- Discuss - lists.centos.org

httpd and krb5.conf
by Aleksandar Milivojevic 19 May '05

19 May '05

I've noticed that SELinux blocks httpd (standard CentOS httpd, simply installed from RPM) from writing to krb5.conf file. Question. Why on earth would httpd need write access to krb5.conf file?! Sure, it might need read access if it is configured to use Kerberos for authentication, but write!? I mean, web server that modifies one of the critical files (which is used for authentication/authorization)?

4 3

CentOS-announce Digest, Vol 3, Issue 9
by centos-announce-request＠centos.org 19 May '05

19 May '05

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2005:074 Low CentOS 3 ia64 rsh - security update (Pasi Pirhonen) 2. CESA-2005:106 Low CentOS 3 ia64 openssh - security update (Pasi Pirhonen) 3. CESA-2005:256 Low CentOS 3 ia64 glibc - security update (Pasi Pirhonen) 4. CEBA-2005:258 CentOS 3 ia64 gcc - Bug Fix Advisory (Pasi Pirhonen) 5. CEBA-2005:260 CentOS 3 ia64 binutils - Bug Fix Advisory (Pasi Pirhonen) 6. CEEA-2005:253 CentOS 3 ia64 tzdata - Product Enhancement (Pasi Pirhonen) 7. CESA-2005:074 Low CentOS 3 s390(x) rsh - security update (Pasi Pirhonen) 8. CESA-2005:106 Low CentOS 3 s390(x) openssh - security update (Pasi Pirhonen) 9. CESA-2005:256 Low CentOS 3 s390(x) glibc - security update (Pasi Pirhonen) 10. CEBA-2005:258 CentOS 3 s390(x) gcc - Bug Fix Advisory (Pasi Pirhonen) 11. CEBA-2005:260 CentOS 3 s390(x) binutils - Bug Fix Advisory (Pasi Pirhonen) 12. CEEA-2005:253 CentOS 3 s390(x) tzdata - Product Enhancement (Pasi Pirhonen) 13. CEBA-2005:088 CentOS 3 ia64 authconfig - Product Enhancement Advisory (Pasi Pirhonen) 14. CEEA-2005:263 CentOS 3 ia64 diskdumputils - enhancement update (Pasi Pirhonen) 15. CEEA-2005:357 CentOS 3 ia64 bootparamd - Updated package (Pasi Pirhonen) 16. CEEA-2005:149 CentOS 3 ia64 kdebase - bug fix update (Pasi Pirhonen) 17. CEBA-2005:446 CentOS 3 ia64 krb5 - updated package (Pasi Pirhonen) 18. CEBA-2005:058 CentOS 3 ia64 util-linux - bug fix update (Pasi Pirhonen) 19. CEBA-2005:062 CentOS 3 ia64 pam - bug fix update (Pasi Pirhonen) 20. CEBA-2005:246 CentOS 3 ia64 parted - bug fix update (Pasi Pirhonen) 21. CEBA-2005:147 CentOS 3 ia64 rpm - bug fix update (Pasi Pirhonen) 22. CEEA-2005:088 CentOS 3 s390(x) authconfig - Product Enhancement Advisory (Pasi Pirhonen) 23. CEEA-2005:357 CentOS 3 s390(x) bootparamd - Updated package (Pasi Pirhonen) 24. CEEA-2005:149 CentOS 3 s390(x) kdebase - bug fix update (Pasi Pirhonen) 25. CEBA-2005:058 CentOS 3 ia64 util-linux - bug fix update (Pasi Pirhonen) 26. CEBA-2005:062 CentOS 3 s390(x) pam - bug fix update (Pasi Pirhonen) 27. CEBA-2005:246 CentOS 3 s390(x) parted - bug fix update (Pasi Pirhonen) 28. CEBA-2005:147 CentOS 3 ia64 s390(x) - bug fix update (Pasi Pirhonen) 29. CEBA-2005:446 CentOS 3 s390(x) krb5 - updated package (Pasi Pirhonen) 30. CEBA-2005:292 CentOS 3 ia64 samba - bug fix update (Pasi Pirhonen) 31. CEBA-2005:292 CentOS 3 s390(x) samba - bug fix update (Pasi Pirhonen) 32. CEBA-2005:123 CentOS 3 ia64 initscripts - bug fix update (Pasi Pirhonen) 33. CEBA-2005:123 CentOS 3 s390(x) initscripts - bug fix update (Pasi Pirhonen) 34. CEEA-2005:456 CentOS 3 ia64 cscope - new package adds source code browsing tool (Pasi Pirhonen) 35. CEEA-2005:454 CentOS 3 ia64 gnome-panel and metacity - updated package (Pasi Pirhonen) 36. CEEA-2005:455 CentOS 3 ia64 wget - updated package (Pasi Pirhonen) 37. CEEA-2005:454 CentOS 3 s390(x) gnome-panel and metacity - updated package (Pasi Pirhonen) 38. CEEA-2005:455 CentOS 3 s390(x) wget - updated package (Pasi Pirhonen) 39. CESA-2005:294 CentOS 3 ia64 kernel - updated package (Pasi Pirhonen) 40. CEEA-2005:453 CentOS 3 ia64 linuxwacom - new package (Pasi Pirhonen) 41. CEEA-2005:456 CentOS 3 s390(x) cscope - new package adds source code browsing tool (Pasi Pirhonen) 42. CESA-2005:294 CentOS 3 s390(x) kernel - updated package (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Wed, 18 May 2005 20:58:16 +0300 From: Pasi Pirhonen <upi(a)iki.fi> Subject: [CentOS-announce] CESA-2005:074 Low CentOS 3 ia64 rsh - security update To: centos-announce(a)centos.org Message-ID: <20050518175816.GS13577(a)core.upi.iki.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2005:074 https://rhn.redhat.com/errata/RHSA-2005-074.html The following updated files have been uploaded and are currently syncing to the mirrors: files: updates/ia64/RPMS/rsh-0.17-17.6.ia64.rpm updates/ia64/RPMS/rsh-server-0.17-17.6.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://iki.fi/upi/

1 0

Re: [CentOS] Installing CentOS on RAID PATA not SATA - A8V
by Bogdan Nicolescu 19 May '05

19 May '05

--- Chris Mauritz <chrism(a)imntv.com> wrote: > Bryan J. Smith <b.j.smith(a)ieee.org> wrote: > > >If you want just ATA/SATA support of single drives, > that will work. > >The RAID functionality will never work, because it > is 100% software-based > >(the 16-bit BIOS setup is just for boot-time). > > > >I call this "FRAID" and it is not hardware RAID (it > adds *0* hardware). > >Any drivers will be proprietary and not open > source, because they > >contain RAID code licensed from a 3rd party that is > not GPL (and > >never will be, because it is the core IP of that > 3rd party and the > >lifeblood of their business). > > > > > > > > Be very 'FRAID. 8-) If it was me, I'd figure out > how to get the drives > recognized as plain old ATA drives and then use the > software RAID > striping native to Linux rather than depend on the > promise card to do > anything other than act as an ATA controller. I > think the likelihood of > roaching the volume while depending on the promise > software RAID bandaid > is probably rather high for no performance payoff > whatsoever. > > Cheers, > > C > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos > My first attempt at RAID... Tried a different distribution with the latest kernel, and indeed the PTA drives on the Promise controller were recognized but they were recognized as two separate drives while the controller was in RAID mode (rather than IDE mode). Are you saying that even if the drives are recognized, I will not be able to implement RAID in hardware mode? Any other options installing CenOS 4 on unsupported hd controller besides: a. install CentOS 4 while drive in recognized hd controller b. get new kernel c. compile/install new kernel (without pulling my hair out) d. move drives to unsupported hd controller e. set controller to IDE mode f. boot using new kernel (while praying) g. do software RAID --------------------------------- TIA Bogdan

2 1

RE: [CentOS] spamassassin
by Marc Powell 19 May '05

19 May '05

> -----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf Of mbest(a)pendragon.org > Sent: Monday, May 16, 2005 3:41 PM > To: CentOS mailing list > Subject: Re: [CentOS] spamassassin > > > pulling my hair out... > > > > bayes: bayes db version 0 is not able to be used, aborting! > > at /usr/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin/BayesStore/DBM.pm > > line 160. > > This is exactly the same situation I was complaining about earlier today. > > It all comes down to something happening with the autolearn or something > in the running Spamassassin causes the bayes db to become version 0 from > version 3, and stop working. > > If anyone comes across a solution, we'll both be appreciative. Number two hit on Google purports a solution. Have you seen it? http://64.233.187.104/search?q=cache:7ANQ2UIWWeUJ:lists.elvandar.org/pip ermail/spamassassin-users/2004-September/014432.html+%22bayes:+bayes+db+ version+0+is+not+able+to+be+used,+aborting!%22&hl=en Searching less literally indicates this is an issue across many distributions. Perhaps an email to spamassassin-users would help find a solution. -- Marc

4 5

Announce list filters
by Henk van Lingen 18 May '05

18 May '05

Hi, (sorry, new thread, already dropped the previous postings) Johnny H. just posted a surprising feature: filtering options for the announce list. But they don't seem to be right or there is no announce standard. Pasi is posting storms of non i386 things. He uses: "CentOS 3 s390" the filter has: "CentOS-3 s390" Regards, -- Henk van Lingen, Systems & Network Administrator (o- -+ Dept. of Computer Science, Utrecht University. /\ | phone: +31-30-2535278 v_/_ http://henk.vanlingen.net/ http://www.tuxtown.net/netiquette/

3 6

Re: [CentOS] Installing CentOS on RAID PATA not SATA - A8V
by Bryan J. Smith <b.j.smith＠ieee.org> 18 May '05

18 May '05

If you want just ATA/SATA support of single drives, that will work. The RAID functionality will never work, because it is 100% software-based (the 16-bit BIOS setup is just for boot-time). I call this "FRAID" and it is not hardware RAID (it adds *0* hardware). Any drivers will be proprietary and not open source, because they contain RAID code licensed from a 3rd party that is not GPL (and never will be, because it is the core IP of that 3rd party and the lifeblood of their business). There are independent, clean room GPL drivers (ataraid + pdcraid), but they are likely to corrupt your volume -- especially on newer FRAID BIOSes that may change the organization. -----Original Message----- From: Bogdan Nicolescu <bo2k2(a)yahoo.com> Sent: May 18, 2005 3:31 PM To: CentOS mailing list <centos(a)centos.org> Subject: [CentOS] Installing CentOS on RAID PATA not SATA - A8V I'm trying to install CentOS 4 on an A8V on the PATA/Raid drives on the Promise controller. The Promise controller is recognized (sata_promise), but the PATA drives are not recognized. Base on this thread https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=147303 it seems that there is a patch which was merged in 2.6.11 to get pata working. Any ideas how to proceed? Thanks in advance Regards Bogdan _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos -- Bryan J. Smith mailto:b.j.smith@ieee.org

2 1

Installing CentOS on RAID PATA not SATA - A8V
by Bogdan Nicolescu 18 May '05

18 May '05

I'm trying to install CentOS 4 on an A8V on the PATA/Raid drives on the Promise controller. The Promise controller is recognized (sata_promise), but the PATA drives are not recognized. Base on this thread https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=147303 it seems that there is a patch which was merged in 2.6.11 to get pata working. Any ideas how to proceed? Thanks in advance Regards Bogdan

1 0

Centos-announce censoring :-)
by Maciej Zenczykowski 18 May '05

18 May '05

Hi! I have a quick question about the centos-announce mailing list, is there some guide as to what the subject lines of all the mails there are (ie. for regexps)? I want to filter everything that isn't related to CentOS 4 i386 out to /dev/null... Cheers and thanks, MaZe.

2 1

KPPP: why root?
by Mark Weaver 18 May '05

18 May '05

Hi All, I'm wondering about something that seems a bit odd. I've setup a CentOS 4 box for a client that is "still" using dial-up and to activate the connection appears to require root privileges. Why is this? The reason Linux was loaded on this box was to provide a very functional box that could be easily locked down so when the cat was away the mice couldn't play, however, if the mice need root access to activate the dial-up connection this really defeats the purpose. Whats up with Kppp needing root access? thanks, Mark

4 10

RE: check permissions of all my files!
by israel.garcia＠cimex.com.cu 18 May '05

18 May '05

> I'm looking for some kind of report with this information.. > Is there some command? Some tool? >>Define "check". I have no idea what you mean, so I'm going to take >>a couple of guesses. Don't take this the wrong way, but you've .... I mean, How do I know if some of my users changed the original permissions of any of my files? I mean, How do I know if my files have the correct (original)permissions? I'd like, if it's possible, some kind of report daily by email or in some log file with this information...? Tripwire do that? Thanks for your soon answers! Regards, Israel

3 3

Dual Monitors
by Richard Humphrey 18 May '05

18 May '05

I have a PC with an Nvidia Quadro Card in it and it is running CentOS 4.0(all current). I want to set up dual monitors but when I go into the display gui to set it up, X reloads and an error comes up and says it cant load X using this config. This is the only video card in the system and I am trying to hook up two identical ViewSonic VG800 monitors. Single monitor works fine but when try to add second, it fails to load X. Any thoughts? -- Richard Humphrey

4 6

RE: [CentOS] named server
by Marc Powell 18 May '05

18 May '05

> -----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf Of Lee Parmeter > Sent: Tuesday, May 17, 2005 11:48 AM > To: centos(a)centos.org > Subject: [CentOS] named server > > I started the named server on CentOS and it seems to > resolve DNS request OK, but it does not seem to retain the > info for very long. From what I can tell using "dig", a > domain's ip address is retained for less than 12 hours. So > in the morning, it takes 4+ seconds to resolve again the > first time. Is there an adjustment somewhere for this or is > the caching named support not enabled by default? Bind will use the Time To Live as configured by the owner of the domain name. There are other proxy DNS applications that allow you to override those values but I do not believe you can do so with bind. > Also, I thought it would be faster if I set named to use my > ISP's named server as the first choice. Where do I set this > up, in root.hints? http://64.233.187.104/search?q=cache:OFlpPzQRRcUJ:www.rhce2b.com/clublin ux/RHCE-19.shtml+bind+forwarders&hl=en 19.3 Caching Only Name Servers 1. Not authoritative for any zone. 2. Uses DNS root servers or another name server known as a forwarder to resolve DNS queries. 3. To create a Forwarding Name Server, put the following line in the "options" section of the /etc/named.conf file: forwarders { 192.168.1.20; }; # replace with your upstream nameserver 4. If you want BIND to only use it's forwarders to resolve hosts and not the root name servers, put the following line in the "options" section of the /etc/named.conf file: forward only; The "forwarders" option specifies which DNS or DNS servers queries should be forwarded to for resolution. > Anyone who knows more about "named" please feel free to > comment! Google knows a lot. =) -- Marc

3 2

CentOS-announce Digest, Vol 3, Issue 8
by centos-announce-request＠centos.org 18 May '05

18 May '05

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2005:469 BUG fix CentOS 3 x86_64 openoffice.org - bug fix update (Tru Huynh) 2. CEBA-2005:469 BUG fix CentOS 3 i386 openoffice.org - bug fix update (Tru Huynh) 3. CESA-2005:371-01: Moderate CentOS 2 i386 ncpfs security update (John Newbigin) 4. CESA-2005:408 Moderate CentOS 4 ia64 cyrus-imapd - security update (Pasi Pirhonen) 5. CESA-2005:393 Important CentOS 4 ia64 kdelibs - security update (Pasi Pirhonen) 6. CESA-2005:408 Moderate CentOS 4 i386 and x86_64 cyrus-imapd - security update (Johnny Hughes) 7. CESA-2005:393 Important CentOS 4 i386 and X86_64 kdelibs - security update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 17 May 2005 23:33:28 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CEBA-2005:469 BUG fix CentOS 3 x86_64 openoffice.org - bug fix update To: centos-announce(a)centos.org Message-ID: <20050517213328.GA30010(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2005:469 openoffice.org bug fix update for CentOS 3 x86_64: https://rhn.redhat.com/errata/RHBA-2005-469.html The following updated file has been uploaded and is currently syncing to the mirrors: x86_64: updates/x86_64/RPMS/openoffice.org-1.1.2-24.2.1.EL3.i386.rpm updates/x86_64/RPMS/openoffice.org-i18n-1.1.2-24.2.1.EL3.i386.rpm updates/x86_64/RPMS/openoffice.org-libs-1.1.2-24.2.1.EL3.i386.rpm source: updates/SRPMS/openoffice.org-1.1.2-24.2.1.EL3.src.rpm You may update your CentOS-3 x86_64 installations by running the command: yum update openoffice.org\* Tru -- Tru Huynh (CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

caci problem in CentOS-4
by Mark Quitoriano 18 May '05

18 May '05

i installed cacti following the INSTALL file but if i try to view cacti url it shows this error: Warning: mb_ereg_replace(): mbregex compile err: premature end of regular expression in /var/www/html/cacti/include/config.php on line 43 Warning: mb_ereg_replace(): mbregex compile err: premature end of regular expression in /var/www/html/cacti/include/config.php on line 44 Warning: Cannot modify header information - headers already sent by (output started at /var/www/html/cacti/include/config.php:43) in /var/www/html/cacti/include/config.php on line 67 Warning: Cannot modify header information - headers already sent by (output started at /var/www/html/cacti/include/config.php:43) in /var/www/html/cacti/include/config.php on line 68 Warning: Cannot modify header information - headers already sent by (output started at /var/www/html/cacti/include/config.php:43) in /var/www/html/cacti/include/config.php on line 69 Warning: Cannot modify header information - headers already sent by (output started at /var/www/html/cacti/include/config.php:43) in /var/www/html/cacti/include/config.php on line 70 Warning: Cannot modify header information - headers already sent by (output started at /var/www/html/cacti/include/config.php:43) in /var/www/html/cacti/include/config.php on line 71 Warning: session_start(): Cannot send session cookie - headers already sent by (output started at /var/www/html/cacti/include/config.php:43) in /var/www/html/cacti/include/config.php on line 74 Warning: session_start(): Cannot send session cache limiter - headers already sent (output started at /var/www/html/cacti/include/config.php:43) in /var/www/html/cacti/include/config.php on line 74 Warning: main(/adodb/adodb.inc.php): failed to open stream: No such file or directory in /var/www/html/cacti/include/config.php on line 103 Warning: main(): Failed opening '/adodb/adodb.inc.php' for inclusion (include_path='.:/usr/share/pear') in /var/www/html/cacti/include/config.php on line 103 Warning: main(/database.php): failed to open stream: No such file or directory in /var/www/html/cacti/include/config.php on line 104 Warning: main(): Failed opening '/database.php' for inclusion (include_path='.:/usr/share/pear') in /var/www/html/cacti/include/config.php on line 104 Warning: main(/functions.php): failed to open stream: No such file or directory in /var/www/html/cacti/include/config.php on line 105 Warning: main(): Failed opening '/functions.php' for inclusion (include_path='.:/usr/share/pear') in /var/www/html/cacti/include/config.php on line 105 Fatal error: Call to undefined function: db_connect_real() in /var/www/html/cacti/include/config.php on line 111 i'm not sure if it's cacti or php error anyone encountered the same problem? -- Regards, Mark Quitoriano, CCNA http://www.atamanetworks.com

1 0

named server
by Lee Parmeter 18 May '05

18 May '05

I started the named server on CentOS and it seems to resolve DNS request OK, but it does not seem to retain the info for very long. From what I can tell using "dig", a domain's ip address is retained for less than 12 hours. So in the morning, it takes 4+ seconds to resolve again the first time. Is there an adjustment somewhere for this or is the caching named support not enabled by default? Also, I thought it would be faster if I set named to use my ISP's named server as the first choice. Where do I set this up, in root.hints? Anyone who knows more about "named" please feel free to comment! Thanks! Lee Yahoo! Mail Stay connected, organized, and protected. Take the tour: http://tour.mail.yahoo.com/mailtour.html

3 5

Trouble mounting a second drive
by Richard Kurth 18 May '05

18 May '05

I am tying to mount a second hard drive to my server with CentOS installed on the primary hard drive. I need to get some data off of the drive. It also has Linux installed on it. It was the primary hard drive on the system it was installed on. When I set it up as the second disk it will not boot the drive because it has /boot partition on it. So it conflicts with the /boot partition on the primary drive. How can I boot up the computer so it sees this drive so I can move the data across to the primary drive. -- Best regards, Richard mailto:rdkurth@starband.net

2 3

check permissions of all my files!
by israel.garcia＠cimex.com.cu 17 May '05

17 May '05

List, How can I check the permissions of all the files of my CentOS server? I'm looking for some kind of report with this information.. Is there some command? Some tool? Regards, Israel

3 4

Re: [CentOS] check permissions of all my files!
by Bogdan Nicolescu 17 May '05

17 May '05

cd / ls -laR Regards Bogdan --- israel.garcia(a)cimex.com.cu wrote: > List, How can I check the permissions of all the > files of my CentOS > server? > I'm looking for some kind of report with this > information.. > Is there some command? Some tool? > > Regards, > Israel > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos >

1 0

Re: Hardware RAID Controller
by Bryan J. Smith <b.j.smith＠ieee.org> 17 May '05

17 May '05

From: Lee W <centos-list(a)unassemble.co.uk> > Has anyone had any experience of using the Promise FastTrak SX4000 or > SuperTrak SX6000 IDE RAID Controllers under Centos (if it matters I'm > using version 4). I've seen it listed on linuxcompatible.org as working > but would prefer to find out any first-hand experince before I buy. Avoid the FastTraks. Most are FRAID (Fake/Free RAID), 100% software with 0% GPL drivers. The SuperTraks are a "true hardware" microcontroller+DRAM solution with GPL drivers. Unfortunately, they use mega-yesteryear i960 microcontrollers not able to keep up with today's drives. When you want ATA and RAID-5, I recommend the LSI Logic with "x" in the product model to indicate XScale (superscalar StrongARM) microcontrollers. > If not, can anyone suggest another make of RAID Controller that will > support upto 4 IDE RAIDS (preferably with support for RAID 5). And is > also available in the UK. Is there any consideration driving RAID-5? For a majority of applications, RAID-0+1 tends to be better. I prefer 3Ware Escalade 7506/8506 series cards for RAID-0+1. They use a 64-bit ASIC and SRAM (static RAM). The 9500S series is still maturing, although they should eventually show outstanding performance. They add a large amount of DRAM to the existing ASIC+SRAM approach of the earlier Escalades. -- Bryan J. Smith mailto:b.j.smith@ieee.org

6 8

data overrun on SCSI drive
by Bowie Bailey 17 May '05

17 May '05

I have a system that I just installed with CentOS 4.0. It is an HP NetServer E 60 with dual CPUs and 1G RAM. There is an Adaptec AIC-7895 built into the motherboard. On bootup, I get this: (scsi0:A:1): 11.626MB/s transfers (5.813MHz, offset 8, 16bit) (scsi0:A:1:0): data overrun detected in Data-in phase. Tag == 0x2. (scsi0:A:1:0): Have seen Data Phase. Length = 255. NumSGs = 1. sg[0] - Addr 0x03ace40 : Length 255 (scsi0:A:1:0): data overrun detected in Data-in phase. Tag == 0x3. (scsi0:A:1:0): Have seen Data Phase. Length = 255. NumSGs = 1. sg[0] - Addr 0x03ace40 : Length 255 (scsi0:A:1:0): data overrun detected in Data-in phase. Tag == 0x2. (scsi0:A:1:0): Have seen Data Phase. Length = 255. NumSGs = 1. sg[0] - Addr 0x03ace40 : Length 255 scsi scan: 255 byte inquiry failed with code 458752. Consider BLIST_INQUIRY_36 for this device Vendor: WDIGTL Model: WDE18300 ULTRA2 Rev: 1.30 Type: Direct-Access ANSI SCSI revision: 02 scsi0:A:1:0: Tagged Queuing enabled. Depth 4 SCSI device sdb: 35761710 512-byte hdwr sectors (18310 MB) SCSI device sdb: drive cache: write back sdb: sdb1 Attached scsi disk sdb at scsi0, channel 0, id 1, lun 0 How do I use BLIST_INQUIRY_36? Is there anything else I can try to fix this error? Also, is there a searchable archive for this list? Bowie

1 0

cashing named server
by Lee Parmeter 17 May '05

17 May '05

I started the named server on CentOS and it seems to resolve DNS request OK, but it does not seem to retain the info for very long. From what I can tell using "dig", a domain's ip address is retained for less than 12 hours. So in the morning, it takes 4+ seconds to resolve again the first time. Is there an adjustment somewhere for this or is the caching named support not enabled by default? Also, I thought it would be faster if I set named to use my ISP's named server as the first choice. Where do I set this up, in root.hints? Anyone who knows more about "named" please feel free to comment! Thanks! Lee __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

3 4

raidtab on centos 4
by Peter Farrow 17 May '05

17 May '05

Hi There, I re-installed Centos 4 on a box previously running x86 Solaris 10. After a reboot a got a BAD PBR SIG so I used rescue mode and grub to install a boot loader on each of my software-raided disks. Which works fine and allows me to boot ok. My question is, what happened to /etc/raidtab the machine boots ok and lists all the raid-1 devices I set up in the install (including the /boot partition) but there is no raidtab file. I tried using dmraid to take a look at the software RAID setup but it reports "No Software Raid" So my question is "what happened to mkraid commands and stuff like /etc/raidtab", /proc/mdstat reports fine... P.

2 1

centosplus and contrib rpms
by Farkas Levente 17 May '05

17 May '05

hi, it'd be useul if the centosplus and contrib directory can contain a small readme file or some kind of documentaion about the rpm inside. currently there is not any kind of such docs (ok johnny send a description about the kernel rpms, but if someone missed that email). eg the postfix rpm has the same description and changelog inside the rpm as the original ones. if someone just look into the ftp server then it'd be useful some kinf of docs. yours. -- Levente "Si vis pacem para bellum!"

11 24

spamassassin
by Craig White 16 May '05

16 May '05

pulling my hair out... If I rm -fr /root/.spamassassin/* then sa-learn a bunch of messages, it works... ]# sa-learn --dump magic 0.000 0 3 0 non-token data: bayes db version 0.000 0 3997 0 non-token data: nspam 0.000 0 0 0 non-token data: nham 0.000 0 202022 0 non-token data: ntokens 0.000 0 1086136394 0 non-token data: oldest atime 0.000 0 1116269429 0 non-token data: newest atime 0.000 0 1116269429 0 non-token data: last journal sync atime 0.000 0 1116269429 0 non-token data: last expiry atime 0.000 0 0 0 non-token data: last expire atime delta 0.000 0 0 0 non-token data: last expire reduction count then a few minutes later, it all goes to crap... # sa-learn --dump magic bayes: bayes db version 0 is not able to be used, aborting! at /usr/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin/BayesStore/DBM.pm line 160. bayes: bayes db version 0 is not able to be used, aborting! at /usr/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin/BayesStore/DBM.pm line 160. ERROR: Bayes dump returned an error, please re-run with -D for more information # rpm -qa spamassassin spamassassin-3.0.3-1.1.el3.rf # uname -srvo Linux 2.4.21-27.0.2.ELsmp #1 SMP Wed Jan 19 01:53:23 GMT 2005 GNU/Linux and lastly, for completeness... # spamassassin -p /etc/MailScanner/spam.assassin.prefs.conf -D --lint debug: SpamAssassin version 3.0.3 debug: Score set 0 chosen. debug: running in taint mode? yes debug: Running in taint mode, removing unsafe env vars, and resetting PATH debug: PATH included '/usr/kerberos/sbin', keeping. debug: PATH included '/usr/kerberos/bin', keeping. debug: PATH included '/usr/local/sbin', keeping. debug: PATH included '/usr/local/bin', keeping. debug: PATH included '/sbin', keeping. debug: PATH included '/bin', keeping. debug: PATH included '/usr/sbin', keeping. debug: PATH included '/usr/bin', keeping. debug: PATH included '/usr/X11R6/bin', keeping. debug: PATH included '/root/bin', which doesn't exist, dropping. debug: Final PATH set to: /usr/kerberos/sbin:/usr/kerberos/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/X11R6/bin debug: diag: module installed: DBI, version 1.32 debug: diag: module installed: DB_File, version 1.811 debug: diag: module installed: Digest::SHA1, version 2.10 debug: diag: module installed: IO::Socket::UNIX, version 1.2 debug: diag: module installed: MIME::Base64, version 2.12 debug: diag: module installed: Net::DNS, version 0.48 debug: diag: module installed: Net::LDAP, version 0.30 debug: diag: module not installed: Razor2::Client::Agent ('require' failed) debug: diag: module installed: Storable, version 2.06 debug: diag: module installed: URI, version 1.21 debug: ignore: using a test message to lint rules debug: using "/etc/mail/spamassassin/init.pre" for site rules init.pre debug: config: read file /etc/mail/spamassassin/init.pre debug: using "/usr/share/spamassassin" for default rules dir debug: config: read file /usr/share/spamassassin/10_misc.cf debug: config: read file /usr/share/spamassassin/20_anti_ratware.cf debug: config: read file /usr/share/spamassassin/20_body_tests.cf debug: config: read file /usr/share/spamassassin/20_compensate.cf debug: config: read file /usr/share/spamassassin/20_dnsbl_tests.cf debug: config: read file /usr/share/spamassassin/20_drugs.cf debug: config: read file /usr/share/spamassassin/20_fake_helo_tests.cf debug: config: read file /usr/share/spamassassin/20_head_tests.cf debug: config: read file /usr/share/spamassassin/20_html_tests.cf debug: config: read file /usr/share/spamassassin/20_meta_tests.cf debug: config: read file /usr/share/spamassassin/20_phrases.cf debug: config: read file /usr/share/spamassassin/20_porn.cf debug: config: read file /usr/share/spamassassin/20_ratware.cf debug: config: read file /usr/share/spamassassin/20_uri_tests.cf debug: config: read file /usr/share/spamassassin/23_bayes.cf debug: config: read file /usr/share/spamassassin/25_body_tests_es.cf debug: config: read file /usr/share/spamassassin/25_hashcash.cf debug: config: read file /usr/share/spamassassin/25_spf.cf debug: config: read file /usr/share/spamassassin/25_uribl.cf debug: config: read file /usr/share/spamassassin/30_text_de.cf debug: config: read file /usr/share/spamassassin/30_text_fr.cf debug: config: read file /usr/share/spamassassin/30_text_nl.cf debug: config: read file /usr/share/spamassassin/30_text_pl.cf debug: config: read file /usr/share/spamassassin/50_scores.cf debug: config: read file /usr/share/spamassassin/60_whitelist.cf debug: using "/etc/mail/spamassassin" for site rules dir debug: using "/root/.spamassassin" for user state dir debug: using "/etc/MailScanner/spam.assassin.prefs.conf" for user prefs file debug: config: read file /etc/MailScanner/spam.assassin.prefs.conf debug: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC debug: plugin: registered Mail::SpamAssassin::Plugin::URIDNSBL=HASH (0x9d9d6dc) debug: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC debug: plugin: registered Mail::SpamAssassin::Plugin::Hashcash=HASH (0xa6c663c) debug: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC debug: plugin: registered Mail::SpamAssassin::Plugin::SPF=HASH (0xa6a9d54) debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x9d9d6dc) implements 'parse_config' debug: plugin: Mail::SpamAssassin::Plugin::Hashcash=HASH(0xa6c663c) implements 'parse_config' debug: using "/root/.spamassassin" for user state dir debug: bayes: 25890 tie-ing to DB file R/O /root/.spamassassin/bayes_toks debug: bayes: 25890 tie-ing to DB file R/O /root/.spamassassin/bayes_seen debug: bayes: found bayes db version 0 bayes: bayes db version 0 is not able to be used, aborting! at /usr/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin/BayesStore/DBM.pm line 160. debug: Score set 1 chosen. debug: ---- MIME PARSER START ---- debug: main message type: text/plain debug: parsing normal part debug: added part, type: text/plain debug: ---- MIME PARSER END ---- debug: bayes: 25890 tie-ing to DB file R/O /root/.spamassassin/bayes_toks debug: bayes: 25890 tie-ing to DB file R/O /root/.spamassassin/bayes_seen debug: bayes: found bayes db version 0 bayes: bayes db version 0 is not able to be used, aborting! at /usr/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin/BayesStore/DBM.pm line 160. debug: metadata: X-Spam-Relays-Trusted: debug: metadata: X-Spam-Relays-Untrusted: debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x9d9d6dc) implements 'parsed_metadata' debug: dns_available set to yes in config file, skipping test debug: decoding: no encoding detected debug: URIDNSBL: domains to query: debug: is Net::DNS::Resolver available? yes debug: Net::DNS version: 0.48 debug: all '*From' addrs: ignore(a)compiling.spamassassin.taint.org debug: Running tests for priority: 0 debug: running header regexp tests; score so far=0 debug: registering glue method for check_hashcash_double_spend (Mail::SpamAssassin::Plugin::Hashcash=HASH(0xa6c663c)) debug: registering glue method for check_for_spf_helo_pass (Mail::SpamAssassin::Plugin::SPF=HASH(0xa6a9d54)) debug: SPF: message was delivered entirely via trusted relays, not required debug: registering glue method for check_hashcash_value (Mail::SpamAssassin::Plugin::Hashcash=HASH(0xa6c663c)) debug: all '*To' addrs: debug: registering glue method for check_for_spf_softfail (Mail::SpamAssassin::Plugin::SPF=HASH(0xa6a9d54)) debug: SPF: message was delivered entirely via trusted relays, not required debug: registering glue method for check_for_spf_pass (Mail::SpamAssassin::Plugin::SPF=HASH(0xa6a9d54)) debug: registering glue method for check_for_spf_helo_softfail (Mail::SpamAssassin::Plugin::SPF=HASH(0xa6a9d54)) debug: registering glue method for check_for_spf_fail (Mail::SpamAssassin::Plugin::SPF=HASH(0xa6a9d54)) debug: registering glue method for check_for_spf_helo_fail (Mail::SpamAssassin::Plugin::SPF=HASH(0xa6a9d54)) debug: running body-text per-line regexp tests; score so far=-2.623 debug: running uri tests; score so far=-2.623 debug: registering glue method for check_uridnsbl (Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x9d9d6dc)) debug: Razor2 is not available debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x9d9d6dc) implements 'check_tick' debug: running raw-body-text per-line regexp tests; score so far=-2.623 debug: running full-text regexp tests; score so far=-2.623 debug: Razor2 is not available debug: Pyzor is not available: pyzor not found debug: DCCifd is not available: no r/w dccifd socket found. debug: DCC is not available: no executable dccproc found. debug: Running tests for priority: 500 debug: RBL: success for 1 of 1 queries debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x9d9d6dc) implements 'check_post_dnsbl' debug: running meta tests; score so far=-2.623 debug: running header regexp tests; score so far=-1.053 debug: running body-text per-line regexp tests; score so far=-1.053 debug: running uri tests; score so far=-1.053 debug: running raw-body-text per-line regexp tests; score so far=-1.053 debug: running full-text regexp tests; score so far=-1.053 debug: Running tests for priority: 1000 debug: running meta tests; score so far=-1.053 debug: running header regexp tests; score so far=-1.053 debug: running body-text per-line regexp tests; score so far=-1.053 debug: running uri tests; score so far=-1.053 debug: running raw-body-text per-line regexp tests; score so far=-1.053 debug: running full-text regexp tests; score so far=-1.053 debug: is spam? score=-1.053 required=5 debug: tests=ALL_TRUSTED,MISSING_DATE,MISSING_SUBJECT,NO_REAL_NAME debug: subtests=__HAS_MSGID,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__SANE_MSGID,__UNUSABLE_MSGID

2 1

Re: Dual Monitors -- "nv" v. "nvidia"
by Bryan J. Smith <b.j.smith＠ieee.org> 16 May '05

16 May '05

From: Richard Humphrey <rlhumphrey(a)gmail.com> > Thanks that did the trick Although nVidia does put people on the Freedomware "nv" driver, and it can handle multiple framebuffers for Xinerama, VIVO (video in, video out), etc..., the Standardware "nvidia" driver is far easier to deal with for single framebuffer (no Xinerama) multiple displays, VIVO, etc..., in addition to adding GLX (OpenGL over X11) support. -- Bryan Political Notes: nVidia actually released the GLX code for the GeForce series back in the XFree86 3.3.x days, and obscuficated some of the code provided by 3rd parties (Intel's AGP trade secrets, SGI and Microsoft patented OpenGL, etc...). Unfortunately the community quickly started reverting the obscuficated code to the formal identifiers and other blocks that the 3rd parties didn't like to see, and lawsuits were threatened. So nVidia decided that it would no longer provide such code on the GLX portion once XFree86 4.0 came out with the ability to use binary drivers. The kernel memory-AGP interface driver portions are largely Intel's trade secrets, although it seems that is actually going GPL as Intel no longer considers AGP a trade secret, and PCIe (PCI-Express) is a formal PCISG standard. ATI should be also commended for attempting to build a "clean room" DRI/GLX implementation. But as lack of resources to continue to "fork" mounted along with lagging performance, ATI had to follow in nVidia's footsteps by creating a closed-source, but standards-driven unified driver by withholding specifications as of the R300 series (Radeon 9500+). Just like nVidia, the "clean room" GLX work is still available, and might even work on newer GeForce/Radeon cards, but the newer features of those cards are not documented. Lastly, it should also be noted that Matrox also has closed source drivers as well. If there is an industry that Microsoft is poised to strike the hardest on patents, it's OpenGL. They've con'd most of the graphics companies into giving them non- exclusionary rights to them -- especially SGI, the inventor. -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

Re: Slashdot: "Could Microsoft buy Red Hat?" -- this is a joke made by the clueless
by Bryan J. Smith <b.j.smith＠ieee.org> 16 May '05

16 May '05

From: Nigel Kendrick <support-lists(a)petdoctors.co.uk> > Sorry if it wraps: > http://linux.slashdot.org/article.pl?sid=05/05/16/1758249&tid=109&tid=163&t… This has _nothing_ to do with Microsoft possibly buying Red Hat. People who even suggest this only expose their *0* understanding of business. Microsoft has an alliance with Sun. Why? Because it was in Microsoft's interest to do so. Ever since Microsoft lost the right to Java code, .NET has fallen behind in many areas. They merely relicensed Java, and began other initiatives. Largely as customers demanded interoperability. Same deal here. Red Hat products are now entrenched in everything from defense to financial. Most customers are now demanding more interoperability with Linux. Red Hat, due to their commercial marketshare, is going to be one of Microsoft's major targets. They already have some channels with Novell, but virtually _none_ with Red Hat. Red Hat is firmly committed to 100% GPL. In fact, Red Hat made dozens upon dozens of millions of dollars in purchases of software they GPL'd just last year, let alone the amount of direct employment of core GCC, GLibC, Linux kernel and other developers -- far more than even IBM. The only thing that Red Hat has had to bite on is the trademark issue due to US trademark common law, ironically something that Sun -- more than any other company -- caused. People think of Red Hat in terms of Microsoft, and from an "exclusive contracts" viewpoint, they seem similar. But Red Hat is two companies -- the latter and, by far, the largest portion both expense and labor-wise -- is the largest collection if GPL-centric projects. Red Hat, much like the Cygnus entity it engulfed even when it was much smaller than Cygnus at the time, has made their entire software focus on GPL to the anal power. Red Hat knows should they ever change from that, they will lose everything -- especially mindshare. -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

Slashdot: "Could Microsoft buy Red Hat?"
by Nigel Kendrick 16 May '05

16 May '05

Sorry if it wraps: http://linux.slashdot.org/article.pl?sid=05/05/16/1758249&tid=109&tid=163&ti d=110&tid=98&tid=218 Enjoy!

1 0

RE: [CentOS] clamav-0.85
by Bowie Bailey 16 May '05

16 May '05

From: Dag Wieers [mailto:dag@wieers.com] > > On Mon, 16 May 2005, Maciej Zenczykowski wrote: > > > > Well, I could, but why would you use ncftp when lftp is actually more > > > feature complete and much better overall. (ncftp is not open source > > > actually). > > > > > > If there's a good reason you might convince me to do the extra work. > > > > Well, this came up because perl CPAN wants to use ncftpget to download > > files, and it couldn't find it on my system... does lftp contain a > > functional equivalent? > > It includes lftpget. It seems strange to me that CPAN is using ncftp and > does not look for any alternatives. You may have to look into that first. I seem to remember that CPAN prompts for your ftp client when you do the initialization. You may want to go through that process again and specify lftpget when it asks. $ perl -MCPAN -e shell cpan> o conf init Bowie

2 1

Adding/Removing Headers with Sendmail
by Lee W 16 May '05

16 May '05

Hi, I posted this query a few weeks ago but never received a response. I'm guessing that I didn't put things right, so here is another go. The company that I work for currently has email addresses in the format of:- firstname.surname.ext(a)example.com Which we use for various marketing campaigns (therefore the .ext bit is variable). Currently we have this setup as distribution lists with exchange so that any email that goes to this addressess goes both to the sales person and to a catch all mailbox which is then input into our systems. I was wondering if it would be possible so that when an email is received to this format of address it automatically determines where to send it as follows An email comes into joe.bloggs.sa...(a)example.com this then gets split so that it is delivered to joe.blo...(a)example.com and also s...(a)example.com. I think that i have figured out how to rewrite to the second address but how can I get it to send it to the new address as well. I was hoping there would be a way of doing this automatically so that we don't have to setup these addresses for every new starter and they apply on a global basis. Hopefully that explains better what I am after. Regards Lee

5 9

SpamAssassin - bayes: bayes db version 0 is not able to be used, aborting!
by mbest＠pendragon.org 16 May '05

16 May '05

I am currently having a problem where my bayes DB appears to be version 0 over and over again. spamassassin --lint -D 2>&1 | grep bayes bayes: bayes db version 0 is not able to be used, aborting! at /usr/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin/BayesStore/DBM.pm line 160. I have SpamAssassin 3.0.3 installed: /etc/mail/spamassassin/local.cf contains: use_bayes 1 bayes_auto_learn 1 bayes_path /etc/mail/spamassassin/bayes Once an hour I run a shell script against one of my mailboxes (in mdir format): for * in file; do sa-learn -C /etc/mail/spamassassin --spam "$file" done However this seems to result in a version 0 database. Running sa-learn --sync will make --lint report a version 3 database is found (with 0 tokens), but the next time the sa-learn runs it reverts back to a version 0 database. Any ideas? -Mike

1 0

htaccess authentication asks for MySQL table test.user_info
by dan1 16 May '05

16 May '05

Hello. I tried to create an access file with 'htpasswd -c /etc/httpd/conf/myfile.htaccess testuser'. In the SSL directory I have put a .htaccess file containing the followings: AuthUserFile /etc/httpd/conf/myfile.htaccess AuthName "Mydomain" AuthType Basic require valid-user This worked with CentOS 3. Now with CentOS 4, apache version 2.0.52, the access to the page is forbidden. The ssl_error_log indicates this error: [Mon May 16 10:03:21 2005] [error] [client 192.168.0.1] MySQL ERROR: Table 'test .user_info' doesn't exist: /myurl_to_ssl_address [Mon May 16 10:03:21 2005] [error] [client 192.168.0.1] MySQL user testuser not fou nd: /myurl_to_ssl_address It's like if apache would make a MySQL query to find the user I specified, but in fact I expected apache to look into the /etc/httpd/conf/myfile.htaccess for that, and not in MySQL. Another person had the same problem lately. Here is the post: http://groups.google.ch/group/alt.apache.configuration/browse_frm/thread/9e… Does anybody have an idea of what happens there ? Thanks for any help provided. Daniel

1 1

FreeNX RPMs ?
by Adrian Coman 16 May '05

16 May '05

Hi, Are there FreeNX rpms for RHE4/CentOS4 anywhere? Thanks, Adrian

2 2

Centos 4 plus KDE 3.4 from kde-redhat.sourceforge.net. Space key not working on buttons.
by Alexander Georgiev 16 May '05

16 May '05

Hi All, very strange problem in any kde application, when the current tab position is on a button, pressing the space key, just highlights the button as it is pressed, but does not trigger the action behind the button. It is like, the mouse-down is working, but the mouse-up does not. I checked with GTK applications and Firefox - they work, pressing the space on a button triggers the action Please, do you have an idea? sasoon

2 1

AMD_64 Nvidia 7174 and GE Force 440 go 64
by Phil Savoie 16 May '05

16 May '05

Hello all, Does anyone know where I could turn to find out how to set up the NVIDIA driver to work properly on my Compaq Presario R3000? Thanks in advance, Phil

3 3

Stunnel and postgres?
by Mike Kercher 16 May '05

16 May '05

Does anyone have some docs on setting up postgres and stunnel? I have stunnel 4.04 and postgresql-8.x running on a db server and want a tomcat app server to connect to it using an encrypted connection. All of the examples I've found seem to be for an older version of stunnel. TIA Mike

1 0

Grisbi 0.5.6
by Aph 15 May '05

15 May '05

Grisbi is a personnal accounting application released under the GPL licence. Grisbi RPMS version 0.5.6 for CentOS are now available on our download page http://www.grisbi.org/download.en.html#centos . This version is a bug fixes release, but it also features four new translations : spanish, dutch, italian and polish. Regards. -- Ici, l'exemple est un peu capillotracté. Si on choisissait plutôt un dilemme entre fr.comp.os.unix et fr.rec.arts.os.unix ? -+- APM in: Guide du Cabaliste Usenet - La Cabale est-elle barbue ? -+-

1 0

RE: AMD_64 Nvidia 7174 and GE Force 440 go 64
by mark 15 May '05

15 May '05

This is a mailing list just for that, unless I'm mistaken. It seems fairly active. http://lists.pcxperience.com/cgi-bin/mailman/listinfo/linuxr3000

1 0

Lock-up on Thinkpad on AC power restore
by Steve Snyder 15 May '05

15 May '05

Using the current kernel, 2.6.9-5.0.5.EL, my Thinkpad 600E locks up hard when transitioning from battery to AC power. When this happens my only recourse is to power-cycle the machine. There is no indication in the system log of this event when the machine comes back up. Today I caught the event in the act. While the machine was booting, the AC power failed (bad storm here). The machine continued the boot process on battery power for several seconds. Then the AC power was restored and the machine locked up in mid-action. The apmd driver had not yet loaded yet so it can't be blamed for the lock-up. Previous to installing CentOS4 I had RHL v9 on this machine. In that environment the cycling of power from AC to battery back to AC caused only a few notes in the system log. Can anyone shed some light on how I can avoid the machine locking up on AC power restoration? Thanks.

1 0

Centos 4 / Postfix / SMTP
by Nigel Kendrick 15 May '05

15 May '05

I've just installed Centos 4 on an Acer G310 server - everything's gone well except I'm not able to SMTP connect to my upstream mail server (I've installed postfix + MailScanner) - I managed to find sort out the dovecot side of things but SMTP remains quite silent - the maillog shows an attempted connect but then a timeout: May 9 13:08:45 woking postfix/smtp[7895]: deliver_request_final: send: "connect to mailhost.zen.co.uk[212.23.3.98]: Connection timed out" -1 If I connect manually (telnet mailhost.zen.co.uk 25) nothing happens - no response is shown and I presume if I left things for long enough I'd see a timeout message? Here's the output from netstat -pant: Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 0.0.0.0:32769 0.0.0.0:* LISTEN 2048/rpc.statd tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 2028/portmap tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN 2242/vsftpd tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN 2181/cupsd tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN 5201/master tcp 0 1 192.168.101.11:32847 212.23.3.98:25 SYN_SENT 7930/telnet tcp 0 0 :::993 :::* LISTEN 3416/dovecot tcp 0 0 :::995 :::* LISTEN 3416/dovecot tcp 0 0 :::110 :::* LISTEN 3416/dovecot tcp 0 0 :::143 :::* LISTEN 3416/dovecot tcp 0 0 :::80 :::* LISTEN 2345/httpd tcp 0 0 :::22 :::* LISTEN 2217/sshd tcp 0 0 :::25 :::* LISTEN 5201/master tcp 0 0 :::443 :::* LISTEN 2345/httpd tcp 0 0 ::ffff:192.168.101.11:22 ::ffff:192.168.101.20:4450 ESTABLISHED 3319/0 tcp 0 192 ::ffff:192.168.101.11:22 ::ffff:192.168.101.20:4758 ESTABLISHED 5724/1 I notice that there's an attempt to make a connection but that's it - any ideas what might be causing this - I'm not running a server-based firewall. Over to you with thanks. Nigel

8 12

Time issues
by John Hinton 14 May '05

14 May '05

Here's the bootup log area from a CentOS 4 box, fully updated. Seems to start into the US eastern time zone properly, but then it set's itself back to I think UTC after the filesystem check. May 14 14:49:12 visit1 fsck: /var1: recovering journal May 14 14:49:16 visit1 fsck: /var1: clean, 10074/4227072 files, 798409/8445596 blocks May 14 14:49:16 visit1 rc.sysinit: Checking filesystems succeeded May 14 10:49:16 visit1 rc.sysinit: Mounting local filesystems: succeeded May 14 10:49:17 visit1 rc.sysinit: Enabling local filesystem quotas: succeeded May 14 10:49:17 visit1 rc.sysinit: Enabling swap space: succeeded This is on a Compaq Proliant 1850.. Never seen this before on any previous versions of Redhat? Very odd. Any ideas? It is causing lots of grief, particular with FTP operations. Best, John Hinton

1 0

RE: [CentOS] Re: gnucash in a yum repo somewhere?
by Marc Powell 14 May '05

14 May '05

If you're only 30 and have given up on learning then life's going to get pretty boring ;) -- Marc > -----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf Of Todd Blake > Sent: Saturday, May 14, 2005 9:50 AM > To: centos(a)centos.org > Subject: Re: [CentOS] Re: gnucash in a yum repo somewhere? > > Thanks, I succesfully got it via yum. If I were 20 and still in a > learning mood > I'd have compiled it all myself :). Thanks a miilion! > > > > Todd Blake wrote: > > I'm sorry I should have also mentioned this is for CentOS 4.0 > > > > [tblake@todd ~]$ cat /etc/redhat-release > > CentOS release 4.0 (Final) > > > > Todd Blake wrote: > > > >> I'm attempting to install a gnucash rpm I've come across but the > >> dependency list is long. I've searched high and low and can't find a > >> nice yum repo with it and all of it's dependencies. Does anyone know > >> if it lives in a yum repo anywhere? I'm getting lazy in my old > >> age(just turned 30) and I just wanna "yum install" it rather than > >> tracking it all down like I would've 10 years ago :) > > I have GnuCash for CentOS4/i386 built and hosted in an easy-as-yum repo. > Take a look at http://centos.karan.org/ You need to setup both the > FExtras and the Misc repo. ( .repo files for both are provided, just > download and drop into /etc/yum.repos.d/ > > run "yum install gnucash", should all come rolling in. > > - KB > > -- > Karanbir Singh : http://www.karan.org/ > GnuPG Public Key : http://www.karan.org/publickey.asc > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos

2 1

RE: [CentOS] Message display
by Marc Powell 14 May '05

14 May '05

> -----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf Of Robert > Sent: Saturday, May 14, 2005 8:59 AM > To: centos(a)centos.org > Subject: [CentOS] Message display > > Is there a command in CentOS4 or some small program to display a short > message everywhere possible on a box much like # shutdown -k now > "Display me where I'll be seen", but without the added (normal) stuff? > xmessage would probably be usable if it had an -onalldesktops option. > To send a message to the console of all logged in users use wall. man wall -- Marc

2 1

Re: [CentOS] Re: gnucash in a yum repo somewhere?
by Todd Blake 14 May '05

14 May '05

Thanks, I succesfully got it via yum. If I were 20 and still in a learning mood I'd have compiled it all myself :). Thanks a miilion! Todd Blake wrote: > I'm sorry I should have also mentioned this is for CentOS 4.0 > > [tblake@todd ~]$ cat /etc/redhat-release > CentOS release 4.0 (Final) > > Todd Blake wrote: > >> I'm attempting to install a gnucash rpm I've come across but the >> dependency list is long. I've searched high and low and can't find a >> nice yum repo with it and all of it's dependencies. Does anyone know >> if it lives in a yum repo anywhere? I'm getting lazy in my old >> age(just turned 30) and I just wanna "yum install" it rather than >> tracking it all down like I would've 10 years ago :) I have GnuCash for CentOS4/i386 built and hosted in an easy-as-yum repo. Take a look at http://centos.karan.org/ You need to setup both the FExtras and the Misc repo. ( .repo files for both are provided, just download and drop into /etc/yum.repos.d/ run "yum install gnucash", should all come rolling in. - KB -- Karanbir Singh : http://www.karan.org/ GnuPG Public Key : http://www.karan.org/publickey.asc

1 0

Message display
by Robert 14 May '05

14 May '05

Is there a command in CentOS4 or some small program to display a short message everywhere possible on a box much like # shutdown -k now "Display me where I'll be seen", but without the added (normal) stuff? xmessage would probably be usable if it had an -onalldesktops option. BTW, the purpose is to add a visual to the scripts I have in place to remind me to connect my external USB drive late Tuesday, disconnect it early Wednesday (after backup) and keep it out of the reach of "Murphy" for the rest of the week.

2 1

About strongs passwords!
by israel.garcia＠cimex.com.cu 14 May '05

14 May '05

List, It's amazing the soon the messages on this list are answered, I am glad and I want to thank you all for that... Here is my question, I have a DataBase CentOS server working with about 150 users connected via ssh, so I want to set up for all users strongs passwords, I mean, 8 or more caracters, with ,.;* , ect....... Is there some option, bash command which do that? Is there some HOWto, tutorial, rules about securing, monitoring users with access to the bash shell? (They login via ssh). Regards, Israel Garcia

4 3

CentOS-announce Digest, Vol 3, Issue 7
by centos-announce-request＠centos.org 14 May '05

14 May '05

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. call for testers CentOS 3 x86_64 EM64T (aka ia32e) (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 13 May 2005 16:22:29 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] call for testers CentOS 3 x86_64 EM64T (aka ia32e) To: centos(a)caosity.org Message-ID: <20050513142229.GA31694(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" Hi, A new version (2.0.8-2.centos) for yum has been pushed to the mirrors for testing before going into the main tree. This release only includes a small fix for EM64T machines running the x86_64 version of CentOS 3: the ia32e architecture is now recognized for yum as an compatible architecture name. The only CentOS ia32e.rpm are the kernel and kernel-unsupported rpms. No one has reported the error on CentOS 3 x86_64. Could you please test it? rpm -Uvh http://mirror.centos.org/centos/centos-3/3/testing/x86_64/RPMS/yum-2.0.8-2.… Tru -- Tru Huynh (CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

looking for repositories..
by israel.garcia＠cimex.com.cu 14 May '05

14 May '05

Please, Where can I find a list of repositories all over internet.. I want to keep my CentOS servers up 2 date with mailscanner, clamAV, syslog-ng, and others... I know dag has a very goog one but there are some paktes I can not find in dag repository like mailscanner, syslog-ng, among others... Sorry if it's offtopic but I need it! Thanks in advance Regards, israel

3 2

Gnome CD/DVD Burner?
by Matt Bottrell 14 May '05

14 May '05

Hi all, Wondering if this might be a good item for either CentOSPlus or even Extras repository. I've been looking for a decent CD/DVD burner for Gnome.... at present I load up k3b (KDE app) and thus much of the KDE environment). Someone pointed me to GraveMan (http://www.nongnu.org/graveman/ ) which looks very good. All reports is that it's lean, mean and quite stable. Anyone else using it and is it worthy of placing in the repository? Cheers, Matt.

3 3

gnucash in a yum repo somewhere?
by Todd Blake 14 May '05

14 May '05

I'm attempting to install a gnucash rpm I've come across but the dependency list is long. I've searched high and low and can't find a nice yum repo with it and all of it's dependencies. Does anyone know if it lives in a yum repo anywhere? I'm getting lazy in my old age(just turned 30) and I just wanna "yum install" it rather than tracking it all down like I would've 10 years ago :)

2 2

Re: [CentOS] Mini-centOS
by Bryan J. Smith <b.j.smith＠ieee.org> 14 May '05

14 May '05

From: David Gonzï¿½lez Romero <dgr(a)snap.cu> > For this configuration is very easy download the software of internet. I > install only the base system on my laptop, and less to less i will be a > compiler a diferent software. XFce is not necesary to compiler, because in > the any repository of CentOS itï¿½s this software in the extra direcotry. Isn't XFCE included as standard as of RHEL/CentOS 4? Or did I miss something? > Well i dont know about this, but i belive is not necesary a Mini-CentOS > because i get obtain that configuration whitout Mini-CentOS.. I think merely documenting a way of how to add standard package lists would suffice. I remember there was a long, drawn-out set of threads on the Fedora-devel lists about such -- and it really came down to the simple matter that it's not too difficult to add new package lists. -- Bryan J. Smith mailto:b.j.smith@ieee.org

3 2

CentOS for PPC
by Petr Klíma 13 May '05

13 May '05

Are the any plans for? Petr Klíma JIHOMILK a.s. Rudolfovská 246/83 370 50 České Budějovice Czech Rpublic phone: +420 389 136 209 e-mail: petr.klima(a)jihomilk.cz

3 7

List of users on system
by Lee W 13 May '05

13 May '05

Hey All, Does anyone know of a way of getting a list of all the users on a system though PAM. I know that I could just list the /etc/passwd file but I'm trying to write something that is more generic and will also work for NIS or LDAP (etc) lookups. I suppose it is probably unlikely to be there as it is probably a security risk. I need to globally update the password aging settings (which I can do though chage/passwd) on existing accounts. Thanks in advance Regards Lee

2 2

RE: [CentOS] centos + kswapd0 error
by mbeltran＠americatel.com.sv 13 May '05

13 May '05

Hello Mr. Hughes When i try to upgrade my kernel with yum check-update, yum does not display the version of the kernel that you recomend. Do you know the link where i can get it? Best regards. Mario -----Mensaje original----- De: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org]En nombre de Johnny Hughes Enviado el: Friday, May 13, 2005 12:19 PM Para: CentOS ML Asunto: Re: [CentOS] centos + kswapd0 error _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

2 1

RE: [CentOS] centos + kswapd0 error
by mbeltran＠americatel.com.sv 13 May '05

13 May '05

-----Mensaje original----- De: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org]En nombre de Ash Christopher Enviado el: Friday, May 13, 2005 1:35 PM Para: CentOS mailing list Asunto: RE: [CentOS] centos + kswapd0 error -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Johnny Hughes Sent: Friday, May 13, 2005 1:04 PM To: CentOS ML Subject: RE: [CentOS] centos + kswapd0 error On Fri, 2005-05-13 at 12:45 -0600, mbeltran(a)americatel.com.sv wrote: > >> Hi all > >> > >> I have a box with Centos 4 and qmail with all pathches. since Last month > i > >> have had twice the same problem. The process kswapd0 uses all my > resources > >> of CPU and RAM memory and the consequence is that my local queue grow up > and > >> the box go slow too. > >> > >> The first time i guess the problem was the version of the kernel, so i > did > >> an upgrade form kernel.i686 2.6.9-5.0.3.EL to kernel.i686 2.6.9-5.0.5.EL > >> > >> apparently the problem was solved but today the problem came again. The > >> following snapshot shows the situation: > >> > >> > >> top - 10:53:48 up 16 days, 20:05, 1 user, load average: 119.27, 116.16, > >> 114.33 > >> Tasks: 528 total, 13 running, 515 sleeping, 0 stopped, 0 zombie > >> Cpu(s): 5.4% us, 89.4% sy, 0.0% ni, 0.3% id, 4.8% wa, 0.0% hi, 0.1% > si > >> Mem: 2075012k total, 2073404k used, 1608k free, 71056k buffers > >> Swap: 4192924k total, 4192924k used, 0k free, 36380k cached > >> > >> PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND > >> 60 root 17 0 0 0 0 D 75.4 0.0 585:22.79 kswapd0 > >> 2164 root 15 0 1736 484 432 S 31.0 0.0 31:57.07 > couriertcpd > >> 16334 vpopmail 19 0 2660 804 668 R 24.7 0.0 0:01.69 imapd > >> 2158 root 15 0 3264 488 432 S 23.4 0.0 1:17.51 > couriertcpd > >> 32608 apache 16 0 21604 8440 3016 R 15.5 0.4 1:38.09 httpd > >> 15284 vpopmail 18 0 4384 1032 760 R 14.9 0.0 0:08.32 > vdelivermail > >> > >> > >> > >> I really do not know what thing should i do for solve this problem > >> > >> thanks in advance > >> > >> Mario > > > >I think this bug is your problem: > > > >https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=150971 > > > >You can try the kernel at: > > > >http://people.redhat.com/davej/kernels/RHEL4/RPMS.kernel/ > > > >(or I can give you version 2.6.9-6.37.EL that is in 4Update1 beta) > > Hi Mr. Hughes > > The kernel version 2.6.9-6.37.EL has known issues >That is the only other one I have for EL4 (other than the released >kernels). >Maybe the 2.6.9-10.EL then ... but that is pretty new ... he just made >it yesterday :) Hi again Mr Hughes So sorry but i forgot the question mark :S I really want to know if this kernel has known issues (The kernel version 2.6.9-6.37.EL has known issues?) regards Mario

2 1

Problem with Webmin
by Lic. Noel Alvarez Peron 13 May '05

13 May '05

I have installed CentOS 4.0 in a P-III 256Mb RAM 600 Mhz. When I try to install webmin-1.200-1.noarch.rpm, tell me: Operating system is Redhat Linux 4.OES Segmentation Fault What can I do? Regards, Noel

2 1

RE: [CentOS] centos + kswapd0 error
by Ash Christopher 13 May '05

13 May '05

-----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Johnny Hughes Sent: Friday, May 13, 2005 1:04 PM To: CentOS ML Subject: RE: [CentOS] centos + kswapd0 error On Fri, 2005-05-13 at 12:45 -0600, mbeltran(a)americatel.com.sv wrote: > >> Hi all > >> > >> I have a box with Centos 4 and qmail with all pathches. since Last month > i > >> have had twice the same problem. The process kswapd0 uses all my > resources > >> of CPU and RAM memory and the consequence is that my local queue grow up > and > >> the box go slow too. > >> > >> The first time i guess the problem was the version of the kernel, so i > did > >> an upgrade form kernel.i686 2.6.9-5.0.3.EL to kernel.i686 2.6.9-5.0.5.EL > >> > >> apparently the problem was solved but today the problem came again. The > >> following snapshot shows the situation: > >> > >> > >> top - 10:53:48 up 16 days, 20:05, 1 user, load average: 119.27, 116.16, > >> 114.33 > >> Tasks: 528 total, 13 running, 515 sleeping, 0 stopped, 0 zombie > >> Cpu(s): 5.4% us, 89.4% sy, 0.0% ni, 0.3% id, 4.8% wa, 0.0% hi, 0.1% > si > >> Mem: 2075012k total, 2073404k used, 1608k free, 71056k buffers > >> Swap: 4192924k total, 4192924k used, 0k free, 36380k cached > >> > >> PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND > >> 60 root 17 0 0 0 0 D 75.4 0.0 585:22.79 kswapd0 > >> 2164 root 15 0 1736 484 432 S 31.0 0.0 31:57.07 > couriertcpd > >> 16334 vpopmail 19 0 2660 804 668 R 24.7 0.0 0:01.69 imapd > >> 2158 root 15 0 3264 488 432 S 23.4 0.0 1:17.51 > couriertcpd > >> 32608 apache 16 0 21604 8440 3016 R 15.5 0.4 1:38.09 httpd > >> 15284 vpopmail 18 0 4384 1032 760 R 14.9 0.0 0:08.32 > vdelivermail > >> > >> > >> > >> I really do not know what thing should i do for solve this problem > >> > >> thanks in advance > >> > >> Mario > > > >I think this bug is your problem: > > > >https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=150971 > > > >You can try the kernel at: > > > >http://people.redhat.com/davej/kernels/RHEL4/RPMS.kernel/ > > > >(or I can give you version 2.6.9-6.37.EL that is in 4Update1 beta) > > Hi Mr. Hughes > > The kernel version 2.6.9-6.37.EL has known issues >That is the only other one I have for EL4 (other than the released >kernels). >Maybe the 2.6.9-10.EL then ... but that is pretty new ... he just made >it yesterday :) Does anyone know if the following is related to the kswapd0 error outlined above? I have had my server freeze twice (under moderate load) and give the same error in my /var/log/messages. Or, if it is not related, does anyone have any ideas what might be causing my server to freeze (hard reboot needed to bring it back up). May 13 01:54:04 galactica kernel: Unable to handle kernel paging request at virtual address 00400000 May 13 01:54:04 galactica kernel: printing eip: May 13 01:54:04 galactica kernel: c013bb4b May 13 01:54:04 galactica kernel: *pde = 00000000 May 13 01:54:04 galactica kernel: Oops: 0000 [#1] May 13 01:54:04 galactica kernel: SMP May 13 01:54:04 galactica kernel: Modules linked in: parport_pc lp parport md5 i pv6 autofs4 sunrpc dm_mod button battery ac uhci_hcd hw_random e100 mii ext3 jbd May 13 01:54:04 galactica kernel: CPU: 0 May 13 01:54:04 galactica kernel: EIP: 0060:[<c013bb4b>] Not tainted VLI May 13 01:54:04 galactica kernel: EFLAGS: 00010097 (2.6.9-5.0.5.ELsmp) May 13 01:54:04 galactica kernel: EIP is at find_get_pages+0x30/0x50 May 13 01:54:04 galactica kernel: eax: 2002002c ebx: 00000004 ecx: 00000003 edx: 00400000 May 13 01:54:04 galactica kernel: esi: 0000000e edi: dedce638 ebp: c163ae94 esp: c163ae5c May 13 01:54:04 galactica kernel: ds: 007b es: 007b ss: 0068 May 13 01:54:04 galactica kernel: Process kswapd0 (pid: 31, threadinfo=c163a000 task=c1665670) May 13 01:54:04 galactica kernel: Stack: 00000000 c163ae8c 000000b4 00000000 c0143e10 c163ae94 dedce588 00000000 May 13 01:54:04 galactica kernel: c014423a 0000000e ffffffff dedce638 00000000 00000000 c1219e60 c13b8b80 May 13 02:13:47 galactica syslogd 1.4.1: restart.

1 0

RE: [CentOS] centos + kswapd0 error
by mbeltran＠americatel.com.sv 13 May '05

13 May '05

>> Hi all >> >> I have a box with Centos 4 and qmail with all pathches. since Last month i >> have had twice the same problem. The process kswapd0 uses all my resources >> of CPU and RAM memory and the consequence is that my local queue grow up and >> the box go slow too. >> >> The first time i guess the problem was the version of the kernel, so i did >> an upgrade form kernel.i686 2.6.9-5.0.3.EL to kernel.i686 2.6.9-5.0.5.EL >> >> apparently the problem was solved but today the problem came again. The >> following snapshot shows the situation: >> >> >> top - 10:53:48 up 16 days, 20:05, 1 user, load average: 119.27, 116.16, >> 114.33 >> Tasks: 528 total, 13 running, 515 sleeping, 0 stopped, 0 zombie >> Cpu(s): 5.4% us, 89.4% sy, 0.0% ni, 0.3% id, 4.8% wa, 0.0% hi, 0.1% si >> Mem: 2075012k total, 2073404k used, 1608k free, 71056k buffers >> Swap: 4192924k total, 4192924k used, 0k free, 36380k cached >> >> PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND >> 60 root 17 0 0 0 0 D 75.4 0.0 585:22.79 kswapd0 >> 2164 root 15 0 1736 484 432 S 31.0 0.0 31:57.07 couriertcpd >> 16334 vpopmail 19 0 2660 804 668 R 24.7 0.0 0:01.69 imapd >> 2158 root 15 0 3264 488 432 S 23.4 0.0 1:17.51 couriertcpd >> 32608 apache 16 0 21604 8440 3016 R 15.5 0.4 1:38.09 httpd >> 15284 vpopmail 18 0 4384 1032 760 R 14.9 0.0 0:08.32 vdelivermail >> >> >> >> I really do not know what thing should i do for solve this problem >> >> thanks in advance >> >> Mario > >I think this bug is your problem: > >https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=150971 > >You can try the kernel at: > >http://people.redhat.com/davej/kernels/RHEL4/RPMS.kernel/ > >(or I can give you version 2.6.9-6.37.EL that is in 4Update1 beta) Hi Mr. Hughes The kernel version 2.6.9-6.37.EL has known issues Regards Mario

2 1

firstboot? CentOS 3.4
by Ken Godee 13 May '05

13 May '05

What's the best way around "firstboot" ? "firstboot" hung my machine and had to blown it up to get past it. If you bypass firstboot, what other config settings is one missing? I found the following info.... ==================================================================== # Booting without Internet Connection / Stuck on RedHat Registration during First Bootup This problem is caused by a package called firstboot. This package runs during the first boot of the machine to do some additional configurations that require your input. While most of these configuration tasks do not require a network connection, the Registration section does. The following steps will turn off firstboot: 1. Reboot your machine 2. When the grub screen displays, hightlight the line to boot RedHat Enterprise and type "e" 3. Next Hightlight the line that starts with kernel type "e" 4. Add " -s" to the end of the line and press <Enter> key. 5. Type "b" 6. Once the machine finishes booting you should have a root shell prompt that looks like sh-2.05# 7. At the shell prompt, type: chkconfig --del firstboot 8. Finally, type shutdown -r now which will reboot your machine ==================================================================== While at the console prompt should one also just uninstall the rhn-applet rpm as well? Maybe I missed some notes somewhere on this or just shouldn't worry about it and just bomb around it?????? I also noticed right after installing and logging in level 5 that it seemed that after choosing to log out, that it wouldn't log out. There appeared to be the rhn-applet running in the background holding things up. Maybe I'm just hallucinating, I've installed 3.x several times now and don't remember running into this, or have forgotten.

2 1

centos + kswapd0 error
by mbeltran＠americatel.com.sv 13 May '05

13 May '05

Hi all I have a box with Centos 4 and qmail with all pathches. since Last month i have had twice the same problem. The process kswapd0 uses all my resources of CPU and RAM memory and the consequence is that my local queue grow up and the box go slow too. The first time i guess the problem was the version of the kernel, so i did an upgrade form kernel.i686 2.6.9-5.0.3.EL to kernel.i686 2.6.9-5.0.5.EL apparently the problem was solved but today the problem came again. The following snapshot shows the situation: top - 10:53:48 up 16 days, 20:05, 1 user, load average: 119.27, 116.16, 114.33 Tasks: 528 total, 13 running, 515 sleeping, 0 stopped, 0 zombie Cpu(s): 5.4% us, 89.4% sy, 0.0% ni, 0.3% id, 4.8% wa, 0.0% hi, 0.1% si Mem: 2075012k total, 2073404k used, 1608k free, 71056k buffers Swap: 4192924k total, 4192924k used, 0k free, 36380k cached PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 60 root 17 0 0 0 0 D 75.4 0.0 585:22.79 kswapd0 2164 root 15 0 1736 484 432 S 31.0 0.0 31:57.07 couriertcpd 16334 vpopmail 19 0 2660 804 668 R 24.7 0.0 0:01.69 imapd 2158 root 15 0 3264 488 432 S 23.4 0.0 1:17.51 couriertcpd 32608 apache 16 0 21604 8440 3016 R 15.5 0.4 1:38.09 httpd 15284 vpopmail 18 0 4384 1032 760 R 14.9 0.0 0:08.32 vdelivermail I really do not know what thing should i do for solve this problem thanks in advance Mario

2 1

Re: [CentOS] Re: About strongs passwords! -- PAM
by Bryan J. Smith <b.j.smith＠ieee.org> 13 May '05

13 May '05

From: Paul Heinlein <heinlein(a)madboa.com> > Can you comment on any of the smart-card hardware that you've used? Actually, given the occupation I just switched back to last month, I'd better not right now (I'm still "testing the waters" on what disclosure is allowable). I've used them in 2 industries -- defense and financial -- but there's no reason why many others can't. The priniciples to SmartCards are pretty simple. You send in a public key encrypted information (typically a symmetric key or maybe a challenge string), you get the information out. Then you can use that information as appropriate. The SmartCard is used only for 1 small operation on the _client_ for the user. (although you can also use them on the server too, for the services). And via PAM, you can route all sorts of authentication through it. I'll send you some links when I have time early next week (I'm on the road / in the air all weekend starting in a few minutes). There are a lot of more "consumer" SmartCard capabilities out there, nothing of which I've used personally. -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

Re: Mini-centOS -- "Thin Clients" and lack of read-only boot
by Bryan J. Smith <b.j.smith＠ieee.org> 13 May '05

13 May '05

From: Greg Knaddison <greg.knaddison(a)gmail.com> > If you want to compare CentOS to this, then you have to realize that > this "lightweight" version of MS will only run a remote desktop > session (Terminal Service), a browser (IE), a music app (MSWindows > Media Player), a virus scanner and a file navigation utility > (Explorer). They are basically "Thin Clients" using a PXE boot, although local installation is an option. Long story short, Microsoft has _never_ produced a "consumer" Windows product, not DOS7 "Chicago" nor NT, that is "read-only" bootable. That's been a major limitation of DOS/NT versus UNIX systems, they _require_ the filesystem to be "read/write" during the boot process. Most of this is due to the more "consumer" libraries designed for DOS7 "Chicago" Windows (9x/Me). At the most they've created an ultra-light Win32 kernel with just enough to RDesktop out of a EEPROM. But even when they did, companies like Wyse and many others opted for a BSD kernel with Citrix code instead of Microsoft's. This is a totally different issue. Microsoft is trying to do what UNIX X-Terminals, Workstations and other UNIX-based Thin Clients have done for years. This isn't "innovative" it's "catching up" to UNIX. -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

Re: About strongs passwords! -- PAM
by Bryan J. Smith <b.j.smith＠ieee.org> 13 May '05

13 May '05

From: israel.garcia(a)cimex.com.cu > 1. My users have to work on the shell because, they run a C++ > scritp to work in tha database.. If it's just 1 or 2 scripts, consider limiting access to programs with another shell and/or a web or other front-end that only lets them launch a specific process. > 2. So I want to force my users to pick a strong password.. Is there some > command, tool to do this? Actually, modifying PAM rules are highly recommended for this. So it not only does it for a single program, but all programs that change the password. But ideally, you should consider _not_ using passwords for SSH. You should enable either public key authentication or Kerberos. It increases security ten-fold because the actual communication sent is a challenge -- i.e., a one-time, random password that is not good ever again. In the case of public key authentication, you'll want to use passphrases, and enforce strong rules on those. The passphrases protect the private key on the client, which you never want to store whole. You'll need to research how to enforce that with "ssh-keygen" and the local "/etc/ssh/*config*" on each system where they are using the SSH client. If you're really anal, you can use smart cards. Then no system ever has even the private key. It's actually easier to setup for SSH than most people think. -- Bryan J. Smith mailto:b.j.smith@ieee.org

2 1

Re: [CentOS] Mini-centOS
by Bryan J. Smith <b.j.smith＠ieee.org> 13 May '05

13 May '05

From: Doug Koobs <dkoobs(a)dkoobs.com> > If it helps any, I'm running CentOS4 on an old PII 400Mhz, 192MB laptop. Under > Gnome, it's not exactly snappy, but it is usable. Unser XFCE4.2, i'm quite ahppy > with it. I know you stated that you need Gnome, and I also prefer it. But if you > haven't tried some of the lightweight alternatives, give them a shot, you may be > surprised. The nice thing about XFCE is that it is a _total_ session+file+window solution, like KDE and GNOME. And if you don't like XFCE's session+file managers, you can always use Rox-Filer (which works flawlessly with XFCE's xfwm window manager). > Intereating article about the new lightweight Windows OS. There's _no_ such thing on the retail shelf or in volume Windows license. Unless you link from the _Embedded_ NT/2000/XP releases, you can't "unlink" all sorts of crap that "leeches" on the NTkernel, GDI, etc... These so-called "lightweight" Windows OS releases are nothing more than some things not bundled. It's a 100% marketing gimmick. Unfortunately, "Chicago"-designed MS IE is required by all apps since the mid-'90s, which is the crux of the resource and, more relevantly, security in the current bastardization of Win32 we call NT5.1 (XP/2003). So it's hard to get rid of if you run anything that was developed with Visual Studio. It's really sad. Some Windows architects are really sharp guys, but the "applications" developers still develop like NT is DOS7 "Chicago" -- assuming the world is safe and users have full access over the system. No wonder Marc left for Google! > However, I don't think it will meet your needs, as it will be extremely crippled, > to the point it won't even run MS Office if I read correctly. Depends on what is left out. -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

Re: [CentOS] Mini-centOS
by kenkensmile＠netscape.net 13 May '05

13 May '05

Chris Mauritz <chrism(a)imntv.com> wrote: >kenkensmile(a)netscape.net wrote: > >>I am using centOS for my server and centOS is extremely stable. I almost love centOS more than my wife. However, centOS is a bit heavy to run on my notebook (P III 1G, 256MB RAM). I need gnome, firefox, openoffice, realplayer, gaim, acrobat and thunderbird on my notebook, but if I install all of them (plus base-system), my notebook becomes very slow. I wish I could have a lighter version of centOS for notebooks and old desktops. Is there any project that I could have a mini-centOS in the future??? >> >> >> > > >The slowness isn't really CentOS's fault. That's not really enough >memory for an X+gnome environment if you're going to be running piggy >applications like openoffice. Also, I suspect an older P3 notebook >probably has rather slow video hardware which may make things seem worse >than they really are. The best thing you can do to speed things up is >to bump your memory up to 512mb. I suspect that will make a big >difference in perceived speed. > >Cheers, > >C > Thanks for the reply. Yes, you are exactly right. My notebook has a slow video hardware(8MB). Unfortunately, I cannot upgrade memory up to 512MB, because 256MB is the maximum capacity. I have also found an article that MS is making a new OS for old computers, so I just simply thought I would like to have a mini-centOS. http://news.com.com/2100-1016_3-5705456.html Cheers, Joe __________________________________________________________________ Switch to Netscape Internet Service. As low as $9.95 a month -- Sign up today at http://isp.netscape.com/register Netscape. Just the Net You Need. New! Netscape Toolbar for Internet Explorer Search from anywhere on the Web and block those annoying pop-ups. Download now at http://channels.netscape.com/ns/search/install.jsp

5 4

Re: [CentOS] About strongs passwords!
by israel.garcia＠cimex.com.cu 13 May '05

13 May '05

Message: 5 Date: Thu, 12 May 2005 08:41:20 -0400 From: Matt Hyclak <hyclak(a)math.ohiou.edu> Subject: Re: [CentOS] About strongs passwords! To: centos(a)centos.org Message-ID: <20050512124120.GB5989(a)math.ohiou.edu> Content-Type: text/plain; charset="us-ascii" On Thu, May 12, 2005 at 08:35:03AM -0500, israel.garcia(a)cimex.com.cu enlightened us: > List, It's amazing the soon the messages on this list are answered, I am > glad and I want to thank you all for that... > > Here is my question, I have a DataBase CentOS server working with about > 150 users connected via ssh, so I want to set up for all users strongs > passwords, I mean, 8 or more caracters, with ,.;* , ect....... Is there > some option, bash command which do that? > Great, but: 1. My users have to work on the shell because, they run a C++ scritp to work in tha database.. 2. So I want to force my users to pick a strong password.. Is there some command, tool to do this? Regards, Israel The mkpasswd command included in the expect RPM can generate them for you. A little shell scripting will change the passwords for the users. Matt

2 1

When .. isnt the same? (not a problem
by Ulrik S. Kofod 13 May '05

13 May '05

I dont understand why ".." isnt working the same way for "ls" and "cd" when inside a symbolic link. The reason I ask is that I made a link to a directory with some scripts that saves output in "../output.txt" and I could not find the output until I found that ".." isnt the directory you see when you do a $pwd. I solved the problem by making a directory and then make a link to each script in there. I would just like to know: 1) if there is a good reason to this behaviour. 2) if there is a rule, so you know when ".." is level up from $ pwd and when it is one level up from the link target. 3) if there is an alternativ way to point to the parent directory. Personally I can't see why you would ever need ".." to be one level up from the link target. Example: $ ln -s /home link_to_home; cd link_to_home $ ls .. bin dev home lib misc $ cd ..;ls link_to_home Have a nice weekend Ulrik -- This message has been scanned for viruses and dangerous content by OpenProtect(http://www.openprotect.com), and is believed to be clean.

2 1

RE: [CentOS] When ".." isn't the same? (not a problem
by Marc Powell 13 May '05

13 May '05

> -----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf Of Maciej Zenczykowski > Sent: Friday, May 13, 2005 9:19 AM > To: CentOS mailing list > Subject: RE: [CentOS] When ".." isn't the same? (not a problem > > > I believe I understand what you're describing and it's been a long time > > since I've had this 'issue' but if I remember correctly, it's a function > > of your shell, which I believe is going to be bash. It tries to be > > intelligent about its symlink handling. It remembers the cd path you > > used to get to that symlink and 'cd ..' sends you back the same way you > > got in. It basically treats symlinks as real directories, not pointers. > > This can be very useful but it can also be annoying. I'll bet if you use > > tcsh, which uses a more literal interpretation of the file-structure, it > > would work as you expect. I wasn't ever interested in it enough to see > > if it could be disabled in bash. > > I believe the proper option is -P as in "set -P" in bash to disable this > feature (IMHO very useful). Indeed -- -P If set, the shell does not follow symbolic links when executing commands such as cd that change the current working directory. It uses the physical directory structure instead. By default, bash follows the logical chain of directories when performing commands which change the current directory. -- Marc

1 0

Apache config for Squirrelmail?
by James B. Byrne 13 May '05

13 May '05

This is my corrected configuration file for squirrelmail over ssl if anyone is interested: # squirrelmail.conf 2005 May 13 James B. Byrne JBB8 # # SquirrelMail is a webmail package written in PHP. # This configuration file forces users to connect via SSL # # If the incoming request is already https:// then this # file will only be processed if the directive: # # Include /etc/httpd/conf.d/squirrelmail.conf # # is appended to ssl.conf for the default server or added # to the virtual host configuration file of the virtual # host used to process webmail. Note that ssl requires # IP addressed virtual hosts to work and that the necessary # Listen directives must be placed in the appropriate # configuration files as well. # Alias /webmail /usr/share/squirrelmail <Directory /usr/share/squirrelmail> AllowOverride None Options ExecCGI Order allow,deny Allow from all </Directory> RewriteEngine on RewriteLog "/var/log/httpd/rewrite_log" RewriteLogLevel 0 # AIDE-MEMOIRE # Arguments $1, $2 etc. refer to () matches in the # CURRENT RewriteRule line. # Arguments %1, %2 etc. refer to () matches in the # LAST matched RewriteCond. # Do not process established ssl squirrelmail sessions RewriteCond %{HTTPS} on RewriteCond %{REQUEST_URI} ^/webmail(/?|/.*)$ RewriteRule (^.*$) - [L,R] # Rewrite short form URLs whether SSL or not for forms # webmail.anything.dom and www.webmail.anything.dom RewriteCond %{HTTP_HOST} ^(www\.)?(webmail\.)(..+\.)(..+)$ [NC] RewriteCond %{REQUEST_URI} !^/webmail/ RewriteRule (^.*$) https://webmail.%3%4/webmail/ [L,R] # Force SSL otherwise RewriteCond %{HTTPS} off RewriteCond %{REQUEST_URI} ^/webmail(/?|/.*)$ RewriteCond %{HTTP_HOST} ^(.*\.)?(..+\.)(..+)$ [NC] RewriteRule (^.*$) https://webmail.%2%3/webmail/ [L,R] #EOF -- *** e-mail is not a secure channel *** mailto:byrnejb.<token>@harte-lyne.ca James B. Byrne Harte & Lyne Limited vox: +1 905 561 1241 9 Brockley Drive fax: +1 905 561 0757 Hamilton, Ontario <token> = hal Canada L8E 3C3

1 0

RE: [CentOS] When ".." isn't the same? (not a problem
by Marc Powell 13 May '05

13 May '05

> -----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf Of Ulrik S. Kofod > Sent: Friday, May 13, 2005 2:25 AM > To: centos(a)centos.org > Subject: [CentOS] When ".." isn't the same? (not a problem > > I don't understand why ".." isn't working the same way for "ls" and "cd" > when inside > a symbolic link. The reason I ask is that I made a link to a directory > with some > scripts that saves output in "../output.txt" and I could not find the > output until I > found that ".." isn't the directory you see when you do a $pwd. I solved > the problem > by making a directory and then make a link to each script in there. > > I would just like to know: > 1) if there is a good reason to this behaviour. > 2) if there is a rule, so you know when ".." is level up from $ pwd and > when it is > one level up from the link target. > 3) if there is an alternativ way to point to the parent directory. > I believe I understand what you're describing and it's been a long time since I've had this 'issue' but if I remember correctly, it's a function of your shell, which I believe is going to be bash. It tries to be intelligent about its symlink handling. It remembers the cd path you used to get to that symlink and 'cd ..' sends you back the same way you got in. It basically treats symlinks as real directories, not pointers. This can be very useful but it can also be annoying. I'll bet if you use tcsh, which uses a more literal interpretation of the file-structure, it would work as you expect. I wasn't ever interested in it enough to see if it could be disabled in bash. -- Marc

2 1

Re: Mini-centOS -- static libraries, XFCE
by Bryan J. Smith <b.j.smith＠ieee.org> 13 May '05

13 May '05

kenkensmile(a)netscape.net wrote: > However, centOS is a bit heavy to run on my notebook (P III 1G, 256MB > RAM). I need gnome, firefox, openoffice, realplayer, gaim, acrobat and > thunderbird on my notebook, but if I install all of them (plus base- > system), my notebook becomes very slow. I wish I could have a lighter > version of centOS for notebooks and old desktops. CentOS isn't the issue, but your application selection. In fact, I have a 4 year-old Toshiba Satellitte 2805-S402 with a P3-850MHz, 256MB of RAM that runs Fedora Core 3 just fine -- with _full_ GNOME. OpenOffice 1.x, Acrobat and RealPlayer have their own, statically-linked widget-sets. I'm sure that's massively bloating the memory footprint. Consider switching to OpenOffice 2.0 [betas] (natively GTK+ now I believe?), HelixPlayer (GTK+ based) with the RealPlayer libraries added (HelixPlayer is from Real, and the new RealPlayer is Helix+non-free libs). As far as Acrobat 7, I'm not sure, but I think it's still statically linked Motif. But that leaves only one application that is not native. I don't leave Acrobat running, which really saves me. As far as GNOME, you do _not_ need to run GNOME session with nautilus and metacity (GNOME 2.x file/window) to get full GNOME compatibility. Run XFCE session with xffm and xfwm (XFCE file/window) and you'll see your footprint go way down. Shortly after Fedora Core 2 (what I call "RHCL4.0") was introduced with XFCE as a new, 3rd session/file/window standard option, which RHEL4 inherited its selection, I remember Alan Cox boasting he was running it on a WinChip2 225MHz with only 48MB of RAM. XFCE is GTK+ based, but much, much lighter than a full GNOME environment, while being 100% GNOME compatible at the same time. Johnny Hughes wrote: >It won't get much faster if you choose those products :) As I mentioned, OpenOffice 2.0 and the new HelixPlayer are far more "native" in their libraries. OpenOffice 2.0 is in beta and HelixPlayer should (?) be included in FC3/RHEL4, and it's simply a matter of adding the non-free libraries which turns it into RealPlayer. I have to give Real a "thank you" for doing everything they could to make their offering to the community. >There is XFCE-4.2 that you could install instead of GNOME or KDE Well, you typically want to install XFCE _along_with_ GNOME, so it can use GNOME components when necessary. But just have the user (as well as system for new users) default to XFCE. XFCE takes some getting used to, but it's definitely worth it for older systems. >If you want to change permanently ... do: >switchdesk XFCE That's the 1 command I make sure I let _everyone_ know when they are installing FC/RHEL on any new system and memory is going to be limited. I really tire of the "Red Hat is bloated" comments, especially as of FC2+. Yes, you _do_ need a i686 class (PPro, K6, M2), but that's more to do NPTL and other details than "bloat." You can make Fedora-based distros as "lean" or as "bloated" as you want. And it's only going to get better in the future with more Fedora development and a YUM-integrated installer. > You can get a minimum install by doing a minimal install from > anaconda ... Yet another excellent recommendation that I see people forget about. 600MB of everything you should need to get using the system. In actuality, there is also a really, really "lean" 90MB install that you can do from any FC2+ distro, but not from Anaconda. > then doing: > yum groupinstall XFCE-4.2 "X Window System" "Office/Productivity" > then install the individual things you want via yum... > I'll do that on a test box and tell you how much space it is :) With that said, I've seen no less than 5 YUM GUIs. What does everyone like? -- Bryan J. Smith mailto:b.j.smith@ieee.org

2 1

CentOS-announce Digest, Vol 3, Issue 6
by centos-announce-request＠centos.org 13 May '05

13 May '05

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2005:412-01: Moderate CentOS 2 i386 openmotif security update (John Newbigin) 2. CEBA-2005:428 BUG fix CentOS 3 ia64 bonobo-activation - bug fix update (Pasi Pirhonen) 3. CEBA-2005:428 BUG fix Centos 3 s390(x) bonobo-activation - bug fix update (Pasi Pirhonen) 4. CEBA-2005:428 BUG fix CentOS 3 i386 bonobo-activation - bug fix update (Tru Huynh) 5. CEBA-2005:428 BUG fix CentOS 3 x86_64 bonobo-activation - bug fix update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 13 May 2005 09:58:58 +1000 From: John Newbigin <jnewbigin(a)ict.swin.edu.au> Subject: [CentOS-announce] CESA-2005:412-01: Moderate CentOS 2 i386 openmotif security update To: centos-announce(a)centos.org Message-ID: <4283EDC2.9070508(a)ict.swin.edu.au> Content-Type: text/plain; charset=us-ascii; format=flowed The following errata for CentOS-2 have been built and uploaded to the centos mirror: RHSA-2005:412-01 Moderate: openmotif security update Files available: openmotif-2.1.30-13.21AS.5.i386.rpm openmotif-devel-2.1.30-13.21AS.5.i386.rpm More details are available from the RedHat web site at https://rhn.redhat.com/errata/rh21as-errata.html The easy way to make sure you are up to date with all the latest patches is to run: # yum update -- John Newbigin Computer Systems Officer Faculty of Information and Communication Technologies Swinburne University of Technology Melbourne, Australia http://www.ict.swin.edu.au/staff/jnewbigin ------------------------------ Message: 2 Date: Fri, 13 May 2005 06:23:26 +0300 From: Pasi Pirhonen <upi(a)iki.fi> Subject: [CentOS-announce] CEBA-2005:428 BUG fix CentOS 3 ia64 bonobo-activation - bug fix update To: centos-announce(a)centos.org Message-ID: <20050513032326.GO13577(a)core.upi.iki.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CEBA-2005:428 https://rhn.redhat.com/errata/RHBA-2005-428.html The following updated files have been uploaded and are currently syncing to the mirrors: files: updates/ia64/RPMS/bonobo-activation-2.2.2-1.2E.ia64.rpm updates/ia64/RPMS/bonobo-activation-devel-2.2.2-1.2E.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://iki.fi/upi/

1 0

DNS master slave update issue
by James B. Byrne 13 May '05

13 May '05

I have a situation where the slave nameservers for a zone are being notified by the master that a change has occurred but the slaves are not requesting a zone file transfer in consequence. Is there some special flag or directive that I must set somewhere in order for this activity to be automatic upon receipt of such notices? All systems involved are running DNS 9.2.4. Regards, Jim -- *** e-mail is not a secure channel *** mailto:byrnejb.<token>@harte-lyne.ca James B. Byrne Harte & Lyne Limited vox: +1 905 561 1241 9 Brockley Drive fax: +1 905 561 0757 Hamilton, Ontario <token> = hal Canada L8E 3C3

4 3

Has anybody managed to get native IPSec working?
by Aleksandar Milivojevic 13 May '05

13 May '05

I've just wrote a lenghty email on Fedora ML as reply to Phillip who seems to be in the same trouble as myself... Found that while searching all mailing list archives and bugzillas I could think off (not really successfully, many people with same problems, no answers other than "works for me" -- glad to hear it works for somebody else, but it would be nice if he/she was a bit more elaborate why it "works for me"). I'd really like to get IPSec VPN working. I know about OpenVPN, and I know it works very well, and all that. But being userland application based on SSL, it works only between Linux and Windows machines. While it would do as temporary solution for short period of time, I might need something that has possiblity to interoperate with things such as Cisco routers and/or dedicated VPN boxes too, if need for it arises in the future (and I see it comming, since I do have some Cisco routers around, and some dedicated VPN boxes, all capable of IPSec). So, OpenVPN woudn't be a good way to go (maybe as temporary solution, until I'm able to get IPSec stuff working). Anyhow, the machines in question are CentOS 4.0 with all updates installed. And since what I actually use is labeled CentOS, thought about asking here also... It seems something is broken in IPSec implementation. Either as distributed by RedHat (and therefore present in CentOS), or maybe in the upstream kernel or userland tools. By searching the archives of various mailing lists, I found many people having problems with it. I'm attempting to setup IPSec (host2host for now, VPN when I'm done with simpler host2host setup) as I write this. Using native 2.6 kernel implementation, between two fully updated CentOS 4.0 boxes. I found this bug report that affects VPN configuration, not really relevant to my case (host 2 host). I've applied the patches since configuring VPN is going to be my next step anyhow: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=146169 There are two proposed patches for ifup-ipsec and ifdown-ipsec scripts that will go into RHEL3 U6 and RHEL4 U2. Probably Fedora Core has the same issues. Looking at log files and monitoring the network with tcpdump (when doing "ping host-b" from host-a), this seems to be happening. The first packet from host-a doesn't fly anywhere, as expected. Subsequent packets are sent, but no response is ever received from host-b. Pinging from host-b doesn't work at all (no packet leaving host-b, ever). Sumarized: - host-a attempts to negotiate automatic keying with host-b (success) - sends encrypted ICMP echo packet to host-b - host-b attempts to negotiate automatic keying with host-a (looks like success) - host-b repeats previous step indefinetly and never sends back encrypted ICMP echo-reply packet to host-a Looking at the output of "setkey -D" on both hosts, the key tables are huge after some time. Something doesn't look righ, and I can't pinpoint down what's wrong. It looks like new pair of keys is generate each time host-b is supposed to send packet to host-a. The /etc/sysconfig/network-scripts/ifcfg-IPSecToHostB on host-a looks something like this: DST=192.168.1.100 TYPE=IPSEC ONBOOT=no IKE_METHOD=X509 IKE_CERTFILE=/etc/racoon/certs/host-a IKE_PEER_CERTFILE=/etc/racoon/certs/host-b The /etc/sysconfig/network-scripts/ifcfg-IPSecToHostA on host-b looks similar (DST and IKE_*CERTFILE pointing the other way). Keys and certificates for host-a are stored in host-a.private (no passphrase, so that racoon can read the key) and host-a.public and likewise for host-b, just the way ifup-ipsec script expects them to be. After doing "ifup IPSecToHostB" on host-a, and "ifup IPSecToHostA" on host-b, the generated racoon configuration looks good (long certificate_type line might get wrapped around by my mail client, but it is a single line in the configuration file). This is store in /etc/racoon/192.168.1.100.conf, which is included from racoon.conf. remote 192.168.1.100 { exchange_mode aggressive, main; my_identifier asn1dn; peers_identifier asn1dn; certificate_type x509 "/etc/racoon/certs/host-a.public" "/etc/racoon/certs/host-a.private"; peers_certfile "/etc/racoon/certs/host-b.public"; proposal { encryption_algorithm 3des; hash_algorithm sha1; authentication_method rsasig; dh_group 2; } } The racoon.conf file looks like this (I made no changes to it, as installed by ipsec-tools, include statement added by ifup-ipsec script): # Racoon IKE daemon configuration file. # See 'man racoon.conf' for a description of the format and entries. path include "/etc/racoon"; path pre_shared_key "/etc/racoon/psk.txt"; path certificate "/etc/racoon/certs"; sainfo anonymous { pfs_group 2; lifetime time 1 hour ; encryption_algorithm 3des, blowfish 448, rijndael ; authentication_algorithm hmac_sha1, hmac_md5 ; compression_algorithm deflate ; } include "/etc/racoon/192.168.120.165.conf"; Configuration on host-b looks similar, referencing back to host-a. When I ping host-b, the first packet is dropped, as expected (while Racoon does its job with automatic keying). I've included excerpt from /var/log/message from both host-a and host-b as attachments (messages-host-*.txt), as well as output of "tcpdump host-b" that was running on host-a (tcpdump-host-a.txt). I've put them as attachments to avoid my mail client making them unreadable by wrapping around long lines. All in all, either I'm missing something really obvious, or something is really broken as distributed in Fedora/RHEL (and clones)... -- Aleksandar Milivojevic <amilivojevic(a)pbl.ca> Pollard Banknote Limited Systems Administrator 1499 Buffalo Place Tel: (204) 474-2323 ext 276 Winnipeg, MB R3T 1L7 May 12 10:11:54 host-a kernel: NET: Registered protocol family 15 May 12 10:11:54 host-a racoon: INFO: @(#)ipsec-tools 0.3.3 (http://ipsec-tools.sourceforge.net) May 12 10:11:54 host-a racoon: INFO: @(#)This product linked OpenSSL 0.9.7a Feb 19 2003 (http://www.openssl.org/) May 12 10:11:55 host-a racoon: INFO: 192.168.0.100[500] used as isakmp port (fd=8) May 12 10:11:55 host-a racoon: INFO: 127.0.0.1[500] used as isakmp port (fd=9) May 12 10:12:32 host-a racoon: INFO: IPsec-SA request for 192.168.1.100 queued due to no phase1 found. May 12 10:12:32 host-a racoon: INFO: initiate new phase 1 negotiation: 192.168.0.100[500]<=>192.168.1.100[500] May 12 10:12:32 host-a racoon: INFO: begin Aggressive mode. May 12 10:12:32 host-a racoon: INFO: ISAKMP-SA established 192.168.0.100[500]-192.168.1.100[500] spi:b962c618a3d1137c:d99254c172eb5de5 May 12 10:12:33 host-a racoon: INFO: initiate new phase 2 negotiation: 192.168.0.100[0]<=>192.168.1.100[0] May 12 10:12:33 host-a racoon: INFO: IPsec-SA established: AH/Transport 192.168.1.100->192.168.0.100 spi=165105177(0x9d74e19) May 12 10:12:33 host-a racoon: INFO: IPsec-SA established: ESP/Transport 192.168.1.100->192.168.0.100 spi=65841791(0x3ecaa7f) May 12 10:12:33 host-a racoon: INFO: IPsec-SA established: AH/Transport 192.168.0.100->192.168.1.100 spi=197556428(0xbc678cc) May 12 10:12:33 host-a racoon: INFO: IPsec-SA established: ESP/Transport 192.168.0.100->192.168.1.100 spi=227305975(0xd8c69f7) May 12 10:12:59 host-a racoon: INFO: respond new phase 2 negotiation: 192.168.0.100[0]<=>192.168.1.100[0] May 12 10:12:59 host-a racoon: INFO: IPsec-SA established: AH/Transport 192.168.1.100->192.168.0.100 spi=80675908(0x4cf0444) May 12 10:12:59 host-a racoon: INFO: IPsec-SA established: ESP/Transport 192.168.1.100->192.168.0.100 spi=198278184(0xbd17c28) May 12 10:12:59 host-a racoon: INFO: IPsec-SA established: AH/Transport 192.168.0.100->192.168.1.100 spi=142149191(0x8790647) May 12 10:12:59 host-a racoon: INFO: IPsec-SA established: ESP/Transport 192.168.0.100->192.168.1.100 spi=220511737(0xd24bdf9) May 12 10:13:00 host-a racoon: INFO: respond new phase 2 negotiation: 192.168.0.100[0]<=>192.168.1.100[0] May 12 10:13:00 host-a racoon: INFO: IPsec-SA established: AH/Transport 192.168.1.100->192.168.0.100 spi=236322388(0xe15fe54) May 12 10:13:00 host-a racoon: INFO: IPsec-SA established: ESP/Transport 192.168.1.100->192.168.0.100 spi=23039671(0x15f8eb7) May 12 10:13:00 host-a racoon: INFO: IPsec-SA established: AH/Transport 192.168.0.100->192.168.1.100 spi=168473301(0xa0ab2d5) May 12 10:13:00 host-a racoon: INFO: IPsec-SA established: ESP/Transport 192.168.0.100->192.168.1.100 spi=34968109(0x215922d) May 12 10:13:01 host-a racoon: INFO: respond new phase 2 negotiation: 192.168.0.100[0]<=>192.168.1.100[0] May 12 10:13:01 host-a racoon: INFO: IPsec-SA established: AH/Transport 192.168.1.100->192.168.0.100 spi=129055629(0x7b13b8d) May 12 10:13:01 host-a racoon: INFO: IPsec-SA established: ESP/Transport 192.168.1.100->192.168.0.100 spi=97213500(0x5cb5c3c) May 12 10:13:01 host-a racoon: INFO: IPsec-SA established: AH/Transport 192.168.0.100->192.168.1.100 spi=12584766(0xc0073e) May 12 10:13:01 host-a racoon: INFO: IPsec-SA established: ESP/Transport 192.168.0.100->192.168.1.100 spi=113731845(0x6c76905) May 12 10:12:02 host-b kernel: NET: Registered protocol family 15 May 12 10:12:03 host-b racoon: INFO: @(#)ipsec-tools 0.3.3 (http://ipsec-tools.sourceforge.net) May 12 10:12:03 host-b racoon: INFO: @(#)This product linked OpenSSL 0.9.7a Feb 19 2003 (http://www.openssl.org/) May 12 10:12:03 host-b racoon: INFO: 192.168.1.100[500] used as isakmp port (fd=8) May 12 10:12:03 host-b racoon: INFO: 127.0.0.1[500] used as isakmp port (fd=9) May 12 10:12:31 host-b racoon: INFO: respond new phase 1 negotiation: 192.168.1.100[500]<=>192.168.0.100[500] May 12 10:12:31 host-b racoon: INFO: begin Aggressive mode. May 12 10:12:31 host-b racoon: INFO: ISAKMP-SA established 192.168.1.100[500]-192.168.0.100[500] spi:b962c618a3d1137c:d99254c172eb5de5 May 12 10:12:32 host-b racoon: INFO: respond new phase 2 negotiation: 192.168.1.100[0]<=>192.168.0.100[0] May 12 10:12:33 host-b racoon: INFO: IPsec-SA established: AH/Transport 192.168.0.100->192.168.1.100 spi=197556428(0xbc678cc) May 12 10:12:33 host-b racoon: INFO: IPsec-SA established: ESP/Transport 192.168.0.100->192.168.1.100 spi=227305975(0xd8c69f7) May 12 10:12:33 host-b racoon: INFO: IPsec-SA established: AH/Transport 192.168.1.100->192.168.0.100 spi=165105177(0x9d74e19) May 12 10:12:33 host-b racoon: INFO: IPsec-SA established: ESP/Transport 192.168.1.100->192.168.0.100 spi=65841791(0x3ecaa7f) May 12 10:12:58 host-b racoon: INFO: initiate new phase 2 negotiation: 192.168.1.100[0]<=>192.168.0.100[0] May 12 10:12:59 host-b racoon: INFO: IPsec-SA established: AH/Transport 192.168.0.100->192.168.1.100 spi=142149191(0x8790647) May 12 10:12:59 host-b racoon: INFO: IPsec-SA established: ESP/Transport 192.168.0.100->192.168.1.100 spi=220511737(0xd24bdf9) May 12 10:12:59 host-b racoon: INFO: IPsec-SA established: AH/Transport 192.168.1.100->192.168.0.100 spi=80675908(0x4cf0444) May 12 10:12:59 host-b racoon: INFO: IPsec-SA established: ESP/Transport 192.168.1.100->192.168.0.100 spi=198278184(0xbd17c28) May 12 10:12:59 host-b racoon: INFO: initiate new phase 2 negotiation: 192.168.1.100[0]<=>192.168.0.100[0] May 12 10:13:00 host-b racoon: INFO: IPsec-SA established: AH/Transport 192.168.0.100->192.168.1.100 spi=168473301(0xa0ab2d5) May 12 10:13:00 host-b racoon: INFO: IPsec-SA established: ESP/Transport 192.168.0.100->192.168.1.100 spi=34968109(0x215922d) May 12 10:13:00 host-b racoon: INFO: IPsec-SA established: AH/Transport 192.168.1.100->192.168.0.100 spi=236322388(0xe15fe54) May 12 10:13:00 host-b racoon: INFO: IPsec-SA established: ESP/Transport 192.168.1.100->192.168.0.100 spi=23039671(0x15f8eb7) May 12 10:13:00 host-b racoon: INFO: initiate new phase 2 negotiation: 192.168.1.100[0]<=>192.168.0.100[0] May 12 10:13:01 host-b racoon: INFO: IPsec-SA established: AH/Transport 192.168.0.100->192.168.1.100 spi=12584766(0xc0073e) May 12 10:13:01 host-b racoon: INFO: IPsec-SA established: ESP/Transport 192.168.0.100->192.168.1.100 spi=113731845(0x6c76905) May 12 10:13:01 host-b racoon: INFO: IPsec-SA established: AH/Transport 192.168.1.100->192.168.0.100 spi=129055629(0x7b13b8d) May 12 10:13:01 host-b racoon: INFO: IPsec-SA established: ESP/Transport 192.168.1.100->192.168.0.100 spi=97213500(0x5cb5c3c) 10:12:32.116735 IP host-a.isakmp > host-b.isakmp: isakmp: phase 1 I agg 10:12:32.266347 IP host-b.isakmp > host-a.isakmp: isakmp: phase 1 R agg 10:12:32.266374 IP host-b > host-a: udp 10:12:32.370155 IP host-a.isakmp > host-b.isakmp: isakmp: phase 1 I agg 10:12:32.370228 IP host-a > host-b: udp 10:12:32.370944 IP host-a.isakmp > host-b.isakmp: isakmp: phase 2/others I inf[E] 10:12:32.389413 IP host-b.isakmp > host-a.isakmp: isakmp: phase 2/others R inf[E] 10:12:33.411478 IP host-a.isakmp > host-b.isakmp: isakmp: phase 2/others I oakley-quick[E] 10:12:33.435885 IP host-b.isakmp > host-a.isakmp: isakmp: phase 2/others R oakley-quick[E] 10:12:33.436808 IP host-a.isakmp > host-b.isakmp: isakmp: phase 2/others I oakley-quick[E] 10:12:59.369421 IP host-a > host-b: AH(spi=0x0bc678cc,seq=0x1): ESP(spi=0x0d8c69f7,seq=0x1) 10:12:59.393050 IP host-b.isakmp > host-a.isakmp: isakmp: phase 2/others R oakley-quick[E] 10:12:59.416746 IP host-a.isakmp > host-b.isakmp: isakmp: phase 2/others I oakley-quick[E] 10:12:59.418339 IP host-b.isakmp > host-a.isakmp: isakmp: phase 2/others R oakley-quick[E] 10:13:00.369018 IP host-a > host-b: AH(spi=0x0bc678cc,seq=0x2): ESP(spi=0x0d8c69f7,seq=0x2) 10:13:00.392529 IP host-b.isakmp > host-a.isakmp: isakmp: phase 2/others R oakley-quick[E] 10:13:00.413340 IP host-a.isakmp > host-b.isakmp: isakmp: phase 2/others I oakley-quick[E] 10:13:00.414949 IP host-b.isakmp > host-a.isakmp: isakmp: phase 2/others R oakley-quick[E] 10:13:01.369325 IP host-a > host-b: AH(spi=0x0bc678cc,seq=0x3): ESP(spi=0x0d8c69f7,seq=0x3) 10:13:01.392868 IP host-b.isakmp > host-a.isakmp: isakmp: phase 2/others R oakley-quick[E] 10:13:01.415756 IP host-a.isakmp > host-b.isakmp: isakmp: phase 2/others I oakley-quick[E] 10:13:01.417302 IP host-b.isakmp > host-a.isakmp: isakmp: phase 2/others R oakley-quick[E] 11:00:33.407722 IP host-a.isakmp > host-b.isakmp: isakmp: phase 2/others I oakley-quick[E] 11:00:33.432074 IP host-b.isakmp > host-a.isakmp: isakmp: phase 2/others R oakley-quick[E] 11:00:33.433031 IP host-a.isakmp > host-b.isakmp: isakmp: phase 2/others I oakley-quick[E] host-a# setkey -D 192.168.1.100 192.168.0.100 esp mode=transport spi=97213500(0x05cb5c3c) reqid=0(0x00000000) E: 3des-cbc 985da9c3 28e552dc c477cdce 66512651 13afbca9 a1984bcf A: hmac-sha1 71458a89 4717fcf1 781c4588 930e9b5f 98f3376a seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:01 2005 current: May 12 10:17:02 2005 diff: 241(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=15 pid=4067 refcnt=0 192.168.1.100 192.168.0.100 ah mode=transport spi=129055629(0x07b13b8d) reqid=0(0x00000000) A: hmac-sha1 7dba1ffc aedf1719 8fb451c7 ee81826a 67b1be0a seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:01 2005 current: May 12 10:17:02 2005 diff: 241(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=14 pid=4067 refcnt=0 192.168.1.100 192.168.0.100 esp mode=transport spi=23039671(0x015f8eb7) reqid=0(0x00000000) E: 3des-cbc dc20f03c 9c483a84 f4b28e0e 42def71a e88720f1 9c0ac34f A: hmac-sha1 64caede6 fda16b7d 0a94c78c a0da465d 72421e78 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:00 2005 current: May 12 10:17:03 2005 diff: 243(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=13 pid=4067 refcnt=0 192.168.1.100 192.168.0.100 ah mode=transport spi=236322388(0x0e15fe54) reqid=0(0x00000000) A: hmac-sha1 2c01e096 86e02e30 59d16c86 3adcd917 d94a6bba seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:00 2005 current: May 12 10:17:03 2005 diff: 243(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=12 pid=4067 refcnt=0 192.168.1.100 192.168.0.100 esp mode=transport spi=198278184(0x0bd17c28) reqid=0(0x00000000) E: 3des-cbc b6a82412 4263eca7 276e33a7 2c170e4c 36391465 2e808e08 A: hmac-sha1 3eae5cc8 83896894 53ccb18e bfa23ba0 d4c8fdb8 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:59 2005 current: May 12 10:17:03 2005 diff: 244(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=11 pid=4067 refcnt=0 192.168.1.100 192.168.0.100 ah mode=transport spi=80675908(0x04cf0444) reqid=0(0x00000000) A: hmac-sha1 6dda1c62 afb2e99e d55e320e 7245fdf9 df1a8c61 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:59 2005 current: May 12 10:17:03 2005 diff: 244(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=10 pid=4067 refcnt=0 192.168.1.100 192.168.0.100 esp mode=transport spi=65841791(0x03ecaa7f) reqid=0(0x00000000) E: 3des-cbc 899e241e db481177 88e14620 3fc0eaad dbc3d769 6d10c818 A: hmac-sha1 150afe5b bbd82d7d fb9917cc 28891bb5 828d5315 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:33 2005 current: May 12 10:17:03 2005 diff: 270(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=9 pid=4067 refcnt=0 192.168.1.100 192.168.0.100 ah mode=transport spi=165105177(0x09d74e19) reqid=0(0x00000000) A: hmac-sha1 ce7cc6b4 86b9dfab 67928a3a 71d1b074 d2703603 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:33 2005 current: May 12 10:17:03 2005 diff: 270(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=8 pid=4067 refcnt=0 192.168.0.100 192.168.1.100 esp mode=transport spi=113731845(0x06c76905) reqid=0(0x00000000) E: 3des-cbc 38b74d9c 71b443d6 23f383db b63f7c19 ef6b506f adf34372 A: hmac-sha1 34884873 8e20a3b3 5dd9a80a 07b7597e 6d578b8b seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:01 2005 current: May 12 10:17:03 2005 diff: 242(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=7 pid=4067 refcnt=0 192.168.0.100 192.168.1.100 ah mode=transport spi=12584766(0x00c0073e) reqid=0(0x00000000) A: hmac-sha1 617f44e0 f22ab543 9728e3cd 3739d7b7 11e73e02 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:01 2005 current: May 12 10:17:03 2005 diff: 242(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=6 pid=4067 refcnt=0 192.168.0.100 192.168.1.100 esp mode=transport spi=34968109(0x0215922d) reqid=0(0x00000000) E: 3des-cbc 5ed41af5 e628d951 6ca215e2 3b82e59f 86e09e5b b4a156bf A: hmac-sha1 2aa99103 66c4332c b3b15a5c 032b1b69 4d23b730 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:00 2005 current: May 12 10:17:04 2005 diff: 244(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=5 pid=4067 refcnt=0 192.168.0.100 192.168.1.100 ah mode=transport spi=168473301(0x0a0ab2d5) reqid=0(0x00000000) A: hmac-sha1 dc9ebbf3 c3e56d7c 0ee1a666 389952f0 86b4ac91 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:00 2005 current: May 12 10:17:04 2005 diff: 244(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=4 pid=4067 refcnt=0 192.168.0.100 192.168.1.100 esp mode=transport spi=220511737(0x0d24bdf9) reqid=0(0x00000000) E: 3des-cbc cb79158c 491dad95 6641aea1 efebd408 72499132 caeb2692 A: hmac-sha1 5b5b2a54 a40b8b84 3899e885 2f2bfd0a dbbe71a0 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:59 2005 current: May 12 10:17:04 2005 diff: 245(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=3 pid=4067 refcnt=0 192.168.0.100 192.168.1.100 ah mode=transport spi=142149191(0x08790647) reqid=0(0x00000000) A: hmac-sha1 4ed8c044 b86f1911 53894bee 2260bd8a 0fb04d51 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:59 2005 current: May 12 10:17:04 2005 diff: 245(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=2 pid=4067 refcnt=0 192.168.0.100 192.168.1.100 esp mode=transport spi=227305975(0x0d8c69f7) reqid=0(0x00000000) E: 3des-cbc 562387fe f3e94364 36132d0c 9ab1380d 252026c0 3644312a A: hmac-sha1 3c358c51 6aa4cec0 dca37231 28398fec c1838efa seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:33 2005 current: May 12 10:17:04 2005 diff: 271(s) hard: 3600(s) soft: 2880(s) last: May 12 10:12:59 2005 hard: 0(s) soft: 0(s) current: 360(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 3 hard: 0 soft: 0 sadb_seq=1 pid=4067 refcnt=0 192.168.0.100 192.168.1.100 ah mode=transport spi=197556428(0x0bc678cc) reqid=0(0x00000000) A: hmac-sha1 144d8dca 0554524c 99eb29e7 fd697910 f5dfadef seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:33 2005 current: May 12 10:17:04 2005 diff: 271(s) hard: 3600(s) soft: 2880(s) last: May 12 10:12:59 2005 hard: 0(s) soft: 0(s) current: 432(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 3 hard: 0 soft: 0 sadb_seq=0 pid=4067 refcnt=0 host-b# setkey -D 192.168.1.100 192.168.0.100 esp mode=transport spi=97213500(0x05cb5c3c) reqid=0(0x00000000) E: 3des-cbc 985da9c3 28e552dc c477cdce 66512651 13afbca9 a1984bcf A: hmac-sha1 71458a89 4717fcf1 781c4588 930e9b5f 98f3376a seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:01 2005 current: May 12 10:17:11 2005 diff: 250(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=11 pid=2730 refcnt=0 192.168.1.100 192.168.0.100 esp mode=transport spi=23039671(0x015f8eb7) reqid=0(0x00000000) E: 3des-cbc dc20f03c 9c483a84 f4b28e0e 42def71a e88720f1 9c0ac34f A: hmac-sha1 64caede6 fda16b7d 0a94c78c a0da465d 72421e78 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:00 2005 current: May 12 10:17:11 2005 diff: 251(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=10 pid=2730 refcnt=0 192.168.1.100 192.168.0.100 esp mode=transport spi=198278184(0x0bd17c28) reqid=0(0x00000000) E: 3des-cbc b6a82412 4263eca7 276e33a7 2c170e4c 36391465 2e808e08 A: hmac-sha1 3eae5cc8 83896894 53ccb18e bfa23ba0 d4c8fdb8 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:59 2005 current: May 12 10:17:11 2005 diff: 252(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=9 pid=2730 refcnt=0 192.168.1.100 192.168.0.100 esp mode=transport spi=65841791(0x03ecaa7f) reqid=0(0x00000000) E: 3des-cbc 899e241e db481177 88e14620 3fc0eaad dbc3d769 6d10c818 A: hmac-sha1 150afe5b bbd82d7d fb9917cc 28891bb5 828d5315 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:33 2005 current: May 12 10:17:11 2005 diff: 278(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=8 pid=2730 refcnt=0 192.168.0.100 192.168.1.100 esp mode=transport spi=113731845(0x06c76905) reqid=0(0x00000000) E: 3des-cbc 38b74d9c 71b443d6 23f383db b63f7c19 ef6b506f adf34372 A: hmac-sha1 34884873 8e20a3b3 5dd9a80a 07b7597e 6d578b8b seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:01 2005 current: May 12 10:17:11 2005 diff: 250(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=7 pid=2730 refcnt=0 192.168.0.100 192.168.1.100 ah mode=transport spi=12584766(0x00c0073e) reqid=0(0x00000000) A: hmac-sha1 617f44e0 f22ab543 9728e3cd 3739d7b7 11e73e02 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:01 2005 current: May 12 10:17:11 2005 diff: 250(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=6 pid=2730 refcnt=0 192.168.0.100 192.168.1.100 esp mode=transport spi=34968109(0x0215922d) reqid=0(0x00000000) E: 3des-cbc 5ed41af5 e628d951 6ca215e2 3b82e59f 86e09e5b b4a156bf A: hmac-sha1 2aa99103 66c4332c b3b15a5c 032b1b69 4d23b730 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:00 2005 current: May 12 10:17:11 2005 diff: 251(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=5 pid=2730 refcnt=0 192.168.0.100 192.168.1.100 ah mode=transport spi=168473301(0x0a0ab2d5) reqid=0(0x00000000) A: hmac-sha1 dc9ebbf3 c3e56d7c 0ee1a666 389952f0 86b4ac91 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:13:00 2005 current: May 12 10:17:11 2005 diff: 251(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=4 pid=2730 refcnt=0 192.168.0.100 192.168.1.100 esp mode=transport spi=220511737(0x0d24bdf9) reqid=0(0x00000000) E: 3des-cbc cb79158c 491dad95 6641aea1 efebd408 72499132 caeb2692 A: hmac-sha1 5b5b2a54 a40b8b84 3899e885 2f2bfd0a dbbe71a0 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:59 2005 current: May 12 10:17:11 2005 diff: 252(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=3 pid=2730 refcnt=0 192.168.0.100 192.168.1.100 ah mode=transport spi=142149191(0x08790647) reqid=0(0x00000000) A: hmac-sha1 4ed8c044 b86f1911 53894bee 2260bd8a 0fb04d51 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:59 2005 current: May 12 10:17:11 2005 diff: 252(s) hard: 3600(s) soft: 2880(s) last: hard: 0(s) soft: 0(s) current: 0(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 0 hard: 0 soft: 0 sadb_seq=2 pid=2730 refcnt=0 192.168.0.100 192.168.1.100 esp mode=transport spi=227305975(0x0d8c69f7) reqid=0(0x00000000) E: 3des-cbc 562387fe f3e94364 36132d0c 9ab1380d 252026c0 3644312a A: hmac-sha1 3c358c51 6aa4cec0 dca37231 28398fec c1838efa seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:33 2005 current: May 12 10:17:11 2005 diff: 278(s) hard: 3600(s) soft: 2880(s) last: May 12 10:12:58 2005 hard: 0(s) soft: 0(s) current: 192(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 3 hard: 0 soft: 0 sadb_seq=1 pid=2730 refcnt=0 192.168.0.100 192.168.1.100 ah mode=transport spi=197556428(0x0bc678cc) reqid=0(0x00000000) A: hmac-sha1 144d8dca 0554524c 99eb29e7 fd697910 f5dfadef seq=0x00000000 replay=4 flags=0x00000000 state=mature created: May 12 10:12:33 2005 current: May 12 10:17:11 2005 diff: 278(s) hard: 3600(s) soft: 2880(s) last: May 12 10:12:58 2005 hard: 0(s) soft: 0(s) current: 300(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 3 hard: 0 soft: 0 sadb_seq=0 pid=2730 refcnt=0

2 1

CentOS Live?
by Dominik Składanowski 12 May '05

12 May '05

Hello list. I've just read this news (http://distrowatch.com/?newsid=02638) - in my opinion very good idea. What do you think? Regards.

8 12

Re: Hardware RAID Controller -- Risers and 66+MHz ...
by Bryan J. Smith <b.j.smith＠ieee.org> 12 May '05

12 May '05

From: Lee W <centos-list(a)unassemble.co.uk> > Shouldn't be a problem as it's probably going in a 1U Rack case > with a Riser/extender card. Be sure to hit the 3Ware site to read about _incompatible_ risers! At 66+MHz PCI/PCI-X signaling, many cards/risers have issues. Many are only designed for 33MHz. -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

RE: [CentOS] About strongs passwords!
by Bryan J. Smith <b.j.smith＠ieee.org> 12 May '05

12 May '05

israel.garcia(a)cimex.com.cu wrote: > Here is my question, I have a DataBase CentOS server working with > about 150 users connected via ssh, so I want to set up for all users > strongs passwords ... cut ... In addition to the password considerations, I recommend the following. 1) Disable SSH v1 access 2) Disable all authentication, including password authentication, except public key authentication. 3) Generate all public keys with passphrases. Alternatively, if you have either a UNIX Kerberos realm, or you are already synchronizing UNIX and ADS authentication, consider Kerberos authentication instead (e.g., one-way ADS trust, if you are are already using ADS for authentication of UNIX). Otherwise, public key would be far better than password authentication. -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

WIFI
by cents＠samson-solutions.ca 12 May '05

12 May '05

Does anyone know of an easy to install/use WIFI PCMCIA card for Linux. I am currently running Cent OS 4.0 on my laptop and I have a D-Link DWL-G650 Ver B which will run off of the madwifi Beta drivers. Now I know I can get this to work but I would feel a little better using software that is in production development. Any suggestions and input would be helpful on my new card purchase. The card should be able to run 802.11G/B and be compatible with most of the airsnort type tools. This will be used for wireless troubleshooting, site surveys etc. Thanks Steve ---------------------------------------------------------------------- This mail sent through Horde-Toaster (http://qmailtoaster.clikka.com/)

2 1

Upgrade from yum
by israel.garcia＠cimex.com.cu 12 May '05

12 May '05

Can I upgrade my CentOS using yum? Regards, israel

4 3

Hardware RAID Controller
by Lee W 12 May '05

12 May '05

Hi Everyone, Has anyone had any experience of using the Promise FastTrak SX4000 or SuperTrak SX6000 IDE RAID Controllers under Centos (if it matters I'm using version 4). I've seen it listed on linuxcompatible.org as working but would prefer to find out any first-hand experince before I buy. I'm looking to build a new mini server based on Mini-ITX and have found a great 1U case that support upto 4 IDE drives. It would be good to muck around with hardware RAID. If not, can anyone suggest another make of RAID Controller that will support upto 4 IDE RAIDS (preferably with support for RAID 5). And is also available in the UK. Thanks in advance. Regards Lee

11 20

centos 3.5 ?
by Ceg Ryan 12 May '05

12 May '05

Hi all, I see centos 3.5Beta in the beta.centos.org. Is this the next release of version 3 ? Strangely, 3.4 is not the final release of version 3 ? Thx Ceg Ryan

7 16

RE: [CentOS] About strongs passwords!
by Marc Powell 12 May '05

12 May '05

> -----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf Of israel.garcia(a)cimex.com.cu > Sent: Thursday, May 12, 2005 8:35 AM > To: centos(a)centos.org > Subject: [CentOS] About strongs passwords! > > List, It's amazing the soon the messages on this list are answered, I am > glad and I want to thank you all for that... > > Here is my question, I have a DataBase CentOS server working with about > 150 users connected via ssh, so I want to set up for all users strongs > passwords, I mean, 8 or more caracters, with ,.;* , ect....... Is there > some option, bash command which do that? I use apg. It's very flexible allowing you to create secure, yet pronounceable passwords that are easy to remember, as well as completely random passwords using special symbols and mixed case. http://www.adel.nursat.kz/apg/ -- Marc

1 0

Unsupported Kernel for X86_64 and i386
by Johnny Hughes 12 May '05

12 May '05

All, There have been many requests for added kernel features that the upstream provider left out of the standard kernel. (ReiserFS, Video4Linux, Firewire support, XFS, NTFS, JFS, etc.). We want the main release CDs to contain a standard kernel for compatibility and stability reasons. CentOS is created as a clone, and it needs to be as close as possible to the upstream distro. That being said, the 2.6.9 kernel has lots of features that are not turned on in the default kernel. Until now the answer has been ... if you want that, you must make recompile the kernel yourself. Well ... now there is another option for x86_64 and i386. I have created an unsupported kernel for the CentOS-4 i386 and x86_64 distros. It is in the CentOS-Plus repository and is the latest released CentOS-4 Kernel (currently 2.6.9-5.0.5.EL), with the configuration files modified to turn on optional modules. It is called: kernel-2.6.9-5.0.5.106.unsupported Turned on (as kernel modules) are the following: NTFS XFS JFS ReiserFS UFS (FreeBSD default file system ... Read Only) BeOS (Read Only) Video4Linux and all supported cards (including Video, Audio, Radio and DVB) all Video Cards all Alsa Sound Cards Support for AppleTalk and DECNET ----------------------- I am running this kernel on 5 machines for testing and have had no problems ... but it is NOT officially supported by CentOS {even less than the other stuff :)} You should evaluate whether you want to use this kernel ... and you should test it appropriately prior to putting it on any important machines :) We are also working on a Single CD version of CentOS-4 (similar to the CentOS-3.4 Server ISO). This CD will have as much stuff as we can fit on a single CD that can be used to set up a server (no X though). All other programs will be available via the standard CentOS repositories using the "yum groupinstall" feature. It is my plan to take that CentOS-4 Single Server Edition CD as a template and make one (called Single Server unsupported) that will boot with this kernel (and contain XFS tools, JFS tools, ReiserFS tools) so that people who know how can install reisferfs, XFS, or JFS partitions via the command line at install time. If you are going to use this kernel, you need to enable the CentOS-Plus repo from your chosen install method ... for yum, you can do it via the command line: yum --enablerepo=centosplus install kernel The tools for XFS, JFS, and ReiserFS are also now in the CentOS-Plus repository. This should make CentOS a more robust desktop solution :) Some notes: I will update this kernel after normal kernel updates have been completed, it may be a day or 2 later. So if you are using features of this kernel (like ReiserFS, XFS, etc.) then you may want to turn off auto kernel updates, as a new version of the main kernel will be installed when available. You can do this in Up2date, yum and apt inside the config files. You can also get it via http from your favorite CentOS mirror in the CentOS-Plus repository or from here (i386): http://mirror.centos.org/centos/4/centosplus/i386/RPMS/ or here (x86_64): http://mirror.centos.org/centos/4/centosplus/x86_64/RPMS/ Source RPM is here: http://mirror.centos.org/centos/4/centosplus/SRPMS/ Enjoy, Johnny Hughes

9 8

RE: [CentOS] Hewlett Packard Server support packs
by Mark A. Lewis 12 May '05

12 May '05

I recently spent 2 days fighting with a bug in CentOS 4 relating to the PSP for RHEL4. I am still putting the details together, but there is definitely a bug that impacts the Qlogic 2214 HBA driver under CentOS 4, but not RHEL 4. That being said, I was able to install PSPs on a DL580 G2 under Centos 3 and 4 by changing redhat/centos-release. > -----Original Message----- > From: centos-bounces(a)centos.org > [mailto:centos-bounces@centos.org] On Behalf Of Chris Hammond > Sent: Wednesday, May 11, 2005 12:40 PM > To: CentOS mailing list > Subject: [CentOS] Hewlett Packard Server support packs > > I am trying to install the HP PSP on a CentOS 3.4 server but > it keeps telling me, only on certain rpms mind you, that the > OS is not supported. I have made the modifications to > redhat-release which cleared up some of the initial errors I > was having but not all. Where else would the rpms be getting > the OS info from? Better yet, has anyone managed to get the > Linux PSP to install on a CentOS box? > > Thanks > Chris > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos > > -- > This message has been scanned for viruses and dangerous > content by MailScanner, and is believed to be clean. > > -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

2 1

Software RAID on Centos-4/Proliant ML330 (FINAL)
by Nigel Kendrick 12 May '05

12 May '05

Thanks again to everyone who offered help with this - I have ended up with one drive on the integrated MegaRAID controller and one on the ITE8212 plug-in card and this works fine. Nigel

1 0

CentOS-announce Digest, Vol 3, Issue 5
by centos-announce-request＠centos.org 12 May '05

12 May '05

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2005:429 Critical CentOS 4 i386 gaim - security update (Karanbir Singh) 2. CESA-2005:429 Critical CentOS 3 x86_64 gaim - security update (Tru Huynh) 3. CESA-2005:429 Critical CentOS 3 i386 gaim - security update (Tru Huynh) 4. CESA-2005:417 Moderate CentOS 4 i386 tcpdump - security update (Karanbir Singh) 5. CESA-2005:421 Moderate CentOS 3 x86_64 tcpdump - security update (Tru Huynh) 6. CESA-2005:421 Moderate CentOS 3 i386 tcpdump - security update (Tru Huynh) 7. CESA=2004:412 Moderate CentOS 3 x86_64 openmotif - security update (Tru Huynh) 8. CESA=2004:412 Moderate CentOS 3 i386 openmotif - security update (Tru Huynh) 9. CESA-2005:429 Critical CentOS 4 x86_64 gaim - security update (Johnny Hughes) 10. CESA-2005:417 Moderate CentOS 4 x86_64 tcpdump - security update (Johnny Hughes) 11. CESA-2005:412 Moderate CentOS 4 i386 and x86_64 openmotif - security update (Johnny Hughes) 12. CESA-2005:417 Moderate CentOS 3 ia64 tcpdump - security update (Pasi Pirhonen) 13. CESA-2005:417 Moderate CentOS 4 ia64 tcpdump - security update (Pasi Pirhonen) 14. CESA-2005:429 Moderate CentOS 3 ia64 gaim - security update (Pasi Pirhonen) 15. CESA-2005:429 Moderate CentOS 4 ia64 gaim - security update (Pasi Pirhonen) 16. CESA-2005:417 Moderate CentOS 3 s390(x) tcpdump - security update (Pasi Pirhonen) 17. CESA-2005:412 Moderate CentOS 4 ia64 openmotif - security update (Pasi Pirhonen) 18. CESA-2005:412 Moderate CentOS 3 ia64 openmotif - security update (Pasi Pirhonen) 19. CESA-2005:432-01: Critical CentOS 2 i386 gaim security update (John Newbigin) 20. CESA-2005:429 Critical CentOS 3 s390(x) gaim - security update (Pasi Pirhonen) 21. CESA-2005:412 Moderate CentOS 3 s390(x) openmotif - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Wed, 11 May 2005 15:48:17 +0100 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2005:429 Critical CentOS 4 i386 gaim - security update To: centos-announce(a)centos.org Message-ID: <42821B31.7060202(a)centos.org> Content-Type: text/plain; charset=us-ascii -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CentOS Errata and Security Advisory CESA-2005:429 https://rhn.redhat.com/errata/RHSA-2005-429.html The following updated files have been uploaded and are currently syncing to the mirrors: i386: gaim-1.2.1-6.el4.i386.rpm src: gaim-1.2.1-6.el4.src.rpm To get the update run : yum update gaim - -- Karanbir Singh <kbsingh(a)centos.org> Web: http://www.centos.org/ irc: #centos @ irc.freenode.net -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (GNU/Linux) iD8DBQFCghsxI2ImR47onK8RAhyrAJ0eBu2KEOEtRkJMFv3XG3qcYh2niACfYA1Q TvOIKAOLI+TBJUUtJYHgBXk= =MvEG -----END PGP SIGNATURE----- ------------------------------ Message: 2 Date: Wed, 11 May 2005 16:59:00 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2005:429 Critical CentOS 3 x86_64 gaim - security update To: centos-announce(a)centos.org Message-ID: <20050511145900.GA14981(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2005:429 gaim security update for CentOS 3 x86_64: https://rhn.redhat.com/errata/RHSA-2005-429.html The following updated file has been uploaded and is currently syncing to the mirrors: x86_64: updates/x86_64/RPMS/gaim-1.2.1-6.el3.x86_64.rpm source: updates/SRPMS/gaim-1.2.1-6.el3.src.rpm You may update your CentOS-3 x86_64 installations by running the command: yum update gaim Tru -- Tru Huynh (CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

Hewlett Packard Server support packs
by Chris Hammond 12 May '05

12 May '05

I am trying to install the HP PSP on a CentOS 3.4 server but it keeps telling me, only on certain rpms mind you, that the OS is not supported. I have made the modifications to redhat-release which cleared up some of the initial errors I was having but not all. Where else would the rpms be getting the OS info from? Better yet, has anyone managed to get the Linux PSP to install on a CentOS box? Thanks Chris

4 6

RE: [CentOS] LAN based In/Out board
by Marc Powell 11 May '05

11 May '05

Did either of you see these when you were searching? http://freshmeat.net/search/?q=in+out+board&section=projects&Go.x=0&Go.y =0 -- Marc > -----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf Of Ty R. McMichael > Sent: Wednesday, May 11, 2005 11:54 AM > To: CentOS mailing list > Subject: Re: [CentOS] LAN based In/Out board > > Greg, > > > I apologize for any ambiguity; your description is exactly what I am > looking for. Thanks > > Ty > > > On Tue, 2005-05-10 at 22:19 -0600, Greg Knaddison wrote: > > On 5/10/05, Ty R. McMichael <ty_mcmichael(a)po.cfec.state.ak.us> wrote: > > > Can anyone recommend an electronic In/Out board for a small office (32 > > > people). Needs to run on a 3.4 CentOS server, preferably free. :) > > > > > > I'm not hung up on the technology, could be Java, Perl, PHP, etc. > > > > > Are you looking for an application to run on an intranet that would > > keep track of where the people in your office are currently located? > > So that someone could update their status as "out to lunch until 1:00" > > or "out for doctor's appointment from 2:00 to 3:30" or something like > > that? It's not clear to me from your post what you are looking for. > > > > If that _is_ what you are looking for...I don't know of it and > > couldn't find it anywhere. I'd be interested in whatever you find. > > > > Greg > > _______________________________________________ > > CentOS mailing list > > CentOS(a)centos.org > > http://lists.centos.org/mailman/listinfo/centos > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos

2 1

Re: [CentOS] CentOS Live?
by Bryan J. Smith <b.j.smith＠ieee.org> 11 May '05

11 May '05

From: Johnny Hughes <mailing-lists(a)hughesjr.com> > I was looking at that :) > Question is ... does it really serve a purpose? > The purpose of the distro is to install on servers and workstations. A > live CD doesn't do that. Knoppix is very good in this market, so I > think the usefulness is limited. Especially since there are already "Fedora Live" CDs anyway. One of the reasons for RHEL is for a fixed, integrated tested package set based on but beyond that of Fedora Core. If I want to start playing around with a "customized" Fedora-based distro, then I'm just going to go with Fedora itself, instead of RHEL (or CentOS). > BUT ... one good thing it would do is allow you an easy way to see if > your hardware works without downloading the whole shebang ... which is a > positive. "Fedora Live CDs" should do the same. Just line up the kernel version. > We may look at doing this after CentOS-4.1 is done and I have some of > the automated scripts working the way I want. The more CentOS would get away from RHEL, the more I'd just do my own configuration management from Fedora Core instead. I mean, I've built equivalent APT-RPM repositories of Fedora Core by lining up the packages. The reason why I like to use CentOS is so I don't have to do my own configuration management of Fedora Core to get the same thing of RHEL. It saves me a lot of effort. -- Bryan J. Smith mailto:b.j.smith@ieee.org

2 1

Fwd: usb 2.0 hardware problem
by Michel Daggelinckx 11 May '05

11 May '05

---------- Forwarded message ---------- From: Michel Daggelinckx <03taxi(a)gmail.com> Date: May 11, 2005 11:43 PM Subject: usb 2.0 hardware problem To: CentOS discussion and information list <centos(a)caosity.org> i just installed a trust usb 2.0 card in my dell poweredge 2400 centos 3.4 detected the card and loaded all needed kernel modules after this the systeems slowed down to almost being unuseable. also it detects plugged in devices (usb thumbrive and samsung usb dvd writer) but doesn't allow acces (to thumbdrive) or just goes into error (samsung dvd writer). any ideas

1 0

Re: [CentOS] SATA RAID on CentOS!
by Bryan J. Smith <b.j.smith＠ieee.org> 11 May '05

11 May '05

From: israel.garcia(a)cimex.com.cu > I want to install CentOS 4.0 on my new server (two SATA hdds, Intel 865 > mainboard), now, I want to configure a RAID 1 using this hardware..., my > question is: > 1. Setting up a RAID 1 on SATA hdds is different from a normal hdds > (PATA)? SATA channels are designed to be legacy compatible with software for legacy ATA channels, _unless_ you put them in Advanced Host Controller Interface mode. In AHCI, instead of individual I/O ports, the system presents a single device of up to 32 devices, along with some capabilities for each drive (e.g., native command queuing, NCQ). In legacy ATA mode, each drive is assigned a device. AHCI support varies in Linux right now (i.e., don't use yet!). True Hardware ATA RAID controllers provide queuing natively, since they are queuing with an on-board intelligence (microcontroller or ASIC), and not just a "dumb" interface to the drive. In essence, the "intelligence" moves from the driver to the on-board firmware, and the OS driver becomes "dumb" (and GPL as a result ;-). > 2. Is there some SATA RAID Linux Howto available? The same HOWTOs/documentation for LVM/MD applies regardless of ATA, SATA or SCSI when using software LVM and/or MD. -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

Re: [CentOS] Hewlett Packard Server support packs
by Bryan J. Smith <b.j.smith＠ieee.org> 11 May '05

11 May '05

From: Johnny Hughes <mailing-lists(a)hughesjr.com> > maybe /etc/issue and /etc/issue.net /etc/issue and /etc/issue.net are typically generated on Fedora-based systems in /etc/rc.d/rc.sysinit at boot-time using uname and/or /etc/*-release. -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

Re: [CentOS] Hardware RAID Controller
by Bryan J. Smith <b.j.smith＠ieee.org> 11 May '05

11 May '05

Lee W wrote > However I've noticed that it is a 64-Bit PCI Card. Can I still use this > in a 32-Bit Slot. I think that I read something once that said it would > work but at a reduced bandwidth. Joshua Baker-LePain wrote: >Page 16 of the Installation Guide says a 32bit slot is fine. From: Peter Farrow <peter(a)farrows.org> > I use one of my 8500-8s in a 32bit slot on an MSI Dual PIII > motherboard with no problems... Two things of note: 1) 66MHz capable cards The "6" in 7506 and 8506 indicate it is 66MHz capable. The 7500 (fka 7850) and 8500 are 33MHz capable, as are all prior models. All 7000/8000 series cards are 64-bit _except_ the 7000-2 (fka 7200) and 7006-2 (66MHz, but 32-bit). 2) Multiple PCI/PCI-X busses The most important consideration beyond bandwidth is the PCI bus. I have seen far too many people stick a 3Ware card into a system that has a _single_ 32-bit@33MHz PCI bus. Back in the 1999-2001 timeframe, I made a buttload of money just coming in and ripping out i440BX and i440GX mainboards and putting in ServerWorks ServerSet IIILE/HE mainboards for Pentium II/III systems. 3-4x performance is achievable by just getting the storage and NIC on separate PCI (or PCI-X) busses. Especially at today's disk transfer rates and GbE on the same system. [ SIDE NOTE: A good GbE card with 256KB SRAM and using 9000 byte jumbo frames also helps. ] -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

Re: [CentOS] Re: Hardware RAID Controller -- not a "bug"
by Bryan J. Smith <b.j.smith＠ieee.org> 11 May '05

11 May '05

From: Joshua Baker-LePain <jlb17(a)duke.edu> > I'm in the midst of testing a dual 9500-12 based system, and I've got all > sorts of results (I posted tiobench numbers for XFS and ext3 recently). Until the Escalade 9500S series matures, I've been recommending the following: 3Ware Escalade 7506/8506 for RAID-10. 3Ware Escalade 7506/8506 for RAID-5 when it is largely a read-only setup. LSI Logic MegaRAID SATA 300-8X (XScale) for RAID-5. Unless you absolutely need the maximum disk efficiency of RAID-5, or you have 99% reads (e.g., typical MySQL Internet server), then RAID-10 is often far better than RAID-5. -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

Re: [CentOS] SATA RAID on CentOS!
by Bryan J. Smith <b.j.smith＠ieee.org> 11 May '05

11 May '05

From: Aleksandar Milivojevic <amilivojevic(a)pbl.ca> > I believe Intel 865 uses ICH5? If so, it is a sofware RAID emulation in > BIOS. You do not have RAID in hardware. It's just a marketing trick > that has nothing to do with reality. Exactomundo. Even AHCI is still software-driven. It is my sincerest hope that the term "FRAID" (or something else) catches on to describe this "Free RAID" / "trick BIOS" approach. -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

SATA RAID on CentOS!
by israel.garcia＠cimex.com.cu 11 May '05

11 May '05

I want to install CentOS 4.0 on my new server (two SATA hdds, Intel 865 mainboard), now, I want to configure a RAID 1 using this hardware..., my question is: 1. Setting up a RAID 1 on SATA hdds is different from a normal hdds (PATA)? 2. Is there some SATA RAID Linux Howto available? Thanks in advance israel

2 1

Re: [CentOS] Software RAID on Centos 4 - new issue
by Bryan J. Smith <b.j.smith＠ieee.org> 11 May '05

11 May '05

From: Aleksandar Milivojevic <amilivojevic(a)pbl.ca> > MegaRAID drivers (and hardware they drive) doesn't have very bright > history. When it works, it works. When it doesn't work, you are simply > out of luck. From what you wrote, seems you belong in "out of luck" > category. > BTW, shouldn't MegaRAID cards be hardware RAID? Many are, but not all. The ones that do have an Intel IOP 8030# (i960-based) or 8032#/8033# (StrongARM/XScale-based). > If you configure RAID in card's BIOS, instead of using software RAID, > does it than work correctly? The BIOS is _only_ for 16-bit Int13h (interupt 13 hexadecimal) services. I.e., boot-time and DOS (including DOS7 aka Win9x/Me in "compatibiltiy mode"). The presence of a BIOS does _not_ mean it's "hardware" RAID. In fact, that's how 98% of the "FRAID" cards work -- totally _useless_ once a 32/64-bit kernel boots. -- Aleksandar Milivojevic <amilivojevic(a)pbl.ca> Pollard Banknote Limited Systems Administrator 1499 Buffalo Place Tel: (204) 474-2323 ext 276 Winnipeg, MB R3T 1L7 _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos -- Bryan J. Smith mailto:b.j.smith@ieee.org

1 0

Yum repomd.xml error
by Alex White 11 May '05

11 May '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 List, I searched google for this error, but apparently I'm either lacking the necessary 1337 skillz, or you know I just am not gettin' a google friendly search put into it. The error is below. [prata@crane ~]# sudo yum update Setting up Update Process Setting up Repos http://apt.sw.be/redhat/el4/en/i386/dag/repodata/repomd.xml: [Errno 4] IOError: HTTP Error 304: Not Modified Trying other mirror. Cannot open/read repomd.xml file for repository: dag failure: repodata/repomd.xml from dag: [Errno 256] No more mirrors to try. Has anyone else received this error? Did I perhaps miss an announcement? I looked about the list, but nothing regarding this was apparent to me. TIA - -- Alex White prata(a)kuei-jin.org Fingerprint = 58DC 9199 CE73 74E8 B2C1 442E ACF5 92E0 E068 C46C gpg key location: http://www.kuei-jin.org/GPG-KEY-PRATA ~From the withered tree, a flower blooms --Zen Proverb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (GNU/Linux) Comment: Using GnuPG with Red Hat - http://enigmail.mozdev.org iD8DBQFCgMlwrPWS4OBoxGwRArUIAJ9Qr6ST5/9acQD6XwQoaZJ7lI8ztwCeK4pU ukvh3E6R1POrNkAkZRejjFg= =J5+I -----END PGP SIGNATURE-----

8 15

intall problems
by rado 11 May '05

11 May '05

I have just migrated to CentOS 4 from fc3. 3 machines involved k. 2 machines w/raid 1 arrays. Installing these were the problems. 1st machine: just a reg install hda for all the sys and a big drive: hdc for all my backups. This install worked fine. the other 2 machines, w/raid 1 drives...grrrrrrrrrr first of these 2: tried to do a reg install...of course, I had to use disk druid to map out the drives etc then just my reg (everything) install. all seemed to go fine but then when it rebooted...omg!!! 1st thing I saw was a fedora screen then like little things here and there kept referring to fedora...I ended up doing the following install choosing hda drive only...did minimal install (worked fine) then install choosing hdc drive only did minimal install (worked fine) then did my reg disk druid mapping raid 1 arrays and then this install finally worked fine. 2nd machine of these 2: Followed the same procedure as the above and when it rebooted, it hung on (I think it said grub 2) :sigh: I then did the same above procedure as above and it finally took! wow...was not a nice stable experience tho! I keep thinking that it would be a good time if the install systems would do a complete zeroing of the hds, if need be, before formatting the file systems...I just used zeroing as an example but it did kinda freak me out seeing fedora stuff on a brand new CentOS 4 install! thx John Rose -- ...you ever notice the look on your neighbors face when you start talking about linux?

1 0

Kernel panic on Dell 1850
by Jason Dixon 11 May '05

11 May '05

I'm attempting to upgrade to kernel-smp-2.4.21-27.0.4.EL (x86_64) on a Dell 1850. The new kernel is panicing on reboot. When comparing against the current working kernel, I just noticed that we're currently running the "UP" kernel: [root@polaris root]# uname -srvp Linux 2.4.21-27.0.2.EL #1 SMP Wed Jan 19 11:49:43 CST 2005 x86_64 First question... why is the kernel version reporting as SMP when this is the UP kernel package? I thought it might have something to do with HT, but no, it's seeing both processors: [root@polaris root]# cat /proc/cpuinfo | grep proc processor : 0 processor : 1 processor : 2 processor : 3 Second question... has anyone else experienced problems with kernel-smp-2.4.21-27.0.4.EL on x86_64? I installed the newer kernel and it paniced on reboot. I'm offsite without console, so I'll be going in tomorrow to take a closer look. Just FYI, here is the information on each kernel we're working with: [root@polaris root]# rpm -qi kernel Name : kernel Relocations: (not relocatable) Version : 2.4.21 Vendor: CentOS Release : 27.0.2.EL Build Date: Wed 19 Jan 2005 12:56:58 PM EST Install Date: Fri 08 Apr 2005 05:44:16 AM EDT Build Host: head Group : System Environment/Kernel Source RPM: kernel-2.4.21-27.0.2.EL.src.rpm Size : 33381631 License: GPLv2 Signature : DSA/SHA1, Thu 20 Jan 2005 10:52:57 AM EST, Key ID 7049e44d025e513b Summary : The Linux kernel (the core of the Linux operating system) Description : The kernel package contains the Linux kernel (vmlinuz), the core of your CentOS operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc. [root@polaris root]# rpm -qi kernel-smp Name : kernel-smp Relocations: (not relocatable) Version : 2.4.21 Vendor: CentOS-3 Release : 27.0.4.EL Build Date: Fri 22 Apr 2005 06:47:22 PM EDT Install Date: Wed 11 May 2005 10:16:23 AM EDT Build Host: tru64 Group : System Environment/Kernel Source RPM: kernel-2.4.21-27.0.4.EL.src.rpm Size : 26669758 License: GPLv2 Signature : DSA/SHA1, Fri 22 Apr 2005 07:12:58 PM EDT, Key ID 7049e44d025e513b Packager : Pasi Pirhonen <upi(a)iki.fi> - http://iki.fi/upi/ Summary : The Linux kernel compiled for SMP machines. Description : This package includes a SMP version of the Linux kernel. It is required only on machines with two or more CPUs. Install the kernel-smp package if your machine uses two or more CPUs. Thanks in advance, -- Jason Dixon DixonGroup Consulting http://www.dixongroup.net

3 10

LAN based In/Out board
by Ty R. McMichael 11 May '05

11 May '05

All, Can anyone recommend an electronic In/Out board for a small office (32 people). Needs to run on a 3.4 CentOS server, preferably free. :) I'm not hung up on the technology, could be Java, Perl, PHP, etc. Thanks in advance!

3 3

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss