- Discuss - lists.centos.org

Audit logs source of account triggering it.
by Gregory Machin 10 Apr '13

10 Apr '13

Hi. The auditd logs are full of lines referencing 28756E6B6E6F776E207573657229 , but I can't identify this account type=USER_LOGIN msg=audit(1364926580.306:249814): user pid=22565 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct=28756E6B6E6F776E207573657229 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=ssh res=failed' What would typically cause this ? There are no other references in any of the other logs to 28756E6B6E6F776E207573657229 and its to long for our typical UID / GID . Thanks G

2 1

How to determine 64 vs 32 bit processor
by Robert Moskowitz 10 Apr '13

10 Apr '13

I have been tied up with other work and Holidays. Now back to some server work that is long overdue. I lost an old server yesterday so it is crunch time. I believe my new platform is suppose to be an x86_64. The order form says 64 bit. I booted Centos 6.3 i386 liveCD to check the system out before an install. uname -i reports i386 dmidecode -t processor reports Characteristics of 64 bit capable. The processor is an AMD duo-core Opteron. I thought that in a prior thread I found that booting with an i386 live CD and using uname would confirm the processor type. It seems not. I am going to go with the various evidence and start a x86_64 install, but what is with uname? thanks

5 5

How to patch a CentOS6 kernel
by Michael Mol 10 Apr '13

10 Apr '13

So I have a couple patches supplied to me by upstream in relation to a kernel bug[1], but I can't figure out how to patch the kernel. The CentOS wiki page discusses retrieving the kernel source[2], but doesn't describe how to apply patches. Instructions I've found apply to CentOS5, and RH has changed their kernel packaging since then. I've been banging my head on this off and on for quite a while, now. I've mucked with Gentoo and Debian packaging, but kernel RPMs are a new one for me... [1] http://bugs.centos.org/view.php?id=6343 [2] http://wiki.centos.org/HowTos/I_need_the_Kernel_Source

3 6

Re: [CentOS] How to determine 64 vs 32 bit processor
by Robert Moskowitz 10 Apr '13

10 Apr '13

On 04/10/2013 10:04 AM, Reindl Harald wrote: > > Am 10.04.2013 15:58, schrieb Robert Moskowitz: >> I believe my new platform is suppose to be an x86_64. The order form >> says 64 bit. >> >> I booted Centos 6.3 i386 liveCD to check the system out before an install. >> >> uname -i >> >> reports i386 > no wonder, you boot a i386 kernel OK. I can 'llive' with this. Just somewhere in some forgotten past I picked up that uname would still recognize that it was on a 64bit system even with the i386 kernel. > simply boot a x86_64 liveCD > hence i have not seen x86 systems since years > > Simply type "grep flags /proc/cpuinfo" and if you see lm > you have a 64 bit CPU based system thanks > > [root@rh:~]$ grep flags /proc/cpuinfo | grep lm > flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr > sse sse2 ss ht tm pbe syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc > aperfmperf eagerfpu pni pclmulqdq dtes64 monitor ds_cpl vmx smx est tm2 ssse3 cx16 xtpr pdcm pcid sse4_1 sse4_2 > x2apic popcnt tsc_deadline_timer aes xsave avx lahf_lm ida arat epb xsaveopt pln pts dtherm tpr_shadow vnmi > flexpriority ept vpid >

1 0

Re: [CentOS] floppy drives
by James B. Byrne 10 Apr '13

10 Apr '13

On Tue, April 9, 2013 13:46, m.roth(a)5-cent.us wrote: > Fred Smith wrote: >> On Tue, Apr 09, 2013 at 12:21:10PM -0400, m.roth(a)5-cent.us wrote: >>> Frank Cox wrote: >>> > On Tue, 9 Apr 2013 10:19:33 -0400 >>> > m.roth(a)5-cent.us wrote: >>> > >>> >> Hmmm... didn't see it mounted, but I'll try more tonight. Last >>> night >>> >> included a) playing with system, and b) finishing up our federal >>> >> taxes.... > <snip> >>> I also can't seem to find the USB 3.5" drive I borrowed - lsusb >>> sees it >>> (at least since the last reboot), but trying to find it to mount it >>> is >>> something I'm still digging at, and I doubt mtools can find it. >> >> As far as I remember (I'm not as young as I used to be, and it's >> been a >> while), the 3.5" USB floppy drive here would recognize a (formatted) >> floppy when inserted and mount it automatically, on Centos 5.x. >> (assuming it contained a recognizable filesystem...) > > Even if there's nothing about floppies in /etc/fstab? Or is that > something I need to configure for autofs? >> Just to obtain some empirical data I have connected a usb 3.5 FDD unit to my CentOS-6.4 workstation and inserted a previously unused 3.5 HDFD. The Nautilus system automatically opened a window on my desktop and I was able to copy and removed files from the diskette without any difficulty. A peek into /media shows this: # tree /media /media └── disk 1 directory, 0 files While /etc/fstab shows me nothing that obviously relates to the fdd: # cat /etc/fstab # # /etc/fstab # Created by anaconda on Mon Sep 24 12:57:28 2012 # # Accessible filesystems, by reference, are maintained under '/dev/disk' # See man pages fstab(5), findfs(8), mount(8) and/or blkid(8) for more info # /dev/mapper/vg_vhost04-lv_root / ext4 defaults 1 1 UUID=a9a7cc59-bd0c-4362-9ab6-f721e25df2f8 /boot ext4 defaults 1 2 /dev/mapper/vg_vhost04-lv_home /home ext4 defaults 1 2 /dev/mapper/vg_vhost04-lv_tmp /tmp ext4 defaults 1 2 /dev/mapper/vg_vhost04-lv_log /var/log ext4 defaults 1 2 /dev/mapper/vg_vhost04-lv_spool /var/spool ext4 defaults 1 2 /dev/mapper/vg_vhost04-lv_swap swap swap defaults 0 0 tmpfs /dev/shm tmpfs defaults 0 0 devpts /dev/pts devpts gid=5,mode=620 0 0 sysfs /sys sysfs defaults 0 0 proc /proc proc defaults 0 0 /dev/vg_vhost04/lv_centos_repos /var/data/centos ext4 defaults 00 /dev/vg_vhost04/lv_home_byrnejb /home/byrnejb ext4 defaults 0 0 Mount on the other hand shows this: /dev/sdb on /media/disk type vfat (rw,nosuid,nodev,uhelper=udisks,uid=500,gid=500,shortname=mixed,dmask=0077,utf8=1,flush) And udisks show this: howing information for /org/freedesktop/UDisks/devices/sdb native-path: /sys/devices/pci0000:00/0000:00:1a.0/usb3/3-1/3-1:1.0/host10/target10:0:0/10:0:0:0/block/sdb device: 8:16 device-file: /dev/sdb presentation: /dev/sdb by-id: /dev/disk/by-id/usb-Y-E_DATA_USB_Floppy_Drive by-path: /dev/disk/by-path/pci-0000:00:1a.0-usb-0:1:1.0-scsi-0:0:0:0 detected at: Wed 10 Apr 2013 09:08:55 EDT system internal: 0 removable: 1 has media: 1 (detected at Wed 10 Apr 2013 09:09:07 EDT) detects change: 1 detection by polling: 1 detection inhibitable: 1 detection inhibited: 0 is read only: 0 is mounted: 1 mount paths: /media/disk mounted by uid: 500 presentation hide: 0 presentation nopolicy: 0 presentation name: presentation icon: size: 1474560 block size: 512 job underway: no usage: filesystem type: vfat version: FAT12 uuid: label: drive: vendor: Y-E DATA model: USB Floppy Drive revision: 0601 serial: WWN: detachable: 1 can spindown: 0 rotational media: Yes, unknown rate write-cache: unknown ejectable: 0 adapter: Unknown ports: similar devices: media: floppy compat: floppy interface: usb if speed: 12000000 bits/s ATA SMART: not available -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

Re: [CentOS] fail2ban problem
by Banyan He 10 Apr '13

10 Apr '13

This doesn't look enough for tracking. How about strace? Did you find anything interesting? ------------ Banyan He Blog: http://www.rootong.com Email: banyan(a)rootong.com On 4/10/2013 6:52 PM, Nikos Gatsis - Qbit wrote: > debug: > > fail2ban.server : INFO Changed logging target to > /var/log/fail2ban.log for Fail2ban v0.8.7 > fail2ban.comm : DEBUG Command: ['add', 'sasl-iptables', 'polling'] > fail2ban.jail : INFO Creating new jail 'sasl-iptables' > fail2ban.comm : WARNING Invalid command: ['add', 'sasl-iptables', > 'polling'] > > fail2ba-server starts, but dont add rures in iptables. > > Thank you > > > On 10/4/2013 1:31 μμ, Banyan He wrote: >> Try strace to follow all fork/exec to see which command is invalid. >> Or, debug log? >> >> ------------ >> Banyan He >> Blog: http://www.rootong.com >> Email: banyan(a)rootong.com >> >> On 4/10/2013 6:06 PM, Nikos Gatsis - Qbit wrote: >>> Hello list >>> I'm trying to setup fail2ban specially sasl action but I'm facing >>> problems. >>> I have centos-release-5-9.el5.centos.1 >>> and >>> fail2ban-0.8.7.1-1.el5.rf >>> installed >>> with selinux disabled >>> >>> The errors I get are: >>> INFO Creating new jail 'sasl-iptables' >>> fail2ban.comm : WARNING Invalid command: ['add', 'sasl-iptables', >>> 'polling'] >>> >>> I tried gemin against polling but I get the same error. >>> The strange thing is that if I enable ssh action, starts with no >>> problem. >>> So it appears to be problem with sasl action, witch is: >>> >>> [sasl-iptables] >>> >>> enabled = true >>> filter = sasl >>> backend = polling >>> action = iptables-multiport[name=sasl, >>> port="imap,imaps,pop3,pop3s,smtp", protocol=tcp] >>> sendmail-whois[name=sasl, dest=my@email] >>> logpath = /var/log/maillog >>> >>> The same setup I have in several mailserver (fedora and centos 6 >>> distro) >>> and all work fine. >>> >>> Does someone faced the same problem? >>> >>> Thak you in advance. >>> >> >> > > -- > Untitled Document > ------------------------------------------------------------------------ > *Γατσής Νίκος - Gatsis Nikos* > Web developer > tel.: 2108256721 - 2108256722 > fax: 2108256712 > email: ngatsis(a)qbit.gr > http://www.qbit.gr

2 4

fail2ban problem
by Nikos Gatsis - Qbit 10 Apr '13

10 Apr '13

Hello list I'm trying to setup fail2ban specially sasl action but I'm facing problems. I have centos-release-5-9.el5.centos.1 and fail2ban-0.8.7.1-1.el5.rf installed with selinux disabled The errors I get are: INFO Creating new jail 'sasl-iptables' fail2ban.comm : WARNING Invalid command: ['add', 'sasl-iptables', 'polling'] I tried gemin against polling but I get the same error. The strange thing is that if I enable ssh action, starts with no problem. So it appears to be problem with sasl action, witch is: [sasl-iptables] enabled = true filter = sasl backend = polling action = iptables-multiport[name=sasl, port="imap,imaps,pop3,pop3s,smtp", protocol=tcp] sendmail-whois[name=sasl, dest=my@email] logpath = /var/log/maillog The same setup I have in several mailserver (fedora and centos 6 distro) and all work fine. Does someone faced the same problem? Thak you in advance. -- Untitled Document ------------------------------------------------------------------------ *Γατσής Νίκος - Gatsis Nikos* Web developer tel.: 2108256721 - 2108256722 fax: 2108256712 email: ngatsis(a)qbit.gr http://www.qbit.gr

3 2

CentOS-announce Digest, Vol 98, Issue 4
by centos-announce-request＠centos.org 10 Apr '13

10 Apr '13

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2013:0725 CentOS 6 libvirt Update (Johnny Hughes) 2. CESA-2013:0727 Important CentOS 5 kvm Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 9 Apr 2013 15:19:51 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2013:0725 CentOS 6 libvirt Update To: centos-announce(a)centos.org Message-ID: <20130409151951.GA4858(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2013:0725 Upstream details at : https://rhn.redhat.com/errata/RHBA-2013-0725.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 18f6ec9e590d5048dd376c43b5285964c086859cb98c35e3fb9caf2e30fdfc27 libvirt-0.10.2-18.el6_4.3.i686.rpm aef29519bb5fd7533c8be4b2ad86c2128033b7913c60247d966c957da8a99d9c libvirt-client-0.10.2-18.el6_4.3.i686.rpm 5b7ac70b3e2b2631d8cdb2c1504c509874767c16cba666b8a2e5633b5c6c07a8 libvirt-devel-0.10.2-18.el6_4.3.i686.rpm cce875725d525c1610f5cbc5d1407ee713467a1b12639ed70969e83216ca9493 libvirt-python-0.10.2-18.el6_4.3.i686.rpm x86_64: 0e2499603eb3bbbf48788d01f45395fc36ee765b276e64e3fcf342e59c58e27d libvirt-0.10.2-18.el6_4.3.x86_64.rpm aef29519bb5fd7533c8be4b2ad86c2128033b7913c60247d966c957da8a99d9c libvirt-client-0.10.2-18.el6_4.3.i686.rpm 696686053482a427159a354a0dd3594723d4b9f99260c881eec2c09d9c24fe87 libvirt-client-0.10.2-18.el6_4.3.x86_64.rpm 5b7ac70b3e2b2631d8cdb2c1504c509874767c16cba666b8a2e5633b5c6c07a8 libvirt-devel-0.10.2-18.el6_4.3.i686.rpm 9ccca92af3bda8614cf224b1c7f31de8e168fbdbdc106382a88e351ae559635c libvirt-devel-0.10.2-18.el6_4.3.x86_64.rpm ff6369839e5db29fb3ff37f7ee99d09081c0c74229c2b1c911789e7c24b57981 libvirt-lock-sanlock-0.10.2-18.el6_4.3.x86_64.rpm c9f7884a8da76dde41a5783c28951e4355db3c555cacfa830ed1e20e257da43e libvirt-python-0.10.2-18.el6_4.3.x86_64.rpm Source: a8ba5bc49606ecacdf1c0387b52bed0fb4e88f5de0472702db2a1141beebb71c libvirt-0.10.2-18.el6_4.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 10 Apr 2013 03:55:37 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0727 Important CentOS 5 kvm Update To: centos-announce(a)centos.org Message-ID: <20130410035537.GA10965(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0727 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0727.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: e8f6713cbf13b9a0e2a1a1ac747a3a112485897362662a12591b87956dc8d1b9 kmod-kvm-83-262.el5.centos.3.x86_64.rpm 33cfd1707f08f06f6f382ad193e2ebba5f0fee539b11cb19ba41512d468a0b60 kmod-kvm-debug-83-262.el5.centos.3.x86_64.rpm 7fbd4547ebbe617cae2ea9efbf58250d7deb9eb026f2ead79b310713978aa809 kvm-83-262.el5.centos.3.x86_64.rpm 49734f3733e6c696dbe36142081ecbc70dc768448f89bd4ae9f397381fdf1107 kvm-qemu-img-83-262.el5.centos.3.x86_64.rpm fd7b303cb46b00b3c147bbf2d0f127e1a415a042191036dc2b149ad5210a85a7 kvm-tools-83-262.el5.centos.3.x86_64.rpm Source: 8fdd7a43fee26f09c2bd63b31b4a2683d1cc9473420a11935c3a879ec5458fe8 kvm-83-262.el5.centos.3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 98, Issue 4 **********************************************

1 0

Greetings
by santosh venkataswamy 10 Apr '13

10 Apr '13

Hi, I am new to this mailing list. I am an experienced Linux Corporate Trainer and Consultant. Look forward to share my views and technical info with you and participate in technical discussions,contribute and benefit from this mailing list. With Regards and good wishes. V.SANTOSH

2 1

fsck - anyway to increase verbosity to show point in process
by Max Pyziur 10 Apr '13

10 Apr '13

Greetings, I'm running CentOS 5.x on one ancient but reasonably reliable machine: root@leeloo ~> uname -a Linux leeloo 2.6.18-308.24.1.el5 #1 SMP Tue Dec 4 17:42:30 EST 2012 i686 i686 i386 GNU/Linux root@leeloo ~> cat /proc/cpu cat: /proc/cpu: No such file or directory root@leeloo ~> cat /proc/cpuinfo processor : 0 vendor_id : GenuineIntel cpu family : 6 model : 11 model name : Intel(R) Pentium(R) III CPU family 1400MHz .. I am running some fsck's on some of the larger drives (750GB and 2TB) that are used for backups. There is a verbosity flag (-V); but because of the size of the drives along with slowness of the processor, the process is taking a long time. And there is no indication how much of the process has been completed (nothing like a %tage indicator), at least the way that I am running it. Is this expected, or is there some way of amping up the feedback? Much thanks, Max Pyziur pyz(a)brama.com

3 3

Re: [CentOS] web collaboration packages.
by Johan Vermeulen 09 Apr '13

09 Apr '13

Zarafa? I think comes with epel and works better with Android than Zimbra. verzonden m.b.v Android vandaar de beknoptheid. Александр Кириллов <nevis2us(a)infoline.su>schreef: >>> Web mail is particularly important for my wife so she can check >>> e-mail when >>> she is at work. > >roundcubemail? > >_______________________________________________ >CentOS mailing list >CentOS(a)centos.org >http://lists.centos.org/mailman/listinfo/centos

1 0

CentOS-announce Digest, Vol 98, Issue 3
by centos-announce-request＠centos.org 09 Apr '13

09 Apr '13

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2013:0714 Moderate CentOS 6 stunnel Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 8 Apr 2013 20:25:12 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0714 Moderate CentOS 6 stunnel Update To: centos-announce(a)centos.org Message-ID: <20130408202512.GA13982(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0714 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0714.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 134f6e3d27d4b52f58a537f6949978df01aaf92ff1bd354647d0d617bff4985f stunnel-4.29-3.el6_4.i686.rpm x86_64: 091e1b3670042f45f0ff0a7f5da18ee1987b5f9ae803ce92d089778c79f95c45 stunnel-4.29-3.el6_4.x86_64.rpm Source: 2670221d4b06c1c9fba776235560512a0f1ad21f55ed39cb68e255bbd5b56602 stunnel-4.29-3.el6_4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 98, Issue 3 **********************************************

1 0

5.9 update error messages
by m.roth＠5-cent.us 08 Apr '13

08 Apr '13

Just updated one of our servers, and see a bunch of udevd-event[8735]: run_program: ressize 256 too short Along with Apr 8 14:57:48 <servername> kernel: Breaking affinity for irq 209 Apr 8 14:57:48 <servername> kernel: CPU 8 is now offline Apr 8 14:57:49 <servername> kernel: CPU 8 offline: Remove Rx thread Apr 8 14:57:49 <servername> kernel: CPU 9 is now offline Apr 8 14:57:49 <servername> kernel: CPU 9 offline: Remove Rx thread Apr 8 14:57:49 <servername> kernel: CPU 10 is now offline Apr 8 14:57:49 <servername> kernel: CPU a offline: Remove Rx thread Apr 8 14:57:49 <servername> kdump: kexec: failed to unload kdump kernel Apr 8 14:57:49 <servername> kdump: failed to stop Apr 8 14:57:49 <servername> kernel: CPU 11 is now offline Apr 8 14:57:49 <servername> kernel: CPU b offline: Remove Rx thread Apr 8 14:57:49 <servername> kernel: CPU 12 is now offline Apr 8 14:57:49 <servername> kernel: CPU c offline: Remove Rx thread Apr 8 14:57:49 <servername> kernel: CPU 13 is now offline Apr 8 14:57:49 <servername> kernel: CPU d offline: Remove Rx thread Apr 8 14:57:49 <servername> kernel: Breaking affinity for irq 209 Apr 8 14:57:49 <servername> kernel: CPU 14 is now offline Apr 8 14:57:49 <servername> kernel: CPU e offline: Remove Rx thread Apr 8 14:57:49 <servername> kdump: kexec: failed to unload kdump kernel This is a Sun X4640. I see, in a quick google, some posts about this from '08 or '09, with no resolution. Any ideas out there? mark

1 0

Hostname question
by Jason T. Slack-Moehrle 08 Apr '13

08 Apr '13

CentOS 6.4, clean install. Zimbra 8.0.3 I am behind a PfSense box using a virtual IP. So the IP of the box is 192.168.1.27 I entered this in /etc/hosts: 127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6 192.168.1.27 mail mail.meowbox.me meowbox.me but `hostname -f` says: $ hostname -f hostname: Unknown host Do I need to put the public IP for where this record resolves? Since PFSense is forwarding traffic from it to the virtual IP? Jason

4 8

Re: [CentOS] [Dovecot] Configuring dovecot to use tcp wrappers
by Max Pyziur 08 Apr '13

08 Apr '13

On Mon, 8 Apr 2013, Timo Sirainen wrote: > On 8.4.2013, at 1.31, "Max Pyziur" <pyz(a)brama.com> wrote: > >> However, once I make the changes to the configuration files, I get the >> following error when restarting dovecot: >> root@brama /etc/dovecot/conf.d> service dovecot restart >> Stopping Dovecot Imap: [ OK ] >> Starting Dovecot Imap: doveconf: Fatal: Error in configuration file >> /etc/dovecot/dovecot.conf: service(tcpwrap): executable is empty >> [FAILED] > > You most likely didn't compile Dovecot with tcpwrap support. See if you have /usr/lib*/dovecot/tcpwrap binary? Any idea, then, as to where those CentOS dovecot src.rpms are kept? Max Pyziur pyz(a)brama.com

1 1

nfs timeout
by Rita 07 Apr '13

07 Apr '13

hi, I use automounter to mount to many hosts /net/<hostname>/dir When the hostname is unavaliable it seems NFS gets stuck. I would like to set a NFS timeout (say 60 secs). If not available then error. I need to use hardmount but is there such a thing as NFS client timeout? -- --- Get your facts first, then you can distort them as you please.--

3 2

Re: [CentOS] [CentOS-virt] qemu-kvm high cpu usage with idle windows guest
by Micky 07 Apr '13

07 Apr '13

On Sun, Apr 7, 2013 at 8:32 PM, Zoltan Frombach <zoltan(a)frombach.com> wrote: > Check out these threads they may help you solve your issue with Windows VMs: Well I did. Upstream provides rpms till version 0.12.1.x. Even the RHEV srpm (the one I am using) has the same version. And I don't want to compile both libvirt and qemu-kvm from source since it is the production machine. > http://forum.proxmox.com/threads/5770-Windows-guest-high-context-switch-rat… > > http://serverfault.com/questions/146922/why-is-idle-windows-vm-using-so-muc… > > On 4/7/2013 5:18 PM, Banyan He wrote: >> Maybe you can print out what it is doing, then try to figure out if they >> are doing good. My linux works good, never tried windows. >> Did. Nothing abnormal. A quick perf shows this: # ........ ........ .................. .............................................. # 4.96% qemu-kvm [kvm] [k] kvm_arch_vcpu_ioctl_run 4.83% qemu-kvm [kvm_intel] [k] vmx_vcpu_run 4.47% qemu-kvm [kernel.kallsyms] [k] find_busiest_group 3.23% qemu-kvm [kernel.kallsyms] [k] _spin_lock 3.10% qemu-kvm [kernel.kallsyms] [k] native_write_msr_safe 1.24% qemu-kvm [kernel.kallsyms] [k] _spin_lock_irq 1.22% qemu-kvm [kvm] [k] paging64_walk_addr 1.21% qemu-kvm [kvm] [k] x86_decode_insn 1.21% qemu-kvm [kvm_intel] [k] vmcs_writel >> Banyan He

1 0

qemu-kvm high cpu usage with idle windows guest
by Micky 07 Apr '13

07 Apr '13

Windows 2k8 R2 guest with updated virtio drivers is idle inside but on the host qemu-kvm process uses 7-15% cpu. Things that have been tried without any significant success - removed tablet device - manually set cpu topology for cores per socket Is it just me or the qemu-kvm has little tolerance with windows?

1 0

Does CentOS support dual graphics cards with 2 monitors each?
by Alfred von Campe 07 Apr '13

07 Apr '13

I have a user who wants to have 4 monitors attached to his CentOS 6.4 system. I know that you can't use both on-board video and a PCI video card at the same time, but what about two PCI video cards? The system seems to recognize them as shown by the lspci -v output below, but I can't get Xorg to use the second card. Has anyone done this? If so, what is the trick to get it to work? Alfred 00:00.0 Host bridge: Intel Corporation 2nd Generation Core Processor Family DRAM Controller (rev 09) Subsystem: Dell Device 04ad Flags: bus master, fast devsel, latency 0 Capabilities: [e0] Vendor Specific Information <?> 00:01.0 PCI bridge: Intel Corporation Xeon E3-1200/2nd Generation Core Processor Family PCI Express Root Port (rev 09) (prog-if 00 [Normal decode]) Flags: bus master, fast devsel, latency 0 Bus: primary=00, secondary=01, subordinate=01, sec-latency=0 I/O behind bridge: 00004000-00004fff Memory behind bridge: ed000000-ee0fffff Prefetchable memory behind bridge: 00000000e0000000-00000000e9ffffff Capabilities: [88] Subsystem: Dell Device 04ad Capabilities: [80] Power Management version 3 Capabilities: [90] MSI: Enable+ Count=1/1 Maskable- 64bit- Capabilities: [a0] Express Root Port (Slot+), MSI 00 Capabilities: [100] Virtual Channel <?> Capabilities: [140] Root Complex Link <?> Kernel driver in use: pcieport 00:16.0 Communication controller: Intel Corporation 6 Series/C200 Series Chipset Family MEI Controller #1 (rev 04) Subsystem: Dell Device 04ad Flags: bus master, fast devsel, latency 0, IRQ 11 Memory at eebb0000 (64-bit, non-prefetchable) [size=16] Capabilities: [50] Power Management version 3 Capabilities: [8c] MSI: Enable- Count=1/1 Maskable- 64bit+ 00:19.0 Ethernet controller: Intel Corporation 82579LM Gigabit Network Connection (rev 04) Subsystem: Dell Device 047e Flags: bus master, fast devsel, latency 0, IRQ 32 Memory at eeb00000 (32-bit, non-prefetchable) [size=128K] Memory at eeb80000 (32-bit, non-prefetchable) [size=4K] I/O ports at 5040 [size=32] Capabilities: [c8] Power Management version 2 Capabilities: [d0] MSI: Enable+ Count=1/1 Maskable- 64bit+ Capabilities: [e0] PCI Advanced Features Kernel driver in use: e1000e Kernel modules: e1000e 00:1a.0 USB controller: Intel Corporation 6 Series/C200 Series Chipset Family USB Enhanced Host Controller #2 (rev 04) (prog-if 20 [EHCI]) Subsystem: Dell Device 04ad Flags: bus master, medium devsel, latency 0, IRQ 16 Memory at eeb70000 (32-bit, non-prefetchable) [size=1K] Capabilities: [50] Power Management version 2 Capabilities: [58] Debug port: BAR=1 offset=00a0 Capabilities: [98] PCI Advanced Features Kernel driver in use: ehci_hcd 00:1b.0 Audio device: Intel Corporation 6 Series/C200 Series Chipset Family High Definition Audio Controller (rev 04) Subsystem: Dell Device 04ad Flags: bus master, fast devsel, latency 0, IRQ 31 Memory at eeb60000 (64-bit, non-prefetchable) [size=16K] Capabilities: [50] Power Management version 2 Capabilities: [60] MSI: Enable+ Count=1/1 Maskable- 64bit+ Capabilities: [70] Express Root Complex Integrated Endpoint, MSI 00 Capabilities: [100] Virtual Channel <?> Capabilities: [130] Root Complex Link <?> Kernel driver in use: snd_hda_intel Kernel modules: snd-hda-intel 00:1c.0 PCI bridge: Intel Corporation 6 Series/C200 Series Chipset Family PCI Express Root Port 1 (rev b4) (prog-if 00 [Normal decode]) Flags: bus master, fast devsel, latency 0 Bus: primary=00, secondary=02, subordinate=02, sec-latency=0 Capabilities: [40] Express Root Port (Slot+), MSI 00 Capabilities: [80] MSI: Enable- Count=1/1 Maskable- 64bit- Capabilities: [90] Subsystem: Dell Device 04ad Capabilities: [a0] Power Management version 2 00:1c.2 PCI bridge: Intel Corporation 6 Series/C200 Series Chipset Family PCI Express Root Port 3 (rev b4) (prog-if 00 [Normal decode]) Flags: bus master, fast devsel, latency 0 Bus: primary=00, secondary=03, subordinate=03, sec-latency=0 I/O behind bridge: 00003000-00003fff Memory behind bridge: ee100000-eeafffff Prefetchable memory behind bridge: 00000000ea100000-00000000eaafffff Capabilities: [40] Express Root Port (Slot+), MSI 00 Capabilities: [80] MSI: Enable- Count=1/1 Maskable- 64bit- Capabilities: [90] Subsystem: Dell Device 04ad Capabilities: [a0] Power Management version 2 00:1c.4 PCI bridge: Intel Corporation 6 Series/C200 Series Chipset Family PCI Express Root Port 5 (rev b4) (prog-if 00 [Normal decode]) Flags: bus master, fast devsel, latency 0 Bus: primary=00, secondary=04, subordinate=04, sec-latency=0 I/O behind bridge: 00002000-00002fff Memory behind bridge: eb000000-ec0fffff Prefetchable memory behind bridge: 00000000d0000000-00000000d9ffffff Capabilities: [40] Express Root Port (Slot+), MSI 00 Capabilities: [80] MSI: Enable- Count=1/1 Maskable- 64bit- Capabilities: [90] Subsystem: Dell Device 04ad Capabilities: [a0] Power Management version 2 00:1d.0 USB controller: Intel Corporation 6 Series/C200 Series Chipset Family USB Enhanced Host Controller #1 (rev 04) (prog-if 20 [EHCI]) Subsystem: Dell Device 04ad Flags: bus master, medium devsel, latency 0, IRQ 17 Memory at eeb50000 (32-bit, non-prefetchable) [size=1K] Capabilities: [50] Power Management version 2 Capabilities: [58] Debug port: BAR=1 offset=00a0 Capabilities: [98] PCI Advanced Features Kernel driver in use: ehci_hcd 00:1e.0 PCI bridge: Intel Corporation 82801 PCI Bridge (rev a4) (prog-if 01 [Subtractive decode]) Flags: bus master, fast devsel, latency 0 Bus: primary=00, secondary=05, subordinate=05, sec-latency=0 Capabilities: [50] Subsystem: Dell Device 04ad 00:1f.0 ISA bridge: Intel Corporation Q65 Express Chipset Family LPC Controller (rev 04) Subsystem: Dell Device 04ad Flags: bus master, medium devsel, latency 0 Capabilities: [e0] Vendor Specific Information <?> Kernel modules: iTCO_wdt 00:1f.2 SATA controller: Intel Corporation 6 Series/C200 Series Chipset Family SATA AHCI Controller (rev 04) (prog-if 01 [AHCI 1.0]) Subsystem: Dell Device 04ad Flags: bus master, 66MHz, medium devsel, latency 0, IRQ 30 I/O ports at 5090 [size=8] I/O ports at 5080 [size=4] I/O ports at 5070 [size=8] I/O ports at 5060 [size=4] I/O ports at 5020 [size=32] Memory at eeb40000 (32-bit, non-prefetchable) [size=2K] Capabilities: [80] MSI: Enable+ Count=1/1 Maskable- 64bit- Capabilities: [70] Power Management version 3 Capabilities: [a8] SATA HBA <?> Capabilities: [b0] PCI Advanced Features Kernel driver in use: ahci Kernel modules: ahci 00:1f.3 SMBus: Intel Corporation 6 Series/C200 Series Chipset Family SMBus Controller (rev 04) Subsystem: Dell Device 04ad Flags: medium devsel, IRQ 18 Memory at eeb30000 (64-bit, non-prefetchable) [size=256] I/O ports at 5000 [size=32] Kernel modules: i2c-i801 01:00.0 VGA compatible controller: NVIDIA Corporation Device 104a (rev a1) (prog-if 00 [VGA controller]) Subsystem: Micro-Star International Co., Ltd. Device 809f Flags: bus master, fast devsel, latency 0, IRQ 16 Memory at ed000000 (32-bit, non-prefetchable) [size=16M] Memory at e0000000 (64-bit, prefetchable) [size=128M] Memory at e8000000 (64-bit, prefetchable) [size=32M] I/O ports at 4000 [size=128] Expansion ROM at ee000000 [disabled] [size=512K] Capabilities: [60] Power Management version 3 Capabilities: [68] MSI: Enable- Count=1/1 Maskable- 64bit+ Capabilities: [78] Express Endpoint, MSI 00 Capabilities: [b4] Vendor Specific Information <?> Capabilities: [100] Virtual Channel <?> Capabilities: [128] Power Budgeting <?> Capabilities: [600] Vendor Specific Information <?> Kernel driver in use: nouveau Kernel modules: nouveau, nvidiafb 01:00.1 Audio device: NVIDIA Corporation GF119 HDMI Audio Controller (rev a1) Subsystem: Micro-Star International Co., Ltd. Device 809f Flags: bus master, fast devsel, latency 0, IRQ 17 Memory at ee080000 (32-bit, non-prefetchable) [size=16K] Capabilities: [60] Power Management version 3 Capabilities: [68] MSI: Enable- Count=1/1 Maskable- 64bit+ Capabilities: [78] Express Endpoint, MSI 00 Kernel driver in use: snd_hda_intel Kernel modules: snd-hda-intel 04:00.0 VGA compatible controller: NVIDIA Corporation Device 104a (rev a1) (prog-if 00 [VGA controller]) Subsystem: Micro-Star International Co., Ltd. Device 809f Flags: bus master, fast devsel, latency 0, IRQ 16 Memory at eb000000 (32-bit, non-prefetchable) [size=16M] Memory at d0000000 (64-bit, prefetchable) [size=128M] Memory at d8000000 (64-bit, prefetchable) [size=32M] I/O ports at 2000 [size=128] Expansion ROM at ec000000 [disabled] [size=512K] Capabilities: [60] Power Management version 3 Capabilities: [68] MSI: Enable- Count=1/1 Maskable- 64bit+ Capabilities: [78] Express Endpoint, MSI 00 Capabilities: [b4] Vendor Specific Information <?> Capabilities: [100] Virtual Channel <?> Capabilities: [128] Power Budgeting <?> Capabilities: [600] Vendor Specific Information <?> Kernel driver in use: nouveau Kernel modules: nouveau, nvidiafb 04:00.1 Audio device: NVIDIA Corporation GF119 HDMI Audio Controller (rev a1) Subsystem: Micro-Star International Co., Ltd. Device 809f Flags: bus master, fast devsel, latency 0, IRQ 17 Memory at ec080000 (32-bit, non-prefetchable) [size=16K] Capabilities: [60] Power Management version 3 Capabilities: [68] MSI: Enable- Count=1/1 Maskable- 64bit+ Capabilities: [78] Express Endpoint, MSI 00 Kernel driver in use: snd_hda_intel Kernel modules: snd-hda-intel

7 13

Apache Issue on CentOS 6
by linuxsupport 06 Apr '13

06 Apr '13

I am facing a problem with Apache on CentOS 6 Apache 2.2.19 is complied from source. I see so many reading requests in Apache status page, as per my previous experience this "reading request" issue mainly comes when any of the internet route having any problem and it request takes time to completely reach to Apache, but this time there is no network issue. I have ran same setup on CentOS 5 it works well, but on CentOS 6 it show 60%+ reading requests, web site has 20-25 requests per second that becomes 80+ I also tried to upgrade Apache to 2.2.24 but it is same on new version as well. Anyone else has experienced this issue?

3 3

mock and iaxmodem
by James B. Byrne 05 Apr '13

05 Apr '13

I am trying to build an rpm package for iaxmodem-1.2.0. At the moment I am still trying to get a working spec file put together. I have managed to get an SRPM produced but the binary build from this fails due to there being no install task in the Makefile.in provided with the source. I have found a spec file from opensuse that provides this in the install portion: %build [ "%{buildroot}" != '/' ] && rm -rf %{buildroot} # . . . ./configure %{__make} %{?_smp_mflags} %install # install the bunch manually mkdir -p $RPM_BUILD_ROOT/etc/logrotate.d $RPM_BUILD_ROOT/etc/iaxmodem $RPM_BUILD_ROOT/usr/bin %{__install} -m 644 %{S:1} $RPM_BUILD_ROOT/etc/logrotate.d/iaxmodem %{__install} -D -m 755 iaxmodem %{buildroot}%{_sbindir}/iaxmodem %{__install} -D -m 644 iaxmodem.1 %{buildroot}%{_mandir}/man1/iaxmodem.1 perl -pi -e 's,/usr/local/,/usr/,g' iaxmodem.init.fedora %{__install} -D -m 755 iaxmodem.init.suse %{buildroot}%{_initrddir}/iaxmodem But in mock I get a failure on the build because make has no install task. + make install DESTDIR=/builddir/build/BUILDROOT/iaxmodem-1.2.0-1.el6.x86_64 make: *** No rule to make target `install'. Stop. RPM build errors: error: Bad exit status from /var/tmp/rpm-tmp.apiDwk (%install) Bad exit status from /var/tmp/rpm-tmp.apiDwk (%install) Child return code was: 1 I have next to no experience with building on Linux and I have no idea of what I should do to resolve this. What are my options at this point? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

Re: [CentOS] mock and iaxmodem
by James B. Byrne 05 Apr '13

05 Apr '13

On Fri, April 5, 2013 15:45, Reindl Harald wrote: > > you can try my SPEC below which builds iaxmodem-packages on > Fedora since a long time, if this also does not work i suspect > a bug in mock! > Thank you very much. I had to make several small changes but with those in place your spec file works for me on CentOS-6.4. Libtiff-tools does not exist for CentOS but the requite components are included with libtiff. Libtiff needs a BuildRequires: libtiff-devel added. And as I do not have your Source2: .init file I copy the one provided in the sources for fedora instead. Name: iaxmodem Version: 1.2.0 Release: 1%{?dist} Summary: IAX software fax modem Source: http://dl.sourceforge.net/iaxmodem/%{name}-%{version}.tar.gz #Source2: %{name}.init URL: http://iaxmodem.sourceforge.net Group: Applications License: GPL BuildRoot: %{_tmppath}/build-%{name}-%{version} BuildRequires: gcc BuildRequires: glibc-devel BuildRequires: automake BuildRequires: autoconf BuildRequires: libtiff-devel Requires: libtiff %description IAXmodem is a software modem written in C that uses an IAX channel (commonly provided by an Asterisk PBX system) instead of a traditional phone line and uses a DSP library instead of DSP hardware chipsets. IAXmodem was originally conceived to function as a fax modem usable with HylaFAX, and it does that well. However IAXmodem also has been known to function with mgetty+sendfax and efax. To accomplish this IAXmodem interfaces an IAX library known as libiax2 with a DSP library known as spandsp, and then IAXmodem interfaces the DSP library with a tty device node for interfacing with modem applications. %prep %setup -q %build %configure %{__make} %{?_smp_mflags} %install mkdir -p $RPM_BUILD_ROOT/%{_bindir} mkdir -p $RPM_BUILD_ROOT/%{_mandir}/man1/ mkdir -p $RPM_BUILD_ROOT/etc/rc.d/init.d/ install %{name} $RPM_BUILD_ROOT/%{_bindir} install %{name}.1 $RPM_BUILD_ROOT/%{_mandir}/man1/ #install %{SOURCE2} $RPM_BUILD_ROOT/etc/rc.d/init.d/%{name} %{__install} -D -m 755 iaxmodem.init.fedora %{buildroot}%{_initrddir}/iaxmodem %clean rm -rf %{buildroot} %files %defattr(644,root,root,755) %attr(755,root,root) %{_bindir}/* %attr(754,root,root) /etc/rc.d/init.d/%{name} %{_mandir}/man1/* %doc TODO README FAQ CHANGES *.ttyIAX %changelog * Fri Apr 05 2013 James B. Byrne <byrnejb(a)harte-lyne.ca> - Rebuild for CentOS-6.4 * Thu Feb 03 2011 Reindl Harald <h.reindl(a)thelounge.net> - Rebuild for Fedora 14 * Sat Nov 20 2010 Reindl Harald <h.reindl(a)thelounge.net> - Rebuild with GCC 4.4.5 * Sat Nov 6 2010 Reindl Harald <h.reindl(a)thelounge.net> - Build x86_64 with SSE4-Support * Wed Sep 22 2010 Reindl Harald <h.reindl(a)thelounge.net> - Downgrade to 1.1.1 because 1.2 does not work - And upgrade again to 1.2.0 because stoopid people call fax per phone * Sun Sep 19 2010 Reindl Harald <h.reindl(a)thelounge.net> - First RPM for Fedora - Add "libtiff-tools" as Requirement because it provides: - * /usr/bin/fax2ps - * /usr/bin/fax2tiff - * /usr/bin/tiff2pdf - * /usr/bin/tiff2ps Now to see if it runs. Thank you again. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Touchpad doesn't work with C6, kernel-related...
by Marko Vojinovic 05 Apr '13

05 Apr '13

Hi folks! :-) I have a Fujitsu Lifebook U series laptop running updated CentOS 6.4 (64bit), and the touchpad doesn't work. It's a new laptop, the touchpad works correctly in Fedora 18 Live (given the kernel parameters below), no hardware problems. I searched the web all around, and it's a known issue for several laptop models. The only solution, quoted everywhere, it is to append the i8042.notimeout i8042.nomux to the kernel parameters. The problem is that the latest CentOS6 kernel (2.6.32-358.2.1.el6.x86_64) doesn't appear to recognize these. Or it otherwise ignores them. I did append the parameters, but (unlike in Fedora) the touchpad is still dead. This laptop is to be used by a noob user who needs a LTS distro and is already accustomed to CentOS, so a more modern distro like Fedora or Ubuntu is not an option. What can be done about this? Would a CentOSplus kernel work? It is somehow too lousy to tell the client "The touchpad of your brand-new laptop doesn't work because CentOS is too old, use an USB mouse instead". Any advice appreciated. TIA, :-) Marko

4 5

Using "root" Type User Via Forwarding-SSH-Tunnel Inside Non-Root SSH Connection
by Bry8 Star 05 Apr '13

05 Apr '13

Hi, QUESTION: what implications are there when using the "root" or a root type of account via a port-forwarding ssh-tunnel inside (or on top of) another non-root type of user's ssh-tunnel ? Is such double layer of encryption brings more security or system still vulnerable same as single layer of SSH encryption ? DETAILS: In CentOS (6.3 & 6.4) server side i have done these: (1) Created a user named "administrator". Then by using visudo command, i allowed "administrator" to have higher level of access & permission, similar/close to the "root" user, (not exactly same though). http://wiki.centos.org/TipsAndTricks/BecomingRoot (Basically this "administrator" user has maintenance related software running privilege). (2) Created a user named "non-root", a standard/normal user. (3) In /etc/ssh/sshd_config file i have modified the default configurations into this: # File: /etc/ssh/sshd_config port NNN10 protocol 2 SyslogFacility AUTHPRIV AllowUsers non-root root(a)127.0.0.1 administrator(a)127.0.0.1 PasswordAuthentication yes PermitEmptyPasswords no ChallengeResponseAuthentication no GSSAPIAuthentication yes GSSAPICleanupCredentials yes UsePAM yes AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES AcceptEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT AcceptEnv LC_IDENTIFICATION LC_ALL LANGUAGE AcceptEnv XMODIFIERS X11Forwarding no Banner /etc/issue.net Subsystem sftp /usr/libexec/openssh/sftp-server # End of File: /etc/ssh/sshd_config Above config allows only "non-root" user to connect with CentOS server from internet. And "administrator" or "root" can must/only connect using local ip address 127.0.0.1. In /etc/issue file and in /etc/issue.net file i have placed such text info: *********************************** NOTICE / WARNING TO USERS * This computer system is private property of its owner, Bry8Star. * This message is shown from hostname.sld.tld * It is for AUTHORIZED use only. Any unauthorized or improper use of this system will result in CIVIL and CRIMINAL PENALTIES ... * ... * Your connection IP ADDRESS, PORT, and TIME info etc are recorded by this computer. *********************************** In /etc/profile file, i have placed these below 13 lines just above the "unset i" line, at bottom side: if [ -n "$SSH_CLIENT" ] then set $SSH_CLIENT echo "Your current connection coming from IP Address $1 using port $2, to this computer." else if [ -n "$SSH_CONNECTION" ] then set $SSH_CONNECTION echo "Your current connection coming from IP Address $1 using port $2, to this computer." else echo "Your current connection's IP Address & port could not be shown for now." fi fi In /etc/profile.local file, i have placed these below 13 lines at bottom side: if [ -n "$SSH_CLIENT" ] then set $SSH_CLIENT echo "You have connected from IP Address $1 using port $2" else if [ -n "$SSH_CONNECTION" ] then set $SSH_CONNECTION echo "You have connected from IP Address $1 using port $2" else echo "User's IP Address could not be shown" fi fi Above codes allow me to see what IP:port is currently being used. And after login opensshd by default shows last/previous connection's IP-address or reverse-domain. This helps to see instantly which IP is being used right now or who is attempting to login in simple way. Ofcourse log can show more detailed info. And in client side (user side), i'm using PuTTY or PuTTY based or other SSH client software, with such configurations: SSH-client software has 3 connection profiles. The "ssh-client-01" connection ssh-profile is configured for regular user "non-root", and connects to ip.address.numbers:port (hostname.sld.tld:NNN10) (sld = 2nd level domain, tld = top level domain). This connection profile is also configured to create one encrypted port-forwarding tunnel through the SSH-tunnel: where, local port NNN11, is port-forwarded, to the (local-)port NNN10 inside CentOS server (hostname.sld.tld). The "ssh-client-02" connection ssh-profile is configured for user "administrator", and connects to local ip address 127.0.0.1 on port NNN11 (127.0.0.1:NNN11). This connection profile itself has no port-forwarding tunnels. It uses the forwarding-tunnel of "ssh-client-01" to create SSH-tunnel, toward the ssh-server port NNN10 of CentOS server. The "ssh-client-03" connection ssh-profile is configured with user "root", and connects to local ip address 127.0.0.1 on port NNN11 (127.0.0.1:NNN11). This connection profile itself has no port-forwarding tunnels. It uses the forwarding-tunnel of "ssh-client-01" to create SSH-tunnel, toward the ssh-server port NNN10 of CentOS server. I first connect with CentOS server using "ssh-client-01", then i connect again with CentOS server using the "ssh-client-02". In this way "ssh-client-02" (for "administrator") goes through the encryption layer of "ssh-client-01" (for "non-root"). If i need to use "root" level access/privilege, i do these: sudo one-command options For multiple commands i do these: su - a-command options another-command options exit To switch into another user account (like "GUIuser1", "non-root2") without disconnecting, i do: su GUIuser1 su non-root2 The "ssh-client-03" ssh-profile i use for exceptional purpose, when i absolutely must have to use the "root" account directly, only then. QUESTION: How can i configure opensshd related settings, so that, it shows current ip-address & port used by the current user who is trying/attempting to login ? BEFORE user types in the password. I have placed a text "This is \o | Now it is \t \d | Connection is using \l" in /etc/issue file and also in /etc/issue.net file, but it does not work, just appears as verbatim, (escape sequenced special variables do not get translated/replaced by special values). I want to show the user who is attempting to login, his/her IP-address, port, time, etc to him/her, every time before typing password. QUESTION: what is/are better practice(s) (to secure CentOS server related to SSH) ? QUESTION/Possible-SOLUTION: Should i remove the "root(a)127.0.0.1" from "AllowUsers" and add "PermitRootLogin no" line in /etc/sshd_config file ? Thanks in advance, -- Bright Star.

4 4

CentOS-announce Digest, Vol 98, Issue 2
by centos-announce-request＠centos.org 05 Apr '13

05 Apr '13

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2013:0703 CentOS 6 coreutils Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 5 Apr 2013 00:47:49 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2013:0703 CentOS 6 coreutils Update To: centos-announce(a)centos.org Message-ID: <20130405004749.GA28781(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2013:0703 Upstream details at : https://rhn.redhat.com/errata/RHBA-2013-0703.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: dbce6086fa4dc0861652fc9a3cfc358c53d6b93c0004f839712fddbc0f5f3231 coreutils-8.4-19.el6_4.1.i686.rpm 19f3eece775cf975b0a4dc703f5019171cee4762c21b09d924d89e66a327234a coreutils-libs-8.4-19.el6_4.1.i686.rpm x86_64: 88a59ae4ecd2c5639586d92e1136608f4d38921b1d84b8f5b4f3bbab2548917a coreutils-8.4-19.el6_4.1.x86_64.rpm fb884eac2dea8fb7993e491468ea4c84391ca63a1bd1c6f85b794a46bd856a99 coreutils-libs-8.4-19.el6_4.1.x86_64.rpm Source: a84d2d0d516d2dd975601cd3c65e82cf7f522ed1f828f2da99bf1353d2642b6b coreutils-8.4-19.el6_4.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 98, Issue 2 **********************************************

1 0

What is bind97 and what are the differences to bind
by Jobst Schmalenbach 05 Apr '13

05 Apr '13

Hi, sorry if this has been covered, I searched google for this but can't find an answer (maybe I am trying the incorrect search terms). What is bind97? What are the differences between bind97 and bind? thanks Jobst -- Fortune: No such file or directory. | |0| | Jobst Schmalenbach, jobst(a)barrett.com.au, General Manager | | |0| Barrett Consulting Group P/L & The Meditation Room P/L |0|0|0| +61 3 9532 7677, POBox 277, Caulfield South, 3162, Australia

2 1

UIDs different
by m.roth＠5-cent.us 04 Apr '13

04 Apr '13

Odd problem. Two 6.4 boxes, and a user's home directory is automounted. /etc/passwd are identical... but once mounted on the other server, if we su - to that user, what we see is an old UID of his, from a while back (years?), while on the home directory server, it's the current, correct UID. Anyone have ideas? mark

1 2

C6: tcp-wrapping pop3?
by Max Pyziur 04 Apr '13

04 Apr '13

Greetings, Per the subject line, how does pop3 get tcp-wrapped when using dovecot? More specifically, when blocking email and (still) using sendmail, entries in /etc/hosts.deny look something like: sendmail: xxx.xxx. etc (depending on the depth/degree) for vsftpd it's vsftpd: xxx.xxx (where the x's are parts of an octet) for sshd it's sshd: xxx.xxx for pop3/dovecot it's? ????: xxx.xxx I'm concerned about what is to the left of the colon (":"), not to the right. Is it a dovecot.conf configuration also? Much thanks, Max Pyziur pyz(a)brama.com

3 3

Re: [CentOS] Vsftpd configuration problem - followup
by Max Pyziur 03 Apr '13

03 Apr '13

On Tue, 2 Apr 2013, Reindl Harald wrote: > > > Am 02.04.2013 01:12, schrieb Max Pyziur: >> Beginning today, I started to receive the following when ftp'ing to my >> CentOS 6 machine: >> ncftp /home/pyz2 > dir >> connect failed: No route to host. >> connect failed: No route to host. >> connect failed: No route to host. >> Falling back to PORT instead of PASV mode. >> >> I can make a connection, but I can't get a directory listing or transfer >> data/files >> >> My firewall setting has port 21 open >> >> I can remotely telnet to hostname 21 > > and you understood that ftp needs also a data-channel > and not only the control-connection? > > http://slacksite.com/other/ftp.html When ftping to the machine, the following is reported from an lsof -i: ~> lsof -i | grep ftp vsftpd 18051 root 3u IPv4 47313973 0t0 TCP *:ftp (LISTEN) vsftpd 18448 nobody 0u IPv4 47318710 0t0 TCP brama.com:ftp->pool-72-89-118-134.nycmny.east.verizon.net:50298 (ESTABLISHED) vsftpd 18448 nobody 1u IPv4 47318710 0t0 TCP brama.com:ftp->pool-72-89-118-134.nycmny.east.verizon.net:50298 (ESTABLISHED) vsftpd 18448 nobody 2u IPv4 47318710 0t0 TCP brama.com:ftp->pool-72-89-118-134.nycmny.east.verizon.net:50298 (ESTABLISHED) vsftpd 18465 pyz2 0u IPv4 47318710 0t0 TCP brama.com:ftp->pool-72-89-118-134.nycmny.east.verizon.net:50298 (ESTABLISHED) vsftpd 18465 pyz2 1u IPv4 47318710 0t0 TCP brama.com:ftp->pool-72-89-118-134.nycmny.east.verizon.net:50298 (ESTABLISHED) vsftpd 18465 pyz2 2u IPv4 47318710 0t0 TCP brama.com:ftp->pool-72-89-118-134.nycmny.east.verizon.net:50298 (ESTABLISHED) fyi, MP pyz(a)brama.com

4 8

CentOS-announce Digest, Vol 98, Issue 1
by centos-announce-request＠centos.org 03 Apr '13

03 Apr '13

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2013:0692 CentOS 6 boost Update (Johnny Hughes) 2. CESA-2013:0696 Critical CentOS 5 xulrunner Update (Johnny Hughes) 3. CESA-2013:0697 Critical CentOS 5 thunderbird Update (Johnny Hughes) 4. CESA-2013:0696 Critical CentOS 5 firefox Update (Johnny Hughes) 5. CESA-2013:0696 Critical CentOS 6 xulrunner Update (Johnny Hughes) 6. CESA-2013:0697 Important CentOS 6 thunderbird Update (Johnny Hughes) 7. CESA-2013:0696 Critical CentOS 6 firefox Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 2 Apr 2013 14:25:37 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2013:0692 CentOS 6 boost Update To: centos-announce(a)centos.org Message-ID: <20130402142537.GA21797(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2013:0692 Upstream details at : https://rhn.redhat.com/errata/RHBA-2013-0692.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 6a3f17870bbb92811dd4886fc308d7d20cabd17a712604559f1c4762b1938c11 boost-1.41.0-17.el6_4.i686.rpm f59960fb9396d813304defe24c4bdede149442a934c994ff5af63c935741d995 boost-date-time-1.41.0-17.el6_4.i686.rpm 7780102c45f5893e4c7fd030563427ba95481e3c2f7a48ca8d87fba2fc698d1f boost-devel-1.41.0-17.el6_4.i686.rpm c20af3a70e1e333e455eaf13c5bad2c9d4aa7f65a0e78877be7f07a1f2db1d5d boost-doc-1.41.0-17.el6_4.i686.rpm 700eef24e99b84d1fcd43101bc45e5aa2c7c2addce1c0eb399fd28e533c6c61e boost-filesystem-1.41.0-17.el6_4.i686.rpm f2cc7bf10407da92c2f990ae939099b9abcdcca29816b176e8eca375a2c85fd5 boost-graph-1.41.0-17.el6_4.i686.rpm b5ca862fdfdc3ac1c8da7e9cce4fc804796ead79db1d7e85463ee197321817c3 boost-graph-mpich2-1.41.0-17.el6_4.i686.rpm 658ed676f6feba3fe362d3f6808fc4ecc0e404647392c53b2fd92c946e6e63c9 boost-graph-openmpi-1.41.0-17.el6_4.i686.rpm 2e907650c17616a22be5524ac6aa771b6a4b308a6227928dc82574fa1cfa6eb3 boost-iostreams-1.41.0-17.el6_4.i686.rpm 5547a19e1d017018da944a009a5f925991d589dc4ea7c2d58097f3241e680ba5 boost-math-1.41.0-17.el6_4.i686.rpm b44a501828a094f49a72586579017e9b0d109ff4f1768fbe36d6999693e58129 boost-mpich2-1.41.0-17.el6_4.i686.rpm f3fda215bb380e3bf9ff8a75bfc845a64d7fc38cd5d69050c7ac742d27c606ae boost-mpich2-devel-1.41.0-17.el6_4.i686.rpm eefd0ee1ac9bef33cceaf31aab10235913465a80fb78fbf73e17a6b1d2ef71f9 boost-mpich2-python-1.41.0-17.el6_4.i686.rpm 308237f14aa3e02393404d7798f58a8dfbd9dc002db148c58c2a7d7b8c1ceff9 boost-openmpi-1.41.0-17.el6_4.i686.rpm d1ed3f323a9a2358d551bce6ffcd37358deff5cf9a4f8c9025f2910b2312f2c2 boost-openmpi-devel-1.41.0-17.el6_4.i686.rpm 30f9723381078d5b56c3f8f4f21926814e3055be91c812040f6f94859bf5d181 boost-openmpi-python-1.41.0-17.el6_4.i686.rpm 83ff052460d5875aa41731c1f0947a1f0aaf99b806de3ad1bfb616841720641d boost-program-options-1.41.0-17.el6_4.i686.rpm b69efa50b01fded1cd134668ec4434b3f4f4e31616638287ab6bcb7b4d93e430 boost-python-1.41.0-17.el6_4.i686.rpm 935ab133eda12f8acdc0391e0e0c93449591774e26a59e3a24f4b20bfdb45cea boost-regex-1.41.0-17.el6_4.i686.rpm dd770d79c0642323d34d82dc88691bd90cfad08a5d9ccce4919feb4f7bee6008 boost-serialization-1.41.0-17.el6_4.i686.rpm 3f973ac7ecb1ec95e29f77a6e8a1f6f6e46c065cb339230c567ca6ab80749da7 boost-signals-1.41.0-17.el6_4.i686.rpm b18a6ca27832c90e77b27f1f5fbec206ef54818b27b798d305f99b603a0d7393 boost-static-1.41.0-17.el6_4.i686.rpm 02f9f48c876644587fe5b91e85bce74289c46f37b1a45b75f1828aec13b63f72 boost-system-1.41.0-17.el6_4.i686.rpm 4de1ed018ae95dd2daa9b54f2ca64a055a3d7d24c66e14a35bcb9d0a1a366b70 boost-test-1.41.0-17.el6_4.i686.rpm a6947757a659321cedc585d4b74c7e738ef42f5ff68a4b59aef62ab9fd0ce35f boost-thread-1.41.0-17.el6_4.i686.rpm bd3b6c1db628d5cdf88b203b8eb7b8365816682fdb342fa7cfc0722834d0e4f7 boost-wave-1.41.0-17.el6_4.i686.rpm x86_64: 86944f00bea3725ac2e61e2ae93b7fc30b0bc2bfc454a8ce61d2a95e4c0271f5 boost-1.41.0-17.el6_4.x86_64.rpm f59960fb9396d813304defe24c4bdede149442a934c994ff5af63c935741d995 boost-date-time-1.41.0-17.el6_4.i686.rpm 193cc8b631dd07b9743ee6d01d17ac508267e4137747044303b4e738f0b8ecaa boost-date-time-1.41.0-17.el6_4.x86_64.rpm 7780102c45f5893e4c7fd030563427ba95481e3c2f7a48ca8d87fba2fc698d1f boost-devel-1.41.0-17.el6_4.i686.rpm 2f6f6f23f2cbf26cb27303a286fa77b910326a8a2108ddceeb3bfd8e9b4a66a4 boost-devel-1.41.0-17.el6_4.x86_64.rpm 96789e28220d31866ebe6d4e4001e24d3d270ade1b107eac34787de1679201bc boost-doc-1.41.0-17.el6_4.x86_64.rpm 700eef24e99b84d1fcd43101bc45e5aa2c7c2addce1c0eb399fd28e533c6c61e boost-filesystem-1.41.0-17.el6_4.i686.rpm 3bb68a23603638b05072167fd8b032b487ff8946dc31d43111bdbc4ab2176f57 boost-filesystem-1.41.0-17.el6_4.x86_64.rpm f2cc7bf10407da92c2f990ae939099b9abcdcca29816b176e8eca375a2c85fd5 boost-graph-1.41.0-17.el6_4.i686.rpm d9541028e57d3e99ec385f34ede753ea9f7cd39525c3cef8211cf10d477ce86a boost-graph-1.41.0-17.el6_4.x86_64.rpm b5ca862fdfdc3ac1c8da7e9cce4fc804796ead79db1d7e85463ee197321817c3 boost-graph-mpich2-1.41.0-17.el6_4.i686.rpm 1e0f4a6d73dcecb575b42896be8feb069e42fbb8b97a50fde8f739eba470e5d2 boost-graph-mpich2-1.41.0-17.el6_4.x86_64.rpm 9c0b4fba7299cd13568b09444ddd71b58c55d7794225fcc093ee1ad797dfa92a boost-graph-openmpi-1.41.0-17.el6_4.x86_64.rpm 2e907650c17616a22be5524ac6aa771b6a4b308a6227928dc82574fa1cfa6eb3 boost-iostreams-1.41.0-17.el6_4.i686.rpm d89a6f644fe814d38f1b57568ad17e52828cea17b095f80d17204a6cf167e4d5 boost-iostreams-1.41.0-17.el6_4.x86_64.rpm 8ec30afa4c4b8173019fc5d3fdf3f541bfad4c52ceeb5e0fd86e1dc1a3bf5fb2 boost-math-1.41.0-17.el6_4.x86_64.rpm b44a501828a094f49a72586579017e9b0d109ff4f1768fbe36d6999693e58129 boost-mpich2-1.41.0-17.el6_4.i686.rpm 4720beeb7f99bdaf70749fe8a9eb4d9789523b6d11a5826ddf5769251e24012d boost-mpich2-1.41.0-17.el6_4.x86_64.rpm f3fda215bb380e3bf9ff8a75bfc845a64d7fc38cd5d69050c7ac742d27c606ae boost-mpich2-devel-1.41.0-17.el6_4.i686.rpm 08f2e29c6b55c24ceed0eb9a9f52c96661f63b4e017addf3eb4293e54f93868a boost-mpich2-devel-1.41.0-17.el6_4.x86_64.rpm eefd0ee1ac9bef33cceaf31aab10235913465a80fb78fbf73e17a6b1d2ef71f9 boost-mpich2-python-1.41.0-17.el6_4.i686.rpm 395159d1ddf88991348cc00a5b178527bb2a050cbb1fae710930651388be4047 boost-mpich2-python-1.41.0-17.el6_4.x86_64.rpm 38a13faf691b5def011884d6d0a55bb942a2dec27e016c12436333df6d2cda4a boost-openmpi-1.41.0-17.el6_4.x86_64.rpm d1ed3f323a9a2358d551bce6ffcd37358deff5cf9a4f8c9025f2910b2312f2c2 boost-openmpi-devel-1.41.0-17.el6_4.i686.rpm 8e74afbcb4d4261be59731fa3fb47851a2a658eb74f2d26010d63e530b03c736 boost-openmpi-devel-1.41.0-17.el6_4.x86_64.rpm 0a253ec42d9995b2417cb13a9c339622941d0c27fd251aa8ef36d1fae695c279 boost-openmpi-python-1.41.0-17.el6_4.x86_64.rpm 83ff052460d5875aa41731c1f0947a1f0aaf99b806de3ad1bfb616841720641d boost-program-options-1.41.0-17.el6_4.i686.rpm c42132a36b12a585c3c24033246a653941ed9c0ffefe5383839ff2c5de974606 boost-program-options-1.41.0-17.el6_4.x86_64.rpm b69efa50b01fded1cd134668ec4434b3f4f4e31616638287ab6bcb7b4d93e430 boost-python-1.41.0-17.el6_4.i686.rpm dfe5109e82fed65544b136abbd21dcb215cf814d866b3765b0c8dbe0263a9b33 boost-python-1.41.0-17.el6_4.x86_64.rpm 935ab133eda12f8acdc0391e0e0c93449591774e26a59e3a24f4b20bfdb45cea boost-regex-1.41.0-17.el6_4.i686.rpm 22ea8cc215313dee92dea9082861c65813751cdd4bf67f6804aacbdea8a9f5fe boost-regex-1.41.0-17.el6_4.x86_64.rpm dd770d79c0642323d34d82dc88691bd90cfad08a5d9ccce4919feb4f7bee6008 boost-serialization-1.41.0-17.el6_4.i686.rpm 035d708c958c280e84e0792e77cc23f90296cc616b565746a99fc421917f3960 boost-serialization-1.41.0-17.el6_4.x86_64.rpm 3f973ac7ecb1ec95e29f77a6e8a1f6f6e46c065cb339230c567ca6ab80749da7 boost-signals-1.41.0-17.el6_4.i686.rpm 46b81147f05e002128263dc3d271ac2d4c384818b2eaf5dcc143ea3ce42d0ca3 boost-signals-1.41.0-17.el6_4.x86_64.rpm 82e0828a4f8fb84070c38db56c0fda41e26a296e791e24bc3a1e4449545b48a0 boost-static-1.41.0-17.el6_4.x86_64.rpm 02f9f48c876644587fe5b91e85bce74289c46f37b1a45b75f1828aec13b63f72 boost-system-1.41.0-17.el6_4.i686.rpm 782735948658cb91bb356b76405ff900b3040e895af2aa8a7e020611f84489c6 boost-system-1.41.0-17.el6_4.x86_64.rpm 4de1ed018ae95dd2daa9b54f2ca64a055a3d7d24c66e14a35bcb9d0a1a366b70 boost-test-1.41.0-17.el6_4.i686.rpm 00969eecba17cbe7f8eaa15a671a96ad5ff290f501864fb7aa70d32201ada493 boost-test-1.41.0-17.el6_4.x86_64.rpm a6947757a659321cedc585d4b74c7e738ef42f5ff68a4b59aef62ab9fd0ce35f boost-thread-1.41.0-17.el6_4.i686.rpm 0e34ae08acbd6cfe9e7d26cf8e877ba598bf2b2ccd265a6aee566cda3ac77dfd boost-thread-1.41.0-17.el6_4.x86_64.rpm bd3b6c1db628d5cdf88b203b8eb7b8365816682fdb342fa7cfc0722834d0e4f7 boost-wave-1.41.0-17.el6_4.i686.rpm 975eabe0c1d71c280b34f290608ee579d5ff161ad7c679ce7017165333b9772a boost-wave-1.41.0-17.el6_4.x86_64.rpm Source: 120d83c2811ce5d951e2ebf84709a232f2d072007e04eea50c45b8081165afd2 boost-1.41.0-17.el6_4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 3 Apr 2013 04:34:09 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0696 Critical CentOS 5 xulrunner Update To: centos-announce(a)centos.org Message-ID: <20130403043409.GA1349(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0696 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0696.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 5597aea4d37eead49f184cac9daced824d6a332f4b67b254461ddf18a77d9e83 xulrunner-17.0.5-1.el5_9.i386.rpm 88229ce133be5b613d10676ab7f0d996f260a143008f44cd1a684efd1f662ebb xulrunner-devel-17.0.5-1.el5_9.i386.rpm x86_64: 5597aea4d37eead49f184cac9daced824d6a332f4b67b254461ddf18a77d9e83 xulrunner-17.0.5-1.el5_9.i386.rpm bbe3f667ed00c4860ef80b267722c64c8fa91cd573d2d8a1fbcff3a06bd9a386 xulrunner-17.0.5-1.el5_9.x86_64.rpm 88229ce133be5b613d10676ab7f0d996f260a143008f44cd1a684efd1f662ebb xulrunner-devel-17.0.5-1.el5_9.i386.rpm ce7201c9a7842693ad51db54305e1b28cdc3e8572413f6f3fd9f7d87876bf925 xulrunner-devel-17.0.5-1.el5_9.x86_64.rpm Source: e9dfb2eb020e83b0c2ee2d23fef5500c6f70bad833cbdd29003fdd5e0b5ac597 xulrunner-17.0.5-1.el5_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Wed, 3 Apr 2013 04:39:37 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0697 Critical CentOS 5 thunderbird Update To: centos-announce(a)centos.org Message-ID: <20130403043937.GA1482(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0697 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0697.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 3c5fc2abc05ea43daf472aa1ca1a909fdff250ad1097d64887fd95819eb85647 thunderbird-17.0.5-1.el5.centos.i386.rpm x86_64: f81334bd93d83b8950946d40c092ad7c63aadde3e088eb520c76b06bad158002 thunderbird-17.0.5-1.el5.centos.x86_64.rpm Source: aa25c6cce823137c043d45a239df568b67eb5aaeadad4a9bbe79fc4ccaa6f5d3 thunderbird-17.0.5-1.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Wed, 3 Apr 2013 04:42:17 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0696 Critical CentOS 5 firefox Update To: centos-announce(a)centos.org Message-ID: <20130403044217.GA1609(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0696 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0696.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 5109c5f8f4fa396f006575dd4b6e750f46086cc5eb0660323eed5955ff2cc4b8 firefox-17.0.5-1.el5.centos.i386.rpm x86_64: 5109c5f8f4fa396f006575dd4b6e750f46086cc5eb0660323eed5955ff2cc4b8 firefox-17.0.5-1.el5.centos.i386.rpm ef8883f10686e40aa942710dc9cad2e10d22519157f6721af00884967dc9cb11 firefox-17.0.5-1.el5.centos.x86_64.rpm Source: d776604c90449284fec01988d730a832fd724c95a5b1f320c34680b8f465d7cf firefox-17.0.5-1.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Wed, 3 Apr 2013 10:56:57 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0696 Critical CentOS 6 xulrunner Update To: centos-announce(a)centos.org Message-ID: <20130403105657.GA19569(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0696 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0696.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 26b0caa52bf4e7b4d7c261e00ee743e5685299182aeae1a42b5847b04e91caca xulrunner-17.0.5-1.el6.centos.i686.rpm 567ba526b9b75803d9db5b33293ec8c88cd61184e8d09176320c4f009b70232d xulrunner-devel-17.0.5-1.el6.centos.i686.rpm x86_64: 26b0caa52bf4e7b4d7c261e00ee743e5685299182aeae1a42b5847b04e91caca xulrunner-17.0.5-1.el6.centos.i686.rpm 896b11cd54e4ca8bd52dd4ae9efdb430e6b7e4b379d835d8a687c949e0cfe39d xulrunner-17.0.5-1.el6.centos.x86_64.rpm 567ba526b9b75803d9db5b33293ec8c88cd61184e8d09176320c4f009b70232d xulrunner-devel-17.0.5-1.el6.centos.i686.rpm 822aa2efab665cfe10d7c7a3e39c803110438c39cdeeb1c1c4e0035b574d9343 xulrunner-devel-17.0.5-1.el6.centos.x86_64.rpm Source: b6128f2140cfe782f2b9e66678cfd594e1b9e37ac754704e3c92d4aa3a539325 xulrunner-17.0.5-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Wed, 3 Apr 2013 10:58:05 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0697 Important CentOS 6 thunderbird Update To: centos-announce(a)centos.org Message-ID: <20130403105805.GA19665(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0697 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0697.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 967a0634b5aa244be5eca52d962b8f8ba087d2f95ae74c45c506eb3d9fd6b68f thunderbird-17.0.5-1.el6.centos.i686.rpm x86_64: 2b4c51af85d29a1d83610d50322f64627aee746424db8975eca082cccfafc438 thunderbird-17.0.5-1.el6.centos.x86_64.rpm Source: 155f9596b4414f0c45fb462e194d58e8a0fe5a6666f4427bca88e94bb58c3e0d thunderbird-17.0.5-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 7 Date: Wed, 3 Apr 2013 10:58:52 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0696 Critical CentOS 6 firefox Update To: centos-announce(a)centos.org Message-ID: <20130403105852.GA19761(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0696 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0696.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: eea9330cd29c93424557cab123a4e6b2ea8fca6dcaff337cb9185dfdfbb39492 firefox-17.0.5-1.el6.centos.i686.rpm x86_64: eea9330cd29c93424557cab123a4e6b2ea8fca6dcaff337cb9185dfdfbb39492 firefox-17.0.5-1.el6.centos.i686.rpm 4abce1b75131b50adfc1af53cb1e700412fb3ed42463da6ab3839bca786763ca firefox-17.0.5-1.el6.centos.x86_64.rpm Source: 5d1a5d079fa22e2feac5b90f0735f741654a929a49edb831ab00ea552ab71b1b firefox-17.0.5-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 98, Issue 1 **********************************************

1 0

Minimal ISO: GRUB UEFI has incorrect config
by Adam Bishop 03 Apr '13

03 Apr '13

Hello, I've just tried to use CentOS-6.4-x86_64-minimal.iso, but it does not work unmodified. The grub commands used by the ISO for installation/rescue are: kernel /images/pxeboot/vmlinuz ... initrd /images/pxeboot/initrd.img These paths do not exist on disk. If I manually correct these to: kernel /images/vmlinuz ... initrd /images/initrd.img The installation is able to proceed normally. Thanks, Adam Bishop Systems Development Specialist gpg: 0x6609D460 Janet, the UK's research and education network. Janet(UK) is a trading name of Jisc Collections and Janet Limited, a not-for-profit company which is registered in England under No. 2881024 and whose Registered Office is at Lumen House, Library Avenue, Harwell Oxford, Didcot, Oxfordshire. OX11 0SG. VAT No. 614944238

2 2

Kickstart just create /boot, recommended swap and / with whatever is left.
by Drew Weaver 03 Apr '13

03 Apr '13

Howdy, The default partitioning scheme appears to be: swap /boot / small amount of space /home remainder of space. Is there any way via kickstart to have it just create swap with the recommended size, /boot, and then just / with the remainder without manually specifying the names of the lvs/vgs etc? I figured there would be an autopart -atomic option but that doesn't seem to exist. Any advice? Thanks, -Drew

4 4

[SOLVED] it was an iptables-config setting, was Re: Vsftpd configuration problem
by Max Pyziur 02 Apr '13

02 Apr '13

On Tue, 2 Apr 2013, Reindl Harald wrote: > > > Am 02.04.2013 02:04, schrieb Max Pyziur: >>> [root@srv-rhsoft:~]$ cat /etc/sysconfig/iptables-config >>> # Load additional iptables modules (nat helpers) >>> # Default: -none- >>> # Space separated list of nat helpers (e.g. 'ip_nat_ftp ip_nat_irc'), which >>> # are loaded after the firewall rules are applied. Options for the helpers are >>> # stored in /etc/modprobe.conf. >>> IPTABLES_MODULES="nf_conntrack_ftp nf_nat_ftp" >> >> So, are you saying this last line is key? > > it is on my fedora machines acting as FTP behind a NAT > >> Because on the CentOS 5 setup I see: >> IPTABLES_MODULES="ip_conntrack_netbios_ns ip_conntrack_ftp" >> >> While on the CentOS 6 setup I see: >> IPTABLES_MODULES="" >> >> What is the correct/recommended setting? > > there is no "correct/recommended setting" > > if you are behind a NAT you need a different config as if you are > have a public IP on your machine, that is why configs exists Not behind a NAT ... > with passive FTP the server anserwers with port AND ip-address > for the data-connection (which is a idiotic design but it is how > it is) and if the client follows this response it fails > > so the way to go is translate the response in whatever > stateful filter in fornt of the FTP server > > this is called ALG (application layer gateway) and part > of any relieable stateful packet filter Adding the following line to /etc/sysconfig/iptables-config "got me home:" IPTABLES_MODULES="ip_conntrack_ftp" Along with the above dialogue, the following page helped (me): http://www.linuxquestions.org/questions/linux-networking-3/iptables-configu… Thanks. Max Pyziur pyz(a)brama.com

2 1

Re: [CentOS] Vsftpd configuration problem
by Max Pyziur 02 Apr '13

02 Apr '13

On Tue, 2 Apr 2013, Reindl Harald wrote: > > > Am 02.04.2013 01:25, schrieb Max Pyziur: >> On Tue, 2 Apr 2013, Reindl Harald wrote: >> >>> >>> >>> Am 02.04.2013 01:12, schrieb Max Pyziur: >>>> Beginning today, I started to receive the following when ftp'ing to my >>>> CentOS 6 machine: >>>> ncftp /home/pyz2 > dir >>>> connect failed: No route to host. >>>> connect failed: No route to host. >>>> connect failed: No route to host. >>>> Falling back to PORT instead of PASV mode. >>>> >>>> I can make a connection, but I can't get a directory listing or transfer >>>> data/files >>>> >>>> My firewall setting has port 21 open >>>> >>>> I can remotely telnet to hostname 21 >>> >>> and you understood that ftp needs also a data-channel >>> and not only the control-connection? >> >> I assume that you are referring to the following vsftpd configuration file setting: >> # Make sure PORT transfer connections originate from port 20 (ftp-data). >> connect_from_port_20=YES > > no - port 20 has NOTHING t do with passive FTP > >> Btw, When ftping to another user on the same machine, there is no problem in >> making a connection or in transferring data > > beause it is nor firewalled nor NAted > >> it's connections that our outside the box. > > i bet you are behind a nat > > iptables or the firewall needs to translate he answers of the servers > you need to read some documentations how FTP works and how NAT > works to undersatdn the details Ok. > [root@srv-rhsoft:~]$ cat /etc/sysconfig/iptables-config > # Load additional iptables modules (nat helpers) > # Default: -none- > # Space separated list of nat helpers (e.g. 'ip_nat_ftp ip_nat_irc'), which > # are loaded after the firewall rules are applied. Options for the helpers are > # stored in /etc/modprobe.conf. > IPTABLES_MODULES="nf_conntrack_ftp nf_nat_ftp" So, are you saying this last line is key? Because on the CentOS 5 setup I see: IPTABLES_MODULES="ip_conntrack_netbios_ns ip_conntrack_ftp" While on the CentOS 6 setup I see: IPTABLES_MODULES="" What is the correct/recommended setting? >>> http://slacksite.com/other/ftp.html > > Max Pyziur pyz(a)brama.com

2 1

C5-C6 Migration problem: HTML-Formatted email in Squirrelmail disappears
by Max Pyziur 02 Apr '13

02 Apr '13

Greetings, In Squirrelmail, you can install a plugin html_mail, that allows you to compose html-formatted email. This plugin functions with Firefox and Internet Explorer; it doesn't function in Google Chrome. In CentOS 5 with PHP5.1, I could copy and paste html-formatted text with complicated html (tables, css, etc) from a text editor into the the html-formatting pane of squirrelmail, and the message would be delivered as html-formatted to the recipients. In CentOS 6, with PHP5.3, using Squirrelmail with the html_mail plugin, copying html-formatted text from a text editor into the html-window in Squirrelmail, the delivered email only shows the header information. Using pine, I see that there is an attachment, viewing the attachment, I see the original html code that was composed in a text editor. Viewing this same received email in a web-based client (Gmail or Squirrelmail), all of html-formatting disappears. Any suggestions on how to troubleshoot and resolve this? Much thanks. Max Pyziur pyz(a)brama.com

1 0

The annoying task_setrlimit
by m.roth＠5-cent.us 02 Apr '13

02 Apr '13

I found the FAQ about it. Unfortunately, it is going to worry some few of my users. The FAQ does *not* mention any way to shut it up. Clues?

2 2

Vsftpd configuration problem
by Max Pyziur 02 Apr '13

02 Apr '13

Greetings, Beginning today, I started to receive the following when ftp'ing to my CentOS 6 machine: ncftp /home/pyz2 > dir connect failed: No route to host. connect failed: No route to host. connect failed: No route to host. Falling back to PORT instead of PASV mode. I can make a connection, but I can't get a directory listing or transfer data/files. I'm flummoxed. What I had been doing is adding more directives to my /etc/hosts.deny file, today to include certain categories of ip addresses for the vsftpd service. I unwound that after I saw the problem starting to occur, and have restarted vsftpd several times. That hasn't changed the above issue. And yes, I've googled. My firewall setting has port 21 open. I can remotely telnet to hostname 21 and I get a response indicating that the port is open. Any advice would be appreciated. Much thanks. Max Pyziur pyz(a)brama.com

2 1

Re: [CentOS] Vsftpd configuration problem
by Max Pyziur 01 Apr '13

01 Apr '13

On Mon, 1 Apr 2013, lists-centos wrote: > > > ------------ Original Message ------------ >> Date: Monday, April 01, 2013 07:12:53 PM -0400 >> From: Max Pyziur <pyz(a)brama.com> >> To: centos(a)centos.org >> Cc: >> Subject: [CentOS] Vsftpd configuration problem >> >> >> Greetings, >> >> Beginning today, I started to receive the following when ftp'ing >> to my CentOS 6 machine: >> ncftp /home/pyz2 > dir >> connect failed: No route to host. >> connect failed: No route to host. >> connect failed: No route to host. >> Falling back to PORT instead of PASV mode. >> >> I can make a connection, but I can't get a directory listing or >> transfer data/files. >> >> I'm flummoxed. >> >> What I had been doing is adding more directives to my >> /etc/hosts.deny file, today to include certain categories of ip >> addresses for the vsftpd service. >> >> I unwound that after I saw the problem starting to occur, and have >> restarted vsftpd several times. >> >> That hasn't changed the above issue. >> >> And yes, I've googled. >> >> My firewall setting has port 21 open. >> >> I can remotely telnet to hostname 21 >> >> and I get a response indicating that the port is open. >> >> Any advice would be appreciated. >> >> Much thanks. >> >> Max Pyziur >> pyz(a)brama.com > > ftp uses port 21 for the "connection" and port 20 for the "data", > which includes directory listings as well as the file transfer > proper - see /etc/services. so if you have port 20 blocked that > would explain your problem. Does port 20 have to be open in the firewall? If so, this would be the first machine where I have explicitly set this. > - Richard > > > Max

1 0

Re: [CentOS] Vsftpd configuration problem
by Max Pyziur 01 Apr '13

01 Apr '13

On Tue, 2 Apr 2013, Reindl Harald wrote: > > > Am 02.04.2013 01:12, schrieb Max Pyziur: >> Beginning today, I started to receive the following when ftp'ing to my >> CentOS 6 machine: >> ncftp /home/pyz2 > dir >> connect failed: No route to host. >> connect failed: No route to host. >> connect failed: No route to host. >> Falling back to PORT instead of PASV mode. >> >> I can make a connection, but I can't get a directory listing or transfer >> data/files >> >> My firewall setting has port 21 open >> >> I can remotely telnet to hostname 21 > > and you understood that ftp needs also a data-channel > and not only the control-connection? I assume that you are referring to the following vsftpd configuration file setting: # Make sure PORT transfer connections originate from port 20 (ftp-data). connect_from_port_20=YES Btw, When ftping to another user on the same machine, there is no problem in making a connection or in transferring data; it's connections that our outside the box. > http://slacksite.com/other/ftp.html > > MP

1 0

[Possibly OT] - General question: state of internet traffic
by Max Pyziur 01 Apr '13

01 Apr '13

Greetings, I've read reports that there has been degradation in Internet traffic over the last month. Until today, I haven't experienced any. However, getting bank record data from chase.com here in NYC seems impossible. I also noticed erratic ftp behavior today; connections can be made but data can't be transferred. This isn't consistent, though. (I have a machine in LA while being in NYC; ftp traffic is difficult to establish westbound; no problem eastbound). I haven't done any sort of consistent test, so I am not sounding alarms. I'm just trying to get a sense of where this is happening. And is there a reliable source of information. Much thanks Max Pyziur pyz(a)brama.com

3 2

Don't understand how to re-partition this setup or why it was made like this
by Yves S. Garret 01 Apr '13

01 Apr '13

Hello, I did df -h on my CentOS 6.4 machine. $ df -h Filesystem Size Used Avail Use% Mounted on /dev/mapper/vg_ysg-lv_root 47G 8.8G 36G 20% / tmpfs 948M 372K 947M 1% /dev/shm /dev/sda1 485M 62M 398M 14% /boot /dev/mapper/vg_ysg-lv_home 4.6G 2.7G 1.7G 63% /home What I don't understand is why is /home so tiny and how can I re-partition this without having to nuke and rebuild my machine?

5 5

Re: [CentOS] DNS forwarding vs recursion
by Les Mikesell 01 Apr '13

01 Apr '13

On Mon, Apr 1, 2013 at 2:54 PM, Michael H. Warfield <mhw(a)wittsend.com> wrote: >> > AFA how BIND should be shipped... Last time I looked (just a couple of > days ago) BIND ships in a fairly secure manner (local caching resolver > listening on localhost only) and the default IP tables blocks DNS > queries and response that are not on-session. The OP mentioned that his > name server was an "authoritative" name server (it was servicing a zone > for which it was configured). That's NOT a shipped configuration. You > have to configure it for a zone. Sooo... We are NOT talking about OOB > (Out Of the Box) configurations here at all. Someone had to > configuration it this way, post installation. So everyone has to add your own zones. I don't see how that leads to the conclusion that it is shipped with appropriate defaults to force/encourage separation of authoritative/recursive instances. >> > I don't think that's the answer either. >> > Establishing best practices and discouraging people from misconfiguring >> > applications would seem to be a better option and best current practices >> > now were not always considered best practices 20 years ago. It's a >> > challenge. It's a BIG challenge in my business. >> >> OK, but of course it is a challenge if you advocate using tools that >> most people don't have or understand - or don't work universally. > > Don't have: Disagree - most have. Where? I'd say it is much more common for firewalls to be separate entities that don't know much about routing. > Don't understand: I'll grant you that. They don't understand the tools, > they don't understand the problem, and they don't understand best > current practices. You got me on that one. There in lies the problem > and the challenge. Exactly. If you can't clearly define the problem or a required topology you can't expect people to re-arrange things. >> > Asymmetric >> > routes (aka triangular routing) should be severely discourage and is >> > generally considered a configuration error unless it's heavily >> > justified. > >> I don't think BGP shares this opinion. > > I'm not sure I follow you on that statement. BGP is a protocol and I've > done some coding on that (I'm the author of the MD5 signature code in > bgpd of the Quagga suite). The crowd on NANOG (North American Network > Operators Group) generally frowns upon asymmetric routing as something > that is occasionally necessary and unavoidable but not admitted to > loudly in public, much akin to an aunt that like to sit in the corner of > a room at a party and frequently farts loudly. Are you saying that something in BGP cares about anything except the best forward path seen at the moment? Or that as this changes dynamically it even tries to keep the reverse path symmetrical? > Asymmetric routing also breaks > stateful firewalls badly if they are in the way... Sure. Do you want reliability or control? Pick one. >> And I'd speculate that the >> simplicity of IP routing only needing to care about the forward route >> direction one hop at a time is the main reason that it became the >> network of choice. Well, that and a taxpayer funded directory service >> from the start. > > This was very true back then but proved to be as problematical as > spoofing attacks abusing the DNS resolvers. Both are rooted in the > early ages of the Internet. Fascinating that you bring up that point. Packets are packets - the concepts of widely distributed, widely available transports aren't going to change, we just do it faster now. > Counter point is in the policy routing present in modern systems and > that IPsec in particular is a policy oriented VPN where triangular / > asymmetric routing frequently break. Hence the continuing popularity of ssl-based VPNs that work better under real-world conditions. OpenVPN, Juniper's, etc. > I would concur with that. I think that's part and parcel of > establishing your nominal security perimeters anyways. Maybe - as organizations grow, merge, relocate, etc. it becomes hard to deal with perimeters or to assume that all the bad guys are outside. >> So you envision an internet where it is impossible to reach a >> recursive resolver outside of your own organization's control? > > Not "impossible" and not under "your own organizations control". > Certainly, ISPs provide recursers for their clients. Yeah, but they mostly do that so they can redirect failed lookups to their own search engines or link farms and show some ads. As though web browsers were the only clients for DNS. > But... What is > the purpose of an indeterminant anonymous client connecting to your > recursive server and making arbitrary queries? Use case: You provide a subscription service to institutions that like strict outbound firewalling. Your servers are located in a few contiguous ranges and you work with their firewall admins to permit access. Then you find out that the desktop clients in question don't have access to full internet DNS. > Yes, there are some of > us who are involved in Internet infrastructure and maintenance for which > some of that may be useful for diagnostic purposes but, to allow anyone > for any reason to anywhere? That's just inviting abuse. Sure, but there's not a reasonable way to distinguish a customer from anyone else at the time they need DNS. > Counter point is that some ISPs (AT&T in particular) have begun blocking > unrestrained DNS as much as they block unrestrained SMTP because of some > of the abuse that has taken place. Or because they make money when they redirect the errors... > Whatever your opinion is on THAT > debate (and I am decidedly NOT on their side, but I do agree with > organizations who do it) it's a fact and it is happening. They don't > even allow their clients to run their own name servers (unless you are a > "business client" and have an agreement to that effect) and force most > of their clients to use their name servers. And then they can charge more for the "business class" where they don't block stuff. -- Les Mikesell lesmikesell(a)gmail.com

1 0

DNS forwarding vs recursion
by John R Pierce 01 Apr '13

01 Apr '13

I have 2 CentOS servers that are both authoritative DNS for several domains and local resolvers. As configured, they are publicly visible resolvers, which I've known for awhile is not a good thing. whats the appropriate way of configuring the bind on CentOS 5.current to not allow recursion on queries from the public side, but still allow recursion locally? is it as simple as adding allow-recursion{} with the appropriate private subnets and localhost to named.conf ? -- john r pierce 37N 122W somewhere on the middle of the left coast

6 8

Re: [CentOS] DNS forwarding vs recursion
by Les Mikesell 01 Apr '13

01 Apr '13

On Mon, Apr 1, 2013 at 1:30 PM, Michael H. Warfield <mhw(a)wittsend.com> wrote: > > Actually, it's pretty easy with netfilter / iptables. Other firewalls > like pf filter on *BSD an proprietary work similar. If you know your > inside networks you merely add a rule to block incoming packets on your > external interface with source addresses that should be inside your > firewall. What does 'inside' mean to TCP/IP? Are you saying it can't work if you are all public? Or if you expect to use redundant public routing among all of your systems? > Do > we all drop BIND in favor of nscd for our authoritative name servers and > dnsmasq for our cachers? Well, first you have to come out and say that recursive resolvers are too fragile to survive in public. Or have too much potential for collateral damage and must be outlawed. Maybe define a way your network topology has to be arranged. Then move on to how BIND should be shipped. > I don't think that's the answer either. > Establishing best practices and discouraging people from misconfiguring > applications would seem to be a better option and best current practices > now were not always considered best practices 20 years ago. It's a > challenge. It's a BIG challenge in my business. OK, but of course it is a challenge if you advocate using tools that most people don't have or understand - or don't work universally. > Asymmetric > routes (aka triangular routing) should be severely discourage and is > generally considered a configuration error unless it's heavily > justified. I don't think BGP shares this opinion. And I'd speculate that the simplicity of IP routing only needing to care about the forward route direction one hop at a time is the main reason that it became the network of choice. Well, that and a taxpayer funded directory service from the start. > They're highly unreliable to begin with (you can forget > about getting through stateful firewalls). Where it can be justified, > then static rules allow it will cover things in ways that attackers can > not exploit. So what you need to establish first is the location of the firewalls in respect to recursive servers. > Perhaps. But I'm not quite so sure where the bad design is or if it's > merely a confluence of extremely powerful tools, like BIND, that can be > used in a multitude of ways. I might agree with you more if the "bad > design" you are referring to is the overall network design, > architecture, and layout. I've seen plenty of well designed tools > misused in badly designed networks. So you envision an internet where it is impossible to reach a recursive resolver outside of your own organization's control? -- Les Mikesell lesmikesell(a)gmail.com

1 0

nagios 3.5 for rpm repository for centos 5
by Eero Volotinen 31 Mar '13

31 Mar '13

Hi List, Is there any good rpm repository that provides nagios 3.5 for centos 5? br, -- Eero

2 1

ext4 deadlock issue
by Joakim Ziegler 30 Mar '13

30 Mar '13

I'm having an occasional problem with a box. It's a Supermicro 16-core Xeon, running CentOS 6.3 with kernel 2.6.32-279.el6.x86_64, 96 gigs of RAM, and an Areca 1882ix-24 RAID controller with 24 disks, 23 in RAID6 plus a hot spare. The RAID is divided into 3 partitions, two of 25 TB plus one for the rest. Lately, I've noticed sporadic hangs on writing to the RAID, which "resolve" themselves with the following message in dmesg: INFO: task jbd2/sdb2-8:3607 blocked for more than 120 seconds. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. jbd2/sdb2-8 D 000000000000000a 0 3607 2 0x00000080 ffff881055d03d20 0000000000000046 ffff881055d03ca0 ffffffff811ada77 ffff8810552e2400 ffff88109c6566e8 0000000000002f38 ffff8810546e1540 ffff8810546e1af8 ffff881055d03fd8 000000000000fb88 ffff8810546e1af8 Call Trace: [<ffffffff811ada77>] ? __set_page_dirty+0x87/0xf0 [<ffffffff810923be>] ? prepare_to_wait+0x4e/0x80 [<ffffffffa01e881f>] jbd2_journal_commit_transaction+0x19f/0x14b0 [jbd2] [<ffffffff810096f0>] ? __switch_to+0xd0/0x320 [<ffffffff8107e00c>] ? lock_timer_base+0x3c/0x70 [<ffffffff810920d0>] ? autoremove_wake_function+0x0/0x40 [<ffffffffa01eef78>] kjournald2+0xb8/0x220 [jbd2] [<ffffffff810920d0>] ? autoremove_wake_function+0x0/0x40 [<ffffffffa01eeec0>] ? kjournald2+0x0/0x220 [jbd2] [<ffffffff81091d66>] kthread+0x96/0xa0 [<ffffffff8100c14a>] child_rip+0xa/0x20 [<ffffffff81091cd0>] ? kthread+0x0/0xa0 [<ffffffff8100c140>] ? child_rip+0x0/0x20 I get two of these messages in close succession, then things proceed normally. It doesn't happen often, and only under load. I'm uncertain, but think it might just happen once per boot, once it's happened, it doesn't repeat until rebooting. I'm not sure of this, however. Things otherwise seem fine, other logs, RAID controller event logs, RAID controller physical disk status and health reports are normal, etc. After getting this error once, attempting to re-write the exact same file on the filesystem gets no errors and works normally, so I doubt it's a physical thing with the drives anyway. Anyone seen anything like this before? It's not very frequent, but it's very annoying. -- Joakim Ziegler - Supervisor de postproducción - Terminal joakim(a)terminalmx.com - 044 55 2971 8514 - 5264 0864

2 7

cronie: /usr/bin/run-parts
by Max Pyziur 30 Mar '13

30 Mar '13

Greetings, Per the subject line, what controls the time of the running of scripts located in the /etc/cron.[daily|weekly|hourly] directories? Specifically with CentOS 6.* I've noticed that scripts in /etc/cron.daily and /etc/cron.weekly run at different times of the day, or on different days. In my experience on other rpm-based distributions, cron daily and weekly scripts run at 4am; those that are run weekly run at 4am on Sunday morning. Much thanks in advance, Max Pyziur pyz(a)brama.com

3 3

iptables settings for X11 forwarding in CentOS 6.2
by Pat Haley 30 Mar '13

30 Mar '13

Hi, We recently installed CentOS 6.2 on our cluster. During the installation/debugging of various secondary software, we had disabled iptables. When we re-enabled them, we found that the front-end would no longer X11 forward (although it does so when the iptables are off). What do we need to set in the iptables to permit X11 forwarding? Currently we're using iptables -P INPUT DROP iptables -P FORWARD DROP iptables -P OUTPUT ACCEPT iptables -A INPUT -m limit --limit 15/minute -j LOG --log-level 7 --log-prefix "Dropped by firewall: " iptables -A INPUT -i eth1 -p tcp --dport 22 -m state --state NEW,ESTABLISHED -j ACCEPT iptables -A INPUT -i eth1 -p tcp --dport 80 -m state --state NEW,ESTABLISHED -j ACCEPT iptables -A INPUT -i eth1 -p tcp --dport 8080 -m state --state NEW,ESTABLISHED -j ACCEPT iptables -A INPUT -i eth1 -p tcp --dport 6000 -m state --state NEW,ESTABLISHED -j ACCEPT iptables -A INPUT -i eth1 -p tcp --dport 6001 -m state --state NEW,ESTABLISHED -j ACCEPT iptables -A INPUT -i eth1 -p tcp --dport 6002 -m state --state NEW,ESTABLISHED -j ACCEPT iptables -A INPUT -i eth1 -p tcp --dport 6003 -m state --state NEW,ESTABLISHED -j ACCEPT iptables -A INPUT -i eth1 -p tcp --dport 6004 -m state --state NEW,ESTABLISHED -j ACCEPT iptables -A INPUT -i eth1 -p tcp --dport 6005 -m state --state NEW,ESTABLISHED -j ACCEPT iptables -A INPUT -i eth1 -p udp --dport 177 -m state --state NEW,ESTABLISHED -j ACCEPT iptables -A INPUT -i eth1 -p udp --dport 6000 -m state --state NEW,ESTABLISHED -j ACCEPT iptables -A INPUT -i eth1 -p udp -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A INPUT -i eth1 -p tcp -m state --state ESTABLISHED,RELATED -j ACCEPT -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Pat Haley Email: phaley(a)mit.edu Center for Ocean Engineering Phone: (617) 253-6824 Dept. of Mechanical Engineering Fax: (617) 253-8125 MIT, Room 5-213 http://web.mit.edu/phaley/www/ 77 Massachusetts Avenue Cambridge, MA 02139-4301

4 5

Re: [CentOS] a-gnome-oyences
by m.roth＠5-cent.us 30 Mar '13

30 Mar '13

Gordon Messmer wrote: > On 03/28/2013 07:00 AM, m.roth(a)5-cent.us wrote: >> Most of my users are on kde, as am I (I really don't like gnome). I've got one on gnome, though, CentOS 6.4, and I have a problem: I have to start >> an agent running ->on login<-, so that the same one is in the environment >> of every term window he opens. > That would be the normal configuration. >> In kde, no problem, I modify /etc/X11/xinit/xinitrc-common so that code >> in there calls our (newer) ssh-agent instead of the stock one. >> (And, of course, it's killed on logout, and there's only one running, >> not one every time that never go away unless killed manually.) > You're already making things more complicated than they should be. The ssh agent is supposed to be the parent process of your login session. That is, your login session should be: > ssh-agent startkde > or: > ssh-agent gnome-session Well, no. If you look at the stock /etc/X11/xinit/xinitrc-common. at the bottom of the file, that's where it sets this stuff. As I said, we *have* to use the compiled from more recent versions of ssh, because the current stock version doesn't support US gov't PIV cards for authentication. And doing this, I only get one agent, and it gets killed automagically when I log out, as expected. > With GDM, you'd modify the session file in /usr/share/xsessions. You'd a) /usr/share? Why are system-wide configuration files NOT IN /etc? b) UTF-8? What freakin' morons decided it shouldn't be plain ascii, like everything else? #$%^&*$%^&*($%^&*($%^&*(%^&*()_+ No matter what I open it in, it keeps showing up with garbage chars. So I look at /etc/gdm, as I said, and I see it sourcing /etc/X11/xinit/xinitrc-common, where I've got it set to reference our agent. Then I go further down, and see <snip>*************** case "$1" in failsafe) exec -l $SHELL -c "xterm -geometry 80x24-0-0" ;; gnome|gnome-session) # lack of SSH_AGENT is intentional, see #441123. though # the whole thing should really happen in xinitrc.d anyway. exec -l $SHELL -c gnome-session exec /bin/sh -c "exec -l $SHELL -c \"gnome-session\"" ;; kde|kde1|kde2) exec $CK_XINIT_SESSION $SSH_AGENT /bin/sh -c "exec -l $SHELL -c \"startkde\"" <snip>*************** Pause for some googling, ah, here's my answer that's less ugly, from <https://ask.fedoraproject.org/question/10225/is-it-possible-to-replace-gnom…>, which is to create /etc/X11/xinit/Xclients.d/Xclients.gnome-session.sh, whose contents are #!/bin/sh exec -l $SHELL -c "$SSH_AGENT gnome-session" > prefix the "Exec" line with "ssh-agent ", and be done. As those files would be <snip> > Xclients, which runs your session. You shouldn't need to change > anything at all, unless your newer ssh-agent is at a different path. > So, in that case, the only thing you should need to change is to > run gnome-session-properties, and uncheck "SSH Key Agent". First, of course it's in a different path. Second, no, I do *not* want to run a gnome thing - I need to a) do this from a command line, and b) fix it so it can be built that way, or updated. This isn't my machine, I've got dozens of users, and need to administer this remotely, without having to make them stop what they're doing so I can screw with this. Ok, I followed the guy's instructions, but a) I'm afraid to let the keyring not run, and b) I get the one agent running... but gnome-keyring-agent runs *after* it, and so overwrites the environment variables, which means this is the final trick I need to resolve. As a first question on that, in that created file, /etc/X11/xinit/Xclients.d/Xclients.gnome-session.sh, I've got the one line; however, in /etc/gdn/Xession (really /etc/X11/Xsession), to start gnome, it has, as you can see above, *two* execs. Any idea why, and any idea where I can start the agent so that the environment variables are *not* overwritten by gnome-keyring-agent. mark

2 3

new version of wireshark
by Steve Clark 29 Mar '13

29 Mar '13

Hello, Has anyone seen an el6 rpm of wireshark-1.8.6 Thanks, -- Stephen Clark *NetWolves* Director of Technology Phone: 813-579-3200 Fax: 813-882-0209 Email: steve.clark(a)netwolves.com http://www.netwolves.com

3 2

CentOS 6.4, TigerVNC, and always-on feature
by Mark Holloway 29 Mar '13

29 Mar '13

I just finished a fresh install of CentOS 6.4 and successfully configured Tiger VNC. I can now VNC to the server. In previous version of CentOS 5.x, I could modify /etc/X11/xorg.conf so that when I VNC to the server I am seeing the same desktop as someone who is sitting in front of the machine (ie. their session, all open windows, etc.). The tutorial for creating this "always on" type of VNC connection is here --> http://wiki.centos.org/HowTos/VNC-Server#head-7e0dadd72b0ddd9c84381b053b440… The tutorial says to modify /etc/X11/xorg.conf but this file no longer exists in CentOS 6.4. Is there another way to configure VNC for "always on"? Thanks, Mark

2 2

CentOS Dojo at Antwerp on the 8th Apr 2013
by Karanbir Singh 29 Mar '13

29 Mar '13

hi guys, I just want to drop in a quick note about the first ever CentOS Dojo that is taking place in Antwerp on the 8th April - if you are in the area, or can get there - I highly recommend you come along. Its going to be a great day, with lots of face to face tech conversations and user stories on and around real world challenges on CentOS. http://wiki.centos.org/Events/Dojo/Antwerp2013 has the lineup of people doing the sessions; Plus we have sponsored Lunch and maybe a few beers at the end, along with lots of socialising and networking opportunities during the day. In addition to the lineup, we also have an open CentOS forum that runs for an hour, where anyone can ask any question about the CentOS project, its past, its present and where we are heading - and any concern that people might have about the project. We will also have open spaces, where people can get up, do a quick ignite like 5 min talk about pretty much anything ( we just ask that everyone imagine their grand mother is also watching, so keep content sanity in mind ). The sessions run like Dojo sessions, so they are not like talks at a conference, this is a lot more user interactive and driven around the CentOS mindset - so no one is trying to sell you anything or make their toys look better than someone elses. There are only a few tickets left, so register soon! http://centosdojoantwerp2013.eventbrite.com/ Note: For all you US side people, hang tight - we have something coming you way soon as well. Regards -- Karanbir Singh +44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh GnuPG Key : http://www.karan.org/publickey.asc

1 0

Re: [CentOS] yum configuration
by m.roth＠5-cent.us 29 Mar '13

29 Mar '13

Ron Loftin wrote: > > On Fri, 2013-03-29 at 15:22 +0200, Andreas K. wrote: >> On 29-03-2013 14:59, Stephen Harris wrote: >> > On Fri, Mar 29, 2013 at 02:54:58PM +0200, Andreas K. wrote: >> >> >> >> baseurl=ftp://yum.xx.xx.xx.xx/pub/linux/centos/$releasever/os/$basearch/ Is there a way to force a 6.3 machine to remain at 6.3 until a human being decides that is is time to do so? >> > >> > Change releasever to 6.3 for base and updates and any other repo that might refer to it. >> >> thanks for replying. >> I was hoping ot a more dynamic approach though since the number of affected machines is in excess of 150. > > If you're dealing with that number of machines you may wish to consider setting up your own internal repo. Then you can sync your repo to the mirrors on your schedule, move to a later version on your schedule, and so on. <snip> Seconded. And in the repo, all you'd have to do is have a symlink of 6 -> 6.3. mark

2 1

yum configuration
by Andreas K. 29 Mar '13

29 Mar '13

As it stands now (or at least that is what I think) when CentOS moves from one minor version to another (6.3 to 6.4) the 6.3 version machines automatically pick up the upgrade and the next time you do yum upgrade all of the upgrades are applied. This happens because in the repo configs (in our case) we have baseurl=ftp://yum.xx.xx.xx.xx/pub/linux/centos/$releasever/os/$basearch/ Is there a way to force a 6.3 machine to remain at 6.3 until a human being decides that is is time to do so? thanx

3 3

CentOS-announce Digest, Vol 97, Issue 17
by centos-announce-request＠centos.org 29 Mar '13

29 Mar '13

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2013:0690 Important CentOS 5 bind97 Update (Johnny Hughes) 2. CESA-2013:0689 Important CentOS 6 bind Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 28 Mar 2013 23:25:41 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0690 Important CentOS 5 bind97 Update To: centos-announce(a)centos.org Message-ID: <20130328232541.GA7954(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0690 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0690.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 42079863147d415c4ba6e04364762964bc422df93ae6dd8c3db177b5974775ff bind97-9.7.0-17.P2.el5_9.1.i386.rpm 8b92ac3a40c297fcc49e8c68acfa63b59476976dfdf77b6e1b96dad252301b6f bind97-chroot-9.7.0-17.P2.el5_9.1.i386.rpm bc949ba766120d1afd36b0011abef24dedf4c8a1495dd65fa1624ab0270c970c bind97-devel-9.7.0-17.P2.el5_9.1.i386.rpm f946b80f0a1b0a7e7ac3d36b1d52ac86eb86cb19d140f6f6a66b4d83882a1dfb bind97-libs-9.7.0-17.P2.el5_9.1.i386.rpm 80855bc857e8891efdc99c18e0845be3e6dbc55e76fa12b8c60655843a1a5f37 bind97-utils-9.7.0-17.P2.el5_9.1.i386.rpm x86_64: b2892bd9869b16158951dbc387cec469af74ca9ed549d80ae21b95342da91662 bind97-9.7.0-17.P2.el5_9.1.x86_64.rpm 5db4729f775229f984f9fa6a5132b2bc3ebd2151b2c5545ee0b9fd9d45ba4189 bind97-chroot-9.7.0-17.P2.el5_9.1.x86_64.rpm bc949ba766120d1afd36b0011abef24dedf4c8a1495dd65fa1624ab0270c970c bind97-devel-9.7.0-17.P2.el5_9.1.i386.rpm 527e53e13a9eb7248e0b0336c549141d095c3b13e2035b130d47e99f7868b47d bind97-devel-9.7.0-17.P2.el5_9.1.x86_64.rpm f946b80f0a1b0a7e7ac3d36b1d52ac86eb86cb19d140f6f6a66b4d83882a1dfb bind97-libs-9.7.0-17.P2.el5_9.1.i386.rpm fb3909c52a321f0261b6617b4e5d66c6fa07c3f52870f9330280603006856c73 bind97-libs-9.7.0-17.P2.el5_9.1.x86_64.rpm 64051a5297427ebfe8f7d7075a0a51edf805651e10d6cc43c6d286167e7dc140 bind97-utils-9.7.0-17.P2.el5_9.1.x86_64.rpm Source: b2dbca781e4e513a6b1852f5d6e44c7513c4507390949486e9a6b1bffaed959c bind97-9.7.0-17.P2.el5_9.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Fri, 29 Mar 2013 00:19:00 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0689 Important CentOS 6 bind Update To: centos-announce(a)centos.org Message-ID: <20130329001900.GA11087(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0689 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0689.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 7fc8986003f534ddd06038b6bb8d964936ae4f54d77d1a5dc82884eb3adb6e93 bind-9.8.2-0.17.rc1.el6_4.4.i686.rpm 3b54ec24dbd6fc7c8e4bcd06108db9e0806bd70c2820571bc5b94353f72863fd bind-chroot-9.8.2-0.17.rc1.el6_4.4.i686.rpm 9184ddc07f88468a6790fea719631faf2609d5cf2ac3c4c172dc02985c3573af bind-devel-9.8.2-0.17.rc1.el6_4.4.i686.rpm 17b559f44e2f08b046b603884ad79ef730e29e7d4b08c3c4c4ce75df152176f2 bind-libs-9.8.2-0.17.rc1.el6_4.4.i686.rpm 2e0df9c026015936388bd86faabaf097889a90055f0c9fd4676e97bdff521078 bind-sdb-9.8.2-0.17.rc1.el6_4.4.i686.rpm da2b841d3cdbbdb9f87e54e0936a7978c2237d80d7c3e78ac84c6b4e731abfcd bind-utils-9.8.2-0.17.rc1.el6_4.4.i686.rpm x86_64: 5e6775a1bb0dfd3e130deec98b9ea3ff645f1feb378cf8604df6a10de26a6e0b bind-9.8.2-0.17.rc1.el6_4.4.x86_64.rpm 603502fd0ad6435921bb1d067f935e2f583ccefcb77a4f4854befe7a86388c60 bind-chroot-9.8.2-0.17.rc1.el6_4.4.x86_64.rpm 9184ddc07f88468a6790fea719631faf2609d5cf2ac3c4c172dc02985c3573af bind-devel-9.8.2-0.17.rc1.el6_4.4.i686.rpm 27e0ef453dd6a9f0186bddef6948ae40ec324d26aaeeaef296b97184e17235c7 bind-devel-9.8.2-0.17.rc1.el6_4.4.x86_64.rpm 17b559f44e2f08b046b603884ad79ef730e29e7d4b08c3c4c4ce75df152176f2 bind-libs-9.8.2-0.17.rc1.el6_4.4.i686.rpm 160f95883fab038a8d6abc0386a5bd72b2c73921ee1e7cf946ea4c2c287d1d89 bind-libs-9.8.2-0.17.rc1.el6_4.4.x86_64.rpm c3217d931429c09c7b13b4f5adcfc818e94370be538de24baf9f482c19d63623 bind-sdb-9.8.2-0.17.rc1.el6_4.4.x86_64.rpm fee7dca53a94e5db7ef476569cf5175442a550c317477a7e0d784e7d1efdd209 bind-utils-9.8.2-0.17.rc1.el6_4.4.x86_64.rpm Source: edece99dd18f10e5fa72f7ded608c842ae56da1e17df8f503d07e00f470f073d bind-9.8.2-0.17.rc1.el6_4.4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 97, Issue 17 ***********************************************

1 0

Computer doesn't boot with new 6.4 kernel
by Markus Lindholm 29 Mar '13

29 Mar '13

Yesterday a upgraded a machine that I have from Centos 6.3 to 6.4, but it doesn't boot with the new kernel (2.6.32-358). Right after grub the screen shows a distorted image, a bit like war of the ants but static, and nothing more happens. With the old kernel (2.6.32-279) it boots fine. The motherboard is a Asus E45M1-M Pro. There's no separate graphics card, but I use the one on the motherboard, a AMD Radeon HD 6320. Should I file bug report or is there something else to try? /Markus

3 4

(Al)pine on CentOS 6
by Max Pyziur 28 Mar '13

28 Mar '13

Greetings, The alpine mail rpm indicates that it comes packaged with configuration files (/etc/pine*conf*). However, they aren't there. Possible? Also, how did you get rid of the annoying alpine bug: a message that keeps flashing - [Folder vulnerable - directory /var/spool/mail must have 1777 protection]? Thanks. Max Pyziur pyz(a)brama.com

7 13

a-gnome-oyences
by m.roth＠5-cent.us 28 Mar '13

28 Mar '13

Most of my users are on kde, as am I (I really don't like gnome). I've got one on gnome, though, CentOS 6.4, and I have a problem: I have to start an agent running ->on login<-, so that the same one is in the environment of every term window he opens. In kde, no problem, I modify /etc/X11/xinit/xinitrc-common so that code in there calls our (newer) ssh-agent instead of the stock one. (And, of course, it's killed on logout, and there's only one running, not one every time that never go away unless killed manually.) /etc/gdm/Xsession *says* that it sources that file, so it should be running when he logs in. I've just had him log out and log back in, <ctl><alt><bkspc>, and no matter what, it just ain't running. So, gnome fans, how do I get that to work? Edit /etc/gdm/custom.conf? Edit something else? gconftool-2 (gahhhh)? mark

2 1

CentOS-announce Digest, Vol 97, Issue 16
by centos-announce-request＠centos.org 28 Mar '13

28 Mar '13

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2013:0687 Moderate CentOS 6 pixman Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 27 Mar 2013 22:15:17 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0687 Moderate CentOS 6 pixman Update To: centos-announce(a)centos.org Message-ID: <20130327221517.GA31533(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0687 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0687.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 0f9e4f5ae1ebfd5e5bc2795621784a9c7371dabbfd961c12fada1076b98bc4e9 pixman-0.26.2-5.el6_4.i686.rpm e0d916a60cc92f986df77adf7ebaa436447fd0eeebad2575e3dafe6951213e41 pixman-devel-0.26.2-5.el6_4.i686.rpm x86_64: 0f9e4f5ae1ebfd5e5bc2795621784a9c7371dabbfd961c12fada1076b98bc4e9 pixman-0.26.2-5.el6_4.i686.rpm 77d5656e9868ee915d1bc8e06b89faf28dd1b3872d8ea3ef86f5eb7fbd66a9d2 pixman-0.26.2-5.el6_4.x86_64.rpm e0d916a60cc92f986df77adf7ebaa436447fd0eeebad2575e3dafe6951213e41 pixman-devel-0.26.2-5.el6_4.i686.rpm 63338bdf43d7c1df0ff0662102f95654c6cf3b42b697fe2928c6633d3194c1eb pixman-devel-0.26.2-5.el6_4.x86_64.rpm Source: 2dd2dfaf867c7093e510cc034237eeb6fddd11690d7f5cee0f48788e2532bf5d pixman-0.26.2-5.el6_4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 97, Issue 16 ***********************************************

1 0

silencing Passenger "ps" SELinux errors
by ignasr＠vault13.lt 28 Mar '13

28 Mar '13

Hello, how do people cope with constant SELinux errors like this from Fusion Passenger: 36886. 03/27/2013 14:20:05 ps unconfined_u:system_r:passenger_t:s0 2 file open system_u:system_r:udev_t:s0-s0:c0.c1023 denied 1922 36887. 03/27/2013 14:20:05 ps unconfined_u:system_r:passenger_t:s0 4 dir getattr unconfined_u:system_r:initrc_t:s0 denied 1927 36888. 03/27/2013 14:20:05 ps unconfined_u:system_r:passenger_t:s0 2 dir search unconfined_u:system_r:initrc_t:s0 denied 1928 It happens when Passenger v3 tries to determine memory stats with "ps". There is an Apache directive to turn it of ( http://www.modrails.com/documentation/Users%20guide%20Apache.html#Passenger… ), unfortunately it does not work in community version of Passenger. The cause is always ps running as passenger_t trying to read files in /proc with various types of security context. Thank you, IgnasR

3 3

UEFI
by m.roth＠5-cent.us 27 Mar '13

27 Mar '13

Y'know, I was just reading an article about a Spanish Linux group filing a complaint with the EU regulators about UEFI, and I was struck by a thought: why is it that the OEM does not provide the UEFI key with the hardware FOR THAT BOARD AND UEFI, rather than have it provided by M$? Any clues (or should I just assume it's more M$ kickbacks...)? mark

3 3

Kernel 2.6.32-358 networking issues...
by John Doe 27 Mar '13

27 Mar '13

Hi, after a long general power failure, I had to power off/on my soon to be 6.4 firewall (updated to 6.4, but not rebooted yet). After the off/on, everything seemed to be fine. But I realized there were some specific/weird heavy slow downs. In one case, the windows clients *uploads* would stall (very slow), while the linux clients had no apparent upload issues... (MTU?). In another case, the openvpn clients could not use the connection at all (way too slowwww). After trying countless of diagnostics/tests, I reinstalled/booted the old kernel 2.6.32-279.22.1 and... everything went back to normal. So, for now, I am stuck with the old kernel... Anyone else bumped into such issues after 6.4? Setup: C6 x86_64 / shorewall+openvpn(udp)... Thx, JD

2 1

Re: [CentOS] Help with thread Centos 6.4 won't reboot on install
by James B. Byrne 27 Mar '13

27 Mar '13

On Tue, March 26, 2013 16:08, m.roth(a)5-cent.us wrote: > I dunno - I don't think I was telling him to learn latin; rather, > that he should increase his vocabulary beyond, oh, I read, years > back, that the *average* American's *average* vocabulary was about > 500 words... and that Koko the gorilla had 550 in ASL.... > > mark "eep, eep" > The median adult native English with high-school education has about 11,000 stem words from which perhaps 40-50k derivative words are formed. Technical jargon aside, one only requires about 6000 root words to comprehend the essence of approximately 90% of all written English text. A native English speaker acquires about three new stem words per day or over 2500 per year. But, evidently one may be a boor with any size vocabulary. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

CentOS-announce Digest, Vol 97, Issue 15
by centos-announce-request＠centos.org 27 Mar '13

27 Mar '13

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2013:0684 CentOS 6 virt-viewer Update (Johnny Hughes) 2. CESA-2013:0685 Moderate CentOS 5 perl Update (Johnny Hughes) 3. CESA-2013:0685 Moderate CentOS 6 perl Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 26 Mar 2013 14:40:24 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2013:0684 CentOS 6 virt-viewer Update To: centos-announce(a)centos.org Message-ID: <20130326144024.GA1084(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2013:0684 Upstream details at : https://rhn.redhat.com/errata/RHBA-2013-0684.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 2a347c6baaed520eb84a192cbd607c174328d70150f5a7ba788463ea75c85a7f virt-viewer-0.5.2-18.el6_4.2.i686.rpm x86_64: aa759e60722292d4ae82dbb140846e8c773a720e63a41400f4bb5dec282ac6fd virt-viewer-0.5.2-18.el6_4.2.x86_64.rpm Source: 37f1f0442ee41fabb719bc09d94ecb19609b033f82b76b018b1fb0d1f3d369f9 virt-viewer-0.5.2-18.el6_4.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 26 Mar 2013 21:05:02 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0685 Moderate CentOS 5 perl Update To: centos-announce(a)centos.org Message-ID: <20130326210502.GA20891(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0685 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0685.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: f932d1b4e665b8c27a16fc2234d0f506058fc006ad1f1449d364d5586c5ab678 perl-5.8.8-40.el5_9.i386.rpm 089798f46a3e3a764c84b04a43c4121fb3d01837b246300a1e0168aa325d4c9f perl-suidperl-5.8.8-40.el5_9.i386.rpm x86_64: e4da70ebed49403e02325827073f0cfaa1bfd5e1aa4d9a098884e814578aceb9 perl-5.8.8-40.el5_9.x86_64.rpm d6ff3694dc3e4b922f7c72988ea4763e07dd200a3748c4ce8a59d157bc166b24 perl-suidperl-5.8.8-40.el5_9.x86_64.rpm Source: 820918b4e9e204a8105779fa35854592b5986f31ad518f5d181d135b77c5eae4 perl-5.8.8-40.el5_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Tue, 26 Mar 2013 22:29:30 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0685 Moderate CentOS 6 perl Update To: centos-announce(a)centos.org Message-ID: <20130326222930.GA24478(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0685 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0685.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 4693ce1309c88397a4defc5c0f1c114ee7f8feea8f23f7c38fc9e600c4ff972e perl-5.10.1-130.el6_4.i686.rpm b882fdb4c014e0bf01754b6a6eff1166321aae9d9788c0a52f85183245927867 perl-Archive-Extract-0.38-130.el6_4.i686.rpm b86aad3a0a434fdb283f4a12e41c5621d8fd64bcf6abfb4580e414e6be812a14 perl-Archive-Tar-1.58-130.el6_4.i686.rpm d47070bb3276156dbe5db27c8c0963e52bc4acedbc3230621b94c4fa580eb048 perl-CGI-3.51-130.el6_4.i686.rpm 37af3256e77fb643e54784db44004d898421b5da7c5f901773eb9e6bc3858ce5 perl-Compress-Raw-Bzip2-2.020-130.el6_4.i686.rpm cf353f79b44e8d6926cb70c9960623ce3b94c54a15651c73cfe7fb96abd5df16 perl-Compress-Raw-Zlib-2.020-130.el6_4.i686.rpm f03f401b2bdaab18e5f42c659fc6a00ff850d431b49a67dc5fa954fe9131f929 perl-Compress-Zlib-2.020-130.el6_4.i686.rpm 6c9314a5fed158c222a2b5ba3821fa5aa64574d993f8c1c50a1370e48ca307f3 perl-core-5.10.1-130.el6_4.i686.rpm 3c6a02f034617fc3fe254a2107031368cef65ff4f9ab8122fbc5656b13d73d64 perl-CPAN-1.9402-130.el6_4.i686.rpm fa1ee1cf77e9f2016fd5b92ed6629651d4feb3a0a79a81383898290f50480502 perl-CPANPLUS-0.88-130.el6_4.i686.rpm 1de9b8954d67907cd816d872df71acf1c0d244cd00ab51307f2d561da8d66437 perl-devel-5.10.1-130.el6_4.i686.rpm 64a4942ca9873830382d5fe19256b8e671f4fec1676f7de7d0c6229d846554bb perl-Digest-SHA-5.47-130.el6_4.i686.rpm 9e89bbbc36687eb3c531a88680fc51a52bd69ff7a2855d45ca534bf2d8cf44b4 perl-ExtUtils-CBuilder-0.27-130.el6_4.i686.rpm e10afa6f9036664e1fae0354ff5df43ab4a70a321e7c67aecf0571e42693e96e perl-ExtUtils-Embed-1.28-130.el6_4.i686.rpm 93d053153a05a95e625bc95f8da79f6498a58072a1c40db59adf1d2154647c80 perl-ExtUtils-MakeMaker-6.55-130.el6_4.i686.rpm bd717ad55e095d9deb1dde6f3015f4fc43fb763e3fc709c183ebcdb2a8c14d94 perl-ExtUtils-ParseXS-2.2003.0-130.el6_4.i686.rpm 872dab6fd0d9b4f9778fb227eb2cd7ba7046b5ade7e3b6503a4d38f269bc2c01 perl-File-Fetch-0.26-130.el6_4.i686.rpm b4ccf0881579ec62c7094454da74ae14af33ad3b2bfb0d310490afc82b9f4818 perl-IO-Compress-Base-2.020-130.el6_4.i686.rpm 30681e26a519c14aca7f48d154379665883bfd1e19bf7002711c60a58fd194bb perl-IO-Compress-Bzip2-2.020-130.el6_4.i686.rpm 23ba31dc5b6d2e8c19474af5fffc6c1d0602b2d17a5126e36b6e168547e313cf perl-IO-Compress-Zlib-2.020-130.el6_4.i686.rpm 2f3cf5c512da71f38275fee510f669e2ef6118a9bcaddd4c32c6d8ad232c5734 perl-IO-Zlib-1.09-130.el6_4.i686.rpm ea36721e27c0717fb663f598be40bb17d1c8928dbb52e97883f960c654ec50d8 perl-IPC-Cmd-0.56-130.el6_4.i686.rpm 1bde62d33617138d6a3c5697eef715d458d1bb3d589aebc3c3c22efd11bd8c32 perl-libs-5.10.1-130.el6_4.i686.rpm 64835742c7f3cff0b6fb20ec68a3ba91b663d5017819e5118f3d7329fd37d22a perl-Locale-Maketext-Simple-0.18-130.el6_4.i686.rpm 0ff088c810b8eb7e21cb7ab673eb7bdf2a3a942f461121f1901c59f561ffe665 perl-Log-Message-0.02-130.el6_4.i686.rpm 9c7416be7534f162c11f87278a1f06662957f137e7bb98cb33dbd0e426e88d7b perl-Log-Message-Simple-0.04-130.el6_4.i686.rpm dc56cc93897f3f656b8fe3cd24ab635ff68170f7866b96f9bde327ba2dff4d7a perl-Module-Build-0.3500-130.el6_4.i686.rpm 1d3510c1ffd152710a9c608f17b37f12cbe09224ce63ffcd2cc6cc316b8cc1a6 perl-Module-CoreList-2.18-130.el6_4.i686.rpm 8aa35b7217e0d240e7569aa7e0c9c78250f6fd2a1ca7bd5f6602ed74c3383bc3 perl-Module-Load-0.16-130.el6_4.i686.rpm 70150b4e7effd460c377b94b31e3a46ca46ad0c0a9118dce2f88c2ae055202e3 perl-Module-Load-Conditional-0.30-130.el6_4.i686.rpm 4447149f2f489fb5fb0fe919c0fbfde3328df554618da93abfd8cee74a351726 perl-Module-Loaded-0.02-130.el6_4.i686.rpm b5430d39b65601ae47d0c3fb55d6d0dc53b6b6fe2547dbc7e84cc6167c6dc0a8 perl-Module-Pluggable-3.90-130.el6_4.i686.rpm 37b53b5a87e8557731a737ea2836f4a088d8d8bc79a42f7c5e6455d539c187aa perl-Object-Accessor-0.34-130.el6_4.i686.rpm 5bced84fd961821e600c2658dfd4682b1dc70c5ca8e1af4f4d3c53968172f540 perl-Package-Constants-0.02-130.el6_4.i686.rpm f4105e9e81cc9744f9131e688a7a6546277ee6fbfd3693b74002d92c5b60002a perl-Params-Check-0.26-130.el6_4.i686.rpm 0e6ea306033bdf09b7ccfcc6786f7a151798d3ad168985d58c8bbb962e7d8f73 perl-parent-0.221-130.el6_4.i686.rpm b55eea363d08c76ae2c6d92105147d9291ec8d5eada6a5a2f5f33e3621ab1278 perl-Parse-CPAN-Meta-1.40-130.el6_4.i686.rpm 6475faaa37482c0af01bc1f3892c9437a4a44a8e13d42ccc2c046555e23c8f45 perl-Pod-Escapes-1.04-130.el6_4.i686.rpm 27e74340b010984e0b576ba353b7dff54f3bc5b04c4c49366b219216aaebfbc5 perl-Pod-Simple-3.13-130.el6_4.i686.rpm 78a27cc875fd8cf31f3104939f0ccafc7352cd8b7ef4431d7fafe6ea69dd4cee perl-suidperl-5.10.1-130.el6_4.i686.rpm a14445781538bc5f5eabfa96bb2ff67a8694ef7cfdb2377632777697ca35a409 perl-Term-UI-0.20-130.el6_4.i686.rpm 8fdda785891d0b5997d811e638b594b2c33dd85a3891045272d38ff387f217be perl-Test-Harness-3.17-130.el6_4.i686.rpm dac8a8b4384cc7e8260ba52196752c682f275e4c290c1e17c0436a96db172535 perl-Test-Simple-0.92-130.el6_4.i686.rpm 141219e4abee540ed693320500ae136bf5fcba6506026735d2199e64c3598bfe perl-Time-HiRes-1.9721-130.el6_4.i686.rpm 1d9e38a518801f9cfa10200ab8e90a8680ea1c8a4d154d992cac7bea0d4d95df perl-Time-Piece-1.15-130.el6_4.i686.rpm 27a9ea79d3326c291c707e11de67380cee9d2608027e071a0bfce8150389f633 perl-version-0.77-130.el6_4.i686.rpm x86_64: 36c531eca77fa85b20d0bffe21f86c76915d63e89ecb4d96b3511cf7faca7e89 perl-5.10.1-130.el6_4.x86_64.rpm 45e505782ed2b8205f8acb7a737fc04132895b820e7e22f657ee5f514aa27916 perl-Archive-Extract-0.38-130.el6_4.x86_64.rpm b8b503c45b65d72fb99c8b3b53b49caa921979348ca260ad8fba23bbcf69d2e6 perl-Archive-Tar-1.58-130.el6_4.x86_64.rpm fdfd2fad24871d4162b789acd0bc14ed3697fcc79a469bcb56752c1da6af16cb perl-CGI-3.51-130.el6_4.x86_64.rpm 9f56ff33e6350beef0679fb62296822d634b9fa6f6e0f029f6c90d2b3e299a7f perl-Compress-Raw-Bzip2-2.020-130.el6_4.x86_64.rpm 27d8883d0dc0f45cee22d857d225d5b3dafef8e85231c4475871213de99a9bdb perl-Compress-Raw-Zlib-2.020-130.el6_4.x86_64.rpm 29fbef313e60dbb6c31a7c0bb26fc43ccf6dd254892c5581b183cc6f9b02b8be perl-Compress-Zlib-2.020-130.el6_4.x86_64.rpm c99f961edbfd7b0f955b09ddeb13ed99f290bfddbc8da951d8d2527cf18092f5 perl-core-5.10.1-130.el6_4.x86_64.rpm ee3038896ce7f1153527be3892eb8c08fd69d8d2738a442363ac74822c455324 perl-CPAN-1.9402-130.el6_4.x86_64.rpm 033f4490a136e3e996c566ff9f85de2be97a0fca7bd6bbacf62d82074c265e0c perl-CPANPLUS-0.88-130.el6_4.x86_64.rpm 1de9b8954d67907cd816d872df71acf1c0d244cd00ab51307f2d561da8d66437 perl-devel-5.10.1-130.el6_4.i686.rpm a041102efbf47df9dfbd315e90f728caa03607a7b370b92e68dc8e397db76dc8 perl-devel-5.10.1-130.el6_4.x86_64.rpm aede63944a52ee9903491c20036bd2654301f0ede1bf7e9a68d7cf7bbcdd29ee perl-Digest-SHA-5.47-130.el6_4.x86_64.rpm 933b10cb25ce6d17eb586bde50e73d97040ce5c25f6a98800e40a2787361604d perl-ExtUtils-CBuilder-0.27-130.el6_4.x86_64.rpm c5870150204b9aec369703207f22f6bae434c4ba6f288de8c38e0246b4760116 perl-ExtUtils-Embed-1.28-130.el6_4.x86_64.rpm fafc6656e8edd7db8d33a5f229a3df6e2d0a336f8e8495b079b6db5f24bd5550 perl-ExtUtils-MakeMaker-6.55-130.el6_4.x86_64.rpm 26c3291a3ccaaf178d9c5d6aba0d6be7df770da88f13047435389f74abb9155d perl-ExtUtils-ParseXS-2.2003.0-130.el6_4.x86_64.rpm c7219a1eda6d20d32a945c017b93424db60a23bbb6d4ab37f07518107cc3b895 perl-File-Fetch-0.26-130.el6_4.x86_64.rpm 2a39620ced144c31d76a5784f43cd877f5b43be902a3b4999e26a4710147db0e perl-IO-Compress-Base-2.020-130.el6_4.x86_64.rpm ca54d0a5dc5ac96cc64aa8e2faf38c89903ae727502737ae8ea43b3ee0e3920a perl-IO-Compress-Bzip2-2.020-130.el6_4.x86_64.rpm 34c7385a1503dc7909c5e40b6a224ed97fc1e196d278eaad986f83fa75c4ec90 perl-IO-Compress-Zlib-2.020-130.el6_4.x86_64.rpm efa1d7f0f8284ab84c93f7193e1d50e9a9101606b7825f7a6794db271e37593d perl-IO-Zlib-1.09-130.el6_4.x86_64.rpm 2ede10b3befaefa83a3ac46e36f14cead053c98bc87c00d1797b063b8a181358 perl-IPC-Cmd-0.56-130.el6_4.x86_64.rpm 1bde62d33617138d6a3c5697eef715d458d1bb3d589aebc3c3c22efd11bd8c32 perl-libs-5.10.1-130.el6_4.i686.rpm 0b7c5e1ca14ad574a3f5cab3aeb5a3183e7b6a8c3ae47ecad6ec78f238adf28d perl-libs-5.10.1-130.el6_4.x86_64.rpm 44fc82af1845c5cb99534f595b4df8b1fa069db0793ea3625253d644a32e9991 perl-Locale-Maketext-Simple-0.18-130.el6_4.x86_64.rpm ed2410fa5133a4fa610c17c706ca31a24d9900c54632d319a5e1cc274eaddecb perl-Log-Message-0.02-130.el6_4.x86_64.rpm a88725f78c429332407495184bd871beed3f9056292516153dec184d2189467b perl-Log-Message-Simple-0.04-130.el6_4.x86_64.rpm 145e8a5182e8498df055ef209a00991a84a18359f010447323b21f38835fd56d perl-Module-Build-0.3500-130.el6_4.x86_64.rpm 3b881f45bc9cec5ed64f823f11a9a38c1fe052c944d522a19e2458cee08ccf75 perl-Module-CoreList-2.18-130.el6_4.x86_64.rpm be8e1d0610ec0680b44c56a421633ed4f0e1e91719e206e0cf3f2d7b8b9daf2e perl-Module-Load-0.16-130.el6_4.x86_64.rpm 451055dd412ec3a483e0423438f5ac95af1e9d1697f235cec20c8ba6e776929d perl-Module-Load-Conditional-0.30-130.el6_4.x86_64.rpm 6213146df9c3eeb0f9c13cb0f0e7df05dd80a13adeb8a86ae683cfd1bfda5392 perl-Module-Loaded-0.02-130.el6_4.x86_64.rpm 64761093acd289efba7fb4bb3c3461d30f626a96e4d53a05f704addd49fa2647 perl-Module-Pluggable-3.90-130.el6_4.x86_64.rpm 1ef50cad298cd4592d87992ec9cef16557be5af225cd9c8119935a67ae894e7f perl-Object-Accessor-0.34-130.el6_4.x86_64.rpm bd54e84fc4eac4bcda3fac025794273a7b5daf1273a8b5c7f7e57581e4eddae9 perl-Package-Constants-0.02-130.el6_4.x86_64.rpm ef64338aa793b1d19beaea5527a1b47bd36839b3c0f2ea351832b3213dea9721 perl-Params-Check-0.26-130.el6_4.x86_64.rpm d0daba7655d647effc9091e6da9adba7d38fe6406f8e0b979bad6554ddbe39a3 perl-parent-0.221-130.el6_4.x86_64.rpm 96003bfbdc042911283d8cf04c59e9650d65817d65ddd2c8294bfc9f16f3b32d perl-Parse-CPAN-Meta-1.40-130.el6_4.x86_64.rpm 8e3742027adfad111a6f71ee88de7eddeb3993aa206c8f74459c1a4c2956bb3c perl-Pod-Escapes-1.04-130.el6_4.x86_64.rpm d2569717ed6b83cdd904bd1b076a58401ab219c62f0c6a7ca9af4763652e404a perl-Pod-Simple-3.13-130.el6_4.x86_64.rpm f05e7bc5045d7b393444df5d0a085ec77fed867f1945a5bbcdc11374e44faa55 perl-suidperl-5.10.1-130.el6_4.x86_64.rpm abe32553e49c9bcb329dfc662fc383fe3c168173a296ae73db2437d5fa55113c perl-Term-UI-0.20-130.el6_4.x86_64.rpm 564a0fda4e41f20a1b9165dede88060b23544cabcfd4643977bbf284f4a3fc05 perl-Test-Harness-3.17-130.el6_4.x86_64.rpm 6369aa236466bc8b226915bab30116225b6b91d4ad55f7c4c62cfdd18dea2dba perl-Test-Simple-0.92-130.el6_4.x86_64.rpm 8453614f059cb1ca92bd1fdc172fa4342895887896bcca1042fab871e8efc71a perl-Time-HiRes-1.9721-130.el6_4.x86_64.rpm c1c6db49b29013525eb84fabb9a80cc9c6abd333431c3add68433477bad9e891 perl-Time-Piece-1.15-130.el6_4.x86_64.rpm 1e4fbb47d084a8dce46d95f12a0d3fce85416040d87170023baaf8bf83d250be perl-version-0.77-130.el6_4.x86_64.rpm Source: 4aeb1b9c6a196bd1dcbe64d52426bd191b4747e696f6b29de10ee553564e1b20 perl-5.10.1-130.el6_4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 97, Issue 15 ***********************************************

1 0

Softphones for CentOS-6
by James B. Byrne 26 Mar '13

26 Mar '13

I am presently configuring a test Asterisk 11 server based on CentOS-6 and I need to employ a softphone for testing. The base repo has ekiga. The EPEL repo has twinkle. I lack the knowledge of whether other packages exist or might be better suited. Which of the two do you recommend? Or, alternatively, what other package might be a better choice? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

dumb logrotate conf file question
by m.roth＠5-cent.us 26 Mar '13

26 Mar '13

Given the apparent addiction fail2ban keeps finding to the existing logfile - not looking at the *new* one once logrotate runs - I was putting a hack into place in /etc/logrotate.d/syslog. Nothing I find is perfectly clear: I want to restart fail2ban *after* the logs are rotated. Do I put the /sbin/service fail2ban restart after endscript, or do I add a lastaction after endscipt, and put it after *that*? mark

1 0

CentOS-announce Digest, Vol 97, Issue 14
by centos-announce-request＠centos.org 26 Mar '13

26 Mar '13

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2013:0678 CentOS 5 cman Update (Johnny Hughes) 2. CESA-2013:0683 Moderate CentOS 5 axis Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 25 Mar 2013 15:44:51 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2013:0678 CentOS 5 cman Update To: centos-announce(a)centos.org Message-ID: <20130325154451.GA30615(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2013:0678 Upstream details at : https://rhn.redhat.com/errata/RHBA-2013-0678.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 4a7f784bba1c838388c37e4ef955b10997d0a43fb15028d2a241fbcd1b007f9c cman-2.0.115-109.el5.1.i386.rpm 9686f73d8e6c5fd31bb4417c00801309b707818810000c1f4deb007f3a8bb73d cman-devel-2.0.115-109.el5.1.i386.rpm x86_64: 318d1de1b537d49ce45bd4408564aa1d8100345341b03cbcdfa486afa0d76709 cman-2.0.115-109.el5.1.x86_64.rpm 9686f73d8e6c5fd31bb4417c00801309b707818810000c1f4deb007f3a8bb73d cman-devel-2.0.115-109.el5.1.i386.rpm d0e7f5d640a9e6321e7a88a2abe060562e0aa81a3980a3bf224fdc2238b09cee cman-devel-2.0.115-109.el5.1.x86_64.rpm Source: 204fd4a6bd56f0319a9ebe8182e7301787f0f9efb901c17f37835b60c2df942c cman-2.0.115-109.el5.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Mon, 25 Mar 2013 20:27:08 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0683 Moderate CentOS 5 axis Update To: centos-announce(a)centos.org Message-ID: <20130325202708.GA11735(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0683 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0683.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b6235d3a74e62c9c9a29709d6c08f929887057c0556a3e5f1485d8133fb4160b axis-1.2.1-2jpp.7.el5_9.i386.rpm 2186648502e1e67ba6ee53360191cf3e03811d8c36f2ddf1843e654b77e29842 axis-javadoc-1.2.1-2jpp.7.el5_9.i386.rpm 7022df95b8fb6e03d8db13309257ddebe59ea1ceeebd290cfdc81fea67eb86cf axis-manual-1.2.1-2jpp.7.el5_9.i386.rpm x86_64: 681e19cc4c4a716f2973476e64cb7d8224de668eaf00eff68e1b58eec31cb378 axis-1.2.1-2jpp.7.el5_9.x86_64.rpm a12becca6c282eb2c00f0600a1d11fee227f8639c1d3ea9e6b2397a325002725 axis-javadoc-1.2.1-2jpp.7.el5_9.x86_64.rpm a2d033d830bdc598b8c71c92931c8703f8473444a8f0f33d2d900c944f65c09a axis-manual-1.2.1-2jpp.7.el5_9.x86_64.rpm Source: 4a1d19a94f2718aeb962dec15086b5ef12d9422111f25a0336daa67bacf964ec axis-1.2.1-2jpp.7.el5_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 97, Issue 14 ***********************************************

1 0

LVM filters not working?
by Dennis Jacobfeuerborn 26 Mar '13

26 Mar '13

Hi, I'm trying to set up a redundant DRBD system but I'm running into trouble when I try to define a volume group. The physical backing device for the drbd resource /dev/drbd0 is /dev/vdb1. The problem is that when I do a "pvs" on the command line the physical volume is shown as /dev/vdb1. So I tried the following filter in /etc/lvm/lvm.conf: filter = [ "r|/dev/vdb.*|", "a/.*/" But this doesn't seem to haven any effect at all. The system still sees the volumen group on /dev/vdb1. Also various how-to's on the net say I should pay attention to deleting /etc/lvm/cache/.cache which makes sense but this file is never created. Any ideas what might be going on here? I'm trying all of this on CentOS 6. Regards, Dennis

2 1

nscd
by m.roth＠5-cent.us 26 Mar '13

26 Mar '13

Has anyone had problems accessing random websites since going up to 6.4? Since about the day after I got partly upgraded, if I try to access nytimes.com, or orbitz.com, I get server not found. With a lot of work, I, my manager, and the other admin, found that setting options edns0 in /etc/resolv.conf fixed it - I suspect that the network folks updated their internal nameservers (which are M$) about that time... but... we got this Thurs. Friday, I went to look, lunchtime, at a story, and back to the same. Later, and I think I was playing around, it came back. Just now, over lunch, it failed... until I restarted nscd. My manager tells me it's caching... but it seems to be caching momentary failures. So: has anyone else seen oddness that might be related to nscd? mark

5 7

PHP Questions on move from CentOS 5.x to CentOS 6.x
by Max Pyziur 25 Mar '13

25 Mar '13

Greetings, A malfunctioning disk this past week accelerated a lingering decision to move to CentOS 6.x from CentOS 5.x. Most of our content is functioning and being presented as it should be. However, there appear to be php-related issues. Basic squirrelmail (a php-dependent package) works correctly. However, drupal, and other php-dependent parts that call postgresql and mysql databases of our site are not being presented. Apache's log files show a 503 (for postgresql) and 500 (for mysql) errors I'm troubleshooting this through obvious channels (looking at logfiles, searching google, sdiff'ing configuration files). However, if someone has suggestions or answers, please do speak up! Much thanks, Max Pyziur pyz(a)brama.com

2 4

Bonded interfaces - testing
by Dermot 25 Mar '13

25 Mar '13

Hi, I have 2 servers running CentOS 6.3. Each has four 1gb Ethernet ports. I have bonded all four ports on each server and patched them to the same switch (following the instructions at http://wiki.centos.org/TipsAndTricks/BondingInterfaces) I have created aggregated trunks for the servers respective ports on the switch. The switch reports that the ports are up and that the Link Aggregation is enabled. I was under the impression, perhaps falsely, that I would see an improvement in the throughput. I am not sure that I am. I used a utility call nuttcp before the trunking and after to test the throughput. I am seeing miniscule differences in the Mbps. I am not sure that I am testing correctly. Perhaps the speed will not change but the available bandwidth has increased. Is there some way to demonstrate that I am able to transfer data from these two servers at a rate of 4,000Mbs? Does anyone have any thoughts? I pasted some details below increase they have a bearing. Thanks in advance Dermot. ./nuttcp otherserver 1125.6573 MB / 10.03 sec = 941.4967 Mbps 10 %TX 47 %RX cat /proc/net/bonding/bond0 Ethernet Channel Bonding Driver: v3.6.0 (September 26, 2009) Bonding Mode: IEEE 802.3ad Dynamic link aggregation Transmit Hash Policy: layer2 (0) MII Status: up MII Polling Interval (ms): 100 Up Delay (ms): 0 Down Delay (ms): 0 802.3ad info LACP rate: slow Aggregator selection policy (ad_select): stable Active Aggregator Info: Aggregator ID: 2 Number of ports: 4 Actor Key: 17 Partner Key: 420 Partner Mac Address: 10:0d:7f:4c:16:ca Slave Interface: eth0 MII Status: up Speed: 1000 Mbps Duplex: full Link Failure Count: 0 Permanent HW addr: 2c:76:8a:5d:28:1c Aggregator ID: 2 Slave queue ID: 0 Slave Interface: eth1 MII Status: up Speed: 1000 Mbps Duplex: full Link Failure Count: 0 Permanent HW addr: 2c:76:8a:5d:28:1d Aggregator ID: 2 Slave queue ID: 0 Slave Interface: eth2 MII Status: up Speed: 1000 Mbps Duplex: full Link Failure Count: 0 Permanent HW addr: 2c:76:8a:5d:28:1e Aggregator ID: 2 Slave queue ID: 0 Slave Interface: eth3 MII Status: up Speed: 1000 Mbps Duplex: full Link Failure Count: 0 Permanent HW addr: 2c:76:8a:5d:28:1f Aggregator ID: 2 Slave queue ID: 0

2 2

maintaining patches across releases
by Keith Keller 25 Mar '13

25 Mar '13

Hi all, I have what might be a foolish question about patching packages. I am not sure exactly how to phrase the question, so please follow up if it seems as though I'm not being clear. I was looking at this bug which my machines are currently experiencing: https://bugzilla.redhat.com/show_bug.cgi?id=883905 The proposed patch is literally one new line in the XFS codebase. So since the patch is so straightforward, I had a crazy idea that I would build my own kernel with this patch, and test it out to see if it worked. (It's been many years since I built my own kernel, so that would be an adventure in and of itself.) My worry would be, I would want to make sure that I propagated this patch every time I updated the kernel package. Is this something others do regularly? If so, is there a standard way of managing the process of applying one's own patches to a series of source packages, and being able to re-patch and rebuild updated packages? I'm guessing that I just need to build xfs.ko. Are there any gotchas beyond the wiki entry on building your own kernel modules? That page seems to target CentOS 5, not 6, but I imagine the process is quite similar. --keith -- kkeller(a)wombat.san-francisco.ca.us

3 11

Centos 6.3 Network bnx2 Problem on HP DL360
by Woehrle Hartmut SBB CFF FFS (Extern) 25 Mar '13

25 Mar '13

Hello Mailing List I got a severe network error message at a HP DL360 Server. The kernel log says: ----------------------------------- /var/log/messages ----------------------------------------------------------------- Mar 19 15:45:06 server kernel: do_IRQ: 2.168 No irq handler for vector (irq -1) Mar 19 15:45:17 server kernel: bnx2 0000:02:00.1: eth1: DEBUG: intr_sem[0] PCI_CMD[00100446] Mar 19 15:45:17 server kernel: bnx2 0000:02:00.1: eth1: DEBUG: PCI_PM[19002108] PCI_MISC_CFG[92000088] Mar 19 15:45:17 server kernel: bnx2 0000:02:00.1: eth1: DEBUG: EMAC_TX_STATUS[00000008] EMAC_RX_STATUS[00000006] Mar 19 15:45:17 server kernel: bnx2 0000:02:00.1: eth1: DEBUG: RPM_MGMT_PKT_CTRL[40000088] Mar 19 15:45:17 server kernel: bnx2 0000:02:00.1: eth1: DEBUG: HC_STATS_INTERRUPT_STATUS[017f0080] Mar 19 15:45:17 server kernel: bnx2 0000:02:00.1: eth1: DEBUG: PBA[00000000] Mar 19 15:45:17 server kernel: bnx2 0000:02:00.1: eth1: <--- start MCP states dump ---> Mar 19 15:45:17 server kernel: bnx2 0000:02:00.1: eth1: DEBUG: MCP_STATE_P0[0003610e] MCP_STATE_P1[0003610e] Mar 19 15:45:17 server kernel: bnx2 0000:02:00.1: eth1: DEBUG: MCP mode[0000b880] state[80008000] evt_mask[00000500] Mar 19 15:45:17 server kernel: bnx2 0000:02:00.1: eth1: DEBUG: pc[0800adec] pc[0800aeb0] instr[8fb10014] Mar 19 15:45:17 server kernel: bnx2 0000:02:00.1: eth1: DEBUG: shmem states: Mar 19 15:45:17 server kernel: bnx2 0000:02:00.1: eth1: DEBUG: drv_mb[0103000f] fw_mb[0000000f] link_status[0000006f] drv_pulse_mb[0000432b] Mar 19 15:45:17 server kernel: bnx2 0000:02:00.1: eth1: DEBUG: dev_info_signature[44564903] reset_type[01005254] condition[0003610e] Mar 19 15:45:17 server kernel: bnx2 0000:02:00.1: eth1: DEBUG: 000003cc: 44444444 44444444 44444444 00000a3c Mar 19 15:45:17 server kernel: bnx2 0000:02:00.1: eth1: DEBUG: 000003dc: 0ffeffff 0000ffff ffffffff ffffffff Mar 19 15:45:17 server kernel: bnx2 0000:02:00.1: eth1: DEBUG: 000003ec: 00000000 00000000 00000000 00000002 Mar 19 15:45:17 server kernel: bnx2 0000:02:00.1: eth1: DEBUG: 0x3fc[0000ffff] Mar 19 15:45:17 server kernel: bnx2 0000:02:00.1: eth1: <--- end MCP states dump ---> Mar 19 15:45:17 server kernel: bnx2 0000:02:00.1: eth1: NIC Copper Link is Down Mar 19 15:45:20 server kernel: bnx2 0000:02:00.1: eth1: NIC Copper Link is Up, 1000 Mbps full duplex ----------------------------------------------------------------------------------------------------------------------------------- Does anyone know that problem? System is Centos 6.3 Kernel Linux server 2.6.32-279.5.2.el6.centos.plus.x86_64 #1 SMP Fri Aug 24 00:25:34 UTC 2012 x86_64 x86_64 x86_64 GNU/Linux Thanks Hartmut

4 6

OT: Please join the Centos team at http://folding.stanford.edu/
by Fred Smith 25 Mar '13

25 Mar '13

Hi all! I'm not the team captain, I'm just (one of the few remaining) active team members. There are 78 registered members, only four of us are currently active. So, come on, gang, lets show some team spirit! If you don't know what I'm talking about, please visit: http://folding.stanford.edu/ to find out. it's a big scientific project to examine the way proteins fold, and what kinds of things can (and do) go wrong when they mis-fold. Many illnesses are caused or complicated by mis-folding of proteins. It's a very computationally intensive field, and they need all the CPUs and/or GPUs they can get to be cranking away on their simulations. Check out team centos and if you can spare some CPU cycles, please join up and contribute. Team statistics page: http://fah-web.stanford.edu/cgi-bin/main.py?qtype=teampage&teamnum=48721 Team captain's page: http://www.sharons.org.uk/cf.html Note that the info there on how to set up the client is now obsolete. The home page (given above) of the project will allow you to download the latest client software and show you how to install it. Unlike earlier versions, this one is easy to install and run. Come on Centos folks, join the team! :) Fred -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ---------------------------- Do you not know? Have you not heard? The LORD is the everlasting God, the Creator of the ends of the earth. He will not grow tired or weary, and his understanding no one can fathom. ----------------------------- Isaiah 40:28 (niv) -----------------------------

1 0

CentOS 6 : Tip for significantly increasing battery life / reducing power consumption (Thinkpad X220 Tablet)
by Mathieu Baudier 24 Mar '13

24 Mar '13

Hello, I was not happy with the power consumption of CentOS 6 x86_64 on a new Lenovo Thinkpad x220 Tablet and I worked on reducing it. I just wanted to share with the list one of the changes which gave me the most significant improvement. As per http://www.williambrownstreet.net/blog/?p=387, add the following kernel arguments to the GRUB boot configuration: pcie_aspm=force i915.i915_enable_rc6=1 i915.lvds_downclock=1 i915.i915_enable_fbc=1 (in /boot/efi/EFI/redhat/grub.conf since I use EFI, /boot/grub/grub.conf otherwise) As measured using PowerTop, this made the power consumption decrease from 20W to 11W ! (I had already decreased it from 25W to 20W with the usual tips of disabling hardware, shutting down services, switching tuned profiles, etc.) All in all, battery time was more than multiplied by two, and the computer is now much more silent since the fan is not always running like mad in order to cool the processor. The bottom of the laptop is not anymore hot as hell. I don't know whether this would have an impact on other hardware, but it may be worth looking at it (even on servers?), since the above link points to descriptions of a regression in the kernel which seems more general. As a side note, the Power Management Guide of Red Hat is a good resource (analysis tools + tuned profiles): http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html-single/Po… Cheers, Mathieu PS: Do you think I should book a bug in the upstream bug tracker?

5 8

Re: [CentOS] PHP Questions on move from CentOS 5.x to CentOS 6.x (fwd)
by Max Pyziur 24 Mar '13

24 Mar '13

---------- Forwarded message ---------- Date: Sun, 24 Mar 2013 12:52:37 -0400 (EDT) From: Max Pyziur <pyz(a)brama.com> To: Reindl Harald <h.reindl(a)thelounge.net> Cc: CentOS mailing list <centos(a)centos.org> Subject: Re: [CentOS] PHP Questions on move from CentOS 5.x to CentOS 6.x On Sun, 24 Mar 2013, Reindl Harald wrote: > > > Am 24.03.2013 17:38, schrieb Max Pyziur: >> In both mysql and postgresql I dumped to text and restored on the new >> CentOS 6 box/server. >> >> For postgresql, that's the recommendation. >> >> So far from command line and their respective command-line monitors, the >> mysql and postgresql databases are correctly functioning. >> >> It's the php-enabled interfaces that are the issue for me > > and what says "php -m" or "rpm -qa | grep php"? On CentOS 5 php-5.1.6-39.el5_8 php-cli-5.1.6-39.el5_8 php-common-5.1.6-39.el5_8 php-devel-5.1.6-39.el5_8 php-gd-5.1.6-39.el5_8 php-ldap-5.1.6-39.el5_8 php-mbstring-5.1.6-39.el5_8 php-mcrypt-5.1.6-15.el5.centos.1 phpmyadmin-2.11.11.3-2.el5.rf php-mysql-5.1.6-39.el5_8 php-pdo-5.1.6-39.el5_8 php-pgsql-5.1.6-39.el5_8 On CentOS 6 php-5.3.3-22.el6.x86_64 php-cli-5.3.3-22.el6.x86_64 php-common-5.3.3-22.el6.x86_64 php-enchant-5.3.3-22.el6.x86_64 php-gd-5.3.3-22.el6.x86_64 php-IDNA_Convert-0.8.0-1.el6.noarch php-ldap-5.3.3-22.el6.x86_64 php-mbstring-5.3.3-22.el6.x86_64 php-mcrypt-5.3.3-1.el6.x86_64 phpMyAdmin-3.5.7-1.el6.noarch php-mysql-5.3.3-22.el6.x86_64 php-pdo-5.3.3-22.el6.x86_64 php-pear-1.9.4-4.el6.noarch php-pgsql-5.3.3-22.el6.x86_64 php-php-gettext-1.0.11-3.el6.noarch php-PHPMailer-5.2.2-1.el6.noarch php-process-5.3.3-22.el6.x86_64 php-simplepie-1.3.1-3.el6.noarch php-xml-5.3.3-22.el6.x86_64 Diffing php -m results: sdiff -s phpM-CentOS6.txt phpM-CentOS5.txt Core < dom | dbase enchant < ereg < fileinfo < filter < json < > mime_magic Phar < readline | pspell sqlite3 < xmlreader < xmlwriter < xsl < zip < > > are the extensions installed/loaded? Please clarify; what extensions? MP pyz(a)brama.com

1 0

[Fwd: Re: PHP Questions on move from CentOS 5.x to CentOS 6.x]
by Max Pyziur 24 Mar '13

24 Mar '13

---------------------------- Original Message ---------------------------- Subject: Re: [CentOS] PHP Questions on move from CentOS 5.x to CentOS 6.x From: "Max Pyziur" <pyz(a)brama.com> Date: Sun, March 24, 2013 1:14 pm To: "Reindl Harald" <h.reindl(a)thelounge.net> -------------------------------------------------------------------------- > > > Am 24.03.2013 17:52, schrieb Max Pyziur: >> Diffing php -m results: > > a diff does not interest > i requested explcitly the output of "php -m" on the new machine On CentOS 5 it is: php -m [PHP Modules] bz2 calendar ctype curl date dbase exif ftp gd gettext gmp hash iconv ldap libxml mbstring mcrypt mime_magic mysql mysqli openssl pcntl pcre PDO pdo_mysql pdo_pgsql pdo_sqlite pgsql posix pspell Reflection session shmop SimpleXML sockets SPL standard sysvmsg sysvsem sysvshm tokenizer wddx xml zlib [Zend Modules] On CentOS 6 php -m [PHP Modules] bz2 calendar Core ctype curl date dom enchant ereg exif fileinfo filter ftp gd gettext gmp hash iconv json ldap libxml mbstring mcrypt mysql mysqli openssl pcntl pcre PDO pdo_mysql pdo_pgsql pdo_sqlite pgsql Phar posix readline Reflection session shmop SimpleXML sockets SPL sqlite3 standard sysvmsg sysvsem sysvshm tokenizer wddx xml xmlreader xmlwriter xsl zip zlib [Zend Modules] > the packaging may have changed and things which are now loaded > via "extension = xyz.so" maybe built-in in the older realase > or vice versa and "php -m " shows what is loaded without make > a difference of static or loaded as module > >>> are the extensions installed/loaded? >> >> Please clarify; what extensions? > > the database-extensions you need? > > [root@centos ~]# php -m | grep mysql > mysql > mysqli > pdo_mysql Like this?: php -m | egrep '(mysql|pgsql)' mysql mysqli pdo_mysql pdo_pgsql pgsql MP pyz(a)brama.com

1 0

Re: [CentOS] PHP Questions on move from CentOS 5.x to CentOS 6.x
by Max Pyziur 24 Mar '13

24 Mar '13

On Sun, 24 Mar 2013, Reindl Harald wrote: > > > Am 24.03.2013 17:38, schrieb Max Pyziur: >> In both mysql and postgresql I dumped to text and restored on the new >> CentOS 6 box/server. >> >> For postgresql, that's the recommendation. >> >> So far from command line and their respective command-line monitors, the >> mysql and postgresql databases are correctly functioning. >> >> It's the php-enabled interfaces that are the issue for me > > and what says "php -m" or "rpm -qa | grep php"? On CentOS 5 php-5.1.6-39.el5_8 php-cli-5.1.6-39.el5_8 php-common-5.1.6-39.el5_8 php-devel-5.1.6-39.el5_8 php-gd-5.1.6-39.el5_8 php-ldap-5.1.6-39.el5_8 php-mbstring-5.1.6-39.el5_8 php-mcrypt-5.1.6-15.el5.centos.1 phpmyadmin-2.11.11.3-2.el5.rf php-mysql-5.1.6-39.el5_8 php-pdo-5.1.6-39.el5_8 php-pgsql-5.1.6-39.el5_8 On CentOS 6 php-5.3.3-22.el6.x86_64 php-cli-5.3.3-22.el6.x86_64 php-common-5.3.3-22.el6.x86_64 php-enchant-5.3.3-22.el6.x86_64 php-gd-5.3.3-22.el6.x86_64 php-IDNA_Convert-0.8.0-1.el6.noarch php-ldap-5.3.3-22.el6.x86_64 php-mbstring-5.3.3-22.el6.x86_64 php-mcrypt-5.3.3-1.el6.x86_64 phpMyAdmin-3.5.7-1.el6.noarch php-mysql-5.3.3-22.el6.x86_64 php-pdo-5.3.3-22.el6.x86_64 php-pear-1.9.4-4.el6.noarch php-pgsql-5.3.3-22.el6.x86_64 php-php-gettext-1.0.11-3.el6.noarch php-PHPMailer-5.2.2-1.el6.noarch php-process-5.3.3-22.el6.x86_64 php-simplepie-1.3.1-3.el6.noarch php-xml-5.3.3-22.el6.x86_64 Diffing php -m results: sdiff -s phpM-CentOS6.txt phpM-CentOS5.txt Core < dom | dbase enchant < ereg < fileinfo < filter < json < > mime_magic Phar < readline | pspell sqlite3 < xmlreader < xmlwriter < xsl < zip < > > are the extensions installed/loaded? Please clarify; what extensions? MP pyz(a)brama.com

1 0

OT: A lightweight monitor software
by C. L. Martinez 23 Mar '13

23 Mar '13

Hi all, I have a test lab installed over an ESXi 5.1 host that contains 5 CentOS vm guests. I would like to monitor CPU, RAM and Network for these vm and ESXi host. Zabbix and Nagios are too to accomplish this task. Does anyone know any lightweight openosurce soft to do this?? Thanks.

17 23

CentOS-announce Digest, Vol 97, Issue 13
by centos-announce-request＠centos.org 23 Mar '13

23 Mar '13

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEEA-2013:0674 CentOS 5 tzdata Update (Johnny Hughes) 2. CEEA-2013:0674 CentOS 6 tzdata Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 22 Mar 2013 10:15:32 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEEA-2013:0674 CentOS 5 tzdata Update To: centos-announce(a)centos.org Message-ID: <20130322101532.GA17790(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2013:0674 Upstream details at : https://rhn.redhat.com/errata/RHEA-2013-0674.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 435ae45a48d892eacda1abf3ed117156f354d41a1c896ce3632ea4e2557300d0 tzdata-2013b-1.el5.i386.rpm 980dab577b3a69c609412a349b7d690388d26d353f3bd0ff1cdb239e006d3854 tzdata-java-2013b-1.el5.i386.rpm x86_64: e0e942a9f3778363eca8d0bf06a7f088ab68984a24db49f5af9f4a44c6ca845a tzdata-2013b-1.el5.x86_64.rpm 5b5b46b53b597cfad585423065b292cc315d03c65aaa4ca73d1bf273b6c291e3 tzdata-java-2013b-1.el5.x86_64.rpm Source: dcfe8ea539ab8266fcdaff08d233c49d0c7ece5257beddf3af5c3ab422a6f362 tzdata-2013b-1.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Fri, 22 Mar 2013 12:05:17 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEEA-2013:0674 CentOS 6 tzdata Update To: centos-announce(a)centos.org Message-ID: <20130322120517.GA23677(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2013:0674 Upstream details at : https://rhn.redhat.com/errata/RHEA-2013-0674.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 5d9ee77be4c1ee9778c819a082458869aaad6d4613092127b76f65f8878d76c3 tzdata-2013b-1.el6.noarch.rpm ae49a41c6f95a9ae76a97027bd1a04264881bbbd5e8d782323e5add4eef9fa3f tzdata-java-2013b-1.el6.noarch.rpm x86_64: 5d9ee77be4c1ee9778c819a082458869aaad6d4613092127b76f65f8878d76c3 tzdata-2013b-1.el6.noarch.rpm ae49a41c6f95a9ae76a97027bd1a04264881bbbd5e8d782323e5add4eef9fa3f tzdata-java-2013b-1.el6.noarch.rpm Source: 289dcd9845ad9aff7f693f7d216ffc40f3b788b8c358157250a277e9a75eca02 tzdata-2013b-1.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 97, Issue 13 ***********************************************

1 0

Re: [CentOS] CentOS 6.4 x86_64 VM Install freezes
by Robert Heller 22 Mar '13

22 Mar '13

At Thu, 21 Mar 2013 20:54:04 -0400 Robert Heller <heller(a)deepsoft.com> wrote: > > At Thu, 21 Mar 2013 16:04:22 -0700 CentOS mailing list <centos(a)centos.org> wrote: > > > > > On 3/21/2013 3:42 PM, Robert Heller wrote: > > > Is it because some package from the second disk is needed? Do I have to > > > create a merged version of the DVDs? Or is something else wrong? > > > > > > > > I put a mirror of this, http://mirror.centos.org/centos-6/6/os/x86_64/ > > on a local http server > > > > then I use the netinstall iso to boot the system or VM and have the > > kickstart file point to the http url to run the install. if you do a > > pxe boot of the netinstall image, even better. > > I created a local O/S repo by 'merging' the two DVD isos (copied DVD 1 > to directory mounted under /var/www and then copied the contents of the > Packages directory of the second DVD into the copy of the Packages > directory) and then used this local repo as the install source. Same > thing -- it hangs at selinux-policy-targeted-3.7.19-195.el6.noarch. CPU > busy for awhile, then virtually zero CPU usage. Is it a memory problem? > I've only allocated 1gig of RAM to this VM -- is that too little? Is > there something 'special' about > selinux-policy-targeted-3.7.19-195.el6.noarch? OK, I managed to install the VM. I did a 'Minumal-Desktop' install and then installed the 300+ additional packages after the 'Minumal-Desktop' completed and the VM rebooted (I used the package list from the 32-bit 'Development-Workstation' install I did earlier). I still don't know why selinux-policy-targeted-3.7.19-195.el6.noarch caused the install to go off into never-never land... There was no problem doing a 'Development-Workstation' install of the 32-bit version. My *only* guess was the 1gig was not enough RAM for selinux-policy-targeted post-install script with large number of installed packages, but there were no error messages, so I really don't know what was going on. > > My next option is to just treat this like I did for the Ubuntu VMs: do a > *native* install on a scratch disk and then copy it over to the lvm > volume. This means I will have burn two DVDs... Argggg. > > > > > > -- Robert Heller -- 978-544-6933 / heller(a)deepsoft.com Deepwoods Software -- http://www.deepsoft.com/ () ascii ribbon campaign -- against html e-mail /\ www.asciiribbon.org -- against proprietary attachments

2 1

Problems with 'iptables'
by Andrey B. Kiselev 22 Mar '13

22 Mar '13

Hello! Sorry if this question is already asked, but I not finding answer for it... I have server with CentOS 6.4, later it will be router for home network. When I tried tune iptables I have error: [root@gateway sysconfig]# iptables -t NAT -A POSTROUTING -o eth0 -j MASQUERADE iptables v1.4.7: can't initialize iptables table `NAT': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded. iptables 1.4.7 (latest version), custom kernel 3.8.3. from kernel.org (too latest version) How to fix this error, it's desirable without rebuild kernel?

3 4

updating to 6.4 broke olvwm/openwin
by Miranda Hawarden-Ogata 22 Mar '13

22 Mar '13

This morning a handful of workstations got upgraded from 6.3 to 6.4 and things seemed to be functional, until we tried to log in to one of our instrument accounts that for various reasons uses olvwm/openwin as the desktop (and no, I don't have the option of changing that at this time). The desktop appears to load correctly, and mouse-focus and clicking appears to work, but the .openwin-menu entries no longer function other than clicking "exit" to log out of the session. I've tried reinstalling xview and xview-client rpms, but that doesn't resolve it. I don't think it's an issue with the user account, as the underlying commands work when I su and execute them in an xterm. I was also able to reproduce the problem on three separate computers. I don't usually have to deal with these desktop issues so I'm hella rusty when it comes to debugging them. Does anyone have any tidbits to point me in the right direction to fix this? (Hopefully soon, since we are supposed to use this account for observations tonight) -- Thanks! Miranda

3 6

CentOS 6.4 on Dell R320 64 Bit.
by Kaushal Shriyan 22 Mar '13

22 Mar '13

Hi, I have installed CentOS 6.4 on Dell Server R320 64bit with UEFI BIOS. Do i need both /boot and /boot/efi partitions. Please help me understand the difference between these. Regards, Kaushal

2 2

raid 1 question
by Paras pradhan 22 Mar '13

22 Mar '13

Hi, I have a server with 2 disks. Installed centos 5.9 with raid1. I created /dev/md0 to hold "/" and /dev/md1 for swap and nothing else. Grub is installed on /dev/md0. After the successful installation, the server does not boot. I don't see the boot loader . I see a blank cursor blinking. What have I done wrong? Thanks Paras.

9 21

Memcache timeouts?
by Rafał Radecki 22 Mar '13

22 Mar '13

Hi All. I am currently using memcache daemon in version 1.4.15 on one of my servers. The second one is executing php scripts which use mentioned memcache daemon (php53-pecl-memcache-2.2.5). Memcache server: CentOS release 6.3 (Final) 2.6.32-279.5.2.el6.centos.plus.x86_64 uptime 184 days PHP server: CentOS release 6.3 (Final) 2.6.32-279.19.1.el6.centos.plus.x86_64 uptime 43 days The memcache server gets about: - 250Mb/s traffic - 4500 connections/s On PHP server I get sometimes timeouts, ~20-30 daily. Both servers are not swapping, they have free memory, cpu is ~40% used max. But I have found some errors in netstat -s: Memcache server: TCP 7251 failed connection attempts (incrementing) 56447 connection resets received (incrementing) TcpExt 36 packets pruned from receive queue because of socket buffer overrun (not incrementing) 2820 packets collapsed in receive queue due to low socket buffer (not incrementing) 459479 connections reset due to unexpected data (incrementing) PHP server: TCP 540 failed connection attempts (incrementing) 381066 connection resets received (incrementing) TcpExt 7194 packets pruned from receive queue because of socket buffer overrun (incrementing) 250104 packets collapsed in receive queue due to low socket buffer (incrementing) 2447931 connections reset due to unexpected data (incrementing) I have tuned tcp/ip a bit: net.ipv4.tcp_fin_timeout = 5 net.ipv4.tcp_tw_reuse = 1 net.core.somaxconn = 1024 net.ipv4.tcp_max_syn_backlog = 4196 net.core.netdev_max_backlog = 4196 net.ipv4.tcp_sack = 0 net.ipv4.ip_local_port_range = 8192 65534 net.core.rmem_max = 8388608 net.core.wmem_max = 8388608 net.ipv4.tcp_rmem = 4096 65536 8388608 net.ipv4.tcp_wmem = 4096 65536 8388608 and set txqueuelen for interfaces (1Gb/s) to 5000. but where to look next? May it be so that the php client version is buggy? Any other tips? Best regards, Rafal.

2 2

ntfsprogs update probs anyone?
by Phil Savoie 22 Mar '13

22 Mar '13

Hi All, Not sure I understand the error message: yum update Loaded plugins: fastestmirror, refresh-packagekit, security Loading mirror speeds from cached hostfile * base: less.cogeco.net * elrepo: elrepo.org * extras: centos.mirror.rafal.ca * rpmforge: mirror.cpsc.ucalgary.ca * updates: centos.mirror.rafal.ca Setting up Update Process Resolving Dependencies --> Running transaction check ---> Package fuse-ntfs-3g.x86_64 0:2010.10.2-1.el6.rf will be updated ---> Package fuse-ntfs-3g.x86_64 0:2013.1.13-1.el6.rf will be an update ---> Package ntfsprogs.x86_64 0:1.13.1-1.el6.rf will be obsoleted --> Processing Dependency: ntfsprogs = 1.13.1-1.el6.rf for package: gnome-vfs2-ntfs-1.13.1-1.el6.rf.x86_64 ---> Package ntfsprogs.x86_64 0:2013.1.13-1.el6.rf will be obsoleting ---> Package rpmforge-release.x86_64 0:0.5.2-2.el6.rf will be updated ---> Package rpmforge-release.x86_64 0:0.5.3-1.el6.rf will be an update --> Finished Dependency Resolution Error: Package: gnome-vfs2-ntfs-1.13.1-1.el6.rf.x86_64 (@rpmforge) Requires: ntfsprogs = 1.13.1-1.el6.rf Removing: ntfsprogs-1.13.1-1.el6.rf.x86_64 (@rpmforge) ntfsprogs = 1.13.1-1.el6.rf Obsoleted By: ntfsprogs-2013.1.13-1.el6.rf.x86_64 (rpmforge) ntfsprogs = 2013.1.13-1.el6.rf You could try using --skip-broken to work around the problem You could try running: rpm -Va --nofiles --nodigest But rpm -q reports: rpm -q gnome-vfs2 ntfsprogs gnome-vfs2-2.24.2-6.el6.x86_64 ntfsprogs-1.13.1-1.el6.rf.x86_64 Please, what is the problem? Thank you, Phil

3 3

CentOS-announce Digest, Vol 97, Issue 12
by centos-announce-request＠centos.org 22 Mar '13

22 Mar '13

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2013:0668 Moderate CentOS 5 boost Update (Johnny Hughes) 2. CEBA-2013:0664 CentOS 6 libvirt Update (Johnny Hughes) 3. CESA-2013:0668 Moderate CentOS 6 boost Update (Johnny Hughes) 4. CESA-2013:0669 Moderate CentOS 6 qt Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 21 Mar 2013 19:01:31 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0668 Moderate CentOS 5 boost Update To: centos-announce(a)centos.org Message-ID: <20130321190131.GA4754(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0668 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0668.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: ba764a6076db6a713e10a2c1652389b83a51ffca053c9bedb1a2042e56bff16c boost-1.33.1-16.el5_9.i386.rpm 1f0ee25334066a5506eb6fc844269b7b49b4e594ddf39d1a4a9c4b42d8a64d34 boost-devel-1.33.1-16.el5_9.i386.rpm 5935c93cefebd1d823058d86407a04d9d5867cbb16d2031f56cc9b0490560acd boost-doc-1.33.1-16.el5_9.i386.rpm x86_64: ba764a6076db6a713e10a2c1652389b83a51ffca053c9bedb1a2042e56bff16c boost-1.33.1-16.el5_9.i386.rpm ad8bf12bb31b1fb29e13a3e569c23b92d32b207f333f3b1f62d9e88d93300f68 boost-1.33.1-16.el5_9.x86_64.rpm 1f0ee25334066a5506eb6fc844269b7b49b4e594ddf39d1a4a9c4b42d8a64d34 boost-devel-1.33.1-16.el5_9.i386.rpm 8b8f52f9c82ca92cf4d826c1d9e9f649a401c7147cc8fe282b07069a03e36d55 boost-devel-1.33.1-16.el5_9.x86_64.rpm f220c3e51a9799d7fc21b13c4c317c85b1a37a8234eddb48b9806e99ca89ce71 boost-doc-1.33.1-16.el5_9.x86_64.rpm Source: fa987700ec328ebea8d36bf87dfd3e12aa28f7620745898012ab63274a82e0a7 boost-1.33.1-16.el5_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Thu, 21 Mar 2013 22:36:00 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2013:0664 CentOS 6 libvirt Update To: centos-announce(a)centos.org Message-ID: <20130321223600.GA15392(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2013:0664 Upstream details at : https://rhn.redhat.com/errata/RHBA-2013-0664.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 9306b8697e6984f89a7a7c6aadf25fa36a723fd75befcbfc87bf217307fc3ba2 libvirt-0.10.2-18.el6_4.2.i686.rpm 203b06fea1b13367d509cbe13d0e2e67649020c75c5385cb4eb1c811d9616e2a libvirt-client-0.10.2-18.el6_4.2.i686.rpm d74ee0db8c1257144590be01d1e29df7e36721b6d6e39d8f8d4e1c0a7fdf0d0e libvirt-devel-0.10.2-18.el6_4.2.i686.rpm 019ed79051b953e9374afc13f9e2fb7bb40b887429e24649b87bfda37de830fe libvirt-python-0.10.2-18.el6_4.2.i686.rpm x86_64: 39fa0ca0537967cb4c41d67e6cc015dfd1b2d4a294d26988c2b5998b954205da libvirt-0.10.2-18.el6_4.2.x86_64.rpm 203b06fea1b13367d509cbe13d0e2e67649020c75c5385cb4eb1c811d9616e2a libvirt-client-0.10.2-18.el6_4.2.i686.rpm 58fa9cba52c404d2754c6f0c32214e429b669505c8514e14f8972b35cf42881a libvirt-client-0.10.2-18.el6_4.2.x86_64.rpm d74ee0db8c1257144590be01d1e29df7e36721b6d6e39d8f8d4e1c0a7fdf0d0e libvirt-devel-0.10.2-18.el6_4.2.i686.rpm 342c9045c2b3858669250fa070cb7fe30c05d29548d2a1ba56552f551014353d libvirt-devel-0.10.2-18.el6_4.2.x86_64.rpm 908bd9dafee6506a5b6cd5641970c0467159bb43cbc9a57094e8c4135c9976c5 libvirt-lock-sanlock-0.10.2-18.el6_4.2.x86_64.rpm 555bbc3ba9fd2dafad65ec46c685b76ca3ca5eab330fea5c48c35c3eca84ddfe libvirt-python-0.10.2-18.el6_4.2.x86_64.rpm Source: 3932736a24b76db42d7d7d5546b577b0ad9429d35c26af06795cae1ef442baff libvirt-0.10.2-18.el6_4.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Thu, 21 Mar 2013 22:37:55 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0668 Moderate CentOS 6 boost Update To: centos-announce(a)centos.org Message-ID: <20130321223755.GA15696(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0668 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0668.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d6a3026955792dabaaaa6b0eadcfde367338bcc977042a71e459e08c93ed8bb8 boost-1.41.0-15.el6_4.i686.rpm e7b494bf39887f27d53d0927481ecb2b352c6a2050ccda559b4c4b2c168d55a6 boost-date-time-1.41.0-15.el6_4.i686.rpm b2d0a40afd804cce0905c5029ba088c14386be06fd1115697049ac5baa332e0b boost-devel-1.41.0-15.el6_4.i686.rpm bbb24c24866423c1a5de20aa6c6d80c81459641e41d3f5f43f1d2869b383072f boost-doc-1.41.0-15.el6_4.i686.rpm b920ba04e5ade12575ba655357a0d0b720347a594b991da83dbe331af3fc45ce boost-filesystem-1.41.0-15.el6_4.i686.rpm 52fb005e147b8056fb73433415ec6c81f00ca844615d0cf40f1134f312920334 boost-graph-1.41.0-15.el6_4.i686.rpm 9c849eef5a079e66a1793d2e0f4eabc499d883298a72055339aa32e989cdbf77 boost-graph-mpich2-1.41.0-15.el6_4.i686.rpm a581db0b2a482490e6f97662d5f0f9aae349db7ca4e1c6a77e84bb18b1bf3289 boost-graph-openmpi-1.41.0-15.el6_4.i686.rpm 97ed66a4780a9d3a5dd79d8df3bde341f9affbf2eac25e568cf7b28e5e1c9e8b boost-iostreams-1.41.0-15.el6_4.i686.rpm f2aeff031b689dd42236c8cd886f6ef86d73b3de8fc2b9407046886993f78018 boost-math-1.41.0-15.el6_4.i686.rpm 9859bae2b1eafa6b00fe7eece9c64869b2db2278433527508097123fcfe71bba boost-mpich2-1.41.0-15.el6_4.i686.rpm 4b0fac7d57ae02edd2c8a98b6e78fcd8062b66710348db6de787cb3849b56d71 boost-mpich2-devel-1.41.0-15.el6_4.i686.rpm 7fa84a2db289ade2b9789df997d32397fd617a72c57ed704d8108a28d71f2402 boost-mpich2-python-1.41.0-15.el6_4.i686.rpm ea57b5144709c251788447c573314eec91ab4a4c484243c992c1d466a39992f1 boost-openmpi-1.41.0-15.el6_4.i686.rpm f171ccba0cc471e962671278d4f528b8dd4f378b92893750d9dbbbb7e29451bb boost-openmpi-devel-1.41.0-15.el6_4.i686.rpm f1d4e4c6b9b9fe28c0b00e8e5a2b95adec712156f8d99579e7d9b2932454490d boost-openmpi-python-1.41.0-15.el6_4.i686.rpm 89b422de1923356dcffe23076f0013b17596fe7d0bee54b61bedde4ed56456e6 boost-program-options-1.41.0-15.el6_4.i686.rpm dc42f787f1e2bfa9ec5a08184a07c54491bb9c0a3f5b95f00d2df90b45cd4938 boost-python-1.41.0-15.el6_4.i686.rpm 37b01100e5dcf9395f2c438b353f5493ca1bdf6f864ca0b75f5743cbfa11f4f9 boost-regex-1.41.0-15.el6_4.i686.rpm d527418821d25c1491d64078d790f29fc2cd2ff65dbc5eb0518158a49dd84b1f boost-serialization-1.41.0-15.el6_4.i686.rpm 8bf0840f16537593637627bd7770516ff1952d2cb6ad391c60b3a49e47f82ec8 boost-signals-1.41.0-15.el6_4.i686.rpm be0767c01b7db294d95173a6034aa70aa313f64bf6938cdcf10cb47d6ac80575 boost-static-1.41.0-15.el6_4.i686.rpm b08ff29e8e2c8caf4456ae2125b70e37989ff98451026ebe87664318e1d8bd8f boost-system-1.41.0-15.el6_4.i686.rpm 827cbad02ad051987cb825fe8cd5879dcd7503db37ef0daa1c1f7786ae673032 boost-test-1.41.0-15.el6_4.i686.rpm 0cbb2138a39f5306b7781a871e376586cc86035ba96b4b9650a384b799c19468 boost-thread-1.41.0-15.el6_4.i686.rpm 124e045b8b9a509e893f6ecced29f5250338a8c4be70f0b2320336f37281c3a1 boost-wave-1.41.0-15.el6_4.i686.rpm x86_64: 0fed4e58ca5e647c1ef9ef35a37d5c8a0900db83883326dfdbb7f423ba53841c boost-1.41.0-15.el6_4.x86_64.rpm e7b494bf39887f27d53d0927481ecb2b352c6a2050ccda559b4c4b2c168d55a6 boost-date-time-1.41.0-15.el6_4.i686.rpm 4ee586f527c27cb5d5fc1ccf6397a65b1212e7374bf144e8c4319df5523fc2ff boost-date-time-1.41.0-15.el6_4.x86_64.rpm b2d0a40afd804cce0905c5029ba088c14386be06fd1115697049ac5baa332e0b boost-devel-1.41.0-15.el6_4.i686.rpm fdd522cc1220a2befb62fbedeedbae8c7f4c5c68104c442adf413fdc29cc4469 boost-devel-1.41.0-15.el6_4.x86_64.rpm ddd18585307945feff98490701b16bb76b8da693d45ab65165c2f4a57654a2d9 boost-doc-1.41.0-15.el6_4.x86_64.rpm b920ba04e5ade12575ba655357a0d0b720347a594b991da83dbe331af3fc45ce boost-filesystem-1.41.0-15.el6_4.i686.rpm bdd903d6bd47d5bbf27e7b35688d444ae840a52f1bbfc98048fff38b61e60138 boost-filesystem-1.41.0-15.el6_4.x86_64.rpm 52fb005e147b8056fb73433415ec6c81f00ca844615d0cf40f1134f312920334 boost-graph-1.41.0-15.el6_4.i686.rpm 591e4238696239038ea1e4105e132e71c5083e1a0fb74e54d395899e27f25bd3 boost-graph-1.41.0-15.el6_4.x86_64.rpm 9c849eef5a079e66a1793d2e0f4eabc499d883298a72055339aa32e989cdbf77 boost-graph-mpich2-1.41.0-15.el6_4.i686.rpm 5735aa1f5873ae3010850a834b326cdab084688d95a0693d28dce54981838bde boost-graph-mpich2-1.41.0-15.el6_4.x86_64.rpm 5eec8c02103955359da7fd156af71559da947d1728daad32ab851b6776fc2fc4 boost-graph-openmpi-1.41.0-15.el6_4.x86_64.rpm 97ed66a4780a9d3a5dd79d8df3bde341f9affbf2eac25e568cf7b28e5e1c9e8b boost-iostreams-1.41.0-15.el6_4.i686.rpm b990f4c777ed2590dfd80850370efab78089ac060d8af2677a6834542a1ea4ef boost-iostreams-1.41.0-15.el6_4.x86_64.rpm fd4f07c3e1def911cae64a032b01ce5bf95f7f3b008d23b7a5e780d8d520ebbe boost-math-1.41.0-15.el6_4.x86_64.rpm 9859bae2b1eafa6b00fe7eece9c64869b2db2278433527508097123fcfe71bba boost-mpich2-1.41.0-15.el6_4.i686.rpm 184e55ca17aa206363d0fb018d8088807b4404c2b405e3c448d068c59cbf3d81 boost-mpich2-1.41.0-15.el6_4.x86_64.rpm 4b0fac7d57ae02edd2c8a98b6e78fcd8062b66710348db6de787cb3849b56d71 boost-mpich2-devel-1.41.0-15.el6_4.i686.rpm 28ea7aa30639390f42af55176837a57b3528e3a5f46c368e050efa8b97fd906e boost-mpich2-devel-1.41.0-15.el6_4.x86_64.rpm 7fa84a2db289ade2b9789df997d32397fd617a72c57ed704d8108a28d71f2402 boost-mpich2-python-1.41.0-15.el6_4.i686.rpm 9ca27a73a58d20f48472816d872ab3c7ba1ce84fa28ff1062faa62c569a0f371 boost-mpich2-python-1.41.0-15.el6_4.x86_64.rpm 9581a90764fd49c3c81fa1124966b9a87681cfeef9079470e6aa20d9f4e5a2a6 boost-openmpi-1.41.0-15.el6_4.x86_64.rpm f171ccba0cc471e962671278d4f528b8dd4f378b92893750d9dbbbb7e29451bb boost-openmpi-devel-1.41.0-15.el6_4.i686.rpm 672f506e2ebd6a50c8c3712f7d0f3d2a9674c7e79a6ec497d1d63fc468e7cb7c boost-openmpi-devel-1.41.0-15.el6_4.x86_64.rpm 543ed1e5410b47e4824608cac158a761ebe1230209df76f63c886fa221e6f7dc boost-openmpi-python-1.41.0-15.el6_4.x86_64.rpm 89b422de1923356dcffe23076f0013b17596fe7d0bee54b61bedde4ed56456e6 boost-program-options-1.41.0-15.el6_4.i686.rpm 7812e2e90026751a62b0ea35914399f0eb552b7e78dbd4d1961809a709e53cbb boost-program-options-1.41.0-15.el6_4.x86_64.rpm dc42f787f1e2bfa9ec5a08184a07c54491bb9c0a3f5b95f00d2df90b45cd4938 boost-python-1.41.0-15.el6_4.i686.rpm 22daeaa8219bbb6f1293119839ab9f3cccff86e6875eb8f31db1ef1af6d445b9 boost-python-1.41.0-15.el6_4.x86_64.rpm 37b01100e5dcf9395f2c438b353f5493ca1bdf6f864ca0b75f5743cbfa11f4f9 boost-regex-1.41.0-15.el6_4.i686.rpm edd5c70c7297996eeaf4a341bcaca3b047267d4804b7c4bd9b07f5c750b7ba87 boost-regex-1.41.0-15.el6_4.x86_64.rpm d527418821d25c1491d64078d790f29fc2cd2ff65dbc5eb0518158a49dd84b1f boost-serialization-1.41.0-15.el6_4.i686.rpm f07b09263ddb4b0a9f56963c4b24651568d62d276768cba371d549b1201b4103 boost-serialization-1.41.0-15.el6_4.x86_64.rpm 8bf0840f16537593637627bd7770516ff1952d2cb6ad391c60b3a49e47f82ec8 boost-signals-1.41.0-15.el6_4.i686.rpm c8ea88ee4b3091be9030ef14047b578a460ada2649e82ddfad85ea57e5f1465e boost-signals-1.41.0-15.el6_4.x86_64.rpm c18d9a377bb066f11a179203d32f4b1e0beff2d09eafae6611c721aa0c1beefa boost-static-1.41.0-15.el6_4.x86_64.rpm b08ff29e8e2c8caf4456ae2125b70e37989ff98451026ebe87664318e1d8bd8f boost-system-1.41.0-15.el6_4.i686.rpm e8509b88802e8b5f8bc897dfb39c775f14f5d22a541729c8a3bc9771e7dd4c13 boost-system-1.41.0-15.el6_4.x86_64.rpm 827cbad02ad051987cb825fe8cd5879dcd7503db37ef0daa1c1f7786ae673032 boost-test-1.41.0-15.el6_4.i686.rpm 1f3ce6733b6e6a5553cc1346d48844f60db15888d93a77b754baf621795f1771 boost-test-1.41.0-15.el6_4.x86_64.rpm 0cbb2138a39f5306b7781a871e376586cc86035ba96b4b9650a384b799c19468 boost-thread-1.41.0-15.el6_4.i686.rpm 0b49a797e801b7acf1d4a3481b5c9a798f9d9c9518d43c3c95070c2c8825b8eb boost-thread-1.41.0-15.el6_4.x86_64.rpm 124e045b8b9a509e893f6ecced29f5250338a8c4be70f0b2320336f37281c3a1 boost-wave-1.41.0-15.el6_4.i686.rpm bdfef36bacc24ec1e39583aa050eb1de0950af21d0ed7731c3feb8c6c095eb83 boost-wave-1.41.0-15.el6_4.x86_64.rpm Source: ceb37199c9d89adf69f425d0ed809de3b11daaa5cc5ec06f330e37def853c00b boost-1.41.0-15.el6_4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Thu, 21 Mar 2013 22:39:15 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2013:0669 Moderate CentOS 6 qt Update To: centos-announce(a)centos.org Message-ID: <20130321223915.GA15868(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2013:0669 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-0669.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 3a4686251e487b1b21fe06dcdb0478e0476d1d9062cdef65478aa0b615d91bc9 phonon-backend-gstreamer-4.6.2-26.el6_4.i686.rpm 9da207c71afeac4721892c1e4d99c2489af489e406249e5a68eb87c5528d4f3a qt-4.6.2-26.el6_4.i686.rpm 6cc56d1d38b9cf3abe7b43d8ac547867ed65f7b86263855d6eee1392a310ae01 qt-demos-4.6.2-26.el6_4.i686.rpm b9f2895530a4ec94e92272711522925054b16c9a5915633de40dcbaa9d7ef428 qt-devel-4.6.2-26.el6_4.i686.rpm 3fca22fea80f452f00e58bc22503536b617b9d4d5848952b747f5a45a20c82b2 qt-doc-4.6.2-26.el6_4.noarch.rpm 9c24abdb400f2d58b044a1465894dd1238a781fb745672e109f4237cba515484 qt-examples-4.6.2-26.el6_4.i686.rpm 29e5cb2ef461b6dee538c0cadb2a0e7d9942a1435871543931a30df0c59cf5ab qt-mysql-4.6.2-26.el6_4.i686.rpm c4fa69a56005c05082bccfe60565154261e2374d7e9a89470a7d44456f8e64e3 qt-odbc-4.6.2-26.el6_4.i686.rpm 89dc46fddc8bf0454c5a44c586d514bbee88b3d58474c72ccd64746eba44a31f qt-postgresql-4.6.2-26.el6_4.i686.rpm e369ec0a8e9d93803a38bfc8074f10eae0b8a71841f0294b98e87178d622be2b qt-sqlite-4.6.2-26.el6_4.i686.rpm e12a578147bf7694f5e548e45ff193cf775b963a34ef61e5901b3225be83447e qt-x11-4.6.2-26.el6_4.i686.rpm x86_64: 3a4686251e487b1b21fe06dcdb0478e0476d1d9062cdef65478aa0b615d91bc9 phonon-backend-gstreamer-4.6.2-26.el6_4.i686.rpm b09476b346ebf7f6563b011d28bfc0fcd8d58d9b5ad0ca4cc1feac7ef1d50287 phonon-backend-gstreamer-4.6.2-26.el6_4.x86_64.rpm 9da207c71afeac4721892c1e4d99c2489af489e406249e5a68eb87c5528d4f3a qt-4.6.2-26.el6_4.i686.rpm 3e26ef93de4fc95ed371d5fb9d534c79782d73a4a6edf797a0d27cebef622d6f qt-4.6.2-26.el6_4.x86_64.rpm e26957fb21d679cb0f8014d35695051848ff6a0f27f5b35b63392fbb8983af36 qt-demos-4.6.2-26.el6_4.x86_64.rpm b9f2895530a4ec94e92272711522925054b16c9a5915633de40dcbaa9d7ef428 qt-devel-4.6.2-26.el6_4.i686.rpm 1b370a6f216a301ba716d9c94ce7d63c8528ea084fb72fc855d3073c91690084 qt-devel-4.6.2-26.el6_4.x86_64.rpm 3fca22fea80f452f00e58bc22503536b617b9d4d5848952b747f5a45a20c82b2 qt-doc-4.6.2-26.el6_4.noarch.rpm fe3e4b1ee12ace85b2e2714e841cbbb9a6bea103882b7a970ec57dba572b84b5 qt-examples-4.6.2-26.el6_4.x86_64.rpm 29e5cb2ef461b6dee538c0cadb2a0e7d9942a1435871543931a30df0c59cf5ab qt-mysql-4.6.2-26.el6_4.i686.rpm badc99f96f5c5a07cbfd5037632d63e81d9f97902202142861ddd8208bc51783 qt-mysql-4.6.2-26.el6_4.x86_64.rpm c4fa69a56005c05082bccfe60565154261e2374d7e9a89470a7d44456f8e64e3 qt-odbc-4.6.2-26.el6_4.i686.rpm fd5c5970c788234b7eac1d3c55fa0f9b48dc16f84e203c0b4abb765dd5cd9cde qt-odbc-4.6.2-26.el6_4.x86_64.rpm 89dc46fddc8bf0454c5a44c586d514bbee88b3d58474c72ccd64746eba44a31f qt-postgresql-4.6.2-26.el6_4.i686.rpm 1de9f2ade40a8ec137d33695e79340b4ab452cd5651b588db9b99e590e0ad5cf qt-postgresql-4.6.2-26.el6_4.x86_64.rpm e369ec0a8e9d93803a38bfc8074f10eae0b8a71841f0294b98e87178d622be2b qt-sqlite-4.6.2-26.el6_4.i686.rpm fb9532e13107b526cadba927d92f336b16100c176613fa5bc158c6445b487afb qt-sqlite-4.6.2-26.el6_4.x86_64.rpm e12a578147bf7694f5e548e45ff193cf775b963a34ef61e5901b3225be83447e qt-x11-4.6.2-26.el6_4.i686.rpm ad2bef28d63306c58c3d4b1aa479a89f856edd6e1e23a1fbc73d4edc820d78ed qt-x11-4.6.2-26.el6_4.x86_64.rpm Source: e3ee92cbb6b011d17ee2abcd96274329a51ded54c716d93e1aa52f1e082f9355 qt-4.6.2-26.el6_4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 97, Issue 12 ***********************************************

1 0

CentOS 6.x
by Kaushal Shriyan 22 Mar '13

22 Mar '13

Hi Please help me understand to choose between the two versions CentOS 6.3 and CentOS 6.4. I am not sure to choose 6.4 since it is being released recently( http://lists.centos.org/pipermail/centos-announce/2013-March/019276.html) and it may be risky to push it in Live environment. Regards, Kaushal

3 2

Ctrl-Alt-F? bindings broken under xen 3.0.3-142.el5_9.1 / 2.6.18-348.1.1.el5xen?
by Robert Heller 22 Mar '13

22 Mar '13

I am not sure what I did, but for some reason Ctrl-Alt-F? bindings are broken on 64-bit xen desktop machine (but not on my laptop (32-bit, no xen)). Both machines are (mostly) up-to-date and running CentOS 5.9. I rarely hop to different Virtual Consoles (eg Ctrl-Alt-F1 ... Ctrl-Alt-F7), but today I wanted to go to the main console to watch some kernel verbage (I was checking something with hot-swap SATA disk). I discovered that I could not switch back to my X11 session (Ctrl-Alt-F7)! I did some googling, but did not find anything. So far as I can tell, I can switch to one of the other VT (Ctrl-Alt-Fn) *from* VT7 (my X11 session), but cannot then switch to any other VT from there, using the Ctrl-Alt-F? key bindings. The chvt command works, but the keybindings don't. It is most strange. I know this used to work (and still does work just fine on my laptop, running much the same system, including the same X11 configuration, with the same desktop setup (plain fvwm in MWM compatibity mode, same keybindings, etc.). Other than different video cards (and thus different X11 drivers) and 32-bit vs 64-bit and with xen virtualization on the 64-bit desktop box, the system setups are virtually identical. -- Robert Heller -- 978-544-6933 / heller(a)deepsoft.com Deepwoods Software -- http://www.deepsoft.com/ () ascii ribbon campaign -- against html e-mail /\ www.asciiribbon.org -- against proprietary attachments

2 2

CentOS 6.4 x86_64 VM Install freezes
by Robert Heller 21 Mar '13

21 Mar '13

I am trying to install a CentOS 6.4 x86_64 VM using a CentOS 5.9 x86_64 host, but its install has froze *twice*. What I am doing is to create a 10gig LVM volume, which I put a MS-DOS partition table on (using fdisk). I then format the only partition to ext3, install grub and install the pxeboot kernel and initrd.img and a simple grub.conf to load this. I have the CentOS 6.4 x86_64 ISOs mounted (via loop) and exported as NFS file systems: /distrocds/CentOS/6.4/CentOS-6.4-i386-bin-DVD1.iso 3.6G 3.6G 0 100% /centos64i386/1 /distrocds/CentOS/6.4/CentOS-6.4-i386-bin-DVD2.iso 1.1G 1.1G 0 100% /centos64i386/2 /distrocds/CentOS/6.4/CentOS-6.4-x86_64-bin-DVD1.iso 4.1G 4.1G 0 100% /centos64x86_64/1 /distrocds/CentOS/6.4/CentOS-6.4-x86_64-bin-DVD2.iso 1.4G 1.4G 0 100% /centos64x86_64/2 sauron.deepsoft.com% sudo exportfs /centos64x86_64/1 192.168.250.0/255.255.255.0 /centos64x86_64/2 192.168.250.0/255.255.255.0 /centos64i386/1 192.168.250.0/255.255.255.0 /centos64i386/2 192.168.250.0/255.255.255.0 I am able to boot up the installer and have it NFS mount the first DVD and things go fine util it installs selinux-policy-targeted-3.7.19-195.el6.noarch. The VM is busy for a while, then the CPU usage goes to zero and it just sits there. What am I doing wrong? This worked just fine with the 32-bit version of CentOS 6.4. Is it because some package from the second disk is needed? Do I have to create a merged version of the DVDs? Or is something else wrong? Screenshot available here: http://www.deepsoft.com/wp-content/uploads/2013/03/FrozenInstallx86_64.png And the VM's defination is here: http://www.deepsoft.com/wp-content/uploads/2013/03/c664guest.xml -- Robert Heller -- 978-544-6933 / heller(a)deepsoft.com Deepwoods Software -- http://www.deepsoft.com/ () ascii ribbon campaign -- against html e-mail /\ www.asciiribbon.org -- against proprietary attachments

2 1

dhcpd options
by m.roth＠5-cent.us 21 Mar '13

21 Mar '13

A few weeks ago, suddenly, reading news at lunch, I could not get to nytimes.com. I could ping it, and nslookup it, and if I put the IP address in place of the name, it was fine. After *much* back and forth over a ticket I put in, over the last week or so, our group figured it out: It *seemed* to be related to IPv6, and there's only *some* few sites, such as the Times, and Orbits, and one or two others I found, while, say, the Washington Post, or Huffpo, etc, were fine; and I could make it work by putting IPV6INIT="no" in ifcfg-eth0 and restarting the network, but another admin got it nailed, we *think*: apparently the M$-based DNS resolver's sending back extended DNS packets, and we gag. tcpdump saw us asking for an A record, then an AAAA record, then using search.... But putting the *very* counterintuitive option edns0 in /etc/resolv.conf, it works instantly, no caching, no nuthin'. Taking that out breaks it again. My question: it *appears* that we could add option edns0 to dhcpd.conf on the server, and it would fix it for everyone on our subnet. Have I misunderstood what I'm reading in the manpages? mark

1 2

Is it fine to upgrade to Centos 6 rpms, being at centos 5.8
by Anumeha Prasad 21 Mar '13

21 Mar '13

Hi, I'm currently at CentOS 5.8. After some penetration testing, found some high severity OpenSSH issues which would require its upgrade. But till CentOS 5.9 the latest rpm available is openssh-4.3p2-82.el5 (which I'm currently using). Is it fine to upgrade to CentOS 6 rpms while I'm on CentOS 5? Thanks, Anumeha

8 8

GFS2 hangs after one node going down
by Maurizio Giungato 21 Mar '13

21 Mar '13

Hi guys, my goal is to create a reliable virtualization environment using CentOS 6.4 and KVM, I've three nodes and a clustered GFS2. The enviroment is up and working, but I'm worry for the reliability, if I turn the network interface down on one node to simulate a crash (for example on the node "node6.blade"): 1) GFS2 hangs (processes go in D state) until node6.blade get fenced 2) not only node6.blade get fenced, but also node5.blade! Help me to save my last neurons! Thanks Maurizio

1 0

posfix admin issue
by Austin Einter 21 Mar '13

21 Mar '13

Dear All I had successfully installed posfixadmin. I was able to login to postfix admin and create email ids etc. In something broken (not sure which one caused the issue), I am experiencing below problem with postfix admin. 1. I am able to access domain/mailadmin page. 2. I can create admin accounts at domain/mailadmin/setup.php 3. I can see the admin login page by access But when I enter my admin mailid, and password (i am 100% sure these are correct), it goes to a page domain/login.php and then says "Page not found". My question is why it is redirecting wrongly to domain/login.php. Kindly help me. Please note that I have all other things working like amavisd, dovecot etc, I am able to send recv mails for accounts that I created previously. Regards Austin

5 6

Network interface status
by isdtor 21 Mar '13

21 Mar '13

Under CentOS6, is it possible to get an interface to RUNNING state without assigning a (dummy) IP address? # ifconfig em2 em2 Link encap:Ethernet HWaddr 78:2B:CB:67:3E:5C UP BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) This was working fine on RHEL3 simply by running ifconfig up. # ifconfig eth1 up # ifconfig eth1 eth1 Link encap:Ethernet HWaddr 00:11:25:57:8B:2D UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:10658057 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:1169901971 (1115.7 Mb) TX bytes:0 (0.0 b) Base address:0x3400 Memory:d0240000-d0260000 # dmesg |grep eth1 ... e1000: eth1: e1000_watchdog: NIC Link is Up 1000 Mbps Full Duplex # provided there is a link.

2 1

change /etc/security/limits.conf need reboot or not?
by mcclnx mcc 21 Mar '13

21 Mar '13

We have CEntos 5.5 on DELL server. Due to more and more databases run on same server sometime processes number read max and cause 'resource temporary unavailable". I plan to change /etc/security/limits.conf value: oracle soft nproc 2047 ==> 4096 Do i need reboot to make it effect? How to test change is effect? Thanks.

4 3

Adding third party driver at installation time.
by satish kondapalli 21 Mar '13

21 Mar '13

Hi, I have a PCIe storage device. My driver registers this device as a block device in linux. My block device is working fine under linux. Following are the steps which I used for Centos installation on my storage device: 1) During Centos installation time and before scanning of my storage device, I loaded the driver from command line(By pressing Ctrl + Alt + F2) from USB disk. 2) Post loading of drivers, the installation proceeded successfully on my storage device. Query: 1) How to add my driver as part of installed initrd image at the installation time itself.[because root file system also installed on same device] Waiting for positive reply Thanks & Regards, Sateesh

2 3

2 questions re UPS management
by Fred Smith 21 Mar '13

21 Mar '13

Hi, trying to figure out how the system manages UPS connections. On both Centos 5.9 and 6.4, merely plugging in a USB UPS device causes an icon to appear in the top panel, and (at least on 5.9, haven't yet tested this in 6.4) when the UPS suffers a power failure the system notices and after a bit does a clean shutdown. All this without installing ANYTHING extra. one of the UPSes I'm using is a tripplite (now on 6.4 x86_64, but formerly on the same machine with 5.9 i686), the other is a CyberPower UPS on a different 5.9 machine. question #1: in 5.9 there are two entries in /etc/inittab, one for power fail and the other for power restoration. The default setting for the powerfail entry has it doing a shutdown in 2 minutes. So, I need to tweak it a bit: that UPS powers two computers, the Centos 5.9 box and a Windows XP box. A little googling showed me how to use Samba tools to tell XP to do a shutdown. That works fine. but if I add the command for that into the inittab entry I get an error message (when power fails) about the line being too long. So, I created a shellscript that runs both the command to tell XP to go down, followed by the shutdown command that tells Centos to shut down. I changed the two minute time to 5 minutes to make sure Windoze is all the way down even if it's busy. When I run this script from the commandline it works just fine. but when I turn off input power to the UPS it starts the XP shutdown then within without waiting the specified length of time, initiates the shutdown of Linux. Once the shutdown is done, the UPS powers off, thereby killing the not-yet-shutdown windoze box. #!/bin/sh # # invoked by the poweroff clause in /etc/inittab instead of the command # originally in that place. This one also shuts down the Windoze box. net rpc SHUTDOWN -C "System shutting down NOW due to power failure" -f -I 172.19.23.120 -U <myusername>%<mypassword> /sbin/shutdown -f -h +5 "Power Failure; System Shutting Down" and here's the entry from inittab: pf::powerfail:/etc/powerfail The shellscript does contain "#!/bin/sh" as its first line, but it is currently being invoked simply by the path to the script. when I get back to the office I'll try changing it to "/bin/bash /etc/powerfail" to see if that makes a difference, but I kinda don't expect it to. So, I'm wondering how the underlying mechanism works, AND if anyone knows how (or even IF) it's possible to hand inittab a script to run instead of burying the necessary commands directly into the inittab entry. Question #2: On the Centos 6.4 box at home, I haven't yet tried turning off power to the UPS to see if it actually shuts doown, but given that a UPS icon appears in the panel, and there are settings for what should happen when power fails, I expect it will. The question here is: how does this magic all work? We no longer have any entries in inittab to manage this, apparently we now use upstart to manage the same things, and I've spent some time digging for man pages and looking around for upstart file(s) to find out how such events are handled, and so far I've not found anything specifically for a "powerfail" event. Clues appreciated, thanks all! Fred -- ------------------------------------------------------------------------------- Under no circumstances will I ever purchase anything offered to me as the result of an unsolicited e-mail message. Nor will I forward chain letters, petitions, mass mailings, or virus warnings to large numbers of others. This is my contribution to the survival of the online community. --Roger Ebert, December, 1996 ----------------------------- The Boulder Pledge -----------------------------

9 28

boot problem on Desktop edition 6.4
by Mustafa DEMiRCi 21 Mar '13

21 Mar '13

Hi dear friends for three days . I have a problem . Shortly I have Hp elitebook with Centos 6 nearly more than one year without any problem When last update for kernel 2.6.32-358.2.1.el6.x86_64 was realeased. I did not restart machine. After 3 days I started machine and I got a error message of getaddrinfo() problem of solving host name. And there is showed of bugs.centos.org. I reconfig /etc/hosts and restart machine after startin libvirtd (OK) There is nothing. I can't see my gnome desktop (Maybe this was a problem of another update which was same time with 2.6.32-358.2.1.el6.x86_64 ) Some googling and looking some forums I saw another people like me They have same problems. I reinstall kernel and tried alternatives/java but couldn't solve problem. yum reinstall \* did not solved my problem . After starting libvirtd(OK) . There is nothing . Maybe this is coming from my Nvidia card ? Have you any ideas ? Regards. Mustafa Demirci

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss