- Discuss - lists.centos.org

Screen capture in Terminal
by Robert Moskowitz 10 Dec '09

10 Dec '09

I don't see how to do it. I had to telnet into a firewall and run a trace, and I had to stop it, copy and paste to gedit, then start again, etc. I find it interesting, and sad, that there is no easy 'output to file' profile setting.

5 7

Unable to share directory via Samba?
by James Bensley 10 Dec '09

10 Dec '09

So I went to System > Administration > Server Settings > Samba and added a folder to share and initially set it to guest access to get things going. I couldn't access this one and only share on this server with guest access from either my Windows laptop (XP Pro SP3) or a Leopard server (10.5.8) so I changed the settings to use user authentication and added my local user details (this is a stand alone file server with one user and the root user running CentOS 5.4). I made sure I hadn't put the entries in iptables incorrect by stopping iptables (sudo /etc/init.d/iptables stop, which executed just fine). SELinux kept popping up so I disabled that and restarted the server also. So now with no iptables nor SELinux enabled flicking between guest and user access I still can't access the share (I have also tried authenticating as root to no avail), my Windows and Mac test machines are erroring out saying they don't have permissions to access the share (I am an administrator on both machines so its not a local permissions issue). There are no firewall restrictions between my test machines and the CentOS server as I would even get prompted for authentication so that's not a problem and my test machines work fine because I can mount smb shares on other files servers in the same subnet as the CentOS server, what's going on? Ideas are welcome! Thanks for reading... -- Regards, James ;) Pablo Picasso - "Computers are useless. They can only give you answers." - http://www.brainyquote.com/quotes/authors/p/pablo_picasso.html

4 11

Re: [CentOS] Quagga ECMP
by Cristian Carstea 10 Dec '09

10 Dec '09

yes, that's right, but i am asking here about Quagga, which is a routing software (OSPF, BGP etc.), not about kernel multipath, i mean if Quagga is compiled with Equal Cost MultiPath (ECMP), the "-enable-multipath" compile option. Can someone post here the spec file from which quagga rpm was built for CentOS? Thanks. On Thu, Dec 10, 2009 at 7:42 AM, Cristian Carstea <cris(a)crisnet.ro> wrote: > > > > Hello, > > > > does anybody know if quagga for CentOS 5.3 is compiled with > > -enable-multipath? > > I want to implement ECMP over 2 ISP. > > > You can look in the /boot/config-* files. Those are the configs that it was built with. In my 5.4 system: [root@xm-c32-001 boot]# grep -i multipath config-2.6.18-128.2.1.el5xen CONFIG_IP_ROUTE_MULTIPATH=y # CONFIG_IP_ROUTE_MULTIPATH_CACHED is not set CONFIG_MD_MULTIPATH=m CONFIG_DM_MULTIPATH=m CONFIG_DM_MULTIPATH_EMC=m CONFIG_DM_MULTIPATH_RDAC=m CONFIG_DM_MULTIPATH_HP=m

2 1

CUPS designjet 500
by Alejandro Rodriguez Luna 10 Dec '09

10 Dec '09

Hi everyone!! Does someone have configured a plotter HP designjet 500?, what driver did you use?, or what did you do? I'm using centos 5.4 ---------------------------------- Alejandro Rodriguez Luna E-mail: el_alexluna(a)yahoo.com.mx ---------------------------------- Encuentra las mejores recetas en Yahoo! Cocina. http://mx.mujer.yahoo.com/cocina/

1 0

Is lsb 3.2+ detrimental to CentOS 5.4?
by MHR 10 Dec '09

10 Dec '09

I found out today that Google Chrome is now available for Linux. However, and this is a big but: $ sudo rpm -ivh google-chrome-beta_current_x86_64.rpm Password: warning: google-chrome-beta_current_x86_64.rpm: Header V3 DSA signature: NOKEY, key ID 7fac5991 error: Failed dependencies: lsb >= 3.2 is needed by google-chrome-beta-4.0.249.30-33928.x86_64 xdg-utils is needed by google-chrome-beta-4.0.249.30-33928.x86_64 $ yum list | grep -i lsb redhat-lsb.i386 3.1-12.3.EL.el5.centos installed redhat-lsb.x86_64 3.1-12.3.EL.el5.centos installed I'm not that familiar with lsb, but from what I can find, it does not seem like it would be a good idea to install a more recent version of lsb than the official release, or am I way off base here? I can get xdg-utils easily enough, but it doesn't seem relevant if I can't use the newer lsb. So, is it possible to use lsb 3.2+ on CentOS 5.4 without breaking anything? Is there anything else I'd need to do, other than convert to Fedora (not going to happen)? Thanks. mhr

3 2

Quagga ECMP
by Cristian Carstea 10 Dec '09

10 Dec '09

Hello, does anybody know if quagga for CentOS 5.3 is compiled with -enable-multipath? I want to implement ECMP over 2 ISP. Thanks, Cristi Carstea

2 1

find latest version of rpms from a mirror
by john blair 10 Dec '09

10 Dec '09

I want to write a script to find the latest version of rpm of a given package available from a mirror for eg: http://mirror.centos.org/centos/5/os/x86_64/CentOS/ Is there any existing script that does this? Or can someone give me a general idea on how to go about this?

3 3

ntp update version
by Ron Yorston 10 Dec '09

10 Dec '09

I noticed that although I'd fetched the latest update to ntp from the mirror it wasn't being installed. It seems that the version numbers have got out of step. According to the changelog the update that was released in August should have had the version number 4.2.0.a.20040617-8.el4_7.2, whereas in CentOS it's actually 4.2.0.a.20040617-8.el4_8.2. The changelog says the latest update is 4.2.0.a.20040617-8.el4_8.1, which is what CentOS has, but that's a lower version than the August update. Ron

2 2

Linux router with CentOS
by Alvaro Schneider Guevara 10 Dec '09

10 Dec '09

Hello everybody. I'm wondering here if is it possible to setup a CentOS machine as a router for two Internet connections in a LAN. This _router_ would work as the gateway for the workstations using DHCPD. The purpose of this is to optimize the broadband "joining" both connections, and given the case, do not lose the Internet access. ¿is this possible? ¿too much complicated? Searching the Net i found something simliar: http://linux-ip.net/html/adv-multi-internet.html but, I would like to read a second opinion. Thank you very much. Cheers.

6 5

nagios 3 packages?
by Florin Andrei 10 Dec '09

10 Dec '09

So, my favorite RPM repository (EPEL) only has the ancient nagios-2.12 or so. What's the repo you use for Nagios 3? -- Florin Andrei http://florin.myip.org/

4 4

how to find last updates for Centos 5.3?
by Paul Johnson 09 Dec '09

09 Dec '09

I'm setting up a Rocks Cluster Linux system <http://www.rocksclusters.org> using Centos 5.3 as the OS. Rocks is an organizing framework for multi node systems, it tries to orchestrate kickstart installs across many systems and interaction among those many systems as a compute cluster. One problem with administering these systems is that the OS updates can break the Rocks framework. I've tried Rocks with Centos5.4, but there is some incompatability. The Rocks system is based on Centos 5.2, it tolerates 5.3, but not 5.4. The Rocks experts seem to discourage us from making any RPM package updates, but I'm adventuresome enough to think that I can at least try to make some selective updates. I wish I had access to a Centos update folder AS IT EXISTED before Centos 5.4 was released. The last update set that applied to 5.3,in other words. But I can't figure how to get that, because Centos servers just have the current updates under a folder marked 5. If I try to update against the current 5 server, it will pull in lots and lots of new RPMS from the Centos base, and I don't want that. I can't afford the risk of updating against the current Centos offerings because Rocks might not work anymore, or so I'm told by the Rocks experts. Any ideas about how to go back in time and get the last 5.3 update batch?? pj -- Paul E. Johnson Professor, Political Science 1541 Lilac Lane, Room 504 University of Kansas

8 10

Compile a kernel
by gilberto nunes 09 Dec '09

09 Dec '09

Hi buddies I attempt to compile a kernel on CentOS 5.3. The kernel version is 2.6.31.6. All make procedure is running ok. I can generate initrd image with no problem too. But, when I try booting this kernel, I get Kernel panic: Setting up other filesystems. Setting up new root fs setuproot: moving /dev failed: No such file or directory no fstab.sys, mounting internal defaults setuproot: error mounting /proc: No such file or directory setuproot: error mounting /sys: No such file or directory Switching to new root and running init. unmounting old /dev unmounting old /proc unmounting old /sys switchroot: mount failed: No such file or directory [ 1.732772] init used greatest stack depth: 5168 bytes left [ 1.733029] Kernel panic - not syncing: Attempted to kill init! [ 1.733291] Pid: 1, comm: init Not tainted 2.6.31.6 #2 I don't know what is going on here!! Thanks if somebody will be able to help me! -- *Gilberto Nunes Ferreira* *TI* *Selbetti Gestão de Documentos* *Telefone: +55 (47) 3441-6004* *Celular: +55 (47) 8861-6672* /"Bendita a nação cujo Deus é o SENHOR!"/ *99* <><

6 12

Kerio Mail Server - anyone?
by Alan McKay 09 Dec '09

09 Dec '09

Hey guys, I'm trying to install the latest Kerio and it seems to want an older version of libstdc++ which I cannot find anywhere in RPM land (sorry, but I just know gmail is going to mangle this on its way out ) [root@localhost ~]# rpm --install /home/amckay/kerio-kms-6.7.3-7892.linux.i386.rpm error: Failed dependencies: libstdc++.so.5 is needed by kerio-kms-6.7.3-7892.linux.i386 libstdc++.so.5(CXXABI_1.2) is needed by kerio-kms-6.7.3-7892.linux.i386 libstdc++.so.5(GLIBCPP_3.2) is needed by kerio-kms-6.7.3-7892.linux.i386 libstdc++.so.5(GLIBCPP_3.2.2) is needed by kerio-kms-6.7.3-7892.linux.i386 [root@localhost ~]# yum --enablerepo=* search libstdc++ Loaded plugins: fastestmirror, priorities Loading mirror speeds from cached hostfile * addons: centos.mirror.iweb.ca * base: centos.mirror.iweb.ca * centosplus: centos.mirror.iweb.ca * epel: serverbeach1.fedoraproject.org * epel-debuginfo: mirror.ipnode.info * epel-source: serverbeach1.fedoraproject.org * epel-testing: serverbeach1.fedoraproject.org * epel-testing-debuginfo: mirror.ipnode.info * epel-testing-source: serverbeach1.fedoraproject.org * extras: centos.mirror.iweb.ca * updates: centos.mirror.iweb.ca addons | 951 B 00:00 base | 2.1 kB 00:00 centosplus | 1.9 kB 00:00 centosplus/primary_db | 98 kB 00:00 dag | 1.1 kB 00:00 epel | 3.4 kB 00:00 epel-debuginfo | 2.6 kB 00:00 epel-debuginfo/primary_db | 366 kB 00:00 epel-source | 2.8 kB 00:00 epel-source/primary_db | 693 kB 00:00 epel-testing | 3.4 kB 00:00 epel-testing/primary_db | 239 kB 00:00 epel-testing-debuginfo | 2.6 kB 00:00 epel-testing-debuginfo/primary_db | 28 kB 00:00 epel-testing-source | 2.8 kB 00:00 epel-testing-source/primary_db | 64 kB 00:00 extras | 1.1 kB 00:00 pgdg84 | 1.2 kB 00:00 pgdg84/primary | 38 kB 00:00 http://192.168.0.9/ks/postgres/8.4.1/rhel-5-x86_64/repodata/primary.xml.gz: [Errno -3] Error performing checksum Trying other mirror. updates | 1.9 kB 00:00 3381 packages excluded due to repository priority protections ==================================================== Matched: libstdc++ ==================================================== compat-libstdc++-296.i386 : Compatibility 2.96-RH standard C++ libraries compat-libstdc++-33.i386 : Compatibility standard C++ libraries compat-libstdc++-33.x86_64 : Compatibility standard C++ libraries libstdc++.i386 : GNU Standard C++ Library libstdc++.x86_64 : GNU Standard C++ Library libstdc++-devel.i386 : Header files and libraries for C++ development libstdc++-devel.x86_64 : Header files and libraries for C++ development libstdc++44-devel.i386 : Header files and libraries for C++ development libstdc++44-devel.x86_64 : Header files and libraries for C++ development [root@localhost ~]# yum -y install compat-libstdc++ libstdc++-devel Loaded plugins: fastestmirror, priorities Loading mirror speeds from cached hostfile * addons: centos.mirror.iweb.ca * base: centos.mirror.iweb.ca * epel: mirror.ipnode.info * extras: centos.mirror.iweb.ca * updates: centos.mirror.iweb.ca 3332 packages excluded due to repository priority protections Setting up Install Process No package compat-libstdc++ available. Package libstdc++-devel-4.1.2-46.el5_4.1.x86_64 already installed and latest version Resolving Dependencies --> Running transaction check ---> Package libstdc++-devel.i386 0:4.1.2-46.el5_4.1 set to be updated --> Finished Dependency Resolution Dependencies Resolved ============================================================================================================================ Package Arch Version Repository Size ============================================================================================================================ Installing: libstdc++-devel i386 4.1.2-46.el5_4.1 updates 2.8 M Transaction Summary ============================================================================================================================ Install 1 Package(s) Update 0 Package(s) Remove 0 Package(s) Total download size: 2.8 M Downloading Packages: libstdc++-devel-4.1.2-46.el5_4.1.i386.rpm | 2.8 MB 00:03 Running rpm_check_debug Running Transaction Test Finished Transaction Test Transaction Test Succeeded Running Transaction Installing : libstdc++-devel 1/1 Installed: libstdc++-devel.i386 0:4.1.2-46.el5_4.1 Complete! [root@localhost ~]# rpm --install /home/amckay/kerio-kms-6.7.3-7892.linux.i386.rpm error: Failed dependencies: libstdc++.so.5 is needed by kerio-kms-6.7.3-7892.linux.i386 libstdc++.so.5(CXXABI_1.2) is needed by kerio-kms-6.7.3-7892.linux.i386 libstdc++.so.5(GLIBCPP_3.2) is needed by kerio-kms-6.7.3-7892.linux.i386 libstdc++.so.5(GLIBCPP_3.2.2) is needed by kerio-kms-6.7.3-7892.linux.i386 [root@localhost ~]# rpm -qa | grep -i libstdc libstdc++-4.1.2-46.el5_4.1 libstdc++-4.1.2-46.el5_4.1 libstdc++-devel-4.1.2-46.el5_4.1 libstdc++-devel-4.1.2-46.el5_4.1 [root@localhost ~]# -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of "In Defense of Food"

3 4

CentOS-announce Digest, Vol 58, Issue 2
by centos-announce-request＠centos.org 09 Dec '09

09 Dec '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:1651 Moderate CentOS 3 i386 ntp - security update (Tru Huynh) 2. CESA-2009:1651 Moderate CentOS 3 x86_64 ntp - security update (Tru Huynh) 3. CESA-2009:1646 Moderate CentOS 3 i386 libtool - security update (Tru Huynh) 4. CESA-2009:1646 Moderate CentOS 3 x86_64 libtool - security update (Tru Huynh) 5. CESA-2009:1648 Moderate CentOS 4 i386 ntp - security update (Tru Huynh) 6. CESA-2009:1648 Moderate CentOS 4 x86_64 ntp - security update (Tru Huynh) 7. CESA-2009:1646 Moderate CentOS 4 i386 libtool - security update (Tru Huynh) 8. CESA-2009:1646 Moderate CentOS 4 x86_64 libtool - security update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Tue, 8 Dec 2009 23:18:02 +0100 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2009:1651 Moderate CentOS 3 i386 ntp - security update To: centos-announce(a)centos.org Message-ID: <20091208221802.GA2999(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2009:1651 ntp security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2009-1651.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/ntp-4.1.2-6.el3.i386.rpm source: updates/SRPMS/ntp-4.1.2-6.el3.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update ntp Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

Cent5 SELinux impacts on home exports when restoring from older systems are?
by Todd Denniston 09 Dec '09

09 Dec '09

I am working on moving some nfs shares from an older Linux system to CentOS5 server. some are used by the machine and its clients as $HOME (but not mounted at /home) and working directories. using selinux-policy-targeted. Are there any selinux policy additions (so restorecon keeps them each time it is ran) I should be looking to make before trying to slip the new system in under the users noses? that is besides setting to permissive, which I do not want to do. I am finding http://wiki.centos.org/HowTos/SELinux and http://www.centos.org/docs/5/html/Deployment_Guide-en-US/ch-selinux.html of mild use. Thanks for any advise/informative URLs. -- Todd Denniston Crane Division, Naval Surface Warfare Center (NSWC Crane) Harnessing the Power of Technology for the Warfighter

2 1

repo for virt-manager 0.8.0 or up
by Aclhk Aclhk 09 Dec '09

09 Dec '09

pls advise if there is any repo for i386 or 64bit. Yahoo!香港提供網上安全攻略，教你如何防範黑客! 請前往 http://hk.promo.yahoo.com/security/ 了解更多!

1 0

openpkg
by Joseph L. Casale 09 Dec '09

09 Dec '09

Anyone here using openpkg? Any thoughts about it?

2 1

Re: [CentOS] 486 custom kernel
by Tim Nelson 08 Dec '09

08 Dec '09

----- "Marko Vojinovic" <vvmarko(a)gmail.com> wrote: > On Tuesday 08 December 2009 19:54:03 Jerry Geis wrote: > > > It may be one way to do it, but that is not how xen or kvm are > > > ordinarily set up under CentOS -- qemu has (had) the hooks to > > > simulate the missing opcodes of some arch's, but at a > > > performance penalty > > > > if there is a way to "simulate" missing opcodes in the kernel - that > would > > be great also. I dont care if there is a performace hit. > > > > I am looking for a way to run the 686 centos on a 486 machine. > > I was hoping I could just recompile the kernel as 486 and any > libraries > > would not be using MMX/SSE etc... > > I am no expert on this, but have a feeling that you would basically > need to > recompile every package that does not have an .i386 rpm. > > And if you are about to recompile things, why not use gentoo or > something like > that? Gentoo? What do you have against the OP? Why subject him to such madness and unnecessary pain? :D In my recent trip through i486 land, I found that Debian seems to be the best bet for nearly all packages being natively available in i386. Also, the installation can be pruned down to a very slim ~140MB if you're careful. Tim Nelson Systems/Network Support Rockbochs Inc. (218)727-4332 x105

3 2

Any way to initiate a kickstart from shell prompt?
by Spiro Harvey 08 Dec '09

08 Dec '09

Hi all, I've set up a CentOS flash stick using the LiveCD tools, then dumping that onto flash with a persistent overlay - instructions here: http://wtf.geek.nz/?blog/2009/12/08/how-to-make-a-useful-centos-utility-fla… This gets me to a prompt in which I can do recovery stuff, but I'm curious to know if it's possible to initiate a kickstart install onto the local disks from that prompt. I've got a separate stick that appends ks= lines to boot different kickstart files, but I'd really like to have the ability to do this on the non-auto-install stick too. Is this possible? Is there a command that kicks this off? Cheers -- Spiro Harvey Knossos Networks Ltd 021-295-1923 www.knossos.net.nz

1 0

Re: [CentOS] Installing R on CentOS 5
by Brent L. Bates 08 Dec '09

08 Dec '09

Anyone thought about installing R from the Scientific Linux site? R is a standard part of SL. It might be a bit more compatible with CentOS than other sites. Just an idea. -- Brent L. Bates (UNIX Sys. Admin.) M.S. 912 Phone:(757) 865-1400, x204 NASA Langley Research Center FAX:(757) 865-8177 Hampton, Virginia 23681-0001 Email: B.L.BATES(a)larc.nasa.gov http://www.vigyan.com/~blbates/

1 0

Installing R on CentOS 5
by Diederick Stoffers 08 Dec '09

08 Dec '09

Hi, Has anyone been able to successfully install R on CentOS5.4? I am having problems with dependencies.... perl is installed. Cheers, Diederick --> Finished Dependency Resolution R-core-2.10.0-2.el5.x86_64 from R-project has depsolving problems --> Missing Dependency: perl(File::Copy::Recursive) is needed by package R-core-2.10.0-2.el5.x86_64 (R-project)

7 6

CentOS-announce Digest, Vol 58, Issue 1
by centos-announce-request＠centos.org 08 Dec '09

08 Dec '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:1625 Moderate CentOS 3 i386 expat - security update (Tru Huynh) 2. CESA-2009:1625 Moderate CentOS 3 x86_64 expat - security update (Tru Huynh) 3. CESA-2009:1625 Moderate CentOS 4 i386 expat - security update (Tru Huynh) 4. CESA-2009:1625 Moderate CentOS 4 x86_64 expat - security update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Tue, 8 Dec 2009 00:34:29 +0100 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2009:1625 Moderate CentOS 3 i386 expat - security update To: centos-announce(a)centos.org Message-ID: <20091207233429.GB12708(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2009:1625 expat security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2009-1625.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/expat-1.95.5-6.2.i386.rpm updates/i386/RPMS/expat-devel-1.95.5-6.2.i386.rpm source: updates/SRPMS/expat-1.95.5-6.2.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update expat\* Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

Mic not working with skype
by Andrew 08 Dec '09

08 Dec '09

I've just installed a beta version of skype in CentOS 5.3 and everything seems fine - the mic is working OK as I can hear it through the speakers (feedback). Problem is I can't get the mic to actually work with skype (eg with skype call testing service) - it may be that one of the many settings is incorrect - has anybody else had this problem and got any suggestions please? Andy

6 7

Does CentOS provide commerical support ?
by premrajm＠digilink.in 08 Dec '09

08 Dec '09

Hi , I wanted to know about any commercial support for centOS 5.3 like kernel customization and others from centOS community or developers. Please provide information on the same Regards, Premraj M Disclaimer : This message is proprietary to Smartlink Network Systems Limited and is intended solely for the use of the individual to whom it is addressed. It may contain privileged or confidential information and should not be circulated or used for any purpose other than for what it is intended. If you have received this message in error, please notify the originator immediately. If you are not the intended recipient, you are notified that you are strictly prohibited from using, copying, altering, or disclosing the contents of this message. Smartlink Network Systems Ltd. accepts no responsibility for loss or damage arising from the use of the information transmitted by this email including damage from virus. ______________________________________________________________________________ This email has been scrubbed for your protection by SecureMX. For more information visit http://securemx.in ______________________________________________________________________________

4 3

CentOS 5.4 x86_64 only detects 32GB RAM while Fedora x86_64 correctly lists 128GB
by Diederick Stoffers 08 Dec '09

08 Dec '09

Hi, We have a new 24-core Dell PowerEdge R905 server with 128GB's RAM. The 64 bits version of Fedora 12 lists the correct amount of 128GB, CentOS only finds 32GB (and so does Scientific Linux). I would much prefer to use CentOS (most of the software we use is specifically designed for CentOS). Does anyone know what is causing this/how to fix it? Many Thanks, Diederick

9 10

Xorg goes bonkers, bazillion NVIDIA errors...
by fred smith 08 Dec '09

08 Dec '09

on one of my Centos 5.4 boxes, a machine that's around 5 years old and has always run Centos and X, and has had the same Nvidia card in it for its entire life, I'm suddenly getting these lines in the xorg log file: (WW) NVIDIA(0): WAIT (2, 6, 0x8000, 0x00000000, 0x000003c0) (EE) NVIDIA(0): Failed to allocate clip rectangle (EE) NVIDIA(0): *** Aborting *** (EE) NVIDIA(0): Failed to allocate clip rectangle (EE) NVIDIA(0): *** Aborting *** (EE) NVIDIA(0): Failed to allocate clip rectangle (EE) NVIDIA(0): *** Aborting *** (EE) NVIDIA(0): Failed to allocate clip rectangle (EE) NVIDIA(0): *** Aborting *** (EE) NVIDIA(0): Failed to allocate clip rectangle (EE) NVIDIA(0): *** Aborting *** (EE) NVIDIA(0): Failed to allocate clip rectangle (EE) NVIDIA(0): *** Aborting *** (EE) NVIDIA(0): Failed to allocate clip rectangle (EE) NVIDIA(0): *** Aborting *** (EE) NVIDIA(0): Failed to allocate clip rectangle (EE) NVIDIA(0): *** Aborting *** followed by millions more like them. it's currently sitting mostly unused, except that it's running a Folding At Home client. it'll run for a day or a week then I'll note the screen is in powersave mode, will attempt to wake it up by moving the mouse or touching a key and nothing happens. (for purposes of this testing I've disabled the screensaver, so the screen should never shut off.) I can SOMETIMES ssh into it, if it hasn't completely died yet, and if I can, top shows that Xorg is consuming about 99% of the CPU instead of the folding at home client which should be consuming most of it. I guess it's busy spewing errors to the Xorg log file, or something. The last time I found it like this I tried to kill xorg. kill -15 wouldn't kill it so I tried kill -9, then the whole box seized up, requiring a reset. sometimes it's already unresponsive, even to ssh or ping, by the time I notice the problem. it's running an old Nvidia Geforce 4 MX400 card and the Nvidia proprietary driver NVIDIA-Linux-x86-96.43.01-pkg1.run, downloaded directly from the nvidia web site. the date on that file is Oct 2007, so that means that's the one that it has been using since then. but it's only the last 6 weeks or so it's started doing this. other than some vaguely-defined "nvidia driver problems", what may be going on here? (I can buy an nvidia conflict with the stock centos kernel, but I'd be dubious, since it's been running this driver for two years and earlier versions for 4 or 5. any such conflict would seem likely a kernel issue, to me, since it's newly exhibited.) Thanks! Fred -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- But God demonstrates his own love for us in this: While we were still sinners, Christ died for us. ------------------------------- Romans 5:8 (niv) ------------------------------

3 4

firefox-3.0.15 on CentOS 4
by Agile Aspect 07 Dec '09

07 Dec '09

Hi - I updated firefox-3.0.5 from firefox-3.0.15on CentOS 4 this weekend and now I can't start it because it has the wrong version of NSS and I can't update NSS to the correct version. Does anyone know where I can find the RPM for CentOS 4 version of firefox-3.0.5? Or how I can tell yum to install version firefox-3.0.5 instead of firefox-3.0.15? Thank you. -- Enjoy global warming while it lasts.

2 3

how to do startup scripts?
by Roland Roland 07 Dec '09

07 Dec '09

Hello, I've just finished installing Atlassian's bamboo it comes with two ways to start it up one through a bash shell script bamboo.sh and another through java script (this one is better as it has the ability to start up the service if it got shutdown for any reason) so I'm wondering how can I set this service to start on boot.. I know how to set a script on login in my profile though not on boot.. any suggestion? I've looked around about none interactive shells and so on.. so if I did a symbolic link from bamboo.sh script to /etc/init.d would that work? what about variables inside the script would they b read ? obviously a newbie here so appreciate any detailed explanation if possible about interactive/ none interactive shells and of course if theres an advice about how to solve this issue.. PS: trying to educate myself about linux along the way so any explanation would be greatly appreciated...

6 5

lvm monitoring
by Karanbir Singh 07 Dec '09

07 Dec '09

Hi, At the moment, I am monitoring my lvm resources on a machine with the usual 'pvs;vgs;lvs' output and comparing with whatever is a known good state. But this has a few problems: 1- I need to setup a known good state per machine, which can look quite different from each other : specially when machines are getting dynamic vm builds and teardowns dozens of times per day, or when disk resource allocations are spread over more than one machine. 2- Its hard to work out what is really going on with bits that are not mounted ( like snapshots ). 3- its hard to tie down to physical media ( I screen scrape at the moment, which is dirty and exceptionally prone to nose! ) I am sure there are plenty of people who are monitoring lvm setups on their machines, just wondering what it is that you guys are doing. - KB

1 0

Re: [CentOS] Is ext4 safe for a production server?
by Brent L. Bates 07 Dec '09

07 Dec '09

I guess I forgot to include that some of those Linux systems I've used XFS on were 32 bit OS installs. However, lvm was not used on them, md & NFS were, but not lvm.

1 0

Re: [CentOS] Inquiry:How to compare two files but not in line-by-line basis?
by Brian McKerr 07 Dec '09

07 Dec '09

diff -y ? On Wed, Dec 2, 2009 at 7:42 PM, Simon Banton <centos(a)web.org.uk> wrote: > At 08:54 +0000 2/12/09, hadi motamedi wrote: > >Dear All > >Can you please do me favor and let me know how can I compare two > >files but not in line-by-line basis on my CentOS server ? I mean say > >row#1 in file1 has the same data as say row#5 in file2 , but the > >comm compares them in line-by-line basis that is not intended . It > >seems that the diff cannot do the job as well > > This'll show you which lines are common to both files, and for the > ones that aren't which file they're in. > > perl -MData::Dumper -le 'while(<>) {chomp; push @{$s->{"$_"}}, > $ARGV}; END{ print Dumper($s) }' file1 file2 > > ... someone will be along shortly with a more elegant method. > > HTH > > S. > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos >

7 18

Re: [CentOS] Is ext4 safe for a production server?
by Brent L. Bates 07 Dec '09

07 Dec '09

XFS is the most stable file system I've seen or used. I've seen it survive power failures and disk problems with out a problem. It is the ONLY file system I trust. It is stable, reliable, dependable, and practically bullet proof. I've been using XFS almost since it came into existence on SGI's (IRIX) and we've been using it under Linux for years too, also with out problems.

3 2

Kickstart wrong swap size
by Lars Hecking 07 Dec '09

07 Dec '09

All machines kickstarted here consistently have a swap partition with the wrong size. According to the RHEL5 manual: | To determine the size of the swap partition automatically, use the | --recommended option: | | swap --recommended | | The recommended maximum swap size for machines with less than 2GB of RAM is | twice the amount of RAM. For machines with 2GB or more, this recommendation | changes to 2GB plus the amount of RAM. However, the swap partition on all kickstarted machines is 2GB, regardless of RAM size. This is the relevant portion of the kickstart file: bootloader --location=mbr selinux --disabled reboot clearpart --all --initlabel part /boot --fstype ext3 --size=102 part / --fstype ext3 --size=20480 part swap --recommended part /var --fstype ext3 --size=1 --grow The kickstart setup is currently based on CentOS 5.2 (and I cannot move to 5.4 yet as this is a corporate setup affecting hundreds of machines). Hardcoding swap size isn't a good idea either because there's a range of different memory configurations. I could however confirm that a manual, graphical install from the 5.4 DVD with recommended settings creates 10GB swap on a 8GB RAM machine.

3 3

Resizing / partition ?
by armann 07 Dec '09

07 Dec '09

Hi. I know this has probably been discussed a lot so I'm sorry, noob here. I found a good tutorial here: http://fedorasolved.org/Members/zcat/shrink-lvm-for-new-partition My only problem is understanding this. "To calculate the new End sector, ADD the partition Start sector to the PV PSize, and then add a safety margin of around 131072 sectors (64MB) to that." If anybody has another way of doing this or any comments that would be great. Thanks. Armann Jakob Palsson

1 0

Name Resolution Broken for One Address
by John Thomas 07 Dec '09

07 Dec '09

I seem to have broken my laptop and have been unable to figure it out. Name resolution works great, except one address, which seems to be resolving to 0.0.0.1. Could you help me figure out what I have done and fix it? The following lines are in /etc/hosts 192.168.11.1 dev.example.com 192.168.11.1 dev1.example.com Pinging any other address that I try works, except dev.example.com. CentOS54[root@ctlaptop etc]# ping dev1.example.com PING dev1.example.com (192.168.11.1) 56(84) bytes of data. 64 bytes from dev.example.com (192.168.11.1): icmp_seq=1 ttl=64 time=0.093 ms <snip> CentOS54[root@ctlaptop ~]# ping dev.example.com connect: Invalid argument CentOS54[root@ctlaptop ~]# strace ping dev.example.com execve("/bin/ping", ["ping", "dev.example.com"], [/* 33 vars */]) = 0 brk(0) = 0x88f1000 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) open("/etc/ld.so.cache", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=82386, ...}) = 0 mmap2(NULL, 82386, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7f8b000 close(3) = 0 open("/lib/libresolv.so.2", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\300p\277\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0755, st_size=76400, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f8a000 mmap2(NULL, 75976, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xd62000 mmap2(0xd71000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xe) = 0xd71000 mmap2(0xd73000, 6344, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xd73000 close(3) = 0 open("/lib/libc.so.6", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\340\277.\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0755, st_size=1611564, ...}) = 0 mmap2(NULL, 1328580, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x994000 mmap2(0xad3000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x13f) = 0xad3000 mmap2(0xad6000, 9668, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xad6000 close(3) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f89000 set_thread_area({entry_number:-1 -> 6, base_addr:0xb7f896c0, limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0, useable:1}) = 0 mprotect(0xad3000, 8192, PROT_READ) = 0 mprotect(0xd71000, 4096, PROT_READ) = 0 mprotect(0x15e000, 4096, PROT_READ) = 0 munmap(0xb7f8b000, 82386) = 0 socket(PF_INET, SOCK_RAW, IPPROTO_ICMP) = 3 getuid32() = 0 setuid32(0) = 0 brk(0) = 0x88f1000 brk(0x8912000) = 0x8912000 getpid() = 5376 open("/etc/resolv.conf", O_RDONLY) = 4 fstat64(4, {st_mode=S_IFREG|0644, st_size=109, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f9f000 read(4, "# Generated by NetworkManager\ndo"..., 4096) = 109 read(4, "", 4096) = 0 close(4) = 0 munmap(0xb7f9f000, 4096) = 0 socket(PF_FILE, SOCK_STREAM, 0) = 4 fcntl64(4, F_SETFL, O_RDWR|O_NONBLOCK) = 0 connect(4, {sa_family=AF_FILE, path="/var/run/nscd/socket"...}, 110) = 0 send(4, "\2\0\0\0\r\0\0\0\6\0\0\0hosts\0", 18, MSG_NOSIGNAL) = 18 poll([{fd=4, events=POLLIN|POLLERR|POLLHUP}], 1, 5000) = 1 ([{fd=4, revents=POLLIN}]) recvmsg(4, {msg_name(0)=NULL, msg_iov(2)=[{"hosts\0", 6}, {"\270O\3\0\0\0\0\0", 8}], msg_controllen=16, {cmsg_len=16, cmsg_level=SOL_SOCKET, cmsg_type=SCM_RIGHTS, {5}}, msg_flags=0}, 0) = 14 mmap2(NULL, 217016, PROT_READ, MAP_SHARED, 5, 0) = 0xb7f54000 close(5) = 0 close(4) = 0 socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 4 connect(4, {sa_family=AF_INET, sin_port=htons(1025), sin_addr=inet_addr("0.0.0.1")}, 16) = -1 EINVAL (Invalid argument) dup(2) = 5 fcntl64(5, F_GETFL) = 0x2 (flags O_RDWR) fstat64(5, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 0), ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f9f000 _llseek(5, 0, 0xbfd43234, SEEK_CUR) = -1 ESPIPE (Illegal seek) write(5, "connect: Invalid argument\n", 26connect: Invalid argument ) = 26 close(5) = 0 munmap(0xb7f9f000, 4096) = 0 exit_group(2) = ? -- Sincerely, John Thomas

5 7

Invitation to connect on LinkedIn
by Gustavo Pastorino 07 Dec '09

07 Dec '09

LinkedIn ------------ Gustavo Pastorino requested to add you as a connection on LinkedIn: ------------------------------------------ Romeo, I'd like to add you to my professional network on LinkedIn. - Gustavo Accept invitation from Gustavo Pastorino http://www.linkedin.com/e/c640Z0zoY42Hba6yQ6iWhZknxFvA/blk/I1640011014_2/pm… View invitation from Gustavo Pastorino http://www.linkedin.com/e/c640Z0zoY42Hba6yQ6iWhZknxFvA/blk/I1640011014_2/39… ------------------------------------------ Why might connecting with Gustavo Pastorino be a good idea? People Gustavo Pastorino knows can discover your profile: Connecting to Gustavo Pastorino will attract the attention of LinkedIn users. See who's been viewing your profile: http://www.linkedin.com/e/wvp/inv18_wvmp/ ------ (c) 2009, LinkedIn Corporation

1 0

Re: [CentOS] NFS new security requirements?
by Mike Yates 07 Dec '09

07 Dec '09

This now mysteriously resolved after both servers have rebooted. The long delay is due to the importance of high availability over the nfs links. Mike Yates Hawkgrove Ltd - Software Systems Design 2, The Business Courtyard, Marl Pits Lane, Trudoxhill, Frome, Somerset, BA11 5DL, UK +44 (0)1373 837900 fax: +44 (0)8700 518155 Registered in England: 2756481 VAT Reg: UK 601 1137 11 Registered Office: NSO Associates LLP, 75 Springfield Road, Chelmsford, Essex CM2 6JB All e-mail is subject to contract and is not intended to create a legally binding agreement. Hawkgrove Ltd will only be bound by an agreement in writing signed by an authorized signatory. All outgoing email is scanned by Kerio, using ClamAV 0.95.1/10117/Mon Dec 7 02:21:53 2009 Known viruses: 662464.

1 0

centos vs rhel vs scientific linux
by Robert P. J. Day 07 Dec '09

07 Dec '09

i'm prepping to teach a 5-day intro class in linux starting in about 3 hours, and the courseware is clearly designed around RHEL (apparently 5.1). but since i'm not being provided with RHEL DVDs, i'm just going to hand everyone a centos 5.4 DVD and take it from there. as part of the intro, i want to briefly discuss the varieties of linux related to RHEL, so obviously i want to mention what centos is all about. in a nutshell, it's simply RHEL with any RH-proprietary branding removed, yes? what's the simplest way to sum up the difference in a sentence or two? and i've never used SL but, again as i understand it, it's also RHEL unbranded but, IIRC, SL is more open to producing updates, whereas centos is rigourous about tracking the corresponding RHEL version. does that sound about right? rday -- ======================================================================== Robert P. J. Day Waterloo, Ontario, CANADA Linux Consulting, Training and Kernel Pedantry. Web page: http://crashcourse.ca Twitter: http://twitter.com/rpjday ========================================================================

2 1

using an alternate audio driver in C5.4
by Mr. X 07 Dec '09

07 Dec '09

Hello, C5.4 on Abit kn9 ultra with MCP55 chipset, model name : AMD Athlon(tm) 64 X2 Dual Core Processor 4600+ #lspci 00:06.1 Audio device: nVidia Corporation MCP55 High Definition Audio (rev a2) sudo lsmod | grep hda snd_hda_intel 584593 1 snd_pcm 116681 2 snd_hda_intel,snd_pcm_oss snd_page_alloc 44113 2 snd_hda_intel,snd_pcm snd_hwdep 43593 1 snd_hda_intel snd 100073 11 snd_hda_intel,snd_seq_oss,snd_seq,snd_seq_device,snd_pcm_oss,snd_mixer Is there a way to use the ac97 drivers instead of the hda_intel? I want to explore this cause Qemu has an ac97 driver. If I can make my audio compatible with the Qemu sound, then I can use guest and local audio at the same time! -- Mark

1 0

OT: How can I tell if a web site is now blocking IPs from my country?
by Lanny Marcus 07 Dec '09

07 Dec '09

I have always been able to browse, without any problems, http://www.mobile-review.com/index-en.shtml but for the past 2 or 3 days, Mozilla Firefox just hangs "connecting to ...." How can I tell if they have started blocking IP addresses from Colombia? I would like to do that, before I post to the IPCop mailing list. I have my IPCop box set up to do DNS Caching, so possibly something went awry there. I use OpenDNS.com and I refreshed their Cache for this web site. I am not having problems browsing other web sites. The site is up and my desktop is dual boot and the same thing happens if I boot to M$ Windows. TIA! An error occurred while loading http://www.mobile-review.com/index-en.shtml: Timeout on server Connection was to www.mobile-review.com at port 80 An error occurred while loading http://www.mobile-review.com/: Timeout on server Connection was to www.mobile-review.com at port 80 above is with Konqueror web browser http://downforeveryoneorjustme.com/http://www.mobile-review.com/index-en.sh… It's just you. http://www.mobile-review.com is up. above from http://downforeveryoneorjustme.com/ Lanny -------------------------------------- Magazine subscriptions Largest discount Credit/Debit Card Check Pay Pal http://lowcostmagazines.com/

3 4

netflow colelction and analysis
by Joseph L. Casale 06 Dec '09

06 Dec '09

Anyone got a reco on a package that can collect netflow data and accept user defined queries for specific data, like what an ip did every hour for some said interval? Thanks! jlc

5 10

Building xfsprogs can't find valid UUID library
by C Linus Hicks 05 Dec '09

05 Dec '09

On CentOS 5.3 x86_64, I'm trying to build xfsprogs-2.9.4-1.el5.centos.x86_64 with -ggdb so I can use it with gdb and examine the data structures when using xfs_db. I've installed the src rpm as a non-root user and when I run rpmbuild -bc during the ./configure I get the error: . . . checking uuid.h usability... no checking uuid.h presence... no checking for uuid.h... no checking sys/uuid.h usability... no checking sys/uuid.h presence... no checking for sys/uuid.h... no checking uuid/uuid.h usability... yes checking uuid/uuid.h presence... yes checking for uuid/uuid.h... yes checking for uuid_compare... no checking for uuid_compare in -luuid... no FATAL ERROR: could not find a valid UUID library. Install the Universally Unique Identifiers library package. error: Bad exit status from /var/tmp/rpm-tmp.42904 (%build) However, I found that /lib64/libuuid.so.1.2 (provided by e2fsprogs-libs-1.39-20.el5.x86_64) does exist and using nm -D shows an entry point for uuid_compare: 000000385a6015e0 T uuid_compare Then I did: strings ld.so.cache | grep uuid libuuid.so.1 /lib64/libuuid.so.1 libuuid.so.1 /lib/libuuid.so.1 libuuid.so /usr/lib/libuuid.so And /lib64/libuuid.so.1 is a symbolic link to /lib64/libuuid.so.1.2. The only hit on Google that looked interesting was from 2006: http://oss.sgi.com/archives/xfs/2006-03/msg00425.html Can anybody tell me what's going wrong and how to fix it? Thanks for your help. Linus

2 2

CentOS/RHEL's build of firefox hardwired to evolution -- how to change this
by Robert Heller 05 Dec '09

05 Dec '09

For some awful reason (can someone explain why?), the RHEL/CentOS build of firefox is hardwired to use evolution as its mailto client. With FF 2.<mumble> this was fixable with an about:config setting. With 3.0.<mumble>, it seems not. What is the proper way of fixing this? *I* ended up doing a 'sudo rpm -e evolution' and then doing a 'sudo ln -s <myfirefoxmailtohandler> /usr/bin/evolution'. This is a truely ugly/bad solution, but it is the only one I know of. Please tell be of a better solution. (Hopefully not one that requires me to download the firefox SRPM and hacking the .spec file -- re-building building firefox from sources is non-trivial -- I'd *rather* drop random symlinks into /usr/bin, bad as that is.) *I'm* tempted to report this as a serious *bug* (I really consider it so). -- Robert Heller -- 978-544-6933 Deepwoods Software -- Download the Model Railroad System http://www.deepsoft.com/ -- Binaries for Linux and MS-Windows heller(a)deepsoft.com -- http://www.deepsoft.com/ModelRailroadSystem/

3 5

two questions about ssh tunneling
by Tudod Ki 04 Dec '09

04 Dec '09

if I: ssh -fND localhost:6000 somebody(a)192.168.56.5 -p PORTNUMBER from computer "A" to computer "B" [B = 192.168.56.5] then I can set the SOCKS proxy for e.g.: Firefox to use "localhost:6000" on computer "A". Ok. I can surf the web through "B". But: - Can anyone sniff the traffic of "A"? [e.g.: computers on same subnet as "A"] Like DNS requests? - I think no, but I'm not sure :O - Can anyone sniff the traffic of computer "B"? e.g.: B computer is at a server farm [others in the farm can see the traffic?] - I think yes, but I'm not sure :O

4 3

centos 5.4, firefox and adobereader plugin, disabled input fields
by Waldemar Gorus 04 Dec '09

04 Dec '09

Hello, we are using firefox-3.0.15 from the CentOS-Repository and the adobereader plugin from the adobe-repository. We have a curious problem with adobereader-plugin in firefox. When a pdf document is displayed via the plugin, i.e. within a tab in firefox, all input fields are disabled. I cannot enter a search string or fill in fields. The cursor and page up/down keys are also disabled. But when I configure firefox to open pdf documents with the external acroreader, everything works fine. Additional notes: * We are just migrating from SuSE. Some user profiles are working as expected without problems. Unfortunately, I was not able to figure out the important files: I traced all of firefox' file operations on the user profiles, but there are no significant differences between working and non-working profiles (I just compared filenames, not content). * the same adobe-plugin works with firefox 3.0.15 from mozilla.org * I also set up a clean i386-Centos 5.4 from original CD, SELinux disabled, updated and created standard user. I only added the adobe-repository. The same effect, no search avaible. I would be grateful about a solution (of course :-), but also for ideas on how to debug this problem. bye Waldemar

2 1

measuring iops on linux - numbers make sense?
by Amos Shapira 04 Dec '09

04 Dec '09

Hello, When approaching hosting providers for services, the first question many of them asked us was about the amount of IOPS the disk system should support. While we stress-tested our service, we recorded between 4000 and 6000 "merged io operations per second" as seen in "iostat -x" and collectd (varies between the different components of the system, we have a few such servers). A couple of hosting providers told us that this (iostat and collectd "merged operations per second") is a not so bad way to get IOPS. A partner of ours doubts that this is possible with the current hardware - a 3ware 9690SA-4I4E (http://www.3ware.com/products/sas-9690SA.asp) with 512Mb battery backed up cache and 8 SAS 15k rpm disks (SEAGATE ST3300656SS) in RAID 1+0. They calculate 750 IOPS per spindle and say that the maximum they ever saw from any 15k disk was 350 iops on RAID 0. Am I measuring the numbers correctly? Is there a better way to measure IOPS on CentOS? The OS is CentOS 5.3 x86_64, the rest of the hardware is 64Gb RAM, 2 quad-core 3GHz Intel Xeon CPU's. Thanks, --Amos

3 2

Non official shop
by Geerd-Dietger Hoffmann 04 Dec '09

04 Dec '09

Hey I just discovered that one of the Promo pages [1] points to a spread shirt shop [2]. Maybe this link should be removed as I don't think Lance is still involved? Or can we take it over somehow? Cheers Didi [1] http://wiki.centos.org/SpecialInterestGroup/Promo/TODO [2] http://centos.spreadshirt.com/us/US/Shop/ -- My www page: www.ribalba.de Email / Jabber: ribalba(a)gmail.com Skype : ribalba

3 4

proper protocol for installing a *really* new package?
by Robert P. J. Day 04 Dec '09

04 Dec '09

what is the proper approach to install on centos 5.4 a package that's newer than the currently supported one? at the moment, AFAICT, the latest "poppler-utils" package for centos is 0.5.4. however, the source is up to version 0.12: http://poppler.freedesktop.org/ which matches the current fedora version, but that's not surprising since, naturally, fedora zips right along keeping up with that sort of thing. however, i have a case where it's important that a newer version of poppler-utils (and, consequently) poppler be installed on a centos 5.4 box. someone has claimed he's done it by (gack! choke!) installing the fedora package. that just creeps me out. in any case, what would be the proper solution under centos? is there a "rawhide"/dev equivalent for centos? thanks. rday -- ======================================================================== Robert P. J. Day Waterloo, Ontario, CANADA Linux Consulting, Training and Kernel Pedantry. Web page: http://crashcourse.ca Twitter: http://twitter.com/rpjday ========================================================================

3 3

runuser: cannot set groups: Operation not permitted
by Mathur, Prashant 04 Dec '09

04 Dec '09

Hi, We have installed apatare and running the script aptare_agent, but it is giving error "runuser: cannot set groups: Operation not permitted" if we run it as aptare user. We have made this user the part of root group. If we run the same script with root user there is no error. Any thought? ________________________________ This e-mail is the property of NaviSite, Inc. It is intended only for the person or entity to which it is addressed and may contain information that is privileged, confidential, or otherwise protected from disclosure. Distribution or copying of this e-mail, or the information contained herein, to anyone other than the intended recipient is prohibited.

1 0

dump take long time to finish on new DELL 900 sefver (CENTOS 5.3 and 5.4)??
by mcclnx mcc 04 Dec '09

04 Dec '09

We have several new DELL R900 servers which have 5 internal disks (PERC 6/i with 450GB SAS disks). we configured it as 0,1 mirror and 2,3 mirror and 4 single disk. When we doing performance test and found "dump" very slow. The O.S. servers using are Centos 5.3 or 5.4. 1. we did setup "blockdev": # blockdev --getra /dev/sdc3 4096 2. when we using dump for 16GB data (first logical volume to third logical volume) and it take 26 min to finish (10MB/sec). #dump -0uf /u3/BKOS/root.dmp -B 40000000 / DUMP: Date of this level 0 dump: Fri Dec 4 09:03:57 2009 DUMP: Dumping /dev/sdc2 (/) to /u3/BKOS/root.dmp DUMP: Label: / DUMP: Writing 10 Kilobyte records DUMP: mapping (Pass I) [regular files] DUMP: mapping (Pass II) [directories] DUMP: estimated 15803002 blocks on 0.40 tape(s). DUMP: Volume 1 started with block 1 at: Fri Dec 4 09:04:24 2009 DUMP: dumping (Pass III) [directories] DUMP: dumping (Pass IV) [regular files] DUMP: 16.69% done at 8453 kB/s, finished in 0:24 DUMP: 36.04% done at 9305 kB/s, finished in 0:17 DUMP: 57.06% done at 9887 kB/s, finished in 0:11 DUMP: 76.35% done at 9955 kB/s, finished in 0:06 DUMP: 99.68% done at 10418 kB/s, finished in 0:00 DUMP: Closing /u3/BKOS/root.dmp DUMP: Volume 1 completed at: Fri Dec 4 09:31:23 2009 DUMP: Volume 1 16771020 blocks (16377.95MB) DUMP: Volume 1 took 0:26:59 DUMP: Volume 1 transfer rate: 10358 kB/s DUMP: 16771020 blocks (16377.95MB) on 1 volume(s) DUMP: finished in 1607 seconds, throughput 10436 kBytes/sec DUMP: Date of this level 0 dump: Fri Dec 4 09:03:57 2009 DUMP: Date this dump completed: Fri Dec 4 09:31:23 2009 DUMP: Average transfer rate: 10358 kB/s DUMP: DUMP IS DONE anyone have ideal? ___________________________________________________ 您的生活即時通－溝通、娛樂、生活、工作一次搞定！ http://messenger.yahoo.com.tw/

1 0

Centos 5.4 on Acer Aspire One
by Frank Cox 04 Dec '09

04 Dec '09

I currently have my Acer Aspire One netbook set up with Fedora 11. I would like to change it over to Centos 5.4 if I can. I downloaded the Centos 5.4 i386 livecd image and made a bootable USB flash drive out of it. Unfortunately, when I boot off of that flash drive, Grub (I guess) immediately turns the screen entirely white. If I hit a key I can faintly see the outline of "Press tab to change options" or words to that effect. (It's very faint and hard to read against the white background.) That bit of text rapidly scrolls off of the top of the screen, so I assume that the rest of the boot-up messages are being printed. Hitting Ctrl-Alt-anyFkey does nothing for a while, then every keystroke beeps. I can't get to a text terminal and I never see anything other than a completely white screen. Am I doing something wrong? Fedora 11 works fine on this machine, and I installed that from a livecd. -- MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com

6 19

Centos 4.7 /var/log/messages file kill process
by mcclnx mcc 04 Dec '09

04 Dec '09

We have DELL 2650 server and I found recently /var/log/messages have following messages continue pop-up: =========================================== Dec 3 15:47:06 HOST1 kernel: Free pages: 17816kB (1664kB HighMem) Dec 3 15:47:06 HOST1 kernel: Active:7463815 inactive:656000 dirty:0 writeback:0 unstable:0 free:4454 slab:119979 mapped:730440 pagetables:63277 Dec 3 15:47:06 HOST1 kernel: DMA free:12448kB min:64kB low:128kB high:192kB active:0kB inactive:0kB present:16384kB pages_scanned:0 all_unreclaimable? yes Dec 3 15:47:06 HOST1 kernel: protections[]: 0 0 0 Dec 3 15:47:06 HOST1 kernel: Normal free:3704kB min:3728kB low:7456kB high:11184kB active:2688kB inactive:2284kB present:901120kB pages_scanned:6237 all_unreclaimable? yes Dec 3 15:47:06 HOST1 kernel: protections[]: 0 0 0 Dec 3 15:47:06 HOST1 kernel: HighMem free:1664kB min:512kB low:1024kB high:1536kB active:29852572kB inactive:2621716kB present:33423360kB pages_scanned:0 all_unreclaimable? no Dec 3 15:47:06 HOST1 kernel: protections[]: 0 0 0 Dec 3 15:47:06 HOST1 kernel: DMA: 2*4kB 5*8kB 3*16kB 2*32kB 4*64kB 2*128kB 2*256kB 0*512kB 1*1024kB 1*2048kB 2*4096kB = 12448kB Dec 3 15:47:06 HOST1 kernel: Normal: 0*4kB 3*8kB 54*16kB 6*32kB 1*64kB 0*128kB 0*256kB 1*512kB 0*1024kB 1*2048kB 0*4096kB = 3704kBDec 3 15:47:06 HOST1 kernel: HighMem: 4*4kB 54*8kB 0*16kB 18*32kB 4*64kB 1*128kB 1*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1664kB Dec 3 15:47:06 HOST1 kernel: 7920770 pagecache pages Dec 3 15:47:06 HOST1 kernel: Swap cache: add 144565971, delete 144479462, find 64245277/81316857, race 15+5335 Dec 3 15:47:06 HOST1 kernel: 0 bounce buffer pages Dec 3 15:47:06 HOST1 kernel: Free swap: 39981120kB Dec 3 15:47:06 HOST1 kernel: 8585216 pages of RAM Dec 3 15:47:06 HOST1 kernel: 8158130 pages of HIGHMEM Dec 3 15:47:06 HOST1 kernel: 266508 reserved pages Dec 3 15:47:06 HOST1 kernel: 11584926 pages shared Dec 3 15:47:06 HOST1 kernel: 87087 pages swap cached Dec 3 15:47:06 HOST1 kernel: Out of Memory: Killed process 27850 (oracle). =================================================== This server have 32 GB RAM and 40GB swap space. I don't know why I continue got those messages? $ free total used free shared buffers cached Mem: 33274832 33200168 74664 0 7116 31325660 -/+ buffers/cache: 1867392 31407440 Swap: 40957676 945640 40012036 ___________________________________________________ 您的生活即時通－溝通、娛樂、生活、工作一次搞定！ http://messenger.yahoo.com.tw/

3 2

Getting EXTERN.h, perl.h, etc
by Charles E Campbell Jr 03 Dec '09

03 Dec '09

Hello: I have a Fedora Core 11 system at home (Centos 5.2 at work). I'd like to build vim with huge and perl. This works under Centos, but fails at home: no EXTERN.h or perl.h (and, presumably, other things). So: is there a yum package I should be downloading, and if so, which one? (both the home computer and the work computer are 64-bit systems) Thank you, Chip Campbell -- someday I'll have a good signature, I'm sure of it...

3 3

"csh -v" show history at end of batch job (CENTOS 5.4)???
by mcclnx mcc 03 Dec '09

03 Dec '09

I have some batch JOBs migrate from CEBTOS 5.3 to CENTOS 5.4 server. Those batch files start on "#!/bin/csh -v". Those batch files run good under CENTOS 5.3. on CENTOS 5.4 batch jobs still run good but end of batch priocess it will show "history". Does anyone know why? Thanks. ___________________________________________________ 您的生活即時通－溝通、娛樂、生活、工作一次搞定！ http://messenger.yahoo.com.tw/

2 2

Kerberos + NFSv4 difficulties
by Dan Burkland 03 Dec '09

03 Dec '09

Hey All, I recently have been trying to setup an NFSv4 share that utilizes Kerberos. My experience in general with NFS is very slim however I feel like I am very close to getting this project completed. Currently I have the following things in place: 1) NFS server nfs.example.net (VM#2) - Running CentOS 5.4 with all of the latest updates and NFS-related packages 2) Kerberos KDC running on Kerberos.example.net (VM#1) - Running CentOS 5.4 with all of the latest updates 3) NFS client nfs-client.example.net (VM#3) - Running CentOS 5.4 with all of the latest updates Before I give you the error message I receive when I enable NFS, I'll first describe my setup process. 1) Verified Kerberos works on all machines by attempting a kinit testuser which worked properly. 2) Verified that the clocks on all machines represent the same time (synced using a local NTP server) 3) Created a service principle for nfs.example.net by performing the following commands on the nfs.example.net machine: - (Performed on NFS server) a. kadmin (Logged in as an admin principle) b. addprinc -randkey nfs/nfs.example.net c. ktadd -e des-cbc-crc:normal nfs/nfs.example.net d. quit e. kinit nfs/nfs.example.net -k -t /etc/krb5.keytab f. klist to verify 4) Edited /etc/idmapd.conf with the following changes: - (Performed on NFS server) a. changed Nobody-{User,Group} to nfsnobody b. changed Domain to nfs.example.net 5) Mkdir /nfs/ - (Performed on NFS server) 6) Added the following to /etc/exports - (Performed on NFS server) a. /nfs gss/krb5p(rw,sync,fsid=0) 7) exportfs -rv - (Performed on NFS server) 8) Verified all relevant nfs services were stopped - (Performed on NFS server) 9) Uncommented and made the following changes to /etc/sysconfig/nfs - (Performed on NFS server) a. MOUNTD_NFS_V1="no" b. MOUNTD_NFS_V2="no" c. RPCNFSDARGS="-N 2 -N 3 -U" d. SECURE_NFS = "yes" 10) /etc/init.d/portmap start; /etc/init.d/rpcidmapd start; /etc/init.d/nfs start - (Performed on NFS server) 11) And I receive the following output when the nfs service starts: a. Starting RPC svcgssd: FAILED b. Starting NFS Services: OK c. Starting NFS quotas: OK d. Starting NFS daemon: NFSD: Using /var/lib/nfs/v4recovery as the NFSv4 state recovery directory e. NFSD: starting 90-second grace period f. Starting NFS mountd: OK 12) I then checked /var/log/messages to find the following log entries: a. Dec 2 12:16:51 nfs rpc.svcgssd[6018]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure. Minor code may provide more information - No principal in keytab matches desired name b. Dec 2 12:16:51 nfs rpc.svcgssd[6018]: Unable to obtain credentials for 'nfs' c. Dec 2 12:16:51 nfs rpc.svcgssd[6018]: unable to obtain root (machine) credentials d. Dec 2 12:16:51 nfs rpc.svcgssd[6018]: do you have a keytab entry for nfs/<your.host>@<YOUR.REALM> in /etc/krb5.keytab? I seem to be stuck at this point and would appreciate your insight. Thank you, Dan

2 3

Re: [CentOS] Small proxy appliance hardware
by Chuck Munro 03 Dec '09

03 Dec '09

Regarding a small proxy appliance, my thanks to those who responded either on this list or by direct email. We are going to get one of the little Acer AspireRevo 3610 boxes and give it a try. It's small, quiet, runs cool, and has more than enough resources to handle our CentOS proxy application. It's a shame that we have to trash the Windows-7 install (a waste of money) but that's life. The only unanswered question is with regard to an external USB wired network adapter, so we'll have to go by the data on the various manufacturers' web sites about Linux support. Has anyone tried the Belkin USB2/Gbit, the D-Link DUB-E100 or the Linksys USB300M devices? Which adapter chips to they use (in other words, which driver)?

1 0

LDAP for central authentication?
by Scott Ehrlich 03 Dec '09

03 Dec '09

I have the following on a network: 1) RHEL 5.0 Server acting as NIS and Samba domain controller 2) CentOS 5.x machines on NIS network 3) Win XP machines on Samba domain When I create an account for someone, I need to first type adduser new_person -d /home/new_person then passwd new_person, then cd /var/yp and make. Then smbpasswd -a new_person. Thus, two different databases. On another network, I have separate XP and Linux (CentOS 5.x, RHEL 5.x, and Suse) systems. No Samba, no NIS. Can I still set up a central LDAP directory for a single account database? For the NIS+Samba case, can I merge both credential files into a central database using LDAP? I would also want to control password length, complexity, aging, and other things. What is the best way to do this? Thanks. Scott

3 2

Skype version for CentOS 5.3
by Andrew 03 Dec '09

03 Dec '09

Which is the best version of skype to install in CentOS 5.3? skype.i586 2.0.0.72-fc5 from the skype repo or skype 2.1.0.47-fc10.i586.rpm from the 'skype for linux beta' downloads section of the skype website? Andy

3 5

Fedora 11 i386 Evolution address book --> CentOS 5.4 x86_64
by David McGuffey 03 Dec '09

03 Dec '09

Finally moved my home desktop from Fedora to CentOS. My spouse was unhappy with me upgrading from F9-->F10-->f11 etc and wanted something more stable. I built a second machine which is now running in parallel to the old F11 desktop. I moved my data (mail and files) from the F11 box to the CentOS 5.4 box. I used tar to move everything. Mail and files transferred A-OK...but the Evolution address book did not. Any tips on getting the old /home/.../.evolution/addressbook which worked with the version of Evolution on the new machine with an older version of Evolution? BTW, on CentOS, I cannot add new addresses to the address book. User_id on the new machine is the same as on the old machine, so perms should not be the problem. I checked the selinux context and it is the same as everything else in /home If I do a forced reinstall of Evolution would it mess up the mail files? DaveM

2 6

Centos-DS DSGW
by Alan McKay 03 Dec '09

03 Dec '09

Hey folks, I'm looking for DSGW. Google got me this thread : http://lists.centos.org/pipermail/centos-devel/2008-September/thread.html#3… Did it ever get added, or can I pick up a semi-official package anywhere? I don't see it out there : [root@sandbox1 html]# yum --enablerepo=* search centos-ds Loaded plugins: fastestmirror, priorities Loading mirror speeds from cached hostfile * addons: mirror.csclub.uwaterloo.ca * centosplus: centos.mirror.nac.net * contrib: centos.mbni.med.umich.edu * extras: mirror.csclub.uwaterloo.ca centosplus | 1.9 kB 00:00 centosplus/primary_db | 98 kB 00:00 contrib | 951 B 00:00 contrib/primary | 204 B 00:00 dag | 1.1 kB 00:00 443 packages excluded due to repository priority protections ============================================================== Matched: centos-ds =============================================================== centos-ds.x86_64 : CentOS Directory, Administration, and Console Suite centos-ds-admin.x86_64 : CentOS Administration Server (admin) centos-ds-base.x86_64 : CentOS Directory Server (base) centos-ds-base-devel.x86_64 : Development libraries for CentOS Directory Server centos-ds-console.noarch : CentOS Directory Server Management Console -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of "In Defense of Food"

1 0

RIPd not announcing routes (CentOS 5.4)
by Timo Schoeler 03 Dec '09

03 Dec '09

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi list, yesterday I sent this eMail to quagga mailing list, however I didn't receive an answer yet. Unfortunately, I really need this stuff running or have to switch to another strategy achieving the goals. Maybe one of you has some experience on this topic and can shed some light on it -- I really appreciate it. - -----8<-----8<-----8<----- I have a setup here that requires me to announce dynamic route that are created (within some virtual machines) on my CentOS-based machine. Config looks like this: (ripd.conf) ! hostname bla.foo.org password something enable password somethingother log file /var/log/quagga/ripd.log debug rip events ! router rip ~ version 2 ~ redistribute kernel ~ passive-interface default ~ network eth1.123 ~ network eth1.124 ! ~ no passive-interface eth1.123 ~ no passive-interface eth1.124 ! line vty ! Now, the problem is that it seems to distribute its routes (as my Cisco network guy told me), but it does not learn the routes announced by the (Cisco) neighbours: The speaks to a bunch of Cisco routers (which do, among OSPF and BGP routing, redistriubution of lots of stuff via RIPv2, which should feed my machines). The logfile (as configured above in the config) seems okay (except a "RIP: update timer fire!" entry every now and then): 2009/11/30 10:16:47 RIP: RIPd 0.98.6 starting: vty@2602 2009/11/30 10:16:47 RIP: turn on eth1.123 2009/11/30 10:16:47 RIP: Redistribute new prefix x.x.x.x/14 on the interface eth1.123 2009/11/30 10:16:47 RIP: triggered update! 2009/11/30 10:16:47 RIP: turn on eth1.124 2009/11/30 10:16:47 RIP: Redistribute new prefix y.y.y.y/16 on the interface eth1.124 2009/11/30 10:16:48 RIP: multicast join at eth1.123 2009/11/30 10:16:48 RIP: multicast request on eth1.123 2009/11/30 10:16:48 RIP: SEND to 224.0.0.9.520 2009/11/30 10:16:48 RIP: multicast join at eth1.124 2009/11/30 10:16:48 RIP: multicast request on eth1.124 2009/11/30 10:16:48 RIP: SEND to 224.0.0.9.520 2009/11/30 10:16:48 RIP: RECV packet from z.z.z.1 port 520 on eth1.123 2009/11/30 10:16:48 RIP: RECV packet from z.z.z.2 port 520 on eth1.123 2009/11/30 10:16:48 RIP: RECV packet from z.0.0.3 port 520 on eth1.123 2009/11/30 10:16:48 RIP: RECV packet from z.z.z.121 port 520 on eth1.124 2009/11/30 10:16:48 RIP: RECV packet from z.z.z.122 port 520 on eth1.124 2009/11/30 10:16:48 RIP: RECV packet from z.z.z.123 port 520 on eth1.124 ... A 'sh ip rip status' shows me following: QUAGGA# sh ip rip status Routing Protocol is "rip" ~ Sending updates every 30 seconds with +/-50%, next due in 28 seconds ~ Timeout after 180 seconds, garbage collect after 120 seconds ~ Outgoing update filter list for all interface is not set ~ Incoming update filter list for all interface is not set ~ Default redistribution metric is 1 ~ Redistributing: kernel ~ Default version control: send version 2, receive version 2 ~ Interface Send Recv Key-chain ~ eth1.123 2 2 ~ eth1.124 2 2 ~ Routing for Networks: ~ eth1.123 ~ eth1.124 ~ Routing Information Sources: ~ Gateway BadPackets BadRoutes Distance Last Update ~ z.z.z.1 60 0 120 00:00:16 ~ z.z.z.3 60 0 120 00:00:22 ~ z.z.z.2 60 0 120 00:00:25 ~ z.z.z.6 67 0 120 00:00:05 ~ z.z.z.5 69 0 120 00:00:28 ~ z.z.z.121 68 0 120 00:00:22 ~ z.z.z.123 68 0 120 00:00:16 ~ z.z.z.122 69 0 120 00:00:10 ~ z.z.z.7 61 0 120 00:00:11 ~ z.z.z.6 4423 0 120 00:00:27 ~ z.z.z.5 5556 0 120 00:00:00 ~ z.z.z.7 3460 0 120 00:00:09 ~ Distance: (default is 120) So, I got a *lot* of BadPackets. tcpdump shows nothing 'weird', so I don't see the problem. Maybe this is something trivial but I don't see it as I'm new to quagga. Help greatly appreciated. Best regards, Timo -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iD8DBQFLFO+ifg746kcGBOwRAsvOAJ9jSJ2vJ6Ir02N7DB1tWHgsPR6LCQCgnT1O j1B+IbniBypTttFLcwmCHlk= =ZuLM -----END PGP SIGNATURE-----

2 2

Latency Monitor
by Matt 02 Dec '09

02 Dec '09

Does anyone know of a utillity I can run on a server to periodically ping several hosts and record the result? Does not need to be anything fancy at all. Matt

5 4

(re)load new kernel with rebooting host node?
by Rudi Ahlers 02 Dec '09

02 Dec '09

Hi all, Is it possible to reload the dom0 / host node's kernel with a newer one, without rebooting the server? I know kexec can do something like this for security patches, but I don't know much about kexec, and I don't want to mess up a production server either. So, has anyone done something like this before? I need to load a new kernel for one of the domU's iptables to work, but don't want to reboot the whole server and cause downtime for the other domU's. -- Kind Regards Rudi Ahlers CEO, SoftDux Hosting Web: http://www.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

4 3

CentOS 5.3 - changing display settings
by Andrew 02 Dec '09

02 Dec '09

I've just installed CentOS 5.3 on my desktop and need to change the installed display setting from 1280x1024 to 1024x768 (more suitable for my monitor). When I try this on the Display Settings tab, I get the message: "Display settings changed You need to log out and restart the X server for the changes to take effect. Configuration was written to /etc/X11/xorg.conf, original configuration saved as /etc/X11/xorg.conf.backup." Trouble is, I don't know how to restart the X server apart from rebooting the computer, but that has no effect and the display settings remain unchanged! Any help appreciated, Andy

4 4

Small proxy appliance hardware
by Chuck Munro 02 Dec '09

02 Dec '09

I need to configure a small proxy appliance which doesn't require a lot of CPU power. I'm looking for any warnings this group may have regarding CentOS-5 on the following: - Acer AspireRevo 3610 (Atom CPU) - Dell Inspiron 537s (Celeron) - Any other small machines you might recommend (UL approved) I need to implement dual NICs, and for the Dell it should be no problem finding a low-profile 3Com or Intel adapter, but for the Acer I'll need to use one of those USB wired network dongle things. Does anyone have recommendations for a USB dongle that is fully automatic (regarding speed and duplex negotiation) supported by CentOS? Gigabit speed is not required. Any other compatibility issues with the above machines? Normally I'd simply build something from components and squeeze it into a small box, but in this case I need something with UL/CSA/CE approvals, which lets out homebrew hardware. Many thanks in advance!

4 5

Errors in core dump apache
by Matias Sardisco 02 Dec '09

02 Dec '09

Hi. I saw that some instances of apache die in a segmentation fault. I found this errors in core dump of apache. #0 0x00002b180e623820 in crc32 () from /usr/lib64/libz.so.1 ------------------------- #0 0x00002b180e623820 in crc32 () from /usr/lib64/libz.so.1 ------------------------- #0 0x00002b180e623820 in crc32 () from /usr/lib64/libz.so.1 ------------------------- #0 0x00002b180e623820 in crc32 () from /usr/lib64/libz.so.1 ------------------------- #0 0x00002b180e623820 in crc32 () from /usr/lib64/libz.so.1 ------------------------- #0 0x00002b181603e3a9 in ?? () from /etc/httpd/modules/libphp5.so ------------------------- #0 0x00002b180e623820 in crc32 () from /usr/lib64/libz.so.1 ------------------------- #0 0x00002b180e623820 in crc32 () from /usr/lib64/libz.so.1 ------------------------- We run this software: CentOS 5.4 php 5.2.9 (test repository) httpd 2.2.3 zlib 1.2.3-3 Some ideas? Thank! ------------------------- Matias Sardisco e-mail: msardisco(a)mancia.org

1 0

Tomcat authentication via PAM (or other system methods)?
by Les Mikesell 02 Dec '09

02 Dec '09

Is there a way to coax java services running under tomcat to use the system authentication methods set up through PAM? In my case, this would be users in the local passwd file or through smb to a windows domain. I've added mod_auth_pam to get this effect with apache but would like to also handle java web services. -- Les Mikesell lesmikesell(a)gmail.com

3 2

(HOWTO) Crypto root with the LUKS key on a USB stick
by Devin Reade 02 Dec '09

02 Dec '09

I've written up a document on how to have whole-disk encryption (minus /boot) while having your LUKS key on a USB stick. (Whether or not this is a good idea depends on your usage model, and I won't get into that). The document is at <http://www.gno.org/~gdr/sysadmin/centos/5.4/usb-crypto-key.html> and is targetted at CentOS 5.4. It supersedes my howto for crypto root (for interactive boot or USB sticks) for CentOS 5.1 - 5.3 (the old links are on that page). If anyone has feedback on it, feel free to contact me privately. Devin -- Anyone who cannot cope with mathematics is not fully human. At best he is a tolerable subhuman who has learned to wear shoes, bathe, and not make messes in the house. - Robert Heinlein

1 0

Autofs cannot bind LDAP server
by Eric B. 02 Dec '09

02 Dec '09

Hi, I'm using Autofs and LDAP for mounting my home directories via nfs. In general, everything seems to work fine. However, I have one small problem. If I reboot my server using autofs while my LDAP server is down, I get the following error message in my logs: automount[3358]: bind_ldap_anonymous: lookup(ldap): Unable to bind to the LDAP server: (default), error Can't contact LDAP server which is understandable, since my ldap server is temporarily down. My problem, however, is that once my ldap server is back up, autofs never seems to retry to connect to it, so all my /home mounts fail. Basically, it means I have to make sure that my LDAP server is never down while another server is rebooting. I figure there must be something in the configuration file that would allow me to tweak this to indicate to autofs to recheck the ldap server periodically to see if it has come back up, but can't seem to find anything. My /etc/sysconfic/autofs file is pretty plain: # TIMEOUT - set the default mount timeout (default 600). # TIMEOUT=300 # LOGGING - set default log level "none", "verbose" or "debug" # LOGGING="verbose" # Other common LDAP nameing # MAP_OBJECT_CLASS="automountMap" ENTRY_OBJECT_CLASS="automount" MAP_ATTRIBUTE="ou" ENTRY_ATTRIBUTE="cn" VALUE_ATTRIBUTE="automountInformation" Is there anything I can do to force autofs to check to see if my LDAP server is back online? Thanks, Eric

5 8

Samsung M800
by Frank Cox 02 Dec '09

02 Dec '09

I have a Samsung M800 phone that I had (wrongly) assumed would show up as a USB drive on Linux so I can transfer files to it and so on. Instead, it appears to present itself as a modem. Is there any way to make it appear as a usb drive? Dec 1 13:47:17 mutt kernel: usb 5-1: new full speed USB device using uhci_hcd and address 3 Dec 1 13:47:17 mutt kernel: usb 5-1: configuration #1 chosen from 1 choice Dec 1 13:47:18 mutt kernel: cdc_acm 5-1:1.0: ttyACM0: USB ACM device Dec 1 13:47:18 mutt kernel: usbcore: registered new driver cdc_acm Dec 1 13:47:18 mutt kernel: drivers/usb/class/cdc-acm.c: v0.25:USB Abstract Control Model driver for USB modems and ISDN adapters Dec 1 13:47:37 mutt kernel: usb 5-1: USB disconnect, address 3 Dec 1 13:47:38 mutt kernel: usb 5-1: new full speed USB device using uhci_hcd and address 4 Dec 1 13:47:38 mutt kernel: usb 5-1: configuration #1 chosen from 1 choice Dec 1 13:47:38 mutt kernel: scsi9 : SCSI emulation for USB Mass Storage devices Dec 1 13:47:43 mutt kernel: usb 5-1: USB disconnect, address 4 Dec 1 13:47:44 mutt kernel: usb 5-1: new full speed USB device using uhci_hcd and address 5 Dec 1 13:47:45 mutt kernel: usb 5-1: configuration #1 chosen from 1 choice Dec 1 13:47:45 mutt kernel: cdc_acm 5-1:1.0: ttyACM0: USB ACM device Dec 1 13:51:13 mutt kernel: usb 5-1: USB disconnect, address 5 nd address 6 Dec 1 13:51:16 mutt kernel: usb 5-1: configuration #1 chosen from 1 choice Dec 1 13:51:16 mutt kernel: cdc_acm 5-1:1.0: ttyACM0: USB ACM device -- MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com

10 23

Persistent NFS Caching
by Paul Berger 02 Dec '09

02 Dec '09

Has anybody got persistent NFS caching to work after 5.3 update removed the tech preview? I have cachesfilesd installed & running and using nfs-utils with fsc patched back in but it appears to not be working, any pointers? Regards, Paul Berger

3 4

non-threaded perl no longer in .spec file
by Kurt Hansen 02 Dec '09

02 Dec '09

Hello, I'm setting up a new server on 5.4 and noticed this in the perl.spec file: * Mon Jul 21 2008 Stepan Kasal - 4:5.8.8-14.el5 - add two patches, which... - Resolves: #435505, #431041 - remove %%define threading, the non-threading variant is not supported, Related: 435376 That comment wasn't there when I set up a server on 5.2 a few months back and the %define threading option was still in the perl.spec file, making it easy for me to create my own non-threaded perl. I want a non-threaded perl because the mod_perl folks say that the performance is better on a non-threaded perl. I believe I can compare the spec files and figure out where to edit the new spec file, but I wondered about that "not supported" comment. Is there something "bad" about the non-threading variant? Thanks! Take care, Kurt Hansen khansen(a)charityweb.net

4 6

Inquiry:How to compare two files but not in line-by-line basis?
by hadi motamedi 02 Dec '09

02 Dec '09

Dear All Can you please do me favor and let me know how can I compare two files but not in line-by-line basis on my CentOS server ? I mean say row#1 in file1 has the same data as say row#5 in file2 , but the comm compares them in line-by-line basis that is not intended . It seems that the diff cannot do the job as well . Thank you in advance

3 2

ldapsearch -f file doesn't work
by Sergio Belkin 02 Dec '09

02 Dec '09

Hi, Firstly, system info: Linux mysystem 2.6.18-53.1.4.el5 #1 SMP Fri Nov 30 00:45:55 EST 2007 x86_64 x86_64 x86_64 GNU/Linux I am running ldap on Centos with packages openldap-2.3.27-8.el5_2.4 y openldap-2.3.27-8.el5_2.4 I'd want to perform a query that return one attribute. So I did something as follows: ldapsearch -W -f qbis.ldif -D "cn=Manager,dc=palermo,dc=edu" -b "ou=people,dc=mydomain,dc=edu" -x legajo (Where legajo is the filter) There is no problem with filter but wih the file "qbis.ldif" which contains: dn: uid=jdoe,ou=people,dc=mydomain,dc=edu Of course I could perform that query with no need of one file, but I need to get "legajo" from around 800 users so it would be nice to be able to use "-f file". I cannot do something like a "loop for" because it would ask me every time the Manager password. Am I doing something wrong or is a ldap bug? Thanks in advance! -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin -

2 4

how to install ash on CentOS 5.4?
by Rudi Ahlers 02 Dec '09

02 Dec '09

Hi, Does anyone know if it's possible to install ash on CentOS 5.4, or just CentOS 5, for that matter? I'm trying to install OpenQRM which requires ash, but ash doesn't exist in the repositories. rpmfind.net als only has an older version listed, for CentOS 4 http://rpmfind.net/linux/rpm2html/search.php?query=ash&submit=Search+...&sy… dag wier's repository also doesn't have it. And google didn't yield any results for CentOS 5.4. -- Kind Regards Rudi Ahlers CEO, SoftDux Hosting Web: http://www.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

4 3

Re: [CentOS] Inquiry:How to compare two files but not in line-by-line basis?
by hadi motamedi 02 Dec '09

02 Dec '09

Thank you very much for your reply . This code actually solved my problem and returned exact matches between the two files (irrespective of their location in the files) . As I understood , it will list each data showing to which file it belongs (or it is common to both files) . It is really what I wanted . Sincerely Yours On Wed, Dec 2, 2009 at 9:42 AM, Simon Banton <centos(a)web.org.uk> wrote: > At 08:54 +0000 2/12/09, hadi motamedi wrote: > >Dear All > >Can you please do me favor and let me know how can I compare two > >files but not in line-by-line basis on my CentOS server ? I mean say > >row#1 in file1 has the same data as say row#5 in file2 , but the > >comm compares them in line-by-line basis that is not intended . It > >seems that the diff cannot do the job as well > > This'll show you which lines are common to both files, and for the > ones that aren't which file they're in. > > perl -MData::Dumper -le 'while(<>) {chomp; push @{$s->{"$_"}}, > $ARGV}; END{ print Dumper($s) }' file1 file2 > > ... someone will be along shortly with a more elegant method. > > HTH > > S. > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos >

2 2

best practises for avoiding to write passwords in shell scripts (example sqlplus from Oracle)
by Sven Aluoor 01 Dec '09

01 Dec '09

Hi folks I have here a CentOS box where i need to setup cronjob (with session to remote Oracle instance). On the remote DB i have no access, expect limited user. How to avoid putting passwords in shell scripts? The solution doesn't need to be perfect, only better than plain text passwords in scripts. Mostly remote host only support password authentication (no certificates and so on). cheers Sven

4 4

send existing root email to another user
by Lists 01 Dec '09

01 Dec '09

Hi all, I'm running Centos 5.4 I have a pile of emails in my root users /var/spool/mail/root file I need to send this all to another address (preferrably external but local would possibly do) I have searched a lot but can't find any way to do this. I have set it so future emails get forwarded to my external address but I also need to shift the existing emails. Thanks Kate

10 17

Startup script issues
by Robert Bielik 01 Dec '09

01 Dec '09

I'm converting Ubuntu startup scripts to work on CentOS (5.3), and I'm having trouble finding out how to start a daemon in a certain directory? For Ubuntu, start-stop-daemon has the option -d to set the working directory. TIA /Rob

3 5

centos-release srpm
by Shad L. Lords 01 Dec '09

01 Dec '09

Back on Oct 31st Karanbir said he would take care of the missing centos-release srpm. It still hasn't shown up on any of the mirrors. Is this ever going to be fixed? -Shad

2 2

/etc/cron.weekly/99-raid-check
by Farkas Levente 01 Dec '09

01 Dec '09

hi, it's been a few weeks since rhel/centos 5.4 released and there were many discussion about this new "feature" the weekly raid partition check. we've got a lot's of server with raid1 system and i already try to configure them not to send these messages, but i'm not able ie. i already add to the SKIP_DEVS all of my swap partitions (since i read it on linux-kernel list that there can be mismatch_cnt even though i still not understand why?). but even the data partitions (ie. all of my servers all raid1 partitions) produce this error (ie. ther mismatch_cnt is never 0 at the weekend). and this cause all of my raid1 partitions are rebuild during the weekend. and i don't like it:-( so my questions: - is it a real bug in the raid1 system? - is it a real bug in my disk which runs raid (not really believe since it's dozens of servers)? - the /etc/cron.weekly/99-raid-check is wrong in rhel/centos-5.4? or what's the problem? can someone enlighten me? thanks in advance. regards. -- Levente "Si vis pacem para bellum!"

9 10

OT: iscsi target bind to two addresses?
by Gordon McLellan 01 Dec '09

01 Dec '09

Does anyone know off hand how to bind iscsi enterprise target to two distinct addresses. Lets say I have a machine that has a bunch of interfaces on it, with different subnets. Rather than have ietd broadcast itself on all interfaces (the default), I would like to limit it to only two interfaces. I have edited the init.d startup script with --address x.x.x.x which works, but I tried using the --address argument twice, and the second time is ignored. I also tried x.x.x.x,y.y.y.y which also failed, second address was ignored. I'm thinking I could use ip tables to block ietd's ports on the unwanted interfaces but that seems like overkill. Thanks - Gordon

2 2

Re: [CentOS] NFS new security requirements?
by Mike Yates 01 Dec '09

01 Dec '09

Hi James Please reply to me as well as the list as I only get the digest. You wrote > What is the contents of /etc/exports on 'hs8' ? at present:- #/data 172.26.0.6(rw,no_root_squash) /data hs6(rw,sync,mp,no_root_squash,sec=none) /backup 172.26.0.6(rw,sync,mp,no_root_squash) > What happens if you restart rpc.mountd on 'hs8' ? I've done this many times as I try different exports options:- [root@hs8 ~]# /etc/init.d/nfs restart Shutting down NFS mountd: [ OK ] Shutting down NFS daemon: [ OK ] Shutting down NFS quotas: [ OK ] Shutting down NFS services: [ OK ] Starting NFS services: [ OK ] Starting NFS quotas: [ OK ] Starting NFS daemon: [ OK ] Starting NFS mountd: [ OK ] [root@hs8 ~]# vi msg SeLinux is disabled. Mike Yates MBCS CITP (ISSG) IT Support Engineer Hawkgrove Ltd - Software Systems Design 2, The Business Courtyard, Marl Pits Lane, Trudoxhill, Frome, Somerset, BA11 5DL, UK +44 (0)1373 837900 fax: +44 (0)8700 518155 Registered in England: 2756481 VAT Reg: UK 601 1137 11 Registered Office: NSO Associates LLP, 75 Springfield Road, Chelmsford, Essex CM2 6JB All e-mail is subject to contract and is not intended to create a legally binding agreement. Hawkgrove Ltd will only be bound by an agreement in writing signed by an authorized signatory. All outgoing email is scanned by Kerio, using ClamAV 0.95.1/10098/Tue Dec 1 03:06:27 2009 Known viruses: 660899.

2 2

ip6tables state matching
by Shunsuke Otanis 01 Dec '09

01 Dec '09

Hi, I am having problems adding a stateful inspection rule with ip6tables on CentOS4.5. #ip6tables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT That's what I am trying to do, but #ip6tables: No chain/target/match by that name. I have been googling but unable to solve the problem. any ideas?

3 2

Re: [CentOS] Unable to share directory via Samba?
by Per Qvindesland 01 Dec '09

01 Dec '09

Hi What does testparm give you? Regards Per At Tuesday, 01-12-2009 on 10:05 "James Bensley" wrote: So I went to System > Administration > Server Settings > Samba and added a folder to share and initially set it to guest access to get things going. I couldn't access this one and only share on this server with guest access from either my Windows laptop (XP Pro SP3) or a Leopard server (10.5.8) so I changed the settings to use user authentication and added my local user details (this is a stand alone file server with one user and the root user running CentOS 5.4). I made sure I hadn't put the entries in iptables incorrect by stopping iptables (sudo /etc/init.d/iptables stop, which executed just fine). SELinux kept popping up so I disabled that and restarted the server also. So now with no iptables nor SELinux enabled flicking between guest and user access I still can't access the share (I have also tried authenticating as root to no avail), my Windows and Mac test machines are erroring out saying they don't have permissions to access the share (I am an administrator on both machines so its not a local permissions issue). There are no firewall restrictions between my test machines and the CentOS server as I would even get prompted for authentication so that's not a problem and my test machines work fine because I can mount smb shares on other files servers in the same subnet as the CentOS server, what's going on? Ideas are welcome! Thanks for reading... -- Regards, James ;) Pablo Picasso - "Computers are useless. They can only give you answers." - http://www.brainyquote.com/quotes/authors/p/pablo_picasso.html _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

Re: [CentOS] Docx format ?
by MHR 01 Dec '09

01 Dec '09

On Fri, Nov 27, 2009 at 5:37 AM, Sorin Srbu <sorin.srbu(a)orgfarm.uu.se> wrote: > > So basically, CentOS+OOO3.1 vs WinXP+OOO3.1 scores 1 to 0. Good work CentOS > and OOO teams! <RBFG> Thanks for the laugh, Sorin! mhr

3 2

Change system-wide default configuration for FF and OO with /etc/skel
by Niki Kovacs 30 Nov '09

30 Nov '09

Hi, I'm using a heavily tweaked CentOS 5.4 for desktop installs (here's what it looks like: http://www.microlinux.fr/captures.html) For every app I install, I try to configure a sensible default configuration system-wide for all users. For example, once I found a nice configuration for XMMS (default skin, loads of plugins, orange On Screen Display in a nice font, etcetera), I put my whole ~/.xmms in /etc/skel, so that every new user on the system will have the same default configuration. I have a script which does that for most of the applications I install for users. Even my GNOME desktop is heavily tweaked, and similarly, there's a default /etc/skel/.gconf for this. Now I have two annoyances remaining: Firefox and OpenOffice.org. When installing both of these (Firefox from the CentOS repos, OpenOffice.org from the RPMS contained in openoffice.org's tarball), the default configuration for each one (in ~/.mozilla and ~/.openoffice.org) takes no less than 3 MB, which I find a bit puzzling. Since I keep all my default configurations in an SVN tree, I find this a bit heavy. For Firefox, I only change a couple of options (like "Close download manager after finishing downloading" and "always ask where to store a file"). Similarly, for OpenOffice.org, I change things like auto-completion (so users won't call me on a sunday morning asking "Why does it try to finish my sentences?"). I guess the "real" configuration must be some small plain text file. But then, where? Is there a way not to upload the whole 3 MB of configuration? Cheers, Niki

3 4

Installing CentOS 5.4 64bit on server with LSI SAS 1068E controller.
by Billy Huddleston 30 Nov '09

30 Nov '09

I'm trying to install CentOS 5.4 on a machine with a LSI SAS 1068E controller. I've googled all over the place and found a few different drivers for RHEL5 for it.. and tried a few of them.. Some will load, some complain that this isn't the correct version.. non of them work when it comes to showing Hard Drivers in the partition manager. The machine is a Supermicro SYS-6015V-M3 server. Any help would be appreciated. Thanks, Billy

9 26

timekeeping on VM - ntpd running
by Jonathan Garden 30 Nov '09

30 Nov '09

This is really stupid question. But referring to: http://lists.centos.org/pipermail/centos/2009-October/083791.html I don't see any line related to ntpd in my /var/log/messages . Do I need to turn-on ntpd for timekeeping on VMs? Some people say not to use ntpd on VMs for timekeeping or is it ntpdate cron job? Can someone please elaborate on this? Thanks, Jonathan.

3 3

Repository for clean and safe installation of python2.6 (and other python-software)
by Bernhard Gschaider 30 Nov '09

30 Nov '09

Hi! I want to test some software on my CentOS 5 machine that is not too happy with the system python (2.4). So when I install a python to my machines I want it to be a) clean: in other words it should be a RPM b) safe: it should not remove the system-python (in order not to break the system-scripts in subtle ways) but be accessible for instance as python2.6 (while python would still be python2.4) I've looked around (even other places than the usual suspects RPMforge and EPEL) for repositories that could have such packages. Before I start rolling my own RPMs: is anyone aware of a repository that has such packages? (an added bonus would be if it had RPMs of PyQt4, I didn't find those for Centos or RHEL, too) Bernhard

2 3

NFS new security requirements?
by Mike Yates 30 Nov '09

30 Nov '09

Hi I've suddenly lost access to some permanent cross-server shares. I think this was following the Nov 5 new kernel, rather than the Centos version upgrade. I don't see any difference to man mount.nfs I have:- [root@hs6 ~]# mount hs8:/data /sysback/hs8-data -v mount: no type was given - I'll assume nfs because of the colon mount: trying 172.26.0.8 prog 100003 vers 3 prot tcp port 2049 mount: trying 172.26.0.8 prog 100005 vers 3 prot udp port 735 mount: hs8:/data failed, reason given by server: Permission denied Yet on hs8 the log shows:- Nov 29 12:47:52 hs8 mountd[2255]: authenticated mount request from 172.26.0.6:617 for /data (/data) No internal permissions have changed. ' Mike Yates MBCS CITP (ISSG) IT Support Engineer Hawkgrove Ltd - Software Systems Design 2, The Business Courtyard, Marl Pits Lane, Trudoxhill, Frome, Somerset, BA11 5DL, UK +44 (0)1373 837900 fax: +44 (0)8700 518155 Registered in England: 2756481 VAT Reg: UK 601 1137 11 Registered Office: NSO Associates LLP, 75 Springfield Road, Chelmsford, Essex CM2 6JB All e-mail is subject to contract and is not intended to create a legally binding agreement. Hawkgrove Ltd will only be bound by an agreement in writing signed by an authorized signatory. All outgoing email is scanned by Kerio, using ClamAV 0.95.1/10094/Mon Nov 30 11:45:20 2009 Known viruses: 660218.

2 1

NetworkManager constantly overwriting /etc/resolve.conf - how to disable?
by Rudi Ahlers 30 Nov '09

30 Nov '09

Hi all, I have a CentOS 5.4 server-only installation, i.e. no X installed, and for some odd reason /etc/resolve.conf gets overwritten by NetworkManager on a constant basis. I haven't been able to track down how often, but I think it's on the hour, or something. This is the conents of the file right now: # Generated by NetworkManager # No nameservers found; try putting DNS servers into your # ifcfg files in /etc/sysconfig/network-scripts like so: # # DNS1=xxx.xxx.xxx.xxx # DNS2=xxx.xxx.xxx.xxx # DOMAIN=lab.foo.com bar.foo.com So, I change it to the following: nameserver 192.168.1.254, save it, and all network functions work fine. But, later on it get's changed again. Running "system-config-network", I can see that the nameserver that I have specified is in there, yet it doesn't show up in /etc/resolve.conf. I have searched a bit on google, but all the results reveal how to use NetworkManager to setup the nameservers, but now how it get's set automatically. Why does this happen, and how do I stop it from happening? -- Kind Regards Rudi Ahlers CEO, SoftDux Hosting Web: http://www.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

8 13

Bnid Dynamic Update not returnnig latest update
by Joseph L. Casale 30 Nov '09

30 Nov '09

I have a zone that has several hosts update their ip with Dynamic DNS updates. This morning a client had updated its ip, but bind wasn't returning the new ip when queried until I restarted the daemon? Google hasn't yielded anything useful as I am prolly missing the boat with my search criteria. Anyone got any clues/pointers about this issue? Thanks, jlc

2 3

CentOS 5 and DRPM
by Janez Kosmrlj 30 Nov '09

30 Nov '09

Has anybody successfully implemented DRPMs on centos 5.x? I searched the net and I found a few indications that it is possible, but there is very little info how to do it. Just to be clear. With DRPMs i mean deltaRPMs. And with implementation i mean What yum plugins are necessary and what has to be done on the yum repository to make it work. BR Janez

4 8

AIDE or OSSEC on CentOS 5.4 x86_64?
by David McGuffey 30 Nov '09

30 Nov '09

Starting with a fresh load and after I finish hardening the load following the Center for Internet Security (CIS) guidance, I'm wondering whether AIDE or OSSEC would be a better intrusion detection system. I installed AIDE and did a quick test of AIDE and after initializing the db and applying the recent cups update, I found that 1700+ files had changed. Those are a lot of changes to wade through to determine if they are legit or not. If that is all that AIDE can do, then it is not "manageable." Seems to me that any IDS must be tied to the yum update process so that one is not dealing with hundreds/thousands of changes that were brought in by a yum update that I choose to apply. Is OSSEC any less noisy? DaveM

9 11

Best way to secure apache web root
by Stephen Nelson-Smith 30 Nov '09

30 Nov '09

I have a site running drupal. The apache user therefore needs to be able to write certain files (CSS files for example). I also have a directory under my web root which is a SAN mount, to which apache must be able to write. What is the most secure way to implement this? I am thinking: chown -R root:apache /var/www/html chmod -R 0750 /var/www/html chown apache:apache for where need to write Is there a better way? S.

4 4

startssl and CA autority
by fakessh 29 Nov '09

29 Nov '09

> hi all > > hi postfix list > > I worked all day to develop my certificates > with certificates free of startssl > > I based this document > http://translate.google.fr/translate?js=y&prev=_t&hl=fr&ie=UTF-8&u=http%3A%… > > I realized correctly signed certificates > > I read in the doc startssl the need to import this document among the > certificates > to import the document https://www.startssl.com/certs/sub.class1.client.ca.pem > > how to incorporate the certificates in postfix? > > > thanks for all your feedback > > thanks all your > > thanks >

2 1

again, nic driver order
by Gordon McLellan 29 Nov '09

29 Nov '09

I have two servers with identical hardware ... TYAN i3210w system boards with dual intel gigabit interfaces, and a PCI intel gigabit nic. I'm running Centos 5.4, x86_64, 2.6.18-164.6.1.el5 Every other time I reboot, the nics initialize in a different order. anaconda had setup /etc/modprobe.conf with alias lines for the cards: alias eth0 e1000 alias eth1 e1000e alias eth2 e1000e However, introducing the bonding driver into the mix seems to have thrown a wrench in the works. alias bond0 bonding options bond0 miimon=80 mode=5 #or something like that, can't get to the machine right now - no console and the network is down So, I read about the ifcfg options and try assigning each config script an HWADDR line. after rebooting, /var/log/messages announces that hardware address for eth1 does not match, skipping ... same for eth2 Reading the archives seems to indicate modprobe.conf doesn't do much and is made obsolete by udev, and that hwaddr is discouraged because it's a band-aid. The archives seem to suggest fiddling with udev to be the answer. So I modify /etc/udev/rules.d/60-net (or something) and add a few rules found in an ancient example (those aren't my mac addresses): KERNEL=="eth?", SYSFS{address}=="00:37:e9:17:64:af", NAME="eth0" # MAC of first NIC in lowercase KERNEL=="eth?", SYSFS{address}=="00:21:e9:17:64:b5", NAME="eth1" # MAC of second NIC in lowercase Now, all three network cards get assigned as eth0! eth1 and eth2 are no longer found. The pci-express nics (onboard) get detected first, and the pci nic is last, so it ends up "owning" the eth0 alias. I don't really care which alias gets assigned to which nic, but I want that assignment to be constant. All suggestions are appreciated! Gordon

6 17

CentOS-announce Digest, Vol 57, Issue 12
by centos-announce-request＠centos.org 28 Nov '09

28 Nov '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:1601 Critical CentOS 5 x86_64 kdelibs Update (Karanbir Singh) 2. CESA-2009:1601 Critical CentOS 5 i386 kdelibs Update (Karanbir Singh) 3. CEBA-2009:1600 CentOS 5 x86_64 kexec-tools Update (Karanbir Singh) 4. CEBA-2009:1600 CentOS 5 i386 kexec-tools Update (Karanbir Singh) 5. CEBA-2009:1613 CentOS 5 i386 system-config-lvm Update (Karanbir Singh) 6. CEBA-2009:1613 CentOS 5 x86_64 system-config-lvm Update (Karanbir Singh) 7. CEBA-2009:1612 CentOS 5 x86_64 openswan Update (Karanbir Singh) 8. CEBA-2009:1612 CentOS 5 i386 openswan Update (Karanbir Singh) 9. CEBA-2009:1611 CentOS 5 i386 xterm Update (Karanbir Singh) 10. CEBA-2009:1611 CentOS 5 x86_64 xterm Update (Karanbir Singh) 11. CEBA-2009:1610 CentOS 5 i386 metacity Update (Karanbir Singh) 12. CEBA-2009:1610 CentOS 5 x86_64 metacity Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 27 Nov 2009 23:09:54 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:1601 Critical CentOS 5 x86_64 kdelibs Update To: centos-announce(a)centos.org Message-ID: <20091127230954.GA20939(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:1601 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-1601.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 25503455a83968e82bddb5bad50b3b36 kdelibs-3.5.4-25.el5.centos.1.i386.rpm 24abb566a75e1186b8cc47ac3b883808 kdelibs-3.5.4-25.el5.centos.1.x86_64.rpm 4f29862576be6cd8f777c3fa02b39b6f kdelibs-apidocs-3.5.4-25.el5.centos.1.x86_64.rpm ef5c485ca5cd72aac5f4d11015a2d946 kdelibs-devel-3.5.4-25.el5.centos.1.i386.rpm a6ec2f3c18bb9f659f847058411d4c1b kdelibs-devel-3.5.4-25.el5.centos.1.x86_64.rpm Source: 0916c7381c048924207a81a0b0e9bde9 kdelibs-3.5.4-25.el5.centos.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Fri, 27 Nov 2009 23:09:53 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:1601 Critical CentOS 5 i386 kdelibs Update To: centos-announce(a)centos.org Message-ID: <20091127230953.GA20924(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:1601 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-1601.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 69f420e91ae49efb936b7ac6bafc4447 kdelibs-3.5.4-25.el5.centos.1.i386.rpm 9e10d4c1ba5770f61a9a415d302663f7 kdelibs-apidocs-3.5.4-25.el5.centos.1.i386.rpm 2d16f3725afc68fd2256b2d0b62426bb kdelibs-devel-3.5.4-25.el5.centos.1.i386.rpm Source: 0916c7381c048924207a81a0b0e9bde9 kdelibs-3.5.4-25.el5.centos.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Fri, 27 Nov 2009 23:11:16 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1600 CentOS 5 x86_64 kexec-tools Update To: centos-announce(a)centos.org Message-ID: <20091127231116.GA21015(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1600 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1600.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 2b21645feba164d62f646dc3eeeb4a06 kexec-tools-1.102pre-77.el5.3.x86_64.rpm Source: b206ef6a6023af19bb1cc6ae2d0846bc kexec-tools-1.102pre-77.el5.3.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Fri, 27 Nov 2009 23:11:16 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1600 CentOS 5 i386 kexec-tools Update To: centos-announce(a)centos.org Message-ID: <20091127231116.GA21000(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1600 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1600.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 01fb1c1596d2f18e3922d9d1bf2c3c0c kexec-tools-1.102pre-77.el5.3.i386.rpm Source: b206ef6a6023af19bb1cc6ae2d0846bc kexec-tools-1.102pre-77.el5.3.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Fri, 27 Nov 2009 23:13:45 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1613 CentOS 5 i386 system-config-lvm Update To: centos-announce(a)centos.org Message-ID: <20091127231345.GA21084(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1613 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1613.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: e6335c49b8f3329e402e5d3e53611897 system-config-lvm-1.1.5-1.0.el5_4.1.noarch.rpm Source: 67fda636e8f41adcdf9d8f1fb7caea57 system-config-lvm-1.1.5-1.0.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Fri, 27 Nov 2009 23:13:45 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1613 CentOS 5 x86_64 system-config-lvm Update To: centos-announce(a)centos.org Message-ID: <20091127231345.GA21099(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1613 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1613.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 292e68d92156b38cc296d6043b2f0215 system-config-lvm-1.1.5-1.0.el5_4.1.noarch.rpm Source: 67fda636e8f41adcdf9d8f1fb7caea57 system-config-lvm-1.1.5-1.0.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 7 Date: Fri, 27 Nov 2009 23:17:10 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1612 CentOS 5 x86_64 openswan Update To: centos-announce(a)centos.org Message-ID: <20091127231710.GA21199(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1612 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1612.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: c2888e684a30c8f7f015256fb8a7bba6 openswan-2.6.21-5.el5_4.1.x86_64.rpm f04a532ddf2eb134b597a775f7bdfc24 openswan-doc-2.6.21-5.el5_4.1.x86_64.rpm Source: 0942317900c4fa0065bd295efab6e0e4 openswan-2.6.21-5.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 8 Date: Fri, 27 Nov 2009 23:17:09 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1612 CentOS 5 i386 openswan Update To: centos-announce(a)centos.org Message-ID: <20091127231709.GA21184(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1612 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1612.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: c520e1798d11cd5ac40ae47cce9fa1a5 openswan-2.6.21-5.el5_4.1.i386.rpm d38b53762fea5d27a8ae40b8e2d28768 openswan-doc-2.6.21-5.el5_4.1.i386.rpm Source: 0942317900c4fa0065bd295efab6e0e4 openswan-2.6.21-5.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 9 Date: Fri, 27 Nov 2009 23:18:27 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1611 CentOS 5 i386 xterm Update To: centos-announce(a)centos.org Message-ID: <20091127231827.GA21261(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1611 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1611.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: eb5d68779ddaecc22ddb519d83915979 xterm-215-8.el5_4.1.i386.rpm Source: 67b24109810ef1fe0a2fd0b5b31cc20a xterm-215-8.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 10 Date: Fri, 27 Nov 2009 23:18:27 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1611 CentOS 5 x86_64 xterm Update To: centos-announce(a)centos.org Message-ID: <20091127231827.GA21276(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1611 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1611.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: be2bf3c90ab6ea34ebe31351da16f78d xterm-215-8.el5_4.1.x86_64.rpm Source: 67b24109810ef1fe0a2fd0b5b31cc20a xterm-215-8.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 11 Date: Fri, 27 Nov 2009 23:20:30 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1610 CentOS 5 i386 metacity Update To: centos-announce(a)centos.org Message-ID: <20091127232030.GA21345(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1610 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1610.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: bc0cb5c70d74cf7a6965afc0dce1d53e metacity-2.16.0-12.el5_4.1.i386.rpm Source: cbef78606a3defef84614ba90e757df4 metacity-2.16.0-12.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 12 Date: Fri, 27 Nov 2009 23:20:30 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1610 CentOS 5 x86_64 metacity Update To: centos-announce(a)centos.org Message-ID: <20091127232030.GA21360(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1610 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1610.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: a62304689380340ad45682704f2cbdd6 metacity-2.16.0-12.el5_4.1.i386.rpm 43f8ba25d93dd969d7bc7c5aa82093e8 metacity-2.16.0-12.el5_4.1.x86_64.rpm Source: cbef78606a3defef84614ba90e757df4 metacity-2.16.0-12.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 57, Issue 12 ***********************************************

1 0

SNAT question
by Peter Peltonen 28 Nov '09

28 Nov '09

Hi, I am unable to get my LAN masqueraded using SNAT with CentOS 5.3 and iptables. I have the following setup: eth0: connects to internet with static public IP 1.2.3.1 (obscured here for privacy) eth1: connects to DMZ with static public IP 1.2.3.2 (obscured here for privacy) eth2: connects to LAN with static private IP 192.168.0.1 Traffic to hosts in the DMZ/Internet through eth0/1 work fine. I tried masqueradig the LAN with following: ptables -A FORWARD -i eth2 -j ACCEPT iptables -A FORWARD -o eth2 -j ACCEPT iptables -A POSTROUTING -t nat -s 192.168.0.0/24 -o eth0 -j SNAT --to-source 1.2.3.1 After this I can ssh to a server in the Internet from the LAN using the server's IP address but not its name. The w command on the server tells me that my address has not been masqueraded (its 192.168.0.2, the LAN client's private IP). What am I doing wrong? Best, Peter

3 5

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss