- Discuss - lists.centos.org

Re: PHP version not enough for developers
by Nicholas Geovanis 24 Oct '15

24 Oct '15

Yamaban wrote: >The mess we have now, is not the work of just one change. >What was the rationale to get udev into boot? -- Handling the ever >changing mess of plugable, switchable hardware. Not born and bred >for servers, but for mobiles (phones, tablets, laptops). >Who was the one that decided that "one-size-fits-all" and put that >into server environment? IMHO agreed. I believe that there is a perceived convergence of "needs" between (call it...) more-mobile personal linux and _virtualised_ server linux. If we can create a linux VM in under 5 minutes, "we" expect that it will boot-up without the sys admin's intervention. Then "we" expect that we can migrate it to newer hardware without manual reconfiguration. But returning to PHP: If apps are developed without real separation between user interface and back-end, then the back-end will be victimised by the relative and inherent instability of the front-end. The web servers then really become part of the front-end and must be handled as such. I would argue that this lack of separation between front-end and web server is a feature of the WWW and its protocols, we cannot escape it. So no surprise that most data centers leave the web servers outside or mostly-outside the network perimeter.

1 0

OpenSSL and OpenSSH on CentOS (FIPS enabled)
by Ning Liu (niliu2) 24 Oct '15

24 Oct '15

Hi experts, Current I am doing FIPS gap analysis for our product, can someone help to have a look my questions? Our product is server running under CentOS 6.x, and according to the upstream (RedHat) document, CentOS can be configured to FIPS mode: https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/ht… And according to the CentOS forum, if we enabled FIPS mode on CentOS, then OpenSSL will also be in FIPS mode https://www.centos.org/forums/viewtopic.php?t=9078 Questions: (1) Is that true for OpenSSL ? (2) How about OpenSSH, since we are using SSH for administration, but there is not too much document mentioning OpenSSH Vs. FIPS. But looks like REDHAT already takes care of OpenSSH: https://www.redhat.com/en/about/press-releases/red-hat-completes-fips-1402-… Can I assume that OpenSSH is in FIPS mode when CentOS is in FIPS mode ? Regards, Ning Liu

2 1

CentOS-announce Digest, Vol 128, Issue 8
by centos-announce-request＠centos.org 24 Oct '15

24 Oct '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Release for qemu-kvm-ev from Virtualization SIG (Karanbir Singh) 2. Release for Software Collections SIG content (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 23 Oct 2015 16:50:25 +0100 From: Karanbir Singh <kbsingh(a)centos.org> To: CentOS Announcements List <centos-announce(a)centos.org> Subject: [CentOS-announce] Release for qemu-kvm-ev from Virtualization SIG Message-ID: <562A5741.1050404(a)centos.org> Content-Type: text/plain; charset=utf-8 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I am pleased to announce the immediate availability of qemu-kvm-ev stack for CentOS Linux 7/x86_64. This release is delivered by the work done in the CentOS Virtualization Special Interest Group. In order to use this qemu-kvm version, on an updated CentOS Linux 7/x86_64 machine, you should run: yum install centos-release-qemu-ev yum install qemu-kvm-ev This will bring in all the dependencies needed, including the updated qemu-img tools. This stack is curated as a part of the CentOS Virtualization SIG. You can find more details about this group, including the technologies they are bring to CentOS at their page https://wiki.centos.org/SpecialInterestGroup/Virtualization . This group meetings every alternate Tuesday in #centos-devel on irc.freenode.net, details for the meetings can be found on their SIG pag e. We welcome participation in this group from anyone interested in virtualization and technologies associated with it. Feel free to drop into our list at https://lists.centos.org/mailman/listinfo/centos-virt and say hi. Thanks to Sandro Bonazzola from the oVirt team for building and maintaining this qemu-kvm-ev stack. - -- Karanbir Singh, Project Lead, The CentOS Project +44-207-0999389 | http://www.centos.org/ | twitter.com/CentOS GnuPG Key : http://www.karan.org/publickey.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQEcBAEBAgAGBQJWKldBAAoJEI3Oi2Mx7xbtb3gIAIIF7If9daApI0cZtRPCLNC+ fz6FPpWd/OyBOkyXHFtREp32voR16eq0EMowW8P+mLAB5YJ6iauMfv7vDTHJWAnw n3/x2MSHMsSiRCUUDnLAJHBqqJ4X1YUsNkbHE/f+Vb7AF9w2fuQE7BBUJsjGY5tQ 9V1SIkVSdzaYy2tps7Y6b9iHBk5zpMiWnFdMKfW/QTSoLp9wpi+0jlwx7aebHRAK y1tEIljDEgwSF85IkGkNtah1LGjhiB1J4aseewjKw2azsQ1z41fh4MFnujvPXSbj 40aJoRDcLvtXtaHB5dMMXOeMFkaki4iJxH5GV3H32sGfrLm+7ZuH3n397rfuAvk= =aU1U -----END PGP SIGNATURE----- ------------------------------ Message: 2 Date: Fri, 23 Oct 2015 16:59:11 +0100 From: Karanbir Singh <kbsingh(a)centos.org> To: CentOS Announcements List <centos-announce(a)centos.org> Subject: [CentOS-announce] Release for Software Collections SIG content Message-ID: <562A594F.4020704(a)centos.org> Content-Type: text/plain; charset=utf-8 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Software Collections SIG group is pleased to announce a way of Software Collections packages availability for CentOS Linux users. The Software Collections packages have been build in CentOS Build System [1] and will be available soon on CentOS mirrors. Collections will be released in stacks, as we test and validate them. With Software Collections provided by SCLo SIG, users of CentOS Linux as well as other SIG groups in the CentOS ecosystem will be able to use the latest versions of popular application stacks, databases or other content mainly focused on developers. And they are able to do this without any impact to the system versions already installed on their machine. The SCLo SIG is not only meant to include packages rebuilt from Software Collections that have been made available in Red Hat Software Collections (RHSCL), but it is also meant to include updated content or collections that are not part of the RHSCL portfolio at all. So far, the collections rebuilt by SCLo SIG from RHSCL are devassist09, devtoolset-3, git19, httpd24, mariadb55, maven30, mongodb24, mysql55, nginx14, nginx16, nodejs010, perl516, php54, php55, postgresql92, python27, python33, rh-java-common, rh-mariadb100, rh-mongodb26, rh-mysql56, rh-passenger40, rh-perl520, rh-php56, rh-postgresql94, rh-python34, rh-ror41, rh-ruby22, ror40, ruby193, ruby200, thermostat1 and v8314. With Software Collections that are not part of RHSCL (so far sclo-vagrant1 collection), both CentOS Linux and RHEL users will be provided by content that is not available on those platforms otherwise. Getting started with Software collections: On an updated CentOS Linux 7/x86_64 machine run: yum install centos-release-scl This will enable the right repositories, and bring any metadata needed to validate the content. Learn more about Software Collections concepts at: http://softwarecollections.org/ You can find information on the SIG at https://wiki.centos.org/SpecialInterestGroup/SCLo this includes howto get involved and help with the effort. [1]: http://cbs.centos.org - -- Karanbir Singh, Project Lead, The CentOS Project +44-207-0999389 | http://www.centos.org/ | twitter.com/CentOS GnuPG Key : http://www.karan.org/publickey.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQEcBAEBAgAGBQJWKllPAAoJEI3Oi2Mx7xbtRL8H/2Xt2FVKc+z+GIv8FOZmujRv ou9OqR6UxusgWBPVBaIZ3HTTaVYRkbzt7VpbGcsbxeA6q98LyAonCOn1hoZv+d1x SaItfkDIbz7e4lln7YUvrgfuKlNAZ7kzTXGY301VndZQRV/jU3sf4JuUR9upO9qx J8jkKS+/1g0QP0LRATCafHlDd9PbIirASOmHcc47GyPQRD+683ulwiE7ADFw1gbP CTVlGnXzxnFoJGGO9ZKhV9L374nWMVBqOqIF7oGddrrQ2rmSzI8P7InVjv8cMXVa 78f54x/E7/0jBJe4S0T4Wgy6uHo7y2Al8hto3DOktXnUofaOxZ6v9kGA32Svlpc= =ace6 -----END PGP SIGNATURE----- ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 128, Issue 8 ***********************************************

1 0

EFI netboot to kickstart install
by Grant Street 23 Oct '15

23 Oct '15

Hello All Up until now we have been using standard PXE boot to do kick start installs of centos boxes. With recent machines however they come by default as EFI boot. We can set them to legacy but I would like to solve this before this option goes away. Just wondering if anyone has any experience setting up a net boot server that can be used to kickstart EFI machines? Thanks Grant

5 4

USB audio issues with 6.7
by John R Pierce 23 Oct '15

23 Oct '15

hmmm. my associate needs a USB sound thing in his stack... its always worked before, but when I brought him up on a new system with 6.7, the device is recognized.... usb 1-1: New USB device found, idVendor=08bb, idProduct=2704 usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 usb 1-1: Product: USB Audio DAC usb 1-1: Manufacturer: Burr-Brown from TI usb 1-1: configuration #1 chosen from 1 choice usb 1-1: ctrl urb status -75 received input: Burr-Brown from TI USB Audio DAC as /devices/pci0000:00/0000:00:01.2/usb1/1-1/1-1:1.2/input/input3 generic-usb 0003:08BB:2704.0001: input,hidraw0: USB HID v1.00 Device [Burr-Brown from TI USB Audio DAC ] on usb-0000:00:01.2-1/input2 and it shows up as... $ aplay -l **** List of PLAYBACK Hardware Devices **** card 0: I82801AAICH [Intel 82801AA-ICH], device 0: Intel ICH [Intel 82801AA-ICH] Subdevices: 1/1 Subdevice #0: subdevice #0 card 1: DAC [USB Audio DAC], device 0: USB Audio [USB Audio] Subdevices: 1/1 Subdevice #0: subdevice #0 but when he tries to connect to it, like with this test command... $ mpg123 -a hw:1,0 /audio/36790.mp3 Playing MPEG stream 1 of 1: 36790.mp3 ... [alsa.c:118] error: initialize_device(): cannot set hw params [audio.c:643] error: failed to open audio device [mpg123.c:547] error: failed to reset audio device: Broken pipe and I noted some kernel errors in dmesg... usb 1-1: cannot submit urb 0, error -22: internal error usb 1-1: cannot submit urb 0, error -22: internal error usb 1-1: cannot submit urb 0, error -22: internal error reading a random forum thread found via googling that error suggested someone else had this problem with 6.7 and reverted. I was running $ uname -a Linux kfat.com 2.6.32-573.7.1.el6.x86_64 #1 SMP Tue Sep 22 22:00:00 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux So, reverting to a older kernel fixed this, and it works fine. $ uname -a Linux kfat.com 2.6.32-431.17.1.el6.x86_64 #1 SMP Wed May 7 23:32:49 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux (I had a 6.5 rpm handy). any clues? Linux audio has always been a big black box to me. -- john r pierce, recycling bits in santa cruz

1 0

CentOS-announce Digest, Vol 128, Issue 7
by centos-announce-request＠centos.org 23 Oct '15

23 Oct '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. RDO Liberty released in CentOS Cloud SIG (Alan Pevec) 2. CEBA-2015:1922 CentOS 5 device-mapper-multipath BugFix Update (Johnny Hughes) 3. CESA-2015:1924 Important CentOS 6 qemu-kvm Security Update (Johnny Hughes) 4. CESA-2015:1925 Important CentOS 5 kvm Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 22 Oct 2015 15:36:43 +0200 From: Alan Pevec <alan.pevec(a)redhat.com> To: centos-announce(a)centos.org Subject: [CentOS-announce] RDO Liberty released in CentOS Cloud SIG Message-ID: <5628E66B.8040104(a)redhat.com> Content-Type: text/plain; charset=utf-8 I am pleased to announce the general availability of the RDO build for OpenStack Liberty for CentOS Linux 7 x86_64, suitable for building private, public and hybrid clouds. OpenStack Liberty is the 12th release of the open source software collaboratively built by a large number of contributors around the OpenStack.org project space. The RDO community project ( https://www.rdoproject.org/ ) curates, packages, builds, tests and maintains a complete OpenStack component set for RHEL and CentOS Linux and is a founding member of the CentOS Cloud Infrastructure SIG ( https://wiki.centos.org/SpecialInterestGroup/Cloud ). The Cloud Infrastructure SIG focus on delivering a great user experience for CentOS Linux users looking to build and maintain their own onpremise, public or hybrid clouds. In addition to the comprehensive OpenStack services, libraries and clients, this release also provides Packstack, a simple installer for proof-of-concept installations, as small as a single all-in-one box and RDO Manager ( https://www.rdoproject.org/RDO-Manager ) , an OpenStack deployment and management tool for production environments based on the OpenStack TripleO project. ------- QuickStart: Ensure you have a fully updated CentOS Linux 7/x86_64 machine, and run : sudo yum install centos-release-openstack-liberty sudo yum install openstack-packstack packstack --allinone For a more detailed quickstart please refer to the RDO Project hosted guide at https://www.rdoproject.org/QuickStart For RDO Manger consult https://www.rdoproject.org/RDO-Manager page. RDO project is closely tracking upstream OpenStack projects using the Delorean tool[1] which is producing RPM packages from upstream development branches. Since the previous OpenStack Kilo release, RDO is participating in the Cloud SIG and using CentOS provided infrastructure. Towards the end of developement cycle packages are imported into CentOS Cloud SIG buildsystem[2] and get eventually published in Cloud SIG repositories[3]. [1] http://trunk.rdoproject.org/ [2] http://wiki.centos.org/HowTos/CommunityBuildSystem [3] http://mirror.centos.org/centos/7/cloud/x86_64/ -------- Getting Help: The RDO Project provides a Q&A service at ask.openstack.org, for more developer oriented content we recommend joining the mailing list at https://www.redhat.com/mailman/listinfo/rdo-list. Remember to post a brief introduction about yourself and your RDO story. You can also find extensive documentation at https://www.rdoproject.org/Docs. We also welcome comments and requests on the CentOS Mailing lists ( https://lists.centos.org/ ) and the CentOS IRC Channels ( #centos on irc.freenode.net ), however we have a more focused audience in the RDO venues. To get involved in the OpenStack RPM packaging effort, see https://www.rdoproject.org/Get_involved and https://wiki.centos.org/SpecialInterestGroup/Cloud Join us in #rdo on the Freenode IRC network, and follow us at @RDOCommunity on Twitter. And, if you're going to be in Tokyo for the OpenStack Summit next week, join us on Wednesday at lunch for the RDO community meetup ( http://sched.co/4MYy ). I'd like to thank all RDO developers and CentOS Project for their effort and support resulting in this release, especially dmsimard - for continuously improving RDO CI jpena - for keeping Delorean service up and running jruzicka - for the rdopkg auto-magic number80 - for countless reviews and packaging wisdom social - for puppet module mastery trown - for leading RDO Manager side of the show! Special thanks to all the folks who helped with last minute testing in IRC #rdo channel ! Thanks, Alan Pevec Cloud SIG and RDO project member ------------------------------ Message: 2 Date: Thu, 22 Oct 2015 15:20:34 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:1922 CentOS 5 device-mapper-multipath BugFix Update Message-ID: <20151022152034.GA21721(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:1922 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-1922.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 3c96d4c6c99b5f3bc8f1c7f25f027f36fba0874a13df57b5b970f957d5e86e5e device-mapper-multipath-0.4.7-64.el5_11.i386.rpm 4933607a62a3cf3dc2f85f60c542c40a1c11af9190f7d755d3297a2dd74fa5f3 kpartx-0.4.7-64.el5_11.i386.rpm x86_64: 32ae417fbba831a010a7cbca765e6e0627434fb64fd6094e0f13162537bfcdc9 device-mapper-multipath-0.4.7-64.el5_11.x86_64.rpm cf028d56581bf3f069d69b304978acbf19e663ef5a8d3ed113307908a576df49 kpartx-0.4.7-64.el5_11.x86_64.rpm Source: e26389d0fabbbaebd6aa6ce297d9828f58c055d18798123bbda1387ecfd9b3d6 device-mapper-multipath-0.4.7-64.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 3 Date: Thu, 22 Oct 2015 19:30:36 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1924 Important CentOS 6 qemu-kvm Security Update Message-ID: <20151022193036.GA33852(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1924 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1924.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d32c5c64f2a0f4022a010d9404e31ef0ac6363eb3cde9b14b7e117d6672c14ec qemu-guest-agent-0.12.1.2-2.479.el6_7.2.i686.rpm x86_64: c535cec05139f127a6d26e2df47c3833524ac81678e61cc8b8958f0d7090c1a5 qemu-guest-agent-0.12.1.2-2.479.el6_7.2.x86_64.rpm cbfe2c45541f1f5b97780cbd09eb23d4543156e9730c8d09873da706d7388ffe qemu-img-0.12.1.2-2.479.el6_7.2.x86_64.rpm 4cd10f6b78f67f61f46c43f9bc0cdec759a9eae1abdd3e510627dfef04bacee6 qemu-kvm-0.12.1.2-2.479.el6_7.2.x86_64.rpm 3214261a38e162a356e7f96d45a920243f0b160925bbaf6309b5292601b90f74 qemu-kvm-tools-0.12.1.2-2.479.el6_7.2.x86_64.rpm Source: 0b2dc5f1be528fe9711582f4bae0092dfe9de8958d39f5d6bff756f838d1767f qemu-kvm-0.12.1.2-2.479.el6_7.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Thu, 22 Oct 2015 19:35:05 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1925 Important CentOS 5 kvm Security Update Message-ID: <20151022193505.GA14992(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1925 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1925.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: b0a8d2af276b509ddfb3ef7fa12b7cbd3afba9fb5fa1ae9ae38cfbb422ae0ac7 kmod-kvm-83-274.el5.centos.x86_64.rpm 8d31e38f3292cb236f64936500a7348f72150fce7bb8f06c87d7c14741d47306 kmod-kvm-debug-83-274.el5.centos.x86_64.rpm ed8834e21ed763ebf75ac6ba8b82a17ddc282b6aa15393e2f46812460f504f50 kvm-83-274.el5.centos.x86_64.rpm a24df4e5846371f312fd22b26a76b93ab89d9349ee9b82c35273595beef80acd kvm-qemu-img-83-274.el5.centos.x86_64.rpm 2378ff35f2480ca16be825bb66df4d5ae50773f5e0028a1d4e96410555cc3e1c kvm-tools-83-274.el5.centos.x86_64.rpm Source: c97f9162acf233ce5954dbba68437dfcfc7eb7709abacddf1c25b010d9485757 kvm-83-274.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 128, Issue 7 ***********************************************

1 0

Centos 7, ATI/AMD video, fonts
by m.roth＠5-cent.us 22 Oct '15

22 Oct '15

A newly built CentOS 7.1 system, with an ATI/AMD video card. I installed the proprietary driver (this is a Dell, and they had their own rpm), and after I ran aticonfig --initial, init 3, then init 5, and we have a working video. Excerpt the fonts are atrocious. All the letters seem to be missing pixels, so it's as though there's no across, almost. He's running gnome. There has to be a quick fix - a link would be great. Thanks in advance. mark

3 2

PHP version not enough for developers
by Andrew Holway 22 Oct '15

22 Oct '15

Hi, So, it seems that the current version of PHP in Centos 7 is PHP 5.4.16 however this version of PHP stopped getting security support from the PHP people one month ago [1]. Now, our developers want to use the new and shiny PHP because they want to use the latest version of Zend. They are proposing using this package [2] but I never heard of this repo. Other than building the packages ourselves is there a more acceptable way to run a later version of PHP? Thoughts? Experiences? Ramblings? Ta, Andrew [1] - http://php.net/supported-versions.php [2] - https://webtatic.com/packages/php56/

10 20

CentOS7 - Serial Console and Flow Control
by Mike - st257 22 Oct '15

22 Oct '15

Hello List, I'm ironing out details to upgrade a few systems to CentOS7. My servers have BMC with Serial over LAN support. In C5 and C6, I determined how to have BIOS/POST, kernel, and serial console access. I'm reading up on the method to accomplish the pieces with C7. Presently SoL output works, so I see BIOS/POST messages and the GRUB boot list. My changes to enable serial redirection for the kernel do not appear to work. I've made the following changes to GRUB2's /etc/grub/default config file: -- removed rhgb -- added the console= settings to GRUB_CMDLINE_LINUX -- added the last two lines related to serial as detailed here [0]. * Is there an option to enable hardware flow control? I recall having to turn on flow control (agetty -h) to make it behave. No mention of flow control at [1] or [2]. Nor does RHEL7 doc [3] mention it. I've already tweaked the systemd service I generated for ttyS1 (I'm using COM2 for SoL) and added the agetty "-h" option (for hardware flow control). Despite modifying the baud rate to reflect the BMC's settings, I only get symbols (so the console settings are amiss). Would anyone be so kind as to share their experience? What has worked for your BMC/SoL configurations? [0] https://fedoraproject.org/wiki/GRUB_2#Enable_Serial_Console_in_Grub [1] http://www.gnu.org/software/grub/manual/grub.html#Serial-terminal [2] http://www.gnu.org/software/grub/manual/grub.html#serial [3] https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… [4] https://lists.centos.org/pipermail/centos/2014-October/146719.html -- ---~~.~~--- Mike // SilverTip257 //

2 3

Recommendations for image malware detection?
by Kay Schenk 22 Oct '15

22 Oct '15

Hello all -- This is not a CentOS specific question, but I have a feeling some of you are involved in enterprise malware efforts, so here goes. Does anyone have recommendations for malware detection that includes detection in image files? I'm looking for something that could be integrated into a batch cron process as opposed to a client end download check. Thanks. -- ---------------------------------------------------------------------- MzK “The journey of a thousand miles begins with a single step.” --Lao Tzu

3 2

Security implications of openssl098e on CentOS 7
by Nick Bright 22 Oct '15

22 Oct '15

Greetings, I'm working with a new CentOS 7 installation, moving a system up from CentOS 5 due to OpenSSL version 0.9.8e not meeting PCI Compliance requirements. However, while setting up the CentOS 7 environment one of the closed source applications is requiring 0.9.8. The software vendor has advised installing package openssl098e from yum; but I'm hesitant to do so from a compliance and security perspective. What are the implications of this compatibility package? What does it provide/do? Thank you, -- ----------------------------------------------- - Nick Bright - - Vice President of Technology - - Valnet -=- We Connect You -=- - - Tel 888-332-1616 x 315 / Fax 620-331-0789 - - Web http://www.valnet.net/ - ----------------------------------------------- - Are your files safe? - - Valnet Vault - Secure Cloud Backup - - More information & 30 day free trial at - - http://www.valnet.net/services/valnet-vault - ----------------------------------------------- This email message and any attachments are intended solely for the use of the addressees hereof. This message and any attachments may contain information that is confidential, privileged and exempt from disclosure under applicable law. If you are not the intended recipient of this message, you are prohibited from reading, disclosing, reproducing, distributing, disseminating or otherwise using this transmission. If you have received this message in error, please promptly notify the sender by reply E-mail and immediately delete this message from your system.

8 12

CentOS-announce Digest, Vol 128, Issue 6
by centos-announce-request＠centos.org 22 Oct '15

22 Oct '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2015:1919 Important CentOS 6 java-1.8.0-openjdk Security Update (Johnny Hughes) 2. CESA-2015:1920 Critical CentOS 6 java-1.7.0-openjdk Security Update (Johnny Hughes) 3. CESA-2015:1921 Important CentOS 5 java-1.7.0-openjdk Security Update (Johnny Hughes) 4. CESA-2015:1920 Critical CentOS 7 java-1.7.0-openjdk Security Update (Johnny Hughes) 5. CESA-2015:1919 Important CentOS 7 java-1.8.0-openjdk Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 21 Oct 2015 23:13:49 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1919 Important CentOS 6 java-1.8.0-openjdk Security Update Message-ID: <20151021231349.GA4364(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1919 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1919.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b99302119be56a5d3aa457794d7aaa38b9ee29fe8fae77fec9640faeca7cf6e2 java-1.8.0-openjdk-1.8.0.65-0.b17.el6_7.i686.rpm 4632744468cfc4cd0a0c762d60904d26dd2cd04f50ba8fce1b7e7113d0afc5d4 java-1.8.0-openjdk-debug-1.8.0.65-0.b17.el6_7.i686.rpm d077161d31630c046f85c8262241fd83fe4c03e9ccbaf9e39840d2febd9aaae5 java-1.8.0-openjdk-demo-1.8.0.65-0.b17.el6_7.i686.rpm 18847ba867de45bfa567bfea751e55f18bb27ab17ae5ee377174930445bf01a6 java-1.8.0-openjdk-demo-debug-1.8.0.65-0.b17.el6_7.i686.rpm ffe9a334a661c10164ae31d16f4924d25f37cca1ea6e9a36a6bf999911f781cd java-1.8.0-openjdk-devel-1.8.0.65-0.b17.el6_7.i686.rpm 3c8cc1f2f314349289461f24afb36cfe2e9052f9ca86d0076d53ea7873e55aae java-1.8.0-openjdk-devel-debug-1.8.0.65-0.b17.el6_7.i686.rpm 06a8dc8bed67ed2c80ae641a890ed7ccc6677fbcd63515bc4132dd167a654069 java-1.8.0-openjdk-headless-1.8.0.65-0.b17.el6_7.i686.rpm b37f50f9c57c7ebfc9c85c898c4b802f6340f9cb28c4c8a26641243cea9325e2 java-1.8.0-openjdk-headless-debug-1.8.0.65-0.b17.el6_7.i686.rpm 70197b219a776a905d1aadfb92bbe29d1fe6ea6cd789ffeb19514db449019723 java-1.8.0-openjdk-javadoc-1.8.0.65-0.b17.el6_7.noarch.rpm f629d6d4b062d017209a0e6755c0ff6ae25728e3ab49c5e3579af4dc00af8033 java-1.8.0-openjdk-javadoc-debug-1.8.0.65-0.b17.el6_7.noarch.rpm ee5220348f0eb86674f3d5af721c1cb51ecccb700ac433259565c6bc81871526 java-1.8.0-openjdk-src-1.8.0.65-0.b17.el6_7.i686.rpm 590bd566ac88439d3553e5b41728b4319754b72367f528e0baf047c09779e0ce java-1.8.0-openjdk-src-debug-1.8.0.65-0.b17.el6_7.i686.rpm x86_64: 95dd49c3f59834ec1041b57e2dd691764e01b9880a8dc9c6178975448ba90a82 java-1.8.0-openjdk-1.8.0.65-0.b17.el6_7.x86_64.rpm d254057ee70868b9ba7fe29a4c8f4d757bced91db171ed24cc0f6ff558a0ae7c java-1.8.0-openjdk-debug-1.8.0.65-0.b17.el6_7.x86_64.rpm 86d2b9d7ff06663f56d750026ce7b15561c5cbf5545a48b03595343e91c4c3c5 java-1.8.0-openjdk-demo-1.8.0.65-0.b17.el6_7.x86_64.rpm 3ada20716364d358f0a8d5f783dda6c827aa9e7350f1aba591b794e19ae904ab java-1.8.0-openjdk-demo-debug-1.8.0.65-0.b17.el6_7.x86_64.rpm 882aa56d3e3123862a323839790f9bbb9990891ba899cb5bed966073056d8736 java-1.8.0-openjdk-devel-1.8.0.65-0.b17.el6_7.x86_64.rpm 45249f813d5b6fc8b976180f23de852ff5407c6fb67a141af17e4a97cac0dd71 java-1.8.0-openjdk-devel-debug-1.8.0.65-0.b17.el6_7.x86_64.rpm b72bc85f3cd9d7687e5f20f8f06d96c462d81e7535f5c790ac0b4a942461b838 java-1.8.0-openjdk-headless-1.8.0.65-0.b17.el6_7.x86_64.rpm 78338011170fc1dd3fad535da45b4b6adc4b5d5f18e2cf1081174bdc0fe31433 java-1.8.0-openjdk-headless-debug-1.8.0.65-0.b17.el6_7.x86_64.rpm 70197b219a776a905d1aadfb92bbe29d1fe6ea6cd789ffeb19514db449019723 java-1.8.0-openjdk-javadoc-1.8.0.65-0.b17.el6_7.noarch.rpm f629d6d4b062d017209a0e6755c0ff6ae25728e3ab49c5e3579af4dc00af8033 java-1.8.0-openjdk-javadoc-debug-1.8.0.65-0.b17.el6_7.noarch.rpm 39caf4bfd7f16327aebb3710462a388bf9eec72db80f4a6a3dadd265f4d4de63 java-1.8.0-openjdk-src-1.8.0.65-0.b17.el6_7.x86_64.rpm f8b2b97268ab5153a597febee053485a32b6759f5da467d9a41efc2690995df0 java-1.8.0-openjdk-src-debug-1.8.0.65-0.b17.el6_7.x86_64.rpm Source: b32e71cdd92dcd427b30f6a34bba062cde7b06e915db2fddab39bf742ee43c0e java-1.8.0-openjdk-1.8.0.65-0.b17.el6_7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 21 Oct 2015 23:14:14 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1920 Critical CentOS 6 java-1.7.0-openjdk Security Update Message-ID: <20151021231414.GA4484(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1920 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1920.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d72e2661b3d3f63dd3e31e134305c90051559fed089dc7df2f11f42d647d39da java-1.7.0-openjdk-1.7.0.91-2.6.2.2.el6_7.i686.rpm d1e333fdef177c54ed4ad4da2bbaeec79150f27ca845161661689f568ff6a6a6 java-1.7.0-openjdk-demo-1.7.0.91-2.6.2.2.el6_7.i686.rpm ba0e0cdd9252a2c4e40199868178e9c33294813a3a946fb63d6ee6b05e764296 java-1.7.0-openjdk-devel-1.7.0.91-2.6.2.2.el6_7.i686.rpm 96005bc8eb6c0a4e9a13f0fe27aef3fe2b8f117087391c256ae4b67975e4f157 java-1.7.0-openjdk-javadoc-1.7.0.91-2.6.2.2.el6_7.noarch.rpm 90573960582711048b0f60e63cc8e8a220d0d59820c82dbf5e758754dfe1a66c java-1.7.0-openjdk-src-1.7.0.91-2.6.2.2.el6_7.i686.rpm x86_64: fca9faa6089825a6e753a197c1579310d03a2c023a965c0798cd36a5dcc27b8b java-1.7.0-openjdk-1.7.0.91-2.6.2.2.el6_7.x86_64.rpm 6f8e52dff818c08a09b8498d677401205aecc486976571f58f0476d64acf97cb java-1.7.0-openjdk-demo-1.7.0.91-2.6.2.2.el6_7.x86_64.rpm 27adba1b3a6f4f570d4be23c87e973cfd72890aa18845dd12274d47632cfe0cc java-1.7.0-openjdk-devel-1.7.0.91-2.6.2.2.el6_7.x86_64.rpm 96005bc8eb6c0a4e9a13f0fe27aef3fe2b8f117087391c256ae4b67975e4f157 java-1.7.0-openjdk-javadoc-1.7.0.91-2.6.2.2.el6_7.noarch.rpm ded1524d436b2319d7aea5296df26ff154edb863709bbb900dd0b42e7c18a401 java-1.7.0-openjdk-src-1.7.0.91-2.6.2.2.el6_7.x86_64.rpm Source: 4bf598bec324eebeda3229568573df701a70d28b9e54bd30f58338b3dac7997e java-1.7.0-openjdk-1.7.0.91-2.6.2.2.el6_7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Wed, 21 Oct 2015 23:24:30 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1921 Important CentOS 5 java-1.7.0-openjdk Security Update Message-ID: <20151021232430.GA13185(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1921 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1921.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 728f0c0642d42864b96a7dbd7310360f8787ab90fa17bec6ee5ddb7bc0950b97 java-1.7.0-openjdk-1.7.0.91-2.6.2.1.el5_11.i386.rpm 707c41d31d5b7f03704db767124d21dd6de652d64d22a2cc0758afe6f5a68aec java-1.7.0-openjdk-demo-1.7.0.91-2.6.2.1.el5_11.i386.rpm 4e6876cbad92bb25d26c0bd8b05c407eab7064e59d4eb58eab6b1f50ab122f9b java-1.7.0-openjdk-devel-1.7.0.91-2.6.2.1.el5_11.i386.rpm 72055bec04fcf49a9b744866389d67dfd83bc0cb6ccd64a2c417f230e18a1431 java-1.7.0-openjdk-javadoc-1.7.0.91-2.6.2.1.el5_11.i386.rpm 35504f2d7eaebb7b10d3a7eb8bb918169f740a296984cf976db242947c77c1d9 java-1.7.0-openjdk-src-1.7.0.91-2.6.2.1.el5_11.i386.rpm x86_64: 744c714a9d9dd4a4c54cedad94af99f6093dd5a41f230dba3cd1d30e989a6c80 java-1.7.0-openjdk-1.7.0.91-2.6.2.1.el5_11.x86_64.rpm e7a6d7045f53ccc49104ac40c727708d3d91c553a81896a0e08ab141e441a4d8 java-1.7.0-openjdk-demo-1.7.0.91-2.6.2.1.el5_11.x86_64.rpm f014c30d7aaa0935def0ec0fe8aaa46eab3a23abef79e8fedff1a071be61ddbc java-1.7.0-openjdk-devel-1.7.0.91-2.6.2.1.el5_11.x86_64.rpm 7a6d280dd08f2936ed2aa8c66adabab6d400d8b6bfa072fe03d020e0cca76f40 java-1.7.0-openjdk-javadoc-1.7.0.91-2.6.2.1.el5_11.x86_64.rpm fe02e4316dee3cb6c77a53cb3f3de560c88b343b36e66f46870928961d7b6c53 java-1.7.0-openjdk-src-1.7.0.91-2.6.2.1.el5_11.x86_64.rpm Source: 5107c8d5774a3ba475574a51c986bb8af63414ca30a54ab7940bf5739da707e7 java-1.7.0-openjdk-1.7.0.91-2.6.2.1.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: ------------------------------ Message: 4 Date: Thu, 22 Oct 2015 00:07:57 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1920 Critical CentOS 7 java-1.7.0-openjdk Security Update Message-ID: <20151022000757.GA12866(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1920 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1920.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 826d53b513a6bb5b067028561c663245b39634e764ac64008a09ffdfb26711b6 java-1.7.0-openjdk-1.7.0.91-2.6.2.1.el7_1.x86_64.rpm 43556ec3d4af6b5efae46bed907e81e3b5f69b33cd25b2e1992504685f69dda5 java-1.7.0-openjdk-accessibility-1.7.0.91-2.6.2.1.el7_1.x86_64.rpm a9813ff0692254f9d70a49ec9cef8514706b533836619591967a03f306d146f3 java-1.7.0-openjdk-demo-1.7.0.91-2.6.2.1.el7_1.x86_64.rpm 138f0282b13a511bbe2cc21a1e2a61543255bc767b654f13e7c27cacdd5fdd83 java-1.7.0-openjdk-devel-1.7.0.91-2.6.2.1.el7_1.x86_64.rpm a34323f74e4423d38d298a06cdd26788851b6ac5d9c5787b6f6a2c4144f816bd java-1.7.0-openjdk-headless-1.7.0.91-2.6.2.1.el7_1.x86_64.rpm f8a71a52a20f34d1d0db714c399308561280441a5dfa886fb96de692b41c2bf8 java-1.7.0-openjdk-javadoc-1.7.0.91-2.6.2.1.el7_1.noarch.rpm 0cd7e499729498b74f1898eef23578299a97ab004992d0f6dea78b12e4d86302 java-1.7.0-openjdk-src-1.7.0.91-2.6.2.1.el7_1.x86_64.rpm Source: 494032ee883593af2f18afc2992d5afd2da7bfd02f3aa9b015b441496ad8546a java-1.7.0-openjdk-1.7.0.91-2.6.2.1.el7_1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 5 Date: Thu, 22 Oct 2015 00:08:18 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1919 Important CentOS 7 java-1.8.0-openjdk Security Update Message-ID: <20151022000818.GA12970(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1919 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1919.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: fc1d78f8fbdd55837a77e54915ceed26b916b85834ebfb9457ec153b1a40309a java-1.8.0-openjdk-1.8.0.65-2.b17.el7_1.x86_64.rpm 88300297b48c26c73023f0e9592202bae019244f9386e62b1fce66a8265fbba4 java-1.8.0-openjdk-accessibility-1.8.0.65-2.b17.el7_1.x86_64.rpm b4ee076fe89b4c03f9a27adc2ab09d242924ddbc52028cb473aed21b80af346d java-1.8.0-openjdk-demo-1.8.0.65-2.b17.el7_1.x86_64.rpm 0ca829e2fa8e41cc21b986052018237a264536c61e246f78f585539dc43bc465 java-1.8.0-openjdk-devel-1.8.0.65-2.b17.el7_1.x86_64.rpm adcf8842049a55bdf370857e875b42bc803f170ee594660f97581004ea143fb0 java-1.8.0-openjdk-headless-1.8.0.65-2.b17.el7_1.x86_64.rpm 3fc3d79d30601dab4335761b29a97157f9238636ecbbc77c3d8598a92b5a9bea java-1.8.0-openjdk-javadoc-1.8.0.65-2.b17.el7_1.noarch.rpm b533526fd6d3a382cd62fb5f1c983b1e7cb4c1794cece5cf10968c7aef61d1f8 java-1.8.0-openjdk-src-1.8.0.65-2.b17.el7_1.x86_64.rpm Source: 78aa5064e82314dc93f46cad65f69a89d82e70881811c19fe34bc68079056108 java-1.8.0-openjdk-1.8.0.65-2.b17.el7_1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 128, Issue 6 ***********************************************

1 0

Centos User Privileges.
by Alessandro Baggi 22 Oct '15

22 Oct '15

Hi list, I've installed C 7.1.1503 and I've noticed that simple user can run from bash shutdown -h now/reboot without getting special permission (sudo, su). The machine is a VM without GUI (tested also on physical machine). From reddit I've got a suggestion: removing/comment out "-session optional pam_systemd.so" in /etc/pam.d/system-auth the problem is solved. This is a bug? If not, why use this policy? There are security implication? Thanks in advance.

3 5

Re: [CentOS] CentOS7 - Serial Console and Flow Control
by m.roth＠5-cent.us 21 Oct '15

21 Oct '15

Mike - st257 wrote: > Hello List, > > I'm ironing out details to upgrade a few systems to CentOS7. > > My servers have BMC with Serial over LAN support. In C5 and C6, I determined how to have BIOS/POST, kernel, and serial console access. I'm reading up on the method to accomplish the pieces with C7. > > Presently SoL output works, so I see BIOS/POST messages and the GRUB boot list. > My changes to enable serial redirection for the kernel do not appear to work. > > I've made the following changes to GRUB2's /etc/grub/default config file: -- removed rhgb <snip> You did take out "quiet", too? mark

3 5

Centos 7 - "Device eth1 does not seem to be present, delaying initialization".
by Rafał Radecki 21 Oct '15

21 Oct '15

Hi All :) I have three servers, all with centos 7 installed 3 days ago. I need on them "old" naming scheme (ethX) for network interfaces, because of that: # grep GRUB_CMDLINE_LINUX /etc/sysconfig/grub GRUB_CMDLINE_LINUX="rd.lvm.lv=centos_node-XY/swap rd.lvm.lv=centos_node-XY/root rhgb quiet ipv6.disable=1 net.ifnames=0" net.ifnames=0 was added and afterwards I ran: grub2-mkconfig -o /boot/grub2/grub.cfg Then I created /etc/udev/rules.d/70-persistent-net.rules with content: SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:1e:67:7f:9c:98", ATTR{type}=="1", KERNEL=="eth*", NAME="eth0" SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:1e:67:7f:9c:99", ATTR{type}=="1", KERNEL=="eth*", NAME="eth1" SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:1e:67:7f:9c:9a", ATTR{type}=="1", KERNEL=="eth*", NAME="eth2" SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:1e:67:7f:9c:9b", ATTR{type}=="1", KERNEL=="eth*", NAME="eth3" SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:1e:67:81:37:0d", ATTR{type}=="1", KERNEL=="eth*", NAME="eth4" SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:1e:67:81:37:0e", ATTR{type}=="1", KERNEL=="eth*", NAME="eth5" SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="90:e2:ba:46:ef:30", ATTR{type}=="1", KERNEL=="eth*", NAME="eth6" SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="90:e2:ba:46:ef:31", ATTR{type}=="1", KERNEL=="eth*", NAME="eth7" After reboot it worked fine for all 3 servers, but some time later after another reboot I get: # systemctl status network network.service - LSB: Bring up/down networking Loaded: loaded (/etc/rc.d/init.d/network) Active: failed (Result: exit-code) since Tue 2015-10-20 20:37:30 CEST; 13h ago Process: 2034 ExecStart=/etc/rc.d/init.d/network start (code=exited, status=1/FAILURE) Oct 20 20:37:24 node-X systemd-sysctl[2049]: Overwriting earlier assignment of net/bridge/bridge-nf-call-ip6tables in file '/etc/sysctl.d/99-sysctl.conf'. Oct 20 20:37:25 node-X network[2034]: Bringing up loopback interface: [ OK ] Oct 20 20:37:25 node-X network[2034]: Bringing up interface eth1: ERROR : [/etc/sysconfig/network-scripts/ifup-eth] Device eth1 does not seem to be present, delaying initialization. Oct 20 20:37:25 node-X network[2034]: [FAILED] Oct 20 20:37:27 node-X network[2034]: Bringing up interface eth6: [ OK ] Oct 20 20:37:30 node-X network[2034]: Bringing up interface eth7: [ OK ] Oct 20 20:37:30 node-X systemd[1]: network.service: control process exited, code=exited status=1 Oct 20 20:37:30 node-X systemd[1]: Failed to start LSB: Bring up/down networking. Oct 20 20:37:30 node-X systemd[1]: Unit network.service entered failed state. I see now that the device for which I have an entry in udev: SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:1e:67:7f:9c:99", ATTR{type}=="1", KERNEL=="eth*", NAME="eth1" with MAC 00:1e:67:7f:9c:99 is not eth1 as it should be but 4: eth2: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000 link/ether 00:1e:67:7f:9c:99 brd ff:ff:ff:ff:ff:ff and there is no eth1 in the system. # cat /etc/sysconfig/network-scripts/ifcfg-eth1 TYPE=Ethernet BOOTPROTO=static DEFROUTE=no PEERDNS=no PEERROUTES=no IPV4_FAILURE_FATAL=no IPV6INIT=no IPV6_AUTOCONF=no IPV6_DEFROUTE=no IPV6_PEERDNS=no IPV6_PEERROUTES=no IPV6_FAILURE_FATAL=no NAME=eth1 #UUID=e421e35f-3397-4a93-9449-0aa4e9ef9e1d DEVICE=eth1 ONBOOT=yes IPADDR=1.2.3.4 NETMASK=255.255.255.0 All pages which I found about "Device ethX does not seem to be present, delaying initialization" tell to correctly configure udev but it is correctly configured and it worked some time ago, only recently i started to get problems with this on 3 servers at once. I also noticed that on one of them when I saw the problem and rebooted the server eth1 was correctly assigned afterwards but after another reboot the message happened again. Quite strange to me :D Have you had similar problems on centos7? Any advice? Thanks :) BR, Rafal.

3 4

Libvirtd hooks in Centos 7
by Maikel van Leeuwen 21 Oct '15

21 Oct '15

I would like to create some libvirt hooks. This is so the hypervisor can execute some scripts during starting or stopping of a KVM guest. According to https://www.libvirt.org/hooks.html they must be present. However, it seems in Centos 7 these hooks are gone in /etc/libvirt/ Libvirtversion: 1.2.8-16.el7_1.4 OS version: CentOS Linux release 7.1.1503 (Core) Anyone how solved this riddle? I already asked this question on centos.org/forums, but didn't get much information apart from: "Unfortunately I suspect that CentOS libvirt packages have hooks disabled. I was looking for the same thing (needed some hooks for live migration) but it didn't work. However, after installing qemu from oVirt repository, hooks started working..." Anybody has more information then this given answer? -- Maikel van Leeuwen

2 1

dia under CentOS7
by J Martin Rushton 21 Oct '15

21 Oct '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Does anyone know if dia is going to be released into EPEL7? If it is not, is there an equivalent application for simple diagramming? Thanks -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQIcBAEBAgAGBQJWJpi+AAoJEAF3yXsqtyBlXbAP/0TTWXfhec7eP8Mkv+m0awVA s/ahKMKLIL41xlf/8IU3+dT9a9OADvPPheFAy8kXlb3GndevaLqYOjtEa2fKvQKc WsuiL8bLMgAuLeCfUqRzXoEmC7wzvZyg3IlCa8ZMznkUH5xNbGwdw53RIoP711lq yWJBMFgmQ6CnLkQMsUF5LCj5/R2U25udL+R+mylRQAm/xY7lqxThyLzbS0DXPct+ dhTTgL6+1ik+GPRqC9SEehQhX4ZDDDRKqoTy3ygwwYEB5HPaITWib1GwrFF2zWfJ LQA7gH4yCBWN1th+OvlsK5LrjEX2/UylngJx+rnG38D07lCwK6pOOCN5f62nKNtd Q3ZIySMdQQf7JVCCQjifnuHsJdqzWwXx2ssakDyWGQzZ2vpLHg/mPDMd7FhI9SCS awWQ7r5DefTwFVjBGkGr4dlZ8jJz+SzXDxO6LKhy1R10bs3jVzh7rjrXSwQLK6fy cPhgf79S2Opcp10HgINvxqopQFffA2oqW03dcpLiej0hkBHUJq0pZXvRB7KXt6a9 /p5ExFWmhBF01qlxoJKjmLIkSGScjrIcmz5zHcaYjRME/uVRhdfcADmZKwia+4NR iPB0KIu4HRZqIBnFn0ONJyafODuckmT8FMNgAI0ZhvZ04wnUVernX2vPHv8/IDvM D2ou524tVxPmZe/BT698 =XBYt -----END PGP SIGNATURE-----

4 6

centos 7, nm, wifi
by m.roth＠5-cent.us 21 Oct '15

21 Oct '15

Hi, folks, Haven't found the answer to this in googling: I want wifi never to be turned up. I mean, this is on a workstation that's hardwired, and doesn't have wifi.... Obviously, I want this persistent. mark

1 0

CentOS-announce Digest, Vol 128, Issue 5
by centos-announce-request＠centos.org 21 Oct '15

21 Oct '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEEA-2015:1915 CentOS 7 ixgbe Enhancement Update (Johnny Hughes) 2. CESA-2015:1917 Important CentOS 6 libwmf Security Update (Johnny Hughes) 3. CESA-2015:1917 Important CentOS 7 libwmf Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 20 Oct 2015 16:45:27 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2015:1915 CentOS 7 ixgbe Enhancement Update Message-ID: <20151020164527.GA31412(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2015:1915 Upstream details at : https://rhn.redhat.com/errata/RHEA-2015-1915.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 626f3f739478522b7510d177d8d9ccd5aed1c2cc60b9f4660c58c07622e35741 kmod-ixgbe-4.0.3-1.el7_1.x86_64.rpm Source: a7b25dcbfcccf7735926a3cff9980babc83d7c1b774445771891d07bb8f9ca7d ixgbe-4.0.3-1.el7_1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Tue, 20 Oct 2015 17:05:25 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1917 Important CentOS 6 libwmf Security Update Message-ID: <20151020170525.GA32002(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1917 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1917.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 8094aac8d2a6cd87009e8c0fb44f9097b21ad843d5125fac8a3f4a9a5e8242c4 libwmf-0.2.8.4-25.el6_7.i686.rpm f4920bee03a0712ac222418ee49ffb5ed24779aec168b8efff64ce189cbdc5d0 libwmf-devel-0.2.8.4-25.el6_7.i686.rpm f216434c249f954b2066a0dfdaf67f64fa2aff5a0a2c393e7429f1f1399aca9b libwmf-lite-0.2.8.4-25.el6_7.i686.rpm x86_64: 8094aac8d2a6cd87009e8c0fb44f9097b21ad843d5125fac8a3f4a9a5e8242c4 libwmf-0.2.8.4-25.el6_7.i686.rpm 393e871409aaa5b9b605030e7cd5a31e143b5857f6bbc1b3323caf61355947b7 libwmf-0.2.8.4-25.el6_7.x86_64.rpm f4920bee03a0712ac222418ee49ffb5ed24779aec168b8efff64ce189cbdc5d0 libwmf-devel-0.2.8.4-25.el6_7.i686.rpm 1da8df05d2f2be015715c6441d86761c4ba23c46c4beceb2d8115ae66cac2da6 libwmf-devel-0.2.8.4-25.el6_7.x86_64.rpm f216434c249f954b2066a0dfdaf67f64fa2aff5a0a2c393e7429f1f1399aca9b libwmf-lite-0.2.8.4-25.el6_7.i686.rpm bbd4a2306e50b317e63f817fd09ab6ea3d059e04f0880ff0df1334b59fcfcb29 libwmf-lite-0.2.8.4-25.el6_7.x86_64.rpm Source: 78f1f72b8daca54fa0194c4ddf6c6fd4b9519697cb8ac32fdf83c2c4c33c13a1 libwmf-0.2.8.4-25.el6_7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Tue, 20 Oct 2015 19:06:55 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1917 Important CentOS 7 libwmf Security Update Message-ID: <20151020190655.GA41142(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1917 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1917.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 5ed570d4fde8b82a8afa9e80f583c4e7b13a97082a5db055f8be2090e93715f1 libwmf-0.2.8.4-41.el7_1.i686.rpm b1c055db91f3bffa284bd70320e160b1ca033d6583fc9c7277add1320c5cbf6c libwmf-0.2.8.4-41.el7_1.x86_64.rpm 162311177b047ae561d7ad8582aeb133d495cde220d98148b845d6f95ffdccb7 libwmf-devel-0.2.8.4-41.el7_1.i686.rpm a30366fb0ea3038edbd37fbf1c5af6dbf8aa916b2a0f44c3688eb0a7483fe277 libwmf-devel-0.2.8.4-41.el7_1.x86_64.rpm 28902aad9e43c2180326989bdfdf97cce6c9e9ea6ddcd7ec8bcb199dd1af5b8f libwmf-lite-0.2.8.4-41.el7_1.i686.rpm e885f66e6535eac38beee7735af25fc953add506f2cbd11bc4d9e6c6c93b0df2 libwmf-lite-0.2.8.4-41.el7_1.x86_64.rpm Source: 13e0550e1860c4c2e933933fe633c8c9cb23c2fe8891557dbc1a0d846d08c3cd libwmf-0.2.8.4-41.el7_1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 128, Issue 5 ***********************************************

1 0

Google Chrome Issues on CentOS 6
by Tim Evans 21 Oct '15

21 Oct '15

I've installed Google Chrome using the Richard Lloyd 'install-chrome.sh' script (http://chrome.richardlloyd.org.uk/) and am finding a couple of nagging issues. (Current install is google-chrome-stable-46.0.2490.71-1.x86_64). First, every time I shut down Chrome and start it back up, it whines about not having been shut down "properly." Second, and worse, at start up, it complains about not finding my profile, then doesn't remember any logins/passwords. Even after re-entering such for several sites, the above repeats next time Chrome starts. Anyone seen/solved this? -- Tim Evans |5 Chestnut Court 443-394-3864 |Owings Mills, MD 21117

4 6

CentOS 6 update issues
by John Cenile 21 Oct '15

21 Oct '15

Hello all, I manage a few servers overseas that are running CentOS 6. When performing a yum update, it fails because it's trying to download from: mirror.centos.org/centos/*6.6*/extras/x86_64/repodata/repomd.xml Which fails due to the fact that the entire 6.6 directory is empty on all of the mirrors I have checked. From what I can tell it should be using: mirror.centos.org/centos/*6*/extras/x86_64/repodata/repomd.xml Does anyone have any idea why this would be happening? Obviously changing the CentOS-Base file to use 'baseurl' rather than 'mirrorlist' is a workaround, but I would prefer a more permanent solution, and would like to know why this is happening. Thanks in advance.

8 16

openssl with FIPS140-2 ??
by Fred Smith 20 Oct '15

20 Oct '15

I see that CentOS does not provide the FIPS140-2 package for openSSL. I don't know if RH provides it or not. Can someone advise me on the best way to get it onto a CentOS or RHEL system, without breaking things? I'd also appreciate ANY related wisdom that's available, having pretty much NO wisdom of my own. thanks! Fred -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- "And he will be called Wonderful Counselor, Mighty God, Everlasting Father, Prince of Peace. Of the increase of his government there will be no end. He will reign on David's throne and over his kingdom, establishing and upholding it with justice and righteousness from that time on and forever." ------------------------------- Isaiah 9:7 (niv) ------------------------------

2 2

centos wiki strangeness.
by Denniston, Todd A CIV NAVSURFWARCENDIV Crane 20 Oct '15

20 Oct '15

In preparing to answer a question about some yum undesired behavior, I wanted to reference fastest mirror info, but when I went to https://wiki.centos.org/PackageManagement/Yum/FastestMirror I find all the text has been squished to the right hand side of the page and made 1 word wide all the way down. The https://wiki.centos.org/FrontPage looks similar but perhaps it is a little better? Or is this an issue of looking at it with IE? Even when this disclaimer is not here: I am not a contracting officer. I do not have authority to make or modify the terms of any contract.

3 3

strange diskspace consuming
by Götz Reinicke - IT Koordinator 20 Oct '15

20 Oct '15

Hi, I do a tgz-backup some maildir-folders with n*1000 off files and a lot of GB in storage. The backuped maildirs are removed after the tar. My assumption was, that the free diskspace should be bigger after that, but from what I get with df, it looks like I'm loosing space. Currently the tgz is saved on the same disk/mountpoint. Any hint, why removing the maildirs dont free diskspace as expected? It is still an ext3 filesystme Regards and thanks for hints . Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 82420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Jürgen Walter MdL Staatssekretär im Ministerium für Wissenschaft, Forschung und Kunst Baden-Württemberg Geschäftsführer: Prof. Thomas Schadt

4 3

Can I force yum to only use http.
by Styma, Robert E (Robert) 20 Oct '15

20 Oct '15

Our outsourced IT department has decided to use white listing on the firewalls for outbound ftp. I was given a list of sites our lab had accessed via ftp and eventually tracked them down to Linux machines running yum. They are all CentOS 5 or 6 with a smattering of 7. It is impractical to list all the possibilities since they change on a regular basis. Also any 3rd party repos we need are another ball of wax. Various Google searches and the manual page have not shown me how to avoid using ftp mirrors. I have considered taking out the ftp-proxy information so that the ftp cannot get out, but I suspect it will just hang waiting for a response. Does anyone have any suggestions on ways to tell yum not to use ftp as the download mechanism? Thank you in advance. Bob

7 8

Metadata checksum
by kotipalli venkatesh 20 Oct '15

20 Oct '15

Hi All I am successfully spin the VM with Centos 6.2 ISO. When i am trying to download the packages we are facing the issues. The error message copy paste below, *[root@localhost ~]# yum install ntp* *Loaded plugins: fastestmirror, refresh-packagekit, security* *Loading mirror speeds from cached hostfile* * * base: centos.excellmedia.net <http://centos.excellmedia.net>* * * extras: centos.excellmedia.net <http://centos.excellmedia.net>* * * updates: centos.excellmedia.net <http://centos.excellmedia.net>* *base | 3.7 kB 00:00* *base/primary_db | 4.6 MB 00:01* *http://centos.excellmedia.net/6.7/os/x86_64/repodata/11bcf3233241e37e1a0e04d2fde8a609215059b5b0319fd660f796d462bbe6a8-primary.sqlite.bz2 <http://centos.excellmedia.net/6.7/os/x86_64/repodata/11bcf3233241e37e1a0e04…>: [Errno -1] Metadata file does not match checksum* *Trying other mirror.* These are the commands run but noluck. 1. yum clean all 2. yum clean metadata 3. rpm --rebuilddb *Note: Not only Centos 6.2 iso, We are trying to 6.5 iso also but no luck.* Please guys help me. Regards, Venkatesh.k

1 0

PV AMI for CentOS 7
by Jo Rhett 20 Oct '15

20 Oct '15

Is there any chance we could get a PV AMI for CentOS 7 to match the HVM version at https://aws.amazon.com/marketplace/pp/B00O7WM7QW/ref=srh_res_product_title?… We have prepurchased reserved instances based on older PV machines (m1, c1, etc) It would be very very helpful to have a PV AMI so we could migrate to CentOS 7 on those image types. https://bugs.centos.org/view.php?id=9499 <https://bugs.centos.org/view.php?id=9499> -- Jo Rhett Net Consonance : net philanthropy to improve open source and internet projects.

2 5

Exists some problem with cronjobs under CentOS7
by C. L. Martinez 19 Oct '15

19 Oct '15

Hi all, I am having strange problems with my cron jobs in my CentOS7 kvm host. After the initial install and first boot, any cron job configured had run (including cron tasks installed by some rpm packages). Last cron's entry log is: Oct 9 17:01:01 santgraal CROND[9014]: (root) CMD (run-parts /etc/cron.hourly) Oct 9 17:01:01 santgraal run-parts(/etc/cron.hourly)[9014]: starting 0anacron Oct 9 17:01:01 santgraal run-parts(/etc/cron.hourly)[9023]: finished 0anacron Oct 9 17:01:01 santgraal run-parts(/etc/cron.hourly)[9014]: starting 0yum-hourly.cron Oct 9 17:01:01 santgraal run-parts(/etc/cron.hourly)[9029]: finished 0yum-hourly.cron cron service is running without problems: [root@coskvm01 log]# systemctl status crond crond.service - Command Scheduler Loaded: loaded (/usr/lib/systemd/system/crond.service; enabled) Active: active (running) since Sun 2015-10-11 11:49:41 UTC; 28min ago Main PID: 5124 (crond) CGroup: /system.slice/crond.service └─5124 /usr/sbin/crond -n Forcing to run cron tasks editing root's crontab with "crontab -e", it doesn't works also. Is this a bug?? Or do I need to install some package apart of: cronie-1.4.11-13.el7.x86_64 cronie-anacron-1.4.11-13.el7.x86_64 crontabs-1.11-6.20121102git.el7.noarch ???

12 34

snmpd exec issue
by Leandro 19 Oct '15

19 Oct '15

Hello guys , I was trying to get a command output from my Centos 6 server using the snmpd "exec" section. The line added to snmpd.conf id: exec get_whitelist /bin/cat /home/snmp_user/whitelist.txt Afer trying to get the resut performing the snmpwalk client form another server I always got "permission denied" After reading some forums I founded that disabling selinux It works. My question is .. What is the proper way to achieve snmpd executing some commands ? In my case it is working now but ... Im not sure if disabling selinux is the best way. Regards. Leandro.

2 1

Debugging Kernel Problems
by Tod 19 Oct '15

19 Oct '15

Not sure if this is the correct subject line but my recently installed Centos build (Linux localhost.localdomain 3.10.0-229.14.1.el7.x86_64 #1 SMP Tue Sep 15 15:05:51 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux) periodically just freezes - completely locks up, no activity, nothing in the logs, just stops dead requiring a power off and reboot. I've really looked around to try and find the _best_ way to set up debugging but there is a lot written about it from a lot of parties but I'm not sure who the definitive source is. I did try booting with the 'CentOS Linux (3.10.0-229.14.1.el7.x86_64) 7 (Core) with debugging' option but that really didn't add anything to finding a solution. Dmesg did report this however: dmesg|grep debug [ 0.000000] Command line: BOOT_IMAGE=/vmlinuz-3.10.0-229.14.1.el7.x86_64 root=UUID=1928d2da-784c-4b18-868c-f9858bceea6d ro crashkernel=auto rhgb quiet LANG=en_US.UTF-8 systemd.debug [ 0.000000] Kernel command line: BOOT_IMAGE=/vmlinuz-3.10.0-229.14.1.el7.x86_64 root=UUID=1928d2da-784c-4b18-868c-f9858bceea6d ro crashkernel=auto rhgb quiet LANG=en_US.UTF-8 systemd.debug [ 0.940176] ehci-pci 0000:00:12.2: debug port 1 [ 0.946472] ehci-pci 0000:00:13.2: debug port 1 [ 1.238335] systemd[1]: Unknown kernel switch systemd.debug. Ignoring. [ 5.083981] SELinux: initialized (dev debugfs, type debugfs), uses genfs_contexts [ 5.206423] systemd[1]: Unknown kernel switch systemd.debug. Ignoring. Which I found interesting. So, can anyone point me to a detailed guide to debugging what's going on with my build that will help me solve my locking problem? BTW, I think it might be my wireless Atheros equipped PCI card (dmesg|grep -i atheros [ 2.231264] ath5k: phy0: Atheros AR2414 chip found (MAC: 0x79, PHY: 0x45) but can't be sure because I've not any real proof that's the issue. Thanks in advance for your patience and assistance.

4 4

Re: [CentOS] [OT] fail2ban update (epel) breaks logrotate
by tony＠softins.co.uk 18 Oct '15

18 Oct '15

In article <n009u2$85v$1(a)softins.softins.co.uk>, Tony Mountifield <tony(a)softins.co.uk> wrote: > Apologies, this is slightly off-topic being to do with an EPEL package, > although it's running on CentOS6, so I thought others here might have come > across this issue. > > I have five CentOS 6 systems running fail2ban from EPEL, and this > package was updated in the last week from 0.9.2-1.el6 to 0.9.3-1.el6. > > On all these systems, I received an error from logrotate this morning. > > [root@system ~]# /usr/bin/fail2ban-client flushlogs > logs: rolled over > Traceback (most recent call last): > File "/usr/bin/fail2ban-client", line 470, in <module> > if client.start(sys.argv): > File "/usr/bin/fail2ban-client", line 440, in start > return self.__processCommand(args) > File "/usr/bin/fail2ban-client", line 281, in __processCommand > return self.__processCmd([cmd]) > File "/usr/bin/fail2ban-client", line 185, in __processCmd > client.close() > File "/usr/lib/python2.6/site-packages/fail2ban/client/csocket.py", line 55, in close > self.__csock.sendall(CSPROTO.CLOSE + CSPROTO.END) > File "<string>", line 1, in sendall > socket.error: [Errno 32] Broken pipe > [root@system ~]# OK, on further investigation, I found that the fail2ban service had not been restarted by the update script. So I restarted it, and got the same error as it was stopping, but it started up ok. After restarting, the error no longer occurs: [root@system ~]# ps -fC fail2ban-server root 7528 1 0 Sep23 ? 00:10:06 /usr/bin/python -Es /usr/bin/fail2ban-server -s /var/run/fail2ban/fail2ban.sock -p /var/run/fail2ban/fail2ban.pid -x -b [root@system ~]# service fail2ban restart Stopping fail2ban: Traceback (most recent call last): File "/usr/bin/fail2ban-client", line 470, in <module> if client.start(sys.argv): File "/usr/bin/fail2ban-client", line 440, in start return self.__processCommand(args) File "/usr/bin/fail2ban-client", line 281, in __processCommand return self.__processCmd([cmd]) File "/usr/bin/fail2ban-client", line 185, in __processCmd client.close() File "/usr/lib/python2.6/site-packages/fail2ban/client/csocket.py", line 55, in close self.__csock.sendall(CSPROTO.CLOSE + CSPROTO.END) File "<string>", line 1, in sendall socket.error: [Errno 32] Broken pipe [FAILED] Starting fail2ban: [ OK ] [root@system ~]# ps -fC fail2ban-server root 11647 1 1 15:30 ? 00:00:00 /usr/bin/python -Es /usr/bin/fail2ban-server -s /var/run/fail2ban/fail2ban.sock -p /var/run/fail2ban/fail2ban.pid -x -b [root@system ~]# /usr/bin/fail2ban-client flushlogs logs: rolled over [root@system ~]# Hope this info is useful to others... Cheers Tony -- Tony Mountifield Work: tony(a)softins.co.uk - http://www.softins.co.uk Play: tony(a)mountifield.org - http://tony.mountifield.org

1 0

[OT] fail2ban update (epel) breaks logrotate
by tony＠softins.co.uk 18 Oct '15

18 Oct '15

Apologies, this is slightly off-topic being to do with an EPEL package, although it's running on CentOS6, so I thought others here might have come across this issue. I have five CentOS 6 systems running fail2ban from EPEL, and this package was updated in the last week from 0.9.2-1.el6 to 0.9.3-1.el6. On all these systems, I received an error from logrotate this morning. It appears that something has broken the flushlogs option in fail2ban-client: [root@system ~]# cat /etc/logrotate.d/fail2ban # # Gentoo: # http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/net-analyzer/fail2b… # # Debian: # https://github.com/fail2ban/fail2ban/blob/debian/debian/fail2ban.logrotate # # Fedora view: # http://pkgs.fedoraproject.org/cgit/fail2ban.git/tree/fail2ban-logrotate /var/log/fail2ban.log { rotate 7 missingok compress postrotate /usr/bin/fail2ban-client flushlogs 1>/dev/null || true endscript } [root@system ~]# /usr/bin/fail2ban-client flushlogs logs: rolled over Traceback (most recent call last): File "/usr/bin/fail2ban-client", line 470, in <module> if client.start(sys.argv): File "/usr/bin/fail2ban-client", line 440, in start return self.__processCommand(args) File "/usr/bin/fail2ban-client", line 281, in __processCommand return self.__processCmd([cmd]) File "/usr/bin/fail2ban-client", line 185, in __processCmd client.close() File "/usr/lib/python2.6/site-packages/fail2ban/client/csocket.py", line 55, in close self.__csock.sendall(CSPROTO.CLOSE + CSPROTO.END) File "<string>", line 1, in sendall socket.error: [Errno 32] Broken pipe [root@system ~]# Has anyone else found this today? And even better know how to fix it? There doesn't seem to be any current activity in epel-users, and I found the update announcement in epel-package-announce, but didn't see anything about this in the "IMPORTANT incompatible changes" section. Cheers Tony -- Tony Mountifield Work: tony(a)softins.co.uk - http://www.softins.co.uk Play: tony(a)mountifield.org - http://tony.mountifield.org

1 0

CentOS-announce Digest, Vol 128, Issue 4
by centos-announce-request＠centos.org 17 Oct '15

17 Oct '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Update for centos-release-openstack (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 16 Oct 2015 19:14:42 +0100 From: Karanbir Singh <kbsingh(a)centos.org> To: CentOS Announcements List <centos-announce(a)centos.org> Subject: [CentOS-announce] Update for centos-release-openstack Message-ID: <56213E92.2050104(a)centos.org> Content-Type: text/plain; charset=utf-8 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The CentOS Cloud SIG ( https://wiki.centos.org/SpecialInterestGroup/Cloud ) is releasing a new OpenStack metadata package called centos-release-openstack-kilo that replaces centos-release-openstack. Metadata packages in CentOS are used to setup the repositories used by the package manager ( yum ) and the signing keys used to validate content installed from the corresponding repositories. The present metadata package, called centos-release-openstack, does not allow for us to have multiple OpenStack versions available to users, without adding many layers of complexity to the install and update process. This new OpenStack metadata package ( centos-release-openstack-kilo ) effectively sets up the mechanics required for us to deliver OpenStack Liberty as an alternative to users who might prefer the newer codebase, once it's available. However, we would like to still support the users who have a Kilo install at the moment, and would like to run that as long as updates are available for Kilo itself. Kilo to Liberty update process will require administrative actions, for details see "Upgrade Notes" in upstream release notes https://wiki.openstack.org/wiki/ReleaseNotes/Liberty The metadata rpm for OpenStack Liberty will be called centos-release-openstack-liberty and users will be able to install it once released. For more information on our progress with that effort, please join the Cloud SIG meetings that are held weekly on #centos-devel on irc.freenode.net or join us on the centos-devel mailing list ( https://lists.centos.org/ ). The updated metadata package, centos-release-openstack-kilo, is now available on all CentOS mirrors, and can be installed by running either 'yum update centos-release-openstack' or 'yum install centos-release-openstack-kilo' - -- Karanbir Singh, Project Lead, The CentOS Project +44-207-0999389 | http://www.centos.org/ | twitter.com/CentOS GnuPG Key : http://www.karan.org/publickey.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQEcBAEBAgAGBQJWIT6SAAoJEI3Oi2Mx7xbt5OUH/AoA9RW3H2w2YxzRFDkZJOS9 GFuxBSxX7C1hQ+u/5XQlEYx/hj4oaJSeWEBd5bOCyCxVJRSFakUy2LjenErbaX5n QiUdYtaDh2MP72doiGTbOyMpRbJT9jnbuSrSzd4t9oEVGOWyP+gLlaU0QhL4ST3t 01m1Z6vxd0VYmXWpGYH1gK65GEymYNb5vE/MwLFq+Apm2DXELKoPgtwRkwyiT19d aV+xT4f2qLrtI5YMVKspjNxKYOX72yExzrbcaUersTbTmsJB9zCrbi3sqAy/BOv9 jnCpG677EHre6R23ipQ36rUSi401FC8dnN89kO3+joUBtqsPYZw6P8p9brKKC68= =T+80 -----END PGP SIGNATURE----- ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 128, Issue 4 ***********************************************

1 0

Incoming rsync connection attempts
by Jeff Boyce 16 Oct '15

16 Oct '15

Greetings - In my logwatch report this morning I noticed reference to an attempt to connect to rsync from an external IP address. It doesn't appear that the connection was successful based on correlating information between /var/log/secure and /var/log/messages. But I am looking for some suggestions for implementing more preventative measures, if necessary. The log information from the last few attempts are shown below. /var/log/secure Oct 13 00:14:08 Bison xinetd[2232]: START: rsync pid=15306 from=180.97.106.36 Oct 13 01:55:51 Bison xinetd[2232]: START: rsync pid=15343 from=85.25.43.94 Oct 13 23:25:35 Bison xinetd[2232]: START: rsync pid=16548 from=114.119.37.86 /var/log/messages Oct 13 00:14:08 Bison rsyncd[15306]: rsync: unable to open configuration file "/etc/rsyncd.conf": No such file or directory (2) Oct 13 00:14:08 Bison rsyncd[15306]: rsync error: syntax or usage error (code 1) at clientserver.c(923) [receiver=3.0.5] Oct 13 01:55:51 Bison rsyncd[15343]: rsync: unable to open configuration file "/etc/rsyncd.conf": No such file or directory (2) Oct 13 01:55:51 Bison rsyncd[15343]: rsync error: syntax or usage error (code 1) at clientserver.c(923) [receiver=3.0.5] Oct 13 23:25:35 Bison rsyncd[16548]: rsync: unable to open configuration file "/etc/rsyncd.conf": No such file or directory (2) Oct 13 23:25:35 Bison rsyncd[16548]: rsync error: syntax or usage error (code 1) at clientserver.c(923) [receiver=3.0.5] There is no /etc/rsyncd.conf file present on the system, so I can see why the connection wasn't successful. Our backups get pushed to this one from other servers using rsync. This is on a RHEL 3.9 box (Dell PE2600, year 2004) that is primarily used as backup storage within our LAN. I will retire it when it dies, until then it runs fairly maintenance free. I do have a public IP address assigned to the WAN because we have a vsftp server running on it for transferring files back and forth to a few clients, and I occasionally access the server remotely. I am wondering if there is anything relatively simple that I can do to address these attempted connections, until I have time to move our vsftp server from it and remove the public IP address from the WAN? Thanks. Jeff -- Jeff Boyce Meridian Environmental

5 4

Semi-OT: torque, pbs_mom, cpuset, loglevel
by m.roth＠5-cent.us 16 Oct '15

16 Oct '15

We're running the current version of torque. On our small supercomputer (an SGI), no updates to torque since July, but just recently - someone may be trying something new - /var/log/messages is on-and-off being spammed with Oct 15 18:02:04 servername pbs_mom: LOG_INFO::create_job_cpuset, creating cpuset for job 1971[656].york.cit.nih.gov: 1 cpus (12), 1 mems (1) and I mean thousands of lines. I tried to adjust the loglevel of pbs_mom, but it appeared to make *no* change, and their "documentation" and "manpage" simply does not describe what message level each value of loglevel produces. Anyone have a clue? I've been googling, and not finding anything of use. mark

1 0

LSI driver and SSD status error in IPMI
by Birta Levente 16 Oct '15

16 Oct '15

Hi to all I have a supermicro server with LSI 3108 with - 2x300GB SAS spin drive in raid1 (virtual drive 0) - 2x300GB SAS spin drive in raid1 (virtual drive 1) - 2x200GB Intel SSD DC S3710 drives configured as JBOD in LSI bios In the IPMI storage health status eveything looks fine until I boot into Centos 7.1 (unfortunatelly I didn't try other OS, but also I'm not interested in other) After boot the status for the SSDs changing in ERROR The same thing happen when boot with the install CD Otherwise everything works fine. Is this hurt? Can I do something? Also I tried to install the latest LSI driver (06.809.18.00), but seems it is not loaded after restart: As the official driver install guide say, before the driver install, I installed the dkms from the epel repo. /var/log/messages: systemd-modules-load: Failed to find module 'override megaraid_sas 3.10.* weak-updates/megaraid_sas' /etc/modules-load.d/megaraid_sas.conf: override megaraid_sas 3.10.* weak-updates/megaraid_sas #modinfo megaraid_sas filename: /lib/modules/3.10.0-229.14.1.el7.x86_64/kernel/drivers/scsi/megaraid/megaraid_sas.ko description: LSI MegaRAID SAS Driver author: megaraidlinux(a)lsi.com version: 06.805.06.01-rh2 license: GPL rhelversion: 7.1 srcversion: C0124BBE9453A621D4086DB alias: pci:v00001000d0000005Fsv*sd*bc*sc*i* alias: pci:v00001000d0000005Dsv*sd*bc*sc*i* alias: pci:v00001000d0000002Fsv*sd*bc*sc*i* alias: pci:v00001000d0000005Bsv*sd*bc*sc*i* alias: pci:v00001028d00000015sv*sd*bc*sc*i* alias: pci:v00001000d00000413sv*sd*bc*sc*i* alias: pci:v00001000d00000071sv*sd*bc*sc*i* alias: pci:v00001000d00000073sv*sd*bc*sc*i* alias: pci:v00001000d00000079sv*sd*bc*sc*i* alias: pci:v00001000d00000078sv*sd*bc*sc*i* alias: pci:v00001000d0000007Csv*sd*bc*sc*i* alias: pci:v00001000d00000060sv*sd*bc*sc*i* alias: pci:v00001000d00000411sv*sd*bc*sc*i* depends: intree: Y vermagic: 3.10.0-229.14.1.el7.x86_64 SMP mod_unload modversions signer: CentOS Linux kernel signing key sig_key: E9:9F:C4:37:BD:9C:BF:B4:F1:B1:DA:87:C1:57:FF:66:56:9B:EE:66 sig_hashalgo: sha256 parm: lb_pending_cmds:Change raid-1 load balancing outstanding threshold. Valid Values are 1-128. Default: 4 (int) parm: max_sectors:Maximum number of sectors per IO command (int) parm: msix_disable:Disable MSI-X interrupt handling. Default: 0 (int) parm: msix_vectors:MSI-X max vector count. Default: Set by FW (int) parm: allow_vf_ioctls:Allow ioctls in SR-IOV VF mode. Default: 0 (int) parm: throttlequeuedepth:Adapter queue depth when throttled due to I/O timeout. Default: 16 (int) parm: resetwaittime:Wait time in seconds after I/O timeout before resetting adapter. Default: 180 (int) parm: smp_affinity_enable:SMP affinity feature enable/disbale Default: enable(1) (int) Can somebody tell me how to get the driver to work? Thanks, -- Levi

1 0

Re: [CentOS] Firefox Flash Update = No Flash
by pro alias 16 Oct '15

16 Oct '15

On Tue, Oct 13, 2015 at 2:48 PM, pro alias <proalia(a)gmail.com> wrote: > None of my Centos 5 boxen can show flash since the update this morning. > Am I alone or do other people have this issue ?? > Centos 7 boxes work properly. I haven't looked at RHEL 6 boxes yet. > > Although I miss using flash on these boxes, it IS a great security > upgrade.... > > Installing the previous version of flash-plugin restores the functionality. It appears to be a Glib2 problem, this version was apparently compiled against another glib2. It wants libgio-2.0.so. Copying the so from /usr/lib/vmware to /usr/lib64/ stopped it's complaining but flash still didn't work. Another good reason to upgrade the remaining Centos 5.11 boxes to rhel/centos 7.1.

1 0

cant reattach to screen session since upgrade of screen rpm?
by Jason Welsh 15 Oct '15

15 Oct '15

hey folks, running CentOS release 6.6 (Final) and I was upgrading some rpms and now since screen (and probably some others) were upgraded, I can no longer reattach to my screen session I had running. monsterjam:~ $ rpm -qi screen Name : screen Relocations: (not relocatable) Version : 4.0.3 Vendor: CentOS Release : 18.el6 Build Date: Thu 23 Jul 2015 01:41:46 PM EDT Install Date: Thu 15 Oct 2015 01:15:28 PM EDT Build Host: c6b8.bsys.dev.centos.org Group : Applications/System Source RPM: screen-4.0.3-18.el6.src.rpm monsterjam:~ $ screen -ls There is a screen on: 13262.stuff (Detached) 1 Socket in /var/run/screen/S-jason. when I try to reattach, it just hangs.. monsterjam:~ $ screen -dr 13262.stuff ive found the following and tried them all.. Try detaching it first with screen -d. If that doesn't work, you can try, in increasing order of emphasis, -d|-D [pid.tty.host] does not start screen, but detaches the elsewhere running screen session. It has the same effect as typing "C-a d" from screen's controlling terminal. -D is the equivalent to the power detach key. If no session can be detached, this option is ignored. In combination with the -r/-R option more powerful effects can be achieved: -d -r Reattach a session and if necessary detach it first. -d -R Reattach a session and if necessary detach or even create it first. -d -RR Reattach a session and if necessary detach or create it. Use the first session if more than one session is available. -D -r Reattach a session. If necessary detach and logout remotely first. -D -R Attach here and now. In detail this means: If a session is running, then reattach. If necessary detach and logout remotely first. If it was not running create it and notify the user. This is the author's favorite. -D -RR Attach here and now. Whatever that means, just do it. but none of them seem to work.. any ideas? Jason

3 3

selinux commands fail on low memory box
by Tim Dunphy 15 Oct '15

15 Oct '15

Hey all, I have 3 web servers hosted at Digital Ocean that all have the same amount of memory at 512MB. They're all running CentOS 7. They are low powered apache servers and don't really need more than that. All they're doing is serving the web, no database on those hosts at all. On the first two hosts I seem to have no trouble running SELinux related commands. It's only on the 3rd web server where I seem to have any trouble at all running the SELinux commands I want to keep the box secure. On box #3 all SElinux commands end up the same way. For example: [root@ops3:~] #semodule -i newrelic.pp Killed And that happened when I had about 280MB free: [root@ops3:~] #free -m total used free shared buff/cache available Mem: 490 96 286 28 107 285 Swap: 0 0 0 Typically what I'll do is stop all the main services on this machine to free up some memory to run the command I want. But to no avail! The commands die with the same errors every time. Whereas on the other two hosts I can run the same commands with only as little as 30 or 40MB free! So would this be some inherent flaw with this box? That the only way to get around it is to scrap it and build a replacement? Not that hard to do. But before I took that measure I was wondering if there was any hocus-pocus I could try that I might not be aware of that could alleviate this scenario. Thanks, Tim -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

3 3

copying to a local mirror / repository
by Richer, Mark (CIV) 15 Oct '15

15 Oct '15

I am using CentOS on a private network which can’t access the Internet so I want to create a local repository of packages on one or more DVDs, and get it installed on the private network. Someone had done this for CentOS 7, but not for CentOS 6. I have a VM running 6 so I am trying to create it for the previous major version. I thought there would be some obvious instructions on the preferred/recommended method for doing this, but I have failed to find them. Can anyone respond with any useful links on how best to do this or provide the recommended set of steps. I have seen various postings on this topic, but not anything official from the CentOS community. thanks much, Mark MARK H RICHER, MS CS Faculty Research Associate Computer Science Department Naval Postgraduate School - National Capital Region (NCR) 703-275-8533 (o) 571.303.9498 (m) mhricher(a)nps.edu<mailto:mhricher@nps.edu>

3 3

abrt-auto-reporting
by Günther J. Niederwimmer 15 Oct '15

15 Oct '15

Hello, centos 7(1) I have a question about abrt-auto-reporting? should this work normal ? I have on my System Problems to report the Errors. Thanks for a answer, -- mit freundlichen Grüssen / best regards, Günther J. Niederwimmer

2 1

CentOS 6 + Updates (HVM) AMI Breaks on attached instance storage
by Robert Bush 14 Oct '15

14 Oct '15

Where do i file a bug report for a centOS 6 ami on aws? Thanks, Robert

1 0

tcp wrappers Question..
by Jason Welsh 14 Oct '15

14 Oct '15

hey folks, I keep seeing this on the internet "The user name lookup feature of TCP Wrappers uses identd to identify the username of the remote host. By default, this feature is disabled, as identd may appear hung when there are a large number of TCP connections." but I cant seem to find out how/where to enable said feature. Jason

3 3

redistribution of isolinux binaries
by Brian Reichert 14 Oct '15

14 Oct '15

I've been making my own custom RHEL / CentOS boot CDs for years, and all of the instructions for such work call out to take a distro's CD, and copy key files from it. Among those files are those that I think are associated with the the SYSLINUX/ISOLINUX project; e.g.: http://mirror.centos.org/centos/6/os/x86_64/images/ http://mirror.centos.org/centos/6/os/x86_64/isolinux/ Two questions: - As the SYSLINUX project is GPLed, to hand out binaries implies the sources are available somewhere, but I can't find an official point of reference on where the corresponding sources are. - Further, near as I can tell, the SYSLINUX project makes no reference to Kickstart, but I do see Fedora refer to Kickstart: https://fedoraproject.org/wiki/Features/SyslinuxOption This has me wondering if Fedora maintains local changes to the SYSLINUX project. If it does, that further lends to my interest in tracking down the utilized sources. Does anyone have any insight on these topics, or, at the very least, a better forum to pursue them? -- Brian Reichert <reichert(a)numachi.com> BSD admin/developer at large

5 12

Help needed in CentOS 6.7 installation
by Amar 14 Oct '15

14 Oct '15

Hi, I have a high-end (32 GB RAM, 2 TB hard-disk) machine where I wanted to install CentOS 6.7 operating system. I am also using a nvidia 1 GB GPU from ASUS. With all this, I am not able to instal CentOS 6.7, The last message that shows on my screen, when I try installing, is "[drm] Initialized i915 1.6.0 20140905 for 0000:00:02.0 on mirror 1". Any suggestions? Regards

2 1

Firefox Flash Update = No Flash
by pro alias 13 Oct '15

13 Oct '15

None of my Centos 5 boxen can show flash since the update this morning. Am I alone or do other people have this issue ?? Centos 7 boxes work properly. I haven't looked at RHEL 6 boxes yet. Although I miss using flash on these boxes, it IS a great security upgrade....

4 3

Firewalld
by Emmett Culley 13 Oct '15

13 Oct '15

I just noticed that when rebooting a CentOS 7 server the firewall comes back up with both interfaces set to REJECT, instead of the eth1 interface set to ACCEPT as defined in 'permanent' firewalld configuration files. All servers are up to date. By "just noticed" I mean that I finally investigated why a newly rebooted VM failed to allow NFS connections. Prior to doing that. I'd been stopping the firewall to get access, then restarting the firewall after setting the eth1 interface to ACCEPT. This time I took a look at iptables and found that eth1 was set to REJECT, before I stopped the firewall. Because it was obvious that firewalld had been started by systemd by noticing the output of iptabled -nvL had the same set of rules you can see when firewalld is restarted, except that after restart interface eth1 is set to ACCEPT. I assume there must be a different set of configuration files that are accessed upon reboot than those accessed upon firewalld restart. Note that all CentoOS 7 machines (VM and hardware) in our data center have this same issue. Anyone know where and what those files are? Emmett

4 7

Preventing laptop from sleeping when lid closed?
by Dave Johansen 13 Oct '15

13 Oct '15

How can I prevent the laptop from sleeping when the lid is closed. I tried messing with the settings in gnome-power-preferences but that doesn't seem to prevent it when no one is logged in. Any suggestions? Thanks, Dave

2 2

CentOS-announce Digest, Vol 128, Issue 3
by centos-announce-request＠centos.org 13 Oct '15

13 Oct '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2015:1889 Important CentOS 6 spice-server Security Update (Johnny Hughes) 2. CESA-2015:1890 Important CentOS 7 spice Security Update (Johnny Hughes) 3. CentOS Linux 7 for 32-bit x86 (i386) Architecture (Johnny Hughes) 4. Release for CentOS Linux 7 Rolling media Sept 2015 (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Mon, 12 Oct 2015 23:26:07 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1889 Important CentOS 6 spice-server Security Update Message-ID: <20151012232607.GA38879(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1889 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1889.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 48643f342673588b60585bde6ee2f6267c7efb4aca58f5d22d8dafcfee2dc77f spice-server-0.12.4-12.el6_7.3.x86_64.rpm be05fbaa5cab61394106aafe500f342fc0ec2164807c8e46d9f59d31520738a3 spice-server-devel-0.12.4-12.el6_7.3.x86_64.rpm Source: 085674b2a16790d3debe759958f2a430ff3aaa18b01088c5bc1e7b29b56d9b26 spice-server-0.12.4-12.el6_7.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 13 Oct 2015 00:01:21 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1890 Important CentOS 7 spice Security Update Message-ID: <20151013000121.GA46539(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1890 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1890.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 2438f62fb457d22d95b6ca40e68743fc1765e9e34c1966eb30aa605f34e468a2 spice-server-0.12.4-9.el7_1.3.x86_64.rpm 37030fca2cc111cd73bf4ae8c233d30f75db887e8103eb8b91428b0777c61f50 spice-server-devel-0.12.4-9.el7_1.3.x86_64.rpm Source: 10eefd09b96d5184be8b9c3addfcabbf37382b9dfc587260c2ebdf09913872ba spice-0.12.4-9.el7_1.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Mon, 12 Oct 2015 11:07:17 -0500 From: Johnny Hughes <johnny(a)centos.org> To: CentOS-Announce <centos-announce(a)centos.org> Subject: [CentOS-announce] CentOS Linux 7 for 32-bit x86 (i386) Architecture Message-ID: <561BDAB5.5000300(a)centos.org> Content-Type: text/plain; charset="utf-8" We would like to announce the general availability of CentOS Linux 7 for the 32-bit x86 (i386) architecture. This is the first major release of the 32 bit x86 by the AltArch Special Interest Group. This release is based on the Source Code from the CentOS 7 (1503) x86_64 architecture and includes all current updates from the main CentOS 7 tree. Installation ============ Install ISOs are available here: http://mirror.centos.org/altarch/7/isos/i386/ sha256sums: CentOS-7-i386-DVD-1503.iso: 8973b31b45878b2277c19465b0260aab4efb86126033ee0909fafa47ace5c3af CentOS-7-i386-Everything-1503.iso: 1c016cd95aaa8fe9bc68376f388c03c704eacd3f303e7f37f026e6aed4f78b77 CentOS-7-i386-Minimal-1503.iso: 4b71900eda2e863234e2edee9b2c3753f83bc9a0912551d26f69ff1e202ca979 CentOS-7-i386-NetInstall-1503.iso: cea236c94a26e62330acbbf8fe0e1aefa75f282fdbaab7f169213e8fb33d2cc4 The install process is identical to CentOS 7 x86_64 via kickstart or ISO installers. Known Issues ============ 1. If installing on a QEMU (kvm) i386 VM, you must modify the VM cpu to use "copy host cpu" http://bugs.centos.org/view.php?id=8748 2. The gnome desktop will not exit or log out from the menu. http://bugs.centos.org/view.php?id=8834 More Information ================ More information is available on the i386 AltArch page: https://wiki.centos.org/SpecialInterestGroup/AltArch/i386 -- Johnny Hughes CentOS Project { https://www.centos.org/ } irc: hughesjr, #centos at irc.freenode.net

1 0

Fwd: oVirt - High Availability
by Indunil Jayasooriya 13 Oct '15

13 Oct '15

Hi users, I have setup OVIRT 3.5 with* 2 CENTOS 7.1 hosts. Everything is ok other than HA ( High Availability). *To test HA, Documentation says, *Power Management is needed. * Could you pls let me know if this Power Management is a separate Device or does it come with a BRANDED Server such as HP, IBM or Dell? I have seen a* ILO* port in HP servers. Can I use it for HA ( High Availability) in ovirt? If *power management* is *present in Branded Servers*, Could you pls let me know some *Branded RHEL 7.1/CentOS 7.1 supported servers?* Then, I can use it for Production use. Have you guys* DONE HA in CENTOS with ovirt 3.5? * *This is an YOU TUBE video for HA.* https://www.youtube.com/watch?v=uHCnXGUMaS0 Is this a correct video for HA? HOPE TO hear from you? -- cat /etc/motd Thank you Indunil Jayasooriya http://www.theravadanet.net/ http://www.siyabas.lk/sinhala_how_to_install.html - Download Sinhala Fonts

1 0

mount: unknown filesystem type '(null)' error
by Tim Dunphy 13 Oct '15

13 Oct '15

Hey guys, I'm trying to mount a disk volume on aws under CentOS 7. And when I try I get this result: [root@repo:~] #mount /dev/xvdf1 /opt/repo mount: /dev/xvdf1 is write-protected, mounting read-only mount: unknown filesystem type '(null)' The only thing I can see in dmesg that seems to relate is: [ 2481.434610] EXT4-fs (xvdf1): VFS: Can't find ext4 filesystem [ 2509.883144] EXT4-fs (xvdf1): VFS: Can't find ext4 filesystem What can I do to get around this poblem? Thanks, Tim -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

1 0

Centos 6.7 on Tyan Tiger MPX, Graphics and eArrayDirector
by H 13 Oct '15

13 Oct '15

I am a newcomer to Centos and could benefit from some help. I am repurposing an older server and installed Centos 6.7 on a Tyan Tiger MPX 2466 motherboard. The installation went flawlessly but the graphics chip on the motherboard is obviously quite old, a Matrix Millennium MGA 2064W, and the slow default driver (VESA?) was installed. Is a faster video driver available? It would be nice to be able to run the desktop more smoothly... The graphics chip has 8 MB of memory. I Googled but did not find a driver. Is this VESA driver the reason the monitor, an Acer S230HL, is not identified but shown as Unknown in the monitor setup? This machine will be hosting the LSI eArrayDirector client and server for two DF4000 fiber channel diskarrays. Unfortunately this Java application cannot be installed on Centos 6.7 but I am hoping there might be some user who have been able to work around this limitation by installing eArrayDirector on another system and then moving the installation to a later Centos version. Comments and suggestions welcome! Thank you.

1 0

Annoying license at install
by david 12 Oct '15

12 Oct '15

Folks I have several remotely-located servers, donated by folks not all of whom are computer geeks, let-alone Linux aware. In earlier versions of Centos, I directed them to perform a minimal NetInstall (not too difficult to direct over the phone), and then issue two commands after the first boot. One was a 'curl' to download a script of mine, and the second was a dot-command to run it. A few reboots followed in close succession, and I directed them to logon as root, and issue a simple dot-command. The personal intervention ended usually within an hour, since I had ssh access to the system and root, and could complete the installation and tailoring completely remotely. I would only need their intervention in the case of problems. In many cases, I've not needed to invoke that help for a year or more. This scheme worked well until I decided to add support of graphical desktops on the systems in Centos 7, as I had in Centos 6. Once those packages were installed, further non-intuitive on-site intervention was required at next reboot to approve licenses. Remote ssh logins didn't work until that was done. These licenses needed to be approved on the local console. This is quite annoying and places more demands upon my remote friend. In some cases, the console and keyboard had been removed and the box had been placed in the closet. I am seeking a way to reduce or eliminate this annoyance. The best would be to find some way to 'pre-approve' the license agreement in my customizing scripts. Failing that, it would be nice to be able to approve these scripts from a remote ssh logon. I am reluctant to deploy Centos 7 without GUI support (I use x2go sometimes), and am thus reluctant to deploy centos 7 at this point. Advice and comments welcome David San Francisco

5 5

problem on exceptional quit
by Hua Wang 12 Oct '15

12 Oct '15

Dear Centos Users: I installed Centos 7 on my server a few months ago. While using ssh, there is always a strange message "Write failed: Broken pipe”. It forces quit of SSH. It’s really annoying as it happens very often with irregular time interval - from a couple of minutes to a few hours. I have been working using Linux (Red Hat, Fedora and Centos) over 15 years. This didn’t happen for me even under centos 6.6. I have tried the following approaches, but none of them can help. I wonder if it can be solved by reinstall the system again. But it’s time consuming to reinstall a lot of softwares. 1. Login via Mac, Windows, Linux systems from different computers. 2. Modify sshd_config on the server as suggested by many posts: TCPKeepAlive yes ClientAliveInterval 60 3. Modify ~/.ssh/config file on my local computer: Host * ServerAliveInterval 60 4. Login ssh using -Y instead of -X. 5. add ‘unset autologout’ in my .cshrc. 6. I checked IP address with the internet administrator, and it works well. 7. add a file named autologout.csh with ‘set autologout=0’. Do you know a good solution? Thanks! Cheers, Hua ----------------------------- Hua Wang, Ph.D. in Geodesy Department of Surveying Engineering, Guangdong University of Technology, 100 Waihuan Xi Rd., Panyu District, Guangzhou, 510006, China. Tel: +86-13570019257 Email: ehwang(a)163.com Homepage: http://homepages.see.leeds.ac.uk/~earhw

9 18

Dnsmasq
by Gabby Soberano 12 Oct '15

12 Oct '15

Looking for some feedback. Anybody using dnsmasq for dns/dhcp in enterprise level (300-500) users and machines? We have a mix of osx and linux machines. Have AWS instances as well (compute farm). Thanks -g

1 0

Clustering and ha planning
by Leandro 11 Oct '15

11 Oct '15

Hello , Centos users: My name is Leandro, I have been using Centos for 4 years and this is the first post in this mail list. I would like to study and introduce myself in clustering and high availability for Centos, currently I have not experience at all about it. I would like to ask about the newest method to achieve high availability , load balancing on linux / Centos. So far I have seen the Clustering docs writen for Centos 5 and the HA documentation from www.linux-ha.org that have been published in 2010. So, I would like to ask to comunity, which are the new methods for clustering and get HA and where to get updated documentation. Regards, Leandro.

4 4

filesystem mounting fails at boot
by Imre Gergely 10 Oct '15

10 Oct '15

Hi I have an IBM blade with internal harddisks, in hardware RAID1. I've installed a CentOS 6 64bit on it, everything works just fine. After the installation, I've presented a vdisk to the blade from an external SAN (an HP EVA4000), connected through FiberChannel. I've partitioned the disk, formatted it and mounted it under /store, then added it to fstab. Everything was fine, until I rebooted. At boot I'm getting the following error for /store: Mounting local filesystems: mount: special device UUID=2a587e95-4a6c-4336-bb8b-f0d066905bc5 does not exist It just goes on to boot without mounting this filesystem. After it boots, I can log in and give the command "mount -a", and it gets mounted without problems. As far as I can tell, the reason for this is that CentOS doesn't wait for the external disk to get initialized fully and it just doesn't find it at boot time. I have other CentOS blades, installed and booting from the same SAN and they work without problems, but I noticed that they wait a little bit longer at boot. Am I missing some stuff from initrd? What can I do to make it wait for the block device a bit longer before it tries mounting it ? Thanks! -- Imre Gergely http://havaz.net gpg --keyserver subkeys.pgp.net --recv-keys 0x34525305

5 7

CentOS 7 CUPS: where queue defaults are stored?
by Valeri Galtsev 10 Oct '15

10 Oct '15

Dear Experts, CentOS 7 outsmarted me (again...). Could someone tell me where cups print queues' default settings are stored? In the past I was doing rather trivial thing: I was setting up prototype machine (making kickstart file based on it), then I was configuring all printers on prototype machine. After which (with cups daemon stopped) I was just packing /etc/cups (and maybe /usr/share/cups/model if extra ppd's were added). Then as a post-install I was just moving /etc/cups off the way, and unpacking /etc/cups, and all my printer configuration was there on newly built machine. Not anymore! After done what is described above I indeed have all printers, but queue defaults a weird: "double sided short edge" instead of "double sided long edge" as was configured on the prototype machine. What is more setting off is: recursive grep of /etc does not reveal files containing these settings (OK, OK, I know, I'm stupid, I don't know what pattern to grep for, but they are definitely not in /etc/cups AFAIK, or at leas not as ASCII...). Any insight into the system with - *cough* *cough* - binary configuration files? Incidentally, how do _you_ replicate CUPS configuration on CentOS 7 ? Thanks a lot for your help ! Valeri ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++

2 2

vino-server on Centos 6.7
by Milton Plasencia 09 Oct '15

09 Oct '15

Hi, The vino-server take too much cpu and memory, how to fix it? Cheers, M.

3 8

CentOS-6 SSHD chroot SELinux problem
by James B. Byrne 09 Oct '15

09 Oct '15

I run a sshd host solely to allow employees to tunnel secure connections to our internal hosts. Some of which do not support encrypted protocols. These connections are chroot'ed via the following in /etc/ssh/sshd_config Match Group !wheel,!xxxxxx,yyyyy AllowTcpForwarding yes ChrootDirectory /home/yyyyy X11Forwarding yes Where external users belong to group yyyyy (primary). We have a problem with SELinux in that chrooted users cannot tunnel https requests unless SELinux is set to permissive (or turned off altogether). This problem does not evidence itself unless the account is chrooted. The output from audit2allow is this: sudo audit2allow -l -a #============= chroot_user_t ============== allow chroot_user_t cyphesis_port_t:tcp_socket name_connect; allow chroot_user_t user_home_t:chr_file open; #============= syslogd_t ============== #!!!! The source type 'syslogd_t' can write to a 'dir' of the following types: # var_log_t, var_run_t, syslogd_tmp_t, syslogd_var_lib_t, syslogd_var_run_t, innd_log_t, device_t, tmp_t, logfile, cluster_var_lib_t, cluster_var_run_t, root_t, krb5_host_rcache_t, cluster_conf_t, tmp_t allow syslogd_t user_home_t:dir write; My questions are: Do SE booleans settings exist that permit chrooted ssh access to forward https and log the activity? If so then what are they? If not, then have I made a configuration error in sshd_config? What is it? If not, then is this a defect in the SELinux policy? If not, then What are the implications of creating a custom policy to handle this using the output given above? -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

recommended methods/software for videocasting
by ken 08 Oct '15

08 Oct '15

An acquaintance is considering videocasting speakers at a conference and using a Twitter product called Periscope. I'd like to recommend an open source solution. While I've never offered videos over the web, I have made audios available, and all it entailed was placing the file on the website and putting its url on a visible webpage. I wouldn't think any more than that is required for video. True? "Live" videocasting is likely a different animal. How is this accomplished? Also, which video formats are recommended-- FOSS of course preferred, but a FOSS format for which there are readily available client apps on the major platforms (MS, Android, OSX, Linux). Thanks for your expertise.

3 2

CentOS-announce Digest, Vol 128, Issue 2
by centos-announce-request＠centos.org 08 Oct '15

08 Oct '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEEA-2015:1863 CentOS 6 tzdata Enhancement Update (Johnny Hughes) 2. CEEA-2015:1863 CentOS 5 tzdata Enhancement Update (Johnny Hughes) 3. CEEA-2015:1863 CentOS 7 tzdata Enhancement Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 7 Oct 2015 22:45:04 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2015:1863 CentOS 6 tzdata Enhancement Update Message-ID: <20151007224504.GA44671(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2015:1863 Upstream details at : https://rhn.redhat.com/errata/RHEA-2015-1863.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: c9849a36e4b041658f626ddda0523574e8b5ccd19e777744d4257dc8947b8e29 tzdata-2015g-2.el6.noarch.rpm 659c9b6daca8804606cf246b800fed7321d0de88e61e4288ede85a12b6a0f03c tzdata-java-2015g-2.el6.noarch.rpm x86_64: c9849a36e4b041658f626ddda0523574e8b5ccd19e777744d4257dc8947b8e29 tzdata-2015g-2.el6.noarch.rpm 659c9b6daca8804606cf246b800fed7321d0de88e61e4288ede85a12b6a0f03c tzdata-java-2015g-2.el6.noarch.rpm Source: 3abae3f896ffbfddf60eb19aad3302b16f1bd4084ac98d4fcd34857017e00aa1 tzdata-2015g-2.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 7 Oct 2015 22:54:46 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2015:1863 CentOS 5 tzdata Enhancement Update Message-ID: <20151007225446.GA2883(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2015:1863 Upstream details at : https://rhn.redhat.com/errata/RHEA-2015-1863.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 1ab030200a4b8326ce536add751e0d62130a0cf0d5ceb3c55d5bbdb69dd1360f tzdata-2015g-1.el5.i386.rpm 3916a63973161e1baab95eca4f91c528df0ff30e3e65f5a665b72057d2fea6f8 tzdata-java-2015g-1.el5.i386.rpm x86_64: 9724fd4da7d4e606d0587d46d1c6abf9db51361d601f5b06379307039e7a3edc tzdata-2015g-1.el5.x86_64.rpm 55e0dd8e80657249398935bd9627703287eeb17f65e647e5b8a5b1242a320a5a tzdata-java-2015g-1.el5.x86_64.rpm Source: 2f675dd8beb518fe30acfb829784726758d322b195867ee095b060d1d8777fc8 tzdata-2015g-1.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Wed, 7 Oct 2015 23:00:27 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2015:1863 CentOS 7 tzdata Enhancement Update Message-ID: <20151007230027.GA52070(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2015:1863 Upstream details at : https://rhn.redhat.com/errata/RHEA-2015-1863.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 3e234c5f002772a1602e41dd68b76797aee91dae4a0cec017b2ceab0f13dbba6 tzdata-2015g-1.el7.noarch.rpm 3a0cade89122a3ba3dfeb243a4be7428d6843012d2d813821f1cc8a89774e3d7 tzdata-java-2015g-1.el7.noarch.rpm Source: 2c267de5ffb17f1edf2f34f5ad568221ddbea335c6552ec63b7962d0786f9cae tzdata-2015g-1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 128, Issue 2 ***********************************************

1 0

Software RAID1 Drives
by Matt 08 Oct '15

08 Oct '15

I have 3 4TB WD drives I want to put in a RAID1 array. Two WD4000FYYZ and One WD4000F9YZ All enterprise class but two are WD Re and one is WD Se. I ordered the first two thinking 2 drives in the raid array would be sufficient but later decided its a long drive to the server so I would rather have 3 drives and ordered a third in accidentally did not get EXACT same thing. Would there be ANY issues mixing these?

4 4

OT hardware issue: HP controller to 3rd party RAID
by m.roth＠5-cent.us 07 Oct '15

07 Oct '15

Hi, folks, Got an old HP box with a P800 Smart Array controller. The HP RAID box plugged into it's failing, and we got a new JetStor. Anyone know if we can just plug the JetStor in and set it to passthrough, or if we have to use the P800's firmware to set up the RAID, or other gotchas? I *think* we could use the RAID boxes firmware to build the RAID, but last resort would be passthrough, and Linux RAID. mark

3 13

ssmtp config for gmail
by Jerry Geis 07 Oct '15

07 Oct '15

I have tried to setup ssmtp to relay through gmail. root=my gmail address AuthUser=my gmail address AuthPass=my password FromLineOverride=YES mailhub=smtp.gmail.com:587 UseSTARTTLS=YES TLS_CA_FILE=/etc/pki/tls/certs/ca-bundle.crt I get this error: Authorization failed (534 5.7.14 https://support.google.com/mail/answer/78754 145sm16287775qhb.20 - gsmtp) I am not using two step verification at this time. I can sign into my account just fine. Am I missing a step? Thanks Jerry

2 2

Re: [CentOS] ssmtp config for gmail
by Richard 07 Oct '15

07 Oct '15

> Date: Wednesday, October 07, 2015 10:39:00 -0400 > From: Jerry Geis <geisj(a)pagestation.com> > > I have tried to setup ssmtp to relay through gmail. > > root=my gmail address > AuthUser=my gmail address > AuthPass=my password > FromLineOverride=YES > mailhub=smtp.gmail.com:587 > UseSTARTTLS=YES > TLS_CA_FILE=/etc/pki/tls/certs/ca-bundle.crt > > I get this error: > > Authorization failed (534 5.7.14 > https://support.google.com/mail/answer/78754 145sm16287775qhb.20 - > gsmtp) > > I am not using two step verification at this time. I can sign into > my account just fine. > > Am I missing a step? > > Thanks > > Jerry I believe that your issue is the fourth bullet point in on the support page they link to: -- Your mail app might not support the latest security standards. Learn how to allow less secure apps access to your account. If you aren't using OAuth 2.0 (which you aren't in your context): <https://developers.google.com/gmail/oauth_overview?hl=en> you need to set your gmail account to accept connections from "less secure apps". <https://support.google.com/accounts/answer/6010255?hl=en>

1 0

Systemd spends 6 min. to startup a host
by C.L. Martinez 07 Oct '15

07 Oct '15

Hi all, I have a strange behavior with a CentOS7 host (fully patched). I have configured nics as old style format: ifcfg- ... due to I need to use openvswitch for my vms. All works well, except when I reboot this server. Systemd spends 6 min. to startup this host!!! .. It stops with: "A start job is running for LSB: Raise network ...". Are not supposed that systemd startups hosts more faster?? ok, is it possible to fix this?? Thanks.

8 17

[Fwd: Re: Can one construct an IPTables rule to block on NS records?]
by James B. Byrne 07 Oct '15

07 Oct '15

Hit reply instead of reply all. This is for the list. -------------------------- Original Message -------------------------- Subject: Re: [CentOS] Can one construct an IPTables rule to block on NS records? From: "James B. Byrne" <byrnejb(a)harte-lyne.ca> Date: Wed, October 7, 2015 08:52 To: "John R Pierce" <pierce(a)hogranch.com> ---------------------------------------------------------------------- On Tue, October 6, 2015 13:36, John R Pierce wrote: > On 10/6/2015 6:34 AM, Leon Fauster wrote: >> --On Monday, October 05, 2015 10:46 AM -0400 "James B. >> Byrne"<byrnejb(a)harte-lyne.ca> wrote: >> >>> >So, is there any convenient way to construct an IPTables rule to >>> block >>> >all IPs associated with a given Domain Name server? >> IPs have the reversed lookup "assosiated" with a NS. >> >> What do you mean with "associated"? >> >> Do mean all IPs that this DNS server resolves to >> (A-Records in zone) (how do know for what zone >> the NS gives authoritative answers)? >> >> Or just the domain name server IPs of a given >> domain name (NS records)? >> >> What are you trying to solve? > > I wondered much the same. most NS servers won't allow you to do a > zone transfer to find all the A/AAAA records in a given domain. doing > a > reverse DNS lookup on every incoming/outgoing socket connection would > be > beyond painful, it would bring your network to its knees as the > reverse > DNS zones are often broken. > > > I am well aware of the costs of dns lookups which is why I worded the question as broadly as I did. In the end whois provided the necessary information. Thanks to all who replied and provided advice. Regards -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

OpenLDAP on Centos/RHEL 6 still without openssl support?
by Götz Reinicke - IT Koordinator 07 Oct '15

07 Oct '15

Hi, I heard that the RHEL/Centos rpm packages of OpenLDAP 2.4 should support openssl and file pathes to the certs/keys in the online config too. But from the RHEL Documentation it is stated, that still ONLY Mozilla NSS DB Files are supported. Can anyone comment on that? Is that true? Thanks and Regards . Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 82420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Jürgen Walter MdL Staatssekretär im Ministerium für Wissenschaft, Forschung und Kunst Baden-Württemberg Geschäftsführer: Prof. Thomas Schadt

1 0

Can one construct an IPTables rule to block on NS records?
by James B. Byrne 06 Oct '15

06 Oct '15

This is the same origin that I reported on earlier. Apparently asking for an explanation of why they were probing our sites only encouraged them to make additional attempts. sshd: Authentication Failures: unknown (ip-173-201-178-18.ip.secureserver.net) 2 Time(s) unknown (ip-97-74-196-33.ip.secureserver.net) 2 Time(s) unknown (ip-97-74-202-95.ip.secureserver.net) 2 Time(s) root (ip-173-201-252-24.ip.secureserver.net) 1 Time(s) root (ip-72-167-249-196.ip.secureserver.net) 1 Time(s) root (ip-72-167-251-87.ip.secureserver.net) 1 Time(s) root (ip-97-74-121-108.ip.secureserver.net) 1 Time(s) root (ip-97-74-193-219.ip.secureserver.net) 1 Time(s) root (ip-97-74-206-13.ip.secureserver.net) 1 Time(s) unknown (ip-173-201-252-24.ip.secureserver.net) 1 Time(s) unknown (ip-72-167-249-196.ip.secureserver.net) 1 Time(s) unknown (ip-72-167-251-87.ip.secureserver.net) 1 Time(s) unknown (ip-97-74-121-108.ip.secureserver.net) 1 Time(s) unknown (ip-97-74-193-219.ip.secureserver.net) 1 Time(s) unknown (ip-97-74-206-13.ip.secureserver.net) 1 Time(s) Invalid Users: Unknown Account: 12 Time(s) So, is there any convenient way to construct an IPTables rule to block all IPs associated with a given Domain Name server? dig -x 173.201.178.18 ; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.37.rc1.el6_7.4 <<>> -x 173.201.178.18 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1357 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 4 ;; QUESTION SECTION: ;18.178.201.173.in-addr.arpa. IN PTR ;; ANSWER SECTION: 18.178.201.173.in-addr.arpa. 3600 IN PTR ip-173-201-178-18.ip.secureserver.net. ;; AUTHORITY SECTION: 201.173.in-addr.arpa. 66199 IN NS cns2.secureserver.net. 201.173.in-addr.arpa. 66199 IN NS cns1.secureserver.net. ;; ADDITIONAL SECTION: cns2.secureserver.net. 172800 IN A 216.69.185.100 cns2.secureserver.net. 172800 IN AAAA 2607:f208:303::64 cns1.secureserver.net. 172800 IN A 208.109.255.100 cns1.secureserver.net. 172800 IN AAAA 2607:f208:207::64 Like say, cns{1,2}.secureserver.net. Or an entire domain? Say secureserver.net. ? -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

5 5

Off Topic - SSL reverse proxy and Mixed Content
by Clint Dilks 06 Oct '15

06 Oct '15

Hi, Not a CentOS specific issue, but I am a bit stuck as where I might ask for help so if anyone has any ideas please share :) I have a site that I want to work behind a reverse proxy (httpd) if using http:// everything works as expected. If using https:// some content is displayed but some content is blocked because of stylesheets and etc being requested via http rather https. I know that the long term solution should be to get all code changed so that it references //myserver/resource or /resource rather than http://myserver/resource but is there anything I can do with httpd to get this working until these changes are made ? Thanks for any suggestions. Below is my current VirtualHost config ProxyRequests On ProxyPreserveHost On ProxyTimeout 300 <Proxy *> Order allow,deny Allow from all </Proxy> ProxyPass / http://myserver/ ProxyPassReverse / http://myserver/

2 2

python setup.py ssl error
by Tim Dunphy 06 Oct '15

06 Oct '15

Hey guys, I'm trying to do a source install of s3cmd onto a centos 6.5 host. Because the version in the repo is a little old. So when I go to run the installer app with the command python2.7 setup.py install, I'm getting the following error: Installed /usr/local/lib/python2.7/site-packages/s3cmd-1.6.0-py2.7.egg Processing dependencies for s3cmd==1.6.0 Searching for six>=1.5 Reading https://pypi.python.org/simple/six/ Download error on https://pypi.python.org/simple/six/: [Errno 1] _ssl.c:499: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed -- Some packages may not be found! Couldn't find index page for 'six' (maybe misspelled?) Scanning index of all packages (this may take a while) Reading https://pypi.python.org/simple/ Download error on https://pypi.python.org/simple/: [Errno 1] _ssl.c:499: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed -- Some packages may not be found! No local packages or download links found for six>=1.5 error: Could not find suitable distribution for Requirement.parse('six>=1.5') I thought this might be a proxy issue of some kind, but I have several proxy values set in my environment: [root@ushapld00050 s3cmd-1.6.0]# env | grep -i proxy http_proxy=http://proxy.mycompany.com:80 https_proxy=http://proxy.mycompany.com:80 HTTPS_PROXY=http://proxy.mycompany.com:80 no_proxy=usushaplp461.mycompany.ge.com HTTP_PROXY=http://proxy.mycompany.com:80 Can someone please give me a heads up as to how to resolve this issue? Thanks, Tim -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

1 0

CentOS 7 & dhclient hooks
by Tero M 06 Oct '15

06 Oct '15

Hi, I have CentOS 7 and I am trying to get dhclient hooks working. I have 1) created file /etc/dhcp/dhclient-enp4s0.conf, 2) created directories /etc/dhcp/{dhclient-enter-hooks.d, dhclient-exit-hooks.d}, 3) added line 'DHCLIENTARGS="-nc"' into file ifcfg-enp4s0 and 4) added file /etc/dhcp/dhclient-enter-hooks.d/test with line echo "executed enter-hook", 5) but I was not getting any output after executing ifdown enp4s0 && ifup enp4s0. However, I was able to do this with NetworkManagers dispather scripts, but I prefer old school dhclient hooks. :-) sincerely Tero M

2 1

Unable to install Chinese encoding package GBK
by Eric Dong 05 Oct '15

05 Oct '15

Hello, I found it in CentOS 7, the "yum install "Chinese support" is not available. And I need the Chinese simplified encoding with GBK support. Could please suggest how should I install this package in Centos 7? Thanks a lot. Regards, Eric

2 1

COMPILATION ERROR dev_t, into_t , no_tetc
by Samson 05 Oct '15

05 Oct '15

Hi, I have software in CentOS6, it is compiling very well. I decided to put the same software into CentOS7 but i am having this compilation errors below: In file included from /opt/TAFC/R14.1/include/jsystem.h:106:0, from BASIC_2.c:6: /opt/TAFC/R14.1/include/jedi.h:534:2: error: unknown type name ‘ino_t’ ino_t ino; // The i-node number of a file ^ /opt/TAFC/R14.1/include/jedi.h:535:2: error: unknown type name ‘dev_t’ dev_t dev; // The device number of a file ^ /opt/TAFC/R14.1/include/jedi.h:537:2: error: unknown type name ‘ino_t’ ino_t lockid1; In file included from /opt/TAFC/R14.1/include/jsystem.h:106:0, from BASIC_2.c:6: /opt/TAFC/R14.1/include/jedi.h:729:1: error: unknown type name ‘ino_t’ ino_t JRunFileIOGetIno(DPSTRUCT dp, struct jfd fdinfo ); ^ /opt/TAFC/R14.1/include/jedi.h:730:1: error: unknown type name ‘dev_t’ dev_t JRunFileIOGetDevice(DPSTRUCT dp, struct jfd fdinfo ); ^ /opt/TAFC/R14.1/include/jedi.h:732:1: error: unknown type name ‘ino_t’ ino_t JRunFileIOGetLock1(DPSTRUCT dp, struct jfd fdinfo ); Kindly Help. Thanks

1 0

CentOS-6.7 Kernel Panic
by James B. Byrne 05 Oct '15

05 Oct '15

This is likely (almost certainly) a hardware issue. However, I would like any guidance available on diagnosing the exact cause and remedy. We have a warm standby server then went off line over the weekend. The problem manifests itself as a kernel panic during the centos boot process. The issue appears to be with auto-mounting a number of pci devices. Unfortunately the error messages scroll off the monitor that I attached to it. This is some of the residue text that I though might have some use in diagnosing the problem. Kernel panic not syncing: Fatal exception Comm pciehpd Tainted: G DW -- ------- . . . drm_k,s_helper panic occurred switching back to text mode. At which point the system is non-responsive. Any ideas as to what is going on? Any other information I should be looking for? -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

ExecShield in C6 or C7 kernels?
by Fred Smith 05 Oct '15

05 Oct '15

I'm trying to figure out if the stock kernels for Centos-6 and/or Centos-7 have ExecShield compiled in, and if so, if it is turned on by default. On my local C7 box I've been looking at/for indicators without a lot of success: /usr/lib/sysctl.d/00-system.conf. does not mention ExecShield at all. /proc/sys/kernel has no entries for exec_shield no mention of execshield in any of the files in /etc/grub.d So, as far as I can see, there are no settings that I would expect to force ExecShield to an ON setting. I DO see, in /proc/sys/kernel, a file named randomize_va_space, and it contains a value of "2". I've been googling (well, actually DuckDuckGo-ing) and most of the articles I find regarding ExecShield are 3-10 years old. I'd appreciate pointers/guides/info on ExecShield in C6 or C7. thanks in advance! Fred -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- "And he will be called Wonderful Counselor, Mighty God, Everlasting Father, Prince of Peace. Of the increase of his government there will be no end. He will reign on David's throne and over his kingdom, establishing and upholding it with justice and righteousness from that time on and forever." ------------------------------- Isaiah 9:7 (niv) ------------------------------

3 3

ERROR Installing Cisco AnyConnect on Centos 6x
by CS DBA 02 Oct '15

02 Oct '15

Hi All; I've downloaded the Cisco AnyConnect tar.gz file for one of our clients, when I untar it and then run the vpn_install script in the vpnclient directory I get the below error. Thanks in advance for any help... / //# ./vpn_install// //Cisco Systems VPN Client Version 4.8.02 (0030) Linux Installer// //Copyright (C) 1998-2006 Cisco Systems, Inc. All Rights Reserved.// // //By installing this product you agree that you have read the// //license.txt file (The VPN Client license) and will comply with// //its terms.// // // //Directory where binaries will be installed [/usr/local/bin]// // //Automatically start the VPN service at boot time [yes]// // //In order to build the VPN kernel module, you must have the// //kernel headers for the version of the kernel you are running.// // // //Directory containing linux kernel source code [/lib/modules/2.6.32-573.7.1.el6.x86_64/build]// // //* Binaries will be installed in "/usr/local/bin".// //* Modules will be installed in "/lib/modules/2.6.32-573.7.1.el6.x86_64/CiscoVPN".// //* The VPN service will be started AUTOMATICALLY at boot time.// //* Kernel source from "/lib/modules/2.6.32-573.7.1.el6.x86_64/build" will be used to build the module.// // //Is the above correct [y]// // //Making module// //make -C /lib/modules/2.6.32-573.7.1.el6.x86_64/build SUBDIRS=/root/vpnclient modules// //make[1]: Entering directory `/usr/src/kernels/2.6.32-573.7.1.el6.x86_64'// //scripts/Makefile.build:49: *** CFLAGS was changed in "/root/vpnclient/Makefile". Fix it to use EXTRA_CFLAGS. Stop.// //make[1]: *** [_module_/root/vpnclient] Error 2// //make[1]: Leaving directory `/usr/src/kernels/2.6.32-573.7.1.el6.x86_64'// //make: *** [default] Error 2// //Failed to make module "cisco_ipsec.ko".// /

4 5

CentOS-announce Digest, Vol 128, Issue 1
by centos-announce-request＠centos.org 02 Oct '15

02 Oct '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2015:1852 Important CentOS 6 thunderbird Security Update (Johnny Hughes) 2. CESA-2015:1852 Important CentOS 5 thunderbird Security Update (Johnny Hughes) 3. CESA-2015:1852 Important CentOS 7 thunderbird Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 1 Oct 2015 21:36:10 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1852 Important CentOS 6 thunderbird Security Update Message-ID: <20151001213610.GA26999(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1852 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1852.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: bbc9d04f7fc104601d6e8569f62926c1fa3758de03a5045340649abb4105ef84 thunderbird-38.3.0-1.el6.centos.i686.rpm x86_64: 9b7cf38f1e8ef9f0d9f85e862186bb776d139a9db4e68e9022c876f22494c985 thunderbird-38.3.0-1.el6.centos.x86_64.rpm Source: 8bbf151af3c1aa1271db16833017c2dce3c0e990a7d6015c4d06d31ef15dca55 thunderbird-38.3.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Thu, 1 Oct 2015 21:53:42 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1852 Important CentOS 5 thunderbird Security Update Message-ID: <20151001215342.GA5214(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1852 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1852.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 2693fc3a1b9a426c07972e32662ce315cf9b46a15651b0ae03227e4abced099e thunderbird-38.3.0-1.el5.centos.i386.rpm x86_64: 5168eccb0987020d33f80af85f407501c723a399e6e457ca47066813635fbe54 thunderbird-38.3.0-1.el5.centos.x86_64.rpm Source: 6003067c8e410916dcfbee384502a1cc44230c0d984669eac0bf3536551e590f thunderbird-38.3.0-1.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Thu, 1 Oct 2015 21:53:20 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1852 Important CentOS 7 thunderbird Security Update Message-ID: <20151001215320.GA34305(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1852 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1852.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 6b68d2bb04d8846ddc2d6a2dbfd01945c8444c222c98bf2cdb7cfd43cc24d874 thunderbird-38.3.0-1.el7.centos.x86_64.rpm Source: de2c73cc73604af6f7b8a389b5f2f3b4ce3fc7e122427b67f2bb55d279333337 thunderbird-38.3.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 128, Issue 1 ***********************************************

1 0

Kickstarting bonded interfaces
by isdtor 02 Oct '15

02 Oct '15

Since CentOS 6.4, anaconda supports kickstarting from bonded interfaces. Has anyone managed to get this working? Bonding modes 1, 5, 6 work fine, and they do not need any particular support on the switch. But modes 0, 2-4 are a different story, no luck here. network --onboot yes --device bond0 --activate --bootproto static --bondslaves=eth0,eth1 --bondopts=mode=balance-rr,miimon=100 --ip 1.2.3.4 --netmask 255.255.255.0 --gateway 1.2.3.1 --nameserver 1.2.3.99 --hostname server network --onboot yes --device eth0 --activate No interactive shell becomes available on vc 2, all I see logged on vc 3 is that eth0 becomes active. Then bond0 becomes active, and eth0 is de-activated, and the machine stops pinging. When a network eth1 line is added, eth1 is also tried and then deactivated. I've had a little bit more success with 802.3ad. The machine remains pingable and I assume bond0 is online, but the install media cannot be mounted. To get there, the network ... eth0 line had to appear before the bond0 line in the kickstart file. Any advice?

1 0

yum does not update package list
by Kommander Mighty Aura 01 Oct '15

01 Oct '15

Hello. I have been trying to add rpmforge as a repository, but yum does not seem to be updating the package lists. I tried $ yum check-updates [...] Loading mirror speeds from cached hostfile * base: <mirror> * epel: <mirror> * extras: <mirror> * rpmforge: mirror.ate.info * updates: <mirror> and searched for any package available there, like i3 and mpv. It is still like the repository was never added. I imported the GPG key mentioned in the wiki, and installed <http://pkgs.repoforge.org/rpmforge-release/rpmforge-release-0.5.3-1.el7.rf.…>, checked /etc/yum.repos.d/rpmforge.repo and it is enabled. Tried enabling rpmforge-extras and rpmforge-testing, but i noticed no difference. I am using CentOS 7.

4 3

CentOS-6.7 Passing delayed shutdown via ssh command line argument?
by James B. Byrne 30 Sep '15

30 Sep '15

If I log into a host via ssh from my workstation then I can enter this: shutdown -r +90& and log out. The shutdown command will continue in effect and will activae 90 minutes later. However, if I do this instead: ssh -t host.domain.tld 'shutdown -r +90&' then the shutdown command does not remain in effect. Why is this so and is there some way to achieve this? -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 3

sendmail config finding wrong relay
by Jerry Geis 30 Sep '15

30 Sep '15

Hi all, I set my sendmail.mc file to have a SMART_HOST entry of mail.xyz.com I do "make" and "service sendmail restart" ... I should be good, but no. :) If I do "host mail.xyz.com" I get the correct address and if I "telnet mail.xyz.com 25" I get a connection. however when I do a test mail - its trying to RELAY to another host. I thought SMART_HOST was the only one it would try to relay to? yes there is only one SMART_HOST in my file, and sendmail.cf shows the correct name. How do I tell what is happening here? the maillog only shows it trying to relay to the wrong host, not the one I entered. Any thoughts? Thanks, Jerry

6 6

Keepalived vrrp problem
by Tim Dunphy 30 Sep '15

30 Sep '15

Hey guys, I'm trying to install keepalived 1.2.19 on a centos 6.5 machine. I did an install from source. And when I start keepalived this is what I'm seeing in the logs. It's reporting that the VRRP_Instance(VI_1) Now in FAULT state. Here's more of that log entry: Sep 29 12:06:58 USECLSNDMNRDBA Keepalived_vrrp[44943]: VRRP Instance = VI_1 Sep 29 12:06:58 USECLSNDMNRDBA Keepalived_vrrp[44943]: Using VRRPv2 Sep 29 12:06:58 USECLSNDMNRDBA Keepalived_vrrp[44943]: Want State = MASTER Sep 29 12:06:58 USECLSNDMNRDBA Keepalived_vrrp[44943]: Runing on device = eth1 Sep 29 12:06:58 USECLSNDMNRDBA Keepalived_vrrp[44943]: Gratuitous ARP repeat = 5 Sep 29 12:06:58 USECLSNDMNRDBA Keepalived_vrrp[44943]: Gratuitous ARP refresh repeat = 1 Sep 29 12:06:58 USECLSNDMNRDBA Keepalived_vrrp[44943]: Virtual Router ID = 51 Sep 29 12:06:58 USECLSNDMNRDBA Keepalived_vrrp[44943]: Priority = 101 Sep 29 12:06:58 USECLSNDMNRDBA Keepalived_vrrp[44943]: Advert interval = 1 sec Sep 29 12:06:58 USECLSNDMNRDBA Keepalived_vrrp[44943]: Accept disabled Sep 29 12:06:58 USECLSNDMNRDBA Keepalived_vrrp[44943]: Virtual IP = 1 Sep 29 12:06:58 USECLSNDMNRDBA Keepalived_vrrp[44943]: 10.40.116.34/32 dev eth1 scope global Sep 29 12:06:58 USECLSNDMNRDBA Keepalived_vrrp[44943]: Using LinkWatch kernel netlink reflector... Sep 29 12:06:58 USECLSNDMNRDBA Keepalived_vrrp[44943]: VRRP sockpool: [ifindex(3), proto(112), unicast(0), fd(10,11)] Sep 29 12:06:58 USECLSNDMNRDBA Keepalived_healthcheckers[44942]: ------< Global definitions >------ Sep 29 12:06:58 USECLSNDMNRDBA Keepalived_healthcheckers[44942]: Router ID = USECLSNDMNRDBA Sep 29 12:06:58 USECLSNDMNRDBA Keepalived_healthcheckers[44942]: VRRP IPv4 mcast group = 224.0.0.18 Sep 29 12:06:58 USECLSNDMNRDBA Keepalived_healthcheckers[44942]: VRRP IPv6 mcast group = ff02::12 Sep 29 12:06:58 USECLSNDMNRDBA Keepalived_healthcheckers[44942]: ------< SSL definitions >------ Sep 29 12:06:58 USECLSNDMNRDBA Keepalived_healthcheckers[44942]: Using autogen SSL context Sep 29 12:06:58 USECLSNDMNRDBA Keepalived_healthcheckers[44942]: Using LinkWatch kernel netlink reflector... *Sep 29 12:06:59 USECLSNDMNRDBA Keepalived_vrrp[44943]: Kernel is reporting: interface eth1 DOWN* *Sep 29 12:06:59 USECLSNDMNRDBA Keepalived_vrrp[44943]: VRRP_Instance(VI_1) Now in FAULT state* And if I do an ifconfig command I see no evidence of an eth1 existing. Also I can't ping the virtual address that I'm trying to create: # ping -c 5 10.40.116.34 PING 10.40.116.34 (10.40.116.34) 56(84) bytes of data. >From 10.40.116.30 icmp_seq=2 Destination Host Unreachable >From 10.40.116.30 icmp_seq=3 Destination Host Unreachable >From 10.40.116.30 icmp_seq=4 Destination Host Unreachable >From 10.40.116.30 icmp_seq=5 Destination Host Unreachable --- 10.40.116.34 ping statistics --- 5 packets transmitted, 0 received, +4 errors, 100% packet loss, time 14001ms pipe 3 Here are my configs starting with the first machine: # cat keepalived.conf vrrp_instance VI_1 { interface eth1 state MASTER virtual_router_id 51 priority 101 # 101 on master, 100 on backup vrrp_unicast_bind 10.40.116.30 # Internal IP of this machine vrrp_unicast_peer 10.40.116.31 # Internal IP of peer virtual_ipaddress { 10.40.116.34 } And here's the config on the second machine: # cat /etc/keepalived/keepalived.conf vrrp_instance VI_1 { interface eth1 state MASTER virtual_router_id 51 priority 100 # 101 on master, 100 on backup vrrp_unicast_bind 10.40.116.31 # Internal IP of this machine vrrp_unicast_peer 10.40.116.30 # Internal IP of peer virtual_ipaddress { 10.40.116.34 } Does anyone have any experience in solving this kind of problem? Any suggestions on how to resolve this would be great. Thanks, Tim -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

4 4

CentOS-announce Digest, Vol 127, Issue 8
by centos-announce-request＠centos.org 30 Sep '15

30 Sep '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2015:1840 Important CentOS 5 openldap Security Update (Johnny Hughes) 2. CESA-2015:1840 Important CentOS 6 openldap Security Update (Johnny Hughes) 3. CESA-2015:1840 Important CentOS 7 openldap Security Update (Johnny Hughes) 4. [Infra] dev.centos.org redirection (Fabian Arrotin) ---------------------------------------------------------------------- Message: 1 Date: Tue, 29 Sep 2015 13:29:35 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1840 Important CentOS 5 openldap Security Update Message-ID: <20150929132935.GA29687(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1840 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1840.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: cc181bbfac7f8256afb84c7345aeeabe02967ce32d0b19980e3d10ab7eff941d compat-openldap-2.3.43_2.2.29-29.el5_11.i386.rpm b22b59b70a24b9d81e3636dd64c13bcb31837d0fc585e8d40d3c42b09addc982 openldap-2.3.43-29.el5_11.i386.rpm 3071dbeb025e46da4b8ebb3cf697871525e0ff3f319c062f989d6538b4b6a3d3 openldap-clients-2.3.43-29.el5_11.i386.rpm f42c1033d9c8749d85358d8ed2636c5f43a06bc15561dca4d00adc69483044bf openldap-devel-2.3.43-29.el5_11.i386.rpm 7dee4dd6721f9222268e9c11d96db5d0624ec0067d7924b0eeebf78791cad6ee openldap-servers-2.3.43-29.el5_11.i386.rpm a738a621d1fff4855f994c2eb316dd277cda9f20c74c3437c7718f21ddad7901 openldap-servers-overlays-2.3.43-29.el5_11.i386.rpm f902ae9ff4405241871cbe51bdf94064a4b1759d7fbce279df5d8be04d26d074 openldap-servers-sql-2.3.43-29.el5_11.i386.rpm x86_64: cc181bbfac7f8256afb84c7345aeeabe02967ce32d0b19980e3d10ab7eff941d compat-openldap-2.3.43_2.2.29-29.el5_11.i386.rpm 5757fda05767444bb1642a8191c3b6f2d76745ba30132ea9d3fd766379f99e2b compat-openldap-2.3.43_2.2.29-29.el5_11.x86_64.rpm b22b59b70a24b9d81e3636dd64c13bcb31837d0fc585e8d40d3c42b09addc982 openldap-2.3.43-29.el5_11.i386.rpm e6dd51c4f2f4a23fec2be3f298b76abc87b3930e2fa0f3c0ad440f5ef70da35e openldap-2.3.43-29.el5_11.x86_64.rpm a7bdd364235403770fac7632b572323bda2565b3c9f23d371768ab859dfc5137 openldap-clients-2.3.43-29.el5_11.x86_64.rpm f42c1033d9c8749d85358d8ed2636c5f43a06bc15561dca4d00adc69483044bf openldap-devel-2.3.43-29.el5_11.i386.rpm 32164d50ac497028e5c24f8bb1535c37abdf78cd230922cc63bb0c8ac7cf65af openldap-devel-2.3.43-29.el5_11.x86_64.rpm 818492aef0cad81ecc9ea66f4eeff8a4a44a23ed223927d601e4b555d3499e51 openldap-servers-2.3.43-29.el5_11.x86_64.rpm d21a9d33c3559b97ee2a295c04ce723b4eae3ed46846baafe760e0cd495f5945 openldap-servers-overlays-2.3.43-29.el5_11.x86_64.rpm 13db919bbc3c414f54fb656b7e127f8cfb8700830ef261bd16b4d65e162c9f52 openldap-servers-sql-2.3.43-29.el5_11.x86_64.rpm Source: 7092b7f27ed18b2fc5496587940b14f1d223762cf8182f282a65db3c4296bc13 openldap-2.3.43-29.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 29 Sep 2015 13:30:59 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1840 Important CentOS 6 openldap Security Update Message-ID: <20150929133059.GA29682(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1840 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1840.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: ce59a16e8d9f797feff522711be61aa9bd976ddcd0e629c260a9e1120b1abda4 openldap-2.4.40-6.el6_7.i686.rpm 90cfd98aa85f7e6b816f3b9472a8bbd26979a1224fce84390d784da68f582d20 openldap-clients-2.4.40-6.el6_7.i686.rpm afa5499f0434b52f57fe96d70489d195e73f9ef59ca22f6a4b12c304ebb43635 openldap-devel-2.4.40-6.el6_7.i686.rpm 80b87de3386d0b711597554cce65d8b4e4cdea909425675562ccef2d28402453 openldap-servers-2.4.40-6.el6_7.i686.rpm be985035faf4b5b8dbee232a00eb9631659a99106d14b2044f82d8ccec34dd8a openldap-servers-sql-2.4.40-6.el6_7.i686.rpm x86_64: ce59a16e8d9f797feff522711be61aa9bd976ddcd0e629c260a9e1120b1abda4 openldap-2.4.40-6.el6_7.i686.rpm b8658e6e57809577463a9f168656d9ccbb1f2d9e5d480d77ace7eac594789350 openldap-2.4.40-6.el6_7.x86_64.rpm 516d525207917340a6fc22b4cc3d1fd6d9398a0ce79ef746579155d95aac9325 openldap-clients-2.4.40-6.el6_7.x86_64.rpm afa5499f0434b52f57fe96d70489d195e73f9ef59ca22f6a4b12c304ebb43635 openldap-devel-2.4.40-6.el6_7.i686.rpm 655274004efc40a05c9947af3cb1ff654b8038cbd083fc44e25190a18f2c776d openldap-devel-2.4.40-6.el6_7.x86_64.rpm 678906aa40444064d8188d74ca33591dcc34da97723f3aff762524798b28500c openldap-servers-2.4.40-6.el6_7.x86_64.rpm d8fcc13e67551c0893f0826e1f986930094dc5efffd9cce2af0577612281d597 openldap-servers-sql-2.4.40-6.el6_7.x86_64.rpm Source: 63c1dcfee015ccec322361e78080c686e7f14a51b7cf331726b3017c1c760a67 openldap-2.4.40-6.el6_7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Tue, 29 Sep 2015 14:02:22 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:1840 Important CentOS 7 openldap Security Update Message-ID: <20150929140222.GA37381(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:1840 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1840.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: c0fbed4f2b242cde4830df33b394a226e705eae993e17e38f90e663f511fe6fd openldap-2.4.39-7.el7.centos.i686.rpm 960f62ded3dfa6c3f92f3e466ebc07c0b4f30465c3fefd4ea302128152c936e0 openldap-2.4.39-7.el7.centos.x86_64.rpm 1c1853339b71aa16592859b80f670a450a0b45cc713ccca4c3d770a76ee096a8 openldap-clients-2.4.39-7.el7.centos.x86_64.rpm 51dc10dfcfc9ba0ff965256477d789b692f942772c54845edbc8fc5f8f1e5450 openldap-devel-2.4.39-7.el7.centos.i686.rpm d906620f31cdd8a5866dfac65bcfc42fc0fec7a7b826922da0afd29d2c8dfd2b openldap-devel-2.4.39-7.el7.centos.x86_64.rpm 49d45cc17bd198d65ba8fea53944e4f8e8525ec61eaf91b9f03da839acf530c4 openldap-servers-2.4.39-7.el7.centos.x86_64.rpm 99d31fc1f35404da6a32b2ca4239a124966d3f51388c35fafa06dcf0018bd864 openldap-servers-sql-2.4.39-7.el7.centos.x86_64.rpm Source: 5ff494cb8637ecc22d9a5299d51bbd6a1dd646f75a4cd97315c9f303259f0438 openldap-2.4.39-7.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Wed, 30 Sep 2015 12:27:36 +0200 From: Fabian Arrotin <arrfab(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] [Infra] dev.centos.org redirection Message-ID: <560BB918.1040606(a)centos.org> Content-Type: text/plain; charset=utf-8 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The CentOS Infra team would like you to know that the old node hosting the dev.centos.org vhost has been replaced. As all actual testing artifacts (RPM packages, iso images, cloud images, arm images, etc) are now pushed to buildlogs.centos.org, we've decided to just redirect dev.centos.org to buildlogs nodes. Should you encounter an issue, feel free to either report it on https://bugs.centos.org, or in #centos-devel on irc.freenode.net. on behalf of the Infra team, - -- Fabian Arrotin The CentOS Project | http://www.centos.org gpg key: 56BEC54E | twitter: @arrfab -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iEYEARECAAYFAlYLuRgACgkQnVkHo1a+xU7k7gCfd1A52o+VSUK4pwJUaAEtsnyN tA0AoJVybXm5SAT+hpbnMaqbpA6Ub0xm =aJai -----END PGP SIGNATURE----- ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 127, Issue 8 ***********************************************

1 0

CentOS 6 - Support for CanoScan LiDE 210
by Meikel 30 Sep '15

30 Sep '15

Hi folks, for some time I used a HP 2840 AiO device, connected via LAN, to scan documents. As scanning application I use xsane. I want to replace that HP scanner by a CanoScan LiDE 210. # LANG="" yum info libsane-hpaio ... Installed Packages Name : libsane-hpaio Arch : x86_64 Version : 3.14.6 Release : 3.el6 Size : 148 k Repo : installed From repo : base Summary : SANE driver for scanners in HP's multi-function devices URL : http://hplip.sourceforge.net/ License : GPLv2+ Description : SANE driver for scanners in HP's multi-function devices (from HPOJ). Now I connected CanoScan LiDE 210 Scanner via USB cable to my CentOS 6 workstation. # dmesg | tail --lines=15 ... usb 3-1: new high speed USB device number 8 using xhci_hcd usb 3-1: New USB device found, idVendor=04a9, idProduct=190a usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 usb 3-1: Product: CanoScan usb 3-1: Manufacturer: Canon usb 3-1: configuration #1 chosen from 1 choice ... After opening xsane it seems to be connected to the HP Scanner. I can not find any options for choosing another scanner device. From http://www.sane-project.org/sane-mfgs.html I can see that CanoScan LiDE 210 is supported by genesys 1.0-63. From my understanding on CentOS the genesys backend is included in sane-backends: # LANG="" yum info sane-backends ... Installed Packages Name : sane-backends Arch : x86_64 Version : 1.0.21 Release : 3.el6 Size : 4.4 M Repo : installed From repo : anaconda-CentOS-201410241409.x86_64 Summary : Scanner access software URL : http://www.sane-project.org License : GPLv2+ and GPLv2+ with exceptions and Public Domain Description : Scanner Access Now Easy (SANE) is a universal scanner interface. The : SANE application programming interface (API) provides standardized : access to any raster image scanner hardware (flatbed scanner, : hand-held scanner, video and still cameras, frame-grabbers, etc.). The sane-backends is installed, but I can not "see" the scanner: # scanimage -L device `hpaio:/net/HP_Color_LaserJet_2840?zc=NPI9AC264' is a Hewlett-Packard HP_Color_LaserJet_2840 all-in-one I have no idea what I can do now. It is not clear to me if sane-backends package really includes the required genesys 1.0-63 version. Any help to make the new scanner work is appreciated. Regards, Meikel

6 9

Question maybe off topic
by Jerry Geis 29 Sep '15

29 Sep '15

Is there something in CentOS/linux that would take a single input in my case RS232 port and deliver that to two connecting network ports? So two devices can get the single port data. Thanks, Jerry

2 1

[OT] linux on a PPC (mac mini)
by wwp 29 Sep '15

29 Sep '15

Hello there, complete off-topic, sorry about this, but my former idea was to install a CentOS on an old mac mini (PPC!). Disappointed to see that PowerPC is not a supported architecture and that non ARM or Intel architecture are not managed by recent distros.. :-(. Searching the web, I see very few possibilities to install a recent (I need gnome2) GNU/Linux distro on such hardware. I gave Linux MintPPC 11 (http://www.mintppc.org/content/list-macs) a try, but the netinstall iso simply fails in installing a boot loader that conserves the original OS/X partition even after many tries and workarounds. Any hint or experience would be welcome? Regards, -- wwp

7 9

Re: [CentOS] CentOS 7 Chinese font support (Ashish Yadav)
by Eric Dong 29 Sep '15

29 Sep '15

Hello, I tried but not exists with the following non-exist error. Please advise. Thanks. # yum groupinstall "Chinese Support" Failed to set locale, defaulting to C Loaded plugins: fastestmirror, langpacks There is no installed groups file. Maybe run: yum groups mark convert (see man yum) base | 3.6 kB 00:00:00 extras | 3.4 kB 00:00:00 updates | 3.4 kB 00:00:00 Loading mirror speeds from cached hostfile * base: ossm.utm.my * extras: ossm.utm.my * updates: ossm.utm.my Warning: group Chinese Support does not exist. Maybe run: yum groups mark install (see man yum) No packages in any requested group available to install or update > ------------------------------ > > Message: 8 > Date: Tue, 29 Sep 2015 17:13:44 +0530 > From: Ashish Yadav <gwalashish(a)gmail.com> > To: CentOS mailing list <centos(a)centos.org> > Subject: Re: [CentOS] CentOS 7 Chinese font support > Message-ID: > <CAPm7S=4v7Y+PSf4ipGEJ54M67JmZC-k7DnNRRaZAg_= > zHwA5YQ(a)mail.gmail.com> > Content-Type: text/plain; charset=UTF-8 > > Hi, > > > On Tue, Sep 29, 2015 at 4:56 PM, Eric Dong <eric.dongxx(a)gmail.com> wrote: > > > Hello, > > > > I have installed CentOS7 and found some of the Chinese html web pages > > hosted on the CentOS machine cannot display normally. "yum grouplist" > > cannot find the Chinese support, not quite sure if the Chinese font > package > > is included or somewhere else? Can please help suggest how to install the > > Chinese fonts? Thanks. > > > > Try this command, > > yum groupinstall "Chinese Support" > > > --Regards > Ashishkumar S. Yadav > > > ------------------------------ > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos > > > End of CentOS Digest, Vol 128, Issue 28 > *************************************** >

1 0

CentOS 7 Chinese font support
by Eric Dong 29 Sep '15

29 Sep '15

Hello, I have installed CentOS7 and found some of the Chinese html web pages hosted on the CentOS machine cannot display normally. "yum grouplist" cannot find the Chinese support, not quite sure if the Chinese font package is included or somewhere else? Can please help suggest how to install the Chinese fonts? Thanks. Regards, Eric

4 3

Mate-update breaks locale
by johan.vermeulen7＠telenet.be 29 Sep '15

29 Sep '15

Hello All, today's Mate-updates seem to have removed our nl_be locale. We run Mate desktop on some 15 Centos7 laptops. Not so big a deal, we can easily switch to nl_nl or people would still figure it out in English. But maybe for other, not so common locales, you might want to check before updating. Greetings, Johan

2 2

httpd userdir problem
by Timothy Murphy 28 Sep '15

28 Sep '15

I'm running httpd-2.4.6-31.el7.centos.1.x86_64 under CentOS-7 (kernel 3.10.0-229.14.1.el7.x86_64). I cannot get the httpd userdir facility working; when I try to access localhost/Menloe I get the message "You don't have permission to access /Menloe on this server." I see in /var/log/httpd/error_log "Symbolic link not allowed or link target not accessible: /var/www/html/Menloe" while in /var/log/httpd/access_log I see "GET /Menloe HTTP/1.1" 403 208 In /etc/httpd/conf.d/userdir.conf I have UserDir public_html and <Directory "/home/*/public_html"> AllowOverride All Require all granted Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec Require method GET POST OPTIONS </Directory> The directory ~/public_html/Menloe/ is owned by me, and has permissions drwxr-xr-x. I wonder if anyone has met this problem? Or if anyone is using the apache userdir facility in CentOS 7? -- Timothy Murphy gayleard /at/ eircom.net School of Mathematics, Trinity College, Dublin

5 8

Is this a bug in CentOS-7 BackupPC?
by Timothy Murphy 27 Sep '15

27 Sep '15

When I try to start BackupPC with "sudo systemctl restart backuppc" on my CentOS-7 server (running kernel 3.10.0-229.14.1.el7.x86_64) I get the following error in /var/log/BackupPC/LOG 2015-09-26 13:58:14 Reading hosts file 2015-09-26 13:58:14 unix bind() failed: No such file or directory This message occurs in the Perl script /usr/share/BackupPC/bin/BackupPC : my $sockFile = "/var/run/BackupPC/BackupPC.sock"; unlink($sockFile); if ( !bind(SERVER_UNIX, sockaddr_un($sockFile)) ) { print(LOG $bpc->timeStamp, "unix bind() failed: $!\n"); exit(1); } As far as I can see (I'm no guru) this is trying to open a unix socket with the name /var/run/BackupPC/BackupPC.sock . There is no directory /var/run/BackupPC/ on my server. When I create this, setting backuppc.apache as owner, and run "sudo systemctl restart backuppc" I see in /var/log/BackupPC/LOG that BackupPC has (at long last) started -- Timothy Murphy gayleard /at/ eircom.net School of Mathematics, Trinity College, Dublin

3 4

Problems with my touchpad in CentOS7
by C.L. Martinez 26 Sep '15

26 Sep '15

Hi all, I have a lot of errors like this: psmouse serio1: Touchpad at isa0060/serio1/input0 lost sync at byte 6 This is a CentOS7 laptop (fully patched). It is the same problem reported here: https://bugs.centos.org/view.php?id=4192 and solution was to release a new kernel under cplus kernel repo ... Is the same solution for CentOS7? Will be patched? Thanks.

2 3

Samba Enterprise from Sernet no longer free
by Robert Moskowitz 26 Sep '15

26 Sep '15

http://www.samba.plus/ Currently this, other than rolling your own, this appears the only way to have a Samba AD on Centos. Later in the Samba 4.3 effort, MIT Kerberos is suppose to be supported so it MAY be easier to roll your own in a while, but until then, things are as they are. I am rethinking my efforts to develop a ARM based AD. I may just fall back (as everyone else) to just an NT style PDC.

2 1

x2go on CentOS6
by isdtor 25 Sep '15

25 Sep '15

Has anyone managed to get the x2go server working on CentOS 6.7? I started testing x2go from EPEL under 6.6, and it worked well. Then I didn't use it in 6 months plus, eventually upgraded the machine to 6.7, and it's no longer working. Both Windows and Linux clients error out with "Connection failed. 0: Event not found." A Linux client run with the debug option reports: x2go-DEBUG-../x2goclient-4.0.3.2/sshmasterconnection.cpp:963> Password authentication x2go-DEBUG-../x2goclient-4.0.3.2/sshmasterconnection.cpp:654> user auth OK x2go-DEBUG-../x2goclient-4.0.3.2/onmainwindow.cpp:2797> SSH connection established. x2go-DEBUG-../x2goclient-4.0.3.2/onmainwindow.cpp:3060> Continue normal x2go session x2go-DEBUG-../x2goclient-4.0.3.2/sshprocess.cpp:189> executing remote command via SshProcess object (0): "export HOSTNAME && x2golistsessions" x2go-DEBUG-../x2goclient-4.0.3.2/sshmasterconnection.cpp:1434> creating new channel x2go-DEBUG-../x2goclient-4.0.3.2/sshmasterconnection.cpp:1438> new channel:0x7efd94013740 x2go-DEBUG-../x2goclient-4.0.3.2/sshmasterconnection.cpp:1469> executing remote: "sh -c 'echo X2GODATABEGIN:a469c6c6-254d-431e-94ac-b30785359dbc; PATH=/usr/local/bin:/usr/bin:/bin export HOSTNAME && x2golistsessions; echo X2GODATAEND:a469c6c6-254d-431e-94ac-b30785359dbc;'" x2go-DEBUG-../x2goclient-4.0.3.2/sshmasterconnection.cpp:1492> new exec channel created x2go-DEBUG-../x2goclient-4.0.3.2/sshmasterconnection.cpp:1596> EOF ON CHANNEL 0x7efd94013740 (SshProcess: 0) x2go-DEBUG-../x2goclient-4.0.3.2/sshmasterconnection.cpp:1664> eof sent x2go-DEBUG-../x2goclient-4.0.3.2/sshmasterconnection.cpp:1668> channel closed x2go-DEBUG-../x2goclient-4.0.3.2/sshprocess.cpp:444> have only stderr, something must be wrong x2go-DEBUG-../x2goclient-4.0.3.2/sshprocess.cpp:449> ssh finished: false - "0: Event not found. " (0). x2go-DEBUG-../x2goclient-4.0.3.2/onmainwindow.cpp:3404> "0: Event not found. " This is potentially similar to http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=800, which hasn't been updated since March.

4 6

php DOMDocument and entities
by Alice Wonder 24 Sep '15

24 Sep '15

This is not CentOS specific but I hope someone here knows so I do not have to subscribe to another list. I'm using php DOMDocument to create an XSL that needs a non-breaking space between two values. Basically: $xslvalueof = $dom->createElement('xsl:value-of'); $xslvalueof->setAttribute('select', '../@month'); $caption->appendChild($xslvalueof); $nbsp = $dom->createTextNode(' '); $caption->appendChild($nbsp); $xslvalueof = $dom->createElement('xsl:value-of'); $xslvalueof->setAttribute('select', '../@year'); $caption->appendChild($xslvalueof); That's what I am trying to do. createTextNode() however tries to protect the users, and automatically turns any & into & So I tried $nbsp = $dom->createEntityReference('#160'); That however gives a dom error, it seems createEntityReference only works with named entities. $nbsp = $dom->createEntityReference('nbsp'); works, but then I would have to modify the DTD for both XSL and the target XML because neither have nbsp defined. How can I create the literal string ' ' using DOMDocument as a text node between two other nodes? This is driving me nuts. I could I suppose put it inside a span &nbsp = $dom->createElement('span', ' '); That works but is hackish. It seems to work though by generating the actual UTF8 character itself. I really wish the XML spec itself had named entities for the various whitespace characters that tend to get eaten by XML parsers if not done as a numbered entity. Ah well. Using   works just fine when the XSL is a text file. It is dynamically creating it via DOMDocument where I have a problem. Thanks for any suggestions. -- -=- Sent my from my laptop, may not be able to respond timely

1 0

Bug in init scripts for ipset?
by tony＠softins.co.uk 24 Sep '15

24 Sep '15

I've just started experimenting with ipset under CentOS 6, and have found what appears to be a bug (or poor design) in the init scripts for ipset, /etc/rc.d/init.d/ipset In stop(), save() and status(), it does lsmod to check for the existence of the ip_set module. If the module is not found, it exits without performing any action. This doesn't take account of a kernel where the ip_set code is compiled in instead of being a loadable module. An example would be my CentOS 6 virtual machine at Linode. It has a Linode-compiled kernel 4.1.0 with no separately-loaded modules. It certainly supports ipset, as I have successfully tried some test rules. However, I wondered why giving the command "service ipset save" didn't result in /etc/sysconfig/ipset being written, and discovered the cause I described above. Surely there should be a better way of determining whether the kernel includes ipset support than just looking for a module? Cheers Tony -- Tony Mountifield Work: tony(a)softins.co.uk - http://www.softins.co.uk Play: tony(a)mountifield.org - http://tony.mountifield.org

2 1

Logrotate problems
by Andrew Holway 24 Sep '15

24 Sep '15

Hi Y'all, We have nginx set up and we are having problems with logrotate. The permissions and users do not seem to be any different from other machines that are working ok however the /var/log/nginx does have a directory in there that we are using to collect some special log stuff. Could this subdirectory be interfering with the logrotate process? ta Andrew [root@ ~]# logrotate -d /etc/logrotate.d/nginx reading config file /etc/logrotate.d/nginx Handling 1 logs rotating pattern: /var/log/nginx/*log after 1 days (10 rotations) empty log files are not rotated, old logs are removed considering log /var/log/nginx/access.log error: skipping "/var/log/nginx/access.log" because parent directory has insecure permissions (It's world writable or writable by group which is not "root") Set "su" directive in config file to tell logrotate which user/group should be used for rotation. considering log /var/log/nginx/error.log error: skipping "/var/log/nginx/error.log" because parent directory has insecure permissions (It's world writable or writable by group which is not "root") Set "su" directive in config file to tell logrotate which user/group should be used for rotation.

2 5

decode http hack attempt?
by James B. Byrne 24 Sep '15

24 Sep '15

Can anyone de-cypher the second entry for me? --------------------- httpd Begin ------------------------ Requests with error response codes 403 Forbidden /: 9 Time(s) /?c=4e5e5d7364f443e28fbf0d3ae744a59a: 3 Time(s) I have found the string via Google but have not located any explanation. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss