- Discuss - lists.centos.org

Strange apache behaviour
by Christian Nygaard 17 Aug '06

17 Aug '06

Hi Centos folks! I'm trying to get a file with wget from Apache on Centos 3 and it doesnt succed. What could be the cause of this what is the resource that is not available, whats your oppinion? strace short output --------------------------- read(14, "GET /centos/3/os/i386/heade"..., 8000) = 133 read(5, 0xbfff99f3, 1) = -1 EAGAIN (Resource temporarily unavailable) strace longer output of the same ------------------------------------------------ writev(14, [{"HTTP/1.1 200 OK\r\nDate: Thu, 17 A"..., 269}], 1) = 269 sendfile(14, 15, [0], 18475) = 18475 setsockopt(14, SOL_TCP, TCP_CORK, [0], 4) = 0 setsockopt(14, SOL_TCP, TCP_NODELAY, [1], 4) = 0 brk(0) = 0x9524000 brk(0x9546000) = 0x9546000 write(9, "192.168.0.4 - - [18/Aug/2006:00"..., 151) = 151 shutdown(14, 1 /* send */) = 0 poll([{fd=14, events=POLLIN}], 1, 2000) = 0 close(14) = 0 read(5, 0xbfffb313, 1) = -1 EAGAIN (Resource temporarily unavailable) close(15) = 0 semop(1048577, 0x79e6bc, 1 <unfinished ...> Thanks for your input Chris

2 1

gnbd help on centos
by William (Bill) Triest 17 Aug '06

17 Aug '06

I've googled for this, but everything I find tends to talk about cluster and doesn't give an example close enough that I can figure this out. I have read the Red Hat Cluster Suite Configuring and Managing a Cluster <http://www.redhat.com/docs/manuals/csgfs/browse/rh-cs-en/> links from http://www.redhat.com/docs/manuals/csgfs/. (I think these are mirred on centos.org, but I read them off of redhat's site) Basically I currently have two servers. The file server is a dell power edge 2850 with an attached power vault. The power vault's file systems are all gfs. I would like to export these to a second server via gnbd. I realize I *could* use nfs, which we do use elsewhere, but I was interested in figuring out gnbd. On the file server if I run gnbd_export -d /dev/vg_home/lv_home -e home Then on the other server modprobe gnbd and then run gnbd_import -i fileserver the devices get created can be mounted etc (well I might need to modprobe gfs before mounting) Anyways, what's the "correct" way of having this happen on boot? I've been reading the cluster docs, but I haven't found something that makes it click for me. Hooking up the poweredge to the powervault won't work, because eventually we're getting a third server, going to put the power vault into cluster mode and directly connect it to the powervault (thus the decision to use gfs initially, instead of just a "normal" file system and exporting via nfs). Any help would greatly be appreciated, especially helpful links. Thanks, Bill

2 1

proxy server - ipcop vs CentOS
by Craig White 17 Aug '06

17 Aug '06

I have purchased a used Compaq DL360 which I was going to use as a proxy server. Presently, we are using a cheap box with ipcop which is working fine but it didn't have much RAM (64MB), etc. This new box we will want to run squid and perhaps dansguardian for filtering (this is a non-profit company) and I'm wondering if I should just put ipcop on it or would it be smarter/better to install CentOS 4, squid and I see Dag has dansguardian package which suggests that I might get more and better options from this. Anyone have opinions on ipcop vs. CentOS Craig

9 10

Nvidia Geforce 5200 graphic card
by Josep M. 17 Aug '06

17 Aug '06

Hello. I have a Nvidia Geforce 5200 graphic card, the quality much is less that in windows, I would like how I can adjust this. Image quality is good, but usual desktop have much less quality, I use 1024*768 in both. Thanks ______________________________________________ LLama Gratis a cualquier PC del Mundo. Llamadas a fijos y móviles desde 1 céntimo por minuto. http://es.voice.yahoo.com

11 17

Re: Openswan 2.4.6rc5 under CentOS 4.3
by Bas Rijniersce 17 Aug '06

17 Aug '06

Hello, My problem was solved by the excellent support of the openswan people (Paul Wouters). If other people run into the same problem, this whas the solution: I wanted to keep the stock kernel but wanted KLIPS, I don't need NAT-Traversal When the current release is used (2.4.6rc5) the module caused a kernel panic when unloading (that means also rebooting) the system. A bad thing for a firewall that is probably locked somewhere in a closet. The current CVS version contains the fix for the unload bug. The CVS version can be retrieved by: cd /usr/src rm -rf openswan-2 cvs -d :pserver:anoncvs@anoncvs.openswan.org:/public/cvs login cvs -d :pserver:anoncvs@anoncvs.openswan.org:/public/cvs co openswan-2 Then edit /usr/src/openswan-2/packaging/linus/config-all.h and change the define for NAT_TRAVERSAL for 1 to 0 Compile the programs and module with: make KERNELSRC=/lib/modules/`uname -r`/build programs module make KERNELSRC=/lib/modules/`uname -r`/build install minstall This solved the problem for me Bas

1 0

Wifi WEP / Cisco aironet wireless internal card 802.11b
by Guillermo Garron 17 Aug '06

17 Aug '06

Hi, I have a IBM ThinkPat T30 a Cisco Aironet wireless internal in the laptop 802.11b only. It works great with open Acess points, but when i try to connect to encripted ones. I got the dialog box asking for the passphrase 128 bit, I enter it and after that i receive the dialog box again! Maybe my card do not support WEP or I am doing something wrong? Here is part of what i can see on /var/log/messages thanks! Guillermo Garron _________- Aug 9 20:25:43 t30 NetworkManager: FORCE: device '/org/freedesktop/NetworkManager/Devices/eth1', network 'DIPLOMAT' Aug 9 20:25:43 t30 kernel: bridge-eth1: is a Wireless Adapter Aug 9 20:25:45 t30 kernel: Setting key 0 Aug 9 20:25:46 t30 kernel: bridge-eth1: is a Wireless Adapter Aug 9 20:25:48 t30 NetworkManager: AUTO: Best wired device = (null) Aug 9 20:25:48 t30 NetworkManager: AUTO: Best wireless device = eth1 () Aug 9 20:25:48 t30 NetworkManager: SWITCH: need to associate with new access point Aug 9 20:25:48 t30 NetworkManager: nm_state_modification_monitor(): beginning activation for device 'eth1' Aug 9 20:25:48 t30 NetworkManager: nm_device_wireless_activate(eth1) using essid 'NETGEAR' Aug 9 20:25:48 t30 kernel: bridge-eth1: is a Wireless Adapter Aug 9 20:25:50 t30 NetworkManager: HAVELINK: act=1 && (dev_crypt=0 <= prev_crypt=0) Aug 9 20:25:50 t30 dhclient: wifi0: unknown hardware address type 801 Aug 9 20:25:50 t30 dhclient: wifi0: unknown hardware address type 801 Aug 9 20:25:50 t30 dhclient: DHCPREQUEST on eth1 to 255.255.255.255 port 67 Aug 9 20:25:52 t30 NetworkManager: AUTO: Best wired device = (null) Aug 9 20:25:52 t30 NetworkManager: AUTO: Best wireless device = eth1 (NETGEAR) Aug 9 20:25:53 t30 NetworkManager: FORCE: device '/org/freedesktop/NetworkManager/Devices/eth1', network 'DIPLOMAT' Aug 9 20:25:54 t30 kernel: bridge-eth1: is a Wireless Adapter Aug 9 20:25:56 t30 kernel: Setting key 0 Aug 9 20:25:56 t30 kernel: bridge-eth1: is a Wireless Adapter Aug 9 20:25:58 t30 NetworkManager: AUTO: Best wired device = (null) Aug 9 20:25:58 t30 NetworkManager: AUTO: Best wireless device = eth1 () Aug 9 20:25:58 t30 NetworkManager: SWITCH: need to associate with new access point Aug 9 20:25:59 t30 NetworkManager: nm_state_modification_monitor(): beginning activation for device 'eth1' Aug 9 20:25:59 t30 NetworkManager: nm_device_wireless_activate(eth1) using essid 'NETGEAR'

2 4

help with Intel GMA 950 3D graphics card
by Julio E. Gonzalez P. 17 Aug '06

17 Aug '06

Hi!. I recently buy a new notebook, and install CentOS 4.3 on it. This because I'm in charge of a lot a servers with Centos installed, and want to use only one distro in all my machines. And, because of course I really like Centos for desktop too. :) The notebook comes with Intel GMA 950 video graphics. I can use it with the vesa driver of Xorg, but I also want 3D graphics, for some games, wine, etc. Is there _*a easy way*_ to use 3D in Centos 4.3 with the GMA 950 video graphics card? I believe that Xorg 7.1 have support for this card, but Centos comes with a older Xorg. Also... the same cuestion, but for configure and install the intel wireless 3945ABG card. I already tried ndiswrapper (don't work for me) and the open source drivers (compilation problem). Thanks. Julio.

1 0

XFS and CentOS 4.3
by Mark Strong 17 Aug '06

17 Aug '06

Hi All, after looking around for info on XFS(the filesystem) and its use on CentOS and/or RHEL 4. There seems to be a lot of noise about 4K Stacks (especially on linux-xfs(a)oss.sgi.com) So what is the best way to get XFS working with CentOS 4.3 ? And not have something like this happening. A quote from the xfs list at sgi >On Tue, 18 Jul 2006 at 10:29am, Andrew Elwell wrote > >using the 2.6.9-34 centosplus SMP kernel (3GHz P4 with >hyperthreading enabled) > >what we normally (~once a day) is simply > >do_IRQ: stack overflow: 416 >[<c0107a27>] >You don't want to use the XFS in the centosplus kernel. It has major >known issues with 4K stacks (leading to overflows). Use the >kernel-module-xfs (or somesuch) RPM instead, and you should have better >luck. Do I need a kernel with 8K stacks? and is this http://dev.centos.org/centos/4/testing/i386/RPMS/kernel-module-xfs-2.6.9-34… the "kernel-module-xfs" RPM he was talking about (or equivalent for `uname -r` equals 2.6.9-34.ELsmp). Regards Mark Strong This e-mail message is for the sole use of the intended recipient(s) and may contain confidential and privileged information of Transaction Network Services. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.

11 19

Can I install Centos on Segate ST3160812AS ( SATA II ) Harddisk
by Asky Lee 17 Aug '06

17 Aug '06

HI Can I install Centos on Segate ST3160812AS ( SATA II ) Harddisk? Asky

3 2

Email dictionary attacks and firewall
by John Hinton 17 Aug '06

17 Aug '06

I keep seeing 'Joe Average compromised computer on broadband' being used to do email dictionary attacks on our systems. Seems I always have several domains going through these. One in particular has been in the 'a-' list for weeks with about 20,000 attempts per day from various systems. Yeah, I do have a system which blocks email from these systems for a period of time after 3 bad email address attempts.... throttling... Anyway, this brought to mind.... Joe Average! Joe Average buys a broadband connection, has someone hook up his computer.. talks to tech support about everything and eventually, an AV subscription dies or something and Joe just doesn't care or doesn't know how to deal with that. Meanwhile Joe's computer gets a virus allowing some baddy to start sending email. Joe notices his computer is getting a little slow.. but it's not bad enough to worry about. So, this made me start wondering about how to do something that makes Joe's computer so slow that he finally gives up and calls in tech support to fix the damned thing. I wonder if there is a way that a firewall rule could be written, that would let a trickle of the connection from Joe through, so as his dictionary attack gets backed up with a huge number of connections which are trickling through at such a slow rate, with maybe just enough delay built in to make it keep trying.... Basically making Joe's compromised computer useless.. and maybe he'd at least turn it off if it didn't lock up all by itself.... It is so very sad that some providers don't monitor their own people. I see where comcast has now slid down to number 8 after holding the number one spot as the biggest spammer network for a very long time. Good for them! It seems the undisputed king of this world now is verizonbusiness.com.... bad bad very bad.... Sorry.. yeah.. a bit off topic...... John Hinton

10 11

RE: [CentOS] Can I install Centos on Segate ST3160812AS ( SATA II ) Harddisk
by Asky Lee 17 Aug '06

17 Aug '06

SATA controller is Interl(R) 82801GR/GH SATA/RAID Controller Thanks. -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Matt Hyclak Sent: 2006年8月17日 19:17 To: CentOS mailing list Subject: Re: [CentOS] Can I install Centos on Segate ST3160812AS ( SATA II ) Harddisk On Thu, Aug 17, 2006 at 06:59:02PM +0800, Asky Lee enlightened us: > HI > Can I install Centos on Segate ST3160812AS ( SATA II ) Harddisk? > It depends on what your SATA controller is. The OS could care less about the disk in most cases. Matt -- Matt Hyclak Department of Mathematics Department of Social Work Ohio University (740) 593-1263 _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

CentOS-announce Digest, Vol 18, Issue 11
by centos-announce-request＠centos.org 17 Aug '06

17 Aug '06

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2006:0602 Moderate CentOS 3 i386 wireshark (was ethereal) - security update (Tru Huynh) 2. CESA-2006:0602 Moderate CentOS 3 x86_64 wireshark (was ethereal) - security update (Tru Huynh) 3. CESA-2006:0602-01: Moderate CentOS 2 i386 wireshark security update (was ethereal) (John Newbigin) ---------------------------------------------------------------------- Message: 1 Date: Wed, 16 Aug 2006 21:29:57 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2006:0602 Moderate CentOS 3 i386 wireshark (was ethereal) - security update To: centos-announce(a)centos.org Message-ID: <20060816192957.GA24898(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2006:0602 wireshark (was ethereal) security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2006-0602.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/wireshark-0.99.2-EL3.1.i386.rpm updates/i386/RPMS/wireshark-gnome-0.99.2-EL3.1.i386.rpm source: updates/SRPMS/wireshark-0.99.2-EL3.1.src.rpm You may update your CentOS-3 i386 installations by running the command: yum upgrade ethereal\* Tru -- Tru Huynh (CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

Openswan 2.4.6rc5 under CentOS 4.3
by Bas Rijniersce 17 Aug '06

17 Aug '06

Hello, I'm trying to get Openswan running in a CentOS 4.3 environment. I want to modify as little as possible so that the machine can be kept up to date easily. I'd rather not compile a special kernel, but if that's the only solution, no problem (I don't need NAT traversal). It's running kernel 2.6.9-34.0.2.EL. Installed the kerneldevel RPM (and kernel src rpm as well). I compiled openswan with: make KERNELSRC=/lib/modules/`uname -r`/build/ module minstall (and same for progs) Module seems to load fine, lsmod shows as loaded. I do get quite a bit of output on the console that I don't know is normal: ---- Aug 15 12:44:15 INAKFW001 kernel: klips_debug:ipsec_eroute_get_info: buffer=0pc9cce000, *start=0p00000000, offset=61, length=1024 Aug 15 12:44:15 INAKFW001 kernel: klips_debug:rj_walktree: for: rn=0pcce7a5a8 rj_b=-3 rj_flags=6 leaf key = 00000000->00000000 Aug 15 12:44:15 INAKFW001 kernel: klips_debug:rj_walktree: processing leaves, rn=0pcfc9c280 rj_b=-1 rj_flags=4 leaf key = 0a010000->0a020000 Aug 15 12:44:15 INAKFW001 kernel: klips_debug:rj_walktree: while: base=0p00000000 rn=0pcce7a5a8 rj_b=-3 rj_flags=6 leaf key = 00000000->00000000 Aug 15 12:44:15 INAKFW001 kernel: klips_debug:rj_walktree: for: rn=0pcfc9c280 rj_b=-1 rj_flags=4 leaf key = 0a010000->0a020000 Aug 15 12:44:15 INAKFW001 kernel: klips_debug:rj_walktree: processing leaves, rn=0pcce7a5d8 rj_b=-3 rj_flags=6 leaf key = ffffffff->ffffffff Aug 15 12:44:15 INAKFW001 kernel: klips_debug:rj_walktree: while: base=0p00000000 rn=0pcfc9c280 rj_b=-1 rj_flags=4 leaf key = 0a010000->0a020000 Aug 15 12:44:15 INAKFW001 kernel: klips_debug:ipsec_rj_walker_procprint: rn=0pcfc9c280, w0=0pcc83df20 ---- The problem is when I restart the machine, or just restart the service. It panic's :-) Not a good thing for a box that will be hidden in a closet in India :) I video of the crash can be found at: http://www.brijn.nu/openswan_crash.avi (151Kb) This machine is running in VMware at the moment. I have the same problem in a "real" machine (identical setup) Can I build the module as I did, should that work OK? Any other suggestion on what might be wrong? Thank you very much for your time! Bas

2 3

Centos 4.4
by Feizhou 17 Aug '06

17 Aug '06

Hi, Anybody knows when the new kernel package will be ready? regards,

7 9

Printing problem with CUPS and lp/lpr
by Alfred von Campe 17 Aug '06

17 Aug '06

I know that printing on Linux is somewhat of an art form, but I have a fairly simple problem. I used the following command to configure a networked printer (HP LaserJet 8150): lpadmin -p name -E -v socket://name -m laserjet.ppd -u allow:all - u deny:none This added and enabled the printer, and I can print to it using the print command from within a GUI application and PostScript utilities like enscript. However, printing simple text files from the command line using lpr or lp produces undesirable output that looks like this: Line 1 Line 2 Line 3 It seems rather obvious that the printer is expecting carriage returns and not getting any. What is the "right" way to fix this using CUPS, which "owns" the /etc/printcap file. I can't be the first one to run into this issue... Thanks, Alfred

3 10

Help: Marvell sk98lin driver missing from Centos 3 PXE initrd.img
by Mike Valenzuela 17 Aug '06

17 Aug '06

I'm new to the lists so sorry about any faux pas I may have made. Also I apologize for the length, but I wanted to be sure I covered most of the details. I'm trying to do a PXE install on an Intel 1435VP2 server machine. The PXE install has worked on all the older machines in the cluster, so I know PXE is working. However, these new Intel server machines only support PXE booting from their Marvell NIC (I already tried getting the latest BIOS to avoid this hassle). Since the cluster is running open mosix, Centos 3.7 is which the latest which can be used. The kernel and initrd image in the isolinux directory (on cd or in the repos) has no driver for the Marvell NIC. lspci -n and lspci shows the following information for the Marvell NIC : 02:00.0 Class 0200: 11ab:4361 (rev 17) 02:00.0 Ethernet Controller: Marvell Technology Group Ltd. 88E8050 Gigabit Ethernet Controller (rev 17) I have tried the following: cp /tftpboot/linux-install/initrd.img /tmp/initrd.img.gz cp /tftpboot/linux-install/initrd.img /tftpboot/linux-install/initrd.img.orig cd /tmp gzip -d initrd.img.gz mkdir /tmp/initrd.fs mount -o loop initrd.img initrd.fs gzip -d < /mnt/initrd.fs/modules/modules.cgz | cpio -i --make-directories This makes the folders /tmp/2.4.21-40.ELBOOT/i386/ filled with the drivers in the initrd.img file. Then I grabbed a copy of the vanilla 2.4.21-40, went to Intel's website to grab the driver files I needed (turns out that they were included in the vanilla source, hence a patch file of size 0 was generated), and continued to build the sk98lin driver for i386 (I tried both default settings processor type and i386). The first iteration through all I did was make menuconfig and turn on Marvell as a module, the second time I specified processor type as i386. I grabbed the sk98lin.o file and threw it in /tmp/2.4.21-40.ELBOOT/i386/, where all the other drivers were located. To compress this back into a .cgz file I did the following cd /tmp/ find 2.4.21-40.ELBOOT -print | cpio -o -H crc | gzip -9 > modules.cgz Then I made a copied over the modules.cgz in /tmp/initrd.fs/modules. I edited /tmp/initrd.fs/modules/pcitable adding the line: 0x11ab 0x4361 "sk98lin" "Gigabit Ethernet Controller" (With tabs not spaces) I also added the following line to /tmp/initrd.fs/modules/modules.pcimap sk98lin 0x000011ab 0x00004361 0xffffffff 0xffffffff 0x00000000 0x00000000 0x00000000 After unmounting initrd.fs, I re-gziped initrd.img, and copied over /tftpboot/linux-install/initrd.img However, my problem still remains. When I pxe boot, the machine is detected and everything. Just before getting the kickstart file, it complains "Unable to find any devices of the type needed for this installation type". Obviously I did something wrong, but I don't know why it is still broken or how to fix it. I suspect that somehow I built the the sk98lin module incorrectly. Has anyone already made a fix for this initrd file? I'd appreciate an easy download. Thanks in advanced for any pointers and/or help.

1 0

Problem Installing rrdtool
by dennis 17 Aug '06

17 Aug '06

hi to all, im currently installing rrdtool-1.2.15 with my box CentOS 4.3 final ,before i installed rrdtools there 2 files suggested need to installed the FreeType 2 and libart_lgpl 2.3 everything is fine when installed two files but when i try to installed rrdtool when i issue command ./configure --prefix=/usr/local/rrdtool-1.2.15 this should the output ,any suggestion what's the problem ,thanks to all in advance [root@support rrdtool-1.2.15]# ./configure --prefix=/usr/local/rrdtool-1.2.15 checking build system type... i686-pc-linux-gnu checking host system type... i686-pc-linux-gnu checking target system type... i686-pc-linux-gnu checking for a BSD-compatible install... /usr/bin/install -c checking whether build environment is sane... yes checking for gawk... gawk checking whether make sets $(MAKE)... yes Audit Compilation Environment checking for gcc... gcc checking for C compiler default output file name... a.out checking whether the C compiler works... yes checking whether we are cross compiling... no checking for suffix of executables... checking for suffix of object files... o checking whether we are using the GNU C compiler... yes checking whether gcc accepts -g... yes checking for gcc option to accept ANSI C... none needed checking for style of include used by make... GNU checking dependency style of gcc... gcc3 checking how to run the C preprocessor... gcc -E checking for a sed that does not truncate output... /bin/sed checking for egrep... grep -E checking for ld used by gcc... /usr/bin/ld checking if the linker (/usr/bin/ld) is GNU ld... yes checking for /usr/bin/ld option to reload object files... -r checking for BSD-compatible nm... /usr/bin/nm -B checking whether ln -s works... yes checking how to recognise dependent libraries... pass_all checking for ANSI C header files... yes checking for sys/types.h... yes checking for sys/stat.h... yes checking for stdlib.h... yes checking for string.h... yes checking for memory.h... yes checking for strings.h... yes checking for inttypes.h... yes checking for stdint.h... yes checking for unistd.h... yes checking dlfcn.h usability... yes checking dlfcn.h presence... yes checking for dlfcn.h... yes checking for g++... g++ checking whether we are using the GNU C++ compiler... yes checking whether g++ accepts -g... yes checking dependency style of g++... gcc3 checking how to run the C++ preprocessor... g++ -E checking for g77... g77 checking whether we are using the GNU Fortran 77 compiler... yes checking whether g77 accepts -g... yes checking the maximum length of command line arguments... 32768 checking command to parse /usr/bin/nm -B output from gcc object... ok checking for objdir... .libs checking for ar... ar checking for ranlib... ranlib checking for strip... strip checking if gcc static flag works... yes checking if gcc supports -fno-rtti -fno-exceptions... no checking for gcc option to produce PIC... -fPIC checking if gcc PIC flag -fPIC works... yes checking if gcc supports -c -o file.o... yes checking whether the gcc linker (/usr/bin/ld) supports shared libraries... yes checking whether -lc should be explicitly linked in... no checking dynamic linker characteristics... GNU/Linux ld.so checking how to hardcode library paths into programs... immediate checking whether stripping libraries is possible... yes checking if libtool supports shared libraries... yes checking whether to build shared libraries... yes checking whether to build static libraries... yes configure: creating libtool appending configuration tag "CXX" to libtool checking for ld used by g++... /usr/bin/ld checking if the linker (/usr/bin/ld) is GNU ld... yes checking whether the g++ linker (/usr/bin/ld) supports shared libraries... yes checking for g++ option to produce PIC... -fPIC checking if g++ PIC flag -fPIC works... yes checking if g++ supports -c -o file.o... yes checking whether the g++ linker (/usr/bin/ld) supports shared libraries... yes checking dynamic linker characteristics... GNU/Linux ld.so checking how to hardcode library paths into programs... immediate checking whether stripping libraries is possible... yes appending configuration tag "F77" to libtool checking if libtool supports shared libraries... yes checking whether to build shared libraries... yes checking whether to build static libraries... yes checking for g77 option to produce PIC... -fPIC checking if g77 PIC flag -fPIC works... yes checking if g77 supports -c -o file.o... yes checking whether the g77 linker (/usr/bin/ld) supports shared libraries... yes checking dynamic linker characteristics... GNU/Linux ld.so checking how to hardcode library paths into programs... immediate checking whether stripping libraries is possible... yes checking if gcc likes the -fno-strict-aliasing flag... yes checking if gcc likes the -Wall flag... yes checking if gcc likes the -std=gnu99 flag... yes checking if gcc likes the -pedantic flag... yes checking if gcc likes the -Wshadow flag... yes checking if gcc likes the -Wpointer-arith flag... yes checking if gcc likes the -Wcast-align flag... yes checking if gcc likes the -Wmissing-prototypes flag... yes checking if gcc likes the -Wmissing-declarations flag... yes checking if gcc likes the -Wnested-externs flag... yes checking if gcc likes the -Winline flag... yes checking if gcc likes the -W flag... yes Checking for Header Files checking for ANSI C header files... (cached) yes checking for dirent.h that defines DIR... yes checking for library containing opendir... none required checking for sys/stat.h... (cached) yes checking for sys/types.h... (cached) yes checking fcntl.h usability... yes checking fcntl.h presence... yes checking for fcntl.h... yes checking time.h usability... yes checking time.h presence... yes checking for time.h... yes checking locale.h usability... yes checking locale.h presence... yes checking for locale.h... yes checking fp_class.h usability... no checking fp_class.h presence... no checking for fp_class.h... no checking malloc.h usability... yes checking malloc.h presence... yes checking for malloc.h... yes checking for unistd.h... (cached) yes checking ieeefp.h usability... no checking ieeefp.h presence... no checking for ieeefp.h... no checking math.h usability... yes checking math.h presence... yes checking for math.h... yes checking sys/time.h usability... yes checking sys/time.h presence... yes checking for sys/time.h... yes checking sys/times.h usability... yes checking sys/times.h presence... yes checking for sys/times.h... yes checking sys/param.h usability... yes checking sys/param.h presence... yes checking for sys/param.h... yes checking sys/resource.h usability... yes checking sys/resource.h presence... yes checking for sys/resource.h... yes checking float.h usability... yes checking float.h presence... yes checking for float.h... yes checking for an ANSI C-conforming const... yes checking whether time.h and sys/time.h may both be included... yes checking whether struct tm is in sys/time.h or time.h... time.h checking for acos... no checking for acos in -lm... yes Test Library Functions checking for strftime... yes checking for vprintf... yes checking for _doprnt... no checking whether byte ordering is bigendian... no checking for tzset... yes checking for mbstowcs... yes checking for opendir... yes checking for readdir... yes checking for chdir... yes checking for chroot... yes checking for getuid... yes checking for setlocale... yes checking for strerror... yes checking for strerror_r... yes checking for snprintf... yes checking for vsnprintf... yes checking for fpclass... no checking for class... no checking for fp_class... no checking for isnan... yes checking for memmove... yes checking for strchr... yes checking for mktime... yes checking for getrusage... yes checking for gettimeofday... yes checking for stdlib.h... (cached) yes checking for unistd.h... (cached) yes checking for getpagesize... yes checking for working mmap... yes IEEE Math Checks checking for fpclassify... no checking for fpclassify with <math.h>... yes checking for finite... yes checking for isinf... yes checking if IEEE math works out of the box... yes Resolve Portability Issues checking if realloc can deal with NULL... yes checking if ctime_r need special care to act posixly correct... no checking for the pthreads library -lpthreads... no checking whether pthreads work without any flags... no checking whether pthreads work with -Kthread... no checking whether pthreads work with -kthread... no checking for the pthreads library -llthread... no checking whether pthreads work with -pthread... yes checking for joinable pthread attribute... PTHREAD_CREATE_JOINABLE checking if more special flags are required for pthreads... no checking for cc_r... gcc checking do we need malloc/malloc.h... nope, works out of the box Findr 3rd-Party Libraries checking for art_vpath_add_point in -lart_lgpl_2... yes checking libart_lgpl/libart.h usability... no checking libart_lgpl/libart.h presence... no checking for libart_lgpl/libart.h... no checking for pkg-config... pkg-config configure: WARNING: ---------------------------------------------------------------------------- * I found a copy of pkgconfig, but there is no libart-2.0.pc file around. You may want to set the PKG_CONFIG_PATH variable to point to its location. ---------------------------------------------------------------------------- configure: WARNING: ---------------------------------------------------------------------------- * I could not find a working copy of libart-2.0. Check config.log for hints on why this is the case. Maybe you need to set LDFLAGS and CPPFLAGS appropriately so that compiler and the linker can find libart_lgpl_2 and its header files. If you have not installed libart-2.0, you can get it either from its original home on ftp://ftp.gnome.org/pub/GNOME/sources/libart_lgpl/2.3/ You can find also find an archive copy on http://oss.oetiker.ch/rrdtool/pub/libs The last tested version of libart-2.0 is 2.3.17. LIBS=-lm LDFLAGS= CPPFLAGS= -I/usr/include/libart-2.0 ---------------------------------------------------------------------------- checking for zlibVersion in -lz... yes checking zlib.h usability... yes checking zlib.h presence... yes checking for zlib.h... yes checking for png_access_version_number in -lpng... yes checking png.h usability... yes checking png.h presence... yes checking for png.h... yes checking for FT_Init_FreeType in -lfreetype... yes checking ft2build.h usability... no checking ft2build.h presence... no checking for ft2build.h... no checking for pkg-config... (cached) pkg-config configure: WARNING: ---------------------------------------------------------------------------- * I found a copy of pkgconfig, but there is no freetype2.pc file around. You may want to set the PKG_CONFIG_PATH variable to point to its location. ---------------------------------------------------------------------------- configure: WARNING: ---------------------------------------------------------------------------- * I could not find a working copy of freetype2. Check config.log for hints on why this is the case. Maybe you need to set LDFLAGS and CPPFLAGS appropriately so that compiler and the linker can find libfreetype and its header files. If you have not installed freetype2, you can get it either from its original home on http://prdownloads.sourceforge.net/freetype/ You can find also find an archive copy on http://oss.oetiker.ch/rrdtool/pub/libs The last tested version of freetype2 is 2.1.10. LIBS=-lpng -lz -lm LDFLAGS= CPPFLAGS= -I/usr/include/freetype2 ---------------------------------------------------------------------------- configure: error: Please fix the library issues listed above and try again.

7 9

RE: [CentOS] OT WAS: Johnny's postfix/dovecot/squirrelmail/virus scanning+ Centos4 Walk Through...
by Alex Palenschat 17 Aug '06

17 Aug '06

> > This website say "hacked..." > > Please i seafch a lot for a guide with these products... if > anyone have > the guide, please put the url or something like... > > Thanks a lot. OK, I'll bite. I'm aware of how annoying it is to have someone peering over your shoulder when you are in the middle of a crisis asking questions, but I'm curious what it is that is making johnny's site so vulnerable. Is it forum software? I hope it's not a hack against a package in the base... Anyway, just wondering because I have user's complaining about the fact that I don't have their forum up and running. They may have to wait for a long time. Alex

8 7

Building a basic router with two nic's
by centos 16 Aug '06

16 Aug '06

I need help setting up a basic routing between two nic's on my CentOS desktop. I thought I'd understood the basics, but ... I don,t want a nat router, just packets forwarded back and fort. This is what I thought would do the trick, but didn't. Can someone please give me some pointers or links so I can get this right. # echo "1" > /proc/sys/net/ipv4/ip_forward # route add -net 192.168.2.0 netmask 255.255.255.0 eth1 # route add -net 192.168.2.0 netmask 255.255.255.0 gw 192.168.1.150 eth1 # # route -n Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 192.168.2.0 192.168.1.150 255.255.255.0 UG 0 0 0 eth1 192.168.2.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1 192.168.2.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1 169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth1 0.0.0.0 192.168.1.150 0.0.0.0 UG 0 0 0 eth1

6 6

Johnny's postfix/dovecot/squirrelmail/virus scanning + Centos4 Walk Through...
by Chris Mauritz 16 Aug '06

16 Aug '06

Is anyone mirroring Johnny's write up on this? As fate would have it, I've finally got some time to sit down and configure a spare box to be my new mail server and Johnny's site has been defaced again. :-( Sigh....I even checked to make sure it was up this morning, drove to the office so I could do everything from the terminal and my handy dandy roadmap is gone.... Any pointers to another source would be greatly appreciated. Best regards,

4 7

Customizing Gnome
by Alfred von Campe 16 Aug '06

16 Aug '06

This is not really CentOS specific, but I'm using and supporting Gnome on CentOS 4.3 systems, and there are a few Gnome issues that I haven't been able to resolve that I thought this list might be able to help with. On my home CentOS 4.3 system, which was originally a CentOS 3.X system (i.e., I ran Gnome from the same user account then as I do now), when I log in to the Gnome desktop, I only have a "menu bar" at the bottom of the screen. On the new 4.3 systems at work, I have a menu bar at the top of the screen and another bar at the bottom of the screen. Each one is about half the height of the one on my home system. It appears that some setting in a Gnome configuration file in my home directory must be causing this, but I haven't figure out which one. Any ideas? The next issue is that one of my users asked me if it was possible to add additional entries to the Applications menu. I haven't found anything in the on-line help to point me in the right direction. Finally, another user would like to be able to open up a Terminal window with the working directory set to whatever is currently shown in the Nautilus file browser, and again, I haven't found a way to do this. I do realize that you can drag a folder icon from a Nautilus window to a Terminal window and that it will past the path into the Terminal window which you can use as an argument to cd, but it's not as elegant as say right-clicking on a folder and picking "Open in Terminal Window". Any pointer to a fine manual to read are appreciated, as are outright solutions of course :-). Alfred

1 0

Running firefox on a remote host on centos-4
by Joshua Baker-LePain 16 Aug '06

16 Aug '06

Back in the day (read: before the latest firefox update), I used to be able to ssh to a remote box, run 'firefox -local', and have that box fire up its own firefox session even if I was running firefox on the system from I which I sshed. Those days seem to be gone. No matter what I try, if I've got firefox running on my local desktop, the remote firefox command just fires off another instance of the local firefox session. I've got several boxes running monitoring daemons reporting via http only to the localhost, so this was a handy feature for me. Is there any official way to get it back? If not, I guess I'll have to hack a 'localfirefox' script that doesn't do the nasty mozilla-xremote-client trick. Ah, progress... *sigh* -- Joshua Baker-LePain Department of Biomedical Engineering Duke University

10 17

Big Thanks to Johnny
by Chris Mauritz 16 Aug '06

16 Aug '06

As a result of following Johnny's handy dandy guide, the postfix/clamav/spamassassin/squirrelmail/dovecot install on one of my new 4.3 boxes was mostly painless. I've been using postfix and keeping in touch with Wietse since 98-ish so I'm quite comfy with postfix, but all this new fangled mail scanning stuff is a bit confusing to an old dog like me. :-) It seems to mostly work, although one of the components seems to have a hair trigger and flags known-clean binary attachments and dumps them into the "hold" bin. I guess my next task is to figure out how to corral that cruft into a "bulk" folder like gmail or figure out how to turn down the naughty threshold a bit. In any case, it probably would have taken me days to sort it all out without Johnny's guide. Thanks! I'm hoping to get things to the point that I'm comfortable downloading mail onto my little HTC Wizard (Cingular 8125) mobile windows/phone thing without worrying too much about catching a social disease. :) Cheers, Chris

3 2

Managing updates to non-centos packages
by Lucas Chan 16 Aug '06

16 Aug '06

Hi, I'm looking for some documentation (or advice) on how to best manage a -mostly- upstream binary compatible CentOS installation. I enabled the rpmforge repository in order to install a few packages not available in base/updates/centosplus. But, now when I do a "yum check-update" yum wants to update a whole stack of packages because it's found newer versions at rpmforge. Is there a way to tell yum to only pull updates from rpmforge for packages that were initially installed from rpmforge? I've been using the includepkgs directive with some success; although installing a package that has a dozen or so dependancies (from rpmforge) quickly makes this method seem not so elegant. Is there a better way? I'm going around in circles a bit with the official yum documentation. Obviously what I'm aiming for is to be as close to 100% binary compatible with the upstream provider as possible, and to also easily pull the latest updates for all my packages. Thanks in advance, I hope you're all having a good week. Regards, LC.

2 4

ntpd 4.2.0 'broadcastclient' broken
by Thomas Brown [pft] 16 Aug '06

16 Aug '06

I'm running latest CentOS 4.3 (2.6.9-34.0.2.ELsmp) and found that the included 'ntpd' 4.2.0a(a)1.1190-r will not accept NTP broadcast packets. There is a documented bug in ntpd 4.2.0 to this effect, resolved way back in 2004: https://ntp.isc.org/bugs/show_bug.cgi?id=267 Any chance someone can include a more recent version of 'ntpd' in the next CentOS RPM update distribution? The current stable version is 4.2.2p3, 8/5/2006. Thanks! -Tom

2 1

Bluetooth anyone?
by Robert Moskowitz 15 Aug '06

15 Aug '06

Can anyone give me some pointers for bluetooth? I see the bluetooth service is running. I plug my usb bluetooth adapter in. And nothing. And Kudzu does not discover the adapter Are there drivers I have to install?

1 0

Where to get last firefox for Centos please?
by Josep M. 15 Aug '06

15 Aug '06

Hello All. Before was in centosplus repository http://mirror.centos.org/centos/4.3/centosplus/i386/RPMS/ But now 1.5.0.2 is last release, I know that never versions have security updates, but don't know if Linux versions of firefox was affected or not. Thanks in advance --------------------------------- LLama Gratis a cualquier PC del Mundo. Llamadas a fijos y móviles desde 1 céntimo por minuto. http://es.voice.yahoo.com

3 2

Where is wpa_gui?
by Robert Moskowitz 15 Aug '06

15 Aug '06

I am seeing references to wpa_gui on the madwifi WiKi. But I do not see it in the Enterprise Redhat 4 directories with the other madwifi and wpa_supplicant rpms. only wpa_cli Anyone have information as to the whereabouts of this program?

1 0

Building a live CD and live PXE
by John Newbigin 15 Aug '06

15 Aug '06

I have updated my instructions on how to roll your own CentOS-4 Live CD. I also made a script which does it all for you. I have also got instructions on how to turn the Live CD into a PXE bootable Live version. All the details can be found here: http://www.byteclub.net/wiki/CentOS_Live John. -- John Newbigin Computer Systems Officer Faculty of Information and Communication Technologies Swinburne University of Technology Melbourne, Australia http://www.ict.swin.edu.au/staff/jnewbigin

5 13

RE: [CentOS] XFS and CentOS 4.3
by Kemal Bozdağ 15 Aug '06

15 Aug '06

Hi all, I'm looking turkish knowledge for centos... anybody help me please thank you very much Kemal Bozdağ Devri Alem Turizm Yatırım Danışmanlık A.Ş. Cumhuriyet Cad. No 217 Harbiye 34373 İSTANBUL T 0212 444 83 83 D 0212 368 17 03 F 0212 368 17 19 www.devrialem.com -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Johnny Hughes Sent: Tuesday, August 15, 2006 12:18 PM To: CentOS ML Subject: Re: [CentOS] XFS and CentOS 4.3 On Tue, 2006-08-15 at 14:13 +1000, Mark Strong wrote: > Hi All, after looking around for info on XFS(the filesystem) and its use > on CentOS and/or RHEL 4. There seems to be a lot of noise about 4K > Stacks (especially on linux-xfs(a)oss.sgi.com) > > So what is the best way to get XFS working with CentOS 4.3 ? And not > have something like this happening. > > A quote from the xfs list at sgi > >On Tue, 18 Jul 2006 at 10:29am, Andrew Elwell wrote > > > >using the 2.6.9-34 centosplus SMP kernel (3GHz P4 with > >hyperthreading enabled) > > > >what we normally (~once a day) is simply > > > >do_IRQ: stack overflow: 416 > >[<c0107a27>] > > >You don't want to use the XFS in the centosplus kernel. It has major > >known issues with 4K stacks (leading to overflows). Use the > >kernel-module-xfs (or somesuch) RPM instead, and you should have better > >luck. > > Do I need a kernel with 8K stacks? > > and is this > > http://dev.centos.org/centos/4/testing/i386/RPMS/kernel-module-xfs-2.6.9-34… > > the "kernel-module-xfs" RPM he was talking about (or equivalent for > `uname -r` equals 2.6.9-34.ELsmp). > > > Regards > Mark Strong > Personally, I would not use xfs on Linux ... maybe take a look here: http://distrowatch.com/weekly.php?issue=20060814 And see what several debain devel's say about XFS. RedHat says it is not stable enough to use in RHEL. I don't think everyone can be wrong. If you really want to use it, you can use the module you referenced above and our kernel. The standard RHEL kernel will not compile w/ anything except 4k stacks (that is how the CentOS kernel is released too) ... so if you want to do that, you'll need to figure it out.

1 0

Subversion: 400 Bad request error
by Jean Figarella 15 Aug '06

15 Aug '06

Here is my problem, On my network there is a subversion server to which everybody connects to and checks in/out code and documents. The workstations on the network are all based on Fedora core 3. And everybody's home directory is on a nfs share. This nfs share is mounted via the fstab. So no matter to which box a user logs in, his/her home dir is gonna be the same. Again, /home is a nfs mounted dir. Now, if I am on Fedora and I cd into /home/jean/dev/ for exmaple, and then I do svn update everything works fine. But if I do the same on centos 4.3; cd /home/jean/dev and then svn update, it gives me this error: bash-3.00$ cd ~/dev/sysadmin/ bash-3.00$ svn update svn: REPORT request failed on '/svn/code/!svn/vcc/default' svn: REPORT of '/svn/code/!svn/vcc/default': 400 Bad Request (https://subversion) bash-3.00$ bash-3.00$ cd /local/new_dev/sysadmin/ bash-3.00$ svn update At revision 30009. bash-3.00$ As you can see if I am still on centos and I create a /local on the *local drive*, then I can check out code or documents there and do everything else. Again, while I am on the nfs mounted dir it does not works, once I get out of the nfs dir then it works. Authentication is done via NIS, so uid and gid is the same under both distributions and computers. I also checked nfs access permision on the /etc/exports files and both computers or hosts have the same set of permissions. The subversion version on Fedora is 1.2.1 and in centos 4.3 it is 1.1.4. I have already tried upgrading to the same subversion version and to more recent ones, and that did not work. I am thinking that maybe this is not a subversion error because I can sucessfully use it from fedora 3 anf 5, and debian. I think it has to do with CentOS. I was looking to upgrade all of the FC3 boxes in my network to CentOS (about 30 of them), but with this problem Ill have to stick with Fedora. Any ideas? Thanks, Jean

3 4

Video Card Not Recognized Installing CentOS 3.7
by Corwin Burgess 14 Aug '06

14 Aug '06

I set up a new system that includes the following: ASUS AE8N-E Motherboard (NVIDIA nForce 4 Ultra Chipset) AMD Athlon 64 3800+ Processor OCZ PC3200 Gold Edition 1GB Memory EVGA GeForce 6600 PCI-Express x16 Video Card CentOS 3.7 The video card wasn't detected and I had to use the VESA driver (generic) when I installed CentOS 3.7. As this is the first time I've used a NVIDIA video card with Linux my knowledge is nil on this subject. After a quick review of the available video drivers that come with CentOS 3.7 I did a Google search and came up with this link: http://www.nvidia.com/object/linux_display_ia32_1.0-8762.html Linux Display Driver - IA32 Version: 1.0-8762 Operating System: Linux IA32 Release Date: May 22, 2006 I downloaded this driver and attempted to install it. When I run this # sh NVIDIA-Linux-x86-1.0-8762-pkg1.run to install the driver I'm told that I'm running an X server and that I need to exit X before installing the NVIDIA driver. After some experimenting I'm left with two questions: 1. How do I exit the X server to install this video driver? 2. How do I restart the X server when the driver is installed? Any other comments about this subject would be welcome. Thanks, Corwin Burgess

3 5

OT: Gigabit Rated Eth Cables - Cat 6 v. Gigatrue
by Karl Balsmeier 14 Aug '06

14 Aug '06

Hi, In populating our racks with several gigbit switches over the next few days, i'm wondering this: Is it over-engineering to seek out 550mhz rated cables over the typical Cat 6 250mhz rated cables? I've been advised (if you can a salesperson's words advice, heh.) that 250mhz is enough to handle traffic up to 10GB's. Should I just be happy with Cat6 for my GB switches or is is worth getting more into the details and seeking 550mhz-rated cable? Just curious what your experience is in migrating away from the typical 10/100 cables of yore to the spiffier world of gb rated traffic. -karlski __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

3 2

MadWiFi and WPA working only on base kernel, not plus kernel
by Robert Moskowitz 14 Aug '06

14 Aug '06

Interesting situation: First my system - HP NC4010, with Atheros pci mini card. Latest MadWiFi drivers from: http://atrpms.net/dist/el4/madwifi/ and wpa from: http://atrpms.net/dist/el4/wpa_supplicant/ I had just the madwifi working back in Jul at the IETF conference. But as open only. I had upgraded to the plus kernel, thinking it would get my internal SD card reader working (it hasn't but I have to follow up on that multi-drive usb drive thread). Once i upgraded to the plus kernel, kudzu could not see the Atheros card. I put everything on hold, but I had at it today. I discovered that if I boot with the standard kernel, it detects the Atheros card and I even got WPA-PSK working. But I boot with the plus kernel, and kudzu goes and removes the Atheros information from the /etc/sysconfig/hwconf file. So why doesn't the plus kernel, which is suppose to have all the drivers on that the upstream turned off not work with my Atheros card??????

1 0

RE: [CentOS] yum updates
by Bowie Bailey 14 Aug '06

14 Aug '06

Johnny Hughes wrote: > On Tue, 2006-08-08 at 14:42 -0400, Bowie Bailey wrote: > > Johnny Hughes wrote: > > > > > > Yum has no option to install an older file on top of a newer file > > > > > > An update probably installed the 34.0.2.EL-xxxx-devel file ... so 34.0.1 > > > will never install instead of the newer one. > > > > The installed package was older. I have already removed the package > > on the system I was working with, but here is an example from another > > one that is identical except for being x86_64 instead of i686. > > > > # yum info installed kernel-smp-devel > > Installed Packages > > Name : kernel-smp-devel > > Arch : x86_64 > > Version: 2.6.9 > > Release: 34.EL > > Size : 11 M > > Repo : installed > > > > # yum update kernel-smp-devel-2.6.9-34.0.1.EL > > Setting up Update Process > > Setting up repositories > > Reading repository metadata in from local files > > Could not find update match for kernel-smp-devel-2.6.9-34.0.1.EL > > No Packages marked for Update/Obsoletion > > > > I have verified that the package does exist in the repo: > > > > kernel-smp-devel-2.6.9-34.0.1.EL.x86_64.rpm > > > > It looks like a "yum update" will only update to the newest package > > version. > > yum install should install a newer ... but not necessarily the newest > package (I think) :) Based on the example I gave and other testing I have done, I believe that I am correct. I was unable to find any syntax that would let me select a newer-but-not-newest version for an update. -- Bowie

1 0

Several files's checksum change without reason
by kadafax 14 Aug '06

14 Aug '06

Hi list, I'm a bit worried here. On a server, Centos 4.3 fully-patched SELinux activated, Osiris (a decentralized scanner for files changes on distant servers) signaled me several changes on files who were not (at first sight) affected by a recent update (the list is below). Is there a logic explanation for those changes to happen ? The "rpm -Va" command does not output md5sum change for those files. compare time: Sat Aug 12 05:35:14 2006 host: server scan config: server (abcdefg) log file: no log file generated, see system log. base database: 56 compare database: 57 [211][server][cmp][/usr/bin][mtime][Sun Aug 6 04:02:20 2006][Sat Aug 12 04:02:22 2006] [213][server][cmp][/usr/bin][ctime][Sun Aug 6 04:02:20 2006][Sat Aug 12 04:02:22 2006] [204][server][cmp][/usr/bin/afs5log][checksum][b838bb6106250fdfd95ae8a7dc7fa95b8f762df4][a4c817dd8ca12449dc1a8bdf7f972c19aa3ffd7b] [206][server][cmp][/usr/bin/afs5log][inode][22423][22422] [213][server][cmp][/usr/bin/afs5log][ctime][Thu Jun 29 21:43:54 2006][Sat Aug 12 04:02:22 2006] [204][server][cmp][/usr/bin/dig][checksum][9d34eb65d61c9f43efc9b6141f727e7fdbb618bf][69d94a240e415b5f22a220fe71dcf865a9a5608c] [206][server][cmp][/usr/bin/dig][inode][25755][25759] [213][server][cmp][/usr/bin/dig][ctime][Thu Jun 29 21:43:48 2006][Sat Aug 12 04:02:21 2006] [204][server][cmp][/usr/bin/elinks][checksum][a62ab203cc0126aa846419ca25e2e2a6524ab58d][a66553759b6392f20b4f4c61d798585636feea9e] [206][server][cmp][/usr/bin/elinks][inode][26239][25433] [213][server][cmp][/usr/bin/elinks][ctime][Thu Jul 27 04:02:16 2006][Sat Aug 12 04:02:22 2006] [204][server][cmp][/usr/bin/host][checksum][f6e94925f133d1a9fe088da757ec60b493800adc][c47534726541474f7a1e1b7d23ec41ed44169118] [206][server][cmp][/usr/bin/host][inode][25133][22958] [213][server][cmp][/usr/bin/host][ctime][Thu Jun 29 21:43:51 2006][Sat Aug 12 04:02:21 2006] [204][server][cmp][/usr/bin/ipmi_ui][checksum][e106a461a907d0dec9f622919ddaed1a84552063][1bb99621c20d3e66f362a355d8d8e09340f748d6] [206][server][cmp][/usr/bin/ipmi_ui][inode][25973][21341] [213][server][cmp][/usr/bin/ipmi_ui][ctime][Thu Jun 29 21:43:53 2006][Sat Aug 12 04:02:22 2006] [204][server][cmp][/usr/bin/ipmish][checksum][f4f38f1f45f83d057b32deb2dbae9940f9d9dcc0][6e13d56f5457213de8302e08c311badcd49b1e46] [206][server][cmp][/usr/bin/ipmish][inode][25042][25755] [213][server][cmp][/usr/bin/ipmish][ctime][Thu Jun 29 21:43:50 2006][Sat Aug 12 04:02:21 2006] [204][server][cmp][/usr/bin/nslookup][checksum][7f7087ace44e1d14e984cd367df3b794cc1859a3][655c9d0f1328aa07f45a061825989809ae5b9885] [206][server][cmp][/usr/bin/nslookup][inode][25595][25317] [213][server][cmp][/usr/bin/nslookup][ctime][Thu Jun 29 21:43:51 2006][Sat Aug 12 04:02:21 2006] [204][server][cmp][/usr/bin/nsupdate][checksum][721695ed63aed8b55d6978b1384a0250d26d4d15][cac7585a8520d619d1a507b160e7a35651db3563] [206][server][cmp][/usr/bin/nsupdate][inode][21341][25780] [213][server][cmp][/usr/bin/nsupdate][ctime][Thu Jun 29 21:43:53 2006][Sat Aug 12 04:02:22 2006] [204][server][cmp][/usr/bin/openssl][checksum][c728d401456ee2003a329eb74e1ea3f008ddcf17][ddc4e323567fac0696dd9aeacea7402869837ff7] [206][server][cmp][/usr/bin/openssl][inode][22379][22423] [213][server][cmp][/usr/bin/openssl][ctime][Thu Jun 29 21:43:54 2006][Sat Aug 12 04:02:22 2006] [211][server][cmp][/usr/sbin][mtime][Fri Jul 28 12:45:00 2006][Sat Aug 12 04:02:23 2006] [213][server][cmp][/usr/sbin][ctime][Fri Jul 28 12:45:00 2006][Sat Aug 12 04:02:23 2006] [204][server][cmp][/usr/sbin/postalias][checksum][f338a0c58cfe235db579d20bea4326fab24f8cb3][c95b319b6cf1427f6c4bcce2c73d6a616b2df0c9] [206][server][cmp][/usr/sbin/postalias][inode][25433][25404] [213][server][cmp][/usr/sbin/postalias][ctime][Fri Jun 30 03:20:49 2006][Sat Aug 12 04:02:21 2006] [204][server][cmp][/usr/sbin/postcat][checksum][fc47304764134988383104ef304f60252dcae749][df49b7fa733d217bb7f0ccec4d7b24b1417f8d21] [206][server][cmp][/usr/sbin/postcat][inode][22626][25579] [213][server][cmp][/usr/sbin/postcat][ctime][Fri Jun 30 03:20:48 2006][Sat Aug 12 04:02:20 2006] [204][server][cmp][/usr/sbin/postconf][checksum][f9d25482431b3a5988e1025bb8abc5033a7517cb][86f6fb5dec3746aa6879a57f1acfac6dac31b85a] [206][server][cmp][/usr/sbin/postconf][inode][25780][25556] [213][server][cmp][/usr/sbin/postconf][ctime][Fri Jun 30 03:20:49 2006][Sat Aug 12 04:02:22 2006] [204][server][cmp][/usr/sbin/postdrop][checksum][6c46e31450d7ac78dce9e840310af5859517eeeb][4409c5e06ec3e9c4e95bbec1ac46e2127cc6e568] [206][server][cmp][/usr/sbin/postdrop][inode][25556][26239] [213][server][cmp][/usr/sbin/postdrop][ctime][Fri Jun 30 03:20:49 2006][Sat Aug 12 04:02:22 2006] [204][server][cmp][/usr/sbin/postkick][checksum][22f2b85a6e64a9828ed2d715464d4252177049f9][174444e88e6a6225a5be5cf91b96a79bffcee751] [206][server][cmp][/usr/sbin/postkick][inode][26373][25973] [213][server][cmp][/usr/sbin/postkick][ctime][Fri Jun 30 03:20:49 2006][Sat Aug 12 04:02:22 2006] [204][server][cmp][/usr/sbin/postlock][checksum][8f294ff26d9ae1cc310c66067eb681fc73d87adc][1615d52feaab658f03ebb2f8b48886998722a478] [206][server][cmp][/usr/sbin/postlock][inode][26379][22379] [213][server][cmp][/usr/sbin/postlock][ctime][Fri Jun 30 03:20:49 2006][Sat Aug 12 04:02:22 2006] [204][server][cmp][/usr/sbin/postlog][checksum][05e084e009f24c6dfec12569fee9c2244495fc0f][39974a2952de785a4eb348c21a01e6caa5c666be] [206][server][cmp][/usr/sbin/postlog][inode][24994][22800] [213][server][cmp][/usr/sbin/postlog][ctime][Fri Jun 30 03:20:50 2006][Sat Aug 12 04:02:21 2006] [204][server][cmp][/usr/sbin/postmap][checksum][61a735999ec1ad6d865fceec01f1c21c78627519][9208a41a41b480664cb0110b945b206b1621fc3d] [206][server][cmp][/usr/sbin/postmap][inode][25404][25310] [213][server][cmp][/usr/sbin/postmap][ctime][Fri Jun 30 03:20:49 2006][Sat Aug 12 04:02:21 2006] [204][server][cmp][/usr/sbin/postqueue][checksum][67e91f182df00d3f1f37a6877bb8d82447eeb705][1c8a80fe7622f6ab8d5b80d5758cd478b430ec68] [206][server][cmp][/usr/sbin/postqueue][inode][26375][26254] [213][server][cmp][/usr/sbin/postqueue][ctime][Fri Jun 30 03:20:49 2006][Sat Aug 12 04:02:22 2006] [204][server][cmp][/usr/sbin/postsuper][checksum][c22c5bb67ae4e726632d882ca500890ad517f8fe][0960a054e31de1e43fceb1a90657eb906cf441da] [206][server][cmp][/usr/sbin/postsuper][inode][21335][26257] [213][server][cmp][/usr/sbin/postsuper][ctime][Fri Jun 30 03:20:50 2006][Sat Aug 12 04:02:23 2006] [204][server][cmp][/usr/sbin/rpc.gssd][checksum][00d368ba2e50ccd8e7818b033ecc2e760482fb58][94cd32ba2be8b42250371bb0b320db885d80ec13] [206][server][cmp][/usr/sbin/rpc.gssd][inode][25317][25133] [213][server][cmp][/usr/sbin/rpc.gssd][ctime][Thu Jun 29 21:43:51 2006][Sat Aug 12 04:02:21 2006] [204][server][cmp][/usr/sbin/rpc.idmapd][checksum][c2e1487fa3a2b3c6920113794aa736cda1afbc23][f64318ecfebef5d775817c31f7125cd24e6c18fe] [206][server][cmp][/usr/sbin/rpc.idmapd][inode][26225][21340] [213][server][cmp][/usr/sbin/rpc.idmapd][ctime][Thu Jun 29 21:43:56 2006][Sat Aug 12 04:02:23 2006] [204][server][cmp][/usr/sbin/rpc.svcgssd][checksum][057aba4745e26e079cdcf3e25ff758a8fe8b99ac][6b5dbe025fee9c33e36143d7b77cd53a60395028] [206][server][cmp][/usr/sbin/rpc.svcgssd][inode][26814][25042] [213][server][cmp][/usr/sbin/rpc.svcgssd][ctime][Thu Jun 29 21:43:50 2006][Sat Aug 12 04:02:21 2006] [204][server][cmp][/usr/sbin/saslauthd][checksum][1aa8edafae567d6b6fb14f2eb49cdf4d830ca279][c3ebd0c10c4cfac0e0f85a91c7f679a149057026] [206][server][cmp][/usr/sbin/saslauthd][inode][26815][26256] [213][server][cmp][/usr/sbin/saslauthd][ctime][Thu Jun 29 21:43:51 2006][Sat Aug 12 04:02:22 2006] [204][server][cmp][/usr/sbin/sendmail.postfix][checksum][50825933dd6029af8aa3c3cb7611a6c5e39252bd][33cc264aec19f9fb6386b6addca71e114cea982a] [206][server][cmp][/usr/sbin/sendmail.postfix][inode][22800][25595] [213][server][cmp][/usr/sbin/sendmail.postfix][ctime][Fri Jun 30 03:20:48 2006][Sat Aug 12 04:02:21 2006] [204][server][cmp][/usr/sbin/smtp-sink][checksum][0cf6dac0dcb97d0910e843bf6a58ee8cec5278b1][3c3a2470a467d258e49eb17af3591fa8cbf20fe6] [206][server][cmp][/usr/sbin/smtp-sink][inode][25310][24994] [213][server][cmp][/usr/sbin/smtp-sink][ctime][Fri Jun 30 03:20:49 2006][Sat Aug 12 04:02:21 2006] [204][server][cmp][/usr/sbin/smtp-source][checksum][892d51b76c4685ac3917c0dad1e0a6fe7ce50cd1][46ad415f1b9dbf6d0761c1f22ee8f12a9f153108] [206][server][cmp][/usr/sbin/smtp-source][inode][22958][26253] [213][server][cmp][/usr/sbin/smtp-source][ctime][Fri Jun 30 03:20:48 2006][Sat Aug 12 04:02:21 2006] [204][server][cmp][/usr/sbin/stunnel][checksum][77254c773406659daab7d70cb190a82b3b45d4cd][561ea970463ccc9ef6ef7f78eb26681645c24a31] [206][server][cmp][/usr/sbin/stunnel][inode][21340][21335] [213][server][cmp][/usr/sbin/stunnel][ctime][Thu Jun 29 21:43:56 2006][Sat Aug 12 04:02:23 2006] Change Statistics: ---------------------------------- checksums: 27 SUID files: 0 root-owned files: 29 file permissions: 0 new: 0 missing: 0 total differences: 85 kfx.

3 5

AMD AM2 motherboard with supported SATA chipsets
by Feizhou 14 Aug '06

14 Aug '06

Hello all, Anybody know of any good and reliable AMD AM2 socket motherboards with SATA chipsets that support NCQ such as SIL3124, NForce 570 Ultra and offer six or more SATA channels?

1 0

proftpd problem
by nightrid3r 13 Aug '06

13 Aug '06

i installed proftpd on a fully updated centos 4.3 server. the servers sits on a private lan (192.168.1.*) when trying to acces the ftp (both from inside the lan and from outside trough a nat router) i cannot login port forwarding is ok as i can enteer both username and password error : 530 login incorrect any ideas? thanks

5 4

Problems with x86_64 kickstart
by Tracy R Reed 13 Aug '06

13 Aug '06

I have successfully set up a very nice kickstart install with the i386 version of CentOS 4.3 and it works great. I am using a custom kickstart script and the kernel and initrd from disc1/images. But when I try to duplicate this for a 64 bit setup (changing paths in my tftp server, ks.cfg, etc to point to the 64 bit stuff) it successfully tftp's everything just as it should (tethereal output follows): 0.000000 192.168.0.201 -> 192.168.0.7 TFTP Read Request, File: linux-install/pxelinux.0, Transfer type: octet 0.002503 192.168.0.201 -> 192.168.0.7 TFTP Read Request, File: linux-install/pxelinux.0, Transfer type: octet 0.039763 192.168.0.201 -> 192.168.0.7 TFTP Read Request, File: linux-install/pxelinux.cfg/01-00-0c-29-14-3a-c5, Transfer type: octet 0.045674 192.168.0.201 -> 192.168.0.7 TFTP Read Request, File: linux-install/msgs/boot.msg, Transfer type: octet 0.522788 192.168.0.201 -> 192.168.0.7 TFTP Read Request, File: linux-install/CentOS4.3/x86_64/vmlinuz, Transfer type: octet 2.487047 192.168.0.201 -> 192.168.0.7 TFTP Read Request, File: linux-install/CentOS4.3/x86_64/initrd.img, Transfer type: octet But then it never tries to get the ks.cfg. I am booting it with: label centos kernel CentOS4.3/x86_64/vmlinuz append initrd=CentOS4.3/x86_64/initrd.img ramdisk_size=7000 ksdevice=eth0 ks=http://192.168.0.7/network-install/ks.cfg.x86_64 (that last line should be all one line) in the /tftpboot/linux-install/pxelinux.cfg/01-00-0c-29-14-3a-c5 config file which it tftp's so it should know that it needs to get the ks.cfg.x86_64 file. I have this same setup working for i386 and it seems to work fine. I would guess there might be some difference in the initrd's but for some reason /linuxrc is a symlink to sbin/init which is a binary executable instead of a shell script. Anyone know why it isn't a shell? And why would my x86_64 kickstart be behaving different from my i386? Any help is very much appreciated! -- Tracy R Reed http://ultraviolet.org A: Because we read from top to bottom, left to right Q: Why should I start my reply below the quoted text

3 6

cpuspeed causing hangs on warm boots
by Dan Halbert 12 Aug '06

12 Aug '06

We are using CentOS-4.3 (x86_64) with Opteron servers, and noticed a problem with cpuspeed: If we reboot by doing "# reboot" or similar from a shell, the boot will hang not long after cpuspeed starts. The machine freezes: ctrl-alt-del doesn't work, and only pressing the reset button or a power cycle will restart the machine. If we reboot from power-up or by pressing the reset button, there is no hang, and the boot proceeds normally. Another strange thing is that only some boxes have this problem. Others, seemingly identical, reboot just fine. We've compared the BIOS settings, the CPU steppings, etc., and they seem to be identical. It's very odd. Maybe we're missing a BIOS setting, but we couldn't find a difference. We've fixed this just by turning off the cpuspeed service. It took some trial and error to figure out this was caused by cpuspeed. Misleadingly, the hang doesn't occur immediately after "Starting cpuspeed: [OK]" prints. Instead it occurs when trying to bring up a network interface, which is almost right after cpuspeed starting. With the original 2.6.9-34.ELsmp, it's at "Bringing up interface eth0". With the 2.6.9-34.0.2.ELsmp (and all other rpms updated), it hangs at "Bringing up loopback interface". This may just be a timing thing. We can just forget about cpuspeed, but if any of you have any advice, we'd appreciate it. Otherwise I am basically posting this to save diagnostic time for those who encounter these symptoms in the future. These are dual-core dual Opteron 265/270 servers with Tyan K8SD Pro motherboards. Thanks, Dan

2 1

RE: [CentOS] yum updates
by Bowie Bailey 12 Aug '06

12 Aug '06

Johnny Hughes wrote: > On Tue, 2006-08-08 at 13:08 -0400, Bowie Bailey wrote: > > Johnny Hughes wrote: > > > > > > (or you can remove the package with rpm -e kernel-smp-devel ... then > > > > > > yum install kernel-smp-devel-2.6.9-34.0.1.EL.i686 > > > > > > or > > > > > > yum install kernel-smp-devel-2.6.9-34.0.1.EL.x86_64 ) > > > > I found the updates repo shortly after sending the first email. I > > followed your second suggestion and was able to have "yum install" see > > it after removing the old package. > > > > Why is the "rpm -e" required? It seems like I should be able to do > > "yum update" and specify the package version as long as it is newer > > than what is currently installed. > > > > Yum has no option to install an older file on top of a newer file > > An update probably installed the 34.0.2.EL-xxxx-devel file ... so 34.0.1 > will never install instead of the newer one. The installed package was older. I have already removed the package on the system I was working with, but here is an example from another one that is identical except for being x86_64 instead of i686. # yum info installed kernel-smp-devel Installed Packages Name : kernel-smp-devel Arch : x86_64 Version: 2.6.9 Release: 34.EL Size : 11 M Repo : installed # yum update kernel-smp-devel-2.6.9-34.0.1.EL Setting up Update Process Setting up repositories Reading repository metadata in from local files Could not find update match for kernel-smp-devel-2.6.9-34.0.1.EL No Packages marked for Update/Obsoletion I have verified that the package does exist in the repo: kernel-smp-devel-2.6.9-34.0.1.EL.x86_64.rpm It looks like a "yum update" will only update to the newest package version. -- Bowie

2 1

yum not showing mirror with php/mysql
by Melinda Odom 11 Aug '06

11 Aug '06

Hi, I have had a new server installed using CentOS 4.3 and no matter what settings I try in the /etc/yum.repos.d/CentOS-Base.repo file I cannot get the CentOS mysql and php which are clearly listed in this mirror to even show up: http://mirror.centos.org/centos/4/os/i386/headers/ and only get this: Setting up repositories Reading repository metadata in from local files This is the CentOS-Base.repo listing: [base] #name=CentOS-$releasever - Base name=CentOS-4 - Base #mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch &repo=os #baseurl=http://mirror.centos.org/centos/$releasever/os/$basearch/ baseurl=http://mirror.centos.org/centos/4/os/i386/ gpgcheck=1 gpgkey=http://mirror.centos.org/centos/RPM-GPG-KEY-centos4 I have tried this with the same results: [base] name=CentOS-$releasever - Base #name=CentOS-4 - Base mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch& repo=os #baseurl=http://mirror.centos.org/centos/$releasever/os/$basearch/ #baseurl=http://mirror.centos.org/centos/4/os/i386/ gpgcheck=1 gpgkey=http://mirror.centos.org/centos/RPM-GPG-KEY-centos4 I have also tried both listings with the gpgcheck=1 and gpgkey=etc.. commented out # with no success. I appreciate any help with this. Sincerely, Melinda Odom Design Hosting, Inc. www.designhosting.biz 479-471-0891 -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.405 / Virus Database: 268.10.9/416 - Release Date: 8/10/2006

3 2

Server Hacked: Cpanel
by Timothy J Rice 11 Aug '06

11 Aug '06

cPanel or ANY server solution should never be deployed until it is locked down! We have been using cPanel for years as well as Hsphere and Plesk for both linux and windows. They all are hackable if not locked down and hardened. We use Trustix, RHEL & CentOs for our Linux environments. The more you allow (in cPanel or any control panel), the less secure. Fix the tmp directory BEFORE you plug it in to the network. File there should NOT be executed by ANYONE. About 3 and a half years ago, we learned this the hard way and every index.* file on a particular server that had cpanel installed was defaced (RH 7 I believe). This was NOT a cPanel issue. It was a combination of a PHP exploit, tmp not being secured, and my lack of knowledge. cPanel has a utility to secure the tmp directory. On a machine that has cPanel installed type the below command: /scripts/securetmp I have never had a problem with this sort of attack after I secured the tmp directory. I also recommend not giving shell access by default. Only give it out to people who need it. Make it a little difficult for the end user. Ask them them to fax a copy of their DL and/or copy of the first page of a utility bill. Sure a bad person can create these documents, but it typically is not worth their time. Also if a user needs ssh bad enough, they will send this info in and they probability will be good users. It also lets them know that you are "security conscious". You can also install a keystroke auditing system such as eas / easd so you can review ssh sessions should you suspect something. If you grant a user ssh rights, reset the end users password to a secure password and let them know that they should maintain a strong password. If their account is bruteforced due to a weak password, cancel their account, as they are too much of a risk for you (or ask them to go dedicated). Install some type of BFD (Brute Force Detection) software. I like http://www.rfxnetworks.com/bfd.php (free and easy to install) Disable things like gcc, wget, lynx . . .etc. I also like to chattr +i files. A very good application is another product from rfnetworks called LES http://www.rfxnetworks.com/les.php Disable root direct login via ssh. Block all incoming traffic except needed ports in iptables (22, 80, 443, 21, . . . ). I like to block all outgoing traffic to all users except for root with the exception of common API's such as Domain registration, Credit Card Gateway etc.) Enable suexec and php safemode if possible. Also disable the mod_dl and other php modules known to have caused problems. If you have users who need every module known to man, setup a server with the php modules needed and only place these users on these systems who specifically need them. Why introduce more risk to users who do NOT need all these features? Install mod_evasive to help against Ddos as well as Mod Security. Run updated rootkit checkers (rkhunter & chkrootkit) daily. This is not perfect, but it will help determine a systems integrity. If a machine has been hacked or owned - you MUST setup a new machine and restore the non binary files to the new machine. This is the sad truth, but you never know what is hiding on a machine after its hacked (owned). Do NOT allow cPanel to automatically update your software or you are asking for problems. Have a cheap server or virtual server with cpanel running on it and update that "test" machine and make sure that nothing breaks. We have 50 beta users who we give hosting to. We place on these users on beta (test) machines. The beta users are aware that these machines are at greater risk than the production machines and they are 100% responsible for backups. It is worth giving away 50 free accounts and place them on test beta platforms so that we can actually simulate a "real" environment while testing cpanel upgrades. If testing is successful, then roll out in production. cPanel has broke many things in the past that were easily fixed by their support staff but why take chances??? I recommend the above measures for any system (cPanel installed or not). cPanel is the most popular control panel for Linux. It allows the end user to control their site and cpanel ties into many billing systems so account provisioning can be automatic. We use it because it offers features that end users demand. Without it, we can't compete . . . so we have to adapt by securing the system as much as possible. Tim Rice Host It Now Networks http://hostitnow.com/ Timothy Rice Host It Now Networks http://hostitnow.com

1 0

Server Hacked: Cpanel
by Karl Balsmeier 11 Aug '06

11 Aug '06

Hi, I have servers of mixed OS, some Centos, some Fedora, and after the flame war that erupted last week (where I said basically nothing and just watched), my server was hacked by this team of hackers, actually their friend: http://www.sibersavascilar.com/ This made Karanbir's statements about mixing Cpanel and Centos (any maybe any linux distro) come true very quickly. If one of the top package maintainers says this, it bears weight. I'd like to know more about this subject, specifically on the package front, for security's sake. Karanbir, can you restate the issues with Cpanel please? They are trying to recommend CentOS as the OS to install on, and even that Linux Journal article did -and before anyone else wastes their time, -let's get everything out in the open so that there's a pipermail archive trail for future folks 'googling' for info later on pros/cons of using, or avoiding use of, non-complimentary projects/technologies. Is the issue that both parties maintain separate packaging/updating regimes and have little or no successful communication as far as keeping thing secure and up to date? That seemed to be what you said, -and if I had the old email, i'd just run with it's advice. Also, can you list the IRC channels you mentioned last time that contain the various hackers bragging about freshly broken Cpanel/Centos builds? Freenode right? Any others? I've been on IRC back when BITNET was still active and there wasn't even mosaic yet, but have always avoided it after 1992 because of hackers 'sniffing for future targets'. William, Jim, Johnny, -any comments are truly welcome, -anyone really. Basically i'd like to help stop or curtail the 'open season' this set of circumstances is creating for hackers, -I have already decided to avoid Cpanel on Centos as it is, -my server that was hacked with Cpanel was not a Centos box, and those that have it, have been shut down. The server next to it was *also* hacked, and that *was* a centos machine, with only a yum update from 3 days prior. Is it really recommeded that I run yum update evry night then? It was stunning to have a box up for 3 days and then get owned so fast. Luckily this was for my personal business entity, and not my full-time job, which indeed does run 50-70 Centos servers behind layers of firewalls and other protections, and *no* commercial products, only centos packages by Dag or Karanbir. To anyone in the mood for scolding, please hold off OK? I'm not in the mood for overbearing attitudes right now. I'm trying to run a business and seek solid answers. I see Centos as a reliable alternative to commercial offerings *if* you pay careful attention to what the senior staff and relevant discussion groups advise. As for the team of hackers, if anyone knows who this is, or can point out who they might be or how to ban them, -that is also most welcome. Hacked By Crackers_Child For Peace DONT WAR ! Greetz : X_Alperen_X, XTech Inc , Metlak, Root_Mor,Dr Hacker, Dr.Jr7 ,Dr,Dermann,Code_Power,CukurOvalý ALL My Friends And All SiberSavascilar.Com Members ! --------------------------------- Stay in the know. Pulse on the new Yahoo.com. Check it out.

9 23

Lang packs (extensions) not found with firefox-1.5.0.5-0.el4.1.centos4 ?
by Vincent Knecht 11 Aug '06

11 Aug '06

Hello, with CentOS 4.3 (i386), after updating firefox to 1.5 from update repo, I can't get it to have menu in my native language (french), altough french language pack appears in extension list. I've tried many things, like moving it on top/down, disabling/removing other languages packs, creating a fresh new user, and reinstalling firefox, to no avail (yes, I restarted firefox between these attempts). I also searched in upstream's bugzilla, and didn't find any issue for v4 & firefox... Finally, launching firefox through strace, I find that it searches for /usr/lib/firefox-1.5.0.5/chrome/fr-FR.jar and can't find it, since french lang pack seems to be /usr/lib/firefox-1.5.0.5/extensions/langpack-fr(a)firefox.mozilla.org/chrome/fr.jar I filed the issue in CentOS bugtracker: http://bugs.centos.org/view.php?id=1442 PS: if that matters, I'm using KDE from kde-redhat repo...

1 0

Multi-Card reader (SD, MMC, etc) and CONFIG_SCSI_MULTI_LUN kernel option in 34.0.2. Workaround
by J.J. Garcia 11 Aug '06

11 Aug '06

Hi folks, Im trying to get a multi-card reader on centos (SD, MMC, and so, 4 card slots) and i have read (http://www.cs.sfu.ca/~ggbaker/personal/cf-linux) that CONFIG_SCSI_MULTI_LUN should be enabled on kernel (=Y) but current 34.0.2 doesn't have it enabled by default, is there any particular reason to not be enabled? By the other hand i've also tweak the /etc/grub.conf file to boot the kernel with max_luns=32 and results are the same, only scsc lun=0 is recognized. At the same time using the workaround mentioned in the link pasted b4 regarding to modify the /etc/modules.conf to include 'options scsi_mod max_scsi_luns=8' gives the same results, no detection at all for the card slots. [root@sparkbox ~]# cat /proc/bus/usb/devices T: Bus=01 Lev=01 Prnt=01 Port=06 Cnt=03 Dev#= 7 Spd=480 MxCh= 0 D: Ver= 2.00 Cls=00(>ifc ) Sub=00 Prot=00 MxPS=64 #Cfgs= 1 P: Vendor=0644 ProdID=0200 Rev= 4.00 S: Manufacturer=TEAC S: Product=CA-200 S: SerialNumber=0000020307B2 C:* #Ifs= 1 Cfg#= 1 Atr=80 MxPwr=500mA I: If#= 0 Alt= 0 #EPs= 2 Cls=08(stor.) Sub=06 Prot=50 Driver=usb- storage E: Ad=02(O) Atr=02(Bulk) MxPS= 512 Ivl=125us E: Ad=82(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms and /var/log/dmesg still shows: <...> scsi3 : SCSI emulation for USB Mass Storage devices Vendor: TEAC Model: USB HS-CF Card Rev: 4.00 Type: Direct-Access ANSI SCSI revision: 02 Attached scsi removable disk sdc at scsi3, channel 0, id 0, lun 0 USB Mass Storage device found at 7 <...> Instead of (if i understand well for this scsi3 line) after a [root@sparkbox]# sg_scan -i (it should show) /dev/sg2: scsi3 channel=0 id=0 lun=0 [em] type=0 Generic STORAGE DEVICE 0128 [wide=0 sync=0 cmdq=0 sftre=0 pq=0x0] /dev/sg3: scsi3 channel=0 id=0 lun=1 [em] type=0 Generic STORAGE DEVICE 0128 [wide=0 sync=0 cmdq=0 sftre=0 pq=0x0] /dev/sg4: scsi3 channel=0 id=0 lun=2 [em] type=0 Generic STORAGE DEVICE 0128 [wide=0 sync=0 cmdq=0 sftre=0 pq=0x0] /dev/sg5: scsi3 channel=0 id=0 lun=3 [em] type=0 Generic STORAGE DEVICE 0128 [wide=0 sync=0 cmdq=0 sftre=0 pq=0x0] But actually, [root@sparkbox ~]# sg_scan -i [root@sparkbox ~]# (shows nothing) And [root@sparkbox ~]# sg_map Stopping because no sg devices found Strange, could not find device /dev/sda mapped to sg device?? Strange, could not find device /dev/sdb mapped to sg device?? Strange, could not find device /dev/sdc mapped to sg device?? Strange, could not find device /dev/sdd mapped to sg device?? Looking at SCSI: [root@sparkbox ~]# cat /proc/scsi/scsi Attached devices: Host: scsi0 Channel: 00 Id: 00 Lun: 00 Vendor: ATA Model: HDS728080PLA380 Rev: PF2O Type: Direct-Access ANSI SCSI revision: 05 Host: scsi2 Channel: 00 Id: 00 Lun: 00 Vendor: Genesys Model: USB to IDE Disk Rev: 0002 Type: Direct-Access ANSI SCSI revision: 02 Host: scsi3 Channel: 00 Id: 00 Lun: 00 Vendor: TEAC Model: USB HS-CF Card Rev: 4.00 Type: Direct-Access ANSI SCSI revision: 02 Host: scsi4 Channel: 00 Id: 00 Lun: 00 Vendor: Model: USB DISK Pro Rev: 1.1b Type: Direct-Access ANSI SCSI revision: 02 And finally doing the last workaround found in the link from Greg Baker article for my scsi3 chain: [root@sparkbox ~]#echo >/proc/scsi/scsi "scsi add-single-device 3 0 0 1" [root@sparkbox ~]#echo >/proc/scsi/scsi "scsi add-single-device 3 0 0 2" [root@sparkbox ~]#echo >/proc/scsi/scsi "scsi add-single-device 3 0 0 3" Solves the identification: [root@sparkbox ~]# cat /proc/scsi/scsi Attached devices: <...> Host: scsi3 Channel: 00 Id: 00 Lun: 00 Vendor: TEAC Model: USB HS-CF Card Rev: 4.00 Type: Direct-Access ANSI SCSI revision: 02 Host: scsi3 Channel: 00 Id: 00 Lun: 01 Vendor: TEAC Model: USB HS-xD/SM Rev: 4.00 Type: Direct-Access ANSI SCSI revision: 02 Host: scsi3 Channel: 00 Id: 00 Lun: 02 Vendor: TEAC Model: USB HS-MS Card Rev: 4.00 Type: Direct-Access ANSI SCSI revision: 02 Host: scsi3 Channel: 00 Id: 00 Lun: 03 Vendor: TEAC Model: USB HS-SD Card Rev: 4.00 Type: Direct-Access ANSI SCSI revision: 02 Now, even without update the udev rules with a new rule It seems to work after inserting the SD (1GB card) card on card-reader, from dmesg: <...> SCSI device sdg: 2012160 512-byte hdwr sectors (1030 MB) sdg: Write Protect is off sdg: Mode Sense: 23 00 00 00 sdg: assuming drive cache: write through SCSI device sdg: 2012160 512-byte hdwr sectors (1030 MB) sdg: Write Protect is off sdg: Mode Sense: 23 00 00 00 sdg: assuming drive cache: write through sdg: sdg1 <...> Mounting the correct SD card on fstab and only remaining to update permissions/udev or pamconsole (not sure where) to get RW access for user space. Hope it helps and just to clarify for mentionned CONFIG_SCSI_MULTI_LUN option in kernel. Jose.

3 7

CentOS-announce Digest, Vol 18, Issue 10
by centos-announce-request＠centos.org 11 Aug '06

11 Aug '06

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2006:0612 Important CentOS 4 i386 krb5 - security update (Johnny Hughes) 2. CESA-2006:0612 Important CentOS 4 x86_64 krb5 - security update (Johnny Hughes) 3. CESA-2006:0619 Moderate CentOS 3 i386 httpd - security update (Tru Huynh) 4. CESA-2006:0619 Moderate CentOS 3 x86_64 httpd - security update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Thu, 10 Aug 2006 12:30:52 -0500 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2006:0612 Important CentOS 4 i386 krb5 - security update To: CentOS-Announce <centos-announce(a)centos.org> Message-ID: <1155231052.3805.77.camel(a)myth.home.local> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2006:0612 https://rhn.redhat.com/errata/RHSA-2006-0612.html The following updated files have been uploaded and are currently syncing to the mirrors: i386: krb5-devel-1.3.4-33.i386.rpm krb5-libs-1.3.4-33.i386.rpm krb5-server-1.3.4-33.i386.rpm krb5-workstation-1.3.4-33.i386.rpm src: krb5-1.3.4-33.src.rpm

1 0

RE: [CentOS] OT: Measure 2U Server Amp Usage
by Mark Schoonover 10 Aug '06

10 Aug '06

Robert Moskowitz wrote: > Karl R. Balsmeier wrote: >> Hi, >> >> Running a bunch of CentOS servers on 2U supermicro equipment, >> usually with 8 drives on Adaptec SmartRAID V or LSI Megaraid. >> >> In designing a rack in a data center, the question arises as to how >> to measure the amperage the server uses, prior to investing in power >> drops that actually do that for you, even remotely, for about >> $260.00-300USD per unit. This number is the important one these >> days in determining rack/datacenter design. >> > I use the Radio Shack Amp meter. It has an inductance jaw that you > put over ONE wire to the device. This means you need a place on the > circuit that separates the hot and neutral wires. I have a special > rig: Mail plug - separate wires - Female receptacle. Of course I > have to unplug the device, put this rig in, test, then put things > back. > That's one way to measure the current, then multiply by the input voltage to get watts. I think a better way is to determine the max current that the system will use. If you have a 500 watt PSU, assume 85% efficiency, then by using the input voltage you can calculate the max input power the server is going to draw. I'd design the datacenter to support the max power level the server will need, not just what it takes to run the thing. Start up will draw the most power, approaching the max power output of the PSU, then it'll lower some once all the drives are up and spinning. It's somewhat an art, but you can get reasonably close to the entire power draw of your rack. In a pinch, I've added up all the UPSes and told the electrician 12000VA. They'll know what to do with that number. HTH Mark

5 5

Help...about migration from redhat to centos in dell poweredge 2800
by Roberto Barrientos Molina 10 Aug '06

10 Aug '06

guau..first, i never think the response about my post, really really thanks all, i am not alone here..:-). ok, i send a second message with the other method than i don´t know if result. first, i am install the redhat 3 AS then i will apply the next sequence: "Import GPG Keys: rpm --import http://mirror.centos.org/centos/3.7/os/i386/RPM-GPG-KEY-CentOS-3 Install yum: rpm -Uvh --nodeps http://mirror.centos.org/centos/3.7/os/i386/RedHat/RPMS/yum-2.0.8-1.centos.… http://mirror.centos.org/centos/3.7/os/i386/RedHat/RPMS/centos-yumconf-1-11… http://mirror.centos.org/centos/3.7/os/i386/RedHat/RPMS/centos-yumcache-3.1… Update Release information: rpm -e redhat-release-3ES-13.6.2 && rpm -ivh http://mirror.centos.org/centos/3.7/os/i386/RedHat/RPMS/centos-release-3-7.… then just: yum upgrade " then i will hope upgrade to centos 4 :-) if result. in relations to my machine config is: Dell Power edge 2800 ,PROCESSOR, 80546K, 3.0G, 2M, XEON IRWINDALE, 4 scsi disk, 4 ethernet Gigabit. i have the software server assistant and open manage. i install de redhat 3 with the server assistant and configure RAID 5 by hardware (i select raid 5 after of read any docs...i hope my selecction was correct?). thanks all guys and thank to traduce me Guillermo "guau.. que respuesta, estoy emocionado, no estoy acostumbrado a la cooperacion entre pares en mi institucion...gracias" regards, roberto.-

4 3

centos with qemu and kqemu
by Jerry Geis 10 Aug '06

10 Aug '06

Any one using qemu with centos and bridged network mode? I am running qemu as: qemu-system-x86_64 -hda centos4.i386.img -boot c -net nic -net tap I am still getting a 10.X.X.X address instead of a DHCP address on my local network. I have the /etc/qemu-ifup script as: #!/bin/sh sudo /sbin/ifconfig $1 0.0.0.0 promisc up sudo /usr/sbin/brctl addif br0 $1 sleep 2 which does run.... I have kqemu running and it is pretty zippy. I just cant get bridged network to work. I am running centos 4.3 on x86_64 (amd 4800+) and trying to emulate and centos4 i386 image. The image works its just not on my network. Jerry

1 0

RE: [CentOS] Server Hacked: Cpanel
by Bowie Bailey 10 Aug '06

10 Aug '06

William L. Maltby wrote: > On Wed, 2006-08-09 at 17:26 -0400, Bowie Bailey wrote: > > William L. Maltby wrote: > > > The solution to that is a secure password manager. > > http://passwordsafe.sourceforge.net/ > > > > You just have to remember the one password and the program will track > > all of the rest for you. This way you can use gibberish passwords for > > important sites such as online banking and you don't have to remember > > them or write them down anywhere. The password database is encrypted > > using Twofish and SHA-256. > > I don't care for that concept. One password cracked gives access to all. > I would rather take the admitted risk of writing them down (in *my* > scenario, rather secure at home) and referring to that when needed. True, but if you make that one a good one and use it only for that purpose, the risks are minimal. > The ones I use frequently will be remembered. I don't use them on the > road at all, so that's reasonable. I prefer to not have passwords stored > on computers any more that necessary. I don't think it's a problem to have the passwords stored on the computer. Just make sure they're securely encrypted. > No I'll admit I fudge a *small* amount. Those who have access in my home > know windows only, not Linux and I have no shares with them. They are > TDU (Typical Dumb Users) and don't know how to use SSH, FTP, ... or even > how to find my comps on the LAN (now SMB node or Domain Controllers > here). > > > > The only real downside is that if you don't have access to the > > password manager, you don't have access to anything else either. > > Well, I do consider the one password exposes all a downside. But I also > grant that it is more secure than many alternatives. You know what they say: "You can put all your eggs in one basket, but WATCH THAT BASKET!" As long as you are extremely careful with the access password, you shouldn't have a problem. I will take this risk for the advantage of being able to easily use highly secure passwords. For example, my online banking password is a sequence of random characters. I don't have to remember it or type it. If I didn't have a tool like this, I would have to either write it down somewhere or use a less-secure password that I could remember. > > Oh...and don't forget backup the password database! :) > > I'm finalizing my LVM-based snapshots with aging of deleted files right > now, so I will be covered. That works, but a simple backup copy to a floppy disk or external hard drive works as well. > Thanks for the URL. I will go take a look. My mind is not yet > rusted closed even if (... *when*) I think I'm right! :-) The creator of this tool is a rather paranoid security expert. I figure if he is willing to use it, it's worth a look. http://schneier.com/ (note that the Password Safe information on that page refers to an older version that used Blowfish rather than Twofish) -- Bowie

2 1

undelete
by Jerry Geis 10 Aug '06

10 Aug '06

I just removed a bunch of Personal stuff I should not have. Is there anyway to undelete??? Jerry

7 11

MD raid tools ... did i missed something?
by "Petr \"Qaxi\" Klíma" 10 Aug '06

10 Aug '06

Hi I have a degraded array /dev/md2 ===================================================================== $ mdadm -D /dev/md2 /dev/md2: Version : 00.90.01 Creation Time : Thu Oct 6 20:31:57 2005 Raid Level : raid5 Array Size : 221953536 (211.67 GiB 227.28 GB) Device Size : 110976768 (105.84 GiB 113.64 GB) Raid Devices : 3 Total Devices : 2 Preferred Minor : 2 Persistence : Superblock is persistent Update Time : Thu Aug 10 07:32:45 2006 State : dirty, degraded Active Devices : 2 Working Devices : 2 Failed Devices : 0 Spare Devices : 0 Layout : left-symmetric Chunk Size : 256K Number Major Minor RaidDevice State 0 0 0 -1 removed 1 8 21 1 active sync /dev/sdb5 2 8 37 2 active sync /dev/sdc5 UUID : 4c77d8a9:3952f00b:876ce47a:a65d5522 Events : 0.12152695 ===================================================================== I need to add the 3rd partition, so I open documentation http://www.centos.org/docs/4/html/rhel-isa-en-4/s1-storage-rhlspec.html#S2-… (I know the RTFM ;-) But in chapter 5.9.9.2. they want tool caled "raidhotadd" What was my wonder when it is not included in CentOS 4.3 ===================================================================== # yum provides raidhotadd Searching Packages: Setting up repositories update 100% |=========================| 951 B 00:00 base 100% |=========================| 951 B 00:00 local 100% |=========================| 951 B 00:00 Reading repository metadata in from local files primary.xml.gz 100% |=========================| 71 kB 00:00 update : ################################################## 195/195 Added 0 new packages, deleted 2 old in 0.32 seconds Importing Additional filelist information for packages filelists.xml.gz 100% |=========================| 697 kB 00:00 update : ################################################## 195/195 Added 32 new packages, deleted 0 old in 2.51 seconds No Matches found ===================================================================== How can I repair the MD device? -- Petr Klíma e-mail: qaxi(a)seznam.cz

4 4

CentOS-announce Digest, Vol 18, Issue 9
by centos-announce-request＠centos.org 10 Aug '06

10 Aug '06

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2006:0612 Important CentOS 4 s390(x) krb5 - security update (Pasi Pirhonen) 2. CESA-2006:0614-4: Low CentOS 2 i386 tzdata enhancement update (John Newbigin) ---------------------------------------------------------------------- Message: 1 Date: Wed, 9 Aug 2006 16:28:36 +0300 From: Pasi Pirhonen <upi(a)centos.fi> Subject: [CentOS-announce] CESA-2006:0612 Important CentOS 4 s390(x) krb5 - security update To: centos-announce(a)centos.org Message-ID: <20060809132836.GD18903(a)centos.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2006:0612 https://rhn.redhat.com/errata/RHSA-2006-0612.html The following updated files have been uploaded and are currently syncing to the mirrors: s390: updates/s390/RPMS/krb5-devel-1.3.4-33.s390.rpm updates/s390/RPMS/krb5-libs-1.3.4-33.s390.rpm updates/s390/RPMS/krb5-server-1.3.4-33.s390.rpm updates/s390/RPMS/krb5-workstation-1.3.4-33.s390.rpm s390x: updates/s390x/RPMS/krb5-devel-1.3.4-33.s390x.rpm updates/s390x/RPMS/krb5-libs-1.3.4-33.s390x.rpm updates/s390x/RPMS/krb5-server-1.3.4-33.s390x.rpm updates/s390x/RPMS/krb5-workstation-1.3.4-33.s390x.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

Wifi wpa_supplicant with atheros successes or failures?
by Max H. 10 Aug '06

10 Aug '06

I remember being a small part of and following this thread a few months ago. <http://lists.centos.org/pipermail/centos/2006-May/065091.html> I've been attempting a go at getting wpa_supplicant running on CentOS 4.3 and haven't had much luck. I'm assuming my failure is my lack of knowledge on the subject, but anyways. First, my normal setup is as follows: IBM Thinkpad R40 Ethernet controller: Atheros Communications, Inc. AR5211 802.11ab NIC (rev 01) Works great and has been working great for over a year now off the madwifi drivers at <http://atrpms.net/dist/el4/madwifi/>. I've done a bit of Googling the past few days as well. One link I follow it mentions about CentOS/RHEL not supporting wpa_supplicant in the current kernel, and that you'd have to recompile your kernel. Other threads I've read of successes, but usually not much detail is provided and it's done so through compiling the drivers and what not. My question is: Has anyone had success off the RPMs on atrpms? I've attempted a shot at it with these: <http://atrpms.net/dist/el4/wpa_supplicant/> and haven't had much luck. It installs after I get a few dependencies and I can configure the .conf file, but after that it just gets really upset about doing anything. Perhaps I can't get it working due to confusion of the packages that I need or don't need. Currently, I'm running the kernel module packages from the madwifi section at atrpms. Any thoughts, help, or comments from the peanut gallery are greatly appreciated. :) Thanks! Max

2 2

CentOS 4 and laptop and wifi works
by jim stockford 10 Aug '06

10 Aug '06

I want to buy a laptop and install CentOS 4 on it and have the wifi work when I'm done. (Hoping for reasonable specs: 2GHz, 40GB drive, 1/2 to 1 GB RAM, CD-ROM, light and thin, 13 or 14 inch screen....) Any recommendations?

10 30

Least painful MySQL 4.1 -> 5 upgrade on CentOS 4.1
by Morten 09 Aug '06

09 Aug '06

Hi. I've happily been running MySQL 4.1 on my CentOS 4.1 x86_64 server. But I need to upgrade to MySQL 5. Any recommendations on how to accomplish this without too much pain? I guess I'll need to get RPMs from the MySQL website. Br, Morten

5 4

RE: [CentOS] Server Hacked: Cpanel
by Bowie Bailey 09 Aug '06

09 Aug '06

William L. Maltby wrote: > > Same here, even in my own net (I have grandchildren: they can be > "snoopy"). The darn trouble is trying to remember them all, including > those for different 'net sites; all have a different password. The solution to that is a secure password manager. http://passwordsafe.sourceforge.net/ You just have to remember the one password and the program will track all of the rest for you. This way you can use gibberish passwords for important sites such as online banking and you don't have to remember them or write them down anywhere. The password database is encrypted using Twofish and SHA-256. The only real downside is that if you don't have access to the password manager, you don't have access to anything else either. Oh...and don't forget backup the password database! :) -- Bowie

2 1

Connecting to WiFi private networks
by Guillermo Garron 09 Aug '06

09 Aug '06

Hi all, I am using NetworManager and NetworkManagerInfo in my Laptop, to connect to WiFi networks. It works great with open DHCP networks, but now i am in a Hotel wich gave me a login/password to connect to its network, and NetworkManagerInfo sees the WiFi network as private and opens a dialog windows but only asking a passphrase or HEX key, no login / password options. what can i do? maybe use anoter application rather than NetworkManager? XP works great in that Hotel. :( regards, Guillermo

1 1

Where's rpmbuild ???
by Nicholas Anderson 09 Aug '06

09 Aug '06

Hi All, hi all, dont know if there's something wrong with my system or what, but i can't find "rpmbuild" command ... is it a package separated from rpm? I dont think so cause there's no rpmbuild package in yum .... neither in rpmforge repositories .... the strange thing is that my system has the manuals for it, but the it doesnt have the binary (command itself).... I was following instructions in a manual, and it asks me to do a "rpmbuild --rebuild package", but i dont know how to do it if a dont have rpmbuild ..... :-( -- Nicholas Anderson Administrador de Sistemas Unix LPIC-1 Certified Rede Fiocruz e-mail: nicholas(a)fiocruz.br

4 6

openldap 2.3.x?
by Aleksandar Milivojevic 09 Aug '06

09 Aug '06

Hi, Just wondering, has anybody thought of making openldap 2.3.x part of centos plus? I had some problems with openldap 2.2.x, and all the answers I got about it were to upgrade to 2.3. It seems 2.2 is dead release nowdays, and openldap people do not recommend using it for production anymore. -- See Ya' later, alligator! http://www.8-P.ca/

4 6

CentOS-announce Digest, Vol 18, Issue 8
by centos-announce-request＠centos.org 09 Aug '06

09 Aug '06

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2006:0618-01: Important CentOS 2 i386 apache security update (John Newbigin) 2. CESA-2006:0612 Important CentOS 4 ia64 krb5 - security update (Pasi Pirhonen) 3. CESA-2006:0612 Important CentOS 4 axp krb5 - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Wed, 09 Aug 2006 09:33:33 +1000 From: John Newbigin <jnewbigin(a)ict.swin.edu.au> Subject: [CentOS-announce] CESA-2006:0618-01: Important CentOS 2 i386 apache security update To: centos-announce(a)centos.org Message-ID: <44D91F4D.30707(a)ict.swin.edu.au> Content-Type: text/plain; charset=us-ascii; format=flowed The following errata for CentOS-2 have been built and uploaded to the centos mirror: RHSA-2006:0618-01 Important: apache security update Files available: apache-1.3.27-11.ent.c2.1.i386.rpm apache-devel-1.3.27-11.ent.c2.1.i386.rpm apache-manual-1.3.27-11.ent.c2.1.i386.rpm More details are available from the RedHat web site at https://rhn.redhat.com/errata/rh21as-errata.html The easy way to make sure you are up to date with all the latest patches is to run: # yum update -- John Newbigin Computer Systems Officer Faculty of Information and Communication Technologies Swinburne University of Technology Melbourne, Australia http://www.ict.swin.edu.au/staff/jnewbigin ------------------------------ Message: 2 Date: Wed, 9 Aug 2006 13:57:14 +0300 From: Pasi Pirhonen <upi(a)centos.fi> Subject: [CentOS-announce] CESA-2006:0612 Important CentOS 4 ia64 krb5 - security update To: centos-announce(a)centos.org Message-ID: <20060809105714.GB18903(a)centos.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2006:0612 https://rhn.redhat.com/errata/RHSA-2006-0612.html The following updated files have been uploaded and are currently syncing to the mirrors: files: updates/ia64/RPMS/krb5-devel-1.3.4-33.ia64.rpm updates/ia64/RPMS/krb5-libs-1.3.4-33.ia64.rpm updates/ia64/RPMS/krb5-server-1.3.4-33.ia64.rpm updates/ia64/RPMS/krb5-workstation-1.3.4-33.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

GSM back door to shell with Centos and Palm handhelds
by J.J. Garcia 08 Aug '06

08 Aug '06

Hi folks, Don't know if it could be interesting or not, even useful, but past days i was spending my time trying to use an old gsm motorola v150 mobile phone to get access to my host from my palm device with pssh (http://www.sealiesoftware.com/pssh/) these are the steps i did to accomplish it, feel free to suggest or improve it, anyway i found it usefull. First, this motorolla has an usb interface to the host, it's quite simple to attach the phone to the host running CentOs, i dont like very much usb 'things' but things are like this... anyway, if you do so you'll notice in syslog: <...> Aug 8 20:54:13 spoolbox kernel: cdc_acm 1-2:1.0: ttyACM0: USB ACM device <...> Don't know other mobile phones with an usb interface but it could be similar in others with an operational modem (i have to admit that im not an expert in GSM neither telephony...) Anyway, if you inspect the usb line, you can see: [root@spoolbox crash]# cat /proc/bus/usb/devices ...> T: Bus=02 Lev=01 Prnt=01 Port=01 Cnt=01 Dev#= 9 Spd=12 MxCh= 0 D: Ver= 1.10 Cls=02(comm.) Sub=00 Prot=00 MxPS= 8 #Cfgs= 1 P: Vendor=22b8 ProdID=3802 Rev= 0.01 S: Manufacturer=Motorola Inc. S: Product=Motorola Phone (V150) C:* #Ifs= 2 Cfg#= 1 Atr=c0 MxPwr= 20mA I: If#= 0 Alt= 0 #EPs= 1 Cls=02(comm.) Sub=02 Prot=01 Driver=cdc_acm --------------- !!!!! E: Ad=89(I) Atr=03(Int.) MxPS= 16 Ivl=10ms I: If#= 1 Alt= 0 #EPs= 2 Cls=0a(data ) Sub=00 Prot=00 Driver=cdc_acm --------------- !!!!! E: Ad=01(O) Atr=02(Bulk) MxPS= 16 Ivl=0ms E: Ad=82(I) Atr=02(Bulk) MxPS= 16 Ivl=0ms ...> Then, in /dev you will have: [root@spoolbox crash]# l /dev/ttyACM0 crw------- 1 root root 166, 0 ago 8 20:54 /dev/ttyACM0 In my case, i wasn't sure about this phone modem facilities, and i start playing with init secuences to discover the modem with 'minicom' tool, without success. Finally i decided to use 'wvdialconf' utility to check out my lack of kwlg. : [root@spoolbox crash]# wvdialconf newconffile Scanning your serial ports for a modem. Port Scan*1>: S0 S1 S2 S3 S4 S5 S6 S7 ttyACM0*1>: ATQ0 V1 E1 -- OK ttyACM0*1>: ATQ0 V1 E1 Z -- OK ttyACM0*1>: ATQ0 V1 E1 S0=0 -- OK ttyACM0*1>: ATQ0 V1 E1 S0=0 &C1 -- OK ttyACM0*1>: ATQ0 V1 E1 S0=0 &C1 &D2 -- OK ttyACM0*1>: ATQ0 V1 E1 S0=0 &C1 &D2 +FCLASS=0 -- OK ttyACM0*1>: Modem Identifier: ATI -- 144 ttyACM0*1>: Speed 4800: AT -- OK ttyACM0*1>: Speed 9600: AT -- OK ttyACM0*1>: Speed 19200: AT -- OK ttyACM0*1>: Speed 38400: AT -- OK ttyACM0*1>: Speed 57600: AT -- OK ttyACM0*1>: Speed 115200: AT -- OK ttyACM0*1>: Speed 230400: AT -- OK ttyACM0*1>: Speed 460800: AT -- OK ttyACM0*1>: Max speed is 460800; that should be safe. ttyACM0*1>: ATQ0 V1 E1 S0=0 &C1 &D2 +FCLASS=0 -- OK ttyUSB0*1>: ATQ0 V1 E1 -- failed with 2400 baud, next try: 9600 baud ttyUSB0*1>: ATQ0 V1 E1 -- failed with 9600 baud, next try: 115200 baud ttyUSB0*1>: ATQ0 V1 E1 -- and failed too at 115200, giving up. Found an USB modem on /dev/ttyACM0. Modem configuration written to newconffile. ttyACM0Info>: Speed 460800; init "ATQ0 V1 E1 S0=0 &C1 &D2 +FCLASS=0" [root@spoolbox crash]# l newconffile -rw-r----- 1 root root 232 jul 30 18:11 newconffile [root@spoolbox crash]# cat newconffile [Dialer Defaults] Modem = /dev/ttyACM0 Baud = 460800 Init1 = ATZ Init2 = ATQ0 V1 E1 S0=0 &C1 &D2 +FCLASS=0 ISDN = 0 Modem Type = USB Modem ; Phone = Target Phone Number> ; Username = Your Login Name> ; Password = Your Password> With this information, i updated the init sequence in 'minicom' parameters: [root@spoolbox crash]# LANG=C; minicom Welcome to minicom 2.00.0 OPTIONS: History Buffer, F-key Macros, Search History Buffer, I18n Compiled on Feb 21 2005, 19:32:30. Press CTRL-A Z for help on special keys ATQ0 V1 E1 S0=0 &C1 &D2 +FCLASS=0 OK ┌──────[Modem and dialing parameter setup]────────────────┐ │ │ │ A - Init string .. ~^M~ATQ0 V1 E1 S0=0 &C1 &D2 +FCLASS=0^M │ │ B - Reset string . ^M~ATZ^M~ │ <...> I did an AT command and i get the correspoding OK, cool :) AT OK ATZ OK ATD <phone-number> And my other mobile phone was ringing with an incomming data call. Up to here fine since the old motorola phone was able to perform calls, that's not the point unless you want a dial-out line (56k). What i needed was a dial-in facilities, go on with 'mgetty-sendfax': First change the /etc/inittab to start using the line: [root@spoolbox crash]# cat /etc/inittab <...> # Modem back line listen # Data only and two tones b4 connect T1:2345:respawn:/sbin/mgetty ttyACM0 -D /dev/ttyACM0 <...> To enable dial-in uncomment the corresponding line at '/etc/mgetty +sendfax/login.config' file with the previously created profile: [root@spoolbox crash]# cat /etc/mgetty+sendfax/login.config <...> /AutoPPP/ - - /usr/sbin/pppd file /etc/ppp/options.server <...> You can even trim more for incomming calls using the corresponding features at '/etc/mgetty+sendfax/dialin.config', in my case i left it untouched without restrictions. And config the line in '/etc/mgetty+sendfax/mgetty.config': <...> # Motorola V150/Usb connected to ttyACM0/1: don't do fax, less logging # port ttyACM0 debug 9 data-only y speed 460800 <...> Up to here, you have the line preset correctly, now you have to use it to dial-in. Create a ppp profile file to use in dial-in whatever the line will be: [root@spoolbox crash]# cat /etc/ppp/options.server # Do not fork to become a background process -detach # To allow pppd to work over a rlogin/telnet connection asyncmap 0 # Use the modem control lines modem # Use hardware flow control crtscts # Specifies that pppd use the UUCP-style lock on the serial device lock # Adds an entry into the ARP table with the IP address of the client and the IP address of the NIC proxyarp # # Auth: # PAP (Password Authentication Protocol) is one of the two protocols that PPP uses to authenticate # peers. # The other is CHAP (Challenge Handshake Authentication Protocol). # CHAP is a more secure protocol, but is not as widely supported as PAP require-pap refuse-chap #require-chap #refuse-pap # if 'login' option (follows) is used, the file /etc/ppp/pap-secrets need not exist. In fact, it # might interfere with the proper functioning of PAP. You can remove the file, or it can contain # the following line: # * * "" # The advantage of maintaining /etc/ppp/pap-secrets with this line is that it leaves you the option # of denying PPP access to individual accounts that have entries in /etc/passwd. To do so, below # the above line, enter the following line: # username * - # where "username" is the username of the account you wish to deny PPP access. Example: # #user server secret addrs # * * "" * # jdoe * - * # #login # The first DNS server IP address for this network. ms-dns 192.168.0.1 # The second DNS server IP address for this network. ms-dns 62.42.230.24 Third, create the specific profile for /dev/ttyACM0 line, where our phone is: [root@spoolbox crash]# cat /etc/ppp/options.ttyACM0 # The first IP address is the servers IP address, the second IP address is # the free static IP address that can be assigned to the computer dialing # in on the modem. This number cannot be in use. 192.168.0.3:192.168.0.69 # The net mask of the LAN the server is connected to. netmask 255.255.255.0 And since we are using PAP to auth, create the password at /etc/ppp/pap.secrets: [root@spoolbox crash]# cat /etc/ppp/pap-secrets # Secrets for authentication using PAP # client server secret IP addresses sm0ketst * password * Now, let's see what's happeninig with all of this stuff: # telinit q And check out the syslog: <...> Aug 8 21:25:49 spoolbox init: Re-reading inittab <...> And check also '/var/log/mgetty.log.ttyACM0': [root@spoolbox ~]# tail -F /var/log/mgetty.log.ttyACM0 <...> -- 08/08 20:58:28 CM0 mgetty: experimental test release 1.1.31-Jul24 08/08 20:58:28 CM0 check for lockfiles 08/08 20:58:28 CM0 checklock: no active process has lock, will remove 08/08 20:58:28 CM0 locking the line 08/08 20:58:28 CM0 makelock(ttyACM0) called 08/08 20:58:28 CM0 do_makelock: lock='/var/lock/LCK..ttyACM0' 08/08 20:58:28 CM0 lock made 08/08 20:58:29 CM0 tio_get_rs232_lines: status: RTS CTS DTR 08/08 20:58:29 CM0 WARNING: DSR is off - modem turned off or bad cable? 08/08 20:58:29 CM0 lowering DTR to reset Modem 08/08 20:58:29 CM0 tss: set speed to 460800 (10004) 08/08 20:58:29 CM0 tio_set_flow_control( HARD ) 08/08 20:58:29 CM0 waiting for line to clear (VTIME=1), read: 08/08 20:58:30 CM0 send: \dATQ0V1H0[0d] 08/08 20:58:30 CM0 waiting for ``OK'' 08/08 20:58:30 CM0 got: ATQ0V1H0[0d] 08/08 20:58:30 CM0 CND: ATQ0V1H0[0d][0a]OK ** found ** 08/08 20:58:30 CM0 send: ATS0=0Q0&D3&C1[0d] 08/08 20:58:30 CM0 waiting for ``OK'' 08/08 20:58:30 CM0 got: [0d] 08/08 20:58:30 CM0 CND: OK[0a]ATS0=0Q0&D3&C1[0d] 08/08 20:58:30 CM0 CND: ATS0=0Q0&D3&C1[0d][0a]OK ** found ** 08/08 20:58:30 CM0 waiting for line to clear (VTIME=3), read: [0d][0a] 08/08 20:58:30 CM0 removing lock file 08/08 20:58:30 CM0 waiting... Up to here, the hard part is done except the netfilter part i'll show later, but from now we can ring our motorola to get access from 'pssh' in our palm device (in my case i use a bluetooth conn with a Nokia 6600). If we also want to get access the network from palm device, you have to tweak the /etc/sysconfig/iptables file in the host where the phone is connected in the following way: a) At the top of the file, add the following lines: # Firewall configuration written by system-config-securitylevel # Manual customization of this file is not recommended. *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :RH-Firewall-1-INPUT - [0:0] # Rule for sharing eth0 with ppp0/ttyACM0 <------- ADD -A FORWARD -i ppp0 -j ACCEPT <------- ADD -A INPUT -j RH-Firewall-1-INPUT -A FORWARD -j RH-Firewall-1-INPUT <...> b) At the end of the file, add the following lines: <...> # Rest -A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited COMMIT # Rule for dial-in network sharing # Remark: Remember to update the /etc/sysctl.conf # Controls IP packet forwarding # net.ipv4.ip_forward = 1 # or # echo 1 > /proc/sys/net/ipv4/ip_forward *nat :PREROUTING ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] :OUTPUT ACCEPT [0:0] -A POSTROUTING -o eth0 -j MASQUERADE COMMIT And as you can see, enable packet forwarding by hand or in '/etc/sysctl.conf' After that restart iptables [root@spoolbox ~]# service iptables restart And check out the 'whole thing': 1st- enable bluetooth on phone, 2nd- enable bluetooth on palm, and connect [root@spoolbox ~]# tail -F /var/log/mgetty.log.ttyACM0 <...> -- 08/08 21:38:50 CM0 select returned 1 08/08 21:38:50 CM0 checking lockfiles, locking the line 08/08 21:38:50 CM0 makelock(ttyACM0) called 08/08 21:38:50 CM0 do_makelock: lock='/var/lock/LCK..ttyACM0' 08/08 21:38:50 CM0 lock made 08/08 21:38:50 CM0 wfr: waiting for ``RING'' 08/08 21:38:50 CM0 got: [0d][0a]RING[0d] 08/08 21:38:50 CM0 CND: RING 08/08 21:38:50 CM0 wfr: rc=0, drn=0 08/08 21:38:50 CM0 CND: check no: 'none' 08/08 21:38:50 CM0 send: ATA[0d] 08/08 21:38:50 CM0 waiting for ``CONNECT'' 08/08 21:38:50 CM0 got: ATA[0d] 08/08 21:38:50 CM0 CND: OKATA[0d][0a]CONNECT ** found ** 08/08 21:39:03 CM0 send: 08/08 21:39:03 CM0 waiting for ``_'' 08/08 21:39:03 CM0 got: [0d] 08/08 21:39:03 CM0 CND: CONNECT[0a] ** found ** 08/08 21:39:03 CM0 waiting for line to clear (VTIME=3), read: 08/08 21:39:03 CM0 looking for utmp entry... (my PID: 14150) 08/08 21:39:03 CM0 utmp + wtmp entry made 08/08 21:39:04 CM0 tio_set_flow_control( HARD ) 08/08 21:39:04 CM0 print welcome banner (/etc/issue) 08/08 21:39:04 CM0 getlogname (AUTO_PPP), read:~[ff]}#[c0]! 08/08 21:39:05 CM0 input finished with '\r', setting ICRNL ONLCR 08/08 21:39:05 CM0 tio_get_rs232_lines: status: RTS CTS DSR DTR DCD RI 08/08 21:39:05 CM0 login: use login config file /etc/mgetty +sendfax/login.config 08/08 21:39:05 CM0 match: user='/AutoPPP/', key='' 08/08 21:39:05 CM0 match: user='/AutoPPP/', key='' 08/08 21:39:05 CM0 match: user='/AutoPPP/', key='/AutoPPP/'*** hit! 08/08 21:39:05 CM0 calling login: cmd='/usr/sbin/pppd', argv[]='pppd file /etc/ppp/options.server' 08/08 21:39:05 CM0 setenv: 'CALLER_ID=none' 08/08 21:39:05 CM0 setenv: 'CONNECT=' 08/08 21:39:05 CM0 setenv: 'DEVICE=ttyACM0' 08/08 21:39:05 ##### data dev=ttyACM0, pid=14150, caller='none', conn='', name='', cmd='/usr/sbin/pppd', user='/AutoPPP/' And in syslog: <...> Aug 8 21:39:05 spoolbox mgetty[14150]: data dev=ttyACM0, pid=14150, caller='none', conn='', name='', cmd='/usr/sbin/pppd', user='/AutoPPP/' Aug 8 21:39:05 spoolbox pppd[14150]: pppd 2.4.2 started by LOGIN, uid 0 Aug 8 21:39:05 spoolbox pppd[14150]: Using interface ppp0 Aug 8 21:39:05 spoolbox pppd[14150]: Connect: ppp0 <--> /dev/ttyACM0 Aug 8 21:39:10 spoolbox pppd[14150]: PAP peer authentication succeeded for sm0ketst Aug 8 21:39:13 spoolbox pppd[14150]: found interface eth0 for proxy arp Aug 8 21:39:13 spoolbox pppd[14150]: local IP address 192.168.0.3 Aug 8 21:39:13 spoolbox pppd[14150]: remote IP address 192.168.0.69 When disconnected syslog will show: <...> Aug 8 21:40:38 spoolbox pppd[14150]: IPCP terminated by peer Aug 8 21:40:39 spoolbox pppd[14150]: LCP terminated by peer Aug 8 21:40:42 spoolbox pppd[14150]: Connection terminated. Aug 8 21:40:42 spoolbox pppd[14150]: Connect time 1.6 minutes. Aug 8 21:40:42 spoolbox pppd[14150]: Sent 98 bytes, received 86 bytes. Aug 8 21:40:42 spoolbox pppd[14150]: Connect time 1.6 minutes. Aug 8 21:40:42 spoolbox pppd[14150]: Sent 98 bytes, received 86 bytes. Aug 8 21:40:42 spoolbox pppd[14150]: Exit. And the mgetty log (/var/log/mgetty.log.ttyACM0) <...> -- 08/08 21:40:42 CM0 mgetty: experimental test release 1.1.31-Jul24 08/08 21:40:42 CM0 check for lockfiles 08/08 21:40:42 CM0 checklock: no active process has lock, will remove 08/08 21:40:42 CM0 locking the line 08/08 21:40:42 CM0 makelock(ttyACM0) called 08/08 21:40:42 CM0 do_makelock: lock='/var/lock/LCK..ttyACM0' 08/08 21:40:42 CM0 lock made 08/08 21:40:43 CM0 tio_get_rs232_lines: status: RTS CTS DSR DTR DCD RI 08/08 21:40:43 CM0 WARNING: DCD line still active, check modem settings (AT&Dx) 08/08 21:40:43 CM0 lowering DTR to reset Modem 08/08 21:40:43 CM0 tss: set speed to 460800 (10004) 08/08 21:40:43 CM0 tio_set_flow_control( HARD ) 08/08 21:40:43 CM0 waiting for line to clear (VTIME=1), read: [0a][0a]NO CARRIER[0a][0a] 08/08 21:40:43 CM0 send: \dATQ0V1H0[0d] 08/08 21:40:44 CM0 waiting for ``OK'' 08/08 21:40:44 CM0 got: ATQ0V1H0[0d] 08/08 21:40:44 CM0 CND: ATQ0V1H0[0d][0a]OK ** found ** 08/08 21:40:44 CM0 send: ATS0=0Q0&D3&C1[0d] 08/08 21:40:44 CM0 waiting for ``OK'' 08/08 21:40:44 CM0 got: [0d] 08/08 21:40:44 CM0 CND: OK[0a]ATS0=0Q0&D3&C1[0d] 08/08 21:40:44 CM0 CND: ATS0=0Q0&D3&C1[0d][0a]OK ** found ** 08/08 21:40:44 CM0 waiting for line to clear (VTIME=3), read: [0d][0a] 08/08 21:40:44 CM0 removing lock file 08/08 21:40:44 CM0 waiting... Now you can get shell access from your palm, use your favourite www palm browser and send-receive emails, etc... with some tweaks from your palm, all of this using your host as your gateway. I think that's all and i didn't forget anything, feel free to knock the door on me if something fails... but since phone companies are providing no-cost for certain calls, i found it usefull to get a shell on my palm to launch certain commands on the host at 0-cost, yes, at 56K, but it's free :) Jose. -- ----------------------------------------------------------------- sparkbox.stigmatedbrain.net 2.6.9-34.0.2.ELsmp i686 GNU/Linux 21:40:01 up 7 days, 1:52, 44 users, load average: 3.18, 1.91, 1.62 ----------------------------------------------------------------- The Moral Law causes the people to be in complete accord with their ruler, so that they will follow him regardless of their lives, undismayed by any danger. --The Art of War by Sun Tzu Chapter I: Laying Plans

2 1

Deconstruct an rpm
by Tom Brown 08 Aug '06

08 Aug '06

Hi Is it possible to take an rpm apart to see what it will do to a system and see what files are inside the package? thanks

10 12

Mail forwarding does not work
by Jose Gonzalez 08 Aug '06

08 Aug '06

Hello all. After I have installed mailScanner + Spamassassin in CentOS 4.3 server, .forward files in $HOME directories does not work, do you have some experience like this..? Thanks.

2 2

RE: [CentOS] yum updates
by Bowie Bailey 08 Aug '06

08 Aug '06

Johnny Hughes wrote: > > On Tue, 2006-08-08 at 11:56 -0400, Bowie Bailey wrote: > > > > How can I install kernel-smp-devel-2.6.9-34.0.1.EL via yum? Can I > > grab the rpm from somewhere and do a local install? > > It is in the updates repo for your arch: > > http://mirror.centos.org/centos/4/updates/i386/RPMS/kernel-smp-devel-2.6.9-3 4.0.1.EL.i686.rpm > > or > > http://mirror.centos.org/centos/4/updates/x86_64/RPMS/kernel-smp-devel-2.6.9 -34.0.1.EL.x86_64.rpm > > Once downladed install like this: > > rpm -ivh kernel-smp-devel-2.6.9-34.0.1.EL.i686.rpm > > or > > rpm -ivh kernel-smp-devel-2.6.9-34.0.1.EL.x86_64.rpm > > (or you can remove the package with rpm -e kernel-smp-devel ... then > > yum install kernel-smp-devel-2.6.9-34.0.1.EL.i686 > > or > > yum install kernel-smp-devel-2.6.9-34.0.1.EL.x86_64 ) I found the updates repo shortly after sending the first email. I followed your second suggestion and was able to have "yum install" see it after removing the old package. Why is the "rpm -e" required? It seems like I should be able to do "yum update" and specify the package version as long as it is newer than what is currently installed. -- Bowie

2 1

RE: [CentOS] yum updates
by Bowie Bailey 08 Aug '06

08 Aug '06

Bowie Bailey wrote: > I am trying to update my cluster servers to a newer kernel. As the > csgfs stuff is not updated for 2.6.9-34.0.2.EL yet, I have to use > 2.6.9-34.0.1.EL. > > If I specify to update the cluster packages, yum will automatically > find the proper kernel package to meet the dependency. The problem is > that I also need the kernel-smp-devel package installed so that I can > build a new AoE driver. It doesn't get installed via dependencies and > I can't figure out how to install it manually. > > Hints anyone? > > How can I install kernel-smp-devel-2.6.9-34.0.1.EL via yum? Can I > grab the rpm from somewhere and do a local install? Replying to myself... I was able to find the rpm by using the websites referenced in the repo. I can update everything else using yum and then install this one package manually and things should work fine. This still leaves me with a question, though. If I can find the rpm by looking in the repo, why can't yum find it? Does it refuse to show old packages even when the version is specified? # ls kernel* kernel-smp-devel-2.6.9-34.0.1.EL.i686.rpm # # yum info kernel-smp-devel-2.6.9-34.0.1.EL Setting up repositories Reading repository metadata in from local files # -- Bowie

1 0

yum updates
by Bowie Bailey 08 Aug '06

08 Aug '06

I am trying to update my cluster servers to a newer kernel. As the csgfs stuff is not updated for 2.6.9-34.0.2.EL yet, I have to use 2.6.9-34.0.1.EL. If I specify to update the cluster packages, yum will automatically find the proper kernel package to meet the dependency. The problem is that I also need the kernel-smp-devel package installed so that I can build a new AoE driver. It doesn't get installed via dependencies and I can't figure out how to install it manually. Hints anyone? How can I install kernel-smp-devel-2.6.9-34.0.1.EL via yum? Can I grab the rpm from somewhere and do a local install? Thanks, -- Bowie

2 1

Help with up2date updates
by Juan C. Valido 08 Aug '06

08 Aug '06

I got this updates to do but the package requires a newer version of mozilla, and I can't install it, I get the following error message. Thanks There was a package dependency problem. The message was: Unresolvable chain of dependencies: devhelp-0.10-0.2.el4.centos4 requires mozilla = 37:1.8 The following packages were added to your selection to satisfy dependencies: Package Required by ---------------------------------------------------------------------------- Please modify your package selections and try again.

3 2

RE: [CentOS] undelete
by Mark Schoonover 08 Aug '06

08 Aug '06

Alex Palenschat wrote: >> Every hour on multi terrabyte systems using rsync. In the >> Linux Hacks book, one of the hacks goes over using rsync to >> do snapshots to another system. My NAS are configured to do >> hourly, daily and weekly snapshots to another NAS. Way >> cheaper than tapes, and much faster to restore in an emergency. > > > Poor man's method would be the rsnapshot tool in dag's repository. > Relatively easy to do hourly snapshots with rsync from a single config > file. > > alex Thanks Alex, I've never heard of rsnapshot tool. We got rsync all started when we were using Gentoo, but have since moved to CentOS. Right now I have seperate scripts for hourly, daily and weekly. The hourly does all the heavy lifting, with daily and weekly being simple scripts that makes hardlinks from all the hourly snapshots. All in all, it's pretty cool. Never have to flip tapes everyday in the tape library, works on holidays without missing backups and restores happen at network speeds. If you've ever tried to pull 100GB off of AIT3 tapes, you know what I'm talking about. Mark

1 0

RE: [CentOS] undelete
by Alex Palenschat 08 Aug '06

08 Aug '06

> > Every hour on multi terrabyte systems using rsync. In the > Linux Hacks book, one of the hacks goes over using rsync to > do snapshots to another system. My NAS are configured to do > hourly, daily and weekly snapshots to another NAS. Way > cheaper than tapes, and much faster to restore in an emergency. Poor man's method would be the rsnapshot tool in dag's repository. Relatively easy to do hourly snapshots with rsync from a single config file. alex

1 0

RE: [CentOS] undelete
by Mark Schoonover 08 Aug '06

08 Aug '06

Chris Mauritz wrote: > Jerry Geis wrote: >>> On Tue, 8 Aug 2006, Jerry Geis wrote: >>> >>>> / I just removed a bunch of Personal stuff I should not have. >> />>/ Is there anyway to undelete??? >> /> >>> ext3 - no >>> >>> ext2 - was possible >>> >>> others - maybe >>> >>> >>> Sorry >>> >>> Lance >> >> >> Yes I am using the ext3 filesystem. AHHH! > > What?! You don't do a full backup of all data every 10 minutes?!?! > Every hour on multi terrabyte systems using rsync. In the Linux Hacks book, one of the hacks goes over using rsync to do snapshots to another system. My NAS are configured to do hourly, daily and weekly snapshots to another NAS. Way cheaper than tapes, and much faster to restore in an emergency. HTH Mark

1 0

Official Java
by Ted Miller 08 Aug '06

08 Aug '06

What is the official method to install Java on Centos? I searched, but could find no mention of Java on the Web site. Ted Miller Centos 4.3 x86_64 Indiana

7 11

undelete
by Jerry Geis 08 Aug '06

08 Aug '06

>On Tue, 8 Aug 2006, Jerry Geis wrote: > >>/ I just removed a bunch of Personal stuff I should not have. />>/ Is there anyway to undelete??? /> >ext3 - no > >ext2 - was possible > >others - maybe > > >Sorry > >Lance Yes I am using the ext3 filesystem. AHHH! Jerry

4 3

htaccess htpasswd and satellite connections
by John Hinton 08 Aug '06

08 Aug '06

Yeah, maybe this is a bit on the edge.... I am discovering several issues with users on satellite internet connections not being able to authenticate via a htaccess/htpasswd system. Some users cannot connect at all, some can connect reliably.. and some are hit and miss.. works one day and not the next. Yet those same users can log in fine if they switch back to their dialup system. Has anybody else found this and is there a magic tweak somewhere to help this work? Thanks, John Hinton

3 5

www.clamav.net update
by Email Lists 08 Aug '06

08 Aug '06

Greetings I was informed on another list about this... im not a serious programming or exploit creation expert yet this appears to me to be fairly serious..... For those of you that have not heard about it, there has been a www.clamav.net update to 88.4 I roll my own rpms so I don't wait for upstream on this one... and for all I know they have dealt with it already... Anyways, FYI Thanks and kind regards, - rh -- Robert - Abba Communications Computer & Internet Services (509) 624-7159 - www.abbacomm.net

4 4

i386 and x86_64 depsolver issue with Seamonkey
by Johnny Hughes 08 Aug '06

08 Aug '06

CentOS uses the yum dependency solver for doing updates and not the RHN (normal) up2date mechanism. That is functionality built into up2date. Due to this difference, there is a problem with the Seamonkey upgrade to replace Mozilla using up2date on CentOS-4, because it does not see Seamonkey as obsoleting Mozilla. (This is a problem with the yum depsolver that is included in up2date). Due to this problem, to upgrade from Mozilla to Seamonkey use this command from the command line instead of up2date: yum upgrade seamonkey ------------------ Yum is the official upgrade tool for CentOS. If you are currently using up2date, you should consider switching to yum as this is not the first issue that up2date has had when doing "obsoletes" type updates. Thanks, Johnny Hughes

1 1

Yum w/o direct connect
by Ted Miller 08 Aug '06

08 Aug '06

I am hoping someone else is already doing what I need to do, and can give me some pointers. Situation: 1. I am running Centos 4.3 x86_64 on a machine at home, without broadband access. I have dialup access, but that doesn't work very well for something like "yum update", so I am still running 4.3 as issued on the CDs. 2. I have high speed access at work, and I have a USB drive to move files from work to home. Proposed solution (other than get broadband): A. Make a "pretend repo" on the hard drive of home machine by: 1. Install yum "index" file for each repo in directories at home. Use rsync via dialup to keep those repo "indexes" up to date (after initial install). [A sample rsync command line would be helpful.] 2. Persuade yum to give me a list of packages (that I need to download in order to execute a package install or update) and capture that list in a format that I can feed into rsync (at work). 3. Have a way to separate package list into three categories: a. Packages already in correct version my local repository. b. Packages needing an update in my local repo. c. Packages I need to download wholesale. 4. Have a way to copy packages needing updates to USB drive. 5. Take list of packages to work, and use rsync to transfer/update the packages onto the USB drive. 6. Bring USB drive home and dump contents into local repo. 7. Run yum to do the updates. I think this is how to do things in general terms, but I could use a good bit of help in coming up with some scripts to automate/semiautomate the process. I think #3 may be the hardest one to automate. Anyone doing this? Anyone good with rsync and yum, and care to give me a starting point, even if your try is untested? Console approach is fine (GUI OK too), but I am new to yum (moving from Mandriva), and have used rsync a few times successfully, but am no master at it. Also, I have 4 install disks. Which repos are on those disks, and which repos are on which ones? Do any of them include CentOS Plus? Ted Miller CentOS 4.3 x86_64

3 3

Lock ups: recent, anybody else?
by William L. Maltby 08 Aug '06

08 Aug '06

Yesterday, did the following. Two lockups since then. Recent freetype had just cured some anomalies and now this. One lock while I slept, the other a few moments ago while active at the KB. Had Evolution, Firefox and T'bird open among two users on a single X console. No unusual stuff. Desktop install, fully up-to-date 4.3, i386 (Athalon). 1) see anything wrong below? 2) I'm seriously thinking of trying to back out Seamonkey and reinstalling mozilla (I've no idea what my chances are). Why? Because it was the single biggest change to the system and is therefore auto-suspect! TIA for any help/reply! Aug 06 12:04:41 - 12:20:16 Updated: libtiff.i386 3.6.1-12 Updated: gnupg.i386 1.2.6-6 Updated: libtiff-devel.i386 3.6.1-12 Installed: seamonkey-nspr.i386 1.0.3-0.el4.1.centos4 Installed: seamonkey-nss.i386 1.0.3-0.el4.1.centos4 Installed: seamonkey.i386 1.0.3-0.el4.1.centos4 Updated: devhelp.i386 0.10-0.2.el4.centos4 Installed: seamonkey-nspr-devel.i386 1.0.3-0.el4.1.centos4 Installed: seamonkey-nss-devel.i386 1.0.3-0.el4.1.centos4 Installed: seamonkey-mail.i386 1.0.3-0.el4.1.centos4 Installed: seamonkey-dom-inspector.i386 1.0.3-0.el4.1.centos4 Updated: devhelp-devel.i386 0.10-0.2.el4.centos4 Installed: seamonkey-devel.i386 1.0.3-0.el4.1.centos4 Installed: seamonkey-chat.i386 1.0.3-0.el4.1.centos4 Installed: seamonkey-js-debugger.i386 1.0.3-0.el4.1.centos4 Erased: mozilla-dom-inspector Erased: mozilla-nss Erased: mozilla-nss-devel Erased: mozilla-mail Erased: mozilla-nspr Erased: mozilla-devel Erased: mozilla-chat Erased: mozilla-js-debugger Erased: mozilla-nspr-devel Erased: mozilla Updated: subversion.i386 1.3.2-0.1.el4.rf Updated: subversion-perl.i386 1.3.2-0.1.el4.rf -- Bill

1 2

duplicate hard drive image
by JC 08 Aug '06

08 Aug '06

Hi all, Even though we use linux server, but people still use windows server and i'm one of them. I have windows server and i would like to do back up by create its hard drive image. Does any one have suggest for a software? I plan to back up every night, so I need some kind of schedule, i prefer usb or firewire, my hard drive is 160GB. Anybody knows how long it takes to duplicate 160GB image? Finally, once i have a backup image, how do I restore if my main hard drive fails? Thank you for all your suggestions. JC

2 1

Linux-HA and the RedHat Cluster Suite???
by Prasad Pillarisetti 08 Aug '06

08 Aug '06

What's the difference between Linux-HA and the RedHat Cluster suite. Is the RH Suite just a packaged version of the freeware Linux-HA? -- Prasad Pillarisetti "If everything is coming your way, then you are in the wrong lane"

2 1

Subversion how-to section added to the wiki
by Max H. 07 Aug '06

07 Aug '06

Hey everyone, I added a very very simple how-to for getting Subversion running on CentOS (locally and across Apache)...basically aimed at a newbie that's never touched svn before. Let me know if anything is out of whack, needs changed, or if something isn't right. I did go through and actually follow it with an install, so it should be good. <http://wiki.centos.org/SubVersion> Max

4 4

Seamonkey
by Bart Schaefer 07 Aug '06

07 Aug '06

I saw the latest update announcements on the announce list, so I ran "yum check-update" and did not see seamonkey in the list. Which I guess makes sense, since it's a name change from mozilla. However, devhelp is in the list, and "yum update devhelp" pulls in seamonkey as a dependency. This seems like a sort of backdoor way to get seamonkey onto the system. Did these packages really come from the upstream this way? What if I had not had devhelp installed? Do I need to replace mozilla or not? Aside to Dag: The galeon package from rpmforge has an version dependency on the specific mozilla package that's being replaced by seamonkey (rather than a greater-or-equal dependency), so it's not presently possible to install both seamonkey and galeon with yum.

6 7

How to convert RHEL 4 system to CentOS
by James Marcinek 07 Aug '06

07 Aug '06

Hello Everyone, I have a RHEL4 system that I would prefer to leave on the current hardware and not have to rebuild if possible. Can some tell me if I can take my current distro of RHEL and move it to CentOS? What will I need to do, etc and how risky is it? Thanks, James Marcinek

2 2

Alan L Vaughn is out of the office.
by Alan L Vaughn 07 Aug '06

07 Aug '06

I will be out of the office starting 08/07/2006 and will not return until 08/16/2006. I will respond to your message when I return.

5 6

Permissions
by Chris Peikert 07 Aug '06

07 Aug '06

I am trying to figure out how permissions work in Linux. In windows if I want someone to have access to something you put their name in a group then give that group access to that folder. However things can get difficult when you have an office with a folder structure like this: Taxoffice--->Names---> Private. Everyone in the group would need access to the Taxoffice folder and names folder but lets say only 4 people out of 12 need access to the private folder. 2 of those people need read only access and 2 full access. In windows this is easy because you can apply multiple groups and peoples permissions to a folder and file. How is this done in Linux when all I see is Owner and 1 Group permission?

8 11

talking to users on on other boxes within my network...
by bruce 07 Aug '06

07 Aug '06

hi... is there a way to talk to users on other machines within my network? the 'talk' function apparently only works with users on the same box.. -bruce

3 7

CentOS-announce Digest, Vol 18, Issue 7
by centos-announce-request＠centos.org 07 Aug '06

07 Aug '06

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2006:0609 Critical CentOS 4 axp seamonkey - security update (Pasi Pirhonen) 2. CESA-2006:0609 Critical CentOS 4 ia64 seamonkey - security update (Pasi Pirhonen) 3. CESA-2006:0609 Critical CentOS 4 s390(x) seamonkey - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Sun, 6 Aug 2006 18:49:36 +0300 From: Pasi Pirhonen <upi(a)centos.fi> Subject: [CentOS-announce] CESA-2006:0609 Critical CentOS 4 axp seamonkey - security update To: centos-announce(a)centos.org Message-ID: <20060806154936.GN12771(a)centos.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2006:0609 https://rhn.redhat.com/errata/RHSA-2006-0609.html The following updated files have been uploaded and are currently syncing to the mirrors: NOTE: I did see Johnny making announce about this some 24h ago. I've waited if he'd bother to formally notify me about this, but nothing seems to happen. So i release this one just blindly trusting it's ok. files: updates/alpha/RPMS/seamonkey-1.0.3-0.el4.1axp.centos4.alpha.rpm updates/alpha/RPMS/seamonkey-chat-1.0.3-0.el4.1axp.centos4.alpha.rpm updates/alpha/RPMS/seamonkey-devel-1.0.3-0.el4.1axp.centos4.alpha.rpm updates/alpha/RPMS/seamonkey-dom-inspector-1.0.3-0.el4.1axp.centos4.alpha.rpm updates/alpha/RPMS/seamonkey-js-debugger-1.0.3-0.el4.1axp.centos4.alpha.rpm updates/alpha/RPMS/seamonkey-mail-1.0.3-0.el4.1axp.centos4.alpha.rpm updates/alpha/RPMS/seamonkey-nspr-1.0.3-0.el4.1axp.centos4.alpha.rpm updates/alpha/RPMS/seamonkey-nspr-devel-1.0.3-0.el4.1axp.centos4.alpha.rpm updates/alpha/RPMS/seamonkey-nss-1.0.3-0.el4.1axp.centos4.alpha.rpm updates/alpha/RPMS/seamonkey-nss-devel-1.0.3-0.el4.1axp.centos4.alpha.rpm source: updates/alpha/SRPMS/seamonkey-1.0.3-0.el4.1axp.centos4.src.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

CentOS Folding team breaks through the 250 ranking barrier!
by Sharon Kimble 06 Aug '06

06 Aug '06

Congratulations to each and every member of the CentOS Folding@home team for helping to break through the 250 ranking barrier. This means that we're now in the top 250 of the world! Well done to each and every one of you :) The netx target of 200 will be harder, but achievable. Keep on with the good work of crunching those work units, the team benefits with the team ranking, and medical science benefits with more results for them to work with. Everybodys happy :) But, we still need more machines to crunch work units with us. If you want more information about the project and our place in it and how it all works then please see .. http://www.sharons.org.uk/cf.html. And if you want more information, then please ask. Help us to help medical researchers, please. Sharon. -- 22:08:56 up 2 days, 2:31, 1 user, load average: 1.02, 1.31, 1.47 A taste of linux http://www.sharons.org.uk/taste/index.html efever http://www.efever.blogspot.com/ Centos 4.3, KDE 3.5.3-4.1, OpenOffice 2.0.3 Registered Linux user 334501 Get my public GnuPG key from http://keyserver.veridis.com:11371/export?id=6499064243027013735

1 0

Samba & NFS and file name charsets
by Christian Wahlgren 06 Aug '06

06 Aug '06

Hi, I have a problem copying files from a Suse 9.3 box to a CentOS 4.3 box with maintained characters in the file names. They usually have a lot of "åäö" (Swedish) in them and they are replaced by spaces when I copy to the CentOS 4.3 box. I have tried with nfs and then with Samba and get the same result. I have searched the net and found some suggestions about smbmount options "iocharset=utf8,codepage=unicode" but it didn't help. What I've found out is that I can create file names with åäö from a WindowsXP box through a samba share in the CentOS box, and it also looks correct when I do a 'ls'. The same condition is also true with the Suse box. So, I can from a WindowsXP box copy from the Suse box and then save it on the CentOS box and get correct file names. Does anyone have any idea what could be wrong? None of the smb.conf on the boxes have any special settings about charsets. The Suse box uses ReiserFS and the CentOS uses ext3. Thanks, Christian

1 0

rpm error
by Kevin K 06 Aug '06

06 Aug '06

After noticing unfixable EXT3 corruption yesterday on my Centos4 system, (kernel panics), which I eventually traced down to bad memory, I decided to restore my system partition from a backup back in May. (luckily, my user data doesn't seem to be affected, and was on a different partition). Obviously, there were a lot of updates that needed to be made. I started yum off before bed, there being 377 meg worth of downloads. This morning, after the reboot, I realized it was still using the old kernel from May. Ran yum again for the remaining 31 meg of downloads. Didn't work. rpm doesn't seem to work properly anymore, can't install any of these remaining updates, and can't even remove some of the older, unneeded, kernels anymore. The error output of my yum and the standalone rpm error output is attached. I've already tried a rebuilddb command on the rpm database without any noticable benefit. Any help would be appreciated. I would really like to avoid doing a fresh install. Thanks.

1 0

CentOS Based Infromational Document
by Matthew Miller 06 Aug '06

06 Aug '06

For those of you who are either part of the secret cabal, or are otherwise keeping track of it, there is a new version available. The current version of the cryptex is version 3.1. It's changed rather significantly in some areas.

7 9

Autoreply: Re: [CentOS] Yum w/o direct connect
by jamesg＠nucleus.com 06 Aug '06

06 Aug '06

Thank You for your Email. Please be advised that I am currently out of the office on holidays and will be returning on Wednesday August 9th 2006. If this email is of urgent nature please email sales(a)nucleus.com and someone will respond as soon as they can. You can also contact sales via telephone at 209-0000 and ask for the sales department. The first available rep will be glad to assist your call. Else, I will respond to all emails as promptly as I can when I return. Thank you and have a great day! James Gagnon (jamesg(a)nucleus.com) Account Representative Nucleus Information Service Inc. 1835B 10 Avenue SW Calgary, Alberta T3C 0K2 Phone: (403)209-0000 Fax: (403)541-9474 1-888-NUCLEUS (682-5387) http://www.nucleus.com Nucleus is ... Everything Internet

1 0

CentOS-announce Digest, Vol 18, Issue 6
by centos-announce-request＠centos.org 06 Aug '06

06 Aug '06

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2006:0609 Critical CentOS 4 x86_64 seamonkey - security update (Johnny Hughes) 2. CESA-2006:0609 Critical CentOS 4 i386 seamonkey - security update (Johnny Hughes) 3. CESA-2006:0615 Moderate CentOS 4 x86_64 gnupg - security update (Johnny Hughes) 4. CESA-2006:0615 Moderate CentOS 4 i386 gnupg - security update (Johnny Hughes) 5. CESA-2006:0603 Important CentOS 4 x86_64 libtiff - security update (Johnny Hughes) 6. CESA-2006:0603 Important CentOS 4 i386 libtiff - security update (Johnny Hughes) 7. CESA-2006:0608 Critical CentOS 3 s390(x) seamonkey - security update (Pasi Pirhonen) 8. CESA-2006:0608 Critical CentOS 3 i386 seamonkey - security update (Tru Huynh) 9. CESA-2006:0608 Critical CentOS 3 x86_64 seamonkey - security update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Sat, 05 Aug 2006 10:16:05 -0500 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2006:0609 Critical CentOS 4 x86_64 seamonkey - security update To: CentOS-Announce <centos-announce(a)centos.org> Message-ID: <1154790965.31051.152.camel(a)myth.home.local> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2006:0609 https://rhn.redhat.com/errata/RHSA-2006-0609.html The following updated files have been uploaded and are currently syncing to the mirrors: x86_64: devhelp-0.10-0.2.el4.x86_64.rpm devhelp-devel-0.10-0.2.el4.x86_64.rpm seamonkey-1.0.3-0.el4.1.centos4.x86_64.rpm seamonkey-chat-1.0.3-0.el4.1.centos4.x86_64.rpm seamonkey-devel-1.0.3-0.el4.1.centos4.x86_64.rpm seamonkey-dom-inspector-1.0.3-0.el4.1.centos4.x86_64.rpm seamonkey-js-debugger-1.0.3-0.el4.1.centos4.x86_64.rpm seamonkey-mail-1.0.3-0.el4.1.centos4.x86_64.rpm seamonkey-nspr-1.0.3-0.el4.1.centos4.i386.rpm seamonkey-nspr-1.0.3-0.el4.1.centos4.x86_64.rpm seamonkey-nspr-devel-1.0.3-0.el4.1.centos4.x86_64.rpm seamonkey-nss-1.0.3-0.el4.1.centos4.i386.rpm seamonkey-nss-1.0.3-0.el4.1.centos4.x86_64.rpm seamonkey-nss-devel-1.0.3-0.el4.1.centos4.x86_64.rpm src: devhelp-0.10-0.2.el4.src.rpm seamonkey-1.0.3-0.el4.1.src.rpm --------------------------- Seamonkey is replacing Mozilla and using the command: yum upgrade works to get this update.

1 0

firefox-1.5.0.5-0.el4.1.centos4 and SVG
by Anne Possoz 06 Aug '06

06 Aug '06

Hello, With the updated firefox (and freetype) I can't see svg files: « This XML file does not appear to have any style information associated with it. » While, if installing firefox 1.5.0 from the official site, svg files display without trouble. What could be the reason for that? Anne -- Anne Possoz, Domaine IT-GE Espace logiciel libre à l'Ecole Ecole Polytechnique Fédérale de Lausanne, 1015 Lausanne (Switzerland)

1 0

How do I revert back to a non-CentOSPlus install?
by Jens Jensen 06 Aug '06

06 Aug '06

I installed PHP 5.0.4 from the CentOSPlus repo a week ago, but now the yum cronjob seems to have upgraded to a new kernel, a new MySQL and god knows what else. Big mistake. How do I (safely) revert back to the stock CentOS 4.3 rpms? I want to keep PHP 5.0.4, but that's it. Is there a cleaner way than uninstalling the rpms, editing the repo file and the (re)installing from base? I just recently learned about the protectbase plugin, which I intend to use from here on out. The damage is done though. This question is a repost from the forums. They sadly don't seem to recieve much traffic. Best regards, Jens

5 4

Strange problem with web-based apps
by Thomas E Dukes 05 Aug '06

05 Aug '06

Hello, I'm not sure if this is a DNS problem as it has just recently started happening or at least I just recently noticed it was happening. This only happens outside my local network. I can only describe the problem. I use OpenWebmail for webmail. I can read mail, delete mail but cannont send mail. I uses webmin, most this I can admin remotely from this, some I cannot such as the File Manager. I use OSCommerce. Some things I can do from the admin panel, some things I cannot such as update inventory. When the problem occurs, I get the error in the browser "Cannot Find Server". Again, this only happens from outside my local network and it only affects some actions. Any ideas? TIA Eddie

1 0

Re: [CentOS] CentOS Based Fierwall Document
by Frank Tanner III 05 Aug '06

05 Aug '06

On Thu, 2006-08-03 at 21:41 -0400, w.arkwolf wrote: > On Thursday 03 August 2006 17:13, pctech(a)mybellybutton.com wrote: > > For those of you that either have an older revision of my firewall > > document, or are otherwise keeping track of it, there is a new version > > available. The current version of the document is version 3.1. It's > > changed rather significantly in some areas. > > Okay... As some of us may never have heard of this document, would it be > improper to ask where is might be found ? > > -arkwolf As I don't have a site to host it at, I've been offering to e-mail it to people. In the relative near future, the owner of the Firewall Builder web site said that he'd be happy to house a copy there under contributed documents. The copies I offer for e-mail will always be the "freshest", however. > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos -- --------------------------------------------------- Frank Tanner III (pctech(a)mybellybutton.com) ICQ: 1730844 AIM: KalokSundancer MSN: pctech(a)mybellybutton.com YIM: fbtanner

4 3

Computer 1A question
by Todd Cary 05 Aug '06

05 Aug '06

I want to delete all files that have the pattern of "*.zip" in the directory /home/mydir and all sub-directories. rm -Rf /home/mydir/*.zip produces an error. What did I overlook? Thanks..... -- Ariste Software 2200 D Street Ext Petaluma, CA 94952 (707) 773-4523

6 9

RE: Re: Re: Re: [CentOS] Centos Based Fierwall Document
by pctech＠mybellybutton.com 05 Aug '06

05 Aug '06

>> Actually, I've been chatting online for about 20 years now. First on BBSes >and then in IRC. Again, the CentOS forums and the people on this mailing list >that I had problems with are the only ones that I have encountered this issue >with. >> >> Those offers came AFTER the flame-fest began, not before. > >No. As was already pointed out, mine was the second reply inviting you >to post it to the wiki. Revisionist history doesn't work when there's >an unbiased mailing list archive. > Well, according to the order in which I received the e-mails, the initial erply was NOT from you, so guess again. >-- >During times of universal deceit, telling the truth becomes a revolutionary >act. >George Orwell >_______________________________________________ >CentOS mailing list >CentOS(a)centos.org >http://lists.centos.org/mailman/listinfo/centos

3 2

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss