- Discuss - lists.centos.org

ls this bandwidth package availblale in Centos
by adrian kok 30 Sep '10

30 Sep '10

Hi ls the if top package availblale in Centos? http://www.ex-parrot.com/~pdw/iftop/ Thank you

4 3

Transferring system to new RAID drive
by Matt 29 Sep '10

29 Sep '10

> Is there a document with instructions for this? > I've had smartd warnings that a hard disk in my server is sick, > so I am installing a new drive (in addition to the old). Not to hijack a thread but on a similiar note. I have a Centos 4.x server with a 500G sata drive working fine except for disk I/O issues at peak times. I have copied it to a new drive before using 'dd if=/dev/sda of=/dev/sdb bs=16384' in middle of night offline. I did that in past because 'smartctl -a /dev/sda' did not work on the old drive. Is there a way to copy it to a hardware RAID 1 array of two drives in a similiar way? If so what not too expensive 2 port hardware raid controller do you reccommend and how do you do it? Thanks. Matt

3 4

Acronis True Image or Clonezilla
by Timothy Murphy 29 Sep '10

29 Sep '10

I want to clone a small (80GB) disk on my CentOS server to a large (1.5TB) disk, as smart has been giving me warnings of unreadable sectors. Both disks are Western Digital, and WD has a WD version of Acronis True Image. I'm not sure whether to use this or Clonezilla. My worry with Acronis is that I want to keep the original disk, and I'm not sure from the documentation if True Image allows this. Any opinions on the better of the two? -- Timothy Murphy e-mail: gayleard /at/ eircom.net tel: +353-86-2336090, +353-1-2842366 s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland

5 11

XFS on a 25 TB device
by Boris Epstein 29 Sep '10

29 Sep '10

Hello all, I have just configured a 64-bit CentOS 5.5 machine to support an XFS filesystem as specified in the subject line. The filesystem will be used to store an extremely large number of files (in the tens of millions). Due to its extremely large size, would there be any non-standard XFS build/configuration options I should consider? Thanks. Boris.

7 11

qemu
by mattias 29 Sep '10

29 Sep '10

No i can start qemu but no network I have a bridge br0 with ta0 on it My start line qemu debian.5-0.x86.20100901.qcow --curses -net nic -net tap,ifname=tap0,script=no

3 3

[Slightly OT] "Open Source Development + Tools" - Book/Resource?
by Tim Nelson 29 Sep '10

29 Sep '10

Greetings all- My apologies for the slightly OT post. My primary production platform *IS* CentOS 5.x with a minor scattering of 4.x machines behind firewalls here and there... I find that I'm being placed more and more into a 'quasi-developer' role which strays some from my normal system/network admin duties. Specifically, having to work with the deep internals of make, autoconf, libtool, cross platform compilation, non-standard libs, etc. My head spins some days trying to work through some of these types of issues. I'm hoping someone knows of a good resource or book that explains the general 'open source' or '*NIX' method of application development, compilation, and dependency/library handling. Specifically, how to take source, and turn it into a "./configure, make, make install" type release and everything that is involved in doing so. I certainly have experience compiling, installing, using software in this manner, but I would like (need?) to learn more about how it all works. Google has been helpful if I'm looking for direct documentation of each of the standard tools (gcc, make, autoconf, libtool, etc), but I've been unable to find something that details the components together, and explains their relationship. Again, my apologies for the OT post. I hope some bright minds on the list can shed a few thoughts. --Tim

7 7

Forbidden: can't access *.html files in /var/www/html
by Alexander Farber 29 Sep '10

29 Sep '10

Hello, I'm using the latest CentOS with phpBB 3.0.x + postgreSQL + sendmail (relayed through gmail.com) - all those programs working fine, with no big modifications of the CentOS defaults (i.e. SELinux is on). Now I'm struggling with the seemingly simple problem, that when I put an .html file into /var/www/html/ then Apache won't serve it. In the browser I see: "Forbidden You don't have permission to access /Alex.html on this server. Apache/2.2.3 (CentOS) Server at XXXX Port 80" In the /var/log/httpd/error_log (I've set "LogLevel debug") I only see: "[error] [client 10.216.40.68] (13)Permission denied: access to /Alex.html denied [error] [client 10.216.40.68] (13)Permission denied: access to /Alex.html denied" The other filetypes like crossdomain.xml and index.php or hello-world.php are served just fine. Also, if I move my *.html files under /var/www/html/test/ - then they are served ok. The permissions are ok in my book: # ls -al Alex.html index.php hello-world.php -r--r--r-- 1 root root 599 Sep 29 15:49 Alex.html -rw-r--r-- 1 afarber afarber 33 Jul 29 11:32 hello-world.php -rw-r--r-- 1 root root 5631 Jun 27 09:38 index.php # ls -ald / /var /var/www /var/www/html drwxr-xr-x 23 root root 4096 Sep 29 15:54 / drwxr-xr-x 22 root root 4096 Jun 22 15:25 /var drwxr-xr-x 8 root root 4096 Sep 29 11:45 /var/www drwxr-xr-x 16 root root 4096 Sep 29 15:59 /var/www/html # cat /var/www/html/.htaccess (installed by phpBB) <Files "config.php"> Order Allow,Deny Deny from All </Files> <Files "common.php"> Order Allow,Deny Deny from All </Files> # /usr/sbin/getsebool -a | grep http allow_httpd_anon_write --> off allow_httpd_bugzilla_script_anon_write --> off allow_httpd_cvs_script_anon_write --> off allow_httpd_mod_auth_pam --> off allow_httpd_nagios_script_anon_write --> off allow_httpd_prewikka_script_anon_write --> off allow_httpd_squid_script_anon_write --> off allow_httpd_sys_script_anon_write --> off httpd_builtin_scripting --> on httpd_can_network_connect --> off httpd_can_network_connect_db --> off httpd_can_network_relay --> off httpd_can_sendmail --> on httpd_disable_trans --> off httpd_enable_cgi --> on httpd_enable_ftp_server --> off httpd_enable_homedirs --> on httpd_read_user_content --> off httpd_rotatelogs_disable_trans --> off httpd_ssi_exec --> off httpd_suexec_disable_trans --> off httpd_tty_comm --> on httpd_unified --> on httpd_use_cifs --> off httpd_use_nfs --> off I've looked into /etc/httpd/conf/httpd.conf and conf.d/ files... Does anybody know what is wrong, how to find out? Regards Alex

8 12

CentOS-announce Digest, Vol 67, Issue 9
by centos-announce-request＠centos.org 29 Sep '10

29 Sep '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2010:0715 CentOS 5 x86_64 xorg-x11-drv-ati Update (Karanbir Singh) 2. CEBA-2010:0715 CentOS 5 i386 xorg-x11-drv-ati Update (Karanbir Singh) 3. CEBA-2010:0712 CentOS 5 x86_64 perl Update (Karanbir Singh) 4. CEBA-2010:0712 CentOS 5 i386 perl Update (Karanbir Singh) 5. CESA-2010:0720 Moderate CentOS 3 i386 mikmod - security update (Tru Huynh) 6. CESA-2010:0720 Moderate CentOS 3 x86_64 mikmod - security update (Tru Huynh) 7. CESA-2010:0720 Moderate CentOS 4 i386 mikmod - security update (Tru Huynh) 8. CESA-2010:0720 Moderate CentOS 4 x86_64 mikmod - security update (Tru Huynh) 9. CESA-2010:0718 Important CentOS 4 i386 kernel - security update (Tru Huynh) 10. CESA-2010:0718 Important CentOS 4 x86_64 kernel - security update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Tue, 28 Sep 2010 12:52:52 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0715 CentOS 5 x86_64 xorg-x11-drv-ati Update To: centos-announce(a)centos.org Message-ID: <20100928125252.GA7107(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0715 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0715.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 236d22c871a93d27bef49f12e394cb2d xorg-x11-drv-ati-6.6.3-3.27.el5_5.1.x86_64.rpm Source: 7e45d2fabb3c8f46c014afdc39f4b757 xorg-x11-drv-ati-6.6.3-3.27.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 28 Sep 2010 12:52:52 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0715 CentOS 5 i386 xorg-x11-drv-ati Update To: centos-announce(a)centos.org Message-ID: <20100928125252.GA7094(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0715 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0715.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: e84c3e9c215431f4002d177a70e04b68 xorg-x11-drv-ati-6.6.3-3.27.el5_5.1.i386.rpm Source: 7e45d2fabb3c8f46c014afdc39f4b757 xorg-x11-drv-ati-6.6.3-3.27.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Tue, 28 Sep 2010 15:07:36 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0712 CentOS 5 x86_64 perl Update To: centos-announce(a)centos.org Message-ID: <20100928150736.GA7683(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0712 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0712.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 3bed17cb47beee0b411cb95cda8edbe3 perl-5.8.8-32.el5_5.2.x86_64.rpm e8a310722df79be050af527862598142 perl-suidperl-5.8.8-32.el5_5.2.x86_64.rpm Source: f2f05fcee0cac84f078151062e39d320 perl-5.8.8-32.el5_5.2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Tue, 28 Sep 2010 15:07:35 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0712 CentOS 5 i386 perl Update To: centos-announce(a)centos.org Message-ID: <20100928150735.GA7668(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0712 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0712.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 7e375cefe264020b716c39ed2d234ae2 perl-5.8.8-32.el5_5.2.i386.rpm 9053936d0b0f171e74dc3ea4597b2816 perl-suidperl-5.8.8-32.el5_5.2.i386.rpm Source: f2f05fcee0cac84f078151062e39d320 perl-5.8.8-32.el5_5.2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Wed, 29 Sep 2010 11:47:44 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2010:0720 Moderate CentOS 3 i386 mikmod - security update To: centos-announce(a)centos.org Message-ID: <20100929094744.GA15026(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2010:0720 mikmod security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2010-0720.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/mikmod-3.1.6-23.el3.i386.rpm updates/i386/RPMS/mikmod-devel-3.1.6-23.el3.i386.rpm source: updates/SRPMS/mikmod-3.1.6-23.el3.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update mikmod Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

Transferring system to new drive
by Timothy Murphy 29 Sep '10

29 Sep '10

Is there a document with instructions for this? I've had smartd warnings that a hard disk in my server is sick, so I am installing a new drive (in addition to the old). I was thinking of copying the old root partition with sudo cp -a -P /* /mnt/hd (after mounting the prospective new root partition). Then I'd have to modify the new /etc/fstab . Is that a sensible approach? -- Timothy Murphy e-mail: gayleard /at/ eircom.net tel: +353-86-2336090, +353-1-2842366 s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland

17 34

qemu
by mattias 29 Sep '10

29 Sep '10

How to start qemu in textmode The --curses option are removed

3 9

netstat - kill by pid ?
by Carlos S 29 Sep '10

29 Sep '10

I am writing a small script to kill process(es) listening on particular port number. Here I am particularly looking at Java servlet-containers like Tomcat and JBoss, which sometimes don't complete their shutdown process and it still shows up as running process with ps or netstat. This needs to be kill-ed and for that knowing pid of that process is necessary. The netstat by default doesn't give only pid(s), so one has to use sed/awk/tr like utility to extract pid info. Does anyone know any program/utility which gives pid(s) based on listening port numbers? Or is there any option in netstat that I am missing? Thanks, CS.

4 4

Centos-ds directory console problem
by guy＠desgames.com 28 Sep '10

28 Sep '10

I installed centos-ds on a 5.5 installation, following the instructions to a tee, however now when I log onto the Directory Console I only get the Servers and Applications and Users and Groups tabs - no Configuration or Tasks tabs. Initially I was using the wrong password for the Directory Manager user, but when I put in the correct password it just sat there saying "Authenticating Directory Manager..." (something like that). So I followed the instructions to change the password, but now it just does the same thing as before - lets me in, but with no Configuration or Tasks tabs. Obviously I'm being logged in as just an admin user as I can add users, groups and ou's to the tree. Any help on this would be most appreciated. Thanks, Guy

1 0

A question about DRBD and nfs
by Chuck Payne 28 Sep '10

28 Sep '10

Hi, I been working on for about a month and half on setup drbd and nfs. I keep running into issue with the way heartbeat/pacemaker handles nfs. Does anyone know a good way to set up a HA NFS server with DRBD and Heartbeat and NFS. I am willing to share my pain in setting it up. Chuck Payne NEO Linux System Engineer chuck.payne(a)vocolacity.com

2 1

ethtool
by m.roth＠5-cent.us 28 Sep '10

28 Sep '10

We've just moved one a new server from our sever room, where I built it, to the datacenter. We want to force autoneg off, and tell it gigabit and full duplex. Using ethtool, I get no errors setting the speed or duplex. HOWEVER, autoneg on works... and autoneg off utterly refuses to work, and gives: ethtool -s eth0 autoneg off Cannot set new settings: Invalid argument not setting autoneg We're on the most current update of CentOS (ok, last kernel, that will come up on the reboot I'll do shortly), and it's a Broadcom Corporation NetXtreme II BCM5716 Gigabit Ethernet Anyone have an idea what's going on here? mark

3 4

RAID rebuild time and disk utilization....
by Tom Bishop 28 Sep '10

28 Sep '10

So I'm in the process of building and testing a raid setup and it appeared to take along time to build I came across some settings for setting the min amount of time and that helped but it appears that one of the disks is struggling (100 utilization) vs the other one...I was wondering if anyone else has seen this and if so, is their a solution for it...my 2 disks are 1 Samsung F3 1tb /dev/sdb and 1 Seagate 7200.12 1Tb /dev/sdc...smartctl looks good on both.... sar -dbpqu -P ALL 60 1 Linux 2.6.18-194.11.4.el5 (dpcserver) 09/27/2010 10:09:41 AM CPU %user %nice %system %iowait %steal %idle 10:10:41 AM all 0.03 0.00 1.11 0.00 0.00 98.86 10:10:41 AM 0 0.00 0.00 0.00 0.00 0.00 100.00 10:10:41 AM 1 0.10 0.00 1.25 0.00 0.00 98.65 10:10:41 AM 2 0.00 0.00 3.18 0.02 0.00 96.80 10:10:41 AM 3 0.00 0.00 0.02 0.00 0.00 99.98 10:09:41 AM tps rtps wtps bread/s bwrtn/s 10:10:41 AM 838.27 836.41 1.87 107059.98 32.54 10:09:41 AM DEV tps rd_sec/s wr_sec/s avgrq-sz avgqu-sz await svctm %util 10:10:41 AM sda 0.93 0.00 16.27 17.43 0.00 2.12 0.29 0.03 10:10:41 AM sda1 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 10:10:41 AM sda2 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 10:10:41 AM sda3 0.93 0.00 16.27 17.43 0.00 2.12 0.29 0.03 10:10:41 AM sdb 209.10 26764.99 0.00 128.00 30.90 148.02 4.78 100.02 10:10:41 AM sdb1 209.10 26764.99 0.00 128.00 30.90 148.02 4.78 100.02 10:10:41 AM sdc 209.10 26764.99 0.00 128.00 0.41 1.94 0.60 12.57 10:10:41 AM sdc1 209.10 26764.99 0.00 128.00 0.41 1.94 0.60 12.57 10:10:41 AM md0 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 10:09:41 AM runq-sz plist-sz ldavg-1 ldavg-5 ldavg-15 10:10:41 AM 0 167 1.02 1.03 1.00 Thanks in advance.....

5 12

how to get ASUS USB-N13 802.11n net adapter working on 5.5?
by Robert P. J. Day 28 Sep '10

28 Sep '10

first, the short form of the question -- has anyone got that wireless adapter working on centos 5.5 and associated with an access point that uses WPA/WPA2 security? and the details. in a classroom where there is *no* wired networking at all, all PCs have only that wireless net adapter, which works fine on windows but, after installing centos 5.5, unsurprisingly, we have no networking. there is no backup wired network, and no other adapters. there is a CD that came with the adapters, with a Linux directory, so it was easy enough to dump that onto my personal centos 5.5 box, and run "make" which generated the loadable "rt3070sta.ko" module. and, yes, that module loads. so far, so good. however, that still doesn't do it as based on what i've read online), because the access point here uses WPA/WPA2, i need to use wpa_supplicant to be able to configure the wireless interface for that. and that's about when i got kicked out of the classroom as they were closing for the evening. thoughts? any advice humongously appreciated. rday -- ======================================================================== Robert P. J. Day Waterloo, Ontario, CANADA Top-notch, inexpensive online Linux/OSS/kernel courses http://crashcourse.ca Twitter: http://twitter.com/rpjday LinkedIn: http://ca.linkedin.com/in/rpjday ========================================================================

4 4

Dell HSPA 5530 - Built-in 3G - Not detected
by Janne Nyman 28 Sep '10

28 Sep '10

Hi all, I have been trying to get CentOS 5.5 running on my Laptop for a while now. I am currently running Fedora 13 for the only reason that my Dell Wireless HSPA 5530 built-in 3G Mobile Device is working. I have tried loading the bcm43xx modules after reading several posts on Google but not able to get this working at all. I have run CentOS on my servers for a while now and love it. Just this last bit that holds me back from going fullt to CentOS. My laptop is a Dell E6400 and I have tried with both x86 and x86_64 without luck. Has anyone else got this working or have any clues to the steps I can take to get closer to a working solution? -- Rgds, Janne Nyman E: jnyman(a)jbtec.org

3 2

logwatch question
by lostson 28 Sep '10

28 Sep '10

Hello A few weeks ago I started having problems with my system email or specifically my logwatch reports showing up in my inbox. I got most of those issues figued out except one now when i get an email from my system it has a title of this Cron <root@localhost> run-parts /etc/cron.daily with this message /etc/cron.daily/0logwatch: Recipient names must be specified I have my aliases set right and have been googling for an answer and just cant seem to find anything pointing me in the right direction. But this has been going on for awhile now and i would like to get my normal reports back that i used to get. I have never had to do much else except set my aliases file up correctly and i just always got the daily reports. I am probably missing something amazingly simple but i just cant seem to find it any ideas, thanks. LostSon http://lostsonsvault.org

2 1

Question on installing .run file
by Jerry Geis 28 Sep '10

28 Sep '10

I am trying to automate the install of the ati driver package. Basically all I do is hit return about 6 times and take all the defaults. I tried to do this in a file that I then made executable with 744: sh ati-driver-installer-10-8-x86.x86_64.run << EOF EOF but then it starts like its doing something but never does anything. How might I automate such an install script. Again all I do is hit return 6 times and accept all the defaults. Thanks, Jerry

4 5

(In)(x)sane privilege/access issue
by Mark 27 Sep '10

27 Sep '10

I just picked up a new HP OfficeJet J3680 all-in-one (because, as previously posted, my 4315 broke), and I was able to install the printer using the latest hplip's hp-setup command, BUT: My sane: libsane-hpaio.x86_64 1.6.7-4.1.el5.4 installed sane-backends.x86_64 1.0.18-5.el5 installed sane-backends-devel.i386 1.0.18-5.el5 installed sane-backends-devel.x86_64 1.0.18-5.el5 installed sane-backends-libs.i386 1.0.18-5.el5 installed sane-backends-libs.x86_64 1.0.18-5.el5 installed sane-frontends.x86_64 1.0.14-1.2.2 installed xsane.x86_64 0.991-5.el5 installed xsane-gimp.x86_64 0.991-5.el5 installed doesn't recognize that there is a scanner out there and only loads the interface for my old ScanJet 3300C: [mar@marichter ~]$ lsusb Bus 001 Device 001: ID 0000:0000 Bus 002 Device 012: ID 03f0:0205 Hewlett-Packard ScanJet 3300c Bus 002 Device 006: ID 04f9:0033 Brother Industries, Ltd Bus 002 Device 001: ID 0000:0000 In fact, the new scanner doesn't even show up unless: [mar@marichter ~]$ sudo lsusb [sudo] password for mar: Bus 001 Device 001: ID 0000:0000 Bus 002 Device 015: ID 03f0:3112 Hewlett-Packard Bus 002 Device 012: ID 03f0:0205 Hewlett-Packard ScanJet 3300c Bus 002 Device 006: ID 04f9:0033 Brother Industries, Ltd Bus 002 Device 001: ID 0000:0000 If I run xsane from the command line as root (i.e., with sudo), then it works, but then I also get that WARNING DANGER WILL ROBINSON message, which is both annoying and probably likely to cause problems with file permissions on my scans. So, how do I (a non-root user) get x/sane to see the new USB device when it only appears to visible to the root user? What am I missing? Thanks. Mark

1 1

Re: [CentOS] Configuring BIND to answer to two domain names (four IP addresses)
by Dotan Cohen 27 Sep '10

27 Sep '10

On Mon, Sep 27, 2010 at 13:27, Brent L. Bates <blbates(a)vigyan.com> wrote: > Just noticed something. Have your serial number reflect the date you > last updated the file. That way you will know when you last changed it. For > example, today is September 27, 2010, if you were making your first update > today, make the serial number 2010092701. I add on 2 digits at the end in > case I need to make more than one change in one day. Changing it 10 times in > one day isn't likely, but just in case that isn't enough, I know *I* will not > be making more than 100 changes in one day. Serial numbers ALWAYS have to > increase with each change. That is the way other name servers know they need > to update their information. If the serial number is bigger than what they > have stored, then they know they need to download the new information. If you > plan on updating the DNS information more than 100 times a day, you will need > to give yourself some extra digits. I hope this is of some help. > I think that the fine manual mentioned something about if one hundreds edits were done in a single day, then it is time to go home and get some sleep! -- Dotan Cohen http://gibberish.co.il http://what-is-what.com

1 0

Re: [CentOS] CentOS, Firefox, and Java Plugin
by ken 27 Sep '10

27 Sep '10

CCing the CentOS group on this... maybe someone there knows how to handle the error. On 09/23/2010 03:19 PM ken wrote: > On 09/23/2010 01:29 PM Mathieu Baudier wrote: >>> As it turns out, I don't have the Argeo version. If I'm still >>> having >> But you have the java browser plugin? Sorry to not answer this part in my previous email. I wanted to search around to see if I could get the answer for myself... and it hasn't been easy. Apparently I don't have the java plugin browser installed. I've tried to install it using the rpm.bin file at <http://java.com/en/download/linux_manual.jsp?locale=en&host=java.com>, but it's erroring out: "/bin/sh: bad interpreter: Text file busy". I've never seen that error before. >> >> Can you please send me the output of your 'java -version' command >> please? > > # java -version > java version "1.6.0_0" > OpenJDK Runtime Environment (IcedTea6 1.6) (rhel-1.13.b16.el5-i386) > OpenJDK Client VM (build 14.0-b16, mixed mode) > > -- Find research and analysis on US healthcare, health insurance, and health policy at: <http://healthpolicydaily.blogspot.com/>

7 15

Bugzilla 3.6.2 + sendmail + SELinux
by Mathieu Baudier 27 Sep '10

27 Sep '10

Hello, I have deployed Bugzilla 3.6.2 on CentOS 5 (with rpmforge perl-* packages) and I have a problem with SELinux preventing mail being sent via sendmail. (see SELinux reports below, especially the second one) When SELinux is in permissive mode, mail sending from Bugzilla is working properly. Has anybody got recent Bugzilla to work with SELinux on CentOS? Thanks in advance! Mathieu -------------------------------------------------------------------------------- Summary: SELinux is preventing the sendmail from using potentially mislabeled files ./spool (var_spool_t). Detailed Description: SELinux has denied the sendmail access to potentially mislabeled files ./spool. This means that SELinux will not allow httpd to use these files. Many third party apps install html files in directories that SELinux policy cannot predict. These directories have to be labeled with a file context which httpd can access. Allowing Access: If you want to change the file context of ./spool so that the httpd daemon can access it, you need to execute it using chcon -t httpd_sys_content_t './spool'. You can look at the httpd_selinux man page for additional information. Additional Information: Source Context system_u:system_r:httpd_bugzilla_script_t Target Context system_u:object_r:var_spool_t Target Objects ./spool [ dir ] Source sendmail Source Path /usr/sbin/sendmail.sendmail Port <Unknown> Host <Unknown> Source RPM Packages sendmail-8.13.8-8.el5 Target RPM Packages Policy RPM selinux-policy-2.4.6-279.el5_5.1 Selinux Enabled True Policy Type targeted MLS Enabled True Enforcing Mode Enforcing Plugin Name httpd_bad_labels Host Name www Platform Linux www 2.6.18-194.11.4.el5 #1 SMP Tue Sep 21 05:04:09 EDT 2010 x86_64 x86_64 Alert Count 1 First Seen Mon Sep 27 02:07:43 2010 Last Seen Mon Sep 27 02:07:43 2010 Local ID 24372577-2d4c-4bbe-be6b-ea9100b7c3ed Line Numbers 11701, 11702 Raw Audit Messages type=AVC msg=audit(1285546063.60:15): avc: denied { search } for pid=3420 comm="sendmail" name="spool" dev=dm-2 ino=158722 scontext=system_u:system_r:httpd_bugzilla_script_t:s0 tcontext=system_u:object_r:var_spool_t:s0 tclass=dir type=SYSCALL msg=audit(1285546063.60:15): arch=c000003e syscall=80 success=no exit=-13 a0=7fffeddf6060 a1=17 a2=fff a3=0 items=0 ppid=3418 pid=3420 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=51 sgid=51 fsgid=51 tty=(none) ses=4294967295 comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:httpd_bugzilla_script_t:s0 key=(null) -------------------------------------------------------------------------------- Summary: SELinux is preventing sendmail (httpd_bugzilla_script_t) "create" to <Unknown> (httpd_bugzilla_script_t). Detailed Description: SELinux denied access requested by sendmail. It is not expected that this access is required by sendmail and this access may signal an intrusion attempt. It is also possible that the specific version or configuration of the application is causing it to require additional access. Allowing Access: You can generate a local policy module to allow this access - see FAQ (http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable SELinux protection altogether. Disabling SELinux protection is not recommended. Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi) against this package. Additional Information: Source Context system_u:system_r:httpd_bugzilla_script_t Target Context system_u:system_r:httpd_bugzilla_script_t Target Objects None [ unix_dgram_socket ] Source sendmail Source Path /usr/sbin/sendmail.sendmail Port <Unknown> Host <Unknown> Source RPM Packages sendmail-8.13.8-8.el5 Target RPM Packages Policy RPM selinux-policy-2.4.6-279.el5_5.1 Selinux Enabled True Policy Type targeted MLS Enabled True Enforcing Mode Enforcing Plugin Name catchall Host Name www Platform Linux www 2.6.18-194.11.4.el5 #1 SMP Tue Sep 21 05:04:09 EDT 2010 x86_64 x86_64 Alert Count 1 First Seen Mon Sep 27 02:07:43 2010 Last Seen Mon Sep 27 02:07:43 2010 Local ID f7aa29e4-40d9-4184-904e-4dfb93c57ea7 Line Numbers 11703, 11704 Raw Audit Messages type=AVC msg=audit(1285546063.61:16): avc: denied { create } for pid=3420 comm="sendmail" scontext=system_u:system_r:httpd_bugzilla_script_t:s0 tcontext=system_u:system_r:httpd_bugzilla_script_t:s0 tclass=unix_dgram_socket type=SYSCALL msg=audit(1285546063.61:16): arch=c000003e syscall=41 success=no exit=-13 a0=1 a1=2 a2=0 a3=7373696d72655020 items=0 ppid=3418 pid=3420 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=51 sgid=51 fsgid=51 tty=(none) ses=4294967295 comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:httpd_bugzilla_script_t:s0 key=(null)

2 3

Raid 10 questions...2 drive
by Tom Bishop 27 Sep '10

27 Sep '10

I have been reading lots of stuff but trying to find out if a raid10 2drive setup is any better/worse than a normal raid 1 setup....I have to 1Tb drives for my data and a seperate system drive, I am only interested in doing raid on my data... So i setup my initial test like this.... mdadm -v --create /dev/md0 --chunk 1024 --level=raid10 --raid-devices=2 /dev/sdb1 /dev/sdc1 I have also read about near and far but was going to play with this and was wondering if anyone had any insights for 2 drives setup...Thanks...

12 19

operating system upgrade/reinstall
by Zhiyong Zhang 27 Sep '10

27 Sep '10

Hello, I am planning to upgrade the operating system from CentOS4.8 to the latest CentOS5. Is there a detailed, step by step instruction on the installation/.upgrade procedure? Thank you very much for any suggestions and advices, Sincerely, Zhiyong

2 1

couple questions about initrd.img
by Robert P. J. Day 27 Sep '10

27 Sep '10

here's hoping this is on topic. as part of the extra goodies i'm going to give my RHEL/centos basic admin class this week, i'm going to get them to open up the standard initrd.img file and see what's inside. i just did that myself and have a couple simple questions. first, while the cpio archive physically contains a number of basic /dev special files, the top-level "init" script runs "mknod" to create them all, anyway. not a big deal, but is it fair to say that populating the initrd.img with those initial /dev files is redundant since init creates them all, anyway? also, i note that that "init" script appears to call a couple scripts/commands that don't exist in the initrd, such as hotplug and mkblkdevs. again, not a big deal but if i show the students what's in that initrd, chances are someone's going to notice the above and ask about it, so i might as well have an answer. thanks. rday -- ======================================================================== Robert P. J. Day Waterloo, Ontario, CANADA Top-notch, inexpensive online Linux/OSS/kernel courses http://crashcourse.ca Twitter: http://twitter.com/rpjday LinkedIn: http://ca.linkedin.com/in/rpjday ========================================================================

2 1

Re: [CentOS] dev.centos.org backuppc package
by Jason Pyeron 27 Sep '10

27 Sep '10

> -----Original Message----- > From: Jason Pyeron > Sent: Sunday, September 26, 2010 1:02 > To: CentOS mailing list > Subject: dev.centos.org backuppc package > > I have a few updates to fix some bugs. > Do attachments get striped? -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Principal Consultant 10 West 24th Street #100 - - +1 (443) 269-1555 x333 Baltimore, Maryland 21218 - - - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- This message is copyright PD Inc, subject to license 20080407P00.

2 1

Configuring BIND to answer to two domain names (four IP addresses)
by Dotan Cohen 26 Sep '10

26 Sep '10

On a CentOS 5 server, I am having a hard time configuring BIND to answer to 4 IP addresses for 2 domain names. Currently, I have four IP addresses, for sake of discussion they are: 1.1.1.1 1.1.1.2 1.1.1.3 1.1.1.4 Additionally, I have two domain names. For sake of discussion: exampleA.com exampleB.com My goal is to have 1.1.1.1 & 1.1.1.2 as the nameservers for exampleA.com, and 1.1.1.3 & 1.1.1.4 as the nameservers for exampleB.com. Apache is running on this machine, and should of course serve pages for the sites. I think that I've got the apache configuration down, but the BIND configuration is eluding me. I've read the following fine manual, but I am still stuck: http://www.centos.org/docs/5/html/Deployment_Guide-en-US/ch-bind.html Additionally, I have googled for "how to configure bind for multiple domain names" and the like, but I see no mention of the IP addresses configuration. Can I simply configure any IP address that the server answers to as the nameservers? What am I missing? Thank you in advance! -- Dotan Cohen http://gibberish.co.il http://what-is-what.com

8 42

Mock on 5.5 x86_64 failing with Could not find useradd in chroot, maybe the install failed?
by Jason Pyeron 25 Sep '10

25 Sep '10

I am atempting to work with some rpms in the c5-testing repo. When I add: [c5-testing] name=CentOS-5 Testing baseurl=http://dev.centos.org/centos/5/testing/x86_64/ gpgcheck=1 gpgkey=http://dev.centos.org/centos/RPM-GPG-KEY-CentOS-testing to centos-5-x86_64.cfg, saving as centos-5-x86_64-testdev.cfg I get the aformentioned error. Example [mockbuild@localhost ~]$ mock -r centos-5-x86_64-testdev.cfg init init clean prep This may take a while Could not find useradd in chroot, maybe the install failed? ending done -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Principal Consultant 10 West 24th Street #100 - - +1 (443) 269-1555 x333 Baltimore, Maryland 21218 - - - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- This message is copyright PD Inc, subject to license 20080407P00.

1 1

ca-bundle.crt expired
by Timothy Murphy 25 Sep '10

25 Sep '10

I notice that the certificate /etc/pki/tls/certs/ca-bundle.crt on my CentOS-5.5 system expired on 7 Jan 2010, although the openssl-0.9.8e-12.el5_4.6 package was updated in March. What is the point of this certificate? -- Timothy Murphy e-mail: gayleard /at/ eircom.net tel: +353-86-2336090, +353-1-2842366 s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland

1 0

does having a centos wiki acct grant edit access?
by Robert P. J. Day 25 Sep '10

25 Sep '10

i just registered for a centos wiki account, and was wondering if this gives me edit capability. i'm prepping for the first of a number of RHEL/centos basic admin courses and currently working my way thru the wiki, collecting neat tricks and ideas and, occasionally, i'll stumble over typoes -- some minor, some not so much. for instance, here: http://wiki.centos.org/TipsAndTricks/YumAndRPM#head-61731905d2e34ac343baeef… the command is listed as: yum --disable "*" --enable "rpmforge" list available i'm guessing that should actually be: yum --disablerepo "*" --enablerepo "rpmforge" list available no? but even if i got edit access, i'd still be happier if someone eventually checked out any changes i made to validate them. whatever works best. rday -- ======================================================================== Robert P. J. Day Waterloo, Ontario, CANADA Top-notch, inexpensive online Linux/OSS/kernel courses http://crashcourse.ca Twitter: http://twitter.com/rpjday LinkedIn: http://ca.linkedin.com/in/rpjday ========================================================================

2 2

In the press, once again
by Timo Schoeler 24 Sep '10

24 Sep '10

May be a little bit off topic, but this gave me hard laugh: http://www.theregister.co.uk/2010/09/24/sysadmin_file_tools/ Windows admins use a virtualized CentOS machine to copy files because their own tools are not able to handle copying a bigger amount of data. :) Cheers, Timo

12 16

grep contents of file on remote server
by Tim Dunphy 24 Sep '10

24 Sep '10

Hello, I am attempting to grep the contents of a key file I have SCP'd to a remote server. I am able to cat it: [code] [bluethundr@LBSD2:~]$:ssh root@sum1 cat /root/id_rsa.pub root(a)lcent01.summitnjhome.com's password: ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApnUSYyrM96qIBZKjwSNYycgeSv/FAKE-KEY-DATA--KEY-DATA-PWReyVuOn9Fb/uH/FAKE-KEY-DATA-+ttLzUELGrfn/n+FAKE-KEY-DATA-/FAKE-KEY-DATA-/FAKE-KEY-DATA-/FAKE-KEY-DATA-== bluethundr(a)lbsd8-2.summitnjhome.com [/code] But I cannot cat / grep it in order to determine if this key is already in the authorized_hosts file of the remote host. [code] [bluethundr@LBSD2:~]$:ssh root@sum1 grep `cat /root/id_rsa.pub` /root/.ssh/id_rsa.pub root(a)lcent01.summitnjhome.com's password: /root/.ssh/id_rsa.pub:ssh-rsa ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApnUSYyrM96qIBZKjwSNYycgeSv/FAKE-KEY-DATA--KEY-DATA-PWReyVuOn9Fb/uH/FAKE-KEY-DATA-+ttLzUELGrfn/n+FAKE-KEY-DATA-/FAKE-KEY-DATA-/FAKE-KEY-DATA-/FAKE-KEY-DATA-== bluethundr(a)lbsd8-2.summitnjhome.com==: No such file or directory grep: root@bt-laptop: No such file or directory [/code] Ultimately, what I would like to do is script this in order to automate this process: [code] #!/bin/sh HOSTS="sum1 sum2 virt1 virt2 virt3 virt4 virt5 virt6 virt7" SSHDIR=~/.ssh RSYNC=/usr/local/bin/rsync KEYFILE=/home/bluethundr/.ssh/id_rsa.pub CAT='/bin/cat' GREP='/bin/grep' for h in $HOSTS ; do scp $KEYFILE root@$h:~/ if [ $? = 0 ]; then echo ; echo ; echo echo "KEY TRANSFERRED TO $h" else echo "KEY Transfer To $h has FAILED" exit 1 fi ssh root@$h $CAT /root/id_rsa.pub | $GREP -i /root/.ssh/authorized_keys if [ $? = 1 ]; then ssh root@$h $CAT /root/id_rsa.pub >> /root/.ssh/authorized_keys if [ $? = 0 ]; then echo ; echo ; echo echo "KEY APPENDED TO $h Authorized Hosts" else echo "KEY APPEND FAILED" fi exit 1 fi done [/code] This is what results from the above script: [code] [bluethundr@LBSD2:~/bin]$:./key-export.sh root(a)lcent01.summitnjhome.com's password: id_rsa.pub 100% 417 0.4KB/s 00:00 KEY TRANSFERRED TO sum1 ./key-export.sh: /bin/grep: not found root(a)lcent01.summitnjhome.com's password: [/code] And I'm pretty sure I have those variables set correctly in order to execute those commands: [code] [bluethundr@LBSD2:~/bin]$:ssh root@sum1 root(a)lcent01.summitnjhome.com's password: Last login: Fri Sep 24 07:34:02 2010 from 192.168.1.44 ######################################################### # SUMMITNJHOME.COM # # TITLE: LCENT01 BOX # # LOCATION: SUMMIT BASEMENT # # # ######################################################### [root@LCENT01:~]#which grep /bin/grep [root@LCENT01:~]#which cat /bin/cat [/code]

3 2

mcelog
by m.roth＠5-cent.us 24 Sep '10

24 Sep '10

Ok, we've got a new machine that's throwing ECC errors. I've gotten new memory overnighted to me from the manufacturer, and replaced it, oops, not that end of the bank, as their support told me, this end of the bank, as the mobo manual I found online shows (Supermicro). Still throwing errors. Ok, try to get more info.... Last week, I moved /var/log/mcelog to /var/log/mcelog.1, and touched /var/log/mcelog. This week, I tried running mcelog manually, and via /etc/cron.hourly/mcelog, and get *nothing* at all. /var/log/message only screams that there are ECC errors, so I need more data. I've even tried reinstalling mcelog, but no joy. Anyone got any ideas here, how to get it to say something? mark

1 0

performance and interrupts
by Mag Gam 24 Sep '10

24 Sep '10

I am playing around with irqbalance to tune my 8 core system so I came across this page, http://kb.fusionio.com/KB/a65/irqbalance-avoid-overloading-cpu-0-with-inter… Now, lets say I disable irqbalance which will stop my autobalance and I pin all of my interrupts to core 0 and pin eth0 and eth1 to core 1. My application is network and CPU hungry. I am planning to dedicate cpu 3 to 8 for the application using taskset. Is there any draw back to this?

2 2

Re: [CentOS] In the press, once again
by Gabriel Ogunleye 24 Sep '10

24 Sep '10

Thank you *SO* much! I needed some real world evidence to prove that syncing large amounts of data across windows is a PITA! I'm currently doing something so similar! And I use linux to do it, and no one can understand why. That link has been printed, and strategically left on someones desk, with a post-it note sayin - This is why I use linux :) -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Timo Schoeler Sent: 24 September 2010 14:23 To: CentOS mailing list Subject: [CentOS] In the press, once again May be a little bit off topic, but this gave me hard laugh: http://www.theregister.co.uk/2010/09/24/sysadmin_file_tools/ Windows admins use a virtualized CentOS machine to copy files because their own tools are not able to handle copying a bigger amount of data. :) Cheers, Timo _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

Disabling IPv6 Auto Configuration
by Ryan Wagoner 24 Sep '10

24 Sep '10

I am using stateless auto configuration for most of my clients. For the servers I prefer to manually assign the address. I have defined the IPv6 address in the ifcfg-eth0 file and set IPV6_AUTOCONF=no. However ifconfig shows both the auto configured and manually assigned address. Looking around I found that net.ipv6.conf.default.accept_ra is set to 1 by default. The ifup-ipv6 is setting net.ipv6.conf.eth0.accept_ra to 0 like it should. From what I can tell the auto configuration is happening right before net.ipv6.conf.eth0.accept_ra is set to 0. If I define net.ipv6.conf.default.accept_ra = 0 in sysctl.conf IPV6_AUTOCONF works as expected for both yes and no settings. Has anybody else noticed this behavior? Ryan

1 0

CentOS, Firefox, and Java Plugin
by Glenn Eychaner 23 Sep '10

23 Sep '10

The latest updates to CentOS 5.5 seem to have broken the Java plugin, and have defeated any and all attempts to get it working again. I'm running CentOS 5.5 (32-bit) and Firefox 3.6.9 (installed from the CentOS repository); I've tried BOTH the openJDK plugin available through the Argeo repositories, and installing Java 1.6.0 directly from Sun/Oracle and creating the plugin soft link in /usr/lib/mozilla/plugins. Neither works at all. This was working a while ago, but it broke and I didn't notice. Thanks for any help you can provide, -G. -- Glenn Eychaner (geychaner(a)lco.cl) Telescope Systems Programmer, Las Campanas Observatory

4 8

CentOS-announce Digest, Vol 67, Issue 8
by centos-announce-request＠centos.org 22 Sep '10

22 Sep '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2010:0704 Important CentOS 5 i386 kernel Update (Karanbir Singh) 2. CESA-2010:0704 Important CentOS 5 x86_64 kernel Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Tue, 21 Sep 2010 16:08:22 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2010:0704 Important CentOS 5 i386 kernel Update To: centos-announce(a)centos.org Message-ID: <20100921160822.GA18613(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2010:0704 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2010-0704.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 490b04b04599481c9e0f29cce0db01ca kernel-2.6.18-194.11.4.el5.i686.rpm 870c8452311fec18d1378f526084598f kernel-debug-2.6.18-194.11.4.el5.i686.rpm 6478426b909d19ad36bef2611e124a26 kernel-debug-devel-2.6.18-194.11.4.el5.i686.rpm 4814108deabc9733d227b3957ddeab1f kernel-devel-2.6.18-194.11.4.el5.i686.rpm c23e73b0e05e5ae47eb3c64d332c91cd kernel-doc-2.6.18-194.11.4.el5.noarch.rpm 2ae622d78585b9d5e7adfb8e08d12a89 kernel-headers-2.6.18-194.11.4.el5.i386.rpm 6ac3187ea72473c60398dbd10077f06b kernel-PAE-2.6.18-194.11.4.el5.i686.rpm eaaf7db165c98414c51d0ddb8d907c52 kernel-PAE-devel-2.6.18-194.11.4.el5.i686.rpm 97a34d0ec1fc0ae52528b453a62d233d kernel-xen-2.6.18-194.11.4.el5.i686.rpm 7fb74796e148bf53d27400745c2be20b kernel-xen-devel-2.6.18-194.11.4.el5.i686.rpm Source: 2c07b2738414284dd0478981ad920fcd kernel-2.6.18-194.11.4.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 21 Sep 2010 16:08:22 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2010:0704 Important CentOS 5 x86_64 kernel Update To: centos-announce(a)centos.org Message-ID: <20100921160822.GA18628(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2010:0704 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2010-0704.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 15b624c3a2dee7d47cd6218cc8f5ef83 kernel-2.6.18-194.11.4.el5.x86_64.rpm f7f94cc91e490d5a70e226d13da59330 kernel-debug-2.6.18-194.11.4.el5.x86_64.rpm b2deb1565bf5abd2f504903f3a976365 kernel-debug-devel-2.6.18-194.11.4.el5.x86_64.rpm fa30323d128c9de7739d02020b0299c0 kernel-devel-2.6.18-194.11.4.el5.x86_64.rpm 24dde92bc2cb56d771d9ef9127158257 kernel-doc-2.6.18-194.11.4.el5.noarch.rpm 8ddf28a4293810b243ddfd03d758cedd kernel-headers-2.6.18-194.11.4.el5.x86_64.rpm 91e811dd2bc5f34773b2697b3b0385af kernel-xen-2.6.18-194.11.4.el5.x86_64.rpm 04333358cc23134fa762c3534744cf93 kernel-xen-devel-2.6.18-194.11.4.el5.x86_64.rpm Source: 2c07b2738414284dd0478981ad920fcd kernel-2.6.18-194.11.4.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 67, Issue 8 **********************************************

1 0

exclude mirror
by cornel panceac 22 Sep '10

22 Sep '10

how can i exclude certain mirrors from yum in centos 5? -- Among the maxims on Lord Naoshige's wall, there was this one: "Matters of great concern should be treated lightly." Master Ittei commented, "Matters of small concern should be treated seriously." (Ghost Dog : The Way of The Samurai)

4 6

Kernel panic - not syncing: Attempted to kill init!
by Agnello George 22 Sep '10

22 Sep '10

I am writing a small documentation on reason(s) : why kernel panic happen !! and possible (crisp) solution(s) googling out this error throws me very hazy solutions .. if some one could suggest the possible reasons and crispy solution it would be of great documentation help to many . one great link i found was this ( http://www.linuxquestions.org/questions/linux-software-2/explained-kernel-p… init-353920/) Thanks -- Regards Agnello D'souza

2 1

Logwatch verbosity
by Timothy Murphy 22 Sep '10

22 Sep '10

I'm getting literally hundreds of lines in my daily logwatch (under Centos-5.5), reading --------------------------------------- NULL security context for user, but SELinux in permissive mode, continuing () --------------------------------------- These began when I started running fail2ban (with shorewall), though that is probably a coincidence. In any case, what does this line mean, and is there any way of stopping it (short of stopping selinux)? -- Timothy Murphy e-mail: gayleard /at/ eircom.net tel: +353-86-2336090, +353-1-2842366 s-mail: School of Mathematics, Trinity ollege, Dublin 2, Ireland

3 3

Recompiling CentOS's stock openssl
by Al Sparks 21 Sep '10

21 Sep '10

I'm running CentOS release 4.8. For security reasons, I have to modify openssl's ssl.h in /usr/include/openssl/. That's easy. But for the new settings to take effect, I have to recompile openssl. I do have openssl-devel installed. How do I recompile? === Al

3 2

multipath troubleshoot
by Paras pradhan 21 Sep '10

21 Sep '10

Hi, My storage admin just assigned a Lun (fibre) to my server. Then re scanned using echo "1" > /sys/class/fc_host/host5/issue_lip echo "1" > /sys/class/fc_host/host6/issue_lip I can see the scsi device using dmesg But mpath device are not created for this LUN Pleas see below. The last 4 should be active and I think this is the problem Kernel: 2.6.18-164.11.1.el5xen , EL 5.5 -- [root@cvprd3 lvm]# multipathd -k multipathd> show paths hcil dev dev_t pri dm_st chk_st next_check 5:0:0:0 sdb 8:16 1 [active][ready] XXX....... 7/20 5:0:0:1 sdc 8:32 1 [active][ready] XXX....... 7/20 5:0:0:16384 sdd 8:48 1 [active][ready] XXX....... 7/20 5:0:0:16385 sde 8:64 1 [active][ready] XXX....... 7/20 5:0:0:32768 sdf 8:80 1 [active][ready] XXX....... 7/20 5:0:0:32769 sdg 8:96 1 [active][ready] XXX....... 7/20 5:0:0:49152 sdh 8:112 1 [active][ready] XXX....... 7/20 5:0:0:49153 sdi 8:128 1 [active][ready] XXX....... 7/20 5:0:0:2 sdj 8:144 1 [active][ready] XXX....... 7/20 5:0:0:16386 sdk 8:160 1 [active][ready] XXX....... 7/20 5:0:0:32770 sdl 8:176 1 [active][ready] XXX....... 7/20 5:0:0:49154 sdm 8:192 1 [active][ready] XXX....... 7/20 5:0:0:3 sdn 8:208 1 [active][ready] XXX....... 7/20 5:0:0:16387 sdo 8:224 1 [active][ready] XXX....... 7/20 5:0:0:32771 sdp 8:240 1 [active][ready] XXX....... 7/20 5:0:0:49155 sdq 65:0 1 [active][ready] XXX....... 7/20 5:0:0:4 sdr 65:16 1 [active][ready] XXX....... 7/20 5:0:0:16388 sds 65:32 1 [active][ready] XXX....... 7/20 5:0:0:32772 sdt 65:48 1 [active][ready] XXX....... 7/20 5:0:0:49156 sdu 65:64 1 [active][ready] XXX....... 7/20 5:0:0:5 sdv 65:80 0 [undef] [faulty] [orphan] 5:0:0:16389 sdw 65:96 0 [undef] [faulty] [orphan] 5:0:0:32773 sdx 65:112 0 [undef] [faulty] [orphan] 5:0:0:49157 sdy 65:128 0 [undef] [faulty] [orphan] multipathd> Thanks in Adv Paras.

1 1

using NUT on centos 5
by fred smith 21 Sep '10

21 Sep '10

Hi! Trying to set up NUT on Centos 5 to monitor a CyberPower 1500AVR UPS. There seem to be many documents, all of which seem to be not fully consistent with each other, and most of them aren't up to date. I'm guessing I should be using udev rather than hal, but I'm somewhat stumped on how to figure out what device it should be monitoring. there are a bunch of udev rules installed (in /lib/udev/rules.d/52-nut-usbups.rules) but it's not at all clear to me what, if anything, I'm supposed to do with them, or how I cause udev to see them there and do its thing. there's a document at http://fedoranews.org/contributors/kazutoshi_morioka/nut/ but it doesn't show how to do it with a USB device, only serial. so I decided to move on and see if it could be made to work without that understanding, using whatever I could figure out using the INSTALL file that comes with NUT. And that isn't geting me anywhere, so far. If anyone out there has had success at setting up NUT on Centos 5 (or RHEL) and can offer any advice, I'd appreciate hearing from you. Thanks in advance! -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- "For him who is able to keep you from falling and to present you before his glorious presence without fault and with great joy-- to the only God our Savior be glory, majesty, power and authority, through Jesus Christ our Lord, before all ages, now and forevermore! Amen." ----------------------------- Jude 1:24,25 (niv) -----------------------------

2 2

Hole in 64-bit Linux kernel provides root rights
by Dave 21 Sep '10

21 Sep '10

>From fedora list: On Mon, Sep 20, 2010 at 4:13 AM, Zbigniew Fiedorowicz <fiedorow(a)math.ohio-state.edu> wrote: > Further story: > http://www.theregister.co.uk/2010/09/15/linux_kernel_regression_bug/ > > This is a very serious problem which puts multiuser 64-bit Linux systems > absolutely at the mercy of their least responsible users. > > I have filed a bug report: > https://bugzilla.redhat.com/show_bug.cgi?id=635675 > Priority should be high not low. On Mon, Sep 20, 2010 at 5:31 AM, Michael Cronenworth <mike(a)cchtml.com> wrote: > The fix is already in the "updates-testing" repository and awaiting > karma from the QA folks. > > # yum --enablerepo=updates-testing update kernel > > This will give you a patched kernel. > > Users of Fedora 12, 13, and 14 can perform this update. I strongly > suggest they do so ASAP. Any equivalent for centos yet? mahalo Dave

5 8

CentOS-announce Digest, Vol 67, Issue 7
by centos-announce-request＠centos.org 21 Sep '10

21 Sep '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2010:0703 Important CentOS 5 i386 bzip2 Update (Karanbir Singh) 2. CESA-2010:0703 Important CentOS 5 x86_64 bzip2 Update (Karanbir Singh) 3. CESA-2010:0703 Important CentOS 3 i386 bzip2 - security update (Tru Huynh) 4. CESA-2010:0703 Important CentOS 3 x86_64 bzip2 - security update (Tru Huynh) 5. CESA-2010:0703 Important CentOS 4 i386 bzip2 - security update (Tru Huynh) 6. CESA-2010:0703 Important CentOS 4 x86_64 bzip2 - security update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Tue, 21 Sep 2010 09:46:58 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2010:0703 Important CentOS 5 i386 bzip2 Update To: centos-announce(a)centos.org Message-ID: <20100921094658.GA14176(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2010:0703 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2010-0703.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 6fdfb7ea9c6cb1ab0e74b52ea8d35e8a bzip2-1.0.3-6.el5_5.i386.rpm 0d3bea176de58dd70e8dcd56c36ccdbb bzip2-devel-1.0.3-6.el5_5.i386.rpm 153bdd9cf4af6ef757445c99455f52aa bzip2-libs-1.0.3-6.el5_5.i386.rpm Source: ea8d1f7d523b83eedc64c35f0f0205cc bzip2-1.0.3-6.el5_5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 21 Sep 2010 09:46:58 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2010:0703 Important CentOS 5 x86_64 bzip2 Update To: centos-announce(a)centos.org Message-ID: <20100921094658.GA14191(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2010:0703 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2010-0703.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 91cb3aa371dc2458f7aba092df8d6759 bzip2-1.0.3-6.el5_5.x86_64.rpm 2ff6e5fccc6db6bb5223f1730d4facf4 bzip2-devel-1.0.3-6.el5_5.i386.rpm e844a66355660e1700acb7f10c620aad bzip2-devel-1.0.3-6.el5_5.x86_64.rpm 2760b26ce6aefc689f79636fbca1fb4b bzip2-libs-1.0.3-6.el5_5.i386.rpm 3e81d3cdc53c8bef9a8de5205e3e3f04 bzip2-libs-1.0.3-6.el5_5.x86_64.rpm Source: ea8d1f7d523b83eedc64c35f0f0205cc bzip2-1.0.3-6.el5_5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Tue, 21 Sep 2010 11:50:54 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2010:0703 Important CentOS 3 i386 bzip2 - security update To: centos-announce(a)centos.org Message-ID: <20100921095054.GA6681(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2010:0703 bzip2 security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2010-0703.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/bzip2-1.0.2-14.EL3.i386.rpm updates/i386/RPMS/bzip2-devel-1.0.2-14.EL3.i386.rpm updates/i386/RPMS/bzip2-libs-1.0.2-14.EL3.i386.rpm source: updates/SRPMS/bzip2-1.0.2-14.EL3.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update bzip2\* Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

Re: [CentOS] No live migration for xen virtual machines any more
by Pasi Kärkkäinen 21 Sep '10

21 Sep '10

On Tue, Sep 21, 2010 at 09:56:39AM -0500, Brian Cremeans wrote: > Hello, > I have the exact same problem after an update, and it does not work using > the xm command. > Thanks for any help you can offer. > Read the following logs on dom0: - "xm log" - dmesg - /var/log/messages After trying to migrate with xm. Hopefully that helps. -- Pasi > Brian L. Cremeans > OCCE IT > > > Hi folks, > > > > I have upgraded my CentOS RHCS cluster hosts to the recent packages, and > > now live migration of the xen virtual machines does not work any more: > > > > [r...@node ~]# clusvcadm -M vm:XenVM -m othernode > > Trying to migrate vm:XenVM to othernode...Invalid operation for resource > > > > I have googled the net but found no recent entries for that problem, > > just older posts. > > > > Has anyone had the same problem recently? If yes: is there any workaround? > > > > Any hint or help is appreciated. > > > > Does it work using "xm" command directly? > > -- Pasi

1 0

Need Help
by Mwango Mutale 21 Sep '10

21 Sep '10

Dear Sir, I have been struggling to get bold letters in informix for CentoS 4.8 and I came across your article on PCL Command Sequences and I felt you could help. I have the following declarations and print command in my informix-4gl but things don't seem to get right. BoldOn CHAR(6), BoldOff CHAR(6) ----LET BoldOn = ASCII 27, ASCII '&040', ASCII '&115', ASCII '&052', ASCII '&066' ----LET BoldOff = ASCII 27, ASCII '&040', ASCII '&115', ASCII '&048', ASCII '&066' LET BoldOn = ASCII 27,"(s4B" LET BoldOff = ASCII 27,"(s0B" PRINT COLUMN 1, BoldOn CLIPPED, " ", "TO WHOM IT MAY CONCERN", BoldOff, COLUMN 54, BoldOn CLIPPED, " ", "Ref: ", BoldOff CLIPPED, r_refno PRINT COLUMN 1, BoldOn CLIPPED, " ", "This is to certify that: ", BoldOff, r_surname, " ", r_firstname and this what I am getting: ^[(s4B TO WHOM IT MAY CONCERN^[(s0B ^[(s4B Ref: ^[(s0B 9844510 ^[(s4B This is to certify that: ^[(s0B NAMONJE CAROL ^[(s4B is a registered student of the National Institute of Public Administration^[(s0B We have HP LaserJet P3005 and P3015 Printers. How can I avoid printing these charaters and instead print Bold letters ? Are there any settings I need to do in Environmental variables or CUPS settings ? Your help will highly be appreciated. Felix Mwango Mutale

2 1

Sendmail TLS verify=fail
by Morten P.D. Stevens 21 Sep '10

21 Sep '10

Hi, I have a small question with sendmail and tls verification. The tls verify fails on our internal/external sendmail servers. For example: STARTTLS=server, relay=mx1.imt-systems.com [89.146.219.60], version=TLSv1/SSLv3, verify=FAIL, cipher=DHE-RSA-AES256-SHA, bits=256/256 STARTTLS=server, relay=acsinet12.imt-systems.com [89.146.219.42], version=TLSv1/SSLv3, verify=FAIL, cipher=DHE-RSA-AES256-SHA, bits=256/256 What's the problem? The sendmail tls certificate should be okay on both servers. Here is the output of the openssl starttls check: Server 1 [root@mx1 ~]# openssl s_client -starttls smtp -connect acsinet12.imt-systems.com:25 New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE SSL-Session: Protocol : TLSv1 Cipher : DHE-RSA-AES256-SHA Session-ID: FE604F9A1765705F518A416F824DDE0B4316C52F36A3171A1593DC503EB63404 Session-ID-ctx: Master-Key: 57DB71C1E48CA6AC4E5C381B28915AF0A2D66F23D80919E05DFB77345586D6F63AD6C9A7929880E29045CD7D3ADD9556 Key-Arg : None Krb5 Principal: None Start Time: 1285023670 Timeout : 300 (sec) Verify return code: 0 (ok) --- 250 HELP quit 221 2.0.0 acsinet12.imt-systems.com closing connection On the other server: Server 2 [root@acsinet12 ~]# openssl s_client -starttls smtp -connect mx1.imt-systems.com:25 New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA Server public key is 2048 bit Secure Renegotiation IS supported Compression: zlib compression Expansion: zlib compression SSL-Session: Protocol : TLSv1 Cipher : DHE-RSA-AES256-SHA Session-ID: 4FEA16066A719033CEA69C185EDDA504CA8EDB1BB572C21A6BEB303F15F76621 Session-ID-ctx: Master-Key: 615713E2500A52E996F2BB27F3A6A0CF9A471212805120BCC81623656327A9B6184BBB61F6CF28D6E62408397CF2D221 Key-Arg : None Krb5 Principal: None PSK identity: None PSK identity hint: None Compression: 1 (zlib compression) Start Time: 1285024237 Timeout : 300 (sec) Verify return code: 0 (ok) --- 250 HELP quit 221 2.0.0 mx1.imt-systems.com closing connection The verify return code: 0 (ok) seems to be okay on both servers? Here is the sendmail TLS configuration: (Server 1) define(`confCACERT_PATH', `/etc/pki/tls/certs')dnl define(`confCACERT', `/etc/pki/tls/certs/ca-bundle.crt')dnl define(`confSERVER_CERT', `/etc/pki/tls/certs/mx1.crt')dnl define(`confSERVER_KEY', `/etc/pki/tls/certs/mx1.key')dnl define(`confCLIENT_CERT', `/etc/pki/tls/certs/mx1.crt')dnl define(`confCLIENT_KEY', `/etc/pki/tls/certs/mx1.key')dnl (Server 2) define(`confCACERT_PATH', `/etc/pki/tls/certs')dnl define(`confCACERT', `/etc/pki/tls/certs/ca-bundle.crt')dnl define(`confSERVER_CERT', `/etc/pki/tls/certs/acsinet12.crt')dnl define(`confSERVER_KEY', `/etc/pki/tls/certs/acsinet12.key')dnl define(`confCLIENT_CERT', `/etc/pki/tls/certs/acsinet12.crt')dnl define(`confCLIENT_KEY', `/etc/pki/tls/certs/acsinet12.key')dnl Does anyone know something about this issue? (verify=fail) Thank you. Best regards, Morten

2 2

problem clamd via rpmforge
by fakessh 21 Sep '10

21 Sep '10

hello list hello centos network hello all the builder of rpm's i use clamd package via rpmforge today they are passes i use CentOS 5.5 with small system with low memory system support couple postfix/amavisd/clamd/dkimproxy/sid-milter/policyd/postgrey/dovecot2 when i restart clamd i obtain one error i quote for clarity ~]# service clamd restart Stopping Clam AntiVirus Daemon: [ OK ] Starting Clam AntiVirus Daemon: WARNING: Running on 32-bit system, and RLIMIT_DATA > 2GB, lowering to 2GB! [ OK ] what error RLIMIT_DATA > 2GB i use 1GB swap how to configure the machine to remove this error thanks for all return

2 1

Where can I find list of "Core" and "Base" install groups?
by Chad Woolley 21 Sep '10

21 Sep '10

e.g. what packages are in them, as well as other groups or group-related options which may exist... Thanks, -- Chad

3 3

Software RAID + LVM + Grub
by Matthew Topper 21 Sep '10

21 Sep '10

I'm playing with software RAID and LVM in some virtual machines and I've run into an issue that I can't find a good answer to in the docs. I have the following RAID setup: md0: sda1 and sdb1, RAID 1. This is /boot md1: sda2 and sdb2, RAID 1. This is a PV for LVM. VolGroup00, this is the volume group and md1 is the only PV in it. LogVol00 is swap LogVol01 is / LogVol02 is /home So, I tested to see what happens if I disable sdb in virtualbox. Machine booted find and I was able to see that part of the raid array was gone. I reattached the disk and rebuilt the array mdam --add /dev/md0 /dev/sdb1 mdam --add /dev/md1 /dev/sdb2 The array rebuilt without issue. But now, if I remove sda, the machine doesn't boot and grub complains. The question I have is how does one reinstall the boot sector at this point? I'm a little confused as far as to what device to install it on and what to specify as the root. This is grub.conf if it helps: default=0 timeout=5 splashimage=(hd0,0)/grub/splash.xpm.gz title CentOS (2.6.18-194.e15) root (hd0,0) kernel /vmlinuz-2.6.18-194.e15 ro root=/dev/VolGroup00/LogVol01 initrd /initrd-2.6.18-194.e15.img Grub has always been a little confusing for me, so I guess I don't understand. What do the two root entries specify? And again, my main question is how do I reinstall grub to the repaired disk? Sorry for the lengthy post, I'm trying to provide as much information as possible.

3 5

Amazon Linux AMI based on CentOS?
by Timo Schoeler 21 Sep '10

21 Sep '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, a german IT news site [0] today posted that Amazon Linux AMI is based on CentOS 5.5 -- is that true? Maybe this would be stuff for the next newsletter... ;) Cheers, Timo http://www.golem.de/1009/78088.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iD8DBQFMl2Nxfg746kcGBOwRAg8sAKCelTvLYTNxVBjtOxteb7/hQY2eowCfYFzP g5VeYpo3HboTHRtibdJlrdY= =5jZQ -----END PGP SIGNATURE-----

3 3

Oracle's Unbreakable Enterprise Kernel for Oracle Linux!!!
by Robert P. J. Day 20 Sep '10

20 Sep '10

http://blogs.computerworld.com/16997/oracle_rips_red_hat_and_sort_of_launch… oracle: just another centos wanna-be? rday -- ======================================================================== Robert P. J. Day Waterloo, Ontario, CANADA Top-notch, inexpensive online Linux/OSS/kernel courses http://crashcourse.ca Twitter: http://twitter.com/rpjday LinkedIn: http://ca.linkedin.com/in/rpjday ========================================================================

4 9

iptables
by alexus 20 Sep '10

20 Sep '10

I'm trying to do some simple tcp port forwarding [root@wcmisdlin02 ~]# cat /proc/sys/net/ipv4/ip_forward 0 [root@wcmisdlin02 ~]# /bin/echo 1 > /proc/sys/net/ipv4/ip_forward [root@wcmisdlin02 ~]# cat /proc/sys/net/ipv4/ip_forward 1 [root@wcmisdlin02 ~]# iptables --list Chain INPUT (policy ACCEPT) target prot opt source destination RH-Firewall-1-INPUT all -- anywhere anywhere Chain FORWARD (policy ACCEPT) target prot opt source destination RH-Firewall-1-INPUT all -- anywhere anywhere Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain RH-Firewall-1-INPUT (2 references) target prot opt source destination ACCEPT all -- anywhere anywhere ACCEPT icmp -- anywhere anywhere icmp any ACCEPT esp -- anywhere anywhere ACCEPT ah -- anywhere anywhere ACCEPT udp -- anywhere 224.0.0.251 udp dpt:mdns ACCEPT udp -- anywhere anywhere udp dpt:ipp ACCEPT tcp -- anywhere anywhere tcp dpt:ipp ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:mysql ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ssh ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:http ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ftp ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:https REJECT all -- anywhere anywhere reject-with icmp-host-prohibited [root@wcmisdlin02 ~]# iptables --table nat --append PREROUTING --proto tcp --dport 80 --jump DNAT --to 10.52.208.223:80 [root@wcmisdlin02 ~]# iptables --table nat --list PREROUTING Chain PREROUTING (policy ACCEPT) target prot opt source destination DNAT tcp -- anywhere anywhere tcp dpt:http to:10.52.208.223:80 [root@wcmisdlin02 ~]# curl --verbose http://10.52.208.221:80 * About to connect() to 10.52.208.221 port 80 * Trying 10.52.208.221... Connection refused * couldn't connect to host * Closing connection #0 curl: (7) couldn't connect to host [root@wcmisdlin02 ~]# -- http://alexus.org/

6 7

Gnome mouse configuration.
by James B. Byrne 20 Sep '10

20 Sep '10

On my Centos-5.5 (x64) based desktop the optical mouse I originally configured during the system install has died. In /etc/sysconfig/hwconf this is configured as: class: MOUSE bus: USB detached: 0 device: input/mice driver: genericwheelusb desc: "Microsoft Microsoft 3-Button Mouse with IntelliEye(TM)" usbclass: 3 usbsubclass: 1 usbprotocol: 2 usbbus: 4 usblevel: 1 usbport: 0 usbdev: 4 vendorId: 045e deviceId: 0053 usbmfr: Microsoft usbprod: Microsoft 3-Button Mouse with IntelliEye(TM) I have replaced the failed mouse with a spare from our surplus parts cabinet and now the centre wheel/button click no longer inserts selected text at the current cursor position. I would like to obtain this feature with the replacement mouse, which is described on the bottom as a MicroSoft Optical Mouse Blue USB and PS/2 compatible. It has a usb connector which is plugged directly into the chassis usb port. All the other features of the mouse seem to work just fine. I simply cannot obtain the centre button click insert capability. Is there no way to simply force CentOS-5 to re-detect the attached mouse? It must have done something akin to this during the initial install. I tried running kudzu as root from a gnome terminal session but that had no effect that I can detect. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

xen
by mattias 20 Sep '10

20 Sep '10

If i will use nat on a xen vm what should i set in the config file?

2 2

How to simulate minimal ISO install using stage2 image file?
by Chad Woolley 20 Sep '10

20 Sep '10

Hello, I'm working on a project which automates creation of EC2 AMI images. To do this, you must use a running EC2 instance to mount an image file in a chroot jail. My problem is that I want to create an AMI that looks exactly like a minimal (nothing selected) install from the CentOS ISO image, but the "stage2" image [1] file is much more "minimal" than that. e.g., it doesn't have yum, groups, devices, networking, etc set up as you would if you had run the ISO minimal install on a real or virtual box. I can't mount the ISO directly in the chroot (as far as I know, but I could be wrong). My question is, how can I make the mounted stage2.img chroot jail look just like a minimal ISO install? I could manually create everything (which I have started), but this is a lot of work, and I'm likely to miss something that an ISO build would have (e.g. some group). Is there some other standard CentOS script I can run after mounting the stage2.img which will do everything the installer does? Can I run the installer manually with some kickstart script? Pointers to references and documentation are welcome... Thanks, -- Chad [1] http://mirrors.usc.edu/pub/linux/distributions/centos/5.5/os/x86_64/images/

1 1

Using Make in frequent cron job
by Kenneth Porter 20 Sep '10

20 Sep '10

Is there a way to get Make to be silent when it does nothing, but have its normal verbosity when something is made? I want to use Make in a frequent cron job (every 1/2 hour, perhaps 10 minutes) but I don't want to get a bunch of emails telling me nothing was done (which will be most of the time). I just want to know when it found something to do.

2 1

Re: [CentOS] Using Make in frequent cron job
by Chad Woolley 20 Sep '10

20 Sep '10

On Sun, Sep 19, 2010 at 6:58 PM, Kenneth Porter <shiva(a)sewingwitch.com> wrote: > Is there a way to get Make to be silent when it does nothing, but have its > normal verbosity when something is made? You can write a wrapper script and run it in a subshell to capture the output. Pretend echo is make: a=$(echo 'made something') # no output if echo $a | grep 'made something' > /dev/null; then echo $a fi HTH, -- Chad

1 0

GRUB woes: GRUB Hard Disk Error
by Rob Del Vecchio 19 Sep '10

19 Sep '10

Hello all, I am attempting to install CentOS 5.5 on a recently donated home server (was Windows). I've tried installing twice; first, separating /boot, swap, /, /var, /usr and /home into different partitions, the second time choosing default layout. Both times have resulted in "GRUB Hard Disk Error" upon boot. About the hard disk, it is a Seagate SATA drive. I do not have another drive to configure RAID. The BIOS is set to: Onboard PATA/SATA Adapters = Both SATA mode = IDE Onboard PATA/SATA Cofiguration = Enhanced Mode (???) Upon booting into rescue mode, the file systems mount successfully and I am able to read data from files. The current file structure is (default layout): /boot / swap grub.conf: #boot=/dev/sda1 default=0 timeout=5 splashimage=(hd1,0)/grub/splash.xpm.gz hiddenmenu title CentOS (2.6.18-194.el5) root (hd1,0) kernel /vmlinuz-2.6.18-194.el5 ro root=/dev/VolGroup00/LogVol00 initrd /initrd-2.6.18-194.el5.img title Other rootmoverify (hd0,0) chainloader +1 This is brand new from the installation. My questions are, what am I missing? Bad configuration? Should boot=/dev/sda1 really be commented out? Some pointers for manually installing and configuring grub would be great, as I am lacking experience in that area. Any idea as to what is going on would be great! Thanks in advance, Rob

3 8

Issue with HP Officejet 6500 on CentOS 5.5
by Mark 19 Sep '10

19 Sep '10

I just picked one of these up to replace my 4315, which broke (I think the feeder roller gear broke from an overstuffed feeder), but it's giving me problems. I had no trouble configuring it to print, but it doesn't appear in lsusb and xsane can't find it, so I can't scan with it, which is the main reason I bought it in the first place. I've tried restarting the autofs service (automounter), rebooting, and switching the USB cables with my old HP Scanjet 3300C, but the 3300 shows up on either cable and the 6500 doesn't appear at all. I checked in Google and saw other issues with the 6500, but this wasn't one of them. Any suggestions? I suppose I could get a switch and hook it up via Ethernet, but that really isn't a good solution, and it doesn't explain the problem. Thanks. Mark

5 9

NX and CentOS 5.5?
by Raymond Jender 19 Sep '10

19 Sep '10

I am pulling my hair out here folks...... I am running CentOS 5.5 in command line only. Reason being I am standing up an IDS system on it. I have installed the NX client/node and server pkgs. I have installed the NX client for windows on a Vista box. When I attemtp to connect from the Vista to CentOS, I get this: NX> 203 NXSSH running with pid: 22080 NX> 285 Enabling check on switch command NX> 285 Enabling skip of SSH config files NX> 285 Setting the preferred NX options NX> 200 Connected to address: 192.168.1.70 on port: 22 NX> 202 Authenticating user: nx NX> 208 Using auth method: publickey NX> 204 Authentication failed. Now I have been googling and re-googling. Plenty of people have had the same issue, but I have yet to find a solution that works for me. Funny that most of the stuff I'm finding on google is 4-5 years old! I'm sure I am probably missing something so simple I will puke! I think I read that someone did an install and it worked right out of the box!! Incredible! I'd really like to see a CentOS - NX configuration guide but couldn't find one. Can someone just tell me how this should be configured....what changes do I need to make and to what config files? ssh (putty and WinSCP) works just fine for me in case you need to know. If you need any particular information, please let me know. Thanks. Ray

5 4

should vsftpd be disabled in favour of sftp for security reasons?
by Robert P. J. Day 18 Sep '10

18 Sep '10

(another in an ongoing list of things i just want to clarify for the sake of future courses taught on centos.) from this RHEL doc page: http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/Deploymen… the reader is advised to, for the sake of security, remove/disable vsftpd, ostensibly in favour of sftp/sftp-server. really? i can obviously see disallowing stuff like telnet and rsh and rlogin, that's a no-brainer. but advising against vsftpd for the sake of security? i'm not sure i see the logic in that. thoughts? rday -- ======================================================================== Robert P. J. Day Waterloo, Ontario, CANADA Top-notch, inexpensive online Linux/OSS/kernel courses http://crashcourse.ca Twitter: http://twitter.com/rpjday LinkedIn: http://ca.linkedin.com/in/rpjday ========================================================================

6 5

Ac1dB1tch3z Vs Linux Kernel x86_64 0day
by Gerhard Schneider 18 Sep '10

18 Sep '10

Are there any 64bit CentOS5 kernels available that are immune against the exploit mentioned in the subject? Turning off 32bit support is no option to me.. Gerhard Schneider P.S.: Source code can be found at http://seclists.org/fulldisclosure/2010/Sep/268 and is working "well" on 2.6.18-194.11.3.el5.centos.plus -- Gerhard Schneider Institute of Lightweight Design and e-Mail: gs(a)ilsb.tuwien.ac.at Structural Biomechanics (E317) Tel.: +43 664 60 588 3171 Vienna University of Technology / Austria Fax: +43 1 58801 31799 A-1040 Wien, Gusshausstrasse 27-29 http://www.ilsb.tuwien.ac.at/~gs/

3 2

securing centos 5.2 for public usage
by Roland RoLaNd 18 Sep '10

18 Sep '10

Dear all, i Just finished setting up an apache service on a centos 5.2 VM machine. i need to secure this machine as i'm soon to be setting a public IP over it where i'd be opening up the following services: 1. http 2. https 3. ssh Things i've done so far: 1. stopped root ssh access in sshd.conf 2. tried configuring PAM so i get a more secure ssh passwords (dictionary wise) as well as tried setting up a 2 times authentication failure for the account to be disabled for 12 hours (i couldnl't succeed in setting this up) 3. disabled port forwarding (to deny outsiders to tunnel through the server inside my network) couldn't succeed with this either. Any help or advice would be greatly appreciated.. thanks, --Roland

7 6

Maximum IP ranges
by Radu Gheorghiu 18 Sep '10

18 Sep '10

Hello, Is there any maximum number of IP aliases or IP ranges that ifup can handle? Right now i have about 12000 IPs assigned to the server and when trying to assign range number 47 (ifup eth0-range47), i get his error: /etc/sysconfig/network-scripts/ifup-post: line 21: 12733 Segmentation fault /etc/sysconfig/network-scripts/ifup-aliases ${DEVICE} ${CONFIG} Any advice is much appreciated. Regards, Radu

1 0

looking for cool, post-install things to do on a centos 5.5 system
by Robert P. J. Day 18 Sep '10

18 Sep '10

(note: i asked this a few days ago but it *appears* that that post was tossed due to getting excessive bounces from my account. so i'm posting it again, apologies if you're seeing it a second time.) over the next several weeks, i'm teaching some courses in RHEL admin but (unsurprisingly) i'll be using centos 5.5. it's a decently-written, 3rd party course, all the generic, standard admin topics but it does leave me about a 1/2 day to throw in any cool stuff i want to add. so, any recommendations for neat things that people here have done in the way of what can be added to or configured on a centos server system? the course covers all the standard topics -- installation, package management, service management, filesystem maintenance, that sort of thing. so i'm looking for bonus, neat stuff that others here do as a matter of course when putting together a centos system. logging utilities? intrusion detection? monitoring? anything that leaps to mind that i can use to fill up a few more hours. i'm already thinking of showing how to build and boot a new kernel. other ideas? thanks. rday -- ======================================================================== Robert P. J. Day Waterloo, Ontario, CANADA Top-notch, inexpensive online Linux/OSS/kernel courses http://crashcourse.ca Twitter: http://twitter.com/rpjday LinkedIn: http://ca.linkedin.com/in/rpjday ========================================================================

24 83

Howto enter a password to mount windows share in Places
by Denis 18 Sep '10

18 Sep '10

Hi - using gnome I am trying to use Places -> Connect to Server to mount a windows share. I can do: smbclient //disk.site.edu/uname$ -U uname%passwd but have not been able to transfer that infomation into the GUI that can mount the Windows Share, specifically can't figure out how to enter the password. I'm trying make things as simple as possible for windows students to use CentOS. Thanks, -- Denis Becker ITS - Engineering MN State Univ., Mankato Mankato Minnesota ph: 507-389-5617 fx: 507-389-5002

4 5

CentOS-announce Digest, Vol 67, Issue 6
by centos-announce-request＠centos.org 18 Sep '10

18 Sep '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2010:0700 CentOS 5 x86_64 apr-util Update (Karanbir Singh) 2. CEBA-2010:0700 CentOS 5 i386 apr-util Update (Karanbir Singh) 3. CEBA-2010:0699 CentOS 5 x86_64 openCryptoki Update (Karanbir Singh) 4. CEBA-2010:0699 CentOS 5 i386 openCryptoki Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 17 Sep 2010 20:41:47 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0700 CentOS 5 x86_64 apr-util Update To: centos-announce(a)centos.org Message-ID: <20100917204147.GA18390(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0700 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0700.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 22707603aefbf604fc0cd85be5fc4841 apr-util-1.2.7-11.el5_5.1.i386.rpm b85bf6a071cf2d6eeaf06acfc0eb70fb apr-util-1.2.7-11.el5_5.1.x86_64.rpm 8927856d409178b4e110358a134436a6 apr-util-devel-1.2.7-11.el5_5.1.i386.rpm 5e6940ca24926a143435cb764c7e3e89 apr-util-devel-1.2.7-11.el5_5.1.x86_64.rpm ec7d39f1424a851428e5d69776ea567d apr-util-docs-1.2.7-11.el5_5.1.x86_64.rpm 6d5e55de221b2934930a2adaa259ba98 apr-util-mysql-1.2.7-11.el5_5.1.x86_64.rpm Source: 92c957a4fc281a58e04ff1f48bee4938 apr-util-1.2.7-11.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Fri, 17 Sep 2010 20:41:47 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0700 CentOS 5 i386 apr-util Update To: centos-announce(a)centos.org Message-ID: <20100917204147.GA18375(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0700 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0700.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: e6f5599bb88a29e319c78d167ea8f5a4 apr-util-1.2.7-11.el5_5.1.i386.rpm 1a03a1c2887fc0aeb2477a951d62fc23 apr-util-devel-1.2.7-11.el5_5.1.i386.rpm 891af9f087a4c71cb22c45af6714a955 apr-util-docs-1.2.7-11.el5_5.1.i386.rpm 5ffde8d4fa37240c22fdb660fbb962a5 apr-util-mysql-1.2.7-11.el5_5.1.i386.rpm Source: 92c957a4fc281a58e04ff1f48bee4938 apr-util-1.2.7-11.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Fri, 17 Sep 2010 20:45:19 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0699 CentOS 5 x86_64 openCryptoki Update To: centos-announce(a)centos.org Message-ID: <20100917204519.GA18503(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0699 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0699.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: df73e4505e30d94056831e7e6f1d9f43 openCryptoki-2.2.4-22.el5_5.1.i386.rpm b38b8b4d5b2f25977690774588b79f25 openCryptoki-2.2.4-22.el5_5.1.x86_64.rpm 9529d5c96a88ffecb28b648ee1723951 openCryptoki-devel-2.2.4-22.el5_5.1.i386.rpm 14d0ce467b1d7b1b7addf1d89199859a openCryptoki-devel-2.2.4-22.el5_5.1.x86_64.rpm Source: e1c510c0ed30783a18ab126a118064ad openCryptoki-2.2.4-22.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Fri, 17 Sep 2010 20:45:19 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0699 CentOS 5 i386 openCryptoki Update To: centos-announce(a)centos.org Message-ID: <20100917204519.GA18489(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0699 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0699.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: c90241d386d2b0faa14ef472bd6433dd openCryptoki-2.2.4-22.el5_5.1.i386.rpm c701f002e13b6f2cf9d80bdd204a23c5 openCryptoki-devel-2.2.4-22.el5_5.1.i386.rpm Source: e1c510c0ed30783a18ab126a118064ad openCryptoki-2.2.4-22.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 67, Issue 6 **********************************************

1 0

Re: [CentOS] e2fsck with millions of files
by Brent L. Bates 18 Sep '10

18 Sep '10

Stack size was only a problem for the 32 bit OS and not 64 bit. If one is dealing with a terabyte or more of data, I don't see them using a 32 bit OS. I really don't see any really good reasons for using anything but 64 bit any more, if the hardware supports it. -- Brent L. Bates (UNIX Sys. Admin.) M.S. 912 Phone:(757) 865-1400, x204 NASA Langley Research Center FAX:(757) 865-8177 Hampton, Virginia 23681-0001 Email: B.L.BATES(a)larc.nasa.gov http://www.vigyan.com/~blbates/

6 6

slightly OT: dban
by m.roth＠5-cent.us 18 Sep '10

18 Sep '10

I'm trying to nuke a Dell Optiplex GX620. I've got a perfectly good dban 1.0.4 that I've used a bunch of times... but on this machine, it says starting, then dies, saying "dban has finished with non-fatal errors. Check the log for more information" It never gets to the interactive menu. Now that I've disabled the non-existant floppy drive, at least it does say "to save the log file again, press enter".... mark

12 16

Bandwidth issues
by Michel Bulgado 17 Sep '10

17 Sep '10

Hello this is the first time I write to the list. I use in my company CentOS 5.5 on all servers, especially in the firewall, recently I have problems with bandwidth, since my internet connection is 512 Kbps and the same is saturated with torrents. I need to limit the bandwidth consumption for torrents, giving highest priority to http traffic. leaving the torrents that are downloaded from a single IP address at a speed of 128 Kbps I use iptables on the firewall. Could tell me if it possible to limit such traffic with iptables and send me some examples? Thanks Michel

1 0

can i run NFS *exclusively* off of v4?
by Robert P. J. Day 17 Sep '10

17 Sep '10

is it possible to set up NFS on centos 5.5 so that it uses *only* version 4? i tried this not that long ago on fedora and was surprised to see a complaint when i tried to start the server and was told that i was missing required functionality of NFSv1, or something equally weird. i'll check the /etc/init.d/nfs script, but i think what got me into trouble was trying to use the entire set of options: "--no-nfs-version 1 --no-nfs-version 2 --no-nfs-version 3" i'm going to try it again this afternoon on centos 5.5, but has anyone else tried this? should it *theoretically* work? rday -- ======================================================================== Robert P. J. Day Waterloo, Ontario, CANADA Top-notch, inexpensive online Linux/OSS/kernel courses http://crashcourse.ca Twitter: http://twitter.com/rpjday LinkedIn: http://ca.linkedin.com/in/rpjday ========================================================================

1 1

Re: [CentOS] should vsftpd be disabled in favour of sftp for security reasons?
by Michel van Deventer 17 Sep '10

17 Sep '10

> > (another in an ongoing list of things i just want to clarify for the > sake of future courses taught on centos.) > > from this RHEL doc page: > > http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/Deploymen… > > the reader is advised to, for the sake of security, remove/disable vsftpd, ostensibly in favour of sftp/sftp-server. really? > > i can obviously see disallowing stuff like telnet and rsh and > rlogin, that's a no-brainer. but advising against vsftpd for the sake of security? i'm not sure i see the logic in that. thoughts? As FTP is a clear-text protocol, I would surely advise against leaving it on :) I only run a vsftpd server on one of my machines for the customers comfort, but that will change in the near future ! I can easily image scenarios where unencrypted traffic with usernames/passwords is disallowed. Regards, Michel

4 3

CentOS-announce Digest, Vol 67, Issue 5
by centos-announce-request＠centos.org 17 Sep '10

17 Sep '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2010:0695 CentOS 5 i386 python-dmidecode Update (Karanbir Singh) 2. CEBA-2010:0695 CentOS 5 x86_64 python-dmidecode Update (Karanbir Singh) 3. CEBA-2010:0696 CentOS 5 i386 device-mapper-multipath Update (Karanbir Singh) 4. CEBA-2010:0696 CentOS 5 x86_64 device-mapper-multipath Update (Karanbir Singh) 5. CESA-2010:0698 Critical CentOS 5 i386 samba3x Update (Karanbir Singh) 6. CESA-2010:0698 Critical CentOS 5 x86_64 samba3x Update (Karanbir Singh) 7. CESA-2010:0697 Critical CentOS 5 i386 samba Update (Karanbir Singh) 8. CESA-2010:0697 Critical CentOS 5 x86_64 samba Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Wed, 15 Sep 2010 22:03:23 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0695 CentOS 5 i386 python-dmidecode Update To: centos-announce(a)centos.org Message-ID: <20100915220323.GA1067(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0695 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0695.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 59d449bc485b27b7f825d67b793e5f0e python-dmidecode-3.10.13-1.el5_5.1.i386.rpm Source: c64fadc96b9a50d83c1ad8a401451886 python-dmidecode-3.10.13-1.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 15 Sep 2010 22:03:23 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0695 CentOS 5 x86_64 python-dmidecode Update To: centos-announce(a)centos.org Message-ID: <20100915220323.GA1081(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0695 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0695.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 856a846d2b27de0a5a74a055e100efcb python-dmidecode-3.10.13-1.el5_5.1.x86_64.rpm Source: c64fadc96b9a50d83c1ad8a401451886 python-dmidecode-3.10.13-1.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Wed, 15 Sep 2010 22:03:44 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0696 CentOS 5 i386 device-mapper-multipath Update To: centos-announce(a)centos.org Message-ID: <20100915220344.GA1122(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0696 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0696.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 4aa482821c012d554a32ef5c8dbea36b device-mapper-multipath-0.4.7-34.el5_5.5.i386.rpm 318dbe2838a06577258dfb85d33f8e0b kpartx-0.4.7-34.el5_5.5.i386.rpm Source: 7a78c52e025f0264d701da4d0caa0ab6 device-mapper-multipath-0.4.7-34.el5_5.5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Wed, 15 Sep 2010 22:03:45 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0696 CentOS 5 x86_64 device-mapper-multipath Update To: centos-announce(a)centos.org Message-ID: <20100915220345.GA1135(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0696 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0696.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 183024be4611c71b5cef0c667f1404b3 device-mapper-multipath-0.4.7-34.el5_5.5.x86_64.rpm 5658ce10f2a02dec4484109e35f5715c kpartx-0.4.7-34.el5_5.5.x86_64.rpm Source: 7a78c52e025f0264d701da4d0caa0ab6 device-mapper-multipath-0.4.7-34.el5_5.5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Wed, 15 Sep 2010 22:42:24 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2010:0698 Critical CentOS 5 i386 samba3x Update To: centos-announce(a)centos.org Message-ID: <20100915224224.GA2038(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2010:0698 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2010-0698.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 6503b6b291bd78f5f7b46e4c9cf990c5 libtalloc-1.2.0-52.el5_5.2.i386.rpm 4731ba6805281b11252a74423bafb8e2 libtalloc-devel-1.2.0-52.el5_5.2.i386.rpm ab10baeecfbb7c47b22d330876c220e8 libtdb-1.1.2-52.el5_5.2.i386.rpm ac57e1d00a9fdc510e1babfc2dc59200 libtdb-devel-1.1.2-52.el5_5.2.i386.rpm 73c6587408fdc07f36ebd51853424720 samba3x-3.3.8-0.52.el5_5.2.i386.rpm d38ca5e27e7203b586519a3b9109f583 samba3x-client-3.3.8-0.52.el5_5.2.i386.rpm fa3ee32c80d02d26c0545a83d0594284 samba3x-common-3.3.8-0.52.el5_5.2.i386.rpm 3111198becbc134b652a009f78ffeaa7 samba3x-doc-3.3.8-0.52.el5_5.2.i386.rpm 39e626cdab787a1b9070357cbd1d8a94 samba3x-domainjoin-gui-3.3.8-0.52.el5_5.2.i386.rpm 143b5d0c94e4ce763c2e874efeb445dd samba3x-swat-3.3.8-0.52.el5_5.2.i386.rpm 92737fd3fd703609b1058daec497c951 samba3x-winbind-3.3.8-0.52.el5_5.2.i386.rpm 62d57b92f6495dd991ebd35129719f74 samba3x-winbind-devel-3.3.8-0.52.el5_5.2.i386.rpm 231f2004f4b3d79609cbd7aa2b23a06c tdb-tools-1.1.2-52.el5_5.2.i386.rpm Source: 8d0334b7f8ac40bf6bbd218bb37a0ece samba3x-3.3.8-0.52.el5_5.2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Wed, 15 Sep 2010 22:42:24 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2010:0698 Critical CentOS 5 x86_64 samba3x Update To: centos-announce(a)centos.org Message-ID: <20100915224224.GA2053(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2010:0698 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2010-0698.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: faa58b13a65533c118e9ac87e8fa4d31 libtalloc-1.2.0-52.el5_5.2.i386.rpm b80ab40b83e91b8574042b910fbfed69 libtalloc-1.2.0-52.el5_5.2.x86_64.rpm 54aeccf8661c65be5565409474d3e03b libtalloc-devel-1.2.0-52.el5_5.2.i386.rpm 4be1c74624030887105083b7662677f3 libtalloc-devel-1.2.0-52.el5_5.2.x86_64.rpm 06efaf02dcd0ea44fefc7b95e8c82b8f libtdb-1.1.2-52.el5_5.2.i386.rpm 95ca91bc540aa2d9cd1a2483121bcb26 libtdb-1.1.2-52.el5_5.2.x86_64.rpm 170a9da8dadbb80262d384e28ae598ed libtdb-devel-1.1.2-52.el5_5.2.i386.rpm 96cc68fa2dd919e0081d270d090d637b libtdb-devel-1.1.2-52.el5_5.2.x86_64.rpm c31d38a24f542f021e8378b92aa8a64c samba3x-3.3.8-0.52.el5_5.2.x86_64.rpm 0f41215cb9fa48af12209b95b5dd2a3c samba3x-client-3.3.8-0.52.el5_5.2.x86_64.rpm 8a6f86d009471c5f6e59ed19bd9a665d samba3x-common-3.3.8-0.52.el5_5.2.x86_64.rpm 7f310dc6bb4926d021ec5ed8d1b41b4e samba3x-doc-3.3.8-0.52.el5_5.2.x86_64.rpm 53aaddc6e98f2f27d852237dc3367518 samba3x-domainjoin-gui-3.3.8-0.52.el5_5.2.x86_64.rpm 448ee5406039bddfbce98b27c3bd7e6f samba3x-swat-3.3.8-0.52.el5_5.2.x86_64.rpm 65a0bcbcb4cb09edf9d06d549c9e4bfd samba3x-winbind-3.3.8-0.52.el5_5.2.i386.rpm ea09138b7e0d0450d6ec9c29a0815e6d samba3x-winbind-3.3.8-0.52.el5_5.2.x86_64.rpm 7c002d38856f03aedd553040a403ef3c samba3x-winbind-devel-3.3.8-0.52.el5_5.2.i386.rpm 18102a90bf9461348bb35134d17ec615 samba3x-winbind-devel-3.3.8-0.52.el5_5.2.x86_64.rpm bc9e48350b387a76ee842e5fb13f9b1f tdb-tools-1.1.2-52.el5_5.2.x86_64.rpm Source: 8d0334b7f8ac40bf6bbd218bb37a0ece samba3x-3.3.8-0.52.el5_5.2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 7 Date: Wed, 15 Sep 2010 22:42:38 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2010:0697 Critical CentOS 5 i386 samba Update To: centos-announce(a)centos.org Message-ID: <20100915224238.GA2092(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2010:0697 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2010-0697.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 95ea039e89055e74c840c0ce0ab8fcc7 libsmbclient-3.0.33-3.29.el5_5.1.i386.rpm e7884a654e6cc4d5c9d30fb5ab76cf19 libsmbclient-devel-3.0.33-3.29.el5_5.1.i386.rpm 4fab6400c8746da9747d902339c8bc82 samba-3.0.33-3.29.el5_5.1.i386.rpm 09ba602f3a078b13aa1574b5ff308bdd samba-client-3.0.33-3.29.el5_5.1.i386.rpm 3f6bbfe8cf8dca2dfe4a4d4aec0006e1 samba-common-3.0.33-3.29.el5_5.1.i386.rpm fa36e85b6250c00f144d8580c248b7ec samba-swat-3.0.33-3.29.el5_5.1.i386.rpm Source: 9fcddec26db8ac54e5ce770787270c21 samba-3.0.33-3.29.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 8 Date: Wed, 15 Sep 2010 22:42:38 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2010:0697 Critical CentOS 5 x86_64 samba Update To: centos-announce(a)centos.org Message-ID: <20100915224238.GA2105(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2010:0697 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2010-0697.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 9bdbcbc0c4751e076eff5f4ace1da9df libsmbclient-3.0.33-3.29.el5_5.1.i386.rpm 286470855b539fb934b7c0e3970cad2c libsmbclient-3.0.33-3.29.el5_5.1.x86_64.rpm 8b36abb1501b50bfa29069beb7c5c09a libsmbclient-devel-3.0.33-3.29.el5_5.1.i386.rpm cb18f795b0789c13df069a3ac3f1044c libsmbclient-devel-3.0.33-3.29.el5_5.1.x86_64.rpm 42a4404a2f9c06d58cd7b5dde85a202f samba-3.0.33-3.29.el5_5.1.x86_64.rpm 609df33e18ed44a4aaae66087333a98a samba-client-3.0.33-3.29.el5_5.1.x86_64.rpm 73001f9c5655da7f40172e77a02f5eea samba-common-3.0.33-3.29.el5_5.1.i386.rpm 836f7ff873cad6beb0e38998e0171cce samba-common-3.0.33-3.29.el5_5.1.x86_64.rpm 24d2813d1c2cf77258e36c981dbddff1 samba-swat-3.0.33-3.29.el5_5.1.x86_64.rpm Source: 9fcddec26db8ac54e5ce770787270c21 samba-3.0.33-3.29.el5_5.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 67, Issue 5 **********************************************

1 0

Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system
by m.roth＠5-cent.us 17 Sep '10

17 Sep '10

Brunner, Brian T. wrote: >> > over the next several weeks, i'm teaching some courses in >> > RHEL admin but (unsurprisingly) i'll be using centos 5.5. >> > it's a decently-written, 3rd party course, all the generic, >> > standard admin topics but it does leave me about a 1/2 day >> > to throw in any cool stuff i want to add. >> > so, any recommendations for neat things that people here >> > have done > > For me: I'd want to have a closer look at things that *might* give > advantages but DO bring troubles: > SEL > KVM > > And dangers such as > DoS > DDoS > Zombie computers randomly port-scanning > Internal user ignorance, apathy, malice, and mis-information about how > to secure the campus network from the hostile world. > A boss who does not understand what he wants, but he wants it real bad. Which leads back to what I suggested - an overview of the architecture of *Nix. I worked in a division of a telecom once that some of the 27 teams had files *everywhere* (including /), and everyone had the root password.... mark

1 0

Remove all packages from specific repository
by Morten P.D. Stevens 17 Sep '10

17 Sep '10

Hi CentOS Mailinglist, we are using amavisd-new (with all dependencies) from Fedora/Redhat EPEL repo. Some packages from EPEL repo are very old. (amavisd-new, clamav, spamassassin) What's the best way to remove all amavisd-new packages (and it's dependencies) from EPEL repo and reinstall it from rpmforge repo? Thank you. Best regards, Morten

2 3

Amazon AMI based on CentOS 5?
by Mathieu Baudier 17 Sep '10

17 Sep '10

Hello, Amazon has just released a custom Linux distribution (Amazon Linux AMI) for use in their EC2 cloud: http://aws.amazon.com/ec2/faqs/#What_is_the_Amazon_Linux_AMI Out of curiosity, I googled a bit around it and read in various places (e.g. [1] and [2]) that it is based on CentOS 5 (basically a stripped down version) and should be compatible with most packages. Do any of you have confirmation of this? And more details/experience? (I'm not a EC2 user, so I cannot check by myself...) Thanks, Mathieu [1] http://www.cloudave.com/4872/open-source-and-cloud-computing-the-amazon-lin… [2] http://news.ycombinator.com/item?id=1693055

1 0

Bandwidth limit per user or ip
by Damas Ally 17 Sep '10

17 Sep '10

Greetings all, I would like to set the use of bandwidth in my network per user or ip address, is it possible using my linux box running Centos 5.1? regards, Damas -- "If opportunity doesn't knock, build a door". Says, Makweba Sir

2 3

xen domU crash
by Valentin Radu 17 Sep '10

17 Sep '10

Hello all, >From time to time (more often lately) all xen guests crash with all process to 9999% CPU load. All VM running with Fedora 8 OS (PV VM). On host (dual socket Xeon Nocona R0 3GHz) run CentOS x86_64 with hypervisor Xen 3.4.0 Have some similar experiences? Any ideas?

1 0

Firefox spelling checker
by Frank Cox 17 Sep '10

17 Sep '10

I just noticed that since the last updates, Firefox no longer does the automatic spelling checking thing in text boxes. I'm sure that it used to work and I'm not sure exactly when it stopped. I just tried it on two different up-to-date Centos 5 machines with the same results. "Check my spelling as I type" is set. -- MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com

2 2

Can anyone suggest a decent backup system?
by Kevin Thorpe 16 Sep '10

16 Sep '10

Hi all, We have a bit of a problem with backups. We've been using bacula to tape and now trying to disk but it's a complete nightmare as regards tape management. The backup to file storage went ok for ages and now is stuck 'waiting for max storage jobs' which is odd as that's set to 20 and it's the only backup running. That's totally typical of bacula. Can anyone suggest a simple backup package for us? Essentially a single server, full backup to tape every day. We don't need tape management as we're fully capable of reading the written label on the tape ourselves.

11 16

is Intel VT-d "really" necessary?
by Rudi Ahlers 16 Sep '10

16 Sep '10

Hi all, I'm just curios and would like some input from the community on this one. We're busy budgeting for a couple of new servers and I thought it would be good to try out the Core i7 CPU's, but see the majority of them don't offer VT-d, but just VT-x. Looking at the LGA1366 range, only the "Intel lga1366 i7 980XE" (from the list of what our suppliers stock) have VT-d, and it costs 4x more than "Intel lga1366 i7 930" or 2x more than "Intel lga1366 i7 960". From a budget perspecitve I could purchase 4 more CPU's, which could translate to 40x - 80x more VM's being hosted for the same capital outlay. Experience has shown that we under-utilize CPU's by a great margin and memory / HDD IO is our biggest bottleneck on any server. So, if VT-d really necessary? We mainly host XEN virtual machine for the hosting industry, i.e. we don't need / use graphics rendering inside VM's, or need DAS on the VM's, etc. -- Kind Regards Rudi Ahlers SoftDux Website: http://www.SoftDux.com Technical Blog: http://Blog.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

7 14

https
by Jerry Geis 16 Sep '10

16 Sep '10

hi all, I wish to just have secure browsing for my application. no credit cards or anything like that just secure browser usage is the goal. I can self sign a certificate (I already have) on my servers but for "anyone" accessing the server you see this "nasty" message about "untrusted sight " and all that. This will all be intranet type usage for the server. What is the best method to not see that "untrusted sight" and have the certificate load without and exception? jerry

8 7

CentOS-announce Digest, Vol 67, Issue 4
by centos-announce-request＠centos.org 16 Sep '10

16 Sep '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2010:0697 Critical CentOS 3 i386 samba - security and bug fix update (Tru Huynh) 2. CESA-2010:0697 Critical CentOS 3 x86_64 samba - security and bug fix update (Tru Huynh) 3. CESA-2010:0697 Critical CentOS 4 i386 samba - security and bug fix update (Tru Huynh) 4. CESA-2010:0697 Critical CentOS 4 x86_64 samba - security and bug fix update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Wed, 15 Sep 2010 15:23:12 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2010:0697 Critical CentOS 3 i386 samba - security and bug fix update To: centos-announce(a)centos.org Message-ID: <20100915132312.GA2862(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2010:0697 samba security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2010-0697.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/samba-3.0.9-1.3E.18.i386.rpm updates/i386/RPMS/samba-client-3.0.9-1.3E.18.i386.rpm updates/i386/RPMS/samba-common-3.0.9-1.3E.18.i386.rpm updates/i386/RPMS/samba-swat-3.0.9-1.3E.18.i386.rpm source: updates/SRPMS/samba-3.0.9-1.3E.18.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update samba Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

how to show that a filesystem is ACL-enabled?
by Robert P. J. Day 16 Sep '10

16 Sep '10

currently reading the RHEL deployment guide and i have a short question about ACLs that i can test on my centos 5.5 box. here: http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/Deploymen… the manual clearly claims that, in order to use ACLs on a filesystem, that filesystem must be mounted with the "acl" mount option, and even shows a sample /etc/fstab entry that represents that. however, i just verified that i can use setfacl to give my non-root account read access to /etc/shadow so, clearly(?), the root filesystem supports ACLs, but the mount entry for that filesystem in /etc/fstab reads only "defaults" and, as i read it in the man page for "mount", the "defaults" option is not listed as including the "acl" option. can someone clarify this? is there a command that shows whether a filesystem is currently acl-enabled? and is the mount man page simply incomplete in that respect? thanks. rday -- ======================================================================== Robert P. J. Day Waterloo, Ontario, CANADA Top-notch, inexpensive online Linux/OSS/kernel courses http://crashcourse.ca Twitter: http://twitter.com/rpjday LinkedIn: http://ca.linkedin.com/in/rpjday ========================================================================

3 3

Re: [CentOS] Can anyone suggest a decent backup system?
by Les Mikesell 16 Sep '10

16 Sep '10

On 9/16/10 6:20 AM, Sorin Srbu wrote: >> -----Original Message----- >> From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf >> Of Kevin Thorpe >> Sent: Thursday, September 16, 2010 11:59 AM >> To: CentOS mailing list >> Subject: Re: [CentOS] Can anyone suggest a decent backup system? >> >> I'll definitely look into BackupPC for HDD backups but they're in the >> same offfice and >> don't give us the audit monthend tapes we are required to keep > indefinitely. > > Given you have enough storage space, it's possible to keep a full backup > with BackupPC indefinitely as well, *if* you set up the rentention > parameters properly. I ran amanda and backuppc independently for a long time. Both are pretty much 'full automatic' once you set them up. If your backup window is long enough having both means you still have backups if one or the other has some kind of problem or is being upgraded. But, after years of never restoring from tapes I gave up on them and now have the backuppc archive on a 3-member raid1 mirror and swap one of the drives offsite regularly. Tapes are kind of an afterthought with backuppc, but if you want to use it by itself you can use its concept of 'archive host' to write a tar copy of the last backup to tape (or compress/split for dvds, etc.). This can be done through the web interface or you could use the command line tool that generates a tar image to script whatever you wanted to write to tape. With the command line tool you can specify the backup you want so you'd be able to generate a 'month-end' tar any time before the run for that day expired. Also, backuppc can use rsync over ssh for the transport, so once you get the initial copy you might be able to move the server to a remote location. -- Les Mikesell lesmikesell(a)gmail.com

1 0

why does automounting removable media always have options nodev, noexec, nosuid?
by Robert P. J. Day 15 Sep '10

15 Sep '10

i'm experimenting with some basic removable media mounting exercises for an upcoming class, and i read that, while you can use gconf-editor to change some of the mount options in cases like that, there is no way to override the mount options of nodev, noexec and nosuid. for example, that claim is made here (admittedly for fedora, but it appears to be true for centos as well): http://scrolls.mafgani.net/2007/03/gnome-automount-options/ is there somewhere that one could see and verify that those options always hold for mountable filesystems on removable media? thanks. rday -- ======================================================================== Robert P. J. Day Waterloo, Ontario, CANADA Top-notch, inexpensive online Linux/OSS/kernel courses http://crashcourse.ca Twitter: http://twitter.com/rpjday LinkedIn: http://ca.linkedin.com/in/rpjday ========================================================================

3 3

CentOS in low RAM settings
by Boris Epstein 15 Sep '10

15 Sep '10

Hello listmates, I have been playing with Xen VM's and was wondering what the minimum RAM size in which you could run CentOS 5.5 (i386). So far I managed to install in 256 MB or 512 MB and then shrink the VM's RAM to 128 MB and still run the installation. Would anyone know why the install in a 128 MB VM fails (even in text mode)? Thanks. Boris.

3 2

Re: [CentOS] CentOS in low RAM settings
by J.Witvliet＠mindef.nl 15 Sep '10

15 Sep '10

-----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Bobby Sent: Wednesday, September 15, 2010 3:11 PM To: CentOS mailing list Subject: Re: [CentOS] CentOS in low RAM settings On Wednesday, September 15, 2010 09:00:35 am Boris Epstein wrote: > Hello listmates, > > I have been playing with Xen VM's and was wondering what the minimum > RAM size in which you could run CentOS 5.5 (i386). So far I managed to > install in 256 MB or 512 MB and then shrink the VM's RAM to 128 MB and > still run the installation. Would anyone know why the install in a 128 > MB VM fails (even in text mode)? > > Thanks. > > Boris. Eh, not enough RAM. :) -- Sometimes one can add swap during the installation. But swap is slow and thus making the installation takes twice (or worse) longer. Better is what you did, install with lots of mem, are reducing it afterwards. ______________________________________________________________________ Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten. This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages.

1 0

Centos Virtual Machine 32 bit with 8 GB ram ?
by Roland RoLaNd 15 Sep '10

15 Sep '10

Hello, I have a centos 5.2 core 2 duo 3.0 GHZ with 2 GB ram which is working as a Virtual machine. i've just upgraded the hosting physical server from 32 GB to 64 GB of ram. which in turn, would require me to upgrade the VM to 8 GB. this is a 32 bit centos installation, would the system recognize and use the 8 GB? the option of using a 64 bit centos isnt possible. So i'm turning to you for advice. would upgrading the Ram be enough, or is there anything to be done that's kernel based of some sort? best, --Roland

7 14

problem with gfs_controld
by sandra-llistes 15 Sep '10

15 Sep '10

Hi, We have two nodes with centos 5.5 x64 and cluster+gfs offering samba and NFS services. Recently one node displayed the following messages in log files: Sep 13 08:19:07 NODE1 gfs_controld[3101]: cpg_mcast_joined error 2 handle 2846d7ad00000000 MSG_PLOCK Sep 13 08:19:07 NODE1 gfs_controld[3101]: send plock message error -1 Sep 13 08:19:11 NODE1 gfs_controld[3101]: cpg_mcast_joined error 2 handle 2846d7ad00000000 MSG_PLOCK Sep 13 08:19:11 NODE1 gfs_controld[3101]: send plock message error -1 When this happens in the other node access to samba services begin to freeze and this error appears: Sep 13 08:08:22 NODE2 kernel: INFO: task smbd:23084 blocked for more than 120 seconds. Sep 13 08:08:22 NODE2 kernel: "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. Sep 13 08:08:22 NODE2 kernel: smbd D ffff810001576420 0 23084 6602 23307 19791 (NOTLB) Sep 13 08:08:22 NODE2 kernel: ffff81003e187e08 0000000000000086 ffff81003e187e24 0000000000000092 Sep 13 08:08:22 NODE2 kernel: ffff810005dbdc38 000000000000000a ffff81003f4f77a0 ffffffff80309b60 Sep 13 08:08:22 NODE2 kernel: 000062f1773ef4c3 000000000000624f ffff81003f4f7988 000000008008c597 Sep 13 08:08:22 NODE2 kernel: Call Trace: Sep 13 08:08:22 NODE2 kernel: [<ffffffff8875cb7d>] :dlm:dlm_posix_lock+0x172/0x210 Sep 13 08:08:22 NODE2 kernel: [<ffffffff800a1ba4>] autoremove_wake_function+0x0/0x2e Sep 13 08:08:22 NODE2 kernel: [<ffffffff8882a5b9>] :gfs:gfs_lock+0x9c/0xa8 Sep 13 08:08:22 NODE2 kernel: [<ffffffff8003a142>] fcntl_setlk+0x11e/0x273 Sep 13 08:08:22 NODE2 kernel: [<ffffffff800b878c>] audit_syscall_entry+0x180/0x1b3 Sep 13 08:08:22 NODE2 kernel: [<ffffffff8002e7da>] sys_fcntl+0x269/0x2dc Sep 13 08:08:22 NODE2 kernel: [<ffffffff8005e28d>] tracesys+0xd5/0xe0 The configuration of the cluster is the following: <?xml version="1.0"?> <cluster alias="lcfib" config_version="60" name="lcfib"> <quorumd device="/dev/gfs-webn/quorum" interval="1" label="quorum" min_score="1" tko="10" votes="2"> <heuristic interval="10" program="/bin/ping -t1 -c1 numIP.1" score="1" tko="5"/> </quorumd> <fence_daemon post_fail_delay="0" post_join_delay="3"/> <clusternodes> <clusternode name="NODE2.fib.upc.es" nodeid="1" votes="1"> <fence> <method name="1"> <device lanplus="1" name="NODE2SP"/> </method> </fence> </clusternode> <clusternode name="NODE1.fib.upc.es" nodeid="2" votes="1"> <fence> <method name="1"> <device lanplus="1" name="NODE1SP"/> </method> </fence> </clusternode> </clusternodes> <cman broadcast="yes" expected_votes="4" two_node="0"/> <fencedevices> <fencedevice agent="fence_ipmilan" auth="md5" ipaddr="192.168.13.77" login="" name="NODE2SP" passwd="5jSTv3Mb"/> <fencedevice agent="fence_ipmilan" auth="md5" ipaddr="192.168.13.78" login="" name="NODE1SP" passwd="5jSTv3Mb"/> </fencedevices> <rm> <failoverdomains> <failoverdomain name="NODE1-NODE2" ordered="1" restricted="1"> <failoverdomainnode name="NODE2.fib.upc.es" priority="2"/> <failoverdomainnode name="NODE1.fib.upc.es" priority="1"/> </failoverdomain> <failoverdomain name="NODE2-NODE1" ordered="1" restricted="1"> <failoverdomainnode name="NODE2.fib.upc.es" priority="1"/> <failoverdomainnode name="NODE1.fib.upc.es" priority="2"/> </failoverdomain> </failoverdomains> <resources> <script file="/etc/init.d/fibsmb1" name="fibsmb1"/> <script file="/etc/init.d/fibsmb2" name="fibsmb2"/> <clusterfs device="/dev/gfs-webn/gfs-webn" force_unmount="0" fsid="14417" fstype="gfs" mountpoint="/web" name="web" options=""/> <clusterfs device="/dev/gfs-perfils/gfs-assig" force_unmount="0" fsid="21646" fstype="gfs" mountpoint="/assig" name="assig" options=""/> <smb name="FIBSMB1" workgroup="FIBSMB"/> <smb name="FIBSMB2" workgroup="FIBSMB"/> <ip address="numIP.111/24" monitor_link="1"/> <ip address="numIP.110/24" monitor_link="1"/> <ip address="numIP.112/24" monitor_link="1"/> </resources> <service autostart="1" domain="NODE2-NODE1" name="samba" recovery="disable"> <clusterfs ref="web"/> <ip ref="numIP.110/24"/> <ip ref="numIP.112/24"/> <clusterfs ref="assig"/> <script ref="fibsmb2"/> <smb ref="FIBSMB2"/> </service> <service domain="NODE2-NODE1" name="sambalin" recovery="disable"> <clusterfs ref="web"/> <ip ref="numIP.111/24"/> <smb ref="FIBSMB1"/> <script ref="fibsmb1"/> </service> </rm> </cluster> I thinks it's a problem with the configuration, and the cluster cannot communicate together at one point. Any hints about this? Thanks, Sandra PD: versions of kernel and cluster kernel-2.6.18-194.el5 cman-2.0.115-34.el5 kmod-gfs-0.1.34-12.el5.centos gfs-utils-0.1.20-7.el5

1 0

[Fwd: Re: Problem with SSHD update.]
by James B. Byrne 14 Sep '10

14 Sep '10

On Tue, September 14, 2010 02:30, R P Herrold wrote: > On Mon, 13 Sep 2010, Karanbir Singh wrote: > >> So, I'm quite keen on finding out what is it that is causing >> the breakage for you > > Karanbir, in the middle of the thread from the archive: > > James B. Byrne at Mon Sep 13 12:59:25 EDT 2010 >> Did that via webmin's command interface and nothing changed >> insofar as I can see. Same error obtained when starting >> sshd. > > We ship no webmin of course, and it tinkers with the > dependency chain for openssh ourside of the package system. > > -- Russ herrold I did not use webmin to update. I only resorted to using webmin to access the server after I could no longer connected to the host using ssh. The update was performed in an ssh session using yum update. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3 -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

cron breaking when enabling ldap
by Gerrard Geldenhuis 14 Sep '10

14 Sep '10

Hi When I enable a box to do authentication using LDAP it breaks cron for users like jboss. I get the following in /var/log/secure Sep 14 15:25:01 exoipatest01 crond[7214]: pam_access(crond:account): access denied for user `jboss' from `cron' I have the following in /etc/ldap.conf nss_initgroups_ignoreusers root,ldap,named,avahi,haldaemon,dbus,tomcat,radiusd,news,mailman,nscd,jboss /etc/pam.d/crond auth sufficient pam_env.so auth required pam_rootok.so auth include system-auth account required pam_access.so account include system-auth session required pam_loginuid.so session include system-auth /etc/pam.d/system-auth-ac #%PAM-1.0 # This file is auto-generated. # User changes will be destroyed the next time authconfig is run. auth required pam_env.so auth sufficient pam_unix.so nullok try_first_pass auth requisite pam_succeed_if.so uid >= 500 quiet auth sufficient pam_ldap.so use_first_pass auth required pam_deny.so account required pam_access.so account required pam_unix.so broken_shadow account sufficient pam_localuser.so account sufficient pam_succeed_if.so uid < 500 quiet account [default=bad success=ok user_unknown=ignore] pam_ldap.so account required pam_permit.so password requisite pam_cracklib.so type= retry=3 difok=3 minlen=8 dcredit=-1 ocredit=-1 ucredit=-1 lcredit=0 password sufficient pam_unix.so md5 shadow nullok try_first_pass use_authtok password sufficient pam_ldap.so use_authtok password required pam_deny.so session optional pam_keyinit.so revoke session required pam_limits.so session optional pam_mkhomedir.so session [success=1 default=ignore] pam_succeed_if.so debug service in crond quiet use_uid session required pam_unix.so session optional pam_ldap.so I have added + : jboss : cron to /etc/security/access.conf which fixes the problem. However I am not sure that it is the "correct" fix. I would have thought that the string in /etc/ldap.conf nss_initgroups_ignoreusers would prevent this error unless I am confused about the pam ordering and sequence of how authentication happens. The cron job executes fine without LDAP enabled. Can anyone shed any more light on this error and a possible fix? I am using CentOS 5.5 fully updated. Best Regards ________________________________________________________________________ In order to protect our email recipients, Betfair Group use SkyScan from MessageLabs to scan all Incoming and Outgoing mail for viruses. ________________________________________________________________________

1 1

TCP flow latency graphs
by przemolicc＠poczta.fm 14 Sep '10

14 Sep '10

Hello, we have one application which gets some data from our database but to print just one result it connects many times to the database over WAN. Of course there are some performance related problems with this type of work. I'd like to analyze (not necessary online) its tcp flow especially its latency (using port redirect on switch). Do you know any software (similar to tcpdump or so) which will let me graph/paint latency between each connection and each tcp flow ? Regards Przemek --------------------------------------------- Volskwagen, Audi, BMW, bezpoĹrednio z Niemiec! http://linkint.pl/f27f7

3 2

Help! Help ! i done centos upgrade
by Ernatalo su Gmail 14 Sep '10

14 Sep '10

Hi to all, i have a server with Centos 5.5 - 64 bit and i done 3 maounths ago filesystem update from ext3 to ext4. All things worked fine behind today. Today i done centos upgrade and now i'heve only GRUB Prompt. Can you help me me to strat the sterver without lose nothing? Thanks Ernatalo

5 7

CentOS 5.4 and 5.5 UPS EATON/MGE
by burnbrain 14 Sep '10

14 Sep '10

Hi Guys, I have a couple of servers which runs CentOS 5.5 and CentOS 5.4. We have decided to buy a UPS and we choose Eaton EX RT 11 plus eaton network management card minislot. I have read on the site of Eaton that they have two applications which could gracefully shutdown my servers - LanSafe and NetWatch. My experience with UPS and those applications is zero so I`m here for some advises? Do you prefer NetWatch over LanSafe? What is your suggestions?Any info is much appreciated! Thank you in advanced!

1 0

No live migration for xen virtual machines any more
by Dirk H. Schulz 14 Sep '10

14 Sep '10

Hi folks, I have upgraded my CentOS RHCS cluster hosts to the recent packages, and now live migration of the xen virtual machines does not work any more: [root@node ~]# clusvcadm -M vm:XenVM -m othernode Trying to migrate vm:XenVM to othernode...Invalid operation for resource I have googled the net but found no recent entries for that problem, just older posts. Has anyone had the same problem recently? If yes: is there any workaround? Any hint or help is appreciated. Dirk

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss