ( "outbound packet"); //my_mangling_fun(); break; } } verdict = nfq_set_verdict (qh, id, NF_ACCEPT, ret, buffer); if (verdict) printf ( "verdict ok"); return verdict; } int main (int argc, char **argv) { struct nfq_handle *h; struct nfq_q_handle *qh; struct nfnl_handle *nh; int fd; int rv; char buf[4096] __attribute__ ((aligned)); printf ("opening library handle\n"); h = nfq_open (); if (!h) { fprintf (stderr, "error during nfq_open()\n"); exit (1); } printf ("unbinding existing nf_queue handler for AF_INET (if any)\n"); if (nfq_unbind_pf (h, AF_INET) < 0) { fprintf (stderr, "error during nfq_unbind_pf()\n"); exit (1); } printf ("binding nfnetlink_queue as nf_queue handler for AF_INET\n"); if (nfq_bind_pf (h, AF_INET) < 0) { fprintf (stderr, "error during nfq_bind_pf()\n"); exit (1); } printf ("binding this socket to queue '0'\n"); qh = nfq_create_queue (h, 0, &cb, NULL); if (!qh) { fprintf (stderr, "error during nfq_create_queue()\n"); exit (1); } printf ("setting copy_packet mode\n"); if (nfq_set_mode (qh, NFQNL_COPY_PACKET, 0xffff) < 0) { fprintf (stderr, "can't set packet_copy mode\n"); exit (1); } fd = nfq_fd (h); for (;;) { if ((rv = recv (fd, buf, sizeof (buf), 0)) >= 0) { printf ("pkt received\n"); nfq_handle_packet (h, buf, rv); continue; } /* if your application is too slow to digest the packets that * are sent from kernel-space, the socket buffer that we use * to enqueue packets may fill up returning ENOBUFS. Depending * on your application, this error may be ignored. Please, see * the doxygen documentation of this library on how to improve * this situation. */ if (rv < 0 && errno == ENOBUFS) { printf ("losing packets!\n"); continue; } perror ("recv failed"); break; } printf ("unbinding from queue 0\n"); nfq_destroy_queue (qh); #ifdef INSANE /* normally, applications SHOULD NOT issue this command, since * it detaches other programs/sockets from AF_INET, too ! */ printf ("unbinding from AF_INET\n"); nfq_unbind_pf (h, AF_INET); #endif printf ("closing library handle\n"); nfq_close (h); exit (0); } Notice in the callback function two calls to my_mangling_fun() is commented out. This is where i mangle the incoming and outgoing packet. I think this code would be sufficient to describe my case. If further clarification is need please ask, i will post further details. Lets say accompanying iptables rules are following : $iptables -t mangle -A PREROUTING -p udp --dport 5000 -j NFQUEUE $iptables -t mangle -A OUTPUT -p udp --sport 5000 -j NFQUEUE lets compile and fire udp the thing. $gcc -g3 nfq_test.c -lnfnetlink -lnetfilter_queue $./a.out (should be as root) now we can feed garbage udp payload to this thing by netcat both client and server mode $nc -ul 5000 $nc -uvv <IP> 5000 This will print the packet from my netfilter_queue app in stdout. Now that the development environment is set up, we can move to the next thing. What we are trying to achieve is following : Our server is listening on 5000 port. Now all incoming packet destined to udp port 5000 will be queued by kernel. And the handle to this queue will be given to user application we listed earlier. This queue mechanism works like this: When a packet is available, the callback function(cb() in our code) is called. after processing, the callback function calls nfq_set_verdict(). after a **verdict** is returned, next packet will pop from the queue. notice that a packet will not pop from queue if its preceding packet has not been issued a verdict. This verdict values are NF_ACCEPT for accepting packet, NF_DROP for dropping the packet. Now what if i want to concatenate the udp payloads of the incoming and outgoing packet without touching client and server side code? If i want to concatenate udp payloads from our app this very app, then we need to have multiple packets at hand. But we have seen that a packet does not pops from queue before a verdict is issued to its preceding one. So how can this be done? One possible solution is issue a NF_DROP to every packet and save those packets in an intermediate data structure. Let's say we have done it. But how can this packet can be delivered to the service listening on 5000 port? We can't use network stack for delivering the packet, because if we do, then packets will end up in NFQUEUE again. Another problem is, the server is totally agnostic about this app. That means it should not see any difference in the packets. It should see packets as if it came from the original client. I have heard that a application can send data to a server in the same host without using network layer(ip,port) by writing some files. I do not know the validity of this statement. But if anyone knows anything about it , it will be wonderful. Another possible solution proposed to me is : 1.store packets in the application and return verdict NF_DROP 2.re-inject packets into the network stack using RAW sockets 3.tag concatenated UDP packets with a DSCP (see IP packet format) 4.in iptables, add a rule to match on this DSCP (--dscp) and ACCEPT the packet directly, without it passing through your netfilter application 5.If the provider already tags some packets with DSCP, you can add some iptables rules to clear them, like: $iptables -t mangle -A INPUT -j DSCP --set-dscp 0 -- -aft

2 4

Windows 2008R2 AD, kerberos, NFSv4
by janice.psyop 25 Apr '12

25 Apr '12

Hi, I'm trying to set up NFSv4 on two boxes (centos 5.5) and have it authenticate against our Windows 2008R2 AD server acting as the KDC. (samba/winbind is running ok with "idmap config MYCOMPANY: backend = rid" so we have identical ids across the servers.) I can mount my test directory fine via NFSv4 *without* the sec=krb5 option. However, once I put the sec=krb5 option in, then I get a mount error: "mount.nfs4: Permission denied" and rpc.gssd reports: "Failed to obtain machine credentials for connection to server" The computers have an AD computer account and for the service-principal, I created an AD user account "nfsHostname" and mapped the UPN e.g. NFS/ hostname.mycompany.tv(a)MYCOMPANY.TV to it using ktpass. This is the closest post similar to my issue I could find: http://lists.centos.org/pipermail/centos/2010-July/096378.html However, I'm trying not to run the createupn command via smbutils. Side note: Eventually we will also be using a HDS nas which doesn't provide us with samba net utils (e.g. net ads join createupn) only their proprietary webadmin/cli. When that nas joined our AD domain, it created a computer account with SPNs of HOST/HOSTNAME, HOST/hostname.MYCOMPANY.TV and a UPN of HOST/hostname.mycompany.tv(a)MYCOMPANY.TV And the HDS nas only wants encryption type: des-cbc-crc:normal. This is why on my test nfs server (nas002), I'm trying to use the same limited commands as I would if I were using the HDS nas. Any suggestions where to look next or get more verbose info from kerberos/KDC or the nfs server? (nothing shows up in either syslog -- plus, I'm not all that familiar with kerberos.) thanks in advance! JA. info: 10.100.1.11 KDC server (Windows 2008 R2, AD) 10.100.1.35 bk001 (nfsv4 client, kernel 2.6.18-194.32.1.el5) 10.100.1.82 nas002 (nfsv4 server, kernel 2.6.18-194.32.1.el5) 10.100.1.99 monitoring server intsalled on both nfsv4 client and server: nfs-utils.x86_64 1.0.9-60.el5 nfs-utils-lib.x86_64 1.0.8-7.9.el5 nfs4-acl-tools.x86_64 0.3.3-3.el5 krb5-workstation.x86_64 1.6.1-70.el5 samba (nas002) 3.3.8-0.52.el5_5.2 samba (bk001) 3.5.10-0.107.el5 [root@bk001 ~]# net ads testjoin Join is OK [root@bk001 ~]# kinit administrator(a)MYCOMPANY.TV Password for administrator(a)MYCOMPANY.TV: [root@bk001 ~]# kinit nfs/nas002.mycompany.tv(a)MYCOMPANY.TV Password for nfs/nas002.mycompany.tv(a)MYCOMPANY.TV: [root@bk001 ~]# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: nfs/nas002.mycompany.tv(a)MYCOMPANY.TV Valid starting Expires Service principal 04/13/12 16:08:51 04/14/12 02:08:51 krbtgt/MYCOMPANY.TV(a)MYCOMPANY.TV renew until 04/16/12 16:08:51 Kerberos 4 ticket cache: /tmp/tkt0 klist: You have no tickets cached [root@bk001 ~]# showmount -e nas002.mycompany.tv Export list for nas002.mycompany.tv: /array gss/krb5,* [root@bk001 ~]# mount -v -t nfs4 -o proto=tcp,sec=krb5 nas002.mycompany.tv:/ /mnt/nfs4test Warning: rpc.idmapd appears not to be running. All uids will be mapped to the nobody uid. Warning: rpc.gssd appears not to be running. mount: pinging: prog 100003 vers 4 prot tcp port 2049 mount.nfs4: Permission denied [root@bk001 ~]# ps -elf | egrep 'gss|idmap' 1 S root 2498 1 0 75 0 - 8016 - Apr12 ? 00:00:00 rpc.gssd -rrrvvvv 1 S root 4575 1 0 76 0 - 14833 - Apr12 ? 00:00:00 rpc.idmapd -vvv [root@bk001 ~]# tail /var/log/messages Apr 13 16:09:09 bk001 rpc.idmapd[4575]: New client: 16 Apr 13 16:09:09 bk001 rpc.gssd[2498]: handling krb5 upcall Apr 13 16:09:09 bk001 rpc.idmapd[4575]: New client: 17 Apr 13 16:09:09 bk001 rpc.idmapd[4575]: Opened /var/lib/nfs/rpc_pipefs/nfs/clnt16/idmap Apr 13 16:09:09 bk001 rpc.gssd[2498]: Using keytab file '/etc/krb5.keytab' Apr 13 16:09:09 bk001 rpc.gssd[2498]: WARNING: Failed to obtain machine credentials for connection to server nas002.mycompany.tv Apr 13 16:09:09 bk001 rpc.gssd[2498]: doing error downcall Apr 13 16:09:09 bk001 rpc.idmapd[4575]: Stale client: 16 Apr 13 16:09:09 bk001 rpc.idmapd[4575]: -> closed /var/lib/nfs/rpc_pipefs/nfs/clnt16/idmap Apr 13 16:09:09 bk001 rpc.idmapd[4575]: Stale client: 17 Apr 13 16:09:09 bk001 rpc.idmapd[4575]: -> closed /var/lib/nfs/rpc_pipefs/nfs/clnt17/idmap Apr 13 16:09:09 bk001 rpc.gssd[2498]: destroying client clnt17 Apr 13 16:09:09 bk001 rpc.gssd[2498]: destroying client clnt16 tshark capture of commands I performed (above): [root@bk001 ~]# cat /var/tmp/tshark_041312-1608.out 366 9.948504 10.100.1.35 -> 10.100.1.11 TCP 42564 > kerberos [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=86719599 TSER=0 WS=7 367 9.948813 10.100.1.11 -> 10.100.1.35 TCP kerberos > 42564 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 TSV=396813568 TSER=86719599 368 9.948824 10.100.1.35 -> 10.100.1.11 TCP 42564 > kerberos [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=86719599 TSER=396813568 369 9.948849 10.100.1.35 -> 10.100.1.11 KRB5 AS-REQ 370 9.949976 10.100.1.11 -> 10.100.1.35 KRB5 KRB Error: KRB5KDC_ERR_PREAUTH_REQUIRED 371 9.949982 10.100.1.35 -> 10.100.1.11 TCP 42564 > kerberos [ACK] Seq=181 Ack=154 Win=6432 Len=0 TSV=86719600 TSER=396813568 372 9.950031 10.100.1.35 -> 10.100.1.11 TCP 42564 > kerberos [FIN, ACK] Seq=181 Ack=154 Win=6432 Len=0 TSV=86719600 TSER=396813568 373 9.950288 10.100.1.11 -> 10.100.1.35 TCP kerberos > 42564 [ACK] Seq=154 Ack=182 Win=65160 Len=0 TSV=396813568 TSER=86719600 374 9.950297 10.100.1.11 -> 10.100.1.35 TCP kerberos > 42564 [RST, ACK] Seq=154 Ack=182 Win=0 Len=0 444 11.840921 10.100.1.35 -> 10.100.1.11 TCP 42565 > kerberos [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=86721491 TSER=0 WS=7 446 11.841178 10.100.1.11 -> 10.100.1.35 TCP kerberos > 42565 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 TSV=396813757 TSER=86721491 447 11.841185 10.100.1.35 -> 10.100.1.11 TCP 42565 > kerberos [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=86721491 TSER=396813757 448 11.841206 10.100.1.35 -> 10.100.1.11 KRB5 AS-REQ 449 11.842812 10.100.1.11 -> 10.100.1.35 TCP [TCP segment of a reassembled PDU] 450 11.842817 10.100.1.35 -> 10.100.1.11 TCP 42565 > kerberos [ACK] Seq=259 Ack=1449 Win=8688 Len=0 TSV=86721493 TSER=396813757 451 11.842819 10.100.1.11 -> 10.100.1.35 KRB5 AS-REP 452 11.842822 10.100.1.35 -> 10.100.1.11 TCP 42565 > kerberos [ACK] Seq=259 Ack=1518 Win=8688 Len=0 TSV=86721493 TSER=396813757 453 11.842852 10.100.1.35 -> 10.100.1.11 TCP 42565 > kerberos [FIN, ACK] Seq=259 Ack=1518 Win=8688 Len=0 TSV=86721493 TSER=396813757 454 11.843043 10.100.1.11 -> 10.100.1.35 TCP kerberos > 42565 [ACK] Seq=1518 Ack=260 Win=65160 Len=0 TSV=396813758 TSER=86721493 455 11.843050 10.100.1.11 -> 10.100.1.35 TCP kerberos > 42565 [RST, ACK] Seq=1518 Ack=260 Win=0 Len=0 827 21.821693 10.100.1.35 -> 10.100.1.11 TCP 42566 > kerberos [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=86731472 TSER=0 WS=7 828 21.821920 10.100.1.11 -> 10.100.1.35 TCP kerberos > 42566 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 TSV=396814755 TSER=86731472 829 21.821930 10.100.1.35 -> 10.100.1.11 TCP 42566 > kerberos [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=86731472 TSER=396814755 830 21.821958 10.100.1.35 -> 10.100.1.11 KRB5 AS-REQ 831 21.822968 10.100.1.11 -> 10.100.1.35 KRB5 AS-REP 832 21.822974 10.100.1.35 -> 10.100.1.11 TCP 42566 > kerberos [ACK] Seq=191 Ack=618 Win=6787 Len=0 TSV=86731473 TSER=396814756 833 21.823003 10.100.1.35 -> 10.100.1.11 TCP 42566 > kerberos [FIN, ACK] Seq=191 Ack=618 Win=6787 Len=0 TSV=86731473 TSER=396814756 835 21.823278 10.100.1.11 -> 10.100.1.35 TCP kerberos > 42566 [ACK] Seq=618 Ack=192 Win=65160 Len=0 TSV=396814756 TSER=86731473 836 21.823287 10.100.1.11 -> 10.100.1.35 TCP kerberos > 42566 [RST, ACK] Seq=618 Ack=192 Win=0 Len=0 1472 39.980317 10.100.1.35 -> 10.100.1.82 TCP 40520 > nfs [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=86749629 TSER=0 WS=7 1473 39.980491 10.100.1.82 -> 10.100.1.35 TCP nfs > 40520 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=3789493491 TSER=86749629 WS=7 1474 39.980498 10.100.1.35 -> 10.100.1.82 TCP 40520 > nfs [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSV=86749631 TSER=3789493491 1475 39.980533 10.100.1.35 -> 10.100.1.82 NFS V4 NULL Call 1476 39.980701 10.100.1.82 -> 10.100.1.35 TCP nfs > 40520 [ACK] Seq=1 Ack=45 Win=5888 Len=0 TSV=3789493492 TSER=86749631 1477 39.980705 10.100.1.82 -> 10.100.1.35 NFS V4 NULL Reply (Call In 1475) 1478 39.980707 10.100.1.35 -> 10.100.1.82 TCP 40520 > nfs [ACK] Seq=45 Ack=29 Win=5888 Len=0 TSV=86749631 TSER=3789493492 1479 39.980733 10.100.1.35 -> 10.100.1.82 TCP 40520 > nfs [FIN, ACK] Seq=45 Ack=29 Win=5888 Len=0 TSV=86749631 TSER=3789493492 1480 39.980896 10.100.1.82 -> 10.100.1.35 TCP nfs > 40520 [FIN, ACK] Seq=29 Ack=46 Win=5888 Len=0 TSV=3789493492 TSER=86749631 1481 39.980901 10.100.1.35 -> 10.100.1.82 TCP 40520 > nfs [ACK] Seq=46 Ack=30 Win=5888 Len=0 TSV=86749631 TSER=3789493492 1482 40.001039 10.100.1.35 -> 10.100.1.82 TCP connendp > nfs [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=86749651 TSER=0 WS=7 1483 40.001210 10.100.1.82 -> 10.100.1.35 TCP nfs > connendp [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=3789493512 TSER=86749651 WS=7 1484 40.001221 10.100.1.35 -> 10.100.1.82 TCP connendp > nfs [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSV=86749651 TSER=3789493512 1485 40.001244 10.100.1.35 -> 10.100.1.82 NFS V4 NULL Call 1486 40.001409 10.100.1.82 -> 10.100.1.35 TCP nfs > connendp [ACK] Seq=1 Ack=45 Win=5888 Len=0 TSV=3789493512 TSER=86749651 1487 40.001414 10.100.1.82 -> 10.100.1.35 NFS V4 NULL Reply (Call In 1485) 1488 40.001418 10.100.1.35 -> 10.100.1.82 TCP connendp > nfs [ACK] Seq=45 Ack=29 Win=5888 Len=0 TSV=86749652 TSER=3789493512 1489 40.002363 10.100.1.35 -> 10.100.1.82 TCP connendp > nfs [FIN, ACK] Seq=45 Ack=29 Win=5888 Len=0 TSV=86749653 TSER=3789493512 1490 40.002526 10.100.1.82 -> 10.100.1.35 TCP nfs > connendp [FIN, ACK] Seq=29 Ack=46 Win=5888 Len=0 TSV=3789493513 TSER=86749653 1491 40.002532 10.100.1.35 -> 10.100.1.82 TCP connendp > nfs [ACK] Seq=46 Ack=30 Win=5888 Len=0 TSV=86749653 TSER=3789493513 1493 40.002880 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.WARNING: rpc.idmapd[4575]: New client: 16\n 1497 40.003611 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.ERR: rpc.gssd[2498]: handling krb5 upcall \n 1498 40.004069 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.WARNING: rpc.idmapd[4575]: New client: 17\n 1499 40.004489 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.WARNING: rpc.idmapd[4575]: Opened /var/lib/nfs/rpc_pipefs/nfs/clnt16/idmap\n 1500 40.004949 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.ERR: rpc.gssd[2498]: Using keytab file '/etc/krb5.keytab' \n 1501 40.005369 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.ERR: rpc.gssd[2498]: WARNING: Failed to obtain machine credentials for connection to server nas002.mycompany.tv \n 1502 40.005829 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.ERR: rpc.gssd[2498]: doing error downcall \n 1503 40.012862 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.WARNING: rpc.idmapd[4575]: Stale client: 16\n 1504 40.013326 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.WARNING: rpc.idmapd[4575]: \t-> closed /var/lib/nfs/rpc_pipefs/nfs/clnt16/idmap\n 1505 40.013740 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.WARNING: rpc.idmapd[4575]: Stale client: 17\n 1506 40.014157 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.WARNING: rpc.idmapd[4575]: \t-> closed /var/lib/nfs/rpc_pipefs/nfs/clnt17/idmap\n 1507 40.014621 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.ERR: rpc.gssd[2498]: destroying client clnt17 \n 1508 40.015082 10.100.1.35 -> 10.100.1.99 Syslog DAEMON.ERR: rpc.gssd[2498]: destroying client clnt16 \n [root@bk001 ~]#

2 2

CentOS, XFS, VirtualBox - can they just get along?
by Boris Epstein 25 Apr '12

25 Apr '12

Hello all, I am running VirtualBox 4.1 on CentOS 6 and I got this warning that putting your VM's into an XFS filesystem is risky. I have also heard some rumors on the net to this effect. Does anyone know in more detail what's behind those rumors? Thanks. Boris.

2 1

Does SMTP Connection Drop When Posfix Reload is Issued ?
by Prabhpal S. Mavi 25 Apr '12

25 Apr '12

Dear Community Friends Greetings, i work with ISP, we host email service for almost 500+ companies and 200+ mail servers relay through my smart host. i implemented something that when our smart host would become blacklisted. It will automatic switch to next available smart host (which is ready sitting). that mean it will start relaying message through another smart host automatically. i think i must tell little background as well. it is actually php script that perform blacklist check every minute through cron. if it found that IP is blacklisted. It will then insert "relay host =" value in main.cf and reload postfix service. When IP is no more blacklisted it will then remove the same directive from main.cf and reload postfix. everything is working as expected. i have one question, when we reload postfix does it drop active SMTP session? for example lets say that remote SMTP server is delivering message to my postfix that has 8MB attachment. message was not fully transferred. lets say that 4MB was transferred. and i issued "postfix reload". will that connection drop or continue to deliver the mail? Thanks / Regards Prabhpal S. Mavi

7 10

CentOS-announce Digest, Vol 86, Issue 14
by centos-announce-request＠centos.org 25 Apr '12

25 Apr '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2012:0518 Important CentOS 5 openssl Update (Johnny Hughes) 2. CESA-2012:0515 Critical CentOS 5 firefox Update (Johnny Hughes) 3. CESA-2012:0516 Critical CentOS 5 firefox Update (Johnny Hughes) 4. CESA-2012:0516 Critical CentOS 5 thunderbird Update (Johnny Hughes) 5. CESA-2012:0518 Important CentOS 6 openssl Update (Johnny Hughes) 6. CESA-2012:0515 Critical CentOS 6 firefox Update (Johnny Hughes) 7. CEBA-2012:0511 CentOS 6 matahari Update (Johnny Hughes) 8. CEBA-2012:0512 CentOS 6 aide Update (Johnny Hughes) 9. CESA-2012:0516 Critical CentOS 6 thunderbird Update (Johnny Hughes) 10. CESA-2012:0523 Moderate CentOS 5 libpng Update (Johnny Hughes) 11. CESA-2012:0523 Moderate CentOS 6 libpng Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 25 Apr 2012 01:22:21 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0518 Important CentOS 5 openssl Update To: centos-announce(a)centos.org Message-ID: <20120425012221.GA5708(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0518 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0518.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d8e4fe4b31be6324ed03ad70d86156a3168efc55c5b06ffd4fde486feb9fe2d6 openssl097a-0.9.7a-11.el5_8.2.i386.rpm c65df6dec7b008e84ab414c6970fb2c409a5e00cba23a4a4350b1a716b229559 openssl-0.9.8e-22.el5_8.3.i386.rpm 586a15a6bc19278bee19a2572bd1bc788003ff4c198431d0f4663adbb1b3184c openssl-0.9.8e-22.el5_8.3.i686.rpm 639974e459e9f6c0403360fc41067f48394f512d0ba5e579ea45b8992d2da168 openssl-devel-0.9.8e-22.el5_8.3.i386.rpm 92a492519329325336183c23929df620c8f8ddfd0e82b10c57664ec6d55e7bad openssl-perl-0.9.8e-22.el5_8.3.i386.rpm x86_64: d8e4fe4b31be6324ed03ad70d86156a3168efc55c5b06ffd4fde486feb9fe2d6 openssl097a-0.9.7a-11.el5_8.2.i386.rpm 7fa89e3ca44626a62c98bc84be77959f66a9b8eba6bbb9fd98365e74e6e103aa openssl097a-0.9.7a-11.el5_8.2.x86_64.rpm 586a15a6bc19278bee19a2572bd1bc788003ff4c198431d0f4663adbb1b3184c openssl-0.9.8e-22.el5_8.3.i686.rpm a5492f5973452f6193a3fb6cd3249f2791c52cebd1e1d12560d2d64b256c2784 openssl-0.9.8e-22.el5_8.3.x86_64.rpm 639974e459e9f6c0403360fc41067f48394f512d0ba5e579ea45b8992d2da168 openssl-devel-0.9.8e-22.el5_8.3.i386.rpm f2bd64faebbd7b5dc0124cca14b217ace539e04913f9eb266e8c2274b7dc94b8 openssl-devel-0.9.8e-22.el5_8.3.x86_64.rpm 75c9372cf9aa77e8d245254b3696b56d6bed262f3245e8c95278a07e74ffb42c openssl-perl-0.9.8e-22.el5_8.3.x86_64.rpm Source: d152bcff32227dd08cc0495718cfd19ad3ca2e1c15011ae41dc9ef0f434d4176 openssl097a-0.9.7a-11.el5_8.2.src.rpm 63492a08a2e0cd5277925dc88d34a85a381bd4c087787715e57645008a5bbace openssl-0.9.8e-22.el5_8.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 25 Apr 2012 01:27:20 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0515 Critical CentOS 5 firefox Update To: centos-announce(a)centos.org Message-ID: <20120425012720.GA5926(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0515 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0515.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: c2e589aadfac0a7c5977431242a268743d4a223c4da6cab73919c0af8cba3278 firefox-10.0.4-1.el5.centos.i386.rpm eaa1f4d40f40f2c20310a7234a80d643dfd3cf6124a38466dfe700581f166304 xulrunner-10.0.4-1.el5_8.i386.rpm 67a66eb67a74646e261340123f32fc604ae072feb475674a86532b30deaec4e4 xulrunner-devel-10.0.4-1.el5_8.i386.rpm x86_64: c2e589aadfac0a7c5977431242a268743d4a223c4da6cab73919c0af8cba3278 firefox-10.0.4-1.el5.centos.i386.rpm 9f1a1179d341db3846865cb0c7e39a2a9e23c3e06067760ebeb07090f20ba9c0 firefox-10.0.4-1.el5.centos.x86_64.rpm eaa1f4d40f40f2c20310a7234a80d643dfd3cf6124a38466dfe700581f166304 xulrunner-10.0.4-1.el5_8.i386.rpm aa76e67d4a67b6c919176f37906b224ef0bcf4217ec2995b121528c594557cd3 xulrunner-10.0.4-1.el5_8.x86_64.rpm 67a66eb67a74646e261340123f32fc604ae072feb475674a86532b30deaec4e4 xulrunner-devel-10.0.4-1.el5_8.i386.rpm f34186000619626cb784b3f7a916bddd1b7416e6b731ef04842788ca797e64fd xulrunner-devel-10.0.4-1.el5_8.x86_64.rpm Source: 1fbc0bd8c0045baeb7e75a8a5162752b0b4c0253e96cacc22cc426f5351a3b33 firefox-10.0.4-1.el5.centos.src.rpm be2954b3d1a4f9309fb097188d0bcd684985f2c62801bcaf4b0ed224f672abcb xulrunner-10.0.4-1.el5_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Wed, 25 Apr 2012 01:30:17 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0516 Critical CentOS 5 firefox Update To: centos-announce(a)centos.org Message-ID: <20120425013017.GA7324(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0516 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0516.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: f9867946d381c189979c309151f633bc51596909c160dbc03e5324582d664c20 thunderbird-10.0.4-1.el5.centos.i386.rpm x86_64: e67a3cc7f4319d39d9b23e59b03113224bd9ffaec8ed7ac76081211ce16a27c0 thunderbird-10.0.4-1.el5.centos.x86_64.rpm Source: be26754c255f7058be311dad0c8b0a7d515f6b20b6f0d50f4372a796db682d53 thunderbird-10.0.4-1.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Tue, 24 Apr 2012 20:39:28 -0500 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0516 Critical CentOS 5 thunderbird Update To: CentOS-Announce <centos-announce(a)centos.org> Message-ID: <4F9755D0.7020105(a)centos.org> Content-Type: text/plain; charset="iso-8859-1" CentOS Errata and Security Advisory 2012:0516 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0516.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: f9867946d381c189979c309151f633bc51596909c160dbc03e5324582d664c20 thunderbird-10.0.4-1.el5.centos.i386.rpm x86_64: e67a3cc7f4319d39d9b23e59b03113224bd9ffaec8ed7ac76081211ce16a27c0 thunderbird-10.0.4-1.el5.centos.x86_64.rpm Source: be26754c255f7058be311dad0c8b0a7d515f6b20b6f0d50f4372a796db682d53 thunderbird-10.0.4-1.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net

1 0

Latest 6.2 kernel is broken
by Lars Hecking 25 Apr '12

25 Apr '12

I just kickstarted a new machine with the latest CentOS 6.2 files, including kernel 2.6.32-220.13.1.el6.x86_64. It came up without network interfaces. dmesg says: bnx2: Broadcom NetXtreme II Gigabit Ethernet Driver bnx2 v2.2.1 (Dec 18, 2011) alloc irq_desc for 36 on node -1 alloc kstat_irqs on node -1 bnx2 0000:01:00.0: PCI INT A -> GSI 36 (level, low) -> IRQ 36 bnx2 0000:01:00.0: setting latency timer to 64 bnx2 0000:01:00.0: firmware: requesting bnx2/bnx2-mips-09-6.2.1b.fw bnx2: Can't load firmware file "bnx2/bnx2-mips-09-6.2.1b.fw" bnx2 0000:01:00.0: PCI INT A disabled bnx2: probe of 0000:01:00.0 failed with error -2 The firmware file is missing from /lib/firmware and the kernel-firmware rpm. I found a copy of it on a Fedora site and dumped it into the right location, but it wasn't found after a reboot. Yet, it was found after a second reboot. Why is that? Is a rebuild of initramfs triggered somehow? What I don't understand is: I have an identical machine that I installed under 6.2 a while back, and kept up to date, and it doesn't have this problem. However, it tells me it uses version v2.1.11 (July 20, 2011) of the driver, how is that possible? # grep bnx2 /var/log/messages Apr 23 17:10:03 localhost kernel: bnx2: Broadcom NetXtreme II Gigabit Ethernet Driver bnx2 v2.1.11 (July 20, 2011) Apr 23 17:10:03 localhost kernel: bnx2 0000:01:00.0: PCI INT A -> GSI 36 (level, low) -> IRQ 36 Apr 23 17:10:03 localhost kernel: bnx2 0000:01:00.0: firmware: requesting bnx2/bnx2-mips-09-6.2.1a.fw Apr 23 17:10:03 localhost kernel: bnx2 0000:01:00.0: firmware: requesting bnx2/bnx2-rv2p-09-6.0.17.fw Apr 23 17:10:03 localhost kernel: bnx2 0000:01:00.0: eth0: Broadcom NetXtreme II BCM5716 1000Base-T (C0) PCI Express found at mem da000000, IRQ 36, node addr 78:2b:cb:67:3f:b6 [...] # modinfo /lib/modules/2.6.32-220.13.1.el6.x86_64/kernel/drivers/net/bnx2.ko filename: /lib/modules/2.6.32-220.13.1.el6.x86_64/kernel/drivers/net/bnx2.ko firmware: bnx2/bnx2-rv2p-09ax-6.0.17.fw firmware: bnx2/bnx2-rv2p-09-6.0.17.fw firmware: bnx2/bnx2-mips-09-6.2.1a.fw firmware: bnx2/bnx2-rv2p-06-6.0.15.fw firmware: bnx2/bnx2-mips-06-6.2.1.fw version: 2.1.11 license: GPL description: Broadcom NetXtreme II BCM5706/5708/5709/5716 Driver [...] # lspci -v -s 01:00.1 01:00.1 Ethernet controller: Broadcom Corporation NetXtreme II BCM5716 Gigabit Ethernet (rev 20) Subsystem: Dell PowerEdge R410 BCM5716 Gigabit Ethernet Flags: bus master, fast devsel, latency 0, IRQ 48 Memory at dc000000 (64-bit, non-prefetchable) [size=32M] Capabilities: [48] Power Management version 3 Capabilities: [50] Vital Product Data Capabilities: [58] MSI: Enable- Count=1/16 Maskable- 64bit+ Capabilities: [a0] MSI-X: Enable+ Count=9 Masked- Capabilities: [ac] Express Endpoint, MSI 00 Capabilities: [100] Device Serial Number 78-2b-cb-ff-fe-67-3f-b7 Capabilities: [110] Advanced Error Reporting Capabilities: [150] Power Budgeting <?> Capabilities: [160] Virtual Channel <?> Kernel driver in use: bnx2 Kernel modules: bnx2

4 13

ldap, 2.3 primary, 2.4 secondary
by aurfalien 25 Apr '12

25 Apr '12

Hi all, Is it possible to use a 2.3 OpenLDAP primary while having a 2.4 OpenLDAP secondary? Currently I have all at 2.3 (Centos 5) but am needing to up a remote facility to Centos 6 before doing the main facility to 6. Hoping I can mix and match but it looks like I may not be able to. My LDAP secondaries pull the DB over pretty frequently so I would be doing the same thing here. I would have asked the OpenLDAP list but you are much nicer to an order of magnitude, seriously. Thanks in advance, - aurf

2 2

strange partitioning problem
by Boris Epstein 25 Apr '12

25 Apr '12

Hello listmates, Here's I am, trying to install Centos 6.2 64-bit on a server with 24 TB of disk RAIDed as RAID 6. So I get this 18 TB disk (the RAID is recognized as one disk) where I am trying to put my OS. And I can create a couple of partitions - let us say I defiine a 150 GB swap, a 150 GB "/", a 100 GB "/var". So far so good. Then I try to define the next one, say, a 100 GB "/tmp" and get a message stating there is not enough disk space whereas I still have over 18 TB free and the installation interface reflects that accurately! I am at a loss. Is that something related to the sheer size of the disk? Why would this happen - especially at so basic a stage of the process? At any rate, any help or advice would be greatly appreciated. Regards, Boris.

9 28

Re: [CentOS] [CentOS-announce] CESA-2012:0465 Critical CentOS 5 samba Update
by James A. Peltier 24 Apr '12

24 Apr '12

Any idea about samba3x packages? Are they vulnerable? ----- Original Message ----- | | CentOS Errata and Security Advisory 2012:0465 Critical | | Upstream details at : | http://rhn.redhat.com/errata/RHSA-2012-0465.html | | The following updated files have been uploaded and are currently | syncing to the mirrors: ( sha256sum Filename ) | | i386: | 50fc234754d886f8147c22ed2b034d1f7be84dd78c10a8280699265a9c542cfa | libsmbclient-3.0.33-3.39.el5_8.i386.rpm | 62c20ba55a5213be09a2250454274f1fbf6aa854e84d78aaa1f75aec5d2a1920 | libsmbclient-devel-3.0.33-3.39.el5_8.i386.rpm | 294d346782344d32018a02ac25c9def811cbaced00ce19c0ca7c193d4f68d0c0 | samba-3.0.33-3.39.el5_8.i386.rpm | b792d801b4d57882b7c3f398d44b378446d6be48a07b12b265f07dc25564db13 | samba-client-3.0.33-3.39.el5_8.i386.rpm | 77a3666353bbc27ff71b1d4e34882459c5b440f783f21bb3c0adc3898ef501fb | samba-common-3.0.33-3.39.el5_8.i386.rpm | 1bea83056056c3da0dc568f13655c61c6b14f56957e7180aaaa4d6d8f26f7c82 | samba-swat-3.0.33-3.39.el5_8.i386.rpm | | x86_64: | 50fc234754d886f8147c22ed2b034d1f7be84dd78c10a8280699265a9c542cfa | libsmbclient-3.0.33-3.39.el5_8.i386.rpm | 61b5237a09f59a445730e994517ad565fb24da1e9bf07b5e6b7b8c80ac6ca588 | libsmbclient-3.0.33-3.39.el5_8.x86_64.rpm | 62c20ba55a5213be09a2250454274f1fbf6aa854e84d78aaa1f75aec5d2a1920 | libsmbclient-devel-3.0.33-3.39.el5_8.i386.rpm | 5c973b1c9c0a986989805afe6f600a48a76d9d6175e92896065591795516a157 | libsmbclient-devel-3.0.33-3.39.el5_8.x86_64.rpm | 55ee35ca8dc332e0bea6299ce2eed90d7b9460ae312a8abf42822cd0a737c555 | samba-3.0.33-3.39.el5_8.x86_64.rpm | 70200f37cfe741d94e9bb9060f9f2128d08a90ac6b6674f97a9adb474ea3f41b | samba-client-3.0.33-3.39.el5_8.x86_64.rpm | 77a3666353bbc27ff71b1d4e34882459c5b440f783f21bb3c0adc3898ef501fb | samba-common-3.0.33-3.39.el5_8.i386.rpm | 16e9165d7d3f3099d45f6389a58f7ebc87642856414506728e5d8f0466e343a3 | samba-common-3.0.33-3.39.el5_8.x86_64.rpm | e4f6f354d8a38ffb4f17af0be3736be3a9e055ba3e6ddff5f21a547fb8924d4f | samba-swat-3.0.33-3.39.el5_8.x86_64.rpm | | Source: | 4e4b6d761aed021020fe8ac82340ba78f835fc4610516ee8564da347ac735e22 | samba-3.0.33-3.39.el5_8.src.rpm | | | | -- | Johnny Hughes | CentOS Project { http://www.centos.org/ } | irc: hughesjr, #centos(a)irc.freenode.net | | _______________________________________________ | CentOS-announce mailing list | CentOS-announce(a)centos.org | http://lists.centos.org/mailman/listinfo/centos-announce | -- James A. Peltier Manager, IT Services - Research Computing Group Simon Fraser University - Burnaby Campus Phone : 778-782-6573 Fax : 778-782-3045 E-Mail : jpeltier(a)sfu.ca Website : http://www.sfu.ca/itservices http://blogs.sfu.ca/people/jpeltier Success is to be measured not so much by the position that one has reached in life but as by the obstacles they have overcome. - Booker T. Washington

3 2

"rename3" ethernet NIC?
by Boris Epstein 24 Apr '12

24 Apr '12

Hello listmates, Bizarrely enough, I ended up with what I intended to be called "eth1" being called "rename3". Would anybody have any idea what the cause could be of this? Thanks. Boris.

2 1

CentOS-announce Digest, Vol 86, Issue 13
by centos-announce-request＠centos.org 24 Apr '12

24 Apr '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2012:0509 Moderate CentOS 6 wireshark Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 24 Apr 2012 14:27:48 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0509 Moderate CentOS 6 wireshark Update To: centos-announce(a)centos.org Message-ID: <20120424142748.GA3076(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0509 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0509.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 12b6fefeaee07dc4f84110f2ff66e66bb6774126dcecc5e0e672c4d9ba64b077 wireshark-1.2.15-2.el6_2.1.i686.rpm 0a85aa2c82986479e5eb55e6918d84d664c8af4bab6fe921f28e2e59fc590f56 wireshark-devel-1.2.15-2.el6_2.1.i686.rpm 8ab9026910b899d1e2071d97dea4a15dd3ee1868121defa8c0f6bd5441c7455b wireshark-gnome-1.2.15-2.el6_2.1.i686.rpm x86_64: 12b6fefeaee07dc4f84110f2ff66e66bb6774126dcecc5e0e672c4d9ba64b077 wireshark-1.2.15-2.el6_2.1.i686.rpm f3353c8677ccb128eb06be6ebbb1ea5dfc3084c176daa0ef558a1b2f35dae9aa wireshark-1.2.15-2.el6_2.1.x86_64.rpm 0a85aa2c82986479e5eb55e6918d84d664c8af4bab6fe921f28e2e59fc590f56 wireshark-devel-1.2.15-2.el6_2.1.i686.rpm 3fc3a7e6bff12511b4dbca45d502123951fe668e90caee7518ea0493265183cd wireshark-devel-1.2.15-2.el6_2.1.x86_64.rpm b9e73d61563e32d94f4bd73d139aba9986796ee6f25bb40887854be7b64e95ab wireshark-gnome-1.2.15-2.el6_2.1.x86_64.rpm Source: fcec8718aa049adbb5d3071754f19dc0ab494b3d9e359e7c460c33c86800f08d wireshark-1.2.15-2.el6_2.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 86, Issue 13 ***********************************************

1 0

About audit2allow generated rules
by Min Wang 24 Apr '12

24 Apr '12

HI I have something in /var/log/audit/audit.log like: avc: denied { write } for pid=23739 comm="httpd" name="renderd.sock" dev=dm-0 ino=1183752 scontext=unconfined_u:system_r:httpd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file use audit2allow it generates something like this: allow httpd_t var_run_t:sock_file write; Is the rule too liberal? that means httpd_t can write any var_run_t 's sock_file? Or I miss-understand something? Should it only allow httpd_t to write this specific render.sock file? If so, what's the right way to do? Thanks. min

1 0

problems with PV snapshots
by Riccardo Veraldi 24 Apr '12

24 Apr '12

Hello, I have a Centos 6.2 clsuter with a CLVM partition on which I have a GFS2 file system. The problem rises when I make a snapshot from my FC NetAPP FAS2020. After I make the snapshot (it is a rw snapshot) of my LUN, I am not able to mount it from any of my cluster nodes, because the Physical Volume is seen two times one time on the standard LVM partition and the other time on the snapshot partition so te PV is foudn to be duplicate and I cannot mount it. > pvs Found duplicate PV 5ZTDCmWHDH6M04nl58Wyyi3nYG8BOCRo: using /dev/mapper/mpathl not /dev/mapper/mpathi PV VG Fmt Attr PSize PFree /dev/mapper/mpathk NetCluster0 lvm2 a-- 1.67t 1020.00m I need a hint on how to fix this problem. I need to access the snaphot volume to backup my data but I am unable to do it... thank you very much Rick

3 4

Centos 6.2 Nvidia drivers from elrepo - kmod-nvidia
by aurfalien 23 Apr '12

23 Apr '12

Hi all, Having issues with the Nvidia drives on Centos 6.2. So after I do yum install kmod-nvidia and rebooting, I get no screen. My errors; /var/log/messages; kernel: NVRM: The NVIDIA GeForce4 MX 4000 GPU installed in this system is kernel: NVRM: supported through the NVIDIA 96.43.xx Legacy drivers. Please kernel: NVRM: visit http://www.nvidia.com/object/unix.html for more kernel: NVRM: information. The 295.40 NVIDIA driver will ignore kernel: NVRM: this GPU. Continuing probe... kernel: NVRM: No NVIDIA graphics adapter found! gdm-binary[2013]: WARNING: GdmDisplay: display lasted 0.548291 seconds gdm-binary[2013]: WARNING: GdmLocalDisplayFactory: maximum number of X display failures reached: check X server log for errors /var/log/Xorg.0.log; [ 37.145] (EE) NVIDIA: Failed to load the NVIDIA kernel module. Please check your [ 37.145] (EE) NVIDIA: system's kernel log for additional error messages. [ 37.145] (II) UnloadModule: "nvidia" [ 37.145] (II) Unloading nvidia [ 37.145] (EE) Failed to load module "nvidia" (module-specific error, 0) [ 37.145] (EE) No drivers available. [ 37.145] Fatal server error: [ 37.145] no screens found [ 37.145] I also tried to install the Nvidia driver from there site by first disabling nouveau and running there installer but that one seemed rather unstable. Any ideas? Thanks in adance. - aurf

3 4

Cisco AnyConnect on 6.2 32-bit?
by Rhugga Harper 23 Apr '12

23 Apr '12

Grr.. I'm pulling my hair out trying to get the Cisco AnyConnect client to work under 6.2 32-bit. Seems like there is always 1 thing preventing my from using the latest centos release as my sole workstation. It was actually working on a new install for about half a day. I rebooted and now it won't connect. If I boot another vm (ubuntu or oel 5.7) the same client works. Im using version 2.5.0217. This version works fine on Ubuntu 12.04, 11.10 and 10.04. Anyone have any suggestions? /var/log/messages shows these errors: Apr 22 14:53:50 keyhole vpnui[3122]: Function: setCatalog File: i18n/MsgCatalog.cpp Line: 427 Invoked Function: setCatalog Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED Message translation catalog <AnyConnect> not in use. Apr 22 14:53:50 keyhole vpnui[3122]: Function: ClientIfcBase File: ClientIfcBase.cpp Line: 134 Invoked Function: vpnapi Return Code: 0 (0x00000000) Description: vpnapi version 2.5.0217 () Initializing. Apr 22 14:53:50 keyhole vpnui[3122]: Function: addProfile File: ProfileMgr.cpp Line: 836 Invoked Function: found profile Return Code: 0 (0x00000000) Description: /opt/cisco/vpn/profile/myaccess2.xml Apr 22 14:53:50 keyhole vpnui[3122]: Function: setAttribute File: HostInitSettings.cpp Line: 348 Invoked Function: setAttribute Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED Invalid preference ID or not handling attributes for element UseStartBeforeLogon Apr 22 14:53:50 keyhole vpnui[3122]: Function: setAttribute File: HostInitSettings.cpp Line: 348 Invoked Function: setAttribute Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED Invalid preference ID or not handling attributes for element AutomaticCertSelection Apr 22 14:53:50 keyhole vpnui[3122]: Function: setAttribute File: HostInitSettings.cpp Line: 348 Invoked Function: setAttribute Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED Invalid preference ID or not handling attributes for element AutoReconnectBehavior Apr 22 14:53:50 keyhole vpnui[3122]: Function: setAttribute File: HostInitSettings.cpp Line: 348 Invoked Function: setAttribute Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED Invalid preference ID or not handling attributes for element RSASecurIDIntegration Apr 22 14:53:50 keyhole vpnui[3122]: Function: setAttribute File: HostInitSettings.cpp Line: 348 Invoked Function: setAttribute Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED Invalid preference ID or not handling attributes for element EnableAutomaticServerSelection Apr 22 14:53:50 keyhole vpnui[3122]: Available preferences updated due to secure gateway configuration. Apr 22 14:53:50 keyhole vpnui[3122]: Current Preference Settings: CertificateStoreOverride: false CertificateStore: All ShowPreConnectMessage: false AutoConnectOnStart: true MinimizeOnConnect: true LocalLanAccess: false AutoReconnect: true AutoUpdate: true ProxySettings: Native PPPExclusion: Disable PPPExclusionServerIP: EnableScripting: false TerminateScriptOnNextEvent: false Apr 22 14:53:50 keyhole vpnui[3122]: Function: loadLibs File: Certificates/NSSCertUtils.cpp Line: 1348 Invoked Function: getNSSDllPath Return Code: -31391726 (0xFE210012) Description: CERTSTORE_ERROR_NSS_LIBRARIES_NOT_FOUND Unable to locate library libplc4.so Apr 22 14:53:50 keyhole vpnui[3122]: Function: CNSSCertUtils File: Certificates/NSSCertUtils.cpp Line: 281 Invoked Function: CNSSCertUtils::loadLibs Return Code: -31391726 (0xFE210012) Description: CERTSTORE_ERROR_NSS_LIBRARIES_NOT_FOUND Apr 22 14:53:50 keyhole vpnui[3122]: Function: CNSSCertStore File: Certificates/NSSCertStore.cpp Line: 55 Invoked Function: CNSSCertUtils Return Code: -31391726 (0xFE210012) Description: CERTSTORE_ERROR_NSS_LIBRARIES_NOT_FOUND Apr 22 14:53:50 keyhole vpnui[3122]: Function: addNSSStore File: Certificates/CollectiveCertStore.cpp Line: 999 Invoked Function: CNSSCertStore::CNSSCertStore Return Code: -31391726 (0xFE210012) Description: CERTSTORE_ERROR_NSS_LIBRARIES_NOT_FOUND Apr 22 14:53:50 keyhole vpnui[3122]: Function: OpenStores File: Certificates/CollectiveCertStore.cpp Line: 248 Invoked Function: CCollectiveCertStore::addNSSStore Return Code: -31391726 (0xFE210012) Description: CERTSTORE_ERROR_NSS_LIBRARIES_NOT_FOUND Apr 22 14:53:50 keyhole vpnui[3122]: Function: OnNegotiateMessageTypesComplete File: ApiIpc.cpp Line: 534 Master Agent Connection started. Apr 22 14:53:50 keyhole vpnui[3122]: Function: setStateInfo File: VPNStatsBase.cpp Line: 339 Invoked Function: CStateTlv::GetMUSHostAddr Return Code: -32374768 (0xFE120010) Description: TLV_ERROR_NO_ATTRIBUTE Apr 22 14:53:50 keyhole vpnui[3122]: Function: processState File: ApiIpc.cpp Line: 1412 VPN state: Disconnected Network state: Network Accessible Network control state: Available Network type: Undefined Apr 22 14:53:50 keyhole vpnui[3122]: Function: setState File: ClientIfcBase.cpp Line: 1224 Disconnected Apr 22 14:53:50 keyhole vpnui[3122]: Function: attach File: ClientIfcBase.cpp Line: 424 Client successfully attached. Apr 22 14:53:50 keyhole vpnui[3122]: Function: attach File: ClientIfcBase.cpp Line: 439 Event detection implemented in client program. Apr 22 14:53:50 keyhole vpnui[3122]: Function: autoConnectIfEnabled File: ClientIfcBase.cpp Line: 555 Auto connect on start enabled. Apr 22 14:53:50 keyhole vpnui[3122]: Function: addProfile File: ProfileMgr.cpp Line: 836 Invoked Function: found profile Return Code: 0 (0x00000000) Description: /opt/cisco/vpn/profile/myaccess2.xml Apr 22 14:53:50 keyhole vpnui[3122]: Function: addProfile File: ProfileMgr.cpp Line: 836 Invoked Function: found profile Return Code: 0 (0x00000000) Description: /opt/cisco/vpn/profile/myaccess2.xml Apr 22 14:53:50 keyhole vpnui[3122]: Function: loadPreferences File: PreferenceMgr.cpp Line: 820 User: (empty) Apr 22 14:53:50 keyhole vpnui[3122]: Loading preferences from profile /opt/cisco/vpn/profile/myaccess2.xml Apr 22 14:53:50 keyhole vpnui[3122]: Available preferences updated due to secure gateway configuration. Apr 22 14:53:50 keyhole vpnui[3122]: Current Preference Settings: CertificateStoreOverride: false CertificateStore: All ShowPreConnectMessage: false AutoConnectOnStart: true MinimizeOnConnect: true LocalLanAccess: false AutoReconnect: true AutoUpdate: true ProxySettings: Native PPPExclusion: Disable PPPExclusionServerIP: EnableScripting: false TerminateScriptOnNextEvent: false Apr 22 14:53:50 keyhole vpnui[3122]: Function: connect File: ClientIfcBase.cpp Line: 834 Connect requested Apr 22 14:53:50 keyhole vpnui[3122]: Function: addProfile File: ProfileMgr.cpp Line: 836 Invoked Function: found profile Return Code: 0 (0x00000000) Description: /opt/cisco/vpn/profile/myaccess2.xml Apr 22 14:53:50 keyhole vpnui[3122]: Function: addProfile File: ProfileMgr.cpp Line: 836 Invoked Function: found profile Return Code: 0 (0x00000000) Description: /opt/cisco/vpn/profile/myaccess2.xml Apr 22 14:53:50 keyhole vpnui[3122]: Function: enumerateCert File: Certificates/FileCertStore.cpp Line: 162 Invoked Function: enumerateCert Return Code: -31391730 (0xFE21000E) Description: CERTSTORE_ERROR_CERT_NOT_FOUND The /home/ccarson/.cisco/certificates/client/ directory was not found. Apr 22 14:53:50 keyhole vpnui[3122]: Function: Enumerate File: Certificates/FileCertStore.cpp Line: 123 Invoked Function: Enumerate Return Code: -31391730 (0xFE21000E) Description: CERTSTORE_ERROR_CERT_NOT_FOUND Apr 22 14:53:50 keyhole vpnui[3122]: Function: enumerateCert File: Certificates/FileCertStore.cpp Line: 162 Invoked Function: enumerateCert Return Code: -31391730 (0xFE21000E) Description: CERTSTORE_ERROR_CERT_NOT_FOUND The /opt/.cisco/certificates/client/ directory was not found. Apr 22 14:53:50 keyhole vpnui[3122]: Function: Enumerate File: Certificates/FileCertStore.cpp Line: 123 Invoked Function: Enumerate Return Code: -31391730 (0xFE21000E) Description: CERTSTORE_ERROR_CERT_NOT_FOUND Apr 22 14:53:50 keyhole vpnui[3122]: Function: getCertList File: ApiCert.cpp Line: 231 Invoked Function: ApiCert :: getCertList Return Code: 0 (0x00000000) Description: Number of certificates found: 0 Apr 22 14:53:50 keyhole vpnui[3122]: Function: initiateConnect File: ConnectMgr.cpp Line: 536 Initiating connection to: https://myaccess.oraclevpn.com/ Apr 22 14:53:55 keyhole ntpd[2042]: synchronized to 149.20.68.17, stratum 2 Apr 22 14:53:55 keyhole ntpd[2042]: time reset +1.123565 s Apr 22 14:54:06 keyhole vpnui[3122]: Function: SendRequest File: CTransportCurlStatic.cpp Line: 1467 Invoked Function: curl_easy_perform Return Code: -29949906 (0xFE37002E) Description: CTRANSPORT_ERROR_TIMEOUT error Apr 22 14:54:06 keyhole vpnui[3122]: Function: connect File: ConnectIfc.cpp Line: 334 Invoked Function: CTransport::SendRequest Return Code: -29949906 (0xFE37002E) Description: CTRANSPORT_ERROR_TIMEOUT Apr 22 14:54:06 keyhole vpnui[3122]: Function: TranslateStatusCode File: ConnectIfc.cpp Line: 2375 Invoked Function: TranslateStatusCode Return Code: -29949906 (0xFE37002E) Description: CTRANSPORT_ERROR_TIMEOUT timeout Apr 22 14:54:06 keyhole vpnui[3122]: Function: doConnectIfcConnect File: ConnectMgr.cpp Line: 1178 Invoked Function: ConnectIfc::connect Return Code: -29949906 (0xFE37002E) Description: CTRANSPORT_ERROR_TIMEOUT Apr 22 14:54:06 keyhole vpnui[3122]: Function: processIfcData File: ConnectMgr.cpp Line: 1449 Invoked Function: ConnectMgr :: processIfcData Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED Unrecognized content type (Unknown) received. Apr 22 14:54:06 keyhole vpnui[3122]: Function: processIfcData File: ConnectMgr.cpp Line: 1475 Unable to process response from myaccess.oraclevpn.com. Apr 22 14:54:06 keyhole vpnui[3122]: Function: processIfcData File: ConnectMgr.cpp Line: 1564 Invoked Function: processIfcData Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED Unable to contact myaccess.oraclevpn.com. Apr 22 14:54:06 keyhole vpnui[3122]: Function: initiateConnect File: ConnectMgr.cpp Line: 541 Connection failed. Apr 22 14:54:06 keyhole vpnui[3122]: Function: setState File: ClientIfcBase.cpp Line: 1224 Disconnected Apr 22 14:54:06 keyhole vpnui[3122]: Function: run File: ConnectMgr.cpp Line: 379 Invoked Function: ConnectMgr::initiateConnect Return Code: -29556727 (0xFE3D0009) Description: CONNECTMGR_ERROR_UNEXPECTED

4 5

iso size?
by Beartooth 23 Apr '12

23 Apr '12

I've been being told, over and over, by K3B, Brasero, and Isomaster, on two machines, with three different downloads of 6.0, that the file is too large for the medium. Nautilus and the browser that die each download all say it's 4.4 GB; I've tried with two +R and an RW DVD, all of which are labelled 4.7 GB Two of the files are 32-bit, and one is 64 What is going wrong?? -- Beartooth Staffwright, Not Quite Clueless Power User I have precious (very precious!) little idea where up is.

11 23

Networking issue, C6.2 LiveDVD x86_64
by Lamar Owen 23 Apr '12

23 Apr '12

Good afternoon, CentOS list. I am beginning triage of a rather wierd issue I experienced Saturday with CentOS 6.2 LiveDVD, x86_64. I'm posting this information in hope that someone may have seen something similar. I use a USB key with CentOS 6.2 LiveDVD loaded, with an encrypted home filesystem, built using the instructions on the CentOS wiki for a LiveUSB build, and it was built by a CentOS 6.2 x86_64 system with the livecd-iso-to-disk.sh tool. It has worked fine for general usage for a while, now. I began a disk image backup of a Dell Inspiron 1420 laptop Saturday, using dd piped into ssh to a file, on an RHEL6 server (RHEL6.2, i686 dist, fully updated). The command line used on the laptop, booted into the C6 LiveDVD environment, was: dd if=/dev/sda |ssh root(a)rhel6-server-used.local cat \>/opt/backups/sda.img which I have used before, on this specific laptop, without incident, booted into Fedora 14 Security LiveCD 32-bit. Something, however, in this particular combination is creating an issue. After approximately 3MB or so of the image is transferred, no network traffic at all can flow, causing the transfer to hang. And I mean hang, with unresponsive terminals in GNOME, and a non-killable ssh process. It seems to disrupt the server as well, but, like I said, I'm just beginning triage of the problem, so am still gathering data. Now, I booted my trusty Fedora 14 i686 Security Live CD (which boots into LXDE), and the transfer to the same server, using the same cable, same switch, and same hardware all the way around is going smoothly (25GB into a 500GB transfer so far). So I tend to think that it is not a hardware problem. I'm going to next try a CentOS 6.2 LiveUSB using the 32-bit LiveDVD instead of the 64-bit one, hopefully set up as identically as possible to the 64-bit one I've been using, and then see if it's a 32-bit versus 64-bit NIC driver issue or similar. Incidentally, the ethernet device gets a 'p3p1' device name instead of 'eth0.' I'm somewhat concerned by this, since I'm upgrading the laptop in question to CentOS 6.2 as part of this process, so I want to track down the problem so that if I need to install the 32-bit version instead of the 64-bit version I can. So, if anyone has had specific experience with a Dell Inspiron 1420n (came with Ubuntu pre-installed, incidentally) and CentOS 6 64-bit, I'd be interested in hearing it.

2 3

Centos 4 repos help me!
by Gustavo Lacoste 23 Apr '12

23 Apr '12

Dear CentOS Community Is totally clear there's no support to Centos 4 platform today, but I need to install some packages -ideally- from repositories, so I'll be glad if someone can provide me still working ones, (obviously non-official). If isn't possible I'll move on CentOS5, but (initially) keeping current PHP and MySQL versions. In both cases, I'll need working CentOS4 repos, hopefully the following ones: - CentOS Base.repo - CentOS-Debuginfo.repo - CentOS-Media.repo - CentOS-Testing.repo - CentOS-Vault.repo - mirrors-rpmforge - mirrors-rpmforge-extras - mirrors-rpmforge-testing - openwebmail.repo - rpmforge.repo Thanks in advance to anyone who can guide me With Kind Regards, Gustavo A. Lacoste Z. Curacautín - Chile Skype: knxroot Msn & Gtalk: knx.root [at] gmail.com Home page: http://www.lacosox.org - - *Por favor, evite enviarme documentos adjuntos en formato Word o PowerPoint. Lea http://www.gnu.org/philosophy/no-word-attachments.es.html*

9 13

LVM: PV on 2 external USB drives
by Mihamina Rakotomandimby 23 Apr '12

23 Apr '12

Hi all, I have a box, until warranty (I may not open it) and 2 external USB hard drives. My perfect solution is to open the box, plug the drives on the SATA slots, and use them. Unfortunately, I'll have to fall back to the cheap solution: I would like to use each external drive as physical volume (PV) and then "join" them as a VG in order to use a LVM composed by internal drives and the externals. This is not for a "very secure" storage, just for a low reliability quantity temporary one: I just need it to work for 3-4 weeks with potential power cycles. How to get the USB external drives to be detected in always the same order, so that they always get the same "name"? /dev/sdX fixed to them? That way, the LVM wont be messed... Thank you. -- RMA.

6 7

Centos 5 live cd?
by Jason Pyeron 23 Apr '12

23 Apr '12

It seems that the live cd for 5 is no longer in existence. Is this an oversight or by design? http://wiki.centos.org/Manuals/ReleaseNotes/CentOSLiveCD5.6 -Jason -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Principal Consultant 10 West 24th Street #100 - - +1 (443) 269-1555 x333 Baltimore, Maryland 21218 - - - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- This message is copyright PD Inc, subject to license 20080407P00.

4 5

Missing dependency
by Mark LaPierre 23 Apr '12

23 Apr '12

Hey all, Anyone know where I can find source packages for X86-64 CentOS 6.2: dev86 is needed by my project iasl is needed by my project spice-server-devel >= 0.8.2-4.el6 is needed by my project I can't seem to find them in the source repositories. Thanks. -- _ °v° /(_)\ ^ ^ Mark LaPierre Registerd Linux user No #267004 www.counter.li.org ****

4 4

CentOS stresstest - what to use?
by Rafał Radecki 21 Apr '12

21 Apr '12

Hi all. I currently have a CentOS 5.8 x64 host. I have some info that it is "slow" for end users. I would like to use some tools to make tests of proc/memory/disks. Is there a program suite which you could recommend? Best regards, Rafal.

2 1

CentOS-announce Digest, Vol 86, Issue 12
by centos-announce-request＠centos.org 21 Apr '12

21 Apr '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2012:0502 CentOS 6 device-mapper-multipath Update (Johnny Hughes) 2. CEEA-2012:0503 CentOS 6 cnic Update (Johnny Hughes) 3. CEEA-2012:0503 CentOS 6 bnx2 Update (Johnny Hughes) 4. CEEA-2012:0503 CentOS 6 bnx2i Update (Johnny Hughes) 5. CEEA-2012:0503 CentOS 6 bnx2x Update (Johnny Hughes) 6. CEEA-2012:0503 CentOS 6 bnx2fc Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 20 Apr 2012 15:53:25 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0502 CentOS 6 device-mapper-multipath Update To: centos-announce(a)centos.org Message-ID: <20120420155325.GA7651(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0502 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0502.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b9421fc335bb90b024fdddc34ce6f9d0dfed8bc4c67a7eb507d03f77f3e82fc0 device-mapper-multipath-0.4.9-46.el6_2.2.i686.rpm d08f573ce1de7a05154a89f723c587b6db9ef5d52cdccb33f90eea58755af29c device-mapper-multipath-libs-0.4.9-46.el6_2.2.i686.rpm 3f73d8ed7e0ca73b6a4db81ae5df4f5c1c51be9cf601ba0ac87af2d1a1be7a53 kpartx-0.4.9-46.el6_2.2.i686.rpm x86_64: 3d904319a986939dbc10ac8d831dec2cddfd2d96176573f216142d1fad9dc177 device-mapper-multipath-0.4.9-46.el6_2.2.x86_64.rpm 202ec5988cf2f62dfdfa399af03dcdb06d8673eaf777569585c1e22a6cf8d94b device-mapper-multipath-libs-0.4.9-46.el6_2.2.x86_64.rpm da8ba1502391984adb6bd5df711d55e67f94324e0891af56c2d1bff39a25699c kpartx-0.4.9-46.el6_2.2.x86_64.rpm Source: aa9ef20d729a9155415d3d6f9d89e0133ca1a4602d2927727e987733de570d88 device-mapper-multipath-0.4.9-46.el6_2.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Fri, 20 Apr 2012 15:58:42 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEEA-2012:0503 CentOS 6 cnic Update To: centos-announce(a)centos.org Message-ID: <20120420155842.GA7798(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2012:0503 Upstream details at : https://rhn.redhat.com/errata/RHEA-2012-0503.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 7a7472e17c1c1bb7a1dba21b4f9299848c7cc24d9f3d6b1d962a9d61bbea2699 kmod-cnic-2.5.9-1.el6_2.i686.rpm x86_64: fb094609d0dd814b84564e3cf965b18cc699a2f31569bcbcdb7f51f2fc34d373 kmod-cnic-2.5.9-1.el6_2.x86_64.rpm Source: d3eef44bc7a865cc214bb2b218de81fd56ca9aa9f7314b397b1f04604da034c2 cnic-2.5.9-1.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Fri, 20 Apr 2012 15:59:04 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEEA-2012:0503 CentOS 6 bnx2 Update To: centos-announce(a)centos.org Message-ID: <20120420155904.GA7872(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2012:0503 Upstream details at : https://rhn.redhat.com/errata/RHEA-2012-0503.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: f3e5f2464668879f1ef68d69583cfbe2552a99d51aa30da285938144a3c4ba2a kmod-bnx2-2.2.1-1.el6_2.i686.rpm x86_64: 3c2a7bf5365319f0ef9e38c43985a46558bd81ffad4b97b2541ab3e190da26a4 kmod-bnx2-2.2.1-1.el6_2.x86_64.rpm Source: dbd2526dcdc2177af1b99e804b2ef614af681b244a64f84e848fff9c401146d9 bnx2-2.2.1-1.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Fri, 20 Apr 2012 15:59:20 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEEA-2012:0503 CentOS 6 bnx2i Update To: centos-announce(a)centos.org Message-ID: <20120420155920.GA7943(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2012:0503 Upstream details at : https://rhn.redhat.com/errata/RHEA-2012-0503.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 52e641abb5b51b55f1a3bb3316016a48d205ccfb1e888cb027430c1d87c50368 kmod-bnx2i-2.7.2.1-1.el6_2.i686.rpm x86_64: 41fa70898af17df938951ed101fb642aa3d07d4e10a7d3596204f46c5e242025 kmod-bnx2i-2.7.2.1-1.el6_2.x86_64.rpm Source: 444ddc2d937e3cee34cfb93b809409d4b04cc82daccc771101d3faa5e39cf8cf bnx2i-2.7.2.1-1.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Fri, 20 Apr 2012 15:59:50 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEEA-2012:0503 CentOS 6 bnx2x Update To: centos-announce(a)centos.org Message-ID: <20120420155950.GA8021(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2012:0503 Upstream details at : https://rhn.redhat.com/errata/RHEA-2012-0503.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: a4b398a40ee45a0faee9fd00ce348dc966fd84374f8220f90342b7265d368278 kmod-bnx2x-1.72.00_0-1.el6_2.i686.rpm 84e2834304e3ece9c445c647796bdf9732fcd012935151d6f53cdc75631ae2e4 kmod-bnx2x-firmware-1.72.00_0-1.el6_2.i686.rpm x86_64: 3ac059fbcdb4e8c613cb7a419508ce4dc190e70d2fafb1dc125cf7c7cae1b9d8 kmod-bnx2x-1.72.00_0-1.el6_2.x86_64.rpm 918782e8952b411d0b757123580d2f6bb253a0c7d7dad978f1386dd3f545382a kmod-bnx2x-firmware-1.72.00_0-1.el6_2.x86_64.rpm Source: 05483755d3fb090bb3c1d974dabe6edaaf56f7c3d436da0de664ebb229217579 bnx2x-1.72.00_0-1.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Fri, 20 Apr 2012 16:00:16 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEEA-2012:0503 CentOS 6 bnx2fc Update To: centos-announce(a)centos.org Message-ID: <20120420160016.GA9378(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2012:0503 Upstream details at : https://rhn.redhat.com/errata/RHEA-2012-0503.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: da5572309aa34dd5105a2337045ed1eb1aac711ab7d666f83a5e276b02c1b79f kmod-bnx2fc-1.0.10-1.el6_2.i686.rpm x86_64: 77bf45b63b585769cccdc7e3476d5bedd7f48647fcdf590764c78790886c88a4 kmod-bnx2fc-1.0.10-1.el6_2.x86_64.rpm Source: 9f3b64e89a452c38887c9e4bbcb29616cf1b2d04c290cc6871ec7752fe62231e bnx2fc-1.0.10-1.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 86, Issue 12 ***********************************************

1 0

LVM vs Physical Disk Encryption
by Steven Buehler 21 Apr '12

21 Apr '12

I have a couple of question about Disk Encryption during an OS install. I want to setup encryption on a system where I might have to enlarge the LVM's by either adding another disk or by enlarging the disk size at a later date. This is a VMware VM so just increasing the size of an individual disk is pretty simple and then expanding the LVM on it. Should I use LVM or just Physical Disk Encryption? What are the benefits and drawbacks of them? Should I do both? In setting this up for the first time, I did both. Will that slow down the system because it is actually encrypting everything twice? If using LVM encryption and I add another drive to the LVM is it automatically encrypted? Thank You Steve

1 0

A request from the CentOS Project
by Johnny Hughes 21 Apr '12

21 Apr '12

The CentOS Project seems to be having a problem within some of our community interactive areas that we need to address. As most of you know, the project provides CentOS software free of charge and we also provide community areas like a Wiki, Mailing Lists, IRC Channels and Fora for our users to interact with one another and allow the CentOS community to provide support for each other. There are some companies out there that provide paid CentOS support, but for the most part our users utilize community areas to get support for CentOS. That brings us to our problem ... some members of the community in the areas provided by the CentOS Project are rude to users who are coming in for help. This happens much more often than it should. These complaints are not coming from newbies ... I would expect that to happen. The complaints are coming from people who are very knowledgeable in the open source community and who are involved in other open source projects. Taking that into account, I would like to ask the following from all the people who frequent the CentOS Project's community areas (Wiki, Mailing Lists, Fora, and especially the IRC Channels). I ask that each of you who answer questions there to try and look at it from the other person's point of view and try to be polite. Treat other people like you would like to be treated when interacting with them. There is a time and a place for telling someone what you think of them and their question. Believe me ... I am speaking from much experience here :P … but there is also a time and a place for at least trying to be polite first. Please try to think of the community areas of the CentOS Project as you would think of your front porch, front yard, or the park by your house where you take your children to play. Try to interact with the people as you would if they asked you a question face to face in those settings. Be courteous and use proper etiquette to make your points and if someone will not listen to reason then we (the CentOS Project) have moderators in all the community areas who can try to help in that situation. Sometimes users can be very inconsiderate when asking for help, especially users who are new to open source. They can sometimes seem to project themselves as entitled to support from free community venues in a manner that would lead you to believe they think they are paying a million dollars for a support contract. In those situations, those users do need to understand that there are paid alternatives where they can treat the workers like hired help … but that in a community setting their actions are not considered appropriate. In those situations, please contact the applicable moderators that the CentOS Project has in place and we can help to resolve the issues. I have no problem reminding people that there are paid alternatives to CentOS if they want an service level agreement type of relationship with the vendor ... but lets let that be handled by the people that the Project has in place in our community areas. Lets try to keep the vitriol to a minimum on both sides and work as a group to make the community areas of the CentOS Project as quality a place to be as the software we all love and use.

16 30

CentOS-Base.repo file for CentOS-4.9 in Vault
by Johnny Hughes 20 Apr '12

20 Apr '12

All, There have been many people asking for how to do installs now that CentOS-4 has moved past End Of Life. First, I want to tell you that it is VERY dangerous to use CentOS-4 now. There is at least 1 critical (ie, remotely exploitable root) issue on CentOS 4 already: https://access.redhat.com/security/cve/CVE-2012-1182 The number of unpatched critical issues will grow. Using CentOS-4 is NOT safe. That being said, here is how you can use the Vault. I have created a CentOS-Base.repo that should work for users who absolutely need it: http://vault.centos.org/4.9/CentOS-Base.repo If you replace your current file with this file, you should be able to use the vault. There will be no updates to the files there. Thanks, Johnny Hughes

1 1

defer (not skip) boot fsck?
by Les Mikesell 20 Apr '12

20 Apr '12

I have some large filesystems that are only used for rarely used archived data. Is there any way to specify in fstab or elsewhere that if these have passed their 'time to run fsck' that it could be put in the background and the system could go ahead and boot, mounting them whenever the operation finishes? -- Les Mikesell lesmikesell(a)gmail.com

3 2

local repo question
by Jerry Geis 20 Apr '12

20 Apr '12

I have created a local repo for CentOS 6 x86_64. I use a machine at 192.168.1.14 for that and created a directory structure /var/www/html/centos/6.2/updates/x86_64 then there are these directories at the location. Packages repodata Both are populated with many files. In my kickstart file I have a line: #repo --name=Updates --baseurl=http://192.168.1.14/centos/6.2/updates/x86_64/ All seems fine. If the line is comment as above the install is fine, just base 6.2 with no updates. If I uncomment the line I get some error about dbus package is incorrect. Is there something I am missing??? My script to keep the local repo up to date is: for VERSION in "6.2" do mkdir -p /var/www/html/centos/$VERSION/updates/x86_64/Packages mkdir -p /var/www/html/centos/$VERSION/updates/x86_64/repodata PLACE="mirror.team-cymru.org/CentOS" rsync -av rsync://$PLACE/$VERSION/updates/x86_64/Packages/* /var/www/html/centos/$VERSION/updates/x86_64/Packages rsync -av rsync://$PLACE/$VERSION/updates/x86_64/repodata/* /var/www/html/centos/$VERSION/updates/x86_64/repodata done Thanks, Jerry

6 7

boot-time NFS mount failures
by Tilman Schmidt 20 Apr '12

20 Apr '12

Hello List, I have a problem with a CentOS 5 server running Oracle DBMS with the transaction logs going to an NFS share on our CentOS 6/Bacula backup server. The Oracle server has this in its /etc/fstab file: backup:/home/backup/Oracle /backup_nfs nfs hard,intr,noexec,rsize=32768,wsize=32768 The backup server, in its /etc/exports: /home/backup/Oracle -rw,async,all_squash,anonuid=133 cen5-db-01 This works quite well, except that when all the servers are rebooted together (such as after a power outage) the Oracle server fails to mount the NFS share, but goes ahead to start Oracle anyway. Oracle then either complains that it cannot find its logs or, worse, starts to write them to the local disk. The last time this happened, I found a message on the console: mount: can't get address for backup So it seems that the failure was caused by the nameserver not being available yet. Unfortunately that message isn't saved to any logfile, so I cannot say if it was the same the previous times. How can I make sure that the system startup does not proceed until the NFS share is available and mounted successfully? From R'ingTFM I got the impression that this should be the default behaviour, but apparently it isn't. I don't know if hardcoding the backup server's IP address into the Oracle server's /etc/hosts file would help, but I would really like to avoid that, anyway. Thanks in advance for any hints, Tilman

3 6

CentOS-announce Digest, Vol 86, Issue 11
by centos-announce-request＠centos.org 20 Apr '12

20 Apr '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2012:0498 CentOS 5 glibc Update (Johnny Hughes) 2. CEBA-2012:0505 CentOS 5 cman Update (Johnny Hughes) 3. CEBA-2012:0499 CentOS 5 aide Update (Johnny Hughes) 4. CEBA-2012:0506 CentOS 5 autofs Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 20 Apr 2012 13:35:36 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0498 CentOS 5 glibc Update To: centos-announce(a)centos.org Message-ID: <20120420133536.GA408(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0498 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0498.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: fda512b31c4c10ddba0d9e3a0f8869882fc614213e04906f418b4e16d469ce3a glibc-2.5-81.el5_8.2.i386.rpm fa652e21c2a45ef47bb5aa050406500e448e5ab7576dc392a33ab8b774a996f8 glibc-2.5-81.el5_8.2.i686.rpm 687f1b46ec22de5c416afee0caca52b6d79e23911f6ec42c53d64dde7b8afcb2 glibc-common-2.5-81.el5_8.2.i386.rpm ff90f5c260c444e1d488e8560876fcfa771ec7ee470fef2faa1eeff6614067e8 glibc-devel-2.5-81.el5_8.2.i386.rpm 0fcdd1e6bfd489dec68a58acb1cc87c8d9fc0a2934ec72cba61377588eda864f glibc-headers-2.5-81.el5_8.2.i386.rpm 733b81a52268b59ce69a28b9874405fb9f1057169fa897e7b5c3b914ebc0a2d3 glibc-utils-2.5-81.el5_8.2.i386.rpm df91eb3438b61438ea0cd9c76bb23ea2c067df2bdccab2d9622dd0b9e1ff61e1 nscd-2.5-81.el5_8.2.i386.rpm x86_64: fa652e21c2a45ef47bb5aa050406500e448e5ab7576dc392a33ab8b774a996f8 glibc-2.5-81.el5_8.2.i686.rpm 37f0eb54b5a6519cdc1cc52eac8d745ae84944fd2ae4821d3806328c1c2a9629 glibc-2.5-81.el5_8.2.x86_64.rpm 62f4f12e348a6935fc0c463feedbe328d18d7031e458f982257f29c07e1813fa glibc-common-2.5-81.el5_8.2.x86_64.rpm ff90f5c260c444e1d488e8560876fcfa771ec7ee470fef2faa1eeff6614067e8 glibc-devel-2.5-81.el5_8.2.i386.rpm cf0ae4aab04fd4f2c7947aaab7cb4d984e307eeb594ab398ee3bba48caadf950 glibc-devel-2.5-81.el5_8.2.x86_64.rpm 27ef231a5e056981382b94537b76d3114a9a6ea80924ff01a6841e4229c1e120 glibc-headers-2.5-81.el5_8.2.x86_64.rpm 1a3971cf0ef499e8bccd67d3691ab7c78621b56c1260a4a6f3e7984667e47674 glibc-utils-2.5-81.el5_8.2.x86_64.rpm 1cc035aaf63ecb1fe89303e90b55f04298072ba47adc71c484437e6bbe19b75e nscd-2.5-81.el5_8.2.x86_64.rpm Source: 9d3a5ee8037bea2b0be513ab352aee31f6765437fe9a3858e6e59252e1081f9f glibc-2.5-81.el5_8.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Fri, 20 Apr 2012 13:36:37 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0505 CentOS 5 cman Update To: centos-announce(a)centos.org Message-ID: <20120420133637.GA543(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0505 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0505.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 73fa5eba2cfe87488e0d19c188d1304e2e75b88466b61bbb6797838c11fea419 cman-2.0.115-96.el5_8.3.i386.rpm be10dd8f511ba3b63e758f8c6d330bd50b991db36b826312fe5540efe4b2c49b cman-devel-2.0.115-96.el5_8.3.i386.rpm x86_64: 1cdeef1dfbb1a775f5e3cc7c9cb3690cedc3ab7b91109a1009db729a50be5f98 cman-2.0.115-96.el5_8.3.x86_64.rpm be10dd8f511ba3b63e758f8c6d330bd50b991db36b826312fe5540efe4b2c49b cman-devel-2.0.115-96.el5_8.3.i386.rpm abe4670a5527c830f7b1eb4427374f27bc9870e5e6d7761a7f9f2adc1e44075f cman-devel-2.0.115-96.el5_8.3.x86_64.rpm Source: 00adc6ce44ce6c7dc98b56abc09e2ea421c07db99e6650d3fb236fb372b46d0b cman-2.0.115-96.el5_8.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Fri, 20 Apr 2012 13:37:21 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0499 CentOS 5 aide Update To: centos-announce(a)centos.org Message-ID: <20120420133721.GA653(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0499 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0499.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 4f3ea0a07eba51c9704f76602a5c8f3a460f4e5d8dc7215a0adc1b4b7438fa32 aide-0.13.1-6.el5_8.2.i386.rpm x86_64: 3f82c40ebb55067143850cc8e3d9ad6675ef60372a299d3b4c08a53ae84cd4c3 aide-0.13.1-6.el5_8.2.x86_64.rpm Source: c95078342e135bd771af0499d9f3bdf240af765aa250458be23029a1d1d8b97e aide-0.13.1-6.el5_8.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Fri, 20 Apr 2012 14:24:49 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0506 CentOS 5 autofs Update To: centos-announce(a)centos.org Message-ID: <20120420142449.GA3201(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0506 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0506.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: a6d3c7f8b2ee1c0c7494a07a58a7dadcbb4d68b0c03e9d3419472031e3a0bcdc autofs-5.0.1-0.rc2.164.el5_8.i386.rpm x86_64: 989167d6135409ed5cf746aebf56ae95a212658e4749909c4e8ff87987f471df autofs-5.0.1-0.rc2.164.el5_8.x86_64.rpm Source: 032f2342ab59416fb05f7d0902b8dcc3b3ccf5ba921b4a77fa9ce6fc1c8cf81f autofs-5.0.1-0.rc2.164.el5_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 86, Issue 11 ***********************************************

1 0

modprobe blacklist
by Markus Falb 20 Apr '12

20 Apr '12

Hi, I am referring to the last kernel update for CentOS 5 http://lists.centos.org/pipermail/centos-announce/2012-April/018578.html Upstream details tell me that if I dont want to reboot into the new kernel I could blacklist the xfrm6_tunnel module. How do I test that the blacklist of a module works? -- Kind Regards, Markus Falb

2 2

centos 6.2; mount 6TB OSX formatted FW
by aurfalien 20 Apr '12

20 Apr '12

Hi all, Trying to mount an FW800 6TB volumes. The logs say; cannot find hfs+ superblock and volumes larger then 2TB are not supported yet Is my case really because of the >2TB volume? Thanks in advance, - aurf

2 1

fail2ban attempt, anyone want to add anything?
by Bob Hoffman 20 Apr '12

20 Apr '12

Tonight I added fail2ban to one of my webservers to test it out. Here is my step by step, as best as I could figure it out...documentation a bit sketchy. feel free to add anything to it or suggest changes. I tried to set it up to deal with ssh, http authentication, dovecot, ftp, and postfix I could find no working example for centos 6 and there is no fail2ban book available to peruse. So, just winging it.... I used the EPEL repo and it needed the following packages to work correctly I do not use priorities, but I add things by using includepkgs= in the repo file. fail2ban shorewall python-inotify gamin-python (logging) although fail2ban adds a logrotate file for fail2ban.log, it logs everything to the /var/log/messages file so I changed /etc/fail2ban/fal2ban.conf line 25 logtarget = /var/log/fail2ban.log Perhaps overlooked by the rpm developer? /etc.fail2ban/jail.conf In all sections I commented out the mailto section since it just sends a ton of mails when start/stopped...yikes. Not sure if there is a setting only for errors or actions...but the start/stop mails are too annoying. Will use logwatch daily to check on it. line 16, added a space then my server ip address 123.123.123.123 (example ip address, not real) ignoreip = 127.0.0.1 123.456.789.123 SSH section line 48 enabled=true line 50, changed to my port number commented out the mailto section sasl section (for postfix) line 68 enabled=true backend = polling (I left this but have no idea if I should or not) line 71, 'rewrote it to' action = iptables-multiport[name=POSTFIX, port="25,465,993,995", protocol=tcp] this blocks all mail ports when someone tries and fails at least I think it does....? :) Apache (this was tough since many online sources says it will not work, but will test and see) [apache-tcpwrapper] enabled = true filter = apache-auth action = iptables-multiport[name=ApacheAuth, port=80,443, protocol=tcp] logpath = /var/log/httpd/*error_log maxretry = 4 Several docs suggest tcpwrapper and centos are a no go, and that this will not work...trying it anyway All the http stuff is not set up for centos, its default is to look for /var/log/apache so this was not set up at all by the rpm dev...at least not the working examples in the jail.conf file. added this to the bottom (and a new file must be created to work with it) [Dovecot] enabled = true filter = dovecot maxretry = 5 action = iptables-multiport[name=DOVECOT, port="25,465,993,995", protocol=tcp] logpath = /var/log/maillog (again, I added all mail ports in case of a hacker) New file added /etc/fail2ban/filter.d/ new file dovecot.conf [Definition] # Option: failregex # Notes.: regex to match the password failures messages in the logfile. The # host must be matched by a group named "host". The tag "<HOST>" can # be used for standard IP/hostname matching. # Values: TEXT # failregex = (?: pop3-login|imap-login): (?:Authentication failure|Aborted login \(auth failed|Aborted login \(tried to use disabled|Disconnected \(auth failed).*rip=(?P<host>\S*),.* # Option: ignoreregex # Notes.: regex to ignore. If this regex matches, the line is ignored. # Values: TEXT # ignoreregex = service fail2ban start chkconfig fail2ban on service iptables restart (not sure if you have to or not with each fail2ban restart)

2 5

Using eth0 on desktops with single network interface
by Alfred von Campe 20 Apr '12

20 Apr '12

What is the best way to stop CentOS 6 from renaming the eth0 interface to em1? I've googled a bit and found many relevant posts, but have still not come up with an elegant solution. One of the resources I found was http://www.arachnoid.com/linux/network_names/index.html, and while the Python script contained therein does create a new udev rule that renames em1 back to eth0 it feels kludgy and requires me to manually create the ifcfg-eth0 script. I'm looking for a way to stop udev from renaming the interface in the first place, preferably something that allows me to automate it via kickstart so that any new systems I deploy will have a permanent fix. I'll push a fix to any systems I already have deployed with CentOS 6 that have this problem. On some of my systems I have a 70-persistent-net.rules file with a comment that says it was generated by /lib/udev/write-net-rules, but I don't remember what I did to get it generate that rule, much less how to automate it and get it to work reliably (on one of my systems I have that rule but the interface is sill named em1). BTW, the em1 name only appears to be an issue on my newer Dell desktops; the older IBM/Lenovo systems I support are all using eth0 Thanks, Alfred

6 10

Cluster with VM and global resources
by Baptiste AGASSE 20 Apr '12

20 Apr '12

Hi all, I've a little problem with software cluster provided by CentOS 6.2 (cman, rgmanager & cie), VM cluster services and global cluster resources. Here is my system arch: --------------- ------------------ |clusternode1 |--+---| GFS2:vmimages1 | --------------- | | | | | VM img 1 | | | VM img 2 | | | VM img 3 | + | ... | | ------------------ | | | --------------- | ------------------ |clusternode2 |--+---| GFS2:vmimages2 | --------------- | | | | | VM img X | | | VM img Y | | | VM img Z | | | ... | | ------------------ | --------------- | |clusternode3 |--+--- ... --------------- | ... | All my cluster nodes are connected to a SAN which houses some GFS2 fs for VM images files. I've defined global cluster resources for my GFS2 filesystems where my vm images files are stored. Now i want to add this resources to vm services to makes the cluster aware of VM dependency to the fs which store it image file (to avoid node to try to start VM if it don't have required filesystem or stop VM when it lost the filesystem). When i add global resources to a "normal" cluster service, it works, but it don't when i try to add global resources to a VM service. I'm the onlyone with this type of configuration ? Someone know if it's a bug or it's not supported ? I don't find anything about it in cluster documentation/man pages/<cluster commands> --help Have a nice day. Regards. -- Baptiste AGASSE

1 0

Help needed with NFS issue
by Steve Thompson 19 Apr '12

19 Apr '12

I have four NFS servers running on Dell hardware (PE2900) under CentOS 5.7, x86_64. The number of NFS clients is about 170. A few days ago, one of the four, with no apparent changes, stopped responding to NFS requests for two minutes every half an hour (approx). Let's call this "the hang". It has been doing this for four days now. There are no log messages of any kind pertaining to this. The other three servers are fine, although they are less loaded. Between hangs, performance is excellent. Load is more or less constant, not peaky. NFS clients do get the usual "not responding, still trying" message during a hang. There are no cron or other jobs that launch every half an hour. All hardware on the affected server seems to be good. Disk volumes being served are RAID-5 sets with write-back cache enabled (BBU is good). RAID controller logs are free of errors. NFS servers used dual bonded gigabit links in balance-alb mode. Turning off one interface in the bond made no difference. Relevant /etc/sysctl.conf parameters: vm.dirty_ratio = 50 vm.dirty_background_ratio = 1 vm.dirty_expire_centisecs = 1000 vm.dirty_writeback_centisecs = 100 vm.min_free_kbytes = 65536 net.core.rmem_default = 262144 net.core.rmem_max = 262144 net.core.wmem_default = 262144 net.core.wmem_max = 262144 net.core.netdev_max_backlog = 25000 net.ipv4.tcp_reordering = 127 net.ipv4.tcp_rmem = 4096 87380 16777216 net.ipv4.tcp_wmem = 4096 65536 16777216 net.ipv4.tcp_max_syn_backlog = 8192 net.ipv4.tcp_no_metrics_save = 1 The {r,w}mem_{max,default} values are twice what they were previously; changing these had no effect. The number of dirty pages is nowhere near the dirty_ratio when the hangs occur; there may be only 50MB of dirty memory. A local process on the NFS server is reading from disk at around 40-50 MB/sec on average; this continues unaffected during the hang, as do all other network services on the host (eg an LDAP server). During the hang the server seems to be quite snappy in all respects apart from NFS. The network itself is fine as far as I can tell, and all NFS-related processes on the server are intact. NFS mounts on clients are made with UDP or TCP with no difference in results. A client mount cannot be completed ("timed out") and access to an already NFS mounted volume stalls during the hang (both automounted and manual mounts). NFS block size is 32768 r and w; using 16384 makes no difference. Tcpdump shows no NFS packets exchanged between client and server during a hang. I have not rebooted the affected server yet, but I have restarted NFS with no change. Help! I cannot figure out what is wrong, and I cannot find anything amiss. I'm running out of something but I don't know what it is (except perhaps brains). Hints, please! Steve

5 14

were to find 2.6.18-53 aka 5.1 kernel
by aurfalien 19 Apr '12

19 Apr '12

Hi all, I am migrating my Xen guests over to KVM. Does any one know were I can find said 5.1 kernel for download? - aurf

2 2

CentOS-announce Digest, Vol 86, Issue 10
by centos-announce-request＠centos.org 19 Apr '12

19 Apr '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2012:0497 CentOS 5 xulrunner Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 19 Apr 2012 09:19:04 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0497 CentOS 5 xulrunner Update To: centos-announce(a)centos.org Message-ID: <20120419091904.GA13513(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0497 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0497.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 64f17d662b4e607fa6066e458b1b6a7920d829d02c748bdb300b400116f58859 xulrunner-10.0.3-2.el5_8.i386.rpm 677e2eeba8ec9e60649fc3446b5e9a0fd4a4f8fe6144e0dbb8d900698d69312d xulrunner-devel-10.0.3-2.el5_8.i386.rpm x86_64: 64f17d662b4e607fa6066e458b1b6a7920d829d02c748bdb300b400116f58859 xulrunner-10.0.3-2.el5_8.i386.rpm e3994980db6d5663979e33bfd5fd43a357d7f0c6caf4a41ee619d9797c9b2067 xulrunner-10.0.3-2.el5_8.x86_64.rpm 677e2eeba8ec9e60649fc3446b5e9a0fd4a4f8fe6144e0dbb8d900698d69312d xulrunner-devel-10.0.3-2.el5_8.i386.rpm a956c4c021eab1a1f0db660b5358d91a8c52c505cdedf38c5cd84b0bea56c60d xulrunner-devel-10.0.3-2.el5_8.x86_64.rpm Source: fe8505ac0784d234560a2f2a5f0ab620e542dd4141c5075153b78907b2af0c1a xulrunner-10.0.3-2.el5_8.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 86, Issue 10 ***********************************************

1 0

The requested URL was not found on this server
by Prabhpal S. Mavi 19 Apr '12

19 Apr '12

Greetings Dear Friends, I am seeking assistance from Apache experts friends. i recently installed cacti Graphing Solution. The main Cacti folder exist under "/var/www/html/cacti" and we all knows that default DocumentRoot under CentOS is DocumentRoot "/var/www/html" Following is Virtual Virtual Host under "conf.d" Alias /cacti /var/www/html/cacti/ <Directory /var/www/html/cacti/> DirectoryIndex index.php Options -Indexes AllowOverride all AddType application/x-httpd-php .php php_flag magic_quotes_gpc on php_flag track_vars on </Directory> if i try browsing cacti, i can login without problem. But if i try to follow other links on the page. For example i have clicked on Graphs icon. i see the following error. The requested URL /graph_view.php was not found on this server where as this URL (graph_view.php) exist on the server, that is under Cacti folder "/var/www/html/cacti/graph_view.php". But Apache is looking under DocumentRoot that is "/var/www/html/graph_view.php". if i change DocuemtRoot to following, (And virtual host directory and alias directive as well) everything is fine. DocumentRoot "/var/www/html/cacti" Changing DocumentRoot actually disturb other front ends setup. i have Nagios & zabbix installed on same machine. which i use to monitor stuff. is there anything i can do to maintain DocumentRoot to default that is. DocumentRoot "/var/www/html" Regards / Thanks Prabhpal Singh Thanks / Regards Prabhpal S. Mavi

5 11

3TB system drive partitioning question
by John R Pierce 18 Apr '12

18 Apr '12

so I want to install c6.2 x86_64 onto a 2.7TB /dev/sda ... its a virgin machine with no software, using pxe boot. disk druid or whatever seems to only want to let me have like 2tb of default stuff, I'm guessing because its not using GPT? do I need to preboot into a shell or something and use parted before I can install ? -- john r pierce N 37, W 122 santa cruz ca mid-left coast

6 7

SSD as system drive - partitioning question
by Frank Cox 18 Apr '12

18 Apr '12

I mentioned here the other day that I was planning to set up a Centos 6 system using a SSD for the system drive and a regular hard drive for a data drive. My plan is to have everything that doesn't change (much) on the SSD, such as /boot, /lib, /bin and so on. I want to put /tmp and /var and /home on the regular hard drive. Now that I'm at the stage of actually setting this up I have discovered that I don't understand enough about drive partitioning to make this work the way that I want it to. Perhaps I'm missing something obvious. I could create separate partitions on the SSD for /lib, /bin and everything else that I want to put there, then put / on the hard drive, but I would really prefer to put /boot and one other partition on the SSD, and one partition on the hard drive. How can I tell the system that I want /bin and friends on the SSD and /home and /var on the hard drive, but still have just one partition on each drive (plus /boot on the SSD)? If I create / on the hard drive and /ssd on the SSD, then putting bin on the SSD would make it /ssd/bin and that would obviously not be what I want to see. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com www.creekfm.com - FIFTY THOUSAND WATTS of POW WOW POWER!

5 5

CentOS-announce Digest, Vol 86, Issue 9
by centos-announce-request＠centos.org 18 Apr '12

18 Apr '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2012:0480 Important CentOS 5 kernel Update (Johnny Hughes) 2. CESA-2012:0481 Moderate CentOS 6 kernel Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 18 Apr 2012 00:52:32 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0480 Important CentOS 5 kernel Update To: centos-announce(a)centos.org Message-ID: <20120418005232.GA16143(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0480 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0480.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 93bf373860767584419722a86cb943bfe71db5acc63836934bcb555c2b920f96 kernel-2.6.18-308.4.1.el5.i686.rpm cd627674535b1d570a2710a7baf143bbb96fe44b40848ad9a182fe595246fe35 kernel-debug-2.6.18-308.4.1.el5.i686.rpm 8d7e3b59cc35853d8411d57cd393a2b299bd25583e2e3e2e8a5643d72c22afbb kernel-debug-devel-2.6.18-308.4.1.el5.i686.rpm 0aa0c85221d2c57b931ebc59742e5a4f8ea044ebe7cb9eb895489919854167b5 kernel-devel-2.6.18-308.4.1.el5.i686.rpm 05309966771e8c3dbca5a55cd5da52406785e4e8348def4011b1b4e8b0ea2986 kernel-doc-2.6.18-308.4.1.el5.noarch.rpm 05be5df292a3ef024581f0bf1652d82e171854ef6dcf5d6f8f166dda49a4781e kernel-headers-2.6.18-308.4.1.el5.i386.rpm b33bb71433aa44de2906e18299369461c3ef66a9c2aa60895063600b0deed211 kernel-PAE-2.6.18-308.4.1.el5.i686.rpm 4327b1b70008e376ecaeb7b53b03ca5289fcbe711aa96b74e6eac077c31667b3 kernel-PAE-devel-2.6.18-308.4.1.el5.i686.rpm 3f7ec3cf0575f853d6c1701912ba070e78538d8ce7973a0e15b565d888c9c238 kernel-xen-2.6.18-308.4.1.el5.i686.rpm bd0d46ca94dbe8d86c16f5fd13709fd7a70e32510e3b393e0f1f1e71d204d8b0 kernel-xen-devel-2.6.18-308.4.1.el5.i686.rpm x86_64: b2bf2f0311c20528eeb6bb4fe0399e4c1f39d9c649922dc372d2906ea4a51b4a kernel-2.6.18-308.4.1.el5.x86_64.rpm e96832389bdd54101b384c7b9f28efcda0b6e94a83295455c86d9cd7095f3369 kernel-debug-2.6.18-308.4.1.el5.x86_64.rpm 06070d7f5d920e12f5a5411c3e34b07f953a9b2b320aed83fd180633503a7f85 kernel-debug-devel-2.6.18-308.4.1.el5.x86_64.rpm 44890372bcc080ab2c2eba9d84baebc031eb9a8f84037675ac23addde2d137f7 kernel-devel-2.6.18-308.4.1.el5.x86_64.rpm 05309966771e8c3dbca5a55cd5da52406785e4e8348def4011b1b4e8b0ea2986 kernel-doc-2.6.18-308.4.1.el5.noarch.rpm 7b9aa0b9b53b2ff09b9ac944264527c2a5bfe8a99e6d58bc7fcdd3258250391d kernel-headers-2.6.18-308.4.1.el5.x86_64.rpm aa4892fc2a98f17167e0bf6dcbe75d306dfd503d0916a52985edb64c622a0918 kernel-xen-2.6.18-308.4.1.el5.x86_64.rpm af77f0ba80cf7101ce1996b60490dc9fc5bc60793f77bf46038c1957669e88a0 kernel-xen-devel-2.6.18-308.4.1.el5.x86_64.rpm Source: e2809e610d32731b6c546351869dc518ee72886600d537346d3329a69290584f kernel-2.6.18-308.4.1.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 18 Apr 2012 03:24:46 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0481 Moderate CentOS 6 kernel Update To: centos-announce(a)centos.org Message-ID: <20120418032446.GA23462(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0481 Moderate Upstream details at : http://rhn.redhat.com/errata/RHSA-2012-0481.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d48c9fdbe982a1ae5d03bbaeec729bc4e3cac1006ecd63acb0daff10efc83950 kernel-2.6.32-220.13.1.el6.i686.rpm 1da42bc92af53bd236f6a7821462670dc7736ac3f62922c911a644b86e8397c5 kernel-debug-2.6.32-220.13.1.el6.i686.rpm 0ce789b618cbba4afc2fb08d8ac3f2318c8ad1c4067c4126f59283693ac110f9 kernel-debug-devel-2.6.32-220.13.1.el6.i686.rpm f4a3a0d7f88583c010a6c24d94c456abd99abf568cd1caa1c0d6ef3ab475118f kernel-devel-2.6.32-220.13.1.el6.i686.rpm 45f326588469e85be457e1b73de655c8b44eb5a6ee9f10a7e23c6b20101ac805 kernel-doc-2.6.32-220.13.1.el6.noarch.rpm 83f7d3b603f30bad342abffb17d51014c27e07a365ea00c64510fde60e96e13a kernel-firmware-2.6.32-220.13.1.el6.noarch.rpm fd8c17f26c23950f7404da1eab737ef13889bcd1b39cda6c13a3f73e0f89a752 kernel-headers-2.6.32-220.13.1.el6.i686.rpm 10bf78c175731174cc643f3cd2cbddf4b2428d6dc5d370736489adf40530722f perf-2.6.32-220.13.1.el6.i686.rpm b6e40d5ff6c3e05e3dc606db47a7cf66be5320513d84f182eac30ed8294cd4aa python-perf-2.6.32-220.13.1.el6.i686.rpm x86_64: 057785185e15a5c585d786a7b47b3b2c2c14fa168fd0ea04063fc42febf9b573 kernel-2.6.32-220.13.1.el6.x86_64.rpm d914fe1d6b793f5e5f3282a481a71c84865a5a27f0728eba2177eb91d1ab7a16 kernel-debug-2.6.32-220.13.1.el6.x86_64.rpm 24556787534a73a7e70702e85ec087079e08d76666eb1368873e08872e8cf092 kernel-debug-devel-2.6.32-220.13.1.el6.x86_64.rpm 672c063c0666274e292afd1504c03647ebe8961954dcfb19058e0d4daa79f050 kernel-devel-2.6.32-220.13.1.el6.x86_64.rpm 2478c22234d342dcb3e546048d3d9097fb51502e404ffc685d72e3ade4530128 kernel-doc-2.6.32-220.13.1.el6.noarch.rpm e78fe9139fd2932703c0a6978cf8630b8e950a47504e54e9a8bb93314e516355 kernel-firmware-2.6.32-220.13.1.el6.noarch.rpm 513f1651c9ae826df517ea36928b47b1333c5824294a0919adae4d08037ab23b kernel-headers-2.6.32-220.13.1.el6.x86_64.rpm 5f9c0181f93dca2e3b581e2509e844d9e4eaefe32c35863b38dcfd7326f4ca56 perf-2.6.32-220.13.1.el6.x86_64.rpm 1c2915f06a3424e97b5fde1fecd21df7734d4f035707a7603b5eba748dfc15e3 python-perf-2.6.32-220.13.1.el6.x86_64.rpm Source: e862a60331b00a1b597b1ab11472962e9357961dceb52f8b1bfac6d0023c212b kernel-2.6.32-220.13.1.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 86, Issue 9 **********************************************

1 0

Building RPM, Unknown tag Licence & Copyright
by Mihamina Rakotomandimby 18 Apr '12

18 Apr '12

Hi all, When trying to rpmbuild http://robert.cheramy.net/ipfm/browser/trunk/redhat/ipfm.spec, I do this: [mihamina@centos6-01 redhat]$ rpmbuild -ba ipfm.spec error: line 5: Unknown tag: Licence: GPL And I get the error above. [mihamina@centos6-01 redhat]$ head -n 5 ipfm.spec Summary: IP Flow Meter is a bandwidth analysis tool Name: ipfm Version: 0.12.0rc1 Release: rktmb Licence: GPL [mihamina@centos6-01 redhat]$ There, I changed the original "Copyright:" to "Licence:", but I get the same error with "Copyright:" (but mentioning "Copyright:"). http://www.rpm.org/max-rpm-snapshot/s1-rpm-inside-tags.html says "Licence:" is a valid tag. Isnt'it? These are my rpm installed. [mihamina@centos6-01 redhat]$ rpm -aq | grep rpm rpm-python-4.8.0-19.el6_2.1.x86_64 deltarpm-3.5-0.5.20090913git.el6.x86_64 rpm-4.8.0-19.el6_2.1.x86_64 rpm-build-4.8.0-19.el6_2.1.x86_64 redhat-rpm-config-9.0.3-34.el6.noarch rpm-libs-4.8.0-19.el6_2.1.x86_64 Thank you. -- RMA.

2 2

auth_changepassword
by Prabhpal S. Mavi 17 Apr '12

17 Apr '12

Dear All Friends, i installed cacti on CentOS 6.2. every thing went smooth and i can see the login page as well. due to security reason cacti has to change the default password (admin/admin) when i enter the default password i get the following error. The requested URL /auth_changepassword.php was not found on this server. Thanks / Regards Prabhpal S. Mavi

3 6

bridge connection and two linux servers
by Arif Hossain 17 Apr '12

17 Apr '12

I need to set up following network architecture : Internet ^ +-----------------+ | +------------------+ | Centos6-1 | | | Centos6-2 | | +---- eth0 + ----+ | | | (br0)| | | | | +---- eth1 +----------------+ eth0 | +-----------------+ +------------------+ ( cable connection ) Two public IP's are to be configured like follows : + **eth0** and **eth1** of **Centos6-1 are to be configured as a bridge with IP1 - **Centos6-1** can be accessed with IP1 - **eth0** of **Centos6-2** is configured with IP2 - any request destined to IP2 will flow through **Centos6-1** How can i accomplish this feat? There is a service running in the second server. This service will bind to IP2. what will happen If i do the following in box1: brctl addbr br0 ifdown eth0 ifdown eth1 ifconfig eth0 0.0.0.0 up ifconfig eth1 0.0.0.0 up ifconfig br0 IP1 **** would it do what i want? Thanks in advance. -- -aft

3 4

CentOS 6.x, kernel-2.6.32-220.7.1, EC2 and drive enumeration
by Steph Gosling 17 Apr '12

17 Apr '12

Hi all, Is anyone successfully running/has succesfully upgraded to 2.6.32-220 from, say, 2.6.32-71.29.1? (i.e. done a normal run-of-the-mill yum update on, say a 6.0 instance all the way up cleanly to 6.2? Reason I ask is that booting into -220 (and I think also into -131 as well) results in a kernel panic for me. Some digging around and the new kernel seems to be enumerating the drives with the wrong minors An m1.large instance-store instance has root at /dev/xvda1, and 2 ephemeral drives xvdb and xvdc. On reboot into 2.6.32-220.7.1 this is what the kernel reports this: dracut: dracut-004-256.el6 device-mapper: uevent: version 1.0.3 device-mapper: ioctl: 4.22.6-ioctl (2011-10-19) initialised: dm-devel(a)redhat.com udev: starting version 147 dracut: Starting plymouth daemon %Gxlblk_init: register_blkdev major: 202 blkfront: xvde1: barriers disabled blkfront: xvdf: barriers disabled xvdf: unknown partition table %Gblkfront: xvdg: barriers disabled xvdg: unknown partition table dracut Warning: No root device "block:/dev/xvda1" found %G%G dracut Warning: Boot has failed. To debug this issue add "rdshell" to the kernel command line. dracut Warning: Signal caught! dracut Warning: Boot has failed. To debug this issue add "rdshell" to the kernel command line. Kernel panic - not syncing: Attempted to kill init! Pid: 1, comm: init Not tainted 2.6.32-220.7.1.el6.x86_64 #1 Call Trace: [<ffffffff814ec3fa>] ? panic+0x78/0x143 [<ffffffff810074db>] ? __raw_callee_save_xen_irq_enable+0x11/0x26 [<ffffffff8106ed72>] ? do_exit+0x852/0x860 [<ffffffff81177f75>] ? fput+0x25/0x30 [<ffffffff8106edd8>] ? do_group_exit+0x58/0xd0 [<ffffffff8106ee67>] ? sys_exit_group+0x17/0x20 [<ffffffff8100b0f2>] ? system_call_fastpath+0x16/0x1b Altering the grub menu.1st and fstab and the instance will boot from /dev/xvde1 but obviously the device change is fairly fundamental. The image that this instance is booting was built in a 6.0 chroot and I have about 100 of them successfully running; but this innocuous update breaks things in a major way. I've had a poke around the upstream bugzilla (e.g. https://bugzilla.redhat.com/show_bug.cgi?id=771912) as well as the EC2 forums and there are a couple of similar but not-quite-the-same problems with the newer kernel. Does anyone have any similar experience or advice? Cheers, Steph -- Steph Gosling <steph(a)chuci.org>

4 8

packaging: src.rpm not a rpm
by Mihamina Rakotomandimby 17 Apr '12

17 Apr '12

Hi all, I have installed the recommended installs from here: http://wiki.centos.org/HowTos/RebuildSRPM I want to build a "ipfm" RPM on a CentOS 6.2, for legacy purpose. I cant immediately get rid of that piece of software, but we're on the move... So: $ wget http://rpm.pbone.net/index.php3/stat/3/srodzaj/2/search/ipfm-0.11.5-alt1.sr… $ rpm -i --nomd5 ipfm-0.11.5-alt1.src.rpm error: ipfm-0.11.5-alt1.src.rpm: not an rpm package (or package manifest): I probably missed something or am using some very outdated ressources: would some help me? -- RMA.

4 5

Upgrading to Verizon FIOS from Verizon DSL - Linux machine as router/Gateway/LAN server]
by Max Pyziur 16 Apr '12

16 Apr '12

Greetings, A long time ago I setup a Linux machine as a Gateway/LAN Server using Verizon DSL as the ISP. I used the following HOWTO as the guide - DSL HOWTO For Linux: http://www.tldp.org/HOWTO/DSL-HOWTO/index.html Is there something comprable for Verizon FIOS? My Gateway machine runs Fedora. For a new server, I'm considering setting up a CentOS machine, while still using Fedora on my desktop and laptop. Much thanks, Max Pyziur pyz(a)brama.com

4 3

CentOS-announce Digest, Vol 86, Issue 8
by centos-announce-request＠centos.org 16 Apr '12

16 Apr '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEEA-2012:0482 CentOS 6 pam Update (Johnny Hughes) 2. CEBA-2012:0479 CentOS 6 kexec-tools Update (Johnny Hughes) 3. CEEA-2012:0484 CentOS 5 libgcrypt Update (Johnny Hughes) 4. CEBA-2012:0483 CentOS 6 fence-agents Update (Johnny Hughes) 5. CEBA-2012:0485 CentOS 6 fence-virt Update (Johnny Hughes) 6. CEEA-2012:0486 CentOS 6 libgcrypt Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 16 Apr 2012 09:54:33 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEEA-2012:0482 CentOS 6 pam Update To: centos-announce(a)centos.org Message-ID: <20120416095433.GA31709(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2012:0482 Upstream details at : https://rhn.redhat.com/errata/RHEA-2012-0482.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 5537d4488e88e1d1f2ef6d40c1502b62686f4bf9e8e31827e93128553c88e537 pam-1.1.1-10.el6_2.1.i686.rpm d328774408c6bb6433602a688e30414a09323a3e5ea3e281bd30f71e502049dc pam-devel-1.1.1-10.el6_2.1.i686.rpm x86_64: 5537d4488e88e1d1f2ef6d40c1502b62686f4bf9e8e31827e93128553c88e537 pam-1.1.1-10.el6_2.1.i686.rpm 6e923700b87db504eb9f209d6526472c6bfa95cd55d6e5c6a2e2681393cb6ff9 pam-1.1.1-10.el6_2.1.x86_64.rpm d328774408c6bb6433602a688e30414a09323a3e5ea3e281bd30f71e502049dc pam-devel-1.1.1-10.el6_2.1.i686.rpm 3cb9876cf59494b6e62ca66862d8ccd68dbe92a283d3ba40f4089b4566505336 pam-devel-1.1.1-10.el6_2.1.x86_64.rpm Source: 3496db8b92b98d7229a451af03fea1f8b83863b9e54e9c6aa15df76eaa6cde52 pam-1.1.1-10.el6_2.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Mon, 16 Apr 2012 09:55:52 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0479 CentOS 6 kexec-tools Update To: centos-announce(a)centos.org Message-ID: <20120416095552.GA31788(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0479 Upstream details at : http://rhn.redhat.com/errata/RHBA-2012-0479.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 60ae22e9bef6270e4f8d46a303d693ded80456428e4bd882d170566a73292d6a kexec-tools-2.0.0-209.el6.5.i686.rpm x86_64: b84883507c87a6480627a666a0625699ac8a288eb062019cd3b818a69027286e kexec-tools-2.0.0-209.el6.5.x86_64.rpm Source: 69aa89caa42effc7173718fbf52759dcf22c45d43a172deb907a7b0d09fd90c9 kexec-tools-2.0.0-209.el6.5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Mon, 16 Apr 2012 13:22:16 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEEA-2012:0484 CentOS 5 libgcrypt Update To: centos-announce(a)centos.org Message-ID: <20120416132216.GA9903(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2012:0484 Upstream details at : https://rhn.redhat.com/errata/RHEA-2012-0484.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: e0a74b6eda654e3ce95fb8eb4ed2628bb9eb55d0461a444a3c710027db5a5623 libgcrypt-1.4.4-5.el5_8.2.i386.rpm 86bfbaae9f45960bc16323298f3b8a09dd307f468d1acaa9fff4595940596668 libgcrypt-devel-1.4.4-5.el5_8.2.i386.rpm x86_64: e0a74b6eda654e3ce95fb8eb4ed2628bb9eb55d0461a444a3c710027db5a5623 libgcrypt-1.4.4-5.el5_8.2.i386.rpm 74ef164ac5dc25e083c3056553d8c3f80731297940b016f80595e785eb78d834 libgcrypt-1.4.4-5.el5_8.2.x86_64.rpm 86bfbaae9f45960bc16323298f3b8a09dd307f468d1acaa9fff4595940596668 libgcrypt-devel-1.4.4-5.el5_8.2.i386.rpm 358931f66651bcad816a06eca50619fb972c6c5455a9b066a0ea34014ae70703 libgcrypt-devel-1.4.4-5.el5_8.2.x86_64.rpm Source: 94aecbc3d59024ad286d8ee3ca4f901b65f9dfb0b5aa09dadb17e9aaf6c690ba libgcrypt-1.4.4-5.el5_8.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Mon, 16 Apr 2012 14:19:04 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0483 CentOS 6 fence-agents Update To: centos-announce(a)centos.org Message-ID: <20120416141904.GA12918(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0483 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0483.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: f30a4d76c097c8535fdc3d52ddd8db5890ac9cbd2456e53a0903aa9182037f4a fence-agents-3.1.5-10.el6_2.2.i686.rpm x86_64: ccdd898ddbdd21f892f88a6b828223ca7808481ba43f37f82f69039a547dc3f5 fence-agents-3.1.5-10.el6_2.2.x86_64.rpm Source: 398878e22e48673262ac1929428fceb9f529e5e563913f57b41a10484c8ec1ce fence-agents-3.1.5-10.el6_2.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Mon, 16 Apr 2012 14:19:22 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0485 CentOS 6 fence-virt Update To: centos-announce(a)centos.org Message-ID: <20120416141922.GA13023(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0485 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0485.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d4ab325868c59eab68b657654fc3af9c55498c3f085c891e9e34c2ca620ce8a8 fence-virt-0.2.3-5.1.el6_2.i686.rpm 092ac2d8bf4a68112682df9ddd6d97c7ab16c3b80a841b0443e5663f81cd10c4 fence-virtd-0.2.3-5.1.el6_2.i686.rpm 843845020920fa328865caa792a46a3d4304d98620b365ed4e781dd0790a9701 fence-virtd-checkpoint-0.2.3-5.1.el6_2.i686.rpm 61529fd3ae99738b35c904f333ae60c5ca026d5e7d4b41baed386977e7fd8671 fence-virtd-libvirt-0.2.3-5.1.el6_2.i686.rpm 767c0d8c0150d24e09de94aef405197b24035eaf32b053b6b1441b983c31ff35 fence-virtd-libvirt-qpid-0.2.3-5.1.el6_2.i686.rpm f3932dc525fc5a5606029147b1bdd86108fe4f6ef69f07c582733962d1b9d41c fence-virtd-multicast-0.2.3-5.1.el6_2.i686.rpm a55fe870b1edafe6fc3e8b6e3851aa3f78108595a978223c1ada53cfa7dae1b1 fence-virtd-serial-0.2.3-5.1.el6_2.i686.rpm x86_64: e0af02c233d841c92a8999105ab98359650f605539d40784e4be14c02aa3a984 fence-virt-0.2.3-5.1.el6_2.x86_64.rpm c34a6047016bb142796b6e5cdc2cd5ed3d2501c6cfeab94cdc5a2260910b38ae fence-virtd-0.2.3-5.1.el6_2.x86_64.rpm 8a1dcf262813c8aeda8e2c93e6a373781f91a5f5a00e37b3aaa461dca9af4c49 fence-virtd-checkpoint-0.2.3-5.1.el6_2.x86_64.rpm d42516a608d639f510b4a43a976ab8165f185a1406407f1a3bf10dfd794728eb fence-virtd-libvirt-0.2.3-5.1.el6_2.x86_64.rpm ee27924a2fbbd2fa3e2e4cae6d39e9c07a1ff20555804370aaa7862583a11d14 fence-virtd-libvirt-qpid-0.2.3-5.1.el6_2.x86_64.rpm 5ae09f2d8c4bb78f6bdc6694ce72163e1ffb3f23da6ac04597590ba8ecd26160 fence-virtd-multicast-0.2.3-5.1.el6_2.x86_64.rpm 6326c62db91eaf67ba87696a73309d22c8550c943141a9ceab5a8f9b9144d0ec fence-virtd-serial-0.2.3-5.1.el6_2.x86_64.rpm Source: f5e2aeb4210cbd8d237839ebdc14b950fdb6166f8d41bc23711a7e4c37dd65ce fence-virt-0.2.3-5.1.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Mon, 16 Apr 2012 14:19:34 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEEA-2012:0486 CentOS 6 libgcrypt Update To: centos-announce(a)centos.org Message-ID: <20120416141934.GA13103(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2012:0486 Upstream details at : https://rhn.redhat.com/errata/RHEA-2012-0486.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 9d85e5ee76fe95b5ca31110ac9bb701e4e4cc1186ad8f3d0ed75827a15d63914 libgcrypt-1.4.5-9.el6_2.2.i686.rpm 143696c03feecfc2e48782acbad1305888acfd1ec08b02c969f1c9f58c0bb25e libgcrypt-devel-1.4.5-9.el6_2.2.i686.rpm x86_64: 9d85e5ee76fe95b5ca31110ac9bb701e4e4cc1186ad8f3d0ed75827a15d63914 libgcrypt-1.4.5-9.el6_2.2.i686.rpm 5750bfe6acfcadbf16ec6ae98a4461d6df8ccdda8497d58e04199b8fa5945cc1 libgcrypt-1.4.5-9.el6_2.2.x86_64.rpm 143696c03feecfc2e48782acbad1305888acfd1ec08b02c969f1c9f58c0bb25e libgcrypt-devel-1.4.5-9.el6_2.2.i686.rpm be4424dcc9cb68e487ce18116593b94d7bab34426b44feee4fb1199c689c9da8 libgcrypt-devel-1.4.5-9.el6_2.2.x86_64.rpm Source: a2fedc96aee98ad5935fd67a4d1127a1926430e6a27a6916aa81cd827441450a libgcrypt-1.4.5-9.el6_2.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 86, Issue 8 **********************************************

1 0

dhcp annoyances
by m.roth＠5-cent.us 16 Apr '12

16 Apr '12

Well, googling has failed me. We've got a pxeboot setup, but we keep getting, in the logs, parse_option_buffer: malformed option dhcp.bootfile-name (code 67): option length exceeds option buffer length. This is CentOS 6.2 The section for those machines that can pxeboot is: group { allow booting; allow bootp; filename "pxelinux.0"; option dhcp.bootfile-name "pxelinux.0"; (I added this, based on something I found googling) option subnet-mask 255.255.254.0; option routers <our subnet elided>; default-lease-time 172800; # 2 days. max-lease-time 432000; # 5 days. next-server vessel.cit.nih.gov; #BOOT THESE I see the entries for option-128 and option-129, but those, based on still more googling, seem to actually be for etherboot, not pxeboot. So, does anyone have any idea where this buffer length is defined? mark, one of whose goals is less garbage in the logs

3 7

Network accounting
by przemolicc＠poczta.fm 16 Apr '12

16 Apr '12

Hello, we have been using squid cache under CentOS 6. There is basic accounting for each host/client but we need to account for each subnet. Can you recommend any software which easily let us do subnets network accounting ? E.g.: 192.168.1.x X Gb 192.168.2.x Y Gb 192.168.3.x Z Gb ... Regards Przemek

2 1

PXE won't boot a local kernel
by Orlando Rivera 16 Apr '12

16 Apr '12

Hi I have a computer node I have configured with pxe to boot diskless, so far it works flawlessly . In the Hard Disk of this Node I have installed, using systemimager , a image of the same configuration I used for the diskless, kernel and image are pretty the same. I log in into the node using diskless and mounted all required files and directories /proc /sys /dev. I also chroot to the new root dir (the root directory in the HD). Grub-install gives me no errors and grub.conf/menu list seems to be ok . Finally I tell PXE to boot the node, but using the local disk, but it won't boot. I have no errors or something than helps me to see what is wrong. The output of ipmi-console is: !PXE entry point found (we hope) at 95FA:00D6 via plan A UNDI code segment at 95FA len 4964 UNDI data segment at 95FA len 4964 UNDI data segment at 902A len 5D00 Getting cached packet 01 02 03 My IP address seems to be 0A650209 10.101.2.9 ip*10.101.2.9:10.101.2.250:10.101.2.250:255.255.0.0 TFTP prefix: Booting from local disk... and then start all over again : "Triying to load: pxelinux.cfg/e3777423*214f*3d36*93bc*440706a2fc6d ...." My pxelinux.conf looks like: DEFAULT localhost LABEL diskless KERNEL ..... LABEL localhost LOCALBOOT 0 How can I debug or to get more information about what could be wrong . THXS Orlando

1 0

Virtualization in CentOS 6
by Joseph L. Casale 15 Apr '12

15 Apr '12

I might be needing to utilize one of the provided virtualization packages either in a headless console only setup of CentOS or on my desktop. I havent used anything but ESXi in ages except virtualbox which I did not like at all. Most of the guests which I will need to run will be wnidows based and last I looked at this a few years ago, windows guests ran pathetic. What are some more current opinions on how windows guests run on the available packages compared to ESXi? The version numbers between the rhel virtio-win drivers and the publicly available ones are significantly different, and it looks like you need a rhel sub for theirs. Anyone know the state of the ones on the fedora repo? Has kvm made snapshots (without lvm) as slick as vmware yet? Thanks for the suggestions, jlc

6 9

SSD for boot drive and OS
by Frank Cox 15 Apr '12

15 Apr '12

I just ordered a new machine that's destined to become a Centos 6 application server for a publishing company, and decided to get one with a 40GB SSD as well as a standard hard drive. I'm thinking that I can put most of the operating system on that drive and have the home directories and whatnot on the regular hard drive. Are there any pitfalls lying in wait for an unwary person like me when setting this thing up? Further, I suspect that if that thing rattles along like I think it should I'll probably want to add a SSD to my own desktop machine here. Since this computer is already set up with the default Centos 6 partitioning system on a single hard drive (/boot, /home and /) is there an easy way to transfer the OS to the SSD or would I be better off reformatting this thing and starting over from scratch if I want to have a SSD for my boot and OS drive? -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com www.creekfm.com - FIFTY THOUSAND WATTS of POW WOW POWER!

7 12

(no subject)
by dfqm2008 15 Apr '12

15 Apr '12

1 0

Changing Python Version
by Quincey Robertson 15 Apr '12

15 Apr '12

Hi; I am trying to change the default version of python on my centos 5.7 box and leave the old installation. Frustrated by not finding any help online, I went ahead and installed Python 2.6 from the source. It appears to be my default, but when I fire up mod_wsgi, it complains that it can't import os. Please advise. TIA, Quincey

5 6

Build one VM with two 5.7 DVD iso
by Vinay Nagrik 14 Apr '12

14 Apr '12

Hello Group, I am trying to build one VMware VM for 5.7 centos. However, there are two DVDs. And all vms I have build so far are confined in one iso. How could I build complete 5.7 centos VM with two different Centos DVDs. I am sure somebody out there must have built one such OS. Please guild. thanks. nagrik

8 7

System hanged - no info in logs.
by Rafał Radecki 14 Apr '12

14 Apr '12

Hi All. I had today a problem with my mail server (2.6.18-274.12.1.el5 #1 SMP Tue Nov 29 13:37:35 EST 2011 i686 i686 i386 GNU/Linux, CentOS release 5.7 (Final)). On my Cacti graphs I see that there has been much I/O write on the disks and then there is no more info. Also in logs (messages, dmesg, netconsole) there is no info for about 15 minutes when there was a problem with the server. I would like to have some info in such situations. Do you know any solutions? Best regards, Rafal.

5 6

rhel/centos alternative to logwatch?
by Bob Hoffman 13 Apr '12

13 Apr '12

Logwatch file shows last upgrade to the code was 2007. The unmatched entries are killing me in the reports. I figure there must be a newer utility centos has in the repo but I cannot find one. Is logwatch the only one that is included? thanks

7 13

FW: upgrade issue
by Paul A 13 Apr '12

13 Apr '12

Fixed the network issue by removing the net udev rule, somehow that was causing the network no to come up. Disabled iscsid since it's not needed and added did echo 0 > /proc/sys/kernel/hung_task_timeout_secs to fix the megaraid issue. -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Paul A Sent: Friday, April 13, 2012 3:41 PM To: 'CentOS mailing list' Subject: Re: [CentOS] upgrade issue Mark, I used the centos repos, this server has centos 5.8. Iscsi will work on my previous kernel but not on the new one. I wanted to switch back to the previous kernel but for some reason the network scripts hangs even though it shows the e100 nic driver loaded. -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of m.roth(a)5-cent.us Sent: Friday, April 13, 2012 3:31 PM To: CentOS mailing list Subject: Re: [CentOS] upgrade issue Paul A wrote: > Dale, I disabled it and the server came up but im seeing all sorts of > kernel errors when its disabled ( see below ). If this can't be fixed > I would really like to boot the previous kernel however the network > script won't start. Im not really sure how upgrading the kernel caused > the network to stop working on the previous kernel. > > Apr 13 15:21:31 bakup kernel: INFO: task modprobe:740 blocked for more > than > 120 seconds. > Apr 13 15:21:31 bakup kernel: "echo 0 > > /proc/sys/kernel/hung_task_timeout_secs" disables this message. Oh, wonderful. Didn't used to see that before the last six months. <snip> > Apr 13 15:21:31 bakup kernel: Call Trace: > Apr 13 15:21:31 bakup kernel: [<f89aa522>] megaraid_queue+0x8ce/0x8d8 > [megaraid] <snip> Interesting. Is this built-in for CentOS, or did you install megaraid from other than the CentOS repositories? mark _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

2 1

harddisk partition not created right with centos 5.7
by Vinay Nagrik 13 Apr '12

13 Apr '12

Hello Group, I am building a company application based on Centos 5.7 OS. The application was working earlier and creating right partitions both for hardware as well as VM. But since we introduced Centos 5.7 OS and start building application with 5.7 anaconda the hardware partitions are duplicate of VM partitions *while creating hardware partition my code looks like.* cat > /tmp/partmap.ks <<EOPM *clearpart --all --initlabel --drives=sda *part swap --fstype swap --asprimary --size=16000 part /boot --fstype ext3 --size=400 --asprimary --fsoptions=noatime,defaults part pv.01 --size=1 --grow volgroup jmpvgnocf pv.01 logvol / --fstype ext3 --name=lvroot --vgname=jmpvgnocf --size=1 --grow --fsoptions=noatime,defaults logvol swap --fstype swap --name=lvswap --vgname=jmpvgnocf --size=$swap_size EOPM LV Name always shows /dev/volGroup00/LogVol00. *my VM partition code looks like* cat > /tmp/partmap.ks <<EOOPM clearpart --all --initlabel #autopart changes behvior of autopart. to avoid version dependency #put specific partion configuration #autopart part /boot --fstype ext3 --size=100 part pv.2 --size=0 --grow --ondisk=sda volgroup VolGroup00 --pesize=32768 pv.2 logvol / --fstype ext3 --name=LogVol00 --vgname=VolGroup00 --size=1024 --grow logvol swap --fstype swap --name=LogVol01 --vgname=VolGroup00 --size=1000 --grow --maxsize=1984 EOOPM Could someone tell me what am I doing wrong. thanks in advance. nagrik

2 1

an assortment of mail serving issues
by Jason T. Slack-Moehrle 13 Apr '12

13 Apr '12

Hi All, I moved to a new CentOS6 install after an old CentOS5 server started exhibiting problems. I am having mail serving issues and they are confusing. I am seeing both Sendmail and Zimbra issues. We front e-end out operation with a pfSense box and it has the following mail ports open: 25, 465, 587, 110, 143, 993, 995. We have Zimbra and that also requires 7025 and 7071 be open. This sent OS Server has these same ports open and verified by 'system-config-network-tui' 1. We have a few php based sites that utilize code like: $headers = 'MIME-Version: 1.0' . "\r\n"; $headers .= 'Content-type: text/html; charset=iso-8859-1' . "\r\n"; $mail_to = "slackmoehrle(a)gmail.com"; $mail_subject = "[6Colors] Footage!"; $mail_body = "<html><body> "; $mail_body = $mail_body."[6Colors - FOOTAGE] "; $mail_body = $mail_body."Name: ".$vName." "; $mail_body = $mail_body."E-Mail Address: ".$vEmail." "; $mail_body = $mail_body."Comments: ".$vComment." "; $mail_body = $mail_body."------------ END ------------ "; $mail_body = $mail_body." </body></html>"; mail($mail_to, $mail_subject, $mail_body, $headers); This mail is failing to be delivered. 2. We have a database backup script that e-mails a few very small databases every night. #Enter the email address you would like to receive the backup EMAIL="slackmoehrle(a)gmail.com"; MAIL="/usr/bin/mail"; /usr/bin/uuencode $DUMP$EXT2$EXT4 $DUMP$EXT2$EXT4 |$MAIL -s "Mysql Backup For $DATABASE" $EMAIL ; This mail is failing to be delivered. 3. We have a CMS running that we have tried using SendMail and SMTP by authenticating using Google credentials, following Google instructions and the CMS cannot send outgoing mail as well. 4. Zimbra users can send mail, but replying back doesn't work. They cannot receive e-mails. I thought to check '/var/log/maillog' so I did 'tail maillog' # tail maillog Apr 12 20:43:56 www postfix/lmtp[21788]: connect to thedigiologygroup.org[75.149.56.27]:7025: Connection timed out Apr 12 20:43:56 www postfix/lmtp[21788]: 6AD69198102B: to=<jason(a)thedigiologygroup.org>, relay=none, delay=21, delays=0.07/0.01/21/0, dsn=4.4.1, status=deferred (connect to thedigiologygroup.org[75.149.56.27]:7025: Connection timed out) Apr 12 20:44:04 www postfix/smtpd[21765]: disconnect from mail-pz0-f51.google.com[209.85.210.51] Here clearly is a connection timeout on port 7025, but I do see that it is open on our pfSense box and the CentOS server experiencing this. So I started checking things like DNS, etc # host thedigiologygroup.org thedigiologygroup.org has address 75.149.56.27 thedigiologygroup.org mail is handled by 0 mail.thedigiologygroup.org. # dig +short thedigiologygroup.org mx 0 mail.thedigiologygroup.org. I had Comcast create Reverse PTR records yesterday for the IP 75.149.56.27 for mail.thedigiologygroup.org and mail.ouremail.us. I use DNSQueries to test this and I found they have a type for the mail.ouremail.us entry, they used .com, so I will call and have them correct it I tried doing an SMTP test on DNSqueries.com and it fails saying: I was NOT able to connect on port 25 to mail.thedigiologygroup.org I dont know if this is trying open relay stuff, so that should fail? I rebooted the server finally and looked at maillog after a reboot and I see: # tail /var/log/maillog Apr 12 21:14:05 www zmmailboxdmgr[5836]: status OK Apr 12 21:14:05 www zmmailboxdmgr[6021]: status requested Apr 12 21:14:05 www zmmailboxdmgr[6021]: status OK Apr 12 21:14:30 www postfix/postqueue[6243]: fatal: Queue report unavailable - mail system is down Apr 12 21:15:00 www postfix/postqueue[6251]: fatal: Queue report unavailable - mail system is down Apr 12 21:15:07 www zmmailboxdmgr[6351]: status requested Apr 12 21:15:07 www zmmailboxdmgr[6351]: status OK Apr 12 21:15:07 www zmmailboxdmgr[6360]: status requested Apr 12 21:15:07 www zmmailboxdmgr[6360]: status OK Apr 12 21:15:30 www postfix/postqueue[6559]: fatal: Queue report unavailable - mail system is down So I am really confused and I was hoping for some advice on sorting this out. -Jason

2 2

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss