- Discuss - lists.centos.org

Re: selinux stuff - I just don't get
by Brian T. Brunner 15 Nov '05

15 Nov '05

Fixing it isn't my job, that's why! I got other strange fish to fry (like the frigging compiler), if SELinux *couldn't* be disabled, that would inspire an immediate decision to drop the distro. cold. Fix it if it pleases you to do so, *please* understand I'm plenty busy with the things I'm paid to do, and have *my* *own* hobbies & distractions for the free time. When SELinux is ready for The Big Time (meaning it doesn't break other apps), ship it my way! Brian Brunner brian.t.brunner(a)gai-tronics.com (610)796-5838 >>> tdiehl(a)rogueind.com 11/14/05 10:14PM >>> although I fail to see how anyone expects it to ever get fixed if no one will even try to use it. ******************************************************************* This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept for the presence of computer viruses. www.hubbell.com - Hubbell Incorporated

4 3

Rescan harddisk size without rebooting
by kadafax 15 Nov '05

15 Nov '05

Hi list, I have a SAN attached to a CentOS 4.2 server. I have expanded the size of the virtual disk within the SAN (by adding a new HD to the disk pool) and need CentOS to see the new size (CentOS see it as /dev/sdb). I'm using LVM. Do you know a method for the Volume Group to see that one of its harddisk is now bigger, without rebooting (it's not a problem with a reboot but since the LDAP directory is on this server, it is problematic). Thanks. kfx

5 16

CentOS 3.5 - CentOS 4.0 - DL145 G2 Boot problem
by Unni Krishnan 15 Nov '05

15 Nov '05

Hi , I am facing a strange problem .I am unable to install CentOS 4.0 on my HP DL145 G2 Server .I am getting the following error RAMDISK: couldn't find valid RAM disk image starting at 0. Please append correct "root=" boot option VFS: cannot open root device "<NULL>" or unknown-block (3,3) Kernal panic - not syncing VFS unable to mount root fs however CentOS 3.5 installs properly .Can anyone let me why this is happening ? -- Unnikrishnan.P

3 2

Re: [CentOS] [Fwd: [suse-amd64] OFF-TOPIC - *very* bad]
by Brian T. Brunner 15 Nov '05

15 Nov '05

Not a problem. I see it frequently. What's happening is that sudo doesn't ask for a password within "a few" of having gotten a good password. I have noticed that if I wait any significant period of time, I do get the challenge again. This is on CentOS 4, i686. Brian Brunner brian.t.brunner(a)gai-tronics.com (610)796-5838 >>> wam(a)HiWAAY.net 11/15/05 08:05AM >>> I saw this on the SuSE AMD64 list & decided to pass it along, since it seems like a sneaky problem. Later posts confirm it is *NOT* AMD64-specific, nor SuSE 9.3 specific .... -- William A. Mahaffey III --------------------------------------------------------------------- Remember, ignorance is bliss, but willful ignorance is LIBERALISM !!!! ******************************************************************* This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept for the presence of computer viruses. www.hubbell.com - Hubbell Incorporated

1 0

RE: [CentOS] php version
by Ash Christopher 15 Nov '05

15 Nov '05

yum install php?? Maybe I am missing something. ________________________________ From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Mark Quitoriano Sent: Tuesday, November 08, 2005 9:54 AM To: CentOS mailing list Subject: [CentOS] php version How can i install php 4 on Centos 4? is there RPMs for centos 4? or can i use srpms(php4) of centos 3 to be used for centos 4? -- Regards, Mark Quitoriano, CCNA http://www.atamanetworks.com Fan the flame... http://www.spreadfirefox.com/?q=user/register&r=19441

7 11

other repositories question
by dan1 15 Nov '05

15 Nov '05

Hello. I would like to know how other repositories than the official ones for CentOS 4 affect an update of a package if a package is present in both repositories. Will yum install the package that it finds having the highest version number ? and if so, is there a mean to tell yum that we would like to keep the preference to one repository instead of the highest version number on a possibly other repository ? I ask that because I realise that having multiple repositories added to yum might mix up things if the packages placed there are compiled for newer versions, and even possibly create another system than CentOS by updating several main common packages. That would do something between a CentOS and a cAos distribution, is that right ? For example, I would like to use Dag Wieers' repos, but I am in fear that some mix up might happen if there are several same packages with different versions than the official CentOS ones (and is it possible to have same packages there? ). Thanks. Regards, Daniel

3 6

centos 4.x repo on mirrors
by Farkas Levente 15 Nov '05

15 Nov '05

hi, while all the centos 3.x release points to the 3.6 on all mirror sites, the 4.x series still has it's own directory. why are not these just links to 4.2? yours. lrwxrwxrwx 1 97 ftp 3 Nov 10 01:31 3 -> 3.6/ lrwxrwxrwx 1 97 ftp 3 Nov 3 21:01 3.1 -> 3.3/ lrwxrwxrwx 1 97 ftp 3 Nov 3 21:01 3.3 -> 3.4/ lrwxrwxrwx 1 97 ftp 3 Nov 3 21:01 3.4 -> 3.5/ lrwxrwxrwx 1 97 ftp 3 Nov 10 01:31 3.5 -> 3.6/ drwxrwxr-x 14 root root 4096 Oct 28 17:31 3.6/ lrwxrwxrwx 1 97 ftp 3 Nov 3 21:01 4 -> 4.2/ drwxr-xr-x 2 root root 4096 Jul 18 23:11 4.0/ drwxr-xr-x 2 root root 4096 Oct 21 19:54 4.1/ drwxrwxr-x 12 root root 4096 Oct 13 13:59 4.2/ -- Levente "Si vis pacem para bellum!"

3 2

selinux stuff - I just don't get
by Craig White 15 Nov '05

15 Nov '05

I am getting tons of these messages since I updated to 4.2 Nov 12 12:21:39 srv1 dbus: Can't send to audit system: USER_AVC pid=2839 uid=81 loginuid=-1 message=avc: denied { send_msg } for scontext=user_u:system_r:unconfined_t tcontext=user_u:system_r:initrc_t tclass=dbus Now I can see this process... # ps aux|grep 2839 dbus 2839 0.0 0.3 16168 1888 ? Ssl Nov11 0:13 dbus- daemon-1 --system root 17173 0.0 0.1 3748 668 pts/2 S+ 12:22 0:00 grep 2839 but I'm wondering how do I fix selinux so that it doesn't 'deny' this? Thanks Craig -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

13 39

RESOLVED YUM error "can't create transaction lock"
by James B. Byrne 15 Nov '05

15 Nov '05

I found the culprit. The original yum process from November 4th was stalled. I killed this and the lock problem has been resolved. -- *** e-mail is not a secure channel *** mailto:byrnejb.<token>@harte-lyne.ca James B. Byrne Harte & Lyne Limited vox: +1 905 561 1241 9 Brockley Drive fax: +1 905 561 0757 Hamilton, Ontario <token> = hal Canada L8E 3C3

2 1

Re: [CentOS] selinux stuff - I just don't get -- "outgoing firewallsare broken"
by Brian T. Brunner 14 Nov '05

14 Nov '05

> How's forever work for you? ;-> Absolutely FINE thank you! When your WizWonder package is housebroken, let me try it if I'm interested. Until then, a (stubbornly) broken distro will persuade me to try something else. That's why I left Windows, I guess, if you prognosticate correctly, it will be why I leave RedHat/CentOS. btw this has nothing to do with Firewalls at all. I bought a firewall (router) and use it. If I had to upgrade firewall firmware versions, and the new versions broke running applications, I'd consider the new firewall firmware BROKEN. As is, I don't mind SELinux, because I can disable it at installation time. I will continue to do so until it is no longer broken. Brian Brunner brian.t.brunner(a)gai-tronics.com (610)796-5838 >>> thebs413(a)earthlink.net 11/14/05 11:24AM >>> "Brian T. Brunner" <brian.t.brunner(a)gai-tronics.com> wrote: > How do we define Ready? I gave that answer in the text you > replied to: when it doesn't break things. How's forever work for you? ;-> NPTL, ANSI C++, GLibC 2 and many other adoptions Red Hat has made still break things. Heck, we're not even looking at recent things -- from 4K stacks to ACLs. ;-> > You ask about applications not being SELinux aware. The > proper things for SELinux to do in those cases is advise > the operator that SELinux can't manage this app because it > isn't SELinux aware, and that whatever security holes that > application embodies are outside the scope of SELinux. I think that's what the advisement is. You can start disabling some aspects of SELinux -- such as with permissive mode. > This is consistent with SELinux being a *service* to the > operator, not a bully-boss to the operator and the > authors/maintainers of every package Joe Operator might > have on his system. Actually, SELinux _is_ a "bully-boss" to the operator. It will _always_ be a "bully-boss" to the operator. > No, it doesn't. I think _many_ people other than myself have seen _many_ viewpoints on this issue. Why many people seem to think that there must be no less than an absolutism on SELinux until it accomplishes no less than the _impossible_ is beyond me. > It's about ownership of control. Is this RedHats' system > to break if they want to compel me to do things their way? Yes. And you have these options.. 1. Learn it and see if it fits 2. Put it into another mode (e.g., permissive) 3. Disable it 4. Look to another distro choice Red Hat has its reasons, and it's not going to change those reasons. Common Criteria is a major driver right now because of Linux can achive higher CC levels than Windows, while still running applications (which Windows virtually can_not_ do), then Microsoft will lose federal installations en masse. > If not, then distributing SELinux with a > default of 'on' when it breaks running systems is > distributing a broken software package. SELinux will _always_ break running systems. Just like a "deny all outgoing" firewall will too. > Translate: Everybody is out of step except my boy! > (and those who happen to be in step with him). Exactly! SELinux by default is here to stay if you choose Red Hat. > I say Broken, and Disabled for Good. Then that's your choice. Red Hat has made their default, but you still have choice. > The proper things for SELinux to do in cases of > non-compliant apps is to advise the operator that SELinux > can't manage this app because it isn't SELinux aware, and > that whatever security holes that application embodies are > outside the scope of SELinux. That's a *service*. You seem to fail to understand what SELinux does. ;-> > Breaking said applications is a broken application. Then add outgoing firewalls to the same list. Oh, you just turn an outgoing firewall off? Well then, that's your solution. ;-> I don't know if I could make a better analogy. -- Bryan P.S. SELinux is _not_ a service. It is an _enforcement_ in the kernel. There are hundreds of rules. Applications either learn to make SELinux considerations, help write rules, or a combination of both. SELinux is basically the biggest change to Linux in a long, long time -- breaking the 30+ year legacy UNIX model. -- Bryan J. Smith | Sent from Yahoo Mail mailto:b.j.smith@ieee.org | (please excuse any http://thebs413.blogspot.com/ | missing headers) _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos ******************************************************************* This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept for the presence of computer viruses. www.hubbell.com - Hubbell Incorporated

4 5

OpenMosix
by Alan Sparks 14 Nov '05

14 Nov '05

Anyone have any experience running OpenMosix on CentOS 3? Are you using a kernel custom built or from somewhere? Any maintenance headaches wrt kernel updates? Thanks in advance. -Alan -- Alan Sparks, UNIX/Linux Systems Integration and Administration <asparks(a)doublesparks.net>

1 0

RE: [CentOS] Rebuilding RPMs
by Bowie Bailey 14 Nov '05

14 Nov '05

From: Matt Hyclak [mailto:hyclak@math.ohiou.edu] > > On Mon, Nov 14, 2005 at 12:09:49PM -0500, Bowie Bailey enlightened us: > > From: Karanbir Singh [mailto:Mail-Lists@karan.org] > > > > > > Bowie Bailey wrote: > > > > I am trying to install the Cluster RPMS from rpm.karan.org. > > > > But since I have updated my kernel with yum, I have the wrong > > > > kernel for a couple of the packages. > > > > > > > > I think I can just grab the source RPM and do a rebuild, but > > > > having never attempted that before, I just want to make sure > > > > I'm not missing anything. (I have built RPMs from source > > > > tarballs, so I know how to setup the build environment) > > > > > > > > It looks like I can just do this: > > > > > > > > # rpmbuild --rebuild cman-kernel-2.6.9-36.0.src.rpm > > > > > > > > Is there anything else I need to do? > > > > > > > > > > Just simple rebuilds will work, you might need to work out what > > > order they are built in - and some pkgs like the cman-kernel > > > need a specified --target i686 passed in via the rpmbuild. > > > > Hmmm...no luck there. It still wants the older kernel. > > For the *-kernel packages, you'll have to rpm -i the src.rpm, edit > the spec file, and rebuild from that. Making progress here. One more question and I think I'll be done. I installed the source package and edited the spec file to change the kernel version and remove the fake-build-provides requirement (as I can't seem to find it and it appears to be safe to remove based on a previous conversation on this list). I still have a build requirement for the kernel-hugemem package. I don't have the hugemem kernel installed and I'm just trying to build the smp package. Is it safe to remove this dependency if all I care about is the smp package? $ rpmbuild -bb --target=i686 rpm/SPECS/cman-kernel.spec Building target platforms: i686 Building for target i686 error: Failed build dependencies: kernel-hugemem = 2.6.9-22.0.1.EL is needed by cman-kernel-2.6.9-36.0.i686 Thanks, Bowie

2 1

gd2 on Centos 3.6?
by Mike Kercher 14 Nov '05

14 Nov '05

I need to upgrade gd from 1.8 to 2.x, but can't find any rpm's to do so. If I try to rebuild a .src.rpm, I get into a dependency hell. Does anyone know how I can accomplish this upgrade without getting into a source install? Mike

2 1

Bugzilla package
by Darryl L. Pierce 14 Nov '05

14 Nov '05

Is there a Bugzilla package for CentOS? What I mean is a bundle already created that I can install on my server so I can have my own Bugzilla setup? -- Darryl L. Pierce <mcpierce(a)gmail.com> Homepage: http://mcpierce.multiply.com/ "By doubting we come to inquiry, through inquiry truth." - Peter Abelard

1 0

YUM error "can't create transaction lock"
by James B. Byrne 14 Nov '05

14 Nov '05

A short while ago I reported a network interruption while performing a YUM update on a server. A check of the logs as recommended by a list member indicated that the update process had succeeded. However, I am now encountering the following problem on that same server and my nastily suspicious mind is trying to tell me that the previous event and this situation are somehow related. > Downloading Packages: > Running Transaction Test > Finished Transaction Test > Transaction Test Succeeded > Running Transaction > warning: waiting for transaction lock > error: can't create transaction lock I have googled for this error and have come across a web site devoted to it, but for Redhat's rpm and up2date managers only. There is evidently a lock file or database entry that is preventing yum from proceeding but I am not sure that the information that I have found applies to yum and I am unable to clear the lock manually. After following all the recovery steps I reach this point: > /usr/lib/rpm/rpmdb_dump Packages-ORIG | \ > /usr/lib/rpm/rpmdb_load Packages > rpm -qa > rpm --rebuilddb > warning: waiting for transaction lock Any assistance with this problem is gratefully accepted. I am a digest subscriber so the favour of a direct reply is appreciated. Regards, Jim -- *** e-mail is not a secure channel *** mailto:byrnejb.<token>@harte-lyne.ca James B. Byrne Harte & Lyne Limited vox: +1 905 561 1241 9 Brockley Drive fax: +1 905 561 0757 Hamilton, Ontario <token> = hal Canada L8E 3C3

2 1

RE: [CentOS] Rebuilding RPMs
by Bowie Bailey 14 Nov '05

14 Nov '05

From: Karanbir Singh [mailto:Mail-Lists@karan.org] > > Bowie Bailey wrote: > > I am trying to install the Cluster RPMS from rpm.karan.org. But > > since I have updated my kernel with yum, I have the wrong kernel > > for a couple of the packages. > > > > # rpm -i --test cman-kernel-smp-2.6.9-36.0.i686.rpm > > error: Failed dependencies: > > /lib/modules/2.6.9-11.ELsmp is needed by > > cman-kernel-smp-2.6.9-36.0.i686 > > kernel-smp = 2.6.9-11.EL is needed by > > cman-kernel-smp-2.6.9-36.0.i686 > > # uname -a > > Linux bnofdnbackup.buc.com 2.6.9-22.0.1.ELsmp #1 SMP Thu Oct 27 13:14:25 CDT > > 2005 i686 i686 i386 GNU/Linux > > > > I think I can just grab the source RPM and do a rebuild, but > > having never attempted that before, I just want to make sure I'm > > not missing anything. (I have built RPMs from source tarballs, so > > I know how to setup the build environment) > > > > It looks like I can just do this: > > > > # rpmbuild --rebuild cman-kernel-2.6.9-36.0.src.rpm > > > > Is there anything else I need to do? > > > > Just simple rebuilds will work, you might need to work out what order > they are built in - and some pkgs like the cman-kernel need a > specified > --target i686 passed in via the rpmbuild. Hmmm...no luck there. It still wants the older kernel. Do I need the buildcentos user and group? What is "fake-build-provides" and where can I get it? $ rpmbuild --rebuild --target=i686 cman-kernel-2.6.9-36.0.src.rpm Installing cman-kernel-2.6.9-36.0.src.rpm warning: user buildcentos does not exist - using root warning: group buildcentos does not exist - using root warning: user buildcentos does not exist - using root warning: group buildcentos does not exist - using root Building target platforms: i686 Building for target i686 error: Failed build dependencies: kernel-smp = 2.6.9-11.EL is needed by cman-kernel-2.6.9-36.0.i686 kernel-hugemem = 2.6.9-11.EL is needed by cman-kernel-2.6.9-36.0.i686 kernel-devel = 2.6.9-11.EL is needed by cman-kernel-2.6.9-36.0.i686 kernel-smp-devel = 2.6.9-11.EL is needed by cman-kernel-2.6.9-36.0.i686 kernel-hugemem-devel = 2.6.9-11.EL is needed by cman-kernel-2.6.9-36.0.i686 fake-build-provides is needed by cman-kernel-2.6.9-36.0.i686 Bowie

2 1

RPM php-mcrypt - CENTOS 4.2
by Adriano Frare 14 Nov '05

14 Nov '05

Dear Friends, The PHP in CENTOS 4.2 hasn't lib php-mcrypt. Where I do download RPM php-mcrypt ? Thanks Adriano

3 3

Re: [CentOS] selinux stuff - I just don't get
by Brian T. Brunner 14 Nov '05

14 Nov '05

How do we define Ready? I gave that answer in the text you replied to: when it doesn't break things. You ask about applications not being SELinux aware. The proper things for SELinux to do in those cases is advise the operator that SELinux can't manage this app because it isn't SELinux aware, and that whatever security holes that application embodies are outside the scope of SELinux. This is consistent with SELinux being a *service* to the operator, not a bully-boss to the operator and the authors/maintainers of every package Joe Operator might have on his system. >> SELinux is *broken* if it renders otherwise working >> applications dysfunctional as shipped. > Depends on your viewpoint. No, it doesn't. It's about ownership of control. Is this RedHats' system to break if they want to compel me to do things their way? If not, then distributing SELinux with a default of 'on' when it breaks running systems is distributing a broken software package. >SELinux works. It's just that most software isn't designed > with it in mind. ;-> Translate: Everybody is out of step except my boy! (and those who happen to be in step with him). I say Broken, and Disabled for Good. The proper things for SELinux to do in cases of non-compliant apps is to advise the operator that SELinux can't manage this app because it isn't SELinux aware, and that whatever security holes that application embodies are outside the scope of SELinux. That's a *service*. Breaking said applications is a broken application. Brian Brunner brian.t.brunner(a)gai-tronics.com (610)796-5838 >>> thebs413(a)earthlink.net 11/14/05 10:49AM >>> "Brian T. Brunner" <brian.t.brunner(a)gai-tronics.com> wrote: > 1: SELinux is hereby invited to grow by giving pain to > others, not to me. When it's ready for release to the > unsuspecting world, let it be released in a 'default on' > state then. Not now. How do you define "ready"??? Do we wait until all software is SELinux-aware? Do we wait until all sysadmins know how to use it? Same problems with ... NPTL ANSI C++ GLibC 2 and many others. Red Hat is forcing people to adopt it, so people have to comply. Because if they don't, they won't. And then it will _never_ be "ready." > SELinux is *broken* if it renders otherwise working > applications dysfunctional as shipped. Depends on your viewpoint. The same was said about NPTL, ANSI C++ and GLibC 2. Yet Red Hat regression tests _all_ its distros as a whole before shipment. It verifies things work as they should. That was true of the first Red Hat distro with NPTL, the first distro with ANSI C++ compliant compilers and code, with GLibC 2. But then people configure things, use them in ways that aren't stock, and things start to break. And the biggest culprit is legacy software that isn't compatible or compliant. Who's at fault then? In the end, it's not about "fault" and it's not about "broken." By the same definition, _real_ firewalls that do outgoing as well as incoming blocking are "broken" as well. Furthermore, the same could be said for higher-layer IDS/IPS systems. Red Hat always forces the issue. They get chastized for it. Their software and/or defaults get declared as broken, etc..., etc..., etc... In fact, I distinctly remember a major complaint about Red Hat taking off suid on cdrecord, which forced people to use proper permissions on the devices. That was also, so-called, "broken." But then, Red Hat had only one of the very few distros without the kernel 2.8.1.x priority issue (because cdrecord didn't run suid). So who was "broken" there? It's all a matter of viewpoint. > I don't mind being asked to volunteer to alpha/beta test > software. What's done is to *compel* me to be a SELinux > tester, or to disable it. Everybody who is inclined to > help SELinux get ready for The Big Time Release, *please* > accept my encouragement to do so. SELinux is already "The Big Time" -- but the majority of software on Linux is not. At some point, _someone_ has to get people to care. SELinux works. It's just that most software isn't designed with it in mind. ;-> > Us other miserable grunts who want to beta test something > else are best off disabling SELinux as of it's current > behavior. > "It's needed for security" meets the "necessary" test, but > not the "proper" test, which won't be met until it works > without breaking things. Then you're going to be waiting _forever_. Just like most people don't do "deny all outgoing" firewalls either. They don't want have to deal with things. I hate these meta-discussions. But I guess I'm tired of seeing "compatibility issues" mistaken for "broken." SELinux throws a wrench into a lot of programs that should be written differently, and no amount of "SELinux hacking" is going to be a "workaround" for some programs/configurations. The mindset has to change. Otherwise, you will _never_ get something like SELinux to work. And Linux won't be able to reach higher CC levels. -- Bryan J. Smith | Sent from Yahoo Mail mailto:b.j.smith@ieee.org | (please excuse any http://thebs413.blogspot.com/ | missing headers) _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos ******************************************************************* This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept for the presence of computer viruses. www.hubbell.com - Hubbell Incorporated

2 1

Re: [CentOS] selinux stuff - I just don't get
by David Thompson 14 Nov '05

14 Nov '05

Peter Farrow wrote: >I agree 100% I don't need it to make a system secure. > >>and it appears still that your confidence that you can secure systems >>without it gets in the way of any efforts to learn how it may benefit >>you. Having an agent like selinux that knows and monitors the behavior of known processes, and prevents unexpected behavior, presents a second line of defense that _may_ prevent or mitigate an attacker's ability to take over a system. While certainly not a substitute for secure programming practices, it may lessen the impact of security holes that do exist in deployed applications. Is it worth the added code complexity, configuration complexity, system resources, etc. required to use it? That is a question that different admins will come to their own conclusions about. Also, selinux is in its relative infancy, and there is currently both a shortage of expertise about it in the admin community, and problems in the current packaging (e.g. rule sets that break things in the default configuration) that are causing headaches. As these issues are dealt with, folks may or may not decide that selinux enhances the security of their systems. Some have already made their decisions. We are currently running selinux in permissive mode. Also, I had to remove some of the RPMs during the Centos 4.2 update, because the RPM update wanted to scan every file in the ~4000 user home directories in our central file storage pool _from every host running the update_. Oh, and that's a central file storage pool that doesn't even do ACLs. Bad selinux. No biscuit. That being said, I would like to use selinux as _one_ piece of our security infrastructure. But there are several issues that need to be solved before I do so. Dave Thompson UW-Madison

1 0

Mail Server
by ijez 14 Nov '05

14 Nov '05

Hi, I need to setup a new mail server and before I got my feet wet or losing in the configurations jungle, I really need some advice from the gurus here for what the best software to used for the mailserver base on CentOS 4.x setup. The objective is, the mailserver will be easy to setup, maintained and have some 1. database backend for storing user info ( mysql? ) 2. spam and antivirus filtering 3. webbase user administrations 4. Provide smtp,smtps,pop3,pop3s,imap,imaps service Any pointer to a good documentations, how-to or links base on CentOS 4.x setup is really appreciates. Thanks In Advances, regards, ijez

11 15

Re: [CentOS] selinux stuff - I just don't get
by Brian T. Brunner 14 Nov '05

14 Nov '05

1: SELinux is hereby invited to grow by giving pain to others, not to me. When it's ready for release to the unsuspecting world, let it be released in a 'default on' state then. Not now. 2: The word 'but' *always* indicates a denial of the statement before the 'but'. What's before the 'but' in this case is not just too important to deny, it's an understatement. SELinux is *broken* if it renders otherwise working applications dysfunctional as shipped. I don't mind being asked to volunteer to alpha/beta test software. What's done is to *compel* me to be a SELinux tester, or to disable it. Everybody who is inclined to help SELinux get ready for The Big Time Release, *please* accept my encouragement to do so. Us other miserable grunts who want to beta test something else are best off disabling SELinux as of it's current behavior. "It's needed for security" meets the "necessary" test, but not the "proper" test, which won't be met until it works without breaking things. Brian Brunner brian.t.brunner(a)gai-tronics.com (610)796-5838 >>> jperrin(a)gmail.com 11/14/05 09:29AM >>> SELinux is going through growing pains, and it's not quite to the point where I'd call it "user friendly", but ******************************************************************* This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept for the presence of computer viruses. www.hubbell.com - Hubbell Incorporated

2 1

REQ: Music hosting software
by Darryl L. Pierce 14 Nov '05

14 Nov '05

I'm new to CentOS, having just installed it on Friday to replace an old Debian server, so forgive me if I'm asking a previously answered question. Is there a package that I can install on my Apache 2.0 server that will host my MP3/Ogg Vorbis files? Previously I had Music Index installed on Apache 2.0 with my Debian server. Is there something in CentOS that's similar that I can use? -- Darryl L. Pierce <mcpierce(a)gmail.com> Homepage: http://mcpierce.multiply.com/ "By doubting we come to inquiry, through inquiry truth." - Peter Abelard

2 2

RE: [CentOS] CENTOS as Guest in XEN
by Dave Hatton 14 Nov '05

14 Nov '05

I use rpmstrap to do this. I use this basic procedure http://trac.samhart.net/trac/wiki/rpmstrap_CentOS4 but rather than use a chroot dir - I create some loopback filesystems which I then mount in Xen. Does that help or do you need more detail? Daveh _____ From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Niels Przybilla Sent: 14 November 2005 10:58 To: 'CentOS mailing list' Subject: [CentOS] CENTOS as Guest in XEN Hi, does anyone know where to get a howto or pre configured Centos working as guest in XEN ? thnaks and best regards Niels

3 3

CentOS-announce Digest, Vol 9, Issue 9
by centos-announce-request＠centos.org 14 Nov '05

14 Nov '05

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2005:839-01: Critical CentOS 2 i386 lynx security update (John Newbigin) ---------------------------------------------------------------------- Message: 1 Date: Mon, 14 Nov 2005 09:59:14 +1100 From: John Newbigin <jnewbigin(a)ict.swin.edu.au> Subject: [CentOS-announce] CESA-2005:839-01: Critical CentOS 2 i386 lynx security update To: centos-announce(a)centos.org Message-ID: <4377C542.5020805(a)ict.swin.edu.au> Content-Type: text/plain; charset=us-ascii; format=flowed The following errata for CentOS-2 have been built and uploaded to the centos mirror: RHSA-2005:839-01 Critical: lynx security update Files available: lynx-2.8.4-18.1.2.i386.rpm More details are available from the RedHat web site at https://rhn.redhat.com/errata/rh21as-errata.html The easy way to make sure you are up to date with all the latest patches is to run: # yum update -- John Newbigin Computer Systems Officer Faculty of Information and Communication Technologies Swinburne University of Technology Melbourne, Australia http://www.ict.swin.edu.au/staff/jnewbigin ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 9, Issue 9 *********************************************

1 0

CENTOS as Guest in XEN
by Niels Przybilla 14 Nov '05

14 Nov '05

Hi, does anyone know where to get a howto or pre configured Centos working as guest in XEN ? thnaks and best regards Niels

1 0

Error with yum and mirrors in 4.2
by iagosineiro＠yahoo.es 14 Nov '05

14 Nov '05

Hi. After installing CentOS 4.2 and importing GPG key I executed: Yum list updates Setting up repositories Hppt://mirror.centos.org/centos4/updates/i386/repodata/repomd.xml: [Errno 4] IO Error: <urlopen erro (-3, 'Fallo temporal en la resolucion del nombre')> Trying other mirror Cannot open/read repmod.xml file for reposotiory:update Failure: repopdata/repomd.xml from update: [Errno 256] No more mirrors to try. Error: failure: repodata/repmod.xml from update: [Errno 256] no more mirrors to try What I'm doing bad? What are the steps for update the system after initial installation? I look at www.centos.org but didn't find any guide? Iago. ______________________________________________ Renovamos el Correo Yahoo! Nuevos servicios, m�s seguridad http://correo.yahoo.es

4 4

CUPS support for Canon i255 Inkjet Printer?
by Sanjay Arora 14 Nov '05

14 Nov '05

Hi all I tried installing a remote WINXP SMB shared Canon i255 Inkjet printer on the CUPS printer queue, but could not find the model number in the supported printers list. How do I print on this printer? With regards. Sanjay.

2 1

Routing lost
by Chris Mason (Lists) 14 Nov '05

14 Nov '05

I have a server running Centos4. I found I was seeing some network problems so I tried "route" and found there was no routing. I thought reboot would solve it but it didn't. I had to manually enter a route to the default gateway, there is still no route to the loopback interface. How is this possible? I thought there was default routes built into the kernel, taken from ifcfg-eth0. Is there an easy way to fix this? Thanks for any advice. # cat /etc/sysconfig/network NETWORKING=yes HOSTNAME=pbx.mysite.home gateway=192.168.200.1 # cat /etc/sysconfig/network-scripts/ifcfg-eth0 DEVICE=eth0 BOOTPROTO=static IPADDR=192.168.200.11 BROADCAST=192.168.200.255 NETMASK=255.255.255.0 NETWORK=192.168.200.0 HWADDR=00:30:48:80:EE:0C ONBOOT=yes TYPE=Ethernet -- Chris Mason NetConcepts (264) 497-5670 Fax: (264) 497-8463 Int: (305) 704-7249 Fax: (815)301-9759 Cell: 264-235-5670 Yahoo IM: netconcepts_anguilla(a)yahoo.com

3 2

log file errors in "messages" on update -> 3.6
by Ken Godee 13 Nov '05

13 Nov '05

I updated six severs this weekend to 3.6 and I am now getting some junk spewed into the "messages" file on "all" six severs. (Only on boot up) There was none of this happing previously. I attached a txt copy because the encoding of my mailer doesn't like it. Also noticed the spew looks simular to the contents of the "initlog.conf" file, attched also. I'm guessing it's an upstream problem? I also don't this is a big concern? Any thoughts? # /etc/initlog.conf # # initlog configuration file # # lines preceded by a '#' are comments # # anything not recognized is ignored. :) # This sets the default logging facility. (can override with command line arguments) facility local7 # This sets the default logging priority. (can override with command line arguments) priority notice # ignore foo # means to discard any output lines that match the regular expression foo # This regexp is useful if you use fsck's -C option. ignore [^:]+: \|[=]+ # This regexp is useful for fsck's feature of setting file types ignore [^:]+: Setting filetype # This regexp is useful for quotacheck ignore ^[-\\\|\/]$

1 0

[OT] Corporate Firewall
by Ajay Sharma 13 Nov '05

13 Nov '05

Hey, The company I work for is in the market for a new firewall. Right now we're hosting all of our own stuff (on CentOS servers) behind an old checkpoint firewall. I think Checkpoint is overkill for our needs and very expensive, plus I don't like the "per-user" charges of some commercial solutions. What do you guys suggest that we upgrade to? Here are some of the features that I would like: 1) decent gui, either web based or a local client 2) usage graphs based on protocol. So if our tiny T1 is saturated, I want to be able to find out what's eating up the bandwidth 3) VPN-friendly for a couple of road-warriors. There won't be any remote offices so no server-to-server setups, just remote clients. 4) we have a DMZ and about 30 machines on the local network. Everyone has a "normal" IP address, meaning that no one is behind NAT. So it needs to handle this (which is pretty basic stuff) 5) high-availablity. So if I buy two machines, one can successfully die and the other take over. 6) no per-user charges. If the company hires a dozen people next year, we shouldn't have to "upgrade" our license. Right now we're looking at some open-source stuff like pfsense, m0n0wall, etc... But I'm totally open to an affordable commercial firewall appliance. Thanks for you help. --Ajay

15 26

gcontool-2 to set volume and mute paramters
by Jerry Geis 13 Nov '05

13 Nov '05

Is there a setting in gconftool-2 to that sets up all the sound and volume settings? If so I havenot found it. Can someone point me in the right direction. Or is this just done directly with alsacntl? THanks, Jerry

1 0

CentOS-announce Digest, Vol 9, Issue 8
by centos-announce-request＠centos.org 13 Nov '05

13 Nov '05

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2005:831 Moderate CentOS 4 s390(x) php - security update (Pasi Pirhonen) 2. CESA-2005:831 Moderate CentOS 4 axp php - security update (Pasi Pirhonen) 3. CESA-2005:825 Low CentOS 4 axp lm_sensors - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Sat, 12 Nov 2005 14:36:53 +0200 From: Pasi Pirhonen <upi(a)papat.org> Subject: [CentOS-announce] CESA-2005:831 Moderate CentOS 4 s390(x) php - security update To: centos-announce(a)centos.org Message-ID: <20051112123653.GB9807(a)core.upi.iki.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2005:831 https://rhn.redhat.com/errata/RHSA-2005-831.html The following updated files have been uploaded and are currently syncing to the mirrors: s390: updates/s390/RPMS/php-4.3.9-3.9.s390.rpm updates/s390/RPMS/php-devel-4.3.9-3.9.s390.rpm updates/s390/RPMS/php-domxml-4.3.9-3.9.s390.rpm updates/s390/RPMS/php-gd-4.3.9-3.9.s390.rpm updates/s390/RPMS/php-imap-4.3.9-3.9.s390.rpm updates/s390/RPMS/php-ldap-4.3.9-3.9.s390.rpm updates/s390/RPMS/php-mbstring-4.3.9-3.9.s390.rpm updates/s390/RPMS/php-mysql-4.3.9-3.9.s390.rpm updates/s390/RPMS/php-ncurses-4.3.9-3.9.s390.rpm updates/s390/RPMS/php-odbc-4.3.9-3.9.s390.rpm updates/s390/RPMS/php-pear-4.3.9-3.9.s390.rpm updates/s390/RPMS/php-pgsql-4.3.9-3.9.s390.rpm updates/s390/RPMS/php-snmp-4.3.9-3.9.s390.rpm updates/s390/RPMS/php-xmlrpc-4.3.9-3.9.s390.rpm s390x: updates/s390x/RPMS/php-4.3.9-3.9.s390x.rpm updates/s390x/RPMS/php-devel-4.3.9-3.9.s390x.rpm updates/s390x/RPMS/php-domxml-4.3.9-3.9.s390x.rpm updates/s390x/RPMS/php-gd-4.3.9-3.9.s390x.rpm updates/s390x/RPMS/php-imap-4.3.9-3.9.s390x.rpm updates/s390x/RPMS/php-ldap-4.3.9-3.9.s390x.rpm updates/s390x/RPMS/php-mbstring-4.3.9-3.9.s390x.rpm updates/s390x/RPMS/php-mysql-4.3.9-3.9.s390x.rpm updates/s390x/RPMS/php-ncurses-4.3.9-3.9.s390x.rpm updates/s390x/RPMS/php-odbc-4.3.9-3.9.s390x.rpm updates/s390x/RPMS/php-pear-4.3.9-3.9.s390x.rpm updates/s390x/RPMS/php-pgsql-4.3.9-3.9.s390x.rpm updates/s390x/RPMS/php-snmp-4.3.9-3.9.s390x.rpm updates/s390x/RPMS/php-xmlrpc-4.3.9-3.9.s390x.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://iki.fi/upi/

1 0

Shutting down an ATX machine from Power Button
by Sanjay Arora 13 Nov '05

13 Nov '05

Can someone please tell me how to configure Centos/Linux so it shuts down properly by pressing the Power button on the ATX cabinet, just as if someone had given a shutdown -h now command. With regards. Sanjay.

2 1

General ?: GFS & Clustering support in CentOS 4.x
by Akbar S. Ahmed 13 Nov '05

13 Nov '05

Hi, Does CentOS 4.x support GFS & clustering? I noticed the package in the 3.x tree, but cannot locate it in any of the 4.x trees. I thought it does, but I cannot locate the packages. If it does support GFS and clustering, which packages are required and where are they located? Thanks in advance, Akbar

2 1

Unable to start Firefox/Mozilla after yum updates
by slaton 12 Nov '05

12 Nov '05

Since installing the latest yum updates a couple of days ago, I'm unable to start Firefox or Mozilla. Both fail silently with no messages printed to console. This is a 32-bit dual Xeon box running Centos 4.2. Here's what i've tried so far. - uninstalled and reinstalled firefox and mozilla packages with yum. - deleted my mozilla preferences (~/.mozilla) in case of a corrupted profile. - running as root. only difference is now mozilla segfaults instead of failing silently. - setting debug options in the firefox and mozilla startup scripts ("set -x"). the debug output looks identical to another machine I have on which firefox works, so this is no help. - checked system logs. Anyone with more knowledge of firefox/moz know what could cause a silent failure like this? I can provide debug output if needed, but I didn't see anything useful in it. Thanks. slaton

2 2

X0.hosts
by Sam Drinkard 12 Nov '05

12 Nov '05

Does the file X0.hosts exist somewhere on a CentOS system ? I sure can't locate it, but when I add a host to the tables, it shows up. Perhaps it's not called X0.hosts as per the manpage ? -- Snowman

1 0

2.6.9-22.EL.src.rpm
by Craig White 12 Nov '05

12 Nov '05

I can locate kernel-2.6.9-22.EL.src.rpm but cannot locate kernel-2.6.9-22.0.1.EL.src.rpm Is that because they are the same but just had different build options? Craig -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

2 2

CentOS-announce Digest, Vol 9, Issue 7
by centos-announce-request＠centos.org 12 Nov '05

12 Nov '05

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2005:831 Moderate CentOS 3 x86_64 php - security update (Tru Huynh) 2. CESA-2005:831 Moderate CentOS 3 ia64 php - security update (Pasi Pirhonen) 3. CESA-2005:831 Moderate CentOS 4 ia64 php - security update (Pasi Pirhonen) 4. CESA-2005:839 Critical CentOS 4 i386 lynx - security update (Johnny Hughes) 5. CESA-2005:839 Critical CentOS 4 x86_64 lynx - security update (Johnny Hughes) 6. CentOS 4.2 Server CD - i386 Released (Karanbir Singh) 7. CESA-2005:839 Critical CentOS 3 ia64 lynx - security update (Pasi Pirhonen) 8. CESA-2005:839 Critical CentOS 4 ia64 lynx - security update (Pasi Pirhonen) 9. CESA-2005:839 Critical CentOS 4 axp lynx - security update (Pasi Pirhonen) 10. CESA-2005:839 Critical CentOS 3 s390(x) lynx - security update (Pasi Pirhonen) 11. CESA-2005:831 Moderate CentOS 3 s390(x) php - security update (Pasi Pirhonen) 12. CESA-2005:839 Critical CentOS 4 s390(x) lynx - security update (Pasi Pirhonen) 13. CESA-2005:839 Critical CentOS 3 i386 lynx - security update (Tru Huynh) 14. CESA-2005:839 Critical CentOS 3 x86_64 lynx - security update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 11 Nov 2005 16:48:09 +0100 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2005:831 Moderate CentOS 3 x86_64 php - security update To: centos-announce(a)centos.org Message-ID: <20051111154809.GA26451(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2005:831 php security update for CentOS 3 x86_64: https://rhn.redhat.com/errata/RHSA-2005-831.html The following updated file has been uploaded and is currently syncing to the mirrors: x86_64: updates/x86_64/RPMS/php-4.3.2-26.ent.x86_64.rpm updates/x86_64/RPMS/php-devel-4.3.2-26.ent.x86_64.rpm updates/x86_64/RPMS/php-imap-4.3.2-26.ent.x86_64.rpm updates/x86_64/RPMS/php-ldap-4.3.2-26.ent.x86_64.rpm updates/x86_64/RPMS/php-mysql-4.3.2-26.ent.x86_64.rpm updates/x86_64/RPMS/php-odbc-4.3.2-26.ent.x86_64.rpm updates/x86_64/RPMS/php-pgsql-4.3.2-26.ent.x86_64.rpm source: updates/SRPMS/php-4.3.2-26.ent.src.rpm You may update your CentOS-3 x86_64 installations by running the command: yum update php\* Tru -- Tru Huynh (CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

mysqld and selinux
by Craig White 12 Nov '05

12 Nov '05

CentOS 4 - updated to current, rebooted to new kernel and now I can't get mysqld to start... # service mysqld start Timeout error occurred trying to start MySQL Daemon #tail -n 4 /var/log/messages Nov 12 00:48:56 srv1 kernel: audit(1131781736.221:4): avc: denied { write } for pid=4874 comm="mysqld" name="tmp" dev=dm-0 ino=2894305 scontext=root:system_r:mysqld_t tcontext=root:object_r:root_t tclass=dir Nov 12 00:48:59 srv1 dbus: Can't send to audit system: USER_AVC pid=2839 uid=81 loginuid=-1 message=avc: denied { send_msg } for scontext=user_u:system_r:unconfined_t tcontext=user_u:system_r:initrc_t tclass=dbus Nov 12 00:49:04 srv1 dbus: Can't send to audit system: USER_AVC pid=2839 uid=81 loginuid=-1 message=avc: denied { send_msg } for scontext=user_u:system_r:unconfined_t tcontext=user_u:system_r:initrc_t tclass=dbus Nov 12 00:49:05 srv1 mysqld: Starting MySQL: failed hints? Craig -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

1 0

Rebuilding RPMs
by Bowie Bailey 12 Nov '05

12 Nov '05

I am trying to install the Cluster RPMS from rpm.karan.org. But since I have updated my kernel with yum, I have the wrong kernel for a couple of the packages. # rpm -i --test cman-kernel-smp-2.6.9-36.0.i686.rpm error: Failed dependencies: /lib/modules/2.6.9-11.ELsmp is needed by cman-kernel-smp-2.6.9-36.0.i686 kernel-smp = 2.6.9-11.EL is needed by cman-kernel-smp-2.6.9-36.0.i686 # uname -a Linux bnofdnbackup.buc.com 2.6.9-22.0.1.ELsmp #1 SMP Thu Oct 27 13:14:25 CDT 2005 i686 i686 i386 GNU/Linux I think I can just grab the source RPM and do a rebuild, but having never attempted that before, I just want to make sure I'm not missing anything. (I have built RPMs from source tarballs, so I know how to setup the build environment) It looks like I can just do this: # rpmbuild --rebuild cman-kernel-2.6.9-36.0.src.rpm Is there anything else I need to do? Bowie

3 2

alsa asound.conf or .asoundrc that combines multiple playback and capture
by Jerry Geis 12 Nov '05

12 Nov '05

I have searched all around and combined items in an /etc/asound.conf file to have by default a capture and multiple playback for alsa. I am looking for a way to: something like "aplay --nonblock test.wav" having at least 2 active one time and at that same time do "arecord --nonblock -d 1 input.wav" I have something like: pcm.!dmixer { type dmix # plugin type ipc_key 5678293 # unique ipc id ipc_perm 0666 # would like to use icp_group instead ipc_key_add_uid no # share the same mixer with all users slave { pcm "hw:0,0" period_time 0 # needed by oss (= 0) period_size 1024 # needed by oss (= 2^n) period_size 8192 # needed by oss (= 2^n) format S16_LE rate 48000 } } pcm.!dsnoop { type dsnoop # plugin type ipc_key 5678293 # unique ipc id ipc_perm 0666 # would like to use icp_group instead ipc_key_add_uid no # share the same mixer with all users slave { pcm "hw:1,0" period_time 0 # needed by oss (= 0) period_size 1024 # needed by oss (= 2^n) period_size 8192 # needed by oss (= 2^n) format S16_LE rate 48000 } } That sort of works. However when playing a wav file and recording sometimes I get record overrun errors and then the "-d1" does NOT stop after 1 second. Does anyone have a working mulitple playback and capture asound.conf file???? Thanks for sharing if you do. Jerry

1 0

usb bluetooth devices anyone???
by Jerry Geis 12 Nov '05

12 Nov '05

Jerry Geis wrote: >/ Has anyone played with usb bluetooth devices on centos? />/ I am trying to pair a kensington usb bluetooth device with />/ a motorola bluetooth headset and get it to work with a />/ softphone. />/ />/ I am not finding how to pair the two devices? />/ / >I would be interested in hearing about any solutions as well. I have >the same USB bluetooth device and would love to be able to connect to my >Motorola RAZR and Nokia 6620 phones. >Best regards, I have found that I need to do a "service bluetooth start" and then running the command "hciconfig" will show my bluetooth USB dongle. At this point I am stuck. I need to know: how do I pair the bluetooth USB dongle with my bluetooth headset Anyone played with this yet? Jerry

2 1

High availability www+mysql
by Ugo Bellavance 11 Nov '05

11 Nov '05

Hi, I have one physical server (server1 - CentOS 4) and one vmware (server2 - CentOS running in a VM under Windows 2003). I'm running PHP/MySQL webapps on it. I want to be sure there is a failover, but I don't really need load balancing for now. I run php/mysql/apache with the binaries that comes with CentOS 4. I have installed heartbeat on both and set MySQL replication so that when server1 fails, server2 takes the requests. Heartbeat signal is going through the same NIC than regular traffic, but I'll check if I can set serial port or another NIC for that. Might be more difficult with VMWare and my service isn't that critical. Now, if server1 is unavailable, server2 takes over. It should have a current copy of the database because of the replication and the files are rsynced frequently (php). I configured heartbeat so that server1 doesn't take over if it comes back up, since it won't have a current copy of the DB. I'm not sure if I can (and if it is hard to configure) do a multiple master config with MySQL 4.1 and I'm not sure if MySQL cluster is an appropriate solution either. I looked at DRDB, but I think I would have to resize my partitions, so this is less tempting. I'd like to have opinions about my setup and how I could improve it, or test it. The logs issue is a concern, but not that much. I can live without accurate stats for the time I take to get server1 back online. TIA, Ugo

1 0

g4l and centos
by Jerry Geis 11 Nov '05

11 Nov '05

On Fri, 2005-11-11 at 10:30 -0500, Jerry Geis wrote: >/ Has anyone used g4l (ghost for linux) with centos 4.2 or 4.X? />/ />/ I just tried it with RAW mode, it made the image on my />/ ftp server, I then tried to restore it, seemed like it went ok, />/ tried to reboot and it starts up looks like it is going to work />/ but then something is not right? I am not even sure how to explain />/ what is not right. />/ />/ can you share your steps. />/ /---- don't know about g4l boot CD 1 of any CentOS 4 disks. Type 'linux rescue' and press enter follow the directions... chroot /mnt/sysimage then make sure things are there... ls -l ls -l /boot etc. then to see if you can fix the boot... grub-install /dev/hda Of course this assumes that your new disk is the primary master and if that is the case, you should be able to boot from it. Craig ----------- Craig, Thanks - actually I had just done that. it does not let me chroot /mnt/sysimage. If did the fdisk -l /dev/hda and my partitions are there. It gets past the grub boot already, it is going into the firstboot screens and I get the "Show details" and service startup screen.... When I let it boot I get failed for all the startup services. It's like it is trying to work but something is not found? Very odd.... So close. Jerry

1 0

g4l and centos
by Jerry Geis 11 Nov '05

11 Nov '05

Has anyone used g4l (ghost for linux) with centos 4.2 or 4.X? I just tried it with RAW mode, it made the image on my ftp server, I then tried to restore it, seemed like it went ok, tried to reboot and it starts up looks like it is going to work but then something is not right? I am not even sure how to explain what is not right. can you share your steps. Thanks, Jerry

2 1

Re: [CentOS] VirtualHost squirrelmail and Apache
by James B. Byrne 11 Nov '05

11 Nov '05

On Thu, 10 Nov 2005 13:18:33 +0100, Jujo <jujo(a)jujo.info> wrote: > On the other hand I have a little problem when logging in > squirrelmail from address http://mail.domain.com and not from > http://www.domain.com/webmail but I will post it from house when > I have all information available. > This is likely to be an Apache rewrite problem and not, as was later suggested, either an php or squirrelmail issue per se. If you want a recipe that works for accessing virtual domains and squirrelmail over https (ssl) then you can see my posts at: http://www.webmasterworld.com/forum92/3543.htm However, if you are as inexperienced with apache as you appear to be with dns then you need to know that working with mod rewrite is not for the faint of heart. You can begin at: http://httpd.apache.org/docs/2.0/misc/rewriteguide.html Further, you need to configure squirrelmail itself to handle virtual servers in addition to whatever you do in apache. This feature is provided as a squirrelmail plugin. See: http://www.squirrelmail.org/plugin_view.php?id=47 I consider your questions as entirely appropriate for the CentOS mailing list. This is after all, a distribution, of which bind, apache, sendmail, cyrus-imapd, dovecot and squirrelmail are all a part, no less important than any other. When one is setting up a new system using unfamiliar software then having ready access to a group of people that have already taken the same general path that you are on is a tremendous asset. They are a great source of ancillary information regarding package inter-relationships and side issues that may not be even considered relevant on application specific forums. Regards, Jim -- *** e-mail is not a secure channel *** mailto:byrnejb.<token>@harte-lyne.ca James B. Byrne Harte & Lyne Limited vox: +1 905 561 1241 9 Brockley Drive fax: +1 905 561 0757 Hamilton, Ontario <token> = hal Canada L8E 3C3

1 0

usb bluetooth devices
by Jerry Geis 11 Nov '05

11 Nov '05

Has anyone played with usb bluetooth devices on centos? I am trying to pair a kensington usb bluetooth device with a motorola bluetooth headset and get it to work with a softphone. I am not finding how to pair the two devices? THanks, Jerry

2 1

[OT] Corporate Firewall
by Andrew Cotter 11 Nov '05

11 Nov '05

To put my two cents in, I have been investigating m0n0wall (http://m0n0.com/) for about six months now. I have it running on my home firewall (pc engines WRAP platform http://pcengines.ch) and have loaded it on a number of old Nokia IP330 boxes for testing. A fork of the project to also look at is pfSense (http://pfsense.com/) which is based on m0n0wall. pfSense is much more flexible in terms of add-on packages, is designed with a failover option, and multi-WAN support to name a few things. Then again how much do you want loaded on a firewall which is a topic for a whole different discussion. There is active development on both projects and both seem very usable. Andrew

1 0

kernel recompile help
by Ryan 11 Nov '05

11 Nov '05

Everytime I try to recompile a kernel, "make modules" always dies with the error: mv: cannot stat `include/asm-i386/asm_offsets.h.tmp': No such file or directory make: *** [include/asm-i386/asm_offsets.h] Error 1 I installed the src RPM and kernel-devel ... any ideas as to what I could be doing wrong? Thanks!!

4 8

php versions
by Mark Quitoriano 11 Nov '05

11 Nov '05

Got a question with centos/rhel php versions. because in centos 3 they're still using 4.3.2 and centos 4 which uses 4.3.9. how about the bugfixes done in 4.4 and 4.4.1? centos/rhel updates regularly like centos 3 which already updated for 6 times but still uses 4.3.2? is that mean we still suffer the bugs of the original 4.3.2? -- Regards, Mark Quitoriano, CCNA http://www.atamanetworks.com Fan the flame... http://www.spreadfirefox.com/?q=user/register&r=19441

3 3

CUPS problem with network printing - SOLVED!!! :)))
by Olaf Greve 11 Nov '05

11 Nov '05

Hi all, Yesterday I reported rather vaguely about the printing issues I was experiencing on our local network after the latest kernel update. Today, I solved it, and I'm relaying this information such that others can potentially benefit from it if they run into a similar problem. :) Firstly, I contacted Xante support and they told me I was the first to ask Linux questions; they didn't know what to do... So much for their tech support, so I then took the bull by the horns myself, and went through a debug process. The printer I need to print to has now been shared through a Mac OS X machine, which has printers shared and these printers (two in total) appear properly in the "browsed queues" in Gnome's printer set-up utility. However, printing a test page (either as ASCII, CUPS, or Postscript) still didn't work. I raised the debug level to the max (i.e. "debug2") in /etc/cups/cupsd.conf and restarted cupsd. Checking the /var/log/cups/error_log shows the following relevant debug trace of a failed "print ASCII test page" command from the printer utility: I [11/Nov/2005:12:58:36 +0100] [Job 5] Connecting to dymo-labelwriter.local on port 631... I [11/Nov/2005:12:58:36 +0100] [Job 5] Unable to connect to dymo-labelwriter.local, queuing on next printer in class... d [11/Nov/2005:12:58:37 +0100] select_timeout: 86400 seconds to browse timeout a printer Soooo, the issue obviously resided in CUPS not being able to connect to port 631 on the MacOSX machine. This is where it got interesting, as I checked the MacOSX machine and that port was open (listing "IPP" as port-listener). Doing a remote port scan by the MacOSX's IP address showed a proper list of open ports, and doing so by the alias dymo-labelwriter.local only resulted in a 'host unknown' error. OMG; how blatantly obvious yet easy to overlook this issue now all of a sudden became! :P Indeed... Adding the dymo-labelwriter.local alias with it's corresponging IP address to the /etc/hosts file did the trick. Now it works fine again! Live and learn....;) 'Ave a good weekend! Olafo

1 0

CentOS-announce Digest, Vol 9, Issue 6
by centos-announce-request＠centos.org 11 Nov '05

11 Nov '05

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2005:806-01: Low CentOS 2 i386 cpio security update (John Newbigin) 2. CESA-2005:838-01: Moderate CentOS 2 i386 php security update (John Newbigin) 3. CESA-2005:831 Moderate CentOS 3 i386 php - security update (Lance Davis) 4. CESA-2005:831 Moderate CentOS 4 x86_64 php - security update (Johnny Hughes) 5. CESA-2005:831 Moderate CentOS 4 i386 php - security update (Johnny Hughes) 6. CESA-2005:825 Low CentOS 4 i386 lm_sensors - security update (Johnny Hughes) 7. CESA-2005:825 Low CentOS 4 x86_64 lm_sensors - security update (Johnny Hughes) 8. CESA-2005:1110-001 Moderate CentOS 4 i386 php - security update (CENTOSPLUS only) (Johnny Hughes) 9. CESA-2005:1110-001 Moderate CentOS 4 x86_64 php - security update (CENTOSPLUS only) (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 11 Nov 2005 10:44:34 +1100 From: John Newbigin <jnewbigin(a)ict.swin.edu.au> Subject: [CentOS-announce] CESA-2005:806-01: Low CentOS 2 i386 cpio security update To: centos-announce(a)centos.org Message-ID: <4373DB62.5030009(a)ict.swin.edu.au> Content-Type: text/plain; charset=us-ascii; format=flowed The following errata for CentOS-2 have been built and uploaded to the centos mirror: RHSA-2005:806-01 Low: cpio security update Files available: cpio-2.4.2-25.i386.rpm More details are available from the RedHat web site at https://rhn.redhat.com/errata/rh21as-errata.html The easy way to make sure you are up to date with all the latest patches is to run: # yum update -- John Newbigin Computer Systems Officer Faculty of Information and Communication Technologies Swinburne University of Technology Melbourne, Australia http://www.ict.swin.edu.au/staff/jnewbigin ------------------------------ Message: 2 Date: Fri, 11 Nov 2005 10:45:48 +1100 From: John Newbigin <jnewbigin(a)ict.swin.edu.au> Subject: [CentOS-announce] CESA-2005:838-01: Moderate CentOS 2 i386 php security update To: centos-announce(a)centos.org Message-ID: <4373DBAC.7000102(a)ict.swin.edu.au> Content-Type: text/plain; charset=us-ascii; format=flowed The following errata for CentOS-2 have been built and uploaded to the centos mirror: RHSA-2005:838-01 Moderate: php security update Files available: php-4.1.2-2.3.i386.rpm php-devel-4.1.2-2.3.i386.rpm php-imap-4.1.2-2.3.i386.rpm php-ldap-4.1.2-2.3.i386.rpm php-manual-4.1.2-2.3.i386.rpm php-mysql-4.1.2-2.3.i386.rpm php-odbc-4.1.2-2.3.i386.rpm php-pgsql-4.1.2-2.3.i386.rpm More details are available from the RedHat web site at https://rhn.redhat.com/errata/rh21as-errata.html The easy way to make sure you are up to date with all the latest patches is to run: # yum update -- John Newbigin Computer Systems Officer Faculty of Information and Communication Technologies Swinburne University of Technology Melbourne, Australia http://www.ict.swin.edu.au/staff/jnewbigin ------------------------------ Message: 3 Date: Fri, 11 Nov 2005 01:54:54 +0000 From: Lance Davis <lance(a)uklinux.net> Subject: [CentOS-announce] CESA-2005:831 Moderate CentOS 3 i386 php - security update To: centos-announce(a)centos.org Message-ID: <1131674093.4655.47.camel(a)centos3.wellhouse> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2005:831 php security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2005-831.html refers The following updated files have been uploaded and are currently syncing to the mirrors: i386: updates/i386/RPMS/php-4.3.2-26.ent.i386.rpm updates/i386/RPMS/php-devel-4.3.2-26.ent.i386.rpm updates/i386/RPMS/php-imap-4.3.2-26.ent.i386.rpm updates/i386/RPMS/php-ldap-4.3.2-26.ent.i386.rpm updates/i386/RPMS/php-mysql-4.3.2-26.ent.i386.rpm updates/i386/RPMS/php-odbc-4.3.2-26.ent.i386.rpm updates/i386/RPMS/php-pgsql-4.3.2-26.ent.i386.rpm source: updates/SRPMS/php-4.3.2-26.ent.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update php

1 0

tacacs+ RPM.?
by Mark Sargent 11 Nov '05

11 Nov '05

Hi All, is there an RPM for it for CentOS.? I tried "yum install tacacs+" but got nothing. I also checked dags repo and found nothing. Cheers. Mark Sargent.

3 4

CUPS and Okidata ML 395
by Kanwar Ranbir Sandhu 11 Nov '05

11 Nov '05

Hi All, Has anyone currently, or in the past, setup an Okidata ML 395 (or any of Okidata's impact printers, for that matter) on a CentOS box? I'm having a miserable time with the ML 395: I'm looking for some tips. I have an AMD Opteron server running CentOS 4 (x86_64). CUPS is running happily for two Canon imageRunner's (via BrightQ Pro from Codehost). The Okidata ML 395 is attached to the server with a parallel cable. When I configure the Okidata printer with system-config-printer, I choose the ML 395B driver, and leave all other driver settings at defaults. Things look good at this point. However, when a print job is submitted, all I get is a few letters on separate lines. I've tried other drivers: - Epson 24 pin series - Epson LQ 870 - Okidata 24 pin series None have worked. There is either no output at all, or it's messed up. As a temporary fix, I finally resorted to connecting the printer to a Windows box, sharing it, and printing to it from the CentOS server via the Samba backend in CUPS. This isn't ideal because I want everything on the CentOS server. I've tried everything I can think of, and I believe I've exhausted the little info available on the web. I've also asked Okidata for support, but I haven't received any replies to my support requests. If anyone could help to shed some light on this, I would be grateful. Regards, Thanks in Ranbir -- Kanwar Ranbir Sandhu Systems Aligned Inc. www.systemsaligned.com

1 0

Multi-button mice and Linux?
by Preston Crawford 11 Nov '05

11 Nov '05

Does anyone here use a multi-button (as in more than 2) mouse with Linux? How well supported are they? I've had to get one recently for work. I was diagnosed with CTS and I now wear braces and use a wireless Intellimouse. Works great at work with Windows, but I'm unsure how much, if any support there is for Linux. Anyone have experience with this? Preston

4 5

Re: [CentOS] Multi-button mice and Linux?
by Brian T. Brunner 10 Nov '05

10 Nov '05

Yes. I'm forwarding this home where I have CentOS 4.2 with a wheel mouse, it's not wireless, but I'll give you brand/model info ASAP. Pass me a few clues what you'll want to do with your mouse and I'll say whether I can give a Yes/No/Unknown on those abilities. Brian Brunner brian.t.brunner(a)gai-tronics.com (610)796-5838 >>> me(a)prestoncrawford.com 11/10/05 04:28PM >>> Does anyone here use a multi-button (as in more than 2) mouse with Linux? How well supported are they? I've had to get one recently for work. I was diagnosed with CTS and I now wear braces and use a wireless Intellimouse. Works great at work with Windows, but I'm unsure how much, if any support there is for Linux. Anyone have experience with this? Preston _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos ******************************************************************* This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept for the presence of computer viruses. www.hubbell.com - Hubbell Incorporated

1 0

(no subject)
by Filianx 10 Nov '05

10 Nov '05

Greetings all, when i try and play a dvd with mplayer I get the following error...MPlayer interrupted by signal 11 in module: int_audio_codec..any ideas how to fix it thanks -- Filianx

1 0

Re: [CentOS] dags repo after 4.2 update
by Brian T. Brunner 10 Nov '05

10 Nov '05

Yes. Then it went away, then it came back. dag repository is (again) nopped out of /etc/yum.conf. I know I'm a dummy, but this time, the problem may lie elsewhere. Brian Brunner brian.t.brunner(a)gai-tronics.com (610)796-5838 >>> admin(a)homemachine.net 10/23/05 07:57AM >>> Is anyone else having probs with dags repo after 4.2 update? # yum update Setting up Update Process Setting up repositories http://apt.sw.be/redhat/el4/en/i386/dag/repodata/repomd.xml: [Errno 4] IOError: <urlopen error (101, 'Network is unreachable')> Trying other mirror. Cannot open/read repomd.xml file for repository: dag failure: repodata/repomd.xml from dag: [Errno 256] No more mirrors to try. Error: failure: repodata/repomd.xml from dag: [Errno 256] No more mirrors to try. regards tom _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos ******************************************************************* This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept for the presence of computer viruses. www.hubbell.com - Hubbell Incorporated

5 4

Re: [CentOS] Dag repo
by Dag Wieers 10 Nov '05

10 Nov '05

On Tue, 8 Nov 2005, Colm MacCarthaigh wrote: > On Tue, Nov 08, 2005 at 11:45:21AM +0100, Dag Wieers wrote: > > On Mon, 7 Nov 2005, Johnny Hughes wrote: > > > On Mon, 2005-11-07 at 17:00 -0500, John Hinton wrote: > > > > > > > Yes and I'm glad I have both version 3 and version 4 servers as version > > > > 3 is updating just fine, but all of my CentOS v 4 machines are stuck in > > > > lala land for about 5 days now. Happened once before, but was fixed, but > > > > it's back.... > > > > > > > > -------- > > > > Setting up Update Process > > > > Setting up repositories > > > > //var/cache/yum/dag/repomd.xml:1: parser error : Document is empty > > > > > > > > ^ > > > > //var/cache/yum/dag/repomd.xml:1: parser error : Start tag expected, '<' > > > > not found > > > > > > > > ^ > > > > dag 100% |=========================| 0 B > > > > 00:00 > > > > http://apt.sw.be/redhat/el4/en/i386/dag/repodata/repomd.xml: [Errno -1] > > > > Error importing repomd.xml for dag: Error: could not parse file > > > > //var/cache/yum/dag/repomd.xml > > > > Trying other mirror. > > > > Cannot open/read repomd.xml file for repository: dag > > > > failure: repodata/repomd.xml from dag: [Errno 256] No more mirrors to try. > > > > Error: failure: repodata/repomd.xml from dag: [Errno 256] No more > > > > mirrors to try. > > > > ------- > > > > > > > > Same deal since about Wednesday or Friday of last week. > > > > > > > > I'm about to go comment out my chance at beautiful women. :) > > > > > > Pick a different mirror, that one is also an Apache Project test > > > server :) > > > > Sigh. And chances are they don't know something has been wrong for the > > last couple of weeks... > > This mail contains no useful information. What is the problem, and what > do you want us to do? I don't know what the problem is. Either the file is empty on the filesystem (corruption on the filesystem level or problems with rsync or NFS) or the web server is handing out empty files under certain conditions. Without access to the system I have no clue whether the filesystem is the problem or it is Apache related. I bet it is Apache's problem as mirrors of Heanet do not seem to have this problem. (This is different than when it was a NFS problem with the same symptoms) I checked and I currently do not see a problem: http://apt.sw.be/redhat/el4/en/i386/dag/repodata/repomd.xml http://mirrors.ircam.fr/pub/dag/redhat/el4/en/i386/dag/repodata/repomd.xml I have seen all sorts of reports from people saying that it sometimes works, sometimes not, and people saying it never works. Also not sure if it could be proxy or transparant-proxy related. If you could check whether there are times where Apache logs a zero-file transfer for repomd.xml (or other files in the repository) that might help find the cause. Kind regards, -- dag wieers, dag(a)wieers.com, http://dag.wieers.com/ -- [all I want is a warm bed and a kind word and unlimited power]

2 2

Re: www.centos.org - Contact the CentOS Development Team Form
by ravi_prakash＠ngri.res.in 10 Nov '05

10 Nov '05

Ravi Srivastava submitted the following Information: Email ravi_prakash(a)ngri.res.in URL www.ngri.org.in Company National Geophysical Research Institute Location Hyderabad, India Comments Dear All, I am using CentOs 3.5 on a 64 bit Xeon machine. I wanted to install aic7xxx-6.3.9-rhel3.i686.rpm to use DAT 72 but it is giving following error message. Please help to resolve this problem: I took this rpm from http://www.adaptec.com/worldwide/support/ web site. [root@Fractus 39160]# rpm -Uvh aic7xxx-6.3.9-rhel3.i686.rpm Preparing... ########################################### [100%] 1:aic7xxx ########################################### [100%] Adaptec aic7xxx driver installer - V6.3.9-1 Backing up all modified files to /boot/aic7xxx-backup-6 Using GRUB configuration If this is not what you want, rename your /boot/grub/grub.conf file /boot/vmlinuz-2.4.21-37.EL /boot/initrd-2.4.21-37.EL.img CentOS (2.4.21-37.EL) Configuration [CentOS (2.4.21-37.EL)] /boot/vmlinuz-2.4.21-37.EL -> 2.4.21-37.EL ****** PROBLEM ******* No prebuilt module for 2.4.21-37.EL x86_64 ********************** *************************************** ******** NO MODULES INSTALLED ********* *************************************** Done. error: %post(aic7xxx-6.3.9-1) scriptlet failed, exit status 1 Regards, Ravi

3 2

multiple MX records
by Tom 10 Nov '05

10 Nov '05

Hi all, I have 2 servers, 1 is DNS master and the other slave for a domain, if I was to add a second MX record using the master servers IP for the domain thats hosted on the slave would mail be held on the masters mail queue if the slave was down? I am wanting to have mail held when the slave is down so it gets delivered immediately it comes back up instead of being held on other servers for up to 8 hours before I get it. hope that makes sense. tom

3 2

cron error message
by Sam Drinkard 10 Nov '05

10 Nov '05

Discovered a problem this morning. Looking at the cron log, I see a bunch of entries where cron mailed 2248 bytes of output but got status 0x0045. There was no daily report in the mail either. What is the error number saying? -- Snowman

1 0

centos 3.6 and apt repo
by Mark Quitoriano 10 Nov '05

10 Nov '05

Is there apt repository for 3.6? -- Regards, Mark Quitoriano, CCNA http://www.atamanetworks.com Fan the flame... http://www.spreadfirefox.com/?q=user/register&r=19441

2 2

Trouble with finding a network printer...help please...:(((
by Olaf Greve 10 Nov '05

10 Nov '05

Hi all, I'm sorry to have to ask a probably straightforward question, but I'm stuck at it, and I need access to the printer for my work...:/ The situation: When first installing CentOS, I manually installed a networked printer, and that worked fine. AFAIR I installed it using the IP address, and the generic Postscript driver. The printer in question is a Xante Accelawriter 3N. The issue: After one of the latest automatic kernel updates, for some reason the printer was not found anymore. I've been trying to get it set up afterwards, and so far I've not succeeded. :((( I do not remember anymore how I did it exactly previously, but it seems the only two ways to use this printer on our (probably not completely well configured) network are via TCP/IP and Appletalk. Now, try as I might, I cannot get it to work anymore. I tried finding it over TCP/IP by its IP address, but no luck so far. Does anyone know how to go about this? If this is somehow off-topic for the list, off-list replies are also elcome of course. Thanks in advance, and cheers! Olafo

1 0

Filers, filesystems, etc.
by Henk van Lingen 10 Nov '05

10 Nov '05

On Tue, Nov 08, 2005 at 08:04:54AM -0800, Bryan J. Smith wrote: > > > NAS offers safe concurent access (generally, there might be > > some NAS devices outthere that do not). NAS device will > > manage file system internally, and export it over NFS or > > SMB protocols to the clients. > > Such NAS' are a combined host+storage aka "filer." They have > many advantages over SAN -- especially in their fail-over > and/or load-balancing capabilities. ... > Oh, it all depends on the design of the NAS. NetApp does a > pretty damn fine job with their designs (long story). > But there's many other benefits. But that is a larger > discussion. Hi Bryan, Please tell. I have to replace our old Sun Enterprise fileserver (solaris8), which does NFS and Samba (homedirectories, projects file space). It will be x86 hardware, but I'm looking for the best filesystem for the job (let's say one terabyte). It has to have quota and ACL support. I'm doing CentOS on servers these days, but I presume ext3 is not the best choice in this case. Previous postings of yours suggest XFS is the way to go. However, it seems hard to find an enterprise class linux distro with XFS incorporated? And how does a FreeBSD solution compare to linux/ext3 or linux/xfs? What are the considerations in case of a NAS filer instead of a raid-box connected to hostmachine? Regards, -- Henk van Lingen, Systems & Network Administrator (o- -+ Dept. of Computer Science, Utrecht University. /\ | phone: +31-30-2535278 v_/_ http://henk.vanlingen.net/ http://www.tuxtown.net/netiquette/

12 29

Restart after crash
by Syv Ritch 10 Nov '05

10 Nov '05

Hi, Is it possible do have fsck to run automatically [without operator intervention], if it was not a clean shutdown. Right now, somebody has to bring a monitor & keyboard and say Y, if not it will not run and verify the drive. This is for remote headless servers. -- Thanks http://www.911networks.com

6 7

Re: [CentOS] ATA-over-Ethernet v's iSCSI
by Dave Hornford 09 Nov '05

09 Nov '05

Nick, What are you planning on running over the shared connection? Database, eMail, File Shares? How many users? How much data? What is your I/O profile? I've worked with 'enterprise' storage most of my career either as a consumer, adviser or provider - can't comment on AoE other than to suggest you look at what are the business & technical goals, how they solve it and what is your risk profile against the business need of the system. (I'm currently working as an adviser) When you have an opportunity to chase into "enterprise support" of new disk is usually comes down to insufficient time for testing, or known problems (heat, torque, variability in sample, failure rate & edge-case incompatibility with previously certified products are normal) You have hinted with the concern over TCP offload that you may have higher-end performance needs and that this system carries a high business value and needs a lower risk solution. Remember risk is a cost. regards Dave www.hornfordassociates.com >Nick Bryant >Subject: [CentOS] ATA-over-Ethernet v's iSCSI > >Just wondering if anyone out there has any opinions or better still >experience with Coraid's AoE products in a centos environment? > >We're looking at developing a very basic active/standby 2 node cluster >which will need a shared storage component. It would be a huge bonus if >other servers could also use the storage device. Originally I was looking >at the Dell/EMC iSCSI solution as it's a cheaper solution than fibre >channel. >However, the performance issues without using a TCP offload HBA are a bit >of a concern. > >Then I found the Coraid (www.coraid.com) products based on the open >standard AoE protocol. It's got a number of benefits including: price, >less protocol overhead for the server and the ability to use any disks >where as "enterprise" approved products form the likes of Dell/Sun etc >only support 250gb sata disks at the moment. > >I guess my concern is that it's a new technology that's not been widely >adopted so far and all the issues that go along with that. > >Any options or feedback would be really helpful. > >Cheers, > >Nick > >_______________________________________________ >CentOS mailing list >CentOS(a)centos.org >http://lists.centos.org/mailman/listinfo/centos > >

6 10

sendmail & mail() in php
by hiep＠ee.ucr.edu 09 Nov '05

09 Nov '05

Hello everyone, I tried to configure sendmail so that I can use mail() in php. I don't host my email server, my ISP does. I just want to configure sendmail so that it uses external email server (my ISP) to send mail. When I executed mail(), i got no error report from php. I checked /var/log/maillog and it indicated that the message was accepted for delivery. However, it didn't delivery and indicated DSN: Service unavailable. Can someone help or suggest any other way to get this thing works? I'm not in the position to setup and a fully function email server for this at this time. I just want to use my ISP email server for now. thank you so much for all your help. Here is my /var/log/maillog and sendmail.mc Nov 8 14:09:02 jadenet sendmail[3275]: jA8J920D003275: from=apache, size=73, class=0, nrcpts=1, msgid=<200511081909.jA8J920D003275(a)jadenet.jadesterling.com>, relay=apache@localhost Nov 8 14:09:02 jadenet sendmail[3276]: jA8J92aP003276: from=<apache(a)jadenet.jadesterling.com>, size=361, class=0, nrcpts=1, msgid=<200511081909.jA8J920D003275(a)jadenet.jadesterling.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1] Nov 8 14:09:02 jadenet sendmail[3275]: jA8J920D003275: to=hnguyen(a)jadesterling.com, ctladdr=apache (48/48), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30073, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (jA8J92aP003276 Message accepted for delivery) Nov 8 14:09:03 jadenet sendmail[3278]: jA8J92aP003276: to=<hnguyen(a)jadesterling.com>, ctladdr=<apache(a)jadenet.jadesterling.com> (48/48), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=120361, relay=mail.jadesterling.com. [216.144.3.38], dsn=5.0.0, stat=Service unavailable Nov 8 14:09:03 jadenet sendmail[3278]: jA8J92aP003276: jA8J93aP003278: DSN: Service unavailable Nov 8 14:09:03 jadenet sendmail[3278]: jA8J93aP003278: to=root, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31627, dsn=2.0.0, stat=Sent Nov 8 14:19:06 jadenet sendmail[3281]: jA8JJ51a003281: from=apache, size=73, class=0, nrcpts=1, msgid=<200511081919.jA8JJ51a003281(a)jadenet.jadesterling.com>, relay=apache@localhost Nov 8 14:19:06 jadenet sendmail[3282]: jA8JJ6Sp003282: from=<apache(a)jadenet.jadesterling.com>, size=361, class=0, nrcpts=1, msgid=<200511081919.jA8JJ51a003281(a)jadenet.jadesterling.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1] Nov 8 14:19:06 jadenet sendmail[3281]: jA8JJ51a003281: to=hnguyen(a)jadesterling.com, ctladdr=apache (48/48), delay=00:00:01, xdelay=00:00:00, mailer=relay, pri=30073, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (jA8JJ6Sp003282 Message accepted for delivery) Nov 8 14:19:06 jadenet sendmail[3284]: jA8JJ6Sp003282: to=<hnguyen(a)jadesterling.com>, ctladdr=<apache(a)jadenet.jadesterling.com> (48/48), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=120361, relay=mail.jadesterling.com. [216.144.3.38], dsn=5.0.0, stat=Service unavailable Nov 8 14:19:06 jadenet sendmail[3284]: jA8JJ6Sp003282: jA8JJ6Sp003284: DSN: Service unavailable Nov 8 14:19:06 jadenet sendmail[3284]: jA8JJ6Sp003284: to=root, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31627, dsn=2.0.0, stat=Sent divert(-1)dnl dnl # dnl # This is the sendmail macro config file for m4. If you make changes to dnl # /etc/mail/sendmail.mc, you will need to regenerate the dnl # /etc/mail/sendmail.cf file by confirming that the sendmail-cf package is dnl # installed and then performing a dnl # dnl # make -C /etc/mail dnl # include(`/usr/share/sendmail-cf/m4/cf.m4')dnl VERSIONID(`setup for Red Hat Linux')dnl OSTYPE(`linux')dnl dnl # dnl # default logging level is 9, you might want to set it higher to dnl # debug the configuration dnl # dnl define(`confLOG_LEVEL', `9')dnl dnl # dnl # Uncomment and edit the following line if your outgoing mail needs to dnl # be sent out through an external mail server: dnl # define(`SMART_HOST',`mail.jadesterling.com')dnl dnl # define(`confDEF_USER_ID',``8:12'')dnl dnl define(`confAUTO_REBUILD')dnl define(`confTO_CONNECT', `1m')dnl define(`confTRY_NULL_MX_LIST',true)dnl define(`confDONT_PROBE_INTERFACES',true)dnl define(`PROCMAIL_MAILER_PATH',`/usr/bin/procmail')dnl define(`ALIAS_FILE', `/etc/aliases')dnl define(`STATUS_FILE', `/var/log/mail/statistics')dnl define(`UUCP_MAILER_MAX', `2000000')dnl define(`confUSERDB_SPEC', `/etc/mail/userdb.db')dnl define(`confPRIVACY_FLAGS', `authwarnings,novrfy,noexpn,restrictqrun')dnl define(`confAUTH_OPTIONS', `A')dnl dnl # dnl # The following allows relaying if the user authenticates, and disallows dnl # plaintext authentication (PLAIN/LOGIN) on non-TLS links dnl # dnl define(`confAUTH_OPTIONS', `A p')dnl dnl # dnl # PLAIN is the preferred plaintext authentication method and used by dnl # Mozilla Mail and Evolution, though Outlook Express and other MUAs do dnl # use LOGIN. Other mechanisms should be used if the connection is not dnl # guaranteed secure. dnl # Please remember that saslauthd needs to be running for AUTH. dnl # dnl TRUST_AUTH_MECH(`EXTERNAL DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl dnl define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl dnl # dnl # Rudimentary information on creating certificates for sendmail TLS: dnl # cd /usr/share/ssl/certs; make sendmail.pem dnl # Complete usage: dnl # make -C /usr/share/ssl/certs usage dnl # dnl define(`confCACERT_PATH',`/usr/share/ssl/certs') dnl define(`confCACERT',`/usr/share/ssl/certs/ca-bundle.crt') dnl define(`confSERVER_CERT',`/usr/share/ssl/certs/sendmail.pem') dnl define(`confSERVER_KEY',`/usr/share/ssl/certs/sendmail.pem') dnl # dnl # This allows sendmail to use a keyfile that is shared with OpenLDAP's dnl # slapd, which requires the file to be readble by group ldap dnl # dnl define(`confDONT_BLAME_SENDMAIL',`groupreadablekeyfile')dnl dnl # dnl define(`confTO_QUEUEWARN', `4h')dnl dnl define(`confTO_QUEUERETURN', `5d')dnl dnl define(`confQUEUE_LA', `12')dnl dnl define(`confREFUSE_LA', `18')dnl define(`confTO_IDENT', `0')dnl dnl FEATURE(delay_checks)dnl FEATURE(`no_default_msa',`dnl')dnl FEATURE(`smrsh',`/usr/sbin/smrsh')dnl FEATURE(`mailertable',`hash -o /etc/mail/mailertable.db')dnl FEATURE(`virtusertable',`hash -o /etc/mail/virtusertable.db')dnl FEATURE(redirect)dnl FEATURE(always_add_domain)dnl FEATURE(use_cw_file)dnl FEATURE(use_ct_file)dnl dnl # dnl # The following limits the number of processes sendmail can fork to accept dnl # incoming messages or process its message queues to 12.) sendmail refuses dnl # to accept connections once it has reached its quota of child processes. dnl # dnl define(`confMAX_DAEMON_CHILDREN', 12)dnl dnl # dnl # Limits the number of new connections per second. This caps the overhead dnl # incurred due to forking new sendmail processes. May be useful against dnl # DoS attacks or barrages of spam. (As mentioned below, a per-IP address dnl # limit would be useful but is not available as an option at this writing.) dnl # dnl define(`confCONNECTION_RATE_THROTTLE', 3)dnl dnl # dnl # The -t option will retry delivery if e.g. the user runs over his quota. dnl # FEATURE(local_procmail,`',`procmail -t -Y -a $h -d $u')dnl FEATURE(`access_db',`hash -T<TMPF> -o /etc/mail/access.db')dnl FEATURE(`blacklist_recipients')dnl EXPOSED_USER(`root')dnl dnl # dnl # The following causes sendmail to only listen on the IPv4 loopback address dnl # 127.0.0.1 and not on any other network devices. Remove the loopback dnl # address restriction to accept email from the internet or intranet. dnl # dnl DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')dnl dnl # dnl # The following causes sendmail to additionally listen to port 587 for dnl # mail from MUAs that authenticate. Roaming users who can't reach their dnl # preferred sendmail daemon due to port 25 being blocked or redirected find dnl # this useful. dnl # dnl DAEMON_OPTIONS(`Port=submission, Name=MSA, M=Ea')dnl dnl # dnl # The following causes sendmail to additionally listen to port 465, but dnl # starting immediately in TLS mode upon connecting. Port 25 or 587 followed dnl # by STARTTLS is preferred, but roaming clients using Outlook Express can't dnl # do STARTTLS on ports other than 25. Mozilla Mail can ONLY use STARTTLS dnl # and doesn't support the deprecated smtps; Evolution <1.1.1 uses smtps dnl # when SSL is enabled-- STARTTLS support is available in version 1.1.1. dnl # dnl # For this to work your OpenSSL certificates must be configured. dnl # dnl DAEMON_OPTIONS(`Port=smtps, Name=TLSMTA, M=s')dnl dnl # dnl # The following causes sendmail to additionally listen on the IPv6 loopback dnl # device. Remove the loopback address restriction listen to the network. dnl # dnl DAEMON_OPTIONS(`port=smtp,Addr=::1, Name=MTA-v6, Family=inet6')dnl dnl # dnl # enable both ipv6 and ipv4 in sendmail: dnl # dnl DAEMON_OPTIONS(`Name=MTA-v4, Family=inet, Name=MTA-v6, Family=inet6') dnl # dnl # We strongly recommend not accepting unresolvable domains if you want to dnl # protect yourself from spam. However, the laptop and users on computers dnl # that do not have 24x7 DNS do need this. dnl # FEATURE(`accept_unresolvable_domains')dnl dnl # dnl FEATURE(`relay_based_on_MX')dnl dnl # dnl # Also accept email sent to "localhost.localdomain" as local email. dnl # LOCAL_DOMAIN(`localhost.localdomain')dnl dnl # dnl # The following example makes mail from this host and any additional dnl # specified domains appear to be sent from mydomain.com dnl # MASQUERADE_AS(`jadesterling.com')dnl dnl # dnl # masquerade not just the headers, but the envelope as well dnl # dnl FEATURE(masquerade_envelope)dnl dnl # dnl # masquerade not just @mydomainalias.com, but @*.mydomainalias.com as well dnl # dnl FEATURE(masquerade_entire_domain)dnl dnl # dnl MASQUERADE_DOMAIN(localhost)dnl dnl MASQUERADE_DOMAIN(localhost.localdomain)dnl dnl MASQUERADE_DOMAIN(mydomainalias.com)dnl dnl MASQUERADE_DOMAIN(mydomain.lan)dnl FEATURE(`genericstable',`hash -o /etc/mail/genericstable.db')dnl GENERICS_DOMAIN_FILE(`/etc/mail/generics-domains')dnl MAILER(smtp)dnl MAILER(procmail)dnl

3 3

compaq dl380 raid 5 striping size using built in scsi controllers ??
by Robert 09 Nov '05

09 Nov '05

greetings pre centos install raid5 setup on a compaq dl380 is asking for stripe size. 16kb 32kb 64kb i am using one of the built in controllers and the machine has just a gig of ram and 4 18.2 gig 10,000 rpm drives machine will be an email server with simple web hosting as well. suggestions? thanks - rh -- Robert Hanson - Abba Communications Computer & Internet Services (509) 624-7159 - www.abbacomm.net

4 5

USB Stick Install
by Bards1888 09 Nov '05

09 Nov '05

Hello all, I'm looking at setting up a sort of 'appliance' server and as such its really not going to have a lot packages etc. I thought of installing 4.2 on a 1gb USB stick, however, the stick is not even recongnized by anaconda. It did appear when I did 'modprobe usb-storage.ko' as /dev/sdc (i have already have 2 SATA disks which are sda, sdb). Then the disk partitioner does not allow me to install on the USB stick, its not even listed as an available drive. Does anyone have any redhat/centos experience with this ? I've successfully managed to get OpenBSD and Ubuntu to install and boot on exactly the same kit so there is nothing wrong hardware wise. I might try and disconnect the SATA drives before attempting the install to see if that make any difference. Thanks. Bards.

6 8

centosplus kernel
by Johnny Hughes 09 Nov '05

09 Nov '05

Just for the record, we are currently working with someone from SGI to get a much better implementation of XFS working with the centosplus kernel. I want to wait to push the centosplus unsupported kernel (2.6.9-22) until we have this new and much more stable version of XFS code implemented.

9 16

Syslog x Samba VFS audit
by Marcelo Renan Becher 09 Nov '05

09 Nov '05

Hello all, Recently I,ve activated the Samba vfs audit module on my CentOS server. Then, I configured syslog to save the events, how open files, create directories.. in /var/log/samba/audit.log, but the same information are being stored in /var/log/messages too.. How I can configure Syslog to store this informations only in messages log file? Bellow, a part of my syslog.conf user.*;user.!warn /var/log/samba/audit.log *.info;mail.none;local5.none;authpriv.none;cron.none;auth.!=info /var/log/messages Thanks, -- Marcelo Renan Becher Linux User: #296657 pMSN: morgaux{at}hotmail.com Skype: marcelod2.gmail.com

2 2

Packages
by Sam Drinkard 09 Nov '05

09 Nov '05

I am in need of the udunits and udunits-devel packages. I know I remember seeing the udunits package on the CD's but don't recall seeing the udunits-devel. Looking at the rpm-pbone.net, I only found versions avilable for FC. Would it break a bunch of stuff to install both packages on a 4.1-i386 system ? Also looked via yum, at Dag's repository, and mirrors, but nothing shows up for it. I'm still new enough to CentOS to not know where and what I can install from other versions without breaking things... Sam -- Snowman

2 3

Eliminate old kernels
by iagosineiro＠yahoo.es 09 Nov '05

09 Nov '05

Hi. Is there any commad for eliminate old kernels from grub instead of edit manually grub.conf and eliminate the files from /boot? Iago.

7 6

Compile KQEMU
by Adriano Frare 09 Nov '05

09 Nov '05

Dear Friends, How I compile MODULE kqemu (QEMU) on Centos 4.2 ? I done download kernerl-devel, but when I compile MODULE KQEMU I have received follow message. # make make -C SUBDIRS=`pwd` modules make: *** SUBDIRS=/data/appl/kqemu: No such file or directory. Stop. make: *** [kqemu.o] Error 2 Thanks Adriano Frare

3 6

kickstart script
by Mark Quitoriano 09 Nov '05

09 Nov '05

is there a kickstart for centos? where can i find a howto? -- Regards, Mark Quitoriano, CCNA http://www.atamanetworks.com Fan the flame... http://www.spreadfirefox.com/?q=user/register&r=19441

2 2

Problem updating with yum
by iagosineiro＠yahoo.es 09 Nov '05

09 Nov '05

Hi. I executed the command yum update in a centos 3.5 (originally a whitebox enterprise) and I got the results: CorriendoÂ·unÂ·testÂ·deÂ·laÂ·transacciÃ³n: ErroresÂ·reportadosÂ·haciendoÂ·laÂ·prueba installing package glibc-common-2.3.2-95.37 needs 29MB on the / filesystem installing package nptl-devel-2.3.2-95.37 needs 29MB on the / filesystem Sorry but part of the messages is in spanish. Iago. ______________________________________________ Renovamos el Correo Yahoo! Nuevos servicios, más seguridad http://correo.yahoo.es

2 4

CentOS 4.2 with LSI MRSATA300-8X?
by HaraldFinnås 09 Nov '05

09 Nov '05

Just wondering if anyone is using CentOS 4.2 with a LSI MRSATA300-8X controller? I just got a new SuperMicro server with this controller, and the install works just fine, but it panics when booting after install. For all I know (yet), it might be a problem with the server itself, but I suspect it's the LSI controller that's the problem. I've just started looking into it, so I haven't copied the panic log yet. I'm currently trying to install 4.1 hoping that'll work... Regards, Harald

1 0

Re: [CentOS] Dag repo
by Dag Wieers 09 Nov '05

09 Nov '05

On Wed, 9 Nov 2005, Colm MacCarthaigh wrote: > On Tue, Nov 08, 2005 at 12:36:04PM +0100, Dag Wieers wrote: > > I don't know what the problem is. Either the file is empty on the > > filesystem (corruption on the filesystem level or problems with rsync or > > NFS) or the web server is handing out empty files under certain > > conditions. > > It's the latter, and the problem has been traced to yet another bug to > do with sendfile() and TCP checksum offloading. Basically ... the > packets were being sent, but with invalid checksums. So the clients were > rejecting the packets. > > > Without access to the system I have no clue whether the filesystem is the > > problem or it is Apache related. I bet it is Apache's problem as mirrors > > of Heanet do not seem to have this problem. (This is different than when > > it was a NFS problem with the same symptoms) > > Turned out not to be an Apache problem, as anything which used > sendfile() would have been effected. The problem is really in the > network cards - and how they handle offloaded checksums when DSCP > headers are set. Thanks Colm, I'm very interested to learn how you figured this out. Also, are there any tests/monitors to find the same cause in the future ? It could be something that is silently bothering other people as well, and a technical explanation together with Google might make this valuable information. Kind regards, -- dag wieers, dag(a)wieers.com, http://dag.wieers.com/ -- [all I want is a warm bed and a kind word and unlimited power]

1 0

I have installed the last publication of linux CentOS
by George Ginis 09 Nov '05

09 Nov '05

my name is George Ginis... apology for English that I know... I have the hp Compaq nx7010 with windows XP professional, has ADSL and the connection is with us-robotics wireless, in second portable Compaq notebook 100, I have installed the last publication of linux CentOS and the connection is with ethernet, i try to be connected in samba in CentOS but alone that I have accomplished has been PUTTY.EXE and psftp.exe do you known the reasons or what it should I make? can say to me what it should I make? thanks a lot...

1 0

VPN via PPTP and MPPE
by James B. Byrne 09 Nov '05

09 Nov '05

I have set up a VPN over PPTP on a CentOS server using the DKMS module rpm dkms-0-2.0.6-3.el4 from http://centos.karan.org/el4/extras/stable/i386/RPMS/repodata/repovie w/dkms-0-2.0.6-3.el4.kb.html and kernel_ppp_mppe-0.0.5-2dkms.noarch.rpm at http://pptpclient.sourceforge.net/howto-fedora- core-3.phtml. I have configured the pptpd server on Centos4 to use MS_CHAPv2, 128bit encryption and to assign server side and client IP addresses in the range a.b.c.42-48 and a.b.c.52-58 respectively. I have also opened the firewall for tcp port 1723 and the GRE protocol (47). I have configured a Microsoft Win2Kpro client and I can connect and establish a VPN. However I am missing something because: 1. If I try and connect to a machine on the local network segment then the VPN channel is not used (this is probably the correct behaviour but it is not what I want and I need to know how to force local network paths over an encrypted connection). 2. If I try and connect to a host outside our local network then the traffic is not routed out through the gateway but it does travel over the vpn to the local pptdp server. So, what am I missing in all of this? Are there options for the pptpd that I need to set for this to work? I have a similar problem when I connect from outside the local network segment. The the vpn connects but then I cannot reach any other host. Any suggestions are welcome. I am a digest subscriber so if you could copy my email address on your reply then I would be appreciative. Regards, Jim -- *** e-mail is not a secure channel *** mailto:byrnejb.<token>@harte-lyne.ca James B. Byrne Harte & Lyne Limited vox: +1 905 561 1241 9 Brockley Drive fax: +1 905 561 0757 Hamilton, Ontario <token> = hal Canada L8E 3C3

3 2

Re: [CentOS] Reducing the deleterious effects ofego related issues on the list
by Brian T. Brunner 09 Nov '05

09 Nov '05

Bryan... NOBODY CARES how many times Chris is wrong. NOBODY CARES what you prove on this point. Whether Chris is right, wrong or stoopid is NOT proper fodder for this (CENTOS) list. Chris being wrong is *strictly* a "Bryan Fixation". Part of YOU growing up is YOU realizing that whether Chris is or is not wrong is UNIMPORTANT to ANYTHING that you or anybody important to you think is important. Challenge: don't respond, unless it's about CentOS or related stuff (like the Meridian War... neat info I hadn't seen before!) Brian Brunner brian.t.brunner(a)gai-tronics.com (610)796-5838 >>> thebs413(a)earthlink.net 11/08/05 08:58AM >>> I want to prove Chris wrong yet again. -- Bryan J. Smith b.j.smith(a)ieee.org http://thebs413.blogspot.com ******************************************************************* This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept for the presence of computer viruses. www.hubbell.com - Hubbell Incorporated

4 6

Re: [CentOS] Reducing the deleterious effects ofego related issues onthe list
by Brian T. Brunner 08 Nov '05

08 Nov '05

"Multi-Point Network Loading Test Equipment" Brian Brunner brian.t.brunner(a)gai-tronics.com (610)796-5838 >>> chrism(a)imntv.com 11/08/05 03:48PM >>> Cool! I'll have to buy a copy. It's been years since I was into FPS games, but I used to be pretty good at Ghost Recon. Now...how to sneak a gaming rig into the next quarterly budget.... 8-) ******************************************************************* This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept for the presence of computer viruses. www.hubbell.com - Hubbell Incorporated

1 0

App not finding /dev/nvidia0 for /dev/dri/card0 not found on inspiron 8200 with nvidia chipset
by Jerry Geis 08 Nov '05

08 Nov '05

I have source for a program that is attempting to open /dev/nvidia0 then on failure open /dev/dri/card0 to get some vsync settings. Neither of those two files is found on my laptop in /dev. Is this because of udev? I cant find anthing in /dev that might be used instead. Any ideas on what to open to read vsync information from X windows? Thanks, Jerry

3 3

New Standard/Daylight time-change dates in rhel4u2 but not centos4.2?
by s.davison＠computer.org 08 Nov '05

08 Nov '05

>From a login on a machine with rhel4u2 I can execute the following commands and get the indicated output: date --date="Mar 25 15:00:00 UTC 2006" Sat Mar 25 10:00:00 EST 2006 date --date="Mar 25 15:00:00 UTC 2007" Sun Mar 25 11:00:00 EDT 2007 As you can see, the output differs for 2006 and 2007. That indicates that rhel4u2 includes changes required by the "Energy Policy Act of 2005," which mandates new dates for transition between Standard Time and Daylight Saving Time starting in 2007. If I do the same thing on a machine with "CentOS release 4.2 (Final)", I get the following output: date --date="Mar 25 15:00:00 UTC 2006" Sat Mar 25 10:00:00 EST 2006 date --date="Mar 25 15:00:00 UTC 2007" Sun Mar 25 10:00:00 EST 2007 So it looks as if CentOS4.2 does not yet have that change. Is that correct? Or is there perhaps some installation parameter that I have missed in installing CentOS4.2? Thanks for any info. Stowe Davison

4 4

mondo Centos4
by Dave 08 Nov '05

08 Nov '05

I had asked a few months ago if anyone knew if mondo is compatible with CentOS4. One person said it was still working, but never mentioed if he had done a restore. I had the stable version installed and whenever I ran it there were a few messages about command not found. Well, I had a HD go out and tried booting from the CD and it failed. It was just my desktop PC and my home dir was backed up a few days earlier so no biggie. So anyone have Mondo installed and has done a recovery? If so what version? If not, anyone now of a full metal backup restore similar to mondo?

2 1

Re: [CentOS] VPN via PPTP and MPPE
by James B. Byrne 08 Nov '05

08 Nov '05

On 1 Nov 2005 at 11:25, Joe Pruett wrote: > as for your local traffic, the vpn only sets up a route for the > natural netmask of the remote end. so if the vpn server is > 192.168.1.4, then a route for 192.168.1.0/24 will be installed. > you can see what routes get setup via 'route print' at a dos > prompt. if you need other routes setup, then you have to do it > manually after the vpn is running. i seem to recall there might > be a way to invoke the vpn from a command script, so you might be > able to start it and add the routes from a .bat file. Thank you for the assistance. I have reached the point where I seem to have resolved all the firewall issues that were contributing to my problems and I can now reliably connect a vpn between my MS-W2K box on one C class to a CentOS4.2 box running PopTop pptpd with 128 bit MPPE. As you anticipated, now I am down to routing problems. I have set up the pptpd server to supply a non-routable address in the range 192.168.209.194-254 as the client side IP and a routable address from the remote C block as the server side. I have very little knowledge and even less experience with this so please bear with me. Here is what I want to do: Case 1. Typical: >From any arbitrary external IP address, establish a VPN to a pptpd server inside our firewall that will route all traffic consigned to our internal network over that VPN while all other traffic goes over the gateway established before the VPN is set up. I cannot seem to get this to work with the MS network connection client. I have turned off the "use default gateway on remote network" option in the tcp/ip advanced networking options in the MS client, but the only effect that seems to have is that no traffic goes over the VPN at all. I have confirmed via tracert that the destination IP of the VPN tunnel is recognized on the eth0 interface and responds to ping and traceroute, but the routing from my test workstation is invariantly over the public gateway and not via the vpn. Case 2. All traffic is routed over the VPN and then, if necessary, out onto the Internet via our own gateway. I need to get case 1. working before I do this, but this will be a another requirement that will have to be available in addition to case 1. for some users. What I need is a way of configuring vpn clients on Windows 2K and XPpro so that these two cases work automatically from some sort of simple to deploy client install script. I am open to using alternative vpn client software if that is required. As this is evidently a client side problem I understand that it is not strictly CentOS related. However, this issue naturally falls on the server end to provide an answer and I hope that someone here has gone through this already and can provide me with some advice or referrals to other venues for help. Presently, this is what I get on the MS-W2K client when I establish a VPN between netblock A and netblock B: ==================================================================== ======= Interface List 0x1 ........................... MS TCP Loopback interface 0x1000003 ...00 48 54 8c 2a fb ...... NDIS 5.0 driver 0x2000004 ...00 53 45 00 00 00 ...... WAN (PPP/SLIP) Interface ==================================================================== ======= ==================================================================== ======= Active Routes: Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 A.1 A.77 1 127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1 192.168.209.0 255.255.255.0 192.168.209.214 192.168.209.214 1 192.168.209.214 255.255.255.255 127.0.0.1 127.0.0.1 1 192.168.209.255 255.255.255.255 192.168.209.214 192.168.209.214 1 B.21 255.255.255.255 A.1 A.77 1 A.0 255.255.255.0 A.77 A.77 1 A.77 255.255.255.255 127.0.0.1 127.0.0.1 1 A.255 255.255.255.255 A.77 A.77 1 224.0.0.0 224.0.0.0 192.168.209.214 192.168.209.214 1 224.0.0.0 224.0.0.0 A.77 A.77 1 255.255.255.255 255.255.255.255 A.77 A.77 1 Default Gateway: A.1 ==================================================================== ======= Persistent Routes: None The only route to the B network seems to go through the usual gateway A.1 and not over the VPN. If I do NOT clear the use default GW option then all traffic goes from the client on A.77 over the VPN Default Gateway (192.168.209.214), reaches the IP at the server end (B.214), but then is not routed off the pptpd server (forwarding is enabled): # cat /proc/sys/net/ipv4/ip_forward 1 Regards, Jim -- *** e-mail is not a secure channel *** mailto:byrnejb.<token>@harte-lyne.ca James B. Byrne Harte & Lyne Limited vox: +1 905 561 1241 9 Brockley Drive fax: +1 905 561 0757 Hamilton, Ontario <token> = hal Canada L8E 3C3

2 1

Re: CentOS 3.6 is released.
by John Hinton 08 Nov '05

08 Nov '05

Lance Davis wrote: >The CentOS development team are please to announce the release of CentOS >3.6 for all supported architectures. > >It is available on all mirrors and via bitorrent. > >This release corresponds to the upstream vendor U6 release together with >updates through October 11th (depending on architecture). > >Please download and test, or set your yum.conf to point to 3.6 rather >than $releasever (eg http://mirror.centos.org/centos/3.6/..) to test >updating and add any problems to bugs.centos.org > >3.5 will be removed from the mirrors and 3.6 will become the default in >48 hours if no problems are reported. > >Lance > > Hmmm... has 48 hours passed? :) Just curious.... John Hinton

3 3

php version
by Mark Quitoriano 08 Nov '05

08 Nov '05

How can i install php 4 on Centos 4? is there RPMs for centos 4? or can i use srpms(php4) of centos 3 to be used for centos 4? -- Regards, Mark Quitoriano, CCNA http://www.atamanetworks.com Fan the flame... http://www.spreadfirefox.com/?q=user/register&r=19441

1 0

CentOS4.2 and wifi
by John Logsdon 08 Nov '05

08 Nov '05

Dear all Can anyone tell me, does CentOS4.2 include a wifi manager that will handle 128 bit WEP out of the box, so to speak? The version of kwifimanager with 4.1 would only do 64 bit due to an oversight at KDE Towers... TIA John John Logsdon "Try to make things as simple Quantex Research Ltd, Manchester UK as possible but not simpler" j.logsdon(a)quantex-research.com a.einstein(a)relativity.org +44(0)161 445 4951/G:+44(0)7717758675 www.quantex-research.com

1 0

CENTOS behind m0n0wall
by Claudio Castro 08 Nov '05

08 Nov '05

Hi guys, is anybody using a CENTOS 4 server behind a m0n0wall firewall? I getting troubles trying to make it work with 1:1 NAT. :-( , I dont know what could it be the problem. suggestions? Regards.

1 0

Re: [CentOS] Reducing the deleterious effects ofego related issueson the list
by Brian T. Brunner 08 Nov '05

08 Nov '05

How about DiabloII (Lord of Destruction)? I've heard of it running under Winex/Cedega (which is not Wine nor is it freeware) but not under wine or native... Brian Brunner brian.t.brunner(a)gai-tronics.com (610)796-5838 >>> peter(a)farrows.org 11/08/05 10:02AM >>> UT 2004 does run on Linux...... Client and dedicated servers.... http://www.linux-gamers.net/modules/wfsection/article.php?articleid=40 So does Quake 4 (released 2 weeks ago) http://zerowing.idsoftware.com/linux/quake4/ P. ******************************************************************* This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept for the presence of computer viruses. www.hubbell.com - Hubbell Incorporated

2 1

Centos 3.6 - unable to configure X
by Plant, Dean 08 Nov '05

08 Nov '05

I am trying without success to configure X on a Siemens Laptop Lifebook E8020D. Does anyone have a working XF86Config file that I can try as all I see when starting X is a black screen. I think the problem is down to the monitor not being detected correctly but am unsure how to fix. Thanks Dean

1 0

RE: [CentOS] Re: ATA-over-Ethernet v's iSCSI -- CORAID is NOT SAN , also check multi-target SAS
by Bowie Bailey 08 Nov '05

08 Nov '05

From: Bryan J. Smith [mailto:thebs413@earthlink.net] > > CORAID will _refuse_ to allow anything to access to volume after one > system mounts it. It is not multi-targettable. SCSI-2, iSCSI and > FC/FC-AL are. AoE is not. As I understand it, Coraid will allow multiple machines to mount a volume, it just doesn't handle the synchronization. So you can have more than one machine use it, you just need GFS to keep it synchronized. I am in the process of building a system like this. I don't have both hosts accessing the storage yet, but Coraid assures me that it is possible. Bowie

1 0

Reducing the deleterious effects of ego related issues on the list: growing up individually.
by William L. Maltby 08 Nov '05

08 Nov '05

Folks, I *suggest* that little or no reply to this is warranted. It's just the statements of an old fart trying to make a (slightly) better environment for all of us. These thoughts are offered for consideration and use as you see fit. For some, "Hey, that'll work for me too" is the hoped for result. No discussion is intended or warranted, IMO. If you recognize yourself in here, so what? I have no problem with it, you shouldn't. If you are obnoxious, have too little ego to withstand reasonable well-intentioned community-spirited criticism, ... have myriad other issues and believe I am referring to *you*; your problem, not mine. I may be referring to you, but why should you care? If you get embroiled in some of the negative activities exampled below with good intentions, I understand completely and do not unduly condemn you for your efforts. If the person that removed others from the list because their attitude was not to the liking of the powers-that-be wants to remove me too, go for it. It won't bother me. This place is no prize, in real-life terms. Nevertheless, ... I've not been a list member long, but I've sen enough to make me wonder if I want to stay here (save your snide self-serving comments, they waste bandwidth and have 0 useful product other than to your own ego). I recently was the *potential* victim of one of those threads that begins with a simple query, gets some alternatives discussed and descends into a folks-defending-ego thread. Not having a victim mentality, ego issues or need to walk on water in the eyes of anyone, I avoided the trap. But the thread started to go that way regardless. I like to feel that my behavior contributed to its early death. *All* of this is unnecessary and childish. Example: as minor background to lend credence to a possibility that had been proposed, I mentioned that I had worked on UNIX systems since way back when. Not waving my ego or trying to denigrate anyone else's POV or credentials, just supporting an assertion that there had been a time when things had been done a certain way. And questioning if it was not still so. Since I was discussing a solution conflicting with one posed by a knowledgeable participant, it seemed to appropriate to set the stage with an "I've worked on *IX since ..." clause. One did not interpret it as intended and chose to come flapping his background, degrees and experience . *But* he also provided some valuable education to me surrounding the topic. His need to "out credential" me (easily done since I have none) caused me no aggravation whatsoever. Wasted a few lines worth of reading time, but no big deal to me. *I* had no problem with the (somewhat) inappropriate nature of his response and did nothing more than thank him for taking the time and educating me on some of the conventions in place in the Linux (*IX?) community today. I *propose* that this should be the normal response to certain perceived objectionable behavior, as a courtesy to the rest of the list. Why? Selfishness. I get tired of <DEL> <DEL> <DEL> ... on the crap that follows. *If* there was any chance that one's objectionable behavior would be improved by pointing out various transgressions and/or lapses in etiquette, I say go for it. But there are certain individuals for which we know this effort to be a complete waste of time and energy. So why do it? Discrimination is needed. A good starting point may be "If I say this, *might* the person see it as a positive suggestion, as intended?". Anyway, this was the (potential) end of the thread... but nooooo. Someone else has to jump in. Don't misunderstand, I *completely* understand the emotional impetus, some of the history causing that impetus and think the interjection was not unreasonable and I know it was well-intentioned (for which I thank you). But part of the maturity we need on the list is to consider not only our on ego-centric needs to "stand up for ourselves and others", but the "personalities" of (and possible effects on) various list participants. To put it in a slightly humorous vein (I know this is not allowed and I will *never* let that issue die completely, but...) When you have an urge to reply to one who has demonstrated a persecution complex (justified or not), one who must always be right (and who may in actuality probably very often be so), one who can not see the harsh unforgiving nature of his relationship with others, one who is paranoid (aren't all sysadmins? Being paranoid does not mean they are *not* out to get you. There is a reason that a well known acronym is BOFH.), ... DO A RISK VS. REWARD ANALYSIS The Rasmussen(?) trees might be applied to your endeavor ( :-) ) If the reward is nothing more than the egotistical satisfaction of telling that SOB where to get off let the damn issue slide. If the reward seems minimal or unlikely to materialize at all, let the damn issue slide. If the adverse results seem very likely and/or *probably* significant, such that the perceived reward is not justified, let the damn issue slide. Additional considerations. Don't let someone else's problems become yours (ours, mine). *He* has ego issues? Not *my* problem and will not become so. He's paranoid? *I'm* not and will not become so. *He* is grating, intolerant, has tunnel-vision... pick the pejorative trait of the day... *not* (my/your/our) problem, let the damn issue slide. I thought the LFS crew was overly contentious. But considering the much higher level of activity, it was the garden of Eden compared to this place. *Some* of this is because there is nothing (that I have seen yet) that highlights or establishes the standards of behavior that the list expects. So far I have seen only an arbitrary removal of certain participants because one individual got irked and had the power to remove folks' privileges. Not a good way to run a community effort, IMO. Some of the dissension occurs over misinformation. It would be nice if everything posted was 100% complete and accurate. Can't be so. Corrections will be posted. I'm wrong! =:-0 So what! I have an ego that can withstand that condemnation. I suggest you go to a Dollar General or some such and purchase one for yourself. The strength of community knowledge lies in quantity as well as quality. Postings should not be discouraged for fear of condemnation resulting from erroneous information. Anal retentive types that insist only 100% complete and accurate information should appear are doing a disservice to the community. It denies the community the benefits of the interactions that can result. I feel no obligation to force you into believing I'm right. I offer what I have, right wrong or indifferent. I will *not* argue back and forth about its correctness if the issue can't be discussed rationally among *friends*. Do with it what you will. Someone thinks it's wrong-headed? Carve the crap out of it. Slice me, dice me, anyway you want to. Not an issue. I care not if your information is right or wrong. Google is your/my/our friend (one of many) in dispute resolution proceedings and the results need not be published if it will engender on-list wars. Open, tolerant discussions benefit all, except the terminally insecure (we used to call them a**hole engineers - because they always believed they were getting it there or were intent on giving it to another there and spent inordinate amounts of energy covering it - CYA). I *can* and *do* learn from everyone regardless of right/wrong. Maximization of learning through community knowledge and experience *demands* that incorrect information postings be expected and tolerated (kindness and consideration of responses to such are needed by all involved) And LFS folks even permitted and appreciated humor. A *big* plus compared to here (don't bother to say it). Anyway, that's all I wanted to offer. Take it any way you prefer. Flames off-list handled as I see fit, on-list shows what kind of a jerk you are to waste everyone's time. This posting *may* not be a waste, based on my subjective observations. Bill Maltby

7 11

Re: [CentOS] Re: New Standard/Daylight time-change dates in rhel4u2butnot centos4.2?
by Brian T. Brunner 08 Nov '05

08 Nov '05

Zulu time will (necessarily) be reckoned relative to Durban, South Africa (capital of KwaZulu-Natal province, South Africa) where the Zulu people live. Brian Brunner brian.t.brunner(a)gai-tronics.com (610)796-5838 >>> sam(a)wa4phy.net 11/07/05 07:37PM >>> Peter Farrow wrote: > For those of us who live the promised land where GMT is absolute time > all the this "UTC" nonsense is of little concern.... > > Those of you across the water cant even bring yourselves to call it > GMT, you have hide behind the label of "UTC", it is GMT, Greenwich > Mean Time at Zero Longitude... <snip> How about Zulu time :-) That still works for me, and everybody else who has had dealings with the armed forces or U.S. Gov't (aside the politicians) -- Snowman _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos ******************************************************************* This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept for the presence of computer viruses. www.hubbell.com - Hubbell Incorporated

1 0

Re: [CentOS] Reducing the deleterious effects of ego relatedissues on the list: growing up individua
by Brian T. Brunner 08 Nov '05

08 Nov '05

Let it slide. Brian Brunner brian.t.brunner(a)gai-tronics.com (610)796-5838 >>> craigwhite(a)azapple.com 11/07/05 06:39PM >>> On Mon, 2005-11-07 at 15:03 -0800, Bryan J. Smith wrote: > No sense in responding further. I think I've made my point. ******************************************************************* This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept for the presence of computer viruses. www.hubbell.com - Hubbell Incorporated

1 0

Re: [CentOS] Re: New Standard/Daylight time-change dates in rhel4u2butnot centos4.2?
by Brian T. Brunner 08 Nov '05

08 Nov '05

No. Brian Brunner brian.t.brunner(a)gai-tronics.com (610)796-5838 >>> peter(a)farrows.org 11/07/05 06:27PM >>> (can't wait for the barrage of replies to this one..... tee hee....) ---> Brian, I'm ready: lay it on me.... at least 5 paragraphs please...... ******************************************************************* This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept for the presence of computer viruses. www.hubbell.com - Hubbell Incorporated

1 0

updated rpmstrap script
by Deim Ágoston 08 Nov '05

08 Nov '05

hello, I just upgraded the rpmstrap script for CentOS 4.2. As I don't have any x86_64 machines I just upgraded the i386 section. Some of the version numbers are changed and there were some new package requirements. The file is attached. Overwrite the original file under /usr/lib/rpmstrap/scripts and itt will work again. Bye, Ago

1 0

Re: New Standard/Daylight time-change dates in rhel4u2 butnot centos4.2?
by Brian T. Brunner 08 Nov '05

08 Nov '05

The laws already exist: Disturbing the peace, Misappropriation of public funds, Prohibition on unfunded mandates. What's lacking is prosecutors, judges, and juries who see the politicians as getting in the way of the statesmen and the people. To drag this back towards On Topic, it seems to me that the ntp folks might be petitioned to write up and submit to the Congress, a paper requesting them to keep their danged hands in one-another's pockets, and leave the clock alone. albeit not in those precise words... Brian Brunner brian.t.brunner(a)gai-tronics.com (610)796-5838 >>> thebs413(a)earthlink.net 11/07/05 02:50PM >>> Aleksandar Milivojevic <alex(a)milivojevic.org> wrote: > Those darn politicians, there should be a law to put into > jail for life any politician who even thinks about > proposing any artificial time changes, While my Libertarian ideals agree with you on the fact that politicians live to legislate, but statemen do not, asking for such jail time for doing such would require yet another law. ;-> Seriously now, GMT everything. I have always GMT'd the RTC -- especially with the common "double jump" that Windows used to pull on me (until they fixed that). But I started GMT'ing all systems over the last few years and have been running things according to GMT time. I only setup locale on an individual user-base now. That minimizes such legislation non-sense (among other things). -- Bryan J. Smith | Sent from Yahoo Mail mailto:b.j.smith@ieee.org | (please excuse any http://thebs413.blogspot.com/ | missing headers) _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos ******************************************************************* This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept for the presence of computer viruses. www.hubbell.com - Hubbell Incorporated

7 14

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss