- Discuss - lists.centos.org

processor affinity
by Adam Grossman 18 Feb '10

18 Feb '10

Hello, i am running CentOS 5.4. i have a requirement where i need to have 1 application have a single processor all to its self, and the rest of the system run on the other processors. "taskman" lets me bind the process to a processor(s), but it does not make it exclusive. Is this possible to do? i have even tried mucking around with the rc.sysinit, but to no avail. thank you very much, -=- adam grossman

5 9

annoying random Firefox crash - how to debug?
by Rudi Ahlers 18 Feb '10

18 Feb '10

Hi, My firefox (Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.6) Gecko/20091216 Fedora/3.5.6-1.fc11 Firefox/3.5.6) on Gnome 2.26.3 will randomly crash, without any errors. /var/log/messages & /var/log/Xorg.0.log doesn't show anything that caused any errors. And it doesn't matter on which website(s) I'm busy with, it will just crash. Does anyone know how to check for a problem? My PC has: Intel Pentium(R) Dual-Core E5200 CPU 4GB DDRII Corsair RAM 3x 160GB SATAII HDD Asus Nvidia 8800GT graphics card. I have updated to the latest nVidia drivers [root@Rudi-PC ~]# dmesg | grep nvidia nvidia: module license 'NVIDIA' taints kernel. nvidia 0000:01:00.0: setting latency timer to 64 nvidia-config-d[1399]: segfault at 7f0888000000 ip 0000003ff107bf54 sp 00007ffff39d1898 error 4 in libc-2.10.2.so[3ff1000000+164000] [root@Rudi-PC ~]# dmesg | grep nvidia nvidia: module license 'NVIDIA' taints kernel. nvidia 0000:01:00.0: setting latency timer to 64 nvidia-config-d[1399]: segfault at 7f0888000000 ip 0000003ff107bf54 sp 00007ffff39d1898 error 4 in libc-2.10.2.so[3ff1000000+164000] [root@Rudi-PC ~]# uname -a Linux Rudi-PC 2.6.30.10-105.2.23.fc11.x86_64 #1 SMP Thu Feb 11 07:06:34 UTC 2010 x86_64 x86_64 x86_64 GNU/Linux P.S. This is on Fedora Core 12, but it's RH based, so I thought maybe someone on this list might have some insight into the problem? -- Kind Regards Rudi Ahlers SoftDux Website: http://www.SoftDux.com Technical Blog: http://Blog.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

8 20

udp stream multiply
by Jure Pečar 18 Feb '10

18 Feb '10

Hello, Not strictly a CentOS question, but I hope someone can hint me in the right direction ... I have an incoming udp data stream to public interface that I want to duplicate and multipy to three or more destinations on the internal interface. Currently I've managed to put together netcat listener with output to pipe and socat reading from that pipe to a single destination. I hoped I could have more than one socat reader from the pipe, but that does not seem to be the case. So I'm able to only redirect stream to a single destination on lan. I'd also like to avoid this mess of shell tools and pipes and am looking for a cleaner solution. Any hints? -- Jure Pečar http://jure.pecar.org

6 9

Clustering apache
by Dan Burkland 17 Feb '10

17 Feb '10

I'm a greenhorn when it comes to clustering in RHEL/CentOS and recently setup an active/standby clustering using Apache & Heartbeat. It seems to be a good entry step into clustering however after testing it I was disappointed in that the resource manager does not start httpd on node2 if httpd on node1 is dead (only starts httpd on node2 if the heartbeat daemon on node1 is dead). Is there anyway to achieve this setup if not with Heartbeat with some sort of other HA solution? Thank you! Dan

3 3

DRBD Info
by Joseph L. Casale 17 Feb '10

17 Feb '10

Hey Guys, I want to use drbd (prot A) to handle replication for some backup volumes. I see 8/8.2/8.3 available, are the 8.3 packages considered stable? The files on the primary node will be from 2->400 gig in size. The nodes are interconnected by gig fiber, the volumes will be lvm backed, given I have never used drbd are there aspects of this that glare out? Thanks! jlc

1 0

a VNC client suitable to monitor 15 desktops in 1 screen, automatic reconnect. Exists?
by Andres Salazar 17 Feb '10

17 Feb '10

Hello, Is there a VNC client out there that can permit me to run it 15 times simultaneously and scale them smaller so that I can view 15 little remote screens (at the same time) in my one big monitor? Also, is there a way to make it so if the PC is rebooted the client automatically reconnects ? The goal of this is to have one big monitor to view in realtime what people are doing in their PCs. Without interaction from me with the mouse/keyboard.. all I need to do is watch. A plus if this VNC client is compatible with MacOS/windows Andres

3 2

SAS raid controllers
by Gordon McLellan 17 Feb '10

17 Feb '10

Is anyone running either the newish Adaptec 5805 or the new LSI (3ware) 9750 sas raid controllers in a production environment with Centos 5.3/5.4? The low price of these cards makes me suspicious, compared to the more expensive pre-merger 3ware cards and considerably more expensive Areca ARC-1680. I've been 'burned' by the low cost of Promise raid cards (just as this group pointed out, they're crap cards!), but I'm still not convinced that most expensive == best. When it comes to parallel scsi cards, Adaptec has always been my choice regardless of platform, but I've never used their serial scsi products. I have several older pre-merger 3ware cards installed and have been working flawlessly for years, but under a windows environment. I noticed none of these manufacturers are listed on the upstream provider's HCL, yet they all eagerly claim "Linux" support on their respective websites.. The Adapetc website actually names both Centos and the upstream provider as 'supported'. Kind Regards, Gordon

4 3

Load Balancer (heartbeat, ldirectord, ipvsadm) + Apache Problem
by Roberto HT 17 Feb '10

17 Feb '10

Hi, I'm having this problem with load balancer. I already setup the load balancer and two servers behind it with this kind of topology ----------------------------------------------------- request -> DIRECTOR -- Server 1 \ Server 2 ----------------------------------------------------- DIRECTOR's (RHEL 5) Virtual IP = 192.168.1.1 Server 1's (RHEL 4.4) Virtual IP = 192.168.1.2 Server 2's (CentOS 5.3) Virtual IP = 192.168.1.3 The problem is when I try to hit the 192.168.1.1, it sometimes give me a HTTP 200 and sometimes it will timed out. I hit it using lynx -dump. It should return "Hello world!" if success. But if we hit it directly to 192.168.1.2:80 and 192.168.1.3:80, it will return HTTP 200 which means no error and no timeout. Since the Server 1 is the same as Server 2 in configuration, are there somethings I missed here? Another information is that I set the director using round robin algorithm, so everytime a successful hit returned from server 1, the next one is surely heading to Server 2 right? Based on the Apache's access log, I also knew that the timed out occured when it is the Server 2's turn to handle the request. Aside from the same httpd.conf and the same httpd version are there any things in the system level, kernel level that should be the same between those two servers? Thanks. Roberto

2 3

What is the driver for Intel Corporation Mobile GM965/GL960 Graphics Controller ?
by hce 17 Feb '10

17 Feb '10

Hi, What is the driver name for Intel Corporation Mobile GM965/GL960 Integrated Graphics Controller (rev 03) I can download from yum? Thank you. Kind Regards

1 0

Anyone using Active Driectory auth with Centos 5.4.....?
by Tom Bishop 17 Feb '10

17 Feb '10

Setting up a new backuppc for a small group of device and I am running centos 5.4 with winbind setup and working. Everything is working and I would like the users to authenicate using their AD creds and was wondering what folks are using to do that with apache 2.2 and centos 5.4. I know about mod_auth_pam but that seems pretty dead so I was just wondering what folks were using and whats the easiest to setup. Any pointers to any how to's would be appreciated...Thanks.

12 20

Adobe 64Bit Flash Player 10 went alpha
by Timo Schoeler 17 Feb '10

17 Feb '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, just for the ones who didn't hear about this yet: http://labs.adobe.com/downloads/flashplayer10_64bit.html Best, Timo -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iD8DBQFLe517fg746kcGBOwRAmUXAJ44kADgA8Dj6HfntfnHa1Obn1xfZQCbBjvC LjR1yy+qioA1N7Eo7WtVjRM= =S0fb -----END PGP SIGNATURE-----

1 0

password protect kickstart ftp
by Kwan Lowe 16 Feb '10

16 Feb '10

Hello all: Does anyone know if it's possible to set an ftp user and password on the kickstart? E.g., something like: At the GRuB prompt of the boot.iso: linux ks=ftp://username:password@192.168.0.100/authftp/ks/standard.ks

1 0

Configuring Local Repo
by Alberto Garcia Gomez 16 Feb '10

16 Feb '10

I have a local repo of Centos, I'll like to used as part of my Internet Repos, so I wonder how can I do that ___________________________________ Atte. Alberto García Gómez M:.M:. Administrador de Redes/Webmaster Dirección Provincial de Educación. Matanzas, Cuba.

2 1

hplip packages centos4
by Terry Polzin 16 Feb '10

16 Feb '10

where can I find packages for hplip and it's deps for centos4x?

3 3

priorities don't prevent other repos overwritting packages?
by Stephen Harris 16 Feb '10

16 Feb '10

Either I've made a mistake in my configuration or else packages from other repos can obsolete core packages For example, I did a "yum update" on some rpmforge packages and saw this: Installing: perl-Date-Manip noarch 5.54-2.el5.rf rpmforge 210 k replacing perl-DateManip.noarch 5.44-1.2.1 perl-IO-Compress noarch 2.024-1.el5.rf rpmforge 242 k replacing perl-Compress-Zlib.i386 1.42-1.fc6 If I try to install the original packages: % yum install perl-Compress-Zlib Loaded plugins: priorities 476 packages excluded due to repository priority protections Setting up Install Process Package perl-Compress-Zlib is obsoleted by perl-IO-Compress, trying to install perl-IO-Compress-2.024-1.el5.rf.noarch instead Package perl-IO-Compress-2.024-1.el5.rf.noarch already installed and latest version Nothing to do % yum install perl-DateManip Loaded plugins: priorities 476 packages excluded due to repository priority protections Setting up Install Process Package perl-DateManip is obsoleted by perl-Date-Manip, trying to install perl-Date-Manip-5.54-2.el5.rf.noarch instead Package perl-Date-Manip-5.54-2.el5.rf.noarch already installed and latest version Nothing to do I have rpmforge with priority=10 I have the centos base and update repositories with priority=1 Have I made a stupid mistake with my configuration? -- rgds Stephen

2 2

is yum a complete substitute of rpm?
by Jim Green 16 Feb '10

16 Feb '10

Dear Centos community, I am new to centos/redhat and I would like to know on a centos system, can I use yum alone to do all package management? I don't want to learn two systems and confuse myself, I understand yum is much better than rpm if is the case? Thank you! Jim

9 13

[OT?] diffs between mysql 5.0 and 5.1, and upgrading to mysql 5.1?
by Robert P. J. Day 16 Feb '10

16 Feb '10

being used to mysql 5.1 on my fedora system, i'm suddenly looking after a centos 5.4 box with mysql 5.0.77. before i start digging into the mysql 5.0-5.1 changelog, do i have a lot to worry about in terms of mentally backing up one version? or is simply upgrading the centos box to mysql 5.1 an option? (i realize that mysql 5.1 is *not* officially supported in centos 5.4.) rday -- ======================================================================== Robert P. J. Day Waterloo, Ontario, CANADA Linux Consulting, Training and Kernel Pedantry. Web page: http://crashcourse.ca Twitter: http://twitter.com/rpjday ========================================================================

3 2

Apache bandwidth limiting?
by Jason Pyeron 16 Feb '10

16 Feb '10

Can this be done with stock centos 4? Or can this even be done with the extras repo? -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Principal Consultant 10 West 24th Street #100 - - +1 (443) 269-1555 x333 Baltimore, Maryland 21218 - - - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- This message is copyright PD Inc, subject to license 20080407P00.

6 8

pam_mount
by Marcus Moeller 16 Feb '10

16 Feb '10

Hi all, I am a bit confused about the usage of pam_mount. Here is my /etc/pam.d/system-auth: auth required pam_env.so auth required pam_mount.so auth sufficient pam_unix.so nullok try_first_pass auth requisite pam_succeed_if.so uid >= 500 quiet auth sufficient pam_krb5.so use_first_pass auth required pam_deny.so account required pam_unix.so broken_shadow account sufficient pam_localuser.so account sufficient pam_succeed_if.so uid < 500 quiet account [default=bad success=ok user_unknown=ignore] pam_krb5.so account required pam_permit.so password requisite pam_cracklib.so try_first_pass retry=3 password sufficient pam_unix.so sha512 shadow nullok try_first_pass use_authtok password sufficient pam_krb5.so use_authtok password required pam_deny.so session optional pam_keyinit.so revoke session required pam_limits.so session optional pam_mkhomedir.so session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid session required pam_unix.so session optional pam_krb5.so session optional pam_mount.so If pam_mount.so is listed in the session definition I will be asked for the password a second time during SSH login: At this stage the share is already mounted. I can just remove the: session optional pam_mount.so from system-auth which seem to work fine. Even the share is unmounted successfully on logout. So my question is: what is the session entry used for within pam_mount (as the usage is suggested in the man page and in the docs)? Best Regards Marcus

2 2

R package on centos 5.1
by hersh parikh 16 Feb '10

16 Feb '10

Hi I want to install R package on centos 5.1, however I am not able to install it . Can anyone please tell me how can I install R on centos 5.1? Thank you Hersh Your Mail works best with the New Yahoo Optimized IE8. Get it NOW! http://downloads.yahoo.com/in/internetexplorer/

4 4

More oddities with priorities
by Stephen Harris 16 Feb '10

16 Feb '10

Following on from my previous, I removed the perl-Date-Manip and re-installed the Centos base perl-DateManip package. When I do a "check-update" then it shows nothing needs to be done, but if I do an "update" then it tries to replace the package! In the following, c5-local, update-local, rpmforge are local rsync'd copies of the base, updates and rpmforge repositories. This shouldn't make any difference, though. $ yum clean all Loaded plugins: priorities Cleaning up Everything $ yum -d2 check-update Loaded plugins: priorities c5-local | 2.1 kB 00:00 c5-local/primary_db | 1.6 MB 00:00 extras-local | 1.1 kB 00:00 extras-local/primary | 107 kB 00:00 extras-local 325/325 rpmforge | 1.1 kB 00:00 rpmforge/primary | 3.6 MB 00:00 rpmforge 10065/10065 update-local | 1.9 kB 00:00 update-local/primary_db | 510 kB 00:00 476 packages excluded due to repository priority protections $ yum update Loaded plugins: priorities 476 packages excluded due to repository priority protections Setting up Update Process Resolving Dependencies --> Running transaction check ---> Package perl-Date-Manip.noarch 0:5.54-2.el5.rf set to be updated --> Finished Dependency Resolution Dependencies Resolved ================================================================================ Package Arch Version Repository Size ================================================================================ Installing: perl-Date-Manip noarch 5.54-2.el5.rf rpmforge 210 k replacing perl-DateManip.noarch 5.44-1.2.1 Transaction Summary ================================================================================ Install 1 Package(s) Update 0 Package(s) Remove 0 Package(s) Total download size: 210 k Is this ok [y/N]: n Exiting on user Command Complete! $ -- rgds Stephen

1 0

Re: [CentOS] priorities don't prevent other repos overwritting packages?
by Stephen Harris 16 Feb '10

16 Feb '10

On Mon, Feb 15, 2010 at 09:00:33PM -0500, Scot P. Floess wrote: > > Do you have the yum-priorities package installed? Yes, as can be seen from the output I included :-) > >Loaded plugins: priorities > >476 packages excluded due to repository priority protections -- rgds Stephen

1 0

Hardisk cloning for centos-5.3
by premrajm＠digilink.in 15 Feb '10

15 Feb '10

Hi, I want to clone my hardisk containing the centos-5.3 OS and its swap region on to new raw hardisk via network either through ssh, tftp or ftp. How do i do that ? Is there any Tool for that or will DD command be sufficient.I know that dd command will have to be used on hardisk with already existing partitions and not on raw disk. Regards, Premraj M Disclaimer : This message is proprietary to Smartlink Network Systems Limited and is intended solely for the use of the individual to whom it is addressed. It may contain privileged or confidential information and should not be circulated or used for any purpose other than for what it is intended. If you have received this message in error, please notify the originator immediately. If you are not the intended recipient, you are notified that you are strictly prohibited from using, copying, altering, or disclosing the contents of this message. Smartlink Network Systems Ltd. accepts no responsibility for loss or damage arising from the use of the information transmitted by this email including damage from virus. ______________________________________________________________________________ This email has been scrubbed for your protection by SecureMX. For more information visit http://securemx.in ______________________________________________________________________________

7 6

Serial Port or USB monitoring / Logging
by Gregory P. Ennis 15 Feb '10

15 Feb '10

Dear List, I have a piece of equipment that sends data or reports data via a serial or usb port. I would like to connect this piece of equipment to a serial or usb port of a Centos 5.4 machine and capture the report information. I thought this would be an easy perl task, but since I have not completed the objective ... it has not been easy yet. Do any of you have any perl scripts that do this? I would like to look at your logic either for a serial or usb port. Thanks in advance!!!! Greg Ennis

4 8

where is MySQL-zrm-client rpm package?
by Robert P. J. Day 15 Feb '10

15 Feb '10

i was looking at options for backing up mysql databases across the net, and ran across this: http://www.zmanda.com/download-zrm.php clearly, there are two rpms for linux: * MySQL-zrm-2.2.0-1.noarch.rpm * MySQL-zrm-client-2.2.0-1.noarch.rpm but on a centos 5.4 system, if i do # yum search zrm i see only "MySQL-zrm.noarch". anyone know why the centos repo would only know about one of those packages? i suspect that, to be safe, i should download the ones from the zmanda site. rday -- ======================================================================== Robert P. J. Day Waterloo, Ontario, CANADA Linux Consulting, Training and Kernel Pedantry. Web page: http://crashcourse.ca Twitter: http://twitter.com/rpjday ========================================================================

2 1

xterm clones on VNC problem
by Emmanuel Noobadmin 15 Feb '10

15 Feb '10

I've been scratching my head over this one after setting up VNC on another existing server. Followed the instructions here http://wiki.centos.org/HowTos/VNC-Server as usual. It worked initially. However since this server is going to be installed in a rather inconvenient place and having done pretty stupid things before, I decided for the first time to try the portion that says # Add the following line to ensure you always have an xterm available. ( while true ; do xterm ; done ) & So that I don't inevitably do something like kill kde and find myself unable to do anything. The problem now is, for some reason, I get 4 xterm window after restarting (or stop/start) vncserver. The symptoms now are 1. Consistently, of the four xterms window, #3 and #4 can be closed. #1 and #2 will resurrect themselves. *** Removing the while loop from /home/user/.vnc/xstartup does not change this. 2. if I comment out this line in /home/user/.vnc/xstartup exec /etc/X11/xinit/xinitrc I will not get this problem. At least there will only be one xterm window in what I think is the primitive twm desktop. 3. If I then uncomment the xinitrc line, I get back 4 xterms window after restarting vncserver. It's like KDE is somehow insisting on running that while loop even after I've deleted it from the xstartup file. How do I fix this? Admittedly I could simply minimize the two xterm windows and/or switch virtual desktop and ignore them. but obviously something is wrong and it makes me uncomfortable. Everything is 5.3 standard, I've not touched the default X11 config nor xinitrc. Except I did do an yum update to current.

3 8

CentOS-announce Digest, Vol 60, Issue 3
by centos-announce-request＠centos.org 14 Feb '10

14 Feb '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2010:0101 Important CentOS 3 i386 openoffice.org - security update (Tru Huynh) 2. CESA-2010:0101 Important CentOS 3 x86_64 openoffice.org - security update (Tru Huynh) 3. CESA-2010:0101 Important CentOS 5 i386 openoffice.org Update (Karanbir Singh) 4. CESA-2010:0101 Important CentOS 5 x86_64 openoffice.org Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Sun, 14 Feb 2010 00:15:08 +0100 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2010:0101 Important CentOS 3 i386 openoffice.org - security update To: centos-announce(a)centos.org Message-ID: <20100213231507.GE20504(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2010:0101 openoffice.org security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2010-0101.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/openoffice.org-1.1.2-46.2.0.EL3.i386.rpm updates/i386/RPMS/openoffice.org-i18n-1.1.2-46.2.0.EL3.i386.rpm updates/i386/RPMS/openoffice.org-libs-1.1.2-46.2.0.EL3.i386.rpm source: updates/SRPMS/openoffice.org-1.1.2-46.2.0.EL3.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update openoffice.org Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

USB GPS
by Ray Van Dolson 14 Feb '10

14 Feb '10

Anyone ever used the iGPS-500 under CentOS 5? Any recommendations on a USB-based GPS that "just works"? Ray

5 5

How to display laptop screen on LCD TV?
by hce 14 Feb '10

14 Feb '10

Hi, I am running CentOS 5.2 on Acer laptop, I try to display laptop screen on a LCD TV via VGA cable. It was fine while PC was booting in text mode, but as soon as I started X Window, the LCD TV has error "Unsupported signal, adjust your PC out". How can I adjust or may be regenerate an xorg.conf for the LCD TV (Sony KDL-40V5500)? Thank you. Kind Regards, Jupiter

4 5

How to remove an entry in the media table
by Todd Cary 13 Feb '10

13 Feb '10

I messed up the other day when I did a rsync backup to my usb external drive *but* forgot to mount it (turn it on). So the system appears to have renamed the correct one (external) to usbdrive1 and created a directory on the HD, usbdrive. It has been well over a year since I made that error and have forgotten the location and name of the table that contains the usbdrive and usbdrive1 entries. As I recall, I need to edit the table by removing the usbdrive entry and renaming usbdrive1 to usbdrive. Guidance is welcomed.... Todd -- Ariste Software Petaluma, CA 94952 http://www.toddcary.com/aristephotography/

1 0

xfs_repair doesn't fix sb versionnum missing attr
by C Linus Hicks 12 Feb '10

12 Feb '10

I run: xfs_check /dev/sdc10 And it reports: sb versionnum missing attr bit 10 Then I run: xfs_repair /dev/sdc10 And it reports output from 7 phases and "done". Again I run: xfs_check /dev/sdc10 And it reports: sb versionnum missing attr bit 10 Is this how it's supposed to work? Thanks for any help. Linus

2 1

Login timed out after 60 seconds
by Paul Heinlein 12 Feb '10

12 Feb '10

A server at work today appeared unresponsive to all network traffic. The machine in question doesn't have a k/v/m terminal; it's configured to use a serial console. So I connected to the serial console and got /etc/issue (with all the \char sequences properly expanded). At the login: prompt I typed root and pressed Enter. Several seconds went by before the Password: prompt was displayed. I typed the password and soon saw Login timed out after 60 seconds At which point /etc/issue and the login: prompt reappeared. Later investigation revealed the load average was hovering around 100, so it's unlikely the machine would be able to process the username and password in under a minute. I'm trying to figure out if it's possible to lengthen that timeout value from 60 to, say, 180. This isn't the first time I've wanted to kill a runaway process and been unable to get a console because of that timeout. -- Paul Heinlein <> heinlein(a)madboa.com <> http://www.madboa.com/

3 3

Re: [CentOS] xfs_repair doesn't fix sb versionnum missing attr
by C Linus Hicks 12 Feb '10

12 Feb '10

On Fri, 2010-02-12 at 07:02 -0500, Brent L. Bates wrote: > The first question is did you unmount the file system first before doing > both the xfs_check and xfs_repair? A file system should not be mounted while > doing either of these. xfs_check will give false failures if it is run while > the file system is mounted. If everything was unmounted while you used these > utilities, then may be the disk is failing. At the moment, I don't know what > else to check. The filesystem was not mounted at the time I ran either xfs_check or xfs_repair, and the disk is not failing.

1 0

Slightly broken audio on USB headset?
by tony＠softins.clara.co.uk 12 Feb '10

12 Feb '10

I have a Logitech USB headset which I have used very successfully on Windows for a long time. The other day I thought I would try it out on my CentOS 5 server, which doesn't have its own sound hardware (HP ML110). On plugging it in, all the required modules magically got loaded, and the "play" command would play sound files as expected. However, at all times when playing a sound file there was a ticking sound two or three times a second, as if there were regular discontinuities in the audio. Apart from the ticking, the sound quality was fine. Can anyone suggest what I should look at to start diagnosing and fixing this issue? Thanks Tony -- Tony Mountifield Work: tony(a)softins.co.uk - http://www.softins.co.uk Play: tony(a)mountifield.org - http://tony.mountifield.org

1 0

michelangelo13@gmail.com has sent you an invitation to Aviary!
by michelangelo13＠gmail.com 12 Feb '10

12 Feb '10

michelangelo13(a)gmail.com sent you a beta invitation to Aviary.com's photo-editing tools. Use this unique link to activate your invitation: http://aviary.com/register/e90f61 Your free Aviary account will include the following privileges: - Photo-shop-like image editor. - Special-effects editor for enhancing your photos. - Vector editor for making logos and clipart. - Color editor to create and match vibrant color palettes. - Music editor and remixer. - Access to your friends' shared private files. This link is exclusive to you, so please don't share it. http://aviary.com/register/e90f61 Love, Aviary.com _______________________________________________________ Watch Aviary on G4's Attack of the Show! http://aviary.com/blog/posts/awesome-aviary-review-on-g4-tv Don't want to receive invitations from friends using Aviary anymore? Just go here: http://aviary.com/EmailOptOut?email=centos@centos.org Invitation notice sent by michelangelo13(a)gmail.com via Aviary.com (C) 2010, Aviary, Inc. 1135 Railroad Ave, Hewlett, NY 11557 USA

1 0

Error on php header
by Renato Botelho 12 Feb '10

12 Feb '10

I was building a software on CentOS 5.4 and got this: /usr/include/php/main/streams/php_stream_filter_api.h:65: error: comma at end of enumerator list I took a look at header and found this: typedef enum { PSFS_ERR_FATAL, /* error in data stream */ PSFS_FEED_ME, /* filter needs more data; stop processing chain until more is available */ PSFS_PASS_ON, /* filter generated output buckets; pass them on to next in chain */ } php_stream_filter_status_t; Removing comma after PSFS_PASS_ON everything back to normal. -- Renato Botelho

2 2

RAID, temperature and FAN status manage and monitoring tool for RHEL4 Update 4 ia64 AS Linux
by Balaji 12 Feb '10

12 Feb '10

Hi, Currently I've been using an RHEL4 Update 4 ia64 AS Linux version and running in HP rx6600 server. I tried to google-out the RAID, temperature and FAN status manage and monitoring tool for RHEL4 Update 4 ia64 AS Linux But i can't able to findout the same for RHEL4 Update 4 ia64 AS Linux server Can anyone suggest me the write status monitoring and manage tool for RHEL4 Update 4 ia64 AS Linux server Some of the information are below [root@corviewsecondary src]# lspci 00:01.0 Class ff00: Hewlett-Packard Company: Unknown device 1303 00:01.1 Communication controller: Hewlett-Packard Company: Unknown device 1302 00:01.2 Serial controller: Hewlett-Packard Company Diva Serial [GSP] Multiport UART 00:02.0 USB Controller: NEC Corporation USB (rev 43) 00:02.1 USB Controller: NEC Corporation USB (rev 43) 00:02.2 USB Controller: NEC Corporation USB 2.0 (rev 04) 0f:01.0 Ethernet controller: Intel Corporation 82546GB Gigabit Ethernet Controller (rev 03) 0f:01.1 Ethernet controller: Intel Corporation 82546GB Gigabit Ethernet Controller (rev 03) 14:01.0 SCSI storage controller: LSI Logic / Symbios Logic SAS1068 PCI-X Fusion-MPT SAS (rev 01) 14:02.0 Ethernet controller: Intel Corporation 82546GB Gigabit Ethernet Controller (rev 03) 14:02.1 Ethernet controller: Intel Corporation 82546GB Gigabit Ethernet Controller (rev 03) 23:01.0 Ethernet controller: Intel Corporation 82546GB Gigabit Ethernet Controller (rev 03) 23:01.1 Ethernet controller: Intel Corporation 82546GB Gigabit Ethernet Controller (rev 03) [root@corviewsecondary src]# [root@corviewsecondary src]# cat /proc/mpt/version mptlinux-3.02.62.01rh Fusion MPT base driver Fusion MPT FC host driver Fusion MPT SPI host driver Fusion MPT SAS host driver Fusion MPT ioctl driver [root@corviewsecondary src]# I have findout the mpt-status source from forum and download the same. During compilation i have getting an error and below or the error message [root@corviewsecondary mpt-status-1.2.0]# make KERNEL_PATH=/usr/src/kernels/2.6.9-42.EL-largesmp-ia64/ gcc -Iincl -Wall -W -O2 -I/usr/src/kernels/2.6.9-42.EL-largesmp-ia64//drivers/message/fusion -I/lib/modules/`uname -r`/build/drivers/message/fusion -I/lib/modules/`uname -r`/source/drivers/message/fusion -o mpt-status mpt-status.c In file included from mpt-status.c:38: mpt-status.h:19:26: lsi/mpi_type.h: No such file or directory mpt-status.h:20:21: lsi/mpi.h: No such file or directory mpt-status.h:21:25: lsi/mpi_ioc.h: No such file or directory mpt-status.h:22:26: lsi/mpi_cnfg.h: No such file or directory mpt-status.h:23:26: lsi/mpi_raid.h: No such file or directory mpt-status.h:24:20: mptctl.h: No such file or directory mpt-status.c:123: error: syntax error before '*' token mpt-status.c:125: error: syntax error before '*' token mpt-status.c:126: error: syntax error before '*' token mpt-status.c:130: error: syntax error before '*' token mpt-status.c:131: error: syntax error before '*' token mpt-status.c:132: error: syntax error before '*' token mpt-status.c:133: error: syntax error before '*' token mpt-status.c: In function `freeMem': ............. [root@corviewsecondary src]# Any clues as to whats the problem and the remedy? Thanks in Advance, -S.Balaji

3 2

what causes CUPS to dis-enable a printer?
by Paul Johnson 12 Feb '10

12 Feb '10

In our computer lab, there are 6 Centos 5.4 workstations. There is an HP printer with jet direct card. It often works. But sometimes users come and get me saying the printer is broken, but it is actually working fine for *most* of the workstations. On the troubled system, I run system-config-printer and I check the printer in question (under properties) and I see the printer has been disabled. I mean, the box by the word Enabled is empty. After I manually (use lprm) remove the print jobs, and set the printer to Enabled, then the print queue will start working again. I've checked the files in /var/log/cups and there's nothing evident. error_log has nothing. We have had the problem during the year (that others have reported in this list). When trying to print some pdf files from Evince, the symptom of the problem is that the pdf files don't print. They seem to "clog" the printer. When that happens, I have seen the Enabled box come unchecked in the printer configurator. However, the most recent problems are not associated with the use of Evince. I would really appreciate some tips about how to bugshoot this problem. pj ps. The Cups server is running on the system in question, lpq shows lots of print jobs waiting. -- Paul E. Johnson Professor, Political Science 1541 Lilac Lane, Room 504 University of Kansas

8 10

Mount USB disk at startup?
by Mogens Kjaer 11 Feb '10

11 Feb '10

I have a CentOS 5 machine with an external 500G USB disk, formatted with JFS. How do I get this to mount automatically at boot time? If I add to /etc/fstab: /dev/sdb1 /var/video jfs defaults 1 2 fsck.jfs complains at boot time: Error: Cannot open device /dev/sdb1 Usage: fsck.jfs ... ... Give root password for maintenance ... If I log in with the root password, /dev/sdb1 is present, and I can run fsck.jfs -f /dev/sdb1 without problems. After ctrl-D it reboots, and gives the above error again. I have to log in as root, remount,rw / and remove the /dev/sdb1 line from /etc/fstab to get it to boot. The problem is not related to JFS; it occurs with an external ext3 file system as well. How do I mount /dev/sdb1 automatically at boot? Mogens -- Mogens Kjaer, Carlsberg A/S, Computer Department Gamle Carlsberg Vej 10, DK-2500 Valby, Denmark Phone: +45 33 27 53 25, Mobile: +45 22 12 53 25 Email: mk(a)crc.dk Homepage: http://www.crc.dk

10 15

disk I/O problems with LSI Logic RAID controller
by Fernando Gleiser 11 Feb '10

11 Feb '10

we're having a weird disk I/O problem on a 5.4 server connected to an external SAS storage with an LSI logic megaraid sas 1078. The server is used as a samba file server. Every time we try to copy some large file to the storage-based file system, the disk utilization see-saws up to 100% to several seconds of inactivity, to climb up again to 100% and so forth. Here are a snip from the iostat -kx 1: Device: rrqm/s wrqm/s r/s w/s rkB/s wkB/s avgrq-sz avgqu-sz await svctm %util sdb1 0.00 133811.00 0.00 1889.00 0.00 513660.00 543.84 126.24 65.00 0.47 89.40 sdb1 0.00 138.61 0.00 109.90 0.00 29845.54 543.14 2.54 54.32 0.37 4.06 sdb1 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 sdb1 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 sdb1 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 sdb1 0.00 134680.00 0.00 1920.00 0.00 526524.00 548.46 126.06 64.57 0.47 90.00 sdb1 0.00 142.00 0.00 74.00 0.00 20740.00 560.54 1.25 45.14 0.47 3.50 sdb1 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 sdb1 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 sdb1 0.00 0.00 1.00 0.00 4.00 0.00 8.00 0.01 14.00 14.00 1.40 sdb1 0.00 116129.00 1.00 1576.00 4.00 434816.00 551.45 125.47 75.38 0.57 90.30 sdb1 0.00 17301.98 0.00 412.87 0.00 106506.93 515.93 24.59 75.40 0.48 19.80 sdb1 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 sdb1 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 sdb1 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 It happens when I copy a file over the net using samba or when copying/creating a local file It looks like the disk tries to get more than it can handle, then it chokes with data and stales for a few seconds until some buffer empties and it's able to get a bit more data again. It happens in two identical servers, so I'd discard faulty hardware as the cause and look into a miscofiguration issue. Are there any guidelines/docs for heavy I/O tuning? are there any issues with this raid controller? any help will be apreciated Fer

4 8

/etc/ldap.conf pam_filter
by Nobody ist perfect 11 Feb '10

11 Feb '10

Hi, we use an openldap server / samba as domain controller for our windows/linux workstations. on a specific server, login should only be allowed, if the certain user is member of a group (let's call this group "login"). All the users in the domain are members of the group "Domain Users". Therefore their primary gid is not the login-group's gid. How can I make the login depending on that login-group-membership? Thanks! Toby

3 3

Experiencing continual eth0 link up/down on a 10G Chelsio NIC (cxgb3 driver)
by Arun Khan 11 Feb '10

11 Feb '10

File Server OS: CentOS 5.3 (x86_64) Kernel: CentOS Plus kernel (need XFS fs drivers) The file server has a Chelsio T310 10GBASE-CX4 RNIC (rev 3) PCI Express x8 MSI-X (eth0), driver and firmware is stock from the CentOS Plus kernel. Using ethtool I have verified driver association with the 3 NICs on the system (eth1 and eth2 are not connected to any switch) Driver for eth0 driver: cxgb3 version: 1.1.3-ko firmware-version: T 7.4.0 TP 1.1.0 Driver for eth1 driver: e1000e version: 1.0.2-k2 firmware-version: 1.0-0 Driver for eth2 driver: e1000e version: 1.0.2-k2 firmware-version: 1.0-0 The last 3-4 weeks, I have noticed that the eth0 link keeps going up and down, confirmed by "dmesg" output as well in /var/log/messages (dmesg sample shown below). eth0: link down eth0: link up, 10Gbps, full-duplex eth0: link down eth0: link up, 10Gbps, full-duplex eth0: link down eth0: link up, 10Gbps, full-duplex The kernel RPM verification shows no errors # uname --kernel-release 2.6.18-164.2.1.el5.plus # rpm --verify kernel-2.6.18-164.2.1.el5.plus The hardware vendor tells me that the card either fails completely (kaput) or works - there is no grey area. He is of the opinion that the problem is with the driver. Verification of the kernel rpm tells me that all files including the cxgb3 driver file md5sum are OK. I would like to hear from anyone with the same NIC or another rev. using the same driver. Are you seeing similar link up/down in your system? How did you solve the problem? TIA -- Arun Khan

3 4

how to work with Code Repositories, but for web development?
by Rudi Ahlers 11 Feb '10

11 Feb '10

Hi all, I would like some suggestion on this matter please. I have never bothered using any code repositories / version control systems for our web development project, many cause I didn't know any better, and probably cause most of our projects don't really require that we need to keep a history of what has changed. i.e. a client wants to change something on their website, and we change it, whether it's cosmetics or code (normally PHP & MySQL). But, I want to see if CVS, or maybe even a forge script (like in offerforge) could benefit met. Most of the time when we make changes to the code, we simply update the version, from say 1.2.2 to 1.2.3 and write the changes to a basic changelog, which in our case is a simple text file calles changelog.txt But, how could I benefit from a CVS, ir similar system? And what would be best for this environment? I installed CVS on my CentOS server, but it seems that it's not just a matter of creating a tree and dumping code. I'm not too worried about multiple users at this stage. All our coding is currently stored on a CentOS 5.4 Samba server, so we can access to the code from either a Windows or Linux PC. Do I need anything more? I started using eclipse+PHP a few months ago and I don't really use it to its full potential, so I'm sure I could benefit from it more. So, the question is, what is a good recommended setup to go with? Web based access to all the files would be nice, then we could access it from outside the LAN on HTTPS. And how do I use it to my benefit? For example, clientA wants to make changes to Project1. Now I have a Project1 in the CVS tree (is this the right terminology?), and make changes to file contacts.php - what now? Do I need to create a subfolder called 1.2.2 (for example), and add only the updated file in this folder, or do I copy the whole Project into the new folder? 2 weeks down the line I need to make changes to 8 files, what do I do now? Does this make sense? I realize it could be beneficial to keep older files, but how does one structure it? -- Kind Regards Rudi Ahlers SoftDux Website: http://www.SoftDux.com Technical Blog: http://Blog.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

10 13

CentOS 5.4 x86_64 authenticating against AD (Server 2008r2)
by Dan Burkland 11 Feb '10

11 Feb '10

Hey All, Just wondering if any of you have been able to setup CentOS 5.4 to authenticate against AD on a Server 2008r2 Domain Controller. I am trying to complete this particular setup however I have run into some difficulties such as not being able to lookup domain users via getent passwd. Thanks for your input, Dan

8 21

saslauthd attack
by John Hinton 11 Feb '10

11 Feb '10

I'm seeing a lot of activity over the last two days with what looks to be a kiddie script. Mostly trying to access several of our servers with the username anna. All failed... in fact I don't think we have a user anna on any of our servers. Meanwhile... I'm running Sendmail. This pertains to Centos 4 and 5 servers. I'm also running fail2ban on some and Ossec on others. So far, no blocking is being done. When I look at the logs all I find is under messages and here is a sample: Feb 10 05:23:08 neptune saslauthd[3370]: do_auth : auth failure: [user=anna] [service=smtp] [realm=] [mech=shadow] [reason=Unknown] Feb 10 05:23:25 neptune saslauthd[3369]: do_auth : auth failure: [user=anna] [service=smtp] [realm=] [mech=shadow] [reason=Unknown] Feb 10 05:23:58 neptune saslauthd[3370]: do_auth : auth failure: [user=anna] [service=smtp] [realm=] [mech=shadow] [reason=Unknown] Feb 10 06:56:53 neptune saslauthd[3370]: do_auth : auth failure: [user=anna] [service=smtp] [realm=] [mech=shadow] [reason=Unknown] Feb 10 06:56:54 neptune saslauthd[3368]: do_auth : auth failure: [user=anna] [service=smtp] [realm=] [mech=shadow] [reason=Unknown] Feb 10 06:56:55 neptune saslauthd[3370]: do_auth : auth failure: [user=anna] [service=smtp] [realm=] [mech=shadow] [reason=Unknown] Feb 10 06:56:59 neptune saslauthd[3368]: do_auth : auth failure: [user=anna] [service=smtp] [realm=] [mech=shadow] [reason=Unknown] So, I can't write a rule to block this attack as I can't find any IP address to block. I've looked and googled til my eyes are red and can't find where to set logging in saslauthd or where ever it needs to be set to record the IP address generating these failures. Does anyone have an idea? Also, some may wish to do a grep 'do_auth' on messages to see if this is happening to you. They sometimes come in rapid succession. John Hinton

5 6

Syslog for chroot-jailed SFTP users?
by Sean Carolan 11 Feb '10

11 Feb '10

Maybe one of you can help. We have set up a CentOS server so that each user who logs in via sftp will be jailed in their home directory. Here's the relevant sshd_config: # override default of no subsystems Subsystem sftp internal-sftp -f LOCAL2 -l INFO Match Group sftponly ChrootDirectory /home/%u ForceCommand internal-sftp This actually works great, but none of the activities of sftponly group members is getting logged. The man page for sftp-server says: "For logging to work, sftp-server must be able to access /dev/log. Use of sftp-server in a chroot configuation therefore requires that syslogd(8) establish a logging socket inside the chroot directory." How do I establish a logging socket inside the chroot directory, when the chroot directory is different depending on which user is logging in at any given time? I don't want to run separate sockets in every customer's chroot directory, this is not practical. Any ideas?

3 5

Re: [CentOS] saslauthd attack
by Les Bell 11 Feb '10

11 Feb '10

John Hinton wrote: >> Yes... most of them. Just the new PITA. Anyway... I still can't seem to figure out how to log the IP addresses for this attack. << I'd use iptables to log connections on that port and then time-correlate with the log entries from saslauthd. Best, --- Les Bell [http://www.lesbell.com.au] Tel: +61 2 9451 1144

1 0

CentOS-announce Digest, Vol 60, Issue 2
by centos-announce-request＠centos.org 10 Feb '10

10 Feb '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2010:0088 Important CentOS 5 x86_64 kvm Update (Karanbir Singh) 2. CESA-2010:0094 Critical CentOS 4 i386 HelixPlayer - security update (Tru Huynh) 3. CESA-2010:0094 Critical CentOS 4 x86_64 HelixPlayer - security update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Tue, 9 Feb 2010 13:51:39 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2010:0088 Important CentOS 5 x86_64 kvm Update To: centos-announce(a)centos.org Message-ID: <20100209135139.GA22305(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2010:0088 Important Upstream details at : http://rhn.redhat.com/errata/RHSA-2010-0088.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 79704ae0e59d7ca2c76c96e087fe94b7 kmod-kvm-83-105.el5_4.22.x86_64.rpm 1e848a0873b1d28fe87945202e8ea483 kvm-83-105.el5_4.22.x86_64.rpm be5796fe492fcb764c5ffd0b662298ba kvm-qemu-img-83-105.el5_4.22.x86_64.rpm ca27435ea4a07209579fc9518901a2c7 kvm-tools-83-105.el5_4.22.x86_64.rpm Source: f5b9b0b74caf41a66786f047cb2e17e8 kvm-83-105.el5_4.22.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 9 Feb 2010 18:22:40 +0100 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2010:0094 Critical CentOS 4 i386 HelixPlayer - security update To: centos-announce(a)centos.org Message-ID: <20100209172240.GA13104(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2010:0094 HelixPlayer security update for CentOS 4 i386: https://rhn.redhat.com/errata/RHSA-2010-0094.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/HelixPlayer-1.0.6-1.el4_8.1.i386.rpm source: updates/SRPMS/HelixPlayer-1.0.6-1.el4_8.1.src.rpm You may update your CentOS-4 i386 installations by running the command: yum update HelixPlayer Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

sendmail mail relay backscatter issue.
by Simon Billis 10 Feb '10

10 Feb '10

Hi Folks, I have a couple of questions which I hope that you will be able to assist with, first some background. I run a few sendmail servers that run MailScanner/Spamassassin/sendmail (current versions) on Centos 5.4 and Centos 4.8 These boxes accept mail for a large number of domains (6000+) scan the mail removing spam and then forward the ham to another server for delivery. I am attempting to stop any backscatter that these servers cause by only accepting mail for specific users@domain or for domains with a catch-all account. I currently use /etc/mail/access.db as the access map for the domains, but this allows all mail to be accepted for the domain before the attempting to send it on for final delivery which causes NDR and backscatter for those domains which do not have a catch-all account. I have looked at adding "To:user@domain RELAY" to the access map and also adding "define(`_RELAY_FULL_ADDR_', `1') " in the sendmail.mc and running make -C /etc/mail but this has no effect on the sendmail.cf file. My understanding is that if I can get sendmail to accept this undocumented feature then all will be fine as I will be able to use the access map to allow mail to those specific users as well as entries of the type "domain RELAY". My first question is: Does anyone have any ideas as to why I wouldn't be able to have this change reflected in sendmail.cf? My second question is: Does anyone have any ideas on how to utilise access map and relay-domains to achieve the same thing? Thanks for your time and assistance. Simon.

4 23

Re: [CentOS] R package on centos 5.1
by Les Bell 10 Feb '10

10 Feb '10

hersh parikh <hershparikh12(a)yahoo.com> wrote: >> I want to install R package on centos 5.1, however I am not able to install it << I'm running it here on Centos 5.4. What problem are you having? Error messages? Best, --- Les Bell [http://www.lesbell.com.au] Tel: +61 2 9451 1144

1 0

Lightscribe
by Robert 10 Feb '10

10 Feb '10

I just bought an HP DVD Writer 1040r (as identified by k3b), an external USB-connected CD/DVD burner. The drive gets assigned /dev/scd0. I can burn CDs and DVDs, read from CDs and DVDs, boot from DVDs (and, I assume, CDs) but have been unable to use the lightscribe software to label a disk. I have lightscribe-1.18.11.1-0 and lightscribeApplications-1.18.6.1-0 installed, can run the GUI at /opt/lightscribe/Applications/SimpleLabeler/SimpleLabeler which promptly and stubbornly tells me "--<no lightscribe drives found>--". This IS a lightscribe drive, according to the specs, the box and the logo on the tray. This is on a fully update CentOS 5.4 system that has behaved very well since I built this box (Gigabyte MA770T-UD3P) about 3-4 months ago. This is certainly no a critical situation but having new stuff that doesn't work is rather irksome to me. Can anyone offer a clue or two? Thanks!

3 3

best parallel / cluster SSH
by Alan McKay 09 Feb '10

09 Feb '10

Hey folks, I stumbled upon this while looking for something else http://www.linux.com/archive/feature/151340 And it is something I could actually really make use of. But right on that site they list 3 different ones, and so I'm wondering what all is out there and what I should use. Is there one that is part of the standard CentOS? thanks, -Alan -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of "In Defense of Food"

14 26

xentop batch mode
by Nux 09 Feb '10

09 Feb '10

Hi guys, First of all, sorry to send this one here on the centos ml. I know it's kind of off-topic, but the xen-users list seems a dead end, I was hoping some of you guys are experienced in this. I have a problem with a xen 3.4.2 on Centos 5 x86_64 installation, I need to see the total/used/available memory of dom0 when using xentop, however in batch mode it doesn't seem to work. If I use the normal mode of xentop I get all that info nicely, however in batch mode it looks like this: http://bayimg.com/mAkNEAace A friend of mine told me that the memory info I need gets displayed on Centos 5 stock xen versions when running xentop in batch mode. Anyone can tell me what is going on? What am I missing? Is there any other way I can obtain that info? The xen is installed from gitco.de/repo/, should it matter. The kernel is 2.6.18-164. Thanks. -- Nux! www.nux.ro

3 2

Using (was: Announcing) Gluster Storage Platform
by Alan McKay 09 Feb '10

09 Feb '10

OK, you have my attention. But reading around on the website for 5 or 10 minutes and I'm still not sure what this is. What is it? Why would I use it? What would I use instead of it? (Who are its competitors) When would I not use it? I see this "The software is a powerful and flexible solution that simplifies the task of managing unstructured file data", but I have no idea what "unstructured file data" means. -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of "In Defense of Food"

6 6

strange disk error
by Алексей 09 Feb '10

09 Feb '10

Hi everyone . Recently I had a strange error on one of my servers ,running Centos 5.4 64bit FAILED kernel: status = 1, message = 00, host = 0, driver = 08 kernel: <6>sd: Current: sense key: Illegal Request kernel: Add. Sense: Logical block address out of range *Should i be worried sick about it or is it normal??* *There are 2 sas hdd connected into raid 1 to Adaptec AIC-9410W SAS controller. I can't get any information about my drives health (no S.M.A.R.T there) and to get information about raid quality i must restart system and enter raid bios- which is not very good option And maybe someone knows how to get health information om my raid\hdd from Centos ? P.S. error happened about 20 times for the last 2 days and I am worried Best wishes, Alexey Galishnikov * __________ Information from ESET Smart Security, version of virus signature database 4850 (20100209) __________ The message was checked by ESET Smart Security. http://www.esetnod32.ru

3 2

Asus Xonar DX PCIe sound card?
by tony＠softins.clara.co.uk 09 Feb '10

09 Feb '10

Can anyone here report success or failure at making the Asus Xonar DX PCI-express sound card work under CentOS 4? Or failing that, 5? Google only turned up people using it on Ubunt or SuSE... I need to specify the addition of audio outputs to a HP DL360 system, and don't want to buy stuff that will be a pain to get working. :-) Or can anyone recommend any other simple sound cards for PCI-express that have been trouble-free under CentOS 4 or 5? Cheers Tony -- Tony Mountifield Work: tony(a)softins.co.uk - http://www.softins.co.uk Play: tony(a)mountifield.org - http://tony.mountifield.org

1 0

Best way to backup virtual machines from Citrix XenServer.
by Rafał Radecki 09 Feb '10

09 Feb '10

Hi All. I have installed Citrix XenServer. It's Linux-based virtualization software. Could anyone propose a good way to make backups of virtual machines (Linux/Windows) in it? With regards, R.

10 11

auto mounting group shares
by Carlos Santana 09 Feb '10

09 Feb '10

I am using autofs to mount user's home and group directories. The setup works fine for home directories which are mounted after user logs in. The group shares are also mounted, but user has to manually do cd or ls command on group shares, e.g.: ls /groups/chemistry will mount chemistry group share. Is there any way to mount group shares automatically? I noticed that after successful login 'some program' performs chdir (cd) which probably tells autofs to mount home dirs. Which program does this operation? Is there any way to do this for group shares also? - CS.

2 1

slowness in sendmail - 60 second timeout
by Jerry Geis 08 Feb '10

08 Feb '10

I am sending an email from my machine devcentos5x64. the transcript below (hangs for 60 seconds) at the line: MAIL From:<root(a)devcentos5x64.msgnet.com> SIZE=56 AUTH=root(a)devcentos5x64.msgnet.com The email succeeds - but I am trying to figure out the 60 second delay. Neither email server is busy. Nothing is waiting. the DNS on both machines point to the same nameserver. The DNS responds very fast when looking up server names. What else can I look for to remove the slowness or delay? jerry ------------------------------------ date | mail -v -v -v -v geisj(a)pagestation.com geisj(a)pagestation.com... Connecting to [127.0.0.1] via relay... 220 devcentos5x64.msgnet.com ESMTP Sendmail 8.13.8/8.13.8; Mon, 8 Feb 2010 10:02:15 -0500 >>> EHLO devcentos5x64.msgnet.com 250-devcentos5x64.msgnet.com Hello localhost [127.0.0.1], pleased to meet you 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-8BITMIME 250-SIZE 250-DSN 250-ETRN 250-AUTH DIGEST-MD5 CRAM-MD5 250-DELIVERBY 250 HELP >>> MAIL From:<root(a)devcentos5x64.msgnet.com> SIZE=56 AUTH=root(a)devcentos5x64.msgnet.com 250 2.1.0 <root(a)devcentos5x64.msgnet.com>... Sender ok >>> RCPT To:<geisj(a)pagestation.com> >>> DATA 250 2.1.5 <geisj(a)pagestation.com>... Recipient ok 354 Enter mail, end with "." on a line by itself >>> . 250 2.0.0 o18F2FMV002336 Message accepted for delivery geisj(a)pagestation.com... Sent (o18F2FMV002336 Message accepted for delivery) Closing connection to [127.0.0.1] >>> QUIT 221 2.0.0 devcentos5x64.msgnet.com closing connection [root@devcentos5x64 src]#

6 8

busybox for centos
by premrajm＠digilink.in 08 Feb '10

08 Feb '10

Hi, I am trying to build busybox for the centos-5.3,but facing issues in installing the busybox executable into the centos filesystem. Is it possible to build a busybox for a server platform (x86) with centos. Thanks and Regards, Premraj Disclaimer : This message is proprietary to Smartlink Network Systems Limited and is intended solely for the use of the individual to whom it is addressed. It may contain privileged or confidential information and should not be circulated or used for any purpose other than for what it is intended. If you have received this message in error, please notify the originator immediately. If you are not the intended recipient, you are notified that you are strictly prohibited from using, copying, altering, or disclosing the contents of this message. Smartlink Network Systems Ltd. accepts no responsibility for loss or damage arising from the use of the information transmitted by this email including damage from virus. ______________________________________________________________________________ This email has been scrubbed for your protection by SecureMX. For more information visit http://securemx.in ______________________________________________________________________________

3 2

Exim installation on CentOS
by james Tanit 08 Feb '10

08 Feb '10

Could someone please share some thoughts on how to set up the /etc/hosts and /etc/aliases? This is tough to set up due to the poorly written manual.

4 9

iSCSI + kickstart
by Ugo Bellavance 08 Feb '10

08 Feb '10

Hi, (I'm using RHEL, but I posted on redhat.general and rhel5 mailing lists and didn't get an answer, so I'm taking a chance here as well) Two of my servers have 2 nics (HP DL495c G5). Using RHEL 5.4, I'd like to do a network install to boot from iSCSI, as the NIC supports it, following this document: http://kbase.redhat.com/faq/docs/DOC-6875. However, since my data network is on a network segment that is separated from the SAN (iSCSI) network segment, I'd need to install from pxeboot using the LAN VLAN, but configure another nic so that it has access ot the SAN VLAN. From what I can see, it is not possible to assign a vlan in kickstart, and kickstart can only configure one NIC using the --network parameter. However, I managed to configure another nic using a %pre%. It also looks impossible to create a bonded interface in kickstart, which I'd like to be able to create. Ideally, I'd like a bonded interface in failover mode, and some vlan'd interface on top of the bonded interface. But I could manage that afterwards, I guess. It looks like only my first physical NIC can boot from the SAN, so ideally, I'd need to have a eth0 to be in the SAN segment, and configure eth1 for the LAN, so that it can see my dhcp, pxeboot and tftp server. Then I guess I must change the boot mode of my NIC so that it boots using iSCSI instead of PXE (after the install). But then, will multipath be configured? Since I have two controllers, the lun shows me two disks... If anyone has had experience with this kind of installation, please let me know. Thanks, Ugo

1 0

directory and file permission help
by adrian kok 08 Feb '10

08 Feb '10

Hi I move a zip file from window to linux but all permission of folder and files are kept in 700 How can I change it one time? I don't need to change directory under directory to change as folder as 755 and files as 644 Thank you for your help Send instant messages to your online friends http://uk.messenger.yahoo.com

4 3

Changing size of a xen guest filesystem
by Jussi Hirvi 07 Feb '10

07 Feb '10

It should be easy, but I have not yet found a solution. Only some methods involving use of dd, but that sounds a little scary to me on a production server. I wish there would be a command "virt-resize", but no... Maybe "virt-clone", with the option --file=DISKFILE, could be bended to do this? - Jussi Hirvi -- Jussi Hirvi * Green Spot Topeliuksenkatu 15 C * 00250 Helsinki * Finland Tel. +358 9 493 981 * Mobile +358 40 771 2098 (only sms) jussi.hirvi(a)greenspot.fi * http://www.greenspot.fi The point is that what each one of us does from the time we wake until the time we sleep makes a difference. - Jane Goodall

3 4

Somewhat off topic: Building Android on CentOS 5.4
by Paul R. Ganci 07 Feb '10

07 Feb '10

I asked this question on android-platform(a)googlegroups.com but never received a response. I suspect most (if not all) people compiling the Android platform are using some version of Ubuntu ... hence the lack of response. I would not normally cross post but am hopeful that another CentOS 5.4 user (not on the android-platform forum) might have successfully built the Android platform. I would be extremely grateful if he or she could publish the procedure they used to do so. In any event here is the motivation of why I want to build the Android platform and a description of the problem I encountered: I have a Samsung Moment which the Android module adb will not detect due to a bug in usb_linux.c. Therefore I have been trying to compile a patched version of adb on Centos 5.4. I have followed these instructions in effort to build adb on cupcake: > > cd $HOME/download/android > > repo init -u git://android.git.kernel.org/platform/manifest.git -b cupcake > > repo sync > > cd system/core/adb > > patch -b usb_linux.c usb_linux.c.patch > > cd ../../.. > > make adb > build/core/product_config.mk:261: WARNING: adding test OTA key ============================================ TARGET_PRODUCT=generic TARGET_BUILD_VARIANT=eng TARGET_SIMULATOR= TARGET_BUILD_TYPE=release TARGET_ARCH=arm HOST_ARCH=x86 HOST_OS=linux HOST_BUILD_TYPE=release BUILD_ID= ============================================ /bin/bash: line 0: cd: dalvik/libcore//mnt/home/ganci/download/android//dalvik/libcore:/ No such file or directory /bin/bash: line 0: cd: dalvik/libcore//mnt/home/ganci/download/android//dalvik/libcore:/ No such file or directory dalvik/libcore/Android.mk:150: dalvik/libcore//mnt/home/ganci/download/android/dalvik/libcore/sub.mk: No such file or directory make: execvp: /bin/bash: Argument list too long make: *** No rule to make target `dalvik/libcore//mnt/home/ganci/ download/android/dalvik/libcore/sub.mk'. Stop. Everything works until the make. I have tried several different variations including making everything but everytime it seems the make is very confused about the directory structure. It is as if make is concatenating the relative directory dalvik/libcore with the full path /mnt/home/ganci/download/android/dalvik/libcore. I am open to suggestions. Thanks. -- Paul (ganci(a)nurdog.com)

1 0

how to find out promiscuous mode
by Vadkan Jozsef 07 Feb '10

07 Feb '10

How can I find out that someone is using it's network card in promiscuous mode in a subnet? Thank you!

3 2

Configuration Management Redux (was: best parallel / cluster SSH)
by Alan McKay 07 Feb '10

07 Feb '10

On Thu, Feb 4, 2010 at 2:03 PM, Les Mikesell <lesmikesell(a)gmail.com> wrote: > But, if someone ever gets cross-platform config management right or at > least close enough that it is worth learning yet another description > language I'd be very interested. Cfengine v3 might be getting there but > the windows version seems to be only available in the commercial build. OK, this is the perfect sequay for me :-) Assuming you only want Linux, and at that CentOS Linux - which are both the case for me - what Config Management system would you use? What is out there? A few months ago I sort of had a similar thread going and got the following : Slackmaster - looks like this is from google chef - have not looked it up yet puppet - got a test bed going and just bought the book because have not found much on line in terms of complex configs and how to actually use it to manage your environments bcfg2 - have not looked for it yet CF Engine - am vaguely familiar with it. thanks, -Alan -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of "In Defense of Food"

7 11

Virtualization - what do You recommend?
by Rafał Radecki 06 Feb '10

06 Feb '10

Hi All. I plan to use virtualization in my production environment. I plan to use one of the following options: - KVM; - VMWare Esxi; - VMWare Workstation. I plan to install Windows 2008 as a guest. I want to use something like LVM snapshots for backups. Stability is also very important, the guest will be used as a production server. Which option could You recommend and why? Thank You very much in advance :) With regards, R.

26 40

gdm-simple-greeter, redux
by m.roth＠5-cent.us 06 Feb '10

06 Feb '10

Does *anyone* have a clue where gdm-simple-greeter stores the usernames it presents? I know that it is not getting it out of /etc/passwd. based on users who can log in, since I have several machines where one user, who's rolled off, is still showing, even though /etc/passwd has him as having a shell that doesn't exist. mark

2 3

Using XEN to install Windows XP as guest on CentOS 5 as host ?
by Hadi Motamedi 06 Feb '10

06 Feb '10

Dear All I want to use XEN to install Windows XP as guest on CentOS 5 as host . I tried as the followings : #yum install xen virt-manager kernel-xen #chkconfig xend on #reboot Then I booted my CentOS server using XEN kernel . I tried as the followings : #virt-manager & But when continuing to create the virtual machine , under Installation Method menu , I cannot select 'local install media (cdrom)' and just the Network install tree is highlighted . So I tried to reach the desired one , by issuing as the followings : #virt-install --paravirt --name WindowsXP --ram 128 --file /vm --location /mnt/cdrom But it didn't get through as well . Can you please let me know how can I do it correctly ? Thank you Hotmail: Trusted email with powerful SPAM protection. Sign up now. _________________________________________________________________ Hotmail: Free, trusted and rich email service. https://signup.live.com/signup.aspx?id=60969

2 1

XEN
by Matt 06 Feb '10

06 Feb '10

I have a fairly high disk i/o intensive email server I am thinking of upgrading. I was thinking of upgrading it to CentOS 5.x 64bit. I was also thinking of running it as a guest under XEN. Would this allow me to more easilly transfer it to faster hardware in the future? Or would running as a guest seriously hurt disk i/o?

3 2

Clustering
by Bo Lynch 05 Feb '10

05 Feb '10

Just wanted to get the lists opinion on clustering and what project to use. Any info would be greatly appreciated. Thanks -- Bo Lynch

12 41

Vmware Server interface bridge not work.
by Saulo Bozzi 05 Feb '10

05 Feb '10

Hi list!!! Anybody, please, can help me. My CentOS 5.4 after that update to new kernel, my vmware server not work the interface bridge, with new kernel and old kernel. Only work with default install of CentOS 5.4, done update, not work. Anybody, please? ps.:Interface, nat, host-only, vmnet1 and vmnet8, work fine. Regards. Bye.

1 0

VMWare ESXi & CentOS5.4
by Thom Paine 05 Feb '10

05 Feb '10

I have a brand new Dell Poweredge T310 server with 4G ram and 1TB raid-5 hard drive in it. I Really only need to be able to run a copy of CentOS 5.4 on it, but I'm wondering if in the build process should I stick on ESXi 4 and then run CentOS as a vm? This would give me the options to roll out other VM's if I want over the life of the server (which I likely won't need) but the convenience of having them might be there. I'm only thinking of doing this because ESXi is free, and won't add any cost to this server. This server is going to be a domain controller for 5 workstations which will run Windows XP, as well as host 1 website with email. It will setup a few shares for samba, and have one network printer attached to it. Any thoughts to this, or should I just put on CentOS 5.4 and be done with it? I know it's like asking what everyone's favourite colour is, but maybe a few replies will give me some ideas. Thanks. -- -=/>Thom

7 8

About the openfire question ~
by Majian 05 Feb '10

05 Feb '10

Hi, guys: Would anyone know what causes this error message ? It's not the first time I've seen it but is the first time I've seen it so often. openfire verison is 3.6.4 . at org.apache.mina.filter.executor.ExecutorFilter$ProcessEventsRunnable.run(Execut orFilter.java:283) at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(Unknown Source) at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) at org.apache.mina.util.NamePreservingRunnable.run(NamePreservingRunnable.java:51) at java.lang.Thread.run(Unknown Source) 2007.05.13 15:07:38 org.jivesoftware.openfire.nio.ConnectionHandler.exceptionCaught(ConnectionHandle r.java:110) <http://www.igniterealtime.org/community/thread/32916> java.lang.ArrayIndexOutOfBoundsException 2007.05.13 15:08:03 org.jivesoftware.openfire.nio.ConnectionHandler.exceptionCaught(ConnectionHandle r.java:110) <http://www.igniterealtime.org/community/thread/32916> .... <http://www.igniterealtime.org/community/thread/32916> There are some lines displays that messages . If it displayes that , the client could have problems on the send or recive the message . But i don't know why does it diplays ~ Thanks in advance ~

3 2

Kernel error - help please
by Phil Savoie 05 Feb '10

05 Feb '10

Hi All, Just received this error from logwatch: --------------------- Kernel Begin ------------------------ WARNING: Kernel Errors Present [<c0405a89>] error_code+0x39/0x40 ...: 2 Time(s) ---------------------- Kernel End ------------------------- Any ideas? I don't know what this means, other than if it is a kernel error it can't be good. Thanks in advance, Phil

3 2

logwatch/shorewall warnings
by Timothy Murphy 05 Feb '10

05 Feb '10

I'm running a little web-server under CentOS-5.4 , with shorewall as firewall. I used to get messages about attempted intrusions, with the IP addresses of those attempting to connect. This stopped some time ago, and my logwatch reports now are very bare. I don't recall changing the settings of logwatch or shorewall. Has there been some default change? I should say that I'm not sure if I mind losing these warnings, as I never used to do anything about them. -- Timothy Murphy e-mail: gayleard /at/ eircom.net tel: +353-86-2336090, +353-1-2842366 s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland

1 0

how to get logs from a time-range
by hqm8512 05 Feb '10

05 Feb '10

Hi, I want to get logs from a time-range, like from 11:00:11 to 13:00:00 ,How should in do it in the bash shell? All logs in a file .

2 1

pls help about changing network card but assign to another ethx
by adrian kok 05 Feb '10

05 Feb '10

Hi I change eth1 from realtek to dlink but the centos is showing eth2 instead of eth1 In another version of linux, I can change 70-persistent-net.rules but I check /etc/udev/rules.d/70-persistent-net.rules but it doesn't have the file 70-persistent-net.rules please help Thank you Send instant messages to your online friends http://uk.messenger.yahoo.com

3 2

giving normal user a super user privilege
by Umarzuki Mochlis 05 Feb '10

05 Feb '10

I had added user umarzuki to wheel group # usermod -G wheel umarzuki *Yes, I can use/setup sudo but I do this just for learning purpose My /etc/pam.d/su as below auth sufficient pam_rootok.so # Uncomment the following line to implicitly trust users in the "wheel" group. #auth sufficient pam_wheel.so trust use_uid # Uncomment the following line to require a user to be in the "wheel" group. auth required pam_wheel.so use_uid auth include system-auth account sufficient pam_succeed_if.so uid = 0 use_uid quiet account include system-auth password include system-auth session include system-auth session optional pam_xauth.so when i su to user umarzuki and view its id output $ id uid=500(umarzuki) gid=500(umarzuki) groups=10(wheel),500(umarzuki) and i tried run $ yum update Loaded plugins: fastestmirror You need to be root to perform this command. but i managed to change the interface's IP with this command $ /sbin/ifconfig eth0 192.168.1.1 netmask 255.255.255.0 up Is there a step that i missed? -- Regards, Umarzuki Mochlis http://debmal.my

1 1

Virtualization software to install Windows as guest on CentOS 5 as host ?
by Hadi Motamedi 04 Feb '10

04 Feb '10

Dear All I need to install Windows as guest on my CentOS 5 as host . Can you please give me the link to download the requierd rpm package for this purpose ? Thank you _________________________________________________________________ Hotmail: Powerful Free email with security by Microsoft. https://signup.live.com/signup.aspx?id=60969

12 19

Unable to update a CentOS 4 : urlopen error nonnumeric port: 8080
by robert mena 04 Feb '10

04 Feb '10

Hi, I am trying to update a CentOS 4.4 but the yum update gives me error messages Setting up Update Process Setting up repositories http://mirror.centos.org/centos/4/updates/i386/repodata/repomd.xml: [Errno 4] IOError: <urlopen error nonnumeric port: '8080?'> Trying other mirror. Cannot open/read repomd.xml file for repository: update failure: repodata/repomd.xml from update: [Errno 256] No more mirrors to try. Error: failure: repodata/repomd.xml from update: [Errno 256] No more mirrors to try. I can access the web from this machine. Any ideas?

3 3

Display a warning message at a certain time ?
by Niki Kovacs 04 Feb '10

04 Feb '10

Hi, I'm currently installing a CentOS 5 desktop as a public internet access point. The machine shuts down every day automatically at 22:30. Is there a way I can display a message in GNOME at 22:15 warning the user that the machine will shutdown in 15 minutes ? Any suggestions ? Niki Kovacs

9 23

OpenSSH-5.3p1 selinux problem on CentOS-5.4.
by James B. Byrne 04 Feb '10

04 Feb '10

Note: I am digest subscriber so if you could copy me directly on any reply to the list I would appreciate it very much. I sent this to the OpenSSH list (secureshell(a)securityfocus.com) yesterday and received no response so I am asking here in hopes that someone else has run across this problem on CentOS. We have encountered a situation that requires sftp access to one of our server by an outside agency. This will be used for a data push application only and we need to secure our server from trespass via this access. After a modest amount of research we decided that the best answer was to use a more recent version of OpenSSH (5.3p1)that supports chroot as a configurable option. I obtained the software from the openssh.org website and built it using the libedit packages from the CentOS testing repo. These were the option used: ./configure --prefix=/opt --with-libedit --with-md5-passwords --with-pam --with-selinux --with-tcp-wrappers The new server software works fine for regular ssh/sftp users. However, when logging on as a member of the chroot group we obtain this error: ssh_selinux_getctxbyname: ssh_selinux_getctxbyname: security_getenforce() failed I have found reports of this exact error via Google in several places dating back to 2006, but these all seem to devolve into either: this has been fixed in version x.y.z on distribution Q, where x.y.z is less than 5.3 and Q is not CentOS. Or, the selinux filesystem has to be mounted inside the chroot directory. Since I assume the former is never going to happen for CentOS, at least not in time to do me any good, I am looking for an explanation of what the latter means and how it is accomplished. Our current SELinux status on that host is: # sestatus SELinux status: enabled SELinuxfs mount: /selinux Current mode: permissive Mode from config file: permissive Policy version: 21 Policy from config file: targeted Our chroot directory path is: /var/data/sshchroot The questions are: 1. Is it possible to mount the selinux filesystem twice on the same host having different roots? 2. If so, then how is this accomplished? 3. If not, then is there anything else that I can do, besides disabling selinux support in the sshd daemon, to get this to work? Sincerely, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

7 10

Re: [CentOS] OpenSSH-5.3p1 selinux problem on CentOS-5.4.
by James B. Byrne 04 Feb '10

04 Feb '10

On Thu, February 4, 2010 10:08, Marc Wiatrowski wrote: > >> >> > Have you looked at using rssh as the users shell? You can limit the > user to a chroot sftp only. Its not stock, but ssh can then be. > > http://dag.wieers.com/rpm/packages/rssh/ > I looked at rssh briefly yesterday when someone suggested it. Had I known of it before we started down this road then we might have used it instead. However, at the moment we seem to have a working solution and so we will stick with that for now. I am not sure what effect disabling SELinux support in SSH actually has from a security standpoint. So, if anyone cares to enlighten me on the the consequences I would like to know. Regards, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 2

CentOS-announce Digest, Vol 60, Issue 1
by centos-announce-request＠centos.org 04 Feb '10

04 Feb '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2010:0076 Important CentOS 4 i386 kernel - security and bug fix update (Tru Huynh) 2. CESA-2010:0076 Important CentOS 4 x86_64 kernel - security and bug fix update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Thu, 4 Feb 2010 13:33:45 +0100 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2010:0076 Important CentOS 4 i386 kernel - security and bug fix update To: centos-announce(a)centos.org Message-ID: <20100204123345.GE24821(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2010:0076 kernel security update for CentOS 4 i386: https://rhn.redhat.com/errata/RHSA-2010-0076.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/kernel-2.6.9-89.0.20.EL.i586.rpm updates/i386/RPMS/kernel-2.6.9-89.0.20.EL.i686.rpm updates/i386/RPMS/kernel-devel-2.6.9-89.0.20.EL.i586.rpm updates/i386/RPMS/kernel-devel-2.6.9-89.0.20.EL.i686.rpm updates/i386/RPMS/kernel-hugemem-2.6.9-89.0.20.EL.i686.rpm updates/i386/RPMS/kernel-hugemem-devel-2.6.9-89.0.20.EL.i686.rpm updates/i386/RPMS/kernel-smp-2.6.9-89.0.20.EL.i586.rpm updates/i386/RPMS/kernel-smp-2.6.9-89.0.20.EL.i686.rpm updates/i386/RPMS/kernel-smp-devel-2.6.9-89.0.20.EL.i586.rpm updates/i386/RPMS/kernel-smp-devel-2.6.9-89.0.20.EL.i686.rpm updates/i386/RPMS/kernel-xenU-2.6.9-89.0.20.EL.i686.rpm updates/i386/RPMS/kernel-xenU-devel-2.6.9-89.0.20.EL.i686.rpm updates/i386/RPMS/kernel-doc-2.6.9-89.0.20.EL.noarch.rpm source: updates/SRPMS/kernel-2.6.9-89.0.20.EL.src.rpm You may update your CentOS-4 i386 installations by running the command: yum update kernel\* Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

alsa
by mattias 04 Feb '10

04 Feb '10

How to install alsa for sound I use vmware and it requre alsa

2 3

Yum: strange dependencies
by Fajar Priyanto 04 Feb '10

04 Feb '10

Hi all, On Centos 5.4 minimum installation, I tried to install these packages (notice the dependencies): =================================================================================================================== Package Arch Version Repository Size =================================================================================================================== Installing: mc i386 1:4.6.1a-35.el5 base 2.1 M mdadm i386 2.6.9-2.el5 base 827 k ntp i386 4.2.2p1-9.el5.centos.2.1 updates 1.3 M sudo i386 1.6.9p17-5.el5 base 218 k Installing for dependencies: exim i386 4.63-3.el5 base 1.2 M mysql i386 5.0.77-4.el5_4.1 updates 4.8 M perl i386 4:5.8.8-27.el5 base 12 M perl-DBI i386 1.52-2.el5 base 600 k postgresql-libs i386 8.1.18-2.el5_4.1 updates 196 k Transaction Summary =================================================================================================================== Install 9 Package(s) Update 0 Package(s) Remove 0 Package(s) Total download size: 23 M I didn't want all those dependencies, especially exim and mysql. So, instead of installing mc, mdadm, ntp, and sudo at the same time, I installed them one by one and this time no exim and mysql (mc still wanted perl, fine) dependencies. Any thought why was that? Thank you.

2 2

Updating gfortran in CentOS 5.4?
by Jon Forrest 04 Feb '10

04 Feb '10

We're finding that several of the packages we need don't compile using the version 4.1.2 of gfortran that comes with CentOS 5.4. So, I've built the latest version of gfortran (e.g. 4.4.2) but I've done it so that all the new version's files go in /share/apps/gnu so that they don't interfere with the standard gcc distribution (building gfortran requires building some parts of gcc). Although I can compile and run a simple fortran "Hello, world" program using the version of gfortran I built this way, trying to run a more complex application, such as charmm (a molecular dynamics program), fails. When I run charmm, I get the message "Killed". Running strace ./charmm shows execve("./charmm", ["./charmm"], [/* 43 vars */] <unfinished ...> +++ killed by SIGKILL Since "Hello, world" compiles and runs, but charmm compiles and doesn't run, there's something wrong with how charmm is linked. Also, although the 'file charmm' command shows an ELF 64-bit dynamically linked file, 'ldd charmm' says " not a dynamic executable" (note no file name). So, something is strange. What have other people done about building new versions of gfortran on CentOS 5.4? Is this worth the trouble? Or, is it better to just go with Intel Fortran? Cordially, -- Jon Forrest Research Computing Support College of Chemistry 173 Tan Hall University of California Berkeley Berkeley, CA 94720-1460 510-643-1032 jlforrest(a)berkeley.edu

4 5

atime, relatime query
by Rajagopal Swaminathan 04 Feb '10

04 Feb '10

Greetings, I am aware that mounting filesystems with noatime option greatly increases speed. I have tried to follow discussion on the pros and cons of using noatime. I have however not been able to mount with the option relatime in centos 5.2. But in a production db server, which is backed up by HP DP, is it advisable to mount with noatime? Anybody care to share their experience on it? Regards Rajagopal

6 9

subversion 1.6.9 and sqlite 3.6.22
by Benjamin Franz 03 Feb '10

03 Feb '10

I'm in the process of setting up subversion and since the version packages with C5 is, shall we say, showing its age, I've built an updated version. In order to do that I had to upgrade sqlite from the default 3.3.6 (which the current subversion will not build with) and I went with 3.6.22. Has anyone else had any experience with whether or not that breaks anything? I'm a little nervous because sqlite is used all over the place (rpm, X11, apache, yum, selinux, system-config-*, various perl modules, gnome, gimp, php, and so on). -- Benjamin Franz

3 3

Re: [CentOS] how to find out promiscuous mode
by Les Bell 03 Feb '10

03 Feb '10

"Les Bell" <lesbell(a)lesbell.com.au> wrote: >> http://sourceforge.net/projects/prodetect/ << Sorry - just remembered that's a Windows program. The classic tool for monitoring IP/Ethernet address pairings is arpwatch, but unlike prodetect, it will only report an ARP cache poisoning attack, not someone silently sniffing (which isn't much use on switched networks anyway). Best, --- Les Bell [http://www.lesbell.com.au] Tel: +61 2 9451 1144

1 0

pointer to Searchable Archives for the list pls
by Simon Billis 03 Feb '10

03 Feb '10

Hi Folks, Can you point me in the direction of searchable archives for the list? I'm obviously missing something. I would like to be able to search the archives before asking my question. Thanks in advance Simon

5 5

Re: [CentOS] Skype and problem with ALSA mixer driver?
by Andrew 03 Feb '10

03 Feb '10

On Tue, 2010-02-02 at 09:54 -0500, Brent L. Bates wrote: > Why are you trying to use 5.3? Why not 5.4? After installing 5.4, try > everything again, even the newer kernel module. I've been reading these lists > long enough to remember people saying they have had the same problem as you > with earlier versions of the OS. I do not remember the details, but the > solution has something to do with software settings. You might want to do a > Google search for `skype' and `mic'. The answer may even be in the CentOS > archives. I think I saw it on this list. It may have been the Scientific > Linux list instead. I subscribe to and read both lists, so the solution may > have been on the SL list instead of CentOS. I hope this helps some. Good > luck. > Hi Brent, Thanks for taking the trouble to reply to me personally. I'm using CentOS 5.3 on my PC simply because that's the latest version which I had downloaded and burnt to CDs! I'm afraid I'm a bit slow in keeping up with the fast-moving development of CentOS and am always a bit reluctant to rebuild/reinstall the operating system on my PC. However, I thought that 5.3 was sufficiently up-to-date for my purposes, but was disappointed when I found that neither the wifi on my laptop nor skype on my PC worked properly! I'm now using Ubuntu 9.04 on my laptop which seems to work brilliantly and is very user-friendly. I'm thinking of using Ubuntu (server edition?) on my PC, after years of using RedHat and CentOS, because as a 'semi-tech' user (and great supporter of linux) I do like the user-friendliness of Ubuntu! Best regards, Andy

1 0

Logrotate in CentOS 5.4 more brutal (to httpd at least) than in 5.3?
by Christopher Thorjussen 03 Feb '10

03 Feb '10

I've just updated a few CentOS 5.3 servers to 5.4. One of them were a Apache Webserver. Doing a diff/check on the new ".rpmnew" config files that are made, I saw that the logrotate command for apache was changed. In 5.3 it did a reload, but in 5.4 it does a hard kill: CentOS 5.3: /var/log/httpd/*log { missingok notifempty sharedscripts postrotate /sbin/service httpd reload > /dev/null 2>/dev/null || true endscript } CentOS 5.4: /var/log/httpd/*log { missingok notifempty sharedscripts postrotate /bin/kill -HUP `cat /var/run/httpd.pid 2>/dev/null` 2> /dev/null || true endscript } Isn't this a bit harsh in 5.4? Wouldn't the 5.3 method be better? -Christopher Thorjussen

8 7

Re: [CentOS] Updating gfortran in CentOS 5.4?
by m.roth＠5-cent.us 03 Feb '10

03 Feb '10

> We're finding that several of the packages we > need don't compile using the version 4.1.2 of > gfortran that comes with CentOS 5.4. So, > I've built the latest version of gfortran (e.g. 4.4.2) > but I've done it so that all the new version's > files go in /share/apps/gnu so that they > don't interfere with the standard gcc distribution > (building gfortran requires building some parts > of gcc). <snip> > Since "Hello, world" compiles and runs, but charmm > compiles and doesn't run, there's something wrong > with how charmm is linked. Also, although the > 'file charmm' command shows an ELF 64-bit dynamically > linked file, 'ldd charmm' says " not a dynamic executable" > (note no file name). So, something is strange. <snip> I was just talking to one of the researchers here who's built it, and pointed out the completely obvious (once he pointed it out): the "<blank> not a dynamic executable" tells you that that piece, at least, is statically linked, *not* dynamic. He recommends getting a core dump, so you can do a traceback. mark

1 0

kickstart installation from usb key
by Georghy 03 Feb '10

03 Feb '10

2 17

VMware Workstation 7.0.x and CentOS 5.4
by Akemi Yagi 03 Feb '10

03 Feb '10

VMware Workstation 7.0.1 Release Notes has a list of supported OS: http://www.vmware.com/support/ws7/doc/releasenotes_ws701.html According to that, RHEL 5.4 is listed as supported for both host and guest but CentOS 5.4 is only for guest. This is quite strange and, if it is true, that could be a serious issue. If you have VMware Workstation 7.0.x, could you tell us what you find? Did you encounter any problem when running CentOS 5.4 as a host? Thanks to nikkilocke who reported about the above release notes in the CentOS forum. Akemi

1 0

Re: [CentOS] authentication failure
by fabien faye 03 Feb '10

03 Feb '10

I have create a script and modify an action file's of fail2ban to contact the IP provider's of bruteforce attacks source. If you are interested : http://www.generationip.eu/documentation/mini-howto/135-use-fail2ban-to-con… Fabien FAYE RHCE www.generationip.com Free network tools & HOWTO for centos and Redhat ----- Original Message ----- From: "fabien faye" <fabien(a)faye.eu> To: "CentOS mailing list" <centos(a)centos.org> Sent: Monday, January 25, 2010 1:30:39 PM Subject: Re: [CentOS] authentication failure Hi, No one knows how to auto send fail2ban report to the email address present in the whois ? Fabien FAYE RHCE www.generationip.com Free network tools & HOWTO for centos and Redhat ----- Original Message ----- From: "fabien faye" <fabien(a)faye.eu> To: "CentOS mailing list" <centos(a)centos.org> Sent: Saturday, January 23, 2010 8:30:36 PM Subject: Re: [CentOS] authentication failure Hi, I am a fail2ban user and i am very interested to have an autosent mail to the ip provider of the brute force ip address. Do you know if it is possible with fail2ban or if we have to rewrite action in fail2ban ?. Fabien FAYE RHCE www.generationip.com Free network tools & HOWTO for centos and Redhat ----- Mail Original ----- De: "Athmane Madjoudj" <athmanem(a)gmail.com> À: "CentOS mailing list" <centos(a)centos.org> Envoyé: Samedi 23 Janvier 2010 18:20:01 Objet: Re: [CentOS] authentication failure On Sat, Jan 23, 2010 at 6:14 PM, madunix <madunix(a)gmail.com> wrote: > I noticed that my server has a lot ca. 1000x auth failure from > different alocated in China / Romania and Netherlands per day since 3 > days > It looks to me like somebody was trying to get into server by guessing > my password by brute force. > what would be the best to stop this attack and how? the server running > apache mysql and ftp > PORT STATE SERVICE > 21/tcp open ftp > 80/tcp open http > 443/tcp open https > 3306/tcp open mysql > ... > Jan 22 16:07:14 user vsftpd(pam_unix)[17462]: authentication failure; > logname= uid=0 euid=0 tty= ruser= rhost=195.95.228.150 > Jan 22 16:07:16 user vsftpd(pam_unix)[16737]: check pass; user unknown > Jan 22 16:07:16 user vsftpd(pam_unix)[16737]: authentication failure; > logname= uid=0 euid=0 tty= ruser= rhost=195.95.228.150 > Jan 22 16:07:17 user vsftpd(pam_unix)[17462]: check pass; user unknown > Jan 23 17:23:52 user vsftpd(pam_unix)[20524]: authentication failure; > logname= uid=0 euid=0 tty= ruser= rhost=221.7.40.47 > Jan 23 17:23:55 user vsftpd(pam_unix)[20524]: check pass; user unknown > Jan 23 17:23:55 user vsftpd(pam_unix)[20524]: authentication failure; > logname= uid=0 euid=0 tty= ruser= rhost=221.7.40.47 > Jan 23 17:23:59 user vsftpd(pam_unix)[20524]: check pass; user unknown > Jan 23 17:24:58 user vsftpd(pam_unix)[20524]: authentication failure; > logname= uid=0 euid=0 tty= ruser= rhost=221.7.40.47 > Jan 23 00:37:47 user vsftpd(pam_unix)[1791]: check pass; user unknown > Jan 23 00:37:47 user vsftpd(pam_unix)[1791]: authentication failure; > logname= uid=0 euid=0 tty= ruser= rhost=217.23.14.168 > Jan 23 00:38:06 user vsftpd(pam_unix)[1791]: check pass; user unknown > Jan 23 00:38:06 user vsftpd(pam_unix)[1791]: authentication failure; > logname= uid=0 euid=0 tty= ruser= rhost=217.23.14.168 > ... > > Thanks > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos > Maybe a brute force attack, try to install a HIDS like: APF/BFD: http://www.rfxn.com/projects/advanced-policy-firewall/ http://www.rfxn.com/projects/brute-force-detection/ Fail2ban: http://www.fail2ban.org/ Fail2ban is available in EPEL repos. HTH -- Athmane Madjoudj _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

Re: [CentOS] cannot mount NFS share, portmap problems, what todo? [SOLVED]
by Rudi Ahlers 03 Feb '10

03 Feb '10

On Wed, Feb 3, 2010 at 2:40 PM, Geoff Galitz <geoff(a)galitz.org> wrote: > > > > Should it be running, or not? > > > > > > >root@mercury:[~]$ netstat -ap --inet | grep rpc > > >tcp 0 0 *:sunrpc *:* > LISTEN 6458/portsentry > > >udp 0 0 localhost:filenet-rpc localhost:filenet-rpc > ESTABLISHED 1980/postmaster > > > > > > It looks like you need to deconfigure portsentry from listening on that > port and then you should be good to go. IOW, portsentry is ok to run, but > not on your portmapper port when you need to run portmapper. > > > > -geoff > > > > --------------------------------- > Geoff Galitz > Blankenheim NRW, Germany > http://www.galitz.org/ > http://german-way.com/blog/ > > _______________________________________________ > awesome, thanx. It's working now :) -- Kind Regards Rudi Ahlers SoftDux Website: http://www.SoftDux.com Technical Blog: http://Blog.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss