- Discuss - lists.centos.org

Opinions about SSH and DNS
by Clint Dilks 25 May '08

25 May '08

Hi People, As part of securing SSH we currently have UseDNS set to yes. But we are finding that a number of ISP's are deliberately refusing to configure matching forward and reverse DNS records. So I am wondering how many of you are still using this option?

2 1

saslauthd for sendmail SMTP relay
by Bernd Bartmann 25 May '08

25 May '08

Hi, I'm running a Centos 5.1 server that uses saslauthd to allow sendmail SMTP relaying for some clients. saslauthd is configured to use method "shadow" to lookup the username / password directly from /etc/shadow. This setup has been working for several month now, but is broken since last Monday. I haven't changed anything neither on the server nor on the clients. Now whenever a client tries to relay email I see this messages in the logs: /var/log/maillog: AUTH failure (LOGIN): authentication failure (-13) SASL(-13): authentication failure: checkpass failed /var/log/messages: saslauthd[3665]: do_auth : auth failure: [user=username] [service=smtp] [realm=] [mech=shadow] [reason=Unknown] Does someone have an idea how to debug this further, esp. how to find the real reason as the message [reason=Unknown] is not very helpful at all. Thanks in advance, Bernd.

2 5

RE: [CentOS] Hourly restart
by Gregg McClintic 25 May '08

25 May '08

Anything in the bios called watchdog turned on?

2 1

Hourly restart
by Linux 25 May '08

25 May '08

Hi, Without any update, hardware/software modification, etc... one of my systems "Hourly restart" problem started again. Currently, I counted 5 restarts at 59th minute. No log entry, no console error, nothing really interesting. If I do not see camera records with my own eyes, I'll suspect about someone from D.C. hardreseting the box. Now, I guess /var failed mounting and ssh not available. Maybe next hour restart does a magic... Last time, a kernel update solved hourly restart problem. Before loosing access, I checked and saw a new kernel with -21 ending number (x86_64, forgot to mention) and waiting for XFS module to be ready (Well, I wish I had left it ext3) After that, perhaps update will solve the problem again, but why? Last time I stopped all crons, unneeded services, remote access, etc.. Put a man in front of the monitor and made him monitor everything. Only thing he saw was a welcoming BIOS without any sign at the 60th minute. Replaced power cords, power supply, some disks, RAM modules, etc... Currently I have the last recovered remote logs of temperature and voltage sensors of the system, all seems fine, nothing suspicious. I am out of ideas. I have many gentoo boxes on the almost same hardware and a few centos boxes. Only this one failes continuously... I'd like to hear advice and suggestions about how to debug / repair this situation. Thanks. P.S.: Complete hardware replacement plan is currently in action, new hardware will be ready soon but I'm not so sure about hardware failure. Why did it stopped last time after a simple kernel update?

1 0

How is this possible?
by MHR 25 May '08

25 May '08

As an experiment, I am attempting to build a more recent version of GNOME than 2.16.0 on CentOS 5.1. I've tried both garnome and jhbuild, and neither one works quite right. Jhbuild blows out looking for a dbus-glib-1 revision >= 0/74 (the release rev is 0.70), so I downloaded that and tried to build it. This results in the following error: gcc -g -O2 -Wall -Wchar-subscripts -Wmissing-declarations -Wmissing-prototypes -Wnested-externs -Wpointer-arith -Wcast-align -Wfloat-equal -Wsign-compare -o .libs/dbus-binding-tool dbus-binding-tool-glib.o dbus-glib-tool.o ./.libs/libdbus-gtool.a -L/lib64 ./.libs/libdbus-glib-1.so -ldbus-1 -lgobject-2.0 -lglib-2.0 /usr/lib/libexpat.so -lnsl /usr/lib/libexpat.so: could not read symbols: File in wrong format collect2: ld returned 1 exit status make[4]: *** [dbus-binding-tool] Error 1 make[4]: Leaving directory `/home/mhr/Download/dbus-glib-0.74/dbus' make[3]: *** [all-recursive] Error 1 make[3]: Leaving directory `/home/mhr/Download/dbus-glib-0.74/dbus' make[2]: *** [all] Error 2 make[2]: Leaving directory `/home/mhr/Download/dbus-glib-0.74/dbus' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/home/mhr/Download/dbus-glib-0.74' make: *** [all] Error 2 When I try to use garnome, it eventually runs into exactly the same error. I've checked /usr/lib/libexpat.so, and this is what I get: $ ls -l /usr/lib/libexpat.so lrwxrwxrwx 1 root root 27 Jan 8 13:11 /usr/lib/libexpat.so -> ../../lib/libexpat.so.0.5.0 $ ls -l /lib/libexpat.so.0.5.0 -rwxr-xr-x 1 root root 133056 Jan 6 2007 /lib/libexpat.so.0.5.0 $ file /lib/libexpat.so.0.5.0 /lib/libexpat.so.0.5.0: ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), stripped When I look at this library with nm, lld and objdump, they all seem to be able to read it just fine. There is also the 64 bit version that lives in /ib64 and has a .ink from /usr/lib64, and that also reads fine. What did I miss here? Thanks. mhr

4 6

USBDisk question
by Todd Cary 25 May '08

25 May '08

I have an external USB drive, and when mounted, it was /media/usbdisk. When I recently tried my rsync backup, a usbdisk1 had been created...I guess by the auto-mounting (when the disk is turned on). Is there a way to remove the usbdisk1 and set it up so that the auto-mounting will use usbdisk? Or should I just leave it be? I needed to change my command line for the rsync backup to usbdisk1. Many thanks... Todd -- Ariste Software Petaluma, CA 94952 http://www.toddcary.com/aristephotography/

2 1

resizing partition
by Al Sparks 25 May '08

25 May '08

I'm going to have to resize a partition (shrink it) to make room for more swap space. This is actually not too big of a deal, since we're not talking about a "system" partition (/, /var, /usr, etc), but one where an application resides. So I won't even have to go to "rescue" mode to do this. I can umount this thing live. (and since I'm working on it remotely, that's important). But this system was not configured with LVM. So it occurs to me, that in dealing with a non-LVM partition(s), if the swap space I want to enlarge isn't next to the partition I shrink, my options would be to: 1. Manually "move" the other partitions, probably very risky 2. Simply make a second swap space that's next to the partition I shrink. Have I got the right idea? === Al

2 1

small annoying problem with Ati video driver
by Juan C. Valido 24 May '08

24 May '08

I have a small annoying problem with Ati video driver, when Centos 5.1 starts and gets to the login screen the resolution is too high for my monitor (better than out of range) and it's annoying can I have it start in a lower resolution. Thanks...

2 2

samba question
by david chong 24 May '08

24 May '08

Hi, I am running Centos5.1, trying to configure samba now. I am quite new in this area and hope help from the list. I could not connect to it from a windows xp pc >From the console, I log in and do a >smbclient -L localhost -U% Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.0.25b-0.el5.4] Sharename Type Comment --------- ---- ------- samba Disk IPC$ IPC IPC Service (Samba 3.0.25b-0.el5.4) Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.0.25b-0.el5.4] Server Comment --------- ------- ANTIOCH Samba 3.0.25b-0.el5.4 Workgroup Master --------- ------- MYGROUP ANTIOCH Could you pls help. Thanks David

8 15

CentOS-announce Digest, Vol 39, Issue 12
by centos-announce-request＠centos.org 24 May '08

24 May '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:0287 Important CentOS 3 ia64 libxslt - security update (Pasi Pirhonen) 2. CESA-2008:0287 Important CentOS 4 ia64 libxslt - security update (Pasi Pirhonen) 3. CESA-2008:0492 Important CentOS 4 ia64 gnutls - security update (Pasi Pirhonen) 4. CESA-2008:0287 Important CentOS 3 s390(x) libxslt - security update (Pasi Pirhonen) 5. CESA-2008:0492 Important CentOS 4 s390(x) gnutls - security update (Pasi Pirhonen) 6. CESA-2008:0287 Important CentOS 4 s390(x) libxslt - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Fri, 23 May 2008 19:19:15 +0300 From: Pasi Pirhonen <upi(a)centos.fi> Subject: [CentOS-announce] CESA-2008:0287 Important CentOS 3 ia64 libxslt - security update To: centos-announce(a)centos.org Message-ID: <20080523161914.GN2456(a)centos.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2008:0287 https://rhn.redhat.com/errata/RHSA-2008-0287.html The following updated files have been uploaded and are currently syncing to the mirrors: ia64: updates/ia64/RPMS/libxslt-1.0.33-6.ia64.rpm updates/ia64/RPMS/libxslt-devel-1.0.33-6.ia64.rpm updates/ia64/RPMS/libxslt-python-1.0.33-6.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

read only root file system
by Fred Noz 24 May '08

24 May '08

Responding to a question posted earlier this month, Centos 5.1 includes configuration files for enabling the read-only root filesystem. Actually, all filesystems can be mounted read-only with particular files and directories mounted on a read-write tmpfs (in RAM). This capability comes directly from the upstream provider. You can have your Centos system running read-only root in two easy steps: 1. Edit /etc/sysconfig/readonly-root and change READONLY=no to READONLY=yes 2. Reboot When your computer comes back up, the root and any other system partitions will be mounted read-only. All the files and directories listed in /etc/rwtab will be mounted read-write on a tmpfs filesystem. You can add additional files and directories to rwtab to make them writable after reboot. Note that this system is stateless. When you reboot again, everything written to the tmpfs filesystem vanishes and the system will be exactly as it was the last time it was booted. You could add a writable filesystem on disk or NFS for writing files you want to retain after rebooting. Take a look at /etc/rc.d/rc.sysinit to see how the magic is done. This capability is a "technology preview" (beta) and is buggy. Note that /etc/mtab and thus "mount" do not show the complete list of filesystems because the /etc directory is on a read-only filesystem. /proc/mounts always shows the correct mount information. You could update /etc/mtab from /proc/mounts to correct it both after boot and after running the mount or umount commands to change mounts. Run "fgrep -v rootfs /proc/mounts >/etc/mtab" to correct /etc/mtab. Note that mounting or symlinking /proc/mounts to /etc/mtab causes other problems such as breaking the df command. You can change your read-only root filesystem to read-write mode immediately with this command run by the root user: mount -n -o remount,rw / - Fred

2 1

sed
by Scott McClanahan 24 May '08

24 May '08

Not specific to CentOS but I know you guys would be really helpful anyhow. Basically, I have a file which has been editted in the past very similarly to the hosts file only now I want to use it as a hosts file and need to run some fancy sed to massage the data into shape. Currently, the data in the file is in the form of <ip address> <tab> <short hostname> <space> <short hostname alias>. In some cases there may not be any aliases so the end of line would be right after the short hostname (no space at the end either). In other cases there could be many space separated short hostname aliases. What I have been trying to do without success is add our domain name to the first string after the ip address and tab character. As an example, == Before == 1.1.1.1 foo 10.10.10.10 bar bar2 100.100.100.100 foobar foobar2 foobar3 == After == 1.1.1.1 foo.contoso.com 10.10.10.10 bar.contoso.com bar2 100.100.100.100 foobar.contoso.com foobar2 foobar3 Any advice on how to pull this off? Thanks.

8 9

More recent GDE on CentOS 5+
by MHR 23 May '08

23 May '08

I have not had any success building a more recent version of GDE than 2.16.0 on CentOS. I tried jhbuild, and went line by line using the how-to web page for jhbuild (http://www.gnome.org/~jamesh/jhbuild.html) and I get hung up on dbus-glib-l (which does not appear to be in CentOS or available for it, at least from base, updates, extras, KB & rpmforge). Garnome is another possibility that I haven't looked at yet 'cuz jhbuild is supposed to be easy and fully automated (it might be, if everything it needs is already there, but it doesn't tell you up front what that means or how to get it or ...). Gnome "says" we should use the GDE that ships with our distribution, but RH (CentOS) has to oldest revision available. To get a newer one, the Gnome people recommend building my own. Has anyone tried this successfully? How? Thanks. mhr

2 1

Re:Re:Re:Can't get past the splash screen
by Eon Strife 23 May '08

23 May '08

Hi, Thanks, I check those folders, and they are already empty. Now, I tried to remove the freenx by using yum, and then I removed the files it left behind manually in: /usr/bin/nxserver /usr/lib/nx /var/lib/nxserver /etc/nxserver along with the nx user and group and reinstall. The problem worsen, no matter what user I tried, I always got Session Startup Failed: === NX> 700 Session id: cluster.hpc.org-1014-084919CE7F9816540BDEDD5A7928084E NX> 705 Session display: 1014 NX> 703 Session type: unix-gnome NX> 701 Proxy cookie: ee398e9cedaf3adbba4dc966d4433dee NX> 702 Proxy IP: 127.0.0.1 NX> 706 Agent cookie: ee398e9cedaf3adbba4dc966d4433dee NX> 704 Session cache: unix-gnome NX> 707 SSL tunneling: 1 NX> 105 /usr/bin/nxserver: line 1077: 8588 Terminated sleep $AGENT_STARTUP_TIMEOUT NX> 596 Session startup failed. NX> 1004 Error: NX Agent exited with exit status 1. NX> 1006 Session status: closed Can't open /var/lib/nxserver/db/running/sessionId{084919CE7F9816540BDEDD5A7928084E}: No such file or directory. mv: cannot stat `/var/lib/nxserver/db/running/sessionId{084919CE7F9816540BDEDD5A7928084E}': No such file or directory NX> 280 Exiting on signal: 15 === I tried alternative solution by using VNC. In order to have access to desktop, I modifed the content of the Xstartup file (for the root in /root/.vnc/xstartup and for the regular user in /home/EonStrife/.vnc/xstartup) to be : === #!/bin/sh # Uncomment the following two lines for normal desktop: # unset SESSION_MANAGER # exec /etc/X11/xinit/xinitrc [ -x /etc/vnc/xstartup ] && exec /etc/vnc/xstartup [ -r $HOME/.Xresources ] && xrdb $HOME/.Xresources xsetroot -solid grey vncconfig -iconic & xterm -geometry 80x24+10+10 -ls -title "$VNCDESKTOP Desktop" & #startx & exec gnome-session & #twm & === The funny thing is that for regular user I can access the desktop, but for the root I'm only treated with the terminal. (BTW, the client I used are tightVNC and RealVNC) Thanks. ===Previous Message=== Eon Strife wrote: > Hi, > Thanks, it's Gnome, and I'm stuck when I login as root. > By using Putty, I managed to create a new user, and then I tried to login to desktop(using nomachine) as that user, and yes, it works. The problem now is that I stuck when I login as the root. > > NX> 596 Session startup failed. <- The additional line in the sshlog of the root > NX> 1004 Error: NX Agent exited with exit status 1. > Can't open /var/lib/nxserver/db/running/sessionId{0C2C8B077AB56ED37F7A5A72FE8FA7BF}: No such file or directory. > mv: cannot stat `/var/lib/nxserver/db/running/sessionId{0C2C8B077AB56ED37F7A5A72FE8FA7BF}': No such file or directory > NX> 1006 Session status: closed > Exited with status 0. User pressed Ok. As a regular user you shouldn't be able to look into that directory, so that's normal. Only root and nx can do that. Interesting (at least to me) is that you get an error concerning a session that I do not believe it should be looking for. It's like it's attempting to reattach to a session that doesn't exist and then it fails. I could be incorrect, but at this point it's simply a data point. On the client machine (assuming it is linux), have you removed all session data from the user's home directory? By default this is ~/.nx/cache-unix-windowmanagername (for you that is likely gnome) and ~/.nx/letter-hostname-screen-somerandomhashIthink/ Don't remove the config directory or else you'll have to set up the nx information again. See if that doesn't fix the issue. It may not, and I'm sorry if it doesn't, but I am not entirely sure about this particular issue. If the client machine is a windows machine there is a .nx directory, but I am not sure where it's kept. C:\documents and settings\user\.nx maybe. That is where it resides on my windows install at work on XP. I may or may not have changed the directory so you might have to look around a bit. HTH Alex White -- ethericalzen at gmail.com Life is a prison, death is a release Send instant messages to your online friends http://uk.messenger.yahoo.com

2 1

Re: [CentOS] Re: Need help with rsync. [solved]
by James B. Byrne 23 May '08

23 May '08

In-Reply-To: <f4e013870805211022r36194b29gb74ca4421dc2ee77(a)mail.gmail.com> On: Wed, 21 May 2008 10:22:19 -0700, MHR <mhullrich(a)gmail.com> wrote: >> On Wed, May 21, 2008 at 8:37 AM, James B. Byrne <byrnejb(a)harte-lyne.ca> >> wrote: >> >> This indeed turned out to be an SELinux policy problem which I have since >> resolved. > > Whoa, whoa, whoa, nice shooting, Tex! (Ghostbusters) > > Not so fast - please post the solution, too, for posterity (and those > of us who don't use SELinux but might, someday, in the not too distant > far future...). > > Thanks. > > mhr Dealings with SELinux issues typically do not lend themselves to short answers. SELinux is like an onion, each each exception blocks access until resolved. Thus each policy change has to be made individually and then the process retested so that the next impediment evidences itself. On CentOS-5 your friends are: # grep avc /var/log/messages # grep <process> /var/log/audit/audit.log and some of the more useful utilities are: # audit2allow # audit2why # chcon # restorecon # sealert # semanage When I suspect (and that is often the hardest part of the whole exercise, realizing that SELinux is the problem) that SELinux is involved in a problem I start by checking the system log file /var/log/messages with grep avc. If I see things like this: # grep avc /var/log/messages May 16 04:02:33 inet01 kernel: audit(1210924952.785:22973): avc: denied { read } for pid=22282 comm="prelink" name="setserial" dev=dm-0 ino=3309644 scontext=user_u:system_r:prelink_t:s0 tcontext=system_u:object_r:rsync_data_t:s0 tclass=file Then I infer that I have a problem with either the SELinux file contexts or the system policy file. If the SELinux problem is announced at the desktop then you may also find it useful to check for this: # grep setroubleshoot /var/log/messages In which case you may see something like this: Dec 17 14:13:24 inet01 setroubleshoot: SELinux is preventing /usr/sbin/httpd (httpd_t) "write" to virtual.d (etc_t). For complete SELinux messages. run sealert -l 15618e2e-044c-4c4c-b3fc-ec1eba554d02 In this case you can follow the suggestion given in the log message and run sealert: # sealert -l 15618e2e-044c-4c4c-b3fc-ec1eba554d02 Summary SELinux is preventing /usr/sbin/httpd (httpd_t) "write" to virtual.d (etc_t). Detailed Description SELinux is preventing /usr/sbin/httpd (httpd_t) "write" to virtual.d (etc_t). The SELinux type %TARGET_TYPE, is a generic type for all files in the directory and very few processes (SELinux Domains) are allowed to write ... yada-yada-yada... ... Allowing Access You can attempt to fix file context by executing restorecon -v virtual.d The following command will allow this access: restorecon virtual.d And then you can try that, although I have rarely had a problem with SELinux solved so simply: # cd /path/to/virtual.d # restorecon virtual.d Anyway, if that does not work, or one never received an setroubleshoot report to begin with, then I end up turning to audit2allow. I do something like this (where rsync is the process that I am having difficulty with, it could be httpd, vsftp or anything else): # grep rsync /var/log/audit/audit.log | audit2allow Which may yield a report something like this: #============= prelink_t ============== allow prelink_t rsync_data_t:file read; Now, if this does not look too alarming in terms of the access that rsync seems to be seeking (being able to read files to be transferred seems a logical enough expectation and the benefit/limitations of prelink seem to require access in this instance) then we can add this permission to our policy via a local module. You make one of these in this fashion: # # grep rsync /var/log/audit/audit.log | audit2allow -M localrsyncmod ******************** IMPORTANT *********************** To make this policy package active, execute: semodule -i localrsyncmod.pp # Again, you simply follow the instructions given in the report. # semodule -i localrsyncmod.pp Now you do yet another test and check the log files. If the problem is fixed, then great, you are finished. Usually, however, SELinux issues continually reveal one permission problem after another, sometimes with different processes, until, at last, they have all been accommodated. Consequently you end up re-running your tests, checking the audit files, and modifying the local policy one item at a time. Note that simply overriding what SELinux is prohibiting is not what I am advocating here. Sometimes the problem is that the software needs its file system access expectations trimmed back and that requires filing a bug report with the maintainers. However, in a production environment you normally just have to get things working and what I usually do is weigh what the program is requesting against what I want it to do for me. Often the problem is that the default policy is simply too restrictive. On rare occasions I do actually file a bug report but almost always override the local policy anyway just to get on with the job. I hope this helps. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

Interface bonding?
by Timothy Selivanow 23 May '08

23 May '08

I'm try to bond a few interfaces together with the hopes of getting increased throughput, and I'm using a cisco Catalyst 2900 as the switch. I've tried using mode 0, 5, and 6 with nothing special on the switch, and mode 4 with some ports "trunked" together (I have a feeling that the "trunking" that the 2900 does is not 802.3ad, as it disabled the ports it saw as redundant), yet xfer speeds always cap out at about 10MB/s. Has any body accomplished bonding with increased throughput as the goal, with or without (without might be preferable) doing something special on the switch (preferably the afore-mentioned Catalyst 2900, as that is what I have to work with as a non-sactioned side-project ;)? --Tim ___________________________________________________ < When pleasure remains, does it remain a pleasure? > --------------------------------------------------- \ \ \ \ /\ ( ) .( o ).

10 42

CentOS-announce Digest, Vol 39, Issue 11
by centos-announce-request＠centos.org 23 May '08

23 May '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:0492 Important CentOS 4 i386 gnutls Update (Johnny Hughes) 2. CESA-2008:0492 Important CentOS 4 x86_64 gnutls Update (Johnny Hughes) 3. CESA-2008:0287 Important CentOS 4 i386 libxslt Update (Johnny Hughes) 4. CESA-2008:0287 Important CentOS 4 x86_64 libxslt Update (Johnny Hughes) 5. CEEA-2008:0274 CentOS 5 i386 xenpv Update (Karanbir Singh) 6. CEEA-2008:0274 CentOS 5 x86_64 xenpv Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Thu, 22 May 2008 08:49:09 -0500 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2008:0492 Important CentOS 4 i386 gnutls Update To: CentOS-Announce <centos-announce(a)centos.org> Message-ID: <483579D5.3090501(a)centos.org> Content-Type: text/plain; charset="iso-8859-1" CentOS Errata and Security Advisory 2008:0492 Imporant Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0492.html The following updated files have been uploaded and are currently syncing to the mirrors: i386: gnutls-1.0.20-4.el4_6.i386.rpm gnutls-devel-1.0.20-4.el4_6.i386.rpm src: gnutls-1.0.20-4.el4_6.src.rpm

1 0

kaffeine installation
by secrookie＠gmail.com 23 May '08

23 May '08

Anyone got kaffeine installed. When I do a #yum install kaffeine I get a transaction check error with kde-libs. Is this a known issue and is their a workaround? regards, secrookie

2 1

centos sparc distro?
by tblader 23 May '08

23 May '08

Hello All. I've a couple Sun SPARC Ultra 60 machines I'd like to install Linux on. Is the Centos 4.2 Beta distro* still in development? Looks like 2005 was the last beta release. Thanks, Thomas [*] - http://beta.centos.org/centos/4.2beta/isos/sparc/ -- Flambeau Inc. Technology Center - Baraboo, WI Email : tblader(a)flambeau.com Keyserver: http://pgp.mit.edu KeyID: 0x00E9EC2C

3 2

Re:Re:Can't get past the splash screen
by Eon Strife 22 May '08

22 May '08

Hi, Thanks, it's Gnome, and I'm stuck when I login as root. By using Putty, I managed to create a new user, and then I tried to login to desktop(using nomachine) as that user, and yes, it works. The problem now is that I stuck when I login as the root. Then, I compared the runlog (the one I wrote in that previous email), between the root's and the new user's and, they're the same. Then, I compared the sshlog, and I found discrepancies. In the sshlog of the root, there are some additional lines saying unable to open a file and unable to start the sesion: === NX> 285 Identified internal connection NX> 285 Using default mode encrypted NX> 285 Identified options: nx/nx,options=/cygdrive/C/Users/EONSTR~1/NX73F8~1/S-8728~1.ORG/options:1000 NX> 280 Proxy opened with local: 7 remote: 8 NX> 285 Switching descriptors: 4 and: 5 to: 7 NX> 287 Redirected I/O to channel descriptors NX> 280 Proxy in: 4 out: 5 transport in: 8 out: 8 NX> 596 Session startup failed. <- The additional line in the sshlog of the root NX> 1004 Error: NX Agent exited with exit status 1. Can't open /var/lib/nxserver/db/running/sessionId{0C2C8B077AB56ED37F7A5A72FE8FA7BF}: No such file or directory. mv: cannot stat `/var/lib/nxserver/db/running/sessionId{0C2C8B077AB56ED37F7A5A72FE8FA7BF}': No such file or directory NX> 1006 Session status: closed Exited with status 0. User pressed Ok. === I checked the permission of that var/lib/nxserver/ (and folders (including /db/running/ ) and files inside it), the permission is 0700 (read,write,execute enabled for the owner), with the group is root and owner is the nx. And yes, also using the root I can view the content of the var/lib/nxserver. If I login using that new user, I can't view the content. Oh,yeah, pressing start and leaving for few hours don't solve the problem. Checking the .bash_history file, these are the commands I issued around the time when I messed up : === useradd aaa useradd --help useradd abc passwd aaa useradd --help useradd -d /home/aaaa/ -p aaaaaa aaa which useradd /etc/rc.d/init.d/autofs stop /etc/rc.d/init.d/autofs start /etc/rc.d/init.d/autofs stop /etc/rc.d/init.d/autofs start /etc/rc.d/init.d/autofs stop /etc/rc.d/init.d/autofs start /etc/rc.d/init.d/autofs stop etc/rc.d/init.d/autofs start /etc/rc.d/init.d/autofs start /etc/rc.d/init.d/autofs stop userdel --help userdel aaa passwd aaa /etc/rc.d/init.d/autofs start /etc/rc.d/init.d/autofs stop cd /home/ ls rmdir --help cd aaa ls del --help delfile --help cd \. cd /. cd /home/ rm -r /home/aaa/ ls /etc/rc.d/init.d/autofs start /etc/rc.d/init.d/autofs reload /etc/rc.d/init.d/autofs start /etc/rc.d/init.d/autofs start /etc/rc.d/init.d/autofs stop /etc/rc.d/init.d/autofs start ls /etc/rc.d/init.d/autofs stop exit ypcat ypcat group group grouplist groupls groups users uname uname -s -n -m -r id whoami w root w ps ps ps -f ps -a === Thanks. === I am not in front of a machine with the nxclient on it, I will be in the morning and can see what some of the logs look like there; however, the ling concerning automatic reconnect to true makes me think the device is attempting to start up a session that doesn't exist. I can't prove that, but I will have more information tomorrow. Concerning your screen shot, I've only ever been stuck at that screen once and simply hitting enter at the keyboard made it vanish. The splash screen should time out anyhow once the start up stuff times out if gnome/kde/xfce's initialization routine takes too long. What desktop (window manager?) are you using? Is it Gnome, KDE or something else? I've not seen selinux create an issue, but for posterity is it running? Does it log anything on the system you're attempting to connect with? Oh, what about permissions for the user? Does the user have the ability to write to his/her home directory properly? You could be getting stuck on the splash screen because the user can't write any data for the initialization. Sincerely, Alex White === Send instant messages to your online friends http://uk.messenger.yahoo.com

3 2

Current Chipset Compatibility
by John Paulson 22 May '08

22 May '08

Can someone make a recommedation as far as best chipset for Centos 5.0 or 5..1 using a Q6600 series CPU with chipsets that have onboard VGA? From poking around it looks like the G33 and P35 are not supported or have problems until the newer 2.6.22 kernel (the iso's appear to be earlier than that, think it was .18)? So I am considering boards with the Intel G965 chipset but not sure if is supported yet? Can someone make a recommedation as far as best chipset for this scenario? thx -- John

2 1

Dear centos@centos.org May 82% 0FF
by VIAGRA � Official Site 22 May '08

22 May '08

1 0

AW: [CentOS] question on minimal install using CF as /dev/sda
by Marc Rebischke 22 May '08

22 May '08

Hi all, We're attempting to use CentOS 5.1 on a test platform which uses a CF card as it's primary storage. (MB: ETX-LX) The BIOS supports booting from CD and/or the CF. Issues we've run into are: During installation of CentOS 5.1, it appears all goes well through partitioning, package selection, interface configuration. Once the install starts in earnest, errors pop up...a snippet is: ================ Traceback (most recent call first): File "/usr/lib/python2.4/site-packages/yum/packageSack.py", line 640, in returnNewestByName raise PackageSackError, 'No Package Matching %s' % name File "/usr/lib/python2.4/site-packages/yum/packageSack.py", line 318, in returnNewestByName return bestofeach.returnNewestByName(name) File "/tmp/treedir.29352/instimage/usr/lib/anaconda/yuminstall.py", line 1093, in getBestKernalByArch pkgs= ayum.pkgSack.returnNewestByName(pkgname) File "/tmp/treedir.29352/instimage/usr/lib/anaconda/yuminstall.py", line 1102, in selectBestKernel kpkg = getBestKernalByArch("kernel", self.ayum) File "/tmp/treedir.29352/instimage/usr/lib/anaconda/yuminstall.py", line 1236 in doPostSelection self.selectBestKernel(anaconda) File "/tmp/treedir.29352/instimage/usr/lib/anaconda/backend.py", line 177 in doPostSelection return anaconda.backend.doPostSelection(anaconda) ================== It appears that we're not writing to the CF and a driver is needed. We have the driver, but are uncertain how to pass the information to the installer. No Floppy is present. Any thoughts or suggestions or pointers to resources would be greatly appreciated. Regards, -Ray _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos ########################## Ray, Which Driver do you mean ? Since CF-Cards are IDE/ATA-Compatible there's normally no need to install any Drivers to Access the CF. If you really need a driver for a Hardware-Component during install you could copy the driver to an USB-Stick instead a floppy... Some more Ideas/Hints... You could/should check if the md5/sha-checksum of the downloaded CentOS ISO(s) is/are OK. Did you made any changes to the "minimal Installation" Package-List ? If you are using the netinstall.iso you could give the "full" CD/DVD-ISO(s) a try. Just my 2 Cents for now. Regards Marc Rebischke

1 0

RE: [CentOS] COBOL
by James B. Byrne 22 May '08

22 May '08

On : Wed, 21 May 2008 16:57:37 -0400, "Ross S. W. Walker" <rwalker(a)medallion.com> wrote: > I would just buy the RH licenses for the project. CentOS may work well > for development and testing platform, but the production code should > be on fully supported RHEL. Having been on RHEL support, and having had occasion to use that support quite extensively, I have formed an opinion to the contrary. My experience did not lead me to the conclusion that licensed RHEL distributions, together with the highest available level of support offered by RedHat, provided any measurable benefit over CentOS and community support. In fact, my experiences with RedHat Support, which were not in the least bit negative, led me to abandon RedHat, first to WhiteBox and thence to CentOS. The practical matter is that RedHat Support is provided in layers, with minimally experienced person filtering support calls. This was, and I expect still is, the case regardless of what level of support is purchased. By the time a serious problem got to a person in RedHat who possessed anywhere near my own experience with the systems under consideration either I had already solved the issue (usually with help from Goole or project specific mailing lists), identified a satisfactory workaround, or had determined that the problem was unsolvable in the timeframe required with the resources available. RedHat support people were unfailingly polite and helpful, but the fact remains that the value for fee was not evident. Immediate support (which is really the only kind that matters to an organization, anything else is really a development project of some sort) for open source systems comes in two basic flavors, enlightenment and custom consulations. Enlightenment is provided by informed individuals who are willing to share their knowledge and experience with others who problems are products of their own ignorance. Members of this mailing list have provided enlightenment to me on many, many occasions. Custom work is either provided from ones own resources or is contracted out to people who really know the system you need fixed/enhanced within a minimal amount of time. I have engaged open source software authors to enhance their products with features that our firm desired on many occasions and in fact am doing so with one at the present time. I cannot perceive any measurable advantage to having a support contract for OSS, other than perhaps with the actual core team of the exact product you are using. RH is a packager, which is not to denigrate either the value of the integration work that they do, or its technical merit. Nonetheless, most OSS support problems are either resolved by re-reading the specific package documentation, having an obscure feature identified and explained by someone that knows about it, bypassing the impediment, or when all else fails writing and submitting your own patch. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

Strange NTP problem
by Alfred von Campe 22 May '08

22 May '08

I have 30 identical Lenovo desktop systems running CentOS 5.1. On one of those systems the clock is running slow (5+ minutes from yesterday to this morning and another minute since this morning) despite the fact that NTP is running on all of them and they all have the exact same /etc/ntp.conf file (I compared the MD5 sums of that file on all the systems). Here is the output of "grep ntp /var/log messages" on the system with the problem since I restarted the NTP daemon earlier today: May 20 11:35:38 hepdsw03 ntpd[31791]: ntpd 4.2.2p1(a)1.1570-o Sat Nov 10 12:33:50 UTC 2007 (1) May 20 11:35:38 hepdsw03 ntpd[31792]: precision = 1.000 usec May 20 11:35:38 hepdsw03 ntpd[31792]: Listening on interface wildcard, 0.0.0.0#123 Disabled May 20 11:35:38 hepdsw03 ntpd[31792]: Listening on interface wildcard, ::#123 Disabled May 20 11:35:38 hepdsw03 ntpd[31792]: Listening on interface lo, :: 1#123 Enabled May 20 11:35:38 hepdsw03 ntpd[31792]: Listening on interface eth0, fe80::210:c6ff:feab:dd92#123 Enabled May 20 11:35:38 hepdsw03 ntpd[31792]: Listening on interface lo, 127.0.0.1#123 Enabled May 20 11:35:38 hepdsw03 ntpd[31792]: Listening on interface eth0, 10.66.42.109#123 Enabled May 20 11:35:38 hepdsw03 ntpd[31792]: kernel time sync status 0040 May 20 11:35:38 hepdsw03 ntpd[31792]: frequency initialized 0.000 PPM from /var/lib/ntp/drift May 20 11:38:55 hepdsw03 ntpd[31792]: synchronized to LOCAL(0), stratum 10 May 20 11:38:55 hepdsw03 ntpd[31792]: kernel time sync disabled 0001 May 20 11:39:59 hepdsw03 ntpd[31792]: synchronized to 10.101.32.104, stratum 3 May 20 11:40:58 hepdsw03 ntpd[31792]: synchronized to LOCAL(0), stratum 10 May 20 11:42:09 hepdsw03 ntpd[31792]: synchronized to 10.101.32.104, stratum 3 May 20 11:47:26 hepdsw03 ntpd[31792]: synchronized to LOCAL(0), stratum 10 May 20 11:49:31 hepdsw03 ntpd[31792]: synchronized to 10.101.32.104, stratum 3 May 20 11:52:48 hepdsw03 ntpd[31792]: synchronized to LOCAL(0), stratum 10 May 20 11:54:54 hepdsw03 ntpd[31792]: synchronized to 10.101.32.104, stratum 3 May 20 12:01:26 hepdsw03 ntpd[31792]: synchronized to LOCAL(0), stratum 10 Any idea what could be causing this? For now I have disabled the NTP daemon and am running ntpdate once an hour. What complicates the matter is that we are using Kerberos for authentication, and after a day or so the user can not log into his system anymore because of the time skew. Alfred

4 9

Failed boot drive
by Dean Maluski 22 May '08

22 May '08

Unclear on how to recover from failed boot drive? SDA has failed but I'm still able to boot. I need to replace primary boot drive. Upon initial build I created a RAID 1 mirror of /boot dir/partition. How do I get system to boot off second or third drive so that I can replace /sda? I've successfully replaced /sdb & sdc raid 5 drives in the past but have always struggled to get primary boot drive replaced. Read HOWTO's in the past but it's been an unsuccessful pain and eventually just did a full rebuild. I just read another HOWTO and as confused as I was several months ago, nothing on getting system to boot from alternate drive.

2 1

question on minimal install using CF as /dev/sda
by Ray Leventhal 22 May '08

22 May '08

Hi all, We're attempting to use CentOS 5.1 on a test platform which uses a CF card as it's primary storage. (MB: ETX-LX) The BIOS supports booting from CD and/or the CF. Issues we've run into are: During installation of CentOS 5.1, it appears all goes well through partitioning, package selection, interface configuration. Once the install starts in earnest, errors pop up...a snippet is: ================ Traceback (most recent call first): File "/usr/lib/python2.4/site-packages/yum/packageSack.py", line 640, in returnNewestByName raise PackageSackError, 'No Package Matching %s' % name File "/usr/lib/python2.4/site-packages/yum/packageSack.py", line 318, in returnNewestByName return bestofeach.returnNewestByName(name) File "/tmp/treedir.29352/instimage/usr/lib/anaconda/yuminstall.py", line 1093, in getBestKernalByArch pkgs= ayum.pkgSack.returnNewestByName(pkgname) File "/tmp/treedir.29352/instimage/usr/lib/anaconda/yuminstall.py", line 1102, in selectBestKernel kpkg = getBestKernalByArch("kernel", self.ayum) File "/tmp/treedir.29352/instimage/usr/lib/anaconda/yuminstall.py", line 1236 in doPostSelection self.selectBestKernel(anaconda) File "/tmp/treedir.29352/instimage/usr/lib/anaconda/backend.py", line 177 in doPostSelection return anaconda.backend.doPostSelection(anaconda) ================== It appears that we're not writing to the CF and a driver is needed. We have the driver, but are uncertain how to pass the information to the installer. No Floppy is present. Any thoughts or suggestions or pointers to resources would be greatly appreciated. Regards, -Ray

1 0

CentOS-announce Digest, Vol 39, Issue 10
by centos-announce-request＠centos.org 22 May '08

22 May '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:0275 Important CentOS 5 i386 kernel Update (Karanbir Singh) 2. CESA-2008:0275 Important CentOS 5 x86_64 kernel Update (Karanbir Singh) 3. CEBA-2008:0280 CentOS 5 i386 xen Update (Karanbir Singh) 4. CEBA-2008:0280 CentOS 5 x86_64 xen Update (Karanbir Singh) 5. CESA-2008:0287 Important CentOS 3 i386 libxslt - security update (Tru Huynh) 6. CESA-2008:0287 Important CentOS 3 x86_64 libxslt - security update (Tru Huynh) 7. CESA-2008:0287 Important CentOS 5 i386 libxslt Update (Karanbir Singh) 8. CESA-2008:0287 Important CentOS 5 x86_64 libxslt Update (Karanbir Singh) 9. CESA-2008:0489 Critical CentOS 5 i386 gnutls Update (Karanbir Singh) 10. CESA-2008:0489 Critical CentOS 5 x86_64 gnutls Update (Karanbir Singh) 11. CESA-2008:0287-01: Important CentOS 2 i386 libxslt security update (John Newbigin) ---------------------------------------------------------------------- Message: 1 Date: Wed, 21 May 2008 13:48:13 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2008:0275 Important CentOS 5 i386 kernel Update To: centos-announce(a)centos.org Message-ID: <20080521124813.GA3073(a)base.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2008:0275 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0275.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: e16e0e18187d9d931228c6e11c2d89bf kernel-2.6.18-53.1.21.el5.i686.rpm 84a3d53a655a9abbaa1bbc9e2a74d007 kernel-debug-2.6.18-53.1.21.el5.i686.rpm 54854a7515043387932785d0ca5a5b37 kernel-debug-devel-2.6.18-53.1.21.el5.i686.rpm cacfe849df6d086fe0df5ba2548e54d2 kernel-devel-2.6.18-53.1.21.el5.i686.rpm bc8dc922d73b61515b0b502b60e5e084 kernel-doc-2.6.18-53.1.21.el5.noarch.rpm 52cc1bf88bc8d423151a6841c2705166 kernel-headers-2.6.18-53.1.21.el5.i386.rpm 5539c13872ad6708ab0377e85d50e372 kernel-PAE-2.6.18-53.1.21.el5.i686.rpm dae280d46074f4d34a4a2386c04aa972 kernel-PAE-devel-2.6.18-53.1.21.el5.i686.rpm 4ab36b9e7adf36ca15b337c1bcb4021d kernel-xen-2.6.18-53.1.21.el5.i686.rpm 3fcf05e0c22b3a6eaaf13bd73554960a kernel-xen-devel-2.6.18-53.1.21.el5.i686.rpm Source: 6db1dbe7a05d80061bd593bfa16b90ea kernel-2.6.18-53.1.21.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 21 May 2008 13:48:13 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2008:0275 Important CentOS 5 x86_64 kernel Update To: centos-announce(a)centos.org Message-ID: <20080521124813.GA3086(a)base.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2008:0275 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0275.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 78271de2d69838649627edabf22065a3 kernel-2.6.18-53.1.21.el5.x86_64.rpm 867eea6bf5aad07eb555ebbdaf1ffbd4 kernel-debug-2.6.18-53.1.21.el5.x86_64.rpm c43110331d753e6a8bdd9d92648fb367 kernel-debug-devel-2.6.18-53.1.21.el5.x86_64.rpm 42779778f08052c98118eecbb3952880 kernel-devel-2.6.18-53.1.21.el5.x86_64.rpm 3417b759c192526d881d73af4b12d5d8 kernel-doc-2.6.18-53.1.21.el5.noarch.rpm 9b23032f049ad4aecd77a83cd2b328d4 kernel-headers-2.6.18-53.1.21.el5.x86_64.rpm 51bdb647b793105738ff423845bcc11f kernel-xen-2.6.18-53.1.21.el5.x86_64.rpm 4d8896b2d8495b5f043e298cac809f67 kernel-xen-devel-2.6.18-53.1.21.el5.x86_64.rpm Source: 6db1dbe7a05d80061bd593bfa16b90ea kernel-2.6.18-53.1.21.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Wed, 21 May 2008 14:01:45 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2008:0280 CentOS 5 i386 xen Update To: centos-announce(a)centos.org Message-ID: <20080521130145.GA3738(a)base.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2008:0280 Upstream details at : https://rhn.redhat.com/errata/RHBA-2008-0280.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: fe1476d70e4b6587e5b400aa87d98e33 xen-3.0.3-41.el5_1.6.i386.rpm d816b1d9bcd821873c2795fc5653a50d xen-devel-3.0.3-41.el5_1.6.i386.rpm 446c29eeb926276cee3958194e888edb xen-libs-3.0.3-41.el5_1.6.i386.rpm Source: 16062424fe0d1d8f0e60d69c6a1e82ad xen-3.0.3-41.el5_1.6.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Wed, 21 May 2008 14:01:45 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2008:0280 CentOS 5 x86_64 xen Update To: centos-announce(a)centos.org Message-ID: <20080521130145.GA3752(a)base.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2008:0280 Upstream details at : https://rhn.redhat.com/errata/RHBA-2008-0280.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 00aac74a24738e20b60422d7f6095c20 xen-3.0.3-41.el5_1.6.x86_64.rpm 550be917a166ef10df70d94347ad4a4c xen-devel-3.0.3-41.el5_1.6.i386.rpm d11145a16d9781dc33d5368c2e76e317 xen-devel-3.0.3-41.el5_1.6.x86_64.rpm 34a5389dbc59e7feefcd0c1bda13ba79 xen-libs-3.0.3-41.el5_1.6.i386.rpm f9623d0a717a6d1f7fd3d391432d04d7 xen-libs-3.0.3-41.el5_1.6.x86_64.rpm Source: 16062424fe0d1d8f0e60d69c6a1e82ad xen-3.0.3-41.el5_1.6.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Wed, 21 May 2008 15:50:56 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2008:0287 Important CentOS 3 i386 libxslt - security update To: centos-announce(a)centos.org Message-ID: <20080521135056.GA12715(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2008:0287 libxslt security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2008-0287.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/libxslt-1.0.33-6.i386.rpm updates/i386/RPMS/libxslt-devel-1.0.33-6.i386.rpm addons/i386/RPMS/libxslt-python-1.0.33-6.i386.rpm source: updates/SRPMS/libxslt-1.0.33-6.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update libxslt Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

broken GFS
by Doug Tucker 22 May '08

22 May '08

This is the 2nd time this has happened to me. There was a kernel release over the weekend to .67.0.15, yet, they did not release the updated GFS to go along with it, so when the machine rebooted, there was no gfs file system in the new running kernel which in turn wreaked havoc on my cluster. I truly wish they would not do that :). I guess I shall have to not allow automatic yum updates from these machines.

40 110

Maybe OT: Some strange problem with postfix
by carlopmart 22 May '08

22 May '08

Hi all, I have a strange problem with postfix on a CentOS 5.1 (fully patched). Every time that postfix sends a message to public smtp servers generates an autoresponse mail to sender about delay ... Somebody knows how can I fix this?? -- CL Martinez carlopmart {at} gmail {d0t} com

7 12

Need help with rsync.
by James B. Byrne 21 May '08

21 May '08

I have two hosts which have their respective keys loaded into each others .ssh/authorized-keys2 file for root. I want to move a directory tree from one host to the other via rsync to maintain a shadow structure of the application provided on the main host. This is the relevant part of the command: rsync -avz --rsh=ssh --delete-after /var/data/pas-redmine root@inet01.mississauga.harte-lyne.ca:/var/data The connection is made and a good deal of material is successfully transferred. I am however getting a number of permission errors: rsync: readlink "/var/data/pas-redmine/lib/tabular_form_builder.rb" failed: Permission denied (13) rsync: readlink "/var/data/pas-redmine/lib/redmine.rb" failed: Permission denied (13) rsync: readlink "/var/data/pas-redmine/lib/diff.rb" failed: Permission denied (13) and many more: The permissions and owner for these are: -rw-r--r-- 1 pas pas 2341 May 9 13:57 \ /var/data/pas-redmine/lib/tabular_form_builder.rb -rw-r--r-- 1 pas pas 7934 May 9 13:57 \ /var/data/pas-redmine/lib/redmine.rb -rw-r--r-- 1 pas pas 5602 May 9 13:57 \ /var/data/pas-redmine/lib/diff.rb ... The host application directory structure is a checked out svn repository, but some of the files that are giving errors are created locally such as the database dump file. I am at a loss to explain this since the rsync and ssh user, so far as I can tell, is root and this, so far as I understand, should allow unrestricted access to the files regardless of the ownership or permissions. If someone can clue me in as to what I am misapprehending here I would be much appreciative. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 4

service --status-all hangs CentOS-4.6?
by James B. Byrne 21 May '08

21 May '08

Is there a problem with running # service --status-all as root over ssh? A system that I performed this command upon has become non-responsive on all ports, leading me to conclude that it is either hung or the cpu is completely consumed with some task. Regards, Output to point of failure: ... Active Mount Points: -------------------- hcid is stopped sdpd is stopped hidd is stopped cpuspeed is stopped crond (pid 3334) is running... cupsd (pid 3806) is running... cups-config-daemon (pid 3404) is running... dc_client is stopped dc_server is stopped dhcpd is stopped Device not specified in /etc/sysconfig/diskdump Usage: /etc/init.d/dkms_autoinstaller {start|stop} -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

Re: [CentOS-announce] CESA-2008:0275 Important CentOS 5 i386 kernel Update
by Ralph Angenendt 21 May '08

21 May '08

Karanbir Singh wrote: > > CentOS Errata and Security Advisory 2008:0275 Important > > Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0275.html This update seems to break IPsec in the kernel, see <http://bugs.centos.org/view.php?id=2853>. Cheers, Ralph

1 0

Re:Can't get past the splash screen
by Eon Strife 21 May '08

21 May '08

Hi, Thanks for the reply. I already checked the the current user logged in the freenx by using "nxserver --list", it's only the root (the one I currently using). And yeah, I'm stuck in this screen : http://img.photobucket.com/albums/v708/EonStrife/stuck.jpg I wonder, just say if we don't use the remote desktop, but we access or use the computer directly/physically as usual, what do we do if we're stuck on that screen ? About the log of the nomachine, I think the most interesting part is the bottomost part. Note, there are many occurences of "NXFileMonitor::readData", and some 'stop' and 'destructor' words in the end, even though the nomachine is still running. === [Wed 21. May 09:48:18 2008]: Setting environment variable 'NX_HANDLEPROXY' to '28077c' [Wed 21. May 09:48:18 2008]: NXService::getWin32DisplayHandler: NX_HANDLEPROXY=28077c [Wed 21. May 09:48:18 2008]: NXService::getWin32DisplayHandler: end [Wed 21. May 09:48:18 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: LoginDialog: slotAgentTimer [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: LoginDialog: slotAgentTimer [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: LoginDialog: slotAgentTimer [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: LoginDialog: slotAgentTimer [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: LoginDialog: slotAgentTimer [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:19 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: LoginDialog: slotAgentTimer [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: LoginDialog: slotAgentTimer [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: LoginDialog: slotAgentTimer [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: LoginDialog: slotAgentTimer [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: LoginDialog: slotAgentTimer [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:20 2008]: NXFileMonitor::readData [Wed 21. May 09:48:21 2008]: NXFileMonitor::readData [Wed 21. May 09:48:21 2008]: NXFileMonitor::readData [Wed 21. May 09:48:21 2008]: LoginDialog: slotAgentTimer [Wed 21. May 09:48:21 2008]: NXFileMonitor::readData [Wed 21. May 09:48:21 2008]: NXFileMonitor::readData [Wed 21. May 09:48:21 2008]: NXFileMonitor::readData [Wed 21. May 09:48:21 2008]: NXFileMonitor::readData [Wed 21. May 09:48:21 2008]: LoginDialog: slotAgentTimer [Wed 21. May 09:48:21 2008]: NXFileMonitor::readData [Wed 21. May 09:48:21 2008]: NXFileMonitor::readData [Wed 21. May 09:48:21 2008]: NXFileMonitor::readData [Wed 21. May 09:48:21 2008]: NXFileMonitor::readData [Wed 21. May 09:48:21 2008]: LoginDialog: slotAgentTimer [Wed 21. May 09:48:21 2008]: NXFileMonitor::readData [Wed 21. May 09:48:21 2008]: NXFileMonitor::readData [Wed 21. May 09:48:21 2008]: NXFileMonitor::readData [Wed 21. May 09:48:21 2008]: NXFileMonitor::readData [Wed 21. May 09:48:21 2008]: LoginDialog: slotAgentTimer [Wed 21. May 09:48:21 2008]: LoginDialog: Agent found closing windows... [Wed 21. May 09:48:21 2008]: LoginDialog: Slotsingleapplication: setting automatic reconnect to true. [Wed 21. May 09:48:21 2008]: Settings::flush [Wed 21. May 09:48:21 2008]: Settings::flush [Wed 21. May 09:48:21 2008]: LoginDialog: closeEvent received! [Wed 21. May 09:48:21 2008]: LoginDialog::destructor called begin [Wed 21. May 09:48:21 2008]: LoginDialog: stopAllTimers [Wed 21. May 09:48:21 2008]: LoginDialog: stopProgressTimer [Wed 21. May 09:48:21 2008]: Utility::getPreferencesFile: 'nxclient' -> 'C:\Users\Eon Strife/.nx/config/nxclient.cfg' [Wed 21. May 09:48:21 2008]: Settings::flush [Wed 21. May 09:48:21 2008]: Called destructor for protocol class [Wed 21. May 09:48:21 2008]: LoginDialog::destructor called end === Thanks === Eon Strife wrote: > > Hi, > I have a remote frontend (it's kept in the room which I don't have access) which is installed with CentOS 4 and Rocks . So, to use the desktop(Gnome) of the frontend I use the freenx + nomachine following the guide in http://www.centos.org/modules/newbb/viewtopic.php?forum=20&topic_id=1640&vi…. It worked. Then, I intended to add user, but I couldn't create the home folder in /home/ for the new user. After browsing, I found that somebody mentioned it's because of the automounter/autofs. So, I played around, enabled and disabled the autofs, and yes, I could create the home folder for the new user. The problem is that, when I tried to log-in to the front end using nomachine (using root) again, I could only get as far as the splash screen of the CentOS. I tried to connect using the putty (terminal), and I could interact (issuing command to the terminal), but I couldn't use the Gnome anymore. So, why in the nomachine I could not pass the splash > screen anymore ? Any solution ? Thanks. Although I can not answer your question directly, did you see anything logged on the system that you are connecting to via the nomachine client? Also, the Nomachine client provides some logging of its own as well. You may want to check for any error or permissions related information in the client's directory. That may point you in the right direction. Sincerely, Alex White -- ethericalzen at gmail.com Life is a prison, death is a release=== Send instant messages to your online friends http://uk.messenger.yahoo.com

2 1

Show IP Traffic on a port
by Joseph L. Casale 21 May '08

21 May '08

I am trying to determine the root of an issue I am having. How can I watch traffic destined to a specific port on my CentOS 5.1 box to see if its even hitting it? It would be udp traffic. Thanks! jlc

5 5

How to connect a bluetooth mouse with CentOS?
by Leo Willems 20 May '08

20 May '08

How to connect a bluetooth mouse with CentOS? hcitool scan Scanning ... 00:07:61:96:D1:A0 Bluetooth Laser Travel Mouse hcitool name 00:07:61:96:D1:A0 Bluetooth Laser Travel Mouse hcitool cc 00:07:61:96:D1:A0 hcitool auth 00:07:61:96:D1:A0 The Bluetooth Manager ask for the pass key. No connection / mouse function after entering the passkey. How to connect a bluetooth mouse with CentOS?

2 2

RE: [CentOS] Need help with rsync.
by Bowie Bailey 20 May '08

20 May '08

James B. Byrne wrote: > I have two hosts which have their respective keys loaded into each > others .ssh/authorized-keys2 file for root. I want to move a > directory tree from one host to the other via rsync to maintain a > shadow structure of the application provided on the main host. > > This is the relevant part of the command: > > rsync -avz --rsh=ssh --delete-after /var/data/pas-redmine > root@inet01.mississauga.harte-lyne.ca:/var/data > > The connection is made and a good deal of material is successfully > transferred. I am however getting a number of permission errors: > > rsync: readlink "/var/data/pas-redmine/lib/tabular_form_builder.rb" > failed: Permission denied (13) > rsync: readlink "/var/data/pas-redmine/lib/redmine.rb" failed: > Permission denied (13) > rsync: readlink "/var/data/pas-redmine/lib/diff.rb" failed: > Permission denied (13) > > and many more: > > > The permissions and owner for these are: > -rw-r--r-- 1 pas pas 2341 May 9 13:57 \ > /var/data/pas-redmine/lib/tabular_form_builder.rb > -rw-r--r-- 1 pas pas 7934 May 9 13:57 \ > /var/data/pas-redmine/lib/redmine.rb > -rw-r--r-- 1 pas pas 5602 May 9 13:57 \ > /var/data/pas-redmine/lib/diff.rb > ... > > > The host application directory structure is a checked out svn > repository, but some of the files that are giving errors are created > locally such as the database dump file. I am at a loss to explain > this since the rsync and ssh user, so far as I can tell, is root and > this, so far as I understand, should allow unrestricted access to the > files regardless of the ownership or permissions. > > If someone can clue me in as to what I am misapprehending here I > would be much appreciative. Maybe you need to specify the uid and gid for rsyncd on the server. If it's defaulting to nobody, that could be your problem. uid The "uid" option specifies the user name or user ID that file transfers to and from that module should take place as when the daemon was run as root. In combination with the "gid" option this determines what file permissions are available. The default is uid -2, which is normally the user "nobody". gid The "gid" option specifies the group name or group ID that file transfers to and from that module should take place as when the daemon was run as root. This complements the "uid" option. The default is gid -2, which is normally the group "nobody". For one machine that I'm backing up via rsync, my /etc/rsyncd.conf looks like this: [backup] path = /backupdir hosts allow = xx.xx.xx.xx auth users = alloweduser secrets file = /etc/rsyncd.secrets uid = 0 gid = 0 -- Bowie

2 1

IMAPS error with Dovecot?
by Benjamin Smith 20 May '08

20 May '08

I'm using Dovecot to support IMAPS on CentOS4 on port 993. Stock RPMS, absolutely nothing special done or even anything compiled on the system. About as usual as usual usually gets. But, using KMail on my Fedora Linux laptop, I keep getting the following message: (in part) "This means that although the resource, Changing the flags of message imaps://me@myserver.com:993/INBOX/;UID=0,0,1866921748,1866921754,1866921769,1866921777:1866921783,1866921795,1866921800,1866921824:1866921828,1866921834 failed., was able to be opened, an error occurred while writing to the resource. Changing the flags of message imaps://my@myserver.com:993/INBOX/;UID=0,1866921748,1866921754,1866921769,1866921777:1866921783,1866921795,1866921800,1866921824:1866921828,1866921834 failed." It happens whever I mark a message as "read" and then resynch up with imap. I can *delete* messages just fine, I just can't change the flags on a message. I've scanned thru the /var/log/maillog, /var/log/secure, /var/log/messages and found nothing out of the ordinary. I've checked the permissions of the /var/spool/mail/myaccount and /home/myaccount/Mail folders - both are fine. I have another, almost identically configured mail server that is not having the same issue. I've tried refreshing my cache, and rebuilding indexes in my email program. I'm stumped. Any idea where to go next for this? -Ben -- -- Only those who reach toward a goal are likely to achieve it. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

2 1

I need some NFS explanations, please.
by Steve Campbell 20 May '08

20 May '08

I have a problem with NFS that I can't start to resolve. All servers are CentOS 5 servers. One server exports a directory and two others mount it. Simple so far. A file is created on the server, and the two nfs clients do an "ls -al" and get a common (meaning the same) result as the server. Over the course of a day, and after the file on the server has been modified on the server, the results of the "ls -al" show the original common result on the two clients, and an obviously different result on the server. So I figure it's some kind of caching problem. But I figure it's a server caching problem. I next go to one of the clients and "cat" the file, and then do another "ls -al". Now the server and this client agree on the file attributes, but not on the second client which shows the original wrong result still. So now I think it's a client caching problem. Can anyone explain the above situation and perhaps some settings that will resolve this without requiring the nfs client to open the file in some way before it gets the proper file attributes? "nfsstat -m" of the client returns the following: Flags: rw,vers=3,rsize=32768,wsize=32768,acregmax=3,acdirmin=3,acdirmax=3,hard, intr,proto=tcp,timeo=600,retrans=2,sec=sys,addr=10.0.12.152 Thanks for any help. Steve Campbell

2 2

OT: Building NFS server with LVM and snapshots enabled
by carlopmart 20 May '08

20 May '08

Hi all, I need to build a NFS CentOS 5.1 based server with LVM and snaphosts for disaster recovering to serve storage to three ESX servers for a development dept. I have 500 GB for storage. Data that I need to store on this server is 150 GB and can grow to 210 GB to the end of year ... My questions are: - Is it possible to do some type of scripting to do data snapshots every day and then copy to a remote server?? Some example, please?? - How can I restore snapshot data on the production server if I need to recover it?? Openfiler or FreeNAS isn't an option to do this task (customer requeriment). -- CL Martinez carlopmart {at} gmail {d0t} com

3 3

awstats, webalizer or...
by Ray Van Dolson 20 May '08

20 May '08

So what does everyone out there use to generate web statistics these days? Are the tried and true awstats or webalizer still the best out there? Ray

6 5

Can't get past the splash screen
by Eon Strife 20 May '08

20 May '08

Hi, I have a remote frontend (it's kept in the room which I don't have access) which is installed with CentOS 4 and Rocks . So, to use the desktop(Gnome) of the frontend I use the freenx + nomachine following the guide in http://www.centos.org/modules/newbb/viewtopic.php?forum=20&topic_id=1640&vi…. It worked. Then, I intended to add user, but I couldn't create the home folder in /home/ for the new user. After browsing, I found that somebody mentioned it's because of the automounter/autofs. So, I played around, enabled and disabled the autofs, and yes, I could create the home folder for the new user. The problem is that, when I tried to log-in to the front end using nomachine (using root) again, I could only get as far as the splash screen of the CentOS. I tried to connect using the putty (terminal), and I could interact (issuing command to the terminal), but I couldn't use the Gnome anymore. So, why in the nomachine I could not pass the splash screen anymore ? Any solution ? Thanks. Send instant messages to your online friends http://uk.messenger.yahoo.com

2 1

Best Motherboard
by Ryan Nichols 19 May '08

19 May '08

To all.. I was using a Gigabyte motherboard, and the board seems like a bad choice. What do you guys recommend for a decent server board that would use a Dual Core processor and DDR2 ram. I dont want to replace the CPU and Mem i already have, just find a decent board that supportsthe existing.. Thanks, Ryan Nichols

16 31

tar spanning
by CentOS List 19 May '08

19 May '08

Hi, I have a directory with 18GB worth of files and I would like to tar span and burn it into a few DVDs after that. How can I do this in command line? Thanks Regards

21 50

Convert a real system in a DomU
by Sergio Belkin 19 May '08

19 May '08

Hi, I was a server running Fedora 6. I want to migrate it to Xen on a Centos 5.1. Can I make something like dd if=/dev/sdaX of=fedora6.img (on FC6) and then on Centos 5.1 dd if=fedora6.img of=/dev/sdaX Could I run this system into Xen? Thanks in advance! -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin -

3 4

kickstart question with 2 network cards
by Jerry Geis 19 May '08

19 May '08

I am using kickstart to automate installs. working nicely. I now have a box with 2 NIC cards and I am getting prompted for which nick to use. I have a line like: network --device eth0 --bootproto dhcp --hostname tmp.msgnet.com in my kickstart. This line does not seem to be enough to say install with eth0 even though there may be an eth1. How do I tell kickstart to not prompt for which network and just use eth0. Thanks, Jerry

2 1

RE: [CentOS] symbolic linking
by Bowie Bailey 19 May '08

19 May '08

Frank Cox wrote: > I have a number directories under /opt on computer jack. I want some > (not all) of them to appear in /opt on computer jill. > > I have the /opt directory on jack mounted on jill under /mnt/jack > > If I go into the /opt directory on jill and do this: > > ln -s /mnt/jack/opt/files . > > I get /opt/files/files on jill. What I want is /opt/files and I > can't see what I'm doing wrong. I don't see anything wrong with that command. A quick test on one of my systems confirms that it should do what you expect. Try specifying the target explicitly: ln -s /mnt/jack/opt/files /opt/files (no trailing slashes on either the source or destination) -- Bowie

3 2

yum problem after last kernel
by Alex Palenschat 19 May '08

19 May '08

Hello all, I've been googling and haven't found an answer. I have a Centos 4.6 box that is having an issue since the last yum update. The nss_ldap and kernel packages were the only packages installed/updated. When I try to run yum I now receive: [root@ns1 ~]# yum update There was a problem importing one of the Python modules required to run yum. The error leading to this problem was: /usr/lib/librpmdb-4.3.so: undefined symbol: xdr___db_get_name_reply[rpmdb Please install a package which provides this module, or verify that the module is installed correctly. It's possible that the above module doesn't match the current version of Python, which is: 2.3.4 (#1, Dec 11 2007, 05:27:57) [GCC 3.4.6 20060404 (Red Hat 3.4.6-9)] If you cannot solve this problem yourself, please go to the yum faq at: http://wiki.linux.duke.edu/YumFaq [root@ns1 ~]# rpm -qi rpm-libs Name : rpm-libs Relocations: (not relocatable) Version : 4.3.3 Vendor: CentOS Release : 23_nonptl Build Date: Sat 17 Nov 2007 06:13:56 AM CST Install Date: Mon 07 Jan 2008 11:57:33 AM CST Build Host: builder6 Group : Development/Libraries Source RPM: rpm-4.3.3-23_nonptl.src.rpm Size : 1739984 License: GPL Signature : DSA/SHA1, Sun 18 Nov 2007 02:55:20 PM CST, Key ID a53d0bab443e1821 Summary : Libraries for manipulating RPM packages. Description : This package contains the RPM shared libraries. [root@ns1 ~]# rpm -Vv rpm-libs ........ /usr/lib/librpm-4.3.so ........ /usr/lib/librpmbuild-4.3.so prelink: /usr/lib/librpmdb-4.3.so: prelinked file was modified S.?..... /usr/lib/librpmdb-4.3.so ........ /usr/lib/librpmio-4.3.so Anyone have an idea? Alex

1 1

Re: [CentOS-announce] Impact of the Debian OpenSSL vulnerability
by Chris Butler 19 May '08

19 May '08

[please CC me on replies] On Thu, May 15, 2008 at 08:08:39PM +0200, Daniel de Kok wrote: > Questions on how this may affect CentOS users should be directed to > the CentOS users list. List subscription information is available > from: In addition to the fixed OpenSSL packages, Debian also released an update to OpenSSH that includes a blacklist of the weak keys. With this update, any connections attempting to authenticate with a weak key are rejected. There's also a utility which searches through user ~/.ssh directories for blacklisted keys. This blacklist would help in securing non-Debian systems as well. Are there any plans to include this ssh update in CentOS? -- Chris Butler Zedcore Systems Ltd UK tel: 0114 238 1828 We have moved to: Lydgate House, Lydgate Lane, Sheffield S10 5FH

7 10

CentOS-announce Digest, Vol 39, Issue 9
by centos-announce-request＠centos.org 19 May '08

19 May '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2008:0258 CentOS 5 i386 mcstrans Update (Karanbir Singh) 2. CEBA-2008:0258 CentOS 5 x86_64 mcstrans Update (Karanbir Singh) 3. CEBA-2008:0219 CentOS 5 i386 device-mapper-multipath Update (Karanbir Singh) 4. CEBA-2008:0219 CentOS 5 x86_64 device-mapper-multipath Update (Karanbir Singh) 5. CESA-2008:0270 Important CentOS 5 x86_64 libvorbis Update (Karanbir Singh) 6. CESA-2008:0270 Important CentOS 5 i386 libvorbis Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Mon, 19 May 2008 02:01:02 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2008:0258 CentOS 5 i386 mcstrans Update To: centos-announce(a)centos.org Message-ID: <20080519010102.GA3976(a)base.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2008:0258 Upstream details at : https://rhn.redhat.com/errata/RHBA-2008-0258.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 97f048f9e25b96598e6666ce8ade3f79 mcstrans-0.2.7-1.el5.i386.rpm Source: c4d891a0a78fa4b39e186671862bf38e mcstrans-0.2.7-1.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Mon, 19 May 2008 02:01:02 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2008:0258 CentOS 5 x86_64 mcstrans Update To: centos-announce(a)centos.org Message-ID: <20080519010102.GA3990(a)base.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2008:0258 Upstream details at : https://rhn.redhat.com/errata/RHBA-2008-0258.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 6fe63939ed264c22999fb31a32824c29 mcstrans-0.2.7-1.el5.x86_64.rpm Source: c4d891a0a78fa4b39e186671862bf38e mcstrans-0.2.7-1.el5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Mon, 19 May 2008 02:15:53 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2008:0219 CentOS 5 i386 device-mapper-multipath Update To: centos-announce(a)centos.org Message-ID: <20080519011553.GA4619(a)base.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2008:0219 Upstream details at : https://rhn.redhat.com/errata/RHBA-2008-0219.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 595507777df9907e6a514156a1a39e91 device-mapper-multipath-0.4.7-12.el5_1.4.i386.rpm 6dbc1f26ff888504fdc312c5d0cfd72d kpartx-0.4.7-12.el5_1.4.i386.rpm Source: ad4f7bc83160d9902ba03b2467d06558 device-mapper-multipath-0.4.7-12.el5_1.4.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Mon, 19 May 2008 02:15:54 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2008:0219 CentOS 5 x86_64 device-mapper-multipath Update To: centos-announce(a)centos.org Message-ID: <20080519011554.GA4639(a)base.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2008:0219 Upstream details at : https://rhn.redhat.com/errata/RHBA-2008-0219.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 6848614cc3bdb00abf10b5de1570098b device-mapper-multipath-0.4.7-12.el5_1.4.x86_64.rpm 5937c6cdf355f631c930961278748573 kpartx-0.4.7-12.el5_1.4.x86_64.rpm Source: ad4f7bc83160d9902ba03b2467d06558 device-mapper-multipath-0.4.7-12.el5_1.4.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Mon, 19 May 2008 02:19:21 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2008:0270 Important CentOS 5 x86_64 libvorbis Update To: centos-announce(a)centos.org Message-ID: <20080519011921.GA4824(a)base.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2008:0270 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0270.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 78cf5b45956016f3bd4200f4ab68e51b libvorbis-1.1.2-3.el5_1.2.i386.rpm 199d2dadd24c01fa42c0ee842b924b6f libvorbis-1.1.2-3.el5_1.2.x86_64.rpm 65dc9e0a84a6d88dff25e80f1b64d2c4 libvorbis-devel-1.1.2-3.el5_1.2.i386.rpm 7e732e8fb57ca2978cb1dd5d5ee61295 libvorbis-devel-1.1.2-3.el5_1.2.x86_64.rpm Source: d63e5567c1dd8a2ee1624799505c3c2b libvorbis-1.1.2-3.el5_1.2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Mon, 19 May 2008 02:19:21 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2008:0270 Important CentOS 5 i386 libvorbis Update To: centos-announce(a)centos.org Message-ID: <20080519011921.GA4807(a)base.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2008:0270 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0270.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 1f3bee2fa8673179621849948da4bb8b libvorbis-1.1.2-3.el5_1.2.i386.rpm 78bd9e7a4be68f85f06fc314800d4eed libvorbis-devel-1.1.2-3.el5_1.2.i386.rpm Source: d63e5567c1dd8a2ee1624799505c3c2b libvorbis-1.1.2-3.el5_1.2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 39, Issue 9 **********************************************

1 0

ndiswrapper and 4K stacks problem (system freezes)
by Timothy Kesten 18 May '08

18 May '08

Hi Folks, I'm trying tio install WLAN - USB - Stick Netgear WG111v3. ndiswrapper -i wg111v3 works. I can see ndiswrapper -l wg111v3: driver installed device (0846:4260) present But after modprobe ndiswrapper the system freezes. Troublshooting on ndiswrapper-sites says: It's a problem of "kernel is using 4K stacks (CONFIG_4KSTACKS)" Solution: recompile the kernel. That's no good solution. Is there a knowing "CentOS-like" solution for this problem? Thx Timothy

2 2

problem of building stardict
by cjzjm100 18 May '08

18 May '08

Hi guys! today i tried to install the latest stardict. When i configure it.The result is : [cjzjm100@localhost stardict-3.0.1]$ ./configure --prefix=/usr --sysconfdir=/etc --mandir=/usr/share/man checking for a BSD-compatible install... /usr/bin/install -c checking whether build environment is sane... yes checking for a thread-safe mkdir -p... /bin/mkdir -p checking for gawk... gawk checking whether make sets $(MAKE)... yes checking whether to enable maintainer-specific portions of Makefiles... no checking for gconftool-2... /usr/bin/gconftool-2 checking for style of include used by make... GNU checking for gcc... gcc checking for C compiler default output file name... a.out checking whether the C compiler works... yes checking whether we are cross compiling... no checking for suffix of executables... checking for suffix of object files... o checking whether we are using the GNU C compiler... yes checking whether gcc accepts -g... yes checking for gcc option to accept ISO C89... none needed checking dependency style of gcc... gcc3 checking for intltool >= 0.22... 0.36.2 found checking for perl... /usr/bin/perl checking for XML::Parser... ok checking build system type... i686-pc-linux-gnu checking host system type... i686-pc-linux-gnu checking for a sed that does not truncate output... /bin/sed checking for grep that handles long lines and -e... /bin/grep checking for egrep... /bin/grep -E checking for ld used by gcc... /usr/bin/ld checking if the linker (/usr/bin/ld) is GNU ld... yes checking for /usr/bin/ld option to reload object files... -r checking for BSD-compatible nm... /usr/bin/nm -B checking whether ln -s works... yes checking how to recognize dependent libraries... pass_all checking how to run the C preprocessor... gcc -E checking for ANSI C header files... yes checking for sys/types.h... yes checking for sys/stat.h... yes checking for stdlib.h... yes checking for string.h... yes checking for memory.h... yes checking for strings.h... yes checking for inttypes.h... yes checking for stdint.h... yes checking for unistd.h... yes checking dlfcn.h usability... yes checking dlfcn.h presence... yes checking for dlfcn.h... yes checking for g++... g++ checking whether we are using the GNU C++ compiler... yes checking whether g++ accepts -g... yes checking dependency style of g++... gcc3 checking how to run the C++ preprocessor... g++ -E checking for g77... no checking for xlf... no checking for f77... no checking for frt... no checking for pgf77... no checking for cf77... no checking for fort77... no checking for fl32... no checking for af77... no checking for xlf90... no checking for f90... no checking for pgf90... no checking for pghpf... no checking for epcf90... no checking for gfortran... gfortran checking whether we are using the GNU Fortran 77 compiler... yes checking whether gfortran accepts -g... yes checking the maximum length of command line arguments... 98304 checking command to parse /usr/bin/nm -B output from gcc object... ok checking for objdir... .libs checking for ar... ar checking for ranlib... ranlib checking for strip... strip checking if gcc supports -fno-rtti -fno-exceptions... no checking for gcc option to produce PIC... -fPIC checking if gcc PIC flag -fPIC works... yes checking if gcc static flag -static works... yes checking if gcc supports -c -o file.o... yes checking whether the gcc linker (/usr/bin/ld) supports shared libraries... yes checking whether -lc should be explicitly linked in... no checking dynamic linker characteristics... GNU/Linux ld.so checking how to hardcode library paths into programs... immediate checking whether stripping libraries is possible... yes checking if libtool supports shared libraries... yes checking whether to build shared libraries... yes checking whether to build static libraries... no configure: creating libtool appending configuration tag "CXX" to libtool checking for ld used by g++... /usr/bin/ld checking if the linker (/usr/bin/ld) is GNU ld... yes checking whether the g++ linker (/usr/bin/ld) supports shared libraries... yes checking for g++ option to produce PIC... -fPIC checking if g++ PIC flag -fPIC works... yes checking if g++ static flag -static works... yes checking if g++ supports -c -o file.o... yes checking whether the g++ linker (/usr/bin/ld) supports shared libraries... yes checking dynamic linker characteristics... GNU/Linux ld.so checking how to hardcode library paths into programs... immediate appending configuration tag "F77" to libtool checking if libtool supports shared libraries... yes checking whether to build shared libraries... yes checking whether to build static libraries... no checking for gfortran option to produce PIC... -fPIC checking if gfortran PIC flag -fPIC works... yes checking if gfortran static flag -static works... yes checking if gfortran supports -c -o file.o... yes checking whether the gfortran linker (/usr/bin/ld) supports shared libraries... yes checking dynamic linker characteristics... GNU/Linux ld.so checking how to hardcode library paths into programs... immediate checking for library containing strerror... none required checking for gcc... (cached) gcc checking whether we are using the GNU C compiler... (cached) yes checking whether gcc accepts -g... (cached) yes checking for gcc option to accept ISO C89... (cached) none needed checking dependency style of gcc... (cached) gcc3 checking whether we are using the GNU C++ compiler... (cached) yes checking whether g++ accepts -g... (cached) yes checking dependency style of g++... (cached) gcc3 checking for a BSD-compatible install... /usr/bin/install -c checking whether make sets $(MAKE)... (cached) yes checking for stdlib.h... (cached) yes checking for unistd.h... (cached) yes checking for getpagesize... yes checking for working mmap... yes checking locale.h usability... yes checking locale.h presence... yes checking for locale.h... yes checking for LC_MESSAGES... yes checking libintl.h usability... yes checking libintl.h presence... yes checking for libintl.h... yes checking for ngettext in libc... yes checking for dgettext in libc... yes checking for bind_textdomain_codeset... yes checking for msgfmt... /usr/bin/msgfmt checking for dcgettext... yes checking if msgfmt accepts -c... yes checking for gmsgfmt... /usr/bin/msgfmt checking for xgettext... /usr/bin/xgettext checking for pkg-config... /usr/bin/pkg-config checking pkg-config is at least version 0.9.0... yes checking for ENCHANT... yes checking for GUCHARMAP... no configure: error: Gucharmap library not found or too old. Use --disable-gucharmap to build without gucharmap plugin. I dont want to disable the gucharmap. I know i should install the newer gucharmap package.what other packages i should install?By the way ,can you tell me the function of these packages? should i pay attention to the result like this: checking for g77... no? If i install the software from source code,how can i uninstall it?

3 2

howto use kvm-amd on centos 5.1
by Jerry Geis 18 May '08

18 May '08

Is there a way to use kvm-amd on centos 5.1? I dont want to mess with XEN. I want the hardware virtualization that is on my AMD chip. I played with putting 2.6.24 and centos 5.1 on my AMD laptop, got kvm-amd and that works. However I want to put this on my desktop that is running 2.6.18-53.1.14.el5. Is there a way or do I just wave to use 2.6.24 or 25. Thanks, Jerry

4 5

Re: [CentOS] Re: [CentOS-announce] Impact of the Debian OpenSSL vulnerability
by Les Bell 18 May '08

18 May '08

Ralph Angenendt <ra+centos(a)br-online.de> wrote: >> I don't think the OpenSSH devels really do care about that - there is no discussion whatsoever on the secureshell list or on the devel list. No idea about our upstream, but I don't think so either. << Correct: all that needs to be said was said years ago, by Dr. Robert E. Coveyou, of Oak Ridge National Laboratory (now NIST): "The generation of random numbers is to important to be left to chance". Best, --- Les Bell, RHCE, CISSP [http://www.lesbell.com.au] Tel: +61 2 9451 1144 FreeWorldDialup: 800909

3 2

CentOS-DS
by Jason Ross 18 May '08

18 May '08

Hey all, I am looking at deploying a directory server in a small network. Currently looking at Fedora-ds and I noticed that CentOS is currently working on one. Does anyone know if the CentOS-DS is working well at this point? I noticed a how to is up on the wiki and was wondering if maybe it was preferable to Fedora-ds at this point. Thanks, Jason Ross

6 8

Fedora IRC
by James Bunnell 18 May '08

18 May '08

There is a IRC channel in the Freenode network for #fedora-newmexico users, if interested.

1 0

OOM condition with file-4.17-9.0.1.el5
by John 17 May '08

17 May '08

Hello all, We just encountered several serious Out of Memory Problems caused by the file 4.17-9.0.1.EL5 utility on our mail Gateway. CentOS 5.1 kept it self alive by killing it parent process Amavisd-new. Manually restarting Amavisd-new and flushing the mail queue caused same problem. Disabling file for the moment, caused Amavisd-new to fail, and also defer all mail. My quick and dirty solution was the download the Fedora Core 9's file.4.23-5.src.rpm. and rebuild it on CentOS 5 After upgrading file, restarting Amavisd-new and flushing the Postfix queue, all mail was delivered without problems. Because our mail system went down, it didn't have the time to trace the message causing the problem. But I want to share here that the Redhat / CentOS EL5 file utility has problems and provide a quick workaround for the problem. Regards, John The Netherlands

6 8

Centos Freezing
by Robert Spangler 17 May '08

17 May '08

Hello, For some reason at different times Centos will freeze and not allow me to do anything. This doesn't happen while I'm working on the system but after I have locked my session and then return. It could goes days without a lockup and then the next time I try to log in it'll be frozen. I would like to know if anyone else has seen this or knows of a fix or where I could start to look to find out if there is a process or something causing this. I normally have the same programs running so I don't think it could be caused by me starting and then leaving something new running. Thanks for your help. -- Regards Robert Smile... it increases your face value! Linux User #296285 http://counter.li.org

5 8

ext3 errors
by Les Mikesell 17 May '08

17 May '08

I recently set up a new system to run backuppc on centOS 5 with the archive stored on a raid1 of 750 gig SATA drives created with 3 members with one specified as "missing". Once a week I add the 3rd partition, let it sync, then remove it. I've had a similar system working for a long time using a firewire drive as the 3rd member, so I don't think the raid setup is the cause of the problem. I may have had problems with the drive power connectors initially but I think that is fixed now and I can't see any hardware errors being logged (the system/log files are on different drives). About once a week, I get an error like this, and the partition switches to read-only. --- Feb 24 04:48:20 linbackup1 kernel: EXT3-fs error (device md3): htree_dirblock_to_tree: bad entry in directory #869973: directory entry across bloc ks - offset=0, inode=3915132787, rec_len=42464, name_len=11 Feb 24 04:48:20 linbackup1 kernel: Aborting journal on device md3. Feb 24 04:48:20 linbackup1 kernel: ext3_abort called. Feb 24 04:48:20 linbackup1 kernel: EXT3-fs error (device md3): ext3_journal_start_sb: Detected aborted journal Feb 24 04:48:20 linbackup1 kernel: Remounting filesystem read-only Feb 24 04:48:33 linbackup1 kernel: EXT3-fs error (device md3): htree_dirblock_to_tree: bad entry in directory #4212181: rec_len % 4 != 0 - offse t=0, inode=4054525677, rec_len=1183, name_len=121 ---- 'fsck -y' seems to fix it up, but it keeps happening. Is this likely to be leftover cruft from the hardware issues or are there problems in ext3/raid1/sata drivers? The way backuppc stores data with millions of hardlinks in the archive it isn't really practical to copy it off, reformat, and start over. -- Les Mikesell lesmikesell(a)gmail.com

4 10

xen kernel showing only one processor on SMP machine
by gen2 17 May '08

17 May '08

Hi there, I'm running an ibm xseries 345/dual Xeon 2.66GHz, 2.6.18-53.1.14.el5xen #1 SMP, and cat /proc/cpuinfo shows me only one processor. Apparently something strange happening with ACPI. What am I doing wrong? Thank you! Selected bits from dmesg: ------------------------- Using ACPI (MADT) for SMP configuration information SMP alternatives: switching to UP code ACPI: Core revision 20060707 CPU 1 irqstacks, hard=c0728000 soft=c0708000 CPU 2 irqstacks, hard=c0729000 soft=c0709000 CPU 3 irqstacks, hard=c072a000 soft=c070a000 ENABLING IO-APIC IRQs SMP alternatives: switching to SMP code Initializing CPU#1 Initializing CPU#2 Brought up 4 CPUs ACPI Exception (acpi_processor-0681): AE_NOT_FOUND, Processor Device is not present [20060707] ACPI: Getting cpuindex for acpiid 0x3 ACPI Exception (acpi_processor-0681): AE_NOT_FOUND, Processor Device is not present [20060707] ACPI: Getting cpuindex for acpiid 0x1

1 0

RE: [CentOS] clustered mail server?
by Rajeev R. Veedu 17 May '08

17 May '08

-----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Christopher Chan Sent: Saturday, May 17, 2008 2:02 PM To: centos(a)centos.org Subject: Re: [CentOS] clustered mail server? > Thank you for your input. I can't justify exchange (and don't want MS) > for 10 users. I do want IMAP though, and the calendar & address book > would be nice. This IMO has nothing todo with CentOS though, but at the > same time it shouldn't be limited to which Linux distro I'm using. As > you have said I may need to look at file system clustering instead, but > have never attempted it, so I don't know where to begin even. I know a > lot of MTA's can support a central user DB, but that won't sync the > emails. And this won't be a commercial installation either, it's for a > for a project in a rural community about 700km's from me, so it's more a > matter of if 1 server dies / crashes / packes up, and I can only get to > it 5 days later, the mail server still works :) > > If you are looking exchange like functionality use POSTPATH. It comes with almost all features in exchange except the webmail. We are using it for the last 5 months, and look good so far. It can do load balance and clustering. You can download a 12 user version form www.postpath.com Thanks Rajeev _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

kernel-2.6.9-67.0.15.plus.c4.i586.rpm
by Barry Brimer 17 May '08

17 May '08

Are there plans to release kernel-2.6.9-67.0.15.plus.c4.i586.rpm ?? Thanks, Barry

3 3

CentOS-announce Digest, Vol 39, Issue 8
by centos-announce-request＠centos.org 17 May '08

17 May '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:0270 Important CentOS 3 ia64 libvorbis - security update (Pasi Pirhonen) 2. CESA-2008:0270 Important CentOS 3 s390(x) libvorbis - security update (Pasi Pirhonen) 3. CESA-2008:0270 Important CentOS 4 ia64 libvorbis - security update (Pasi Pirhonen) 4. CESA-2008:0270 Important CentOS 4 s390(x) libvorbis - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Fri, 16 May 2008 19:42:11 +0300 From: Pasi Pirhonen <upi(a)centos.fi> Subject: [CentOS-announce] CESA-2008:0270 Important CentOS 3 ia64 libvorbis - security update To: centos-announce(a)centos.org Message-ID: <20080516164211.GJ2456(a)centos.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2008:0270 https://rhn.redhat.com/errata/RHSA-2008-0270.html The following updated files have been uploaded and are currently syncing to the mirrors: ia64: updates/ia64/RPMS/libvorbis-1.0-10.el3.ia64.rpm updates/ia64/RPMS/libvorbis-devel-1.0-10.el3.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

samba & samba-common installed then erased, but by whom?
by Johnny Tan 17 May '08

17 May '08

I saw this in Logwatch today for one of my servers: --------------------- yum Begin ------------------------ Packages Installed: samba-common.i386 3.0.23c-2.el5.2.0.2 samba.i386 3.0.23c-2.el5.2.0.2 Packages Erased: samba-common samba ---------------------- yum End ------------------------- No one, including myself, has even logged into this box in the past few days (verified by asking the only other two people who have access and also looking at the last & secure logs). And neither /var/log/yum.log or /var/log/rpmpkgs shows samba at all being installed/erased/present. I ran both chkrootkit and rkhunter, and both turned up clean. Since this box is behind a firewall with only a few IPs given access to it, I'm thinking that it's not been rooted, but I can't seem to find any other explanation for this. The only thing that runs on this server is httpd and jetty. Everything else is done manually including yum updates. And nothing that runs on this machine would ever need samba. Has anyone ever encountered something like this? johnn

4 7

has something happened to grep
by Jerry Geis 17 May '08

17 May '08

Hi all, when I do a "grep JERRY *.h" nothing is returned which is what I expect. This is in my source directory... when I do a "grep JERRY *" every file is returned an a line printed even though there is no JERRY on the line. Then if I do a "grep JERRY *.c" just the 4 lines that have JERRY are returned. This is what is prints for "grep JERRY *" src# grep JERRY * | more grep: JERRY: No such file or directory access_manager_help.htm:<FONT COLOR="#CCCCCC"> </FONT> so why is is skipping JERRY as the search item? The name JERRY is not the problem I can do this with any name and the same happens when searching all file "*". Thanks, Jerry

6 7

symbolic linking
by Frank Cox 16 May '08

16 May '08

I have a number directories under /opt on computer jack. I want some (not all) of them to appear in /opt on computer jill. I have the /opt directory on jack mounted on jill under /mnt/jack If I go into the /opt directory on jill and do this: ln -s /mnt/jack/opt/files . I get /opt/files/files on jill. What I want is /opt/files and I can't see what I'm doing wrong. -- MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com

1 0

phenom anyone B3 stepping of course
by Jerry Geis 16 May '08

16 May '08

I was considering getting a Phenom 2.4G and B3 stepping (cheap $219). I was wondering if anyone has been using it with centos 5.1 x86_64 and found them stable now. Jerry

1 0

Anyone configured two CentOS5 with shared storage for Oracle 10 R2 HA/failover?
by Christopher Thorjussen 16 May '08

16 May '08

I've gotten the task to setup a two server/node system for Oracle 10R2 with HA/failover. I've got a SAN connected to both servers. Any hints and tips? I've found the Cluster Suite Overview/Administration docs at http://www.centos.org/docs/5/. /Christopher

2 2

shell script strangeness...
by Craig White 16 May '08

16 May '08

On my CentOS 4.6 server, this works... if [ -z `grep entry_chooser.js /var/log/httpd/access_log` ] On my CentOS 5.1 server, this gives me the following error... ./test_file.scr: line 3: [: too many arguments Can anyone explain why the difference and suggest something that makes both cases happy? Thanks Craig

3 6

RHEL5 Linux with default Cluster is not Installed
by Balaji 16 May '08

16 May '08

Dear All, I have installed RHEL5 Linux Installation and I have selected all packages but the cluster packages are not displayed at package selection Menu After Installation Completed Successfully i have verified cluster is installed default and I findout the cluster packages are not installed default linux installation Can any one help me how to install the cluster packages with default linux installation Otherwise send me Cluster Installation Procedure after linux installation is over Regards -S.Balaji

2 1

ntpd date sync before service startup
by David Hláčik 16 May '08

16 May '08

Hello, in system-config-date i have checkbox synchronize date before service startup. Which config switch,file does it affect? I want to turn it on on my CentOS machine without xauth , just editing config files , i was hoping it could be in /etc/sysconfig/ntpd but no. Thanks in advance! D.

4 4

CentOS-announce Digest, Vol 39, Issue 7
by centos-announce-request＠centos.org 16 May '08

16 May '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:0270 Important CentOS 4 x86_64 libvorbis Update (Johnny Hughes) 2. CESA-2008:0270 Important CentOS 4 i386 libvorbis Update (Johnny Hughes) 3. Impact of the Debian OpenSSL vulnerability (Daniel de Kok) 4. CESA-2008:0194 Important CentOS 5 x86_64 xen Update (Karanbir Singh) 5. CESA-2008:0194 Important CentOS 5 i386 xen Update (Karanbir Singh) 6. CESA-2008:0271-01: Important CentOS 2 i386 libvorbis security update (John Newbigin) ---------------------------------------------------------------------- Message: 1 Date: Thu, 15 May 2008 09:10:59 -0500 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2008:0270 Important CentOS 4 x86_64 libvorbis Update To: CentOS-Announce <centos-announce(a)centos.org> Message-ID: <482C4473.4080808(a)centos.org> Content-Type: text/plain; charset="iso-8859-1" CentOS Errata and Security Advisory 2008:0270 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0270.html The following updated files have been uploaded and are currently syncing to the mirrors: x86_64: libvorbis-1.1.0-3.el4_6.1.i386.rpm libvorbis-1.1.0-3.el4_6.1.x86_64.rpm libvorbis-devel-1.1.0-3.el4_6.1.x86_64.rpm src: libvorbis-1.1.0-3.el4_6.1.src.rpm

1 0

[OT]: Passing password for a command on the fly
by Mário Gamito 16 May '08

16 May '08

Hi, First things first, sorry for the off-topic, but I've already burned my eyes Googling and couldn't find the answer to what I need and I remembered asking here, because I'm a long time CentOS and its mailing list user. Again, my apologies. I have this command to create an FTP account: # pure-pw useradd mario -u 502 -g 502 -n 1000 -N 200 -d /home/pages/mario This command asks for the password twice. I need to pass the password (preferably without expect) so I can create the account without prompting. If i run: # echo secret | pure-pw useradd mario -u 502 -g 502 -n 1000 -N 200 -d /home/pages/gamito It reads the first insertion, but asks for the second. I knew how to do this a long time ago, but I've forgotten and couldn't find anything useful on Google. Any help would be appreciated. Warm Regards, Mário Gamito

3 3

missing from Centos51 src tree: ".../drivers/infiniband/hw/amso1100/Makefile"
by snowcrash+centos 16 May '08

16 May '08

i'm attempting to rebuild centos51 kernel-xen. (fwiw, because pciback has NOT been compiled into the kernel, http://bugs.centos.org/view.php?id=2767) after, yum install kernel-devel kernel-xen-devel and usual, ln -s /usr/src/kernels/`uname -r`-`uname -m` /usr/src/linux cd /usr/src/linux cp /boot/config-`uname -r` ./.config make oldconfig make menuconfig ... next, make rpm fails at, scripts/kconfig/conf -s arch/x86_64/Kconfig make clean scripts/Makefile.clean:17: /usr/src/kernels/2.6.18-53.1.19.el5-xen-x86_64/drivers/infiniband/hw/amso1100/Makefile: No such file or directory make[5]: *** No rule to make target `/usr/src/kernels/2.6.18-53.1.19.el5-xen-x86_64/drivers/infiniband/hw/amso1100/Makefile'. Stop. make[4]: *** [drivers/infiniband/hw/amso1100] Error 2 make[3]: *** [drivers/infiniband] Error 2 make[2]: *** [_clean_drivers] Error 2 make[1]: *** [rpm] Error 2 make: *** [rpm] Error 2 checking, ls -al \ /usr/src/kernels/2.6.18-53.1.19.el5-xen-x86_64/drivers/infiniband/hw/amso1100/Makefile \ /usr/src/kernels/2.6.18-53.1.19.el5-xen-x86_64/drivers/infiniband/hw/*/Makefile in fact *is* missing, /bin/ls: /usr/src/kernels/2.6.18-53.1.19.el5-xen-x86_64/drivers/infiniband/hw/amso1100/Makefile: No such file or directory -rw-r--r-- 1 root root 380 May 7 06:12 /usr/src/kernels/2.6.18-53.1.19.el5-xen-x86_64/drivers/infiniband/hw/cxgb3/Makefile -rw-r--r-- 1 root root 545 May 7 06:12 /usr/src/kernels/2.6.18-53.1.19.el5-xen-x86_64/drivers/infiniband/hw/ehca/Makefile -rw-r--r-- 1 root root 782 May 7 06:12 /usr/src/kernels/2.6.18-53.1.19.el5-xen-x86_64/drivers/infiniband/hw/ipath/Makefile -rw-r--r-- 1 root root 310 May 7 06:12 /usr/src/kernels/2.6.18-53.1.19.el5-xen-x86_64/drivers/infiniband/hw/mthca/Makefile installing & checking original/full SRPM, cd /usr/src/redhat/SRPMS wget http://mirror.centos.org/centos/5.1/updates/SRPMS/kernel-2.6.18-53.1.19.el5… rpm -ivh kernel-2.6.18-53.1.19.el5.src.rpm it's also missing there, ls -al /usr/src/kernels/2.6.18-53.1.19.el5-x86_64/drivers/infiniband/hw/amso1100/Makefile /bin/ls: /usr/src/kernels/2.6.18-53.1.19.el5-x86_64/drivers/infiniband/hw/amso1100/Makefile: No such file or directory where can I get the 'Makefile'? thanks.

3 3

OT DNS Question
by Clint Dilks 16 May '08

16 May '08

Hi Everyone, I am currently reviewing the DNS records for the organization I work for and have one area I would like other peoples thoughts on. Would there ever be a situation where you need to have multiple A records pointing to the same IP Address? Currently we have a small number of cases where one IP Address has multiple A Records. This seems like a bad idea to me and I would replace these records with cnames. But I am meeting resistance to this. As far as I can think right now if you have one correctly configured A record with a matching reverse entry and then use cnames there shouldn't be any cases where you must add a second A record. Or am I missing something ?

3 4

php-pear - required files - which rpm
by Tom Brown 16 May '08

16 May '08

Hi I am tying to install a php based application but the error i recieve is Failed opening required 'HTML/Template/IT.php' This is something to do with pear from what i can tell but i do have php-pear installed. The file IT.php is not on my system but does anyone know what rpm this would come from? thanks

2 1

Replacing Qpopper with Dovecot
by Gerald Braun 15 May '08

15 May '08

I currently have a Centos server with Sendmail and Qpopper supporting about 50 mail users. I am planning to replace Qpopper with Dovecot to allow some users to have IMAP access to their mail (others will still use POP3.) Is there anything special to be aware of in setting up this migration? Thanks for your comments. Gerald

2 1

Directory Compare
by Joseph L. Casale 15 May '08

15 May '08

I need to verify some directories of backed up data versus restored data. What would you recommend as the type of comparison to do, and which tool would give the easiest/most usable output? Thanks! jlc

4 5

Somewhat OT:
by Sergio Belkin 15 May '08

15 May '08

Hi, I'm looking for a monitoring system that support snmp v3. I want to monitorize linux servers and network switches. Currently, I am trying to use zabbix, but sadly, it lack at present features that I need. For example, I want to get reporting screens with data and graphs from network switches, I'd like to configure one only port of a given switch and that is used as templates for the rest of switch ports and the rest of the switches. I'd like to use some open source software that meet that features, and I want to avoid Nagios :) Could you recommend me someone? Thanks in advance -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin -

8 13

Tape operation
by Fajar Priyanto 15 May '08

15 May '08

Hi all, My only encounter with tape-backup was with Windows 2000. With it, when we backup things using windows' backup tool, it will create a 'catalog', then the catalog contains all the backup operations we do based on date. So, with this we can "append" many backups into one tape. Next time we want to restore a backup, we can choose what date available in that particular tape. I have zero experience with tape on Linux. I've been googling around and it seems that the backup operation is very different. For example: - The tape is 400GB (LTO-3) - The data is only 10GB Some of the articles I read imply that 1 tape contains 1 backup-file only. CMIIW. This is certainly not very efficient. The commands used are: mt, either tar, cpio. My question is: 1. How do I use that one tape of 400GB to store 39 archives of backup into it in Linux? 2. Is tape backup seen by Linux just like any other filesystem? Can we mount it and 'ls -l' it? 3. When to rewind, forward, why? 4. Wel will only backup data/files (not the entire filesystem), is it enough to use the software provided by the tape vendor, or do I need another software? Or just the mt command will do it? Any URL, scripts, insight are very welcome. Thank you very much. -- Fajar Priyanto | Reg'd Linux User #327841 | Linux tutorial http://linux2.arinet.org 11:35:28 up 4:39, 2.6.22-14-generic GNU/Linux Let's use OpenOffice. http://www.openoffice.org The real challenge of teaching is getting your students motivated to learn.

9 10

Re: [CentOS] A couple of CentOS 5.1 issues
by Ross S. W. Walker 15 May '08

15 May '08

Probably already answered, but kermit isn't open source. You can get it from Columbia University's kermit site though. -Ross ----- Original Message ----- From: centos-bounces(a)centos.org <centos-bounces(a)centos.org> To: CentOS mailing list <centos(a)centos.org> Sent: Wed May 14 10:58:43 2008 Subject: Re: [CentOS] A couple of CentOS 5.1 issues On May 14, 2008, at 9:50, Steve Huff wrote: > This may well be an upstream issue; I have recently begun to > encounter the same problem on a RHEL 5.1 workstation, using Synergy > and nVidia binary packages from rpmforge (synergy-1.3.1-2.el5.rf, > nvidia-x11-drv-1.0.9755-1.nodist.rf). > > I first started seeing this issue last week, after a reboot; > unfortunately I'm not sure off the top of my head which packages I > had recently updated. Before last week the desired behavior (the > display waking from sleep upon mouse movement) was present. It's encouraging to hear that this used to work in 5.X. I am just upgrading to 5.1 and this has always been "broken" for me, so I can't tell if it was a recent update. Can you post (or email me offline) the relevant output of "rpm -qa --last"? We may be able to figure out what update caused this issue. In the mean time, anyone have any info on Kermit for CentOS 5? We have some Kermit scripts sent to us by one of our vendors, so we can't just easily migrate to another serial communications tool. Thanks, Alfred _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos ______________________________________________________________________ This e-mail, and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution or copying of this e-mail, and any attachments thereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify the sender and permanently delete the original and any copy or printout thereof.

2 1

OpenSSL/SSH Bug on Debian - Compromised key pairs
by Clint Dilks 15 May '08

15 May '08

Hi People, I know this may seem off topic, but I thought for those of us who might have Debian users generating key pairs that they put on CentOS systems people should be aware that everybody who generated a public/private keypair or an SSL cert request on Debian or Ubuntu from 2006 on is vulnerable http://it.slashdot.org/it/08/05/13/1533212.shtml

4 5

Using Nagios in CentOS (It was Re: [CentOS] Somewhat OT: (Nagios))
by Sergio Belkin 15 May '08

15 May '08

2008/5/14 Thomas Harold <tgh(a)tgharold.com>: > Sergio Belkin wrote: >> >> 2008/5/13 <jleaver+centos(a)reachone.com>: >> >> OK, you won :) I'm going to test nagios. I am using centos 5.1 >> x86_64. Do I lose much if I use rpm from rpmforge (version 2.9)? >> > > We're running version 2.11 at the office (on CentOS 5.1 x86_64). I've > looked at some of the things in 3.0, but there's nothing there that I needed > yet. > > Hopefully you have some way to track changes in /etc/nagios (FSVS is what we > use), because it will make your life much easier to have an audit trail. > > We created sub-folders under /etc/nagios to hold the various types of > entities. For example, we have: > > /etc/nagios/commands > /etc/nagios/contacts > /etc/nagios/contactgroups > /etc/nagios/hosts-switches > /etc/nagios/hosts-dmz > /etc/nagios/hosts-servers > /etc/nagios/hosts-lan > /etc/nagios/templates-hosts > /etc/nagios/templates-services > > We then broke individual elements out of the default massive configuration > folder into individual .cfg files. For example, we chose to create > individual files for each contact rather the putting them all in a single > file. So far it works well, it's a lot easier to get a feel for what users > have been defined, what hosts are defined, what the templates are. Because > when I look in templates-services, I see from the directory listing that I > have service templates named X, Y and Z (without having to open up the file > to look). > > We currently put service checks for individual hosts in the same > configuration file as the host. So you will have the following definitions > in a typical host file (until you get into templating): > > define host{ > define hostextinfo{ > define service{ > define service{ > ... > > Any plugins that we wrote ourself, we put under a separate folder. Which > keeps them separate from > > /usr/local/lib64/nagios-plugins/ > > Basically, start small, track your changes, and plan on refactoring it in > week #2 after you start monitoring about a dozen hosts. Stay away from > advanced things like escalation, monitoring things like disk space on remote > servers, or the like until you get the basics working. > > Oh, and SELinux will probably get in your way. So you'll need to play with > audit2allow to create supplemental policy to give Nagios additional > permissions. (Which may have been due to PEBKAC issues on my end - I plan > on going back and looking at labeling and figuring out what I mislabeled.) > > I think that's the majority of the issues that we dealt with in the past 2 > weeks. We're now in fine-tuning mode and getting ready to start monitoring > remote services next week. > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos > Really, thanks all for your experiences. Bear in mind that what I want to do is (mainly) monitor network switches, and get data and charts of them. I hope I can do that. Keep in touch -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin -

1 1

Re: [CentOS] Best Motherboard
by techlists＠comcast.net 15 May '08

15 May '08

What about SuperMicro? I've never used one personally, but my employer had some servers built with SuperMicro and those things reliably chugged along for years, never had any problems. Paul -------------- Original message ---------------------- From: John Plemons <john(a)mavin.com> > I would look at Tyan, Soyo, and Intel for middle of the road > performance, but more over for dependability... I have also had very > good luck with MSI, Asus... > > john plemons > > > > > > > > Ryan Nichols wrote: > > Really? We bought that EXACT motherboard.. 10 to be exact and we've > > had 9 fail and the 10th is on its way to major failure.. the odd thing > > is that 10th one was the first one purchased and that was 6 months ago. > > > > On Thu, May 15, 2008 at 7:24 AM, Juan C. Valido > > <jvalidolnx(a)juanyjosefina.com <mailto:jvalidolnx@juanyjosefina.com>> > > wrote: > > > > Personally, I like Gigabyte motherboards a lot, the GA-P35-DS3L I use > > with Core 2 Duo (Quad) and DDR2. I though I was going to do better > > with > > the Intel DP35DP and guess what, I like the the Gigabyte Better > > (personally). > > > > On Thu, 2008-05-15 at 06:43 -0500, Ryan Nichols wrote: > > > To all.. > > > > > > I was using a Gigabyte motherboard, and the board seems like a bad > > > choice. What do you guys recommend for a decent server board that > > > would use a Dual Core processor and DDR2 ram. I dont want to > > replace > > > the CPU and Mem i already have, just find a decent board that > > > supportsthe existing.. > > > > > > Thanks, > > > Ryan Nichols > > > > > > _______________________________________________ > > > CentOS mailing list > > > CentOS(a)centos.org <mailto:CentOS@centos.org> > > > http://lists.centos.org/mailman/listinfo/centos > > > > _______________________________________________ > > CentOS mailing list > > CentOS(a)centos.org <mailto:CentOS@centos.org> > > http://lists.centos.org/mailman/listinfo/centos > > > > > > ------------------------------------------------------------------------ > > > > _______________________________________________ > > CentOS mailing list > > CentOS(a)centos.org > > http://lists.centos.org/mailman/listinfo/centos > > > > ------------------------------------------------------------------------ > > > > > > No virus found in this incoming message. > > Checked by AVG. > > Version: 8.0.100 / Virus Database: 269.23.16/1433 - Release Date: 5/14/2008 > 4:44 PM > >

1 0

eth1 changed to __tmp78668633 in recent kernels
by henry ritzlmayr 15 May '08

15 May '08

Hi list, kernel-xen-2.6.18-53.1.14.el5 and kernel-xen-2.6.18-53.1.19.el5 do not detect/initialize/whatever my eth1 network card any more. With kernel-xen-2.6.18-53.1.13.el5 everything is working as expected. With the two recent kernels I only get an Interface named __tmp786686833 which is not added to xenbr... lspci -v to the adapter in question says 02:00.0 Ethernet controller: Intel Corporation 82572EI Gigabit Ethernet Controller (Copper) (rev 06) Subsystem: Intel Corporation PRO/1000 PT Desktop Adapter Flags: bus master, fast devsel, latency 0, IRQ 17 Memory at febe0000 (32-bit, non-prefetchable) [size=128K] Memory at febc0000 (32-bit, non-prefetchable) [size=128K] I/O ports at ec00 [size=32] Expansion ROM at feba0000 [disabled] [size=128K] Capabilities: [c8] Power Management version 2 Capabilities: [d0] Message Signalled Interrupts: 64bit+ Queue=0/0 Enable- Capabilities: [e0] Express Endpoint IRQ 0 ip link says 2: __tmp786686833: <BROADCAST,MULTICAST> mtu 1500 qdisc noop qlen 1000 link/ether 00:1b:21:0e:a9:3b brd ff:ff:ff:ff:ff:ff In modprobe.conf I have alias eth1 e1000 for the adapter in question. The module itself is loaded. Any Ideas how to fix this? cheers Henry

1 1

CentOS-announce Digest, Vol 39, Issue 6
by centos-announce-request＠centos.org 15 May '08

15 May '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:0270 Important CentOS 3 i386 libvorbis - security update (Tru Huynh) 2. CESA-2008:0270 Important CentOS 3 x86_64 libvorbis - security update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Wed, 14 May 2008 14:52:45 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2008:0270 Important CentOS 3 i386 libvorbis - security update To: centos-announce(a)centos.org Message-ID: <20080514125245.GA26796(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2008:0270 libvorbis security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2008-0270.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/libvorbis-1.0-10.el3.i386.rpm updates/i386/RPMS/libvorbis-devel-1.0-10.el3.i386.rpm source: updates/SRPMS/libvorbis-1.0-10.el3.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update libvorbis\* Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

A couple of CentOS 5.1 issues
by Alfred von Campe 15 May '08

15 May '08

I've finally made the switch to CentOS 5.1 (I had been running 4.6). So far, so good, but I do have a few issues. First, I can not find kermit (or ckermit) in any of the repos (base, extras, centosplus, rpmforge). On my 4.6 systems, /usr/bin/kermit was provided by the package ckermit in the base repo. That package appears to be no longer available. Any ideas where I could find a suitable replacement? Second (and this is probably OT), I use the binary nVidia driver and the keyboard and mouse sharing utility Synergy (http:// synergy2.sourceforge.net, a fantastic utility without which I would be so much less productive). Since upgrading to CentOS 5, if the nVidia card goes into powersave mode, it can not be woken up by moving the cursor from the Synergy server to the Synergy client display (in this case, the CentOS 5.1 systems); you have to hit a key on the keyboard that's physically attached to the CentOS 5 system to wake it up. Is there a way to have the display wake up when the cursor is moved into the client display? Or at least disable this "deep sleep" mode on the nVidia cards? I have not changed the hardware or the version of the nVidia driver when upgrading from CentOS 4.6 to CentOS 5.1, and I did not have this issue before the upgrade. Alfred

4 7

Re: [CentOS] Somewhat OT:
by Ross S. W. Walker 15 May '08

15 May '08

Sorry for the top post. Nagios can start very simple, but has the ability to end up very complex. It's configs take a modular approach, you have monitors, monitors belong in groups, groups have operators/administrators, etc. My big problem with nagios is when I used it last it didn't keep monitor history which makes trending impossible. I eventually went with ipmonitor from solarwinds which has a nice web interface, all the reporting you may want and works pretty much like nagios does, but through a web interface. Very reasonable pricing too. Of course I believe it only runs on windows, but it runs very nicely as a VM guest. -Ross ----- Original Message ----- From: centos-bounces(a)centos.org <centos-bounces(a)centos.org> To: CentOS mailing list <centos(a)centos.org> Sent: Tue May 13 07:34:50 2008 Subject: Re: [CentOS] Somewhat OT: 2008/5/13 Kai Schaetzl <maillists(a)conactive.com>: > Sergio Belkin wrote on Mon, 12 May 2008 23:07:20 -0300: > > > [CentOS] Somewhat OT: > > even then please write a senseful subject next time! > > Kai > > -- > Kai Schätzl, Berlin, Germany > Get your web at Conactive Internet Services: http://www.conactive.com > Yes, you're roght Kai, I don't know how I could write such a stupid subject, but it was too late yersterday, and I was writing with a little part of my brain working :) Even so, thanks for your comments, I'd like more experiences about monitoring systems. Again of topic, I want to avoid Nagios because it looks like over complex but if someone has an actual experience demostrating the opposite, I'd be glad to hear. Thanks in advance -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos ______________________________________________________________________ This e-mail, and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution or copying of this e-mail, and any attachments thereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify the sender and permanently delete the original and any copy or printout thereof.

4 3

Max thin client sessions/gdm limit?
by Ryan Faussett 15 May '08

15 May '08

Greetings, I've been subscribed to this list for some time and I'd like to start off by thanking everyone who helps out on it. This is my first post to it, so please be gentle :-) I have several offices set up with RedHat and CentOS terminal servers. We are using CentOS 4.6 and RedHat 4.6 on them, GDM for the display manager, and PXES (http://sourceforge.net/projects/pxes/) for the boot image. Each terminal server is also the font server, dhcp server, tftp server, dns server, and provides a ldap slave from our master ldap server (at our corporate office) for user accounts and authentication. Everything has been working quite well for some time. However now I seem to have hit a 50 thin client/gdm session limit. I've tested this several times by powering off all of our thin clients and restarting the terminal server, then powering up each thin client one at a time. They all work fine up to the 51st thin client. When I power up the 51st thin client it grabs an ip address, fetches its boot image, proceeds to boot, X starts (gray mesh screen, large X cursor -- gray screen of death?) and then it just sits there. The GDM login/greeter is never presented. Looking at the log file on the terminal server shows: gdm_child_action: Aborting display Running gdm in debug mode gives me this (sorry for the long log dump): May 14 03:08:21 lts-nimbus gdm[4066]: gdm_xdmcp_decode: Received opcode QUERY from client 10.2.1.200 May 14 03:08:21 lts-nimbus gdm[4066]: gdm_xdmcp_handle_query: Opcode 2 from 10.2.1.200 May 14 03:08:21 lts-nimbus gdm[4066]: gdm_xdmcp_send_willing: Sending WILLING to 10.2.1.200 May 14 03:08:24 lts-nimbus gdm[4066]: gdm_xdmcp_decode: Received opcode REQUEST from client 10.2.1.200 May 14 03:08:24 lts-nimbus gdm[4066]: gdm_xdmcp_handle_request: Got REQUEST from 10.2.1.200 May 14 03:08:24 lts-nimbus gdm[4066]: gdm_xdmcp_handle_request: xdmcp_pending=0, MaxPending=4, xdmcp_sessions=50, MaxSessions=80, ManufacturerID= May 14 03:08:24 lts-nimbus gdm[4066]: gdm_xdmcp_display_dispose_check (200.netbiz.com:0) May 14 03:08:24 lts-nimbus gdm[4066]: gdm_auth_secure_display: Setting up access for 200.netbiz.com:0 May 14 03:08:24 lts-nimbus gdm[4066]: gdm_auth_secure_display: Setting up access May 14 03:08:24 lts-nimbus gdm[4066]: gdm_auth_secure_display: Setting up access for 200.netbiz.com:0 - 1 entries May 14 03:08:24 lts-nimbus gdm[4066]: gdm_xdmcp_display_alloc: display=200.netbiz.com:0, session id=1696684507, xdmcp_pending=1 May 14 03:08:24 lts-nimbus gdm[4066]: gdm_xdmcp_send_accept: Sending ACCEPT to 10.2.1.200 with SessionID=1696684507 May 14 03:08:24 lts-nimbus gdm[4066]: gdm_xdmcp_decode: Received opcode MANAGE from client 10.2.1.200 May 14 03:08:24 lts-nimbus gdm[4066]: gdm_xdmcp_handle_manage: Got MANAGE from 10.2.1.200 May 14 03:08:24 lts-nimbus gdm[4066]: gdm_xdmcp_handle_manage: Got Display=0, SessionID=1696684507 Class=MIT-unspecified from 10.2.1.200 May 14 03:08:24 lts-nimbus gdm[4066]: gdm_xdmcp_handle_manage: Looked up 200.netbiz.com:0 May 14 03:08:24 lts-nimbus gdm[4066]: gdm_choose_indirect_lookup: Host 10.2.1.200 not found May 14 03:08:24 lts-nimbus gdm[4066]: gdm_forward_query_lookup: Host 10.2.1.200 not found May 14 03:08:24 lts-nimbus gdm[4066]: gdm_display_manage: Managing 200.netbiz.com:0 May 14 03:08:24 lts-nimbus gdm[4066]: loop check: last_start 0, last_loop 0, now: 1210759704, retry_count: 0 May 14 03:08:24 lts-nimbus gdm[4066]: Resetting counts for loop of death detection May 14 03:08:24 lts-nimbus gdm[6191]: gdm_slave_start: Starting slave process for 200.netbiz.com:0 May 14 03:08:24 lts-nimbus gdm[4066]: gdm_display_manage: Forked slave: 6191 May 14 03:08:24 lts-nimbus gdm[6191]: gdm_slave_start: Loop Thingie May 14 03:08:24 lts-nimbus gdm[6191]: gdm_slave_run: Opening display 200.netbiz.com:0 May 14 03:08:24 lts-nimbus gdm[6191]: gdm_slave_run: Sleeping 1 on a retry May 14 03:08:25 lts-nimbus gdm[6191]: gdm_slave_run: Sleeping 3 on a retry May 14 03:08:26 lts-nimbus gdm[4066]: (child 5747) gdm_slave_alrm_handler: 10.2.1.220:0 got ARLM signal, to ping display May 14 03:08:26 lts-nimbus gdm[4066]: gdm_xdmcp_decode: Received opcode MANAGE from client 10.2.1.200 May 14 03:08:26 lts-nimbus gdm[4066]: gdm_xdmcp_handle_manage: Got MANAGE from 10.2.1.200 May 14 03:08:26 lts-nimbus gdm[4066]: gdm_xdmcp_handle_manage: Got Display=0, SessionID=1696684507 Class=MIT-unspecified from 10.2.1.200 May 14 03:08:26 lts-nimbus gdm[4066]: gdm_xdmcp_handle_manage: Session id 1696684507 already managed May 14 03:08:28 lts-nimbus gdm[6191]: gdm_slave_run: Sleeping 5 on a retry May 14 03:08:30 lts-nimbus gdm[4066]: gdm_xdmcp_decode: Received opcode MANAGE from client 10.2.1.200 May 14 03:08:30 lts-nimbus gdm[4066]: gdm_xdmcp_handle_manage: Got MANAGE from 10.2.1.200 May 14 03:08:30 lts-nimbus gdm[4066]: gdm_xdmcp_handle_manage: Got Display=0, SessionID=1696684507 Class=MIT-unspecified from 10.2.1.200 May 14 03:08:30 lts-nimbus gdm[4066]: gdm_xdmcp_handle_manage: Session id 1696684507 already managed May 14 03:08:33 lts-nimbus gdm[6191]: gdm_slave_run: Sleeping 7 on a retry May 14 03:08:38 lts-nimbus gdm[4066]: gdm_xdmcp_decode: Received opcode MANAGE from client 10.2.1.200 May 14 03:08:38 lts-nimbus gdm[4066]: gdm_xdmcp_handle_manage: Got MANAGE from 10.2.1.200 May 14 03:08:38 lts-nimbus gdm[4066]: gdm_xdmcp_handle_manage: Got Display=0, SessionID=1696684507 Class=MIT-unspecified from 10.2.1.200 May 14 03:08:38 lts-nimbus gdm[4066]: gdm_xdmcp_handle_manage: Session id 1696684507 already managed May 14 03:08:40 lts-nimbus gdm[6191]: gdm_slave_run: Sleeping 9 on a retry May 14 03:08:49 lts-nimbus gdm[6191]: gdm_slave_run: Sleeping 11 on a retry May 14 03:08:54 lts-nimbus gdm[4066]: gdm_xdmcp_decode: Received opcode MANAGE from client 10.2.1.200 May 14 03:08:54 lts-nimbus gdm[4066]: gdm_xdmcp_handle_manage: Got MANAGE from 10.2.1.200 May 14 03:08:54 lts-nimbus gdm[4066]: gdm_xdmcp_handle_manage: Got Display=0, SessionID=1696684507 Class=MIT-unspecified from 10.2.1.200 May 14 03:08:54 lts-nimbus gdm[4066]: gdm_xdmcp_handle_manage: Session id 1696684507 already managed May 14 03:09:00 lts-nimbus gdm[6191]: gdm_slave_run: Sleeping 13 on a retry May 14 03:09:13 lts-nimbus gdm[6191]: gdm_slave_run: Sleeping 15 on a retry May 14 03:09:26 lts-nimbus gdm[4066]: gdm_xdmcp_decode: Received opcode MANAGE from client 10.2.1.200 May 14 03:09:26 lts-nimbus gdm[4066]: gdm_xdmcp_handle_manage: Got MANAGE from 10.2.1.200 May 14 03:09:26 lts-nimbus gdm[4066]: gdm_xdmcp_handle_manage: Got Display=0, SessionID=1696684507 Class=MIT-unspecified from 10.2.1.200 May 14 03:09:26 lts-nimbus gdm[4066]: gdm_xdmcp_handle_manage: Session id 1696684507 already managed May 14 03:09:28 lts-nimbus gdm[6191]: gdm_slave_run: Sleeping 17 on a retry May 14 03:09:45 lts-nimbus gdm[6191]: gdm_slave_run: Sleeping 19 on a retry May 14 03:09:58 lts-nimbus gdm[4066]: gdm_xdmcp_decode: Received opcode MANAGE from client 10.2.1.200 May 14 03:09:58 lts-nimbus gdm[4066]: gdm_xdmcp_handle_manage: Got MANAGE from 10.2.1.200 May 14 03:09:58 lts-nimbus gdm[4066]: gdm_xdmcp_handle_manage: Got Display=0, SessionID=1696684507 Class=MIT-unspecified from 10.2.1.200 May 14 03:09:58 lts-nimbus gdm[4066]: gdm_xdmcp_handle_manage: Session id 1696684507 already managed May 14 03:10:04 lts-nimbus gdm[6191]: gdm_slave_quick_exit: Will kill everything from the display May 14 03:10:04 lts-nimbus gdm[6191]: gdm_slave_quick_exit: Killed everything from the display May 14 03:10:04 lts-nimbus gdm[4066]: mainloop_sig_callback: Got signal 17 May 14 03:10:04 lts-nimbus gdm[4066]: gdm_cleanup_children: child 6191 returned 4 May 14 03:10:04 lts-nimbus gdm[4066]: gdm_child_action: Aborting display 200.netbiz.com:0 May 14 03:10:04 lts-nimbus gdm[4066]: gdm_display_unmanage: Stopping 200.netbiz.com:0 (slave pid: 0) May 14 03:10:04 lts-nimbus gdm[4066]: gdm_display_dispose: Disposing 200.netbiz.com:0 May 14 03:10:04 lts-nimbus gdm[4066]: gdm_display_unmanage: Display stopped Once this has happened even powering off a working thin client that was able to get a GDM session/login and powering up one that was not still doesn't work. However any of the ones that were working can still be powered up and get a GDM session/login. If I power down all the thin clients, restart the terminal server I can again get any of them to work up to the 51st connection. I've looked through the config files for xfs and gdm but can't find anything relating to any sort of session limit. The only thing that looked remotely close was MaxSessions under the [xdmcp] section which is already set to 100. I spent a couple of hours searching with Google but didn't really find anything other than a bug for a different version of GDM than we are using that caused it to ignore a session limit setting (which I can't seem to find where to set it anyway). I believe everything is pretty much stock distribution. We are using the gdm from rpm "gdm-2.6.0.5-7.rhel4.15". Does anyone have any ideas? I'm not sure what more info to post but I'd be glad to send anymore log info or config files. Any help/suggestions are appreciated, Ryan Faussett

3 3

Re: [CentOS] Somewhat OT:
by Ross S. W. Walker 14 May '08

14 May '08

Really? I thought Outlook does a pretty good job on references. Maybe it's the BB :-( <rant> I really need RIM to update their mailer app on the BB to allow threading and preserve references... Is that so hard RIM?! Is it? </rant> -Ross ----- Original Message ----- From: centos-bounces(a)centos.org <centos-bounces(a)centos.org> To: centos(a)centos.org <centos(a)centos.org> Sent: Wed May 14 06:48:50 2008 Subject: Re: [CentOS] Somewhat OT: Ross S. W. Walker wrote: > > Sorry for the top post. Your mailer breaking references and thus destroying threading for others is worse than top posting >:) Cheers, Ralph ______________________________________________________________________ This e-mail, and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution or copying of this e-mail, and any attachments thereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify the sender and permanently delete the original and any copy or printout thereof.

2 1

Printing: network host busy
by centos＠911networks.com 14 May '08

14 May '08

H, I have 5.1. The other day I was printing and the job crashed. I cleaned the /var/spool/cups, but I am still getting the: network 192.168.2.10 host is busy, will retry in 30sec It's a dlink print server, that has worked very well for the last 3 years. I have restarted but the print server and the printer. Any suggestion? -- Thanks

2 1

NFS subdirectory on client is out of sync
by Theo Band [GreenPeak] 14 May '08

14 May '08

Today a user asked me whether a file on one host can be different on another host. I was busy composing an answer to tell that the /home space on all clients are mounted using NFS from the file server. Any host will therefor see the same file. The user pointed me to his file and I copied this file from the client and compared this with the file on the file server. To my surprise it turned out that he was right, the files were different. I created a new file in this directory and it was not created on the file server. I renamed the file, and that was only seen on this single client. How can this happen? My setup file server (arend) CentOS release 4.6 # grep /home /etc/exports /home *(rw,sync,no_subtree_check) On the clients (also CentOS release 4.6) I mount /home with these options: arend:/home /home nfs proto=tcp,nfsvers=3,bg,defaults 0 0 To debug I created (su stbo) on the client small test files (touch test) in each directory all the way to the user /home dir. It turns out that one subdirectory and everything below was not synchronized to the server. I could create files, move them, but it was just as if I was working on a local disk. Other users did not experience any problem on this machine so it was only one sub-directory (and everything below). I checked the syslog both on the client and on the server, but no messages of interest. [root@arend ~]# stat /home/stbo/workarea/toekan/design/dig/vhdl/fpga/fpga_top.vhd File: `/home/stbo/workarea/toekan/design/dig/vhdl/fpga/fpga_top.vhd' Size: 53214 Blocks: 112 IO Block: 4096 regular file Device: fd01h/64769d Inode: 6614395 Links: 1 Access: (0664/-rw-rw-r--) Uid: ( 635/ stbo) Gid: ( 635/ stbo) Access: 2008-05-14 12:46:34.000000000 +0200 Modify: 2008-05-14 10:08:07.000000000 +0200 Change: 2008-05-14 10:08:07.000000000 +0200 I renamed the filename on the client and did stat there as well. The modify time shows this file is indeed older as the user mentioned. [stbo@junco /root]$stat /home/stbo/workarea/toekan/design/dig/vhdl/fpga/fpga_top.vhd_theo_test File: `/home/stbo/workarea/toekan/design/dig/vhdl/fpga/fpga_top.vhd_theo_test' Size: 53214 Blocks: 112 IO Block: 32768 regular file Device: 14h/20d Inode: 6583089 Links: 1 Access: (0664/-rw-rw-r--) Uid: ( 635/ stbo) Gid: ( 635/ stbo) Access: 2008-05-14 12:47:07.000000000 +0200 Modify: 2008-04-09 13:09:23.000000000 +0200 Change: 2008-05-14 12:24:24.000000000 +0200 After rebooting everything is normal again: [root@junco ~]# stat /home/stbo/workarea/toekan/design/dig/vhdl/fpga/fpga_top.vhd File: `/home/stbo/workarea/toekan/design/dig/vhdl/fpga/fpga_top.vhd' Size: 53214 Blocks: 112 IO Block: 32768 regular file Device: 14h/20d Inode: 6614395 Links: 1 Access: (0664/-rw-rw-r--) Uid: ( 635/ stbo) Gid: ( 635/ stbo) Access: 2008-05-14 12:46:34.000000000 +0200 Modify: 2008-05-14 10:08:07.000000000 +0200 Change: 2008-05-14 10:08:07.000000000 +0200 Any clue what could have gone wrong? Since I trust on a working NFS, I like to understand what could have gone wrong. Any suggestions are welcome. Thanks, Theo

1 0

Centosplus kernel does not have framebuffer support?
by Alfred von Campe 14 May '08

14 May '08

I'm still using CentOS 4.6, but have been planning an upgrade to CentOS 5 for quite a while. One of the things that was holding me back is that the CentOS 5.0 kernel did not have the framebuffer support enabled by default. So I waited for CentOS 5.1. However, on one of my test systems I ran into the bad NFS performance issue (see CentOS bug 2635), so I plan to use the centosplus kernel. However, it appears that this kernel does not have the framebuffer support enabled -- arrgghhh! So, is this just an oversight or is there a reason for not enabling the framebuffer support on the centosplus kernel? Alfred (who really wants to upgrade to CentOS 5 but cannot live with the NFS performance issue and does not want to build his own kernel RPMs)

3 10

custom iptables chain jumping
by Fajar Priyanto 14 May '08

14 May '08

Hi all, When we create a custom chain in iptables, should we specifically create a rule to 'jump back' to the previous chain? For example: iptables -A INPUT -j CUSTOMCHAIN iptables -A CUSTOMCHAIN rule1 iptables -A CUSTOMCHAIN rule2 Should we add: iptables -A CUSTOMCHAIN -j INPUT ? Or, it will automatically go back to CHAIN when there's no more rule? Thank you very much, -- Fajar Priyanto | Reg'd Linux User #327841 | Linux tutorial http://linux2.arinet.org 08:22:38 up 1:15, 2.6.22-14-generic GNU/Linux Let's use OpenOffice. http://www.openoffice.org The real challenge of teaching is getting your students motivated to learn.

1 1

Re: Curiosity when installing CentOS 5.1 in addition to W98 & WXP - SOLVED
by MHR 13 May '08

13 May '08

On Mon, May 12, 2008 at 4:47 PM, MHR <mhullrich(a)gmail.com> wrote: > On Mon, May 12, 2008 at 4:35 PM, Scott Silva <ssilva(a)sgvwater.com> wrote: > > on 5-12-2008 10:17 AM MHR spake the following: > > > > > It might not have finished the install, and something made it reboot before > > it had written the grub records. > > > > I figure I'll just start over and sit there to watch while I read a > book or something. (sigh) > Turns out it looks like the DVD didn't burn quite right (even though K3B verified it) and the install aborted about 2/3 of the way through. Thanks! mhr

2 2

where is centos live cd?
by David Hláčik 13 May '08

13 May '08

As far as i am searching over internet, i am finding only dead links for CentOS Live CD project (http://wiki.centos.org/Projects) . Where can i find and download it please? thanks ! D.

7 8

Re: [CentOS] "yum update" did not update kernel on one box
by lannyma＠gmail.com 13 May '08

13 May '08

On 5/7/08, Ralph Angenendt <ra+cento AT br-online.de> wrote: > Lanny Marcus wrote: > > Scott: Great! If I can locate kernel-headers-2.6.18-53.1.14.el5 and > > kernel-2.6.18-53.1.14.el5 I can use the rpm -e command to remove them > > and then yum update again and that should update the kernel in her box. > > How do I locate them? > > Why locate them? rpm -e takes the package *name*, not the package > itself. Yes. I woke up about 430 this morning and I realized that rpm can locate the file by itself. :-) However, I want to learn how to use find that Mark (mhr) mentioned! [lanny@compaq1300 ~]$ su - Password: [root@compaq1300 ~]# rpm -e kernel-headers-2.6.18-53.1.14.el5 [root@compaq1300 ~]# rpm -e kernel-2.6.18-53.1.14.el5 [root@compaq1300 ~]# yum update Loading "priorities" plugin Loading "installonlyn" plugin Setting up Update Process Setting up repositories Reading repository metadata in from local files 263 packages excluded due to repository priority protections Resolving Dependencies --> Populating transaction set with selected packages. Please wait. ---> Downloading header for kernel to pack into transaction set. kernel-2.6.18-53.1.14.el5 100% |=========================| 258 kB 00:03 ---> Package kernel.i686 0:2.6.18-53.1.14.el5 set to be installed --> Running transaction check Dependencies Resolved ============================================================================= Package Arch Version Repository Size ============================================================================= Installing: kernel i686 2.6.18-53.1.14.el5 updates 13 M Transaction Summary ============================================================================= Install 1 Package(s) Update 0 Package(s) Remove 0 Package(s) Total download size: 13 M Is this ok [y/N]: y Downloading Packages: (1/1): kernel-2.6.18-53.1 100% |=========================| 13 MB 03:36 Running Transaction Test Finished Transaction Test Transaction Test Succeeded Running Transaction Installing: kernel ######################### [1/1] Installed: kernel.i686 0:2.6.18-53.1.14.el5 Complete! [root@compaq1300 ~]# exit Notice that: I was able to remove both files, with rpm -e without any problem and I was able to run yum update, and it installed the new kernel, but not the kernel-header file. [lanny@compaq1300 ~]$ uname -a Linux compaq1300.HOMELAN 2.6.18-8.el5 #1 SMP Thu Mar 15 19:57:35 EDT 2007 i686 i686 i386 GNU/Linux [lanny@compaq1300 ~]$ After rebooting the box, it is still on the original kernel, rather than on the new kernel. I just installed kernel-headers-2.6.18-53.1.14.el5 again. Was that correct or not? Probably very close to solving this now! Thanks much to everyone who has contributed ideas! Lanny

9 29

JetDirect Webinterface doesn't work anymore with OpenJDK Java 1.6
by Heiko Adams 13 May '08

13 May '08

Hello, after installing the openjdk 1.6 packages from centos testing the webinterface of my hp jetdirect 300x printserver doesn't work anymore. The webpage is loaded but the applets don't start - no java console and no error messages are shown. Tested with Firefox 3 Beta 5 and Opera 9.5 Beta 2 Can anyone confirm this? -- Heiko Adams <heiko.adams(a)gmail.com>

1 0

re: RSA SecurID and CentOS5
by Andy Pace 13 May '08

13 May '08

I actually just noticed that the pam.d/sshd file looks a lot more sane in CentOS4. I'm going to give that a shot. The documentation for configuring PAM is right on with the format -- no include or optional fields :) -- Andy Pace apace(a)singlehop.com

1 0

RSA SecurID and CentOS5
by Andy Pace 13 May '08

13 May '08

I am attempting to get our RSA SecurID tokens working in CentOS: http://www.rsa.com/node.aspx?id=1177 Has anyone had any experience with this? I know CentOS is not supported but one would think that it could be easily implemented... Here's the error I'm receiving: May 13 10:26:21 sshd[1662]: @(#)RSA Authentication Agent 5.3 for PAM [263] May 13 10:26:21 sshd[1662]: Entered pam_sm_authenticate May 13 10:26:21 sshd[1662]: Entered iReadPAMConfigFile May 13 10:26:21 sshd[1662]: VAR_ACE is /var/ace May 13 10:26:21 sshd[1662]: ENABLE_GROUP_SUPPORT is 0 May 13 10:26:21 sshd[1662]: INCL_EXCL_GROUPS is 0 May 13 10:26:21 sshd[1662]: Adding ::other:: to list of groups May 13 10:26:21 sshd[1662]: Adding ::wheel:: to list of groups May 13 10:26:21 sshd[1662]: Adding ::eng:: to list of groups May 13 10:26:21 sshd[1662]: Adding ::othergroupnames:: to list of groups May 13 10:25:21 sshd[1662]: Adding ::testing:: to list of groups May 13 10:26:21 sshd[1662]: Number of groups is 4 May 13 10:26:21 sshd[1662]: AUTH_CHALLENGE_USERNAME_STR May 13 10:26:21 sshd[1662]: AUTH_CHALLENGE_RESERVE_REQUEST_STR May 13 10:26:21 sshd[1662]: AUTH_CHALLENGE_PASSCODE_STR May 13 10:26:21 sshd[1662]: AUTH_CHALLENGE_PASSWORD_STR May 13 10:26:21 sshd[1662]: iReadPAMConfigFile: Returning success. May 13 10:26:21 sshd[1662]: Entered PAM:InitSecurID May 13 10:26:21 sshd[1662]: ace_dir_env is VAR_ACE=/var/ace May 13 10:26:21 sshd[1662]: AceInitialize failed May 13 10:26:21 sshd[1662]: Reserve password not allowed by RSA SecurID module May 13 10:26:21 sshd[1662]: Failed password for apace from 192.168.5.201port 60353 ssh2 [root@snorlax bin]# ./acestatus Error can't connect to ACE/Server [root@snorlax bin]# ./acetest AceInitialize failed [root@snorlax bin]# RSA is no help since it's not a RHEL box :( The PAM module installs fine, but I see no communication between the server and the RSA Appliance! -- Andy Pace apace(a)singlehop.com

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss