- Discuss - lists.centos.org

Re: [CentOS] Easy way to strip down CentOS?
by James B. Byrne 27 Feb '15

27 Feb '15

On Wed, February 25, 2015 14:18, Brian Mathis wrote: > > I don't think there's a single yum command that lets you roll > back to the packages the were installed at a given point in > time. I also don't think that this would get you back to the > *exact* system as it was. # yum history rollback 1 # return to first post-update state. # yum history undo 1 # undo first update; return to initial state. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 5

L2TP over IPSEC?
by CS DBA 27 Feb '15

27 Feb '15

Hi All; anyone have any info on setting up a L2TP over IPSEC client vpn connection? Thanks in advance

2 1

C7, igb and DCB support for pause frame ?
by Laurent Wandrebeck 27 Feb '15

27 Feb '15

Hi there, I’m working on deploying our new cluster. Masters have 5×1gbps (i210 and i350, thus using igb.ko), configured with mtu 9000, 802.3ad. Works fine *but* I can’t get DCB working (pause frame, aka flow control, which is supported by and enabled on our switches). [root@master2 ~]# dcbtool gc eno1 dcb Command: Get Config Feature: DCB State Port: eno1 Status: Device not capable (I get the same with ELRepo 5.2.15 kmod). Intel datasheet says flow control is available. Can’t find much about it on the web or in kernel git repo. Could someone give me a hand ? Regards, Laurent.

2 2

Re: [CentOS] scp -rp behavior
by Richard 27 Feb '15

27 Feb '15

------------ Original Message ------------ > Date: Thursday, February 26, 2015 18:45:34 -0600 > From: Valeri Galtsev <galtsev(a)kicp.uchicago.edu> > To: CentOS mailing list <centos(a)centos.org> > Subject: Re: [CentOS] scp -rp behavior > > > On Thu, February 26, 2015 6:34 pm, Mark LaPierre wrote: >> Hey all, >> >> I'm trying to copy configuration files from my old CentOS 6.6 32 >> bit machine to my new CentOS 6.6 64 bit machine. >> >> On my 32 bit machine: >> >> [mlapier@mushroom ~]$ ifconfig >> eth0 Link encap:Ethernet HWaddr 00:19:DB:E5:4E:9F >> inet addr:192.168.15.105 >> >> When I issue this command on my new 64 bit machine, >> 192.168.15.101: >> >> scp -pr mlapier(a)192.168.15.105: /home/mlapier/.thunderbird >> /home/mlapier/.thunderbird > > How about escaping dot (with backslash) for the remote machine, or > just giving the whole path for remote machine in quotes: > > scp -pr mlapier(a)192.168.15.105:"/home/mlapier/.thunderbird" > /home/mlapier > > ? > > Also, if you want to specify destination directory (say with > different name) you will need to end directory with forward slash > both on local and remote, like: > > scp -pr mlapier(a)192.168.15.105:"/home/mlapier/.thunderbird/" \ > /home/mlapier/.thunderbird/ > > (this should be one line which didn't fit for me in one line hence > backslash...) > > Valeri > >> >> It copies all directories and files in 192.168.15.105: >> /home/mlapier/ to 192.168.15.101: /home/mlapier. I don't want >> all that, I just want the .thunderbird folder and all it's >> contents. >> >> The user and group account numbers match on the two machines for >> this user so that's not the issue. >> >> When I RTFM this is what I thought it said to do. I'm I >> misreading the FM or is something weird going on here? >> As I believe was suggested by someone when you asked about this a few days ago, the space that you have after the colon: scp -pr mlapier(a)192.168.15.105: /home/m... is the source of your problem. I just tested and confirmed it. Some other notes: with the "mlapier(a)192.168.15.105" you'll, by default, be "in" the home directory of mlapier on the remote machine. So you don't need the "...:/home/mlapier/" pathing. Also, if you are in your (mlapier) home directory on the new machine when you are doing this you again won't need the pathing. So, I think you should be able to do just: scp -pr mlapier@192.168.15.105:.thunderbird . or at most: scp -pr mlapier@192.168.15.105:.thunderbird /home/mlapier/. If, per chance, you wanted to change the directory name on the transfer you'd need to specify it, rather than just the ".", otherwise the "." will simply put directory on the target machine with the same name as the original. - Richard

3 2

How to search the mail archive
by Mark LaPierre 26 Feb '15

26 Feb '15

Hey All, I've seen references to searching the mail archive. How exactly does one perform such a search? Let's say I want to search the mail archive for references to the scp command. How do I do that? -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ ****

3 2

Kickstart with multiple eth devices
by Ashley M. Kirchner 26 Feb '15

26 Feb '15

I have a Dell server that has two built-in ethernet devices. When I kickstart the machine, they are correctly identified as eth0 and eth1 (correctly meaning they correspond to the physical device ports 1 and 2). I need a third one and want that to come up as eth2. After adding the hardware, kickstart now fails because for some reason it goes through a rename process where it makes the newly added card eth1 (or eth0, I forgot). Is there a way to stop this rename process so kickstart correctly uses the physical hardware the way they are, meaning physical port 1 = eth0, port 2 = eth1, and the additional ethernet card then becomes eth2? Should I be using the device's MAC address when I set the 'network' option in the kickstart file? So instead of 'network --device=eth0' I make it 'network -device=aa;bb:cc:dd:eee:ff' ?

9 23

Re: [CentOS] Kickstart with multiple eth devices
by Ashley M. Kirchner 26 Feb '15

26 Feb '15

And after picking this back up this morning .... still no dice. I have now blacklisted the one module that would enumerate the add-in ethernet port so that is no longer an issue during the kickstart process, however the following is now happening: - kickstart completes successfully using the machine's physical port 2 (or eth1) which is on a subnet with DHCP - when the system reboots, it brings up port 1 (eth0) with the correct static IP information, HOWEVER ... - port 2 (eth1) is NOT configured properly. When I look at it's ifcfg-eth1 file, its bootproto is set to none when it should be set to dhcp. - the add-in card has not been enumerated, in fact the system doesn't even know it's there (dmesg has no mention of it and no module loaded) So for port 2 (eth1), the kickstart file has it configured as a dhcp interface, so why when the system reboots it comes up with bootproto=none? On the other hand, port 1 (eth0) does come up with the static information as it should - that info is also set in the kickstart file. Baffled ... On Wed, Feb 25, 2015 at 4:46 PM, Ashley M. Kirchner <ashley(a)pcraft.com> wrote: > Yeah, and we're back to someone needing to "do something" on the system > after it reboots. :) > > On Wed, Feb 25, 2015 at 4:37 PM, Jason Warr <jason(a)warr.net> wrote: > >> On Wed, 25 Feb 2015 17:30:30 -0600, Ashley M. Kirchner < >> ashley(a)pcraft.com> wrote: >> >> >> On Feb 25, 2015 4:19 PM, "Jason Warr" <jason(a)warr.net> wrote: >> >> > It will if you try to configure the now non-existent interface. >> >> That's what I figured, so I can remove it from the kickstart file, no >> problem. The question then becomes, if kickstart doesn't configure it, what >> happens when the system reboots after install? It won't know what to do >> with that interface, correct? >> >> Is this a case where I will need to put an ifcfg-eth2 file in place >> during post-install? >> >> Upon reboot the system *should* generate a base one for you as it will >> see it as a new interface. Not a big deal if it does not though, just >> create one yourself. You will want to add it to the udev rules file >> though. You can re-run the script I sent to do that if you want. At that >> point it should be eth2. Or you can edit the existing one by copying a >> line and changing the MAC and eth* to whatever you need. >> > >

2 3

move a disk to another machine
by Chuck Campbell 26 Feb '15

26 Feb '15

I have a centos 6.6 laptop which is having trouble (intermittent boot failures, or more rightly so, multiple failures, intermittent booting). The laptop is running selinux. I pulled the second internal disk out to get my data off of it. I plugged it into my centos 5.x machine and mounted it. I was able to do a dir listing, but whrn I tried to cd into any of the directories, I get a bunch of AVC denials, and I can't see any files. The contos 5.x machine is selinux enforcing, and so is the centos 6.x box. The files are all owned by me, and have the same uid/gid on both boxes. What is the right way to do this? Meanwhile, I put it back into the laptop, and kept attempting to boot the machine, until I got lucky and it came up. I was able to rsync the data off the drive, so this isn't a crisis, just a learning moment. thanks, -chuck --

3 3

CentOS 7 will not run pre-installation script
by Jerome Yanga 26 Feb '15

26 Feb '15

Has anyone experienced any difficulties of getting the pre-installation script for CentOS 7 to run? Regards, j

5 6

CentOS-announce Digest, Vol 120, Issue 10
by centos-announce-request＠centos.org 26 Feb '15

26 Feb '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2015:0266 Important CentOS 6 thunderbird Security Update (Johnny Hughes) 2. CESA-2015:0266 Important CentOS 5 thunderbird Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 25 Feb 2015 20:08:47 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0266 Important CentOS 6 thunderbird Security Update Message-ID: <20150225200847.GA42960(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0266 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0266.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 10cf2774899a722583ccf83178b5b0c670cdfaa467e7def8038101d0512e89ac thunderbird-31.5.0-1.el6.centos.i686.rpm x86_64: 72d284150fec9a4815ab4358299199052181d31d62bdd0e5a8fe57e925ff6165 thunderbird-31.5.0-1.el6.centos.x86_64.rpm Source: 5568672fb5bb86b79e4824e171f4c973ec6953defd67248f2c58b31ebf5d663b thunderbird-31.5.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 25 Feb 2015 20:15:49 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0266 Important CentOS 5 thunderbird Security Update Message-ID: <20150225201549.GA32601(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0266 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0266.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 03125dc617adf6e21a75514e135e82f08d90178f17f8d3e6c96d3cbc360b78ce thunderbird-31.5.0-1.el5.centos.i386.rpm x86_64: c638b9ceb5e6f217727fd392466c03bd268d668d167687215c87a8cbad9a4bcf thunderbird-31.5.0-1.el5.centos.x86_64.rpm Source: 1985b7f18bb11b6dadb49cdb3a2dd8119767aab93f561789537319b754eb6d51 thunderbird-31.5.0-1.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 120, Issue 10 ************************************************

1 0

Easy way to strip down CentOS?
by Niki Kovacs 26 Feb '15

26 Feb '15

Hi, I wonder if there's an easy way to strip down an installation to the bare minimum, e. g. the packages you get when you select "minimum installation". In Slackware, the bone-headed package manager slackpkg has a few nice options, among which 'slackpkg clean-system', which removes all third-party packages in one single operation, or 'slackpkg remove <package_group>', which does exactly that. I know CentOS has yum groupinstall/groupremove etc. but as far as I can tell, if I only have a handful of packages from a package group installed, yum grouplist lists the group as not installed, so there's not an easy way to tell. You may wonder why I want to do this. I have CentOS installed on some sandbox machines here, and I like to fiddle with different desktops and setups just for the sake of experimenting. Cheers, Niki -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

9 12

unable to umount
by Leon Fauster 25 Feb '15

25 Feb '15

Hi, on an EL5 XEN DOM0 system I have following volume $ df -h /srv Filesystem Size Used Avail Use% Mounted on /dev/sdc1 917G 858G 60G 94% /srv that partition was used by virtual machines but they were all halted. service xendomains stop $ xm list Name ID Mem(MiB) VCPUs State Time(s) Domain-0 0 3000 2 r----- 695.1 $ service xend stop nothing is using the partition $ lsof |grep srv <empty> $ fuser -m /srv <empty> $ fuser -km /srv <empty> but i can not umount /srv $ umount /srv umount: /srv: device is busy umount: /srv: device is busy what could keeping the device "busy" ... ? __ Thanks, LF

4 6

CentOS 7, systemd and firewall-cmd
by m.roth＠5-cent.us 25 Feb '15

25 Feb '15

I'm having issues with an rsyncd. systemctl status rsyncd shows it running rsyncd.service - fast remote file copy program daemon Loaded: loaded (/usr/lib/systemd/system/rsyncd.service; enabled) Active: active (running) since Wed 2015-02-25 10:57:02 EST; 4h 43min ago Main PID: 31672 (rsync) CGroup: /system.slice/rsyncd.service `-31672 /usr/bin/rsync --daemon --no-detach But firewall-cmd --list-all public (default, active) interfaces: em1 em2 sources: services: dhcpv6-client mountd nfs rpc-bind samba ssh ports: 631/udp 22/tcp masquerade: no forward-ports: icmp-blocks: rich rules: And yet if I do iptables-save, it shows 873 open. a) which should I believe, firewall-cmd or iptables-save? b) why does firewall-cmd not show 837 open? c) I've been googling, and know that I can tell firewall-cmd to open the port, but if there's a "correct" way, presumably one that will show rsyncd on the services line, I'd like to do it that way. Clues? mark

3 7

Replacement for NIS/NFS?
by Niki Kovacs 25 Feb '15

25 Feb '15

Hi, Over the last few years, I've been using a rather bone-headed solution to implement centralized authentication and roamin user profiles in Linux-based networks: a combination of NIS and NFS. I'm aware it's not ideal in terms of security, but it's been running in our local school since 2010, and it just works. The current setup is based on Slackware Linux on both server and desktop clients. Here's the relevant documentation (which I wrote): http://docs.slackware.com/howtos:network_services:roaming_profiles BTW, the first two years this solution worked perfectly with CentOS 5.x on the server and on the desktop clients. I'm currently migrating from Slackware to CentOS, and I'm looking for a "business-grade" replacement of this more or less obsolete configuration. I've read about various existing solutions, and I'm not quite sure in which direction to go from here: FreeIPA? 389 Directory Server? LDAP+LAM-Manager? Here's what I want: 1. Users should be manageable through a GUI, probably a web interface, so the client can create, manage and delete them eventually. 2. Home directories should be created/deleted automagically under the hood. 3. Every user should be able to login on any machines and find his or her files and preferences. What can you suggest? Is there some robust and well-documented solution that works more or less out of the box and doesn't make me jump through burning loops? I'm mainly using CentOS 7, but I'll also have to use CentOS 6.x since in our school we have some older hardware that won't run 7.x. Cheers from the sunny South of France, Niki Kovacs -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

5 5

Disable DHCPv6 on Cent7
by Michael Mol 25 Feb '15

25 Feb '15

So, I'm seeing a bunch of DHCPv6 traffic coming from my CentOS7 machines. Basically, the machines are trying to send router solicitations, the packets are blocked at their egress firewalls, and I get to see the logs. I don't wish to disable IPv6. I don't wish to statically configure IPv6 at this time. I wish to have the machines no longer attempting to send router solicitations as part of DHCPv6. How do I do this? I tried DHCPV6C="no" in ifcfg-ifacethatsnoteth0, but that seems to have had no effect. I still see lines like these: Feb 25 10:25:48 proxy-comcast-2 NetworkManager[541]: <error> [1424877948.384918] [rdisc/nm-lndp-rdisc.c:241] send_rs(): ([snip]): cannot send router solicitation: -1. Feb 25 10:25:48 proxy-comcast-2 kernel: OUT-world:IN= OUT=[snip] SRC=fe80:[snip] DST=ff02:0000:0000:0000:0000:0000:0000:0002 LEN=48 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=133 CODE=0 -- :wq

2 2

Wiki links broken
by lhecking＠users.sourceforge.net 25 Feb '15

25 Feb '15

http://wiki.centos.org/AdditionalResources/Repositories Under "CentOS-Fasttrack", the links to the Readme and CentOS6 repo are broken (again, if the list archives are anything to go by ...).

2 3

CentOS-announce Digest, Vol 120, Issue 9
by centos-announce-request＠centos.org 25 Feb '15

25 Feb '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2015:0265 Critical CentOS 6 firefox Security Update (Johnny Hughes) 2. CESA-2015:0265 Critical CentOS 5 firefox Security Update (Johnny Hughes) 3. CESA-2015:0265 Critical CentOS 7 firefox Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 25 Feb 2015 03:04:39 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0265 Critical CentOS 6 firefox Security Update Message-ID: <20150225030439.GA60949(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0265 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0265.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d4fed3ff8afebc14157cba680c25210046a88a743894ddb427031248f1591f83 firefox-31.5.0-1.el6.centos.i686.rpm x86_64: d4fed3ff8afebc14157cba680c25210046a88a743894ddb427031248f1591f83 firefox-31.5.0-1.el6.centos.i686.rpm d03d426c5fe418c3a6032ccf194633f62c29c2fc17c07de1a5eadbf4c1cab7e5 firefox-31.5.0-1.el6.centos.x86_64.rpm Source: 82d2c4373bc2deaa94c354e5faee6ae55e49120959a222cd22058403aa7d8047 firefox-31.5.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 25 Feb 2015 03:15:42 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0265 Critical CentOS 5 firefox Security Update Message-ID: <20150225031542.GA18258(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0265 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0265.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 4cf9384a3b5d642c92a58cd8d0b665d686211f32077bd2619efa802d74f4dacf firefox-31.5.0-1.el5.centos.i386.rpm x86_64: 4cf9384a3b5d642c92a58cd8d0b665d686211f32077bd2619efa802d74f4dacf firefox-31.5.0-1.el5.centos.i386.rpm 1d1a00f3f3d810d2580006b271de8c359c14f9012e7168a55805a64b540114ea firefox-31.5.0-1.el5.centos.x86_64.rpm Source: 59f429916e642c061a7577c23570e56e5b61e9a6fd91b7f31751b7049fde6d68 firefox-31.5.0-1.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Wed, 25 Feb 2015 03:27:11 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0265 Critical CentOS 7 firefox Security Update Message-ID: <20150225032711.GA13169(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0265 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0265.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: bb5ccc0f99270fe4513cf433de7780f18e00d24a2c544050c4b7bb45cd1e40b0 firefox-31.5.0-2.el7.centos.i686.rpm 59ef15c77888ba36e166177960ae34ccd135d22157d9306f3ef31722e8dd3afc firefox-31.5.0-2.el7.centos.x86_64.rpm 97efe63b7aab8bcbbdf17cba51aea4a68662755181b79feff8bb9fa0a845f348 xulrunner-31.5.0-1.el7.centos.i686.rpm b232b11d86bcd3017c1becbb0727f5a84bea5b95a30a58e29b289a64e069022f xulrunner-31.5.0-1.el7.centos.x86_64.rpm b79179ace2c967097f99a7f14cb4ee68af720248521cc10afd9ceae277f406f9 xulrunner-devel-31.5.0-1.el7.centos.i686.rpm 8721c0fad03ab5ef877200787bea9ba354ac97bba1474bd2db65bf6858bf4f4b xulrunner-devel-31.5.0-1.el7.centos.x86_64.rpm Source: 02135f20d1e24d14b2b587de7242900d57a504133eca7d97bdae81e52db1a87d firefox-31.5.0-2.el7.centos.src.rpm 5df824f2eed96f62e869beb42ca1cd4486a5936cede043598c1bf762ff76d939 xulrunner-31.5.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 120, Issue 9 ***********************************************

1 0

Transparent GNOME Terminal in CentOS 7?
by Niki Kovacs 25 Feb '15

25 Feb '15

Hi, I like working with transparent terminals. Unfortunately, this feature seems to have been removed from GNOME Terminal in CentOS 7. Anybody knows if there's a workaround to get it back? Cheers, Niki -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

3 4

Re: [CentOS] Master - Slave Split DNS
by James B. Byrne 24 Feb '15

24 Feb '15

On Mon, February 23, 2015 23:21, aditya hilman wrote: > Hi folks, > > After configure the iptables for masquerade the zone transfer traffic. > I've found new issue, below the log on slave : > > zone domain.com/IN/external-view: serial number (2015022302) received > from > master 10.xx.xx.xx#53 < ours (2015022303) > > The zone on the slave doesn't update. > The reason the zone does not update is given in the message. The serial number on the slave copy of the zone file is greater than the serial number on the master's copy. You need to figure out why that is so and fix that issue. Then the slave should update. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

CentOS-announce Digest, Vol 120, Issue 8
by centos-announce-request＠centos.org 24 Feb '15

24 Feb '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2015:0249 Critical CentOS 5 samba3x Security Update (Johnny Hughes) 2. CESA-2015:0251 Critical CentOS 6 samba Security Update (Johnny Hughes) 3. CESA-2015:0250 Critical CentOS 6 samba4 Security Update (Johnny Hughes) 4. CESA-2015:0252 Important CentOS 7 samba Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 23 Feb 2015 14:18:15 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0249 Critical CentOS 5 samba3x Security Update Message-ID: <20150223141815.GA10258(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0249 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0249.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b959846c0238d89a90f96b590e8bdb318c5b38e8321f5081adfaad5a5624cbd7 samba3x-3.6.23-9.el5_11.i386.rpm d7604514670b2afb38a0b31bc97e20f4311eea118480ae84b85626ce03f61a0d samba3x-client-3.6.23-9.el5_11.i386.rpm 0515570a56ea776a94fdb11e9af7f72506f2a0d4d8e4cc8ab05a36c710d1de50 samba3x-common-3.6.23-9.el5_11.i386.rpm 127822fc09b56cbe6607b30db17a853f3a25b4c21157beb66b3b8688bf2b8908 samba3x-doc-3.6.23-9.el5_11.i386.rpm f7b284da9d8a6e43885c6496b4481744067b77e41ad247a9a122347810fd9e68 samba3x-domainjoin-gui-3.6.23-9.el5_11.i386.rpm e0de99a8568b1189d38aa115492e37543f811f19c825db275b02335749944c39 samba3x-swat-3.6.23-9.el5_11.i386.rpm 2b82e29d62a05f36e1dbe0648062cf741e601fa4a6d0fe778801ff1336af62a2 samba3x-winbind-3.6.23-9.el5_11.i386.rpm b7639167c18e9774b66bd3f5cf502e56a23750c9fd845de6d0a6de675fd83c41 samba3x-winbind-devel-3.6.23-9.el5_11.i386.rpm x86_64: cc507bb501036ed64c4a66105e11432e859c2646124623b8a6363378e8bf0954 samba3x-3.6.23-9.el5_11.x86_64.rpm a480cb7320101ba2745f070cd241b5ad7f6f821d21bb3c158a4d51dc855f34ef samba3x-client-3.6.23-9.el5_11.x86_64.rpm f705e620f1ab4ca626745ef95db06ae78fb84661fe0583d3cd55d661dd2571bc samba3x-common-3.6.23-9.el5_11.x86_64.rpm 8b41a5f0dd88338a04afc19c6acbfbe2ce1ccd345a1c651d63693e877e9fc269 samba3x-doc-3.6.23-9.el5_11.x86_64.rpm b5c497acddbb0e008982df05bf789b085912820d9f5c8bcec006bd8d4d3e709a samba3x-domainjoin-gui-3.6.23-9.el5_11.x86_64.rpm 78a8f55d5fbd76350f959696da4931ba047b1c88f3b404ff88da3c29d11637db samba3x-swat-3.6.23-9.el5_11.x86_64.rpm 2b82e29d62a05f36e1dbe0648062cf741e601fa4a6d0fe778801ff1336af62a2 samba3x-winbind-3.6.23-9.el5_11.i386.rpm 8a38703cf8d831ca806b5d86d4e308f0d5dd3cb7b91be6b12b813c3f9418bf29 samba3x-winbind-3.6.23-9.el5_11.x86_64.rpm b7639167c18e9774b66bd3f5cf502e56a23750c9fd845de6d0a6de675fd83c41 samba3x-winbind-devel-3.6.23-9.el5_11.i386.rpm c713a79c036c1c96327dc8f67a9916d5f13c865e3e84f6e45fc505c2c122196f samba3x-winbind-devel-3.6.23-9.el5_11.x86_64.rpm Source: 294a27552595bb76be5c48e13a2971ae0216d4c7dce26c0fa251031db170ef4d samba3x-3.6.23-9.el5_11.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Mon, 23 Feb 2015 14:23:09 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0251 Critical CentOS 6 samba Security Update Message-ID: <20150223142309.GA4079(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0251 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0251.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 15a1cf88865a386b4641c0c0733f3b4a3ef069ddb4a64bdd373d05c737fe7218 libsmbclient-3.6.23-14.el6_6.i686.rpm 581127efd855ae9f48596869efc0b968d1a07493e2072b4c51610d8ea734f709 libsmbclient-devel-3.6.23-14.el6_6.i686.rpm 5304185a24d9177ac994c80dc979c3e01094b8eae5e878ffbd831536d476c023 samba-3.6.23-14.el6_6.i686.rpm 831a070f77bae7bd8d27ea1c3f9a28857a8ca72b733318961134ad0c7a2006f0 samba-client-3.6.23-14.el6_6.i686.rpm 38c3afb0bff3a798a9fc9145396f397e873b43e25116bce933f64568d2504111 samba-common-3.6.23-14.el6_6.i686.rpm e734d422feb9bbfdbfcaad386327bc6348fbaf5a5daa07def2ef03fcebd2dd80 samba-doc-3.6.23-14.el6_6.i686.rpm 036dd4357445ce96f0073f238ca065a8d3fefedba4f8bbfd2c37a9d272866013 samba-domainjoin-gui-3.6.23-14.el6_6.i686.rpm b3f8d7de5cc738fc8e50f68ccbd45b3823704ad3be9479f069cf088798666db2 samba-swat-3.6.23-14.el6_6.i686.rpm 81dc77fba66b55425a4f5fd4e5e991d87254a0b1603b72230a4321a3c535a12e samba-winbind-3.6.23-14.el6_6.i686.rpm 7b90b64bf7884354cbf42458b1ecc852aaf98e6e7b1dea15c16dfdb49e1ffac7 samba-winbind-clients-3.6.23-14.el6_6.i686.rpm d58b325641edd0b4f0652a058ce46a74cf253381981bbac6b5d0c7d31886c6d3 samba-winbind-devel-3.6.23-14.el6_6.i686.rpm c3ed74ca74e29de0d8a8d8d3da47ad0174509dca737bf7ba02f6e72558e01a1d samba-winbind-krb5-locator-3.6.23-14.el6_6.i686.rpm x86_64: 15a1cf88865a386b4641c0c0733f3b4a3ef069ddb4a64bdd373d05c737fe7218 libsmbclient-3.6.23-14.el6_6.i686.rpm b484ab49ea15120453035ef48a54905301b3acbf4ed4a5dff0d43b22a8c9b40f libsmbclient-3.6.23-14.el6_6.x86_64.rpm 581127efd855ae9f48596869efc0b968d1a07493e2072b4c51610d8ea734f709 libsmbclient-devel-3.6.23-14.el6_6.i686.rpm 03284d79cb4483e998cd8fea9792ed36504e8bd6a9444de564f770028f3b8f65 libsmbclient-devel-3.6.23-14.el6_6.x86_64.rpm e19d3cddba865d317fe4c318b0c78d4e4cc7c95e3946f9c4ac57b04aac882e7a samba-3.6.23-14.el6_6.x86_64.rpm f9a1ce622fc06d47860f9c14d31d543982975888e325fdaba0cd54089427a2a7 samba-client-3.6.23-14.el6_6.x86_64.rpm 38c3afb0bff3a798a9fc9145396f397e873b43e25116bce933f64568d2504111 samba-common-3.6.23-14.el6_6.i686.rpm 4778d83ac995759aced82c362dd2e9d1fb3e3bf110e758e2ea42da62ec80f22f samba-common-3.6.23-14.el6_6.x86_64.rpm 44621c64c34d9c88240e0b0dee1be7bebe5be3e9ae7b08a7666680e8606bced2 samba-doc-3.6.23-14.el6_6.x86_64.rpm d2f449bba0dffa889ad83e36d5aad1c85273cbea41378760171ab3910a3f42dc samba-domainjoin-gui-3.6.23-14.el6_6.x86_64.rpm 60bf3dae01e9c79c3980ad2fd9c3a590317ebdd6d4889dc171beff1d7a0f3d40 samba-glusterfs-3.6.23-14.el6_6.x86_64.rpm 84dbe3c4002fd7c4de8eaafe0280f2dae280ef61dc6343bbfdb37da25e7173ab samba-swat-3.6.23-14.el6_6.x86_64.rpm 857e6c80a014b72b2f3d50ba409feb2ef5b1dc6f929bccf612247d9920c806cf samba-winbind-3.6.23-14.el6_6.x86_64.rpm 7b90b64bf7884354cbf42458b1ecc852aaf98e6e7b1dea15c16dfdb49e1ffac7 samba-winbind-clients-3.6.23-14.el6_6.i686.rpm 52e41de1abb0962a6d4b0059833b1ffdd4cd9ebf0f7368767227a75cecf4e83c samba-winbind-clients-3.6.23-14.el6_6.x86_64.rpm d58b325641edd0b4f0652a058ce46a74cf253381981bbac6b5d0c7d31886c6d3 samba-winbind-devel-3.6.23-14.el6_6.i686.rpm af7e8292ecd67ba31e11b75f035c903bd0fa958da1dac3561c331735691a5928 samba-winbind-devel-3.6.23-14.el6_6.x86_64.rpm ee6f96afabf76a2371f6ad7794094007794abced49c15fc264f9ad89d105637e samba-winbind-krb5-locator-3.6.23-14.el6_6.x86_64.rpm Source: 8546e15a497917367389ff0c88c8f98d1a8bbd415f13693d4005b06cb547041f samba-3.6.23-14.el6_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Mon, 23 Feb 2015 14:24:03 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0250 Critical CentOS 6 samba4 Security Update Message-ID: <20150223142403.GA4561(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0250 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0250.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 100fe5b533cc33de42032d0f79f0f585b08e1ec39c443378bec41c3d49fdd958 samba4-4.0.0-66.el6_6.rc4.i686.rpm d011f2eaddbfbf48bfa6201bb6d54de09e4480f4b5e0ca00259468657d30e20d samba4-client-4.0.0-66.el6_6.rc4.i686.rpm a3b9936143830374f537260271001a7653dc957a259f7169a71f9d4307d831e4 samba4-common-4.0.0-66.el6_6.rc4.i686.rpm 8fbc8ab2a42720c7e00ca5a01ee8dfd250ffb773cd988b170eaccefb6ae92411 samba4-dc-4.0.0-66.el6_6.rc4.i686.rpm e284c5ea2d1e4eb2ec5959839a8c16b8f1752187b5b2c3e7ddfa9f1b9d19d61f samba4-dc-libs-4.0.0-66.el6_6.rc4.i686.rpm 4ad116ad815e9d42849d24b688a32deacf77072cc9ba56bed100d234b00795e7 samba4-devel-4.0.0-66.el6_6.rc4.i686.rpm 236a0fdbf428a1791641c6c5d0ca1a848ce6a6cd8c5f54afba80193cc4032ea6 samba4-libs-4.0.0-66.el6_6.rc4.i686.rpm be4763bee3d9286ba1f24b7c45b259a9977fbd4a8650366b59b0c0254512e232 samba4-pidl-4.0.0-66.el6_6.rc4.i686.rpm af7f9f6b15b2784bce7db824dfa1fc73118d770b766b098b8baafa2d900b4dc7 samba4-python-4.0.0-66.el6_6.rc4.i686.rpm 8ee1068d04cfc1444975dd1bf76547a967488207616685783a97940ee63805a5 samba4-swat-4.0.0-66.el6_6.rc4.i686.rpm 885fd63c7b9659b95a79c2bece7d8c6a141f712ab3132286ec312bd0acdb1e7b samba4-test-4.0.0-66.el6_6.rc4.i686.rpm 2f999fe21b086dfaced614fb70abc4d20974732a8c9330c9064fcaf4920a8344 samba4-winbind-4.0.0-66.el6_6.rc4.i686.rpm 91ad13df0940d332d4e0094158096a3e553586e0c0a4588e5575ee4e5063060a samba4-winbind-clients-4.0.0-66.el6_6.rc4.i686.rpm 9d50496c0c5370b6df15d1362b3630f2007c97fb889d6f4cfa0004483fa5f55d samba4-winbind-krb5-locator-4.0.0-66.el6_6.rc4.i686.rpm x86_64: 5bd86d9cea51edc0e115f3be534af6a5234474340942c1166c1365b672a5fa81 samba4-4.0.0-66.el6_6.rc4.x86_64.rpm 3e59d105ad4146cc9a95164b7a3e7f3e2f2a4de7b7de93251e7a7b0e6d523ea7 samba4-client-4.0.0-66.el6_6.rc4.x86_64.rpm 751d8b48d4db18ea158848f0aef0111ffa6b764a4897f482a5347384f431b60a samba4-common-4.0.0-66.el6_6.rc4.x86_64.rpm d8113365d9e7c45a60f4b6686de135adc1cc51dc0277a3a21fca71cb068591ef samba4-dc-4.0.0-66.el6_6.rc4.x86_64.rpm 130e4445ae2e1d8c7c9bbcc341fb62d9dc2db71360bcc7eea31bd05807879d4a samba4-dc-libs-4.0.0-66.el6_6.rc4.x86_64.rpm 49466a31583629e48085a1b7f4ebd309760556dc34089b135ebd28da626024c0 samba4-devel-4.0.0-66.el6_6.rc4.x86_64.rpm 7e31280325c51e222963625dd0fdaf496e08be51ac884c0861f2def5a2b55d18 samba4-libs-4.0.0-66.el6_6.rc4.x86_64.rpm ca0c8b5c32820b49ad50efcd29bffec758465f89cff4b525e322b24d90ebadb8 samba4-pidl-4.0.0-66.el6_6.rc4.x86_64.rpm 71ced907834c077d17ee4e529c41057a96ad821d136b087bc3f90aa67af876c2 samba4-python-4.0.0-66.el6_6.rc4.x86_64.rpm d602b602ce3febc716efb948b495bff56267fe521b0d6f338eb2f54cc37ecd5a samba4-swat-4.0.0-66.el6_6.rc4.x86_64.rpm 7b87849d93ca8624b26b9d0c48afd1de9f82d048d5f0ef789965e9db7650e1df samba4-test-4.0.0-66.el6_6.rc4.x86_64.rpm ae80eead7a811265e4a01441a4696dc2e9d1c838edbc7f37749ea2e3d2e93dee samba4-winbind-4.0.0-66.el6_6.rc4.x86_64.rpm cb7e0946d977b0273f1920d2ad8622afe9e2cc70de220150ffcebef8f59d00a9 samba4-winbind-clients-4.0.0-66.el6_6.rc4.x86_64.rpm 5ab7957a835b5f6b2e1e4e469fdf759ddc0d00c0c5d718aa87ad9b15d20f0a6b samba4-winbind-krb5-locator-4.0.0-66.el6_6.rc4.x86_64.rpm Source: a5e01f21eed4408fe5c9c774d92b8e6ba66d4728cb0c92005f3d0a947729a96f samba4-4.0.0-66.el6_6.rc4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Mon, 23 Feb 2015 14:35:15 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:0252 Important CentOS 7 samba Security Update Message-ID: <20150223143515.GA21249(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2015:0252 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0252.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 9087d932e6a4026e0a5946920296d37faa06592703683b7305ed230145520b20 libsmbclient-4.1.1-38.el7_0.i686.rpm 966514ea9b08a8eea938804bde0d37cc0b991bbe93f74a7b38daaced90a6ac99 libsmbclient-4.1.1-38.el7_0.x86_64.rpm ce8c82950790ca929f5b6cbc88419bceb6fae4647ea05d89480f67a1d0b53998 libsmbclient-devel-4.1.1-38.el7_0.i686.rpm 0cb68488638ea1080880541ba8a9eb102162451b5c8fd2758d52694eb48ac7bd libsmbclient-devel-4.1.1-38.el7_0.x86_64.rpm 1e44d2231a5680c4ea4d0894e11498dd5f48a514206c18e4f7a087ba7f389794 libwbclient-4.1.1-38.el7_0.i686.rpm 6bf7a113e1f723f537ed364a313b0f546e2a8bd94335270d6a0a67ed47429a60 libwbclient-4.1.1-38.el7_0.x86_64.rpm e8108ba4ffa59a1e11a3126f402d5bf67284df59d05a8d540f451d320cd5534b libwbclient-devel-4.1.1-38.el7_0.i686.rpm 0a2d2aafd4588e735ef389210abca164dd7be3950f4d43a5c51ffe1131c8134b libwbclient-devel-4.1.1-38.el7_0.x86_64.rpm 735bdda9c62a3527a048c8a65c7fae9c521b39563c24f9ba7b80af397c847fd7 samba-4.1.1-38.el7_0.x86_64.rpm 5a8e853368d2ed81c977b8d1383214487fe4af2d080a4feb728fefa53b34520b samba-client-4.1.1-38.el7_0.x86_64.rpm 5968a13985c8f27970edf0d37067a703d2c7092b8f548473f456bb4818905fb6 samba-common-4.1.1-38.el7_0.x86_64.rpm 63934256095cfc6f623b2702ec5af5d1cb656dd379d5c94e0e2529337076f6f0 samba-dc-4.1.1-38.el7_0.x86_64.rpm de13c6419cec02810b21750e45bb4a3378dc2e862ec41d7b983af7a0711f8e0f samba-dc-libs-4.1.1-38.el7_0.x86_64.rpm 8bb0ffe3565690d48ed6edb63a26f38aaa0d0206a7090c418950c3806330e8eb samba-devel-4.1.1-38.el7_0.i686.rpm ca0b206a63a7b5ef14694023f11d55cddefcdd2e5b81f566561aecc8153ad7ef samba-devel-4.1.1-38.el7_0.x86_64.rpm 6d383c28b0cf3afd3575ec272bf5b4e1d3186b2f742bf8d560a259a9e21b811f samba-libs-4.1.1-38.el7_0.i686.rpm b7ad1c2b059d44f549c5c516e6b6f233fa72f147e5964591d6b361d96511bbd2 samba-libs-4.1.1-38.el7_0.x86_64.rpm 2bad32437a07288bdfe4e32d1bbe395199e0484a001959c9a76c0f1f4d7a9a29 samba-pidl-4.1.1-38.el7_0.x86_64.rpm 4a462a154f2df99c92c91b32d7fb9f90028afb72bf183f80320082f60cce8395 samba-python-4.1.1-38.el7_0.x86_64.rpm 42a2b58bcf4ed5c58bdf421dcfb817a92bf21dc3523db4ba5330c2e9435ae83a samba-test-4.1.1-38.el7_0.x86_64.rpm 1c4f811d04297845329faf3014e9509918c973c8eb31731efc0c9f9caa5e51c1 samba-test-devel-4.1.1-38.el7_0.x86_64.rpm a452975a0a7f6a283da6f29f7e20b47695594a080baa66d92ccf7830428ffd3f samba-vfs-glusterfs-4.1.1-38.el7_0.x86_64.rpm 5ea4d820a1a88fd9be361618f73e126b4d9044c2f2ac46b67baf62fdf1c7e447 samba-winbind-4.1.1-38.el7_0.x86_64.rpm c3f06f953507dfcd2c2a34a12641813acbccc25bd7a93ffa44171c0b254e9aaa samba-winbind-clients-4.1.1-38.el7_0.x86_64.rpm a7c8f5c732c214ecd92482f171ac68e6b39f324ff78a1cb12ac50fe1be1f58ca samba-winbind-krb5-locator-4.1.1-38.el7_0.x86_64.rpm eb72206754c2570a6202721d29d8beb2a6d7e13ce30649a3b7d8b5fb3b747c87 samba-winbind-modules-4.1.1-38.el7_0.i686.rpm e4171a7a78365847bb7cf47077d23609a1fbc1fa50b0c8bb1ca602191a1a4e79 samba-winbind-modules-4.1.1-38.el7_0.x86_64.rpm Source: fa5f55a2000a3624256a251ab2004fa4231410890c8eb9f140b0feb504cb2513 samba-4.1.1-38.el7_0.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 120, Issue 8 ***********************************************

1 0

sssd - ldap host attribute ignored
by Ulrich Hiller 24 Feb '15

24 Feb '15

Dear all, i have a problem with sssd in conjunction with ldap on a centos 7 x86_64 box. ldap works fine. I can login there as an usual user registred in ldap. I want now restrict the access with ldap's host attribute. This is beeing ignored. Still every ldap user can login, no matter what the host attribute says. I googled around and only found that sssd.conf need two lines: access_provider = ldap ldap_access_order = host So i do not understand why it is not working. I append to this e-mail: /etc/sssd/sssd.conf /etc/ldap.conf /etc/pamd.d/ssh Can somebody give me hints what could be wrong? With kind reagards and thanks a lot in advance, Ulrich /etc/sssd/sssd.conf: -------------------- [sssd] config_file_version = 2 services = nss, pam, autofs domains = default # SSSD will not start if you do not configure any domains. # Add new domain configurations as [domain/<NAME>] sections, and # then add the list of domains (in the order you want them to be # queried) to the "domains" attribute below and uncomment it. # domains = LDAP [nss] filter_groups = root filter_users = root [pam] [domain/default] ldap_uri = ldap://myldapserver.mydomain ldap_search_base = o=XXXX ldap_schema = rfc2307bis id_provider = ldap ldap_user_uuid = entryuuid ldap_group_uuid = entryuuid ldap_id_use_start_tls = True enumerate = False cache_credentials = False ldap_tls_cacertdir = /etc/openldap/cacerts/ chpass_provider = ldap auth_provider = ldap ldap_tls_reqcert = never ldap_user_search_base = ou=YYYY,o=XXXX ldap_group_search_base = ou=YYYY,o=XXXX access_provider = ldap ldap_access_filter = memberOf=ou=YYYY,o=XXXX ldap_access_order = host /etc/ldap.conf: ---------------------- # # LDAP Defaults # # See ldap.conf(5) for details # This file should be world readable but not world writable. #BASE dc=example,dc=com #URI ldap://ldap.example.com ldap://ldap-master.example.com:666 #SIZELIMIT 12 #TIMELIMIT 15 #DEREF never TLS_CACERTDIR /etc/openldap/cacerts # Turning this off breaks GSSAPI used with krb5 when rdns = false SASL_NOCANON on URI ldap://myldapserver.mydomain BASE ou=YYYY,o=XXXX /etc/pam.d/sshd: ------------------------------ #%PAM-1.0 auth required pam_sepermit.so auth substack password-auth auth include postlogin account required pam_nologin.so account include password-auth password include password-auth # pam_selinux.so close should be the first session rule session required pam_selinux.so close session required pam_loginuid.so # pam_selinux.so open should only be followed by sessions to be executed in the user context session required pam_selinux.so open env_params session optional pam_keyinit.so force revoke session include password-auth session include postlogin session required pam_mkhomedir.so skel=/etc/skel/ umask=0077

2 2

Master - Slave Split DNS
by aditya hilman 24 Feb '15

24 Feb '15

Hi folks, I've already configured split DNS for internal-view and external-view. Also already configured the master - slave dns. But i've problem with external-view zone transfer. Based on the logs, the master notify to slave using the public ip, which is not accessible by master to transfering the zone over public ip. Is it possible to transfer zone over local ip for external-view ? Thanks. -- Regards, Adit http://a <http://simplyaddo.web.id>dityahilman.com http://id.linkedin.com/in/adityahilman ym : science2rule

6 9

Making systemd start a service after sshd?
by Bryan Wright 23 Feb '15

23 Feb '15

Hi folks, For complicated reasons, I'd like to have a service (lightdm) start after sshd starts. (This is on CentOS 7.) I've tried adding "sshd.service" to the lists of "Active=" and "Require=" items in /etc/systemd/system/lightdm.service (which started as a copy of /usr/lib/systemd/system/lightdm.service), but these changes don't seem to have any effect. Sshd still starts long after lightdm starts. Any suggestions? For what it's worth, here's the entire lightdm.service file: [Unit] Description=Light Display Manager Documentation=man:lightdm(1) Conflicts=getty(a)tty1.service After=systemd-user-sessions.service getty(a)tty1.service plymouth-quit.service livesys-late.service time-sync.target sshd.service Require=time-sync.target sshd.service [Service] ExecStart=/usr/sbin/lightdm Restart=always IgnoreSIGPIPE=no BusName=org.freedesktop.DisplayManager [Install] Alias=display-manager.service Thanks for any help. Bryan

3 4

Help with Driver Eth0
by Kevin Mauricio Benavides Castro 23 Feb '15

23 Feb '15

Dear Friends of the Community Here by I request some help, now Install Centos 5.0 in DELL 3020 one machine installation took correctly, but after installation I find that the network card that brings integrated computer does not recognize the eth0. 02:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd. RTL8111/8168B PCI Express Gigabit Ethernet controller (rev 02) Subsystem: Giga-byte Technology Unknown device e000 Flags: bus master, fast devsel, latency 0, IRQ 50 I/O ports at b000 [size=256] Memory at e1510000 (64-bit, prefetchable) [size=4K] Memory at e1500000 (64-bit, prefetchable) [size=64K] [virtual] Expansion ROM at e1520000 [disabled] [size=64K] Capabilities: [40] Power Management version 3 Capabilities: [50] Message Signalled Interrupts: 64bit+ Queue=0/1 Enable+ Capabilities: [70] Express Endpoint IRQ 1 Capabilities: [b0] MSI-X: Enable- Mask- TabSize=2 Capabilities: [d0] Vital Product Data Capabilities: [100] Advanced Error Reporting Capabilities: [140] Virtual Channel Capabilities: [160] Device Serial Number xx-xx-xx-xx-xx-xx-xx-xx I researched well into the problem in various forums, but the driver you need the equipment is Realtek RTL8111B / RTL8168B NIC. Someone may orient me well what I have to do to install the driver for usb Offline so ?? if you can clear regards *Kevin Mauricio Benavides Castro* *Integrador de Systemas* *Cel: +505 84478854 * *Skype: kevin.olpc.support*

4 3

lua-debuginfo for CentOS6?
by Les Mikesell 23 Feb '15

23 Feb '15

Is there some reason http://debuginfo.centos.org/6/x86_64/ is missing a lua-debuginfo package? The /5/ and /7/ sections have it. -- Les Mikesell lesmikesell(a)gmail.com

2 1

pidgin on 6.6
by m.roth＠5-cent.us 23 Feb '15

23 Feb '15

Anyone out there using pidgin and jabber? Recently, there was a redo of the organization's jabber server, (probably a Windows thing), and suddenly, instead of my usernamte@address, I get username@address/<looks like a socket id>. For example, mine, after my username@jabberserver/f862437769a069c68119dc3068e2acbd5f0eaba6, so a line and a half of garbage. Any ideas? Googling isn't finding me anything... oh, and the tech on the other end, who's using Windows, isn't seeing that, he just sees username@<jabberserver> mark

2 1

Re: [CentOS] Help with routing question.
by James B. Byrne 23 Feb '15

23 Feb '15

On Thu, February 19, 2015 12:33, Les Mikesell wrote: > On Thu, Feb 19, 2015 at 9:48 AM, James B. Byrne > <byrnejb(a)harte-lyne.ca> wrote: >> >>> I added these directives to the route-eth0:192 file: >>> >>> ADDRESS0=192.168.6.9 >>> NETMASK0=255.255.255.0 >>> GATEWAY0=192.168.6.1 >>> >> >> Which should have been: >> >> ADDRESS0=192.168.6.0 >> >> NETMASK0=255.255.255.0 >> GATEWAY0=192.168.6.1 >> > > But it still doesn't matter. Your netmask in the ifcfg- file already > covers that range and you don't need another route/GATEWAY for it. > You don't need the route- file at all. Thank you. I was grasping at straws in this case to solve a strange routing problem that turned out to be a misconfigured gateway firewall. It was a very odd error because it only affected one of our off-site net-blocks. So tracking it down cause a little more hair-pulling than usual. Fixed for now. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

scp -rp behavior
by Mark LaPierre 22 Feb '15

22 Feb '15

Hey all, I'm trying to copy configuration files from my old CentOS 6.6 32 bit machine to my new CentOS 6.6 64 bit machine. On my 32 bit machine: [mlapier@mushroom ~]$ ifconfig eth0 Link encap:Ethernet HWaddr 00:19:DB:E5:4E:9F inet addr:192.168.15.105 When I issue this command on my new 64 bit machine, 192.168.15.101: scp -pr mlapier(a)192.168.15.105: /home/mlapier/.thunderbird /home/mlapier/.thunderbird It copies all directories and files in 192.168.15.105: /home/mlapier/ to 192.168.15.101: /home/mlapier. I don't want all that, I just want the .thunderbird folder and all it's contents. The user and group account numbers match on the two machines for this user so that's not the issue. When I RTFM this is what I thought it said to do. I'm I misreading the FM or is something weird going on here? -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ ****

2 1

CentOS-announce Digest, Vol 120, Issue 7
by centos-announce-request＠centos.org 21 Feb '15

21 Feb '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2015:C002 CentOS-7 centos-release BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 20 Feb 2015 16:09:22 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2015:C002 CentOS-7 centos-release BugFix Update Message-ID: <20150220160922.GA1711(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and BugFix Advisory 2015:C002 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 89a6d526f11d2544adedaa554e010b772b644395689c5e246ef54f8205352741 centos-release-7-0.1406.el7.centos.2.6.x86_64.rpm Source: f2686a700e7c21c9117d2f418a1260c2cc80e4180c62ecf10544b3b1c85c9eac centos-release-7-0.1406.el7.centos.2.6.src.rpm NOTE: This update adds CentOS-CR.repo to /etc/yum.repos.d/ . It is disabled by default. If you want to enable the CR repo for future updates, then edit /etc/yum.repos.d/CentOS-CR.repo and set the [cr] repo from enabled=0 to enabled=1. For more information on the CentOS CR repository, see: http://wiki.centos.org/AdditionalResources/Repositories/CR -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos at irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 120, Issue 7 ***********************************************

1 0

how to stop yum when networkmanager has broken resolv.conf?
by Les Mikesell 20 Feb '15

20 Feb '15

So, I'm getting an error where the network service and NetworkManager apparently don't agree on how to bring up vlans on bonded nics. Things come up if you 'ifup ..' manually. I thought I'd check if there were any updates, forgetting to fix what NetworkManger had done to /etc/resolv.conf and: http://centos.arvixe.com/7.0.1406/os/x86_64/repodata/repomd.xml: [Errno 12] Timeout on http://centos.arvixe.com/7.0.1406/os/x86_64/repodata/repomd.xml: (28, 'Resolving timed out after 30381 milliseconds') Trying other mirror. ^C^C^C ^C^C^C Current download cancelled, interrupt (ctrl-c) again within two seconds to exit. Yeah - I did hit it about 6 times there. What do you have to do to make it actually stop in some reasonable amount of time? -- Les Mikesell lesmikesell(a)gmail.com

3 5

iostat a partition
by Tim Dunphy 20 Feb '15

20 Feb '15

Hey guys, I need to use iostat to diagnose a disk latency problem we think we may be having. So if I have this disk partition: [root@uszmpdblp010la mysql]# df -h /mysql Filesystem Size Used Avail Use% Mounted on /dev/mapper/MysqlVG-MysqlVol 9.9G 1.1G 8.4G 11% /mysql And I want to correlate that to the output of fdisk -l, so that I can feed the disk partition I want to iostat, how would I go about that? Here is my output from fdisk -l [root@uszmpdblp010la mysql]# fdisk -l Disk /dev/cciss/c0d0: 146.7 GB, 146778685440 bytes 255 heads, 32 sectors/track, 35132 cylinders Units = cylinders of 8160 * 512 = 4177920 bytes Device Boot Start End Blocks Id System /dev/cciss/c0d0p1 * 1 120 488281 83 Linux Partition 1 does not end on cylinder boundary. /dev/cciss/c0d0p2 121 35131 142841947+ 8e Linux LVM Partition 2 does not end on cylinder boundary. Disk /dev/cciss/c0d1: 1199.8 GB, 1199865640960 bytes 255 heads, 32 sectors/track, 287192 cylinders Units = cylinders of 8160 * 512 = 4177920 bytes Device Boot Start End Blocks Id System /dev/cciss/c0d1p1 1 287192 1171743344 8e Linux LVM Disk /dev/dm-0: 2147 MB, 2147483648 bytes 255 heads, 63 sectors/track, 261 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Disk /dev/dm-0 doesn't contain a valid partition table Disk /dev/dm-1: 2147 MB, 2147483648 bytes 255 heads, 63 sectors/track, 261 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Disk /dev/dm-1 doesn't contain a valid partition table Disk /dev/dm-2: 4294 MB, 4294967296 bytes 255 heads, 63 sectors/track, 522 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Disk /dev/dm-2 doesn't contain a valid partition table Disk /dev/dm-3: 6442 MB, 6442450944 bytes 255 heads, 63 sectors/track, 783 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Disk /dev/dm-3 doesn't contain a valid partition table Disk /dev/dm-4: 6442 MB, 6442450944 bytes 255 heads, 63 sectors/track, 783 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Disk /dev/dm-4 doesn't contain a valid partition table Disk /dev/dm-5: 6442 MB, 6442450944 bytes 255 heads, 63 sectors/track, 783 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Disk /dev/dm-5 doesn't contain a valid partition table Disk /dev/dm-6: 17.1 GB, 17179869184 bytes 255 heads, 63 sectors/track, 2088 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Disk /dev/dm-6 doesn't contain a valid partition table Thanks, Tim -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

4 3

CentOS 6.5 OpenSSH PAM config
by Christian Kittlitz 20 Feb '15

20 Feb '15

Sorry - without the signing this time. Hello. Our products use CentOS 6.5 and we would like to deploy them with custom openssh RPMs. I have downloaded the sources from http://athena.caslab.queensu.ca/pub/OpenBSD/OpenSSH/portable and built the RPMs, but the PAM configuration file is wrong after installation. When I install the default openssh-5.3p1 RPMs from the CentOS 6.5 repository, the configuration looks like this: # cat /etc/pam.d/sshd #%PAM-1.0 auth required pam_sepermit.so auth include password-auth account required pam_nologin.so account include password-auth password include password-auth # pam_selinux.so close should be the first session rule session required pam_selinux.so close session required pam_loginuid.so # pam_selinux.so open should only be followed by sessions to be executed in the user context session required pam_selinux.so open env_params session optional pam_keyinit.so force revoke session include password-auth However, when I rebuild this exact RPM from the source and install it, I get the following: # cat /etc/pam.d/sshd #%PAM-1.0 auth required pam_stack.so service=system-auth account required pam_nologin.so account required pam_stack.so service=system-auth password required pam_stack.so service=system-auth session required pam_stack.so service=system-auth I was wondering if there are any build logs that would show how the openssh RPMs were built from the source for CentOS 6.5. Perhaps there is some type of configuration I am missing that would ensure that I get the same PAM configuration. Thanks!

2 1

Re: [CentOS] CentOS 7: software RAID 5 array with 4 disks and no spares?
by James B. Byrne 20 Feb '15

20 Feb '15

On Thu, February 19, 2015 22:01, Dennis Jacobfeuerborn wrote: > On 19.02.2015 19:41, Chris Murphy wrote: > > Linux with a thousand knobs is never going become popular. Instead > somebody has to go and create an opinionated system where most knobs > are removed and replaced by sane/good/useful defaults. Gnome3? DFCAR. . . -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Re: [CentOS] CentOS 7: software RAID 5 array with 4 disks and no spares?
by James B. Byrne 20 Feb '15

20 Feb '15

On Thu, February 19, 2015 13:41, Chris Murphy wrote: > > Linux distros experience on this front is terrible. Why? Linux OS's Because Linux-land is a bazaar and Apple-land is a cathedral. You cannot have consistency at the user level without stability at the OS and application framework level. That is simply not going to happen with FOSS. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

CentOS 6.5 Openssh Pam sshd config
by Christian Kittlitz 20 Feb '15

20 Feb '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello. Our products use CentOS 6.5 and we would like to deploy them with custom openssh RPMs. I have downloaded the sources from http://athena.caslab.queensu.ca/pub/OpenBSD/OpenSSH/portable and built the RPMs, but the PAM configuration file is wrong after installation. When I install the default openssh-5.3p1 RPMs from the CentOS 6.5 repository, the configuration looks like this: # cat /etc/pam.d/sshd #%PAM-1.0 auth required pam_sepermit.so auth include password-auth account required pam_nologin.so account include password-auth password include password-auth # pam_selinux.so close should be the first session rule session required pam_selinux.so close session required pam_loginuid.so # pam_selinux.so open should only be followed by sessions to be executed in the user context session required pam_selinux.so open env_params session optional pam_keyinit.so force revoke session include password-auth However, when I rebuild this exact RPM from the source and install it, I get the following: # cat /etc/pam.d/sshd #%PAM-1.0 auth required pam_stack.so service=system-auth account required pam_nologin.so account required pam_stack.so service=system-auth password required pam_stack.so service=system-auth session required pam_stack.so service=system-auth I was wondering if there are any build logs that would show how the openssh RPMs were built from the source for CentOS 6.5. Perhaps there is some type of configuration I am missing that would ensure that I get the same PAM configuration. Thanks! -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJU5yqPAAoJEANGWTohTXlwqQAH/33B+TlbbeLaynfOLF6UvMnN f+m+b/bxkH2u97nj4UNkEegKUwtiCPG0JbJ+bEQ5BDNavYoBeVZ4PFkEoiksM9CY HVKCx5OVtB2ZKCb4H+QNzSQKTlLLTeJvsD66xeACaZwyu1m4o5YBj8cidEOYAYby xQaXEVJG+sOy5MhGljqK+hwwrIIF0cbB0w6kBVGVE5lFeG7czmSkXyC9ASidg40Y SIIEXLEZAX8rAFSoQd7CZpjvwAo+3JJL3h0+wetr7pyuTnbihvaoUmt5ILesNvd3 vbg41wphFbE2UBCFce3fB+0UQvlTtQVFFlOpCW+U5ZvRkn+IRUb5iMBKAQNHKUo= =DjNH -----END PGP SIGNATURE-----

1 0

CentOS-announce Digest, Vol 120, Issue 6
by centos-announce-request＠centos.org 20 Feb '15

20 Feb '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2015:0238 CentOS 6 emacs FASTTRACK BugFix Update (Johnny Hughes) 2. CEBA-2015:0237 CentOS 6 gvfs FASTTRACK BugFix Update (Johnny Hughes) 3. CEBA-2015:0240 CentOS 6 at FASTTRACK BugFix Update (Johnny Hughes) 4. CEBA-2015:0244 CentOS 6 busybox BugFix Update (Johnny Hughes) 5. CEBA-2015:0245 CentOS 6 resource-agents BugFix Update (Johnny Hughes) 6. CEBA-2015:0239 CentOS 6 bacula FASTTRACK BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 19 Feb 2015 14:01:02 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0238 CentOS 6 emacs FASTTRACK BugFix Update Message-ID: <20150219140102.GA17320(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0238 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0238.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: c5892aeea82a18c5d819a032c445dd0c61c22191ab92a0b9f7a05d4e3f73b2ed emacs-23.1-28.el6.i686.rpm e8dc441e046c6102cc8769e865e2cec622080e3d0a205dfd55726f557670e7af emacs-common-23.1-28.el6.i686.rpm 53e139565006eb5e70d90ce4aaa6ba2a32a585ae9078a836ac046f7382d2bba9 emacs-el-23.1-28.el6.i686.rpm 3ba4ceca1dc4737b4a679791beb01e0c90f1476fbce4118a2359d7a44ca45853 emacs-nox-23.1-28.el6.i686.rpm x86_64: 86142caef2e8be1ad12be345d384101574fbf5aa590034955283ee426aa24a28 emacs-23.1-28.el6.x86_64.rpm 9c9b20bd73aa7e99ad992683c5736af88fd5fa7c1b567b557030599c4fa1591f emacs-common-23.1-28.el6.x86_64.rpm adb22826248066218c9882e0943ec2f21d4346f5917fcb1b529de1789ecda8d6 emacs-el-23.1-28.el6.x86_64.rpm adb704163645a5cc8a2345e6fd89460246540b3e2b628b534743e0a5aaddb8e7 emacs-nox-23.1-28.el6.x86_64.rpm Source: 609513920f3f3716d95657d28e9f6a34d1e8e3ec25a9b3a7d1232a8799532ac0 emacs-23.1-28.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Thu, 19 Feb 2015 14:01:21 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0237 CentOS 6 gvfs FASTTRACK BugFix Update Message-ID: <20150219140121.GA17478(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0237 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0237.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 7dcaac6f48780a284f3719ff9fc56bde1cc28ad20077cbcf66f1bd8716635dc0 gvfs-1.4.3-20.el6.i686.rpm 996d087774c30b30ebf9924653298e5dd1c34281713b7b151aea6bc4f44298d2 gvfs-afc-1.4.3-20.el6.i686.rpm a500f0aab82536ac3f925abc9acefb7c6a14ab285c468a8382a28ab450cfebd2 gvfs-archive-1.4.3-20.el6.i686.rpm 42ca7904f7d729d4e02764e9166c4f8e325e1e6e98cea11f0b1b23954e57d163 gvfs-devel-1.4.3-20.el6.i686.rpm a6a94b87e8dd01a7cd2337a55d35307b5a12ed4d292ca5e33b039f4141af8940 gvfs-fuse-1.4.3-20.el6.i686.rpm c2359488071b687dc059cee51b3d5e4f065818ca7bdef2e8baf4d9c46aa54595 gvfs-gphoto2-1.4.3-20.el6.i686.rpm ddc1e972dfeeabf839df9b2c6ae2eeca41b65227e0a36b1e7f39bea27bdfb272 gvfs-obexftp-1.4.3-20.el6.i686.rpm 252b41a9c772c870ef96e3f2b6ee4f11c04380786f6bbeba4fa496c69590dc3a gvfs-smb-1.4.3-20.el6.i686.rpm x86_64: 7dcaac6f48780a284f3719ff9fc56bde1cc28ad20077cbcf66f1bd8716635dc0 gvfs-1.4.3-20.el6.i686.rpm 357f42ae60d8fa546df7f331e29cc8fe36cc7245f7cf9393c67d93165c2afc46 gvfs-1.4.3-20.el6.x86_64.rpm 12b45feabfa48e979bb5d67fa7a23c4a2fe23299130211dfd4d0cc65c0e51fd1 gvfs-afc-1.4.3-20.el6.x86_64.rpm 33ebb87255508129c54b5b9cbfd0941ed24d9fa7d80d2e6534f3c6218dab1329 gvfs-archive-1.4.3-20.el6.x86_64.rpm 42ca7904f7d729d4e02764e9166c4f8e325e1e6e98cea11f0b1b23954e57d163 gvfs-devel-1.4.3-20.el6.i686.rpm 1ef766e1eab01c490e44bd46824929b171c5d237085eba90b4bf9870f82574bd gvfs-devel-1.4.3-20.el6.x86_64.rpm b463bcb86914c367ae3fbdd6d9b674b5cef2eae21103d1aabcb152805a303019 gvfs-fuse-1.4.3-20.el6.x86_64.rpm 2d6b3096555b0e40b6a7eed103c1580a21fb84e7d3f5a68ff1c88f50cc897d19 gvfs-gphoto2-1.4.3-20.el6.x86_64.rpm 5175db6be3517df7c17f01566e2f20867f9ef57dc90c14512639f09e005f0e71 gvfs-obexftp-1.4.3-20.el6.x86_64.rpm edb9f926821fd6611b0d9463f04bef794360668534134338d3b990b4dc19eb28 gvfs-smb-1.4.3-20.el6.x86_64.rpm Source: d34f8a284468fb3022805f1a3f928ea272b22d29906bf295d82b4dd710006f09 gvfs-1.4.3-20.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Thu, 19 Feb 2015 16:35:09 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0240 CentOS 6 at FASTTRACK BugFix Update Message-ID: <20150219163509.GA22099(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0240 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0240.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 74722015232f25343dd37af315fb12a75d2a9a3f28a934b6a63cd37b9a177f83 at-3.1.10-48.el6.i686.rpm x86_64: 1ee32b22836d4364457be8480e974c0ac395a0525b5e1a847f3dd78dcd3bee4e at-3.1.10-48.el6.x86_64.rpm Source: 1ed3b094ee9c07a067ac1b7a36a4b5350cfceab5e76b155a0b9bfa0513c44732 at-3.1.10-48.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Thu, 19 Feb 2015 16:35:50 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0244 CentOS 6 busybox BugFix Update Message-ID: <20150219163550.GA22315(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0244 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0244.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 8a65b7fef64f6cf48889b896f6a47c0ed4503b0ec7aeed2b2515972ededcd1b7 busybox-1.15.1-21.el6_6.i686.rpm c01c8f78c58ebe47136902d76f959f2ccb5da9414e72511445711ef8983cc33d busybox-petitboot-1.15.1-21.el6_6.i686.rpm x86_64: 68189894c6f04cc2862e4c37f03d191e7eee3c2a72e412203e1b8ee93e0e9599 busybox-1.15.1-21.el6_6.x86_64.rpm 2acdc4229d7fa197fea79c072129e1b9e200694d9d08db9e3fea054f0f244eb9 busybox-petitboot-1.15.1-21.el6_6.x86_64.rpm Source: 68a8fe0335f9ba1fc6905cd66259bd9b953e5b0c86555bd7101e047ed7114972 busybox-1.15.1-21.el6_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Thu, 19 Feb 2015 16:40:58 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0245 CentOS 6 resource-agents BugFix Update Message-ID: <20150219164058.GA22620(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0245 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0245.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 7b58c2f6d8a969dbef9cad7891d6dc954cce975c38d8f79f3e8b686db4bf323d resource-agents-3.9.5-12.el6_6.4.i686.rpm x86_64: 8b8f1c276c1bead587dca1315832a6cf3fc8fa17e0b1ec849873a0a0da33a940 resource-agents-3.9.5-12.el6_6.4.x86_64.rpm f9a8ca9603308e441aa638100e8a6dc62e6949832165106ae5dfbf9fac7b7ee1 resource-agents-sap-3.9.5-12.el6_6.4.x86_64.rpm Source: 9cb570f24c7706e768ce53f78400ab531ab7aa6f3eb1bb8ce75ce52bf069557f resource-agents-3.9.5-12.el6_6.4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Thu, 19 Feb 2015 16:48:29 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:0239 CentOS 6 bacula FASTTRACK BugFix Update Message-ID: <20150219164829.GA33029(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:0239 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0239.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: de15a060812e939050e6d9672e167f81ed6474aba93d283dea0f07a176951407 bacula-client-5.0.0-13.el6.i686.rpm 7b7cf7787f231dd81934d08ac1da93204d84f9c1c772ae8f13dd7ee3bffaa275 bacula-common-5.0.0-13.el6.i686.rpm 7acfcc0f037cc785ecb3cad3b592269ab877718d3f30207afddd3eed6144ae04 bacula-console-5.0.0-13.el6.i686.rpm 739fd1151f5c701b2f9e2630ed4fd8f9adb311d01f912dbe41658ba461937c08 bacula-console-bat-5.0.0-13.el6.i686.rpm 72b9216b94a213875d510b1a3cd8fb8edf33870735bb95086b050e3fff7465fc bacula-director-common-5.0.0-13.el6.i686.rpm 8c50640206e9970ac0ec91c477ec8cc720e60ad25e8974e1576c0721b2527d79 bacula-director-mysql-5.0.0-13.el6.i686.rpm 3af3fb8c2843e52a186eb161145407ed74ea4092c3e6e00a4b23f6bb85686bc2 bacula-director-postgresql-5.0.0-13.el6.i686.rpm 72f79d3785027526cbc8d83dcd56e872bf110bba551fc488fc01eebba4a0fe89 bacula-director-sqlite-5.0.0-13.el6.i686.rpm ef90b643d1182abfb46996e7452dadb3ef8048705b929170b3fd53de256eec3f bacula-docs-5.0.0-13.el6.i686.rpm 56208a38d396236e82d47ae3c55383bf6aa1b01100af6bd3f585973efa36d7ef bacula-storage-common-5.0.0-13.el6.i686.rpm 330df06273fa366c000424a2edb854a4267de3115f346a587442a7fd014dafa9 bacula-storage-mysql-5.0.0-13.el6.i686.rpm 1766b149bf12987263f2ba54daf65d7be2c3169d61735fa83e791fba801e3cb6 bacula-storage-postgresql-5.0.0-13.el6.i686.rpm 2bf1b3e3beb84f2bc6c479f8c9771ca536b3b9b1925919cc29e9fd461877ed31 bacula-storage-sqlite-5.0.0-13.el6.i686.rpm 73fb449c8fccfbe41c988a9d787738814be4f17dc670752823a4b997e2b605f2 bacula-traymonitor-5.0.0-13.el6.i686.rpm x86_64: d9f85bcae3044c97b6cc42a20b943346c33826aed1c7eb53c89902894288f6fa bacula-client-5.0.0-13.el6.x86_64.rpm f3f11086dc9c3d88258f01dcf8f7d39697f16339b684495a6c9aac7289176b57 bacula-common-5.0.0-13.el6.x86_64.rpm 8247f17e2635f1685dad0cddad2d3f0b2a76fa39f19839630b48611df32b8eaf bacula-console-5.0.0-13.el6.x86_64.rpm f63a36bbb12863cc47a62e8a6fd1d027f30e1841a538f38ce5a19e390d3aac5c bacula-console-bat-5.0.0-13.el6.x86_64.rpm 5340a8844337798c7f109b6cd7588e94c70a8b4a5a0522935bc5a49982002026 bacula-director-common-5.0.0-13.el6.x86_64.rpm 531af786debab948ec3f4fd9e3e8291354884bcb1ee78df28d6c6d73ebd3e217 bacula-director-mysql-5.0.0-13.el6.x86_64.rpm b003c19bf40ff2881c68e2a1d2bc74521a8bcf285b7e384dde9ba7bdf753a2a5 bacula-director-postgresql-5.0.0-13.el6.x86_64.rpm 04e5e31c3d09c5540b4a2f39c12cf36a01ecf0458d6eae7d5e82f34b9f6b13bc bacula-director-sqlite-5.0.0-13.el6.x86_64.rpm f635403f1e0b4b6ef2cd6769ad9b983229522c51ff8cc42274c97d221278f50d bacula-docs-5.0.0-13.el6.x86_64.rpm a6c52feabbdf6338e8b890a48de734f4a7c021124e5fee5768206206611089c3 bacula-storage-common-5.0.0-13.el6.x86_64.rpm c5326237e48c34ee4a519c2360d92209b2f7913c63d7234fd66d5d1535ddbbf3 bacula-storage-mysql-5.0.0-13.el6.x86_64.rpm e2ff9b16dde8b610d84f7176aca25fcb47ee72ef9e1fd607f2e4978a6906762c bacula-storage-postgresql-5.0.0-13.el6.x86_64.rpm 7781c525bad4968f2711d165191d3fd72923438de95f4fe710ec7ecd860ec72b bacula-storage-sqlite-5.0.0-13.el6.x86_64.rpm 4e2d9cbe88f48f250d5c63858ad1b0c1229fc0b69eb53b5dbabd5ebfd65c8af6 bacula-traymonitor-5.0.0-13.el6.x86_64.rpm Source: c586baedf6c21c21de183f6780b0171ae6da55d19bf083c29445446d4fdd1fea bacula-5.0.0-13.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 120, Issue 6 ***********************************************

1 0

Using "ipset" under CentOS7
by Tom Limoncelli 20 Feb '15

20 Feb '15

ipset on CentOS6 comes with /etc/rc.d/init.d/ipset so that "service ipset reload" can be used to (re)load the configuration. CentOS7 doesn't come with an equivalent for systemd: # systemctl reload ipset.service Failed to issue method call: Unit ipset.service failed to load: No such file or directory. # systemctl start ipset.service Failed to issue method call: Unit ipset.service failed to load: No such file or directory. # find /etc -name ipset.service # What is the recommended procedure for loading the ipset configuration? Thanks, Tom -- Email: tal(a)whatexit.org Work: tlimoncelli(a)StackOverflow.com Skype: YesThatTom Blog: http://EverythingSysadmin.com

4 4

No text output in login console and shell
by ignasr 20 Feb '15

20 Feb '15

Hello, I have a remote IBM x3550 M4 server that I try to remote control through IMM2. The problem: only the blinking cursor is visible in login console. It moves when I type. It moves to where "Login: _" should be if I press ctrl+c. I can login if I enter the correct login and password, but the shell that I get also shows only the blinking cursor and no text. I can issue commands. The server is in production and works ok. SSH works ok. CentOS 6. What I have tried: - tty[1-7] with ctrl+alt+Fxxx - 'reset' command after logging in - initctl restart tty TTY=/dev/tty2 - killing ttyS What I didn't try: - reboot would mean downtime Is there something that can be done about this? More info: # ps aux | grep tty root 11631 0.0 0.0 103244 888 pts/0 S+ 17:20 0:00 grep tty root 15057 0.0 0.0 4064 564 tty3 Ss+ Feb18 0:00 /sbin/mingetty /dev/tty3 root 15060 0.0 0.0 4064 568 tty4 Ss+ Feb18 0:00 /sbin/mingetty /dev/tty4 root 15063 0.0 0.0 4064 572 tty5 Ss+ Feb18 0:00 /sbin/mingetty /dev/tty5 root 15066 0.0 0.0 4064 564 tty6 Ss+ Feb18 0:00 /sbin/mingetty /dev/tty6 root 18829 0.0 0.0 4064 568 tty1 Ss+ Feb18 0:00 /sbin/mingetty /dev/tty1 root 29702 0.0 0.0 4064 568 tty2 Ss+ Feb18 0:00 /sbin/mingetty /dev/tty2 # mount | grep pts devpts on /dev/pts type devpts (rw,gid=5,mode=620) Thank you Ignas

2 2

CentOS 7: software RAID 5 array with 4 disks and no spares?
by Niki Kovacs 20 Feb '15

20 Feb '15

Hi, I just replaced Slackware64 14.1 running on my office's HP Proliant Microserver with a fresh installation of CentOS 7. The server has 4 x 250 GB disks. Every disk is configured like this : * 200 MB /dev/sdX1 for /boot * 4 GB /dev/sdX2 for swap * 248 GB /dev/sdX3 for / There are supposed to be no spare devices. /boot and swap are all supposed to be assembled in RAID level 1 across 4 disks. The / partition is supposed to be assembled in RAID level 5 across 4 disks. With Slackware I created the arrays manually like this: # mdadm --create /dev/md1 --level=1 --raid-devices=4 --metadata=0.90 /dev/sda1 /dev/sdb1 /dev/sdc1 /dev/sdd1 # mdadm --create /dev/md2 --level=1 --raid-devices=4 --metadata=0.90 /dev/sda2 /dev/sdb2 /dev/sdc2 /dev/sdd2 # mdadm --create /dev/md3 --level=5 --raid-devices=4 --metadata=0.90 /dev/sda3 /dev/sdb3 /dev/sdc3 /dev/sdd3 Using this setup, I had 650 MB of disk space on /dev/md3. Now I tried to do the same thing with CentOS 7. Everything seemed to work at first, but here's what I got now: [root@nestor:~] # df -h Sys. de fichiers Taille Utilisé Dispo Uti% Monté sur /dev/md127 226G 1,1G 213G 1% / devtmpfs 1,4G 0 1,4G 0% /dev tmpfs 1,4G 0 1,4G 0% /dev/shm tmpfs 1,4G 8,5M 1,4G 1% /run tmpfs 1,4G 0 1,4G 0% /sys/fs/cgroup /dev/md125 194M 80M 101M 45% /boot /dev/sde1 917G 88M 871G 1% /mnt The root partition (/dev/md127) only shows 226 G of space. So where has everything gone? [root@nestor:~] # cat /proc/mdstat Personalities : [raid1] [raid6] [raid5] [raid4] md125 : active raid1 sdc2[2] sdd2[3] sdb2[1] sda2[0] 204736 blocks super 1.0 [4/4] [UUUU] md126 : active raid1 sdd1[3] sdc1[2] sdb1[1] sda1[0] 4095936 blocks super 1.2 [4/4] [UUUU] md127 : active raid5 sdc3[2] sdb3[1] sdd3[4] sda3[0] 240087552 blocks super 1.2 level 5, 512k chunk, algorithm 2 [4/4] [UUUU] bitmap: 0/1 pages [0KB], 65536KB chunk unused devices: <none> [root@nestor:~] # mdadm -D /dev/md127 /dev/md127: Version : 1.2 Creation Time : Wed Feb 18 06:49:01 2015 Raid Level : raid5 Array Size : 240087552 (228.97 GiB 245.85 GB) Used Dev Size : 80029184 (76.32 GiB 81.95 GB) Raid Devices : 4 Total Devices : 4 Persistence : Superblock is persistent Intent Bitmap : Internal Update Time : Wed Feb 18 08:04:26 2015 State : active Active Devices : 4 Working Devices : 4 Failed Devices : 0 Spare Devices : 0 Layout : left-symmetric Chunk Size : 512K Name : localhost:root UUID : cfc13fe9:8fa811d8:85649402:58c4846e Events : 4703 Number Major Minor RaidDevice State 0 8 3 0 active sync /dev/sda3 1 8 19 1 active sync /dev/sdb3 2 8 35 2 active sync /dev/sdc3 4 8 51 3 active sync /dev/sdd3 Apparently no spare devices have been created. So why do I only have 226 GB of disk space under CentOS, when I had roughly 650 GB under Slackware? I'm a bit lost here. Any suggestions? Cheers, Niki -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

8 32

Re: [CentOS] Rhythmbox Replacement
by Mark LaPierre 20 Feb '15

20 Feb '15

Hey Y'all, I though I would resurrect a long dead mail chain. I'm looking for a good replacement for Rhythmbox. I need a pod catcher to catch podcasts and download them to my HD where I can then move them onto my mp3 player that I take to work every day. I don't need a new mp3 player so don't suggest VLC. It is not able to download podcasts. I'm in the process of provisioning my new CentOS 6.6 x86_64 machine. I have gpodder 2.19 installed on my CentOS 6.6 32 bit machine but have managed only to fail miserably at getting gpodder installed on my 64 bit machine. I see that I started this mail chain back in 2012. There was no solution then. Does the horizon look any different now? -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ ****

3 4

Anyone using torque/pbs/munge?
by m.roth＠5-cent.us 19 Feb '15

19 Feb '15

CentOS 6.6 I've got two servers, server1 and hbs (honkin' big server). Both are running munge, and torque... *separately*. My problem is that I've got users who want to be able to submit from server1 to hbs. I see that munged can be pointed to an alternate keyfile... but is there any way to tell qsub what to use? (And yes, I got on the torque users' list, and I'm trying there, too). mark "really needs to solve this tomorrow"

1 0

Re: [CentOS] Help with routing question.
by James B. Byrne 19 Feb '15

19 Feb '15

On Wed, February 18, 2015 13:07, Les Mikesell wrote: > On Wed, Feb 18, 2015 at 11:39 AM, James B. Byrne > <byrnejb(a)harte-lyne.ca> wrote: >> 2. How does one configure the routing table on network startup to >> specifically detail the route particular addresses are supposed to >> take? >> > > Not exactly sure how routing works with aliases on the same interface > but the first thing I would try is the same as you would use on > different interfaces. That is, leave the 'GATEWAY=' on your > internet-facing etho, but remove the entry from the private eth0:192. > Then add a route-eth0:192 file containing the network(s) and > gateway for the private side. The source address it picks should be > the one appropriate to reach the next-hop router specified in your > routes. > I created a file called /etc/sysconfig/network-scripts/route-eth0:192 and in accordance with the instructions obtained at: https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/ht… I added these directives to the route-eth0:192 file: ADDRESS0=192.168.6.9 NETMASK0=255.255.255.0 GATEWAY0=192.168.6.1 However, when I restart the network service I see this: service network restart Shutting down interface eth0: [ OK ] Shutting down loopback interface: [ OK ] Bringing up loopback interface: [ OK ] Bringing up interface eth0: Determining if ip address 216.185.71.9 is already in use for device eth0... Determining if ip address 216.185.71.Y is already in use for device eth0... Determining if ip address 192.168.6.9 is already in use for device eth0... RTNETLINK answers: Invalid argument [ OK ] If I comment out all the directives in route-eth0:192 then the Invalid argument error disappears so it is definitely the contents of the new file that is triggering the error. But I cannot see any obvious error and the syntax seems rather limited to hide any. Switching to the ip route syntax gives the same error: 192.168.6.9/24 via 192.168.6.1 dev eth0 The ifcfg-eth0:192 file now contains: BOOTPROTO="static" DEVICE="eth0:192" IPADDR="192.168.6.9" NETMASK="255.255.255.0" # Also see route-eth0:192 NM_CONTROLLED="no" ONPARENT="yes" TYPE="Ethernet" Can anyone see what it is that I have done that is incorrect? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 3

Masquerading (packet forwarding) on CentOS 7
by Niki Kovacs 19 Feb '15

19 Feb '15

Hi, I just migrated my office's server from Slackware64 14.1 to CentOS 7. So far everything's running fine, I just have a few minor details to work out. I removed the firewalld package and replaced it by a simple Iptables script: --8<---------------------------------------------------- #!/bin/sh # # firewall-lan.sh IPT=$(which iptables) MOD=$(which modprobe) SYS=$(which sysctl) SERVICE=$(which service) # Internet IFACE_INET=enp2s0 # Réseau local IFACE_LAN=enp3s0 IFACE_LAN_IP=192.168.2.0/24 # Relais des paquets (yes/no) MASQ=yes # Tout accepter $IPT -t filter -P INPUT ACCEPT $IPT -t filter -P FORWARD ACCEPT $IPT -t filter -P OUTPUT ACCEPT $IPT -t nat -P PREROUTING ACCEPT $IPT -t nat -P POSTROUTING ACCEPT $IPT -t nat -P OUTPUT ACCEPT $IPT -t mangle -P PREROUTING ACCEPT $IPT -t mangle -P INPUT ACCEPT $IPT -t mangle -P FORWARD ACCEPT $IPT -t mangle -P OUTPUT ACCEPT $IPT -t mangle -P POSTROUTING ACCEPT # Remettre les compteurs à zéro $IPT -t filter -Z $IPT -t nat -Z $IPT -t mangle -Z # Supprimer toutes les règles actives et les chaînes personnalisées $IPT -t filter -F $IPT -t filter -X $IPT -t nat -F $IPT -t nat -X $IPT -t mangle -F $IPT -t mangle -X # Désactiver le relais des paquets $SYS -q -w net.ipv4.ip_forward=0 # Politique par défaut $IPT -P INPUT DROP $IPT -P FORWARD ACCEPT $IPT -P OUTPUT ACCEPT # Faire confiance à nous-même $IPT -A INPUT -i lo -j ACCEPT # Ping $IPT -A INPUT -p icmp --icmp-type echo-request -j ACCEPT $IPT -A INPUT -p icmp --icmp-type time-exceeded -j ACCEPT $IPT -A INPUT -p icmp --icmp-type destination-unreachable -j ACCEPT # Connexions établies $IPT -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT # SSH local $IPT -A INPUT -p tcp -i $IFACE_LAN --dport 22 -j ACCEPT # SSH limité en provenance de l'extérieur $IPT -A INPUT -p tcp -i $IFACE_INET --dport 22 -m state \ --state NEW -m recent --set --name SSH $IPT -A INPUT -p tcp -i $IFACE_INET --dport 22 -m state \ --state NEW -m recent --update --seconds 60 --hitcount 2 \ --rttl --name SSH -j DROP $IPT -A INPUT -p tcp -i $IFACE_INET --dport 22 -j ACCEPT # DNS $IPT -A INPUT -p tcp -i $IFACE_LAN --dport 53 -j ACCEPT $IPT -A INPUT -p udp -i $IFACE_LAN --dport 53 -j ACCEPT # DHCP $IPT -A INPUT -p udp -i $IFACE_LAN --dport 67:68 -j ACCEPT # Activer le relais des paquets if [ $MASQ = 'yes' ]; then $IPT -t nat -A POSTROUTING -o $IFACE_INET -s $IFACE_LAN_IP \ -j MASQUERADE $SYS -q -w net.ipv4.ip_forward=1 fi # Enregistrer les connexions refusées $IPT -A INPUT -j LOG --log-prefix "+++ IPv4 packet rejected +++" $IPT -A INPUT -j REJECT # Enregistrer la configuration $SERVICE iptables save --8<---------------------------------------------------- As you can see, the script is also supposed to handle IP packet forwarding (masquerading). Once I run firewall-lan.sh manually, everything works as expected. When I restart the server, Iptables rules are still the same. The only thing that's not activated is IP forwarding. So as far as I can tell, iptables rules are stored, but packet forwarding returns to its pristine state (not activated). What would be an orthodox way of handling this? Put "net.ipv4.ip_forward=1" in /etc/sysctl.conf? Something else? Cheers, Niki -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

3 4

CentOS6: ntfs-3g and writing utf-8 filenames
by wwp 19 Feb '15

19 Feb '15

Hello there, I know this has been widely discussed over the net, but I still can't find a way to write a file whose name contains accented characters in ntfs-3g partitions that are automatically mounted on my CentOS6 system. Whatever my locale is POSIX, en_US or en_US.utf8, I always get a: Invalid or incomplete multibyte or wide character error when I attempt to create a directory or a file when the name contains an accented char. I tried remounting manually the ntfs-3g partition using -o utf8 (and older variants: iocharset= and nls=), but it doesn't work better. My ntfs-3g disks are automatically mounted in GNOME (as fuseblk). Using ntfs-3g-2014.2.15-8.el6.x86_64 in an up-to-date CentOS6 system. Any hint? Regards, -- wwp

1 0

Re: [CentOS] CentOS 7: software RAID 5 array with 4 disks and no spares?
by James B. Byrne 19 Feb '15

19 Feb '15

On Thu, February 19, 2015 02:25, Niki Kovacs wrote: > Le 19/02/2015 05:43, Chris Murphy a écrit : >> My personal view on installers is extremely biased toward the user >> staying out of trouble, they shouldn't have to read documentation >> for >> a GUI installer. > > A *user* never has to even see - or use - an installer. A USER has to > USE a computer, by which I mean the applications he or she needs to > get some work done. Outside of the corporate world, and very often at the low-end of that itself, the user is the ADMIN. One can purchase computer systems with the OS and applications pre-installed of course. But, at some point, in every sufficiently complex and long-lived environment somebody has to do maintenance. Which on occasion does include installing operating systems. And even ADMINs can use some help from time-to-time. Let us be frank, the Linux/GNU hoge-poge of syntax makes the English language look positively simple in comparison. And that is not a good thing. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

CentOS Participation in GSOC-2015
by Saket Sinha 19 Feb '15

19 Feb '15

Hi Johnny, This is to enquire as to whether CentOS will be participating in GSOC this year? The Mentoring Organization applications are now being accepted for Google Summer of Code 2015. http://google-opensource.blogspot.in/2015/02/mentoring-organization-applica… Regards, Saket Sinha

2 1

sw raid issue with C5.10-xen
by Dave Stevens 18 Feb '15

18 Feb '15

My raid array won't boot, gives a kernel panic - attempt to kill init message and goes into endless reboots. MB is a supermicro 2P with opteron 2376 4-core cpus, centos sw raid, installed C5.3, updated as possible, currently c5.10. 5 seagate 750GB drives as raid-10 and hot spare. we set this up about 5 years ago and IIRC we set aside the first 10GB on drive 0 as a boot partition. Grub runs and the system tries to boot 2.6.18-308.20.1.el5xen, sees a dirty raid array and md: md0: raid array is not clean - starting background reconstruction which looks hopeful but then md10: not enough operational mirrors for raid 10 and then the panic and reboot. ideas? stuff to read? diagnostics? TIA, Dave -- "As long as politics is the shadow cast on society by big business, the attenuation of the shadow will not change the substance." -- John Dewey

1 0

Skip creating anaconda-ks.cfg in EL7?
by Nux! 18 Feb '15

18 Feb '15

Hello, In EL6 I could well remove /root/anaconda-ks.cfg in %post, but not any more it seems and I like my installs clean. Anyone has any idea how to skip creating this file or deleting during install? I don't want to resort to running scripts upon first boot. Lucian -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro

1 0

Setting up new spacewalk server
by Eckert, Doug 18 Feb '15

18 Feb '15

We have a DHCP/PXE server in a build environment, which is separate from our Spacewalk v1.5 server. We direct builds to Satellite or Spacewalk based as needed. It contains initrd & vmlinuz files for each version/arch we currently deploy for both RHEL & CEL. I'd like to keep the storage footprint to a minimum, if possible. Keeping a big directory of ISOs to loop-mount for kickstart profile distributions seems excessive, especially when DVD#1 exceeds 4GB now. Is there any way around this requirement for kickstarting?

3 5

Help with routing question.
by James B. Byrne 18 Feb '15

18 Feb '15

CentOS-6.6 We have a host that has multiple IPv4 addresses aliased to eth0. The primary address is 216.185.71.x and the alias is 192.168.6.x. This host connects to devices on both netblocks without problems. Only default routing is used and it looks like this: #ip route 192.168.6.0/24 dev eth0 proto kernel scope link src 192.168.6.x 216.185.71.0/24 dev eth0 proto kernel scope link src 216.185.71.x 169.254.0.0/16 dev eth0 scope link metric 1002 default via 192.168.6.1 dev eth0 src 192.168.6.x default via 216.185.71.1 dev eth0 When the system connects to internal systems via ssh it uses the src 216.185.71.x for devices on that netblock and 192.168.6.x for devices on the other. The problem is that when we try to establish an ssh connection off-site to another netblock altogether the host uses 192.168.6.x as the source and the destination gets the public side IP address of our gateway router as the point of origin due to masquerading. I have solved this by explicitly binding ssh to the public ipv4 when connecting using the --bind=216.185.71.x parameter. But I have two questions I would like to find answers for 1. Why is ssh using the private IP in preference to the public IP when connecting to off-site addresses? 2. How does one configure the routing table on network startup to specifically detail the route particular addresses are supposed to take? For diagnosis here are the ifcfg scripts used for both interfaces: DEVICE="eth0" BOOTPROTO="static" BROADCAST="216.185.71.255" DNS1="216.185.71.33" GATEWAY="216.185.71.1" HWADDR="38:60:77:D5:AC:D8" IPADDR="216.185.71.x" IPV6INIT="yes" IPV6_AUTOCONF="yes" NETMASK="255.255.255.0" NM_CONTROLLED="no" ONBOOT="yes" TYPE="Ethernet" UUID="0202e615-ce93-4fe1-833a-c11259afb850" DEVICE="eth0:192" BOOTPROTO="static" BROADCAST="192.168.6.255" GATEWAY="192.168.6.1" IPADDR="192.168.6.x" NETMASK="255.255.255.0" NM_CONTROLLED="no" ONPARENT="yes" TYPE="Ethernet" -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 3

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss