- Discuss - lists.centos.org

Software RAID1 Disk I/O
by Matt 06 Jan '10

06 Jan '10

I just installed CentOS 5.4 64 bit release on a 1.9ghz CPU with 8gB of RAM. It has 2 Western Digital 1.5TB SATA2 drives in RAID1. [root@server ~]# df -h Filesystem Size Used Avail Use% Mounted on /dev/md2 1.4T 1.4G 1.3T 1% / /dev/md0 99M 19M 76M 20% /boot tmpfs 4.0G 0 4.0G 0% /dev/shm [root@server ~]# Its barebones right now. Nothing really running. I intended to move our current email server over to it eventually. The thing is slow as mud due to disk I/O though. I have no idea whats going on. Here is a bit of iostat -x output. [root@server ~]# iostat -x Linux 2.6.18-164.9.1.el5 (server.x.us) 01/05/2010 avg-cpu: %user %nice %system %iowait %steal %idle 0.13 0.10 0.03 38.23 0.00 61.51 Device: rrqm/s wrqm/s r/s w/s rsec/s wsec/s avgrq-sz avgqu-sz await svctm %util sda 0.18 0.33 0.04 0.20 27.77 4.22 132.30 3.70 15239.91 2560.21 61.91 sda1 0.00 0.00 0.00 0.00 0.34 0.00 654.72 0.01 12358.84 3704.24 0.19 sda2 0.18 0.00 0.04 0.00 27.30 0.00 742.93 0.30 8065.37 1930.35 7.09 sda3 0.00 0.33 0.01 0.20 0.14 4.22 21.29 3.40 16537.41 3008.03 61.52 sdb 0.19 0.33 0.06 0.20 28.39 4.22 126.29 2.51 9676.49 862.49 22.27 sdb1 0.00 0.00 0.00 0.00 0.34 0.00 606.29 0.00 2202.03 643.13 0.04 sdb2 0.18 0.00 0.04 0.00 27.30 0.00 724.25 0.10 2579.45 745.76 2.81 sdb3 0.01 0.33 0.02 0.20 0.75 4.22 22.61 2.41 10913.16 988.40 21.74 md2 0.00 0.00 0.04 0.48 0.89 3.87 9.04 0.00 0.00 0.00 0.00 md1 0.00 0.00 0.00 0.00 0.00 0.00 8.00 0.00 0.00 0.00 0.00 md0 0.00 0.00 0.00 0.00 0.00 0.00 7.20 0.00 0.00 0.00 0.00 Does anyone have an idea what I have wrong here? This is my first software RAID install. Built a number of Centos servers without RAID and they have all worked fine. Matt

6 11

rsyslog v3 RPM for CentOS/RHEL
by Dan Burkland 05 Jan '10

05 Jan '10

Hello all, I have been doing some research on integrating rsyslog with GSSAPI authentication. I have discovered that the current version of rsyslog available in the repository does not support GSSAPI. I am wondering if any of you bright individuals out there have been discovered an rsyslog v3 RPM. If worse comes to worse I can always make my own RPM however this would greatly save me some time. Thanks all, Dan Burkland

1 0

conga and "virsh nodeinfo"
by Dirk H. Schulz 05 Jan '10

05 Jan '10

Hi folks, I have run into a confusing problem. My initial problem is: Conga does not offer "Add a virtual machine service". So I googled and found a RedHat advisory on that: http://rhn.redhat.com/errata/RHBA-2009-1623.html which points updates that should fix this. I checked on my cluster, but the relevant packages are current (and even if ALL packages are current it does not work). So I tried manually what is described in the above advisory: "virsh nodeinfo --readonly" throws an error saying that "--readonly" is not implemented. That seems to be the problem. Running "virh nodeinfo" as a non-root user (like Conga does) leads to an error as described in the above advisory. Reading the man page on virsh suggests that there is a --readonly flag to URIs, not to simple virsh commands. Now I am stuck. Googleing does not lead to anything helpful. Has anyone else run into this and resolved it? Or can someone send me a valid vm ressource entry for the /etc/cluster/cluster.conf file so I can adapt that? I have not found really enlightening examples on the web, and docs on this seem quite sparse. Thanks for any hint or help. Dirk

2 3

Centos 5.4 and TYAN s4985 motherboard....
by Tom Bishop 05 Jan '10

05 Jan '10

Was wondering if anyone has any luck with the Tyan s4985 motherboard, I had loaded up the latest 5.4 release and in installed most everything that I wanted but when I loaded it up, as in processor wise it would lock up. Funny thing I could still ssh to it but not do a su - or anything from the console. I think it is kernel related and tried the previous kernel but it still exhibited the same symptom. The only thing I saw in the log was a message about a soft lockup on cpu0, there is a open bug for that but from the description doesn't appear to cause any issues. I am running 4 opteron 8356 just for clarification....

3 5

IPTABLEs and port scanning
by James B. Byrne 05 Jan '10

05 Jan '10

I see many entries in /var/log/secure similar to these: . . . /var/log/secure.1:Dec 31 08:00:55 gway01 sshd[7220]: Received disconnect from 93.89.144.31: 11: Bye Bye /var/log/secure.1:Dec 31 08:00:58 gway01 sshd[7221]: Failed password for root from 93.89.144.31 port 60100 ssh2 /var/log/secure.1:Dec 31 08:00:58 gway01 sshd[7222]: Received disconnect from 93.89.144.31: 11: Bye Bye /var/log/secure.1:Dec 31 08:01:02 gway01 sshd[7223]: Failed password for root from 93.89.144.31 port 60962 ssh2 /var/log/secure.1:Dec 31 08:01:02 gway01 sshd[7224]: Received disconnect from 93.89.144.31: 11: Bye Bye /var/log/secure.1:Dec 31 08:01:05 gway01 sshd[7227]: Failed password for root from 93.89.144.31 port 33612 ssh2 /var/log/secure.1:Dec 31 08:01:05 gway01 sshd[7228]: Received disconnect from 93.89.144.31: 11: Bye Bye /var/log/secure.1:Dec 31 08:01:09 gway01 sshd[7229]: Failed password for root from 93.89.144.31 port 34504 ssh2 . . . As you can see, the ports are not those associated with the service requested. SSHD is configured to listen on the standard port (22) and only on a single IP address that is supposed to be reachable only from the internal network (this is a multi-homed system configured as a gateway). These are getting through the brute force filters because the attempts are directed against unchecked ports. I suspect that these represent no immediate danger to our systems because there are no active services on any of the ports and because we have a guillotine rule at the end of our INPUT chain. The firewall is configured to only allow connections to specified ports and to drop any new connection attempts to all the others. My confusion is over why these things are making it into the logs at all when sshd does not listen on those ports and the ports themselves are supposed to inaccessible through the firewall. There presence inoculates a doubt in my mind that things are properly configured. I would appreciate any insight as to why these attempts are nonetheless logged by sshd. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

5 5

CentOS-announce Digest, Vol 59, Issue 1
by centos-announce-request＠centos.org 05 Jan '10

05 Jan '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2010:0002 Moderate CentOS 4 i386 PyXML - security update (Tru Huynh) 2. CESA-2010:0002 Moderate CentOS 4 x86_64 PyXML - security update (Tru Huynh) 3. CESA-2010:0003 Moderate CentOS 4 i386 gd - security update (Tru Huynh) 4. CESA-2010:0003 Moderate CentOS 4 x86_64 gd - security update (Tru Huynh) 5. CESA-2010:0002 Moderate CentOS 5 x86_64 PyXML Update (Karanbir Singh) 6. CESA-2010:0002 Moderate CentOS 5 i386 PyXML Update (Karanbir Singh) 7. CESA-2010:0003 Moderate CentOS 5 x86_64 gd Update (Karanbir Singh) 8. CESA-2010:0003 Moderate CentOS 5 i386 gd Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Tue, 5 Jan 2010 00:32:13 +0100 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2010:0002 Moderate CentOS 4 i386 PyXML - security update To: centos-announce(a)centos.org Message-ID: <20100104233213.GA25522(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2010:0002 PyXML security update for CentOS 4 i386: https://rhn.redhat.com/errata/RHSA-2010-0002.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/PyXML-0.8.3-6.el4_8.2.i386.rpm source: updates/SRPMS/PyXML-0.8.3-6.el4_8.2.src.rpm You may update your CentOS-4 i386 installations by running the command: yum update PyXML Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

Weird update problem
by Anne Wilson 05 Jan '10

05 Jan '10

For some time now updates on my CentOS box had skipped exiv2. Yesterday I decided to do something about it, so I removed it - together with gwenview, digikam and, IIRC, libexiv2. That sounded reasonable, so I accepted the removal, then re-installed gwenview and digikam, which, of course, pulled in the two exiv2 packages. The version number of exiv2 sounded familiar, but I assumed that it would bring in the best-match version, and continued. This morning, seeing that more updates were announced, I ran update again. To my surprise, exiv2 was skipped, as before. I'm curious as to what could be happening here. Anne -- KDE Community Working Group New to KDE Software? - get help from http://userbase.kde.org

3 11

Installing over network
by Slack-Moehrle 05 Jan '10

05 Jan '10

Hi All, I see that sparc.centos.org does not contain any ISO's so that I can install from CD. How does one install over the internet? I have never done it before. I assume use the boot.iso and make sure that I have DHCP turned on so that I get an IP automatically from my router? Any advice? -Jason

6 11

PAM configuration?
by Roland Roland 05 Jan '10

05 Jan '10

Hello all, Can anyone please help out with configuring PAM? I've checked a couple of tutorials online.. though most of them are related to Login though I want to set PAM up for SSH logins... I've set the max erroneous logins to just THREE and even after trying to login with an error pass I still can get in... also is there a way I could enable the PAM module which uses crack library to check the strength of a users password? any help with this is truly appreciated... thanks in advance

4 5

James Matthews wants to connect on LinkedIn
by James Matthews 05 Jan '10

05 Jan '10

LinkedIn ------------ James Matthews requested to add you as a connection on LinkedIn: ------------------------------------------ Romeo, I'd like to add you to my professional network on LinkedIn. - James Matthews Accept invitation from James Matthews http://www.linkedin.com/e/c640Z0zoY42Hba6yQ6iWhZknxFvA/blk/I1698721392_2/pm… View invitation from James Matthews http://www.linkedin.com/e/c640Z0zoY42Hba6yQ6iWhZknxFvA/blk/I1698721392_2/39… ------------------------------------------ DID YOU KNOW your LinkedIn profile helps you control your public image when people search for you? Setting your profile as public means your LinkedIn profile will come up when people enter your name in leading search engines. Take control of your image! http://www.linkedin.com/e/ewp/inv-22/ ------ (c) 2009, LinkedIn Corporation

1 0

OT: piped greps with regex
by Mr. X 04 Jan '10

04 Jan '10

List, Happy NY. >From the bash command below, I'm trying to parse out the startsector value: $ sudo file mini_vusb.img mini_vusb.img: x86 boot sector, Microsoft Windows XP MBR, Serial 0x25d84; partition 1: ID=0xe, active, starthead 1, startsector 32, 390496 sectors First try was with grep/egrep but I wanted to capture 'startsector 32' as a group (). Nothing came close to working. Fail 1 Next attempt was with Perl file mini_vusb | perl -lane '$i=0 ;for (@F) {print substr($F[$i+1],0,-1) if ($_ eq "startsector"); $i++}' the above works, but it's too much fire power for the job :) Actually I came up with it in a minute or two once I remembered the special var @F. Success 1 Last effort led to this $ sudo file mini_vusb.img | grep -Po 'startsector\s+\d+'| grep -Po '\d+' 32 I like this best. Is there a way to shorten it up? -- Mark

3 2

Sendmail error: auxpropfunc error invalid parameter supplied
by Jussi Hirvi 04 Jan '10

04 Jan '10

I just noticed this error in my messages log after restarting sendmail. The only change I have made is 1) manual fix in /usr/share/spamassassin/72_active.conf 2) sa-update (several times) Now the mail is not running ok, my mail queue keeps growing. Regards, Jussi Hirvi

2 2

Extract Pax archive
by Per Qvindesland 03 Jan '10

03 Jan '10

Hi list Does anyone know how to extract a pax archive in Linux? I have been trying with the pax but with no joy perhaps I did not put in the correct switches. Regards Per Qvindesland

2 2

Monitoring Dynamic IPs using Some network monitoring tool
by Rajagopal Swaminathan 03 Jan '10

03 Jan '10

Greetings, I have one centos server for network monitoring. there are remote devices which are connected through ADSL lines and hence Dynamic IPs Q1. Is there any tool which is capable of handling this type of situation? Q2. Is there a workaround for this problem Regards Rajagopal

6 14

Tiny webserver to run as root
by RedShift 03 Jan '10

03 Jan '10

Hi all Does anyone have a suggestion for some software, a tiny webserver that is able to run as root and execute CGI scripts? It should be smaller than apache and preferably even smaller than lighttpd. It doesn't need a whole lot of features, it only needs to be able to execute CGI scripts. I have tried a few: nanoweb (which is written in php as well) but has some problems with CGI scripts and when it runs in multi process mode it brings the system load up to exactly 1.00. Nullhttpd, but it's old and unmaintained. Tinyhttpd isn't up for the job as well (kept crashing at times). Thanks, Best regards, Glenn

4 3

Setting CDROM parms
by Robert 03 Jan '10

03 Jan '10

My apologies in advance for asking such an elementary question. I called myself searching the Installation Guide and Deployment Guide, with no success. The situation is that I bought a Lite-On ATAPI iHAP122 that will not burn DVDs unless I use hdparm to turn dma off. I bought that drive because it was a rare beige drive. Until I can find a decent DVD burner and/or get a Windows machine put together strictly for doing BIOS updates, running with dma disabled seems to be the best solution. (hdparm -d0 /dev/hdb ) So, my question is, where should I script the command without having to become root each time I wat to burn a DVD? 2.6.18-164.9.1.el5PAE #1 SMP Tue Dec 15 21:41:47 EST 2009 i686 athlon i386 GNU/Linux This is how it always fails: [rj@madeleine ~]$ growisofs -dvd-compat -Z /dev/hdb=/home/rj/KNOPPIX_V6.2DVD-2009-11-18-EN.iso Executing 'builtin_dd if=/home/rj/KNOPPIX_V6.2DVD-2009-11-18-EN.iso of=/dev/hdb obs=32k seek= 0' /dev/hdb: "Current Write Speed" is 16.4x1352KBps. :-[ WRITE@LBA=30h failed with SK=4h/ASC=08h/ACQ=03h]: Input/output error :-( write failed: Input/output error /dev/hdb: flushing cache /dev/hdb: updating RMA /dev/hdb: closing disc [rj@madeleine ~]$

2 2

reading -- and editing -- ebooks
by ken 03 Jan '10

03 Jan '10

Last week I bought a couple books, not ebooks. I considered buying the ebook, but don't want to need a special device/appliance to read it. I'd much prefer to read ebooks on the Linux (CentOS) machine I'm already using. Also, I'd like to be able to programmatically convert the ebook into a format I can edit myself, e.g., HTML. I have no experience owning or purchasing ebooks. Could people who have clue me in on how they work and if the above is possible. Thanks much. -- Without music, life would be a mistake. --Friedrich Nietzsche

3 5

kickstart and logins.def question
by Kwan Lowe 03 Jan '10

03 Jan '10

Hello all: Happy New Year to everyone and thank you for all the knowledge this past year. I have a hopefully simple question about kickstart. In the authconfig section I can enable ldap, credential caching, etc.. Using the GUI tool there's an option to create the user home directories on first login. The docs don't show a similar option for authconfig in kickstart. For now I'm using a sed script in the %post section of the kickstart to replace the entry in /etc/login.defs, but was curious if there is a standard method via a system utility to change this option.

2 3

Sparc?
by Slack-Moehrle 02 Jan '10

02 Jan '10

My 12 year old wants to learn more about servers and has memorized a lot of commands like ls, chmod, du, etc. He wants to have his own domain and server on the web and I have enough Static IP's, so why not foster this interest. I have an old ultra sparc 5. Are there any CentOS versions that support Sparc? Or recommendations? I know OpenBSD does, but I am more versed in Solaris and versions like Slackware or CentOS or Ubuntu. He also says that ZFS rules all and is pissed Apple did not adopt it. Kids will be kids! -Jason

10 19

chroot problem.
by Frank M. Ramaekers 02 Jan '10

02 Jan '10

First, I'm trying to following along on a document on "SecurityFocus" on "Securing MySQL: step-by-step". I'm on step 3.8 "Test the configuration". I have my CHROOT directory structure setup and the chrootuid is failing (haven't figured that one out, yet). So, I simply tried a 'chroot /chroot/mysql' and got: chroot: cannot run command `/bin/bash': No such file or directory I realized that the documentation didn't cover this so I simply: cp -a /bin/bash /chroot/mysql/bin I'm still getting the same error message when I try 'chroot /chroot/mysql': # chroot /chroot/mysql chroot: cannot run command `/bin/bash': No such file or directory It's there, I'm not sure what the problem is: # ls -l /bin/bash -rwxr-xr-x 1 root root 859120 Oct 24 2008 /bin/bash # ls -l /chroot/mysql/bin/bash -rwxr-xr-x 1 root root 859120 Oct 24 2008 /chroot/mysql/bin/bash (I'm performing this as root, since the mysql userid cannot login.) Ideas? Frank M. Ramaekers Jr. Systems Programmer MCP, MCP+I, MCSE & RHCE American Income Life Insurance Co. Phone: (254)761-6649 1200 Wooded Acres Dr. Fax: (254)741-5777 Waco, Texas 76710 _____________________________________________________ This message contains information which is privileged and confidential and is solely for the use of the intended recipient. If you are not the intended recipient, be aware that any review, disclosure, copying, distribution, or use of the contents of this message is strictly prohibited. If you have received this in error, please destroy it immediately and notify us at PrivacyAct(a)ailife.com.

5 6

I thought Y2K was over with?
by Gilbert Sebenste 02 Jan '10

02 Jan '10

Apparently not. On a command line, type: date '+%G' First Spamassassin's bug (now fixed, type "sa-update" as user root), and now this... ******************************************************************************* Gilbert Sebenste ******** (My opinions only!) ****** *******************************************************************************

3 3

questions on debuginfo.centos.org
by Ryan J M 02 Jan '10

02 Jan '10

Recently I add a debuginfo repo into my /etc/yum.repos.d/ <start> [debuggery] name=CentOS-$releasever - DebugInfo baseurl=http://debuginfo.centos.org/$releasever/$basearch/ priority=1 <end> then yum update and list shows <start> kdiff3.i386 0.9.92-14.el5 epel kding.i386 0.4.3-1.el5.rf rpmforge kdirstat.i386 2.5.2-2.el5.rf rpmforge kdnssd-avahi.i386 0.1.3-0.1.20060713svn.fc6 base kdnssd-avahi-debuginfo.i386 0.1.3-0.1.20060713svn.el5.centos debuggery kdnssd-avahi-devel.i386 0.1.3-0.1.20060713svn.fc6 base kernel-PAE.i686 2.6.18-164.9.1.el5 updates kernel-PAE-debuginfo.i686 2.6.18-92.1.6.el5.centos.plus debuggery kernel-PAE-devel.i686 2.6.18-164.9.1.el5 updates kernel-debug.i686 2.6.18-164.9.1.el5 updates kernel-debug-debuginfo.i686 2.6.18-92.1.6.el5 debuggery kernel-debug-devel.i686 2.6.18-164.9.1.el5 updates kernel-debuginfo.i686 2.6.18-92.1.6.el5.centos.plus debuggery kernel-debuginfo-common.i686 2.6.18-92.1.6.el5.centos.plus debuggery kernel-doc.noarch 2.6.18-164.9.1.el5 updates kernel-xen.i686 2.6.18-164.9.1.el5 updates kernel-xen-debuginfo.i686 2.6.18-92.1.6.el5.centos.plus debuggery kernel-xen-devel.i686 2.6.18-164.9.1.el5 updates kerneloops.i386 0.11-1.el5.rf rpmforge kexec-tools.i386 1.102pre-77.el5.3 updates kexec-tools-debuginfo.i386 1.102pre-21.el5 debuggery keychain.noarch 2.6.8-1.el5.rf rpmforge <end> I notice that the kernel debuginfo version mismatch with my currenting running kernel, then I go to the site http://debuginfo.centos.org/5/i386/ , and there do exist the following ones : <start> [ ] kernel-debuginfo-2.6.18-128.el5.centos.plus.i686.rpm 01-Apr-2009 13:57 175M [ ] kernel-debuginfo-2.6.18-164.2.1.el5.i686.rpm 30-Sep-2009 20:17 166M [ ] kernel-debuginfo-2.6.18-164.6.1.el5.centos.plus.i686.rpm 04-Nov-2009 17:24 186M [ ] kernel-debuginfo-2.6.18-164.6.1.el5.i686.rpm 04-Nov-2009 01:43 166M [ ] kernel-debuginfo-2.6.18-164.9.1.el5.centos.plus.i686.rpm 16-Dec-2009 19:28 186M [ ] kernel-debuginfo-2.6.18-164.9.1.el5.i686.rpm 16-Dec-2009 05:27 166M [ ] kernel-debuginfo-2.6.18-164.el5.i686.rpm 03-Sep-2009 10:54 166M <end> Here comes my `uname -a` <start> Linux xas 2.6.18-164.9.1.el5 #1 SMP Tue Dec 15 21:04:57 EST 2009 i686 i686 i386 GNU/Linux <end> and my yum install log <start> root@xas~ > yum install kernel-debuginfo\* Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * epel: ftp.kddilabs.jp * rpmforge: ftp-stud.fht-esslingen.de Setting up Install Process Resolving Dependencies --> Running transaction check ---> Package kernel-debuginfo.i686 0:2.6.18-92.1.6.el5.centos.plus set to be updated ---> Package kernel-debuginfo-common.i686 0:2.6.18-92.1.6.el5.centos.plus set to be updated --> Finished Dependency Resolution Dependencies Resolved ================================================================================ Package Arch Version Repository Size ================================================================================ Installing: kernel-debuginfo i686 2.6.18-92.1.6.el5.centos.plus debuggery 165 M kernel-debuginfo-common i686 2.6.18-92.1.6.el5.centos.plus debuggery 29 M Transaction Summary ================================================================================ Install 2 Package(s) Update 0 Package(s) Remove 0 Package(s) Total download size: 194 M Is this ok [y/N]: y Downloading Packages: (1/2): kernel-debuginfo-common-2.6.18-92.1.6.el5.centos. | 29 MB 03:35 (2/2): kernel-debuginf (35%) 23% [==- ] 147 kB/s | 40 MB 14:36 ETA <end> So, Is it the problem of debuginfo.centos.org/5/repodata or I missed anything? Thanks and HAPPY NEW YEAR! -- FIXME if it is wrong.

1 1

need to free space on a root partition.
by Yan Yu 02 Jan '10

02 Jan '10

Hello, there, Happy new year everyone! I am puzzled here. Could some expert help me shed some light on this? this may not be a centos specific Q.. i have a linux machine. and the root partition (/) is full.. so I moved a dir from /data to /var (/var is on a different partition), and created a link from /data/fa to /var/xyz, the files under /var/xyz is about 8G, du /var/fa 8701248 /var/fa so I thought this should free some space for me, but when I used df, it gave me similar results before and after the move.. and my rpm installation would fail due to the lack of space.. Filesystem 1K-blocks Used Available Use% Mounted on /dev/cciss/c0d0p6 15235040 15232452 0 100% / /dev/cciss/c0d0p8 other partitions have free space.... I was confused on why moving a 8G file to another partition did not free some space for me? and I did see that the disk usage for the destination partition/disk increases after the move.. any pointer is appreciated! yan

2 2

yum centos repo dependency hell for matlab loaddap
by Dave 02 Jan '10

02 Jan '10

I've got matlab installed: < M A T L A B (R) > Copyright 1984-2009 The MathWorks, Inc. Version 7.8.0.347 (R2009a) 64-bit (glnxa64) February 12, 2009 I want to install loaddap. I downloaded an rpm from http://opendap.org/download/ml-structs.html. # yum --nogpgcheck localinstall loaddap-3.6.1-1.x86_64.rpm Loaded plugins: fastestmirror, priorities, security Setting up Local Package Process[snip] --> Processing Dependency: libmex.so()(64bit) for package: loaddap --> Processing Dependency: libmx.so()(64bit) for package: loaddap --> Finished Dependency Resolution loaddap-3.6.1-1.x86_64 from loaddap-3.6.1-1.x86_64.rpm has depsolving problems --> Missing Dependency: libmex.so()(64bit) is needed by package loaddap-3.6.1-1.x86_64 (loaddap-3.6.1-1.x86_64.rpm) loaddap-3.6.1-1.x86_64 from loaddap-3.6.1-1.x86_64.rpm has depsolving problems --> Missing Dependency: libdapclient.so.3()(64bit) is needed by package loaddap-3.6.1-1.x86_64 (loaddap-3.6.1-1.x86_64.rpm) loaddap-3.6.1-1.x86_64 from loaddap-3.6.1-1.x86_64.rpm has depsolving problems --> Missing Dependency: libdap.so.9()(64bit) is needed by package loaddap-3.6.1-1.x86_64 (loaddap-3.6.1-1.x86_64.rpm) loaddap-3.6.1-1.x86_64 from loaddap-3.6.1-1.x86_64.rpm has depsolving problems --> Missing Dependency: libmat.so()(64bit) is needed by package loaddap-3.6.1-1.x86_64 (loaddap-3.6.1-1.x86_64.rpm) loaddap-3.6.1-1.x86_64 from loaddap-3.6.1-1.x86_64.rpm has depsolving problems --> Missing Dependency: libmx.so()(64bit) is needed by package loaddap-3.6.1-1.x86_64 (loaddap-3.6.1-1.x86_64.rpm) loaddap-3.6.1-1.x86_64 from loaddap-3.6.1-1.x86_64.rpm has depsolving problems --> Missing Dependency: libdap >= 3.8.0 is needed by package loaddap-3.6.1-1.x86_64 (loaddap-3.6.1-1.x86_64.rpm) Error: Missing Dependency: libdapclient.so.3()(64bit) is needed by package loaddap-3.6.1-1.x86_64 (loaddap-3.6.1-1.x86_64.rpm) Error: Missing Dependency: libmx.so()(64bit) is needed by package loaddap-3.6.1-1.x86_64 (loaddap-3.6.1-1.x86_64.rpm) Error: Missing Dependency: libdap >= 3.8.0 is needed by package loaddap-3.6.1-1.x86_64 (loaddap-3.6.1-1.x86_64.rpm) Error: Missing Dependency: libdap.so.9()(64bit) is needed by package loaddap-3.6.1-1.x86_64 (loaddap-3.6.1-1.x86_64.rpm) Error: Missing Dependency: libmat.so()(64bit) is needed by package loaddap-3.6.1-1.x86_64 (loaddap-3.6.1-1.x86_64.rpm) Error: Missing Dependency: libmex.so()(64bit) is needed by package loaddap-3.6.1-1.x86_64 (loaddap-3.6.1-1.x86_64.rpm) Apparently my libdap is too old: # rpm -q libdap libdap-3.7.8-1.el5.1 And it is current with the centos repos, # yum update libdap Loaded plugins: fastestmirror, priorities, security [snip] No Packages marked for Update so I need a good rev source rpm

2 2

unsuscribe
by mvaras＠inf.utfsm.cl 02 Jan '10

02 Jan '10

unsuscribe

2 1

Tyan s4985 motherboard and lm_sensors
by Tom Bishop 02 Jan '10

02 Jan '10

Trying to get cpu temps from lm_sensors for a Tyan s4985 motherboard, just installed centos 5.4. Tyan release some lm_sensors conf files and other information which I have done, but I am not getting any cpu temps. I was wondering if anyone out there was running this board and if you have gotten temps working for your cpu, here is my output...Thanks in advance. w83627hf-isa-0c00 Adapter: ISA adapter VCore 1: +1.52 V (min = +0.00 V, max = +4.08 V) VCore 2: +1.55 V (min = +0.00 V, max = +4.08 V) +3.3V: +3.49 V (min = +2.82 V, max = +3.79 V) +5V: +5.24 V (min = +6.40 V, max = +5.54 V) ALARM +12V: +5.78 V (min = +12.28 V, max = +12.28 V) ALARM -12V: -6.93 V (min = +6.06 V, max = +5.65 V) ALARM -5V: -3.84 V (min = +2.49 V, max = +0.28 V) ALARM V5SB: +5.73 V (min = +6.69 V, max = +5.86 V) ALARM VBat: +3.09 V (min = +1.66 V, max = +0.82 V) ALARM fan1: 0 RPM (min = 10227 RPM, div = 2) ALARM fan2: 0 RPM (min = 6250 RPM, div = 2) ALARM fan3: 0 RPM (min = 2789 RPM, div = 2) ALARM temp1: +41°C (high = -54°C, hyst = -54°C) sensor = thermistor ALARM temp2: +43.0°C (high = +80°C, hyst = +75°C) sensor = thermistor temp3: +45.5°C (high = +80°C, hyst = +75°C) sensor = thermistor vid: +0.000 V (VRM Version 0.0) alarms: beep_enable: Sound alarm enabled

1 0

Re: [CentOS] which program/command (perl, vi, or sed) is better
by Les Bell 02 Jan '10

02 Jan '10

ann kok <oiyankok(a)yahoo.ca> wrote: >> Which program/command (perl, vi, or sed) is better to extract the data by date? << The book "Perl for System Administration ", (David N. Blank-Edelman, O'Reilly, 2000) has a chapter on using Perl to analyse log files, rotate and compress them, etc. Luckily, this chapter is the "free sample" they provide online - see http://oreilly.com/catalog/perlsysadm/chapter/ch09.html Sorted. I mean, problem solved. Best, --- Les Bell [http://www.lesbell.com.au] Tel: +61 2 9451 1144

1 0

which program/command (perl, vi, or sed) is better
by ann kok 01 Jan '10

01 Jan '10

Hi I have apache log file around 7.6G and record half year Which program/command (perl, vi, or sed) is better to extract the data by date? and finally I can remove that big file and still keep the record. I have problem when using vi and it uses up the server memory Thank you for your help __________________________________________________________________ Get a sneak peak at messages with a handy reading pane with All new Yahoo! Mail: http://ca.promos.yahoo.com/newmail/overview2/

4 3

Re: [CentOS] one server handled sendmail added two more servers messes things up
by Jerry Geis 01 Jan '10

01 Jan '10

lists-centos wrote: > What IPnumbers did you give the two new machines? What does your DNS > look like. > > >From the outside, mail will be delivered to the MX- (or if that > doesn't exist A-) record machine (based on the IPnumber in the DNS > record) for the FQDN on the message. > > - Rick > > ------------ Original Message ------------ > >> Date: Friday, January 01, 2010 02:27:12 PM -0500 >> From: Jerry Geis <geisj(a)pagestation.com> >> To: CentOS ML <centos(a)centos.org> >> Subject: [CentOS] one server handled sendmail added two more >> > servers messes things up > >> Hi all, >> >> I had one server running centos 4.7 i686 everything was fine with >> incoming mail. >> >> I now added two more servers centos 5.4 x86_64 and gave them >> machine names all >> part of the same domain as machine 1. I noticed that incoming >> emails are being >> round robined to all three machines. At this time I really just >> want the one original machine >> to handle my incoming email... The other two new machines are for >> other purposes. >> >> How do I tell the two new machines that all incoming email send to >> machine 1. >> Is there an easy way to do that? At this point I just turned off >> the two new machines >> and all mail is coming into the original machine just like before. >> >> Thanks, >> >> Jerry >> > All three machines have the same FQDN. something like A.mydomain.com, B.mydomain.com, C.mydomain.com The IP numbers are X.Y.Z.170, .171 and .172 All three machines have MX records. they all have the same domain name. It is a big deal to request changes from the provider so I was hoping there was a way to just tell the two new machines that incoming email to them just send on over to the the first machine. Is there a way to do that - or am I going about this the wrong way? Jerry

6 7

Lost mdadm.conf
by robert mena 01 Jan '10

01 Jan '10

Hi, I lost my mdadm.conf (and /proc/mdadm shows nothing useful) and I'd like to mount the filesystem again. So I've booted using rescue but I was wondering if I can do a command like this safely (i.e without losing the data previously stored). mdadm -C /dev/md0 --level=raid0 --raid-devices=2 /dev/sda1 /dev/sdb1 Where of course the raid devices and the /dev/x are the correct ones

6 18

The future is here, but Spamassassin doesn't buy it
by Gilbert Sebenste 01 Jan '10

01 Jan '10

Hey all, I am getting a number of incoming emails flagged as spam this morning. Here's why: X-Spam-Level: ***** X-Spam-Status: Yes, score=5.2 required=5.0 tests=FH_DATE_PAST_20XX, SUBJ_ALL_CAPS autolearn=no version=3.2.5 X-Spam-Report: * 3.4 FH_DATE_PAST_20XX The date is grossly in the future. The date of 2010 in the emails is correct. I have typed "sa-update" and restarted, to no avail. Anyone else seeing this? ******************************************************************************* Gilbert Sebenste ******** (My opinions only!) ****** *******************************************************************************

3 4

one server handled sendmail added two more servers messes things up
by Jerry Geis 01 Jan '10

01 Jan '10

Hi all, I had one server running centos 4.7 i686 everything was fine with incoming mail. I now added two more servers centos 5.4 x86_64 and gave them machine names all part of the same domain as machine 1. I noticed that incoming emails are being round robined to all three machines. At this time I really just want the one original machine to handle my incoming email... The other two new machines are for other purposes. How do I tell the two new machines that all incoming email send to machine 1. Is there an easy way to do that? At this point I just turned off the two new machines and all mail is coming into the original machine just like before. Thanks, Jerry

2 1

Update via yum fails with "needs libdbus-1.so.3, this is not available."
by Bart van Kuik 01 Jan '10

01 Jan '10

Hi list, I am running CentOS release 5.2. When I did a "yum -y update", I got a large list of packages to be updated (360 packages). Then I got the following error: Total download size: 499 M Downloading Packages: Running rpm_check_debug ERROR with rpm_check_debug vs depsolve: Package xulrunner needs libdbus-1.so.3, this is not available. .... cut about 10 similar lines .... What can I do to make the update roll through? Regards, Bart

2 1

missing module dir?
by Michael Klinosky 01 Jan '10

01 Jan '10

I'm teaching myself about ethernet cards, and found a TLDP page. I have CentOS 5.3. In this section: http://tldp.org/HOWTO/Ethernet-HOWTO-2.html#ss2.4 in the 'Driver as module' subsection, regarding PCI cards, it states that there should be a directory "/lib/modules/`uname -r`/net" [mykolas@sr1220 ~]$ uname -r 2.6.18-128.1.16.el5 [mykolas@sr1220 2.6.18-128.1.16.el5]$ pwd /lib/modules/2.6.18-128.1.16.el5 [mykolas@sr1220 2.6.18-128.1.16.el5]$ ls build modules.alias modules.ieee1394map modules.ofmap modules.symbols updates extra modules.ccwmap modules.inputmap modules.pcimap modules.usbmap weak-updates kernel modules.dep modules.isapnpmap modules.seriomap source There's no 'net' directory. I am guessing that the NIC drivers are modules (and not compiled into the kernel) - am I wrong? Or, where are the modules?

2 1

trying to get lm_sensorts to work
by Jerry Geis 01 Jan '10

01 Jan '10

hi all, I am trying to get lm_sensors to work. did the yum install lm_sensors service lm_sensors start sensor -s and it says no sensors found. did lsmod | grep it87 and it87 57061 0 hwmon_vid 35905 1 it87 hwmon 36553 1 it87 i2c_isa 39105 1 it87 i2c_core 56129 5 it87,i2c_isa,i2c_dev,i2c_ec,i2c_piix4 Seems like modules are loaded.... Is the some final trick to getting it to work? centos 5, 2.6.18-164.9.1.el5 #1 SMP Tue Dec 15 20:57:57 EST 2009 x86_64 x86_64 x86_64 GNU/Linux Thanks, jerry ---------------------------- lspci 00:00.0 Host bridge: Advanced Micro Devices [AMD] RS780 Host Bridge Alternate 00:01.0 PCI bridge: Advanced Micro Devices [AMD] RS780 PCI to PCI bridge (int gfx) 00:0a.0 PCI bridge: Advanced Micro Devices [AMD] RS780 PCI to PCI bridge (PCIE port 5) 00:11.0 SATA controller: ATI Technologies Inc SB700/SB800 SATA Controller [AHCI mode] 00:12.0 USB Controller: ATI Technologies Inc SB700/SB800 USB OHCI0 Controller 00:12.1 USB Controller: ATI Technologies Inc SB700 USB OHCI1 Controller 00:12.2 USB Controller: ATI Technologies Inc SB700/SB800 USB EHCI Controller 00:13.0 USB Controller: ATI Technologies Inc SB700/SB800 USB OHCI0 Controller 00:13.1 USB Controller: ATI Technologies Inc SB700 USB OHCI1 Controller 00:13.2 USB Controller: ATI Technologies Inc SB700/SB800 USB EHCI Controller 00:14.0 SMBus: ATI Technologies Inc SBx00 SMBus Controller (rev 3c) 00:14.1 IDE interface: ATI Technologies Inc SB700/SB800 IDE Controller 00:14.2 Audio device: ATI Technologies Inc SBx00 Azalia (Intel HDA) 00:14.3 ISA bridge: ATI Technologies Inc SB700/SB800 LPC host controller 00:14.4 PCI bridge: ATI Technologies Inc SBx00 PCI to PCI Bridge 00:14.5 USB Controller: ATI Technologies Inc SB700/SB800 USB OHCI2 Controller 00:18.0 Host bridge: Advanced Micro Devices [AMD] K10 [Opteron, Athlon64, Sempron] HyperTransport Configuration 00:18.1 Host bridge: Advanced Micro Devices [AMD] K10 [Opteron, Athlon64, Sempron] Address Map 00:18.2 Host bridge: Advanced Micro Devices [AMD] K10 [Opteron, Athlon64, Sempron] DRAM Controller 00:18.3 Host bridge: Advanced Micro Devices [AMD] K10 [Opteron, Athlon64, Sempron] Miscellaneous Control 00:18.4 Host bridge: Advanced Micro Devices [AMD] K10 [Opteron, Athlon64, Sempron] Link Control 01:05.0 VGA compatible controller: ATI Technologies Inc Unknown device 9710 01:05.1 Audio device: ATI Technologies Inc Unknown device 970f 02:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd. RTL8111/8168B PCI Express Gigabit Ethernet controller (rev 02) 03:06.0 Ethernet controller: Digium, Inc. Wildcard TDM800P 8-port analog card (rev 11) 03:0e.0 FireWire (IEEE 1394): Texas Instruments TSB43AB23 IEEE-1394a-2000 Controller (PHY/Link)

3 2

restoring using rysnc
by robert mena 31 Dec '09

31 Dec '09

Hi, My backup server (B) has a /backup/home and I'd like to restore /backup/home/userX to /home/userX in my server A I am trying to do with in the server where I want to restore. rsync -e ssh -avzp -R --exclude "*.journal" backup_server:/backup/home/userX/ /home/userX But it is creating a /home/userX/backup/home/userX What am I doing wrong?

2 1

DRBD error : Invalid module format
by robert mena 31 Dec '09

31 Dec '09

Hi, I am trying to use drbd in my centos 5.4 but I keep getting errors. When I try modprobe -v drbd I receive insmod /lib/modules/2.6.18-164.el5PAE/extra/drbd/drbd.ko FATAL: Error inserting drbd (/lib/modules/2.6.18-164.el5PAE/extra/drbd/drbd.ko): Invalid module format. The current (running) kernel is 2.6.18-164.el5PAE kmod-drbd-8.0.16-5.el5_3 drbd-8.0.16-5.el5.centos Any tips?

2 1

[OT] CAT5 IP-capable rackmount KVM units?
by Thomas Harold 31 Dec '09

31 Dec '09

Rather off-topic, but I'm looking for IP-based KVMs (~16 ports) that can handle both PS/2 and USB hookups on the server side. All of the answers over at Slashdot are a few years out of date and it looks like prices on KVM head units have dropped a bit over the years. Some of the older units only worked with Windows, Internet Explorer and ActiveX. Others like the ATEN KH1516i supposedly use Java and are far better from a cross-platform point of view. I'm on the fence about the CAT5 cables over the more traditional style, it seems like the CAT5 cable system would give a lot more flexibility in dealing with USB vs PS/2 servers (or even serial only?). The bigger advantage with the CAT5 stuff seems to be fewer length limitations and less space used in the rack for the head unit. I'm guessing that the CAT5 adapters are going to be proprietary?

7 8

Find reason for heavy load
by Noob Centos Admin 31 Dec '09

31 Dec '09

My Centos 5 server has seen the average load jumped through the roof recently despite having no major additional clients placed on it. Previously, I was looking at an average of less than 0.6 load, I had a monitoring script that sends an email warning me if the current load stayed above 0.6 for more than 2 minutes. This script used to trigger perhaps once an hour during peak periods. Even so, I seldom see numbers higher than 1.x On 4th Dec, somebody from an Indian IP range started hammering my SMTP service, attempting to use it as an open relay. Naturally that didn't work and only end up budging my typical 400KB daily log report into 2MB~4MB affairs. After observing a few days to determine the IP range, I started blocking the Indian subnet with apf. Initially I had problems with getting apf to wok properly but after a couple of days managed to get the block working and my daily log went back down to expected size when all those connection attempts disappear from exim's log. Now this is when my server load started to shoot through the roof with figures like 8.64 5.90 3.62 being reported by my monitoring script, triggering so often. I had to raise my threshold to 1.6 to keep my own script from spamming myself. I've tried changing several things on the server, since initially it seems like the high load may be due to I/O wait. So I turning off non-essential services like OpenNMS to see if that had any effect. I also turned off apf and inserted rules manually into iptables to reduce the number of iptable rules the system has to process. All that doesn't seem to help much, I'm still getting consistent server loads in the 2.x to 3.x range almost all the time. The problem is using top, none of my processes are showing abnormal CPU%, most are well under 5%, manually adding them up doesn't equate the 200% to 300% the load figures of 2.x and 3.x are indicating. Even top's own summary says CPU % is in the 20~30% range, what's worrying is the System% is also in the same range. I have no idea what is "system" doing since it appears that anything running inside the kernel is lumped under "system". Or why even totalling both % up, I would expect 50~60% to translate to the expected load of 0.5~0.6 yet system load stats is 5x what's expected. I've installed utilities like dstat to try to see if I can figure out which process is making the system calls that is clogging up the server but either I don't understand it or it's not the right tool. So I'll appreciate some advice on how/what should I do next to identify the cause. Thanks in advance!

7 21

Aide questions
by Steve Campbell 31 Dec '09

31 Dec '09

I've got aide aide-0.13.1-4.el5 running on a server, and aide aide-0.13.1-2.0.4.el5 running on a similar server. There appears to have been a change in the way base directories are being monitored in the two versions. Both servers are running logical volumes, but it seems to not matter as I'm running aide on a server without logical volumes and the problem still shows up. Now the problem.... On the server with the newer aide, it reports MTime and CTime changes in some of the base directories such as: Directory: /root Mtime : 2009-12-18 09:14:02 , 2009-12-24 12:20:53 Ctime : 2009-12-18 09:14:02 , 2009-12-24 12:20:53 Directory: /usr/bin Mtime : 2009-12-18 00:04:20 , 2009-12-31 00:05:08 Ctime : 2009-12-18 00:04:20 , 2009-12-31 00:05:08 The older version of aide doesn't do this. Both aide.conf files are identical. I've tried entries in the conf file like the following to avoid this, but it seems I shouldn't have to do this: /usr/bin$ DIR where I've redefined DIR to not include "m" and "c". I still get reports of files below /usr/bin, but this avoids the changes to the directory itself everyday. Does anyone have a clue how to avoid this any other way, and maybe if aide is doing this differently now (and why)? It's not a big deal, but I'm kinda believing I'm not doing it the right way. Thanks steve campbell

1 0

VirtualBox and CentOS
by Lars Hecking 31 Dec '09

31 Dec '09

I recently doownloaded and installed the latest RHEL5 rpm from the VirtualBox web site. While it generally works very well, I have been unable to get USB access to work on the guest. This seems to be a very common problem. Many references to it turn up in a web search, but I have not found a solution that works on CentOS 5. I got no response on the vbox-users mailing list either. Can anyone here help? Among the things I tried were various /sys and /proc/bus/usb related fstab and rc.sysinit changes. Drew a total blank on this one ...

6 12

upgrade adivce
by William Warren 31 Dec '09

31 Dec '09

I have a new client that is running a fedora 4 system. Can i upgrade that box to centos 5 with a reasonable expectation of success or should i just back it up and do it from scratch? Also will the samba version in centos 5 natively support windows 7 clients? Links to tips and tricks are appreciated..:) Sincerely, William Warren

6 6

Community in each Country
by Fitrah Elly Firdaus 31 Dec '09

31 Dec '09

Dear All, whether there are members here who are active in the community board CentOS in your respective countries? I want to make Centos community in my country,Indonesia. I expect support from all friends Regards Firdaus

2 1

autofs problems
by Mag Gam 30 Dec '09

30 Dec '09

We have about 800 CentOS 5.2 servers and our university. We use NFS being served from over 10 NetApp frames. We use autofs for to mount up our partitions. There have been times where we can't cd into the directory. It says the directory does not exist. On some servers it works but on others it does not. Typically we restart amd and autofs to resolve this issue. But sometimes it does not even work. A reboot fixes the problem. I am wondering if anyone knows any tricks to check if autofs is working properly on the system and also what I should do in a situation like this. TIA

3 2

OT: What are the 2 openssl commands I need to use?
by Lanny Marcus 30 Dec '09

30 Dec '09

I looked on the openssl man page but am too dense with commands to understand what I need to do..... Ran into problems generating a key and CSR for SSL, because the web site is on a server with an old Ensim Control Panel. Please someone knowledgeable, give me the openssl commands I need to use, after I ssh into the web site, to generate a 2048 bit key and csr. TIA and Happy New Year! "I believe the issue you are having is due to the size of the encryption key. The ensim control panel generates a 1024 bit key, where the certificate you got was 2048 bits. What you need to do is generate a 2048 bit key and csr on your domain. You would need to login in to your domain through ssh and generate the files from the command line." Lanny -------------------------------------- Magazine subscriptions Largest discount Credit/Debit Card Check Pay Pal http://lowcostmagazines.com/

6 16

Re: [CentOS] Sparc?
by nate 29 Dec '09

29 Dec '09

Slack-Moehrle wrote: > My 12 year old wants to learn more about servers and has memorized a lot of > commands like ls, chmod, du, etc. > He wants to have his own domain and server on the web and I have enough > Static IP's, so why not foster this interest. I'd say go the VM route if you can, safer, easier to un-screw when he breaks the whole thing, and certainly more dynamic(setup many systems so they can talk to each other etc), and likely save a lot on power. nate

1 0

via vb 8001 : vt1211 driver
by Adrian Sevcenco 29 Dec '09

29 Dec '09

Hi! I have an vb8001 and i try to make the lm_sensors to work .. i upgraded to latest version and in the end doesn't find the vt1211 driver ... is it packaged somewhere? (maybe elrepo but it doesn't find any vt1211 nor 1211 related packages) (of course this is on an Centos 5.4) Thanks, Adrian P.S. i tried to post to lm_sensors mail list but it seem that it is not working (nor http://lists.lm-sensors.org/mailman/listinfo/lm-sensors)

4 3

{SOLVED} Re: OT: What are the 2 openssl commands I need to use?
by Lanny Marcus 29 Dec '09

29 Dec '09

On Tue, Dec 29, 2009 at 12:36 PM, Lanny Marcus <lmmailinglists(a)gmail.com> wrote: > I looked on the openssl man page but am too dense with commands to > understand what I need to do..... Ran into problems generating a key > and CSR for SSL, because the web site is on a server with an old > Ensim Control Panel. Please someone knowledgeable, give me the > openssl commands I need to use, after I ssh into the web site, to > generate a 2048 bit key and csr. TIA and Happy New Year! > > "I believe the issue you are having is due to the size of the > encryption key. The ensim control panel generates a 1024 bit key, > where the certificate you got was 2048 bits. What you need to do is > generate a 2048 bit key and csr on your domain. You would Thank you, to everyone who responded! In the end, it wasn't necessary for me to use the openssl command, as the man in OLM Tech Support had suggested to me earlier today. Eddy at StartCom (StartSSL) gave me the commands, to check the Modulus of the ssl.key and ssl.crt files, which I'd made this morning, after running into the problem and confusion, with the 1024 bit CSR from the old Ensim Control Panel and the 2048 bit files Start SSL created, and the Modulus were identical. I was able to Import them, successfully, with the Ensim Control Panel. So, after OLM restarts Apache, the encryption should work. This was a learning experience for me and I will reread this thread and try to learn more from it. Happy New Year and again, thank you, to everyone in this list who shares their time and expertise. Deeply appreciated!

1 0

mkdir this "." directory
by adrian kok 29 Dec '09

29 Dec '09

Hi I have this . folder under tmp 1/ How they can make it this folder? 2/ How can I remove it? Thank you Send instant messages to your online friends http://uk.messenger.yahoo.com

16 23

RHCE
by Dan Burkland 29 Dec '09

29 Dec '09

I realize this is a CentOS mailing list but because it is based directly on RHEL, I would assume there are a few individuals who frequent the list that have passed the RHCE exam. I plan on taking the exam this March and was wondering if there are any tips you RHCEs out there could provide that may help me. Thanks! Dan

6 6

Cnetos 5.4 ext3 question...
by Tom Bishop 29 Dec '09

29 Dec '09

I could find this out but at the moment I dont have a copy of 5.4 running, can anyone tell me for a default centos5.4 install are ext3 barriers on by default? Thanks in advance...

6 13

Hardening
by ML 29 Dec '09

29 Dec '09

Hi Guys, I would like advice for best practices to secure my linux boxes. Know if I have been hacked, know of security breaches, etc. Can anyone provide advice? -Jason

9 10

Centos & UPS
by Robert Spangler 29 Dec '09

29 Dec '09

Hello, I received for X-mas an APC UPS system form my computer. I'm looking for how I can integrate it into the system so that the system will shut down either after the UPS power is low enough or a timed event after the power is out will automatically shutdown. Would also like it to be smart enough to stop the shut down process if power is restored before the shutdown starts. Anyone have any recommendation for this setup? Thanks. -- Regards Robert Linux User #296285 http://counter.li.org

9 9

NFS problem
by Timothy Murphy 29 Dec '09

29 Dec '09

I'm trying to NFS-mount a CentOS directory on my Fedora laptop, but I find I can only do this is I turn off the firewall on the CentOS server. If instead I go to system-config-securitylevel-tui on the server, and allow NFS4, this does not do the trick. Nor does allowing port 2049. What do I need to allow? [I should say that the CentOS server is remote, and difficult to access directly; that is why I used system-config-securitylevel-tui, rather than system-config-securitylevel .] -- Timothy Murphy e-mail: gayleard /at/ eircom.net tel: +353-86-2336090, +353-1-2842366 s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland

4 3

Re: [CentOS] mkdir this "." directory
by Les Bell 29 Dec '09

29 Dec '09

adrian kok <adriankok2000(a)yahoo.com.hk> wrote: >> I have this . folder under tmp << It's called a directory, not a "folder" and there's one in every directory. It's a hard link to the current directory, just like ".." is a hard link to the directory above. >> 1/ How they can make it this folder? << Create any directory, and it will appear, as I've explained. >> 2/ How can I remove it? << If you remove it, you'll be removing the /tmp directory itself, which is not a bright idea. Imagine someone sitting on a branch, sawing away between themselves and the trunk of the tree. . . Best, --- Les Bell [http://www.lesbell.com.au] Tel: +61 2 9451 1144

1 0

Recent Java OpenJDK RPMs
by Mathieu Baudier 28 Dec '09

28 Dec '09

Hello, I have quite a few issues with the default OpenJdk package on CentOS 5.4 x86_64 (e.g. crash of Eclipse [1], and now excessive permgen memory requirement causing the JVM to freeze and requiring a kill -9). These issues do not appear with a local build of the latest stable IcedTea [2], so I am considering using a more recent version of the JVM (I am not running Red Hat certified Java apps). Does anyone know of ongoing efforts to provide recent versions of the JDK as (S)RPMs? I found some in CentOS Testing [3] but they date back from July 2008 and are b09 whereas current is b16. Thanks in advance for any hints! Cheers, Mathieu [1] http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=401 [2] http://icedtea.classpath.org/wiki/RhelBuildInstructions [3] http://dev.centos.org/centos/5/testing/x86_64/RPMS/

2 1

environment-modules
by m.roth＠5-cent.us 27 Dec '09

27 Dec '09

We've got a developer here who needs to use both java and openjdk. I was giving her sudo for alternatives, but my manager would prefer that I look into environment-modules. I've installed it, and I see it comes with configurations for cvs and info... but nothing for java, and the man pages doesn't seem to offer info on creating one. Does anyone have a pointer to a howto, or maybe even a sample one? Thanks in advance. mark

6 10

SFTP - stalled - on large files
by Sean Carolan 27 Dec '09

27 Dec '09

I have an SSH server that was set up for a client, and every time we try to upload large files via SFTP or scp, the transfers speed quickly slows to zero and gives a - stalled - status message, then disconnects. Here is an example: ftp> put iTunesSetup.exe iTunesSetup.exe Uploading iTunesSetup.exe to /home/scarolan/iTunesSetup.exe iTunesSetup.exe 0% 704KB 0.0KB/s - stalled -debug1: channel 0: free: client-session, nchannels 1 Read from remote host ftp.authoria.net: Connection reset by peer debug1: Transferred: stdin 0, stdout 0, stderr 66 bytes in 203.9 seconds debug1: Bytes per second: stdin 0.0, stdout 0.0, stderr 0.3 debug1: Exit status -1 Connection closed I have no idea why this is happening. Can anyone point me in the right direction?

7 13

CentOS 5.4 Upgrade installation failure
by Edward Diener 26 Dec '09

26 Dec '09

CentOS 5.3 has been running fairly good except for a slow ethernet connection so I thought I would upgrade to CentOS 5.4 to see if that improved things. I had previously changed fstab and menu.lst to use UUID instead of LABEL in order to insulate myself from partition label changes I wanted to make. This worked fine in CentOS 5.3. When I attempted to upgrade from 5.3 to 5.4 using the installation disk and telling it to upgrade rather than do a new install, the installation correctly found my root partition as /dev/sdb8. When I proceeded with the upgrade I received the error: "Error mounting device UUID=cee298a0-9c47-4a3a-ac84-23db4d20edd5 as /. No such file or directory. This most likely means the partition has not been formatted." But of course it has been formatted and is my / partition running CentOS 5.3. Does anyone know how to fix this to get CentOS 5.3 upgraded ? Do I have to use LABEL in fstab and menu.lst for my partitions, or perhaps just for my root partition ? Any other ideas why this is failing ?

3 4

rhn_register
by Timothy Murphy 26 Dec '09

26 Dec '09

Is this available on CentOS systems? If so, what advantage does running it provide? -- Timothy Murphy e-mail: gayleard /at/ eircom.net tel: +353-86-2336090, +353-1-2842366 s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland

3 3

Missing virtio-win in CentOS 5.4
by Sebastian Marten 26 Dec '09

26 Dec '09

Hello, I Installed 5.4 on a test system to use KVM, but i didn't find the "virtio-win" package with the Windows drivers. -> http://www.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5.4/html/Virtuali… Is this a CentOS or Upstream Problem? Regards, Sebastian

6 5

I had a 5.4 installation crash and generate a log file - where do I send it?
by Jeff Silverman 26 Dec '09

26 Dec '09

People, While installing 5.4, I ran into an unhandled exception. It generated a log file, which I saved successfully. Unfortunately, I neglected to write down where to send the log file. Where does it go? Thank you Jeff Jeff Silverman | Network Support Engineer D 206.272-6465 F 206.272-5541 www.f5.com<http://www.f5.com> [file:///C:\Documents%20and%20Settings\silverman\Application%20Data\Microsoft\Signatures\f5_logo_2009.gif]

3 2

ip range cidr calculator
by Frank Cox 25 Dec '09

25 Dec '09

I found a command-line program that did this once before, used it for a while and then forgot about it until right now and I'll be damned if I can find it again. A command line IP calculator that takes an address range and give it back in cidr format. I found an online one that does this here: http://www.ipaddresslocation.org/subnet-mask-calculator.php But I would prefer to have the commandline one back again. Does anyone know what it's called and where it can be found? -- MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com

3 5

Re: [CentOS] attack
by Manu Verhaegen 25 Dec '09

25 Dec '09

Hi, We have plesk running, i have running logwatch and i have found a IP adress. I have add it in the IP table to block it then the attack is solved. We see a lot of outgouing emails a php script is used for sending many emails possible stored in the database. I have use the following command grep 'ipadres' /var/www/vhosts/*/statistics/logs/access_log grep 'ipadres' /var/log/httpd/access.log it do not find any record. Regards, Manu Verhaegen -----Oorspronkelijk bericht----- Van: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] Namens Pete Verzonden: donderdag 24 december 2009 12:45 Aan: CentOS mailing list Onderwerp: Re: [CentOS] attack On Thu, 2009-12-24 at 11:31 +0000, Manu Verhaegen wrote: > Hi, > > My server is under attack allows the attacker to abuse of a php script of a vhost. How can I find what is the script. > > Regards, > maverh Hi Maverh, I know this may sound like a silly question but how do you know your server is under attack ? As others have advised, have you checked your logs on the server ? What are you running that's being attacked ? /var/log/httpd /var/log/messages Regards, Pete. _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

6 5

questions relate to "sar"
by mcclnx mcc 25 Dec '09

25 Dec '09

We have CENTOS 5.3 on DELL server. I tried to use "sar -b" or "sar -u" and it only show report starting on 12:00 A.M. my questions are: 1. for "sar -u" or "sar -b" how can I generate two or three days ago report? 2. how to generate daily report from "sa2 " peocess? Thanks. ___________________________________________________ 您的生活即時通－溝通、娛樂、生活、工作一次搞定！ http://messenger.yahoo.com.tw/

3 2

About liveCd installation...
by Tolun ARDAHANLI 25 Dec '09

25 Dec '09

Hi List; I didn't found the installation from Centos5.4 LiveCD. Does not have any installation script inside this distribution? or How can I start to install LiveCd to HDD? Thanks a lot... Sincerely, Tolun ARDAHANLI Computer Engineer web: www.ardahanli.net E-mail: tolun(a)ardahanli.net Icq:326600

2 1

SOLVED -Re: OT: How can I tell if a web site is now blocking IPs from my country?
by Lanny Marcus 25 Dec '09

25 Dec '09

On Sun, Dec 6, 2009 at 4:22 PM, Lanny Marcus <lmmailinglists(a)gmail.com> wrote: > I have always been able to browse, without any problems, > http://www.mobile-review.com/index-en.shtml but for the past 2 or 3 > days, Mozilla Firefox just hangs "connecting to ...." How can I tell > if they have started blocking IP addresses from Colombia? <snip> After using the traceroute servers, I was pretty sure this was a connectivity problem. There seemed to be a problem with a router in Russia (the web site is in Moscow). I reported the problem to a man at mobile-review.com and the problem went away. :-) Lanny -------------------------------------- Magazine subscriptions Largest discount Credit/Debit Card Check Pay Pal http://lowcostmagazines.com/

1 0

kvm-shell
by Michael Kress 25 Dec '09

25 Dec '09

Hi, I don't know if that already exists somewhere ... I've written it for me and wanted to share it with you. It's minimal kvm shell for end users - it allows them to start/stop/reboot their own kvm guests. http://www.michael-kress.de/2009/12/kvm-shell/ kvm-shell should run on all platforms. Have fun. Regards Michael -- Michael Kress, kress(a)hal.saar.de

1 0

[OT] Urgent request
by tdukes＠sc.rr.com 24 Dec '09

24 Dec '09

Help, Our server at work is down. The video memory is out. Its an old IBM PC300PL, 6892-12U, running SCO. If anyone happens to a stick of this type memory and would be willing to sell it, please let me know. Below are the requirements for the video memory: The video memory interface is controlled by an S3 TRIO 3D graphics controller. The amount of SGRAM shipped with the video subsystem is 4MB in the PC 300PL computers, and 2MB in the PC 300GL computers. The video memory module used in the PC 300PL (Types 6862 and 6892) is 2 MB 512K X32, with 100MHz SGRAM. The video memory module used in the PC 300GL (Types 6275 and 6285) is 2 MB 256K X32, with 100MHz SGRAM. The PC 300GL (Types 6275 and 6285) can be upgraded from 2 MB SGRAM to 4 MB SGRAM with a 2 MB SGRAM SODIMM. The SODIMM can be plugged into the SODIMM socket on the system board. I know, this machine should have been scraped a long time ago. TIA

16 25

Re: [CentOS] attack
by Manu Verhaegen 24 Dec '09

24 Dec '09

Hi, i ame checking this thanks, Manu -----Oorspronkelijk bericht----- Van: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] Namens Kai Schaetzl Verzonden: donderdag 24 december 2009 15:32 Aan: centos(a)centos.org Onderwerp: Re: [CentOS] attack Obviously, if you are running several vhosts and plesk you likely have other logs to check. Also, one can usually see the origin of the mail injection in the maillog (e.g. complaints about setting to an unsafe sender) or in the outgoing messages. At runtime you can see the connects with full URLs on the apache status page. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

2 1

Inquiry:yum?
by hadi motamedi 24 Dec '09

24 Dec '09

Dear All I want to add "yum" to my CentOS 5.2 so I downloaded the rpm package from the www.pbone.net . But I didn't have success in installing it so please let me know if there is another way to accomplish this job ? Thank you in advance

12 31

Re: [CentOS] attack
by Manu Verhaegen 24 Dec '09

24 Dec '09

Hi, i have Check my tmp directory and subdirectorys for std, udp.pl no file exist. Also i have check /etc/passwd and /etc/shadow for unusual users. regards -----Oorspronkelijk bericht----- Van: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] Namens Thomas Dukes Verzonden: donderdag 24 december 2009 13:08 Aan: 'CentOS mailing list' Onderwerp: Re: [CentOS] attack > -----Original Message----- > From: centos-bounces(a)centos.org > [mailto:centos-bounces@centos.org] On Behalf Of Manu Verhaegen > Sent: Thursday, December 24, 2009 7:04 AM > To: CentOS mailing list > Subject: Re: [CentOS] attack > > at the moment everiting is solved i have block the IP adress > but i d'ont have found the script > So you are the attacker. Happened to me a couple weeks ago. Check your tmp directory and subdirectory for std, udp.pl. Also check /etc/passwd and /etc/shadow for unusual users. Should be at the very bottom of those files. _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

2 1

Re: [CentOS] attack
by david＠pnyet.web.id 24 Dec '09

24 Dec '09

Triying find to what are users running on spacific command, you should using top or ps or netstat please read the manual how to use it. After all and you get some info unpluge your server from internet, see what log says. ------Original Message------ From: Manu Verhaegen Sender: centos-bounces(a)centos.org To: centos(a)centos.org ReplyTo: CentOS mailing list Subject: [CentOS] attack Sent: Dec 24, 2009 6:31 PM Hi, My server is under attack allows the attacker to abuse of a php script of a vhost. How can I find what is the script. Regards, maverh _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos Warm regards, David --------------------- ./nobody

1 0

Re: [CentOS] attack
by Manu Verhaegen 24 Dec '09

24 Dec '09

at the moment everiting is solved i have block the IP adress but i d'ont have found the script >----- Oorspronkelijk bericht ----- >Van : david(a)pnyet.web.id [mailto:david@pnyet.web.id] >Verzonden : donderdag , december 24, 2009 01:07 PM >Aan : 'CentOS mailing list' >Onderwerp : Re: [CentOS] attack > >Triying find to what are users running on spacific command, you should using top or ps or netstat please read the manual how to use it. After all and you get some info unpluge your server from internet, see what log says. > >------Original Message------ >From: Manu Verhaegen >Sender: centos-bounces(a)centos.org >To: centos(a)centos.org >ReplyTo: CentOS mailing list >Subject: [CentOS] attack >Sent: Dec 24, 2009 6:31 PM > >Hi, > >My server is under attack allows the attacker to abuse of a php script of a vhost. How can I find what is the script. > >Regards, > maverh > > > > > > >_______________________________________________ >CentOS mailing list >CentOS(a)centos.org >http://lists.centos.org/mailman/listinfo/centos > > >Warm regards, >David >--------------------- >./nobody >_______________________________________________ >CentOS mailing list >CentOS(a)centos.org >http://lists.centos.org/mailman/listinfo/centos > >

2 1

attack
by Manu Verhaegen 24 Dec '09

24 Dec '09

Hi, My server is under attack allows the attacker to abuse of a php script of a vhost. How can I find what is the script. Regards, maverh

4 3

partitioning order and IO performance
by Carlos Santana 24 Dec '09

24 Dec '09

Hi, Does mount point specification while partitioning (order in which I specify /, /boot, swap etc..) affect performance? I am not sure about the syntax, but I guess one can also specify address/block range while partitioning. Does it affect IO performance? Probably a stupid question, but just curious.. Any insights? Thanks, CS.

7 11

OT:Which filesystem to use with large files
by carlopmart 23 Dec '09

23 Dec '09

Hi all, Recently I have installed a centOS 5.4 server to use as a home NAS server. I need to use large files (8GB minimum) inside of it to serve via iSCSI services. Which filesystem do you recommends me to reach maximum performance: xfs, ext3, ext4, gfs2 ....?? Thanks. -- CL Martinez carlopmart {at} gmail {d0t} com

4 9

donations
by Jerry Geis 23 Dec '09

23 Dec '09

The donation page does not seem up to date: *Monetary* CentOS is currently reviewing our cash donation program. If you are looking to make a cash dontation to the CentOS Project, please check back here after August 15th, 2009. I sent an email to the webmaster but did not get a reply. I thought I would post. Anything new on this? Thanks, Jerry

2 1

/dev/video* permissions
by Boris Epstein 23 Dec '09

23 Dec '09

Hi all, Does anybody know where those permissions are controlled? I've looked in /etc/udev and everywhere else I could think of and thus far I have seen not a hint... Thanks in advance for all your help. Boris.

1 0

fully automatic installation FAI?
by David Mehler 23 Dec '09

23 Dec '09

Hello, Is anyone running a software package called FAI for Fully Automatic Installation on a CentOS server? I was wondering if there were any issues to running it? Thanks. Dave.

2 1

CentOS 5 and Fedora Core
by Matt 23 Dec '09

23 Dec '09

If memory serves me correctly I was told CentOS 4.x was based on Fedora Core 3. So when finding a rpm I always looked for one for Fedora Core 3 and then it seemed to install ok on CentOS 4. Is CentOS 5 the same way and if so what Core is it based on? Matt

5 4

eME627-5082 laptop and Linux?
by Scott Ehrlich 23 Dec '09

23 Dec '09

Anyone have experience with this laptop running C5 5.4 32 or 64-bit? Any known problems/issues? Thanks. Scott

1 0

iptables ... *BSD pf ... pfSense
by Götz Reinicke - IT Koordinator 23 Dec '09

23 Dec '09

Hi, I followed the "Optimizing CentOS for gigabit firewall" posting and as some posters wrote pf is soo sooo ssooooo mutch faster, I was thinking to give it a try. But I'm not familier to BSD so I was looking for some tools and found "pfsense" http://www.pfsense.org/ "pfSense is a free, open source customized distribution of FreeBSD tailored for use as a firewall and router" Has any of the firewall guys on the list ever tested this distri? What do you think? Right now we run a iptables Shorewall system and had no problems so far, but having a "managed" firewall distri which rocks whould be an alternative. Cheers, Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzende des Aufsichtsrats: Prof. Dr. Claudia Hübner Staatsrätin für Demographischen Wandel und für Senioren im Staatsministerium Geschäftsführer: Prof. Thomas Schadt

4 3

advanced routing, 2isp
by David Hláčik 23 Dec '09

23 Dec '09

Guys, please I have no luck with this. I have 2 ISPS. I have working configuration with ip route a 2 routing tables in a way, that matching local subnet uses second provider while all the others are using the first one - main. The main problem I am having is, that I am unable to reach my router via public ip address of that second ISP. This is my default routing table [root@sx1 cron.hourly]# ip route show table main 194.228.196.39 dev ppp0 proto kernel scope link src 90.178.76.117 10.123.50.101 dev ppp2 proto kernel scope link src 10.123.50.1 10.123.50.100 dev ppp1 proto kernel scope link src 10.123.50.1 213.194.242.0/24 dev eth1 proto kernel scope link src 213.194.242.198 10.123.20.0/24 dev eth0 proto kernel scope link src 10.123.20.1 10.123.10.0/24 dev eth0 proto kernel scope link src 10.123.10.11 10.123.11.0/24 dev eth0.8 proto kernel scope link src 10.123.11.1 10.123.42.0/24 dev eth0.5 proto kernel scope link src 10.123.42.1 10.123.123.0/24 dev eth0.7 proto kernel scope link src 10.123.123.1 10.123.40.0/24 dev eth0.4 proto kernel scope link src 10.123.40.1 10.123.30.0/24 dev eth0 proto kernel scope link src 10.123.30.1 10.123.44.0/24 dev eth0.6 proto kernel scope link src 10.123.44.1 169.254.0.0/16 dev eth0.8 scope link default via 213.194.242.1 dev eth1 As you can see , my default provider has gateway 213.192.252.1 , connected via eth1 . This works fine for me. Second configuration is ip rule based, when subnet 10.123.123.0/24 goes to routing table adsl [root@sx1 cron.hourly]# ip rule show 0: from all lookup 255 32764: from all fwmark 0x1 lookup adsl-vpn 32765: from 10.123.123.0/24 lookup adsl 32766: from all lookup main 32767: from all lookup default [root@sx1 cron.hourly]# ip route show table adsl 194.228.196.39 dev ppp0 scope link src 90.178.76.117 10.123.123.0/24 dev eth0.7 scope link src 10.123.123.1 default via 194.228.196.39 dev ppp0 As you can see in this case, all trafic goes via ppp0 (my second internet provider connected via ppp0 - adsl ppoe). This works fine. What I want to achieve is, now being able to ping /access/whatever to my server via second public IP address of my adsl provider (90.178.76.117). To achieve this i have added iptables rule, which marks all packets comming via ppp0 (iptables -t mangle -A PREROUTING -i ppp0 -j MARK --set-mark 0x1). And created another routing table named adsl-vpn [root@sx1 cron.hourly]# ip route show table adsl-vpn 194.228.196.39 dev ppp0 scope link src 90.178.76.117 10.123.10.0/24 dev eth0 scope link src 10.123.10.11 default via 194.228.196.39 dev ppp0 Now i have added ip rule, which for all packets marked as 1 , which are the ones which came trough ppp0 = my second ISP, uses table adsl-vpn [root@sx1 cron.hourly]# ip rule show 0: from all lookup 255 32764: from all fwmark 0x1 lookup adsl-vpn <--- this one 32765: from 10.123.123.0/24 lookup adsl 32766: from all lookup main 32767: from all lookup default Well, now I should be able definitely to ping my server from outside, but it does not works Pinging from windows machine in outside world : C:\Users\boss>ping 90.178.76.117 Pinging 90.178.76.117 with 32 bytes of data: Request timed out. Request timed out. Request timed out. Ping statistics for 90.178.76.117: Packets: Sent = 3, Received = 0, Lost = 3 (100% loss), If i will tcpdump my ppp0 interface on my router I see the ICMP echo requests are comming [root@sx1 cron.hourly]# tcpdump -i ppp0 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on ppp0, link-type LINUX_SLL (Linux cooked), capture size 96 bytes 09:08:27.743789 IP adsl-dyn118.78-98-105.t-com.sk > gw2.cz.polarion.com: ICMP echo request, id 1, seq 72, length 40 But, echo responses from my server NOT, instead of that, responses are comming out of eth1 interface , which is my first ISP! [root@sx1 cron.hourly]# tcpdump -i eth1 |grep ICMP tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth1, link-type EN10MB (Ethernet), capture size 96 bytes 09:09:30.451706 IP gw2.cz.polarion.com > adsl-dyn118.78-98-105.t-com.sk: ICMP echo reply, id 1, seq 73, length 40 09:09:35.409704 IP gw2.cz.polarion.com > adsl-dyn118.78-98-105.t-com.sk: ICMP echo reply, id 1, seq 74, length 40 This means that either mange is not working or ip rule is not working . Please help, David

1 0

iptables -m connlimit
by Helmut Drodofsky 23 Dec '09

23 Dec '09

Hi, to the use of connlimit, I have found http://lists.centos.org/pipermail/centos/2008-June/059656.html Is there something new with centos 5.3 or 5.4? Helmut

1 0

SOLVED - Re: Frustrations with MySQL loss, tcpdump, netstat, etc
by Slack-Moehrle 22 Dec '09

22 Dec '09

Hi Guys, OK, I figured out the problem, It would seem that Comcast spelling my DNS entry wrong would do it! I have done this a zillion times, I was totally stumped as to what I would be missing this time. Thanks everyone for their help. -Jason ----- Original Message ----- From: "Kai Schaetzl" <maillists(a)conactive.com> To: centos(a)centos.org Sent: Tuesday, December 22, 2009 9:31:19 AM Subject: Re: [CentOS] Frustrations with MySQL loss, tcpdump, netstat, etc MySQL is *not* listening on TCP 3306 since *long* unless you tell it to in the my.cf. It uses a local Unix socket by default. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

NMS Opinions
by Joseph L. Casale 22 Dec '09

22 Dec '09

A recent post that mentioned Zabbix inspired me to have a look at them again while I was waiting on something as it’s been a while since I looked at them. Currently, I was using Nagios but had to start using Munin to add some functionality I needed and don’t want to continue down this road of supporting umpteen different packages. Between Zabbix, Pandora and HyperIQ, what would anyone familiar with these have to say. HyperIQ looks rather crippled for the FOSS version, Pandora’s website seems to be down☺ Maybe they a monitoring solution, heh… Any opinions appreciated! jlc

6 10

IPTABLES --hitcount maximum value
by James B. Byrne 22 Dec '09

22 Dec '09

In-Reply-To: <4B30F618.6060809(a)kinzesberg.de> On: Tue, 22 Dec 2009 17:38:48 +0100, "Dirk H. Schulz" <dirk.schulz(a)kinzesberg.de> wrote: > That is a new "phenomenon" I also ran into. You now have to > adjust memory values. > > I have added to my /etc/modprobe.conf > "options ipt_recent ipt_pkt_list_tot=75" > Now I can use hitcount values of 50 (did not test if the above > is sufficient for higher values). I found this on the net so I deduce that you would be safe up to a hitcount value of 75. > [PATCH] netfilter: ipt_recent: sanity check hit count > From: Daniel Hokka Zakrisson > Date: Sat Mar 15 2008 - 10:11:05 EST > > If a rule using ipt_recent is created with a hit count greater > than ip_pkt_list_tot, the rule will never match as it cannot > keep track of enough timestamps. This patch makes ipt_recent > refuse to create such rules. > > With ip_pkt_list_tot's default value of 20, . . . Thanks for the lead. Regards, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Frustrations with MySQL loss, tcpdump, netstat, etc
by ML 22 Dec '09

22 Dec '09

Hi All, Hi All, MySQL 5.0.77 on CentOS 5.4 MySQL is running, my Wordpress stuff is working, but I cannot connect to the server from my house. This server is in my house, however, but on a public IP, behind a firewall, etc. I checked my hardware firewall (a dedicated UnTangle system) and that is successfully allowing the passage. I know this because the firewall shows: 2009-12-22 6:29:41 am passed <my IP>:35606 <server IP>:3306 I checked the firewall (system-config-securitylevel-tui) on the server and that has 3306:tcp allowed. When I try to connect I get an error (4) which when I google says: "Interrupted System call" I have tried using the MySQL Workbench and other client software. If I look in /var/log/mysqld.log I dont see anything but the fact the server started. I tried stopping mysql with /etc/init.d/mysqld stop Then starting with mysqld_safe --init-file=/tmp/code.txt & Where code.txt contains: UPDATE mysql.user SET Password=PASSWORD('mypassword') WHERE User='root'; GRANT ALL ON mysql.* to 'root'@'127.0.0.1'; GRANT ALL ON mysql.* TO 'root'@'localhost'; GRANT ALL ON mysql.* TO 'root'@'my home IP'; FLUSH PRIVILEGES; commit; and I still cannot connect. But the database starts and this code executes because If I go to the console and run /usr/bin/mysql -u root -p and use this password from the update statement that password gets me in. So, on my server I run tcpdump host <my ip> and I dont think I see anything where 3306 is coming through. if I run a test MySQL connection from the MySQL Workbench and they run netstat on my server and I dont see a entry where 3306 is used in what netstat is dumping. What am I doing wrong? What can I check for? I am stumped! -Jason

5 7

Re: [CentOS] Frustrations with MySQL loss, tcpdump, netstat, etc
by ML 22 Dec '09

22 Dec '09

Rick, > have you tried to telnet to port 3306 of the machine where the mysql > server is located, from your home machine? if so, what do you get? > If you're successful you'll get a connect bit that includes a string > that will show your mysql server version number. if you don't have > mysql access you'll likely see a mysqld reject of some nature. if > there's a network issue you'll just get a hang or you could get an > unreachable error. Yup, it works: $ telnet 173.13.167.209 3306 Trying 173.13.167.209... Connected to mail.mailnewsrss.com. Escape character is '^]'. 4 5.0.77aWqQ!OMq,slG]|xft5L[fConnection closed by foreign host.

2 1

IPTABLES --hitcount maximum value
by James B. Byrne 22 Dec '09

22 Dec '09

Is the maximum permitted value for --hitcount documented anywhere? I reliably get a iptables-restore error when I specify a hitcount value greater than 20 but I cannot find any mention of there being a maximum value. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

CENTOS 5.3 "kernel segfault at ..."
by mcclnx mcc 22 Dec '09

22 Dec '09

We have CENTOS 5.3 on DELL server. Recently I saw /var/log/messages have following pop-up: Dec 19 11:31:45 ORA2 kernel: oracle[18900]: segfault at fffffffffffffff0 rip 0000000007d54183 rsp 00007fff8eff2c60 error 4 Dec 19 11:31:49 ORA2 kernel: oracle[18902]: segfault at fffffffffffffff0 rip 0000000007d54183 rsp 00007ffff5e12a80 error 4 Dec 19 11:31:53 ORA2 kernel: oracle[18904]: segfault at fffffffffffffff0 rip 0000000007d54183 rsp 00007fff228684d0 error 4 Anyone know why? Thanks. ___________________________________________________ 您的生活即時通－溝通、娛樂、生活、工作一次搞定！ http://messenger.yahoo.com.tw/

3 2

routing with 2 ISPs
by David Hláčik 22 Dec '09

22 Dec '09

Hello guys, Sorry to bothering you. I had a small network with one ISP and firewall. eth1 -> Is connected to my ISP eth0 + eth0.1 , eth0.2 and etc are my local networks. All my network accesses internet via eth1. My routing table looks like the following : 213.194.242.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1 10.123.20.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 10.123.10.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 10.123.11.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0.8 10.123.42.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0.5 10.123.123.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0.7 10.123.40.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0.4 10.123.30.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 10.123.44.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0.6 169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0.8 0.0.0.0 213.194.242.1 0.0.0.0 UG 0 0 0 eth1 Recently I have added secon provider via ADSL. ADSL modem is connected via eth0.8 . Using adsl-setup I have created ppp interface ppp0. Now I want to achieve the following : Computers from local network range 10.123.123.0/24 (eth0.7) should access internet using my second internet provider via ppp0. I believe that for that I need to use advanced networking and iproute package. I will add the second routing table named "adsl" and configure routing via ppp0 there. Together with that i need to set in iptables , nat table to masquerade all ips going out via ppp0. I believe I need to use ip command for this. And the finally my questions are : 1) Is there a good tutorial / howto for using iproute on the internet, except of the LARTC.org 2) Can i utilize by tools of CentOS, to have my configuration (with second routing table, using ip ) somehow stored - to be permanent when I will do machine restart? I mean there are networking-scripts /etc/sysconfing/network-scripts which can handle, IP assigment, virtual LANS, aliases even static routes. Can they handle advanced routing as well? Thank you milion times. David Hlacik

3 4

xm mem-set on an F11 xen guest
by Scot P. Floess 22 Dec '09

22 Dec '09

I just tried to change the memory for my F11 xen guest from 512 to 1024. After executing: xm mem-set workstation 1024 xm list shows the memory still being 512. Anyone else see this behavior before? I tried other values as well - but the memory is still what it was when I created the VM... I'm running CentOS 5.4 on an i386... Scot P. Floess 27 Lake Royale Louisburg, NC 27549 252-478-8087 (Home) 919-890-8117 (Work) Chief Architect JPlate http://sourceforge.net/projects/jplate Chief Architect JavaPIM http://sourceforge.net/projects/javapim Architect Keros http://sourceforge.net/projects/keros

2 2

Munin CGI Graphs
by Joseph L. Casale 21 Dec '09

21 Dec '09

Anyone here running Munin w/ the CGI graphs? I must have missed something in the munin wiki as its creating the correct html, yet the only errors I get are apache suggesting it can't find the files for the png's? The cgi script has all the perl modules it requires installed. Thanks, jlc

3 4

scp copy remote files does NOT copy link?
by mcclnx mcc 21 Dec '09

21 Dec '09

We have CENTOS 5.3 on DELL servers. I tried to us following command to copy remote files system to local: scp -rp oracle@ORA2:/home/app/oracle/10.2 . After SCP finish copy, I found some files on source file system using "link" but on target file systems it change to "physical file". Does there has way scp not change "link" setup? Thanks. ___________________________________________________ 您的生活即時通－溝通、娛樂、生活、工作一次搞定！ http://messenger.yahoo.com.tw/

8 10

What determines default kernel after update?
by Les Mikesell 21 Dec '09

21 Dec '09

I have a 32-bit machine with 8 gigs RAM and was running the PAE kernel, but after the last update noticed that grub was set to default to the non-PAE version although both were installed. Does anyone know how boot default is supposed to be determined? -- Les Mikesell lesmikesell(a)gmail.com

2 3

disk at 101% - but it isn't
by Alan McKay 21 Dec '09

21 Dec '09

Hey folks, Is there any way to get this to report the proper values again? The disk did fill up but we removed a good 60G of data but it still shows full [root@price-two:/]# df -h Filesystem Size Used Avail Use% Mounted on /dev/sda3 131G -64Z 131G 101% / /dev/sda1 99M 9.7M 84M 11% /boot /dev/sdb1 269G 60G 196G 24% /data none 4.0G 0 4.0G 0% /dev/shm -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of "In Defense of Food"

2 1

minimal set of packages for gnome desktop
by Janez Kosmrlj 21 Dec '09

21 Dec '09

Does anybody know what is the minimal set of packages, you have to install, to make gnome desktop work.

2 1

Cannot see samba in win Neighborhood
by Matias Morawicki 21 Dec '09

21 Dec '09

Hello u all, sorry to bring this issue back again, but I´ve been searching and trying all the advices suggested in previous posts and I still can´t see the samba server in the win network neighborhood. I can see the samba shares from win via net view \\servername but if I issue a plain "net view" samba won´t show up. only the win machines, the same i can see on the Neighborhood... and when I select local master = no Samba would stay without master! I issue smbclient -L servername -U% and the master section remains empty. It´s like samba is not being able to "talk" to the rest of the workgroup. (of course they are all in the same workgroup) I´m using "wins support = yes" and I´ve set the DHCP to set the clients to use the samba server as wins server.I´ve checked the win clients and they get the correct conf. I´ve tried stopping iptables, disabling Selinux, different smb.conf from the simple examples of t first chapters of samba by example, to plenty of options... that´s why I´m not including my smb.conf, because I´ve tried many variations, always with the same results. I tried a basic samba configuration in a ubuntu server in another box just to test, anf the win clients were able to see it in the neigbohood... so I guess the issue is on my Centos box. I tried the same smb.conf from that working ubuntu-samba and didn´t make it on the Centos... Btw, the server is a Centos 5.3, with samba 3.2.15 (it also happened with the default samba, so I´ve upgraded just in case...) I hope someone can point me some directions... thanks in advance!! Matias

3 2

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss