- Discuss - lists.centos.org

LSI SAS snmp agent
by Joseph L. Casale 06 Nov '09

06 Nov '09

Anyone set this up in CentOS? Can you shed some light on the requirements, does it require the LSI module, or does the rhel provided module work just fine? Thanks! jlc

3 4

Certificates Revocation Lists and Apache...
by John Doe 06 Nov '09

06 Nov '09

Hi, already asked in the openssl mailing list, but just in case you already went through this... I need a little help with Certificate Revocation Lists. I did setup client certificates filtering with apache and it seem to work fine so far (used a tutorial on http://www.adone.info/?p=4, down right now). I have a "CA" that is signing a "CA SSL". Then, the "CA SSL" is signing the clients certificates. Now, I am testing Certificate Revocation Lists, but apache keeps saying: "Invalid signature on CRL" I used: $ openssl ca -config openssl.conf -name CA_ssl_default -revoke cassl/$CLIENTNAME.pem Using configuration from openssl.conf Enter pass phrase for cassl/private/cassl.key: Revoking Certificate 02. Data Base Updated $ openssl ca -config openssl.conf -name CA_ssl_default -gencrl -out cassl/crl.pem -crldays 365 Using configuration from openssl.conf Enter pass phrase for /root/Certifs/cassl/private/cassl.key: $ # cat cassl/crl.pem -----BEGIN X509 CRL----- MIIB... ... ...v40= -----END X509 CRL----- In apache logs, when the CRL file is activated in the conf: [debug] ssl_engine_init.c(538): Configuring client authentication [debug] ssl_engine_init.c(1113): CA certificate: /C=AA/ST=BB/L=CC/O=DD/CN=myhost.mydomain [debug] ssl_engine_init.c(601): Configuring permitted SSL ciphers [ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW] [debug] ssl_engine_init.c(626): Configuring certificate revocation facility [debug] ssl_engine_init.c(729): Configuring RSA server certificate [debug] ssl_engine_init.c(768): Configuring RSA server private key When I try to connect with a revoked (or unrevoked) certificate, I get: [debug] ssl_engine_kernel.c(1199): Certificate Verification: depth: 2, subject: /C=AA/ST=BB/L=CC/O=DD/CN=myhost.mydomain, issuer: /C=AA/ST=BB/L=CC/O=DD/CN=myhost.mydomain [debug] ssl_engine_kernel.c(1391): CA CRL: Issuer: C=AA, ST=BB, L=CC, O=DD, CN=myhost.mydomain, lastUpdate: Nov 4 14:39:36 2009 GMT, nextUpdate: Nov 4 14:39:36 2010 GMT [warn] Invalid signature on CRL [error] Certificate Verification: Error (8): CRL signature failure [debug] ssl_engine_kernel.c(1779): OpenSSL: Write: SSLv3 read client certificate B [debug] ssl_engine_kernel.c(1798): OpenSSL: Exit: error in SSLv3 read client certificate B [debug] ssl_engine_kernel.c(1798): OpenSSL: Exit: error in SSLv3 read client certificate B [info] [client 192.168.16.23] SSL library error 1 in handshake (server myhost.mydomain:12345) [info] SSL Library Error: 67567722 error:0407006A:rsa routines:RSA_padding_check_PKCS1_type_1:block type is not 01 [info] SSL Library Error: 67530866 error:04067072:rsa routines:RSA_EAY_PUBLIC_DECRYPT:padding check failed [info] SSL Library Error: 218910726 error:0D0C5006:asn1 encoding routines:ASN1_item_verify:EVP lib [info] SSL Library Error: 336105650 error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned [info] [client 192.168.16.23] Connection closed to child 0 with abortive shutdown (server myhost.mydomain:12345) Also, at one point, I got a "data too large": [warn] Invalid signature on CRL [error] Certificate Verification: Error (8): CRL signature failure [debug] ssl_engine_kernel.c(1779): OpenSSL: Write: SSLv3 read client certificate B [debug] ssl_engine_kernel.c(1798): OpenSSL: Exit: error in SSLv3 read client certificate B [debug] ssl_engine_kernel.c(1798): OpenSSL: Exit: error in SSLv3 read client certificate B [info] [client 192.168.16.23] SSL library error 1 in handshake (server myhost.mydomain:12345) [info] SSL Library Error: 67530884 error:04067084:rsa routines:RSA_EAY_PUBLIC_DECRYPT:data too large for modulus [info] SSL Library Error: 218910726 error:0D0C5006:asn1 encoding routines:ASN1_item_verify:EVP lib [info] SSL Library Error: 336105650 error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned [info] [client 192.168.16.23] Connection closed to child 0 with abortive shutdown (server myhost.mydomain:12345) I reduced my CA and CASSL keys from 2048 down to 1024... not sure if it helped, but I don't have this error anymore... How can I check if the crl.pem file is ok? $ openssl crl -in cassl/crl.pem -text Certificate Revocation List (CRL): Version 1 (0x0) Signature Algorithm: sha1WithRSAEncryption Issuer: /C=AA/ST=BB/L=CC/O=DD/CN=myhost.mydomain Last Update: Nov 4 14:39:36 2009 GMT Next Update: Nov 4 14:39:36 2010 GMT Revoked Certificates: Serial Number: 02 Revocation Date: Nov 4 14:37:03 2009 GMT Signature Algorithm: sha1WithRSAEncryption 03:... ... ...:8d -----BEGIN X509 CRL----- MIIB... ... ...v40= -----END X509 CRL----- I also tried all sorts of verify combos, but all fail: $ openssl verify -verbose -config openssl.conf -purpose crlsign -crl_check cassl/crl.pem usage: verify [-verbose] [-CApath path] [-CAfile file] [-purpose purpose] [-crl_check] [-engine e] cert1 cert2 ... $ openssl verify -verbose -CApath cassl/ -purpose crlsign -crl_check cassl/crl.pem unable to load certificate 9605:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:647:Expecting: TRUSTED CERTIFICATE $ openssl verify -verbose -CAfile cassl/cassl.pem -purpose crlsign -crl_check cassl/crl.pem unable to load certificate 9606:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:647:Expecting: TRUSTED CERTIFICATE Any idea what I am doing wrong? Thx, JD

3 7

INSTALL ADDITIONAL PACKAGES FROM DVD
by Krishna Chandra Prajapati 06 Nov '09

06 Nov '09

Hi experts, I have install centos 5.4 on my laptop(compaq 510). It's very nice. Now i want to install some additional package using dvd. Sound is also not working. Please help me to fix the installation and sound issue. Thanks, Krishna

3 3

MySQL error 28, can't write temp files - how to debug?
by Rudi Ahlers 06 Nov '09

06 Nov '09

Hi all, I hope someone can help with this one. On one of our VPS's we have a fairly large MySQL database, which gives me the following error when running some queries against it: An error occured!Can't execute statement: Error writing file '/tmp/MYL4qeT5' (Errcode: 28) SQL: , , select * from tips order by rand() limit 0, 1 , According to google search, errorcode 28 means the HDD is full. But it isn't: root@vps:[~]$ df -h Filesystem Size Used Avail Use% Mounted on /dev/sda1 84G 18G 62G 23% / none 640M 0 640M 0% /dev/shm /usr/tmpDSK 485M 11M 449M 3% /tmp What else could cause this kind of problem? -- Kind Regards Rudi Ahlers CEO, SoftDux Hosting Web: http://www.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

3 2

CentOS Social, London, UK : 10 Nov 2009
by Karanbir Singh 06 Nov '09

06 Nov '09

Hi Guys, Some of us are yet-again going to be getting together for a CentOS Beer evening on the 10th Nov 2009 at the Kings and Queens. The Pub is mostly quiet during the week, has a fair selection of drinks and is central enough to most people in the city. The full address is : King & Queens, 1 Foley St, London, W1W 6DL‎ Here is a Google Street view of the place http://bit.ly/1PchSO We should be there from about 6:30pm onwards. And depending on how people feel about it, will move around the corner to Ragham, for some food around 9pm. When you get there, keep an eye out for people in CentOS T-Shirts/ Shirts. There is no real agenda except focus on beer and the food! However, you are welcome to bring laptops around and show off any cool stuff you've been working on ( iirc, there is no internet at the pub though ). -- Karanbir Singh London, UK | http://www.karan.org/ | twitter.com/kbsingh ICQ: 2522219 | Yahoo IM: z00dax | Gtalk: z00dax GnuPG Key : http://www.karan.org/publickey.asc

2 1

No driver to Intel
by eduardo cruz 06 Nov '09

06 Nov '09

I have a server hp proliant dl160g6 and i'm installing debian 5 but the network interface dosn't have support, anyone could help me, my netword card is broadcom netxtreme gigabit Intel 82576. -- ~~---~---~ Saludos, Eduardo Cruz Ramirez Departamento de Investigación y Desarrollo Grupo Phoenix – Desarrollo, Soporte y Asesoría ~ Visítanos en: http://www.grupo-phoenix.com ~~---~---~~~---~---~~~---~---~~~---~---~~~---~---~~~---~---~~~---~---~~~---~---~~~---~---~~~---~---~ Cell #: +593-8 5570182 Phone #: +593-4 2342207 Skype Account: eduardo.cruz.ramirez Gmail Account: ecfenix(a)gmail.com MSN Account: eduardocruz888(a)hotmail.com

3 2

Re: [CentOS] MySQL error 28, can't write temp files - how to debug? [SOLVED]
by Rudi Ahlers 05 Nov '09

05 Nov '09

On Thu, Nov 5, 2009 at 11:47 PM, Alan Hodgson <ahodgson(a)simkin.ca> wrote: > On Thursday 05 November 2009, Rudi Ahlers <Rudi(a)softdux.com> wrote: >> According to google search, errorcode 28 means the HDD is full. But it >> isn't: >> >> >> root@vps:[~]$ df -h >> Filesystem Size Used Avail Use% Mounted on >> /dev/sda1 84G 18G 62G 23% / >> none 640M 0 640M 0% /dev/shm >> /usr/tmpDSK 485M 11M 449M 3% /tmp >> >> >> What else could cause this kind of problem? > > You only have 449MB free on /tmp. It could easily fill that up during the > query, and then delete the file before you run df again. Run it while the > query is executing, I bet you see /tmp filling up. > > -- > "No animals were harmed in the recording of this episode. We tried but that > damn monkey was just too fast." > _______________________________________________ Thanx, that seems to have solved the problem. I didn't think of checking to see if the tmp folder got full during the SQL statement execution. So, by increasing it to 1GB, the problem is solved -- Kind Regards Rudi Ahlers CEO, SoftDux Hosting Web: http://www.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

2 4

Who's eating our bandwidth?
by Niki Kovacs 05 Nov '09

05 Nov '09

Hi, I've recently setup a new server for our public libraries. For the last two years, this has been my first "big" job, since it involves networking eleven small to medium size public libraries. There was a hiccup some time ago when the administration hiring me wanted to do it on their own, but it took them less than two weeks to get the server hacked and lose everything. So they decided to hire me back :o) I've rented a little dedicated server at the french provider Ikoula. Really a small thing, a KVM amounting to 1/2 a processor core, 512 MB RAM and 25 GB of disk space. Usually there should be no more than like ten people working simultaneously on the library management software (running atop MySQL). For the last few days, users reported that the install was "terribly slow". I checked, and indeed, the application took quite some time to respond. First thing, I wonder if the configuration I chose is too modest for the setup. Then, I took a peek in /var/log/httpd and the *-access.log files show quite some activity. Some haphazard whois on various IP addresses show me that these are no library users from around here. Like: Bogota?!? Peking?!? And quite some search engines. Since I don't need search engines for our application, I'm going to have to find a way to banish these. The log files are not very handy to decipher, so I googled a bit, and I think today I'm going to check out AWStats, which seems to be the right thing to use in that case. I'm also wondering about activity on other ports, but here also I'm taking stabs in the dark. Probably SSH, but I don't know where eventual failed attempts get logged. I also googled a bit, and I think in this domain, fail2ban will be my next experiment. I have this strange feeling that the next step in the "wise" direction consists in describing my ignorance :o) Any suggestions? Cheers from the sunny south of France, Niki

8 8

MySQL installation problem
by Victor Subervi 05 Nov '09

05 Nov '09

Hi; It's been a while since I controlled my own server and I'm rusty. Trying to install mysql yum install mysql All looks well. Here's what happens: [root@13gems www]# mysql ERROR 2002 (HY000): Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2) [root@13gems www]# mysql -u root -p Enter password: ERROR 2002 (HY000): Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2) There's no mysqld in the ps wax. Please advise. beno

8 13

Real world report for the Newsletter
by Geerd-Dietger Hoffmann 05 Nov '09

05 Nov '09

Hey The last "Newsletter survey" found that many people are interested in how CentOS is used and what people do with it, I would like to invite anyone who has some spare time or has something to share to write a little article about how they are using CentOS. I suppose interesting stuff would be how many machines, how you manage them, what programs you use, stuff that has happened and stopped production (even funny stuff of the likes of "rat in fuse") and pretty much what ever you want. If you don't want personal data appearing for security reasons we can work something out so that your server safety is not affected. Cheers and thanks for the help. Didi ---- My www page: www.ribalba.de Email / Jabber: ribalba(a)gmail.com Skype : ribalba

2 2

Gosa (was: user management )
by Alan McKay 05 Nov '09

05 Nov '09

>> http://gosa-project.org/ This looks VERY interesting!!! As for the requirements for a latter version of PHP, is this for every host? Or just the management host? I'm not opposed to running a recent copy of Fedora Core for this. Or not even opposed to using a more recent version of PHP than is in the Centos Distro. cheers, -Alan -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of "In Defense of Food"

2 1

CentOS-announce Digest, Vol 57, Issue 3
by centos-announce-request＠centos.org 05 Nov '09

05 Nov '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:1548 Important CentOS 5 i386 kernel Update (Karanbir Singh) 2. CESA-2009:1548 Important CentOS 5 x86_64 kernel Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Wed, 4 Nov 2009 19:57:14 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:1548 Important CentOS 5 i386 kernel Update To: centos-announce(a)centos.org Message-ID: <20091104195714.GA24245(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:1548 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-1548.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 7a3ad567ffd9428b6f4a6491f63fd737 kernel-2.6.18-164.6.1.el5.i686.rpm 602b60573c30fea8bbe1a4e4b7a25441 kernel-debug-2.6.18-164.6.1.el5.i686.rpm 951d8c5a3c7ff9a373aea5510ccd311e kernel-debug-devel-2.6.18-164.6.1.el5.i686.rpm fbf006837f52c45f27c7c013004a9e88 kernel-devel-2.6.18-164.6.1.el5.i686.rpm 3682b14aa035fbc9fc94b55fcbdfc263 kernel-doc-2.6.18-164.6.1.el5.noarch.rpm 98d5d15788ab76c16073f80c15b8ef70 kernel-headers-2.6.18-164.6.1.el5.i386.rpm d3f1bf27a3f155e1f0638b7986a8da2b kernel-PAE-2.6.18-164.6.1.el5.i686.rpm 5e4056dfdbafe877b0b82e41587f82f7 kernel-PAE-devel-2.6.18-164.6.1.el5.i686.rpm 8b9dea3afb4eb18b8be108d3055e2c82 kernel-xen-2.6.18-164.6.1.el5.i686.rpm 45ae608d985341a771e72c7545084e9d kernel-xen-devel-2.6.18-164.6.1.el5.i686.rpm Source: 9e2532a82954b718f327e5fa0e395eac kernel-2.6.18-164.6.1.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 4 Nov 2009 19:57:17 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:1548 Important CentOS 5 x86_64 kernel Update To: centos-announce(a)centos.org Message-ID: <20091104195717.GA24260(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:1548 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-1548.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: b7551c56bf76d81e81220257b6558734 kernel-2.6.18-164.6.1.el5.x86_64.rpm bf4eee759d5f23fffa3ce8b449b9d137 kernel-debug-2.6.18-164.6.1.el5.x86_64.rpm 20c19c5d386d25a07159af8d75d02f30 kernel-debug-devel-2.6.18-164.6.1.el5.x86_64.rpm 1e083159efe66f2bd1dc36e876536d10 kernel-devel-2.6.18-164.6.1.el5.x86_64.rpm aeccf89d235e9d8d4b2c3dc48a279342 kernel-doc-2.6.18-164.6.1.el5.noarch.rpm 9d10842657ddbb0f9f8baa51afba2f66 kernel-headers-2.6.18-164.6.1.el5.x86_64.rpm e0e01fe9c3851e7216d9c49f27c4ef9d kernel-xen-2.6.18-164.6.1.el5.x86_64.rpm 52c5317a155b34a8675f509142cff2ac kernel-xen-devel-2.6.18-164.6.1.el5.x86_64.rpm Source: 9e2532a82954b718f327e5fa0e395eac kernel-2.6.18-164.6.1.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 57, Issue 3 **********************************************

1 0

Redhat 7.3 as CentOS 5 domU
by Mindaugas Riauba 05 Nov '09

05 Nov '09

Hello, What is the simpliest way to run Redhat 7.3 server as CentOS 5 domU? I see that Xen emulates Intel PIIX ATA controller for HVM domUs but latest kernel of Redhat 7.3 (2.4.20-20.7smp) has no ata_piix kernel module yet. Is it possible to download it somewhere or there is another way? :) And I'd like to avoid reinstalling them with the new OS. Preferably they'd just die their own death in their little domUs. :) Regards, Mindaugas

5 5

user management solution needed
by Alan McKay 05 Nov '09

05 Nov '09

Hey folks, What is the best way to manage users across multiple CentOS boxes? Ideally what I'd like to be able to do is have central control over who has access to which box from a minute-to-minute basis. e.g. User X needs access to Box A for 30 minutes - clickity, clickity and they have access for that long after which their access is automatically turned off. thanks, -Alan -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of "In Defense of Food"

13 35

Re: [CentOS] Nagios check_file size in another machine [solved]
by kebo jantan 05 Nov '09

05 Nov '09

Thanks everyone, My problem is solved. yeah...i'm read the nrpe.pdf. On Wed, Nov 4, 2009 at 3:08 AM, Keith Keller <kkeller(a)speakeasy.net> wrote: > On Tue, Nov 03, 2009 at 08:08:27PM +0700, kebo jantan wrote: > > I just already. This on client > > > > [root@xmen ~]# ps -ef | grep -i snmp > > root 10505 10172 0 20:06 pts/0 00:00:00 grep -i snmp > > > > [root@cyclop ~]# ps -ef | grep -i nrpe > > root 10507 10172 0 20:06 pts/0 00:00:00 grep -i nrpe > > This won't really help you, since the default is to run nrpe out of > (x)inetd. > > On your nagios server, configure a service that uses check_nrpe to check > a named check on the remote host. Then, on the mysqld host, create a > checkcommand in nrpe.cfg to do the (local) check that you want to do. > NRPE will perform the check and send the result back to check_nrpe on > the nagios server. > > I believe that on the remote host you need the nagios-plugins and > nagios-nrpe packages, available from rpmforge. (The nagios server needs > the nagios-plugins-nrpe package in addition to the other nagios packages > you probably already have.) > > The config files are fairly well documented, and the PDF you were > referred to is very thorough. > > --keith > > > -- > kkeller(a)speakeasy.net > > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos > >

1 0

Tripwire Question
by Al Sparks 05 Nov '09

05 Nov '09

I'm trying to run tripwire on a RHEL 5.4 box. I'm new to it. I'm getting errors: The object: "/ora" is on a different file system...ignoring. For one thing, it's not a different file system. It's not any different than the root partition, that tripwire will monitor. And I want tripwire to monitor it. I've been googling around, and have seen this error in all sorts of places, but with either no comment or, if a question is specifically asked about this, no answer to the question. Anyone out there know what the work around for this might be? === Al

5 8

Ruby Enterprise Edition
by Stephen Nelson-Smith 04 Nov '09

04 Nov '09

I find myself needing a newer Ruby than is in the distro. I'm going to need to install this on a large number of machines, so packaging it would be ideal. REE seems the obvious candidate - unless other folk can recommend an alternative. I found the following spec: http://www.cherpec.com/wp-content/uploads/2009/10/ruby-enterprise.spec In my build environment I get: $ rpmbuild -tb ruby-enterprise.spec error: Name field must be present in package: (main package) error: Version field must be present in package: (main package) error: Release field must be present in package: (main package) error: Summary field must be present in package: (main package) error: Group field must be present in package: (main package) error: License field must be present in package: (main package) I've not fixed this yet, but thought I'd ask if anyone else has a spec or package they can recommend, before I start reinventing wheels. Thanks, S.

3 2

Help with Sendmail
by Alexander Leyva Fonseca 04 Nov '09

04 Nov '09

Hi list, I'm configuring Sendmail as a mail server in my job but I have a modem conection with my provider and at that time I don know how to configure it. I send and receive mails im my lan but I cant do it downloading from my provider. Could someone help me? -- Lic. Alexander Leyva Fonseca Especialista en Ciencias Informáticas Desarrollo de Servicios e Insumos Tecnológicos (DSIT) ACINOX-Nicaro Teléf.(0124) 516396, 516827, 516849 Ext. 101

2 1

Zimbra help?
by ML 04 Nov '09

04 Nov '09

Hi All, Is anyone versed in Zimbra? I have most things working except some MTA issue. I tried posting on the Zimbra forums after reading the docs, but my post was labeled as SPAM and the moderators have not replied to my private message to get my post reviewed. Who uses this type of method for getting help anyway? Aren't the days of Bulletin Board BBS's gone? Anyway... I installed ZCS for the first time today. Most things are running except I cannot send or receive mail. I get MTA errors. I assume that it is not running. When I send I get unable to connect to MTA. How do I diagnose the issue? in /var/log/zimbra.log: Nov 2 17:57:28 indie postfix/postfix-script[9282]: warning: not owned by root: /opt/zimbra/data/postfix/spool Nov 2 17:57:28 indie postfix/postfix-script[9289]: warning: not owned by root: /opt/zimbra/postfix-2.6.5.2z/conf/main.cf Nov 2 17:57:28 indie postfix/postfix-script[9290]: warning: not owned by root: /opt/zimbra/postfix-2.6.5.2z/conf/master.cf Nov 2 17:57:28 indie postfix/postfix-script[9291]: warning: not owned by root: /opt/zimbra/postfix-2.6.5.2z/conf/master.cf.in Nov 2 17:57:28 indie postfix/postfix-script[9294]: warning: not owned by postfix: /opt/zimbra/data/postfix/./spool/maildrop/E18EC1C1048D Nov 2 17:57:28 indie postfix/postfix-script[9295]: warning: not owned by postfix: /opt/zimbra/data/postfix/./spool/pid/master.pid Nov 2 17:57:28 indie postfix/postfix-script[9308]: starting the Postfix mail system Nov 2 17:57:28 indie postfix/master[9309]: fatal: bind 0.0.0.0 port 25: Address already in use Nov 2 17:57:28 indie saslauthd[9316]: detach_tty : master pid is: 9316 Nov 2 17:57:28 indie saslauthd[9316]: ipc_init : listening on socket: /opt/zimbra/cyrus-sasl-2.1.23.3z/state/mux Nov 2 17:57:28 indie zimbramon[2574]: 2574:info: Starting stats via zmcontrol Nov 2 17:57:59 indie zmmailboxdmgr[10822]: status requested Nov 2 17:57:59 indie zmmailboxdmgr[10822]: status OK Nov 2 17:57:59 indie zmmailboxdmgr[10894]: status requested Nov 2 17:57:59 indie zmmailboxdmgr[10894]: status OK Nov 3 01:58:00 indie postfix/postqueue[10943]: fatal: Queue report unavailable - mail system is down Nov 2 17:58:09 indie zmmailboxdmgr[11484]: status requested Nov 2 17:58:09 indie zmmailboxdmgr[11484]: status OK I have not done anything with Postfix at all....U am sure it is the Fatal Bind message above, do I need to configure Postfix? I thought Zimbra did that on install? -Jason

9 13

NTFS and elrepo
by Ron Loftin 04 Nov '09

04 Nov '09

I have here a box which I dual-boot between CentOS 5.4 and an older version of that "other OS" that I'm using to check out the ELrepo version of kmod-ntfs. After installing as per the directions on the ELrepo site, I can mount an NTFS filesystem, and when I type "mount" with no options the output tells me that the target filesystem is mounted read-write. However, when I try to create a file on that filesystem as root, I get a "Permission denied" error, which leads me to think that I'm missing something here. So far, Google has not been very helpful here, so if anyone can shine some light on this, it would be welcome. -- Ron Loftin reloftin(a)twcny.rr.com "God, root, what is difference ?" Piter from UserFriendly

7 24

CentOS-announce Digest, Vol 57, Issue 2
by centos-announce-request＠centos.org 04 Nov '09

04 Nov '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:1549 Moderate CentOS 3 i386 wget - security update (Tru Huynh) 2. CESA-2009:1549 Moderate CentOS 3 x86_64 wget - security update (Tru Huynh) 3. CESA-2009:1550 Important CentOS 3 i386 kernel - security and bug fix update (Tru Huynh) 4. CESA-2009:1550 Important CentOS 3 x86_64 kernel - security and bug fix update (Tru Huynh) 5. CESA-2009:1541 Important CentOS 4 i386 kernel - security update (Tru Huynh) 6. CESA-2009:1541 Important CentOS 4 x86_64 kernel - security update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Tue, 3 Nov 2009 22:48:02 +0100 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2009:1549 Moderate CentOS 3 i386 wget - security update To: centos-announce(a)centos.org Message-ID: <20091103214802.GA4655(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2009:1549 wget security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2009-1549.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/wget-1.10.2-0.30E.1.i386.rpm source: updates/SRPMS/wget-1.10.2-0.30E.1.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update wget Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

rpm and yum issues
by Monty Shinn 04 Nov '09

04 Nov '09

Greetings. I am having issues with rpm/yum on a centos 5.2 x86_64. I am trying to update from 5.2 to 5.4. During yum update, the application became unresponsive during the package search. It had not begun to download any packages. I tried to do a "yum clean all", but that wouldn't complete either. I tried to do a rpm --rebuild, but that failed with a segmentation fault. Tried it a couple of times... Reboot didn't work. I copied the database files out of /var/lib/rpm to a safe location, then deleted the __db.* files. Ran rpm --initdb. That seemed to work. Now, I've been running rpm --rebuild for around 18 hours. The load factor on the server is 1.0, according to uptime. Top shows that it is running, using 100% cpu. Iostat shows around 25% usr load. I see the os raid drives bounce on occasion. ps -ef shows the following daemons running (applicable to rpm): /usr/lib/rpm/rpmd --rebuilddb /usr/lib/rpm/rpmq -q --all --qf %{name}-%{version}-%{release}.%{arch}.rpm\n /bin/sort A search of google led to no real help, but I may be searching wrong... Here are the specs: Centos 5.2 kernel: 2.6.18-92.1.6.el5 #1 SMP x86_64 2 xeon 3.20ghz procs, 4 logical I can't get the rpm or yum version, since rpm is still running. This is a stock install, using the xfs kmod. Only non-standard app installed is the 3ware utilities. I have run a yum update on another 64bit box (almost identical hardware) and a 32 bit box with no problems. The boxes were at 5.2 and 5.0, respectively. Any thoughts? Thanks, Monty

3 2

bind segfault in conjunction with dbus - what to change?
by Brian Schueler 04 Nov '09

04 Nov '09

Hi all, I have a problem running bind on C5.4 when the messagebus service is activated. When I switch off the dbus message service bind runs well. With dbus activated bind crashes with a segfault. How can I get rid of this error? What shall I change? SElinux (the source of most unexpedted things) is switched off. Following versions are installed: bind-9.3.6-4.P1.el5 bind-libs-9.3.6-4.P1.el5 dbus-1.1.2-12.el5 Thanks, Brian. starting the bind causes following error: [root@t41 ~]# /usr/sbin/named -u named -D -t /var/named/chroot -g 04-Nov-2009 16:58:14.905 starting BIND 9.3.6-P1-RedHat-9.3.6-4.P1.el5 -u named - D -t /var/named/chroot -g 04-Nov-2009 16:58:14.906 adjusted limit on open files from 1024 to 1048576 04-Nov-2009 16:58:14.907 found 1 CPU, using 1 worker thread 04-Nov-2009 16:58:14.907 using up to 4096 sockets 04-Nov-2009 16:58:14.943 loading configuration from '/etc/named.conf' 04-Nov-2009 16:58:14.956 using default UDP/IPv4 port range: [1024, 65535] 04-Nov-2009 16:58:14.962 using default UDP/IPv6 port range: [1024, 65535] 04-Nov-2009 16:58:14.978 listening on IPv4 interface lo, 127.0.0.1#53 04-Nov-2009 16:58:14.985 /etc/named.conf:58: using specific query-source port su ppresses port randomization and can be insecure. 04-Nov-2009 16:58:14.990 command channel listening on 127.0.0.1#953 04-Nov-2009 16:58:14.997 ignoring config file logging statement due to -g option 04-Nov-2009 16:58:15.005 zone 0.in-addr.arpa/IN: loaded serial 42 04-Nov-2009 16:58:15.008 zone 0.0.127.in-addr.arpa/IN: loaded serial 1997022700 04-Nov-2009 16:58:15.010 zone 255.in-addr.arpa/IN: loaded serial 42 04-Nov-2009 16:58:15.018 zone 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0. 0.0.0.0.0.0.ip6.arpa/IN: loaded serial 1997022700 04-Nov-2009 16:58:15.023 zone localdomain/IN: loaded serial 42 04-Nov-2009 16:58:15.026 zone localhost/IN: loaded serial 42 process 13548: arguments to dbus_connection_unref() were incorrect, assertion "c onnection->generation == _dbus_current_generation" failed in file dbus-connectio n.c line 2615. This is normally a bug in some application using the D-Bus library. process 13548: arguments to dbus_connection_unref() were incorrect, assertion "c onnection->generation == _dbus_current_generation" failed in file dbus-connectio n.c line 2615. This is normally a bug in some application using the D-Bus library. Segmentation fault (core dumped)

1 0

Spacewalk or Puppet?
by Dan Burkland 04 Nov '09

04 Nov '09

I am a little new to managing large numbers of CentOS/RHEL servers and was wondering what you experienced sysadmins prefer, Spacewalk or Puppet? Thanks, Dan Burkland

8 13

yum clean all - adverse effects?
by Jussi Hirvi 04 Nov '09

04 Nov '09

Are there any adverse effects to "yum clean all"? Does the system lose its memory of what is installed/updated? Regards, Jussi H. -- Jussi Hirvi * Green Spot Topeliuksenkatu 15 C * 00250 Helsinki * Finland Tel. +358 9 493 981 * Mobile +358 40 771 2098 (only sms) jussi.hirvi(a)greenspot.fi * http://www.greenspot.fi

3 2

grub problems
by m.roth＠5-cent.us 04 Nov '09

04 Nov '09

This is irritating: I've got a server I just upgraded to 5.4, then rebooted, only to discover that it just *sits* there at the grub boot menu. I looked at grub.conf, and uncommented hiddenmenu (which should have been done long ago). It *still* sits there when I reboot. Any clues, folks? mark grub.conf: #boot=/dev/sda default=0 timeout=5 splashimage=(hd0,0)/grub/splash.xpm.gz hiddenmenu title CentOS (2.6.18-164.2.1.el5) root (hd0,0) kernel /vmlinuz-2.6.18-164.2.1.el5 ro root=LABEL=/ rhgb initrd /initrd-2.6.18-164.2.1.el5.img title CentOS (2.6.18-164.el5) root (hd0,0) kernel /vmlinuz-2.6.18-164.el5 ro root=LABEL=/ rhgb initrd /initrd-2.6.18-164.el5.img <snip>

5 6

problem installing CentOS 5.3
by Buz Davis 04 Nov '09

04 Nov '09

First, let me apologize to Akemi Yagi for my delay in answering his last query. After failing with 4.8 I realized that I had at least one and possibly two computers capable of handling 5.3 (one was newly purchased second-hand and had many unknowns about it. The other was well documented but its power was obscured by a thick layer of Windows XP). To answer Akemi's last questions, yes, I am sure that the disks were all 4.8. I checked with md5sum before burning the cds and am not sure how to check further than that. I never got past using the first (modified) disk that I downloaded from the url you gave me, because anaconda failed to find a file - having to do with GNOME, so the process aborted. Again I apologize for delaying my response, but I have been occupied again with 5.3, but on the newer computers. 5.3 installed easily and correctly on the first machine (celeron, 1.2Ghz, 512M ram, 80G disk). With the second machine I am getting consistent failure to load X, despite many attempts that appeared to be good installs. For the last attempt I had about 160G of disk available, over 800M of ran, and (as reported by the BIOS, a pentium 3 processor. Unfortunately a remaining big unknown for that system is the Mhz rating for the processor. When I got it, with a broken XP system on it, it was set at 550Mhz. The BIOS allows three choices: 366, 500, and 7xx (I don't remember the last value precisely, but the system wont boot at all, so it's moot). I have mainly messed with the 550 setting, but have occasionally tried at 360. It doesn't seem to make a difference. On that system the output of uname -a gives 2.6.18-128.3l5 for the kernel, and "i686 i686 i386" at the end. Free shows 905240 total and 231688 used. Console mouse services work. When I attempt to load X I get the hollow-x cursor, then the black screen with the nautilus window and then white bars at top and bottom, along with an arrow cursor. The white bars get populated with some icons and then comes the blue screen with the doily-like design, but at that point the system appears to be hung. The computer, home, and trash icons do not appear on the desktop, nor does a mouse-pointer, and wiggling the mouse does nothing. I have compared the /var/log/Xorg.0.log files from the two machines (one that works, one that doesn't), and they both end in the same place: <snip> (--) <default pointer>: PnP-detected protocol: "ExplorerPS/2" (II) <default pointer>: ps2EnableDataReporting: succeeded <eof> I would appreciate any help in getting X to work on this second computer Thanks, Buz Davis

7 8

smartmontools
by m.roth＠5-cent.us 03 Nov '09

03 Nov '09

I'm in the process of rolling out the upgrade from (mostly) 5.3 to 5.4. One of my servers started throwing the following: Nov 1 05:22:51 <server> kernel: target4:0:0: FAST-80 WIDE SCSI 160.0 MB/s DT (12.5 ns, offset 62) Nov 1 05:22:51 <server> kernel: target4:0:1: FAST-80 WIDE SCSI 160.0 MB/s DT (12.5 ns, offset 62) into my logs every half hour. I don't see anything resembling an error message. The only thing I noted while googling was everyone else spoke of "...ns, offset 127", but I have no clue if that's relevant to anything. The smartd.conf is the default. I'm not running the debug kernel. Does anyone have any idea why it's doing this, and, if it's not important, how to get it to stop cluttering my logs? mark

3 4

Nagios check_file size in another machine
by kebo jantan 03 Nov '09

03 Nov '09

Dear all.... any one can help me??? I am aware of monitoring disk space using nagios (disk partitions with check_disk). Now, I have a situation that I would like to monitor size of an individual file through nagios. e.g /var/lib/mysql/somedatabase/vlog.myd, this file will grow very fast and i would like to monitor if the size of this file crosses 1.5 G. I'm already used 'check_file' but this can't solved my problem. The file in another machine, that 'check_file' can't do it.

4 4

DNS log file question
by James B. Byrne 03 Nov '09

03 Nov '09

I am trying to sort out a configuration problem with y slave servers, more on that in a following message, but while I was examining the system log on one of those servers I saw this: Nov 3 12:30:43 inet04 named[18110]: client 174.88.12.107#60136: query (cache) 'www.soundunwound.com/A/IN' denied Nov 3 12:30:43 inet04 named[18110]: client 174.88.12.107#60140: query (cache) 'www.warehousedeals.com/A/IN' denied Nov 3 12:30:43 inet04 named[18110]: client 174.88.12.107#60140: query (cache) 'www.warehousedeals.com/A/IN' denied Nov 3 12:30:45 inet04 named[18110]: client 174.88.12.107#60147: query (cache) 'www.zappos.com/A/IN' denied Nov 3 12:30:45 inet04 named[18110]: client 174.88.12.107#60147: query (cache) 'www.zappos.com/A/IN' denied Nov 3 12:30:53 inet04 named[18110]: client 174.88.12.107#60156: query (cache) 'www.flipkart.com/A/IN' denied Nov 3 12:30:53 inet04 named[18110]: client 174.88.12.107#60157: query (cache) 'tokyotoys.com/A/IN' denied Nov 3 12:30:53 inet04 named[18110]: client 174.88.12.107#60156: query (cache) 'www.flipkart.com/A/IN' denied Nov 3 12:30:53 inet04 named[18110]: client 174.88.12.107#60157: query (cache) 'tokyotoys.com/A/IN' denied Nov 3 12:30:55 inet04 named[18110]: client 174.88.12.107#60171: query (cache) 'www.animenewsnetwork.com/A/IN' denied Nov 3 12:30:55 inet04 named[18110]: client 174.88.12.107#60171: query (cache) 'www.animenewsnetwork.com/A/IN' denied Nov 3 12:30:55 inet04 named[18110]: client 174.88.12.107#60173: query (cache) 'www.how-to-cosplay.com/A/IN' denied Nov 3 12:30:56 inet04 named[18110]: client 174.88.12.107#60173: query (cache) 'www.how-to-cosplay.com/A/IN' denied Nov 3 12:30:58 inet04 named[18110]: client 174.88.12.107#60186: query (cache) 'www.kaboodle.com/A/IN' denied Nov 3 12:30:58 inet04 named[18110]: client 174.88.12.107#60186: query (cache) 'www.kaboodle.com/A/IN' denied Nov 3 12:30:58 inet04 named[18110]: client 174.88.12.107#60189: query (cache) 'iphone.wareseeker.com/A/IN' denied Nov 3 12:30:58 inet04 named[18110]: client 174.88.12.107#60189: query (cache) 'iphone.wareseeker.com/A/IN' denied Nov 3 12:31:02 inet04 named[18110]: client 174.88.12.107#60201: query (cache) 'optimizedby.rmxads.com/A/IN' denied Nov 3 12:31:02 inet04 named[18110]: client 174.88.12.107#60201: query (cache) 'optimizedby.rmxads.com/A/IN' denied Nov 3 12:31:07 inet04 named[18110]: client 174.88.12.107#60216: query (cache) 'img.amazon.ca/A/IN' denied Now, none of these domains are served by my dns servers so what is going on? Again, I remind potential respondents that I get the digest so please send me a direct copy of any reply to the list. Regards, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

Proper configuration for DNS slaves and masters
by James B. Byrne 03 Nov '09

03 Nov '09

I have the following layout DNS01 - Master DNS02 - Remote slave DNS03 - Local network slave The master is configured so: acl HLLnetworks { 209.47.176/24; 216.185.71/24; }; options { allow-query { any; }; allow-recursion { HLLnetworks; }; allow-transfer { HLLnetworks; }; directory "/var/named"; dump-file "/var/named/data/cache_dump.db"; statistics-file "/var/named/data/named_stats.txt"; query-source address 216.185.71.33; listen-on { 216.185.71.33; }; notify yes; }; The slaves are configured this way (appropriately modified for each ip address: acl HLLnetworks { 209.47.176/24; 216.185.71/24; }; options { allow-query { any; }; allow-recursion { HLLnetworks; }; allow-transfer { HLLnetworks; }; directory "/var/named"; dump-file "/var/named/data/cache_dump.db"; statistics-file "/var/named/data/named_stats.txt"; notify no; // this is a slave server query-source address 209.47.176.33; listen-on { 127.0.0.1; }; listen-on { 209.47.176.33; }; forwarders { 216.185.71.33; }; }; Now, what I am seeing on one of the slaves when I change a zone in the master and reload is this: Nov 3 12:47:49 inet06 named[9597]: received notify for zone 'byrnejb.ca' but on the other I see this: Nov 3 12:47:50 inet04 named[18368]: client 216.185.71.27#33829: received notify for zone 'byrnejb.ca' Nov 3 12:47:50 inet04 named[18368]: zone byrnejb.ca/IN: refused notify from non-master: 216.185.71.27#33829 The master configuration for byrnejb.ca is zone "byrnejb.ca" { type master; file "/var/named/masters/byrnejb.ca.hosts"; }; On inet06 the slave zone configuration is: zone "byrnejb.ca" { type slave; masters { 216.185.71.33; }; file "/var/named/slaves/byrnejb.ca.hosts"; }; and on inet04 it is: zone "byrnejb.ca" { type slave; masters { 216.185.71.33; }; file "/var/named/slaves/byrnejb.ca.hosts"; }; Which is, as far as I can see, identical. In any case, the real problem is that neither slave actually transfers the updated zone file and I cannot figure out why not. I have verified that the master zone file serial number is greater than that of the slave zones. So, I have two questions: 1. Why is the source address 216.185.71.27 when the bind named listens on 216.185.71.33 and answers queries from the same address. Admittedly, 216.185.71.33 is a virtual ip hosted on 216.185.71.27 but we have been doing this for over a decade now and I have never seen this behaviour before. 2. Why are the notifies ignored? Again, we have had this set up for over a decade and none of these problems until now, and the only thing that has happened on the dns side of things recently were the CentOS updates last week. I am not a DNS specialist, I set this up several years ago and I am perplexed as to why it is now giving me these difficulties. Any help would be gratefully appreciated. Sincerely, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 3

mock, extras vs epel
by Todd Denniston 03 Nov '09

03 Nov '09

I am looking to be a bit more standard in the builds of my CentOS rpms, and so I was about to install mock but noticed that there is one provided in the centos/5/extras and another in epel. epel is obviously newer, but are there reasons/experiences in this group that would suggest sticking with the extras version instead? Or even reasons other than the shiny version number on the epel one to go with it? Is the extras version the version used by the upstream provider and thus the CentOS team keeps it around to do the matching builds? Thanks for the clarifications. -- Todd Denniston Crane Division, Naval Surface Warfare Center (NSWC Crane) Harnessing the Power of Technology for the Warfighter

4 4

Free or low cost online backup?
by Neil Aggarwal 03 Nov '09

03 Nov '09

Hello: Does anyone know a free or low cost online backup system for CentOS? Thanks, Neil -- Neil Aggarwal, (281)846-8957, http://www.JAMMConsulting.com CentOS 5.4 KVM VPS $55/mo, no setup fee, no contract, dedicated 64bit CPU 1GB dedicated RAM, 40GB RAID storage, 500GB/mo premium BW, Zero downtime

11 15

Re: [CentOS] CentOS Digest, Vol 57, Issue 31
by Tim_Davis＠cbca.com 03 Nov '09

03 Nov '09

Message: 27 Date: Fri, 30 Oct 2009 21:13:26 -0400 From: Robert Spangler <mlists(a)zoominternet.net> Subject: Re: [CentOS] Syslog do not work To: CentOS mailing list <centos(a)centos.org> Message-ID: <200910302113.26256.mlists(a)zoominternet.net> Content-Type: text/plain; charset="iso-8859-1" On Friday 30 October 2009 16:34, Tim_Davis(a)cbca.com wrote: > The syslog is not working Is it rumnning? check it with ps -ef | grep syslogd > and also I installed Webmin, also it does not > work, > this is what the error is " > > Info Internet Explorer cannot display the webpage " > icon How are you logging into webmin? url? -- Regards Robert Linux User #296285 http://counter.li.org Yes, it is running [root@bart ~]# ps -ef | grep syslogd root 28446 1 0 08:56 ? 00:00:00 syslogd -m0 -r root 28481 28394 0 09:05 pts/1 00:00:00 grep syslogd [root@bart ~]# 2. Logging in as below http://IP_ADDRESS_OF_CENTOS_SERVER:10000 and this is the :- netstat output [root@bart ~]# netstat -an |grep 10000 tcp 0 0 0.0.0.0:10000 0.0.0.0:* LISTEN udp 0 0 0.0.0.0:10000 0.0.0.0:* [root@bart ~]# [root@bart ~]# NOTICE: The information contained in this electronic message, and any attachments accompanying this transmission, may be legally privileged and/or confidential and protected health information. This information is intended only for the use of the individual(s) and/or entity identified above. The authorized recipient of this information is prohibited from disclosing this information to any other party unless required to do so by law or regulation and is required to protect the information after its stated need has been fulfilled. If you are not the intended recipient, or an employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any disclosure, printing, copying, forwarding, or distributing of this information is strictly prohibited. If you have received this communication in error, please notify the sender immediately, by telephone or return fax/email, to advise of wrongful receipt and confirm your understanding of this Notice. Thank You.

1 0

info about hdds in raid
by Eugeneapolinary Ju 03 Nov '09

03 Nov '09

How can I tell wich HDD to swap, when the "cat /proc/mdstat" says one HDD of the RAID1 array has died? Does the HDD's has some serial numbers, that I can see in "reality", and I can get that number from e.g.: a commands output? How could I know wich HDD to swap in e.g.: a RAID1 array? thank you

8 13

Squid authenticating by Active Directory
by Wahyu Darmawan 03 Nov '09

03 Nov '09

Hi, Need some help for step by step to configure my squid integrate with Active Directory at my college. Could you please help me? Thank you. Rgds,

5 6

Re: [CentOS] Server packet loss and becomes unresponsive
by Geoff Galitz 03 Nov '09

03 Nov '09

Does "ifconfig" or "dmesg" show any errors? If the answer to those is no, I'd start running sar to see if there is abnormal behavior which could indicate a hardware problem. Of course, another possibility is a DDOS. Do you have any kind security monitoring or protection in place? -geoff ----------------------------------------- Geoff Galitz Blankenheim, Germany http://www.galitz.org On Tue 03/11/09 04:38 , "Timothy" timmysql(a)progressivemarketingnetwork.com sent: I am at a lost with this server of mine. I have replaced everything except just replacing the entire server. The server is running at a low load but every so often it starts to have high packet loss / latency(the average ms for me is 80 but it jumps to 4000 during this period) and eventually becomes unresponsive. All traffic seems normal, no unusual activity. But once or twice a month it starts to get packet loss and after an hour or two it crashes. The network itself is fine. All other servers on the same subnet work fine. Any ideas what could be causing this kind of behavior? Thanks, Tim _______________________________________________ CentOS mailing list CentOS(a)centos.org

1 0

E-Mail on SSH login?
by ML 03 Nov '09

03 Nov '09

Does anyone have thoughts on how to kick off an e-mail on SSH login? -Jason

9 8

adding SAN "diskspace" to CentOS system residing on VMware
by ken 03 Nov '09

03 Nov '09

Hey, group, I've got a system installed on a VMware VM. The SAN administrator allocated me more disk space from the (EMC) SAN and I need ultimately to create another partition to mount on the filesystem. Two (initial) questions about this: What steps do I need to take prior to creating a new partition with fdisk? (The SAN space, BTW, is connected through VMware.) The OS is already residing on a logical volume. Is there any compelling reason to bringing the new partition into lvm (aside from the ease of resizing it... something I don't anticipate us doing)? Or should I simply create an ext3 partition and mount that? Thanks much.

7 6

Zimbra Help
by ML 02 Nov '09

02 Nov '09

I am playing around with Zimbra. For the install, I selected the Fedora 11 version for x64. I am running: Linux 2.6.18-164.el5 #1 SMP Thu Sep 3 03:28:30 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux When I install I get an error: This platform is CentOS5_64 Packages found: F11_64 This may or may not work. Installation can not continue without manual override. You can override this safety check with ./install.sh --platform-override I am not well versed enough to know if I can do the override install and things will be fine. Did I download the wrong version from: http://www.zimbra.com/community/downloads.html -Jason

8 8

Way to go, CentOS team. Here's a hearty "thank you"!
by Gilbert Sebenste 02 Nov '09

02 Nov '09

Hello all, To the CentOS developers, beta testers, and all who were involved in a small or major way in the release of CentOS 5.4...thank you. Ignoring the peer pressure, even though it was out a little later than you (and many of us) wanted, you got it RIGHT. *That* is what was important. I yum updated from 5.3 to 5.4 with NO issues that I can speak of right now. Thanks to you fine folks, and of course, the upstream vendor, for doing a fantastic job! ******************************************************************************* Gilbert Sebenste ******** (My opinions only!) ****** *******************************************************************************

6 5

Re: [CentOS] Dealing with MS .msg files on Linix
by James B. Byrne 02 Nov '09

02 Nov '09

On Mon, November 2, 2009 14:10, Alan Sparks wrote: > Are they TNEF format? Could something like the following help you? > Checked the SquirrelMail plugins repo? > http://squirrelmail.org/plugin_view.php?id=62 > > How can I tell the format from the raw message file? Other than the XML stuff at the top of the message body it looks much like any other mime message. But I will check out the link. Thank you. Regards, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

Dealing with MS .msg files on Linix
by James B. Byrne 02 Nov '09

02 Nov '09

I am a digest subscriber, so the favour of a direct copy of any replies is requested. Our firm uses SquirrelMail (SM) for email and we have a client who has begun sending us email documents that SM cannot open. This is a MicroSoft Outlook artifact and I suspect it is tied to the XML used in the message composition. The problem for us is that the result of opening such an email with SM is that it displays nothing. The To, From, Subject, and message body all all missing and no attachments are found. If we use Thunderbird then we can see the original message and its attachments; and that is what we are using in the meantime to get around this problem. However, it would be far more convenient if we could use some way of dealing with this message format from within SM. Has anyone here run into this situation? How did you handle it? Is there a SquirrelMail solution or must we change email programs just to deal with this correspondent? I have done the Google thing and have not turned up anything of use. Perhaps I am using the wrong words. Sincerely, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

Inquiry:iptables ?
by hadi motamedi 02 Nov '09

02 Nov '09

Dear All To open a port , I know that I need to go to "System -> Administration -> Security Level and Firewall" -> Other ports and then I can open port-5901 as tcp protocol . Can you please do me favor and let me know how it can be done from the command line (if my CentOS is text-mode installed) ? (perhaps via iptables?) Let me thank you in advance

8 13

CentOS-announce Digest, Vol 57, Issue 1
by centos-announce-request＠centos.org 02 Nov '09

02 Nov '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2009:1538 CentOS 5 i386 lvm2 Update (Karanbir Singh) 2. CEBA-2009:1538 CentOS 5 x86_64 lvm2 Update (Karanbir Singh) 3. CEBA-2009:1539 CentOS 5 i386 iptables Update (Karanbir Singh) 4. CEBA-2009:1539 CentOS 5 x86_64 iptables Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Mon, 2 Nov 2009 12:13:38 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1538 CentOS 5 i386 lvm2 Update To: centos-announce(a)centos.org Message-ID: <20091102121338.GA28300(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1538 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1538.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: a69881aee84157e0636ef2f392abf2d2 lvm2-2.02.46-8.el5_4.2.i386.rpm Source: f1eb434f0489e5f31309bf41ea2d1bfd lvm2-2.02.46-8.el5_4.2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Mon, 2 Nov 2009 12:13:39 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1538 CentOS 5 x86_64 lvm2 Update To: centos-announce(a)centos.org Message-ID: <20091102121339.GA28315(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1538 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1538.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: cd4f5f6047f712a7f16a2c0d3310cc78 lvm2-2.02.46-8.el5_4.2.x86_64.rpm Source: f1eb434f0489e5f31309bf41ea2d1bfd lvm2-2.02.46-8.el5_4.2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Mon, 2 Nov 2009 12:26:44 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1539 CentOS 5 i386 iptables Update To: centos-announce(a)centos.org Message-ID: <20091102122644.GA28631(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1539 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1539.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 3ee96dd29b65459f26ec681ffe8243fb iptables-1.3.5-5.3.el5_4.1.i386.rpm 36a8cd364cc009eec6f3be4800efea7c iptables-devel-1.3.5-5.3.el5_4.1.i386.rpm 1daf2dd50f6cbdac1505350ebb9d7246 iptables-ipv6-1.3.5-5.3.el5_4.1.i386.rpm Source: 23ddd338b0dd482ee085c3ebc2b52432 iptables-1.3.5-5.3.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Mon, 2 Nov 2009 12:26:44 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2009:1539 CentOS 5 x86_64 iptables Update To: centos-announce(a)centos.org Message-ID: <20091102122644.GA28646(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:1539 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-1539.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 16ec033b44ad57423f38440d4d47acac iptables-1.3.5-5.3.el5_4.1.x86_64.rpm 42fc1b7255ea2dd30183e8e8574523d8 iptables-devel-1.3.5-5.3.el5_4.1.i386.rpm c489f862431522c325bfcf850f6f65e2 iptables-devel-1.3.5-5.3.el5_4.1.x86_64.rpm 40fbe855cb372a5f05376ecd721a8fa0 iptables-ipv6-1.3.5-5.3.el5_4.1.x86_64.rpm Source: 23ddd338b0dd482ee085c3ebc2b52432 iptables-1.3.5-5.3.el5_4.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 57, Issue 1 **********************************************

1 0

nm-applet with wlan0 in CentOS 5.4
by Bernard Lheureux 02 Nov '09

02 Nov '09

Hello all, I would like to find a soluce fo a very annoying problem I have since I've installed CentOS 5 on my Lenovo R60 Laptop... Everything works correctly excepted a small thing, the nm-applet of NetworkManager-gnome always report my wlan0 in error status, even when my wifi network is connected correctly and working without problem... It behaves as if wlanx intefaces were not recognized by nm-applet... How can I solve this ? PS: every packages of this machie are up-tu-date in CentOS 5.4 Thanks for your help M$-Internet Exploder est le cancer de l'Internet, voyez pourquoi ici: http://www.aful.org/ressources/documentations/msie-problemes-securite -- (°- Bernard Lheureux Gestionnaire des MailingLists ML, TechML, LinuxML //\ http://www.bbsoft4.org/Mailinglists.htm ** MailTo:root@bbsoft4.org v_/_ http://www.bbsoft4.org/ <<<<<< * >>>>>> http://www.portalinux.org/

2 2

Automatical resync of MD, why?
by happymaster23 02 Nov '09

02 Nov '09

Hello, I have three MDs on two HDDs in RAID 1. In last days, thanks to my monitoring (which is installed longer time), I have recognized, that one of these MDs is automatically started resync. First was at 25th October and second resync of the same MD was today. It started in same daytime (about 4:00 AM). Now is MD resynced and working well. Can someone tell me what means this automatic resync? Is it standard? Is it means some possible problems with one HDD (but other two MDs are working without resync)? Thank you Martin Šťastný

4 4

CentOS Mirrored On RapidShare [Links Here]
by James Bensley 02 Nov '09

02 Nov '09

5 6

DoveCot and Postfix Setup? or Zimbra?
by ML 01 Nov '09

01 Nov '09

Hi All, I have not really setup e-mail serving on Linux before by myself. I have a setup now where it was setup for me running Dovecot and postfix. The setup works. I want to set this up again on my own system. Does anyone have a good tutorial? Zimbra...does it replace dovecot and postfx setup? Best, -Jason

5 4

loading a program in memory for faster startup
by Jerry Geis 01 Nov '09

01 Nov '09

After searching for a way to load a program in memory for fast start time I found preload.sourceforge.net I then kept looking and found CentOS 5 has readahead_early and readahead_later. I have (2) questions. 1) the /etc/readahead.d/default.later file has firefox 1.5 preloads mentioned. That seems REALLY old. shouldnt that be updated? 2) can I just add the path to oowriter to /etc/readahead.d/default.later and oowriter will be ready all the time to just run from memory and wont have to load from disk? Is there a /etc/readahead.d/local type file to add oowriter to instead of default.later? Thanks, Jerry

1 1

No entry in /var/log/boot.log
by Rod Rook 01 Nov '09

01 Nov '09

I installed CentOS 5.3 on Oct 27, 2009 and immediately updated it to 5.4. I had not paid attention to this boot log until yesterday when I decided to take a look to do some trouble shooting. Oct 27 13:16:24 localhost NET[3797]: /sbin/dhclient-script : updated >> /etc/resolv.conf > > Oct 27 13:16:29 localhost NET[4059]: >> /etc/sysconfig/network-scripts/ifup-post : updated /etc/resolv.conf > > This entry was probably made right after the fresh installation. I've done searches on the Internet for answers for this problem and the only thing I've found is that I am not the only one with this problem. But no body has offered any definite solution for it. I even posted the same question in the CentOS forum and haven't got any reply. >From what I have read, this problem may be caused by a bug or bugs in CentOS 5.x, but I hope it is not because I am in the process of switching from Fedora 10 to CentOS 5.4 and I don't want to get disappointed. Trivial as this may be, this does not give me confidence in CentOS distribution. Can anyone come up with a solution?

6 10

Disk error (kicking from MD) during smartctl -t short
by happymaster23 01 Nov '09

01 Nov '09

Hello, I started smartctl -t short of disk in RAID1, but during this operation this disk was kicked from RAID (only from one MD of three). /var/log/messages: Nov 1 16:45:45 server kernel: ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 Nov 1 16:45:45 server kernel: ata1.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 0 Nov 1 16:45:45 server kernel: res 51/04:00:38:df:f7/00:00:00:00:00/a7 Emask 0x1 (device error) Nov 1 16:45:45 server kernel: ata1.00: status: { DRDY ERR } Nov 1 16:45:45 serve kernel: ata1.00: error: { ABRT } Nov 1 16:45:45 server kernel: ata1.00: configured for UDMA/133 Nov 1 16:45:45 server kernel: ata1: EH complete Nov 1 16:45:45 server kernel: SCSI device sda: 625142448 512-byte hdwr sectors (320073 MB) Nov 1 16:45:45 server kernel: sda: Write Protect is off Nov 1 16:45:45 server kernel: SCSI device sda: drive cache: write back Nov 1 16:45:52 server kernel: ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 Nov 1 16:45:52 server kernel: ata1.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 0 Nov 1 16:45:52 server kernel: res 51/04:00:38:df:f7/00:00:00:00:00/a7 Emask 0x1 (device error) Nov 1 16:45:52 server kernel: ata1.00: status: { DRDY ERR } Nov 1 16:45:52 server kernel: ata1.00: error: { ABRT } Nov 1 16:45:52 server kernel: ata1.00: configured for UDMA/133 Nov 1 16:45:52 server kernel: ata1: EH complete Nov 1 16:45:52 server kernel: SCSI device sda: 625142448 512-byte hdwr sectors (320073 MB) Nov 1 16:45:52 server kernel: sda: Write Protect is off Nov 1 16:45:52 server kernel: SCSI device sda: drive cache: write back Nov 1 16:47:43 server kernel: ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 Nov 1 16:47:43 server kernel: ata1.00: BMDMA stat 0x25 Nov 1 16:47:43 server kernel: ata1.00: cmd ca/00:08:1f:41:1e/00:00:00:00:00/e1 tag 0 dma 4096 out Nov 1 16:47:43 server kernel: res 51/10:08:1f:41:1e/00:00:00:00:00/e1 Emask 0x81 (invalid argument) Nov 1 16:47:43 server kernel: ata1.00: status: { DRDY ERR } Nov 1 16:47:43 server kernel: ata1.00: error: { IDNF } Nov 1 16:47:43 server kernel: ata1.00: configured for UDMA/133 Nov 1 16:47:43 server kernel: sd 0:0:0:0: SCSI error: return code = 0x08000002 Nov 1 16:47:43 server kernel: sda: Current [descriptor]: sense key: Aborted Command Nov 1 16:47:43 server kernel: Add. Sense: Recorded entity not found Nov 1 16:47:43 server kernel: Nov 1 16:47:44 server kernel: Descriptor sense data with sense descriptors (in hex): Nov 1 16:47:44 server kernel: 72 0b 14 00 00 00 00 0c 00 0a 80 00 00 00 00 00 Nov 1 16:47:44 server kernel: 01 1e 41 1f Nov 1 16:47:44 server kernel: end_request: I/O error, dev sda, sector 18759967 Nov 1 16:47:44 server kernel: raid1: Disk failure on sda1, disabling device. Nov 1 16:47:44 server kernel: Operation continuing on 1 devices Nov 1 16:47:44 server kernel: ata1: EH complete Nov 1 16:47:44 server kernel: SCSI device sda: 625142448 512-byte hdwr sectors (320073 MB) Nov 1 16:47:44 server kernel: sda: Write Protect is off Nov 1 16:47:44 server kernel: SCSI device sda: drive cache: write back Nov 1 16:47:44 server kernel: RAID1 conf printout: Nov 1 16:47:44 server kernel: --- wd:1 rd:2 Nov 1 16:47:44 server kernel: disk 0, wo:1, o:0, dev:sda1 Nov 1 16:47:44 server kernel: disk 1, wo:0, o:1, dev:sdb1 Nov 1 16:47:44 server kernel: RAID1 conf printout: Nov 1 16:47:44 server kernel: --- wd:1 rd:2 Nov 1 16:47:44 server kernel: disk 1, wo:0, o:1, dev:sdb1 And output of smarctl -all: === START OF INFORMATION SECTION === Device Model: WDC WD3201ABYS-01B9A0 Serial Number: Firmware Version: 13.01C02 User Capacity: 320 072 933 376 bytes Device is: Not in smartctl database [for details use: -P showall] ATA Version is: 8 ATA Standard is: Exact ATA specification draft version not indicated Local Time is: Sun Nov 1 19:26:47 2009 CET SMART support is: Available - device has SMART capability. SMART support is: Enabled === START OF READ SMART DATA SECTION === SMART overall-health self-assessment test result: PASSED General SMART Values: Offline data collection status: (0x84) Offline data collection activity was suspended by an interrupting command from host. Auto Offline Data Collection: Enabled. Self-test execution status: ( 0) The previous self-test routine completed without error or no self-test has ever been run. Total time to complete Offline data collection: (8400) seconds. Offline data collection capabilities: (0x7b) SMART execute Offline immediate. Auto Offline data collection on/off support. Suspend Offline collection upon new command. Offline surface scan supported. Self-test supported. Conveyance Self-test supported. Selective Self-test supported. SMART capabilities: (0x0003) Saves SMART data before entering power-saving mode. Supports SMART auto save timer. Error logging capability: (0x01) Error logging supported. General Purpose Logging supported. Short self-test routine recommended polling time: ( 2) minutes. Extended self-test routine recommended polling time: ( 100) minutes. Conveyance self-test routine recommended polling time: ( 5) minutes. SCT capabilities: (0x303f) SCT Status supported. SCT Feature Control supported. SCT Data Table supported. SMART Attributes Data Structure revision number: 16 Vendor Specific SMART Attributes with Thresholds: ID# ATTRIBUTE_NAME FLAG VALUE WORST THRESH TYPE UPDATED WHEN_FAILED RAW_VALUE 1 Raw_Read_Error_Rate 0x000f 200 200 051 Pre-fail Always - 0 3 Spin_Up_Time 0x0003 156 156 021 Pre-fail Always - 5183 4 Start_Stop_Count 0x0032 100 100 000 Old_age Always - 82 5 Reallocated_Sector_Ct 0x0033 200 200 140 Pre-fail Always - 0 7 Seek_Error_Rate 0x000e 200 200 000 Old_age Always - 0 9 Power_On_Hours 0x0032 081 081 000 Old_age Always - 14329 10 Spin_Retry_Count 0x0012 100 253 000 Old_age Always - 0 11 Calibration_Retry_Count 0x0012 100 253 000 Old_age Always - 0 12 Power_Cycle_Count 0x0032 100 100 000 Old_age Always - 82 192 Power-Off_Retract_Count 0x0032 200 200 000 Old_age Always - 58 193 Load_Cycle_Count 0x0032 200 200 000 Old_age Always - 82 194 Temperature_Celsius 0x0022 123 106 000 Old_age Always - 24 196 Reallocated_Event_Count 0x0032 200 200 000 Old_age Always - 0 197 Current_Pending_Sector 0x0012 200 200 000 Old_age Always - 0 198 Offline_Uncorrectable 0x0010 200 200 000 Old_age Offline - 0 199 UDMA_CRC_Error_Count 0x003e 200 200 000 Old_age Always - 0 200 Multi_Zone_Error_Rate 0x0008 200 200 000 Old_age Offline - 0 SMART Error Log Version: 1 ATA Error Count: 5 CR = Command Register [HEX] FR = Features Register [HEX] SC = Sector Count Register [HEX] SN = Sector Number Register [HEX] CL = Cylinder Low Register [HEX] CH = Cylinder High Register [HEX] DH = Device/Head Register [HEX] DC = Device Command Register [HEX] ER = Error register [HEX] ST = Status register [HEX] Powered_Up_Time is measured from power on, and printed as DDd+hh:mm:SS.sss where DD=days, hh=hours, mm=minutes, SS=sec, and sss=millisec. It "wraps" after 49.710 days. Error 5 occurred at disk power-on lifetime: 14329 hours (597 days + 1 hours) When the command that caused the error occurred, the device was doing SMART Offline or Self-test. After command completion occurred, registers were: ER ST SC SN CL CH DH -- -- -- -- -- -- -- 10 51 08 a7 4a 1e e1 Error: IDNF at LBA = 0x011e4aa7 = 18762407 Commands leading to the command that caused the error were: CR FR SC SN CL CH DH DC Powered_Up_Time Command/Feature_Name -- -- -- -- -- -- -- -- ---------------- -------------------- ca 00 08 a7 4a 1e e1 0a 45d+04:44:26.835 WRITE DMA ca 00 08 3f 14 00 e2 0a 45d+04:44:26.816 WRITE DMA Error 4 occurred at disk power-on lifetime: 14326 hours (596 days + 22 hours) When the command that caused the error occurred, the device was doing SMART Offline or Self-test. After command completion occurred, registers were: ER ST SC SN CL CH DH -- -- -- -- -- -- -- 10 51 08 1f 41 1e e1 Error: IDNF at LBA = 0x011e411f = 18759967 Commands leading to the command that caused the error were: CR FR SC SN CL CH DH DC Powered_Up_Time Command/Feature_Name -- -- -- -- -- -- -- -- ---------------- -------------------- ca 00 08 1f 41 1e e1 0a 45d+02:30:44.518 WRITE DMA ca 00 08 3f 14 00 e2 0a 45d+02:30:44.504 WRITE DMA SMART Self-test log structure revision number 1 Num Test_Description Status Remaining LifeTime(hours) LBA_of_first_error # 1 Short offline Completed without error 00% 14329 - # 2 Short offline Completed without error 00% 14329 - # 3 Extended offline Completed without error 00% 14328 - # 4 Short offline Completed without error 00% 14326 - SMART Selective self-test log data structure revision number 1 SPAN MIN_LBA MAX_LBA CURRENT_TEST_STATUS 1 0 0 Not_testing 2 0 0 Not_testing 3 0 0 Not_testing 4 0 0 Not_testing 5 0 0 Not_testing Selective self-test flags (0x0): After scanning selected spans, do NOT read-scan remainder of disk. If Selective self-test is pending on power-up, resume after 0 minute delay. This device was kicked from MD during #4 and #2 short test. Second HDD (same as this problematic) is without errors. Thank you for you help

1 0

relatime in plus kernel
by Yuji Tsuchimoto 01 Nov '09

01 Nov '09

Dear CentOS lovers, Is someone interested in the linux-2.6-smarter-relatime.patch for centosplus kernel? This patch solves disk I/O performance dramatically on servers, And recent distributions (fedora9 and later, etc.) and official kernel applies it. RHEL6 may include it, but RHEL5 is not. How about the linux-2.6-smarter-relatime.patch? Best Regards, Yuji

3 5

CentOS 5.4: yum-priorities seems to be MIA
by Boris Epstein 01 Nov '09

01 Nov '09

Hi all, I just installed 5.4 on a machine here... All seems running fine, except I decided to put on the extra repositories - and as usual I decided to install yum-priorities (as directed here: http://wiki.centos.org/AdditionalResources/Repositories/RPMForge ) but it seems like this package is nowhere to be found. Does anybody know why this would be? Thanks. Boris.

3 3

iptables -d fqdn instead of IP
by Marcus Moeller 01 Nov '09

01 Nov '09

Hi all, does it work to define iptables rules with a fqdn as destination instead of an IP address? Or is it useful to resolve the name first using e.g. nslookup, writing the result to a variable which is then used within the -d statement? Best Regards Marcus

5 8

Interrupting Yum Update
by Lee Perez 01 Nov '09

01 Nov '09

Hi All, Quick question, I just finished googling and found the thread that is dealing with the rpmdup_remover.sh script, and thanks to everyone that was involved in this. I followed the following threads: http://www.opensubscriber.com/message/centos@centos.org/11086209.html http://www.centos.org/modules/newbb/viewtopic.php?viewmode=flat&topic_id=17… Which lead me to the following link and the script: http://www.centos.org/modules/newbb/viewtopic.php?topic_id=10139&forum=27&p… I started an update at about 5pm on the 30th and here it is 2:30 in the morning on the 31st. I want to kill this update and start over. I usually get around 155 KB/s now I'm getting 455 B/s. I do believe it is the mirror that I am connected to. I just want to make sure that by using the above mentioned script that I am going the right way. Just looking for a little reassurance before I do it. If I don't I don't think this thing will finish until sometime next week :-) and that is a bit long. Thanks!! Lee Perez

3 3

5.4 kernel versions?
by Rob Kampen 01 Nov '09

01 Nov '09

Please excuse a possibly dumb question. Prior to the release of CentOS 5.4 I believe two updated 5.4 kernels were released as part of 5.3 2.6.18-164.el5 and 2.6.18-164.2.1.el5 Now that 5.4 is released we have just the 2.6.18-164.el5 kernel. Now the dumb question - what happened to the updated kernel? I now have workstations running 5.4 with the 164.2.1.el5 as they get yum update run regularly, however I do not reboot my servers as often and now find these do not have the later kernel. If some kind soul would please enlighten me..... Rob

5 6

how to set default proxy?
by Eugeneapolinary Ju 31 Oct '09

31 Oct '09

hi I know that I could use ssh tunneling: ssh -fND localhost:6000 SOMEBODY(a)192.168.56.5 -p PORTNUMBER to surf the web through another machines internet connection -> I just need to set Firefox to use proxy 6000. But: How can I set that on the client side, to e.g.: ping through the machine with openssh-server? Not just setting Firefox to use port 6000. Is there any method for setting the default proxy in Linux, so that if I use wget, I will download through the ssh tunnel? Thank you

3 2

authorized_keys command=""
by happymaster23 31 Oct '09

31 Oct '09

Hello, as I have read manual, if I use in file authorized_keys option command="" with some command, no other commands will be permitted. I have tried it, created authorized_keys2 for root and added there command="rdiff-backup --server" and after that tried to login. Thit command was executed, but I was normally able to supply other comand as root. Can you tell me why? Thank you Martin

2 2

Centos 5.4 kernels for NFS4
by Gerhard Schneider 31 Oct '09

31 Oct '09

Do CentOS 5.4 users still have to use the RedHat preliminary kernels (http://people.redhat.com/jlayton/) for getting a NFSv4 safe kernel or have the patches been incorporated into CentosPlus kernels? Or is kernel-2.6.18-164.3.1.el5 somewhere in the queue? Thanks in advance! GS -- Gerhard Schneider Institute of Lightweight Design and e-Mail: gs(a)ilsb.tuwien.ac.at Structural Biomechanics (E317) Tel.: +43 664 60 588 3171 Vienna University of Technology / Austria Fax: +43 1 58801 31799 A-1040 Wien, Gusshausstrasse 27-29 http://www.ilsb.tuwien.ac.at/~gs/

4 3

HP Proliant ML G6 problem.
by Rafał Radecki 31 Oct '09

31 Oct '09

Hi all. I try to install CentOS 4 x64 on HP Proliant ML G6. Anaconda doesn't correctly recognise the DVD-RW drive despite the fact that the installation starts from it. Also when I choose network (HTTP/FTP) installation type the ethernet card isn't correctly recognized. On HP website there aren't any drivers to use during installation only rpms and source rpms which (as I think) are useless at install time and can be used only when the system is installed. I also tried CentOS 5 x64 and there are no problems with my hardware then, the installation is ok. DVD-RW is: HP Super Multi DVD Rewriter GH40L E2C NIC is: HP NC107i Integrated PCI Express Gigabit Server Adapter What should I do? Where to start from to solve the problem? With regards, R.

3 4

Driver compilation howto.
by Rafał Radecki 31 Oct '09

31 Oct '09

Hi all. I currently have to add some drivers during the installation process for CentOS 4.4 (I mus use this release). As I've heard I need first to compile the drivers under the same kernel which will be used during install time. What should I do then? Could anyone provide a link to an appropriate howto? With regards, R.

3 5

CentOS-announce Digest, Vol 56, Issue 10
by centos-announce-request＠centos.org 31 Oct '09

31 Oct '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:1536 Moderate CentOS 4 i386 pidgin - security update (Tru Huynh) 2. CESA-2009:1536 Moderate CentOS 4 x86_64 pidgin - security update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 30 Oct 2009 22:27:32 +0100 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2009:1536 Moderate CentOS 4 i386 pidgin - security update To: centos-announce(a)centos.org Message-ID: <20091030212732.GF10347(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2009:1536 pidgin security update for CentOS 4 i386: https://rhn.redhat.com/errata/RHSA-2009-1536.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/finch-2.6.3-2.el4.i386.rpm updates/i386/RPMS/finch-devel-2.6.3-2.el4.i386.rpm updates/i386/RPMS/libpurple-2.6.3-2.el4.i386.rpm updates/i386/RPMS/libpurple-devel-2.6.3-2.el4.i386.rpm updates/i386/RPMS/libpurple-perl-2.6.3-2.el4.i386.rpm updates/i386/RPMS/libpurple-tcl-2.6.3-2.el4.i386.rpm updates/i386/RPMS/pidgin-2.6.3-2.el4.i386.rpm updates/i386/RPMS/pidgin-devel-2.6.3-2.el4.i386.rpm updates/i386/RPMS/pidgin-perl-2.6.3-2.el4.i386.rpm source: updates/SRPMS/pidgin-2.6.3-2.el4.src.rpm You may update your CentOS-4 i386 installations by running the command: yum update pidgin\* Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

crontab won't work
by Niki Kovacs 31 Oct '09

31 Oct '09

Hi, I have a strange problem here. I have two servers, one dedicated webserver, and a local backup server. On the webserver I have this : [root@12569hpv163154:~] # crontab -l 00 22 * * * /usr/local/bin/sauvegarde-pmbccps.sh This launches a backup script every day at 22:00, and it works as expected. Now here's what I have on the local backup server : [root@grossebertha:~] # crontab -l 24 17 * * * /usr/local/bin/sauvegarde.sh Here, the script /usr/local/bin/sauvegarde.sh basically launches an incremental backup with rsync over SSH. The script is executable OK, it works very well when launched by hand on the command line... except cron won't start it. Here for example I tried to launch it on 17:24. Nothing. I checked the machine 'date', it's OK. Now I don't have the slightest clue why this doesn't work. What's the magic word here ? Cheers, Niki

4 4

RAID 10 on Install?
by ML 31 Oct '09

31 Oct '09

Hi All, How can I RAID 10 on install? (the names myRAID1 and myRAID2 are just for example purposes) I select a custom layout.... /dev/sda, sdb, sdc, sdd are listed... I create a partition of Software RAID on each of sda, sdb, sdc, sdd Create a swap partition on sda? Click RAID and take sda and sdc and RAID 1 to myRAID1 Click RAID and take sdb and sdd and RAID 1 to myRAID2 Click RAID and take myRAID1 and myRAID2 and RAID0 to MYRAID This leads me down to swap. If I create swap on sda, then dont sdb, sdc, sdd then all have unused space of the size of swap on sda? What is the rule of thumb for Swap these days. Back a long time ago it was double the RAM in the machine.....but that was a long time ago, what is best now? Thanks for the chat! -Jason

4 5

Syslog do not work
by Tim_Davis＠cbca.com 31 Oct '09

31 Oct '09

Guys, attached is copy of both the i) /etc/sysconfig/syslog ii) /etc/syslog.conf I have a Centos ver5.3 The syslog is not working and also I installed Webmin, also it does not work, this is what the error is " Info Internet Explorer cannot display the webpage " icon Thanks 1. [root@bart ~]# cat /etc/sysconfig/syslog # Options to syslogd # -m 0 disables 'MARK' messages. # -r enables logging from remote machines # -x disables DNS lookups on messages recieved with -r # See syslogd(8) for more details SYSLOGD_OPTIONS="-m0 -r" # Options to klogd # -2 prints all kernel oops messages twice; once for klogd to decode, and # once for processing with 'ksymoops' # -x disables all klogd processing of oops messages entirely # See klogd(8) for more details KLOGD_OPTIONS="-x" # SYSLOG_UMASK=077 # set this to a umask value to use for all log files as in umask(1). # By default, all permissions are removed for "group" and "other". 2 [root@bart ~]# cat /etc/syslog.conf # Log all kernel messages to the console. # Logging much else clutters up the screen. #kern.* /dev/console # Log anything (except mail) of level info or higher. # Don't log private authentication messages! *.info;mail.none;news.none;authpriv.none;cron.none /var/log/messages # The authpriv file has restricted access. authpriv.* /var/log/secure # Log all the mail messages in one place. mail.* -/var/log/maillog # TIM stuff *.*;local7.debug;local4.warnings /var/log/tim # Cisco Stuff local7.* /var/log/cisco # Log cron stuff cron.* /var/log/cron # Everybody gets emergency messages *.emerg * # Save news errors of level crit and higher in a special file. uucp,news.crit /var/log/spooler # Save boot messages also to boot.log local7.* /var/log/boot.log # # INN # news.=crit /var/log/news/news.crit news.=err /var/log/news/news.err news.notice /var/log/news/news.notice [root@bart ~]# 3 [root@bart ~]# ls anaconda-ks.cfg install.log webmin-1.490-1.noarch.rpm Desktop install.log.syslog firstboot.1256071953.31 tim.txt [root@bart ~]# ===================================== Tim Davis PMP, CCNP, CNE-5 CBCA 10900 Hampshire Ave. S. Bloomington, MN 55438 tim_davis(a)cbca.com http://twitter.com/tdalago 952-903-6304 ===================== NOTICE: The information contained in this electronic message, and any attachments accompanying this transmission, may be legally privileged and/or confidential and protected health information. This information is intended only for the use of the individual(s) and/or entity identified above. The authorized recipient of this information is prohibited from disclosing this information to any other party unless required to do so by law or regulation and is required to protect the information after its stated need has been fulfilled. If you are not the intended recipient, or an employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any disclosure, printing, copying, forwarding, or distributing of this information is strictly prohibited. If you have received this communication in error, please notify the sender immediately, by telephone or return fax/email, to advise of wrongful receipt and confirm your understanding of this Notice. Thank You.

3 2

Problem YUM Centos 5
by Adriano Frare 30 Oct '09

30 Oct '09

Dear Friends, Today , I ran command yum update and I received follow error below. ======================= BEGIN ========= Loaded plugins: fastestmirror Determining fastest mirrors Traceback (most recent call last): File "/usr/bin/yum", line 29, in ? yummain.user_main(sys.argv[1:], exit_code=True) File "/usr/share/yum-cli/yummain.py", line 229, in user_main errcode = main(args) File "/usr/share/yum-cli/yummain.py", line 104, in main result, resultmsgs = base.doCommands() File "/usr/share/yum-cli/cli.py", line 343, in doCommands return self.yum_cli_commands[self.basecmd].doCommand(self, self.basecmd, self.extcmds) File "/usr/share/yum-cli/yumcommands.py", line 554, in doCommand return base.search(extcmds) File "/usr/share/yum-cli/cli.py", line 691, in search for (po, keys, matched_value) in matching: File "/usr/lib/python2.4/site-packages/yum/__init__.py", line 1593, in searchGenerator for sack in self.pkgSack.sacks.values(): File "/usr/lib/python2.4/site-packages/yum/__init__.py", line 591, in <lambda> pkgSack = property(fget=lambda self: self._getSacks(), File "/usr/lib/python2.4/site-packages/yum/__init__.py", line 434, in _getSacks self.repos.populateSack(which=repos) File "/usr/lib/python2.4/site-packages/yum/repos.py", line 223, in populateSack self.doSetup() File "/usr/lib/python2.4/site-packages/yum/repos.py", line 71, in doSetup self.ayum.plugins.run('postreposetup') File "/usr/lib/python2.4/site-packages/yum/plugins.py", line 176, in run func(conduitcls(self, self.base, conf, **kwargs)) File "/usr/lib/yum-plugins/fastestmirror.py", line 181, in postreposetup_hook all_urls = FastestMirror(all_urls).get_mirrorlist() File "/usr/lib/yum-plugins/fastestmirror.py", line 333, in get_mirrorlist self._poll_mirrors() File "/usr/lib/yum-plugins/fastestmirror.py", line 376, in _poll_mirrors pollThread.start() File "/usr/lib/python2.4/threading.py", line 416, in start _start_new_thread(self.__bootstrap, ()) thread.error: can't start new thread ============= END ========================= How I do solve it? Thnaks Adriano

6 5

Stripe vs Cylinder alignement...
by John Doe 30 Oct '09

30 Oct '09

Hi, I modified my kickstart to do some custom partioning and formating in a pre-install script. I am trying to align the partitions on the RAID stripe (and format with a correct stride). But, sfdisk complains that it does not start/end on a cylinder boundary (used -L option to limit complaining). Since the cylinder size is not a multiple of the stripe size, I cannot align on both. I tried to align the begining on the stripe and the end on the end of a cylinder, but sfdisk still compains... Basicaly, I have a 128KB (256 sectors) stripe, and 255*32 = 8160 sectors cylinders. What I am doing is: begin = ( begin / 256 ) * 256 end = ( end / 8160 ) * 8160 -1 So, for my first partition (96MB): begin=256 size = ( ( 96 * 1024 * 2 ) / 8160 ) * 8160 = 195840 sectors end = 195840 - 1 - 256 = 195583 Any idea what I am doing wrong in my calculations or logic? Thx, JD

4 4

CentOS-announce Digest, Vol 56, Issue 9
by centos-announce-request＠centos.org 30 Oct '09

30 Oct '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:1535 Moderate CentOS 3 i386 pidgin - security update (Tru Huynh) 2. CESA-2009:1535 Moderate CentOS 3 x86_64 pidgin - security update (Tru Huynh) 3. CEBA-2009:1468 CentOS 5 i386 autofs Update (Karanbir Singh) 4. CEBA-2009:1468 CentOS 5 x86_64 autofs Update (Karanbir Singh) 5. CEEA-2009:1435 CentOS 5 i386 cman Update (Karanbir Singh) 6. CEEA-2009:1435 CentOS 5 x86_64 cman Update (Karanbir Singh) 7. CEBA-2009:1516 CentOS 5 i386 cman Update (Karanbir Singh) 8. CEBA-2009:1516 CentOS 5 x86_64 cman Update (Karanbir Singh) 9. CEBA-2009:1511 CentOS 5 i386 coreutils Update (Karanbir Singh) 10. CEBA-2009:1511 CentOS 5 x86_64 coreutils Update (Karanbir Singh) 11. CESA-2009:1513 Moderate CentOS 5 i386 cups Update (Karanbir Singh) 12. CESA-2009:1513 Moderate CentOS 5 x86_64 cups Update (Karanbir Singh) 13. CESA-2009:1459 Important CentOS 5 i386 cyrus-imapd Update (Karanbir Singh) 14. CESA-2009:1459 Important CentOS 5 x86_64 cyrus-imapd Update (Karanbir Singh) 15. CEBA-2009:1515 CentOS 5 i386 device-mapper-multipath Update (Karanbir Singh) 16. CEBA-2009:1515 CentOS 5 x86_64 device-mapper-multipath Update (Karanbir Singh) 17. CESA-2009:1471 Important CentOS 5 i386 elinks Update (Karanbir Singh) 18. CESA-2009:1471 Important CentOS 5 x86_64 elinks Update (Karanbir Singh) 19. CESA-2009:1427 Moderate CentOS 5 i386 fetchmail Update (Karanbir Singh) 20. CESA-2009:1427 Moderate CentOS 5 x86_64 fetchmail Update (Karanbir Singh) 21. CESA-2009:1451 Moderate CentOS 5 i386 freeradius Update (Karanbir Singh) 22. CESA-2009:1451 Moderate CentOS 5 x86_64 freeradius Update (Karanbir Singh) 23. CEBA-2009:1533 CentOS 5 i386 gcc Update (Karanbir Singh) 24. CEBA-2009:1533 CentOS 5 x86_64 gcc Update (Karanbir Singh) 25. CESA-2009:1502 Important CentOS 5 i386 kdegraphics Update (Karanbir Singh) 26. CESA-2009:1502 Important CentOS 5 x86_64 kdegraphics Update (Karanbir Singh) 27. CESA-2009:1455 Moderate CentOS 5 x86_64 kernel Update (Karanbir Singh) 28. CESA-2009:1455 Moderate CentOS 5 i386 kernel Update (Karanbir Singh) 29. CEBA-2009:1422 CentOS 5 i386 ktune Update (Karanbir Singh) 30. CEBA-2009:1422 CentOS 5 x86_64 ktune Update (Karanbir Singh) 31. CESA-2009:1465 Important CentOS 5 i386 kvm Update (Karanbir Singh) 32. CESA-2009:1465 Important CentOS 5 x86_64 kvm Update (Karanbir Singh) 33. CEBA-2009:1488 CentOS 5 i386 kvm Update (Karanbir Singh) 34. CEBA-2009:1488 CentOS 5 x86_64 kvm Update (Karanbir Singh) 35. CEBA-2009:1525 CentOS 5 i386 libuser Update (Karanbir Singh) 36. CEBA-2009:1525 CentOS 5 x86_64 libuser Update (Karanbir Singh) 37. CEBA-2009:1424 CentOS 5 i386 libvirt Update (Karanbir Singh) 38. CEBA-2009:1424 CentOS 5 x86_64 libvirt Update (Karanbir Singh) 39. CEBA-2009:1421 CentOS 5 i386 libvirt-cim Update (Karanbir Singh) 40. CEBA-2009:1421 CentOS 5 x86_64 libvirt-cim Update (Karanbir Singh) 41. CEBA-2009:1476 CentOS 5 x86_64 lvm2 Update (Karanbir Singh) 42. CEBA-2009:1476 CentOS 5 i386 lvm2 Update (Karanbir Singh) 43. CEBA-2009:1475 CentOS 5 i386 lvm2-cluster Update (Karanbir Singh) 44. CEBA-2009:1475 CentOS 5 x86_64 lvm2-cluster Update (Karanbir Singh) 45. CESA-2009:1452 Moderate CentOS 5 i386 neon Update (Karanbir Singh) 46. CESA-2009:1452 Moderate CentOS 5 x86_64 neon Update (Karanbir Singh) 47. CEBA-2009:1437 CentOS 5 i386 net-snmp Update (Karanbir Singh) 48. CEBA-2009:1437 CentOS 5 x86_64 net-snmp Update (Karanbir Singh) 49. CESA-2009:1463 Moderate CentOS 5 i386 newt Update (Karanbir Singh) 50. CESA-2009:1463 Moderate CentOS 5 x86_64 newt Update (Karanbir Singh) 51. CEBA-2009:1527 CentOS 5 i386 nss_ldap Update (Karanbir Singh) 52. CEBA-2009:1474 CentOS 5 i386 openais Update (Karanbir Singh) 53. CEBA-2009:1527 CentOS 5 x86_64 nss_ldap Update (Karanbir Singh) 54. CEBA-2009:1474 CentOS 5 x86_64 openais Update (Karanbir Singh) 55. CEBA-2009:1487 CentOS 5 i386 OpenIPMI Update (Karanbir Singh) 56. CEBA-2009:1487 CentOS 5 x86_64 OpenIPMI Update (Karanbir Singh) 57. CESA-2009:1470 Moderate CentOS 5 i386 openssh Update (Karanbir Singh) 58. CESA-2009:1470 Moderate CentOS 5 x86_64 openssh Update (Karanbir Singh) 59. CESA-2009:1536 Moderate CentOS 5 i386 pidgin Update (Karanbir Singh) 60. CESA-2009:1536 Moderate CentOS 5 x86_64 pidgin Update (Karanbir Singh) 61. CESA-2009:1504 Important CentOS 5 x86_64 poppler Update (Karanbir Singh) 62. CESA-2009:1504 Important CentOS 5 i386 poppler Update (Karanbir Singh) 63. CESA-2009:1484 Moderate CentOS 5 i386 postgresql Update (Karanbir Singh) 64. CEBA-2009:1489 CentOS 5 i386 qspice Update (Karanbir Singh) 65. CESA-2009:1484 Moderate CentOS 5 x86_64 postgresql Update (Karanbir Singh) 66. CEBA-2009:1489 CentOS 5 x86_64 qspice Update (Karanbir Singh) 67. CESA-2009:1529 Moderate CentOS 5 i386 samba Update (Karanbir Singh) 68. CESA-2009:1529 Moderate CentOS 5 x86_64 samba Update (Karanbir Singh) 69. CEBA-2009:1495 CentOS 5 i386 selinux-policy Update (Karanbir Singh) 70. CEBA-2009:1494 CentOS 5 i386 tcsh Update (Karanbir Singh) 71. CEBA-2009:1495 CentOS 5 x86_64 selinux-policy Update (Karanbir Singh) 72. CEBA-2009:1494 CentOS 5 x86_64 tcsh Update (Karanbir Singh) 73. CEEA-2009:1467 CentOS 5 i386 tzdata Update (Karanbir Singh) 74. CEEA-2009:1467 CentOS 5 x86_64 tzdata Update (Karanbir Singh) 75. CEEA-2009:1532 CentOS 5 i386 tzdata Update (Karanbir Singh) 76. CEEA-2009:1532 CentOS 5 x86_64 tzdata Update (Karanbir Singh) 77. CESA-2009:1472 Moderate CentOS 5 i386 xen Update (Karanbir Singh) 78. CESA-2009:1472 Moderate CentOS 5 x86_64 xen Update (Karanbir Singh) 79. CEBA-2009:1514 CentOS 5 i386 xen Update (Karanbir Singh) 80. CEBA-2009:1514 CentOS 5 x86_64 xen Update (Karanbir Singh) 81. CESA-2009:1428 Moderate CentOS 5 i386 xmlsec1 Update (Karanbir Singh) 82. CESA-2009:1428 Moderate CentOS 5 x86_64 xmlsec1 Update (Karanbir Singh) 83. CESA-2009:1453 Moderate CentOS 5 i386 pidgin Update (Karanbir Singh) 84. CESA-2009:1453 Moderate CentOS 5 x86_64 pidgin Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Thu, 29 Oct 2009 20:14:53 +0100 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2009:1535 Moderate CentOS 3 i386 pidgin - security update To: centos-announce(a)centos.org Message-ID: <20091029191453.GA12638(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2009:1535 pidgin security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2009-1535.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/pidgin-1.5.1-6.el3.i386.rpm source: updates/SRPMS/pidgin-1.5.1-6.el3.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update pidgin Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

CentOS 5.4 :: partitionable RAID1
by Adrian Sevcenco 30 Oct '09

30 Oct '09

Hi! Did anyone tried this on 5.4? having a look on http://wiki.centos.org/HowTos/Install_On_Partitionable_RAID1 is would seem that that mkinitrd patch is no longer required. Can someone ack this? Thanks, Adrian

2 1

Default ACL question (EXECUTE BIT)
by Jorge Fábregas 30 Oct '09

30 Oct '09

Hello everyone, I'm doing some tests with ACL's and even though I can create a "default" ACL for a directory (that includes "rwx" for the default owner), when I finally create a file wihin that directory the execute bit is chopped off: [joe@machine ~]$ mkdir mydir [joe@machine ~]$ setfacl -d -m u::rwx,g::-,o::- mydir/ [joe@machine ~]$ cd mydir [joe@machine mydir]$ touch testFile.txt [joe@machine mydir]$ ls -l testFile.txt -rw------- 1 joe joe 0 Oct 29 21:14 testFile.txt I don't think umask is involved here. As far as I know umask isn't involved when dealing with default ACL's. Anyhow, I'm pretty sure this is by design (security-wise). Is there any way to override this behaviour? Thanks, Jorge

3 3

RAM errors after kernel-update
by Michael Schumacher 30 Oct '09

30 Oct '09

Hi, I updated a server yesterday from "kernel 2.6.18-128.7.1.el5xen" to "kernel 2.6.18-164.el5xen" After rebooting, my message log is flooded every second or so with this error messages: Oct 6 14:52:20 xenserver1 kernel: EDAC MC0: UE row 0, channel-a= 0 channel-b= 1 labels "-": NON-FATAL recoverable (Branch=0 DRAM-Bank=0 Buffer ID = 0 RDWR=Read RAS=0 CAS=0 NON-FATAL recovera ble Err=0x2000 (FB-DIMM Configuration Write error on first attempt)) and Oct 6 15:17:23 xenserver1 kernel: EDAC MC0: CE row 0, channel 0, label "": Corrected error (Branch=0 DRAM-Bank=0 RDWR=Read RAS=0 CAS=0, CE Err=0x10000 (Correctable Non-Mirrored Demand Data E CC)) The machine is a new Tyan S5397 mobo with 16GB Kingston RAM KVR667D2D4F5K2/8G Removing and replacing memory to different locations doesn't make any difference. After some digging, I noticed that the new kernel has added support for the i5400 chipset. I found some reference that the new kernel has this error reporting capability the old one hadn't. Question1: how many recoverable RAM errors are acceptable? Question2: The error appears always with the same id in the error message. Mobo problem? Question3: Are there any recommended BIOS settings to operate the RAM slower to see if the problem disappears? Question4: Any other proposals. Being located in Germany makes the "just return it to the dealer" proposal quite unattractive. best regards --- Michael Schumacher PAMAS Partikelmess- und Analysesysteme GmbH Dieselstr.10, D-71277 Rutesheim Tel +49-7152-99630 Fax +49-7152-996333 Geschäftsführer: Gerhard Schreck Handelsregister B Stuttgart HRB 252024

4 5

resolv.conf rewritten every reboot. How to figure out who and why?
by Dave 30 Oct '09

30 Oct '09

My machine has a static IP, with dhcp and IPv6 disabled. Every time I reboot, some process rewrites /etc/resolv.conf, including a comment about dhcpclient. The only package I have installed that shows up in "rpm -qa|grep -i dhcp" is dhcpv6-client-1.0.10-16.el5, and nothing in there is named dhcpclient. I'd like to figure out what software is rewriting this file and why. man 5 resolv.conf and man resolver are unhelpful in this case. rpm reports /etc/resolv.conf is not owned by any package. At this point, I am as (or more) interested in pointers regarding how to find the answer as I am in the actual answer. Please teach me to fish. mahalo, Dave

19 49

Re: [CentOS] printers... (HP)
by Per Qvindesland 30 Oct '09

30 Oct '09

Hi What is the model number? Regards Per Qvindesland At Thursday, 29-10-2009 on 20:27 "Robert" wrote: m.roth(a)5-cent.us wrote: > I can't remember if I asked here - I've got more than one printer, HP, > laser, builtin JetDirect. When I go there in a browser, I see the basic > thing, but I can't get to the networking page. It says that it wants a > password, no user name. It doesn't accept anything. Last week, a co-worker > reset one to factory defaults... and it comes up with the same thing. > Looking around on the Web, I don't see anything about a default password. > > Clues for the poor? > > mark > You might find something at http://articles.techrepublic.com.com/5100-10878_11-1054861.html or even at http://www.irongeek.com/i.php?page=security/networkprinterhacking No guarantee! I use Brother. _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

2 1

Benefits of VMWare 2.0 over 1.x?
by MHR 30 Oct '09

30 Oct '09

I've been running VMWare Server 1.x for some time now, currently on 1.08, and I've been pretty satisfied with it. I was wondering if any of you fellow VMWare users are seeing any significant benefit to moving to the 2.0 release. I'm running CentOS 5.4 with Linux 2.6.18-164.el5 #1 SMP x86_64 on an AMD 7750 64x2 with 4GB of RAM.... Thanks. mhr

5 4

question about mounting external USB HD
by Ivan Arteaga 30 Oct '09

30 Oct '09

Hello, I have a server running CentOS 4.7 and I want to add a new USB-HD for backup some data. I made the file system as ext3 with the command: / mkfs -t ext3 /dev/sdb1/ After that I did add a new Volume Group and Logical Volume (/VolGrup01-LogVol01) /on that file system and mounted it as /backup. It worked fine but when I did reboot the server It wont mount /backup and I got the following error even after the system boots and I try to mount it manually: /mount: special device /dev/VolGrup01/LogVol01 does not exist/ I will appreciate any comment or suggestion about the best way to get through this. Regards, --Ivan.

2 3

combining iptables parameters
by Marcus Moeller 30 Oct '09

30 Oct '09

Hi all, is there a way to combine iptables parameters like: iptables -A OUTPUT -p UDP & -p TCP -d $IP1 & -d $IP2 ? Best Regards Marcus

3 6

Upgrading Centos 5.3 -> 5.4
by Rohan Gilchrist 29 Oct '09

29 Oct '09

Still the same problems I'm afraid. I read the release notes and followed them to the letter. I'm now seeing: Finished Dependency Resolution lvm2-2.02.46-8.el5.i386 from base has depsolving problems --> Missing Dependency: device-mapper >= 1.02.32-1 is needed by package lvm2-2.02.46-8.el5.i386 (base) mkinitrd-5.1.19.6-54.i386 from base has depsolving problems --> Missing Dependency: device-mapper-multipath >= 0.4.7-9 is needed by package mkinitrd-5.1.19.6-54.i386 (base) lvm2-2.02.46-8.el5.i386 from base has depsolving problems --> Missing Dependency: device-mapper-event is needed by package lvm2-2.02.46-8.el5.i386 (base) Error: Missing Dependency: device-mapper-multipath >= 0.4.7-9 is needed by package mkinitrd-5.1.19.6-54.i386 (base) Error: Missing Dependency: device-mapper-event is needed by package lvm2-2.02.46-8.el5.i386 (base) Error: Missing Dependency: device-mapper >= 1.02.32-1 is needed by package lvm2-2.02.46-8.el5.i386 (base) You could try using --skip-broken to work around the problem You could try running: package-cleanup --problems package-cleanup --dupes rpm -Va --nofiles --nodigest I've installed package cleanup and tried the suggested combinations, except the --skip-broken option. Any thoughts are appreciated. Rohan.

2 4

printers... (HP)
by m.roth＠5-cent.us 29 Oct '09

29 Oct '09

I can't remember if I asked here - I've got more than one printer, HP, laser, builtin JetDirect. When I go there in a browser, I see the basic thing, but I can't get to the networking page. It says that it wants a password, no user name. It doesn't accept anything. Last week, a co-worker reset one to factory defaults... and it comes up with the same thing. Looking around on the Web, I don't see anything about a default password. Clues for the poor? mark

3 4

Not able to FTP since 5.4
by Bob Hoffman 29 Oct '09

29 Oct '09

I do not use ftp much lately, but my bro did and noticed we cannot ftp to the server since the upgrade. Using VSFTP. Tried rebooting but nothing. Looks like it goes through the whole process and then 'bam'. Could not find an error log that listed the error anywhere. Worked great before 5.4 update, now it does not work at all. Here is the info from cuteftp. STATUS:> Getting listing "/"... STATUS:> Connecting to FTP server 72.35.68.61:21 (ip = 72.35.68.61)... STATUS:> Socket connected. Waiting for welcome message... 220 Welcome to the server STATUS:> Connected. Authenticating... COMMAND:> USER xxxxxxxx 331 Please specify the password. COMMAND:> PASS ***** 230 Login successful. STATUS:> Login successful. COMMAND:> PWD ERROR:> Can't read from control socket. Socket error = #10054. Any ideas? Thanks. Bob

2 2

combining iptables parameters
by James B. Byrne 29 Oct '09

29 Oct '09

Message-ID: <fac47fca0910281232x71fbf92cva80095483d210db1(a)mail.gmail.com> On: Wed, 28 Oct 2009 20:32:14 +0100, Marcus Moeller <mail(a)marcus-moeller.de> wrote: > Hi all, > > is there a way to combine iptables parameters like: iptables > -A OUTPUT -p UDP & -p TCP -d $IP1 & -d $IP2 ? man iptables ... -p, --protocol [!] protocol The protocol of the rule or of the packet to check. The specified protocol can be one of tcp, udp, icmp, or all, or it can be a numeric value, representing one of these protocols or a different one. A protocol name from /etc/protocols is also allowed. A "!" argument before the protocol inverts the test. The number zero is equivalent to all. Protocol all will match with all protocols and is taken as default when this option is omitted. -s, --source [!] address[/mask] Source specification. Address can be either a network name, a hostname (please note that specifying any name to be resolved with a remote query such as DNS is a really bad idea), a network IP address (with /mask), or a plain IP address. The mask can be either a network mask or a plain number, specifying the number of 1s at the left side of the network mask. Thus, a mask of 24 is equivalent to 255.255.255.0. A "!" argument before the address specification inverts the sense of the address. The flag --src is an alias for this option. If both TCP and UDP are both to be blocked it may be inferred that no other protocol is desired to connect either, so simply not specifying any protocol will block all protocols including both TCP and UDP. If both are allowed then again there seems little purpose in blocking any others and again by not specifying any protocol you will obtain the desired result. If instead you do want to allow ICMP but nothing else then !icmp will match all protocols other than icmp. If IP1 and IP2 belong to a CIDR group and no intervening addresses are permitted access as well then a suitable netblock mask will archive the desired results. If not then each IP must be separately specified. So, something like this should work as a block for all protocols to either address: iptables -A OUTPUT -d $IP1 -j DROP iptables -A OUTPUT -d $IP2 -j DROP -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

VMware Server 2.0.1 On CentOS 5
by gene.poole＠macys.com 29 Oct '09

29 Oct '09

It's my understanding that CentOS is a carbon copy of Red Hat - with the exception of the art work. Assuming that this is true, the support matrix for VMware Server 2.0.1 states Red Hat 5.1. I cannot seem to locate a CentOS 5.1 x86-64 copy. I can get a copy of 5.3 and 5.4. If I take this route, what should I expect running VMware 2.0.1? Thanks, Gene Poole

7 11

problem with 5.4 x86_64 DVD iso?
by Greenseid, Joseph M (IS) 29 Oct '09

29 Oct '09

Hi all, I downloaded the 5.4 x86_64 DVD ISO this morning (CentOS-5.4-x86_64-bin-DVD.iso). However, the md5sum and sha1sums both don't match what's in the md5sum.txt or the release notes (http://wiki.centos.org/Manuals/ReleaseNotes/CentOS5.4) I downloaded two ISOs from two different mirrors, RIT and ANL, and both ISOs have the same checksums (match each other), which are different from the published md5sums and sha1sums. Was there a problem with the dissemination of the ISOs to the mirrors? I could understand one mirror having a problem, but two mirrors with the exact same broken image seems like it may be an upstream problem? Anyone have any idea what's up? Thanks, --Joe

2 2

vnc for non-root
by ken 29 Oct '09

29 Oct '09

At work I've been asked to set up vnc for a remote user (a vendor sysadmin to install 3d party software we've purchased). Of course I'm a bit skittish about allowing root access to this. Is there a way to configure vnc so that root cannot log in through it...? Or do I have to use some other utility to deny root access (e.g., securetty). Thanks, folks. -- War is a failure of the imagination. --William Blake

4 7

Infrastructure HELP!
by ML 29 Oct '09

29 Oct '09

Hi Everyone, I started a social networking site and I am getting ready to go live next week. I have limited fund as I am not funded yet (although hopefully soon). I have an extra Mac Pro (I know, how can I possibly call a Mac Pro dual 2.8 quad core with 16gb RAM extra). So Mac Pro quad Core, 16gb RAM, 4 x 1tb RAID level Seagate drives. I was going to load CentOS 5.4 on it, web, mysql etc, etc. This is really the only box I have that would handle the site it it takes off and then I would need to add more hardware and most hosting to RackSpace or something. My question is about initial setup. The 4 x 1TB drives. How to set this up for I have some protection? RAID 0+1? (striped + mirrored) I would end up with 2TB useable space. RAID 5? so what one is a hot spare? 3TB useable space? What about striping the 4 1TB and mirroring that to a 4 x 1tb External drive enclosure? I want to be sure the data is protected, but machine resources and money are limited. Thoughts are appreciated!

13 29

sudoers file
by vijay shanker 29 Oct '09

29 Oct '09

Hi all, I am planning to edit sudoers files in /etc. when i open this wiht vim command and change some thing it said "this file is read only" Is this okay to change the status of sudoers files. or any implication? please point Regards, Vijay Shanker Dubey Ph: +91-9818311884

6 10

Missing package
by Anne Wilson 29 Oct '09

29 Oct '09

The big update caused one of the rare re-starts on my mail server, so I saw the startup messages that I had forgotten about. Oct 28 10:50:04 borg2 python: [3424]: warning: python-dbus not installed. Oct 28 10:50:04 borg2 python: hp-systray[3424]: warning: Qt/PyQt 4 initialization failed. Oct 28 10:50:04 borg2 python: hp-systray[3424]: error: hp-systray requires Qt4 GUI and DBus support. Exiting. I cna't find any package python-dbus. dbus-python is installed, but hp- systray doesn't recognise that as the same thing. Is it possible to create some sort of link so that when it attempts to call python-dbus it gets dbus- python instead? Anne -- New to KDE4? - get help from http://userbase.kde.org Just found a cool new feature? Add it to UserBase

2 2

Locales and filenames
by Alfred von Campe 29 Oct '09

29 Oct '09

I have a file which contains non-ASCII characters (umlauts, accented characters, etc.) both in its filename as well as its content. The only way I have been able to see these characters is inside vim, where they are displayed correctly no matter what I have LANG set to. My default LANG is en_US.utf8, but I have tried de_DE.utf8, de_DE.iso88591, and various others. In the output of a simple ls, the characters are shown as either a simple "?" or a "?" in a box depending on what I have LANG set to, and the same is true if I use cat to display the contents. I have tried this both in an xterm as well as a gnome-terminal window on a CentOS 5.3 system. I am taking stabs in the dark here as I've never had to deal with LANG and locales before. Am I missing something obvious or is there more to it than simply setting LANG. Since I can see the characters correctly in vim, I'm sure it's not a font issue. I just want to be able to display these characters correctly with simple Linux commands like ls and cat. Thanks, Alfred

4 11

ata errors from dmesg
by Jerry Geis 29 Oct '09

29 Oct '09

dmesg is reporting ata1: translated ATA stat/err 0x51/10 to SCSI SK/ASC/ASCQ 0xb/14/00 ata1: status=0x51 { DriveReady SeekComplete Error } ata1: error=0x10 { SectorIdNotFound } My HD disk is on /dev/sda1 so I presume this is errors from the CDROM. Is there a command I can use to not do anything with the CDROM? It was just there for install. This is an older machine running 4.4 i686 . Its also remote so I just can't unplug the CDROM. If there is a command to tell the kernel to ignore the CDROM that would be great. Thanks, jerry

1 0

Scripting help please....
by Truejack 29 Oct '09

29 Oct '09

Need a scripting help to sort out a list and list all the duplicate lines. My data looks somethings like this host6:dev406mum.dd.mum.test.com:22:11:11:no host7:dev258mum.dd.mum.test.com:36:17:19:no host7:dev258mum.dd.mum.test.com:36:17:19:no host17:dev258mum.dd.mum.test.com:31:17:19:no host12:dev258mum.dd.mum.test.com:41:17:19:no host2:dev258mum.dd.mum.test.com:36:17:19:no host4:dev258mum.dd.mum.test.com:41:17:19:no host4:dev258mum.dd.mum.test.com:45:17:19:no host4:dev258mum.dd.mum.test.com:36:17:19:no I need to sort this list and print all the lines where column 3 has a duplicate entry. I need to print the whole line, if a duplicate entry exists in column 3. I tried using a combination of "sort" and "uniq" but was not successful.

9 10

vmware 2.x
by Les Mikesell 28 Oct '09

28 Oct '09

Does anyone know if the just-released vmware server 2.0.2 was supposed to fix the glibc incompatibility with RHEL/Centos 5.4? (It didn't on the first box where I tried it...). -- Les Mikesell lesmikesell(a)gmail.com

2 1

Repodata for 5.4 updates?
by Kevin White 28 Oct '09

28 Oct '09

On Tue, 27 Oct 2009, Gilbert Sebenste wrote: > I'm still seeing the updates roll out on mirror sites. When they're all > synced, I'm sure the repodata will then update, and then we'll get the > official word that they are ready. I haven't paid close enough attention in the past to see if this was "normal"...for the updates to appear before the repodata. It does make sense that that would be the case, to allow things to propagate. I wasn't sure if this was normal, or an oversight. Thanks...I'll continue to be patient. :) Kevin

3 3

Rsync and full path of filenames
by Niki Kovacs 28 Oct '09

28 Oct '09

Hi, I have a bit of a tricky question about rsync. Let's say I want to backup a bunch of configuration files with rsync, in a script. What I don't want to do : a full snapshot of /etc. What I want to do : backup only those files I need, in an otherwise empty directory tree. In my script, I'd begin with a list of the files I effectively want to backup. Something like : /etc/httpd/conf/httpd.conf /etc/httpd/vhosts.d/*.conf /etc/exports Then I'd have some other files in /usr/local/bin and /usr/local/sbin, which I would like to backup too. Instead of a puzzling explanation, let me just show you how I would like my resulting backup to look like, so you get the idea : etc/ `-- httpd |-- conf | `-- httpd.conf `-- vhosts.d |-- site1.conf |-- site2.conf `-- site3.conf usr/ `-- local |-- bin | |-- script1.sh | `-- script2.sh |-- sbin |-- sbinscript3.sh `-- sbinscript4.sh Now if I do something like this : rsync -av /etc/httpd/conf/httpd.conf destinationfolder/ I get something like : destinationfolder/httpd.conf QUESTION (at last) : is there a way rsync can somehow add the full file path, so the end result is more like : destinationfolder/etc/httpd/conf/httpd.conf ? Any suggestions ? Niki

7 9

Seamonkey 2.0 rpms
by lostson 28 Oct '09

28 Oct '09

Hello I threw together some Seamonkey 2.0 rpms for i386 and you can grab them from here http://lostsonsvault.org/dls/centos/ I dont have a 64 bit one yet but if someone would like to rebuild the src.rpm for 64 I will gladly host it, thanks. LostSon

4 5

Cisco MDS 9124 with Centos 5.4
by Vernard C. Martin 28 Oct '09

28 Oct '09

The Release notes indicate that fencing support for the Cisco MDS 9124 and 9134 Fabric Switches have been added as a Technology Preview. I'd love to use this but it doesn't seem to be visible as a choice when using the web interface for configuring the cluster. I'm not averse to doing it by hand but I'm not sure of the XML syntax for that device in the cluster file. Anyone got any clues?

1 0

CentOS-announce Digest, Vol 56, Issue 8
by centos-announce-request＠centos.org 28 Oct '09

28 Oct '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:1528 Moderate CentOS 3 i386 samba - security and bug fix update (Tru Huynh) 2. CESA-2009:1528 Moderate CentOS 3 x86_64 samba - security and bug fix update (Tru Huynh) 3. CESA-2009:1529 Moderate CentOS 4 i386 samba - security update (Tru Huynh) 4. CESA-2009:1529 Moderate CentOS 4 x86_64 samba - security update (Tru Huynh) 5. CESA-2009:1531 Critical CentOS 3 i386 seamonkey - security update (Tru Huynh) 6. CESA-2009:1531 Critical CentOS 3 x86_64 seamonkey - security update (Tru Huynh) 7. CESA-2009:1531 Critical CentOS 4 i386 seamonkey - security update (Tru Huynh) 8. CESA-2009:1531 Critical CentOS 4 x86_64 seamonkey - security update (Tru Huynh) 9. CESA-2009:1530 Critical CentOS 4 i386 firefox - security update (Tru Huynh) 10. CESA-2009:1530 Critical CentOS 4 x86_64 firefox - security update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Tue, 27 Oct 2009 19:28:07 +0100 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2009:1528 Moderate CentOS 3 i386 samba - security and bug fix update To: centos-announce(a)centos.org Message-ID: <20091027182807.GA677(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2009:1528 samba security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2009-1528.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/samba-3.0.9-1.3E.16.i386.rpm updates/i386/RPMS/samba-client-3.0.9-1.3E.16.i386.rpm updates/i386/RPMS/samba-common-3.0.9-1.3E.16.i386.rpm updates/i386/RPMS/samba-swat-3.0.9-1.3E.16.i386.rpm source: updates/SRPMS/samba-3.0.9-1.3E.16.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update samba\* Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

/etc/aliases file wildcard
by Jerry Geis 28 Oct '09

28 Oct '09

I have been trying to find out if the /etc/aliases file can accept wildcards in the user name I was hoping that a line like or similiar: machine*: myaccount would take any name matching machine* and forward onto the myaccount mailbox. man aliases didnt really help me nor did I find anything else. Is there a way to pattern match in /etc/aliases with an * or something? Thanks, Jerry

5 4

Debugging system load - How to start?
by Götz Reinicke - IT Koordinator 28 Oct '09

28 Oct '09

Hi, we run an "old" mailserver system which was set up a couple of years ago. The systme dose "everything" what we need(ed). Over the last days I noticed an unnormal increase of the system load up to 10 and lots of users told me that there mailclient connections (sending and receiving) are dropped from time to time. I was planing to exchange the server respectively distribut the services in the near future anyway, but I'm interessted in what causes the load now or where the system "hangs" :-) There is a lot of work to do and the setup is not very well designed, but at the time I started the mailsystem at our place, I had only this one server and a lot of user requests ... The System: Intel Pentium D 3.20GHz, 8 GB RAM, 3Ware 4*320GB Sata II Raid Level 5, Gigabit LAN. Red Hat EL 5.4 (still 32 Bit) About 700 Users, 1GB Mailboxquota (mbox), Webmail-System Horde, an avarage of 3.200 messages per day over the last 12 Month. The Services and setup: Dovecot imap(s) & pop3(s), mailscanner, spamassassin, mysql, bind, httpd, sendmail. Because there are so many config parameters I'll summarise this a little bit. Mails are checked agains two blacklists (heise.de and Spamhaus) by sendmail, mailscanner and spamassassin use mostly the default settings. Virusscanning is done by avira AV. Logging for mailwatch to mysql is activated. What tools or logfiles may give me a clue which settings should be checked or changed? Thanks and best regards, Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzende des Aufsichtsrats: Prof. Dr. Claudia Hübner Staatsrätin für Demographischen Wandel und für Senioren im Staatsministerium Geschäftsführer: Prof. Thomas Schadt

3 2

Inquiry:How to make crontab job permanent even after server reboot?
by hadi motamedi 28 Oct '09

28 Oct '09

Dear All Please be informed that I have an CentOS 5 server and I need it to be automatically rebooted at pre-specified times . To this end , I tried to set it as its crontab job as the followings : #crontab -e 30 15 * * * reboot It got through but after the server first reboot the crontab job disappeared . So I tried to set it in another way , as the followings : set the cron list in /tmp/temp add the following lines to /etc/rc.local : crontab /tmp/temp But still the crontab job will disappear after the server first reboot . Can you please do me favor and let me know how can I make the crontab job permanent on my CentOS server even after server reboot ? Let me thank you in advance

3 4

CentOS DS ACIs.
by Camron W. Fox 28 Oct '09

28 Oct '09

Alle, Does anyone know a good HOWTO on translating OpenLDAP ACLs to CentOS Directory Server ACIs? Best Regards, Camron -- Camron W. Fox Hilo Office High Performance Computing Group Fujitsu Management Services of America, Inc. E-mail: cwfox(a)us.fujitsu.com

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss