- Discuss - lists.centos.org

Disk operations very slow on Lenovo Thinkcentre
by Niki Kovacs 16 Nov '10

16 Nov '10

Hi, I'm currently trying to install CentOS 5.5 on a series of Lenovo Thinkcentre nettops. At first, the install CD boots OK without any options, but when it comes to formatting, the process can only be described as terribly slow... it took about half an hour to format the 160 GB disk. A few cups of coffee later, the system boots with the following messages on bootup (right at the beginning, when it says "Red Hat Nash starting...") : ****************** ... PCI: Cannot allocate resource region 7 of bridge 0000:00:1c.0 ... ata_piix 0000:00:1f.2: no available legacy port ... ****************** And here's the output of lspci : ****************** 00:00.0 Host bridge: Intel Corporation 82Q963/Q965 Memory Controller Hub (rev 02) 00:02.0 VGA compatible controller: Intel Corporation 82Q963/Q965 Integrated Graphics Controller (rev 02) 00:1a.0 USB Controller: Intel Corporation 82801H (ICH8 Family) USB UHCI Controller #4 (rev 02) 00:1a.7 USB Controller: Intel Corporation 82801H (ICH8 Family) USB2 EHCI Controller #2 (rev 02) 00:1b.0 Audio device: Intel Corporation 82801H (ICH8 Family) HD Audio Controller (rev 02) 00:1c.0 PCI bridge: Intel Corporation 82801H (ICH8 Family) PCI Express Port 1 (rev 02) 00:1c.4 PCI bridge: Intel Corporation 82801H (ICH8 Family) PCI Express Port 5 (rev 02) 00:1d.0 USB Controller: Intel Corporation 82801H (ICH8 Family) USB UHCI Controller #1 (rev 02) 00:1d.1 USB Controller: Intel Corporation 82801H (ICH8 Family) USB UHCI Controller #2 (rev 02) 00:1d.2 USB Controller: Intel Corporation 82801H (ICH8 Family) USB UHCI Controller #3 (rev 02) 00:1d.7 USB Controller: Intel Corporation 82801H (ICH8 Family) USB2 EHCI Controller #1 (rev 02) 00:1e.0 PCI bridge: Intel Corporation 82801 PCI Bridge (rev f2) 00:1f.0 ISA bridge: Intel Corporation 82801HB/HR (ICH8/R) LPC Interface Controller (rev 02) 00:1f.2 IDE interface: Intel Corporation 82801H (ICH8 Family) 4 port SATA IDE Controller (rev 02) 00:1f.3 SMBus: Intel Corporation 82801H (ICH8 Family) SMBus Controller (rev 02) 00:1f.5 IDE interface: Intel Corporation 82801H (ICH8 Family) 2 port SATA IDE Controller (rev 02) 03:00.0 Ethernet controller: Broadcom Corporation NetXtreme BCM5755 Gigabit Ethernet PCI Express (rev 02) ****************** I'm not very proficient about hardware drivers. Most of the things I know about them is the mix of information I gathered over the years when they didn't work as expected. My haphazard guess here would be that the disk is somehow treated as IDE, not as SATA, thus making the read/write operations much slower than theoretically possible (which would mean that somewhere in the boot process, the wrong driver for the disk is loaded). But then, it's only my guess. Unfortunately, I don't have the slightest idea if there's a possibility to correct this behaviour a) during install, through some magic boot option maybe, and b) during normal operation once the system is installed. Blacklist something and add something else, my vague intuition says. Before going for CentOS 5.5, I booted and installed Fedora 14 on that machine, which runs very fast (at least for my standards). Cheers, Niki Kovacs

2 2

Best way to configure proprietary NVidia driver on CentOS ?
by Nicolas Kovacs 15 Nov '10

15 Nov '10

Hi, What's the best (cleanest, easiest, whatever) way to install the proprietary NVidia driver on CentOS 5.5 ? Usually I'm using the RPMForge 3rd party repo and compile the odd missing package myself from a Fedora SRPM. But the nvidia packages look a bit like a mess. DKMS has errors in the startup script (looking for a nonexistent log_action_msg and the likes), so I wonder if it's best to just download the driver from nvidia.com and build it myself. Then I thought : I'd rather ask. Cheers, Niki -- http://www.kikinovak.net

8 12

hwclock problem
by Jobst Schmalenbach 15 Nov '10

15 Nov '10

Hi. I run peridocally (from cron) on all of my machines 30 * * * * root /sbin/hwclock --systohc All of those machines in question take their time via NTP from the same local server, and that server gets its time from a ntp pool. Now I had to reboot a couple of them two days ago and to my surprise all had problems with the time upon booting. Here are the important files: [root@XXXXXX ~] #>l /etc/adjtime 0.001687 1289518202 0.000000 1289518202 LOCAL [root@XXXXXXX ~] #>l /etc/sysconfig/clock ZONE="Australia/Melbourne" UTC=false ARC=false So from my understanding the hwclock should contain the local time. [root@XXXXXX ~] #>date Fri Nov 12 11:26:23 EST 2010 [root@XXXXXX ~] #>hwclock Fri 12 Nov 2010 11:26:42 EST -0.167976 seconds [root@XXXXXX ~] #> However on boot I get the following: Nov 10 19:08:37 XXXXXX syslogd 1.4.1: restart. Nov 10 19:08:37 XXXXXX kernel: klogd 1.4.1, log source = /proc/kmsg started. Nov 10 19:08:37 XXXXXX kernel: Linux version 2.6.18-164.11.1.el5 (mockbuild(a)builder10.centos.org) (gcc version 4.1.2 20080704 (Red Hat 4. 1.2-46)) #1 SMP Wed Jan 20 07:32:21 EST 2010 Nov 10 19:08:37 XXXXXX kernel: Command line: ro root=/dev/sda2 vga=791 Nov 10 19:08:37 XXXXXX kernel: BIOS-provided physical RAM map: ... ... Nov 10 19:08:51 XXXXXX kernel: IPv6 over IPv4 tunneling driver Nov 10 08:08:52 XXXXXX ntpdate[2464]: step time server 192.168.1.1 offset -39599.950905 sec Nov 10 08:08:52 XXXXXX xinetd[2447]: xinetd Version 2.3.14 started with libwrap loadavg labeled-networking options compiled in. and off course dovecot falls over too "Time just moved backwards by 39599 seconds." Now, 39600s is 11 hours, which is (inc DST) *MY* offset from Greenwich. So what am I doing wrong? The idea of running hwclock is to make sure that exactly the problem with dovecot does NOT occur, and ntp does not have a coughing fit when the hardware clock is not close to the correct time upon booting. The last time I booted some of those machine was more than 200 days ago, so the hwclock will be skewed if I do not update it. Jobst -- Keyboard not found - please clean up desktop! | |0| | Jobst Schmalenbach, jobst(a)barrett.com.au, General Manager | | |0| Barrett Consulting Group P/L & The Meditation Room P/L |0|0|0| +61 3 9532 7677, POBox 277, Caulfield South, 3162, Australia

9 10

Auto-Re: CentOS Digest, Vol 70, Issue 14
by 韦加宁 15 Nov '10

15 Nov '10

信已收到,谢谢!

2 1

Re: [CentOS] SSH keys question [RESOLVED]
by John Kennedy 15 Nov '10

15 Nov '10

On Mon, Nov 15, 2010 at 13:45, Paul Heinlein <heinlein(a)madboa.com> wrote: > On Mon, 15 Nov 2010, cliff here wrote: > > > You should check the perms on the dirs, ssh will not allow it use > > the keys if they are too permissive. So I would check starting at > > /home > > This is the most likely cause; I'd check there too. > > If not, > > 1. Ensure the file hash is the same (e.g., no extraneous whitespace > in the middle of the key) > 2. sshd is usually pretty good about writing errors to syslog. > > -- > Paul Heinlein <> heinlein(a)madboa.com <> http://www.madboa.com/ > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos > Found it... In /var/log/secure I got "Authentication refused: bad ownership or modes for directory /home/zema/.ssh" I had checked the file, not the directory... Thanks all... John -- John Kennedy

1 0

SSH keys question
by John Kennedy 15 Nov '10

15 Nov '10

All, I have 3 servers. All 3 are CentOS 5.5. All 3 have identical /etc/ssh/sshd_config files. I used ssh-keygen (with no arguments) to generate keys with no password. I then added all 3 id_rsa.pub keys to the authorized_keys file. With this set up, I should be able to ssh between all 3 boxes without needing a password. The problem is that one of the servers keeps asking for a password even with the keys set up. servera --> serverb No password serverb --> servera No password servera --> serverc Password serverc --> servera No password serverb --> serverc Password serverc --> serverb No password If they are all identical from an ssh standpoint (at least the authorized_keys, /etc/sshd_config, and UID for the user on all 3 hosts), why will serverc not play nicely with the other 2> Is there something else I should be checking? Thanks, John -- John Kennedy

3 3

can't find ldapseaerch
by bluethundr 15 Nov '10

15 Nov '10

hello list I'm having a very strange problem with my centos 5.5 system. For some strange reason, this machine cannot find ldapsearch: [root@VIRTCENT13 ~]# ldapsearch ldapsearch: Command not found. [root@VIRTCENT13 ~]# whereis ldapsearch ldapsearch: /usr/bin/ldapsearch /usr/share/man/man1/ldapsearch.1.gz ldapsearch currently lives at /usr/bin along with a lot of other really very useful tools. /usr/bin is also _clearly_ on my root path:i [root@VIRTCENT13 ~]# echo $PATH /usr/kerberos/sbin:/usr/kerberos/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/X11R6/bin And here are the permissions and modes for this tool: [root@VIRTCENT13 bin]# ls -l ldapsearch -rwxr-xr-x 1 root wheel 65336 Aug 11 09:20 ldapsearch And other things in this directory (like yum for example) work just fine: [root@VIRTCENT13 bin]# yum repolist Loaded plugins: fastestmirror, priorities Existing lock /var/run/yum.pid: another copy is running as pid 11750. Another app is currently holding the yum lock; waiting for it to exit... The other application is: yum-updatesd-he Memory : 65 M RSS (107 MB VSZ) Started: Sat Nov 13 18:04:22 2010 - 00:57 ago State : Running, pid: 11750 If you feed the command line the full path to ldapsearch it works as intended. I was wondering if anyone had any idea why ldapsearch isn't being found? thanks! -- Here's my RSA Public key: gpg --keyserver pgp.mit.edu --recv-keys 5A4873A9 Share and enjoy!!

4 3

ipvs and destination hashing...
by John Doe 15 Nov '10

15 Nov '10

Hi, just in case some ipvs knowledgable people read this... I tried to find some info on ipvs destination hashing on the net but did not find anything... Right now we have a basic direct routing round-robin keepalived configuration: abc.example.com (a.b.c.d) => LVS ( round-robin ) => server_[1..n] with IP[1..n]. If we use the dh option, on what would the hashing be done? I saw some pseudo code that states that the hash is based on the destination IPs in the packets... But there is only 1 IP in input and the output IPs are selected by round-robin already (so no point dhing them)... Do we have to have n IPs for abc.example.com (in the dns) and the hashing will be done on these IPs? Thx, JD

1 0

Auto-Re: CentOS Digest, Vol 70, Issue 15
by 韦加宁 15 Nov '10

15 Nov '10

信已收到,谢谢!

1 0

RPM/YUM on CentOS 5.4 issue - multiple versions of the same package installed
by Gabriel Tabares 15 Nov '10

15 Nov '10

Hi all, We currently have an issue with multiple versions of a custom package being installed. The RPM contains a liquibase script (a Java-based DB change management tool) and a %post script to run liquibase. We are installing with scripts that run "yum update liquibase-script". If the %post script runs correctly, it returns 0 and the application gets installed correctly but, if the %post script fails, it returns -1 and the application does get installed, but the old one does not get unistalled, so if I run "rpm -qa | grep liquibase-script" I get a list of all the versions that have been installed. I know that the files have been installed correctly, as the RPM contents have the same name but different content and I have checked it. Why is this happening? I thought that %post scripts failing do not prevent the application to installing and that RPM installation is atomic, so installing one package will remove the previous verison. Is there any way to prevent this issue? We're using CentOS 5.4 on x86_64 Thanks Gabriel

2 2

updating to gtk+ >= 2.0
by aurfalien＠gmail.com 15 Nov '10

15 Nov '10

Hi all, Any know the best way to up gtk+ on Centos 5.5 to something being at least 2.0 or greater? - aurf

6 8

xServes are dead ;-( / SAN Question
by Nicolas Ross 15 Nov '10

15 Nov '10

Hi ! As some of you might know, Apple has discontinued it's xServes server as of january 31st 2011. We have a server rack with 12 xserves ranging from dual G5's to dual quand-core xeon lastest generation, 3 xserve-raid and one activeraid 16 TB disk enclosure. We also use xSan to access a shared file system among the servers. Services are run from this shared filesystem, spreaded across the servers. Some LUNs on the fiber channel network are accessed directly and mounted on a case-by-case basis. Those raid volumes are partitioned with a GUID partition map, and apple_label type volumes. So they can be mounted by name with mount_hfs. We were on the verge on upgrading at least 6 of our server in a separate location (as a backup-site), with another SAN, same aplication etc. But this announce has come put a little delay. We do have several servers running CentOS (about 10 or so), on intel server platform. Now with this said, I am searching for documentation on operating a SAN under linux. We are looking at Quantum StorNext FS2 product for the SAN itselft. And I am searching info about accessing volumes on a fiber channel network by label. I know I can label individual ext3 partition, but how to do so on a raid array via fiber channel ? Basicly, I search for a linux starter guide to fiber channel storage. Thanks for any insight. Nicolas

18 40

Does "yum update tzdata" update /etc/localtime?
by Jobst Schmalenbach 15 Nov '10

15 Nov '10

Hi list. Does "yum update tzdata" update /etc/localtime or does this need to be done manually? [this is part of the hwclock problem, a guy from sage-au has given me a hint] Jobst -- Keyboard not found - please clean up desktop! | |0| | Jobst Schmalenbach, jobst(a)barrett.com.au, General Manager | | |0| Barrett Consulting Group P/L & The Meditation Room P/L |0|0|0| +61 3 9532 7677, POBox 277, Caulfield South, 3162, Australia

2 1

kernel bug ?
by My LinuxHAList 15 Nov '10

15 Nov '10

Hi, I was using kernel-2.6.18-164.15.1 with no known issues. Then, I updated to: Linux 2.6.18-194.17.1.el5 #1 SMP Wed Sep 29 12:50:31 EDT 2010 x86_64 x86_64 x86_64 GNU/Linux I'm aware that there are later updates that patch couple more security bugs. Here is an issue I run with 2.6.18-194.17.1 and am asking if anyone hits that kernel bug. Here are the symptoms: 1) kswapd1 running at 100%, there are not much paging 2) when i logged in, root can't kill -9 ANY processes 3) memory is used up, swap is probably only used up for couple hundred MBs at most (Swap space has couple Gig available) I saw in the logs: kernel: INFO: task sadc:23936 blocked for more than 120 seconds. kernel: "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. Annoyingly, I failed to reproduce the issues. I tried to reproduce it with the "stress" software package, using up CPU, memory, etc. But I failed to reproduce those. Reading later release of kernel did not mention this bug. If anyone can contribute to what is happening here, that would be great. Thanks

2 1

Confused about Java browser plugin for Firefox
by Nicolas Kovacs 15 Nov '10

15 Nov '10

Hi, I'd like to install a working Java Plugin for Firefox, and I wonder how to go about it. There's some documentation available online, but one quickly gets the feeling it's quite a mess. I also admit being a contributor to the mess, since the Linux book I published in June 2009 gives a detailed - and now obsolete - description about installing JRE : http://www.microlinux.fr/linux_aux_petits_oignons/chapitre_8/01.php#java Any advice on how to go about that without jumping through burning loops? A pointer to some concise documentation or, even better, a short and working step-by-step HOWTO? Cheers, Niki Kovacs -- http://www.kikinovak.net

7 9

External HD on CentOS 5.5
by Dick Roth 14 Nov '10

14 Nov '10

I'm looking into backing up my CentOS 5.5 system using an external USB 2.0 hard drive. Anyone with experience with Toshiba Canvio USB 750 GB unit? I'm backing up to DVDs now and would like to streamline the process. Any advice is welcome with thanks. Dick -- Yes indeed...the Hokey Pokey *is* what its all about!

2 2

RAID Resynch...??
by Tom Bishop 14 Nov '10

14 Nov '10

So still coming up to speed with mdadm and I notice this morning one of my servers acting sluggish...so when I looked at the mdadm raid device I see this: mdadm --detail /dev/md0 /dev/md0: Version : 0.90 Creation Time : Mon Sep 27 22:47:44 2010 Raid Level : raid10 Array Size : 976759808 (931.51 GiB 1000.20 GB) Used Dev Size : 976759808 (931.51 GiB 1000.20 GB) Raid Devices : 2 Total Devices : 2 Preferred Minor : 0 Persistence : Superblock is persistent Update Time : Sun Nov 14 11:33:51 2010 State : clean, resyncing Active Devices : 2 Working Devices : 2 Failed Devices : 0 Spare Devices : 0 Layout : far=2 Chunk Size : 512K Rebuild Status : 57% complete UUID : f045370a:5be687e9:73e57992:06ea59e5 Events : 0.8 Number Major Minor RaidDevice State 0 8 17 0 active sync /dev/sdb1 1 8 33 1 active sync /dev/sdc1 If done some googling but I am stumped as to what would have kicked this off, anyone have any insight that would be great...The system has been up for ~34 days and it kicked off at 4am local time...Here are some of my system details... Centos 5.5 - 2.6.18-194.11.4.el5 fstab: LABEL=/ / ext3 defaults 1 1 LABEL=/boot /boot ext3 defaults 1 2 /dev/md0 /home ext4 noatime,defaults 0 2 /dev/md0 /mnt/data-raid ext4 noatime,defaults 0 2 tmpfs /dev/shm tmpfs defaults 0 0 devpts /dev/pts devpts gid=5,mode=620 0 0 sysfs /sys sysfs defaults 0 0 proc /proc proc defaults 0 0 LABEL=SWAP-sda2 swap swap defaults 0 0 Thanks in advance....

2 3

Best practices for the maximal length of user names
by Mathieu Baudier 14 Nov '10

14 Nov '10

Hello, are there any best practices for the length of user names? I tend to limit them to 8 characters and to follow the pattern 'first letter of the first name'+'first 7 letters of the last name' (e.g. mbaudier). But people are sometimes frustrated with having their last name truncated and I wonder if limiting the user name to 8 characters is not a kind of superstition coming from some old times... I would be very interested to hear opinions / experience about this. (I'm using CentOS 5.5) Thanks in advance! Mathieu

4 3

Addressing outgoing connections to a specific interface
by Dotan Cohen 14 Nov '10

14 Nov '10

On a CentOS 5.5 laptop (Dell Inspiron, dual boot with a Debian-based distro) I have a cable plugged into eth0 which is on a LAN with no internet connection. Additionally, I connect wirelessly on wlan0 to the internet. Both connections have router on the 192.168.0.1 address. Although I need to stay connected to the wireless router, can I still access the address 192.168.0.1 on the wired interface? Some googling led me to the keyword "loopback" but I am at a loss as how to configure it, or if this is even the right idea. If there is a specific page that I should be reading in the fine manual then please do RTFM me, as I myself failed to find the proper page. Thanks in advance. -- Dotan Cohen http://gibberish.co.il http://what-is-what.com

11 30

Oracle charging for InnoDB support in MySQL : what is going to change for us?
by robert mena 14 Nov '10

14 Nov '10

Hi, I've noticed that Oracle is charging for the MySQL version that supports InnoDB (http://www.mysql.com/products/) I could not find any other link with direct confirmation of what is going to change for the existing servers/versions and I was wondering if anybody has a more detailed info. For example, is RHEL (and CentOS) going to drop support for it? Are we going to see any further updates for security issues?

5 4

make fails with "recompile with -fPIC"
by aurfalien＠gmail.com 14 Nov '10

14 Nov '10

Hi all, I am trying to get monodevelop installed on Centos 5.5 In order to do so, I must install several packages, all of which give me the following error when doing a make; /usr/bin/ld: .libs/image.o: relocation R_X86_64_PC32 against `gdip_getcodecinfo_gif' can not be used when making a shared object; recompile with -fPIC /usr/bin/ld: final link failed: Bad value How and where do I add this value of -fPIC? Better yet, has any one done this before? Keep in mind this is diff then mono-devel. Thanks in advance, - aurf

2 2

Flash plugin not working
by Niki Kovacs 13 Nov '10

13 Nov '10

Hi, I have a fresh install of CentOS 5.5, with a minimal GNOME desktop. I configured RPMForge as third party repo. I updated everything first, then installed flash-plugin. (And yes, I restarted Firefox... :oD). All I see when I try to see some things Flash on the Internet, like Youtube or the likes, I get... nothing. The space remains white. Sometimes a black square will appear, sometimes it will redisappear again. $ rpm -q flash-plugin flash-plugin-10.1.82.76-0.1.el5.rf I also tried to give the more recent version from Adobe a shot, with the same result. I took a look in /usr/lib/mozilla/plugins, where everything seems normal. $ ls -l /usr/lib/mozilla/plugins/ total 0 lrwxrwxrwx 1 root root 39 nov 8 22:22 libflashplayer.so -> /usr/lib/flash-plugin/libflashplayer.so Which leaves me clueless. Any suggestions ? Cheers, Niki

7 15

httpd RPM newer than 2.0.63 avail for CentOS 4.x?
by Philip Amadeo Saeli 12 Nov '10

12 Nov '10

I'm maintaining an internet-facing web server which is now running httpd 2.0.63 (httpd-2.0.63-2.el4s1.centos.2) which is now neary 2.5 years old(!?!). I need to move to either 2.0.64 or 2.2.12 or later. However, I've been unable to find available RPMs for such releases for CentOS 4.x. I have to believe that others have these needs also. In light of this, how do others keep up with security upgrades for the httpd? I'm rather new to this aspect of things, so am still in the process of sorting things out in this regard. Any help would be appreciated. Thanks! --Phil -- Philip Amadeo Saeli CentOS, RHEL, openSUSE psaeli(a)zorodyne.com

5 7

Redhat Virtualization
by Nataraj 12 Nov '10

12 Nov '10

What are the differences between the Redhat virtualization product and the kvm virtualization that is currently included with Redhat/CentOS? If I don't want to run the standalone hypervisor or the windows based management interface (Is this worth considering?), are there any advantages to the virtualization product over running kvm on CentOS? It is my understanding that the windows management will at some point run under linux. Other than the current kvm, will the Redhat virtualization product be part of CentOS in any way? Thank You, Nataraj

2 1

conntrack-tools
by Steve Clark 12 Nov '10

12 Nov '10

Hi, I have been looking for a conntrack-tools rpm for Centos 5.5. Does anyone know of one? Thanks, -- Stephen Clark *NetWolves* Sr. Software Engineer III Phone: 813-579-3200 Fax: 813-882-0209 Email: steve.clark(a)netwolves.com http://www.netwolves.com

1 0

Gnome-Screensaver Problem
by Chi-Duen Poon 12 Nov '10

12 Nov '10

Around last weekend, the updated package, gnome-screensaver-2.16.1-8.el5_5.1, came in replacing gnome-screensaver-2.16.1-8.el5. Once our CentOS 5.5 machines are running the new gnome-screensaver, we start seeing problem in unlocking the Gnome screensaver with Kerberos authentication. Unlocking the screensaver with local password works fine. After we back out from the new version, Kerberos authentication to unlock the screensaver works fine. We have submitted a bug report on this finding. Do you have any workaround besides backing out from the new version? CD Poon.

1 0

RHEL 6 Officially Released
by John Kennedy 12 Nov '10

12 Nov '10

When will CentOS 6 be released??? (Just kidding...Just wanted to let you all know that RHEL6 has been released...And yes, I know that most of you all know...) John -- John Kennedy

29 52

CentOS-announce Digest, Vol 69, Issue 6
by centos-announce-request＠centos.org 12 Nov '10

12 Nov '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2010:0880 CentOS 5 x86_64 mod_authz_ldap Update (Karanbir Singh) 2. CEBA-2010:0880 CentOS 5 i386 mod_authz_ldap Update (Karanbir Singh) 3. CEEA-2010:0876 CentOS 5 i386 cman Update (Karanbir Singh) 4. CEEA-2010:0876 CentOS 5 x86_64 cman Update (Karanbir Singh) 5. CEBA-2010:0871 CentOS 5 i386 python Update (Karanbir Singh) 6. CEBA-2010:0871 CentOS 5 x86_64 python Update (Karanbir Singh) 7. CEBA-2010:0869 CentOS 5 i386 tog-pegasus Update (Karanbir Singh) 8. CEBA-2010:0869 CentOS 5 x86_64 tog-pegasus Update (Karanbir Singh) 9. CEBA-2010:0868 CentOS 5 i386 e2fsprogs Update (Karanbir Singh) 10. CEBA-2010:0868 CentOS 5 x86_64 e2fsprogs Update (Karanbir Singh) 11. CEBA-2010:0833 CentOS 5 i386 autofs Update (Karanbir Singh) 12. CEBA-2010:0833 CentOS 5 x86_64 autofs Update (Karanbir Singh) 13. CEBA-2010:0832 CentOS 5 i386 selinux-policy Update (Karanbir Singh) 14. CEBA-2010:0832 CentOS 5 x86_64 selinux-policy Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 12 Nov 2010 00:20:27 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0880 CentOS 5 x86_64 mod_authz_ldap Update To: centos-announce(a)centos.org Message-ID: <20101112002027.GA12369(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0880 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0880.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 42db2383be48a1641382365621dfe685 mod_authz_ldap-0.26-9.el5_5.1.x86_64.rpm Source: cb5cc9b72f29b3271394d3af0b83faf3 mod_authz_ldap-0.26-9.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Fri, 12 Nov 2010 00:20:26 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0880 CentOS 5 i386 mod_authz_ldap Update To: centos-announce(a)centos.org Message-ID: <20101112002026.GA12354(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0880 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0880.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 9e4f41b6e56160b97aafeb0c93205fd7 mod_authz_ldap-0.26-9.el5_5.1.i386.rpm Source: cb5cc9b72f29b3271394d3af0b83faf3 mod_authz_ldap-0.26-9.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Fri, 12 Nov 2010 00:21:11 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEEA-2010:0876 CentOS 5 i386 cman Update To: centos-announce(a)centos.org Message-ID: <20101112002111.GA12465(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2010:0876 Upstream details at : https://rhn.redhat.com/errata/RHEA-2010-0876.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: edfea91a42ac32d995caf68d14d89f01 cman-2.0.115-34.el5_5.4.i386.rpm 22103177e6e2400f241f6696cae1a978 cman-devel-2.0.115-34.el5_5.4.i386.rpm Source: 491bb3d3c129bc38d95ca3872cc50982 cman-2.0.115-34.el5_5.4.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Fri, 12 Nov 2010 00:21:11 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEEA-2010:0876 CentOS 5 x86_64 cman Update To: centos-announce(a)centos.org Message-ID: <20101112002111.GA12478(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2010:0876 Upstream details at : https://rhn.redhat.com/errata/RHEA-2010-0876.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 75910fc915609dc8b0c939f5adea8c7e cman-2.0.115-34.el5_5.4.x86_64.rpm 5b072200d3e266b3e6ce443856bbb852 cman-devel-2.0.115-34.el5_5.4.i386.rpm ee13bdfc2aa8b0e5922f098b11458275 cman-devel-2.0.115-34.el5_5.4.x86_64.rpm Source: 491bb3d3c129bc38d95ca3872cc50982 cman-2.0.115-34.el5_5.4.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Fri, 12 Nov 2010 00:22:18 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0871 CentOS 5 i386 python Update To: centos-announce(a)centos.org Message-ID: <20101112002218.GA12578(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0871 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0871.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: c76cdba5e527547b9923fd182cafd581 python-2.4.3-27.el5_5.3.i386.rpm e82e2502ea0acab992fe2a8d66f09b2a python-devel-2.4.3-27.el5_5.3.i386.rpm be20281fe1c00c5ce2655ba685c97033 python-tools-2.4.3-27.el5_5.3.i386.rpm fed33376ca58d5e3317b516f69fa8db9 tkinter-2.4.3-27.el5_5.3.i386.rpm Source: 4066452a673e3475e9ef95efdab92bb7 python-2.4.3-27.el5_5.3.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Fri, 12 Nov 2010 00:22:18 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0871 CentOS 5 x86_64 python Update To: centos-announce(a)centos.org Message-ID: <20101112002218.GA12592(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0871 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0871.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 0661b58d35cff838823e6c6ef57ef379 python-2.4.3-27.el5_5.3.x86_64.rpm 5dfa3aa050b8c52b8037cde4d8d12ff5 python-devel-2.4.3-27.el5_5.3.i386.rpm f2997eedf0baebe346c42bd3e665e513 python-devel-2.4.3-27.el5_5.3.x86_64.rpm e4b0539a0b50ac649346faacc26b3610 python-tools-2.4.3-27.el5_5.3.x86_64.rpm 008f6998fd60c807ec344a4bbd580756 tkinter-2.4.3-27.el5_5.3.x86_64.rpm Source: 4066452a673e3475e9ef95efdab92bb7 python-2.4.3-27.el5_5.3.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 7 Date: Fri, 12 Nov 2010 00:23:29 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0869 CentOS 5 i386 tog-pegasus Update To: centos-announce(a)centos.org Message-ID: <20101112002329.GA12689(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0869 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0869.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: b25f676511ec584eb376ac64203efdc0 tog-pegasus-2.9.1-2.el5_5.1.i386.rpm bfdffe1a264c55ccb21289983e7bcc0b tog-pegasus-devel-2.9.1-2.el5_5.1.i386.rpm Source: f394e0a573c3e62dba709f85db73eea2 tog-pegasus-2.9.1-2.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 8 Date: Fri, 12 Nov 2010 00:23:30 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0869 CentOS 5 x86_64 tog-pegasus Update To: centos-announce(a)centos.org Message-ID: <20101112002330.GA12702(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0869 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0869.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 672f0f4df18d9fc5f98d5f19c482b04f tog-pegasus-2.9.1-2.el5_5.1.i386.rpm 8c2de74d394d70b99c794650640c8774 tog-pegasus-2.9.1-2.el5_5.1.x86_64.rpm 5d1a749de278436f49be2deec8f4a4e4 tog-pegasus-devel-2.9.1-2.el5_5.1.i386.rpm 767420cfdd1ff4e3954555db5e2014ec tog-pegasus-devel-2.9.1-2.el5_5.1.x86_64.rpm Source: f394e0a573c3e62dba709f85db73eea2 tog-pegasus-2.9.1-2.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 9 Date: Fri, 12 Nov 2010 00:24:13 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0868 CentOS 5 i386 e2fsprogs Update To: centos-announce(a)centos.org Message-ID: <20101112002413.GA12807(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0868 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0868.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: a477a70b06fd236162771f78187e3dac e2fsprogs-1.39-23.el5_5.1.i386.rpm dfce9fe20220afca74b5c278668bc07a e2fsprogs-devel-1.39-23.el5_5.1.i386.rpm 66857f3ea704d06c059fe6b98f46d81c e2fsprogs-libs-1.39-23.el5_5.1.i386.rpm a951709c523462d965563bd88dbfeb5d uuidd-1.39-23.el5_5.1.i386.rpm Source: a711a0cb837672eb9cb784b35b5591ba e2fsprogs-1.39-23.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 10 Date: Fri, 12 Nov 2010 00:24:13 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0868 CentOS 5 x86_64 e2fsprogs Update To: centos-announce(a)centos.org Message-ID: <20101112002413.GA12820(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0868 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0868.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 24646daefeadb4d062694da4309dc797 e2fsprogs-1.39-23.el5_5.1.x86_64.rpm cd50d249a778c3098b2d44edebf2d40b e2fsprogs-devel-1.39-23.el5_5.1.i386.rpm 6e36db7a97015bba23e2034e9ed6ce4e e2fsprogs-devel-1.39-23.el5_5.1.x86_64.rpm c999210eae1aa0d536b29c7378607d6d e2fsprogs-libs-1.39-23.el5_5.1.i386.rpm 8473c5004b92c32a8276b9c34cde4db2 e2fsprogs-libs-1.39-23.el5_5.1.x86_64.rpm a0173fc59230b128fa587e2f9981311c uuidd-1.39-23.el5_5.1.x86_64.rpm Source: a711a0cb837672eb9cb784b35b5591ba e2fsprogs-1.39-23.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 11 Date: Fri, 12 Nov 2010 00:24:45 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0833 CentOS 5 i386 autofs Update To: centos-announce(a)centos.org Message-ID: <20101112002445.GA12893(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0833 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0833.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: ea962af72e3e055c1526ad115c9dfabd autofs-5.0.1-0.rc2.143.el5_5.6.i386.rpm Source: 8955138b030c20366aedd2e7586f39c3 autofs-5.0.1-0.rc2.143.el5_5.6.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 12 Date: Fri, 12 Nov 2010 00:24:46 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0833 CentOS 5 x86_64 autofs Update To: centos-announce(a)centos.org Message-ID: <20101112002446.GA12906(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0833 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0833.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: fc0615a882733719117342c371633e5a autofs-5.0.1-0.rc2.143.el5_5.6.x86_64.rpm Source: 8955138b030c20366aedd2e7586f39c3 autofs-5.0.1-0.rc2.143.el5_5.6.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 13 Date: Fri, 12 Nov 2010 00:25:52 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0832 CentOS 5 i386 selinux-policy Update To: centos-announce(a)centos.org Message-ID: <20101112002552.GA13028(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0832 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0832.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 7edd19f7ac2572c54e4bd16f53d2e72b selinux-policy-2.4.6-279.el5_5.2.noarch.rpm 9e7ae71e9e2ba91314e7c164ffd76ac8 selinux-policy-devel-2.4.6-279.el5_5.2.noarch.rpm 8f0b9668eb7733518c874831c76d46c2 selinux-policy-minimum-2.4.6-279.el5_5.2.noarch.rpm 2a263b4ac37f2929ecf6ecfbebde6285 selinux-policy-mls-2.4.6-279.el5_5.2.noarch.rpm 4bd6bb1eefdd59fdef846b46472e3f90 selinux-policy-strict-2.4.6-279.el5_5.2.noarch.rpm 0dcd7a7640acb2668647676eb037a829 selinux-policy-targeted-2.4.6-279.el5_5.2.noarch.rpm Source: ff6fedf3fd6e9ec4ebc96663621edfc2 selinux-policy-2.4.6-279.el5_5.2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 14 Date: Fri, 12 Nov 2010 00:25:52 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0832 CentOS 5 x86_64 selinux-policy Update To: centos-announce(a)centos.org Message-ID: <20101112002552.GA13044(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0832 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0832.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 5b5df1a65007df30315a1f571547c38a selinux-policy-2.4.6-279.el5_5.2.noarch.rpm f0661bfb03b44cf3af2d460afe4c8579 selinux-policy-devel-2.4.6-279.el5_5.2.noarch.rpm 95269368ca64c0ae81ba349171c020ad selinux-policy-minimum-2.4.6-279.el5_5.2.noarch.rpm c78dfbecc342233abf9ac24a83675b1f selinux-policy-mls-2.4.6-279.el5_5.2.noarch.rpm 8a1b6714052029fca221b2d3052aee35 selinux-policy-strict-2.4.6-279.el5_5.2.noarch.rpm 63e56b68678484b38ddb82f716ba7401 selinux-policy-targeted-2.4.6-279.el5_5.2.noarch.rpm Source: ff6fedf3fd6e9ec4ebc96663621edfc2 selinux-policy-2.4.6-279.el5_5.2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 69, Issue 6 **********************************************

1 0

Flash problems in newest upgrade?
by Ron Blizzard 12 Nov '10

12 Nov '10

Hi, I just upgraded to the newest kernel and Flash. Hulu now "grays out" when I try to go to full screen. I tried uninstalling and reinstalling the proprietary video drivers (no difference either way), so I'm guessing it has something to do with either the new Flash or the new kernel. Anyone else experiencing this problem? Thanks for any pointers. -- RonB -- Using CentOS 5.5

2 2

http form automation tools?
by Les Mikesell 11 Nov '10

11 Nov '10

I need to grab some data from a remote web server that offers a csv download but only after viewing a chart where you have to first navigate to a form and make some selections. Are there any good tools for automating this kind of access? (What I'm really after are bandwidth stats from some routers where I only have read access to a CA/ehealth system that monitors it). Previously the intermediate system was cacti where the link to the data download for a time interval can be computed directly. -- Les Mikesell lesmikesell(a)gmail.com

2 2

Adding SAMBA users in Centos 5.5
by Peter Crighton 11 Nov '10

11 Nov '10

I have SAMBA working on Centos 5.5 - I can see and access my "home" directory from a Windows machine. I have created a new folder to share, changed the owner and group to my username and chcon -t samba_share_t to allow SELinux to share the folder. I can see this folder from Windows but not access it's contents. I think that the key reason is that there is no user assigned to the new share that I have created in SAMBA. I don't seem to be able add users/passwords (at least they don't stay present! In the SAMBA section of Control Panel I have selected my username from the Unix users and added it to SAMBA users with the same password as the Windows machine (and as it happens the Centos machine). Click Apply and OK. When I re-load the SAMBA section of Control Panel my user has disappeared! This didn't happen when I setup a Centos 4.4 machine - all the users are still visible in Control Panel. Without the user available I can't assign it to my new share. Why is my added user disappearing and how can I solve it? (I presume that I can access my "home" share as it is automatically by the username from Windows).

2 3

quota broken for large NFS mount
by Dave 11 Nov '10

11 Nov '10

Should I report this as a bug somewhere? Or is it just a problem with the old fedora box, probably fixed long ago and not relevant to the centos list? On the server side, theme4, a very old fedora box, exports t4d5 via NFS. t4d5 is big, has lots of space, and the user tobiasf has plenty of quota: [root@theme4 ~]# quota -vls tobiasf|grep sdf /dev/sdf1 1312G 4578G 4769G 119k 0 0 [root@theme4 ~]# rpm -q quota nfs-utils;df -lh|grep sdf;uname -a quota-3.12-6 nfs-utils-1.0.7-13.FC4 /dev/sdf1 13T 11T 2.2T 84% /export/t4d5 Linux theme4.soest.hawaii.edu 2.6.17-1.2142_FC4smp #1 SMP Tue Jul 11 22:59:20 EDT 2006 x86_64 x86_64 x86_64 GNU/Linux On the client side, running centos, mounting the NFS partition with automount, quota looks exhausted: [tobiasf@lee1 ~]$ quota -vs Disk quotas for user tobiasf (uid 2797): Filesystem blocks quota limit grace files quota limit grace theme4:/export/t4d5 1312G* 482G 673G 119k 0 0 [tobiasf@lee1 ~]$ uname -a;cat /etc/redhat-release ;df -h|grep t4d5 Linux lee1 2.6.18-194.8.1.el5 #1 SMP Thu Jul 1 19:04:48 EDT 2010 x86_64 x86_64 x86_64 GNU/Linux CentOS release 5.5 (Final) theme4:/export/t4d5 13T 11T 2.2T 84% /home/t4d5 [tobiasf@lee1 ~]$ rpm -q nfs-utils quota nfs-utils-1.0.9-44.el5 quota-3.13-1.2.5.el5 Thanks, Dave

1 2

future modprobe.conf
by Jerry Geis 11 Nov '10

11 Nov '10

centos 5 had modprobe.conf entries for eth0 and if present eth1. something like: alias eth0 forcedeth alias eth1 e1000e For the new centos 6 (I have the rhel 6 client installed on my laptop) the modprobe.conf file is gone. Which is fine. I understand files can be created in /etc/modprobe.d and server the same purpose. My question is I dont see (doing a grep) any eth0 alias's in the files in /etc/modprobe.d/* My reason is when I have a system with 2 ethernet cards I used to have to specify the order of loading. Like: install e1000e /sbin/modprobe forcedeth; /sbin/modprobe --ignore-install e1000e So I used to grep for eth0 and eth1 do get the module names from modprobe.conf. How do I get that information in RHEL 6 since it doesnt seem to be there. Thanks, (just trying to prepare) Jerry

5 4

gmp package installation on CentOS 5.2
by Nastou Panagiotis 11 Nov '10

11 Nov '10

Hello, Last year, I installed CentOS 5.2 on an HP Proliant Server. Along with other packages, the gmp and gmp-devel version 4.1.4 packages were installed. To the best of my knowledge these packages do not come from the gmp team. Recently, I built an rpm package for gmp 5.0.1 for CentOS 5.2. I tried to update the gmp package by command rpm -Uvh gmp-5.0.1-1.x86_64.rpm but the update failed because the libgmp.so.3, libgmpxx.so.3 and the libmp.so.3 are needed from gcc-gfortran, php, php-cli, guile and gmp-devel packages. What kind of dependency exists between these packages and gmp? Could I forced the update without affecting the operation of the above packages? Since It is better to compile gmp 5.0.1 with the more recent gnu c compiler, is it safe to update gcc, gcc-gfortran and gcc-c++ on CentOS 5.2 to the more recent version appeared for CentOS 5.5? Regards, Panagiotis Nastou, Dpt of Mathematics University of Aegean Karlovasi, Samos, Greece

2 1

FW: Permissions issue
by Jason Pyeron 11 Nov '10

11 Nov '10

I am at loss on this mysterious file permission issue. I cannot move the file out of the directory, but I can rename it. I cannot read the file. It is not open by any processes, the filesystem is in read write mode. I am logged in as root. -Jason [root@localhost /]# tar cvzf ~/named.201011111228.tgz --one-file-system /etc/named.conf /var/named/ tar: Removing leading `/' from member names /etc/named.conf /var/named/ /var/named/data/ /var/named/lost+found/ /var/named/slaves/ tar: /var/named/backup.tgz: Cannot open: Permission denied /var/named/chroot/ /var/named/chroot/etc/ /var/named/chroot/etc/named.caching-nameserver.conf <snip/> tar: Error exit delayed from previous errors [root@localhost /]# dir /var/named/backup.tgz -rw------- 1 root root 6651 Nov 11 11:32 /var/named/backup.tgz [root@localhost /]# stat /var/named/backup.tgz File: `/var/named/backup.tgz' Size: 6651 Blocks: 24 IO Block: 4096 regular file Device: fd04h/64772d Inode: 98312 Links: 1 Access: (0600/-rw-------) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2010-11-11 12:28:33.000000000 -0500 Modify: 2010-11-11 11:32:03.000000000 -0500 Change: 2010-11-11 11:32:03.000000000 -0500 [root@localhost /]# mv /var/named/backup.tgz ~ mv: cannot open `/var/named/backup.tgz' for reading: Permission denied [root@localhost /]# chmod 777 /var/named/backup.tgz [root@localhost /]# mv /var/named/backup.tgz ~ mv: cannot open `/var/named/backup.tgz' for reading: Permission denied [root@localhost /]# getfacl /var/named/backup.tgz getfacl: Removing leading '/' from absolute path names # file: var/named/backup.tgz # owner: root # group: root user::rwx group::rwx other::rwx [root@localhost /]# dir /var/named/backup.tgz -rwxrwxrwx 1 root root 6651 Nov 11 11:32 /var/named/backup.tgz [root@localhost /]# setfacl -b /var/named/backup.tgz [root@localhost /]# dir /var/named/backup.tgz -rwxrwxrwx 1 root root 6651 Nov 11 11:32 /var/named/backup.tgz [root@localhost /]# getfacl /var/named/backup.tgz getfacl: Removing leading '/' from absolute path names # file: var/named/backup.tgz # owner: root # group: root user::rwx group::rwx other::rwx [root@localhost /]# mv /var/named/backup.tgz ~ mv: cannot open `/var/named/backup.tgz' for reading: Permission denied [root@localhost /]# mount <redact> No readonly mounts </redact> [root@localhost /]# df -h <redact> Each filessytem has plenty of free space </redact> [root@localhost /]# dir /var/named/ total 72 drwxr-x--- 6 root named 4096 Nov 11 11:32 . drwxr-xr-x 24 root root 4096 Apr 1 2010 .. -rwxrwxrwx 1 root root 6651 Nov 11 11:32 backup.tgz drwxr-x--- 6 root named 4096 Nov 11 11:48 chroot drwxrwx--- 2 named named 4096 Jan 18 2010 data drwx------ 2 root named 16384 Feb 4 2009 lost+found drwxrwx--- 2 named named 4096 Jan 18 2010 slaves [root@localhost named]# /etc/init.d/named stop Stopping named: . [ OK ] [root@localhost named]# mv backup.tgz foo [root@localhost named]# mv foo backup.tgz [root@localhost named]# mv backup.tgz ~ mv: cannot open `backup.tgz' for reading: Permission denied [root@localhost named]# lsof | grep backup.tgz [root@localhost named]# -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Principal Consultant 10 West 24th Street #100 - - +1 (443) 269-1555 x333 Baltimore, Maryland 21218 - - - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- This message is copyright PD Inc, subject to license 20080407P00.

3 5

dictonary attacks
by PA 11 Nov '10

11 Nov '10

Hi hoping someone can help me a little with this one. I have 2 mail servers, the incoming mail server runs dovecot and the outgoing mail server runs postfix with sasl. Lately I noticed a lot of spammers are running dictionary attacks on my incoming server and then using that user/password for sasl on the outgoing server. The weird thing is I never see on the logs the guessed username/password. I always see the ones they can't guess. For example: Looking at the logs I see the following dictionary attack from 94.242.206.37 Nov 10 03:04:38 pop dovecot: pop3-login: Disconnected: rip=94.242.206.37, lip=209.213.66.10 Nov 10 03:04:38 pop dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=209.213.66.10 rip=94.242.206.37 resp=<hidden> Nov 10 03:04:38 pop dovecot: auth(default): shadow(aarhus,94.242.206.37): lookup Nov 10 03:04:38 pop dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=209.213.66.10 rip=94.242.206.37 resp=<hidden> Nov 10 03:04:38 pop dovecot: auth(default): shadow(abaft,94.242.206.37): lookup Nov 10 03:04:38 pop dovecot: auth(default): shadow(abaft,94.242.206.37): unknown user Nov 10 03:04:38 pop dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=209.213.66.10 rip=94.242.206.37 resp=<hidden> Nov 10 03:04:38 pop dovecot: auth(default): shadow(aarhus,94.242.206.37): unknown user Nov 10 03:04:38 pop dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=209.213.66.10 rip=94.242.206.37 resp=<hidden> Nov 10 03:04:38 pop dovecot: auth(default): shadow(aaron,94.242.206.37): lookup Nov 10 03:04:38 pop dovecot: auth(default): shadow(aaron,94.242.206.37): unknown user Nov 10 03:04:38 pop dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=209.213.66.10 rip=94.242.206.37 resp=<hidden> Nov 10 03:04:38 pop dovecot: auth(default): shadow(ababa,94.242.206.37): lookup ..... And so on.. Then that ip gets banned by fail2ban [root@pop ~]# grep 94.242.206.37 /var/log/fail2ban.log 2010-11-10 03:04:42,416 fail2ban.actions: WARNING [dovecot] Ban 94.242.206.37 However on my outgoing mail server that ip is already sending out all sorts of spam with the sasl username of Paramus. This username Paramus never shows up on the dovecot dictionary attack log, as a matter of fact the user Paramus is nowhere to be found on the dovecot log at all and I have logs going back months. /var/log/maillog:Nov 10 02:46:16 mrelay3 postfix/smtpd[27776]: 3B64928015: client=unknown[94.242.206.37], sasl_method=LOGIN, sasl_username=paramus /var/log/maillog:Nov 10 02:47:54 mrelay3 postfix/smtpd[27776]: 247AB28016: client=unknown[94.242.206.37], sasl_method=LOGIN, sasl_username=paramus /var/log/maillog:Nov 10 02:48:00 mrelay3 postfix/smtpd[27785]: 87DE128016: client=unknown[94.242.206.37], sasl_method=LOGIN, sasl_username=paramus /var/log/maillog:Nov 10 02:56:00 mrelay3 postfix/smtpd[27792]: 9728628015: client=unknown[94.242.206.37], sasl_method=LOGIN, sasl_username=paramus /var/log/maillog:Nov 10 03:05:38 mrelay3 postfix/smtpd[27808]: D529F28015: client=unknown[94.242.206.37], sasl_method=LOGIN, sasl_username=paramus /var/log/maillog:Nov 10 03:06:00 mrelay3 postfix/smtpd[27808]: DDF7C2801B: client=unknown[94.242.206.37], sasl_method=LOGIN, sasl_username=Paramus Does anyone have any idea what could of happened here. I mean if the user/passwd was already harvested by 94.242.206.37 why would they bother to start another dict. attack. I'm just not sure how they guess the username/password as its not on any logs that goes back months and I don't have a dovecot fail record for that user on the logs. This is the case all the time for me and it happens with other ips. Any help would be appreciated. paul

2 2

Fwd: ntp help
by tony.chamberlain＠lemko.com 11 Nov '10

11 Nov '10

Hello I am trying to sync via NTP locally (since I have no Internet access). None of the NTP stuff I read on the net seems to work right. I mean it works fine setting up a client going to something like 0.pool.ntp.org but when I want to make my LInux box a server, and I do an ntpdate to it from another machine, it says no suitable server found. I have tried every possible combination of restrict, broadcast, multicast. Followed directions in the examples but nothing works. Also "iptables-save" shows no iptables stuff set at all, so there is no firewall blocking it. Maybe I could ask my question and someone could tell me how to configure? There are 4 machines: 1. 10.5.1.50 2. 10.5.0.20 / 192.168.1.100 3. 10.6.1.50 4. 10.6.0.20 / 192.168.1.101 The 10.5s cannot reach the 10.6s (except roundaboutly through the 192 network). The two 192 machines are connected directly to each other. You can get back and forth between them I want to set it up so that, and it doesn't matter which way), one of the 191.168.1.X machines NTP syncs to the other, and then the 10.5.1.50 syncs to 10.5.0.20 and the 10.6.1.20 syncs to 10.6.0.20. How do I set the ntp.conf files? Remember there is no external internet on any of the machines, and the 10.5 machines cannot reach the 10.6 machines and v.v. (except the 10.X.0.20 machines can reach each other through the 192 network). Also I am not allowed to use the 192 machines as routers for the 10.X.1.50 machines. Thanks

3 2

RHEL Released
by William Warren 11 Nov '10

11 Nov '10

It's on their website right now.

2 1

flash-plugin crashes on full screen
by Rob Kampen 11 Nov '10

11 Nov '10

Hi List. doing my weekly updates with yum last night installed kernel.x86_64 2.6.18-194.17.4.el5.centos.plus and flash-plugin.i386 10.1.102.64-release now today as I go to watch a movie from hulu.com it crashes the flash-plugin whenever I try to go full screen. Anyone else notice this behaviour? I guess I'll try to downgrade flash and see if that fixes the problem. TIA

4 7

kerboros and nfs v4
by m.roth＠5-cent.us 10 Nov '10

10 Nov '10

My mamnager's trying to get nfs v4 working with kerboros. One major issue is that we do *not* have access to the server, or ktadmin - that's the network folks, and they have AD on the other side. The result is that he can't create (if I have this right) objects. I found <http://sadiquepp.blogspot.com/2009/02/how-to-configure-nfsv4-with-kerberos-…>, and he says he's done everything and more. Any pointers, suggestions, etc? mark

2 1

Need advice trying to load ethernet firmware for kickstart
by Spiro Harvey 10 Nov '10

10 Nov '10

I've got a memory stick that I use to install systems. It's basically just has a simple isolinux setup on it that calls up the kickstart files from an http server and pulls down the distro via our online repo. However, I'm trying to get a standard automated install like this on an IBM box which has a Broadcom NetXtreme 2 NIC that requires firmware to be there on bootup. I've got the file, and I've added it into the directory that I think it should be in (/lib/firmware/bnx2) on the initrd.img. However, when the system boots, it identifies the NICs on one of the console screens, but borks and won't boot properly. On console 1: GRUB boots, I get menu, choose option. Kernel loads initrd.img loads anaconda starts loads usb-storage module borks with: """ loader received SIGSEGV! Backtrace [0xf00bar] ... etc install exited normally [1/1] """ sends termination signals, unmounts everything, and halts ("You may safely reboot") On console screen 3: last few items are loading bnx2 module, insert module, remove usb-storge from modprobe.conf, and finally "getting kickstart file" On screen 4: detects storge devices and BNX2 NICs It seems to be crapping out when it tries to do the network access, but I've got nothing more I can trace the problem with. There's no shell yet. So I can't figure out if I've put the firmware in the wrong place, given it the wrong permissions (dirs are 755 and .fw file is 644) but whether that even matters because the source files are on a FAT16 partition, I don't know. It could just not be loading it, or the file could be corrupt. So how do I go about debugging this? Or am I doing it wrong? Any advice or pointers greatly appreciated. Thanks. -- Spiro Harvey Knossos Networks Ltd (04) 460-2531 : (021) 295-1923 www.knossos.net.nz

1 0

Re: [CentOS] flash-plugin crashes on full screen
by brett mm 10 Nov '10

10 Nov '10

>> now today as I go to watch a movie from hulu.com it crashes the >> flash-plugin whenever I try to go full screen. On Fedora 13, some versions of Flash crashed when fullscreen button was clicked, if the user also had nvidia drivers installed. The workaround was to right click on the flash video content (before switching to fullscreen), unticking "enable hardware acceleration" then clicking fullscreen. Might be worth a try. Brett.

3 2

Re: [CentOS] CentOS Digest, Vol 70, Issue 10
by Frans Rosslee 10 Nov '10

10 Nov '10

I listened to your email using DriveCarefully and will respond as soon as I can. Download DriveCarefully for free at www.drivecarefully.com Sent via my BlackBerry from Vodacom - let your email find you!

3 2

CentOS-announce Digest, Vol 69, Issue 5
by centos-announce-request＠centos.org 10 Nov '10

10 Nov '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2010:0839 Moderate CentOS 5 i386 kernel Update (Karanbir Singh) 2. CESA-2010:0839 Moderate CentOS 5 x86_64 kernel Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Tue, 9 Nov 2010 22:40:43 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2010:0839 Moderate CentOS 5 i386 kernel Update To: centos-announce(a)centos.org Message-ID: <20101109224043.GA10138(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2010:0839 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2010-0839.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: d121c43f4c192a0d57f3a914ff9d5e62 kernel-2.6.18-194.26.1.el5.i686.rpm df72e94d0c64ebc4719fbe2321c3aa17 kernel-debug-2.6.18-194.26.1.el5.i686.rpm e8a473a5489412c52bc234c5592a5846 kernel-debug-devel-2.6.18-194.26.1.el5.i686.rpm b1bc156cbc685de1d5987ab0e68ec1ed kernel-devel-2.6.18-194.26.1.el5.i686.rpm 98854bc0cc91c508eb1886b54baf8101 kernel-doc-2.6.18-194.26.1.el5.noarch.rpm 6e9e8c55cb7ca9721342937a42a12bec kernel-headers-2.6.18-194.26.1.el5.i386.rpm 1ef86e848ec5804fdbfc1e8cacfc1753 kernel-PAE-2.6.18-194.26.1.el5.i686.rpm 3f17d764da86ce8ff192d6bfde59a862 kernel-PAE-devel-2.6.18-194.26.1.el5.i686.rpm f1a492c80a81ce80a3a1d190a7299679 kernel-xen-2.6.18-194.26.1.el5.i686.rpm fd2dd0907c7730bda802152ff460126b kernel-xen-devel-2.6.18-194.26.1.el5.i686.rpm Source: d3b4f0593f5f8c2ab2f436549b7e6347 kernel-2.6.18-194.26.1.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 9 Nov 2010 22:40:44 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2010:0839 Moderate CentOS 5 x86_64 kernel Update To: centos-announce(a)centos.org Message-ID: <20101109224044.GA10154(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2010:0839 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2010-0839.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 960beaa2770d2d0607ff426fbe936f82 kernel-2.6.18-194.26.1.el5.x86_64.rpm 00e18cf5f435e198d83c419e3d8c7d53 kernel-debug-2.6.18-194.26.1.el5.x86_64.rpm ba1cd10ff374a4beaec8de1c6090e3b0 kernel-debug-devel-2.6.18-194.26.1.el5.x86_64.rpm 18d005a14e65e7b7779698e89a30ff42 kernel-devel-2.6.18-194.26.1.el5.x86_64.rpm c7a10fd5410f4997f78371757681bc43 kernel-doc-2.6.18-194.26.1.el5.noarch.rpm 2fd1f1e9466c96372d0bc6bff59ebd8e kernel-headers-2.6.18-194.26.1.el5.x86_64.rpm 21675572616e9cc3d3c8cdebc9c03e60 kernel-xen-2.6.18-194.26.1.el5.x86_64.rpm 3a98cb4aed00e182ff8986c8ce6d3b5f kernel-xen-devel-2.6.18-194.26.1.el5.x86_64.rpm Source: d3b4f0593f5f8c2ab2f436549b7e6347 kernel-2.6.18-194.26.1.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 69, Issue 5 **********************************************

1 0

Re-export an NFS mount from another machine for roaming profiles
by Nicolas Kovacs 10 Nov '10

10 Nov '10

Hi, In my office I have a server running CentOS 5.5. I have Apache+PHP+MySQL running on that server, and I'm exporting /var/www/html, so I can mount it on my main desktop with NFS. Server : grossebertha Desktop : babasse [root@babasse:~] # mount /dev/sda3 on / type ext4 (rw) proc on /proc type proc (rw) sysfs on /sys type sysfs (rw) devpts on /dev/pts type devpts (rw,gid=5,mode=620) tmpfs on /dev/shm type tmpfs (rw) /dev/sda1 on /boot type ext2 (rw) /dev/sdb1 on /Disque2 type ext4 (rw) none on /proc/sys/fs/binfmt_misc type binfmt_misc (rw) sunrpc on /var/lib/nfs/rpc_pipefs type rpc_pipefs (rw) grossebertha:/var/www/html on /home/kikinovak/Sites type nfs (rw,rsize=8192,wsize=8192,timeo=14,intr,addr=192.168.1.252) Now I'm thinking about configuring a few roaming profiles here with NIS/NFS, using 'babasse' as my main machine. In that case, I would export babasse's full /home to the local network, and then configure authentication with NIS. I wonder if it can be a problem when one of the directories, in that case /home/kikinovak/Sites, is already an NFS mount. I can't really figure it out, but I guess I vaguely fear some situation similar to the one displayes in "Being John Malkovich", where John Malkovich enters the secret trapdoor to his own thoughts. Thought I'd better ask before doing something silly. Cheers, Niki -- http://www.kikinovak.net

3 2

RHEL 6 potential release date???
by Tom Bishop 10 Nov '10

10 Nov '10

Benn playing with the beta's and have looked around for a potential release date...Does anyone know what the likely date is??? Thanks....

11 16

Network card not working after update to 2.6.18-194.17.4.el5
by Mathieu Baudier 10 Nov '10

10 Nov '10

Hello, the network card of my workstation stopped working after I updated the kernel to 2.6.18-194.17.4.el5 . I don't see any specific error messages when booting, and the related interface is shown as up by ifconfig with its (static) IP address properly set. But I cannot reach any other computer or router on the LAN (whereas other boxes work fine). Where the network cable is plugged, an orange light stays on and does not blink. Booting with 2.6.18-194.17.1.el5 instead solves the issue. The network card is: Ethernet controller: Realtek Semiconductor Co., Ltd. RTL-8110SC/8169SC Gigabit Ethernet (rev 10) I just wanted to share this, and see if anybody else experienced such issues. It makes me feel uncomfortable with updating some remote servers, because it would really be a pain to fix if their network cards stopped working after rebooting (they are not the same as the one of my workstation, but I would feel safer if I could find out that this is a problem with my computer and not with the kernel) Cheers, Mathieu

3 3

Init.d script troubleshooting.
by Don Krause 10 Nov '10

10 Nov '10

I got a strange problem with init.d scripts on a fully updated (as of today) fresh install of 5.5 x64. I've written a script, /etc/init.d/Fast that starts a fairly large and slow commercial application, by calling that applications control binary to do the actual work. I "registered" the script, via chkconfig --add Fast, and the symlinks are in the expected places. [root@rpmbuilder etc]# ls /etc/rc*/*Fast /etc/rc0.d/K10Fast /etc/rc4.d/S90Fast /etc/rc1.d/K10Fast /etc/rc5.d/S90Fast /etc/rc2.d/K10Fast /etc/rc6.d/K10Fast /etc/rc3.d/S90Fast [root@rpmbuilder etc]# ls -la init.d/Fast -rwxr-xr-x 1 root root 2691 Nov 9 16:49 init.d/Fast [root@rpmbuilder etc]# Testing the script, both via "/etc/init.d/Fast start" and "service Fast start" works, and it fully works for the implemented "start","stop","status" commands. "/etc/rc0.d/K10Fast stop" works as expected. (as does /etc/rc1,2,6 etc..) The script contains full paths to everything. At boot, the script functions as expected. My problem is that at reboot, via shutdown -r or shutdown -h the script does NOT get called, so naturally the system doesn't get to clean up after itself, then it fails to startup correctly next boot. The startup and shutdown of this application is slow, 2+ minutes. I know it doesn't work at reboot or halt because the host goes down fast, and the system is littered with left over pid files and such that prevents a clear restart of the Fast process. I've placed echo commands in the script, both in the stop() function to log the date/time to a file when it's called, and in the head of the script itself, just to see if it gets called at all during shutdown. As far as I can tell, the script does NOT get called at shutdown/reboot time. At all. I'm just confused, this ain't supposed to be this hard... Is there some way to debug init? Suggestions? Thanks <-- /etc/init.f/Fast --> #!/bin/bash # # Startup script for Fast # # chkconfig: 345 90 10 # description: Fast Search Engine # processname: nctrl echo "************************* In Fast ****************************" # Source function library . /etc/init.d/functions RETVAL=0 FASTSEARCH=/opt/Opti/9.1/Fast/fast BIN=${FASTSEARCH}/bin LIBPATH=${FASTSEARCH}/lib SHLIB=${FASTSEARCH}/lib LD_LIBRARY_PATH=${FASTSEARCH}/lib PYTHONPATH=${FASTSEARCH}/lib/python2.3/lib-dynload export FASTSEARCH LIBPATH SHLIB LD_LIBRARY_PATH PYTHONPATH start() { if [ -f ${BIN}/nctrl ]; then cd ${BIN} echo -n $"Starting Fast " su fastadmin -c "./nctrl start" RETVAL=$? [ $RETVAL -eq 0 ] && touch /var/lock/subsys/fast echo fi return $RETVAL } stop() { echo -n $"Stopping Fast " cd ${BIN} su fastadmin -c "./nctrl stop" RETVAL=$? [ $RETVAL -eq 0 ] && rm -f /var/lock/subsys/fast echo return $RETVAL } status() { cd ${BIN} su fastadmin -c "./nctrl status" } restart() { stop start } case "$1" in start) start ;; stop) stop ;; restart) restart ;; killlock) if [ -f /var/lock/subsys/fast ]; then rm -f /var/lock/subsys/fast fi ;; status) status ;; *) echo $"Usage: $0 {start|stop|restart|killlock|status}" exit 1 esac exit $RETVAL -- Don Krause

2 3

"yum -yq --security check-update" spouting lots of text?
by Dave 09 Nov '10

09 Nov '10

uname -a Linux 2.6.18-194.17.4.el5.centos.plus #1 SMP Tue Oct 26 04:07:11 EDT 2010 x86_64 x86_64 x86_64 GNU/Linux I thought -q meant 'no output'. Recently yum -q has started spewing the following garbage, can anyone tell me why? thanks, Dave # yum -yq --security check-update 2>/dev/null Loaded plugins: fastestmirror, priorities, security Loading mirror speeds from cached hostfile * addons: mirror.5ninesolutions.com * base: ftp.osuosl.org * centosplus: centos.promopeddler.com * contrib: mirrors.kernel.org * epel: mirror.pnl.gov * extras: mirror.rocketinternet.net * rpmforge: ftp-stud.fht-esslingen.de * rpmfusion-free-updates: mirror.web-ster.com * rpmfusion-free-updates-testing: mirror.web-ster.com * rpmfusion-nonfree-updates: mirror.web-ster.com * rpmfusion-nonfree-updates-testing: mirror.web-ster.com * updates: mirrors.cat.pdx.edu Limiting package lists to security relevant ones No packages needed, for security, 31 available aalib.x86_64 1.4.0-5.el5.rf rpmforge blas.x86_64 3.1.1-1.el5.rf rpmforge cadaver.x86_64 0.22.5-1.el5.rf rpmforge dnsmasq.x86_64 2.55-1.el5.rf rpmforge emacs-git.x86_64 1.7.3-1.el5.rf rpmforge enca.x86_64 1.10-1.el5.rf rpmforge gdal.x86_64 1.4.4-2.el5.rf rpmforge geos.x86_64 3.2.2-1.el5.rf rpmforge git.x86_64 1.7.3-1.el5.rf rpmforge hdf5.x86_64 1.8.0-1.el5.rf rpmforge iso-codes.noarch 1.0a-1.el5.rf rpmforge lapack.x86_64 3.1.1-1.el5.rf rpmforge lftp.x86_64 4.0.10-1.el5.rf rpmforge libextractor.x86_64 0.5.22-2.el5.rf rpmforge libmpcdec.x86_64 1.2.6-1.el5.rf rpmforge libpaper.x86_64 1.1.22-1.el5.rf rpmforge libwpd.x86_64 0.8.14-1.el5.rf rpmforge mtr.x86_64 2:0.80-1.el5.rf rpmforge netcdf.x86_64 3.6.3-1.el5.rf rpmforge netcdf-devel.x86_64 3.6.3-1.el5.rf rpmforge perl-Compress-Zlib.noarch 2.015-1.el5.rf rpmforge perl-DBI.x86_64 1.615-1.el5.rf rpmforge perl-Git.x86_64 1.7.3-1.el5.rf rpmforge perl-HTML-Parser.x86_64 3.68-1.el5.rf rpmforge perl-HTML-Tagset.noarch 3.20-1.el5.rf rpmforge proj.x86_64 4.7.0-1.el5.rf rpmforge rsync.x86_64 3.0.7-1.el5.rf rpmforge syslinux.x86_64 4.03-1.el5.rf rpmforge udftools.x86_64 1.0.0b3-3.el5.rf rpmforge xvidcore.x86_64 1.2.2-1.el5.rf rpmforge Obsoleting Packages perl-IO-Compress.noarch 2.030-2.el5.rf dag perl-Compress-Zlib.x86_64 1.42-1.fc6 installed

1 1

Running a DNS signed zone on Centos 5.5
by Robert Moskowitz 09 Nov '10

09 Nov '10

My DNS server has been running Centos for some time. I am in the process of upgrading it to Centos 5.5 (long overdue, I know). Since we now have .com signed I want to get my domain signed as well, but I see that Centos 5.5 is running BIND 9.3.6 and a thread on the BIND list recommends against running a DNSSEC master zone on anything less than 9.6 and you really should be on 9.7. The thread DOES mention that some functionality has been backported by RH to what their 9.3.6. I did find the following: http://jason.roysdon.net/2009/10/16/building-bind-9-6-on-rhel5-centos5-for-… Is this the best path at this time? Can anyone point me to other documents? I have a server that I can test this out and get everything ready before I upgrade my main Centos DNS server. This way I can get it right in one try (or that is the dream).

9 10

lvm and /dev/cdrom: open failed: No medium found
by Rainer Traut 09 Nov '10

09 Nov '10

Hi, every lvm command gives one line with: /dev/cdrom: open failed: No medium found I looked at https://bugzilla.redhat.com/show_bug.cgi?id=431901 and changed filter in /etc/lvm/lvm.conf to filter = [ "r|/dev/cdrom|", "a/.*/" ] then deleted cache /etc/lvm/cache/.cache This seems to help, but after a while the message reappears. Is there a way to get rid of it, because I'm making use of lvm with snapshots very often? Rainer

2 2

OT - Any true bourne shells out there for linux?
by Phil Savoie 09 Nov '10

09 Nov '10

Hi All, Was wondering if anyone knows there are any separate rpms to be able to install a true bourne shell and not one linked to bash. Thanks in advance, Phil -- Manners are the unenforced standards of conduct which demonstrate that a person is proper, polite, and refined.

8 8

Update for mailman 2.1.11 -> 2.1.14? Centos 5.5
by Götz Reinicke - IT-Koordinator 09 Nov '10

09 Nov '10

Hey, recently I was asked, how mailman handles bounces and after digging around I also noticed that the current version is 2.1.14 with a lot of bug fixes. So I'd like to ask if there is a (src)rpm out there with the recent version working on centos 5.5. Thanks and best regadrs . Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzende des Aufsichtsrats: Prof. Dr. Claudia Hübner Geschäftsführer: Prof. Thomas Schadt

1 0

large numbers of linux system user for postfix
by ahmad riza h nst 08 Nov '10

08 Nov '10

hello, i need to setup a mail server with postfix + dovecot + webmin + virtualmin + virtual user with linux system user. the virtual user may reach to thousands user from several hundreds virtual domains. what i concern is large numbers of linux system user which used in these setup, is it good or bad? maybe somebody would share their experience about this setup ? any links would be good. postfix 2.6.7 dovecot 2.0.6 centos 5.x webmin + virtualmin thank you. -- http://blog.rizahnst.org

9 10

pam_ldap login under centOS
by bluethundr 08 Nov '10

08 Nov '10

Hello List I am attempting to setup various pam modules to consult our new LDAP services in order to do what it needs to do. I have setup my /etc/pam.d sudo file (for example) this way in the attempt to accomplish this via LDAP: [root@VIRCENT03:~]#cat /etc/pam.d/sudo #%PAM-1.0 auth include system-auth auth required pam_ldap.so account include system-auth account required pam_ldap.so password include system-auth password required pam_ldap.so session optional pam_keyinit.so revoke session required pam_limits.so session required pam_ldap.so but even tho the user is part of the %wheel group under LDAP it is unable to sudo to any other account (including root). If I try to sudo this is what happens: [bluethundr@VIRCENT03:~]#sudo bash [sudo] password for bluethundr: bluethundr is not in the sudoers file. This incident will be reported. It would appear that sudo support for ldap is compiled in: [root@VIRCENT03:~]#ldd $(which sudo)| grep -i ldap libldap-2.3.so.0 => /usr/lib/libldap-2.3.so.0 (0x00552000) This is how I setup my ldap.conf file [root@VIRCENT03:~]#cat /etc/openldap/ldap.conf # # LDAP Defaults # # See ldap.conf(5) for details # This file should be world readable but not world writable. #BASE dc=example, dc=com #URI ldap://ldap.example.com ldap://ldap-master.example.com:666 #SIZELIMIT 12 #TIMELIMIT 15 #DEREF never URI ldap://ldap.acadaca.net/ BASE dc=acadaca,dc=net TLS_CACERTDIR /etc/openldap/cacerts sudoers_base ou=sudoers,ou=Services,dc=acadaca,dc=net In my openldap logs on the LDAP server there appears to be no activity when I sudo. however in the secure logs on the client I do.. Nov 8 16:05:34 VIRCENT03 su: pam_unix(su-l:session): session opened for user root by bluethundr(uid=500) Nov 8 16:05:37 VIRCENT03 su: pam_unix(su-l:session): session opened for user bluethundr by bluethundr(uid=0) Nov 8 16:05:44 VIRCENT03 sudo: bluethundr : user NOT in sudoers ; TTY=pts/5 ; PWD=/home/bluethundr ; USER=root ; COMMAND=/bin/bash I do see other events in secure.log that appear to be pam successes however. am i interpreting this correctly that at least part of the system is communicating with pam on the ldap server? thanks -- Here's my RSA Public key: gpg --keyserver pgp.mit.edu --recv-keys 5A4873A9 Share and enjoy!!

1 0

Bug or normal?
by Emmanuel Noobadmin 08 Nov '10

08 Nov '10

Not sure if this is normal or some kind of bug that I should be filing somewhere so asking for opinions here first. I have a new system (Gigabyte H55M-UD2H with i5-760) that has 2 disks with partitions used for RAID 1 MD devices. X was in use. After testing that the system would boot properly if one of the disk failed, simulated by pulling the cable on one then rebooting, I proceeded to do other configuration while the system resync the array. Subsequently, I made a mistake selecting the wrong partition to dd an image from another machine's HDD and filled up the md0 device. So I rm the half copied image file which was about 80GB at that time. It took more than the couple of seconds I would expect for rm on a single file. At this point, I realized that apart from being able to move the mouse cursor, the system was not responding to mouse clicks or keyboard. I thought it had locked up for some reason and power cycled the system. The system locked up again during the boot process when the md daemon was loaded, detected an improper shutdown and started syncing one of the array. There was an error message about pdflush:303 time out after 120 seconds and a suggestion on how to suppress the message. It repeated until I gave up and rebooted the machine. Sorry my bad for not noting down the exact error message because I was just going "WTF is this? I need this machine up and running within 8hrs!" I tried to boot up using the CentOS LiveCD and pretty much ran into the same problem when it tried to find the existing installation. Trying to figure out what is going on, I switched to another bash console and managed to run top. The load was more than 4.x but no single process appear to be heavily utilizing the system. Switching to the debug console, I managed to see that the md daemon was again trying to resync the arrays. There was an EXT3 message about deleting an unreference inode before I got a screenful of what appears to be a trace dump. So my question is, was all that supposed to happen or did I stumble on some bug that arose from the combination of a full md array being resync while rm was trying to remove a very large file? Or was it simply my bad for assuming that rm'ing a large file would take no longer than deleting a single small file and caused some inevitable FS corruption by power cycling thinking that the system had hung? Although that then begs the question of why would a simple rm command load up the system to the point it wouldn't respond to inputs apart from mouse movement?

1 0

obtaining non-packaged software
by Piscium 07 Nov '10

07 Nov '10

I have been using Fedora on my home desktop for close to an year, and I am happy with it, nevertheless I am considering switching to a slower-moving distro. CentOS + EPEL put together have less packages than Fedora. Moreover RPM Fusion has fewer packages for EL than for Fedora. I am wondering how can I install on my PC applications for which packages do not exist from one of the above-mentioned repos. I can go upstream, get sources and build them. It is a good solution, I do that even with Fedora, however this can mean a lot of work when a package depends on 10 others. So I wonder what do other CentOS users do in a similar situation? Is it possible to get a Fedora binary package and install it? What about getting a Fedora source package, building and installing it? Is there any other possibility?

5 12

Logwatch not working properly
by Albert McCann 07 Nov '10

07 Nov '10

I having a problem where Logwatch is not showing any events from the /var/log/secure log file. When I run logwatch --print --range today --service sshd --detail 10 --debug 10 the end result shows this: ... LogFiles that will be processed: [0] = secure [1] = messages Made Temp Dir: /var/cache/logwatch/logwatch.sOga48bL with tempdir export LOGWATCH_DATE_RANGE='today' export LOGWATCH_GLOBAL_DETAIL='10' export LOGWATCH_OUTPUT_TYPE='unformatted' export LOGWATCH_TEMP_DIR='/var/cache/logwatch/logwatch.sOga48bL/' export LOGWATCH_DEBUG='10' Preprocessing LogFile: secure /var/log/secure 2>/dev/null | /usr/bin/perl /usr/share/logwatch/scripts/shared/expandrepeats ''| /usr/bin/perl /usr/share/logwatch/scripts/shared/onlyhost ''| /usr/bin/perl /usr/share/logwatch/scripts/shared/applystddate ''>/var/cache/logwatch/logwatch.sOga48bL/secure TimeFilter: Period is day TimeFilter: SearchDate is (Nov 6 ..:..:..) TimeFilter: Debug SearchDate is (Nov 6 ) DEBUG: Inside ApplyStdDate... DEBUG: Looking For: (Nov 6 ..:..:..) Preprocessing LogFile: messages /var/log/messages 2>/dev/null | /usr/bin/perl /usr/share/logwatch/scripts/shared/expandrepeats ''| /usr/bin/perl /usr/share/logwatch/scripts/shared/removeservice 'talkd'| /usr/bin/perl /usr/share/logwatch/scripts/shared/removeservice 'telnetd'| /usr/bin/perl /usr/share/logwatch/scripts/shared/removeservice 'inetd'| /usr/bin/perl /usr/share/logwatch/scripts/shared/removeservice 'nfsd'| /usr/bin/perl /usr/share/logwatch/scripts/shared/removeservice '/sbin/mingetty'| /usr/bin/perl /usr/share/logwatch/scripts/shared/removeservice 'netscreen'| /usr/bin/perl /usr/share/logwatch/scripts/shared/removeservice 'netscreen'| /usr/bin/perl /usr/share/logwatch/scripts/shared/onlyhost ''| /usr/bin/perl /usr/share/logwatch/scripts/shared/applystddate ''>/var/cache/logwatch/logwatch.sOga48bL/messages DEBUG: Inside RemoveService... DEBUG: Inside RemoveService... DEBUG: Inside RemoveService... DEBUG: Inside RemoveService... DEBUG: Inside RemoveService... DEBUG: Inside RemoveService... DEBUG: Inside RemoveService: 930 Lines In, 930 Lines Out DEBUG: Inside RemoveService: 930 Lines In, 930 Lines Out DEBUG: Inside RemoveService: 930 Lines In, 930 Lines Out DEBUG: Inside RemoveService: 930 Lines In, 930 Lines Out DEBUG: Inside RemoveService: 930 Lines In, 930 Lines Out DEBUG: Inside RemoveService... DEBUG: Inside RemoveService: 930 Lines In, 930 Lines Out DEBUG: Inside RemoveService: 930 Lines In, 930 Lines Out TimeFilter: Period is day TimeFilter: SearchDate is ( 2010-Nov-06 ..h ..m ..s ) TimeFilter: Debug SearchDate is ( 2010-Nov-06 h m s ) ################### Logwatch 7.3 (03/24/06) #################### Processing Initiated: Sat Nov 6 11:38:23 2010 Date Range Processed: today ( 2010-Nov-06 ) Period is day. Detail Level of Output: 10 Type of Output: unformatted Logfiles for Host: valhala.xxxxxxxxxxxx.org ################################################################## --------------------- SSHD Begin ------------------------ DEBUG: Inside OnlyService for sshd DEBUG: Inside SSHD Filter ---------------------- SSHD End ------------------------- Looking at file /usr/share/logwatch/scripts/services/sshd there is block of code starting at line 165: ... if ( $Debug >= 5 ) { print STDERR "\n\nDEBUG: Inside SSHD Filter \n\n"; $DebugCounter = 1; } while (defined(my $ThisLine = <STDIN>)) { if ( $Debug >= 5 ) { print STDERR "DEBUG($DebugCounter): $ThisLine"; $DebugCounter++; } ... >From above, this line never prints anything: print STDERR "DEBUG($DebugCounter): $ThisLine"; while the previous print STDERR does print when $Debug >= 5. Doing a rpm -V Logwatch shows one changed file S.5....T c /etc/logwatch/conf/logwatch.conf as I added a " Detail = High" line to it. I do have sshd events in /var/log/secure, here's some showing testing a failed login using a non-existing account: 2010-11-06T08:59:03.684006-04:00 valhala sshd[23633]: Invalid user bob from 192.168.1.12 2010-11-06T08:59:03.688784-04:00 valhala sshd[23636]: input_userauth_request: invalid user bob 2010-11-06T08:59:05.996036-04:00 valhala sshd[23633]: pam_unix(sshd:auth): check pass; user unknown 2010-11-06T08:59:05.996313-04:00 valhala sshd[23633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=bunny2.xxxxxxxxxxxx.org 2010-11-06T08:59:07.837697-04:00 valhala sshd[23633]: Failed password for invalid user bob from 192.168.1.12 port 57945 ssh2 2010-11-06T08:59:10.644065-04:00 valhala sshd[23633]: pam_unix(sshd:auth): check pass; user unknown 2010-11-06T08:59:12.505509-04:00 valhala sshd[23633]: Failed password for invalid user bob from 192.168.1.12 port 57945 ssh2 2010-11-06T08:59:14.348019-04:00 valhala sshd[23633]: pam_unix(sshd:auth): check pass; user unknown 2010-11-06T08:59:15.759400-04:00 valhala sshd[23633]: Failed password for invalid user bob from 192.168.1.12 port 57945 ssh2 2010-11-06T08:59:18.315990-04:00 valhala sshd[23633]: pam_unix(sshd:auth): check pass; user unknown 2010-11-06T08:59:19.607300-04:00 valhala sshd[23633]: Failed password for invalid user bob from 192.168.1.12 port 57945 ssh2 2010-11-06T08:59:24.686480-04:00 valhala sshd[23636]: Connection closed by 192.168.1.12 2010-11-06T08:59:24.687107-04:00 valhala sshd[23633]: PAM 3 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=bunny2.xxxxxxxxxxxx.org 2010-11-06T08:59:24.687132-04:00 valhala sshd[23633]: PAM service(sshd) ignoring max retries; 4 > 3 Does anyone have any idea why this isn't working? The only thing I see is a date discrepancy: TimeFilter: SearchDate is ( 2010-Nov-06 ..h ..m ..s ), vs 2010-11-06T08:59:03.684006-04:00 Thanks in advance for any clues. Al -- Experience varies directly with equipment ruined.

1 2

"Semi-Authoritative" DNS?
by Tim Nelson 06 Nov '10

06 Nov '10

Greetings All- I have an odd need for a 'semi-authoritative' DNS server. Let's say I have a zone for 'domain.com' with public DNS servers. However, I wanted to run an internal DNS server for internal things. Public resolution of 'www.domain.com' would yield the public IPs, private resolution of 'www.domain.com' would yield the internal private IPs. Easy enough. BUT, what if there is a DNS record present on the public nameservers that is *not* present on the internal nameserver? Typically, DNS will say 'no record found' when it could really forward the request to the public DNS. Is it possible to configure this? So, the internal 'domain.com' zone will be authoritative for records it has but forward queries for those records it does not have, even on the same domain? I hope that made sense. Maybe there is a better way of accomplishing this? The systems in question are running Centos 5.5 x86_64 with BIND bind-9.3.6-4.P1.el5_4.1 . --Tim

3 2

CentOS-announce Digest, Vol 69, Issue 4
by centos-announce-request＠centos.org 06 Nov '10

06 Nov '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2010:0827 CentOS 5 i386 logrotate Update (Tru Huynh) 2. CEBA-2010:0827 CentOS 5 x86_64 logrotate Update (Tru Huynh) 3. CEBA-2010:0826 CentOS 5 i386 gnome-screensaver Update (Tru Huynh) 4. CEBA-2010:0826 CentOS 5 x86_64 gnome-screensaver Update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 5 Nov 2010 23:50:07 +0100 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0827 CentOS 5 i386 logrotate Update To: centos-announce(a)centos.org Message-ID: <20101105225007.GO24160(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Bugfix Advisory 2010:0827 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0827.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: ae1caae9068e3be9012a8a1bee428833 logrotate-3.7.4-9.el5_5.2.i386.rpm source: d0fef61c003ca12a30b3279c91ea233e logrotate-3.7.4-9.el5_5.2.src.rpm Tru -- Tru Huynh (mirrors, CentOS i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

file conflict while installing phonon-backend-gstreamer for Amarok
by Agnello George 06 Nov '10

06 Nov '10

Hi I am trying to install phonon-backend-gstreamer so that i can play mp3 songs through Amarok as per the following forum ( http://forums.fedoraforum.org/showthread.php?t=205019 ) , but i get the following dependency error . how can i solve this your inputs will be of great value i am using Fedora 9 . ---------------------------------------------- : : Total download size: 254 k Is this ok [y/N]: y Downloading Packages: (1/2): phonon-4.3.1-2.fc9.i386.rpm | 152 kB 00:05 (2/2): phonon-backend-gstreamer-4.3.1-2.fc9.i386.rpm | 102 kB 00:02 Running rpm_check_debug Running Transaction Test Finished Transaction Test Transaction Check Error: file /usr/lib/libphonon.so.4 from install of phonon-4.3.1-2.fc9.i386 conflicts with file from package kdelibs-4.0.3-7.fc9.i386 file /usr/lib/libphononexperimental.so.4 from install of phonon-4.3.1-2.fc9.i386 conflicts with file from package kdelibs-4.0.3-7.fc9.i386 file /usr/share/dbus-1/interfaces/org.kde.Phonon.AudioOutput.xml from install of phonon-4.3.1-2.fc9.i386 conflicts with file from package kdelibs-4.0.3-7.fc9.i386 Error Summary ------------- -- Regards Agnello D'souza

1 0

Pptp vpn server
by mattias 05 Nov '10

05 Nov '10

How to setup a vpn server on centos? I can't find the pptpd in any repo

17 39

Nagios installation problem
by Ben McGinnes 05 Nov '10

05 Nov '10

Hello, Has anyone managed a successful installation of Nagios using the RPMForge packages on CentOS 5.5? It looks like it should have worked, I followed the guides for Fedora and CentOS here (with appropriate path adjustments): http://nagios.sourceforge.net/docs/3_0/quickstart-fedora.html http://wiki.centos.org/HowTos/Nagios The SELinux policies look fine (I tend to ignore instructions to permanently disable SELinux, if I'm not using SELinux then there's no reason not to return to Slackware): # semodule -l | grep nagios nagios 1.1.0 # The nagios.cfg check gave the all clear: Reading configuration data... Read main config file okay... Processing object config file '/etc/nagios/objects/commands.cfg'... Processing object config file '/etc/nagios/objects/contacts.cfg'... Processing object config file '/etc/nagios/objects/timeperiods.cfg'... Processing object config file '/etc/nagios/objects/templates.cfg'... Processing object config file '/etc/nagios/objects/localhost.cfg'... Read object config files okay... Running pre-flight check on configuration data... Checking services... Checked 8 services. Checking hosts... Checked 1 hosts. Checking host groups... Checked 1 host groups. Checking service groups... Checked 0 service groups. Checking contacts... Checked 1 contacts. Checking contact groups... Checked 1 contact groups. Checking service escalations... Checked 0 service escalations. Checking service dependencies... Checked 0 service dependencies. Checking host escalations... Checked 0 host escalations. Checking host dependencies... Checked 0 host dependencies. Checking commands... Checked 24 commands. Checking time periods... Checked 5 time periods. Checking for circular paths between hosts... Checking for circular host and service dependencies... Checking global event handlers... Checking obsessive compulsive processor commands... Checking misc settings... Total Warnings: 0 Total Errors: 0 Things look okay - No serious problems were detected during the pre-flight check My adjustment of other config files is minimal, essentially just setting the email address to deliver notifications to. Yet every time I try to start the service I get this: # service nagios start nagios is stopped Configuration validation failed [FAILED] The error appears to be identical to that reported here: http://forums.meulie.net/viewtopic.php?f=61&t=6538&start=0 Like the original poster of the thread on that forum, I am able to start it with "nagios -d /etc/nagios/nagios.cfg" though various web pages continue to report an unspecified configuration error. Does anyone have any ideas? Regards, Ben

2 2

Auto-Re: CentOS Digest, Vol 70, Issue 5
by 韦加宁 05 Nov '10

05 Nov '10

信已收到,谢谢!

2 1

CentOS-announce Digest, Vol 69, Issue 3
by centos-announce-request＠centos.org 05 Nov '10

05 Nov '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2010:0824 Moderate CentOS 4 i386 mysql - security update (Tru Huynh) 2. CESA-2010:0824 Moderate CentOS 4 x86_64 mysql - security update (Tru Huynh) 3. CESA-2010:0825 Moderate CentOS 5 i386 mysql Update (Tru Huynh) 4. CESA-2010:0825 Moderate CentOS 5 x86_64 mysql Update (Tru Huynh) 5. CEBA-2010:0816 CentOS 5 i386 tetex Update (Tru Huynh) 6. CEBA-2010:0816 CentOS 5 x86_64 tetex Update (Tru Huynh) 7. CEEA-2010:0821 CentOS 5 i386 apr Update (Tru Huynh) 8. CEEA-2010:0821 CentOS 5 x86_64 apr Update (Tru Huynh) 9. CEBA-2010:0823 CentOS 5 i386 tcsh Update (Tru Huynh) 10. CEBA-2010:0823 CentOS 5 x86_64 tcsh Update (Tru Huynh) 11. http://rhn.redhat.com/errata/CEBA-2010:0714 CentOS 5 x86_64 kvm Update (Tru Huynh) 12. CEBA-2010:0822 CentOS 5 i386 openmotif Update (Tru Huynh) 13. CEBA-2010:0822 CentOS 5 x86_64 openmotif Update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 5 Nov 2010 15:22:54 +0100 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2010:0824 Moderate CentOS 4 i386 mysql - security update To: centos-announce(a)centos.org Message-ID: <20101105142254.GA24160(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2010:0824 mysql security update for CentOS 4 i386: https://rhn.redhat.com/errata/RHSA-2010-0824.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/mysql-4.1.22-2.el4_8.4.i386.rpm updates/i386/RPMS/mysql-bench-4.1.22-2.el4_8.4.i386.rpm updates/i386/RPMS/mysql-devel-4.1.22-2.el4_8.4.i386.rpm updates/i386/RPMS/mysql-server-4.1.22-2.el4_8.4.i386.rpm source: updates/SRPMS/mysql-4.1.22-2.el4_8.4.src.rpm You may update your CentOS-4 i386 installations by running the command: yum update mysql Tru -- Tru Huynh (mirrors, CentOS i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

IP forwarding and OpenVPN
by Bart Schaefer 05 Nov '10

05 Nov '10

I have a CentOS 4 server that acts as a gateway for a small LAN. The lower half of the 192.168.144 address space is the LAN on eth1, the upper half is the WAN on eth0, and the default route is to 192.168.144.254 which is my DSL router; this has been working fine for years. However, it's recently become convenient to connect the server to a VPN from time to time, for which I've set up OpenVPN. This works for connections originating from the server itself, but breaks for machines on the LAN when accessing IPs in the ranges that are routed to the VPN. Connections to IPs not in the private network still work as before. Can anyone advise what I may need to change to configure the server to forward packets to the VPN? Pointers to documentation are welcome. Thanks. /etc/sysctl.conf has: net.ipv4.ip_forward = 1 net.ipv4.conf.default.rp_filter = 1 net.ipv4.conf.default.accept_source_route = 0

3 12

new apache mod on centos? Google page speed?
by Bob Hoffman 05 Nov '10

05 Nov '10

Just saw this article http://news.yahoo.com/s/mashable/20101103/tc_mashable/google_helps_autotune… (/rant - stupid seo links, lame /rant off) it mentions it is set up for linux distros, notably centos. Anyone use this yet? Affect the auto yum update at all?

2 1

Re: [CentOS] was, PATA Hard Drive woes, is "SMART"
by m.roth＠5-cent.us 04 Nov '10

04 Nov '10

Folks, Thanks a *lot* to those who suggested I try fsck -cc - that took six hours, and at the end, I was standing there, and it tells me that there's two back blocks, one was /dead/base.pp, and... (wait for it) bad blocks, in node 1. I said yes, fix them, and rebooted, and I don't see complaints. mark "and there was much rejoicing"

3 2

orphan inodes deleted issue
by David S. 04 Nov '10

04 Nov '10

Dear All, My servers running on CentOS 5.5 x86_64 with kernel 2.6.18.194.17.4.el gigabyte motherboard and 2 harddisks (seagate 500GB). My CentOS box configured RAID 1, yesterday and today I had the same problem on 2 servers with same configuration. See the following error messages for details: EXT3-fs: INFO: recovery required on readonly filesystem. EXT3-fs: write access will be enabled during recovery. kjournald starting. Commit interval 5 seconds EXT3-fs: md1: orphan cleanup on readonly fs ext3_orphan_cleanup: deleting unreferenced inode 2010087 ext3_orphan_cleanup: deleting unreferenced inode 259361 ext3_orphan_cleanup: deleting unreferenced inode 972510 ext3_orphan_cleanup: deleting unreferenced inode 2009841 ext3_orphan_cleanup: deleting unreferenced inode 2010102 ext3_orphan_cleanup: deleting unreferenced inode 2010079 ext3_orphan_cleanup: deleting unreferenced inode 2010078 ext3_orphan_cleanup: deleting unreferenced inode 2009831 ext3_orphan_cleanup: deleting unreferenced inode 2010001 ext3_orphan_cleanup: deleting unreferenced inode 2009991 ext3_orphan_cleanup: deleting unreferenced inode 2009989 ext3_orphan_cleanup: deleting unreferenced inode 2009811 ext3_orphan_cleanup: deleting unreferenced inode 2009806 ext3_orphan_cleanup: deleting unreferenced inode 2009978 ext3_orphan_cleanup: deleting unreferenced inode 2009976 ext3_orphan_cleanup: deleting unreferenced inode 2009972 ext3_orphan_cleanup: deleting unreferenced inode 2009828 ext3_orphan_cleanup: deleting unreferenced inode 2009964 ext3_orphan_cleanup: deleting unreferenced inode 2009865 ext3_orphan_cleanup: deleting unreferenced inode 2009863 ext3_orphan_cleanup: deleting unreferenced inode 2009830 ext3_orphan_cleanup: deleting unreferenced inode 2009809 ext3_orphan_cleanup: deleting unreferenced inode 2009823 ext3_orphan_cleanup: deleting unreferenced inode 2009856 ext3_orphan_cleanup: deleting unreferenced inode 2009807 ext3_orphan_cleanup: deleting unreferenced inode 2009799 ext3_orphan_cleanup: deleting unreferenced inode 2009794 EXT3-fs: md1: 27 orphan inodes deleted EXT3-fs: recovery complete. It's my array: $ df -h Filesystem Size Used Avail Use% Mounted on /dev/md1 9.5G 735M 8.3G 8% / /dev/md7 38G 6.7G 30G 19% /var /dev/md6 15G 4.5G 9.1G 33% /usr /dev/md5 103G 45G 54G 46% /backup /dev/md3 284G 42G 228G 16% /home /dev/md2 2.0G 214M 1.7G 12% /tmp /dev/md0 243M 24M 207M 11% /boot I've been searching on google but I can't find the explanation for this problem. It's a BUG? :D Thank You very much :D -- - -- Best regards, David http://blog.pnyet.web.id

4 5

generate signing subkey
by Tim Dunphy 04 Nov '10

04 Nov '10

hello all I need to generate a subkey in gpg in order to sign my emails. I already have a main key. how do I generate the subkey I need to encrypt emails? I have already run gpg --gen-key thanks -- Here's my RSA Public key: gpg --keyserver pgp.mit.edu --recv-keys 5A4873A9 Share and enjoy!!

2 2

failure to import ldif into ldap
by Tim Dunphy 04 Nov '10

04 Nov '10

Thanks all.. I have read the man of ldif.... your advice has gotten me quite far both in my current implementation and in my overall understanding of LDAP which I am hoping grows with each passing day. In my attempt to build my current directory, I have taken a dump of my last successful implementation (which was created on FreeBSD 8.1) and substituted values for the dc=company and dc=com values with the correct ones for the current directory (attempting to implement under CentOS 5.4) and even tho the correct schemas are in place it is choking on this entry: # defaults, sudoers, Services, acadaca.com dn: cn=defaults,ou=sudoers,ou=Services,dc=acadaca,dc=net objectClass: top objectClass: sudoRole cn: defaults description: Default sudoOption's go here And again I should have all the schemas in place to make this work... include /etc/openldap/schema/core.schema include /etc/openldap/schema/cosine.schema include /etc/openldap/schema/inetorgperson.schema include /etc/openldap/schema/nis.schema include /etc/openldap/schema/misc.schema inlcude /etc/openldap/schema/sudoers.schema include /etc/openldap/schema/openldap.schema [root@ldap ldif]# ldapadd -h ldap -a -w secret -x -D "cn=Manager,dc=acadaca,dc=net" -f /home/tim/txt/ldif/acadaca-master.ldif adding new entry "cn=defaults,ou=sudoers,ou=Services,dc=acadaca,dc=net" ldapadd: Invalid syntax (21) additional info: objectClass: value #1 invalid per syntax Why this ldif will work in one directory but not another is a mystery at this point.. thanks again -- Here's my RSA Public key: gpg --keyserver pgp.mit.edu --recv-keys 5A4873A9 Share and enjoy!!

1 0

Copying root partition
by Timothy Murphy 04 Nov '10

04 Nov '10

I recently transferred the / partition on my CentOS server from a small disk to a large disk, using "rsync -auvz". This works fine, except that I get dozens of selinux warnings when I re-boot. I'm running selinux in permissive mode. Is there any way to make sure that all the files in a partition are kosher as far as selinux is concerned? -- Timothy Murphy e-mail: gayleard /at/ eircom.net tel: +353-86-2336090, +353-1-2842366 s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland

5 4

Web statistics - w3perl
by Jussi Hirvi 04 Nov '10

04 Nov '10

I am considering a richer alternative to good old Webalizer, in a webhotel (multidomain) setting. Any experience with w3perl? The demo at least looks impressive. http://www.w3perl.com - Jussi -- Jussi Hirvi * Green Spot Topeliuksenkatu 15 C * 00250 Helsinki * Finland Tel. +358 9 493 981 * Mobile +358 40 771 2098 (only sms) jussi.hirvi(a)greenspot.fi * http://www.greenspot.fi

5 5

Re: [CentOS] PATA Hard Drive woes
by Lamar Owen 04 Nov '10

04 Nov '10

>From: Keith Roberts <keith(a)karsites.net> >On Wed, 3 Nov 2010, Lamar Owen wrote: >> Might want to check the power supply as well. Bad/flakey >> power can indeed case damage to the drive surface; been >> there, done that, have two Maxtor 250GB drives with >> scribbled servo data to prove it. >OK. > I'm running the server from an APC UPS Back-UPS 650, so > there should not be any glitches in the power supply, should > there? Probably not on the AC side, although the Back-UPS 650 isn't a full online UPS but a switching standby UPS (full online, like the APC Symmetra 16KVA units I have here) rectify to DC, float the batteries at all times, and run the output from inverter all of the time (unless they're switched to bypass). The SmartUPS 1400RM I had in front of the PC that suffered the glitchy power is, unless I'm mistaken, also a full online pure sinewave UPS like the Symmetra, and is still in service (I checked its output on my oscilloscope first, though). No, I was referring to the output DC voltages (+12V, +5V, +3.3V,-5V, and -12V) from the power supply inside the system. In addition to my own personal RAID1 of 250GB drives, I also, a different time, lost a RAID5 array of 15K 36GB SCSI drives in a Dell 1600SC server; testing the power supply showed lots of noise and complete dropouts of a few milliseconds duration on the drive connectors' 5V supply pins. Completely and thoroughly scrambled the servo data on the Hitachi drives. Meaning they didn't just start showing bad sectors; they started getting seek errors. The 5V line on the drive connectors was reading an AC RMS of 4V superimposed on the +5V, yielding an effective DC voltage of 4V. Happened over a period of three weeks, during which time I had a number of mysterious failures (the Hitachi drives were error-correcting so well that by the time they started reporting errors, it was way past too late, and it became impossible for the Hitachi drives to even power up). I found that the power supply in question, upon investigation, provided the motherboard (where the DC power sensors on that box are) with clean 5V, and the drives were powered from a separate 5V rail, meaning the Dell management system wasn't seeing the power problems. A simple power supply tester with a built-in meter can be bought for less than $20; a more thorough power analyzer will run more than that. But even the simple one caught the failing Dell 1600SC supply. It took an oscilloscope to test the Antec in my personal box; turned out it was a cold solder joint in the Antec. A new power supply is less expensive than the equivalent labor it took to fix the Antec. I keep a known good 500W ATX 12V server-grade (8 pin 12V plug with adapters, and 24-pin ATX plug with 20-pin adapter) around for testing; that's one of the very first things I check when a PC is brought in that is flaky. (The very first thing is the dust accumulation, and the second thing is the heatsink compound). One of the first things I do on any CentOS system I put together is install lm_sensors and gkrellm (gkrellm from a third-party repo). I then enable all the motherboard sensors that are available in the gkrellm plugins, and run it (either local GUI or through ssh X forwarding to my central monitoring PC). On supermicro boards I install SuperODoctor for Linux, available on the supermicro site. The GUI runs well (there are some odd dependencies, however) and will e-mail you on alarm conditions that you can set. These include fan RPM, temperatures, and voltages. The CLI program isn't quite so sophisticated, but it can be run periodically and the result sent by e-mail for health checks. Drives that are having trouble will show up with high iowaits; run iostat (from the sysstat package) and look at the await result. Long awaits mean the drive is having trouble (or it has firmware issues like WD's EARS and EADS drives have in RAID configurations).

1 0

kernel bug fixed in later kernels
by Philip Manuel 04 Nov '10

04 Nov '10

Does anyone know if this is going to be fixed in CentOS ? // test case code below // expected behaviour is "all good" and a return code of zero. // this works on 2.6.35-1 // does not work on 2.6.18-194.17.4.el5 from Centos 5.5 // think this bug was fixed in git commit 8948e11f450e6189a79e47d6051c3d5a0b98e3f3 // around 2.6.22 // http://www.mail-archive.com/git-commits-head@vger.kernel.org/msg11654.html #include <fcntl.h> #include <stdio.h> #include <sys/stat.h> #include <sys/types.h> #include <unistd.h> int main(int argc, char** argv) { int fd = open("foo", O_RDONLY); if (setuid(1000)) { printf("could not setuid, run as root with correct uid\n"); return 1; } char proc_name[1024]; sprintf(proc_name, "/proc/self/fd/%d", fd); struct stat stat_buf; int rc = stat(proc_name, &stat_buf); if (rc == 0) { printf("all good\n"); } else { printf("busted, could not access %s\n", proc_name); } return rc; }

2 2

CentOS-announce Digest, Vol 69, Issue 2
by centos-announce-request＠centos.org 03 Nov '10

03 Nov '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2010:0817 Low CentOS 3 i386/x86_64 CentOS-3 - End Of Life (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Wed, 3 Nov 2010 11:56:09 +0100 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2010:0817 Low CentOS 3 i386/x86_64 CentOS-3 - End Of Life To: centos-announce(a)centos.org Message-ID: <20101103105609.GA32735(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2010:0817 End Of Life security update for CentOS 3: https://rhn.redhat.com/errata/RHSA-2010-0817.html As per the upstream vendors errata support policy, updates for CentOS-3 has ended on October 31th 2010. It is recommended that any system still running CentOS 3 should be upgraded to a more recent version of CentOS before this date to ensure continued security and bug fix support. see also http://wiki.centos.org/HowTos/EOLC3 Thank you to everyone who helped make this project possible. Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

2 1

SCSI/SAS error message by mpt2sas.ko
by Alexander Dalloz 03 Nov '10

03 Nov '10

Dear all, actually I installed CentOS 5.4 x86_64 on 11 new Dell R710 servers. It is required to use 5.4 to be covered by the NetApp Interoperability Matrix for use of Snapdrive. All systems spit out the error message mpt2sas0: failure at drivers/scsi/mpt2sas/mpt2sas_scsih.c:4637/_scsih_add_device()! at boot time. In dmesg the complete SCSI initialization logging appears as follows: SCSI subsystem initialized mpt2sas version 01.101.00.00 loaded scsi0 : Fusion MPT SAS Host GSI 22 sharing vector 0x5A and IRQ 22 ACPI: PCI Interrupt 0000:03:00.0[A] -> GSI 33 (level, low) -> IRQ 90 PCI: Setting latency timer of device 0000:03:00.0 to 64 mpt2sas0: 64 BIT PCI BUS DMA ADDRESSING SUPPORTED, total mem (24544400 kB) mpt2sas0: PCI-MSI-X enabled: IRQ 98 mpt2sas0: iomem(0xdf2b0000), mapped(0xffffc20000040000), size(65536) mpt2sas0: ioport(0xfc00), size(256) mpt2sas0: sending diag reset !! [...] mpt2sas0: diag reset: SUCCESS mpt2sas0: Allocated physical memory: size(1125 kB) mpt2sas0: Current Controller Queue Depth(490), Max Controller Queue Depth(3439) mpt2sas0: Scatter Gather Elements per IO(128) mpt2sas0: LSISAS2008: FWVersion(02.15.63.00), ChipRevision(0x02), BiosVersion(07.01.09.00) mpt2sas0: Protocol=(Initiator,Target<6>mpt2sas0: Dell PERC H200 Integrated: Vendor(0x1000), Device(0x0072), SSVID(0x1028), SSDID(0x1F1E) ), Capabilities=(Raid,TLR,EEDP,Snapshot Buffer,Diag Trace Buffer,Task Set Full,NCQ) mpt2sas0: sending port enable !! mpt2sas0: host_add: handle(0x0001), sas_addr(0x5842b2b0194dce00), phys(8) mpt2sas0: failure at drivers/scsi/mpt2sas/mpt2sas_scsih.c:4637/_scsih_add_device()! mpt2sas0: port enable: SUCCESS Vendor: Dell Model: Virtual Disk Rev: 1028 Type: Direct-Access ANSI SCSI revision: 06 scsi 0:1:0:0: RAID1: handle(0x004f), wwid(0x04adb846d46d5f0a), pd_count(2), type(SSP) scsi 0:1:0:0: qdepth(128), tagged(1), simple(1), ordered(0), scsi_level(7), cmd_que(1) SCSI device sda: 285474816 512-byte hdwr sectors (146163 MB) sda: Write Protect is off sda: Mode Sense: 03 00 00 08 SCSI device sda: drive cache: write through SCSI device sda: 285474816 512-byte hdwr sectors (146163 MB) sda: Write Protect is off sda: Mode Sense: 03 00 00 08 SCSI device sda: drive cache: write through sda: sda1 sda2 sda3 sd 0:1:0:0: Attached scsi disk sda Vendor: FUJITSU Model: MBA3147RC Rev: D306 Type: Direct-Access ANSI SCSI revision: 05 scsi 0:0:0:0: SSP: handle(0x000a), sas_addr(0x500000e1150ca882), device_name(0x0000000000000000) scsi 0:0:0:0: SSP: enclosure_logical_id(0x5842b2b0194dce00), slot(1) scsi 0:0:0:0: qdepth(254), tagged(1), simple(1), ordered(0), scsi_level(6), cmd_que(1) Vendor: FUJITSU Model: MBA3147RC Rev: D306 Type: Direct-Access ANSI SCSI revision: 05 scsi 0:0:1:0: SSP: handle(0x000b), sas_addr(0x500000e1150ca9c2), device_name(0x0000000000000000) scsi 0:0:1:0: SSP: enclosure_logical_id(0x5842b2b0194dce00), slot(0) scsi 0:0:1:0: qdepth(254), tagged(1), simple(1), ordered(0), scsi_level(6), cmd_que(1) In the source code of the mpt2sas.ko module http://www.takatan.net/lxr/source/drivers/scsi/mpt2sas/mpt2sas_scsih.c?v=2.… the code part responsible for the error messages is 4633 /* check if this is end device */ 4634 device_info = le32_to_cpu(sas_device_pg0.DeviceInfo); 4635 if (!(_scsih_is_end_device(device_info))) { 4636 printk(MPT2SAS_ERR_FMT "failure at %s:%d/%s()!\n", 4637 ioc->name, __FILE__, __LINE__, __func__); 4638 return 0; 4639 } I am not sure what that should tell me. I can not detect any misfunction once the systems are up and running, nor any further error loggings. Any clue about the severity of that mpt2sas check and failure note? Best regards Alexander

1 1

Re: [CentOS] yum update
by Ritika Garg 03 Nov '10

03 Nov '10

Does the file /var/log/yum.log store the information of the last 7 days because I did some updates on 27October which are not there in the file.

3 2

cannon printer not printing
by Ritika Garg 03 Nov '10

03 Nov '10

Printer: Cannon MF4320d. I gave the command "lpr NNInteraction_Poster.pdf", then typed "lpq" which shows MF4320-4350_(UFRII_LT) is ready and printing Rank Owner Job File(s) Total Size active Ritika 636 NNInteraction_Poster.pdf 549888 bytes After a while "lpq" command returns: MF4320-4350_(UFRII_LT) is ready no entries But no printout is there. Is the driver missing? But then MF4320-4350_(UFRII_LT) will not come. What might be the problem?

1 0

Re: [CentOS] system logs out suddenly
by Ritika Garg 03 Nov '10

03 Nov '10

I updated libX11 and the problem is solved. Maybe the updated firefox and xulrunner are not compatible with the older version.

1 0

Building Samba RPM packages for RHEL/CentOS 5 - Needed corrections to the .spec file
by Miguel Medalha 03 Nov '10

03 Nov '10

I just built from source the Samba 3.5.6 RPM packages for CentOS 5.x/RHEL5.x. I found some glitches in the included samba.spec file and I thought someone else might benefit from my recent experience. The spec file for RHEL/CentOS resides, on the sources tree, under "samba-3.5.6\packaging\RHEL\". 1 - The process initially fails due to a dependency problem: missing "keyutils-devel". Change the respective entry on line 31 (BuildRequires:) to "keyutils-libs-devel" (yum install this file from the repositories if needed). 2 - Although it is called by the packaging process, the "umount.cifs" file is not compiled and therefore cannot be found in sources3/bin at the moment of packaging. Therefore, the RPM build process fails. Either comment the references to the file from lines 237, 396 and 414, if you don't need this function, or add the following to the ./configure command, starting on line 137: --with-cifsumount The default for this parameter is "no", and therefore it is not included in the "configure" process as is. 3 - The RPM build process finally fails because some files, which were compiled and copied to the temporary tree, are not called by the packaging process. The following lines must be included on the spec file, under "Files section": /usr/share/locale/de/LC_MESSAGES/net.mo %{_includedir}/wbc_async.h %{_mandir}/man5/pam_winbind.conf.5.gz I suggest you include them close to related lines (same paths) for the sake of clarity. After these corrections the build of the RPM packages went on with no errors and was successful. All the packages installed correctly afterward. I hope these tips will be useful to someone. PS - The sources for Samba 3.5.6 are here: http://www.samba.org/ Before building, you might be interested in patching the sources with the patch provided by Volker Lendecke to improve compliance with Windows ACLs. The patch is here, thanks to Volker: http://samba.org/~jra/samba-3-5-x-acl-jumbo-patch.tgz patch -b -p1 < jumbo-patch-3-5-6.diff After applying the patch and modifying the .spec file you can proceed to the building process. cd to "/usr/src/redhat/SOURCES/samba-3.5.6/packaging/RHEL" and execute the "makerpms.sh" script there.

1 0

projects.centos.org down again
by Glenn Eychaner 02 Nov '10

02 Nov '10

> Garry Dale wrote: >> There is an open bug report from 2009-09-21 with a similar summary [1]. >> Since bug 3858 was never closed, I've updated the notes. > > Per updates to bug tracker, the projects.centos.org site is back online. > > Should bug 3858 [1] now be closed, or is it acting as a placeholder for > events such as this? Just curious... Well, projects.centos.org was up briefly over the weekend, but appears (from my end) to be down again, same symptoms; HTTP connections just hang. Next time I'll download the LiveCD instructions I'm looking for to a static file! -G. -- Glenn Eychaner (geychaner(a)lco.cl) Telescope Systems Programmer, Las Campanas Observatory

1 0

CentOS-announce Digest, Vol 69, Issue 1
by centos-announce-request＠centos.org 02 Nov '10

02 Nov '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2010:0812 Moderate CentOS 4 i386 thunderbird - security update (Tru Huynh) 2. CESA-2010:0812 Moderate CentOS 4 x86_64 thunderbird - security update (Tru Huynh) 3. CESA-2010:0811 Important CentOS 5 i386 cups Update (Tru Huynh) 4. CESA-2010:0811 Important CentOS 5 x86_64 cups Update (Tru Huynh) 5. CESA-2010:0812 Moderate CentOS 5 i386 thunderbird Update (Tru Huynh) 6. CESA-2010:0812 Moderate CentOS 5 x86_64 thunderbird Update (Tru Huynh) 7. CESA-2010:0819 Moderate CentOS 5 i386 pam Update (Tru Huynh) 8. CESA-2010:0819 Moderate CentOS 5 x86_64 pam Update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Mon, 1 Nov 2010 22:24:26 +0100 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2010:0812 Moderate CentOS 4 i386 thunderbird - security update To: centos-announce(a)centos.org Message-ID: <20101101212426.GA17456(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2010:0812 thunderbird security update for CentOS 4 i386: https://rhn.redhat.com/errata/RHSA-2010-0812.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/thunderbird-1.5.0.12-33.el4.centos.i386.rpm source: updates/SRPMS/thunderbird-1.5.0.12-33.el4.centos.src.rpm You may update your CentOS-4 i386 installations by running the command: yum update thunderbird Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

openldap fails to authenticate
by Tim Dunphy 02 Nov '10

02 Nov '10

I am attempting to setup an LDAP server under CentOS 5.4. However I am unable to search my ldap directory even tho I am supplying the proper credentials for the Manager account: [root@ldap openldap]# ldapsearch -x -h ldap -D 'cn=Manager,dc=example,dc=net' -W -b 'dc=example,dc=net' Enter LDAP Password: ldap_bind: Invalid credentials (49) Anonymous searches do work however: ldapsearch -x -h ldap -b "dc=example,dc=net" -s sub "objectclass=*" [root@ldap openldap]# ldapsearch -x -h ldap -b "dc=example,dc=net" -s sub "objectclass=*" # extended LDIF # # LDAPv3 # base <dc=example,dc=net> with scope subtree # filter: objectclass=* # requesting: ALL # # search result search: 2 result: 32 No such object I am currently attempting to use the actual word 'secret' to authenticate the Manager account: database bdb suffix "dc=example,dc=net" rootdn "cn=Manager,dc=example,dc=net" # Cleartext passwords, especially for the rootdn, should # be avoided. See slappasswd(8) and slapd.conf(5) for details. # Use of strong authentication encouraged. rootpw secret # rootpw {CRYPT}secret And I am getting error 49's in my openldap logs with loglevel set to 296 /var/log/openldap.log Nov 2 15:45:58 ldap slapd[3522]: slapd starting Nov 2 15:46:14 ldap slapd[3522]: conn=0 fd=11 ACCEPT from IP=127.0.0.1:44552 (IP=0.0.0.0:389) Nov 2 15:46:14 ldap slapd[3522]: conn=0 op=0 BIND dn="cn=Manager,dc=example,dc=net" method=128 Nov 2 15:46:14 ldap slapd[3522]: conn=0 op=0 RESULT tag=97 err=49 text= Nov 2 15:46:14 ldap slapd[3522]: conn=0 fd=11 closed (connection lost) this is how I have configured my ldap.conf BASE dc=example,dc=net HOST localhost URI ldap://ldap.example.net and for some reason slapd is listening on port 3774 even tho I haven't told it to: [root@ldap network-scripts]# netstat -tulnp | grep 389 tcp 0 0 0.0.0.0:389 0.0.0.0:* LISTEN 3774/slapd [root@ldap network-scripts]# netstat -tulnp | grep slapd tcp 0 0 0.0.0.0:389 0.0.0.0:* LISTEN 3774/slapd I haven't specified port 3774 _anywhere_ in my ldap config: [root@ldap network-scripts]# grep 3774 /etc/ldap thanks in advance for your help -- Here's my RSA Public key: gpg --keyserver pgp.mit.edu --recv-keys 5A4873A9 Share and enjoy!!

2 1

Best supported motherboard
by Basil Kurian 02 Nov '10

02 Nov '10

Which among these three motherboard is the best supported in Linux (Centos/Ubuntu) ? Intel® Desktop Board DH55HC [ http://ark.intel.com/Product.aspx?id=42409 ] Intel® Desktop Board DP55WG [ http://ark.intel.com/Product.aspx?id=40078 ] Intel® Desktop Board DP55KG [ http://www.intel.com/products/desktop/motherboards/DP55KG/DP55KG-overview.h…] Also which will be a good processor , for using in a desktop PC to run 4 or 5 Virtual machines concurrently on VirtualBox or VMWare ESX server ? Intel® Xeon® Processor X3460 [ http://ark.intel.com/Product.aspx?id=42931 ] or Intel® Core™ i7-870S [ http://ark.intel.com/Product.aspx?id=48498 ] -- Regards Basil Kurian http://basil.co.nr RSA Public key : gpg --keyserver pgp.mit.edu --recv-keys 41005549

3 3

problem sending/recieving mails
by maina＠linuxmail.org 02 Nov '10

02 Nov '10

Hi all, I ave setup a CentOS server to act as LAN gateway and also as a transparent proxy server but all client "passing through" that server are enable to send or recieve mails. The mail server is host on the same LAN running mdaemon, both servers are on private IP block(192.168.0.0/24). Am using cisco router to do port forwading for mailserver(25,110,143) ports. If i eliminate CentOS box and direct traffic direct to cisco router everything works. My question is why is it when i use CentOS box as LAN gateway clients are unable to send/receive mails? I ave done nating on that box. Centos 5.5 full updated.

3 3

graphics error
by Ritika Garg 02 Nov '10

02 Nov '10

When I was running an application then on pressing a key the following message came: X Error of failed request: BadMatch (invalid parameter attributes) Major opcode of failed request: 42 (X_SetInputFocus) Serial number of failed request: 7345 Current serial number in output stream: 7347 It seems to be something related to graphics, but can't understand. After the above error came the application got terminated.

1 0

yum update
by Ritika Garg 02 Nov '10

02 Nov '10

I have updated certain packages through applications->system tools->software updater. Is there any command by which I can know which softwares I had updated?

2 1

Re: [CentOS] system logs out suddenly
by Ritika Garg 02 Nov '10

02 Nov '10

The graphics controller is Intel Corporation 82G33/G31 Express Integrated Graphics Controller This problem is occuring since the time I have updated firefox. Also whenever I open facebook the system hangs and sometimes logs out. But sites like yahoo, gmail, orkut are opening.

1 0

sound
by mattias 01 Nov '10

01 Nov '10

Are the sound muted as default?

2 2

grub irritants
by m.roth＠5-cent.us 01 Nov '10

01 Nov '10

It appears that if I do anything to grub.conf, say, take out the rhgb quiet, after every succeding kernel update, I have to manually edit grub.conf, because the kernel update - maybe the post install script? - will set the default to be the previous kernel. Has anyone got a solution to this, so that a kernel update will give the new kernel as the default? mark

3 8

Geany plugins out of sync
by Eduardo Grosclaude 01 Nov '10

01 Nov '10

I'm intending to do some version control, hence looking for some plugins. Geany and geany-plugins packages in Rpmforge seem to be out of sync: Name : geany-plugins Arch : i386 Version : 0.18 Release : 1.el5.rf Name : geany Arch : i386 Version : 0.19.1 Release : 1.el5.rf When both are installed, geany claims that plugins are not "binary-compatible". Frank's own hosted geany RPM (http://www.melvilletheatre.com/articles/el5/geany-0.19.1-1.i386.rpm) is even newer, but no geany-plugins there. Any chance for this to be repackaged? Or, some quick & dirty workaround? Thank you very much in advance! -- Eduardo Grosclaude Universidad Nacional del Comahue Neuquen, Argentina

3 3

system logs out suddenly
by Ritika Garg 01 Nov '10

01 Nov '10

I have CentOS5.3 installed on the system. I have updated firefox to firefox-3.6.11-2.el5.centos. While doing any work on the internet, suddenly the system logs out. What can be the problem?

2 1

Possible to reboot a system after kickstart installation without pressing a key?
by Sean Carolan 31 Oct '10

31 Oct '10

The subject just about says it all - I'm wondering if there is a way to do a completely hands-off installation, including the reboot at the end, without "Press any key to continue"?

3 4

migrating users to openldap
by Tim Dunphy 31 Oct '10

31 Oct '10

I noticed that when I migrated my users with the migrate_passwd.pl tool from PADL it didn't migrate the actual passwords (just the rest of the posixAccount info). I think I need to set the EXTENDED_SCHEMA variable and then try running the tool again. does anyone know what this should be? I actually thought there might be a migrate_shadow.pl tool that could accomplish this, but there doesn't appear to be anything like that among the PADL migration tools. So in short the user info is there in LDAP but no one can log in because all the password fields look like this: userPassword: {crypt}* Here is a more complete user entry that is currently in the system: 73 uid=bluethundr,ou=summitnjops,ou=staff,dc=summitnjhome,dc=com uid: bluethundr cn: Timothy P. givenName: Timothy P. sn: Dunphy objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: posixAccount loginShell: /usr/local/bin/bash uidNumber: 1001 gidNumber: 1002 homeDirectory: /home/bluethundr gecos: Timothy P. userPassword: {crypt}* thanks in advance for any tips you can share that will get this working! -- Here's my RSA Public key: gpg --keyserver pgp.mit.edu --recv-keys 5A4873A9 Share and enjoy!!

6 6

Xen guest not starting automatically
by Jussi Hirvi 30 Oct '10

30 Oct '10

I have a xen system with four guest OS's, (see list below). When I reboot the host, other guests autostart normally, but mail2 does not. I have found no explanation for this. The host and all guests are CentOS 5.5. [root@farm1 xen]# ls -l /etc/xen/auto total 0 lrwxrwxrwx 1 root root 8 Dec 11 2009 dawit -> ../dawit lrwxrwxrwx 1 root root 8 May 5 21:10 mail2 -> ../mail2 lrwxrwxrwx 1 root root 8 Nov 26 2009 mail3 -> ../mail3 lrwxrwxrwx 1 root root 6 Oct 29 2009 ns2 -> ../ns2 Here is my config for the problem guest: cat /etc /xen/mail2 name = "mail2" uuid = "68e33ec6-ef36-9eac-27d7-65a709684551" maxmem = 500 memory = 500 vcpus = 1 bootloader = "/usr/bin/pygrub" # kernel = "/var/lib/xen/boot_kernel.5g5MLq" # ramdisk = "/var/lib/xen/boot_ramdisk.1pSOoP" # extra = "ro root=LABEL=/ console=xvc0" on_poweroff = "destroy" on_reboot = "restart" on_crash = "restart" disk = [ "tap:aio:/vm/mail2.img,xvda,w" ] vif = [ "mac=00:16:36:24:67:3c,bridge=xenbr0,script=vif-bridge" ] - Jussi -- Jussi Hirvi * Green Spot Topeliuksenkatu 15 C * 00250 Helsinki * Finland Tel. +358 9 493 981 * Mobile +358 40 771 2098 (only sms) jussi.hirvi(a)greenspot.fi * http://www.greenspot.fi

3 6

RPM DB DSA Signature Errors
by Camron W. Fox 30 Oct '10

30 Oct '10

Alle, I'm running CentOS 4.8. I just started seeing these errors during RPM operations: error: rpmdbAdd: skipping h# 990 Header V3 DSA signature: BAD, key ID 443e1821 error: rpmdbNextIterator: skipping h# 969 Header V3 DSA signature: BAD, key ID 443e1821 I've cleared out the __db.* files and tried to rebuild the DB with no luck. I've also tried this: http://forums.fedoraforum.org/showthread.php?t=145858 and this: cd /var/lib tar zcvf /var/preserve/rpmdb-`date +"%d%m%Y"`.tar.gz rpm cd /var/lib/rpm ls -l rm -f __db* /usr/lib/rpm/rpmdb_verify Packages rpm -qa 1> /dev/null rpm -v --rebuilddb with no joy (also with the PubKeys). Any ideas as to what to try next would be *most* appreciated. Best Regards, Camron -- Camron W. Fox Hilo Office High Performance Computing Group Fujitsu Management Services of America, Inc. E-mail: cwfox(a)us.fujitsu.com

1 0

Projects.centos.org down?
by Glenn Eychaner 30 Oct '10

30 Oct '10

I have been trying to get to the CentOS LiveCD site at projects.centos.org the last couple of days, but have been unable to reach it. Is it down, and is there any info on when it might be back up? Thanks, -G. -- Glenn Eychaner (geychaner(a)lco.cl) Telescope Systems Programmer, Las Campanas Observatory

2 2

selinux with samba
by Geert Batsleer 29 Oct '10

29 Oct '10

I'm having problems setting up a samba server with sellinux in centos 5.6 (x64). My samba config works flawlessly when selinux is disabled but fails to access shares when selinux is enabled. Wich command makes it possible to run samba with selinux without disabling it, now I've done: "set sebool -P smbd_disable_trans 1" but doesn't really solve my problem. Thanks in advance! geert

3 2

How to access one machine behind iptables, on different subnet?
by Rudi Ahlers 29 Oct '10

29 Oct '10

Hi all, I wonder if someone can help me with this: The setup is as follows: 192.168.1.254 - wireless ADSL modem, with DHCP pool on 192.168.100 - 192.168.200 192.168.1.250 - Linux firewall RED interface 192.168.2.250 - Linux firewall GREEN interface. There are some normal LAN clients behind the Linux firewall's GREEN interface, which can all access each other's shared services and also all the clients behind the RED interface. i.e. those clients connected to the 192.168.1.254 ADSL wifi APP directly. Now I want the clients on the "outside" to connect to one specific host on the inside, behind the GREEN interface, on IP 192.168.1.20. How would I do that? I know I can do this with port fowarding, but need many ports forwarded. How do I give full access to all ports on this IP, instead of forwarding every port? Does that make sense? Currently no clients on the 192.168.1.0 subnect can access any client on the 192.168.2.0 subnet. [root@intranet ~]# iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT udp -- anywhere anywhere udp dpt:domain ACCEPT tcp -- anywhere anywhere tcp dpt:domain ACCEPT udp -- anywhere anywhere udp dpt:bootps ACCEPT tcp -- anywhere anywhere tcp dpt:bootps ACCEPT tcp -- anywhere anywhere tcp dpt:tftp ACCEPT tcp -- anywhere anywhere tcp dpt:http ACCEPT tcp -- anywhere anywhere tcp dpt:25151 Chain FORWARD (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere 192.168.122.0/24 state RELATED,ESTAB LISHED ACCEPT all -- 192.168.122.0/24 anywhere ACCEPT all -- anywhere anywhere REJECT all -- anywhere anywhere reject-with icmp-po rt-unreachable REJECT all -- anywhere anywhere reject-with icmp-po rt-unreachable ACCEPT all -- 192.168.2.0/24 anywhere ACCEPT all -- anywhere 192.168.2.0/24 Chain OUTPUT (policy ACCEPT) target prot opt source destination [root@intranet ~]# route -nv Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 192.168.2.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1 192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth1 0.0.0.0 192.168.1.254 0.0.0.0 UG 0 0 0 eth0 The Linux firewall runs CentOS 5.5. x64 [root@intranet ~]# cat /etc/redhat-release CentOS release 5.5 (Final) [root@intranet ~]# iptables -V iptables v1.3.5 -- Kind Regards Rudi Ahlers SoftDux Website: http://www.SoftDux.com Technical Blog: http://Blog.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

3 2

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss