- Discuss - lists.centos.org

Re: [CentOS] [CentOS-announce] CentOS Project joins forces with Red Hat
by Always Learning 17 Jan '14

17 Jan '14

On Tue, 2014-01-07 at 21:09 +0000, Karanbir Singh wrote: > With great excitement I'd like to announce that we are joining the Red > Hat family. The CentOS Project ( http://www.centos.org ) is joining > forces with Red Hat. Working as part of the Open Source and Standards > team ( http://community.redhat.com/ ) to foster rapid innovation > beyond the platform into the next generation of emerging technologies. > Working alongside the Fedora and RHEL ecosystems, we hope to further > expand on the community offerings by providing a platform that is > easily consumed, by other projects to promote their code while we > maintain the established base. Essentially Red Hat is slowly taking over and developing/assisting Centos to be a more regular and structure organisation. The fact that Red Hat now owns the Centos brand worries me but that's life. Absolutely nothing remains static. Centos was created by many ordinary people to whom I am very grateful. Its a really great operating system. I genuinely like it, hence I abandoned M$ completely about 5 years ago and have never regretted it. I just wish I had migrated to Centos many years earlier. Red Hat will gain commercially from their de facto take-over. One of the general beneficial effects will be bringing Linux into the vast mainstream of everyday computing and attracting (or should that be enticing?) M$ business users. Working as a single team with Red Hat will inevitably mean speedier updates for Centos users. I love Linux and want this merger to succeed. I'm patiently waiting for Centos on my Cube (Android) tablet. Happy New Year. -- Paul. England, EU. Our systems are exclusively Linux. No Micro$oft Windoze here. EXIM: chlothar.bnv-bamberg.de = 217.146.130.222 but HELO bnv-bamberg.de has no IP address

5 7

Re: [CentOS] [CentOS-announce] CentOS Project joins forces with Red Hat
by m.roth＠5-cent.us 17 Jan '14

17 Jan '14

John R. Dennison wrote: > On Fri, Jan 17, 2014 at 05:55:54PM +0100, Ljubomir Ljubojevic wrote: >> >> Ok, what ever, I am done wasting time on you. > > Excellent. Now if others would stop responding to the trolls it would > be even better. > Can't resist: I think he's trying to get our goat... and everyone knows what happens when a troll runs into a goat.... mark "your folks *did* tell you that story, right?"

1 0

Your opinion about RHCSA certification
by Fabrizio Di Carlo 17 Jan '14

17 Jan '14

Hello to all, I'm currently studying (and collecting notes here https://github.com/fdicarlo/RHCSA_cs) for RHCSA. My plan is to RHCSA -> RHCE and then RHCSS. What I want to ask you is: - What do you think about it? - Did you find it useful? - Do you have any advices? Best regards, Fabrizio -- "The intuitive mind is a sacred gift and the rational mind is a faithful servant. We have created a society that honors the servant and has forgotten the gift." (A. Einstein) "La mente intuitiva è un dono sacro e la mente razionale è un fedele servo. Noi abbiamo creato una società che onora il servo e ha dimenticato il dono." (A. Einstein) Fabrizio Di Carlo

7 9

Re: [CentOS] [CentOS-announce] CentOS Project joins forces with Red Hat
by Always Learning 17 Jan '14

17 Jan '14

On Tue, 2014-01-07 at 21:09 +0000, Karanbir Singh wrote: > With great excitement I'd like to announce that we are joining the Red > Hat family. The CentOS Project ( http://www.centos.org ) is joining > forces with Red Hat. Working as part of the Open Source and Standards > team ( http://community.redhat.com/ ) to foster rapid innovation > beyond the platform into the next generation of emerging technologies. > Working alongside the Fedora and RHEL ecosystems, we hope to further > expand on the community offerings by providing a platform that is > easily consumed, by other projects to promote their code while we > maintain the established base. But there is more to Red Hat's de facto "take-over" including the imposition of USA's domestic law on citizens all around the world. The compulsory imposition of USA law on all Centos downloaders creates the possibility of being arrested in one's home country and sent to the USA for a criminal trial. A few people in Britain have been extradited to the USA for criminal trials for matters which are not criminal in Britain. Can anyone remember seeing this on the old Centos .... ? http://www.centos.org/legal/ Export Regulations By downloading CentOS software, you acknowledge that you understand all of the following: CentOS software and technical information may be subject to the U.S. Export Administration Regulations (the “EAR”) and other U.S. and foreign laws and may not be exported, re-exported or transferred (a) to any country listed in Country Group E:1 in Supplement No. 1 to part 740 of the EAR (currently, Cuba, Iran, North Korea, Sudan & Syria); (b) to any prohibited destination or to any end user who has been prohibited from participating in U.S. export transactions by any federal agency of the U.S. government; or (c) for use in connection with the design, development or production of nuclear, chemical or biological weapons, or rocket systems, space launch vehicles, or sounding rockets, or unmanned air vehicle systems. You may not download CentOS software or technical information if you are located in one of these countries or otherwise subject to these restrictions. You may not provide CentOS software or technical information to individuals or entities located in one of these countries or otherwise subject to these restrictions. You are also responsible for compliance with foreign law requirements applicable to the import, export and use of CentOS software and technical information. This is a Community mantained site. Red Hat, Inc is not responsible for its content. -------------------------------------- -- Paul. England, EU. Our systems are exclusively Linux. No Micro$oft Windoze here.

9 17

Centos6.5 -- Broadcom BCM4313 -- having trouble connecting
by Johan Vermeulen 17 Jan '14

17 Jan '14

Dear All, I'm having trouble on 2 laptops Lenovo B580 since upgrading to Centos6.5. ( Because it's a Lenovo I cannot switch the network card for a better supported network card. ) There on the latest kernel : root@jac network-scripts]# uname -a Linux jac.cawdekempen 2.6.32-431.1.2.0.1.el6.x86_64 #1 SMP Fri Dec 13 13:06:13 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux With the help of the Elrepo Broadcom page I got the driver and that part works fine. The network card works : # vi /etc/udev/rules.d/70-persistent-net.rules # PCI device 0x14e4:0x4727 (wl) SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="c0:14:3d:c1:f6:ef", ATTR{type}=="1", KERNEL=="eth*", NAME="eth1" # uname -a eth1 Link encap:Ethernet HWaddr C0:14:3D:C1:F6:EF inet6 addr: fe80::c214:3dff:fec1:f6ef/64 Scope:Link UP BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:651 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) Interrupt:17 But I cannot connect to any wireless network with neither of the machines. I click on the gnome-nm-applet and type in the password. [root@jac network-scripts]# tail -f /var/log/messages Dec 19 11:10:17 jac NetworkManager[2148]: <info> Config: added 'scan_ssid' value '1' Dec 19 11:10:17 jac NetworkManager[2148]: <info> Config: added 'key_mgmt' value 'WPA-PSK' Dec 19 11:10:17 jac NetworkManager[2148]: <info> Config: added 'psk' value '<omitted>' Dec 19 11:10:17 jac NetworkManager[2148]: <info> Config: added 'group' value 'TKIP CCMP' Dec 19 11:10:17 jac NetworkManager[2148]: <info> Activation (eth1) Stage 2 of 5 (Device Configure) complete. Dec 19 11:10:17 jac NetworkManager[2148]: <info> Config: set interface ap_scan to 1 Dec 19 11:10:17 jac NetworkManager[2148]: <info> (eth1): supplicant connection state: inactive -> scanning Dec 19 11:10:18 jac NetworkManager[2148]: <info> (eth1): supplicant connection state: scanning -> associating Dec 19 11:10:28 jac NetworkManager[2148]: <info> (eth1): supplicant connection state: associating -> disconnected Dec 19 11:10:28 jac NetworkManager[2148]: <info> (eth1): supplicant connection state: disconnected -> scanning Dec 19 11:10:29 jac NetworkManager[2148]: <info> (eth1): supplicant connection state: scanning -> associating Dec 19 11:10:39 jac NetworkManager[2148]: <info> (eth1): supplicant connection state: associating -> disconnected Dec 19 11:10:39 jac NetworkManager[2148]: <info> (eth1): supplicant connection state: disconnected -> scanning Dec 19 11:10:40 jac NetworkManager[2148]: <info> (eth1): supplicant connection state: scanning -> associating Dec 19 11:10:42 jac NetworkManager[2148]: <warn> Activation (eth1/wireless): association took too long. Dec 19 11:10:42 jac NetworkManager[2148]: <info> (eth1): device state change: 5 -> 6 (reason 0) Dec 19 11:10:42 jac NetworkManager[2148]: <warn> Activation (eth1/wireless): asking for new secrets Dec 19 11:10:42 jac NetworkManager[2148]: <warn> Couldn't disconnect supplicant interface: Method "Disconnect" with signature "" on interface "fi.epitest.hostap.WPASupplicant.Interface" doesn't exist#012. Dec 19 11:10:42 jac NetworkManager[2148]: <warn> Couldn't disconnect supplicant interface: Method "Disconnect" with signature "" on interface "fi.epitest.hostap.WPASupplicant.Interface" doesn't exist#012. Dec 19 11:10:42 jac NetworkManager[2148]: <info> (eth1): supplicant connection state: associating -> disconnected Dec 19 11:10:43 jac NetworkManager[2148]: <info> (eth1): device state change: 6 -> 9 (reason 7) Dec 19 11:10:43 jac NetworkManager[2148]: <warn> Activation (eth1) failed for access point (Clive) Dec 19 11:10:43 jac NetworkManager[2148]: <info> Marking connection 'Auto Clive' invalid. Dec 19 11:10:43 jac NetworkManager[2148]: <warn> Activation (eth1) failed. Dec 19 11:10:43 jac NetworkManager[2148]: <info> (eth1): device state change: 9 -> 3 (reason 0) Dec 19 11:10:43 jac NetworkManager[2148]: <info> (eth1): deactivating device (reason: 0). googling for "centos6 WPASupplicant.Interface" doesn't exist#012" I found this bug: http://bugs.centos.org/view.php?id=5834 could this be the same issue? Greetings, J. -- Johan Vermeulen IT-medewerker Caw De Kempen johan.vermeulen(a)cawdekempen.be 0479.82.01.41 Opensource Software is the future.

2 4

default gw route has gone?
by Rob Kampen 16 Jan '14

16 Jan '14

Weird behaviour. A couple of days ago I installed another DSL router. During the process I have somehow caused the default gw route to disappear - on system start up the interface comes up fine, I can see and connect to the local subnet but not to the internet. [rkampen@timsws network-scripts]$ route Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 192.168.1.0 * 255.255.255.0 U 0 0 0 eth0 link-local * 255.255.0.0 U 1002 0 0 eth0 is what I get at startup. I need to add sudo route add default gw 192.168.1.1 to get things working properly. [rkampen@timsws network-scripts]$ route Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 192.168.1.0 * 255.255.255.0 U 0 0 0 eth0 link-local * 255.255.0.0 U 1002 0 0 eth0 default 192.168.1.1 0.0.0.0 UG 0 0 0 eth0 Google shows me a number of responses that all tell me to add a line to /etc/sysconfig/network which I already had. [rkampen@timsws network-scripts]$ cat /etc/sysconfig/network NETWORKING=yes HOSTNAME=timsws GATEWAY=192.168.1.1 and [rkampen@timsws network-scripts]$ cat /etc/sysconfig/network-scripts/ifcfg-eth0 DEVICE="eth0" NM_CONTROLLED="yes" ONBOOT=yes TYPE=Ethernet BOOTPROTO=dhcp DEFROUTE=no IPV4_FAILURE_FATAL=yes IPV6INIT=no NAME="System eth0" UUID=5fb06bd0-0bb0-7ffb-45f1-d6edd65f3e03 HWADDR=00:24:8C:80:0B:15 PEERDNS=yes PEERROUTES=yes LAST_CONNECT=1389583930 So what am I missing? BTW - all other devices are working just fine - just my main CentOS 6.5 WS fails. TIA

5 5

NetworkManger trying to start Supplicant
by david 16 Jan '14

16 Jan '14

Folks In Centos 6.5, I am getting the message in the log file every few minutes: NetworkManager: <info> Trying to start the supplicant... There is no wireless on that computer, but there are two NICs, because it is my home gateway. Is there some tweak that can prevent this message? The installation is a relatively new one, so all packages are "up-to-date". David Kurn

2 1

CentOS on this Laptop
by Steve Clark 16 Jan '14

16 Jan '14

Hi List, Just wondering if anyone has tried CentOS on this laptop. HP ENVY 15-j067cl 15.6 Sam's club is selling it for $699 right now. http://www.samsclub.com/sams/hp-15-6-touch-nb-intel-core-i7-4700qm/prod1161… HP ENVY 15-j067cl 15.6" Touchscreen Laptop Computer, Intel Core i7-4700QM, 8GB Memory, 750GB Hard Drive Thanks, -- Stephen Clark *NetWolves* Director of Technology Phone: 813-579-3200 Fax: 813-882-0209 Email: steve.clark(a)netwolves.com http://www.netwolves.com

2 2

odd issue with ipmitool
by m.roth＠5-cent.us 16 Jan '14

16 Jan '14

Got an older server running 6.5. I've been fighting it - I have two webcams for surveillance of the room; one works with motion, but it resizes the picture down Adjusting resolution from 640x480 to 360x296 and the video's dark and bad contrast. So I went back to the camer I'd been using before that worked fine... on CentOS 5.x, and then I remembered why I'd gone to the other camera - the bottom 40% of so of the screen is green - no picture, just green. Doing a *lot* of googling, I saw references to this, and a number of folks suggesting problems with USB messages. Now, I've tried plugging it in both front and back of the server, given the possibility that there was a difference in versions of USB support, but no joy. So this morning, I started wondering if there was something going on, hardware-wise, on the box. Installed OpenIPMI and ipmitools, fired it up, and tried to do a simple ipmitool sel list... and get "unspecified error". Ok, I said to myself, I tried ipmitool sel 1, ditto... but 2 gives me Get SDR 0003 command failed: Unspecified error Get SDR 0005 command failed: Unspecified error Get SDR 0009 command failed: Unspecified error Get SDR 0014 command failed: Unspecified error Get SDR 0017 command failed: Unspecified error and then a record. I tried jumping around - 200 (which I've seen as the limit on other machines), nothing, 150, yes, 156 or so, yes. Not some lower numbers. So, now the question is whether something screwy is going on with the hardware... or if just, for some reason, the SEL is screwed up. Note that ipmitool sdr list works fine.... mark

1 0

CentOS-announce Digest, Vol 107, Issue 9
by centos-announce-request＠centos.org 16 Jan '14

16 Jan '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2014:0026 Critical CentOS 6 java-1.7.0-openjdk Update (Johnny Hughes) 2. CESA-2014:0027 Important CentOS 5 java-1.7.0-openjdk Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 15 Jan 2014 11:04:23 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2014:0026 Critical CentOS 6 java-1.7.0-openjdk Update To: centos-announce(a)centos.org Message-ID: <20140115110423.GA23069(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:0026 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-0026.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 23a0398eef38be83195eb0fccc24ebe54b3ca51edd350b09fa6a05d256ee63cc java-1.7.0-openjdk-1.7.0.51-2.4.4.1.el6_5.i686.rpm 64371a3e7b476b95f4bfda3f805f237fa431ef21d3e79f786f2ff8e355dfcb82 java-1.7.0-openjdk-demo-1.7.0.51-2.4.4.1.el6_5.i686.rpm bb0c14e74121c9c2ca9a28d0f2f4aae69ca9efc151d484c5d2f064bf7dcf1d18 java-1.7.0-openjdk-devel-1.7.0.51-2.4.4.1.el6_5.i686.rpm f9099825fd1474021c73792e11f06722ae6d2ccaa0fd44bc63bb88624543edde java-1.7.0-openjdk-javadoc-1.7.0.51-2.4.4.1.el6_5.noarch.rpm f7290801eeb6a3b01fe36c973fbaa2131c3ae4dad9d01fc542c9d721b37abb67 java-1.7.0-openjdk-src-1.7.0.51-2.4.4.1.el6_5.i686.rpm x86_64: c4314a7f9938f7beb7d106ecd26844a3d883d91077d4bdeec40ce5e9d086b85e java-1.7.0-openjdk-1.7.0.51-2.4.4.1.el6_5.x86_64.rpm b9d76670ba0dc34bace9c995e6b3dc6c17cc8dade24a862243c2d75d18c0329b java-1.7.0-openjdk-demo-1.7.0.51-2.4.4.1.el6_5.x86_64.rpm 9440abb63aa7a5bb75e61c5a2e58483aeb302a1dbcac50d72290949783830029 java-1.7.0-openjdk-devel-1.7.0.51-2.4.4.1.el6_5.x86_64.rpm f9099825fd1474021c73792e11f06722ae6d2ccaa0fd44bc63bb88624543edde java-1.7.0-openjdk-javadoc-1.7.0.51-2.4.4.1.el6_5.noarch.rpm dac184e8c4d88dbc5da9db40561d08a75f3424b4e9502141a021f3d54e348de5 java-1.7.0-openjdk-src-1.7.0.51-2.4.4.1.el6_5.x86_64.rpm Source: e38afbec2f04dfc0982594724a371805b278a431e0ee9d220f003adda5ef348d java-1.7.0-openjdk-1.7.0.51-2.4.4.1.el6_5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 15 Jan 2014 11:16:34 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2014:0027 Important CentOS 5 java-1.7.0-openjdk Update To: centos-announce(a)centos.org Message-ID: <20140115111634.GA11446(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:0027 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-0027.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 30812d30d8ede7fa1c21174522d59bf12187bd99006475d1fcaf6bb76cf4e8ed java-1.7.0-openjdk-1.7.0.51-2.4.4.1.el5_10.i386.rpm 697b27dabe7ea3d0cc7a7b6ad307ce08c35295064dd09958a5516c5afd3d2afb java-1.7.0-openjdk-demo-1.7.0.51-2.4.4.1.el5_10.i386.rpm b5f7a2a90818e54abde223abf151907d714971dd7fef5d8b19c1c5743b406ffe java-1.7.0-openjdk-devel-1.7.0.51-2.4.4.1.el5_10.i386.rpm 30b3270acfd54ff77e9ad50c76b0eb3443ba97f36b702b5bd8b15fb14cb56d9e java-1.7.0-openjdk-javadoc-1.7.0.51-2.4.4.1.el5_10.i386.rpm 71acfb7f04742a70a0b905cc677d7cf8b72990b03f0a6f9b27298e78820fc897 java-1.7.0-openjdk-src-1.7.0.51-2.4.4.1.el5_10.i386.rpm x86_64: 189f7dd3675dc9fb44e3410deae51340fc05b4ff27379715e8c6f5b9f75776c9 java-1.7.0-openjdk-1.7.0.51-2.4.4.1.el5_10.x86_64.rpm 73336ebf7af849ec5e54335793fc651a2444f6e0b5362bbd21e30f157862c6ae java-1.7.0-openjdk-demo-1.7.0.51-2.4.4.1.el5_10.x86_64.rpm 2e8db52d26a53505cb20eac30147543b9ae6cc6aadd32b2801ff1c6725b56a5f java-1.7.0-openjdk-devel-1.7.0.51-2.4.4.1.el5_10.x86_64.rpm d9cc947dd116121bc0ee7e50780e45f4b7ee64f2eb03960c847801473de221cf java-1.7.0-openjdk-javadoc-1.7.0.51-2.4.4.1.el5_10.x86_64.rpm 0f12680bcb206978475ac6f7b1b724eed7396ec71a04f63ea34177e39e0afdce java-1.7.0-openjdk-src-1.7.0.51-2.4.4.1.el5_10.x86_64.rpm Source: 7c14457f4849035141a63445e25f650aef4c155e525862117c1bad97ba76725f java-1.7.0-openjdk-1.7.0.51-2.4.4.1.el5_10.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 107, Issue 9 ***********************************************

1 0

Fwd: HA cluster - strange communication between nodes
by Martin Moravcik 16 Jan '14

16 Jan '14

Hi, For a testing purposes I'm trying to create two node HA environment for running some service (openvpn and haproxy). I installed two CentOS 6.4 KVM guests. I was able to create a cluster and some resources. I followed the document https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux… But my cluster behaves not as expected: After start of cluster sw on both nodes, they can see each other. ---------------------------------------- [root@lb1 ~]# pcs status Cluster name: LB.STK Last updated: Mon Jan 13 15:34:21 2014 Last change: Mon Jan 13 15:24:47 2014 via cibadmin on lb1.asol.local Stack: cman Current DC: lb1.asol.local - partition with quorum Version: 1.1.10-14.el6_5.1-368c726 2 Nodes configured 2 Resources configured Online: [ lb1.asol.local lb2.asol.local ] Full list of resources: Resource Group: LB LAN.VIP (ocf::heartbeat:IPaddr2): Started lb2.asol.local WAN.VIP (ocf::heartbeat:IPaddr2): Started lb2.asol.local ---------------------------------------- After manual shutdown of one node 2 (pcs cluster stop), the node 1 doesn't get this information and still believes node 2 is up and running. In the log of corosync @lb2 these lines are repeating: Jan 13 15:38:43 [1712] lb2.asol.local cib: info: crm_client_new: Connecting 0x25a3810 for uid=0 gid=0 pid=10763 id=2b06a195-11f6-452d-992b-5ea0c69be21a Jan 13 15:38:43 [1712] lb2.asol.local cib: info: cib_process_request: Completed cib_query operation for section 'all': OK (rc=0, origin=local/crm_resource/2, version=0.7.4) Jan 13 15:38:43 [1712] lb2.asol.local cib: info: crm_client_destroy: Destroying 0 events Jan 13 17:24:24 corosync [TOTEM ] Retransmit List: 9a 9b 9c The firewall on both nodes is open for incomming traffic from these nodes and stonith-enabled is set to false. I created keys for root user, so I can make ssh back and forth without using password. The pacemaker's version is 1.1.10-14. Do you have any idea, where might be a problem? thanks martin

6 8

Mock and Mock again
by James B. Byrne 15 Jan '14

15 Jan '14

Question: If I use mock to build package rpmA from tarballA but rpmA has a dependency that can only be satisfied by package rpmB which must also be built from tarballB then how does the rpmB built from the tarballB get pulled into mock when building rpmA? I am trying to build httpd-2.4.7 from Apache and that needs apr-devel and apr-util-devel > 1.4. I can build apr and apr-utils in mock but I cannot find clear instructions on how to get the custom built rpms into the mock build for httpd. I presume that the procedure it is so simple that nobody thinks it necessary to write it out but I cannot figure it out on my own. Do I just build the things in order and leave them in the mock root for the subsequent httpd build to find? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3 -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

Re: [CentOS] A question about 7
by m.roth＠5-cent.us 15 Jan '14

15 Jan '14

Warren Young wrote: > On 1/13/2014 07:33, m.roth(a)5-cent.us wrote: <snip> >> Reason for this: at one of my local sf clubs, I've been trying to install Evergreen, F/OSS library software, on a system, and it's a nightmare. >> They seem to have been building it for Ubuntu whateverthelatestanimalis. The >> biggest problem is, IIRC, eventhandler and memchached; oh, and it uses postgresql 9, and nothing else. PGSQL 9 was not a big deal to install, but the other stuff.... Even trying to build it in /usr/local is a royal mess:though I've got the dbi installed, ./configure can't find it. > > Post an actual error message, and someone may be able to help. That's not a problem, well, the issue, as I said, is that configure can't find the interface, even when I've given it the correct paths. Can't really just give it to you, since a) I'm at work, in the DC 'burbs, and b) the clubhouse is up in Baltimore. Not building it at home - I've got other things to build (like xtrackcad).... Thanks for the offer, though. I'm sure there's either some environment variable it isn't happy with, or is missing, or an option isn't right to tell it what path to use. mark

14 30

Advice in Time Sync
by Ku Wei Xiong 15 Jan '14

15 Jan '14

Dear all, I would need some advice as I am a beginner in CentOS. The question is as follows: How to set up timing if NTP was block by ISP? I have try many way such as link the timezone , getting from the hardware clock.However , it is not the solution. Please advice. -- Regards, Ku Wei Xiong 0166365831

8 8

Re: [CentOS] A question about 7
by Les Mikesell 15 Jan '14

15 Jan '14

On Wed, Jan 15, 2014 at 6:05 AM, Steve Clark <sclark(a)netwolves.com> wrote: > On 01/14/2014 08:34 PM, Les Mikesell wrote: > > On Tue, Jan 14, 2014 at 7:17 PM, Warren Young <warren(a)etr-usa.com> wrote: > > I don't know about "less consistent", but I always considered it a > feature in Linux vs the BSDs or big iron Unix that I could always count > on the first network interface being "eth0". > > What does 'first' mean? And the same one isn't consistently first. > > I get that network interfaces can move around on you, but I thought that > was why they started putting the MAC address in the ifcfg-eth? scripts. > What problem did that not solve, that we had to switch to this new system? > > The problem is when you clone a disk and ship it to a location with > 'hands-on' support that doesn't know linux to install in a new chassis > that will arrive there at the same time. Somehow you have to get > someone to put the 4 network cables in the right NICs before anything > can connect. With things tied to MAC addresses that you don't know > ahead of time, nothing will work. > > Now I have to remember which *PCI slot* my Ethernet card is in when I > run "ifconfig" unless I want to dig through the full listing. > > Yes, but that's something you _can_ know. > > How can you know it? And if you know which port is which why isn't in the > instruction > with the drive so the people on site know which port is which? If you insert the card yourself, you obviously know the slot. And you can tell the position from the back just by looking at it. But Centos6 will detect in random order, so knowing the name on one box doesn't help with another. We have to go through contortions plugging on cable in at a time, doing an 'ifconfig up' and checking which interface shows link up. And the people doing that part wish we used more windows instead of Linux. -- Les Mikesell lesmikesell(a)gmail.com

4 6

Dovecot gives hard time in pulling virtual mail box, please help
by Ganesh Hariharan 15 Jan '14

15 Jan '14

I have configured postfix with Virtual mailbox and it works but dovecot is not working I have done the following configured SSL and enabled all the required configurations... and when I pull the mails using CRAM-MD5, (server password is generated in this format) Jan 16 00:18:39 ns dovecot: pop3(info(a)ghhdomain.com): Debug: maildir++: root=/var/spool/mail/ghhdomain.com/info, index=, control=, inbox=/var/spool/mail/ghhdomain.com/info Jan 16 00:18:39 ns dovecot: pop3(info(a)ghhdomain.com): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Jan 16 00:18:40 ns dovecot: auth: Debug: auth client connected (pid=4236) Jan 16 00:18:40 ns dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=pop3#011secured#011lip=10.0.0.12#011rip=10.0.0.12#011lport=995#011rport=50067#011resp=<hidden> Jan 16 00:18:40 ns dovecot: auth: Debug: passwd-file(info(a)ghhdomain.com,10.0.0.12): lookup: user=info(a)ghhdomain.com file=/etc/dovecot/passwd Jan 16 00:18:40 ns dovecot: auth: Debug: client out: OK#0111#011user= info(a)ghhdomain.com Jan 16 00:18:40 ns dovecot: auth: Debug: master in: REQUEST#0112155479041#0114236#0111#011d58c5836d46ea88f7459b06abcd46540 Jan 16 00:18:40 ns dovecot: auth: Debug: passwd(info(a)ghhdomain.com,10.0.0.12): lookup Jan 16 00:18:40 ns dovecot: auth: passwd(info(a)ghhdomain.com,10.0.0.12): unknown user Jan 16 00:18:40 ns dovecot: auth: Debug: passwd-file(info(a)ghhdomain.com,10.0.0.12): lookup: user=info(a)ghhdomain.com file=/etc/dovecot/users Jan 16 00:18:40 ns dovecot: auth: Debug: master out: USER#0112155479041# 011info@ghhdomain.com#011uid=503#011gid=503#011home=/var/spool/mail/ghhdomain.com/info/ Jan 16 00:18:40 ns dovecot: pop3-login: Login: user=<info(a)ghhdomain.com>, method=PLAIN, rip=10.0.0.12, lip=10.0.0.12, mpid=4237, TLS Jan 16 00:18:40 ns dovecot: pop3(info(a)ghhdomain.com): Debug: Effective uid=503, gid=503, home=/var/spool/mail/ghhdomain.com/info/ Jan 16 00:18:40 ns dovecot: pop3(info(a)ghhdomain.com): Debug: maildir++: root=/var/spool/mail/ghhdomain.com/info, index=, control=, inbox=/var/spool/mail/ghhdomain.com/info Jan 16 00:18:40 ns dovecot: pop3(info(a)ghhdomain.com): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 thx ghh

1 0

(no subject)
by Niharika Toppari 15 Jan '14

15 Jan '14

niharika.toppari(a)gmail.com

1 0

Re: [CentOS] A question about 7
by Les Mikesell 15 Jan '14

15 Jan '14

On Wed, Jan 15, 2014 at 6:08 AM, Steve Clark <sclark(a)netwolves.com> wrote: > > On Tue, Jan 14, 2014 at 7:17 PM, Warren Young <warren(a)etr-usa.com> wrote: > Now I have to remember which *PCI slot* my Ethernet card is in when I > run "ifconfig" unless I want to dig through the full listing. > Yes, but that's something you _can_ know. > > So... which PCI/PCI-e slots are associated with the dual gigabit NICs > integrated in/on every ASUS board I've bought over the last 8 years? > > I wouldn't know on the first one, but the important thing is that if > you have 50 identical servers they would all be the same for the same > physical location. The way 6.x works, the motherboard set and the > pair on the card will randomly flip in the initial detection. With > 5.x having the MAC address in the ifcfg-ethx file was enough. With > 6.x you also need a udev rule to nail the name down. These get tied > to MAC addresses in the initial install, but that makes it painful to > clone systems or restore backups into a different box. > > Hmm... we have over a 1000 units in the field and CentOS always enumerates > the 6 ethx interfaces the > same - as they are labeled by the manufacturer of the hardware. This has > continued to be consistent even > when the manufacturer upgraded the MB. > Are these Dells using the bios name conventions? Or maybe it works better if all NICs are the same vendor/model. Ours mostly have onboard Broadcomms's and Intel cards, and they routinely flip pairs of interfaces - the sets on the motherboard and on any particular card will stay in the same order, but the order of the motherboard set and any card will be random during the install. Worse, when you move a drive to a different chassis, the old udev rules keep any of the new set from matching any old name. -- Les Mikesell lesmikesell(a)gmail.com

1 0

CentOS-announce Digest, Vol 107, Issue 8
by centos-announce-request＠centos.org 15 Jan '14

15 Jan '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2014:0023 CentOS 6 resource-agents Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 14 Jan 2014 16:13:28 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2014:0023 CentOS 6 resource-agents Update To: centos-announce(a)centos.org Message-ID: <20140114161328.GA7616(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:0023 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-0023.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 53e9b64590c180ce4d3a0a3fabc3c18d031d5467b3b67fa37a9caf68d30f1d91 resource-agents-3.9.2-40.el6_5.5.i686.rpm b7eca179a40cf55be6fee5bba1c7d70fb7cec3b4edf9b68cccfbf289b1957792 resource-agents-sap-3.9.2-40.el6_5.5.i686.rpm x86_64: 2fcc7e147248a76a3163b86f0cd474047e8dfee524feffa4fd61c76052ecce84 resource-agents-3.9.2-40.el6_5.5.x86_64.rpm 6859ae32a47bb262ce8b8e34257cf6a6beca4657905b6ce5c15fe2c4213f7635 resource-agents-sap-3.9.2-40.el6_5.5.x86_64.rpm Source: c8226fea10675a07fcf7fe3f012efdffbab32595f1765d612c355e879773257b resource-agents-3.9.2-40.el6_5.5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 107, Issue 8 ***********************************************

1 0

libapreq2
by Dwayne Hottinger 15 Jan '14

15 Jan '14

Is there no package for libapreq2 anymore? Im trying to get netdisco setup on a new centos 6.5 server and cant find any package that provides this module. ddh -- Dwayne Hottinger Network Administrator Harrisonburg City Public Schools

2 1

SSSD and usermod
by Mitja Mihelič 15 Jan '14

15 Jan '14

Hi! How to get usermod working with SSSD/389DS ? We have SSSD set up on our server and it uses 389DS. SSSD was enabled with the following command: authconfig --enablesssd --enablesssdauth --ldapbasedn=dc=example,dc=com --enableshadow --enablemkhomedir --enablelocauthorize --update Running for example "usermod -L username" returns: usermod: user 'username' does not exist in /etc/passwd Each time usermod is executed there is a query logged in 389DS, so SSSD does pass the request to 389DS. Strace (attached) of usermod shows that it gets at least gecos back from SSSD and that it checked the /var/lib/sss/mc/passwd file which contains: username Name Lastname /home/username /bin/bash Soon after that it starts to open /etc/shadow and /etc/passwd. What are we missing? Any insight would be appreciated. Regards, Mitja -- -- Mitja Mihelič ARNES, Tehnološki park 18, p.p. 7, SI-1001 Ljubljana, Slovenia tel: +386 1 479 8877, fax: +386 1 479 88 78

2 4

krb5-1.10.3-10.el6_4.6.src.rpm
by Mahmoud 15 Jan '14

15 Jan '14

Hello, I download krb5-1.10.3-10.el6_4.6.src.rpm<http://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/krb5-…>from http://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/. In Cenos 6.5, I use following instructions: rpm -i krb5-1.10.3-10.el6_4.6.src.rpm rpmbuild -ba /home/mockbuild/rpmbuild/SPECS/krb5.spec The RPMs that has been built are el6.6. I need el6_4.6 RPMs. Could you help me please? Best regards.

3 3

thinking ahead... far ahead
by m.roth＠5-cent.us 14 Jan '14

14 Jan '14

I've been having a problem with motion on one server - the .avi's it produces are dark, low contrast, and it keeps resizing from 642x420 to 296x360 or some such. Trying to figure it out, I was just going through /var/log/dmesg, and found rtc0: alarms up to one year, y3k, 114 bytes nvram I mean, y3k? I think we've got 900 years or so to worry 'bout that.... mark

2 1

A question about 7
by m.roth＠5-cent.us 14 Jan '14

14 Jan '14

I've seen that RHEL 7 beta is out for some time now: is there a CentOS version of that beta? If not, is it likely to be a real pain, once CentOS 7 is released, to upgrade from RHEL 7 beta to CentOS 7? Reason for this: at one of my local sf clubs, I've been trying to install Evergreen, F/OSS library software, on a system, and it's a nightmare. They seem to have been building it for Ubuntu whateverthelatestanimalis. The biggest problem is, IIRC, eventhandler and memchached; oh, and it uses postgresql 9, and nothing else. PGSQL 9 was not a big deal to install, but the other stuff.... Even trying to build it in /usr/local is a royal mess: though I've got the dbi installed, ./configure can't find it. I do see, with a little googling, that everything I need for an older release of Evergreen should be installable without all this mess..... mark

5 6

Re: [CentOS] A question about 7
by m.roth＠5-cent.us 14 Jan '14

14 Jan '14

Les Mikesell wrote: > On Tue, Jan 14, 2014 at 2:27 PM, Warren Young <warren(a)etr-usa.com> wrote: >> >> How bad is the worst case -- reinstall the OS and rebuild the software -- anyway? By doing your initial work on the RHEL 7 beta, you learn what you need to know to quickly redo the work on CentOS 7. > > Is there anything to simplify the process of duplicating the set of installed packages when you didn't pay that much attention the first time around? It seems like taking the list from 'rpm -qa' on a running machine and feeding it to 'yum install ....' on a new minimal install should get pretty close, but then you need to find all of your locally modified config files. Most of that should be under > /etc/sysconfig for an easy diff, but not everything. Interesting note: I just started looking at the docs for 7. and two things: one, of course, preupgrade is in, and second, something that, if I read it correctly, called zstream, which will give you a report of what preupgrade would do, and list things that would have to be done my hand, so you can judge the difficulty of upgrading in place. mark

1 0

Can we trust RedHAt encryption tools?
by James B. Byrne 14 Jan '14

14 Jan '14

Recently I have been deeply troubled by evidence revealing the degree to which U.S. based corporations (well actually all resident in any of the so-called 5-eyes countries) appear to have rolled over and assumed the position with respect to NSA inspired pressure to cripple public key encryption and facilitate intrusions into their software products. This has engendered in me a significant degree of doubt surrounding the integrity of RHEL; and therefore of CentOS since it claims to be a bug for bug, and therefore an exploit for exploit, copy of RHEL. Reinforcing my doubt is the tale surrounding the long outstanding bug report respecting OpenSSL (https://bugzilla.redhat.com/show_bug.cgi?id=319901) opened in October of 2007. This probelm was only recently addressed and then only after a good deal of pointed public questioning by numerous security commentators. RedHat's reference to 'patent' issues surrounding this 'bug' are unsubstantiated by any documented evidence. The only response justifying Redhat's lack of movement is some hand-waving about corporate legal opinion. Despite suggestive language by some RH employees (https://bugzilla.redhat.com/show_bug.cgi?id=612265#c3) the exact nature of the patent legal problem was never specifically laid out for public comment. Equally troubling to me is the complete lack of any information on what patent issue was finally resolved and how it was resolved so that the related bugs could be fixed. As patents (with very,very few exceptions) are by their very nature not secret one wonders if the so-called legal problem was of a fundamentally different nature, no less real but somewhat less savoury from a PR standpoint. In consequence, after a good deal of agonizing over what was within my means to do, I have spent the weekend rebuilding Apache httpd from Apache sources to obtain TLSv1.2. While I still do not have a working copy (yet) I did learn a great deal of how RH back-porting patch policy appears to work. But in the process of researching how to get this package built I ran across a number of discussions respecting OpenSSL, which is the fundamental layer upon which pki rests, and RedHat (http://www.linuxadvocates.com/2013/09/is-openssls-cryptography-broken.html) None of them were very comforting. Where this discourse is leading is to is the question of whether or not CentOS should provide OpenSSL built from clean sources as an extra or plus package and perhaps httpd, sshd and ssh-client and related pki based/reliant packages as well. Similarly, should CentOS.org provide tested spec files that will provide individual system admins a simple method of building these packages from source? I think that CentOS.org probably should provide this but I am afraid that I cannot make a strong public case. Suffice that my belief is informed from personal previous experience with federal agencies investigative techniques and the all too frequent willingness of commercial interests to take the road of least resistance when pressured. Particularly where the spectres of expensive litigation and targeted regulatory enforcement looms in the background. I believe that the issue is of pressing interest to the entire community and I would like to read what others have to say on the matter. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

14 39

apache - upload files bigger than 2Go
by MOKRANI Rachid 14 Jan '14

14 Jan '14

Hi, I need to upload files larger than 4.4Gb (iso DVD) on CentOS (5.5 x64) http server (httpd-2.2.3-43.el5.centos) On the apache server set in my /etc/php.ini upload_max_filesize = 4900M post_max_size = 5000M In my httpd.conf I set : LimitRequestBody 0 I'm using firefox and/or chrome client for upload a file with 4.2gb size on the server. But it doesn't work. Everything work fine and I can upload my file if it's not greater than 2gb. I see that there are a technical apache limitation. http://httpd.apache.org/docs/current/mod/core.html#limitrequestbody how to get around this limitation for upload a DVD iso (4.2Gb)? Regards. __________________________ Avant d'imprimer, pensez à l'environnement ! Please consider the environment before printing ! Ce message et toutes ses pièces jointes sont confidentiels et établis à l'intention exclusive de ses destinataires. Toute utilisation non conforme à sa destination, toute diffusion ou toute publication, totale ou partielle, est interdite, sauf autorisation expresse. IFP Energies nouvelles décline toute responsabilité au titre de ce message. This message and any attachments are confidential and intended solely for the addressees. Any unauthorised use or dissemination is prohibited. IFP Energies nouvelles should not be liable for this message. __________________________

4 3

Laptop recommendation
by Todor Petkov 14 Jan '14

14 Jan '14

Hello, I am looking for a laptop with the following specs: Built-in GSM module Trusted platform module Support for these modules, as for the network (Ethernet + WiFi) for RHEL/Centos6. I tested Lenovo W540, and the WiFi is not detected. lspci shows: 03:00.0 Network controller: Realtek Semiconductor Co., Ltd. Device 818b I came across http://askubuntu.com/questions/376732/thinkpad-t440p-wireless-network-contr…, so it turns out, this WiFi card is not supported (yet). So, if anyone can recommend a working solution, please contact me, either here or off the list. Thanks in advance,

4 3

Need help with kernel, modules and headers
by Patrick Begou 14 Jan '14

14 Jan '14

I need some help about kernels, modules and so on. I've installed CentOS6.5 (fresh install) on a DELL E7440 laptop. After all the updates I get the latest kernel: kernel-2.6.32-431. But with this config I've a problem: If I close the screen on the keyboard, the laptop hibernate. When I open it the system restart (I connect use ssh to reach the laptop) but the screen remains black (Intel HD Graphics 4400). I've installed a more recent kernel from elrepo-kernel (kernel-lt-3.10.26-1.el6.elrepo.x86_64) and it solves the black screen problem. But now I have several errors about => kdump, Starting kdump: ÉCHOUÉ => vboxdrv Starting VirtualBox kernel modules ÉCHOUÉ (modprobe vboxdrv failed. Please use 'dmesg' to find out why) => dkms (requested for VirtualBox) Démarrage de dkms : Error! Your kernel headers for kernel 3.10.26-1.el6.elrepo.x86_64 cannot be found at /lib/modules/3.10.26-1.el6.elrepo.x86_64/build or /lib/modules/3.10.26-1.el6.elrepo.x86_64/source. but kernel-lt-headers cannot be installed (conflicting with the installed kernel-headers requested by many packages). So what could you suggest me to solve this situation ? -> kernel-2.6.32-431 all is working but if the laptop hibernate it hangs -> kernel 3.10.26-1 video works fine but I get conflicts for some applications Thanks for your advices Patrick -- =================================================================== | Equipe M.O.S.T. | | | Patrick BEGOU | mailto:Patrick.Begou@grenoble-inp.fr | | LEGI | | | BP 53 X | Tel 04 76 82 51 35 | | 38041 GRENOBLE CEDEX | Fax 04 76 82 52 71 | ===================================================================

2 2

CentOS-announce Digest, Vol 107, Issue 7
by centos-announce-request＠centos.org 14 Jan '14

14 Jan '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2014:0021 CentOS 5 lvm2-cluster Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 13 Jan 2014 16:58:44 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2014:0021 CentOS 5 lvm2-cluster Update To: centos-announce(a)centos.org Message-ID: <20140113165844.GA22310(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:0021 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-0021.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: dee70585b7e7455e1a62452b83bffa5e4ef2629193d1a2cf6e1a7cfd15dd8a4a lvm2-cluster-2.02.88-9.el5_10.2.i386.rpm x86_64: 3f044ba3d83f23dc4f0ef9f7f727d258324f0bbcce842faffdeaf097932f004d lvm2-cluster-2.02.88-9.el5_10.2.x86_64.rpm Source: d86eb6d628949f3383e95ba5c303af22243cb771d030cd86f547865f18e07202 lvm2-cluster-2.02.88-9.el5_10.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 107, Issue 7 ***********************************************

1 0

- manipulation token error
by Paolo De Michele 14 Jan '14

14 Jan '14

hi all, I can't change root password because in my VPS the ssh console gives me: $ ssh -p xxxx2 username@ipaddress username@ipaddress's password: Last login: Thu Jan 9 11:46:58 2014 from dynamic-adsl-xxx.xxx.xx.it WARNING: Your password has expired. You must change your password now and login again! Changing password for username. (current) UNIX password: passwd: Authentication token manipulation error passwd: password unchanged Connection to xxxxxx closed. how I fix this problem? thanks in advance regards

2 4

Email not getting delivered (and a fix)
by Frank Cox 13 Jan '14

13 Jan '14

I just discovered that, ever since I updated this computer to kernel-2.6.32-431.3.1, it hasn't been forwarding outbound email. I found this repeated in /var/log/maillog: "warning: relayhost configuration problem" This computer is set up to relay outbound email via postfix to another computer on my network by name, whose name and IP address is specified in the /etc/hosts file. A bit of reading told me that I have to add this line to /etc/postfix/main.cf: smtp_host_lookup = dns,native Without that line, postfix won't check /etc/hosts to look up an IP address. Oddly, this setup has been working for several months WITHOUT that line in main.cf and it just stopped working when the latest kernel was installed. According to the documentation http://www.postfix.org/postconf.5.html#smtp_host_lookup it appears that it should not have been working before, eithre. Something changed in the new kernel to make it stop working. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

1 0

LogScape as a Splunk alternative?
by Rafał Radecki 13 Jan '14

13 Jan '14

Hi All. I searched for a Splunk alternative and found LogScape. Have anyone worked with it? There is no documentation available only some very brief installation instructions and there is almost no information in google about successful deployments in linux environments. From my current perspective it is a quite small and not widely used product, am I right? Also videos about search capabilities show that in comparison with Splunk it gives rather limited search functionality. Overall what do you think about LogScape? Best regards, Rafal.

4 3

Configure wireless USB ethernet
by Ashley M. Kirchner 13 Jan '14

13 Jan '14

I have a system that does *not* have a graphical desktop installed, nor do I ever plan to. I have its wired ethernet working just peachy. Now I want to configure a USB wireless ethernet and scratching my head. Particularly since I don't use NetworkManager, everything is manually configured. That said, if I enable NM, I see this in /var/log/messages: NetworkManager[26900]: <info> rfkill0: found WiFi radio killswitch (at /sys/devices/pci0000:00/0000:00:1d.7/usb1/1-2/1-2:1.0/ieee80211/phy0/rfkill0) (driver rt2800usb) NetworkManager[26900]: <info> WiFi hardware radio set enabled NetworkManager[26900]: <info> WiFi enabled by radio killswitch; enabled by state file NetworkManager[26900]: <info> WWAN enabled by radio killswitch; enabled by state file NetworkManager[26900]: <info> WiMAX enabled by radio killswitch; enabled by state file NetworkManager[26900]: <info> Networking is enabled by state file NetworkManager[26900]: <info> (wlan0): driver supports SSID scans (scan_capa 0x01). NetworkManager[26900]: <info> (wlan0): new 802.11 WiFi device (driver: 'rt2800usb' ifindex: 4) NetworkManager[26900]: <info> (wlan0): exported as /org/freedesktop/NetworkManager/Devices/1 NetworkManager[26900]: <info> (wlan0): now managed NetworkManager[26900]: <info> (wlan0): device state change: 1 -> 2 (reason 2) NetworkManager[26900]: <info> (wlan0): bringing up device. NetworkManager[26900]: <info> (wlan0): preparing device. NetworkManager[26900]: <info> (wlan0): deactivating device (reason: 2). kernel: ADDRCONF(NETDEV_UP): wlan0: link is not ready NetworkManager[26900]: <info> (wlan0): supplicant interface state: starting -> ready NetworkManager[26900]: <info> (wlan0): device state change: 2 -> 3 (reason 42) Looking at 'lsmod | grep rt' I see: rt2800usb 18780 0 rt2800lib 71865 1 rt2800usb crc_ccitt 1717 1 rt2800lib rt2x00usb 12696 1 rt2800usb rt2x00lib 48438 3 rt2800usb,rt2800lib,rt2x00usb mac80211 552581 3 rt2800lib,rt2x00usb,rt2x00lib cfg80211 619515 2 rt2x00lib,mac80211 And lastly ifconfig shows the interface present: lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:1401 errors:0 dropped:0 overruns:0 frame:0 TX packets:1401 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:177957 (173.7 KiB) TX bytes:177957 (173.7 KiB) wlan0 Link encap:Ethernet HWaddr 00:87:35:1C:07:BF UP BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) Great ... now how do I configure this sucker? When I turn NM off, that interface disappears. I'm assuming I can create an 'ifcfg-wlan0' configuration but what do I need to put in there so it knows to connect to my home wireless (with password) and all of that fun and exciting stuff, and continue to do that over a reboot.

5 9

6.5, minor annoyances
by m.roth＠5-cent.us 13 Jan '14

13 Jan '14

I rebuilt my system a couple/three weeks ago, and it's running 6.5, and there's a couple of minor annoyances: first, all my xterms, when I login in from the console, always are in ~/Documents, rather than ~. The other is that, running KDE, I can't find where to turn *off* the stupid login/logout theme music.* Oh, and I get this enTHUsiastic menu, rather than the traditional one. Someone know where I need to go to change this crap? I've already gone through KDE's setting, and system, and no joy. Nor did grep -L Documents /etc/*/* find anything.... mark * Is it just me, or does the logout music sound like the beginning of the original Trek Classic tv show theme?

2 1

Kickstart deploys more packages?
by Darod Zyree 13 Jan '14

13 Jan '14

Hi, Does anyone know why an Anaconda Kickstart installation deploys more rpm packages than a manual "basic" installation? In both cases the following package groups were installed/used according to anaconda-ks.cfg in root home directory: @core, @server-policy, @workstation-policy

7 15

Re: [CentOS] [resolved ]nfs client kerberos cache
by Darod Zyree 13 Jan '14

13 Jan '14

2014/1/6 Darod Zyree <darodzyree(a)gmail.com> > Greetings, > > Not sure if this is the correct mail list. > > I have the following test environment set up: > - 1x ipa master = ipa1.example.com > - 1x nfs server = nfs1.example.com > - 1x nfs client = nfsclient1.example.com > > NFS version 4 is used and the appropriate Kerberos principal has been > created in IPA: > > [root@nfs1 ~]# ipa service-show nfs/nfs1.example.com(a)EXAMPLE.COM > > Principal: nfs/nfs1.example.com(a)EXAMPLE.COM > Keytab: True > Managed by: nfs1.example.com > > > Mounting using krb5p works: > > [root@nfsclient1 ~]# mount -v -t nfs -o sec=krb5p > nfs1.example.com:/exports/homes/ /mnt > > mount.nfs: timeout set for Mon Jan 6 21:25:56 2014 > mount.nfs: trying text-based options > 'sec=krb5p,vers=4,addr=192.168.12.172,clientaddr=192.168.12.173' > nfs1.example.com:/exports/homes/ on /mnt type nfs (rw,sec=krb5p) > > rpcgssd created the Kerberos cache file as indicated > in /var/log/messages: > rpc.gssd[2473]: INFO: Credentials in CC > 'FILE:/tmp/krb5cc_machine_EXAMPLE.COM' are good until 1389125973 > > > So far so good, but then: > > 1) I unmount everything from nfs1, remove the nfs1.example.host, its DNS > record(s) and service principcals. > 2) I redeploy the nfs1.example.com and re-create the > nfs/nfs1.example.com(a)EXAMPLE.COM principal > > 3) I try to mount the same NFS share from nfs1 on nfsclient1 I get an > error: > mount.nfs: trying text-based options > 'sec=krb5p,vers=4,addr=192.168.12.172,clientaddr=192.168.12.173' > mount.nfs: mount(2): Operation not permitted > > Now I'm not an IPA or Kerberos expert but I am guessing that this > happens because the nfsclient1 still has, and uses, > the /tmp/krb5cc_machine_EXAMPLE.COM cache file? > This file would have the “old” Kerberos credentials?... > > On the NFS server in /var/log/messages this error message is displayed: > "rpc.svcgssd[5983]: ERROR: GSS-API: error in handle_nullreq: > gss_accept_sec_context(): GSS_S_FAILURE (Unspecified GSS failure. Minor > code may provide more information) - Wrong principal in request" > > On the NFS client in /var/log/messages these messages are displayed: > "creating context with server nfs(a)nfs1.example.com" > > "WARNING: Failed to create machine krb5 context with credentials cache > FILE:/tmp/krb5cc_machine_EXAMPLE.COM for server nfs1.example.com" > > "WARNING: Machine cache is prematurely expired or corrupted trying to > recreate cache for server nfs1.example.com" > > Restarting the rpcgssd daemon works, this action removes > the /tmp/krb5cc_machine_EXAMPLE.COM file and upon a mount command it is > recreated. > However restarting the rpcgssd daemon on all NFS clients every time an > NFS server is redeployed doesn't feel right. > > Anyone perhaps have an idea on what I might be doing wrong? > Or is this by design? > > > After dicussing this with Red Hat support the best way to go about this issue is to just restart the rpcgssd deamon on any nfs client that recently had a mount to the re-deployed nfs server. Restarting rpcgssd removes the /tmp/krb5cc_machine_EXAMPLE.COM file so a new one can be created. One other method would be to save various files (things like keytabs) and re-use these after deployment but that turned out to be too much effort to automate.

1 0

Re: [CentOS] CentOS Tshirt ideas
by Johnny King 12 Jan '14

12 Jan '14

How about the CentOS T-shirt wearing penguin with a red fedora cocked on this head. Padre King Sent from my Verizon Wireless 4G LTE DROID Karanbir Singh <mail-lists(a)karan.org> wrote: >hi, > >We have, like in the years past, a table at Fosdem and I'd like to get >some tshirts printed to hand out. In the past, the Linux Ninja's and >Beards ones got quite a bit of attention ( and both were not brand >spammy, which is always nice ). > >Reaching out to the mailing list for ideas on what we can do this year, >with the caveat that I need to finalise by this weekend if we are to get >anything in by Fosdem. > >thanks in advance, > >-- >Karanbir Singh >+44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh >GnuPG Key : http://www.karan.org/publickey.asc >_______________________________________________ >CentOS mailing list >CentOS(a)centos.org >http://lists.centos.org/mailman/listinfo/centos

6 5

Credentials issue
by Fabrizio Di Carlo 12 Jan '14

12 Jan '14

Hello to all, I've a frustrating issue, everytime I'm trying to connect to some website (like Linkedin, VMware, CertCollection, etc etc) I have issue with credentials... Or the website didn't recognize my login (and I'm still in login page) or for example I'm logged in linkedin but I'm not able to see which visit my profile cause it ask me my credentials and when I enter I'm going again to login page. For MVA I solved updating my broswer but for other website nothing. I resetted the factory settings in Chome, disable extensions (AdBlock Plus and Privacy Fix mainly), clear my cache but without results and now the problem is really frustating. Can you help me in troubleshooting it? Fabrizio -- "The intuitive mind is a sacred gift and the rational mind is a faithful servant. We have created a society that honors the servant and has forgotten the gift." (A. Einstein) "La mente intuitiva è un dono sacro e la mente razionale è un fedele servo. Noi abbiamo creato una società che onora il servo e ha dimenticato il dono." (A. Einstein) Fabrizio Di Carlo

3 2

Linux reinstallation without rebooting? Alternative to kickstart and other such tools?
by Rafał Radecki 11 Jan '14

11 Jan '14

Hi All. I am curious if it is possible to reinstall linux distribution to centos (or another distro) if I have a remote linux server with no kvm access (i do not want to use virtualization). I know that for installation pxe, tftpboot and kickstart or a proper iso/cd and kickstart are standard options. But for such operations I would need kvm access. Are there any alternatives which do not need it? For example: I have a centos server, then I add some software, run it, point to a kickstart file available through http remotely or give network parameters and partitioning layout and the software takes care of the rest, no need for kvm access during install. Is something like that possible? :) I know that it may be seen as an "exotic" question but there are many opensource projects starting every day and maybe someone knows an interesting piece of software. Thanks! Best regards, Rafal.

5 6

LVM thinpool snapshots broken in 6.5?
by Dennis Jacobfeuerborn 11 Jan '14

11 Jan '14

Hi, I just installed a CentOS 6.5 System with the intention of using thinly provisioned snapshots. I created the volume group, a thinpool and then a logical volume. All of that works fine but when I create a snapshot "mysnap" then the snapshot volume gets displayed in the "lvs" output with the correct information but apparently no device nodes are created under /dev/mapper/ or /dev/(volumge_group_name). Any ideas what might be going on here? Regards, Dennis

1 1

EL7 mirror: "There is no installed groups file."
by Warren Young 11 Jan '14

11 Jan '14

I installed the RHEL 7 beta here to test while waiting for CentOS 7 to arrive. On noticing that yum didn't work, I decided to set up a local mirror. I rsync'd ftp://ftp.redhat.com/pub/redhat/rhel/beta/7/x86_64/os/Packages/ to a local web server here, then regenerated the repodata directory with createrepo. Now yum works fine, for the most part. "yum search foo" pulls up a plausible list of packages, "yum install bar" chases dependencies as expected, etc. Unfortunately, "yum groupinstall" isn't working, which means I have no easy way to install Gnome on my minimal EL7 installation. Apparently I need some kind of "groups file" to feed to createrepo --groupfile, but I don't know where to get one, or how to construct one. I've dug around on ftp.redhat.com and can't find anything that looks plausible. I've tried manually installing packages to build up this GNOME desktop, but despite installing dozens of things, startx still doesn't give me something usable. I know I could get a GNOME desktop by reinstalling the OS, but that would wipe out a lot of the local work I've done on this VM so far. The only reason I need X in the first place is that system-config-printer no longer runs in text mode. (I'm trying to set up a CUPS server. So yeah, X11 is a prerequisite for installing a printer now. Lovely.)

3 3

Re: [CentOS] Can we trust RedHAt encryption tools?
by James B. Byrne 10 Jan '14

10 Jan '14

On Thu, January 9, 2014 17:52, m.roth(a)5-cent.us wrote: > Robert Moskowitz wrote: >> >> On 01/09/2014 05:28 PM, John R Pierce wrote: >>> On 1/9/2014 2:20 PM, Eero Volotinen wrote: >>>> It might be easier to compromise security of commercial products as >>>> source code is not available. they seem to have succeeded in compromising >>>>> STANDARDS and ALGORITHMS, to heck with implementations. >> >> Only algorithm they compromised was an RNG that got pretty strong thumbs >> down from the real cryptographers. They have not compromised any IETF >> standard; maybe kept quite about a problem, but have not put holes in >> any. Most of our problems with TLS is implementations and backwards >> compatiblity options. > > Not quite - anyone mandated to POSIX standards are effectively mandated to > use the compromised algorithms, as I understand it. > > mark Well, regardless of my thoughts on the ethics of this situation and my opinion about those who do these sorts of things, I have continued to research this issue. I have discovered that there is a great deal of literature respecting the weakness of the RNG and PRNG processes implemented on headless hosts, in particular headless hosts that are virtualised. Given the essential nature of true random number generation to cryptographically secure key creation this represents a significant weak point on such hosts. I am not going to reiterate or summarize any of this here because you can find these discussions easily enough via Google. However, I have developed a small script to alleviate the problem to some degree based on the writings and works of others. This requires the epel repository be enabled: #!/bin/bash cat /proc/sys/kernel/random/entropy_avail yum install dieharder haveged rng-tools -q -y cat /etc/sysconfig/rngd sed -i 's:EXTRAOPTIONS="":EXTRAOPTIONS="-r /dev/urandom":' /etc/sysconfig/rngd cat /etc/sysconfig/rngd chkconfig --level 2345 haveged on ; chkconfig --level 2345 rngd on service haveged start ; service rngd start cat /proc/sys/kernel/random/entropy_avail This increased the mean amount of entropy present in /dev/random on the systems I installed these packages on from ~176 bits to ~2048 bits. I continue to look into other related matters. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Why does 'mysql' user has /bin/bash shell?
by Mihamina Rakotomandimby 10 Jan '14

10 Jan '14

Hello, Default MySQL installation on CentOS sets /bin/bash as shell. I'm on a user cleanup task where I want reduce unneeded privileges to users. What is the "mysql" user shell for? (What will happen if I change it to /bin/false or whatever would disable it's shell?) It's not only a matter of SSH (I'm aware I can AllowUsers in sshd_config for example).

5 7

Re: [CentOS] Why does 'mysql' user has /bin/bash shell?
by Warren Young 10 Jan '14

10 Jan '14

On 1/10/2014 13:09, Reindl Harald wrote: > > > i know that but the question is still WHY I don't think there is a good reason. Someone made a mistake. File a bug report upstream. I've now downloaded and examined the .src.rpm for every 6.x point release plus that for 5.10, and they all do this. On skimming the changelog section of the spec file, I can't see an entry that explains why this was done. However, I might have more success if I knew the first version where this changed -- if indeed it ever did behave differently -- but I haven't found that version yet. I don't think I'm going to spend any more time looking, though, since 6.0 takes me back 3 years. This behavior has been in there for quite a long time.

1 0

Re: [CentOS] Why does 'mysql' user has /bin/bash shell?
by Warren Young 10 Jan '14

10 Jan '14

On 1/10/2014 12:14, Reindl Harald wrote: > > Am 10.01.2014 20:11, schrieb Warren Young: >> >> I just tested here on an EL6 VM that didn't have mysql-server on it before: >> >> # grep mysql /etc/shadow >> mysql:!!:16079:::::: > > in the config file where the users shell is defined you may find more :-) > > grep mysql /etc/passwd You've misunderstood the point of that test. It is proof that John Doe's guess is right: the mysql user's account is locked (!!). This means that only way you can "log in as mysql" and thus make use of the /bin/bash setting is to first be root, then "su - mysql". You can't su to mysql from a non-root account since that would require a password. That's why I guess this is a symptom of a wooly-headed change to the spec file, rather than some nefarious security breach. By the way, vault.centos.org is back. Here's what we find in the spec file: /usr/sbin/useradd -M -N -g mysql -o -r -d /var/lib/mysql -s /bin/bash \ -c "MySQL Server" -u 27 mysql >/dev/null 2>&1 || :

1 0

CentOS on HP DL360e with B120i
by tony＠softins.co.uk 10 Jan '14

10 Jan '14

I am trying to install CentOS5 on a new HP DL360e G8 with B120i disk controller. It appears that a proprietary HP driver is needed for it. I found a useful description at http://www.linuxhelp.in/2013/08/Installing-centos-on-HP-Proliant-DL360e-Gen… I have a pair of hard drives to use as a RAID1 mirror. My question to people who may have been this way already is: is it worth my fiddling around with that procedure to get the RAID controller working, performance-wise, or might I just as well use AHCI mode with kernel mdraid? I normally use Supermicro with AHCI and mdraid quite happily, but the customer wanted HP :( Cheers Tony -- Tony Mountifield Work: tony(a)softins.co.uk - http://www.softins.co.uk Play: tony(a)mountifield.org - http://tony.mountifield.org

6 8

Recomended Virtual Host setup
by Veljko 10 Jan '14

10 Jan '14

Hello, I want to ditch cPanel I currently have on my server, so I'm thinking of the way to implement virtual hosts with software provided by CentOS/RadHat. I know I can use additional repos to get mod_fastcgi for example, but what is the method recommended by RadHat? I want every virtual host php process to run as owner of that php file. I see that mod_suphp and mod_fastcgi are available on rpmforge, but how to achieve what I want using only RedHat provided software? Regards, Veljko

1 0

FYI: an selinux hack
by m.roth＠5-cent.us 10 Jan '14

10 Jan '14

We've got a website that was written years ago, and maintained by various people since. For some unknown reason, the original person or persons hard-coded, in a number of scripts, for these perl CGI scripts to write to a logfile... in the websites cgi-bin directory. *DUH* And the guy who was more-or-less maintaining it fixed one or two (I don't know how, he probably hardcoded), but the rest still wrote to the same log. No, I can't go in and fix it all. So, to shut up selinux, I moved the logs to /var/log/httpd/website/, and made a symlink from the cgi-bin location to there... and it worked. No garbage from selinux. Of *course* it's a hack, but I figured there are others out there in the same position - aren't allowed to go fix it *right* (as in, they should read a config file in /etc...), have to have selinux at least permissive, and want to cut down the noise in the logs. mark

1 0

Who deletes/edits my resolv.com ?
by Timothy Murphy 10 Jan '14

10 Jan '14

Every now and again the nameservers in /etc/resolv.conf on my CentOS-6.5 server are commented out. I used to think this was the fault of NetworkManager, but I've stopped running that on the server (using the network service instead) and the nameserver removal still occurs. I'm baffled by the motivation for this, as I can't think of any situation where it would be of advantage to have no nameservers listed. -- Timothy Murphy e-mail: gayleard /at/ eircom.net School of Mathematics, Trinity College, Dublin 2, Ireland

4 7

CentOS-announce Digest, Vol 107, Issue 6
by centos-announce-request＠centos.org 10 Jan '14

10 Jan '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2014:0018 Important CentOS 5 libXfont Update (Johnny Hughes) 2. CESA-2014:0018 Important CentOS 6 libXfont Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 10 Jan 2014 10:35:58 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2014:0018 Important CentOS 5 libXfont Update To: centos-announce(a)centos.org Message-ID: <20140110103558.GA18473(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:0018 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-0018.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 5d177ebe7d19a7515f179bf06b534b16be5c3017b51dc32cef13f1ef45c94676 libXfont-1.2.2-1.0.5.el5_10.i386.rpm 886882bec7855542d19dc9d23dff86809c6227e489be81ee8e428927e182201b libXfont-devel-1.2.2-1.0.5.el5_10.i386.rpm x86_64: 5d177ebe7d19a7515f179bf06b534b16be5c3017b51dc32cef13f1ef45c94676 libXfont-1.2.2-1.0.5.el5_10.i386.rpm 5ebf2a472661f5af2c720370b0847c1141df925545734ed9ae34a7cac275a1f7 libXfont-1.2.2-1.0.5.el5_10.x86_64.rpm 886882bec7855542d19dc9d23dff86809c6227e489be81ee8e428927e182201b libXfont-devel-1.2.2-1.0.5.el5_10.i386.rpm 59e82118a3ada995a44556fa572406d940585c1d7eadc0ff5b490f641024d4ab libXfont-devel-1.2.2-1.0.5.el5_10.x86_64.rpm Source: b77f78e870fc6f349b6a4d311aa6358abad773837bfcf95394797043a91ae036 libXfont-1.2.2-1.0.5.el5_10.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Fri, 10 Jan 2014 10:51:23 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2014:0018 Important CentOS 6 libXfont Update To: centos-announce(a)centos.org Message-ID: <20140110105123.GA5239(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:0018 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-0018.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: e197f6ba7f88663d651ff7fece36f0ab4439063d7267738c9bbdc86d0c39ae5e libXfont-1.4.5-3.el6_5.i686.rpm 4838c266aa9e6d61b1d3fe78e8f25c02e7756f10eb06cf353d69fd1cb0478f9f libXfont-devel-1.4.5-3.el6_5.i686.rpm x86_64: e197f6ba7f88663d651ff7fece36f0ab4439063d7267738c9bbdc86d0c39ae5e libXfont-1.4.5-3.el6_5.i686.rpm b1073ecac121832b57872541d0d97e959ba7b6bc93891287aec9abc51ccf7ab1 libXfont-1.4.5-3.el6_5.x86_64.rpm 4838c266aa9e6d61b1d3fe78e8f25c02e7756f10eb06cf353d69fd1cb0478f9f libXfont-devel-1.4.5-3.el6_5.i686.rpm 3cbb119e041bf283f131ba94b139c60eea701127384778219e7347c71255a0e0 libXfont-devel-1.4.5-3.el6_5.x86_64.rpm Source: 70cc14ededa4d1187f2f7245fddb63b72e0b26f49e908987984de2d4b2af71e4 libXfont-1.4.5-3.el6_5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 107, Issue 6 ***********************************************

1 0

CentOS-announce Digest, Vol 107, Issue 5
by centos-announce-request＠centos.org 09 Jan '14

09 Jan '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2014:0016 Moderate CentOS 5 gnupg Update (Johnny Hughes) 2. CESA-2014:0015 Important CentOS 6 openssl Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 8 Jan 2014 22:53:33 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2014:0016 Moderate CentOS 5 gnupg Update To: centos-announce(a)centos.org Message-ID: <20140108225333.GA12978(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:0016 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-0016.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b437a73ead41717600b76842fd0da7de391dccf5b9551bfc237b0cc3939dd2c3 gnupg-1.4.5-18.el5_10.1.i386.rpm x86_64: dee49e4148424a1f17167cfa19a5b94d8ff6c1f86c32cd09f760b003bdcc3efa gnupg-1.4.5-18.el5_10.1.x86_64.rpm Source: 4e87d564f1537f4cd195ad5b8ba4e433e538d3b1c91af7d843439de1acefb65f gnupg-1.4.5-18.el5_10.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 8 Jan 2014 22:59:22 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2014:0015 Important CentOS 6 openssl Update To: centos-announce(a)centos.org Message-ID: <20140108225922.GA45394(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2014:0015 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-0015.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: dade1d156bd3ea872b6622e0c8f2eab5453424cbaadd475a49e6d77455169752 openssl-1.0.1e-16.el6_5.4.i686.rpm 912c2d239dddafcb49255b27a0cbbb2aedde20ebe3bc606230c5c135a005ae5f openssl-devel-1.0.1e-16.el6_5.4.i686.rpm 4f8ba92ca400d35e3a559194d74b826b4492c931f23ee194ccd9fcebe326c55c openssl-perl-1.0.1e-16.el6_5.4.i686.rpm dc0b3e752f6f08c0961dec57cc42435b1eefe0330c91192fb1ea339a3bfffab7 openssl-static-1.0.1e-16.el6_5.4.i686.rpm x86_64: dade1d156bd3ea872b6622e0c8f2eab5453424cbaadd475a49e6d77455169752 openssl-1.0.1e-16.el6_5.4.i686.rpm 4bc35140201b7e0c4dff6ec71ceafbe745167b1bcd22223a92048777068c2f5c openssl-1.0.1e-16.el6_5.4.x86_64.rpm 912c2d239dddafcb49255b27a0cbbb2aedde20ebe3bc606230c5c135a005ae5f openssl-devel-1.0.1e-16.el6_5.4.i686.rpm cfbf11165d15b23cd9afc03777d78b635d6cb6fce2379f0841ff637c427ae2fb openssl-devel-1.0.1e-16.el6_5.4.x86_64.rpm f10d64a8469aa74af9115df8cb48b07821e09976a42c182558ddf8ef7612582a openssl-perl-1.0.1e-16.el6_5.4.x86_64.rpm 20be3d7839df3f8358d8f7c52eb4f3cef2ba8663bb70e604bd52a538a37de2b7 openssl-static-1.0.1e-16.el6_5.4.x86_64.rpm Source: 14b9dccbc10c333bff4c90ae99b7d381cc3e6f187bc884def31e3ec5ba105d9d openssl-1.0.1e-16.el6_5.4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 107, Issue 5 ***********************************************

1 0

Hash rounds in /etc/libuser.conf won't work
by george.shaffer＠comcast.net 09 Jan '14

09 Jan '14

Two weeks ago I reported a problem I was having in the CentOS 5 Security Support forum. I could not get hash rounds, configured in /etc/libuser.conf, to work on CentOS release 5.10 (Final), 2.6.18-371.3.1.el5 x86_64. The details are here: https://www.centos.org/forums/viewtopic.php?f=24&t=44245&sid=975951a5a0eb26… I read all the documentation and looked for more off the CentOS site. I searched the entire CentOS site for hash_rounds_min and hash_rounds_max, the parameters changed in libuser.conf to configure the desired changes, without a single hit in any area on either. Over 800 people have seen my post and not a single reply; not unusual in that forum for what may be an infrequent situation. I'm guessing very few people have tried these options. At the same time I changed the hashing algorithm. Hash rounds only works with sha256 or sha512. The algorithm change worked the first time. The concept of configurable hash rounds is that the administrator can adapt the the hashing process to the specific hardware on which this is being configured and on faster hardware when a system is installed late in a OSs life cycle, up the rounds to make cracking harder. If an admin is willing to make users wait 2 seconds on every login and su, then a cracker on similar hardware could only get 0.5 cracks per second. This would make even 3 character passwords that did not fall to dictionary attacks tedious, and "good" 6 character passwords would be uncrackable. Even with a fast cracking network, with multiple GPGPU enabled PCs and a mixture of compromised systems working 10,000 times faster than a single PC, good 6 character passwords would be a serious obstacle and 8 uncrackable. I need this for a paper I'm writing which maintains "After 20 Years, Windows Passwords Still Broken". I want to compare Windows' poor MD4 with no salts (this is about NT hashes, not the notoriously broken LM hashes), to Unix like with salts, choice of algorithms, and hashing cycle control. The comparison is much weaker if I have no working example for one of the 3 key pieces on the Unix side. If anyone has successfully used hash rounds controls, I'd very much like to know what you did that I missed in my detailed forum report. It's possible there is no bug. I'm basing this on the belief that 900 million to 1 billion hashing rounds with SHA512 should produce a substantial delay and not complete in a small fraction of a second. Either my knowledge is way of or my PC MUCH faster than I thought it was, or there is a bug, if I've done everything correctly according to the documentation. I looked up how to report a bug and this said to submit the report to the CentOS-qa mailing list but I cannot find such a list. Is there such a list or any bug reporting procedure? If this is a duplicate post I apologize. I sent one yesterday and never got it and it's not in the archives when messages sent latter are.

1 0

Forward http traffic
by Nikolaos Milas 09 Jan '14

09 Jan '14

Hello, On CentOS 6.5 x86_64 I have (/etc/sysconfig/iptables): *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :RH-Firewall-1-INPUT - [0:0] -A INPUT -j RH-Firewall-1-INPUT -A FORWARD -j RH-Firewall-1-INPUT -A RH-Firewall-1-INPUT -i lo -j ACCEPT -A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT -A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -s 10.10.10.0/24 -m tcp -p tcp --dport 22 -j ACCEPT -A RH-Firewall-1-INPUT -s 10.10.10.0/24 -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT -A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited COMMIT Now, I want to forward all http traffic coming in from 10.250.250.0/24, at local port 8080, to 2 particular IP Addresses (port 80). Is it enough to prepend (to the above) the following: *nat :PREROUTING ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] :OUTPUT ACCEPT [0:0] -A PREROUTING -s 10.250.250.0/24 -p tcp --dport 8080 -j DNAT --to-destination xxx.xxx.xxx.xxx:80 -A PREROUTING -s 10.250.250.0/24 -p tcp --dport 8080 -j DNAT --to-destination yyy.yyy.yyy.yyy:80 COMMIT ...? Please advise! Thanks in advance, Nick

11 16

Re: [CentOS] [CentOS-announce] CentOS Project joins forces with Red Hat
by Michael Weiner 08 Jan '14

08 Jan '14

This is great news!! Congrats and thanks to everyone that has put in all the hard work to make this a great environment. Michael Weiner On Tue, Jan 7, 2014 at 4:09 PM, Karanbir Singh <kbsingh(a)centos.org> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > With great excitement I'd like to announce that we are joining the Red > Hat family. The CentOS Project ( http://www.centos.org ) is joining > forces with Red Hat. Working as part of the Open Source and Standards > team ( http://community.redhat.com/ ) to foster rapid innovation > beyond the platform into the next generation of emerging technologies. > Working alongside the Fedora and RHEL ecosystems, we hope to further > expand on the community offerings by providing a platform that is > easily consumed, by other projects to promote their code while we > maintain the established base. > > We are also launching the new CentOS.org website ( > http://www.centos.org ). > > - ------------- > The new initiative is going to be overseen by the new CentOS Governing > Board. The initial Board comprises of the existing CentOS Core team > members : > > - - Ralph Angenent > - - Tru Hyunh > - - Johnny Hughes JR > - - Jim Perrin > - - Karanbir Singh > > and also sees new members: > - - Fabian Arrotin, who comes to the board nominated from the community > - - Carl Trieloff, Karsten Wade, and Mike McLean join us, nominated by > Red Hat. > > Please join me in welcoming the new members to the Board. > > The key operating points of the Board are going to be: Public, Open, > and Inclusive. You can find more information about the governance > model, the board, and the operating policies we are proposing at > http://www.centos.org/about/governance/ > > Furthermore, some of the existing CentOS Core members are moving to > take up roles at Red Hat, as a part of their sponsorship of the CentOS > Project, allowing these people to work on the Project as their primary > job function. This includes Johnny Hughes Jr, Jim Perrin, Fabian > Arrotin, and myself. We will be working with and operating out of the > Red Hat Open Source and Standards team in the CTO's Office. > > - ------------- > Some of the things that are not changing: > - - The CentOS Linux platform isn't changing. The process and methods > built up around the platform however are going to become more open, > more inclusive and transparent. > - - The sponsor driven content network that has been central to the > success of the CentOS efforts over the years stays intact. > - - The bugs, issues, and incident handling process stays as it has been > with more opportunities for community members to get involved at > various stages of the process. > - - The Red Hat Enterprise Linux to CentOS firewall will also remain. > Members and contributors to the CentOS efforts are still isolated from > the RHEL Groups inside Red Hat, with the only interface being srpm / > source path tracking, no sooner than is considered released. In > summary: we retain an upstream. > > Feel free to reach out if you have specific concerns about how this > change impacts your CentOS story. URLs mentioned at the bottom of this > email should be a good starting point. > > - ------------- > Some of the key things that are changing: > - - Some of us now work for Red Hat, but not RHEL. This should not have > any impact to our ability to do what we have done in the past, it > should facilitate a more rapid pace of development and evolution for > our work on the community platform. > > - - Red Hat is offering to sponsor some of the buildsystem and initial > content delivery resources - how we are able to consume these and when > we are able to make use of this is to be decided. > > - - Sources that we consume, in the platform, in the addons, or the > parallel stacks such as Xen4CentOS will become easier to consume with > a git.centos.org being setup, with the scripts and rpm metadata needed > to create binaries being published there. The Board also aims to put > together a plan to allow groups to come together within the CentOS > ecosystem as a Special Interest Group (SIG) and build CentOS Variants > on our resources, as officially endorsed. You can read about the > proposal at http://www.centos.org/variants/ > > - - Because we are now able to work with the Red Hat legal teams, some > of the contraints that resulted in efforts like CentOS-QA being behind > closed doors, now go away and we hope to have the entire build, test, > and delivery chain open to anyone who wishes to come and join the effort. > > The changes we make are going to be community inclusive, and promoted, > proposed, formalised, and actioned in an open community centric manner > on the centos-devel mailing list. And I highly encourage everyone to > come along and participate. > > - ------------- > Contacting us works best via the established community mechanisms. > - - Real time chats via IRC ( http://wiki.centos.org/irc ) ; To keep > conversation sanity intact, I recommend using the #centos-devel > channel to discuss project related activity while #centos is best used > for end user conversations. > > - - The Mailing lists are a great way to interface with the developers, > contributors and the community at large ( http://lists.centos.org ). > As with IRC, we recommend using the centos-devel list to talk about > project related issues while the general centos list is best used for > end user conversations. > > - - The CentOS Forums are another great way to engage in conversation > with other users ( http://www.centos.org/forums ), if you prefer that > mechanism. > > All the above mentioned venues are public and open to the community, > should you wish to discuss something privately, you can email us at > centosdev(a)centos.org. Press requests should be sent to > press(a)centos.org. Please note that it will take us much longer to > reply to private requests as compared to content on the public venues. > > - ------------- > In the coming days we are going to create opportunities for people to > come and get involved in more face to face interactions. Starting with > a regular scheduled office-hours format hangouts ( > http://wiki.centos.org/OfficeHours ) that start early next week. We > are trying to split the sessions into two different timezones so as to > maximise the number of people who are able to join. The sessions will > run live, with #centos-devel on irc.freenode.net being used for > conversations alongside. > > We are also running a CentOS Dojo on the 31st Jan 2014 at Belgium ( > http://wiki.centos.org/Events/Dojo/Brussels2014 ); The event will run > two tracks, with lots of opportunities for social interaction between > the talks; followed by CentOS in the Clouds Hack sessions. We are > limited in the number of people we can accomodate, so I encourage > everyone to register early. > > - ------------- > I want to take this opportunity to thank all the sponsors, the > contributors and the CentOS team members for all their help over the > years, the project is built completely upon those contributions - and > I look forward to seeing even more involvement from everyone as we > move forward. > > - ------------- > A Request: > > We are still sorting out content in various places and it might take a > day or two to get everything in place. In the mean time if you find > something stale and perhaps misleading in the new context ( or the old > one! ) please drop in on #centos-devel at irc.centos.org and let us know. > > - ------------- > Some URLS: > - - http://www.centos.org/ The CentOS Project > - - http://wiki.centos.org/ CentOS Community wiki > - - http://community.redhat.com/ RedHat OSAS > - - > > http://www.redhat.com/about/news/press-archive/2014/1/red-hat-and-centos-jo… > - - Red Hat Press Release > - - http://community.redhat.com/centos-faq - Red Hat FAQ's about the > initiative > - - http://wiki.centos.org/FAQ - CentOS FAQ's about the initiative > > > Enjoy! and regards, > > Karanbir Singh and everyone from the CentOS team, > > > - -- > Karanbir Singh, Project Chair, The CentOS Project > +44-207-0999389 | http://www.centos.org/ | twitter.com/CentOS > GnuPG Key : http://www.karan.org/publickey.asc > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v2.0.14 (GNU/Linux) > Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ > > iEYEARECAAYFAlLMbQcACgkQMA29nj4Tz1sTnQCgj2fYxYpTjA0KwH7TpCWjE4gg > w2cAniQWb/nh6Zn/8daSQ3EAfLIzGNKg > =KJOk > -----END PGP SIGNATURE----- > _______________________________________________ > CentOS-announce mailing list > CentOS-announce(a)centos.org > http://lists.centos.org/mailman/listinfo/centos-announce > -- "A patriot must always be ready to defend his country against his government." E. Abbey

1 0

freenx vs KVM Virtual Machine Manager - mouse poiner
by Les Mikesell 08 Jan '14

08 Jan '14

When I run the GUI Virtual Machine Manager in an NX/freenx session and open a console to a windows guest VM (haven't tried Linux w/X as a guest yet), the mouse point location does not track correctly. Is there some setting to improve this? X2go seems better in this respect but I'm not sure I want to switch yet. Normally I'd use vnc or remote-desktop connections directly to the guest anyway, but there are times you need to use the virtual consoles. -- Les Mikesell lesmikesell(a)gmail.com

1 0

Hash rounds in /etc/libuser.conf won't work - how to report a bug
by george.shaffer＠comcast.net 08 Jan '14

08 Jan '14

Two weeks ago I reported a problem I was having in the CentOS 5 Security Support forum. I could not get hash rounds, configured in /etc/libuser.conf, to work on CentOS release 5.10 (Final), 2.6.18-371.3.1.el5 x86_64. The details are here: https:// www.centos.org/forums/viewforum.php?f=24&sid=44859638070165ed5d8d9c35cdbe03… I read all the documentation and looked for more off the CentOS site. I searched the entire CentOS site for hash_rounds_min and hash_rounds_max, the parameters changed in libuser.conf to configure the desired changes, without a single hit in any area on either. Nearly 800 people have seen my post and not a single reply; not unusual in that forum for what may be an infrequent situation. I'm guessing very few people have tried these options. At the same time I changed the hashing algorithm. Hash rounds only works with sha256 or sha512. This worked the first time. The concept of configurable hash rounds is the administrator can adapt the the hashing process to the specific hardware on which this is being configured and on faster hardware when a system is installed late in a OSs life cycle, up the rounds to make cracking harder. If an admin is willing to make users wait 2 seconds on every login and su, then a cracker on similar hardware could only get 0.5 cracks per second. This would make even 3 character passwords that did not fall to dictionary attacks tedious, and "good" 6 character passwords would be uncrackable. Even with a fast cracking network, with multiple GPGPU enabled PCs and a mixture of compromised systems working 10,000 times faster than the single PC, good 6 character passwords would be a serious obstacle and 8 quite uncrackable. I need this for a paper I'm writing which maintains "After 20 Years, Windows Passwords Still Broken". I want to compare Windows' poor MD4 with no salts (this is about NT hashes, not the notoriously broken LM hashes), to Unix like with salts, choice of algorithms, and hashing cycle control. The comparison is much weaker if I have no working example for one of the 3 key pieces on the Unix side. If anyone has successfully used hash rounds controls, I'd very much like to know what you did that I missed in my detailed forum report. It's possible there is no bug. I'm basing this on the belief that 900 million to 1 billion hashing rounds should produce a substantial delay and not complete in a small fraction of a second. Either my knowledge is way of or my PC MUCH faster than I thought it was, or there is a bug, if I've done everything correctly according to the documentation. I looked up how to report a bug and this said to submit the report to the CentOS-qa mailing list but I cannot find such a list.

1 0

FF 24 is borked: One must have tabs, like it or not!
by Robert Heller 08 Jan '14

08 Jan '14

I just did a yum update on my CentOS 5.10 desktop machine and it installed FF 24. And tabs have appeared and cannot be [really] removed! Arg!!! *I HATE TABS!* (Yes I did installed the "hide tabs when there is only one tab" plugin, but that is not really a complete solution.) In the Mozilla support forum thread relating to this (https://support.mozilla.org/en-US/questions/968331) there is mention of SeaMonkey which has better control of tabs and I was wondering: is there a supported version of SeaMonkey that will install under RHEL5 / CentOS5? Specificly, I am looking for RPMs for SeaMonkey, rather than the tarball install. -- Robert Heller -- 978-544-6933 / heller(a)deepsoft.com Deepwoods Software -- http://www.deepsoft.com/ () ascii ribbon campaign -- against html e-mail /\ www.asciiribbon.org -- against proprietary attachments

4 3

Re: [CentOS] [CentOS-announce] CentOS Project joins forces with Red Hat
by Alain Péan 08 Jan '14

08 Jan '14

Le 08/01/2014 14:54, Reindl Harald a écrit : > *which independence*?????? > > CentOS is a*bug for bug* indentical rebuild of RHEL > you will never face*any* change or bugfix in CentOS > which is not done in the same RHEL package > > so about*what* independance are you talking about? For example to build a 100% bug for bug release of RHEL, and not : "better able to serve the needs of open source community members who require different or faster-moving components" From : http://community.redhat.com/centos-faq/ This is a kind of Fedora ? Will it supported 10 years, by recompiling the RHEL source updates too ? Alain -- Administrateur Système/Réseau Laboratoire de Photonique et Nanostructures (LPN/CNRS - UPR20) Centre de Recherche Alcatel Data IV - Marcoussis route de Nozay - 91460 Marcoussis Tel : 01-69-63-61-34

5 6

CentOS-announce Digest, Vol 107, Issue 4
by centos-announce-request＠centos.org 08 Jan '14

08 Jan '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CentOS Project joins forces with Red Hat (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Tue, 07 Jan 2014 21:09:27 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CentOS Project joins forces with Red Hat To: CentOS Announcements List <centos-announce(a)centos.org> Message-ID: <52CC6D07.5050909(a)centos.org> Content-Type: text/plain; charset=ISO-8859-1 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 With great excitement I'd like to announce that we are joining the Red Hat family. The CentOS Project ( http://www.centos.org ) is joining forces with Red Hat. Working as part of the Open Source and Standards team ( http://community.redhat.com/ ) to foster rapid innovation beyond the platform into the next generation of emerging technologies. Working alongside the Fedora and RHEL ecosystems, we hope to further expand on the community offerings by providing a platform that is easily consumed, by other projects to promote their code while we maintain the established base. We are also launching the new CentOS.org website ( http://www.centos.org ). - ------------- The new initiative is going to be overseen by the new CentOS Governing Board. The initial Board comprises of the existing CentOS Core team members : - - Ralph Angenent - - Tru Hyunh - - Johnny Hughes JR - - Jim Perrin - - Karanbir Singh and also sees new members: - - Fabian Arrotin, who comes to the board nominated from the community - - Carl Trieloff, Karsten Wade, and Mike McLean join us, nominated by Red Hat. Please join me in welcoming the new members to the Board. The key operating points of the Board are going to be: Public, Open, and Inclusive. You can find more information about the governance model, the board, and the operating policies we are proposing at http://www.centos.org/about/governance/ Furthermore, some of the existing CentOS Core members are moving to take up roles at Red Hat, as a part of their sponsorship of the CentOS Project, allowing these people to work on the Project as their primary job function. This includes Johnny Hughes Jr, Jim Perrin, Fabian Arrotin, and myself. We will be working with and operating out of the Red Hat Open Source and Standards team in the CTO's Office. - ------------- Some of the things that are not changing: - - The CentOS Linux platform isn't changing. The process and methods built up around the platform however are going to become more open, more inclusive and transparent. - - The sponsor driven content network that has been central to the success of the CentOS efforts over the years stays intact. - - The bugs, issues, and incident handling process stays as it has been with more opportunities for community members to get involved at various stages of the process. - - The Red Hat Enterprise Linux to CentOS firewall will also remain. Members and contributors to the CentOS efforts are still isolated from the RHEL Groups inside Red Hat, with the only interface being srpm / source path tracking, no sooner than is considered released. In summary: we retain an upstream. Feel free to reach out if you have specific concerns about how this change impacts your CentOS story. URLs mentioned at the bottom of this email should be a good starting point. - ------------- Some of the key things that are changing: - - Some of us now work for Red Hat, but not RHEL. This should not have any impact to our ability to do what we have done in the past, it should facilitate a more rapid pace of development and evolution for our work on the community platform. - - Red Hat is offering to sponsor some of the buildsystem and initial content delivery resources - how we are able to consume these and when we are able to make use of this is to be decided. - - Sources that we consume, in the platform, in the addons, or the parallel stacks such as Xen4CentOS will become easier to consume with a git.centos.org being setup, with the scripts and rpm metadata needed to create binaries being published there. The Board also aims to put together a plan to allow groups to come together within the CentOS ecosystem as a Special Interest Group (SIG) and build CentOS Variants on our resources, as officially endorsed. You can read about the proposal at http://www.centos.org/variants/ - - Because we are now able to work with the Red Hat legal teams, some of the contraints that resulted in efforts like CentOS-QA being behind closed doors, now go away and we hope to have the entire build, test, and delivery chain open to anyone who wishes to come and join the effort. The changes we make are going to be community inclusive, and promoted, proposed, formalised, and actioned in an open community centric manner on the centos-devel mailing list. And I highly encourage everyone to come along and participate. - ------------- Contacting us works best via the established community mechanisms. - - Real time chats via IRC ( http://wiki.centos.org/irc ) ; To keep conversation sanity intact, I recommend using the #centos-devel channel to discuss project related activity while #centos is best used for end user conversations. - - The Mailing lists are a great way to interface with the developers, contributors and the community at large ( http://lists.centos.org ). As with IRC, we recommend using the centos-devel list to talk about project related issues while the general centos list is best used for end user conversations. - - The CentOS Forums are another great way to engage in conversation with other users ( http://www.centos.org/forums ), if you prefer that mechanism. All the above mentioned venues are public and open to the community, should you wish to discuss something privately, you can email us at centosdev(a)centos.org. Press requests should be sent to press(a)centos.org. Please note that it will take us much longer to reply to private requests as compared to content on the public venues. - ------------- In the coming days we are going to create opportunities for people to come and get involved in more face to face interactions. Starting with a regular scheduled office-hours format hangouts ( http://wiki.centos.org/OfficeHours ) that start early next week. We are trying to split the sessions into two different timezones so as to maximise the number of people who are able to join. The sessions will run live, with #centos-devel on irc.freenode.net being used for conversations alongside. We are also running a CentOS Dojo on the 31st Jan 2014 at Belgium ( http://wiki.centos.org/Events/Dojo/Brussels2014 ); The event will run two tracks, with lots of opportunities for social interaction between the talks; followed by CentOS in the Clouds Hack sessions. We are limited in the number of people we can accomodate, so I encourage everyone to register early. - ------------- I want to take this opportunity to thank all the sponsors, the contributors and the CentOS team members for all their help over the years, the project is built completely upon those contributions - and I look forward to seeing even more involvement from everyone as we move forward. - ------------- A Request: We are still sorting out content in various places and it might take a day or two to get everything in place. In the mean time if you find something stale and perhaps misleading in the new context ( or the old one! ) please drop in on #centos-devel at irc.centos.org and let us know. - ------------- Some URLS: - - http://www.centos.org/ The CentOS Project - - http://wiki.centos.org/ CentOS Community wiki - - http://community.redhat.com/ RedHat OSAS - - http://www.redhat.com/about/news/press-archive/2014/1/red-hat-and-centos-jo… - - Red Hat Press Release - - http://community.redhat.com/centos-faq - Red Hat FAQ's about the initiative - - http://wiki.centos.org/FAQ - CentOS FAQ's about the initiative Enjoy! and regards, Karanbir Singh and everyone from the CentOS team, - -- Karanbir Singh, Project Chair, The CentOS Project +44-207-0999389 | http://www.centos.org/ | twitter.com/CentOS GnuPG Key : http://www.karan.org/publickey.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlLMbQcACgkQMA29nj4Tz1sTnQCgj2fYxYpTjA0KwH7TpCWjE4gg w2cAniQWb/nh6Zn/8daSQ3EAfLIzGNKg =KJOk -----END PGP SIGNATURE----- ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 107, Issue 4 ***********************************************

1 0

Re: [CentOS] [CentOS-announce] CentOS Project joins forces with Red Hat
by Michael Simpson 08 Jan '14

08 Jan '14

On Tuesday, January 7, 2014, Karanbir Singh wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > With great excitement I'd like to announce that we are joining the Red > Hat family. The CentOS Project ( http://www.centos.org ) is joining > forces with Red Hat. Great news guys, well done. Regards Mike

1 0

Extract PDF portfolio
by Nicole Hähnel 08 Jan '14

08 Jan '14

Hi, I am searching for a command line tool to extract files from a pdf portfolio? Are there any capabilities to do this? Thanks in advance! Kind regards, Nicole

2 2

grub color on C6 (not)
by Ted Miller 08 Jan '14

08 Jan '14

I have tried more than half a dozen different combinations of the "color" command in my grub.conf file, and see nothing but black and white. Is there * a problem with the Centos grub command? * a problem with grub figuring out how to do color on my hardware? * a true-false day, when everything is either true or false, no in between grays, and no color? scratching my head, Ted Miller Elkhart, IN, USA

2 2

Odd problems with CR updates
by Scott Robbins 08 Jan '14

08 Jan '14

As I've seen no mention of this anywhere, I've got to assume it's just me. Doing some of the CR updates last night, google-chrome and firefox suddenly stopped working with https pages, including google itself. I was able to downgrade, but wasn't sure exactly what had caused the problem. Tonight, trying again, package by package, it seems that it's nss-softokn that's causing the problem. Has anyone run into something similar? For example, if I upgrade to the CR version, then open chromium and type a search phrase, I'll get message that this web page not available. Firefox is somewhat more informative, ---------- An error occurred during a connection to www.google.com. security library: invalid algorithm. (Error code: sec_error_invalid_algorithm) The page you are trying to view cannot be shown because the authenticity of the received data could not be verified. Please contact the website owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site. -------- This happens when I upgrade to nss-softokn.3.14.3-9.el6 When I downgrade to 3.14.3-3.el6_4 it's fine. Has anyone else run into this? -- Scott Robbins PGP keyID EB3467D6 ( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 ) gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

4 6

Re: [CentOS] [CentOS-announce] CentOS Project joins forces with Red Hat
by aly.khimji＠gmail.com 08 Jan '14

08 Jan '14

That is amazing news, I hope this proves to be a great relationship. Congratulations, looking forward to the future. Aly Sent from my BlackBerry device on the Rogers Wireless Network -----Original Message----- From: Karanbir Singh <kbsingh(a)centos.org> Sender: centos-announce-bounces(a)centos.org Date: Tue, 07 Jan 2014 21:09:27 To: CentOS Announcements List<centos-announce(a)centos.org> Reply-To: centos(a)centos.org Subject: [CentOS-announce] CentOS Project joins forces with Red Hat -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 With great excitement I'd like to announce that we are joining the Red Hat family. The CentOS Project ( http://www.centos.org ) is joining forces with Red Hat. Working as part of the Open Source and Standards team ( http://community.redhat.com/ ) to foster rapid innovation beyond the platform into the next generation of emerging technologies. Working alongside the Fedora and RHEL ecosystems, we hope to further expand on the community offerings by providing a platform that is easily consumed, by other projects to promote their code while we maintain the established base. We are also launching the new CentOS.org website ( http://www.centos.org ). - ------------- The new initiative is going to be overseen by the new CentOS Governing Board. The initial Board comprises of the existing CentOS Core team members : - - Ralph Angenent - - Tru Hyunh - - Johnny Hughes JR - - Jim Perrin - - Karanbir Singh and also sees new members: - - Fabian Arrotin, who comes to the board nominated from the community - - Carl Trieloff, Karsten Wade, and Mike McLean join us, nominated by Red Hat. Please join me in welcoming the new members to the Board. The key operating points of the Board are going to be: Public, Open, and Inclusive. You can find more information about the governance model, the board, and the operating policies we are proposing at http://www.centos.org/about/governance/ Furthermore, some of the existing CentOS Core members are moving to take up roles at Red Hat, as a part of their sponsorship of the CentOS Project, allowing these people to work on the Project as their primary job function. This includes Johnny Hughes Jr, Jim Perrin, Fabian Arrotin, and myself. We will be working with and operating out of the Red Hat Open Source and Standards team in the CTO's Office. - ------------- Some of the things that are not changing: - - The CentOS Linux platform isn't changing. The process and methods built up around the platform however are going to become more open, more inclusive and transparent. - - The sponsor driven content network that has been central to the success of the CentOS efforts over the years stays intact. - - The bugs, issues, and incident handling process stays as it has been with more opportunities for community members to get involved at various stages of the process. - - The Red Hat Enterprise Linux to CentOS firewall will also remain. Members and contributors to the CentOS efforts are still isolated from the RHEL Groups inside Red Hat, with the only interface being srpm / source path tracking, no sooner than is considered released. In summary: we retain an upstream. Feel free to reach out if you have specific concerns about how this change impacts your CentOS story. URLs mentioned at the bottom of this email should be a good starting point. - ------------- Some of the key things that are changing: - - Some of us now work for Red Hat, but not RHEL. This should not have any impact to our ability to do what we have done in the past, it should facilitate a more rapid pace of development and evolution for our work on the community platform. - - Red Hat is offering to sponsor some of the buildsystem and initial content delivery resources - how we are able to consume these and when we are able to make use of this is to be decided. - - Sources that we consume, in the platform, in the addons, or the parallel stacks such as Xen4CentOS will become easier to consume with a git.centos.org being setup, with the scripts and rpm metadata needed to create binaries being published there. The Board also aims to put together a plan to allow groups to come together within the CentOS ecosystem as a Special Interest Group (SIG) and build CentOS Variants on our resources, as officially endorsed. You can read about the proposal at http://www.centos.org/variants/ - - Because we are now able to work with the Red Hat legal teams, some of the contraints that resulted in efforts like CentOS-QA being behind closed doors, now go away and we hope to have the entire build, test, and delivery chain open to anyone who wishes to come and join the effort. The changes we make are going to be community inclusive, and promoted, proposed, formalised, and actioned in an open community centric manner on the centos-devel mailing list. And I highly encourage everyone to come along and participate. - ------------- Contacting us works best via the established community mechanisms. - - Real time chats via IRC ( http://wiki.centos.org/irc ) ; To keep conversation sanity intact, I recommend using the #centos-devel channel to discuss project related activity while #centos is best used for end user conversations. - - The Mailing lists are a great way to interface with the developers, contributors and the community at large ( http://lists.centos.org ). As with IRC, we recommend using the centos-devel list to talk about project related issues while the general centos list is best used for end user conversations. - - The CentOS Forums are another great way to engage in conversation with other users ( http://www.centos.org/forums ), if you prefer that mechanism. All the above mentioned venues are public and open to the community, should you wish to discuss something privately, you can email us at centosdev(a)centos.org. Press requests should be sent to press(a)centos.org. Please note that it will take us much longer to reply to private requests as compared to content on the public venues. - ------------- In the coming days we are going to create opportunities for people to come and get involved in more face to face interactions. Starting with a regular scheduled office-hours format hangouts ( http://wiki.centos.org/OfficeHours ) that start early next week. We are trying to split the sessions into two different timezones so as to maximise the number of people who are able to join. The sessions will run live, with #centos-devel on irc.freenode.net being used for conversations alongside. We are also running a CentOS Dojo on the 31st Jan 2014 at Belgium ( http://wiki.centos.org/Events/Dojo/Brussels2014 ); The event will run two tracks, with lots of opportunities for social interaction between the talks; followed by CentOS in the Clouds Hack sessions. We are limited in the number of people we can accomodate, so I encourage everyone to register early. - ------------- I want to take this opportunity to thank all the sponsors, the contributors and the CentOS team members for all their help over the years, the project is built completely upon those contributions - and I look forward to seeing even more involvement from everyone as we move forward. - ------------- A Request: We are still sorting out content in various places and it might take a day or two to get everything in place. In the mean time if you find something stale and perhaps misleading in the new context ( or the old one! ) please drop in on #centos-devel at irc.centos.org and let us know. - ------------- Some URLS: - - http://www.centos.org/ The CentOS Project - - http://wiki.centos.org/ CentOS Community wiki - - http://community.redhat.com/ RedHat OSAS - - http://www.redhat.com/about/news/press-archive/2014/1/red-hat-and-centos-jo… - - Red Hat Press Release - - http://community.redhat.com/centos-faq - Red Hat FAQ's about the initiative - - http://wiki.centos.org/FAQ - CentOS FAQ's about the initiative Enjoy! and regards, Karanbir Singh and everyone from the CentOS team, - -- Karanbir Singh, Project Chair, The CentOS Project +44-207-0999389 | http://www.centos.org/ | twitter.com/CentOS GnuPG Key : http://www.karan.org/publickey.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlLMbQcACgkQMA29nj4Tz1sTnQCgj2fYxYpTjA0KwH7TpCWjE4gg w2cAniQWb/nh6Zn/8daSQ3EAfLIzGNKg =KJOk -----END PGP SIGNATURE----- _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce

1 0

Re: [CentOS] [CentOS-announce] CentOS Project joins forces with Red Hat
by David Hrbáč 07 Jan '14

07 Jan '14

Dne 7.1.2014 22:09, Karanbir Singh napsal(a): > With great excitement I'd like to announce that we are joining the Red > Hat family. The CentOS Project ( http://www.centos.org ) is joining > forces with Red Hat. Working as part of the Open Source and Standards > team ( http://community.redhat.com/ ) to foster rapid innovation > beyond the platform into the next generation of emerging technologies. > Working alongside the Fedora and RHEL ecosystems, we hope to further > expand on the community offerings by providing a platform that is > easily consumed, by other projects to promote their code while we > maintain the established base. Something I have dreamt of. Good news. Congratulations. Regards, David Hrbáč

1 0

Simple question on USB flash drive naming
by James B. Byrne 07 Jan '14

07 Jan '14

I have a USB key that when inserted into a port on my CentOS-6.5 system maounts as this: /dev/sdb1 /media/22d773e3-8502-4196-b45f-388380dcee48 ext2 rw,nosuid,nodev,uhelper=udisks 0 0 What is the mechanism to give this thing a more human usable mount name / volume name? Mounting this USB key with what I guess is a UUID in place of a name was not always the case. My sense is that the change in behaviour started when I moved the system from CentOS-5.7 to 6.0 but I cannot be sure that this is actually the case. The key has not changed since 2006 (CentOS-4) but the name that CentOS assigns to its mount point has. It used to be something like "kingston_blahblah" I looked at /dev/disk/ on the host and noted that the by-label sub-directory is gone. Is this something that should be there and is not or has CentOS-6 gotten rid of it? TIA -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

Re: [CentOS] Can we trust RedHat encryption tools?
by James B. Byrne 07 Jan '14

07 Jan '14

On Mon, January 6, 2014 16:51, m.roth(a)5-cent.us wrote: > > Looks like it's rtrying to install it, not just build it. In the first > example, you're trying to replace the existing /usr/bin/strip, which only > root can do. Are you doing make, or make install? > I started out by using the openssl.spec file for openssl-1.0.1f directly from openssl.org. The contents of that file are provided at http://git.openssl.org/gitweb/?p=openssl.git;a=blob_plain;f=openssl.spec;hb…. What I then do download the source from openssl.org and put that into ~/rpmbuild/SOURCES and extract it. I then copy ~/rpmbuild/SOURCES/openssl-1.0.1f/openssl.spec into ~/rpmbuild/SPECS and run the following commands: mock --buildsrpm --sources=./rpmbuild/SOURCES --spec=./rpmbuild/SPECS/openssl.spec mock --no-clean --rebuild --root=default /var/lib/mock/epel-6-x86_64/result/openssl-1.0.1f-1.src.rpm This gives the error reported above. I realize that this is a naive approach but I after looking at the Redhat openssl.spec file I thought it best to start with the base files provided by the origin and work out any build problems one by one making the absolute minimum number of changes possible. The nearest equivalent Redhat openssl.spec file that I found is that used by Fedora 20 for openssl-1.0.1e and its contents are displayed here: http://pkgs.fedoraproject.org/cgit/openssl.git/tree/openssl.spec?h=f20 >From what I have read elsewhere, Fedora/Redhat openssl begins with a set of modified source files. The spec file additionally applies about 43 patch files of which 27 alter the functionality of the package. It is not within my ability to determine what effect of the modifications to the source and these additional patches have on the integrity of the openssl provided with RHEL. Is there any third party in our community which does? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Disappearing directory
by Ken Smith 07 Jan '14

07 Jan '14

Hi All and happy new year, Via a cron job a USB disk is mounted on a Centos 6.4 machine for backup and dismounted after. I've noticed this failing. See below, the backup directory that was in /mnt had disappeared, so creating it again as follows... # cd /mnt # mkdir backup # mount /dev/sdb1 /mnt/backup/ # ls backup # cd backup/ # ls boot.tar.gz etc etc.tar.gz home home.tar.gz ident.txt lost+found named.tar.gz root.tar.gz usr.tar.gz var var.tar.gz # cd .. # ls backup # umount /dev/sdb1 # ls # cat /etc/redhat-release CentOS release 6.4 (Final) After the umount the directory vanishes. What gives or have I lost the plot in 2014. (This works as I'd expect on an old fc14 system I have) :-) Ken -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

7 15

CentOS-announce Digest, Vol 107, Issue 3
by centos-announce-request＠centos.org 07 Jan '14

07 Jan '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2014:0005 CentOS 6 sssd Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 6 Jan 2014 16:08:49 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2014:0005 CentOS 6 sssd Update To: centos-announce(a)centos.org Message-ID: <20140106160849.GA10654(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:0005 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-0005.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 0d31e0bfd94af81305f8e620a2c859c141d63ee6e7e1695da18ce9ff32b1d8ad libipa_hbac-1.9.2-129.el6_5.4.i686.rpm bd616a723787d89ad2832219915964b1cbb5c45251e013323a17572d18279a7d libipa_hbac-devel-1.9.2-129.el6_5.4.i686.rpm 89ef63c0d8b7d94d53ae76130d82624de337b1b17124abd44f3e5c8dfe8fe442 libipa_hbac-python-1.9.2-129.el6_5.4.i686.rpm d029a76709875099b811c8b788ca761a4851fed24a3e6cd8ac8301aeeebfe50e libsss_autofs-1.9.2-129.el6_5.4.i686.rpm ca729ea089821db0a6e31fae61ef8af691ee44b1c1dd3b7cab3706561ac5de8f libsss_idmap-1.9.2-129.el6_5.4.i686.rpm 570b574f6edd9bc3aeead48a3c8c3dda1425a97c5b53b429c8e99d83236b706b libsss_idmap-devel-1.9.2-129.el6_5.4.i686.rpm c4c441c07b31ffb3515725e08bfdb42bb0bf6a40731b21a8ccf737918765c0d1 libsss_sudo-1.9.2-129.el6_5.4.i686.rpm fab7bb18cf94a75dc2ae89444cd26f593871ff74e0ee7d48d46666703121f3d3 libsss_sudo-devel-1.9.2-129.el6_5.4.i686.rpm 036a42feb61a07ae20a44ba2119f59f7208acdcb4a3f2c99578ae6fb8e950806 sssd-1.9.2-129.el6_5.4.i686.rpm 63b9d09340e4c54efec67109d168de2ec1c489e9f08e5eb0887cc155977c4406 sssd-client-1.9.2-129.el6_5.4.i686.rpm 82673b1596a9ac0dddcbbc09398607d20a2d852e65d37dc8294260d82d2ef485 sssd-tools-1.9.2-129.el6_5.4.i686.rpm x86_64: 0d31e0bfd94af81305f8e620a2c859c141d63ee6e7e1695da18ce9ff32b1d8ad libipa_hbac-1.9.2-129.el6_5.4.i686.rpm ac4561121f9aaf41acae676fbb33cff958afb8c071a43274b7970df0c056191f libipa_hbac-1.9.2-129.el6_5.4.x86_64.rpm bd616a723787d89ad2832219915964b1cbb5c45251e013323a17572d18279a7d libipa_hbac-devel-1.9.2-129.el6_5.4.i686.rpm 2a53eda1460fdf2cc9df81487c05c45c876d70fa104ee88833a40864bff84bd6 libipa_hbac-devel-1.9.2-129.el6_5.4.x86_64.rpm 09f2329cf4a85ce0ed1e2e5d57df1548b592143cc914d56996abf704ba34044b libipa_hbac-python-1.9.2-129.el6_5.4.x86_64.rpm 73eaff3cccaa30f13cf431c1b5b19461e9e2c931ea85e2a00fe73d5c2109104f libsss_autofs-1.9.2-129.el6_5.4.x86_64.rpm ca729ea089821db0a6e31fae61ef8af691ee44b1c1dd3b7cab3706561ac5de8f libsss_idmap-1.9.2-129.el6_5.4.i686.rpm a7ba5cea05f9519f873bd08bdb478aad7f79156f8db26a7aceaf264ce90593e9 libsss_idmap-1.9.2-129.el6_5.4.x86_64.rpm 570b574f6edd9bc3aeead48a3c8c3dda1425a97c5b53b429c8e99d83236b706b libsss_idmap-devel-1.9.2-129.el6_5.4.i686.rpm f9346e709519c0bcb049d0f9d1cbe95692864bb8f114a96b1913f0763bf94dad libsss_idmap-devel-1.9.2-129.el6_5.4.x86_64.rpm 3ccbe1d1f618371ed1a71dc08fa30b5a997c0fcc119704202a901e5fd7cc9520 libsss_sudo-1.9.2-129.el6_5.4.x86_64.rpm fab7bb18cf94a75dc2ae89444cd26f593871ff74e0ee7d48d46666703121f3d3 libsss_sudo-devel-1.9.2-129.el6_5.4.i686.rpm 9a72bb6896d6052055cecf2206d0cdd49bd7ef672040f2154da662402d34082d libsss_sudo-devel-1.9.2-129.el6_5.4.x86_64.rpm 6afd1e8393d11c7f977b715a49935db27868dc9375c614872d65d4084e9e5d36 sssd-1.9.2-129.el6_5.4.x86_64.rpm 63b9d09340e4c54efec67109d168de2ec1c489e9f08e5eb0887cc155977c4406 sssd-client-1.9.2-129.el6_5.4.i686.rpm 218cbec8a327d7077713b545d95738f962d2fec46d11a6ee415b9858cd01012b sssd-client-1.9.2-129.el6_5.4.x86_64.rpm c7e5f0ab55282731cf7a4d0b316cec008135772a6b9eae5fc0c74f2f7bb9d81b sssd-tools-1.9.2-129.el6_5.4.x86_64.rpm Source: ccda87b7a3678c790b5802581d057d16f76ac908c1d317e55bb61b5730c892e3 sssd-1.9.2-129.el6_5.4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 107, Issue 3 ***********************************************

1 0

nfs client kerberos cache
by Darod Zyree 06 Jan '14

06 Jan '14

Greetings, Not sure if this is the correct mail list. I have the following test environment set up: - 1x ipa master = ipa1.example.com - 1x nfs server = nfs1.example.com - 1x nfs client = nfsclient1.example.com NFS version 4 is used and the appropriate Kerberos principal has been created in IPA: [root@nfs1 ~]# ipa service-show nfs/nfs1.example.com(a)EXAMPLE.COM Principal: nfs/nfs1.example.com(a)EXAMPLE.COM Keytab: True Managed by: nfs1.example.com Mounting using krb5p works: [root@nfsclient1 ~]# mount -v -t nfs -o sec=krb5p nfs1.example.com:/exports/homes/ /mnt mount.nfs: timeout set for Mon Jan 6 21:25:56 2014 mount.nfs: trying text-based options 'sec=krb5p,vers=4,addr=192.168.12.172,clientaddr=192.168.12.173' nfs1.example.com:/exports/homes/ on /mnt type nfs (rw,sec=krb5p) rpcgssd created the Kerberos cache file as indicated in /var/log/messages: rpc.gssd[2473]: INFO: Credentials in CC 'FILE:/tmp/krb5cc_machine_EXAMPLE.COM' are good until 1389125973 So far so good, but then: 1) I unmount everything from nfs1, remove the nfs1.example.host, its DNS record(s) and service principcals. 2) I redeploy the nfs1.example.com and re-create the nfs/nfs1.example.com(a)EXAMPLE.COM principal 3) I try to mount the same NFS share from nfs1 on nfsclient1 I get an error: mount.nfs: trying text-based options 'sec=krb5p,vers=4,addr=192.168.12.172,clientaddr=192.168.12.173' mount.nfs: mount(2): Operation not permitted Now I'm not an IPA or Kerberos expert but I am guessing that this happens because the nfsclient1 still has, and uses, the /tmp/krb5cc_machine_EXAMPLE.COM cache file? This file would have the “old” Kerberos credentials?... On the NFS server in /var/log/messages this error message is displayed: "rpc.svcgssd[5983]: ERROR: GSS-API: error in handle_nullreq: gss_accept_sec_context(): GSS_S_FAILURE (Unspecified GSS failure. Minor code may provide more information) - Wrong principal in request" On the NFS client in /var/log/messages these messages are displayed: "creating context with server nfs(a)nfs1.example.com" "WARNING: Failed to create machine krb5 context with credentials cache FILE:/tmp/krb5cc_machine_EXAMPLE.COM for server nfs1.example.com" "WARNING: Machine cache is prematurely expired or corrupted trying to recreate cache for server nfs1.example.com" Restarting the rpcgssd daemon works, this action removes the /tmp/krb5cc_machine_EXAMPLE.COM file and upon a mount command it is recreated. However restarting the rpcgssd daemon on all NFS clients every time an NFS server is redeployed doesn't feel right. Anyone perhaps have an idea on what I might be doing wrong? Or is this by design?

1 0

Re: [CentOS] I want to ask about some Kernel level operations.
by Eliezer Croitoru 05 Jan '14

05 Jan '14

Hey, I am still not sure if it's Harald or Reindl as first name. Now for the matter in hands: I am building the software mostly manually if I can! The problem is that most software developers tend to build their software in a very good way. The kernel developers for example of a remarkable software is a very strict environment. If I cannot build the kernel as root user it is better to not build it at all from my aspect. The RPMBUILD tools and other automation tools is suppose to help distributing and test the code. Once it has passed these tests why would I need to build them as a non-root user? We all humans and we do tend to maybe miss here and there something but don't let these MOCKs and RPMbuilds to just *vaporise* the basic efforts which the developers invested. I would say something like that: Building as root user\s level is not recommended due to couple incidents in the past. All The Bests, Eliezer On 05/01/14 17:16, Reindl Harald wrote: > DO NOT BUILD AS ROOT AND USE MOCK/RPMBUILD > > what is your problem as you statet even in the original post > that you know that it is not recommended to build as root > but you insist in doing so? > > *what* do you want to achieve with this thread? >

2 1

Re: [CentOS] Need help with spec file for Apache-2.4.7
by James B. Byrne 05 Jan '14

05 Jan '14

On Sun, January 5, 2014 06:02, Peter wrote: > On 01/05/2014 08:28 PM, James B. Byrne wrote: >> >> RPM build errors: >> error: Installed (but unpackaged) file(s) found: > ... >> /usr/bin/apu-1-config > > ... > >> %{_bindir}/apr-u-config > > "apu-l" != "apr-u" > > > Peter > > Ahhh. Thank you. I suppose that eventually I might have noticed. Sigh... Anyway, it is built and packaged now. Next I will see if it runs. Regards, and thanks. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

CentOS-announce Digest, Vol 107, Issue 2
by centos-announce-request＠centos.org 05 Jan '14

05 Jan '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2014:0004 CentOS 6 kernel Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Sat, 4 Jan 2014 12:55:55 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2014:0004 CentOS 6 kernel Update To: centos-announce(a)centos.org Message-ID: <20140104125555.GA28638(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:0004 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-0004.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 34c4d117faac1ba5a647ac7576a48a9a301577a1311b1ad22259c2b32cb8a0a8 kernel-2.6.32-431.3.1.el6.i686.rpm daab71e92b367f886065f43920b930f1a5b3348819b81d0790124e5370591125 kernel-abi-whitelists-2.6.32-431.3.1.el6.noarch.rpm 68cfab16a48a4307d25f1d7be6384f122e1d4c2d7f56ef5c823ea6c3b614820f kernel-debug-2.6.32-431.3.1.el6.i686.rpm 7536e3613c16b14cbb161627840744d8a430b64002c4fc1516987e5f05fd1a0c kernel-debug-devel-2.6.32-431.3.1.el6.i686.rpm 1852acde5db7b864dab0a17a48d50d2947e3422dafba528a52d4028935037da9 kernel-devel-2.6.32-431.3.1.el6.i686.rpm 39aa17b77d7e2a9b2e87930e3426499f621ffa6197c0fa1f4e35e2bb6196defc kernel-doc-2.6.32-431.3.1.el6.noarch.rpm bc4e725a973506786d0bafb5b1de14da829aacfa0400f53c18f3b56eee77fc7b kernel-firmware-2.6.32-431.3.1.el6.noarch.rpm 88eac5ea76326695f363a5b1cb14d212834484aa35f44646a16fb1c3486020e0 kernel-headers-2.6.32-431.3.1.el6.i686.rpm a5c38eebb8ae8cdbe3d8876996848921a430833be657159988a125ce86eae717 perf-2.6.32-431.3.1.el6.i686.rpm 5155425da669468c00f0a9f77e1c8e6960cc679e350b6a2766764833956021dc python-perf-2.6.32-431.3.1.el6.i686.rpm x86_64: e15259cfd6dacdcec24a5975df56149a65f6f027b585d27fc35c4520f4353062 kernel-2.6.32-431.3.1.el6.x86_64.rpm daab71e92b367f886065f43920b930f1a5b3348819b81d0790124e5370591125 kernel-abi-whitelists-2.6.32-431.3.1.el6.noarch.rpm 0c3532615ab9cdadcf23843adad81fb19cab36d815611d5695bc80b2a321fd79 kernel-debug-2.6.32-431.3.1.el6.x86_64.rpm d34677a8534e705ce75a985e56730efc0262a1a902d0f7d7af206817f954cc6d kernel-debug-devel-2.6.32-431.3.1.el6.x86_64.rpm 059b6dab8c655a7a796cfc14a8d20e80dae2a7a2a0328f0be22cbe6cbcbe97b0 kernel-devel-2.6.32-431.3.1.el6.x86_64.rpm 39aa17b77d7e2a9b2e87930e3426499f621ffa6197c0fa1f4e35e2bb6196defc kernel-doc-2.6.32-431.3.1.el6.noarch.rpm bc4e725a973506786d0bafb5b1de14da829aacfa0400f53c18f3b56eee77fc7b kernel-firmware-2.6.32-431.3.1.el6.noarch.rpm ea1fde8c16aa8be359ca6a405d87ff32589c7f2ca08f499e5d45e415dbf4bd29 kernel-headers-2.6.32-431.3.1.el6.x86_64.rpm b45abf04cd19268befdb8530be5c454ee2b389f5f88d9a91c36e67892b65ca9b perf-2.6.32-431.3.1.el6.x86_64.rpm 28d7a61f170305f78af67c923ec47b53f79816acdb4816256214f3a31e429f9b python-perf-2.6.32-431.3.1.el6.x86_64.rpm Source: c676b2ec0d3d2222569157dc7ea67e7941b5f9615f0fe92834dbcb3707b8099c kernel-2.6.32-431.3.1.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 107, Issue 2 ***********************************************

1 0

Re: [CentOS] Need help with spec file for Apache-2.4.7
by James B. Byrne 05 Jan '14

05 Jan '14

On Fri, January 3, 2014 20:29, Markus Falb wrote: > > On 03.Jan.2014, at 21:24, James B. Byrne wrote: > >> Now, I added this in the Sources: >> >> Source0: http://www.apache.org/dist/httpd/httpd-%{version}.tar.bz2 >> Source1: http://www.apache.org/dist/httpd/httpd-%{version}-deps.tar.bz2 > > You have to extract Source1 into the BUILDDIR... > You can verify if apr directory is present with > > $ rpmbuild -bp httpd.spec > $ ls ../BUILD/httpd-2.4.7 > >> <--- rpmbuild/SPECS/httpd.spec > > ... > >> %prep >> %setup -q > > after that %setup macro your working directory should be > rpmbuild/BUILD/httpd-2.4.7 > now something like > > %setup -D -q -b 1 > > http://docs.fedoraproject.org/en-US/Fedora_Draft_Documentation/0.1/html-sin… > > -- > Markus > Thank you very much for that reference. This got me past that roadblock. I have resolved many other difficulties but I have run into another problem for which I am unable find any guidance. Now I am getting this error in the build: RPM build errors: File not found: /builddir/build/BUILDROOT/httpd-2.4.7-1.x86_64/usr/lib64/httpd/modules/mod_session_crypto.so Child return code was: 1 EXCEPTION: Command failed. See logs for output. # ['bash', '--login', '-c', 'rpmbuild -bb --target x86_64 --nodeps builddir/build/SPECS/httpd.spec'] I cannot find anything in the spec file that refers to this module by name other than the following: %{_libdir}/httpd/modules/mod_session_crypto.so Am I missing something obvious? Is there an undeclared dependency? Any assistance gratefully accepted. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 2

New company name
by kwazi mavuso 04 Jan '14

04 Jan '14

Good day I'm on the verge of starting a Data and Analytics company. We'll start small with a few systems running CentOS Linux and developing our software using python. However, we still haven't decided on a name for the business. Please go to the following link to help me choose a most appropriate name out of a choice of six: https://docs.google.com/forms/ d/1drhW4vdGTkV24uUi1sAJIJSkNm- E073FSO6s0NFEMMU/viewform It's just one multiple choice question, your help will be greatly appreciated. Kind Regards, Kay

4 3

Elliptic curve on Centos 6.x
by Eero Volotinen 04 Jan '14

04 Jan '14

Hi, Is there nice way to put back EC encryption on Centos? RHEL disabled it due "patent issues", but is third party providing packages to EC enabled packages to centos ? -- Eero

12 20

Need help with spec file for Apache-2.4.7
by James B. Byrne 04 Jan '14

04 Jan '14

I am trying to build an RPM for Apache-2.4.7-1 on Centos-6.5-i86_64. I am using mock. The are three build dependencies that I am trying to resolve. One, mod_socache_dc / distcache, I have simply removed from the spec file. The other two are arp and apr-utils. Since httpd-2.4.7 needs arp >= 1.4 I got the two latter requirements from http://www.apache.org/dist/httpd/httpd-2.4.7-deps.tar.bz2 and extracted them into rpmbuild/SOURCES/httpd-2.4.7/srclib intending to use the --with-included-arp configuration directive per rpmbuild/SOURCES/httpd-2.4.7/INSTALL. I also revised the spec file to remove requirements for the removed dependencies. #BuildRequires: apr-devel >= 1.4.0, apr-util-devel >= 1.4.0 # Replaced by --with-included-apr . . . #Requires: apr-devel, apr-util-devel # Replaced by --with-included-apr and this little 'gotcha' # forcibly prevent use of bundled apr, apr-util, pcre # rm -rf srclib/{apr,apr-util,pcre} removed this from %configure: # --with-apr=%{_prefix} --with-apr-util=%{_prefix} \ and replaced it with this: --with-included-apr \ and removed the reference to mod_socache_dc #%files -n mod_socache_dc #%defattr(-,root,root) #%{_libdir}/httpd/modules/mod_socache_dc.so However, the build dies saying that it cannot find arp/arp-utils: configure: Configuring Apache Portable Runtime library... configure: configure: error: Bundled APR requested but not found at ./srclib/. Download and unpack the corresponding apr and apr-util packages to ./srclib/. RPM build errors: error: Bad exit status from /var/tmp/rpm-tmp.pXoIWK (%build) Bad exit status from /var/tmp/rpm-tmp.pXoIWK (%build) Child return code was: 1 Now, I added this in the Sources: Source0: http://www.apache.org/dist/httpd/httpd-%{version}.tar.bz2 Source1: http://www.apache.org/dist/httpd/httpd-%{version}-deps.tar.bz2 And I have confirmed that the srclib directory contains the files for arp and arp-utils: $ ll rpmbuild/SOURCES/httpd-2.4.7/srclib total 12 drwxr-xr-x. 27 byrnejb byrnejb 4096 Jan 3 14:11 apr drwxr-xr-x. 19 byrnejb byrnejb 4096 Nov 19 12:36 apr-util -rw-r--r--. 1 byrnejb byrnejb 121 Feb 11 2005 Makefile.in As this pretty much exhausts my small stock of knowledge respecting rpmbuild it is evident that I need some help with the spec file to get past this problem. The spec is provided below and I would be grateful if anyone could help me out with this. I am sure others would find the information useful as well. Thanks. <--- rpmbuild/SPECS/httpd.spec %define contentdir /var/www %define suexec_caller apache %define mmn 20120211 Summary: Apache HTTP Server Name: httpd Version: 2.4.7 Release: 1 URL: http://httpd.apache.org/ Vendor: Apache Software Foundation Source0: http://www.apache.org/dist/httpd/httpd-%{version}.tar.bz2 Source1: http://www.apache.org/dist/httpd/httpd-%{version}-deps.tar.bz2 License: Apache License, Version 2.0 Group: System Environment/Daemons BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root BuildRequires: autoconf, perl, pkgconfig, findutils BuildRequires: zlib-devel, libselinux-devel, libuuid-devel #BuildRequires: apr-devel >= 1.4.0, apr-util-devel >= 1.4.0 # using --with-included-apr instead BuildRequires: pcre-devel >= 5.0 Requires: initscripts >= 8.36, /etc/mime.types Obsoletes: httpd-suexec Requires(pre): /usr/sbin/useradd Requires(post): chkconfig Provides: webserver Provides: mod_dav = %{version}-%{release}, httpd-suexec = %{version}-%{release} Provides: httpd-mmn = %{mmn} %description Apache is a powerful, full-featured, efficient, and freely-available Web server. Apache is also the most popular Web server on the Internet. %package devel Group: Development/Libraries Summary: Development tools for the Apache HTTP server. Obsoletes: secureweb-devel, apache-devel #Requires: apr-devel, apr-util-devel # Replaced by --with-included-apr Requires: pkgconfig, libtool Requires: httpd = %{version}-%{release} %description devel The httpd-devel package contains the APXS binary and other files that you need to build Dynamic Shared Objects (DSOs) for the Apache HTTP Server. If you are installing the Apache HTTP server and you want to be able to compile or develop additional modules for Apache, you need to install this package. %package manual Group: Documentation Summary: Documentation for the Apache HTTP server. Requires: httpd = :%{version}-%{release} Obsoletes: secureweb-manual, apache-manual %description manual The httpd-manual package contains the complete manual and reference guide for the Apache HTTP server. The information can also be found at http://httpd.apache.org/docs/. %package tools Group: System Environment/Daemons Summary: Tools for use with the Apache HTTP Server %description tools The httpd-tools package contains tools which can be used with the Apache HTTP Server. %package -n mod_authnz_ldap Group: System Environment/Daemons Summary: LDAP modules for the Apache HTTP server BuildRequires: openldap-devel Requires: httpd = %{version}-%{release}, httpd-mmn = %{mmn} %description -n mod_authnz_ldap The mod_authnz_ldap module for the Apache HTTP server provides authentication and authorization against an LDAP server, while mod_ldap provides an LDAP cache. %package -n mod_lua Group: System Environment/Daemons Summary: Lua language module for the Apache HTTP server BuildRequires: lua-devel Requires: httpd = %{version}-%{release}, httpd-mmn = %{mmn} %description -n mod_lua The mod_lua module for the Apache HTTP server allows the server to be extended with scripts written in the Lua programming language. %package -n mod_proxy_html Group: System Environment/Daemons Summary: Proxy HTML filter modules for the Apache HTTP server Epoch: 1 BuildRequires: libxml2-devel Requires: httpd = 0:%{version}-%{release}, httpd-mmn = %{mmn} %description -n mod_proxy_html The mod_proxy_html module for the Apache HTTP server provides a filter to rewrite HTML links within web content when used within a reverse proxy environment. The mod_xml2enc module provides enhanced charset/internationalisation support for mod_proxy_html. #%package -n mod_socache_dc #Group: System Environment/Daemons #Summary: Distcache shared object cache module for the Apache HTTP server #BuildRequires: distcache-devel #Requires: httpd = %{version}-%{release}, httpd-mmn = %{mmn} # #%description -n mod_socache_dc #The mod_socache_dc module for the Apache HTTP server allows the shared #object cache to use the distcache shared caching mechanism. %package -n mod_ssl Group: System Environment/Daemons Summary: SSL/TLS module for the Apache HTTP server Epoch: 1 BuildRequires: openssl-devel Requires(post): openssl, /bin/cat Requires(pre): httpd Requires: httpd = 0:%{version}-%{release}, httpd-mmn = %{mmn} %description -n mod_ssl The mod_ssl module provides strong cryptography for the Apache Web server via the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols. %prep %setup -q # Safety check: prevent build if defined MMN does not equal upstream MMN. vmmn=`echo MODULE_MAGIC_NUMBER_MAJOR | cpp -include include/ap_mmn.h | sed -n ' /^2/p'` if test "x${vmmn}" != "x%{mmn}"; then : Error: Upstream MMN is now ${vmmn}, packaged MMN is %{mmn}. : Update the mmn macro and rebuild. exit 1 fi %build # forcibly prevent use of bundled apr, apr-util, pcre # rm -rf srclib/{apr,apr-util,pcre} # --with-apr=%{_prefix} --with-apr-util=%{_prefix} \ %configure \ --enable-layout=RPM \ --libdir=%{_libdir} \ --sysconfdir=%{_sysconfdir}/httpd/conf \ --includedir=%{_includedir}/httpd \ --libexecdir=%{_libdir}/httpd/modules \ --datadir=%{contentdir} \ --with-installbuilddir=%{_libdir}/httpd/build \ --enable-mpms-shared=all \ --with-included-apr \ --enable-suexec --with-suexec \ --with-suexec-caller=%{suexec_caller} \ --with-suexec-docroot=%{contentdir} \ --with-suexec-logfile=%{_localstatedir}/log/httpd/suexec.log \ --with-suexec-bin=%{_sbindir}/suexec \ --with-suexec-uidmin=500 --with-suexec-gidmin=100 \ --enable-pie \ --with-pcre \ --enable-mods-shared=all \ --enable-ssl --with-ssl --enable-socache-dc --enable-bucketeer \ --enable-case-filter --enable-case-filter-in \ --disable-imagemap make %{?_smp_mflags} %install rm -rf $RPM_BUILD_ROOT make DESTDIR=$RPM_BUILD_ROOT install # for holding mod_dav lock database mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/lib/dav # create a prototype session cache mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/cache/mod_ssl touch $RPM_BUILD_ROOT%{_localstatedir}/cache/mod_ssl/scache.{dir,pag,sem} # Make the MMN accessible to module packages echo %{mmn} > $RPM_BUILD_ROOT%{_includedir}/httpd/.mmn # Set up /var directories mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/log/httpd mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/cache/httpd/cache-root # symlinks for /etc/httpd ln -s ../..%{_localstatedir}/log/httpd $RPM_BUILD_ROOT/etc/httpd/logs ln -s ../..%{_localstatedir}/run $RPM_BUILD_ROOT/etc/httpd/run ln -s ../..%{_libdir}/httpd/modules $RPM_BUILD_ROOT/etc/httpd/modules mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf.d # install SYSV init stuff mkdir -p $RPM_BUILD_ROOT/etc/rc.d/init.d install -m755 ./build/rpm/httpd.init \ $RPM_BUILD_ROOT/etc/rc.d/init.d/httpd install -m755 ./build/rpm/htcacheclean.init \ $RPM_BUILD_ROOT/etc/rc.d/init.d/htcacheclean # install log rotation stuff mkdir -p $RPM_BUILD_ROOT/etc/logrotate.d install -m644 ./build/rpm/httpd.logrotate \ $RPM_BUILD_ROOT/etc/logrotate.d/httpd # Remove unpackaged files rm -rf $RPM_BUILD_ROOT%{_libdir}/httpd/modules/*.exp \ $RPM_BUILD_ROOT%{contentdir}/cgi-bin/* # Make suexec a+rw so it can be stripped. %%files lists real permissions chmod 755 $RPM_BUILD_ROOT%{_sbindir}/suexec %pre # Add the "apache" user /usr/sbin/useradd -c "Apache" -u 48 \ -s /sbin/nologin -r -d %{contentdir} apache 2> /dev/null || : %post # Register the httpd service /sbin/chkconfig --add httpd /sbin/chkconfig --add htcacheclean %preun if [ $1 = 0 ]; then /sbin/service httpd stop > /dev/null 2>&1 /sbin/service htcacheclean stop > /dev/null 2>&1 /sbin/chkconfig --del httpd /sbin/chkconfig --del htcacheclean fi %post -n mod_ssl umask 077 if [ ! -f %{_sysconfdir}/httpd/conf/server.key ] ; then %{_bindir}/openssl genrsa -rand /proc/apm:/proc/cpuinfo:/proc/dma:/proc/filesystems:/proc/interrupts:/proc/ioports:/proc/pci:/proc/rtc:/proc/uptime 1024 > %{_sysconfdir}/httpd/conf/server.key 2> /dev/null fi FQDN=`hostname` if [ "x${FQDN}" = "x" ]; then FQDN=localhost.localdomain fi if [ ! -f %{_sysconfdir}/httpd/conf/server.crt ] ; then cat << EOF | %{_bindir}/openssl req -new -key %{_sysconfdir}/httpd/conf/server.key -x509 -days 365 -out %{_sysconfdir}/httpd/conf/server.crt 2>/dev/null -- SomeState SomeCity SomeOrganization SomeOrganizationalUnit ${FQDN} root@${FQDN} EOF fi %check # Check the built modules are all PIC if readelf -d $RPM_BUILD_ROOT%{_libdir}/httpd/modules/*.so | grep TEXTREL; then : modules contain non-relocatable code exit 1 fi %clean rm -rf $RPM_BUILD_ROOT %files %defattr(-,root,root) %doc ABOUT_APACHE README CHANGES LICENSE NOTICE %dir %{_sysconfdir}/httpd %{_sysconfdir}/httpd/modules %{_sysconfdir}/httpd/logs %{_sysconfdir}/httpd/run %dir %{_sysconfdir}/httpd/conf %dir %{_sysconfdir}/httpd/conf.d %config(noreplace) %{_sysconfdir}/httpd/conf/httpd.conf %config(noreplace) %{_sysconfdir}/httpd/conf/magic %config(noreplace) %{_sysconfdir}/httpd/conf/mime.types %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-autoindex.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-dav.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-default.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-info.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-languages.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-manual.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-mpm.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-multilang-errordoc.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-userdir.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-vhosts.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/proxy-html.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-autoindex.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-dav.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-default.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-info.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-languages.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-manual.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-mpm.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-multilang-errordoc.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-userdir.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-vhosts.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/proxy-html.conf %config(noreplace) %{_sysconfdir}/httpd/conf/original/httpd.conf %config %{_sysconfdir}/logrotate.d/httpd %config %{_sysconfdir}/rc.d/init.d/httpd %config %{_sysconfdir}/rc.d/init.d/htcacheclean %{_sbindir}/fcgistarter %{_sbindir}/htcacheclean %{_sbindir}/httpd %{_sbindir}/apachectl %attr(4510,root,%{suexec_caller}) %{_sbindir}/suexec %dir %{_libdir}/httpd %dir %{_libdir}/httpd/modules %{_libdir}/httpd/modules/mod_access_compat.so %{_libdir}/httpd/modules/mod_actions.so %{_libdir}/httpd/modules/mod_alias.so %{_libdir}/httpd/modules/mod_allowmethods.so %{_libdir}/httpd/modules/mod_asis.so %{_libdir}/httpd/modules/mod_auth_basic.so %{_libdir}/httpd/modules/mod_auth_digest.so %{_libdir}/httpd/modules/mod_auth_form.so %{_libdir}/httpd/modules/mod_authn_anon.so %{_libdir}/httpd/modules/mod_authn_core.so %{_libdir}/httpd/modules/mod_authn_dbd.so %{_libdir}/httpd/modules/mod_authn_dbm.so %{_libdir}/httpd/modules/mod_authn_file.so %{_libdir}/httpd/modules/mod_authn_socache.so %{_libdir}/httpd/modules/mod_authz_core.so %{_libdir}/httpd/modules/mod_authz_dbd.so %{_libdir}/httpd/modules/mod_authz_dbm.so %{_libdir}/httpd/modules/mod_authz_groupfile.so %{_libdir}/httpd/modules/mod_authz_host.so %{_libdir}/httpd/modules/mod_authz_owner.so %{_libdir}/httpd/modules/mod_authz_user.so %{_libdir}/httpd/modules/mod_autoindex.so %{_libdir}/httpd/modules/mod_bucketeer.so %{_libdir}/httpd/modules/mod_buffer.so %{_libdir}/httpd/modules/mod_cache_disk.so %{_libdir}/httpd/modules/mod_cache_socache.so %{_libdir}/httpd/modules/mod_cache.so %{_libdir}/httpd/modules/mod_case_filter.so %{_libdir}/httpd/modules/mod_case_filter_in.so %{_libdir}/httpd/modules/mod_cgid.so %{_libdir}/httpd/modules/mod_charset_lite.so %{_libdir}/httpd/modules/mod_data.so %{_libdir}/httpd/modules/mod_dav_fs.so %{_libdir}/httpd/modules/mod_dav_lock.so %{_libdir}/httpd/modules/mod_dav.so %{_libdir}/httpd/modules/mod_dbd.so %{_libdir}/httpd/modules/mod_deflate.so %{_libdir}/httpd/modules/mod_dialup.so %{_libdir}/httpd/modules/mod_dir.so %{_libdir}/httpd/modules/mod_dumpio.so %{_libdir}/httpd/modules/mod_echo.so %{_libdir}/httpd/modules/mod_env.so %{_libdir}/httpd/modules/mod_expires.so %{_libdir}/httpd/modules/mod_ext_filter.so %{_libdir}/httpd/modules/mod_file_cache.so %{_libdir}/httpd/modules/mod_filter.so %{_libdir}/httpd/modules/mod_headers.so %{_libdir}/httpd/modules/mod_heartbeat.so %{_libdir}/httpd/modules/mod_heartmonitor.so %{_libdir}/httpd/modules/mod_include.so %{_libdir}/httpd/modules/mod_info.so %{_libdir}/httpd/modules/mod_lbmethod_bybusyness.so %{_libdir}/httpd/modules/mod_lbmethod_byrequests.so %{_libdir}/httpd/modules/mod_lbmethod_bytraffic.so %{_libdir}/httpd/modules/mod_lbmethod_heartbeat.so %{_libdir}/httpd/modules/mod_log_config.so %{_libdir}/httpd/modules/mod_log_debug.so %{_libdir}/httpd/modules/mod_log_forensic.so %{_libdir}/httpd/modules/mod_logio.so %{_libdir}/httpd/modules/mod_macro.so %{_libdir}/httpd/modules/mod_mime_magic.so %{_libdir}/httpd/modules/mod_mime.so %{_libdir}/httpd/modules/mod_mpm_event.so %{_libdir}/httpd/modules/mod_mpm_prefork.so %{_libdir}/httpd/modules/mod_mpm_worker.so %{_libdir}/httpd/modules/mod_negotiation.so %{_libdir}/httpd/modules/mod_proxy_ajp.so %{_libdir}/httpd/modules/mod_proxy_balancer.so %{_libdir}/httpd/modules/mod_proxy_connect.so %{_libdir}/httpd/modules/mod_proxy_express.so %{_libdir}/httpd/modules/mod_proxy_fcgi.so %{_libdir}/httpd/modules/mod_proxy_fdpass.so %{_libdir}/httpd/modules/mod_proxy_ftp.so %{_libdir}/httpd/modules/mod_proxy_http.so %{_libdir}/httpd/modules/mod_proxy_scgi.so %{_libdir}/httpd/modules/mod_proxy_wstunnel.so %{_libdir}/httpd/modules/mod_proxy.so %{_libdir}/httpd/modules/mod_ratelimit.so %{_libdir}/httpd/modules/mod_reflector.so %{_libdir}/httpd/modules/mod_remoteip.so %{_libdir}/httpd/modules/mod_reqtimeout.so %{_libdir}/httpd/modules/mod_request.so %{_libdir}/httpd/modules/mod_rewrite.so %{_libdir}/httpd/modules/mod_sed.so %{_libdir}/httpd/modules/mod_session_cookie.so %{_libdir}/httpd/modules/mod_session_crypto.so %{_libdir}/httpd/modules/mod_session_dbd.so %{_libdir}/httpd/modules/mod_session.so %{_libdir}/httpd/modules/mod_setenvif.so %{_libdir}/httpd/modules/mod_slotmem_plain.so %{_libdir}/httpd/modules/mod_slotmem_shm.so %{_libdir}/httpd/modules/mod_socache_dbm.so %{_libdir}/httpd/modules/mod_socache_memcache.so %{_libdir}/httpd/modules/mod_socache_shmcb.so %{_libdir}/httpd/modules/mod_speling.so %{_libdir}/httpd/modules/mod_status.so %{_libdir}/httpd/modules/mod_substitute.so %{_libdir}/httpd/modules/mod_suexec.so %{_libdir}/httpd/modules/mod_unique_id.so %{_libdir}/httpd/modules/mod_unixd.so %{_libdir}/httpd/modules/mod_userdir.so %{_libdir}/httpd/modules/mod_usertrack.so %{_libdir}/httpd/modules/mod_version.so %{_libdir}/httpd/modules/mod_vhost_alias.so %{_libdir}/httpd/modules/mod_watchdog.so %dir %{contentdir} %dir %{contentdir}/cgi-bin %dir %{contentdir}/html %dir %{contentdir}/icons %dir %{contentdir}/error %dir %{contentdir}/error/include %{contentdir}/icons/* %{contentdir}/error/README %{contentdir}/html/index.html %config(noreplace) %{contentdir}/error/*.var %config(noreplace) %{contentdir}/error/include/*.html %attr(0700,root,root) %dir %{_localstatedir}/log/httpd %attr(0700,apache,apache) %dir %{_localstatedir}/lib/dav %attr(0700,apache,apache) %dir %{_localstatedir}/cache/httpd/cache-root %{_mandir}/man1/* %{_mandir}/man8/suexec* %{_mandir}/man8/apachectl.8* %{_mandir}/man8/httpd.8* %{_mandir}/man8/htcacheclean.8* %{_mandir}/man8/fcgistarter.8* %files manual %defattr(-,root,root) %{contentdir}/manual %{contentdir}/error/README %files tools %defattr(-,root,root) %{_bindir}/ab %{_bindir}/htdbm %{_bindir}/htdigest %{_bindir}/htpasswd %{_bindir}/logresolve %{_bindir}/httxt2dbm %{_sbindir}/rotatelogs %{_mandir}/man1/htdbm.1* %{_mandir}/man1/htdigest.1* %{_mandir}/man1/htpasswd.1* %{_mandir}/man1/httxt2dbm.1* %{_mandir}/man1/ab.1* %{_mandir}/man1/logresolve.1* %{_mandir}/man8/rotatelogs.8* %doc LICENSE NOTICE %files -n mod_authnz_ldap %defattr(-,root,root) %{_libdir}/httpd/modules/mod_ldap.so %{_libdir}/httpd/modules/mod_authnz_ldap.so %files -n mod_lua %defattr(-,root,root) %{_libdir}/httpd/modules/mod_lua.so %files -n mod_proxy_html %defattr(-,root,root) %{_libdir}/httpd/modules/mod_proxy_html.so %{_libdir}/httpd/modules/mod_xml2enc.so #%files -n mod_socache_dc #%defattr(-,root,root) #%{_libdir}/httpd/modules/mod_socache_dc.so %files -n mod_ssl %defattr(-,root,root) %{_libdir}/httpd/modules/mod_ssl.so %config(noreplace) %{_sysconfdir}/httpd/conf/original/extra/httpd-ssl.conf %config(noreplace) %{_sysconfdir}/httpd/conf/extra/httpd-ssl.conf %attr(0700,apache,root) %dir %{_localstatedir}/cache/mod_ssl %attr(0600,apache,root) %ghost %{_localstatedir}/cache/mod_ssl/scache.dir %attr(0600,apache,root) %ghost %{_localstatedir}/cache/mod_ssl/scache.pag %attr(0600,apache,root) %ghost %{_localstatedir}/cache/mod_ssl/scache.sem %files devel %defattr(-,root,root) %{_includedir}/httpd %{_bindir}/apxs %{_sbindir}/checkgid %{_bindir}/dbmmanage %{_sbindir}/envvars* %{_mandir}/man1/dbmmanage.1* %{_mandir}/man1/apxs.1* %dir %{_libdir}/httpd/build %{_libdir}/httpd/build/*.mk %{_libdir}/httpd/build/instdso.sh %{_libdir}/httpd/build/config.nice %{_libdir}/httpd/build/mkdir.sh ---> -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

CentOS-announce Digest, Vol 107, Issue 1
by centos-announce-request＠centos.org 03 Jan '14

03 Jan '14

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2014:0002 CentOS 5 cman Update (Johnny Hughes) 2. CEBA-2014:0003 CentOS 6 ethtool Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 2 Jan 2014 11:54:35 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2014:0002 CentOS 5 cman Update To: centos-announce(a)centos.org Message-ID: <20140102115435.GA14421(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:0002 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-0002.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: dde5d14bade8d2b230b1ec8bab7fce5ac7a975da5f0b790a659e2dc82da92f37 cman-2.0.115-118.el5.3.i386.rpm e4ac83c90ee260258a6a30f6a43ee395279003e02f4194520d128005ffeb1ea6 cman-devel-2.0.115-118.el5.3.i386.rpm x86_64: fc9b0732deb33f4d3b1bc8eff57a95cb84d53617c050f89aa95c1f402b2ce991 cman-2.0.115-118.el5.3.x86_64.rpm e4ac83c90ee260258a6a30f6a43ee395279003e02f4194520d128005ffeb1ea6 cman-devel-2.0.115-118.el5.3.i386.rpm cb3af8aedef8c35cfbd78aba591ad1a88f36025b2ddd400fd15a7711c008c796 cman-devel-2.0.115-118.el5.3.x86_64.rpm Source: 484688b49783f3993702854d1b6fa1d583dbe618fdc2d9d54681546c4a480fff cman-2.0.115-118.el5.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Thu, 2 Jan 2014 12:13:51 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2014:0003 CentOS 6 ethtool Update To: centos-announce(a)centos.org Message-ID: <20140102121351.GA55416(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2014:0003 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-0003.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: f1987173982e5053872b6856a787d63011339765aaa32d443006d803283e20fb ethtool-3.5-1.2.el6_5.i686.rpm x86_64: 24104b292bc87a7969b762d2ec5f2484ac0f2d40b744e5d8064666fe713d09af ethtool-3.5-1.2.el6_5.x86_64.rpm Source: 8a2e8291662222593b8eb02c7c076527b074df73d7e63babc4d51e299182e2e1 ethtool-3.5-1.2.el6_5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 107, Issue 1 ***********************************************

1 0

Re: [CentOS] I want to ask about some Kernel level operations.
by Michael Lampe 03 Jan '14

03 Jan '14

Eliezer wrote: > What would be a clean buildroot for? Well, only God himself did the initial creative work just once -- after that, He let things go, because it was already to complicated even for Him -- or perfect. Anyway, because He had not planned doing it again and reiterate, we now have theology and the subject of theodicy. And remember: even the pope uses 'sudo' when he speaks 'ex cathedra'. So wtf are you asking for?? -Michael

2 1

Re: [CentOS] I want to ask about some Kernel level operations.
by Eliezer Croitoru 02 Jan '14

02 Jan '14

On 03/01/14 01:42, Reindl Harald wrote: > so hire somebody Looking for a recommendation for one.. Please also add the price for learning from him. Thanks, Eliezer

1 0

Re: [CentOS] Elliptic curve on Centos 6.x
by Eero Volotinen 02 Jan '14

02 Jan '14

what about update to 6.5 which brings it already back > why do you not keep your system up-to-date at all? > ECHDE with CentOS 6.5 works fine and is one of the 6.5 features > I already noticed it: https://twitter.com/reaperhulk/status/407384786114596864 So only needed thing is recompile ec enabled packages (like httpd) for centos? -- Eero

1 0

RHEL Load Balancer Add-on vs KeepAlived
by Dimitar Georgievski 02 Jan '14

02 Jan '14

Hello, I've started reviewing HA solution for HAProxy and trying to decide between RHEL HA Add-on and KeeAlived. Just curious if anyone had a chance to use any of these technologies in a production environment? I would love to learn what your experience with these technologies is in terms of management, scaling, troubleshooting, and monitoring. I am leaning towards RHEL Add-on at the moment because a better documentation, simpler architecture, set-up and management. This project also appears to me to be more active compared to KeepAlived, but I might be wrong. Thanks, Dimitar

1 0

clicking on link in Thunderbird fails to open page in Firefox
by ken 02 Jan '14

02 Jan '14

This worked fine for years until I updated firefox and thunderbird recently. Now, however, when I click on a link in an email in thunderbird, rather than open the indicated webpage in firefox, nothing at all happens. network.protocol-handler.app.http in tbird's about:config specifies the executable /usr/lib/thunderbird/open-browser.sh and running the latter at the CLI with a URL as an arg does work as expected: the spec'd URL is loaded into firefox. So I suspect a bug in tbird. Anyone else having this problem?

6 12

nautilus
by aditya mamidwar 31 Dec '13

31 Dec '13

while # sudo nautilus i get this : root@static-16 aditya]# sudo nautilus No protocol specified Could not parse arguments: Cannot open display: [root@static-16 aditya]# please resolve. Also what does the "static-16" denote? -- -Aditya Mamidwar

4 5

Hangs after inactivity
by Arvind Nagarajan 31 Dec '13

31 Dec '13

Hi, My linux machine hangs after some period of inactivity (8+ hrs). Anyone experiencing similar issue. CentOS Release 6.5(Final) Kernel Linux 2.6.32-431.el6_x86_64 GNOME 2.28.2 Processor (0 - 7): Intel(R) Core(TM) i7-4770 CPU @ 3.40 GHz Any pointers will be helpful. Thanks, --Arvind

3 2

Nvidia driver and CentOS 6.5 [was: Re:intrusive chrome ]
by Akemi Yagi 30 Dec '13

30 Dec '13

On Mon, Dec 30, 2013 at 9:17 AM, Johnny Hughes <johnny(a)centos.org> wrote: > On 12/26/2013 12:03 PM, Phil Dobbin wrote: >> It's also happening now with Firefox as well (in fact, Firefox is >> virtually unusable) so I suspect there is something happening with >> either this machine or the OS. > > Are you running the proprietary NVIDIA driver? (either the one from > elrepo OR manually building from the NVIDIA site) > > If so, the recent xorg-x11-server updates require that you rebuild (or > reinstall) the drivers as those drivers replace some xorg files and if > you do not reinstall it can freeze the system or crash X. If you are having issues with the Nvidia driver under CentOS 6.5, the first thing you may want to try is to run: yum remove xorg-x11-glamor (See http://lists.elrepo.org/pipermail/elrepo/2013-November/002058.html if you care about the details. :-) Akemi

1 0

oom situation
by Oguz Yilmaz 30 Dec '13

30 Dec '13

I have continous oom&panic situation unresolved. I am not sure system fills up all the ram (36GB). Why this system triggered this oom situation? Is it about some other memory? highmem? lowmem? stack size? Best Regards, Kernel 3.10.24 Dec 27 09:19:05 2013 kernel: : [277622.359064] squid invoked oom-killer: gfp_mask=0x42d0, order=3, oom_score_adj=0 Dec 27 09:19:05 2013 kernel: : [277622.359069] squid cpuset=/ mems_allowed=0 Dec 27 09:19:05 2013 kernel: : [277622.359074] CPU: 9 PID: 15533 Comm: squid Not tainted 3.10.24-1.lsg #1 Dec 27 09:19:05 2013 kernel: : [277622.359076] Hardware name: Intel Thurley/Greencity, BIOS 080016 10/05/2011 Dec 27 09:19:05 2013 kernel: : [277622.359078] 00000003 e377b280 e03c3c38 c06472d6 e03c3c98 c04d2d96 c0a68f84 e377b580 Dec 27 09:19:05 2013 kernel: : [277622.359089] 000042d0 00000003 00000000 e03c3c64 c04abbda e42bd318 00000000 e03c3cf4 Dec 27 09:19:05 2013 kernel: : [277622.359096] 000042d0 00000001 00000247 00000000 e03c3c94 c04d3d5f 00000001 00000042 Dec 27 09:19:05 2013 kernel: : [277622.359105] Call Trace: Dec 27 09:19:05 2013 kernel: : [277622.359116] [<c06472d6>] dump_stack+0x16/0x20 Dec 27 09:19:05 2013 kernel: : [277622.359121] [<c04d2d96>] dump_header+0x66/0x1c0 Dec 27 09:19:05 2013 kernel: : [277622.359127] [<c04abbda>] ? __delayacct_freepages_end+0x3a/0x40 Dec 27 09:19:05 2013 kernel: : [277622.359131] [<c04d3d5f>] ? zone_watermark_ok+0x2f/0x40 Dec 27 09:19:05 2013 kernel: : [277622.359135] [<c04d2f27>] check_panic_on_oom+0x37/0x60 Dec 27 09:19:05 2013 kernel: : [277622.359138] [<c04d36d2>] out_of_memory+0x92/0x250 Dec 27 09:19:05 2013 kernel: : [277622.359144] [<c04dd1fa>] ? wakeup_kswapd+0xda/0x120 Dec 27 09:19:05 2013 kernel: : [277622.359148] [<c04d6cee>] __alloc_pages_nodemask+0x68e/0x6a0 Dec 27 09:19:05 2013 kernel: : [277622.359155] [<c0801c1e>] sk_page_frag_refill+0x7e/0x120 Dec 27 09:19:05 2013 kernel: : [277622.359160] [<c084b8c7>] tcp_sendmsg+0x387/0xbf0 Dec 27 09:19:05 2013 kernel: : [277622.359166] [<c0469a2f>] ? put_prev_task_fair+0x1f/0x350 Dec 27 09:19:05 2013 kernel: : [277622.359173] [<c0ba7d8b>] ? longrun_init+0x2b/0x30 Dec 27 09:19:05 2013 kernel: : [277622.359177] [<c084b540>] ? tcp_tso_segment+0x380/0x380 Dec 27 09:19:05 2013 kernel: : [277622.359182] [<c086d0da>] inet_sendmsg+0x4a/0xa0 Dec 27 09:19:05 2013 kernel: : [277622.359186] [<c07ff3a6>] sock_aio_write+0x116/0x130 Dec 27 09:19:05 2013 kernel: : [277622.359191] [<c0457acc>] ? hrtimer_try_to_cancel+0x3c/0xb0 Dec 27 09:19:05 2013 kernel: : [277622.359197] [<c050b208>] do_sync_write+0x68/0xa0 Dec 27 09:19:05 2013 kernel: : [277622.359202] [<c050caa0>] vfs_write+0x190/0x1b0 Dec 27 09:19:05 2013 kernel: : [277622.359206] [<c050cbb3>] SyS_write+0x53/0x80 Dec 27 09:19:05 2013 kernel: : [277622.359211] [<c08f72ba>] sysenter_do_call+0x12/0x22 Dec 27 09:19:05 2013 kernel: : [277622.359213] Mem-Info: Dec 27 09:19:05 2013 kernel: : [277622.359215] DMA per-cpu: Dec 27 09:19:05 2013 kernel: : [277622.359218] CPU 0: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359220] CPU 1: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359222] CPU 2: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359224] CPU 3: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359226] CPU 4: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359228] CPU 5: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359230] CPU 6: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359232] CPU 7: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359234] CPU 8: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359236] CPU 9: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359238] CPU 10: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359240] CPU 11: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359242] CPU 12: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359244] CPU 13: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359246] CPU 14: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359248] CPU 15: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359250] CPU 16: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359253] CPU 17: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359255] CPU 18: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359258] CPU 19: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359260] CPU 20: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359262] CPU 21: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359264] CPU 22: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359266] CPU 23: hi: 0, btch: 1 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359268] Normal per-cpu: Dec 27 09:19:05 2013 kernel: : [277622.359270] CPU 0: hi: 186, btch: 31 usd: 34 Dec 27 09:19:05 2013 kernel: : [277622.359272] CPU 1: hi: 186, btch: 31 usd: 72 Dec 27 09:19:05 2013 kernel: : [277622.359274] CPU 2: hi: 186, btch: 31 usd: 40 Dec 27 09:19:05 2013 kernel: : [277622.359276] CPU 3: hi: 186, btch: 31 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359279] CPU 4: hi: 186, btch: 31 usd: 39 Dec 27 09:19:05 2013 kernel: : [277622.359281] CPU 5: hi: 186, btch: 31 usd: 49 Dec 27 09:19:05 2013 kernel: : [277622.359283] CPU 6: hi: 186, btch: 31 usd: 50 Dec 27 09:19:05 2013 kernel: : [277622.359285] CPU 7: hi: 186, btch: 31 usd: 25 Dec 27 09:19:05 2013 kernel: : [277622.359286] CPU 8: hi: 186, btch: 31 usd: 42 Dec 27 09:19:05 2013 kernel: : [277622.359289] CPU 9: hi: 186, btch: 31 usd: 39 Dec 27 09:19:05 2013 kernel: : [277622.359290] CPU 10: hi: 186, btch: 31 usd: 155 Dec 27 09:19:05 2013 kernel: : [277622.359293] CPU 11: hi: 186, btch: 31 usd: 56 Dec 27 09:19:05 2013 kernel: : [277622.359295] CPU 12: hi: 186, btch: 31 usd: 2 Dec 27 09:19:05 2013 kernel: : [277622.359297] CPU 13: hi: 186, btch: 31 usd: 162 Dec 27 09:19:05 2013 kernel: : [277622.359299] CPU 14: hi: 186, btch: 31 usd: 67 Dec 27 09:19:05 2013 kernel: : [277622.359301] CPU 15: hi: 186, btch: 31 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359303] CPU 16: hi: 186, btch: 31 usd: 68 Dec 27 09:19:05 2013 kernel: : [277622.359305] CPU 17: hi: 186, btch: 31 usd: 38 Dec 27 09:19:05 2013 kernel: : [277622.359307] CPU 18: hi: 186, btch: 31 usd: 56 Dec 27 09:19:05 2013 kernel: : [277622.359308] CPU 19: hi: 186, btch: 31 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359310] CPU 20: hi: 186, btch: 31 usd: 54 Dec 27 09:19:05 2013 kernel: : [277622.359312] CPU 21: hi: 186, btch: 31 usd: 35 Dec 27 09:19:05 2013 kernel: : [277622.359314] CPU 22: hi: 186, btch: 31 usd: 2 Dec 27 09:19:05 2013 kernel: : [277622.359316] CPU 23: hi: 186, btch: 31 usd: 60 Dec 27 09:19:05 2013 kernel: : [277622.359318] HighMem per-cpu: Dec 27 09:19:05 2013 kernel: : [277622.359320] CPU 0: hi: 186, btch: 31 usd: 32 Dec 27 09:19:05 2013 kernel: : [277622.359322] CPU 1: hi: 186, btch: 31 usd: 52 Dec 27 09:19:05 2013 kernel: : [277622.359324] CPU 2: hi: 186, btch: 31 usd: 9 Dec 27 09:19:05 2013 kernel: : [277622.359326] CPU 3: hi: 186, btch: 31 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359328] CPU 4: hi: 186, btch: 31 usd: 125 Dec 27 09:19:05 2013 kernel: : [277622.359330] CPU 5: hi: 186, btch: 31 usd: 116 Dec 27 09:19:05 2013 kernel: : [277622.359332] CPU 6: hi: 186, btch: 31 usd: 126 Dec 27 09:19:05 2013 kernel: : [277622.359333] CPU 7: hi: 186, btch: 31 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359336] CPU 8: hi: 186, btch: 31 usd: 79 Dec 27 09:19:05 2013 kernel: : [277622.359338] CPU 9: hi: 186, btch: 31 usd: 34 Dec 27 09:19:05 2013 kernel: : [277622.359340] CPU 10: hi: 186, btch: 31 usd: 111 Dec 27 09:19:05 2013 kernel: : [277622.359341] CPU 11: hi: 186, btch: 31 usd: 144 Dec 27 09:19:05 2013 kernel: : [277622.359343] CPU 12: hi: 186, btch: 31 usd: 15 Dec 27 09:19:05 2013 kernel: : [277622.359345] CPU 13: hi: 186, btch: 31 usd: 166 Dec 27 09:19:05 2013 kernel: : [277622.359347] CPU 14: hi: 186, btch: 31 usd: 185 Dec 27 09:19:05 2013 kernel: : [277622.359349] CPU 15: hi: 186, btch: 31 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359351] CPU 16: hi: 186, btch: 31 usd: 58 Dec 27 09:19:05 2013 kernel: : [277622.359353] CPU 17: hi: 186, btch: 31 usd: 122 Dec 27 09:19:05 2013 kernel: : [277622.359356] CPU 18: hi: 186, btch: 31 usd: 170 Dec 27 09:19:05 2013 kernel: : [277622.359358] CPU 19: hi: 186, btch: 31 usd: 0 Dec 27 09:19:05 2013 kernel: : [277622.359360] CPU 20: hi: 186, btch: 31 usd: 30 Dec 27 09:19:05 2013 kernel: : [277622.359362] CPU 21: hi: 186, btch: 31 usd: 33 Dec 27 09:19:05 2013 kernel: : [277622.359364] CPU 22: hi: 186, btch: 31 usd: 28 Dec 27 09:19:05 2013 kernel: : [277622.359366] CPU 23: hi: 186, btch: 31 usd: 44 Dec 27 09:19:05 2013 kernel: : [277622.359371] active_anon:658515 inactive_anon:54399 isolated_anon:0 Dec 27 09:19:05 2013 kernel: : [277622.359371] active_file:1172176 inactive_file:323606 isolated_file:0 Dec 27 09:19:05 2013 kernel: : [277622.359371] unevictable:0 dirty:0 writeback:0 unstable:0 Dec 27 09:19:05 2013 kernel: : [277622.359371] free:6911872 slab_reclaimable:29430 slab_unreclaimable:34726 Dec 27 09:19:05 2013 kernel: : [277622.359371] mapped:45784 shmem:9850 pagetables:107714 bounce:0 Dec 27 09:19:05 2013 kernel: : [277622.359371] free_cma:0 Dec 27 09:19:05 2013 kernel: : [277622.359382] DMA free:2332kB min:36kB low:44kB high:52kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB present:15968kB managed:6960kB mlocked:0kB dirty:0kB writeback:0kB mapped:0kB shmem:0kB slab_reclaimable:8kB slab_unreclaimable:288kB kernel_stack:0kB pagetables:0kB unstable:0kB bounce:0kB free_cma:0kB writeback_tmp:0kB pages_scanned:0 all_unreclaimable? yes Dec 27 09:19:05 2013 kernel: : [277622.359384] lowmem_reserve[]: 0 573 36539 36539 Dec 27 09:19:05 2013 kernel: : [277622.359393] Normal free:114488kB min:3044kB low:3804kB high:4564kB active_anon:0kB inactive_anon:0kB active_file:252kB inactive_file:256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB present:894968kB managed:587540kB mlocked:0kB dirty:0kB writeback:0kB mapped:4kB shmem:0kB slab_reclaimable:117712kB slab_unreclaimable:138616kB kernel_stack:11976kB pagetables:0kB unstable:0kB bounce:0kB free_cma:0kB writeback_tmp:0kB pages_scanned:982 all_unreclaimable? yes Dec 27 09:19:05 2013 kernel: : [277622.359395] lowmem_reserve[]: 0 0 287725 287725 Dec 27 09:19:05 2013 kernel: : [277622.359404] HighMem free:27530668kB min:512kB low:48272kB high:96036kB active_anon:2634060kB inactive_anon:217596kB active_file:4688452kB inactive_file:1294168kB unevictable:0kB isolated(anon):0kB isolated(file):0kB present:36828872kB managed:36828872kB mlocked:0kB dirty:0kB writeback:0kB mapped:183132kB shmem:39400kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:430856kB unstable:0kB bounce:367564104kB free_cma:0kB writeback_tmp:0kB pages_scanned:0 all_unreclaimable? no Dec 27 09:19:05 2013 kernel: : [277622.359406] lowmem_reserve[]: 0 0 0 0 Dec 27 09:19:05 2013 kernel: : [277622.359410] DMA: 3*4kB (U) 2*8kB (U) 4*16kB (U) 5*32kB (U) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (R) 0*4096kB = 2428kB Dec 27 09:19:05 2013 kernel: : [277622.359422] Normal: 5360*4kB (UEM) 3667*8kB (UEM) 3964*16kB (UEMR) 13*32kB (MR) 0*64kB 1*128kB (R) 1*256kB (R) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 115000kB Dec 27 09:19:05 2013 kernel: : [277622.359435] HighMem: 6672*4kB (M) 74585*8kB (UM) 40828*16kB (UM) 17275*32kB (UM) 3314*64kB (UM) 1126*128kB (UM) 992*256kB (UM) 585*512kB (UM) 225*1024kB (UM) 78*2048kB (UMR) 5957*4096kB (UM) = 27529128kB Dec 27 09:19:05 2013 kernel: : [277622.359452] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB Dec 27 09:19:05 2013 kernel: : [277622.359454] 1505509 total pagecache pages Dec 27 09:19:05 2013 kernel: : [277622.359457] 4 pages in swap cache Dec 27 09:19:05 2013 kernel: : [277622.359459] Swap cache stats: add 13, delete 9, find 0/0 Dec 27 09:19:05 2013 kernel: : [277622.359460] Free swap = 35318812kB Dec 27 09:19:05 2013 kernel: : [277622.359462] Total swap = 35318864kB Dec 27 09:19:05 2013 kernel: : [277622.450529] 9699327 pages RAM Dec 27 09:19:05 2013 kernel: : [277622.450532] 9471490 pages HighMem Dec 27 09:19:05 2013 kernel: : [277622.450533] 342749 pages reserved Dec 27 09:19:05 2013 kernel: : [277622.450534] 2864256 pages shared Dec 27 09:19:05 2013 kernel: : [277622.450535] 1501243 pages non-shared Dec 27 09:19:05 2013 kernel: : [277622.450538] Kernel panic - not syncing: Out of memory: system-wide panic_on_oom is enabled Dec 27 09:19:05 2013 kernel: : [277622.450538] # cat /proc/meminfo MemTotal: 37426312 kB MemFree: 28328992 kB Buffers: 94728 kB Cached: 6216068 kB SwapCached: 0 kB Active: 6958572 kB Inactive: 1815380 kB Active(anon): 2329152 kB Inactive(anon): 170252 kB Active(file): 4629420 kB Inactive(file): 1645128 kB Unevictable: 0 kB Mlocked: 0 kB HighTotal: 36828872 kB HighFree: 28076144 kB LowTotal: 597440 kB LowFree: 252848 kB SwapTotal: 35318864 kB SwapFree: 35318860 kB Dirty: 0 kB Writeback: 8 kB AnonPages: 2463512 kB Mapped: 162296 kB Shmem: 36332 kB Slab: 208676 kB SReclaimable: 120872 kB SUnreclaim: 87804 kB KernelStack: 6320 kB PageTables: 42280 kB NFS_Unstable: 0 kB Bounce: 124 kB WritebackTmp: 0 kB CommitLimit: 54032020 kB Committed_AS: 3191916 kB VmallocTotal: 122880 kB VmallocUsed: 27088 kB VmallocChunk: 29312 kB HugePages_Total: 0 HugePages_Free: 0 HugePages_Rsvd: 0 HugePages_Surp: 0 Hugepagesize: 2048 kB DirectMap4k: 10232 kB DirectMap2M: 901120 kB sysctl: vm.oom_dump_tasks = 0 vm.oom_kill_allocating_task = 1 vm.panic_on_oom = 1 vm.admin_reserve_kbytes = 8192 vm.block_dump = 0 vm.dirty_background_bytes = 0 vm.dirty_background_ratio = 10 vm.dirty_bytes = 0 vm.dirty_expire_centisecs = 3000 vm.dirty_ratio = 20 vm.dirty_writeback_centisecs = 500 vm.drop_caches = 0 vm.highmem_is_dirtyable = 0 vm.hugepages_treat_as_movable = 0 vm.hugetlb_shm_group = 0 vm.laptop_mode = 0 vm.legacy_va_layout = 0 vm.lowmem_reserve_ratio = 256 32 32 vm.max_map_count = 65530 vm.min_free_kbytes = 3084 vm.mmap_min_addr = 4096 vm.nr_hugepages = 0 vm.nr_overcommit_hugepages = 0 vm.nr_pdflush_threads = 0 vm.overcommit_memory = 0 vm.overcommit_ratio = 50 vm.page-cluster = 3 vm.percpu_pagelist_fraction = 0 vm.scan_unevictable_pages = 0 vm.stat_interval = 1 vm.swappiness = 30 vm.user_reserve_kbytes = 131072 vm.vdso_enabled = 1 vm.vfs_cache_pressure = 100 # ulimit -a core file size (blocks, -c) 0 data seg size (kbytes, -d) unlimited scheduling priority (-e) 0 file size (blocks, -f) unlimited pending signals (-i) 292370 max locked memory (kbytes, -l) 64 max memory size (kbytes, -m) unlimited open files (-n) 36728 pipe size (512 bytes, -p) 8 POSIX message queues (bytes, -q) 819200 real-time priority (-r) 0 stack size (kbytes, -s) 8192 cpu time (seconds, -t) unlimited max user processes (-u) 292370 virtual memory (kbytes, -v) unlimited file locks (-x) unlimited

3 2

dd ?
by hadi motamedi 30 Dec '13

30 Dec '13

Dear All I learned to clone my disk as the following : #dd if=/dev/sda of=/dev/sdb As far as I have understood, there is another gui-based utility named clonezilla that can do the same. If I am correct, please let me know how can I install clonezilla on my centos machine to try cloning my disk? Thank you

3 3

Serial Console Config in 6.5
by Camron W. Fox 30 Dec '13

30 Dec '13

Alle, After upgrading from 6.4 to 6.5, our serial console configuration non longer work. We have the following upstart file: [cwfox@hilo ~]$ cat /etc/init/ttyS0.conf # ttyS0 - agetty # # This service maintains a agetty on ttyS0. stop on runlevel [S016] start on runlevel [23] respawn exec agetty -h -L -w /dev/ttyS0 115200 vt100 [cwfox@hilo ~]$ And the following in /etc/securetty: [cwfox@hilo ~]$ sudo tail -2 /etc/securetty ttyS0 ttyS1 [cwfox@hilo ~]$ And finally this is appended to what used to be the kernel (now the module) line in /boot/grub/grub.conf: module /vmlinuz-2.6.32-431.1.2.0.1.el6.x86_64 ro root=/dev/mapper/vg_hilo-lv_root intel_iommu=on rd_NO_LUKS LANG=en_US.UTF-8 rd_LVM_LV=vg_hilo/lv_swap rd_NO_MD SYSFONT=latarcyrheb-sun16 rd_LVM_LV=vg_hilo/lv_root KEYBOARDTYPE=pc KEYTABLE=us rd_NO_DM rhgb quiet crashkernel=auto console=tty0 console=ttyS0,115200 We've tried putting console=tty0 console=ttyS0,115200 in the kernel line, but no joy. We couldn't find anything in the Release Notes about a change in the serial console config. Can anyone point us in the right direction please? Best Regards, Camron -- Camron W. Fox Hilo Office High Performance Computing Group Fujitsu Management Services of America, Inc. E-mail: cwfox(a)us.fujitsu.com

2 1

CentOS-announce Digest, Vol 106, Issue 15
by centos-announce-request＠centos.org 29 Dec '13

29 Dec '13

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2013:X018 Important Xen4CentOS kernel Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Sat, 28 Dec 2013 16:38:45 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:X018 Important Xen4CentOS kernel Security Update To: CentOS-announce(a)centos.org Message-ID: <20131228163845.GA42596(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:X018 (Xen4CentOS) The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) ----------------------------- X86_64 ----------------------------- 2ac8f3b6799eac04c6fc5fe054a68d00bdf914f173087a7802c9bce8b4366e48 e1000e-2.5.4-3.10.25.2.el6.centos.alt.x86_64.rpm ac80d6e58bc9fd234b4baf3f51e35ef01a61ae592b0214cdc92af62565463e43 kernel-3.10.25-11.el6.centos.alt.x86_64.rpm 35cf6745c91e45cf90657baedde114f5e7911a59d8a0764d22f95c236462f3d8 kernel-devel-3.10.25-11.el6.centos.alt.x86_64.rpm 80af2fa6099081cf4ca7500551ab927a2f66fde7dbbfeac5fd9511f5c134b943 kernel-doc-3.10.25-11.el6.centos.alt.noarch.rpm 4b1695185de72f03cb530b29baf5fede27601ddd710b00f62e3978e8273417ac kernel-firmware-3.10.25-11.el6.centos.alt.noarch.rpm be1d1b7b7dd9100859bac1eb4bb6441eb206478aa0a36912dd83b760984ebd1f kernel-headers-3.10.25-11.el6.centos.alt.x86_64.rpm e237b1dbbd40285da0a616679adc6674eb6e6f86855e857b886b66cc402a4fab perf-3.10.25-11.el6.centos.alt.x86_64.rpm ----------------------------- Source: ----------------------------- 6babccc82261cf25110059cdc8e0365e8a2fa085a0009501ed24fee15760 e1000e-2.5.4-3.10.25.2.el6.centos.alt.src.rpm 3197faef868a5637acef74b626723ff75eaa4fc5082a8c79165178418c683c54 kernel-3.10.25-11.el6.centos.alt.src.rpm ===================================================== Kernel Changelog info from the SPEC file: * Sat Dec 27 2013 Johnny Hughes <johnny(a)centos.org> 3.10.25-11 - addresses CVE-2013-4587, CVE-2013-6367, CVE-2013-6368, CVE-2013-6376 e1000e Changelog info from the SPEC file: * Fri Dec 27 2013 Johnny Hughes <johnny(a)centos.org> - 2.5.4-3.10.25.2.el6.centos.alt - build against version 3.10.25 kernel ===================================================== The following kernel changelogs are available from kernel.org since the previous kernel: https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.25 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.24 ===================================================== The following security issues are addressed in this update: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4587 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6367 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6368 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6376 ===================================================== NOTE: You must run /usr/bin/grub-bootxen.sh to update the file /boot/grub/grub.conf (or you must update that file manually) to boot the new kernel on a dom0 xen machine. See for info: http://wiki.centos.org/HowTos/Xen/Xen4QuickStart -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos at irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 106, Issue 15 ************************************************

1 0

Centos 6.5 Unable to start wireless
by antonio 28 Dec '13

28 Dec '13

Made a minimal install, then added Gnome, etc, etc, now I have a full running system but: on the laptop I have a Broadcom BMC4311 that is not seen from system even if driver seems (b43) to be loaded If I connect an USB dongle with RLT8187 (high power dongle) I see also Broadcom BCM 4311 (high power dongle is working on another system):I guess tha USB port power is too low to make dongle work In any case I get the message that wireless is disabled. Any comment? -- Antonio M Skype: amontag52 Linux Fedora F20 (Heisenbug) on Acer 5720 http://lugsaronno.altervista.org http://www.campingmonterosa.com

2 1

CentOS & eclipse
by Steve 27 Dec '13

27 Dec '13

I'm running an up-to-date CentOS 6.5 and I wanted to install eclipse so I went to System->Adminitration->Add/Remove Software and installed eclipse-cdt-1:7.0.1-4.el6 and a bunch of dependent packages. >From the eclipse help menu I see that this is version 3.6.1. According to wikipedia this is a eclipse Helios which was released in June of 2010. My question is why is this so far out of date? My understanding was that CentOS was generally about a year out-of-date. I must confess that I don't know where I got that idea from and it is no doubt, wrong but 3 1/2 years out-of-date seems excessive. Is it just a packaging issue and whoever makes the RPMs hasn't made a new one? If I try to check for updates from inside eclipse, I get various failures for non-existant sites and dependency conflicts. Can anyone explain the situation and maybe shed some light on the history of how we got to this point. >From what I have read so far the solution is to ignore the rpms and install from the eclipse site. Thanks, Steve

7 9

CentOS6 CR repo - depsolving problem
by SilverTip257 27 Dec '13

27 Dec '13

All, Has anyone else had a problem with the CR repo on a 6.4 or 6.5 system? I have a test VM that has the CentOS6 CR repo enabled and it recently (well a week or so) started having dependency problems. It's choking on dependencies for ca-cerfificates. Obviously there aren't any CR packages yet for 6.5 so a zero package count and empty directory on the mirror [0] are legitimate. But should the depsolving problems be the expected behavior? [0] http://mirror.centos.org/centos/6.5/cr/x86_64/Packages/ Up until now, that machine has happily had the CR repo enabled. Thanks for any tips and assistance. ~]# yum deplist ca-certificates Loaded plugins: fastestmirror, security Loading mirror speeds from cached hostfile <...snipped...> Finding dependencies: package: ca-certificates.noarch 2013.1.95-65.1.el6_5 dependency: /bin/bash Unsatisfied dependency dependency: p11-kit-trust >= 0.18.4-2 Unsatisfied dependency dependency: /bin/sh Unsatisfied dependency dependency: p11-kit >= 0.18.4-2 Unsatisfied dependency ~]# yum repolist enabled Loaded plugins: fastestmirror, security Loading mirror speeds from cached hostfile <...snipped...> repo id repo name status base CentOS-6 - Base 0 cr CentOS-6 - CR 0 epel Extra Packages for Enterprise Linux 6 - x86_64 10,171 extras CentOS-6 - Extras 14 updates CentOS-6 - Updates 286 repolist: 10,472 ~]# cat /etc/yum.repos.d/CentOS-CR.repo # CentOS-CR.repo # # The continuous release ( CR ) repository contains rpms from the # next point release of CentOS, which isnt itself released as yet. # # Look at http://wiki.centos.org/AdditionalResources/Repositories/CR # for more details about how this repository works and what users # should expect to see included / excluded [cr] name=CentOS-$releasever - CR baseurl=http://mirror.centos.org/centos/$releasever/cr/$basearch/ gpgcheck=1 enabled=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6 -- ---~~.~~--- Mike // SilverTip257 //

2 2

Raid on Intel R1304BB4DC
by Norman Schklar 27 Dec '13

27 Dec '13

I'm trying to install 6.5 on this server. I can't get past the RAID. CentOS doesn't recognize my 4ea 1tb drives. I don't find a way to bypass the Intel RAID to use software RAID. Suggestions? Norm

1 0

Re: [CentOS] Postfix Autoresponder (CentOS 6.5 x64)
by Alexander Dalloz 26 Dec '13

26 Dec '13

Am 26.12.2013 21:10, schrieb JEWEL AHMMED: >> http://wiki2.dovecot.org/Pigeonhole/Sieve/Examples >> >> -> "Vacation auto-reply" >> >> Follow http://wiki2.dovecot.org/Pigeonhole/ManageSieve/Configuration to >> set it up. >> >> Regards >> >> Alexander > > > Hello Alexander, > I am so sorry, I don't understand about your link. :( > Please be sure this link is correct! The link is correct. Please take some time and reading to understand. See "yum info dovecot-pigeonhole". > Thank you very much. And please keep the discussion on the list. Alexander

1 0

Postfix Autoresponder (CentOS 6.5 x64)
by JEWEL AHMMED 26 Dec '13

26 Dec '13

Can any expert tell me, or give me any tutorial link? How can I Set Up Postfix Autoresponder for my email account? I am new in Linux & Now I am using CentOS 6.5 x64

5 9

New thunderbird and ligntning on CentOS 5...
by John Doe 26 Dec '13

26 Dec '13

Hey, anybody found a way to run the new Thunderbird Lightning calendar addon on CentOS 5...? From my debugging, it seems like the lightning addon is compiled with a newer version of glibc... Failed to load native module at path '.../Linux_x86-gcc3/libcalbasecomps.so': (80004005) /lib/libc.so.6: version `GLIBC_2.7' not found Tried older versions, 2.6 and 2.5b2, but they seem not compatible with TB 24: Failed to load native module at path '.../Linux_x86-gcc3/libcalbasecomps.so': (80004005) /usr/lib/thunderbird/libxul.so: version `xul23.0' not found I guess I need to reinstall my worsktation to CentOS 6 soon... Thx, JD

2 2

Remove/deactivate the session and language buttons in login screen
by cbulist＠gmail.com 25 Dec '13

25 Dec '13

Hi All, I'm using centOS 6.4 with openbox as windows manager. I modified /etc/X11/xinit/Xsession file in orden to set up openbox as default windows manager for all users (I changed gnome-session to openbox-session). Now, I would like to remove or deactivate the the session and language button in login screen. I tried to find these using gconf-editor but without any luck. I could change the banner text message and disabled user list but nothing for the other buttons. Any clue how can I accomplish this? Thanks in advance!

1 1

Have a great Holiday season
by Karanbir Singh 25 Dec '13

25 Dec '13

hi, Here is wishing everyone in the CentOS community a great holiday season, awesome new year and a great 2014. May 2014 bring friendlier + larger communities, stabler distros and a general reduction in systems frustrations for the users! regards from and to everyone, - KB -- Karanbir Singh +44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh GnuPG Key : http://www.karan.org/publickey.asc

10 10

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss