- Discuss - lists.centos.org

usb irq problem
by partha chowdhury 19 Sep '08

19 Sep '08

hallo to all . This is my first post to this list so please bare with me if i have made any mistake . My problem is : after every boot i receive the following message in terminal : > Sep 19 13:13:02 station2 kernel: irq 50: nobody cared (try booting with the "irqpoll" option) > Sep 19 13:13:02 station2 kernel: [<c044e6fa>] __report_bad_irq+0x2b/0x69 > Sep 19 13:13:02 station2 kernel: [<c044e8e7>] note_interrupt+0x1af/0x1e8 > Sep 19 13:13:02 station2 kernel: [<c057afb4>] usb_hcd_irq+0x23/0x50 > Sep 19 13:13:02 station2 kernel: [<c044df27>] handle_IRQ_event+0x23/0x49 > Sep 19 13:13:02 station2 kernel: [<c044dfe8>] __do_IRQ+0x9b/0xd6 > Sep 19 13:13:02 station2 kernel: [<c04073f4>] do_IRQ+0x93/0xae > Sep 19 13:13:02 station2 kernel: [<c040592e>] common_interrupt+0x1a/0x20 > Sep 19 13:13:02 station2 kernel: ======================= > Sep 19 13:13:02 station2 kernel: handlers: > Sep 19 13:13:02 station2 kernel: [<c057af91>] (usb_hcd_irq+0x0/0x50) > Sep 19 13:13:02 station2 kernel: Disabling IRQ #5 And immediately after it my external usb drive vanishes from the nautilus file browser and i get messages like this in /var/log/messages : > usb 2-2: device not accepting address 3, error -110 > Sep 19 14:15:09 station2 kernel: usb 2-2: new high speed USB device using ehci_hcd and address 4 > Sep 19 14:15:21 station2 kernel: usb 2-2: device not accepting address 4, error -110 > Sep 19 14:15:21 station2 kernel: usb 2-2: new high speed USB device using ehci_hcd and address 5 > Sep 19 14:15:31 station2 kernel: usb 2-2: device not accepting address 5, error -110 > Sep 19 14:15:31 station2 kernel: usb 2-2: new high speed USB device using ehci_hcd and address 6 > Sep 19 14:15:42 station2 kernel: usb 2-2: device not accepting address 6, error -110 > Sep 19 14:16:48 station2 kernel: usb 2-4: new high speed USB device using ehci_hcd and address 7 > Sep 19 14:17:00 station2 kernel: usb 2-4: device not accepting address 7, error -110 > Sep 19 14:17:00 station2 kernel: usb 2-4: new high speed USB device using ehci_hcd and address 8 > Sep 19 14:17:11 station2 kernel: usb 2-4: device not accepting address 8, error -110 > and the usb drive does not show up in nautilus any more. Then i have to reboot and after logging into x the drive shows up .but again after some time the same thing happens. please help. i don't know if i have given enough information.so please tell me if any more info is needed. Thanks.

2 1

Security Guide for CentOS/RHEL
by Josh Donovan 19 Sep '08

19 Sep '08

Is there a step by step approach to securing CentOS 4X (or even RHEL 4X)? I don't mean the stuff in the docs/security guide but a working step by step guide? There used to be packages like rkhunter and tripwire but I don't know if the ones in rpmforge/kbs repo are up to date. Thanks, Josh.

5 9

Regd: Ethernet Channel Bonding Clarification is Needed
by Balaji 19 Sep '08

19 Sep '08

Dear All, Please ignore my previous mail I have using CentOS 4.4 Linux and Kernel Version is 2.6.9-42.EL I have configured Cluster Suite with 2 servers Server 1 : 192.168.13.110 IP Address and hostname is primary Server 2 : 192.168.13.179 IP Address and hostname is secondary Floating : 192.168.13.83 IP Address (Assumed by currently active server) I have configured Ethernet Channel Bonding in Each Cluster Nodes and Channel Bonding Configuration Details are 1) Created bonding devices in "/etc/modprobe.conf" file alias bond0 bonding options bonding miimon=100 mode=1 2) Edit the "/etc/sysconfig/network-scripts/ifcfg-eth0 and ifcfg-eth1" configuration DEVICE=eth0 USERCTL= no ONBOOT=yes MASTER=bond0 SLAVE=yes BOOTPROTO=none DEVICE=eth1 USERCTL= no ONBOOT=yes MASTER=bond0 SLAVE=yes BOOTPROTO=none 3) Created a network script for the bonding device is "/etc/sysconfig/network-scripts/ifcfg-bond0" DEVICE=bond0 USERCTL=no ONBOOT=yes NETMASK=255.255.255.0 GATEWAY=192.168.13.1 IPADDR=192.168.13.110 4) Reboot the system for the changes to take effect. After i am rebooted both the server then cluster node becomes simplex and Services are started on both the nodes The cluster output in primary node Member Status: Quorate Member Name Status ----------- --------- primary Online, Local, rgmanager secondary Offline Service Name Owner (Last) State ------------ ------------ -------- Service primary started The cluster output in secondary node Member Status: Quorate Member Name Status ----------- --------- primary Offline secondary Online, Local, rgmanager Service Name Owner (Last) State ------------ -------------- -------- Service secondary started Before Ethernet Channel Bonding cluster services are active in one node and other nodes acts as passive node. But after Ethernet Channel Bonding cluster services are active on both the nodes I don't know what is the problem and is their any configuration is required in cluster configuration file and cman is working only with eth0 interface Can some one throw light on this peculiar problem Regards -S.Balaji

2 1

Squirrelmail not indexing messages correctly
by mbneto 18 Sep '08

18 Sep '08

Hi, I have a Centos 5.2 server with sendmail/dovecot/squirrelmail. One of my users is complaining that some messages are not appearing in the message list. After a quick check I found the message in the /cur directory but this messge does not appear in the message list in the expected order. I can access the message if I check the page X or I use the search. The strange part is that most messages appear ordered by the date but this (and others) does not. I've removed the dovecot* in the Maildir with no luck. Any ideas? Name : squirrelmail Relocations: (not relocatable) Version : 1.4.8 Vendor: CentOS Release : 4.0.1.el5.centos.2 Build Date: Sat 17 Nov 2007 11:28:32 PM AMT Bellow one example of the stat of two messages. The one with modify time 09:28 appears ordered and the other that came later 19:15 does not. File: `/home/user/Maildir/cur/1221744507.8075_0.mail:2,S' Size: 17332 Blocks: 40 IO Block: 4096 regular file Device: 1602h/5634d Inode: 9169256 Links: 1 Access: (0600/-rw-------) Uid: ( 505/ wander) Gid: ( 12/ mail) Access: 2008-09-18 19:16:30.000000000 -0400 Modify: 2008-09-18 09:28:27.000000000 -0400 Change: 2008-09-18 10:35:27.000000000 -0400 File: `/home/user/Maildir/cur/1221775184.14421_0.mail:2,S' Size: 195841 Blocks: 392 IO Block: 4096 regular file Device: 1602h/5634d Inode: 9169266 Links: 1 Access: (0600/-rw-------) Uid: ( 505/ wander) Gid: ( 12/ mail) Access: 2008-09-18 19:15:29.000000000 -0400 Modify: 2008-09-18 17:59:44.000000000 -0400 Change: 2008-09-18 19:10:56.000000000 -0400

1 0

link speed
by Craig White 18 Sep '08

18 Sep '08

Is there a command line way to tell me whether a ethernet connection is 100 BaseT or Gigabit Ethernet? Craig

6 6

How to create a virtual bonded interface?
by John Horne 18 Sep '08

18 Sep '08

Hello, I have a server with 4 NICS running CentOS 5.2. I have bonded the interfaces together such that 'bond0' consists of eth0-3. This is not a problem, and works fine. However, I now need to create a virtual interface. In a non-bonded server I would just create something like eth0:1, but with a bonded interface I am a bit confused. I have created bond0:1 simple by copying the /etc/sysconfig/network-scripts/ifcfg-bond0 file, calling it 'bond0:1' and setting the DEVICE appropriately. Then I ran 'ifup bond0:1'. The interface came up, and seems to be working okay. I have not tested yet if the bonding failover works with bond0:1 because I am doing this remotely at the moment. Tomorrow I should be able to test that. My question is, is creating a virtual bonded interface that simple or have I missed something? Have I done this the right way, or should I instead have created a second bonded interface ('bond1') and made it consist of eth0:1, eth1:1, eth2:1 and eth3:1? Admittedly this would have involved about 8 or so interfaces in total for the server! Secondly, I added nothing to the /etc/modprobe.conf file. Should I have added anything like 'alias bond0:1 bonding'? I also did not add any static routes, yet if I use 'ping' to send packets out through the virtual IP address ping says it is doing so (so again it all seems to be working). My concern is that while it seems to be fine at the moment, and even after rebooting, I may have missed something that will cause it to fail at some point. For info, 'ifconfig' output shows: ============================================================= bond0 Link encap:Ethernet HWaddr xx:xx:xx:xx:xx:xx inet addr:141.163.yy.a Bcast:141.163.yy.yy Mask:255.255.255.224 inet6 addr: abcd::abcd:abcd:abcd:abcd/64 Scope:Link UP BROADCAST RUNNING MASTER MULTICAST MTU:1500 Metric:1 RX packets:88468 errors:0 dropped:0 overruns:0 frame:0 TX packets:59486 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:80654540 (76.9 MiB) TX bytes:5847688 (5.5 MiB) bond0:1 Link encap:Ethernet HWaddr xx:xx:xx:xx:xx:xx inet addr:141.163.yy.b Bcast:141.163.yy.yy Mask:255.255.255.224 UP BROADCAST RUNNING MASTER MULTICAST MTU:1500 Metric:1 ============================================================= The 'netstat -rn' output shows: ============================================================= Kernel IP routing table Destination Gateway Genmask Flags MSS Window irtt Iface 141.163.yy.0 0.0.0.0 255.255.255.224 U 0 0 0 bond0 169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 bond0 0.0.0.0 141.163.yy.30 0.0.0.0 UG 0 0 0 bond0 ============================================================= Shouldn't 'bond0:1' appear there somewhere? Anyone notice if I missed anything? Thanks, John. -- --------------------------------------------------------------- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287 E-mail: John.Horne(a)plymouth.ac.uk Fax: +44 (0)1752 587001

2 2

USB DVD drive disappearing during kickstart install.
by Alex Tang 18 Sep '08

18 Sep '08

Hi folks. I maintain a bunch of centos based machines that are built using a somewhat stripped down (limited number but mainly stock rpms) centos distro. The installation process is plain anaconda stuff with a kickstart file on the root of the DVD/iso. The current hardware and media i'm using is DVD based. On machines that have internal DVD drives (all IDE CD/DVD drives), everything is fine. However, I'm having a problem that started in 4.6 and continues in 4.7 on machines that don't have an internal DVD drive and therefore i must use a USB DVD drive. On these machines, everything goes ok in the beginning. The DVD is "seen" by the machine and boots fine, the isolinux screen comes up and i let the timeout go or i hit return to continue. Then, almost immediately thereafter, (when i should see the blue screen with text about loading drivers) i see the blue screen with the prompt for language. This is supposed to be a kickstart install, so at this point i know i'm hosed. If I use alt-f3 or alt-f4 (can't remember which one), i can see an error message saying that the usb-storage driver is loaded, but it cannot find any USB storage devices to read from. If i alt-f1 back to the main blue screen with the language prompt, i can go through the prompts for language, keyboard, however when i get to "install type", and select "usb cdrom" (i can't remember the text exactly...the machines are in the server room, and i'm at my desk ATM), it fails again. I can alt-f3 back to see that the same error about loading the usb-storage driver was successful but it can't find any attached usb storage device. Unfortunately, at this point, there's no shell yet available in alt-f2, so i can't poke around much). It seems like somehow, something is happening like the USB bus is being reset and it's "loosing" the usb devices and they can't be found anymore. Note that the original boot occurred of the DVD drive (i got past the isolinux screen), so it's at least working in the beginning to get that far. I had seen this problem occur a handful of times in the past in my same distro based on CentOS-4.5, however it was sporadic and was usually solved by changing the manufacturer of DVD drive (i thought it was a hardware vendor not implementing the USB spec properly since most devices worked...only a handful didn't). However, since moving to 4.6 and also in 4.7, this problem is completely repeatable with all USB DVD drives i have (granted it's only 3 different vendors/models, but they all don't work, whereas all 3 of these used to work in the 4.5 based distro). Also, as i stated earlier, on machines with internal DVD drives (IDE based), everything works fine. Has anyone seen anything like this? Do you have any suggestions to try? One thing i'm going to try is downloading the stock 4.7 DVD ISO and see if it fails. The download is taking a while, so i won't be able to report back on that test until tomorrow. Oh yeah, the machines i'm using that are having this problem are a Dell R200, Supermicro PDSMi, and Supermicro P4SC8. I don't have the DVD drive mfg and model numbers handy, i'll get those as well. Any help would be greatly appreciated. Thanks. ...alex...

6 7

email and MS outlook
by Mag Gam 18 Sep '08

18 Sep '08

We use Microsoft Outlook heavy at school but our backed is CentOS. I use echo "Foo" | mail -s "subject" addr(a)unc.edu a lot. Is it possible to change the priority to High so Outlook will understand it? The priority meaning the email will be sent to the normal email queue but on Outlook it would have the exclamation point. TIA

5 4

virt-install -L
by David Dyer-Bennet 18 Sep '08

18 Sep '08

So what does the "location" one gives virt-install point to? Ideally, what directory on the Centos 5.2 DVD should it point to? Or should it point to the ISO image? Or what? I'm getting tired of trying things at random, and the documentation really doesn't tell me anything beyond that it should be a directory (because it says two different files should be there). -- David Dyer-Bennet, dd-b(a)dd-b.net; http://dd-b.net/ Snapshots: http://dd-b.net/dd-b/SnapshotAlbum/data/ Photos: http://dd-b.net/photography/gallery/ Dragaera: http://dragaera.info

1 0

Re: [CentOS] cron job not working
by Al Sparks 18 Sep '08

18 Sep '08

> Probably a permissions problem, as has been noted. What I can't > understand is how the problem came to be so complicated. This, > run as a root cron job, will produce the desired directory: > > #!/bin/bash > mkdir -p /ora-local/db-test-backups/`date +%Y"_"%m"_"%d` > > ...without the adjustments in the perl script. AAMOF, it's even > simpler if you can tolerate hyphen separators rather than > underscores. (date +%F) I'll give that a shot. Note that I have not been running this as root (though crond is running as root). Most of the time, if it's a permissions problem, crond will send an email telling me it's a permissions problem. === Al

1 1

Missing 4.7 kernel update SRPMs ?
by James Pearson 18 Sep '08

18 Sep '08

I can't find the kernel-2.6.9-78.0.1.EL.src.rpm and kernel-2.6.9-78.0.1.plus.c4.src.rpm on the download sites - the binary i386/x86_64 RPMS are there, but not the matching SRPMs Does anyone know where they are? Thanks James Pearson

5 5

CentOS on Eee PC 1000H
by Sven 18 Sep '08

18 Sep '08

Hi folks Anybody running CentOS on Eee PC 1000H? In CentOS wiki[0] there is a draft about Eee PC 900 from Fabian Arrotin. Does the same howto work for Eee PC 1000H? So far he writes: > Waiting for an official way to host the necessary rpms ... Where to download WiFi and NIC driver? regards Sven [0] http://wiki.centos.org/HowTos/Laptops/Asus/Eeepc

4 4

slow Perl on CentOS 5
by Florin Andrei 18 Sep '08

18 Sep '08

If your Perl apps are unusually slow on CentOS 5, have a look at this blog: http://blog.vipul.net/2008/08/24/redhat-perl-what-a-tragedy/ In a nutshell: some Perl apps are 100x slower on RedHat / CentOS 5 compared to other distributions. Bugzilla entry: https://bugzilla.redhat.com/show_bug.cgi?id=379791 -- Florin Andrei http://florin.myip.org/

9 11

CentOS-announce Digest, Vol 43, Issue 7
by centos-announce-request＠centos.org 18 Sep '08

18 Sep '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2008:0876 CentOS 5 i386 perl Update (Karanbir Singh) 2. CEBA-2008:0876 CentOS 5 x86_64 perl Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Thu, 18 Sep 2008 01:42:27 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2008:0876 CentOS 5 i386 perl Update To: centos-announce(a)centos.org Message-ID: <20080918004227.GA29408(a)base.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2008:0876 Upstream details at : https://rhn.redhat.com/errata/RHBA-2008-0876.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: d238a0ae697c6e9d131b8949a39a5f79 perl-5.8.8-15.el5_2.1.i386.rpm d977b3a4aa388a08d44c67f133e449b4 perl-suidperl-5.8.8-15.el5_2.1.i386.rpm Source: eb29d8941819dd64a0d8a8edb2c2f1b2 perl-5.8.8-15.el5_2.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Thu, 18 Sep 2008 01:42:27 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2008:0876 CentOS 5 x86_64 perl Update To: centos-announce(a)centos.org Message-ID: <20080918004227.GA29421(a)base.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2008:0876 Upstream details at : https://rhn.redhat.com/errata/RHBA-2008-0876.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 30991c5c1d5616372116a0480f8bdfd7 perl-5.8.8-15.el5_2.1.i386.rpm e8965ee3f34823896e4b9ec4b54ff01f perl-5.8.8-15.el5_2.1.x86_64.rpm 3ff4aaa5878811d651c40dcea3a198c1 perl-suidperl-5.8.8-15.el5_2.1.x86_64.rpm Source: eb29d8941819dd64a0d8a8edb2c2f1b2 perl-5.8.8-15.el5_2.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 43, Issue 7 **********************************************

1 0

Need help with Wine
by Sadaruwan Samaraweera 18 Sep '08

18 Sep '08

Hi, I've two questions, 1. Is it OK to use wine on CentOS 5.2 x86_64 ? 2. If it's OK then is there a possibility that virus's that infect windows based system to attack my CentOS or any other Linux system thats running Wine? Please help me. Thank you -- Sadaruwan Samaraweera

2 1

CentOS automount 99% CPU utilization -- NFSv3 vs NFSv4?
by Blond Beer 18 Sep '08

18 Sep '08

I have several CentOS 5.2 workstations in a Sun Solaris NIS domain and Solaris NFS servers (all Solaris 8). Frequently the auto mounter hangs with very high utilization -- I think it might be due to the Solaris 8 servers only using NFSv3 and the CentOS wanting to use NFSv4. How can I set the system to use NFSv3 globally, even for auto mount maps from my ancient Solaris NIS domain (which I wold like to upgrade, but that's another story...)

1 0

Run a more recent kernel than 2.6.18 on CentOS?
by Niki Kovacs 18 Sep '08

18 Sep '08

Hi, Usually I'm not one to complain about "old" version of the CentOS kernel and/or software, since I appreciate CentOS' stability. So this might be the exception that confirms the rule. I've been jumping through several burning loops these past days to configure my little MSI Wind netbook, and I'm currently considering going for a more recent kernel. There's no way the Ralink driver for the wireless card will build on an older kernel than 2.6.22, apparently. I'm prepared to do some tinkering, but in the meanwhile, can you give some basic recommendations or caveats? This is not our production database server, so it's not a big deal if it's a little bit less stable. What i naively plan to do: get a kernel SRPM from Fedora 9, try to build from there, and see where it leads. I think I'm going to give it a shot in VirtualBox first. But then, maybe one of you has already gone that path and can tell me if I have to expect something trivial or an experience of the hair-pulling type. Cheers, Niki PS: with similar requests, folks usually suggest I run Fedora. So let me state: I like CentOS. I don't want to run Fedora.

4 4

buying the right cpu fan
by Craig White 17 Sep '08

17 Sep '08

(I sent this yesterday but it never made it through) I've got a remote system where I think I need to replace the CPU fan. in the output of dmidecode, I get... Processor Information Socket Designation: CPU 1 Type: Central Processor Family: <OUT OF SPEC> Manufacturer: Intel ID: 47 0F 00 00 FF FB EB BF Version: Intel(R) Pentium(R) D CPU 2.66GHz Voltage: 1.4 V External Clock: 133 MHz Max Speed: 2666 MHz Current Speed: 2666 MHz is this enough to tell me what kind of fan I need to get? It's obvious it's a Pentium IV. What other command/what other command might I be able to run to parse in order to get information so I get the right CPU fan? Craig

7 8

Setting VNC console port in virt-install
by David Dyer-Bennet 17 Sep '08

17 Sep '08

Using Centos 5.2 with Xen. I'm making a group of nodes behind an LVS load-director to perform computing services. Those nodes are only accessible from the LVS nodes (I'm using LVS NAT mode). Actually it's Xen virtual servers on the physical nodes behind the LVS boxes that I'm mostly concerned with. When you create a guest with virt-install, there's a vnc param and a vncport param, but setting vncport doesn't seem to cause the vnc console to actually appear on the specified port. The config file written by virt-install in /etc/xen doesn't contain the vnc port information. How do I control what port the VNC console is presented on? I need to make these appear at stable port numbers, because to make the systems manageable from outside the LVS, I'm going to create tunnels on the LVS that go to specific system consoles. To set that up obviously the destination ports need to be somehow known, and since they're on different systems, anything other than simply configuring them to be in stable places is going to get complicated and hence unreliable. (The people maintaining the software on the systems behind the LVS won't be the same people in charge of the LVS, and some of them won't even know anything about Linux or Xen, just Windows.) Yes, I also asked on the Xen list; not sure how much what I see as Xen is actually basic Xen and how much is Centos, and the documentation I'm using to do this is all the Centos stuff so I figured I should ask here. -- David Dyer-Bennet, dd-b(a)dd-b.net; http://dd-b.net/ Snapshots: http://dd-b.net/dd-b/SnapshotAlbum/data/ Photos: http://dd-b.net/photography/gallery/ Dragaera: http://dragaera.info

1 1

please help LVM totally messed up
by Rudi Ahlers 17 Sep '08

17 Sep '08

Hi all I accidentally deleted a LVM volume directly (rm /dev/System/newcpanel) and now my LVM's are all messed up. I have a snapshot from one of the other LVM's, as follows lvcreate -s -n newcpanel /dev/System/wiseguy -L10G But, instead of running lvremove /dev/System/newcpanel I ran rm /dev/System/newcpanel ( I don't know why) So, now I have waisted space on my server, and I can't remove the original LVM either. root@saturn /]# lvremove /dev/System/wiseguy_rootimg /dev/System/wiseguy_rootimg: read failed after 0 of 4096 at 0: Input/output error /dev/mapper/wiseguy_rootimg1: read failed after 0 of 2048 at 0: Input/output error /dev/mapper/wiseguy_rootimg2: read failed after 0 of 2048 at 0: Input/output error /dev/mapper/wiseguy_rootimg3: read failed after 0 of 2048 at 0: Input/output error Can't remove logical volume "wiseguy_rootimg" under snapshot root@saturn /]# lvscan /dev/System/wiseguy_rootimg: read failed after 0 of 4096 at 0: Input/output error /dev/mapper/wiseguy_rootimg1: read failed after 0 of 2048 at 0: Input/output error /dev/mapper/wiseguy_rootimg2: read failed after 0 of 2048 at 0: Input/output error /dev/mapper/wiseguy_rootimg3: read failed after 0 of 2048 at 0: Input/output error ACTIVE '/dev/System/root' [10.00 GB] inherit ACTIVE '/dev/System/swap' [4.00 GB] inherit ACTIVE '/dev/System/pluto' [50.00 GB] inherit ACTIVE '/dev/System/home' [10.00 GB] inherit ACTIVE '/dev/System/data' [20.00 GB] inherit ACTIVE '/dev/System/andrew_vmswap' [1.00 GB] inherit ACTIVE '/dev/System/andrew_rootimg' [5.00 GB] inherit ACTIVE '/dev/System/keith_vmswap' [1.00 GB] inherit ACTIVE '/dev/System/keith_rootimg' [5.00 GB] inherit ACTIVE '/dev/System/12_vmswap' [1.00 GB] inherit ACTIVE '/dev/System/12_rootimg' [5.00 GB] inherit ACTIVE Original '/dev/System/wiseguy_rootimg' [10.00 GB] inherit ACTIVE Snapshot '/dev/System/oldcpanel' [10.00 GB] inherit -- Kind Regards Rudi Ahlers

2 2

java yum problem
by Ric Moore 17 Sep '08

17 Sep '08

Error: Missing Dependency: /usr/bin/rebuild-security-providers is needed by package java-1.4.2-gcj-compat I'm digging all over the place for this one. Has anyone a clue?? When I use: yum whatprovides /usr/bin/rebuild-security-providers it returns: jpackage-utils.noarch : JPackage utilities I've installed this from several sources. Nothing seems to provide the rebuild thing. I've used mc to looking inside the rpms I've found and none have it. So, I would guess something else does. Thanks, Ric -- ---------------------------------------------------- My father, Victor Moore (Vic) used to say: "There are two Great Sins in the world... ..the Sin of Ignorance, and the Sin of Stupidity. Only the former may be overcome." R.I.P. Dad. Linux user# 44256 Sign up at: http://counter.li.org/ https://nuoar.dev.java.net/ Verizon Cell # 336-254-1339

5 6

Installing & activating mysql in CentOS 5
by Andrew Allen 17 Sep '08

17 Sep '08

I want to set up a local mysql server + client (preferably graphical, ie mysqlgui) so have yum installed both perl-DBI and mysql.i386, both apparently successfully. However, I can't see what to do next to get mysqld running, as it doesn't appear in the list of services (in /etc/init.d/). Help appreciated please - is there any good specific documentation on this anywhere? Also, what's the current opinion/advice on a graphical user interface for mysql please? Andy

8 10

Sierrawireless 597c
by Terry Polzin 17 Sep '08

17 Sep '08

Anyone on the list been able to get one of these to be seen by usb as a modem? lsusb lists it incorrectly, but I can manually load the sierra and usbserial modules. Me thinks they aren't quite up to support for this device yet, Thanks for any input, Terry

1 0

Re: [CentOS] cron job not working
by Al Sparks 17 Sep '08

17 Sep '08

The crond itself is being run as root. I am running the cron job as another user that has permission to run cron jobs. Note that if I change the program to print output to STOUT and run through cron, I get an email in that account with that output. === Al ----- Original Message ---- From: bruce <bedouglas(a)earthlink.net> To: CentOS mailing list <centos(a)centos.org> Sent: Tuesday, September 16, 2008 4:25:23 PM Subject: RE: [CentOS] cron job not working hey al... what are the privs that the cron is being run as. the cron should be root. what are the acls for the dir that you're writing to?? it's probably a simple priv/acl issue.... -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org]On Behalf Of Al Sparks Sent: Tuesday, September 16, 2008 5:01 PM To: Centos List Subject: [CentOS] cron job not working Here's a perl script that works when I run it manually. But when I run it via cron, it won't create the directory. But worse than that, an email isn't sent to the account running the job. So I'm not getting an error, but it does work when I run it manually. If I put an obvious error in the script, cron does generate an email giving me the STDERR. What could it be? === Al #!/usr/bin/perl ($sec,$min,$hour,$mday,$mon,$year,$wday,$yday,$isdst) = localtime(time); # Above functions, "time" and "localtime", return weird $year and $month # Need to be converted to become human readable $year = $year + 1900; $mon = $mon + 1; # Want $mday and $mon to be 2 digits, with leading zero if necessary $mday = "0" . $mday if $mday < 10; $mon = "0" . $mon if $mon < 10; # Second parameter is mask in octal chdir "/ora-local/db-test-backups"; mkdir "${year}_${mon}_${mday}", \00022; ####End perl script _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

OT: Unix/Linux Training Online
by Matt 17 Sep '08

17 Sep '08

This is a bit off topic but I was interested in taking some online classes. I currently have an associates degree in electronics tech from about 15 years back but was wanting to expand on that and learn more about linux. Oreillyschool.com has a somewhat affordable online certificate course in UNIX/linux admin. The downside is I do not know if there credits would ever transfer if I wanted to build on that. Has anyone taken there course or know anyone that did? Is it worth a hoot? Is there a better option? Is a simple certificate worth that much anyway? Matt

2 1

Mounting a LVM partition from a linux live cd
by Matt Shields 17 Sep '08

17 Sep '08

I'm running CentOS 5.2, it uses LVM to manage the disks and we had a programmer do something (not sure what) then reboot the system. When it came up it kernel panicked. Luckily it's not production, it was their sandbox. But they didn't backup any of their files. I know the disks are fine because I was able to boot from a linux live cd and mount the /boot partition from the sda drive, and the sdb drive that has the mysql database mounted at /var/lib/mysql and not using LVM. What I don't know how to do is mount /dev/sda2 (root / partition) which is an LVM/ext3 partition. Does anyone have the steps to mount this drive while booted into a linux live cd? -- -matt

2 1

Invitation to connect on LinkedIn
by kapil singh kushwah 17 Sep '08

17 Sep '08

LinkedIn ------------ CentOS, I'd like to add you to my professional network on LinkedIn. - kapil singh Learn more: https://www.linkedin.com/e/isd/353388492/o9No2YYU/ ------------------------------------------ What is LinkedIn? Get answers: Your network is full of industry experts willing to share advice. Joining kapil singh kushwah's network is the first step to accessing this valuable resource. ------ (c) 2008, LinkedIn Corporation

5 6

CentOS-announce Digest, Vol 43, Issue 6
by centos-announce-request＠centos.org 17 Sep '08

17 Sep '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:0893 Moderate CentOS 3 i386 bzip2 - security update (Tru Huynh) 2. CESA-2008:0893 Moderate CentOS 3 x86_64 bzip2 - security update (Tru Huynh) 3. CESA-2008:0893 Moderate CentOS 5 i386 bzip2 Update (Karanbir Singh) 4. CESA-2008:0893 Moderate CentOS 5 x86_64 bzip2 Update (Karanbir Singh) 5. CESA-2008:0893-01: Moderate CentOS 2 i386 bzip2 security update (John Newbigin) ---------------------------------------------------------------------- Message: 1 Date: Tue, 16 Sep 2008 17:23:39 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2008:0893 Moderate CentOS 3 i386 bzip2 - security update To: centos-announce(a)centos.org Message-ID: <20080916152339.GA32663(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2008:0893 bzip2 security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2008-0893.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/bzip2-1.0.2-12.EL3.i386.rpm updates/i386/RPMS/bzip2-devel-1.0.2-12.EL3.i386.rpm updates/i386/RPMS/bzip2-libs-1.0.2-12.EL3.i386.rpm source: updates/SRPMS/bzip2-1.0.2-12.EL3.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update bzip2 Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

/dev/tty: No such device or address error in newly created CentOS 5.2 domU
by Rudi Ahlers 17 Sep '08

17 Sep '08

Hi all, I setup a new CentOS 5.2 domU, on a CentOS 5.2 x64 XEN server, and then proceeded to install cPanel, which is a simple task of downloading http://layer1.cpanel.net/latest - and running it in the command line, as such: cd /home wget http://layer1.cpanel.net/latest sh latest. But, I get the following error: sh-3.2# sh latest Creating directory installd Verifying archive integrity... All good. Uncompressing cplyr1-cPanellatest: line 118: /dev/tty: No such device or address Terminated I have run MAKEDEV /dev/tty - but it didn't help me, I still get the error. So, how do I fix this? -- Kind Regards Rudi Ahlers

2 1

i didn't see the 4.7 announcement
by Joe Pruett 17 Sep '08

17 Sep '08

i (and others) have missed messages on centos-devel as well. did other people not see the 4.7 announcement message? i'm wondering if the centos list server is having some kind of issue.

10 22

How to check for rootkit, troians etc in backed up files?
by M. Fioretti 17 Sep '08

17 Sep '08

Hi, there is a remote (VPS) Centos 4.2 server which *may* have been compromised. Reinstalling everything from scratch isn't a problem, it may even be an occasion to improve a few things, the question is another. There are backups of necessary shell script, ASCII configuration files and more or less important email (maildir format, if it matters) including messages with binary attachments in .doc, .pdf, .jpeg and other formats. What is, in the context above, the best way to make sure that **those** backed up files (which _must_ be put back on the server after reinstall) do not contain any rootkit, troian, virus, whatever? Which Centos / linux tool you'd recommend for this specific case? TIA, Marco -- Your own civil rights and the quality of your life heavily depend on how software is used *around* you: http://digifreedom.net/node/84

12 18

Changing hostname?
by Niki Kovacs 17 Sep '08

17 Sep '08

Hi, I recently made a CentOS install on a machine with an unsupported network card. I had to add the driver for it later, once I finished the install. For now I have this: [kikinovak@localhost ~]$ hostname --fqdn localhost.localdomain Q: how would I change this to something like calimero.local? Here's what I *would* do, but I prefer to ask before. 1) edit /etc/sysconfig/network and edit this line: HOSTNAME=calimero.local 2) add a line to /etc/hosts like this: # Do not remove the following line, or various programs # that require network functionality will fail. 127.0.0.1 localhost.localdomain localhost 127.0.0.1 calimero.local calimero ::1 localhost6.localdomain6 localhost6 Please correct me if I'm wrong. cheers, Niki Kovacs

18 43

estimating backuppc
by Craig White 17 Sep '08

17 Sep '08

talking with a client about various options for backup. They are an advertising agency so most of the space is used by various binary files JPG/TIFF/Movies. We have been using LTO-2 but if we jump up their storage to say 2Tb, that's going to be $5000 for LTO-3 with magazines. This affords us 3 week rotations rather simply. If we add hard drive storage for backups instead of buying LTO-3 tape drive, how much storage would we want for backing up 2Tb of binary data...surely not 6 Terrabytes? Craig

3 3

Users and ftp
by Bob Hoffman 17 Sep '08

17 Sep '08

I have vsftp chrooted so that users can only come into their home directory. I have a few virtual hosts. I have the websites in the home directory of the intial user for each site. So the sites look like this. /home/user1/html /home/user2/html Using vsftp, I have set the default to chroot a user to their home directory. So user1 ftping in whill go right to his directory and not be able to go higher. My problem is adding a second user to be able to access the directory via ftp. In other words, user1 has a partner named user1a. I tried adding user1a in user1 group and not in user1 group...netiher worked. I tried adding user1a with no home directory and tried making their home directoy /home/user1 In all cases, ftp says 'cannot move to /home/user1' when trying to access with user1a. I am to the point it is time to forgo the security of chroot in vsftp to just add a second user. Any help appreciated.

2 1

cron job not working
by Al Sparks 17 Sep '08

17 Sep '08

Here's a perl script that works when I run it manually. But when I run it via cron, it won't create the directory. But worse than that, an email isn't sent to the account running the job. So I'm not getting an error, but it does work when I run it manually. If I put an obvious error in the script, cron does generate an email giving me the STDERR. What could it be? === Al #!/usr/bin/perl ($sec,$min,$hour,$mday,$mon,$year,$wday,$yday,$isdst) = localtime(time); # Above functions, "time" and "localtime", return weird $year and $month # Need to be converted to become human readable $year = $year + 1900; $mon = $mon + 1; # Want $mday and $mon to be 2 digits, with leading zero if necessary $mday = "0" . $mday if $mday < 10; $mon = "0" . $mon if $mon < 10; # Second parameter is mask in octal chdir "/ora-local/db-test-backups"; mkdir "${year}_${mon}_${mday}", \00022; ####End perl script

3 2

lan driver for intel dg43nb
by Rilawich Ango 17 Sep '08

17 Sep '08

Hi, I have an intel mother board dg43b (http://support.intel.com/Products/Desktop/Motherboards/DG43NB/DG43NB-overvi…) which have an on board lan interface. In default, it can't be activated after CentOS5.2 installed. I can't find any driver or information about how to activate this interface. Can anyone tell me how to work it out? Thanks, ango

3 4

Problem with install Boardcom driver
by Pete Kay 16 Sep '08

16 Sep '08

Hi, I have to install Broadcom driver because the Dell Optiplex 330 running Centos 5.2 is not able to connect to the network. I am trying to install a Broadcom driver, but I get the followng error: [root@localhost tg3-3.85l]# [root@localhost tg3-3.85l]# make make -C /lib/modules/2.6.18-92.el5/build SUBDIRS=/usr/src/Server/Linux/Driver/tg3-3.85l modules make[1]: Entering directory `/usr/src/kernels/2.6.18-92.el5-x86_64' CC [M] /usr/src/Server/Linux/Driver/tg3-3.85l/tg3.o In file included from /usr/src/Server/Linux/Driver/tg3-3.85l/tg3.c:85: /usr/src/Server/Linux/Driver/tg3-3.85l/tg3.h:234: error: redefinition of 'skb_transport_offset' include/linux/skbuff.h:1006: error: previous definition of 'skb_transport_offset' was here /usr/src/Server/Linux/Driver/tg3-3.85l/tg3.h:239: error: redefinition of 'ip_hdr' include/linux/ip.h:109: error: previous definition of 'ip_hdr' was here /usr/src/Server/Linux/Driver/tg3-3.85l/tg3.h:244: error: redefinition of 'ip_hdrlen' include/net/ip.h:48: error: previous definition of 'ip_hdrlen' was here /usr/src/Server/Linux/Driver/tg3-3.85l/tg3.h:249: error: redefinition of 'tcp_hdr' include/linux/tcp.h:169: error: previous definition of 'tcp_hdr' was here /usr/src/Server/Linux/Driver/tg3-3.85l/tg3.h:254: error: redefinition of 'tcp_optlen' include/linux/tcp.h:179: error: previous definition of 'tcp_optlen' was here make[2]: *** [/usr/src/Server/Linux/Driver/tg3-3.85l/tg3.o] Error 1 make[1]: *** [_module_/usr/src/Server/Linux/Driver/tg3-3.85l] Error 2 make[1]: Leaving directory `/usr/src/kernels/2.6.18-92.el5-x86_64' make: *** [default] Error 2 [root@localhost tg3-3.85l]# Does anyone know how to resolve this problem? Many thanks in advance for all your help. Regards, Pete

4 3

Re: netfilter kernel crash in ip_ct_refresh_acct / ip_conntrack with centos 5.x
by Pasi Kärkkäinen 16 Sep '08

16 Sep '08

On Tue, Sep 16, 2008 at 12:12:45PM -0400, Jan Engelhardt wrote: > > On Tuesday 2008-09-16 03:38, Pasi Kärkkäinen wrote: > > > >Has anyone seen this netfilter kernel crash? > > > >Images from the console of the crashed firewall: > >http://pasik.reaktio.net/centos5-kernel-crash/ > > There have been some crashes reported; and some even fixed. > As such you are encouraged to try a (much) newer kernel > because 2.6.18 is outside the scope of the -stable team. > Yeah I know it's old.. but it's the only standard/supported kernel in Redhat Enterprise Linux 5 (and CentOS 5). I guess the best option would be to somehow figure out what the actual bug is, get (or make) a patch for it, and sent it for inclusion in RHEL 5.x errata kernels.. -- Pasi

1 0

PDF Print Server
by Joseph L. Casale 16 Sep '08

16 Sep '08

Guys, I was about to setup Acrophobia but I don't want the file people print to be emailed back. Anyone got a reco on a setup that can be mapped as an SMB printer and return the file back to the user from the printer just like how setup my windows PS printer to print to file. Thanks! jlc

5 9

Kernel source - linux -2.6.18 i386 or i686
by Robert Moskowitz 16 Sep '08

16 Sep '08

As I plow through the Kernel source to figure out why the BEET patch is not working, I notice that there are two similar directories under ~/rpmbuild/BUILD/kernel-2.6.18: linux-2.16.18.i386 and linux-2.16.18.i686 So which one am I suppose to be patching? Currently, the patch starts out with: diff -urN a/net/ipv4/xfrm4_input.c b/net/ipv4/xfrm4_input.c I followed the kernel source setup instructions on the wiki: http://wiki.centos.org/HowTos/I_need_the_Kernel_Source tells me to supply i686 for getting and setting up the source. But http://wiki.centos.org/HowTos/Custom_Kernel has me setting up a .config file with '# i386' as the first line. Now that is a comment, right? So why add such a comment. Perhaps it is NOT a comment? Shesh... Anyway, which directory structure gets used in the rpmbuild: rpmbuild -bb --target=`uname -m` kernel-2.6.spec 2> build-err.log | tee build-out.log Do I add this to the patch?

2 5

PVFS2 RPMs
by Paolo Supino 16 Sep '08

16 Sep '08

Hi Where can I find PVFSv2 RPMs for CentOS 5? -- TIA Paolo

1 0

Tmp directory and sticky
by Bob Hoffman 16 Sep '08

16 Sep '08

I noticed after my install that the tmp directory was A- not a sticky B- still executable I went and changed etc/fstab to add loop,noexec,nosuid,rw, which I hope is the right thing to do. I rebooted and it looks like it worked. When doing an ls -l on the main directory, the tmp folder lit up all green in putty (cool, I hope) But the chmods I did with winscp will not take effect (they do on other directories) so I manually ran chmod 1777 on the tmp folder. Since centos seems to be pretty good at pre configuration, I am concerned that maybe I should not do this, but every security book says to do it. I am imagining I will be okay, and I hope if it is right, that others on the list that do not know about this, make the change. Especially if running a webserver. Right or wrong?

6 9

netfilter kernel crash in ip_ct_refresh_acct / ip_conntrack with centos 5.x
by Pasi Kärkkäinen 16 Sep '08

16 Sep '08

Hello! Has anyone seen this netfilter kernel crash? Images from the console of the crashed firewall: http://pasik.reaktio.net/centos5-kernel-crash/ Firewall is HP DL360 G4 server running CentOS 5.x 32 bit. I've seen this firewall crashing multiple times, but I only started investigating it lately.. It has happened using CentOS 5.0, 5.1 and now also with 5.2. I'm not sure if it was the same bug earlier, but at least the last two times (with CentOS 5.2) it has been the same, see screenshots. Last lines of the console output: EIP: [<f8af2c5c>] __ip_ct_refresh_acct+0xa1/0x129 [ip_conntrack] SS:ESP 0068:c0724e4c <0>Kernel panic - not syncing: Fatal exception in interrupt At the moment firewall is running CentOS 5.2, Linux kernel 2.6.18-92.1.10.el5.centos.plus. Any tips how to resolve this? -- Pasi

3 4

CentOS-announce Digest, Vol 43, Issue 5
by centos-announce-request＠centos.org 16 Sep '08

16 Sep '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEEA-2008:0875 CentOS 5 i386 tzdata Update (Karanbir Singh) 2. CEEA-2008:0875 CentOS 5 x86_64 tzdata Update (Karanbir Singh) 3. CEBA-2008:0639 CentOS 5 i386 sos Update (Karanbir Singh) 4. CEBA-2008:0639 CentOS 5 x86_64 sos Update (Karanbir Singh) 5. CEBA-2008:0878 CentOS 5 x86_64 libxml2 Update (Karanbir Singh) 6. CEBA-2008:0878 CentOS 5 i386 libxml2 Update (Karanbir Singh) 7. CESA-2008:0884 CentOS 5 i386 libxml2 Update (Karanbir Singh) 8. CESA-2008:0884 CentOS 5 x86_64 libxml2 Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Tue, 16 Sep 2008 01:54:00 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEEA-2008:0875 CentOS 5 i386 tzdata Update To: centos-announce(a)centos.org Message-ID: <20080916005400.GA19593(a)base.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2008:0875 Upstream details at : https://rhn.redhat.com/errata/RHEA-2008-0875.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: c0dc7c25a9c8e3a43d9506c93a07096d tzdata-2008e-1.el5.noarch.rpm Source: 0c9514114a562febee34250e3b1166e4 tzdata-2008e-1.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 16 Sep 2008 01:54:00 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEEA-2008:0875 CentOS 5 x86_64 tzdata Update To: centos-announce(a)centos.org Message-ID: <20080916005400.GA19607(a)base.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2008:0875 Upstream details at : https://rhn.redhat.com/errata/RHEA-2008-0875.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 3617b27656fd504e15d09d45bd4bcc81 tzdata-2008e-1.el5.noarch.rpm Source: 0c9514114a562febee34250e3b1166e4 tzdata-2008e-1.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Tue, 16 Sep 2008 01:59:06 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2008:0639 CentOS 5 i386 sos Update To: centos-announce(a)centos.org Message-ID: <20080916005906.GA19812(a)base.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2008:0639 Upstream details at : https://rhn.redhat.com/errata/RHBA-2008-0639.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 200f355d8792ba5ac4107665a13d86b6 sos-1.7-9.2.el5_2.2.noarch.rpm Source: 8ba75c58386bf61c68a69cfc7f1bc545 sos-1.7-9.2.el5_2.2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Tue, 16 Sep 2008 01:59:06 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2008:0639 CentOS 5 x86_64 sos Update To: centos-announce(a)centos.org Message-ID: <20080916005906.GA19826(a)base.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2008:0639 Upstream details at : https://rhn.redhat.com/errata/RHBA-2008-0639.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 4b8ea2d787eafe1eee8d735a5d4a64d1 sos-1.7-9.2.el5_2.2.noarch.rpm Source: 8ba75c58386bf61c68a69cfc7f1bc545 sos-1.7-9.2.el5_2.2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Tue, 16 Sep 2008 02:10:38 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2008:0878 CentOS 5 x86_64 libxml2 Update To: centos-announce(a)centos.org Message-ID: <20080916011038.GA20241(a)base.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2008:0878 Upstream details at : https://rhn.redhat.com/errata/RHBA-2008-0878.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: c0ed773c849b3a236d5a1524992ca3f7 libxml2-2.6.26-2.1.2.5.i386.rpm 01271ee1b434eefe05443b30182b51fd libxml2-2.6.26-2.1.2.5.x86_64.rpm 90850cd5694e6accc4ebb6a6b9b0f2ce libxml2-devel-2.6.26-2.1.2.5.i386.rpm c797571449a84fbc20c335e410db2530 libxml2-devel-2.6.26-2.1.2.5.x86_64.rpm 910fd3b156bffb18a6731d48e3504101 libxml2-python-2.6.26-2.1.2.5.x86_64.rpm Source: 4f3ead9375451a5016b2a631a7a70578 libxml2-2.6.26-2.1.2.5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Tue, 16 Sep 2008 02:10:38 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2008:0878 CentOS 5 i386 libxml2 Update To: centos-announce(a)centos.org Message-ID: <20080916011038.GA20227(a)base.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2008:0878 Upstream details at : https://rhn.redhat.com/errata/RHBA-2008-0878.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: e6f598c6ff9f741232f67fdcd5d83200 libxml2-2.6.26-2.1.2.5.i386.rpm 54ac2f40153e802aba000a93e6f85451 libxml2-devel-2.6.26-2.1.2.5.i386.rpm 6c755fd50b35c144fa45273b01f4f497 libxml2-python-2.6.26-2.1.2.5.i386.rpm Source: 4f3ead9375451a5016b2a631a7a70578 libxml2-2.6.26-2.1.2.5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 7 Date: Tue, 16 Sep 2008 02:12:22 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2008:0884 CentOS 5 i386 libxml2 Update To: centos-announce(a)centos.org Message-ID: <20080916011222.GA20346(a)base.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2008:0884 Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0884.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: b65a1a41a259310a7eb2569520e4ef71 libxml2-2.6.26-2.1.2.6.i386.rpm de39427d8b38d99eb1a10c13d9604475 libxml2-devel-2.6.26-2.1.2.6.i386.rpm 51b43a8cd6a502a056afdaa380ed03ad libxml2-python-2.6.26-2.1.2.6.i386.rpm Source: 5879767e21430bacc57d7bcd16c95f51 libxml2-2.6.26-2.1.2.6.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 8 Date: Tue, 16 Sep 2008 02:12:22 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2008:0884 CentOS 5 x86_64 libxml2 Update To: centos-announce(a)centos.org Message-ID: <20080916011222.GA20363(a)base.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2008:0884 Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0884.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: c066f4ffdfacf7aece10bf1b8d9cde30 libxml2-2.6.26-2.1.2.6.i386.rpm 704ab640eaaa01041e69c6a17758ae88 libxml2-2.6.26-2.1.2.6.x86_64.rpm e678f88065e0e09525cedf8ac9578b03 libxml2-devel-2.6.26-2.1.2.6.i386.rpm fb67b190224e58127f26a9a184e8cb76 libxml2-devel-2.6.26-2.1.2.6.x86_64.rpm 4ed6f241da7b21005210ca5ec340d836 libxml2-python-2.6.26-2.1.2.6.x86_64.rpm Source: 5879767e21430bacc57d7bcd16c95f51 libxml2-2.6.26-2.1.2.6.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 43, Issue 5 **********************************************

1 0

alias ip-addresses at loopback
by Dmitry Cherkasov 16 Sep '08

16 Sep '08

Hello everybody! Could anybody advice on the following problem. I need to assign several ip-addresses to 'lo' interface (beside 127.0.0.1). It is convenient to me to implement NAT with such addresses. I can easily assign these addresses on running system with 'ip address add <some addr/prefix> dev lo'. Yet I cannot understand how to make these settings apply on boot time. Certainly it is possible to patch standard system scripts like /etc/rc.d/init.d/network, but I suppose there must be more straight way to do this. P.S. I use CentOS 5.2 -- Dmitry Cherkasov

4 7

Ethernet Channel Bonding Clarification is Needed
by Balaji 16 Sep '08

16 Sep '08

Dear All, I have configured Cluster Suite with 2 servers Server 1 : 192.168.13.110 IP Address and hostname is primary Server 2 : 192.168.13.179 IP Address and hostname is secondary Floating : 192.168.13.83 IP Address (Assumed by currently active server) I have configured Ethernet Channel Bonding in Each Cluster Nodes and Channel Bonding Configuration Details are 1) Created bonding devices in "/etc/modprobe.conf" file alias bond0 bonding options bonding miimon=100 mode=1 2) Edit the "/etc/sysconfig/network-scripts/ifcfg-eth0 and ifcfg-eth1" configuration DEVICE=eth0 USERCTL= no ONBOOT=yes MASTER=bond0 SLAVE=yes BOOTPROTO=none DEVICE=eth1 USERCTL= no ONBOOT=yes MASTER=bond0 SLAVE=yes BOOTPROTO=none 3) Created a network script for the bonding device is "/etc/sysconfig/network-scripts/ifcfg-bond0" DEVICE=bond0 USERCTL=no ONBOOT=yes NETMASK=255.255.255.0 GATEWAY=192.168.13.1 IPADDR=192.168.13.110 4) Reboot the system for the changes to take effect. After i am rebooted both the server then cluster node becomes simplex and Services are started on both the nodes The cluster output in primary node Member Status: Quorate Member Name Status ----------- --------- primary Online, Local, rgmanager secondary Offline Service Name Owner (Last) State ------------ ------------ -------- Service primary started The cluster output in secondary node Member Status: Quorate Member Name Status ----------- --------- primary Offline secondary Online, Local, rgmanager Service Name Owner (Last) State ------------ -------------- -------- Service secondary started Before Ethernet Channel Bonding cluster services are active in one node and other nodes acts as passive node. But after Ethernet Channel Bonding cluster services are active on both the nodes I don't know what is the problem and is their any configuration is required in cluster configuration file and cman is working only with eth0 interface Can some one throw light on this peculiar problem Regards -S.Balaji

7 12

script for updating from 4.6 to 5.2 i386
by Jerry Geis 15 Sep '08

15 Sep '08

Is there a script available for upgrade from 4 to 5? I have tried it on one TEST computer following what I thought were the instructions and after the update I still had 2.6.9 kernel not the 2.6.18. I looked in grub.conf and there were no 2.6.18 kernels. Just wonder if someone has automated this process? Thanks, Jerry

3 2

Looking for linphone
by Robert Moskowitz 15 Sep '08

15 Sep '08

Where might I find an rpm for Centos?

8 17

Problems with writing Dual Layer DVD
by Chris Geldenhuis 15 Sep '08

15 Sep '08

Hi, I am running Centos 4 (fully updated on this box). I removed the old DVD writer (/dev/hdc) and installed a new LG GH20 "Internal Super Multi DVD Rewriter" with a SATA interface - this shows up as /dev/scd0. When I insert a pre-recorded DVD autorun mounts it and displays the contents without any hassles. It appears to me that the required kernel modules are loaded - as copied below from lsmod output. sata_nv 18629 0 libata 111261 1 sata_nv sd_mod 17217 0 scsi_mod 125261 3 sr_mod,libata,sd_mod I am using Verbatim DVD-RDL blanks. When I try to write a pre-recorded iso to the DVD I get the following error message: [user@test]$ growisofs -dvd-compat -Z /dev/dvdwriter=<pre-recorded>.iso :-( /dev/dvdwriter: media is not recognized as recordable DVD: 10015 I have tried to do this as root with the same result. /dev/dvdwriter is a link to /dev/scd0 and has full read/write/execute permissions. Output of growisofs -version: * growisofs by <appro(a)fy.chalmers.se>, version 5.21, front-ending to mkisofs: mkisofs 2.01 (i686-pc-linux-gnu) Any suggestions will be welcome - if any further information is required I will do my best to supply it. I have Googled with the error message but only get reports of this problem and no solutions. TIA ChrisG

22 82

SeaMonkey RPM for CentOS 5.2 (32 bit) is in which Yum Repository?
by Lanny Marcus 15 Sep '08

15 Sep '08

I'm curious about SeaMonkey (especially the HTML Composer). Which Yum Repository has the RPM for CentOS 5.2 (32 bit). TIA! [root@dell2400 ~]# yum install seamonkey Loading "priorities" plugin Loading "fastestmirror" plugin Loading mirror speeds from cached hostfile * google: dl.google.com * rpmforge: fr2.rpmfind.net * extras: mirror.cs.vt.edu * updates: mirror.newnanutilities.org * base: mirror.cs.vt.edu * addons: styx.biochem.wfubmc.edu * adobe-linux-i386: linuxdownload.adobe.com 294 packages excluded due to repository priority protections Setting up Install Process Parsing package install arguments No package seamonkey available. Nothing to do [root@dell2400 ~]#

3 9

replacing CPU fan
by Craig White 15 Sep '08

15 Sep '08

I've got a remote system where I think I need to replace the CPU fan. in the output of dmidecode, I get... Processor Information Socket Designation: CPU 1 Type: Central Processor Family: <OUT OF SPEC> Manufacturer: Intel ID: 47 0F 00 00 FF FB EB BF Version: Intel(R) Pentium(R) D CPU 2.66GHz Voltage: 1.4 V External Clock: 133 MHz Max Speed: 2666 MHz Current Speed: 2666 MHz is this enough to tell me what kind of fan I need to get? It's obvious it's a Pentium IV. What other command/what other command might I be able to run to parse in order to get information so I get the right CPU fan? Craig

3 2

question on sending mail with 5.2
by Jerry Geis 15 Sep '08

15 Sep '08

I made a little file with a From:, To: and body. I execute the command cat file.txt | sendmail -t -O MinQueueAge=1m thinking that the message would try every minute to send instead of the default 30m. (if the initial attempt failed of course). This doesnt seem to have any effect? In the event I have an important email and I want it try perhaps every minute (1minute) to send the email how do I accomplish this from the sendmail command line? Thanks, jerry

5 7

Directory Server question - enable access by host
by Kwan Lowe 15 Sep '08

15 Sep '08

Hello All: I am in the process of migrating from OpenLDAP to Centos Directory Server. I'm very pleased with the new LDAP and think it's one of those killer apps that will guarantee Linux a place in data centers :D... So far I've gotten the main things working: 1) Host based access via AuthorizedHost 2) Service based access via AuthorizedService 3) AIX/Linux <-> LDAP 4) PosixGroup support The one thing I would like is to have group based host access control. E.g., I would like to define a new LDAP group (say, DBA-Production) that includes a bunch of host entries. When needed, I could add a user to the DBA-Production group and automatically give him/her access to the list of defined hosts. Anyone have suggestions on how to approach this? Thanks, Kwan

1 0

Re: [CentOS] Perhaps slightly OT - Lots of spurious webdav requests.
by Friedrich Clausen 15 Sep '08

15 Sep '08

On Mon, Sep 15, 2008 at 10:58 AM, Kenneth Porter <shiva(a)sewingwitch.com> wrote: > --On Monday, September 15, 2008 10:05 AM +0200 Friedrich Clausen > <fred(a)derf.nl> wrote: > >> I have most assuredly not told windows to try and use a Web folder on >> the CentOS file server called "/share1", just the CIFS share. > > Apparently Windows will search multiple "providers" for the share string you > pass, and the successful results are then sorted by provider priority. Ah yes, I believe you are right. Thanks for the info! Regards, Fred. > >> From <http://support.microsoft.com/kb/832161> > >> When an application tries to open a file that exists on a network, the >> I/O manager passes the request to a system component that is named the >> Multiple UNC Provider (MUP). MUP sits logically above all the >> redirectors. When a network path is passed to MUP, it polls all the >> registered redirectors to determine whether they understand the path. The >> redirectors in turn contact the server to establish if the path is valid >> for the specific protocol. If the server can satisfy the connection, the >> redirector will return success back the MUP. If not, the redirector >> returns a failure. All the future file I/O requests for this file are >> passed to the redirector that accepted the path. If more than one >> redirector accepts the path, MUP picks the one with the highest priority, >> as defined in the registry. > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos >

1 0

Perhaps slightly OT - Lots of spurious webdav requests.
by Friedrich Clausen 15 Sep '08

15 Sep '08

Hello All, I am running a CentOS 4.6 file server for a small office network and I am getting a lot of strange webdav requests from one of the Windows workstations - I have not configured Webdav on the Windows host (hereafter "windows-laptop") in question. Some details - I have configured a Samba share called (say) "share1" on the CentOS server and the windows-laptop connects to this share using CIFS, nothing unusual there. But, for some reason, windows-laptop also tried to access a Webdav folder by the same name ("share1") - lots of log entries such as the following (it seems to try every two minutes): 10.11.1.95 - - [14/Sep/2008:04:10:32 -0400] "OPTIONS / HTTP/1.1" 200 - "-" "Microsoft-WebDAV-MiniRedir/5.1.2600" 10.11.1.95 - - [14/Sep/2008:04:10:32 -0400] "PROPFIND /share1 HTTP/1.1" 405 312 "-" "Microsoft-WebDAV-MiniRedir/5.1.2600" I have most assuredly not told windows to try and use a Web folder on the CentOS file server called "/share1", just the CIFS share. My conclusions - * Windows is trying to be clever and automatically map CIFS shares to a Web folder. * Malware is trying to access a Webfolder by same name as CIFS share. Any hints from the list would be much appreciated! Thanks, Fred.

2 1

Computer and network devices management tool
by Lunix1618 15 Sep '08

15 Sep '08

Hello, I have to deploy a monitoring system that need to keep watch on every device/host on my LAN. Can anyone recommend me a tool that in CentOS packages stock ? I know some tool like GLPI but no available CentOS package so I want to looking for something else that already that tested on CentOS. I am running CentOS 5.2 Thanks in advance. Regards,

2 1

Slackware's 'explodepkg' equivalent for rpm?
by Niki Kovacs 15 Sep '08

15 Sep '08

Hi, Is there any 'explodepkg' equivalent for the rpm command? What I want is simply uncompress an RPM package to get the files directly, but I didn't find anything in rpm's manpage. Cheers, Niki Kovacs

6 6

HP Hardware
by Mag Gam 14 Sep '08

14 Sep '08

At my university we use HP hardware exclusively. When we build CentOS our Unix SA is running several HP utilities. I am wondering what some of these utilities are, such as cmaidad. Is it possible to to use these HP utilities to monitor for disk crashes (similar to smartd)? Is anyone using native HP utilities for this purpose? TIA

3 3

Installing libpng
by Joe Tseng 14 Sep '08

14 Sep '08

I've been trying to install perl-Tk and I learned v804.028 uses libpng > 1.2.20; CentOS 5.2 still uses 1.2.10. Is there an RPM out there I can use that's > 1.2.20? I'm just afraid of compiling from source code and breaking all the apps that depend on what's on the system right now. - Joe

2 1

Local yum repository
by saurabh 14 Sep '08

14 Sep '08

Hi All, i have a local repository configured for 'yum',which have files copied over from the RHEL DVD,It was configured initially,as i was facing some issues with my NIC which was not supported on 2.6.18 so had to upgrade to 2.6.26. Now as all is working fine and i'm on net i want to disable that repository and just use the rpmforge repository configured on my system following directions from http://wiki.centos.org/AdditionalResources/Repositories/RPMForge?action=sho… Please help me out - Disabling the local Repo or by - Any method to keep it up to date ,[syncing it with some online repository]

3 4

Illegal opp code
by Dermot 14 Sep '08

14 Sep '08

Hi, HP DL 385 G2. CentOS 5.1 Kernel 2.6.18-92.1.10.el5 I have a newly installed server that was running x. It told me there were updates to install. I accepted that all, except sysreport as I always seem to have problems installing. I rebooted, having set the default run level to 3. I then got a red screen with an "illegal OpCode" error message. I have used my CD to boot into rescue more. My old system is mounted under /mnt. I would also like to get my system back up and running. I have put a fair bit of time into loading libraries and software. I have tried editing the grub.conf and commenting out the 2.6.18-92.1.10.el5 kernel so it used a previous kernel but I can not get past this error. There is no message from grub. The system comes straight from the BIOS messages into this red screen. Is there any other ways to determine what the problem is? The error messages says nothing more that a few lines of hex which don't look useful to me. Any thoughts would be appreciated. TIA. Dp.

1 1

Installing nVidia driver on remote CentOS 4
by Eon Strife 14 Sep '08

14 Sep '08

Hi, There's a linux cluster somewhere (using Rocks), and I use remote desktop (nxmachine) to do the work on the frontend of the cluster. The desktop is Gnome. And, I intend to install new nVidia driver, but it requires me to stop the X Server. I check around the internet, they say we can use the /etc/init.d/gdm stop, but I can't run it since the gdm file does not exist. Another alternative is by rebooting the Linux (of course, we change the inittab before). But I don't know how to reboot remotely. Moreover, I don't know if it is safe to reboot Linux remotely, because I can't physically access the linux workstation. Oh, the operating system of the Linux is CentOS 4. What should I do ? Thanks. New Email names for you! Get the Email name you've always wanted on the new @ymail and @rocketmail. Hurry before someone else does! http://mail.promotions.yahoo.com/newdomains/aa/

3 2

Re: [CentOS] Problem to run 4 virtual machines at a time.
by Wilson Lee 13 Sep '08

13 Sep '08

nate wrote: >What is vyatta system? From a search the closest I can find is >some sort of software that provides routing functionality > >http://www.vyatta.com/index.php > >Is that it ? Correct. Vyatta is an open source full-featured router/firewall/vpn solution based on Debian. It can be installed on a physical computer or virtualized. Especially in a virtualized environment, Vyatta allows one to easily segregate network segments. Resource requirements can be very low depending on the level of traffic and features enabled. I currently use it as my primary home router for my static PPPoE AT&T DSL. I also use it to provide inter-VLAN routing. At my previous employment, I used it for inter-VLAN routing - segments for VoIP, LAN, and DMZ. It worked very well and never had a hiccup. Best of all, there is no fee for the community edition, with a new version about every 6 months. There's a subscription service if you want technical support and timely updates. BTW, I don't work for Vyatta, just a happy user of their product. Here are the technical specs from their website: HARDWARE SUPPORT » 32-bit x86 processors » PC architecture INTERFACES » 10/100/1000 Ethernet cards » 10 GbE cards » T1/E1 cards – 1 port » T1/E1 cards – 2 port » T1/E1 cards – 4 port » T3 cards IP AND ROUTING PROTOCOLS » IPv4 » OSPFv2 » BGPv4 » RIPv2 » Static routes IP ADDRESS MANAGEMENT » Static » DHCP server » DHCP client » DHCP relay ENCAPSULATIONS » Ethernet » 802.1Q VLANs » PPP » PPPoE » MLPPP » Frame Relay » HDLC » GRE, IP-in-IP LOAD BALANCING » WAN link load balancing » MLPPP » ECMP QoS » Priority Queuing » Classful Queuing » Bandwidth Management SECURITY » Stateful inspection fi rewall » Network address translation » IPSec VPN » Remote VPN (PPTP, L2TP, IPSec) » DES, 3DES, AES Encryption » MD5 and SHA-1 Authentication » RSA, Diffi e Helman Key Management » NAT Traversal » RADIUS authentication » Individual user accounts and passwords HIGH AVAILABILITY » VRRP (Virtual Router Redundancy Protocol) » IPSec VPN Clustering » Protocol fault isolation ADMINISTRATION » Integrated CLI » Web GUI* » Single confi guration fi le » Telnet » SSHv2 » Network upgrades DEBUGGING AND PACKET SNIFFING » tcpdump » Wireshark packet capture LOGGING AND MONITORING » Syslog » SNMPv2c * Web GUI Available Q3 ‘08 Wilson _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

2 1

Startup programs in specific workspaces
by MHR 13 Sep '08

13 Sep '08

I have a specific method of using my five GNOME workspaces to perform certain categories of tasks when I log in on a machine, so I just had a thought. Is there a way to specify, say from a login script, for an application to start up in a particular workspace, preferably with a specific "screen" location? Or is this a gnome question? Thanks. mhr

4 5

Newbies to CentOS List
by Josh Donovan 13 Sep '08

13 Sep '08

Guidelines for CentOS Mailing List posts * Mailing List Etiquette * How To Ask Questions The Smart Way * Quoting Style * Why is Bottom-posting better than Top-posting 1. Please turn off HTML in your e-mail client for these mailing lists. We have several subscribers who read the list with text only readers and they can't easily read html formatted e-mails. There is a place (somewhere) for the flowery stationary and themes that some mail clients offer ... but this is not it. Again, please only post text e-mails to these mailing lists. 2. Please do not top post to the mailing list when replying to a post. (See the Quoting Style link above, and use the Interleaved text method , deleting non-applicable text as required. If you need to reply to a message, and you do not need to post in interleaved mode, please bottom post instead of top posting. 3. Please trim the extra stuff in the email and leave enough to make sense of the thread. Note: There are places to debate the merits of top posting and how it might have some advantages in relation to Interleaved text or bottom posting ... but this is not one of those places. Extracted from http://www.centos.org/modules/tinycontent/index.php?id=16 I added no 3 above. I had not been on this mailing list or others for a while but I thought other newbies would benefit. Thanks, Josh.

2 1

(no subject)
by Bob Hoffman 13 Sep '08

13 Sep '08

Hi all.. I have centos 5.2 There is a cron file that is commented out to auto update the rules of spamassassin Location: /etc/cron.d/sa-update This file is chmod 600, should it not be 755? All the other crons are 755 This line is commented. #10 4 * * * root /usr/share/spamassassin/sa-update.cron 2>&1 | tee -a /var/log/sa-update.log Questions 1- should I re chmod it to 600 or leave it at 755? Is anyone else using this? The cron file says to read a certain wiki page and do this cron at your own peril. Yet I find no warnings on that wiki page that would make me think this was bad. Thanks all

2 1

4.7 update issues?
by RobertH 13 Sep '08

13 Sep '08

Greets, Thank you to all the CentOS team and supporters. :-) Just wondering though... Any 4.7 update issues or horror stories yet? Also, anyone that has upstream support and previously updated, any issues for Internet facing, or other, production machines ? - rh

3 3

Problem to run 4 virtual machines at a time.
by mallikarjun gudisagar 13 Sep '08

13 Sep '08

Hi all I have installed vyatta system, (vyatta-livecd-vc4-alpha2.iso ) on top of Centos5. Our system requirement is, * Centos 5.1 (2.6.18-92.1.10.el5xen ) * 2 Gb RAM, * x86_64 And cpu information is as follow, [root@turtle4 ~]# cat /proc/cpuinfo processor : 0 vendor_id : AuthenticAMD cpu family : 15 model : 107 model name : AMD Athlon(tm) 64 X2 Dual Core Processor 4000+ stepping : 1 cpu MHz : 2100.010 cache size : 512 KB physical id : 0 siblings : 1 core id : 0 cpu cores : 1 fpu : yes fpu_exception : yes cpuid level : 1 wp : yes flags : fpu tsc msr pae mce cx8 apic mtrr mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt lm 3dnowext 3dnow pni cx16 lahf_lm cmp_legacy svm cr8_legacy bogomips : 5252.03 TLB size : 1024 4K pages clflush size : 64 cache_alignment : 64 address sizes : 40 bits physical, 48 bits virtual power management: ts fid vid ttp tm stc [6] processor : 1 vendor_id : AuthenticAMD cpu family : 15 model : 107 model name : AMD Athlon(tm) 64 X2 Dual Core Processor 4000+ stepping : 1 cpu MHz : 2100.010 cache size : 512 KB physical id : 1 siblings : 1 core id : 0 cpu cores : 1 fpu : yes fpu_exception : yes cpuid level : 1 wp : yes flags : fpu tsc msr pae mce cx8 apic mtrr mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt lm 3dnowext 3dnow pni cx16 lahf_lm cmp_legacy svm cr8_legacy bogomips : 5252.03 TLB size : 1024 4K pages clflush size : 64 cache_alignment : 64 address sizes : 40 bits physical, 48 bits virtual power management: ts fid vid ttp tm stc [6] My problem is i have installed '4' virtual machines. each virtual machine have 256Mb RAM. But i am not able to run 4 virtual machines at a time. Please help me, what should i have to do? Thanks mallu

2 1

CentOS-announce Digest, Vol 43, Issue 4
by centos-announce-request＠centos.org 13 Sep '08

13 Sep '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:0884 Important CentOS 3 ia64 libxml2 - security update (Pasi Pirhonen) 2. CESA-2008:0884 Important CentOS 4 ia64 libxml2 - security update (Pasi Pirhonen) 3. CESA-2008:0884 Important CentOS 3 s390(x) libxml2 - security update (Pasi Pirhonen) 4. CESA-2008:0884 Important CentOS 4 s390(x) libxml2 - security update (Pasi Pirhonen) 5. CentOS 4.7 is released for i386 and x86_64 (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 12 Sep 2008 19:10:39 +0300 From: Pasi Pirhonen <upi(a)centos.fi> Subject: [CentOS-announce] CESA-2008:0884 Important CentOS 3 ia64 libxml2 - security update To: centos-announce(a)centos.org Message-ID: <20080912161039.GQ9914(a)centos.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2008:0884 https://rhn.redhat.com/errata/RHSA-2008-0884.html The following updated files have been uploaded and are currently syncing to the mirrors: ia64: updates/ia64/RPMS/libxml2-2.5.10-13.ia64.rpm updates/ia64/RPMS/libxml2-devel-2.5.10-13.ia64.rpm updates/ia64/RPMS/libxml2-python-2.5.10-13.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

Centos Website
by Dan Carl 13 Sep '08

13 Sep '08

I can't connect, appears to be down. Thought I'd post in case whoevers in charge is listening here. Dan

6 8

Java install
by Ric Moore 13 Sep '08

13 Sep '08

While using Fedora, I always used java straight from Sun. What is recommended for CentOS?? Getting jetty, java and other java apps working correctly has been a real chore. If I used nothing but RPMs for CEntOS, would I have a real working java install? I need some help on this one badly. Ric -- ---------------------------------------------------- My father, Victor Moore (Vic) used to say: "There are two Great Sins in the world... ..the Sin of Ignorance, and the Sin of Stupidity. Only the former may be overcome." R.I.P. Dad. Linux user# 44256 Sign up at: http://counter.li.org/ https://nuoar.dev.java.net/ Verizon Cell # 336-254-1339

6 19

Standby Issue
by Test 13 Sep '08

13 Sep '08

Hi List, I'm running Centos 5.2 on an Pentium III-1000 The box has been running for almost a year without any (hardware) issues. SInce a few weeks the box goes into standby (power led flashes) without any obvious reason (ie. i cannot find anything). This happens randomly (box runs for 1 day and does this, next time it runs for 5 days and it happens). Normally when a box goes into standby, you should be able to start it again pressing the power button, but this does not work. I have to completely unplug it and then it boots up again (after plugging it in again ;-)) I thought it was due to a kernel upgrade from 2.6.18-92.1.6 to 2.6.18-92.1.10, but after a downgrade the same issue occurred I have checked about all settings (loaded modules, logfiles, bios etc.) I have stopped the acpid, still no go... cpuspeed is not running... Bios has got all powermanagement stuff disable.. So basically i am looking for some hints on solving this... Anyone...? -- Test <test(a)remedial-teacher.nl>

7 7

A glimpse into the future for RHEL 6 and CentOS 6
by Scott Silva 13 Sep '08

13 Sep '08

http://searchenterpriselinux.techtarget.com/news/article/0,289142,sid39_gci… -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!!

4 3

DNS Logging with Selinux enabled
by Josh Donovan 12 Sep '08

12 Sep '08

I rebuilt my server and setup bind to log queries in a chroot. ################################################################################ # Logging Configuration # logging { # # Define channels for the two log files # channel query_log { severity info; print-time yes; file "/var/log/query.log" versions 3 size 100M; }; channel activity_log { severity info; print-time yes; print-category yes; print-severity yes; file "/var/log/activity.log" versions 3 size 100M; Below is the security context of the files in the chroot. [root@josh log]# ls -alZ /var/named/chroot/var/log/activity.log -rw-r--r-- named named root:object_r:named_conf_t /var/named/chroot/var/log/activity.log [root@josh log]# ls -alZ /var/named/chroot/var/log/query.log -rw-r--r-- named named root:object_r:named_conf_t /var/named/chroot/var/log/query.log I temporarily disabled selinux but there was one simple step I missed (forgot since i did this years ago). I briefly recall creating a symlink and/or using chcon or one of the selinux commands. Thanks, Josh

4 8

CentOS 4.7 status
by Adrian Sevcenco 12 Sep '08

12 Sep '08

Hi, i was wondering what is the status of 4.7 Thank you, Best regards, Adrian

15 23

Custom build kernel patch fails big time.
by Robert Moskowitz 12 Sep '08

12 Sep '08

I am trying to build a custom kernel for the HIPL code (infrahip.hip.fi), using the patch for the Linux 2.6.18 kernel. I followed all the instructions for getting the kernel source and making a custom kernel provided on the wiki. The rpmbuild fails with the following messages: Get an error on this step (figured out my other problem): Patch #40000 (centos-5.2-hipmod-sleep-beet-and-interfamily-all-in-one.patch): 1 out of 4 hunks FAILED -- saving rejects to file net/ipv4/xfrm4_output.c.rej 2 out of 3 hunks FAILED -- saving rejects to file net/ipv4/esp4.c.rej 1 out of 1 hunk FAILED -- saving rejects to file net/ipv6/udp.c.rej 1 out of 1 hunk FAILED -- saving rejects to file net/ipv6/tcp_ipv6.c.rej 1 out of 1 hunk FAILED -- saving rejects to file net/ipv6/esp6.c.rej 2 out of 2 hunks FAILED -- saving rejects to file net/ipv6/icmp.c.rej 2 out of 2 hunks FAILED -- saving rejects to file net/xfrm/xfrm_state.c.rej 1 out of 2 hunks FAILED -- saving rejects to file include/net/xfrm.h.rej Reversed (or previously applied) patch detected! Assume -R? [n] Apply anyway? [n] 1 out of 1 hunk ignored -- saving rejects to file include/linux/net.h.rej I've asked for help on the hipl list, but there is no real experience there with Centos (FC8 and 9), and they are trying to help, put perhaps someone here might know what I am doing wrong? Oh, one question was asked about how the ~/rpmbuild/BUILD/kernel-2.16.18 directory looks like. I think the linux-2.6.18.i386 (or i686) is not what the patch is expecting? Here is the patch file (centos-5.2-hipmod-sleep-beet-and-interfamily-all-in-one.patch): diff -urN a/net/ipv4/xfrm4_input.c b/net/ipv4/xfrm4_input.c --- a/net/ipv4/xfrm4_input.c 2007-05-25 12:21:11.000000000 +0300 +++ b/net/ipv4/xfrm4_input.c 2007-05-25 12:21:11.000000000 +0300 @@ -13,6 +13,7 @@ #include <linux/string.h> #include <linux/netfilter.h> #include <linux/netfilter_ipv4.h> +#include <net/inet_ecn.h> #include <net/ip.h> #include <net/xfrm.h> @@ -23,6 +24,15 @@ EXPORT_SYMBOL(xfrm4_rcv); +static inline void ipip_ecn_decapsulate(struct sk_buff *skb) +{ + struct iphdr *outer_iph = skb->nh.iph; + struct iphdr *inner_iph = skb->h.ipiph; + + if (INET_ECN_is_ce(outer_iph->tos)) + IP_ECN_set_ce(inner_iph); +} + static int xfrm4_parse_spi(struct sk_buff *skb, u8 nexthdr, u32 *spi, u32 *seq) { switch (nexthdr) { @@ -103,11 +113,11 @@ xfrm_vec[xfrm_nr++] = x; - if (x->mode->input(x, skb)) + if (x->mode->input(x, skb)) goto drop; - + if (x->props.mode) { - decaps = 1; + decaps = 1; break; } diff -urN a/net/ipv4/xfrm4_output.c b/net/ipv4/xfrm4_output.c --- a/net/ipv4/xfrm4_output.c 2007-05-25 12:21:11.000000000 +0300 +++ b/net/ipv4/xfrm4_output.c 2007-05-25 12:21:11.000000000 +0300 @@ -14,10 +14,12 @@ #include <linux/skbuff.h> #include <linux/spinlock.h> #include <linux/netfilter_ipv4.h> +#include <net/inet_ecn.h> #include <net/ip.h> #include <net/xfrm.h> #include <net/icmp.h> + static int xfrm4_tunnel_check_size(struct sk_buff *skb) { int mtu, ret = 0; @@ -54,7 +56,7 @@ goto error_nolock; } - if (x->props.mode) { + if (x->props.mode == XFRM_MODE_TUNNEL) { err = xfrm4_tunnel_check_size(skb); if (err) goto error_nolock; @@ -66,7 +68,7 @@ if (err) goto error; - err = x->mode->output(skb); + err = x->mode->output(skb); if (err) goto error; @@ -85,6 +87,7 @@ } dst = skb->dst; x = dst->xfrm; + } while (x && !x->props.mode); IPCB(skb)->flags |= IPSKB_XFRM_TRANSFORMED; diff -urN a/net/ipv4/xfrm4_tunnel.c b/net/ipv4/xfrm4_tunnel.c --- a/net/ipv4/xfrm4_tunnel.c 2007-05-25 12:21:11.000000000 +0300 +++ b/net/ipv4/xfrm4_tunnel.c 2007-05-25 12:21:11.000000000 +0300 @@ -28,13 +28,20 @@ static int ipip_init_state(struct xfrm_state *x) { - if (!x->props.mode) - return -EINVAL; - if (x->encap) return -EINVAL; - x->props.header_len = sizeof(struct iphdr); + switch (x->props.mode) { + case XFRM_MODE_TRANSPORT: + return -EINVAL; + default: + case XFRM_MODE_TUNNEL: + x->props.header_len = sizeof(struct iphdr); + break; + case XFRM_MODE_BEET: + x->props.header_len += IPV4_BEET_PHMAXLEN; + break; + } return 0; } diff -urN a/net/ipv4/route.c b/net/ipv4/route.c --- a/net/ipv4/route.c 2007-05-25 12:21:11.000000000 +0300 +++ b/net/ipv4/route.c 2007-05-25 12:21:11.000000000 +0300 @@ -108,6 +108,7 @@ #ifdef CONFIG_SYSCTL #include <linux/sysctl.h> #endif +#include <linux/xfrm.h> #define RT_FL_TOS(oldflp) \ ((u32)(oldflp->fl4_tos & (IPTOS_RT_MASK | RTO_ONLINK))) @@ -2631,7 +2632,7 @@ int ip_route_output_key(struct rtable **rp, struct flowi *flp) { - return ip_route_output_flow(rp, flp, NULL, 0); + return ip_route_output_flow(rp, flp, NULL, XFRM_LOOKUP_SLEEP); } static int rt_fill_info(struct sk_buff *skb, u32 pid, u32 seq, int event, diff -urN a/net/ipv4/ah4.c b/net/ipv4/ah4.c --- a/net/ipv4/ah4.c 2007-05-25 12:21:11.000000000 +0300 +++ b/net/ipv4/ah4.c 2007-05-25 12:21:11.000000000 +0300 @@ -253,8 +253,10 @@ goto error; x->props.header_len = XFRM_ALIGN8(sizeof(struct ip_auth_hdr) + ahp->icv_trunc_len); - if (x->props.mode) + if (x->props.mode == XFRM_MODE_TUNNEL) x->props.header_len += sizeof(struct iphdr); + else if (x->props.mode == XFRM_MODE_BEET) + x->props.header_len += IPV4_BEET_PHMAXLEN; x->data = ahp; return 0; diff -urN a/net/ipv4/xfrm4_policy.c b/net/ipv4/xfrm4_policy.c --- a/net/ipv4/xfrm4_policy.c 2007-05-25 12:21:11.000000000 +0300 +++ b/net/ipv4/xfrm4_policy.c 2007-05-25 12:21:11.000000000 +0300 @@ -16,6 +16,8 @@ static struct dst_ops xfrm4_dst_ops; static struct xfrm_policy_afinfo xfrm4_policy_afinfo; +static void xfrm4_update_pmtu(struct dst_entry *dst, u32 mtu); + static int xfrm4_dst_lookup(struct xfrm_dst **dst, struct flowi *fl) { return __ip_route_output_key((struct rtable**)dst, fl); @@ -53,17 +55,20 @@ struct dst_entry *dst, *dst_prev; struct rtable *rt0 = (struct rtable*)(*dst_p); struct rtable *rt = rt0; - u32 remote = fl->fl4_dst; - u32 local = fl->fl4_src; struct flowi fl_tunnel = { .nl_u = { .ip4_u = { - .saddr = local, - .daddr = remote, + .saddr = fl->fl4_dst, + .daddr = fl->fl4_src, .tos = fl->fl4_tos } } }; + union { + struct in6_addr *in6; + struct in_addr *in; + } remote, local; + unsigned short outer_family = 0, beet = 0; int i; int err; int header_len = 0; @@ -75,7 +80,6 @@ for (i = 0; i < nx; i++) { struct dst_entry *dst1 = dst_alloc(&xfrm4_dst_ops); struct xfrm_dst *xdst; - int tunnel = 0; if (unlikely(dst1 == NULL)) { err = -ENOBUFS; @@ -96,21 +100,45 @@ dst1->next = dst_prev; dst_prev = dst1; - if (xfrm[i]->props.mode) { - remote = xfrm[i]->id.daddr.a4; - local = xfrm[i]->props.saddr.a4; - tunnel = 1; + + if (xfrm[i]->props.mode == XFRM_MODE_TUNNEL || xfrm[i]->props.mode == XFRM_MODE_BEET) { + outer_family = xfrm[i]->props.family; + beet = (xfrm[i]->props.mode == XFRM_MODE_BEET); + + if(outer_family == AF_INET6){ + remote.in6 = (struct in6_addr*)&xfrm[i]->id.daddr; + local.in6 = (struct in6_addr*)&xfrm[i]->props.saddr; + } else if(outer_family == AF_INET){ + remote.in = (struct in_addr*)&xfrm[i]->id.daddr; + local.in = (struct in_addr*)&xfrm[i]->props.saddr; + } else + BUG_ON(1); } header_len += xfrm[i]->props.header_len; trailer_len += xfrm[i]->props.trailer_len; - if (tunnel) { - fl_tunnel.fl4_src = local; - fl_tunnel.fl4_dst = remote; + if (outer_family) { + switch(outer_family) { + case AF_INET: + fl_tunnel.fl4_dst = remote.in->s_addr; + fl_tunnel.fl4_src = local.in->s_addr; + break; + case AF_INET6: + ipv6_addr_copy(&fl_tunnel.fl6_dst, remote.in6); + ipv6_addr_copy(&fl_tunnel.fl6_src, local.in6); + break; + default: + BUG_ON(1); + } err = xfrm_dst_lookup((struct xfrm_dst **)&rt, - &fl_tunnel, AF_INET); + &fl_tunnel, outer_family); if (err) goto error; + /* Without this, the atomic inc below segfaults */ + if (outer_family == AF_INET6) { + rt->peer = NULL; + rt_bind_peer(rt,1); + } } else dst_hold(&rt->u.dst); } @@ -160,6 +188,11 @@ } xfrm_init_pmtu(dst); + if (beet && outer_family == AF_INET6) { + int delta = sizeof(struct ipv6hdr) - sizeof(struct iphdr); + u32 mtu = dst_mtu(dst); + xfrm4_update_pmtu(dst, mtu - delta); + } return 0; error: diff -urN a/net/ipv4/xfrm4_mode_tunnel.c b/net/ipv4/xfrm4_mode_tunnel.c --- a/net/ipv4/xfrm4_mode_tunnel.c 2007-05-25 12:21:11.000000000 +0300 +++ b/net/ipv4/xfrm4_mode_tunnel.c 2007-05-25 12:21:11.000000000 +0300 @@ -33,7 +33,7 @@ * On exit, skb->h will be set to the start of the payload to be processed * by x->type->output and skb->nh will be set to the top IP header. */ -static int xfrm4_tunnel_output(struct sk_buff *skb) + static int xfrm4_tunnel_output(struct sk_buff *skb) { struct dst_entry *dst = skb->dst; struct xfrm_state *x = dst->xfrm; @@ -98,6 +98,182 @@ return err; } +/* jk: this should be moved to the beet module! */ +static int xfrm4_beet_output(struct sk_buff *skb) +{ + struct dst_entry *dst = skb->dst; + struct xfrm_state *x = dst->xfrm; + int hdrlen; + struct iphdr *iphv4, *top_iphv4; + struct ipv6hdr *iphv6, *top_iphv6; + + if (skb->nh.iph->version == 4) { + + int optlen; + + /* 4-4 */ + + iphv4 = skb->nh.iph; + skb->h.ipiph = iphv4; + + hdrlen = x->props.header_len; + + optlen = iphv4->ihl * 4 - sizeof(*iphv4); + if (!optlen) { + hdrlen -= IPV4_BEET_PHMAXLEN; + } else { + skb->h.raw -= (IPV4_BEET_PHMAXLEN - (optlen & 4)); + hdrlen -= optlen & 4; + } + + skb->nh.raw = skb_push(skb, hdrlen); + top_iphv4 = skb->nh.iph; + + hdrlen = iphv4->ihl * 4 - optlen; + skb->h.raw += hdrlen; + memmove(top_iphv4, iphv4, hdrlen); + + if (unlikely(optlen)) { + struct ip_beet_phdr *ph; + + BUG_ON(optlen < 0); + + ph = (struct ip_beet_phdr *)skb->h.raw; + ph->padlen = 4 - (optlen & 4); + ph->hdrlen = (optlen + ph->padlen + sizeof(*ph)) / 8; + ph->nexthdr = iphv4->protocol; + top_iphv4->protocol = IPPROTO_BEETPH; + top_iphv4->ihl = sizeof(struct iphdr) / 4; + } + + top_iphv4->saddr = x->props.saddr.a4; + top_iphv4->daddr = x->id.daddr.a4; + + } else if (skb->nh.iph->version == 6) { + + u8 protocol; + int delta = sizeof(struct ipv6hdr) - sizeof(struct iphdr); + + /* Inner = 6, Outer = 4 : changing the external IP hdr + * to the outer addresses + */ + + hdrlen = x->props.header_len - IPV4_BEET_PHMAXLEN; + skb_push(skb, hdrlen); + iphv6 = skb->nh.ipv6h; + + skb->nh.raw = skb->data; + top_iphv6 = skb->nh.ipv6h; + + protocol = iphv6->nexthdr; + skb->nh.raw = skb_pull(skb, delta); + top_iphv4 = skb->nh.iph; + skb->h.raw = skb->data + hdrlen; + top_iphv4->ihl = (sizeof(struct iphdr) >> 2); + top_iphv4->version = 4; + top_iphv4->id = 0; + top_iphv4->frag_off = htons(IP_DF); + top_iphv4->ttl = dst_metric(dst->child, RTAX_HOPLIMIT); + top_iphv4->saddr = x->props.saddr.a4; + top_iphv4->daddr = x->id.daddr.a4; + skb->h.raw += top_iphv4->ihl*4; + top_iphv4->protocol = protocol; + + } else + BUG_ON(1); + + return 0; +} + + +/* jk: this should be moved to the beet module! */ +static int xfrm4_beet_input(struct xfrm_state *x, struct sk_buff *skb) +{ + int err = -EINVAL; + int phlen = 0; + int optlen = 0; + __u8 ph_nexthdr = 0; + int size = (x->sel.family == AF_INET) ? sizeof(struct iphdr) : sizeof(struct ipv6hdr); + int proto = skb->nh.iph->protocol; + int hops = skb->nh.iph->ttl; + int delta = sizeof(struct ipv6hdr) - sizeof(struct iphdr); + + if (x->sel.family == AF_INET6) { + /* Here, the inner family is 6, therefore I have to + * substitute the IPhdr by enlarging it */ + if (skb_tailroom(skb) < delta){ + if (pskb_expand_head(skb, 0, delta, GFP_ATOMIC)) + goto out; //Just returning from here. + } + + skb->nh.raw -= delta; + } else if (x->sel.family == AF_INET) { + // We need to extract the PH + struct ip_beet_phdr *ph = (struct ip_beet_phdr*)(skb->nh.iph + 1); + + if (proto == IPPROTO_BEETPH) { + if (!pskb_may_pull(skb, sizeof(*ph))) + goto out; + phlen = ph->hdrlen * 8; + optlen = phlen - ph->padlen - sizeof(*ph); + + if (optlen < 0 || optlen & 3 || optlen > 250) + goto out; + if (!pskb_may_pull(skb, phlen)) + goto out; + + ph_nexthdr = ph->nexthdr; + } + } else + BUG_ON(1); + + if (skb_cloned(skb) && + pskb_expand_head(skb, 0, 0, GFP_ATOMIC)) + goto out; + + skb_push(skb, size); + memmove(skb->data, skb->nh.raw, size); + skb->nh.raw = skb->data; + + if (x->sel.family == AF_INET) { + struct iphdr *iph = skb->nh.iph; + + if (unlikely(phlen)) { + skb_pull(skb, phlen - optlen); + memmove(skb->data, skb->nh.raw, sizeof(*iph)); + skb->nh.raw = skb->data; + iph = skb->nh.iph; + } + + iph->ihl = (sizeof(*iph) + optlen) / 4; + iph->tot_len = htons(skb->len); + iph->daddr = x->sel.daddr.a4; + iph->saddr = x->sel.saddr.a4; + if (ph_nexthdr) + iph->protocol = ph_nexthdr; + else + iph->protocol = proto; + ip_send_check(iph); + } else if (x->sel.family == AF_INET6) { + struct ipv6hdr *ip6h = skb->nh.ipv6h; + + memset(ip6h->flow_lbl, 0, sizeof(ip6h->flow_lbl)); + ip6h->version = 6; + ip6h->priority = 0; + ip6h->nexthdr = proto; + ip6h->hop_limit = hops; + ip6h->payload_len = htons(skb->len - size); + ipv6_addr_copy(&ip6h->daddr, (struct in6_addr *)&x->sel.daddr.a6); + ipv6_addr_copy(&ip6h->saddr, (struct in6_addr *)&x->sel.saddr.a6); + skb->protocol = htons(ETH_P_IPV6); + } + + err = 0; + out: + + return err; +} + static struct xfrm_mode xfrm4_tunnel_mode = { .input = xfrm4_tunnel_input, .output = xfrm4_tunnel_output, @@ -105,8 +281,19 @@ .encap = XFRM_MODE_TUNNEL, }; +/* jk: this should be moved to the beet module! */ +static struct xfrm_mode xfrm4_beet_mode = { + .input = xfrm4_beet_input, + .output = xfrm4_beet_output, + .owner = THIS_MODULE, + .encap = XFRM_MODE_BEET, +}; + static int __init xfrm4_tunnel_init(void) { + int err; + /* jk: this should be moved to the beet module! */ + err = xfrm_register_mode(&xfrm4_beet_mode, AF_INET); return xfrm_register_mode(&xfrm4_tunnel_mode, AF_INET); } @@ -114,6 +301,9 @@ { int err; + /* jk: this should be moved to the beet module! */ + err = xfrm_unregister_mode(&xfrm4_beet_mode, AF_INET); + BUG_ON(err); err = xfrm_unregister_mode(&xfrm4_tunnel_mode, AF_INET); BUG_ON(err); } diff -urN a/net/ipv4/esp4.c b/net/ipv4/esp4.c --- a/net/ipv4/esp4.c 2007-05-25 12:21:11.000000000 +0300 +++ b/net/ipv4/esp4.c 2007-05-25 12:21:11.000000000 +0300 @@ -237,7 +237,8 @@ * as per draft-ietf-ipsec-udp-encaps-06, * section 3.1.2 */ - if (!x->props.mode) + if (x->props.mode == XFRM_MODE_TRANSPORT || + x->props.mode == XFRM_MODE_BEET) skb->ip_summed = CHECKSUM_UNNECESSARY; } @@ -255,17 +256,27 @@ { struct esp_data *esp = x->data; u32 blksize = ALIGN(crypto_tfm_alg_blocksize(esp->conf.tfm), 4); + int enclen = 0; - if (x->props.mode) { - mtu = ALIGN(mtu + 2, blksize); - } else { - /* The worst case. */ + switch (x->props.mode) { + default: + case XFRM_MODE_TUNNEL: + mtu = ALIGN(mtu +2, blksize); + break; + case XFRM_MODE_TRANSPORT: + /* The worst case */ mtu = ALIGN(mtu + 2, 4) + blksize - 4; + break; + case XFRM_MODE_BEET: + /* The worst case. */ + enclen = IPV4_BEET_PHMAXLEN; + mtu = ALIGN(mtu + enclen + 2, blksize); + break; } if (esp->conf.padlen) mtu = ALIGN(mtu, esp->conf.padlen); - return mtu + x->props.header_len + esp->auth.icv_trunc_len; + return mtu + x->props.header_len + esp->auth.icv_trunc_len - enclen; } static void esp4_err(struct sk_buff *skb, u32 info) @@ -368,8 +379,10 @@ if (crypto_cipher_setkey(esp->conf.tfm, esp->conf.key, esp->conf.key_len)) goto error; x->props.header_len = sizeof(struct ip_esp_hdr) + esp->conf.ivlen; - if (x->props.mode) + if (x->props.mode == XFRM_MODE_TUNNEL) x->props.header_len += sizeof(struct iphdr); + else if (x->props.mode == XFRM_MODE_BEET) + x->props.header_len += IPV4_BEET_PHMAXLEN; if (x->encap) { struct xfrm_encap_tmpl *encap = x->encap; diff -urN a/net/ipv4/ipcomp.c b/net/ipv4/ipcomp.c --- a/net/ipv4/ipcomp.c 2007-05-25 12:21:11.000000000 +0300 +++ b/net/ipv4/ipcomp.c 2007-05-25 12:21:11.000000000 +0300 @@ -176,7 +176,7 @@ return 0; out_ok: - if (x->props.mode) + if (x->props.mode == XFRM_MODE_TUNNEL) ip_send_check(iph); return 0; } @@ -216,7 +216,7 @@ t->id.daddr.a4 = x->id.daddr.a4; memcpy(&t->sel, &x->sel, sizeof(t->sel)); t->props.family = AF_INET; - t->props.mode = 1; + t->props.mode = x->props.mode; t->props.saddr.a4 = x->props.saddr.a4; t->props.flags = x->props.flags; @@ -415,8 +415,10 @@ goto out; x->props.header_len = 0; - if (x->props.mode) + if (x->props.mode == XFRM_MODE_TUNNEL) x->props.header_len += sizeof(struct iphdr); + else if (x->props.mode == XFRM_MODE_BEET) + x->props.header_len += IPV4_BEET_PHMAXLEN; mutex_lock(&ipcomp_resource_mutex); if (!ipcomp_alloc_scratches()) @@ -427,7 +429,7 @@ goto error; mutex_unlock(&ipcomp_resource_mutex); - if (x->props.mode) { + if (x->props.mode == XFRM_MODE_TUNNEL) { err = ipcomp_tunnel_attach(x); if (err) goto error_tunnel; diff -urN a/net/ipv6/xfrm6_input.c b/net/ipv6/xfrm6_input.c --- a/net/ipv6/xfrm6_input.c 2007-05-25 12:21:11.000000000 +0300 +++ b/net/ipv6/xfrm6_input.c 2007-05-25 12:21:11.000000000 +0300 @@ -13,9 +13,21 @@ #include <linux/string.h> #include <linux/netfilter.h> #include <linux/netfilter_ipv6.h> +#include <net/dsfield.h> +#include <net/inet_ecn.h> +#include <net/ip.h> #include <net/ipv6.h> #include <net/xfrm.h> +static inline void ipip6_ecn_decapsulate(struct sk_buff *skb) +{ + struct ipv6hdr *outer_iph = skb->nh.ipv6h; + struct ipv6hdr *inner_iph = skb->h.ipv6h; + + if (INET_ECN_is_ce(ipv6_get_dsfield(outer_iph))) + IP6_ECN_set_ce(inner_iph); +} + int xfrm6_rcv_spi(struct sk_buff *skb, u32 spi) { int err; @@ -33,7 +45,6 @@ seq = 0; if (!spi && (err = xfrm_parse_spi(skb, nexthdr, &spi, &seq)) != 0) goto drop; - do { struct ipv6hdr *iph = skb->nh.ipv6h; @@ -44,6 +55,7 @@ if (x == NULL) goto drop; spin_lock(&x->lock); + if (unlikely(x->km.state != XFRM_STATE_VALID)) goto drop_unlock; @@ -69,16 +81,17 @@ xfrm_vec[xfrm_nr++] = x; - if (x->mode->input(x, skb)) + if (x->mode->input(x, skb)) goto drop; - - if (x->props.mode) { /* XXX */ - decaps = 1; - break; + + if (x->props.mode) { + decaps = 1; + break; } if ((err = xfrm_parse_spi(skb, nexthdr, &spi, &seq)) < 0) goto drop; + } while (!err); /* Allocate new secpath or COW existing one. */ @@ -110,6 +123,7 @@ netif_rx(skb); return -1; } else { + #ifdef CONFIG_NETFILTER skb->nh.ipv6h->payload_len = htons(skb->len); __skb_push(skb, skb->data - skb->nh.raw); diff -urN a/net/ipv6/ah6.c b/net/ipv6/ah6.c --- a/net/ipv6/ah6.c 2007-05-25 12:21:11.000000000 +0300 +++ b/net/ipv6/ah6.c 2007-05-25 12:21:11.000000000 +0300 @@ -387,8 +387,10 @@ goto error; x->props.header_len = XFRM_ALIGN8(sizeof(struct ipv6_auth_hdr) + ahp->icv_trunc_len); - if (x->props.mode) + if (x->props.mode == XFRM_MODE_TUNNEL) x->props.header_len += sizeof(struct ipv6hdr); + else if (x->props.mode == XFRM_MODE_BEET) + x->props.header_len += IPV4_BEET_PHMAXLEN; x->data = ahp; return 0; diff -urN a/net/ipv6/xfrm6_policy.c b/net/ipv6/xfrm6_policy.c --- a/net/ipv6/xfrm6_policy.c 2007-05-25 12:21:11.000000000 +0300 +++ b/net/ipv6/xfrm6_policy.c 2007-05-25 12:21:11.000000000 +0300 @@ -22,6 +22,8 @@ static struct dst_ops xfrm6_dst_ops; static struct xfrm_policy_afinfo xfrm6_policy_afinfo; +static void xfrm6_update_pmtu(struct dst_entry *dst, u32 mtu); + static int xfrm6_dst_lookup(struct xfrm_dst **dst, struct flowi *fl) { int err = 0; @@ -70,16 +72,19 @@ struct dst_entry *dst, *dst_prev; struct rt6_info *rt0 = (struct rt6_info*)(*dst_p); struct rt6_info *rt = rt0; - struct in6_addr *remote = &fl->fl6_dst; - struct in6_addr *local = &fl->fl6_src; struct flowi fl_tunnel = { .nl_u = { .ip6_u = { - .saddr = *local, - .daddr = *remote + .saddr = fl->fl6_src, + .daddr = fl->fl6_dst } } }; + union { + struct in6_addr *in6; + struct in_addr *in; + } remote, local; + unsigned short outer_family = 0, beet = 0; int i; int err = 0; int header_len = 0; @@ -91,7 +96,6 @@ for (i = 0; i < nx; i++) { struct dst_entry *dst1 = dst_alloc(&xfrm6_dst_ops); struct xfrm_dst *xdst; - int tunnel = 0; if (unlikely(dst1 == NULL)) { err = -ENOBUFS; @@ -114,19 +118,39 @@ dst1->next = dst_prev; dst_prev = dst1; - if (xfrm[i]->props.mode) { - remote = (struct in6_addr*)&xfrm[i]->id.daddr; - local = (struct in6_addr*)&xfrm[i]->props.saddr; - tunnel = 1; + if (xfrm[i]->props.mode == XFRM_MODE_TUNNEL || xfrm[i]->props.mode == XFRM_MODE_BEET) { + outer_family = xfrm[i]->props.family; + beet = (xfrm[i]->props.mode == XFRM_MODE_BEET); + if (outer_family == AF_INET6) { + remote.in6 = (struct in6_addr*)&xfrm[i]->id.daddr; + local.in6 = (struct in6_addr*)&xfrm[i]->props.saddr; + } else if(outer_family == AF_INET){ + remote.in = (struct in_addr*)&xfrm[i]->id.daddr; + local.in = (struct in_addr*)&xfrm[i]->props.saddr; + } } header_len += xfrm[i]->props.header_len; trailer_len += xfrm[i]->props.trailer_len; - if (tunnel) { - ipv6_addr_copy(&fl_tunnel.fl6_dst, remote); - ipv6_addr_copy(&fl_tunnel.fl6_src, local); + if (outer_family) { + switch(outer_family) { + case AF_INET: + fl_tunnel.fl4_dst = remote.in->s_addr; + fl_tunnel.fl4_src = local.in->s_addr; + + fl_tunnel.fl4_tos = 0; + fl_tunnel.fl4_fwmark = 0; + fl_tunnel.fl4_scope = 0; + break; + case AF_INET6: + ipv6_addr_copy(&fl_tunnel.fl6_dst, remote.in6); + ipv6_addr_copy(&fl_tunnel.fl6_src, local.in6); + break; + default: + BUG_ON(1); + } err = xfrm_dst_lookup((struct xfrm_dst **) &rt, - &fl_tunnel, AF_INET6); + &fl_tunnel, outer_family); if (err) goto error; } else @@ -177,6 +201,11 @@ } xfrm_init_pmtu(dst); + if (beet && outer_family == AF_INET) { + int delta = sizeof(struct ipv6hdr) - sizeof(struct iphdr); + u32 mtu = dst_mtu(dst); + xfrm6_update_pmtu(dst, mtu + delta); + } return 0; error: diff -urN a/net/ipv6/xfrm6_output.c b/net/ipv6/xfrm6_output.c --- a/net/ipv6/xfrm6_output.c 2007-05-25 12:21:11.000000000 +0300 +++ b/net/ipv6/xfrm6_output.c 2007-05-25 12:21:11.000000000 +0300 @@ -14,8 +14,11 @@ #include <linux/spinlock.h> #include <linux/icmpv6.h> #include <linux/netfilter_ipv6.h> +#include <net/dsfield.h> +#include <net/inet_ecn.h> #include <net/ipv6.h> #include <net/xfrm.h> +#include <net/ip.h> static int xfrm6_tunnel_check_size(struct sk_buff *skb) { @@ -47,7 +50,7 @@ goto error_nolock; } - if (x->props.mode) { + if (x->props.mode == XFRM_MODE_TUNNEL) { err = xfrm6_tunnel_check_size(skb); if (err) goto error_nolock; @@ -59,7 +62,7 @@ if (err) goto error; - err = x->mode->output(skb); + err = x->mode->output(skb); if (err) goto error; diff -urN a/net/ipv6/udp.c b/net/ipv6/udp.c --- a/net/ipv6/udp.c 2007-05-25 12:21:11.000000000 +0300 +++ b/net/ipv6/udp.c 2007-05-25 12:21:11.000000000 +0300 @@ -788,7 +788,7 @@ if (final_p) ipv6_addr_copy(&fl->fl6_dst, final_p); - if ((err = xfrm_lookup(&dst, fl, sk, 0)) < 0) + if ((err = xfrm_lookup(&dst, fl, sk, XFRM_LOOKUP_SLEEP)) < 0) goto out; if (hlimit < 0) { diff -urN a/net/ipv6/tcp_ipv6.c b/net/ipv6/tcp_ipv6.c --- a/net/ipv6/tcp_ipv6.c 2007-05-25 12:21:11.000000000 +0300 +++ b/net/ipv6/tcp_ipv6.c 2007-05-25 12:21:11.000000000 +0300 @@ -257,7 +257,7 @@ if (final_p) ipv6_addr_copy(&fl.fl6_dst, final_p); - if ((err = xfrm_lookup(&dst, &fl, sk, 0)) < 0) + if ((err = xfrm_lookup(&dst, &fl, sk, XFRM_LOOKUP_SLEEP)) < 0) goto failure; if (saddr == NULL) { diff -urN a/net/ipv6/af_inet6.c b/net/ipv6/af_inet6.c --- a/net/ipv6/af_inet6.c 2007-05-25 12:21:11.000000000 +0300 +++ b/net/ipv6/af_inet6.c 2007-05-25 12:21:11.000000000 +0300 @@ -939,4 +939,8 @@ } module_exit(inet6_exit); +EXPORT_SYMBOL(inet6_create); +EXPORT_SYMBOL(inet6_stream_ops); +EXPORT_SYMBOL(inet6_dgram_ops); + MODULE_ALIAS_NETPROTO(PF_INET6); diff -urN a/net/ipv6/xfrm6_mode_tunnel.c b/net/ipv6/xfrm6_mode_tunnel.c --- a/net/ipv6/xfrm6_mode_tunnel.c 2007-05-25 12:21:11.000000000 +0300 +++ b/net/ipv6/xfrm6_mode_tunnel.c 2007-05-25 12:21:11.000000000 +0300 @@ -15,6 +15,7 @@ #include <net/inet_ecn.h> #include <net/ipv6.h> #include <net/xfrm.h> +#include <net/ip.h> static inline void ipip6_ecn_decapsulate(struct sk_buff *skb) { @@ -95,6 +96,209 @@ return err; } + +/* jk: move this to beet module! */ +static int xfrm6_beet_output(struct sk_buff *skb) +{ + struct dst_entry *dst = skb->dst; + struct xfrm_state *x = dst->xfrm; + int hdrlen; + struct iphdr *iphv4, *top_iphv4; + struct ipv6hdr *iphv6, *top_iphv6; + + if (skb->nh.iph->version == 6) { + + u8 *prevhdr; + int hdr_len; + + /* 6-6 */ + + hdrlen = x->props.header_len - IPV4_BEET_PHMAXLEN; + skb_push(skb, hdrlen); + iphv6 = skb->nh.ipv6h; + + hdr_len = ip6_find_1stfragopt(skb, &prevhdr); + skb->nh.raw = prevhdr - hdrlen; + skb->h.raw = skb->data + hdr_len; + memmove(skb->data, iphv6, hdr_len); + + skb->nh.raw = skb->data; + top_iphv6 = skb->nh.ipv6h; + skb->nh.raw = &top_iphv6->nexthdr; + skb->h.ipv6h = top_iphv6 + 1; + ipv6_addr_copy(&top_iphv6->saddr, (struct in6_addr *)&x->props.saddr); + ipv6_addr_copy(&top_iphv6->daddr, (struct in6_addr *)&x->id.daddr); + + } else if (skb->nh.iph->version == 4) { + + int flags; + int optlen; + int dsfield; + u8 protocol; + int delta = sizeof(struct ipv6hdr) - sizeof(struct iphdr); + + /* Inner = 4, Outer = 6*/ + + iphv4 = skb->nh.iph; + skb->h.ipiph = iphv4; + + hdrlen = x->props.header_len; + + optlen = iphv4->ihl * 4 - sizeof(*iphv4); + if (!optlen) { + hdrlen -= IPV4_BEET_PHMAXLEN; + } else { + skb->h.raw -= (IPV4_BEET_PHMAXLEN - (optlen & 4)); + hdrlen -= optlen & 4; + } + + skb->nh.raw = skb_push(skb, hdrlen); + top_iphv4 = skb->nh.iph; + + hdrlen = iphv4->ihl * 4 - optlen; + skb->h.raw += hdrlen; + + if (unlikely(optlen)) { + struct ip_beet_phdr *ph; + + BUG_ON(optlen < 0); + + ph = (struct ip_beet_phdr *)skb->h.raw; + ph->padlen = 4 - (optlen & 4); + ph->hdrlen = (optlen + ph->padlen + sizeof(*ph)) / 8; + ph->nexthdr = iphv4->protocol; + top_iphv4->protocol = IPPROTO_BEETPH; + top_iphv4->ihl = sizeof(struct iphdr) / 4; + } + + protocol = top_iphv4->protocol; + + if (unlikely(optlen)) + protocol = top_iphv4->protocol; + else + protocol = iphv4->protocol; + + if (skb_headroom(skb) <= 2*delta){ + if (pskb_expand_head(skb, delta,0, GFP_ATOMIC)) + return 0; + } + + skb->nh.raw = skb_push(skb, delta); + + top_iphv6 = skb->nh.ipv6h; + skb->h.ipv6h = top_iphv6 + 1; + /* DS disclosed */ + top_iphv6->version = 6; + top_iphv6->priority = 0; + top_iphv6->flow_lbl[0] = 0; + top_iphv6->flow_lbl[1] = 0; + top_iphv6->flow_lbl[2] = 0; + dsfield = ipv6_get_dsfield(top_iphv6); + dsfield = INET_ECN_encapsulate(dsfield, dsfield); + flags = x->props.flags; + if (flags & XFRM_STATE_NOECN) + dsfield &= ~INET_ECN_MASK; + ipv6_change_dsfield(top_iphv6, 0, dsfield); + + top_iphv6->nexthdr = protocol; + top_iphv6->hop_limit = dst_metric(dst->child, RTAX_HOPLIMIT); + top_iphv6->payload_len = htons(skb->len - sizeof(struct ipv6hdr)); + ipv6_addr_copy(&top_iphv6->saddr,(struct in6_addr *)&x->props.saddr); + ipv6_addr_copy(&top_iphv6->daddr, (struct in6_addr *)&x->id.daddr); + skb->nh.raw = &top_iphv6->nexthdr; + + } else + BUG_ON(1); + + return 0; +} + + + +/* jk: move this to beet module! */ +static int xfrm6_beet_input(struct xfrm_state *x, struct sk_buff *skb) +{ + struct ip_beet_phdr *ph = (struct ip_beet_phdr*)(skb->h.raw); + int size = (x->sel.family == AF_INET) ? sizeof(struct iphdr) : sizeof(struct ipv6hdr); + int delta = sizeof(struct ipv6hdr) - sizeof(struct iphdr); + __u8 proto = skb->nh.ipv6h->nexthdr, hops = skb->nh.ipv6h->hop_limit; + __u8 ph_nexthdr = 0; + int phlen = 0; + int optlen = 0; + int err = -EINVAL; + + if (x->sel.family == AF_INET) { + /* Inner = IPv4, therefore the IPhdr must be shrunk */ + /* Inner = 4, Outer = 6 */ + if (unlikely(proto == IPPROTO_BEETPH)) { + if (!pskb_may_pull(skb, sizeof(*ph))) + goto out; + phlen = ph->hdrlen * 8; + optlen = phlen - ph->padlen - sizeof(*ph); + + if (optlen < 0 || optlen & 3 || optlen > 250) + goto out; + if (!pskb_may_pull(skb, phlen)) + goto out; + + proto = ph_nexthdr = ph->nexthdr; + } + skb->nh.raw += delta; + } + + if (skb_cloned(skb) && + pskb_expand_head(skb, 0, 0, GFP_ATOMIC)) + goto out; + + skb_push(skb, size); + memmove(skb->data, skb->nh.raw, size); + skb->nh.raw = skb->data; + + skb->mac.raw = memmove(skb->data - skb->mac_len, + skb->mac.raw, skb->mac_len); + if (unlikely(phlen)) { + skb_pull(skb, phlen - optlen); + skb->nh.raw = skb->data; + } + + if (x->sel.family == AF_INET6) { + struct ipv6hdr *ip6h = skb->nh.ipv6h; + + ip6h->payload_len = htons(skb->len - size); + ipv6_addr_copy(&ip6h->daddr, (struct in6_addr *) &x->sel.daddr.a6); + ipv6_addr_copy(&ip6h->saddr, (struct in6_addr *) &x->sel.saddr.a6); + + } else if (x->sel.family == AF_INET) { + + struct iphdr *iph = skb->nh.iph; + + iph->ihl = (sizeof(*iph) + optlen) / 4; + iph->version = 4; + iph->tos = 0; + iph->id = 0; + iph->frag_off = 0; + iph->ttl = hops; + iph->protocol = proto; + iph->daddr = x->sel.daddr.a4; + iph->saddr = x->sel.saddr.a4; + iph->tot_len = htons(skb->len); + ip_send_check(iph); + skb->protocol = htons(ETH_P_IP); + if (unlikely(!optlen)) { + skb->h.raw = skb->nh.raw; + } + dst_release(skb->dst); + skb->dst = NULL; + } else + BUG_ON(1); + + err = 0; + + out: + return err; +} + + static struct xfrm_mode xfrm6_tunnel_mode = { .input = xfrm6_tunnel_input, .output = xfrm6_tunnel_output, @@ -102,8 +306,20 @@ .encap = XFRM_MODE_TUNNEL, }; +/* jk: move this to beet module! */ +static struct xfrm_mode xfrm6_beet_mode = { + .input = xfrm6_beet_input, + .output = xfrm6_beet_output, + .owner = THIS_MODULE, + .encap = XFRM_MODE_BEET, +}; + static int __init xfrm6_tunnel_init(void) { + + /* jk: move this to beet module! */ + xfrm_register_mode(&xfrm6_beet_mode, AF_INET6); + return xfrm_register_mode(&xfrm6_tunnel_mode, AF_INET6); } @@ -111,6 +327,9 @@ { int err; + /* jk: move this to beet module! */ + err = xfrm_unregister_mode(&xfrm6_beet_mode, AF_INET6); + err = xfrm_unregister_mode(&xfrm6_tunnel_mode, AF_INET6); BUG_ON(err); } diff -urN a/net/ipv6/ipcomp6.c b/net/ipv6/ipcomp6.c --- a/net/ipv6/ipcomp6.c 2007-05-25 12:21:11.000000000 +0300 +++ b/net/ipv6/ipcomp6.c 2007-05-25 12:21:11.000000000 +0300 @@ -416,8 +416,10 @@ goto out; x->props.header_len = 0; - if (x->props.mode) + if (x->props.mode == XFRM_MODE_TUNNEL) x->props.header_len += sizeof(struct ipv6hdr); + else if (x->props.mode == XFRM_MODE_BEET) + x->props.header_len += IPV4_BEET_PHMAXLEN; mutex_lock(&ipcomp6_resource_mutex); if (!ipcomp6_alloc_scratches()) @@ -428,7 +430,7 @@ goto error; mutex_unlock(&ipcomp6_resource_mutex); - if (x->props.mode) { + if (x->props.mode == XFRM_MODE_TUNNEL) { err = ipcomp6_tunnel_attach(x); if (err) goto error_tunnel; diff -urN a/net/ipv6/esp6.c b/net/ipv6/esp6.c --- a/net/ipv6/esp6.c 2007-05-25 12:21:11.000000000 +0300 +++ b/net/ipv6/esp6.c 2007-05-25 12:21:11.000000000 +0300 @@ -344,8 +344,10 @@ if (crypto_cipher_setkey(esp->conf.tfm, esp->conf.key, esp->conf.key_len)) goto error; x->props.header_len = sizeof(struct ipv6_esp_hdr) + esp->conf.ivlen; - if (x->props.mode) + if (x->props.mode == XFRM_MODE_TUNNEL) x->props.header_len += sizeof(struct ipv6hdr); + else if (x->props.mode == XFRM_MODE_BEET) + x->props.header_len += IPV4_BEET_PHMAXLEN; x->data = esp; return 0; diff -urN a/net/ipv6/icmp.c b/net/ipv6/icmp.c --- a/net/ipv6/icmp.c 2007-05-25 12:21:11.000000000 +0300 +++ b/net/ipv6/icmp.c 2007-05-25 12:21:11.000000000 +0300 @@ -64,6 +64,7 @@ #include <net/ip6_route.h> #include <net/addrconf.h> #include <net/icmp.h> +#include <linux/xfrm.h> #include <asm/uaccess.h> #include <asm/system.h> @@ -389,7 +390,7 @@ goto out_dst_release; } - if ((err = xfrm_lookup(&dst, &fl, sk, 0)) < 0) + if ((err = xfrm_lookup(&dst, &fl, sk, XFRM_LOOKUP_SLEEP)) < 0) goto out; if (ipv6_addr_is_multicast(&fl.fl6_dst)) diff -urN a/net/key/af_key.c b/net/key/af_key.c --- a/net/key/af_key.c 2007-05-25 12:21:11.000000000 +0300 +++ b/net/key/af_key.c 2007-05-25 12:21:11.000000000 +0300 @@ -1166,7 +1166,8 @@ /* Nobody uses this, but we try. */ x->sel.family = pfkey_sadb_addr2xfrm_addr(addr, &x->sel.saddr); x->sel.prefixlen_s = addr->sadb_address_prefixlen; - } + } else + x->sel.family = x->props.family; /* Conservative */ if (ext_hdrs[SADB_X_EXT_NAT_T_TYPE-1]) { struct sadb_x_nat_t_type* n_type; @@ -1763,14 +1764,13 @@ if (!t->reqid && !(t->reqid = gen_reqid())) return -ENOBUFS; } - - /* addresses present only in tunnel mode */ - if (t->mode) { - switch (xp->family) { +/* addresses present in any mode */ + { + struct sockaddr *sa; + sa = (struct sockaddr *)(rq+1); + switch(sa->sa_family) { case AF_INET: - sin = (void*)(rq+1); - if (sin->sin_family != AF_INET) - return -EINVAL; + sin = (struct sockaddr_in *)sa; t->saddr.a4 = sin->sin_addr.s_addr; sin++; if (sin->sin_family != AF_INET) @@ -1779,9 +1779,7 @@ break; #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE) case AF_INET6: - sin6 = (void *)(rq+1); - if (sin6->sin6_family != AF_INET6) - return -EINVAL; + sin6 = (struct sockaddr_in6 *)sa; memcpy(t->saddr.a6, &sin6->sin6_addr, sizeof(struct in6_addr)); sin6++; if (sin6->sin6_family != AF_INET6) @@ -1792,6 +1790,7 @@ default: return -EINVAL; } + t->outer_family = sa->sa_family; } /* No way to set this via kame pfkey */ t->aalgos = t->ealgos = t->calgos = ~0; diff -urN a/net/xfrm/xfrm_user.c b/net/xfrm/xfrm_user.c --- a/net/xfrm/xfrm_user.c 2007-05-25 12:21:11.000000000 +0300 +++ b/net/xfrm/xfrm_user.c 2007-05-25 12:21:11.000000000 +0300 @@ -173,8 +173,9 @@ err = -EINVAL; switch (p->mode) { - case 0: - case 1: + case XFRM_MODE_TRANSPORT: + case XFRM_MODE_TUNNEL: + case XFRM_MODE_BEET: break; default: @@ -763,6 +764,7 @@ t->aalgos = ut->aalgos; t->ealgos = ut->ealgos; t->calgos = ut->calgos; + t->outer_family = ut->family; } } diff -urN a/net/xfrm/xfrm_policy.c b/net/xfrm/xfrm_policy.c --- a/net/xfrm/xfrm_policy.c 2007-05-25 12:21:11.000000000 +0300 +++ b/net/xfrm/xfrm_policy.c 2007-05-25 12:21:11.000000000 +0300 @@ -782,6 +782,7 @@ if (tmpl->mode) { remote = &tmpl->id.daddr; local = &tmpl->saddr; + family = tmpl->outer_family; } x = xfrm_state_find(remote, local, fl, tmpl, policy, &error, family); diff -urN a/net/xfrm/xfrm_state.c b/net/xfrm/xfrm_state.c --- a/net/xfrm/xfrm_state.c 2007-05-25 12:21:11.000000000 +0300 +++ b/net/xfrm/xfrm_state.c 2007-05-25 12:21:11.000000000 +0300 @@ -366,7 +366,7 @@ selector. */ if (x->km.state == XFRM_STATE_VALID) { - if (!xfrm_selector_match(&x->sel, fl, family) || + if (!xfrm_selector_match(&x->sel, fl, x->sel.family) || !xfrm_sec_ctx_match(pol->security, x->security)) continue; if (!best || @@ -378,7 +378,7 @@ acquire_in_progress = 1; } else if (x->km.state == XFRM_STATE_ERROR || x->km.state == XFRM_STATE_EXPIRED) { - if (xfrm_selector_match(&x->sel, fl, family) && + if (xfrm_selector_match(&x->sel, fl, x->sel.family) && xfrm_sec_ctx_match(pol->security, x->security)) error = -ESRCH; } diff -urN a/include/net/xfrm.h b/include/net/xfrm.h --- a/include/net/xfrm.h 2007-05-25 12:21:11.000000000 +0300 +++ b/include/net/xfrm.h 2007-05-25 12:21:11.000000000 +0300 @@ -226,7 +226,7 @@ extern int xfrm_policy_unregister_afinfo(struct xfrm_policy_afinfo *afinfo); extern void km_policy_notify(struct xfrm_policy *xp, int dir, struct km_event *c); extern void km_state_notify(struct xfrm_state *x, struct km_event *c); -#define XFRM_ACQ_EXPIRES 30 +#define XFRM_ACQ_EXPIRES 3 struct xfrm_tmpl; extern int km_query(struct xfrm_state *x, struct xfrm_tmpl *t, struct xfrm_policy *pol); @@ -297,6 +297,10 @@ /* Source address of tunnel. Ignored, if it is not a tunnel. */ xfrm_address_t saddr; +/* family of the outer addresses. The family may differ from + the one in selector */ + unsigned short outer_family; + __u32 reqid; /* Mode: transport/tunnel */ diff -urN a/include/linux/xfrm.h b/include/linux/xfrm.h --- a/include/linux/xfrm.h 2007-05-25 12:21:11.000000000 +0300 +++ b/include/linux/xfrm.h 2007-05-25 12:21:11.000000000 +0300 @@ -43,6 +43,12 @@ #define XFRM_SC_ALG_RESERVED 0 #define XFRM_SC_ALG_SELINUX 1 +/* Transport layer flag passed to xfrm_lookup. If set, the userspace + process sleeps in a waitqueue until key management daemon has + finished setting up security associations. This workaround exists + until we have queues for outgoing IPsec packets. */ +#define XFRM_LOOKUP_SLEEP (!in_atomic() && !in_softirq()) + /* Selector, used as selector both on policy rules (SPD) and SAs. */ struct xfrm_selector @@ -118,9 +124,13 @@ XFRM_SHARE_UNIQUE /* Use once */ }; -#define XFRM_MODE_TRANSPORT 0 -#define XFRM_MODE_TUNNEL 1 -#define XFRM_MODE_MAX 2 +enum +{ + XFRM_MODE_TRANSPORT = 0, + XFRM_MODE_TUNNEL, + XFRM_MODE_BEET, + XFRM_MODE_MAX +}; /* Netlink configuration messages. */ enum { diff -urN a/include/linux/ipsec.h b/include/linux/ipsec.h --- a/include/linux/ipsec.h 2007-05-25 12:21:12.000000000 +0300 +++ b/include/linux/ipsec.h 2007-05-25 12:21:12.000000000 +0300 @@ -12,7 +12,8 @@ enum { IPSEC_MODE_ANY = 0, /* We do not support this for SA */ IPSEC_MODE_TRANSPORT = 1, - IPSEC_MODE_TUNNEL = 2 + IPSEC_MODE_TUNNEL = 2, + IPSEC_MODE_BEET = 3 }; enum { diff -urN a/include/linux/net.h b/include/linux/net.h --- a/include/linux/net.h 2007-05-25 12:21:12.000000000 +0300 +++ b/include/linux/net.h 2007-05-25 12:21:12.000000000 +0300 @@ -24,7 +24,7 @@ struct poll_table_struct; struct inode; -#define NPROTO 32 /* should be enough for now.. */ +#define NPROTO 33 /* should be enough for now.. */ #define SYS_SOCKET 1 /* sys_socket(2) */ #define SYS_BIND 2 /* sys_bind(2) */ diff -urN a/include/linux/in.h b/include/linux/in.h --- a/include/linux/in.h 2007-05-25 12:21:12.000000000 +0300 +++ b/include/linux/in.h 2007-05-25 12:21:12.000000000 +0300 @@ -40,6 +40,7 @@ IPPROTO_ESP = 50, /* Encapsulation Security Payload protocol */ IPPROTO_AH = 51, /* Authentication Header protocol */ + IPPROTO_BEETPH = 94, /* IP option pseudo header for BEET */ IPPROTO_PIM = 103, /* Protocol Independent Multicast */ IPPROTO_COMP = 108, /* Compression Header protocol */ diff -urN a/include/linux/ip.h b/include/linux/ip.h --- a/include/linux/ip.h 2007-05-25 12:21:12.000000000 +0300 +++ b/include/linux/ip.h 2007-05-25 12:21:12.000000000 +0300 @@ -79,6 +79,8 @@ #define IPOPT_TS_TSANDADDR 1 /* timestamps and addresses */ #define IPOPT_TS_PRESPEC 3 /* specified modules only */ +#define IPV4_BEET_PHMAXLEN 8 + struct iphdr { #if defined(__LITTLE_ENDIAN_BITFIELD) __u8 ihl:4, @@ -122,4 +124,11 @@ __u16 cpi; }; +struct ip_beet_phdr { + __u8 nexthdr; + __u8 hdrlen; + __u8 padlen; + __u8 reserved; +}; + #endif /* _LINUX_IP_H */

3 4

shutdown and boot on Xen
by Sergio Belkin 12 Sep '08

12 Sep '08

Hi, I am using xen-3.0.3-41.el5 on Centos 5 with 2.6.18-53.1.21.el5xen kernel. I'd like to: 1) When Dom0 shutdown, DomU's do the same. 2) When Dom0 boots. DomU's do the same. Is that possible? Thanks in advance! -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin -

2 1

gv
by Terry Polzin 12 Sep '08

12 Sep '08

Where can I find gv for centos 5.x

2 1

yum erase fails
by Robert Moskowitz 12 Sep '08

12 Sep '08

I am trying to erase an rpm with yum erase. It fails: service hipfw does not support chkconfig Removed: hipl-firewall.i386 0:1.0.4.1 Complete! And it is not removed.... If I try with rpm -e, I get the same error message. So how do I remove this rpm?

4 5

CentOS-announce Digest, Vol 43, Issue 3
by centos-announce-request＠centos.org 12 Sep '08

12 Sep '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:0884 Important CentOS 3 i386 libxml2 - security update (Tru Huynh) 2. CESA-2008:0884 Important CentOS 3 x86_64 libxml2 - security update (Tru Huynh) 3. CESA-2008:0886-01: Important CentOS 2 i386 libxml2 security update (John Newbigin) ---------------------------------------------------------------------- Message: 1 Date: Thu, 11 Sep 2008 22:48:40 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2008:0884 Important CentOS 3 i386 libxml2 - security update To: centos-announce(a)centos.org Message-ID: <20080911204840.GA30448(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2008:0884 libxml2 security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2008-0884.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/libxml2-2.5.10-13.i386.rpm updates/i386/RPMS/libxml2-devel-2.5.10-13.i386.rpm updates/i386/RPMS/libxml2-python-2.5.10-13.i386.rpm source: updates/SRPMS/libxml2-2.5.10-13.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update libxml2 Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

CentOS 5 on an MSI Wind U100 Netbook && RTL8187 wireless card configuration
by Niki Kovacs 12 Sep '08

12 Sep '08

Hi, I recently purchased an MSI Wind Netbook, just slightly bigger than an EeePC, and IMHO just one step above the mere toy category. It's got a 10" monitor, 80 GB SATA HD, and the keyboard is just big enough so I can type with ten fingers (with a little exercise). The thing came preinstalled with Windows XP, and I've spent the last two days figuring out how I could possibly install my favourite OS on it. Among the many hairy details: 1) there's no CDROM nor floppy, only USB, and 2) the NIC is an RTL8101, not handled by the install kernel (nor the normal CentOS kernel). There were several Catch22's, but here's how I went about it. I published my detailed install notes (in French, but the Linux bits are universal :oD), since it seems to be a quite popular bit of hardware: http://www.microlinux.fr/article.php3?id_article=47 There's one exception though: the wireless card is a Realtek RTL8187 (which lspci lists as RTL8199 Unknown device). I must have tried about ten different drivers out there, none of them worked (MSI only published precompiled kernel modules for SuSE Linux Enterprise 10, go figure). The ndiswrapper solution didn't work either: the Windows driver loaded OK, but no signal. I tried the dkms-rtl818x driver from RPMForge, but to no avail. Any suggestions on this piece of hardware? Cheers, Niki

1 0

cfengine and crontab
by Ric Moore 12 Sep '08

12 Sep '08

The docs to installing cfengine refers to /var/spool/cron/crontabs/root That doesn't exist. Nor does /etc/crontab. Heck I remember that from the "old days", now there are lots of cron entries, in /etc but no crontab. Not installed by default. So, I'm hunting that one down. Nate, what did you wind up doing?? Ric -- ---------------------------------------------------- My father, Victor Moore (Vic) used to say: "There are two Great Sins in the world... ..the Sin of Ignorance, and the Sin of Stupidity. Only the former may be overcome." R.I.P. Dad. Linux user# 44256 Sign up at: http://counter.li.org/ https://nuoar.dev.java.net/ Verizon Cell # 336-254-1339

5 10

My turn at building a custom kernel for IPsec BEET mode
by Robert Moskowitz 12 Sep '08

12 Sep '08

Well I am working on building a kernel that will have the IPsec BEET mode patch available from infrahip.hiit.fi. I have some decent help, but really no one there is a seasoned Centos kernel builder (though they work with different FC kernels), and now they are mostly done for the day. I have been following the wiki on building a custom kernel, got my patch in ~/rpmbuild/SOURCES and away with the rpmbuild. That failed on line 69: Unknown tag: % define buildid .hipl0809111 But the comments say to set the define to something like ".local" or ".bz123456" So why the failure? Too long our are the quotes required? If this works, I would like to see this patch 'mainstreamed' as it is in the 2.6.27 kernel....

4 5

Alarming (?) smartd reports
by MHR 11 Sep '08

11 Sep '08

I decided, after the last discussion of smartd and S.M.A.R.T. disks, to take a look in my /var/log/messages, and I'm seeing fair bit of this: Sep 10 20:11:23 mhrichter smartd[3361]: Device: /dev/sda, 4294967295 Offline uncorrectable sectors Sep 10 20:41:23 mhrichter smartd[3361]: Device: /dev/hdb, 21 Currently unreadable (pending) sectors Sep 10 20:41:24 mhrichter smartd[3361]: Device: /dev/sda, 4294967295 Currently unreadable (pending) sectors Sep 10 20:41:24 mhrichter smartd[3361]: Device: /dev/sda, 4294967295 Offline uncorrectable sectors Sep 10 21:11:23 mhrichter smartd[3361]: Device: /dev/hdb, 21 Currently unreadable (pending) sectors Sep 10 21:11:23 mhrichter smartd[3361]: Device: /dev/sda, 4294967295 Currently unreadable (pending) sectors Sep 10 21:11:23 mhrichter smartd[3361]: Device: /dev/sda, 4294967295 Offline uncorrectable sectors Clearly there is a minor problem on /dev/hdb, which doesn't really surprise me, nor is it particularly worrisome (because I don't use that drive much). However, the other one I find more than a little curious. /dev/sda is a Seagate 300GB SATA drive that's coming up on two years old next month, but the number of "Currently unreadable (pending) sectors" or "Offline uncorrectable sectors," depending on which one you believe, is interesting - 4294967295 is FFFFFFFF in hex, and I'm running a 64-bit machine. Google is not particularly informative on this subject - anyone know more than general suggestions about dd, badblocks, etc.? This is my boot and primary system disk (has been for some time), but the error message is essentially meaningless (to me, right now). Thanks. mhr PS: In the last couple of months there was a discussion of how to make the disk less active, starting with someone reporting that their disk drive activity light blinked every 30 seconds or something like that. I tried to find it again, but I couldn't pin down what to search for - what was the solution?

10 16

Thin client
by lingu 11 Sep '08

11 Sep '08

Dear all, I am very much new to Linux Thin Client Concept. But know i am very much interested to create Centos 5 based thin client of 512MB on flash rom. Can any one guide me to how to start and if you provide any suitable links that will be very much great full. Regards. Lingu

4 3

Logwatch / spamassassin
by Bob Hoffman 11 Sep '08

11 Sep '08

Hi all, Well it took a while for me to figure it out, but apparently my logwatch no longer can be mailed locally on my computer as I believe spamassassin is eating it. I can send it out to an email address outside my server though. So spamassassin is only checking incoming I guess. My question is....how do I...or should I.... Make all local mail go straight to the boxes and skip spamasassin entirely.. Or.. Whitelist logwatch. Apparently, I am guessing, all those nifty log reports are so full of blacklisted urls and ips...well, you get the picure. Best ways to make this work so I can get it delivered to root again? Thanks

4 4

RE: Logwatch / spamassassin
by Bob Hoffman 11 Sep '08

11 Sep '08

So.. To answer my own question... so I edited the file /etc/mail/spamassassin/local.cf whitelist_from logwatch(a)localhost.localdomain Where localhost.localdomain is your hostname.servername And it worked. However, I am concerned about spoofing. I would think that mail agent and spamassassin would have an 'okay, it's a local user' thing going on. They do not. On the internet there are 1000s of posts like mine, asking questions about this and getting no answers. I hope this helps. Centos 5.2... -----Original Message----- From: Bob Hoffman [mailto:bob@bobhoffman.com] Sent: Thursday, September 11, 2008 4:54 AM To: 'centos(a)centos.org' Subject: Logwatch / spamassassin Hi all, Well it took a while for me to figure it out, but apparently my logwatch no longer can be mailed locally on my computer as I believe spamassassin is eating it. I can send it out to an email address outside my server though. So spamassassin is only checking incoming I guess. My question is....how do I...or should I.... Make all local mail go straight to the boxes and skip spamasassin entirely.. Or.. Whitelist logwatch. Apparently, I am guessing, all those nifty log reports are so full of blacklisted urls and ips...well, you get the picure. Best ways to make this work so I can get it delivered to root again? Thanks

3 2

RE: Logwatch / spamassassin
by Bob Hoffman 11 Sep '08

11 Sep '08

Ned, Thanks for the letters. Yes, I added the whitelist, but think that is not right either. No matter what I add in there, it will allow someone to use it and come in. The postmaster not getting tagged is just as scary actually. The weird part is the mail will go to another server via smtp and not be tagged as SPAM. How strange is that. I can only assume I should be changing something in the logwatch file to make it not be from 'logwatch' but to instead be 'root' or some other local user. Since logwatch has no local user in my mail setups...maybe that is the problem. So it might be that matter that makes it get killed by procmail or by spamassassin. Strange. But a very obvious problem across the net. I will work on this more tonight and see if I can get it to run better without whitelisting.

1 0

RE: [CentOS] /etc/rc5.d
by Bowie Bailey 11 Sep '08

11 Sep '08

tony.chamberlain(a)lemko.com wrote: > > start() { > date >> /root/joe.log > /usr/bin/joevpn start & > RES=$? > return $RES > } > > This all works and everything. I am just curious as to why when I do > a ps I get this: > /bin/bash /etc/rc5.d/S99runjoevpn > > Shouldn't that init script terminate since I have an "&" when I do the > start() function above? No other rc5 stuff (i.e. tomcat for instance) > shows up in the ps, though tomcat is running, it started up and > returned. Is this OK or am I missing something? The "&" doesn't terminate anything. It simply moves the process to the background and leaves it attached to the parent process. The parent process cannot exit until all of its child processes exit. What you are looking for is this: start() { date >> /root/joe.log nohup /usr/bin/joevpn start & RES=$? return $RES } The "nohup" command will detach the joevpn process from the parent and allow the parent process to exit. -- Bowie

1 0

RE: [CentOS] RE: Logwatch / spamassassin
by Bowie Bailey 11 Sep '08

11 Sep '08

Bob Hoffman wrote: > So.. > > To answer my own question... > > so I edited the file /etc/mail/spamassassin/local.cf > > whitelist_from logwatch(a)localhost.localdomain > > Where localhost.localdomain is your hostname.servername > > And it worked. > > However, I am concerned about spoofing. I would think that mail agent > and spamassassin would have an 'okay, it's a local user' thing going > on. Generally, using 'whitelist_from' is a bad idea due to spoofing. The address you are using will probably not cause too many problems, but you should still fix it if possible. Use 'whitelist_from_rcvd' instead. This will whitelist the address only if the mail comes from a specified domain. Try this (untested): whitelist_from_rcvd logwatch(a)localhost.localdomain localhost.localdomain Note that this will require your DNS server to resolve localhost.localdomain (forward and reverse). Another option is to configure your mail server to bypass SA entirely for local mail. -- Bowie

1 0

/etc/rc5.d
by tony.chamberlain＠lemko.com 11 Sep '08

11 Sep '08

I have a shell script, /usr/bin/joevpn, which does a quick VPN connect. Basically (HOST and DOFIL are defined above and are correct. I just did not list them here) case "$1" in start) date > $DOFIL while [ -f $DOFIL ] do echo y | /usr/local/bin/vpnclient connect $HOST sleep 10 done ;; # Reconnects in case of disconnect (in while loop) This works. And in /etc/init.d I have a runjoevpn (which linked to /etc/rc5.d/S99runjoevpn). It works like the others. Below, $1 is checked (not shown here for brevity) and if it is "start" then start below is called: start() { date >> /root/joe.log /usr/bin/joevpn start & RES=$? return $RES } This all works and everything. I am just curious as to why when I do a ps I get this: /bin/bash /etc/rc5.d/S99runjoevpn Shouldn't that init script terminate since I have an "&" when I do the start() function above? No other rc5 stuff (i.e. tomcat for instance) shows up in the ps, though tomcat is running, it started up and returned. Is this OK or am I missing something?

2 1

Job Scheduling suggestions
by Mag Gam 11 Sep '08

11 Sep '08

At my university we have 50 computers in the lab. We would like to use a scheduler to schedule our fluid models, and I was wondering what is a good suggestion? TIA

4 4

Centos 4.7 delay more than mirror issue?
by Josh Donovan 11 Sep '08

11 Sep '08

Hi folks, Normally people ask "when is CentOS 4.7 coming" and they are told "when it is ready". Dag posted on his blog about it going to testing in July while it was supposed to be syncing to the mirrors on Sept 5/6th according to Karanbir. Is there something going on behind the scenes? I have not seen Johnny Hughes or even Dag posting on this list for some time. CentOS has gone for some time while other rebuilds folded so I wouldn't like it to follow the same way. Thanks, Josh

5 4

PCI SATA Controller Recommendations?
by Tim Nelson 10 Sep '08

10 Sep '08

Hello fellow listers... I'd like to get some recommendations on a good SATA controller for use with CentOS 5.x. It should be PCI, bootable, have 4 SATA ports, have native support (no crap proprietary or manually compiled drivers), and possibly hot swap support. Any ideas? There are plenty of PCI-X and PCIe controllers that I think would work but the use for this card is in a smaller 1U server that is quite cramped, hence the query for a standard PCI card. All suggestions and comments welcome. Thank you! Tim Nelson Systems/Network Engineer Rockbochs Inc. (218)727-4332 x105

4 3

Centos 5 Virtualization
by lingu 10 Sep '08

10 Sep '08

Hello list, I am very much new to Virtualization.But i want to study and test Virtualization.Can any one suggest me the web links from where i can start. I want to learn from basic to advanced concepts of VT. Thanks in advance for your reply

6 7

open(/dev/pts/0): No such file or directory
by Ric Moore 10 Sep '08

10 Sep '08

I'm getting this error just recently. Is this something to be concerned with?? Running CentOS 5.2. Kernel 2.6.18-53.el5 Thanks for any considerations, Ric -- ---------------------------------------------------- My father, Victor Moore (Vic) used to say: "There are two Great Sins in the world... ..the Sin of Ignorance, and the Sin of Stupidity. Only the former may be overcome." R.I.P. Dad. Linux user# 44256 Sign up at: http://counter.li.org/ https://nuoar.dev.java.net/ Verizon Cell # 336-254-1339

3 4

DB stop&start
by Mad Unix 10 Sep '08

10 Sep '08

Hi I need a script to automatically Starting/Stopping an Oracle 10g DB on CentOS5.2 64bit i.e lsnrctl start/stop db start/stop emctl start/stop dbconsole" Any help? -- Madunix_at_Gmail Sysadmin "Computers are useless. They can only give you answers" - Pablo Picasso "Never trust a computer you can't throw out a window." - Steve Wozniak

2 2

centos5 - logwatch - verisign
by RobertH 10 Sep '08

10 Sep '08

Re: centos 5 logwatch Has anyone ever looked into why verisign does this from these ips fairly frequently? It appears that it is some type of SSL probing the HTTP port, correct? Are they just gathering stats or something ? --------------------- httpd Begin ------------------------ A total of 2 sites probed the server 216.168.253.197 216.168.253.198 ..... The first ip is a3-pip6.verisign.net The second ip is a3-pip7.verisign.net Here is grep from logs 216.168.253.197 - - [01/Sep/2008:13:30:19 -0700] "\x80@\x01\x03" 501 304 216.168.253.197 - - [01/Sep/2008:14:02:08 -0700] "\x80@\x01\x03" 501 304 216.168.253.197 - - [05/Sep/2008:22:16:20 -0700] "\x80@\x01\x03" 501 304 216.168.253.197 - - [05/Sep/2008:22:16:29 -0700] "\x80@\x01\x03" 501 297 216.168.253.197 - - [09/Sep/2008:15:26:54 -0700] "\x80@\x01\x03" 501 304 216.168.253.197 - - [09/Sep/2008:15:27:04 -0700] "\x80@\x01\x03" 501 304 216.168.253.197 - - [09/Sep/2008:15:27:13 -0700] "\x80@\x01\x03" 501 297 216.168.253.198 - - [02/Sep/2008:07:00:39 -0700] "\x80@\x01\x03" 501 304 216.168.253.198 - - [02/Sep/2008:07:48:42 -0700] "\x80@\x01\x03" 501 297 216.168.253.198 - - [03/Sep/2008:15:04:50 -0700] "\x80@\x01\x03" 501 297 216.168.253.198 - - [05/Sep/2008:22:19:52 -0700] "\x80@\x01\x03" 501 297 216.168.253.198 - - [09/Sep/2008:15:26:52 -0700] "\x80@\x01\x03" 501 297 - rh

2 1

Compromised
by Miark 10 Sep '08

10 Sep '08

My wife's office server was compromised today. It appears they ssh'ed in through account pcguest which was set up for Samba. (I don't remember setting up that account, but maybe I did.) At any rate, I found a bazillion "ftp_scanner" processes running. A killall finished them off quickly, I nuked the pcguest account, and switched ssh to a different port (which I normally do anyway). I used 'find' to locate ftp_scanner, which was running in a folder under /var/tmp. It seems that before I could nuke the directory, it nuked itself! Because it was running from /var/tmp, and because 'find' and 'ps' were not compromised (in that they did not hide the ftp_scanner processes or files), I'm thinking the attacker really didn't get any further than eating some bandwidth. I suppose I have no choice but to re-install, but I thought I'd run I'd get some feedback first. (Something other than, "Way to go, moron.") In the meantime, I'm pulling the plug. Miark

4 3

Network card help please
by Gary 10 Sep '08

10 Sep '08

Hi ya'll, Running v5 .. I have 2 Linksys PCI cards running already without any problems. These were recognized by the system as ADMTek NC100 cards, per usual... they run on eth0 and eth2 ... have for months.... no problems. I added a third Linksys PCI card to the mobo, fired the computer up, and it is not recognized at all. It has been many years since I had this problem of a network card not being automatically recognized, so I am a little rusty. Can someone give me input on the steps needed to get this third NIC recognized please. Thanks for your help. -- Regards, Gary

3 12

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss