- Discuss - lists.centos.org

CentOS-announce Digest, Vol 16, Issue 5
by centos-announce-request＠centos.org 15 Jun '06

15 Jun '06

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Re: Retiring the Tao Linux project (Johnny Hughes) 2. CESA-2006:0515 Important CentOS 3 i386 sendmail - security update (Tru Huynh) 3. CESA-2006:0515 Important CentOS 3 x86_64 sendmail - security update (Tru Huynh) 4. CESA-2006:0515 Important CentOS 4 i386 sendmail - security update (Johnny Hughes) 5. CESA-2006:0515 Important CentOS 4 x86_64 sendmail - security update (Johnny Hughes) 6. CESA-2006:0548 Important CentOS 4 x86_64 kdebase - security update (Johnny Hughes) 7. CESA-2006:0548 Important CentOS 4 i386 kdebase - security update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 14 Jun 2006 09:54:30 -0500 From: Johnny Hughes <mailing-lists(a)hughesjr.com> Subject: [CentOS-announce] Re: Retiring the Tao Linux project To: David Parsley <parsley(a)linuxjedi.org> Cc: tao-i386(a)taolinux.org, CentOS-Devel <centos-devel(a)centos.org>, CentOS-Announce <centos-announce(a)centos.org> Message-ID: <1150296870.32018.78.camel(a)myth.home.local> Content-Type: text/plain; charset="us-ascii" On Wed, 2006-06-14 at 10:19 -0400, David Parsley wrote: > Hi all, > > Over the last year or so I've been watching my employer's and my own > finances slowly go down the drain, with quality of life and happiness > not far behind. Finally this spring, I decided I would have to do > something before things got really bad. What I've done is get another > job - a REALLY GOOD job, in a very nice area where I'm confident that > I and my family will be very happy. > > I'll be a 'Network Engineer', and as such I'll only spend 5-10% of my > time on system administration type stuff. I will, of course, run a > Linux desktop (probably dual-boot Fedora latest/RHEL latest). My new > employer has also opted for the site license of RHEL, so there's no > good reason for me to continue cloning on work time. Now that I have > 3 young children, I've spent very, very little of my home time on Tao, > and have no intention of taking time away from family for it. So I've > spent some time over the past weeks planning an exit strategy, and > after conferring with other Tao developers, several of the Tao users I > know, as well as the CentOS developers, I've come up with a plan which > I've implemented and published at: > http://taolinux.org > > I won't repeat everything here, but I'd just like to say thanks to all > the great Tao users who have made this project so fun and interesting. > > Regards, > David I would like to thank David for all the work he has done on Tao Linux in the past, as well as the work we have done together during update cycles to work though sticky issues that we've both had. CentOS and Tao have always had a very good relationship, and we are happy to integrate all current Tao users into CentOS. I would also like to officially welcome David to the CentOS Development team, though unofficially he has been on the team for a while now :). Thanks, Johnny Hughes

1 0

Changed md5sums on a bare-bones install. Logical explanation?
by John Ziniti 15 Jun '06

15 Jun '06

I'm new to this list, so feel free to update me on any rules that I seem not to be familiar with. I'm looking at some strange behavior on a _very_ barebones installation. I'd like to get some feedback on possible logical explanations. * What I'm seeing: The md5sum of all of my binaries in /usr/bin and /usr/sbin are changing exactly one hour after installation of CentOS-4.3. The sizes of the files are increased, with minor changes visible at the beginning of the files, and a large chunk added to the end. Other files are also changing (under /usr/lib for example. Tripwire, if installed, goes *nuts*). My first inclination is that this is a virus, but I have installed this OS on a non-networked machine from what I believe to be clean CDs. * More information: I downloaded the x86_64 installation ISOs from wuarchive.wustl.edu. I checked md5sums and burned the ISO images to CD and then checked the md5sums again. I am assuming this to mean that the CDs are OK. I then installed the "Minimal" package from these CDs onto a machine which was not connected to the network. I allowed the installer to reformat the partitions, and generally used default options wherever possible. I then rebooted the machine, and checked the md5sum of an example program (/usr/sbin/lsof). I set up a script to log the md5sum of /usr/sbin/lsof every 1 minute and let it run overnight. Exactly 1 hour after the machine had come up, the md5sum of /usr/sbin/lsof was now changed and the binary no longer matched a copy I had made into root's home. Virus checkers such as clamav and f-prot (with updated databases) are negative. These are launched from a Helix Incident Response LiveCD. I have repeated this experiment dozens of times now with different options, settings, etc. Always with the same outcome. I find it hard to believe there is a virus on the CentOS-4.3 installation ISOs, but I'm having trouble coming up with other explanations. For starters, what is the md5sum of *your* /usr/sbin/lsof (if you've installed x86_64)? Any ideas on what is going on here? I can perform pretty much any experiments you can think of on this machine. Am I missing a way for a virus to survive a reformat of the hard drive? Thanks in advance for any help, John Ziniti

3 4

Enabling MD5 (longer passwords) after installation?
by M. Fioretti 14 Jun '06

14 Jun '06

I have noticed on a Centos 4.3 server where I had set some >8 characters passwords for some accounts, that only the first 8 characters are needed (if I forget or mistype the others I login all the same). Can I "move" the live, running system to longer passwords, and how? or is a reinstall necessary? TIA, Marco -- Marco Fioretti mfioretti, at the server mclink.it Fedora Core 3 for low memory http://www.rule-project.org/ Man becomes truly man only by passing beyond himself. Paul VI, POPULORUM PROGRESSIO

2 6

CentOS 4.3 under VMWare ESX 2.5.3 Server
by Adriano Viscarde 14 Jun '06

14 Jun '06

I have a IBM XSeries 366 with 04 processors Intel Xeon 3.16 Ghz, 16 Gb of memory and a storage IBM with 2 terabytes. I work with virtualization and my OS in this machine is a VMware ESX 2.5.3 version. When I install CentOS 4.X as guest operating system under ESX, the performance is very very bad. When I intsall RHES4 as guest operating system under ESX, the performance is very good. It will be that it has some problem CentOS to work with virtualization?

4 6

Microsoft-ds and H.323/Q.931? Which services are these?
by M. Fioretti 14 Jun '06

14 Jun '06

Hello, I have just ran nmap on a remote server with a minimal (or so I believed) Centos 4.3 installation. Besides what I expected (ssh, httpd, smtp) it found as open for listening these ports: Starting Nmap 3.95 ( http://www.insecure.org/nmap/ ) at 2006-06-14 17:57 CEST Interesting ports on <my.remote.server> (The 1667 ports scanned but not shown below are in state: closed) PORT STATE SERVICE 445/tcp filtered microsoft-ds 1720/tcp filtered H.323/Q.931 which programs are these, and why should they be part of a server install? How can I find them so I can uninstall them? TIA, Marco -- Marco Fioretti mfioretti, at the server mclink.it Fedora Core 3 for low memory http://www.rule-project.org/ Live simply so others may simply live. Ghandi

4 4

How to create a secure user only for ssh login?
by M. Fioretti 14 Jun '06

14 Jun '06

Hello, I've read on several howtos that one way to make ssh more secure, or at least reduce the damage if somebody breaks in, is to NOT allow direct ssh login from root, but allow logins from another user. So you have to know two passwords in order to do any real damage. Does this make sense? IF yes, what is the right way to create an user only for this purpose, that is one that can only login to give me a local prompt to become root, but has no privilege, no possibility to create files, or do anything at all? TIA, Marco -- Marco Fioretti mfioretti, at the server mclink.it Fedora Core 3 for low memory http://www.rule-project.org/ Don't you wish you had more energy... or less ambition?

3 5

RE: [CentOS] How to create a secure user only for ssh login?
by King, John (Greg) (LMIT-HOU) 14 Jun '06

14 Jun '06

> > (must I)/can I reduce as much as possible the privileges/access rights > of the my_aux_login account? so that if somebody breaks _its_ > password, it won't be able to do anything, including browsing around > to see what's installed? Ah. I think I have a clearer idea on what your wanting to do now. You may want to look at SELinux (Comes with CentOS 4 but may either be enabled,set to warn or disabled depending on how it was installed). I have yet had time to understand the SELinux mechanism but I recall a discussion where the person used SELinux to reconfigure what the root account could do, left the console logged in and asked people to break into the system using the root account. If SELinux can be used to change how root behaves it should be able to do the same with non-root accounts. Anyhow here are some links I found that may help. http://www.redhat.com/docs/manuals/enterprise/RHEL-4-Manual/selinux-guid e/rhlcommon-section-0047.html http://danwalsh.livejournal.com/1538.html http://www.nsa.gov/selinux/ -Greg

2 1

RE: [CentOS] Simple backup program
by Mark Schoonover 14 Jun '06

14 Jun '06

Robin Mordasiewicz wrote: > On Wed, 14 Jun 2006, Les Mikesell wrote: > >> On Wed, 2006-06-14 at 13:09 -0400, Bowie Bailey wrote: >>>>> I am looking for a simple backup program that I can use to backup >>>>> a CentOS box to a local tape drive. >> >>>> http://flexbackup.sf.net >>>> >>>> I used that for years, but the network grew and needed a "bigger" >>>> solution so I switched to backuppc which is working great. >>> >>> I'm using backuppc. I just need something to dump the backuppc >>> machine to tape for an offsite or last-resort backup. The problem >>> is that backuppc is currently using 161GB (compressed) and the >>> tapes only hold 40GB each, so I need something with some sort of >>> intelligent tape-spanning capability. >> >> You are going to have more trouble than that. Backuppc will have >> millions of hardlinks in that 161GB and nearly all file oriented >> backup programs will take an impractical amount of time to deal >> with them. And restoring will be even worse - basically everything >> ends up building a table of inode numbers and scanning it for a >> match on every hardlink. >> >>> I haven't seen flexbackup. I'm currently evaluating afbackup. >> >> You really want a matching external hard drive so you can >> dd an image copy to it. There has been quite a bit of discussion >> on this topic on the backuppc mail list and I'm not sure anyone >> has come up with an ideal solution. Or, you can use the 'archive >> host' feature of backuppc to generate tar images of backup runs >> optionally compressed and split to fit your media, but these >> are copies of individual hosts and you loose the pooling feature. >> > my .02$ is bacula > It spans tapes. fully featured, reliable, well documented etc. I used to use Bacula way back when, but restoring large amounts of data - 1TB range from tape is very slow. Went rsync to drives on another internal server, and a backup server in our colo. Rsync makes it very easy to do hourly, daily, weekly or monthly snapshots of data. HTH Mark

1 0

OpenSSH w/ Kerberos
by Michael B Allen 14 Jun '06

14 Jun '06

I'm slightly shocked to see that ssh doesn't do kerberos. Is this possible or am I being stupid? Mike -- Michael B Allen PHP Extension for SSO w/ Windows Group Authorization http://www.ioplex.com/

3 4

RE: [CentOS] Simple backup program
by Bowie Bailey 14 Jun '06

14 Jun '06

Ajay Sharma wrote: > Bowie Bailey wrote: > > I am looking for a simple backup program that I can use to backup a > > CentOS box to a local tape drive. Hopefully someone here can give > > me a recommendation. > > > > This is what I need: > > - Simple launching of manual backups (preferably from the > > command line) > > - Ability to span tapes for a large backup > > - Proper treatment of hardlinked files > > - Notification via email or similar when it is ready for the > > next tape. > > > > I tried mondo-rescue, but decided against it after it spent 4 hours > > just trying to index the files (it never actually started the > > backup). > > > > I am considering Amanda, but the setup is a bit complex and, based > > on the docs, the tape spanning capability isn't the best. > > > > Anyone have any suggestions? I would think that there would be a > > simple program out there to backup and restore from tape without all > > of the extra scheduling and indexing features. > > http://flexbackup.sf.net > > I used that for years, but the network grew and needed a "bigger" > solution so I switched to backuppc which is working great. I'm using backuppc. I just need something to dump the backuppc machine to tape for an offsite or last-resort backup. The problem is that backuppc is currently using 161GB (compressed) and the tapes only hold 40GB each, so I need something with some sort of intelligent tape-spanning capability. I haven't seen flexbackup. I'm currently evaluating afbackup. -- Bowie

3 2

2 machines running centos and parallel ports
by Jerry Geis 14 Jun '06

14 Jun '06

I have two machines both running centos 4.3. I have a laplink cable (parallel) between them. On one machine I do "echo Hello > /dev/parport0" on the other machine I wrote a short c program to open /dev/parport0 and when characters arrive print them on the screen. Seems simple enough but nothing comes across. Both machines parallel ports are set for PS/2 mode. Is there a reason this would not work? THanks, jerry

2 1

RE: [CentOS] How to create a secure user only for ssh login?
by King, John (Greg) (LMIT-HOU) 14 Jun '06

14 Jun '06

One way is the wheel group in /etc/group. Uncomment the following line in /etc/pam.d/su: auth required /lib/security/$ISA/pam_wheel.so use_uid Uncommenting this line allows only the users in the wheel group to become root by using the su command and entering the root password. All other users will receive a message stating the password is incorrect. You will also want to create the wheel group in /etc/group and add users to it if it does not exist (CentOS 4 I know does but some older redhat implementations did not if I recall correctly). I am unsure of how this interacts with sudo though. If you allow users to use sudo command, make sure they cannot 'sudo su root'. -Greg > -----Original Message----- > From: centos-bounces(a)centos.org > [mailto:centos-bounces@centos.org] On Behalf Of M. Fioretti > Sent: Wednesday, June 14, 2006 11:57 AM > To: centos(a)centos.org > Subject: [CentOS] How to create a secure user only for ssh login? > > Hello, > > I've read on several howtos that one way to make ssh more secure, or > at least reduce the damage if somebody breaks in, is to NOT allow > direct ssh login from root, but allow logins from another user. So you > have to know two passwords in order to do any real damage. > > Does this make sense? IF yes, what is the right way to create an user > only for this purpose, that is one that can only login to give me a > local prompt to become root, but has no privilege, no possibility to > create files, or do anything at all? > > TIA, > Marco > > -- > Marco Fioretti mfioretti, at the server mclink.it > Fedora Core 3 for low memory http://www.rule-project.org/ > > Don't you wish you had more energy... or less ambition? > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos >

1 0

RE: [CentOS] Tape drive throughput
by Bowie Bailey 14 Jun '06

14 Jun '06

Joshua Gimer wrote: > Bowie Bailey wrote: > > I have a backup spooling onto a DLT drive. Is there any tool that > > will let me monitor the data throughput on the device? > > You can use iostat which is part of the sysstat package. > > yum install sysstat > > You can set up an interval and a count and have it redirected to a > file for later reference > > iostat 10 20 >> filename Now why didn't I think of that? :) It doesn't appear to be able to show me the tape device directly, but I can get a pretty good idea from watching the disk reads since this system isn't doing anything else at the moment. Thanks. -- Bowie

1 0

RE: [CentOS] Tape drive throughput
by Bowie Bailey 14 Jun '06

14 Jun '06

Bowie Bailey wrote: > I have a backup spooling onto a DLT drive. Is there any tool that > will let me monitor the data throughput on the device? Based on all of the conversation this question generated, it sounds like the answer is "no". Interesting discussion, tho. :) Thanks for all the suggestions. -- Bowie

3 2

Re: [CentOS] Restoring data from disk w/ messed up partition tables
by techlists＠comcast.net 14 Jun '06

14 Jun '06

Unfortunately, I do *not* remember the original partition settings. I was hoping to find a live CD that could fix such disasters (i.e. systemrescueCD, or some such thing). I did find a Windows based program that's supposed to do the trick. The evaluation edition lets you see if it can see your lost data; you have to buy it ($79) to actually be able to recover the data. This was at: http://www.stellarinfo.com/linux-data-recovery.htm I'm sure there must be an open source trick somewhere that should work though. Paul -------------- Original message ---------------------- From: "William L. Maltby" <BillsCentOS(a)triad.rr.com>

4 4

Cleaning Up My Process Table
by Michael B Allen 14 Jun '06

14 Jun '06

I'm upgrading my primary server from RH 7.2 to CentOS-4.3.ServerCD. I REALLY like the ServerCD. Who needs all the fluff that comes with a standard distro? If I want a system-config-gooey I can run Xnest [1] and ssh -X from my laptop. Anyway I have two questions: 1) How can I collectively stop all the NFS, portmap, whatever? I'm hoping it can be manipulated as a group because occationally I actually will want to use NFS. 2) Can I safely turn off dbus, hal, and/or xfs? Or will something really bad happen if I try to run the system-config-gooey's without them? Thanks, Mike [1] Although I haven't managed to figure out how to run it without -ac. PID TTY STAT TIME COMMAND 1 ? S 0:00 init [3] 2 ? SN 0:00 [ksoftirqd/0] 3 ? S< 0:00 [events/0] 4 ? S< 0:00 \_ [khelper] 5 ? S< 0:00 \_ [kacpid] 16 ? S< 0:00 \_ [kblockd/0] 26 ? S 0:00 \_ [pdflush] 27 ? S 0:00 \_ [pdflush] 29 ? S< 0:00 \_ [aio/0] 1055 ? S< 0:00 \_ [kauditd] 1095 ? S< 0:00 \_ [kmirrord] 1096 ? S< 0:00 \_ [kmir_mon] 17 ? S 0:00 [khubd] 28 ? S 0:00 [kswapd0] 103 ? S 0:00 [kseriod] 178 ? S 0:00 [kjournald] 980 ? S<s 0:00 udevd 1115 ? S 0:00 [kjournald] 1743 ? Ss 0:00 syslogd -m 0 1747 ? Ss 0:00 klogd -x 1774 ? Ss 0:00 portmap 1793 ? Ss 0:00 rpc.statd 1819 ? Ss 0:00 rpc.idmapd 1883 ? S 0:00 /usr/sbin/smartd 1892 ? Ss 0:00 /usr/sbin/acpid 1903 ? Ss 0:00 cupsd 1956 ? Ss 0:00 /usr/sbin/sshd 2482 ? Ss 0:00 \_ sshd: root@pts/0 2484 pts/0 Ss 0:00 \_ -bash 2650 pts/0 R+ 0:00 \_ ps fax 1977 ? Ss 0:00 xinetd -stayalive -pidfile /var/run/xinetd.pid 1992 ? SLs 0:00 ntpd -u ntp:ntp -p /var/run/ntpd.pid 2001 ? Ss 0:00 crond 2022 ? Ss 0:00 xfs -droppriv -daemon 2039 ? Ss 0:00 /usr/sbin/atd 2048 ? Ssl 0:00 dbus-daemon-1 --system 2058 ? Ss 0:00 hald 2087 tty1 Ss+ 0:00 /sbin/mingetty tty1 2092 tty2 Ss+ 0:00 /sbin/mingetty tty2 2093 tty3 Ss+ 0:00 /sbin/mingetty tty3 2094 tty4 Ss+ 0:00 /sbin/mingetty tty4 2095 tty5 Ss+ 0:00 /sbin/mingetty tty5 2096 tty6 Ss+ 0:00 /sbin/mingetty tty6 2625 ? Ssl 0:00 /usr/sbin/named -u named -t /var/named/chroot -- Michael B Allen PHP Extension for SSO w/ Windows Group Authorization http://www.ioplex.com/

4 3

changing the eye candy on the default screensaver
by Larry Vaden 14 Jun '06

14 Jun '06

Has anyone already worked out the files involved in changing from the rather pedestrian screensaver to some more pleasing eye candy like Fedora Core 5 uses? thnx/ldv

3 5

Simple backup program
by Bowie Bailey 14 Jun '06

14 Jun '06

I am looking for a simple backup program that I can use to backup a CentOS box to a local tape drive. Hopefully someone here can give me a recommendation. This is what I need: - Simple launching of manual backups (preferably from the command line) - Ability to span tapes for a large backup - Proper treatment of hardlinked files - Notification via email or similar when it is ready for the next tape. I tried mondo-rescue, but decided against it after it spent 4 hours just trying to index the files (it never actually started the backup). I am considering Amanda, but the setup is a bit complex and, based on the docs, the tape spanning capability isn't the best. Anyone have any suggestions? I would think that there would be a simple program out there to backup and restore from tape without all of the extra scheduling and indexing features. -- Bowie

6 5

DELL openmanage question
by Robin Mordasiewicz 14 Jun '06

14 Jun '06

Has someone created a how to or a tutorial for installing/configuring DELL openmanage on centos ? --

5 8

SSL fingerpring mismatch and issuer certificate problem
by M. Fioretti 13 Jun '06

13 Jun '06

I have a remote server running centos 4.3 and a home desktop running suse 10.1. I have generated an SSL certificate on the server, copied it on the desktop and run on the desktop: >openssl x509 -in mynewcertCert.pem -fingerprint -subject -issuer -serial -hash -noout >c_rehash . getting this warning: > > Doing . > WARNING: mynewcertPrivateKey.pem does not contain a certificate or CRL: skipping > mynewcertCert.pem => 2764d17c.0 Now I have noted two things: 1) the fingerprint generated from the openssl command above is different when I run it on centos or on suse 10.1. Why? 2) if I run fetchmail here with these options: I get: fetchmail: 6.3.2 querying my.remote.server (protocol POP3) at Tue 13 Jun 2006 07:22:34 PM CEST: poll started fetchmail: Issuer Organization: The M Zone fetchmail: Issuer CommonName: my.remote.server fetchmail: Server CommonName: my.remote.server fetchmail: my.remote.server key fingerprint: the one obtained running openssl on the server fetchmail: my.remote.server fingerprints match. fetchmail: Server certificate verification error: unable to get local issuer certificate 26227:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:s3_clnt.c:894: fetchmail: SSL connection failed. fetchmail: socket error while fetching from m-mail(a)fm.vm.bytemark.co.uk What is the "local issuer" problem? What am I missing? Is it a consequence of problem 1) ? What is happening, and what must I do to use this certificate? TIA, Marco -- Marco Fioretti mfioretti, at the server mclink.it Fedora Core 3 for low memory http://www.rule-project.org/ I don't even have an email address. I have reached an age where my main purpose is not to receive messages. U. Eco, quoted in the New Yorker

1 1

Restoring data from disk w/ messed up partition tables
by techlists＠comcast.net 13 Jun '06

13 Jun '06

I had the electricity go out the other day. When my Centos 4.3 workstation came up, I said yes when it got to the prompt "Unclean shutdown, force filesystem check?" prompt. It ground away for awhile and then said something about a bad superblock. Yikes! I thought, that's a bad sign. After a reboot, I got nothing but a grub> prompt. I tried booting into rescue mode using the install CD, and got a message "No valid partitions found". I tried to mount /dev/hda, and got a message "no /etc/fstab found". I tried running the install CD, and went into Disk Druid to see if it could see any existing partitions on the drive, and got the message "Partition table corrupted, must re-initialize disk, and reformat". Not a good sign. I backed out at that point, not wanting to go beyond a point of no return. I have about 4 years of archived e-mails, and some other misc stuff on that drive that I don't want to lose. Anyone have any suggestions what steps to take next? Paul

2 1

Any plans to update kernel-utils for newer smartmontools
by rik＠harddata.com 13 Jun '06

13 Jun '06

I have SATA drives and have found that the newest smartmontools package will retrieve smart data from SATA drives with the '-d ata' switch. Is there a devel/testing package of kernel-utils available or should I just roll my own? Rik

3 5

Changing from dynamic ip to static ip
by Thomas E Dukes 13 Jun '06

13 Jun '06

Hello, I have been on a dynamic ip for about 5 years and have just upgraded to a static ip. I know I need to change my network setup on my eth0 nic to static and stop ddclient from trying to update my address but is there _really_ anything else I need to change. I have a couple of websites on this address using *:80 in my httpd.conf. I can easily change this but don't think it would really make any difference if I don't. Also, my ISP is using different lingo than what linux uses. I suspect they think everyone runs Windoze. Can anyone decipher this for me, my ISP tech support has already gone for the day. IP Addresses: 71.30.117.0/30 Netmask: 255.255.255.252 Router IP: 71.30.117.1 <--------------- This Useable IP's: 71.30.117.2 <--------------- and this My ip address, if I do an ifconfig, is 71.30.117.1. This has me a little confused as they tell me my ip address is 71.30.117.2 TIA

5 10

Help debugging superodoctor
by Sam Drinkard 13 Jun '06

13 Jun '06

I've tried several times to get superOdoctor to run on this machine, and have had no luck yet. Aside from this error message, # superodoctor ***************************************************************************** Supero Doctor II - Linux version 2.24(060523) Copyright(c) 1993-2006 by Super Micro Computer, Inc. http://supermicro.com/ ***************************************************************************** (superodoctor:7713): GnomeUI-WARNING **: While connecting to session manager: Authentication Rejected, reason : None of the authentication protocols specified are supported and host-based authentication failed. The application appears to open, then just crashes, never producing any output or anything. I've included a backtrace, just in case someone could help me out. The thing that worries me is the lib64/tls/libpthread.so.0. That same library gave me problems when I was setting up the WRF weather model to run, and was forced to use LD_ASSUME_KERNEL = 2.4 in order to get it to run. I tried the same trick with superodoctor, but did not work. Any and all help appreciated... I've sent requests for help to super micro, but have not gotten any response from them. This is an x86_64 machine, and the version of superodoctor is for the x86_64. AFIK, the installation was OK, with no problems. Regards, Sam Backtrace was generated from '/usr/sbin/superodoctor' Using host libthread_db library "/lib64/tls/libthread_db.so.1". [Thread debugging using libthread_db enabled] [New Thread 182894241344 (LWP 6993)] 0x0000003b4b00bfc4 in waitpid () from /lib64/tls/libpthread.so.0 #0 0x0000003b4b00bfc4 in waitpid () from /lib64/tls/libpthread.so.0 #1 0x000000375d458c04 in libgnomeui_module_info_get () from /usr/lib64/libgnomeui-2.so.0 #2 <signal handler called> #3 0x0000003b4a5706c3 in strstr () from /lib64/tls/libc.so.6 #4 0x000000000042e8f8 in smbus_byte_data_read (bustype=0, smb_base_io_addr=4352, slave=47, offset=40, data=0x7fbffff45c) at smbus.c:636 #5 0x000000000042c00f in get_item_reading (sThis_System=0x63e010, thisitem=0x63e480, parameters=0x63f910, iParameter_Count=38, cRet=0x7fbffff4f0 "0§s") at sd.c:2131 #6 0x000000000040b411 in create_SD_Table (sThis_System=0x63e010, spItem=0x63e480, iItem_Count=19, spParameter=0x63f910, iParameter_Count=38) at main.c:1798 #7 0x000000000040c146 in main (argc=7007456, argv=0x6aece0) at main.c:2471 Thread 1 (Thread 182894241344 (LWP 6993)): #0 0x0000003b4b00bfc4 in waitpid () from /lib64/tls/libpthread.so.0 No symbol table info available. #1 0x000000375d458c04 in libgnomeui_module_info_get () from /usr/lib64/libgnomeui-2.so.0 No symbol table info available. #2 <signal handler called> No symbol table info available. #3 0x0000003b4a5706c3 in strstr () from /lib64/tls/libc.so.6 No symbol table info available. #4 0x000000000042e8f8 in smbus_byte_data_read (bustype=0, smb_base_io_addr=4352, slave=47, offset=40, data=0x7fbffff45c) at smbus.c:636 errNo = 0 i = 0 init_done = -1 res = 0 file = 0 filename = '\0' <repeats 19 times> test_addr = 1685017119 #5 0x000000000042c00f in get_item_reading (sThis_System=0x63e010, thisitem=0x63e480, parameters=0x63f910, iParameter_Count=38, cRet=0x7fbffff4f0 "0§s") at sd.c:2131 iRet = 0 dataH = 0 dataL = 0 data = 0 errNoL = 10154652 errNo = 0 div = 1 bitmask = 4406925 _v = 0 '\0' #6 0x000000000040b411 in create_SD_Table (sThis_System=0x63e010, spItem=0x63e480, iItem_Count=19, spParameter=0x63f910, iParameter_Count=38) at main.c:1798 thisitem = (ITEMS *) 0x63e480 spSD_Table = (SD_TABLE *) 0x9af270 i = 0 div = 0 errNo = 0 Read = "0§s\000\000\000\000\0000§" High = "0§s\000\000\000\000\000®Q" Low = "0§s\000\000\000\000\000û%" #7 0x000000000040c146 in main (argc=7007456, argv=0x6aece0) at main.c:2471 app1 = (GtkWidget *) 0x6aece0 about2 = (GtkWidget *) 0x0 windowAlertMessage = (GtkWidget *) 0x73a730 arg = 6853872 interval = 400 bReset_Status = 0 cpStatus = 0x0 sThis_System = (SYSTEM_VARS *) 0x63e010 spItem = (ITEMS *) 0x63e480 spParameter = (PARAMETERS *) 0x63f910 iItem_Count = 19 cMB_Manufacturer = "Supermicro", '\0' <repeats 19 times> cMB_Product = "X6DA8", '\0' <repeats 24 times> cMB_Version = "PCB Version", '\0' <repeats 18 times> spSD_Table = (SD_TABLE *) 0x73a730

1 0

SSL: Server CommonName mismatch: localhost.localdomain
by M. Fioretti 13 Jun '06

13 Jun '06

Greetings, I have seen via google that this very problem was already discussed on several lists some months ago, but the archives report no solution. I have a remote server with dovecot 1.0-0_12.beta8 on Centos 4.3. IMAP works just fine: I can read email from both Squirrelmail via web and Kmail. Now I have created an ssl certificate on the server, and I'm trying to retrieve email via pop3s from my home PC (running suse, if this matters) When I launch fetchmail here at home I get the error below. Is it caused by dovecot, or something else on the server, like some error I could have made when generating and copying certificates? TIA, Marco marco@polaris:~> fetchmail -vv fetchmail: 6.3.2 querying my.vps.fqdn.name (protocol POP3) at Tue 13 Jun 2006 05:22:50 PM CEST: +poll started fetchmail: Issuer Organization: SomeOrganization fetchmail: Issuer CommonName: localhost.localdomain fetchmail: Server CommonName: localhost.localdomain fetchmail: Server CommonName mismatch: localhost.localdomain != my.vps.fqdn.name fetchmail: my.vps.fqdn.name key fingerprint: 20:93:B4:D8:CB:75:AD:72:F6:00:A8:DC:CE:F2:53:6E fetchmail: my.vps.fqdn.name fingerprints do not match! 23942:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify +failed:s3_clnt.c:894: fetchmail: SSL connection failed. fetchmail: socket error while fetching from remoteuser(a)my.vps.fqdn.name -- Marco Fioretti mfioretti, at the server mclink.it Fedora Core 3 for low memory http://www.rule-project.org/ Only boring people ever get bored Anonymous ----- End forwarded message ----- -- Marco Fioretti mfioretti, at the server mclink.it Fedora Core 3 for low memory http://www.rule-project.org/ There is hopeful symbolism in the fact that flags do not wave in a vacuum. -- Arthur C. Clarke

2 4

Re: Re: [CentOS] Changing from dynamic ip to static ip
by edukes＠alltel.net 13 Jun '06

13 Jun '06

> > From: "Joshua Gimer" <jgimer(a)gmail.com> > Date: 2006/06/13 Tue AM 08:39:36 EDT > To: "CentOS mailing list" <centos(a)centos.org> > Subject: Re: [CentOS] Changing from dynamic ip to static ip > > IPADDR=71.30.117.2 > NETMASK=255.255.255.252 > NETWORK=71.30.117.0 <http://71.30.117.0/30> > GATEWAY=71.30.117.1 > > Add this to your /etc/sysconfig/networking/devices/ifcfg-eth0 > And take out > > BOOTPROTO=dhcp Great! Thanks, Eddie > > On 6/13/06, Thomas E Dukes <edukes(a)alltel.net> wrote: > > > > > > > > > -----Original Message----- > > > From: centos-bounces(a)centos.org > > > [mailto:centos-bounces@centos.org] On Behalf Of William L. Maltby > > > Sent: Tuesday, June 13, 2006 7:41 AM > > > To: CentOS General List > > > Subject: Re: [CentOS] Changing from dynamic ip to static ip > > > > > > On Mon, 2006-06-12 at 18:53 -0400, Thomas E Dukes wrote: > > > > Hello, > > > > > > > > I have been on a dynamic ip for about 5 years and have just > > > upgraded > > > > to a static ip. > > > <snip> > > > > > > I almost didn't mention it because it's so common a concern > > > now, but just in case. > > > > > > Static IP gives attackers a lot more leeway in their attempts > > > to penetrate. Be sure your firewall (from ISP and iptables on CentOS > > > machine) are now appropriate for your situation. With port 80 > > > open, make sure your server stuff is kept up-to-date with > > > security fixes. Make sure all services not needed are > > > disabled. TCP wrappers (hosts.deny and > > > hosts.allow) are up to snuff. > > > > Hi Bill, > > > > Thanks, > > > > Yes, I have a firewall setup and also use denyhosts and fail2ban. > > > > Thanks > > > > > > HTH > > > -- > > > Bill > > > > > > > > > _______________________________________________ > > CentOS mailing list > > CentOS(a)centos.org > > http://lists.centos.org/mailman/listinfo/centos > > > > > > -- > Thx > Joshua Gimer > > _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

Centos 4.3 & drbd
by centos＠bathnetworks.com 12 Jun '06

12 Jun '06

Hiya, I'm new to Centos but learning rapidly but I have been using FreeBSD. I'm trying to setup a HA NFS server using 2 machines. Both machines are running 4.3 updated to the latest via Yum. I did yum groupinstall drbd-heartbeat and yum install kernel-module-drbd-kernel-module-drbd-2.6.9-34.EL to match my kernel. The problem I have is that on 1 machine drbd works fine, but when I start drbd on the other I get an error: Starting DRBD resources: [ d0 ioctl(,SET_DISK_CONFIG,) failed: Invalid argument Lower device is already mounted. cmd /sbin/drbdsetup /dev/drbd0 disk /dev/hde1 internal -1 failed! It is not mounted as far as I can tell - df -a only shows /dev/hda and fstab has no entry for /dev/hde1. I have also tried deleting the partion with parted and recreating it. I have also tried using just /dev/hde. The /etc/drbd.conf is: resource drbd0 { protocol C; on fs1.bathnetworks.local { device /dev/drbd0; disk /dev/hde1; address 10.0.0.1:7788; meta-disk internal; } on shorty.bathnetworks.local { device /dev/drbd0; disk /dev/hdc1; address 10.0.0.2:7788; meta-disk internal; } } fs1 is the machine I am having trouble with. Any help with fixing this would be appreciated. Rob

3 4

even if I do not choose the Xwindows it still installs x ?
by Sentissi, Mohamed 12 Jun '06

12 Jun '06

Hello there I chose not to install the Xwindows and it still did ? a very minimal one (maybe xfce) any idea why ? I installed version 4 Thanks

3 2

Root filesystem is suddenly mounted read-only
by Alfred von Campe 12 Jun '06

12 Jun '06

This is very strange. Everything was running fine Friday night. This morning I walk into work and find that my root file system (which is actually the only filesystem besides /boot) is not writable. Yet mount thinks it's mounted read/write: # mount /dev/mapper/VolGroup00-LogVol00 on / type ext3 (rw) [snip] # touch foo touch: cannot touch `foo': Read-only file system Anyone else seen this? This is on a relatively recently fresh CentOS 4.3 install. Alfred

2 2

Problems with csgfs after update
by C. L. Martinez 12 Jun '06

12 Jun '06

Hi all, Today I have update Centos cluster suite and my test cluster does not startup. When ccsd service tries to start returns this error: [root@srvimss1 lib]# ccsd Failed to connect to cluster manager. Hint: Magma plugins are not in the right spot. When I run magma_tools config plugindir returns me this setup: /lib/magma. This directory does not exists. How can I fix this problem??? Somebody have this problem?? Many thanks. -- C.L. Martinez clopmart(a)gmail.com

1 0

Failed VNC Install
by Brett Serkez 11 Jun '06

11 Jun '06

Installing a new system, I launched the install: linux vnc I was then able to connect with a VNC client and run the install, really cool. All went well until the actual installation started. I saw the formatting of the swap partition, then the root file system and then I was suddenly disconnected. On the console was the following message: *** glibc detected *** double free or corruption (!prev): 0x09baf620 *** install exited abnormally Any ideas as to what to look for? Has anyone used the VNC installation with V4.3? Thanks! Brett

2 2

Deleted my PATH
by Niels Przybilla 11 Jun '06

11 Jun '06

Hi, I have been logged in as root, and it seems to me that i destroyed all my PATh Variables. How can I restore them ? Thnaks for your help and best regards Niels

2 1

PXE booting HP BL25p - Smart Array extended bios data area problem
by Miskell, Craig 11 Jun '06

11 Jun '06

Hi, I recently took delivery of a bunch of HP BL25p blades to add to my collection. I am attempting to install Centos4 x86_64 using PXE - the initial PXE DHCP stuff works, and the kernel and initrd are downloaded, but the server then immediately clears the screen and displays: "1706-Smart Array Controller Extended BIOS Data Area Memory Corrupted Array Controller Interrupt 14h BIOS Cannot Continue System Halted" It's pretty obvious what the problem probably is (the kernel nukes some bit of memory that it shouldn't, or that the smart array hasn't properly marked as reserved), but I don't know what to do to fix it. I have also tried: 1) The i386 kernel and initrd images 2) The RedHat AS4 kernel/initrd images 3) The Centos3 i386 kernel and initrd images 4) Downgrading the System ROM BIOS and Smart Array BIOS (as shipped it had the latest versions) to versions up to a year old. 5) Playing with memmap to exclude mem from 610-640K from being used by the kernel. Booting from CD works, but is suboptimal (I have to type the kernel kickstart options, and I don't want to have to do that 16 times, plus I want easy repeatability in future). Google has been fairly silent on the issue. Does anyone have any suggestions for what else I could try/prod/poke? Thanks, Craig Miskell, Technical Support, AgResearch Invermay 03 489-9279 "The two rules for success: 1. Don't tell people everything you know." - Anon. Please accept my abject apologies for the awful mess of a legal disclaimer which follows. Not my choice ;-( ======================================================================= Attention: The information contained in this message and/or attachments from AgResearch Limited is intended only for the persons or entities to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipients is prohibited by AgResearch Limited. If you have received this message in error, please notify the sender immediately. =======================================================================

3 7

Old (really old) programs under CentOS.
by Lamar Owen 11 Jun '06

11 Jun '06

Ok, I have a small dilemma, and I'm hoping someone here has had to do this before. I have at a site (not PARI) a server running some mission critical software that was written in 1997 for libc5, under AOLserver 2.3. No, source code is not available for that version of AOLserver (it wasn't open-sourced until version 3.0, and the API changed rather dramatically at that point), not that it would help any, as gcc has undergone so many changes since RH5 that a recompile would be very difficult. The software is currently running on Redhat 5.2 (don't laugh; it's got a 2,716-day uptime right now! (yes, that's over 7 years!)) with the libc5 libs loaded. The server hardware is just about ready to fly apart, and I need to see about running this on more modern hardware. Of course, they already have bought the replacement server, a Dell PowerEdge 1850. No way RH 5.2 is going to load on a PE1850 with the megaraid PERC 4e/Si. Now, I've thought about a couple of possibilities: 1.) QEMU or VMware or similar running a RH5.2 instance under CentOS 4; 2.) Running a libc5 setup on CentOS 4. I'd rather do this, as security fixes would at least be available. Going back to a RH5 machine and working was a real trip; had to use telnet (no ssh on RH5); Kernel 2.0 is still there, no yum, no chkconfig/service subsystem, etc. The custom code is written specifically for AOLserver 2.3 in its tcl dialect and using API functions that don't exist in AOLserver 3.0 or later (or it would be a snap to compile AOLserver 4.0.10 on CentOS4 and roll); there's a couple hundred thousand lines of tcl code here, and while they will be contracting a replacement webapp using Plone/Zope, they aren't ready to transition as yet. -- Lamar Owen Director of Information Technology Pisgah Astronomical Research Institute 1 PARI Drive Rosman, NC 28772 828-862-5554 www.pari.edu

4 8

Problem with dual-booting soft-RAID
by Kai Schaetzl 11 Jun '06

11 Jun '06

I set up IDE software-RAID on a test machine for testing the recover functionality. The problem is that it somehow won't boot after removing the first disk, although grub etc. seems to be setup okay. Here's some background: 2 disks hda and hdb RAID 1 setup: /dev/md0 (hda1 + hdb1) /boot /dev/md1 (hda2 + hdb2) / /dev/md2 (hda3 + hdb3) swap done with disk druid during initial setup from server disk, so far so good. Then I installed grub to hdb. grub-install complained all the time (I may have given it the wrong parameter), so I used grub directly: root (hd1,0) setup (hd1) That's correct, isn't it? (Is there a way to determine if grub is installed on the correct disk?) I added a third boot entry to the grub.conf (see below). I then removed disk 1 (hda) from the array by unpowering it and rebooted. Unfortunately, that sent me right in the BIOS PXE boot instead of trying the other disk, well, that's a BIOS problem. So I repowered disk 1 and rebooted. The grub on it is still working somehow but just fills the screen with "grub". So I moved disk 2 before disk 1 as a boot device in BIOS and tried again. This time I get a grub prompt. So, grub is obviously correctly installed on it. However, why doesn't it then boot? When I type in the exact same data that I have in grub.conf it boots. I resynced the disks now, but still can't boot normally. grub.conf is like this (taken from another non-RAID, full setup grub.conf and adjusted, so it differs cosmetically): default=0 fallback=2 timeout=10 #splashimage=(hd0,0)/grub/splash.xpm.gz hiddenmenu title CentOS (2.6.9-34.0.1.EL) root (hd0,0) kernel /vmlinuz-2.6.9-34.0.1.EL ro root=/dev/md1 initrd /initrd-2.6.9-34.0.1.EL.img title CentOS-4 Server_CD (2.6.9-34.EL) root (hd0,0) kernel /vmlinuz-2.6.9-34.EL ro root=/dev/md1 initrd /initrd-2.6.9-34.EL.img title CentOS 2 (2.6.9-34.0.1.EL) root (hd1,0) kernel /vmlinuz-2.6.9-34.0.1.EL ro root=/dev/md1 initrd /initrd-2.6.9-34.0.1.EL.img When I change default to 2 it still doesn't boot, just gets me grub. I then reinstalled grub on the resynced hda with the same commands used earlier (adjusted for it, of course) and rebooted with hda as first boot disk. There's still the same behavior as before: booting from hda gives "grub grub grub ...". So, none of two boots like it should. disk 1 cannot boot at all, although resynced and disk 2 only manually. What could be the problem? Kai

7 20

RE: [CentOS] Tape drive throughput
by Bowie Bailey 11 Jun '06

11 Jun '06

Rodrigo Barbosa wrote: > On Fri, Jun 09, 2006 at 03:56:36PM -0400, Bowie Bailey wrote: > > I have a backup spooling onto a DLT drive. Is there any tool that > > will let me monitor the data throughput on the device? > > Throughput on a tape drive is very variable, depending on how you are > writing/reading the data to it. > > So for some meaningful numbers, you would need your backup solution > to provide them. I'm just looking for raw bps flowing to the device. I don't really care about compression and such at the moment, I just want a rough idea of what the drive is doing. -- Bowie

5 14

ServerCD for x86_64
by Lazy 11 Jun '06

11 Jun '06

I can't find it. I checked several mirrors without any luck. There was one in 4.2 days but now it's gone. Will there be one for 4.3 ? -- Michal

1 0

rhel source rpms
by bruce 10 Jun '06

10 Jun '06

hi... new to centos, but i have a few questions... i understand that centos is a derivative of rhel, created from the exact/underluing source files used to create rhel. if this is the case, is it possible to get the actual source SRPMS for either RHEL, or for CentOS? I used to see the source files on the redaht system, but I don't seem to see them anymore... i'm curious to know what's better, using CentOS, or the latest fedora FC version... thanks -bruce bedouglas(a)earthlink.net

4 4

CentOS folding@home team
by Sharon Kimble 10 Jun '06

10 Jun '06

Congratulations to the CentOS folding@home team for breaking through the rank 400 barrier. The next target is the rank 250 :) More information about the team can be found at http://www.sharons.org.uk/cf.html, and we welcome new members and their machines. We always need more members and more machines too :) Sharon. -- 18:47:57 up 8 days, 20:56, 2 users, load average: 1.30, 1.76, 1.61 A taste of linux http://www.sharons.org.uk/taste/index.html efever http://www.efever.blogspot.com/ Centos 4.3, KDE 3.5.2-7.0, OpenOffice 2.0.2 Registered Linux user 334501

6 5

CentOS-announce Digest, Vol 16, Issue 4
by centos-announce-request＠centos.org 10 Jun '06

10 Jun '06

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2006:0486 Moderate CentOS 3 i386 mailman - security update (Tru Huynh) 2. CESA-2006:0486 Moderate CentOS 3 x86_64 mailman - security update (Tru Huynh) 3. CESA-2006:0544 Moderate CentOS 4 x86_64 mysql - security update (Johnny Hughes) 4. CESA-2006:0544 Important CentOS 4 i386 mysql - security update (Johnny Hughes) 5. CESA-2006:0486 Moderate CentOS 4 x86_64 mailman - security update (Johnny Hughes) 6. CESA-2006:0486 Moderate CentOS 4 i386 mailman - security update (Johnny Hughes) 7. CESA-2006:0486 Moderate CentOS 3 ia64 mailman - security update (Pasi Pirhonen) 8. CESA-2006:0486 Moderate CentOS 4 axp mailman - security update (Pasi Pirhonen) 9. CESA-2006:0486 Moderate CentOS 4 ia64 mailman - security update (Pasi Pirhonen) 10. CESA-2006:0486 Moderate CentOS 3 s390(x) mailman - security update (Pasi Pirhonen) 11. CESA-2006:0486 Moderate CentOS 4 s390(x) mailman - security update (Pasi Pirhonen) 12. CESA-2006:0544 Importatnt CentOS 4 ia64 mysql - security update (Pasi Pirhonen) 13. CESA-2006:0544 Importatnt CentOS 4 alpha mysql - security update (Pasi Pirhonen) 14. CESA-2006:0544 Importatnt CentOS 4 s390(x) mysql - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Fri, 9 Jun 2006 17:53:56 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2006:0486 Moderate CentOS 3 i386 mailman - security update To: centos-announce(a)centos.org Message-ID: <20060609155356.GA26670(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2006:0486 mailman security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2006-0486.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/mailman-2.1.5.1-25.rhel3.5.i386.rpm source: updates/SRPMS/mailman-2.1.5.1-25.rhel3.5.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update mailman Tru -- Tru Huynh (CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

iptables rules
by Abd El-Hameed Ayad 10 Jun '06

10 Jun '06

Hi, I have 2 CentOS servers 82.201.195.123 & 62.139.61.84 I want to deny all ssh logins on port 22 on (62.139.61.84) from any host except from (82.201.195.123) Can anybody tell me such iptables rules to write in /etc/sysconfig/iptables Currently, im using the following rules (on 62.139.61.84) *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :RH-Firewall-1-INPUT - [0:0] -A INPUT -j RH-Firewall-1-INPUT -A FORWARD -j RH-Firewall-1-INPUT -A RH-Firewall-1-INPUT -i lo -j ACCEPT -A RH-Firewall-1-INPUT -i eth1 -j ACCEPT -A RH-Firewall-1-INPUT -i eth0 -s 82.201.195.123 -j ACCEPT -A RH-Firewall-1-INPUT -m tcp -p tcp --dport 22 -j REJECT -A RH-Firewall-1-INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT -A RH-Firewall-1-INPUT -i eth0 -j ACCEPT -A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited COMMIT But i found that somebody is bypassing these rules & trying to authenticate with unknown (or wrong password) accounts Thanx in advance

5 4

Virtualhost, Alias & Subdomains
by Dave J. Hornford 10 Jun '06

10 Jun '06

I am having a problem with subdomains, alias & virtual hosts Centos 4.3, Apache 2.0.52 & PHP 5.04 I can get the primary to work, but not the aliased servers. http.conf extract ********* NameVirtualHost * <VirtualHost *> ServerName www.domain.com DocumentRoot /var/www/html/domain/ ServerAlias www.altdomain.com <http://www.altdomain.com> </VirtualHost> <VirtualHost *> ServerName subdomain.domain.com DocumentRoot /var/www/html/subdomain/ ServerAlias www.subdomain.altdomain.com <http://www.subdomain.altdomain.com> </VirtualHost> ********** dave

5 10

Mouse problems
by Mace Eliason 09 Jun '06

09 Jun '06

Hi I am running Centos 4.3 and I having irratic problems with my mouse. I have the same problems with other versions of centos as well. I have search and tried everything that I could find but still it's not working right. It is a new microsoft laser wireless mouse 6000 For the most part it seems to work okay but it the buttons seem to click on there own a you move the mouse. For example if I click on the menu it drops down as long as the mouse is moving down the menu its fine as soon as I stop it loads what ever progam the mouse is on. Clicking has problems to some time you have to click serveral times to get it to work. Or you click a check box and when you move the mouse off the check box it un checks. I have check the X config file and it is set to what is suggested for usb mice. Any one have similar problems. If I plug in a regular optical usb mouse it works just fine. Mace

2 1

RE: [CentOS] Tape drive throughput
by Bowie Bailey 09 Jun '06

09 Jun '06

Rodrigo Barbosa wrote: > On Fri, Jun 09, 2006 at 04:15:38PM -0400, Bowie Bailey wrote: > > Rodrigo Barbosa wrote: > > > On Fri, Jun 09, 2006 at 03:56:36PM -0400, Bowie Bailey wrote: > > > > I have a backup spooling onto a DLT drive. Is there any tool > > > > that will let me monitor the data throughput on the device? > > > > > > Throughput on a tape drive is very variable, depending on how you > > > are writing/reading the data to it. > > > > > > So for some meaningful numbers, you would need your backup > > > solution to provide them. > > > > I'm just looking for raw bps flowing to the device. I don't really > > care about compression and such at the moment, I just want a rough > > idea of what the drive is doing. > > There is no such thing. You "raw bps" will vary greatly depending on > your blocksize and other factors. I don't follow. The backup program is writing data to the device. Regardless of how complex that data stream is, there is a specific amount of data that is transmitted in a given period of time. This would be like sticking a meter inline on an ethernet cable and simply counting bits. There may or may not be a tool to do this and it may or may not be a useful measurement, but it should be possible. -- Bowie

2 1

Tape drive throughput
by Bowie Bailey 09 Jun '06

09 Jun '06

I have a backup spooling onto a DLT drive. Is there any tool that will let me monitor the data throughput on the device? -- Bowie

2 1

custom cd's
by Michel 09 Jun '06

09 Jun '06

I'm looking for a script or some tool that enables me to create custom iso's for centos 4.3 I'l also need tools to build some custom rpm's. What i want to do is create a cd that will install centos 4.3 fully updated (at the time of cd creation) together with self created rpm's of ispconfig.

5 11

shadow file question
by Feizhou 09 Jun '06

09 Jun '06

There is this * in the password field of the shadow file for certain accounts. I know that the ! is to indicate a locked account but what does a * mean? man 5 shadow does not reveal anything.

4 9

SuperOdoctor for super-micro
by Sam Drinkard 09 Jun '06

09 Jun '06

Rats... found some hardware monitoring from the vendor and it's broken, or I'm missing some pieces. No mention of CentOS specifically, but RH is supported, so figured it *ought* to work. I'm apparently missing a library -- liblinc.so.1, and a net search reveals several sources, both for x86 and 64-bit. Tried them both, after the x86 did not work, and the 64-bit I thought was going to work, but it crashes the application under gnome, and under text. Yes, I did the bad thing (tm) and installed an rpm not from yum, and now, I can't seem to make rpm remove it. Says it's not installed, but it is. Rebuilt the database and still says it's already installed when I tried to reinstall it, but says it's NOT installed when I try to remove it ...hmmmph. I know where the rm -f keys are :-) Question to the gang. Anybody have this software working on a supermicro board, and if so, what did you do to get it going? Thanks... -- Sam W.Drinkard -- sam(a)wa4phy.net http://wa4phy.net Augusta Area Mesonet cell 706.825.8513 Home 706.868.7253 MAIL 4428 Branchwood Drive, Martinez Georgia, 30907-1304

6 9

yum list updates error
by Melinda Odom 09 Jun '06

09 Jun '06

Hi, I get this error when running yum list updates [root@godslove etc]# yum list updates Gathering header information file(s) from server(s) Server: CentOS-3 - Base retrygrab() failed for: http://mirror.centos.org/centos/3/os/i386/headers/header.info Executing failover method failover: out of servers to try Error getting file http://mirror.centos.org/centos/3/os/i386/headers/header.info [Errno 4] IOError: <urlopen error > Sincerely, Melinda Odom www.designhosting.biz 479-471-0891 -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.394 / Virus Database: 268.8.3/359 - Release Date: 6/8/2006

3 2

mdadm raid 1 question
by William Warren 09 Jun '06

09 Jun '06

Does Centos 4.2 have the grub issue where the boot loader does not get installed onto both hard disks in a software Raid 1 environment? if so does 4.3 solve that issue? -- My "Foundation" verse: Isa 54:17 No weapon that is formed against thee shall prosper; and every tongue that shall rise against thee in judgment thou shalt condemn. This is the heritage of the servants of the LORD, and their righteousness is of me, saith the LORD. -- carpe ductum -- "Grab the tape" CDTT (Certified Duct Tape Technician) Linux user #322099 Machines: 206822 256638 276825 http://counter.li.org/

3 2

Intel Xeon and hyperthreading
by Sam Drinkard 08 Jun '06

08 Jun '06

Another question some of you may help me make decisions on. I've been doing some reading that indicates that having HT turned on in this dual xeon machine might actually slow down the computing process rather than speeding it up. I rebooted this a.m., and turned HT off, just prior to my main application run. One thing that might be of note, this application is using OMP for utilizing both cpu's, and prior to turning off HT, I had been running the software using 2 cpu's of the 4 that the OS sees. I'm waiting on a model run to finish to see if there is any appreciable difference, but the one thing I do notice right off is cpu utilization is running close to 100% on both, where before, it averaged maybe 50% or thereabouts. Again, sar is showing at last count, 83.56% utilization for user, 10.27% system and only 0.02% nice. Idle was 5.74%. I'm attempting to squeeze every last bit of processing power out of this machine, and would entertain suggestions on tuning if there happen to be any types of tuning that would help. Sam -- Sam W.Drinkard -- sam(a)wa4phy.net http://wa4phy.net Augusta Area Mesonet cell 706.825.8513 Home 706.868.7253 MAIL 4428 Branchwood Drive, Martinez Georgia, 30907-1304

4 11

CentOSPlus Kernel for 586?
by William L. Maltby 08 Jun '06

08 Jun '06

I have the problem that I almost never throw anything away that can still be useful. In itself, not bad. Combined with the "World We Live In" (TM), a "Less Than Optimal Behavior" (SM). I need some of the features in CentOSPlus kernels for my 586 (K6-III). 1) I don't mind doing it myself and contributing results, if that's what it takes. Only having LFS experience (rpm nu2me), I anticipate a "learning curve" and a minimal amount of hand holding. Since I keep abreast of the lists, know how to Google the list, have heavy development background and *light* and *ancient* admin (but for my little nook here), ... (you get it) hand-holding should be very little. 2) My target machine has a minimal (mostly) CentOS 4.3 kept up-to-date and plenty of HD. Also have a 2.2PR Athlon w/768M DR ram, plenty of hd, so cross-compile (I don't remember details from my LFS days) is reasonable. 3) I am already subscribed to the developer's list if that is needed (I think, don't recall if I saw anything from there). 4) DOWNSIDE (maybe more?) Karnbir might have to tolerate my occasional short outbursts of humor as they help extend the lifespan of various pieces of equipment in my little nook. I'll let that go someday when I have milked it for all I think it's worth. ;-) 5) Additional delay because I'm reading studiously trying to learn new/updated admin related stuff. It seems that since security became a concern, the *necessary* bloat to functions is unbelievable (I'd be afraid to read the estimates of % of budget devoted to security nation- wide). 6) OTOH (there's always one, eh?) if the walkers-on-water denizens of the list/project want to make one available, I can keep learning/configuring my nook and contribute somehow later on. TIA -- Bill

2 6

PHP Extensions
by Claudio Castro 08 Jun '06

08 Jun '06

Hi all, I have a problem, I'm running CentOS 4.3 and I just installed php with yum, later I realize that I nedd LDAP support so I download the php-ldap rpm with yum, everything was OK...but now..the problem is that I need Informix support, so I search for a php-ifx module to see if it exist...but no. So, what are my options? recompile a fresh new php with informix support...loosing the automatic updates with yum... or compile php with informix support in another machine and then copy the "informix.so" to "/usr/lib/php4/"? will that work? Claudio

4 7

Apache php and exim
by Lazy 08 Jun '06

08 Jun '06

Hello, I'm using the targeted policy. PHP's mail() function fails because of selinux. audit(1149662369.454:2): avc: denied { setgid } for pid=18085 comm="sendmail" capability=6 scontext=root:system_r:httpd_sys_script_t tcontext=root:system_r:httpd_sys_script_t tclass=capability When i turn to permisive mode: audit(1149668677.105:12): avc: denied { setuid } for pid=29159 comm="sendmail" capability=7 scontext=root:system_r:ht tpd_sys_script_t tcontext=root:system_r:httpd_sys_script_t tclass=capability audit(1149668677.157:13): avc: denied { dac_override } for pid=29159 comm="sendmail" capability=1 scontext=root:syste m_r:httpd_sys_script_t tcontext=root:system_r:httpd_sys_script_t tclass=capability audit(1149668677.209:14): avc: denied { write } for pid=29159 comm="sendmail" name="input" dev=dm-3 ino=1335707 scont ext=root:system_r:httpd_sys_script_t tcontext=system_u:object_r:var_spool_t tclass=dir audit(1149668677.209:15): avc: denied { add_name } for pid=29159 comm="sendmail" name="1FntLB-0007aJ-6i-D" scontext=r oot:system_r:httpd_sys_script_t tcontext=system_u:object_r:var_spool_t tclass=dir Maybe there should be a context change to some mta specific context diuring the execution of /usr/sbin/sendmail. ls -Z /usr/zbin -rwsr-xr-x root root system_u:object_r:sbin_t /usr/sbin/exim lrwxrwxrwx root root root:object_r:sbin_t /usr/sbin/sendmail -> /etc/alternatives/mta lrwxrwxrwx root root system_u:object_r:sbin_t /usr/sbin/sendmail.exim -> exim Maybe exim shuld be sendmail_exec_t ? I can't experiment now. Will try setting it later. Can anyone give me some guaidance ?

3 3

(?) Loss of fullscreen mode with freenx-0.5.0-8.c4
by Jay Leafey 08 Jun '06

08 Jun '06

I've currently got the nx-1.5.0-1.centos4.i386, freenx-0.5.0-8.c4.noarch, and nxclient-1.5.0-141.i386 packages installed on a couple of CentOS 4 update 3 systems and I'm getting the same results on all of them. I got the new version of freenx via "yum update" and it appears to have "broken" fullscreen mode. The connection config file I have been using does have the "fullscreen" option set (<option key="Resolution" value="fullscreen" />) but wheras it used to really go into fullscreen mode it does not since the update. I now see the top and bottom panels from the "parent" display and a window title on the NX client window, which is not what I was getting in "fullscreen" mode with 0.4.4. I reran the connection wizard and created a new connection, insuring that the options were what I wanted, but it still has the same behaviour. I downgraded freenx to the 0.4.4-1.centos4 package and the expected behaviour returned. Am I screwing up somewhere, or did I miss something in the documentation? Any thoughts? Thanks! -- Jay Leafey - Memphis, TN jay.leafey(a)mindless.com

4 4

inscribirme
by Mónica Marcela De los Rios A 08 Jun '06

08 Jun '06

Mónica Marcela De los rios A. Ingeniera de Soporte de red CABLEPACIFICO S.A. Tel: 319 93 82 Ext. 312 e-mail:mdelosrios@cablepacifico.com -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

1 0

Swap
by Sam Drinkard 08 Jun '06

08 Jun '06

I know this is more of a general unix question, but the thread about the last kernel update, and memory usage got me to looking and thinking. Given a system with 2 Gb of memory, and at peak usage, top reports considerably less than the 2 gig amount in use, as well as system monitoring that never shows all available memory used, what would happen if you just turned swap off, and let memory handle things? This machine here, has now crept up to using just under 400mb of swap, yet I've never seen total memory usage above about 1.4gb. I'm a bit leary of just "swapoff" while the machine is running the weather model, as I'd hate to crash things, but I'm just wondering if turning off swap (assuming the system is actually using the disks) would break things or in the best case, speed things up. -- Sam W.Drinkard -- sam(a)wa4phy.net http://wa4phy.net Augusta Area Mesonet cell 706.825.8513 Home 706.868.7253 MAIL 4428 Branchwood Drive, Martinez Georgia, 30907-1304

9 26

Swap memory: I can't reconcile this stuff.
by William L. Maltby 08 Jun '06

08 Jun '06

I need to look more into it, but before I start the long and arduous "googling my life away" process, I figured someone might know the answer. I've read the man pages several times and they didn't change! :-( As normal, while looking at one thing, something else bites my butt. I tuned on the swap field in top and sort on it. Here's an edited snippet of the results. Mem: 775708k total, 764752k used, 10956k free, 60780k buffers Swap: 1572856k total, 160k used, 1572696k free, 377324k cached PID VIRT RES SHR %MEM SWAP COMMAND 24729 127m 32m 15m 4.3 94m evolution 3409 97220 5268 4304 0.7 89m evolution-data- 2851 115m 36m 7120 4.8 79m X 10937 109m 45m 14m 6.0 63m firefox-bin 3417 63076 7876 6756 1.0 53m evolution-alarm 3363 40332 7284 6228 0.9 32m eggcups 24745 37480 8176 6876 1.1 28m evolution-excha 3736 53272 29m 8660 3.9 22m gnome-terminal 3361 44404 21m 10m 2.9 21m nautilus 3357 39868 21m 10m 2.8 17m gnome-panel 4096 25460 7600 5960 1.0 17m gkrellm 3373 20488 3492 2944 0.5 16m gnome-vfs-daemo 3367 43608 26m 10m 3.4 16m rhn-applet-gui 3359 19904 6128 5316 0.8 13m gnome-volume-ma 3387 20904 8068 6696 1.0 12m clock-applet 3389 19456 6648 5696 0.9 12m notification-ar 3316 19080 7140 5960 0.9 11m gnome-settings- 3385 22304 10m 7576 1.4 11m mixer_applet2 3244 21508 9960 6868 1.3 11m gnome-session 4144 22476 10m 7456 1.4 11m wnck-applet 2587 12412 2364 1940 0.3 9.8m gdm-binary 2846 13220 3340 2728 0.4 9880 gdm-binary 3365 13812 4532 3920 0.6 9280 pam-panel-icon 3355 14768 7524 5984 1.0 7244 metacity 7182 10328 3436 2280 0.4 6892 sendmail 18501 11080 4248 1912 0.5 6832 cupsd Note that the summary line says 160k of swap is used. The man pages say the summary and the details under "SWAP" are both reported in "k". No mention of "m" is made, I presume that it means "megabytes"? If so, I can't reconcile what I'm seeing. Free seems to support the summary lines. total used free... Mem: 775708 764772 10936... -/+ buffers/cache: 326584 449124 Swap: 1572856 160 1572696 Cat of /proc/meminfo also seems to support the summary lines. SwapTotal: 1572856 kB SwapFree: 1572696 kB Now, if I treat all those numbers ending in "m" as megabytes, it doesn't take long to see that I've been lied to somewhere along the way. Or alternatively, I'm dense and "Just Don't Get It" (TM). Any help? -- Bill

7 28

RE: [CentOS] Simple backup program
by Bowie Bailey 07 Jun '06

07 Jun '06

Paul Heinlein wrote: > > Bacula (www.bacula.org) will do what you want, though wading through > the initial configuration process can take a couple hours. Tape > spanning is well supported; backups can be scheduled or initiated from > the command line; the cli restore process has an interface similar to > dump/restore, so it's fairly easy to navigate. > > We use it to back up CentOS, Debian, Gentoo, and OS X to tape. Will the el3 rpms work with CentOS4? Which rpms do I need? -- Bowie

3 2

Fedora source packages on Centos -- libtiff again
by Robert Moskowitz 07 Jun '06

07 Jun '06

In my seeking a managable way to build libtiff, on the Asterfax forum I got the following recommendation (from another fax user that made the move to libtiff 3.8.2): ================================================================ Hi Robert, I have compiled libtiff-3.8.2 from the source package for my Fedora Core 4 machine. I am not sure about CentOS, but I think you can try to do the same with rpmbuild and the source package for Fedora: - Install the rpmbuild tools in CentOS; - Download the source package for Fedora: <http://mirrors.ircam.fr/pub/atrpms/src/fc6-i386/redhat/SRPMS.updates/libtif…>http://mirrors.ircam.fr/pub/atrpms/src/fc6-i386/redhat/SRPMS.updates/libtif… - Install the source package as a non-root user: rpm -ivh libtiff-3.8.2-2.src.rpm - Go to your rpmbuild folder: cd ~/rpmbuild - Rebuild the package: rpmbuild -ba SPECS/libtiff.spec If everything goes well, you will find a brand new set of RPM packages in the ~/rpmbuild/RPMS/i386/ (replace i386 for your actual architecture if you're not building on i386), which you can install with the upgrade RPM command: rpm -Uvh libtiff-3.8.2*.rpm ================================================================ Does this 'look right' for Centos? If not what do I change? And how do I get the rpmbuild tools? yum install rpmbuild ?? Finally, once I have built 3.8.2, how would I migrate it to other systems?

2 6

Installing Centos4.3 in VMWare on XP
by Jeffrey B. Layton 07 Jun '06

07 Jun '06

Evening everyone, I'm trying to install Centos 4.3 in VMWare Workstation running on Windows XP (my laptop). I downloaded the CD iso's to my Linux box and burned them (I did them correctly since last time I screwed them up). However, when I start the VM in VMWare, it says the CD isn't bootable. Any ideas? Thanks! Jeff

11 18

SAR
by Sam Drinkard 07 Jun '06

07 Jun '06

Folks, At what point in iowait should I start to worry about having a bottleneck, or is this something that can't be answerd with a single integer? According to sar, after my last reboot to turn off hyperthreading as a test, at one time, I see 4.9% iowait, but then one minute later, it droped back to 0.01%, and rarely even gets to 1.0%, at least what I remember from yesterday. ? thanks.... Sam

3 2

RE: [CentOS] Installing Centos4.3 in VMWare on XP
by Mark Schoonover 07 Jun '06

07 Jun '06

Jeffrey B. Layton <mailto:laytonjb@charter.net> tapped at Tuesday, June 06, 2006 5:07 PM: > Jim Perrin wrote: >>> You lost me (not unusual). I'm new to VMWare. How do you tell it >>> to use the iso as the cdrom? Can you walk me through this? (off-line >>> of course). >> >> Put the iso in some location that makes sense. >> Edit the properties of your vmware machine, and then select the >> cdrom. The options should let you change it from a physical drive >> (the default) to an iso, where you'll be required to point it to the >> specific file. > Got it. So far so good. I'm working my way through the install. > What do I do when it asks for the second and third and fourth CDs? > Jeff, Just go into the properties for the CD drive, and choose the next ISO. Keep doing that for each "CD" you have. It'll work just fine... Thanks! Mark Schoonover IS Manager American Geotechnical - California, Nevada and Arizona V-> 858.450.4040 F-> 714.685.3909 C-> 858.472.3816 "Don't tell me I'm burning the candle at both ends, just tell me where to get more wax!"

3 2

centos 4.3 alpha cd iso problems
by Michael Galloway 07 Jun '06

07 Jun '06

good day all ... i've started playing around with 4.3 alpha on some ES40 systems. first. the cd iso images all have the incorrect md5sums. i've downloaded them twice from two different mirrors. they are consistent between mirrors. here are the md5sums i get: af45445778616a7d06440fc5d42fcacb centos-4.3-alpha-disc1.iso 9e0a8dc5e5dfbd276fd50caa40428df0 centos-4.3-alpha-disc2.iso 2d9acc0ebe3528fc5b1265235576160f centos-4.3-alpha-disc3.iso 035fd4515ac889676f3a662855e364c6 centos-4.3-alpha-disc4.iso and from the MD5SUMS.cd file: 72d135f1bc2c06e6a535af1905f7c916 centos-4.3-alpha-disc1.iso 8fa0510f6d906bf834629c62d2aede39 centos-4.3-alpha-disc2.iso dfb75e71c34ec8b1caeca65f72d3d869 centos-4.3-alpha-disc3.iso f8711eb928fc91671633793a7586a166 centos-4.3-alpha-disc4.iso for grins i tried to boot disc1 but it completely failed to boot at all. is there a specific place to discuss the alpha port? or is this the correct channel? -- michael

1 0

CentOS-announce Digest, Vol 16, Issue 3
by centos-announce-request＠centos.org 07 Jun '06

07 Jun '06

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2006:0543 Moderate CentOS 4 ia64 spamassassin - security update (Pasi Pirhonen) 2. CESA-2006:0543 Moderate CentOS 4 axp spamassassin - security update (Pasi Pirhonen) 3. CESA-2006:0543 Moderate CentOS 4 s390(x) spamassassin - security update (Pasi Pirhonen) 4. CESA-2006:0543 Moderate CentOS 4 x86_64 spamassassin - security update (Johnny Hughes) 5. CESA-2006:0543 Moderate CentOS 4 i386 spamassassin - security update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 7 Jun 2006 00:40:09 +0300 From: Pasi Pirhonen <upi(a)centos.fi> Subject: [CentOS-announce] CESA-2006:0543 Moderate CentOS 4 ia64 spamassassin - security update To: centos-announce(a)centos.org Message-ID: <20060606214009.GG14498(a)centos.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2006:0543 https://rhn.redhat.com/errata/RHSA-2006-0543.html The following updated files have been uploaded and are currently syncing to the mirrors: files: updates/ia64/RPMS/spamassassin-3.0.6-1.el4.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

CentOS and orinoco silver with yenta socket
by Roberto Pereyra 07 Jun '06

07 Jun '06

Hi I have a fresh install or Centos 4.2 with a orinoco silver pcmicia wireless card with a Yenta socket pci-pcmcia bridge. Cent0S no found any device. How I configure it ? If I type: modprobe yenta_socke modprobe orinoco These modules loads but not works. (This card works with Slackware and Ubuntu with a default install) Any help ? roberto -- Ing. Roberto Pereyra ContenidosOnline Buscas un buen servicio de telefonía IP, prueba http://www.contenidosonline.com.ar

2 4

Inherited an everything box
by Ed Morrison 07 Jun '06

07 Jun '06

Hello Everyone: I inherited a CentOS 4.x box that appears to have been installed with the everything installation option. I would like to strip the box down of all the unnecessary apps and streamline/secure it. Unfortunately, it is a production box and it would be quite inconvenient to burn down and rebuild. Does anyone have any suggestions on how to do this conveniently with yum and still leave the box in a production condition i.e. leave it's needed services up and running? Thanks, Ed

7 13

NIC bonding on modern Proliants
by Francois Caen 06 Jun '06

06 Jun '06

Hello, Does anyone have bonding working under CentOS on a modern Proliant? What driver do you use? My setup: Centos x86_64 4.3 fully patched on a Proliant DL380 G4. 2 built-in NICs: Broadcom Corporation NetXtreme BCM5704 Gigabit Ethernet (rev 10) Using the tg3 driver that came with the OS. I'm trying to set up bonding between the 2 built-in Broadcom NICs in active-backup mode with each NIC going to a separate switch. When I just connect eth0 to a gig port on a switch, both sides on auto/auto, everything is peachy. But when I fire up the bonding, the 2 NICs seem to fail to get a link. The switch sees the ports as up/up, but sometime 1000/full, sometimes 100/half. I've tried hard-setting both sides to 1000/full, using ethtool on the server, no link. Thanks, -- Francois Caen, RHCE, CCNA SpiderMaker, LLC

5 5

RE: [CentOS] Inherited an everything box
by Alex Palenschat 06 Jun '06

06 Jun '06

> Hello Everyone: > > I inherited a CentOS 4.x box that appears to have been installed with > the everything installation option. I would like to strip > the box down > of all the unnecessary apps and streamline/secure it. > Unfortunately, it > is a production box and it would be quite inconvenient to > burn down and > rebuild. Does anyone have any suggestions on how to do this > conveniently with yum and still leave the box in a production > condition > i.e. leave it's needed services up and running? > Ed, I just had to do this with a couple of boxes. A tip I would offfer is the command "yum list extras" which helped immensely in finding any packages that had been installed by previous admin without the benefit of the whole yum/repository system. Other steps I used were to do a chkconfig --list | grep ":on" to see what was set to start and then examining the run scripts to determine whether all services were part of a package or not. Last, check the /etc/rc.local in case they compiled an app and installed it manually. Many times people will install their startup commands in it if they are unfamiliar with chkconfig etc. Good Luck, Alex Palenschat

1 0

Re: [CentOS] NIC bonding on modern Proliants
by David Thompson 06 Jun '06

06 Jun '06

"Dave Hatton" wrote: > >I'm not sure the tg3 drivers are suitable for bonding - although somebody >else may correct me here. I've got bonding up and runnning with CentOS 4 over tg3 slaves -- seems to work great, although it hasn't gone into production (yet). What makes you think tg3 isn't suitable for bonding? Dave Thompson UW-Madison

2 1

Linux routing
by Graham Johnston 06 Jun '06

06 Jun '06

Anyone here using Quagga/Zebra and OSPFd to accomplish Equal Cost Multipath. I have Quagga up and working I just can't get it to insert more than one route into the kernel for any given destination. Graham Johnston Senior Network Analyst Westman Communications Group 204.725.4300 ext 382 johnstong(a)westmancom.com

1 0

paritioning post installation centos4.3
by morovia morovia 06 Jun '06

06 Jun '06

Hello, I have installed centos using automatic partition. I would like to partition my hard disk to /, /var/, /usr, /home separately. Is it possible now to partition post installation. I also need to have FAT32 partition to share files from between ntfs and linux. Thank you, centoser.

2 1

CentOS 4.3 x86_64 xfs module rpm
by Fong Vang 06 Jun '06

06 Jun '06

The xfs kernel modules at dev.centos.org are very handy. There are a couple of xfs modules in the 4.3 x86_64 directory, but I don't think it's for the x86_64 4.3 kernel (2.6.9-34). The latest ones in that directory is for the -22 kernel (I believe this came with CentOS 4.2).

4 9

ATI radeon x700 graphics installation
by morovia morovia 06 Jun '06

06 Jun '06

Hello, I tried to install the proprietary ATI radeon x700 graphics in Centos 4.3 with the capability of 1280x800. I could not able to set the resolution and the display switches back to vesa (800 x 600). Anyone succeed in installing the graphics and is compatible to centos4.3. I have downloaded and installed from, https://support.ati.com/ics/support/default.asp?deptID=894&task=knowledge&f… Thanks Centoser.

1 0

megaraid problem
by Geert Batsleer 06 Jun '06

06 Jun '06

Hi, I'm trying to install Centos 4.3 x86 on a PE 1400SC but the install doesn't find any HD's. So then I get the option to load a module, so I choose for the megaraid_mbox module for the LSI LOGIC 4CH PERC but my RAID5 still doesn't get recognised. Had the same problem 2 years ago with FC3 wich was due to the megaraid module wich got obsolete in the 2.6 kernel but somebody filed a bug and a driver disk was provided to solve this percy problem. Also tried installing the new shiney Ubuntu Dapper server release, but the install also suffered from the same problem. Could someone provide a loadable driver disk for centos? kind regards, GB

4 5

how to 'yum update' in a %post
by Tom Brown 06 Jun '06

06 Jun '06

Hi After a kickstart install how do you get a yum update to run as the final stage of the install? a 'yum update' in the %post does not seem to do anything at all - no errors just nothing? thanks

6 13

CentOS 4.x - Multiple gateways
by Tom Brown 06 Jun '06

06 Jun '06

Hi On a multihomed box how can i set different gateways for each NIC? Setting them in the ifcfg-ethx does not seem to make any difference to the routing? thanks

8 10

Swap: typical rehash. Why?
by William L. Maltby 06 Jun '06

06 Jun '06

I can't resist. Read the thread that was pointed to on lkml. ROTFLMAO. *Real* UNIX addressed these problems long ago. I guess the "Gurus" suffer from NIH (Not Invented Here) syndrome. Given a "general purpose" system, tunability is a must. UNIX, as delivered by USL in such examples as Sys V, had tunables that let admins tune to their needs. A single "swappiness" value is woefully inadequate. Among the tunables were how much memory for cache, how much for buffers, how much for X/Y/Z, high and low water marks for all sorts of memory related stuff and a very valuable attribute bit for executables called the "sticky bit". It is not the "sticky bit" as used now. It said lock this app in memory and never swap it. A variation on that (couldn't keep original semantics with the size of apps these days) would address some of the "responsiveness" issues raised by some. Some admin tunables would address the other issues. The "Gurus" need to learn something my father taught me. "A smart man learns from his mistakes. A wise man learns from the mistakes of others". I'm really smart. :-( And, apparently, so are the "Gurus". To think they have VM this long and no one has thought to swipe these good ideas from real UNIX. And they're still argueing about all that as if it has never been hashed out and addressed before. -- Bill

5 11

CentOS-announce Digest, Vol 16, Issue 2
by centos-announce-request＠centos.org 05 Jun '06

05 Jun '06

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2006:0533-01: Moderate CentOS 2 i386 zebra security update (John Newbigin) 2. CESA-2006:0502-2: Low CentOS 2 i386 bash bug fix update (John Newbigin) ---------------------------------------------------------------------- Message: 1 Date: Mon, 05 Jun 2006 09:49:28 +1000 From: John Newbigin <jnewbigin(a)ict.swin.edu.au> Subject: [CentOS-announce] CESA-2006:0533-01: Moderate CentOS 2 i386 zebra security update To: centos-announce(a)centos.org Message-ID: <44837188.9080805(a)ict.swin.edu.au> Content-Type: text/plain; charset=us-ascii; format=flowed The following errata for CentOS-2 have been built and uploaded to the centos mirror: RHSA-2006:0533-01 Moderate: zebra security update Files available: zebra-0.91a-11.21AS.i386.rpm More details are available from the RedHat web site at https://rhn.redhat.com/errata/rh21as-errata.html The easy way to make sure you are up to date with all the latest patches is to run: # yum update -- John Newbigin Computer Systems Officer Faculty of Information and Communication Technologies Swinburne University of Technology Melbourne, Australia http://www.ict.swin.edu.au/staff/jnewbigin ------------------------------ Message: 2 Date: Mon, 05 Jun 2006 09:52:14 +1000 From: John Newbigin <jnewbigin(a)ict.swin.edu.au> Subject: [CentOS-announce] CESA-2006:0502-2: Low CentOS 2 i386 bash bug fix update To: centos-announce(a)centos.org Message-ID: <4483722E.7010909(a)ict.swin.edu.au> Content-Type: text/plain; charset=us-ascii; format=flowed The following errata for CentOS-2 have been built and uploaded to the centos mirror: RHBA-2006:0502-2 bash bug fix update Files available: bash-2.05-8.7.i386.rpm bash-doc-2.05-8.7.i386.rpm More details are available from the RedHat web site at https://rhn.redhat.com/errata/rh21as-errata.html The easy way to make sure you are up to date with all the latest patches is to run: # yum update -- John Newbigin Computer Systems Officer Faculty of Information and Communication Technologies Swinburne University of Technology Melbourne, Australia http://www.ict.swin.edu.au/staff/jnewbigin ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 16, Issue 2 **********************************************

1 0

OpenOffice 2.0 rpms
by Gavin Carr 05 Jun '06

05 Jun '06

Was just wondering if anyone knows of any third-party RPMs for Open Office 2.0 for CentOS 4? Haven't come up with anything via yum or rpm.pbone.net yet, and would prefer not to go the openoffice.org binary installer route if possible. Cheers, Gavin -- Open Fusion - Open Source Business Solutions [ Linux - Perl - Apache ] http://www.openfusion.com.au - Fashion is a variable, but style is a constant - Programming Perl

5 8

Remote reboot problem
by Sam Drinkard 05 Jun '06

05 Jun '06

Don't know if this might be hardware or software related, but it seems that every time I attempt to do a remote reboot of the machine, everything shuts down normally, and it never comes back. Just returned from the co-lo site, and when I plugged the monitor in, it had gone to the point of "rebooting" and hung. This is 4.3 on x-86. Sam -- Sam W.Drinkard -- sam(a)wa4phy.net WEB http://wa4phy.net Augusta Area Mesonet cell 706.825.8513 Home 706.868.7253 MAIL 4428 Branchwood Drive, Martinez Georgia, 30907-1304

14 21

USB scanner setup: questions, problems
by Niki Kovacs 05 Jun '06

05 Jun '06

Hi, I have a small home LAN consisting of four PC's: one old Pentium III box acting as gateway / connection handler / printer server / file server / scanner server, and then one desktop and two laptops. I recently migrated this LAN from Slackware 10.2 to CentOS 4.3, and everything runs rather fine. One thing I have some trouble setting up is my Canon Perfection USB scanner for network use, which worked fine with Slackware, because things work a bit differently under CentOS. The scanner is attached to the "server" box (192.168.1.1) with a minimal install of CentOS, no window manager, no X. I installed sane-backends on this machine and ran scanimage -L as root, which gave this: [root@babasse ~]# scanimage -L device `epson:libusb:001:002' is a Epson Perfection610 flatbed scanner I read the various docs on sane-project.org, especially this document: http://penguin-breeder.org/sane/saned/ My first problem, and apparently one big difference between CentOS and Slackware, is that there is no entry for the scanner in /dev. Now what does the above output of scanimage -L exactly mean? That my scanner device file is /proc/bus/usb/001/002? [root@babasse 001]# ls -l /proc/bus/usb/001/002 -rw-r--r-- 1 root root 50 jun 5 08:57 /proc/bus/usb/001/002 Now, if that is the case (if not: correct me please), how do I change permissions to that device file? So it doesn't belong to root.root, but to saned.saned, according to the document linked above. By the way: saned.saned doesn't exist, so I just created this system user like this: # useradd -d /dev/null -s /bin/false saned ... which gives: [root@babasse 001]# cat /etc/passwd | grep saned saned:x:500:500::/dev/null:/bin/false (Did I define this system user in an orthodox way? Or is there a better way to do this?) Now when I su to that user and try to run scanimage -L as saned, I get a "No scanners were found" error, which is most likely a permission problem on the device. Now the big question: how do I fix this? I googled about "libusb hotplug scanner device permissions" and some permutations. The problem is not the lack of information on the subject, but the diverging wealth of it. Any suggestions? Niki Kovacs

1 0

Received signal 11 during kickstart
by Alfred von Campe 05 Jun '06

05 Jun '06

I recently built a CentOS from the 4.3 ISOs. Now I'm ready to build another 10 systems using kickstart. I took the anaconda-ks.cfg file from the first system I built manually, modified it slightly (see below), and made it available via http. I booted the new system from the first CentOS 4.3 CD and typed the following: boot: linux ks=http://hostname/test-ks.cfg Here are the changes I made to the kickstart file: - Replaced "cdrom" with "url --url http://hostname" - Removed xconfig line (slightly different video HW) - Changed the host name in the network line - Uncommented the partition information The system boots the initial kernel, gets an IP address, gets the kickstart file via http, but then dies with a "installation exited abnormally -- received signal 11" message. I've done this successfully in the past. Can a misconfigured kickstart file cause this problem? How can I debug this? Alfred

7 12

kernel: Your time source seems to be instable or some driver is hogging interupts
by Erick Perez 04 Jun '06

04 Jun '06

The following error on a SMP x86_64 Centos 4.3 kernel 2.6.9-34 ELsmp appears at boot. and causes things to compute faster. Example, a wait(5) should wait for 5 seconds....it waits for 3 or 2. This was an open bug for that kernel. Has it been patched in the more recent kernel for Centos 2.6.9-34.0.1 ? dmseg output: Freeing unused kernel memory: 164k freed Losing some ticks... checking if CPU frequency changed. EXT3-fs: INFO: recovery required on readonly filesystem. EXT3-fs: write access will be enabled during recovery. warning: many lost ticks. Your time source seems to be instable or some driver is hogging interupts rip __do_softirq+0x41/0xa2 kjournald starting. Commit interval 5 seconds should I insert noapic at grub.conf? What will I loose if i do noapic? This is a performance oriented, intensive voice over ip server. -- ------------------------------------------- Erick Perez Linux User 376588 http://counter.li.org/ (Get counted!!!) Panama, Republic of Panama

7 9

Kernel update = slower ?
by Sam Drinkard 04 Jun '06

04 Jun '06

This is really strange. Day before, I updated the machine here (x86_64) and all went normal. I rebooted, and everything came back just as I expected. Next morning, I noticed one of my jobs during the night had finished, but finished late by about 8 or 9 minutes. I really didn't think much of it, but after looking at jobs running today, I'm seeing the same thing. Processes that used to take 3.75 hours to complete are now taking 4 hours. ( I have cron jobs that were running to process the data after the main run, and they busted) Nothing has changed in the way the model runs, and there have been no changes to input data or any other parameter that would cause a longer runtime. So, the question is, did something change in the kernel that would make the machine run slower? I do have threading turned on in the bios, and all 4 cpu's are shown via dmesg. In fact, I looked at the dmesg output after a reboot and due to another message about losing clock tics, I just checked that I had not encountered the same. Short of rebooting back into the previous kernel, is there any way to tell if something is slowing the box down? -- Sam W.Drinkard -- sam(a)wa4phy.net WEB http://wa4phy.net Augusta Area Mesonet cell 706.825.8513 Home 706.868.7253 MAIL 4438 Branchwood Drive, Martinez Georgia, 30907-1304

3 7

ifcfg's bootproto
by Francois Caen 03 Jun '06

03 Jun '06

Hello, Is there any difference between none and static for bootproto? Thx, -- Francois Caen, RHCE, CCNA SpiderMaker, LLC

2 1

PERL module woes
by Niki Kovacs 03 Jun '06

03 Jun '06

Hi, I'm using CentOS 4.3 on all my PC's, and I'm very happy with it. Everything *just* works. I want to give DVD::RIP 0.97.10 a try. I enabled rpmforge and kbs repos, but there's only 0.52.2 available, which has an annoying bug in it. So I installed the main dependency, transcode, via yum. Then I downloaded the (PERL) sources of DVD::RIP 0.97.10, ran configure (e. g. perl Makefile.PL), and it complains about the following missing PERL modules: AnyEvent 1.02 Event::ExecFlow 0.61 Event::RPC 0.89 Gtk2 1.081 Gtk2::Ex::FormFactory 0.62 Locale::TextDomain 0 [sic!] Next step was to hunt these down with yum. Alas, yum install perl- AnyEvent return a missing dependency error (Coro::Signals) and says it won't be installed. Each of these modules has quite an impressive list of dependencies in return. Now I already performed a manual install of these on Slackware, and it ran fine. So I gave it a try here. Following a suggestion on IRC, I used cpan2rpm for this. But I couldn't get past the second module. The first two dependencies are ExtUtils::Depends and ExtUtils::PkgConfig. Now I can install *one* of these fine with cpan2rpm, but when I get to the second module, I can't rpm -ivh it, because RPM complains about a clash with the other module. Which leaves me clueless. Any suggestions? Niki Kovacs

11 33

Re: [CentOS] [CSL #301925] centosplus kernel xfs patches and CVE-2006-1855
by David Thompson 02 Jun '06

02 Jun '06

Johnny Hughes wrote: > >There is a centosplus kernel that has that errata ... it is version: > kernel-2.6.9-34.107.plus.c4 > >However ... if the only thing you need from the centosplus kernel is the >xfs ... you should use the normal (non-centosplus) kernel and the >kernel-xfs-module that matches it from here: > >http://dev.centos.org/centos/4/testing/i386/RPMS/ > >or > >http://dev.centos.org/centos/4/testing/x86_64/RPMS/ > >(That code is from SGI and has all the latest patches.) Do I understand from this that (for example) kernel-module-xfs-2.6.9-34.0.1.EL- 0.1-2.i686.rpm contains xfs errata this is not present in (the centosplus) kernel-smp-devel-2.6.9-34.107.plus.c4.i686.rpm? Dave

3 2

RE: [CentOS] PERL module woes
by Bowie Bailey 02 Jun '06

02 Jun '06

Karanbir Singh wrote: > Bowie Bailey wrote: > > > > I think I understand what he was trying to say. When I built my > > last system, I decided to go with rpms for everything. It worked > > great until I got to the Perl modules and then it fell apart. > > details please :) This was a couple of months ago, so I don't remember the details. I think the main problem was SpamAssassin and all of its related modules. I may give it another attempt on my next build. I know the repos are constantly getting better and more complete. -- Bowie

2 1

kernel issues
by Joe Pruett 02 Jun '06

02 Jun '06

there doesn't seem to be a src.rpm for the newest kernel up on mirror.centos.org. i need to apply a local patch. is it the same as the upstream version? also, the centosplus unsupported version is either missing the -doc package or people need to know to do some manual intervention to get the regular version to replace the old unsupported version.

2 3

Package Management
by centos＠rio.vg 02 Jun '06

02 Jun '06

What does CentOS use for general package management? SuSE has YaST, Ubuntu has Synaptic, what does CentOS use? I've got CentOS running on a test server, but the documentation is pretty thin on where to begin. If there a central area for these sorts of programs or naming convention?

3 2

RE: [CentOS] centos & mysql
by King, John (Greg) (LMIT-HOU) 02 Jun '06

02 Jun '06

You need to grant the privs to allow the connection. They mysql homepage has a set of docs at http://dev.mysql.com/doc/. More specifically this link which talks about setting up the grant tables http://dev.mysql.com/doc/refman/4.1/en/post-installation.html You could also use phpmyadmin to have a nice frontend to the mysql server system (http://www.phpmyadmin.net/home_page/index.php) Some things to consider: (since you said you were a newbie) 1. If no remote apps are going to be connecting the sql server port (ie only local programs relative to the system), do not open iptables for the sql server port. 1b. configure the /etc/my.cnf file to tell mysql to use local sockets and not listen on a port (skip-networking option). 2. When adding users, never grant a user profile in the mysql table any privs (excluding the default root which you should also rename to something else) as doing so would allow the user those rights across all databases. Instead grant users access via the mysql::db table. Also there is alot of good how-to docs at http://www.hughesjr.com/ for centos, specifically http://www.hughesjr.com/content/view/13/30/Guides -greg ________________________________ From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Stephen A. Wright Sent: Friday, June 02, 2006 4:47 AM To: centos(a)centos.org Subject: [CentOS] centos & mysql Hi everyone, as a newbie to linux Im having a but of a problem getting up and running. Hopefully one of you you can point me in the right direction. I have installed Centos4 on an old server here at work as a dev box, installation went well, and I have mysql up and running. However when I try and connect from my laptop using mysql administrator I get an error saying "the host is not allowed to connect to this server" I tried disabling the firewall to see if that helped and it made no difference. I also tried pinging the server and that was fine. I tried connecting using the servers ip, name localhost and password as blank. When im logged in a root on the server this allows be to login ok. Any ideas? Thanks in advance Steve

1 0

RE: [CentOS] PERL module woes
by Bowie Bailey 02 Jun '06

02 Jun '06

Jim Perrin wrote: > > In fact, the quality of the perl-related rpms from Red Hat is > > the main reason I'm not using RHEL and using CentOS > > Your logic is confusing to me. It does not resemble what I would > consider to be rational thought. I think I understand what he was trying to say. When I built my last system, I decided to go with rpms for everything. It worked great until I got to the Perl modules and then it fell apart. Every time I have tried to install Perl modules from rpms, it quickly evolves into a massive game of "find the missing dependency". Either the module I want can't be found anywhere, or when I do find it, it depends on a module that can't be found. I finally gave up and decided to use CPAN for Perl modules. It is simple, and work amazingly well. It does cause some annoyance when you get other rpms that have dependencies on Perl modules, but that is a problem that I have only seen once or twice. There is a program that will create rpms from CPAN. I considered it and then rejected it as being WAY too much trouble for the number of modules that I typically deal with. -- Bowie

4 4

getting update details
by Mark Belanger 02 Jun '06

02 Jun '06

I see in CentOS 3.6 - the release notes state that it has "improved support for dual-core processors" I got that from http://www.redhat.com/docs/manuals/enterprise/RHEL-3-Manual/release-notes/a… Where might I get more details about this improved support. Specifically I'd like to see if problems I'm having in 3.5 could be related to the kernel and dual core cpus. -Mark -- Mark Belanger LTX Corporation

2 1

CentOS-announce Digest, Vol 16, Issue 1
by centos-announce-request＠centos.org 02 Jun '06

02 Jun '06

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2006:0525 Moderate CentOS 4 ia64 quagga - security update (Pasi Pirhonen) 2. CESA-2006:0525 Moderate CentOS 3 ia64 quagga - security update (Pasi Pirhonen) 3. CESA-2006:0525 Moderate CentOS 4 axp quagga - security update (Pasi Pirhonen) 4. CESA-2006:0541 Moderate CentOS 4 ia64 dia - security update (Pasi Pirhonen) 5. CESA-2006:0525 Moderate CentOS 3 s390(x) quagga - security update (Pasi Pirhonen) 6. CESA-2006:0541 Moderate CentOS 4 axp dia - security update (Pasi Pirhonen) 7. CESA-2006:0525 Moderate CentOS 4 s390(x) quagga - security update (Pasi Pirhonen) 8. CESA-2006:0541 Moderate CentOS 4 s390(x) dia - security update (Pasi Pirhonen) 9. CESA-2006:0525 Moderate CentOS 3 i386 quagga - security update (Tru Huynh) 10. CESA-2006:0525 Moderate CentOS 3 x86_64 quagga - security update (Tru Huynh) 11. CESA-2006:0541 Moderate CentOS 4 i386 dia - security update (Johnny Hughes) 12. CESA-2006:0541 Moderate CentOS 4 x86_64 dia - security update (Johnny Hughes) 13. CESA-2006:0525 Moderate CentOS 4 i386 quagga - security update (Johnny Hughes) 14. CESA-2006:0525 Moderate CentOS 4 x86_64 quagga - security update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 1 Jun 2006 21:15:40 +0300 From: Pasi Pirhonen <upi(a)centos.fi> Subject: [CentOS-announce] CESA-2006:0525 Moderate CentOS 4 ia64 quagga - security update To: centos-announce(a)centos.org Message-ID: <20060601181540.GA14240(a)centos.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2006:0525 https://rhn.redhat.com/errata/RHSA-2006-0525.html The following updated files have been uploaded and are currently syncing to the mirrors: files: updates/ia64/RPMS/quagga-0.98.3-2.4E.ia64.rpm updates/ia64/RPMS/quagga-contrib-0.98.3-2.4E.ia64.rpm updates/ia64/RPMS/quagga-devel-0.98.3-2.4E.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

centos & mysql
by Stephen A. Wright 02 Jun '06

02 Jun '06

Hi everyone, as a newbie to linux Im having a but of a problem getting up and running. Hopefully one of you you can point me in the right direction. I have installed Centos4 on an old server here at work as a dev box, installation went well, and I have mysql up and running. However when I try and connect from my laptop using mysql administrator I get an error saying "the host is not allowed to connect to this server" I tried disabling the firewall to see if that helped and it made no difference. I also tried pinging the server and that was fine. I tried connecting using the servers ip, name localhost and password as blank. When im logged in a root on the server this allows be to login ok. Any ideas? Thanks in advance Steve

2 2

RPM install vs. NFS mount and code versioning
by Alfred von Campe 02 Jun '06

02 Jun '06

The ongoing discussion regarding Perl modules and RPMs, prompted me to post an issue I am currently facing. I support a development team that uses various third party tools, some free, some not, some of which are installed via RPMs, and some that are not. The development cycle is 18-24 months long, and then there are many years of support (continuing engineering) after that, for which the various versions of the tools need to be available. There are a few dozen engineers on the project. Let say that I want to install SuperTool V1.1, and it's available to install only via RPMs. After thorough testing/qualification on one workstation, I need to install it on the few dozen workstations, which is straightforward but possibly time consuming (and you have to deal with workstations that may be down when you are doing the installs). When V1.2 comes out, I can again test it on one workstation, and then deploy it on the remaining workstations. But what if I there is a bug, and we need to test it against the old version of the tool? With RPMs, it is cumbersome to go back and forth between versions. Contrast that with a tar based install, where I can untar the tool in a directory that includes a version number in the path, and then automount that directory to all the workstations. There is only one install, and I can easily move back and forth among the various versions. Now I understand the benefits of RPMs, but when it comes to supporting tool vendors, dealing with tar based installations and using automounts really simplifies things. I am thinking about installing the RPM based tools on one system, and then copying the entire install tree to a NAS and automount it. I know this is not ideal, but I can't think of a better solution. Any thoughts from the members of this list? Have you tried to solve similar problems in the past? If so, how did you do it? Alfred

2 1

Re: [CentOS] [CSL #301925] centosplus kernel xfs patches and CVE-2006-1855
by David Thompson 01 Jun '06

01 Jun '06

Johnny Hughes wrote: > >There is a centosplus kernel that has that errata ... it is version: > kernel-2.6.9-34.107.plus.c4 Excellent. Is there a general way to map from upstream errata kernels to centosplus kernels? The (apparently??) previous convention of suffixing .106.unsupported to the upstream release number seemed to work well, and I don't want to either guess or take up mailing list bandwidth asking every time upstream revs. >However ... if the only thing you need from the centosplus kernel is the >xfs ... you should use the normal (non-centosplus) kernel and the >kernel-xfs-module that matches it from here: > >http://dev.centos.org/centos/4/testing/i386/RPMS/ > >or > >http://dev.centos.org/centos/4/testing/x86_64/RPMS/ Ooooh. That would be cool. I'll look into it. Thanks again. Dave Thompson UW-Madison

2 1

Installing el3 packages on CentOS 4
by José Alburquerque 01 Jun '06

01 Jun '06

Is it possible to install el3 packages on CentOS 4? I'm wondering because there are some packages on dag (for example ac3dec) that are built for el3 and not for el4. Is it better to rebuild the source rpm? Thanks. Sincerely Jose Alburquerque

2 4

[CSL #301925] centosplus kernel xfs patches and CVE-2006-1855
by David Thompson 01 Jun '06

01 Jun '06

Hi All, we've run into a problem with the xfs component in the centosplus kernel (2.6.9-34.106.unsupportedsmp) where synchronous writes sometimes fail with EAGAIN. It's causing headaches for DB2 installs and for our database research group. There is a fix reported at: http://marc.theaimsgroup.com/?l=linux-xfs&m=110808122904352&w=2 ...that's supposed to take care of things. If there is any way these patches could be included in a future centosplus kernel, we would greatly appreciate it. We are enjoying the performance lift from xfs on many systems, and hate to throw it away to get a database to work. Also, are there plans to produce a centosplus kernel that corresponds to the newest RHEL errata kernel (2.6.9-34.0.1.EL)? Cheers and thanks, Dave Thompson UW-Madison

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss